# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 27.10.2020 11:15:34.395 Process: id = "1" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x7f134c40" os_pid = "0xe78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x5bc" cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -File \"C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1\" " cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xe7c [0063.643] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0064.148] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0064.149] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0064.149] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0064.149] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0065.328] GetVersionExW (in: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0065.329] GetLastError () returned 0x2 [0065.330] GetVersionExW (in: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0065.330] GetLastError () returned 0x2 [0065.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12ea2c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.340] GetLastError () returned 0x2 [0065.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12ea48, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.349] GetLastError () returned 0x2 [0065.349] GetVersionExW (in: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0065.349] GetLastError () returned 0x2 [0065.350] SetErrorMode (uMode=0x1) returned 0x1 [0065.353] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x12eec8 | out: lpFileInformation=0x12eec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0065.353] GetLastError () returned 0x2 [0065.353] SetErrorMode (uMode=0x1) returned 0x1 [0065.357] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x12ef4c | out: lpdwHandle=0x12ef4c) returned 0x94c [0065.453] GetLastError () returned 0x0 [0065.456] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1fb4da0 | out: lpData=0x1fb4da0) returned 1 [0065.461] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ef18, puLen=0x12ef14 | out: lplpBuffer=0x12ef18*=0x1fb4e3c, puLen=0x12ef14) returned 1 [0065.466] lstrlenW (lpString="䅁") returned 1 [0065.481] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb4f18, puLen=0x12ee90) returned 1 [0065.482] lstrlenW (lpString="Microsoft Corporation") returned 21 [0065.514] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0065.514] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb4f6c, puLen=0x12ee90) returned 1 [0065.514] lstrlenW (lpString="System.Management.Automation") returned 28 [0065.515] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0065.515] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb4fc8, puLen=0x12ee90) returned 1 [0065.515] lstrlenW (lpString="6.1.7601.17514") returned 14 [0065.515] lstrcpyW (in: lpString1=0x238c28, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0065.515] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb5008, puLen=0x12ee90) returned 1 [0065.515] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0065.515] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0065.515] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb5070, puLen=0x12ee90) returned 1 [0065.515] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0065.515] lstrcpyW (in: lpString1=0x238c28, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0065.516] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb510c, puLen=0x12ee90) returned 1 [0065.516] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0065.516] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0065.516] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb5170, puLen=0x12ee90) returned 1 [0065.516] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0065.516] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0065.516] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb51ec, puLen=0x12ee90) returned 1 [0065.516] lstrlenW (lpString="6.1.7601.17514") returned 14 [0065.516] lstrcpyW (in: lpString1=0x238c28, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0065.516] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x1fb4e94, puLen=0x12ee90) returned 1 [0065.516] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0065.516] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0065.517] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x0, puLen=0x12ee90) returned 0 [0065.517] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x0, puLen=0x12ee90) returned 0 [0065.517] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x12ee94, puLen=0x12ee90 | out: lplpBuffer=0x12ee94*=0x0, puLen=0x12ee90) returned 0 [0065.517] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ee88, puLen=0x12ee84 | out: lplpBuffer=0x12ee88*=0x1fb4e3c, puLen=0x12ee84) returned 1 [0065.519] VerLanguageNameW (in: wLang=0x0, szLang=0x238c28, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0065.521] VerQueryValueW (in: pBlock=0x1fb4da0, lpSubBlock="\\", lplpBuffer=0x12ee9c, puLen=0x12ee98 | out: lplpBuffer=0x12ee9c*=0x1fb4dc8, puLen=0x12ee98) returned 1 [0065.530] GetCurrentProcessId () returned 0xe78 [0065.543] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x12e6d4 | out: lpLuid=0x12e6d4*(LowPart=0x14, HighPart=0)) returned 1 [0065.546] GetLastError () returned 0x0 [0065.548] GetCurrentProcess () returned 0xffffffff [0065.548] GetLastError () returned 0x0 [0065.551] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x12e6d0 | out: TokenHandle=0x12e6d0*=0x2ec) returned 1 [0065.551] GetLastError () returned 0x0 [0065.554] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x1fb78e0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0065.554] GetLastError () returned 0x0 [0065.556] CloseHandle (hObject=0x2ec) returned 1 [0065.556] GetLastError () returned 0x0 [0065.561] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x2ec [0065.561] GetLastError () returned 0x0 [0065.593] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x1fb7924, cb=0x100, lpcbNeeded=0x12eec4 | out: lphModule=0x1fb7924, lpcbNeeded=0x12eec4) returned 1 [0065.594] GetLastError () returned 0x0 [0065.597] GetModuleInformation (in: hProcess=0x2ec, hModule=0x22590000, lpmodinfo=0x1fb7a64, cb=0xc | out: lpmodinfo=0x1fb7a64*(lpBaseOfDll=0x22590000, SizeOfImage=0x72000, EntryPoint=0x22597363)) returned 1 [0065.598] GetLastError () returned 0x0 [0065.601] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x22590000, lpBaseName=0x227460, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0065.602] GetLastError () returned 0x0 [0065.603] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x22590000, lpFilename=0x227460, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0065.603] GetLastError () returned 0x0 [0065.605] CloseHandle (hObject=0x2ec) returned 1 [0065.605] GetLastError () returned 0x0 [0065.606] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xe78) returned 0x2ec [0065.606] GetLastError () returned 0x0 [0065.609] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0x1fb6f14 | out: lpExitCode=0x1fb6f14*=0x103) returned 1 [0065.609] GetLastError () returned 0x0 [0065.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2fb5278, Length=0x20000, ResultLength=0x12ef0c | out: SystemInformation=0x2fb5278, ResultLength=0x12ef0c*=0xe0a8) returned 0x0 [0065.646] EnumWindows (lpEnumFunc=0x1d93612, lParam=0x0) returned 0 [0065.650] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x270 [0065.650] GetLastError () returned 0x0 [0065.650] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.650] GetLastError () returned 0x0 [0065.650] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.650] GetLastError () returned 0x0 [0065.650] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.650] GetLastError () returned 0x0 [0065.650] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x724 [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x3fc [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x3fc [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.651] GetLastError () returned 0x0 [0065.651] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.651] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.652] GetLastError () returned 0x0 [0065.652] GetWindowThreadProcessId (in: hWnd=0x100da, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x5c0 [0065.652] GetLastError () returned 0x0 [0065.653] GetWindowThreadProcessId (in: hWnd=0x50084, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.653] GetLastError () returned 0x0 [0065.653] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0x60c [0065.653] GetLastError () returned 0x0 [0065.653] GetWindowThreadProcessId (in: hWnd=0x50096, lpdwProcessId=0x12eb60 | out: lpdwProcessId=0x12eb60) returned 0xe7c [0065.653] GetLastError () returned 0x0 [0065.655] GetWindow (hWnd=0x50096, uCmd=0x4) returned 0x0 [0065.658] IsWindowVisible (hWnd=0x50096) returned 1 [0065.658] GetLastError () returned 0x0 [0065.660] WerSetFlags () returned 0x0 [0065.668] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0065.671] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x12ef3c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x12ef38 | out: pulNumLanguages=0x12ef3c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x12ef38) returned 1 [0065.671] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x12ef3c, pwszLanguagesBuffer=0x1fd4504, pcchLanguagesBuffer=0x12ef38 | out: pulNumLanguages=0x12ef3c, pwszLanguagesBuffer=0x1fd4504, pcchLanguagesBuffer=0x12ef38) returned 1 [0065.676] GetUserDefaultLocaleName (in: lpLocaleName=0x238c28, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0065.705] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.705] GetLastError () returned 0xcb [0065.709] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.709] GetLastError () returned 0xcb [0065.711] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.711] GetLastError () returned 0xcb [0065.723] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e9ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.723] GetLastError () returned 0xcb [0065.723] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e9c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.723] GetLastError () returned 0xcb [0065.723] SetErrorMode (uMode=0x1) returned 0x1 [0065.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x12ee48 | out: lpFileInformation=0x12ee48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0065.723] GetLastError () returned 0xcb [0065.723] SetErrorMode (uMode=0x1) returned 0x1 [0065.723] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x12eecc | out: lpdwHandle=0x12eecc) returned 0x94c [0065.724] GetLastError () returned 0x0 [0065.724] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1fd6a34 | out: lpData=0x1fd6a34) returned 1 [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ee98, puLen=0x12ee94 | out: lplpBuffer=0x12ee98*=0x1fd6ad0, puLen=0x12ee94) returned 1 [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6bac, puLen=0x12ee10) returned 1 [0065.726] lstrlenW (lpString="Microsoft Corporation") returned 21 [0065.726] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6c00, puLen=0x12ee10) returned 1 [0065.726] lstrlenW (lpString="System.Management.Automation") returned 28 [0065.726] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6c5c, puLen=0x12ee10) returned 1 [0065.726] lstrlenW (lpString="6.1.7601.17514") returned 14 [0065.726] lstrcpyW (in: lpString1=0x238c28, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6c9c, puLen=0x12ee10) returned 1 [0065.726] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0065.726] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0065.726] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6d04, puLen=0x12ee10) returned 1 [0065.726] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0065.727] lstrcpyW (in: lpString1=0x238c28, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0065.727] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6da0, puLen=0x12ee10) returned 1 [0065.727] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0065.727] lstrcpyW (in: lpString1=0x238c28, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0065.727] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6e04, puLen=0x12ee10) returned 1 [0065.727] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0065.727] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0065.727] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6e80, puLen=0x12ee10) returned 1 [0065.727] lstrlenW (lpString="6.1.7601.17514") returned 14 [0065.727] lstrcpyW (in: lpString1=0x238c28, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x1fd6b28, puLen=0x12ee10) returned 1 [0065.728] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0065.728] lstrcpyW (in: lpString1=0x238c28, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x0, puLen=0x12ee10) returned 0 [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x0, puLen=0x12ee10) returned 0 [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x12ee14, puLen=0x12ee10 | out: lplpBuffer=0x12ee14*=0x0, puLen=0x12ee10) returned 0 [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ee08, puLen=0x12ee04 | out: lplpBuffer=0x12ee08*=0x1fd6ad0, puLen=0x12ee04) returned 1 [0065.728] VerLanguageNameW (in: wLang=0x0, szLang=0x238c28, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0065.728] VerQueryValueW (in: pBlock=0x1fd6a34, lpSubBlock="\\", lplpBuffer=0x12ee1c, puLen=0x12ee18 | out: lplpBuffer=0x12ee1c*=0x1fd6a5c, puLen=0x12ee18) returned 1 [0065.753] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.753] GetLastError () returned 0xcb [0065.758] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.758] GetLastError () returned 0xcb [0065.767] lstrlenW (lpString="䅁") returned 1 [0065.772] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ede0 | out: phkResult=0x12ede0*=0x304) returned 0x0 [0065.772] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ede4 | out: phkResult=0x12ede4*=0x308) returned 0x0 [0065.773] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ee18 | out: phkResult=0x12ee18*=0x30c) returned 0x0 [0065.775] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ee58, lpData=0x0, lpcbData=0x12ee54*=0x0 | out: lpType=0x12ee58*=0x1, lpData=0x0, lpcbData=0x12ee54*=0x56) returned 0x0 [0065.778] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ee58, lpData=0x238c28, lpcbData=0x12ee54*=0x56 | out: lpType=0x12ee58*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12ee54*=0x56) returned 0x0 [0065.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e960, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.783] GetLastError () returned 0x0 [0065.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e960, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.787] GetLastError () returned 0x0 [0065.798] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e960, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.798] GetLastError () returned 0x0 [0065.817] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.817] GetLastError () returned 0xcb [0066.225] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0066.225] GetLastError () returned 0x2 [0066.225] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0066.225] GetLastError () returned 0x2 [0066.466] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.466] GetLastError () returned 0xcb [0066.468] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.469] GetLastError () returned 0xcb [0066.530] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.530] GetLastError () returned 0xcb [0066.533] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.533] GetLastError () returned 0xcb [0066.533] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.533] GetLastError () returned 0xcb [0066.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0066.900] GetLastError () returned 0x0 [0066.900] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0066.900] GetLastError () returned 0x0 [0066.973] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.973] GetLastError () returned 0xcb [0066.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.980] GetLastError () returned 0xcb [0067.219] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.219] GetLastError () returned 0x7e [0067.219] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.219] GetLastError () returned 0x7e [0068.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0068.530] GetLastError () returned 0x2 [0068.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0068.530] GetLastError () returned 0x2 [0068.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0068.735] GetLastError () returned 0x57 [0068.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0068.735] GetLastError () returned 0x57 [0068.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0068.923] GetLastError () returned 0x2 [0068.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0068.923] GetLastError () returned 0x2 [0069.184] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0069.184] GetLastError () returned 0x2 [0069.184] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e920, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0069.184] GetLastError () returned 0x2 [0069.253] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.253] GetLastError () returned 0xcb [0069.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e9e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.255] GetLastError () returned 0xcb [0069.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e998, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.255] GetLastError () returned 0xcb [0069.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e998, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.255] GetLastError () returned 0xcb [0069.265] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e998, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.265] GetLastError () returned 0xcb [0069.365] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x12e92c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0069.365] GetLastError () returned 0x2 [0069.365] SetErrorMode (uMode=0x1) returned 0x1 [0069.365] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x12edd4 | out: lpFileInformation=0x12edd4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0069.365] GetLastError () returned 0x2 [0069.365] SetErrorMode (uMode=0x1) returned 0x1 [0069.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e9e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.664] GetLastError () returned 0x0 [0069.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e998, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.664] GetLastError () returned 0x0 [0069.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e998, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.665] GetLastError () returned 0x0 [0069.670] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.670] GetLastError () returned 0xcb [0069.674] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.674] GetLastError () returned 0xcb [0069.675] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.675] GetLastError () returned 0xcb [0069.678] CoCreateGuid (in: pguid=0x12eeb4 | out: pguid=0x12eeb4*(Data1=0x3cd978c5, Data2=0x6c3e, Data3=0x40f7, Data4=([0]=0xba, [1]=0x45, [2]=0xff, [3]=0x17, [4]=0xc7, [5]=0xaa, [6]=0x61, [7]=0xed))) returned 0x0 [0069.684] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.684] GetLastError () returned 0xcb [0069.687] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.687] GetLastError () returned 0xcb [0069.689] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.689] GetLastError () returned 0xcb [0069.698] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0069.698] GetLastError () returned 0x0 [0069.701] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x12ed94 | out: lpConsoleScreenBufferInfo=0x12ed94) returned 1 [0069.701] GetLastError () returned 0x0 [0069.705] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0069.706] GetLastError () returned 0x0 [0069.706] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x12ed94 | out: lpConsoleScreenBufferInfo=0x12ed94) returned 1 [0069.706] GetLastError () returned 0x0 [0069.707] GetVersionExW (in: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x238c40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0069.707] GetLastError () returned 0x0 [0069.709] GetCurrentProcess () returned 0xffffffff [0069.709] GetLastError () returned 0x3f0 [0069.711] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12eda4 | out: TokenHandle=0x12eda4*=0x328) returned 1 [0069.711] GetLastError () returned 0x3f0 [0069.714] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x12edfc | out: TokenInformation=0x0, ReturnLength=0x12edfc) returned 0 [0069.715] GetLastError () returned 0x7a [0069.717] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x245340 [0069.717] GetLastError () returned 0x7a [0069.717] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x245340, TokenInformationLength=0x4, ReturnLength=0x12edfc | out: TokenInformation=0x245340, ReturnLength=0x12edfc) returned 1 [0069.717] GetLastError () returned 0x7a [0069.723] DuplicateTokenEx (in: hExistingToken=0x328, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x12edb4 | out: phNewToken=0x12edb4*=0x320) returned 1 [0069.723] GetLastError () returned 0x7f [0069.723] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x12edfc | out: TokenInformation=0x0, ReturnLength=0x12edfc) returned 0 [0069.723] GetLastError () returned 0x7a [0069.723] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x245320 [0069.723] GetLastError () returned 0x7a [0069.723] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x245320, TokenInformationLength=0x4, ReturnLength=0x12edfc | out: TokenInformation=0x245320, ReturnLength=0x12edfc) returned 1 [0069.723] GetLastError () returned 0x7a [0069.724] CheckTokenMembership (in: TokenHandle=0x320, SidToCheck=0x20598a0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x12ed90 | out: IsMember=0x12ed90) returned 1 [0069.725] GetLastError () returned 0x7a [0069.725] CloseHandle (hObject=0x320) returned 1 [0069.725] GetLastError () returned 0x7a [0069.725] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.725] GetLastError () returned 0x7a [0069.725] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e854, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.725] GetLastError () returned 0x7a [0069.725] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e854, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.725] GetLastError () returned 0x7a [0069.726] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e854, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.726] GetLastError () returned 0x7a [0069.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.806] GetLastError () returned 0x7a [0069.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e854, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.806] GetLastError () returned 0x7a [0069.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e854, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.806] GetLastError () returned 0x7a [0069.811] GetConsoleTitleW (in: lpConsoleTitle=0x227460, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0069.812] GetLastError () returned 0x7a [0069.838] GetConsoleTitleW (in: lpConsoleTitle=0x227460, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0069.838] GetLastError () returned 0x7a [0069.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e89c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.839] GetLastError () returned 0x7a [0069.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e84c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.839] GetLastError () returned 0x7a [0069.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e84c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.839] GetLastError () returned 0x7a [0069.843] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 1 [0069.846] GetLastError () returned 0x7a [0069.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.847] GetLastError () returned 0x7a [0069.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.847] GetLastError () returned 0x7a [0069.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.847] GetLastError () returned 0x7a [0069.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.847] GetLastError () returned 0x7a [0069.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.920] GetLastError () returned 0x7a [0069.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.920] GetLastError () returned 0x7a [0069.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.920] GetLastError () returned 0x7a [0069.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.920] GetLastError () returned 0x7a [0069.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.920] GetLastError () returned 0x7a [0069.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.921] GetLastError () returned 0x7a [0069.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e8e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.921] GetLastError () returned 0x7a [0069.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e898, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.921] GetLastError () returned 0x7a [0069.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e898, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.921] GetLastError () returned 0x7a [0069.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e898, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.921] GetLastError () returned 0x7a [0070.015] SetConsoleCtrlHandler (HandlerRoutine=0x1d9384a, Add=1) returned 1 [0070.015] GetLastError () returned 0x7a [0070.024] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x12e808, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0070.024] GetLastError () returned 0x7a [0070.024] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x12e7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0070.024] GetLastError () returned 0x7a [0070.024] SetErrorMode (uMode=0x1) returned 0x1 [0070.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), fInfoLevelId=0x0, lpFileInformation=0x12ec74 | out: lpFileInformation=0x12ec74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65)) returned 1 [0070.024] GetLastError () returned 0x7a [0070.024] SetErrorMode (uMode=0x1) returned 0x1 [0070.041] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0070.041] GetLastError () returned 0x0 [0070.043] CoCreateGuid (in: pguid=0x12edc8 | out: pguid=0x12edc8*(Data1=0x9ac27c87, Data2=0xd272, Data3=0x4286, Data4=([0]=0xa9, [1]=0xeb, [2]=0x20, [3]=0x55, [4]=0x7c, [5]=0x85, [6]=0xa4, [7]=0x63))) returned 0x0 [0070.069] WinSqmIsOptedIn () returned 0x0 [0070.071] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.071] GetLastError () returned 0xcb [0070.076] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.076] GetLastError () returned 0xcb [0070.077] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.077] GetLastError () returned 0xcb [0070.080] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.080] GetLastError () returned 0xcb [0070.081] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.081] GetLastError () returned 0xcb [0070.101] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.101] GetLastError () returned 0xcb [0070.102] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.102] GetLastError () returned 0xcb [0070.103] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.103] GetLastError () returned 0xcb [0070.113] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.113] GetLastError () returned 0xcb [0070.138] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.138] GetLastError () returned 0xcb [0070.142] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.142] GetLastError () returned 0xcb [0070.143] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.143] GetLastError () returned 0xcb [0070.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.534] GetLastError () returned 0xcb [0070.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.534] GetLastError () returned 0xcb [0070.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.534] GetLastError () returned 0xcb [0070.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.534] GetLastError () returned 0xcb [0070.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.674] GetLastError () returned 0x3 [0070.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.674] GetLastError () returned 0x3 [0070.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.674] GetLastError () returned 0x3 [0070.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.674] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.675] GetLastError () returned 0x3 [0070.679] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0070.679] GetLastError () returned 0x3 [0070.680] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x238c28, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0070.680] GetLastError () returned 0x3 [0070.680] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ebe0 | out: phkResult=0x12ebe0*=0x32c) returned 0x0 [0070.680] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x12ec24, lpData=0x0, lpcbData=0x12ec20*=0x0 | out: lpType=0x12ec24*=0x2, lpData=0x0, lpcbData=0x12ec20*=0x6c) returned 0x0 [0070.681] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x12ec24, lpData=0x238c28, lpcbData=0x12ec20*=0x6c | out: lpType=0x12ec24*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x12ec20*=0x6c) returned 0x0 [0070.681] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x238c28, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0070.681] GetLastError () returned 0x3 [0070.681] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x238c28, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0070.681] GetLastError () returned 0x3 [0070.682] RegCloseKey (hKey=0x32c) returned 0x0 [0070.682] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x238c28, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0070.682] GetLastError () returned 0x3 [0070.682] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ebe0 | out: phkResult=0x12ebe0*=0x32c) returned 0x0 [0070.682] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x12ec24, lpData=0x0, lpcbData=0x12ec20*=0x0 | out: lpType=0x12ec24*=0x0, lpData=0x0, lpcbData=0x12ec20*=0x0) returned 0x2 [0070.683] RegCloseKey (hKey=0x32c) returned 0x0 [0070.817] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x238c28 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0070.819] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x12e748, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0070.819] GetLastError () returned 0x3f0 [0070.821] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0070.821] GetLastError () returned 0x3f0 [0070.832] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.832] GetLastError () returned 0xcb [0070.834] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.834] GetLastError () returned 0xcb [0070.841] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.841] GetLastError () returned 0xcb [0070.841] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.841] GetLastError () returned 0xcb [0070.851] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12eb60 | out: phkResult=0x12eb60*=0x334) returned 0x0 [0070.851] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12ebc8, lpData=0x0, lpcbData=0x12ebc4*=0x0 | out: lpType=0x12ebc8*=0x1, lpData=0x0, lpcbData=0x12ebc4*=0x74) returned 0x0 [0070.853] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12eba8, lpData=0x0, lpcbData=0x12eba4*=0x0 | out: lpType=0x12eba8*=0x1, lpData=0x0, lpcbData=0x12eba4*=0x74) returned 0x0 [0070.853] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12eba8, lpData=0x238c28, lpcbData=0x12eba4*=0x74 | out: lpType=0x12eba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x12eba4*=0x74) returned 0x0 [0070.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x12e728, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0070.853] GetLastError () returned 0xcb [0070.853] SetErrorMode (uMode=0x1) returned 0x1 [0070.854] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x12eba8 | out: lpFileInformation=0x12eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.854] GetLastError () returned 0xcb [0070.854] SetErrorMode (uMode=0x1) returned 0x1 [0070.859] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e71c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.859] GetLastError () returned 0xcb [0070.859] SetErrorMode (uMode=0x1) returned 0x1 [0070.860] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb9c | out: lpFileInformation=0x12eb9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0070.860] GetLastError () returned 0xcb [0070.860] SetErrorMode (uMode=0x1) returned 0x1 [0070.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e71c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0070.864] GetLastError () returned 0xcb [0070.864] SetErrorMode (uMode=0x1) returned 0x1 [0070.864] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb9c | out: lpFileInformation=0x12eb9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0070.864] GetLastError () returned 0xcb [0070.864] SetErrorMode (uMode=0x1) returned 0x1 [0070.872] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.872] GetLastError () returned 0xcb [0070.874] GetACP () returned 0x4e4 [0070.887] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.887] GetLastError () returned 0x0 [0070.887] SetErrorMode (uMode=0x1) returned 0x1 [0070.890] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0070.890] GetLastError () returned 0x0 [0070.891] GetFileType (hFile=0x338) returned 0x1 [0070.891] SetErrorMode (uMode=0x1) returned 0x1 [0070.891] GetFileType (hFile=0x338) returned 0x1 [0070.894] ReadFile (in: hFile=0x338, lpBuffer=0x20b9c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b9c88*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0070.896] GetLastError () returned 0x0 [0070.897] ReadFile (in: hFile=0x338, lpBuffer=0x20b9c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b9c88*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0070.897] GetLastError () returned 0x0 [0070.898] ReadFile (in: hFile=0x338, lpBuffer=0x20b9c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b9c88*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0070.898] GetLastError () returned 0x0 [0070.898] ReadFile (in: hFile=0x338, lpBuffer=0x20b9c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b9c88*, lpNumberOfBytesRead=0x12eb14*=0xcf3, lpOverlapped=0x0) returned 1 [0070.898] GetLastError () returned 0x0 [0070.898] ReadFile (in: hFile=0x338, lpBuffer=0x20b911b, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b911b*, lpNumberOfBytesRead=0x12eb14*=0x0, lpOverlapped=0x0) returned 1 [0070.899] GetLastError () returned 0x0 [0070.899] ReadFile (in: hFile=0x338, lpBuffer=0x20b9c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20b9c88*, lpNumberOfBytesRead=0x12eb14*=0x0, lpOverlapped=0x0) returned 1 [0070.899] GetLastError () returned 0x0 [0070.902] CloseHandle (hObject=0x338) returned 1 [0070.902] GetLastError () returned 0x0 [0070.904] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e674, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.904] GetLastError () returned 0x0 [0070.904] SetErrorMode (uMode=0x1) returned 0x1 [0070.904] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x20caffc | out: lpFileInformation=0x20caffc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0070.904] GetLastError () returned 0x0 [0070.904] SetErrorMode (uMode=0x1) returned 0x1 [0070.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.905] GetLastError () returned 0x0 [0070.905] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea98 | out: phkResult=0x12ea98*=0x338) returned 0x0 [0070.905] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12eae0, lpData=0x0, lpcbData=0x12eadc*=0x0 | out: lpType=0x12eae0*=0x1, lpData=0x0, lpcbData=0x12eadc*=0x56) returned 0x0 [0070.905] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12eae0, lpData=0x238c28, lpcbData=0x12eadc*=0x56 | out: lpType=0x12eae0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12eadc*=0x56) returned 0x0 [0070.906] RegCloseKey (hKey=0x338) returned 0x0 [0070.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.906] GetLastError () returned 0x0 [0070.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e5d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0070.906] GetLastError () returned 0x0 [0070.963] GetSystemInfo (in: lpSystemInfo=0x12e218 | out: lpSystemInfo=0x12e218*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0070.964] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.001] GetLastError () returned 0x0 [0071.001] SetErrorMode (uMode=0x1) returned 0x1 [0071.001] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0071.002] GetLastError () returned 0x0 [0071.002] GetFileType (hFile=0x338) returned 0x1 [0071.002] SetErrorMode (uMode=0x1) returned 0x1 [0071.002] GetFileType (hFile=0x338) returned 0x1 [0071.002] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.003] GetLastError () returned 0x0 [0071.004] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.004] GetLastError () returned 0x0 [0071.004] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.004] GetLastError () returned 0x0 [0071.005] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.005] GetLastError () returned 0x0 [0071.005] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.005] GetLastError () returned 0x0 [0071.007] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.007] GetLastError () returned 0x0 [0071.007] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.007] GetLastError () returned 0x0 [0071.007] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.007] GetLastError () returned 0x0 [0071.007] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.007] GetLastError () returned 0x0 [0071.009] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.009] GetLastError () returned 0x0 [0071.009] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.009] GetLastError () returned 0x0 [0071.009] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.009] GetLastError () returned 0x0 [0071.010] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.010] GetLastError () returned 0x0 [0071.010] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.010] GetLastError () returned 0x0 [0071.010] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.010] GetLastError () returned 0x0 [0071.010] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.011] GetLastError () returned 0x0 [0071.011] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.011] GetLastError () returned 0x0 [0071.014] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.014] GetLastError () returned 0x0 [0071.015] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.015] GetLastError () returned 0x0 [0071.015] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.015] GetLastError () returned 0x0 [0071.015] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.015] GetLastError () returned 0x0 [0071.016] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.016] GetLastError () returned 0x0 [0071.016] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.016] GetLastError () returned 0x0 [0071.016] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.016] GetLastError () returned 0x0 [0071.016] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.016] GetLastError () returned 0x0 [0071.017] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.017] GetLastError () returned 0x0 [0071.017] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.017] GetLastError () returned 0x0 [0071.017] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.017] GetLastError () returned 0x0 [0071.018] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.018] GetLastError () returned 0x0 [0071.018] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.018] GetLastError () returned 0x0 [0071.018] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.018] GetLastError () returned 0x0 [0071.018] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.018] GetLastError () returned 0x0 [0071.019] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.019] GetLastError () returned 0x0 [0071.025] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.025] GetLastError () returned 0x0 [0071.026] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.026] GetLastError () returned 0x0 [0071.026] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.026] GetLastError () returned 0x0 [0071.026] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.026] GetLastError () returned 0x0 [0071.027] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.027] GetLastError () returned 0x0 [0071.027] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.027] GetLastError () returned 0x0 [0071.027] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.027] GetLastError () returned 0x0 [0071.027] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1000, lpOverlapped=0x0) returned 1 [0071.028] GetLastError () returned 0x0 [0071.028] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x1b4, lpOverlapped=0x0) returned 1 [0071.028] GetLastError () returned 0x0 [0071.028] ReadFile (in: hFile=0x338, lpBuffer=0x20ff40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12eb14, lpOverlapped=0x0 | out: lpBuffer=0x20ff40c*, lpNumberOfBytesRead=0x12eb14*=0x0, lpOverlapped=0x0) returned 1 [0071.028] GetLastError () returned 0x0 [0071.028] CloseHandle (hObject=0x338) returned 1 [0071.028] GetLastError () returned 0x0 [0071.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e674, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.028] GetLastError () returned 0x0 [0071.028] SetErrorMode (uMode=0x1) returned 0x1 [0071.028] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x211fc9c | out: lpFileInformation=0x211fc9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0071.029] GetLastError () returned 0x0 [0071.029] SetErrorMode (uMode=0x1) returned 0x1 [0071.029] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.029] GetLastError () returned 0x0 [0071.029] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea98 | out: phkResult=0x12ea98*=0x338) returned 0x0 [0071.029] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12eae0, lpData=0x0, lpcbData=0x12eadc*=0x0 | out: lpType=0x12eae0*=0x1, lpData=0x0, lpcbData=0x12eadc*=0x56) returned 0x0 [0071.029] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12eae0, lpData=0x238c28, lpcbData=0x12eadc*=0x56 | out: lpType=0x12eae0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12eadc*=0x56) returned 0x0 [0071.029] RegCloseKey (hKey=0x338) returned 0x0 [0071.029] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.029] GetLastError () returned 0x0 [0071.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x12e5d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.030] GetLastError () returned 0x0 [0071.177] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.198] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.201] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.201] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.201] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.202] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.203] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.209] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.230] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.231] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.231] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.231] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.232] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.232] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.233] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.233] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.242] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.248] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.248] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.250] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.251] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.252] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.253] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.254] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.254] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.259] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.260] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.260] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.260] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.260] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.264] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.270] VirtualQuery (in: lpAddress=0x12d9d8, lpBuffer=0x12e9d8, dwLength=0x1c | out: lpBuffer=0x12e9d8*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.270] VirtualQuery (in: lpAddress=0x12d9d8, lpBuffer=0x12e9d8, dwLength=0x1c | out: lpBuffer=0x12e9d8*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.270] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.272] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.323] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.324] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.325] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.350] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.350] GetLastError () returned 0xcb [0071.355] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.371] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.371] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.372] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.372] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.375] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.376] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.381] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.385] VirtualQuery (in: lpAddress=0x12d9d4, lpBuffer=0x12e9d4, dwLength=0x1c | out: lpBuffer=0x12e9d4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.393] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12eb5c | out: phkResult=0x12eb5c*=0x334) returned 0x0 [0071.394] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12ebc4, lpData=0x0, lpcbData=0x12ebc0*=0x0 | out: lpType=0x12ebc4*=0x1, lpData=0x0, lpcbData=0x12ebc0*=0x74) returned 0x0 [0071.394] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12eba4, lpData=0x0, lpcbData=0x12eba0*=0x0 | out: lpType=0x12eba4*=0x1, lpData=0x0, lpcbData=0x12eba0*=0x74) returned 0x0 [0071.394] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x12eba4, lpData=0x238c28, lpcbData=0x12eba0*=0x74 | out: lpType=0x12eba4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x12eba0*=0x74) returned 0x0 [0071.394] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x12e724, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0071.394] GetLastError () returned 0xcb [0071.394] SetErrorMode (uMode=0x1) returned 0x1 [0071.395] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x12eba4 | out: lpFileInformation=0x12eba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0071.395] GetLastError () returned 0xcb [0071.395] SetErrorMode (uMode=0x1) returned 0x1 [0071.420] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.421] GetLastError () returned 0xcb [0071.421] SetErrorMode (uMode=0x1) returned 0x1 [0071.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0071.421] GetLastError () returned 0xcb [0071.421] SetErrorMode (uMode=0x1) returned 0x1 [0071.421] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.421] GetLastError () returned 0xcb [0071.421] SetErrorMode (uMode=0x1) returned 0x1 [0071.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0071.421] GetLastError () returned 0xcb [0071.421] SetErrorMode (uMode=0x1) returned 0x1 [0071.421] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.421] GetLastError () returned 0xcb [0071.421] SetErrorMode (uMode=0x1) returned 0x1 [0071.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.422] GetLastError () returned 0xcb [0071.422] SetErrorMode (uMode=0x1) returned 0x1 [0071.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0071.423] GetLastError () returned 0xcb [0071.423] SetErrorMode (uMode=0x1) returned 0x1 [0071.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0071.423] GetLastError () returned 0xcb [0071.423] SetErrorMode (uMode=0x1) returned 0x1 [0071.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0071.423] GetLastError () returned 0xcb [0071.423] SetErrorMode (uMode=0x1) returned 0x1 [0071.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0071.423] GetLastError () returned 0xcb [0071.423] SetErrorMode (uMode=0x1) returned 0x1 [0071.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0071.423] GetLastError () returned 0xcb [0071.423] SetErrorMode (uMode=0x1) returned 0x1 [0071.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0071.424] GetLastError () returned 0xcb [0071.424] SetErrorMode (uMode=0x1) returned 0x1 [0071.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x12eb98 | out: lpFileInformation=0x12eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0071.424] GetLastError () returned 0xcb [0071.424] SetErrorMode (uMode=0x1) returned 0x1 [0071.427] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.427] GetLastError () returned 0xcb [0071.441] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.441] GetLastError () returned 0xcb [0071.442] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.442] GetLastError () returned 0xcb [0071.443] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.443] GetLastError () returned 0xcb [0071.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.443] GetLastError () returned 0xcb [0071.443] SetErrorMode (uMode=0x1) returned 0x1 [0071.443] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.444] GetLastError () returned 0x0 [0071.444] GetFileType (hFile=0x304) returned 0x1 [0071.444] SetErrorMode (uMode=0x1) returned 0x1 [0071.444] GetFileType (hFile=0x304) returned 0x1 [0071.444] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.446] GetLastError () returned 0x0 [0071.447] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.447] GetLastError () returned 0x0 [0071.447] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.447] GetLastError () returned 0x0 [0071.447] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.447] GetLastError () returned 0x0 [0071.448] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.448] GetLastError () returned 0x0 [0071.448] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.448] GetLastError () returned 0x0 [0071.448] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x9e2, lpOverlapped=0x0) returned 1 [0071.448] GetLastError () returned 0x0 [0071.448] ReadFile (in: hFile=0x304, lpBuffer=0x23bdb4a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23bdb4a*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.448] GetLastError () returned 0x0 [0071.448] ReadFile (in: hFile=0x304, lpBuffer=0x23be5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23be5c8*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.449] GetLastError () returned 0x0 [0071.449] CloseHandle (hObject=0x304) returned 1 [0071.449] GetLastError () returned 0x0 [0071.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.449] GetLastError () returned 0x0 [0071.449] SetErrorMode (uMode=0x1) returned 0x1 [0071.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x23cf684 | out: lpFileInformation=0x23cf684*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0071.449] GetLastError () returned 0x0 [0071.449] SetErrorMode (uMode=0x1) returned 0x1 [0071.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.449] GetLastError () returned 0x0 [0071.449] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.450] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.450] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.450] RegCloseKey (hKey=0x304) returned 0x0 [0071.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.450] GetLastError () returned 0x0 [0071.450] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.450] GetLastError () returned 0x0 [0071.465] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x5ae51105, Data2=0xe82e, Data3=0x4884, Data4=([0]=0xa0, [1]=0xbf, [2]=0x0, [3]=0x70, [4]=0xc7, [5]=0x99, [6]=0x86, [7]=0xc1))) returned 0x0 [0071.489] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x9182d267, Data2=0xfdc4, Data3=0x4a52, Data4=([0]=0xbe, [1]=0x4e, [2]=0x4, [3]=0x70, [4]=0xea, [5]=0xb0, [6]=0x12, [7]=0xe3))) returned 0x0 [0071.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.491] GetLastError () returned 0x0 [0071.491] SetErrorMode (uMode=0x1) returned 0x1 [0071.491] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.491] GetLastError () returned 0x0 [0071.491] GetFileType (hFile=0x304) returned 0x1 [0071.491] SetErrorMode (uMode=0x1) returned 0x1 [0071.491] GetFileType (hFile=0x304) returned 0x1 [0071.492] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.494] GetLastError () returned 0x0 [0071.494] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.494] GetLastError () returned 0x0 [0071.494] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.494] GetLastError () returned 0x0 [0071.496] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.496] GetLastError () returned 0x0 [0071.496] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.496] GetLastError () returned 0x0 [0071.497] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0xfb2, lpOverlapped=0x0) returned 1 [0071.497] GetLastError () returned 0x0 [0071.497] ReadFile (in: hFile=0x304, lpBuffer=0x23e20be, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e20be*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.497] GetLastError () returned 0x0 [0071.498] ReadFile (in: hFile=0x304, lpBuffer=0x23e296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x23e296c*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.498] GetLastError () returned 0x0 [0071.498] CloseHandle (hObject=0x304) returned 1 [0071.498] GetLastError () returned 0x0 [0071.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.498] GetLastError () returned 0x0 [0071.498] SetErrorMode (uMode=0x1) returned 0x1 [0071.498] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24031fc | out: lpFileInformation=0x24031fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0071.498] GetLastError () returned 0x0 [0071.498] SetErrorMode (uMode=0x1) returned 0x1 [0071.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.498] GetLastError () returned 0x0 [0071.498] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.499] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.499] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.499] RegCloseKey (hKey=0x304) returned 0x0 [0071.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.499] GetLastError () returned 0x0 [0071.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.499] GetLastError () returned 0x0 [0071.501] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x72f3e58a, Data2=0xe0ad, Data3=0x42cb, Data4=([0]=0xbe, [1]=0xa, [2]=0x71, [3]=0xa1, [4]=0x33, [5]=0xab, [6]=0x1e, [7]=0x45))) returned 0x0 [0071.515] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x4a71a37d, Data2=0xff61, Data3=0x4211, Data4=([0]=0xb6, [1]=0xbf, [2]=0xbe, [3]=0xbb, [4]=0xb3, [5]=0x69, [6]=0xfc, [7]=0xb4))) returned 0x0 [0071.516] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xdcd06421, Data2=0xbe7e, Data3=0x4dc6, Data4=([0]=0x98, [1]=0x99, [2]=0x87, [3]=0x98, [4]=0x79, [5]=0x94, [6]=0xab, [7]=0x8))) returned 0x0 [0071.517] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb8b3d3f3, Data2=0x74e4, Data3=0x494e, Data4=([0]=0x8e, [1]=0xd7, [2]=0xb7, [3]=0xe6, [4]=0x10, [5]=0xff, [6]=0x94, [7]=0x3d))) returned 0x0 [0071.517] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x77f20081, Data2=0x66e1, Data3=0x4190, Data4=([0]=0x80, [1]=0xa5, [2]=0x25, [3]=0xdf, [4]=0xf4, [5]=0xa0, [6]=0x70, [7]=0x56))) returned 0x0 [0071.517] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xcc67f556, Data2=0x323, Data3=0x45e7, Data4=([0]=0x9d, [1]=0xe5, [2]=0xad, [3]=0x12, [4]=0x1f, [5]=0x5b, [6]=0x11, [7]=0xcd))) returned 0x0 [0071.517] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.517] GetLastError () returned 0x0 [0071.517] SetErrorMode (uMode=0x1) returned 0x1 [0071.517] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.518] GetLastError () returned 0x0 [0071.518] GetFileType (hFile=0x304) returned 0x1 [0071.518] SetErrorMode (uMode=0x1) returned 0x1 [0071.518] GetFileType (hFile=0x304) returned 0x1 [0071.518] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.520] GetLastError () returned 0x0 [0071.521] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.521] GetLastError () returned 0x0 [0071.522] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.522] GetLastError () returned 0x0 [0071.522] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.522] GetLastError () returned 0x0 [0071.523] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.523] GetLastError () returned 0x0 [0071.524] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.524] GetLastError () returned 0x0 [0071.524] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0xaca, lpOverlapped=0x0) returned 1 [0071.524] GetLastError () returned 0x0 [0071.524] ReadFile (in: hFile=0x304, lpBuffer=0x242220e, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x242220e*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.524] GetLastError () returned 0x0 [0071.524] ReadFile (in: hFile=0x304, lpBuffer=0x2422ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2422ba4*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.524] GetLastError () returned 0x0 [0071.524] CloseHandle (hObject=0x304) returned 1 [0071.524] GetLastError () returned 0x0 [0071.524] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.524] GetLastError () returned 0x0 [0071.524] SetErrorMode (uMode=0x1) returned 0x1 [0071.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2443ba0 | out: lpFileInformation=0x2443ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0071.525] GetLastError () returned 0x0 [0071.525] SetErrorMode (uMode=0x1) returned 0x1 [0071.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.525] GetLastError () returned 0x0 [0071.525] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.525] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.525] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.525] RegCloseKey (hKey=0x304) returned 0x0 [0071.526] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.526] GetLastError () returned 0x0 [0071.526] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.526] GetLastError () returned 0x0 [0071.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0071.547] GetLastError () returned 0x0 [0071.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0071.549] GetLastError () returned 0x57 [0071.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0071.560] GetLastError () returned 0x57 [0071.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.570] GetLastError () returned 0x57 [0071.582] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0071.582] GetLastError () returned 0x57 [0071.597] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0071.597] GetLastError () returned 0x57 [0071.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0071.611] GetLastError () returned 0x57 [0071.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0071.626] GetLastError () returned 0x57 [0071.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0071.639] GetLastError () returned 0x57 [0071.652] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0071.652] GetLastError () returned 0x57 [0071.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0071.666] GetLastError () returned 0x57 [0071.680] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0071.680] GetLastError () returned 0x57 [0071.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0071.695] GetLastError () returned 0x57 [0071.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0071.708] GetLastError () returned 0x57 [0071.722] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0071.722] GetLastError () returned 0x57 [0071.748] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0071.748] GetLastError () returned 0x57 [0071.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0071.749] GetLastError () returned 0x57 [0071.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0071.749] GetLastError () returned 0x57 [0071.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e204, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.749] GetLastError () returned 0x57 [0071.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.749] GetLastError () returned 0x57 [0071.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.750] GetLastError () returned 0x57 [0071.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.750] GetLastError () returned 0x57 [0071.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.750] GetLastError () returned 0x57 [0071.795] VirtualQuery (in: lpAddress=0x12d6f0, lpBuffer=0x12e6f0, dwLength=0x1c | out: lpBuffer=0x12e6f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.795] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x4896ad28, Data2=0x7448, Data3=0x4651, Data4=([0]=0x8c, [1]=0x61, [2]=0x52, [3]=0xca, [4]=0x84, [5]=0xe5, [6]=0xdd, [7]=0xda))) returned 0x0 [0071.798] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb6b86227, Data2=0xce7d, Data3=0x41ff, Data4=([0]=0x9d, [1]=0x72, [2]=0x7b, [3]=0x39, [4]=0x77, [5]=0xb0, [6]=0xe7, [7]=0x93))) returned 0x0 [0071.798] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.799] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.799] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xf217a834, Data2=0x8b1b, Data3=0x462c, Data4=([0]=0x93, [1]=0x8c, [2]=0x7, [3]=0x8e, [4]=0x8e, [5]=0x1e, [6]=0x31, [7]=0xe8))) returned 0x0 [0071.802] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x9aae0cd5, Data2=0x9916, Data3=0x438c, Data4=([0]=0x9f, [1]=0x4f, [2]=0x9e, [3]=0x66, [4]=0x5c, [5]=0xe1, [6]=0x94, [7]=0x5c))) returned 0x0 [0071.802] VirtualQuery (in: lpAddress=0x12d894, lpBuffer=0x12e894, dwLength=0x1c | out: lpBuffer=0x12e894*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.803] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.803] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.803] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xdab35b67, Data2=0x857c, Data3=0x4e57, Data4=([0]=0x81, [1]=0x4d, [2]=0x6c, [3]=0x15, [4]=0x87, [5]=0x70, [6]=0x90, [7]=0x46))) returned 0x0 [0071.803] VirtualQuery (in: lpAddress=0x12d894, lpBuffer=0x12e894, dwLength=0x1c | out: lpBuffer=0x12e894*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.803] VirtualQuery (in: lpAddress=0x12d7ac, lpBuffer=0x12e7ac, dwLength=0x1c | out: lpBuffer=0x12e7ac*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.804] VirtualQuery (in: lpAddress=0x12d460, lpBuffer=0x12e460, dwLength=0x1c | out: lpBuffer=0x12e460*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.805] VirtualQuery (in: lpAddress=0x12d460, lpBuffer=0x12e460, dwLength=0x1c | out: lpBuffer=0x12e460*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.805] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xcc730706, Data2=0xf6ad, Data3=0x45cd, Data4=([0]=0xb9, [1]=0x87, [2]=0xbe, [3]=0x17, [4]=0x83, [5]=0x57, [6]=0xf9, [7]=0x6d))) returned 0x0 [0071.805] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe1f2e575, Data2=0xa2e8, Data3=0x4bb0, Data4=([0]=0x90, [1]=0xab, [2]=0x3b, [3]=0x9f, [4]=0x3d, [5]=0x4a, [6]=0x71, [7]=0x1c))) returned 0x0 [0071.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.806] GetLastError () returned 0x57 [0071.806] SetErrorMode (uMode=0x1) returned 0x1 [0071.806] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.806] GetLastError () returned 0x0 [0071.806] GetFileType (hFile=0x304) returned 0x1 [0071.806] SetErrorMode (uMode=0x1) returned 0x1 [0071.807] GetFileType (hFile=0x304) returned 0x1 [0071.807] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.809] GetLastError () returned 0x0 [0071.809] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.810] GetLastError () returned 0x0 [0071.811] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.811] GetLastError () returned 0x0 [0071.811] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.811] GetLastError () returned 0x0 [0071.813] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.813] GetLastError () returned 0x0 [0071.813] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.813] GetLastError () returned 0x0 [0071.813] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.814] GetLastError () returned 0x0 [0071.814] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.814] GetLastError () returned 0x0 [0071.837] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.838] GetLastError () returned 0x0 [0071.838] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.838] GetLastError () returned 0x0 [0071.838] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.838] GetLastError () returned 0x0 [0071.839] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.839] GetLastError () returned 0x0 [0071.839] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.839] GetLastError () returned 0x0 [0071.839] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.839] GetLastError () returned 0x0 [0071.839] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.840] GetLastError () returned 0x0 [0071.840] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.840] GetLastError () returned 0x0 [0071.844] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.844] GetLastError () returned 0x0 [0071.845] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0xbce, lpOverlapped=0x0) returned 1 [0071.845] GetLastError () returned 0x0 [0071.845] ReadFile (in: hFile=0x304, lpBuffer=0x24a8406, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8406*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.845] GetLastError () returned 0x0 [0071.845] ReadFile (in: hFile=0x304, lpBuffer=0x24a8c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24a8c98*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.845] GetLastError () returned 0x0 [0071.845] CloseHandle (hObject=0x304) returned 1 [0071.846] GetLastError () returned 0x0 [0071.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.846] GetLastError () returned 0x0 [0071.846] SetErrorMode (uMode=0x1) returned 0x1 [0071.846] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24c9c94 | out: lpFileInformation=0x24c9c94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0071.846] GetLastError () returned 0x0 [0071.846] SetErrorMode (uMode=0x1) returned 0x1 [0071.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.846] GetLastError () returned 0x0 [0071.846] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.847] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.847] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.847] RegCloseKey (hKey=0x304) returned 0x0 [0071.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.847] GetLastError () returned 0x0 [0071.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.847] GetLastError () returned 0x0 [0071.854] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc027c93f, Data2=0x9128, Data3=0x4980, Data4=([0]=0x91, [1]=0xc5, [2]=0x42, [3]=0x6, [4]=0x3e, [5]=0x1a, [6]=0x3e, [7]=0x39))) returned 0x0 [0071.855] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc754d2a1, Data2=0x1524, Data3=0x4362, Data4=([0]=0x95, [1]=0x35, [2]=0x71, [3]=0xd5, [4]=0x44, [5]=0xf, [6]=0xfe, [7]=0x1))) returned 0x0 [0071.855] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xa872ee19, Data2=0xc950, Data3=0x454c, Data4=([0]=0xa3, [1]=0x92, [2]=0x51, [3]=0xb3, [4]=0x11, [5]=0x5a, [6]=0x2, [7]=0xa2))) returned 0x0 [0071.856] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x656d157b, Data2=0xb48b, Data3=0x472d, Data4=([0]=0xbf, [1]=0x99, [2]=0x2, [3]=0xfd, [4]=0x27, [5]=0xf1, [6]=0x2a, [7]=0xb7))) returned 0x0 [0071.856] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x751ac6e2, Data2=0xa894, Data3=0x4866, Data4=([0]=0xaf, [1]=0xe5, [2]=0x7e, [3]=0xb1, [4]=0x65, [5]=0x25, [6]=0x77, [7]=0x47))) returned 0x0 [0071.856] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xa267917d, Data2=0x4081, Data3=0x444a, Data4=([0]=0xad, [1]=0x13, [2]=0xcb, [3]=0xe1, [4]=0xe7, [5]=0x5a, [6]=0x56, [7]=0x13))) returned 0x0 [0071.856] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.857] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3be60471, Data2=0x3b7b, Data3=0x43de, Data4=([0]=0xa1, [1]=0xc5, [2]=0x2, [3]=0x80, [4]=0xc7, [5]=0x9d, [6]=0xe8, [7]=0xac))) returned 0x0 [0071.857] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.857] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.858] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xac219a61, Data2=0x3d0b, Data3=0x4a49, Data4=([0]=0x89, [1]=0x86, [2]=0xa6, [3]=0xb7, [4]=0x3c, [5]=0x9, [6]=0xe9, [7]=0x3b))) returned 0x0 [0071.858] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x607cc938, Data2=0xa01a, Data3=0x454c, Data4=([0]=0x85, [1]=0x31, [2]=0xdc, [3]=0x8e, [4]=0xf1, [5]=0xd, [6]=0xda, [7]=0x43))) returned 0x0 [0071.859] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x6397b8ce, Data2=0x477a, Data3=0x4e03, Data4=([0]=0x95, [1]=0xb, [2]=0x6f, [3]=0x47, [4]=0x74, [5]=0x67, [6]=0xcb, [7]=0xe4))) returned 0x0 [0071.859] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x60987986, Data2=0x7a8d, Data3=0x4ecf, Data4=([0]=0x9d, [1]=0x50, [2]=0x59, [3]=0x15, [4]=0x25, [5]=0x98, [6]=0xd9, [7]=0xb8))) returned 0x0 [0071.859] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.859] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x138f42e9, Data2=0xb27b, Data3=0x402e, Data4=([0]=0x81, [1]=0x4f, [2]=0xd6, [3]=0x80, [4]=0x8b, [5]=0x7f, [6]=0x1d, [7]=0x24))) returned 0x0 [0071.860] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.860] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.861] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.861] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.862] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.863] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x1496083, Data2=0xabf2, Data3=0x4c9c, Data4=([0]=0x83, [1]=0xa, [2]=0x33, [3]=0xcb, [4]=0xb, [5]=0xdd, [6]=0xb7, [7]=0x43))) returned 0x0 [0071.864] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x2255bbe5, Data2=0x757d, Data3=0x4902, Data4=([0]=0x8e, [1]=0x44, [2]=0x38, [3]=0x25, [4]=0x50, [5]=0x3b, [6]=0xb2, [7]=0xf3))) returned 0x0 [0071.864] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x199c5cf4, Data2=0x9001, Data3=0x4037, Data4=([0]=0x99, [1]=0xcb, [2]=0x71, [3]=0x99, [4]=0xb4, [5]=0xb5, [6]=0xd9, [7]=0xc4))) returned 0x0 [0071.864] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xce231688, Data2=0x1797, Data3=0x4a53, Data4=([0]=0x88, [1]=0x1b, [2]=0x31, [3]=0x15, [4]=0xc6, [5]=0xd5, [6]=0xe7, [7]=0xef))) returned 0x0 [0071.864] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xfcdd64f0, Data2=0x81d6, Data3=0x4c1d, Data4=([0]=0xb5, [1]=0x93, [2]=0x20, [3]=0xd7, [4]=0xeb, [5]=0xc8, [6]=0xde, [7]=0x26))) returned 0x0 [0071.865] VirtualQuery (in: lpAddress=0x12d894, lpBuffer=0x12e894, dwLength=0x1c | out: lpBuffer=0x12e894*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.865] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x990a8b5a, Data2=0x554f, Data3=0x47d0, Data4=([0]=0x94, [1]=0xcf, [2]=0x92, [3]=0xe, [4]=0x4d, [5]=0x35, [6]=0x90, [7]=0xe0))) returned 0x0 [0071.866] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xde446f12, Data2=0x2eac, Data3=0x4cad, Data4=([0]=0x85, [1]=0xbf, [2]=0x4e, [3]=0x51, [4]=0x1a, [5]=0x83, [6]=0xe0, [7]=0x33))) returned 0x0 [0071.867] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb053d804, Data2=0x266b, Data3=0x4c51, Data4=([0]=0xba, [1]=0x94, [2]=0xdb, [3]=0xda, [4]=0x6, [5]=0x1d, [6]=0xcc, [7]=0x16))) returned 0x0 [0071.867] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xd4b9ef93, Data2=0xb5f8, Data3=0x48f5, Data4=([0]=0xae, [1]=0x89, [2]=0xef, [3]=0xf0, [4]=0xb3, [5]=0xb3, [6]=0xcc, [7]=0x4e))) returned 0x0 [0071.867] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xd7d60905, Data2=0x57c7, Data3=0x4099, Data4=([0]=0x82, [1]=0xf, [2]=0x8d, [3]=0x25, [4]=0x8, [5]=0x6d, [6]=0x13, [7]=0xa8))) returned 0x0 [0071.868] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x5867c2db, Data2=0x3265, Data3=0x41b7, Data4=([0]=0x86, [1]=0xba, [2]=0xec, [3]=0xa2, [4]=0x8b, [5]=0xd, [6]=0xba, [7]=0x62))) returned 0x0 [0071.868] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xdc5193ff, Data2=0x7a40, Data3=0x4c04, Data4=([0]=0xb7, [1]=0xfe, [2]=0x7c, [3]=0xb5, [4]=0xde, [5]=0xc7, [6]=0x4c, [7]=0xec))) returned 0x0 [0071.868] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x7541f2f4, Data2=0x4b84, Data3=0x4faa, Data4=([0]=0xb3, [1]=0xc9, [2]=0x26, [3]=0xb, [4]=0x1b, [5]=0x22, [6]=0xfc, [7]=0x31))) returned 0x0 [0071.869] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8acd85f, Data2=0xb4be, Data3=0x4fd5, Data4=([0]=0xa9, [1]=0xa9, [2]=0x2d, [3]=0x2a, [4]=0x98, [5]=0x21, [6]=0x90, [7]=0x49))) returned 0x0 [0071.869] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3036809f, Data2=0x2ec8, Data3=0x44c3, Data4=([0]=0xa7, [1]=0xcb, [2]=0x2e, [3]=0xb2, [4]=0x37, [5]=0x9d, [6]=0xc7, [7]=0x90))) returned 0x0 [0071.869] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x90cf5445, Data2=0x4881, Data3=0x4f1a, Data4=([0]=0xb6, [1]=0xbe, [2]=0xbe, [3]=0xa, [4]=0x92, [5]=0x46, [6]=0x96, [7]=0x66))) returned 0x0 [0071.869] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe5e5d4f8, Data2=0xb9c3, Data3=0x478a, Data4=([0]=0x86, [1]=0xaa, [2]=0x73, [3]=0xcb, [4]=0x30, [5]=0xb4, [6]=0x5, [7]=0xe2))) returned 0x0 [0071.870] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8eaf49f1, Data2=0x24a1, Data3=0x4406, Data4=([0]=0x8f, [1]=0x5e, [2]=0x31, [3]=0x35, [4]=0xf, [5]=0xc8, [6]=0xa2, [7]=0x50))) returned 0x0 [0071.870] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xfd8baebd, Data2=0xcfb6, Data3=0x40b3, Data4=([0]=0xbc, [1]=0x1d, [2]=0xab, [3]=0xa3, [4]=0x28, [5]=0xb6, [6]=0xd3, [7]=0xd1))) returned 0x0 [0071.871] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xfd91b968, Data2=0xb6dd, Data3=0x45f4, Data4=([0]=0xa4, [1]=0x60, [2]=0xd7, [3]=0x36, [4]=0x54, [5]=0xf8, [6]=0x76, [7]=0x22))) returned 0x0 [0071.871] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb079a3ea, Data2=0x8a25, Data3=0x4ebd, Data4=([0]=0x81, [1]=0xa3, [2]=0x7f, [3]=0xfd, [4]=0x63, [5]=0x9f, [6]=0xa, [7]=0xb2))) returned 0x0 [0071.871] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x7cc2ac48, Data2=0x322d, Data3=0x4703, Data4=([0]=0xa0, [1]=0xd0, [2]=0x3a, [3]=0xcb, [4]=0xa5, [5]=0xf7, [6]=0xac, [7]=0xbe))) returned 0x0 [0071.871] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3354533d, Data2=0xc38b, Data3=0x4d04, Data4=([0]=0x86, [1]=0xe, [2]=0x50, [3]=0x8, [4]=0x88, [5]=0xe0, [6]=0x95, [7]=0xa6))) returned 0x0 [0071.872] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x471d4cf5, Data2=0x2ac9, Data3=0x4395, Data4=([0]=0x8c, [1]=0xf5, [2]=0x0, [3]=0x5a, [4]=0x6d, [5]=0xf8, [6]=0x6d, [7]=0xc5))) returned 0x0 [0071.872] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.873] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.876] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.880] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x90c4add2, Data2=0x13b, Data3=0x4252, Data4=([0]=0x97, [1]=0xfa, [2]=0x84, [3]=0xc, [4]=0xba, [5]=0xb4, [6]=0x15, [7]=0x18))) returned 0x0 [0071.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.880] GetLastError () returned 0x0 [0071.880] SetErrorMode (uMode=0x1) returned 0x1 [0071.880] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.881] GetLastError () returned 0x0 [0071.881] GetFileType (hFile=0x304) returned 0x1 [0071.881] SetErrorMode (uMode=0x1) returned 0x1 [0071.881] GetFileType (hFile=0x304) returned 0x1 [0071.881] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.883] GetLastError () returned 0x0 [0071.884] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.884] GetLastError () returned 0x0 [0071.885] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.885] GetLastError () returned 0x0 [0071.885] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.885] GetLastError () returned 0x0 [0071.887] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.888] GetLastError () returned 0x0 [0071.888] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.888] GetLastError () returned 0x0 [0071.888] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x119, lpOverlapped=0x0) returned 1 [0071.888] GetLastError () returned 0x0 [0071.888] ReadFile (in: hFile=0x304, lpBuffer=0x2566b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2566b80*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.888] GetLastError () returned 0x0 [0071.888] CloseHandle (hObject=0x304) returned 1 [0071.889] GetLastError () returned 0x0 [0071.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.889] GetLastError () returned 0x0 [0071.889] SetErrorMode (uMode=0x1) returned 0x1 [0071.889] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2587b7c | out: lpFileInformation=0x2587b7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0071.889] GetLastError () returned 0x0 [0071.889] SetErrorMode (uMode=0x1) returned 0x1 [0071.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.889] GetLastError () returned 0x0 [0071.889] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.890] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.890] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.890] RegCloseKey (hKey=0x304) returned 0x0 [0071.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.890] GetLastError () returned 0x0 [0071.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.890] GetLastError () returned 0x0 [0071.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e240, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.892] GetLastError () returned 0x0 [0071.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.892] GetLastError () returned 0x0 [0071.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.893] GetLastError () returned 0x0 [0071.893] VirtualQuery (in: lpAddress=0x12d6f0, lpBuffer=0x12e6f0, dwLength=0x1c | out: lpBuffer=0x12e6f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.893] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8be230b0, Data2=0xe065, Data3=0x4e72, Data4=([0]=0x8f, [1]=0x29, [2]=0xa7, [3]=0xe4, [4]=0x74, [5]=0x52, [6]=0x5b, [7]=0xd5))) returned 0x0 [0071.894] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.894] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x6be72416, Data2=0x1aac, Data3=0x4727, Data4=([0]=0x95, [1]=0x5c, [2]=0xd0, [3]=0xc9, [4]=0x91, [5]=0x9a, [6]=0x6a, [7]=0x1e))) returned 0x0 [0071.894] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8d3c55d2, Data2=0x268f, Data3=0x4c98, Data4=([0]=0x91, [1]=0x50, [2]=0x87, [3]=0xb1, [4]=0x0, [5]=0x2f, [6]=0x6d, [7]=0x4a))) returned 0x0 [0071.894] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x71ca18b3, Data2=0x363, Data3=0x47d8, Data4=([0]=0xb5, [1]=0x6b, [2]=0x9d, [3]=0xdc, [4]=0x7e, [5]=0x3a, [6]=0x8b, [7]=0x7b))) returned 0x0 [0071.895] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.895] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.895] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.895] GetLastError () returned 0x0 [0071.895] SetErrorMode (uMode=0x1) returned 0x1 [0071.895] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.895] GetLastError () returned 0x0 [0071.895] GetFileType (hFile=0x304) returned 0x1 [0071.895] SetErrorMode (uMode=0x1) returned 0x1 [0071.896] GetFileType (hFile=0x304) returned 0x1 [0071.896] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.898] GetLastError () returned 0x0 [0071.899] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.899] GetLastError () returned 0x0 [0071.899] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.900] GetLastError () returned 0x0 [0071.900] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.900] GetLastError () returned 0x0 [0071.901] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.901] GetLastError () returned 0x0 [0071.901] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.901] GetLastError () returned 0x0 [0071.901] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.901] GetLastError () returned 0x0 [0071.902] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.902] GetLastError () returned 0x0 [0071.904] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.904] GetLastError () returned 0x0 [0071.904] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.904] GetLastError () returned 0x0 [0071.904] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.905] GetLastError () returned 0x0 [0071.905] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.905] GetLastError () returned 0x0 [0071.905] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.905] GetLastError () returned 0x0 [0071.905] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.906] GetLastError () returned 0x0 [0071.906] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.906] GetLastError () returned 0x0 [0071.906] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.906] GetLastError () returned 0x0 [0071.912] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.912] GetLastError () returned 0x0 [0071.912] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.912] GetLastError () returned 0x0 [0071.913] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.913] GetLastError () returned 0x0 [0071.913] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.913] GetLastError () returned 0x0 [0071.913] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.913] GetLastError () returned 0x0 [0071.914] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.914] GetLastError () returned 0x0 [0071.914] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.914] GetLastError () returned 0x0 [0071.914] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.914] GetLastError () returned 0x0 [0071.914] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.915] GetLastError () returned 0x0 [0071.915] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.915] GetLastError () returned 0x0 [0071.915] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.915] GetLastError () returned 0x0 [0071.915] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.916] GetLastError () returned 0x0 [0071.916] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.916] GetLastError () returned 0x0 [0071.916] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.916] GetLastError () returned 0x0 [0071.916] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.917] GetLastError () returned 0x0 [0071.917] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.917] GetLastError () returned 0x0 [0071.924] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.924] GetLastError () returned 0x0 [0071.925] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.925] GetLastError () returned 0x0 [0071.925] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.925] GetLastError () returned 0x0 [0071.925] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.925] GetLastError () returned 0x0 [0071.926] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.926] GetLastError () returned 0x0 [0071.926] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.927] GetLastError () returned 0x0 [0071.927] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.927] GetLastError () returned 0x0 [0071.927] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.927] GetLastError () returned 0x0 [0071.927] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.927] GetLastError () returned 0x0 [0071.928] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.928] GetLastError () returned 0x0 [0071.928] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.928] GetLastError () returned 0x0 [0071.928] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.928] GetLastError () returned 0x0 [0071.928] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.929] GetLastError () returned 0x0 [0071.929] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.929] GetLastError () returned 0x0 [0071.929] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.929] GetLastError () returned 0x0 [0071.929] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.930] GetLastError () returned 0x0 [0071.930] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.930] GetLastError () returned 0x0 [0071.930] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.930] GetLastError () returned 0x0 [0071.930] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.930] GetLastError () returned 0x0 [0071.931] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.931] GetLastError () returned 0x0 [0071.931] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.931] GetLastError () returned 0x0 [0071.931] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.931] GetLastError () returned 0x0 [0071.932] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.932] GetLastError () returned 0x0 [0071.932] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.932] GetLastError () returned 0x0 [0071.932] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.932] GetLastError () returned 0x0 [0071.933] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.933] GetLastError () returned 0x0 [0071.933] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.933] GetLastError () returned 0x0 [0071.933] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.933] GetLastError () returned 0x0 [0071.933] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.933] GetLastError () returned 0x0 [0071.934] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0071.934] GetLastError () returned 0x0 [0071.934] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0xf37, lpOverlapped=0x0) returned 1 [0071.934] GetLastError () returned 0x0 [0071.934] ReadFile (in: hFile=0x304, lpBuffer=0x25b027b, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b027b*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.934] GetLastError () returned 0x0 [0071.934] ReadFile (in: hFile=0x304, lpBuffer=0x25b0ba4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x25b0ba4*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0071.935] GetLastError () returned 0x0 [0071.935] CloseHandle (hObject=0x304) returned 1 [0071.935] GetLastError () returned 0x0 [0071.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.935] GetLastError () returned 0x0 [0071.935] SetErrorMode (uMode=0x1) returned 0x1 [0071.935] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x25d1ba0 | out: lpFileInformation=0x25d1ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0071.935] GetLastError () returned 0x0 [0071.935] SetErrorMode (uMode=0x1) returned 0x1 [0071.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.935] GetLastError () returned 0x0 [0071.936] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0071.936] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.936] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0071.937] RegCloseKey (hKey=0x304) returned 0x0 [0071.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.937] GetLastError () returned 0x0 [0071.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.937] GetLastError () returned 0x0 [0071.955] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8df3dfbc, Data2=0xfb91, Data3=0x47b1, Data4=([0]=0xb4, [1]=0xe7, [2]=0x32, [3]=0xee, [4]=0xe8, [5]=0x6e, [6]=0xff, [7]=0x96))) returned 0x0 [0071.956] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x77d1878a, Data2=0x9bdd, Data3=0x4042, Data4=([0]=0x8f, [1]=0x15, [2]=0x7, [3]=0xaf, [4]=0x74, [5]=0xea, [6]=0xf7, [7]=0xe4))) returned 0x0 [0071.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.956] GetLastError () returned 0x0 [0071.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.956] GetLastError () returned 0x0 [0071.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.956] GetLastError () returned 0x0 [0071.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.956] GetLastError () returned 0x0 [0072.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.006] GetLastError () returned 0x0 [0072.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.006] GetLastError () returned 0x0 [0072.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.006] GetLastError () returned 0x0 [0072.007] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc724dc33, Data2=0x10af, Data3=0x4643, Data4=([0]=0x89, [1]=0x9c, [2]=0xcf, [3]=0x67, [4]=0x71, [5]=0xdf, [6]=0x14, [7]=0x1d))) returned 0x0 [0072.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.007] GetLastError () returned 0x0 [0072.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.007] GetLastError () returned 0x0 [0072.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.007] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.008] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12de90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12de90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.009] GetLastError () returned 0x0 [0072.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.010] GetLastError () returned 0x0 [0072.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.010] GetLastError () returned 0x0 [0072.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.010] GetLastError () returned 0x0 [0072.012] VirtualQuery (in: lpAddress=0x12d354, lpBuffer=0x12e354, dwLength=0x1c | out: lpBuffer=0x12e354*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.014] VirtualQuery (in: lpAddress=0x12d390, lpBuffer=0x12e390, dwLength=0x1c | out: lpBuffer=0x12e390*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.014] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.014] GetLastError () returned 0x0 [0072.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.015] GetLastError () returned 0x0 [0072.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.015] GetLastError () returned 0x0 [0072.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.015] GetLastError () returned 0x0 [0072.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.015] GetLastError () returned 0x0 [0072.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.015] GetLastError () returned 0x0 [0072.016] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.016] GetLastError () returned 0x0 [0072.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.017] GetLastError () returned 0x0 [0072.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.017] GetLastError () returned 0x0 [0072.017] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.017] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.017] GetLastError () returned 0x0 [0072.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.018] GetLastError () returned 0x0 [0072.018] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.018] GetLastError () returned 0x0 [0072.018] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.019] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.019] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.022] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.022] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.022] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.023] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.023] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.023] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.024] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.024] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.027] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.027] VirtualQuery (in: lpAddress=0x12d4fc, lpBuffer=0x12e4fc, dwLength=0x1c | out: lpBuffer=0x12e4fc*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.027] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.029] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.029] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.030] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.030] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xf3c26603, Data2=0xca35, Data3=0x43d3, Data4=([0]=0x9b, [1]=0x44, [2]=0x80, [3]=0x2e, [4]=0xc7, [5]=0x9c, [6]=0x42, [7]=0xdf))) returned 0x0 [0072.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.030] GetLastError () returned 0x0 [0072.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.030] GetLastError () returned 0x0 [0072.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e0c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.031] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.032] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.032] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12de90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.032] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12de90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.032] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.032] GetLastError () returned 0x0 [0072.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e260, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.033] GetLastError () returned 0x0 [0072.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.034] GetLastError () returned 0x0 [0072.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.034] GetLastError () returned 0x0 [0072.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e170, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.034] GetLastError () returned 0x0 [0072.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e120, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.034] GetLastError () returned 0x0 [0072.035] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.036] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.036] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.037] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.037] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.040] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.040] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.041] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.041] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.042] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.042] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.043] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.043] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.045] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.045] VirtualQuery (in: lpAddress=0x12d4fc, lpBuffer=0x12e4fc, dwLength=0x1c | out: lpBuffer=0x12e4fc*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.045] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.047] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.047] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.048] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.048] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xa91f77ea, Data2=0xd4f7, Data3=0x45b7, Data4=([0]=0xbf, [1]=0x50, [2]=0x6d, [3]=0xcb, [4]=0x5e, [5]=0xfe, [6]=0x30, [7]=0x94))) returned 0x0 [0072.049] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb804b7b9, Data2=0xadd8, Data3=0x47e6, Data4=([0]=0x90, [1]=0x91, [2]=0xf0, [3]=0xef, [4]=0xe, [5]=0xa7, [6]=0xed, [7]=0xe9))) returned 0x0 [0072.050] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.051] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.052] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.052] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.053] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.054] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.054] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.055] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.055] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.056] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.056] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.057] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.057] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.058] VirtualQuery (in: lpAddress=0x12d724, lpBuffer=0x12e724, dwLength=0x1c | out: lpBuffer=0x12e724*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.060] VirtualQuery (in: lpAddress=0x12d724, lpBuffer=0x12e724, dwLength=0x1c | out: lpBuffer=0x12e724*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.061] VirtualQuery (in: lpAddress=0x12d724, lpBuffer=0x12e724, dwLength=0x1c | out: lpBuffer=0x12e724*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.062] VirtualQuery (in: lpAddress=0x12d724, lpBuffer=0x12e724, dwLength=0x1c | out: lpBuffer=0x12e724*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.063] VirtualQuery (in: lpAddress=0x12d354, lpBuffer=0x12e354, dwLength=0x1c | out: lpBuffer=0x12e354*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.063] VirtualQuery (in: lpAddress=0x12d390, lpBuffer=0x12e390, dwLength=0x1c | out: lpBuffer=0x12e390*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.063] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.064] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.065] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.065] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.065] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.065] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.066] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.066] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.066] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.067] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.068] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.068] VirtualQuery (in: lpAddress=0x12d4fc, lpBuffer=0x12e4fc, dwLength=0x1c | out: lpBuffer=0x12e4fc*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.068] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.069] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.069] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.070] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.070] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe7e39bce, Data2=0xe8d4, Data3=0x4e02, Data4=([0]=0x8e, [1]=0x1, [2]=0x5e, [3]=0x35, [4]=0xcf, [5]=0x8a, [6]=0xed, [7]=0x9b))) returned 0x0 [0072.072] VirtualQuery (in: lpAddress=0x12d354, lpBuffer=0x12e354, dwLength=0x1c | out: lpBuffer=0x12e354*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.072] VirtualQuery (in: lpAddress=0x12d390, lpBuffer=0x12e390, dwLength=0x1c | out: lpBuffer=0x12e390*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.073] VirtualQuery (in: lpAddress=0x12d45c, lpBuffer=0x12e45c, dwLength=0x1c | out: lpBuffer=0x12e45c*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.074] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8ee44e9d, Data2=0x6d9e, Data3=0x4a94, Data4=([0]=0x95, [1]=0x76, [2]=0x98, [3]=0x85, [4]=0x17, [5]=0x76, [6]=0x38, [7]=0x94))) returned 0x0 [0072.075] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x50ce78a3, Data2=0x85c3, Data3=0x482a, Data4=([0]=0xb4, [1]=0x81, [2]=0xb9, [3]=0x1f, [4]=0x8d, [5]=0xaf, [6]=0xd, [7]=0xbd))) returned 0x0 [0072.076] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x6c113b5f, Data2=0xddb8, Data3=0x4255, Data4=([0]=0x93, [1]=0xf6, [2]=0xe6, [3]=0x2e, [4]=0x98, [5]=0xf1, [6]=0xeb, [7]=0x64))) returned 0x0 [0072.077] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x69c73c59, Data2=0x54d0, Data3=0x4c24, Data4=([0]=0x8b, [1]=0xf7, [2]=0xcd, [3]=0xa8, [4]=0xe2, [5]=0xbe, [6]=0x78, [7]=0xf0))) returned 0x0 [0072.077] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3ae6a9a0, Data2=0x24f7, Data3=0x46e7, Data4=([0]=0x96, [1]=0x89, [2]=0x82, [3]=0x91, [4]=0x82, [5]=0x54, [6]=0x62, [7]=0x93))) returned 0x0 [0072.078] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x342610af, Data2=0x65e1, Data3=0x4495, Data4=([0]=0x8c, [1]=0xd6, [2]=0x53, [3]=0x9e, [4]=0xa5, [5]=0xcf, [6]=0x8b, [7]=0x52))) returned 0x0 [0072.078] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x6200a712, Data2=0x9ba2, Data3=0x4ecb, Data4=([0]=0x9b, [1]=0x5b, [2]=0xd7, [3]=0x72, [4]=0x75, [5]=0x33, [6]=0xdd, [7]=0x5a))) returned 0x0 [0072.078] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3bebb707, Data2=0xba74, Data3=0x41eb, Data4=([0]=0x9e, [1]=0x6d, [2]=0xde, [3]=0xc, [4]=0x51, [5]=0x37, [6]=0xf6, [7]=0x93))) returned 0x0 [0072.079] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.080] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.080] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.080] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.081] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.081] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.082] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.083] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.083] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.084] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.084] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.084] VirtualQuery (in: lpAddress=0x12d2b4, lpBuffer=0x12e2b4, dwLength=0x1c | out: lpBuffer=0x12e2b4*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.085] VirtualQuery (in: lpAddress=0x12d2f0, lpBuffer=0x12e2f0, dwLength=0x1c | out: lpBuffer=0x12e2f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.086] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.086] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.087] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.088] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.088] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.088] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.089] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.089] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc5ecc6d5, Data2=0xc51a, Data3=0x4491, Data4=([0]=0x80, [1]=0x88, [2]=0xcb, [3]=0x53, [4]=0xaf, [5]=0xaa, [6]=0xe2, [7]=0x75))) returned 0x0 [0072.089] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.089] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.090] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.091] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.091] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.091] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.092] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.092] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.093] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.093] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.094] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.094] VirtualQuery (in: lpAddress=0x12d684, lpBuffer=0x12e684, dwLength=0x1c | out: lpBuffer=0x12e684*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.094] VirtualQuery (in: lpAddress=0x12d6c0, lpBuffer=0x12e6c0, dwLength=0x1c | out: lpBuffer=0x12e6c0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.094] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.095] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.096] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.096] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.096] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.097] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.097] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.098] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc0ac1ced, Data2=0xf9a4, Data3=0x48f2, Data4=([0]=0x9c, [1]=0xb6, [2]=0xe9, [3]=0x68, [4]=0x7e, [5]=0x73, [6]=0x4e, [7]=0x9c))) returned 0x0 [0072.098] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.098] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.099] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.100] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.100] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.100] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.100] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.101] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.101] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.101] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.102] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.102] VirtualQuery (in: lpAddress=0x12d4fc, lpBuffer=0x12e4fc, dwLength=0x1c | out: lpBuffer=0x12e4fc*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.103] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.103] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.103] VirtualQuery (in: lpAddress=0x12d658, lpBuffer=0x12e658, dwLength=0x1c | out: lpBuffer=0x12e658*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.104] VirtualQuery (in: lpAddress=0x12d694, lpBuffer=0x12e694, dwLength=0x1c | out: lpBuffer=0x12e694*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.104] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x7f75d162, Data2=0x1473, Data3=0x4b17, Data4=([0]=0x82, [1]=0xb8, [2]=0x38, [3]=0xc6, [4]=0x8a, [5]=0x80, [6]=0xce, [7]=0x63))) returned 0x0 [0072.105] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x7240f5be, Data2=0xa27b, Data3=0x4aba, Data4=([0]=0xa8, [1]=0x98, [2]=0x43, [3]=0xa4, [4]=0x15, [5]=0x36, [6]=0x3c, [7]=0x9))) returned 0x0 [0072.105] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe1a21f6a, Data2=0x3c94, Data3=0x41c6, Data4=([0]=0x99, [1]=0x5d, [2]=0xba, [3]=0xe4, [4]=0xc0, [5]=0xa2, [6]=0x1, [7]=0xa9))) returned 0x0 [0072.106] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xa6466375, Data2=0x538b, Data3=0x49d6, Data4=([0]=0x81, [1]=0xb2, [2]=0x43, [3]=0x39, [4]=0x73, [5]=0xbe, [6]=0xd6, [7]=0xe6))) returned 0x0 [0072.106] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3eba8f4d, Data2=0xb8c, Data3=0x4e3e, Data4=([0]=0xbb, [1]=0xa, [2]=0xce, [3]=0x44, [4]=0x9f, [5]=0xcf, [6]=0x76, [7]=0xb8))) returned 0x0 [0072.107] VirtualQuery (in: lpAddress=0x12d58c, lpBuffer=0x12e58c, dwLength=0x1c | out: lpBuffer=0x12e58c*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.108] VirtualQuery (in: lpAddress=0x12d5c8, lpBuffer=0x12e5c8, dwLength=0x1c | out: lpBuffer=0x12e5c8*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.108] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb147b22, Data2=0x759d, Data3=0x48d8, Data4=([0]=0x99, [1]=0x37, [2]=0x81, [3]=0x5c, [4]=0xbe, [5]=0x55, [6]=0x43, [7]=0x2))) returned 0x0 [0072.108] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3bc94d38, Data2=0x4cbe, Data3=0x4e7e, Data4=([0]=0x90, [1]=0x17, [2]=0x6a, [3]=0xaa, [4]=0xc4, [5]=0x45, [6]=0x62, [7]=0x27))) returned 0x0 [0072.108] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x35a90252, Data2=0xbbe9, Data3=0x4953, Data4=([0]=0xb2, [1]=0xe1, [2]=0xc0, [3]=0xe0, [4]=0x6f, [5]=0x63, [6]=0x96, [7]=0x37))) returned 0x0 [0072.109] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.109] GetLastError () returned 0x0 [0072.109] SetErrorMode (uMode=0x1) returned 0x1 [0072.109] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.109] GetLastError () returned 0x0 [0072.109] GetFileType (hFile=0x304) returned 0x1 [0072.109] SetErrorMode (uMode=0x1) returned 0x1 [0072.110] GetFileType (hFile=0x304) returned 0x1 [0072.110] ReadFile (in: hFile=0x304, lpBuffer=0x287d714, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x287d714*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.112] GetLastError () returned 0x0 [0072.113] ReadFile (in: hFile=0x304, lpBuffer=0x287d714, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x287d714*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.113] GetLastError () returned 0x0 [0072.125] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.125] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.126] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.126] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.126] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.126] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.126] GetLastError () returned 0x0 [0072.126] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.127] GetLastError () returned 0x0 [0072.129] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.129] GetLastError () returned 0x0 [0072.129] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.129] GetLastError () returned 0x0 [0072.130] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.130] GetLastError () returned 0x0 [0072.130] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.130] GetLastError () returned 0x0 [0072.130] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.131] GetLastError () returned 0x0 [0072.131] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.131] GetLastError () returned 0x0 [0072.131] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.131] GetLastError () returned 0x0 [0072.132] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.132] GetLastError () returned 0x0 [0072.136] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.137] GetLastError () returned 0x0 [0072.137] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.137] GetLastError () returned 0x0 [0072.137] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.137] GetLastError () returned 0x0 [0072.138] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.138] GetLastError () returned 0x0 [0072.138] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0xe67, lpOverlapped=0x0) returned 1 [0072.138] GetLastError () returned 0x0 [0072.139] ReadFile (in: hFile=0x304, lpBuffer=0x232a8b7, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232a8b7*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.139] GetLastError () returned 0x0 [0072.139] ReadFile (in: hFile=0x304, lpBuffer=0x232b27c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x232b27c*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.139] GetLastError () returned 0x0 [0072.139] CloseHandle (hObject=0x304) returned 1 [0072.139] GetLastError () returned 0x0 [0072.139] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.139] GetLastError () returned 0x0 [0072.139] SetErrorMode (uMode=0x1) returned 0x1 [0072.139] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x234a2f0 | out: lpFileInformation=0x234a2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0072.139] GetLastError () returned 0x0 [0072.140] SetErrorMode (uMode=0x1) returned 0x1 [0072.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.140] GetLastError () returned 0x0 [0072.140] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0072.140] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.140] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.140] RegCloseKey (hKey=0x304) returned 0x0 [0072.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.140] GetLastError () returned 0x0 [0072.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.140] GetLastError () returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x64dac997, Data2=0x44cb, Data3=0x4b9e, Data4=([0]=0xab, [1]=0xe6, [2]=0xfa, [3]=0x12, [4]=0xd4, [5]=0x3e, [6]=0xaa, [7]=0xf9))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x55f05e78, Data2=0xafda, Data3=0x4307, Data4=([0]=0xa8, [1]=0x3c, [2]=0x4f, [3]=0x57, [4]=0x23, [5]=0xbc, [6]=0x8c, [7]=0xfe))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xaeb124b6, Data2=0xa37b, Data3=0x4fb4, Data4=([0]=0xa2, [1]=0x2, [2]=0x67, [3]=0x9c, [4]=0xd5, [5]=0xde, [6]=0xe3, [7]=0xfe))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xedd6609, Data2=0xd0ab, Data3=0x4b62, Data4=([0]=0x93, [1]=0x39, [2]=0x4d, [3]=0x88, [4]=0xd2, [5]=0xc2, [6]=0x79, [7]=0xd8))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe6f37ebd, Data2=0xd3f, Data3=0x4d63, Data4=([0]=0x84, [1]=0x91, [2]=0x84, [3]=0x4c, [4]=0xa5, [5]=0xf2, [6]=0xf0, [7]=0xa8))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe019da5f, Data2=0x461c, Data3=0x4f89, Data4=([0]=0x94, [1]=0x63, [2]=0x4d, [3]=0x81, [4]=0xb5, [5]=0xbd, [6]=0xc8, [7]=0x2c))) returned 0x0 [0072.142] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xfa0b3ee1, Data2=0x6686, Data3=0x4504, Data4=([0]=0xb4, [1]=0xf7, [2]=0xdd, [3]=0x36, [4]=0x79, [5]=0x6, [6]=0xcb, [7]=0x3e))) returned 0x0 [0072.143] VirtualQuery (in: lpAddress=0x12d760, lpBuffer=0x12e760, dwLength=0x1c | out: lpBuffer=0x12e760*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.143] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x826a5016, Data2=0xd959, Data3=0x423e, Data4=([0]=0x8d, [1]=0xa0, [2]=0xd4, [3]=0xb1, [4]=0x88, [5]=0xd9, [6]=0xde, [7]=0x36))) returned 0x0 [0072.143] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x981b430d, Data2=0x7516, Data3=0x4ed9, Data4=([0]=0x90, [1]=0x22, [2]=0xad, [3]=0xb8, [4]=0x14, [5]=0xd0, [6]=0x71, [7]=0x82))) returned 0x0 [0072.143] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x60b99ee2, Data2=0x30c4, Data3=0x433f, Data4=([0]=0xac, [1]=0x1f, [2]=0x5f, [3]=0x9b, [4]=0x10, [5]=0x75, [6]=0xa1, [7]=0xf3))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x5069cbfb, Data2=0x32f9, Data3=0x4103, Data4=([0]=0x85, [1]=0x7f, [2]=0x2, [3]=0x2f, [4]=0xdb, [5]=0x28, [6]=0x87, [7]=0xfb))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x7c9090e, Data2=0xedc3, Data3=0x45b9, Data4=([0]=0x94, [1]=0xaf, [2]=0xcb, [3]=0xee, [4]=0x33, [5]=0xa6, [6]=0x56, [7]=0xa5))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3d933a49, Data2=0x25cc, Data3=0x4eea, Data4=([0]=0x9c, [1]=0x15, [2]=0xa9, [3]=0xe8, [4]=0xc4, [5]=0xef, [6]=0x16, [7]=0x12))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xb205bce7, Data2=0x7757, Data3=0x4e62, Data4=([0]=0x8d, [1]=0xf4, [2]=0x2d, [3]=0xe6, [4]=0x29, [5]=0x87, [6]=0x9d, [7]=0x83))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x52d03c82, Data2=0x4afc, Data3=0x4cf1, Data4=([0]=0x87, [1]=0x9a, [2]=0x97, [3]=0x4, [4]=0xf9, [5]=0x11, [6]=0x86, [7]=0x6f))) returned 0x0 [0072.144] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xa558eee8, Data2=0x9e9, Data3=0x4466, Data4=([0]=0xbe, [1]=0x82, [2]=0xb, [3]=0xcf, [4]=0x4a, [5]=0x6e, [6]=0xd3, [7]=0xa1))) returned 0x0 [0072.145] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xbf02e90d, Data2=0x456c, Data3=0x45f6, Data4=([0]=0x86, [1]=0x4c, [2]=0xc, [3]=0x51, [4]=0x79, [5]=0xb1, [6]=0xdf, [7]=0x7e))) returned 0x0 [0072.145] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xdae06614, Data2=0xdf8c, Data3=0x4511, Data4=([0]=0x9b, [1]=0x6e, [2]=0x1, [3]=0xb, [4]=0xc7, [5]=0xb1, [6]=0x6d, [7]=0xa4))) returned 0x0 [0072.145] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x644d2ec0, Data2=0xe533, Data3=0x4211, Data4=([0]=0x96, [1]=0x4d, [2]=0xdc, [3]=0xc0, [4]=0xbb, [5]=0x17, [6]=0x4c, [7]=0x35))) returned 0x0 [0072.145] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.146] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.146] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.146] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xfa0e20ec, Data2=0x4123, Data3=0x40ad, Data4=([0]=0x85, [1]=0x9e, [2]=0x7d, [3]=0xc3, [4]=0x9e, [5]=0xc6, [6]=0xda, [7]=0xd9))) returned 0x0 [0072.146] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x5a81c5f8, Data2=0x66d0, Data3=0x44ad, Data4=([0]=0x84, [1]=0x51, [2]=0x31, [3]=0x8d, [4]=0x1a, [5]=0x7d, [6]=0xac, [7]=0x57))) returned 0x0 [0072.146] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x4edbe10, Data2=0xfc87, Data3=0x41ce, Data4=([0]=0xa3, [1]=0x3f, [2]=0x54, [3]=0x5, [4]=0xa8, [5]=0x7a, [6]=0xb3, [7]=0x90))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x52cf4367, Data2=0xcd97, Data3=0x48a7, Data4=([0]=0xb7, [1]=0xfc, [2]=0xc1, [3]=0x67, [4]=0x33, [5]=0xb9, [6]=0xa2, [7]=0x1b))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x31e19bf8, Data2=0x14a2, Data3=0x4668, Data4=([0]=0xb6, [1]=0xc3, [2]=0x39, [3]=0x5b, [4]=0xc4, [5]=0x50, [6]=0x7b, [7]=0xdc))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xdab6fd2f, Data2=0xdbe1, Data3=0x40fa, Data4=([0]=0xb9, [1]=0xad, [2]=0x79, [3]=0x97, [4]=0xa6, [5]=0x11, [6]=0x40, [7]=0x5b))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x47f3dc4b, Data2=0x124a, Data3=0x45ef, Data4=([0]=0xad, [1]=0x4d, [2]=0x1d, [3]=0x4a, [4]=0x21, [5]=0xa8, [6]=0xe, [7]=0xb5))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x63e3838d, Data2=0x1d2b, Data3=0x4d5f, Data4=([0]=0xad, [1]=0xc3, [2]=0xb3, [3]=0x16, [4]=0x57, [5]=0x86, [6]=0x18, [7]=0x2))) returned 0x0 [0072.147] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x4aa1c383, Data2=0x98b6, Data3=0x47d1, Data4=([0]=0xbe, [1]=0x7a, [2]=0x63, [3]=0x7d, [4]=0xfd, [5]=0x79, [6]=0x9a, [7]=0x86))) returned 0x0 [0072.148] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x57f20d10, Data2=0xabd8, Data3=0x4f86, Data4=([0]=0x9b, [1]=0xa8, [2]=0xbb, [3]=0xa7, [4]=0xfe, [5]=0x80, [6]=0x6d, [7]=0x5f))) returned 0x0 [0072.148] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x214c7841, Data2=0x83a7, Data3=0x4e1a, Data4=([0]=0x94, [1]=0x6, [2]=0x3e, [3]=0x84, [4]=0x21, [5]=0x70, [6]=0x22, [7]=0x55))) returned 0x0 [0072.148] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe2010ee4, Data2=0x1a75, Data3=0x401c, Data4=([0]=0xad, [1]=0xcc, [2]=0xd2, [3]=0x7c, [4]=0x27, [5]=0x3c, [6]=0x49, [7]=0x14))) returned 0x0 [0072.148] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x33a1827b, Data2=0x2610, Data3=0x4b20, Data4=([0]=0x9c, [1]=0x8d, [2]=0x64, [3]=0x44, [4]=0x40, [5]=0xe8, [6]=0xda, [7]=0x82))) returned 0x0 [0072.148] VirtualQuery (in: lpAddress=0x12d760, lpBuffer=0x12e760, dwLength=0x1c | out: lpBuffer=0x12e760*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.148] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x1c76268f, Data2=0x913e, Data3=0x4023, Data4=([0]=0x92, [1]=0x2c, [2]=0x99, [3]=0xa8, [4]=0xb3, [5]=0xe, [6]=0x69, [7]=0xa3))) returned 0x0 [0072.148] VirtualQuery (in: lpAddress=0x12d760, lpBuffer=0x12e760, dwLength=0x1c | out: lpBuffer=0x12e760*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.150] VirtualQuery (in: lpAddress=0x12d760, lpBuffer=0x12e760, dwLength=0x1c | out: lpBuffer=0x12e760*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.151] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc945df08, Data2=0xace3, Data3=0x4789, Data4=([0]=0x9a, [1]=0xf1, [2]=0x7, [3]=0xa6, [4]=0xc9, [5]=0xa0, [6]=0xb4, [7]=0x15))) returned 0x0 [0072.152] VirtualQuery (in: lpAddress=0x12d760, lpBuffer=0x12e760, dwLength=0x1c | out: lpBuffer=0x12e760*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.152] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x80e9e500, Data2=0x133d, Data3=0x4302, Data4=([0]=0xa7, [1]=0x84, [2]=0x26, [3]=0x54, [4]=0x77, [5]=0xb1, [6]=0xd6, [7]=0xfc))) returned 0x0 [0072.152] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x6d8d755, Data2=0x629a, Data3=0x477e, Data4=([0]=0xac, [1]=0x7, [2]=0x9c, [3]=0xd6, [4]=0xdd, [5]=0x37, [6]=0x9b, [7]=0x9f))) returned 0x0 [0072.152] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x214b7bdf, Data2=0xe91b, Data3=0x4eaf, Data4=([0]=0xb6, [1]=0xec, [2]=0x9d, [3]=0xac, [4]=0xbf, [5]=0x2f, [6]=0x57, [7]=0x2b))) returned 0x0 [0072.152] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x2962a7e6, Data2=0xe77a, Data3=0x4718, Data4=([0]=0x82, [1]=0x76, [2]=0xf0, [3]=0x37, [4]=0x15, [5]=0xa5, [6]=0x41, [7]=0x2d))) returned 0x0 [0072.152] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xac862e6f, Data2=0x1eda, Data3=0x4c0c, Data4=([0]=0x8f, [1]=0x4b, [2]=0x69, [3]=0x82, [4]=0xdc, [5]=0xad, [6]=0x25, [7]=0xab))) returned 0x0 [0072.153] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x762a56cb, Data2=0x6e6, Data3=0x442c, Data4=([0]=0x89, [1]=0xc3, [2]=0x81, [3]=0xcf, [4]=0xb4, [5]=0xde, [6]=0x7f, [7]=0x64))) returned 0x0 [0072.153] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x8b3f3fbf, Data2=0xdca2, Data3=0x43de, Data4=([0]=0xa6, [1]=0xa0, [2]=0xda, [3]=0xb1, [4]=0x92, [5]=0xcd, [6]=0xd3, [7]=0x43))) returned 0x0 [0072.153] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.153] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xbbcd3f54, Data2=0xac15, Data3=0x4205, Data4=([0]=0x9e, [1]=0x10, [2]=0xd2, [3]=0xf5, [4]=0x5b, [5]=0xc8, [6]=0xba, [7]=0x62))) returned 0x0 [0072.153] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xda29d637, Data2=0x23f4, Data3=0x48bf, Data4=([0]=0xb6, [1]=0xd3, [2]=0xc8, [3]=0xb9, [4]=0x29, [5]=0xfc, [6]=0xa0, [7]=0x6f))) returned 0x0 [0072.154] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x3dd79190, Data2=0x9615, Data3=0x4e6e, Data4=([0]=0xb5, [1]=0x24, [2]=0xd2, [3]=0x74, [4]=0x29, [5]=0x25, [6]=0xb5, [7]=0x98))) returned 0x0 [0072.154] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x2168298d, Data2=0x1765, Data3=0x45bf, Data4=([0]=0xa8, [1]=0x42, [2]=0xd1, [3]=0xf7, [4]=0x88, [5]=0x9, [6]=0xb4, [7]=0x7e))) returned 0x0 [0072.154] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xe424f11f, Data2=0x1753, Data3=0x41d1, Data4=([0]=0xb7, [1]=0x93, [2]=0x98, [3]=0xc6, [4]=0x33, [5]=0x6b, [6]=0x5f, [7]=0xeb))) returned 0x0 [0072.154] VirtualQuery (in: lpAddress=0x12d740, lpBuffer=0x12e740, dwLength=0x1c | out: lpBuffer=0x12e740*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.154] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xd3d721a6, Data2=0xaac6, Data3=0x42be, Data4=([0]=0xb6, [1]=0xc3, [2]=0xc6, [3]=0x21, [4]=0x8d, [5]=0xfb, [6]=0x44, [7]=0x97))) returned 0x0 [0072.154] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x21f8c41c, Data2=0x6a8d, Data3=0x453f, Data4=([0]=0xad, [1]=0x30, [2]=0x38, [3]=0xb, [4]=0xf0, [5]=0x2d, [6]=0x4e, [7]=0x84))) returned 0x0 [0072.154] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.154] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.155] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.155] VirtualQuery (in: lpAddress=0x12d768, lpBuffer=0x12e768, dwLength=0x1c | out: lpBuffer=0x12e768*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.155] GetLastError () returned 0x0 [0072.155] SetErrorMode (uMode=0x1) returned 0x1 [0072.155] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.155] GetLastError () returned 0x0 [0072.155] GetFileType (hFile=0x304) returned 0x1 [0072.155] SetErrorMode (uMode=0x1) returned 0x1 [0072.156] GetFileType (hFile=0x304) returned 0x1 [0072.156] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.158] GetLastError () returned 0x0 [0072.158] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.158] GetLastError () returned 0x0 [0072.158] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.158] GetLastError () returned 0x0 [0072.158] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.158] GetLastError () returned 0x0 [0072.159] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x8b4, lpOverlapped=0x0) returned 1 [0072.159] GetLastError () returned 0x0 [0072.159] ReadFile (in: hFile=0x304, lpBuffer=0x2419b08, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2419b08*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.159] GetLastError () returned 0x0 [0072.159] ReadFile (in: hFile=0x304, lpBuffer=0x241a6b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x241a6b4*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.159] GetLastError () returned 0x0 [0072.159] CloseHandle (hObject=0x304) returned 1 [0072.159] GetLastError () returned 0x0 [0072.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.160] GetLastError () returned 0x0 [0072.160] SetErrorMode (uMode=0x1) returned 0x1 [0072.160] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x243b6b0 | out: lpFileInformation=0x243b6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0072.161] GetLastError () returned 0x0 [0072.161] SetErrorMode (uMode=0x1) returned 0x1 [0072.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.161] GetLastError () returned 0x0 [0072.161] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0072.161] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.161] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.162] RegCloseKey (hKey=0x304) returned 0x0 [0072.162] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.162] GetLastError () returned 0x0 [0072.162] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.162] GetLastError () returned 0x0 [0072.162] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xad12b24b, Data2=0xc303, Data3=0x4795, Data4=([0]=0xb1, [1]=0xe6, [2]=0xbd, [3]=0xc8, [4]=0xff, [5]=0xd3, [6]=0x32, [7]=0xba))) returned 0x0 [0072.162] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xd3eda7b2, Data2=0x9a36, Data3=0x44f7, Data4=([0]=0xb5, [1]=0x13, [2]=0x0, [3]=0xaa, [4]=0xe9, [5]=0x8c, [6]=0xfd, [7]=0x13))) returned 0x0 [0072.163] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.163] GetLastError () returned 0x0 [0072.163] SetErrorMode (uMode=0x1) returned 0x1 [0072.163] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.163] GetLastError () returned 0x0 [0072.163] GetFileType (hFile=0x304) returned 0x1 [0072.163] SetErrorMode (uMode=0x1) returned 0x1 [0072.163] GetFileType (hFile=0x304) returned 0x1 [0072.163] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.166] GetLastError () returned 0x0 [0072.166] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.166] GetLastError () returned 0x0 [0072.166] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.166] GetLastError () returned 0x0 [0072.166] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0x1000, lpOverlapped=0x0) returned 1 [0072.166] GetLastError () returned 0x0 [0072.167] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0xe98, lpOverlapped=0x0) returned 1 [0072.167] GetLastError () returned 0x0 [0072.167] ReadFile (in: hFile=0x304, lpBuffer=0x2450bf8, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x2450bf8*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.167] GetLastError () returned 0x0 [0072.167] ReadFile (in: hFile=0x304, lpBuffer=0x24515c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ea14, lpOverlapped=0x0 | out: lpBuffer=0x24515c0*, lpNumberOfBytesRead=0x12ea14*=0x0, lpOverlapped=0x0) returned 1 [0072.167] GetLastError () returned 0x0 [0072.167] CloseHandle (hObject=0x304) returned 1 [0072.167] GetLastError () returned 0x0 [0072.167] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e574, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.167] GetLastError () returned 0x0 [0072.167] SetErrorMode (uMode=0x1) returned 0x1 [0072.168] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x24725bc | out: lpFileInformation=0x24725bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0072.168] GetLastError () returned 0x0 [0072.168] SetErrorMode (uMode=0x1) returned 0x1 [0072.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.168] GetLastError () returned 0x0 [0072.168] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e998 | out: phkResult=0x12e998*=0x304) returned 0x0 [0072.168] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x0, lpcbData=0x12e9dc*=0x0 | out: lpType=0x12e9e0*=0x1, lpData=0x0, lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.169] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12e9e0, lpData=0x238c28, lpcbData=0x12e9dc*=0x56 | out: lpType=0x12e9e0*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12e9dc*=0x56) returned 0x0 [0072.169] RegCloseKey (hKey=0x304) returned 0x0 [0072.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.169] GetLastError () returned 0x0 [0072.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x12e4d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.169] GetLastError () returned 0x0 [0072.169] VirtualQuery (in: lpAddress=0x12d6f0, lpBuffer=0x12e6f0, dwLength=0x1c | out: lpBuffer=0x12e6f0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.170] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0x450f2c50, Data2=0xba9a, Data3=0x41d8, Data4=([0]=0xb2, [1]=0x92, [2]=0xc1, [3]=0xef, [4]=0xd9, [5]=0x6d, [6]=0x6d, [7]=0x10))) returned 0x0 [0072.170] CoCreateGuid (in: pguid=0x12ea08 | out: pguid=0x12ea08*(Data1=0xc5bb1b3, Data2=0xfbf2, Data3=0x4b64, Data4=([0]=0xb0, [1]=0x17, [2]=0xb0, [3]=0xeb, [4]=0xf0, [5]=0xd9, [6]=0xeb, [7]=0x60))) returned 0x0 [0072.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0072.211] GetLastError () returned 0x57 [0072.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0072.211] GetLastError () returned 0x57 [0072.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0072.231] GetLastError () returned 0x57 [0072.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0072.231] GetLastError () returned 0x57 [0072.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.235] GetLastError () returned 0x57 [0072.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.235] GetLastError () returned 0x57 [0072.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0072.239] GetLastError () returned 0x57 [0072.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0072.239] GetLastError () returned 0x57 [0072.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.242] GetLastError () returned 0x57 [0072.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.243] GetLastError () returned 0x57 [0072.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0072.245] GetLastError () returned 0x57 [0072.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0072.245] GetLastError () returned 0x57 [0072.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.248] GetLastError () returned 0x57 [0072.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.248] GetLastError () returned 0x57 [0072.253] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.253] GetLastError () returned 0xcb [0072.254] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.254] GetLastError () returned 0xcb [0072.255] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.255] GetLastError () returned 0xcb [0072.257] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.257] GetLastError () returned 0xcb [0072.262] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.262] GetLastError () returned 0xcb [0072.266] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.266] GetLastError () returned 0xcb [0072.267] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.267] GetLastError () returned 0xcb [0072.269] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea8c | out: phkResult=0x12ea8c*=0x304) returned 0x0 [0072.272] RegQueryInfoKeyW (in: hKey=0x304, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12eadc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12eae0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12eadc*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12eae0*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.275] RegEnumValueW (in: hKey=0x304, dwIndex=0x0, lpValueName=0x238c28, lpcchValueName=0x12eb04, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x12eb04, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.275] RegEnumValueW (in: hKey=0x304, dwIndex=0x1, lpValueName=0x238c28, lpcchValueName=0x12eb04, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x12eb04, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.275] RegEnumValueW (in: hKey=0x304, dwIndex=0x2, lpValueName=0x238c28, lpcchValueName=0x12eb04, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x12eb04, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.275] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x12eae4, lpData=0x0, lpcbData=0x12eae0*=0x0 | out: lpType=0x12eae4*=0x1, lpData=0x0, lpcbData=0x12eae0*=0x8) returned 0x0 [0072.276] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x12eae4, lpData=0x238c28, lpcbData=0x12eae0*=0x8 | out: lpType=0x12eae4*=0x1, lpData="2.0", lpcbData=0x12eae0*=0x8) returned 0x0 [0072.387] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea48 | out: phkResult=0x12ea48*=0x334) returned 0x0 [0072.387] RegQueryInfoKeyW (in: hKey=0x334, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12ea98, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea9c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12ea98*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea9c*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.388] RegEnumValueW (in: hKey=0x334, dwIndex=0x0, lpValueName=0x238c28, lpcchValueName=0x12eac0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x12eac0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.388] RegEnumValueW (in: hKey=0x334, dwIndex=0x1, lpValueName=0x238c28, lpcchValueName=0x12eac0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x12eac0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.388] RegEnumValueW (in: hKey=0x334, dwIndex=0x2, lpValueName=0x238c28, lpcchValueName=0x12eac0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x12eac0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.388] RegQueryValueExW (in: hKey=0x334, lpValueName="StackVersion", lpReserved=0x0, lpType=0x12eaa0, lpData=0x0, lpcbData=0x12ea9c*=0x0 | out: lpType=0x12eaa0*=0x1, lpData=0x0, lpcbData=0x12ea9c*=0x8) returned 0x0 [0072.389] RegQueryValueExW (in: hKey=0x334, lpValueName="StackVersion", lpReserved=0x0, lpType=0x12eaa0, lpData=0x238c28, lpcbData=0x12ea9c*=0x8 | out: lpType=0x12eaa0*=0x1, lpData="2.0", lpcbData=0x12ea9c*=0x8) returned 0x0 [0072.390] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.390] GetLastError () returned 0xcb [0072.397] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.397] GetLastError () returned 0xcb [0072.405] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea08 | out: phkResult=0x12ea08*=0x308) returned 0x0 [0072.405] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12ea70, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea6c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12ea70*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea6c*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.406] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x0, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.407] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x1, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.407] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x2, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.407] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x3, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.407] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x4, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.407] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x5, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.408] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x6, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.408] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x7, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.408] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x8, lpName=0x238c28, lpcchName=0x12ea8c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x12ea8c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.408] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x30c) returned 0x0 [0072.408] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.408] RegOpenKeyExW (in: hKey=0x308, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x328) returned 0x0 [0072.408] RegOpenKeyExW (in: hKey=0x328, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.408] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x338) returned 0x0 [0072.409] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.409] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x33c) returned 0x0 [0072.409] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.409] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x340) returned 0x0 [0072.409] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.409] RegOpenKeyExW (in: hKey=0x308, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x344) returned 0x0 [0072.409] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.410] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x348) returned 0x0 [0072.410] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.410] RegOpenKeyExW (in: hKey=0x308, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x34c) returned 0x0 [0072.410] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x0) returned 0x2 [0072.410] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x350) returned 0x0 [0072.410] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea38 | out: phkResult=0x12ea38*=0x354) returned 0x0 [0072.410] RegCloseKey (hKey=0x354) returned 0x0 [0072.410] RegCloseKey (hKey=0x308) returned 0x0 [0072.411] RegCloseKey (hKey=0x350) returned 0x0 [0072.493] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.495] GetLastError () returned 0x3 [0072.496] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.552] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e9ec | out: phkResult=0x12e9ec*=0x358) returned 0x0 [0072.552] RegQueryInfoKeyW (in: hKey=0x358, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12ea54, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea50, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12ea54*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea50*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.552] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x0, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.552] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x1, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.553] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x2, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.553] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x3, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.553] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x4, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.553] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x5, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.553] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x6, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.554] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x7, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.554] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x8, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.554] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x35c) returned 0x0 [0072.554] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.555] RegOpenKeyExW (in: hKey=0x358, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x360) returned 0x0 [0072.555] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.555] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x364) returned 0x0 [0072.555] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.555] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x368) returned 0x0 [0072.556] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.556] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x36c) returned 0x0 [0072.556] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.556] RegOpenKeyExW (in: hKey=0x358, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x370) returned 0x0 [0072.556] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.557] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x374) returned 0x0 [0072.557] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.557] RegOpenKeyExW (in: hKey=0x358, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x378) returned 0x0 [0072.557] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.557] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x37c) returned 0x0 [0072.558] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x380) returned 0x0 [0072.558] RegCloseKey (hKey=0x380) returned 0x0 [0072.558] RegCloseKey (hKey=0x358) returned 0x0 [0072.558] RegCloseKey (hKey=0x37c) returned 0x0 [0072.558] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e9ec | out: phkResult=0x12e9ec*=0x37c) returned 0x0 [0072.559] RegQueryInfoKeyW (in: hKey=0x37c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12ea54, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea50, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12ea54*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea50*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.559] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x0, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.559] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x1, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.559] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x2, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.559] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x3, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.560] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x4, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.560] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x5, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.560] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x6, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.561] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x7, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.561] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x8, lpName=0x238c28, lpcchName=0x12ea70, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x12ea70, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.561] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x358) returned 0x0 [0072.562] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.562] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x380) returned 0x0 [0072.562] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.562] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x384) returned 0x0 [0072.562] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.563] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x388) returned 0x0 [0072.563] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.563] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x38c) returned 0x0 [0072.563] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.563] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x390) returned 0x0 [0072.564] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.564] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x394) returned 0x0 [0072.564] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.564] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x398) returned 0x0 [0072.564] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x0) returned 0x2 [0072.565] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x39c) returned 0x0 [0072.565] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea1c | out: phkResult=0x12ea1c*=0x3a0) returned 0x0 [0072.565] RegCloseKey (hKey=0x3a0) returned 0x0 [0072.565] RegCloseKey (hKey=0x37c) returned 0x0 [0072.566] RegCloseKey (hKey=0x39c) returned 0x0 [0072.566] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x12e9e0 | out: phkResult=0x12e9e0*=0x39c) returned 0x0 [0072.567] RegQueryInfoKeyW (in: hKey=0x39c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x12ea48, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea44, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x12ea48*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x12ea44*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.567] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x0, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.567] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x1, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.567] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x2, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.567] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x3, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.568] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x4, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.568] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x5, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.568] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x6, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.568] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x7, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.568] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x8, lpName=0x238c28, lpcchName=0x12ea64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x12ea64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.569] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x37c) returned 0x0 [0072.569] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.569] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3a0) returned 0x0 [0072.569] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.569] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3a4) returned 0x0 [0072.569] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.569] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3a8) returned 0x0 [0072.570] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.570] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3ac) returned 0x0 [0072.570] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.570] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3b0) returned 0x0 [0072.570] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.571] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3b4) returned 0x0 [0072.571] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.571] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3b8) returned 0x0 [0072.571] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x0) returned 0x2 [0072.571] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3bc) returned 0x0 [0072.571] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ea10 | out: phkResult=0x12ea10*=0x3c0) returned 0x0 [0072.571] RegCloseKey (hKey=0x3c0) returned 0x0 [0072.572] RegCloseKey (hKey=0x39c) returned 0x0 [0072.572] RegCloseKey (hKey=0x3bc) returned 0x0 [0072.575] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4340004 [0072.578] GetLastError () returned 0x0 [0072.579] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x24f2cc8*="WSMan", lpRawData=0x24f2b70) returned 1 [0072.580] GetLastError () returned 0x0 [0072.582] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.582] GetLastError () returned 0xcb [0072.582] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e584, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.583] GetLastError () returned 0xcb [0072.583] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.583] GetLastError () returned 0xcb [0072.583] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.583] GetLastError () returned 0xcb [0072.583] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.583] GetLastError () returned 0xcb [0072.583] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.584] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x24f6b50*="Alias", lpRawData=0x24f6a0c) returned 1 [0072.584] GetLastError () returned 0x0 [0072.584] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.585] GetLastError () returned 0xcb [0072.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e584, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.585] GetLastError () returned 0xcb [0072.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.585] GetLastError () returned 0xcb [0072.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.585] GetLastError () returned 0xcb [0072.585] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.585] GetLastError () returned 0xcb [0072.586] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.586] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x24faa90*="Environment", lpRawData=0x24fa94c) returned 1 [0072.586] GetLastError () returned 0x0 [0072.587] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.587] GetLastError () returned 0xcb [0072.587] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0072.587] GetLastError () returned 0xcb [0072.587] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0072.587] GetLastError () returned 0xcb [0072.587] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5", nBufferLength=0x105, lpBuffer=0x12e6b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5", lpFilePart=0x0) returned 0x10 [0072.587] GetLastError () returned 0xcb [0072.588] SetErrorMode (uMode=0x1) returned 0x1 [0072.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5" (normalized: "c:\\users\\eebsym5"), fInfoLevelId=0x0, lpFileInformation=0x12eb34 | out: lpFileInformation=0x12eb34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.588] GetLastError () returned 0xcb [0072.588] SetErrorMode (uMode=0x1) returned 0x1 [0072.588] GetLogicalDrives () returned 0x4 [0072.589] GetLastError () returned 0xcb [0072.589] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e5d8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.589] GetLastError () returned 0xcb [0072.591] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.591] GetLastError () returned 0xcb [0072.591] SetErrorMode (uMode=0x1) returned 0x1 [0072.593] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x238d28, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x12eb00, lpMaximumComponentLength=0x12eafc, lpFileSystemFlags=0x12eaf8, lpFileSystemNameBuffer=0x238c28, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x12eb00*=0x90c08a66, lpMaximumComponentLength=0x12eafc*=0xff, lpFileSystemFlags=0x12eaf8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0072.593] GetLastError () returned 0xcb [0072.593] SetErrorMode (uMode=0x1) returned 0x1 [0072.593] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.593] GetLastError () returned 0xcb [0072.593] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e660, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.593] GetLastError () returned 0xcb [0072.593] SetErrorMode (uMode=0x1) returned 0x1 [0072.594] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24fbc2c | out: lpFileInformation=0x24fbc2c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.594] GetLastError () returned 0xcb [0072.594] SetErrorMode (uMode=0x1) returned 0x1 [0072.594] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e660, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.594] GetLastError () returned 0xcb [0072.594] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e5ec, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.594] GetLastError () returned 0xcb [0072.594] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.594] GetLastError () returned 0xcb [0072.595] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e5a8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.596] GetLastError () returned 0xcb [0072.596] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.596] GetLastError () returned 0xcb [0072.596] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.596] GetLastError () returned 0xcb [0072.596] SetErrorMode (uMode=0x1) returned 0x1 [0072.596] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24fc884 | out: lpFileInformation=0x24fc884*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.596] GetLastError () returned 0xcb [0072.598] SetErrorMode (uMode=0x1) returned 0x1 [0072.598] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e5b8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.598] GetLastError () returned 0xcb [0072.598] SetErrorMode (uMode=0x1) returned 0x1 [0072.598] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24fc9d4 | out: lpFileInformation=0x24fc9d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.598] GetLastError () returned 0xcb [0072.598] SetErrorMode (uMode=0x1) returned 0x1 [0072.599] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e5fc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.599] GetLastError () returned 0xcb [0072.599] SetErrorMode (uMode=0x1) returned 0x1 [0072.599] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x24fcb74 | out: lpFileInformation=0x24fcb74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.599] GetLastError () returned 0xcb [0072.599] SetErrorMode (uMode=0x1) returned 0x1 [0072.599] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.599] GetLastError () returned 0xcb [0072.599] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.600] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x24ff8a8*="FileSystem", lpRawData=0x24ff764) returned 1 [0072.601] GetLastError () returned 0x0 [0072.602] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.602] GetLastError () returned 0xcb [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0xcb [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e550, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0xcb [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e550, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0xcb [0072.603] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.603] GetLastError () returned 0xcb [0072.603] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.603] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2503944*="Function", lpRawData=0x2503800) returned 1 [0072.604] GetLastError () returned 0x0 [0072.605] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.605] GetLastError () returned 0xcb [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e598, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0xcb [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e548, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0xcb [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e548, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0xcb [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e548, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0xcb [0072.632] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.633] GetLastError () returned 0xcb [0072.633] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.634] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x251c9a4*="Registry", lpRawData=0x251c860) returned 1 [0072.635] GetLastError () returned 0x0 [0072.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e584, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.636] GetLastError () returned 0x0 [0072.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.636] GetLastError () returned 0x0 [0072.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.636] GetLastError () returned 0x0 [0072.636] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.637] GetLastError () returned 0x0 [0072.637] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.637] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2520738*="Variable", lpRawData=0x25205f4) returned 1 [0072.638] GetLastError () returned 0x0 [0072.640] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.640] GetLastError () returned 0xcb [0072.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.643] GetLastError () returned 0xcb [0072.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e584, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.645] GetLastError () returned 0xcb [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.646] GetLastError () returned 0xcb [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.646] GetLastError () returned 0xcb [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x12e534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.646] GetLastError () returned 0xcb [0072.703] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12eb84 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12eb84) returned 0x1 [0072.705] GetLastError () returned 0x3 [0072.705] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12eb8c | out: lpBuffer="EEBsYm5", pcbBuffer=0x12eb8c) returned 1 [0072.705] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x252e4a8*="Certificate", lpRawData=0x252e364) returned 1 [0072.707] GetLastError () returned 0x0 [0072.720] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.721] GetLastError () returned 0xcb [0072.723] GetLogicalDrives () returned 0x4 [0072.723] GetLastError () returned 0xcb [0072.723] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e6fc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.723] GetLastError () returned 0xcb [0072.723] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0072.723] GetLastError () returned 0xcb [0072.724] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x238c28 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0072.724] GetLastError () returned 0xcb [0072.725] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.725] GetLastError () returned 0xcb [0072.725] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.725] GetLastError () returned 0xcb [0072.735] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.735] GetLastError () returned 0xcb [0072.737] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.737] GetLastError () returned 0xcb [0072.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.738] GetLastError () returned 0xcb [0072.738] SetErrorMode (uMode=0x1) returned 0x1 [0072.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x25353c8 | out: lpFileInformation=0x25353c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.738] GetLastError () returned 0xcb [0072.738] SetErrorMode (uMode=0x1) returned 0x1 [0072.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e54c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.738] GetLastError () returned 0xcb [0072.738] SetErrorMode (uMode=0x1) returned 0x1 [0072.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x253555c | out: lpFileInformation=0x253555c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.738] GetLastError () returned 0xcb [0072.738] SetErrorMode (uMode=0x1) returned 0x1 [0072.739] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.739] GetLastError () returned 0xcb [0072.741] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.741] GetLastError () returned 0xcb [0072.742] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.742] GetLastError () returned 0xcb [0072.742] SetErrorMode (uMode=0x1) returned 0x1 [0072.742] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.742] GetLastError () returned 0xcb [0072.742] SetErrorMode (uMode=0x1) returned 0x1 [0072.742] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.742] GetLastError () returned 0xcb [0072.742] SetErrorMode (uMode=0x1) returned 0x1 [0072.742] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0072.742] GetLastError () returned 0xcb [0072.742] SetErrorMode (uMode=0x1) returned 0x1 [0072.742] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12e624, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.742] GetLastError () returned 0xcb [0072.742] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0072.742] GetLastError () returned 0xcb [0072.742] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.742] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.743] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.743] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.743] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e624, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.743] GetLastError () returned 0xcb [0072.743] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x12e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.743] GetLastError () returned 0xcb [0072.743] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.743] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.743] GetLastError () returned 0xcb [0072.743] SetErrorMode (uMode=0x1) returned 0x1 [0072.743] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e610, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.743] GetLastError () returned 0xcb [0072.744] SetErrorMode (uMode=0x1) returned 0x1 [0072.744] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x12ea90 | out: lpFileInformation=0x12ea90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.744] GetLastError () returned 0xcb [0072.744] SetErrorMode (uMode=0x1) returned 0x1 [0072.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e624, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.744] GetLastError () returned 0xcb [0072.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x12e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.744] GetLastError () returned 0xcb [0072.744] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e61c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.744] GetLastError () returned 0xcb [0072.744] SetErrorMode (uMode=0x1) returned 0x1 [0072.744] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x12ea9c | out: lpFileInformation=0x12ea9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.744] GetLastError () returned 0xcb [0072.744] SetErrorMode (uMode=0x1) returned 0x1 [0072.744] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e61c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.744] GetLastError () returned 0xcb [0072.744] SetErrorMode (uMode=0x1) returned 0x1 [0072.745] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x12ea9c | out: lpFileInformation=0x12ea9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.745] GetLastError () returned 0xcb [0072.745] SetErrorMode (uMode=0x1) returned 0x1 [0072.745] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x12e630, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.745] GetLastError () returned 0xcb [0072.745] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x12e5cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0072.745] GetLastError () returned 0xcb [0072.745] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e61c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.745] GetLastError () returned 0xcb [0072.745] SetErrorMode (uMode=0x1) returned 0x1 [0072.745] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x12ea9c | out: lpFileInformation=0x12ea9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.745] GetLastError () returned 0xcb [0072.745] SetErrorMode (uMode=0x1) returned 0x1 [0072.745] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e61c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.745] GetLastError () returned 0xcb [0072.745] SetErrorMode (uMode=0x1) returned 0x1 [0072.745] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x12ea9c | out: lpFileInformation=0x12ea9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.746] GetLastError () returned 0xcb [0072.746] SetErrorMode (uMode=0x1) returned 0x1 [0072.746] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e630, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.746] GetLastError () returned 0xcb [0072.746] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x12e5cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.746] GetLastError () returned 0xcb [0072.748] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x12e6ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0072.748] GetLastError () returned 0xcb [0072.748] SetErrorMode (uMode=0x1) returned 0x1 [0072.748] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x253d304 | out: lpFileInformation=0x253d304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0072.748] GetLastError () returned 0xcb [0072.748] SetErrorMode (uMode=0x1) returned 0x1 [0072.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e734, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.749] GetLastError () returned 0xcb [0072.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.750] GetLastError () returned 0xcb [0072.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.750] GetLastError () returned 0xcb [0072.750] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.750] GetLastError () returned 0xcb [0072.796] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12ec88 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12ec88) returned 0x1 [0072.796] GetLastError () returned 0xcb [0072.797] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12ec90 | out: lpBuffer="EEBsYm5", pcbBuffer=0x12ec90) returned 1 [0072.799] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2555310*="Available", lpRawData=0x25551cc) returned 1 [0072.800] GetLastError () returned 0x0 [0072.801] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.801] GetLastError () returned 0xcb [0072.801] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.801] GetLastError () returned 0xcb [0072.805] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e768, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.805] GetLastError () returned 0xcb [0072.805] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.805] GetLastError () returned 0xcb [0072.805] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.805] GetLastError () returned 0xcb [0072.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.806] GetLastError () returned 0xcb [0072.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.806] GetLastError () returned 0xcb [0072.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.806] GetLastError () returned 0xcb [0072.807] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0072.807] GetLastError () returned 0xcb [0072.807] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0072.807] GetLastError () returned 0xcb [0072.807] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.807] GetLastError () returned 0xcb [0072.807] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.807] GetLastError () returned 0xcb [0072.807] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.807] GetLastError () returned 0xcb [0072.807] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.808] GetLastError () returned 0xcb [0072.808] GetCurrentProcessId () returned 0xe78 [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.809] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.810] GetLastError () returned 0xcb [0072.811] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ec1c | out: phkResult=0x12ec1c*=0x39c) returned 0x0 [0072.811] RegQueryValueExW (in: hKey=0x39c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ec64, lpData=0x0, lpcbData=0x12ec60*=0x0 | out: lpType=0x12ec64*=0x1, lpData=0x0, lpcbData=0x12ec60*=0x56) returned 0x0 [0072.811] RegQueryValueExW (in: hKey=0x39c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ec64, lpData=0x238c28, lpcbData=0x12ec60*=0x56 | out: lpType=0x12ec64*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12ec60*=0x56) returned 0x0 [0072.811] RegCloseKey (hKey=0x39c) returned 0x0 [0072.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.811] GetLastError () returned 0xcb [0072.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.812] GetLastError () returned 0xcb [0072.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.812] GetLastError () returned 0xcb [0072.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.812] GetLastError () returned 0xcb [0072.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.812] GetLastError () returned 0xcb [0072.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e6a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.812] GetLastError () returned 0xcb [0072.813] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.813] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.814] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.814] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.814] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.814] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.814] GetLastError () returned 0xcb [0072.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.815] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.816] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.817] GetLastError () returned 0xcb [0072.817] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.818] GetLastError () returned 0xcb [0072.818] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.819] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.819] GetLastError () returned 0xcb [0072.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.826] GetLastError () returned 0xcb [0072.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.826] GetLastError () returned 0xcb [0072.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.826] GetLastError () returned 0xcb [0072.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.826] GetLastError () returned 0xcb [0072.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.868] GetLastError () returned 0xcb [0072.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.868] GetLastError () returned 0xcb [0072.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.868] GetLastError () returned 0xcb [0072.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.868] GetLastError () returned 0xcb [0072.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.868] GetLastError () returned 0xcb [0072.869] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12dd14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.869] GetLastError () returned 0xcb [0072.869] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.871] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.871] GetLastError () returned 0xcb [0072.877] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.890] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.890] GetLastError () returned 0xcb [0072.891] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.891] GetLastError () returned 0xcb [0072.895] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.895] GetLastError () returned 0xcb [0072.900] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.900] GetLastError () returned 0xcb [0072.900] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.900] GetLastError () returned 0xcb [0072.901] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.903] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.924] GetLastError () returned 0xcb [0072.935] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.939] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.939] GetLastError () returned 0xcb [0073.799] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x236228 [0073.799] GetLastError () returned 0x0 [0073.799] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x2362b0 [0073.800] GetLastError () returned 0x0 [0073.904] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.938] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.940] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.942] VirtualQuery (in: lpAddress=0x12c944, lpBuffer=0x12d944, dwLength=0x1c | out: lpBuffer=0x12d944*(BaseAddress=0x12c000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.968] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.968] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.968] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.968] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.969] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.970] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.971] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.972] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.973] VirtualQuery (in: lpAddress=0x12d290, lpBuffer=0x12e290, dwLength=0x1c | out: lpBuffer=0x12e290*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.975] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.975] GetLastError () returned 0xcb [0073.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.980] GetLastError () returned 0xcb [0073.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.980] GetLastError () returned 0xcb [0073.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.980] GetLastError () returned 0xcb [0073.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.980] GetLastError () returned 0xcb [0073.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.980] GetLastError () returned 0xcb [0074.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.037] GetLastError () returned 0xcb [0074.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.037] GetLastError () returned 0xcb [0074.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.037] GetLastError () returned 0xcb [0074.037] VirtualQuery (in: lpAddress=0x12d5b8, lpBuffer=0x12e5b8, dwLength=0x1c | out: lpBuffer=0x12e5b8*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.040] GetLastError () returned 0xcb [0074.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.040] GetLastError () returned 0xcb [0074.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x12e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.040] GetLastError () returned 0xcb [0074.040] VirtualQuery (in: lpAddress=0x12d5b0, lpBuffer=0x12e5b0, dwLength=0x1c | out: lpBuffer=0x12e5b0*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.040] VirtualQuery (in: lpAddress=0x12d264, lpBuffer=0x12e264, dwLength=0x1c | out: lpBuffer=0x12e264*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.040] VirtualQuery (in: lpAddress=0x12d264, lpBuffer=0x12e264, dwLength=0x1c | out: lpBuffer=0x12e264*(BaseAddress=0x12d000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.044] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ecec | out: phkResult=0x12ecec*=0x3cc) returned 0x0 [0074.046] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ed34, lpData=0x0, lpcbData=0x12ed30*=0x0 | out: lpType=0x12ed34*=0x1, lpData=0x0, lpcbData=0x12ed30*=0x56) returned 0x0 [0074.046] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ed34, lpData=0x238c28, lpcbData=0x12ed30*=0x56 | out: lpType=0x12ed34*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12ed30*=0x56) returned 0x0 [0074.046] RegCloseKey (hKey=0x3cc) returned 0x0 [0074.047] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ecec | out: phkResult=0x12ecec*=0x3cc) returned 0x0 [0074.047] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ed34, lpData=0x0, lpcbData=0x12ed30*=0x0 | out: lpType=0x12ed34*=0x1, lpData=0x0, lpcbData=0x12ed30*=0x56) returned 0x0 [0074.047] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x12ed34, lpData=0x238c28, lpcbData=0x12ed30*=0x56 | out: lpType=0x12ed34*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x12ed30*=0x56) returned 0x0 [0074.048] RegCloseKey (hKey=0x3cc) returned 0x0 [0074.050] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x238c28 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0074.050] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0074.051] GetLastError () returned 0x3f0 [0074.051] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x238c28 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0074.051] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x12e884, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0074.051] GetLastError () returned 0x3f0 [0074.054] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0x12e91c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0074.054] GetLastError () returned 0x3f0 [0074.054] SetErrorMode (uMode=0x1) returned 0x1 [0074.054] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x12ed9c | out: lpFileInformation=0x12ed9c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.056] GetLastError () returned 0x2 [0074.056] SetErrorMode (uMode=0x1) returned 0x1 [0074.056] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x12e91c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0074.056] GetLastError () returned 0x2 [0074.056] SetErrorMode (uMode=0x1) returned 0x1 [0074.056] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x12ed9c | out: lpFileInformation=0x12ed9c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.056] GetLastError () returned 0x2 [0074.056] SetErrorMode (uMode=0x1) returned 0x1 [0074.056] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0x12e91c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x38 [0074.057] GetLastError () returned 0x2 [0074.057] SetErrorMode (uMode=0x1) returned 0x1 [0074.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x12ed9c | out: lpFileInformation=0x12ed9c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.057] GetLastError () returned 0x3 [0074.057] SetErrorMode (uMode=0x1) returned 0x1 [0074.057] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x12e91c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4d [0074.057] GetLastError () returned 0x3 [0074.057] SetErrorMode (uMode=0x1) returned 0x1 [0074.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x12ed9c | out: lpFileInformation=0x12ed9c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.058] GetLastError () returned 0x3 [0074.058] SetErrorMode (uMode=0x1) returned 0x1 [0074.059] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.060] GetLastError () returned 0xcb [0074.067] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.067] GetLastError () returned 0xcb [0074.068] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.068] GetLastError () returned 0xcb [0074.068] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.068] GetLastError () returned 0xcb [0074.069] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.069] GetLastError () returned 0xcb [0074.069] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3cc [0074.069] GetLastError () returned 0x0 [0074.070] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3d0 [0074.070] GetLastError () returned 0x0 [0074.070] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3d4 [0074.070] GetLastError () returned 0x0 [0074.070] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3d8 [0074.070] GetLastError () returned 0x0 [0074.070] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3dc [0074.070] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3e0 [0074.071] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e4 [0074.071] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e8 [0074.071] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3ec [0074.071] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3f0 [0074.071] GetLastError () returned 0x0 [0074.071] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f4 [0074.072] GetLastError () returned 0x0 [0074.072] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f8 [0074.072] GetLastError () returned 0x0 [0074.072] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.072] GetLastError () returned 0xcb [0074.073] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.073] GetLastError () returned 0xcb [0074.075] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0074.075] GetLastError () returned 0xcb [0074.076] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x12eddc | out: lpMode=0x12eddc) returned 1 [0074.077] GetLastError () returned 0xcb [0074.082] SetEvent (hEvent=0x3d8) returned 1 [0074.082] GetLastError () returned 0xcb [0074.082] SetEvent (hEvent=0x3cc) returned 1 [0074.082] GetLastError () returned 0xcb [0074.083] SetEvent (hEvent=0x3d0) returned 1 [0074.083] GetLastError () returned 0xcb [0074.083] SetEvent (hEvent=0x3d4) returned 1 [0074.083] GetLastError () returned 0xcb [0074.083] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3fc [0074.083] GetLastError () returned 0x0 [0074.084] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.084] GetLastError () returned 0xcb [0074.086] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ec40 | out: phkResult=0x12ec40*=0x400) returned 0x0 [0074.086] RegQueryValueExW (in: hKey=0x400, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x12ec88, lpData=0x0, lpcbData=0x12ec84*=0x0 | out: lpType=0x12ec88*=0x0, lpData=0x0, lpcbData=0x12ec84*=0x0) returned 0x2 [0244.933] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x418 [0244.933] GetLastError () returned 0x0 [0244.933] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x334 [0244.933] GetLastError () returned 0x0 [0244.933] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x374 [0244.933] GetLastError () returned 0x0 [0244.933] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x484 [0244.933] GetLastError () returned 0x0 [0244.933] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x47c [0244.933] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x480 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x478 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x340 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x344 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x4a0 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x384 [0244.934] GetLastError () returned 0x0 [0244.934] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x38c [0244.934] GetLastError () returned 0x0 [0244.934] SetEvent (hEvent=0x484) returned 1 [0244.934] GetLastError () returned 0x0 [0244.935] SetEvent (hEvent=0x418) returned 1 [0244.935] GetLastError () returned 0x0 [0244.935] SetEvent (hEvent=0x334) returned 1 [0244.935] GetLastError () returned 0x0 [0244.935] SetEvent (hEvent=0x374) returned 1 [0244.935] GetLastError () returned 0x0 [0244.935] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x49c [0244.935] GetLastError () returned 0x0 [0244.935] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ec74 | out: phkResult=0x12ec74*=0x440) returned 0x0 [0244.935] RegQueryValueExW (in: hKey=0x440, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x12ecbc, lpData=0x0, lpcbData=0x12ecb8*=0x0 | out: lpType=0x12ecbc*=0x0, lpData=0x0, lpcbData=0x12ecb8*=0x0) returned 0x2 [0245.144] SetEvent (hEvent=0x47c) returned 1 [0245.144] GetLastError () returned 0x0 [0245.144] SetEvent (hEvent=0x480) returned 1 [0245.144] GetLastError () returned 0x0 [0245.144] SetEvent (hEvent=0x478) returned 1 [0245.144] GetLastError () returned 0x0 [0245.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x238c28, nSize=0x80 | out: lpBuffer="") returned 0x0 [0245.160] GetLastError () returned 0xcb [0245.166] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x227460, nSize=0x12ed50 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x12ed50) returned 0x1 [0245.167] GetLastError () returned 0xcb [0245.167] GetUserNameW (in: lpBuffer=0x238c28, pcbBuffer=0x12ed58 | out: lpBuffer="EEBsYm5", pcbBuffer=0x12ed58) returned 1 [0245.169] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x64daae4*="Stopped", lpRawData=0x64da9a0) returned 1 [0245.232] GetLastError () returned 0x0 [0245.233] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0245.233] GetLastError () returned 0x0 [0245.236] CoGetContextToken (in: pToken=0x12fa80 | out: pToken=0x12fa80) returned 0x0 [0245.236] IUnknown:QueryInterface (in: This=0x1d57d0, riid=0x6c983ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fab4 | out: ppvObject=0x12fab4*=0x1d57dc) returned 0x0 [0245.236] IComThreadingInfo:GetCurrentThreadType (in: This=0x1d57dc, pThreadType=0x12fb24 | out: pThreadType=0x12fb24*=0) returned 0x0 [0245.236] IUnknown:Release (This=0x1d57dc) returned 0x1 [0245.239] CoGetContextToken (in: pToken=0x12f858 | out: pToken=0x12f858) returned 0x0 [0245.239] IUnknown:QueryInterface (in: This=0x1d57d0, riid=0x6c983ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12f88c | out: ppvObject=0x12f88c*=0x1d57dc) returned 0x0 [0245.239] IComThreadingInfo:GetCurrentThreadType (in: This=0x1d57dc, pThreadType=0x12f8c0 | out: pThreadType=0x12f8c0*=0) returned 0x0 [0245.239] IUnknown:Release (This=0x1d57dc) returned 0x1 [0245.243] CoGetContextToken (in: pToken=0x12f858 | out: pToken=0x12f858) returned 0x0 [0245.243] IUnknown:QueryInterface (in: This=0x1d57d0, riid=0x6c983ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12f88c | out: ppvObject=0x12f88c*=0x1d57dc) returned 0x0 [0245.243] IComThreadingInfo:GetCurrentThreadType (in: This=0x1d57dc, pThreadType=0x12f8c0 | out: pThreadType=0x12f8c0*=0) returned 0x0 [0245.243] IUnknown:Release (This=0x1d57dc) returned 0x1 [0245.261] CoGetContextToken (in: pToken=0x12f858 | out: pToken=0x12f858) returned 0x0 [0245.261] IUnknown:QueryInterface (in: This=0x1d57d0, riid=0x6c983ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12f88c | out: ppvObject=0x12f88c*=0x1d57dc) returned 0x0 [0245.262] IComThreadingInfo:GetCurrentThreadType (in: This=0x1d57dc, pThreadType=0x12f8c0 | out: pThreadType=0x12f8c0*=0) returned 0x0 [0245.262] IUnknown:Release (This=0x1d57dc) returned 0x1 [0245.383] CoGetContextToken (in: pToken=0x12f838 | out: pToken=0x12f838) returned 0x0 [0245.383] IUnknown:QueryInterface (in: This=0x1d57d0, riid=0x6c983ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12f86c | out: ppvObject=0x12f86c*=0x1d57dc) returned 0x0 [0245.384] IComThreadingInfo:GetCurrentThreadType (in: This=0x1d57dc, pThreadType=0x12f8a0 | out: pThreadType=0x12f8a0*=0) returned 0x0 [0245.384] IUnknown:Release (This=0x1d57dc) returned 0x1 [0245.414] CoUninitialize () Thread: id = 2 os_tid = 0xe90 Thread: id = 3 os_tid = 0xe94 Thread: id = 4 os_tid = 0xe9c Thread: id = 5 os_tid = 0xea4 Thread: id = 6 os_tid = 0xea8 [0063.644] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0071.131] LocalFree (hMem=0x245320) returned 0x0 [0071.131] GetLastError () returned 0x0 [0071.131] CloseHandle (hObject=0x328) returned 1 [0071.131] GetLastError () returned 0x0 [0071.131] CloseHandle (hObject=0x13) returned 1 [0071.132] GetLastError () returned 0x0 [0071.132] CloseHandle (hObject=0xf) returned 1 [0071.132] GetLastError () returned 0x0 [0071.132] RegCloseKey (hKey=0x30c) returned 0x0 [0071.132] RegCloseKey (hKey=0x308) returned 0x0 [0071.133] RegCloseKey (hKey=0x304) returned 0x0 [0071.133] LocalFree (hMem=0x245340) returned 0x0 [0071.133] GetLastError () returned 0x0 [0071.133] RegCloseKey (hKey=0x334) returned 0x0 [0072.125] RegCloseKey (hKey=0x334) returned 0x0 [0074.238] RegCloseKey (hKey=0x3a0) returned 0x0 [0074.238] RegCloseKey (hKey=0x37c) returned 0x0 [0074.238] RegCloseKey (hKey=0x400) returned 0x0 [0074.239] RegCloseKey (hKey=0x398) returned 0x0 [0074.239] RegCloseKey (hKey=0x394) returned 0x0 [0074.239] RegCloseKey (hKey=0x390) returned 0x0 [0074.240] RegCloseKey (hKey=0x38c) returned 0x0 [0074.240] RegCloseKey (hKey=0x388) returned 0x0 [0074.240] RegCloseKey (hKey=0x384) returned 0x0 [0074.241] RegCloseKey (hKey=0x380) returned 0x0 [0074.241] RegCloseKey (hKey=0x358) returned 0x0 [0074.241] RegCloseKey (hKey=0x3b8) returned 0x0 [0074.242] RegCloseKey (hKey=0x378) returned 0x0 [0074.242] RegCloseKey (hKey=0x374) returned 0x0 [0074.242] RegCloseKey (hKey=0x370) returned 0x0 [0074.243] RegCloseKey (hKey=0x36c) returned 0x0 [0074.243] RegCloseKey (hKey=0x368) returned 0x0 [0074.243] RegCloseKey (hKey=0x364) returned 0x0 [0074.243] RegCloseKey (hKey=0x360) returned 0x0 [0074.244] RegCloseKey (hKey=0x35c) returned 0x0 [0074.244] RegCloseKey (hKey=0x3b4) returned 0x0 [0074.245] RegCloseKey (hKey=0x34c) returned 0x0 [0074.245] RegCloseKey (hKey=0x348) returned 0x0 [0074.245] RegCloseKey (hKey=0x344) returned 0x0 [0074.246] RegCloseKey (hKey=0x340) returned 0x0 [0074.246] RegCloseKey (hKey=0x33c) returned 0x0 [0074.247] RegCloseKey (hKey=0x338) returned 0x0 [0074.247] RegCloseKey (hKey=0x328) returned 0x0 [0074.247] RegCloseKey (hKey=0x30c) returned 0x0 [0074.247] RegCloseKey (hKey=0x3b0) returned 0x0 [0074.248] RegCloseKey (hKey=0x334) returned 0x0 [0074.248] RegCloseKey (hKey=0x304) returned 0x0 [0074.248] RegCloseKey (hKey=0x3ac) returned 0x0 [0074.248] RegCloseKey (hKey=0x3a8) returned 0x0 [0074.249] RegCloseKey (hKey=0x3a4) returned 0x0 [0086.404] CloseHandle (hObject=0x418) returned 1 [0086.404] GetLastError () returned 0x0 [0086.404] CloseHandle (hObject=0x304) returned 1 [0086.404] GetLastError () returned 0x0 [0086.405] CloseHandle (hObject=0x3a8) returned 1 [0086.405] GetLastError () returned 0x0 [0115.248] CoGetContextToken (in: pToken=0x1d0f608 | out: pToken=0x1d0f608) returned 0x0 [0115.248] CoGetContextToken (in: pToken=0x1d0f598 | out: pToken=0x1d0f598) returned 0x0 [0115.248] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x0 [0115.248] CoGetContextToken (in: pToken=0x1d0f598 | out: pToken=0x1d0f598) returned 0x0 [0115.248] IUnknown:Release (This=0x765dcd8) returned 0x1 [0115.249] IUnknown:Release (This=0x765dcd8) returned 0x0 [0115.249] CoGetContextToken (in: pToken=0x1d0f564 | out: pToken=0x1d0f564) returned 0x0 [0115.249] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x1 [0115.250] IUnknown:Release (This=0x765cbcc) returned 0x0 [0115.920] CoGetContextToken (in: pToken=0x1d0f608 | out: pToken=0x1d0f608) returned 0x0 [0115.920] CoGetContextToken (in: pToken=0x1d0f598 | out: pToken=0x1d0f598) returned 0x0 [0115.920] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0115.920] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x0 [0115.920] CoGetContextToken (in: pToken=0x1d0f598 | out: pToken=0x1d0f598) returned 0x0 [0115.920] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x1 [0115.921] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x0 [0115.922] CoGetContextToken (in: pToken=0x1d0f598 | out: pToken=0x1d0f598) returned 0x0 [0115.922] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0115.922] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x0 [0121.432] CloseHandle (hObject=0x388) returned 1 [0121.433] GetLastError () returned 0x0 [0121.434] CloseHandle (hObject=0x390) returned 1 [0121.434] GetLastError () returned 0x0 [0121.434] CloseHandle (hObject=0x454) returned 1 [0121.435] GetLastError () returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.242] LocalFree (hMem=0x2362b0) returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.242] LocalFree (hMem=0x236228) returned 0x0 [0245.242] GetLastError () returned 0x0 [0245.249] IUnknown:Release (This=0x766b010) returned 0x1 [0245.250] IUnknown:Release (This=0x766a690) returned 0x1 [0245.250] IUnknown:Release (This=0x7669d00) returned 0x1 [0245.251] IUnknown:Release (This=0x7669770) returned 0x1 [0245.251] IUnknown:Release (This=0x76691e0) returned 0x1 [0245.252] IUnknown:Release (This=0x7668c50) returned 0x1 [0245.252] IUnknown:Release (This=0x76686c0) returned 0x1 [0245.253] IUnknown:Release (This=0x7668130) returned 0x1 [0245.253] IUnknown:Release (This=0x7666ba0) returned 0x1 [0245.254] IUnknown:Release (This=0x76665a0) returned 0x1 [0245.261] DeregisterEventSource (hEventLog=0x4340004) returned 1 [0245.262] GetLastError () returned 0x0 [0245.267] IUnknown:Release (This=0x76663a8) returned 0x0 [0245.268] IUnknown:Release (This=0x7666028) returned 0x0 [0245.268] IUnknown:Release (This=0x76600c0) returned 0x0 [0245.269] IUnknown:Release (This=0x7660070) returned 0x0 [0245.269] IUnknown:Release (This=0x7665c18) returned 0x0 [0245.269] IUnknown:Release (This=0x7665898) returned 0x0 [0245.270] IUnknown:Release (This=0x7660020) returned 0x0 [0245.270] IUnknown:Release (This=0x765ffd0) returned 0x0 [0245.271] IUnknown:Release (This=0x7665488) returned 0x0 [0245.271] IUnknown:Release (This=0x7665108) returned 0x0 [0245.272] IUnknown:Release (This=0x7664e78) returned 0x0 [0245.272] IUnknown:Release (This=0x7664c80) returned 0x0 [0245.273] IUnknown:Release (This=0x7664900) returned 0x0 [0245.273] IUnknown:Release (This=0x7664690) returned 0x0 [0245.273] IUnknown:Release (This=0x765f008) returned 0x0 [0245.274] IUnknown:Release (This=0x7664098) returned 0x0 [0245.274] IUnknown:Release (This=0x7663ba8) returned 0x0 [0245.275] IUnknown:Release (This=0x7663720) returned 0x0 [0245.275] IUnknown:Release (This=0x76633a0) returned 0x0 [0245.276] IUnknown:Release (This=0x7662f90) returned 0x0 [0245.276] IUnknown:Release (This=0x765ee10) returned 0x0 [0245.277] IUnknown:Release (This=0x765e720) returned 0x0 [0245.277] IUnknown:Release (This=0x765cae8) returned 0x1 [0245.278] CoGetContextToken (in: pToken=0x1d0f56c | out: pToken=0x1d0f56c) returned 0x0 [0245.278] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x1 [0245.278] IUnknown:Release (This=0x765dc9c) returned 0x0 [0245.366] CloseHandle (hObject=0x3e8) returned 1 [0245.366] GetLastError () returned 0x0 [0245.366] CloseHandle (hObject=0x3e4) returned 1 [0245.366] GetLastError () returned 0x0 [0245.366] CloseHandle (hObject=0x3e0) returned 1 [0245.367] GetLastError () returned 0x0 [0245.367] CloseHandle (hObject=0x3dc) returned 1 [0245.367] GetLastError () returned 0x0 [0245.367] CloseHandle (hObject=0x3d8) returned 1 [0245.367] GetLastError () returned 0x0 [0245.368] CloseHandle (hObject=0x3d4) returned 1 [0245.368] GetLastError () returned 0x0 [0245.368] CloseHandle (hObject=0x3d0) returned 1 [0245.368] GetLastError () returned 0x0 [0245.368] CloseHandle (hObject=0x3cc) returned 1 [0245.368] GetLastError () returned 0x0 [0245.369] CloseHandle (hObject=0x3fc) returned 1 [0245.369] GetLastError () returned 0x0 [0245.369] CloseHandle (hObject=0x47c) returned 1 [0245.369] GetLastError () returned 0x0 [0245.370] CloseHandle (hObject=0x484) returned 1 [0245.370] GetLastError () returned 0x0 [0245.370] CloseHandle (hObject=0x374) returned 1 [0245.370] GetLastError () returned 0x0 [0245.370] CloseHandle (hObject=0x334) returned 1 [0245.370] GetLastError () returned 0x0 [0245.371] CloseHandle (hObject=0x418) returned 1 [0245.371] GetLastError () returned 0x0 [0245.371] RegCloseKey (hKey=0x440) returned 0x0 [0245.371] CloseHandle (hObject=0x49c) returned 1 [0245.372] GetLastError () returned 0x0 [0245.372] CloseHandle (hObject=0x38c) returned 1 [0245.372] GetLastError () returned 0x0 [0245.373] CloseHandle (hObject=0x3a8) returned 1 [0245.373] GetLastError () returned 0x0 [0245.373] CloseHandle (hObject=0x384) returned 1 [0245.373] GetLastError () returned 0x0 [0245.373] CloseHandle (hObject=0x4a0) returned 1 [0245.374] GetLastError () returned 0x0 [0245.374] CloseHandle (hObject=0x344) returned 1 [0245.374] GetLastError () returned 0x0 [0245.374] CloseHandle (hObject=0xf) returned 1 [0245.375] GetLastError () returned 0x0 [0245.375] CloseHandle (hObject=0x340) returned 1 [0245.375] GetLastError () returned 0x0 [0245.375] CloseHandle (hObject=0x478) returned 1 [0245.375] GetLastError () returned 0x0 [0245.376] CloseHandle (hObject=0x480) returned 1 [0245.376] GetLastError () returned 0x0 [0245.377] CloseHandle (hObject=0x3f8) returned 1 [0245.377] GetLastError () returned 0x0 [0245.378] UnmapViewOfFile (lpBaseAddress=0x42a0000) returned 1 [0245.379] CloseHandle (hObject=0x330) returned 1 [0245.379] GetLastError () returned 0x0 [0245.379] RegCloseKey (hKey=0x80000004) returned 0x0 [0245.379] CloseHandle (hObject=0x3f4) returned 1 [0245.379] GetLastError () returned 0x0 [0245.380] CloseHandle (hObject=0x2ec) returned 1 [0245.380] GetLastError () returned 0x0 [0245.380] CloseHandle (hObject=0x3f0) returned 1 [0245.380] GetLastError () returned 0x0 [0245.381] CloseHandle (hObject=0x320) returned 1 [0245.381] GetLastError () returned 0x0 [0245.381] CloseHandle (hObject=0x3ec) returned 1 [0245.381] GetLastError () returned 0x0 [0245.387] CoGetContextToken (in: pToken=0x1d0e05c | out: pToken=0x1d0e05c) returned 0x0 [0245.388] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.388] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0245.388] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x0 [0245.388] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.388] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0245.388] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x0 [0245.389] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.389] IUnknown:Release (This=0x7666ba0) returned 0x0 [0245.389] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.389] IUnknown:Release (This=0x765cae8) returned 0x0 [0245.389] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.389] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0245.390] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x0 [0245.390] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.390] IUnknown:Release (This=0x766a690) returned 0x0 [0245.390] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.390] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0245.391] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x0 [0245.391] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.391] IUnknown:Release (This=0x76686c0) returned 0x0 [0245.391] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.391] IUnknown:Release (This=0x7669d00) returned 0x0 [0245.392] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.392] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0245.392] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x0 [0245.392] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.392] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0245.392] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x0 [0245.393] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.393] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0245.393] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x0 [0245.393] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.393] IUnknown:Release (This=0x7669770) returned 0x0 [0245.394] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.394] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0245.394] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x0 [0245.394] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.394] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x1 [0245.395] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x0 [0245.399] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.399] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0245.399] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x0 [0245.400] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.400] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0245.400] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x0 [0245.400] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.400] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0245.400] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x0 [0245.401] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.401] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0245.401] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x0 [0245.401] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.401] IUnknown:Release (This=0x76665a0) returned 0x0 [0245.401] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.402] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0245.402] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x0 [0245.402] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.402] IUnknown:Release (This=0x7668c50) returned 0x0 [0245.402] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.402] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0245.403] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x0 [0245.403] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.403] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0245.403] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x0 [0245.403] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.404] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0245.404] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x0 [0245.404] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.404] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0245.404] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x0 [0245.405] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.405] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0245.405] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x0 [0245.405] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.405] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x0 [0245.406] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.406] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0245.406] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x0 [0245.406] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.406] IUnknown:Release (This=0x766b010) returned 0x0 [0245.407] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.407] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0245.407] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x0 [0245.407] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.407] IUnknown:Release (This=0x7668130) returned 0x0 [0245.407] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.408] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0245.408] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x0 [0245.408] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.408] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0245.408] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x0 [0245.409] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.409] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0245.409] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x0 [0245.409] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.409] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0245.409] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x0 [0245.410] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.410] IUnknown:Release (This=0x76691e0) returned 0x0 [0245.410] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.410] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0245.410] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x0 [0245.411] CoGetContextToken (in: pToken=0x1d0dfec | out: pToken=0x1d0dfec) returned 0x0 [0245.411] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0245.411] IUnknown:Release (This=0x1d57d0) returned 0x0 [0245.411] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x0 Thread: id = 7 os_tid = 0xeec [0074.098] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0074.158] SetThreadUILanguage (LangId=0x0) returned 0x409 [0074.168] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.169] GetLastError () returned 0xcb [0074.188] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515e9a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.188] GetLastError () returned 0x0 [0074.188] SetErrorMode (uMode=0x1) returned 0x1 [0074.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), fInfoLevelId=0x0, lpFileInformation=0x27230d0 | out: lpFileInformation=0x27230d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65)) returned 1 [0074.189] GetLastError () returned 0x0 [0074.189] SetErrorMode (uMode=0x1) returned 0x1 [0074.193] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515ec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.193] GetLastError () returned 0x0 [0074.193] SetErrorMode (uMode=0x1) returned 0x1 [0074.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), fInfoLevelId=0x0, lpFileInformation=0x515f110 | out: lpFileInformation=0x515f110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65)) returned 1 [0074.193] GetLastError () returned 0x0 [0074.193] SetErrorMode (uMode=0x1) returned 0x1 [0074.195] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515ec58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.195] GetLastError () returned 0x0 [0074.195] SetErrorMode (uMode=0x1) returned 0x1 [0074.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), fInfoLevelId=0x0, lpFileInformation=0x515f0d8 | out: lpFileInformation=0x515f0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65)) returned 1 [0074.195] GetLastError () returned 0x0 [0074.195] SetErrorMode (uMode=0x1) returned 0x1 [0074.196] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515ec84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.196] GetLastError () returned 0x0 [0074.196] SetErrorMode (uMode=0x1) returned 0x1 [0074.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2724de0 | out: lpFileInformation=0x2724de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65)) returned 1 [0074.196] GetLastError () returned 0x0 [0074.196] SetErrorMode (uMode=0x1) returned 0x1 [0074.196] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515ec50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.196] GetLastError () returned 0x0 [0074.198] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.198] GetLastError () returned 0xcb [0074.199] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f05c | out: phkResult=0x515f05c*=0x0) returned 0x2 [0074.199] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f05c | out: phkResult=0x515f05c*=0x0) returned 0x2 [0074.200] GetEnvironmentVariableW (in: lpName="PSExecutionPolicyPreference", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.200] GetLastError () returned 0xcb [0074.200] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f05c | out: phkResult=0x515f05c*=0x0) returned 0x2 [0074.200] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x515f05c | out: phkResult=0x515f05c*=0x418) returned 0x0 [0074.200] RegQueryValueExW (in: hKey=0x418, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x515f0a4, lpData=0x0, lpcbData=0x515f0a0*=0x0 | out: lpType=0x515f0a4*=0x1, lpData=0x0, lpcbData=0x515f0a0*=0xe) returned 0x0 [0074.200] RegQueryValueExW (in: hKey=0x418, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x515f0a4, lpData=0x22bd40, lpcbData=0x515f0a0*=0xe | out: lpType=0x515f0a4*=0x1, lpData="Bypass", lpcbData=0x515f0a0*=0xe) returned 0x0 [0074.201] RegCloseKey (hKey=0x418) returned 0x0 [0074.204] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", nBufferLength=0x105, lpBuffer=0x515eb7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1", lpFilePart=0x0) returned 0x41 [0074.204] GetLastError () returned 0xcb [0074.204] SetErrorMode (uMode=0x1) returned 0x1 [0074.204] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\skyfall_user wilsonk_wilsonk_ste.txt.ps1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x418 [0074.204] GetLastError () returned 0x0 [0074.204] GetFileType (hFile=0x418) returned 0x1 [0074.204] SetErrorMode (uMode=0x1) returned 0x1 [0074.205] GetFileType (hFile=0x418) returned 0x1 [0074.205] ReadFile (in: hFile=0x418, lpBuffer=0x2727a34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2727a34*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.207] GetLastError () returned 0x0 [0074.207] ReadFile (in: hFile=0x418, lpBuffer=0x2727a34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2727a34*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.207] GetLastError () returned 0x0 [0074.207] ReadFile (in: hFile=0x418, lpBuffer=0x2727a34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2727a34*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.207] GetLastError () returned 0x0 [0074.250] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.250] GetLastError () returned 0x0 [0074.250] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.250] GetLastError () returned 0x0 [0074.250] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.250] GetLastError () returned 0x0 [0074.251] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.251] GetLastError () returned 0x0 [0074.251] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.251] GetLastError () returned 0x0 [0074.251] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.251] GetLastError () returned 0x0 [0074.253] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.253] GetLastError () returned 0x0 [0074.253] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.253] GetLastError () returned 0x0 [0074.253] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.253] GetLastError () returned 0x0 [0074.253] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.254] GetLastError () returned 0x0 [0074.254] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.254] GetLastError () returned 0x0 [0074.254] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.254] GetLastError () returned 0x0 [0074.254] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.254] GetLastError () returned 0x0 [0074.254] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.254] GetLastError () returned 0x0 [0074.258] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.259] GetLastError () returned 0x0 [0074.259] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.259] GetLastError () returned 0x0 [0074.259] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.259] GetLastError () returned 0x0 [0074.259] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.259] GetLastError () returned 0x0 [0074.259] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.260] GetLastError () returned 0x0 [0074.260] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.260] GetLastError () returned 0x0 [0074.260] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.260] GetLastError () returned 0x0 [0074.260] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.260] GetLastError () returned 0x0 [0074.260] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.260] GetLastError () returned 0x0 [0074.261] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.261] GetLastError () returned 0x0 [0074.261] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.261] GetLastError () returned 0x0 [0074.261] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.261] GetLastError () returned 0x0 [0074.261] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.261] GetLastError () returned 0x0 [0074.261] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.262] GetLastError () returned 0x0 [0074.262] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.262] GetLastError () returned 0x0 [0074.262] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.262] GetLastError () returned 0x0 [0074.271] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.271] GetLastError () returned 0x0 [0074.272] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.272] GetLastError () returned 0x0 [0074.272] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.272] GetLastError () returned 0x0 [0074.272] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.272] GetLastError () returned 0x0 [0074.272] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.273] GetLastError () returned 0x0 [0074.273] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.273] GetLastError () returned 0x0 [0074.273] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.273] GetLastError () returned 0x0 [0074.273] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.273] GetLastError () returned 0x0 [0074.273] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.273] GetLastError () returned 0x0 [0074.274] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.274] GetLastError () returned 0x0 [0074.274] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.274] GetLastError () returned 0x0 [0074.274] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.274] GetLastError () returned 0x0 [0074.275] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.275] GetLastError () returned 0x0 [0074.275] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.275] GetLastError () returned 0x0 [0074.275] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.275] GetLastError () returned 0x0 [0074.275] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.275] GetLastError () returned 0x0 [0074.276] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.276] GetLastError () returned 0x0 [0074.276] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.276] GetLastError () returned 0x0 [0074.276] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.276] GetLastError () returned 0x0 [0074.276] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.277] GetLastError () returned 0x0 [0074.277] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.277] GetLastError () returned 0x0 [0074.277] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.277] GetLastError () returned 0x0 [0074.277] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.278] GetLastError () returned 0x0 [0074.278] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.278] GetLastError () returned 0x0 [0074.278] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.278] GetLastError () returned 0x0 [0074.278] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.279] GetLastError () returned 0x0 [0074.279] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.279] GetLastError () returned 0x0 [0074.279] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.279] GetLastError () returned 0x0 [0074.280] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.280] GetLastError () returned 0x0 [0074.280] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.280] GetLastError () returned 0x0 [0074.280] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.280] GetLastError () returned 0x0 [0074.280] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.282] GetLastError () returned 0x0 [0074.295] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.295] GetLastError () returned 0x0 [0074.295] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.295] GetLastError () returned 0x0 [0074.295] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.295] GetLastError () returned 0x0 [0074.295] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.296] GetLastError () returned 0x0 [0074.296] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.296] GetLastError () returned 0x0 [0074.296] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.296] GetLastError () returned 0x0 [0074.296] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.296] GetLastError () returned 0x0 [0074.297] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.297] GetLastError () returned 0x0 [0074.297] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.297] GetLastError () returned 0x0 [0074.297] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.297] GetLastError () returned 0x0 [0074.297] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.298] GetLastError () returned 0x0 [0074.298] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.298] GetLastError () returned 0x0 [0074.298] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.298] GetLastError () returned 0x0 [0074.298] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.298] GetLastError () returned 0x0 [0074.298] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.299] GetLastError () returned 0x0 [0074.299] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.299] GetLastError () returned 0x0 [0074.299] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.299] GetLastError () returned 0x0 [0074.299] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.299] GetLastError () returned 0x0 [0074.300] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.300] GetLastError () returned 0x0 [0074.300] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.300] GetLastError () returned 0x0 [0074.300] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.300] GetLastError () returned 0x0 [0074.300] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.301] GetLastError () returned 0x0 [0074.301] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.301] GetLastError () returned 0x0 [0074.301] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.301] GetLastError () returned 0x0 [0074.301] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.301] GetLastError () returned 0x0 [0074.301] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.302] GetLastError () returned 0x0 [0074.302] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.302] GetLastError () returned 0x0 [0074.302] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.302] GetLastError () returned 0x0 [0074.302] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.302] GetLastError () returned 0x0 [0074.303] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.303] GetLastError () returned 0x0 [0074.303] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.303] GetLastError () returned 0x0 [0074.303] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.303] GetLastError () returned 0x0 [0074.303] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.304] GetLastError () returned 0x0 [0074.304] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.304] GetLastError () returned 0x0 [0074.304] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.304] GetLastError () returned 0x0 [0074.304] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.304] GetLastError () returned 0x0 [0074.305] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.305] GetLastError () returned 0x0 [0074.305] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.305] GetLastError () returned 0x0 [0074.305] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.305] GetLastError () returned 0x0 [0074.305] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.306] GetLastError () returned 0x0 [0074.306] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.306] GetLastError () returned 0x0 [0074.306] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.306] GetLastError () returned 0x0 [0074.306] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.306] GetLastError () returned 0x0 [0074.307] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.307] GetLastError () returned 0x0 [0074.307] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.307] GetLastError () returned 0x0 [0074.307] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.307] GetLastError () returned 0x0 [0074.307] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.308] GetLastError () returned 0x0 [0074.308] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.308] GetLastError () returned 0x0 [0074.308] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.308] GetLastError () returned 0x0 [0074.308] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.308] GetLastError () returned 0x0 [0074.308] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.309] GetLastError () returned 0x0 [0074.309] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.309] GetLastError () returned 0x0 [0074.309] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.309] GetLastError () returned 0x0 [0074.309] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.310] GetLastError () returned 0x0 [0074.310] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.310] GetLastError () returned 0x0 [0074.310] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.310] GetLastError () returned 0x0 [0074.310] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.310] GetLastError () returned 0x0 [0074.311] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.311] GetLastError () returned 0x0 [0074.311] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.311] GetLastError () returned 0x0 [0074.311] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.311] GetLastError () returned 0x0 [0074.311] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.311] GetLastError () returned 0x0 [0074.312] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.312] GetLastError () returned 0x0 [0074.312] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.312] GetLastError () returned 0x0 [0074.312] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.314] GetLastError () returned 0x0 [0074.347] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.348] GetLastError () returned 0x0 [0074.348] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.348] GetLastError () returned 0x0 [0074.348] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.348] GetLastError () returned 0x0 [0074.349] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.349] GetLastError () returned 0x0 [0074.349] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.349] GetLastError () returned 0x0 [0074.349] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.350] GetLastError () returned 0x0 [0074.350] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.350] GetLastError () returned 0x0 [0074.350] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.350] GetLastError () returned 0x0 [0074.350] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.351] GetLastError () returned 0x0 [0074.351] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.351] GetLastError () returned 0x0 [0074.351] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.351] GetLastError () returned 0x0 [0074.352] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.352] GetLastError () returned 0x0 [0074.352] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.352] GetLastError () returned 0x0 [0074.352] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.352] GetLastError () returned 0x0 [0074.353] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.353] GetLastError () returned 0x0 [0074.353] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.353] GetLastError () returned 0x0 [0074.353] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.354] GetLastError () returned 0x0 [0074.354] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.354] GetLastError () returned 0x0 [0074.354] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.354] GetLastError () returned 0x0 [0074.355] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.355] GetLastError () returned 0x0 [0074.355] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.355] GetLastError () returned 0x0 [0074.355] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.355] GetLastError () returned 0x0 [0074.356] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.356] GetLastError () returned 0x0 [0074.356] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.356] GetLastError () returned 0x0 [0074.356] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.356] GetLastError () returned 0x0 [0074.357] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.357] GetLastError () returned 0x0 [0074.357] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.357] GetLastError () returned 0x0 [0074.357] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.358] GetLastError () returned 0x0 [0074.358] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.358] GetLastError () returned 0x0 [0074.358] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.358] GetLastError () returned 0x0 [0074.359] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.359] GetLastError () returned 0x0 [0074.359] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.359] GetLastError () returned 0x0 [0074.359] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.360] GetLastError () returned 0x0 [0074.360] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.360] GetLastError () returned 0x0 [0074.360] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.360] GetLastError () returned 0x0 [0074.361] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.361] GetLastError () returned 0x0 [0074.361] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.361] GetLastError () returned 0x0 [0074.361] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.361] GetLastError () returned 0x0 [0074.362] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.362] GetLastError () returned 0x0 [0074.362] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.362] GetLastError () returned 0x0 [0074.363] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.363] GetLastError () returned 0x0 [0074.363] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.363] GetLastError () returned 0x0 [0074.363] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.363] GetLastError () returned 0x0 [0074.364] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.364] GetLastError () returned 0x0 [0074.364] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.364] GetLastError () returned 0x0 [0074.365] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.365] GetLastError () returned 0x0 [0074.365] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.365] GetLastError () returned 0x0 [0074.366] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.366] GetLastError () returned 0x0 [0074.366] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.366] GetLastError () returned 0x0 [0074.366] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.366] GetLastError () returned 0x0 [0074.367] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.367] GetLastError () returned 0x0 [0074.367] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.368] GetLastError () returned 0x0 [0074.368] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.368] GetLastError () returned 0x0 [0074.369] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.369] GetLastError () returned 0x0 [0074.369] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.369] GetLastError () returned 0x0 [0074.369] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.370] GetLastError () returned 0x0 [0074.370] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.370] GetLastError () returned 0x0 [0074.370] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.370] GetLastError () returned 0x0 [0074.371] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.371] GetLastError () returned 0x0 [0074.371] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.371] GetLastError () returned 0x0 [0074.371] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.372] GetLastError () returned 0x0 [0074.372] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.372] GetLastError () returned 0x0 [0074.372] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.372] GetLastError () returned 0x0 [0074.373] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.374] GetLastError () returned 0x0 [0074.375] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.375] GetLastError () returned 0x0 [0074.375] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.376] GetLastError () returned 0x0 [0074.376] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.376] GetLastError () returned 0x0 [0074.376] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.376] GetLastError () returned 0x0 [0074.377] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.377] GetLastError () returned 0x0 [0074.377] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.377] GetLastError () returned 0x0 [0074.378] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.378] GetLastError () returned 0x0 [0074.378] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.378] GetLastError () returned 0x0 [0074.379] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.379] GetLastError () returned 0x0 [0074.379] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.379] GetLastError () returned 0x0 [0074.379] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.380] GetLastError () returned 0x0 [0074.380] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.380] GetLastError () returned 0x0 [0074.380] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.380] GetLastError () returned 0x0 [0074.381] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.381] GetLastError () returned 0x0 [0074.381] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.381] GetLastError () returned 0x0 [0074.381] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.382] GetLastError () returned 0x0 [0074.382] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.382] GetLastError () returned 0x0 [0074.382] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.382] GetLastError () returned 0x0 [0074.383] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.383] GetLastError () returned 0x0 [0074.383] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.383] GetLastError () returned 0x0 [0074.384] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.384] GetLastError () returned 0x0 [0074.384] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.384] GetLastError () returned 0x0 [0074.385] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.385] GetLastError () returned 0x0 [0074.385] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.385] GetLastError () returned 0x0 [0074.386] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.386] GetLastError () returned 0x0 [0074.386] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.386] GetLastError () returned 0x0 [0074.386] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.387] GetLastError () returned 0x0 [0074.387] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.387] GetLastError () returned 0x0 [0074.387] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.387] GetLastError () returned 0x0 [0074.388] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.388] GetLastError () returned 0x0 [0074.388] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.388] GetLastError () returned 0x0 [0074.389] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x1000, lpOverlapped=0x0) returned 1 [0074.389] GetLastError () returned 0x0 [0074.389] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0xc65, lpOverlapped=0x0) returned 1 [0074.389] GetLastError () returned 0x0 [0074.390] ReadFile (in: hFile=0x418, lpBuffer=0x212feb5, nNumberOfBytesToRead=0x39b, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x212feb5*, lpNumberOfBytesRead=0x515f0e4*=0x0, lpOverlapped=0x0) returned 1 [0074.390] GetLastError () returned 0x0 [0074.390] ReadFile (in: hFile=0x418, lpBuffer=0x2130a7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x515f0e4, lpOverlapped=0x0 | out: lpBuffer=0x2130a7c*, lpNumberOfBytesRead=0x515f0e4*=0x0, lpOverlapped=0x0) returned 1 [0074.390] GetLastError () returned 0x0 [0074.391] CloseHandle (hObject=0x418) returned 1 [0074.391] GetLastError () returned 0x0 [0074.401] VirtualQuery (in: lpAddress=0x515e0ec, lpBuffer=0x515f0ec, dwLength=0x1c | out: lpBuffer=0x515f0ec*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0077.893] VirtualQuery (in: lpAddress=0x515db34, lpBuffer=0x515eb34, dwLength=0x1c | out: lpBuffer=0x515eb34*(BaseAddress=0x515d000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0077.945] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.945] GetLastError () returned 0xcb [0077.959] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.959] GetLastError () returned 0xcb [0078.001] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.001] GetLastError () returned 0xcb [0078.006] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.006] GetLastError () returned 0xcb [0078.008] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.008] GetLastError () returned 0xcb [0078.023] VirtualQuery (in: lpAddress=0x515e2fc, lpBuffer=0x515f2fc, dwLength=0x1c | out: lpBuffer=0x515f2fc*(BaseAddress=0x515e000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0078.025] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.025] GetLastError () returned 0xcb [0078.031] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.031] GetLastError () returned 0xcb [0078.032] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.032] GetLastError () returned 0xcb [0078.064] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.064] GetLastError () returned 0xcb [0078.146] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.146] GetLastError () returned 0xcb [0078.255] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.255] GetLastError () returned 0xcb [0078.259] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.259] GetLastError () returned 0xcb [0078.263] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.263] GetLastError () returned 0xcb [0078.268] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.268] GetLastError () returned 0xcb [0078.270] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.270] GetLastError () returned 0xcb [0078.273] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.273] GetLastError () returned 0xcb [0078.277] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.277] GetLastError () returned 0xcb [0078.360] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.360] GetLastError () returned 0xcb [0078.536] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.536] GetLastError () returned 0xcb [0078.813] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.813] GetLastError () returned 0xcb [0080.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x515e548, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0080.255] GetLastError () returned 0xcb [0080.712] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0080.712] GetLastError () returned 0xcb [0080.717] GetCurrentProcess () returned 0xffffffff [0080.717] GetLastError () returned 0x3f0 [0080.717] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ed80 | out: TokenHandle=0x515ed80*=0x418) returned 1 [0080.717] GetLastError () returned 0x3f0 [0080.726] GetVersionExW (in: lpVersionInformation=0x22bdb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x22bdb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0080.726] GetLastError () returned 0x3f0 [0080.757] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x2a4ac0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0080.757] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x515e934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0080.757] GetLastError () returned 0x0 [0080.760] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np", nBufferLength=0x105, lpBuffer=0x515e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np", lpFilePart=0x0) returned 0x2c [0080.760] GetLastError () returned 0x0 [0080.760] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np", nBufferLength=0x105, lpBuffer=0x515e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np", lpFilePart=0x0) returned 0x2c [0080.760] GetLastError () returned 0x0 [0080.760] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp", nBufferLength=0x105, lpBuffer=0x515e844, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp", lpFilePart=0x0) returned 0x30 [0080.760] GetLastError () returned 0x0 [0080.760] SetErrorMode (uMode=0x1) returned 0x1 [0080.761] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.765] GetLastError () returned 0x0 [0080.765] GetFileType (hFile=0x3a4) returned 0x1 [0080.766] SetErrorMode (uMode=0x1) returned 0x1 [0080.766] GetFileType (hFile=0x3a4) returned 0x1 [0080.767] CloseHandle (hObject=0x3a4) returned 1 [0080.767] GetLastError () returned 0x0 [0080.768] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs", nBufferLength=0x105, lpBuffer=0x515e8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs", lpFilePart=0x0) returned 0x31 [0080.768] GetLastError () returned 0x0 [0080.768] SetErrorMode (uMode=0x1) returned 0x1 [0080.768] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.776] GetLastError () returned 0x0 [0080.776] GetFileType (hFile=0x3a4) returned 0x1 [0080.776] SetErrorMode (uMode=0x1) returned 0x1 [0080.776] GetFileType (hFile=0x3a4) returned 0x1 [0080.779] WriteFile (in: hFile=0x3a4, lpBuffer=0x668aa80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x515edcc, lpOverlapped=0x0 | out: lpBuffer=0x668aa80*, lpNumberOfBytesWritten=0x515edcc*=0x1000, lpOverlapped=0x0) returned 1 [0080.781] GetLastError () returned 0x0 [0080.781] WriteFile (in: hFile=0x3a4, lpBuffer=0x668aa80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x515edcc, lpOverlapped=0x0 | out: lpBuffer=0x668aa80*, lpNumberOfBytesWritten=0x515edcc*=0x1000, lpOverlapped=0x0) returned 1 [0080.782] GetLastError () returned 0x0 [0080.782] WriteFile (in: hFile=0x3a4, lpBuffer=0x668aa80*, nNumberOfBytesToWrite=0x3ee, lpNumberOfBytesWritten=0x515ede8, lpOverlapped=0x0 | out: lpBuffer=0x668aa80*, lpNumberOfBytesWritten=0x515ede8*=0x3ee, lpOverlapped=0x0) returned 1 [0080.782] GetLastError () returned 0x0 [0080.786] CloseHandle (hObject=0x3a4) returned 1 [0080.790] GetLastError () returned 0x0 [0080.797] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", nBufferLength=0x105, lpBuffer=0x515e854, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", lpFilePart=0x0) returned 0x30 [0080.797] GetLastError () returned 0x0 [0080.797] SetErrorMode (uMode=0x1) returned 0x1 [0080.797] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.798] GetLastError () returned 0x0 [0080.798] GetFileType (hFile=0x3a4) returned 0x1 [0080.798] SetErrorMode (uMode=0x1) returned 0x1 [0080.798] GetFileType (hFile=0x3a4) returned 0x1 [0080.798] CloseHandle (hObject=0x3a4) returned 1 [0080.799] GetLastError () returned 0x0 [0080.803] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline", nBufferLength=0x105, lpBuffer=0x515e818, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline", lpFilePart=0x0) returned 0x34 [0080.803] GetLastError () returned 0x0 [0080.804] SetErrorMode (uMode=0x1) returned 0x1 [0080.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.805] GetLastError () returned 0x0 [0080.805] GetFileType (hFile=0x3a4) returned 0x1 [0080.805] SetErrorMode (uMode=0x1) returned 0x1 [0080.805] GetFileType (hFile=0x3a4) returned 0x1 [0080.806] WriteFile (in: hFile=0x3a4, lpBuffer=0x668e45c*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x515ed60, lpOverlapped=0x0 | out: lpBuffer=0x668e45c*, lpNumberOfBytesWritten=0x515ed60*=0x139, lpOverlapped=0x0) returned 1 [0080.809] GetLastError () returned 0x0 [0080.811] CloseHandle (hObject=0x3a4) returned 1 [0080.812] GetLastError () returned 0x0 [0080.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515e8c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0080.815] GetLastError () returned 0x0 [0080.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x515e908, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0080.815] GetLastError () returned 0x0 [0080.815] SetErrorMode (uMode=0x1) returned 0x1 [0080.815] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x515ed88 | out: lpFileInformation=0x515ed88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0080.817] GetLastError () returned 0x0 [0080.817] SetErrorMode (uMode=0x1) returned 0x1 [0080.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x2a4ac0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0080.818] GetLastError () returned 0x0 [0080.818] GetCurrentProcess () returned 0xffffffff [0080.818] GetLastError () returned 0x3f0 [0080.818] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ecb8 | out: TokenHandle=0x515ecb8*=0x3a8) returned 1 [0080.818] GetLastError () returned 0x3f0 [0080.821] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out", nBufferLength=0x105, lpBuffer=0x515e704, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out", lpFilePart=0x0) returned 0x30 [0080.821] GetLastError () returned 0x3f0 [0080.821] SetErrorMode (uMode=0x1) returned 0x1 [0080.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x6690434, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.822] GetLastError () returned 0x0 [0080.822] GetFileType (hFile=0x3a4) returned 0x1 [0080.822] SetErrorMode (uMode=0x1) returned 0x1 [0080.822] GetFileType (hFile=0x3a4) returned 0x1 [0080.822] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err", nBufferLength=0x105, lpBuffer=0x515e704, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err", lpFilePart=0x0) returned 0x30 [0080.822] GetLastError () returned 0x0 [0080.822] SetErrorMode (uMode=0x1) returned 0x1 [0080.823] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x6690644, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0080.823] GetLastError () returned 0x0 [0080.823] GetFileType (hFile=0x3ac) returned 0x1 [0080.824] SetErrorMode (uMode=0x1) returned 0x1 [0080.824] GetFileType (hFile=0x3ac) returned 0x1 [0080.825] WriteFile (in: hFile=0x3a4, lpBuffer=0x6691f9c*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x515ec58, lpOverlapped=0x0 | out: lpBuffer=0x6691f9c*, lpNumberOfBytesWritten=0x515ec58*=0x18c, lpOverlapped=0x0) returned 1 [0080.827] GetLastError () returned 0x0 [0080.827] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0080.844] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x669dfa8, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x22bdb0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x3a4, hStdError=0x3ac), lpProcessInformation=0x66907d8 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline\"", lpProcessInformation=0x66907d8*(hProcess=0x334, hThread=0x304, dwProcessId=0xef8, dwThreadId=0xefc)) returned 1 [0080.865] GetLastError () returned 0x7f [0080.866] CloseHandle (hObject=0x3a4) returned 1 [0080.878] GetLastError () returned 0x7f [0080.878] CloseHandle (hObject=0x3ac) returned 1 [0080.878] GetLastError () returned 0x7f [0080.882] WaitForSingleObject (hHandle=0x334, dwMilliseconds=0x927c0) returned 0x0 [0086.042] GetLastError () returned 0x7f [0086.042] GetExitCodeProcess (in: hProcess=0x334, lpExitCode=0x515ed44 | out: lpExitCode=0x515ed44*=0x0) returned 1 [0086.042] GetLastError () returned 0x7f [0086.042] CloseHandle (hObject=0x334) returned 1 [0086.042] GetLastError () returned 0x7f [0086.042] CloseHandle (hObject=0x304) returned 1 [0086.042] GetLastError () returned 0x7f [0086.043] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", nBufferLength=0x105, lpBuffer=0x515e850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", lpFilePart=0x0) returned 0x30 [0086.043] GetLastError () returned 0x7f [0086.043] SetErrorMode (uMode=0x1) returned 0x1 [0086.043] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0086.043] GetLastError () returned 0x0 [0086.043] GetFileType (hFile=0x304) returned 0x1 [0086.043] SetErrorMode (uMode=0x1) returned 0x1 [0086.043] GetFileType (hFile=0x304) returned 0x1 [0086.045] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x515ee04 | out: lpFileSizeHigh=0x515ee04*=0x0) returned 0x1800 [0086.045] GetLastError () returned 0x0 [0086.045] ReadFile (in: hFile=0x304, lpBuffer=0x669e838, nNumberOfBytesToRead=0x1800, lpNumberOfBytesRead=0x515edac, lpOverlapped=0x0 | out: lpBuffer=0x669e838*, lpNumberOfBytesRead=0x515edac*=0x1800, lpOverlapped=0x0) returned 1 [0086.047] GetLastError () returned 0x0 [0086.063] CloseHandle (hObject=0x304) returned 1 [0086.063] GetLastError () returned 0x0 [0086.063] GetCurrentProcess () returned 0xffffffff [0086.063] GetLastError () returned 0x3f0 [0086.064] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515eda4 | out: TokenHandle=0x515eda4*=0x304) returned 1 [0086.064] GetLastError () returned 0x3f0 [0086.065] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll", lpFilePart=0x0) returned 0x30 [0086.065] GetLastError () returned 0x3f0 [0086.066] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.dll")) returned 1 [0086.069] GetLastError () returned 0x3f0 [0086.069] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs", lpFilePart=0x0) returned 0x31 [0086.069] GetLastError () returned 0x3f0 [0086.069] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.0.cs")) returned 1 [0086.069] GetLastError () returned 0x3f0 [0086.069] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out", lpFilePart=0x0) returned 0x30 [0086.069] GetLastError () returned 0x3f0 [0086.069] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.out")) returned 1 [0086.072] GetLastError () returned 0x3f0 [0086.072] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.pdb", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.pdb", lpFilePart=0x0) returned 0x30 [0086.072] GetLastError () returned 0x3f0 [0086.072] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.pdb")) returned 1 [0086.072] GetLastError () returned 0x3f0 [0086.072] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err", lpFilePart=0x0) returned 0x30 [0086.072] GetLastError () returned 0x3f0 [0086.072] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.err")) returned 1 [0086.073] GetLastError () returned 0x3f0 [0086.073] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp", lpFilePart=0x0) returned 0x30 [0086.073] GetLastError () returned 0x3f0 [0086.073] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.tmp")) returned 1 [0086.073] GetLastError () returned 0x3f0 [0086.073] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline", nBufferLength=0x105, lpBuffer=0x515e97c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline", lpFilePart=0x0) returned 0x34 [0086.073] GetLastError () returned 0x3f0 [0086.073] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\ldyec3np.cmdline")) returned 1 [0086.074] GetLastError () returned 0x3f0 [0086.647] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.647] GetLastError () returned 0xcb [0086.696] VirtualQuery (in: lpAddress=0x515dee8, lpBuffer=0x515eee8, dwLength=0x1c | out: lpBuffer=0x515eee8*(BaseAddress=0x515d000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0086.718] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.718] GetLastError () returned 0xcb [0086.731] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.731] GetLastError () returned 0xcb [0086.761] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.761] GetLastError () returned 0xcb [0086.844] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.844] GetLastError () returned 0xcb [0086.965] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a8 [0086.965] GetLastError () returned 0x0 [0086.967] CoGetObjectContext (in: riid=0x6dfa268*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515eafc | out: ppv=0x515eafc*=0x1d57dc) returned 0x0 [0087.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515dcb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0087.180] GetLastError () returned 0x0 [0087.184] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x1c40000 [0087.384] GetProcAddress (hModule=0x1c40000, lpProcName="ResetSecurity") returned 0x1c41944 [0087.394] GetProcAddress (hModule=0x1c40000, lpProcName="SetSecurity") returned 0x1c41986 [0087.402] GetProcAddress (hModule=0x1c40000, lpProcName="BlessIWbemServices") returned 0x1c419cc [0087.410] GetProcAddress (hModule=0x1c40000, lpProcName="BlessIWbemServicesObject") returned 0x1c41a1e [0087.417] GetProcAddress (hModule=0x1c40000, lpProcName="GetPropertyHandle") returned 0x1c41a70 [0087.422] GetProcAddress (hModule=0x1c40000, lpProcName="WritePropertyValue") returned 0x1c41a89 [0087.426] GetProcAddress (hModule=0x1c40000, lpProcName="Clone") returned 0x1c41aa2 [0087.431] GetProcAddress (hModule=0x1c40000, lpProcName="VerifyClientKey") returned 0x1c42270 [0087.437] GetProcAddress (hModule=0x1c40000, lpProcName="GetQualifierSet") returned 0x1c41d73 [0087.442] GetProcAddress (hModule=0x1c40000, lpProcName="Get") returned 0x1c41b96 [0087.448] GetProcAddress (hModule=0x1c40000, lpProcName="Put") returned 0x1c41b7a [0087.453] GetProcAddress (hModule=0x1c40000, lpProcName="Delete") returned 0x1c41bb5 [0087.456] GetProcAddress (hModule=0x1c40000, lpProcName="GetNames") returned 0x1c41bc8 [0087.459] GetProcAddress (hModule=0x1c40000, lpProcName="BeginEnumeration") returned 0x1c41be4 [0087.461] GetProcAddress (hModule=0x1c40000, lpProcName="Next") returned 0x1c41bf7 [0087.463] GetProcAddress (hModule=0x1c40000, lpProcName="EndEnumeration") returned 0x1c41c16 [0087.465] GetProcAddress (hModule=0x1c40000, lpProcName="GetPropertyQualifierSet") returned 0x1c41c26 [0087.466] GetProcAddress (hModule=0x1c40000, lpProcName="Clone") returned 0x1c41aa2 [0087.467] GetProcAddress (hModule=0x1c40000, lpProcName="GetObjectText") returned 0x1c41c3c [0087.468] GetProcAddress (hModule=0x1c40000, lpProcName="SpawnDerivedClass") returned 0x1c41c52 [0087.469] GetProcAddress (hModule=0x1c40000, lpProcName="SpawnInstance") returned 0x1c41c68 [0087.470] GetProcAddress (hModule=0x1c40000, lpProcName="CompareTo") returned 0x1c41c7e [0087.471] GetProcAddress (hModule=0x1c40000, lpProcName="GetPropertyOrigin") returned 0x1c41c94 [0087.472] GetProcAddress (hModule=0x1c40000, lpProcName="InheritsFrom") returned 0x1c41caa [0087.473] GetProcAddress (hModule=0x1c40000, lpProcName="GetMethod") returned 0x1c41cbd [0087.474] GetProcAddress (hModule=0x1c40000, lpProcName="PutMethod") returned 0x1c41cd9 [0087.475] GetProcAddress (hModule=0x1c40000, lpProcName="DeleteMethod") returned 0x1c41cf5 [0087.476] GetProcAddress (hModule=0x1c40000, lpProcName="BeginMethodEnumeration") returned 0x1c41d08 [0087.477] GetProcAddress (hModule=0x1c40000, lpProcName="NextMethod") returned 0x1c41d1b [0087.478] GetProcAddress (hModule=0x1c40000, lpProcName="EndMethodEnumeration") returned 0x1c41d37 [0087.479] GetProcAddress (hModule=0x1c40000, lpProcName="GetMethodQualifierSet") returned 0x1c41d47 [0087.480] GetProcAddress (hModule=0x1c40000, lpProcName="GetMethodOrigin") returned 0x1c41d5d [0087.481] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_Get") returned 0x1c41d86 [0087.482] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_Put") returned 0x1c41da2 [0087.483] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_Delete") returned 0x1c41dbb [0087.484] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_GetNames") returned 0x1c41dce [0087.485] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_BeginEnumeration") returned 0x1c41de4 [0087.486] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_Next") returned 0x1c41df7 [0087.486] GetProcAddress (hModule=0x1c40000, lpProcName="QualifierSet_EndEnumeration") returned 0x1c41e13 [0087.487] GetProcAddress (hModule=0x1c40000, lpProcName="GetCurrentApartmentType") returned 0x1c41d73 [0087.490] GetProcAddress (hModule=0x1c40000, lpProcName="GetDemultiplexedStub") returned 0x1c418fd [0087.491] GetProcAddress (hModule=0x1c40000, lpProcName="CreateInstanceEnumWmi") returned 0x1c41580 [0087.492] GetProcAddress (hModule=0x1c40000, lpProcName="CreateClassEnumWmi") returned 0x1c415f6 [0087.493] GetProcAddress (hModule=0x1c40000, lpProcName="ExecQueryWmi") returned 0x1c4169e [0087.494] GetProcAddress (hModule=0x1c40000, lpProcName="ExecNotificationQueryWmi") returned 0x1c41717 [0087.495] GetProcAddress (hModule=0x1c40000, lpProcName="PutInstanceWmi") returned 0x1c41790 [0087.496] GetProcAddress (hModule=0x1c40000, lpProcName="PutClassWmi") returned 0x1c41810 [0087.496] GetProcAddress (hModule=0x1c40000, lpProcName="CloneEnumWbemClassObject") returned 0x1c41890 [0087.497] GetProcAddress (hModule=0x1c40000, lpProcName="ConnectServerWmi") returned 0x1c424b7 [0087.498] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515eaf4 | out: pAptType=0x515eaf4*=1) returned 0x0 [0087.548] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x6dfa250*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515eaf8 | out: ppvObject=0x515eaf8*=0x0) returned 0x80004002 [0087.549] IUnknown:Release (This=0x1d57dc) returned 0x0 [0087.673] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x515e6ac | out: lpiid=0x515e6ac) returned 0x0 [0087.673] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e614 | out: ppv=0x515e614*=0x7650810) returned 0x0 [0088.502] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650810, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e444 | out: ppvObject=0x515e444*=0x0) returned 0x80004002 [0088.502] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650810, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e47c | out: ppvObject=0x515e47c*=0x7650820) returned 0x0 [0088.503] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e220 | out: ppvObject=0x515e220*=0x7650820) returned 0x0 [0088.503] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e1dc | out: ppvObject=0x515e1dc*=0x0) returned 0x80004002 [0088.504] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0088.505] CoGetContextToken (in: pToken=0x515e068 | out: pToken=0x515e068) returned 0x0 [0088.505] CoGetObjectContext (in: riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x29d4dc | out: ppv=0x29d4dc*=0x1d57d0) returned 0x0 [0088.505] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e050 | out: ppvObject=0x515e050*=0x2aba30) returned 0x0 [0088.506] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2aba30, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e058 | out: pCid=0x515e058*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.506] WbemDefPath:IUnknown:Release (This=0x2aba30) returned 0x3 [0088.506] CoGetContextToken (in: pToken=0x515e060 | out: pToken=0x515e060) returned 0x0 [0088.506] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x4 [0088.506] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0d4 | out: ppvObject=0x515e0d4*=0x0) returned 0x80004002 [0088.506] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x3 [0088.507] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0088.507] WbemDefPath:IUnknown:Release (This=0x7650810) returned 0x0 [0088.507] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0088.509] CoGetContextToken (in: pToken=0x515e910 | out: pToken=0x515e910) returned 0x0 [0088.509] CoGetContextToken (in: pToken=0x515e8d0 | out: pToken=0x515e8d0) returned 0x0 [0088.509] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0088.509] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x515e94c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e948 | out: ppvObject=0x515e948*=0x7650820) returned 0x0 [0088.509] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0088.510] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0088.512] CoGetObjectContext (in: riid=0x6dfa268*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e320 | out: ppv=0x515e320*=0x1d57dc) returned 0x0 [0088.512] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e318 | out: pAptType=0x515e318*=1) returned 0x0 [0088.512] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x6dfa250*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e31c | out: ppvObject=0x515e31c*=0x0) returned 0x80004002 [0088.512] IUnknown:Release (This=0x1d57dc) returned 0x1 [0088.527] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515de38 | out: ppv=0x515de38*=0x7650810) returned 0x0 [0088.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650810, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dc68 | out: ppvObject=0x515dc68*=0x0) returned 0x80004002 [0088.528] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650810, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dca0 | out: ppvObject=0x515dca0*=0x76508b8) returned 0x0 [0088.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515da44 | out: ppvObject=0x515da44*=0x76508b8) returned 0x0 [0088.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515da00 | out: ppvObject=0x515da00*=0x0) returned 0x80004002 [0088.529] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x3 [0088.529] CoGetContextToken (in: pToken=0x515d88c | out: pToken=0x515d88c) returned 0x0 [0088.529] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515d874 | out: ppvObject=0x515d874*=0x2aba40) returned 0x0 [0088.530] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2aba40, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515d87c | out: pCid=0x515d87c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.530] WbemDefPath:IUnknown:Release (This=0x2aba40) returned 0x3 [0088.530] CoGetContextToken (in: pToken=0x515d884 | out: pToken=0x515d884) returned 0x0 [0088.530] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x4 [0088.530] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515d8f8 | out: ppvObject=0x515d8f8*=0x0) returned 0x80004002 [0088.530] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x3 [0088.531] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0088.531] WbemDefPath:IUnknown:Release (This=0x7650810) returned 0x0 [0088.531] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0088.531] CoGetContextToken (in: pToken=0x515e134 | out: pToken=0x515e134) returned 0x0 [0088.531] CoGetContextToken (in: pToken=0x515e0f4 | out: pToken=0x515e0f4) returned 0x0 [0088.531] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x2 [0088.531] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x515e170*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e16c | out: ppvObject=0x515e16c*=0x76508b8) returned 0x0 [0088.532] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0088.532] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0088.547] CoGetContextToken (in: pToken=0x515e1b4 | out: pToken=0x515e1b4) returned 0x0 [0088.547] CoGetContextToken (in: pToken=0x515e174 | out: pToken=0x515e174) returned 0x0 [0088.547] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x2 [0088.547] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x515e1f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e1ec | out: ppvObject=0x515e1ec*=0x76508b8) returned 0x0 [0088.547] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0088.547] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x3 [0088.547] WbemDefPath:IWbemPath:SetText (This=0x76508b8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0088.548] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0088.548] CoGetContextToken (in: pToken=0x515e990 | out: pToken=0x515e990) returned 0x0 [0088.548] CoGetContextToken (in: pToken=0x515e950 | out: pToken=0x515e950) returned 0x0 [0088.548] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0088.549] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x515e9cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e9c8 | out: ppvObject=0x515e9c8*=0x7650820) returned 0x0 [0088.549] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0088.549] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0088.549] WbemDefPath:IWbemPath:SetText (This=0x7650820, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0088.549] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0088.567] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515eb34 | out: puCount=0x515eb34*=0x2) returned 0x0 [0088.571] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb30*=0x0, pszText=0x0 | out: puBuffLength=0x515eb30*=0x17, pszText=0x0) returned 0x0 [0088.573] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb30*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb30*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0088.623] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515eb30 | out: puCount=0x515eb30*=0x2) returned 0x0 [0088.623] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb2c*=0x0, pszText=0x0 | out: puBuffLength=0x515eb2c*=0x17, pszText=0x0) returned 0x0 [0088.623] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb2c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb2c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0088.623] CoGetObjectContext (in: riid=0x6dfa268*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515eaac | out: ppv=0x515eaac*=0x1d57dc) returned 0x0 [0088.623] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515eaa4 | out: pAptType=0x515eaa4*=1) returned 0x0 [0088.623] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x6dfa250*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515eaa8 | out: ppvObject=0x515eaa8*=0x0) returned 0x80004002 [0088.624] IUnknown:Release (This=0x1d57dc) returned 0x1 [0088.625] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x515e994 | out: lpiid=0x515e994) returned 0x0 [0088.625] CoGetClassObject (in: rclsid=0x288844*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e8fc | out: ppv=0x515e8fc*=0x7650ad0) returned 0x0 [0088.881] WbemLocator:IUnknown:QueryInterface (in: This=0x7650ad0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e72c | out: ppvObject=0x515e72c*=0x0) returned 0x80004002 [0088.881] WbemLocator:IClassFactory:CreateInstance (in: This=0x7650ad0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e764 | out: ppvObject=0x515e764*=0x7650bf0) returned 0x0 [0088.881] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e508 | out: ppvObject=0x515e508*=0x7650bf0) returned 0x0 [0088.882] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e4c4 | out: ppvObject=0x515e4c4*=0x0) returned 0x80004002 [0088.882] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0088.882] CoGetContextToken (in: pToken=0x515e350 | out: pToken=0x515e350) returned 0x0 [0088.882] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e338 | out: ppvObject=0x515e338*=0x0) returned 0x80004002 [0088.883] CoGetContextToken (in: pToken=0x515e348 | out: pToken=0x515e348) returned 0x0 [0088.883] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x4 [0088.883] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3bc | out: ppvObject=0x515e3bc*=0x0) returned 0x80004002 [0088.883] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x3 [0088.884] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x2 [0088.884] WbemLocator:IUnknown:Release (This=0x7650ad0) returned 0x0 [0088.884] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x1 [0088.884] CoGetContextToken (in: pToken=0x515e854 | out: pToken=0x515e854) returned 0x0 [0088.884] CoGetContextToken (in: pToken=0x515e814 | out: pToken=0x515e814) returned 0x0 [0088.884] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0088.885] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x515e890*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e88c | out: ppvObject=0x515e88c*=0x7650bf0) returned 0x0 [0088.885] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x2 [0088.885] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x1 [0088.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ea84 | out: puCount=0x515ea84*=0x2) returned 0x0 [0088.887] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x515ea80*=0x0, pszText=0x0 | out: puBuffLength=0x515ea80*=0x17, pszText=0x0) returned 0x0 [0088.887] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x515ea80*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ea80*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0088.888] CoCreateInstance (in: rclsid=0x1c413a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1c412d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x515e55c | out: ppv=0x515e55c*=0x7650c00) returned 0x0 [0088.888] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7650c00, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x515e5a8 | out: ppNamespace=0x515e5a8*=0x765cb2c) returned 0x0 [0114.654] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e478 | out: ppvObject=0x515e478*=0x74e9dd4) returned 0x0 [0114.655] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x74e9dd4, pProxy=0x765cb2c, pAuthnSvc=0x515e4c0, pAuthzSvc=0x515e4bc, pServerPrincName=0x515e4cc, pAuthnLevel=0x515e4c4, pImpLevel=0x515e4b0, pAuthInfo=0x515e4b4, pCapabilites=0x515e4b8 | out: pAuthnSvc=0x515e4c0*=0xa, pAuthzSvc=0x515e4bc*=0x0, pServerPrincName=0x515e4cc, pAuthnLevel=0x515e4c4*=0x6, pImpLevel=0x515e4b0*=0x2, pAuthInfo=0x515e4b4, pCapabilites=0x515e4b8*=0x1) returned 0x0 [0114.655] WbemLocator:IUnknown:Release (This=0x74e9dd4) returned 0x1 [0114.655] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e46c | out: ppvObject=0x515e46c*=0x74e9df4) returned 0x0 [0114.655] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e468 | out: ppvObject=0x515e468*=0x74e9dd4) returned 0x0 [0114.655] WbemLocator:IClientSecurity:SetBlanket (This=0x74e9dd4, pProxy=0x765cb2c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0114.656] WbemLocator:IUnknown:Release (This=0x74e9dd4) returned 0x2 [0114.656] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x1 [0114.656] CoTaskMemFree (pv=0x2b1b40) [0114.656] WbemLocator:IUnknown:Release (This=0x7650c00) returned 0x0 [0114.657] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de28 | out: ppvObject=0x515de28*=0x74e9df4) returned 0x0 [0114.657] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dde4 | out: ppvObject=0x515dde4*=0x0) returned 0x80004002 [0114.658] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dcd8 | out: ppvObject=0x515dcd8*=0x0) returned 0x80004002 [0114.660] WbemLocator:IUnknown:AddRef (This=0x74e9df4) returned 0x3 [0114.660] CoGetContextToken (in: pToken=0x515dc70 | out: pToken=0x515dc70) returned 0x0 [0114.660] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc58 | out: ppvObject=0x515dc58*=0x74e9d54) returned 0x0 [0114.661] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x74e9d54, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc60 | out: pCid=0x515dc60*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0114.661] WbemLocator:IUnknown:Release (This=0x74e9d54) returned 0x3 [0114.662] CoGetContextToken (in: pToken=0x515dc68 | out: pToken=0x515dc68) returned 0x0 [0114.662] WbemLocator:IUnknown:AddRef (This=0x74e9df4) returned 0x4 [0114.662] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcdc | out: ppvObject=0x515dcdc*=0x74e9ddc) returned 0x0 [0114.662] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x4 [0114.663] WbemLocator:IRpcOptions:Query (in: This=0x74e9ddc, pPrx=0x74e9df4, dwProperty=2, pdwValue=0x515dd00 | out: pdwValue=0x515dd00) returned 0x80004002 [0114.663] WbemLocator:IUnknown:Release (This=0x74e9ddc) returned 0x3 [0114.664] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x2 [0114.664] CoGetContextToken (in: pToken=0x515e0dc | out: pToken=0x515e0dc) returned 0x0 [0114.664] CoGetContextToken (in: pToken=0x515e09c | out: pToken=0x515e09c) returned 0x0 [0114.664] WbemLocator:IUnknown:AddRef (This=0x74e9df4) returned 0x3 [0114.664] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x515e118*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e114 | out: ppvObject=0x515e114*=0x765cb2c) returned 0x0 [0114.664] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x3 [0114.665] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x2 [0114.665] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x1 [0114.667] CoGetContextToken (in: pToken=0x515e9f8 | out: pToken=0x515e9f8) returned 0x0 [0114.667] WbemLocator:IUnknown:AddRef (This=0x74e9df4) returned 0x2 [0114.668] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e61c | out: ppvObject=0x515e61c*=0x74e9df4) returned 0x0 [0114.668] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x2 [0114.669] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x1 [0114.669] CoGetContextToken (in: pToken=0x515e1fc | out: pToken=0x515e1fc) returned 0x0 [0114.669] CoGetContextToken (in: pToken=0x515e1bc | out: pToken=0x515e1bc) returned 0x0 [0114.669] WbemLocator:IUnknown:AddRef (This=0x74e9df4) returned 0x2 [0114.670] WbemLocator:IUnknown:QueryInterface (in: This=0x74e9df4, riid=0x515e238*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e234 | out: ppvObject=0x515e234*=0x765cb2c) returned 0x0 [0114.670] WbemLocator:IUnknown:Release (This=0x74e9df4) returned 0x2 [0114.670] WbemLocator:IUnknown:AddRef (This=0x765cb2c) returned 0x3 [0114.671] IWbemServices:ExecQuery (in: This=0x765cb2c, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x515e840 | out: ppEnum=0x515e840*=0x765cbcc) returned 0x0 [0114.687] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e4ec | out: ppvObject=0x515e4ec*=0x765cbd0) returned 0x0 [0114.687] IClientSecurity:QueryBlanket (in: This=0x765cbd0, pProxy=0x765cbcc, pAuthnSvc=0x515e534, pAuthzSvc=0x515e530, pServerPrincName=0x515e540, pAuthnLevel=0x515e538, pImpLevel=0x515e524, pAuthInfo=0x515e528, pCapabilites=0x515e52c | out: pAuthnSvc=0x515e534*=0xa, pAuthzSvc=0x515e530*=0x0, pServerPrincName=0x515e540, pAuthnLevel=0x515e538*=0x6, pImpLevel=0x515e524*=0x2, pAuthInfo=0x515e528, pCapabilites=0x515e52c*=0x1) returned 0x0 [0114.687] IUnknown:Release (This=0x765cbd0) returned 0x1 [0114.687] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e4e0 | out: ppvObject=0x515e4e0*=0x2443c4) returned 0x0 [0114.687] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e4dc | out: ppvObject=0x515e4dc*=0x765cbd0) returned 0x0 [0114.688] IClientSecurity:SetBlanket (This=0x765cbd0, pProxy=0x765cbcc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0114.692] IUnknown:Release (This=0x765cbd0) returned 0x2 [0114.692] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x1 [0114.692] CoTaskMemFree (pv=0x2b1b70) [0114.692] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x2 [0114.693] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de98 | out: ppvObject=0x515de98*=0x2443c4) returned 0x0 [0114.693] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515de54 | out: ppvObject=0x515de54*=0x0) returned 0x80004002 [0114.694] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dd48 | out: ppvObject=0x515dd48*=0x0) returned 0x80004002 [0114.695] WbemLocator:IUnknown:AddRef (This=0x2443c4) returned 0x3 [0114.695] CoGetContextToken (in: pToken=0x515dce0 | out: pToken=0x515dce0) returned 0x0 [0114.695] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcc8 | out: ppvObject=0x515dcc8*=0x244324) returned 0x0 [0114.696] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x244324, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dcd0 | out: pCid=0x515dcd0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0114.696] WbemLocator:IUnknown:Release (This=0x244324) returned 0x3 [0114.696] CoGetContextToken (in: pToken=0x515dcd8 | out: pToken=0x515dcd8) returned 0x0 [0114.696] WbemLocator:IUnknown:AddRef (This=0x2443c4) returned 0x4 [0114.697] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dd4c | out: ppvObject=0x515dd4c*=0x2443ac) returned 0x0 [0114.697] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x4 [0114.697] WbemLocator:IRpcOptions:Query (in: This=0x2443ac, pPrx=0x2443c4, dwProperty=2, pdwValue=0x515dd70 | out: pdwValue=0x515dd70) returned 0x80004002 [0114.697] WbemLocator:IUnknown:Release (This=0x2443ac) returned 0x3 [0114.698] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x2 [0114.698] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0114.698] CoGetContextToken (in: pToken=0x515e10c | out: pToken=0x515e10c) returned 0x0 [0114.698] WbemLocator:IUnknown:AddRef (This=0x2443c4) returned 0x3 [0114.698] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x515e188*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e184 | out: ppvObject=0x515e184*=0x765cbcc) returned 0x0 [0114.698] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x3 [0114.699] IUnknown:Release (This=0x765cbcc) returned 0x2 [0114.699] IUnknown:Release (This=0x765cbcc) returned 0x1 [0114.700] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ead8 | out: puCount=0x515ead8*=0x2) returned 0x0 [0114.700] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ead4*=0x0, pszText=0x0 | out: puBuffLength=0x515ead4*=0x17, pszText=0x0) returned 0x0 [0114.700] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ead4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ead4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.701] CoGetContextToken (in: pToken=0x515e474 | out: pToken=0x515e474) returned 0x0 [0114.701] CoGetContextToken (in: pToken=0x515e434 | out: pToken=0x515e434) returned 0x0 [0114.701] WbemLocator:IUnknown:AddRef (This=0x2443c4) returned 0x2 [0114.702] WbemLocator:IUnknown:QueryInterface (in: This=0x2443c4, riid=0x515e4b0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e4ac | out: ppvObject=0x515e4ac*=0x765cbcc) returned 0x0 [0114.702] WbemLocator:IUnknown:Release (This=0x2443c4) returned 0x2 [0114.702] IUnknown:AddRef (This=0x765cbcc) returned 0x3 [0114.702] IEnumWbemClassObject:Clone (in: This=0x765cbcc, ppEnum=0x515eaa8 | out: ppEnum=0x515eaa8*=0x765dc9c) returned 0x0 [0114.705] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e764 | out: ppvObject=0x515e764*=0x765dca0) returned 0x0 [0114.705] IClientSecurity:QueryBlanket (in: This=0x765dca0, pProxy=0x765dc9c, pAuthnSvc=0x515e7ac, pAuthzSvc=0x515e7a8, pServerPrincName=0x515e7b8, pAuthnLevel=0x515e7b0, pImpLevel=0x515e79c, pAuthInfo=0x515e7a0, pCapabilites=0x515e7a4 | out: pAuthnSvc=0x515e7ac*=0xa, pAuthzSvc=0x515e7a8*=0x0, pServerPrincName=0x515e7b8, pAuthnLevel=0x515e7b0*=0x6, pImpLevel=0x515e79c*=0x2, pAuthInfo=0x515e7a0, pCapabilites=0x515e7a4*=0x1) returned 0x0 [0114.705] IUnknown:Release (This=0x765dca0) returned 0x1 [0114.705] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e758 | out: ppvObject=0x515e758*=0x2b56c4) returned 0x0 [0114.706] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e754 | out: ppvObject=0x515e754*=0x765dca0) returned 0x0 [0114.706] IClientSecurity:SetBlanket (This=0x765dca0, pProxy=0x765dc9c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0114.708] IUnknown:Release (This=0x765dca0) returned 0x2 [0114.709] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x1 [0114.709] CoTaskMemFree (pv=0x2b1b10) [0114.709] IUnknown:Release (This=0x765cbcc) returned 0x2 [0114.709] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e100 | out: ppvObject=0x515e100*=0x2b56c4) returned 0x0 [0114.710] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e0bc | out: ppvObject=0x515e0bc*=0x0) returned 0x80004002 [0114.710] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dfb0 | out: ppvObject=0x515dfb0*=0x0) returned 0x80004002 [0114.711] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x3 [0114.712] CoGetContextToken (in: pToken=0x515df48 | out: pToken=0x515df48) returned 0x0 [0114.712] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df30 | out: ppvObject=0x515df30*=0x2b5624) returned 0x0 [0114.712] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2b5624, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515df38 | out: pCid=0x515df38*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0114.712] WbemLocator:IUnknown:Release (This=0x2b5624) returned 0x3 [0114.712] CoGetContextToken (in: pToken=0x515df40 | out: pToken=0x515df40) returned 0x0 [0114.713] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x4 [0114.713] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfb4 | out: ppvObject=0x515dfb4*=0x2b56ac) returned 0x0 [0114.713] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x4 [0114.713] WbemLocator:IRpcOptions:Query (in: This=0x2b56ac, pPrx=0x2b56c4, dwProperty=2, pdwValue=0x515dfd8 | out: pdwValue=0x515dfd8) returned 0x80004002 [0114.713] WbemLocator:IUnknown:Release (This=0x2b56ac) returned 0x3 [0114.714] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x2 [0114.714] CoGetContextToken (in: pToken=0x515e3b4 | out: pToken=0x515e3b4) returned 0x0 [0114.714] CoGetContextToken (in: pToken=0x515e374 | out: pToken=0x515e374) returned 0x0 [0114.714] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x3 [0114.714] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x515e3f0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e3ec | out: ppvObject=0x515e3ec*=0x765dc9c) returned 0x0 [0114.714] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x3 [0114.715] IUnknown:Release (This=0x765dc9c) returned 0x2 [0114.715] IUnknown:Release (This=0x765dc9c) returned 0x1 [0114.729] CoGetContextToken (in: pToken=0x515e9a8 | out: pToken=0x515e9a8) returned 0x0 [0114.729] CoGetContextToken (in: pToken=0x515e968 | out: pToken=0x515e968) returned 0x0 [0114.729] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x2 [0114.729] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x515e9e4*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e9e0 | out: ppvObject=0x515e9e0*=0x765dc9c) returned 0x0 [0114.729] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x2 [0114.729] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0114.729] IEnumWbemClassObject:Reset (This=0x765dc9c) returned 0x0 [0114.731] IUnknown:Release (This=0x765dc9c) returned 0x2 [0114.750] CoGetContextToken (in: pToken=0x515e89c | out: pToken=0x515e89c) returned 0x0 [0114.750] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0114.750] IEnumWbemClassObject:Next (in: This=0x765dc9c, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x6dff030 | out: apObjects=0x22bdb0*=0x765dcd8, puReturned=0x6dff030*=0x1) returned 0x0 [0114.756] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dea8 | out: ppvObject=0x515dea8*=0x765dcd8) returned 0x0 [0114.757] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515de64 | out: ppvObject=0x515de64*=0x0) returned 0x80004002 [0114.757] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dd58 | out: ppvObject=0x515dd58*=0x0) returned 0x80004002 [0114.757] IUnknown:AddRef (This=0x765dcd8) returned 0x3 [0114.758] CoGetContextToken (in: pToken=0x515dcf0 | out: pToken=0x515dcf0) returned 0x0 [0114.758] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcd8 | out: ppvObject=0x515dcd8*=0x765dcdc) returned 0x0 [0114.758] IMarshal:GetUnmarshalClass (in: This=0x765dcdc, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dce0 | out: pCid=0x515dce0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0114.758] IUnknown:Release (This=0x765dcdc) returned 0x3 [0114.759] CoGetContextToken (in: pToken=0x515dce8 | out: pToken=0x515dce8) returned 0x0 [0114.759] IUnknown:AddRef (This=0x765dcd8) returned 0x4 [0114.759] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dd5c | out: ppvObject=0x515dd5c*=0x0) returned 0x80004002 [0114.759] IUnknown:Release (This=0x765dcd8) returned 0x3 [0114.759] IUnknown:Release (This=0x765dcd8) returned 0x2 [0114.760] CoGetContextToken (in: pToken=0x515e148 | out: pToken=0x515e148) returned 0x0 [0114.760] CoGetContextToken (in: pToken=0x515e108 | out: pToken=0x515e108) returned 0x0 [0114.760] IUnknown:AddRef (This=0x765dcd8) returned 0x3 [0114.760] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x515e184*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e180 | out: ppvObject=0x515e180*=0x765dcd8) returned 0x0 [0114.760] IUnknown:Release (This=0x765dcd8) returned 0x3 [0114.760] IUnknown:Release (This=0x765dcd8) returned 0x2 [0114.761] IUnknown:Release (This=0x765dcd8) returned 0x1 [0114.761] IUnknown:Release (This=0x765dc9c) returned 0x2 [0114.761] CoGetContextToken (in: pToken=0x515ea2c | out: pToken=0x515ea2c) returned 0x0 [0114.761] IUnknown:AddRef (This=0x765dcd8) returned 0x2 [0114.774] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x515eaa8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb5c*=0, plFlavor=0x515eb58*=0 | out: pVal=0x515eaa8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515eb5c*=3, plFlavor=0x515eb58*=64) returned 0x0 [0114.775] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x515ea88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515eb40*=0, plFlavor=0x515eb3c*=0 | out: pVal=0x515ea88*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x515eb40*=8, plFlavor=0x515eb3c*=64) returned 0x0 [0114.776] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0114.776] CoGetObjectContext (in: riid=0x6dfa268*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515eae0 | out: ppv=0x515eae0*=0x1d57dc) returned 0x0 [0114.776] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ead8 | out: pAptType=0x515ead8*=1) returned 0x0 [0114.776] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x6dfa250*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515eadc | out: ppvObject=0x515eadc*=0x0) returned 0x80004002 [0114.777] IUnknown:Release (This=0x1d57dc) returned 0x1 [0114.779] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e5f8 | out: ppv=0x515e5f8*=0x7650ad0) returned 0x0 [0114.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650ad0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e428 | out: ppvObject=0x515e428*=0x0) returned 0x80004002 [0114.780] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650ad0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e460 | out: ppvObject=0x515e460*=0x7650c00) returned 0x0 [0114.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e204 | out: ppvObject=0x515e204*=0x7650c00) returned 0x0 [0114.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0114.781] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x3 [0114.781] CoGetContextToken (in: pToken=0x515e04c | out: pToken=0x515e04c) returned 0x0 [0114.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e034 | out: ppvObject=0x515e034*=0x2abb30) returned 0x0 [0114.782] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x2abb30, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e03c | out: pCid=0x515e03c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0114.782] WbemDefPath:IUnknown:Release (This=0x2abb30) returned 0x3 [0114.782] CoGetContextToken (in: pToken=0x515e044 | out: pToken=0x515e044) returned 0x0 [0114.782] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x4 [0114.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0b8 | out: ppvObject=0x515e0b8*=0x0) returned 0x80004002 [0114.783] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x3 [0114.783] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0114.783] WbemDefPath:IUnknown:Release (This=0x7650ad0) returned 0x0 [0114.783] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0114.784] CoGetContextToken (in: pToken=0x515e8f4 | out: pToken=0x515e8f4) returned 0x0 [0114.784] CoGetContextToken (in: pToken=0x515e8b4 | out: pToken=0x515e8b4) returned 0x0 [0114.784] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x2 [0114.784] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x515e930*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e92c | out: ppvObject=0x515e92c*=0x7650c00) returned 0x0 [0114.784] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0114.785] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0114.785] CoGetContextToken (in: pToken=0x515e974 | out: pToken=0x515e974) returned 0x0 [0114.785] CoGetContextToken (in: pToken=0x515e934 | out: pToken=0x515e934) returned 0x0 [0114.785] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x2 [0114.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x515e9b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e9ac | out: ppvObject=0x515e9ac*=0x7650c00) returned 0x0 [0114.785] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0114.786] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x3 [0114.786] WbemDefPath:IWbemPath:SetText (This=0x7650c00, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x0 [0114.786] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0114.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515eb14 | out: puCount=0x515eb14*=0x2) returned 0x0 [0114.786] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb10*=0x0, pszText=0x0 | out: puBuffLength=0x515eb10*=0x17, pszText=0x0) returned 0x0 [0114.786] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515eb10*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb10*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.833] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0114.833] GetLastError () returned 0xcb [0114.873] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e874 | out: puCount=0x515e874*=0x2) returned 0x0 [0114.873] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e870*=0x0, pszText=0x0 | out: puBuffLength=0x515e870*=0x17, pszText=0x0) returned 0x0 [0114.874] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e870*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e870*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.874] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e830*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e007b8*=0, plFlavor=0x6e007bc*=0 | out: pVal=0x515e830*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6e007b8*=8, plFlavor=0x6e007bc*=64) returned 0x0 [0114.874] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0114.874] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e834*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e007b8*=8, plFlavor=0x6e007bc*=64 | out: pVal=0x515e834*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6e007b8*=8, plFlavor=0x6e007bc*=64) returned 0x0 [0114.875] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0114.875] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e874 | out: puCount=0x515e874*=0x2) returned 0x0 [0114.875] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e870*=0x0, pszText=0x0 | out: puBuffLength=0x515e870*=0x17, pszText=0x0) returned 0x0 [0114.876] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e870*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e870*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.876] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e830*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e00870*=0, plFlavor=0x6e00874*=0 | out: pVal=0x515e830*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e00870*=8, plFlavor=0x6e00874*=64) returned 0x0 [0114.876] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.876] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e834*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e00870*=8, plFlavor=0x6e00874*=64 | out: pVal=0x515e834*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e00870*=8, plFlavor=0x6e00874*=64) returned 0x0 [0114.876] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.968] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e6f0 | out: puCount=0x515e6f0*=0x2) returned 0x0 [0114.968] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6ec*=0x0, pszText=0x0 | out: puBuffLength=0x515e6ec*=0x17, pszText=0x0) returned 0x0 [0114.968] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6ec*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e6ec*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.969] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e6f0 | out: puCount=0x515e6f0*=0x2) returned 0x0 [0114.969] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6ec*=0x0, pszText=0x0 | out: puBuffLength=0x515e6ec*=0x17, pszText=0x0) returned 0x0 [0114.969] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6ec*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e6ec*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.969] IWbemClassObject:GetNames (in: This=0x765dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515e6b4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e680 | out: pNames=0x515e680*="\x01ƀ\x04") returned 0x0 [0114.970] SafeArrayGetDim (psa=0x2b1bb0) returned 0x1 [0114.970] SafeArrayGetDim (psa=0x2b1bb0) returned 0x1 [0114.970] SafeArrayGetLBound (in: psa=0x2b1bb0, nDim=0x1, plLbound=0x515e27c | out: plLbound=0x515e27c) returned 0x0 [0114.971] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04370*=0, plFlavor=0x6e04374*=0 | out: pVal=0x515e6ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6e04370*=3, plFlavor=0x6e04374*=64) returned 0x0 [0114.972] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e043a4*=0, plFlavor=0x6e043a8*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e043a4*=8, plFlavor=0x6e043a8*=64) returned 0x0 [0114.972] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.972] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04408*=0, plFlavor=0x6e0440c*=0 | out: pVal=0x515e6ac*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04408*=8, plFlavor=0x6e0440c*=64) returned 0x0 [0114.973] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04430*=0, plFlavor=0x6e04434*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e04430*=8, plFlavor=0x6e04434*=64) returned 0x0 [0114.973] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.974] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__RELPATH", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04494*=0, plFlavor=0x6e04498*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6e04494*=8, plFlavor=0x6e04498*=64) returned 0x0 [0114.974] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0114.974] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e0451c*=0, plFlavor=0x6e04520*=0 | out: pVal=0x515e6ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x6e0451c*=3, plFlavor=0x6e04520*=64) returned 0x0 [0114.974] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04550*=0, plFlavor=0x6e04554*=0 | out: pVal=0x515e6ac*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2b1bb0*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x2abbc0, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x6e04550*=8200, plFlavor=0x6e04554*=64) returned 0x0 [0114.975] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SERVER", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04588*=0, plFlavor=0x6e0458c*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6e04588*=8, plFlavor=0x6e0458c*=64) returned 0x0 [0114.976] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0114.976] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e045d4*=0, plFlavor=0x6e045d8*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6e045d4*=8, plFlavor=0x6e045d8*=64) returned 0x0 [0114.976] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0114.976] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04624*=0, plFlavor=0x6e04628*=0 | out: pVal=0x515e6ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6e04624*=8, plFlavor=0x6e04628*=64) returned 0x0 [0114.976] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0114.976] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e72c | out: puCount=0x515e72c*=0x2) returned 0x0 [0114.976] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e728*=0x0, pszText=0x0 | out: puBuffLength=0x515e728*=0x17, pszText=0x0) returned 0x0 [0114.977] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e728*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e728*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.977] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515e6e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04728*=0, plFlavor=0x6e0472c*=0 | out: pVal=0x515e6e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6e04728*=8, plFlavor=0x6e0472c*=32) returned 0x0 [0114.977] SysStringLen (param_1="32-bit") returned 0x6 [0114.983] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e6d8 | out: puCount=0x515e6d8*=0x2) returned 0x0 [0114.983] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6d4*=0x0, pszText=0x0 | out: puBuffLength=0x515e6d4*=0x17, pszText=0x0) returned 0x0 [0114.983] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6d4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e6d4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.983] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e6d8 | out: puCount=0x515e6d8*=0x2) returned 0x0 [0114.983] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6d4*=0x0, pszText=0x0 | out: puBuffLength=0x515e6d4*=0x17, pszText=0x0) returned 0x0 [0114.983] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e6d4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e6d4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.983] IWbemClassObject:GetNames (in: This=0x765dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515e69c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e668 | out: pNames=0x515e668*="\x01ƀ\x04") returned 0x0 [0114.983] SafeArrayGetDim (psa=0x2b1b20) returned 0x1 [0114.983] SafeArrayGetDim (psa=0x2b1b20) returned 0x1 [0114.983] SafeArrayGetLBound (in: psa=0x2b1b20, nDim=0x1, plLbound=0x515e264 | out: plLbound=0x515e264) returned 0x0 [0114.984] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04d48*=0, plFlavor=0x6e04d4c*=0 | out: pVal=0x515e694*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6e04d48*=3, plFlavor=0x6e04d4c*=64) returned 0x0 [0114.984] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04d7c*=0, plFlavor=0x6e04d80*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e04d7c*=8, plFlavor=0x6e04d80*=64) returned 0x0 [0114.985] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.985] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04de0*=0, plFlavor=0x6e04de4*=0 | out: pVal=0x515e694*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04de0*=8, plFlavor=0x6e04de4*=64) returned 0x0 [0114.985] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04e08*=0, plFlavor=0x6e04e0c*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6e04e08*=8, plFlavor=0x6e04e0c*=64) returned 0x0 [0114.985] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0114.986] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__RELPATH", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04e6c*=0, plFlavor=0x6e04e70*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6e04e6c*=8, plFlavor=0x6e04e70*=64) returned 0x0 [0114.986] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0114.986] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04ef4*=0, plFlavor=0x6e04ef8*=0 | out: pVal=0x515e694*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x6e04ef4*=3, plFlavor=0x6e04ef8*=64) returned 0x0 [0114.986] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04f28*=0, plFlavor=0x6e04f2c*=0 | out: pVal=0x515e694*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2b1b20*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x2abbc0, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x6e04f28*=8200, plFlavor=0x6e04f2c*=64) returned 0x0 [0114.987] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SERVER", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04f60*=0, plFlavor=0x6e04f64*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6e04f60*=8, plFlavor=0x6e04f64*=64) returned 0x0 [0114.987] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0114.987] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04fac*=0, plFlavor=0x6e04fb0*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6e04fac*=8, plFlavor=0x6e04fb0*=64) returned 0x0 [0114.987] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0114.988] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x515e694*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e04ffc*=0, plFlavor=0x6e05000*=0 | out: pVal=0x515e694*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6e04ffc*=8, plFlavor=0x6e05000*=64) returned 0x0 [0114.988] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0114.988] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e714 | out: puCount=0x515e714*=0x2) returned 0x0 [0114.988] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e710*=0x0, pszText=0x0 | out: puBuffLength=0x515e710*=0x17, pszText=0x0) returned 0x0 [0114.988] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e710*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e710*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0114.988] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515e6d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e050f0*=0, plFlavor=0x6e050f4*=0 | out: pVal=0x515e6d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6e050f0*=8, plFlavor=0x6e050f4*=32) returned 0x0 [0114.988] SysStringLen (param_1="32-bit") returned 0x6 [0114.988] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x515e76c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6e050f0*=8, plFlavor=0x6e050f4*=32 | out: pVal=0x515e76c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6e050f0*=8, plFlavor=0x6e050f4*=32) returned 0x0 [0114.989] SysStringLen (param_1="32-bit") returned 0x6 [0115.006] CoGetContextToken (in: pToken=0x515e89c | out: pToken=0x515e89c) returned 0x0 [0115.006] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0115.007] IEnumWbemClassObject:Next (in: This=0x765dc9c, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x6dff030 | out: apObjects=0x22bdb0*=0x0, puReturned=0x6dff030*=0x0) returned 0x1 [0115.015] IUnknown:Release (This=0x765dc9c) returned 0x2 [0115.016] CoGetContextToken (in: pToken=0x515e9e4 | out: pToken=0x515e9e4) returned 0x0 [0115.016] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x1 [0115.017] IUnknown:Release (This=0x765dc9c) returned 0x0 [0116.408] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x515e9a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0116.408] GetLastError () returned 0x0 [0116.447] GetCurrentProcess () returned 0xffffffff [0116.447] GetLastError () returned 0x3f0 [0116.447] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ed24 | out: TokenHandle=0x515ed24*=0x390) returned 1 [0116.448] GetLastError () returned 0x3f0 [0116.448] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x2a5770 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0116.449] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x515e8d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0116.449] GetLastError () returned 0x3f0 [0116.449] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy", nBufferLength=0x105, lpBuffer=0x515e8e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy", lpFilePart=0x0) returned 0x2c [0116.449] GetLastError () returned 0x0 [0116.449] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy", nBufferLength=0x105, lpBuffer=0x515e888, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy", lpFilePart=0x0) returned 0x2c [0116.449] GetLastError () returned 0x0 [0116.449] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp", nBufferLength=0x105, lpBuffer=0x515e7e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp", lpFilePart=0x0) returned 0x30 [0116.450] GetLastError () returned 0x0 [0116.450] SetErrorMode (uMode=0x1) returned 0x1 [0116.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0116.452] GetLastError () returned 0x0 [0116.452] GetFileType (hFile=0x38c) returned 0x1 [0116.452] SetErrorMode (uMode=0x1) returned 0x1 [0116.452] GetFileType (hFile=0x38c) returned 0x1 [0116.453] CloseHandle (hObject=0x38c) returned 1 [0116.457] GetLastError () returned 0x0 [0116.457] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs", nBufferLength=0x105, lpBuffer=0x515e844, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs", lpFilePart=0x0) returned 0x31 [0116.457] GetLastError () returned 0x0 [0116.457] SetErrorMode (uMode=0x1) returned 0x1 [0116.458] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0116.458] GetLastError () returned 0x0 [0116.458] GetFileType (hFile=0x38c) returned 0x1 [0116.459] SetErrorMode (uMode=0x1) returned 0x1 [0116.459] GetFileType (hFile=0x38c) returned 0x1 [0116.459] WriteFile (in: hFile=0x38c, lpBuffer=0x633e734*, nNumberOfBytesToWrite=0x89b, lpNumberOfBytesWritten=0x515ed8c, lpOverlapped=0x0 | out: lpBuffer=0x633e734*, lpNumberOfBytesWritten=0x515ed8c*=0x89b, lpOverlapped=0x0) returned 1 [0116.462] GetLastError () returned 0x0 [0116.462] CloseHandle (hObject=0x38c) returned 1 [0116.464] GetLastError () returned 0x0 [0116.465] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", nBufferLength=0x105, lpBuffer=0x515e7f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", lpFilePart=0x0) returned 0x30 [0116.465] GetLastError () returned 0x0 [0116.465] SetErrorMode (uMode=0x1) returned 0x1 [0116.465] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0116.466] GetLastError () returned 0x0 [0116.466] GetFileType (hFile=0x38c) returned 0x1 [0116.466] SetErrorMode (uMode=0x1) returned 0x1 [0116.466] GetFileType (hFile=0x38c) returned 0x1 [0116.466] CloseHandle (hObject=0x38c) returned 1 [0116.467] GetLastError () returned 0x0 [0116.467] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline", nBufferLength=0x105, lpBuffer=0x515e7bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline", lpFilePart=0x0) returned 0x34 [0116.467] GetLastError () returned 0x0 [0116.467] SetErrorMode (uMode=0x1) returned 0x1 [0116.467] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0116.468] GetLastError () returned 0x0 [0116.468] GetFileType (hFile=0x38c) returned 0x1 [0116.468] SetErrorMode (uMode=0x1) returned 0x1 [0116.468] GetFileType (hFile=0x38c) returned 0x1 [0116.468] WriteFile (in: hFile=0x38c, lpBuffer=0x6341d9c*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x515ed04, lpOverlapped=0x0 | out: lpBuffer=0x6341d9c*, lpNumberOfBytesWritten=0x515ed04*=0x139, lpOverlapped=0x0) returned 1 [0116.471] GetLastError () returned 0x0 [0116.472] CloseHandle (hObject=0x38c) returned 1 [0116.475] GetLastError () returned 0x0 [0116.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x515e86c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0116.478] GetLastError () returned 0x0 [0116.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x515e8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0116.478] GetLastError () returned 0x0 [0116.478] SetErrorMode (uMode=0x1) returned 0x1 [0116.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x515ed2c | out: lpFileInformation=0x515ed2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0116.478] GetLastError () returned 0x0 [0116.478] SetErrorMode (uMode=0x1) returned 0x1 [0116.479] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x2a5770 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0116.479] GetLastError () returned 0x0 [0116.480] GetCurrentProcess () returned 0xffffffff [0116.480] GetLastError () returned 0x3f0 [0116.480] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ec5c | out: TokenHandle=0x515ec5c*=0x388) returned 1 [0116.480] GetLastError () returned 0x3f0 [0116.481] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out", nBufferLength=0x105, lpBuffer=0x515e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out", lpFilePart=0x0) returned 0x30 [0116.481] GetLastError () returned 0x3f0 [0116.481] SetErrorMode (uMode=0x1) returned 0x1 [0116.481] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x6343c4c, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0116.482] GetLastError () returned 0x0 [0116.482] GetFileType (hFile=0x38c) returned 0x1 [0116.482] SetErrorMode (uMode=0x1) returned 0x1 [0116.482] GetFileType (hFile=0x38c) returned 0x1 [0116.482] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err", nBufferLength=0x105, lpBuffer=0x515e6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err", lpFilePart=0x0) returned 0x30 [0116.482] GetLastError () returned 0x0 [0116.482] SetErrorMode (uMode=0x1) returned 0x1 [0116.483] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x6343e5c, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x384 [0116.484] GetLastError () returned 0x0 [0116.484] GetFileType (hFile=0x384) returned 0x1 [0116.484] SetErrorMode (uMode=0x1) returned 0x1 [0116.484] GetFileType (hFile=0x384) returned 0x1 [0116.484] WriteFile (in: hFile=0x38c, lpBuffer=0x63457b4*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x515ebfc, lpOverlapped=0x0 | out: lpBuffer=0x63457b4*, lpNumberOfBytesWritten=0x515ebfc*=0x18c, lpOverlapped=0x0) returned 1 [0116.488] GetLastError () returned 0x0 [0116.488] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0116.489] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x63517b4, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x22bdb0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x38c, hStdError=0x384), lpProcessInformation=0x6343ff0 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline\"", lpProcessInformation=0x6343ff0*(hProcess=0x44c, hThread=0x454, dwProcessId=0xfec, dwThreadId=0xff0)) returned 1 [0116.497] GetLastError () returned 0x0 [0116.497] CloseHandle (hObject=0x38c) returned 1 [0116.498] GetLastError () returned 0x0 [0116.499] CloseHandle (hObject=0x384) returned 1 [0116.499] GetLastError () returned 0x0 [0116.499] WaitForSingleObject (hHandle=0x44c, dwMilliseconds=0x927c0) returned 0x0 [0120.102] GetLastError () returned 0x0 [0120.102] GetExitCodeProcess (in: hProcess=0x44c, lpExitCode=0x515ece8 | out: lpExitCode=0x515ece8*=0x0) returned 1 [0120.102] GetLastError () returned 0x0 [0120.103] CloseHandle (hObject=0x44c) returned 1 [0120.103] GetLastError () returned 0x0 [0120.103] CloseHandle (hObject=0x454) returned 1 [0120.103] GetLastError () returned 0x0 [0120.103] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", nBufferLength=0x105, lpBuffer=0x515e7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", lpFilePart=0x0) returned 0x30 [0120.103] GetLastError () returned 0x0 [0120.103] SetErrorMode (uMode=0x1) returned 0x1 [0120.104] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0120.104] GetLastError () returned 0x0 [0120.104] GetFileType (hFile=0x454) returned 0x1 [0120.104] SetErrorMode (uMode=0x1) returned 0x1 [0120.104] GetFileType (hFile=0x454) returned 0x1 [0120.104] GetFileSize (in: hFile=0x454, lpFileSizeHigh=0x515eda8 | out: lpFileSizeHigh=0x515eda8*=0x0) returned 0x1200 [0120.104] GetLastError () returned 0x0 [0120.105] ReadFile (in: hFile=0x454, lpBuffer=0x6352044, nNumberOfBytesToRead=0x1200, lpNumberOfBytesRead=0x515ed50, lpOverlapped=0x0 | out: lpBuffer=0x6352044*, lpNumberOfBytesRead=0x515ed50*=0x1200, lpOverlapped=0x0) returned 1 [0120.105] GetLastError () returned 0x0 [0120.125] CloseHandle (hObject=0x454) returned 1 [0120.126] GetLastError () returned 0x0 [0120.126] GetCurrentProcess () returned 0xffffffff [0120.126] GetLastError () returned 0x3f0 [0120.127] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x515ed48 | out: TokenHandle=0x515ed48*=0x454) returned 1 [0120.127] GetLastError () returned 0x3f0 [0120.127] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.pdb", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.pdb", lpFilePart=0x0) returned 0x30 [0120.127] GetLastError () returned 0x3f0 [0120.127] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.pdb")) returned 1 [0120.131] GetLastError () returned 0x3f0 [0120.132] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline", lpFilePart=0x0) returned 0x34 [0120.132] GetLastError () returned 0x3f0 [0120.132] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.cmdline")) returned 1 [0120.132] GetLastError () returned 0x3f0 [0120.132] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err", lpFilePart=0x0) returned 0x30 [0120.132] GetLastError () returned 0x3f0 [0120.132] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.err")) returned 1 [0120.133] GetLastError () returned 0x3f0 [0120.133] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp", lpFilePart=0x0) returned 0x30 [0120.133] GetLastError () returned 0x3f0 [0120.133] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.tmp")) returned 1 [0120.134] GetLastError () returned 0x3f0 [0120.134] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs", lpFilePart=0x0) returned 0x31 [0120.134] GetLastError () returned 0x3f0 [0120.134] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.0.cs")) returned 1 [0120.134] GetLastError () returned 0x3f0 [0120.134] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll", lpFilePart=0x0) returned 0x30 [0120.134] GetLastError () returned 0x3f0 [0120.134] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.dll")) returned 1 [0120.138] GetLastError () returned 0x3f0 [0120.138] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out", nBufferLength=0x105, lpBuffer=0x515e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out", lpFilePart=0x0) returned 0x30 [0120.138] GetLastError () returned 0x3f0 [0120.138] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\xqnqsdsy.out")) returned 1 [0120.142] GetLastError () returned 0x3f0 [0120.314] GetCurrentProcess () returned 0xffffffff [0120.314] GetLastError () returned 0x3f0 [0120.503] LocalAlloc (uFlags=0x0, uBytes=0xea00) returned 0x74f0dd8 [0121.054] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x4) returned 0x1c90000 [0121.055] GetLastError () returned 0x3f0 [0121.115] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1c90000, lpBuffer=0x74f0dd8*, nSize=0x400, lpNumberOfBytesWritten=0x515ef18 | out: lpBuffer=0x74f0dd8*, lpNumberOfBytesWritten=0x515ef18*=0x400) returned 1 [0121.117] GetLastError () returned 0x3f0 [0121.250] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1c91000, lpBuffer=0x74f11d8*, nSize=0xc000, lpNumberOfBytesWritten=0x515ee44 | out: lpBuffer=0x74f11d8*, lpNumberOfBytesWritten=0x515ee44*=0xc000) returned 1 [0121.254] GetLastError () returned 0x3f0 [0121.285] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1c9d000, lpBuffer=0x74fd1d8*, nSize=0x600, lpNumberOfBytesWritten=0x515eef0 | out: lpBuffer=0x74fd1d8*, lpNumberOfBytesWritten=0x515eef0*=0x600) returned 1 [0121.286] GetLastError () returned 0x3f0 [0121.306] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1c9e000, lpBuffer=0x74fd7d8*, nSize=0x200, lpNumberOfBytesWritten=0x515eef0 | out: lpBuffer=0x74fd7d8*, lpNumberOfBytesWritten=0x515eef0*=0x200) returned 1 [0121.308] GetLastError () returned 0x3f0 [0121.331] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1c9f000, lpBuffer=0x74fd9d8*, nSize=0x1800, lpNumberOfBytesWritten=0x515eef0 | out: lpBuffer=0x74fd9d8*, lpNumberOfBytesWritten=0x515eef0*=0x1800) returned 1 [0121.332] GetLastError () returned 0x3f0 [0121.461] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1ca1000, lpBuffer=0x74ff1d8*, nSize=0x600, lpNumberOfBytesWritten=0x515eef0 | out: lpBuffer=0x74ff1d8*, lpNumberOfBytesWritten=0x515eef0*=0x600) returned 1 [0121.462] GetLastError () returned 0x3f0 [0121.583] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0121.584] GetLastError () returned 0xcb [0121.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2fb5268, Length=0x20000, ResultLength=0x515ec2c | out: SystemInformation=0x2fb5268, ResultLength=0x515ec2c*=0xd6a8) returned 0x0 [0121.958] EnumWindows (lpEnumFunc=0x1d9f68a, lParam=0x0) returned 0 [0121.959] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x270 [0121.959] GetLastError () returned 0x3f0 [0121.959] GetWindow (hWnd=0x30120, uCmd=0x4) returned 0x3011e [0121.960] GetWindowThreadProcessId (in: hWnd=0x300cc, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.960] GetLastError () returned 0x3f0 [0121.960] GetWindow (hWnd=0x300cc, uCmd=0x4) returned 0x0 [0121.960] IsWindowVisible (hWnd=0x300cc) returned 0 [0121.960] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.960] GetLastError () returned 0x3f0 [0121.960] GetWindow (hWnd=0x300ce, uCmd=0x4) returned 0x0 [0121.960] IsWindowVisible (hWnd=0x300ce) returned 0 [0121.960] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.960] GetLastError () returned 0x3f0 [0121.960] GetWindow (hWnd=0x400a0, uCmd=0x4) returned 0x0 [0121.960] IsWindowVisible (hWnd=0x400a0) returned 0 [0121.961] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x724 [0121.961] GetLastError () returned 0x3f0 [0121.961] GetWindow (hWnd=0x10128, uCmd=0x4) returned 0x20126 [0121.961] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.961] GetLastError () returned 0x3f0 [0121.961] GetWindow (hWnd=0x10106, uCmd=0x4) returned 0x10044 [0121.961] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x3fc [0121.961] GetLastError () returned 0x3f0 [0121.962] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x3fc [0121.962] GetLastError () returned 0x3f0 [0121.962] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.962] GetLastError () returned 0x3f0 [0121.962] GetWindow (hWnd=0x10066, uCmd=0x4) returned 0x10044 [0121.962] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.962] GetLastError () returned 0x3f0 [0121.962] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x10044 [0121.962] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.962] GetLastError () returned 0x3f0 [0121.962] GetWindow (hWnd=0x10050, uCmd=0x4) returned 0x10044 [0121.963] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.963] GetLastError () returned 0x3f0 [0121.963] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10044 [0121.963] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.963] GetLastError () returned 0x3f0 [0121.963] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x10044 [0121.963] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.963] GetLastError () returned 0x3f0 [0121.963] GetWindow (hWnd=0x1006c, uCmd=0x4) returned 0x10044 [0121.963] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.963] GetLastError () returned 0x3f0 [0121.964] GetWindow (hWnd=0x10068, uCmd=0x4) returned 0x10044 [0121.964] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.964] GetLastError () returned 0x3f0 [0121.964] GetWindow (hWnd=0x10048, uCmd=0x4) returned 0x10044 [0121.964] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x515e7c0 | out: lpdwProcessId=0x515e7c0) returned 0x60c [0121.964] GetLastError () returned 0x3f0 [0121.964] GetWindow (hWnd=0x10044, uCmd=0x4) returned 0x0 [0121.964] IsWindowVisible (hWnd=0x10044) returned 1 [0121.964] GetLastError () returned 0x3f0 [0121.987] OpenProcess (dwDesiredAccess=0x43a, bInheritHandle=0, dwProcessId=0x5bc) returned 0x454 [0121.988] GetLastError () returned 0x3f0 [0121.988] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x4) returned 0x4710000 [0121.989] GetLastError () returned 0x3f0 [0121.989] GetCurrentProcess () returned 0xffffffff [0121.989] GetLastError () returned 0x3f0 [0121.989] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x4710000, lpBuffer=0x1c90000*, nSize=0x12000, lpNumberOfBytesWritten=0x515e70c | out: lpBuffer=0x1c90000*, lpNumberOfBytesWritten=0x515e70c*=0x12000) returned 1 [0121.994] GetLastError () returned 0x3f0 [0122.018] VirtualAllocEx (hProcess=0x454, lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x40) returned 0x21d0000 [0124.868] GetLastError () returned 0x3f0 [0129.867] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.867] GetLastError () returned 0xcb [0129.877] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.877] GetLastError () returned 0xcb [0129.909] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.910] GetLastError () returned 0xcb [0129.917] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.917] GetLastError () returned 0xcb [0129.919] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.919] GetLastError () returned 0xcb [0129.932] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.932] GetLastError () returned 0xcb [0129.978] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x22bd98, nSize=0x80 | out: lpBuffer="") returned 0x0 [0129.978] GetLastError () returned 0xcb [0129.995] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0129.997] GetLastError () returned 0xcb [0129.997] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x515e0e8 | out: lpConsoleScreenBufferInfo=0x515e0e8) returned 1 [0129.997] GetLastError () returned 0xcb [0130.000] GetConsoleOutputCP () returned 0x1b5 [0130.006] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x515e0f0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x515e0f0) returned 0 [0130.006] GetLastError () returned 0xcb [0130.007] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0130.008] GetLastError () returned 0xcb [0130.008] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x515e138 | out: lpMode=0x515e138) returned 1 [0130.008] GetLastError () returned 0xcb [0130.012] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0130.012] GetLastError () returned 0xcb [0130.013] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x515e11c | out: lpMode=0x515e11c) returned 1 [0130.013] GetLastError () returned 0xcb [0130.018] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x64290a8*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x515e11c, lpReserved=0x0 | out: lpBuffer=0x64290a8*, lpNumberOfCharsWritten=0x515e11c*=0x4) returned 1 [0130.019] GetLastError () returned 0xcb [0130.033] CloseHandle (hObject=0x13) returned 1 [0130.033] GetLastError () returned 0xcb [0130.037] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0130.038] GetLastError () returned 0xcb [0130.038] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x515e11c | out: lpMode=0x515e11c) returned 1 [0130.038] GetLastError () returned 0xcb [0130.038] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x642920c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x515e11c, lpReserved=0x0 | out: lpBuffer=0x642920c*, lpNumberOfCharsWritten=0x515e11c*=0x2) returned 1 [0130.039] GetLastError () returned 0xcb [0130.039] CloseHandle (hObject=0x13) returned 1 [0130.039] GetLastError () returned 0xcb [0130.040] WriteProcessMemory (in: hProcess=0x454, lpBaseAddress=0x21d0000, lpBuffer=0x4710000*, nSize=0x12000, lpNumberOfBytesWritten=0x515e564 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0x515e564*=0x12000) returned 1 [0130.053] GetLastError () returned 0xcb [0130.549] CreateRemoteThread (in: hProcess=0x454, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21da710, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x390 [0130.561] VirtualFree (lpAddress=0x4710000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.562] GetLastError () returned 0xcb [0130.586] CloseHandle (hObject=0x454) returned 1 [0130.586] GetLastError () returned 0xcb [0130.721] VirtualQuery (in: lpAddress=0x515df44, lpBuffer=0x515ef44, dwLength=0x1c | out: lpBuffer=0x515ef44*(BaseAddress=0x515d000, AllocationBase=0x47d0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0130.824] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ec04 | out: ppv=0x515ec04*=0x1d57dc) returned 0x0 [0130.825] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebfc | out: pAptType=0x515ebfc*=1) returned 0x0 [0130.825] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ec00 | out: ppvObject=0x515ec00*=0x0) returned 0x80004002 [0130.825] IUnknown:Release (This=0x1d57dc) returned 0x1 [0130.851] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e71c | out: ppv=0x515e71c*=0x7650978) returned 0x0 [0130.852] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e54c | out: ppvObject=0x515e54c*=0x0) returned 0x80004002 [0130.852] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650978, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e584 | out: ppvObject=0x515e584*=0x7650820) returned 0x0 [0130.852] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e328 | out: ppvObject=0x515e328*=0x7650820) returned 0x0 [0130.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2e4 | out: ppvObject=0x515e2e4*=0x0) returned 0x80004002 [0130.853] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0130.853] CoGetContextToken (in: pToken=0x515e170 | out: pToken=0x515e170) returned 0x0 [0130.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e158 | out: ppvObject=0x515e158*=0x74f0ab8) returned 0x0 [0130.854] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x74f0ab8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e160 | out: pCid=0x515e160*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.854] WbemDefPath:IUnknown:Release (This=0x74f0ab8) returned 0x3 [0130.854] CoGetContextToken (in: pToken=0x515e168 | out: pToken=0x515e168) returned 0x0 [0130.854] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x4 [0130.854] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1dc | out: ppvObject=0x515e1dc*=0x0) returned 0x80004002 [0130.855] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x3 [0130.855] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0130.855] WbemDefPath:IUnknown:Release (This=0x7650978) returned 0x0 [0130.855] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0130.856] CoGetContextToken (in: pToken=0x515ea18 | out: pToken=0x515ea18) returned 0x0 [0130.856] CoGetContextToken (in: pToken=0x515e9d8 | out: pToken=0x515e9d8) returned 0x0 [0130.856] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0130.856] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x515ea54*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea50 | out: ppvObject=0x515ea50*=0x7650820) returned 0x0 [0130.856] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0130.856] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0130.857] CoGetContextToken (in: pToken=0x515ea98 | out: pToken=0x515ea98) returned 0x0 [0130.857] CoGetContextToken (in: pToken=0x515ea58 | out: pToken=0x515ea58) returned 0x0 [0130.857] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0130.857] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x515ead4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ead0 | out: ppvObject=0x515ead0*=0x7650820) returned 0x0 [0130.857] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0130.857] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0130.857] WbemDefPath:IWbemPath:SetText (This=0x7650820, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0130.858] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0130.858] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec3c | out: puCount=0x515ec3c*=0x2) returned 0x0 [0130.858] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec38*=0x0, pszText=0x0 | out: puBuffLength=0x515ec38*=0x17, pszText=0x0) returned 0x0 [0130.858] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0130.858] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec38 | out: puCount=0x515ec38*=0x2) returned 0x0 [0130.858] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec34*=0x0, pszText=0x0 | out: puBuffLength=0x515ec34*=0x17, pszText=0x0) returned 0x0 [0130.858] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec34*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec34*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0130.858] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebb4 | out: ppv=0x515ebb4*=0x1d57dc) returned 0x0 [0130.859] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebac | out: pAptType=0x515ebac*=1) returned 0x0 [0130.859] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebb0 | out: ppvObject=0x515ebb0*=0x0) returned 0x80004002 [0130.859] IUnknown:Release (This=0x1d57dc) returned 0x1 [0130.859] CoGetClassObject (in: rclsid=0x288844*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ea04 | out: ppv=0x515ea04*=0x765dee8) returned 0x0 [0130.860] WbemLocator:IUnknown:QueryInterface (in: This=0x765dee8, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e834 | out: ppvObject=0x515e834*=0x0) returned 0x80004002 [0130.860] WbemLocator:IClassFactory:CreateInstance (in: This=0x765dee8, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e86c | out: ppvObject=0x515e86c*=0x7650978) returned 0x0 [0130.860] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e610 | out: ppvObject=0x515e610*=0x7650978) returned 0x0 [0130.860] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e5cc | out: ppvObject=0x515e5cc*=0x0) returned 0x80004002 [0130.861] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x3 [0130.861] CoGetContextToken (in: pToken=0x515e458 | out: pToken=0x515e458) returned 0x0 [0130.861] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e440 | out: ppvObject=0x515e440*=0x0) returned 0x80004002 [0130.862] CoGetContextToken (in: pToken=0x515e450 | out: pToken=0x515e450) returned 0x0 [0130.862] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x4 [0130.862] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e4c4 | out: ppvObject=0x515e4c4*=0x0) returned 0x80004002 [0130.862] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x3 [0130.862] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x2 [0130.863] WbemLocator:IUnknown:Release (This=0x765dee8) returned 0x0 [0130.863] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x1 [0130.863] CoGetContextToken (in: pToken=0x515e95c | out: pToken=0x515e95c) returned 0x0 [0130.863] CoGetContextToken (in: pToken=0x515e91c | out: pToken=0x515e91c) returned 0x0 [0130.863] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x2 [0130.863] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x515e998*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e994 | out: ppvObject=0x515e994*=0x7650978) returned 0x0 [0130.863] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x2 [0130.864] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x1 [0130.864] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515eb8c | out: puCount=0x515eb8c*=0x2) returned 0x0 [0130.864] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x515eb88*=0x0, pszText=0x0 | out: puBuffLength=0x515eb88*=0x17, pszText=0x0) returned 0x0 [0130.864] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x515eb88*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515eb88*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0130.864] CoCreateInstance (in: rclsid=0x1c413a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1c412d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x515e664 | out: ppv=0x515e664*=0x7650988) returned 0x0 [0130.864] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7650988, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x515e6b0 | out: ppNamespace=0x515e6b0*=0x7650bdc) returned 0x0 [0131.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e580 | out: ppvObject=0x515e580*=0x2b5794) returned 0x0 [0131.333] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x2b5794, pProxy=0x7650bdc, pAuthnSvc=0x515e5c8, pAuthzSvc=0x515e5c4, pServerPrincName=0x515e5d4, pAuthnLevel=0x515e5cc, pImpLevel=0x515e5b8, pAuthInfo=0x515e5bc, pCapabilites=0x515e5c0 | out: pAuthnSvc=0x515e5c8*=0xa, pAuthzSvc=0x515e5c4*=0x0, pServerPrincName=0x515e5d4, pAuthnLevel=0x515e5cc*=0x6, pImpLevel=0x515e5b8*=0x2, pAuthInfo=0x515e5bc, pCapabilites=0x515e5c0*=0x1) returned 0x0 [0131.333] WbemLocator:IUnknown:Release (This=0x2b5794) returned 0x1 [0131.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e574 | out: ppvObject=0x515e574*=0x2b57b4) returned 0x0 [0131.333] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e570 | out: ppvObject=0x515e570*=0x2b5794) returned 0x0 [0131.333] WbemLocator:IClientSecurity:SetBlanket (This=0x2b5794, pProxy=0x7650bdc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0131.334] WbemLocator:IUnknown:Release (This=0x2b5794) returned 0x2 [0131.334] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x1 [0131.334] CoTaskMemFree (pv=0x2b1ba0) [0131.334] WbemLocator:IUnknown:Release (This=0x7650988) returned 0x0 [0131.334] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515df30 | out: ppvObject=0x515df30*=0x2b57b4) returned 0x0 [0131.335] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515deec | out: ppvObject=0x515deec*=0x0) returned 0x80004002 [0131.335] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515dde0 | out: ppvObject=0x515dde0*=0x0) returned 0x80004002 [0131.336] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0131.336] CoGetContextToken (in: pToken=0x515dd78 | out: pToken=0x515dd78) returned 0x0 [0131.336] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dd60 | out: ppvObject=0x515dd60*=0x2b5714) returned 0x0 [0131.337] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2b5714, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dd68 | out: pCid=0x515dd68*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0131.337] WbemLocator:IUnknown:Release (This=0x2b5714) returned 0x3 [0131.337] CoGetContextToken (in: pToken=0x515dd70 | out: pToken=0x515dd70) returned 0x0 [0131.338] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x4 [0131.338] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dde4 | out: ppvObject=0x515dde4*=0x2b579c) returned 0x0 [0131.338] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x4 [0131.338] WbemLocator:IRpcOptions:Query (in: This=0x2b579c, pPrx=0x2b57b4, dwProperty=2, pdwValue=0x515de08 | out: pdwValue=0x515de08) returned 0x80004002 [0131.339] WbemLocator:IUnknown:Release (This=0x2b579c) returned 0x3 [0131.339] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0131.339] CoGetContextToken (in: pToken=0x515e1e4 | out: pToken=0x515e1e4) returned 0x0 [0131.339] CoGetContextToken (in: pToken=0x515e1a4 | out: pToken=0x515e1a4) returned 0x0 [0131.339] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0131.339] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x515e220*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e21c | out: ppvObject=0x515e21c*=0x7650bdc) returned 0x0 [0131.340] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0131.340] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0131.340] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x1 [0131.341] CoGetContextToken (in: pToken=0x515eb00 | out: pToken=0x515eb00) returned 0x0 [0131.341] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x2 [0131.341] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e724 | out: ppvObject=0x515e724*=0x2b57b4) returned 0x0 [0131.341] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0131.342] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x1 [0131.342] CoGetContextToken (in: pToken=0x515e304 | out: pToken=0x515e304) returned 0x0 [0131.342] CoGetContextToken (in: pToken=0x515e2c4 | out: pToken=0x515e2c4) returned 0x0 [0131.342] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x2 [0131.342] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x515e340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x515e33c | out: ppvObject=0x515e33c*=0x7650bdc) returned 0x0 [0131.342] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0131.343] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0131.343] IWbemServices:ExecQuery (in: This=0x7650bdc, strQueryLanguage="WQL", strQuery="select * from Win32_Shadowcopy", lFlags=16, pCtx=0x0, ppEnum=0x515e948 | out: ppEnum=0x515e948*=0x765dc9c) returned 0x0 [0131.348] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e5f4 | out: ppvObject=0x515e5f4*=0x765dca0) returned 0x0 [0131.348] IClientSecurity:QueryBlanket (in: This=0x765dca0, pProxy=0x765dc9c, pAuthnSvc=0x515e63c, pAuthzSvc=0x515e638, pServerPrincName=0x515e648, pAuthnLevel=0x515e640, pImpLevel=0x515e62c, pAuthInfo=0x515e630, pCapabilites=0x515e634 | out: pAuthnSvc=0x515e63c*=0xa, pAuthzSvc=0x515e638*=0x0, pServerPrincName=0x515e648, pAuthnLevel=0x515e640*=0x6, pImpLevel=0x515e62c*=0x2, pAuthInfo=0x515e630, pCapabilites=0x515e634*=0x1) returned 0x0 [0131.348] IUnknown:Release (This=0x765dca0) returned 0x1 [0131.348] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e5e8 | out: ppvObject=0x515e5e8*=0x2b56c4) returned 0x0 [0131.348] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e5e4 | out: ppvObject=0x515e5e4*=0x765dca0) returned 0x0 [0131.348] IClientSecurity:SetBlanket (This=0x765dca0, pProxy=0x765dc9c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0131.351] IUnknown:Release (This=0x765dca0) returned 0x2 [0131.351] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x1 [0131.351] CoTaskMemFree (pv=0x2b1c30) [0131.352] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0131.352] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa0 | out: ppvObject=0x515dfa0*=0x2b56c4) returned 0x0 [0131.352] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df5c | out: ppvObject=0x515df5c*=0x0) returned 0x80004002 [0131.353] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de50 | out: ppvObject=0x515de50*=0x0) returned 0x80004002 [0131.354] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x3 [0131.354] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0131.354] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd0 | out: ppvObject=0x515ddd0*=0x2b5624) returned 0x0 [0131.354] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2b5624, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515ddd8 | out: pCid=0x515ddd8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0131.354] WbemLocator:IUnknown:Release (This=0x2b5624) returned 0x3 [0131.354] CoGetContextToken (in: pToken=0x515dde0 | out: pToken=0x515dde0) returned 0x0 [0131.354] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x4 [0131.355] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de54 | out: ppvObject=0x515de54*=0x2b56ac) returned 0x0 [0131.355] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x4 [0131.355] WbemLocator:IRpcOptions:Query (in: This=0x2b56ac, pPrx=0x2b56c4, dwProperty=2, pdwValue=0x515de78 | out: pdwValue=0x515de78) returned 0x80004002 [0131.355] WbemLocator:IUnknown:Release (This=0x2b56ac) returned 0x3 [0131.355] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x2 [0131.356] CoGetContextToken (in: pToken=0x515e254 | out: pToken=0x515e254) returned 0x0 [0131.356] CoGetContextToken (in: pToken=0x515e214 | out: pToken=0x515e214) returned 0x0 [0131.356] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x3 [0131.356] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x515e290*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e28c | out: ppvObject=0x515e28c*=0x765dc9c) returned 0x0 [0131.356] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x3 [0131.356] IUnknown:Release (This=0x765dc9c) returned 0x2 [0131.356] IUnknown:Release (This=0x765dc9c) returned 0x1 [0131.357] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ebe0 | out: puCount=0x515ebe0*=0x2) returned 0x0 [0131.357] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ebdc*=0x0, pszText=0x0 | out: puBuffLength=0x515ebdc*=0x17, pszText=0x0) returned 0x0 [0131.357] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ebdc*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ebdc*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0131.357] CoGetContextToken (in: pToken=0x515e57c | out: pToken=0x515e57c) returned 0x0 [0131.357] CoGetContextToken (in: pToken=0x515e53c | out: pToken=0x515e53c) returned 0x0 [0131.357] WbemLocator:IUnknown:AddRef (This=0x2b56c4) returned 0x2 [0131.357] WbemLocator:IUnknown:QueryInterface (in: This=0x2b56c4, riid=0x515e5b8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e5b4 | out: ppvObject=0x515e5b4*=0x765dc9c) returned 0x0 [0131.357] WbemLocator:IUnknown:Release (This=0x2b56c4) returned 0x2 [0131.358] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0131.358] IEnumWbemClassObject:Clone (in: This=0x765dc9c, ppEnum=0x515ebb0 | out: ppEnum=0x515ebb0*=0x765dd64) returned 0x0 [0131.360] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e86c | out: ppvObject=0x515e86c*=0x765dd68) returned 0x0 [0131.360] IClientSecurity:QueryBlanket (in: This=0x765dd68, pProxy=0x765dd64, pAuthnSvc=0x515e8b4, pAuthzSvc=0x515e8b0, pServerPrincName=0x515e8c0, pAuthnLevel=0x515e8b8, pImpLevel=0x515e8a4, pAuthInfo=0x515e8a8, pCapabilites=0x515e8ac | out: pAuthnSvc=0x515e8b4*=0xa, pAuthzSvc=0x515e8b0*=0x0, pServerPrincName=0x515e8c0, pAuthnLevel=0x515e8b8*=0x6, pImpLevel=0x515e8a4*=0x2, pAuthInfo=0x515e8a8, pCapabilites=0x515e8ac*=0x1) returned 0x0 [0131.360] IUnknown:Release (This=0x765dd68) returned 0x1 [0131.360] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x1c41250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e860 | out: ppvObject=0x515e860*=0x2b5994) returned 0x0 [0131.360] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x1c41260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e85c | out: ppvObject=0x515e85c*=0x765dd68) returned 0x0 [0131.360] IClientSecurity:SetBlanket (This=0x765dd68, pProxy=0x765dd64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0131.363] IUnknown:Release (This=0x765dd68) returned 0x2 [0131.363] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x1 [0131.363] CoTaskMemFree (pv=0x2b1ba0) [0131.363] IUnknown:Release (This=0x765dc9c) returned 0x2 [0131.364] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e208 | out: ppvObject=0x515e208*=0x2b5994) returned 0x0 [0131.364] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e1c4 | out: ppvObject=0x515e1c4*=0x0) returned 0x80004002 [0131.365] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e0b8 | out: ppvObject=0x515e0b8*=0x0) returned 0x80004002 [0131.366] WbemLocator:IUnknown:AddRef (This=0x2b5994) returned 0x3 [0131.366] CoGetContextToken (in: pToken=0x515e050 | out: pToken=0x515e050) returned 0x0 [0131.366] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e038 | out: ppvObject=0x515e038*=0x2b58f4) returned 0x0 [0131.366] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x2b58f4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e040 | out: pCid=0x515e040*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0131.367] WbemLocator:IUnknown:Release (This=0x2b58f4) returned 0x3 [0131.367] CoGetContextToken (in: pToken=0x515e048 | out: pToken=0x515e048) returned 0x0 [0131.367] WbemLocator:IUnknown:AddRef (This=0x2b5994) returned 0x4 [0131.367] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0bc | out: ppvObject=0x515e0bc*=0x2b597c) returned 0x0 [0131.367] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x4 [0131.368] WbemLocator:IRpcOptions:Query (in: This=0x2b597c, pPrx=0x2b5994, dwProperty=2, pdwValue=0x515e0e0 | out: pdwValue=0x515e0e0) returned 0x80004002 [0131.368] WbemLocator:IUnknown:Release (This=0x2b597c) returned 0x3 [0131.368] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x2 [0131.368] CoGetContextToken (in: pToken=0x515e4bc | out: pToken=0x515e4bc) returned 0x0 [0131.368] CoGetContextToken (in: pToken=0x515e47c | out: pToken=0x515e47c) returned 0x0 [0131.368] WbemLocator:IUnknown:AddRef (This=0x2b5994) returned 0x3 [0131.368] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x515e4f8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515e4f4 | out: ppvObject=0x515e4f4*=0x765dd64) returned 0x0 [0131.369] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x3 [0131.369] IUnknown:Release (This=0x765dd64) returned 0x2 [0131.369] IUnknown:Release (This=0x765dd64) returned 0x1 [0131.369] CoGetContextToken (in: pToken=0x515eab0 | out: pToken=0x515eab0) returned 0x0 [0131.369] CoGetContextToken (in: pToken=0x515ea70 | out: pToken=0x515ea70) returned 0x0 [0131.369] WbemLocator:IUnknown:AddRef (This=0x2b5994) returned 0x2 [0131.370] WbemLocator:IUnknown:QueryInterface (in: This=0x2b5994, riid=0x515eaec*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x515eae8 | out: ppvObject=0x515eae8*=0x765dd64) returned 0x0 [0131.370] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x2 [0131.370] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0131.370] IEnumWbemClassObject:Reset (This=0x765dd64) returned 0x0 [0131.371] IUnknown:Release (This=0x765dd64) returned 0x2 [0131.372] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0131.372] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0131.372] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x765cae8, puReturned=0x64878e8*=0x1) returned 0x0 [0177.217] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x765cae8) returned 0x0 [0177.218] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0177.218] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0177.219] IUnknown:AddRef (This=0x765cae8) returned 0x3 [0177.219] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0177.219] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x765caec) returned 0x0 [0177.220] IMarshal:GetUnmarshalClass (in: This=0x765caec, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0177.220] IUnknown:Release (This=0x765caec) returned 0x3 [0177.220] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0177.220] IUnknown:AddRef (This=0x765cae8) returned 0x4 [0177.220] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0177.220] IUnknown:Release (This=0x765cae8) returned 0x3 [0177.221] IUnknown:Release (This=0x765cae8) returned 0x2 [0177.221] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0177.221] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0177.221] IUnknown:AddRef (This=0x765cae8) returned 0x3 [0177.221] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x765cae8) returned 0x0 [0177.222] IUnknown:Release (This=0x765cae8) returned 0x3 [0177.222] IUnknown:Release (This=0x765cae8) returned 0x2 [0177.222] IUnknown:Release (This=0x765cae8) returned 0x1 [0177.222] IUnknown:Release (This=0x765dd64) returned 0x2 [0177.222] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0177.222] IUnknown:AddRef (This=0x765cae8) returned 0x2 [0177.223] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0177.224] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0177.224] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0177.224] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0177.225] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0177.225] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0177.225] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.227] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7650988) returned 0x0 [0177.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650988, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0177.228] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650988, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7650bf0) returned 0x0 [0177.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7650bf0) returned 0x0 [0177.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0177.229] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0177.229] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0177.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x74f0b48) returned 0x0 [0177.229] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x74f0b48, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.229] WbemDefPath:IUnknown:Release (This=0x74f0b48) returned 0x3 [0177.229] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0177.230] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x4 [0177.230] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0177.230] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x3 [0177.230] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0177.230] WbemDefPath:IUnknown:Release (This=0x7650988) returned 0x0 [0177.230] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0177.231] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0177.231] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0177.231] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0177.231] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7650bf0) returned 0x0 [0177.231] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0177.231] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0177.231] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0177.231] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0177.231] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0177.232] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7650bf0) returned 0x0 [0177.232] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0177.232] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0177.232] WbemDefPath:IWbemPath:SetText (This=0x7650bf0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0177.232] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0177.232] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0177.232] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0177.232] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.243] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0177.243] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0177.243] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.243] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6488728*=0, plFlavor=0x648872c*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6488728*=8, plFlavor=0x648872c*=64) returned 0x0 [0177.243] SysStringLen (param_1="root\\cimv2") returned 0xa [0177.243] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6488728*=8, plFlavor=0x648872c*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6488728*=8, plFlavor=0x648872c*=64) returned 0x0 [0177.243] SysStringLen (param_1="root\\cimv2") returned 0xa [0177.243] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0177.243] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0177.243] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.244] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64887e0*=0, plFlavor=0x64887e4*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64887e0*=8, plFlavor=0x64887e4*=64) returned 0x0 [0177.244] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0177.244] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64887e0*=8, plFlavor=0x64887e4*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64887e0*=8, plFlavor=0x64887e4*=64) returned 0x0 [0177.244] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0177.256] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e790 | out: puCount=0x515e790*=0x2) returned 0x0 [0177.256] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e78c*=0x0, pszText=0x0 | out: puBuffLength=0x515e78c*=0x17, pszText=0x0) returned 0x0 [0177.256] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e78c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e78c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.256] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e790 | out: puCount=0x515e790*=0x2) returned 0x0 [0177.256] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e78c*=0x0, pszText=0x0 | out: puBuffLength=0x515e78c*=0x17, pszText=0x0) returned 0x0 [0177.256] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e78c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e78c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.257] IWbemClassObject:GetNames (in: This=0x765cae8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x515e754*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e720 | out: pNames=0x515e720*="\x01ƀ\x04") returned 0x0 [0177.257] SafeArrayGetDim (psa=0x2b1d60) returned 0x1 [0177.257] SafeArrayGetDim (psa=0x2b1d60) returned 0x1 [0177.258] SafeArrayGetLBound (in: psa=0x2b1d60, nDim=0x1, plLbound=0x515e31c | out: plLbound=0x515e31c) returned 0x0 [0177.258] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b404*=0, plFlavor=0x648b408*=0 | out: pVal=0x515e74c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x648b404*=3, plFlavor=0x648b408*=64) returned 0x0 [0177.259] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b438*=0, plFlavor=0x648b43c*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x648b438*=8, plFlavor=0x648b43c*=64) returned 0x0 [0177.259] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0177.259] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SUPERCLASS", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b494*=0, plFlavor=0x648b498*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_LogicalElement", varVal2=0x0), pType=0x648b494*=8, plFlavor=0x648b498*=64) returned 0x0 [0177.259] SysStringLen (param_1="CIM_LogicalElement") returned 0x12 [0177.259] IWbemClassObject:Get (in: This=0x765cae8, wszName="__DYNASTY", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b4f4*=0, plFlavor=0x648b4f8*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_ManagedSystemElement", varVal2=0x0), pType=0x648b4f4*=8, plFlavor=0x648b4f8*=64) returned 0x0 [0177.259] SysStringLen (param_1="CIM_ManagedSystemElement") returned 0x18 [0177.259] IWbemClassObject:Get (in: This=0x765cae8, wszName="__RELPATH", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b560*=0, plFlavor=0x648b564*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x648b560*=8, plFlavor=0x648b564*=64) returned 0x0 [0177.260] SysStringLen (param_1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x3c [0177.260] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b614*=0, plFlavor=0x648b618*=0 | out: pVal=0x515e74c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c, varVal2=0x0), pType=0x648b614*=3, plFlavor=0x648b618*=64) returned 0x0 [0177.260] IWbemClassObject:Get (in: This=0x765cae8, wszName="__DERIVATION", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b648*=0, plFlavor=0x648b64c*=0 | out: pVal=0x515e74c*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2b1d60*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x74f0bd8, rgsabound=((cElements=0x2, lLbound=0))), varVal2=0x0), pType=0x648b648*=8200, plFlavor=0x648b64c*=64) returned 0x0 [0177.261] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b704*=0, plFlavor=0x648b708*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x648b704*=8, plFlavor=0x648b708*=64) returned 0x0 [0177.261] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0177.261] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b750*=0, plFlavor=0x648b754*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x648b750*=8, plFlavor=0x648b754*=64) returned 0x0 [0177.261] SysStringLen (param_1="root\\cimv2") returned 0xa [0177.261] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PATH", lFlags=0, pVal=0x515e74c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b7a0*=0, plFlavor=0x648b7a4*=0 | out: pVal=0x515e74c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x648b7a0*=8, plFlavor=0x648b7a4*=64) returned 0x0 [0177.261] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0177.261] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e7cc | out: puCount=0x515e7cc*=0x2) returned 0x0 [0177.262] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e7c8*=0x0, pszText=0x0 | out: puBuffLength=0x515e7c8*=0x17, pszText=0x0) returned 0x0 [0177.262] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e7c8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e7c8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.262] IWbemClassObject:Get (in: This=0x765cae8, wszName="Delete", lFlags=0, pVal=0x515e788*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b8d0*=0, plFlavor=0x648b8d4*=0 | out: pVal=0x515e788*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648b8d0*=0, plFlavor=0x648b8d4*=0) returned 0x80041002 [0177.276] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x515e76c | out: pperrinfo=0x515e76c*=0x0) returned 0x1 [0177.276] IIDFromString (in: lpsz="{EB87E1BD-3233-11D2-AEC9-00C04FB68820}", lpiid=0x515e6c4 | out: lpiid=0x515e6c4) returned 0x0 [0177.276] CoGetClassObject (in: rclsid=0x273e2c*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e62c | out: ppv=0x515e62c*=0x765de50) returned 0x0 [0177.278] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e45c | out: ppvObject=0x515e45c*=0x0) returned 0x80004002 [0177.279] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e494 | out: ppvObject=0x515e494*=0x765de60) returned 0x0 [0177.279] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e238 | out: ppvObject=0x515e238*=0x765de60) returned 0x0 [0177.279] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e1f4 | out: ppvObject=0x515e1f4*=0x0) returned 0x80004002 [0177.280] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x3 [0177.280] CoGetContextToken (in: pToken=0x515e080 | out: pToken=0x515e080) returned 0x0 [0177.280] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e068 | out: ppvObject=0x515e068*=0x0) returned 0x80004002 [0177.280] CoGetContextToken (in: pToken=0x515e078 | out: pToken=0x515e078) returned 0x0 [0177.280] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x4 [0177.280] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0ec | out: ppvObject=0x515e0ec*=0x0) returned 0x80004002 [0177.280] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x3 [0177.281] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0177.281] WbemStatusCodeText:IUnknown:Release (This=0x765de50) returned 0x0 [0177.281] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0177.281] CoGetContextToken (in: pToken=0x515e584 | out: pToken=0x515e584) returned 0x0 [0177.281] CoGetContextToken (in: pToken=0x515e544 | out: pToken=0x515e544) returned 0x0 [0177.281] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x2 [0177.281] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x515e5c0*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e5bc | out: ppvObject=0x515e5bc*=0x765de60) returned 0x0 [0177.282] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0177.282] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0177.633] CoGetContextToken (in: pToken=0x515e54c | out: pToken=0x515e54c) returned 0x0 [0177.633] CoGetContextToken (in: pToken=0x515e50c | out: pToken=0x515e50c) returned 0x0 [0177.633] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x2 [0177.633] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x515e588*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e584 | out: ppvObject=0x515e584*=0x765de60) returned 0x0 [0177.633] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0177.633] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x3 [0177.634] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x765de60, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x515e6bc | out: MessageText=0x515e6bc*="Not found ") returned 0x0 [0177.655] SysStringByteLen (bstr="Not found ") returned 0x14 [0177.655] SysStringByteLen (bstr="Not found ") returned 0x14 [0177.655] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0177.721] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x515e738*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7f0*=0, plFlavor=0x515e7ec*=0 | out: pVal=0x515e738*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515e7f0*=8, plFlavor=0x515e7ec*=64) returned 0x0 [0177.721] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0177.722] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e738*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7f0*=8, plFlavor=0x515e7ec*=64 | out: pVal=0x515e738*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x515e7f0*=8, plFlavor=0x515e7ec*=64) returned 0x0 [0177.722] SysStringLen (param_1="root\\cimv2") returned 0xa [0177.722] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x515e738*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7f0*=8, plFlavor=0x515e7ec*=64 | out: pVal=0x515e738*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515e7f0*=8, plFlavor=0x515e7ec*=64) returned 0x0 [0177.722] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0177.722] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e718 | out: ppv=0x515e718*=0x1d57dc) returned 0x0 [0177.722] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e710 | out: pAptType=0x515e710*=1) returned 0x0 [0177.722] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e714 | out: ppvObject=0x515e714*=0x0) returned 0x80004002 [0177.722] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.723] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e230 | out: ppv=0x515e230*=0x765de50) returned 0x0 [0177.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x0) returned 0x80004002 [0177.723] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e098 | out: ppvObject=0x515e098*=0x765d248) returned 0x0 [0177.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de3c | out: ppvObject=0x515de3c*=0x765d248) returned 0x0 [0177.724] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddf8 | out: ppvObject=0x515ddf8*=0x0) returned 0x80004002 [0177.724] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x3 [0177.724] CoGetContextToken (in: pToken=0x515dc84 | out: pToken=0x515dc84) returned 0x0 [0177.724] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc6c | out: ppvObject=0x515dc6c*=0x74f0be8) returned 0x0 [0177.724] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x74f0be8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc74 | out: pCid=0x515dc74*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.724] WbemDefPath:IUnknown:Release (This=0x74f0be8) returned 0x3 [0177.725] CoGetContextToken (in: pToken=0x515dc7c | out: pToken=0x515dc7c) returned 0x0 [0177.725] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x4 [0177.725] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcf0 | out: ppvObject=0x515dcf0*=0x0) returned 0x80004002 [0177.725] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x3 [0177.725] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0177.725] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0177.725] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0177.726] CoGetContextToken (in: pToken=0x515e52c | out: pToken=0x515e52c) returned 0x0 [0177.726] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0177.726] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x2 [0177.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x515e568*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e564 | out: ppvObject=0x515e564*=0x765d248) returned 0x0 [0177.726] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0177.726] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0177.726] CoGetContextToken (in: pToken=0x515e5ac | out: pToken=0x515e5ac) returned 0x0 [0177.726] CoGetContextToken (in: pToken=0x515e56c | out: pToken=0x515e56c) returned 0x0 [0177.726] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x2 [0177.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x515e5e8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5e4 | out: ppvObject=0x515e5e4*=0x765d248) returned 0x0 [0177.727] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0177.727] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x3 [0177.727] WbemDefPath:IWbemPath:SetText (This=0x765d248, uMode=0x4, pszPath="") returned 0x0 [0177.727] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0177.727] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e718 | out: ppv=0x515e718*=0x1d57dc) returned 0x0 [0177.727] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e710 | out: pAptType=0x515e710*=1) returned 0x0 [0177.727] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e714 | out: ppvObject=0x515e714*=0x0) returned 0x80004002 [0177.727] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.728] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e230 | out: ppv=0x515e230*=0x765de50) returned 0x0 [0177.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x0) returned 0x80004002 [0177.728] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e098 | out: ppvObject=0x515e098*=0x765d2b8) returned 0x0 [0177.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de3c | out: ppvObject=0x515de3c*=0x765d2b8) returned 0x0 [0177.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddf8 | out: ppvObject=0x515ddf8*=0x0) returned 0x80004002 [0177.729] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x3 [0177.729] CoGetContextToken (in: pToken=0x515dc84 | out: pToken=0x515dc84) returned 0x0 [0177.729] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc6c | out: ppvObject=0x515dc6c*=0x74f0bd8) returned 0x0 [0177.729] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x74f0bd8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc74 | out: pCid=0x515dc74*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.729] WbemDefPath:IUnknown:Release (This=0x74f0bd8) returned 0x3 [0177.729] CoGetContextToken (in: pToken=0x515dc7c | out: pToken=0x515dc7c) returned 0x0 [0177.729] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x4 [0177.729] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcf0 | out: ppvObject=0x515dcf0*=0x0) returned 0x80004002 [0177.730] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x3 [0177.730] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0177.730] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0177.730] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0177.730] CoGetContextToken (in: pToken=0x515e52c | out: pToken=0x515e52c) returned 0x0 [0177.730] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0177.730] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x2 [0177.730] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x515e568*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e564 | out: ppvObject=0x515e564*=0x765d2b8) returned 0x0 [0177.731] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0177.731] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0177.731] CoGetContextToken (in: pToken=0x515e5ac | out: pToken=0x515e5ac) returned 0x0 [0177.731] CoGetContextToken (in: pToken=0x515e56c | out: pToken=0x515e56c) returned 0x0 [0177.731] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x2 [0177.731] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x515e5e8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5e4 | out: ppvObject=0x515e5e4*=0x765d2b8) returned 0x0 [0177.731] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0177.731] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x3 [0177.731] WbemDefPath:IWbemPath:SetText (This=0x765d2b8, uMode=0x4, pszPath="") returned 0x0 [0177.731] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0177.732] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x515e76c | out: puCount=0x515e76c*=0x0) returned 0x0 [0177.732] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d248, puCount=0x515e76c | out: puCount=0x515e76c*=0x0) returned 0x0 [0177.738] WbemDefPath:IWbemPath:GetClassName (in: This=0x765d2b8, puBuffLength=0x515e7c0*=0x0, pszName=0x0 | out: puBuffLength=0x515e7c0*=0x0, pszName=0x0) returned 0x8004103a [0177.741] WbemDefPath:IWbemPath:GetServer (in: This=0x765d2b8, puNameBufLength=0x515e7c4*=0x0, pName=0x0 | out: puNameBufLength=0x515e7c4*=0x0, pName=0x0) returned 0x80041009 [0177.746] WbemDefPath:IWbemPath:SetServer (This=0x765d2b8, Name="CRH2YWU7") returned 0x0 [0177.746] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e718 | out: ppv=0x515e718*=0x1d57dc) returned 0x0 [0177.747] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e710 | out: pAptType=0x515e710*=1) returned 0x0 [0177.747] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e714 | out: ppvObject=0x515e714*=0x0) returned 0x80004002 [0177.747] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.747] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e230 | out: ppv=0x515e230*=0x765de50) returned 0x0 [0177.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x0) returned 0x80004002 [0177.748] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e098 | out: ppvObject=0x515e098*=0x765d350) returned 0x0 [0177.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de3c | out: ppvObject=0x515de3c*=0x765d350) returned 0x0 [0177.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddf8 | out: ppvObject=0x515ddf8*=0x0) returned 0x80004002 [0177.748] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x3 [0177.748] CoGetContextToken (in: pToken=0x515dc84 | out: pToken=0x515dc84) returned 0x0 [0177.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc6c | out: ppvObject=0x515dc6c*=0x74f0bf8) returned 0x0 [0177.749] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x74f0bf8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc74 | out: pCid=0x515dc74*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.749] WbemDefPath:IUnknown:Release (This=0x74f0bf8) returned 0x3 [0177.749] CoGetContextToken (in: pToken=0x515dc7c | out: pToken=0x515dc7c) returned 0x0 [0177.749] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x4 [0177.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcf0 | out: ppvObject=0x515dcf0*=0x0) returned 0x80004002 [0177.749] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x3 [0177.749] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0177.750] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0177.750] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0177.750] CoGetContextToken (in: pToken=0x515e52c | out: pToken=0x515e52c) returned 0x0 [0177.750] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0177.750] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x2 [0177.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x515e568*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e564 | out: ppvObject=0x515e564*=0x765d350) returned 0x0 [0177.750] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0177.750] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0177.750] CoGetContextToken (in: pToken=0x515e5ac | out: pToken=0x515e5ac) returned 0x0 [0177.750] CoGetContextToken (in: pToken=0x515e56c | out: pToken=0x515e56c) returned 0x0 [0177.750] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x2 [0177.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x515e5e8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5e4 | out: ppvObject=0x515e5e4*=0x765d350) returned 0x0 [0177.751] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0177.751] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x3 [0177.751] WbemDefPath:IWbemPath:SetText (This=0x765d350, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0177.751] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0177.751] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x515e76c | out: puCount=0x515e76c*=0x0) returned 0x0 [0177.751] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d350, puCount=0x515e76c | out: puCount=0x515e76c*=0x2) returned 0x0 [0177.751] WbemDefPath:IWbemPath:GetText (in: This=0x765d350, lFlags=16, puBuffLength=0x515e768*=0x0, pszText=0x0 | out: puBuffLength=0x515e768*=0xb, pszText=0x0) returned 0x0 [0177.751] WbemDefPath:IWbemPath:GetText (in: This=0x765d350, lFlags=16, puBuffLength=0x515e768*=0xb, pszText="0000000000" | out: puBuffLength=0x515e768*=0xb, pszText="root\\cimv2") returned 0x0 [0177.754] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765d2b8) returned 0x0 [0177.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d350, puCount=0x515e7a0 | out: puCount=0x515e7a0*=0x2) returned 0x0 [0177.758] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x0, puNameBufLength=0x515e79c*=0x0, pName=0x0 | out: puNameBufLength=0x515e79c*=0x5, pName=0x0) returned 0x0 [0177.759] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x0, puNameBufLength=0x515e79c*=0x5, pName="0000" | out: puNameBufLength=0x515e79c*=0x5, pName="root") returned 0x0 [0177.764] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765d2b8, uIndex=0x0, pszName="root") returned 0x0 [0177.764] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x1, puNameBufLength=0x515e79c*=0x0, pName=0x0 | out: puNameBufLength=0x515e79c*=0x6, pName=0x0) returned 0x0 [0177.764] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x1, puNameBufLength=0x515e79c*=0x6, pName="00000" | out: puNameBufLength=0x515e79c*=0x6, pName="cimv2") returned 0x0 [0177.764] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765d2b8, uIndex=0x1, pszName="cimv2") returned 0x0 [0177.764] WbemDefPath:IWbemPath:GetClassName (in: This=0x765d2b8, puBuffLength=0x515e7c0*=0x0, pszName=0x0 | out: puBuffLength=0x515e7c0*=0x0, pszName=0x0) returned 0x8004103a [0177.768] WbemDefPath:IWbemPath:SetClassName (This=0x765d2b8, Name="Win32_ShadowCopy") returned 0x0 [0177.768] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x515e80c | out: puCount=0x515e80c*=0x2) returned 0x0 [0177.768] WbemDefPath:IWbemPath:GetText (in: This=0x765d2b8, lFlags=4, puBuffLength=0x515e808*=0x0, pszText=0x0 | out: puBuffLength=0x515e808*=0x27, pszText=0x0) returned 0x0 [0177.768] WbemDefPath:IWbemPath:GetText (in: This=0x765d2b8, lFlags=4, puBuffLength=0x515e808*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515e808*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0177.768] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x515e724*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7dc*=0, plFlavor=0x515e7d8*=0 | out: pVal=0x515e724*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515e7dc*=8, plFlavor=0x515e7d8*=64) returned 0x0 [0177.768] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0177.769] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x515e724*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7dc*=8, plFlavor=0x515e7d8*=64 | out: pVal=0x515e724*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x515e7dc*=8, plFlavor=0x515e7d8*=64) returned 0x0 [0177.769] SysStringLen (param_1="root\\cimv2") returned 0xa [0177.769] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x515e724*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7dc*=8, plFlavor=0x515e7d8*=64 | out: pVal=0x515e724*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515e7dc*=8, plFlavor=0x515e7d8*=64) returned 0x0 [0177.769] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0177.769] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e704 | out: ppv=0x515e704*=0x1d57dc) returned 0x0 [0177.769] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6fc | out: pAptType=0x515e6fc*=1) returned 0x0 [0177.769] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e700 | out: ppvObject=0x515e700*=0x0) returned 0x80004002 [0177.769] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.770] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e21c | out: ppv=0x515e21c*=0x7650c88) returned 0x0 [0177.770] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e04c | out: ppvObject=0x515e04c*=0x0) returned 0x80004002 [0177.770] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e084 | out: ppvObject=0x515e084*=0x765e400) returned 0x0 [0177.770] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de28 | out: ppvObject=0x515de28*=0x765e400) returned 0x0 [0177.770] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dde4 | out: ppvObject=0x515dde4*=0x0) returned 0x80004002 [0177.771] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x3 [0177.771] CoGetContextToken (in: pToken=0x515dc70 | out: pToken=0x515dc70) returned 0x0 [0177.771] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc58 | out: ppvObject=0x515dc58*=0x7503060) returned 0x0 [0177.771] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503060, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc60 | out: pCid=0x515dc60*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.771] WbemDefPath:IUnknown:Release (This=0x7503060) returned 0x3 [0177.771] CoGetContextToken (in: pToken=0x515dc68 | out: pToken=0x515dc68) returned 0x0 [0177.771] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x4 [0177.771] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcdc | out: ppvObject=0x515dcdc*=0x0) returned 0x80004002 [0177.772] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x3 [0177.772] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0177.772] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0177.772] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0177.772] CoGetContextToken (in: pToken=0x515e518 | out: pToken=0x515e518) returned 0x0 [0177.772] CoGetContextToken (in: pToken=0x515e4d8 | out: pToken=0x515e4d8) returned 0x0 [0177.772] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x2 [0177.772] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x515e554*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e550 | out: ppvObject=0x515e550*=0x765e400) returned 0x0 [0177.773] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0177.773] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0177.773] CoGetContextToken (in: pToken=0x515e598 | out: pToken=0x515e598) returned 0x0 [0177.773] CoGetContextToken (in: pToken=0x515e558 | out: pToken=0x515e558) returned 0x0 [0177.773] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x2 [0177.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x515e5d4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5d0 | out: ppvObject=0x515e5d0*=0x765e400) returned 0x0 [0177.773] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0177.773] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x3 [0177.773] WbemDefPath:IWbemPath:SetText (This=0x765e400, uMode=0x4, pszPath="") returned 0x0 [0177.773] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0177.773] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e704 | out: ppv=0x515e704*=0x1d57dc) returned 0x0 [0177.773] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6fc | out: pAptType=0x515e6fc*=1) returned 0x0 [0177.774] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e700 | out: ppvObject=0x515e700*=0x0) returned 0x80004002 [0177.774] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.774] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e21c | out: ppv=0x515e21c*=0x7650c88) returned 0x0 [0177.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e04c | out: ppvObject=0x515e04c*=0x0) returned 0x80004002 [0177.774] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e084 | out: ppvObject=0x515e084*=0x765e470) returned 0x0 [0177.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de28 | out: ppvObject=0x515de28*=0x765e470) returned 0x0 [0177.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dde4 | out: ppvObject=0x515dde4*=0x0) returned 0x80004002 [0177.775] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x3 [0177.775] CoGetContextToken (in: pToken=0x515dc70 | out: pToken=0x515dc70) returned 0x0 [0177.775] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc58 | out: ppvObject=0x515dc58*=0x7503070) returned 0x0 [0177.775] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503070, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc60 | out: pCid=0x515dc60*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.775] WbemDefPath:IUnknown:Release (This=0x7503070) returned 0x3 [0177.775] CoGetContextToken (in: pToken=0x515dc68 | out: pToken=0x515dc68) returned 0x0 [0177.775] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x4 [0177.775] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcdc | out: ppvObject=0x515dcdc*=0x0) returned 0x80004002 [0177.775] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x3 [0177.776] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0177.776] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0177.776] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0177.776] CoGetContextToken (in: pToken=0x515e518 | out: pToken=0x515e518) returned 0x0 [0177.776] CoGetContextToken (in: pToken=0x515e4d8 | out: pToken=0x515e4d8) returned 0x0 [0177.776] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x2 [0177.776] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x515e554*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e550 | out: ppvObject=0x515e550*=0x765e470) returned 0x0 [0177.776] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0177.776] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0177.777] CoGetContextToken (in: pToken=0x515e598 | out: pToken=0x515e598) returned 0x0 [0177.777] CoGetContextToken (in: pToken=0x515e558 | out: pToken=0x515e558) returned 0x0 [0177.777] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x2 [0177.777] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x515e5d4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5d0 | out: ppvObject=0x515e5d0*=0x765e470) returned 0x0 [0177.777] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0177.777] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x3 [0177.777] WbemDefPath:IWbemPath:SetText (This=0x765e470, uMode=0x4, pszPath="") returned 0x0 [0177.777] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0177.777] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x515e758 | out: puCount=0x515e758*=0x0) returned 0x0 [0177.777] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e400, puCount=0x515e758 | out: puCount=0x515e758*=0x0) returned 0x0 [0177.777] WbemDefPath:IWbemPath:GetClassName (in: This=0x765e470, puBuffLength=0x515e7ac*=0x0, pszName=0x0 | out: puBuffLength=0x515e7ac*=0x0, pszName=0x0) returned 0x8004103a [0177.777] WbemDefPath:IWbemPath:GetServer (in: This=0x765e470, puNameBufLength=0x515e7b0*=0x0, pName=0x0 | out: puNameBufLength=0x515e7b0*=0x0, pName=0x0) returned 0x80041009 [0177.777] WbemDefPath:IWbemPath:SetServer (This=0x765e470, Name="CRH2YWU7") returned 0x0 [0177.777] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e704 | out: ppv=0x515e704*=0x1d57dc) returned 0x0 [0177.777] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6fc | out: pAptType=0x515e6fc*=1) returned 0x0 [0177.777] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e700 | out: ppvObject=0x515e700*=0x0) returned 0x80004002 [0177.778] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.778] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e21c | out: ppv=0x515e21c*=0x7650c88) returned 0x0 [0177.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e04c | out: ppvObject=0x515e04c*=0x0) returned 0x80004002 [0177.778] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e084 | out: ppvObject=0x515e084*=0x765e508) returned 0x0 [0177.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de28 | out: ppvObject=0x515de28*=0x765e508) returned 0x0 [0177.779] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dde4 | out: ppvObject=0x515dde4*=0x0) returned 0x80004002 [0177.779] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x3 [0177.779] CoGetContextToken (in: pToken=0x515dc70 | out: pToken=0x515dc70) returned 0x0 [0177.779] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc58 | out: ppvObject=0x515dc58*=0x7503080) returned 0x0 [0177.779] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503080, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc60 | out: pCid=0x515dc60*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.779] WbemDefPath:IUnknown:Release (This=0x7503080) returned 0x3 [0177.780] CoGetContextToken (in: pToken=0x515dc68 | out: pToken=0x515dc68) returned 0x0 [0177.780] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x4 [0177.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcdc | out: ppvObject=0x515dcdc*=0x0) returned 0x80004002 [0177.780] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x3 [0177.780] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0177.780] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0177.780] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0177.780] CoGetContextToken (in: pToken=0x515e518 | out: pToken=0x515e518) returned 0x0 [0177.780] CoGetContextToken (in: pToken=0x515e4d8 | out: pToken=0x515e4d8) returned 0x0 [0177.780] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x2 [0177.780] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x515e554*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e550 | out: ppvObject=0x515e550*=0x765e508) returned 0x0 [0177.781] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0177.781] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0177.781] CoGetContextToken (in: pToken=0x515e598 | out: pToken=0x515e598) returned 0x0 [0177.781] CoGetContextToken (in: pToken=0x515e558 | out: pToken=0x515e558) returned 0x0 [0177.781] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x2 [0177.781] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x515e5d4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5d0 | out: ppvObject=0x515e5d0*=0x765e508) returned 0x0 [0177.781] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0177.781] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x3 [0177.781] WbemDefPath:IWbemPath:SetText (This=0x765e508, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0177.781] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0177.781] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x515e758 | out: puCount=0x515e758*=0x0) returned 0x0 [0177.781] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e508, puCount=0x515e758 | out: puCount=0x515e758*=0x2) returned 0x0 [0177.781] WbemDefPath:IWbemPath:GetText (in: This=0x765e508, lFlags=16, puBuffLength=0x515e754*=0x0, pszText=0x0 | out: puBuffLength=0x515e754*=0xb, pszText=0x0) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetText (in: This=0x765e508, lFlags=16, puBuffLength=0x515e754*=0xb, pszText="0000000000" | out: puBuffLength=0x515e754*=0xb, pszText="root\\cimv2") returned 0x0 [0177.782] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765e470) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e508, puCount=0x515e78c | out: puCount=0x515e78c*=0x2) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x0, puNameBufLength=0x515e788*=0x0, pName=0x0 | out: puNameBufLength=0x515e788*=0x5, pName=0x0) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x0, puNameBufLength=0x515e788*=0x5, pName="0000" | out: puNameBufLength=0x515e788*=0x5, pName="root") returned 0x0 [0177.782] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765e470, uIndex=0x0, pszName="root") returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x1, puNameBufLength=0x515e788*=0x0, pName=0x0 | out: puNameBufLength=0x515e788*=0x6, pName=0x0) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x1, puNameBufLength=0x515e788*=0x6, pName="00000" | out: puNameBufLength=0x515e788*=0x6, pName="cimv2") returned 0x0 [0177.782] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765e470, uIndex=0x1, pszName="cimv2") returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetClassName (in: This=0x765e470, puBuffLength=0x515e7ac*=0x0, pszName=0x0 | out: puBuffLength=0x515e7ac*=0x0, pszName=0x0) returned 0x8004103a [0177.782] WbemDefPath:IWbemPath:SetClassName (This=0x765e470, Name="Win32_ShadowCopy") returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x515e7c0 | out: puCount=0x515e7c0*=0x2) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=4, puBuffLength=0x515e7bc*=0x0, pszText=0x0 | out: puBuffLength=0x515e7bc*=0x27, pszText=0x0) returned 0x0 [0177.782] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=4, puBuffLength=0x515e7bc*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515e7bc*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0177.789] WbemDefPath:IWbemPath:GetInfo (in: This=0x765e470, uRequestedInfo=0x0, puResponse=0x515e7c4 | out: puResponse=0x515e7c4*=0x20c16) returned 0x0 [0177.789] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x515e7c0 | out: puCount=0x515e7c0*=0x2) returned 0x0 [0177.789] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=8, puBuffLength=0x515e7bc*=0x0, pszText=0x0 | out: puBuffLength=0x515e7bc*=0x16, pszText=0x0) returned 0x0 [0177.789] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=8, puBuffLength=0x515e7bc*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x515e7bc*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0177.790] WbemDefPath:IWbemPath:GetInfo (in: This=0x765e470, uRequestedInfo=0x0, puResponse=0x515e7c4 | out: puResponse=0x515e7c4*=0x20c16) returned 0x0 [0177.790] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e760 | out: ppv=0x515e760*=0x1d57dc) returned 0x0 [0177.790] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e758 | out: pAptType=0x515e758*=1) returned 0x0 [0177.790] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e75c | out: ppvObject=0x515e75c*=0x0) returned 0x80004002 [0177.790] IUnknown:Release (This=0x1d57dc) returned 0x1 [0177.791] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e278 | out: ppv=0x515e278*=0x765e640) returned 0x0 [0177.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e0a8 | out: ppvObject=0x515e0a8*=0x0) returned 0x80004002 [0177.791] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e0e0 | out: ppvObject=0x515e0e0*=0x765e650) returned 0x0 [0177.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de84 | out: ppvObject=0x515de84*=0x765e650) returned 0x0 [0177.791] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515de40 | out: ppvObject=0x515de40*=0x0) returned 0x80004002 [0177.792] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x3 [0177.792] CoGetContextToken (in: pToken=0x515dccc | out: pToken=0x515dccc) returned 0x0 [0177.792] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcb4 | out: ppvObject=0x515dcb4*=0x75030e0) returned 0x0 [0177.792] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75030e0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dcbc | out: pCid=0x515dcbc*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0177.792] WbemDefPath:IUnknown:Release (This=0x75030e0) returned 0x3 [0177.792] CoGetContextToken (in: pToken=0x515dcc4 | out: pToken=0x515dcc4) returned 0x0 [0177.792] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x4 [0177.792] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dd38 | out: ppvObject=0x515dd38*=0x0) returned 0x80004002 [0177.792] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x3 [0177.792] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0177.793] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0177.793] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0177.793] CoGetContextToken (in: pToken=0x515e574 | out: pToken=0x515e574) returned 0x0 [0177.793] CoGetContextToken (in: pToken=0x515e534 | out: pToken=0x515e534) returned 0x0 [0177.793] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x2 [0177.793] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x515e5b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5ac | out: ppvObject=0x515e5ac*=0x765e650) returned 0x0 [0177.793] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0177.793] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0177.793] CoGetContextToken (in: pToken=0x515e5f4 | out: pToken=0x515e5f4) returned 0x0 [0177.793] CoGetContextToken (in: pToken=0x515e5b4 | out: pToken=0x515e5b4) returned 0x0 [0177.793] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x2 [0177.793] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x515e630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e62c | out: ppvObject=0x515e62c*=0x765e650) returned 0x0 [0177.794] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0177.794] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x3 [0177.794] WbemDefPath:IWbemPath:SetText (This=0x765e650, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0177.794] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0177.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e650, puCount=0x515e798 | out: puCount=0x515e798*=0x2) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x765e650, lFlags=4, puBuffLength=0x515e794*=0x0, pszText=0x0 | out: puBuffLength=0x515e794*=0x16, pszText=0x0) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x765e650, lFlags=4, puBuffLength=0x515e794*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x515e794*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e7b8 | out: puCount=0x515e7b8*=0x2) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e7b4*=0x0, pszText=0x0 | out: puBuffLength=0x515e7b4*=0x17, pszText=0x0) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e7b4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e7b4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e760 | out: puCount=0x515e760*=0x2) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e75c*=0x0, pszText=0x0 | out: puBuffLength=0x515e75c*=0x17, pszText=0x0) returned 0x0 [0177.794] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e75c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e75c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0177.794] CoGetContextToken (in: pToken=0x515e638 | out: pToken=0x515e638) returned 0x0 [0177.794] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0177.794] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e25c | out: ppvObject=0x515e25c*=0x2b57b4) returned 0x0 [0177.795] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0177.795] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0177.795] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=2, puBuffLength=0x515e764*=0x0, pszText=0x0 | out: puBuffLength=0x515e764*=0x11, pszText=0x0) returned 0x0 [0177.796] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=2, puBuffLength=0x515e764*=0x11, pszText="0000000000000000" | out: puBuffLength=0x515e764*=0x11, pszText="Win32_ShadowCopy") returned 0x0 [0178.102] CoGetContextToken (in: pToken=0x515e39c | out: pToken=0x515e39c) returned 0x0 [0178.102] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0178.103] IWbemServices:GetObject (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppObject=0x515e510*=0x0, ppCallResult=0x0 | out: ppObject=0x515e510*=0x765e720, ppCallResult=0x0) returned 0x0 [0178.363] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0178.364] IWbemClassObject:Get (in: This=0x765e720, wszName="__PATH", lFlags=0, pVal=0x515e6c8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7ac*=0, plFlavor=0x515e7a8*=0 | out: pVal=0x515e6c8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy", varVal2=0x0), pType=0x515e7ac*=8, plFlavor=0x515e7a8*=64) returned 0x0 [0178.364] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x26 [0178.364] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x1d57dc) returned 0x0 [0178.364] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6f8 | out: pAptType=0x515e6f8*=1) returned 0x0 [0178.364] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e6fc | out: ppvObject=0x515e6fc*=0x0) returned 0x80004002 [0178.364] IUnknown:Release (This=0x1d57dc) returned 0x1 [0178.365] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e218 | out: ppv=0x515e218*=0x765e640) returned 0x0 [0178.365] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e048 | out: ppvObject=0x515e048*=0x0) returned 0x80004002 [0178.365] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e080 | out: ppvObject=0x515e080*=0x765e918) returned 0x0 [0178.366] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de24 | out: ppvObject=0x515de24*=0x765e918) returned 0x0 [0178.366] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515dde0 | out: ppvObject=0x515dde0*=0x0) returned 0x80004002 [0178.367] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x3 [0178.367] CoGetContextToken (in: pToken=0x515dc6c | out: pToken=0x515dc6c) returned 0x0 [0178.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc54 | out: ppvObject=0x515dc54*=0x7503110) returned 0x0 [0178.368] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503110, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc5c | out: pCid=0x515dc5c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0178.368] WbemDefPath:IUnknown:Release (This=0x7503110) returned 0x3 [0178.368] CoGetContextToken (in: pToken=0x515dc64 | out: pToken=0x515dc64) returned 0x0 [0178.368] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x4 [0178.368] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcd8 | out: ppvObject=0x515dcd8*=0x0) returned 0x80004002 [0178.368] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x3 [0178.369] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0178.369] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0178.369] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0178.369] CoGetContextToken (in: pToken=0x515e514 | out: pToken=0x515e514) returned 0x0 [0178.369] CoGetContextToken (in: pToken=0x515e4d4 | out: pToken=0x515e4d4) returned 0x0 [0178.369] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x2 [0178.369] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x515e550*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e54c | out: ppvObject=0x515e54c*=0x765e918) returned 0x0 [0178.370] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0178.370] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0178.370] CoGetContextToken (in: pToken=0x515e594 | out: pToken=0x515e594) returned 0x0 [0178.370] CoGetContextToken (in: pToken=0x515e554 | out: pToken=0x515e554) returned 0x0 [0178.370] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x2 [0178.370] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x515e5d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5cc | out: ppvObject=0x515e5cc*=0x765e918) returned 0x0 [0178.370] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0178.371] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x3 [0178.371] WbemDefPath:IWbemPath:SetText (This=0x765e918, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0178.371] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0178.371] IWbemClassObject:Get (in: This=0x765e720, wszName="__SERVER", lFlags=0, pVal=0x515e700*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7b8*=0, plFlavor=0x515e7b4*=0 | out: pVal=0x515e700*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x515e7b8*=8, plFlavor=0x515e7b4*=64) returned 0x0 [0178.371] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0178.371] IWbemClassObject:Get (in: This=0x765e720, wszName="__NAMESPACE", lFlags=0, pVal=0x515e700*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7b8*=8, plFlavor=0x515e7b4*=64 | out: pVal=0x515e700*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x515e7b8*=8, plFlavor=0x515e7b4*=64) returned 0x0 [0178.371] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0178.372] IWbemClassObject:Get (in: This=0x765e720, wszName="__CLASS", lFlags=0, pVal=0x515e700*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7b8*=8, plFlavor=0x515e7b4*=64 | out: pVal=0x515e700*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x515e7b8*=8, plFlavor=0x515e7b4*=64) returned 0x0 [0178.372] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0178.372] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e6e0 | out: ppv=0x515e6e0*=0x1d57dc) returned 0x0 [0178.372] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6d8 | out: pAptType=0x515e6d8*=1) returned 0x0 [0178.372] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e6dc | out: ppvObject=0x515e6dc*=0x0) returned 0x80004002 [0178.372] IUnknown:Release (This=0x1d57dc) returned 0x1 [0178.373] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e1f8 | out: ppv=0x515e1f8*=0x765e640) returned 0x0 [0178.373] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e028 | out: ppvObject=0x515e028*=0x0) returned 0x80004002 [0178.373] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x765ea08) returned 0x0 [0178.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de04 | out: ppvObject=0x515de04*=0x765ea08) returned 0x0 [0178.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddc0 | out: ppvObject=0x515ddc0*=0x0) returned 0x80004002 [0178.374] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x3 [0178.374] CoGetContextToken (in: pToken=0x515dc4c | out: pToken=0x515dc4c) returned 0x0 [0178.374] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc34 | out: ppvObject=0x515dc34*=0x7503150) returned 0x0 [0178.375] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503150, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc3c | out: pCid=0x515dc3c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0178.375] WbemDefPath:IUnknown:Release (This=0x7503150) returned 0x3 [0178.375] CoGetContextToken (in: pToken=0x515dc44 | out: pToken=0x515dc44) returned 0x0 [0178.375] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x4 [0178.375] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcb8 | out: ppvObject=0x515dcb8*=0x0) returned 0x80004002 [0178.375] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x3 [0178.376] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0178.376] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0178.376] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0178.376] CoGetContextToken (in: pToken=0x515e4f4 | out: pToken=0x515e4f4) returned 0x0 [0178.376] CoGetContextToken (in: pToken=0x515e4b4 | out: pToken=0x515e4b4) returned 0x0 [0178.376] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x2 [0178.376] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x515e530*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e52c | out: ppvObject=0x515e52c*=0x765ea08) returned 0x0 [0178.376] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0178.377] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0178.377] CoGetContextToken (in: pToken=0x515e574 | out: pToken=0x515e574) returned 0x0 [0178.377] CoGetContextToken (in: pToken=0x515e534 | out: pToken=0x515e534) returned 0x0 [0178.377] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x2 [0178.377] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x515e5b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5ac | out: ppvObject=0x515e5ac*=0x765ea08) returned 0x0 [0178.377] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0178.377] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x3 [0178.377] WbemDefPath:IWbemPath:SetText (This=0x765ea08, uMode=0x4, pszPath="") returned 0x0 [0178.377] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0178.378] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e6e0 | out: ppv=0x515e6e0*=0x1d57dc) returned 0x0 [0178.378] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6d8 | out: pAptType=0x515e6d8*=1) returned 0x0 [0178.378] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e6dc | out: ppvObject=0x515e6dc*=0x0) returned 0x80004002 [0178.378] IUnknown:Release (This=0x1d57dc) returned 0x1 [0178.378] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e1f8 | out: ppv=0x515e1f8*=0x765e640) returned 0x0 [0178.378] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e028 | out: ppvObject=0x515e028*=0x0) returned 0x80004002 [0178.379] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x765eaa0) returned 0x0 [0178.379] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de04 | out: ppvObject=0x515de04*=0x765eaa0) returned 0x0 [0178.379] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddc0 | out: ppvObject=0x515ddc0*=0x0) returned 0x80004002 [0178.379] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x3 [0178.379] CoGetContextToken (in: pToken=0x515dc4c | out: pToken=0x515dc4c) returned 0x0 [0178.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc34 | out: ppvObject=0x515dc34*=0x7503160) returned 0x0 [0178.380] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503160, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc3c | out: pCid=0x515dc3c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0178.380] WbemDefPath:IUnknown:Release (This=0x7503160) returned 0x3 [0178.380] CoGetContextToken (in: pToken=0x515dc44 | out: pToken=0x515dc44) returned 0x0 [0178.380] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x4 [0178.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcb8 | out: ppvObject=0x515dcb8*=0x0) returned 0x80004002 [0178.380] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x3 [0178.381] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0178.381] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0178.381] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0178.381] CoGetContextToken (in: pToken=0x515e4f4 | out: pToken=0x515e4f4) returned 0x0 [0178.381] CoGetContextToken (in: pToken=0x515e4b4 | out: pToken=0x515e4b4) returned 0x0 [0178.381] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x2 [0178.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x515e530*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e52c | out: ppvObject=0x515e52c*=0x765eaa0) returned 0x0 [0178.382] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0178.382] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0178.382] CoGetContextToken (in: pToken=0x515e574 | out: pToken=0x515e574) returned 0x0 [0178.382] CoGetContextToken (in: pToken=0x515e534 | out: pToken=0x515e534) returned 0x0 [0178.382] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x2 [0178.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x515e5b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5ac | out: ppvObject=0x515e5ac*=0x765eaa0) returned 0x0 [0178.382] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0178.383] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x3 [0178.383] WbemDefPath:IWbemPath:SetText (This=0x765eaa0, uMode=0x4, pszPath="") returned 0x0 [0178.383] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0178.383] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x515e734 | out: puCount=0x515e734*=0x0) returned 0x0 [0178.383] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765ea08, puCount=0x515e734 | out: puCount=0x515e734*=0x0) returned 0x0 [0178.383] WbemDefPath:IWbemPath:GetClassName (in: This=0x765eaa0, puBuffLength=0x515e788*=0x0, pszName=0x0 | out: puBuffLength=0x515e788*=0x0, pszName=0x0) returned 0x8004103a [0178.383] WbemDefPath:IWbemPath:GetServer (in: This=0x765eaa0, puNameBufLength=0x515e78c*=0x0, pName=0x0 | out: puNameBufLength=0x515e78c*=0x0, pName=0x0) returned 0x80041009 [0178.383] WbemDefPath:IWbemPath:SetServer (This=0x765eaa0, Name="CRH2YWU7") returned 0x0 [0178.383] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e6e0 | out: ppv=0x515e6e0*=0x1d57dc) returned 0x0 [0178.383] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515e6d8 | out: pAptType=0x515e6d8*=1) returned 0x0 [0178.383] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515e6dc | out: ppvObject=0x515e6dc*=0x0) returned 0x80004002 [0178.384] IUnknown:Release (This=0x1d57dc) returned 0x1 [0178.384] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e1f8 | out: ppv=0x515e1f8*=0x765e640) returned 0x0 [0178.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e028 | out: ppvObject=0x515e028*=0x0) returned 0x80004002 [0178.384] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e060 | out: ppvObject=0x515e060*=0x765eb10) returned 0x0 [0178.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de04 | out: ppvObject=0x515de04*=0x765eb10) returned 0x0 [0178.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515ddc0 | out: ppvObject=0x515ddc0*=0x0) returned 0x80004002 [0178.385] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x3 [0178.385] CoGetContextToken (in: pToken=0x515dc4c | out: pToken=0x515dc4c) returned 0x0 [0178.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dc34 | out: ppvObject=0x515dc34*=0x7503170) returned 0x0 [0178.386] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503170, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dc3c | out: pCid=0x515dc3c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0178.386] WbemDefPath:IUnknown:Release (This=0x7503170) returned 0x3 [0178.386] CoGetContextToken (in: pToken=0x515dc44 | out: pToken=0x515dc44) returned 0x0 [0178.386] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x4 [0178.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dcb8 | out: ppvObject=0x515dcb8*=0x0) returned 0x80004002 [0178.386] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x3 [0178.386] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0178.387] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0178.387] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0178.387] CoGetContextToken (in: pToken=0x515e4f4 | out: pToken=0x515e4f4) returned 0x0 [0178.387] CoGetContextToken (in: pToken=0x515e4b4 | out: pToken=0x515e4b4) returned 0x0 [0178.387] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x2 [0178.387] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x515e530*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e52c | out: ppvObject=0x515e52c*=0x765eb10) returned 0x0 [0178.387] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0178.387] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0178.388] CoGetContextToken (in: pToken=0x515e574 | out: pToken=0x515e574) returned 0x0 [0178.388] CoGetContextToken (in: pToken=0x515e534 | out: pToken=0x515e534) returned 0x0 [0178.388] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x2 [0178.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x515e5b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515e5ac | out: ppvObject=0x515e5ac*=0x765eb10) returned 0x0 [0178.388] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0178.388] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x3 [0178.388] WbemDefPath:IWbemPath:SetText (This=0x765eb10, uMode=0x4, pszPath="ROOT\\cimv2") returned 0x0 [0178.388] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0178.388] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x515e734 | out: puCount=0x515e734*=0x0) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eb10, puCount=0x515e734 | out: puCount=0x515e734*=0x2) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetText (in: This=0x765eb10, lFlags=16, puBuffLength=0x515e730*=0x0, pszText=0x0 | out: puBuffLength=0x515e730*=0xb, pszText=0x0) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetText (in: This=0x765eb10, lFlags=16, puBuffLength=0x515e730*=0xb, pszText="0000000000" | out: puBuffLength=0x515e730*=0xb, pszText="ROOT\\cimv2") returned 0x0 [0178.389] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765eaa0) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eb10, puCount=0x515e768 | out: puCount=0x515e768*=0x2) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x0, puNameBufLength=0x515e764*=0x0, pName=0x0 | out: puNameBufLength=0x515e764*=0x5, pName=0x0) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x0, puNameBufLength=0x515e764*=0x5, pName="0000" | out: puNameBufLength=0x515e764*=0x5, pName="ROOT") returned 0x0 [0178.389] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765eaa0, uIndex=0x0, pszName="ROOT") returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x1, puNameBufLength=0x515e764*=0x0, pName=0x0 | out: puNameBufLength=0x515e764*=0x6, pName=0x0) returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x1, puNameBufLength=0x515e764*=0x6, pName="00000" | out: puNameBufLength=0x515e764*=0x6, pName="cimv2") returned 0x0 [0178.389] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765eaa0, uIndex=0x1, pszName="cimv2") returned 0x0 [0178.389] WbemDefPath:IWbemPath:GetClassName (in: This=0x765eaa0, puBuffLength=0x515e788*=0x0, pszName=0x0 | out: puBuffLength=0x515e788*=0x0, pszName=0x0) returned 0x8004103a [0178.389] WbemDefPath:IWbemPath:SetClassName (This=0x765eaa0, Name="Win32_ShadowCopy") returned 0x0 [0178.390] IWbemClassObject:BeginMethodEnumeration (This=0x765e720, lEnumFlags=0) returned 0x0 [0178.390] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x515e6f8*=0x0, ppInSignature=0x515e780*=0x0, ppOutSignature=0x515e77c*=0x0 | out: pstrName=0x515e6f8*="Create", ppInSignature=0x515e780*=0x765ee10, ppOutSignature=0x515e77c*=0x7662f90) returned 0x0 [0178.390] SysStringByteLen (bstr="Create") returned 0xc [0178.390] SysStringByteLen (bstr="Create") returned 0xc [0178.390] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x515e6f8*=0x0, ppInSignature=0x515e780*=0x0, ppOutSignature=0x515e77c*=0x0 | out: pstrName=0x515e6f8*="Revert", ppInSignature=0x515e780*=0x76633a0, ppOutSignature=0x515e77c*=0x7663720) returned 0x0 [0178.391] SysStringByteLen (bstr="Revert") returned 0xc [0178.391] SysStringByteLen (bstr="Revert") returned 0xc [0178.391] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x515e6f8*=0x0, ppInSignature=0x515e780*=0x0, ppOutSignature=0x515e77c*=0x0 | out: pstrName=0x515e6f8*=0x0, ppInSignature=0x515e780*=0x0, ppOutSignature=0x515e77c*=0x0) returned 0x40005 [0178.391] IWbemClassObject:EndMethodEnumeration (This=0x765e720) returned 0x0 [0178.392] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Create", lFlags=0, ppInSignature=0x515e78c, ppOutSignature=0x515e788 | out: ppInSignature=0x515e78c*=0x7663ba8, ppOutSignature=0x515e788*=0x7664098) returned 0x0 [0178.468] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Create", ppQualSet=0x515e780 | out: ppQualSet=0x515e780*=0x765f008) returned 0x0 [0178.468] IWbemQualifierSet:Get (in: This=0x765f008, wszName="static", lFlags=0, pVal=0x515e6f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fa04*=0 | out: pVal=0x515e6f4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x648fa04*=0) returned 0x0 [0178.468] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Create", ppQualSet=0x515e78c | out: ppQualSet=0x515e78c*=0x7664690) returned 0x0 [0178.468] IWbemQualifierSet:Get (in: This=0x7664690, wszName="static", lFlags=0, pVal=0x515e700*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fa04*=0 | out: pVal=0x515e700*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x648fa04*=0) returned 0x0 [0178.471] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x515e78c, ppOutSignature=0x515e788 | out: ppInSignature=0x515e78c*=0x7664900, ppOutSignature=0x515e788*=0x7664c80) returned 0x0 [0178.472] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Revert", ppQualSet=0x515e780 | out: ppQualSet=0x515e780*=0x7664e78) returned 0x0 [0178.472] IWbemQualifierSet:Get (in: This=0x7664e78, wszName="static", lFlags=0, pVal=0x515e6f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fae4*=0 | out: pVal=0x515e6f4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fae4*=0) returned 0x80041002 [0178.472] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x515e6d0 | out: pperrinfo=0x515e6d0*=0x0) returned 0x1 [0178.473] CoGetClassObject (in: rclsid=0x273e2c*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e590 | out: ppv=0x515e590*=0x7664ed0) returned 0x0 [0178.473] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ed0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e3c0 | out: ppvObject=0x515e3c0*=0x0) returned 0x80004002 [0178.473] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x7664ed0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e3f8 | out: ppvObject=0x515e3f8*=0x7664ee0) returned 0x0 [0178.473] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e19c | out: ppvObject=0x515e19c*=0x7664ee0) returned 0x0 [0178.475] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e158 | out: ppvObject=0x515e158*=0x0) returned 0x80004002 [0178.475] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x3 [0178.475] CoGetContextToken (in: pToken=0x515dfe4 | out: pToken=0x515dfe4) returned 0x0 [0178.475] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfcc | out: ppvObject=0x515dfcc*=0x0) returned 0x80004002 [0178.476] CoGetContextToken (in: pToken=0x515dfdc | out: pToken=0x515dfdc) returned 0x0 [0178.476] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x4 [0178.476] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e050 | out: ppvObject=0x515e050*=0x0) returned 0x80004002 [0178.476] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x3 [0178.477] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0178.477] WbemStatusCodeText:IUnknown:Release (This=0x7664ed0) returned 0x0 [0178.477] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0178.477] CoGetContextToken (in: pToken=0x515e4e8 | out: pToken=0x515e4e8) returned 0x0 [0178.477] CoGetContextToken (in: pToken=0x515e4a8 | out: pToken=0x515e4a8) returned 0x0 [0178.478] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x2 [0178.478] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x515e524*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e520 | out: ppvObject=0x515e520*=0x7664ee0) returned 0x0 [0178.478] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0178.478] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0178.478] CoGetContextToken (in: pToken=0x515e4bc | out: pToken=0x515e4bc) returned 0x0 [0178.478] CoGetContextToken (in: pToken=0x515e47c | out: pToken=0x515e47c) returned 0x0 [0178.478] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x2 [0178.478] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x515e4f8*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x515e4f4 | out: ppvObject=0x515e4f4*=0x7664ee0) returned 0x0 [0178.479] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0178.479] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x3 [0178.479] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x7664ee0, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x515e62c | out: MessageText=0x515e62c*="Not found ") returned 0x0 [0178.479] SysStringByteLen (bstr="Not found ") returned 0x14 [0178.479] SysStringByteLen (bstr="Not found ") returned 0x14 [0178.479] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0178.481] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x515e7d4 | out: puCount=0x515e7d4*=0x2) returned 0x0 [0178.481] WbemDefPath:IWbemPath:GetText (in: This=0x765eaa0, lFlags=4, puBuffLength=0x515e7d0*=0x0, pszText=0x0 | out: puBuffLength=0x515e7d0*=0x27, pszText=0x0) returned 0x0 [0178.482] WbemDefPath:IWbemPath:GetText (in: This=0x765eaa0, lFlags=4, puBuffLength=0x515e7d0*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x515e7d0*=0x27, pszText="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0178.483] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x515e780, ppOutSignature=0x515e77c | out: ppInSignature=0x515e780*=0x7665108, ppOutSignature=0x515e77c*=0x7665488) returned 0x0 [0178.484] IWbemClassObject:GetNames (in: This=0x7665108, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x515e6d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e6a4 | out: pNames=0x515e6a4*="\x01ƀ\x04") returned 0x0 [0178.484] SafeArrayGetDim (psa=0x2b1ca0) returned 0x1 [0178.484] SafeArrayGetDim (psa=0x2b1ca0) returned 0x1 [0178.484] SafeArrayGetLBound (in: psa=0x2b1ca0, nDim=0x1, plLbound=0x515e2a0 | out: plLbound=0x515e2a0) returned 0x0 [0178.484] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x515e6d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648fddc*=0, plFlavor=0x648fde0*=0 | out: pVal=0x515e6d0*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0) returned 0x0 [0178.485] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x515e6c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0 | out: pVal=0x515e6c4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0) returned 0x0 [0178.485] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x515e6c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0 | out: pVal=0x515e6c4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0) returned 0x0 [0178.485] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x515e6c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0 | out: pVal=0x515e6c4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x648fddc*=11, plFlavor=0x648fde0*=0) returned 0x0 [0178.487] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665108, wszProperty="ForceDismount", ppQualSet=0x515e760 | out: ppQualSet=0x515e760*=0x765ffd0) returned 0x0 [0178.487] IWbemQualifierSet:Get (in: This=0x765ffd0, wszName="ID", lFlags=0, pVal=0x515e6d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fef4*=0 | out: pVal=0x515e6d4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fef4*=17) returned 0x0 [0178.487] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665108, wszProperty="ForceDismount", ppQualSet=0x515e76c | out: ppQualSet=0x515e76c*=0x7660020) returned 0x0 [0178.487] IWbemQualifierSet:Get (in: This=0x7660020, wszName="ID", lFlags=0, pVal=0x515e6e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fef4*=17 | out: pVal=0x515e6e0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x648fef4*=17) returned 0x0 [0178.490] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x515e758, ppOutSignature=0x515e754 | out: ppInSignature=0x515e758*=0x7665898, ppOutSignature=0x515e754*=0x7665c18) returned 0x0 [0178.490] IWbemClassObject:GetNames (in: This=0x7665898, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x515e6b0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x515e67c | out: pNames=0x515e67c*="\x01ƀ\x04") returned 0x0 [0178.490] SafeArrayGetDim (psa=0x2b1c40) returned 0x1 [0178.490] SafeArrayGetDim (psa=0x2b1c40) returned 0x1 [0178.490] SafeArrayGetLBound (in: psa=0x2b1c40, nDim=0x1, plLbound=0x515e278 | out: plLbound=0x515e278) returned 0x0 [0178.491] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x515e6a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6490224*=0, plFlavor=0x6490228*=0 | out: pVal=0x515e6a8*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0) returned 0x0 [0178.491] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x515e69c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0 | out: pVal=0x515e69c*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0) returned 0x0 [0178.491] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x515e69c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0 | out: pVal=0x515e69c*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0) returned 0x0 [0178.491] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x515e69c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0 | out: pVal=0x515e69c*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x6490224*=11, plFlavor=0x6490228*=0) returned 0x0 [0178.492] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665898, wszProperty="ForceDismount", ppQualSet=0x515e738 | out: ppQualSet=0x515e738*=0x7660070) returned 0x0 [0178.493] IWbemQualifierSet:Get (in: This=0x7660070, wszName="ID", lFlags=0, pVal=0x515e6ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64902c8*=0 | out: pVal=0x515e6ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64902c8*=17) returned 0x0 [0178.493] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665898, wszProperty="ForceDismount", ppQualSet=0x515e744 | out: ppQualSet=0x515e744*=0x76600c0) returned 0x0 [0178.493] IWbemQualifierSet:Get (in: This=0x76600c0, wszName="ID", lFlags=0, pVal=0x515e6b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64902c8*=17 | out: pVal=0x515e6b8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x64902c8*=17) returned 0x0 [0178.506] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x515e758, ppOutSignature=0x515e754 | out: ppInSignature=0x515e758*=0x7666028, ppOutSignature=0x515e754*=0x76663a8) returned 0x0 [0178.506] IWbemClassObject:Get (in: This=0x7666028, wszName="ForceDismount", lFlags=0, pVal=0x515e6e4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64904d0*=0, plFlavor=0x64904d4*=0 | out: pVal=0x515e6e4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64904d0*=11, plFlavor=0x64904d4*=0) returned 0x0 [0178.507] IWbemClassObject:Get (in: This=0x7666028, wszName="ForceDismount", lFlags=0, pVal=0x515e6f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64904d0*=11, plFlavor=0x64904d4*=0 | out: pVal=0x515e6f0*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x64904d0*=11, plFlavor=0x64904d4*=0) returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650bf0, puCount=0x515e7dc | out: puCount=0x515e7dc*=0x2) returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=4, puBuffLength=0x515e7d8*=0x0, pszText=0x0 | out: puBuffLength=0x515e7d8*=0x53, pszText=0x0) returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=4, puBuffLength=0x515e7d8*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e7d8*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e770 | out: puCount=0x515e770*=0x2) returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e76c*=0x0, pszText=0x0 | out: puBuffLength=0x515e76c*=0x17, pszText=0x0) returned 0x0 [0181.728] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e76c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e76c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0181.728] CoGetContextToken (in: pToken=0x515e6b4 | out: pToken=0x515e6b4) returned 0x0 [0181.728] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0181.728] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e2d8 | out: ppvObject=0x515e2d8*=0x2b57b4) returned 0x0 [0181.729] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0181.729] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0181.729] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x515e72c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e7e0*=0, plFlavor=0x515e7dc*=0 | out: pVal=0x515e72c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e7e0*=3, plFlavor=0x515e7dc*=64) returned 0x0 [0181.729] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=2, puBuffLength=0x515e7e0*=0x0, pszText=0x0 | out: puBuffLength=0x515e7e0*=0x3d, pszText=0x0) returned 0x0 [0181.729] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=2, puBuffLength=0x515e7e0*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e7e0*=0x3d, pszText="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0181.734] CoGetContextToken (in: pToken=0x515e44c | out: pToken=0x515e44c) returned 0x0 [0181.734] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0181.734] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0204.425] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0204.428] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0204.428] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0204.428] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x76665a0, puReturned=0x64878e8*=0x1) returned 0x0 [0204.430] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x76665a0) returned 0x0 [0204.431] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0204.431] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0204.431] IUnknown:AddRef (This=0x76665a0) returned 0x3 [0204.431] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0204.432] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x76665a4) returned 0x0 [0204.432] IMarshal:GetUnmarshalClass (in: This=0x76665a4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0204.432] IUnknown:Release (This=0x76665a4) returned 0x3 [0204.432] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0204.432] IUnknown:AddRef (This=0x76665a0) returned 0x4 [0204.432] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0204.432] IUnknown:Release (This=0x76665a0) returned 0x3 [0204.433] IUnknown:Release (This=0x76665a0) returned 0x2 [0204.433] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0204.433] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0204.433] IUnknown:AddRef (This=0x76665a0) returned 0x3 [0204.433] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x76665a0) returned 0x0 [0204.433] IUnknown:Release (This=0x76665a0) returned 0x3 [0204.433] IUnknown:Release (This=0x76665a0) returned 0x2 [0204.433] IUnknown:Release (This=0x76665a0) returned 0x1 [0204.433] IUnknown:Release (This=0x765dd64) returned 0x2 [0204.434] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0204.434] IUnknown:AddRef (This=0x76665a0) returned 0x2 [0204.434] IWbemClassObject:Get (in: This=0x76665a0, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0204.434] IWbemClassObject:Get (in: This=0x76665a0, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0204.435] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x52 [0204.435] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0204.435] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0204.435] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0204.435] IUnknown:Release (This=0x1d57dc) returned 0x1 [0204.437] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7664ed0) returned 0x0 [0204.437] WbemDefPath:IUnknown:QueryInterface (in: This=0x7664ed0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0204.437] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7664ed0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7666a18) returned 0x0 [0204.437] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7666a18) returned 0x0 [0204.437] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0204.438] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x3 [0204.438] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0204.438] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x75032d0) returned 0x0 [0204.438] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75032d0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0204.438] WbemDefPath:IUnknown:Release (This=0x75032d0) returned 0x3 [0204.438] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0204.438] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x4 [0204.438] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0204.438] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x3 [0204.439] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0204.439] WbemDefPath:IUnknown:Release (This=0x7664ed0) returned 0x0 [0204.439] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0204.439] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0204.439] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0204.439] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x2 [0204.439] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7666a18) returned 0x0 [0204.439] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0204.440] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0204.440] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0204.440] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0204.440] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x2 [0204.440] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7666a18) returned 0x0 [0204.440] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0204.440] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x3 [0204.440] WbemDefPath:IWbemPath:SetText (This=0x7666a18, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0204.440] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0204.440] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0204.440] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0204.441] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0204.442] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0204.442] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0204.442] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0204.442] IWbemClassObject:Get (in: This=0x76665a0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b3044*=0, plFlavor=0x64b3048*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b3044*=8, plFlavor=0x64b3048*=64) returned 0x0 [0204.442] SysStringLen (param_1="root\\cimv2") returned 0xa [0204.442] IWbemClassObject:Get (in: This=0x76665a0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b3044*=8, plFlavor=0x64b3048*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b3044*=8, plFlavor=0x64b3048*=64) returned 0x0 [0204.443] SysStringLen (param_1="root\\cimv2") returned 0xa [0204.443] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0204.443] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0204.443] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0204.689] IWbemClassObject:Get (in: This=0x76665a0, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b30fc*=0, plFlavor=0x64b3100*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b30fc*=8, plFlavor=0x64b3100*=64) returned 0x0 [0204.689] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0204.689] IWbemClassObject:Get (in: This=0x76665a0, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b30fc*=8, plFlavor=0x64b3100*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b30fc*=8, plFlavor=0x64b3100*=64) returned 0x0 [0204.689] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0204.696] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7666a18, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0204.696] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0204.696] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0204.696] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0204.696] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0204.697] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0204.697] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0204.697] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0204.697] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0204.697] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0204.697] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0204.698] IWbemClassObject:Get (in: This=0x76665a0, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0204.698] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0204.698] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0204.698] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0204.698] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0204.698] IWbemServices:DeleteInstance (This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0) [0225.901] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0225.905] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0225.905] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0225.905] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x7666ba0, puReturned=0x64878e8*=0x1) returned 0x0 [0225.908] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x7666ba0) returned 0x0 [0225.908] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0225.909] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0225.909] IUnknown:AddRef (This=0x7666ba0) returned 0x3 [0225.909] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0225.909] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x7666ba4) returned 0x0 [0225.910] IMarshal:GetUnmarshalClass (in: This=0x7666ba4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0225.910] IUnknown:Release (This=0x7666ba4) returned 0x3 [0225.910] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0225.910] IUnknown:AddRef (This=0x7666ba0) returned 0x4 [0225.910] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0225.910] IUnknown:Release (This=0x7666ba0) returned 0x3 [0225.911] IUnknown:Release (This=0x7666ba0) returned 0x2 [0225.911] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0225.911] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0225.911] IUnknown:AddRef (This=0x7666ba0) returned 0x3 [0225.911] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x7666ba0) returned 0x0 [0225.912] IUnknown:Release (This=0x7666ba0) returned 0x3 [0225.912] IUnknown:Release (This=0x7666ba0) returned 0x2 [0225.912] IUnknown:Release (This=0x7666ba0) returned 0x1 [0225.912] IUnknown:Release (This=0x765dd64) returned 0x2 [0225.912] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0225.912] IUnknown:AddRef (This=0x7666ba0) returned 0x2 [0225.913] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0225.914] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0225.914] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x52 [0225.914] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0225.915] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0225.915] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0225.915] IUnknown:Release (This=0x1d57dc) returned 0x1 [0225.917] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7666b90) returned 0x0 [0225.917] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666b90, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0225.917] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7666b90, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7667030) returned 0x0 [0225.918] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7667030) returned 0x0 [0225.919] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0225.919] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x3 [0225.919] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0225.919] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7503310) returned 0x0 [0225.919] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503310, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0225.920] WbemDefPath:IUnknown:Release (This=0x7503310) returned 0x3 [0225.920] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0225.920] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x4 [0225.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0225.920] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x3 [0225.920] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0225.921] WbemDefPath:IUnknown:Release (This=0x7666b90) returned 0x0 [0225.921] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0225.921] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0225.921] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0225.921] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x2 [0225.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7667030) returned 0x0 [0225.921] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0225.921] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0225.922] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0225.922] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0225.922] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x2 [0225.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7667030) returned 0x0 [0225.922] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0225.922] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x3 [0225.922] WbemDefPath:IWbemPath:SetText (This=0x7667030, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0225.922] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0225.923] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0225.923] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0225.923] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.924] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0225.924] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0225.924] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.924] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b64fc*=0, plFlavor=0x64b6500*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b64fc*=8, plFlavor=0x64b6500*=64) returned 0x0 [0225.925] SysStringLen (param_1="root\\cimv2") returned 0xa [0225.925] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b64fc*=8, plFlavor=0x64b6500*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b64fc*=8, plFlavor=0x64b6500*=64) returned 0x0 [0225.925] SysStringLen (param_1="root\\cimv2") returned 0xa [0225.925] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0225.925] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0225.925] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.925] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b65b4*=0, plFlavor=0x64b65b8*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b65b4*=8, plFlavor=0x64b65b8*=64) returned 0x0 [0225.925] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0225.925] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b65b4*=8, plFlavor=0x64b65b8*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b65b4*=8, plFlavor=0x64b65b8*=64) returned 0x0 [0225.926] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0225.928] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667030, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0225.928] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0225.928] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0225.929] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0225.929] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0225.929] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.929] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0225.929] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0225.930] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0225.930] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0225.930] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0225.930] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0225.930] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0225.931] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0225.931] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0225.931] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0225.931] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0230.372] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0230.372] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0230.372] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0230.372] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x7668130, puReturned=0x64878e8*=0x1) returned 0x0 [0230.376] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x7668130) returned 0x0 [0230.376] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0230.377] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0230.377] IUnknown:AddRef (This=0x7668130) returned 0x3 [0230.377] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0230.377] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x7668134) returned 0x0 [0230.378] IMarshal:GetUnmarshalClass (in: This=0x7668134, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0230.378] IUnknown:Release (This=0x7668134) returned 0x3 [0230.378] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0230.378] IUnknown:AddRef (This=0x7668130) returned 0x4 [0230.378] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0230.378] IUnknown:Release (This=0x7668130) returned 0x3 [0230.379] IUnknown:Release (This=0x7668130) returned 0x2 [0230.379] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0230.379] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0230.379] IUnknown:AddRef (This=0x7668130) returned 0x3 [0230.379] IUnknown:QueryInterface (in: This=0x7668130, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x7668130) returned 0x0 [0230.379] IUnknown:Release (This=0x7668130) returned 0x3 [0230.379] IUnknown:Release (This=0x7668130) returned 0x2 [0230.380] IUnknown:Release (This=0x7668130) returned 0x1 [0230.380] IUnknown:Release (This=0x765dd64) returned 0x2 [0230.380] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0230.380] IUnknown:AddRef (This=0x7668130) returned 0x2 [0230.380] IWbemClassObject:Get (in: This=0x7668130, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0230.381] IWbemClassObject:Get (in: This=0x7668130, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0230.381] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x52 [0230.381] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0230.381] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0230.381] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0230.381] IUnknown:Release (This=0x1d57dc) returned 0x1 [0230.382] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7668120) returned 0x0 [0230.382] WbemDefPath:IUnknown:QueryInterface (in: This=0x7668120, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0230.382] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7668120, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x76670a0) returned 0x0 [0230.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x76670a0) returned 0x0 [0230.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0230.383] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x3 [0230.383] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0230.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7503350) returned 0x0 [0230.384] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503350, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0230.384] WbemDefPath:IUnknown:Release (This=0x7503350) returned 0x3 [0230.384] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0230.384] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x4 [0230.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0230.384] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x3 [0230.385] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0230.385] WbemDefPath:IUnknown:Release (This=0x7668120) returned 0x0 [0230.385] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0230.385] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0230.385] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0230.385] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x2 [0230.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x76670a0) returned 0x0 [0230.386] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0230.386] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0230.386] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0230.386] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0230.386] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x2 [0230.386] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x76670a0) returned 0x0 [0230.386] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0230.387] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x3 [0230.387] WbemDefPath:IWbemPath:SetText (This=0x76670a0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0230.387] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0230.387] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0230.387] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0230.387] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.387] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0230.387] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0230.388] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.388] IWbemClassObject:Get (in: This=0x7668130, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b99a8*=0, plFlavor=0x64b99ac*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b99a8*=8, plFlavor=0x64b99ac*=64) returned 0x0 [0230.388] SysStringLen (param_1="root\\cimv2") returned 0xa [0230.388] IWbemClassObject:Get (in: This=0x7668130, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b99a8*=8, plFlavor=0x64b99ac*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64b99a8*=8, plFlavor=0x64b99ac*=64) returned 0x0 [0230.388] SysStringLen (param_1="root\\cimv2") returned 0xa [0230.388] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0230.388] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0230.388] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.389] IWbemClassObject:Get (in: This=0x7668130, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b9a60*=0, plFlavor=0x64b9a64*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b9a60*=8, plFlavor=0x64b9a64*=64) returned 0x0 [0230.389] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0230.389] IWbemClassObject:Get (in: This=0x7668130, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64b9a60*=8, plFlavor=0x64b9a64*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64b9a60*=8, plFlavor=0x64b9a64*=64) returned 0x0 [0230.389] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0230.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76670a0, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0230.389] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0230.390] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0230.390] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0230.390] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0230.391] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0230.391] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0230.391] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0230.392] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0230.392] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0230.393] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0230.393] IWbemClassObject:Get (in: This=0x7668130, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0230.393] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0230.393] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0230.393] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0230.393] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0230.393] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0232.107] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0232.108] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0232.108] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0232.108] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x76686c0, puReturned=0x64878e8*=0x1) returned 0x0 [0232.109] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x76686c0) returned 0x0 [0232.110] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0232.110] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0232.110] IUnknown:AddRef (This=0x76686c0) returned 0x3 [0232.110] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0232.110] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x76686c4) returned 0x0 [0232.111] IMarshal:GetUnmarshalClass (in: This=0x76686c4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0232.111] IUnknown:Release (This=0x76686c4) returned 0x3 [0232.111] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0232.111] IUnknown:AddRef (This=0x76686c0) returned 0x4 [0232.111] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0232.111] IUnknown:Release (This=0x76686c0) returned 0x3 [0232.111] IUnknown:Release (This=0x76686c0) returned 0x2 [0232.111] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0232.111] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0232.111] IUnknown:AddRef (This=0x76686c0) returned 0x3 [0232.112] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x76686c0) returned 0x0 [0232.112] IUnknown:Release (This=0x76686c0) returned 0x3 [0232.112] IUnknown:Release (This=0x76686c0) returned 0x2 [0232.112] IUnknown:Release (This=0x76686c0) returned 0x1 [0232.112] IUnknown:Release (This=0x765dd64) returned 0x2 [0232.112] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0232.112] IUnknown:AddRef (This=0x76686c0) returned 0x2 [0232.113] IWbemClassObject:Get (in: This=0x76686c0, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0232.113] IWbemClassObject:Get (in: This=0x76686c0, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0232.113] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x52 [0232.113] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0232.113] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0232.113] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0232.113] IUnknown:Release (This=0x1d57dc) returned 0x1 [0232.114] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x76686b0) returned 0x0 [0232.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x76686b0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0232.114] WbemDefPath:IClassFactory:CreateInstance (in: This=0x76686b0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7667110) returned 0x0 [0232.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7667110) returned 0x0 [0232.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0232.115] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x3 [0232.115] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0232.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7503390) returned 0x0 [0232.115] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503390, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0232.115] WbemDefPath:IUnknown:Release (This=0x7503390) returned 0x3 [0232.115] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0232.115] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x4 [0232.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0232.116] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x3 [0232.116] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0232.116] WbemDefPath:IUnknown:Release (This=0x76686b0) returned 0x0 [0232.116] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0232.116] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0232.116] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0232.116] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x2 [0232.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7667110) returned 0x0 [0232.117] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0232.117] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0232.117] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0232.117] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0232.117] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x2 [0232.117] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7667110) returned 0x0 [0232.117] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0232.117] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x3 [0232.117] WbemDefPath:IWbemPath:SetText (This=0x7667110, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0232.117] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0232.117] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0232.117] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0232.117] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.118] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0232.118] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0232.118] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.118] IWbemClassObject:Get (in: This=0x76686c0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64bce54*=0, plFlavor=0x64bce58*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64bce54*=8, plFlavor=0x64bce58*=64) returned 0x0 [0232.118] SysStringLen (param_1="root\\cimv2") returned 0xa [0232.118] IWbemClassObject:Get (in: This=0x76686c0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64bce54*=8, plFlavor=0x64bce58*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64bce54*=8, plFlavor=0x64bce58*=64) returned 0x0 [0232.118] SysStringLen (param_1="root\\cimv2") returned 0xa [0232.118] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0232.118] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0232.118] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.118] IWbemClassObject:Get (in: This=0x76686c0, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64bcf0c*=0, plFlavor=0x64bcf10*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64bcf0c*=8, plFlavor=0x64bcf10*=64) returned 0x0 [0232.118] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0232.118] IWbemClassObject:Get (in: This=0x76686c0, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64bcf0c*=8, plFlavor=0x64bcf10*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64bcf0c*=8, plFlavor=0x64bcf10*=64) returned 0x0 [0232.119] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0232.119] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667110, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0232.119] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0232.119] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0232.119] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0232.119] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0232.119] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0232.119] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0232.119] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0232.119] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0232.119] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0232.119] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0232.120] IWbemClassObject:Get (in: This=0x76686c0, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0232.120] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0232.120] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0232.120] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0232.120] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0232.120] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0233.482] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0233.484] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0233.484] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0233.484] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x7668c50, puReturned=0x64878e8*=0x1) returned 0x0 [0233.486] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x7668c50) returned 0x0 [0233.487] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0233.487] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0233.487] IUnknown:AddRef (This=0x7668c50) returned 0x3 [0233.487] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0233.487] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x7668c54) returned 0x0 [0233.488] IMarshal:GetUnmarshalClass (in: This=0x7668c54, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0233.488] IUnknown:Release (This=0x7668c54) returned 0x3 [0233.488] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0233.488] IUnknown:AddRef (This=0x7668c50) returned 0x4 [0233.488] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0233.488] IUnknown:Release (This=0x7668c50) returned 0x3 [0233.488] IUnknown:Release (This=0x7668c50) returned 0x2 [0233.488] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0233.488] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0233.489] IUnknown:AddRef (This=0x7668c50) returned 0x3 [0233.489] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x7668c50) returned 0x0 [0233.489] IUnknown:Release (This=0x7668c50) returned 0x3 [0233.489] IUnknown:Release (This=0x7668c50) returned 0x2 [0233.489] IUnknown:Release (This=0x7668c50) returned 0x1 [0233.489] IUnknown:Release (This=0x765dd64) returned 0x2 [0233.489] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0233.489] IUnknown:AddRef (This=0x7668c50) returned 0x2 [0233.490] IWbemClassObject:Get (in: This=0x7668c50, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0233.490] IWbemClassObject:Get (in: This=0x7668c50, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0233.490] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x52 [0233.490] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0233.490] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0233.490] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0233.491] IUnknown:Release (This=0x1d57dc) returned 0x1 [0233.491] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7668c40) returned 0x0 [0233.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x7668c40, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0233.492] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7668c40, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7667180) returned 0x0 [0233.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7667180) returned 0x0 [0233.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0233.493] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x3 [0233.493] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0233.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x75033d0) returned 0x0 [0233.493] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75033d0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0233.493] WbemDefPath:IUnknown:Release (This=0x75033d0) returned 0x3 [0233.493] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0233.493] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x4 [0233.494] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0233.494] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x3 [0233.494] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0233.494] WbemDefPath:IUnknown:Release (This=0x7668c40) returned 0x0 [0233.494] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0233.494] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0233.494] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0233.494] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x2 [0233.494] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7667180) returned 0x0 [0233.494] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0233.495] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0233.495] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0233.495] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0233.495] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x2 [0233.495] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7667180) returned 0x0 [0233.495] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0233.495] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x3 [0233.495] WbemDefPath:IWbemPath:SetText (This=0x7667180, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0233.495] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0233.495] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0233.496] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0233.496] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0233.496] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0233.496] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0233.496] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0233.496] IWbemClassObject:Get (in: This=0x7668c50, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c0300*=0, plFlavor=0x64c0304*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c0300*=8, plFlavor=0x64c0304*=64) returned 0x0 [0233.496] SysStringLen (param_1="root\\cimv2") returned 0xa [0233.497] IWbemClassObject:Get (in: This=0x7668c50, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c0300*=8, plFlavor=0x64c0304*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c0300*=8, plFlavor=0x64c0304*=64) returned 0x0 [0233.497] SysStringLen (param_1="root\\cimv2") returned 0xa [0233.497] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0233.497] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0233.497] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0233.497] IWbemClassObject:Get (in: This=0x7668c50, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c03b8*=0, plFlavor=0x64c03bc*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c03b8*=8, plFlavor=0x64c03bc*=64) returned 0x0 [0233.497] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0233.497] IWbemClassObject:Get (in: This=0x7668c50, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c03b8*=8, plFlavor=0x64c03bc*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c03b8*=8, plFlavor=0x64c03bc*=64) returned 0x0 [0233.497] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0233.498] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667180, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0233.498] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0233.498] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0233.498] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0233.499] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0233.499] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0233.499] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0233.499] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0233.499] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0233.499] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0233.499] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0233.499] IWbemClassObject:Get (in: This=0x7668c50, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0233.499] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0233.499] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0233.500] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0233.500] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0233.500] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0234.512] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0234.512] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0234.512] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0234.513] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x76691e0, puReturned=0x64878e8*=0x1) returned 0x0 [0234.514] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x76691e0) returned 0x0 [0234.515] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0234.515] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0234.516] IUnknown:AddRef (This=0x76691e0) returned 0x3 [0234.516] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0234.516] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x76691e4) returned 0x0 [0234.516] IMarshal:GetUnmarshalClass (in: This=0x76691e4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0234.516] IUnknown:Release (This=0x76691e4) returned 0x3 [0234.516] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0234.516] IUnknown:AddRef (This=0x76691e0) returned 0x4 [0234.516] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0234.517] IUnknown:Release (This=0x76691e0) returned 0x3 [0234.517] IUnknown:Release (This=0x76691e0) returned 0x2 [0234.517] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0234.517] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0234.517] IUnknown:AddRef (This=0x76691e0) returned 0x3 [0234.517] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x76691e0) returned 0x0 [0234.517] IUnknown:Release (This=0x76691e0) returned 0x3 [0234.517] IUnknown:Release (This=0x76691e0) returned 0x2 [0234.517] IUnknown:Release (This=0x76691e0) returned 0x1 [0234.517] IUnknown:Release (This=0x765dd64) returned 0x2 [0234.518] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0234.518] IUnknown:AddRef (This=0x76691e0) returned 0x2 [0234.518] IWbemClassObject:Get (in: This=0x76691e0, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0234.518] IWbemClassObject:Get (in: This=0x76691e0, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0234.518] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x52 [0234.518] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0234.519] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0234.519] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0234.519] IUnknown:Release (This=0x1d57dc) returned 0x1 [0234.519] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x76691d0) returned 0x0 [0234.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x76691d0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0234.520] WbemDefPath:IClassFactory:CreateInstance (in: This=0x76691d0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x76671f0) returned 0x0 [0234.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x76671f0) returned 0x0 [0234.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0234.520] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x3 [0234.520] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0234.520] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7503410) returned 0x0 [0234.521] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7503410, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0234.521] WbemDefPath:IUnknown:Release (This=0x7503410) returned 0x3 [0234.521] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0234.521] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x4 [0234.521] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0234.521] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x3 [0234.521] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.521] WbemDefPath:IUnknown:Release (This=0x76691d0) returned 0x0 [0234.521] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0234.522] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0234.522] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0234.522] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x2 [0234.522] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x76671f0) returned 0x0 [0234.522] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.523] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0234.524] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0234.524] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0234.524] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x2 [0234.524] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x76671f0) returned 0x0 [0234.524] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.524] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x3 [0234.524] WbemDefPath:IWbemPath:SetText (This=0x76671f0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.524] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.524] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0234.524] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0234.524] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.524] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0234.525] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0234.525] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.525] IWbemClassObject:Get (in: This=0x76691e0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c37ac*=0, plFlavor=0x64c37b0*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c37ac*=8, plFlavor=0x64c37b0*=64) returned 0x0 [0234.525] SysStringLen (param_1="root\\cimv2") returned 0xa [0234.525] IWbemClassObject:Get (in: This=0x76691e0, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c37ac*=8, plFlavor=0x64c37b0*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c37ac*=8, plFlavor=0x64c37b0*=64) returned 0x0 [0234.525] SysStringLen (param_1="root\\cimv2") returned 0xa [0234.525] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0234.525] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0234.525] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.525] IWbemClassObject:Get (in: This=0x76691e0, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c3864*=0, plFlavor=0x64c3868*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c3864*=8, plFlavor=0x64c3868*=64) returned 0x0 [0234.525] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0234.525] IWbemClassObject:Get (in: This=0x76691e0, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c3864*=8, plFlavor=0x64c3868*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c3864*=8, plFlavor=0x64c3868*=64) returned 0x0 [0234.525] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0234.526] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76671f0, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0234.526] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0234.535] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.535] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0234.535] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0234.535] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.536] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0234.536] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0234.536] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0234.537] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0234.537] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0234.537] IWbemClassObject:Get (in: This=0x76691e0, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0234.537] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0234.537] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.537] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0234.537] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0234.537] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0236.116] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0236.117] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0236.117] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0236.117] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x7669770, puReturned=0x64878e8*=0x1) returned 0x0 [0236.119] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x7669770) returned 0x0 [0236.119] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0236.119] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0236.119] IUnknown:AddRef (This=0x7669770) returned 0x3 [0236.119] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0236.119] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x7669774) returned 0x0 [0236.120] IMarshal:GetUnmarshalClass (in: This=0x7669774, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0236.120] IUnknown:Release (This=0x7669774) returned 0x3 [0236.120] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0236.120] IUnknown:AddRef (This=0x7669770) returned 0x4 [0236.120] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0236.120] IUnknown:Release (This=0x7669770) returned 0x3 [0236.120] IUnknown:Release (This=0x7669770) returned 0x2 [0236.120] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0236.120] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0236.121] IUnknown:AddRef (This=0x7669770) returned 0x3 [0236.121] IUnknown:QueryInterface (in: This=0x7669770, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x7669770) returned 0x0 [0236.121] IUnknown:Release (This=0x7669770) returned 0x3 [0236.121] IUnknown:Release (This=0x7669770) returned 0x2 [0236.121] IUnknown:Release (This=0x7669770) returned 0x1 [0236.121] IUnknown:Release (This=0x765dd64) returned 0x2 [0236.121] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0236.121] IUnknown:AddRef (This=0x7669770) returned 0x2 [0236.121] IWbemClassObject:Get (in: This=0x7669770, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0236.122] IWbemClassObject:Get (in: This=0x7669770, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0236.122] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x52 [0236.122] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0236.122] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0236.122] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0236.122] IUnknown:Release (This=0x1d57dc) returned 0x1 [0236.123] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7669760) returned 0x0 [0236.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x7669760, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0236.123] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7669760, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7667260) returned 0x0 [0236.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7667260) returned 0x0 [0236.123] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0236.124] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x3 [0236.124] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0236.124] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7504138) returned 0x0 [0236.124] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7504138, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0236.124] WbemDefPath:IUnknown:Release (This=0x7504138) returned 0x3 [0236.124] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0236.124] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x4 [0236.124] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0236.125] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x3 [0236.125] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0236.125] WbemDefPath:IUnknown:Release (This=0x7669760) returned 0x0 [0236.125] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0236.125] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0236.125] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0236.125] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x2 [0236.125] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7667260) returned 0x0 [0236.125] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0236.125] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0236.126] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0236.126] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0236.126] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x2 [0236.126] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7667260) returned 0x0 [0236.126] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0236.126] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x3 [0236.126] WbemDefPath:IWbemPath:SetText (This=0x7667260, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0236.126] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0236.126] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0236.126] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0236.126] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0236.127] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0236.127] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0236.127] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0236.127] IWbemClassObject:Get (in: This=0x7669770, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c6c58*=0, plFlavor=0x64c6c5c*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c6c58*=8, plFlavor=0x64c6c5c*=64) returned 0x0 [0236.127] SysStringLen (param_1="root\\cimv2") returned 0xa [0236.127] IWbemClassObject:Get (in: This=0x7669770, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c6c58*=8, plFlavor=0x64c6c5c*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64c6c58*=8, plFlavor=0x64c6c5c*=64) returned 0x0 [0236.127] SysStringLen (param_1="root\\cimv2") returned 0xa [0236.127] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0236.127] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0236.127] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0236.127] IWbemClassObject:Get (in: This=0x7669770, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c6d10*=0, plFlavor=0x64c6d14*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c6d10*=8, plFlavor=0x64c6d14*=64) returned 0x0 [0236.127] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0236.128] IWbemClassObject:Get (in: This=0x7669770, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64c6d10*=8, plFlavor=0x64c6d14*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64c6d10*=8, plFlavor=0x64c6d14*=64) returned 0x0 [0236.128] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0236.129] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667260, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0236.129] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0236.129] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0236.129] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0236.129] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0236.129] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0236.129] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0236.129] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0236.129] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0236.129] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0236.129] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0236.130] IWbemClassObject:Get (in: This=0x7669770, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0236.130] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0236.130] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0236.130] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0236.130] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0236.130] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0239.063] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0239.064] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0239.064] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0239.064] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x7669d00, puReturned=0x64878e8*=0x1) returned 0x0 [0239.066] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x7669d00) returned 0x0 [0239.067] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0239.067] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0239.067] IUnknown:AddRef (This=0x7669d00) returned 0x3 [0239.067] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0239.067] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x7669d04) returned 0x0 [0239.068] IMarshal:GetUnmarshalClass (in: This=0x7669d04, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0239.068] IUnknown:Release (This=0x7669d04) returned 0x3 [0239.068] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0239.068] IUnknown:AddRef (This=0x7669d00) returned 0x4 [0239.068] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0239.068] IUnknown:Release (This=0x7669d00) returned 0x3 [0239.068] IUnknown:Release (This=0x7669d00) returned 0x2 [0239.068] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0239.068] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0239.068] IUnknown:AddRef (This=0x7669d00) returned 0x3 [0239.069] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x7669d00) returned 0x0 [0239.069] IUnknown:Release (This=0x7669d00) returned 0x3 [0239.069] IUnknown:Release (This=0x7669d00) returned 0x2 [0239.069] IUnknown:Release (This=0x7669d00) returned 0x1 [0239.069] IUnknown:Release (This=0x765dd64) returned 0x2 [0239.069] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0239.069] IUnknown:AddRef (This=0x7669d00) returned 0x2 [0239.069] IWbemClassObject:Get (in: This=0x7669d00, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0239.070] IWbemClassObject:Get (in: This=0x7669d00, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0239.070] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x52 [0239.070] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0239.070] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0239.070] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0239.070] IUnknown:Release (This=0x1d57dc) returned 0x1 [0239.071] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x7669cf0) returned 0x0 [0239.071] WbemDefPath:IUnknown:QueryInterface (in: This=0x7669cf0, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0239.071] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7669cf0, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x76672d0) returned 0x0 [0239.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x76672d0) returned 0x0 [0239.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0239.072] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x3 [0239.072] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0239.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x7504178) returned 0x0 [0239.072] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7504178, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0239.072] WbemDefPath:IUnknown:Release (This=0x7504178) returned 0x3 [0239.073] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0239.073] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x4 [0239.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0239.073] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x3 [0239.073] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0239.073] WbemDefPath:IUnknown:Release (This=0x7669cf0) returned 0x0 [0239.073] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0239.074] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0239.074] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0239.074] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x2 [0239.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x76672d0) returned 0x0 [0239.074] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0239.074] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0239.074] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0239.074] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0239.074] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x2 [0239.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x76672d0) returned 0x0 [0239.074] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0239.074] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x3 [0239.075] WbemDefPath:IWbemPath:SetText (This=0x76672d0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0239.075] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0239.075] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0239.075] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0239.075] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.075] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0239.075] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0239.075] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.075] IWbemClassObject:Get (in: This=0x7669d00, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64ca104*=0, plFlavor=0x64ca108*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64ca104*=8, plFlavor=0x64ca108*=64) returned 0x0 [0239.075] SysStringLen (param_1="root\\cimv2") returned 0xa [0239.075] IWbemClassObject:Get (in: This=0x7669d00, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64ca104*=8, plFlavor=0x64ca108*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64ca104*=8, plFlavor=0x64ca108*=64) returned 0x0 [0239.075] SysStringLen (param_1="root\\cimv2") returned 0xa [0239.076] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0239.076] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0239.076] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.076] IWbemClassObject:Get (in: This=0x7669d00, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64ca1bc*=0, plFlavor=0x64ca1c0*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64ca1bc*=8, plFlavor=0x64ca1c0*=64) returned 0x0 [0239.076] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0239.076] IWbemClassObject:Get (in: This=0x7669d00, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64ca1bc*=8, plFlavor=0x64ca1c0*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64ca1bc*=8, plFlavor=0x64ca1c0*=64) returned 0x0 [0239.076] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0239.077] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76672d0, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0239.077] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0239.077] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0239.077] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0239.077] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0239.077] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0239.077] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0239.077] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0239.077] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0239.078] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0239.078] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0239.078] IWbemClassObject:Get (in: This=0x7669d00, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0239.078] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0239.078] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0239.078] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0239.078] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0239.078] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0242.543] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0242.544] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0242.544] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0242.544] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x766a690, puReturned=0x64878e8*=0x1) returned 0x0 [0242.548] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x766a690) returned 0x0 [0242.548] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0242.548] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0242.549] IUnknown:AddRef (This=0x766a690) returned 0x3 [0242.549] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0242.549] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x766a694) returned 0x0 [0242.549] IMarshal:GetUnmarshalClass (in: This=0x766a694, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0242.549] IUnknown:Release (This=0x766a694) returned 0x3 [0242.549] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0242.549] IUnknown:AddRef (This=0x766a690) returned 0x4 [0242.549] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0242.549] IUnknown:Release (This=0x766a690) returned 0x3 [0242.550] IUnknown:Release (This=0x766a690) returned 0x2 [0242.550] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0242.550] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0242.550] IUnknown:AddRef (This=0x766a690) returned 0x3 [0242.550] IUnknown:QueryInterface (in: This=0x766a690, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x766a690) returned 0x0 [0242.550] IUnknown:Release (This=0x766a690) returned 0x3 [0242.550] IUnknown:Release (This=0x766a690) returned 0x2 [0242.550] IUnknown:Release (This=0x766a690) returned 0x1 [0242.550] IUnknown:Release (This=0x765dd64) returned 0x2 [0242.551] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0242.551] IUnknown:AddRef (This=0x766a690) returned 0x2 [0242.551] IWbemClassObject:Get (in: This=0x766a690, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0242.551] IWbemClassObject:Get (in: This=0x766a690, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0242.551] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x52 [0242.551] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0242.551] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0242.551] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0242.552] IUnknown:Release (This=0x1d57dc) returned 0x1 [0242.552] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x766ab20) returned 0x0 [0242.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x766ab20, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0242.552] WbemDefPath:IClassFactory:CreateInstance (in: This=0x766ab20, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x7667340) returned 0x0 [0242.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x7667340) returned 0x0 [0242.553] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0242.553] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x3 [0242.553] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0242.553] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x75041b8) returned 0x0 [0242.553] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75041b8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0242.553] WbemDefPath:IUnknown:Release (This=0x75041b8) returned 0x3 [0242.554] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0242.554] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x4 [0242.554] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0242.554] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x3 [0242.554] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0242.554] WbemDefPath:IUnknown:Release (This=0x766ab20) returned 0x0 [0242.554] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0242.554] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0242.554] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0242.554] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x2 [0242.554] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x7667340) returned 0x0 [0242.555] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0242.555] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0242.555] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0242.555] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0242.555] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x2 [0242.555] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x7667340) returned 0x0 [0242.555] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0242.555] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x3 [0242.555] WbemDefPath:IWbemPath:SetText (This=0x7667340, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0242.555] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0242.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.556] IWbemClassObject:Get (in: This=0x766a690, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64cd5b0*=0, plFlavor=0x64cd5b4*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64cd5b0*=8, plFlavor=0x64cd5b4*=64) returned 0x0 [0242.556] SysStringLen (param_1="root\\cimv2") returned 0xa [0242.556] IWbemClassObject:Get (in: This=0x766a690, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64cd5b0*=8, plFlavor=0x64cd5b4*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64cd5b0*=8, plFlavor=0x64cd5b4*=64) returned 0x0 [0242.556] SysStringLen (param_1="root\\cimv2") returned 0xa [0242.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0242.556] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.557] IWbemClassObject:Get (in: This=0x766a690, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64cd668*=0, plFlavor=0x64cd66c*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64cd668*=8, plFlavor=0x64cd66c*=64) returned 0x0 [0242.557] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0242.557] IWbemClassObject:Get (in: This=0x766a690, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64cd668*=8, plFlavor=0x64cd66c*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64cd668*=8, plFlavor=0x64cd66c*=64) returned 0x0 [0242.557] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0242.557] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667340, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0242.557] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0242.557] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0242.557] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0242.557] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0242.557] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.557] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0242.557] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0242.558] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0242.558] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0242.558] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0242.558] IWbemClassObject:Get (in: This=0x766a690, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0242.558] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0242.558] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0242.559] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0242.559] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0242.559] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0244.436] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0244.436] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0244.436] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0244.436] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x766b010, puReturned=0x64878e8*=0x1) returned 0x0 [0244.437] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515dfa8 | out: ppvObject=0x515dfa8*=0x766b010) returned 0x0 [0244.438] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515df64 | out: ppvObject=0x515df64*=0x0) returned 0x80004002 [0244.438] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c8b0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515de58 | out: ppvObject=0x515de58*=0x0) returned 0x80004002 [0244.438] IUnknown:AddRef (This=0x766b010) returned 0x3 [0244.438] CoGetContextToken (in: pToken=0x515ddf0 | out: pToken=0x515ddf0) returned 0x0 [0244.438] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515ddd8 | out: ppvObject=0x515ddd8*=0x766b014) returned 0x0 [0244.438] IMarshal:GetUnmarshalClass (in: This=0x766b014, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515dde0 | out: pCid=0x515dde0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0244.438] IUnknown:Release (This=0x766b014) returned 0x3 [0244.439] CoGetContextToken (in: pToken=0x515dde8 | out: pToken=0x515dde8) returned 0x0 [0244.439] IUnknown:AddRef (This=0x766b010) returned 0x4 [0244.439] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515de5c | out: ppvObject=0x515de5c*=0x0) returned 0x80004002 [0244.439] IUnknown:Release (This=0x766b010) returned 0x3 [0244.439] IUnknown:Release (This=0x766b010) returned 0x2 [0244.439] CoGetContextToken (in: pToken=0x515e248 | out: pToken=0x515e248) returned 0x0 [0244.439] CoGetContextToken (in: pToken=0x515e208 | out: pToken=0x515e208) returned 0x0 [0244.439] IUnknown:AddRef (This=0x766b010) returned 0x3 [0244.439] IUnknown:QueryInterface (in: This=0x766b010, riid=0x515e284*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x515e280 | out: ppvObject=0x515e280*=0x766b010) returned 0x0 [0244.439] IUnknown:Release (This=0x766b010) returned 0x3 [0244.440] IUnknown:Release (This=0x766b010) returned 0x2 [0244.440] IUnknown:Release (This=0x766b010) returned 0x1 [0244.440] IUnknown:Release (This=0x765dd64) returned 0x2 [0244.440] CoGetContextToken (in: pToken=0x515eb34 | out: pToken=0x515eb34) returned 0x0 [0244.440] IUnknown:AddRef (This=0x766b010) returned 0x2 [0244.440] IWbemClassObject:Get (in: This=0x766b010, wszName="__GENUS", lFlags=0, pVal=0x515ebb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec64*=0, plFlavor=0x515ec60*=0 | out: pVal=0x515ebb0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515ec64*=3, plFlavor=0x515ec60*=64) returned 0x0 [0244.440] IWbemClassObject:Get (in: This=0x766b010, wszName="__PATH", lFlags=0, pVal=0x515eb90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515ec48*=0, plFlavor=0x515ec44*=0 | out: pVal=0x515eb90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", varVal2=0x0), pType=0x515ec48*=8, plFlavor=0x515ec44*=64) returned 0x0 [0244.440] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x52 [0244.441] CoGetObjectContext (in: riid=0x579a920*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515ebe8 | out: ppv=0x515ebe8*=0x1d57dc) returned 0x0 [0244.441] IComThreadingInfo:GetCurrentApartmentType (in: This=0x1d57dc, pAptType=0x515ebe0 | out: pAptType=0x515ebe0*=1) returned 0x0 [0244.441] IUnknown:QueryInterface (in: This=0x1d57dc, riid=0x579a908*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x515ebe4 | out: ppvObject=0x515ebe4*=0x0) returned 0x80004002 [0244.441] IUnknown:Release (This=0x1d57dc) returned 0x1 [0244.441] CoGetClassObject (in: rclsid=0x29c404*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6c8ea3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x515e700 | out: ppv=0x515e700*=0x766ab30) returned 0x0 [0244.441] WbemDefPath:IUnknown:QueryInterface (in: This=0x766ab30, riid=0x6c9d7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x515e530 | out: ppvObject=0x515e530*=0x0) returned 0x80004002 [0244.441] WbemDefPath:IClassFactory:CreateInstance (in: This=0x766ab30, pUnkOuter=0x0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e568 | out: ppvObject=0x515e568*=0x76673b0) returned 0x0 [0244.442] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e30c | out: ppvObject=0x515e30c*=0x76673b0) returned 0x0 [0244.442] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c984204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x515e2c8 | out: ppvObject=0x515e2c8*=0x0) returned 0x80004002 [0244.442] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x3 [0244.442] CoGetContextToken (in: pToken=0x515e154 | out: pToken=0x515e154) returned 0x0 [0244.442] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c8623cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e13c | out: ppvObject=0x515e13c*=0x75041f8) returned 0x0 [0244.443] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x75041f8, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x515e144 | out: pCid=0x515e144*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0244.443] WbemDefPath:IUnknown:Release (This=0x75041f8) returned 0x3 [0244.443] CoGetContextToken (in: pToken=0x515e14c | out: pToken=0x515e14c) returned 0x0 [0244.443] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x4 [0244.443] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c8b767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e1c0 | out: ppvObject=0x515e1c0*=0x0) returned 0x80004002 [0244.443] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x3 [0244.443] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.443] WbemDefPath:IUnknown:Release (This=0x766ab30) returned 0x0 [0244.443] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0244.444] CoGetContextToken (in: pToken=0x515e9fc | out: pToken=0x515e9fc) returned 0x0 [0244.444] CoGetContextToken (in: pToken=0x515e9bc | out: pToken=0x515e9bc) returned 0x0 [0244.444] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x2 [0244.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x515ea38*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515ea34 | out: ppvObject=0x515ea34*=0x76673b0) returned 0x0 [0244.444] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.444] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0244.444] CoGetContextToken (in: pToken=0x515ea7c | out: pToken=0x515ea7c) returned 0x0 [0244.444] CoGetContextToken (in: pToken=0x515ea3c | out: pToken=0x515ea3c) returned 0x0 [0244.444] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x2 [0244.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x515eab8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x515eab4 | out: ppvObject=0x515eab4*=0x76673b0) returned 0x0 [0244.445] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.445] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x3 [0244.445] WbemDefPath:IWbemPath:SetText (This=0x76673b0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.445] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.445] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515ec1c | out: puCount=0x515ec1c*=0x2) returned 0x0 [0244.445] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x0, pszText=0x0 | out: puBuffLength=0x515ec18*=0x17, pszText=0x0) returned 0x0 [0244.445] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515ec18*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515ec18*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.445] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0244.445] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0244.445] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.446] IWbemClassObject:Get (in: This=0x766b010, wszName="__NAMESPACE", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d0a5c*=0, plFlavor=0x64d0a60*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64d0a5c*=8, plFlavor=0x64d0a60*=64) returned 0x0 [0244.446] SysStringLen (param_1="root\\cimv2") returned 0xa [0244.446] IWbemClassObject:Get (in: This=0x766b010, wszName="__NAMESPACE", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d0a5c*=8, plFlavor=0x64d0a60*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x64d0a5c*=8, plFlavor=0x64d0a60*=64) returned 0x0 [0244.446] SysStringLen (param_1="root\\cimv2") returned 0xa [0244.446] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e97c | out: puCount=0x515e97c*=0x2) returned 0x0 [0244.446] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x0, pszText=0x0 | out: puBuffLength=0x515e978*=0x17, pszText=0x0) returned 0x0 [0244.446] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e978*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e978*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.446] IWbemClassObject:Get (in: This=0x766b010, wszName="__CLASS", lFlags=0, pVal=0x515e938*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d0b14*=0, plFlavor=0x64d0b18*=0 | out: pVal=0x515e938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64d0b14*=8, plFlavor=0x64d0b18*=64) returned 0x0 [0244.446] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0244.446] IWbemClassObject:Get (in: This=0x766b010, wszName="__CLASS", lFlags=0, pVal=0x515e93c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64d0b14*=8, plFlavor=0x64d0b18*=64 | out: pVal=0x515e93c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64d0b14*=8, plFlavor=0x64d0b18*=64) returned 0x0 [0244.447] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0244.447] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76673b0, puCount=0x515e888 | out: puCount=0x515e888*=0x2) returned 0x0 [0244.447] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=4, puBuffLength=0x515e884*=0x0, pszText=0x0 | out: puBuffLength=0x515e884*=0x53, pszText=0x0) returned 0x0 [0244.447] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=4, puBuffLength=0x515e884*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e884*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.447] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x515e81c | out: puCount=0x515e81c*=0x2) returned 0x0 [0244.447] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x0, pszText=0x0 | out: puBuffLength=0x515e818*=0x17, pszText=0x0) returned 0x0 [0244.447] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x515e818*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x515e818*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.447] CoGetContextToken (in: pToken=0x515e760 | out: pToken=0x515e760) returned 0x0 [0244.447] WbemLocator:IUnknown:AddRef (This=0x2b57b4) returned 0x3 [0244.447] WbemLocator:IUnknown:QueryInterface (in: This=0x2b57b4, riid=0x6c967714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x515e384 | out: ppvObject=0x515e384*=0x2b57b4) returned 0x0 [0244.447] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x3 [0244.447] WbemLocator:IUnknown:Release (This=0x2b57b4) returned 0x2 [0244.448] IWbemClassObject:Get (in: This=0x766b010, wszName="__GENUS", lFlags=0, pVal=0x515e7d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x515e88c*=0, plFlavor=0x515e888*=0 | out: pVal=0x515e7d8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x515e88c*=3, plFlavor=0x515e888*=64) returned 0x0 [0244.448] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=2, puBuffLength=0x515e88c*=0x0, pszText=0x0 | out: puBuffLength=0x515e88c*=0x3d, pszText=0x0) returned 0x0 [0244.448] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=2, puBuffLength=0x515e88c*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x515e88c*=0x3d, pszText="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.448] CoGetContextToken (in: pToken=0x515e4ec | out: pToken=0x515e4ec) returned 0x0 [0244.448] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0244.448] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0244.910] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0244.910] CoGetContextToken (in: pToken=0x515e99c | out: pToken=0x515e99c) returned 0x0 [0244.910] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0244.910] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x22bdb0, puReturned=0x64878e8 | out: apObjects=0x22bdb0*=0x0, puReturned=0x64878e8*=0x0) returned 0x1 [0244.911] IUnknown:Release (This=0x765dd64) returned 0x2 [0244.912] CoGetContextToken (in: pToken=0x515eaec | out: pToken=0x515eaec) returned 0x0 [0244.912] WbemLocator:IUnknown:Release (This=0x2b5994) returned 0x1 [0244.912] IUnknown:Release (This=0x765dd64) returned 0x0 [0244.922] SetEvent (hEvent=0x3e8) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3dc) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3e0) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3e4) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3f8) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3ec) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3f0) returned 1 [0244.922] GetLastError () returned 0x0 [0244.922] SetEvent (hEvent=0x3f4) returned 1 [0244.922] GetLastError () returned 0x0 [0244.923] SetEvent (hEvent=0x3fc) returned 1 [0244.923] GetLastError () returned 0x0 [0244.923] CoUninitialize () Thread: id = 10 os_tid = 0xf08 Thread: id = 11 os_tid = 0xf0c Thread: id = 12 os_tid = 0xfdc Thread: id = 104 os_tid = 0x860 Thread: id = 9705 os_tid = 0x2780 [0245.041] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0245.087] SetThreadUILanguage (LangId=0x0) returned 0x409 [0245.088] VirtualQuery (in: lpAddress=0x839e270, lpBuffer=0x839f270, dwLength=0x1c | out: lpBuffer=0x839f270*(BaseAddress=0x839e000, AllocationBase=0x7a10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0245.089] VirtualQuery (in: lpAddress=0x839e38c, lpBuffer=0x839f38c, dwLength=0x1c | out: lpBuffer=0x839f38c*(BaseAddress=0x839e000, AllocationBase=0x7a10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0245.093] SetEvent (hEvent=0x47c) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x480) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x340) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x47c) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x480) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x38c) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x344) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x4a0) returned 1 [0245.093] GetLastError () returned 0x0 [0245.093] SetEvent (hEvent=0x384) returned 1 [0245.094] GetLastError () returned 0x0 [0245.094] SetEvent (hEvent=0x49c) returned 1 [0245.094] GetLastError () returned 0x0 [0245.095] CoUninitialize () Process: id = "2" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134bc0" os_pid = "0xef8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xe78" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0xefc [0082.400] SysStringByteLen (bstr="4") returned 0x2 [0082.402] SysStringByteLen (bstr="ꇠbc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll") returned 0x136 [0082.402] SysStringByteLen (bstr="ꇠbc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\ldyec3np.dll") returned 0x136 [0082.404] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.404] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0082.404] SysStringLen (param_1=0x0) returned 0x0 [0082.404] SysStringLen (param_1=0x0) returned 0x0 [0082.404] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.405] SysStringLen (param_1=0x0) returned 0x0 [0082.405] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.405] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0082.405] SysStringByteLen (bstr="4") returned 0x2 [0082.405] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0082.408] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.408] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0082.408] SysStringByteLen (bstr="4") returned 0x2 [0082.408] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0082.461] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x627af8) returned 0x0 [0082.473] SysStringLen (param_1=0x0) returned 0x0 [0082.473] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0082.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.516] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.516] SysStringByteLen (bstr="DEBUG") returned 0xa [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.801] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.807] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.808] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.811] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.812] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.813] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.814] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.611] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.769] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0x713dc3fd, Data2=0x797a, Data3=0x4be5, Data4=([0]=0xa0, [1]=0x32, [2]=0x50, [3]=0x64, [4]=0xfc, [5]=0x78, [6]=0x9d, [7]=0x13))) returned 0x0 [0084.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.279] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.360] SysStringLen (param_1=0x0) returned 0x0 [0085.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.361] GetTempFileNameW (in: lpPathName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpPrefixString="CSC", uUnique=0x0, lpTempFileName=0x12eb40 | out: lpTempFileName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC2174.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\csc2174.tmp")) returned 0x2174 [0085.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.369] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x63ca70) returned 0x0 [0085.380] IUnknown:AddRef (This=0x63ca70) returned 0x2 [0085.381] IStream:RemoteSeek (in: This=0x63ca70, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0085.384] ISequentialStream:RemoteWrite (in: This=0x63ca70, pv=0x6af948*=0x42, cb=0xe8c, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0xe8c) returned 0x0 [0085.384] IUnknown:Release (This=0x63ca70) returned 0x1 [0085.384] IStream:Stat (in: This=0x63ca70, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0085.387] IStream:RemoteSeek (in: This=0x63ca70, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0085.387] ISequentialStream:RemoteRead (in: This=0x63ca70, pv=0x6b4800, cb=0xe8d, pcbRead=0x12e554 | out: pv=0x6b4800*=0x42, pcbRead=0x12e554*=0xe8c) returned 0x0 [0085.387] IUnknown:Release (This=0x63ca70) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0085.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "3" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f134380" os_pid = "0xf00" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xef8" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES2194.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC2174.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0xf04 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341a0" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 13 os_tid = 0xfc8 Thread: id = 14 os_tid = 0xfc4 Thread: id = 15 os_tid = 0xf90 Thread: id = 16 os_tid = 0xf8c Thread: id = 17 os_tid = 0xf58 Thread: id = 18 os_tid = 0xee0 Thread: id = 19 os_tid = 0xedc Thread: id = 20 os_tid = 0xed0 Thread: id = 21 os_tid = 0xec0 Thread: id = 22 os_tid = 0x608 Thread: id = 23 os_tid = 0x548 Thread: id = 24 os_tid = 0x49c Thread: id = 25 os_tid = 0x330 Thread: id = 26 os_tid = 0x764 Thread: id = 27 os_tid = 0x758 Thread: id = 28 os_tid = 0x74c Thread: id = 29 os_tid = 0x744 Thread: id = 30 os_tid = 0x734 Thread: id = 31 os_tid = 0x71c Thread: id = 32 os_tid = 0x694 Thread: id = 33 os_tid = 0x518 Thread: id = 34 os_tid = 0x4dc Thread: id = 35 os_tid = 0x4b4 Thread: id = 36 os_tid = 0x4b0 Thread: id = 37 os_tid = 0x4a0 Thread: id = 38 os_tid = 0x494 Thread: id = 39 os_tid = 0x478 Thread: id = 40 os_tid = 0x3cc Thread: id = 41 os_tid = 0x3c0 Thread: id = 42 os_tid = 0x3b4 Thread: id = 43 os_tid = 0x364 Thread: id = 44 os_tid = 0x354 Thread: id = 45 os_tid = 0x350 Thread: id = 46 os_tid = 0x340 Thread: id = 47 os_tid = 0x338 Thread: id = 66 os_tid = 0x1c0 Thread: id = 108 os_tid = 0x8b0 Thread: id = 115 os_tid = 0x924 Thread: id = 116 os_tid = 0x934 Thread: id = 710 os_tid = 0x1050 Thread: id = 804 os_tid = 0x11c8 Thread: id = 4295 os_tid = 0x2030 Thread: id = 4320 os_tid = 0x2098 Thread: id = 4347 os_tid = 0x2104 Thread: id = 4348 os_tid = 0x2108 Thread: id = 4349 os_tid = 0x210c Thread: id = 4350 os_tid = 0x2110 Thread: id = 4351 os_tid = 0x2114 Thread: id = 4352 os_tid = 0x2118 Thread: id = 6683 os_tid = 0x1b40 Thread: id = 7374 os_tid = 0x1fc8 Thread: id = 7781 os_tid = 0x20a8 Thread: id = 7917 os_tid = 0x2394 Thread: id = 8812 os_tid = 0x2640 Thread: id = 8834 os_tid = 0x1ed8 Thread: id = 9572 os_tid = 0x1248 Thread: id = 9726 os_tid = 0x1384 Thread: id = 9727 os_tid = 0x18ac Thread: id = 9728 os_tid = 0x1198 Thread: id = 9764 os_tid = 0xaa4 Thread: id = 9765 os_tid = 0xacc Thread: id = 9781 os_tid = 0x10d8 Process: id = "5" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134ba0" os_pid = "0xad4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0003fe98" [0xc000000f] Thread: id = 48 os_tid = 0xed4 Thread: id = 49 os_tid = 0xafc Thread: id = 50 os_tid = 0xaf4 Thread: id = 51 os_tid = 0xaf0 Thread: id = 52 os_tid = 0xaec Thread: id = 53 os_tid = 0xae8 Thread: id = 54 os_tid = 0xae4 Thread: id = 55 os_tid = 0xadc Thread: id = 56 os_tid = 0xad8 Thread: id = 194 os_tid = 0xbf0 Thread: id = 896 os_tid = 0x1338 Thread: id = 9237 os_tid = 0x1b5c Thread: id = 9771 os_tid = 0x17ac Thread: id = 9784 os_tid = 0x255c Process: id = "6" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134b80" os_pid = "0xa94" os_integrity_level = "0x4000" os_privileges = "0xe60b1e990" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 57 os_tid = 0xed8 Thread: id = 58 os_tid = 0xab4 Thread: id = 59 os_tid = 0xab0 Thread: id = 60 os_tid = 0xaac Thread: id = 61 os_tid = 0xaa8 Thread: id = 62 os_tid = 0xa9c Thread: id = 63 os_tid = 0xa98 Thread: id = 99 os_tid = 0x810 Thread: id = 8884 os_tid = 0x1674 Thread: id = 9770 os_tid = 0x21d8 Thread: id = 9785 os_tid = 0x2564 Process: id = "7" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134260" os_pid = "0xfec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xe78" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0xff0 [0116.893] SysStringByteLen (bstr="4") returned 0x2 [0116.896] SysStringByteLen (bstr="ꇠ\x1cc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll") returned 0x136 [0116.896] SysStringByteLen (bstr="ꇠ\x1cc:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\xqnqsdsy.dll") returned 0x136 [0116.898] SysStringByteLen (bstr="DEBUG") returned 0xa [0116.899] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0116.899] SysStringLen (param_1=0x0) returned 0x0 [0116.899] SysStringLen (param_1=0x0) returned 0x0 [0116.899] SysStringByteLen (bstr="DEBUG") returned 0xa [0116.900] SysStringLen (param_1=0x0) returned 0x0 [0116.900] SysStringByteLen (bstr="DEBUG") returned 0xa [0116.900] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0116.900] SysStringByteLen (bstr="4") returned 0x2 [0116.900] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0116.903] SysStringByteLen (bstr="DEBUG") returned 0xa [0116.903] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0116.903] SysStringByteLen (bstr="4") returned 0x2 [0116.904] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0116.948] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x1c7af8) returned 0x0 [0116.959] SysStringLen (param_1=0x0) returned 0x0 [0116.959] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0116.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0116.999] SysStringByteLen (bstr="DEBUG") returned 0xa [0116.999] SysStringByteLen (bstr="DEBUG") returned 0xa [0117.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.272] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.273] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.274] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.275] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.277] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.278] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.279] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.279] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.280] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.280] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.281] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.282] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.284] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.290] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.291] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.292] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.293] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.298] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.299] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.301] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.302] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.303] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.304] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.305] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.306] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.307] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.309] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.310] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.311] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.823] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d8750 | out: hHeap=0x1b0000) returned 1 [0117.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0117.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.296] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.297] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.312] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.967] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.968] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.983] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.984] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.985] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.986] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.987] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.989] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.990] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.992] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.993] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.994] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.997] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.998] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0118.999] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.000] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.001] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.005] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.006] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.007] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.008] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.009] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.010] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.011] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.012] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.013] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.014] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.015] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.016] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.017] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.018] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.019] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.020] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.021] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.022] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.023] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.024] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.025] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.026] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.027] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.028] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.031] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.032] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.033] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.037] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.039] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.040] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.041] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.042] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.043] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.045] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.046] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.047] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.049] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.050] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.052] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.063] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.064] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.065] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.066] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.067] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.068] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.069] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.174] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.285] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.298] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0xe8a5b30a, Data2=0xa615, Data3=0x4af4, Data4=([0]=0xad, [1]=0x86, [2]=0x62, [3]=0xf9, [4]=0x50, [5]=0xe9, [6]=0xf2, [7]=0x6a))) returned 0x0 [0119.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.371] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.372] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.373] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.375] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.376] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.377] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.378] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.379] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.380] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.383] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.384] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.387] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.388] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.389] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.390] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.391] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.571] SysStringLen (param_1=0x0) returned 0x0 [0119.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.581] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x1dca10) returned 0x0 [0119.586] IUnknown:AddRef (This=0x1dca10) returned 0x2 [0119.587] IStream:RemoteSeek (in: This=0x1dca10, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0119.593] ISequentialStream:RemoteWrite (in: This=0x1dca10, pv=0x25fe50*=0x42, cb=0x804, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0x804) returned 0x0 [0119.594] IUnknown:Release (This=0x1dca10) returned 0x1 [0119.594] IStream:Stat (in: This=0x1dca10, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0119.594] IStream:RemoteSeek (in: This=0x1dca10, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0119.594] ISequentialStream:RemoteRead (in: This=0x1dca10, pv=0x24dd28, cb=0x805, pcbRead=0x12e554 | out: pv=0x24dd28*=0x42, pcbRead=0x12e554*=0x804) returned 0x0 [0119.594] IUnknown:Release (This=0x1dca10) returned 0x0 [0119.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.609] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0119.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "8" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f134220" os_pid = "0xff8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xfec" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES9369.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC9349.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 65 os_tid = 0xffc Process: id = "9" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7f134320" os_pid = "0x5bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 67 os_tid = 0xc54 Thread: id = 68 os_tid = 0xb98 Thread: id = 69 os_tid = 0xb8c Thread: id = 70 os_tid = 0x774 Thread: id = 71 os_tid = 0x418 Thread: id = 72 os_tid = 0x468 Thread: id = 73 os_tid = 0x470 Thread: id = 74 os_tid = 0x270 Thread: id = 75 os_tid = 0x724 Thread: id = 76 os_tid = 0x700 Thread: id = 77 os_tid = 0x6ec Thread: id = 78 os_tid = 0x708 Thread: id = 79 os_tid = 0x28c Thread: id = 80 os_tid = 0x7ac Thread: id = 81 os_tid = 0x79c Thread: id = 82 os_tid = 0x7a8 Thread: id = 83 os_tid = 0x718 Thread: id = 84 os_tid = 0x6e0 Thread: id = 85 os_tid = 0x6dc Thread: id = 86 os_tid = 0x6d8 Thread: id = 87 os_tid = 0x6d4 Thread: id = 88 os_tid = 0x6bc Thread: id = 89 os_tid = 0x6b4 Thread: id = 90 os_tid = 0x6ac Thread: id = 91 os_tid = 0x67c Thread: id = 92 os_tid = 0x610 Thread: id = 93 os_tid = 0x60c Thread: id = 94 os_tid = 0x600 Thread: id = 95 os_tid = 0x5fc Thread: id = 96 os_tid = 0x5f0 Thread: id = 97 os_tid = 0x5cc Thread: id = 98 os_tid = 0x5c0 Thread: id = 100 os_tid = 0x820 [0130.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x284) returned 0x30661b0 [0130.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2feeef8 [0130.639] RtlInitAnsiString (in: DestinationString=0x3c7f8b4, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.639] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f8ac, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0130.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fd9d80 [0130.639] RtlFreeAnsiString (AnsiString="N") [0130.642] RtlInitUnicodeString (in: DestinationString=0x3c7f8c4, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.642] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3c7f8d0 | out: BaseAddress=0x3c7f8d0*=0x77100000) returned 0x0 [0130.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9d80) returned 1 [0130.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2feeef8) returned 1 [0130.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2feeef8 [0130.645] RtlInitAnsiString (in: DestinationString=0x3c7f8ac, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.645] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f8a4, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0130.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fda0b0 [0130.645] RtlFreeAnsiString (AnsiString="N") [0130.645] RtlInitUnicodeString (in: DestinationString=0x3c7f8bc, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.645] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3c7f8c8 | out: BaseAddress=0x3c7f8c8*=0x77100000) returned 0x0 [0130.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fda0b0) returned 1 [0130.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2feeef8) returned 1 [0130.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2feeef8 [0130.647] RtlInitAnsiString (in: DestinationString=0x3c7f8a4, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.647] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f89c, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0130.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fd9d80 [0130.647] RtlFreeAnsiString (AnsiString="N") [0130.647] RtlInitUnicodeString (in: DestinationString=0x3c7f8b4, SourceString="NTDLL" | out: DestinationString="NTDLL") [0130.647] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x3c7f8c0 | out: BaseAddress=0x3c7f8c0*=0x77100000) returned 0x0 [0130.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9d80) returned 1 [0130.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2feeef8) returned 1 [0130.654] RtlInitUnicodeString (in: DestinationString=0x3c7f910, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") [0130.654] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x3c7f90c | out: BaseAddress=0x3c7f90c*=0x73570000) returned 0x0 [0130.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x2feeef8 [0130.785] RtlInitAnsiString (in: DestinationString=0x3c7f8b4, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0130.785] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f8ac, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0 [0130.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x2fd9fa8 [0130.785] RtlFreeAnsiString (AnsiString="S") [0130.785] RtlInitUnicodeString (in: DestinationString=0x3c7f8c4, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0130.785] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x3c7f8d0 | out: BaseAddress=0x3c7f8d0*=0x750f0000) returned 0x0 [0130.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9fa8) returned 1 [0130.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2feeef8) returned 1 [0130.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9) returned 0x2fd9fa8 [0130.786] RtlInitAnsiString (in: DestinationString=0x3c7f8ac, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0130.786] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f8a4, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0 [0130.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x37cb58 [0130.787] RtlFreeAnsiString (AnsiString="N") [0130.787] RtlInitUnicodeString (in: DestinationString=0x3c7f8bc, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0130.787] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x3c7f8c8 | out: BaseAddress=0x3c7f8c8*=0x73560000) returned 0x0 [0130.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x37cb58) returned 1 [0130.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9fa8) returned 1 [0130.791] FindResourceA (hModule=0x21d0000, lpName=0x7a69, lpType=0x539) returned 0x21df048 [0130.791] LoadResource (hModule=0x21d0000, hResInfo=0x21df048) returned 0x21df058 [0130.791] LockResource (hResData=0x21df058) returned 0x21df058 [0130.791] SizeofResource (hModule=0x21d0000, hResInfo=0x21df048) returned 0x1784 [0130.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1784) returned 0x30bd4b8 [0130.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9) returned 0x2fd9f78 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f94d8 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fad98 [0130.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 [0130.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f94d8) returned 1 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x37cb58 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feeef8 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x37c8d8 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x37cb18 [0130.792] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0x8) returned 0x2feeed8 [0130.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e695b8 [0130.792] strtol (in: _Str="0,\"spsz\":15360,\"thr\":1500,\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10", _EndPtr=0x3c7f8b0, _Radix=0 | out: _EndPtr=0x3c7f8b0*=",\"spsz\":15360,\"thr\":1500,\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10") returned 0 [0130.793] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0xc) returned 0x2fd9d68 [0130.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69a98 [0130.793] strtol (in: _Str="15360,\"thr\":1500,\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10", _EndPtr=0x3c7f8b0, _Radix=0 | out: _EndPtr=0x3c7f8b0*=",\"thr\":1500,\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10") returned 15360 [0130.793] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x10) returned 0x2fd9db0 [0130.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e695d8 [0130.793] strtol (in: _Str="1500,\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10", _EndPtr=0x3c7f8b0, _Radix=0 | out: _EndPtr=0x3c7f8b0*=",\"idsz\":6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10") returned 1500 [0130.793] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x14) returned 0x3e69e38 [0130.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69d38 [0130.793] strtol (in: _Str="6,\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10", _EndPtr=0x3c7f8b0, _Radix=0 | out: _EndPtr=0x3c7f8b0*=",\"encname\":false,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":null},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10") returned 6 [0130.793] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69e38, Size=0x18) returned 0x3e69e98 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69e38 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69e98, Size=0x1c) returned 0x3ef1770 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69e98 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x20) returned 0x3ef1748 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69b18 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x24) returned 0x3db3d80 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e694d8 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x28) returned 0x3db3b10 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69e18 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x2c) returned 0x3013690 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69eb8 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feeed8 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69638 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69ef8 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0x8) returned 0x2feedd8 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69ed8 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0xc) returned 0x2fd9db0 [0130.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69c98 [0130.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x10) returned 0x2fd9d68 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69cd8 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x14) returned 0x3e69c18 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69dd8 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69c18, Size=0x18) returned 0x3e69db8 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69c18 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69db8, Size=0x1c) returned 0x3ef1748 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69db8 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x20) returned 0x3ef1770 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69d58 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x24) returned 0x3db3b10 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69cf8 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x28) returned 0x3db3d80 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69c58 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x2c) returned 0x3013f18 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69c78 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013f18, Size=0x30) returned 0x30135e8 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69d78 [0130.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30135e8, Size=0x34) returned 0x3dcf950 [0130.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e69d18 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf950, Size=0x38) returned 0x3dcf910 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dff0 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x3c) returned 0x2fef5a8 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e150 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef5a8, Size=0x40) returned 0x2fef560 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e0b0 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef560, Size=0x44) returned 0x3e619d0 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e0f0 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e619d0, Size=0x48) returned 0x3e61930 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e030 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e61930, Size=0x4c) returned 0x3ef7808 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e370 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef7808, Size=0x50) returned 0x3ef80f8 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e2b0 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef80f8, Size=0x54) returned 0x2fe6128 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e290 [0130.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6128, Size=0x58) returned 0x2fe6368 [0130.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2e230 [0130.797] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6368, Size=0x5c) returned 0x3d8b220 [0130.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dc30 [0130.797] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8b220, Size=0x60) returned 0x3d8cef8 [0130.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dd70 [0130.797] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8cef8, Size=0x64) returned 0x3e33fc0 [0130.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dbf0 [0130.797] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e33fc0, Size=0x68) returned 0x3e0b740 [0130.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dc10 [0130.798] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b740, Size=0x6c) returned 0x3e34880 [0130.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2dc50 [0130.798] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34880, Size=0x70) returned 0x3e35438 [0130.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2d5f0 [0130.798] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e35438, Size=0x74) returned 0x3da6570 [0130.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2d950 [0130.798] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6570, Size=0x78) returned 0x3da6470 [0130.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e2d890 [0130.798] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6470, Size=0x7c) returned 0x3061f70 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d501e0 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3061f70, Size=0x80) returned 0x3d59e18 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50280 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59e18, Size=0x84) returned 0x354c60 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50260 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354c60, Size=0x88) returned 0x354ab0 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50360 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354ab0, Size=0x8c) returned 0x32ce18 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50340 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32ce18, Size=0x90) returned 0x32cce8 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50320 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cce8, Size=0x94) returned 0x3e0d210 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d502a0 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d210, Size=0x98) returned 0x3e0d850 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50240 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d850, Size=0x9c) returned 0x3053e58 [0130.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50380 [0130.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053e58, Size=0xa0) returned 0x3052df0 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50200 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0x8) returned 0x2feedd8 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d500a0 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feeed8 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5838 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0x8) returned 0x2feee08 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b54b8 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0xc) returned 0x2fd9d68 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5918 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x10) returned 0x2fd9db0 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5378 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x14) returned 0x30b57f8 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b53f8 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b57f8, Size=0x18) returned 0x30b58f8 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b57f8 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b58f8, Size=0x1c) returned 0x3ef1770 [0130.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b58f8 [0130.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x20) returned 0x3ef1748 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5758 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x24) returned 0x3db3d80 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5618 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x28) returned 0x3db3b10 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5678 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x2c) returned 0x30135e8 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30ae5b0 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30135e8, Size=0x30) returned 0x3013f18 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30ae090 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013f18, Size=0x34) returned 0x3dcf910 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30adf10 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x38) returned 0x3dcf950 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30ae050 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf950, Size=0x3c) returned 0x2fef560 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30aded0 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef560, Size=0x40) returned 0x2fef5a8 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30ae390 [0130.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0xc) returned 0x2fd9db0 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb940 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feedd8 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb740 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0x8) returned 0x2feee08 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb6a0 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0xc) returned 0x2fd9d68 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb560 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x10) returned 0x2fda0e0 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb8a0 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda0e0, Size=0x14) returned 0x3d54258 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53798 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54258, Size=0x18) returned 0x3d54118 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54258 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54118, Size=0x1c) returned 0x3ef1748 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54118 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x20) returned 0x3ef1770 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54298 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x24) returned 0x3db3b10 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a170 [0130.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x28) returned 0x3db3d80 [0130.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a0b0 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x2c) returned 0x3013f18 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a130 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013f18, Size=0x30) returned 0x30135e8 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069f10 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30135e8, Size=0x34) returned 0x3dcf950 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301bd48 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf950, Size=0x38) returned 0x3dcf910 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301bae8 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x3c) returned 0x2fef560 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301be48 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef560, Size=0x40) returned 0x2ff00e8 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301bdc8 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff00e8, Size=0x44) returned 0x3e61930 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095420 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e61930, Size=0x48) returned 0x3e619d0 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095520 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e619d0, Size=0x4c) returned 0x3ef80f8 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3095540 [0130.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef80f8, Size=0x50) returned 0x3ef7808 [0130.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30954a0 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef7808, Size=0x54) returned 0x2fe6368 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x311c40 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6368, Size=0x58) returned 0x2fe6128 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x311ca0 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6128, Size=0x5c) returned 0x3d8cef8 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x312180 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8cef8, Size=0x60) returned 0x3d8b220 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3121e0 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8b220, Size=0x64) returned 0x3e0b740 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x370710 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b740, Size=0x68) returned 0x3e0b7b0 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x370a90 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b7b0, Size=0x6c) returned 0x3e35438 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8ae8 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e35438, Size=0x70) returned 0x3e34880 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8668 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34880, Size=0x74) returned 0x3da6470 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3dbab88 [0130.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6470, Size=0x78) returned 0x3da6570 [0130.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3046af8 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6570, Size=0x7c) returned 0x3d59e18 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x328608 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59e18, Size=0x80) returned 0x3d59048 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea90f8 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59048, Size=0x84) returned 0x354ab0 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9118 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354ab0, Size=0x88) returned 0x354c60 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9138 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354c60, Size=0x8c) returned 0x32cce8 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9158 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cce8, Size=0x90) returned 0x32ce18 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9178 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32ce18, Size=0x94) returned 0x3e0d850 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9198 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d850, Size=0x98) returned 0x3e0d210 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea91b8 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d210, Size=0x9c) returned 0x3053e58 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea91d8 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053e58, Size=0xa0) returned 0x3053b10 [0130.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea91f8 [0130.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053b10, Size=0xa4) returned 0x35b7c8 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9218 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b7c8, Size=0xa8) returned 0x35b928 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9238 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b928, Size=0xac) returned 0x2ff7378 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9258 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff7378, Size=0xb0) returned 0x2ff6740 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9278 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6740, Size=0xb4) returned 0x332e68 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9298 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x332e68, Size=0xb8) returned 0x332da8 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea92b8 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x332da8, Size=0xbc) returned 0x3def2c0 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea92d8 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3def2c0, Size=0xc0) returned 0x3def900 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea92f8 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3def900, Size=0xc4) returned 0x338c38 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9318 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x338c38, Size=0xc8) returned 0x338418 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9338 [0130.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x338418, Size=0xcc) returned 0x3e04890 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9358 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e04890, Size=0xd0) returned 0x3e046e0 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9378 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x10) returned 0x2fda0e0 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9398 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013690, Size=0x30) returned 0x30135e8 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea93b8 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea93d8 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0x8) returned 0x2feedd8 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea93f8 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9418 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0x8) returned 0x2feeed8 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9438 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0xc) returned 0x2fd9db0 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9458 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x10) returned 0x2fd9d68 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9478 [0130.807] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x14) returned 0x3ea9498 [0130.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea94b8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea9498, Size=0x18) returned 0x3ea94d8 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9498 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea94d8, Size=0x1c) returned 0x3ef1770 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea94d8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x20) returned 0x3ef1748 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea94f8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x24) returned 0x3db3d80 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9518 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x28) returned 0x3db3b10 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9538 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x2c) returned 0x3013690 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9558 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013690, Size=0x30) returned 0x3013f18 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9578 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013f18, Size=0x34) returned 0x3dcf910 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9598 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x38) returned 0x3dcf950 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea95b8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf950, Size=0x3c) returned 0x2ff00e8 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea95d8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff00e8, Size=0x40) returned 0x2fef560 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea95f8 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef560, Size=0x44) returned 0x3e619d0 [0130.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9618 [0130.808] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e619d0, Size=0x48) returned 0x3e61930 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9638 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e61930, Size=0x4c) returned 0x3ef7808 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9658 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef7808, Size=0x50) returned 0x3ef80f8 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9678 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef80f8, Size=0x54) returned 0x2fe6128 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9698 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6128, Size=0x58) returned 0x2fe6368 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea96b8 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6368, Size=0x5c) returned 0x3d8b220 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea96d8 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8b220, Size=0x60) returned 0x3d8cef8 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea96f8 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8cef8, Size=0x64) returned 0x3e0b7b0 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9718 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b7b0, Size=0x68) returned 0x3e0b740 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9738 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b740, Size=0x6c) returned 0x3e34880 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9758 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34880, Size=0x70) returned 0x3e35438 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9778 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e35438, Size=0x74) returned 0x3da6570 [0130.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9798 [0130.809] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6570, Size=0x78) returned 0x3da6470 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea97b8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6470, Size=0x7c) returned 0x3d59048 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea97d8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59048, Size=0x80) returned 0x3d59e18 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea97f8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59e18, Size=0x84) returned 0x354c60 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9818 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354c60, Size=0x88) returned 0x354ab0 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9838 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354ab0, Size=0x8c) returned 0x32ce18 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9858 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32ce18, Size=0x90) returned 0x32cce8 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9878 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cce8, Size=0x94) returned 0x3e0d210 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9898 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d210, Size=0x98) returned 0x3e0d850 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea98b8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0d850, Size=0x9c) returned 0x3053b10 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea98d8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053b10, Size=0xa0) returned 0x3053e58 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea98f8 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053e58, Size=0xa4) returned 0x35b928 [0130.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9918 [0130.810] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b928, Size=0xa8) returned 0x35b7c8 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9938 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b7c8, Size=0xac) returned 0x2ff6740 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9958 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6740, Size=0xb0) returned 0x2ff7378 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9978 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff7378, Size=0xb4) returned 0x332da8 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9998 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x332da8, Size=0xb8) returned 0x332e68 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea99b8 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x332e68, Size=0xbc) returned 0x3def900 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea99d8 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3def900, Size=0xc0) returned 0x3def2c0 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea99f8 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3def2c0, Size=0xc4) returned 0x338418 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9a18 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x338418, Size=0xc8) returned 0x338c38 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9a38 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x338c38, Size=0xcc) returned 0x3e04890 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9a58 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e04890, Size=0xd0) returned 0x3e04a40 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9a78 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e04a40, Size=0xd4) returned 0x2c8568 [0130.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9a98 [0130.811] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8568, Size=0xd8) returned 0x2c9528 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9ab8 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c9528, Size=0xdc) returned 0x3d56838 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9ad8 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d56838, Size=0xe0) returned 0x3d56af0 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9af8 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d56af0, Size=0xe4) returned 0x3ddf6a8 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9b18 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddf6a8, Size=0xe8) returned 0x3dde208 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9b38 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dde208, Size=0xec) returned 0x327410 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9b58 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x327410, Size=0xf0) returned 0x3277f0 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9b78 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3277f0, Size=0xf4) returned 0x3e15c70 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9b98 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15c70, Size=0xf8) returned 0x3e15a70 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9bb8 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15a70, Size=0xfc) returned 0x2f94d8 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9bd8 [0130.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2f94d8, Size=0x100) returned 0x2fad98 [0130.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9bf8 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fad98, Size=0x104) returned 0x3deb9f0 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9c18 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3deb9f0, Size=0x108) returned 0x3debf68 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9c38 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0xc) returned 0x2fd9d68 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9c58 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feedd8 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9c78 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0x8) returned 0x2feeed8 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9c98 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0xc) returned 0x2fd9db0 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9cb8 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9db0, Size=0x10) returned 0x2fd9eb8 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9cd8 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9eb8, Size=0x14) returned 0x3ea9cf8 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9d18 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea9cf8, Size=0x18) returned 0x3ea9d38 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9cf8 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea9d38, Size=0x1c) returned 0x3ef1748 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9d38 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1748, Size=0x20) returned 0x3ef1770 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9d58 [0130.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef1770, Size=0x24) returned 0x3db3b10 [0130.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9d78 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3b10, Size=0x28) returned 0x3db3d80 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9d98 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3d80, Size=0x2c) returned 0x3013f18 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9db8 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013f18, Size=0x30) returned 0x3013690 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9dd8 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3013690, Size=0x34) returned 0x3dcf950 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9df8 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf950, Size=0x38) returned 0x3dcf910 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9e18 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x3c) returned 0x2fef560 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9e38 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fef560, Size=0x40) returned 0x2ff00e8 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9e58 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff00e8, Size=0x44) returned 0x3e61930 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9e78 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e61930, Size=0x48) returned 0x3e619d0 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9e98 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e619d0, Size=0x4c) returned 0x3ef80f8 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9eb8 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef80f8, Size=0x50) returned 0x3ef7808 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9ed8 [0130.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef7808, Size=0x54) returned 0x2fe6368 [0130.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9ef8 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6368, Size=0x58) returned 0x2fe6128 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9f18 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6128, Size=0x5c) returned 0x3d8cef8 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9f38 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8cef8, Size=0x60) returned 0x3d8b220 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9f58 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d8b220, Size=0x64) returned 0x3e0b740 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9f78 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b740, Size=0x68) returned 0x3e0b7b0 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9f98 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b7b0, Size=0x6c) returned 0x3e35438 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9fb8 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e35438, Size=0x70) returned 0x3e34880 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9fd8 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e34880, Size=0x74) returned 0x3da6470 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3ea9ff8 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6470, Size=0x78) returned 0x3da6570 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa018 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da6570, Size=0x7c) returned 0x3d59e18 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa038 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59e18, Size=0x80) returned 0x3d59048 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa058 [0130.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d59048, Size=0x84) returned 0x354ab0 [0130.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa078 [0130.816] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354ab0, Size=0x88) returned 0x354c60 [0130.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa098 [0130.905] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x354c60, Size=0x8c) returned 0x32cce8 [0130.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eaa0b8 [0130.905] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cce8, Size=0x90) returned 0x32ce18 [0130.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df33b8 [0130.905] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x10) returned 0x2fd9eb8 [0130.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df33d8 [0130.905] strtol (in: _Str="0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10", _EndPtr=0x3c7f894, _Radix=0 | out: _EndPtr=0x3c7f894*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}\x98\x1bÔ\x03Â\x98\x1e\x89\x96Ý\x10") returned 0 [0130.905] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9eb8, Size=0x14) returned 0x3df33f8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3418 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feeed8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3438 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feeed8, Size=0x8) returned 0x2feedd8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3458 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0xc) returned 0x2fd9eb8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3478 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9eb8, Size=0x10) returned 0x2fd9d68 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3498 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9d68, Size=0x14) returned 0x3df34b8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df34d8 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30135e8, Size=0x34) returned 0x3dcf910 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df34f8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feedd8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3518 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0x8) returned 0x2feeed8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3538 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feedd8 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3558 [0130.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feedd8, Size=0x8) returned 0x2feee08 [0130.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3578 [0130.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0xc) returned 0x2fd9d68 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df3598 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df35b8 [0130.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2feee08, Size=0x8) returned 0x2feedd8 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df35d8 [0130.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf910, Size=0x38) returned 0x3dcf950 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feee08 [0130.913] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3db3d80, Length=0x20) returned 0xf8ec58de [0130.917] GetCurrentProcessId () returned 0x5bc [0130.918] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3d8b228 | out: Wow64Process=0x3d8b228) returned 1 [0130.918] RtlGetVersion (in: lpVersionInformation=0x3c7f80c | out: lpVersionInformation=0x3c7f80c*(dwOSVersionInfoSize=0x0, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0130.920] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x5fc06575 [0130.920] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x4be20a5a [0130.920] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x7a8fd2d1 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x5dbf7dd [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x7350dd8a [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x26a1ab39 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x4a83d83a [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1dbb2641 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x96a6f32 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x34c45478 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x53c6f72b [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0xe1b7d91 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x4eee5e79 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1e89fafc [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x7f7a1640 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1cdb8b06 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x5857e43d [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x4c61a591 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x21225b87 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x649cb881 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x48a1f5bc [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1ac12a09 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1a5853f6 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x6e5c9b88 [0130.921] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1ecc9658 [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x3930e60d [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x1ce20f63 [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x161e985d [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x36e7f8fa [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x50906543 [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x487aec61 [0130.922] RtlRandomEx (in: Seed=0x3c7f790 | out: Seed=0x3c7f790) returned 0x423d28b3 [0130.935] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x68d74f2d [0130.935] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x64e213dc [0130.935] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x55f59abc [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x7350dd8a [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x1cdb8b06 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x7b540022 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x75e033b4 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x23b07e28 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x2f806d02 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x764aa8bd [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x5b3eadd0 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x8f8b2df [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x22bdc4ac [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x675b60e7 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x16d6fee2 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x52487227 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0xf8fa1df [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x1e06d5b6 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x49d1f36d [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x58855602 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x681a9a3d [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x70d80bcc [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x725867c7 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x1ca27b2a [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x61f5e7dc [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x57b32324 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x6b419062 [0130.936] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x5a4c5a07 [0130.937] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x506a5ec3 [0130.937] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x1113a91f [0130.937] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x42bacba5 [0130.937] RtlRandomEx (in: Seed=0x3c7f748 | out: Seed=0x3c7f748) returned 0x1ca27b2a [0130.938] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3ef13b0, Length=0x20) returned 0xac3a86f7 [0130.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2fef560 [0130.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34880 [0130.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0130.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0130.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0130.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1310 [0130.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0130.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0130.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34880) returned 1 [0130.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fef560) returned 1 [0130.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e34880 [0130.939] sprintf (in: _Dest=0x2fd9f78, _Format="%0.8x" | out: _Dest="ac3a86f7") returned 8 [0130.939] RtlInitAnsiString (in: DestinationString=0x3c7f7ac, SourceString="ac3a86f7" | out: DestinationString="ac3a86f7") [0130.939] RtlAnsiStringToUnicodeString (in: DestinationString=0x3c7f7a4, SourceString="ac3a86f7", AllocateDestinationString=1 | out: DestinationString="ac3a86f7") returned 0x0 [0130.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df40f8 [0130.940] wcscat (in: _Dest=0x2fda038, _Source="ac3a86" | out: _Dest=".ac3a86") returned=".ac3a86" [0130.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x3de2470 [0130.940] strstr (_Str="{id}-Readme.txt", _SubStr="{id}") returned="{id}-Readme.txt" [0130.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4098 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x654c752f [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0xa151ea4 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x609fc267 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x1e54ce3b [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x4e8da268 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x5ac2664e [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x10cf2b5c [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x41ab3a37 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x7469c178 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x367d945b [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0xcd7437d [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x542aa145 [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x1f631a8f [0130.940] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0xea82ba7 [0130.948] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x3239bd59 [0130.948] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x74d48102 [0130.948] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x77f0af7a [0130.948] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x2b2b9156 [0130.948] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x5e097f99 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x1b6da946 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x6ab4bf5b [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x61e32d00 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x5f31052f [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x2323f541 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x23ebc953 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x8ea57df [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x16889239 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x59a77577 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x7aee4ba9 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x67e69e13 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x2b5faef6 [0130.949] RtlRandomEx (in: Seed=0x3c7f734 | out: Seed=0x3c7f734) returned 0x28f85599 [0130.951] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x3c7f89c | out: lpLuid=0x3c7f89c*(LowPart=0x14, HighPart=0)) returned 1 [0130.955] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x3c7f90c | out: TokenHandle=0x3c7f90c*=0x954) returned 0x0 [0130.956] AdjustTokenPrivileges (in: TokenHandle=0x954, DisableAllPrivileges=0, NewState=0x3c7f8a4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0130.956] GetLastError () returned 0x514 [0130.956] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x3c7f894 | out: lpLuid=0x3c7f894*(LowPart=0x1d, HighPart=0)) returned 1 [0130.957] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x3c7f904 | out: TokenHandle=0x3c7f904*=0x1208) returned 0x0 [0130.957] AdjustTokenPrivileges (in: TokenHandle=0x1208, DisableAllPrivileges=0, NewState=0x3c7f89c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0130.957] GetLastError () returned 0x514 [0130.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d40a0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0130.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d3e10, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0130.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d3ef0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0130.960] Sleep (dwMilliseconds=0x0) [0131.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3f1b6e8 [0131.004] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x2048) returned 0x3f1b6e8 [0131.008] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x306c) returned 0x3f1b6e8 [0131.010] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.011] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x4090) returned 0x3f1b6e8 [0131.011] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.013] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x50b4) returned 0x3f1b6e8 [0131.013] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.015] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x60d8) returned 0x3f1b6e8 [0131.015] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.017] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x70fc) returned 0x3f1b6e8 [0131.017] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.020] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x8120) returned 0x3f1b6e8 [0131.020] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.022] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x9144) returned 0x3f1b6e8 [0131.022] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xa168) returned 0x3f1b6e8 [0131.024] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xb18c) returned 0x3f1b6e8 [0131.026] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xc1b0) returned 0x3f1b6e8 [0131.028] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.031] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xd1d4) returned 0x3f1b6e8 [0131.031] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.034] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xe1f8) returned 0x3f1b6e8 [0131.034] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xf21c) returned 0x3f1b6e8 [0131.036] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x10240) returned 0x3f1b6e8 [0131.040] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x11264) returned 0x3f1b6e8 [0131.042] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x12288) returned 0x3f1b6e8 [0131.045] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f1b6e8, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x132ac) returned 0x66c0048 [0131.048] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.119] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x142d0) returned 0x66c0048 [0131.119] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.122] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x152f4) returned 0x66c0048 [0131.122] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.126] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x16318) returned 0x66c0048 [0131.126] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.129] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1733c) returned 0x66c0048 [0131.129] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x18360) returned 0x66c0048 [0131.133] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.137] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x19384) returned 0x66c0048 [0131.137] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1a3a8) returned 0x66c0048 [0131.141] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.145] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1b3cc) returned 0x66c0048 [0131.146] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.150] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1c3f0) returned 0x66c0048 [0131.150] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1d414) returned 0x66c0048 [0131.154] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1e438) returned 0x66c0048 [0131.212] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.217] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x1f45c) returned 0x66c0048 [0131.217] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.221] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x20480) returned 0x66c0048 [0131.221] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x214a4) returned 0x66c0048 [0131.226] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0xc0000004 [0131.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66c0048, Size=0x224c8) returned 0x66e14f8 [0131.235] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66e14f8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x66e14f8, ResultLength=0x0) returned 0xc0000004 [0131.240] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66e14f8, Size=0x234ec) returned 0x66e14f8 [0131.240] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66e14f8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x66e14f8, ResultLength=0x0) returned 0xc0000004 [0131.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66e14f8, Size=0x24510) returned 0x67049f0 [0131.250] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x67049f0, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x67049f0, ResultLength=0x0) returned 0xc0000004 [0131.261] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67049f0, Size=0x25534) returned 0x67049f0 [0131.261] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x67049f0, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x67049f0, ResultLength=0x0) returned 0xc0000004 [0131.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67049f0, Size=0x26558) returned 0x66c0048 [0131.266] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x66c0048, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x66c0048, ResultLength=0x0) returned 0x0 [0131.271] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.272] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.273] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.274] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.275] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.276] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.277] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.278] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.279] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.280] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.281] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.282] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.283] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.284] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.285] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.286] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.287] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.288] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.289] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.290] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.291] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.292] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.293] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.294] NtOpenProcess (in: ProcessHandle=0x3c7f8f0, DesiredAccess=0x440, ObjectAttributes=0x3c7f8d4*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8cc*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8f0*=0x0) returned 0xc0000022 [0131.316] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0131.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x305e968 [0131.316] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x305e968 | out: lpBuffer="C:\\") returned 0x4 [0131.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de2590 [0131.316] wcscpy (in: _Dest=0x3de2590, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9ee00 [0131.316] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9ee00, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0131.317] wcscat (in: _Dest=0x3d9ee00, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0131.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8b490 [0131.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dc400, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0131.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dc4b0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554 [0131.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0131.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0131.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x3f1ce60 [0131.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x306c) returned 0x3f1ce60 [0131.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x4090) returned 0x3f1ce60 [0131.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x50b4) returned 0x3f1ce60 [0131.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x60d8) returned 0x3f1ce60 [0131.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x70fc) returned 0x3f1ce60 [0131.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x8120) returned 0x3f1ce60 [0131.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x9144) returned 0x3f1ce60 [0131.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xa168) returned 0x3f1ce60 [0131.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xb18c) returned 0x3f1ce60 [0131.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xc1b0) returned 0x3f1ce60 [0131.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xd1d4) returned 0x3f1ce60 [0131.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xe1f8) returned 0x3f1ce60 [0131.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0x0 [0131.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce60) returned 1 [0131.325] NtOpenProcess (in: ProcessHandle=0x3c7f8bc, DesiredAccess=0x400, ObjectAttributes=0x3c7f8d0*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f8c8*(UniqueProcess=0x1ac, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8bc*=0x0) returned 0xc0000022 [0131.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fad98 [0131.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0131.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0131.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x3f1ce60 [0131.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x306c) returned 0x3f1ce60 [0131.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x4090) returned 0x3f1ce60 [0131.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x50b4) returned 0x3f1ce60 [0131.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x60d8) returned 0x3f1ce60 [0131.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x70fc) returned 0x3f1ce60 [0131.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x8120) returned 0x3f1ce60 [0131.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x9144) returned 0x3f1ce60 [0131.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xa168) returned 0x3f1ce60 [0131.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xb18c) returned 0x3f1ce60 [0131.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xc1b0) returned 0x3f1ce60 [0131.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xd1d4) returned 0x3f1ce60 [0131.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xe1f8) returned 0x3f1ce60 [0131.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0x0 [0131.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce60) returned 1 [0131.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 [0131.329] SetErrorMode (uMode=0x8003) returned 0x1 [0131.329] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0131.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3dc58f0 [0131.329] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3dc58f0 | out: lpBuffer="C:\\") returned 0x4 [0131.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de2590 [0131.329] wcscpy (in: _Dest=0x3de2590, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.329] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0131.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3de2590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0131.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.331] Sleep (dwMilliseconds=0x3e8) [0134.531] Sleep (dwMilliseconds=0x3e8) [0143.548] Sleep (dwMilliseconds=0x3e8) [0146.071] Sleep (dwMilliseconds=0x3e8) [0150.262] Sleep (dwMilliseconds=0x3e8) [0152.853] Sleep (dwMilliseconds=0x3e8) [0156.604] Sleep (dwMilliseconds=0x3e8) [0163.339] Sleep (dwMilliseconds=0x3e8) [0166.569] Sleep (dwMilliseconds=0x3e8) [0170.659] Sleep (dwMilliseconds=0x3e8) [0172.932] Sleep (dwMilliseconds=0x3e8) [0176.185] Sleep (dwMilliseconds=0x3e8) [0177.973] Sleep (dwMilliseconds=0x3e8) [0180.522] Sleep (dwMilliseconds=0x3e8) [0182.570] Sleep (dwMilliseconds=0x3e8) [0188.431] Sleep (dwMilliseconds=0x3e8) [0190.925] Sleep (dwMilliseconds=0x3e8) [0196.971] Sleep (dwMilliseconds=0x3e8) [0201.451] Sleep (dwMilliseconds=0x3e8) [0203.196] Sleep (dwMilliseconds=0x3e8) [0205.478] Sleep (dwMilliseconds=0x3e8) [0206.959] Sleep (dwMilliseconds=0x3e8) [0208.016] Sleep (dwMilliseconds=0x3e8) [0215.112] Sleep (dwMilliseconds=0x3e8) [0217.405] Sleep (dwMilliseconds=0x3e8) [0218.871] Sleep (dwMilliseconds=0x3e8) [0220.038] Sleep (dwMilliseconds=0x3e8) [0221.076] Sleep (dwMilliseconds=0x3e8) [0222.276] Sleep (dwMilliseconds=0x3e8) [0223.311] Sleep (dwMilliseconds=0x3e8) [0225.827] Sleep (dwMilliseconds=0x3e8) [0226.834] Sleep (dwMilliseconds=0x3e8) [0228.693] Sleep (dwMilliseconds=0x3e8) [0229.708] Sleep (dwMilliseconds=0x3e8) [0231.251] Sleep (dwMilliseconds=0x3e8) [0232.954] Sleep (dwMilliseconds=0x3e8) [0234.358] Sleep (dwMilliseconds=0x3e8) [0235.543] Sleep (dwMilliseconds=0x3e8) [0236.890] Sleep (dwMilliseconds=0x3e8) [0237.900] Sleep (dwMilliseconds=0x3e8) [0239.054] Sleep (dwMilliseconds=0x3e8) [0240.176] Sleep (dwMilliseconds=0x3e8) [0241.825] Sleep (dwMilliseconds=0x3e8) [0243.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0243.075] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0243.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.078] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.079] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.080] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.081] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.081] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.083] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.083] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.084] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.084] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.086] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.087] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.444] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.444] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.446] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.447] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.449] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xe1f8) returned 0x674caa0 [0243.451] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xf21c) returned 0x674caa0 [0243.452] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x674caa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0x10240) returned 0x6a9ecd0 [0243.455] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0243.457] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0243.459] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0243.461] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0243.477] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0243.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x152f4) returned 0x6897cd0 [0243.480] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6897cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0243.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x16318) returned 0x6897cd0 [0243.482] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6897cd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0243.484] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x1733c) returned 0x6897cd0 [0243.484] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x6897cd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0243.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x18360) returned 0x67afcd0 [0243.488] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x19384) returned 0x67afcd0 [0243.490] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1a3a8) returned 0x67afcd0 [0243.493] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.495] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1b3cc) returned 0x67afcd0 [0243.495] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.497] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1c3f0) returned 0x67afcd0 [0243.497] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.500] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1d414) returned 0x67afcd0 [0243.500] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1e438) returned 0x67afcd0 [0243.503] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x1f45c) returned 0x67afcd0 [0243.506] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67afcd0, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x67afcd0, ResultLength=0x0) returned 0xc0000004 [0243.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67afcd0, Size=0x20480) returned 0x67efcd0 [0243.517] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x214a4) returned 0x67efcd0 [0243.521] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x224c8) returned 0x67efcd0 [0243.524] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x234ec) returned 0x67efcd0 [0243.527] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x24510) returned 0x67efcd0 [0243.530] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x25534) returned 0x67efcd0 [0243.532] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x26558) returned 0x67efcd0 [0243.535] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x2757c) returned 0x67efcd0 [0243.538] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x285a0) returned 0x67efcd0 [0243.541] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x295c4) returned 0x67efcd0 [0243.545] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x67efcd0, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x67efcd0, ResultLength=0x0) returned 0xc0000004 [0243.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efcd0, Size=0x2a5e8) returned 0x682fcd0 [0243.551] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x2b60c) returned 0x682fcd0 [0243.554] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x2c630) returned 0x682fcd0 [0243.563] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x2d654) returned 0x682fcd0 [0243.568] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x2e678) returned 0x682fcd0 [0243.572] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x2f69c) returned 0x682fcd0 [0243.576] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x306c0) returned 0x682fcd0 [0243.580] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x306c0, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.583] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x316e4) returned 0x682fcd0 [0243.583] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x316e4, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.587] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x32708) returned 0x682fcd0 [0243.587] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x32708, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.591] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3372c) returned 0x682fcd0 [0243.591] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3372c, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.594] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x34750) returned 0x682fcd0 [0243.594] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x34750, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x35774) returned 0x682fcd0 [0243.598] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x35774, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x36798) returned 0x682fcd0 [0243.616] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x36798, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x377bc) returned 0x682fcd0 [0243.621] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x377bc, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x387e0) returned 0x682fcd0 [0243.627] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x387e0, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x39804) returned 0x682fcd0 [0243.632] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x39804, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3a828) returned 0x682fcd0 [0243.638] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3a828, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3b84c) returned 0x682fcd0 [0243.642] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3b84c, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3c870) returned 0x682fcd0 [0243.647] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3c870, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3d894) returned 0x682fcd0 [0243.654] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3d894, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3e8b8) returned 0x682fcd0 [0243.659] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3e8b8, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x3f8dc) returned 0x682fcd0 [0243.665] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x682fcd0, Length=0x3f8dc, ResultLength=0x0 | out: SystemInformation=0x682fcd0, ResultLength=0x0) returned 0xc0000004 [0243.672] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fcd0, Size=0x40900) returned 0x12f80048 [0243.677] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x12f80048, Length=0x40900, ResultLength=0x0 | out: SystemInformation=0x12f80048, ResultLength=0x0) returned 0xc0000004 [0243.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f80048, Size=0x41924) returned 0x13080048 [0243.690] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x13080048, Length=0x41924, ResultLength=0x0 | out: SystemInformation=0x13080048, ResultLength=0x0) returned 0xc0000004 [0243.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13080048, Size=0x42948) returned 0x13080048 [0243.706] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x13080048, Length=0x42948, ResultLength=0x0 | out: SystemInformation=0x13080048, ResultLength=0x0) returned 0xc0000004 [0243.714] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13080048, Size=0x4396c) returned 0x13080048 [0243.714] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x13080048, Length=0x4396c, ResultLength=0x0 | out: SystemInformation=0x13080048, ResultLength=0x0) returned 0xc0000004 [0243.721] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13080048, Size=0x44990) returned 0x697dcd0 [0243.724] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x697dcd0, Length=0x44990, ResultLength=0x0 | out: SystemInformation=0x697dcd0, ResultLength=0x0) returned 0xc0000004 [0243.732] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x697dcd0, Size=0x459b4) returned 0x697dcd0 [0243.732] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x697dcd0, Length=0x459b4, ResultLength=0x0 | out: SystemInformation=0x697dcd0, ResultLength=0x0) returned 0x0 [0243.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0243.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0243.741] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.741] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.742] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.742] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.742] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.742] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.742] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.742] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.742] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.742] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.743] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.743] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.743] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.743] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.743] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.743] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.743] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.744] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.744] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.744] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.751] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3ef6e88 [0243.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.763] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.763] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.763] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.763] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.763] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.763] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.763] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.764] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.766] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.767] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.768] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.769] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.770] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.771] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.772] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.772] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.772] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.773] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.774] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.775] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.792] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.792] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.794] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.795] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.796] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.799] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.799] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.799] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.800] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.800] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.800] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.800] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.801] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.802] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.802] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.802] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.802] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3d539d8 [0243.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.803] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.804] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.805] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.806] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.806] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.806] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3d539d8 [0243.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.812] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.812] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3d539d8 [0243.816] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.816] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d539d8 [0243.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d539d8 [0243.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.076] QueryFullProcessImageNameW (in: hProcess=0x2128, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.077] NtClose (Handle=0x2128) returned 0x0 [0244.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0244.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x304ac40, Size=0x8) returned 0x304aae0 [0244.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.080] QueryFullProcessImageNameW (in: hProcess=0x2128, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.080] NtClose (Handle=0x2128) returned 0x0 [0244.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6e88) returned 1 [0244.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x304aae0, Size=0xc) returned 0x3ef6e88 [0244.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.093] QueryFullProcessImageNameW (in: hProcess=0x2128, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows NT\\need.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.093] NtClose (Handle=0x2128) returned 0x0 [0244.093] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x244, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x2128) returned 0x0 [0244.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0244.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d539d8) returned 1 [0244.093] NtDuplicateObject (in: SourceProcessHandle=0x2128, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xca0) returned 0x0 [0244.093] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xca0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.093] NtClose (Handle=0xca0) returned 0x0 [0244.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef2440 [0244.096] QueryFullProcessImageNameW (in: hProcess=0xca0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Adobe\\surprised.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.096] NtClose (Handle=0xca0) returned 0x0 [0244.096] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x2a4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xca0) returned 0x0 [0244.096] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef6780, Size=0x18) returned 0x3d539d8 [0244.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0244.096] NtDuplicateObject (in: SourceProcessHandle=0xca0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1034) returned 0x0 [0244.096] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1034 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.096] NtClose (Handle=0x1034) returned 0x0 [0244.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.097] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.097] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.098] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.098] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.098] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.098] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.098] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.098] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.098] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.098] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.098] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.098] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53878 [0244.099] QueryFullProcessImageNameW (in: hProcess=0x1034, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\outlets.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.099] NtClose (Handle=0x1034) returned 0x0 [0244.099] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x218, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1034) returned 0x0 [0244.099] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d539d8, Size=0x24) returned 0x3ef5e70 [0244.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.099] NtDuplicateObject (in: SourceProcessHandle=0x1034, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1290) returned 0x0 [0244.099] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1290 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.099] NtClose (Handle=0x1290) returned 0x0 [0244.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.099] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f198c0 [0244.102] QueryFullProcessImageNameW (in: hProcess=0x1290, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Office\\identifier chorus.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.102] NtClose (Handle=0x1290) returned 0x0 [0244.102] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x414, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1290) returned 0x0 [0244.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ef5e70, Size=0x30) returned 0x3f19c78 [0244.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198c0) returned 1 [0244.102] NtDuplicateObject (in: SourceProcessHandle=0x1290, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x15b0) returned 0x0 [0244.102] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x15b0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.102] NtClose (Handle=0x15b0) returned 0x0 [0244.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5eb68 [0244.105] QueryFullProcessImageNameW (in: hProcess=0x15b0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\threaded_testimony_streams.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.105] NtClose (Handle=0x15b0) returned 0x0 [0244.105] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x3d0, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x15b0) returned 0x0 [0244.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f19c78, Size=0x3c) returned 0x3e5ec40 [0244.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0244.105] NtDuplicateObject (in: SourceProcessHandle=0x15b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1cac) returned 0x0 [0244.105] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1cac | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.105] NtClose (Handle=0x1cac) returned 0x0 [0244.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef2440 [0244.107] QueryFullProcessImageNameW (in: hProcess=0x1cac, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\connection.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.108] NtClose (Handle=0x1cac) returned 0x0 [0244.108] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x208, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1cac) returned 0x0 [0244.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e5ec40, Size=0x48) returned 0x3e61ac0 [0244.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0244.108] NtDuplicateObject (in: SourceProcessHandle=0x1cac, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1ca8) returned 0x0 [0244.108] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1ca8 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.108] NtClose (Handle=0x1ca8) returned 0x0 [0244.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80d38 [0244.110] QueryFullProcessImageNameW (in: hProcess=0x1ca8, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\MSBuild\\wordpress_bibliography.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.110] NtClose (Handle=0x1ca8) returned 0x0 [0244.111] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x788, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1ca8) returned 0x0 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e61ac0, Size=0x54) returned 0x2fe6128 [0244.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.111] NtDuplicateObject (in: SourceProcessHandle=0x1ca8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x20b4) returned 0x0 [0244.111] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x20b4 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.111] NtClose (Handle=0x20b4) returned 0x0 [0244.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5e70 [0244.113] QueryFullProcessImageNameW (in: hProcess=0x20b4, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Java\\lastingtouched.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.113] NtClose (Handle=0x20b4) returned 0x0 [0244.113] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x7f4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x20b4) returned 0x0 [0244.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe6128, Size=0x60) returned 0x66cd240 [0244.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.114] NtDuplicateObject (in: SourceProcessHandle=0x20b4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1f74) returned 0x0 [0244.114] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1f74 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.114] NtClose (Handle=0x1f74) returned 0x0 [0244.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef2440 [0244.116] QueryFullProcessImageNameW (in: hProcess=0x1f74, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Defender\\exhibition.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.116] NtClose (Handle=0x1f74) returned 0x0 [0244.116] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x7bc, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1f74) returned 0x0 [0244.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66cd240, Size=0x6c) returned 0x3f1ad18 [0244.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0244.116] NtDuplicateObject (in: SourceProcessHandle=0x1f74, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1190) returned 0x0 [0244.117] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1190 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.117] NtClose (Handle=0x1190) returned 0x0 [0244.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80d38 [0244.394] QueryFullProcessImageNameW (in: hProcess=0x1190, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows NT\\antique-lenders-galaxy.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.394] NtClose (Handle=0x1190) returned 0x0 [0244.395] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x620, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1190) returned 0x0 [0244.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ad18, Size=0x78) returned 0x674af38 [0244.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.395] NtDuplicateObject (in: SourceProcessHandle=0x1190, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1358) returned 0x0 [0244.395] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1358 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.395] NtClose (Handle=0x1358) returned 0x0 [0244.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80d38 [0244.397] QueryFullProcessImageNameW (in: hProcess=0x1358, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Common Files\\sunrise-agree-discounts.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.398] NtClose (Handle=0x1358) returned 0x0 [0244.398] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x6a4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1358) returned 0x0 [0244.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674af38, Size=0x84) returned 0x3df2378 [0244.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.398] NtDuplicateObject (in: SourceProcessHandle=0x1358, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1ea0) returned 0x0 [0244.398] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1ea0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.398] NtClose (Handle=0x1ea0) returned 0x0 [0244.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19c78 [0244.401] QueryFullProcessImageNameW (in: hProcess=0x1ea0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Internet Explorer\\pitch assembly sao.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.401] NtClose (Handle=0x1ea0) returned 0x0 [0244.401] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x6a8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1ea0) returned 0x0 [0244.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2378, Size=0x90) returned 0x32d370 [0244.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0244.401] NtDuplicateObject (in: SourceProcessHandle=0x1ea0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1b78) returned 0x0 [0244.401] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1b78 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.401] NtClose (Handle=0x1b78) returned 0x0 [0244.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80d38 [0244.404] QueryFullProcessImageNameW (in: hProcess=0x1b78, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows NT\\doctor_livecam_evening.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.404] NtClose (Handle=0x1b78) returned 0x0 [0244.404] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x628, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1b78) returned 0x0 [0244.404] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32d370, Size=0x9c) returned 0x3e5c0e0 [0244.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.404] NtDuplicateObject (in: SourceProcessHandle=0x1b78, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xb9c) returned 0x0 [0244.404] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xb9c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.404] NtClose (Handle=0xb9c) returned 0x0 [0244.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.404] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3d53878 [0244.406] QueryFullProcessImageNameW (in: hProcess=0xb9c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Google\\repeat.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.407] NtClose (Handle=0xb9c) returned 0x0 [0244.407] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x224, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xb9c) returned 0x0 [0244.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e5c0e0, Size=0xa8) returned 0x35b9d8 [0244.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.407] NtDuplicateObject (in: SourceProcessHandle=0xb9c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1b24) returned 0x0 [0244.407] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1b24 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.407] NtClose (Handle=0x1b24) returned 0x0 [0244.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19c78 [0244.409] QueryFullProcessImageNameW (in: hProcess=0x1b24, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Office\\replaced-beach-ext.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.410] NtClose (Handle=0x1b24) returned 0x0 [0244.410] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x78c, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1b24) returned 0x0 [0244.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b9d8, Size=0xb4) returned 0x3336a8 [0244.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0244.410] NtDuplicateObject (in: SourceProcessHandle=0x1b24, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1924) returned 0x0 [0244.410] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1924 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.410] NtClose (Handle=0x1924) returned 0x0 [0244.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3d53878 [0244.412] QueryFullProcessImageNameW (in: hProcess=0x1924, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Uninstall Information\\trees.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.413] NtClose (Handle=0x1924) returned 0x0 [0244.413] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x52c, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1924) returned 0x0 [0244.413] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3336a8, Size=0xc0) returned 0x682f9d0 [0244.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.413] NtDuplicateObject (in: SourceProcessHandle=0x1924, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xbf4) returned 0x0 [0244.413] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xbf4 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.413] NtClose (Handle=0xbf4) returned 0x0 [0244.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.413] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.413] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.413] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.413] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.413] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.414] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.415] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.415] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.415] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.415] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.415] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.415] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.415] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3d53878 [0244.416] QueryFullProcessImageNameW (in: hProcess=0xbf4, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\3dftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.416] NtClose (Handle=0xbf4) returned 0x0 [0244.416] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x7d4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xbf4) returned 0x0 [0244.416] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682f9d0, Size=0xcc) returned 0x3e47218 [0244.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.416] NtDuplicateObject (in: SourceProcessHandle=0xbf4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xd84) returned 0x0 [0244.416] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xd84 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.416] NtClose (Handle=0xd84) returned 0x0 [0244.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.416] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.416] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.416] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.417] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.418] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.418] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.418] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.418] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.418] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.418] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.418] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.418] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5e70 [0244.418] QueryFullProcessImageNameW (in: hProcess=0xd84, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\DVD Maker\\absolutetelnet.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.419] NtClose (Handle=0xd84) returned 0x0 [0244.419] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x484, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xd84) returned 0x0 [0244.419] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e47218, Size=0xd8) returned 0x2c98a8 [0244.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.419] NtDuplicateObject (in: SourceProcessHandle=0xd84, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xd6c) returned 0x0 [0244.419] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xd6c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.419] NtClose (Handle=0xd6c) returned 0x0 [0244.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.419] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.419] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3d53878 [0244.421] QueryFullProcessImageNameW (in: hProcess=0xd6c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\alftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.422] NtClose (Handle=0xd6c) returned 0x0 [0244.422] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x588, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xd6c) returned 0x0 [0244.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c98a8, Size=0xe4) returned 0x3ea83b8 [0244.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.422] NtDuplicateObject (in: SourceProcessHandle=0xd6c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x668) returned 0x0 [0244.422] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x668 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.422] NtClose (Handle=0x668) returned 0x0 [0244.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef2440 [0244.424] QueryFullProcessImageNameW (in: hProcess=0x668, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Office\\bitkinex.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.425] NtClose (Handle=0x668) returned 0x0 [0244.425] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x578, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x668) returned 0x0 [0244.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea83b8, Size=0xf0) returned 0x3dae3e8 [0244.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0244.425] NtDuplicateObject (in: SourceProcessHandle=0x668, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1050) returned 0x0 [0244.425] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1050 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.425] NtClose (Handle=0x1050) returned 0x0 [0244.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53878 [0244.427] QueryFullProcessImageNameW (in: hProcess=0x1050, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows NT\\coreftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.427] NtClose (Handle=0x1050) returned 0x0 [0244.428] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x614, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1050) returned 0x0 [0244.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dae3e8, Size=0xfc) returned 0x3edce60 [0244.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d53878) returned 1 [0244.428] NtDuplicateObject (in: SourceProcessHandle=0x1050, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x948) returned 0x0 [0244.428] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x948 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.428] NtClose (Handle=0x948) returned 0x0 [0244.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.430] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.430] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.430] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.430] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3ef6780 [0244.430] QueryFullProcessImageNameW (in: hProcess=0x948, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\far.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.451] NtClose (Handle=0x948) returned 0x0 [0244.451] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x77c, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x948) returned 0x0 [0244.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edce60, Size=0x108) returned 0x3dec198 [0244.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6780) returned 1 [0244.451] NtDuplicateObject (in: SourceProcessHandle=0x948, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x260) returned 0x0 [0244.451] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x260 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.451] NtClose (Handle=0x260) returned 0x0 [0244.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4b9c8 [0244.454] QueryFullProcessImageNameW (in: hProcess=0x260, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\filezilla.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.454] NtClose (Handle=0x260) returned 0x0 [0244.454] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x59c, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x260) returned 0x0 [0244.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dec198, Size=0x114) returned 0x331048 [0244.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.454] NtDuplicateObject (in: SourceProcessHandle=0x260, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x230) returned 0x0 [0244.454] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x230 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.454] NtClose (Handle=0x230) returned 0x0 [0244.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.457] QueryFullProcessImageNameW (in: hProcess=0x230, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Defender\\flashfxp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.457] NtClose (Handle=0x230) returned 0x0 [0244.457] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x7b8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x230) returned 0x0 [0244.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x331048, Size=0x120) returned 0x330cd0 [0244.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.457] NtDuplicateObject (in: SourceProcessHandle=0x230, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x22c) returned 0x0 [0244.457] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x22c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.457] NtClose (Handle=0x22c) returned 0x0 [0244.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x2cc9b0 [0244.460] QueryFullProcessImageNameW (in: hProcess=0x22c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Internet Explorer\\fling.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.460] NtClose (Handle=0x22c) returned 0x0 [0244.460] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x804, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x22c) returned 0x0 [0244.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x330cd0, Size=0x12c) returned 0x678bd00 [0244.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.460] NtDuplicateObject (in: SourceProcessHandle=0x22c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1100) returned 0x0 [0244.460] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1100 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.460] NtClose (Handle=0x1100) returned 0x0 [0244.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5e70 [0244.463] QueryFullProcessImageNameW (in: hProcess=0x1100, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\MSBuild\\foxmailincmail.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.463] NtClose (Handle=0x1100) returned 0x0 [0244.463] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x814, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1100) returned 0x0 [0244.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x678bd00, Size=0x138) returned 0x6777df0 [0244.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.463] NtDuplicateObject (in: SourceProcessHandle=0x1100, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xf60) returned 0x0 [0244.463] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xf60 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.463] NtClose (Handle=0xf60) returned 0x0 [0244.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19c78 [0244.466] QueryFullProcessImageNameW (in: hProcess=0xf60, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\gmailnotifierpro.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.466] NtClose (Handle=0xf60) returned 0x0 [0244.466] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x824, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xf60) returned 0x0 [0244.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6777df0, Size=0x144) returned 0x66cedd0 [0244.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0244.466] NtDuplicateObject (in: SourceProcessHandle=0xf60, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xcb8) returned 0x0 [0244.466] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xcb8 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.466] NtClose (Handle=0xcb8) returned 0x0 [0244.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3ef6780 [0244.469] QueryFullProcessImageNameW (in: hProcess=0xcb8, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\icq.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.469] NtClose (Handle=0xcb8) returned 0x0 [0244.469] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x834, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xcb8) returned 0x0 [0244.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66cedd0, Size=0x150) returned 0x66ce310 [0244.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6780) returned 1 [0244.469] NtDuplicateObject (in: SourceProcessHandle=0xcb8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xed0) returned 0x0 [0244.469] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xed0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.469] NtClose (Handle=0xed0) returned 0x0 [0244.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.472] QueryFullProcessImageNameW (in: hProcess=0xed0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Google\\leechftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.472] NtClose (Handle=0xed0) returned 0x0 [0244.472] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x844, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xed0) returned 0x0 [0244.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66ce310, Size=0x15c) returned 0x3dce3d8 [0244.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.472] NtDuplicateObject (in: SourceProcessHandle=0xed0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1e9c) returned 0x0 [0244.472] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1e9c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.472] NtClose (Handle=0x1e9c) returned 0x0 [0244.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x2cc9b0 [0244.474] QueryFullProcessImageNameW (in: hProcess=0x1e9c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\ncftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.475] NtClose (Handle=0x1e9c) returned 0x0 [0244.475] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x854, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1e9c) returned 0x0 [0244.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dce3d8, Size=0x168) returned 0x3e631b0 [0244.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.475] NtDuplicateObject (in: SourceProcessHandle=0x1e9c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xf54) returned 0x0 [0244.475] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xf54 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.475] NtClose (Handle=0xf54) returned 0x0 [0244.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.477] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.477] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.477] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2cc9b0 [0244.478] QueryFullProcessImageNameW (in: hProcess=0xf54, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Journal\\notepad.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.478] NtClose (Handle=0xf54) returned 0x0 [0244.478] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x864, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xf54) returned 0x0 [0244.478] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e631b0, Size=0x174) returned 0x32e770 [0244.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.479] NtDuplicateObject (in: SourceProcessHandle=0xf54, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x2228) returned 0x0 [0244.479] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2228 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.479] NtClose (Handle=0x2228) returned 0x0 [0244.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.481] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.481] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4b9c8 [0244.481] QueryFullProcessImageNameW (in: hProcess=0x2228, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\operamail.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.481] NtClose (Handle=0x2228) returned 0x0 [0244.482] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x874, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x2228) returned 0x0 [0244.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32e770, Size=0x180) returned 0x32dcb8 [0244.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.482] NtDuplicateObject (in: SourceProcessHandle=0x2228, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xea4) returned 0x0 [0244.482] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xea4 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.482] NtClose (Handle=0xea4) returned 0x0 [0244.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.484] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.484] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.484] QueryFullProcessImageNameW (in: hProcess=0xea4, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Office\\pidgin.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.484] NtClose (Handle=0xea4) returned 0x0 [0244.484] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x894, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xea4) returned 0x0 [0244.484] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32dcb8, Size=0x18c) returned 0x3074d00 [0244.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.485] NtDuplicateObject (in: SourceProcessHandle=0xea4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xcbc) returned 0x0 [0244.485] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xcbc | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.485] NtClose (Handle=0xcbc) returned 0x0 [0244.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.485] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.485] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.485] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.485] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.485] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.487] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.487] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.487] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4b9c8 [0244.487] QueryFullProcessImageNameW (in: hProcess=0xcbc, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\scriptftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.487] NtClose (Handle=0xcbc) returned 0x0 [0244.487] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x8a4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xcbc) returned 0x0 [0244.487] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3074d00, Size=0x198) returned 0x2fff978 [0244.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.487] NtDuplicateObject (in: SourceProcessHandle=0xcbc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1f2c) returned 0x0 [0244.488] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1f2c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.488] NtClose (Handle=0x1f2c) returned 0x0 [0244.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x2cc9b0 [0244.490] QueryFullProcessImageNameW (in: hProcess=0x1f2c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\MSBuild\\skype.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.490] NtClose (Handle=0x1f2c) returned 0x0 [0244.490] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x8b4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1f2c) returned 0x0 [0244.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fff978, Size=0x1a4) returned 0x3e7afb8 [0244.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.490] NtDuplicateObject (in: SourceProcessHandle=0x1f2c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x20e0) returned 0x0 [0244.490] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x20e0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.491] NtClose (Handle=0x20e0) returned 0x0 [0244.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.503] QueryFullProcessImageNameW (in: hProcess=0x20e0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\smartftp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.503] NtClose (Handle=0x20e0) returned 0x0 [0244.503] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x8c4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x20e0) returned 0x0 [0244.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e7afb8, Size=0x1b0) returned 0x3e7b850 [0244.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.504] NtDuplicateObject (in: SourceProcessHandle=0x20e0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x718) returned 0x0 [0244.504] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x718 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.504] NtClose (Handle=0x718) returned 0x0 [0244.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.507] QueryFullProcessImageNameW (in: hProcess=0x718, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Office\\totalcmd.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.507] NtClose (Handle=0x718) returned 0x0 [0244.507] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x8e4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x718) returned 0x0 [0244.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e7b850, Size=0x1bc) returned 0x3e37b08 [0244.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.507] NtDuplicateObject (in: SourceProcessHandle=0x718, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1e94) returned 0x0 [0244.507] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1e94 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.507] NtClose (Handle=0x1e94) returned 0x0 [0244.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.510] QueryFullProcessImageNameW (in: hProcess=0x1e94, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\trillian.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.510] NtClose (Handle=0x1e94) returned 0x0 [0244.511] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x8f4, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1e94) returned 0x0 [0244.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e37b08, Size=0x1c8) returned 0x300cf80 [0244.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.511] NtDuplicateObject (in: SourceProcessHandle=0x1e94, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1bf0) returned 0x0 [0244.511] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1bf0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.511] NtClose (Handle=0x1bf0) returned 0x0 [0244.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.513] QueryFullProcessImageNameW (in: hProcess=0x1bf0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\webdrive.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.513] NtClose (Handle=0x1bf0) returned 0x0 [0244.514] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x908, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1bf0) returned 0x0 [0244.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x300cf80, Size=0x1d4) returned 0x3e5acd8 [0244.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.514] NtDuplicateObject (in: SourceProcessHandle=0x1bf0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1804) returned 0x0 [0244.514] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1804 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.514] NtClose (Handle=0x1804) returned 0x0 [0244.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.516] QueryFullProcessImageNameW (in: hProcess=0x1804, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\MSBuild\\whatsapp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.516] NtClose (Handle=0x1804) returned 0x0 [0244.516] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x918, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1804) returned 0x0 [0244.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e5acd8, Size=0x1e0) returned 0x3e5a538 [0244.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.517] NtDuplicateObject (in: SourceProcessHandle=0x1804, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x231c) returned 0x0 [0244.517] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x231c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.517] NtClose (Handle=0x231c) returned 0x0 [0244.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.519] QueryFullProcessImageNameW (in: hProcess=0x231c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\DVD Maker\\winscp.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.519] NtClose (Handle=0x231c) returned 0x0 [0244.519] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x928, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x231c) returned 0x0 [0244.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e5a538, Size=0x1ec) returned 0x3e3be20 [0244.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.520] NtDuplicateObject (in: SourceProcessHandle=0x231c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xe68) returned 0x0 [0244.520] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xe68 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.520] NtClose (Handle=0xe68) returned 0x0 [0244.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5e70 [0244.522] QueryFullProcessImageNameW (in: hProcess=0xe68, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Defender\\yahoomessenger.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.522] NtClose (Handle=0xe68) returned 0x0 [0244.522] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x938, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xe68) returned 0x0 [0244.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3be20, Size=0x1f8) returned 0x341520 [0244.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.522] NtDuplicateObject (in: SourceProcessHandle=0xe68, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xc50) returned 0x0 [0244.522] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xc50 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.523] NtClose (Handle=0xc50) returned 0x0 [0244.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5e70 [0244.525] QueryFullProcessImageNameW (in: hProcess=0xc50, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\DVD Maker\\active-charge.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.525] NtClose (Handle=0xc50) returned 0x0 [0244.525] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x948, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xc50) returned 0x0 [0244.525] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x341520, Size=0x204) returned 0x3d9faf0 [0244.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.525] NtDuplicateObject (in: SourceProcessHandle=0xc50, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xf3c) returned 0x0 [0244.526] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xf3c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.526] NtClose (Handle=0xf3c) returned 0x0 [0244.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.528] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2cc9b0 [0244.528] QueryFullProcessImageNameW (in: hProcess=0xf3c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Adobe\\accupos.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.528] NtClose (Handle=0xf3c) returned 0x0 [0244.528] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x958, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xf3c) returned 0x0 [0244.528] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d9faf0, Size=0x210) returned 0x3da05b8 [0244.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.528] NtDuplicateObject (in: SourceProcessHandle=0xf3c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1734) returned 0x0 [0244.528] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1734 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.528] NtClose (Handle=0x1734) returned 0x0 [0244.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x2cc9b0 [0244.531] QueryFullProcessImageNameW (in: hProcess=0x1734, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Mozilla Firefox\\afr38.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.531] NtClose (Handle=0x1734) returned 0x0 [0244.531] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x968, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1734) returned 0x0 [0244.531] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da05b8, Size=0x21c) returned 0x3d9faf0 [0244.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.531] NtDuplicateObject (in: SourceProcessHandle=0x1734, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x2004) returned 0x0 [0244.531] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2004 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.531] NtClose (Handle=0x2004) returned 0x0 [0244.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.531] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.532] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.534] QueryFullProcessImageNameW (in: hProcess=0x2004, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Common Files\\aldelo.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.534] NtClose (Handle=0x2004) returned 0x0 [0244.534] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x978, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x2004) returned 0x0 [0244.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d9faf0, Size=0x228) returned 0x3e778d0 [0244.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.534] NtDuplicateObject (in: SourceProcessHandle=0x2004, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x174c) returned 0x0 [0244.534] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x174c | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.534] NtClose (Handle=0x174c) returned 0x0 [0244.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4b9c8 [0244.537] QueryFullProcessImageNameW (in: hProcess=0x174c, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\ccv_server.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.537] NtClose (Handle=0x174c) returned 0x0 [0244.537] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x988, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x174c) returned 0x0 [0244.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e778d0, Size=0x234) returned 0x3e76d68 [0244.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.537] NtDuplicateObject (in: SourceProcessHandle=0x174c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1754) returned 0x0 [0244.537] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1754 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.537] NtClose (Handle=0x1754) returned 0x0 [0244.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19c78 [0244.539] QueryFullProcessImageNameW (in: hProcess=0x1754, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\DVD Maker\\centralcreditcard.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.545] NtClose (Handle=0x1754) returned 0x0 [0244.545] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x998, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1754) returned 0x0 [0244.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e76d68, Size=0x240) returned 0x3e778d0 [0244.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0244.545] NtDuplicateObject (in: SourceProcessHandle=0x1754, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xd28) returned 0x0 [0244.545] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xd28 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.545] NtClose (Handle=0xd28) returned 0x0 [0244.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5e70 [0244.547] QueryFullProcessImageNameW (in: hProcess=0xd28, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\creditservice.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.548] NtClose (Handle=0xd28) returned 0x0 [0244.548] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9a8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xd28) returned 0x0 [0244.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e778d0, Size=0x24c) returned 0x335280 [0244.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.548] NtDuplicateObject (in: SourceProcessHandle=0xd28, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xb50) returned 0x0 [0244.548] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xb50 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.548] NtClose (Handle=0xb50) returned 0x0 [0244.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.550] QueryFullProcessImageNameW (in: hProcess=0xb50, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\edcsvr.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.551] NtClose (Handle=0xb50) returned 0x0 [0244.551] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9b8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xb50) returned 0x0 [0244.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x335280, Size=0x258) returned 0x334410 [0244.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.551] NtDuplicateObject (in: SourceProcessHandle=0xb50, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xb48) returned 0x0 [0244.551] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xb48 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.551] NtClose (Handle=0xb48) returned 0x0 [0244.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x2cc9b0 [0244.553] QueryFullProcessImageNameW (in: hProcess=0xb48, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Internet Explorer\\fpos.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.553] NtClose (Handle=0xb48) returned 0x0 [0244.554] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9c8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xb48) returned 0x0 [0244.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x334410, Size=0x264) returned 0x3e66028 [0244.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.554] NtDuplicateObject (in: SourceProcessHandle=0xb48, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x23d8) returned 0x0 [0244.554] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x23d8 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.554] NtClose (Handle=0x23d8) returned 0x0 [0244.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.556] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.556] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.556] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.556] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.556] QueryFullProcessImageNameW (in: hProcess=0x23d8, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\isspos.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.557] NtClose (Handle=0x23d8) returned 0x0 [0244.557] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9d8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x23d8) returned 0x0 [0244.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e66028, Size=0x270) returned 0x3e650f8 [0244.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.557] NtDuplicateObject (in: SourceProcessHandle=0x23d8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1288) returned 0x0 [0244.557] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1288 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.557] NtClose (Handle=0x1288) returned 0x0 [0244.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5e70 [0244.559] QueryFullProcessImageNameW (in: hProcess=0x1288, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Windows Defender\\mxslipstream.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.560] NtClose (Handle=0x1288) returned 0x0 [0244.560] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9e8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1288) returned 0x0 [0244.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e650f8, Size=0x27c) returned 0x3e66028 [0244.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.560] NtDuplicateObject (in: SourceProcessHandle=0x1288, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x2448) returned 0x0 [0244.560] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2448 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.560] NtClose (Handle=0x2448) returned 0x0 [0244.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2cc9b0 [0244.562] QueryFullProcessImageNameW (in: hProcess=0x2448, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Internet Explorer\\omnipos.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.562] NtClose (Handle=0x2448) returned 0x0 [0244.563] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0x9f8, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x2448) returned 0x0 [0244.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e66028, Size=0x288) returned 0x306b630 [0244.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.563] NtDuplicateObject (in: SourceProcessHandle=0x2448, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x14b0) returned 0x0 [0244.563] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x14b0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.563] NtClose (Handle=0x14b0) returned 0x0 [0244.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x2cc9b0 [0244.566] QueryFullProcessImageNameW (in: hProcess=0x14b0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\spcwin.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.566] NtClose (Handle=0x14b0) returned 0x0 [0244.566] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa08, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x14b0) returned 0x0 [0244.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b630, Size=0x294) returned 0x306b630 [0244.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.566] NtDuplicateObject (in: SourceProcessHandle=0x14b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x10e0) returned 0x0 [0244.566] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x10e0 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.566] NtClose (Handle=0x10e0) returned 0x0 [0244.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e70 [0244.569] QueryFullProcessImageNameW (in: hProcess=0x10e0, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\spgagentservice.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.569] NtClose (Handle=0x10e0) returned 0x0 [0244.569] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa18, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x10e0) returned 0x0 [0244.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b630, Size=0x2a0) returned 0x306b630 [0244.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0244.569] NtDuplicateObject (in: SourceProcessHandle=0x10e0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x20c4) returned 0x0 [0244.569] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x20c4 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.569] NtClose (Handle=0x20c4) returned 0x0 [0244.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x2cc9b0 [0244.572] QueryFullProcessImageNameW (in: hProcess=0x20c4, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\utg2.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.572] NtClose (Handle=0x20c4) returned 0x0 [0244.572] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa28, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x20c4) returned 0x0 [0244.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b630, Size=0x2ac) returned 0x306b630 [0244.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0244.573] NtDuplicateObject (in: SourceProcessHandle=0x20c4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0xdfc) returned 0x0 [0244.573] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xdfc | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.573] NtClose (Handle=0xdfc) returned 0x0 [0244.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0244.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0244.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0244.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0244.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0244.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0244.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0244.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0244.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0244.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0244.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0244.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0244.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.574] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0244.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0244.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0244.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0244.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0244.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d4b9c8 [0244.575] QueryFullProcessImageNameW (in: hProcess=0xdfc, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\inserted.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.575] NtClose (Handle=0xdfc) returned 0x0 [0244.575] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa38, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0xdfc) returned 0x0 [0244.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b630, Size=0x2b8) returned 0x3d51888 [0244.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.576] NtDuplicateObject (in: SourceProcessHandle=0xdfc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1bf8) returned 0x0 [0244.576] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1bf8 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.576] NtClose (Handle=0x1bf8) returned 0x0 [0244.576] NtDuplicateObject (in: SourceProcessHandle=0xdfc, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1bf8) returned 0x0 [0244.576] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1bf8 | out: SectionHandle=0x3c7f8b4*=0x1684) returned 0x0 [0244.576] NtMapViewOfSection (in: SectionHandle=0x1684, ProcessHandle=0xffffffff, BaseAddress=0x3c7f8cc*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3c7f8cc*=0x1fe0000, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x1000) returned 0x0 [0244.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x3d9ebd8 [0244.579] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1fe0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x3d9ebd8, Length=0x210, ResultLength=0x3c7f8bc | out: VirtualMemoryInformation=0x3d9ebd8*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3c7f8bc) returned 0x0 [0244.579] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0244.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0244.579] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3ef6780 | out: lpBuffer="C:\\") returned 0x4 [0244.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2feedf8 [0244.579] wcscpy (in: _Dest=0x2feedf8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0244.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9faf0 [0244.579] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9faf0, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0244.579] wcscat (in: _Dest=0x3d9faf0, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0244.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61ac0 [0244.581] QueryFullProcessImageNameW (in: hProcess=0x1bf8, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Microsoft Visual Studio 8\\quality_containers.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.581] NtClose (Handle=0x1bf8) returned 0x0 [0244.581] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa48, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1bf8) returned 0x0 [0244.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d51888, Size=0x2c4) returned 0x3d51888 [0244.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0244.582] NtDuplicateObject (in: SourceProcessHandle=0x1bf8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1684) returned 0x0 [0244.582] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1684 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.582] NtClose (Handle=0x1684) returned 0x0 [0244.582] NtDuplicateObject (in: SourceProcessHandle=0x1bf8, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x1684) returned 0x0 [0244.582] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1684 | out: SectionHandle=0x3c7f8b4*=0x18ec) returned 0x0 [0244.582] NtMapViewOfSection (in: SectionHandle=0x18ec, ProcessHandle=0xffffffff, BaseAddress=0x3c7f8cc*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3c7f8cc*=0x1fe0000, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x1000) returned 0x0 [0244.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x3d9ebd8 [0244.583] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1fe0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x3d9ebd8, Length=0x210, ResultLength=0x3c7f8bc | out: VirtualMemoryInformation=0x3d9ebd8*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3c7f8bc) returned 0x0 [0244.583] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0244.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0244.583] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3ef6780 | out: lpBuffer="C:\\") returned 0x4 [0244.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2feedf8 [0244.583] wcscpy (in: _Dest=0x2feedf8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0244.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9faf0 [0244.583] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9faf0, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0244.583] wcscat (in: _Dest=0x3d9faf0, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0244.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61ac0 [0244.584] QueryFullProcessImageNameW (in: hProcess=0x1684, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\canberra_vs.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.585] NtClose (Handle=0x1684) returned 0x0 [0244.585] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa58, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x1684) returned 0x0 [0244.585] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d51888, Size=0x2d0) returned 0x3000590 [0244.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.585] NtDuplicateObject (in: SourceProcessHandle=0x1684, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x18ec) returned 0x0 [0244.585] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x18ec | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.585] NtClose (Handle=0x18ec) returned 0x0 [0244.585] NtDuplicateObject (in: SourceProcessHandle=0x1684, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x18ec) returned 0x0 [0244.585] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x18ec | out: SectionHandle=0x3c7f8b4*=0x2008) returned 0x0 [0244.585] NtMapViewOfSection (in: SectionHandle=0x2008, ProcessHandle=0xffffffff, BaseAddress=0x3c7f8cc*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3c7f8cc*=0x1fe0000, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x1000) returned 0x0 [0244.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x3d9ebd8 [0244.586] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1fe0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x3d9ebd8, Length=0x210, ResultLength=0x3c7f8bc | out: VirtualMemoryInformation=0x3d9ebd8*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3c7f8bc) returned 0x0 [0244.586] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0244.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0244.586] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3ef6780 | out: lpBuffer="C:\\") returned 0x4 [0244.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2feedf8 [0244.589] wcscpy (in: _Dest=0x2feedf8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0244.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9faf0 [0244.589] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9faf0, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0244.589] wcscat (in: _Dest=0x3d9faf0, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0244.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62380 [0244.591] QueryFullProcessImageNameW (in: hProcess=0x18ec, dwFlags=0x0, lpExeName=0x3d9ebd8, lpdwSize=0x3c7f8b0 | out: lpExeName="C:\\Program Files\\Adobe\\actually_replacement.exe", lpdwSize=0x3c7f8b0) returned 1 [0244.591] NtClose (Handle=0x18ec) returned 0x0 [0244.591] NtOpenProcess (in: ProcessHandle=0x3c7f8ac, DesiredAccess=0x441, ObjectAttributes=0x3c7f890*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3c7f888*(UniqueProcess=0xa68, UniqueThread=0x0) | out: ProcessHandle=0x3c7f8ac*=0x18ec) returned 0x0 [0244.591] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3000590, Size=0x2dc) returned 0x3000590 [0244.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0244.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.591] NtDuplicateObject (in: SourceProcessHandle=0x18ec, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x2008) returned 0x0 [0244.591] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2008 | out: SectionHandle=0x3c7f8b4*=0x0) returned 0xc0000022 [0244.591] NtClose (Handle=0x2008) returned 0x0 [0244.591] NtDuplicateObject (in: SourceProcessHandle=0x18ec, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x3c7f8e0, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x3c7f8e0*=0x2008) returned 0x0 [0244.591] NtCreateSection (in: SectionHandle=0x3c7f8b4, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x3c7f8c0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x2008 | out: SectionHandle=0x3c7f8b4*=0x2138) returned 0x0 [0244.591] NtMapViewOfSection (in: SectionHandle=0x2138, ProcessHandle=0xffffffff, BaseAddress=0x3c7f8cc*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x3c7f8cc*=0x1fe0000, SectionOffset=0x0, ViewSize=0x3c7f8b8*=0x1000) returned 0x0 [0244.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x3d9ebd8 [0244.592] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1fe0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x3d9ebd8, Length=0x210, ResultLength=0x3c7f8bc | out: VirtualMemoryInformation=0x3d9ebd8*(SectionFileName.Length=0x6a, SectionFileName.MaximumLength=0x6c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\Fonts\\StaticCache.dat"), ResultLength=0x3c7f8bc) returned 0x0 [0244.592] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0244.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0244.592] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3ef6780 | out: lpBuffer="C:\\") returned 0x4 [0244.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2feedf8 [0244.593] wcscpy (in: _Dest=0x2feedf8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0244.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9faf0 [0244.593] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9faf0, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0244.593] wcscat (in: _Dest=0x3d9faf0, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0244.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62380 [0244.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0244.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8aba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0244.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0244.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f291e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0244.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0244.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6e88) returned 1 [0244.661] Sleep (dwMilliseconds=0x3e8) [0245.705] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x3c7f90c | out: lpBuffer=0x0, nSize=0x3c7f90c) returned 0 [0245.705] GetLastError () returned 0xea [0245.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x2cc9b0 [0245.705] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x2cc9b0, nSize=0x3c7f90c | out: lpBuffer="CRH2YWU7", nSize=0x3c7f90c) returned 1 [0245.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x30bc090 [0245.705] wcscpy (in: _Dest=0x30bc090, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\" [0245.705] wcscat (in: _Dest=0x30bc090, _Source="CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0245.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2feedf8 [0245.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x30bc070 [0245.705] wcscpy (in: _Dest=0x30bc070, _Source="\\\\CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0245.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc090) returned 1 [0245.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc9b0) returned 1 [0245.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21db700, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0245.706] Sleep (dwMilliseconds=0x3e8) [0247.072] Sleep (dwMilliseconds=0x3e8) [0248.097] Sleep (dwMilliseconds=0x3e8) [0249.145] Sleep (dwMilliseconds=0x3e8) [0250.156] Sleep (dwMilliseconds=0x3e8) [0251.206] Sleep (dwMilliseconds=0x3e8) [0252.215] Sleep (dwMilliseconds=0x3e8) [0253.229] Sleep (dwMilliseconds=0x3e8) [0254.243] Sleep (dwMilliseconds=0x3e8) [0255.258] Sleep (dwMilliseconds=0x3e8) [0256.271] Sleep (dwMilliseconds=0x3e8) [0257.287] Sleep (dwMilliseconds=0x3e8) [0258.299] Sleep (dwMilliseconds=0x3e8) [0259.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9ebd8 [0259.315] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0x3d9ebd8 | out: pszPath="C:\\Users\\EEBsYm5\\Desktop") returned 0x0 [0259.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3ba8 [0259.315] wcscpy (in: _Dest=0x2fe3ba8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0259.315] wcscat (in: _Dest=0x2fe3ba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0259.315] wcscat (in: _Dest=0x2fe3ba8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0259.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18ec [0259.317] WriteFile (in: hFile=0x18ec, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3c7f870, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x3c7f870*=0x8b9, lpOverlapped=0x0) returned 1 [0259.320] CloseHandle (hObject=0x18ec) returned 1 [0259.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3da05b8 [0259.320] GetSystemDirectoryW (in: lpBuffer=0x3da05b8, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0259.320] wcscat (in: _Dest=0x3da05b8, _Source="\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0259.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c6c8 [0259.321] wcscpy (in: _Dest=0x3e5c6c8, _Source="C:\\Windows\\system32\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0259.321] wcscat (in: _Dest=0x3e5c6c8, _Source=" " | out: _Dest="C:\\Windows\\system32\\notepad.exe ") returned="C:\\Windows\\system32\\notepad.exe " [0259.321] wcscat (in: _Dest=0x3e5c6c8, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"") returned="C:\\Windows\\system32\\notepad.exe \"" [0259.321] wcscat (in: _Dest=0x3e5c6c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0259.321] wcscat (in: _Dest=0x3e5c6c8, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt\"") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt\"" [0259.321] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\notepad.exe", lpCommandLine="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3c7f8c4*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3c7f898 | out: lpCommandLine="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt\"", lpProcessInformation=0x3c7f898*(hProcess=0x1684, hThread=0x18ec, dwProcessId=0xf70, dwThreadId=0xae4)) returned 1 [0259.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c6c8) returned 1 [0259.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da05b8) returned 1 [0259.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ba8) returned 1 [0259.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0259.348] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0259.348] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0259.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3ef6780 [0259.348] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3ef6780 | out: lpBuffer="C:\\") returned 0x4 [0259.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e7a728 [0259.348] wcscpy (in: _Dest=0x3e7a728, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0259.348] wcscat (in: _Dest=0x3e7a728, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\AC3A86-Readme.txt") returned="C:\\AC3A86-Readme.txt" [0259.348] CreateFileW (lpFileName="C:\\AC3A86-Readme.txt" (normalized: "c:\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a728) returned 1 [0259.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6780) returned 1 Thread: id = 101 os_tid = 0x830 [0130.963] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0130.964] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0130.965] CoUninitialize () [0130.965] Sleep (dwMilliseconds=0xea60) [0141.563] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0141.563] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0141.565] CoUninitialize () [0141.565] Sleep (dwMilliseconds=0xea60) [0151.994] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0151.994] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0151.994] CoUninitialize () [0151.994] Sleep (dwMilliseconds=0xea60) [0162.483] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0162.483] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0162.483] CoUninitialize () [0162.483] Sleep (dwMilliseconds=0xea60) [0173.135] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0173.135] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0173.136] CoUninitialize () [0173.136] Sleep (dwMilliseconds=0xea60) [0183.637] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0183.637] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0183.638] CoUninitialize () [0183.638] Sleep (dwMilliseconds=0xea60) [0195.109] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0195.109] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0195.109] CoUninitialize () [0195.110] Sleep (dwMilliseconds=0xea60) [0206.032] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0206.032] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0206.032] CoUninitialize () [0206.032] Sleep (dwMilliseconds=0xea60) [0218.660] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0218.660] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0218.660] CoUninitialize () [0218.660] Sleep (dwMilliseconds=0xea60) [0228.751] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0228.753] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0228.754] CoUninitialize () [0228.754] Sleep (dwMilliseconds=0xea60) [0239.051] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0239.051] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0239.052] CoUninitialize () [0239.052] Sleep (dwMilliseconds=0xea60) [0249.423] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0249.423] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0249.423] CoUninitialize () [0249.423] Sleep (dwMilliseconds=0xea60) [0260.040] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0260.040] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0260.041] CoUninitialize () [0260.041] Sleep (dwMilliseconds=0xea60) Thread: id = 102 os_tid = 0x840 [0130.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3f1b6e8 [0130.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x2048) returned 0x3f1b6e8 [0130.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x306c) returned 0x3f1b6e8 [0130.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x4090) returned 0x3f1b6e8 [0130.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x50b4) returned 0x3f1b6e8 [0130.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x60d8) returned 0x3f1b6e8 [0130.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x70fc) returned 0x3f1b6e8 [0130.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x8120) returned 0x3f1b6e8 [0130.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x9144) returned 0x3f1b6e8 [0130.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xa168) returned 0x3f1b6e8 [0130.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xb18c) returned 0x3f1b6e8 [0130.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xc1b0) returned 0x3f1b6e8 [0130.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xd1d4) returned 0x3f1b6e8 [0130.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0130.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xe1f8) returned 0x3f1b6e8 [0130.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0x0 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2470) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x305e998 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e998) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4158 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e998 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e998) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e998 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e998) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4158 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x30135e8 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30135e8) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f420 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f420) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0130.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0130.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf910 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x30135e8 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30135e8) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x30135e8 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30135e8) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0130.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.977] NtOpenProcess (in: ProcessHandle=0x222ff54, DesiredAccess=0x1, ObjectAttributes=0x222ff38*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x222ff30*(UniqueProcess=0x264, UniqueThread=0x0) | out: ProcessHandle=0x222ff54*=0x748) returned 0x0 [0130.977] NtTerminateProcess (ProcessHandle=0x748, ExitStatus=0x0) returned 0x0 [0130.982] NtClose (Handle=0x748) returned 0x0 [0130.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19850 [0130.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0130.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0130.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0130.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.984] NtOpenProcess (in: ProcessHandle=0x222ff54, DesiredAccess=0x1, ObjectAttributes=0x222ff38*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x222ff30*(UniqueProcess=0x884, UniqueThread=0x0) | out: ProcessHandle=0x222ff54*=0x748) returned 0x0 [0130.984] NtTerminateProcess (ProcessHandle=0x748, ExitStatus=0x0) returned 0x0 [0130.985] NtClose (Handle=0x748) returned 0x0 [0130.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0130.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0130.986] NtOpenProcess (in: ProcessHandle=0x222ff54, DesiredAccess=0x1, ObjectAttributes=0x222ff38*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x222ff30*(UniqueProcess=0x8d4, UniqueThread=0x0) | out: ProcessHandle=0x222ff54*=0x748) returned 0x0 [0130.986] NtTerminateProcess (ProcessHandle=0x748, ExitStatus=0x0) returned 0x0 [0130.991] NtClose (Handle=0x748) returned 0x0 [0130.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b10 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4158 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19850 [0130.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0130.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b10 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4158 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3b10 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3b10 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4158 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19850 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf910 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4158 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4158 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4158) returned 1 [0130.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b6e8) returned 1 [0130.996] Sleep (dwMilliseconds=0x64) [0131.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x66de488 [0131.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66de488, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x66de488, ResultLength=0x0) returned 0xc0000004 [0131.194] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66de488, Size=0x2048) returned 0x66de488 [0131.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66de488, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x66de488, ResultLength=0x0) returned 0xc0000004 [0131.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66de488, Size=0x306c) returned 0x66de488 [0131.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66de488, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x66de488, ResultLength=0x0) returned 0xc0000004 [0131.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66de488, Size=0x4090) returned 0x3f1b6e8 [0131.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x50b4) returned 0x3f1b6e8 [0131.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x60d8) returned 0x3f1b6e8 [0131.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.196] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x70fc) returned 0x3f1b6e8 [0131.196] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.196] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x8120) returned 0x3f1b6e8 [0131.196] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.196] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0x9144) returned 0x3f1b6e8 [0131.196] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.196] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xa168) returned 0x3f1b6e8 [0131.197] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.197] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xb18c) returned 0x3f1b6e8 [0131.197] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.197] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xc1b0) returned 0x3f1b6e8 [0131.197] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.197] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xd1d4) returned 0x3f1b6e8 [0131.197] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0xc0000004 [0131.198] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1b6e8, Size=0xe1f8) returned 0x3f1b6e8 [0131.198] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1b6e8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1b6e8, ResultLength=0x0) returned 0x0 [0131.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2590 [0131.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2590) returned 1 [0131.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x305e968 [0131.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0131.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4138 [0131.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0131.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0131.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0131.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0131.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4138 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19888 [0131.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f420 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f420) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf910 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x305e968 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305e968) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0131.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1770 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b10 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4138 [0131.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19888 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b10 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4138 [0131.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3b10 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3b10 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4138 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1770 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf910 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1770 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1770 [0131.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1770) returned 1 [0131.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4138 [0131.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4138 [0131.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4138) returned 1 [0131.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b6e8) returned 1 [0131.212] Sleep (dwMilliseconds=0x64) [0131.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0131.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0131.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x3f1ce60 [0131.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x306c) returned 0x3f1ce60 [0131.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x4090) returned 0x3f1ce60 [0131.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x50b4) returned 0x3f1ce60 [0131.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x60d8) returned 0x3f1ce60 [0131.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x70fc) returned 0x3f1ce60 [0131.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x8120) returned 0x3f1ce60 [0131.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0x9144) returned 0x3f1ce60 [0131.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.377] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xa168) returned 0x3f1ce60 [0131.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.377] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xb18c) returned 0x3f1ce60 [0131.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.377] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xc1b0) returned 0x3f1ce60 [0131.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.378] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xd1d4) returned 0x3f1ce60 [0131.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0xc0000004 [0131.378] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f1ce60, Size=0xe1f8) returned 0x3f1ce60 [0131.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f1ce60, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f1ce60, ResultLength=0x0) returned 0x0 [0131.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0131.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2550) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3dc58f0 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4198 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dc58f0 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dc58f0 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df4198 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1310 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19888 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f420 [0131.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f420) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1310 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1310 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf910 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4198 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dc58f0 [0131.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1310 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dc58f0 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1310 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4198 [0131.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4198 [0131.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1310 [0131.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0131.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df4198 [0131.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4198) returned 1 [0131.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1310 [0141.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0141.859] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0141.859] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x67efce8 [0141.859] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x67efce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x67efce8, ResultLength=0x0) returned 0xc0000004 [0141.860] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efce8, Size=0x306c) returned 0x674fce8 [0141.860] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674fce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x674fce8, ResultLength=0x0) returned 0xc0000004 [0141.860] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674fce8, Size=0x4090) returned 0x6709898 [0141.860] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6709898, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6709898, ResultLength=0x0) returned 0xc0000004 [0141.885] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6709898, Size=0x50b4) returned 0x6709898 [0141.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6709898, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6709898, ResultLength=0x0) returned 0xc0000004 [0141.885] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6709898, Size=0x60d8) returned 0x6709898 [0141.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6709898, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6709898, ResultLength=0x0) returned 0xc0000004 [0141.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6709898, Size=0x70fc) returned 0x68cbcd0 [0141.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x8120) returned 0x68cbcd0 [0141.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x9144) returned 0x68cbcd0 [0141.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xa168) returned 0x68cbcd0 [0141.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xb18c) returned 0x68cbcd0 [0141.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xc1b0) returned 0x68cbcd0 [0141.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xd1d4) returned 0x68cbcd0 [0141.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xe1f8) returned 0x68cbcd0 [0141.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0xf21c) returned 0x68cbcd0 [0141.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x10240) returned 0x68cbcd0 [0141.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x11264) returned 0x68cbcd0 [0141.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x12288) returned 0x68cbcd0 [0141.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x68cbcd0, ResultLength=0x0) returned 0xc0000004 [0141.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbcd0, Size=0x132ac) returned 0x68ddf60 [0141.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68ddf60, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x68ddf60, ResultLength=0x0) returned 0xc0000004 [0141.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68ddf60, Size=0x142d0) returned 0x68f1218 [0141.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68f1218, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x68f1218, ResultLength=0x0) returned 0x0 [0141.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0141.905] Sleep (dwMilliseconds=0x64) [0143.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0143.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0143.072] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x67efce8 [0143.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x67efce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x67efce8, ResultLength=0x0) returned 0xc0000004 [0143.072] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efce8, Size=0x306c) returned 0x674fce8 [0143.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674fce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x674fce8, ResultLength=0x0) returned 0xc0000004 [0143.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674fce8, Size=0x4090) returned 0x670aaa0 [0143.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0143.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x50b4) returned 0x670aaa0 [0143.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0143.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x60d8) returned 0x694bcd0 [0143.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x70fc) returned 0x694bcd0 [0143.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x8120) returned 0x694bcd0 [0143.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x9144) returned 0x694bcd0 [0143.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xa168) returned 0x694bcd0 [0143.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xb18c) returned 0x694bcd0 [0143.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xc1b0) returned 0x694bcd0 [0143.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xd1d4) returned 0x694bcd0 [0143.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xe1f8) returned 0x694bcd0 [0143.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xf21c) returned 0x694bcd0 [0143.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x10240) returned 0x694bcd0 [0143.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x11264) returned 0x694bcd0 [0143.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.078] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x12288) returned 0x694bcd0 [0143.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.078] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x132ac) returned 0x694bcd0 [0143.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0x0 [0143.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0143.079] Sleep (dwMilliseconds=0x64) [0143.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0143.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0143.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x67efce8 [0143.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x67efce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x67efce8, ResultLength=0x0) returned 0xc0000004 [0143.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efce8, Size=0x306c) returned 0x690bce8 [0143.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0143.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x670aaa0 [0143.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0143.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x50b4) returned 0x670aaa0 [0143.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0143.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x60d8) returned 0x694bcd0 [0143.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x70fc) returned 0x694bcd0 [0143.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.755] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x8120) returned 0x694bcd0 [0143.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x9144) returned 0x694bcd0 [0143.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xa168) returned 0x694bcd0 [0143.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.756] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xb18c) returned 0x694bcd0 [0143.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xc1b0) returned 0x694bcd0 [0143.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xd1d4) returned 0x694bcd0 [0143.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xe1f8) returned 0x694bcd0 [0143.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xf21c) returned 0x694bcd0 [0143.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x10240) returned 0x694bcd0 [0143.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x11264) returned 0x694bcd0 [0143.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x12288) returned 0x694bcd0 [0143.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0143.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x132ac) returned 0x694bcd0 [0143.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0x0 [0143.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0143.759] Sleep (dwMilliseconds=0x64) [0144.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0144.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0144.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x67efce8 [0144.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x67efce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x67efce8, ResultLength=0x0) returned 0xc0000004 [0144.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efce8, Size=0x306c) returned 0x690bce8 [0144.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0144.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x670aaa0 [0144.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0144.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x50b4) returned 0x670aaa0 [0144.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0144.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x60d8) returned 0x694bcd0 [0144.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x70fc) returned 0x694bcd0 [0144.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x8120) returned 0x694bcd0 [0144.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x9144) returned 0x694bcd0 [0144.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xa168) returned 0x694bcd0 [0144.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xb18c) returned 0x694bcd0 [0144.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.343] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xc1b0) returned 0x694bcd0 [0144.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.343] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xd1d4) returned 0x694bcd0 [0144.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.343] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xe1f8) returned 0x694bcd0 [0144.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.343] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xf21c) returned 0x694bcd0 [0144.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.344] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x10240) returned 0x694bcd0 [0144.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.344] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x11264) returned 0x694bcd0 [0144.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0144.344] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x12288) returned 0x694bcd0 [0144.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0x0 [0144.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0144.345] Sleep (dwMilliseconds=0x64) [0145.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0145.169] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0145.169] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x67efce8 [0145.169] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x67efce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x67efce8, ResultLength=0x0) returned 0xc0000004 [0145.170] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x67efce8, Size=0x306c) returned 0x690bce8 [0145.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0145.170] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x670aaa0 [0145.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0145.170] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x50b4) returned 0x670aaa0 [0145.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x670aaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x670aaa0, ResultLength=0x0) returned 0xc0000004 [0145.171] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x670aaa0, Size=0x60d8) returned 0x694bcd0 [0145.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.171] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x70fc) returned 0x694bcd0 [0145.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x8120) returned 0x694bcd0 [0145.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x9144) returned 0x694bcd0 [0145.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xa168) returned 0x694bcd0 [0145.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xb18c) returned 0x694bcd0 [0145.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xc1b0) returned 0x694bcd0 [0145.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xd1d4) returned 0x694bcd0 [0145.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xe1f8) returned 0x694bcd0 [0145.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0xf21c) returned 0x694bcd0 [0145.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x10240) returned 0x694bcd0 [0145.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x11264) returned 0x694bcd0 [0145.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x12288) returned 0x694bcd0 [0145.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0xc0000004 [0145.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694bcd0, Size=0x132ac) returned 0x694bcd0 [0145.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x694bcd0, ResultLength=0x0) returned 0x0 [0145.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2590 [0145.177] Sleep (dwMilliseconds=0x64) [0145.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0145.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0145.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0145.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0145.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0145.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0145.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6957cd0 [0145.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x50b4) returned 0x6957cd0 [0145.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x60d8) returned 0x6957cd0 [0145.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x70fc) returned 0x6957cd0 [0145.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x8120) returned 0x6957cd0 [0145.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x9144) returned 0x6957cd0 [0145.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xa168) returned 0x6957cd0 [0145.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xb18c) returned 0x6957cd0 [0145.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xc1b0) returned 0x6957cd0 [0145.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xd1d4) returned 0x6957cd0 [0145.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xe1f8) returned 0x6957cd0 [0145.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0xf21c) returned 0x6957cd0 [0145.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x10240) returned 0x6957cd0 [0145.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x11264) returned 0x6957cd0 [0145.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x12288) returned 0x6957cd0 [0145.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0xc0000004 [0145.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6957cd0, Size=0x132ac) returned 0x6957cd0 [0145.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6957cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6957cd0, ResultLength=0x0) returned 0x0 [0145.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2590 [0160.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0160.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0160.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0160.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0160.050] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0160.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0160.050] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6877cd0 [0160.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x50b4) returned 0x6877cd0 [0160.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x60d8) returned 0x6877cd0 [0160.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.052] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0160.052] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.052] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x6877cd0 [0160.052] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.052] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x9144) returned 0x6877cd0 [0160.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xa168) returned 0x6877cd0 [0160.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xb18c) returned 0x6877cd0 [0160.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xc1b0) returned 0x6877cd0 [0160.054] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xd1d4) returned 0x6877cd0 [0160.054] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xe1f8) returned 0x6877cd0 [0160.055] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xf21c) returned 0x6877cd0 [0160.055] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x10240) returned 0x6877cd0 [0160.055] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x11264) returned 0x6877cd0 [0160.056] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x12288) returned 0x6877cd0 [0160.056] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x132ac) returned 0x6877cd0 [0160.057] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x142d0) returned 0x6877cd0 [0160.057] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x152f4) returned 0x6877cd0 [0160.058] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x16318) returned 0x6877cd0 [0160.058] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0x0 [0160.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0160.930] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0160.930] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0160.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0160.931] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0160.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6877cd0 [0160.931] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x50b4) returned 0x6877cd0 [0160.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x60d8) returned 0x6877cd0 [0160.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0160.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.933] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x6877cd0 [0160.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.933] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x9144) returned 0x6877cd0 [0160.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.933] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xa168) returned 0x6877cd0 [0160.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xb18c) returned 0x6877cd0 [0160.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xc1b0) returned 0x6877cd0 [0160.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xd1d4) returned 0x6877cd0 [0160.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.935] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xe1f8) returned 0x6877cd0 [0160.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.935] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xf21c) returned 0x6877cd0 [0160.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.935] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x10240) returned 0x6877cd0 [0160.936] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.936] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x11264) returned 0x6877cd0 [0160.936] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.936] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x12288) returned 0x6877cd0 [0160.936] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.937] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x132ac) returned 0x6877cd0 [0160.937] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.937] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x142d0) returned 0x6877cd0 [0160.937] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0160.938] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x152f4) returned 0x6877cd0 [0160.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0x0 [0160.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0161.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0161.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0161.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0161.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0161.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6877cd0 [0161.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x50b4) returned 0x6877cd0 [0161.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x60d8) returned 0x6877cd0 [0161.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0161.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x6877cd0 [0161.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x9144) returned 0x6877cd0 [0161.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xa168) returned 0x6877cd0 [0161.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.672] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xb18c) returned 0x6877cd0 [0161.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.672] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xc1b0) returned 0x6877cd0 [0161.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.673] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xd1d4) returned 0x6877cd0 [0161.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.673] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xe1f8) returned 0x6877cd0 [0161.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.673] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0xf21c) returned 0x6877cd0 [0161.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x10240) returned 0x6877cd0 [0161.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.674] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x11264) returned 0x6877cd0 [0161.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x12288) returned 0x6877cd0 [0161.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x132ac) returned 0x6877cd0 [0161.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x142d0) returned 0x6877cd0 [0161.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x152f4) returned 0x6877cd0 [0161.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x16318) returned 0x6877cd0 [0161.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0161.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x1733c) returned 0x6877cd0 [0161.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0x0 [0161.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0161.678] Sleep (dwMilliseconds=0x64) [0162.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0162.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0162.405] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0162.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0162.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0162.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0162.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x687fcd0 [0162.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x50b4) returned 0x687fcd0 [0162.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x60d8) returned 0x687fcd0 [0162.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x70fc) returned 0x687fcd0 [0162.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x8120) returned 0x687fcd0 [0162.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x9144) returned 0x687fcd0 [0162.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xa168) returned 0x687fcd0 [0162.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xb18c) returned 0x687fcd0 [0162.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xc1b0) returned 0x687fcd0 [0162.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xd1d4) returned 0x687fcd0 [0162.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xe1f8) returned 0x687fcd0 [0162.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xf21c) returned 0x687fcd0 [0162.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x10240) returned 0x687fcd0 [0162.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x11264) returned 0x687fcd0 [0162.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x12288) returned 0x687fcd0 [0162.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x132ac) returned 0x687fcd0 [0162.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x142d0) returned 0x687fcd0 [0162.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x152f4) returned 0x687fcd0 [0162.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0162.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x16318) returned 0x687fcd0 [0162.413] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0x0 [0162.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0162.413] Sleep (dwMilliseconds=0x64) [0163.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0163.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0163.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0163.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0163.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0163.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0163.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x687fcd0 [0163.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x50b4) returned 0x687fcd0 [0163.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x60d8) returned 0x687fcd0 [0163.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x70fc) returned 0x687fcd0 [0163.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x8120) returned 0x687fcd0 [0163.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x9144) returned 0x687fcd0 [0163.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xa168) returned 0x687fcd0 [0163.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xb18c) returned 0x687fcd0 [0163.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xc1b0) returned 0x687fcd0 [0163.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xd1d4) returned 0x687fcd0 [0163.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xe1f8) returned 0x687fcd0 [0163.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0xf21c) returned 0x687fcd0 [0163.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x10240) returned 0x687fcd0 [0163.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x11264) returned 0x687fcd0 [0163.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x12288) returned 0x687fcd0 [0163.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x132ac) returned 0x687fcd0 [0163.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x142d0) returned 0x687fcd0 [0163.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0xc0000004 [0163.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x687fcd0, Size=0x152f4) returned 0x687fcd0 [0163.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x687fcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x687fcd0, ResultLength=0x0) returned 0x0 [0163.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0163.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0163.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0163.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0163.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0163.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6887cd0 [0163.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x50b4) returned 0x6887cd0 [0163.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x60d8) returned 0x6887cd0 [0163.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x70fc) returned 0x6887cd0 [0163.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x8120) returned 0x6887cd0 [0163.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x9144) returned 0x6887cd0 [0163.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xa168) returned 0x6887cd0 [0163.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xb18c) returned 0x6887cd0 [0163.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xc1b0) returned 0x6887cd0 [0163.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xd1d4) returned 0x6887cd0 [0163.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xe1f8) returned 0x6887cd0 [0163.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xf21c) returned 0x6887cd0 [0163.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x10240) returned 0x6887cd0 [0163.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x11264) returned 0x6887cd0 [0163.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x12288) returned 0x6887cd0 [0163.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x132ac) returned 0x6887cd0 [0163.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x142d0) returned 0x6887cd0 [0163.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0163.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x152f4) returned 0x6887cd0 [0163.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0x0 [0163.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0164.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0164.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0164.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0164.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0164.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6887cd0 [0164.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x50b4) returned 0x6887cd0 [0164.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x60d8) returned 0x6887cd0 [0164.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x70fc) returned 0x6887cd0 [0164.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x8120) returned 0x6887cd0 [0164.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x9144) returned 0x6887cd0 [0164.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xa168) returned 0x6887cd0 [0164.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xb18c) returned 0x6887cd0 [0164.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xc1b0) returned 0x6887cd0 [0164.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xd1d4) returned 0x6887cd0 [0164.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xe1f8) returned 0x6887cd0 [0164.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0xf21c) returned 0x6887cd0 [0164.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x10240) returned 0x6887cd0 [0164.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x11264) returned 0x6887cd0 [0164.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x12288) returned 0x6887cd0 [0164.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x132ac) returned 0x6887cd0 [0164.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x142d0) returned 0x6887cd0 [0164.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x152f4) returned 0x6887cd0 [0164.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0xc0000004 [0164.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6887cd0, Size=0x16318) returned 0x6887cd0 [0164.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6887cd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6887cd0, ResultLength=0x0) returned 0x0 [0164.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0165.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0165.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0165.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0165.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0165.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6897cd0 [0165.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x50b4) returned 0x6897cd0 [0165.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x60d8) returned 0x6897cd0 [0165.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x70fc) returned 0x6897cd0 [0165.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x8120) returned 0x6897cd0 [0165.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x9144) returned 0x6897cd0 [0165.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xa168) returned 0x6897cd0 [0165.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xb18c) returned 0x6897cd0 [0165.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xc1b0) returned 0x6897cd0 [0165.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xd1d4) returned 0x6897cd0 [0165.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xe1f8) returned 0x6897cd0 [0165.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xf21c) returned 0x6897cd0 [0165.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x10240) returned 0x6897cd0 [0165.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x11264) returned 0x6897cd0 [0165.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x12288) returned 0x6897cd0 [0165.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x132ac) returned 0x6897cd0 [0165.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x142d0) returned 0x6897cd0 [0165.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x152f4) returned 0x6897cd0 [0165.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x16318) returned 0x6897cd0 [0165.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0165.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x1733c) returned 0x6897cd0 [0165.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0165.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bec80 [0166.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0166.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0166.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0166.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0166.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6897cd0 [0166.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x50b4) returned 0x6897cd0 [0166.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x60d8) returned 0x6897cd0 [0166.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x70fc) returned 0x6897cd0 [0166.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x8120) returned 0x6897cd0 [0166.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x9144) returned 0x6897cd0 [0166.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xa168) returned 0x6897cd0 [0166.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xb18c) returned 0x6897cd0 [0166.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xc1b0) returned 0x6897cd0 [0166.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xd1d4) returned 0x6897cd0 [0166.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xe1f8) returned 0x6897cd0 [0166.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xf21c) returned 0x6897cd0 [0166.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x10240) returned 0x6897cd0 [0166.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x11264) returned 0x6897cd0 [0166.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x12288) returned 0x6897cd0 [0166.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x132ac) returned 0x6897cd0 [0166.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x142d0) returned 0x6897cd0 [0166.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0166.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x152f4) returned 0x6897cd0 [0166.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0166.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0166.925] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0166.925] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0166.926] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0166.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0166.926] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6899cd0 [0166.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.926] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x50b4) returned 0x6899cd0 [0166.927] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.927] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x60d8) returned 0x6899cd0 [0166.927] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.927] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x70fc) returned 0x6899cd0 [0166.927] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.928] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x8120) returned 0x6899cd0 [0166.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.928] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x9144) returned 0x6899cd0 [0166.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.928] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xa168) returned 0x6899cd0 [0166.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.929] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xb18c) returned 0x6899cd0 [0166.929] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.929] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xc1b0) returned 0x6899cd0 [0166.929] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.929] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xd1d4) returned 0x6899cd0 [0166.930] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xe1f8) returned 0x6899cd0 [0166.931] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0xf21c) returned 0x6899cd0 [0166.931] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x10240) returned 0x6899cd0 [0166.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x11264) returned 0x6899cd0 [0166.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x12288) returned 0x6899cd0 [0166.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.933] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x132ac) returned 0x6899cd0 [0166.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.933] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x142d0) returned 0x6899cd0 [0166.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x152f4) returned 0x6899cd0 [0166.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6899cd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6899cd0, ResultLength=0x0) returned 0xc0000004 [0166.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6899cd0, Size=0x16318) returned 0x674eaa0 [0166.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0166.935] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x1733c) returned 0x674eaa0 [0166.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0166.936] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x18360) returned 0x674eaa0 [0166.936] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0166.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0167.675] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0167.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0167.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0167.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0167.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0167.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0167.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0167.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0167.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0167.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0167.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0167.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0167.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0167.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0167.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0167.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0167.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0167.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0167.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0167.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0167.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0167.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0167.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x16318) returned 0x674eaa0 [0167.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0167.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x1733c) returned 0x674eaa0 [0167.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0167.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0168.138] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0168.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0168.139] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0168.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0168.139] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0168.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0168.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0168.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0168.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0168.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0168.141] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0168.141] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0168.141] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.142] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0168.142] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.142] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0168.142] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.143] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0168.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.143] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0168.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.143] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0168.144] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.144] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0168.144] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.144] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0168.144] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.145] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0168.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.145] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0168.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.145] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0168.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0168.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0168.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0168.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0168.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0168.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0168.622] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0168.622] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.622] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0168.622] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.622] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0168.622] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.623] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0168.623] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.623] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0168.623] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.623] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0168.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.624] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0168.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.624] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0168.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0168.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0168.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0168.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0168.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0168.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0168.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0168.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0168.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0168.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0168.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0168.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0168.964] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0168.964] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0168.965] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0168.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0168.965] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0168.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.965] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0168.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0168.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0168.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.966] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0168.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0168.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0168.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0168.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0168.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0168.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0168.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0168.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0168.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0168.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0168.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0168.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0168.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0168.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0168.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0168.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0169.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0169.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0169.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0169.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0169.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0169.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0169.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0169.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0169.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0169.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0169.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0169.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0169.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0169.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.520] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0169.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0169.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0169.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0169.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0169.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0169.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0169.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0169.523] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0169.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0169.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0170.089] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0170.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0170.089] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0170.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0170.090] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0170.090] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.090] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0170.090] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.090] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0170.091] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.091] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0170.091] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.091] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0170.091] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.092] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0170.092] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.092] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0170.092] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.092] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0170.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.093] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0170.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.093] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0170.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0170.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.094] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0170.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0170.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0170.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.095] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0170.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.096] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0170.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0170.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0170.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0170.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0170.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0170.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0170.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0170.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0170.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0170.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0170.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0170.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0170.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0170.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0170.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0170.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0170.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0170.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0170.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0170.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0170.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0170.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0170.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0170.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0170.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0170.780] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0170.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0170.780] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0170.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0170.781] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0170.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.781] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0170.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.781] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0170.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.781] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0170.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.782] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0170.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.782] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0170.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.782] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0170.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.782] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0170.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.783] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0170.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.783] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0170.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.783] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0170.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.784] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0170.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.784] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0170.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.784] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0170.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.785] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0170.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0170.785] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0170.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0170.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0172.334] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0172.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0172.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0172.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0172.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0172.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0172.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0172.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0172.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0172.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0172.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0172.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0172.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.338] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0172.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0172.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0172.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0172.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0172.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0172.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.341] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0172.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0172.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0172.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0172.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0173.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0173.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0173.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0173.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0173.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0173.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0173.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0173.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0173.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0173.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.081] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0173.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.081] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0173.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.081] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0173.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.082] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0173.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.082] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0173.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.082] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0173.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.083] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0173.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.083] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0173.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.083] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0173.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.084] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0173.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.084] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0173.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0173.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0173.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0173.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0173.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0173.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0173.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0173.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0173.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0173.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0173.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0173.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0173.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0173.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0173.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0173.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0173.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0173.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0173.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0173.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0173.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0173.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0173.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0173.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0173.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0173.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0173.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0173.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0173.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0173.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0173.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0173.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0173.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0173.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0173.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0173.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0173.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0173.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0173.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0173.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0173.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0173.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0173.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0174.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0174.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0174.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0174.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0174.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0174.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0174.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0174.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0174.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0174.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0174.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0174.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0174.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0174.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0174.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0174.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0174.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0174.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0174.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0174.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0174.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0174.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0174.757] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0174.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0174.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0174.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0174.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0174.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.758] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0174.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0174.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0174.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.759] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0174.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0174.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0174.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.760] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0174.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.761] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0174.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0174.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0174.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0174.762] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0174.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0174.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0175.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0175.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0175.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0175.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0175.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0175.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0175.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0175.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0175.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0175.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0175.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0175.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0175.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0175.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0175.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0175.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0175.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0175.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0175.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.403] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0175.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.404] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0175.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.404] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0175.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0175.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30bee90 [0175.405] Sleep (dwMilliseconds=0x64) [0175.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0175.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0175.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0175.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0175.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0175.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0175.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0175.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0175.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0175.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.836] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0175.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.836] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0175.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.836] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0175.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.836] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0175.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.836] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0175.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.837] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0175.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.837] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0175.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.837] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0175.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.837] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0175.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.838] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0175.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.838] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0175.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0175.838] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0175.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0175.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304520 [0175.839] Sleep (dwMilliseconds=0x64) [0176.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0176.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0176.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0176.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0176.307] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0176.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0176.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0176.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0176.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0176.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.308] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0176.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.309] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0176.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.309] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0176.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.309] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0176.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0176.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0176.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.310] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0176.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0176.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0176.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.311] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0176.311] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0176.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.312] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0176.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0176.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304520 [0176.313] Sleep (dwMilliseconds=0x64) [0176.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0176.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0176.684] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0176.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0176.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0176.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0176.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0176.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0176.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.685] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0176.685] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0176.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0176.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.686] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0176.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0176.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0176.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0176.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.687] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0176.688] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.688] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0176.688] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.688] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0176.688] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.688] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0176.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.689] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0176.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0176.689] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0176.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0176.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0176.690] Sleep (dwMilliseconds=0x64) [0177.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0177.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0177.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0177.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0177.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0177.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0177.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0177.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0177.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0177.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0177.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0177.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0177.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0177.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0177.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0177.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0177.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0177.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0177.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0177.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0177.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0177.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0177.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0177.030] Sleep (dwMilliseconds=0x64) [0177.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0177.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0177.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0177.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0177.420] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0177.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0177.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0177.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0177.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0177.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.421] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0177.421] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0177.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0177.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0177.422] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.422] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0177.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0177.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0177.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.423] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0177.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0177.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0177.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0177.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0177.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0177.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0177.425] Sleep (dwMilliseconds=0x64) [0177.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0177.859] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0177.863] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0177.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0177.863] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0177.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0177.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0177.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0177.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0177.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0177.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0177.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0177.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0177.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0177.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0177.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0177.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0177.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0177.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0177.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0177.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0177.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0177.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0177.868] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0177.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0177.868] Sleep (dwMilliseconds=0x64) [0178.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0178.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0178.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0178.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0178.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0178.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0178.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0178.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0178.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0178.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0178.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0178.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0178.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0178.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0178.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0178.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0178.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0178.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0178.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0178.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.186] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0178.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.186] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0178.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.187] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0178.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0178.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0178.187] Sleep (dwMilliseconds=0x64) [0178.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0178.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0178.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0178.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0178.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0178.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0178.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0178.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0178.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0178.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0178.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0178.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0178.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0178.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0178.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0178.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0178.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.650] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0178.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0178.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0178.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.651] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0178.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.652] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0178.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.652] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0178.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0178.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0178.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0178.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0178.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0178.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0178.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0178.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0178.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0178.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0178.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0178.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0179.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0179.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0179.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0179.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0179.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0179.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0179.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0179.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0179.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.002] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0179.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.002] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0179.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.002] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0179.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.002] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0179.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0179.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0179.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0179.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0179.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0179.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0179.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0179.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0179.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0179.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0179.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0179.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0179.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0179.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0179.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0179.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0179.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0179.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0179.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0179.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0179.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0179.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.582] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0179.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.582] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0179.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.582] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0179.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0179.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0179.877] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0179.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0179.877] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0179.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0179.877] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0179.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.877] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0179.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.878] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0179.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.878] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0179.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.878] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0179.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.878] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0179.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.879] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0179.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.879] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0179.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.879] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0179.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.879] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0179.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.879] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0179.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.880] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0179.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.880] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0179.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.880] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0179.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.881] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0179.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.881] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0179.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.881] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0179.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0179.881] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0179.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0179.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0180.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0180.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0180.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0180.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0180.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0180.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0180.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0180.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0180.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0180.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0180.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0180.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0180.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0180.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0180.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0180.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0180.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0180.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0180.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0180.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0180.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0180.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0180.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0180.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0180.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0180.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0180.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0180.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0180.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0180.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0180.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0180.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0180.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0180.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0180.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0180.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0180.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0180.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0180.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0180.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0180.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0180.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0180.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0180.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0180.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0180.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0180.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x16318) returned 0x674eaa0 [0180.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0180.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0181.869] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0181.869] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0181.870] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0181.870] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0181.870] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0181.870] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.870] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0181.870] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.871] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0181.871] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.871] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0181.871] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.871] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0181.871] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.872] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0181.872] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.872] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0181.872] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.872] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0181.872] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0181.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0181.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0181.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0181.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0181.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.875] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0181.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.875] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0181.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.876] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0181.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.876] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0181.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.876] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x152f4) returned 0x674eaa0 [0181.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0181.877] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x16318) returned 0x674eaa0 [0181.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0181.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0182.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0182.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0182.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0182.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0182.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0182.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.407] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0182.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0182.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0182.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.408] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0182.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0182.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0182.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0182.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0182.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.409] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0182.409] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0182.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0182.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0182.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0182.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0182.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0182.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x142d0) returned 0x674eaa0 [0182.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0182.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0182.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0182.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0182.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0182.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0182.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0182.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0182.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0182.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0182.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0182.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0182.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0182.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0182.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0182.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0182.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0182.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0182.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0182.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0183.145] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0183.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0183.146] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0183.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0183.146] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0183.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.146] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0183.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.146] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0183.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.146] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0183.146] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.147] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0183.147] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.147] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0183.147] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.147] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0183.147] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.147] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0183.147] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.147] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0183.147] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.148] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0183.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.148] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0183.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.148] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0183.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.148] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0183.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.149] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0183.149] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.149] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0183.149] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.149] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0183.149] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0183.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0183.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0183.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0183.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0183.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0183.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x674eaa0 [0183.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x50b4) returned 0x674eaa0 [0183.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x60d8) returned 0x674eaa0 [0183.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x70fc) returned 0x674eaa0 [0183.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x8120) returned 0x674eaa0 [0183.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x9144) returned 0x674eaa0 [0183.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xa168) returned 0x674eaa0 [0183.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xb18c) returned 0x674eaa0 [0183.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xc1b0) returned 0x674eaa0 [0183.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xd1d4) returned 0x674eaa0 [0183.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xe1f8) returned 0x674eaa0 [0183.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.669] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0xf21c) returned 0x674eaa0 [0183.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x10240) returned 0x674eaa0 [0183.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x11264) returned 0x674eaa0 [0183.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.670] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x12288) returned 0x674eaa0 [0183.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0xc0000004 [0183.671] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674eaa0, Size=0x132ac) returned 0x674eaa0 [0183.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674eaa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x674eaa0, ResultLength=0x0) returned 0x0 [0183.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2770 [0190.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0190.487] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0190.488] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0190.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0190.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0190.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0190.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6764aa0 [0190.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x50b4) returned 0x6764aa0 [0190.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.490] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x60d8) returned 0x6764aa0 [0190.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x70fc) returned 0x6764aa0 [0190.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x8120) returned 0x6764aa0 [0190.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.491] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x9144) returned 0x6764aa0 [0190.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xa168) returned 0x6764aa0 [0190.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xb18c) returned 0x6764aa0 [0190.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xc1b0) returned 0x6764aa0 [0190.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xd1d4) returned 0x6764aa0 [0190.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xe1f8) returned 0x6764aa0 [0190.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0xf21c) returned 0x6764aa0 [0190.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x10240) returned 0x6764aa0 [0190.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x11264) returned 0x6764aa0 [0190.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.495] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x12288) returned 0x6764aa0 [0190.495] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.495] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x132ac) returned 0x6764aa0 [0190.495] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0xc0000004 [0190.496] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6764aa0, Size=0x142d0) returned 0x6764aa0 [0190.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6764aa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6764aa0, ResultLength=0x0) returned 0x0 [0190.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0190.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2550) returned 1 [0190.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x66f0588 [0190.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5408 [0190.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5408 [0190.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4060 [0190.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19a48 [0190.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66fdbc8 [0190.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdbc8) returned 1 [0190.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4060 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d2be0 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2be0) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4060 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d2be0 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2be0) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x66d2be0 [0190.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2be0) returned 1 [0190.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19a48 [0190.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d2be0 [0190.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2be0) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19a48 [0190.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4060 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19a48 [0190.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4060 [0190.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4060 [0190.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5b70 [0190.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4060 [0190.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19a48 [0190.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5b70 [0190.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5408 [0190.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5b70 [0190.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0190.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5408 [0190.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19a48 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0190.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x66d2be0 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2be0) returned 1 [0190.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4060 [0190.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4060 [0190.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5408 [0190.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5408 [0190.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5408 [0190.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5408) returned 1 [0190.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764aa0) returned 1 [0190.515] Sleep (dwMilliseconds=0x64) [0190.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0190.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0190.846] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0190.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0190.846] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0190.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0190.846] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6766aa0 [0190.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.847] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x50b4) returned 0x6766aa0 [0190.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.847] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x60d8) returned 0x6766aa0 [0190.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.847] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x70fc) returned 0x6766aa0 [0190.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.848] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x8120) returned 0x6766aa0 [0190.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.848] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x9144) returned 0x6766aa0 [0190.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.849] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xa168) returned 0x6766aa0 [0190.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.849] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xb18c) returned 0x6766aa0 [0190.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.849] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xc1b0) returned 0x6766aa0 [0190.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.850] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xd1d4) returned 0x6766aa0 [0190.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.850] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xe1f8) returned 0x6766aa0 [0190.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.850] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0xf21c) returned 0x6766aa0 [0190.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.851] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x10240) returned 0x6766aa0 [0190.851] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.851] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x11264) returned 0x6766aa0 [0190.851] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.852] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x12288) returned 0x6766aa0 [0190.852] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.852] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x132ac) returned 0x6766aa0 [0190.852] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.852] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x142d0) returned 0x6766aa0 [0190.852] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0xc0000004 [0190.853] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6766aa0, Size=0x152f4) returned 0x6766aa0 [0190.853] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6766aa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6766aa0, ResultLength=0x0) returned 0x0 [0190.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0190.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2550) returned 1 [0190.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x66f0588 [0190.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5368 [0190.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5368 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4d80 [0190.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19f18 [0190.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66fd940 [0190.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd940) returned 1 [0190.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4d80 [0190.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0190.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0190.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4d80 [0190.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0190.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0190.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067040 [0190.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19f18 [0190.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0190.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19f18 [0190.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4d80 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19f18 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0190.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4d80 [0190.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4d80 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0190.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5b70 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4d80 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19f18 [0190.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5b70 [0190.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5368 [0190.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5b70 [0190.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0190.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x69c5368 [0190.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19f18 [0190.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0190.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0190.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067040 [0190.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0190.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4d80 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4d80 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x69c5368 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c5368 [0190.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x69c5368 [0190.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5368) returned 1 [0190.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766aa0) returned 1 [0190.872] Sleep (dwMilliseconds=0x64) [0191.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0191.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0191.287] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0191.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0191.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0191.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0191.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6768aa0 [0191.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x50b4) returned 0x6768aa0 [0191.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.288] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x60d8) returned 0x6768aa0 [0191.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x70fc) returned 0x6768aa0 [0191.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x8120) returned 0x6768aa0 [0191.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x9144) returned 0x6768aa0 [0191.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xa168) returned 0x6768aa0 [0191.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xb18c) returned 0x6768aa0 [0191.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xc1b0) returned 0x6768aa0 [0191.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xd1d4) returned 0x6768aa0 [0191.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xe1f8) returned 0x6768aa0 [0191.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xf21c) returned 0x6768aa0 [0191.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x10240) returned 0x6768aa0 [0191.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x11264) returned 0x6768aa0 [0191.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x12288) returned 0x6768aa0 [0191.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x132ac) returned 0x6768aa0 [0191.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x142d0) returned 0x6768aa0 [0191.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x152f4) returned 0x6768aa0 [0191.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0x0 [0191.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0191.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2550) returned 1 [0191.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x66f0588 [0191.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0191.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3f1e1a0 [0191.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3f1e1a0 [0191.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3c50 [0191.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19e70 [0191.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0191.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x6822510 [0191.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822510) returned 1 [0191.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef3c50 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d23e0 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d23e0) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3db0 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef3c50 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d23e0 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d23e0) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x66d23e0 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d23e0) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19e70 [0191.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0191.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d23e0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d23e0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3f1e1a0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19e70 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3db0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3c50 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3db0 [0191.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0191.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19e70 [0191.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0191.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x66f0588 [0191.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0588) returned 1 [0191.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef3c50 [0191.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e1a0 [0191.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e1a0) returned 1 [0191.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1e1a0 [0191.301] Sleep (dwMilliseconds=0x64) [0191.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0191.692] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0191.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0191.693] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0191.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0191.693] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0191.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6768aa0 [0191.693] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x50b4) returned 0x6768aa0 [0191.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x60d8) returned 0x6768aa0 [0191.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x70fc) returned 0x6768aa0 [0191.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x8120) returned 0x6768aa0 [0191.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x9144) returned 0x6768aa0 [0191.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xa168) returned 0x6768aa0 [0191.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xb18c) returned 0x6768aa0 [0191.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xc1b0) returned 0x6768aa0 [0191.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xd1d4) returned 0x6768aa0 [0191.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xe1f8) returned 0x6768aa0 [0191.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xf21c) returned 0x6768aa0 [0191.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.697] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x10240) returned 0x6768aa0 [0191.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.698] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x11264) returned 0x6768aa0 [0191.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.698] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x12288) returned 0x6768aa0 [0191.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.699] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x132ac) returned 0x6768aa0 [0191.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.699] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x142d0) returned 0x6768aa0 [0191.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.699] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x152f4) returned 0x6768aa0 [0191.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0191.700] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x16318) returned 0x6768aa0 [0191.700] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0x0 [0191.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0191.701] Sleep (dwMilliseconds=0x64) [0192.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0192.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0192.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x68cbce8 [0192.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x68cbce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x68cbce8, ResultLength=0x0) returned 0xc0000004 [0192.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x68cbce8, Size=0x306c) returned 0x690bce8 [0192.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x690bce8, ResultLength=0x0) returned 0xc0000004 [0192.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bce8, Size=0x4090) returned 0x6768aa0 [0192.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x50b4) returned 0x6768aa0 [0192.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x60d8) returned 0x6768aa0 [0192.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x70fc) returned 0x6768aa0 [0192.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x8120) returned 0x6768aa0 [0192.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x9144) returned 0x6768aa0 [0192.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xa168) returned 0x6768aa0 [0192.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xb18c) returned 0x6768aa0 [0192.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xc1b0) returned 0x6768aa0 [0192.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xd1d4) returned 0x6768aa0 [0192.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xe1f8) returned 0x6768aa0 [0192.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0xf21c) returned 0x6768aa0 [0192.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x10240) returned 0x6768aa0 [0192.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x11264) returned 0x6768aa0 [0192.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x12288) returned 0x6768aa0 [0192.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x132ac) returned 0x6768aa0 [0192.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x142d0) returned 0x6768aa0 [0192.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x152f4) returned 0x6768aa0 [0192.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0xc0000004 [0192.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6768aa0, Size=0x16318) returned 0x6768aa0 [0192.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6768aa0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x6768aa0, ResultLength=0x0) returned 0x0 [0192.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2470 [0207.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0207.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0207.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x6959ce8 [0207.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6959ce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x6959ce8, ResultLength=0x0) returned 0xc0000004 [0207.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6959ce8, Size=0x306c) returned 0x682fce8 [0207.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x682fce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x682fce8, ResultLength=0x0) returned 0xc0000004 [0207.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fce8, Size=0x4090) returned 0x6a86cd0 [0207.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0207.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x12ede048 [0207.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0x70fc) returned 0x12ede048 [0207.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0x8120) returned 0x12ede048 [0207.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0x9144) returned 0x12ede048 [0207.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xa168) returned 0x12ede048 [0207.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xb18c) returned 0x12ede048 [0207.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xc1b0) returned 0x12ede048 [0207.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.641] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xd1d4) returned 0x12ede048 [0207.641] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xe1f8) returned 0x12ede048 [0207.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.642] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0xf21c) returned 0x12ede048 [0207.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ede048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x12ede048, ResultLength=0x0) returned 0xc0000004 [0207.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ede048, Size=0x10240) returned 0x690bcd0 [0207.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x11264) returned 0x690bcd0 [0207.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x12288) returned 0x690bcd0 [0207.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x132ac) returned 0x690bcd0 [0207.657] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.657] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x142d0) returned 0x690bcd0 [0207.657] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.657] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x152f4) returned 0x690bcd0 [0207.657] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x16318) returned 0x690bcd0 [0207.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1733c) returned 0x690bcd0 [0207.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x18360) returned 0x690bcd0 [0207.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x19384) returned 0x690bcd0 [0207.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1a3a8) returned 0x690bcd0 [0207.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1b3cc) returned 0x690bcd0 [0207.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0x0 [0207.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de26f0 [0207.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x6959ce8 [0207.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6959ce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x6959ce8, ResultLength=0x0) returned 0xc0000004 [0207.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6959ce8, Size=0x306c) returned 0x682fce8 [0207.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x682fce8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x682fce8, ResultLength=0x0) returned 0xc0000004 [0207.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fce8, Size=0x4090) returned 0x6a86cd0 [0207.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0207.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x690bcd0 [0207.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x70fc) returned 0x690bcd0 [0207.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x8120) returned 0x690bcd0 [0207.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x9144) returned 0x690bcd0 [0207.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xa168) returned 0x690bcd0 [0207.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xb18c) returned 0x690bcd0 [0207.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xc1b0) returned 0x690bcd0 [0207.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xd1d4) returned 0x690bcd0 [0207.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xe1f8) returned 0x690bcd0 [0207.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0xf21c) returned 0x690bcd0 [0207.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x10240) returned 0x690bcd0 [0207.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x11264) returned 0x690bcd0 [0207.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x12288) returned 0x690bcd0 [0207.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x132ac) returned 0x690bcd0 [0207.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x142d0) returned 0x690bcd0 [0207.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x152f4) returned 0x690bcd0 [0207.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x16318) returned 0x690bcd0 [0207.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1733c) returned 0x690bcd0 [0207.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x18360) returned 0x690bcd0 [0207.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x19384) returned 0x690bcd0 [0207.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1a3a8) returned 0x690bcd0 [0207.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1b3cc) returned 0x690bcd0 [0207.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0xc0000004 [0207.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x690bcd0, Size=0x1c3f0) returned 0x690bcd0 [0207.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x690bcd0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x690bcd0, ResultLength=0x0) returned 0x0 [0207.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de26f0 [0207.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x682fce8 [0207.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x682fce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x682fce8, ResultLength=0x0) returned 0xc0000004 [0207.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fce8, Size=0x306c) returned 0x12f40060 [0207.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0207.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0207.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0207.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0207.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x691bcd0 [0207.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x70fc) returned 0x691bcd0 [0207.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x8120) returned 0x691bcd0 [0207.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x9144) returned 0x691bcd0 [0207.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xa168) returned 0x691bcd0 [0207.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xb18c) returned 0x691bcd0 [0207.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xc1b0) returned 0x691bcd0 [0207.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xd1d4) returned 0x691bcd0 [0207.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.993] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xe1f8) returned 0x691bcd0 [0207.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.993] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xf21c) returned 0x691bcd0 [0207.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x10240) returned 0x691bcd0 [0207.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x11264) returned 0x691bcd0 [0207.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x12288) returned 0x691bcd0 [0207.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x132ac) returned 0x691bcd0 [0207.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x142d0) returned 0x691bcd0 [0207.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x152f4) returned 0x691bcd0 [0207.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.997] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x16318) returned 0x691bcd0 [0207.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.997] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1733c) returned 0x691bcd0 [0207.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x18360) returned 0x691bcd0 [0207.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x19384) returned 0x691bcd0 [0207.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1a3a8) returned 0x691bcd0 [0207.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0207.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1b3cc) returned 0x691bcd0 [0208.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1c3f0) returned 0x691bcd0 [0208.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1d414) returned 0x691bcd0 [0208.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0x0 [0208.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de26f0 [0208.130] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x682fce8 [0208.131] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x682fce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x682fce8, ResultLength=0x0) returned 0xc0000004 [0208.131] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fce8, Size=0x306c) returned 0x12f40060 [0208.131] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0208.131] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0208.132] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0208.132] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0208.132] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0208.132] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x691bcd0 [0208.132] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x70fc) returned 0x691bcd0 [0208.133] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x8120) returned 0x691bcd0 [0208.133] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.133] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x9144) returned 0x691bcd0 [0208.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.134] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xa168) returned 0x691bcd0 [0208.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.134] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xb18c) returned 0x691bcd0 [0208.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.135] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xc1b0) returned 0x691bcd0 [0208.135] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.135] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xd1d4) returned 0x691bcd0 [0208.135] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.136] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xe1f8) returned 0x691bcd0 [0208.136] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.136] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xf21c) returned 0x691bcd0 [0208.136] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.137] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x10240) returned 0x691bcd0 [0208.137] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.137] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x11264) returned 0x691bcd0 [0208.137] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.137] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x12288) returned 0x691bcd0 [0208.137] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.138] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x132ac) returned 0x691bcd0 [0208.138] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.138] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x142d0) returned 0x691bcd0 [0208.138] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.139] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x152f4) returned 0x691bcd0 [0208.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.139] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x16318) returned 0x691bcd0 [0208.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1733c) returned 0x691bcd0 [0208.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.140] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x18360) returned 0x691bcd0 [0208.140] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x19384) returned 0x691bcd0 [0208.141] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.141] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1a3a8) returned 0x691bcd0 [0208.141] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.142] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1b3cc) returned 0x691bcd0 [0208.142] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.142] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1c3f0) returned 0x691bcd0 [0208.142] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.143] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1d414) returned 0x691bcd0 [0208.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0208.143] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1e438) returned 0x691bcd0 [0208.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0x0 [0208.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de26f0 [0210.957] Sleep (dwMilliseconds=0x64) [0215.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0215.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0215.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x682fce8 [0215.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x682fce8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x682fce8, ResultLength=0x0) returned 0xc0000004 [0215.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x682fce8, Size=0x306c) returned 0x12f40060 [0215.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0215.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0215.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0215.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0215.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0215.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x691bcd0 [0215.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x70fc) returned 0x691bcd0 [0215.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x8120) returned 0x691bcd0 [0215.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x9144) returned 0x691bcd0 [0215.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xa168) returned 0x691bcd0 [0215.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xb18c) returned 0x691bcd0 [0215.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xc1b0) returned 0x691bcd0 [0215.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xd1d4) returned 0x691bcd0 [0215.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xe1f8) returned 0x691bcd0 [0215.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0xf21c) returned 0x691bcd0 [0215.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x10240) returned 0x691bcd0 [0215.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x11264) returned 0x691bcd0 [0215.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x12288) returned 0x691bcd0 [0215.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x132ac) returned 0x691bcd0 [0215.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x142d0) returned 0x691bcd0 [0215.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x152f4) returned 0x691bcd0 [0215.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.183] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x16318) returned 0x691bcd0 [0215.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1733c) returned 0x691bcd0 [0215.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.184] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x18360) returned 0x691bcd0 [0215.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x19384) returned 0x691bcd0 [0215.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0xc0000004 [0215.185] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x691bcd0, Size=0x1a3a8) returned 0x691bcd0 [0215.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x691bcd0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x691bcd0, ResultLength=0x0) returned 0x0 [0215.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2550 [0230.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0230.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0230.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0230.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0230.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0230.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0230.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0230.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0230.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0230.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0230.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0230.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0230.326] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0230.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0230.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x12ea4048 [0230.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0230.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0x9144) returned 0x12ea4048 [0230.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0230.327] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0xa168) returned 0x12ebe048 [0230.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xb18c) returned 0x12ebe048 [0230.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xc1b0) returned 0x12ebe048 [0230.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xd1d4) returned 0x12ebe048 [0230.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xe1f8) returned 0x12ebe048 [0230.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.329] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xf21c) returned 0x12ebe048 [0230.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x10240) returned 0x12ebe048 [0230.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x11264) returned 0x12ebe048 [0230.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x12288) returned 0x12ebe048 [0230.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x132ac) returned 0x12ebe048 [0230.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x142d0) returned 0x12ebe048 [0230.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x152f4) returned 0x12ebe048 [0230.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x16318) returned 0x12ebe048 [0230.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0x0 [0230.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0230.444] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0230.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0230.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0230.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0230.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0230.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0230.445] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0230.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0230.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0230.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0230.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0230.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0230.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x12ea4048 [0230.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0230.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0x9144) returned 0x12ea4048 [0230.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0230.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0xa168) returned 0x12ebe048 [0230.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xb18c) returned 0x12ebe048 [0230.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xc1b0) returned 0x12ebe048 [0230.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xd1d4) returned 0x12ebe048 [0230.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xe1f8) returned 0x12ebe048 [0230.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xf21c) returned 0x12ebe048 [0230.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x10240) returned 0x12ebe048 [0230.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x11264) returned 0x12ebe048 [0230.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x12288) returned 0x12ebe048 [0230.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x132ac) returned 0x12ebe048 [0230.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x142d0) returned 0x12ebe048 [0230.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x152f4) returned 0x12ebe048 [0230.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0230.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x16318) returned 0x12ebe048 [0230.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0x0 [0230.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0231.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0231.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0231.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0231.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0231.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0231.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0231.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0231.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0231.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x12ea4048 [0231.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0231.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0x9144) returned 0x12ea4048 [0231.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0231.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0xa168) returned 0x12ebe048 [0231.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xb18c) returned 0x12ebe048 [0231.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xc1b0) returned 0x12ebe048 [0231.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xd1d4) returned 0x12ebe048 [0231.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xe1f8) returned 0x12ebe048 [0231.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xf21c) returned 0x12ebe048 [0231.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x10240) returned 0x12ebe048 [0231.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x11264) returned 0x12ebe048 [0231.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x12288) returned 0x12ebe048 [0231.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x132ac) returned 0x12ebe048 [0231.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x142d0) returned 0x12ebe048 [0231.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x152f4) returned 0x12ebe048 [0231.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.250] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x16318) returned 0x12ebe048 [0231.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0x0 [0231.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0231.368] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0231.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0231.369] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0231.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0231.369] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0231.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.369] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0231.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.370] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0231.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.370] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0231.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.370] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x12ea4048 [0231.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0231.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0x9144) returned 0x12ea4048 [0231.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ea4048, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x12ea4048, ResultLength=0x0) returned 0xc0000004 [0231.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ea4048, Size=0xa168) returned 0x12ebe048 [0231.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xb18c) returned 0x12ebe048 [0231.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xc1b0) returned 0x12ebe048 [0231.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xd1d4) returned 0x12ebe048 [0231.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xe1f8) returned 0x12ebe048 [0231.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0xf21c) returned 0x12ebe048 [0231.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x10240) returned 0x12ebe048 [0231.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x11264) returned 0x12ebe048 [0231.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x12288) returned 0x12ebe048 [0231.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x132ac) returned 0x12ebe048 [0231.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x142d0) returned 0x12ebe048 [0231.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x152f4) returned 0x12ebe048 [0231.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0xc0000004 [0231.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12ebe048, Size=0x16318) returned 0x12ebe048 [0231.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12ebe048, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x12ebe048, ResultLength=0x0) returned 0x0 [0231.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0231.501] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0231.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0231.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0231.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0231.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0231.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0231.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0231.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0231.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0231.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0231.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0231.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0231.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0231.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0231.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0231.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0231.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0231.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0231.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0231.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0231.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0231.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x152f4) returned 0x692bcd0 [0231.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0231.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0231.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0231.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0231.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0231.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0231.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0231.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0231.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0231.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0231.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0231.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0231.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0231.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0231.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0231.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0231.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0231.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0231.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0231.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0231.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0231.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0231.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0231.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0231.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0231.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0231.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0231.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0232.071] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0232.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0232.071] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0232.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0232.071] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0232.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0232.072] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0232.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0232.072] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0232.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0232.072] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0232.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0232.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0232.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0232.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.073] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0232.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0232.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0232.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0232.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0232.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0232.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0232.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0232.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0232.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0232.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0232.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0232.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0232.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0232.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0232.943] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0232.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0232.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0232.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0232.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0232.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0232.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0232.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0232.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0232.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0232.944] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0232.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.945] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0232.945] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.945] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0232.945] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.945] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0232.945] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.945] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0232.945] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.946] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0232.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.946] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0232.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.946] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0232.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.946] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0232.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.947] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0232.947] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.947] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0232.947] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.947] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0232.947] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0232.948] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0232.948] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0232.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0232.948] Sleep (dwMilliseconds=0x64) [0233.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0233.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d81178, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d81178, ResultLength=0x0) returned 0xc0000004 [0233.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0233.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0233.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0233.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0233.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6a86cd0 [0233.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0233.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x50b4) returned 0x6a86cd0 [0233.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a86cd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6a86cd0, ResultLength=0x0) returned 0xc0000004 [0233.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a86cd0, Size=0x60d8) returned 0x6750aa0 [0233.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0233.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0233.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0233.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0233.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0233.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0233.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0233.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0233.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0233.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0233.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0233.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0233.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0233.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0233.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0233.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0233.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0233.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0233.512] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0233.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0233.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0233.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0233.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0233.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0233.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0233.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0233.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0233.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0233.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0233.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0233.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0233.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0233.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0233.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0233.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0233.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0233.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0233.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.515] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0233.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0233.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0233.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0233.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0233.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0233.517] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x142d0) returned 0x692bcd0 [0233.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0233.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0234.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0234.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0234.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0234.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0234.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0234.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0234.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0234.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0234.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0234.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0234.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0234.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.181] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0234.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.182] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0234.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0234.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0234.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0234.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.347] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0234.347] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.351] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0234.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.355] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0234.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.356] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0234.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0234.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0234.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0234.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0234.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0234.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0234.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0234.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0234.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0234.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0234.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0234.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0234.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0234.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0234.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0234.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0234.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0234.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0234.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0234.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0234.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0234.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0234.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0234.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0234.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0234.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0234.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0234.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0234.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0234.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0234.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0234.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0234.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0234.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.578] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0234.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0234.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0234.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0234.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0234.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.579] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0234.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.580] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0234.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0234.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0234.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0234.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.582] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0234.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0234.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0234.841] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0234.841] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0234.841] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0234.841] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0234.841] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0234.841] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.841] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0234.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0234.842] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0234.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.842] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0234.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0234.842] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0234.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.843] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0234.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.843] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0234.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.843] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0234.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.844] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0234.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.844] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0234.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.844] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0234.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.844] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0234.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.844] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0234.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.845] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0234.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.845] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0234.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0234.845] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0234.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0234.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0235.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0235.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0235.534] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0235.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0235.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0235.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0235.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0235.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0235.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0235.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0235.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0235.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0235.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x692bcd0 [0235.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x9144) returned 0x692bcd0 [0235.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xa168) returned 0x692bcd0 [0235.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xb18c) returned 0x692bcd0 [0235.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xc1b0) returned 0x692bcd0 [0235.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xd1d4) returned 0x692bcd0 [0235.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xe1f8) returned 0x692bcd0 [0235.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0xf21c) returned 0x692bcd0 [0235.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x10240) returned 0x692bcd0 [0235.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x11264) returned 0x692bcd0 [0235.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x12288) returned 0x692bcd0 [0235.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0xc0000004 [0235.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x692bcd0, Size=0x132ac) returned 0x692bcd0 [0235.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x692bcd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x692bcd0, ResultLength=0x0) returned 0x0 [0235.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0235.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0235.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0235.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0235.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0235.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0235.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0235.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0235.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0235.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0235.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0235.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0235.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0235.681] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x689bcd0 [0235.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x9144) returned 0x689bcd0 [0235.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xa168) returned 0x689bcd0 [0235.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xb18c) returned 0x689bcd0 [0235.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xc1b0) returned 0x689bcd0 [0235.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.682] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xd1d4) returned 0x689bcd0 [0235.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.683] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xe1f8) returned 0x689bcd0 [0235.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.683] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xf21c) returned 0x689bcd0 [0235.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.683] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x10240) returned 0x689bcd0 [0235.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.683] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x11264) returned 0x689bcd0 [0235.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0235.684] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x12288) returned 0x689bcd0 [0235.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0x0 [0235.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0236.085] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0236.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0236.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0236.086] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0236.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0236.086] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0236.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0236.086] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0236.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0236.086] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0236.086] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0236.086] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0236.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x689bcd0 [0236.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x9144) returned 0x689bcd0 [0236.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xa168) returned 0x689bcd0 [0236.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xb18c) returned 0x689bcd0 [0236.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.087] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xc1b0) returned 0x689bcd0 [0236.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.088] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xd1d4) returned 0x689bcd0 [0236.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.088] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xe1f8) returned 0x689bcd0 [0236.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.088] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xf21c) returned 0x689bcd0 [0236.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.088] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x10240) returned 0x689bcd0 [0236.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.088] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x11264) returned 0x689bcd0 [0236.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.089] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x12288) returned 0x689bcd0 [0236.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0x0 [0236.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0236.884] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0236.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0236.884] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0236.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0236.884] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0236.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0236.884] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0236.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0236.885] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0236.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0236.885] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0236.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0236.885] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x689bcd0 [0236.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x9144) returned 0x689bcd0 [0236.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xa168) returned 0x689bcd0 [0236.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.886] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xb18c) returned 0x689bcd0 [0236.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xc1b0) returned 0x689bcd0 [0236.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xd1d4) returned 0x689bcd0 [0236.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xe1f8) returned 0x689bcd0 [0236.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xf21c) returned 0x689bcd0 [0236.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x10240) returned 0x689bcd0 [0236.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x11264) returned 0x689bcd0 [0236.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0236.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x12288) returned 0x689bcd0 [0236.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0x0 [0236.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0237.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0237.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0237.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0237.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0237.041] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x6762aa0 [0237.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.041] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x50b4) returned 0x6762aa0 [0237.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.041] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6750aa0 [0237.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0237.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x70fc) returned 0x6750aa0 [0237.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6750aa0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6750aa0, ResultLength=0x0) returned 0xc0000004 [0237.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6750aa0, Size=0x8120) returned 0x689bcd0 [0237.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x9144) returned 0x689bcd0 [0237.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xa168) returned 0x689bcd0 [0237.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.042] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xb18c) returned 0x689bcd0 [0237.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.043] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xc1b0) returned 0x689bcd0 [0237.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.043] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xd1d4) returned 0x689bcd0 [0237.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.043] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xe1f8) returned 0x689bcd0 [0237.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0xf21c) returned 0x689bcd0 [0237.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x10240) returned 0x689bcd0 [0237.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x11264) returned 0x689bcd0 [0237.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0xc0000004 [0237.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x689bcd0, Size=0x12288) returned 0x689bcd0 [0237.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x689bcd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x689bcd0, ResultLength=0x0) returned 0x0 [0237.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0237.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0237.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0237.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0237.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0237.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0237.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0237.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0237.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0237.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0237.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.572] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0237.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0237.573] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.573] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6897cd0 [0237.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xb18c) returned 0x6897cd0 [0237.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xc1b0) returned 0x6897cd0 [0237.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.575] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xd1d4) returned 0x6897cd0 [0237.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xe1f8) returned 0x6897cd0 [0237.576] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xf21c) returned 0x6897cd0 [0237.576] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.576] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x10240) returned 0x6897cd0 [0237.576] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0237.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0237.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0237.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0237.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0237.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0237.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0237.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0237.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0237.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0237.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0237.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0237.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0237.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6897cd0 [0237.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xb18c) returned 0x6897cd0 [0237.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xc1b0) returned 0x6897cd0 [0237.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xd1d4) returned 0x6897cd0 [0237.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xe1f8) returned 0x6897cd0 [0237.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0xf21c) returned 0x6897cd0 [0237.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0xc0000004 [0237.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6897cd0, Size=0x10240) returned 0x6897cd0 [0237.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0237.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0237.786] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0237.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0237.786] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0237.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0237.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0237.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0237.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0237.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0237.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0237.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0237.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0237.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0237.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0237.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0237.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0237.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0237.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0237.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0237.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0237.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0237.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0237.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0237.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0237.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0237.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0237.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0237.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0237.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0237.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0237.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0237.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0237.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0238.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0238.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0238.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0238.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0238.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0238.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0238.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0238.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0238.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0238.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0238.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0238.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0238.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0238.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0238.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0238.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0238.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0238.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0238.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0238.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.040] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0238.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0238.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0238.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0238.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0238.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0238.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0238.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0238.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0238.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0238.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0238.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0238.190] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0238.190] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0238.190] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.191] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0238.191] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.191] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0238.192] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.192] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0238.192] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.192] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0238.192] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.192] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0238.192] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.193] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0238.193] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.193] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0238.193] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.194] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0238.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.194] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0238.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0238.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0238.370] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0238.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0238.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0238.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0238.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0238.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0238.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0238.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0238.371] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0238.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0238.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0238.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.372] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0238.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.373] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0238.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.373] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0238.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.373] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0238.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0238.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0238.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.374] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0238.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0238.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.375] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0238.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.376] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0238.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0238.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0238.557] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0238.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0238.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0238.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0238.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0238.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0238.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0238.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0238.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0238.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0238.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0238.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0238.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0238.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0238.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0238.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0238.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0238.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0238.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0238.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0238.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0238.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0238.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0238.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0238.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0238.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0238.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0238.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0238.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0238.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0238.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0238.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0238.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0238.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0238.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0238.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0238.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0238.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0238.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0238.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0238.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0238.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0238.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0238.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0238.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0238.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0238.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0238.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0238.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0238.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0238.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0239.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0239.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0239.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0239.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0239.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0239.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0239.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0239.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0239.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0239.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0239.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0239.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0239.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0239.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0239.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0239.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0239.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0239.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0239.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0239.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0239.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0239.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0239.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0239.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0239.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0239.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.050] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0239.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0239.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0239.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0239.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0239.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0239.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0239.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0239.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0239.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0239.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0239.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0239.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0239.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0239.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0239.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0239.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0239.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0239.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0239.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0239.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0239.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0239.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0239.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0239.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0239.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0239.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0239.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0239.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0239.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0239.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0239.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0239.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.003] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.003] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.004] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.004] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.004] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.009] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.009] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.152] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.152] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.152] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.153] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.154] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.155] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.155] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.155] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.156] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.156] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.278] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.279] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.279] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.279] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.280] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.280] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.280] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.280] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.281] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.281] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.282] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.392] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.394] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.395] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.396] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.509] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.615] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.616] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.720] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.721] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.721] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.721] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.722] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.723] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.724] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.725] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.726] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.832] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.832] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.833] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.833] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.833] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.834] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.834] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.834] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0240.948] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0240.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0240.949] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0240.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0240.949] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x66d66b8 [0240.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x66d66b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x66d66b8, ResultLength=0x0) returned 0xc0000004 [0240.949] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x66d66b8, Size=0x50b4) returned 0x6762aa0 [0240.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0240.950] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6877cd0 [0240.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.950] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x70fc) returned 0x6877cd0 [0240.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6877cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6877cd0, ResultLength=0x0) returned 0xc0000004 [0240.950] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6877cd0, Size=0x8120) returned 0x680fcd0 [0240.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0x9144) returned 0x680fcd0 [0240.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x680fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x680fcd0, ResultLength=0x0) returned 0xc0000004 [0240.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x680fcd0, Size=0xa168) returned 0x6a9ecd0 [0240.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0240.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0240.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0240.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xe1f8) returned 0x6a9ecd0 [0240.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xf21c) returned 0x6a9ecd0 [0240.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x10240) returned 0x6a9ecd0 [0240.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.954] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x11264) returned 0x6a9ecd0 [0240.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.954] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x12288) returned 0x6a9ecd0 [0240.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.954] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x132ac) returned 0x6a9ecd0 [0240.955] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0240.955] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0x142d0) returned 0x6897cd0 [0240.955] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6897cd0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x6897cd0, ResultLength=0x0) returned 0x0 [0240.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0241.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0241.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0241.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0241.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0241.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0241.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0241.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0241.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0241.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0241.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0241.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0241.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0241.821] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0241.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0241.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0241.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0241.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0241.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0241.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0241.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0241.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0241.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0241.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0241.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0241.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0242.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0242.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0242.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0242.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0242.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0242.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0242.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0242.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0242.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0242.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0242.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0242.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0242.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0242.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0242.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0242.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0242.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0242.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304aae0 [0242.535] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0242.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0242.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0242.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0242.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0242.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0242.536] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0242.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0242.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0242.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0242.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0242.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.537] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0242.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0242.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0242.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0242.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.539] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0242.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0242.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0242.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0242.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0242.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0242.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0242.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0242.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0242.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0242.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0242.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0242.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0242.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.640] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0242.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0242.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0242.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0242.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0242.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0242.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0242.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0242.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0242.752] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0242.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0242.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0242.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0242.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0242.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0242.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.753] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0242.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0242.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0242.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0242.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0242.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0242.754] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0242.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0242.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0243.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x674caa0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.475] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xb18c) returned 0x674caa0 [0243.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0243.608] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.608] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x6865450 [0243.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6865450, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6865450, ResultLength=0x0) returned 0xc0000004 [0243.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6865450, Size=0xb18c) returned 0x674caa0 [0243.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xc1b0) returned 0x674caa0 [0243.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0xc0000004 [0243.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x674caa0, Size=0xd1d4) returned 0x674caa0 [0243.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x674caa0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x674caa0, ResultLength=0x0) returned 0x0 [0243.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0243.747] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d81178, Size=0x2048) returned 0x13140060 [0243.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13140060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x13140060, ResultLength=0x0) returned 0xc0000004 [0243.747] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x13140060, Size=0x306c) returned 0x12f40060 [0243.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12f40060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x12f40060, ResultLength=0x0) returned 0xc0000004 [0243.747] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x12f40060, Size=0x4090) returned 0x3f29ec0 [0243.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f29ec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f29ec0, ResultLength=0x0) returned 0xc0000004 [0243.747] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f29ec0, Size=0x50b4) returned 0x6762aa0 [0243.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6762aa0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x6762aa0, ResultLength=0x0) returned 0xc0000004 [0243.748] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6762aa0, Size=0x60d8) returned 0x6a94cd0 [0243.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.748] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x70fc) returned 0x6a94cd0 [0243.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a94cd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x6a94cd0, ResultLength=0x0) returned 0xc0000004 [0243.748] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a94cd0, Size=0x8120) returned 0x694fcd0 [0243.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.748] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0x9144) returned 0x694fcd0 [0243.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x694fcd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x694fcd0, ResultLength=0x0) returned 0xc0000004 [0243.749] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x694fcd0, Size=0xa168) returned 0x6a9ecd0 [0243.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.749] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xb18c) returned 0x6a9ecd0 [0243.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.749] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xc1b0) returned 0x6a9ecd0 [0243.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0xc0000004 [0243.749] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x6a9ecd0, Size=0xd1d4) returned 0x6a9ecd0 [0243.750] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x6a9ecd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x6a9ecd0, ResultLength=0x0) returned 0x0 [0243.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x304ac40 [0263.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e780) returned 1 [0263.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3f1e780 [0267.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1eaa0) returned 1 [0267.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f1eaa0 Thread: id = 103 os_tid = 0x850 Thread: id = 105 os_tid = 0x880 [0131.390] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x102 [0131.390] Sleep (dwMilliseconds=0x1) [0131.423] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x0 [0131.423] CloseHandle (hObject=0xb28) returned 1 [0131.423] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x0 [0131.423] CloseHandle (hObject=0xe8c) returned 1 [0131.423] WaitForSingleObject (hHandle=0xe90, dwMilliseconds=0x0) returned 0x102 [0131.423] WaitForSingleObject (hHandle=0x934, dwMilliseconds=0x0) returned 0x102 [0131.423] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0x0) returned 0x102 [0131.424] WaitForSingleObject (hHandle=0xf38, dwMilliseconds=0x0) returned 0x102 [0131.424] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x102 [0131.424] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0x0) returned 0x102 [0131.424] Sleep (dwMilliseconds=0x1) [0131.533] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x102 [0131.533] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0x0) returned 0x102 [0131.533] WaitForSingleObject (hHandle=0xe90, dwMilliseconds=0x0) returned 0x0 [0131.533] CloseHandle (hObject=0xe90) returned 1 [0131.533] WaitForSingleObject (hHandle=0x934, dwMilliseconds=0x0) returned 0x0 [0131.533] CloseHandle (hObject=0x934) returned 1 [0131.534] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0x0) returned 0x0 [0131.534] CloseHandle (hObject=0x650) returned 1 [0131.534] WaitForSingleObject (hHandle=0xf38, dwMilliseconds=0x0) returned 0x102 [0131.534] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x0 [0131.534] CloseHandle (hObject=0xb88) returned 1 [0131.534] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0x0) returned 0x0 [0131.534] CloseHandle (hObject=0x550) returned 1 [0131.534] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x102 [0131.534] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x102 [0131.534] WaitForSingleObject (hHandle=0xb38, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xaf0, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb4c, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xae8, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0131.535] WaitForSingleObject (hHandle=0xae0, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb3c, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x102 [0131.536] WaitForSingleObject (hHandle=0xb04, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x558, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x644, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x278, dwMilliseconds=0x0) returned 0x102 [0131.537] WaitForSingleObject (hHandle=0x668, dwMilliseconds=0x0) returned 0x102 [0131.538] Sleep (dwMilliseconds=0x1) [0133.017] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x0 [0133.017] CloseHandle (hObject=0xb28) returned 1 [0133.017] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0x0) returned 0x0 [0133.017] CloseHandle (hObject=0xb50) returned 1 [0133.017] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x102 [0133.017] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0x0) returned 0x102 [0133.017] WaitForSingleObject (hHandle=0x934, dwMilliseconds=0x0) returned 0x102 [0133.017] WaitForSingleObject (hHandle=0xf38, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xf38) returned 1 [0133.018] WaitForSingleObject (hHandle=0xe90, dwMilliseconds=0x0) returned 0x102 [0133.018] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x102 [0133.018] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xb48) returned 1 [0133.018] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xb40) returned 1 [0133.018] WaitForSingleObject (hHandle=0xb38, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xb38) returned 1 [0133.018] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xb30) returned 1 [0133.018] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x0 [0133.018] CloseHandle (hObject=0xb08) returned 1 [0133.019] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xb24) returned 1 [0133.019] WaitForSingleObject (hHandle=0xaf0, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xaf0) returned 1 [0133.019] WaitForSingleObject (hHandle=0xb4c, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xb4c) returned 1 [0133.019] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xb20) returned 1 [0133.019] WaitForSingleObject (hHandle=0xae8, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xae8) returned 1 [0133.019] WaitForSingleObject (hHandle=0xb44, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xb44) returned 1 [0133.019] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x0 [0133.019] CloseHandle (hObject=0xb1c) returned 1 [0133.019] WaitForSingleObject (hHandle=0xae0, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0xae0) returned 1 [0133.020] WaitForSingleObject (hHandle=0xb3c, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0xb3c) returned 1 [0133.020] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0133.020] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0xad8) returned 1 [0133.020] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0xb34) returned 1 [0133.020] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0xb14) returned 1 [0133.020] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x0 [0133.020] CloseHandle (hObject=0x74c) returned 1 [0133.021] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0133.021] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x102 [0133.021] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x0 [0133.021] CloseHandle (hObject=0xb0c) returned 1 [0133.021] WaitForSingleObject (hHandle=0xb04, dwMilliseconds=0x0) returned 0x0 [0133.021] CloseHandle (hObject=0xb04) returned 1 [0133.021] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0x0) returned 0x0 [0133.021] CloseHandle (hObject=0x660) returned 1 [0133.021] WaitForSingleObject (hHandle=0x558, dwMilliseconds=0x0) returned 0x102 [0133.021] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x0 [0133.021] CloseHandle (hObject=0x67c) returned 1 [0133.021] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0133.021] CloseHandle (hObject=0x3a8) returned 1 [0133.021] WaitForSingleObject (hHandle=0x644, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x0 [0133.022] CloseHandle (hObject=0x674) returned 1 [0133.022] WaitForSingleObject (hHandle=0x278, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x668, dwMilliseconds=0x0) returned 0x0 [0133.022] CloseHandle (hObject=0x668) returned 1 [0133.022] WaitForSingleObject (hHandle=0x66c, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x0 [0133.022] CloseHandle (hObject=0x484) returned 1 [0133.022] WaitForSingleObject (hHandle=0x664, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x634, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x64c, dwMilliseconds=0x0) returned 0x102 [0133.022] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0x640, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0x670, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0x910, dwMilliseconds=0x0) returned 0x0 [0133.023] CloseHandle (hObject=0x910) returned 1 [0133.023] WaitForSingleObject (hHandle=0x948, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x0 [0133.023] CloseHandle (hObject=0xad0) returned 1 [0133.023] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x102 [0133.023] WaitForSingleObject (hHandle=0xaf4, dwMilliseconds=0x0) returned 0x0 [0133.023] CloseHandle (hObject=0xaf4) returned 1 [0133.023] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x0 [0133.023] CloseHandle (hObject=0xac8) returned 1 [0133.023] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0x270) returned 1 [0133.024] WaitForSingleObject (hHandle=0xaec, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0xaec) returned 1 [0133.024] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0xac4) returned 1 [0133.024] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x102 [0133.024] WaitForSingleObject (hHandle=0xae4, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0xae4) returned 1 [0133.024] WaitForSingleObject (hHandle=0xac0, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0xac0) returned 1 [0133.024] WaitForSingleObject (hHandle=0x648, dwMilliseconds=0x0) returned 0x0 [0133.024] CloseHandle (hObject=0x648) returned 1 [0133.025] WaitForSingleObject (hHandle=0xadc, dwMilliseconds=0x0) returned 0x0 [0133.025] CloseHandle (hObject=0xadc) returned 1 [0133.025] WaitForSingleObject (hHandle=0x944, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0xab8, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x84c, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102 [0133.025] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x13ac, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x13a0, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1384, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1398, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x137c, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1390, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1394, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1388, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1368, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1380, dwMilliseconds=0x0) returned 0x102 [0133.026] WaitForSingleObject (hHandle=0x1350, dwMilliseconds=0x0) returned 0x102 [0133.027] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x598) returned 1 [0133.027] WaitForSingleObject (hHandle=0x1378, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x1378) returned 1 [0133.027] WaitForSingleObject (hHandle=0x13b8, dwMilliseconds=0x0) returned 0x102 [0133.027] WaitForSingleObject (hHandle=0x13b0, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x13b0) returned 1 [0133.027] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0x0) returned 0x102 [0133.027] WaitForSingleObject (hHandle=0x136c, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x136c) returned 1 [0133.027] WaitForSingleObject (hHandle=0x1370, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x1370) returned 1 [0133.027] WaitForSingleObject (hHandle=0x1374, dwMilliseconds=0x0) returned 0x0 [0133.027] CloseHandle (hObject=0x1374) returned 1 [0133.028] WaitForSingleObject (hHandle=0x1364, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x1364) returned 1 [0133.028] WaitForSingleObject (hHandle=0x1360, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x1360) returned 1 [0133.028] WaitForSingleObject (hHandle=0x1358, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x1358) returned 1 [0133.028] WaitForSingleObject (hHandle=0x1354, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x1354) returned 1 [0133.028] WaitForSingleObject (hHandle=0x135c, dwMilliseconds=0x0) returned 0x102 [0133.028] WaitForSingleObject (hHandle=0x134c, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x134c) returned 1 [0133.028] WaitForSingleObject (hHandle=0x1348, dwMilliseconds=0x0) returned 0x102 [0133.028] WaitForSingleObject (hHandle=0x133c, dwMilliseconds=0x0) returned 0x0 [0133.028] CloseHandle (hObject=0x133c) returned 1 [0133.029] WaitForSingleObject (hHandle=0x1344, dwMilliseconds=0x0) returned 0x0 [0133.029] CloseHandle (hObject=0x1344) returned 1 [0133.029] WaitForSingleObject (hHandle=0x1340, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x1330, dwMilliseconds=0x0) returned 0x0 [0133.029] CloseHandle (hObject=0x1330) returned 1 [0133.029] WaitForSingleObject (hHandle=0x1334, dwMilliseconds=0x0) returned 0x0 [0133.029] CloseHandle (hObject=0x1334) returned 1 [0133.029] WaitForSingleObject (hHandle=0x1338, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x1320, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x1324, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x12f8, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x1328, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x131c, dwMilliseconds=0x0) returned 0x102 [0133.029] WaitForSingleObject (hHandle=0x1310, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x1310) returned 1 [0133.030] WaitForSingleObject (hHandle=0x130c, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x130c) returned 1 [0133.030] WaitForSingleObject (hHandle=0x1308, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x1308) returned 1 [0133.030] WaitForSingleObject (hHandle=0x12fc, dwMilliseconds=0x0) returned 0x102 [0133.030] WaitForSingleObject (hHandle=0x1300, dwMilliseconds=0x0) returned 0x102 [0133.030] WaitForSingleObject (hHandle=0x12f4, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x12f4) returned 1 [0133.030] WaitForSingleObject (hHandle=0x12ec, dwMilliseconds=0x0) returned 0x102 [0133.030] WaitForSingleObject (hHandle=0x1274, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x1274) returned 1 [0133.030] WaitForSingleObject (hHandle=0x12f0, dwMilliseconds=0x0) returned 0x0 [0133.030] CloseHandle (hObject=0x12f0) returned 1 [0133.031] WaitForSingleObject (hHandle=0x12cc, dwMilliseconds=0x0) returned 0x102 [0133.031] WaitForSingleObject (hHandle=0x12e8, dwMilliseconds=0x0) returned 0x0 [0133.031] CloseHandle (hObject=0x12e8) returned 1 [0133.031] WaitForSingleObject (hHandle=0x12dc, dwMilliseconds=0x0) returned 0x0 [0133.031] CloseHandle (hObject=0x12dc) returned 1 [0133.031] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x0 [0133.031] CloseHandle (hObject=0x12e0) returned 1 [0133.031] WaitForSingleObject (hHandle=0x12e4, dwMilliseconds=0x0) returned 0x0 [0133.031] CloseHandle (hObject=0x12e4) returned 1 [0133.031] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x0 [0133.031] CloseHandle (hObject=0x12d8) returned 1 [0133.032] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x0 [0133.032] CloseHandle (hObject=0x12b8) returned 1 [0133.032] WaitForSingleObject (hHandle=0x12d0, dwMilliseconds=0x0) returned 0x102 [0133.032] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x0 [0133.032] CloseHandle (hObject=0x12d4) returned 1 [0133.032] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x0 [0133.032] CloseHandle (hObject=0x12c8) returned 1 [0133.032] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x0 [0133.032] CloseHandle (hObject=0x12a0) returned 1 [0133.032] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x102 [0133.032] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x0 [0133.032] CloseHandle (hObject=0x1298) returned 1 [0133.033] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x0 [0133.033] CloseHandle (hObject=0x129c) returned 1 [0133.033] WaitForSingleObject (hHandle=0x1290, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x1294, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x1288, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x1284, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x10f4, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x126c, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x1278, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x127c, dwMilliseconds=0x0) returned 0x102 [0133.033] WaitForSingleObject (hHandle=0x125c, dwMilliseconds=0x0) returned 0x102 [0133.034] WaitForSingleObject (hHandle=0x1240, dwMilliseconds=0x0) returned 0x102 [0133.034] WaitForSingleObject (hHandle=0x1258, dwMilliseconds=0x0) returned 0x102 [0133.034] WaitForSingleObject (hHandle=0x1264, dwMilliseconds=0x0) returned 0x102 [0133.034] WaitForSingleObject (hHandle=0x1270, dwMilliseconds=0x0) returned 0x102 [0133.034] WaitForSingleObject (hHandle=0x1260, dwMilliseconds=0x0) returned 0x0 [0133.034] CloseHandle (hObject=0x1260) returned 1 [0133.034] WaitForSingleObject (hHandle=0x1268, dwMilliseconds=0x0) returned 0x0 [0133.034] CloseHandle (hObject=0x1268) returned 1 [0133.034] WaitForSingleObject (hHandle=0x1250, dwMilliseconds=0x0) returned 0x0 [0133.034] CloseHandle (hObject=0x1250) returned 1 [0133.035] WaitForSingleObject (hHandle=0x1304, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1248, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x123c, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1228, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1318, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1254, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1244, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x122c, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1230, dwMilliseconds=0x0) returned 0x102 [0133.035] WaitForSingleObject (hHandle=0x1234, dwMilliseconds=0x0) returned 0x102 [0133.036] WaitForSingleObject (hHandle=0x1220, dwMilliseconds=0x0) returned 0x102 [0133.036] WaitForSingleObject (hHandle=0x1210, dwMilliseconds=0x0) returned 0x102 [0133.036] WaitForSingleObject (hHandle=0x1218, dwMilliseconds=0x0) returned 0x102 [0133.036] WaitForSingleObject (hHandle=0x1200, dwMilliseconds=0x0) returned 0x102 [0133.036] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x0 [0133.036] CloseHandle (hObject=0x11f0) returned 1 [0133.036] WaitForSingleObject (hHandle=0x1204, dwMilliseconds=0x0) returned 0x0 [0133.036] CloseHandle (hObject=0x1204) returned 1 [0133.036] WaitForSingleObject (hHandle=0x11f8, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x11e8, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x119c, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x132c, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x13c8, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x1198, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x1190, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x718, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x6b4, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x700, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x1178, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x5d4, dwMilliseconds=0x0) returned 0x102 [0133.037] WaitForSingleObject (hHandle=0x1184, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1180, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x13a8, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1164, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1118, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1168, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x113c, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1144, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1130, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1158, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1160, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x5ec, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1154, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x112c, dwMilliseconds=0x0) returned 0x102 [0133.038] WaitForSingleObject (hHandle=0x1120, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x750, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x12a8, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x11f4, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1124, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x111c, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1110, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1138, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1128, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x76c, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1104, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x1108, dwMilliseconds=0x0) returned 0x102 [0133.039] WaitForSingleObject (hHandle=0x10ec, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x11e4, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x1314, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x110c, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x1100, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x10e0, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x10f8, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x10fc, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x10f0, dwMilliseconds=0x0) returned 0x102 [0133.040] WaitForSingleObject (hHandle=0x10e8, dwMilliseconds=0x0) returned 0x102 [0133.040] Sleep (dwMilliseconds=0x1) [0133.127] WaitForSingleObject (hHandle=0x1204, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x934, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0xe90, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0xe8c, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x1250, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x1268, dwMilliseconds=0x0) returned 0x102 [0133.127] WaitForSingleObject (hHandle=0x1260, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x11d4, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x11d8, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x11cc, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0133.128] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x102 [0133.129] WaitForSingleObject (hHandle=0x12e4, dwMilliseconds=0x0) returned 0x102 [0133.129] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x102 [0133.129] CloseHandle (hObject=0x3cc) returned 1 [0133.129] CloseHandle (hObject=0x664) returned 1 [0133.129] CloseHandle (hObject=0x634) returned 1 [0133.129] CloseHandle (hObject=0x550) returned 1 [0133.129] CloseHandle (hObject=0x12ec) returned 1 [0133.129] CloseHandle (hObject=0x1280) returned 1 [0133.130] CloseHandle (hObject=0x1288) returned 1 [0133.130] CloseHandle (hObject=0x1284) returned 1 [0133.130] CloseHandle (hObject=0x10f4) returned 1 [0133.130] CloseHandle (hObject=0x126c) returned 1 [0135.477] CloseHandle (hObject=0x650) returned 1 [0135.477] CloseHandle (hObject=0x934) returned 1 [0135.477] CloseHandle (hObject=0x11f0) returned 1 [0135.477] CloseHandle (hObject=0xe90) returned 1 [0135.477] CloseHandle (hObject=0x1268) returned 1 [0135.477] CloseHandle (hObject=0x1260) returned 1 [0135.477] CloseHandle (hObject=0x129c) returned 1 [0135.477] CloseHandle (hObject=0x1298) returned 1 [0135.477] CloseHandle (hObject=0x12a0) returned 1 [0135.477] CloseHandle (hObject=0x12c8) returned 1 [0135.478] CloseHandle (hObject=0x55c) returned 1 [0135.478] CloseHandle (hObject=0x12d4) returned 1 [0135.478] CloseHandle (hObject=0x12b8) returned 1 [0135.478] CloseHandle (hObject=0x11e0) returned 1 [0135.478] CloseHandle (hObject=0x11d8) returned 1 [0135.478] CloseHandle (hObject=0x11cc) returned 1 [0135.478] CloseHandle (hObject=0xb18) returned 1 [0135.478] CloseHandle (hObject=0x12d8) returned 1 [0135.478] CloseHandle (hObject=0x12e4) returned 1 [0135.478] CloseHandle (hObject=0x12e0) returned 1 [0135.479] CloseHandle (hObject=0x11d0) returned 1 [0135.479] CloseHandle (hObject=0xb2c) returned 1 [0135.479] CloseHandle (hObject=0x12dc) returned 1 [0135.479] CloseHandle (hObject=0x12e8) returned 1 [0135.479] CloseHandle (hObject=0x13bc) returned 1 [0135.479] CloseHandle (hObject=0x558) returned 1 [0135.479] CloseHandle (hObject=0x644) returned 1 [0135.479] CloseHandle (hObject=0x126c) returned 1 [0135.479] CloseHandle (hObject=0x10f4) returned 1 [0135.479] CloseHandle (hObject=0x13c4) returned 1 [0135.480] CloseHandle (hObject=0x64c) returned 1 [0135.480] CloseHandle (hObject=0x948) returned 1 [0135.480] CloseHandle (hObject=0xacc) returned 1 [0135.480] CloseHandle (hObject=0x8c0) returned 1 [0135.480] CloseHandle (hObject=0x944) returned 1 [0135.480] CloseHandle (hObject=0x84c) returned 1 [0135.480] CloseHandle (hObject=0x744) returned 1 [0135.480] CloseHandle (hObject=0x57c) returned 1 [0135.480] CloseHandle (hObject=0x578) returned 1 [0135.480] CloseHandle (hObject=0x5ac) returned 1 [0135.481] CloseHandle (hObject=0x5b0) returned 1 [0135.481] CloseHandle (hObject=0x574) returned 1 [0135.481] CloseHandle (hObject=0x5a0) returned 1 [0135.481] CloseHandle (hObject=0x5a4) returned 1 [0135.481] CloseHandle (hObject=0x570) returned 1 [0135.481] CloseHandle (hObject=0x13ac) returned 1 [0135.481] CloseHandle (hObject=0x13a0) returned 1 [0135.481] CloseHandle (hObject=0x1384) returned 1 [0135.481] CloseHandle (hObject=0x137c) returned 1 [0135.481] CloseHandle (hObject=0x1310) returned 1 [0135.481] CloseHandle (hObject=0x135c) returned 1 [0135.481] CloseHandle (hObject=0x10d8) returned 1 [0135.482] CloseHandle (hObject=0x1348) returned 1 [0135.482] CloseHandle (hObject=0x10dc) returned 1 [0135.482] CloseHandle (hObject=0x1340) returned 1 [0135.482] CloseHandle (hObject=0x1338) returned 1 [0135.482] CloseHandle (hObject=0x1320) returned 1 [0135.482] CloseHandle (hObject=0x1324) returned 1 [0135.482] CloseHandle (hObject=0x12f8) returned 1 [0135.482] CloseHandle (hObject=0x1328) returned 1 [0135.482] CloseHandle (hObject=0x131c) returned 1 [0135.482] CloseHandle (hObject=0x1290) returned 1 [0135.482] CloseHandle (hObject=0x1294) returned 1 [0135.482] CloseHandle (hObject=0x568) returned 1 [0135.483] CloseHandle (hObject=0x127c) returned 1 [0135.483] CloseHandle (hObject=0x125c) returned 1 [0135.483] CloseHandle (hObject=0x1240) returned 1 [0135.483] CloseHandle (hObject=0x1258) returned 1 [0135.483] CloseHandle (hObject=0x1264) returned 1 [0135.483] CloseHandle (hObject=0x1270) returned 1 [0135.483] CloseHandle (hObject=0x123c) returned 1 [0135.483] CloseHandle (hObject=0x1254) returned 1 [0135.483] CloseHandle (hObject=0x1230) returned 1 [0135.483] CloseHandle (hObject=0x11f8) returned 1 [0135.483] CloseHandle (hObject=0x11e8) returned 1 [0135.484] CloseHandle (hObject=0x132c) returned 1 [0135.484] CloseHandle (hObject=0x13c8) returned 1 [0135.484] CloseHandle (hObject=0x1198) returned 1 [0135.484] CloseHandle (hObject=0x1190) returned 1 [0135.484] CloseHandle (hObject=0x718) returned 1 [0135.484] CloseHandle (hObject=0x6b4) returned 1 [0135.484] CloseHandle (hObject=0x700) returned 1 [0135.484] CloseHandle (hObject=0x1194) returned 1 [0135.484] CloseHandle (hObject=0x1178) returned 1 [0135.484] CloseHandle (hObject=0x5d4) returned 1 [0135.484] CloseHandle (hObject=0x1184) returned 1 [0135.484] CloseHandle (hObject=0x1180) returned 1 [0135.484] CloseHandle (hObject=0x1158) returned 1 [0135.485] CloseHandle (hObject=0x3ec) returned 1 [0135.485] CloseHandle (hObject=0x1124) returned 1 [0135.485] CloseHandle (hObject=0x111c) returned 1 [0135.485] CloseHandle (hObject=0x1110) returned 1 [0135.485] CloseHandle (hObject=0x76c) returned 1 [0135.485] CloseHandle (hObject=0x3e8) returned 1 [0135.485] CloseHandle (hObject=0x10ec) returned 1 [0135.485] CloseHandle (hObject=0x11e4) returned 1 [0135.485] CloseHandle (hObject=0x1314) returned 1 [0135.485] CloseHandle (hObject=0x110c) returned 1 [0135.485] CloseHandle (hObject=0x1100) returned 1 [0135.485] CloseHandle (hObject=0xfa4) returned 1 [0135.485] CloseHandle (hObject=0x484) returned 1 [0135.486] CloseHandle (hObject=0xaf0) returned 1 [0135.486] CloseHandle (hObject=0xb4c) returned 1 [0135.486] CloseHandle (hObject=0xb24) returned 1 [0135.486] CloseHandle (hObject=0xfa8) returned 1 [0135.486] CloseHandle (hObject=0x588) returned 1 [0135.486] CloseHandle (hObject=0x10e4) returned 1 [0135.486] CloseHandle (hObject=0xf88) returned 1 [0135.486] CloseHandle (hObject=0xf24) returned 1 [0135.486] CloseHandle (hObject=0x1058) returned 1 [0135.486] CloseHandle (hObject=0xfe8) returned 1 [0135.486] CloseHandle (hObject=0x1038) returned 1 [0135.486] CloseHandle (hObject=0xf20) returned 1 [0135.486] CloseHandle (hObject=0x1040) returned 1 [0135.487] CloseHandle (hObject=0x103c) returned 1 [0135.487] CloseHandle (hObject=0x1034) returned 1 [0135.487] CloseHandle (hObject=0xb20) returned 1 [0135.487] CloseHandle (hObject=0xee8) returned 1 [0135.487] CloseHandle (hObject=0x10ac) returned 1 [0135.487] CloseHandle (hObject=0x106c) returned 1 [0141.328] CloseHandle (hObject=0x1204) returned 1 [0141.328] CloseHandle (hObject=0xb88) returned 1 [0141.328] CloseHandle (hObject=0x106c) returned 1 [0141.328] CloseHandle (hObject=0x10ac) returned 1 [0141.328] CloseHandle (hObject=0xee8) returned 1 [0141.329] CloseHandle (hObject=0xe8c) returned 1 [0141.329] CloseHandle (hObject=0x1364) returned 1 [0141.329] CloseHandle (hObject=0xb20) returned 1 [0141.329] CloseHandle (hObject=0x1034) returned 1 [0141.329] CloseHandle (hObject=0x103c) returned 1 [0141.329] CloseHandle (hObject=0xadc) returned 1 [0141.329] CloseHandle (hObject=0x1070) returned 1 [0141.329] CloseHandle (hObject=0x1074) returned 1 [0141.329] CloseHandle (hObject=0x1040) returned 1 [0141.329] CloseHandle (hObject=0xf20) returned 1 [0141.329] CloseHandle (hObject=0x1038) returned 1 [0141.330] CloseHandle (hObject=0x11d4) returned 1 [0141.330] CloseHandle (hObject=0xfe8) returned 1 [0141.330] CloseHandle (hObject=0x1058) returned 1 [0141.330] CloseHandle (hObject=0xf24) returned 1 [0141.330] CloseHandle (hObject=0xf88) returned 1 [0141.330] CloseHandle (hObject=0x10e4) returned 1 [0141.330] CloseHandle (hObject=0x588) returned 1 [0141.330] CloseHandle (hObject=0xfa8) returned 1 [0141.330] CloseHandle (hObject=0xb14) returned 1 [0141.330] CloseHandle (hObject=0xfec) returned 1 [0141.331] CloseHandle (hObject=0x74c) returned 1 [0141.331] CloseHandle (hObject=0xb34) returned 1 [0141.331] CloseHandle (hObject=0xb24) returned 1 [0141.331] CloseHandle (hObject=0x12f0) returned 1 [0141.331] CloseHandle (hObject=0x1274) returned 1 [0141.331] CloseHandle (hObject=0xb4c) returned 1 [0141.331] CloseHandle (hObject=0x278) returned 1 [0141.331] CloseHandle (hObject=0x66c) returned 1 [0141.331] CloseHandle (hObject=0xaf0) returned 1 [0141.331] CloseHandle (hObject=0x484) returned 1 [0141.332] CloseHandle (hObject=0xfa4) returned 1 [0141.332] CloseHandle (hObject=0x13a4) returned 1 [0141.332] CloseHandle (hObject=0x1100) returned 1 [0141.332] CloseHandle (hObject=0x640) returned 1 [0141.332] CloseHandle (hObject=0x1284) returned 1 [0141.332] CloseHandle (hObject=0x110c) returned 1 [0141.332] CloseHandle (hObject=0x1288) returned 1 [0141.332] CloseHandle (hObject=0x1314) returned 1 [0141.332] CloseHandle (hObject=0x1280) returned 1 [0141.333] CloseHandle (hObject=0x12ec) returned 1 [0141.333] CloseHandle (hObject=0x550) returned 1 [0141.333] CloseHandle (hObject=0x634) returned 1 [0141.333] CloseHandle (hObject=0x11e4) returned 1 [0141.333] CloseHandle (hObject=0x3cc) returned 1 [0141.333] CloseHandle (hObject=0x560) returned 1 [0141.333] CloseHandle (hObject=0x1308) returned 1 [0141.333] CloseHandle (hObject=0x130c) returned 1 [0141.333] CloseHandle (hObject=0x12a4) returned 1 [0141.333] CloseHandle (hObject=0x1050) returned 1 [0141.334] CloseHandle (hObject=0x10ec) returned 1 [0141.334] CloseHandle (hObject=0x3e8) returned 1 [0141.334] CloseHandle (hObject=0x1024) returned 1 [0141.334] CloseHandle (hObject=0x76c) returned 1 [0141.334] CloseHandle (hObject=0x1110) returned 1 [0141.334] CloseHandle (hObject=0x111c) returned 1 [0141.334] CloseHandle (hObject=0x1124) returned 1 [0141.334] CloseHandle (hObject=0x3ec) returned 1 [0141.334] CloseHandle (hObject=0x1158) returned 1 [0141.335] CloseHandle (hObject=0x594) returned 1 [0141.335] CloseHandle (hObject=0xe10) returned 1 [0141.335] CloseHandle (hObject=0xde8) returned 1 [0141.335] CloseHandle (hObject=0xdd8) returned 1 [0141.335] CloseHandle (hObject=0x1398) returned 1 [0141.335] CloseHandle (hObject=0x1390) returned 1 [0141.335] CloseHandle (hObject=0x1394) returned 1 [0141.335] CloseHandle (hObject=0x1388) returned 1 [0141.336] CloseHandle (hObject=0x1368) returned 1 [0141.336] CloseHandle (hObject=0x1350) returned 1 [0141.336] CloseHandle (hObject=0x1334) returned 1 [0141.336] CloseHandle (hObject=0x13b8) returned 1 [0141.336] CloseHandle (hObject=0x133c) returned 1 [0141.336] CloseHandle (hObject=0x1354) returned 1 [0141.336] CloseHandle (hObject=0x10d4) returned 1 [0141.336] CloseHandle (hObject=0x11a4) returned 1 [0141.336] CloseHandle (hObject=0x11dc) returned 1 [0141.337] CloseHandle (hObject=0x10cc) returned 1 [0141.337] CloseHandle (hObject=0x11bc) returned 1 [0141.337] CloseHandle (hObject=0x10d0) returned 1 [0141.337] CloseHandle (hObject=0x1098) returned 1 [0141.337] CloseHandle (hObject=0x10c8) returned 1 [0141.337] CloseHandle (hObject=0x10a8) returned 1 [0141.337] CloseHandle (hObject=0x10c0) returned 1 [0141.337] CloseHandle (hObject=0x12fc) returned 1 [0141.337] CloseHandle (hObject=0x1300) returned 1 [0141.337] CloseHandle (hObject=0x10c4) returned 1 [0141.338] CloseHandle (hObject=0x10b8) returned 1 [0141.338] CloseHandle (hObject=0x10bc) returned 1 [0141.338] CloseHandle (hObject=0x10b0) returned 1 [0141.338] CloseHandle (hObject=0x12cc) returned 1 [0141.338] CloseHandle (hObject=0x10b4) returned 1 [0141.338] CloseHandle (hObject=0x10a0) returned 1 [0141.338] CloseHandle (hObject=0x1090) returned 1 [0141.338] CloseHandle (hObject=0x1088) returned 1 [0141.338] CloseHandle (hObject=0x10a4) returned 1 [0141.338] CloseHandle (hObject=0x109c) returned 1 [0141.338] CloseHandle (hObject=0x12d0) returned 1 [0141.339] CloseHandle (hObject=0x108c) returned 1 [0141.339] CloseHandle (hObject=0x1094) returned 1 [0141.339] CloseHandle (hObject=0x1084) returned 1 [0141.339] CloseHandle (hObject=0x1080) returned 1 [0141.339] CloseHandle (hObject=0xfc4) returned 1 [0141.339] CloseHandle (hObject=0xae4) returned 1 [0141.339] CloseHandle (hObject=0xfc0) returned 1 [0141.339] CloseHandle (hObject=0xfbc) returned 1 [0141.339] CloseHandle (hObject=0xfb8) returned 1 [0141.339] CloseHandle (hObject=0x1278) returned 1 [0141.340] CloseHandle (hObject=0xf8c) returned 1 [0141.340] CloseHandle (hObject=0xf80) returned 1 [0141.340] CloseHandle (hObject=0xfb0) returned 1 [0141.340] CloseHandle (hObject=0x1304) returned 1 [0141.340] CloseHandle (hObject=0x674) returned 1 [0141.340] CloseHandle (hObject=0x1228) returned 1 [0141.340] CloseHandle (hObject=0x1318) returned 1 [0141.340] CloseHandle (hObject=0x124c) returned 1 [0141.340] CloseHandle (hObject=0x11a0) returned 1 [0141.340] CloseHandle (hObject=0x1244) returned 1 [0141.341] CloseHandle (hObject=0x122c) returned 1 [0141.341] CloseHandle (hObject=0x668) returned 1 [0141.341] CloseHandle (hObject=0x1234) returned 1 [0141.341] CloseHandle (hObject=0x1220) returned 1 [0141.341] CloseHandle (hObject=0x1210) returned 1 [0141.341] CloseHandle (hObject=0x1218) returned 1 [0141.341] CloseHandle (hObject=0x1200) returned 1 [0141.341] CloseHandle (hObject=0xf9c) returned 1 [0141.341] CloseHandle (hObject=0x118c) returned 1 [0141.343] CloseHandle (hObject=0xfcc) returned 1 [0141.343] CloseHandle (hObject=0xfd4) returned 1 [0141.343] CloseHandle (hObject=0xfd0) returned 1 [0141.343] CloseHandle (hObject=0xfd8) returned 1 [0141.343] CloseHandle (hObject=0xff8) returned 1 [0141.343] CloseHandle (hObject=0x4bc) returned 1 [0141.343] CloseHandle (hObject=0x4ac) returned 1 [0141.343] CloseHandle (hObject=0xfe0) returned 1 [0141.343] CloseHandle (hObject=0xac8) returned 1 [0141.344] CloseHandle (hObject=0xaf4) returned 1 [0141.344] CloseHandle (hObject=0x270) returned 1 [0141.344] CloseHandle (hObject=0x11ac) returned 1 [0141.344] CloseHandle (hObject=0x13a8) returned 1 [0141.344] CloseHandle (hObject=0x1164) returned 1 [0141.344] CloseHandle (hObject=0x1118) returned 1 [0141.344] CloseHandle (hObject=0x1168) returned 1 [0141.344] CloseHandle (hObject=0x113c) returned 1 [0141.345] CloseHandle (hObject=0x1144) returned 1 [0141.345] CloseHandle (hObject=0x1130) returned 1 [0141.345] CloseHandle (hObject=0x116c) returned 1 [0141.345] CloseHandle (hObject=0x1160) returned 1 [0141.345] CloseHandle (hObject=0x5ec) returned 1 [0141.345] CloseHandle (hObject=0x1154) returned 1 [0141.345] CloseHandle (hObject=0x112c) returned 1 [0141.345] CloseHandle (hObject=0x1120) returned 1 [0141.345] CloseHandle (hObject=0x750) returned 1 [0141.346] CloseHandle (hObject=0x11f4) returned 1 [0141.346] CloseHandle (hObject=0x125c) returned 1 [0141.346] CloseHandle (hObject=0x127c) returned 1 [0141.346] CloseHandle (hObject=0x568) returned 1 [0141.346] CloseHandle (hObject=0x1294) returned 1 [0141.346] CloseHandle (hObject=0x1290) returned 1 [0141.346] CloseHandle (hObject=0x1104) returned 1 [0141.346] CloseHandle (hObject=0x131c) returned 1 [0141.346] CloseHandle (hObject=0x1108) returned 1 [0141.346] CloseHandle (hObject=0x1328) returned 1 [0141.347] CloseHandle (hObject=0x12f8) returned 1 [0141.347] CloseHandle (hObject=0x1324) returned 1 [0141.347] CloseHandle (hObject=0x1320) returned 1 [0141.347] CloseHandle (hObject=0x1338) returned 1 [0141.347] CloseHandle (hObject=0x12bc) returned 1 [0141.347] CloseHandle (hObject=0x10e0) returned 1 [0141.347] CloseHandle (hObject=0x10f8) returned 1 [0141.347] CloseHandle (hObject=0x10fc) returned 1 [0141.347] CloseHandle (hObject=0x10f0) returned 1 [0141.347] CloseHandle (hObject=0x10e8) returned 1 [0141.348] CloseHandle (hObject=0x1340) returned 1 [0141.348] CloseHandle (hObject=0x10dc) returned 1 [0141.348] CloseHandle (hObject=0x1348) returned 1 [0141.348] CloseHandle (hObject=0x10d8) returned 1 [0141.348] CloseHandle (hObject=0x135c) returned 1 [0141.348] CloseHandle (hObject=0x1310) returned 1 [0141.348] CloseHandle (hObject=0xfa0) returned 1 [0141.348] CloseHandle (hObject=0xd5c) returned 1 [0141.348] CloseHandle (hObject=0xb30) returned 1 [0141.349] CloseHandle (hObject=0xb28) returned 1 [0141.349] CloseHandle (hObject=0x12c4) returned 1 [0141.349] CloseHandle (hObject=0xf98) returned 1 [0141.349] CloseHandle (hObject=0x1030) returned 1 [0141.349] CloseHandle (hObject=0xf94) returned 1 [0141.349] CloseHandle (hObject=0xf84) returned 1 [0141.349] CloseHandle (hObject=0xd30) returned 1 [0141.349] CloseHandle (hObject=0xf78) returned 1 [0141.349] CloseHandle (hObject=0xf68) returned 1 [0141.350] CloseHandle (hObject=0xf6c) returned 1 [0141.350] CloseHandle (hObject=0x11ec) returned 1 [0141.350] CloseHandle (hObject=0xf58) returned 1 [0141.350] CloseHandle (hObject=0x1360) returned 1 [0141.350] CloseHandle (hObject=0x1370) returned 1 [0141.350] CloseHandle (hObject=0x136c) returned 1 [0141.350] CloseHandle (hObject=0x13b0) returned 1 [0141.350] CloseHandle (hObject=0xabc) returned 1 [0141.350] CloseHandle (hObject=0x648) returned 1 [0141.351] CloseHandle (hObject=0xac0) returned 1 [0141.351] CloseHandle (hObject=0xf64) returned 1 [0141.351] CloseHandle (hObject=0xf54) returned 1 [0141.351] CloseHandle (hObject=0xf2c) returned 1 [0141.351] CloseHandle (hObject=0xf44) returned 1 [0141.351] CloseHandle (hObject=0xf48) returned 1 [0141.351] CloseHandle (hObject=0xf40) returned 1 [0141.351] CloseHandle (hObject=0xd54) returned 1 [0141.351] CloseHandle (hObject=0xf0c) returned 1 [0141.352] CloseHandle (hObject=0xd28) returned 1 [0141.352] CloseHandle (hObject=0xd2c) returned 1 [0141.352] CloseHandle (hObject=0x1044) returned 1 [0141.352] CloseHandle (hObject=0xb40) returned 1 [0141.352] CloseHandle (hObject=0x1048) returned 1 [0141.352] CloseHandle (hObject=0xb04) returned 1 [0141.352] CloseHandle (hObject=0xf1c) returned 1 [0141.352] CloseHandle (hObject=0x1028) returned 1 [0141.353] CloseHandle (hObject=0x102c) returned 1 [0141.353] CloseHandle (hObject=0xee4) returned 1 [0141.353] CloseHandle (hObject=0xf14) returned 1 [0141.353] CloseHandle (hObject=0xf18) returned 1 [0141.353] CloseHandle (hObject=0xf10) returned 1 [0141.353] CloseHandle (hObject=0xf08) returned 1 [0141.353] CloseHandle (hObject=0xf04) returned 1 [0141.353] CloseHandle (hObject=0xb44) returned 1 [0141.353] CloseHandle (hObject=0xefc) returned 1 [0141.354] CloseHandle (hObject=0xeec) returned 1 [0141.354] CloseHandle (hObject=0xef4) returned 1 [0141.354] CloseHandle (hObject=0xef8) returned 1 [0141.354] CloseHandle (hObject=0xed8) returned 1 [0141.354] CloseHandle (hObject=0x598) returned 1 [0141.354] CloseHandle (hObject=0x498) returned 1 [0141.354] CloseHandle (hObject=0xd00) returned 1 [0141.354] CloseHandle (hObject=0x660) returned 1 [0141.355] CloseHandle (hObject=0xeb4) returned 1 [0141.355] CloseHandle (hObject=0xebc) returned 1 [0141.355] CloseHandle (hObject=0xea4) returned 1 [0141.355] CloseHandle (hObject=0xea8) returned 1 [0141.355] CloseHandle (hObject=0xe80) returned 1 [0141.355] CloseHandle (hObject=0xe88) returned 1 [0141.355] CloseHandle (hObject=0xe84) returned 1 [0141.355] CloseHandle (hObject=0xe3c) returned 1 [0141.355] CloseHandle (hObject=0xe7c) returned 1 [0141.356] CloseHandle (hObject=0xe70) returned 1 [0141.356] CloseHandle (hObject=0xe74) returned 1 Thread: id = 106 os_tid = 0x890 [0131.390] Sleep (dwMilliseconds=0x1) [0131.424] Sleep (dwMilliseconds=0x1) [0131.605] Sleep (dwMilliseconds=0x1) [0132.045] Sleep (dwMilliseconds=0x1) [0132.219] Sleep (dwMilliseconds=0x1) [0132.367] Sleep (dwMilliseconds=0x1) [0132.540] Sleep (dwMilliseconds=0x1) [0133.225] Sleep (dwMilliseconds=0x1) [0133.850] Sleep (dwMilliseconds=0x1) [0134.718] Sleep (dwMilliseconds=0x1) [0135.783] Sleep (dwMilliseconds=0x1) [0137.220] Sleep (dwMilliseconds=0x1) [0138.199] Sleep (dwMilliseconds=0x1) [0138.651] Sleep (dwMilliseconds=0x1) [0139.055] Sleep (dwMilliseconds=0x1) [0139.316] Sleep (dwMilliseconds=0x1) [0139.810] Sleep (dwMilliseconds=0x1) [0140.552] Sleep (dwMilliseconds=0x1) [0141.396] Sleep (dwMilliseconds=0x1) [0141.842] Sleep (dwMilliseconds=0x1) [0142.894] Sleep (dwMilliseconds=0x1) [0143.742] Sleep (dwMilliseconds=0x1) [0144.122] Sleep (dwMilliseconds=0x1) [0145.021] Sleep (dwMilliseconds=0x1) [0145.492] Sleep (dwMilliseconds=0x1) [0145.753] Sleep (dwMilliseconds=0x1) [0146.159] Sleep (dwMilliseconds=0x1) [0146.343] Sleep (dwMilliseconds=0x1) [0146.697] Sleep (dwMilliseconds=0x1) [0147.142] Sleep (dwMilliseconds=0x1) [0148.124] Sleep (dwMilliseconds=0x1) [0148.367] Sleep (dwMilliseconds=0x1) [0148.826] Sleep (dwMilliseconds=0x1) [0149.445] Sleep (dwMilliseconds=0x1) [0150.443] Sleep (dwMilliseconds=0x1) [0150.996] Sleep (dwMilliseconds=0x1) [0151.378] Sleep (dwMilliseconds=0x1) [0151.746] Sleep (dwMilliseconds=0x1) [0152.365] Sleep (dwMilliseconds=0x1) [0152.984] Sleep (dwMilliseconds=0x1) [0153.324] Sleep (dwMilliseconds=0x1) [0153.821] Sleep (dwMilliseconds=0x1) [0155.021] Sleep (dwMilliseconds=0x1) [0156.023] Sleep (dwMilliseconds=0x1) [0156.400] Sleep (dwMilliseconds=0x1) [0156.834] Sleep (dwMilliseconds=0x1) [0157.463] Sleep (dwMilliseconds=0x1) [0158.024] Sleep (dwMilliseconds=0x1) [0158.760] Sleep (dwMilliseconds=0x1) [0159.935] Sleep (dwMilliseconds=0x1) [0160.752] Sleep (dwMilliseconds=0x1) [0161.550] Sleep (dwMilliseconds=0x1) [0162.350] Sleep (dwMilliseconds=0x1) [0162.755] Sleep (dwMilliseconds=0x1) [0163.382] Sleep (dwMilliseconds=0x1) [0164.202] Sleep (dwMilliseconds=0x1) [0165.401] Sleep (dwMilliseconds=0x1) [0166.109] Sleep (dwMilliseconds=0x1) [0166.886] Sleep (dwMilliseconds=0x1) [0167.641] Sleep (dwMilliseconds=0x1) [0167.919] Sleep (dwMilliseconds=0x1) [0168.442] Sleep (dwMilliseconds=0x1) [0168.833] Sleep (dwMilliseconds=0x1) [0169.151] Sleep (dwMilliseconds=0x1) [0169.704] Sleep (dwMilliseconds=0x1) [0170.203] Sleep (dwMilliseconds=0x1) [0170.457] Sleep (dwMilliseconds=0x1) [0170.778] Sleep (dwMilliseconds=0x1) [0170.956] Sleep (dwMilliseconds=0x1) [0172.435] Sleep (dwMilliseconds=0x1) [0173.086] Sleep (dwMilliseconds=0x1) [0173.443] Sleep (dwMilliseconds=0x1) [0173.837] Sleep (dwMilliseconds=0x1) [0174.137] Sleep (dwMilliseconds=0x1) [0174.524] Sleep (dwMilliseconds=0x1) [0174.732] Sleep (dwMilliseconds=0x1) [0175.360] Sleep (dwMilliseconds=0x1) [0175.645] Sleep (dwMilliseconds=0x1) [0176.013] Sleep (dwMilliseconds=0x1) [0176.353] Sleep (dwMilliseconds=0x1) [0176.592] Sleep (dwMilliseconds=0x1) [0176.975] Sleep (dwMilliseconds=0x1) [0177.359] Sleep (dwMilliseconds=0x1) [0177.703] Sleep (dwMilliseconds=0x1) [0178.094] Sleep (dwMilliseconds=0x1) [0178.402] Sleep (dwMilliseconds=0x1) [0178.708] Sleep (dwMilliseconds=0x1) [0178.996] Sleep (dwMilliseconds=0x1) [0179.563] Sleep (dwMilliseconds=0x1) [0179.858] Sleep (dwMilliseconds=0x1) [0180.194] Sleep (dwMilliseconds=0x1) [0180.470] Sleep (dwMilliseconds=0x1) [0180.919] Sleep (dwMilliseconds=0x1) [0181.855] Sleep (dwMilliseconds=0x1) [0182.282] Sleep (dwMilliseconds=0x1) [0182.783] Sleep (dwMilliseconds=0x1) [0183.091] Sleep (dwMilliseconds=0x1) [0183.491] Sleep (dwMilliseconds=0x1) [0184.352] Sleep (dwMilliseconds=0x1) [0184.661] Sleep (dwMilliseconds=0x1) [0185.089] Sleep (dwMilliseconds=0x1) [0185.341] Sleep (dwMilliseconds=0x1) [0185.582] Sleep (dwMilliseconds=0x1) [0185.829] Sleep (dwMilliseconds=0x1) [0186.164] Sleep (dwMilliseconds=0x1) [0186.713] Sleep (dwMilliseconds=0x1) [0188.484] Sleep (dwMilliseconds=0x1) [0188.712] Sleep (dwMilliseconds=0x1) [0189.323] Sleep (dwMilliseconds=0x1) [0190.311] Sleep (dwMilliseconds=0x1) [0190.774] Sleep (dwMilliseconds=0x1) [0191.138] Sleep (dwMilliseconds=0x1) [0191.407] Sleep (dwMilliseconds=0x1) [0191.701] Sleep (dwMilliseconds=0x1) [0192.104] Sleep (dwMilliseconds=0x1) [0192.947] Sleep (dwMilliseconds=0x1) [0195.025] Sleep (dwMilliseconds=0x1) [0196.470] Sleep (dwMilliseconds=0x1) [0196.862] Sleep (dwMilliseconds=0x1) [0197.123] Sleep (dwMilliseconds=0x1) [0198.619] Sleep (dwMilliseconds=0x1) [0199.401] Sleep (dwMilliseconds=0x1) [0200.547] Sleep (dwMilliseconds=0x1) [0201.034] Sleep (dwMilliseconds=0x1) [0201.518] Sleep (dwMilliseconds=0x1) [0201.863] Sleep (dwMilliseconds=0x1) [0201.978] Sleep (dwMilliseconds=0x1) [0202.097] Sleep (dwMilliseconds=0x1) [0202.307] Sleep (dwMilliseconds=0x1) [0203.140] Sleep (dwMilliseconds=0x1) [0203.282] Sleep (dwMilliseconds=0x1) [0204.244] Sleep (dwMilliseconds=0x1) [0204.421] Sleep (dwMilliseconds=0x1) [0205.509] Sleep (dwMilliseconds=0x1) [0206.734] Sleep (dwMilliseconds=0x1) [0207.098] Sleep (dwMilliseconds=0x1) [0207.190] Sleep (dwMilliseconds=0x1) [0207.276] Sleep (dwMilliseconds=0x1) [0207.341] Sleep (dwMilliseconds=0x1) [0207.388] Sleep (dwMilliseconds=0x1) [0207.451] Sleep (dwMilliseconds=0x1) [0207.502] Sleep (dwMilliseconds=0x1) [0207.550] Sleep (dwMilliseconds=0x1) [0207.628] Sleep (dwMilliseconds=0x1) [0207.706] Sleep (dwMilliseconds=0x1) [0207.761] Sleep (dwMilliseconds=0x1) [0207.831] Sleep (dwMilliseconds=0x1) [0207.877] Sleep (dwMilliseconds=0x1) [0207.928] Sleep (dwMilliseconds=0x1) [0208.003] Sleep (dwMilliseconds=0x1) [0208.075] Sleep (dwMilliseconds=0x1) [0208.098] Sleep (dwMilliseconds=0x1) [0208.145] Sleep (dwMilliseconds=0x1) [0208.173] Sleep (dwMilliseconds=0x1) [0210.927] Sleep (dwMilliseconds=0x1) [0215.155] Sleep (dwMilliseconds=0x1) [0215.483] Sleep (dwMilliseconds=0x1) [0215.861] Sleep (dwMilliseconds=0x1) [0217.096] Sleep (dwMilliseconds=0x1) [0217.426] Sleep (dwMilliseconds=0x1) [0218.630] Sleep (dwMilliseconds=0x1) [0218.842] Sleep (dwMilliseconds=0x1) [0218.974] Sleep (dwMilliseconds=0x1) [0219.147] Sleep (dwMilliseconds=0x1) [0219.268] Sleep (dwMilliseconds=0x1) [0219.443] Sleep (dwMilliseconds=0x1) [0219.519] Sleep (dwMilliseconds=0x1) [0219.607] Sleep (dwMilliseconds=0x1) [0219.754] Sleep (dwMilliseconds=0x1) [0219.860] Sleep (dwMilliseconds=0x1) [0219.995] Sleep (dwMilliseconds=0x1) [0220.125] Sleep (dwMilliseconds=0x1) [0220.305] Sleep (dwMilliseconds=0x1) [0220.397] Sleep (dwMilliseconds=0x1) [0220.466] Sleep (dwMilliseconds=0x1) [0220.522] Sleep (dwMilliseconds=0x1) [0220.612] Sleep (dwMilliseconds=0x1) [0220.688] Sleep (dwMilliseconds=0x1) [0220.838] Sleep (dwMilliseconds=0x1) [0220.957] Sleep (dwMilliseconds=0x1) [0221.060] Sleep (dwMilliseconds=0x1) [0221.241] Sleep (dwMilliseconds=0x1) [0221.361] Sleep (dwMilliseconds=0x1) [0221.470] Sleep (dwMilliseconds=0x1) [0221.581] Sleep (dwMilliseconds=0x1) [0221.678] Sleep (dwMilliseconds=0x1) [0221.749] Sleep (dwMilliseconds=0x1) [0221.862] Sleep (dwMilliseconds=0x1) [0221.881] Sleep (dwMilliseconds=0x1) [0221.901] Sleep (dwMilliseconds=0x1) [0221.925] Sleep (dwMilliseconds=0x1) [0222.262] Sleep (dwMilliseconds=0x1) [0222.322] Sleep (dwMilliseconds=0x1) [0222.328] Sleep (dwMilliseconds=0x1) [0222.345] Sleep (dwMilliseconds=0x1) [0222.361] Sleep (dwMilliseconds=0x1) [0222.404] Sleep (dwMilliseconds=0x1) [0222.425] Sleep (dwMilliseconds=0x1) [0222.446] Sleep (dwMilliseconds=0x1) [0222.453] Sleep (dwMilliseconds=0x1) [0222.470] Sleep (dwMilliseconds=0x1) [0222.499] Sleep (dwMilliseconds=0x1) [0222.515] Sleep (dwMilliseconds=0x1) [0222.566] Sleep (dwMilliseconds=0x1) [0222.578] Sleep (dwMilliseconds=0x1) [0222.625] Sleep (dwMilliseconds=0x1) [0222.672] Sleep (dwMilliseconds=0x1) [0222.708] Sleep (dwMilliseconds=0x1) [0222.718] Sleep (dwMilliseconds=0x1) [0222.758] Sleep (dwMilliseconds=0x1) [0222.767] Sleep (dwMilliseconds=0x1) [0222.795] Sleep (dwMilliseconds=0x1) [0222.863] Sleep (dwMilliseconds=0x1) [0222.930] Sleep (dwMilliseconds=0x1) [0222.941] Sleep (dwMilliseconds=0x1) [0222.954] Sleep (dwMilliseconds=0x1) [0222.966] Sleep (dwMilliseconds=0x1) [0222.995] Sleep (dwMilliseconds=0x1) [0223.001] Sleep (dwMilliseconds=0x1) [0223.014] Sleep (dwMilliseconds=0x1) [0223.030] Sleep (dwMilliseconds=0x1) [0223.046] Sleep (dwMilliseconds=0x1) [0223.061] Sleep (dwMilliseconds=0x1) [0223.077] Sleep (dwMilliseconds=0x1) [0223.109] Sleep (dwMilliseconds=0x1) [0223.123] Sleep (dwMilliseconds=0x1) [0223.139] Sleep (dwMilliseconds=0x1) [0223.154] Sleep (dwMilliseconds=0x1) [0223.169] Sleep (dwMilliseconds=0x1) [0223.260] Sleep (dwMilliseconds=0x1) [0223.311] Sleep (dwMilliseconds=0x1) [0223.334] Sleep (dwMilliseconds=0x1) [0223.341] Sleep (dwMilliseconds=0x1) [0223.357] Sleep (dwMilliseconds=0x1) [0223.382] Sleep (dwMilliseconds=0x1) [0223.390] Sleep (dwMilliseconds=0x1) [0223.406] Sleep (dwMilliseconds=0x1) [0223.421] Sleep (dwMilliseconds=0x1) [0223.436] Sleep (dwMilliseconds=0x1) [0223.452] Sleep (dwMilliseconds=0x1) [0223.468] Sleep (dwMilliseconds=0x1) [0223.491] Sleep (dwMilliseconds=0x1) [0223.498] Sleep (dwMilliseconds=0x1) [0223.519] Sleep (dwMilliseconds=0x1) [0223.530] Sleep (dwMilliseconds=0x1) [0223.551] Sleep (dwMilliseconds=0x1) [0223.562] Sleep (dwMilliseconds=0x1) [0223.577] Sleep (dwMilliseconds=0x1) [0223.599] Sleep (dwMilliseconds=0x1) [0223.608] Sleep (dwMilliseconds=0x1) [0223.623] Sleep (dwMilliseconds=0x1) [0223.637] Sleep (dwMilliseconds=0x1) [0223.653] Sleep (dwMilliseconds=0x1) [0223.672] Sleep (dwMilliseconds=0x1) [0223.684] Sleep (dwMilliseconds=0x1) [0223.713] Sleep (dwMilliseconds=0x1) [0223.957] Sleep (dwMilliseconds=0x1) [0223.970] Sleep (dwMilliseconds=0x1) [0223.980] Sleep (dwMilliseconds=0x1) [0223.996] Sleep (dwMilliseconds=0x1) [0225.593] Sleep (dwMilliseconds=0x1) [0225.889] Sleep (dwMilliseconds=0x1) [0225.943] Sleep (dwMilliseconds=0x1) [0225.971] Sleep (dwMilliseconds=0x1) [0225.984] Sleep (dwMilliseconds=0x1) [0225.998] Sleep (dwMilliseconds=0x1) [0226.011] Sleep (dwMilliseconds=0x1) [0226.029] Sleep (dwMilliseconds=0x1) [0226.042] Sleep (dwMilliseconds=0x1) [0226.067] Sleep (dwMilliseconds=0x1) [0226.074] Sleep (dwMilliseconds=0x1) [0226.091] Sleep (dwMilliseconds=0x1) [0226.106] Sleep (dwMilliseconds=0x1) [0226.126] Sleep (dwMilliseconds=0x1) [0226.137] Sleep (dwMilliseconds=0x1) [0226.154] Sleep (dwMilliseconds=0x1) [0226.183] Sleep (dwMilliseconds=0x1) [0226.317] Sleep (dwMilliseconds=0x1) [0226.352] Sleep (dwMilliseconds=0x1) [0226.376] Sleep (dwMilliseconds=0x1) [0226.385] Sleep (dwMilliseconds=0x1) [0226.401] Sleep (dwMilliseconds=0x1) [0226.425] Sleep (dwMilliseconds=0x1) [0226.438] Sleep (dwMilliseconds=0x1) [0226.448] Sleep (dwMilliseconds=0x1) [0226.463] Sleep (dwMilliseconds=0x1) [0226.479] Sleep (dwMilliseconds=0x1) [0226.508] Sleep (dwMilliseconds=0x1) [0226.535] Sleep (dwMilliseconds=0x1) [0226.557] Sleep (dwMilliseconds=0x1) [0226.571] Sleep (dwMilliseconds=0x1) [0226.585] Sleep (dwMilliseconds=0x1) [0226.601] Sleep (dwMilliseconds=0x1) [0226.617] Sleep (dwMilliseconds=0x1) [0226.632] Sleep (dwMilliseconds=0x1) [0226.657] Sleep (dwMilliseconds=0x1) [0226.664] Sleep (dwMilliseconds=0x1) [0226.679] Sleep (dwMilliseconds=0x1) [0226.698] Sleep (dwMilliseconds=0x1) [0226.710] Sleep (dwMilliseconds=0x1) [0226.726] Sleep (dwMilliseconds=0x1) [0226.742] Sleep (dwMilliseconds=0x1) [0226.764] Sleep (dwMilliseconds=0x1) [0226.772] Sleep (dwMilliseconds=0x1) [0226.789] Sleep (dwMilliseconds=0x1) [0226.806] Sleep (dwMilliseconds=0x1) [0226.819] Sleep (dwMilliseconds=0x1) [0226.835] Sleep (dwMilliseconds=0x1) [0227.015] Sleep (dwMilliseconds=0x1) [0227.325] Sleep (dwMilliseconds=0x1) [0227.436] Sleep (dwMilliseconds=0x1) [0227.445] Sleep (dwMilliseconds=0x1) [0228.666] Sleep (dwMilliseconds=0x1) [0228.751] Sleep (dwMilliseconds=0x1) [0228.903] Sleep (dwMilliseconds=0x1) [0229.575] Sleep (dwMilliseconds=0x1) [0229.629] Sleep (dwMilliseconds=0x1) [0229.689] Sleep (dwMilliseconds=0x1) [0229.709] Sleep (dwMilliseconds=0x1) [0229.936] Sleep (dwMilliseconds=0x1) [0230.316] Sleep (dwMilliseconds=0x1) [0230.369] Sleep (dwMilliseconds=0x1) [0230.408] Sleep (dwMilliseconds=0x1) [0230.430] Sleep (dwMilliseconds=0x1) [0230.452] Sleep (dwMilliseconds=0x1) [0230.481] Sleep (dwMilliseconds=0x1) [0231.243] Sleep (dwMilliseconds=0x1) [0231.337] Sleep (dwMilliseconds=0x1) [0231.363] Sleep (dwMilliseconds=0x1) [0231.397] Sleep (dwMilliseconds=0x1) [0231.408] Sleep (dwMilliseconds=0x1) [0231.425] Sleep (dwMilliseconds=0x1) [0231.439] Sleep (dwMilliseconds=0x1) [0231.454] Sleep (dwMilliseconds=0x1) [0231.474] Sleep (dwMilliseconds=0x1) [0231.487] Sleep (dwMilliseconds=0x1) [0231.510] Sleep (dwMilliseconds=0x1) [0231.518] Sleep (dwMilliseconds=0x1) [0231.533] Sleep (dwMilliseconds=0x1) [0231.550] Sleep (dwMilliseconds=0x1) [0231.563] Sleep (dwMilliseconds=0x1) [0231.578] Sleep (dwMilliseconds=0x1) [0231.596] Sleep (dwMilliseconds=0x1) [0231.617] Sleep (dwMilliseconds=0x1) [0231.626] Sleep (dwMilliseconds=0x1) [0231.673] Sleep (dwMilliseconds=0x1) [0231.690] Sleep (dwMilliseconds=0x1) [0232.068] Sleep (dwMilliseconds=0x1) [0232.104] Sleep (dwMilliseconds=0x1) [0232.130] Sleep (dwMilliseconds=0x1) [0232.172] Sleep (dwMilliseconds=0x1) [0232.949] Sleep (dwMilliseconds=0x1) [0232.970] Sleep (dwMilliseconds=0x1) [0232.984] Sleep (dwMilliseconds=0x1) [0233.020] Sleep (dwMilliseconds=0x1) [0233.385] Sleep (dwMilliseconds=0x1) [0233.472] Sleep (dwMilliseconds=0x1) [0233.511] Sleep (dwMilliseconds=0x1) [0233.538] Sleep (dwMilliseconds=0x1) [0234.174] Sleep (dwMilliseconds=0x1) [0234.360] Sleep (dwMilliseconds=0x1) [0234.375] Sleep (dwMilliseconds=0x1) [0234.388] Sleep (dwMilliseconds=0x1) [0234.427] Sleep (dwMilliseconds=0x1) [0234.434] Sleep (dwMilliseconds=0x1) [0234.463] Sleep (dwMilliseconds=0x1) [0234.488] Sleep (dwMilliseconds=0x1) [0234.508] Sleep (dwMilliseconds=0x1) [0234.545] Sleep (dwMilliseconds=0x1) [0234.572] Sleep (dwMilliseconds=0x1) [0234.834] Sleep (dwMilliseconds=0x1) [0234.849] Sleep (dwMilliseconds=0x1) [0235.529] Sleep (dwMilliseconds=0x1) [0235.547] Sleep (dwMilliseconds=0x1) [0235.557] Sleep (dwMilliseconds=0x1) [0235.573] Sleep (dwMilliseconds=0x1) [0235.589] Sleep (dwMilliseconds=0x1) [0235.608] Sleep (dwMilliseconds=0x1) [0235.621] Sleep (dwMilliseconds=0x1) [0235.636] Sleep (dwMilliseconds=0x1) [0235.685] Sleep (dwMilliseconds=0x1) [0236.082] Sleep (dwMilliseconds=0x1) [0236.113] Sleep (dwMilliseconds=0x1) [0236.138] Sleep (dwMilliseconds=0x1) [0236.881] Sleep (dwMilliseconds=0x1) [0236.898] Sleep (dwMilliseconds=0x1) [0236.939] Sleep (dwMilliseconds=0x1) [0237.027] Sleep (dwMilliseconds=0x1) [0237.084] Sleep (dwMilliseconds=0x1) [0237.269] Sleep (dwMilliseconds=0x1) [0237.605] Sleep (dwMilliseconds=0x1) [0237.614] Sleep (dwMilliseconds=0x1) [0237.630] Sleep (dwMilliseconds=0x1) [0237.645] Sleep (dwMilliseconds=0x1) [0237.661] Sleep (dwMilliseconds=0x1) [0237.680] Sleep (dwMilliseconds=0x1) [0237.693] Sleep (dwMilliseconds=0x1) [0237.749] Sleep (dwMilliseconds=0x1) [0237.757] Sleep (dwMilliseconds=0x1) [0237.770] Sleep (dwMilliseconds=0x1) [0237.790] Sleep (dwMilliseconds=0x1) [0237.801] Sleep (dwMilliseconds=0x1) [0237.817] Sleep (dwMilliseconds=0x1) [0237.832] Sleep (dwMilliseconds=0x1) [0237.848] Sleep (dwMilliseconds=0x1) [0237.864] Sleep (dwMilliseconds=0x1) [0237.879] Sleep (dwMilliseconds=0x1) [0237.900] Sleep (dwMilliseconds=0x1) [0237.911] Sleep (dwMilliseconds=0x1) [0237.936] Sleep (dwMilliseconds=0x1) [0237.965] Sleep (dwMilliseconds=0x1) [0238.023] Sleep (dwMilliseconds=0x1) [0238.092] Sleep (dwMilliseconds=0x1) [0238.142] Sleep (dwMilliseconds=0x1) [0238.195] Sleep (dwMilliseconds=0x1) [0238.288] Sleep (dwMilliseconds=0x1) [0238.377] Sleep (dwMilliseconds=0x1) [0238.438] Sleep (dwMilliseconds=0x1) [0238.504] Sleep (dwMilliseconds=0x1) [0238.577] Sleep (dwMilliseconds=0x1) [0238.640] Sleep (dwMilliseconds=0x1) [0238.662] Sleep (dwMilliseconds=0x1) [0239.042] Sleep (dwMilliseconds=0x1) [0239.096] Sleep (dwMilliseconds=0x1) [0239.156] Sleep (dwMilliseconds=0x1) [0239.251] Sleep (dwMilliseconds=0x1) [0239.334] Sleep (dwMilliseconds=0x1) [0240.012] Sleep (dwMilliseconds=0x1) [0240.144] Sleep (dwMilliseconds=0x1) [0240.181] Sleep (dwMilliseconds=0x1) [0240.244] Sleep (dwMilliseconds=0x1) [0240.275] Sleep (dwMilliseconds=0x1) [0240.283] Sleep (dwMilliseconds=0x1) [0240.297] Sleep (dwMilliseconds=0x1) [0240.313] Sleep (dwMilliseconds=0x1) [0240.328] Sleep (dwMilliseconds=0x1) [0240.344] Sleep (dwMilliseconds=0x1) [0240.359] Sleep (dwMilliseconds=0x1) [0240.375] Sleep (dwMilliseconds=0x1) [0240.397] Sleep (dwMilliseconds=0x1) [0240.406] Sleep (dwMilliseconds=0x1) [0240.422] Sleep (dwMilliseconds=0x1) [0240.438] Sleep (dwMilliseconds=0x1) [0240.453] Sleep (dwMilliseconds=0x1) [0240.469] Sleep (dwMilliseconds=0x1) [0240.484] Sleep (dwMilliseconds=0x1) [0240.510] Sleep (dwMilliseconds=0x1) [0240.516] Sleep (dwMilliseconds=0x1) [0240.531] Sleep (dwMilliseconds=0x1) [0240.548] Sleep (dwMilliseconds=0x1) [0240.563] Sleep (dwMilliseconds=0x1) [0240.578] Sleep (dwMilliseconds=0x1) [0240.593] Sleep (dwMilliseconds=0x1) [0240.617] Sleep (dwMilliseconds=0x1) [0240.625] Sleep (dwMilliseconds=0x1) [0240.640] Sleep (dwMilliseconds=0x1) [0240.656] Sleep (dwMilliseconds=0x1) [0240.671] Sleep (dwMilliseconds=0x1) [0240.687] Sleep (dwMilliseconds=0x1) [0240.703] Sleep (dwMilliseconds=0x1) [0240.727] Sleep (dwMilliseconds=0x1) [0240.734] Sleep (dwMilliseconds=0x1) [0240.749] Sleep (dwMilliseconds=0x1) [0240.766] Sleep (dwMilliseconds=0x1) [0240.781] Sleep (dwMilliseconds=0x1) [0240.796] Sleep (dwMilliseconds=0x1) [0240.812] Sleep (dwMilliseconds=0x1) [0240.836] Sleep (dwMilliseconds=0x1) [0240.843] Sleep (dwMilliseconds=0x1) [0240.859] Sleep (dwMilliseconds=0x1) [0240.874] Sleep (dwMilliseconds=0x1) [0240.890] Sleep (dwMilliseconds=0x1) [0240.905] Sleep (dwMilliseconds=0x1) [0240.921] Sleep (dwMilliseconds=0x1) [0240.956] Sleep (dwMilliseconds=0x1) [0240.968] Sleep (dwMilliseconds=0x1) [0241.049] Sleep (dwMilliseconds=0x1) [0241.824] Sleep (dwMilliseconds=0x1) [0241.829] Sleep (dwMilliseconds=0x1) [0241.846] Sleep (dwMilliseconds=0x1) [0241.878] Sleep (dwMilliseconds=0x1) [0242.298] Sleep (dwMilliseconds=0x1) [0242.406] Sleep (dwMilliseconds=0x1) [0242.494] Sleep (dwMilliseconds=0x1) [0242.542] Sleep (dwMilliseconds=0x1) [0242.567] Sleep (dwMilliseconds=0x1) [0242.583] Sleep (dwMilliseconds=0x1) [0242.590] Sleep (dwMilliseconds=0x1) [0242.606] Sleep (dwMilliseconds=0x1) [0242.622] Sleep (dwMilliseconds=0x1) [0242.640] Sleep (dwMilliseconds=0x1) [0242.658] Sleep (dwMilliseconds=0x1) [0242.676] Sleep (dwMilliseconds=0x1) [0242.688] Sleep (dwMilliseconds=0x1) [0242.733] Sleep (dwMilliseconds=0x1) [0242.755] Sleep (dwMilliseconds=0x1) [0242.762] Sleep (dwMilliseconds=0x1) [0243.075] Sleep (dwMilliseconds=0x1) [0243.465] Sleep (dwMilliseconds=0x1) [0243.516] Sleep (dwMilliseconds=0x1) [0243.562] Sleep (dwMilliseconds=0x1) [0243.612] Sleep (dwMilliseconds=0x1) [0243.652] Sleep (dwMilliseconds=0x1) [0243.705] Sleep (dwMilliseconds=0x1) [0243.751] Sleep (dwMilliseconds=0x1) [0243.811] Sleep (dwMilliseconds=0x1) [0243.890] Sleep (dwMilliseconds=0x1) [0243.932] Sleep (dwMilliseconds=0x1) [0243.991] Sleep (dwMilliseconds=0x1) [0244.026] Sleep (dwMilliseconds=0x1) [0244.072] Sleep (dwMilliseconds=0x1) [0244.393] Sleep (dwMilliseconds=0x1) [0244.450] Sleep (dwMilliseconds=0x1) [0244.503] Sleep (dwMilliseconds=0x1) [0244.544] Sleep (dwMilliseconds=0x1) [0244.589] Sleep (dwMilliseconds=0x1) [0244.638] Sleep (dwMilliseconds=0x1) [0244.703] Sleep (dwMilliseconds=0x1) [0244.759] Sleep (dwMilliseconds=0x1) [0244.808] Sleep (dwMilliseconds=0x1) [0244.852] Sleep (dwMilliseconds=0x1) [0244.868] Sleep (dwMilliseconds=0x1) [0244.905] Sleep (dwMilliseconds=0x1) [0244.994] Sleep (dwMilliseconds=0x1) [0245.397] Sleep (dwMilliseconds=0x1) [0245.647] Sleep (dwMilliseconds=0x1) [0245.704] Sleep (dwMilliseconds=0x1) [0245.747] Sleep (dwMilliseconds=0x1) [0245.776] Sleep (dwMilliseconds=0x1) [0245.848] Sleep (dwMilliseconds=0x1) [0245.853] Sleep (dwMilliseconds=0x1) [0246.018] Sleep (dwMilliseconds=0x1) [0246.048] Sleep (dwMilliseconds=0x1) [0246.055] Sleep (dwMilliseconds=0x1) [0246.188] Sleep (dwMilliseconds=0x1) [0246.194] Sleep (dwMilliseconds=0x1) [0246.263] Sleep (dwMilliseconds=0x1) [0246.274] Sleep (dwMilliseconds=0x1) [0246.303] Sleep (dwMilliseconds=0x1) [0246.322] Sleep (dwMilliseconds=0x1) [0246.334] Sleep (dwMilliseconds=0x1) [0246.350] Sleep (dwMilliseconds=0x1) [0246.372] Sleep (dwMilliseconds=0x1) [0246.381] Sleep (dwMilliseconds=0x1) [0246.397] Sleep (dwMilliseconds=0x1) [0246.413] Sleep (dwMilliseconds=0x1) [0246.428] Sleep (dwMilliseconds=0x1) [0246.443] Sleep (dwMilliseconds=0x1) [0246.459] Sleep (dwMilliseconds=0x1) [0246.475] Sleep (dwMilliseconds=0x1) [0246.504] Sleep (dwMilliseconds=0x1) [0246.508] Sleep (dwMilliseconds=0x1) [0246.523] Sleep (dwMilliseconds=0x1) [0246.557] Sleep (dwMilliseconds=0x1) [0246.609] Sleep (dwMilliseconds=0x1) [0246.655] Sleep (dwMilliseconds=0x1) [0246.663] Sleep (dwMilliseconds=0x1) [0246.680] Sleep (dwMilliseconds=0x1) [0246.695] Sleep (dwMilliseconds=0x1) [0246.711] Sleep (dwMilliseconds=0x1) [0246.726] Sleep (dwMilliseconds=0x1) [0246.743] Sleep (dwMilliseconds=0x1) [0246.793] Sleep (dwMilliseconds=0x1) [0246.833] Sleep (dwMilliseconds=0x1) [0246.880] Sleep (dwMilliseconds=0x1) [0246.912] Sleep (dwMilliseconds=0x1) [0246.927] Sleep (dwMilliseconds=0x1) [0246.942] Sleep (dwMilliseconds=0x1) [0246.958] Sleep (dwMilliseconds=0x1) [0246.974] Sleep (dwMilliseconds=0x1) [0246.989] Sleep (dwMilliseconds=0x1) [0247.051] Sleep (dwMilliseconds=0x1) [0247.072] Sleep (dwMilliseconds=0x1) [0247.089] Sleep (dwMilliseconds=0x1) [0247.101] Sleep (dwMilliseconds=0x1) [0247.119] Sleep (dwMilliseconds=0x1) [0247.130] Sleep (dwMilliseconds=0x1) [0247.151] Sleep (dwMilliseconds=0x1) [0247.163] Sleep (dwMilliseconds=0x1) [0247.182] Sleep (dwMilliseconds=0x1) [0247.207] Sleep (dwMilliseconds=0x1) [0247.208] Sleep (dwMilliseconds=0x1) [0247.227] Sleep (dwMilliseconds=0x1) [0247.263] Sleep (dwMilliseconds=0x1) [0247.270] Sleep (dwMilliseconds=0x1) [0247.318] Sleep (dwMilliseconds=0x1) [0247.335] Sleep (dwMilliseconds=0x1) [0247.364] Sleep (dwMilliseconds=0x1) [0247.406] Sleep (dwMilliseconds=0x1) [0247.412] Sleep (dwMilliseconds=0x1) [0247.447] Sleep (dwMilliseconds=0x1) [0247.488] Sleep (dwMilliseconds=0x1) [0247.535] Sleep (dwMilliseconds=0x1) [0247.599] Sleep (dwMilliseconds=0x1) [0247.676] Sleep (dwMilliseconds=0x1) [0247.722] Sleep (dwMilliseconds=0x1) [0247.769] Sleep (dwMilliseconds=0x1) [0247.816] Sleep (dwMilliseconds=0x1) [0247.866] Sleep (dwMilliseconds=0x1) [0247.893] Sleep (dwMilliseconds=0x1) [0247.894] Sleep (dwMilliseconds=0x1) [0247.910] Sleep (dwMilliseconds=0x1) [0247.956] Sleep (dwMilliseconds=0x1) [0248.003] Sleep (dwMilliseconds=0x1) [0248.050] Sleep (dwMilliseconds=0x1) [0248.097] Sleep (dwMilliseconds=0x1) [0248.146] Sleep (dwMilliseconds=0x1) [0248.193] Sleep (dwMilliseconds=0x1) [0248.231] Sleep (dwMilliseconds=0x1) [0248.269] Sleep (dwMilliseconds=0x1) [0248.294] Sleep (dwMilliseconds=0x1) [0248.300] Sleep (dwMilliseconds=0x1) [0248.315] Sleep (dwMilliseconds=0x1) [0248.362] Sleep (dwMilliseconds=0x1) [0248.379] Sleep (dwMilliseconds=0x1) [0248.394] Sleep (dwMilliseconds=0x1) [0248.409] Sleep (dwMilliseconds=0x1) [0248.456] Sleep (dwMilliseconds=0x1) [0248.503] Sleep (dwMilliseconds=0x1) [0248.549] Sleep (dwMilliseconds=0x1) [0248.612] Sleep (dwMilliseconds=0x1) [0248.659] Sleep (dwMilliseconds=0x1) [0248.686] Sleep (dwMilliseconds=0x1) [0248.689] Sleep (dwMilliseconds=0x1) [0248.705] Sleep (dwMilliseconds=0x1) [0248.722] Sleep (dwMilliseconds=0x1) [0248.736] Sleep (dwMilliseconds=0x1) [0248.752] Sleep (dwMilliseconds=0x1) [0248.768] Sleep (dwMilliseconds=0x1) [0248.783] Sleep (dwMilliseconds=0x1) [0248.799] Sleep (dwMilliseconds=0x1) [0248.814] Sleep (dwMilliseconds=0x1) [0248.862] Sleep (dwMilliseconds=0x1) [0248.909] Sleep (dwMilliseconds=0x1) [0248.956] Sleep (dwMilliseconds=0x1) [0249.002] Sleep (dwMilliseconds=0x1) [0249.050] Sleep (dwMilliseconds=0x1) [0249.108] Sleep (dwMilliseconds=0x1) [0249.145] Sleep (dwMilliseconds=0x1) [0249.190] Sleep (dwMilliseconds=0x1) [0249.228] Sleep (dwMilliseconds=0x1) [0249.235] Sleep (dwMilliseconds=0x1) [0249.252] Sleep (dwMilliseconds=0x1) [0249.267] Sleep (dwMilliseconds=0x1) [0249.283] Sleep (dwMilliseconds=0x1) [0249.298] Sleep (dwMilliseconds=0x1) [0249.314] Sleep (dwMilliseconds=0x1) [0249.329] Sleep (dwMilliseconds=0x1) [0249.345] Sleep (dwMilliseconds=0x1) [0249.361] Sleep (dwMilliseconds=0x1) [0249.423] Sleep (dwMilliseconds=0x1) [0249.470] Sleep (dwMilliseconds=0x1) [0249.517] Sleep (dwMilliseconds=0x1) [0249.578] Sleep (dwMilliseconds=0x1) [0249.689] Sleep (dwMilliseconds=0x1) [0249.722] Sleep (dwMilliseconds=0x1) [0249.735] Sleep (dwMilliseconds=0x1) [0249.751] Sleep (dwMilliseconds=0x1) [0249.768] Sleep (dwMilliseconds=0x1) [0249.782] Sleep (dwMilliseconds=0x1) [0249.800] Sleep (dwMilliseconds=0x1) [0249.813] Sleep (dwMilliseconds=0x1) [0249.829] Sleep (dwMilliseconds=0x1) [0249.844] Sleep (dwMilliseconds=0x1) [0249.860] Sleep (dwMilliseconds=0x1) [0249.875] Sleep (dwMilliseconds=0x1) [0249.922] Sleep (dwMilliseconds=0x1) [0249.969] Sleep (dwMilliseconds=0x1) [0250.016] Sleep (dwMilliseconds=0x1) [0250.064] Sleep (dwMilliseconds=0x1) [0250.109] Sleep (dwMilliseconds=0x1) [0250.156] Sleep (dwMilliseconds=0x1) [0250.204] Sleep (dwMilliseconds=0x1) [0250.250] Sleep (dwMilliseconds=0x1) [0250.322] Sleep (dwMilliseconds=0x1) [0250.360] Sleep (dwMilliseconds=0x1) [0250.406] Sleep (dwMilliseconds=0x1) [0250.453] Sleep (dwMilliseconds=0x1) [0250.501] Sleep (dwMilliseconds=0x1) [0250.546] Sleep (dwMilliseconds=0x1) [0250.608] Sleep (dwMilliseconds=0x1) [0250.655] Sleep (dwMilliseconds=0x1) [0250.702] Sleep (dwMilliseconds=0x1) [0250.750] Sleep (dwMilliseconds=0x1) [0250.796] Sleep (dwMilliseconds=0x1) [0250.842] Sleep (dwMilliseconds=0x1) [0250.891] Sleep (dwMilliseconds=0x1) [0250.936] Sleep (dwMilliseconds=0x1) [0250.983] Sleep (dwMilliseconds=0x1) [0251.031] Sleep (dwMilliseconds=0x1) [0251.076] Sleep (dwMilliseconds=0x1) [0251.123] Sleep (dwMilliseconds=0x1) [0251.170] Sleep (dwMilliseconds=0x1) [0251.206] Sleep (dwMilliseconds=0x1) [0251.217] Sleep (dwMilliseconds=0x1) [0251.264] Sleep (dwMilliseconds=0x1) [0251.312] Sleep (dwMilliseconds=0x1) [0251.358] Sleep (dwMilliseconds=0x1) [0251.404] Sleep (dwMilliseconds=0x1) [0251.441] Sleep (dwMilliseconds=0x1) [0251.466] Sleep (dwMilliseconds=0x1) [0251.482] Sleep (dwMilliseconds=0x1) [0251.498] Sleep (dwMilliseconds=0x1) [0251.513] Sleep (dwMilliseconds=0x1) [0251.531] Sleep (dwMilliseconds=0x1) [0251.545] Sleep (dwMilliseconds=0x1) [0251.584] Sleep (dwMilliseconds=0x1) [0251.656] Sleep (dwMilliseconds=0x1) [0251.669] Sleep (dwMilliseconds=0x1) [0251.685] Sleep (dwMilliseconds=0x1) [0251.700] Sleep (dwMilliseconds=0x1) [0251.716] Sleep (dwMilliseconds=0x1) [0251.731] Sleep (dwMilliseconds=0x1) [0251.747] Sleep (dwMilliseconds=0x1) [0251.764] Sleep (dwMilliseconds=0x1) [0251.778] Sleep (dwMilliseconds=0x1) [0251.794] Sleep (dwMilliseconds=0x1) [0251.810] Sleep (dwMilliseconds=0x1) [0251.825] Sleep (dwMilliseconds=0x1) [0251.841] Sleep (dwMilliseconds=0x1) [0251.856] Sleep (dwMilliseconds=0x1) [0251.874] Sleep (dwMilliseconds=0x1) [0251.887] Sleep (dwMilliseconds=0x1) [0251.903] Sleep (dwMilliseconds=0x1) [0251.921] Sleep (dwMilliseconds=0x1) [0251.934] Sleep (dwMilliseconds=0x1) [0251.950] Sleep (dwMilliseconds=0x1) [0251.966] Sleep (dwMilliseconds=0x1) [0251.982] Sleep (dwMilliseconds=0x1) [0251.997] Sleep (dwMilliseconds=0x1) [0252.012] Sleep (dwMilliseconds=0x1) [0252.028] Sleep (dwMilliseconds=0x1) [0252.043] Sleep (dwMilliseconds=0x1) [0252.059] Sleep (dwMilliseconds=0x1) [0252.075] Sleep (dwMilliseconds=0x1) [0252.092] Sleep (dwMilliseconds=0x1) [0252.106] Sleep (dwMilliseconds=0x1) [0252.122] Sleep (dwMilliseconds=0x1) [0252.137] Sleep (dwMilliseconds=0x1) [0252.153] Sleep (dwMilliseconds=0x1) [0252.168] Sleep (dwMilliseconds=0x1) [0252.184] Sleep (dwMilliseconds=0x1) [0252.202] Sleep (dwMilliseconds=0x1) [0252.215] Sleep (dwMilliseconds=0x1) [0252.231] Sleep (dwMilliseconds=0x1) [0252.246] Sleep (dwMilliseconds=0x1) [0252.262] Sleep (dwMilliseconds=0x1) [0252.278] Sleep (dwMilliseconds=0x1) [0252.306] Sleep (dwMilliseconds=0x1) [0252.312] Sleep (dwMilliseconds=0x1) [0252.324] Sleep (dwMilliseconds=0x1) [0252.340] Sleep (dwMilliseconds=0x1) [0252.355] Sleep (dwMilliseconds=0x1) [0252.371] Sleep (dwMilliseconds=0x1) [0252.387] Sleep (dwMilliseconds=0x1) [0252.402] Sleep (dwMilliseconds=0x1) [0252.419] Sleep (dwMilliseconds=0x1) [0252.438] Sleep (dwMilliseconds=0x1) [0252.449] Sleep (dwMilliseconds=0x1) [0252.465] Sleep (dwMilliseconds=0x1) [0252.480] Sleep (dwMilliseconds=0x1) [0252.496] Sleep (dwMilliseconds=0x1) [0252.511] Sleep (dwMilliseconds=0x1) [0252.528] Sleep (dwMilliseconds=0x1) [0252.543] Sleep (dwMilliseconds=0x1) [0252.571] Sleep (dwMilliseconds=0x1) [0252.574] Sleep (dwMilliseconds=0x1) [0252.590] Sleep (dwMilliseconds=0x1) [0252.605] Sleep (dwMilliseconds=0x1) [0252.621] Sleep (dwMilliseconds=0x1) [0252.638] Sleep (dwMilliseconds=0x1) [0252.652] Sleep (dwMilliseconds=0x1) [0252.667] Sleep (dwMilliseconds=0x1) [0252.683] Sleep (dwMilliseconds=0x1) [0252.699] Sleep (dwMilliseconds=0x1) [0252.714] Sleep (dwMilliseconds=0x1) [0252.730] Sleep (dwMilliseconds=0x1) [0252.747] Sleep (dwMilliseconds=0x1) [0252.761] Sleep (dwMilliseconds=0x1) [0252.777] Sleep (dwMilliseconds=0x1) [0252.792] Sleep (dwMilliseconds=0x1) [0252.808] Sleep (dwMilliseconds=0x1) [0252.823] Sleep (dwMilliseconds=0x1) [0252.839] Sleep (dwMilliseconds=0x1) [0252.856] Sleep (dwMilliseconds=0x1) [0252.870] Sleep (dwMilliseconds=0x1) [0252.886] Sleep (dwMilliseconds=0x1) [0252.902] Sleep (dwMilliseconds=0x1) [0252.917] Sleep (dwMilliseconds=0x1) [0252.933] Sleep (dwMilliseconds=0x1) [0252.948] Sleep (dwMilliseconds=0x1) [0252.965] Sleep (dwMilliseconds=0x1) [0252.979] Sleep (dwMilliseconds=0x1) [0252.996] Sleep (dwMilliseconds=0x1) [0253.011] Sleep (dwMilliseconds=0x1) [0253.026] Sleep (dwMilliseconds=0x1) [0253.042] Sleep (dwMilliseconds=0x1) [0253.058] Sleep (dwMilliseconds=0x1) [0253.074] Sleep (dwMilliseconds=0x1) [0253.089] Sleep (dwMilliseconds=0x1) [0253.104] Sleep (dwMilliseconds=0x1) [0253.120] Sleep (dwMilliseconds=0x1) [0253.135] Sleep (dwMilliseconds=0x1) [0253.151] Sleep (dwMilliseconds=0x1) [0253.167] Sleep (dwMilliseconds=0x1) [0253.184] Sleep (dwMilliseconds=0x1) [0253.198] Sleep (dwMilliseconds=0x1) [0253.214] Sleep (dwMilliseconds=0x1) [0253.229] Sleep (dwMilliseconds=0x1) [0253.245] Sleep (dwMilliseconds=0x1) [0253.260] Sleep (dwMilliseconds=0x1) [0253.276] Sleep (dwMilliseconds=0x1) [0253.293] Sleep (dwMilliseconds=0x1) [0253.307] Sleep (dwMilliseconds=0x1) [0253.323] Sleep (dwMilliseconds=0x1) [0253.338] Sleep (dwMilliseconds=0x1) [0253.354] Sleep (dwMilliseconds=0x1) [0253.370] Sleep (dwMilliseconds=0x1) [0253.398] Sleep (dwMilliseconds=0x1) [0253.402] Sleep (dwMilliseconds=0x1) [0253.416] Sleep (dwMilliseconds=0x1) [0253.432] Sleep (dwMilliseconds=0x1) [0253.447] Sleep (dwMilliseconds=0x1) [0253.463] Sleep (dwMilliseconds=0x1) [0253.479] Sleep (dwMilliseconds=0x1) [0253.494] Sleep (dwMilliseconds=0x1) [0253.511] Sleep (dwMilliseconds=0x1) [0253.526] Sleep (dwMilliseconds=0x1) [0253.541] Sleep (dwMilliseconds=0x1) [0253.557] Sleep (dwMilliseconds=0x1) [0253.589] Sleep (dwMilliseconds=0x1) [0253.603] Sleep (dwMilliseconds=0x1) [0253.620] Sleep (dwMilliseconds=0x1) [0253.635] Sleep (dwMilliseconds=0x1) [0253.650] Sleep (dwMilliseconds=0x1) [0253.666] Sleep (dwMilliseconds=0x1) [0253.682] Sleep (dwMilliseconds=0x1) [0253.697] Sleep (dwMilliseconds=0x1) [0253.713] Sleep (dwMilliseconds=0x1) [0253.730] Sleep (dwMilliseconds=0x1) [0253.744] Sleep (dwMilliseconds=0x1) [0253.760] Sleep (dwMilliseconds=0x1) [0253.775] Sleep (dwMilliseconds=0x1) [0253.791] Sleep (dwMilliseconds=0x1) [0253.806] Sleep (dwMilliseconds=0x1) [0253.822] Sleep (dwMilliseconds=0x1) [0253.839] Sleep (dwMilliseconds=0x1) [0253.853] Sleep (dwMilliseconds=0x1) [0253.869] Sleep (dwMilliseconds=0x1) [0253.884] Sleep (dwMilliseconds=0x1) [0253.900] Sleep (dwMilliseconds=0x1) [0253.917] Sleep (dwMilliseconds=0x1) [0253.932] Sleep (dwMilliseconds=0x1) [0253.948] Sleep (dwMilliseconds=0x1) [0253.962] Sleep (dwMilliseconds=0x1) [0253.978] Sleep (dwMilliseconds=0x1) [0253.994] Sleep (dwMilliseconds=0x1) [0254.009] Sleep (dwMilliseconds=0x1) [0254.025] Sleep (dwMilliseconds=0x1) [0254.040] Sleep (dwMilliseconds=0x1) [0254.057] Sleep (dwMilliseconds=0x1) [0254.071] Sleep (dwMilliseconds=0x1) [0254.087] Sleep (dwMilliseconds=0x1) [0254.103] Sleep (dwMilliseconds=0x1) [0254.118] Sleep (dwMilliseconds=0x1) [0254.136] Sleep (dwMilliseconds=0x1) [0254.150] Sleep (dwMilliseconds=0x1) [0254.166] Sleep (dwMilliseconds=0x1) [0254.181] Sleep (dwMilliseconds=0x1) [0254.196] Sleep (dwMilliseconds=0x1) [0254.212] Sleep (dwMilliseconds=0x1) [0254.227] Sleep (dwMilliseconds=0x1) [0254.243] Sleep (dwMilliseconds=0x1) [0254.259] Sleep (dwMilliseconds=0x1) [0254.276] Sleep (dwMilliseconds=0x1) [0254.290] Sleep (dwMilliseconds=0x1) [0254.306] Sleep (dwMilliseconds=0x1) [0254.321] Sleep (dwMilliseconds=0x1) [0254.337] Sleep (dwMilliseconds=0x1) [0254.352] Sleep (dwMilliseconds=0x1) [0254.368] Sleep (dwMilliseconds=0x1) [0254.385] Sleep (dwMilliseconds=0x1) [0254.399] Sleep (dwMilliseconds=0x1) [0254.415] Sleep (dwMilliseconds=0x1) [0254.430] Sleep (dwMilliseconds=0x1) [0254.446] Sleep (dwMilliseconds=0x1) [0254.462] Sleep (dwMilliseconds=0x1) [0254.477] Sleep (dwMilliseconds=0x1) [0254.504] Sleep (dwMilliseconds=0x1) [0254.508] Sleep (dwMilliseconds=0x1) [0254.526] Sleep (dwMilliseconds=0x1) [0254.539] Sleep (dwMilliseconds=0x1) [0254.555] Sleep (dwMilliseconds=0x1) [0254.584] Sleep (dwMilliseconds=0x1) [0254.586] Sleep (dwMilliseconds=0x1) [0254.603] Sleep (dwMilliseconds=0x1) [0254.618] Sleep (dwMilliseconds=0x1) [0254.633] Sleep (dwMilliseconds=0x1) [0254.649] Sleep (dwMilliseconds=0x1) [0254.664] Sleep (dwMilliseconds=0x1) [0254.680] Sleep (dwMilliseconds=0x1) [0254.695] Sleep (dwMilliseconds=0x1) [0254.713] Sleep (dwMilliseconds=0x1) [0254.727] Sleep (dwMilliseconds=0x1) [0254.742] Sleep (dwMilliseconds=0x1) [0254.758] Sleep (dwMilliseconds=0x1) [0254.774] Sleep (dwMilliseconds=0x1) [0254.789] Sleep (dwMilliseconds=0x1) [0254.805] Sleep (dwMilliseconds=0x1) [0254.822] Sleep (dwMilliseconds=0x1) [0254.836] Sleep (dwMilliseconds=0x1) [0254.852] Sleep (dwMilliseconds=0x1) [0254.867] Sleep (dwMilliseconds=0x1) [0254.883] Sleep (dwMilliseconds=0x1) [0254.898] Sleep (dwMilliseconds=0x1) [0254.914] Sleep (dwMilliseconds=0x1) [0254.932] Sleep (dwMilliseconds=0x1) [0254.945] Sleep (dwMilliseconds=0x1) [0254.961] Sleep (dwMilliseconds=0x1) [0254.976] Sleep (dwMilliseconds=0x1) [0254.992] Sleep (dwMilliseconds=0x1) [0255.007] Sleep (dwMilliseconds=0x1) [0255.023] Sleep (dwMilliseconds=0x1) [0255.040] Sleep (dwMilliseconds=0x1) [0255.054] Sleep (dwMilliseconds=0x1) [0255.070] Sleep (dwMilliseconds=0x1) [0255.086] Sleep (dwMilliseconds=0x1) [0255.101] Sleep (dwMilliseconds=0x1) [0255.117] Sleep (dwMilliseconds=0x1) [0255.132] Sleep (dwMilliseconds=0x1) [0255.149] Sleep (dwMilliseconds=0x1) [0255.163] Sleep (dwMilliseconds=0x1) [0255.179] Sleep (dwMilliseconds=0x1) [0255.195] Sleep (dwMilliseconds=0x1) [0255.210] Sleep (dwMilliseconds=0x1) [0255.226] Sleep (dwMilliseconds=0x1) [0255.243] Sleep (dwMilliseconds=0x1) [0255.258] Sleep (dwMilliseconds=0x1) [0255.273] Sleep (dwMilliseconds=0x1) [0255.288] Sleep (dwMilliseconds=0x1) [0255.304] Sleep (dwMilliseconds=0x1) [0255.319] Sleep (dwMilliseconds=0x1) [0255.335] Sleep (dwMilliseconds=0x1) [0255.350] Sleep (dwMilliseconds=0x1) [0255.367] Sleep (dwMilliseconds=0x1) [0255.382] Sleep (dwMilliseconds=0x1) [0255.397] Sleep (dwMilliseconds=0x1) [0255.413] Sleep (dwMilliseconds=0x1) [0255.429] Sleep (dwMilliseconds=0x1) [0255.444] Sleep (dwMilliseconds=0x1) [0255.460] Sleep (dwMilliseconds=0x1) [0255.477] Sleep (dwMilliseconds=0x1) [0255.491] Sleep (dwMilliseconds=0x1) [0255.506] Sleep (dwMilliseconds=0x1) [0255.522] Sleep (dwMilliseconds=0x1) [0255.538] Sleep (dwMilliseconds=0x1) [0255.553] Sleep (dwMilliseconds=0x1) [0255.593] Sleep (dwMilliseconds=0x1) [0255.600] Sleep (dwMilliseconds=0x1) [0255.616] Sleep (dwMilliseconds=0x1) [0255.632] Sleep (dwMilliseconds=0x1) [0255.647] Sleep (dwMilliseconds=0x1) [0255.662] Sleep (dwMilliseconds=0x1) [0255.678] Sleep (dwMilliseconds=0x1) [0255.695] Sleep (dwMilliseconds=0x1) [0255.709] Sleep (dwMilliseconds=0x1) [0255.725] Sleep (dwMilliseconds=0x1) [0255.741] Sleep (dwMilliseconds=0x1) [0255.757] Sleep (dwMilliseconds=0x1) [0255.772] Sleep (dwMilliseconds=0x1) [0255.787] Sleep (dwMilliseconds=0x1) [0255.804] Sleep (dwMilliseconds=0x1) [0255.819] Sleep (dwMilliseconds=0x1) [0255.834] Sleep (dwMilliseconds=0x1) [0255.850] Sleep (dwMilliseconds=0x1) [0255.865] Sleep (dwMilliseconds=0x1) [0255.881] Sleep (dwMilliseconds=0x1) [0255.897] Sleep (dwMilliseconds=0x1) [0255.914] Sleep (dwMilliseconds=0x1) [0255.928] Sleep (dwMilliseconds=0x1) [0255.943] Sleep (dwMilliseconds=0x1) [0255.959] Sleep (dwMilliseconds=0x1) [0255.975] Sleep (dwMilliseconds=0x1) [0255.990] Sleep (dwMilliseconds=0x1) [0256.006] Sleep (dwMilliseconds=0x1) [0256.024] Sleep (dwMilliseconds=0x1) [0256.037] Sleep (dwMilliseconds=0x1) [0256.052] Sleep (dwMilliseconds=0x1) [0256.068] Sleep (dwMilliseconds=0x1) [0256.084] Sleep (dwMilliseconds=0x1) [0256.099] Sleep (dwMilliseconds=0x1) [0256.115] Sleep (dwMilliseconds=0x1) [0256.132] Sleep (dwMilliseconds=0x1) [0256.146] Sleep (dwMilliseconds=0x1) [0256.162] Sleep (dwMilliseconds=0x1) [0256.177] Sleep (dwMilliseconds=0x1) [0256.193] Sleep (dwMilliseconds=0x1) [0256.209] Sleep (dwMilliseconds=0x1) [0256.224] Sleep (dwMilliseconds=0x1) [0256.241] Sleep (dwMilliseconds=0x1) [0256.255] Sleep (dwMilliseconds=0x1) [0256.271] Sleep (dwMilliseconds=0x1) [0256.287] Sleep (dwMilliseconds=0x1) [0256.303] Sleep (dwMilliseconds=0x1) [0256.318] Sleep (dwMilliseconds=0x1) [0256.333] Sleep (dwMilliseconds=0x1) [0256.352] Sleep (dwMilliseconds=0x1) [0256.364] Sleep (dwMilliseconds=0x1) [0256.380] Sleep (dwMilliseconds=0x1) [0256.396] Sleep (dwMilliseconds=0x1) [0256.411] Sleep (dwMilliseconds=0x1) [0256.427] Sleep (dwMilliseconds=0x1) [0256.443] Sleep (dwMilliseconds=0x1) [0256.460] Sleep (dwMilliseconds=0x1) [0256.474] Sleep (dwMilliseconds=0x1) [0256.489] Sleep (dwMilliseconds=0x1) [0256.505] Sleep (dwMilliseconds=0x1) [0256.521] Sleep (dwMilliseconds=0x1) [0256.536] Sleep (dwMilliseconds=0x1) [0256.552] Sleep (dwMilliseconds=0x1) [0256.598] Sleep (dwMilliseconds=0x1) [0256.598] Sleep (dwMilliseconds=0x1) [0256.614] Sleep (dwMilliseconds=0x1) [0256.630] Sleep (dwMilliseconds=0x1) [0256.645] Sleep (dwMilliseconds=0x1) [0256.663] Sleep (dwMilliseconds=0x1) [0256.677] Sleep (dwMilliseconds=0x1) [0256.693] Sleep (dwMilliseconds=0x1) [0256.708] Sleep (dwMilliseconds=0x1) [0256.723] Sleep (dwMilliseconds=0x1) [0256.741] Sleep (dwMilliseconds=0x1) [0256.755] Sleep (dwMilliseconds=0x1) [0256.770] Sleep (dwMilliseconds=0x1) [0256.786] Sleep (dwMilliseconds=0x1) [0256.802] Sleep (dwMilliseconds=0x1) [0256.817] Sleep (dwMilliseconds=0x1) [0256.833] Sleep (dwMilliseconds=0x1) [0256.848] Sleep (dwMilliseconds=0x1) [0256.864] Sleep (dwMilliseconds=0x1) [0256.879] Sleep (dwMilliseconds=0x1) [0256.896] Sleep (dwMilliseconds=0x1) [0256.912] Sleep (dwMilliseconds=0x1) [0256.926] Sleep (dwMilliseconds=0x1) [0256.942] Sleep (dwMilliseconds=0x1) [0256.958] Sleep (dwMilliseconds=0x1) [0256.973] Sleep (dwMilliseconds=0x1) [0256.991] Sleep (dwMilliseconds=0x1) [0257.016] Sleep (dwMilliseconds=0x1) [0257.028] Sleep (dwMilliseconds=0x1) [0257.041] Sleep (dwMilliseconds=0x1) [0257.119] Sleep (dwMilliseconds=0x1) [0257.140] Sleep (dwMilliseconds=0x1) [0257.146] Sleep (dwMilliseconds=0x1) [0257.160] Sleep (dwMilliseconds=0x1) [0257.239] Sleep (dwMilliseconds=0x1) [0257.285] Sleep (dwMilliseconds=0x1) [0257.332] Sleep (dwMilliseconds=0x1) [0257.380] Sleep (dwMilliseconds=0x1) [0257.426] Sleep (dwMilliseconds=0x1) [0257.458] Sleep (dwMilliseconds=0x1) [0257.499] Sleep (dwMilliseconds=0x1) [0257.550] Sleep (dwMilliseconds=0x1) [0257.619] Sleep (dwMilliseconds=0x1) [0257.682] Sleep (dwMilliseconds=0x1) [0257.722] Sleep (dwMilliseconds=0x1) [0257.756] Sleep (dwMilliseconds=0x1) [0257.800] Sleep (dwMilliseconds=0x1) [0257.898] Sleep (dwMilliseconds=0x1) [0257.913] Sleep (dwMilliseconds=0x1) [0257.925] Sleep (dwMilliseconds=0x1) [0257.940] Sleep (dwMilliseconds=0x1) [0257.956] Sleep (dwMilliseconds=0x1) [0257.971] Sleep (dwMilliseconds=0x1) [0257.987] Sleep (dwMilliseconds=0x1) [0258.005] Sleep (dwMilliseconds=0x1) [0258.018] Sleep (dwMilliseconds=0x1) [0258.034] Sleep (dwMilliseconds=0x1) [0258.049] Sleep (dwMilliseconds=0x1) [0258.066] Sleep (dwMilliseconds=0x1) [0258.081] Sleep (dwMilliseconds=0x1) [0258.096] Sleep (dwMilliseconds=0x1) [0258.114] Sleep (dwMilliseconds=0x1) [0258.127] Sleep (dwMilliseconds=0x1) [0258.143] Sleep (dwMilliseconds=0x1) [0258.159] Sleep (dwMilliseconds=0x1) [0258.175] Sleep (dwMilliseconds=0x1) [0258.190] Sleep (dwMilliseconds=0x1) [0258.205] Sleep (dwMilliseconds=0x1) [0258.223] Sleep (dwMilliseconds=0x1) [0258.237] Sleep (dwMilliseconds=0x1) [0258.252] Sleep (dwMilliseconds=0x1) [0258.268] Sleep (dwMilliseconds=0x1) [0258.283] Sleep (dwMilliseconds=0x1) [0258.299] Sleep (dwMilliseconds=0x1) [0258.315] Sleep (dwMilliseconds=0x1) [0258.332] Sleep (dwMilliseconds=0x1) [0258.346] Sleep (dwMilliseconds=0x1) [0258.361] Sleep (dwMilliseconds=0x1) [0258.377] Sleep (dwMilliseconds=0x1) [0258.393] Sleep (dwMilliseconds=0x1) [0258.408] Sleep (dwMilliseconds=0x1) [0258.424] Sleep (dwMilliseconds=0x1) [0258.441] Sleep (dwMilliseconds=0x1) [0258.455] Sleep (dwMilliseconds=0x1) [0258.471] Sleep (dwMilliseconds=0x1) [0258.486] Sleep (dwMilliseconds=0x1) [0258.502] Sleep (dwMilliseconds=0x1) [0258.517] Sleep (dwMilliseconds=0x1) [0258.533] Sleep (dwMilliseconds=0x1) [0258.550] Sleep (dwMilliseconds=0x1) [0258.588] Sleep (dwMilliseconds=0x1) [0258.604] Sleep (dwMilliseconds=0x1) [0258.611] Sleep (dwMilliseconds=0x1) [0258.627] Sleep (dwMilliseconds=0x1) [0258.642] Sleep (dwMilliseconds=0x1) [0258.659] Sleep (dwMilliseconds=0x1) [0258.673] Sleep (dwMilliseconds=0x1) [0258.689] Sleep (dwMilliseconds=0x1) [0258.705] Sleep (dwMilliseconds=0x1) [0258.720] Sleep (dwMilliseconds=0x1) [0258.736] Sleep (dwMilliseconds=0x1) [0258.752] Sleep (dwMilliseconds=0x1) [0258.769] Sleep (dwMilliseconds=0x1) [0258.783] Sleep (dwMilliseconds=0x1) [0258.799] Sleep (dwMilliseconds=0x1) [0258.814] Sleep (dwMilliseconds=0x1) [0258.830] Sleep (dwMilliseconds=0x1) [0258.845] Sleep (dwMilliseconds=0x1) [0258.861] Sleep (dwMilliseconds=0x1) [0258.878] Sleep (dwMilliseconds=0x1) [0258.895] Sleep (dwMilliseconds=0x1) [0258.908] Sleep (dwMilliseconds=0x1) [0258.924] Sleep (dwMilliseconds=0x1) [0258.939] Sleep (dwMilliseconds=0x1) [0258.956] Sleep (dwMilliseconds=0x1) [0258.971] Sleep (dwMilliseconds=0x1) [0258.988] Sleep (dwMilliseconds=0x1) [0259.002] Sleep (dwMilliseconds=0x1) [0259.018] Sleep (dwMilliseconds=0x1) [0259.033] Sleep (dwMilliseconds=0x1) [0259.049] Sleep (dwMilliseconds=0x1) [0259.064] Sleep (dwMilliseconds=0x1) [0259.080] Sleep (dwMilliseconds=0x1) [0259.097] Sleep (dwMilliseconds=0x1) [0259.111] Sleep (dwMilliseconds=0x1) [0259.127] Sleep (dwMilliseconds=0x1) [0259.142] Sleep (dwMilliseconds=0x1) [0259.158] Sleep (dwMilliseconds=0x1) [0259.174] Sleep (dwMilliseconds=0x1) [0259.189] Sleep (dwMilliseconds=0x1) [0259.207] Sleep (dwMilliseconds=0x1) [0259.219] Sleep (dwMilliseconds=0x1) [0259.235] Sleep (dwMilliseconds=0x1) [0259.251] Sleep (dwMilliseconds=0x1) [0259.267] Sleep (dwMilliseconds=0x1) [0259.282] Sleep (dwMilliseconds=0x1) [0259.298] Sleep (dwMilliseconds=0x1) [0259.322] Sleep (dwMilliseconds=0x1) [0259.329] Sleep (dwMilliseconds=0x1) [0259.352] Sleep (dwMilliseconds=0x1) [0259.729] Sleep (dwMilliseconds=0x1) [0259.766] Sleep (dwMilliseconds=0x1) [0260.040] Sleep (dwMilliseconds=0x1) [0260.061] Sleep (dwMilliseconds=0x1) [0260.082] Sleep (dwMilliseconds=0x1) [0260.125] Sleep (dwMilliseconds=0x1) [0260.145] Sleep (dwMilliseconds=0x1) [0260.253] Sleep (dwMilliseconds=0x1) [0260.319] Sleep (dwMilliseconds=0x1) [0260.329] Sleep (dwMilliseconds=0x1) [0260.347] Sleep (dwMilliseconds=0x1) [0260.361] Sleep (dwMilliseconds=0x1) [0260.377] Sleep (dwMilliseconds=0x1) [0260.392] Sleep (dwMilliseconds=0x1) [0260.407] Sleep (dwMilliseconds=0x1) [0260.422] Sleep (dwMilliseconds=0x1) [0260.437] Sleep (dwMilliseconds=0x1) [0260.453] Sleep (dwMilliseconds=0x1) [0260.468] Sleep (dwMilliseconds=0x1) [0260.486] Sleep (dwMilliseconds=0x1) [0260.499] Sleep (dwMilliseconds=0x1) [0260.515] Sleep (dwMilliseconds=0x1) [0260.530] Sleep (dwMilliseconds=0x1) [0260.546] Sleep (dwMilliseconds=0x1) [0260.562] Sleep (dwMilliseconds=0x1) [0260.577] Sleep (dwMilliseconds=0x1) [0260.594] Sleep (dwMilliseconds=0x1) [0260.608] Sleep (dwMilliseconds=0x1) [0260.624] Sleep (dwMilliseconds=0x1) [0260.640] Sleep (dwMilliseconds=0x1) [0260.655] Sleep (dwMilliseconds=0x1) [0260.671] Sleep (dwMilliseconds=0x1) [0260.686] Sleep (dwMilliseconds=0x1) [0260.703] Sleep (dwMilliseconds=0x1) [0260.717] Sleep (dwMilliseconds=0x1) [0260.733] Sleep (dwMilliseconds=0x1) [0260.748] Sleep (dwMilliseconds=0x1) [0260.764] Sleep (dwMilliseconds=0x1) [0260.804] Sleep (dwMilliseconds=0x1) [0260.823] Sleep (dwMilliseconds=0x1) [0260.827] Sleep (dwMilliseconds=0x1) [0260.851] Sleep (dwMilliseconds=0x1) [0260.859] Sleep (dwMilliseconds=0x1) [0260.873] Sleep (dwMilliseconds=0x1) [0260.889] Sleep (dwMilliseconds=0x1) [0260.905] Sleep (dwMilliseconds=0x1) [0260.994] Sleep (dwMilliseconds=0x1) [0261.032] Sleep (dwMilliseconds=0x1) [0261.079] Sleep (dwMilliseconds=0x1) [0261.138] Sleep (dwMilliseconds=0x1) [0261.201] Sleep (dwMilliseconds=0x1) [0261.255] Sleep (dwMilliseconds=0x1) [0261.273] Sleep (dwMilliseconds=0x1) [0261.292] Sleep (dwMilliseconds=0x1) [0261.295] Sleep (dwMilliseconds=0x1) [0261.311] Sleep (dwMilliseconds=0x1) [0261.326] Sleep (dwMilliseconds=0x1) [0261.341] Sleep (dwMilliseconds=0x1) [0261.358] Sleep (dwMilliseconds=0x1) [0261.372] Sleep (dwMilliseconds=0x1) [0261.388] Sleep (dwMilliseconds=0x1) [0261.403] Sleep (dwMilliseconds=0x1) [0261.419] Sleep (dwMilliseconds=0x1) [0261.435] Sleep (dwMilliseconds=0x1) [0261.450] Sleep (dwMilliseconds=0x1) [0261.468] Sleep (dwMilliseconds=0x1) [0261.481] Sleep (dwMilliseconds=0x1) [0261.497] Sleep (dwMilliseconds=0x1) [0261.513] Sleep (dwMilliseconds=0x1) [0261.528] Sleep (dwMilliseconds=0x1) [0261.544] Sleep (dwMilliseconds=0x1) [0261.559] Sleep (dwMilliseconds=0x1) [0261.577] Sleep (dwMilliseconds=0x1) [0261.591] Sleep (dwMilliseconds=0x1) [0261.606] Sleep (dwMilliseconds=0x1) [0261.622] Sleep (dwMilliseconds=0x1) [0261.638] Sleep (dwMilliseconds=0x1) [0261.653] Sleep (dwMilliseconds=0x1) [0261.669] Sleep (dwMilliseconds=0x1) [0261.686] Sleep (dwMilliseconds=0x1) [0261.700] Sleep (dwMilliseconds=0x1) [0261.715] Sleep (dwMilliseconds=0x1) [0261.731] Sleep (dwMilliseconds=0x1) [0261.747] Sleep (dwMilliseconds=0x1) [0261.762] Sleep (dwMilliseconds=0x1) [0261.778] Sleep (dwMilliseconds=0x1) [0261.795] Sleep (dwMilliseconds=0x1) [0261.809] Sleep (dwMilliseconds=0x1) [0261.825] Sleep (dwMilliseconds=0x1) [0261.840] Sleep (dwMilliseconds=0x1) [0261.856] Sleep (dwMilliseconds=0x1) [0261.871] Sleep (dwMilliseconds=0x1) [0261.898] Sleep (dwMilliseconds=0x1) [0261.904] Sleep (dwMilliseconds=0x1) [0261.918] Sleep (dwMilliseconds=0x1) [0261.934] Sleep (dwMilliseconds=0x1) [0261.949] Sleep (dwMilliseconds=0x1) [0261.965] Sleep (dwMilliseconds=0x1) [0261.982] Sleep (dwMilliseconds=0x1) [0261.996] Sleep (dwMilliseconds=0x1) [0262.013] Sleep (dwMilliseconds=0x1) [0262.027] Sleep (dwMilliseconds=0x1) [0262.043] Sleep (dwMilliseconds=0x1) [0262.059] Sleep (dwMilliseconds=0x1) [0262.075] Sleep (dwMilliseconds=0x1) [0262.090] Sleep (dwMilliseconds=0x1) [0262.105] Sleep (dwMilliseconds=0x1) [0262.123] Sleep (dwMilliseconds=0x1) [0262.137] Sleep (dwMilliseconds=0x1) [0262.169] Sleep (dwMilliseconds=0x1) [0262.194] Sleep (dwMilliseconds=0x1) [0262.200] Sleep (dwMilliseconds=0x1) [0262.215] Sleep (dwMilliseconds=0x1) [0262.232] Sleep (dwMilliseconds=0x1) [0262.246] Sleep (dwMilliseconds=0x1) [0262.261] Sleep (dwMilliseconds=0x1) [0262.277] Sleep (dwMilliseconds=0x1) [0262.293] Sleep (dwMilliseconds=0x1) [0262.308] Sleep (dwMilliseconds=0x1) [0262.324] Sleep (dwMilliseconds=0x1) [0262.341] Sleep (dwMilliseconds=0x1) [0262.355] Sleep (dwMilliseconds=0x1) [0262.371] Sleep (dwMilliseconds=0x1) [0262.386] Sleep (dwMilliseconds=0x1) [0262.405] Sleep (dwMilliseconds=0x1) [0262.417] Sleep (dwMilliseconds=0x1) [0262.433] Sleep (dwMilliseconds=0x1) [0262.450] Sleep (dwMilliseconds=0x1) [0262.464] Sleep (dwMilliseconds=0x1) [0262.480] Sleep (dwMilliseconds=0x1) [0262.495] Sleep (dwMilliseconds=0x1) [0262.511] Sleep (dwMilliseconds=0x1) [0262.527] Sleep (dwMilliseconds=0x1) [0262.542] Sleep (dwMilliseconds=0x1) [0262.560] Sleep (dwMilliseconds=0x1) [0262.574] Sleep (dwMilliseconds=0x1) [0262.589] Sleep (dwMilliseconds=0x1) [0262.605] Sleep (dwMilliseconds=0x1) [0262.620] Sleep (dwMilliseconds=0x1) [0262.636] Sleep (dwMilliseconds=0x1) [0262.652] Sleep (dwMilliseconds=0x1) [0262.669] Sleep (dwMilliseconds=0x1) [0262.683] Sleep (dwMilliseconds=0x1) [0262.698] Sleep (dwMilliseconds=0x1) [0262.714] Sleep (dwMilliseconds=0x1) [0262.729] Sleep (dwMilliseconds=0x1) [0262.745] Sleep (dwMilliseconds=0x1) [0262.761] Sleep (dwMilliseconds=0x1) [0262.778] Sleep (dwMilliseconds=0x1) [0262.792] Sleep (dwMilliseconds=0x1) [0262.808] Sleep (dwMilliseconds=0x1) [0262.823] Sleep (dwMilliseconds=0x1) [0262.840] Sleep (dwMilliseconds=0x1) [0262.854] Sleep (dwMilliseconds=0x1) [0262.870] Sleep (dwMilliseconds=0x1) [0262.935] Sleep (dwMilliseconds=0x1) [0262.959] Sleep (dwMilliseconds=0x1) [0262.985] Sleep (dwMilliseconds=0x1) [0263.016] Sleep (dwMilliseconds=0x1) [0263.036] Sleep (dwMilliseconds=0x1) [0263.042] Sleep (dwMilliseconds=0x1) [0263.068] Sleep (dwMilliseconds=0x1) [0263.074] Sleep (dwMilliseconds=0x1) [0263.090] Sleep (dwMilliseconds=0x1) [0263.104] Sleep (dwMilliseconds=0x1) [0263.120] Sleep (dwMilliseconds=0x1) [0263.135] Sleep (dwMilliseconds=0x1) [0263.151] Sleep (dwMilliseconds=0x1) [0263.166] Sleep (dwMilliseconds=0x1) [0263.183] Sleep (dwMilliseconds=0x1) [0263.197] Sleep (dwMilliseconds=0x1) [0263.230] Sleep (dwMilliseconds=0x1) [0263.244] Sleep (dwMilliseconds=0x1) [0263.260] Sleep (dwMilliseconds=0x1) [0263.275] Sleep (dwMilliseconds=0x1) [0263.292] Sleep (dwMilliseconds=0x1) [0263.307] Sleep (dwMilliseconds=0x1) [0263.322] Sleep (dwMilliseconds=0x1) [0263.338] Sleep (dwMilliseconds=0x1) [0263.353] Sleep (dwMilliseconds=0x1) [0263.370] Sleep (dwMilliseconds=0x1) [0263.385] Sleep (dwMilliseconds=0x1) [0263.401] Sleep (dwMilliseconds=0x1) [0263.416] Sleep (dwMilliseconds=0x1) [0263.432] Sleep (dwMilliseconds=0x1) [0263.447] Sleep (dwMilliseconds=0x1) [0263.463] Sleep (dwMilliseconds=0x1) [0263.479] Sleep (dwMilliseconds=0x1) [0263.494] Sleep (dwMilliseconds=0x1) [0263.510] Sleep (dwMilliseconds=0x1) [0263.525] Sleep (dwMilliseconds=0x1) [0263.547] Sleep (dwMilliseconds=0x1) [0263.556] Sleep (dwMilliseconds=0x1) [0263.572] Sleep (dwMilliseconds=0x1) [0263.588] Sleep (dwMilliseconds=0x1) [0263.603] Sleep (dwMilliseconds=0x1) [0263.622] Sleep (dwMilliseconds=0x1) [0263.634] Sleep (dwMilliseconds=0x1) [0263.650] Sleep (dwMilliseconds=0x1) [0263.665] Sleep (dwMilliseconds=0x1) [0263.681] Sleep (dwMilliseconds=0x1) [0263.697] Sleep (dwMilliseconds=0x1) [0263.712] Sleep (dwMilliseconds=0x1) [0263.729] Sleep (dwMilliseconds=0x1) [0263.743] Sleep (dwMilliseconds=0x1) [0263.759] Sleep (dwMilliseconds=0x1) [0263.775] Sleep (dwMilliseconds=0x1) [0263.790] Sleep (dwMilliseconds=0x1) [0263.806] Sleep (dwMilliseconds=0x1) [0263.821] Sleep (dwMilliseconds=0x1) [0263.839] Sleep (dwMilliseconds=0x1) [0263.853] Sleep (dwMilliseconds=0x1) [0263.868] Sleep (dwMilliseconds=0x1) [0263.884] Sleep (dwMilliseconds=0x1) [0263.899] Sleep (dwMilliseconds=0x1) [0263.916] Sleep (dwMilliseconds=0x1) [0263.931] Sleep (dwMilliseconds=0x1) [0263.963] Sleep (dwMilliseconds=0x1) [0263.980] Sleep (dwMilliseconds=0x1) [0263.993] Sleep (dwMilliseconds=0x1) [0264.010] Sleep (dwMilliseconds=0x1) [0264.025] Sleep (dwMilliseconds=0x1) [0264.040] Sleep (dwMilliseconds=0x1) [0264.055] Sleep (dwMilliseconds=0x1) [0264.073] Sleep (dwMilliseconds=0x1) [0264.087] Sleep (dwMilliseconds=0x1) [0264.102] Sleep (dwMilliseconds=0x1) [0264.118] Sleep (dwMilliseconds=0x1) [0264.134] Sleep (dwMilliseconds=0x1) [0264.149] Sleep (dwMilliseconds=0x1) [0264.165] Sleep (dwMilliseconds=0x1) [0264.181] Sleep (dwMilliseconds=0x1) [0264.196] Sleep (dwMilliseconds=0x1) [0264.211] Sleep (dwMilliseconds=0x1) [0264.245] Sleep (dwMilliseconds=0x1) [0264.258] Sleep (dwMilliseconds=0x1) [0264.274] Sleep (dwMilliseconds=0x1) [0264.290] Sleep (dwMilliseconds=0x1) [0264.305] Sleep (dwMilliseconds=0x1) [0264.321] Sleep (dwMilliseconds=0x1) [0264.337] Sleep (dwMilliseconds=0x1) [0264.352] Sleep (dwMilliseconds=0x1) [0264.367] Sleep (dwMilliseconds=0x1) [0264.383] Sleep (dwMilliseconds=0x1) [0264.401] Sleep (dwMilliseconds=0x1) [0264.414] Sleep (dwMilliseconds=0x1) [0264.430] Sleep (dwMilliseconds=0x1) [0264.446] Sleep (dwMilliseconds=0x1) [0264.461] Sleep (dwMilliseconds=0x1) [0264.477] Sleep (dwMilliseconds=0x1) [0264.492] Sleep (dwMilliseconds=0x1) [0264.509] Sleep (dwMilliseconds=0x1) [0264.523] Sleep (dwMilliseconds=0x1) [0264.539] Sleep (dwMilliseconds=0x1) [0264.555] Sleep (dwMilliseconds=0x1) [0264.570] Sleep (dwMilliseconds=0x1) [0264.586] Sleep (dwMilliseconds=0x1) [0264.601] Sleep (dwMilliseconds=0x1) [0264.618] Sleep (dwMilliseconds=0x1) [0264.633] Sleep (dwMilliseconds=0x1) [0264.648] Sleep (dwMilliseconds=0x1) [0264.664] Sleep (dwMilliseconds=0x1) [0264.680] Sleep (dwMilliseconds=0x1) [0264.695] Sleep (dwMilliseconds=0x1) [0264.711] Sleep (dwMilliseconds=0x1) [0264.728] Sleep (dwMilliseconds=0x1) [0264.742] Sleep (dwMilliseconds=0x1) [0264.757] Sleep (dwMilliseconds=0x1) [0264.773] Sleep (dwMilliseconds=0x1) [0264.791] Sleep (dwMilliseconds=0x1) [0264.804] Sleep (dwMilliseconds=0x1) [0264.820] Sleep (dwMilliseconds=0x1) [0264.836] Sleep (dwMilliseconds=0x1) [0264.851] Sleep (dwMilliseconds=0x1) [0264.867] Sleep (dwMilliseconds=0x1) [0264.883] Sleep (dwMilliseconds=0x1) [0264.898] Sleep (dwMilliseconds=0x1) [0264.914] Sleep (dwMilliseconds=0x1) [0264.929] Sleep (dwMilliseconds=0x1) [0264.946] Sleep (dwMilliseconds=0x1) [0264.964] Sleep (dwMilliseconds=0x1) [0265.052] Sleep (dwMilliseconds=0x1) [0265.055] Sleep (dwMilliseconds=0x1) [0265.069] Sleep (dwMilliseconds=0x1) [0265.085] Sleep (dwMilliseconds=0x1) [0265.102] Sleep (dwMilliseconds=0x1) [0265.132] Sleep (dwMilliseconds=0x1) [0265.151] Sleep (dwMilliseconds=0x1) [0265.212] Sleep (dwMilliseconds=0x1) [0265.248] Sleep (dwMilliseconds=0x1) [0265.295] Sleep (dwMilliseconds=0x1) [0265.303] Sleep (dwMilliseconds=0x1) [0265.320] Sleep (dwMilliseconds=0x1) [0265.335] Sleep (dwMilliseconds=0x1) [0265.352] Sleep (dwMilliseconds=0x1) [0265.368] Sleep (dwMilliseconds=0x1) [0265.383] Sleep (dwMilliseconds=0x1) [0265.399] Sleep (dwMilliseconds=0x1) [0265.415] Sleep (dwMilliseconds=0x1) [0265.430] Sleep (dwMilliseconds=0x1) [0265.446] Sleep (dwMilliseconds=0x1) [0265.461] Sleep (dwMilliseconds=0x1) [0265.478] Sleep (dwMilliseconds=0x1) [0265.497] Sleep (dwMilliseconds=0x1) [0266.001] Sleep (dwMilliseconds=0x1) [0266.007] Sleep (dwMilliseconds=0x1) [0266.027] Sleep (dwMilliseconds=0x1) [0266.041] Sleep (dwMilliseconds=0x1) [0266.186] Sleep (dwMilliseconds=0x1) [0266.221] Sleep (dwMilliseconds=0x1) [0266.246] Sleep (dwMilliseconds=0x1) [0266.261] Sleep (dwMilliseconds=0x1) [0267.642] Sleep (dwMilliseconds=0x1) [0267.645] Sleep (dwMilliseconds=0x1) [0267.659] Sleep (dwMilliseconds=0x1) [0267.675] Sleep (dwMilliseconds=0x1) [0267.691] Sleep (dwMilliseconds=0x1) [0267.758] Sleep (dwMilliseconds=0x1) [0267.770] Sleep (dwMilliseconds=0x1) [0267.794] Sleep (dwMilliseconds=0x1) [0267.800] Sleep (dwMilliseconds=0x1) [0267.819] Sleep (dwMilliseconds=0x1) [0267.831] Sleep (dwMilliseconds=0x1) [0267.848] Sleep (dwMilliseconds=0x1) [0267.863] Sleep (dwMilliseconds=0x1) [0267.932] Sleep (dwMilliseconds=0x1) [0267.995] Sleep (dwMilliseconds=0x1) [0268.003] Sleep (dwMilliseconds=0x1) [0268.025] Sleep (dwMilliseconds=0x1) [0268.033] Sleep (dwMilliseconds=0x1) [0268.050] Sleep (dwMilliseconds=0x1) [0268.065] Sleep (dwMilliseconds=0x1) [0268.080] Sleep (dwMilliseconds=0x1) [0268.100] Sleep (dwMilliseconds=0x1) [0268.112] Sleep (dwMilliseconds=0x1) [0268.127] Sleep (dwMilliseconds=0x1) [0268.143] Sleep (dwMilliseconds=0x1) [0268.158] Sleep (dwMilliseconds=0x1) [0268.174] Sleep (dwMilliseconds=0x1) [0268.190] Sleep (dwMilliseconds=0x1) [0268.206] Sleep (dwMilliseconds=0x1) [0268.271] Sleep (dwMilliseconds=0x1) [0268.288] Sleep (dwMilliseconds=0x1) [0268.300] Sleep (dwMilliseconds=0x1) [0268.317] Sleep (dwMilliseconds=0x1) [0268.330] Sleep (dwMilliseconds=0x1) [0268.345] Sleep (dwMilliseconds=0x1) [0268.361] Sleep (dwMilliseconds=0x1) [0268.377] Sleep (dwMilliseconds=0x1) [0268.392] Sleep (dwMilliseconds=0x1) [0268.393] Sleep (dwMilliseconds=0x1) [0268.394] Sleep (dwMilliseconds=0x1) [0268.395] Sleep (dwMilliseconds=0x1) [0268.396] Sleep (dwMilliseconds=0x1) [0268.397] Sleep (dwMilliseconds=0x1) [0268.399] Sleep (dwMilliseconds=0x1) [0268.400] Sleep (dwMilliseconds=0x1) [0268.401] Sleep (dwMilliseconds=0x1) [0268.402] Sleep (dwMilliseconds=0x1) [0268.404] Sleep (dwMilliseconds=0x1) [0268.405] Sleep (dwMilliseconds=0x1) [0268.406] Sleep (dwMilliseconds=0x1) [0268.407] Sleep (dwMilliseconds=0x1) [0268.408] Sleep (dwMilliseconds=0x1) [0268.410] Sleep (dwMilliseconds=0x1) [0268.410] Sleep (dwMilliseconds=0x1) [0268.411] Sleep (dwMilliseconds=0x1) [0268.412] Sleep (dwMilliseconds=0x1) [0268.413] Sleep (dwMilliseconds=0x1) [0268.415] Sleep (dwMilliseconds=0x1) [0268.416] Sleep (dwMilliseconds=0x1) [0268.417] Sleep (dwMilliseconds=0x1) [0268.419] Sleep (dwMilliseconds=0x1) [0268.419] Sleep (dwMilliseconds=0x1) [0268.420] Sleep (dwMilliseconds=0x1) [0268.422] Sleep (dwMilliseconds=0x1) [0268.427] Sleep (dwMilliseconds=0x1) [0268.428] Sleep (dwMilliseconds=0x1) [0268.429] Sleep (dwMilliseconds=0x1) [0268.430] Sleep (dwMilliseconds=0x1) [0268.431] Sleep (dwMilliseconds=0x1) [0268.432] Sleep (dwMilliseconds=0x1) [0268.433] Sleep (dwMilliseconds=0x1) [0268.434] Sleep (dwMilliseconds=0x1) [0268.436] Sleep (dwMilliseconds=0x1) [0268.437] Sleep (dwMilliseconds=0x1) [0268.439] Sleep (dwMilliseconds=0x1) [0268.439] Sleep (dwMilliseconds=0x1) [0268.440] Sleep (dwMilliseconds=0x1) [0268.441] Sleep (dwMilliseconds=0x1) [0268.442] Sleep (dwMilliseconds=0x1) [0268.443] Sleep (dwMilliseconds=0x1) [0268.447] Sleep (dwMilliseconds=0x1) [0268.447] Sleep (dwMilliseconds=0x1) [0268.448] Sleep (dwMilliseconds=0x1) [0268.449] Sleep (dwMilliseconds=0x1) [0268.450] Sleep (dwMilliseconds=0x1) [0268.451] Sleep (dwMilliseconds=0x1) [0268.452] Sleep (dwMilliseconds=0x1) [0268.454] Sleep (dwMilliseconds=0x1) [0268.454] Sleep (dwMilliseconds=0x1) [0268.455] Sleep (dwMilliseconds=0x1) [0268.456] Sleep (dwMilliseconds=0x1) [0268.457] Sleep (dwMilliseconds=0x1) [0268.458] Sleep (dwMilliseconds=0x1) [0268.459] Sleep (dwMilliseconds=0x1) [0268.460] Sleep (dwMilliseconds=0x1) [0268.461] Sleep (dwMilliseconds=0x1) [0268.462] Sleep (dwMilliseconds=0x1) [0268.463] Sleep (dwMilliseconds=0x1) [0268.464] Sleep (dwMilliseconds=0x1) [0268.465] Sleep (dwMilliseconds=0x1) [0268.466] Sleep (dwMilliseconds=0x1) [0268.467] Sleep (dwMilliseconds=0x1) [0268.468] Sleep (dwMilliseconds=0x1) [0268.469] Sleep (dwMilliseconds=0x1) [0268.470] Sleep (dwMilliseconds=0x1) [0268.471] Sleep (dwMilliseconds=0x1) [0268.472] Sleep (dwMilliseconds=0x1) [0268.473] Sleep (dwMilliseconds=0x1) [0268.474] Sleep (dwMilliseconds=0x1) [0268.475] Sleep (dwMilliseconds=0x1) [0268.476] Sleep (dwMilliseconds=0x1) [0268.477] Sleep (dwMilliseconds=0x1) [0268.478] Sleep (dwMilliseconds=0x1) [0268.479] Sleep (dwMilliseconds=0x1) [0268.481] Sleep (dwMilliseconds=0x1) [0268.481] Sleep (dwMilliseconds=0x1) [0268.482] Sleep (dwMilliseconds=0x1) [0268.483] Sleep (dwMilliseconds=0x1) [0268.484] Sleep (dwMilliseconds=0x1) [0268.485] Sleep (dwMilliseconds=0x1) [0268.486] Sleep (dwMilliseconds=0x1) [0268.487] Sleep (dwMilliseconds=0x1) [0268.488] Sleep (dwMilliseconds=0x1) [0268.489] Sleep (dwMilliseconds=0x1) [0268.490] Sleep (dwMilliseconds=0x1) [0268.491] Sleep (dwMilliseconds=0x1) [0268.492] Sleep (dwMilliseconds=0x1) [0268.493] Sleep (dwMilliseconds=0x1) [0268.494] Sleep (dwMilliseconds=0x1) [0268.495] Sleep (dwMilliseconds=0x1) [0268.496] Sleep (dwMilliseconds=0x1) [0268.497] Sleep (dwMilliseconds=0x1) [0268.498] Sleep (dwMilliseconds=0x1) [0268.499] Sleep (dwMilliseconds=0x1) [0268.500] Sleep (dwMilliseconds=0x1) [0268.501] Sleep (dwMilliseconds=0x1) [0268.502] Sleep (dwMilliseconds=0x1) [0268.503] Sleep (dwMilliseconds=0x1) [0268.504] Sleep (dwMilliseconds=0x1) [0268.505] Sleep (dwMilliseconds=0x1) [0268.506] Sleep (dwMilliseconds=0x1) [0268.507] Sleep (dwMilliseconds=0x1) [0268.508] Sleep (dwMilliseconds=0x1) [0268.511] Sleep (dwMilliseconds=0x1) [0268.512] Sleep (dwMilliseconds=0x1) [0268.513] Sleep (dwMilliseconds=0x1) [0268.514] Sleep (dwMilliseconds=0x1) [0268.515] Sleep (dwMilliseconds=0x1) [0268.516] Sleep (dwMilliseconds=0x1) [0268.518] Sleep (dwMilliseconds=0x1) [0268.518] Sleep (dwMilliseconds=0x1) [0268.519] Sleep (dwMilliseconds=0x1) [0268.520] Sleep (dwMilliseconds=0x1) [0268.521] Sleep (dwMilliseconds=0x1) [0268.522] Sleep (dwMilliseconds=0x1) [0268.523] Sleep (dwMilliseconds=0x1) [0268.524] Sleep (dwMilliseconds=0x1) [0268.525] Sleep (dwMilliseconds=0x1) [0268.526] Sleep (dwMilliseconds=0x1) [0268.527] Sleep (dwMilliseconds=0x1) [0268.528] Sleep (dwMilliseconds=0x1) [0268.529] Sleep (dwMilliseconds=0x1) [0268.534] Sleep (dwMilliseconds=0x1) [0268.536] Sleep (dwMilliseconds=0x1) [0268.537] Sleep (dwMilliseconds=0x1) [0268.538] Sleep (dwMilliseconds=0x1) [0268.539] Sleep (dwMilliseconds=0x1) [0268.541] Sleep (dwMilliseconds=0x1) [0268.541] Sleep (dwMilliseconds=0x1) [0268.542] Sleep (dwMilliseconds=0x1) [0268.543] Sleep (dwMilliseconds=0x1) [0268.544] Sleep (dwMilliseconds=0x1) [0268.545] Sleep (dwMilliseconds=0x1) [0268.546] Sleep (dwMilliseconds=0x1) [0268.547] Sleep (dwMilliseconds=0x1) [0268.548] Sleep (dwMilliseconds=0x1) [0268.549] Sleep (dwMilliseconds=0x1) [0268.551] Sleep (dwMilliseconds=0x1) [0268.551] Sleep (dwMilliseconds=0x1) [0268.552] Sleep (dwMilliseconds=0x1) [0268.553] Sleep (dwMilliseconds=0x1) [0268.554] Sleep (dwMilliseconds=0x1) [0268.555] Sleep (dwMilliseconds=0x1) [0268.556] Sleep (dwMilliseconds=0x1) [0268.557] Sleep (dwMilliseconds=0x1) [0268.558] Sleep (dwMilliseconds=0x1) [0268.559] Sleep (dwMilliseconds=0x1) [0268.561] Sleep (dwMilliseconds=0x1) [0268.561] Sleep (dwMilliseconds=0x1) [0268.562] Sleep (dwMilliseconds=0x1) [0268.563] Sleep (dwMilliseconds=0x1) [0268.564] Sleep (dwMilliseconds=0x1) [0268.565] Sleep (dwMilliseconds=0x1) [0268.566] Sleep (dwMilliseconds=0x1) [0268.567] Sleep (dwMilliseconds=0x1) [0268.568] Sleep (dwMilliseconds=0x1) [0268.569] Sleep (dwMilliseconds=0x1) [0268.571] Sleep (dwMilliseconds=0x1) [0268.571] Sleep (dwMilliseconds=0x1) [0268.572] Sleep (dwMilliseconds=0x1) [0268.573] Sleep (dwMilliseconds=0x1) [0268.576] Sleep (dwMilliseconds=0x1) [0268.576] Sleep (dwMilliseconds=0x1) [0268.577] Sleep (dwMilliseconds=0x1) [0268.578] Sleep (dwMilliseconds=0x1) [0268.579] Sleep (dwMilliseconds=0x1) [0268.580] Sleep (dwMilliseconds=0x1) [0268.581] Sleep (dwMilliseconds=0x1) [0268.582] Sleep (dwMilliseconds=0x1) [0268.583] Sleep (dwMilliseconds=0x1) [0268.584] Sleep (dwMilliseconds=0x1) [0268.585] Sleep (dwMilliseconds=0x1) [0268.586] Sleep (dwMilliseconds=0x1) [0268.587] Sleep (dwMilliseconds=0x1) [0268.588] Sleep (dwMilliseconds=0x1) [0268.589] Sleep (dwMilliseconds=0x1) [0268.590] Sleep (dwMilliseconds=0x1) [0268.591] Sleep (dwMilliseconds=0x1) [0268.592] Sleep (dwMilliseconds=0x1) [0268.593] Sleep (dwMilliseconds=0x1) [0268.594] Sleep (dwMilliseconds=0x1) [0268.595] Sleep (dwMilliseconds=0x1) [0268.596] Sleep (dwMilliseconds=0x1) [0268.597] Sleep (dwMilliseconds=0x1) [0268.598] Sleep (dwMilliseconds=0x1) [0268.599] Sleep (dwMilliseconds=0x1) [0268.600] Sleep (dwMilliseconds=0x1) [0268.602] Sleep (dwMilliseconds=0x1) [0268.602] Sleep (dwMilliseconds=0x1) [0268.603] Sleep (dwMilliseconds=0x1) [0268.604] Sleep (dwMilliseconds=0x1) [0268.605] Sleep (dwMilliseconds=0x1) [0268.606] Sleep (dwMilliseconds=0x1) [0268.607] Sleep (dwMilliseconds=0x1) [0268.608] Sleep (dwMilliseconds=0x1) [0268.609] Sleep (dwMilliseconds=0x1) [0268.610] Sleep (dwMilliseconds=0x1) [0268.612] Sleep (dwMilliseconds=0x1) [0268.612] Sleep (dwMilliseconds=0x1) [0268.613] Sleep (dwMilliseconds=0x1) [0268.614] Sleep (dwMilliseconds=0x1) [0268.615] Sleep (dwMilliseconds=0x1) [0268.616] Sleep (dwMilliseconds=0x1) [0268.617] Sleep (dwMilliseconds=0x1) [0268.619] Sleep (dwMilliseconds=0x1) [0268.620] Sleep (dwMilliseconds=0x1) [0268.622] Sleep (dwMilliseconds=0x1) [0268.622] Sleep (dwMilliseconds=0x1) [0268.623] Sleep (dwMilliseconds=0x1) Thread: id = 107 os_tid = 0x8a0 [0131.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3dc58f0 [0131.391] wcscpy (in: _Dest=0x3dc58f0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.391] wcscat (in: _Dest=0x3dc58f0, _Source="*" | out: _Dest="C:\\*") returned="C:\\*" [0131.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.391] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3dcf910 [0131.391] wcscmp (_String1="$Recycle.Bin", _String2=".") returned -1 [0131.391] wcscmp (_String1="$Recycle.Bin", _String2="..") returned -1 [0131.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3b10 [0131.391] wcscpy (in: _Dest=0x3db3b10, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.391] wcscat (in: _Dest=0x3db3b10, _Source="$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0131.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db3b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0131.392] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdb0de4, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdb0de4, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="autoexec.bat", cAlternateFileName="")) returned 1 [0131.392] wcscmp (_String1="autoexec.bat", _String2=".") returned 1 [0131.392] wcscmp (_String1="autoexec.bat", _String2="..") returned 1 [0131.392] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x5524eae0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xe8c441c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0131.393] wcscmp (_String1="Boot", _String2=".") returned 1 [0131.393] wcscmp (_String1="Boot", _String2="..") returned 1 [0131.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3df41b8 [0131.393] wcscpy (in: _Dest=0x3df41b8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.393] wcscat (in: _Dest=0x3df41b8, _Source="Boot" | out: _Dest="C:\\Boot") returned="C:\\Boot" [0131.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41b8) returned 1 [0131.393] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x553cb8a0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xc5bd5400, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0131.393] wcscmp (_String1="bootmgr", _String2=".") returned 1 [0131.393] wcscmp (_String1="bootmgr", _String2="..") returned 1 [0131.393] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x58b95c40, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0x58b95c40, ftLastAccessTime.dwHighDateTime=0x1d2da3e, ftLastWriteTime.dwLowDateTime=0x58b95c40, ftLastWriteTime.dwHighDateTime=0x1d2da3e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0131.393] wcscmp (_String1="BOOTSECT.BAK", _String2=".") returned 1 [0131.393] wcscmp (_String1="BOOTSECT.BAK", _String2="..") returned 1 [0131.393] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdd6f43, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdd6f43, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.sys", cAlternateFileName="")) returned 1 [0131.393] wcscmp (_String1="config.sys", _String2=".") returned 1 [0131.393] wcscmp (_String1="config.sys", _String2="..") returned 1 [0131.393] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0131.393] wcscmp (_String1="Documents and Settings", _String2=".") returned 1 [0131.394] wcscmp (_String1="Documents and Settings", _String2="..") returned 1 [0131.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf750 [0131.394] wcscpy (in: _Dest=0x3dcf750, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.394] wcscat (in: _Dest=0x3dcf750, _Source="Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0131.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcf750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0131.395] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9e132e40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e132e40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x631e0680, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0131.395] wcscmp (_String1="hiberfil.sys", _String2=".") returned 1 [0131.395] wcscmp (_String1="hiberfil.sys", _String2="..") returned 1 [0131.395] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x2f8a2590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x2f8a2590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f8a2590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0131.395] wcscmp (_String1="MSOCache", _String2=".") returned 1 [0131.395] wcscmp (_String1="MSOCache", _String2="..") returned 1 [0131.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1338 [0131.395] wcscpy (in: _Dest=0x3ef1338, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.395] wcscat (in: _Dest=0x3ef1338, _Source="MSOCache" | out: _Dest="C:\\MSOCache") returned="C:\\MSOCache" [0131.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0131.395] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9e1a5260, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e1a5260, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x63500360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0131.395] wcscmp (_String1="pagefile.sys", _String2=".") returned 1 [0131.395] wcscmp (_String1="pagefile.sys", _String2="..") returned 1 [0131.395] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a933d4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9a933d4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9a933d4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0131.395] wcscmp (_String1="PerfLogs", _String2=".") returned 1 [0131.396] wcscmp (_String1="PerfLogs", _String2="..") returned 1 [0131.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef1338 [0131.396] wcscpy (in: _Dest=0x3ef1338, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.396] wcscat (in: _Dest=0x3ef1338, _Source="PerfLogs" | out: _Dest="C:\\PerfLogs") returned="C:\\PerfLogs" [0131.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0131.396] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x95a3bdc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x95a3bdc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0131.396] wcscmp (_String1="Program Files", _String2=".") returned 1 [0131.396] wcscmp (_String1="Program Files", _String2="..") returned 1 [0131.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3bd0 [0131.396] wcscpy (in: _Dest=0x3db3bd0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.396] wcscat (in: _Dest=0x3db3bd0, _Source="Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db3bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0131.397] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~2")) returned 1 [0131.398] wcscmp (_String1="ProgramData", _String2=".") returned 1 [0131.398] wcscmp (_String1="ProgramData", _String2="..") returned 1 [0131.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0131.398] wcscpy (in: _Dest=0x3ef1338, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.398] wcscat (in: _Dest=0x3ef1338, _Source="ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef1338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0131.399] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8396470, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8408890, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8408890, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0131.399] wcscmp (_String1="Recovery", _String2=".") returned 1 [0131.399] wcscmp (_String1="Recovery", _String2="..") returned 1 [0131.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef12e8 [0131.399] wcscpy (in: _Dest=0x3ef12e8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.399] wcscat (in: _Dest=0x3ef12e8, _Source="Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0131.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef12e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0131.401] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9e0c0a20, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x98bf23f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98bf23f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0131.401] wcscmp (_String1="System Volume Information", _String2=".") returned 1 [0131.401] wcscmp (_String1="System Volume Information", _String2="..") returned 1 [0131.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5f348 [0131.401] wcscpy (in: _Dest=0x3e5f348, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.401] wcscat (in: _Dest=0x3e5f348, _Source="System Volume Information" | out: _Dest="C:\\System Volume Information") returned="C:\\System Volume Information" [0131.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0131.401] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0131.401] wcscmp (_String1="Users", _String2=".") returned 1 [0131.401] wcscmp (_String1="Users", _String2="..") returned 1 [0131.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3df4238 [0131.401] wcscpy (in: _Dest=0x3df4238, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.402] wcscat (in: _Dest=0x3df4238, _Source="Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df4238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0131.403] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0131.403] wcscmp (_String1="Windows", _String2=".") returned 1 [0131.403] wcscmp (_String1="Windows", _String2="..") returned 1 [0131.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3df4278 [0131.403] wcscpy (in: _Dest=0x3df4278, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0131.403] wcscat (in: _Dest=0x3df4278, _Source="Windows" | out: _Dest="C:\\Windows") returned="C:\\Windows" [0131.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4278) returned 1 [0131.403] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0131.403] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc58f0) returned 1 [0131.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2590) returned 1 Thread: id = 109 os_tid = 0x8c0 [0131.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3690 [0131.419] wcscpy (in: _Dest=0x3db3690, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0131.419] wcscat (in: _Dest=0x3db3690, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0131.419] wcscat (in: _Dest=0x3db3690, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\*") returned="C:\\$Recycle.Bin\\*" [0131.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.419] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0131.420] wcscmp (_String1=".", _String2=".") returned 0 [0131.420] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.421] wcscmp (_String1="..", _String2=".") returned 1 [0131.421] wcscmp (_String1="..", _String2="..") returned 0 [0131.421] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0131.421] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2=".") returned 1 [0131.421] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2="..") returned 1 [0131.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59048 [0131.421] wcscpy (in: _Dest=0x3d59048, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0131.421] wcscat (in: _Dest=0x3d59048, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0131.421] wcscat (in: _Dest=0x3d59048, _Source="S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0131.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d59048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0131.422] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0131.422] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0131.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 Thread: id = 110 os_tid = 0x8d0 [0131.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf910 [0131.425] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0131.425] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\Documents and Settings\\") returned="C:\\Documents and Settings\\" [0131.425] wcscat (in: _Dest=0x3dcf910, _Source="*" | out: _Dest="C:\\Documents and Settings\\*") returned="C:\\Documents and Settings\\*" [0131.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.425] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf750) returned 1 Thread: id = 111 os_tid = 0x8e0 [0131.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.428] wcscpy (in: _Dest=0x3db3b10, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.428] wcscat (in: _Dest=0x3db3b10, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.428] wcscat (in: _Dest=0x3db3b10, _Source="*" | out: _Dest="C:\\Program Files\\*") returned="C:\\Program Files\\*" [0131.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x95a3bdc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x95a3bdc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.428] wcscmp (_String1=".", _String2=".") returned 0 [0131.428] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x95a3bdc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x95a3bdc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.428] wcscmp (_String1="..", _String2=".") returned 1 [0131.428] wcscmp (_String1="..", _String2="..") returned 0 [0131.428] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.428] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.428] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0131.428] wcscpy (in: _Dest=0x3f19888, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.429] wcscat (in: _Dest=0x3f19888, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.429] wcscat (in: _Dest=0x3f19888, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0131.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0131.430] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90cb9160, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90cb9160, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0131.430] wcscmp (_String1="Common Files", _String2=".") returned 1 [0131.430] wcscmp (_String1="Common Files", _String2="..") returned 1 [0131.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5f348 [0131.430] wcscpy (in: _Dest=0x3e5f348, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.430] wcscat (in: _Dest=0x3e5f348, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.430] wcscat (in: _Dest=0x3e5f348, _Source="Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0131.431] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.431] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.431] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.432] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0131.432] wcscmp (_String1="DVD Maker", _String2=".") returned 1 [0131.432] wcscmp (_String1="DVD Maker", _String2="..") returned 1 [0131.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.432] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.432] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.432] wcscat (in: _Dest=0x3dcf910, _Source="DVD Maker" | out: _Dest="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0131.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.432] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90b62500, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b62500, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0131.432] wcscmp (_String1="Google", _String2=".") returned 1 [0131.432] wcscmp (_String1="Google", _String2="..") returned 1 [0131.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19850 [0131.432] wcscpy (in: _Dest=0x3f19850, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.432] wcscat (in: _Dest=0x3f19850, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.432] wcscat (in: _Dest=0x3f19850, _Source="Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0131.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0131.433] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0131.433] wcscmp (_String1="Internet Explorer", _String2=".") returned 1 [0131.433] wcscmp (_String1="Internet Explorer", _String2="..") returned 1 [0131.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61bb0 [0131.434] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.434] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.434] wcscat (in: _Dest=0x3e61bb0, _Source="Internet Explorer" | out: _Dest="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0131.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 [0131.434] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x905bb0c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x905bb0c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0131.434] wcscmp (_String1="Java", _String2=".") returned 1 [0131.434] wcscmp (_String1="Java", _String2="..") returned 1 [0131.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f198c0 [0131.434] wcscpy (in: _Dest=0x3f198c0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.434] wcscat (in: _Dest=0x3f198c0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.434] wcscat (in: _Dest=0x3f198c0, _Source="Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0131.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f198c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0131.436] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90bd4920, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bd4920, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0131.436] wcscmp (_String1="Microsoft Analysis Services", _String2=".") returned 1 [0131.436] wcscmp (_String1="Microsoft Analysis Services", _String2="..") returned 1 [0131.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8b490 [0131.436] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.436] wcscat (in: _Dest=0x3d8b490, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.436] wcscat (in: _Dest=0x3d8b490, _Source="Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0131.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0131.438] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90c20be0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c20be0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0131.438] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0131.438] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0131.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61bb0 [0131.438] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.438] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.438] wcscat (in: _Dest=0x3e61bb0, _Source="Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0131.440] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~4")) returned 1 [0131.440] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2=".") returned 1 [0131.440] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2="..") returned 1 [0131.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e35438 [0131.440] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.440] wcscat (in: _Dest=0x3e35438, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.440] wcscat (in: _Dest=0x3e35438, _Source="Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0131.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e35438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0131.442] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MIA29A~1")) returned 1 [0131.442] wcscmp (_String1="Microsoft Sync Framework", _String2=".") returned 1 [0131.442] wcscmp (_String1="Microsoft Sync Framework", _String2="..") returned 1 [0131.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6128 [0131.442] wcscpy (in: _Dest=0x2fe6128, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.442] wcscat (in: _Dest=0x2fe6128, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.442] wcscat (in: _Dest=0x2fe6128, _Source="Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0131.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0131.444] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x91fea2c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x91fea2c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0131.444] wcscmp (_String1="Microsoft Synchronization Services", _String2=".") returned 1 [0131.444] wcscmp (_String1="Microsoft Synchronization Services", _String2="..") returned 1 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b7b0 [0131.444] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.444] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.445] wcscat (in: _Dest=0x3e0b7b0, _Source="Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0131.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0131.446] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0131.446] wcscmp (_String1="Microsoft Visual Studio 8", _String2=".") returned 1 [0131.446] wcscmp (_String1="Microsoft Visual Studio 8", _String2="..") returned 1 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0131.446] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.446] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.447] wcscat (in: _Dest=0x2fe1328, _Source="Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0131.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0131.448] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0131.448] wcscmp (_String1="Microsoft.NET", _String2=".") returned 1 [0131.448] wcscmp (_String1="Microsoft.NET", _String2="..") returned 1 [0131.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f300 [0131.448] wcscpy (in: _Dest=0x3e5f300, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.448] wcscat (in: _Dest=0x3e5f300, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.449] wcscat (in: _Dest=0x3e5f300, _Source="Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0131.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0131.450] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7450cbf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90cb9160, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90cb9160, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0131.450] wcscmp (_String1="Mozilla Firefox", _String2=".") returned 1 [0131.450] wcscmp (_String1="Mozilla Firefox", _String2="..") returned 1 [0131.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61ca0 [0131.450] wcscpy (in: _Dest=0x3e61ca0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.450] wcscat (in: _Dest=0x3e61ca0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.450] wcscat (in: _Dest=0x3e61ca0, _Source="Mozilla Firefox" | out: _Dest="C:\\Program Files\\Mozilla Firefox") returned="C:\\Program Files\\Mozilla Firefox" [0131.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ca0) returned 1 [0131.450] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a8ded0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0131.450] wcscmp (_String1="Mozilla Maintenance Service", _String2=".") returned 1 [0131.451] wcscmp (_String1="Mozilla Maintenance Service", _String2="..") returned 1 [0131.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c670 [0131.451] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.451] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.451] wcscat (in: _Dest=0x3d8c670, _Source="Mozilla Maintenance Service" | out: _Dest="C:\\Program Files\\Mozilla Maintenance Service") returned="C:\\Program Files\\Mozilla Maintenance Service" [0131.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90c46d40, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c46d40, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0131.451] wcscmp (_String1="MSBuild", _String2=".") returned 1 [0131.451] wcscmp (_String1="MSBuild", _String2="..") returned 1 [0131.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf910 [0131.451] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.451] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.451] wcscat (in: _Dest=0x3dcf910, _Source="MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0131.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0131.452] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0131.453] wcscmp (_String1="Reference Assemblies", _String2=".") returned 1 [0131.453] wcscmp (_String1="Reference Assemblies", _String2="..") returned 1 [0131.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7808 [0131.453] wcscpy (in: _Dest=0x3ef7808, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.453] wcscat (in: _Dest=0x3ef7808, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.453] wcscat (in: _Dest=0x3ef7808, _Source="Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0131.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0131.454] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x90bae7c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bae7c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0131.454] wcscmp (_String1="Uninstall Information", _String2=".") returned 1 [0131.454] wcscmp (_String1="Uninstall Information", _String2="..") returned 1 [0131.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7650 [0131.454] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.454] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.454] wcscat (in: _Dest=0x3ef7650, _Source="Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0131.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0131.455] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0131.455] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0131.455] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0131.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61ca0 [0131.455] wcscpy (in: _Dest=0x3e61ca0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.455] wcscat (in: _Dest=0x3e61ca0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.455] wcscat (in: _Dest=0x3e61ca0, _Source="Windows Defender" | out: _Dest="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0131.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ca0) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90b88660, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b88660, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0131.455] wcscmp (_String1="Windows Journal", _String2=".") returned 1 [0131.455] wcscmp (_String1="Windows Journal", _String2="..") returned 1 [0131.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61ca0 [0131.455] wcscpy (in: _Dest=0x3e61ca0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.455] wcscat (in: _Dest=0x3e61ca0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.455] wcscat (in: _Dest=0x3e61ca0, _Source="Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0131.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0131.456] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13485c30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x13485c30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0131.456] wcscmp (_String1="Windows Mail", _String2=".") returned 1 [0131.457] wcscmp (_String1="Windows Mail", _String2="..") returned 1 [0131.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5f2b8 [0131.457] wcscpy (in: _Dest=0x3e5f2b8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.457] wcscat (in: _Dest=0x3e5f2b8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.457] wcscat (in: _Dest=0x3e5f2b8, _Source="Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0131.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0131.458] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x13355130, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x13355130, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0131.458] wcscmp (_String1="Windows Media Player", _String2=".") returned 1 [0131.458] wcscmp (_String1="Windows Media Player", _String2="..") returned 1 [0131.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef76a8 [0131.458] wcscpy (in: _Dest=0x3ef76a8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.458] wcscat (in: _Dest=0x3ef76a8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.458] wcscat (in: _Dest=0x3ef76a8, _Source="Windows Media Player" | out: _Dest="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0131.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef76a8) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e254bc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90ac9f80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ac9f80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0131.458] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0131.458] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0131.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcff50 [0131.458] wcscpy (in: _Dest=0x3dcff50, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.458] wcscat (in: _Dest=0x3dcff50, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.458] wcscat (in: _Dest=0x3dcff50, _Source="Windows NT" | out: _Dest="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0131.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff50) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90bae7c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bae7c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0131.458] wcscmp (_String1="Windows Photo Viewer", _String2=".") returned 1 [0131.458] wcscmp (_String1="Windows Photo Viewer", _String2="..") returned 1 [0131.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef76a8 [0131.458] wcscpy (in: _Dest=0x3ef76a8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.459] wcscat (in: _Dest=0x3ef76a8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.459] wcscat (in: _Dest=0x3ef76a8, _Source="Windows Photo Viewer" | out: _Dest="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0131.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef76a8) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90b3c3a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b3c3a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0131.459] wcscmp (_String1="Windows Portable Devices", _String2=".") returned 1 [0131.459] wcscmp (_String1="Windows Portable Devices", _String2="..") returned 1 [0131.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0131.459] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.459] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.459] wcscat (in: _Dest=0x2fe1d48, _Source="Windows Portable Devices" | out: _Dest="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0131.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0131.459] wcscmp (_String1="Windows Sidebar", _String2=".") returned 1 [0131.459] wcscmp (_String1="Windows Sidebar", _String2="..") returned 1 [0131.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e619d0 [0131.459] wcscpy (in: _Dest=0x3e619d0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0131.459] wcscat (in: _Dest=0x3e619d0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0131.459] wcscat (in: _Dest=0x3e619d0, _Source="Windows Sidebar" | out: _Dest="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0131.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e619d0) returned 1 [0131.459] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0131.459] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0131.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 Thread: id = 112 os_tid = 0x8f0 [0131.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3bd0 [0131.468] wcscpy (in: _Dest=0x3db3bd0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.468] wcscat (in: _Dest=0x3db3bd0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.468] wcscat (in: _Dest=0x3db3bd0, _Source="*" | out: _Dest="C:\\ProgramData\\*") returned="C:\\ProgramData\\*" [0131.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.468] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.468] wcscmp (_String1=".", _String2=".") returned 0 [0131.468] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.468] wcscmp (_String1="..", _String2=".") returned 1 [0131.468] wcscmp (_String1="..", _String2="..") returned 0 [0131.468] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.468] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.468] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f198f8 [0131.469] wcscpy (in: _Dest=0x3f198f8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.469] wcscat (in: _Dest=0x3f198f8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.469] wcscat (in: _Dest=0x3f198f8, _Source="Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0131.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f198f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0131.469] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0131.469] wcscmp (_String1="Application Data", _String2=".") returned 1 [0131.470] wcscmp (_String1="Application Data", _String2="..") returned 1 [0131.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f228 [0131.470] wcscpy (in: _Dest=0x3e5f228, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.470] wcscat (in: _Dest=0x3e5f228, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.470] wcscat (in: _Dest=0x3e5f228, _Source="Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0131.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0131.470] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0131.470] wcscmp (_String1="Desktop", _String2=".") returned 1 [0131.471] wcscmp (_String1="Desktop", _String2="..") returned 1 [0131.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19930 [0131.471] wcscpy (in: _Dest=0x3f19930, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.471] wcscat (in: _Dest=0x3f19930, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.471] wcscat (in: _Dest=0x3f19930, _Source="Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0131.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0131.472] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0131.472] wcscmp (_String1="Documents", _String2=".") returned 1 [0131.472] wcscmp (_String1="Documents", _String2="..") returned 1 [0131.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcff50 [0131.472] wcscpy (in: _Dest=0x3dcff50, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.472] wcscat (in: _Dest=0x3dcff50, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.472] wcscat (in: _Dest=0x3dcff50, _Source="Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0131.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcff50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0131.473] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0131.473] wcscmp (_String1="Favorites", _String2=".") returned 1 [0131.473] wcscmp (_String1="Favorites", _String2="..") returned 1 [0131.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfa90 [0131.473] wcscpy (in: _Dest=0x3dcfa90, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.473] wcscat (in: _Dest=0x3dcfa90, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.473] wcscat (in: _Dest=0x3dcfa90, _Source="Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0131.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcfa90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0131.475] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.475] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.475] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfc10 [0131.475] wcscpy (in: _Dest=0x3dcfc10, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.475] wcscat (in: _Dest=0x3dcfc10, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.475] wcscat (in: _Dest=0x3dcfc10, _Source="Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcfc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0131.476] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0131.476] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0131.476] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0131.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5f150 [0131.476] wcscpy (in: _Dest=0x3e5f150, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.476] wcscat (in: _Dest=0x3e5f150, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.476] wcscat (in: _Dest=0x3e5f150, _Source="Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0131.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0131.478] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0131.478] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0131.478] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0131.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19968 [0131.478] wcscpy (in: _Dest=0x3f19968, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.478] wcscat (in: _Dest=0x3f19968, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.478] wcscat (in: _Dest=0x3f19968, _Source="Mozilla" | out: _Dest="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla" [0131.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19968) returned 1 [0131.478] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0131.478] wcscmp (_String1="Oracle", _String2=".") returned 1 [0131.478] wcscmp (_String1="Oracle", _String2="..") returned 1 [0131.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19968 [0131.478] wcscpy (in: _Dest=0x3f19968, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.478] wcscat (in: _Dest=0x3f19968, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.478] wcscat (in: _Dest=0x3f19968, _Source="Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0131.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0131.479] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0131.479] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0131.479] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0131.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5f198 [0131.480] wcscpy (in: _Dest=0x3e5f198, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.480] wcscat (in: _Dest=0x3e5f198, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.480] wcscat (in: _Dest=0x3e5f198, _Source="Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0131.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0131.481] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0131.481] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0131.481] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0131.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfb90 [0131.481] wcscpy (in: _Dest=0x3dcfb90, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.481] wcscat (in: _Dest=0x3dcfb90, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.481] wcscat (in: _Dest=0x3dcfb90, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0131.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcfb90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0131.483] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0131.483] wcscmp (_String1="Sun", _String2=".") returned 1 [0131.483] wcscmp (_String1="Sun", _String2="..") returned 1 [0131.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3b10 [0131.483] wcscpy (in: _Dest=0x3db3b10, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.483] wcscat (in: _Dest=0x3db3b10, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.483] wcscat (in: _Dest=0x3db3b10, _Source="Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0131.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db3b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0131.485] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.485] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.485] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfbd0 [0131.485] wcscpy (in: _Dest=0x3dcfbd0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0131.485] wcscat (in: _Dest=0x3dcfbd0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0131.485] wcscat (in: _Dest=0x3dcfbd0, _Source="Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0131.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcfbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0131.487] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0131.487] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 [0131.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 Thread: id = 113 os_tid = 0x904 [0131.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef1338 [0131.489] wcscpy (in: _Dest=0x3ef1338, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0131.489] wcscat (in: _Dest=0x3ef1338, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\" [0131.489] wcscat (in: _Dest=0x3ef1338, _Source="*" | out: _Dest="C:\\Recovery\\*") returned="C:\\Recovery\\*" [0131.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.489] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0131.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0131.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 Thread: id = 114 os_tid = 0x914 [0131.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3df41f8 [0131.491] wcscpy (in: _Dest=0x3df41f8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.491] wcscat (in: _Dest=0x3df41f8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.491] wcscat (in: _Dest=0x3df41f8, _Source="*" | out: _Dest="C:\\Users\\*") returned="C:\\Users\\*" [0131.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.491] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.491] wcscmp (_String1=".", _String2=".") returned 0 [0131.491] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.491] wcscmp (_String1="..", _String2=".") returned 1 [0131.491] wcscmp (_String1="..", _String2="..") returned 0 [0131.491] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0131.491] wcscmp (_String1="All Users", _String2=".") returned 1 [0131.491] wcscmp (_String1="All Users", _String2="..") returned 1 [0131.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3bd0 [0131.491] wcscpy (in: _Dest=0x3db3bd0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.491] wcscat (in: _Dest=0x3db3bd0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.492] wcscat (in: _Dest=0x3db3bd0, _Source="All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0131.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db3bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0131.493] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0131.493] wcscmp (_String1="Default", _String2=".") returned 1 [0131.493] wcscmp (_String1="Default", _String2="..") returned 1 [0131.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3690 [0131.493] wcscpy (in: _Dest=0x3db3690, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.493] wcscat (in: _Dest=0x3db3690, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.493] wcscat (in: _Dest=0x3db3690, _Source="Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db3690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0131.495] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0131.495] wcscmp (_String1="Default User", _String2=".") returned 1 [0131.495] wcscmp (_String1="Default User", _String2="..") returned 1 [0131.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f199a0 [0131.495] wcscpy (in: _Dest=0x3f199a0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.495] wcscat (in: _Dest=0x3f199a0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.495] wcscat (in: _Dest=0x3f199a0, _Source="Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0131.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f199a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0131.497] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.497] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.497] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.497] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EEBsYm5", cAlternateFileName="")) returned 1 [0131.497] wcscmp (_String1="EEBsYm5", _String2=".") returned 1 [0131.497] wcscmp (_String1="EEBsYm5", _String2="..") returned 1 [0131.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db39c0 [0131.497] wcscpy (in: _Dest=0x3db39c0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.497] wcscat (in: _Dest=0x3db39c0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.497] wcscat (in: _Dest=0x3db39c0, _Source="EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3db39c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0131.500] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0131.500] wcscmp (_String1="Public", _String2=".") returned 1 [0131.500] wcscmp (_String1="Public", _String2="..") returned 1 [0131.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0131.500] wcscpy (in: _Dest=0x3ef1360, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0131.500] wcscat (in: _Dest=0x3ef1360, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0131.500] wcscat (in: _Dest=0x3ef1360, _Source="Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef1360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0131.502] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0131.502] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df41f8) returned 1 [0131.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4238) returned 1 Thread: id = 117 os_tid = 0x944 [0131.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0131.530] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0131.530] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\" [0131.530] wcscat (in: _Dest=0x3d59e18, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*" [0131.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.530] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.530] wcscmp (_String1=".", _String2=".") returned 0 [0131.530] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.530] wcscmp (_String1="..", _String2=".") returned 1 [0131.531] wcscmp (_String1="..", _String2="..") returned 0 [0131.531] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.531] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.531] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.531] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0131.531] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 [0131.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59048) returned 1 Thread: id = 118 os_tid = 0x740 [0131.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf750 [0131.538] wcscpy (in: _Dest=0x3dcf750, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0131.538] wcscat (in: _Dest=0x3dcf750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0131.538] wcscat (in: _Dest=0x3dcf750, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\*") returned="C:\\Program Files\\Adobe\\*" [0131.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa10 [0131.539] wcscmp (_String1=".", _String2=".") returned 0 [0131.539] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.539] wcscmp (_String1="..", _String2=".") returned 1 [0131.539] wcscmp (_String1="..", _String2="..") returned 0 [0131.539] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c51a450, ftCreationTime.dwHighDateTime=0x1d5a7a9, ftLastAccessTime.dwLowDateTime=0x422e98b0, ftLastAccessTime.dwHighDateTime=0x1d59949, ftLastWriteTime.dwLowDateTime=0x422e98b0, ftLastWriteTime.dwHighDateTime=0x1d59949, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0131.539] wcscmp (_String1="accupos.exe", _String2=".") returned 1 [0131.539] wcscmp (_String1="accupos.exe", _String2="..") returned 1 [0131.539] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9a0ac40, ftCreationTime.dwHighDateTime=0x1d5d842, ftLastAccessTime.dwLowDateTime=0x8dcf3170, ftLastAccessTime.dwHighDateTime=0x1d59c15, ftLastWriteTime.dwLowDateTime=0x8dcf3170, ftLastWriteTime.dwHighDateTime=0x1d59c15, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="actually_replacement.exe", cAlternateFileName="ACTUAL~1.EXE")) returned 1 [0131.539] wcscmp (_String1="actually_replacement.exe", _String2=".") returned 1 [0131.539] wcscmp (_String1="actually_replacement.exe", _String2="..") returned 1 [0131.539] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0131.540] wcscmp (_String1="Reader 10.0", _String2=".") returned 1 [0131.540] wcscmp (_String1="Reader 10.0", _String2="..") returned 1 [0131.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e619d0 [0131.540] wcscpy (in: _Dest=0x3e619d0, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0131.540] wcscat (in: _Dest=0x3e619d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0131.540] wcscat (in: _Dest=0x3e619d0, _Source="Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e619d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0131.541] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3218f590, ftCreationTime.dwHighDateTime=0x1d56624, ftLastAccessTime.dwLowDateTime=0xa13a21c0, ftLastAccessTime.dwHighDateTime=0x1d5e3cd, ftLastWriteTime.dwLowDateTime=0xa13a21c0, ftLastWriteTime.dwHighDateTime=0x1d5e3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="surprised.exe", cAlternateFileName="SURPRI~1.EXE")) returned 1 [0131.541] wcscmp (_String1="surprised.exe", _String2=".") returned 1 [0131.541] wcscmp (_String1="surprised.exe", _String2="..") returned 1 [0131.541] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3218f590, ftCreationTime.dwHighDateTime=0x1d56624, ftLastAccessTime.dwLowDateTime=0xa13a21c0, ftLastAccessTime.dwHighDateTime=0x1d5e3cd, ftLastWriteTime.dwLowDateTime=0xa13a21c0, ftLastWriteTime.dwHighDateTime=0x1d5e3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="surprised.exe", cAlternateFileName="SURPRI~1.EXE")) returned 0 [0131.542] FindClose (in: hFindFile=0x3dcfa10 | out: hFindFile=0x3dcfa10) returned 1 [0131.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf750) returned 1 [0131.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 Thread: id = 119 os_tid = 0xc8 [0131.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f078 [0131.544] wcscpy (in: _Dest=0x3e5f078, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.544] wcscat (in: _Dest=0x3e5f078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.544] wcscat (in: _Dest=0x3e5f078, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\*") returned="C:\\Program Files\\Common Files\\*" [0131.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90cb9160, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90cb9160, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.544] wcscmp (_String1=".", _String2=".") returned 0 [0131.544] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90cb9160, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90cb9160, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.544] wcscmp (_String1="..", _String2=".") returned 1 [0131.545] wcscmp (_String1="..", _String2="..") returned 0 [0131.545] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0131.545] wcscmp (_String1="Adobe", _String2=".") returned 1 [0131.545] wcscmp (_String1="Adobe", _String2="..") returned 1 [0131.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61a70 [0131.545] wcscpy (in: _Dest=0x3e61a70, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.545] wcscat (in: _Dest=0x3e61a70, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.545] wcscat (in: _Dest=0x3e61a70, _Source="Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0131.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0131.547] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b21570, ftCreationTime.dwHighDateTime=0x1d597a0, ftLastAccessTime.dwLowDateTime=0x80fa570, ftLastAccessTime.dwHighDateTime=0x1d5b154, ftLastWriteTime.dwLowDateTime=0x80fa570, ftLastWriteTime.dwHighDateTime=0x1d5b154, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0131.547] wcscmp (_String1="aldelo.exe", _String2=".") returned 1 [0131.547] wcscmp (_String1="aldelo.exe", _String2="..") returned 1 [0131.547] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0131.547] wcscmp (_String1="DESIGNER", _String2=".") returned 1 [0131.547] wcscmp (_String1="DESIGNER", _String2="..") returned 1 [0131.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef76a8 [0131.547] wcscpy (in: _Dest=0x3ef76a8, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.547] wcscat (in: _Dest=0x3ef76a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.547] wcscat (in: _Dest=0x3ef76a8, _Source="DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0131.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef76a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0131.549] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0131.549] wcscmp (_String1="Java", _String2=".") returned 1 [0131.549] wcscmp (_String1="Java", _String2="..") returned 1 [0131.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61ac0 [0131.549] wcscpy (in: _Dest=0x3e61ac0, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.549] wcscat (in: _Dest=0x3e61ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.549] wcscat (in: _Dest=0x3e61ac0, _Source="Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0131.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0131.551] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd988d10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0131.551] wcscmp (_String1="microsoft shared", _String2=".") returned 1 [0131.551] wcscmp (_String1="microsoft shared", _String2="..") returned 1 [0131.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c670 [0131.551] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.551] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.551] wcscat (in: _Dest=0x3d8c670, _Source="microsoft shared" | out: _Dest="C:\\Program Files\\Common Files\\microsoft shared") returned="C:\\Program Files\\Common Files\\microsoft shared" [0131.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 [0131.551] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0131.551] wcscmp (_String1="Services", _String2=".") returned 1 [0131.551] wcscmp (_String1="Services", _String2="..") returned 1 [0131.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7ff0 [0131.552] wcscpy (in: _Dest=0x3ef7ff0, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.552] wcscat (in: _Dest=0x3ef7ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.552] wcscat (in: _Dest=0x3ef7ff0, _Source="Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0131.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0131.553] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0131.553] wcscmp (_String1="SpeechEngines", _String2=".") returned 1 [0131.553] wcscmp (_String1="SpeechEngines", _String2="..") returned 1 [0131.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1d48 [0131.554] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.554] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.554] wcscat (in: _Dest=0x2fe1d48, _Source="SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0131.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0131.555] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c60cff0, ftCreationTime.dwHighDateTime=0x1d58dee, ftLastAccessTime.dwLowDateTime=0x57514690, ftLastAccessTime.dwHighDateTime=0x1d5b4cc, ftLastWriteTime.dwLowDateTime=0x57514690, ftLastWriteTime.dwHighDateTime=0x1d5b4cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunrise-agree-discounts.exe", cAlternateFileName="SUNRIS~1.EXE")) returned 1 [0131.555] wcscmp (_String1="sunrise-agree-discounts.exe", _String2=".") returned 1 [0131.555] wcscmp (_String1="sunrise-agree-discounts.exe", _String2="..") returned 1 [0131.556] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48c8dab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0131.556] wcscmp (_String1="System", _String2=".") returned 1 [0131.556] wcscmp (_String1="System", _String2="..") returned 1 [0131.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7f98 [0131.556] wcscpy (in: _Dest=0x3ef7f98, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0131.556] wcscat (in: _Dest=0x3ef7f98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0131.556] wcscat (in: _Dest=0x3ef7f98, _Source="System" | out: _Dest="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System" [0131.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7f98) returned 1 [0131.556] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48c8dab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0131.556] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f078) returned 1 [0131.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 Thread: id = 120 os_tid = 0x954 [0131.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf750 [0131.558] wcscpy (in: _Dest=0x3dcf750, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0131.558] wcscat (in: _Dest=0x3dcf750, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0131.558] wcscat (in: _Dest=0x3dcf750, _Source="*" | out: _Dest="C:\\Program Files\\Google\\*") returned="C:\\Program Files\\Google\\*" [0131.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90b62500, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b62500, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa10 [0131.558] wcscmp (_String1=".", _String2=".") returned 0 [0131.558] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90b62500, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b62500, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.558] wcscmp (_String1="..", _String2=".") returned 1 [0131.558] wcscmp (_String1="..", _String2="..") returned 0 [0131.559] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0131.559] wcscmp (_String1="Chrome", _String2=".") returned 1 [0131.559] wcscmp (_String1="Chrome", _String2="..") returned 1 [0131.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f348 [0131.559] wcscpy (in: _Dest=0x3e5f348, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0131.559] wcscat (in: _Dest=0x3e5f348, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0131.559] wcscat (in: _Dest=0x3e5f348, _Source="Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0131.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0131.560] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffe10c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xcffe10c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcffe10c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0131.560] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0131.561] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0131.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7f98 [0131.561] wcscpy (in: _Dest=0x3ef7f98, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0131.561] wcscat (in: _Dest=0x3ef7f98, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0131.561] wcscat (in: _Dest=0x3ef7f98, _Source="CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0131.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0131.562] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99088b60, ftCreationTime.dwHighDateTime=0x1d5cd41, ftLastAccessTime.dwLowDateTime=0x6399bfe0, ftLastAccessTime.dwHighDateTime=0x1d5e4e2, ftLastWriteTime.dwLowDateTime=0x6399bfe0, ftLastWriteTime.dwHighDateTime=0x1d5e4e2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0131.562] wcscmp (_String1="leechftp.exe", _String2=".") returned 1 [0131.562] wcscmp (_String1="leechftp.exe", _String2="..") returned 1 [0131.562] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f593e10, ftCreationTime.dwHighDateTime=0x1d57818, ftLastAccessTime.dwLowDateTime=0xc480eae0, ftLastAccessTime.dwHighDateTime=0x1d5a9dc, ftLastWriteTime.dwLowDateTime=0xc480eae0, ftLastWriteTime.dwHighDateTime=0x1d5a9dc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="repeat.exe", cAlternateFileName="")) returned 1 [0131.562] wcscmp (_String1="repeat.exe", _String2=".") returned 1 [0131.562] wcscmp (_String1="repeat.exe", _String2="..") returned 1 [0131.562] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f593e10, ftCreationTime.dwHighDateTime=0x1d57818, ftLastAccessTime.dwLowDateTime=0xc480eae0, ftLastAccessTime.dwHighDateTime=0x1d5a9dc, ftLastWriteTime.dwLowDateTime=0xc480eae0, ftLastWriteTime.dwHighDateTime=0x1d5a9dc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="repeat.exe", cAlternateFileName="")) returned 0 [0131.562] FindClose (in: hFindFile=0x3dcfa10 | out: hFindFile=0x3dcfa10) returned 1 [0131.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf750) returned 1 [0131.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 Thread: id = 121 os_tid = 0x964 [0131.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19850 [0131.569] wcscpy (in: _Dest=0x3f19850, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0131.569] wcscat (in: _Dest=0x3f19850, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0131.569] wcscat (in: _Dest=0x3f19850, _Source="*" | out: _Dest="C:\\Program Files\\Java\\*") returned="C:\\Program Files\\Java\\*" [0131.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x905bb0c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x905bb0c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.569] wcscmp (_String1=".", _String2=".") returned 0 [0131.569] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x905bb0c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x905bb0c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.570] wcscmp (_String1="..", _String2=".") returned 1 [0131.570] wcscmp (_String1="..", _String2="..") returned 0 [0131.570] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0131.570] wcscmp (_String1="jre7", _String2=".") returned 1 [0131.570] wcscmp (_String1="jre7", _String2="..") returned 1 [0131.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfa10 [0131.570] wcscpy (in: _Dest=0x3dcfa10, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0131.570] wcscat (in: _Dest=0x3dcfa10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0131.570] wcscat (in: _Dest=0x3dcfa10, _Source="jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcfa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0131.571] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77638a20, ftCreationTime.dwHighDateTime=0x1d56449, ftLastAccessTime.dwLowDateTime=0xc85b80d0, ftLastAccessTime.dwHighDateTime=0x1d5c516, ftLastWriteTime.dwLowDateTime=0xc85b80d0, ftLastWriteTime.dwHighDateTime=0x1d5c516, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingtouched.exe", cAlternateFileName="LASTIN~1.EXE")) returned 1 [0131.572] wcscmp (_String1="lastingtouched.exe", _String2=".") returned 1 [0131.572] wcscmp (_String1="lastingtouched.exe", _String2="..") returned 1 [0131.572] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77638a20, ftCreationTime.dwHighDateTime=0x1d56449, ftLastAccessTime.dwLowDateTime=0xc85b80d0, ftLastAccessTime.dwHighDateTime=0x1d5c516, ftLastWriteTime.dwLowDateTime=0xc85b80d0, ftLastWriteTime.dwHighDateTime=0x1d5c516, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingtouched.exe", cAlternateFileName="LASTIN~1.EXE")) returned 0 [0131.572] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0131.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198c0) returned 1 Thread: id = 122 os_tid = 0x974 [0131.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c670 [0131.574] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0131.574] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0131.575] wcscat (in: _Dest=0x3d8c670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\*" [0131.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90bd4920, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bd4920, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.575] wcscmp (_String1=".", _String2=".") returned 0 [0131.575] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90bd4920, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bd4920, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.575] wcscmp (_String1="..", _String2=".") returned 1 [0131.575] wcscmp (_String1="..", _String2="..") returned 0 [0131.575] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0131.575] wcscmp (_String1="AS OLEDB", _String2=".") returned 1 [0131.575] wcscmp (_String1="AS OLEDB", _String2="..") returned 1 [0131.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e34a60 [0131.575] wcscpy (in: _Dest=0x3e34a60, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0131.576] wcscat (in: _Dest=0x3e34a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0131.576] wcscat (in: _Dest=0x3e34a60, _Source="AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0131.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e34a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0131.578] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88cca450, ftCreationTime.dwHighDateTime=0x1d564a2, ftLastAccessTime.dwLowDateTime=0x6e0a69e0, ftLastAccessTime.dwHighDateTime=0x1d59bc0, ftLastWriteTime.dwLowDateTime=0x6e0a69e0, ftLastWriteTime.dwHighDateTime=0x1d59bc0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0131.578] wcscmp (_String1="scriptftp.exe", _String2=".") returned 1 [0131.578] wcscmp (_String1="scriptftp.exe", _String2="..") returned 1 [0131.578] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377b8940, ftCreationTime.dwHighDateTime=0x1d5a3c7, ftLastAccessTime.dwLowDateTime=0x9e0fc200, ftLastAccessTime.dwHighDateTime=0x1d59cee, ftLastWriteTime.dwLowDateTime=0x9e0fc200, ftLastWriteTime.dwHighDateTime=0x1d59cee, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0131.578] wcscmp (_String1="smartftp.exe", _String2=".") returned 1 [0131.578] wcscmp (_String1="smartftp.exe", _String2="..") returned 1 [0131.578] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377b8940, ftCreationTime.dwHighDateTime=0x1d5a3c7, ftLastAccessTime.dwLowDateTime=0x9e0fc200, ftLastAccessTime.dwHighDateTime=0x1d59cee, ftLastWriteTime.dwLowDateTime=0x9e0fc200, ftLastWriteTime.dwHighDateTime=0x1d59cee, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 0 [0131.578] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 [0131.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 Thread: id = 123 os_tid = 0x984 [0131.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61d90 [0131.580] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.580] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.581] wcscat (in: _Dest=0x3e61d90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\*") returned="C:\\Program Files\\Microsoft Office\\*" [0131.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90c20be0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c20be0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.581] wcscmp (_String1=".", _String2=".") returned 0 [0131.581] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90c20be0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c20be0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.581] wcscmp (_String1="..", _String2=".") returned 1 [0131.581] wcscmp (_String1="..", _String2="..") returned 0 [0131.581] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d27db50, ftCreationTime.dwHighDateTime=0x1d59ae5, ftLastAccessTime.dwLowDateTime=0xc4249380, ftLastAccessTime.dwHighDateTime=0x1d56f17, ftLastWriteTime.dwLowDateTime=0xc4249380, ftLastWriteTime.dwHighDateTime=0x1d56f17, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0131.581] wcscmp (_String1="bitkinex.exe", _String2=".") returned 1 [0131.581] wcscmp (_String1="bitkinex.exe", _String2="..") returned 1 [0131.581] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0131.581] wcscmp (_String1="CLIPART", _String2=".") returned 1 [0131.581] wcscmp (_String1="CLIPART", _String2="..") returned 1 [0131.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1ce8 [0131.582] wcscpy (in: _Dest=0x2fe1ce8, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.582] wcscat (in: _Dest=0x2fe1ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.582] wcscat (in: _Dest=0x2fe1ce8, _Source="CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0131.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0131.584] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0131.584] wcscmp (_String1="Document Themes 14", _String2=".") returned 1 [0131.584] wcscmp (_String1="Document Themes 14", _String2="..") returned 1 [0131.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e34790 [0131.584] wcscpy (in: _Dest=0x3e34790, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.584] wcscat (in: _Dest=0x3e34790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.584] wcscat (in: _Dest=0x3e34790, _Source="Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0131.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e34790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0131.586] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37959060, ftCreationTime.dwHighDateTime=0x1d56e52, ftLastAccessTime.dwLowDateTime=0x1f7f41c0, ftLastAccessTime.dwHighDateTime=0x1d59a5c, ftLastWriteTime.dwLowDateTime=0x1f7f41c0, ftLastWriteTime.dwHighDateTime=0x1d59a5c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="identifier chorus.exe", cAlternateFileName="IDENTI~1.EXE")) returned 1 [0131.586] wcscmp (_String1="identifier chorus.exe", _String2=".") returned 1 [0131.586] wcscmp (_String1="identifier chorus.exe", _String2="..") returned 1 [0131.586] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0131.586] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0131.586] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0131.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef75f8 [0131.586] wcscpy (in: _Dest=0x3ef75f8, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.586] wcscat (in: _Dest=0x3ef75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.586] wcscat (in: _Dest=0x3ef75f8, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0131.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0131.589] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0131.589] wcscmp (_String1="Office14", _String2=".") returned 1 [0131.589] wcscmp (_String1="Office14", _String2="..") returned 1 [0131.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5f48 [0131.589] wcscpy (in: _Dest=0x2fe5f48, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.589] wcscat (in: _Dest=0x2fe5f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.589] wcscat (in: _Dest=0x2fe5f48, _Source="Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0131.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe5f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0131.591] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x579d6b00, ftCreationTime.dwHighDateTime=0x1d55eba, ftLastAccessTime.dwLowDateTime=0x9d432c10, ftLastAccessTime.dwHighDateTime=0x1d59ba2, ftLastWriteTime.dwLowDateTime=0x9d432c10, ftLastWriteTime.dwHighDateTime=0x1d59ba2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0131.591] wcscmp (_String1="pidgin.exe", _String2=".") returned 1 [0131.591] wcscmp (_String1="pidgin.exe", _String2="..") returned 1 [0131.591] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4bee10, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x986f4cc0, ftLastAccessTime.dwHighDateTime=0x1d5d872, ftLastWriteTime.dwLowDateTime=0x986f4cc0, ftLastWriteTime.dwHighDateTime=0x1d5d872, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="replaced-beach-ext.exe", cAlternateFileName="REPLAC~1.EXE")) returned 1 [0131.591] wcscmp (_String1="replaced-beach-ext.exe", _String2=".") returned 1 [0131.591] wcscmp (_String1="replaced-beach-ext.exe", _String2="..") returned 1 [0131.591] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0131.591] wcscmp (_String1="Stationery", _String2=".") returned 1 [0131.591] wcscmp (_String1="Stationery", _String2="..") returned 1 [0131.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8b490 [0131.591] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.591] wcscat (in: _Dest=0x3d8b490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.591] wcscat (in: _Dest=0x3d8b490, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0131.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0131.593] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.593] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.593] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0131.593] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0131.593] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0131.593] wcscat (in: _Dest=0x2fe6488, _Source="Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0131.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0131.595] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc8cf0, ftCreationTime.dwHighDateTime=0x1d5780e, ftLastAccessTime.dwLowDateTime=0x4f253160, ftLastAccessTime.dwHighDateTime=0x1d57f26, ftLastWriteTime.dwLowDateTime=0x4f253160, ftLastWriteTime.dwHighDateTime=0x1d57f26, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0131.595] wcscmp (_String1="totalcmd.exe", _String2=".") returned 1 [0131.595] wcscmp (_String1="totalcmd.exe", _String2="..") returned 1 [0131.595] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc8cf0, ftCreationTime.dwHighDateTime=0x1d5780e, ftLastAccessTime.dwLowDateTime=0x4f253160, ftLastAccessTime.dwHighDateTime=0x1d57f26, ftLastWriteTime.dwLowDateTime=0x4f253160, ftLastWriteTime.dwHighDateTime=0x1d57f26, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0131.595] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 [0131.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 Thread: id = 124 os_tid = 0x994 [0131.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1a958 [0131.606] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0131.606] wcscat (in: _Dest=0x3f1a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0131.606] wcscat (in: _Dest=0x3f1a958, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*" [0131.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.606] wcscmp (_String1=".", _String2=".") returned 0 [0131.606] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.606] wcscmp (_String1="..", _String2=".") returned 1 [0131.607] wcscmp (_String1="..", _String2="..") returned 0 [0131.607] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0131.607] wcscmp (_String1="v3.5", _String2=".") returned 1 [0131.607] wcscmp (_String1="v3.5", _String2="..") returned 1 [0131.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6570 [0131.607] wcscpy (in: _Dest=0x3da6570, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0131.607] wcscat (in: _Dest=0x3da6570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0131.607] wcscat (in: _Dest=0x3da6570, _Source="v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0131.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0131.609] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0131.609] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0131.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 Thread: id = 125 os_tid = 0x9a4 [0131.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe64e8 [0131.611] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0131.611] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0131.611] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\*" [0131.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.612] wcscmp (_String1=".", _String2=".") returned 0 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.612] wcscmp (_String1="..", _String2=".") returned 1 [0131.612] wcscmp (_String1="..", _String2="..") returned 0 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4bf4d0, ftCreationTime.dwHighDateTime=0x1d5891f, ftLastAccessTime.dwLowDateTime=0xc046b80, ftLastAccessTime.dwHighDateTime=0x1d5cd7d, ftLastWriteTime.dwLowDateTime=0xc046b80, ftLastWriteTime.dwHighDateTime=0x1d5cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0131.612] wcscmp (_String1="barca.exe", _String2=".") returned 1 [0131.612] wcscmp (_String1="barca.exe", _String2="..") returned 1 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8a6a60, ftCreationTime.dwHighDateTime=0x1d56ea5, ftLastAccessTime.dwLowDateTime=0x22029260, ftLastAccessTime.dwHighDateTime=0x1d5cc0e, ftLastWriteTime.dwLowDateTime=0x22029260, ftLastWriteTime.dwHighDateTime=0x1d5cc0e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0131.612] wcscmp (_String1="spgagentservice.exe", _String2=".") returned 1 [0131.612] wcscmp (_String1="spgagentservice.exe", _String2="..") returned 1 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb38fb040, ftCreationTime.dwHighDateTime=0x1d5dcfe, ftLastAccessTime.dwLowDateTime=0x633f93c0, ftLastAccessTime.dwHighDateTime=0x1d58cc3, ftLastWriteTime.dwLowDateTime=0x633f93c0, ftLastWriteTime.dwHighDateTime=0x1d58cc3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0131.612] wcscmp (_String1="thunderbird.exe", _String2=".") returned 1 [0131.612] wcscmp (_String1="thunderbird.exe", _String2="..") returned 1 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0c8f40, ftCreationTime.dwHighDateTime=0x1d5b326, ftLastAccessTime.dwLowDateTime=0x19f941b0, ftLastAccessTime.dwHighDateTime=0x1d59aed, ftLastWriteTime.dwLowDateTime=0x19f941b0, ftLastWriteTime.dwHighDateTime=0x1d59aed, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0131.612] wcscmp (_String1="trillian.exe", _String2=".") returned 1 [0131.612] wcscmp (_String1="trillian.exe", _String2="..") returned 1 [0131.612] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0131.612] wcscmp (_String1="v1.0", _String2=".") returned 1 [0131.612] wcscmp (_String1="v1.0", _String2="..") returned 1 [0131.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c670 [0131.613] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0131.613] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0131.613] wcscat (in: _Dest=0x3d8c670, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0131.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8c670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0131.614] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0131.614] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0131.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6128) returned 1 Thread: id = 126 os_tid = 0x9b4 [0131.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e35438 [0131.616] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0131.616] wcscat (in: _Dest=0x3e35438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0131.616] wcscat (in: _Dest=0x3e35438, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\*" [0131.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x91fea2c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x91fea2c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.617] wcscmp (_String1=".", _String2=".") returned 0 [0131.617] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x91fea2c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x91fea2c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.617] wcscmp (_String1="..", _String2=".") returned 1 [0131.617] wcscmp (_String1="..", _String2="..") returned 0 [0131.617] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0131.617] wcscmp (_String1="ADO.NET", _String2=".") returned 1 [0131.617] wcscmp (_String1="ADO.NET", _String2="..") returned 1 [0131.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6470 [0131.617] wcscpy (in: _Dest=0x3da6470, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0131.617] wcscat (in: _Dest=0x3da6470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0131.617] wcscat (in: _Dest=0x3da6470, _Source="ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0131.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0131.618] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5ebf10, ftCreationTime.dwHighDateTime=0x1d5a8f2, ftLastAccessTime.dwLowDateTime=0xcc0e6720, ftLastAccessTime.dwHighDateTime=0x1d5ddb6, ftLastWriteTime.dwLowDateTime=0xcc0e6720, ftLastWriteTime.dwHighDateTime=0x1d5ddb6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0131.618] wcscmp (_String1="alftp.exe", _String2=".") returned 1 [0131.618] wcscmp (_String1="alftp.exe", _String2="..") returned 1 [0131.618] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8c8db0, ftCreationTime.dwHighDateTime=0x1d5c0ba, ftLastAccessTime.dwLowDateTime=0xaae5cbc0, ftLastAccessTime.dwHighDateTime=0x1d568df, ftLastWriteTime.dwLowDateTime=0xaae5cbc0, ftLastWriteTime.dwHighDateTime=0x1d568df, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0131.618] wcscmp (_String1="ccv_server.exe", _String2=".") returned 1 [0131.618] wcscmp (_String1="ccv_server.exe", _String2="..") returned 1 [0131.618] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216dadc0, ftCreationTime.dwHighDateTime=0x1d56a58, ftLastAccessTime.dwLowDateTime=0xbf0a1260, ftLastAccessTime.dwHighDateTime=0x1d5720c, ftLastWriteTime.dwLowDateTime=0xbf0a1260, ftLastWriteTime.dwHighDateTime=0x1d5720c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1 [0131.619] wcscmp (_String1="filezilla.exe", _String2=".") returned 1 [0131.619] wcscmp (_String1="filezilla.exe", _String2="..") returned 1 [0131.619] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ed2640, ftCreationTime.dwHighDateTime=0x1d5e30a, ftLastAccessTime.dwLowDateTime=0x2ce5aae0, ftLastAccessTime.dwHighDateTime=0x1d5915e, ftLastWriteTime.dwLowDateTime=0x2ce5aae0, ftLastWriteTime.dwHighDateTime=0x1d5915e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="inserted.exe", cAlternateFileName="")) returned 1 [0131.619] wcscmp (_String1="inserted.exe", _String2=".") returned 1 [0131.619] wcscmp (_String1="inserted.exe", _String2="..") returned 1 [0131.619] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ed2640, ftCreationTime.dwHighDateTime=0x1d5e30a, ftLastAccessTime.dwLowDateTime=0x2ce5aae0, ftLastAccessTime.dwHighDateTime=0x1d5915e, ftLastWriteTime.dwLowDateTime=0x2ce5aae0, ftLastWriteTime.dwHighDateTime=0x1d5915e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="inserted.exe", cAlternateFileName="")) returned 0 [0131.619] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0131.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 127 os_tid = 0x9c4 [0131.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c740 [0131.621] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0131.621] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0131.621] wcscat (in: _Dest=0x3d8c740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\*" [0131.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.621] wcscmp (_String1=".", _String2=".") returned 0 [0131.621] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92010420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x92010420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.621] wcscmp (_String1="..", _String2=".") returned 1 [0131.621] wcscmp (_String1="..", _String2="..") returned 0 [0131.621] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1 [0131.621] wcscmp (_String1="Common7", _String2=".") returned 1 [0131.621] wcscmp (_String1="Common7", _String2="..") returned 1 [0131.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b7b0 [0131.621] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0131.622] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0131.622] wcscat (in: _Dest=0x3e0b7b0, _Source="Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0131.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0131.623] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a34b00, ftCreationTime.dwHighDateTime=0x1d5c9b2, ftLastAccessTime.dwLowDateTime=0xaceb3190, ftLastAccessTime.dwHighDateTime=0x1d5dfe4, ftLastWriteTime.dwLowDateTime=0xaceb3190, ftLastWriteTime.dwHighDateTime=0x1d5dfe4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0131.623] wcscmp (_String1="ncftp.exe", _String2=".") returned 1 [0131.623] wcscmp (_String1="ncftp.exe", _String2="..") returned 1 [0131.623] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fd24c0, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x7434df90, ftLastAccessTime.dwHighDateTime=0x1d5d580, ftLastWriteTime.dwLowDateTime=0x7434df90, ftLastWriteTime.dwHighDateTime=0x1d5d580, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="quality_containers.exe", cAlternateFileName="QUALIT~1.EXE")) returned 1 [0131.623] wcscmp (_String1="quality_containers.exe", _String2=".") returned 1 [0131.623] wcscmp (_String1="quality_containers.exe", _String2="..") returned 1 [0131.623] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1 [0131.623] wcscmp (_String1="SDK", _String2=".") returned 1 [0131.624] wcscmp (_String1="SDK", _String2="..") returned 1 [0131.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dbf8 [0131.624] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0131.624] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0131.624] wcscat (in: _Dest=0x3d8dbf8, _Source="SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0131.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0131.625] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104a0a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0xc8a35a00, ftLastAccessTime.dwHighDateTime=0x1d5e81a, ftLastWriteTime.dwLowDateTime=0xc8a35a00, ftLastWriteTime.dwHighDateTime=0x1d5e81a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="threaded_testimony_streams.exe", cAlternateFileName="THREAD~1.EXE")) returned 1 [0131.625] wcscmp (_String1="threaded_testimony_streams.exe", _String2=".") returned 1 [0131.625] wcscmp (_String1="threaded_testimony_streams.exe", _String2="..") returned 1 [0131.625] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38806b80, ftCreationTime.dwHighDateTime=0x1d5d07c, ftLastAccessTime.dwLowDateTime=0xbdf6adc0, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0xbdf6adc0, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0131.625] wcscmp (_String1="utg2.exe", _String2=".") returned 1 [0131.625] wcscmp (_String1="utg2.exe", _String2="..") returned 1 [0131.625] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0131.625] wcscmp (_String1="VSTA", _String2=".") returned 1 [0131.626] wcscmp (_String1="VSTA", _String2="..") returned 1 [0131.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8dac0 [0131.626] wcscpy (in: _Dest=0x3d8dac0, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0131.626] wcscat (in: _Dest=0x3d8dac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0131.626] wcscat (in: _Dest=0x3d8dac0, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0131.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8dac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0131.628] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163f8fd0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x7c82d780, ftLastAccessTime.dwHighDateTime=0x1d5b4a9, ftLastWriteTime.dwLowDateTime=0x7c82d780, ftLastWriteTime.dwHighDateTime=0x1d5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0131.628] wcscmp (_String1="webdrive.exe", _String2=".") returned 1 [0131.628] wcscmp (_String1="webdrive.exe", _String2="..") returned 1 [0131.628] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163f8fd0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x7c82d780, ftLastAccessTime.dwHighDateTime=0x1d5b4a9, ftLastWriteTime.dwLowDateTime=0x7c82d780, ftLastWriteTime.dwHighDateTime=0x1d5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0131.628] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 [0131.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 128 os_tid = 0x9d4 [0131.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61bb0 [0131.630] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0131.630] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0131.630] wcscat (in: _Dest=0x3e61bb0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\*") returned="C:\\Program Files\\Microsoft.NET\\*" [0131.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.631] wcscmp (_String1=".", _String2=".") returned 0 [0131.631] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.631] wcscmp (_String1="..", _String2=".") returned 1 [0131.631] wcscmp (_String1="..", _String2="..") returned 0 [0131.631] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01e2890, ftCreationTime.dwHighDateTime=0x1d5d69b, ftLastAccessTime.dwLowDateTime=0x1aea8250, ftLastAccessTime.dwHighDateTime=0x1d5ae2f, ftLastWriteTime.dwLowDateTime=0x1aea8250, ftLastWriteTime.dwHighDateTime=0x1d5ae2f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0131.631] wcscmp (_String1="creditservice.exe", _String2=".") returned 1 [0131.631] wcscmp (_String1="creditservice.exe", _String2="..") returned 1 [0131.631] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1502d0, ftCreationTime.dwHighDateTime=0x1d56e68, ftLastAccessTime.dwLowDateTime=0x44a84ad0, ftLastAccessTime.dwHighDateTime=0x1d5ad4b, ftLastWriteTime.dwLowDateTime=0x44a84ad0, ftLastWriteTime.dwHighDateTime=0x1d5ad4b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlets.exe", cAlternateFileName="")) returned 1 [0131.631] wcscmp (_String1="outlets.exe", _String2=".") returned 1 [0131.631] wcscmp (_String1="outlets.exe", _String2="..") returned 1 [0131.631] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0131.632] wcscmp (_String1="Primary Interop Assemblies", _String2=".") returned 1 [0131.632] wcscmp (_String1="Primary Interop Assemblies", _String2="..") returned 1 [0131.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da64f0 [0131.632] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0131.632] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0131.632] wcscat (in: _Dest=0x3da64f0, _Source="Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0131.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0131.633] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0131.633] wcscmp (_String1="RedistList", _String2=".") returned 1 [0131.633] wcscmp (_String1="RedistList", _String2="..") returned 1 [0131.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0131.634] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0131.634] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0131.634] wcscat (in: _Dest=0x2fe1328, _Source="RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0131.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0131.635] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0131.636] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0131.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 [0131.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f300) returned 1 Thread: id = 129 os_tid = 0x9e4 [0131.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf750 [0131.638] wcscpy (in: _Dest=0x3dcf750, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0131.638] wcscat (in: _Dest=0x3dcf750, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0131.638] wcscat (in: _Dest=0x3dcf750, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\*") returned="C:\\Program Files\\MSBuild\\*" [0131.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90c46d40, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c46d40, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe10 [0131.639] wcscmp (_String1=".", _String2=".") returned 0 [0131.639] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90c46d40, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90c46d40, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.639] wcscmp (_String1="..", _String2=".") returned 1 [0131.639] wcscmp (_String1="..", _String2="..") returned 0 [0131.639] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712e9130, ftCreationTime.dwHighDateTime=0x1d5b251, ftLastAccessTime.dwLowDateTime=0xcca12c20, ftLastAccessTime.dwHighDateTime=0x1d578eb, ftLastWriteTime.dwLowDateTime=0xcca12c20, ftLastWriteTime.dwHighDateTime=0x1d578eb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="FOXMAI~1.EXE")) returned 1 [0131.639] wcscmp (_String1="foxmailincmail.exe", _String2=".") returned 1 [0131.639] wcscmp (_String1="foxmailincmail.exe", _String2="..") returned 1 [0131.639] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.639] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.639] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61bb0 [0131.639] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0131.640] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0131.640] wcscat (in: _Dest=0x3e61bb0, _Source="Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0131.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0131.641] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b04a00, ftCreationTime.dwHighDateTime=0x1cacf8d, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45b04a00, ftLastWriteTime.dwHighDateTime=0x1cacf8d, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0131.641] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2=".") returned 1 [0131.642] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2="..") returned 1 [0131.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5f70 [0131.642] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0131.642] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0131.642] wcscat (in: _Dest=0x3da5f70, _Source="Microsoft.Office.InfoPath.targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets") returned="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" [0131.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0131.644] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb81a50, ftCreationTime.dwHighDateTime=0x1d581ef, ftLastAccessTime.dwLowDateTime=0x48d4e6b0, ftLastAccessTime.dwHighDateTime=0x1d5ad0d, ftLastWriteTime.dwLowDateTime=0x48d4e6b0, ftLastWriteTime.dwHighDateTime=0x1d5ad0d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0131.645] wcscmp (_String1="skype.exe", _String2=".") returned 1 [0131.645] wcscmp (_String1="skype.exe", _String2="..") returned 1 [0131.645] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a61ad60, ftCreationTime.dwHighDateTime=0x1d5c518, ftLastAccessTime.dwLowDateTime=0xa3886110, ftLastAccessTime.dwHighDateTime=0x1d5b305, ftLastWriteTime.dwLowDateTime=0xa3886110, ftLastWriteTime.dwHighDateTime=0x1d5b305, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0131.645] wcscmp (_String1="whatsapp.exe", _String2=".") returned 1 [0131.645] wcscmp (_String1="whatsapp.exe", _String2="..") returned 1 [0131.645] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ee1fc0, ftCreationTime.dwHighDateTime=0x1d5c0c8, ftLastAccessTime.dwLowDateTime=0x4ca9e450, ftLastAccessTime.dwHighDateTime=0x1d56d63, ftLastWriteTime.dwLowDateTime=0x4ca9e450, ftLastWriteTime.dwHighDateTime=0x1d56d63, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpress_bibliography.exe", cAlternateFileName="WORDPR~1.EXE")) returned 1 [0131.645] wcscmp (_String1="wordpress_bibliography.exe", _String2=".") returned 1 [0131.645] wcscmp (_String1="wordpress_bibliography.exe", _String2="..") returned 1 [0131.645] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ee1fc0, ftCreationTime.dwHighDateTime=0x1d5c0c8, ftLastAccessTime.dwLowDateTime=0x4ca9e450, ftLastAccessTime.dwHighDateTime=0x1d56d63, ftLastWriteTime.dwLowDateTime=0x4ca9e450, ftLastWriteTime.dwHighDateTime=0x1d56d63, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpress_bibliography.exe", cAlternateFileName="WORDPR~1.EXE")) returned 0 [0131.645] FindClose (in: hFindFile=0x3dcfe10 | out: hFindFile=0x3dcfe10) returned 1 [0131.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf750) returned 1 [0131.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 Thread: id = 130 os_tid = 0x9f4 [0131.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7d88 [0131.647] wcscpy (in: _Dest=0x3ef7d88, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0131.647] wcscat (in: _Dest=0x3ef7d88, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0131.647] wcscat (in: _Dest=0x3ef7d88, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\*") returned="C:\\Program Files\\Reference Assemblies\\*" [0131.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0131.648] wcscmp (_String1=".", _String2=".") returned 0 [0131.648] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d05420, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d05420, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.648] wcscmp (_String1="..", _String2=".") returned 1 [0131.648] wcscmp (_String1="..", _String2="..") returned 0 [0131.648] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aa1b0, ftCreationTime.dwHighDateTime=0x1d5d4a5, ftLastAccessTime.dwLowDateTime=0x63095a10, ftLastAccessTime.dwHighDateTime=0x1d5bf6f, ftLastWriteTime.dwLowDateTime=0x63095a10, ftLastWriteTime.dwHighDateTime=0x1d5bf6f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0131.648] wcscmp (_String1="3dftp.exe", _String2=".") returned 1 [0131.648] wcscmp (_String1="3dftp.exe", _String2="..") returned 1 [0131.648] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffca1630, ftCreationTime.dwHighDateTime=0x1d5a7de, ftLastAccessTime.dwLowDateTime=0x7380d8f0, ftLastAccessTime.dwHighDateTime=0x1d5c505, ftLastWriteTime.dwLowDateTime=0x7380d8f0, ftLastWriteTime.dwHighDateTime=0x1d5c505, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0131.648] wcscmp (_String1="edcsvr.exe", _String2=".") returned 1 [0131.648] wcscmp (_String1="edcsvr.exe", _String2="..") returned 1 [0131.648] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a39dd0, ftCreationTime.dwHighDateTime=0x1d55f24, ftLastAccessTime.dwLowDateTime=0xdfe4f80, ftLastAccessTime.dwHighDateTime=0x1d59210, ftLastWriteTime.dwLowDateTime=0xdfe4f80, ftLastWriteTime.dwHighDateTime=0x1d59210, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0131.648] wcscmp (_String1="far.exe", _String2=".") returned 1 [0131.648] wcscmp (_String1="far.exe", _String2="..") returned 1 [0131.648] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0131.648] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0131.648] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0131.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c740 [0131.648] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0131.649] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0131.649] wcscat (in: _Dest=0x3d8c740, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0131.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0131.650] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0131.650] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d88) returned 1 [0131.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7808) returned 1 Thread: id = 131 os_tid = 0xa04 [0131.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6128 [0131.652] wcscpy (in: _Dest=0x2fe6128, _Source="C:\\Program Files\\Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0131.652] wcscat (in: _Dest=0x2fe6128, _Source="\\" | out: _Dest="C:\\Program Files\\Uninstall Information\\") returned="C:\\Program Files\\Uninstall Information\\" [0131.652] wcscat (in: _Dest=0x2fe6128, _Source="*" | out: _Dest="C:\\Program Files\\Uninstall Information\\*") returned="C:\\Program Files\\Uninstall Information\\*" [0131.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x90bae7c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bae7c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0131.652] wcscmp (_String1=".", _String2=".") returned 0 [0131.652] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x90bae7c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90bae7c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.652] wcscmp (_String1="..", _String2=".") returned 1 [0131.652] wcscmp (_String1="..", _String2="..") returned 0 [0131.653] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60a274f0, ftCreationTime.dwHighDateTime=0x1d5a4d0, ftLastAccessTime.dwLowDateTime=0x445bdad0, ftLastAccessTime.dwHighDateTime=0x1d57fe0, ftLastWriteTime.dwLowDateTime=0x445bdad0, ftLastWriteTime.dwHighDateTime=0x1d57fe0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0131.653] wcscmp (_String1="outlook.exe", _String2=".") returned 1 [0131.653] wcscmp (_String1="outlook.exe", _String2="..") returned 1 [0131.653] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4e41d0, ftCreationTime.dwHighDateTime=0x1d5a427, ftLastAccessTime.dwLowDateTime=0xd0156e0, ftLastAccessTime.dwHighDateTime=0x1d5e74c, ftLastWriteTime.dwLowDateTime=0xd0156e0, ftLastWriteTime.dwHighDateTime=0x1d5e74c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trees.exe", cAlternateFileName="")) returned 1 [0131.653] wcscmp (_String1="trees.exe", _String2=".") returned 1 [0131.653] wcscmp (_String1="trees.exe", _String2="..") returned 1 [0131.653] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4e41d0, ftCreationTime.dwHighDateTime=0x1d5a427, ftLastAccessTime.dwLowDateTime=0xd0156e0, ftLastAccessTime.dwHighDateTime=0x1d5e74c, ftLastWriteTime.dwLowDateTime=0xd0156e0, ftLastWriteTime.dwHighDateTime=0x1d5e74c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trees.exe", cAlternateFileName="")) returned 0 [0131.653] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6128) returned 1 [0131.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 132 os_tid = 0xa14 [0131.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61d90 [0131.655] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0131.655] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0131.655] wcscat (in: _Dest=0x3e61d90, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\*") returned="C:\\Program Files\\Windows Journal\\*" [0131.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90b88660, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b88660, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0131.655] wcscmp (_String1=".", _String2=".") returned 0 [0131.655] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90b88660, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90b88660, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.656] wcscmp (_String1="..", _String2=".") returned 1 [0131.656] wcscmp (_String1="..", _String2="..") returned 0 [0131.656] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.656] wcscmp (_String1="en-US", _String2=".") returned 1 [0131.656] wcscmp (_String1="en-US", _String2="..") returned 1 [0131.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7650 [0131.656] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0131.656] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0131.656] wcscat (in: _Dest=0x3ef7650, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0131.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0131.658] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebe7e76, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ebe7e76, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x95c30110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0131.658] wcscmp (_String1="InkSeg.dll", _String2=".") returned 1 [0131.658] wcscmp (_String1="InkSeg.dll", _String2="..") returned 1 [0131.658] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d33f28, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54d33f28, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96d00440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0131.658] wcscmp (_String1="JNTFiltr.dll", _String2=".") returned 1 [0131.658] wcscmp (_String1="JNTFiltr.dll", _String2="..") returned 1 [0131.658] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54dcc4a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54dcc4a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ea4300, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xeca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="JNWDRV.dll", _String2=".") returned 1 [0131.701] wcscmp (_String1="JNWDRV.dll", _String2="..") returned 1 [0131.701] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed64c2c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ed64c2c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="jnwdui.dll", _String2=".") returned 1 [0131.701] wcscmp (_String1="jnwdui.dll", _String2="..") returned 1 [0131.701] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb14d1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ffb14d1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="jnwmon.dll", _String2=".") returned 1 [0131.701] wcscmp (_String1="jnwmon.dll", _String2="..") returned 1 [0131.701] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db8a7a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4db8a7a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="jnwppr.dll", _String2=".") returned 1 [0131.701] wcscmp (_String1="jnwppr.dll", _String2="..") returned 1 [0131.701] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37947e10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x37947e10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x93f6be00, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x1b3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="Journal.exe", _String2=".") returned 1 [0131.701] wcscmp (_String1="Journal.exe", _String2="..") returned 1 [0131.701] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x595f3d9f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x595f3d9f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9e2fae70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0131.701] wcscmp (_String1="MSPVWCTL.DLL", _String2=".") returned 1 [0131.701] wcscmp (_String1="MSPVWCTL.DLL", _String2="..") returned 1 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cf907e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x55cf907e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7240260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0131.702] wcscmp (_String1="NBDoc.DLL", _String2=".") returned 1 [0131.702] wcscmp (_String1="NBDoc.DLL", _String2="..") returned 1 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27ad38, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4b27ad38, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7264c50, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0131.702] wcscmp (_String1="NBMapTIP.dll", _String2=".") returned 1 [0131.702] wcscmp (_String1="NBMapTIP.dll", _String2="..") returned 1 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09acd40, ftCreationTime.dwHighDateTime=0x1d572bd, ftLastAccessTime.dwLowDateTime=0xfb4fc320, ftLastAccessTime.dwHighDateTime=0x1d5aac7, ftLastWriteTime.dwLowDateTime=0xfb4fc320, ftLastWriteTime.dwHighDateTime=0x1d5aac7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0131.702] wcscmp (_String1="notepad.exe", _String2=".") returned 1 [0131.702] wcscmp (_String1="notepad.exe", _String2="..") returned 1 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51bf5953, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x51bf5953, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f3fb0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0131.702] wcscmp (_String1="PDIALOG.exe", _String2=".") returned 1 [0131.702] wcscmp (_String1="PDIALOG.exe", _String2="..") returned 1 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0131.702] wcscmp (_String1="Templates", _String2=".") returned 1 [0131.702] wcscmp (_String1="Templates", _String2="..") returned 1 [0131.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6128 [0131.702] wcscpy (in: _Dest=0x2fe6128, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0131.703] wcscat (in: _Dest=0x2fe6128, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0131.703] wcscat (in: _Dest=0x2fe6128, _Source="Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0131.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0131.705] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0131.705] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0131.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 [0131.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ca0) returned 1 Thread: id = 133 os_tid = 0xa24 [0131.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f300 [0131.707] wcscpy (in: _Dest=0x3e5f300, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0131.707] wcscat (in: _Dest=0x3e5f300, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0131.707] wcscat (in: _Dest=0x3e5f300, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\*") returned="C:\\Program Files\\Windows Mail\\*" [0131.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0131.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13485c30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x13485c30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0132.119] wcscmp (_String1=".", _String2=".") returned 0 [0132.119] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13485c30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x13485c30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.120] wcscmp (_String1="..", _String2=".") returned 1 [0132.120] wcscmp (_String1="..", _String2="..") returned 0 [0132.120] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0132.120] wcscmp (_String1="en-US", _String2=".") returned 1 [0132.120] wcscmp (_String1="en-US", _String2="..") returned 1 [0132.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61de0 [0132.120] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0132.120] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0132.120] wcscat (in: _Dest=0x3e61de0, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0132.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94146c90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94146c90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf223a100, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="msoe.dll", _String2=".") returned 1 [0132.171] wcscmp (_String1="msoe.dll", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="MSOERES.dll", _String2=".") returned 1 [0132.171] wcscmp (_String1="MSOERES.dll", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dc6010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94dc6010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x13848d00, ftLastWriteTime.dwHighDateTime=0x1cb887b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="oeimport.dll", _String2=".") returned 1 [0132.171] wcscmp (_String1="oeimport.dll", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5a5d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x89a5a5d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xa96be800, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="wab.exe", _String2=".") returned 1 [0132.171] wcscmp (_String1="wab.exe", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="wabfind.dll", _String2=".") returned 1 [0132.171] wcscmp (_String1="wabfind.dll", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="wabimp.dll", _String2=".") returned 1 [0132.171] wcscmp (_String1="wabimp.dll", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="wabmig.exe", _String2=".") returned 1 [0132.171] wcscmp (_String1="wabmig.exe", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0132.171] wcscmp (_String1="WinMail.exe", _String2=".") returned 1 [0132.171] wcscmp (_String1="WinMail.exe", _String2="..") returned 1 [0132.171] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0132.172] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f300) returned 1 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f2b8) returned 1 Thread: id = 134 os_tid = 0xa34 [0131.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f198c0 [0131.712] wcscpy (in: _Dest=0x3f198c0, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0131.712] wcscat (in: _Dest=0x3f198c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0131.712] wcscat (in: _Dest=0x3f198c0, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\*") returned="C:\\ProgramData\\Adobe\\*" [0131.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0131.712] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0133.213] wcscmp (_String1=".", _String2=".") returned 0 [0133.213] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.213] wcscmp (_String1="..", _String2=".") returned 1 [0133.213] wcscmp (_String1="..", _String2="..") returned 0 [0133.213] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0133.213] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0133.213] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0133.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e417c8 [0133.213] wcscpy (in: _Dest=0x3e417c8, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0133.213] wcscat (in: _Dest=0x3e417c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0133.213] wcscat (in: _Dest=0x3e417c8, _Source="Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0134.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e417c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0134.524] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0134.524] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0134.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0134.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198c0) returned 1 [0134.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198f8) returned 1 Thread: id = 135 os_tid = 0x7b4 [0131.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61ca0 [0131.714] wcscpy (in: _Dest=0x3e61ca0, _Source="C:\\ProgramData\\Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0131.714] wcscat (in: _Dest=0x3e61ca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Application Data\\") returned="C:\\ProgramData\\Application Data\\" [0131.714] wcscat (in: _Dest=0x3e61ca0, _Source="*" | out: _Dest="C:\\ProgramData\\Application Data\\*") returned="C:\\ProgramData\\Application Data\\*" [0131.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0131.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0131.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ca0) returned 1 [0131.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f228) returned 1 Thread: id = 136 os_tid = 0xa44 [0131.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf910 [0131.716] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\ProgramData\\Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0131.716] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\ProgramData\\Desktop\\") returned="C:\\ProgramData\\Desktop\\" [0131.717] wcscat (in: _Dest=0x3dcf910, _Source="*" | out: _Dest="C:\\ProgramData\\Desktop\\*") returned="C:\\ProgramData\\Desktop\\*" [0131.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0131.717] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0131.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19930) returned 1 Thread: id = 137 os_tid = 0xa54 [0131.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf910 [0131.719] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\ProgramData\\Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0131.719] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\ProgramData\\Documents\\") returned="C:\\ProgramData\\Documents\\" [0131.719] wcscat (in: _Dest=0x3dcf910, _Source="*" | out: _Dest="C:\\ProgramData\\Documents\\*") returned="C:\\ProgramData\\Documents\\*" [0131.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0131.719] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0131.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 [0131.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff50) returned 1 Thread: id = 138 os_tid = 0xa64 [0131.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcff50 [0131.721] wcscpy (in: _Dest=0x3dcff50, _Source="C:\\ProgramData\\Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0131.721] wcscat (in: _Dest=0x3dcff50, _Source="\\" | out: _Dest="C:\\ProgramData\\Favorites\\") returned="C:\\ProgramData\\Favorites\\" [0131.721] wcscat (in: _Dest=0x3dcff50, _Source="*" | out: _Dest="C:\\ProgramData\\Favorites\\*") returned="C:\\ProgramData\\Favorites\\*" [0131.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0131.721] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0131.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff50) returned 1 [0131.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa90) returned 1 Thread: id = 139 os_tid = 0xa8c [0131.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfa90 [0131.724] wcscpy (in: _Dest=0x3dcfa90, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.724] wcscat (in: _Dest=0x3dcfa90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.724] wcscat (in: _Dest=0x3dcfa90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\*") returned="C:\\ProgramData\\Microsoft\\*" [0131.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0131.724] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff50 [0131.724] wcscmp (_String1=".", _String2=".") returned 0 [0131.724] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.724] wcscmp (_String1="..", _String2=".") returned 1 [0131.724] wcscmp (_String1="..", _String2="..") returned 0 [0131.724] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0131.724] wcscmp (_String1="Assistance", _String2=".") returned 1 [0131.724] wcscmp (_String1="Assistance", _String2="..") returned 1 [0131.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61ca0 [0131.725] wcscpy (in: _Dest=0x3e61ca0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.725] wcscat (in: _Dest=0x3e61ca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.725] wcscat (in: _Dest=0x3e61ca0, _Source="Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0131.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0131.727] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0131.727] wcscmp (_String1="Crypto", _String2=".") returned 1 [0131.727] wcscmp (_String1="Crypto", _String2="..") returned 1 [0131.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f228 [0131.727] wcscpy (in: _Dest=0x3e5f228, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.727] wcscat (in: _Dest=0x3e5f228, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.727] wcscat (in: _Dest=0x3e5f228, _Source="Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0131.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0131.729] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0131.729] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0131.729] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0131.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7808 [0131.729] wcscpy (in: _Dest=0x3ef7808, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.729] wcscat (in: _Dest=0x3ef7808, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.729] wcscat (in: _Dest=0x3ef7808, _Source="Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0131.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0131.731] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0131.731] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0131.731] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0131.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61d90 [0131.731] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.731] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.731] wcscat (in: _Dest=0x3e61d90, _Source="DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0131.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0131.733] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0131.733] wcscmp (_String1="DRM", _String2=".") returned 1 [0131.733] wcscmp (_String1="DRM", _String2="..") returned 1 [0131.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5f030 [0131.733] wcscpy (in: _Dest=0x3e5f030, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.733] wcscat (in: _Dest=0x3e5f030, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.733] wcscat (in: _Dest=0x3e5f030, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0131.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0131.735] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0131.735] wcscmp (_String1="eHome", _String2=".") returned 1 [0131.735] wcscmp (_String1="eHome", _String2="..") returned 1 [0131.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f0c0 [0131.735] wcscpy (in: _Dest=0x3e5f0c0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.735] wcscat (in: _Dest=0x3e5f0c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.735] wcscat (in: _Dest=0x3e5f0c0, _Source="eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0131.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0131.737] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0131.737] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0131.737] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0131.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7d88 [0131.737] wcscpy (in: _Dest=0x3ef7d88, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.737] wcscat (in: _Dest=0x3ef7d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.737] wcscat (in: _Dest=0x3ef7d88, _Source="Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0131.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0131.739] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0131.739] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0131.739] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0131.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e618e0 [0131.739] wcscpy (in: _Dest=0x3e618e0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.740] wcscat (in: _Dest=0x3e618e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.740] wcscat (in: _Dest=0x3e618e0, _Source="HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0131.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e618e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0131.742] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0131.742] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0131.742] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0131.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef75a0 [0131.742] wcscpy (in: _Dest=0x3ef75a0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.742] wcscat (in: _Dest=0x3ef75a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.742] wcscat (in: _Dest=0x3ef75a0, _Source="IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0131.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0131.745] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0131.745] wcscmp (_String1="Media Player", _String2=".") returned 1 [0131.745] wcscmp (_String1="Media Player", _String2="..") returned 1 [0131.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef74f0 [0131.745] wcscpy (in: _Dest=0x3ef74f0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.745] wcscat (in: _Dest=0x3ef74f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.745] wcscat (in: _Dest=0x3ef74f0, _Source="Media Player" | out: _Dest="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player" [0131.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef74f0) returned 1 [0131.745] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0131.745] wcscmp (_String1="MF", _String2=".") returned 1 [0131.745] wcscmp (_String1="MF", _String2="..") returned 1 [0131.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf910 [0131.745] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.745] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.746] wcscat (in: _Dest=0x3dcf910, _Source="MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0131.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0131.747] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0131.747] wcscmp (_String1="MSDN", _String2=".") returned 1 [0131.748] wcscmp (_String1="MSDN", _String2="..") returned 1 [0131.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5efa0 [0131.748] wcscpy (in: _Dest=0x3e5efa0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.748] wcscat (in: _Dest=0x3e5efa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.748] wcscat (in: _Dest=0x3e5efa0, _Source="MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0131.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5efa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0131.750] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0131.750] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0131.750] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0131.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef74f0 [0131.750] wcscpy (in: _Dest=0x3ef74f0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.750] wcscat (in: _Dest=0x3ef74f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.751] wcscat (in: _Dest=0x3ef74f0, _Source="NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0131.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef74f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0131.753] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0131.753] wcscmp (_String1="Network", _String2=".") returned 1 [0131.753] wcscmp (_String1="Network", _String2="..") returned 1 [0131.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61cf0 [0131.753] wcscpy (in: _Dest=0x3e61cf0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.753] wcscat (in: _Dest=0x3e61cf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.753] wcscat (in: _Dest=0x3e61cf0, _Source="Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0131.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0131.755] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0131.755] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0131.755] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0131.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5efe8 [0131.755] wcscpy (in: _Dest=0x3e5efe8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0131.755] wcscat (in: _Dest=0x3e5efe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0131.755] wcscat (in: _Dest=0x3e5efe8, _Source="OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0131.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5efe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0132.211] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0132.211] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0132.211] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0132.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6770 [0132.211] wcscpy (in: _Dest=0x3da6770, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.211] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.211] wcscat (in: _Dest=0x3da6770, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0132.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0132.447] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0132.447] wcscmp (_String1="RAC", _String2=".") returned 1 [0132.447] wcscmp (_String1="RAC", _String2="..") returned 1 [0132.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5ecd0 [0132.448] wcscpy (in: _Dest=0x3e5ecd0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.448] wcscat (in: _Dest=0x3e5ecd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.448] wcscat (in: _Dest=0x3e5ecd0, _Source="RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0132.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5ecd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0132.449] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0132.449] wcscmp (_String1="Search", _String2=".") returned 1 [0132.449] wcscmp (_String1="Search", _String2="..") returned 1 [0132.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f2b8 [0132.450] wcscpy (in: _Dest=0x3e5f2b8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.450] wcscat (in: _Dest=0x3e5f2b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.450] wcscat (in: _Dest=0x3e5f2b8, _Source="Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0132.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0132.451] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0132.451] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0132.451] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0132.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e9c8 [0132.451] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.451] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.451] wcscat (in: _Dest=0x3d8e9c8, _Source="User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0132.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0132.453] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0132.453] wcscmp (_String1="Vault", _String2=".") returned 1 [0132.453] wcscmp (_String1="Vault", _String2="..") returned 1 [0132.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5f1e0 [0132.454] wcscpy (in: _Dest=0x3e5f1e0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.454] wcscat (in: _Dest=0x3e5f1e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.454] wcscat (in: _Dest=0x3e5f1e0, _Source="Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0132.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0132.455] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0132.456] wcscmp (_String1="VISIO", _String2=".") returned 1 [0132.456] wcscmp (_String1="VISIO", _String2="..") returned 1 [0132.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5ee80 [0132.456] wcscpy (in: _Dest=0x3e5ee80, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.456] wcscat (in: _Dest=0x3e5ee80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.456] wcscat (in: _Dest=0x3e5ee80, _Source="VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0132.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5ee80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0132.458] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0132.458] wcscmp (_String1="Windows", _String2=".") returned 1 [0132.458] wcscmp (_String1="Windows", _String2="..") returned 1 [0132.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e621a0 [0132.458] wcscpy (in: _Dest=0x3e621a0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.458] wcscat (in: _Dest=0x3e621a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.458] wcscat (in: _Dest=0x3e621a0, _Source="Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0132.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e621a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0132.459] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xabc9e780, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xabc9e780, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0132.459] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0132.459] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0132.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0132.459] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.459] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.460] wcscat (in: _Dest=0x2fe1328, _Source="Windows Defender" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender" [0132.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0132.460] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0132.460] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0132.460] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0132.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e621f0 [0132.460] wcscpy (in: _Dest=0x3e621f0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.460] wcscat (in: _Dest=0x3e621f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.460] wcscat (in: _Dest=0x3e621f0, _Source="Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0132.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e621f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0132.465] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0132.465] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0132.465] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0132.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62240 [0132.466] wcscpy (in: _Dest=0x3e62240, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0132.466] wcscat (in: _Dest=0x3e62240, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0132.466] wcscat (in: _Dest=0x3e62240, _Source="WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0132.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0132.467] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0133.219] FindClose (in: hFindFile=0x3dcff50 | out: hFindFile=0x3dcff50) returned 1 [0134.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0134.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa90) returned 1 [0134.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfc10) returned 1 Thread: id = 140 os_tid = 0xa80 [0131.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eec8 [0131.758] wcscpy (in: _Dest=0x3e5eec8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0131.758] wcscat (in: _Dest=0x3e5eec8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0131.758] wcscat (in: _Dest=0x3e5eec8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft Help\\*") returned="C:\\ProgramData\\Microsoft Help\\*" [0131.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0131.758] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0133.934] wcscmp (_String1=".", _String2=".") returned 0 [0133.934] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.938] wcscmp (_String1="..", _String2=".") returned 1 [0133.938] wcscmp (_String1="..", _String2="..") returned 0 [0133.938] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0133.938] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0133.938] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0133.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e035b8 [0133.939] wcscpy (in: _Dest=0x3e035b8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0133.939] wcscat (in: _Dest=0x3e035b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0133.939] wcscat (in: _Dest=0x3e035b8, _Source="Hx.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned="C:\\ProgramData\\Microsoft Help\\Hx.hxn" [0139.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e035b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0139.764] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0139.764] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0139.764] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0139.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0139.764] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.764] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.764] wcscat (in: _Dest=0x3f29b10, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0139.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0139.765] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0139.765] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0139.766] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0139.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3dc6a28 [0139.766] wcscpy (in: _Dest=0x3dc6a28, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.766] wcscat (in: _Dest=0x3dc6a28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.766] wcscat (in: _Dest=0x3dc6a28, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0139.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dc6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0139.767] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0139.767] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0139.767] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0139.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0139.767] wcscpy (in: _Dest=0x3f29020, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.768] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.768] wcscat (in: _Dest=0x3f29020, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0139.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0139.769] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0139.769] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0139.769] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0139.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3dc5d80 [0139.769] wcscpy (in: _Dest=0x3dc5d80, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.769] wcscat (in: _Dest=0x3dc5d80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.769] wcscat (in: _Dest=0x3dc5d80, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" [0139.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dc5d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0139.771] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0139.771] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0139.771] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0139.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ad90 [0139.771] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.771] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.771] wcscat (in: _Dest=0x3f1ad90, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" [0139.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ad90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0139.772] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0139.772] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0139.773] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0139.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29560 [0139.773] wcscpy (in: _Dest=0x3f29560, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.773] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.773] wcscat (in: _Dest=0x3f29560, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0139.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0139.774] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0139.774] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0139.774] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0139.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34c40 [0139.774] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.774] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.774] wcscat (in: _Dest=0x3e34c40, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0139.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e34c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0139.776] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0139.776] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0139.776] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0139.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29330 [0139.776] wcscpy (in: _Dest=0x3f29330, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.776] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.776] wcscat (in: _Dest=0x3f29330, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0139.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0139.778] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0139.778] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0139.778] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0139.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5cd8 [0139.778] wcscpy (in: _Dest=0x66e5cd8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.778] wcscat (in: _Dest=0x66e5cd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.778] wcscat (in: _Dest=0x66e5cd8, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0139.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0139.780] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0139.780] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0139.780] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0139.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0060 [0139.780] wcscpy (in: _Dest=0x66d0060, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.780] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.780] wcscat (in: _Dest=0x66d0060, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0139.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0139.782] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0139.782] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0139.782] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0139.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da63f0 [0139.782] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.782] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.783] wcscat (in: _Dest=0x3da63f0, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0139.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0139.784] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0139.784] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0139.784] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0139.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d00d8 [0139.784] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.784] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.784] wcscat (in: _Dest=0x66d00d8, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0139.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0139.786] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0139.786] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0139.786] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0139.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4af0 [0139.786] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.786] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.786] wcscat (in: _Dest=0x3da4af0, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0139.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0139.788] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0139.788] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0139.788] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0139.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5e28 [0139.788] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.788] wcscat (in: _Dest=0x66e5e28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.788] wcscat (in: _Dest=0x66e5e28, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0139.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0139.790] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0139.790] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0139.790] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0139.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5e98 [0139.790] wcscpy (in: _Dest=0x66e5e98, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.790] wcscat (in: _Dest=0x66e5e98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.790] wcscat (in: _Dest=0x66e5e98, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0139.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0139.792] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0139.792] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0139.792] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0139.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0150 [0139.792] wcscpy (in: _Dest=0x66d0150, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.792] wcscat (in: _Dest=0x66d0150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.792] wcscat (in: _Dest=0x66d0150, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0139.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0139.794] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0139.794] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0139.794] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0139.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0139.794] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.794] wcscat (in: _Dest=0x66e5f08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.794] wcscat (in: _Dest=0x66e5f08, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0139.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0139.795] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0139.795] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0139.796] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0139.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e5db8 [0139.796] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.796] wcscat (in: _Dest=0x66e5db8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.796] wcscat (in: _Dest=0x66e5db8, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" [0139.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0139.797] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0139.797] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0139.798] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0139.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d01c8 [0139.798] wcscpy (in: _Dest=0x66d01c8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0139.798] wcscat (in: _Dest=0x66d01c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0139.798] wcscat (in: _Dest=0x66d01c8, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0139.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d01c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0140.514] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0140.514] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0140.514] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0140.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e34a60 [0140.514] wcscpy (in: _Dest=0x3e34a60, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0140.514] wcscat (in: _Dest=0x3e34a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0140.514] wcscat (in: _Dest=0x3e34a60, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0141.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e34a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0141.280] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0141.280] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0141.280] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0141.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f4f0 [0141.280] wcscpy (in: _Dest=0x3e0f4f0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.280] wcscat (in: _Dest=0x3e0f4f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.280] wcscat (in: _Dest=0x3e0f4f0, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0141.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0141.282] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0141.282] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0141.282] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0141.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b060 [0141.282] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.282] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.282] wcscat (in: _Dest=0x3f1b060, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0141.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0141.283] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0141.283] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0141.298] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0141.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0f370 [0141.298] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.298] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.298] wcscat (in: _Dest=0x3e0f370, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0141.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0141.307] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0141.307] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0141.307] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0141.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b600 [0141.308] wcscpy (in: _Dest=0x3f1b600, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.308] wcscat (in: _Dest=0x3f1b600, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.308] wcscat (in: _Dest=0x3f1b600, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0141.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0141.309] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0141.309] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0141.309] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0141.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0ae80 [0141.310] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.310] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.310] wcscat (in: _Dest=0x3e0ae80, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0141.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0141.311] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0141.311] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0141.311] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0141.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d02b8 [0141.311] wcscpy (in: _Dest=0x66d02b8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.311] wcscat (in: _Dest=0x66d02b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.311] wcscat (in: _Dest=0x66d02b8, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0141.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d02b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0141.312] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0141.312] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0141.312] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0141.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f272d8 [0141.312] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.312] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.312] wcscat (in: _Dest=0x3f272d8, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0141.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0141.313] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0141.314] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0141.314] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0141.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0330 [0141.314] wcscpy (in: _Dest=0x66d0330, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.314] wcscat (in: _Dest=0x66d0330, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.314] wcscat (in: _Dest=0x66d0330, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0141.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0141.315] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0141.315] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0141.315] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0141.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d03a8 [0141.315] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.315] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.315] wcscat (in: _Dest=0x66d03a8, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0141.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d03a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0141.317] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0141.317] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0141.317] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0141.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0420 [0141.317] wcscpy (in: _Dest=0x66d0420, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.317] wcscat (in: _Dest=0x66d0420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.317] wcscat (in: _Dest=0x66d0420, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0141.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0141.319] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0141.319] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0141.319] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0141.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f7f0 [0141.319] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.319] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.319] wcscat (in: _Dest=0x3e0f7f0, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0141.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0141.320] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0141.320] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0141.320] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0141.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0498 [0141.321] wcscpy (in: _Dest=0x66d0498, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.321] wcscat (in: _Dest=0x66d0498, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.321] wcscat (in: _Dest=0x66d0498, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0141.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0141.322] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0141.322] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0141.322] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0141.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10f70 [0141.322] wcscpy (in: _Dest=0x3e10f70, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.322] wcscat (in: _Dest=0x3e10f70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.322] wcscat (in: _Dest=0x3e10f70, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0141.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0141.323] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0141.323] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0141.323] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0141.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1d48 [0141.323] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0141.323] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0141.323] wcscat (in: _Dest=0x2fe1d48, _Source="nslist.hxl" | out: _Dest="C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned="C:\\ProgramData\\Microsoft Help\\nslist.hxl" [0141.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0141.325] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0141.325] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0145.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0145.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eec8) returned 1 [0145.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f150) returned 1 Thread: id = 141 os_tid = 0xa7c [0131.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19930 [0131.759] wcscpy (in: _Dest=0x3f19930, _Source="C:\\ProgramData\\Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0131.759] wcscat (in: _Dest=0x3f19930, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\") returned="C:\\ProgramData\\Oracle\\" [0131.759] wcscat (in: _Dest=0x3f19930, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\*") returned="C:\\ProgramData\\Oracle\\*" [0131.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0131.759] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0132.529] wcscmp (_String1=".", _String2=".") returned 0 [0132.530] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.530] wcscmp (_String1="..", _String2=".") returned 1 [0132.530] wcscmp (_String1="..", _String2="..") returned 0 [0132.530] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.530] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19930) returned 1 [0132.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19968) returned 1 Thread: id = 142 os_tid = 0xa78 [0131.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5edf0 [0131.760] wcscpy (in: _Dest=0x3e5edf0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0131.760] wcscat (in: _Dest=0x3e5edf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0131.760] wcscat (in: _Dest=0x3e5edf0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\*") returned="C:\\ProgramData\\Package Cache\\*" [0131.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0131.761] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0131.764] wcscmp (_String1=".", _String2=".") returned 0 [0131.764] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.764] wcscmp (_String1="..", _String2=".") returned 1 [0131.764] wcscmp (_String1="..", _String2="..") returned 0 [0131.764] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0131.764] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0131.764] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0131.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0131.764] wcscpy (in: _Dest=0x32b820, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0131.764] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0131.765] wcscat (in: _Dest=0x32b820, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0132.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0132.137] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0132.138] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0132.138] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0132.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cd80 [0132.138] wcscpy (in: _Dest=0x32cd80, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.138] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.138] wcscat (in: _Dest=0x32cd80, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0132.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a0 [0132.140] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0132.140] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0132.140] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0132.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053330 [0132.140] wcscpy (in: _Dest=0x3053330, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.140] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.140] wcscat (in: _Dest=0x3053330, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0132.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1384 [0132.143] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0132.143] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0132.143] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0132.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355050 [0132.143] wcscpy (in: _Dest=0x355050, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.143] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.143] wcscat (in: _Dest=0x355050, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0132.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0132.145] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0132.145] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0132.145] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0132.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053bb8 [0132.145] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.145] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.145] wcscat (in: _Dest=0x3053bb8, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0132.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x137c [0132.147] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0132.147] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0132.147] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0132.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053918 [0132.147] wcscpy (in: _Dest=0x3053918, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.147] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.147] wcscat (in: _Dest=0x3053918, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0132.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0132.148] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0132.149] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0132.149] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0132.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053480 [0132.149] wcscpy (in: _Dest=0x3053480, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.149] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.149] wcscat (in: _Dest=0x3053480, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0132.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0132.150] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0132.150] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0132.150] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0132.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052e98 [0132.151] wcscpy (in: _Dest=0x3052e98, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.151] wcscat (in: _Dest=0x3052e98, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.151] wcscat (in: _Dest=0x3052e98, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0132.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3052e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388 [0132.153] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0132.153] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0132.153] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0132.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3550e0 [0132.153] wcscpy (in: _Dest=0x3550e0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.153] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.153] wcscat (in: _Dest=0x3550e0, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0132.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1368 [0132.154] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0132.154] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0132.154] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0132.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0132.154] wcscpy (in: _Dest=0x355290, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.155] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.155] wcscat (in: _Dest=0x355290, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0132.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0132.158] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0132.158] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0132.158] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0132.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bd98 [0132.158] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0132.158] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0132.158] wcscat (in: _Dest=0x3e5bd98, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0132.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1350 [0132.160] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0132.160] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0132.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0132.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5edf0) returned 1 [0132.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f198) returned 1 Thread: id = 143 os_tid = 0xacc [0131.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfe10 [0131.765] wcscpy (in: _Dest=0x3dcfe10, _Source="C:\\ProgramData\\Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0131.765] wcscat (in: _Dest=0x3dcfe10, _Source="\\" | out: _Dest="C:\\ProgramData\\Start Menu\\") returned="C:\\ProgramData\\Start Menu\\" [0131.765] wcscat (in: _Dest=0x3dcfe10, _Source="*" | out: _Dest="C:\\ProgramData\\Start Menu\\*") returned="C:\\ProgramData\\Start Menu\\*" [0131.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0131.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0132.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfe10) returned 1 [0132.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfb90) returned 1 Thread: id = 144 os_tid = 0x6f0 [0131.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19850 [0131.766] wcscpy (in: _Dest=0x3f19850, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0131.766] wcscat (in: _Dest=0x3f19850, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0131.766] wcscat (in: _Dest=0x3f19850, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\*") returned="C:\\ProgramData\\Sun\\*" [0131.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0131.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0133.215] wcscmp (_String1=".", _String2=".") returned 0 [0133.215] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.215] wcscmp (_String1="..", _String2=".") returned 1 [0133.215] wcscmp (_String1="..", _String2="..") returned 0 [0133.215] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0133.215] wcscmp (_String1="Java", _String2=".") returned 1 [0133.215] wcscmp (_String1="Java", _String2="..") returned 1 [0133.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19af0 [0133.215] wcscpy (in: _Dest=0x3f19af0, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0133.215] wcscat (in: _Dest=0x3f19af0, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0133.215] wcscat (in: _Dest=0x3f19af0, _Source="Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0134.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0134.528] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0134.528] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0134.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0134.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0134.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 Thread: id = 145 os_tid = 0xb00 [0131.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf510 [0131.768] wcscpy (in: _Dest=0x3dcf510, _Source="C:\\ProgramData\\Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0131.768] wcscat (in: _Dest=0x3dcf510, _Source="\\" | out: _Dest="C:\\ProgramData\\Templates\\") returned="C:\\ProgramData\\Templates\\" [0131.768] wcscat (in: _Dest=0x3dcf510, _Source="*" | out: _Dest="C:\\ProgramData\\Templates\\*") returned="C:\\ProgramData\\Templates\\*" [0131.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0131.768] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf510) returned 1 [0132.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfbd0) returned 1 Thread: id = 146 os_tid = 0x3f0 [0131.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0131.773] wcscpy (in: _Dest=0x3f19888, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0131.773] wcscat (in: _Dest=0x3f19888, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0131.773] wcscat (in: _Dest=0x3f19888, _Source="*" | out: _Dest="C:\\Users\\All Users\\*") returned="C:\\Users\\All Users\\*" [0131.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0131.773] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0132.534] wcscmp (_String1=".", _String2=".") returned 0 [0132.534] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.534] wcscmp (_String1="..", _String2=".") returned 1 [0132.534] wcscmp (_String1="..", _String2="..") returned 0 [0132.534] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0132.534] wcscmp (_String1="Adobe", _String2=".") returned 1 [0132.534] wcscmp (_String1="Adobe", _String2="..") returned 1 [0132.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf510 [0132.534] wcscpy (in: _Dest=0x3dcf510, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.535] wcscat (in: _Dest=0x3dcf510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.535] wcscat (in: _Dest=0x3dcf510, _Source="Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0132.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dcf510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0132.971] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.971] wcscmp (_String1="Application Data", _String2=".") returned 1 [0132.971] wcscmp (_String1="Application Data", _String2="..") returned 1 [0132.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62510 [0132.972] wcscpy (in: _Dest=0x3e62510, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.972] wcscat (in: _Dest=0x3e62510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.972] wcscat (in: _Dest=0x3e62510, _Source="Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0132.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0132.973] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.973] wcscmp (_String1="Desktop", _String2=".") returned 1 [0132.973] wcscmp (_String1="Desktop", _String2="..") returned 1 [0132.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066a80 [0132.973] wcscpy (in: _Dest=0x3066a80, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.974] wcscat (in: _Dest=0x3066a80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.974] wcscat (in: _Dest=0x3066a80, _Source="Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0132.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0132.975] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.975] wcscmp (_String1="Documents", _String2=".") returned 1 [0132.975] wcscmp (_String1="Documents", _String2="..") returned 1 [0132.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e414b0 [0132.975] wcscpy (in: _Dest=0x3e414b0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.975] wcscat (in: _Dest=0x3e414b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.975] wcscat (in: _Dest=0x3e414b0, _Source="Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0132.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e414b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0132.977] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.977] wcscmp (_String1="Favorites", _String2=".") returned 1 [0132.977] wcscmp (_String1="Favorites", _String2="..") returned 1 [0132.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e41738 [0132.977] wcscpy (in: _Dest=0x3e41738, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.977] wcscat (in: _Dest=0x3e41738, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.977] wcscat (in: _Dest=0x3e41738, _Source="Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0132.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e41738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0132.979] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0132.979] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0132.979] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0132.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e41a50 [0132.979] wcscpy (in: _Dest=0x3e41a50, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.979] wcscat (in: _Dest=0x3e41a50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.979] wcscat (in: _Dest=0x3e41a50, _Source="Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0132.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e41a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0132.980] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0132.980] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0132.980] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0132.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62560 [0132.980] wcscpy (in: _Dest=0x3e62560, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.980] wcscat (in: _Dest=0x3e62560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.981] wcscat (in: _Dest=0x3e62560, _Source="Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0132.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0132.982] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0132.982] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0132.982] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0132.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067000 [0132.982] wcscpy (in: _Dest=0x3067000, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.982] wcscat (in: _Dest=0x3067000, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.982] wcscat (in: _Dest=0x3067000, _Source="Mozilla" | out: _Dest="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla" [0132.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067000) returned 1 [0132.982] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0132.982] wcscmp (_String1="Oracle", _String2=".") returned 1 [0132.982] wcscmp (_String1="Oracle", _String2="..") returned 1 [0132.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067000 [0132.982] wcscpy (in: _Dest=0x3067000, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.983] wcscat (in: _Dest=0x3067000, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.983] wcscat (in: _Dest=0x3067000, _Source="Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0132.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0132.984] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0132.984] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0132.984] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0132.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e625b0 [0132.985] wcscpy (in: _Dest=0x3e625b0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.985] wcscat (in: _Dest=0x3e625b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.985] wcscat (in: _Dest=0x3e625b0, _Source="Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0132.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e625b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0132.986] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0132.986] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0132.986] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0132.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e41978 [0132.986] wcscpy (in: _Dest=0x3e41978, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.986] wcscat (in: _Dest=0x3e41978, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.986] wcscat (in: _Dest=0x3e41978, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0132.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e41978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0132.988] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0132.988] wcscmp (_String1="Sun", _String2=".") returned 1 [0132.988] wcscmp (_String1="Sun", _String2="..") returned 1 [0132.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19968 [0132.988] wcscpy (in: _Dest=0x3f19968, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.988] wcscat (in: _Dest=0x3f19968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.988] wcscat (in: _Dest=0x3f19968, _Source="Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0132.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0132.990] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0132.990] wcscmp (_String1="Templates", _String2=".") returned 1 [0132.990] wcscmp (_String1="Templates", _String2="..") returned 1 [0132.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e40da8 [0132.990] wcscpy (in: _Dest=0x3e40da8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.990] wcscat (in: _Dest=0x3e40da8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.990] wcscat (in: _Dest=0x3e40da8, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0132.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e40da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0132.991] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0132.991] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0132.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0132.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0132.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 Thread: id = 147 os_tid = 0xb04 [0131.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db4020 [0131.774] wcscpy (in: _Dest=0x3db4020, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.774] wcscat (in: _Dest=0x3db4020, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.774] wcscat (in: _Dest=0x3db4020, _Source="*" | out: _Dest="C:\\Users\\Default\\*") returned="C:\\Users\\Default\\*" [0131.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0131.774] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80bb8 [0131.775] wcscmp (_String1=".", _String2=".") returned 0 [0131.775] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.775] wcscmp (_String1="..", _String2=".") returned 1 [0131.775] wcscmp (_String1="..", _String2="..") returned 0 [0131.775] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0131.775] wcscmp (_String1="AppData", _String2=".") returned 1 [0131.775] wcscmp (_String1="AppData", _String2="..") returned 1 [0131.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e80d78 [0131.775] wcscpy (in: _Dest=0x3e80d78, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0131.775] wcscat (in: _Dest=0x3e80d78, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0131.775] wcscat (in: _Dest=0x3e80d78, _Source="AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0132.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e80d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0132.175] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175c6d1c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175c6d1c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175c6d1c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.175] wcscmp (_String1="Application Data", _String2=".") returned 1 [0132.175] wcscmp (_String1="Application Data", _String2="..") returned 1 [0132.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62010 [0132.175] wcscpy (in: _Dest=0x3e62010, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.175] wcscat (in: _Dest=0x3e62010, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.175] wcscat (in: _Dest=0x3e62010, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0132.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0132.177] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0132.177] wcscmp (_String1="Contacts", _String2=".") returned 1 [0132.177] wcscmp (_String1="Contacts", _String2="..") returned 1 [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x30671c0 [0132.177] wcscpy (in: _Dest=0x30671c0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.177] wcscat (in: _Dest=0x30671c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.177] wcscat (in: _Dest=0x30671c0, _Source="Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0132.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30671c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0132.179] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0132.179] wcscmp (_String1="Cookies", _String2=".") returned 1 [0132.179] wcscmp (_String1="Cookies", _String2="..") returned 1 [0132.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067200 [0132.179] wcscpy (in: _Dest=0x3067200, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.179] wcscat (in: _Dest=0x3067200, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.179] wcscat (in: _Dest=0x3067200, _Source="Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0132.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0132.181] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.181] wcscmp (_String1="Desktop", _String2=".") returned 1 [0132.181] wcscmp (_String1="Desktop", _String2="..") returned 1 [0132.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066a80 [0132.181] wcscpy (in: _Dest=0x3066a80, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.181] wcscat (in: _Dest=0x3066a80, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.181] wcscat (in: _Dest=0x3066a80, _Source="Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0132.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364 [0132.183] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.183] wcscmp (_String1="Documents", _String2=".") returned 1 [0132.183] wcscmp (_String1="Documents", _String2="..") returned 1 [0132.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067280 [0132.183] wcscpy (in: _Dest=0x3067280, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.183] wcscat (in: _Dest=0x3067280, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.183] wcscat (in: _Dest=0x3067280, _Source="Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0132.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0132.184] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0132.184] wcscmp (_String1="Downloads", _String2=".") returned 1 [0132.185] wcscmp (_String1="Downloads", _String2="..") returned 1 [0132.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067340 [0132.185] wcscpy (in: _Dest=0x3067340, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.185] wcscat (in: _Dest=0x3067340, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.185] wcscat (in: _Dest=0x3067340, _Source="Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0132.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1358 [0132.186] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.186] wcscmp (_String1="Favorites", _String2=".") returned 1 [0132.186] wcscmp (_String1="Favorites", _String2="..") returned 1 [0132.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067300 [0132.186] wcscpy (in: _Dest=0x3067300, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.187] wcscat (in: _Dest=0x3067300, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.187] wcscat (in: _Dest=0x3067300, _Source="Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1354 [0132.188] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0132.188] wcscmp (_String1="Links", _String2=".") returned 1 [0132.188] wcscmp (_String1="Links", _String2="..") returned 1 [0132.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f199d8 [0132.189] wcscpy (in: _Dest=0x3f199d8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.189] wcscat (in: _Dest=0x3f199d8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.189] wcscat (in: _Dest=0x3f199d8, _Source="Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0132.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f199d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0132.190] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0132.190] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0132.190] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0132.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f1e0 [0132.191] wcscpy (in: _Dest=0x3e5f1e0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.191] wcscat (in: _Dest=0x3e5f1e0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.191] wcscat (in: _Dest=0x3e5f1e0, _Source="Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0132.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0132.192] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0132.192] wcscmp (_String1="Music", _String2=".") returned 1 [0132.192] wcscmp (_String1="Music", _String2="..") returned 1 [0132.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19a10 [0132.192] wcscpy (in: _Dest=0x3f19a10, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.192] wcscat (in: _Dest=0x3f19a10, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.193] wcscat (in: _Dest=0x3f19a10, _Source="Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0132.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0132.194] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0132.194] wcscmp (_String1="My Documents", _String2=".") returned 1 [0132.194] wcscmp (_String1="My Documents", _String2="..") returned 1 [0132.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5f2b8 [0132.194] wcscpy (in: _Dest=0x3e5f2b8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.194] wcscat (in: _Dest=0x3e5f2b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.194] wcscat (in: _Dest=0x3e5f2b8, _Source="My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0132.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x133c [0132.196] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0132.196] wcscmp (_String1="NetHood", _String2=".") returned 1 [0132.196] wcscmp (_String1="NetHood", _String2="..") returned 1 [0132.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067380 [0132.197] wcscpy (in: _Dest=0x3067380, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.197] wcscat (in: _Dest=0x3067380, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.197] wcscat (in: _Dest=0x3067380, _Source="NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0132.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xe87815c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0x7b6f310, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4c6063a4, ftCreationTime.dwHighDateTime=0x1ca0453, ftLastAccessTime.dwLowDateTime=0x82363a0a, ftLastAccessTime.dwHighDateTime=0x1ca0458, ftLastWriteTime.dwLowDateTime=0x82389c62, ftLastWriteTime.dwHighDateTime=0x1ca0458, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xe862a960, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x30400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG1", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG1", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x4ef6cd7a, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG2", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT.LOG2", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bbcea65, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bbcea65, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bc8d146, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bc8d146, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bface2c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bd71988, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bd71988, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0132.198] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0132.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6baa150, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0132.199] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0132.199] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0132.199] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0132.199] wcscmp (_String1="Pictures", _String2=".") returned 1 [0132.199] wcscmp (_String1="Pictures", _String2="..") returned 1 [0132.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x30672c0 [0132.199] wcscpy (in: _Dest=0x30672c0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.199] wcscat (in: _Dest=0x30672c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.199] wcscat (in: _Dest=0x30672c0, _Source="Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0132.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30672c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0132.200] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0132.200] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0132.200] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0132.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067180 [0132.200] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.200] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.200] wcscat (in: _Dest=0x3067180, _Source="PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0132.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0132.201] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0132.201] wcscmp (_String1="Recent", _String2=".") returned 1 [0132.201] wcscmp (_String1="Recent", _String2="..") returned 1 [0132.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19a48 [0132.201] wcscpy (in: _Dest=0x3f19a48, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.202] wcscat (in: _Dest=0x3f19a48, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.202] wcscat (in: _Dest=0x3f19a48, _Source="Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0132.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1334 [0132.203] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0132.203] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0132.203] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0132.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5f300 [0132.203] wcscpy (in: _Dest=0x3e5f300, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.203] wcscat (in: _Dest=0x3e5f300, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.203] wcscat (in: _Dest=0x3e5f300, _Source="Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0132.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5f300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0132.204] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0132.204] wcscmp (_String1="Searches", _String2=".") returned 1 [0132.205] wcscmp (_String1="Searches", _String2="..") returned 1 [0132.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066500 [0132.205] wcscpy (in: _Dest=0x3066500, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.205] wcscat (in: _Dest=0x3066500, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.205] wcscat (in: _Dest=0x3066500, _Source="Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0132.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0132.206] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0132.206] wcscmp (_String1="SendTo", _String2=".") returned 1 [0132.206] wcscmp (_String1="SendTo", _String2="..") returned 1 [0132.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19a80 [0132.206] wcscpy (in: _Dest=0x3f19a80, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.206] wcscat (in: _Dest=0x3f19a80, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.206] wcscat (in: _Dest=0x3f19a80, _Source="SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0132.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0132.208] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x17612fdc, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x17612fdc, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x17612fdc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0132.208] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0132.208] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0132.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067400 [0132.208] wcscpy (in: _Dest=0x3067400, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.208] wcscat (in: _Dest=0x3067400, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.208] wcscat (in: _Dest=0x3067400, _Source="Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0132.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0132.209] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0132.209] wcscmp (_String1="Templates", _String2=".") returned 1 [0132.209] wcscmp (_String1="Templates", _String2="..") returned 1 [0132.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067140 [0132.209] wcscpy (in: _Dest=0x3067140, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.210] wcscat (in: _Dest=0x3067140, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.210] wcscat (in: _Dest=0x3067140, _Source="Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0132.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0132.359] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0132.359] wcscmp (_String1="Videos", _String2=".") returned 1 [0132.359] wcscmp (_String1="Videos", _String2="..") returned 1 [0132.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19b60 [0132.359] wcscpy (in: _Dest=0x3f19b60, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0132.359] wcscat (in: _Dest=0x3f19b60, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0132.359] wcscat (in: _Dest=0x3f19b60, _Source="Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0132.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0132.997] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0133.678] FindClose (in: hFindFile=0x3e80bb8 | out: hFindFile=0x3e80bb8) returned 1 [0133.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0133.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0133.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 Thread: id = 148 os_tid = 0x4c0 [0131.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199d8 [0131.776] wcscpy (in: _Dest=0x3f199d8, _Source="C:\\Users\\Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0131.776] wcscat (in: _Dest=0x3f199d8, _Source="\\" | out: _Dest="C:\\Users\\Default User\\") returned="C:\\Users\\Default User\\" [0131.776] wcscat (in: _Dest=0x3f199d8, _Source="*" | out: _Dest="C:\\Users\\Default User\\*") returned="C:\\Users\\Default User\\*" [0131.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0131.776] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0131.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0131.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199a0) returned 1 Thread: id = 149 os_tid = 0x410 [0131.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3540 [0131.778] wcscpy (in: _Dest=0x3db3540, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.778] wcscat (in: _Dest=0x3db3540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.778] wcscat (in: _Dest=0x3db3540, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\*") returned="C:\\Users\\EEBsYm5\\*" [0131.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0131.779] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80df8 [0131.779] wcscmp (_String1=".", _String2=".") returned 0 [0131.779] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.779] wcscmp (_String1="..", _String2=".") returned 1 [0131.779] wcscmp (_String1="..", _String2="..") returned 0 [0131.779] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0131.779] wcscmp (_String1="AppData", _String2=".") returned 1 [0131.779] wcscmp (_String1="AppData", _String2="..") returned 1 [0131.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e80ab8 [0131.779] wcscpy (in: _Dest=0x3e80ab8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0131.779] wcscat (in: _Dest=0x3e80ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0131.780] wcscat (in: _Dest=0x3e80ab8, _Source="AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0132.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e80ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0132.323] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.323] wcscmp (_String1="Application Data", _String2=".") returned 1 [0132.323] wcscmp (_String1="Application Data", _String2="..") returned 1 [0132.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61de0 [0132.323] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.323] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.323] wcscat (in: _Dest=0x3e61de0, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0132.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0132.324] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0132.325] wcscmp (_String1="Contacts", _String2=".") returned 1 [0132.325] wcscmp (_String1="Contacts", _String2="..") returned 1 [0132.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066d40 [0132.325] wcscpy (in: _Dest=0x3066d40, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.325] wcscat (in: _Dest=0x3066d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.325] wcscat (in: _Dest=0x3066d40, _Source="Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0132.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0132.326] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0132.327] wcscmp (_String1="Cookies", _String2=".") returned 1 [0132.327] wcscmp (_String1="Cookies", _String2="..") returned 1 [0132.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066b00 [0132.327] wcscpy (in: _Dest=0x3066b00, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.327] wcscat (in: _Dest=0x3066b00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.327] wcscat (in: _Dest=0x3066b00, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0132.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0132.329] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x89aa2fc0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x89aa2fc0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.329] wcscmp (_String1="Desktop", _String2=".") returned 1 [0132.329] wcscmp (_String1="Desktop", _String2="..") returned 1 [0132.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066d80 [0132.329] wcscpy (in: _Dest=0x3066d80, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.329] wcscat (in: _Dest=0x3066d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.329] wcscat (in: _Dest=0x3066d80, _Source="Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0132.331] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ec70700, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ec70700, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.331] wcscmp (_String1="Documents", _String2=".") returned 1 [0132.331] wcscmp (_String1="Documents", _String2="..") returned 1 [0132.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0132.331] wcscpy (in: _Dest=0x3067040, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.331] wcscat (in: _Dest=0x3067040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.331] wcscat (in: _Dest=0x3067040, _Source="Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0132.333] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0132.334] wcscmp (_String1="Downloads", _String2=".") returned 1 [0132.334] wcscmp (_String1="Downloads", _String2="..") returned 1 [0132.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066fc0 [0132.334] wcscpy (in: _Dest=0x3066fc0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.334] wcscat (in: _Dest=0x3066fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.334] wcscat (in: _Dest=0x3066fc0, _Source="Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0132.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0132.335] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.335] wcscmp (_String1="Favorites", _String2=".") returned 1 [0132.335] wcscmp (_String1="Favorites", _String2="..") returned 1 [0132.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f40 [0132.335] wcscpy (in: _Dest=0x3066f40, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.335] wcscat (in: _Dest=0x3066f40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.335] wcscat (in: _Dest=0x3066f40, _Source="Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0132.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0132.337] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0132.337] wcscmp (_String1="Links", _String2=".") returned 1 [0132.337] wcscmp (_String1="Links", _String2="..") returned 1 [0132.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19a48 [0132.337] wcscpy (in: _Dest=0x3f19a48, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.337] wcscat (in: _Dest=0x3f19a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.337] wcscat (in: _Dest=0x3f19a48, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0132.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0132.338] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0132.339] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0132.339] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0132.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33498 [0132.339] wcscpy (in: _Dest=0x3e33498, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.339] wcscat (in: _Dest=0x3e33498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.339] wcscat (in: _Dest=0x3e33498, _Source="Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0132.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e33498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0132.340] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ed08c80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ed08c80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0132.340] wcscmp (_String1="Music", _String2=".") returned 1 [0132.340] wcscmp (_String1="Music", _String2="..") returned 1 [0132.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19ab8 [0132.341] wcscpy (in: _Dest=0x3f19ab8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.341] wcscat (in: _Dest=0x3f19ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.341] wcscat (in: _Dest=0x3f19ab8, _Source="Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0132.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0132.342] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0132.342] wcscmp (_String1="My Documents", _String2=".") returned 1 [0132.342] wcscmp (_String1="My Documents", _String2="..") returned 1 [0132.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33378 [0132.342] wcscpy (in: _Dest=0x3e33378, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.342] wcscat (in: _Dest=0x3e33378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.342] wcscat (in: _Dest=0x3e33378, _Source="My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0132.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e33378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0132.344] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0132.344] wcscmp (_String1="NetHood", _String2=".") returned 1 [0132.344] wcscmp (_String1="NetHood", _String2="..") returned 1 [0132.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066f80 [0132.344] wcscpy (in: _Dest=0x3066f80, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.344] wcscat (in: _Dest=0x3066f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.344] wcscat (in: _Dest=0x3066f80, _Source="NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0132.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3066f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4a55c980, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x4a55c980, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90fa030, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90fa030, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x4a5106c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0132.346] wcscmp (_String1="ntuser.dat.LOG1", _String2=".") returned 1 [0132.346] wcscmp (_String1="ntuser.dat.LOG1", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9120190, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0132.346] wcscmp (_String1="ntuser.dat.LOG2", _String2=".") returned 1 [0132.346] wcscmp (_String1="ntuser.dat.LOG2", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f6e170, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0132.346] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e4c770, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0132.346] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0132.346] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0132.346] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90144780, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90144780, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0132.347] wcscmp (_String1="Pictures", _String2=".") returned 1 [0132.347] wcscmp (_String1="Pictures", _String2="..") returned 1 [0132.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067000 [0132.347] wcscpy (in: _Dest=0x3067000, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.347] wcscat (in: _Dest=0x3067000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.347] wcscat (in: _Dest=0x3067000, _Source="Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0132.348] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0132.348] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0132.348] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0132.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2fc8688 [0132.349] wcscpy (in: _Dest=0x2fc8688, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.349] wcscat (in: _Dest=0x2fc8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.349] wcscat (in: _Dest=0x2fc8688, _Source="PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0132.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fc8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0132.350] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0132.350] wcscmp (_String1="Recent", _String2=".") returned 1 [0132.350] wcscmp (_String1="Recent", _String2="..") returned 1 [0132.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19af0 [0132.350] wcscpy (in: _Dest=0x3f19af0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.350] wcscat (in: _Dest=0x3f19af0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.350] wcscat (in: _Dest=0x3f19af0, _Source="Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0132.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0132.352] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0132.352] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0132.352] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0132.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e333c0 [0132.352] wcscpy (in: _Dest=0x3e333c0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.352] wcscat (in: _Dest=0x3e333c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.352] wcscat (in: _Dest=0x3e333c0, _Source="Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0132.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e333c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0132.354] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0132.354] wcscmp (_String1="Searches", _String2=".") returned 1 [0132.354] wcscmp (_String1="Searches", _String2="..") returned 1 [0132.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8708 [0132.354] wcscpy (in: _Dest=0x2fc8708, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.354] wcscat (in: _Dest=0x2fc8708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.354] wcscat (in: _Dest=0x2fc8708, _Source="Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0132.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fc8708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0132.355] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0132.355] wcscmp (_String1="SendTo", _String2=".") returned 1 [0132.355] wcscmp (_String1="SendTo", _String2="..") returned 1 [0132.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19b28 [0132.355] wcscpy (in: _Dest=0x3f19b28, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.355] wcscat (in: _Dest=0x3f19b28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.355] wcscat (in: _Dest=0x3f19b28, _Source="SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0132.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0132.357] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0132.357] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0132.357] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0132.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8b08 [0132.358] wcscpy (in: _Dest=0x2fc8b08, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.358] wcscat (in: _Dest=0x2fc8b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.358] wcscat (in: _Dest=0x2fc8b08, _Source="Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0132.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fc8b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0132.520] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0132.520] wcscmp (_String1="Templates", _String2=".") returned 1 [0132.520] wcscmp (_String1="Templates", _String2="..") returned 1 [0132.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067300 [0132.521] wcscpy (in: _Dest=0x3067300, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0132.521] wcscat (in: _Dest=0x3067300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0132.521] wcscat (in: _Dest=0x3067300, _Source="Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0135.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3067300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0135.488] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x900860a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x900860a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0135.489] wcscmp (_String1="Videos", _String2=".") returned 1 [0135.489] wcscmp (_String1="Videos", _String2="..") returned 1 [0135.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199a0 [0135.489] wcscpy (in: _Dest=0x3f199a0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0135.489] wcscat (in: _Dest=0x3f199a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0135.489] wcscat (in: _Dest=0x3f199a0, _Source="Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0135.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f199a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0135.490] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x900860a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x900860a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0135.490] FindClose (in: hFindFile=0x3e80df8 | out: hFindFile=0x3e80df8) returned 1 [0135.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0135.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0135.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 Thread: id = 150 os_tid = 0x704 [0131.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3780 [0131.780] wcscpy (in: _Dest=0x3db3780, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.780] wcscat (in: _Dest=0x3db3780, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.780] wcscat (in: _Dest=0x3db3780, _Source="*" | out: _Dest="C:\\Users\\Public\\*") returned="C:\\Users\\Public\\*" [0131.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0131.780] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0131.781] wcscmp (_String1=".", _String2=".") returned 0 [0131.781] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.781] wcscmp (_String1="..", _String2=".") returned 1 [0131.781] wcscmp (_String1="..", _String2="..") returned 0 [0131.781] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0131.781] wcscmp (_String1="Desktop", _String2=".") returned 1 [0131.781] wcscmp (_String1="Desktop", _String2="..") returned 1 [0131.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199a0 [0131.781] wcscpy (in: _Dest=0x3f199a0, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0131.781] wcscat (in: _Dest=0x3f199a0, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0131.781] wcscat (in: _Dest=0x3f199a0, _Source="Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0132.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f199a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0132.430] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.431] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.431] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.431] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.431] wcscmp (_String1="Documents", _String2=".") returned 1 [0132.431] wcscmp (_String1="Documents", _String2="..") returned 1 [0132.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f100 [0132.431] wcscpy (in: _Dest=0x3f1f100, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.431] wcscat (in: _Dest=0x3f1f100, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.431] wcscat (in: _Dest=0x3f1f100, _Source="Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0132.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0132.432] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0132.432] wcscmp (_String1="Downloads", _String2=".") returned 1 [0132.432] wcscmp (_String1="Downloads", _String2="..") returned 1 [0132.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f140 [0132.432] wcscpy (in: _Dest=0x3f1f140, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.432] wcscat (in: _Dest=0x3f1f140, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.433] wcscat (in: _Dest=0x3f1f140, _Source="Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0132.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0132.434] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.434] wcscmp (_String1="Favorites", _String2=".") returned 1 [0132.434] wcscmp (_String1="Favorites", _String2="..") returned 1 [0132.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f180 [0132.434] wcscpy (in: _Dest=0x3f1f180, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.434] wcscat (in: _Dest=0x3f1f180, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.434] wcscat (in: _Dest=0x3f1f180, _Source="Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0132.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0132.436] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0132.436] wcscmp (_String1="Libraries", _String2=".") returned 1 [0132.436] wcscmp (_String1="Libraries", _String2="..") returned 1 [0132.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f1c0 [0132.436] wcscpy (in: _Dest=0x3f1f1c0, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.436] wcscat (in: _Dest=0x3f1f1c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.436] wcscat (in: _Dest=0x3f1f1c0, _Source="Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0132.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0132.437] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0132.437] wcscmp (_String1="Music", _String2=".") returned 1 [0132.437] wcscmp (_String1="Music", _String2="..") returned 1 [0132.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19b28 [0132.437] wcscpy (in: _Dest=0x3f19b28, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.437] wcscat (in: _Dest=0x3f19b28, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.438] wcscat (in: _Dest=0x3f19b28, _Source="Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0132.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0132.439] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0132.439] wcscmp (_String1="Pictures", _String2=".") returned 1 [0132.439] wcscmp (_String1="Pictures", _String2="..") returned 1 [0132.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f200 [0132.439] wcscpy (in: _Dest=0x3f1f200, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.439] wcscat (in: _Dest=0x3f1f200, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.439] wcscat (in: _Dest=0x3f1f200, _Source="Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0132.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0132.441] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0132.441] wcscmp (_String1="Recorded TV", _String2=".") returned 1 [0132.441] wcscmp (_String1="Recorded TV", _String2="..") returned 1 [0132.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f240 [0132.441] wcscpy (in: _Dest=0x3f1f240, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.441] wcscat (in: _Dest=0x3f1f240, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.441] wcscat (in: _Dest=0x3f1f240, _Source="Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0132.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0132.442] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0132.442] wcscmp (_String1="Videos", _String2=".") returned 1 [0132.442] wcscmp (_String1="Videos", _String2="..") returned 1 [0132.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19af0 [0132.443] wcscpy (in: _Dest=0x3f19af0, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0132.443] wcscat (in: _Dest=0x3f19af0, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0132.443] wcscat (in: _Dest=0x3f19af0, _Source="Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0132.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f19af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0132.445] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0132.445] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0132.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0132.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3780) returned 1 [0132.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 Thread: id = 151 os_tid = 0x180 [0131.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7f40 [0131.791] wcscpy (in: _Dest=0x3ef7f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0131.791] wcscat (in: _Dest=0x3ef7f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0131.791] wcscat (in: _Dest=0x3ef7f40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\*" [0131.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0131.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0131.792] wcscmp (_String1=".", _String2=".") returned 0 [0131.792] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.212] wcscmp (_String1="..", _String2=".") returned 1 [0132.212] wcscmp (_String1="..", _String2="..") returned 0 [0132.212] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0132.212] wcscmp (_String1="Benioku.htm", _String2=".") returned 1 [0132.212] wcscmp (_String1="Benioku.htm", _String2="..") returned 1 [0132.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c740 [0132.212] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0132.212] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0132.212] wcscat (in: _Dest=0x3d8c740, _Source="Benioku.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" [0133.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0133.139] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0133.139] wcscmp (_String1="Berime.htm", _String2=".") returned 1 [0133.139] wcscmp (_String1="Berime.htm", _String2="..") returned 1 [0133.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c670 [0133.139] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.139] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.139] wcscat (in: _Dest=0x3d8c670, _Source="Berime.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" [0133.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0133.141] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0133.141] wcscmp (_String1="Esl", _String2=".") returned 1 [0133.141] wcscmp (_String1="Esl", _String2="..") returned 1 [0133.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7f98 [0133.141] wcscpy (in: _Dest=0x3ef7f98, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.141] wcscat (in: _Dest=0x3ef7f98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.141] wcscat (in: _Dest=0x3ef7f98, _Source="Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0133.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0133.143] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0133.143] wcscmp (_String1="IrakHau.htm", _String2=".") returned 1 [0133.143] wcscmp (_String1="IrakHau.htm", _String2="..") returned 1 [0133.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e5b8 [0133.143] wcscpy (in: _Dest=0x3d8e5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.143] wcscat (in: _Dest=0x3d8e5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.143] wcscat (in: _Dest=0x3d8e5b8, _Source="IrakHau.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" [0133.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0133.144] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0133.144] wcscmp (_String1="Leame.htm", _String2=".") returned 1 [0133.144] wcscmp (_String1="Leame.htm", _String2="..") returned 1 [0133.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e550 [0133.145] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.145] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.145] wcscat (in: _Dest=0x3d8e550, _Source="Leame.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" [0133.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0133.146] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0133.146] wcscmp (_String1="LeesMij.htm", _String2=".") returned 1 [0133.146] wcscmp (_String1="LeesMij.htm", _String2="..") returned 1 [0133.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e418 [0133.146] wcscpy (in: _Dest=0x3d8e418, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.147] wcscat (in: _Dest=0x3d8e418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.147] wcscat (in: _Dest=0x3d8e418, _Source="LeesMij.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" [0133.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0133.148] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0133.148] wcscmp (_String1="Leggimi.htm", _String2=".") returned 1 [0133.148] wcscmp (_String1="Leggimi.htm", _String2="..") returned 1 [0133.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e3b0 [0133.148] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.148] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.148] wcscat (in: _Dest=0x3d8e3b0, _Source="Leggimi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" [0133.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0133.150] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0133.150] wcscmp (_String1="LeiaMe.htm", _String2=".") returned 1 [0133.150] wcscmp (_String1="LeiaMe.htm", _String2="..") returned 1 [0133.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e348 [0133.150] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.150] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.151] wcscat (in: _Dest=0x3d8e348, _Source="LeiaMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" [0133.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0133.152] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0133.152] wcscmp (_String1="Liesmich.htm", _String2=".") returned 1 [0133.152] wcscmp (_String1="Liesmich.htm", _String2="..") returned 1 [0133.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0133.152] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.152] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.152] wcscat (in: _Dest=0x3d8e2e0, _Source="Liesmich.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" [0133.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0133.154] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0133.154] wcscmp (_String1="Lisezmoi.htm", _String2=".") returned 1 [0133.154] wcscmp (_String1="Lisezmoi.htm", _String2="..") returned 1 [0133.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0133.154] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.154] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.154] wcscat (in: _Dest=0x3d8e278, _Source="Lisezmoi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0133.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0133.156] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0133.156] wcscmp (_String1="Llegiu-me.htm", _String2=".") returned 1 [0133.157] wcscmp (_String1="Llegiu-me.htm", _String2="..") returned 1 [0133.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b740 [0133.157] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.157] wcscat (in: _Dest=0x3e0b740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.157] wcscat (in: _Dest=0x3e0b740, _Source="Llegiu-me.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0133.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0133.158] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0133.158] wcscmp (_String1="LueMinut.htm", _String2=".") returned 1 [0133.158] wcscmp (_String1="LueMinut.htm", _String2="..") returned 1 [0133.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e210 [0133.159] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.159] wcscat (in: _Dest=0x3d8e210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.159] wcscat (in: _Dest=0x3d8e210, _Source="LueMinut.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" [0133.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0133.160] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0133.161] wcscmp (_String1="Reader", _String2=".") returned 1 [0133.161] wcscmp (_String1="Reader", _String2="..") returned 1 [0133.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0133.161] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.161] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.161] wcscat (in: _Dest=0x2fe6848, _Source="Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0133.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0133.163] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0133.163] wcscmp (_String1="ReadMe.htm", _String2=".") returned 1 [0133.163] wcscmp (_String1="ReadMe.htm", _String2="..") returned 1 [0133.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e1a8 [0133.163] wcscpy (in: _Dest=0x3d8e1a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.163] wcscat (in: _Dest=0x3d8e1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.163] wcscat (in: _Dest=0x3d8e1a8, _Source="ReadMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" [0133.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1334 [0133.165] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0133.165] wcscmp (_String1="ReadMeCS.htm", _String2=".") returned 1 [0133.165] wcscmp (_String1="ReadMeCS.htm", _String2="..") returned 1 [0133.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e140 [0133.165] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.165] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.165] wcscat (in: _Dest=0x3d8e140, _Source="ReadMeCS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0133.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0133.166] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0133.167] wcscmp (_String1="ReadMeCT.htm", _String2=".") returned 1 [0133.167] wcscmp (_String1="ReadMeCT.htm", _String2="..") returned 1 [0133.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e0d8 [0133.167] wcscpy (in: _Dest=0x3d8e0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.167] wcscat (in: _Dest=0x3d8e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.167] wcscat (in: _Dest=0x3d8e0d8, _Source="ReadMeCT.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0133.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344 [0133.168] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0133.168] wcscmp (_String1="ReadMeCZE.htm", _String2=".") returned 1 [0133.168] wcscmp (_String1="ReadMeCZE.htm", _String2="..") returned 1 [0133.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3519c0 [0133.169] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.169] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.169] wcscat (in: _Dest=0x3519c0, _Source="ReadMeCZE.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0133.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3519c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x133c [0133.170] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0133.170] wcscmp (_String1="ReadMeHRV.htm", _String2=".") returned 1 [0133.170] wcscmp (_String1="ReadMeHRV.htm", _String2="..") returned 1 [0133.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e33fc0 [0133.170] wcscpy (in: _Dest=0x3e33fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.170] wcscat (in: _Dest=0x3e33fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.170] wcscat (in: _Dest=0x3e33fc0, _Source="ReadMeHRV.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0133.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e33fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0133.172] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0133.172] wcscmp (_String1="ReadMeHUN.htm", _String2=".") returned 1 [0133.172] wcscmp (_String1="ReadMeHUN.htm", _String2="..") returned 1 [0133.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f28ed0 [0133.172] wcscpy (in: _Dest=0x3f28ed0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.172] wcscat (in: _Dest=0x3f28ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.172] wcscat (in: _Dest=0x3f28ed0, _Source="ReadMeHUN.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0133.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f28ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1354 [0133.844] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0133.844] wcscmp (_String1="ReadMeJ.htm", _String2=".") returned 1 [0133.844] wcscmp (_String1="ReadMeJ.htm", _String2="..") returned 1 [0133.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e480 [0133.844] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0133.845] wcscat (in: _Dest=0x3d8e480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0133.845] wcscat (in: _Dest=0x3d8e480, _Source="ReadMeJ.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0134.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0134.537] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0134.537] wcscmp (_String1="ReadMeK.htm", _String2=".") returned 1 [0134.537] wcscmp (_String1="ReadMeK.htm", _String2="..") returned 1 [0134.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c4d0 [0134.537] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.538] wcscat (in: _Dest=0x3d8c4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.538] wcscat (in: _Dest=0x3d8c4d0, _Source="ReadMeK.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" [0134.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0134.539] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0134.539] wcscmp (_String1="ReadMePOL.htm", _String2=".") returned 1 [0134.539] wcscmp (_String1="ReadMePOL.htm", _String2="..") returned 1 [0134.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0134.539] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.539] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.539] wcscat (in: _Dest=0x3f293a0, _Source="ReadMePOL.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0134.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0134.540] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0134.540] wcscmp (_String1="ReadMeRUM.htm", _String2=".") returned 1 [0134.540] wcscmp (_String1="ReadMeRUM.htm", _String2="..") returned 1 [0134.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29410 [0134.540] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.540] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.540] wcscat (in: _Dest=0x3f29410, _Source="ReadMeRUM.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0134.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0134.541] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0134.541] wcscmp (_String1="ReadMeRUS.htm", _String2=".") returned 1 [0134.541] wcscmp (_String1="ReadMeRUS.htm", _String2="..") returned 1 [0134.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29480 [0134.542] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.542] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.542] wcscat (in: _Dest=0x3f29480, _Source="ReadMeRUS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0134.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0134.543] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0134.543] wcscmp (_String1="ReadMeSKY.htm", _String2=".") returned 1 [0134.543] wcscmp (_String1="ReadMeSKY.htm", _String2="..") returned 1 [0134.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f294f0 [0134.543] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.543] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.543] wcscat (in: _Dest=0x3f294f0, _Source="ReadMeSKY.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0134.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0134.545] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0134.545] wcscmp (_String1="ReadMeUKR.htm", _String2=".") returned 1 [0134.545] wcscmp (_String1="ReadMeUKR.htm", _String2="..") returned 1 [0134.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29560 [0134.545] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.545] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.545] wcscat (in: _Dest=0x3f29560, _Source="ReadMeUKR.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0134.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0134.547] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0134.547] wcscmp (_String1="Resource", _String2=".") returned 1 [0134.547] wcscmp (_String1="Resource", _String2="..") returned 1 [0134.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1ce8 [0134.547] wcscpy (in: _Dest=0x2fe1ce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.547] wcscat (in: _Dest=0x2fe1ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.548] wcscat (in: _Dest=0x2fe1ce8, _Source="Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0134.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0134.549] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0134.549] wcscmp (_String1="Setup Files", _String2=".") returned 1 [0134.549] wcscmp (_String1="Setup Files", _String2="..") returned 1 [0134.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bf20 [0134.549] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.549] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.549] wcscat (in: _Dest=0x3d8bf20, _Source="Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0134.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0134.551] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0134.551] wcscmp (_String1="Vigtigt.htm", _String2=".") returned 1 [0134.551] wcscmp (_String1="Vigtigt.htm", _String2="..") returned 1 [0134.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8be50 [0134.551] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.552] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.552] wcscat (in: _Dest=0x3d8be50, _Source="Vigtigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" [0134.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0134.553] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0134.553] wcscmp (_String1="Viktig.htm", _String2=".") returned 1 [0134.553] wcscmp (_String1="Viktig.htm", _String2="..") returned 1 [0134.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d238 [0134.553] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.554] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.554] wcscat (in: _Dest=0x3d8d238, _Source="Viktig.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" [0134.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0134.555] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0134.555] wcscmp (_String1="Viktigt.htm", _String2=".") returned 1 [0134.555] wcscmp (_String1="Viktigt.htm", _String2="..") returned 1 [0134.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c398 [0134.555] wcscpy (in: _Dest=0x3d8c398, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0134.556] wcscat (in: _Dest=0x3d8c398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0134.556] wcscat (in: _Dest=0x3d8c398, _Source="Viktigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" [0134.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0134.558] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0135.311] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0138.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0138.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7f40) returned 1 [0138.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e619d0) returned 1 Thread: id = 152 os_tid = 0x7e8 [0131.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7548 [0131.793] wcscpy (in: _Dest=0x3ef7548, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0131.793] wcscat (in: _Dest=0x3ef7548, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0131.793] wcscat (in: _Dest=0x3ef7548, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\*") returned="C:\\Program Files\\Common Files\\Adobe\\*" [0131.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0131.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0131.794] wcscmp (_String1=".", _String2=".") returned 0 [0131.794] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.794] wcscmp (_String1="..", _String2=".") returned 1 [0131.794] wcscmp (_String1="..", _String2="..") returned 0 [0131.794] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0131.794] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0131.794] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0131.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe64e8 [0131.795] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0131.795] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0131.795] wcscat (in: _Dest=0x2fe64e8, _Source="Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0135.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0135.472] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0135.472] wcscmp (_String1="ARM", _String2=".") returned 1 [0135.472] wcscmp (_String1="ARM", _String2="..") returned 1 [0135.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e03610 [0135.472] wcscpy (in: _Dest=0x3e03610, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0135.472] wcscat (in: _Dest=0x3e03610, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0135.472] wcscat (in: _Dest=0x3e03610, _Source="ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0135.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e03610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0135.473] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0135.473] wcscmp (_String1="HelpCfg", _String2=".") returned 1 [0135.473] wcscmp (_String1="HelpCfg", _String2="..") returned 1 [0135.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6de8 [0135.474] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0135.474] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0135.474] wcscat (in: _Dest=0x2fe6de8, _Source="HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0135.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0135.475] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0135.475] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0135.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0135.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7548) returned 1 [0135.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61a70) returned 1 Thread: id = 153 os_tid = 0x41c [0131.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5648 [0131.795] wcscpy (in: _Dest=0x2fe5648, _Source="C:\\Program Files\\Common Files\\DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0131.795] wcscat (in: _Dest=0x2fe5648, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\" [0131.795] wcscat (in: _Dest=0x2fe5648, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\*") returned="C:\\Program Files\\Common Files\\DESIGNER\\*" [0131.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0131.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0133.973] wcscmp (_String1=".", _String2=".") returned 0 [0133.973] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.973] wcscmp (_String1="..", _String2=".") returned 1 [0133.973] wcscmp (_String1="..", _String2="..") returned 0 [0133.973] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0133.973] wcscmp (_String1="MSADDNDR.DLL", _String2=".") returned 1 [0133.973] wcscmp (_String1="MSADDNDR.DLL", _String2="..") returned 1 [0133.973] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0133.973] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0133.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0133.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5648) returned 1 [0133.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef76a8) returned 1 Thread: id = 154 os_tid = 0xb38 [0131.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7ee8 [0131.799] wcscpy (in: _Dest=0x3ef7ee8, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0131.799] wcscat (in: _Dest=0x3ef7ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0131.799] wcscat (in: _Dest=0x3ef7ee8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\*") returned="C:\\Program Files\\Common Files\\Java\\*" [0131.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0131.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0133.176] wcscmp (_String1=".", _String2=".") returned 0 [0133.176] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.176] wcscmp (_String1="..", _String2=".") returned 1 [0133.176] wcscmp (_String1="..", _String2="..") returned 0 [0133.176] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0133.176] wcscmp (_String1="Java Update", _String2=".") returned 1 [0133.176] wcscmp (_String1="Java Update", _String2="..") returned 1 [0133.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de68 [0133.176] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0133.176] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0133.176] wcscat (in: _Dest=0x3d8de68, _Source="Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0134.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0134.516] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0134.516] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0134.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0134.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ee8) returned 1 [0134.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ac0) returned 1 Thread: id = 155 os_tid = 0xb18 [0131.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6548 [0131.800] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0131.800] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0131.800] wcscat (in: _Dest=0x2fe6548, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Services\\*") returned="C:\\Program Files\\Common Files\\Services\\*" [0131.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0131.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0133.972] wcscmp (_String1=".", _String2=".") returned 0 [0133.972] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.972] wcscmp (_String1="..", _String2=".") returned 1 [0133.972] wcscmp (_String1="..", _String2="..") returned 0 [0133.972] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0133.972] wcscmp (_String1="verisign.bmp", _String2=".") returned 1 [0133.972] wcscmp (_String1="verisign.bmp", _String2="..") returned 1 [0133.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29250 [0133.972] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0133.972] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0133.972] wcscat (in: _Dest=0x3f29250, _Source="verisign.bmp" | out: _Dest="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned="C:\\Program Files\\Common Files\\Services\\verisign.bmp" [0135.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0135.505] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0135.505] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0135.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0135.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0135.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ff0) returned 1 Thread: id = 156 os_tid = 0xb14 [0131.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d920 [0131.801] wcscpy (in: _Dest=0x3d8d920, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0131.802] wcscat (in: _Dest=0x3d8d920, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0131.802] wcscat (in: _Dest=0x3d8d920, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\*" [0131.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0131.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0134.743] wcscmp (_String1=".", _String2=".") returned 0 [0134.743] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.743] wcscmp (_String1="..", _String2=".") returned 1 [0134.743] wcscmp (_String1="..", _String2="..") returned 0 [0134.743] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.743] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0134.744] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0134.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d148 [0134.744] wcscpy (in: _Dest=0x3f1d148, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0134.744] wcscat (in: _Dest=0x3f1d148, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0134.744] wcscat (in: _Dest=0x3f1d148, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0141.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0141.277] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0141.277] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0141.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0141.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0141.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 157 os_tid = 0xb10 [0131.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61c00 [0131.802] wcscpy (in: _Dest=0x3e61c00, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0131.802] wcscat (in: _Dest=0x3e61c00, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0131.803] wcscat (in: _Dest=0x3e61c00, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\*") returned="C:\\Program Files\\Google\\Chrome\\*" [0131.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0131.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0131.804] wcscmp (_String1=".", _String2=".") returned 0 [0131.804] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.804] wcscmp (_String1="..", _String2=".") returned 1 [0131.804] wcscmp (_String1="..", _String2="..") returned 0 [0131.804] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0131.804] wcscmp (_String1="Application", _String2=".") returned 1 [0131.804] wcscmp (_String1="Application", _String2="..") returned 1 [0131.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3c08 [0131.804] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0131.804] wcscat (in: _Dest=0x2fe3c08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0131.804] wcscat (in: _Dest=0x2fe3c08, _Source="Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0133.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0133.043] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0133.043] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0133.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0133.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61c00) returned 1 [0133.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 Thread: id = 158 os_tid = 0xb0c [0131.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7440 [0131.805] wcscpy (in: _Dest=0x3ef7440, _Source="C:\\Program Files\\Google\\CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0131.805] wcscat (in: _Dest=0x3ef7440, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\") returned="C:\\Program Files\\Google\\CrashReports\\" [0131.805] wcscat (in: _Dest=0x3ef7440, _Source="*" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\*") returned="C:\\Program Files\\Google\\CrashReports\\*" [0131.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0131.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\CrashReports\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0131.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7440) returned 1 [0131.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7f98) returned 1 Thread: id = 159 os_tid = 0xb58 [0131.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5e928 [0131.808] wcscpy (in: _Dest=0x3e5e928, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.808] wcscat (in: _Dest=0x3e5e928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.808] wcscat (in: _Dest=0x3e5e928, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\*") returned="C:\\Program Files\\Java\\jre7\\*" [0131.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0131.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80c38 [0131.808] wcscmp (_String1=".", _String2=".") returned 0 [0131.808] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.809] wcscmp (_String1="..", _String2=".") returned 1 [0131.809] wcscmp (_String1="..", _String2="..") returned 0 [0131.809] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0131.809] wcscmp (_String1="bin", _String2=".") returned 1 [0131.809] wcscmp (_String1="bin", _String2="..") returned 1 [0131.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5e8e0 [0131.809] wcscpy (in: _Dest=0x3e5e8e0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0131.809] wcscat (in: _Dest=0x3e5e8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0131.809] wcscat (in: _Dest=0x3e5e8e0, _Source="bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0133.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5e8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0133.045] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0133.045] wcscmp (_String1="COPYRIGHT", _String2=".") returned 1 [0133.045] wcscmp (_String1="COPYRIGHT", _String2="..") returned 1 [0133.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e03458 [0133.045] wcscpy (in: _Dest=0x3e03458, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.045] wcscat (in: _Dest=0x3e03458, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.046] wcscat (in: _Dest=0x3e03458, _Source="COPYRIGHT" | out: _Dest="C:\\Program Files\\Java\\jre7\\COPYRIGHT") returned="C:\\Program Files\\Java\\jre7\\COPYRIGHT" [0133.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e03458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0133.047] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0133.047] wcscmp (_String1="lib", _String2=".") returned 1 [0133.047] wcscmp (_String1="lib", _String2="..") returned 1 [0133.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5ea00 [0133.048] wcscpy (in: _Dest=0x3e5ea00, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.048] wcscat (in: _Dest=0x3e5ea00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.048] wcscat (in: _Dest=0x3e5ea00, _Source="lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0133.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5ea00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0133.050] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0133.050] wcscmp (_String1="LICENSE", _String2=".") returned 1 [0133.050] wcscmp (_String1="LICENSE", _String2="..") returned 1 [0133.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61c00 [0133.050] wcscpy (in: _Dest=0x3e61c00, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.050] wcscat (in: _Dest=0x3e61c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.050] wcscat (in: _Dest=0x3e61c00, _Source="LICENSE" | out: _Dest="C:\\Program Files\\Java\\jre7\\LICENSE") returned="C:\\Program Files\\Java\\jre7\\LICENSE" [0133.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e61c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0133.051] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0133.051] wcscmp (_String1="README.txt", _String2=".") returned 1 [0133.051] wcscmp (_String1="README.txt", _String2="..") returned 1 [0133.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e034b0 [0133.051] wcscpy (in: _Dest=0x3e034b0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.052] wcscat (in: _Dest=0x3e034b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.052] wcscat (in: _Dest=0x3e034b0, _Source="README.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\README.txt") returned="C:\\Program Files\\Java\\jre7\\README.txt" [0133.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e034b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0133.053] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0133.053] wcscmp (_String1="release", _String2=".") returned 1 [0133.053] wcscmp (_String1="release", _String2="..") returned 1 [0133.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62600 [0133.053] wcscpy (in: _Dest=0x3e62600, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.053] wcscat (in: _Dest=0x3e62600, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.053] wcscat (in: _Dest=0x3e62600, _Source="release" | out: _Dest="C:\\Program Files\\Java\\jre7\\release") returned="C:\\Program Files\\Java\\jre7\\release" [0133.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e62600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0133.055] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0133.055] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2=".") returned 1 [0133.055] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2="..") returned 1 [0133.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a1d0 [0133.055] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.055] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.055] wcscat (in: _Dest=0x3d5a1d0, _Source="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0133.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0133.057] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0133.057] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2=".") returned 1 [0133.057] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2="..") returned 1 [0133.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1a9d0 [0133.057] wcscpy (in: _Dest=0x3f1a9d0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.057] wcscat (in: _Dest=0x3f1a9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.057] wcscat (in: _Dest=0x3f1a9d0, _Source="THIRDPARTYLICENSEREADME.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0133.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1a9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0133.059] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0133.059] wcscmp (_String1="Welcome.html", _String2=".") returned 1 [0133.059] wcscmp (_String1="Welcome.html", _String2="..") returned 1 [0133.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e03610 [0133.060] wcscpy (in: _Dest=0x3e03610, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0133.060] wcscat (in: _Dest=0x3e03610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0133.060] wcscat (in: _Dest=0x3e03610, _Source="Welcome.html" | out: _Dest="C:\\Program Files\\Java\\jre7\\Welcome.html") returned="C:\\Program Files\\Java\\jre7\\Welcome.html" [0133.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e03610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0133.061] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0133.061] FindClose (in: hFindFile=0x3e80c38 | out: hFindFile=0x3e80c38) returned 1 [0133.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0133.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e928) returned 1 [0133.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa10) returned 1 Thread: id = 160 os_tid = 0xb6c [0131.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e35438 [0131.810] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0131.810] wcscat (in: _Dest=0x3e35438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0131.810] wcscat (in: _Dest=0x3e35438, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*" [0131.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12248 [0131.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d38 [0131.810] wcscmp (_String1=".", _String2=".") returned 0 [0131.810] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.810] wcscmp (_String1="..", _String2=".") returned 1 [0131.810] wcscmp (_String1="..", _String2="..") returned 0 [0131.810] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0131.811] wcscmp (_String1="10", _String2=".") returned 1 [0131.811] wcscmp (_String1="10", _String2="..") returned 1 [0131.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da62f0 [0131.811] wcscpy (in: _Dest=0x3da62f0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0131.811] wcscat (in: _Dest=0x3da62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0131.811] wcscat (in: _Dest=0x3da62f0, _Source="10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0133.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0133.125] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0133.125] FindClose (in: hFindFile=0x3e80d38 | out: hFindFile=0x3e80d38) returned 1 [0133.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12248) returned 1 [0133.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0133.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 Thread: id = 161 os_tid = 0xb68 [0131.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0131.812] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0131.812] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0131.812] wcscat (in: _Dest=0x2fe0c68, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\*" [0131.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f124b0 [0131.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0133.177] wcscmp (_String1=".", _String2=".") returned 0 [0133.177] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.177] wcscmp (_String1="..", _String2=".") returned 1 [0133.177] wcscmp (_String1="..", _String2="..") returned 0 [0133.177] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0133.177] wcscmp (_String1="PUB60COR", _String2=".") returned 1 [0133.177] wcscmp (_String1="PUB60COR", _String2="..") returned 1 [0133.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f28f40 [0133.177] wcscpy (in: _Dest=0x3f28f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0133.177] wcscat (in: _Dest=0x3f28f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0133.177] wcscat (in: _Dest=0x3f28f40, _Source="PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0134.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f28f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1358 [0134.519] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0134.519] wcscmp (_String1="Publisher", _String2=".") returned 1 [0134.519] wcscmp (_String1="Publisher", _String2="..") returned 1 [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29330 [0134.519] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0134.519] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0134.519] wcscat (in: _Dest=0x3f29330, _Source="Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0134.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0134.521] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0134.521] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0134.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f124b0) returned 1 [0134.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0134.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1ce8) returned 1 Thread: id = 162 os_tid = 0xb60 [0131.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1a958 [0131.813] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0131.813] wcscat (in: _Dest=0x3f1a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0131.813] wcscat (in: _Dest=0x3f1a958, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*" [0131.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0131.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0133.931] wcscmp (_String1=".", _String2=".") returned 0 [0133.931] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.213] wcscmp (_String1="..", _String2=".") returned 1 [0137.213] wcscmp (_String1="..", _String2="..") returned 0 [0137.213] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52307700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52307700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="ADJACE~1.THM")) returned 1 [0137.213] wcscmp (_String1="Adjacency.thmx", _String2=".") returned 1 [0137.213] wcscmp (_String1="Adjacency.thmx", _String2="..") returned 1 [0137.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0137.213] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0137.213] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0137.213] wcscat (in: _Dest=0x66db628, _Source="Adjacency.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" [0139.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0139.259] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="ANGLES~1.THM")) returned 1 [0139.259] wcscmp (_String1="Angles.thmx", _String2=".") returned 1 [0139.259] wcscmp (_String1="Angles.thmx", _String2="..") returned 1 [0139.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc3a8 [0139.259] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.259] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.259] wcscat (in: _Dest=0x66dc3a8, _Source="Angles.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" [0139.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0139.261] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3ee000, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef3ee000, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="APEX~1.THM")) returned 1 [0139.261] wcscmp (_String1="Apex.thmx", _String2=".") returned 1 [0139.261] wcscmp (_String1="Apex.thmx", _String2="..") returned 1 [0139.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e478 [0139.261] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.261] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.261] wcscat (in: _Dest=0x36e478, _Source="Apex.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" [0139.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0139.263] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="APOTHE~1.THM")) returned 1 [0139.263] wcscmp (_String1="Apothecary.thmx", _String2=".") returned 1 [0139.263] wcscmp (_String1="Apothecary.thmx", _String2="..") returned 1 [0139.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d370 [0139.263] wcscpy (in: _Dest=0x32d370, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.263] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.263] wcscat (in: _Dest=0x32d370, _Source="Apothecary.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" [0139.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0139.265] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d26700, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2d26700, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="ASPECT~1.THM")) returned 1 [0139.265] wcscmp (_String1="Aspect.thmx", _String2=".") returned 1 [0139.265] wcscmp (_String1="Aspect.thmx", _String2="..") returned 1 [0139.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc438 [0139.265] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.265] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.265] wcscat (in: _Dest=0x66dc438, _Source="Aspect.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" [0139.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0139.267] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="AUSTIN~1.THM")) returned 1 [0139.267] wcscmp (_String1="Austin.thmx", _String2=".") returned 1 [0139.267] wcscmp (_String1="Austin.thmx", _String2="..") returned 1 [0139.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc4c8 [0139.267] wcscpy (in: _Dest=0x66dc4c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.267] wcscat (in: _Dest=0x66dc4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.267] wcscat (in: _Dest=0x66dc4c8, _Source="Austin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" [0139.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0139.269] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58265800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58265800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="BLACKT~1.THM")) returned 1 [0139.269] wcscmp (_String1="Black Tie.thmx", _String2=".") returned 1 [0139.269] wcscmp (_String1="Black Tie.thmx", _String2="..") returned 1 [0139.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0139.269] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.269] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.269] wcscat (in: _Dest=0x66dc558, _Source="Black Tie.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" [0139.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0139.270] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf665ee00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf665ee00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="CIVIC~1.THM")) returned 1 [0139.270] wcscmp (_String1="Civic.thmx", _String2=".") returned 1 [0139.270] wcscmp (_String1="Civic.thmx", _String2="..") returned 1 [0139.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0139.270] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.270] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.270] wcscat (in: _Dest=0x36ead8, _Source="Civic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" [0139.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0139.272] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35943f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35943f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="CLARIT~1.THM")) returned 1 [0139.272] wcscmp (_String1="Clarity.thmx", _String2=".") returned 1 [0139.272] wcscmp (_String1="Clarity.thmx", _String2="..") returned 1 [0139.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc5e8 [0139.272] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.272] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.272] wcscat (in: _Dest=0x66dc5e8, _Source="Clarity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" [0139.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0139.273] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ceb0c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ceb0c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="COMPOS~1.THM")) returned 1 [0139.273] wcscmp (_String1="Composite.thmx", _String2=".") returned 1 [0139.273] wcscmp (_String1="Composite.thmx", _String2="..") returned 1 [0139.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc678 [0139.273] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.273] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.274] wcscat (in: _Dest=0x66dc678, _Source="Composite.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" [0139.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0139.275] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="CONCOU~1.THM")) returned 1 [0139.275] wcscmp (_String1="Concourse.thmx", _String2=".") returned 1 [0139.275] wcscmp (_String1="Concourse.thmx", _String2="..") returned 1 [0139.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc708 [0139.275] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.275] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.275] wcscat (in: _Dest=0x66dc708, _Source="Concourse.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" [0139.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0139.276] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61afc000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95f5690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x61afc000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="COUTUR~1.THM")) returned 1 [0139.277] wcscmp (_String1="Couture.thmx", _String2=".") returned 1 [0139.277] wcscmp (_String1="Couture.thmx", _String2="..") returned 1 [0139.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc798 [0139.277] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.277] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.277] wcscat (in: _Dest=0x66dc798, _Source="Couture.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" [0139.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0139.278] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65434700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65434700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="ELEMEN~1.THM")) returned 1 [0139.278] wcscmp (_String1="Elemental.thmx", _String2=".") returned 1 [0139.278] wcscmp (_String1="Elemental.thmx", _String2="..") returned 1 [0139.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0139.278] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.278] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.278] wcscat (in: _Dest=0x66dc828, _Source="Elemental.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" [0139.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0139.280] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5bcf00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc5bcf00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="EQUITY~1.THM")) returned 1 [0139.280] wcscmp (_String1="Equity.thmx", _String2=".") returned 1 [0139.280] wcscmp (_String1="Equity.thmx", _String2="..") returned 1 [0139.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0139.280] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.280] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.280] wcscat (in: _Dest=0x66dc8b8, _Source="Equity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" [0139.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0139.282] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3927c600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3927c600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="ESSENT~1.THM")) returned 1 [0139.282] wcscmp (_String1="Essential.thmx", _String2=".") returned 1 [0139.282] wcscmp (_String1="Essential.thmx", _String2="..") returned 1 [0139.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc948 [0139.282] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.282] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.282] wcscat (in: _Dest=0x66dc948, _Source="Essential.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" [0139.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0139.283] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="EXECUT~1.THM")) returned 1 [0139.283] wcscmp (_String1="Executive.thmx", _String2=".") returned 1 [0139.283] wcscmp (_String1="Executive.thmx", _String2="..") returned 1 [0139.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0139.283] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.283] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.283] wcscat (in: _Dest=0x66dc9d8, _Source="Executive.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" [0139.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0139.285] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382dd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x382dd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="FLOW~1.THM")) returned 1 [0139.285] wcscmp (_String1="Flow.thmx", _String2=".") returned 1 [0139.285] wcscmp (_String1="Flow.thmx", _String2="..") returned 1 [0139.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3061f70 [0139.285] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.285] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.285] wcscat (in: _Dest=0x3061f70, _Source="Flow.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" [0139.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0139.286] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffef5600, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xffef5600, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="FOUNDR~1.THM")) returned 1 [0139.286] wcscmp (_String1="Foundry.thmx", _String2=".") returned 1 [0139.286] wcscmp (_String1="Foundry.thmx", _String2="..") returned 1 [0139.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dca68 [0139.286] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.286] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.287] wcscat (in: _Dest=0x66dca68, _Source="Foundry.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" [0139.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0139.288] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbb4d00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cbb4d00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="GRID~1.THM")) returned 1 [0139.288] wcscmp (_String1="Grid.thmx", _String2=".") returned 1 [0139.288] wcscmp (_String1="Grid.thmx", _String2="..") returned 1 [0139.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efe18 [0139.288] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.288] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.288] wcscat (in: _Dest=0x66efe18, _Source="Grid.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" [0139.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0139.290] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ed400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x404ed400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="HARDCO~1.THM")) returned 1 [0139.290] wcscmp (_String1="Hardcover.thmx", _String2=".") returned 1 [0139.290] wcscmp (_String1="Hardcover.thmx", _String2="..") returned 1 [0139.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0139.290] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.290] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.290] wcscat (in: _Dest=0x66dcaf8, _Source="Hardcover.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" [0139.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0139.291] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6a5500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c6a5500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="HORIZO~1.THM")) returned 1 [0139.291] wcscmp (_String1="Horizon.thmx", _String2=".") returned 1 [0139.291] wcscmp (_String1="Horizon.thmx", _String2="..") returned 1 [0139.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcb88 [0139.291] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.291] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.291] wcscat (in: _Dest=0x66dcb88, _Source="Horizon.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" [0139.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0139.293] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7166400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7166400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="MEDIAN~1.THM")) returned 1 [0139.293] wcscmp (_String1="Median.thmx", _String2=".") returned 1 [0139.293] wcscmp (_String1="Median.thmx", _String2="..") returned 1 [0139.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0139.293] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.293] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.293] wcscat (in: _Dest=0x66dcc18, _Source="Median.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" [0139.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0139.800] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="METRO~1.THM")) returned 1 [0139.800] wcscmp (_String1="Metro.thmx", _String2=".") returned 1 [0139.800] wcscmp (_String1="Metro.thmx", _String2="..") returned 1 [0139.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59510 [0139.800] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0139.800] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0139.800] wcscat (in: _Dest=0x3d59510, _Source="Metro.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" [0140.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0140.478] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c4500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0c4500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="MODULE~1.THM")) returned 1 [0140.478] wcscmp (_String1="Module.thmx", _String2=".") returned 1 [0140.478] wcscmp (_String1="Module.thmx", _String2="..") returned 1 [0140.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354ab0 [0140.478] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.478] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.478] wcscat (in: _Dest=0x354ab0, _Source="Module.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" [0140.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0140.480] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffddc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ffddc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="NEWSPR~1.THM")) returned 1 [0140.480] wcscmp (_String1="Newsprint.thmx", _String2=".") returned 1 [0140.480] wcscmp (_String1="Newsprint.thmx", _String2="..") returned 1 [0140.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x356370 [0140.480] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.480] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.480] wcscat (in: _Dest=0x356370, _Source="Newsprint.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" [0140.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0140.481] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109fcc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x109fcc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="OPULEN~1.THM")) returned 1 [0140.481] wcscmp (_String1="Opulent.thmx", _String2=".") returned 1 [0140.481] wcscmp (_String1="Opulent.thmx", _String2="..") returned 1 [0140.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355050 [0140.482] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.482] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.482] wcscat (in: _Dest=0x355050, _Source="Opulent.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" [0140.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0140.483] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14335300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14335300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="ORIEL~1.THM")) returned 1 [0140.483] wcscmp (_String1="Oriel.thmx", _String2=".") returned 1 [0140.483] wcscmp (_String1="Oriel.thmx", _String2="..") returned 1 [0140.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26a58 [0140.483] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.483] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.484] wcscat (in: _Dest=0x3f26a58, _Source="Oriel.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" [0140.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0140.485] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c6da00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17c6da00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="ORIGIN~1.THM")) returned 1 [0140.485] wcscmp (_String1="Origin.thmx", _String2=".") returned 1 [0140.485] wcscmp (_String1="Origin.thmx", _String2="..") returned 1 [0140.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0140.485] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.485] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.485] wcscat (in: _Dest=0x354fc0, _Source="Origin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" [0140.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0140.487] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a6100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b5a6100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="PAPER~1.THM")) returned 1 [0140.487] wcscmp (_String1="Paper.thmx", _String2=".") returned 1 [0140.487] wcscmp (_String1="Paper.thmx", _String2="..") returned 1 [0140.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0140.487] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.487] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.487] wcscat (in: _Dest=0x3f26ae0, _Source="Paper.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" [0140.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0140.489] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e25b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e25b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="PERSPE~1.THM")) returned 1 [0140.489] wcscmp (_String1="Perspective.thmx", _String2=".") returned 1 [0140.489] wcscmp (_String1="Perspective.thmx", _String2="..") returned 1 [0140.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0140.489] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.489] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.489] wcscat (in: _Dest=0x32d408, _Source="Perspective.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" [0140.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0140.491] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4775e200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4775e200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="PUSHPI~1.THM")) returned 1 [0140.491] wcscmp (_String1="Pushpin.thmx", _String2=".") returned 1 [0140.491] wcscmp (_String1="Pushpin.thmx", _String2="..") returned 1 [0140.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355200 [0140.491] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.491] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.491] wcscat (in: _Dest=0x355200, _Source="Pushpin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" [0140.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0140.493] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="SLIPST~1.THM")) returned 1 [0140.493] wcscmp (_String1="Slipstream.thmx", _String2=".") returned 1 [0140.493] wcscmp (_String1="Slipstream.thmx", _String2="..") returned 1 [0140.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d2d8 [0140.493] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.493] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.493] wcscat (in: _Dest=0x32d2d8, _Source="Slipstream.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" [0140.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0140.495] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="SOLSTI~1.THM")) returned 1 [0140.495] wcscmp (_String1="Solstice.thmx", _String2=".") returned 1 [0140.495] wcscmp (_String1="Solstice.thmx", _String2="..") returned 1 [0140.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0140.495] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.495] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.495] wcscat (in: _Dest=0x66db598, _Source="Solstice.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" [0140.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0140.497] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21504200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21504200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="TECHNI~1.THM")) returned 1 [0140.497] wcscmp (_String1="Technic.thmx", _String2=".") returned 1 [0140.497] wcscmp (_String1="Technic.thmx", _String2="..") returned 1 [0140.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbe08 [0140.497] wcscpy (in: _Dest=0x66dbe08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.497] wcscat (in: _Dest=0x66dbe08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.497] wcscat (in: _Dest=0x66dbe08, _Source="Technic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" [0140.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0140.498] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b096900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b096900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="THATCH~1.THM")) returned 1 [0140.498] wcscmp (_String1="Thatch.thmx", _String2=".") returned 1 [0140.498] wcscmp (_String1="Thatch.thmx", _String2="..") returned 1 [0140.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0140.499] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.499] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.499] wcscat (in: _Dest=0x66dcd38, _Source="Thatch.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" [0140.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0140.500] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0140.500] wcscmp (_String1="Theme Colors", _String2=".") returned 1 [0140.500] wcscmp (_String1="Theme Colors", _String2="..") returned 1 [0140.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcee8 [0140.500] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.500] wcscat (in: _Dest=0x66dcee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.500] wcscat (in: _Dest=0x66dcee8, _Source="Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0140.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dcee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0140.502] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0140.502] wcscmp (_String1="Theme Effects", _String2=".") returned 1 [0140.502] wcscmp (_String1="Theme Effects", _String2="..") returned 1 [0140.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbd78 [0140.502] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.502] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.502] wcscat (in: _Dest=0x66dbd78, _Source="Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0140.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0140.504] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0140.504] wcscmp (_String1="Theme Fonts", _String2=".") returned 1 [0140.504] wcscmp (_String1="Theme Fonts", _String2="..") returned 1 [0140.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbc58 [0140.504] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.504] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.504] wcscat (in: _Dest=0x66dbc58, _Source="Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0140.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0140.506] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e3c900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9856c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24e3c900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="TREK~1.THM")) returned 1 [0140.507] wcscmp (_String1="Trek.thmx", _String2=".") returned 1 [0140.507] wcscmp (_String1="Trek.thmx", _String2="..") returned 1 [0140.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26b68 [0140.507] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.507] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.507] wcscat (in: _Dest=0x3f26b68, _Source="Trek.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" [0140.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0140.509] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28775000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28775000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="URBAN~1.THM")) returned 1 [0140.509] wcscmp (_String1="Urban.thmx", _String2=".") returned 1 [0140.509] wcscmp (_String1="Urban.thmx", _String2="..") returned 1 [0140.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26bf0 [0140.509] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.509] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.509] wcscat (in: _Dest=0x3f26bf0, _Source="Urban.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" [0140.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0140.511] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c0ad700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c0ad700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="VERVE~1.THM")) returned 1 [0140.511] wcscmp (_String1="Verve.thmx", _String2=".") returned 1 [0140.511] wcscmp (_String1="Verve.thmx", _String2="..") returned 1 [0140.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0140.511] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.511] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.511] wcscat (in: _Dest=0x3f26c78, _Source="Verve.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" [0140.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0140.512] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 1 [0140.512] wcscmp (_String1="Waveform.thmx", _String2=".") returned 1 [0140.512] wcscmp (_String1="Waveform.thmx", _String2="..") returned 1 [0140.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbfb8 [0140.513] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0140.513] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0140.513] wcscat (in: _Dest=0x66dbfb8, _Source="Waveform.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" [0140.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0141.391] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 0 [0141.715] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0142.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0142.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0142.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 Thread: id = 163 os_tid = 0xb5c [0131.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3ae8 [0131.815] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0131.815] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0131.815] wcscat (in: _Dest=0x2fe3ae8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\*" [0131.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0131.815] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0133.178] wcscmp (_String1=".", _String2=".") returned 0 [0133.178] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.178] wcscmp (_String1="..", _String2=".") returned 1 [0133.178] wcscmp (_String1="..", _String2="..") returned 0 [0133.178] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0133.178] wcscmp (_String1="CAGCAT10", _String2=".") returned 1 [0133.178] wcscmp (_String1="CAGCAT10", _String2="..") returned 1 [0133.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f28fb0 [0133.178] wcscpy (in: _Dest=0x3f28fb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0133.178] wcscat (in: _Dest=0x3f28fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0133.179] wcscat (in: _Dest=0x3f28fb0, _Source="CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0135.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f28fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0135.492] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0135.492] wcscmp (_String1="OFFICE14", _String2=".") returned 1 [0135.492] wcscmp (_String1="OFFICE14", _String2="..") returned 1 [0135.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29e20 [0135.493] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0135.493] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0135.493] wcscat (in: _Dest=0x3f29e20, _Source="OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0135.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0135.494] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0135.494] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0135.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0135.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 [0135.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75f8) returned 1 Thread: id = 164 os_tid = 0xb50 [0131.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d8b8 [0131.816] wcscpy (in: _Dest=0x3d8d8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0131.816] wcscat (in: _Dest=0x3d8d8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0131.816] wcscat (in: _Dest=0x3d8d8b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\*" [0131.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12be8 [0131.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ef8 [0131.817] wcscmp (_String1=".", _String2=".") returned 0 [0131.817] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.213] wcscmp (_String1="..", _String2=".") returned 1 [0132.213] wcscmp (_String1="..", _String2="..") returned 0 [0132.213] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0132.213] wcscmp (_String1="1033", _String2=".") returned 1 [0132.213] wcscmp (_String1="1033", _String2="..") returned 1 [0132.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8b9d8 [0132.213] wcscpy (in: _Dest=0x3d8b9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0132.214] wcscat (in: _Dest=0x3d8b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0132.214] wcscat (in: _Dest=0x3d8b9d8, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0138.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0138.538] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0138.539] wcscmp (_String1="1036", _String2=".") returned 1 [0138.539] wcscmp (_String1="1036", _String2="..") returned 1 [0138.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd580 [0138.539] wcscpy (in: _Dest=0x66cd580, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.539] wcscat (in: _Dest=0x66cd580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.539] wcscat (in: _Dest=0x66cd580, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0138.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66cd580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0138.540] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0138.540] wcscmp (_String1="3082", _String2=".") returned 1 [0138.540] wcscmp (_String1="3082", _String2="..") returned 1 [0138.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd5e8 [0138.541] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.541] wcscat (in: _Dest=0x66cd5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.541] wcscat (in: _Dest=0x66cd5e8, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0138.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66cd5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0138.542] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x7636cc50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0xdc5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0138.542] wcscmp (_String1="ACCDDS.DLL", _String2=".") returned 1 [0138.542] wcscmp (_String1="ACCDDS.DLL", _String2="..") returned 1 [0138.542] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x62fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0138.542] wcscmp (_String1="ACCDDSF.DLL", _String2=".") returned 1 [0138.542] wcscmp (_String1="ACCDDSF.DLL", _String2="..") returned 1 [0138.542] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855c6c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x5a9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0138.542] wcscmp (_String1="ACCDDSLM.DLL", _String2=".") returned 1 [0138.542] wcscmp (_String1="ACCDDSLM.DLL", _String2="..") returned 1 [0138.542] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1 [0138.543] wcscmp (_String1="AccessWeb", _String2=".") returned 1 [0138.543] wcscmp (_String1="AccessWeb", _String2="..") returned 1 [0138.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b498 [0138.543] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.543] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.543] wcscat (in: _Dest=0x3f1b498, _Source="AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0138.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0138.544] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0138.544] wcscmp (_String1="ACCICONS.EXE", _String2=".") returned 1 [0138.544] wcscmp (_String1="ACCICONS.EXE", _String2="..") returned 1 [0138.545] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x763df070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0138.545] wcscmp (_String1="ACCVDT.DLL", _String2=".") returned 1 [0138.545] wcscmp (_String1="ACCVDT.DLL", _String2="..") returned 1 [0138.545] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0138.545] wcscmp (_String1="ACCWIZ", _String2=".") returned 1 [0138.545] wcscmp (_String1="ACCWIZ", _String2="..") returned 1 [0138.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29170 [0138.545] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.545] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.545] wcscat (in: _Dest=0x3f29170, _Source="ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0138.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0138.547] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x28180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0138.547] wcscmp (_String1="ACCWIZ.DLL", _String2=".") returned 1 [0138.547] wcscmp (_String1="ACCWIZ.DLL", _String2="..") returned 1 [0138.547] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0caa00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0caa00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x85fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0138.547] wcscmp (_String1="ACEDAO.DLL", _String2=".") returned 1 [0138.547] wcscmp (_String1="ACEDAO.DLL", _String2="..") returned 1 [0138.547] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0138.547] wcscmp (_String1="ADDINS", _String2=".") returned 1 [0138.547] wcscmp (_String1="ADDINS", _String2="..") returned 1 [0138.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29250 [0138.547] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.547] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.547] wcscat (in: _Dest=0x3f29250, _Source="ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0138.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0138.549] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1f8b00, ftCreationTime.dwHighDateTime=0x1c9c9dd, ftLastAccessTime.dwLowDateTime=0x765a80f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a1f8b00, ftLastWriteTime.dwHighDateTime=0x1c9c9dd, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0138.549] wcscmp (_String1="ADVCMP.DIC", _String2=".") returned 1 [0138.549] wcscmp (_String1="ADVCMP.DIC", _String2="..") returned 1 [0138.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1abb0 [0138.549] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.549] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.549] wcscat (in: _Dest=0x3f1abb0, _Source="ADVCMP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" [0138.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0138.551] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68715e00, ftCreationTime.dwHighDateTime=0x1c1866a, ftLastAccessTime.dwLowDateTime=0x858020d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68715e00, ftLastWriteTime.dwHighDateTime=0x1c1866a, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0138.551] wcscmp (_String1="ADVTEL.DIC", _String2=".") returned 1 [0138.551] wcscmp (_String1="ADVTEL.DIC", _String2="..") returned 1 [0138.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1a9d0 [0138.551] wcscpy (in: _Dest=0x3f1a9d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.551] wcscat (in: _Dest=0x3f1a9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.551] wcscat (in: _Dest=0x3f1a9d0, _Source="ADVTEL.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" [0138.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1a9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0138.553] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e917700, ftCreationTime.dwHighDateTime=0x1c9c9d0, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e917700, ftLastWriteTime.dwHighDateTime=0x1c9c9d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0138.553] wcscmp (_String1="ADVZIP.DIC", _String2=".") returned 1 [0138.553] wcscmp (_String1="ADVZIP.DIC", _String2="..") returned 1 [0138.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ae80 [0138.554] wcscpy (in: _Dest=0x3f1ae80, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.554] wcscat (in: _Dest=0x3f1ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.554] wcscat (in: _Dest=0x3f1ae80, _Source="ADVZIP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" [0138.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0138.555] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bb17b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xdd178, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0138.555] wcscmp (_String1="AEC.DLL", _String2=".") returned 1 [0138.555] wcscmp (_String1="AEC.DLL", _String2="..") returned 1 [0138.555] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x75f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0138.555] wcscmp (_String1="AECUTILS.DLL", _String2=".") returned 1 [0138.555] wcscmp (_String1="AECUTILS.DLL", _String2="..") returned 1 [0138.555] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4852fb00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x769864b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4852fb00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0138.555] wcscmp (_String1="ASCIIENG.LNG", _String2=".") returned 1 [0138.556] wcscmp (_String1="ASCIIENG.LNG", _String2="..") returned 1 [0138.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0138.556] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.556] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.556] wcscat (in: _Dest=0x3f1afe8, _Source="ASCIIENG.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" [0138.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0138.557] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x187b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2=".") returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x769ac610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0xf3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2=".") returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x214b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2=".") returned 1 [0138.558] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3509e800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3509e800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0138.558] wcscmp (_String1="AUTHZAX.DLL", _String2=".") returned 1 [0138.558] wcscmp (_String1="AUTHZAX.DLL", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="BCSAUT~1.DLL")) returned 1 [0138.558] wcscmp (_String1="BCSAutogen.dll", _String2=".") returned 1 [0138.558] wcscmp (_String1="BCSAutogen.dll", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="BCSCLI~1.DLL")) returned 1 [0138.558] wcscmp (_String1="BCSClient.Msg.dll", _String2=".") returned 1 [0138.558] wcscmp (_String1="BCSClient.Msg.dll", _String2="..") returned 1 [0138.558] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ab5900, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8ab5900, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="BCSCLI~1.MAN")) returned 1 [0138.558] wcscmp (_String1="BCSClientManifest.man", _String2=".") returned 1 [0138.558] wcscmp (_String1="BCSClientManifest.man", _String2="..") returned 1 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbaa8 [0138.559] wcscpy (in: _Dest=0x66dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.559] wcscat (in: _Dest=0x66dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.559] wcscat (in: _Dest=0x66dbaa8, _Source="BCSClientManifest.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" [0138.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0138.563] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e6a500, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e6a500, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="BCSEVE~1.MAN")) returned 1 [0138.563] wcscmp (_String1="BCSEvents.man", _String2=".") returned 1 [0138.563] wcscmp (_String1="BCSEvents.man", _String2="..") returned 1 [0138.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5a70 [0138.564] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.564] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.564] wcscat (in: _Dest=0x3da5a70, _Source="BCSEvents.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" [0138.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0138.566] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfced6000, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfced6000, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xdf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="BCSLAU~1.DLL")) returned 1 [0138.566] wcscmp (_String1="BCSLaunch.dll", _String2=".") returned 1 [0138.566] wcscmp (_String1="BCSLaunch.dll", _String2="..") returned 1 [0138.566] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x19780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy32.dll", cAlternateFileName="BCSPRO~1.DLL")) returned 1 [0138.566] wcscmp (_String1="BCSProxy32.dll", _String2=".") returned 1 [0138.566] wcscmp (_String1="BCSProxy32.dll", _String2="..") returned 1 [0138.566] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x6d580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="BCSRUN~2.DLL")) returned 1 [0138.566] wcscmp (_String1="BCSRuntime.dll", _String2=".") returned 1 [0138.566] wcscmp (_String1="BCSRuntime.dll", _String2="..") returned 1 [0138.566] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d053ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0138.566] wcscmp (_String1="BCSRuntimeUI.dll", _String2=".") returned 1 [0138.566] wcscmp (_String1="BCSRuntimeUI.dll", _String2="..") returned 1 [0138.566] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x1e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0138.566] wcscmp (_String1="BCSStr32.dll", _String2=".") returned 1 [0138.566] wcscmp (_String1="BCSStr32.dll", _String2="..") returned 1 [0138.567] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x16580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0138.567] wcscmp (_String1="BCSSync.exe", _String2=".") returned 1 [0138.567] wcscmp (_String1="BCSSync.exe", _String2="..") returned 1 [0138.567] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1 [0138.567] wcscmp (_String1="bdcmetadata.xsd", _String2=".") returned 1 [0138.567] wcscmp (_String1="bdcmetadata.xsd", _String2="..") returned 1 [0138.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6270 [0138.567] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.567] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.567] wcscat (in: _Dest=0x3da6270, _Source="bdcmetadata.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" [0138.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0138.569] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x869dc5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1 [0138.569] wcscmp (_String1="bdcmetadataresource.xsd", _String2=".") returned 1 [0138.569] wcscmp (_String1="bdcmetadataresource.xsd", _String2="..") returned 1 [0138.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db748 [0138.569] wcscpy (in: _Dest=0x66db748, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.569] wcscat (in: _Dest=0x66db748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.569] wcscat (in: _Dest=0x66db748, _Source="bdcmetadataresource.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" [0138.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0138.571] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0138.571] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0138.571] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0138.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0138.571] wcscpy (in: _Dest=0x3f1dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.571] wcscat (in: _Dest=0x3f1dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.571] wcscat (in: _Dest=0x3f1dc10, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0138.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0138.573] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0138.573] wcscmp (_String1="BORDERS", _String2=".") returned 1 [0138.573] wcscmp (_String1="BORDERS", _String2="..") returned 1 [0138.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f291e0 [0138.573] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.573] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.573] wcscat (in: _Dest=0x3f291e0, _Source="BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0138.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f291e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0138.575] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x21f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="BRTVIEW.DLL", _String2=".") returned 1 [0138.575] wcscmp (_String1="BRTVIEW.DLL", _String2="..") returned 1 [0138.575] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="BSTORM.DLL", _String2=".") returned 1 [0138.575] wcscmp (_String1="BSTORM.DLL", _String2="..") returned 1 [0138.575] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeffef000, ftCreationTime.dwHighDateTime=0x1cba639, ftLastAccessTime.dwLowDateTime=0xf72c8430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xeffef000, ftLastWriteTime.dwHighDateTime=0x1cba639, nFileSizeHigh=0x0, nFileSizeLow=0x60f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="CDLMSO.DLL", _String2=".") returned 1 [0138.575] wcscmp (_String1="CDLMSO.DLL", _String2="..") returned 1 [0138.575] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a1d600, ftCreationTime.dwHighDateTime=0x1bcac51, ftLastAccessTime.dwLowDateTime=0x3527e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26a1d600, ftLastWriteTime.dwHighDateTime=0x1bcac51, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="CGMIMP32.HLP", _String2=".") returned 1 [0138.575] wcscmp (_String1="CGMIMP32.HLP", _String2="..") returned 1 [0138.575] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49842800, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49842800, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1 [0138.575] wcscmp (_String1="CharSetTable.chr", _String2=".") returned 1 [0138.575] wcscmp (_String1="CharSetTable.chr", _String2="..") returned 1 [0138.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0138.575] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0138.575] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0138.575] wcscat (in: _Dest=0x3da5f70, _Source="CharSetTable.chr" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr") returned="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" [0138.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0139.026] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67250900, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf50907f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x67250900, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x33578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0139.026] wcscmp (_String1="CLVIEW.EXE", _String2=".") returned 1 [0139.026] wcscmp (_String1="CLVIEW.EXE", _String2="..") returned 1 [0139.026] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8afeab00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8afeab00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7a578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0139.027] wcscmp (_String1="CMAX20.DLL", _String2=".") returned 1 [0139.027] wcscmp (_String1="CMAX20.DLL", _String2="..") returned 1 [0139.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x24f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0139.027] wcscmp (_String1="CNFNOT32.EXE", _String2=".") returned 1 [0139.027] wcscmp (_String1="CNFNOT32.EXE", _String2="..") returned 1 [0139.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0139.027] wcscmp (_String1="CODEEDIT.DLL", _String2=".") returned 1 [0139.027] wcscmp (_String1="CODEEDIT.DLL", _String2="..") returned 1 [0139.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x20f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0139.027] wcscmp (_String1="CONTAB32.DLL", _String2=".") returned 1 [0139.027] wcscmp (_String1="CONTAB32.DLL", _String2="..") returned 1 [0139.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a51900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45a51900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0139.027] wcscmp (_String1="ContactPicker.dll", _String2=".") returned 1 [0139.027] wcscmp (_String1="ContactPicker.dll", _String2="..") returned 1 [0139.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0139.027] wcscmp (_String1="CONVERT", _String2=".") returned 1 [0139.027] wcscmp (_String1="CONVERT", _String2="..") returned 1 [0139.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5c68 [0139.027] wcscpy (in: _Dest=0x66e5c68, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0139.027] wcscat (in: _Dest=0x66e5c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0139.027] wcscat (in: _Dest=0x66e5c68, _Source="CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0145.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0145.619] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd87ae950, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x78db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0145.621] wcscmp (_String1="CSS7DATA0009.DLL", _String2=".") returned 1 [0145.621] wcscmp (_String1="CSS7DATA0009.DLL", _String2="..") returned 1 [0145.621] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0xa51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0145.621] wcscmp (_String1="CSS7DATA000A.DLL", _String2=".") returned 1 [0145.621] wcscmp (_String1="CSS7DATA000A.DLL", _String2="..") returned 1 [0145.621] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d5fe00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdbdfbf30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d5fe00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa3fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0145.621] wcscmp (_String1="CSS7DATA000C.DLL", _String2=".") returned 1 [0145.621] wcscmp (_String1="CSS7DATA000C.DLL", _String2="..") returned 1 [0145.621] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee05000, ftCreationTime.dwHighDateTime=0x1c8da63, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee05000, ftLastWriteTime.dwHighDateTime=0x1c8da63, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0145.621] wcscmp (_String1="Custom.propdesc", _String2=".") returned 1 [0145.621] wcscmp (_String1="Custom.propdesc", _String2="..") returned 1 [0145.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e08f30 [0145.622] wcscpy (in: _Dest=0x3e08f30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.622] wcscat (in: _Dest=0x3e08f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.622] wcscat (in: _Dest=0x3e08f30, _Source="Custom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" [0145.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0145.624] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x56f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0145.624] wcscmp (_String1="DATAGATH.DLL", _String2=".") returned 1 [0145.624] wcscmp (_String1="DATAGATH.DLL", _String2="..") returned 1 [0145.624] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f93a000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f93a000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa1978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0145.624] wcscmp (_String1="DBENGR.DLL", _String2=".") returned 1 [0145.624] wcscmp (_String1="DBENGR.DLL", _String2="..") returned 1 [0145.624] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2c4700, ftCreationTime.dwHighDateTime=0x1c98311, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2c4700, ftLastWriteTime.dwHighDateTime=0x1c98311, nFileSizeHigh=0x0, nFileSizeLow=0x107d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0145.624] wcscmp (_String1="DBGHELP.DLL", _String2=".") returned 1 [0145.624] wcscmp (_String1="DBGHELP.DLL", _String2="..") returned 1 [0145.624] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x147c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0145.624] wcscmp (_String1="DBSHARE.DLL", _String2=".") returned 1 [0145.624] wcscmp (_String1="DBSHARE.DLL", _String2="..") returned 1 [0145.624] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0145.624] wcscmp (_String1="DBWIZ.DLL", _String2=".") returned 1 [0145.625] wcscmp (_String1="DBWIZ.DLL", _String2="..") returned 1 [0145.625] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e01fe00, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e01fe00, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0145.625] wcscmp (_String1="DGRMLNCH.DLL", _String2=".") returned 1 [0145.625] wcscmp (_String1="DGRMLNCH.DLL", _String2="..") returned 1 [0145.625] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x15570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0145.625] wcscmp (_String1="DLGSETP.DLL", _String2=".") returned 1 [0145.625] wcscmp (_String1="DLGSETP.DLL", _String2="..") returned 1 [0145.625] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0145.625] wcscmp (_String1="Document Parts", _String2=".") returned 1 [0145.625] wcscmp (_String1="Document Parts", _String2="..") returned 1 [0145.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e08eb0 [0145.625] wcscpy (in: _Dest=0x3e08eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.625] wcscat (in: _Dest=0x3e08eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.625] wcscat (in: _Dest=0x3e08eb0, _Source="Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0145.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e08eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0145.627] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8bfda70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0xe2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0145.627] wcscmp (_String1="DRILLDWN.DLL", _String2=".") returned 1 [0145.627] wcscmp (_String1="DRILLDWN.DLL", _String2="..") returned 1 [0145.627] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff23f200, ftCreationTime.dwHighDateTime=0x1cba0bd, ftLastAccessTime.dwLowDateTime=0xe8c23bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff23f200, ftLastWriteTime.dwHighDateTime=0x1cba0bd, nFileSizeHigh=0x0, nFileSizeLow=0x23760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0145.627] wcscmp (_String1="DWGCNV.DLL", _String2=".") returned 1 [0145.627] wcscmp (_String1="DWGCNV.DLL", _String2="..") returned 1 [0145.627] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75752400, ftCreationTime.dwHighDateTime=0x1cba0bf, ftLastAccessTime.dwLowDateTime=0xe8c95ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75752400, ftLastWriteTime.dwHighDateTime=0x1cba0bf, nFileSizeHigh=0x0, nFileSizeLow=0x59c368, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0145.627] wcscmp (_String1="DWGDP.DLL", _String2=".") returned 1 [0145.627] wcscmp (_String1="DWGDP.DLL", _String2="..") returned 1 [0145.627] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0145.628] wcscmp (_String1="EDITOR.EXE", _String2=".") returned 1 [0145.628] wcscmp (_String1="EDITOR.EXE", _String2="..") returned 1 [0145.628] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x9588, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0145.628] wcscmp (_String1="EDITORS.DLL", _String2=".") returned 1 [0145.628] wcscmp (_String1="EDITORS.DLL", _String2="..") returned 1 [0145.628] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x31388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0145.628] wcscmp (_String1="ELEMENTS.DLL", _String2=".") returned 1 [0145.628] wcscmp (_String1="ELEMENTS.DLL", _String2="..") returned 1 [0145.628] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0145.628] wcscmp (_String1="ELEMUTIL.DLL", _String2=".") returned 1 [0145.628] wcscmp (_String1="ELEMUTIL.DLL", _String2="..") returned 1 [0145.628] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878249d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0145.628] wcscmp (_String1="EMABLT32.DLL", _String2=".") returned 1 [0145.628] wcscmp (_String1="EMABLT32.DLL", _String2="..") returned 1 [0145.629] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x17a7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0145.629] wcscmp (_String1="EMSMDB32.DLL", _String2=".") returned 1 [0145.629] wcscmp (_String1="EMSMDB32.DLL", _String2="..") returned 1 [0145.629] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0145.629] wcscmp (_String1="ENGDIC.DAT", _String2=".") returned 1 [0145.629] wcscmp (_String1="ENGDIC.DAT", _String2="..") returned 1 [0145.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x30152b0 [0145.629] wcscpy (in: _Dest=0x30152b0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.629] wcscat (in: _Dest=0x30152b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.629] wcscat (in: _Dest=0x30152b0, _Source="ENGDIC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" [0145.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30152b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0145.631] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0145.631] wcscmp (_String1="ENGIDX.DAT", _String2=".") returned 1 [0145.631] wcscmp (_String1="ENGIDX.DAT", _String2="..") returned 1 [0145.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015328 [0145.631] wcscpy (in: _Dest=0x3015328, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.631] wcscat (in: _Dest=0x3015328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.631] wcscat (in: _Dest=0x3015328, _Source="ENGIDX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" [0145.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3015328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0145.633] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x519710d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0145.633] wcscmp (_String1="ENGLISH.LNG", _String2=".") returned 1 [0145.633] wcscmp (_String1="ENGLISH.LNG", _String2="..") returned 1 [0145.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0948 [0145.633] wcscpy (in: _Dest=0x66d0948, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.633] wcscat (in: _Dest=0x66d0948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.633] wcscat (in: _Dest=0x66d0948, _Source="ENGLISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" [0145.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0145.635] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xbd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0145.635] wcscmp (_String1="EntityDataHandler.dll", _String2=".") returned 1 [0145.635] wcscmp (_String1="EntityDataHandler.dll", _String2="..") returned 1 [0145.635] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0145.635] wcscmp (_String1="EntityPicker.dll", _String2=".") returned 1 [0145.635] wcscmp (_String1="EntityPicker.dll", _String2="..") returned 1 [0145.635] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x25d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0145.635] wcscmp (_String1="ENVELOPE.DLL", _String2=".") returned 1 [0145.635] wcscmp (_String1="ENVELOPE.DLL", _String2="..") returned 1 [0145.635] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdcf4cb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xffa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0145.635] wcscmp (_String1="ERXIMP.ADD", _String2=".") returned 1 [0145.635] wcscmp (_String1="ERXIMP.ADD", _String2="..") returned 1 [0145.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0b28 [0145.635] wcscpy (in: _Dest=0x66d0b28, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.635] wcscat (in: _Dest=0x66d0b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.636] wcscat (in: _Dest=0x66d0b28, _Source="ERXIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" [0145.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0145.637] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc274d000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc274d000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x13cad60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0145.637] wcscmp (_String1="EXCEL.EXE", _String2=".") returned 1 [0145.638] wcscmp (_String1="EXCEL.EXE", _String2="..") returned 1 [0145.638] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddd700, ftCreationTime.dwHighDateTime=0x1cac255, ftLastAccessTime.dwLowDateTime=0x77462910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddd700, ftLastWriteTime.dwHighDateTime=0x1cac255, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0145.638] wcscmp (_String1="excel.exe.manifest", _String2=".") returned 1 [0145.638] wcscmp (_String1="excel.exe.manifest", _String2="..") returned 1 [0145.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0258 [0145.638] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.638] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.638] wcscat (in: _Dest=0x66f0258, _Source="excel.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" [0145.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0145.640] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0x10f9d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0145.640] wcscmp (_String1="excelcnv.exe", _String2=".") returned 1 [0145.640] wcscmp (_String1="excelcnv.exe", _String2="..") returned 1 [0145.640] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0xcf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0145.640] wcscmp (_String1="excelcnvpxy.dll", _String2=".") returned 1 [0145.640] wcscmp (_String1="excelcnvpxy.dll", _String2="..") returned 1 [0145.640] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0145.640] wcscmp (_String1="EXLIRM.XML", _String2=".") returned 1 [0145.640] wcscmp (_String1="EXLIRM.XML", _String2="..") returned 1 [0145.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0c18 [0145.641] wcscpy (in: _Dest=0x66d0c18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.641] wcscat (in: _Dest=0x66d0c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.641] wcscat (in: _Dest=0x66d0c18, _Source="EXLIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" [0145.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0145.642] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0145.642] wcscmp (_String1="EXLIRMV.XML", _String2=".") returned 1 [0145.642] wcscmp (_String1="EXLIRMV.XML", _String2="..") returned 1 [0145.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0588 [0145.643] wcscpy (in: _Dest=0x66d0588, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.643] wcscat (in: _Dest=0x66d0588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.643] wcscat (in: _Dest=0x66d0588, _Source="EXLIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" [0145.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0145.644] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50950, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0145.644] wcscmp (_String1="EXSEC32.DLL", _String2=".") returned 1 [0145.644] wcscmp (_String1="EXSEC32.DLL", _String2="..") returned 1 [0145.644] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x393a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0145.644] wcscmp (_String1="EXTRACT.DLL", _String2=".") returned 1 [0145.644] wcscmp (_String1="EXTRACT.DLL", _String2="..") returned 1 [0145.644] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8cbc150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xf7968, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0145.644] wcscmp (_String1="FACILITY.DLL", _String2=".") returned 1 [0145.645] wcscmp (_String1="FACILITY.DLL", _String2="..") returned 1 [0145.645] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x34180, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0145.645] wcscmp (_String1="FORM.DLL", _String2=".") returned 1 [0145.645] wcscmp (_String1="FORM.DLL", _String2="..") returned 1 [0145.645] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0145.645] wcscmp (_String1="FORMS", _String2=".") returned 1 [0145.645] wcscmp (_String1="FORMS", _String2="..") returned 1 [0145.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0145.645] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.645] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.645] wcscat (in: _Dest=0x3f29020, _Source="FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0145.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0145.646] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4e669930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0145.646] wcscmp (_String1="FRENCH.LNG", _String2=".") returned 1 [0145.647] wcscmp (_String1="FRENCH.LNG", _String2="..") returned 1 [0145.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0e70 [0145.647] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.647] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.647] wcscat (in: _Dest=0x66d0e70, _Source="FRENCH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" [0145.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0145.648] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8ce22b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0145.648] wcscmp (_String1="GANTT.DLL", _String2=".") returned 1 [0145.648] wcscmp (_String1="GANTT.DLL", _String2="..") returned 1 [0145.648] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5957100, ftCreationTime.dwHighDateTime=0x1cbca52, ftLastAccessTime.dwLowDateTime=0xf6d93410, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5957100, ftLastWriteTime.dwHighDateTime=0x1cbca52, nFileSizeHigh=0x0, nFileSizeLow=0x1aad68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0145.648] wcscmp (_String1="GFX.DLL", _String2=".") returned 1 [0145.649] wcscmp (_String1="GFX.DLL", _String2="..") returned 1 [0145.649] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x88705350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x333180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0145.649] wcscmp (_String1="GKExcel.dll", _String2=".") returned 1 [0145.649] wcscmp (_String1="GKExcel.dll", _String2="..") returned 1 [0145.649] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x201580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0145.649] wcscmp (_String1="GKPowerPoint.dll", _String2=".") returned 1 [0145.649] wcscmp (_String1="GKPowerPoint.dll", _String2="..") returned 1 [0145.649] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x237580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0145.649] wcscmp (_String1="GKWord.dll", _String2=".") returned 1 [0145.649] wcscmp (_String1="GKWord.dll", _String2="..") returned 1 [0145.649] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x77f64ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x419b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0145.649] wcscmp (_String1="GRAPH.EXE", _String2=".") returned 1 [0145.649] wcscmp (_String1="GRAPH.EXE", _String2="..") returned 1 [0145.649] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6efd00, ftCreationTime.dwHighDateTime=0x1cac244, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6efd00, ftLastWriteTime.dwHighDateTime=0x1cac244, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0145.649] wcscmp (_String1="Graph.exe.manifest", _String2=".") returned 1 [0145.649] wcscmp (_String1="Graph.exe.manifest", _String2="..") returned 1 [0145.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0148 [0145.649] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.649] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.650] wcscat (in: _Dest=0x66f0148, _Source="Graph.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" [0145.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0145.651] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82ab600, ftCreationTime.dwHighDateTime=0x1c3b9b4, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc82ab600, ftLastWriteTime.dwHighDateTime=0x1c3b9b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0145.651] wcscmp (_String1="GRAPH.ICO", _String2=".") returned 1 [0145.651] wcscmp (_String1="GRAPH.ICO", _String2="..") returned 1 [0145.652] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0145.652] wcscmp (_String1="Groove", _String2=".") returned 1 [0145.652] wcscmp (_String1="Groove", _String2="..") returned 1 [0145.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f233e0 [0145.652] wcscpy (in: _Dest=0x3f233e0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.652] wcscat (in: _Dest=0x3f233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.652] wcscat (in: _Dest=0x3f233e0, _Source="Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0145.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0145.654] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x1d88d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="GROOVE.EXE", _String2=".") returned 1 [0145.654] wcscmp (_String1="GROOVE.EXE", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x406f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0145.654] wcscmp (_String1="GROOVEEX.DLL", _String2=".") returned 1 [0145.654] wcscmp (_String1="GROOVEEX.DLL", _String2="..") returned 1 [0145.654] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0xe6788, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0145.659] wcscmp (_String1="GROOVEMN.EXE", _String2=".") returned 1 [0145.659] wcscmp (_String1="GROOVEMN.EXE", _String2="..") returned 1 [0145.659] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d08410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x55168, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0145.659] wcscmp (_String1="HVAC.DLL", _String2=".") returned 1 [0145.659] wcscmp (_String1="HVAC.DLL", _String2="..") returned 1 [0145.659] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefad1200, ftCreationTime.dwHighDateTime=0x1cbcf63, ftLastAccessTime.dwLowDateTime=0xf5044530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefad1200, ftLastWriteTime.dwHighDateTime=0x1cbcf63, nFileSizeHigh=0x0, nFileSizeLow=0x2ff60, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0145.659] wcscmp (_String1="IEAWSDC.DLL", _String2=".") returned 1 [0145.659] wcscmp (_String1="IEAWSDC.DLL", _String2="..") returned 1 [0145.659] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ad00, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7ad00, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x8d3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1 [0145.659] wcscmp (_String1="IEContentService.exe", _String2=".") returned 1 [0145.659] wcscmp (_String1="IEContentService.exe", _String2="..") returned 1 [0145.659] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0145.659] wcscmp (_String1="IMCOMMON.DLL", _String2=".") returned 1 [0145.659] wcscmp (_String1="IMCOMMON.DLL", _String2="..") returned 1 [0145.660] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf30150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0145.660] wcscmp (_String1="IMDIMP.ADD", _String2=".") returned 1 [0145.660] wcscmp (_String1="IMDIMP.ADD", _String2="..") returned 1 [0145.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d940 [0145.660] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0145.660] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0145.660] wcscat (in: _Dest=0x3f1d940, _Source="IMDIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" [0145.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0146.148] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x20f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0146.149] wcscmp (_String1="IMPMAIL.DLL", _String2=".") returned 1 [0146.149] wcscmp (_String1="IMPMAIL.DLL", _String2="..") returned 1 [0146.149] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x23d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0146.149] wcscmp (_String1="IMUTIL.DLL", _String2=".") returned 1 [0146.149] wcscmp (_String1="IMUTIL.DLL", _String2="..") returned 1 [0146.149] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0146.149] wcscmp (_String1="IMWDD.DLL", _String2=".") returned 1 [0146.149] wcscmp (_String1="IMWDD.DLL", _String2="..") returned 1 [0146.149] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91f1170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0146.149] wcscmp (_String1="IMWIZ.DLL", _String2=".") returned 1 [0146.149] wcscmp (_String1="IMWIZ.DLL", _String2="..") returned 1 [0146.149] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x88c86630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x1a7570, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0146.149] wcscmp (_String1="INFOPATH.EXE", _String2=".") returned 1 [0146.149] wcscmp (_String1="INFOPATH.EXE", _String2="..") returned 1 [0146.149] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="INFOPA~1")) returned 1 [0146.149] wcscmp (_String1="InfoPathOM", _String2=".") returned 1 [0146.149] wcscmp (_String1="InfoPathOM", _String2="..") returned 1 [0146.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d490 [0146.150] wcscpy (in: _Dest=0x3f1d490, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0146.150] wcscat (in: _Dest=0x3f1d490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0146.150] wcscat (in: _Dest=0x3f1d490, _Source="InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0152.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0152.115] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65d4d800, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65d4d800, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x62978, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0152.115] wcscmp (_String1="INLAUNCH.DLL", _String2=".") returned 1 [0152.115] wcscmp (_String1="INLAUNCH.DLL", _String2="..") returned 1 [0152.115] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x7900e8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1 [0152.115] wcscmp (_String1="Installed_resources14.xss", _String2=".") returned 1 [0152.115] wcscmp (_String1="Installed_resources14.xss", _String2="..") returned 1 [0152.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958d88 [0152.115] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.115] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.115] wcscat (in: _Dest=0x6958d88, _Source="Installed_resources14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" [0152.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0152.116] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1 [0152.116] wcscmp (_String1="Installed_schemas14.xss", _String2=".") returned 1 [0152.116] wcscmp (_String1="Installed_schemas14.xss", _String2="..") returned 1 [0152.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbce8 [0152.116] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.116] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.116] wcscat (in: _Dest=0x66dbce8, _Source="Installed_schemas14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" [0152.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0152.117] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb40e4400, ftCreationTime.dwHighDateTime=0x1cb7066, ftLastAccessTime.dwLowDateTime=0xf590b650, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb40e4400, ftLastWriteTime.dwHighDateTime=0x1cb7066, nFileSizeHigh=0x0, nFileSizeLow=0x13580, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0152.117] wcscmp (_String1="INTLDATE.DLL", _String2=".") returned 1 [0152.117] wcscmp (_String1="INTLDATE.DLL", _String2="..") returned 1 [0152.117] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a3fe110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x598978, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0152.117] wcscmp (_String1="IPDESIGN.DLL", _String2=".") returned 1 [0152.117] wcscmp (_String1="IPDESIGN.DLL", _String2="..") returned 1 [0152.117] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x53df70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0152.117] wcscmp (_String1="IPEDITOR.DLL", _String2=".") returned 1 [0152.117] wcscmp (_String1="IPEDITOR.DLL", _String2="..") returned 1 [0152.118] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x89149230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0152.118] wcscmp (_String1="IPIRM.XML", _String2=".") returned 1 [0152.118] wcscmp (_String1="IPIRM.XML", _String2="..") returned 1 [0152.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b3a8 [0152.118] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.118] wcscat (in: _Dest=0x3f1b3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.118] wcscat (in: _Dest=0x3f1b3a8, _Source="IPIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" [0152.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0152.119] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0152.119] wcscmp (_String1="IPIRMV.XML", _String2=".") returned 1 [0152.119] wcscmp (_String1="IPIRMV.XML", _String2="..") returned 1 [0152.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b0d8 [0152.119] wcscpy (in: _Dest=0x3f1b0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.119] wcscat (in: _Dest=0x3f1b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.119] wcscat (in: _Dest=0x3f1b0d8, _Source="IPIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" [0152.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0152.121] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x29588, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0152.121] wcscmp (_String1="IPOLK.DLL", _String2=".") returned 1 [0152.121] wcscmp (_String1="IPOLK.DLL", _String2="..") returned 1 [0152.121] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0152.121] wcscmp (_String1="IXACS.PDL", _String2=".") returned 1 [0152.121] wcscmp (_String1="IXACS.PDL", _String2="..") returned 1 [0152.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b600 [0152.121] wcscpy (in: _Dest=0x3f1b600, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.121] wcscat (in: _Dest=0x3f1b600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.121] wcscat (in: _Dest=0x3f1b600, _Source="IXACS.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" [0152.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0152.122] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x29188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0152.122] wcscmp (_String1="IXDB2.PDL", _String2=".") returned 1 [0152.122] wcscmp (_String1="IXDB2.PDL", _String2="..") returned 1 [0152.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1abb0 [0152.122] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.122] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.122] wcscat (in: _Dest=0x3f1abb0, _Source="IXDB2.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" [0152.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0152.123] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x137b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0152.123] wcscmp (_String1="IXGENERC.PDL", _String2=".") returned 1 [0152.123] wcscmp (_String1="IXGENERC.PDL", _String2="..") returned 1 [0152.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0152.123] wcscpy (in: _Dest=0x3f1aa48, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.123] wcscat (in: _Dest=0x3f1aa48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.123] wcscat (in: _Dest=0x3f1aa48, _Source="IXGENERC.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" [0152.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0152.128] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x219a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0152.128] wcscmp (_String1="IXOLEDB.PDL", _String2=".") returned 1 [0152.128] wcscmp (_String1="IXOLEDB.PDL", _String2="..") returned 1 [0152.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b588 [0152.128] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.128] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.128] wcscat (in: _Dest=0x3f1b588, _Source="IXOLEDB.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" [0152.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0152.129] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0152.129] wcscmp (_String1="IXORACLE.PDL", _String2=".") returned 1 [0152.130] wcscmp (_String1="IXORACLE.PDL", _String2="..") returned 1 [0152.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b060 [0152.130] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.130] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.130] wcscat (in: _Dest=0x3f1b060, _Source="IXORACLE.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" [0152.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0152.131] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x25fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0152.131] wcscmp (_String1="IXSSRV.PDL", _String2=".") returned 1 [0152.131] wcscmp (_String1="IXSSRV.PDL", _String2="..") returned 1 [0152.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ad90 [0152.131] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.131] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.131] wcscat (in: _Dest=0x3f1ad90, _Source="IXSSRV.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" [0152.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ad90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0152.132] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0152.132] wcscmp (_String1="IXUTIL.DLL", _String2=".") returned 1 [0152.132] wcscmp (_String1="IXUTIL.DLL", _String2="..") returned 1 [0152.132] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d17af00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d17af00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0152.132] wcscmp (_String1="JFONT.DAT", _String2=".") returned 1 [0152.132] wcscmp (_String1="JFONT.DAT", _String2="..") returned 1 [0152.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b420 [0152.132] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.133] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.133] wcscat (in: _Dest=0x3f1b420, _Source="JFONT.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" [0152.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0152.134] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0152.134] wcscmp (_String1="LATIN1.SHP", _String2=".") returned 1 [0152.134] wcscmp (_String1="LATIN1.SHP", _String2="..") returned 1 [0152.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b330 [0152.134] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.134] wcscat (in: _Dest=0x3f1b330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.134] wcscat (in: _Dest=0x3f1b330, _Source="LATIN1.SHP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP") returned="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" [0152.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0152.137] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x58970, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0152.137] wcscmp (_String1="LGND.DLL", _String2=".") returned 1 [0152.137] wcscmp (_String1="LGND.DLL", _String2="..") returned 1 [0152.137] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0152.137] wcscmp (_String1="Library", _String2=".") returned 1 [0152.137] wcscmp (_String1="Library", _String2="..") returned 1 [0152.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29480 [0152.137] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.137] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.137] wcscat (in: _Dest=0x3f29480, _Source="Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0152.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0152.138] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0152.138] wcscmp (_String1="LOGELEMS.DLL", _String2=".") returned 1 [0152.138] wcscmp (_String1="LOGELEMS.DLL", _String2="..") returned 1 [0152.138] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe334670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9990, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0152.138] wcscmp (_String1="LOGMODEL.MDL", _String2=".") returned 1 [0152.139] wcscmp (_String1="LOGMODEL.MDL", _String2="..") returned 1 [0152.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0152.139] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0152.139] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0152.139] wcscat (in: _Dest=0x3f1b240, _Source="LOGMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" [0152.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0152.142] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x571a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0153.079] wcscmp (_String1="LOGVIEW.DLL", _String2=".") returned 1 [0153.079] wcscmp (_String1="LOGVIEW.DLL", _String2="..") returned 1 [0153.079] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0153.079] wcscmp (_String1="LOOKUP.DAT", _String2=".") returned 1 [0153.079] wcscmp (_String1="LOOKUP.DAT", _String2="..") returned 1 [0153.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0b28 [0153.080] wcscpy (in: _Dest=0x66d0b28, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0153.080] wcscat (in: _Dest=0x66d0b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0153.080] wcscat (in: _Dest=0x66d0b28, _Source="LOOKUP.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" [0154.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0154.835] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x429a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0154.835] wcscmp (_String1="MAPIPH.DLL", _String2=".") returned 1 [0154.835] wcscmp (_String1="MAPIPH.DLL", _String2="..") returned 1 [0154.835] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x311d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0154.835] wcscmp (_String1="MAPISHELL.DLL", _String2=".") returned 1 [0154.835] wcscmp (_String1="MAPISHELL.DLL", _String2="..") returned 1 [0154.835] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0154.835] wcscmp (_String1="MCPS.DLL", _String2=".") returned 1 [0154.836] wcscmp (_String1="MCPS.DLL", _String2="..") returned 1 [0154.836] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4fabfb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xaa768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0154.836] wcscmp (_String1="MEDCAT.DLL", _String2=".") returned 1 [0154.836] wcscmp (_String1="MEDCAT.DLL", _String2="..") returned 1 [0154.836] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0154.836] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0154.836] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0154.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0154.836] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.836] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.836] wcscat (in: _Dest=0x3f29020, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0154.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0154.837] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe403300, ftCreationTime.dwHighDateTime=0x1cac09c, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe403300, ftLastWriteTime.dwHighDateTime=0x1cac09c, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0154.837] wcscmp (_String1="Microsoft.BusinessData.dll", _String2=".") returned 1 [0154.837] wcscmp (_String1="Microsoft.BusinessData.dll", _String2="..") returned 1 [0154.837] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf54100, ftCreationTime.dwHighDateTime=0x1ca2511, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbf54100, ftLastWriteTime.dwHighDateTime=0x1ca2511, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0154.837] wcscmp (_String1="Microsoft.BusinessData.xml", _String2=".") returned 1 [0154.837] wcscmp (_String1="Microsoft.BusinessData.xml", _String2="..") returned 1 [0154.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958798 [0154.837] wcscpy (in: _Dest=0x6958798, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.838] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.838] wcscat (in: _Dest=0x6958798, _Source="Microsoft.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" [0154.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0154.839] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7ba02c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0154.839] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2=".") returned 1 [0154.839] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2="..") returned 1 [0154.839] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="MIAF81~1.XML")) returned 1 [0154.839] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2=".") returned 1 [0154.839] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2="..") returned 1 [0154.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df0968 [0154.839] wcscpy (in: _Dest=0x3df0968, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.839] wcscat (in: _Dest=0x3df0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.839] wcscat (in: _Dest=0x3df0968, _Source="Microsoft.Office.BusinessApplications.Runtime.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" [0154.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0154.843] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1 [0154.843] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2=".") returned 1 [0154.843] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2="..") returned 1 [0154.843] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68711f00, ftCreationTime.dwHighDateTime=0x1ca25b6, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68711f00, ftLastWriteTime.dwHighDateTime=0x1ca25b6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="MICROS~3.XML")) returned 1 [0154.843] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2=".") returned 1 [0154.843] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2="..") returned 1 [0154.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defb58 [0154.844] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.844] wcscat (in: _Dest=0x3defb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.844] wcscat (in: _Dest=0x3defb58, _Source="Microsoft.Office.BusinessApplications.RuntimeUi.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" [0154.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3defb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0154.845] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xea780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MIB82D~1.DLL")) returned 1 [0154.845] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2=".") returned 1 [0154.845] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2="..") returned 1 [0154.845] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="MIB8A9~1.XML")) returned 1 [0154.845] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2=".") returned 1 [0154.845] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2="..") returned 1 [0154.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e030 [0154.845] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.845] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.845] wcscat (in: _Dest=0x697e030, _Source="Microsoft.Office.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" [0154.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0154.847] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cdca00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71cdca00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2=".") returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2="..") returned 1 [0154.847] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MI8F13~1.DLL")) returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2=".") returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2="..") returned 1 [0154.847] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2=".") returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2="..") returned 1 [0154.847] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="MICROS~4.XML")) returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2=".") returned 1 [0154.847] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2="..") returned 1 [0154.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332268 [0154.847] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.847] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.847] wcscat (in: _Dest=0x332268, _Source="Microsoft.Office.Interop.InfoPath.SemiTrust.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" [0154.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0154.849] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x8b8b5e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MI0E06~1.DLL")) returned 1 [0154.849] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2=".") returned 1 [0154.849] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2="..") returned 1 [0154.849] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf813d200, ftCreationTime.dwHighDateTime=0x1c9bc94, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf813d200, ftLastWriteTime.dwHighDateTime=0x1c9bc94, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0154.849] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2=".") returned 1 [0154.849] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2="..") returned 1 [0154.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7658 [0154.849] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.849] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.849] wcscat (in: _Dest=0x2ff7658, _Source="Microsoft.Office.Interop.InfoPath.Xml.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" [0154.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0154.850] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af05200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0xc02be9f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6af05200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1 [0154.850] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2=".") returned 1 [0154.850] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2="..") returned 1 [0154.850] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1 [0154.850] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2=".") returned 1 [0154.851] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2="..") returned 1 [0154.851] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x7e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="MI5DD9~1.DLL")) returned 1 [0154.851] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2=".") returned 1 [0154.851] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2="..") returned 1 [0154.851] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="MI14FC~1.XML")) returned 1 [0154.855] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2=".") returned 1 [0154.855] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2="..") returned 1 [0154.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3011fe0 [0154.855] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0154.855] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0154.856] wcscat (in: _Dest=0x3011fe0, _Source="Microsoft.SharePoint.BusinessData.Administration.Client.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" [0155.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0155.578] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1 [0155.578] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2=".") returned 1 [0155.578] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2="..") returned 1 [0155.578] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d30b1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x57760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0155.578] wcscmp (_String1="MIMEDIR.DLL", _String2=".") returned 1 [0155.578] wcscmp (_String1="MIMEDIR.DLL", _String2="..") returned 1 [0155.578] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5df52300, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5df52300, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0155.578] wcscmp (_String1="misc.exe", _String2=".") returned 1 [0155.578] wcscmp (_String1="misc.exe", _String2="..") returned 1 [0155.578] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0155.578] wcscmp (_String1="MLCFG32.CPL", _String2=".") returned 1 [0155.579] wcscmp (_String1="MLCFG32.CPL", _String2="..") returned 1 [0155.579] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0155.579] wcscmp (_String1="MLSHEXT.DLL", _String2=".") returned 1 [0155.579] wcscmp (_String1="MLSHEXT.DLL", _String2="..") returned 1 [0155.579] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3aedd00, ftCreationTime.dwHighDateTime=0x1c9ce63, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3aedd00, ftLastWriteTime.dwHighDateTime=0x1c9ce63, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0155.579] wcscmp (_String1="MML2OMML.XSL", _String2=".") returned 1 [0155.579] wcscmp (_String1="MML2OMML.XSL", _String2="..") returned 1 [0155.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0600 [0155.579] wcscpy (in: _Dest=0x66d0600, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.579] wcscat (in: _Dest=0x66d0600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.579] wcscat (in: _Dest=0x66d0600, _Source="MML2OMML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" [0155.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0155.580] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9263590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x72768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0155.580] wcscmp (_String1="MODELENG.DLL", _String2=".") returned 1 [0155.580] wcscmp (_String1="MODELENG.DLL", _String2="..") returned 1 [0155.580] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5331d000, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5331d000, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x6f990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0155.580] wcscmp (_String1="MORPH9.DLL", _String2=".") returned 1 [0155.580] wcscmp (_String1="MORPH9.DLL", _String2="..") returned 1 [0155.580] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe5bbdd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0155.581] wcscmp (_String1="MPXINT.DLL", _String2=".") returned 1 [0155.581] wcscmp (_String1="MPXINT.DLL", _String2="..") returned 1 [0155.581] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0155.581] wcscmp (_String1="MSACC.OLB", _String2=".") returned 1 [0155.581] wcscmp (_String1="MSACC.OLB", _String2="..") returned 1 [0155.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0ee8 [0155.581] wcscpy (in: _Dest=0x66d0ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.581] wcscat (in: _Dest=0x66d0ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.581] wcscat (in: _Dest=0x66d0ee8, _Source="MSACC.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" [0155.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0155.582] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xd57360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0155.582] wcscmp (_String1="MSACCESS.EXE", _String2=".") returned 1 [0155.582] wcscmp (_String1="MSACCESS.EXE", _String2="..") returned 1 [0155.582] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca972f00, ftCreationTime.dwHighDateTime=0x1cab83a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca972f00, ftLastWriteTime.dwHighDateTime=0x1cab83a, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="MSACCE~1.MAN")) returned 1 [0155.582] wcscmp (_String1="msaccess.exe.manifest", _String2=".") returned 1 [0155.582] wcscmp (_String1="msaccess.exe.manifest", _String2="..") returned 1 [0155.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0155.583] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.583] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.583] wcscat (in: _Dest=0x66dcc18, _Source="msaccess.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" [0155.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0155.584] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xf188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0155.584] wcscmp (_String1="MSAEXP30.DLL", _String2=".") returned 1 [0155.584] wcscmp (_String1="MSAEXP30.DLL", _String2="..") returned 1 [0155.584] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0155.584] wcscmp (_String1="MSCOL11.INF", _String2=".") returned 1 [0155.584] wcscmp (_String1="MSCOL11.INF", _String2="..") returned 1 [0155.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0ab0 [0155.584] wcscpy (in: _Dest=0x66d0ab0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.584] wcscat (in: _Dest=0x66d0ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.584] wcscat (in: _Dest=0x66d0ab0, _Source="MSCOL11.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" [0155.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0155.586] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465ba00, ftCreationTime.dwHighDateTime=0x1c2f2c8, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7465ba00, ftLastWriteTime.dwHighDateTime=0x1c2f2c8, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0155.586] wcscmp (_String1="MSCOL11.PPD", _String2=".") returned 1 [0155.586] wcscmp (_String1="MSCOL11.PPD", _String2="..") returned 1 [0155.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d08d0 [0155.586] wcscpy (in: _Dest=0x66d08d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.586] wcscat (in: _Dest=0x66d08d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.586] wcscat (in: _Dest=0x66d08d0, _Source="MSCOL11.PPD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" [0155.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d08d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0155.587] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896a5700, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd86ca110, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x896a5700, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="MSBB80~1.DUB")) returned 1 [0155.587] wcscmp (_String1="mscss7cm_en.dub", _String2=".") returned 1 [0155.587] wcscmp (_String1="mscss7cm_en.dub", _String2="..") returned 1 [0155.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b738 [0155.587] wcscpy (in: _Dest=0x674b738, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.587] wcscat (in: _Dest=0x674b738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.587] wcscat (in: _Dest=0x674b738, _Source="mscss7cm_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" [0155.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0155.589] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2f0b00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6849b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8e2f0b00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="MSCSS7~1.DUB")) returned 1 [0155.589] wcscmp (_String1="mscss7cm_es.dub", _String2=".") returned 1 [0155.589] wcscmp (_String1="mscss7cm_es.dub", _String2="..") returned 1 [0155.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b838 [0155.589] wcscpy (in: _Dest=0x674b838, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.589] wcscat (in: _Dest=0x674b838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.589] wcscat (in: _Dest=0x674b838, _Source="mscss7cm_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" [0155.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0155.590] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bccb100, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbd639b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8bccb100, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="MSCSS7~3.DUB")) returned 1 [0155.590] wcscmp (_String1="mscss7cm_fr.dub", _String2=".") returned 1 [0155.590] wcscmp (_String1="mscss7cm_fr.dub", _String2="..") returned 1 [0155.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b8b8 [0155.590] wcscpy (in: _Dest=0x674b8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.590] wcscat (in: _Dest=0x674b8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.590] wcscat (in: _Dest=0x674b8b8, _Source="mscss7cm_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" [0155.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0155.592] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f6fd00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xd8ef8cb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa3f6fd00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0155.592] wcscmp (_String1="mscss7en.dll", _String2=".") returned 1 [0155.592] wcscmp (_String1="mscss7en.dll", _String2="..") returned 1 [0155.592] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0155.592] wcscmp (_String1="mscss7es.dll", _String2=".") returned 1 [0155.592] wcscmp (_String1="mscss7es.dll", _String2="..") returned 1 [0155.592] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4909300, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdcf8a170, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa4909300, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0155.592] wcscmp (_String1="mscss7fr.dll", _String2=".") returned 1 [0155.592] wcscmp (_String1="mscss7fr.dll", _String2="..") returned 1 [0155.592] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9b8400, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd87d4ab0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8a9b8400, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="MS79E7~1.DUB")) returned 1 [0155.592] wcscmp (_String1="mscss7wre_en.dub", _String2=".") returned 1 [0155.592] wcscmp (_String1="mscss7wre_en.dub", _String2="..") returned 1 [0155.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b7b8 [0155.592] wcscpy (in: _Dest=0x674b7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.592] wcscat (in: _Dest=0x674b7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.592] wcscat (in: _Dest=0x674b7b8, _Source="mscss7wre_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" [0155.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0155.594] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f603800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8f603800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="MSCSS7~2.DUB")) returned 1 [0155.594] wcscmp (_String1="mscss7wre_es.dub", _String2=".") returned 1 [0155.594] wcscmp (_String1="mscss7wre_es.dub", _String2="..") returned 1 [0155.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b938 [0155.594] wcscpy (in: _Dest=0x674b938, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.594] wcscat (in: _Dest=0x674b938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.594] wcscat (in: _Dest=0x674b938, _Source="mscss7wre_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" [0155.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0155.595] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cfdde00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbe22090, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8cfdde00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="MSCSS7~4.DUB")) returned 1 [0155.595] wcscmp (_String1="mscss7wre_fr.dub", _String2=".") returned 1 [0155.595] wcscmp (_String1="mscss7wre_fr.dub", _String2="..") returned 1 [0155.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674bab8 [0155.595] wcscpy (in: _Dest=0x674bab8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.595] wcscat (in: _Dest=0x674bab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.595] wcscat (in: _Dest=0x674bab8, _Source="mscss7wre_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" [0155.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0155.597] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daad700, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80a59310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daad700, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x849a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0155.597] wcscmp (_String1="mset7.dll", _String2=".") returned 1 [0155.597] wcscmp (_String1="mset7.dll", _String2="..") returned 1 [0155.597] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eee2600, ftCreationTime.dwHighDateTime=0x1c87a58, ftLastAccessTime.dwLowDateTime=0x8d5dec10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eee2600, ftLastWriteTime.dwHighDateTime=0x1c87a58, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0155.597] wcscmp (_String1="mset7db.kic", _String2=".") returned 1 [0155.597] wcscmp (_String1="mset7db.kic", _String2="..") returned 1 [0155.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0768 [0155.597] wcscpy (in: _Dest=0x66d0768, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.597] wcscat (in: _Dest=0x66d0768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.597] wcscat (in: _Dest=0x66d0768, _Source="mset7db.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" [0155.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0155.598] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d604d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0155.598] wcscmp (_String1="mset7en.kic", _String2=".") returned 1 [0155.598] wcscmp (_String1="mset7en.kic", _String2="..") returned 1 [0155.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0678 [0155.599] wcscpy (in: _Dest=0x66d0678, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.599] wcscat (in: _Dest=0x66d0678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.599] wcscat (in: _Dest=0x66d0678, _Source="mset7en.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" [0155.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0155.600] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0155.600] wcscmp (_String1="mset7es.kic", _String2=".") returned 1 [0155.600] wcscmp (_String1="mset7es.kic", _String2="..") returned 1 [0155.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0150 [0155.600] wcscpy (in: _Dest=0x66d0150, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.600] wcscat (in: _Dest=0x66d0150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.600] wcscat (in: _Dest=0x66d0150, _Source="mset7es.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" [0155.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0155.601] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80a7f470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0155.601] wcscmp (_String1="mset7fr.kic", _String2=".") returned 1 [0155.601] wcscmp (_String1="mset7fr.kic", _String2="..") returned 1 [0155.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0060 [0155.601] wcscpy (in: _Dest=0x66d0060, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.601] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.602] wcscat (in: _Dest=0x66d0060, _Source="mset7fr.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" [0155.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0155.603] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80acb730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0155.603] wcscmp (_String1="mset7ge.kic", _String2=".") returned 1 [0155.603] wcscmp (_String1="mset7ge.kic", _String2="..") returned 1 [0155.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d03a8 [0155.603] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.603] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.603] wcscat (in: _Dest=0x66d03a8, _Source="mset7ge.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" [0155.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d03a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0155.604] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0155.604] wcscmp (_String1="mset7jp.kic", _String2=".") returned 1 [0155.604] wcscmp (_String1="mset7jp.kic", _String2="..") returned 1 [0155.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0858 [0155.604] wcscpy (in: _Dest=0x66d0858, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0155.604] wcscat (in: _Dest=0x66d0858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0155.605] wcscat (in: _Dest=0x66d0858, _Source="mset7jp.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" [0155.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0155.606] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400d3100, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x400d3100, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x7d188, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0156.378] wcscmp (_String1="mset7tk.dll", _String2=".") returned 1 [0156.378] wcscmp (_String1="mset7tk.dll", _String2="..") returned 1 [0156.378] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35529c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35529c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0xc0598, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="MSET7T~1.DLL")) returned 1 [0156.378] wcscmp (_String1="mset7tkjp.dll", _String2=".") returned 1 [0156.378] wcscmp (_String1="mset7tkjp.dll", _String2="..") returned 1 [0156.379] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feafd00, ftCreationTime.dwHighDateTime=0x1bf9d7f, ftLastAccessTime.dwLowDateTime=0x80b179f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2feafd00, ftLastWriteTime.dwHighDateTime=0x1bf9d7f, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0156.379] wcscmp (_String1="MSN.ICO", _String2=".") returned 1 [0156.379] wcscmp (_String1="MSN.ICO", _String2="..") returned 1 [0156.379] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49654b00, ftCreationTime.dwHighDateTime=0x1ca229f, ftLastAccessTime.dwLowDateTime=0x8d7cddf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49654b00, ftLastWriteTime.dwHighDateTime=0x1ca229f, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0156.379] wcscmp (_String1="MSO0127.ACL", _String2=".") returned 1 [0156.379] wcscmp (_String1="MSO0127.ACL", _String2="..") returned 1 [0156.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0240 [0156.379] wcscpy (in: _Dest=0x66d0240, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.379] wcscat (in: _Dest=0x66d0240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.379] wcscat (in: _Dest=0x66d0240, _Source="MSO0127.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" [0156.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0156.691] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x25578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0156.691] wcscmp (_String1="MSOCF.DLL", _String2=".") returned 1 [0156.691] wcscmp (_String1="MSOCF.DLL", _String2="..") returned 1 [0156.692] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0400, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefc0400, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x4990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0156.692] wcscmp (_String1="MSOCFU.DLL", _String2=".") returned 1 [0156.692] wcscmp (_String1="MSOCFU.DLL", _String2="..") returned 1 [0156.692] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="MSOCFU~1.DLL")) returned 1 [0156.692] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2=".") returned 1 [0156.692] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2="..") returned 1 [0156.692] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c14100, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5aae570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x83c14100, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7a760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0156.692] wcscmp (_String1="MSODCW.DLL", _String2=".") returned 1 [0156.692] wcscmp (_String1="MSODCW.DLL", _String2="..") returned 1 [0156.703] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74830500, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x80b3db50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74830500, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0156.703] wcscmp (_String1="MSOHEV.DLL", _String2=".") returned 1 [0156.703] wcscmp (_String1="MSOHEV.DLL", _String2="..") returned 1 [0156.703] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7220ab00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7220ab00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xf180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0156.703] wcscmp (_String1="MSOHEVI.DLL", _String2=".") returned 1 [0156.703] wcscmp (_String1="MSOHEVI.DLL", _String2="..") returned 1 [0156.703] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec9bc00, ftCreationTime.dwHighDateTime=0x1ca923e, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbec9bc00, ftLastWriteTime.dwHighDateTime=0x1ca923e, nFileSizeHigh=0x0, nFileSizeLow=0x11580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0156.703] wcscmp (_String1="MSOHTMED.EXE", _String2=".") returned 1 [0156.703] wcscmp (_String1="MSOHTMED.EXE", _String2="..") returned 1 [0156.703] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c893400, ftCreationTime.dwHighDateTime=0x1caca89, ftLastAccessTime.dwLowDateTime=0x80b63cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c893400, ftLastWriteTime.dwHighDateTime=0x1caca89, nFileSizeHigh=0x0, nFileSizeLow=0x8598, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0156.703] wcscmp (_String1="MSOSTYLE.DLL", _String2=".") returned 1 [0156.703] wcscmp (_String1="MSOSTYLE.DLL", _String2="..") returned 1 [0156.703] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17464200, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b46af0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x17464200, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0xaf780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0156.704] wcscmp (_String1="MSOSYNC.EXE", _String2=".") returned 1 [0156.704] wcscmp (_String1="MSOSYNC.EXE", _String2="..") returned 1 [0156.704] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16151500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16151500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x58178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0156.704] wcscmp (_String1="MSOUC.EXE", _String2=".") returned 1 [0156.704] wcscmp (_String1="MSOUC.EXE", _String2="..") returned 1 [0156.704] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x80b89e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0156.704] wcscmp (_String1="MSOUTL.OLB", _String2=".") returned 1 [0156.704] wcscmp (_String1="MSOUTL.OLB", _String2="..") returned 1 [0156.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0c18 [0156.704] wcscpy (in: _Dest=0x66d0c18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.704] wcscat (in: _Dest=0x66d0c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.704] wcscat (in: _Dest=0x66d0c18, _Source="MSOUTL.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" [0156.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0156.705] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe92896f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x33378, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0156.705] wcscmp (_String1="MSOUTLS.DLL", _String2=".") returned 1 [0156.705] wcscmp (_String1="MSOUTLS.DLL", _String2="..") returned 1 [0156.705] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8889300, ftCreationTime.dwHighDateTime=0x1caba87, ftLastAccessTime.dwLowDateTime=0xb6f5ac70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8889300, ftLastWriteTime.dwHighDateTime=0x1caba87, nFileSizeHigh=0x0, nFileSizeLow=0xd560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0156.705] wcscmp (_String1="MSPJEVTS.DLL", _String2=".") returned 1 [0156.705] wcscmp (_String1="MSPJEVTS.DLL", _String2="..") returned 1 [0156.706] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x80baff70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0156.706] wcscmp (_String1="MSPPT.OLB", _String2=".") returned 1 [0156.706] wcscmp (_String1="MSPPT.OLB", _String2="..") returned 1 [0156.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0e70 [0156.706] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.706] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.706] wcscat (in: _Dest=0x66d0e70, _Source="MSPPT.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" [0156.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0156.707] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0xd6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0156.707] wcscmp (_String1="MSPRJ.OLB", _String2=".") returned 1 [0156.707] wcscmp (_String1="MSPRJ.OLB", _String2="..") returned 1 [0156.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0d80 [0156.707] wcscpy (in: _Dest=0x66d0d80, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.707] wcscat (in: _Dest=0x66d0d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.707] wcscat (in: _Dest=0x66d0d80, _Source="MSPRJ.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" [0156.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0156.708] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xf85d3430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x35760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0156.708] wcscmp (_String1="msproof7.dll", _String2=".") returned 1 [0156.708] wcscmp (_String1="msproof7.dll", _String2="..") returned 1 [0156.708] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x12bbb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0156.708] wcscmp (_String1="MSPST32.DLL", _String2=".") returned 1 [0156.708] wcscmp (_String1="MSPST32.DLL", _String2="..") returned 1 [0156.708] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0156.708] wcscmp (_String1="MSPUB.EXE", _String2=".") returned 1 [0156.708] wcscmp (_String1="MSPUB.EXE", _String2="..") returned 1 [0156.708] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f1c700, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72f1c700, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="MSPUBE~1.MAN")) returned 1 [0156.708] wcscmp (_String1="mspub.exe.manifest", _String2=".") returned 1 [0156.709] wcscmp (_String1="mspub.exe.manifest", _String2="..") returned 1 [0156.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee630 [0156.709] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.709] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.709] wcscat (in: _Dest=0x66ee630, _Source="mspub.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" [0156.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0156.710] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e8f900, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86e8f900, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0156.710] wcscmp (_String1="MSPUB.TLB", _String2=".") returned 1 [0156.710] wcscmp (_String1="MSPUB.TLB", _String2="..") returned 1 [0156.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d06f0 [0156.710] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.710] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.710] wcscat (in: _Dest=0x66d06f0, _Source="MSPUB.TLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" [0156.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d06f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c22390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xa3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSQRY32.EXE", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSQRY32.EXE", _String2="..") returned 1 [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x17750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSRTEDIT.DLL", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSRTEDIT.DLL", _String2="..") returned 1 [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4ff8270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xab768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSTORDB.EXE", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSTORDB.EXE", _String2="..") returned 1 [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c484f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSTORE.EXE", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSTORE.EXE", _String2="..") returned 1 [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x66d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSTORES.DLL", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSTORES.DLL", _String2="..") returned 1 [0156.711] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf9f800, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x8dd75230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cf9f800, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0156.711] wcscmp (_String1="MSWORD.OLB", _String2=".") returned 1 [0156.711] wcscmp (_String1="MSWORD.OLB", _String2="..") returned 1 [0156.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0420 [0156.711] wcscpy (in: _Dest=0x66d0420, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.711] wcscat (in: _Dest=0x66d0420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.712] wcscat (in: _Dest=0x66d0420, _Source="MSWORD.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" [0156.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0156.713] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf611ed00, ftCreationTime.dwHighDateTime=0x1c9cea7, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf611ed00, ftLastWriteTime.dwHighDateTime=0x1c9cea7, nFileSizeHigh=0x0, nFileSizeLow=0x39530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0156.713] wcscmp (_String1="MSYUBIN7.DLL", _String2=".") returned 1 [0156.713] wcscmp (_String1="MSYUBIN7.DLL", _String2="..") returned 1 [0156.713] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a180200, ftCreationTime.dwHighDateTime=0x1c62b3a, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a180200, ftLastWriteTime.dwHighDateTime=0x1c62b3a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0156.713] wcscmp (_String1="MYSL.ICO", _String2=".") returned 1 [0156.713] wcscmp (_String1="MYSL.ICO", _String2="..") returned 1 [0156.713] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b400, ftCreationTime.dwHighDateTime=0x1cb707a, ftLastAccessTime.dwLowDateTime=0xf7a388f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16b400, ftLastWriteTime.dwHighDateTime=0x1cb707a, nFileSizeHigh=0x0, nFileSizeLow=0x14d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0156.713] wcscmp (_String1="NAME.DLL", _String2=".") returned 1 [0156.713] wcscmp (_String1="NAME.DLL", _String2="..") returned 1 [0156.713] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3208300, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3208300, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0156.713] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2=".") returned 1 [0156.713] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2="..") returned 1 [0156.713] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0be2900, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0be2900, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x15b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="NAMECO~1.EXE")) returned 1 [0156.832] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2=".") returned 1 [0156.832] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a51f00, ftCreationTime.dwHighDateTime=0x1ca919d, ftLastAccessTime.dwLowDateTime=0xb7065610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x95a51f00, ftLastWriteTime.dwHighDateTime=0x1ca919d, nFileSizeHigh=0x0, nFileSizeLow=0x21180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0156.832] wcscmp (_String1="NAMEEXT.DLL", _String2=".") returned 1 [0156.832] wcscmp (_String1="NAMEEXT.DLL", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e62300, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df18150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38e62300, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x71f1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="NL7DAT~1.DLL")) returned 1 [0156.832] wcscmp (_String1="NL7Data0011.DLL", _String2=".") returned 1 [0156.832] wcscmp (_String1="NL7Data0011.DLL", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a0b800, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80d9f150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43a0b800, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x2589b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="NL7LEX~1.DLL")) returned 1 [0156.832] wcscmp (_String1="NL7Lexicons0011.DLL", _String2=".") returned 1 [0156.832] wcscmp (_String1="NL7Lexicons0011.DLL", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd8e86890, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x5899b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="NL7MOD~3.DLL")) returned 1 [0156.832] wcscmp (_String1="NL7MODELS0009.dll", _String2=".") returned 1 [0156.832] wcscmp (_String1="NL7MODELS0009.dll", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdfdced10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5ef1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="NL7MOD~1.DLL")) returned 1 [0156.832] wcscmp (_String1="NL7MODELS000A.dll", _String2=".") returned 1 [0156.832] wcscmp (_String1="NL7MODELS000A.dll", _String2="..") returned 1 [0156.832] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9d5400, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcf3deb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xba9d5400, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5695b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="NL7MOD~2.DLL")) returned 1 [0156.832] wcscmp (_String1="NL7MODELS000C.dll", _String2=".") returned 1 [0156.832] wcscmp (_String1="NL7MODELS000C.dll", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48656c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48656c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x6529b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="NL7MOD~4.DLL")) returned 1 [0156.833] wcscmp (_String1="NL7Models0011.DLL", _String2=".") returned 1 [0156.833] wcscmp (_String1="NL7Models0011.DLL", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61256900, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61256900, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0156.833] wcscmp (_String1="NPAUTHZ.DLL", _String2=".") returned 1 [0156.833] wcscmp (_String1="NPAUTHZ.DLL", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0156.833] wcscmp (_String1="NPSPWRAP.DLL", _String2=".") returned 1 [0156.833] wcscmp (_String1="NPSPWRAP.DLL", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3593df00, ftCreationTime.dwHighDateTime=0x1cbe5d1, ftLastAccessTime.dwLowDateTime=0xfa74c990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x3593df00, ftLastWriteTime.dwHighDateTime=0x1cbe5d1, nFileSizeHigh=0x0, nFileSizeLow=0x1393168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0156.833] wcscmp (_String1="OART.DLL", _String2=".") returned 1 [0156.833] wcscmp (_String1="OART.DLL", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa4d600, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x811ef930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9fa4d600, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xa9b378, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0156.833] wcscmp (_String1="OARTCONV.DLL", _String2=".") returned 1 [0156.833] wcscmp (_String1="OARTCONV.DLL", _String2="..") returned 1 [0156.833] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0156.833] wcscmp (_String1="OCRHC.DAT", _String2=".") returned 1 [0156.833] wcscmp (_String1="OCRHC.DAT", _String2="..") returned 1 [0156.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d01c8 [0156.833] wcscpy (in: _Dest=0x66d01c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0156.833] wcscat (in: _Dest=0x66d01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0156.833] wcscat (in: _Dest=0x66d01c8, _Source="OCRHC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" [0157.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d01c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0157.256] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0157.256] wcscmp (_String1="OCRVC.DAT", _String2=".") returned 1 [0157.256] wcscmp (_String1="OCRVC.DAT", _String2="..") returned 1 [0157.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b1c8 [0157.257] wcscpy (in: _Dest=0x3f1b1c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.257] wcscat (in: _Dest=0x3f1b1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.257] wcscat (in: _Dest=0x3f1b1c8, _Source="OCRVC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" [0157.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0157.258] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0157.258] wcscmp (_String1="OEMPRINT.CAT", _String2=".") returned 1 [0157.258] wcscmp (_String1="OEMPRINT.CAT", _String2="..") returned 1 [0157.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0157.258] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.258] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.258] wcscat (in: _Dest=0x3f1ab38, _Source="OEMPRINT.CAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" [0157.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0157.259] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f5db00, ftCreationTime.dwHighDateTime=0x1cbd8c6, ftLastAccessTime.dwLowDateTime=0xf8834a30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa8f5db00, ftLastWriteTime.dwHighDateTime=0x1cbd8c6, nFileSizeHigh=0x0, nFileSizeLow=0x6f1180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0157.259] wcscmp (_String1="OFFOWC.DLL", _String2=".") returned 1 [0157.259] wcscmp (_String1="OFFOWC.DLL", _String2="..") returned 1 [0157.259] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfbe600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8150f610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfbe600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xdfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0157.259] wcscmp (_String1="OFFRHD.DLL", _String2=".") returned 1 [0157.260] wcscmp (_String1="OFFRHD.DLL", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aad100, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aad100, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x62178, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OFFXML.DLL", _String2=".") returned 1 [0157.260] wcscmp (_String1="OFFXML.DLL", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d87900, ftCreationTime.dwHighDateTime=0x1c6f433, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7d87900, ftLastWriteTime.dwHighDateTime=0x1c6f433, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="ogalegit.dll", _String2=".") returned 1 [0157.260] wcscmp (_String1="ogalegit.dll", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa657bf00, ftCreationTime.dwHighDateTime=0x1cb7064, ftLastAccessTime.dwLowDateTime=0xf8c12df0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa657bf00, ftLastWriteTime.dwHighDateTime=0x1cb7064, nFileSizeHigh=0x0, nFileSizeLow=0x352578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OIMG.DLL", _String2=".") returned 1 [0157.260] wcscmp (_String1="OIMG.DLL", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfaa46510, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x42f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OIS.EXE", _String2=".") returned 1 [0157.260] wcscmp (_String1="OIS.EXE", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab2ad50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0xd8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OISAPP.DLL", _String2=".") returned 1 [0157.260] wcscmp (_String1="OISAPP.DLL", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="oisctrl.dll", _String2=".") returned 1 [0157.260] wcscmp (_String1="oisctrl.dll", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab50eb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x3f778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OISGRAPH.DLL", _String2=".") returned 1 [0157.260] wcscmp (_String1="OISGRAPH.DLL", _String2="..") returned 1 [0157.260] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x3e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0157.260] wcscmp (_String1="OLKFSTUB.DLL", _String2=".") returned 1 [0157.261] wcscmp (_String1="OLKFSTUB.DLL", _String2="..") returned 1 [0157.261] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRM.XML", cAlternateFileName="")) returned 1 [0157.261] wcscmp (_String1="OLKIRM.XML", _String2=".") returned 1 [0157.261] wcscmp (_String1="OLKIRM.XML", _String2="..") returned 1 [0157.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aef8 [0157.261] wcscpy (in: _Dest=0x3f1aef8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.261] wcscat (in: _Dest=0x3f1aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.261] wcscat (in: _Dest=0x3f1aef8, _Source="OLKIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" [0157.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0157.262] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13594, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRMV.XML", cAlternateFileName="")) returned 1 [0157.262] wcscmp (_String1="OLKIRMV.XML", _String2=".") returned 1 [0157.262] wcscmp (_String1="OLKIRMV.XML", _String2="..") returned 1 [0157.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1a958 [0157.262] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.262] wcscat (in: _Dest=0x3f1a958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.262] wcscat (in: _Dest=0x3f1a958, _Source="OLKIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" [0157.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0157.264] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x30a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1 [0157.264] wcscmp (_String1="OLMAPI32.DLL", _String2=".") returned 1 [0157.264] wcscmp (_String1="OLMAPI32.DLL", _String2="..") returned 1 [0157.264] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d3b00, ftCreationTime.dwHighDateTime=0x1c9e609, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91d3b00, ftLastWriteTime.dwHighDateTime=0x1c9e609, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1 [0157.264] wcscmp (_String1="OMML2MML.XSL", _String2=".") returned 1 [0157.264] wcscmp (_String1="OMML2MML.XSL", _String2="..") returned 1 [0157.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b3a8 [0157.264] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.264] wcscat (in: _Dest=0x3f1b3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.264] wcscat (in: _Dest=0x3f1b3a8, _Source="OMML2MML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" [0157.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0157.265] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0xb0d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0157.265] wcscmp (_String1="OMSMAIN.DLL", _String2=".") returned 1 [0157.265] wcscmp (_String1="OMSMAIN.DLL", _String2="..") returned 1 [0157.265] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x39390, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0157.265] wcscmp (_String1="OMSXP32.DLL", _String2=".") returned 1 [0157.265] wcscmp (_String1="OMSXP32.DLL", _String2="..") returned 1 [0157.265] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x9d190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0157.266] wcscmp (_String1="ONBttnIE.dll", _String2=".") returned 1 [0157.266] wcscmp (_String1="ONBttnIE.dll", _String2="..") returned 1 [0157.266] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x79390, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0157.266] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2=".") returned 1 [0157.266] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2="..") returned 1 [0157.266] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e81ce00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e81ce00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0xaa580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0157.461] wcscmp (_String1="ONBttnOL.dll", _String2=".") returned 1 [0157.461] wcscmp (_String1="ONBttnOL.dll", _String2="..") returned 1 [0157.461] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1 [0157.461] wcscmp (_String1="ONBttnPPT.dll", _String2=".") returned 1 [0157.461] wcscmp (_String1="ONBttnPPT.dll", _String2="..") returned 1 [0157.461] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82378, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0157.461] wcscmp (_String1="ONBttnWD.dll", _String2=".") returned 1 [0157.461] wcscmp (_String1="ONBttnWD.dll", _String2="..") returned 1 [0157.461] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0157.461] wcscmp (_String1="OneNote", _String2=".") returned 1 [0157.461] wcscmp (_String1="OneNote", _String2="..") returned 1 [0157.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29560 [0157.461] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.461] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.461] wcscat (in: _Dest=0x3f29560, _Source="OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0157.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0157.950] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x816d8690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x199360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0157.950] wcscmp (_String1="ONENOTE.EXE", _String2=".") returned 1 [0157.950] wcscmp (_String1="ONENOTE.EXE", _String2="..") returned 1 [0157.950] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b55b00, ftCreationTime.dwHighDateTime=0x1ca1b71, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73b55b00, ftLastWriteTime.dwHighDateTime=0x1ca1b71, nFileSizeHigh=0x0, nFileSizeLow=0x138f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEIRM.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0157.950] wcscmp (_String1="ONENOTEIRM.XML", _String2=".") returned 1 [0157.950] wcscmp (_String1="ONENOTEIRM.XML", _String2="..") returned 1 [0157.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09b30 [0157.950] wcscpy (in: _Dest=0x3e09b30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.950] wcscat (in: _Dest=0x3e09b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.950] wcscat (in: _Dest=0x3e09b30, _Source="ONENOTEIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" [0157.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0157.951] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x37980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0157.951] wcscmp (_String1="ONENOTEM.EXE", _String2=".") returned 1 [0157.951] wcscmp (_String1="ONENOTEM.EXE", _String2="..") returned 1 [0157.951] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x22370, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEMANAGED.DLL", cAlternateFileName="ONENOT~2.DLL")) returned 1 [0157.951] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2=".") returned 1 [0157.951] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2="..") returned 1 [0157.951] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0xe0bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPC.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0157.951] wcscmp (_String1="OneNoteSyncPC.dll", _String2=".") returned 1 [0157.951] wcscmp (_String1="OneNoteSyncPC.dll", _String2="..") returned 1 [0157.951] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x11f970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0157.951] wcscmp (_String1="ONFILTER.DLL", _String2=".") returned 1 [0157.951] wcscmp (_String1="ONFILTER.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0157.952] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8187b5b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x8c1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ONMAIN.DLL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ONMAIN.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x88d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1 [0157.952] wcscmp (_String1="ONPPTAddin.dll", _String2=".") returned 1 [0157.952] wcscmp (_String1="ONPPTAddin.dll", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x96578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1 [0157.952] wcscmp (_String1="ONWordAddin.dll", _String2=".") returned 1 [0157.952] wcscmp (_String1="ONWordAddin.dll", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d2e570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x123188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ORGCHART.DLL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ORGCHART.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x70188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ORGCHWIZ.DLL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ORGCHWIZ.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ORGWIZ.EXE", _String2=".") returned 1 [0157.952] wcscmp (_String1="ORGWIZ.EXE", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x4fd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMELEMS.DLL", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ORMELEMS.DLL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ORMELEMS.DLL", _String2="..") returned 1 [0157.952] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbeea9050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xdf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMMODEL.MDL", cAlternateFileName="")) returned 1 [0157.952] wcscmp (_String1="ORMMODEL.MDL", _String2=".") returned 1 [0157.952] wcscmp (_String1="ORMMODEL.MDL", _String2="..") returned 1 [0157.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b498 [0157.952] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.953] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.953] wcscat (in: _Dest=0x3f1b498, _Source="ORMMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" [0157.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0157.953] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x3d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0157.953] wcscmp (_String1="OSPP.HTM", _String2=".") returned 1 [0157.954] wcscmp (_String1="OSPP.HTM", _String2="..") returned 1 [0157.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e62f8 [0157.954] wcscpy (in: _Dest=0x66e62f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.954] wcscat (in: _Dest=0x66e62f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.954] wcscat (in: _Dest=0x66e62f8, _Source="OSPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" [0157.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e62f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0157.954] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x81ab6a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0157.955] wcscmp (_String1="OSPP.VBS", _String2=".") returned 1 [0157.955] wcscmp (_String1="OSPP.VBS", _String2="..") returned 1 [0157.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5728 [0157.955] wcscpy (in: _Dest=0x66e5728, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.955] wcscat (in: _Dest=0x66e5728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.955] wcscat (in: _Dest=0x66e5728, _Source="OSPP.VBS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" [0157.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0157.956] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x7760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLACCT.DLL", cAlternateFileName="")) returned 1 [0157.956] wcscmp (_String1="OUTLACCT.DLL", _String2=".") returned 1 [0157.956] wcscmp (_String1="OUTLACCT.DLL", _String2="..") returned 1 [0157.956] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0157.956] wcscmp (_String1="OUTLCTL.DLL", _String2=".") returned 1 [0157.956] wcscmp (_String1="OUTLCTL.DLL", _String2="..") returned 1 [0157.956] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b48400, ftCreationTime.dwHighDateTime=0x1ca0b8d, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b48400, ftLastWriteTime.dwHighDateTime=0x1ca0b8d, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0157.956] wcscmp (_String1="OUTLFLTR.DAT", _String2=".") returned 1 [0157.956] wcscmp (_String1="OUTLFLTR.DAT", _String2="..") returned 1 [0157.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0157.956] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.956] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.956] wcscat (in: _Dest=0x3f1aac0, _Source="OUTLFLTR.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" [0157.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0157.957] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41fc600, ftCreationTime.dwHighDateTime=0x1ca50e7, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41fc600, ftLastWriteTime.dwHighDateTime=0x1ca50e7, nFileSizeHigh=0x0, nFileSizeLow=0xa5138, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0157.957] wcscmp (_String1="OUTLFLTR.DLL", _String2=".") returned 1 [0157.957] wcscmp (_String1="OUTLFLTR.DLL", _String2="..") returned 1 [0157.957] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x7fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0157.957] wcscmp (_String1="OUTLMIME.DLL", _String2=".") returned 1 [0157.957] wcscmp (_String1="OUTLMIME.DLL", _String2="..") returned 1 [0157.957] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xf27360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0157.957] wcscmp (_String1="OUTLOOK.EXE", _String2=".") returned 1 [0157.957] wcscmp (_String1="OUTLOOK.EXE", _String2="..") returned 1 [0157.957] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9830ba00, ftCreationTime.dwHighDateTime=0x1caca13, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9830ba00, ftLastWriteTime.dwHighDateTime=0x1caca13, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1 [0157.957] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2=".") returned 1 [0157.957] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2="..") returned 1 [0157.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0157.957] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0157.957] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0157.958] wcscat (in: _Dest=0x3f279c0, _Source="OUTLOOK.EXE.MANIFEST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" [0157.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0158.668] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1 [0158.668] wcscmp (_String1="OutlookAutoDiscover", _String2=".") returned 1 [0158.668] wcscmp (_String1="OutlookAutoDiscover", _String2="..") returned 1 [0158.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e500 [0158.668] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.668] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.669] wcscat (in: _Dest=0x36e500, _Source="OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0163.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0163.341] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50590, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1 [0163.341] wcscmp (_String1="OUTLPH.DLL", _String2=".") returned 1 [0163.341] wcscmp (_String1="OUTLPH.DLL", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xa958, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1 [0163.341] wcscmp (_String1="OUTLRPC.DLL", _String2=".") returned 1 [0163.341] wcscmp (_String1="OUTLRPC.DLL", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xd970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1 [0163.341] wcscmp (_String1="OUTLVBS.DLL", _String2=".") returned 1 [0163.341] wcscmp (_String1="OUTLVBS.DLL", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ccc500, ftCreationTime.dwHighDateTime=0x1cb7078, ftLastAccessTime.dwLowDateTime=0xf733a850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xc1ccc500, ftLastWriteTime.dwHighDateTime=0x1cb7078, nFileSizeHigh=0x0, nFileSizeLow=0x7ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0163.341] wcscmp (_String1="OWSCLT.DLL", _String2=".") returned 1 [0163.341] wcscmp (_String1="OWSCLT.DLL", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x20d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0163.343] wcscmp (_String1="OWSSUPP.DLL", _String2=".") returned 1 [0163.343] wcscmp (_String1="OWSSUPP.DLL", _String2="..") returned 1 [0163.343] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1 [0163.343] wcscmp (_String1="PAGESIZE", _String2=".") returned 1 [0163.343] wcscmp (_String1="PAGESIZE", _String2="..") returned 1 [0163.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29950 [0163.343] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.343] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.343] wcscat (in: _Dest=0x3f29950, _Source="PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0163.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x549a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDSBASE.DLL", cAlternateFileName="")) returned 1 [0163.786] wcscmp (_String1="PDSBASE.DLL", _String2=".") returned 1 [0163.786] wcscmp (_String1="PDSBASE.DLL", _String2="..") returned 1 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x86170, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.DLL", cAlternateFileName="")) returned 1 [0163.786] wcscmp (_String1="PE.DLL", _String2=".") returned 1 [0163.786] wcscmp (_String1="PE.DLL", _String2="..") returned 1 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b22a00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xf53b04d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xf4b22a00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x143a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="PEOPLE~1.DLL")) returned 1 [0163.786] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2=".") returned 1 [0163.786] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2="..") returned 1 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97b700, ftCreationTime.dwHighDateTime=0x1caba0d, ftLastAccessTime.dwLowDateTime=0xb773d550, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae97b700, ftLastWriteTime.dwHighDateTime=0x1caba0d, nFileSizeHigh=0x0, nFileSizeLow=0x22560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1 [0163.786] wcscmp (_String1="PJCALEND.DLL", _String2=".") returned 1 [0163.786] wcscmp (_String1="PJCALEND.DLL", _String2="..") returned 1 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x82037d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x20fd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1 [0163.786] wcscmp (_String1="POWERPNT.EXE", _String2=".") returned 1 [0163.786] wcscmp (_String1="POWERPNT.EXE", _String2="..") returned 1 [0163.786] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1591800, ftCreationTime.dwHighDateTime=0x1cabf03, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1591800, ftLastWriteTime.dwHighDateTime=0x1cabf03, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe.manifest", cAlternateFileName="POWERP~1.MAN")) returned 1 [0163.786] wcscmp (_String1="powerpnt.exe.manifest", _String2=".") returned 1 [0163.786] wcscmp (_String1="powerpnt.exe.manifest", _String2="..") returned 1 [0163.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0163.786] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.786] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.786] wcscat (in: _Dest=0x66dcd38, _Source="powerpnt.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" [0163.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0163.787] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x93f568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPCORE.DLL", cAlternateFileName="")) returned 1 [0163.787] wcscmp (_String1="PPCORE.DLL", _String2=".") returned 1 [0163.787] wcscmp (_String1="PPCORE.DLL", _String2="..") returned 1 [0163.787] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d9db00, ftCreationTime.dwHighDateTime=0x1cab83b, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0d9db00, ftLastWriteTime.dwHighDateTime=0x1cab83b, nFileSizeHigh=0x0, nFileSizeLow=0x5ef90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0163.788] wcscmp (_String1="PPSLAX.DLL", _String2=".") returned 1 [0163.788] wcscmp (_String1="PPSLAX.DLL", _String2="..") returned 1 [0163.788] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x39df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTICO.EXE", cAlternateFileName="")) returned 1 [0163.788] wcscmp (_String1="PPTICO.EXE", _String2=".") returned 1 [0163.788] wcscmp (_String1="PPTICO.EXE", _String2="..") returned 1 [0163.788] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRM.XML", cAlternateFileName="")) returned 1 [0163.788] wcscmp (_String1="PPTIRM.XML", _String2=".") returned 1 [0163.788] wcscmp (_String1="PPTIRM.XML", _String2="..") returned 1 [0163.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ac28 [0163.788] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.788] wcscat (in: _Dest=0x3f1ac28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.788] wcscat (in: _Dest=0x3f1ac28, _Source="PPTIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" [0163.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ac28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0163.789] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRMV.XML", cAlternateFileName="")) returned 1 [0163.789] wcscmp (_String1="PPTIRMV.XML", _String2=".") returned 1 [0163.789] wcscmp (_String1="PPTIRMV.XML", _String2="..") returned 1 [0163.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1af70 [0163.789] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.789] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.789] wcscat (in: _Dest=0x3f1af70, _Source="PPTIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" [0163.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0163.790] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13388, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1 [0163.790] wcscmp (_String1="PROJIMPT.EXE", _String2=".") returned 1 [0163.790] wcscmp (_String1="PROJIMPT.EXE", _String2="..") returned 1 [0163.790] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73272700, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73272700, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c960, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJMODL.DLL", cAlternateFileName="")) returned 1 [0163.790] wcscmp (_String1="PROJMODL.DLL", _String2=".") returned 1 [0163.790] wcscmp (_String1="PROJMODL.DLL", _String2="..") returned 1 [0163.790] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0163.790] wcscmp (_String1="PROOF", _String2=".") returned 1 [0163.790] wcscmp (_String1="PROOF", _String2="..") returned 1 [0163.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29330 [0163.791] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.791] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.791] wcscat (in: _Dest=0x3f29330, _Source="PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0163.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPMGR.DLL", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PROPMGR.DLL", _String2=".") returned 1 [0163.792] wcscmp (_String1="PROPMGR.DLL", _String2="..") returned 1 [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb3988, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PROPRPT.DLL", _String2=".") returned 1 [0163.792] wcscmp (_String1="PROPRPT.DLL", _String2="..") returned 1 [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x21f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PRTF9.DLL", _String2=".") returned 1 [0163.792] wcscmp (_String1="PRTF9.DLL", _String2="..") returned 1 [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4b568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PSTPRX32.DLL", _String2=".") returned 1 [0163.792] wcscmp (_String1="PSTPRX32.DLL", _String2="..") returned 1 [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x820f6410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PTXT9.DLL", _String2=".") returned 1 [0163.792] wcscmp (_String1="PTXT9.DLL", _String2="..") returned 1 [0163.792] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0163.792] wcscmp (_String1="PUBBA", _String2=".") returned 1 [0163.792] wcscmp (_String1="PUBBA", _String2="..") returned 1 [0163.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29cd0 [0163.792] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.793] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.793] wcscat (in: _Dest=0x3f29cd0, _Source="PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0163.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0163.794] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x93778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0163.794] wcscmp (_String1="PUBCONV.DLL", _String2=".") returned 1 [0163.794] wcscmp (_String1="PUBCONV.DLL", _String2="..") returned 1 [0163.794] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xbd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0163.794] wcscmp (_String1="PUBTRAP.DLL", _String2=".") returned 1 [0163.794] wcscmp (_String1="PUBTRAP.DLL", _String2="..") returned 1 [0163.794] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0163.794] wcscmp (_String1="PUBWIZ", _String2=".") returned 1 [0163.794] wcscmp (_String1="PUBWIZ", _String2="..") returned 1 [0163.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29480 [0163.794] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.794] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.794] wcscat (in: _Dest=0x3f29480, _Source="PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0163.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0163.795] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1 [0163.795] wcscmp (_String1="QUERIES", _String2=".") returned 1 [0163.795] wcscmp (_String1="QUERIES", _String2="..") returned 1 [0163.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29870 [0163.796] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.796] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.796] wcscat (in: _Dest=0x3f29870, _Source="QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0163.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0163.798] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x9d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1 [0163.798] wcscmp (_String1="RECALL.DLL", _String2=".") returned 1 [0163.798] wcscmp (_String1="RECALL.DLL", _String2="..") returned 1 [0163.798] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1 [0163.798] wcscmp (_String1="REFEDIT.DLL", _String2=".") returned 1 [0163.798] wcscmp (_String1="REFEDIT.DLL", _String2="..") returned 1 [0163.798] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f864b00, ftCreationTime.dwHighDateTime=0x1c5c856, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f864b00, ftLastWriteTime.dwHighDateTime=0x1c5c856, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1 [0163.798] wcscmp (_String1="REMINDER.WAV", _String2=".") returned 1 [0163.798] wcscmp (_String1="REMINDER.WAV", _String2="..") returned 1 [0163.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0163.799] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.799] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.799] wcscat (in: _Dest=0x3f1ab38, _Source="REMINDER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" [0163.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0163.800] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.DLL", cAlternateFileName="")) returned 1 [0163.800] wcscmp (_String1="REPORT.DLL", _String2=".") returned 1 [0163.800] wcscmp (_String1="REPORT.DLL", _String2="..") returned 1 [0163.800] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x903fd650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REVERSE.DLL", cAlternateFileName="")) returned 1 [0163.800] wcscmp (_String1="REVERSE.DLL", _String2=".") returned 1 [0163.800] wcscmp (_String1="REVERSE.DLL", _String2="..") returned 1 [0163.800] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30aa1100, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30aa1100, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1 [0163.800] wcscmp (_String1="RSWOP.ICM", _String2=".") returned 1 [0163.800] wcscmp (_String1="RSWOP.ICM", _String2="..") returned 1 [0163.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b1c8 [0163.800] wcscpy (in: _Dest=0x3f1b1c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.800] wcscat (in: _Dest=0x3f1b1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.800] wcscat (in: _Dest=0x3f1b1c8, _Source="RSWOP.ICM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM") returned="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" [0163.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0163.801] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x65570, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTFHTML.DLL", cAlternateFileName="")) returned 1 [0163.801] wcscmp (_String1="RTFHTML.DLL", _String2=".") returned 1 [0163.801] wcscmp (_String1="RTFHTML.DLL", _String2="..") returned 1 [0163.801] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494be600, ftCreationTime.dwHighDateTime=0x1ca9181, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x494be600, ftLastWriteTime.dwHighDateTime=0x1ca9181, nFileSizeHigh=0x0, nFileSizeLow=0x46d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1 [0163.801] wcscmp (_String1="SAEXT.DLL", _String2=".") returned 1 [0163.801] wcscmp (_String1="SAEXT.DLL", _String2="..") returned 1 [0163.801] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAMPLES", cAlternateFileName="")) returned 1 [0163.803] wcscmp (_String1="SAMPLES", _String2=".") returned 1 [0163.803] wcscmp (_String1="SAMPLES", _String2="..") returned 1 [0163.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29aa0 [0163.803] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0163.803] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0163.803] wcscat (in: _Dest=0x3f29aa0, _Source="SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0167.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x67b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SAVASWEB.DLL", _String2=".") returned 1 [0167.816] wcscmp (_String1="SAVASWEB.DLL", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SAVWBHF.DLL", _String2=".") returned 1 [0167.816] wcscmp (_String1="SAVWBHF.DLL", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2d988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SAVWBRAS.DLL", _String2=".") returned 1 [0167.816] wcscmp (_String1="SAVWBRAS.DLL", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SAVWBVML.DLL", _String2=".") returned 1 [0167.816] wcscmp (_String1="SAVWBVML.DLL", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x22988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBXAML.DLL", cAlternateFileName="SAVWBX~1.DLL")) returned 1 [0167.816] wcscmp (_String1="SAVWBXAML.DLL", _String2=".") returned 1 [0167.816] wcscmp (_String1="SAVWBXAML.DLL", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SCANPST.EXE", _String2=".") returned 1 [0167.816] wcscmp (_String1="SCANPST.EXE", _String2="..") returned 1 [0167.816] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x507a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="SCNPST32.DLL", _String2=".") returned 1 [0167.817] wcscmp (_String1="SCNPST32.DLL", _String2="..") returned 1 [0167.817] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x531b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1 [0167.817] wcscmp (_String1="SCNPST64.DLL", _String2=".") returned 1 [0167.817] wcscmp (_String1="SCNPST64.DLL", _String2="..") returned 1 [0167.817] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74536f00, ftCreationTime.dwHighDateTime=0x1c74aa6, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74536f00, ftLastWriteTime.dwHighDateTime=0x1c74aa6, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegoeChess.ttf", cAlternateFileName="SEGOEC~1.TTF")) returned 1 [0167.817] wcscmp (_String1="SegoeChess.ttf", _String2=".") returned 1 [0167.817] wcscmp (_String1="SegoeChess.ttf", _String2="..") returned 1 [0167.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbaf8 [0167.817] wcscpy (in: _Dest=0x3edbaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.817] wcscat (in: _Dest=0x3edbaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.817] wcscat (in: _Dest=0x3edbaf8, _Source="SegoeChess.ttf" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf") returned="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" [0167.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0167.818] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b690600, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c85210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7b690600, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7f590, dwReserved0=0x0, dwReserved1=0x0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="SELFCERT.EXE", _String2=".") returned 1 [0167.818] wcscmp (_String1="SELFCERT.EXE", _String2="..") returned 1 [0167.818] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="SENDTO.DLL", _String2=".") returned 1 [0167.818] wcscmp (_String1="SENDTO.DLL", _String2="..") returned 1 [0167.818] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef015400, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef015400, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x10b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="SEQCHK10.DLL", _String2=".") returned 1 [0167.818] wcscmp (_String1="SEQCHK10.DLL", _String2="..") returned 1 [0167.818] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="SETLANG.EXE", _String2=".") returned 1 [0167.818] wcscmp (_String1="SETLANG.EXE", _String2="..") returned 1 [0167.818] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2fd800, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8da0990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c2fd800, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x181968, dwReserved0=0x0, dwReserved1=0x0, cFileName="SG.DLL", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="SG.DLL", _String2=".") returned 1 [0167.819] wcscmp (_String1="SG.DLL", _String2="..") returned 1 [0167.819] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1 [0167.819] wcscmp (_String1="SHAPNUM.DLL", _String2=".") returned 1 [0167.819] wcscmp (_String1="SHAPNUM.DLL", _String2="..") returned 1 [0167.819] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x31b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="SHAREP~1.DLL")) returned 1 [0167.819] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2=".") returned 1 [0167.819] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2="..") returned 1 [0167.819] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7eef00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d7eef00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchPadTestSchema.xml", cAlternateFileName="SKETCH~1.XML")) returned 1 [0167.819] wcscmp (_String1="SketchPadTestSchema.xml", _String2=".") returned 1 [0167.819] wcscmp (_String1="SketchPadTestSchema.xml", _String2="..") returned 1 [0167.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0167.819] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.819] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.819] wcscat (in: _Dest=0x66db598, _Source="SketchPadTestSchema.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" [0167.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0167.820] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a90c00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23a90c00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x80fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0167.820] wcscmp (_String1="SLERROR.XML", _String2=".") returned 1 [0167.820] wcscmp (_String1="SLERROR.XML", _String2="..") returned 1 [0167.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0ee8 [0167.820] wcscpy (in: _Dest=0x66d0ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.820] wcscat (in: _Dest=0x66d0ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.820] wcscat (in: _Dest=0x66d0ee8, _Source="SLERROR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" [0167.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0167.821] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc9be00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0xbf2612b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccc9be00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x23170, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.DLL", cAlternateFileName="")) returned 1 [0167.821] wcscmp (_String1="SMIGRATE.DLL", _String2=".") returned 1 [0167.821] wcscmp (_String1="SMIGRATE.DLL", _String2="..") returned 1 [0167.821] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0x7ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1 [0167.822] wcscmp (_String1="SOA.DLL", _String2=".") returned 1 [0167.822] wcscmp (_String1="SOA.DLL", _String2="..") returned 1 [0167.822] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x1a0f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0167.822] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2=".") returned 1 [0167.822] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2="..") returned 1 [0167.822] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdec9400, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdec9400, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x7ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="SOCIAL~2.DLL")) returned 1 [0167.822] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2=".") returned 1 [0167.822] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2="..") returned 1 [0167.822] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1 [0167.822] wcscmp (_String1="SOLUTILS.DLL", _String2=".") returned 1 [0167.822] wcscmp (_String1="SOLUTILS.DLL", _String2="..") returned 1 [0167.822] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66535f00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4bc03150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66535f00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x597e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPANISH.LNG", cAlternateFileName="")) returned 1 [0167.822] wcscmp (_String1="SPANISH.LNG", _String2=".") returned 1 [0167.822] wcscmp (_String1="SPANISH.LNG", _String2="..") returned 1 [0167.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d00d8 [0167.822] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.822] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.822] wcscat (in: _Dest=0x66d00d8, _Source="SPANISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" [0167.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0167.823] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dc200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c4dc200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0167.823] wcscmp (_String1="SplashScreen.bmp", _String2=".") returned 1 [0167.823] wcscmp (_String1="SplashScreen.bmp", _String2="..") returned 1 [0167.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda378 [0167.823] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.823] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.823] wcscat (in: _Dest=0x3eda378, _Source="SplashScreen.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" [0167.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0167.824] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLSHARE.DLL", cAlternateFileName="")) returned 1 [0167.824] wcscmp (_String1="SQLSHARE.DLL", _String2=".") returned 1 [0167.824] wcscmp (_String1="SQLSHARE.DLL", _String2="..") returned 1 [0167.824] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455f7900, ftCreationTime.dwHighDateTime=0x1ca50e8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x455f7900, ftLastWriteTime.dwHighDateTime=0x1ca50e8, nFileSizeHigh=0x0, nFileSizeLow=0x29540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSGEN.DLL", cAlternateFileName="")) returned 1 [0167.824] wcscmp (_String1="SSGEN.DLL", _String2=".") returned 1 [0167.824] wcscmp (_String1="SSGEN.DLL", _String2="..") returned 1 [0167.825] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0167.825] wcscmp (_String1="STARTUP", _String2=".") returned 1 [0167.825] wcscmp (_String1="STARTUP", _String2="..") returned 1 [0167.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3648c0 [0167.825] wcscpy (in: _Dest=0x3648c0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.825] wcscat (in: _Dest=0x3648c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.825] wcscat (in: _Dest=0x3648c0, _Source="STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0167.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3648c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0167.826] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x16f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0167.826] wcscmp (_String1="STSCOPY.DLL", _String2=".") returned 1 [0167.826] wcscmp (_String1="STSCOPY.DLL", _String2="..") returned 1 [0167.826] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102eaf00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xf5364210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x102eaf00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1 [0167.826] wcscmp (_String1="STSLIST.DLL", _String2=".") returned 1 [0167.826] wcscmp (_String1="STSLIST.DLL", _String2="..") returned 1 [0167.826] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0167.826] wcscmp (_String1="STSUPLD.DLL", _String2=".") returned 1 [0167.826] wcscmp (_String1="STSUPLD.DLL", _String2="..") returned 1 [0167.826] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x18b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="STYLEMGR.DLL", cAlternateFileName="")) returned 1 [0167.826] wcscmp (_String1="STYLEMGR.DLL", _String2=".") returned 1 [0167.826] wcscmp (_String1="STYLEMGR.DLL", _String2="..") returned 1 [0167.826] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9dc8600, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x7f10e950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9dc8600, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x15f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="subscription.xsd", cAlternateFileName="SUBSCR~1.XSD")) returned 1 [0167.828] wcscmp (_String1="subscription.xsd", _String2=".") returned 1 [0167.828] wcscmp (_String1="subscription.xsd", _String2="..") returned 1 [0167.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb778 [0167.828] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0167.828] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0167.828] wcscat (in: _Dest=0x3edb778, _Source="subscription.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" [0172.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd")) returned 0x20 [0172.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0172.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.668] GetLastError () returned 0x5 [0172.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0172.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 [0172.668] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xc798, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMINFO.DLL", cAlternateFileName="")) returned 1 [0172.668] wcscmp (_String1="SUMINFO.DLL", _String2=".") returned 1 [0172.668] wcscmp (_String1="SUMINFO.DLL", _String2="..") returned 1 [0172.668] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5786bc00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5786bc00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x17d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaxonomyControl.dll", cAlternateFileName="TAXONO~1.DLL")) returned 1 [0172.668] wcscmp (_String1="TaxonomyControl.dll", _String2=".") returned 1 [0172.668] wcscmp (_String1="TaxonomyControl.dll", _String2="..") returned 1 [0172.668] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77322a00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77322a00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCR.PSP", cAlternateFileName="")) returned 1 [0172.668] wcscmp (_String1="THOCR.PSP", _String2=".") returned 1 [0172.668] wcscmp (_String1="THOCR.PSP", _String2="..") returned 1 [0172.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3014fe0 [0172.668] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.668] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.668] wcscat (in: _Dest=0x3014fe0, _Source="THOCR.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" [0172.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp")) returned 0x20 [0172.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP", dwFileAttributes=0x20) returned 0 [0172.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.669] GetLastError () returned 0x5 [0172.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP", dwFileAttributes=0x20) returned 0 [0172.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.669] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfaf7b530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCRAPI.DLL", cAlternateFileName="")) returned 1 [0172.669] wcscmp (_String1="THOCRAPI.DLL", _String2=".") returned 1 [0172.669] wcscmp (_String1="THOCRAPI.DLL", _String2="..") returned 1 [0172.669] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8dc6af0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1 [0172.669] wcscmp (_String1="TIMESOLN.DLL", _String2=".") returned 1 [0172.669] wcscmp (_String1="TIMESOLN.DLL", _String2="..") returned 1 [0172.669] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1 [0172.669] wcscmp (_String1="TLIMPT.EXE", _String2=".") returned 1 [0172.669] wcscmp (_String1="TLIMPT.EXE", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfb085ed0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x20b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTCHR.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWCUTCHR.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWCUTCHR.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x16380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTLIN.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWCUTLIN.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWCUTLIN.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xe978, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWLAY32.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWLAY32.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWLAY32.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWORIENT.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWORIENT.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWORIENT.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x8780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECC.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWRECC.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWRECC.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xd180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECE.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWRECE.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWRECE.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECS.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWRECS.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWRECS.DLL", _String2="..") returned 1 [0172.670] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x13b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWSTRUCT.DLL", cAlternateFileName="")) returned 1 [0172.670] wcscmp (_String1="TWSTRUCT.DLL", _String2=".") returned 1 [0172.670] wcscmp (_String1="TWSTRUCT.DLL", _String2="..") returned 1 [0172.671] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8decc50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x193f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.DLL", cAlternateFileName="")) returned 1 [0172.671] wcscmp (_String1="UML.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="UML.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfbc0950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x78f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSYS.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="UMLSYS.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="UMLSYS.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x22568, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVB.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="UMLVB.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="UMLVB.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xbfccb2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x22768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="UMLVC60.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="UMLVC60.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x3c378, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVS.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="UMLVS.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="UMLVS.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e40500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c5f0b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xe7e40500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x89190, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="URLREDIR.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="URLREDIR.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VAOSOLX.DLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="VAOSOLX.DLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="VAOSOLX.DLL", _String2="..") returned 1 [0172.672] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1b5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0007.TLL", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="VBLZ0007.TLL", _String2=".") returned 1 [0172.672] wcscmp (_String1="VBLZ0007.TLL", _String2="..") returned 1 [0172.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.673] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.673] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.673] wcscat (in: _Dest=0x3014fe0, _Source="VBLZ0007.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" [0172.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll")) returned 0x20 [0172.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL", dwFileAttributes=0x20) returned 0 [0172.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.673] GetLastError () returned 0x5 [0172.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL", dwFileAttributes=0x20) returned 0 [0172.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.674] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x18fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0009.TLL", cAlternateFileName="")) returned 1 [0172.674] wcscmp (_String1="VBLZ0009.TLL", _String2=".") returned 1 [0172.674] wcscmp (_String1="VBLZ0009.TLL", _String2="..") returned 1 [0172.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.674] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.674] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.674] wcscat (in: _Dest=0x3014fe0, _Source="VBLZ0009.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" [0172.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll")) returned 0x20 [0172.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL", dwFileAttributes=0x20) returned 0 [0172.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.675] GetLastError () returned 0x5 [0172.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL", dwFileAttributes=0x20) returned 0 [0172.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.675] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x203d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ000C.TLL", cAlternateFileName="")) returned 1 [0172.675] wcscmp (_String1="VBLZ000C.TLL", _String2=".") returned 1 [0172.675] wcscmp (_String1="VBLZ000C.TLL", _String2="..") returned 1 [0172.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.675] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.675] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.675] wcscat (in: _Dest=0x3014fe0, _Source="VBLZ000C.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" [0172.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll")) returned 0x20 [0172.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL", dwFileAttributes=0x20) returned 0 [0172.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.676] GetLastError () returned 0x5 [0172.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL", dwFileAttributes=0x20) returned 0 [0172.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.676] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x17be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0011.TLL", cAlternateFileName="")) returned 1 [0172.676] wcscmp (_String1="VBLZ0011.TLL", _String2=".") returned 1 [0172.676] wcscmp (_String1="VBLZ0011.TLL", _String2="..") returned 1 [0172.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.676] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.676] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.676] wcscat (in: _Dest=0x3014fe0, _Source="VBLZ0011.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" [0172.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll")) returned 0x20 [0172.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL", dwFileAttributes=0x20) returned 0 [0172.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.677] GetLastError () returned 0x5 [0172.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL", dwFileAttributes=0x20) returned 0 [0172.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.677] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1 [0172.677] wcscmp (_String1="VBS2EXCL.XSL", _String2=".") returned 1 [0172.677] wcscmp (_String1="VBS2EXCL.XSL", _String2="..") returned 1 [0172.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.677] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.677] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.677] wcscat (in: _Dest=0x3014fe0, _Source="VBS2EXCL.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" [0172.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl")) returned 0x20 [0172.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL", dwFileAttributes=0x20) returned 0 [0172.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.678] GetLastError () returned 0x5 [0172.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL", dwFileAttributes=0x20) returned 0 [0172.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.678] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1 [0172.678] wcscmp (_String1="VBS2WORD.XSL", _String2=".") returned 1 [0172.678] wcscmp (_String1="VBS2WORD.XSL", _String2="..") returned 1 [0172.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0172.678] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.678] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.678] wcscat (in: _Dest=0x3014fe0, _Source="VBS2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" [0172.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl")) returned 0x20 [0172.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL", dwFileAttributes=0x20) returned 0 [0172.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.679] GetLastError () returned 0x5 [0172.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL", dwFileAttributes=0x20) returned 0 [0172.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.679] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a67000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82a67000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VERBWIND.DLL", cAlternateFileName="")) returned 1 [0172.679] wcscmp (_String1="VERBWIND.DLL", _String2=".") returned 1 [0172.679] wcscmp (_String1="VERBWIND.DLL", _String2="..") returned 1 [0172.679] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1 [0172.679] wcscmp (_String1="VIEWMODL.DLL", _String2=".") returned 1 [0172.679] wcscmp (_String1="VIEWMODL.DLL", _String2="..") returned 1 [0172.679] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c7c500, ftCreationTime.dwHighDateTime=0x1cbb8ec, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87c7c500, ftLastWriteTime.dwHighDateTime=0x1cbb8ec, nFileSizeHigh=0x0, nFileSizeLow=0x992d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1 [0172.679] wcscmp (_String1="VISBRGR.DLL", _String2=".") returned 1 [0172.679] wcscmp (_String1="VISBRGR.DLL", _String2="..") returned 1 [0172.680] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x36970, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1 [0172.680] wcscmp (_String1="VISCOLOR.DLL", _String2=".") returned 1 [0172.680] wcscmp (_String1="VISCOLOR.DLL", _String2="..") returned 1 [0172.680] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x21f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1 [0172.680] wcscmp (_String1="VISDLGU.DLL", _String2=".") returned 1 [0172.680] wcscmp (_String1="VISDLGU.DLL", _String2="..") returned 1 [0172.680] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4a3000, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c4a3000, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x88f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISGRF.DLL", cAlternateFileName="")) returned 1 [0172.680] wcscmp (_String1="VISGRF.DLL", _String2=".") returned 1 [0172.680] wcscmp (_String1="VISGRF.DLL", _String2="..") returned 1 [0172.680] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dde200, ftCreationTime.dwHighDateTime=0x1cb706c, ftLastAccessTime.dwLowDateTime=0xe8f1d750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77dde200, ftLastWriteTime.dwHighDateTime=0x1cb706c, nFileSizeHigh=0x0, nFileSizeLow=0x11bd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1 [0172.680] wcscmp (_String1="VISICON.EXE", _String2=".") returned 1 [0172.680] wcscmp (_String1="VISICON.EXE", _String2="..") returned 1 [0172.680] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Content", cAlternateFileName="VISIOC~1")) returned 1 [0172.680] wcscmp (_String1="Visio Content", _String2=".") returned 1 [0172.680] wcscmp (_String1="Visio Content", _String2="..") returned 1 [0172.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb778 [0172.680] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.680] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.680] wcscat (in: _Dest=0x3edb778, _Source="Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0172.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbef8 [0172.680] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0172.680] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\" [0172.681] wcscat (in: _Dest=0x3edbef8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*" [0172.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0172.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0173.597] wcscmp (_String1=".", _String2=".") returned 0 [0173.597] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.597] wcscmp (_String1="..", _String2=".") returned 1 [0173.597] wcscmp (_String1="..", _String2="..") returned 0 [0173.597] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0173.597] wcscmp (_String1="1033", _String2=".") returned 1 [0173.597] wcscmp (_String1="1033", _String2="..") returned 1 [0173.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f272d8 [0173.597] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0173.597] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\" [0173.597] wcscat (in: _Dest=0x3f272d8, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0177.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0177.502] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0177.503] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0177.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0177.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 [0177.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 [0177.503] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe8f438b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0x169f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1 [0177.503] wcscmp (_String1="VISIO.EXE", _String2=".") returned 1 [0177.503] wcscmp (_String1="VISIO.EXE", _String2="..") returned 1 [0177.503] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5180100, ftCreationTime.dwHighDateTime=0x1cac24d, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5180100, ftLastWriteTime.dwHighDateTime=0x1cac24d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe.manifest", cAlternateFileName="VISIOE~1.MAN")) returned 1 [0177.503] wcscmp (_String1="visio.exe.manifest", _String2=".") returned 1 [0177.503] wcscmp (_String1="visio.exe.manifest", _String2="..") returned 1 [0177.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0177.503] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.503] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.504] wcscat (in: _Dest=0x66efa60, _Source="visio.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" [0177.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0177.505] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478e4300, ftCreationTime.dwHighDateTime=0x1c9abac, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x478e4300, ftLastWriteTime.dwHighDateTime=0x1c9abac, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioCustom.propdesc", cAlternateFileName="VISIOC~1.PRO")) returned 1 [0177.505] wcscmp (_String1="VisioCustom.propdesc", _String2=".") returned 1 [0177.505] wcscmp (_String1="VisioCustom.propdesc", _String2="..") returned 1 [0177.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0177.505] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.505] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.505] wcscat (in: _Dest=0x66ef268, _Source="VisioCustom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" [0177.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0177.506] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe904e250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0xcfb368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISLIB.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISLIB.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISLIB.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xc0226470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x62b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISOCX.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISOCX.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISOCX.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xdbd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSHE.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISSHE.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISSHE.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x83b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSUPP.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISSUPP.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISSUPP.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISUTILS.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISUTILS.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xaab88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISWEB.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISWEB.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc0272730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x14180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISXDATA.DLL", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VISXDATA.DLL", _String2=".") returned 1 [0177.507] wcscmp (_String1="VISXDATA.DLL", _String2="..") returned 1 [0177.507] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x8d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPREVIEW.EXE", cAlternateFileName="")) returned 1 [0177.507] wcscmp (_String1="VPREVIEW.EXE", _String2=".") returned 1 [0177.508] wcscmp (_String1="VPREVIEW.EXE", _String2="..") returned 1 [0177.508] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x582978, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0177.508] wcscmp (_String1="VVIEWDWG.DLL", _String2=".") returned 1 [0177.508] wcscmp (_String1="VVIEWDWG.DLL", _String2="..") returned 1 [0177.508] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad7e00, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbad7e00, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0177.508] wcscmp (_String1="VVIEWER.DLL", _String2=".") returned 1 [0177.508] wcscmp (_String1="VVIEWER.DLL", _String2="..") returned 1 [0177.508] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952ee00, ftCreationTime.dwHighDateTime=0x1cbe026, ftLastAccessTime.dwLowDateTime=0xfadb24b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x952ee00, ftLastWriteTime.dwHighDateTime=0x1cbe026, nFileSizeHigh=0x0, nFileSizeLow=0xd3b960, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE", cAlternateFileName="")) returned 1 [0177.508] wcscmp (_String1="WINPROJ.EXE", _String2=".") returned 1 [0177.508] wcscmp (_String1="WINPROJ.EXE", _String2="..") returned 1 [0177.508] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665000, ftCreationTime.dwHighDateTime=0x1caba0c, ftLastAccessTime.dwLowDateTime=0xb809cbf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7665000, ftLastWriteTime.dwHighDateTime=0x1caba0c, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe.manifest", cAlternateFileName="WINPRO~1.MAN")) returned 1 [0177.508] wcscmp (_String1="winproj.exe.manifest", _String2=".") returned 1 [0177.508] wcscmp (_String1="winproj.exe.manifest", _String2="..") returned 1 [0177.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeda0 [0177.508] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.508] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.508] wcscat (in: _Dest=0x66eeda0, _Source="winproj.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" [0177.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0177.509] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x15b358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.EXE", cAlternateFileName="")) returned 1 [0177.509] wcscmp (_String1="WINWORD.EXE", _String2=".") returned 1 [0177.509] wcscmp (_String1="WINWORD.EXE", _String2="..") returned 1 [0177.509] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x535158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnv.dll", cAlternateFileName="")) returned 1 [0177.510] wcscmp (_String1="Wordcnv.dll", _String2=".") returned 1 [0177.510] wcscmp (_String1="Wordcnv.dll", _String2="..") returned 1 [0177.510] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvpxy.cnv", cAlternateFileName="WORDCN~1.CNV")) returned 1 [0177.510] wcscmp (_String1="Wordcnvpxy.cnv", _String2=".") returned 1 [0177.510] wcscmp (_String1="Wordcnvpxy.cnv", _String2="..") returned 1 [0177.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb778 [0177.510] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.510] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.510] wcscat (in: _Dest=0x3edb778, _Source="Wordcnvpxy.cnv" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv") returned="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" [0177.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0177.511] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x62f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvr.dll", cAlternateFileName="")) returned 1 [0177.511] wcscmp (_String1="Wordcnvr.dll", _String2=".") returned 1 [0177.511] wcscmp (_String1="Wordcnvr.dll", _String2="..") returned 1 [0177.511] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordconv.exe", cAlternateFileName="")) returned 1 [0177.511] wcscmp (_String1="Wordconv.exe", _String2=".") returned 1 [0177.511] wcscmp (_String1="Wordconv.exe", _String2="..") returned 1 [0177.511] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDICON.EXE", cAlternateFileName="")) returned 1 [0177.511] wcscmp (_String1="WORDICON.EXE", _String2=".") returned 1 [0177.511] wcscmp (_String1="WORDICON.EXE", _String2="..") returned 1 [0177.511] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1373c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRM.XML", cAlternateFileName="")) returned 1 [0177.511] wcscmp (_String1="WORDIRM.XML", _String2=".") returned 1 [0177.511] wcscmp (_String1="WORDIRM.XML", _String2="..") returned 1 [0177.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d580 [0177.512] wcscpy (in: _Dest=0x3f1d580, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.512] wcscat (in: _Dest=0x3f1d580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.512] wcscat (in: _Dest=0x3f1d580, _Source="WORDIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" [0177.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0177.513] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13584, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRMV.XML", cAlternateFileName="")) returned 1 [0177.513] wcscmp (_String1="WORDIRMV.XML", _String2=".") returned 1 [0177.513] wcscmp (_String1="WORDIRMV.XML", _String2="..") returned 1 [0177.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0177.513] wcscpy (in: _Dest=0x3f1d148, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.513] wcscat (in: _Dest=0x3f1d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.513] wcscat (in: _Dest=0x3f1d148, _Source="WORDIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" [0177.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0177.514] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x5d178, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.DLL", cAlternateFileName="")) returned 1 [0177.514] wcscmp (_String1="WORKFLOW.DLL", _String2=".") returned 1 [0177.514] wcscmp (_String1="WORKFLOW.DLL", _String2="..") returned 1 [0177.514] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x1279358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWLIB.DLL", cAlternateFileName="")) returned 1 [0177.515] wcscmp (_String1="WWLIB.DLL", _String2=".") returned 1 [0177.515] wcscmp (_String1="WWLIB.DLL", _String2="..") returned 1 [0177.515] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6eb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.DLL", cAlternateFileName="")) returned 1 [0177.515] wcscmp (_String1="XFUNC.DLL", _String2=".") returned 1 [0177.515] wcscmp (_String1="XFUNC.DLL", _String2="..") returned 1 [0177.515] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x924de630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xc0998, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIMAGE3B.DLL", cAlternateFileName="")) returned 1 [0177.515] wcscmp (_String1="XIMAGE3B.DLL", _String2=".") returned 1 [0177.515] wcscmp (_String1="XIMAGE3B.DLL", _String2="..") returned 1 [0177.515] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738d5300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCALL32.DLL", cAlternateFileName="")) returned 1 [0177.515] wcscmp (_String1="XLCALL32.DLL", _String2=".") returned 1 [0177.515] wcscmp (_String1="XLCALL32.DLL", _String2="..") returned 1 [0177.515] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13784, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCPRTID.XML", cAlternateFileName="")) returned 1 [0177.515] wcscmp (_String1="XLCPRTID.XML", _String2=".") returned 1 [0177.515] wcscmp (_String1="XLCPRTID.XML", _String2="..") returned 1 [0177.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dd78 [0177.515] wcscpy (in: _Dest=0x3f1dd78, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.515] wcscat (in: _Dest=0x3f1dd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.515] wcscat (in: _Dest=0x3f1dd78, _Source="XLCPRTID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" [0177.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1dd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0177.517] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60577d00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60577d00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x169360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLICONS.EXE", cAlternateFileName="")) returned 1 [0177.517] wcscmp (_String1="XLICONS.EXE", _String2=".") returned 1 [0177.517] wcscmp (_String1="XLICONS.EXE", _String2="..") returned 1 [0177.517] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0177.517] wcscmp (_String1="XLSTART", _String2=".") returned 1 [0177.517] wcscmp (_String1="XLSTART", _String2="..") returned 1 [0177.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29bf0 [0177.517] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.517] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.517] wcscat (in: _Dest=0x3f29bf0, _Source="XLSTART" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" [0177.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0177.518] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5204dc00, ftCreationTime.dwHighDateTime=0x1c43cd4, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5204dc00, ftLastWriteTime.dwHighDateTime=0x1c43cd4, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1 [0177.518] wcscmp (_String1="XML2WORD.XSL", _String2=".") returned 1 [0177.518] wcscmp (_String1="XML2WORD.XSL", _String2="..") returned 1 [0177.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0177.519] wcscpy (in: _Dest=0x3f1d9b8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.519] wcscat (in: _Dest=0x3f1d9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.519] wcscat (in: _Dest=0x3f1d9b8, _Source="XML2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" [0177.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0177.520] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ecbf00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81ecbf00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOCR3.PSP", cAlternateFileName="")) returned 1 [0177.520] wcscmp (_String1="XOCR3.PSP", _String2=".") returned 1 [0177.520] wcscmp (_String1="XOCR3.PSP", _String2="..") returned 1 [0177.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d760 [0177.520] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.520] wcscat (in: _Dest=0x3f1d760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.520] wcscat (in: _Dest=0x3f1d760, _Source="XOCR3.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" [0177.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0177.522] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 1 [0177.522] wcscmp (_String1="XPAGE3C.DLL", _String2=".") returned 1 [0177.522] wcscmp (_String1="XPAGE3C.DLL", _String2="..") returned 1 [0177.522] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 0 [0177.522] FindClose (in: hFindFile=0x3e80ef8 | out: hFindFile=0x3e80ef8) returned 1 [0177.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12be8) returned 1 [0177.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d8b8) returned 1 [0177.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5f48) returned 1 Thread: id = 165 os_tid = 0xb48 [0131.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bd18 [0131.827] wcscpy (in: _Dest=0x3d8bd18, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0131.827] wcscat (in: _Dest=0x3d8bd18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0131.827] wcscat (in: _Dest=0x3d8bd18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\*" [0131.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12e50 [0131.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0132.526] wcscmp (_String1=".", _String2=".") returned 0 [0132.526] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.526] wcscmp (_String1="..", _String2=".") returned 1 [0132.526] wcscmp (_String1="..", _String2="..") returned 0 [0132.526] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0132.526] wcscmp (_String1="1033", _String2=".") returned 1 [0132.526] wcscmp (_String1="1033", _String2="..") returned 1 [0132.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x364d90 [0132.526] wcscpy (in: _Dest=0x364d90, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0132.526] wcscat (in: _Dest=0x364d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0132.526] wcscat (in: _Dest=0x364d90, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0132.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x364d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0132.968] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0132.968] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0132.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12e50) returned 1 [0132.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 [0132.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 Thread: id = 166 os_tid = 0xb44 [0131.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c4d0 [0131.828] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0131.828] wcscat (in: _Dest=0x3d8c4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0131.828] wcscat (in: _Dest=0x3d8c4d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\*" [0131.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0131.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0132.525] wcscmp (_String1=".", _String2=".") returned 0 [0132.525] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.525] wcscmp (_String1="..", _String2=".") returned 1 [0132.525] wcscmp (_String1="..", _String2="..") returned 0 [0132.525] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0132.525] wcscmp (_String1="1033", _String2=".") returned 1 [0132.525] wcscmp (_String1="1033", _String2="..") returned 1 [0132.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x364bd0 [0132.525] wcscpy (in: _Dest=0x364bd0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0132.525] wcscat (in: _Dest=0x364bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0132.525] wcscat (in: _Dest=0x364bd0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0134.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x364bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0134.510] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0134.511] wcscmp (_String1="Presentation Designs", _String2=".") returned 1 [0134.511] wcscmp (_String1="Presentation Designs", _String2="..") returned 1 [0134.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354ab0 [0134.511] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0134.511] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0134.511] wcscat (in: _Dest=0x354ab0, _Source="Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0134.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0134.512] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0134.512] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0134.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0134.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 [0134.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 167 os_tid = 0xb40 [0132.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59048 [0132.042] wcscpy (in: _Dest=0x3d59048, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0132.042] wcscat (in: _Dest=0x3d59048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0132.042] wcscat (in: _Dest=0x3d59048, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*" [0132.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0132.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0132.224] wcscmp (_String1=".", _String2=".") returned 0 [0132.224] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.224] wcscmp (_String1="..", _String2=".") returned 1 [0132.224] wcscmp (_String1="..", _String2="..") returned 0 [0132.224] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.224] wcscmp (_String1="Desktop", _String2=".") returned 1 [0132.224] wcscmp (_String1="Desktop", _String2="..") returned 1 [0132.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3557a0 [0132.224] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0132.224] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0132.224] wcscat (in: _Dest=0x3557a0, _Source="Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0132.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3557a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0132.916] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="SQLCEC~1.DLL")) returned 1 [0132.916] wcscmp (_String1="sqlceca35.dll", _String2=".") returned 1 [0132.916] wcscmp (_String1="sqlceca35.dll", _String2="..") returned 1 [0132.916] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="SQLCEC~2.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlcecompact35.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlcecompact35.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x24240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="SQLCEE~1.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlceer35EN.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlceer35EN.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="SQLCEM~1.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlceme35.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlceme35.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="SQLCEO~1.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlceoledb35.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlceoledb35.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="SQLCEQ~1.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlceqp35.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlceqp35.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 1 [0132.917] wcscmp (_String1="sqlcese35.dll", _String2=".") returned 1 [0132.917] wcscmp (_String1="sqlcese35.dll", _String2="..") returned 1 [0132.917] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 0 [0132.917] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0132.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0132.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59048) returned 1 [0132.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6570) returned 1 Thread: id = 168 os_tid = 0xb64 [0132.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b740 [0132.053] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0132.053] wcscat (in: _Dest=0x3e0b740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0132.053] wcscat (in: _Dest=0x3e0b740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*" [0132.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0132.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80f38 [0132.053] wcscmp (_String1=".", _String2=".") returned 0 [0132.053] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.053] wcscmp (_String1="..", _String2=".") returned 1 [0132.053] wcscmp (_String1="..", _String2="..") returned 0 [0132.053] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1 [0132.053] wcscmp (_String1="Documentation", _String2=".") returned 1 [0132.054] wcscmp (_String1="Documentation", _String2="..") returned 1 [0132.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59e18 [0132.054] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0132.054] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0132.054] wcscat (in: _Dest=0x3d59e18, _Source="Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0133.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0133.131] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0133.131] wcscmp (_String1="Runtime", _String2=".") returned 1 [0133.131] wcscmp (_String1="Runtime", _String2="..") returned 1 [0133.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34a60 [0133.131] wcscpy (in: _Dest=0x3e34a60, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0133.131] wcscat (in: _Dest=0x3e34a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0133.131] wcscat (in: _Dest=0x3e34a60, _Source="Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0133.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e34a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0133.133] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0133.133] FindClose (in: hFindFile=0x3e80f38 | out: hFindFile=0x3e80f38) returned 1 [0133.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0133.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 [0133.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 Thread: id = 169 os_tid = 0xb4c [0132.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a3f0 [0132.054] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0132.054] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0132.055] wcscat (in: _Dest=0x3d5a3f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*" [0132.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f137f0 [0132.055] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0132.055] wcscmp (_String1=".", _String2=".") returned 0 [0132.055] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.056] wcscmp (_String1="..", _String2=".") returned 1 [0132.056] wcscmp (_String1="..", _String2="..") returned 0 [0132.056] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0132.056] wcscmp (_String1="v1.0", _String2=".") returned 1 [0132.056] wcscmp (_String1="v1.0", _String2="..") returned 1 [0132.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354c60 [0132.056] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0132.056] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0132.056] wcscat (in: _Dest=0x354c60, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0143.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x354c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0143.581] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0143.581] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0143.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f137f0) returned 1 [0143.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 [0143.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6470) returned 1 Thread: id = 170 os_tid = 0xb54 [0132.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1a9d0 [0132.057] wcscpy (in: _Dest=0x3f1a9d0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0132.057] wcscat (in: _Dest=0x3f1a9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0132.057] wcscat (in: _Dest=0x3f1a9d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*" [0132.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0132.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8e08 [0132.368] wcscmp (_String1=".", _String2=".") returned 0 [0132.368] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.368] wcscmp (_String1="..", _String2=".") returned 1 [0132.368] wcscmp (_String1="..", _String2="..") returned 0 [0132.368] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1 [0132.368] wcscmp (_String1="IDE", _String2=".") returned 1 [0132.368] wcscmp (_String1="IDE", _String2="..") returned 1 [0132.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1aac0 [0132.368] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0132.368] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0132.368] wcscat (in: _Dest=0x3f1aac0, _Source="IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0132.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0132.999] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0132.999] wcscmp (_String1="Packages", _String2=".") returned 1 [0132.999] wcscmp (_String1="Packages", _String2="..") returned 1 [0132.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da60f0 [0132.999] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0132.999] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0132.999] wcscat (in: _Dest=0x3da60f0, _Source="Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0132.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0133.001] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0133.002] FindClose (in: hFindFile=0x2fc8e08 | out: hFindFile=0x2fc8e08) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a9d0) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 171 os_tid = 0xb3c [0132.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0ae10 [0132.059] wcscpy (in: _Dest=0x3e0ae10, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0132.059] wcscat (in: _Dest=0x3e0ae10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\" [0132.059] wcscat (in: _Dest=0x3e0ae10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*" [0132.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0132.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0132.220] wcscmp (_String1=".", _String2=".") returned 0 [0132.220] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.220] wcscmp (_String1="..", _String2=".") returned 1 [0132.220] wcscmp (_String1="..", _String2="..") returned 0 [0132.220] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.220] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0132.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0132.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae10) returned 1 [0132.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 172 os_tid = 0x710 [0132.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0ae80 [0132.060] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0132.060] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0132.060] wcscat (in: _Dest=0x3e0ae80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*" [0132.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0132.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0132.222] wcscmp (_String1=".", _String2=".") returned 0 [0132.222] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.222] wcscmp (_String1="..", _String2=".") returned 1 [0132.222] wcscmp (_String1="..", _String2="..") returned 0 [0132.222] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0132.222] wcscmp (_String1="Bin", _String2=".") returned 1 [0132.222] wcscmp (_String1="Bin", _String2="..") returned 1 [0132.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae10 [0132.222] wcscpy (in: _Dest=0x3e0ae10, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0132.222] wcscat (in: _Dest=0x3e0ae10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0132.222] wcscat (in: _Dest=0x3e0ae10, _Source="Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0132.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0ae10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0132.914] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0132.914] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0132.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0132.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 [0132.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dac0) returned 1 Thread: id = 173 os_tid = 0xb70 [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da63f0 [0132.062] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0132.062] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\" [0132.062] wcscat (in: _Dest=0x3da63f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*" [0132.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0132.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0132.224] wcscmp (_String1=".", _String2=".") returned 0 [0132.224] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.225] wcscmp (_String1="..", _String2=".") returned 1 [0132.225] wcscmp (_String1="..", _String2="..") returned 0 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663bd400, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x663bd400, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0132.225] wcscmp (_String1="adodb.dll", _String2=".") returned 1 [0132.225] wcscmp (_String1="adodb.dll", _String2="..") returned 1 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb155e700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb155e700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0132.225] wcscmp (_String1="Microsoft.mshtml.dll", _String2=".") returned 1 [0132.225] wcscmp (_String1="Microsoft.mshtml.dll", _String2="..") returned 1 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e135800, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e135800, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0132.225] wcscmp (_String1="Microsoft.stdformat.dll", _String2=".") returned 1 [0132.225] wcscmp (_String1="Microsoft.stdformat.dll", _String2="..") returned 1 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c0900, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x881aa1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x971c0900, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0132.225] wcscmp (_String1="msdatasrc.dll", _String2=".") returned 1 [0132.225] wcscmp (_String1="msdatasrc.dll", _String2="..") returned 1 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0132.225] wcscmp (_String1="stdole.dll", _String2=".") returned 1 [0132.225] wcscmp (_String1="stdole.dll", _String2="..") returned 1 [0132.225] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0132.225] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0132.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0132.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0132.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 174 os_tid = 0x508 [0132.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0132.066] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0132.066] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0132.066] wcscat (in: _Dest=0x2fe65a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\*") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\*" [0132.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0132.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0132.067] wcscmp (_String1=".", _String2=".") returned 0 [0132.067] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.067] wcscmp (_String1="..", _String2=".") returned 1 [0132.067] wcscmp (_String1="..", _String2="..") returned 0 [0132.067] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0132.067] wcscmp (_String1="AssemblyList_4_client.xml", _String2=".") returned 1 [0132.067] wcscmp (_String1="AssemblyList_4_client.xml", _String2="..") returned 1 [0132.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0132.067] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0132.067] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0132.067] wcscat (in: _Dest=0x354ab0, _Source="AssemblyList_4_client.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0132.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0132.165] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0132.165] wcscmp (_String1="AssemblyList_4_extended.xml", _String2=".") returned 1 [0132.165] wcscmp (_String1="AssemblyList_4_extended.xml", _String2="..") returned 1 [0132.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bce0 [0132.165] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0132.165] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0132.165] wcscat (in: _Dest=0x32bce0, _Source="AssemblyList_4_extended.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0132.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0132.166] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0132.166] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0132.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0132.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0132.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 175 os_tid = 0xb74 [0132.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7f98 [0132.068] wcscpy (in: _Dest=0x3ef7f98, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0132.068] wcscat (in: _Dest=0x3ef7f98, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0132.068] wcscat (in: _Dest=0x3ef7f98, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\*" [0132.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0132.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0132.068] wcscmp (_String1=".", _String2=".") returned 0 [0132.068] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.069] wcscmp (_String1="..", _String2=".") returned 1 [0132.069] wcscmp (_String1="..", _String2="..") returned 0 [0132.069] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0132.069] wcscmp (_String1="Windows Workflow Foundation", _String2=".") returned 1 [0132.069] wcscmp (_String1="Windows Workflow Foundation", _String2="..") returned 1 [0132.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d596a8 [0132.069] wcscpy (in: _Dest=0x3d596a8, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0132.069] wcscat (in: _Dest=0x3d596a8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0132.069] wcscat (in: _Dest=0x3d596a8, _Source="Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0133.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d596a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0133.136] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0133.136] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0133.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0133.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7f98) returned 1 [0133.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 Thread: id = 176 os_tid = 0x124 [0132.069] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets")) returned 0x20 [0132.229] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0132.229] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.229] GetLastError () returned 0x5 [0132.229] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0132.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 177 os_tid = 0xb88 [0132.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b580 [0132.098] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0132.098] wcscat (in: _Dest=0x3e0b580, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0132.098] wcscat (in: _Dest=0x3e0b580, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\*" [0132.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0132.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0132.099] wcscmp (_String1=".", _String2=".") returned 0 [0132.099] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.099] wcscmp (_String1="..", _String2=".") returned 1 [0132.099] wcscmp (_String1="..", _String2="..") returned 0 [0132.099] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0132.100] wcscmp (_String1="Framework", _String2=".") returned 1 [0132.100] wcscmp (_String1="Framework", _String2="..") returned 1 [0132.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6270 [0132.100] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0132.100] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0132.100] wcscat (in: _Dest=0x3da6270, _Source="Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0132.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0132.169] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0132.169] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0132.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0132.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b580) returned 1 [0132.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 178 os_tid = 0x524 [0132.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6608 [0132.108] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\Program Files\\Windows Journal\\en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0132.108] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\") returned="C:\\Program Files\\Windows Journal\\en-US\\" [0132.108] wcscat (in: _Dest=0x2fe6608, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\*") returned="C:\\Program Files\\Windows Journal\\en-US\\*" [0132.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0132.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0132.230] wcscmp (_String1=".", _String2=".") returned 0 [0132.230] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="..", _String2=".") returned 1 [0132.231] wcscmp (_String1="..", _String2="..") returned 0 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x53399a00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="JNTFiltr.dll.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="JNTFiltr.dll.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xc0e5c600, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="jnwdui.dll.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="jnwdui.dll.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1454400, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="jnwmon.dll.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="jnwmon.dll.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x546ac700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="Journal.exe.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="Journal.exe.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x72382c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xf2f72800, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="NBMapTIP.dll.mui", _String2=".") returned 1 [0132.231] wcscmp (_String1="NBMapTIP.dll.mui", _String2="..") returned 1 [0132.231] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0132.231] wcscmp (_String1="PDIALOG.exe.mui", _String2=".") returned 1 [0132.232] wcscmp (_String1="PDIALOG.exe.mui", _String2="..") returned 1 [0132.232] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0132.232] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0132.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0132.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 [0132.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 179 os_tid = 0x5ec [0132.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c538 [0132.115] wcscpy (in: _Dest=0x3d8c538, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.115] wcscat (in: _Dest=0x3d8c538, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.115] wcscat (in: _Dest=0x3d8c538, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\*") returned="C:\\Program Files\\Windows Journal\\Templates\\*" [0132.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0132.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0132.235] wcscmp (_String1=".", _String2=".") returned 0 [0132.235] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.235] wcscmp (_String1="..", _String2=".") returned 1 [0132.235] wcscmp (_String1="..", _String2="..") returned 0 [0132.235] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98deb0d2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98deb0d2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x249311fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0132.235] wcscmp (_String1="blank.jtp", _String2=".") returned 1 [0132.235] wcscmp (_String1="blank.jtp", _String2="..") returned 1 [0132.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1aa48 [0132.235] wcscpy (in: _Dest=0x3f1aa48, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.235] wcscat (in: _Dest=0x3f1aa48, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.235] wcscat (in: _Dest=0x3f1aa48, _Source="blank.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" [0132.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0132.922] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e5d4ef, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98e5d4ef, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c7703c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0132.922] wcscmp (_String1="Dotted_Line.jtp", _String2=".") returned 1 [0132.922] wcscmp (_String1="Dotted_Line.jtp", _String2="..") returned 1 [0132.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6570 [0132.922] wcscpy (in: _Dest=0x3da6570, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.922] wcscat (in: _Dest=0x3da6570, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.922] wcscat (in: _Dest=0x3da6570, _Source="Dotted_Line.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" [0132.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0132.923] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ea97ad, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ea97ad, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0132.924] wcscmp (_String1="Genko_1.jtp", _String2=".") returned 1 [0132.924] wcscmp (_String1="Genko_1.jtp", _String2="..") returned 1 [0132.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1abb0 [0132.924] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.924] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.924] wcscat (in: _Dest=0x3f1abb0, _Source="Genko_1.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" [0132.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0132.925] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ecf90c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ecf90c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0132.925] wcscmp (_String1="Genko_2.jtp", _String2=".") returned 1 [0132.925] wcscmp (_String1="Genko_2.jtp", _String2="..") returned 1 [0132.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ac28 [0132.925] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.925] wcscat (in: _Dest=0x3f1ac28, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.926] wcscat (in: _Dest=0x3f1ac28, _Source="Genko_2.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" [0132.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ac28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0132.927] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f1bbca, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f1bbca, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24cc32fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0132.927] wcscmp (_String1="Graph.jtp", _String2=".") returned 1 [0132.927] wcscmp (_String1="Graph.jtp", _String2="..") returned 1 [0132.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1aca0 [0132.927] wcscpy (in: _Dest=0x3f1aca0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.927] wcscat (in: _Dest=0x3f1aca0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.927] wcscat (in: _Dest=0x3f1aca0, _Source="Graph.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" [0132.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0132.929] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f41d29, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f41d29, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0132.929] wcscmp (_String1="Memo.jtp", _String2=".") returned 1 [0132.929] wcscmp (_String1="Memo.jtp", _String2="..") returned 1 [0132.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae80 [0132.929] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.929] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.929] wcscat (in: _Dest=0x3e0ae80, _Source="Memo.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" [0132.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0132.930] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fb4146, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fb4146, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0132.930] wcscmp (_String1="Month_Calendar.jtp", _String2=".") returned 1 [0132.930] wcscmp (_String1="Month_Calendar.jtp", _String2="..") returned 1 [0132.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59048 [0132.930] wcscpy (in: _Dest=0x3d59048, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.930] wcscat (in: _Dest=0x3d59048, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.930] wcscat (in: _Dest=0x3d59048, _Source="Month_Calendar.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" [0132.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0132.932] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fda2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fda2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0132.932] wcscmp (_String1="Music.jtp", _String2=".") returned 1 [0132.932] wcscmp (_String1="Music.jtp", _String2="..") returned 1 [0132.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ad18 [0132.932] wcscpy (in: _Dest=0x3f1ad18, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.932] wcscat (in: _Dest=0x3f1ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.932] wcscat (in: _Dest=0x3f1ad18, _Source="Music.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" [0132.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0132.933] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99026563, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99026563, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0132.933] wcscmp (_String1="Seyes.jtp", _String2=".") returned 1 [0132.933] wcscmp (_String1="Seyes.jtp", _String2="..") returned 1 [0132.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ad90 [0132.933] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.933] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.933] wcscat (in: _Dest=0x3f1ad90, _Source="Seyes.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" [0132.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ad90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0132.935] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99098980, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99098980, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d3571c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0132.935] wcscmp (_String1="Shorthand.jtp", _String2=".") returned 1 [0132.935] wcscmp (_String1="Shorthand.jtp", _String2="..") returned 1 [0132.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da63f0 [0132.935] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.935] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.935] wcscat (in: _Dest=0x3da63f0, _Source="Shorthand.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" [0132.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0132.936] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0132.937] wcscmp (_String1="To_Do_List.jtp", _String2=".") returned 1 [0132.937] wcscmp (_String1="To_Do_List.jtp", _String2="..") returned 1 [0132.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da61f0 [0132.937] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0132.937] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0132.937] wcscat (in: _Dest=0x3da61f0, _Source="To_Do_List.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" [0132.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0132.938] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0132.938] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0132.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0132.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c538) returned 1 [0132.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6128) returned 1 Thread: id = 180 os_tid = 0x668 [0132.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7440 [0132.121] wcscpy (in: _Dest=0x3ef7440, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0132.121] wcscat (in: _Dest=0x3ef7440, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0132.121] wcscat (in: _Dest=0x3ef7440, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\*" [0132.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0132.121] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0133.214] wcscmp (_String1=".", _String2=".") returned 0 [0133.214] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.214] wcscmp (_String1="..", _String2=".") returned 1 [0133.214] wcscmp (_String1="..", _String2="..") returned 0 [0133.214] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0133.214] wcscmp (_String1="Client", _String2=".") returned 1 [0133.214] wcscmp (_String1="Client", _String2="..") returned 1 [0133.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe68a8 [0133.214] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0133.214] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0133.214] wcscat (in: _Dest=0x2fe68a8, _Source="Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0134.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0134.526] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0134.526] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0134.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0134.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7440) returned 1 [0134.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61ca0) returned 1 Thread: id = 181 os_tid = 0x714 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e620b0 [0132.122] wcscpy (in: _Dest=0x3e620b0, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0132.122] wcscat (in: _Dest=0x3e620b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0132.122] wcscat (in: _Dest=0x3e620b0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\*" [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0132.123] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80bb8 [0134.006] wcscmp (_String1=".", _String2=".") returned 0 [0134.006] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.006] wcscmp (_String1="..", _String2=".") returned 1 [0134.006] wcscmp (_String1="..", _String2="..") returned 0 [0134.007] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0134.007] wcscmp (_String1="DSS", _String2=".") returned 1 [0134.007] wcscmp (_String1="DSS", _String2="..") returned 1 [0134.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4e1a8 [0134.007] wcscpy (in: _Dest=0x3e4e1a8, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0134.007] wcscat (in: _Dest=0x3e4e1a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0134.007] wcscat (in: _Dest=0x3e4e1a8, _Source="DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0143.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e4e1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0143.587] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0143.587] wcscmp (_String1="Keys", _String2=".") returned 1 [0143.587] wcscmp (_String1="Keys", _String2="..") returned 1 [0143.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d4b48 [0143.588] wcscpy (in: _Dest=0x66d4b48, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0143.588] wcscat (in: _Dest=0x66d4b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0143.588] wcscat (in: _Dest=0x66d4b48, _Source="Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0143.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0143.589] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0143.589] wcscmp (_String1="RSA", _String2=".") returned 1 [0143.590] wcscmp (_String1="RSA", _String2="..") returned 1 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62470 [0143.590] wcscpy (in: _Dest=0x3e62470, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0143.590] wcscat (in: _Dest=0x3e62470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0143.590] wcscat (in: _Dest=0x3e62470, _Source="RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0143.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0143.591] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0143.591] FindClose (in: hFindFile=0x3e80bb8 | out: hFindFile=0x3e80bb8) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0143.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e620b0) returned 1 [0143.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f228) returned 1 Thread: id = 182 os_tid = 0x520 [0132.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7e90 [0132.124] wcscpy (in: _Dest=0x3ef7e90, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0132.124] wcscat (in: _Dest=0x3ef7e90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0132.124] wcscat (in: _Dest=0x3ef7e90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\*" [0132.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f154d0 [0132.124] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0134.010] wcscmp (_String1=".", _String2=".") returned 0 [0134.010] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.010] wcscmp (_String1="..", _String2=".") returned 1 [0134.010] wcscmp (_String1="..", _String2="..") returned 0 [0134.010] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0134.010] wcscmp (_String1="Device", _String2=".") returned 1 [0134.010] wcscmp (_String1="Device", _String2="..") returned 1 [0134.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dbf8 [0134.010] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0134.010] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0134.011] wcscat (in: _Dest=0x3d8dbf8, _Source="Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0145.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0145.373] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0145.373] wcscmp (_String1="Task", _String2=".") returned 1 [0145.373] wcscmp (_String1="Task", _String2="..") returned 1 [0145.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe0c68 [0145.373] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0145.373] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0145.373] wcscat (in: _Dest=0x2fe0c68, _Source="Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0145.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0145.375] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0145.375] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0145.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f154d0) returned 1 [0145.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e90) returned 1 [0145.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7808) returned 1 Thread: id = 183 os_tid = 0x6c0 [0132.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7b20 [0132.126] wcscpy (in: _Dest=0x3ef7b20, _Source="C:\\ProgramData\\Microsoft\\DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0132.126] wcscat (in: _Dest=0x3ef7b20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\" [0132.126] wcscat (in: _Dest=0x3ef7b20, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\*" [0132.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0132.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff50 [0134.011] wcscmp (_String1=".", _String2=".") returned 0 [0134.011] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.011] wcscmp (_String1="..", _String2=".") returned 1 [0134.011] wcscmp (_String1="..", _String2="..") returned 0 [0134.011] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.011] FindClose (in: hFindFile=0x3dcff50 | out: hFindFile=0x3dcff50) returned 1 [0134.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0134.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7b20) returned 1 [0134.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 Thread: id = 184 os_tid = 0xb84 [0132.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e41300 [0132.127] wcscpy (in: _Dest=0x3e41300, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0132.127] wcscat (in: _Dest=0x3e41300, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0132.127] wcscat (in: _Dest=0x3e41300, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\*" [0132.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0132.127] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff50 [0134.014] wcscmp (_String1=".", _String2=".") returned 0 [0134.014] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.014] wcscmp (_String1="..", _String2=".") returned 1 [0134.014] wcscmp (_String1="..", _String2="..") returned 0 [0134.014] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0134.014] wcscmp (_String1="Server", _String2=".") returned 1 [0134.014] wcscmp (_String1="Server", _String2="..") returned 1 [0134.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61d90 [0134.014] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0134.014] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0134.014] wcscat (in: _Dest=0x3e61d90, _Source="Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0134.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0134.563] FindNextFileW (in: hFindFile=0x3dcff50, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0134.564] FindClose (in: hFindFile=0x3dcff50 | out: hFindFile=0x3dcff50) returned 1 [0134.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0134.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41300) returned 1 [0134.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 Thread: id = 185 os_tid = 0xba0 [0132.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61f70 [0132.128] wcscpy (in: _Dest=0x3e61f70, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0132.128] wcscat (in: _Dest=0x3e61f70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0132.129] wcscat (in: _Dest=0x3e61f70, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\*" [0132.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40060 [0132.129] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa10 [0134.015] wcscmp (_String1=".", _String2=".") returned 0 [0134.015] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.015] wcscmp (_String1="..", _String2=".") returned 1 [0134.015] wcscmp (_String1="..", _String2="..") returned 0 [0134.015] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0134.015] wcscmp (_String1="logs", _String2=".") returned 1 [0134.015] wcscmp (_String1="logs", _String2="..") returned 1 [0134.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4dfc8 [0134.015] wcscpy (in: _Dest=0x3e4dfc8, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0134.016] wcscat (in: _Dest=0x3e4dfc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0134.016] wcscat (in: _Dest=0x3e4dfc8, _Source="logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0134.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e4dfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0134.566] FindNextFileW (in: hFindFile=0x3dcfa10, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0134.566] FindClose (in: hFindFile=0x3dcfa10 | out: hFindFile=0x3dcfa10) returned 1 [0134.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0134.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61f70) returned 1 [0134.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f0c0) returned 1 Thread: id = 186 os_tid = 0xb7c [0132.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7bd0 [0132.130] wcscpy (in: _Dest=0x3ef7bd0, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0132.130] wcscat (in: _Dest=0x3ef7bd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0132.130] wcscat (in: _Dest=0x3ef7bd0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\*" [0132.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d402c8 [0132.130] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0134.016] wcscmp (_String1=".", _String2=".") returned 0 [0134.016] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.016] wcscmp (_String1="..", _String2=".") returned 1 [0134.016] wcscmp (_String1="..", _String2="..") returned 0 [0134.016] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0134.017] wcscmp (_String1="Views", _String2=".") returned 1 [0134.017] wcscmp (_String1="Views", _String2="..") returned 1 [0134.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5648 [0134.017] wcscpy (in: _Dest=0x2fe5648, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0134.017] wcscat (in: _Dest=0x2fe5648, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0134.017] wcscat (in: _Dest=0x2fe5648, _Source="Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0134.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0134.569] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0134.569] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c8) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7bd0) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d88) returned 1 Thread: id = 187 os_tid = 0xb78 [0132.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef73e8 [0132.131] wcscpy (in: _Dest=0x3ef73e8, _Source="C:\\ProgramData\\Microsoft\\HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0132.131] wcscat (in: _Dest=0x3ef73e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\") returned="C:\\ProgramData\\Microsoft\\HTML Help\\" [0132.131] wcscat (in: _Dest=0x3ef73e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\*") returned="C:\\ProgramData\\Microsoft\\HTML Help\\*" [0132.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40530 [0132.131] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\HTML Help\\*", lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0134.017] wcscmp (_String1=".", _String2=".") returned 0 [0134.018] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.018] wcscmp (_String1="..", _String2=".") returned 1 [0134.018] wcscmp (_String1="..", _String2="..") returned 0 [0134.018] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.018] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0134.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40530) returned 1 [0134.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef73e8) returned 1 [0134.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e618e0) returned 1 Thread: id = 188 os_tid = 0xb9c [0132.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7c28 [0132.132] wcscpy (in: _Dest=0x3ef7c28, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0132.133] wcscat (in: _Dest=0x3ef7c28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\" [0132.133] wcscat (in: _Dest=0x3ef7c28, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0132.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40798 [0132.133] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0134.020] wcscmp (_String1=".", _String2=".") returned 0 [0134.020] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.020] wcscmp (_String1="..", _String2=".") returned 1 [0134.020] wcscmp (_String1="..", _String2="..") returned 0 [0134.020] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0134.020] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0134.020] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0134.020] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0134.020] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0134.020] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0134.020] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0134.020] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0134.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40798) returned 1 [0134.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c28) returned 1 [0134.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75a0) returned 1 Thread: id = 189 os_tid = 0xb80 [0132.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e41198 [0132.134] wcscpy (in: _Dest=0x3e41198, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0132.134] wcscat (in: _Dest=0x3e41198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0132.134] wcscat (in: _Dest=0x3e41198, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\*") returned="C:\\ProgramData\\Microsoft\\MF\\*" [0132.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0132.134] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0134.009] wcscmp (_String1=".", _String2=".") returned 0 [0134.009] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.009] wcscmp (_String1="..", _String2=".") returned 1 [0134.009] wcscmp (_String1="..", _String2="..") returned 0 [0134.009] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0134.009] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0134.009] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0134.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e03610 [0134.009] wcscpy (in: _Dest=0x3e03610, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0134.009] wcscat (in: _Dest=0x3e03610, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0134.009] wcscat (in: _Dest=0x3e03610, _Source="Active.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0134.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e03610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0134.559] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0134.559] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0134.560] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0134.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7440 [0134.560] wcscpy (in: _Dest=0x3ef7440, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0134.560] wcscat (in: _Dest=0x3ef7440, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0134.560] wcscat (in: _Dest=0x3ef7440, _Source="Pending.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0134.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0134.561] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0134.561] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0134.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0134.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41198) returned 1 [0134.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 Thread: id = 190 os_tid = 0x6b0 [0132.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41150 [0132.134] wcscpy (in: _Dest=0x3e41150, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0132.134] wcscat (in: _Dest=0x3e41150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0132.134] wcscat (in: _Dest=0x3e41150, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\*" [0132.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0132.134] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f300 [0134.026] wcscmp (_String1=".", _String2=".") returned 0 [0134.026] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.026] wcscmp (_String1="..", _String2=".") returned 1 [0134.026] wcscmp (_String1="..", _String2="..") returned 0 [0134.026] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0134.026] wcscmp (_String1="8.0", _String2=".") returned 1 [0134.026] wcscmp (_String1="8.0", _String2="..") returned 1 [0134.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e618e0 [0134.026] wcscpy (in: _Dest=0x3e618e0, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0134.026] wcscat (in: _Dest=0x3e618e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0134.026] wcscat (in: _Dest=0x3e618e0, _Source="8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0134.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e618e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0134.579] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0134.579] FindClose (in: hFindFile=0x3f1f300 | out: hFindFile=0x3f1f300) returned 1 [0134.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0134.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41150) returned 1 [0134.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efa0) returned 1 Thread: id = 191 os_tid = 0xbd4 [0132.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7390 [0132.135] wcscpy (in: _Dest=0x3ef7390, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0132.135] wcscat (in: _Dest=0x3ef7390, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0132.135] wcscat (in: _Dest=0x3ef7390, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\*" [0132.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40ed0 [0132.135] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0134.025] wcscmp (_String1=".", _String2=".") returned 0 [0134.025] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.025] wcscmp (_String1="..", _String2=".") returned 1 [0134.025] wcscmp (_String1="..", _String2="..") returned 0 [0134.025] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0134.025] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0134.025] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0134.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1a9d0 [0134.025] wcscpy (in: _Dest=0x3f1a9d0, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0134.025] wcscat (in: _Dest=0x3f1a9d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0134.025] wcscat (in: _Dest=0x3f1a9d0, _Source="BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0134.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1a9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0134.576] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0134.576] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0134.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ed0) returned 1 [0134.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7390) returned 1 [0134.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef74f0) returned 1 Thread: id = 192 os_tid = 0xbec [0132.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62060 [0132.135] wcscpy (in: _Dest=0x3e62060, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0132.135] wcscat (in: _Dest=0x3e62060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0132.135] wcscat (in: _Dest=0x3e62060, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\*") returned="C:\\ProgramData\\Microsoft\\Network\\*" [0132.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41138 [0132.136] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0134.023] wcscmp (_String1=".", _String2=".") returned 0 [0134.023] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.023] wcscmp (_String1="..", _String2=".") returned 1 [0134.023] wcscmp (_String1="..", _String2="..") returned 0 [0134.023] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0134.023] wcscmp (_String1="Connections", _String2=".") returned 1 [0134.023] wcscmp (_String1="Connections", _String2="..") returned 1 [0134.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e070 [0134.023] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0134.023] wcscat (in: _Dest=0x3d8e070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0134.023] wcscat (in: _Dest=0x3d8e070, _Source="Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0134.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0134.571] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0134.571] wcscmp (_String1="Downloader", _String2=".") returned 1 [0134.571] wcscmp (_String1="Downloader", _String2="..") returned 1 [0134.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0134.572] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0134.572] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0134.572] wcscat (in: _Dest=0x2fe0c68, _Source="Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0134.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0134.573] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0134.573] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0134.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41138) returned 1 [0134.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62060) returned 1 [0134.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61cf0) returned 1 Thread: id = 193 os_tid = 0xbf8 [0132.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62150 [0132.240] wcscpy (in: _Dest=0x3e62150, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0132.240] wcscat (in: _Dest=0x3e62150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0132.240] wcscat (in: _Dest=0x3e62150, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\*" [0132.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0132.240] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0134.771] wcscmp (_String1=".", _String2=".") returned 0 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.771] wcscmp (_String1="..", _String2=".") returned 1 [0134.771] wcscmp (_String1="..", _String2="..") returned 0 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0134.771] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0134.771] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0134.771] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0134.771] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0134.771] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0134.771] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0134.771] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0134.771] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0134.771] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0134.771] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0134.771] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0134.772] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0134.772] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0134.772] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0134.772] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0134.772] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0134.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6848 [0134.772] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0134.772] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0134.772] wcscat (in: _Dest=0x2fe6848, _Source="UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0135.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0135.558] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0135.559] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0135.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0135.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62150) returned 1 [0135.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efe8) returned 1 Thread: id = 195 os_tid = 0xbf4 [0132.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bea8 [0132.241] wcscpy (in: _Dest=0x32bea8, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0132.241] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0132.241] wcscat (in: _Dest=0x32bea8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0132.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0132.241] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0133.249] wcscmp (_String1=".", _String2=".") returned 0 [0133.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.249] wcscmp (_String1="..", _String2=".") returned 1 [0133.249] wcscmp (_String1="..", _String2="..") returned 0 [0133.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0133.249] wcscmp (_String1="packages", _String2=".") returned 1 [0133.250] wcscmp (_String1="packages", _String2="..") returned 1 [0133.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5c0e0 [0133.250] wcscpy (in: _Dest=0x3e5c0e0, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0133.250] wcscat (in: _Dest=0x3e5c0e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0133.250] wcscat (in: _Dest=0x3e5c0e0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0134.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5c0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0134.533] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.533] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0134.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0134.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 [0134.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 196 os_tid = 0xbe0 [0132.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cf48 [0132.245] wcscpy (in: _Dest=0x32cf48, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0132.245] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0132.245] wcscat (in: _Dest=0x32cf48, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0132.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0132.245] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0133.250] wcscmp (_String1=".", _String2=".") returned 0 [0133.250] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.250] wcscmp (_String1="..", _String2=".") returned 1 [0133.251] wcscmp (_String1="..", _String2="..") returned 0 [0133.251] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0133.251] wcscmp (_String1="packages", _String2=".") returned 1 [0133.251] wcscmp (_String1="packages", _String2="..") returned 1 [0133.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5be40 [0133.251] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0133.251] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0133.251] wcscat (in: _Dest=0x3e5be40, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0134.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0134.535] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.535] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0134.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0134.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0134.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 197 os_tid = 0xbe4 [0132.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0132.246] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0132.246] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0132.246] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0132.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0132.246] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0133.252] wcscmp (_String1=".", _String2=".") returned 0 [0133.252] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.252] wcscmp (_String1="..", _String2=".") returned 1 [0133.252] wcscmp (_String1="..", _String2="..") returned 0 [0133.252] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0133.252] wcscmp (_String1="packages", _String2=".") returned 1 [0133.252] wcscmp (_String1="packages", _String2="..") returned 1 [0133.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7378 [0133.252] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0133.252] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0133.252] wcscat (in: _Dest=0x2ff7378, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0134.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0134.435] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.435] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0134.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0134.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0134.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 198 os_tid = 0xbe8 [0132.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0132.247] wcscpy (in: _Dest=0x32bd78, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0132.247] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0132.247] wcscat (in: _Dest=0x32bd78, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0132.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0132.248] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0134.748] wcscmp (_String1=".", _String2=".") returned 0 [0134.748] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.748] wcscmp (_String1="..", _String2=".") returned 1 [0134.748] wcscmp (_String1="..", _String2="..") returned 0 [0134.748] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.748] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0134.748] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0134.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5c770 [0134.749] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0134.749] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0134.749] wcscat (in: _Dest=0x3e5c770, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0140.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0140.335] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0140.335] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0140.335] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0140.336] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0140.336] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0140.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0140.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 [0140.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 199 os_tid = 0xbb4 [0132.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b928 [0132.248] wcscpy (in: _Dest=0x35b928, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0132.248] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0132.248] wcscat (in: _Dest=0x35b928, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0132.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d413a0 [0132.248] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0133.221] wcscmp (_String1=".", _String2=".") returned 0 [0133.221] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.222] wcscmp (_String1="..", _String2=".") returned 1 [0133.222] wcscmp (_String1="..", _String2="..") returned 0 [0133.222] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0133.222] wcscmp (_String1="packages", _String2=".") returned 1 [0133.222] wcscmp (_String1="packages", _String2="..") returned 1 [0133.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332e68 [0133.222] wcscpy (in: _Dest=0x332e68, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0133.222] wcscat (in: _Dest=0x332e68, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0133.222] wcscat (in: _Dest=0x332e68, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0134.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0134.530] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.530] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0134.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413a0) returned 1 [0134.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0134.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 200 os_tid = 0xbb0 [0132.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c428 [0132.249] wcscpy (in: _Dest=0x35c428, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0132.249] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0132.249] wcscat (in: _Dest=0x35c428, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0132.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41608 [0132.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0133.979] wcscmp (_String1=".", _String2=".") returned 0 [0133.979] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.979] wcscmp (_String1="..", _String2=".") returned 1 [0133.979] wcscmp (_String1="..", _String2="..") returned 0 [0133.979] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0133.979] wcscmp (_String1="packages", _String2=".") returned 1 [0133.979] wcscmp (_String1="packages", _String2="..") returned 1 [0133.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332da8 [0133.979] wcscpy (in: _Dest=0x332da8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0133.979] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0133.980] wcscat (in: _Dest=0x332da8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0135.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0135.507] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.507] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0135.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41608) returned 1 [0135.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 [0135.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 201 os_tid = 0xc18 [0132.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0132.250] wcscpy (in: _Dest=0x35b718, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0132.250] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0132.250] wcscat (in: _Dest=0x35b718, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0132.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41870 [0132.250] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0134.747] wcscmp (_String1=".", _String2=".") returned 0 [0134.747] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.747] wcscmp (_String1="..", _String2=".") returned 1 [0134.747] wcscmp (_String1="..", _String2="..") returned 0 [0134.747] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.747] wcscmp (_String1="packages", _String2=".") returned 1 [0134.747] wcscmp (_String1="packages", _String2="..") returned 1 [0134.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6740 [0134.748] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0134.748] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0134.748] wcscat (in: _Dest=0x2ff6740, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0140.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0140.332] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.333] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0140.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41870) returned 1 [0140.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0140.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 202 os_tid = 0xc20 [0132.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b5b8 [0132.251] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0132.251] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0132.251] wcscat (in: _Dest=0x35b5b8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0132.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0132.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0134.750] wcscmp (_String1=".", _String2=".") returned 0 [0134.750] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.750] wcscmp (_String1="..", _String2=".") returned 1 [0134.750] wcscmp (_String1="..", _String2="..") returned 0 [0134.750] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.750] wcscmp (_String1="packages", _String2=".") returned 1 [0134.750] wcscmp (_String1="packages", _String2="..") returned 1 [0134.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7098 [0134.750] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0134.750] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0134.750] wcscat (in: _Dest=0x2ff7098, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0135.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0135.989] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.989] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0135.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0135.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 [0135.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052e98) returned 1 Thread: id = 203 os_tid = 0xc1c [0132.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0132.252] wcscpy (in: _Dest=0x32d700, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0132.252] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0132.252] wcscat (in: _Dest=0x32d700, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0132.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41d40 [0132.252] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0134.746] wcscmp (_String1=".", _String2=".") returned 0 [0134.746] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.746] wcscmp (_String1="..", _String2=".") returned 1 [0134.746] wcscmp (_String1="..", _String2="..") returned 0 [0134.746] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.746] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0134.746] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0134.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0134.747] wcscpy (in: _Dest=0x3053330, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0134.747] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0134.747] wcscat (in: _Dest=0x3053330, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0141.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0141.143] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0141.143] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0141.143] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0141.143] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0141.143] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0141.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d40) returned 1 [0141.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0141.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 204 os_tid = 0xc14 [0132.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0132.257] wcscpy (in: _Dest=0x32d668, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0132.257] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0132.257] wcscat (in: _Dest=0x32d668, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0132.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0132.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0134.745] wcscmp (_String1=".", _String2=".") returned 0 [0134.745] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.745] wcscmp (_String1="..", _String2=".") returned 1 [0134.745] wcscmp (_String1="..", _String2="..") returned 0 [0134.745] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.746] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0134.746] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0134.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053bb8 [0134.746] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0134.746] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0134.746] wcscat (in: _Dest=0x3053bb8, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0148.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0148.449] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0148.449] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0148.449] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0148.449] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0148.449] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0148.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0148.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 [0148.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 205 os_tid = 0xbcc [0132.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0132.258] wcscpy (in: _Dest=0x35af88, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0132.258] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0132.258] wcscat (in: _Dest=0x35af88, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0132.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0132.258] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0134.749] wcscmp (_String1=".", _String2=".") returned 0 [0134.749] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.749] wcscmp (_String1="..", _String2=".") returned 1 [0134.749] wcscmp (_String1="..", _String2="..") returned 0 [0134.749] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.749] wcscmp (_String1="packages", _String2=".") returned 1 [0134.749] wcscmp (_String1="packages", _String2="..") returned 1 [0134.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6fe0 [0134.749] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0134.750] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0134.750] wcscat (in: _Dest=0x2ff6fe0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0135.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0135.987] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0135.987] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0135.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0135.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0135.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 206 os_tid = 0xc24 [0132.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20 [0132.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0132.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.372] GetLastError () returned 0x5 [0132.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0132.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 207 os_tid = 0xbc8 [0132.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20 [0132.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0132.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.374] GetLastError () returned 0x5 [0132.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0132.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 208 os_tid = 0xb34 [0132.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0132.262] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0132.262] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0132.262] wcscat (in: _Dest=0x3da5f70, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*" [0132.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0060 [0132.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0132.263] wcscmp (_String1=".", _String2=".") returned 0 [0132.263] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.263] wcscmp (_String1="..", _String2=".") returned 1 [0132.263] wcscmp (_String1="..", _String2="..") returned 0 [0132.263] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0132.263] wcscmp (_String1="v3.0", _String2=".") returned 1 [0132.263] wcscmp (_String1="v3.0", _String2="..") returned 1 [0132.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59730 [0132.263] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0132.263] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0132.263] wcscat (in: _Dest=0x3d59730, _Source="v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0138.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0138.527] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0138.527] wcscmp (_String1="v3.5", _String2=".") returned 1 [0138.527] wcscmp (_String1="v3.5", _String2="..") returned 1 [0138.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efea0 [0138.527] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0138.527] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0138.527] wcscat (in: _Dest=0x66efea0, _Source="v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0138.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0138.530] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0138.530] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0138.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0060) returned 1 [0138.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 [0138.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 209 os_tid = 0xc4c [0132.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7650 [0132.264] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files\\Windows Mail\\en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0132.264] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\") returned="C:\\Program Files\\Windows Mail\\en-US\\" [0132.264] wcscat (in: _Dest=0x3ef7650, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\*") returned="C:\\Program Files\\Windows Mail\\en-US\\*" [0132.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0132.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0132.267] wcscmp (_String1=".", _String2=".") returned 0 [0132.267] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.267] wcscmp (_String1="..", _String2=".") returned 1 [0132.267] wcscmp (_String1="..", _String2="..") returned 0 [0132.267] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b7eaad, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34b7eaad, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2767100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0132.267] wcscmp (_String1="msoeres.dll.mui", _String2=".") returned 1 [0132.267] wcscmp (_String1="msoeres.dll.mui", _String2="..") returned 1 [0132.268] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0132.268] wcscmp (_String1="WinMail.exe.mui", _String2=".") returned 1 [0132.268] wcscmp (_String1="WinMail.exe.mui", _String2="..") returned 1 [0132.268] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0132.268] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0132.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0132.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 [0132.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 Thread: id = 210 os_tid = 0xb30 [0132.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066ec0 [0132.270] wcscpy (in: _Dest=0x3066ec0, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0132.270] wcscat (in: _Dest=0x3066ec0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0132.270] wcscat (in: _Dest=0x3066ec0, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\*") returned="C:\\Users\\Default\\AppData\\*" [0132.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0132.270] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0132.270] wcscmp (_String1=".", _String2=".") returned 0 [0132.270] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.271] wcscmp (_String1="..", _String2=".") returned 1 [0132.271] wcscmp (_String1="..", _String2="..") returned 0 [0132.271] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0132.271] wcscmp (_String1="Local", _String2=".") returned 1 [0132.271] wcscmp (_String1="Local", _String2="..") returned 1 [0132.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e40d60 [0132.271] wcscpy (in: _Dest=0x3e40d60, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0132.271] wcscat (in: _Dest=0x3e40d60, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0132.271] wcscat (in: _Dest=0x3e40d60, _Source="Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0133.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e40d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0133.091] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0133.091] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0133.091] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0133.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e626f0 [0133.091] wcscpy (in: _Dest=0x3e626f0, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0133.091] wcscat (in: _Dest=0x3e626f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0133.091] wcscat (in: _Dest=0x3e626f0, _Source="LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0133.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e626f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0133.111] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0133.112] wcscmp (_String1="Roaming", _String2=".") returned 1 [0133.112] wcscmp (_String1="Roaming", _String2="..") returned 1 [0133.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62740 [0133.112] wcscpy (in: _Dest=0x3e62740, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0133.112] wcscat (in: _Dest=0x3e62740, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0133.112] wcscat (in: _Dest=0x3e62740, _Source="Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0133.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0133.114] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0133.114] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0133.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0133.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 [0133.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d78) returned 1 Thread: id = 211 os_tid = 0xb24 [0132.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61de0 [0132.272] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\Default\\Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0132.272] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Application Data\\") returned="C:\\Users\\Default\\Application Data\\" [0132.272] wcscat (in: _Dest=0x3e61de0, _Source="*" | out: _Dest="C:\\Users\\Default\\Application Data\\*") returned="C:\\Users\\Default\\Application Data\\*" [0132.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0132.272] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0132.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 [0132.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62010) returned 1 Thread: id = 212 os_tid = 0xb28 [0132.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066dc0 [0132.274] wcscpy (in: _Dest=0x3066dc0, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0132.274] wcscat (in: _Dest=0x3066dc0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0132.274] wcscat (in: _Dest=0x3066dc0, _Source="*" | out: _Dest="C:\\Users\\Default\\Contacts\\*") returned="C:\\Users\\Default\\Contacts\\*" [0132.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0132.274] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0132.275] wcscmp (_String1=".", _String2=".") returned 0 [0132.275] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="..", _String2=".") returned 1 [0132.275] wcscmp (_String1="..", _String2="..") returned 0 [0132.275] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0132.275] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0132.275] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0132.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8dbf8 [0132.275] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0132.276] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0132.276] wcscat (in: _Dest=0x3d8dbf8, _Source="Administrator.contact" | out: _Dest="C:\\Users\\Default\\Contacts\\Administrator.contact") returned="C:\\Users\\Default\\Contacts\\Administrator.contact" [0132.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0132.995] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.995] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.995] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.995] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.995] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0132.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0132.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066dc0) returned 1 [0132.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 Thread: id = 213 os_tid = 0xb2c [0132.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e00 [0132.276] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Default\\Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0132.276] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Default\\Cookies\\") returned="C:\\Users\\Default\\Cookies\\" [0132.276] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Default\\Cookies\\*") returned="C:\\Users\\Default\\Cookies\\*" [0132.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0132.276] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0132.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0132.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067200) returned 1 Thread: id = 214 os_tid = 0xb20 [0132.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067200 [0132.278] wcscpy (in: _Dest=0x3067200, _Source="C:\\Users\\Default\\Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0132.278] wcscat (in: _Dest=0x3067200, _Source="\\" | out: _Dest="C:\\Users\\Default\\Desktop\\") returned="C:\\Users\\Default\\Desktop\\" [0132.278] wcscat (in: _Dest=0x3067200, _Source="*" | out: _Dest="C:\\Users\\Default\\Desktop\\*") returned="C:\\Users\\Default\\Desktop\\*" [0132.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0132.278] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0132.279] wcscmp (_String1=".", _String2=".") returned 0 [0132.279] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.279] wcscmp (_String1="..", _String2=".") returned 1 [0132.279] wcscmp (_String1="..", _String2="..") returned 0 [0132.279] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.279] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.279] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.279] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.280] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067200) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066a80) returned 1 Thread: id = 215 os_tid = 0xac4 [0132.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e32718 [0132.282] wcscpy (in: _Dest=0x3e32718, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0132.282] wcscat (in: _Dest=0x3e32718, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0132.282] wcscat (in: _Dest=0x3e32718, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\*") returned="C:\\Users\\Default\\Documents\\*" [0132.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0132.282] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0132.285] wcscmp (_String1=".", _String2=".") returned 0 [0132.285] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.285] wcscmp (_String1="..", _String2=".") returned 1 [0132.285] wcscmp (_String1="..", _String2="..") returned 0 [0132.285] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.285] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.285] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.285] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.285] wcscmp (_String1="My Music", _String2=".") returned 1 [0132.285] wcscmp (_String1="My Music", _String2="..") returned 1 [0132.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62010 [0132.285] wcscpy (in: _Dest=0x3e62010, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0132.285] wcscat (in: _Dest=0x3e62010, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0132.285] wcscat (in: _Dest=0x3e62010, _Source="My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0132.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0132.469] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0132.469] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0132.469] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0132.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7650 [0132.469] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0132.469] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0132.469] wcscat (in: _Dest=0x3ef7650, _Source="My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0132.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0132.470] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0132.470] wcscmp (_String1="My Videos", _String2=".") returned 1 [0132.470] wcscmp (_String1="My Videos", _String2="..") returned 1 [0132.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7de0 [0132.470] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0132.470] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0132.470] wcscat (in: _Dest=0x3ef7de0, _Source="My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0132.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0132.472] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0132.472] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0132.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0132.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32718) returned 1 [0132.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 Thread: id = 216 os_tid = 0xac0 [0132.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e325f8 [0132.286] wcscpy (in: _Dest=0x3e325f8, _Source="C:\\Users\\Default\\Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0132.286] wcscat (in: _Dest=0x3e325f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Downloads\\") returned="C:\\Users\\Default\\Downloads\\" [0132.286] wcscat (in: _Dest=0x3e325f8, _Source="*" | out: _Dest="C:\\Users\\Default\\Downloads\\*") returned="C:\\Users\\Default\\Downloads\\*" [0132.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0132.286] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0132.287] wcscmp (_String1=".", _String2=".") returned 0 [0132.287] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.287] wcscmp (_String1="..", _String2=".") returned 1 [0132.287] wcscmp (_String1="..", _String2="..") returned 0 [0132.287] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.287] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.287] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.287] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.288] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0132.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0132.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e325f8) returned 1 [0132.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 Thread: id = 217 os_tid = 0xabc [0132.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e325f8 [0132.289] wcscpy (in: _Dest=0x3e325f8, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.290] wcscat (in: _Dest=0x3e325f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0132.290] wcscat (in: _Dest=0x3e325f8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\*") returned="C:\\Users\\Default\\Favorites\\*" [0132.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0132.290] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf750 [0132.376] wcscmp (_String1=".", _String2=".") returned 0 [0132.376] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.376] wcscmp (_String1="..", _String2=".") returned 1 [0132.376] wcscmp (_String1="..", _String2="..") returned 0 [0132.376] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.376] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.376] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.376] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0132.377] wcscmp (_String1="Links", _String2=".") returned 1 [0132.377] wcscmp (_String1="Links", _String2="..") returned 1 [0132.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62100 [0132.377] wcscpy (in: _Dest=0x3e62100, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.377] wcscat (in: _Dest=0x3e62100, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0132.377] wcscat (in: _Dest=0x3e62100, _Source="Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0132.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0132.476] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0132.477] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0132.477] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0132.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e960 [0132.477] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.477] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0132.477] wcscat (in: _Dest=0x3d8e960, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0132.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0132.478] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0132.478] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0132.478] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0132.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7338 [0132.478] wcscpy (in: _Dest=0x3ef7338, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.478] wcscat (in: _Dest=0x3ef7338, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0132.478] wcscat (in: _Dest=0x3ef7338, _Source="MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0132.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0132.480] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0132.480] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0132.480] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0132.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7e38 [0132.480] wcscpy (in: _Dest=0x3ef7e38, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0132.480] wcscat (in: _Dest=0x3ef7e38, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0132.480] wcscat (in: _Dest=0x3ef7e38, _Source="Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0132.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0132.481] FindNextFileW (in: hFindFile=0x3dcf750, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0132.482] FindClose (in: hFindFile=0x3dcf750 | out: hFindFile=0x3dcf750) returned 1 [0132.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0132.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e325f8) returned 1 [0132.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067300) returned 1 Thread: id = 218 os_tid = 0x4bc [0132.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067340 [0132.294] wcscpy (in: _Dest=0x3067340, _Source="C:\\Users\\Default\\Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0132.294] wcscat (in: _Dest=0x3067340, _Source="\\" | out: _Dest="C:\\Users\\Default\\Links\\") returned="C:\\Users\\Default\\Links\\" [0132.294] wcscat (in: _Dest=0x3067340, _Source="*" | out: _Dest="C:\\Users\\Default\\Links\\*") returned="C:\\Users\\Default\\Links\\*" [0132.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0132.294] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fbc0 [0134.751] wcscmp (_String1=".", _String2=".") returned 0 [0134.751] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.751] wcscmp (_String1="..", _String2=".") returned 1 [0134.751] wcscmp (_String1="..", _String2="..") returned 0 [0134.751] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0134.751] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0134.751] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0134.751] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0134.751] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0134.751] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0134.751] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280d3328, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0134.751] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0134.751] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0134.751] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0134.752] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0134.752] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0134.752] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0134.752] FindClose (in: hFindFile=0x3f1fbc0 | out: hFindFile=0x3f1fbc0) returned 1 [0134.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0134.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 [0134.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 Thread: id = 219 os_tid = 0xab8 [0132.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61de0 [0132.295] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\Default\\Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0132.296] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Local Settings\\") returned="C:\\Users\\Default\\Local Settings\\" [0132.296] wcscat (in: _Dest=0x3e61de0, _Source="*" | out: _Dest="C:\\Users\\Default\\Local Settings\\*") returned="C:\\Users\\Default\\Local Settings\\*" [0132.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0132.296] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0132.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 [0132.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f1e0) returned 1 Thread: id = 220 os_tid = 0x5d4 [0132.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067200 [0132.298] wcscpy (in: _Dest=0x3067200, _Source="C:\\Users\\Default\\Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0132.298] wcscat (in: _Dest=0x3067200, _Source="\\" | out: _Dest="C:\\Users\\Default\\Music\\") returned="C:\\Users\\Default\\Music\\" [0132.298] wcscat (in: _Dest=0x3067200, _Source="*" | out: _Dest="C:\\Users\\Default\\Music\\*") returned="C:\\Users\\Default\\Music\\*" [0132.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0132.298] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0133.986] wcscmp (_String1=".", _String2=".") returned 0 [0133.986] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.986] wcscmp (_String1="..", _String2=".") returned 1 [0133.986] wcscmp (_String1="..", _String2="..") returned 0 [0133.986] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.986] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.986] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.986] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0133.986] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067200) returned 1 [0133.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a10) returned 1 Thread: id = 221 os_tid = 0xa90 [0132.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32c28 [0132.300] wcscpy (in: _Dest=0x3e32c28, _Source="C:\\Users\\Default\\My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0132.300] wcscat (in: _Dest=0x3e32c28, _Source="\\" | out: _Dest="C:\\Users\\Default\\My Documents\\") returned="C:\\Users\\Default\\My Documents\\" [0132.300] wcscat (in: _Dest=0x3e32c28, _Source="*" | out: _Dest="C:\\Users\\Default\\My Documents\\*") returned="C:\\Users\\Default\\My Documents\\*" [0132.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0132.300] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0132.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32c28) returned 1 [0132.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f2b8) returned 1 Thread: id = 222 os_tid = 0xb1c [0132.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e00 [0132.303] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Default\\NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0132.303] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Default\\NetHood\\") returned="C:\\Users\\Default\\NetHood\\" [0132.303] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Default\\NetHood\\*") returned="C:\\Users\\Default\\NetHood\\*" [0132.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0132.303] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0132.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0132.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067380) returned 1 Thread: id = 223 os_tid = 0xb0 [0132.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067380 [0132.305] wcscpy (in: _Dest=0x3067380, _Source="C:\\Users\\Default\\Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0132.305] wcscat (in: _Dest=0x3067380, _Source="\\" | out: _Dest="C:\\Users\\Default\\Pictures\\") returned="C:\\Users\\Default\\Pictures\\" [0132.305] wcscat (in: _Dest=0x3067380, _Source="*" | out: _Dest="C:\\Users\\Default\\Pictures\\*") returned="C:\\Users\\Default\\Pictures\\*" [0132.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0132.305] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0133.988] wcscmp (_String1=".", _String2=".") returned 0 [0133.988] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.989] wcscmp (_String1="..", _String2=".") returned 1 [0133.989] wcscmp (_String1="..", _String2="..") returned 0 [0133.989] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.989] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.989] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.989] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0133.989] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0133.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0133.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067380) returned 1 [0133.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30672c0) returned 1 Thread: id = 224 os_tid = 0x1c4 [0132.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e32a78 [0132.309] wcscpy (in: _Dest=0x3e32a78, _Source="C:\\Users\\Default\\PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0132.309] wcscat (in: _Dest=0x3e32a78, _Source="\\" | out: _Dest="C:\\Users\\Default\\PrintHood\\") returned="C:\\Users\\Default\\PrintHood\\" [0132.309] wcscat (in: _Dest=0x3e32a78, _Source="*" | out: _Dest="C:\\Users\\Default\\PrintHood\\*") returned="C:\\Users\\Default\\PrintHood\\*" [0132.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0132.309] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0132.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a78) returned 1 [0132.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 Thread: id = 225 os_tid = 0x7fc [0132.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067180 [0132.312] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\Default\\Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0132.312] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\Default\\Recent\\") returned="C:\\Users\\Default\\Recent\\" [0132.312] wcscat (in: _Dest=0x3067180, _Source="*" | out: _Dest="C:\\Users\\Default\\Recent\\*") returned="C:\\Users\\Default\\Recent\\*" [0132.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0132.312] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 [0132.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 Thread: id = 226 os_tid = 0xda8 [0132.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e32a78 [0132.315] wcscpy (in: _Dest=0x3e32a78, _Source="C:\\Users\\Default\\Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0132.315] wcscat (in: _Dest=0x3e32a78, _Source="\\" | out: _Dest="C:\\Users\\Default\\Saved Games\\") returned="C:\\Users\\Default\\Saved Games\\" [0132.315] wcscat (in: _Dest=0x3e32a78, _Source="*" | out: _Dest="C:\\Users\\Default\\Saved Games\\*") returned="C:\\Users\\Default\\Saved Games\\*" [0132.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0132.315] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0133.991] wcscmp (_String1=".", _String2=".") returned 0 [0133.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.991] wcscmp (_String1="..", _String2=".") returned 1 [0133.991] wcscmp (_String1="..", _String2="..") returned 0 [0133.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.991] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.991] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0133.992] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a78) returned 1 [0133.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f300) returned 1 Thread: id = 227 os_tid = 0xdac [0132.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067180 [0132.316] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0132.316] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0132.316] wcscat (in: _Dest=0x3067180, _Source="*" | out: _Dest="C:\\Users\\Default\\Searches\\*") returned="C:\\Users\\Default\\Searches\\*" [0132.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0132.317] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f640 [0133.742] wcscmp (_String1=".", _String2=".") returned 0 [0133.742] FindNextFileW (in: hFindFile=0x3f1f640, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.742] wcscmp (_String1="..", _String2=".") returned 1 [0133.742] wcscmp (_String1="..", _String2="..") returned 0 [0133.742] FindNextFileW (in: hFindFile=0x3f1f640, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.742] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.742] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.742] FindNextFileW (in: hFindFile=0x3f1f640, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0133.742] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0133.743] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0133.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8cc88 [0133.743] wcscpy (in: _Dest=0x3d8cc88, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0133.743] wcscat (in: _Dest=0x3d8cc88, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0133.743] wcscat (in: _Dest=0x3d8cc88, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="C:\\Users\\Default\\Searches\\Everywhere.search-ms" [0134.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8cc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0134.471] FindNextFileW (in: hFindFile=0x3f1f640, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0134.471] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0134.471] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0134.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b498 [0134.471] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0134.471] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0134.471] wcscat (in: _Dest=0x3f1b498, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0134.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0134.472] FindNextFileW (in: hFindFile=0x3f1f640, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0134.472] FindClose (in: hFindFile=0x3f1f640 | out: hFindFile=0x3f1f640) returned 1 [0134.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0134.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 [0134.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066500) returned 1 Thread: id = 228 os_tid = 0xbc4 [0132.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066e00 [0132.318] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Default\\SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0132.318] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Default\\SendTo\\") returned="C:\\Users\\Default\\SendTo\\" [0132.318] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Default\\SendTo\\*") returned="C:\\Users\\Default\\SendTo\\*" [0132.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1870 [0132.318] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1870) returned 1 [0133.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0133.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a80) returned 1 Thread: id = 229 os_tid = 0xbc0 [0132.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33450 [0132.321] wcscpy (in: _Dest=0x3e33450, _Source="C:\\Users\\Default\\Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0132.321] wcscat (in: _Dest=0x3e33450, _Source="\\" | out: _Dest="C:\\Users\\Default\\Start Menu\\") returned="C:\\Users\\Default\\Start Menu\\" [0132.321] wcscat (in: _Dest=0x3e33450, _Source="*" | out: _Dest="C:\\Users\\Default\\Start Menu\\*") returned="C:\\Users\\Default\\Start Menu\\*" [0132.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0132.321] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0133.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0133.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067400) returned 1 Thread: id = 230 os_tid = 0xdc0 [0132.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e40f10 [0132.379] wcscpy (in: _Dest=0x3e40f10, _Source="C:\\Users\\Default\\Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0132.379] wcscat (in: _Dest=0x3e40f10, _Source="\\" | out: _Dest="C:\\Users\\Default\\Templates\\") returned="C:\\Users\\Default\\Templates\\" [0132.379] wcscat (in: _Dest=0x3e40f10, _Source="*" | out: _Dest="C:\\Users\\Default\\Templates\\*") returned="C:\\Users\\Default\\Templates\\*" [0132.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0132.379] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40f10) returned 1 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067140) returned 1 Thread: id = 231 os_tid = 0xd9c [0132.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1ee80 [0132.380] wcscpy (in: _Dest=0x3f1ee80, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0132.380] wcscat (in: _Dest=0x3f1ee80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0132.380] wcscat (in: _Dest=0x3f1ee80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\*") returned="C:\\Users\\EEBsYm5\\AppData\\*" [0132.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0132.380] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0132.380] wcscmp (_String1=".", _String2=".") returned 0 [0132.380] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.380] wcscmp (_String1="..", _String2=".") returned 1 [0132.380] wcscmp (_String1="..", _String2="..") returned 0 [0132.380] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0132.381] wcscmp (_String1="Local", _String2=".") returned 1 [0132.381] wcscmp (_String1="Local", _String2="..") returned 1 [0132.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e33330 [0132.381] wcscpy (in: _Dest=0x3e33330, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0132.381] wcscat (in: _Dest=0x3e33330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0132.381] wcscat (in: _Dest=0x3e33330, _Source="Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0135.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e33330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0135.466] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0135.466] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0135.466] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0135.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e61de0 [0135.466] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0135.466] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0135.466] wcscat (in: _Dest=0x3e61de0, _Source="LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0135.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0135.468] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0135.468] wcscmp (_String1="Roaming", _String2=".") returned 1 [0135.468] wcscmp (_String1="Roaming", _String2="..") returned 1 [0135.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e618e0 [0135.468] wcscpy (in: _Dest=0x3e618e0, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0135.468] wcscat (in: _Dest=0x3e618e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0135.468] wcscat (in: _Dest=0x3e618e0, _Source="Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0135.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e618e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0135.470] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0135.470] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0135.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0135.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ee80) returned 1 [0135.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80ab8) returned 1 Thread: id = 232 os_tid = 0xda0 [0132.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e621a0 [0132.381] wcscpy (in: _Dest=0x3e621a0, _Source="C:\\Users\\EEBsYm5\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0132.381] wcscat (in: _Dest=0x3e621a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\") returned="C:\\Users\\EEBsYm5\\Application Data\\" [0132.381] wcscat (in: _Dest=0x3e621a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\Application Data\\*" [0132.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0132.382] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Application Data\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0132.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621a0) returned 1 [0132.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 Thread: id = 233 os_tid = 0xd98 [0132.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1ef00 [0132.384] wcscpy (in: _Dest=0x3f1ef00, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0132.384] wcscat (in: _Dest=0x3f1ef00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0132.384] wcscat (in: _Dest=0x3f1ef00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\*") returned="C:\\Users\\EEBsYm5\\Contacts\\*" [0132.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0132.384] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Contacts\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0132.384] wcscmp (_String1=".", _String2=".") returned 0 [0132.384] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.384] wcscmp (_String1="..", _String2=".") returned 1 [0132.384] wcscmp (_String1="..", _String2="..") returned 0 [0132.384] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0132.384] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0132.384] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0132.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb10 [0132.385] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0132.385] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0132.385] wcscat (in: _Dest=0x3d8bb10, _Source="Administrator.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" [0133.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0133.004] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.004] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.004] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.004] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a55460, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x56a55460, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x56a55460, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ihnvbh euuncnh.contact", cAlternateFileName="IHNVBH~1.CON")) returned 1 [0133.005] wcscmp (_String1="ihnvbh euuncnh.contact", _String2=".") returned 1 [0133.005] wcscmp (_String1="ihnvbh euuncnh.contact", _String2="..") returned 1 [0133.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b7b0 [0133.005] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0133.005] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0133.005] wcscat (in: _Dest=0x3e0b7b0, _Source="ihnvbh euuncnh.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" [0133.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0133.006] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abb8cc0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lodkd auftnm.contact", cAlternateFileName="LODKDA~1.CON")) returned 1 [0133.006] wcscmp (_String1="lodkd auftnm.contact", _String2=".") returned 1 [0133.006] wcscmp (_String1="lodkd auftnm.contact", _String2="..") returned 1 [0133.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8b490 [0133.006] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0133.006] wcscat (in: _Dest=0x3d8b490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0133.006] wcscat (in: _Dest=0x3d8b490, _Source="lodkd auftnm.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" [0133.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0133.008] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4ad560, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x6c4ad560, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x6c4ad560, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mneuc uhnfghgg.contact", cAlternateFileName="MNEUCU~1.CON")) returned 1 [0133.008] wcscmp (_String1="mneuc uhnfghgg.contact", _String2=".") returned 1 [0133.008] wcscmp (_String1="mneuc uhnfghgg.contact", _String2="..") returned 1 [0133.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3648c0 [0133.008] wcscpy (in: _Dest=0x3648c0, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0133.008] wcscat (in: _Dest=0x3648c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0133.008] wcscat (in: _Dest=0x3648c0, _Source="mneuc uhnfghgg.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" [0133.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3648c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0133.010] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25458f20, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x25458f20, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x25458f20, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ofhbnh edferrr.contact", cAlternateFileName="OFHBNH~1.CON")) returned 1 [0133.010] wcscmp (_String1="ofhbnh edferrr.contact", _String2=".") returned 1 [0133.010] wcscmp (_String1="ofhbnh edferrr.contact", _String2="..") returned 1 [0133.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3649a0 [0133.010] wcscpy (in: _Dest=0x3649a0, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0133.010] wcscat (in: _Dest=0x3649a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0133.010] wcscat (in: _Dest=0x3649a0, _Source="ofhbnh edferrr.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" [0133.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3649a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0133.012] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 1 [0133.012] wcscmp (_String1="uosjfl sidvllie.contact", _String2=".") returned 1 [0133.012] wcscmp (_String1="uosjfl sidvllie.contact", _String2="..") returned 1 [0133.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x364a80 [0133.012] wcscpy (in: _Dest=0x364a80, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0133.012] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0133.012] wcscat (in: _Dest=0x364a80, _Source="uosjfl sidvllie.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" [0133.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x364a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0133.015] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 0 [0133.015] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0133.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0133.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ef00) returned 1 [0133.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 Thread: id = 234 os_tid = 0xda4 [0132.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1ef80 [0132.389] wcscpy (in: _Dest=0x3f1ef80, _Source="C:\\Users\\EEBsYm5\\Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0132.389] wcscat (in: _Dest=0x3f1ef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\") returned="C:\\Users\\EEBsYm5\\Cookies\\" [0132.390] wcscat (in: _Dest=0x3f1ef80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\*") returned="C:\\Users\\EEBsYm5\\Cookies\\*" [0132.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0132.390] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Cookies\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0132.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ef80) returned 1 [0132.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 Thread: id = 235 os_tid = 0xdb0 [0132.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066b00 [0132.394] wcscpy (in: _Dest=0x3066b00, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.394] wcscat (in: _Dest=0x3066b00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.394] wcscat (in: _Dest=0x3066b00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\*" [0132.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0132.395] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x89aa2fc0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x89aa2fc0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0132.395] wcscmp (_String1=".", _String2=".") returned 0 [0132.395] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x89aa2fc0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x89aa2fc0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.395] wcscmp (_String1="..", _String2=".") returned 1 [0132.395] wcscmp (_String1="..", _String2="..") returned 0 [0132.395] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c64f5d0, ftCreationTime.dwHighDateTime=0x1d5d94e, ftLastAccessTime.dwLowDateTime=0x48363d80, ftLastAccessTime.dwHighDateTime=0x1d5daf3, ftLastWriteTime.dwLowDateTime=0x48363d80, ftLastWriteTime.dwHighDateTime=0x1d5daf3, nFileSizeHigh=0x0, nFileSizeLow=0x5d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GFCLI7TInT ziFXB.wav", cAlternateFileName="-GFCLI~1.WAV")) returned 1 [0132.395] wcscmp (_String1="-GFCLI7TInT ziFXB.wav", _String2=".") returned -1 [0132.395] wcscmp (_String1="-GFCLI7TInT ziFXB.wav", _String2="..") returned -1 [0132.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8eb00 [0132.395] wcscpy (in: _Dest=0x3d8eb00, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0132.395] wcscat (in: _Dest=0x3d8eb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0132.395] wcscat (in: _Dest=0x3d8eb00, _Source="-GFCLI7TInT ziFXB.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav" [0133.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8eb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0133.809] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89049a0, ftCreationTime.dwHighDateTime=0x1d5e25a, ftLastAccessTime.dwLowDateTime=0xcdb502b0, ftLastAccessTime.dwHighDateTime=0x1d5e05d, ftLastWriteTime.dwLowDateTime=0xcdb502b0, ftLastWriteTime.dwHighDateTime=0x1d5e05d, nFileSizeHigh=0x0, nFileSizeLow=0x3ddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="-TqJ6GRcTnBng.ots", cAlternateFileName="-TQJ6G~1.OTS")) returned 1 [0133.809] wcscmp (_String1="-TqJ6GRcTnBng.ots", _String2=".") returned -1 [0133.809] wcscmp (_String1="-TqJ6GRcTnBng.ots", _String2="..") returned -1 [0133.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6c08 [0133.809] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.809] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.809] wcscat (in: _Dest=0x2fe6c08, _Source="-TqJ6GRcTnBng.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots" [0133.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0 [0133.811] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa32fed0, ftCreationTime.dwHighDateTime=0x1d5e703, ftLastAccessTime.dwLowDateTime=0xd9ab8e0, ftLastAccessTime.dwHighDateTime=0x1d5e237, ftLastWriteTime.dwLowDateTime=0xd9ab8e0, ftLastWriteTime.dwHighDateTime=0x1d5e237, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0EEg-ZlYVqrH", cAlternateFileName="0EEG-Z~1")) returned 1 [0133.811] wcscmp (_String1="0EEg-ZlYVqrH", _String2=".") returned 1 [0133.811] wcscmp (_String1="0EEg-ZlYVqrH", _String2="..") returned 1 [0133.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7c80 [0133.811] wcscpy (in: _Dest=0x3ef7c80, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.811] wcscat (in: _Dest=0x3ef7c80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.811] wcscat (in: _Dest=0x3ef7c80, _Source="0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0133.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0133.812] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d7f3b0, ftCreationTime.dwHighDateTime=0x1d5da50, ftLastAccessTime.dwLowDateTime=0xf84abe60, ftLastAccessTime.dwHighDateTime=0x1d5dd39, ftLastWriteTime.dwLowDateTime=0xf84abe60, ftLastWriteTime.dwHighDateTime=0x1d5dd39, nFileSizeHigh=0x0, nFileSizeLow=0x4549, dwReserved0=0x0, dwReserved1=0x0, cFileName="2VTr5zuEgkCp28Efsi.ots", cAlternateFileName="2VTR5Z~1.OTS")) returned 1 [0133.812] wcscmp (_String1="2VTr5zuEgkCp28Efsi.ots", _String2=".") returned 1 [0133.813] wcscmp (_String1="2VTr5zuEgkCp28Efsi.ots", _String2="..") returned 1 [0133.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e9c8 [0133.813] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.813] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.813] wcscat (in: _Dest=0x3d8e9c8, _Source="2VTr5zuEgkCp28Efsi.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots" [0133.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0133.814] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44bd2890, ftCreationTime.dwHighDateTime=0x1d5e123, ftLastAccessTime.dwLowDateTime=0x303ba8f0, ftLastAccessTime.dwHighDateTime=0x1d5e6ab, ftLastWriteTime.dwLowDateTime=0x303ba8f0, ftLastWriteTime.dwHighDateTime=0x1d5e6ab, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="2WsMVjLPuw_3YZQib7-.mp3", cAlternateFileName="2WSMVJ~1.MP3")) returned 1 [0133.814] wcscmp (_String1="2WsMVjLPuw_3YZQib7-.mp3", _String2=".") returned 1 [0133.814] wcscmp (_String1="2WsMVjLPuw_3YZQib7-.mp3", _String2="..") returned 1 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x364850 [0133.815] wcscpy (in: _Dest=0x364850, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.815] wcscat (in: _Dest=0x364850, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.815] wcscat (in: _Dest=0x364850, _Source="2WsMVjLPuw_3YZQib7-.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3" [0133.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x364850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0133.816] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda1341a0, ftCreationTime.dwHighDateTime=0x1d5e668, ftLastAccessTime.dwLowDateTime=0xbe925a60, ftLastAccessTime.dwHighDateTime=0x1d5e0e6, ftLastWriteTime.dwLowDateTime=0xbe925a60, ftLastWriteTime.dwHighDateTime=0x1d5e0e6, nFileSizeHigh=0x0, nFileSizeLow=0xfbeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9gA9lhPfqj7csu5iov5L.gif", cAlternateFileName="9GA9LH~1.GIF")) returned 1 [0133.816] wcscmp (_String1="9gA9lhPfqj7csu5iov5L.gif", _String2=".") returned 1 [0133.816] wcscmp (_String1="9gA9lhPfqj7csu5iov5L.gif", _String2="..") returned 1 [0133.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29170 [0133.816] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.816] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.816] wcscat (in: _Dest=0x3f29170, _Source="9gA9lhPfqj7csu5iov5L.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif" [0133.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0133.818] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3021d820, ftCreationTime.dwHighDateTime=0x1d5ddd3, ftLastAccessTime.dwLowDateTime=0xe04ecd0, ftLastAccessTime.dwHighDateTime=0x1d5df4c, ftLastWriteTime.dwLowDateTime=0xe04ecd0, ftLastWriteTime.dwHighDateTime=0x1d5df4c, nFileSizeHigh=0x0, nFileSizeLow=0x6983, dwReserved0=0x0, dwReserved1=0x0, cFileName="b3Bl0.swf", cAlternateFileName="")) returned 1 [0133.818] wcscmp (_String1="b3Bl0.swf", _String2=".") returned 1 [0133.818] wcscmp (_String1="b3Bl0.swf", _String2="..") returned 1 [0133.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e4c8 [0133.818] wcscpy (in: _Dest=0x3e4e4c8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.818] wcscat (in: _Dest=0x3e4e4c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.818] wcscat (in: _Dest=0x3e4e4c8, _Source="b3Bl0.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf" [0133.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0133.819] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bc7c920, ftCreationTime.dwHighDateTime=0x1d5dac7, ftLastAccessTime.dwLowDateTime=0xa2766010, ftLastAccessTime.dwHighDateTime=0x1d5d8fd, ftLastWriteTime.dwLowDateTime=0xa2766010, ftLastWriteTime.dwHighDateTime=0x1d5d8fd, nFileSizeHigh=0x0, nFileSizeLow=0x9991, dwReserved0=0x0, dwReserved1=0x0, cFileName="D6Q2Pu.m4a", cAlternateFileName="")) returned 1 [0133.819] wcscmp (_String1="D6Q2Pu.m4a", _String2=".") returned 1 [0133.819] wcscmp (_String1="D6Q2Pu.m4a", _String2="..") returned 1 [0133.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4e478 [0133.820] wcscpy (in: _Dest=0x3e4e478, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.820] wcscat (in: _Dest=0x3e4e478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.820] wcscat (in: _Dest=0x3e4e478, _Source="D6Q2Pu.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a" [0133.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0133.821] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.821] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.821] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.821] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd625d380, ftCreationTime.dwHighDateTime=0x1d5e336, ftLastAccessTime.dwLowDateTime=0x500d0440, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x500d0440, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="esVR", cAlternateFileName="")) returned 1 [0133.821] wcscmp (_String1="esVR", _String2=".") returned 1 [0133.821] wcscmp (_String1="esVR", _String2="..") returned 1 [0133.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e32fd0 [0133.821] wcscpy (in: _Dest=0x3e32fd0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.822] wcscat (in: _Dest=0x3e32fd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.822] wcscat (in: _Dest=0x3e32fd0, _Source="esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0133.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e32fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0133.823] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb3a0, ftCreationTime.dwHighDateTime=0x1d5ddb1, ftLastAccessTime.dwLowDateTime=0x34cf5de0, ftLastAccessTime.dwHighDateTime=0x1d5e6d7, ftLastWriteTime.dwLowDateTime=0x34cf5de0, ftLastWriteTime.dwHighDateTime=0x1d5e6d7, nFileSizeHigh=0x0, nFileSizeLow=0x18206, dwReserved0=0x0, dwReserved1=0x0, cFileName="fEetz.swf", cAlternateFileName="")) returned 1 [0133.823] wcscmp (_String1="fEetz.swf", _String2=".") returned 1 [0133.823] wcscmp (_String1="fEetz.swf", _String2="..") returned 1 [0133.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e3d8 [0133.823] wcscpy (in: _Dest=0x3e4e3d8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.823] wcscat (in: _Dest=0x3e4e3d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.823] wcscat (in: _Dest=0x3e4e3d8, _Source="fEetz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf" [0133.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0133.825] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb410db80, ftCreationTime.dwHighDateTime=0x1d5dc6c, ftLastAccessTime.dwLowDateTime=0xfefa370, ftLastAccessTime.dwHighDateTime=0x1d5e189, ftLastWriteTime.dwLowDateTime=0xfefa370, ftLastWriteTime.dwHighDateTime=0x1d5e189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-zk0I4zN_G6EJ9", cAlternateFileName="G-ZK0I~1")) returned 1 [0133.825] wcscmp (_String1="g-zk0I4zN_G6EJ9", _String2=".") returned 1 [0133.825] wcscmp (_String1="g-zk0I4zN_G6EJ9", _String2="..") returned 1 [0133.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0133.825] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.825] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.825] wcscat (in: _Dest=0x2fe6c68, _Source="g-zk0I4zN_G6EJ9" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9" [0133.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0133.827] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c73b80, ftCreationTime.dwHighDateTime=0x1d5da61, ftLastAccessTime.dwLowDateTime=0xe68be150, ftLastAccessTime.dwHighDateTime=0x1d5d9e6, ftLastWriteTime.dwLowDateTime=0xe68be150, ftLastWriteTime.dwHighDateTime=0x1d5d9e6, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gUkYKxVbEfFX_yeNUleK.png", cAlternateFileName="GUKYKX~1.PNG")) returned 1 [0133.827] wcscmp (_String1="gUkYKxVbEfFX_yeNUleK.png", _String2=".") returned 1 [0133.827] wcscmp (_String1="gUkYKxVbEfFX_yeNUleK.png", _String2="..") returned 1 [0133.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f291e0 [0133.827] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.827] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.827] wcscat (in: _Dest=0x3f291e0, _Source="gUkYKxVbEfFX_yeNUleK.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png") returned="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png" [0133.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f291e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0133.828] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4355a290, ftCreationTime.dwHighDateTime=0x1d5e5b3, ftLastAccessTime.dwLowDateTime=0x78da9a90, ftLastAccessTime.dwHighDateTime=0x1d5e57e, ftLastWriteTime.dwLowDateTime=0x78da9a90, ftLastWriteTime.dwHighDateTime=0x1d5e57e, nFileSizeHigh=0x0, nFileSizeLow=0xd761, dwReserved0=0x0, dwReserved1=0x0, cFileName="H1y6F.bmp", cAlternateFileName="")) returned 1 [0133.828] wcscmp (_String1="H1y6F.bmp", _String2=".") returned 1 [0133.828] wcscmp (_String1="H1y6F.bmp", _String2="..") returned 1 [0133.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e298 [0133.829] wcscpy (in: _Dest=0x3e4e298, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.829] wcscat (in: _Dest=0x3e4e298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.829] wcscat (in: _Dest=0x3e4e298, _Source="H1y6F.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp" [0133.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0133.830] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1374e950, ftCreationTime.dwHighDateTime=0x1d5e39c, ftLastAccessTime.dwLowDateTime=0x120e91d0, ftLastAccessTime.dwHighDateTime=0x1d5dc65, ftLastWriteTime.dwLowDateTime=0x120e91d0, ftLastWriteTime.dwHighDateTime=0x1d5dc65, nFileSizeHigh=0x0, nFileSizeLow=0x18346, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iz1N2.png", cAlternateFileName="")) returned 1 [0133.830] wcscmp (_String1="Iz1N2.png", _String2=".") returned 1 [0133.830] wcscmp (_String1="Iz1N2.png", _String2="..") returned 1 [0133.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e338 [0133.830] wcscpy (in: _Dest=0x3e4e338, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.830] wcscat (in: _Dest=0x3e4e338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.830] wcscat (in: _Dest=0x3e4e338, _Source="Iz1N2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png") returned="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png" [0133.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0133.832] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x172ffd80, ftCreationTime.dwHighDateTime=0x1d5dbf1, ftLastAccessTime.dwLowDateTime=0xce050400, ftLastAccessTime.dwHighDateTime=0x1d5e79b, ftLastWriteTime.dwLowDateTime=0xce050400, ftLastWriteTime.dwHighDateTime=0x1d5e79b, nFileSizeHigh=0x0, nFileSizeLow=0x7ab6, dwReserved0=0x0, dwReserved1=0x0, cFileName="meq2Zc.odt", cAlternateFileName="")) returned 1 [0133.832] wcscmp (_String1="meq2Zc.odt", _String2=".") returned 1 [0133.832] wcscmp (_String1="meq2Zc.odt", _String2="..") returned 1 [0133.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4e2e8 [0133.832] wcscpy (in: _Dest=0x3e4e2e8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.832] wcscat (in: _Dest=0x3e4e2e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.832] wcscat (in: _Dest=0x3e4e2e8, _Source="meq2Zc.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt" [0133.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e4e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0133.834] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70eaec0, ftCreationTime.dwHighDateTime=0x1d5e45a, ftLastAccessTime.dwLowDateTime=0xceb31180, ftLastAccessTime.dwHighDateTime=0x1d5e5de, ftLastWriteTime.dwLowDateTime=0xceb31180, ftLastWriteTime.dwHighDateTime=0x1d5e5de, nFileSizeHigh=0x0, nFileSizeLow=0xd9f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLtdivlNGnSQ.csv", cAlternateFileName="MLTDIV~1.CSV")) returned 1 [0133.834] wcscmp (_String1="MLtdivlNGnSQ.csv", _String2=".") returned 1 [0133.834] wcscmp (_String1="MLtdivlNGnSQ.csv", _String2="..") returned 1 [0133.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0133.834] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.834] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.834] wcscat (in: _Dest=0x2fe6cc8, _Source="MLtdivlNGnSQ.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv") returned="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv" [0133.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0133.836] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c1260, ftCreationTime.dwHighDateTime=0x1d5e41d, ftLastAccessTime.dwLowDateTime=0xd1530c40, ftLastAccessTime.dwHighDateTime=0x1d5e748, ftLastWriteTime.dwLowDateTime=0xd1530c40, ftLastWriteTime.dwHighDateTime=0x1d5e748, nFileSizeHigh=0x0, nFileSizeLow=0x6e4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSqaM qhZ9U8gFzxh.png", cAlternateFileName="PSQAMQ~1.PNG")) returned 1 [0133.836] wcscmp (_String1="PSqaM qhZ9U8gFzxh.png", _String2=".") returned 1 [0133.836] wcscmp (_String1="PSqaM qhZ9U8gFzxh.png", _String2="..") returned 1 [0133.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8cbb8 [0133.836] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.836] wcscat (in: _Dest=0x3d8cbb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.836] wcscat (in: _Dest=0x3d8cbb8, _Source="PSqaM qhZ9U8gFzxh.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png") returned="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png" [0133.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8cbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0133.837] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a98f90, ftCreationTime.dwHighDateTime=0x1d5dd4f, ftLastAccessTime.dwLowDateTime=0xc5784150, ftLastAccessTime.dwHighDateTime=0x1d5de20, ftLastWriteTime.dwLowDateTime=0xc5784150, ftLastWriteTime.dwHighDateTime=0x1d5de20, nFileSizeHigh=0x0, nFileSizeLow=0x87cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyj Eyoq.mkv", cAlternateFileName="PYJEYO~1.MKV")) returned 1 [0133.837] wcscmp (_String1="Pyj Eyoq.mkv", _String2=".") returned 1 [0133.837] wcscmp (_String1="Pyj Eyoq.mkv", _String2="..") returned 1 [0133.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7288 [0133.838] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.838] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.838] wcscat (in: _Dest=0x3ef7288, _Source="Pyj Eyoq.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv" [0133.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0133.839] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b85e8b0, ftCreationTime.dwHighDateTime=0x1d5e63a, ftLastAccessTime.dwLowDateTime=0x26837d80, ftLastAccessTime.dwHighDateTime=0x1d5dc9f, ftLastWriteTime.dwLowDateTime=0x26837d80, ftLastWriteTime.dwHighDateTime=0x1d5dc9f, nFileSizeHigh=0x0, nFileSizeLow=0xcafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q2MN9BT5RUR-bD-w5.swf", cAlternateFileName="Q2MN9B~1.SWF")) returned 1 [0133.839] wcscmp (_String1="Q2MN9BT5RUR-bD-w5.swf", _String2=".") returned 1 [0133.839] wcscmp (_String1="Q2MN9BT5RUR-bD-w5.swf", _String2="..") returned 1 [0133.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e4e8 [0133.839] wcscpy (in: _Dest=0x3d8e4e8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.840] wcscat (in: _Dest=0x3d8e4e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.840] wcscat (in: _Dest=0x3d8e4e8, _Source="Q2MN9BT5RUR-bD-w5.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf" [0133.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0133.842] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7849a0, ftCreationTime.dwHighDateTime=0x1d5de2b, ftLastAccessTime.dwLowDateTime=0x1f8adaa0, ftLastAccessTime.dwHighDateTime=0x1d5e483, ftLastWriteTime.dwLowDateTime=0x1f8adaa0, ftLastWriteTime.dwHighDateTime=0x1d5e483, nFileSizeHigh=0x0, nFileSizeLow=0x1319b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q7vntwo2c.gif", cAlternateFileName="Q7VNTW~1.GIF")) returned 1 [0133.842] wcscmp (_String1="Q7vntwo2c.gif", _String2=".") returned 1 [0133.842] wcscmp (_String1="Q7vntwo2c.gif", _String2="..") returned 1 [0133.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7180 [0133.842] wcscpy (in: _Dest=0x3ef7180, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0133.842] wcscat (in: _Dest=0x3ef7180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0133.842] wcscat (in: _Dest=0x3ef7180, _Source="Q7vntwo2c.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif" [0133.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0134.714] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b1fa1e0, ftCreationTime.dwHighDateTime=0x1d5e63d, ftLastAccessTime.dwLowDateTime=0xc1a4b7f0, ftLastAccessTime.dwHighDateTime=0x1d5e3ae, ftLastWriteTime.dwLowDateTime=0xc1a4b7f0, ftLastWriteTime.dwHighDateTime=0x1d5e3ae, nFileSizeHigh=0x0, nFileSizeLow=0x11310, dwReserved0=0x0, dwReserved1=0x0, cFileName="rH SKXiDlI7nCRSUr7O.gif", cAlternateFileName="RHSKXI~1.GIF")) returned 1 [0134.714] wcscmp (_String1="rH SKXiDlI7nCRSUr7O.gif", _String2=".") returned 1 [0134.714] wcscmp (_String1="rH SKXiDlI7nCRSUr7O.gif", _String2="..") returned 1 [0134.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29aa0 [0134.714] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0134.714] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0134.714] wcscat (in: _Dest=0x3f29aa0, _Source="rH SKXiDlI7nCRSUr7O.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif" [0135.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0135.539] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4dcb80, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x7b4dcb80, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x67539b00, ftLastWriteTime.dwHighDateTime=0x1d6ac4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1c65, dwReserved0=0x0, dwReserved1=0x0, cFileName="skyfall_user wilsonk_wilsonk_ste.txt.ps1", cAlternateFileName="SKYFAL~1.PS1")) returned 1 [0135.540] wcscmp (_String1="skyfall_user wilsonk_wilsonk_ste.txt.ps1", _String2=".") returned 1 [0135.540] wcscmp (_String1="skyfall_user wilsonk_wilsonk_ste.txt.ps1", _String2="..") returned 1 [0135.540] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa61eefe0, ftCreationTime.dwHighDateTime=0x1d5e0b7, ftLastAccessTime.dwLowDateTime=0xc7d09e00, ftLastAccessTime.dwHighDateTime=0x1d5d832, ftLastWriteTime.dwLowDateTime=0xc7d09e00, ftLastWriteTime.dwHighDateTime=0x1d5d832, nFileSizeHigh=0x0, nFileSizeLow=0x11d25, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKxnBUDz069imI.bmp", cAlternateFileName="TKXNBU~1.BMP")) returned 1 [0135.540] wcscmp (_String1="TKxnBUDz069imI.bmp", _String2=".") returned 1 [0135.540] wcscmp (_String1="TKxnBUDz069imI.bmp", _String2="..") returned 1 [0135.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0135.540] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.540] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.540] wcscat (in: _Dest=0x2fe6c68, _Source="TKxnBUDz069imI.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp" [0135.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0135.541] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa849e150, ftCreationTime.dwHighDateTime=0x1d5da84, ftLastAccessTime.dwLowDateTime=0xc0c053b0, ftLastAccessTime.dwHighDateTime=0x1d5dd11, ftLastWriteTime.dwLowDateTime=0xc0c053b0, ftLastWriteTime.dwHighDateTime=0x1d5dd11, nFileSizeHigh=0x0, nFileSizeLow=0x13a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucFoRiPYJJs-HRIWppXr.pptx", cAlternateFileName="UCFORI~1.PPT")) returned 1 [0135.541] wcscmp (_String1="ucFoRiPYJJs-HRIWppXr.pptx", _String2=".") returned 1 [0135.541] wcscmp (_String1="ucFoRiPYJJs-HRIWppXr.pptx", _String2="..") returned 1 [0135.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0ae80 [0135.541] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.541] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.541] wcscat (in: _Dest=0x3e0ae80, _Source="ucFoRiPYJJs-HRIWppXr.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx" [0135.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0135.543] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9108b0, ftCreationTime.dwHighDateTime=0x1d5df37, ftLastAccessTime.dwLowDateTime=0x7bf092b0, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0x7bf092b0, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x10aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v78tGwzbi.mkv", cAlternateFileName="V78TGW~1.MKV")) returned 1 [0135.543] wcscmp (_String1="v78tGwzbi.mkv", _String2=".") returned 1 [0135.543] wcscmp (_String1="v78tGwzbi.mkv", _String2="..") returned 1 [0135.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7ff0 [0135.543] wcscpy (in: _Dest=0x3ef7ff0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.543] wcscat (in: _Dest=0x3ef7ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.543] wcscat (in: _Dest=0x3ef7ff0, _Source="v78tGwzbi.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv" [0135.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0135.546] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c45bf0, ftCreationTime.dwHighDateTime=0x1d5e849, ftLastAccessTime.dwLowDateTime=0xdf9693d0, ftLastAccessTime.dwHighDateTime=0x1d5e6ee, ftLastWriteTime.dwLowDateTime=0xdf9693d0, ftLastWriteTime.dwHighDateTime=0x1d5e6ee, nFileSizeHigh=0x0, nFileSizeLow=0xf7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmKkc1Xe_u4CeHw4zH.avi", cAlternateFileName="WMKKC1~1.AVI")) returned 1 [0135.546] wcscmp (_String1="wmKkc1Xe_u4CeHw4zH.avi", _String2=".") returned 1 [0135.546] wcscmp (_String1="wmKkc1Xe_u4CeHw4zH.avi", _String2="..") returned 1 [0135.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef338 [0135.547] wcscpy (in: _Dest=0x3eef338, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.547] wcscat (in: _Dest=0x3eef338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.547] wcscat (in: _Dest=0x3eef338, _Source="wmKkc1Xe_u4CeHw4zH.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi" [0135.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0135.548] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01e2120, ftCreationTime.dwHighDateTime=0x1d5e126, ftLastAccessTime.dwLowDateTime=0x584d0750, ftLastAccessTime.dwHighDateTime=0x1d5e311, ftLastWriteTime.dwLowDateTime=0x584d0750, ftLastWriteTime.dwHighDateTime=0x1d5e311, nFileSizeHigh=0x0, nFileSizeLow=0x4846, dwReserved0=0x0, dwReserved1=0x0, cFileName="yeizTt0a4K0wc4Pm1-.mp4", cAlternateFileName="YEIZTT~1.MP4")) returned 1 [0135.548] wcscmp (_String1="yeizTt0a4K0wc4Pm1-.mp4", _String2=".") returned 1 [0135.548] wcscmp (_String1="yeizTt0a4K0wc4Pm1-.mp4", _String2="..") returned 1 [0135.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef2d0 [0135.548] wcscpy (in: _Dest=0x3eef2d0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.548] wcscat (in: _Dest=0x3eef2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.548] wcscat (in: _Dest=0x3eef2d0, _Source="yeizTt0a4K0wc4Pm1-.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4" [0135.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0135.549] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68396c80, ftCreationTime.dwHighDateTime=0x1d5e1bd, ftLastAccessTime.dwLowDateTime=0xbf4af10, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xbf4af10, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x113a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yikLt1GHePr.odp", cAlternateFileName="YIKLT1~1.ODP")) returned 1 [0135.549] wcscmp (_String1="yikLt1GHePr.odp", _String2=".") returned 1 [0135.549] wcscmp (_String1="yikLt1GHePr.odp", _String2="..") returned 1 [0135.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ea8 [0135.549] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.549] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.549] wcscat (in: _Dest=0x2fe6ea8, _Source="yikLt1GHePr.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp") returned="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp" [0135.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0135.550] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab6f690, ftCreationTime.dwHighDateTime=0x1d5db08, ftLastAccessTime.dwLowDateTime=0x50aff10, ftLastAccessTime.dwHighDateTime=0x1d5db24, ftLastWriteTime.dwLowDateTime=0x50aff10, ftLastWriteTime.dwHighDateTime=0x1d5db24, nFileSizeHigh=0x0, nFileSizeLow=0x12b73, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkENOY.ods", cAlternateFileName="")) returned 1 [0135.551] wcscmp (_String1="zkENOY.ods", _String2=".") returned 1 [0135.551] wcscmp (_String1="zkENOY.ods", _String2="..") returned 1 [0135.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e625b0 [0135.551] wcscpy (in: _Dest=0x3e625b0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.551] wcscat (in: _Dest=0x3e625b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.551] wcscat (in: _Dest=0x3e625b0, _Source="zkENOY.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods" [0135.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e625b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0135.552] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ea8ad0, ftCreationTime.dwHighDateTime=0x1d5df55, ftLastAccessTime.dwLowDateTime=0x567556e0, ftLastAccessTime.dwHighDateTime=0x1d5e1ad, ftLastWriteTime.dwLowDateTime=0x567556e0, ftLastWriteTime.dwHighDateTime=0x1d5e1ad, nFileSizeHigh=0x0, nFileSizeLow=0xdb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="_pMs07SwzsR4omRQC.wav", cAlternateFileName="_PMS07~1.WAV")) returned 1 [0135.552] wcscmp (_String1="_pMs07SwzsR4omRQC.wav", _String2=".") returned 1 [0135.552] wcscmp (_String1="_pMs07SwzsR4omRQC.wav", _String2="..") returned 1 [0135.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eef268 [0135.552] wcscpy (in: _Dest=0x3eef268, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.552] wcscat (in: _Dest=0x3eef268, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.552] wcscat (in: _Dest=0x3eef268, _Source="_pMs07SwzsR4omRQC.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav" [0135.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0135.554] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340520, ftCreationTime.dwHighDateTime=0x1d5e640, ftLastAccessTime.dwLowDateTime=0x918b4b90, ftLastAccessTime.dwHighDateTime=0x1d5dcee, ftLastWriteTime.dwLowDateTime=0x918b4b90, ftLastWriteTime.dwHighDateTime=0x1d5dcee, nFileSizeHigh=0x0, nFileSizeLow=0xbf0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Q E6fiFj0kZcfuZ1bS.pptx", cAlternateFileName="_QE6FI~1.PPT")) returned 1 [0135.554] wcscmp (_String1="_Q E6fiFj0kZcfuZ1bS.pptx", _String2=".") returned 1 [0135.554] wcscmp (_String1="_Q E6fiFj0kZcfuZ1bS.pptx", _String2="..") returned 1 [0135.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5488 [0135.554] wcscpy (in: _Dest=0x66e5488, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0135.554] wcscat (in: _Dest=0x66e5488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.554] wcscat (in: _Dest=0x66e5488, _Source="_Q E6fiFj0kZcfuZ1bS.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx" [0135.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0135.555] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8340520, ftCreationTime.dwHighDateTime=0x1d5e640, ftLastAccessTime.dwLowDateTime=0x918b4b90, ftLastAccessTime.dwHighDateTime=0x1d5dcee, ftLastWriteTime.dwLowDateTime=0x918b4b90, ftLastWriteTime.dwHighDateTime=0x1d5dcee, nFileSizeHigh=0x0, nFileSizeLow=0xbf0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Q E6fiFj0kZcfuZ1bS.pptx", cAlternateFileName="_QE6FI~1.PPT")) returned 0 [0135.555] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0135.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0135.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 [0135.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d80) returned 1 Thread: id = 236 os_tid = 0xdb8 [0132.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e330f0 [0132.396] wcscpy (in: _Dest=0x3e330f0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.396] wcscat (in: _Dest=0x3e330f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.396] wcscat (in: _Dest=0x3e330f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\*") returned="C:\\Users\\EEBsYm5\\Documents\\*" [0132.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c26e0 [0132.396] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\*", lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ec70700, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ec70700, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0132.397] wcscmp (_String1=".", _String2=".") returned 0 [0132.397] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ec70700, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ec70700, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.397] wcscmp (_String1="..", _String2=".") returned 1 [0132.397] wcscmp (_String1="..", _String2="..") returned 0 [0132.397] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f41330, ftCreationTime.dwHighDateTime=0x1d5e54c, ftLastAccessTime.dwLowDateTime=0x3deaff00, ftLastAccessTime.dwHighDateTime=0x1d5d828, ftLastWriteTime.dwLowDateTime=0x3deaff00, ftLastWriteTime.dwHighDateTime=0x1d5d828, nFileSizeHigh=0x0, nFileSizeLow=0x14e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="-MFvjq7RGfODP.pps", cAlternateFileName="-MFVJQ~1.PPS")) returned 1 [0132.397] wcscmp (_String1="-MFvjq7RGfODP.pps", _String2=".") returned -1 [0132.397] wcscmp (_String1="-MFvjq7RGfODP.pps", _String2="..") returned -1 [0132.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ea98 [0132.397] wcscpy (in: _Dest=0x3d8ea98, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.397] wcscat (in: _Dest=0x3d8ea98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.398] wcscat (in: _Dest=0x3d8ea98, _Source="-MFvjq7RGfODP.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps") returned="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps" [0132.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0132.487] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31611c0, ftCreationTime.dwHighDateTime=0x1d5706c, ftLastAccessTime.dwLowDateTime=0xf8d480, ftLastAccessTime.dwHighDateTime=0x1d5a3f5, ftLastWriteTime.dwLowDateTime=0xf8d480, ftLastWriteTime.dwHighDateTime=0x1d5a3f5, nFileSizeHigh=0x0, nFileSizeLow=0x18003, dwReserved0=0x0, dwReserved1=0x0, cFileName="-T9zM98yKiH89CIabNz.pptx", cAlternateFileName="-T9ZM9~1.PPT")) returned 1 [0132.487] wcscmp (_String1="-T9zM98yKiH89CIabNz.pptx", _String2=".") returned -1 [0132.487] wcscmp (_String1="-T9zM98yKiH89CIabNz.pptx", _String2="..") returned -1 [0132.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b200 [0132.487] wcscpy (in: _Dest=0x3e0b200, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.487] wcscat (in: _Dest=0x3e0b200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.487] wcscat (in: _Dest=0x3e0b200, _Source="-T9zM98yKiH89CIabNz.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx" [0132.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0132.489] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cc90d0, ftCreationTime.dwHighDateTime=0x1d59b05, ftLastAccessTime.dwLowDateTime=0xccb963b0, ftLastAccessTime.dwHighDateTime=0x1d5c73a, ftLastWriteTime.dwLowDateTime=0xccb963b0, ftLastWriteTime.dwHighDateTime=0x1d5c73a, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="-TJvwy.xlsx", cAlternateFileName="-TJVWY~1.XLS")) returned 1 [0132.489] wcscmp (_String1="-TJvwy.xlsx", _String2=".") returned -1 [0132.489] wcscmp (_String1="-TJvwy.xlsx", _String2="..") returned -1 [0132.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef72e0 [0132.489] wcscpy (in: _Dest=0x3ef72e0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.489] wcscat (in: _Dest=0x3ef72e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.489] wcscat (in: _Dest=0x3ef72e0, _Source="-TJvwy.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx" [0132.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef72e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0132.491] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf07630, ftCreationTime.dwHighDateTime=0x1d5da96, ftLastAccessTime.dwLowDateTime=0x6716be00, ftLastAccessTime.dwHighDateTime=0x1d5d873, ftLastWriteTime.dwLowDateTime=0x6716be00, ftLastWriteTime.dwHighDateTime=0x1d5d873, nFileSizeHigh=0x0, nFileSizeLow=0x181bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9MijgPyX.pdf", cAlternateFileName="")) returned 1 [0132.491] wcscmp (_String1="9MijgPyX.pdf", _String2=".") returned 1 [0132.491] wcscmp (_String1="9MijgPyX.pdf", _String2="..") returned 1 [0132.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7b78 [0132.491] wcscpy (in: _Dest=0x3ef7b78, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.491] wcscat (in: _Dest=0x3ef7b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.491] wcscat (in: _Dest=0x3ef7b78, _Source="9MijgPyX.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf" [0132.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0132.493] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4814350, ftCreationTime.dwHighDateTime=0x1d56843, ftLastAccessTime.dwLowDateTime=0x1a8f9d10, ftLastAccessTime.dwHighDateTime=0x1d5b76f, ftLastWriteTime.dwLowDateTime=0x1a8f9d10, ftLastWriteTime.dwHighDateTime=0x1d5b76f, nFileSizeHigh=0x0, nFileSizeLow=0x57c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bInVceMpuYf9i1t_kX.xlsx", cAlternateFileName="BINVCE~1.XLS")) returned 1 [0132.493] wcscmp (_String1="bInVceMpuYf9i1t_kX.xlsx", _String2=".") returned 1 [0132.493] wcscmp (_String1="bInVceMpuYf9i1t_kX.xlsx", _String2="..") returned 1 [0132.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b6d0 [0132.493] wcscpy (in: _Dest=0x3e0b6d0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.493] wcscat (in: _Dest=0x3e0b6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.493] wcscat (in: _Dest=0x3e0b6d0, _Source="bInVceMpuYf9i1t_kX.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx" [0132.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0132.495] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3ea2e0, ftCreationTime.dwHighDateTime=0x1d5d967, ftLastAccessTime.dwLowDateTime=0x1b8472a0, ftLastAccessTime.dwHighDateTime=0x1d5d9c4, ftLastWriteTime.dwLowDateTime=0x1b8472a0, ftLastWriteTime.dwHighDateTime=0x1d5d9c4, nFileSizeHigh=0x0, nFileSizeLow=0x5083, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5jIh.ots", cAlternateFileName="")) returned 1 [0132.495] wcscmp (_String1="D5jIh.ots", _String2=".") returned 1 [0132.495] wcscmp (_String1="D5jIh.ots", _String2="..") returned 1 [0132.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7288 [0132.495] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.495] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.495] wcscat (in: _Dest=0x3ef7288, _Source="D5jIh.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots") returned="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots" [0132.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0132.496] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.497] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.497] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.497] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d09d30, ftCreationTime.dwHighDateTime=0x1d5d051, ftLastAccessTime.dwLowDateTime=0xa3816710, ftLastAccessTime.dwHighDateTime=0x1d5dd95, ftLastWriteTime.dwLowDateTime=0xa3816710, ftLastWriteTime.dwHighDateTime=0x1d5dd95, nFileSizeHigh=0x0, nFileSizeLow=0x129bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DlyRh9eAg.pptx", cAlternateFileName="DLYRH9~1.PPT")) returned 1 [0132.497] wcscmp (_String1="DlyRh9eAg.pptx", _String2=".") returned 1 [0132.497] wcscmp (_String1="DlyRh9eAg.pptx", _String2="..") returned 1 [0132.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0132.497] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.497] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.497] wcscat (in: _Dest=0x2fe1328, _Source="DlyRh9eAg.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx" [0132.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0132.499] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42624c50, ftCreationTime.dwHighDateTime=0x1d57e41, ftLastAccessTime.dwLowDateTime=0x5d7c7090, ftLastAccessTime.dwHighDateTime=0x1d5751f, ftLastWriteTime.dwLowDateTime=0x5d7c7090, ftLastWriteTime.dwHighDateTime=0x1d5751f, nFileSizeHigh=0x0, nFileSizeLow=0x7b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="JoxkwtTQmGo5 R.docx", cAlternateFileName="JOXKWT~1.DOC")) returned 1 [0132.499] wcscmp (_String1="JoxkwtTQmGo5 R.docx", _String2=".") returned 1 [0132.499] wcscmp (_String1="JoxkwtTQmGo5 R.docx", _String2="..") returned 1 [0132.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e8f8 [0132.499] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.499] wcscat (in: _Dest=0x3d8e8f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.499] wcscat (in: _Dest=0x3d8e8f8, _Source="JoxkwtTQmGo5 R.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx") returned="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx" [0132.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0132.500] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b004e00, ftCreationTime.dwHighDateTime=0x1d59bd6, ftLastAccessTime.dwLowDateTime=0xe77814f0, ftLastAccessTime.dwHighDateTime=0x1d5d1b5, ftLastWriteTime.dwLowDateTime=0xe77814f0, ftLastWriteTime.dwHighDateTime=0x1d5d1b5, nFileSizeHigh=0x0, nFileSizeLow=0x111a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="lltYDN76gQA_234.xlsx", cAlternateFileName="LLTYDN~1.XLS")) returned 1 [0132.501] wcscmp (_String1="lltYDN76gQA_234.xlsx", _String2=".") returned 1 [0132.501] wcscmp (_String1="lltYDN76gQA_234.xlsx", _String2="..") returned 1 [0132.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e890 [0132.501] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.501] wcscat (in: _Dest=0x3d8e890, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.501] wcscat (in: _Dest=0x3d8e890, _Source="lltYDN76gQA_234.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx" [0132.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0132.503] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ec190, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0xb504d40, ftLastAccessTime.dwHighDateTime=0x1d579f8, ftLastWriteTime.dwLowDateTime=0xb504d40, ftLastWriteTime.dwHighDateTime=0x1d579f8, nFileSizeHigh=0x0, nFileSizeLow=0xe1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvOEj48nMdnIHYsqUl.pptx", cAlternateFileName="LVOEJ4~1.PPT")) returned 1 [0132.503] wcscmp (_String1="LvOEj48nMdnIHYsqUl.pptx", _String2=".") returned 1 [0132.503] wcscmp (_String1="LvOEj48nMdnIHYsqUl.pptx", _String2="..") returned 1 [0132.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b4a0 [0132.503] wcscpy (in: _Dest=0x3e0b4a0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.503] wcscat (in: _Dest=0x3e0b4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.503] wcscat (in: _Dest=0x3e0b4a0, _Source="LvOEj48nMdnIHYsqUl.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx" [0132.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0132.504] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc78d00, ftCreationTime.dwHighDateTime=0x1d59951, ftLastAccessTime.dwLowDateTime=0xa66493b0, ftLastAccessTime.dwHighDateTime=0x1d5e391, ftLastWriteTime.dwLowDateTime=0xa66493b0, ftLastWriteTime.dwHighDateTime=0x1d5e391, nFileSizeHigh=0x0, nFileSizeLow=0xfcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKfhYX0u3zyRRJQa27jN.docx", cAlternateFileName="MKFHYX~1.DOC")) returned 1 [0132.504] wcscmp (_String1="MKfhYX0u3zyRRJQa27jN.docx", _String2=".") returned 1 [0132.505] wcscmp (_String1="MKfhYX0u3zyRRJQa27jN.docx", _String2="..") returned 1 [0132.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ab38 [0132.505] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.505] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.505] wcscat (in: _Dest=0x3f1ab38, _Source="MKfhYX0u3zyRRJQa27jN.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx") returned="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx" [0132.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0132.506] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.506] wcscmp (_String1="My Music", _String2=".") returned 1 [0132.506] wcscmp (_String1="My Music", _String2="..") returned 1 [0132.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62290 [0132.506] wcscpy (in: _Dest=0x3e62290, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.506] wcscat (in: _Dest=0x3e62290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.507] wcscat (in: _Dest=0x3e62290, _Source="My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0132.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0132.515] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0132.515] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0132.515] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0132.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7230 [0132.515] wcscpy (in: _Dest=0x3ef7230, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.515] wcscat (in: _Dest=0x3ef7230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.515] wcscat (in: _Dest=0x3ef7230, _Source="My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0132.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0132.517] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0132.517] wcscmp (_String1="My Shapes", _String2=".") returned 1 [0132.517] wcscmp (_String1="My Shapes", _String2="..") returned 1 [0132.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef71d8 [0132.517] wcscpy (in: _Dest=0x3ef71d8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.517] wcscat (in: _Dest=0x3ef71d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.517] wcscat (in: _Dest=0x3ef71d8, _Source="My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0132.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef71d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0132.519] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0132.519] wcscmp (_String1="My Videos", _String2=".") returned 1 [0132.519] wcscmp (_String1="My Videos", _String2="..") returned 1 [0132.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7180 [0132.519] wcscpy (in: _Dest=0x3ef7180, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0132.519] wcscat (in: _Dest=0x3ef7180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0132.519] wcscat (in: _Dest=0x3ef7180, _Source="My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0132.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0133.174] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab52d990, ftCreationTime.dwHighDateTime=0x1d5da9a, ftLastAccessTime.dwLowDateTime=0x1ef3ff60, ftLastAccessTime.dwHighDateTime=0x1d5df81, ftLastWriteTime.dwLowDateTime=0x1ef3ff60, ftLastWriteTime.dwHighDateTime=0x1d5df81, nFileSizeHigh=0x0, nFileSizeLow=0x78ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NCwro1mFmNLQO.ppt", cAlternateFileName="NCWRO1~1.PPT")) returned 1 [0133.174] wcscmp (_String1="NCwro1mFmNLQO.ppt", _String2=".") returned 1 [0133.174] wcscmp (_String1="NCwro1mFmNLQO.ppt", _String2="..") returned 1 [0133.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e008 [0133.175] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0133.175] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.175] wcscat (in: _Dest=0x3d8e008, _Source="NCwro1mFmNLQO.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt" [0141.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0141.187] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120a50c0, ftCreationTime.dwHighDateTime=0x1d59e17, ftLastAccessTime.dwLowDateTime=0xf6dde0b0, ftLastAccessTime.dwHighDateTime=0x1d5b715, ftLastWriteTime.dwLowDateTime=0xf6dde0b0, ftLastWriteTime.dwHighDateTime=0x1d5b715, nFileSizeHigh=0x0, nFileSizeLow=0x1012c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nEsV5v.docx", cAlternateFileName="NESV5V~1.DOC")) returned 1 [0141.187] wcscmp (_String1="nEsV5v.docx", _String2=".") returned 1 [0141.187] wcscmp (_String1="nEsV5v.docx", _String2="..") returned 1 [0141.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7180 [0141.187] wcscpy (in: _Dest=0x3ef7180, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.187] wcscat (in: _Dest=0x3ef7180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.187] wcscat (in: _Dest=0x3ef7180, _Source="nEsV5v.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx") returned="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx" [0141.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0141.188] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe502c9c0, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xb31cbfd0, ftLastAccessTime.dwHighDateTime=0x1d5e6e6, ftLastWriteTime.dwLowDateTime=0xb31cbfd0, ftLastWriteTime.dwHighDateTime=0x1d5e6e6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="n_ww7nLCi", cAlternateFileName="N_WW7N~1")) returned 1 [0141.188] wcscmp (_String1="n_ww7nLCi", _String2=".") returned 1 [0141.188] wcscmp (_String1="n_ww7nLCi", _String2="..") returned 1 [0141.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7440 [0141.188] wcscpy (in: _Dest=0x3ef7440, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.189] wcscat (in: _Dest=0x3ef7440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.189] wcscat (in: _Dest=0x3ef7440, _Source="n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0141.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0141.190] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85df6d0, ftCreationTime.dwHighDateTime=0x1d56163, ftLastAccessTime.dwLowDateTime=0xc1704f90, ftLastAccessTime.dwHighDateTime=0x1d5c8d5, ftLastWriteTime.dwLowDateTime=0xc1704f90, ftLastWriteTime.dwHighDateTime=0x1d5c8d5, nFileSizeHigh=0x0, nFileSizeLow=0x190b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="otJ4RAohueMm7.docx", cAlternateFileName="OTJ4RA~1.DOC")) returned 1 [0141.191] wcscmp (_String1="otJ4RAohueMm7.docx", _String2=".") returned 1 [0141.191] wcscmp (_String1="otJ4RAohueMm7.docx", _String2="..") returned 1 [0141.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ccf0 [0141.191] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.191] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.191] wcscat (in: _Dest=0x3d8ccf0, _Source="otJ4RAohueMm7.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx") returned="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx" [0141.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0141.193] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f9a140, ftCreationTime.dwHighDateTime=0x1d58ef6, ftLastAccessTime.dwLowDateTime=0xda945ca0, ftLastAccessTime.dwHighDateTime=0x1d5b651, ftLastWriteTime.dwLowDateTime=0xda945ca0, ftLastWriteTime.dwHighDateTime=0x1d5b651, nFileSizeHigh=0x0, nFileSizeLow=0x620f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oU3Ey8q-jRht7Ot.xlsx", cAlternateFileName="OU3EY8~1.XLS")) returned 1 [0141.193] wcscmp (_String1="oU3Ey8q-jRht7Ot.xlsx", _String2=".") returned 1 [0141.193] wcscmp (_String1="oU3Ey8q-jRht7Ot.xlsx", _String2="..") returned 1 [0141.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d238 [0141.193] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.193] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.193] wcscat (in: _Dest=0x3d8d238, _Source="oU3Ey8q-jRht7Ot.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx" [0141.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0141.194] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0141.194] wcscmp (_String1="Outlook Files", _String2=".") returned 1 [0141.194] wcscmp (_String1="Outlook Files", _String2="..") returned 1 [0141.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe3c08 [0141.194] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.194] wcscat (in: _Dest=0x2fe3c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.195] wcscat (in: _Dest=0x2fe3c08, _Source="Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0141.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0141.196] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e28c0, ftCreationTime.dwHighDateTime=0x1d5bdd3, ftLastAccessTime.dwLowDateTime=0x39f4b8c0, ftLastAccessTime.dwHighDateTime=0x1d596a4, ftLastWriteTime.dwLowDateTime=0x39f4b8c0, ftLastWriteTime.dwHighDateTime=0x1d596a4, nFileSizeHigh=0x0, nFileSizeLow=0x9829, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qO4ruVaMpCO5-Y.xlsx", cAlternateFileName="QO4RUV~1.XLS")) returned 1 [0141.196] wcscmp (_String1="qO4ruVaMpCO5-Y.xlsx", _String2=".") returned 1 [0141.196] wcscmp (_String1="qO4ruVaMpCO5-Y.xlsx", _String2="..") returned 1 [0141.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8be50 [0141.196] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.196] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.196] wcscat (in: _Dest=0x3d8be50, _Source="qO4ruVaMpCO5-Y.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx" [0141.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0141.198] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x804d61d0, ftCreationTime.dwHighDateTime=0x1d57423, ftLastAccessTime.dwLowDateTime=0x95c33ee0, ftLastAccessTime.dwHighDateTime=0x1d5b9ce, ftLastWriteTime.dwLowDateTime=0x95c33ee0, ftLastWriteTime.dwHighDateTime=0x1d5b9ce, nFileSizeHigh=0x0, nFileSizeLow=0x2f18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tyw80yDUbuO.pptx", cAlternateFileName="TYW80Y~1.PPT")) returned 1 [0141.198] wcscmp (_String1="Tyw80yDUbuO.pptx", _String2=".") returned 1 [0141.198] wcscmp (_String1="Tyw80yDUbuO.pptx", _String2="..") returned 1 [0141.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0141.198] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.198] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.199] wcscat (in: _Dest=0x2fe6ea8, _Source="Tyw80yDUbuO.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx" [0141.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0141.200] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5316ba60, ftCreationTime.dwHighDateTime=0x1d58c6d, ftLastAccessTime.dwLowDateTime=0xbaf3f00, ftLastAccessTime.dwHighDateTime=0x1d5a22d, ftLastWriteTime.dwLowDateTime=0xbaf3f00, ftLastWriteTime.dwHighDateTime=0x1d5a22d, nFileSizeHigh=0x0, nFileSizeLow=0xd3bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="u2Kj4vcnbe-.docx", cAlternateFileName="U2KJ4V~1.DOC")) returned 1 [0141.200] wcscmp (_String1="u2Kj4vcnbe-.docx", _String2=".") returned 1 [0141.200] wcscmp (_String1="u2Kj4vcnbe-.docx", _String2="..") returned 1 [0141.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0141.201] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.201] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.201] wcscat (in: _Dest=0x2fe6c08, _Source="u2Kj4vcnbe-.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx") returned="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx" [0141.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0141.202] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50d782b0, ftCreationTime.dwHighDateTime=0x1d5e236, ftLastAccessTime.dwLowDateTime=0x7a2f3d10, ftLastAccessTime.dwHighDateTime=0x1d5dd86, ftLastWriteTime.dwLowDateTime=0x7a2f3d10, ftLastWriteTime.dwHighDateTime=0x1d5dd86, nFileSizeHigh=0x0, nFileSizeLow=0x9c5d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VlyWMbwDgpZXZ.csv", cAlternateFileName="VLYWMB~1.CSV")) returned 1 [0141.202] wcscmp (_String1="VlyWMbwDgpZXZ.csv", _String2=".") returned 1 [0141.202] wcscmp (_String1="VlyWMbwDgpZXZ.csv", _String2="..") returned 1 [0141.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c4d0 [0141.203] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.203] wcscat (in: _Dest=0x3d8c4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.203] wcscat (in: _Dest=0x3d8c4d0, _Source="VlyWMbwDgpZXZ.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv") returned="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv" [0141.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0141.204] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638cd330, ftCreationTime.dwHighDateTime=0x1d5e685, ftLastAccessTime.dwLowDateTime=0x5e36cbd0, ftLastAccessTime.dwHighDateTime=0x1d5dbe9, ftLastWriteTime.dwLowDateTime=0x5e36cbd0, ftLastWriteTime.dwHighDateTime=0x1d5dbe9, nFileSizeHigh=0x0, nFileSizeLow=0xa15f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vLztBu1XcB0hiDx_V.odp", cAlternateFileName="VLZTBU~1.ODP")) returned 1 [0141.204] wcscmp (_String1="vLztBu1XcB0hiDx_V.odp", _String2=".") returned 1 [0141.204] wcscmp (_String1="vLztBu1XcB0hiDx_V.odp", _String2="..") returned 1 [0141.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b580 [0141.204] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.204] wcscat (in: _Dest=0x3e0b580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.204] wcscat (in: _Dest=0x3e0b580, _Source="vLztBu1XcB0hiDx_V.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp") returned="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp" [0141.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0141.206] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50407c30, ftCreationTime.dwHighDateTime=0x1d5a514, ftLastAccessTime.dwLowDateTime=0x2460ab70, ftLastAccessTime.dwHighDateTime=0x1d5c45f, ftLastWriteTime.dwLowDateTime=0x2460ab70, ftLastWriteTime.dwHighDateTime=0x1d5c45f, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VxKR4fYKimRxPVjgu-z.pptx", cAlternateFileName="VXKR4F~1.PPT")) returned 1 [0141.206] wcscmp (_String1="VxKR4fYKimRxPVjgu-z.pptx", _String2=".") returned 1 [0141.206] wcscmp (_String1="VxKR4fYKimRxPVjgu-z.pptx", _String2="..") returned 1 [0141.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b7b0 [0141.206] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.206] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.206] wcscat (in: _Dest=0x3e0b7b0, _Source="VxKR4fYKimRxPVjgu-z.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx" [0141.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0141.208] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7952f790, ftCreationTime.dwHighDateTime=0x1d5e4bd, ftLastAccessTime.dwLowDateTime=0x8f914360, ftLastAccessTime.dwHighDateTime=0x1d5da48, ftLastWriteTime.dwLowDateTime=0x8f914360, ftLastWriteTime.dwHighDateTime=0x1d5da48, nFileSizeHigh=0x0, nFileSizeLow=0x142d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WjrhDtfM5lyb89Q.odp", cAlternateFileName="WJRHDT~1.ODP")) returned 1 [0141.208] wcscmp (_String1="WjrhDtfM5lyb89Q.odp", _String2=".") returned 1 [0141.208] wcscmp (_String1="WjrhDtfM5lyb89Q.odp", _String2="..") returned 1 [0141.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e480 [0141.208] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0141.208] wcscat (in: _Dest=0x3d8e480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0141.208] wcscat (in: _Dest=0x3d8e480, _Source="WjrhDtfM5lyb89Q.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp") returned="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp" [0141.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0141.209] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7952f790, ftCreationTime.dwHighDateTime=0x1d5e4bd, ftLastAccessTime.dwLowDateTime=0x8f914360, ftLastAccessTime.dwHighDateTime=0x1d5da48, ftLastWriteTime.dwLowDateTime=0x8f914360, ftLastWriteTime.dwHighDateTime=0x1d5da48, nFileSizeHigh=0x0, nFileSizeLow=0x142d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WjrhDtfM5lyb89Q.odp", cAlternateFileName="WJRHDT~1.ODP")) returned 0 [0141.210] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0141.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26e0) returned 1 [0141.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330f0) returned 1 [0141.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 Thread: id = 237 os_tid = 0xdbc [0132.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e331c8 [0132.398] wcscpy (in: _Dest=0x3e331c8, _Source="C:\\Users\\EEBsYm5\\Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0132.398] wcscat (in: _Dest=0x3e331c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\") returned="C:\\Users\\EEBsYm5\\Downloads\\" [0132.398] wcscat (in: _Dest=0x3e331c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\*") returned="C:\\Users\\EEBsYm5\\Downloads\\*" [0132.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0132.398] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Downloads\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0132.399] wcscmp (_String1=".", _String2=".") returned 0 [0132.399] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.399] wcscmp (_String1="..", _String2=".") returned 1 [0132.399] wcscmp (_String1="..", _String2="..") returned 0 [0132.399] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb3ba6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xc9ff0fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcbf08f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChromeSetup.exe", cAlternateFileName="CHROME~1.EXE")) returned 1 [0132.399] wcscmp (_String1="ChromeSetup.exe", _String2=".") returned 1 [0132.399] wcscmp (_String1="ChromeSetup.exe", _String2="..") returned 1 [0132.399] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.399] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.399] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.400] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.400] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0132.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0132.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e331c8) returned 1 [0132.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066fc0) returned 1 Thread: id = 238 os_tid = 0xdb4 [0132.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e331c8 [0132.402] wcscpy (in: _Dest=0x3e331c8, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0132.402] wcscat (in: _Dest=0x3e331c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0132.402] wcscat (in: _Dest=0x3e331c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\*" [0132.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0132.402] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0132.402] wcscmp (_String1=".", _String2=".") returned 0 [0132.402] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.402] wcscmp (_String1="..", _String2=".") returned 1 [0132.402] wcscmp (_String1="..", _String2="..") returned 0 [0132.403] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.403] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.403] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.403] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0132.403] wcscmp (_String1="Links", _String2=".") returned 1 [0132.403] wcscmp (_String1="Links", _String2="..") returned 1 [0132.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61de0 [0132.403] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0132.403] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0132.403] wcscat (in: _Dest=0x3e61de0, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0133.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0133.117] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0133.117] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0133.117] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0133.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bd18 [0133.117] wcscpy (in: _Dest=0x3d8bd18, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0133.117] wcscat (in: _Dest=0x3d8bd18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0133.117] wcscat (in: _Dest=0x3d8bd18, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8bd18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0133.119] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0133.119] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0133.119] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0133.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e02bc0 [0133.119] wcscpy (in: _Dest=0x3e02bc0, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0133.119] wcscat (in: _Dest=0x3e02bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0133.119] wcscat (in: _Dest=0x3e02bc0, _Source="MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0133.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0133.121] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0133.121] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0133.121] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0133.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e02d20 [0133.121] wcscpy (in: _Dest=0x3e02d20, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0133.121] wcscat (in: _Dest=0x3e02d20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0133.121] wcscat (in: _Dest=0x3e02d20, _Source="Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0133.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0133.122] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0133.122] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0133.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0133.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e331c8) returned 1 [0133.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 Thread: id = 239 os_tid = 0xd94 [0132.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f000 [0132.404] wcscpy (in: _Dest=0x3f1f000, _Source="C:\\Users\\EEBsYm5\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0132.404] wcscat (in: _Dest=0x3f1f000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\") returned="C:\\Users\\EEBsYm5\\Links\\" [0132.404] wcscat (in: _Dest=0x3f1f000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\*") returned="C:\\Users\\EEBsYm5\\Links\\*" [0132.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0132.404] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Links\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0132.404] wcscmp (_String1=".", _String2=".") returned 0 [0132.404] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.404] wcscmp (_String1="..", _String2=".") returned 1 [0132.404] wcscmp (_String1="..", _String2="..") returned 0 [0132.404] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.404] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.404] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.404] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0132.404] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0132.404] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0132.405] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0132.405] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0132.405] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0132.405] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0132.405] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0132.405] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0132.405] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0132.405] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0132.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0132.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f000) returned 1 [0132.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 Thread: id = 240 os_tid = 0xd8c [0132.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e621a0 [0132.407] wcscpy (in: _Dest=0x3e621a0, _Source="C:\\Users\\EEBsYm5\\Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0132.407] wcscat (in: _Dest=0x3e621a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\") returned="C:\\Users\\EEBsYm5\\Local Settings\\" [0132.407] wcscat (in: _Dest=0x3e621a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\*") returned="C:\\Users\\EEBsYm5\\Local Settings\\*" [0132.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0132.407] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Local Settings\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0132.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621a0) returned 1 [0132.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33498) returned 1 Thread: id = 241 os_tid = 0xdc8 [0132.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f000 [0132.409] wcscpy (in: _Dest=0x3f1f000, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0132.409] wcscat (in: _Dest=0x3f1f000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0132.409] wcscat (in: _Dest=0x3f1f000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\*") returned="C:\\Users\\EEBsYm5\\Music\\*" [0132.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0132.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ed08c80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ed08c80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0132.409] wcscmp (_String1=".", _String2=".") returned 0 [0132.409] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ed08c80, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8ed08c80, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.409] wcscmp (_String1="..", _String2=".") returned 1 [0132.409] wcscmp (_String1="..", _String2="..") returned 0 [0132.409] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faa4590, ftCreationTime.dwHighDateTime=0x1d5df7e, ftLastAccessTime.dwLowDateTime=0xf9cc2d90, ftLastAccessTime.dwHighDateTime=0x1d5de52, ftLastWriteTime.dwLowDateTime=0xf9cc2d90, ftLastWriteTime.dwHighDateTime=0x1d5de52, nFileSizeHigh=0x0, nFileSizeLow=0x15fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="70tYy2LPNH_cqx.wav", cAlternateFileName="70TYY2~1.WAV")) returned 1 [0132.409] wcscmp (_String1="70tYy2LPNH_cqx.wav", _String2=".") returned 1 [0132.409] wcscmp (_String1="70tYy2LPNH_cqx.wav", _String2="..") returned 1 [0132.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6608 [0132.409] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0132.409] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0132.409] wcscat (in: _Dest=0x2fe6608, _Source="70tYy2LPNH_cqx.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav") returned="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav" [0140.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0140.417] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.417] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0140.417] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0140.417] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fd1ae0, ftCreationTime.dwHighDateTime=0x1d5e2ce, ftLastAccessTime.dwLowDateTime=0xc5e75f40, ftLastAccessTime.dwHighDateTime=0x1d5e712, ftLastWriteTime.dwLowDateTime=0xc5e75f40, ftLastWriteTime.dwHighDateTime=0x1d5e712, nFileSizeHigh=0x0, nFileSizeLow=0x1c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="F1MAyIixCilysxt.wav", cAlternateFileName="F1MAYI~1.WAV")) returned 1 [0140.417] wcscmp (_String1="F1MAyIixCilysxt.wav", _String2=".") returned 1 [0140.417] wcscmp (_String1="F1MAyIixCilysxt.wav", _String2="..") returned 1 [0140.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6548 [0140.417] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.417] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.417] wcscat (in: _Dest=0x2fe6548, _Source="F1MAyIixCilysxt.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav") returned="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav" [0140.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0140.424] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3808dc0, ftCreationTime.dwHighDateTime=0x1d5dd01, ftLastAccessTime.dwLowDateTime=0xbe2e6c40, ftLastAccessTime.dwHighDateTime=0x1d5e7e8, ftLastWriteTime.dwLowDateTime=0xbe2e6c40, ftLastWriteTime.dwHighDateTime=0x1d5e7e8, nFileSizeHigh=0x0, nFileSizeLow=0x7213, dwReserved0=0x0, dwReserved1=0x0, cFileName="GibPoH7Q2EyR4j.mp3", cAlternateFileName="GIBPOH~1.MP3")) returned 1 [0140.424] wcscmp (_String1="GibPoH7Q2EyR4j.mp3", _String2=".") returned 1 [0140.424] wcscmp (_String1="GibPoH7Q2EyR4j.mp3", _String2="..") returned 1 [0140.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6488 [0140.424] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.425] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.425] wcscat (in: _Dest=0x2fe6488, _Source="GibPoH7Q2EyR4j.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3") returned="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3" [0140.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0140.427] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c7af0, ftCreationTime.dwHighDateTime=0x1d5e466, ftLastAccessTime.dwLowDateTime=0x558452c0, ftLastAccessTime.dwHighDateTime=0x1d5e092, ftLastWriteTime.dwLowDateTime=0x558452c0, ftLastWriteTime.dwHighDateTime=0x1d5e092, nFileSizeHigh=0x0, nFileSizeLow=0x16b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJA46QtiQCc4Cg.m4a", cAlternateFileName="HJA46Q~1.M4A")) returned 1 [0140.427] wcscmp (_String1="hJA46QtiQCc4Cg.m4a", _String2=".") returned 1 [0140.427] wcscmp (_String1="hJA46QtiQCc4Cg.m4a", _String2="..") returned 1 [0140.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe5648 [0140.427] wcscpy (in: _Dest=0x2fe5648, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.427] wcscat (in: _Dest=0x2fe5648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.427] wcscat (in: _Dest=0x2fe5648, _Source="hJA46QtiQCc4Cg.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a" [0140.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0140.429] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x530ac4e0, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0x696b1cc0, ftLastAccessTime.dwHighDateTime=0x1d5ddee, ftLastWriteTime.dwLowDateTime=0x696b1cc0, ftLastWriteTime.dwHighDateTime=0x1d5ddee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hN _", cAlternateFileName="HN_~1")) returned 1 [0140.429] wcscmp (_String1="hN _", _String2=".") returned 1 [0140.429] wcscmp (_String1="hN _", _String2="..") returned 1 [0140.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e809f8 [0140.429] wcscpy (in: _Dest=0x3e809f8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.429] wcscat (in: _Dest=0x3e809f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.429] wcscat (in: _Dest=0x3e809f8, _Source="hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0140.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e809f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0140.431] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57422d0, ftCreationTime.dwHighDateTime=0x1d5d93c, ftLastAccessTime.dwLowDateTime=0xe9ada300, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0xe9ada300, ftLastWriteTime.dwHighDateTime=0x1d5e413, nFileSizeHigh=0x0, nFileSizeLow=0x4105, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJX d8nXEmc6y0OauC2.m4a", cAlternateFileName="KNJXD8~1.M4A")) returned 1 [0140.431] wcscmp (_String1="knJX d8nXEmc6y0OauC2.m4a", _String2=".") returned 1 [0140.431] wcscmp (_String1="knJX d8nXEmc6y0OauC2.m4a", _String2="..") returned 1 [0140.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d030 [0140.431] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.431] wcscat (in: _Dest=0x3d8d030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.431] wcscat (in: _Dest=0x3d8d030, _Source="knJX d8nXEmc6y0OauC2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a" [0140.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0140.432] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594fc630, ftCreationTime.dwHighDateTime=0x1d5db4e, ftLastAccessTime.dwLowDateTime=0x35abce50, ftLastAccessTime.dwHighDateTime=0x1d5e5de, ftLastWriteTime.dwLowDateTime=0x35abce50, ftLastWriteTime.dwHighDateTime=0x1d5e5de, nFileSizeHigh=0x0, nFileSizeLow=0xef6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lfYY05r-A2I7QFvlt2bT.mp3", cAlternateFileName="LFYY05~1.MP3")) returned 1 [0140.432] wcscmp (_String1="lfYY05r-A2I7QFvlt2bT.mp3", _String2=".") returned 1 [0140.433] wcscmp (_String1="lfYY05r-A2I7QFvlt2bT.mp3", _String2="..") returned 1 [0140.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d440 [0140.433] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.433] wcscat (in: _Dest=0x3d8d440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.433] wcscat (in: _Dest=0x3d8d440, _Source="lfYY05r-A2I7QFvlt2bT.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3") returned="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3" [0140.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0140.434] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89512c10, ftCreationTime.dwHighDateTime=0x1d5da1e, ftLastAccessTime.dwLowDateTime=0x7a4b14f0, ftLastAccessTime.dwHighDateTime=0x1d5e7b7, ftLastWriteTime.dwLowDateTime=0x7a4b14f0, ftLastWriteTime.dwHighDateTime=0x1d5e7b7, nFileSizeHigh=0x0, nFileSizeLow=0xf271, dwReserved0=0x0, dwReserved1=0x0, cFileName="lgmg.mp3", cAlternateFileName="")) returned 1 [0140.434] wcscmp (_String1="lgmg.mp3", _String2=".") returned 1 [0140.434] wcscmp (_String1="lgmg.mp3", _String2="..") returned 1 [0140.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d57a8 [0140.434] wcscpy (in: _Dest=0x66d57a8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.434] wcscat (in: _Dest=0x66d57a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.434] wcscat (in: _Dest=0x66d57a8, _Source="lgmg.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3") returned="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3" [0140.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d57a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0140.436] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eef44f0, ftCreationTime.dwHighDateTime=0x1d5d9d6, ftLastAccessTime.dwLowDateTime=0x12204c0, ftLastAccessTime.dwHighDateTime=0x1d5e169, ftLastWriteTime.dwLowDateTime=0x12204c0, ftLastWriteTime.dwHighDateTime=0x1d5e169, nFileSizeHigh=0x0, nFileSizeLow=0xef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mL3p.wav", cAlternateFileName="")) returned 1 [0140.436] wcscmp (_String1="mL3p.wav", _String2=".") returned 1 [0140.437] wcscmp (_String1="mL3p.wav", _String2="..") returned 1 [0140.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6180 [0140.437] wcscpy (in: _Dest=0x66d6180, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.437] wcscat (in: _Dest=0x66d6180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.437] wcscat (in: _Dest=0x66d6180, _Source="mL3p.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mL3p.wav") returned="C:\\Users\\EEBsYm5\\Music\\mL3p.wav" [0140.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0140.438] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5f33f0, ftCreationTime.dwHighDateTime=0x1d5dbc5, ftLastAccessTime.dwLowDateTime=0xa4b7ac30, ftLastAccessTime.dwHighDateTime=0x1d5de9d, ftLastWriteTime.dwLowDateTime=0xa4b7ac30, ftLastWriteTime.dwHighDateTime=0x1d5de9d, nFileSizeHigh=0x0, nFileSizeLow=0x152bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRmuOkEWWh_2.m4a", cAlternateFileName="MRMUOK~1.M4A")) returned 1 [0140.438] wcscmp (_String1="MRmuOkEWWh_2.m4a", _String2=".") returned 1 [0140.438] wcscmp (_String1="MRmuOkEWWh_2.m4a", _String2="..") returned 1 [0140.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7de0 [0140.438] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.439] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.439] wcscat (in: _Dest=0x3ef7de0, _Source="MRmuOkEWWh_2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a" [0140.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0140.440] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f1de60, ftCreationTime.dwHighDateTime=0x1d5de3b, ftLastAccessTime.dwLowDateTime=0xd6702ff0, ftLastAccessTime.dwHighDateTime=0x1d5e2a7, ftLastWriteTime.dwLowDateTime=0xd6702ff0, ftLastWriteTime.dwHighDateTime=0x1d5e2a7, nFileSizeHigh=0x0, nFileSizeLow=0xd860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUJpZ4UEIhTryRK_TR_c.mp3", cAlternateFileName="MUJPZ4~1.MP3")) returned 1 [0140.440] wcscmp (_String1="mUJpZ4UEIhTryRK_TR_c.mp3", _String2=".") returned 1 [0140.440] wcscmp (_String1="mUJpZ4UEIhTryRK_TR_c.mp3", _String2="..") returned 1 [0140.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cc88 [0140.440] wcscpy (in: _Dest=0x3d8cc88, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.440] wcscat (in: _Dest=0x3d8cc88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.440] wcscat (in: _Dest=0x3d8cc88, _Source="mUJpZ4UEIhTryRK_TR_c.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3") returned="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3" [0140.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8cc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0140.442] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702ed730, ftCreationTime.dwHighDateTime=0x1d5e132, ftLastAccessTime.dwLowDateTime=0x30ad9800, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x30ad9800, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x976b, dwReserved0=0x0, dwReserved1=0x0, cFileName="p9xsX.wav", cAlternateFileName="")) returned 1 [0140.442] wcscmp (_String1="p9xsX.wav", _String2=".") returned 1 [0140.442] wcscmp (_String1="p9xsX.wav", _String2="..") returned 1 [0140.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61a70 [0140.442] wcscpy (in: _Dest=0x3e61a70, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.442] wcscat (in: _Dest=0x3e61a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.442] wcscat (in: _Dest=0x3e61a70, _Source="p9xsX.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav") returned="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav" [0140.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0140.444] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06976d0, ftCreationTime.dwHighDateTime=0x1d5df30, ftLastAccessTime.dwLowDateTime=0x20d8f70, ftLastAccessTime.dwHighDateTime=0x1d5dfb7, ftLastWriteTime.dwLowDateTime=0x20d8f70, ftLastWriteTime.dwHighDateTime=0x1d5dfb7, nFileSizeHigh=0x0, nFileSizeLow=0x13f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="r30LmIUPR0oWkP66E47.mp3", cAlternateFileName="R30LMI~1.MP3")) returned 1 [0140.445] wcscmp (_String1="r30LmIUPR0oWkP66E47.mp3", _String2=".") returned 1 [0140.445] wcscmp (_String1="r30LmIUPR0oWkP66E47.mp3", _String2="..") returned 1 [0140.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8df38 [0140.445] wcscpy (in: _Dest=0x3d8df38, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.445] wcscat (in: _Dest=0x3d8df38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.445] wcscat (in: _Dest=0x3d8df38, _Source="r30LmIUPR0oWkP66E47.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3") returned="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3" [0140.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8df38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0140.447] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b51800, ftCreationTime.dwHighDateTime=0x1d5e60c, ftLastAccessTime.dwLowDateTime=0x5fac0af0, ftLastAccessTime.dwHighDateTime=0x1d5e4e2, ftLastWriteTime.dwLowDateTime=0x5fac0af0, ftLastWriteTime.dwHighDateTime=0x1d5e4e2, nFileSizeHigh=0x0, nFileSizeLow=0xfde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="t6ylLJ_XeDxS.m4a", cAlternateFileName="T6YLLJ~1.M4A")) returned 1 [0140.447] wcscmp (_String1="t6ylLJ_XeDxS.m4a", _String2=".") returned 1 [0140.447] wcscmp (_String1="t6ylLJ_XeDxS.m4a", _String2="..") returned 1 [0140.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7548 [0140.448] wcscpy (in: _Dest=0x3ef7548, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.448] wcscat (in: _Dest=0x3ef7548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.448] wcscat (in: _Dest=0x3ef7548, _Source="t6ylLJ_XeDxS.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a") returned="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a" [0140.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0140.450] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ff33c0, ftCreationTime.dwHighDateTime=0x1d5dcaf, ftLastAccessTime.dwLowDateTime=0x908c7940, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x908c7940, ftLastWriteTime.dwHighDateTime=0x1d5e10c, nFileSizeHigh=0x0, nFileSizeLow=0x7118, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEwf1 lz.wav", cAlternateFileName="TEWF1L~1.WAV")) returned 1 [0140.450] wcscmp (_String1="tEwf1 lz.wav", _String2=".") returned 1 [0140.450] wcscmp (_String1="tEwf1 lz.wav", _String2="..") returned 1 [0140.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61d90 [0140.450] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.450] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.450] wcscat (in: _Dest=0x3e61d90, _Source="tEwf1 lz.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav") returned="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav" [0140.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e61d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0140.453] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x196c00f0, ftCreationTime.dwHighDateTime=0x1d5dfb9, ftLastAccessTime.dwLowDateTime=0xdd0f9d60, ftLastAccessTime.dwHighDateTime=0x1d5dd83, ftLastWriteTime.dwLowDateTime=0xdd0f9d60, ftLastWriteTime.dwHighDateTime=0x1d5dd83, nFileSizeHigh=0x0, nFileSizeLow=0x119bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="XvuJhSRyaCRENDSdRTYE.mp3", cAlternateFileName="XVUJHS~1.MP3")) returned 1 [0140.453] wcscmp (_String1="XvuJhSRyaCRENDSdRTYE.mp3", _String2=".") returned 1 [0140.453] wcscmp (_String1="XvuJhSRyaCRENDSdRTYE.mp3", _String2="..") returned 1 [0140.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0140.453] wcscpy (in: _Dest=0x3d8bde8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0140.453] wcscat (in: _Dest=0x3d8bde8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0140.453] wcscat (in: _Dest=0x3d8bde8, _Source="XvuJhSRyaCRENDSdRTYE.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3") returned="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3" [0140.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0140.455] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x196c00f0, ftCreationTime.dwHighDateTime=0x1d5dfb9, ftLastAccessTime.dwLowDateTime=0xdd0f9d60, ftLastAccessTime.dwHighDateTime=0x1d5dd83, ftLastWriteTime.dwLowDateTime=0xdd0f9d60, ftLastWriteTime.dwHighDateTime=0x1d5dd83, nFileSizeHigh=0x0, nFileSizeLow=0x119bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="XvuJhSRyaCRENDSdRTYE.mp3", cAlternateFileName="XVUJHS~1.MP3")) returned 0 [0140.455] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0140.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0140.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f000) returned 1 [0140.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ab8) returned 1 Thread: id = 242 os_tid = 0xa88 [0132.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33018 [0132.410] wcscpy (in: _Dest=0x3e33018, _Source="C:\\Users\\EEBsYm5\\My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0132.410] wcscat (in: _Dest=0x3e33018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\") returned="C:\\Users\\EEBsYm5\\My Documents\\" [0132.410] wcscat (in: _Dest=0x3e33018, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\*") returned="C:\\Users\\EEBsYm5\\My Documents\\*" [0132.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0132.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\My Documents\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0132.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33018) returned 1 [0132.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33378) returned 1 Thread: id = 243 os_tid = 0xc58 [0132.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f080 [0132.412] wcscpy (in: _Dest=0x3f1f080, _Source="C:\\Users\\EEBsYm5\\NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0132.412] wcscat (in: _Dest=0x3f1f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\") returned="C:\\Users\\EEBsYm5\\NetHood\\" [0132.412] wcscat (in: _Dest=0x3f1f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\*") returned="C:\\Users\\EEBsYm5\\NetHood\\*" [0132.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0132.412] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\NetHood\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0132.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f080) returned 1 [0132.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 Thread: id = 244 os_tid = 0x474 [0132.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066f80 [0132.414] wcscpy (in: _Dest=0x3066f80, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.414] wcscat (in: _Dest=0x3066f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.414] wcscat (in: _Dest=0x3066f80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\*" [0132.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0132.414] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90144780, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90144780, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f080 [0132.414] wcscmp (_String1=".", _String2=".") returned 0 [0132.414] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90144780, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90144780, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.414] wcscmp (_String1="..", _String2=".") returned 1 [0132.414] wcscmp (_String1="..", _String2="..") returned 0 [0132.415] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31cd6070, ftCreationTime.dwHighDateTime=0x1d5e311, ftLastAccessTime.dwLowDateTime=0xdc03a7f0, ftLastAccessTime.dwHighDateTime=0x1d5debd, ftLastWriteTime.dwLowDateTime=0xdc03a7f0, ftLastWriteTime.dwHighDateTime=0x1d5debd, nFileSizeHigh=0x0, nFileSizeLow=0x13d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="32zcJ4gm-63Sn3mk 5.gif", cAlternateFileName="32ZCJ4~1.GIF")) returned 1 [0132.415] wcscmp (_String1="32zcJ4gm-63Sn3mk 5.gif", _String2=".") returned 1 [0132.415] wcscmp (_String1="32zcJ4gm-63Sn3mk 5.gif", _String2="..") returned 1 [0132.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b580 [0132.415] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.415] wcscat (in: _Dest=0x3e0b580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.415] wcscat (in: _Dest=0x3e0b580, _Source="32zcJ4gm-63Sn3mk 5.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif" [0132.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0132.942] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1734b90, ftCreationTime.dwHighDateTime=0x1d5d8d5, ftLastAccessTime.dwLowDateTime=0x992dc00, ftLastAccessTime.dwHighDateTime=0x1d5e386, ftLastWriteTime.dwLowDateTime=0x992dc00, ftLastWriteTime.dwHighDateTime=0x1d5e386, nFileSizeHigh=0x0, nFileSizeLow=0xafb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4jQ3hN-wq.bmp", cAlternateFileName="4JQ3HN~1.BMP")) returned 1 [0132.942] wcscmp (_String1="4jQ3hN-wq.bmp", _String2=".") returned 1 [0132.942] wcscmp (_String1="4jQ3hN-wq.bmp", _String2="..") returned 1 [0132.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7de0 [0132.942] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.942] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.943] wcscat (in: _Dest=0x3ef7de0, _Source="4jQ3hN-wq.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp" [0132.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0132.944] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199460c0, ftCreationTime.dwHighDateTime=0x1d5e4ac, ftLastAccessTime.dwLowDateTime=0x7de33400, ftLastAccessTime.dwHighDateTime=0x1d5e7b0, ftLastWriteTime.dwLowDateTime=0x7de33400, ftLastWriteTime.dwHighDateTime=0x1d5e7b0, nFileSizeHigh=0x0, nFileSizeLow=0xdbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="aP3Ln.bmp", cAlternateFileName="")) returned 1 [0132.944] wcscmp (_String1="aP3Ln.bmp", _String2=".") returned 1 [0132.944] wcscmp (_String1="aP3Ln.bmp", _String2="..") returned 1 [0132.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62290 [0132.944] wcscpy (in: _Dest=0x3e62290, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.944] wcscat (in: _Dest=0x3e62290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.944] wcscat (in: _Dest=0x3e62290, _Source="aP3Ln.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp" [0132.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e62290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0132.945] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf051ea60, ftCreationTime.dwHighDateTime=0x1d5e00b, ftLastAccessTime.dwLowDateTime=0xb46a2330, ftLastAccessTime.dwHighDateTime=0x1d5df9a, ftLastWriteTime.dwLowDateTime=0xb46a2330, ftLastWriteTime.dwHighDateTime=0x1d5df9a, nFileSizeHigh=0x0, nFileSizeLow=0xe718, dwReserved0=0x0, dwReserved1=0x0, cFileName="apwhipjT vcQ6yi.gif", cAlternateFileName="APWHIP~1.GIF")) returned 1 [0132.945] wcscmp (_String1="apwhipjT vcQ6yi.gif", _String2=".") returned 1 [0132.945] wcscmp (_String1="apwhipjT vcQ6yi.gif", _String2="..") returned 1 [0132.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c538 [0132.945] wcscpy (in: _Dest=0x3d8c538, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.945] wcscat (in: _Dest=0x3d8c538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.945] wcscat (in: _Dest=0x3d8c538, _Source="apwhipjT vcQ6yi.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif" [0132.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0132.947] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.947] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.947] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.947] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272250c0, ftCreationTime.dwHighDateTime=0x1d5e1dd, ftLastAccessTime.dwLowDateTime=0x3bb18230, ftLastAccessTime.dwHighDateTime=0x1d5da77, ftLastWriteTime.dwLowDateTime=0x3bb18230, ftLastWriteTime.dwHighDateTime=0x1d5da77, nFileSizeHigh=0x0, nFileSizeLow=0x513c, dwReserved0=0x0, dwReserved1=0x0, cFileName="h4dXOx8m0XQD0H.gif", cAlternateFileName="H4DXOX~1.GIF")) returned 1 [0132.947] wcscmp (_String1="h4dXOx8m0XQD0H.gif", _String2=".") returned 1 [0132.947] wcscmp (_String1="h4dXOx8m0XQD0H.gif", _String2="..") returned 1 [0132.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dac0 [0132.947] wcscpy (in: _Dest=0x3d8dac0, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.947] wcscat (in: _Dest=0x3d8dac0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.947] wcscat (in: _Dest=0x3d8dac0, _Source="h4dXOx8m0XQD0H.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif" [0132.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0132.948] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x581d5d50, ftCreationTime.dwHighDateTime=0x1d5e007, ftLastAccessTime.dwLowDateTime=0xfaf7360, ftLastAccessTime.dwHighDateTime=0x1d5e7ae, ftLastWriteTime.dwLowDateTime=0xfaf7360, ftLastWriteTime.dwHighDateTime=0x1d5e7ae, nFileSizeHigh=0x0, nFileSizeLow=0xf651, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hlwxo9ov.jpg", cAlternateFileName="")) returned 1 [0132.948] wcscmp (_String1="Hlwxo9ov.jpg", _String2=".") returned 1 [0132.949] wcscmp (_String1="Hlwxo9ov.jpg", _String2="..") returned 1 [0132.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7650 [0132.949] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.949] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.949] wcscat (in: _Dest=0x3ef7650, _Source="Hlwxo9ov.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg" [0132.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0132.950] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x218ab6c0, ftCreationTime.dwHighDateTime=0x1d5dff8, ftLastAccessTime.dwLowDateTime=0x1277c810, ftLastAccessTime.dwHighDateTime=0x1d5de1f, ftLastWriteTime.dwLowDateTime=0x1277c810, ftLastWriteTime.dwHighDateTime=0x1d5de1f, nFileSizeHigh=0x0, nFileSizeLow=0x14ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oX2s-m.gif", cAlternateFileName="")) returned 1 [0132.950] wcscmp (_String1="oX2s-m.gif", _String2=".") returned 1 [0132.950] wcscmp (_String1="oX2s-m.gif", _String2="..") returned 1 [0132.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e02b68 [0132.950] wcscpy (in: _Dest=0x3e02b68, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.951] wcscat (in: _Dest=0x3e02b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.951] wcscat (in: _Dest=0x3e02b68, _Source="oX2s-m.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif" [0132.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e02b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0132.952] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3d8190, ftCreationTime.dwHighDateTime=0x1d5d826, ftLastAccessTime.dwLowDateTime=0x546c38f0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0x546c38f0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PWqGp-oId4NZOMp", cAlternateFileName="PWQGP-~1")) returned 1 [0132.952] wcscmp (_String1="PWqGp-oId4NZOMp", _String2=".") returned 1 [0132.953] wcscmp (_String1="PWqGp-oId4NZOMp", _String2="..") returned 1 [0132.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6128 [0132.953] wcscpy (in: _Dest=0x2fe6128, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.953] wcscat (in: _Dest=0x2fe6128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.953] wcscat (in: _Dest=0x2fe6128, _Source="PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0132.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0132.955] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0af4350, ftCreationTime.dwHighDateTime=0x1d5d9bb, ftLastAccessTime.dwLowDateTime=0xc207400, ftLastAccessTime.dwHighDateTime=0x1d5da2b, ftLastWriteTime.dwLowDateTime=0xc207400, ftLastWriteTime.dwHighDateTime=0x1d5da2b, nFileSizeHigh=0x0, nFileSizeLow=0x26c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="RqZGt eGQf375qF.bmp", cAlternateFileName="RQZGTE~1.BMP")) returned 1 [0132.955] wcscmp (_String1="RqZGt eGQf375qF.bmp", _String2=".") returned 1 [0132.955] wcscmp (_String1="RqZGt eGQf375qF.bmp", _String2="..") returned 1 [0132.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e758 [0132.955] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.955] wcscat (in: _Dest=0x3d8e758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.955] wcscat (in: _Dest=0x3d8e758, _Source="RqZGt eGQf375qF.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp" [0132.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0132.957] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66179a0, ftCreationTime.dwHighDateTime=0x1d5d885, ftLastAccessTime.dwLowDateTime=0xfaa41c0, ftLastAccessTime.dwHighDateTime=0x1d5e1a4, ftLastWriteTime.dwLowDateTime=0xfaa41c0, ftLastWriteTime.dwHighDateTime=0x1d5e1a4, nFileSizeHigh=0x0, nFileSizeLow=0x10e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnmwN8Q.gif", cAlternateFileName="")) returned 1 [0132.957] wcscmp (_String1="SnmwN8Q.gif", _String2=".") returned 1 [0132.957] wcscmp (_String1="SnmwN8Q.gif", _String2="..") returned 1 [0132.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e02f88 [0132.957] wcscpy (in: _Dest=0x3e02f88, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.957] wcscat (in: _Dest=0x3e02f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.957] wcscat (in: _Dest=0x3e02f88, _Source="SnmwN8Q.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif" [0132.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e02f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0132.959] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f590180, ftCreationTime.dwHighDateTime=0x1d5e163, ftLastAccessTime.dwLowDateTime=0x218152b0, ftLastAccessTime.dwHighDateTime=0x1d5dc9c, ftLastWriteTime.dwLowDateTime=0x218152b0, ftLastWriteTime.dwHighDateTime=0x1d5dc9c, nFileSizeHigh=0x0, nFileSizeLow=0x76fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="v0tqaRhbCJ59Rz_DK.png", cAlternateFileName="V0TQAR~1.PNG")) returned 1 [0132.959] wcscmp (_String1="v0tqaRhbCJ59Rz_DK.png", _String2=".") returned 1 [0132.959] wcscmp (_String1="v0tqaRhbCJ59Rz_DK.png", _String2="..") returned 1 [0132.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e6f0 [0132.959] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.959] wcscat (in: _Dest=0x3d8e6f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.959] wcscat (in: _Dest=0x3d8e6f0, _Source="v0tqaRhbCJ59Rz_DK.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png") returned="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png" [0132.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0132.961] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644c4860, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xe76e7630, ftLastAccessTime.dwHighDateTime=0x1d5e578, ftLastWriteTime.dwLowDateTime=0xe76e7630, ftLastWriteTime.dwHighDateTime=0x1d5e578, nFileSizeHigh=0x0, nFileSizeLow=0xe94e, dwReserved0=0x0, dwReserved1=0x0, cFileName="W7gSoUrP fdscc-Pnc.bmp", cAlternateFileName="W7GSOU~1.BMP")) returned 1 [0132.961] wcscmp (_String1="W7gSoUrP fdscc-Pnc.bmp", _String2=".") returned 1 [0132.961] wcscmp (_String1="W7gSoUrP fdscc-Pnc.bmp", _String2="..") returned 1 [0132.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x364930 [0132.961] wcscpy (in: _Dest=0x364930, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.961] wcscat (in: _Dest=0x364930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.961] wcscat (in: _Dest=0x364930, _Source="W7gSoUrP fdscc-Pnc.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp" [0132.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x364930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0132.962] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x341f65b0, ftCreationTime.dwHighDateTime=0x1d5defe, ftLastAccessTime.dwLowDateTime=0x27e03d40, ftLastAccessTime.dwHighDateTime=0x1d5da00, ftLastWriteTime.dwLowDateTime=0x27e03d40, ftLastWriteTime.dwHighDateTime=0x1d5da00, nFileSizeHigh=0x0, nFileSizeLow=0xf032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yirur53Rs4.jpg", cAlternateFileName="YIRUR5~1.JPG")) returned 1 [0132.962] wcscmp (_String1="Yirur53Rs4.jpg", _String2=".") returned 1 [0132.962] wcscmp (_String1="Yirur53Rs4.jpg", _String2="..") returned 1 [0132.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6788 [0132.962] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.962] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.963] wcscat (in: _Dest=0x2fe6788, _Source="Yirur53Rs4.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg" [0132.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0132.964] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ed7570, ftCreationTime.dwHighDateTime=0x1d5e7e8, ftLastAccessTime.dwLowDateTime=0x632169b0, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x632169b0, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x94e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VkgZO5tYbSwO2Jlx.png", cAlternateFileName="_VKGZO~1.PNG")) returned 1 [0132.964] wcscmp (_String1="_VkgZO5tYbSwO2Jlx.png", _String2=".") returned 1 [0132.964] wcscmp (_String1="_VkgZO5tYbSwO2Jlx.png", _String2="..") returned 1 [0132.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e688 [0132.964] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0132.964] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0132.964] wcscat (in: _Dest=0x3d8e688, _Source="_VkgZO5tYbSwO2Jlx.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png") returned="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png" [0132.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0132.966] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ed7570, ftCreationTime.dwHighDateTime=0x1d5e7e8, ftLastAccessTime.dwLowDateTime=0x632169b0, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x632169b0, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x94e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VkgZO5tYbSwO2Jlx.png", cAlternateFileName="_VKGZO~1.PNG")) returned 0 [0132.966] FindClose (in: hFindFile=0x3f1f080 | out: hFindFile=0x3f1f080) returned 1 [0132.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0132.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0132.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067000) returned 1 Thread: id = 245 os_tid = 0x528 [0132.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e33018 [0132.415] wcscpy (in: _Dest=0x3e33018, _Source="C:\\Users\\EEBsYm5\\PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0132.415] wcscat (in: _Dest=0x3e33018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\") returned="C:\\Users\\EEBsYm5\\PrintHood\\" [0132.415] wcscat (in: _Dest=0x3e33018, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\*") returned="C:\\Users\\EEBsYm5\\PrintHood\\*" [0132.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0132.416] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\PrintHood\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33018) returned 1 [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 Thread: id = 246 os_tid = 0x140 [0132.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8688 [0132.417] wcscpy (in: _Dest=0x2fc8688, _Source="C:\\Users\\EEBsYm5\\Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0132.417] wcscat (in: _Dest=0x2fc8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\") returned="C:\\Users\\EEBsYm5\\Recent\\" [0132.418] wcscat (in: _Dest=0x2fc8688, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\*") returned="C:\\Users\\EEBsYm5\\Recent\\*" [0132.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0132.418] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Recent\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0132.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0132.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19af0) returned 1 Thread: id = 247 os_tid = 0x23c [0132.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e33018 [0132.420] wcscpy (in: _Dest=0x3e33018, _Source="C:\\Users\\EEBsYm5\\Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0132.420] wcscat (in: _Dest=0x3e33018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\") returned="C:\\Users\\EEBsYm5\\Saved Games\\" [0132.420] wcscat (in: _Dest=0x3e33018, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\*") returned="C:\\Users\\EEBsYm5\\Saved Games\\*" [0132.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0132.421] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Saved Games\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0132.421] wcscmp (_String1=".", _String2=".") returned 0 [0132.421] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.421] wcscmp (_String1="..", _String2=".") returned 1 [0132.421] wcscmp (_String1="..", _String2="..") returned 0 [0132.422] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.422] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.422] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.422] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.422] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0132.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0132.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33018) returned 1 [0132.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 Thread: id = 248 os_tid = 0x20c [0132.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8688 [0132.425] wcscpy (in: _Dest=0x2fc8688, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0132.425] wcscat (in: _Dest=0x2fc8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0132.425] wcscat (in: _Dest=0x2fc8688, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\*") returned="C:\\Users\\EEBsYm5\\Searches\\*" [0132.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0132.425] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Searches\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0132.425] wcscmp (_String1=".", _String2=".") returned 0 [0132.425] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.426] wcscmp (_String1="..", _String2=".") returned 1 [0132.426] wcscmp (_String1="..", _String2="..") returned 0 [0132.426] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.426] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.426] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.426] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0132.426] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0132.426] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0132.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ea30 [0132.426] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0132.426] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0132.426] wcscat (in: _Dest=0x3d8ea30, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" [0138.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0138.533] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0138.533] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0138.533] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0138.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ab38 [0138.533] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0138.533] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0138.533] wcscat (in: _Dest=0x3f1ab38, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" [0138.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0138.535] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0138.535] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0138.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0138.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0138.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8708) returned 1 Thread: id = 249 os_tid = 0x64 [0132.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f100 [0132.427] wcscpy (in: _Dest=0x3f1f100, _Source="C:\\Users\\EEBsYm5\\SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0132.427] wcscat (in: _Dest=0x3f1f100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\") returned="C:\\Users\\EEBsYm5\\SendTo\\" [0132.427] wcscat (in: _Dest=0x3f1f100, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\*") returned="C:\\Users\\EEBsYm5\\SendTo\\*" [0132.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0132.428] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\SendTo\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0132.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 [0132.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 Thread: id = 250 os_tid = 0x3dc [0132.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5ef58 [0132.541] wcscpy (in: _Dest=0x3e5ef58, _Source="C:\\Users\\EEBsYm5\\Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0132.541] wcscat (in: _Dest=0x3e5ef58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\") returned="C:\\Users\\EEBsYm5\\Start Menu\\" [0132.541] wcscat (in: _Dest=0x3e5ef58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\*") returned="C:\\Users\\EEBsYm5\\Start Menu\\*" [0132.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0132.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Start Menu\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0132.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ef58) returned 1 [0132.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 Thread: id = 251 os_tid = 0x580 [0132.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8b08 [0132.543] wcscpy (in: _Dest=0x2fc8b08, _Source="C:\\Users\\Public\\Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0132.543] wcscat (in: _Dest=0x2fc8b08, _Source="\\" | out: _Dest="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\" [0132.543] wcscat (in: _Dest=0x2fc8b08, _Source="*" | out: _Dest="C:\\Users\\Public\\Desktop\\*") returned="C:\\Users\\Public\\Desktop\\*" [0132.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0132.543] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0132.544] wcscmp (_String1=".", _String2=".") returned 0 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.544] wcscmp (_String1="..", _String2=".") returned 1 [0132.544] wcscmp (_String1="..", _String2="..") returned 0 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f284e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0132.544] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0132.544] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b365a97, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b365a97, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b365a97, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.544] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.544] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe218dc90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0132.544] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0132.544] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0132.544] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0132.544] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0132.544] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0132.545] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199a0) returned 1 Thread: id = 252 os_tid = 0x154 [0132.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8b08 [0132.547] wcscpy (in: _Dest=0x2fc8b08, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0132.547] wcscat (in: _Dest=0x2fc8b08, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0132.547] wcscat (in: _Dest=0x2fc8b08, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\*") returned="C:\\Users\\Public\\Documents\\*" [0132.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0132.547] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0132.548] wcscmp (_String1=".", _String2=".") returned 0 [0132.548] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.548] wcscmp (_String1="..", _String2=".") returned 1 [0132.548] wcscmp (_String1="..", _String2="..") returned 0 [0132.548] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b5ed1fc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.548] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.548] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.548] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.548] wcscmp (_String1="My Music", _String2=".") returned 1 [0132.548] wcscmp (_String1="My Music", _String2="..") returned 1 [0132.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e622e0 [0132.548] wcscpy (in: _Dest=0x3e622e0, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0132.548] wcscat (in: _Dest=0x3e622e0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0132.548] wcscat (in: _Dest=0x3e622e0, _Source="My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0133.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e622e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0133.064] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0133.064] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0133.064] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0133.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e02dd0 [0133.064] wcscpy (in: _Dest=0x3e02dd0, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0133.065] wcscat (in: _Dest=0x3e02dd0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0133.065] wcscat (in: _Dest=0x3e02dd0, _Source="My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0133.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0133.066] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0133.066] wcscmp (_String1="My Videos", _String2=".") returned 1 [0133.066] wcscmp (_String1="My Videos", _String2="..") returned 1 [0133.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62650 [0133.066] wcscpy (in: _Dest=0x3e62650, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0133.066] wcscat (in: _Dest=0x3e62650, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0133.066] wcscat (in: _Dest=0x3e62650, _Source="My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0133.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0133.068] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0133.068] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0133.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0133.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 [0133.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 Thread: id = 253 os_tid = 0x7c8 [0132.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f2c0 [0132.549] wcscpy (in: _Dest=0x3f1f2c0, _Source="C:\\Users\\Public\\Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0132.549] wcscat (in: _Dest=0x3f1f2c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Downloads\\") returned="C:\\Users\\Public\\Downloads\\" [0132.549] wcscat (in: _Dest=0x3f1f2c0, _Source="*" | out: _Dest="C:\\Users\\Public\\Downloads\\*") returned="C:\\Users\\Public\\Downloads\\*" [0132.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0132.549] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f300 [0132.550] wcscmp (_String1=".", _String2=".") returned 0 [0132.550] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.550] wcscmp (_String1="..", _String2=".") returned 1 [0132.550] wcscmp (_String1="..", _String2="..") returned 0 [0132.550] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.550] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.550] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.550] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0132.550] FindClose (in: hFindFile=0x3f1f300 | out: hFindFile=0x3f1f300) returned 1 [0132.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0132.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f2c0) returned 1 [0132.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f140) returned 1 Thread: id = 254 os_tid = 0x5e8 [0132.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f140 [0132.553] wcscpy (in: _Dest=0x3f1f140, _Source="C:\\Users\\Public\\Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0132.554] wcscat (in: _Dest=0x3f1f140, _Source="\\" | out: _Dest="C:\\Users\\Public\\Favorites\\") returned="C:\\Users\\Public\\Favorites\\" [0132.554] wcscat (in: _Dest=0x3f1f140, _Source="*" | out: _Dest="C:\\Users\\Public\\Favorites\\*") returned="C:\\Users\\Public\\Favorites\\*" [0132.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0132.554] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0132.554] wcscmp (_String1=".", _String2=".") returned 0 [0132.554] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.554] wcscmp (_String1="..", _String2=".") returned 1 [0132.554] wcscmp (_String1="..", _String2="..") returned 0 [0132.554] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.555] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0132.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0132.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f140) returned 1 [0132.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f180) returned 1 Thread: id = 255 os_tid = 0x4b8 [0132.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f180 [0132.556] wcscpy (in: _Dest=0x3f1f180, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0132.556] wcscat (in: _Dest=0x3f1f180, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0132.556] wcscat (in: _Dest=0x3f1f180, _Source="*" | out: _Dest="C:\\Users\\Public\\Libraries\\*") returned="C:\\Users\\Public\\Libraries\\*" [0132.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0132.556] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0132.557] wcscmp (_String1=".", _String2=".") returned 0 [0132.557] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.557] wcscmp (_String1="..", _String2=".") returned 1 [0132.557] wcscmp (_String1="..", _String2="..") returned 0 [0132.557] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b424179, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b424179, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b424179, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.557] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.557] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.557] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0132.557] wcscmp (_String1="RecordedTV.library-ms", _String2=".") returned 1 [0132.557] wcscmp (_String1="RecordedTV.library-ms", _String2="..") returned 1 [0132.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0132.558] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0132.558] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0132.558] wcscat (in: _Dest=0x3d8e828, _Source="RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0133.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0133.794] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0133.794] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0133.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0133.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f180) returned 1 [0133.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f1c0) returned 1 Thread: id = 256 os_tid = 0x7e4 [0132.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199a0 [0132.558] wcscpy (in: _Dest=0x3f199a0, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0132.558] wcscat (in: _Dest=0x3f199a0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0132.558] wcscat (in: _Dest=0x3f199a0, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\*") returned="C:\\Users\\Public\\Music\\*" [0132.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0132.558] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0132.559] wcscmp (_String1=".", _String2=".") returned 0 [0132.559] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.559] wcscmp (_String1="..", _String2=".") returned 1 [0132.559] wcscmp (_String1="..", _String2="..") returned 0 [0132.559] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.561] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.561] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.561] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0132.561] wcscmp (_String1="Sample Music", _String2=".") returned 1 [0132.561] wcscmp (_String1="Sample Music", _String2="..") returned 1 [0132.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62330 [0132.561] wcscpy (in: _Dest=0x3e62330, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0132.561] wcscat (in: _Dest=0x3e62330, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0132.561] wcscat (in: _Dest=0x3e62330, _Source="Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0133.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0133.796] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0133.797] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199a0) returned 1 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 Thread: id = 257 os_tid = 0x444 [0132.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f300 [0132.561] wcscpy (in: _Dest=0x3f1f300, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0132.561] wcscat (in: _Dest=0x3f1f300, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0132.562] wcscat (in: _Dest=0x3f1f300, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\*") returned="C:\\Users\\Public\\Pictures\\*" [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0132.562] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0132.562] wcscmp (_String1=".", _String2=".") returned 0 [0132.562] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.562] wcscmp (_String1="..", _String2=".") returned 1 [0132.562] wcscmp (_String1="..", _String2="..") returned 0 [0132.562] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.562] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.562] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.562] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0132.562] wcscmp (_String1="Sample Pictures", _String2=".") returned 1 [0132.562] wcscmp (_String1="Sample Pictures", _String2="..") returned 1 [0132.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe65a8 [0132.563] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0132.563] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0132.563] wcscat (in: _Dest=0x2fe65a8, _Source="Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0133.072] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0133.072] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0133.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0133.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f300) returned 1 [0133.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f200) returned 1 Thread: id = 258 os_tid = 0x90 [0132.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e32760 [0132.563] wcscpy (in: _Dest=0x3e32760, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0132.563] wcscat (in: _Dest=0x3e32760, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0132.563] wcscat (in: _Dest=0x3e32760, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\*") returned="C:\\Users\\Public\\Recorded TV\\*" [0132.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0132.564] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0132.564] wcscmp (_String1=".", _String2=".") returned 0 [0132.564] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.564] wcscmp (_String1="..", _String2=".") returned 1 [0132.564] wcscmp (_String1="..", _String2="..") returned 0 [0132.564] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x8426788a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8426788a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.564] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.564] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.564] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0132.564] wcscmp (_String1="Sample Media", _String2=".") returned 1 [0132.565] wcscmp (_String1="Sample Media", _String2="..") returned 1 [0132.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6668 [0132.565] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0132.565] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0132.565] wcscat (in: _Dest=0x2fe6668, _Source="Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0133.074] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0133.075] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0133.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0133.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32760) returned 1 [0133.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f240) returned 1 Thread: id = 259 os_tid = 0x308 [0132.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f3c0 [0132.570] wcscpy (in: _Dest=0x3f1f3c0, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0132.570] wcscat (in: _Dest=0x3f1f3c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0132.570] wcscat (in: _Dest=0x3f1f3c0, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\*") returned="C:\\Users\\Public\\Videos\\*" [0132.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0132.570] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f400 [0132.570] wcscmp (_String1=".", _String2=".") returned 0 [0132.570] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.570] wcscmp (_String1="..", _String2=".") returned 1 [0132.570] wcscmp (_String1="..", _String2="..") returned 0 [0132.570] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.570] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0132.570] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0132.570] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0132.570] wcscmp (_String1="Sample Videos", _String2=".") returned 1 [0132.571] wcscmp (_String1="Sample Videos", _String2="..") returned 1 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7d30 [0132.571] wcscpy (in: _Dest=0x3ef7d30, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0132.571] wcscat (in: _Dest=0x3ef7d30, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0132.571] wcscat (in: _Dest=0x3ef7d30, _Source="Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0133.077] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0133.077] FindClose (in: hFindFile=0x3f1f400 | out: hFindFile=0x3f1f400) returned 1 [0133.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0133.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f3c0) returned 1 [0133.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19af0) returned 1 Thread: id = 260 os_tid = 0x67c [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da64f0 [0132.571] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0132.571] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0132.571] wcscat (in: _Dest=0x3da64f0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0132.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0132.572] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f080 [0133.719] wcscmp (_String1=".", _String2=".") returned 0 [0133.719] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.725] wcscmp (_String1="..", _String2=".") returned 1 [0133.725] wcscmp (_String1="..", _String2="..") returned 0 [0133.725] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0133.725] wcscmp (_String1="Cache", _String2=".") returned 1 [0133.725] wcscmp (_String1="Cache", _String2="..") returned 1 [0133.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a148 [0133.726] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0133.726] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0133.726] wcscat (in: _Dest=0x3d5a148, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0134.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0134.457] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0134.457] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0134.457] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0134.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d5d0 [0134.457] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0134.457] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0134.457] wcscat (in: _Dest=0x32d5d0, _Source="tokens.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0134.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0134.458] FindNextFileW (in: hFindFile=0x3f1f080, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0134.458] FindClose (in: hFindFile=0x3f1f080 | out: hFindFile=0x3f1f080) returned 1 [0134.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0134.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 [0134.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 261 os_tid = 0x75c [0132.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e33018 [0132.572] wcscpy (in: _Dest=0x3e33018, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0132.572] wcscat (in: _Dest=0x3e33018, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0132.572] wcscat (in: _Dest=0x3e33018, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\*" [0132.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0132.572] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f440 [0132.573] wcscmp (_String1=".", _String2=".") returned 0 [0132.573] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.573] wcscmp (_String1="..", _String2=".") returned 1 [0132.573] wcscmp (_String1="..", _String2="..") returned 0 [0132.573] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0132.573] wcscmp (_String1="Outbound", _String2=".") returned 1 [0132.573] wcscmp (_String1="Outbound", _String2="..") returned 1 [0132.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7c80 [0132.573] wcscpy (in: _Dest=0x3ef7c80, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0132.573] wcscat (in: _Dest=0x3ef7c80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0132.573] wcscat (in: _Dest=0x3ef7c80, _Source="Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0133.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0133.080] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0133.080] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0133.080] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0133.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe67e8 [0133.080] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0133.080] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0133.081] wcscat (in: _Dest=0x2fe67e8, _Source="PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0133.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0133.082] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0133.082] wcscmp (_String1="StateData", _String2=".") returned 1 [0133.082] wcscmp (_String1="StateData", _String2="..") returned 1 [0133.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e02a08 [0133.082] wcscpy (in: _Dest=0x3e02a08, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0133.082] wcscat (in: _Dest=0x3e02a08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0133.082] wcscat (in: _Dest=0x3e02a08, _Source="StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0133.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0133.084] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.084] wcscmp (_String1="Temp", _String2=".") returned 1 [0133.084] wcscmp (_String1="Temp", _String2="..") returned 1 [0133.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e626a0 [0133.084] wcscpy (in: _Dest=0x3e626a0, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0133.084] wcscat (in: _Dest=0x3e626a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0133.084] wcscat (in: _Dest=0x3e626a0, _Source="Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0133.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e626a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0133.085] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0133.086] FindClose (in: hFindFile=0x3f1f440 | out: hFindFile=0x3f1f440) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33018) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ecd0) returned 1 Thread: id = 262 os_tid = 0x358 [0132.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62380 [0132.574] wcscpy (in: _Dest=0x3e62380, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0132.574] wcscat (in: _Dest=0x3e62380, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0132.574] wcscat (in: _Dest=0x3e62380, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\*") returned="C:\\ProgramData\\Microsoft\\Search\\*" [0132.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0132.574] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc40 [0134.038] wcscmp (_String1=".", _String2=".") returned 0 [0134.038] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.038] wcscmp (_String1="..", _String2=".") returned 1 [0134.038] wcscmp (_String1="..", _String2="..") returned 0 [0134.038] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0134.038] wcscmp (_String1="Data", _String2=".") returned 1 [0134.038] wcscmp (_String1="Data", _String2="..") returned 1 [0134.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7c28 [0134.039] wcscpy (in: _Dest=0x3ef7c28, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0134.039] wcscat (in: _Dest=0x3ef7c28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0134.039] wcscat (in: _Dest=0x3ef7c28, _Source="Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0138.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0138.040] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0138.040] FindClose (in: hFindFile=0x3f1fc40 | out: hFindFile=0x3f1fc40) returned 1 [0138.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0138.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62380) returned 1 [0138.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f2b8) returned 1 Thread: id = 263 os_tid = 0x2dc [0132.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x364850 [0132.574] wcscpy (in: _Dest=0x364850, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0132.575] wcscat (in: _Dest=0x364850, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0132.575] wcscat (in: _Dest=0x364850, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0132.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3a20 [0132.575] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0132.575] wcscmp (_String1=".", _String2=".") returned 0 [0132.575] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.575] wcscmp (_String1="..", _String2=".") returned 1 [0132.575] wcscmp (_String1="..", _String2="..") returned 0 [0132.575] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0132.575] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0132.575] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0132.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59510 [0132.576] wcscpy (in: _Dest=0x3d59510, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0132.576] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0132.576] wcscat (in: _Dest=0x3d59510, _Source="Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0133.800] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0133.800] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0133.800] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0133.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6370 [0133.800] wcscpy (in: _Dest=0x3da6370, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0133.801] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0133.801] wcscat (in: _Dest=0x3da6370, _Source="EEBsYm5.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0133.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0133.802] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0133.802] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0133.802] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0133.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6670 [0133.802] wcscpy (in: _Dest=0x3da6670, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0133.803] wcscat (in: _Dest=0x3da6670, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0133.803] wcscat (in: _Dest=0x3da6670, _Source="guest.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0133.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0133.804] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0133.804] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0133.804] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0133.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b060 [0133.804] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0133.804] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0133.804] wcscat (in: _Dest=0x3f1b060, _Source="user.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0133.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0133.806] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0133.806] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a20) returned 1 [0133.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364850) returned 1 [0133.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 264 os_tid = 0x598 [0132.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e623d0 [0132.576] wcscpy (in: _Dest=0x3e623d0, _Source="C:\\ProgramData\\Microsoft\\Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0132.576] wcscat (in: _Dest=0x3e623d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\") returned="C:\\ProgramData\\Microsoft\\Vault\\" [0132.576] wcscat (in: _Dest=0x3e623d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\*") returned="C:\\ProgramData\\Microsoft\\Vault\\*" [0132.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0132.576] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc40 [0134.036] wcscmp (_String1=".", _String2=".") returned 0 [0134.036] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.036] wcscmp (_String1="..", _String2=".") returned 1 [0134.036] wcscmp (_String1="..", _String2="..") returned 0 [0134.036] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.036] FindClose (in: hFindFile=0x3f1fc40 | out: hFindFile=0x3f1fc40) returned 1 [0134.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0134.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e623d0) returned 1 [0134.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f1e0) returned 1 Thread: id = 265 os_tid = 0x230 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62420 [0132.577] wcscpy (in: _Dest=0x3e62420, _Source="C:\\ProgramData\\Microsoft\\VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0132.577] wcscat (in: _Dest=0x3e62420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\") returned="C:\\ProgramData\\Microsoft\\VISIO\\" [0132.577] wcscat (in: _Dest=0x3e62420, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\*") returned="C:\\ProgramData\\Microsoft\\VISIO\\*" [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0132.577] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc40 [0134.033] wcscmp (_String1=".", _String2=".") returned 0 [0134.033] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.033] wcscmp (_String1="..", _String2=".") returned 1 [0134.033] wcscmp (_String1="..", _String2="..") returned 0 [0134.033] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.034] FindClose (in: hFindFile=0x3f1fc40 | out: hFindFile=0x3f1fc40) returned 1 [0134.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0134.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62420) returned 1 [0134.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ee80) returned 1 Thread: id = 266 os_tid = 0x240 [0132.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62470 [0132.578] wcscpy (in: _Dest=0x3e62470, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0132.578] wcscat (in: _Dest=0x3e62470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0132.578] wcscat (in: _Dest=0x3e62470, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\*" [0132.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0132.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0132.578] wcscmp (_String1=".", _String2=".") returned 0 [0132.578] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.578] wcscmp (_String1="..", _String2=".") returned 1 [0132.579] wcscmp (_String1="..", _String2="..") returned 0 [0132.579] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0132.579] wcscmp (_String1="AIT", _String2=".") returned 1 [0132.579] wcscmp (_String1="AIT", _String2="..") returned 1 [0132.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7cd8 [0132.579] wcscpy (in: _Dest=0x3ef7cd8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0132.579] wcscat (in: _Dest=0x3ef7cd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0132.579] wcscat (in: _Dest=0x3ef7cd8, _Source="AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0134.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0134.492] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0134.492] wcscmp (_String1="Caches", _String2=".") returned 1 [0134.492] wcscmp (_String1="Caches", _String2="..") returned 1 [0134.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e02c18 [0134.492] wcscpy (in: _Dest=0x3e02c18, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.492] wcscat (in: _Dest=0x3e02c18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.492] wcscat (in: _Dest=0x3e02c18, _Source="Caches" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Caches") returned="C:\\ProgramData\\Microsoft\\Windows\\Caches" [0134.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02c18) returned 1 [0134.492] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0134.492] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0134.492] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0134.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e34a60 [0134.492] wcscpy (in: _Dest=0x3e34a60, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.492] wcscat (in: _Dest=0x3e34a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.492] wcscat (in: _Dest=0x3e34a60, _Source="DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0134.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e34a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0134.493] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0134.493] wcscmp (_String1="DRM", _String2=".") returned 1 [0134.493] wcscmp (_String1="DRM", _String2="..") returned 1 [0134.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e02c18 [0134.494] wcscpy (in: _Dest=0x3e02c18, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.494] wcscat (in: _Dest=0x3e02c18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.494] wcscat (in: _Dest=0x3e02c18, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0134.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0134.495] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0134.495] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0134.495] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0134.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8df38 [0134.495] wcscpy (in: _Dest=0x3d8df38, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.495] wcscat (in: _Dest=0x3d8df38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.496] wcscat (in: _Dest=0x3d8df38, _Source="GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0134.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8df38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0134.497] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0134.497] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0134.497] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0134.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d596a8 [0134.498] wcscpy (in: _Dest=0x3d596a8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.498] wcscat (in: _Dest=0x3d596a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.498] wcscat (in: _Dest=0x3d596a8, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0134.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d596a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0134.500] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0134.500] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0134.500] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0134.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a28 [0134.500] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.500] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.500] wcscat (in: _Dest=0x2fe6a28, _Source="Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0134.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0134.501] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0134.501] wcscmp (_String1="Sqm", _String2=".") returned 1 [0134.501] wcscmp (_String1="Sqm", _String2="..") returned 1 [0134.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e03770 [0134.501] wcscpy (in: _Dest=0x3e03770, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.502] wcscat (in: _Dest=0x3e03770, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.502] wcscat (in: _Dest=0x3e03770, _Source="Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0134.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e03770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0134.503] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0134.503] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0134.503] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0134.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe67e8 [0134.503] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.503] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.503] wcscat (in: _Dest=0x2fe67e8, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0134.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0134.504] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0134.504] wcscmp (_String1="Templates", _String2=".") returned 1 [0134.504] wcscmp (_String1="Templates", _String2="..") returned 1 [0134.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6128 [0134.505] wcscpy (in: _Dest=0x2fe6128, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.505] wcscat (in: _Dest=0x2fe6128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.505] wcscat (in: _Dest=0x2fe6128, _Source="Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0134.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0134.506] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0134.506] wcscmp (_String1="WER", _String2=".") returned 1 [0134.506] wcscmp (_String1="WER", _String2="..") returned 1 [0134.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e02d78 [0134.506] wcscpy (in: _Dest=0x3e02d78, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0134.506] wcscat (in: _Dest=0x3e02d78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0134.506] wcscat (in: _Dest=0x3e02d78, _Source="WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0134.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0134.507] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0134.507] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0134.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0134.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62470) returned 1 [0134.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621a0) returned 1 Thread: id = 267 os_tid = 0x1e4 [0132.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e02c70 [0132.579] wcscpy (in: _Dest=0x3e02c70, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0132.580] wcscat (in: _Dest=0x3e02c70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0132.580] wcscat (in: _Dest=0x3e02c70, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\*" [0132.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0132.580] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0134.028] wcscmp (_String1=".", _String2=".") returned 0 [0134.028] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.032] wcscmp (_String1="..", _String2=".") returned 1 [0134.032] wcscmp (_String1="..", _String2="..") returned 0 [0134.032] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0134.032] wcscmp (_String1="MSFax", _String2=".") returned 1 [0134.032] wcscmp (_String1="MSFax", _String2="..") returned 1 [0134.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6de8 [0134.033] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0134.033] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0134.033] wcscat (in: _Dest=0x2fe6de8, _Source="MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0134.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0134.585] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0134.585] wcscmp (_String1="MSScan", _String2=".") returned 1 [0134.586] wcscmp (_String1="MSScan", _String2="..") returned 1 [0134.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6488 [0134.586] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0134.586] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0134.586] wcscat (in: _Dest=0x2fe6488, _Source="MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0134.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0134.587] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0134.587] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0134.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0134.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02c70) returned 1 [0134.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621f0) returned 1 Thread: id = 268 os_tid = 0x480 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e624c0 [0132.581] wcscpy (in: _Dest=0x3e624c0, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0132.581] wcscat (in: _Dest=0x3e624c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0132.581] wcscat (in: _Dest=0x3e624c0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\*" [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0132.581] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fbc0 [0134.027] wcscmp (_String1=".", _String2=".") returned 0 [0134.027] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.027] wcscmp (_String1="..", _String2=".") returned 1 [0134.027] wcscmp (_String1="..", _String2="..") returned 0 [0134.027] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0134.027] wcscmp (_String1="Profiles", _String2=".") returned 1 [0134.027] wcscmp (_String1="Profiles", _String2="..") returned 1 [0134.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d88 [0134.028] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0134.028] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0134.028] wcscat (in: _Dest=0x2fe6d88, _Source="Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0134.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0134.583] FindNextFileW (in: hFindFile=0x3f1fbc0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0134.583] FindClose (in: hFindFile=0x3f1fbc0 | out: hFindFile=0x3f1fbc0) returned 1 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e624c0) returned 1 [0134.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62240) returned 1 Thread: id = 269 os_tid = 0x4fc [0132.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e02b68 [0132.582] wcscpy (in: _Dest=0x3e02b68, _Source="C:\\Users\\Default\\Documents\\My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0132.582] wcscat (in: _Dest=0x3e02b68, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\") returned="C:\\Users\\Default\\Documents\\My Music\\" [0132.582] wcscat (in: _Dest=0x3e02b68, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\*") returned="C:\\Users\\Default\\Documents\\My Music\\*" [0132.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0132.582] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0132.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02b68) returned 1 [0132.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62010) returned 1 Thread: id = 270 os_tid = 0x380 [0132.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0132.594] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\Default\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0132.594] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\") returned="C:\\Users\\Default\\Documents\\My Pictures\\" [0132.594] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\*") returned="C:\\Users\\Default\\Documents\\My Pictures\\*" [0132.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0132.594] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 271 os_tid = 0x10c [0132.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7650 [0132.607] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Users\\Default\\Documents\\My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0132.607] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\") returned="C:\\Users\\Default\\Documents\\My Videos\\" [0132.607] wcscat (in: _Dest=0x3ef7650, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\*") returned="C:\\Users\\Default\\Documents\\My Videos\\*" [0132.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0132.608] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0132.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 [0132.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 Thread: id = 272 os_tid = 0xc0 [0132.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62010 [0132.622] wcscpy (in: _Dest=0x3e62010, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0132.622] wcscat (in: _Dest=0x3e62010, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0132.622] wcscat (in: _Dest=0x3e62010, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\*") returned="C:\\Users\\Default\\Favorites\\Links\\*" [0132.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0132.622] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0133.845] wcscmp (_String1=".", _String2=".") returned 0 [0133.845] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.846] wcscmp (_String1="..", _String2=".") returned 1 [0133.846] wcscmp (_String1="..", _String2="..") returned 0 [0133.846] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29913374, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.846] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.846] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.846] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0133.846] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0133.846] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0133.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b0d8 [0133.846] wcscpy (in: _Dest=0x3f1b0d8, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0133.846] wcscat (in: _Dest=0x3f1b0d8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0133.846] wcscat (in: _Dest=0x3f1b0d8, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" [0141.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0141.326] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0141.326] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0141.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0141.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62010) returned 1 [0141.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62100) returned 1 Thread: id = 273 os_tid = 0x80c [0132.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0132.626] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0132.626] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0132.626] wcscat (in: _Dest=0x3d8e7c0, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*" [0132.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0132.626] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0134.715] wcscmp (_String1=".", _String2=".") returned 0 [0134.715] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.715] wcscmp (_String1="..", _String2=".") returned 1 [0134.715] wcscmp (_String1="..", _String2="..") returned 0 [0134.715] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb4af0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cb4af0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290260e4, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0134.715] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0134.715] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0134.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df22e8 [0134.715] wcscpy (in: _Dest=0x3df22e8, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0134.715] wcscat (in: _Dest=0x3df22e8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0134.715] wcscat (in: _Dest=0x3df22e8, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0143.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0143.550] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28ffff84, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0143.550] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0143.550] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0143.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e1b0 [0143.550] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.550] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0143.550] wcscat (in: _Dest=0x3e0e1b0, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0143.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0143.552] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0143.552] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0143.552] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0143.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0143.552] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.552] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0143.552] wcscat (in: _Dest=0x66dc828, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0143.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0143.553] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdac50, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0143.554] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0143.554] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0143.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dca68 [0143.554] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.554] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0143.554] wcscat (in: _Dest=0x66dca68, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0143.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0143.555] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0143.555] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0143.555] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0143.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcc18 [0143.555] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0143.555] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0143.555] wcscat (in: _Dest=0x66dcc18, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0143.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0143.557] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0143.557] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0143.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0143.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 [0143.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 274 os_tid = 0x81c [0132.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe66c8 [0132.627] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0132.627] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0132.627] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\*" [0132.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0132.627] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0133.286] wcscmp (_String1=".", _String2=".") returned 0 [0133.286] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.286] wcscmp (_String1="..", _String2=".") returned 1 [0133.287] wcscmp (_String1="..", _String2="..") returned 0 [0133.287] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0133.287] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0133.287] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0133.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ae08 [0133.287] wcscpy (in: _Dest=0x3f1ae08, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0133.287] wcscat (in: _Dest=0x3f1ae08, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0133.287] wcscat (in: _Dest=0x3f1ae08, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" [0134.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ae08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0134.623] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0134.623] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0134.623] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0134.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59e18 [0134.623] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0134.623] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0134.623] wcscat (in: _Dest=0x3d59e18, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" [0134.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0134.625] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0134.625] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0134.625] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0134.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ce78 [0134.625] wcscpy (in: _Dest=0x3f1ce78, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0134.625] wcscat (in: _Dest=0x3f1ce78, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0134.625] wcscat (in: _Dest=0x3f1ce78, _Source="MSN Money.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" [0134.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ce78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0134.626] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0134.626] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0134.626] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0134.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cef0 [0134.627] wcscpy (in: _Dest=0x3f1cef0, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0134.627] wcscat (in: _Dest=0x3f1cef0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0134.627] wcscat (in: _Dest=0x3f1cef0, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" [0134.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0134.628] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0134.628] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0134.628] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0134.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d3d8 [0134.628] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0134.628] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0134.628] wcscat (in: _Dest=0x3d8d3d8, _Source="MSN.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" [0134.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0134.629] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0134.629] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0134.629] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0134.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cf68 [0134.630] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0134.630] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0134.630] wcscat (in: _Dest=0x3f1cf68, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" [0134.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0134.631] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0134.631] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0134.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0134.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0134.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7338) returned 1 Thread: id = 275 os_tid = 0x82c [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6728 [0132.629] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0132.629] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0132.629] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\*") returned="C:\\Users\\Default\\Favorites\\Windows Live\\*" [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0132.629] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0133.929] wcscmp (_String1=".", _String2=".") returned 0 [0133.930] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.930] wcscmp (_String1="..", _String2=".") returned 1 [0133.930] wcscmp (_String1="..", _String2="..") returned 0 [0133.931] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0133.931] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0133.931] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0133.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a258 [0133.931] wcscpy (in: _Dest=0x3d5a258, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0133.931] wcscat (in: _Dest=0x3d5a258, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0133.931] wcscat (in: _Dest=0x3d5a258, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" [0135.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364 [0135.496] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0135.496] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0135.496] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0135.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db628 [0135.496] wcscpy (in: _Dest=0x66db628, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0135.496] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0135.496] wcscat (in: _Dest=0x66db628, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" [0135.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0135.497] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0135.498] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0135.498] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0135.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58eb0 [0135.498] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0135.498] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0135.498] wcscat (in: _Dest=0x3d58eb0, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" [0135.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0135.499] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0135.499] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0135.499] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0135.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d596a8 [0135.499] wcscpy (in: _Dest=0x3d596a8, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0135.499] wcscat (in: _Dest=0x3d596a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0135.499] wcscat (in: _Dest=0x3d596a8, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" [0135.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d596a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0135.501] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0135.501] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0135.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0135.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0135.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e38) returned 1 Thread: id = 276 os_tid = 0x83c [0132.630] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps" (normalized: "c:\\users\\eebsym5\\documents\\-mfvjq7rgfodp.pps")) returned 0x20 [0132.630] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps", dwFileAttributes=0x20) returned 1 [0132.631] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps" (normalized: "c:\\users\\eebsym5\\documents\\-mfvjq7rgfodp.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11c0 [0132.631] GetFileSizeEx (in: hFile=0x11c0, lpFileSize=0x932fcb4 | out: lpFileSize=0x932fcb4*=85522) returned 1 [0132.631] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x14e0e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.631] ReadFile (in: hFile=0x11c0, lpBuffer=0x932fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x932fca0, lpOverlapped=0x0 | out: lpBuffer=0x932fc90*, lpNumberOfBytesRead=0x932fca0*=0x4, lpOverlapped=0x0) returned 1 [0132.634] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0132.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0132.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.634] NtQuerySystemTime (in: CurrentTime=0x932fc28 | out: CurrentTime=0x932fc28*=132482710412976000) returned 0x0 [0132.634] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x453b90a9 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x796bd7e8 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x4fa6a95d [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x1cb5b23e [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x7b397763 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x5417fd4e [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x76e4adb0 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x25ca1874 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x7c9356cb [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x4eddae20 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x635506f4 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x7fe0150e [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x54b8648d [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x70d80bcc [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x7436853f [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x2323f541 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x4c78b44b [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x7a0a9468 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x3d7d1024 [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x5f31052f [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x405828e [0132.635] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x3efac113 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x2f3f9516 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x40716e50 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x490eed8f [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x4e8da268 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x5f85d214 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x766ad162 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x79826a98 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x76e4adb0 [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x1f631a8f [0132.636] RtlRandomEx (in: Seed=0x932fc20 | out: Seed=0x932fc20) returned 0x3bc1afad [0132.649] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.649] ReadFile (in: hFile=0x11c0, lpBuffer=0x66cc048, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x66cc048*, lpNumberOfBytesRead=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0132.649] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32be0 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0132.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66cfc50 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0132.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32be0) returned 1 [0132.650] WriteFile (in: hFile=0x11c0, lpBuffer=0x66cfc50*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x66cfc50*, lpNumberOfBytesWritten=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0133.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cfc50) returned 1 [0133.232] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.232] ReadFile (in: hFile=0x11c0, lpBuffer=0x66cc048, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x66cc048*, lpNumberOfBytesRead=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0133.233] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33408 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e35438 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0133.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0133.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0133.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0133.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0133.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.234] WriteFile (in: hFile=0x11c0, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0133.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0133.850] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x11212, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.851] ReadFile (in: hFile=0x11c0, lpBuffer=0x66cc048, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x66cc048*, lpNumberOfBytesRead=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0133.851] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x11212, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4110 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0133.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0133.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0133.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0133.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0133.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4110) returned 1 [0133.852] WriteFile (in: hFile=0x11c0, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x932fc28, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0x932fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0134.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0134.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8b970 [0134.716] SetFilePointerEx (in: hFile=0x11c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.716] WriteFile (in: hFile=0x11c0, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x932fca8, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x932fca8*=0x154, lpOverlapped=0x0) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198f8) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0135.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0135.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5568 [0135.633] wcscpy (in: _Dest=0x66e5568, _Source="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps") returned="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps" [0135.633] wcscat (in: _Dest=0x66e5568, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps.ac3a86" [0135.633] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps.ac3a86", NtPathName=0x932fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-MFvjq7RGfODP.pps.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef048 [0135.647] FlushFileBuffers (hFile=0x11c0) returned 1 [0135.782] CloseHandle (hObject=0x11c0) returned 1 [0135.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef6e0 [0135.800] wcscpy (in: _Dest=0x3eef6e0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.800] wcscat (in: _Dest=0x3eef6e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.800] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef6e0) returned 1 [0135.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea98) returned 1 Thread: id = 277 os_tid = 0x84c [0132.654] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-t9zm98ykih89ciabnz.pptx")) returned 0x20 [0132.655] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx", dwFileAttributes=0x20) returned 1 [0132.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-t9zm98ykih89ciabnz.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11b0 [0132.655] GetFileSizeEx (in: hFile=0x11b0, lpFileSize=0x8adfd94 | out: lpFileSize=0x8adfd94*=98307) returned 1 [0132.655] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x17fff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.655] ReadFile (in: hFile=0x11b0, lpBuffer=0x8adfd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8adfd80, lpOverlapped=0x0 | out: lpBuffer=0x8adfd70*, lpNumberOfBytesRead=0x8adfd80*=0x4, lpOverlapped=0x0) returned 1 [0132.658] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0132.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.659] NtQuerySystemTime (in: CurrentTime=0x8adfd08 | out: CurrentTime=0x8adfd08*=132482710413288000) returned 0x0 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x4b0821b1 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x4a320f4c [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x766ad162 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x21cfd3d8 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x367d945b [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x5cf34bab [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x5f42025 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x7d0d73c [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x1d921382 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x1700ad74 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x4c64d9c7 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x2ec02269 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x20e8afbb [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x355c60a7 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x7d9720ee [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0xd07aa47 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x157606c4 [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x559d6d8f [0132.659] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x4f3ce20f [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x5e25415c [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x3f8133fe [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x363c5d0b [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x5f85d214 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x2d878431 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0xb08edce [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x18516698 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x62345dd7 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x4ad7dac5 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x7345b271 [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x3cd29ddf [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x490eed8f [0132.660] RtlRandomEx (in: Seed=0x8adfd00 | out: Seed=0x8adfd00) returned 0x1c963925 [0132.674] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.675] ReadFile (in: hFile=0x11b0, lpBuffer=0x66d3858, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x66d3858*, lpNumberOfBytesRead=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0132.675] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32ac0 [0132.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0132.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66d7460 [0132.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0132.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0132.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0132.676] WriteFile (in: hFile=0x11b0, lpBuffer=0x66d7460*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x66d7460*, lpNumberOfBytesWritten=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d7460) returned 1 [0133.235] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.235] ReadFile (in: hFile=0x11b0, lpBuffer=0x66d3858, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x66d3858*, lpNumberOfBytesRead=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.235] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33408 [0133.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e35438 [0133.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0133.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0133.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0133.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0133.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0133.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0133.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0133.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.236] WriteFile (in: hFile=0x11b0, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0133.853] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x14403, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.853] ReadFile (in: hFile=0x11b0, lpBuffer=0x66d3858, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x66d3858*, lpNumberOfBytesRead=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.853] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x14403, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4110 [0133.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0133.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0133.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4110) returned 1 [0133.854] WriteFile (in: hFile=0x11b0, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8adfd08, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x8adfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0134.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0134.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bbe0 [0134.717] SetFilePointerEx (in: hFile=0x11b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.718] WriteFile (in: hFile=0x11b0, lpBuffer=0x3e295d8*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x8adfd88, lpOverlapped=0x0 | out: lpBuffer=0x3e295d8*, lpNumberOfBytesWritten=0x8adfd88*=0x162, lpOverlapped=0x0) returned 1 [0135.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e295d8) returned 1 [0135.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60b68) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61228) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0135.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0135.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6570 [0135.640] wcscpy (in: _Dest=0x3da6570, _Source="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx" [0135.640] wcscat (in: _Dest=0x3da6570, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx.ac3a86" [0135.640] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx.ac3a86", NtPathName=0x8adfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-T9zM98yKiH89CIabNz.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0135.644] FlushFileBuffers (hFile=0x11b0) returned 1 [0135.781] CloseHandle (hObject=0x11b0) returned 1 [0135.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x2fce510 [0135.782] wcscpy (in: _Dest=0x2fce510, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.782] wcscat (in: _Dest=0x2fce510, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce510) returned 1 [0135.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b200) returned 1 Thread: id = 278 os_tid = 0x85c [0132.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\-tjvwy.xlsx")) returned 0x20 [0132.680] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx", dwFileAttributes=0x20) returned 1 [0132.680] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\-tjvwy.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11b8 [0132.681] GetFileSizeEx (in: hFile=0x11b8, lpFileSize=0x958fd9c | out: lpFileSize=0x958fd9c*=15460) returned 1 [0132.681] SetFilePointerEx (in: hFile=0x11b8, liDistanceToMove=0x3c60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.681] ReadFile (in: hFile=0x11b8, lpBuffer=0x958fd78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x958fd88, lpOverlapped=0x0 | out: lpBuffer=0x958fd78*, lpNumberOfBytesRead=0x958fd88*=0x4, lpOverlapped=0x0) returned 1 [0132.683] SetFilePointerEx (in: hFile=0x11b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0132.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.684] NtQuerySystemTime (in: CurrentTime=0x958fd10 | out: CurrentTime=0x958fd10*=132482710413444000) returned 0x0 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x36ca40d9 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x71d94936 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x58334938 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x4b39b334 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x21cfd3d8 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x3efac113 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x2fa3a499 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x7a0a9468 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x4c61a591 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x55d8e102 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x886c77 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x75c8b3b5 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x67e69e13 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x1735931a [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x5b77ec3a [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x651973c1 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x352a48a9 [0132.684] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x4306e3da [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x778c12d [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x45853208 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x5567872f [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x56852968 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x396da147 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x5acaefa3 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x4c9e1b93 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x2e205718 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x43808b9a [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x6c13518f [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x66a443a6 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x2b2b9156 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x7db385f8 [0132.685] RtlRandomEx (in: Seed=0x958fd08 | out: Seed=0x958fd08) returned 0x7d6ffb25 [0132.697] SetFilePointerEx (in: hFile=0x11b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.697] ReadFile (in: hFile=0x11b8, lpBuffer=0x66db068, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x958fd10, lpOverlapped=0x0 | out: lpBuffer=0x66db068*, lpNumberOfBytesRead=0x958fd10*=0x3c00, lpOverlapped=0x0) returned 1 [0132.698] SetFilePointerEx (in: hFile=0x11b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b98 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66dec70 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0132.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3980) returned 1 [0132.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b98) returned 1 [0132.698] WriteFile (in: hFile=0x11b8, lpBuffer=0x66dec70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x958fd10, lpOverlapped=0x0 | out: lpBuffer=0x66dec70*, lpNumberOfBytesWritten=0x958fd10*=0x3c00, lpOverlapped=0x0) returned 1 [0133.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dec70) returned 1 [0133.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db068) returned 1 [0133.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3bd0 [0133.237] SetFilePointerEx (in: hFile=0x11b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.238] WriteFile (in: hFile=0x11b8, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x958fd90, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x958fd90*=0x108, lpOverlapped=0x0) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3780) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0133.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0133.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e070 [0133.857] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx" [0133.857] wcscat (in: _Dest=0x3d8e070, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx.ac3a86" [0133.857] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx.ac3a86", NtPathName=0x958fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-TJvwy.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5b70 [0133.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 [0133.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6b80) returned 1 [0133.859] NtQueryInformationFile (in: FileHandle=0x11b8, IoStatusBlock=0x958fce0, FileInformation=0x958fce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x958fce0, FileInformation=0x958fce8) returned 0x0 [0133.859] NtSetInformationFile (FileHandle=0x11b8, IoStatusBlock=0x958fce0, FileInformation=0x958fce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0133.861] FlushFileBuffers (hFile=0x11b8) returned 1 [0134.719] CloseHandle (hObject=0x11b8) returned 1 [0134.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8de00 [0134.863] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0134.863] wcscat (in: _Dest=0x3d8de00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0134.863] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0134.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 [0134.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef72e0) returned 1 Thread: id = 279 os_tid = 0x86c [0132.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf" (normalized: "c:\\users\\eebsym5\\documents\\9mijgpyx.pdf")) returned 0x20 [0132.704] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf", dwFileAttributes=0x20) returned 1 [0132.704] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf" (normalized: "c:\\users\\eebsym5\\documents\\9mijgpyx.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11b4 [0132.704] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x945fe34 | out: lpFileSize=0x945fe34*=98747) returned 1 [0132.704] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x181b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.705] ReadFile (in: hFile=0x11b4, lpBuffer=0x945fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x945fe20, lpOverlapped=0x0 | out: lpBuffer=0x945fe10*, lpNumberOfBytesRead=0x945fe20*=0x4, lpOverlapped=0x0) returned 1 [0132.707] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39f8 [0132.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.707] NtQuerySystemTime (in: CurrentTime=0x945fda8 | out: CurrentTime=0x945fda8*=132482710413756000) returned 0x0 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x7563d8d0 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x490d5eda [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x1650303c [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x1500a8de [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x396da147 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x43c6fe4b [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x4766d4bb [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x7563d8d0 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x3f8133fe [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x3c940281 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x1f835273 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x4505e6a4 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x57fa172a [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x48c433a9 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x65af95e7 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x7ac50a93 [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x61f3af1f [0132.707] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x11a8a27a [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x5548930d [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x3b932f77 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x65b8e0a8 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x4b0821b1 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x60ee3ed0 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0xe5a8ce [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x13b4c712 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x254f934c [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x17a344cc [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0xea82ba7 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x101222f3 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x5d0f5465 [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x6161673e [0132.708] RtlRandomEx (in: Seed=0x945fda0 | out: Seed=0x945fda0) returned 0x3f46af6a [0132.718] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.718] ReadFile (in: hFile=0x11b4, lpBuffer=0x66e2878, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x66e2878*, lpNumberOfBytesRead=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.718] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b50 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3980) returned 1 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66e6480 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3980 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0132.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b50) returned 1 [0132.719] WriteFile (in: hFile=0x11b4, lpBuffer=0x66e6480*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x66e6480*, lpNumberOfBytesWritten=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6480) returned 1 [0133.238] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.239] ReadFile (in: hFile=0x11b4, lpBuffer=0x66e2878, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x66e2878*, lpNumberOfBytesRead=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.239] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33408 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e35438 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0133.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6722910 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0133.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2440 [0133.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0133.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0133.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.240] WriteFile (in: hFile=0x11b4, lpBuffer=0x6722910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesWritten=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6722910) returned 1 [0133.863] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x145bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.863] ReadFile (in: hFile=0x11b4, lpBuffer=0x66e2878, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x66e2878*, lpNumberOfBytesRead=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.863] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x145bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4110 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0133.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6722910 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0133.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0133.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0133.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4110) returned 1 [0133.864] WriteFile (in: hFile=0x11b4, lpBuffer=0x6722910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x945fda8, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesWritten=0x945fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6722910) returned 1 [0134.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0134.719] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.719] WriteFile (in: hFile=0x11b4, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x945fe28, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x945fe28*=0x14a, lpOverlapped=0x0) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3980) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0138.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39f8) returned 1 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bde8 [0138.113] wcscpy (in: _Dest=0x3d8bde8, _Source="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf" [0138.113] wcscat (in: _Dest=0x3d8bde8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf.ac3a86" [0138.113] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf.ac3a86", NtPathName=0x945fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\9MijgPyX.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5cf0 [0138.117] FlushFileBuffers (hFile=0x11b4) returned 1 [0139.053] CloseHandle (hObject=0x11b4) returned 1 [0139.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e9c8 [0139.450] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0139.450] wcscat (in: _Dest=0x3d8e9c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0139.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0139.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 [0139.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7b78) returned 1 Thread: id = 280 os_tid = 0x87c [0132.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\binvcempuyf9i1t_kx.xlsx")) returned 0x20 [0132.723] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx", dwFileAttributes=0x20) returned 1 [0132.723] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\binvcempuyf9i1t_kx.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x115c [0132.723] GetFileSizeEx (in: hFile=0x115c, lpFileSize=0x961fc0c | out: lpFileSize=0x961fc0c*=22472) returned 1 [0132.723] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x57c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.724] ReadFile (in: hFile=0x115c, lpBuffer=0x961fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x961fbf8, lpOverlapped=0x0 | out: lpBuffer=0x961fbe8*, lpNumberOfBytesRead=0x961fbf8*=0x4, lpOverlapped=0x0) returned 1 [0132.726] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0132.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.726] NtQuerySystemTime (in: CurrentTime=0x961fb80 | out: CurrentTime=0x961fb80*=132482710413912000) returned 0x0 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x4b592555 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x74ec109c [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x124a18d4 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x4950734e [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x778c12d [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x395f4746 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x76efc7b1 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x3dfc599d [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x6fb9eabd [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x32c1608 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x2112b90 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x363c5d0b [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x7ded5b5b [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x37935fb8 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x5eb98aab [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x26d50165 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x34540ce9 [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x7d90912e [0132.726] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x125e6c65 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x579aaaf7 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x3c021e74 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x1d4a007d [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x14d5bd29 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x70cbf6f5 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x2ecd33f [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x22a9a8b6 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x73616f4c [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x5c18c0fb [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0xd209f98 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x7869a82f [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x76efc7b1 [0132.727] RtlRandomEx (in: Seed=0x961fb78 | out: Seed=0x961fb78) returned 0x4e0f4995 [0132.739] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.739] ReadFile (in: hFile=0x115c, lpBuffer=0x66ea088, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x961fb80, lpOverlapped=0x0 | out: lpBuffer=0x66ea088*, lpNumberOfBytesRead=0x961fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0132.740] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b08 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66edc90 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0132.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b08) returned 1 [0132.741] WriteFile (in: hFile=0x115c, lpBuffer=0x66edc90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x961fb80, lpOverlapped=0x0 | out: lpBuffer=0x66edc90*, lpNumberOfBytesWritten=0x961fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edc90) returned 1 [0133.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea088) returned 1 [0133.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33408 [0133.241] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.241] WriteFile (in: hFile=0x115c, lpBuffer=0x330cd0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x961fc00, lpOverlapped=0x0 | out: lpBuffer=0x330cd0*, lpNumberOfBytesWritten=0x961fc00*=0x120, lpOverlapped=0x0) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33180) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0133.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0133.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5b70 [0133.867] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx" [0133.867] wcscat (in: _Dest=0x3da5b70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx.ac3a86" [0133.867] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx.ac3a86", NtPathName=0x961fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\bInVceMpuYf9i1t_kX.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d538 [0133.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 [0133.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6b80) returned 1 [0133.925] NtQueryInformationFile (in: FileHandle=0x115c, IoStatusBlock=0x961fb50, FileInformation=0x961fb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x961fb50, FileInformation=0x961fb58) returned 0x0 [0133.926] NtSetInformationFile (FileHandle=0x115c, IoStatusBlock=0x961fb50, FileInformation=0x961fb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 [0133.928] FlushFileBuffers (hFile=0x115c) returned 1 [0135.783] CloseHandle (hObject=0x115c) returned 1 [0138.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x2fce510 [0138.010] wcscpy (in: _Dest=0x2fce510, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0138.010] wcscat (in: _Dest=0x2fce510, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0138.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0138.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce510) returned 1 [0138.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b6d0) returned 1 Thread: id = 281 os_tid = 0x88c [0132.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots" (normalized: "c:\\users\\eebsym5\\documents\\d5jih.ots")) returned 0x20 [0132.747] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots", dwFileAttributes=0x20) returned 1 [0132.748] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots" (normalized: "c:\\users\\eebsym5\\documents\\d5jih.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a8 [0132.748] GetFileSizeEx (in: hFile=0x11a8, lpFileSize=0x968f8ac | out: lpFileSize=0x968f8ac*=20611) returned 1 [0132.748] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x507f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.748] ReadFile (in: hFile=0x11a8, lpBuffer=0x968f888, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x968f898, lpOverlapped=0x0 | out: lpBuffer=0x968f888*, lpNumberOfBytesRead=0x968f898*=0x4, lpOverlapped=0x0) returned 1 [0132.750] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0132.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0132.750] NtQuerySystemTime (in: CurrentTime=0x968f820 | out: CurrentTime=0x968f820*=132482710414224000) returned 0x0 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x8ea57df [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x3a605b64 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x2a79de23 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x7c502822 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x2441b2b1 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x47d9db93 [0132.750] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x123fbf83 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x4260864 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x551a54da [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x3cbe624 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x3784888b [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x2595c832 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x6ce0b4ce [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x330d5e9e [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x6bbaa09b [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x4632e496 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x15331424 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x5fce311e [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x125e6c65 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x7a9441c2 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x7925323a [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0xf544291 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x46e67333 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x2726bd5a [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x12ae0f03 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x2fc2f18b [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x776c2f85 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x5b20cfda [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x3ef6547c [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0xde22c09 [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x38b6708a [0132.751] RtlRandomEx (in: Seed=0x968f818 | out: Seed=0x968f818) returned 0x56f43fb0 [0132.762] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.763] ReadFile (in: hFile=0x11a8, lpBuffer=0x66f1898, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x968f820, lpOverlapped=0x0 | out: lpBuffer=0x66f1898*, lpNumberOfBytesRead=0x968f820*=0x3c00, lpOverlapped=0x0) returned 1 [0132.763] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e329a0 [0132.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0132.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66f54a0 [0132.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ac0 [0132.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0132.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0132.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e329a0) returned 1 [0132.764] WriteFile (in: hFile=0x11a8, lpBuffer=0x66f54a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x968f820, lpOverlapped=0x0 | out: lpBuffer=0x66f54a0*, lpNumberOfBytesWritten=0x968f820*=0x3c00, lpOverlapped=0x0) returned 1 [0132.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f54a0) returned 1 [0132.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f1898) returned 1 [0132.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b60 [0132.767] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.767] WriteFile (in: hFile=0x11a8, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x968f8a0, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x968f8a0*=0x104, lpOverlapped=0x0) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bd8) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0133.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0133.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0133.243] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots") returned="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots" [0133.243] wcscat (in: _Dest=0x2fe6908, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots.ac3a86" [0133.243] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots.ac3a86", NtPathName=0x968f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\D5jIh.ots.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e35438 [0133.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0133.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2db38) returned 1 [0133.264] NtQueryInformationFile (in: FileHandle=0x11a8, IoStatusBlock=0x968f7f0, FileInformation=0x968f7f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x968f7f0, FileInformation=0x968f7f8) returned 0x0 [0133.264] NtSetInformationFile (FileHandle=0x11a8, IoStatusBlock=0x968f7f0, FileInformation=0x968f7f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0133.266] FlushFileBuffers (hFile=0x11a8) returned 1 [0133.290] CloseHandle (hObject=0x11a8) returned 1 [0133.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ccf0 [0133.291] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.291] wcscat (in: _Dest=0x3d8ccf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0133.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0xffffffff [0133.291] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11a8 [0133.292] WriteFile (in: hFile=0x11a8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x968f834, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x968f834*=0x8b9, lpOverlapped=0x0) returned 1 [0133.296] CloseHandle (hObject=0x11a8) returned 1 [0133.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0133.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 Thread: id = 282 os_tid = 0x89c [0132.769] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx" (normalized: "c:\\users\\eebsym5\\documents\\dlyrh9eag.pptx")) returned 0x20 [0132.769] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx", dwFileAttributes=0x20) returned 1 [0132.769] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx" (normalized: "c:\\users\\eebsym5\\documents\\dlyrh9eag.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x116c [0132.770] GetFileSizeEx (in: hFile=0x116c, lpFileSize=0x95df8fc | out: lpFileSize=0x95df8fc*=76219) returned 1 [0132.770] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x129b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.770] ReadFile (in: hFile=0x116c, lpBuffer=0x95df8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95df8e8, lpOverlapped=0x0 | out: lpBuffer=0x95df8d8*, lpNumberOfBytesRead=0x95df8e8*=0x4, lpOverlapped=0x0) returned 1 [0132.773] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0132.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0132.773] NtQuerySystemTime (in: CurrentTime=0x95df870 | out: CurrentTime=0x95df870*=132482710414380000) returned 0x0 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x3a88d955 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x3ae487d1 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x618e720 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x4d93370d [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x23ebc953 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x61770f62 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x33d382a9 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x16fbec3b [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x2bd5ca76 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x6f754891 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x54a581c1 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x2e869e94 [0132.773] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x1cddaf88 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0xba620cf [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x2c7d46cf [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x558714ca [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x7eb87e69 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x3cb90f92 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x1597c717 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x3afce777 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x106fdc9a [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x29609442 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x6af7c371 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x2ec02269 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x6193600e [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x636b3653 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x5bac52df [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x676514e2 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x6eb0b38e [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x3ba9d13b [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x7b4ce489 [0132.774] RtlRandomEx (in: Seed=0x95df868 | out: Seed=0x95df868) returned 0x53b0c603 [0132.784] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.784] ReadFile (in: hFile=0x116c, lpBuffer=0x66f5898, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x95df870, lpOverlapped=0x0 | out: lpBuffer=0x66f5898*, lpNumberOfBytesRead=0x95df870*=0x3c00, lpOverlapped=0x0) returned 1 [0132.784] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e328c8 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x66f94a0 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0132.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0132.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e328c8) returned 1 [0132.785] WriteFile (in: hFile=0x116c, lpBuffer=0x66f94a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x95df870, lpOverlapped=0x0 | out: lpBuffer=0x66f94a0*, lpNumberOfBytesWritten=0x95df870*=0x3c00, lpOverlapped=0x0) returned 1 [0133.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f94a0) returned 1 [0133.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f5898) returned 1 [0133.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0133.244] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.245] WriteFile (in: hFile=0x116c, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x95df8f0, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x95df8f0*=0x10e, lpOverlapped=0x0) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19930) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0134.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0134.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0134.730] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx" [0134.731] wcscat (in: _Dest=0x3f29b10, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx.ac3a86" [0134.731] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx.ac3a86", NtPathName=0x95df868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\DlyRh9eAg.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da60f0 [0134.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 [0134.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6fd0) returned 1 [0134.868] NtQueryInformationFile (in: FileHandle=0x116c, IoStatusBlock=0x95df840, FileInformation=0x95df848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x95df840, FileInformation=0x95df848) returned 0x0 [0134.868] NtSetInformationFile (FileHandle=0x116c, IoStatusBlock=0x95df840, FileInformation=0x95df848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 [0134.950] FlushFileBuffers (hFile=0x116c) returned 1 [0135.648] CloseHandle (hObject=0x116c) returned 1 [0135.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bbe0 [0135.649] wcscpy (in: _Dest=0x3d8bbe0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.649] wcscat (in: _Dest=0x3d8bbe0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.649] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 [0135.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 283 os_tid = 0x8ac [0132.791] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx" (normalized: "c:\\users\\eebsym5\\documents\\joxkwttqmgo5 r.docx")) returned 0x20 [0132.791] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx", dwFileAttributes=0x20) returned 1 [0132.792] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx" (normalized: "c:\\users\\eebsym5\\documents\\joxkwttqmgo5 r.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11ac [0132.792] GetFileSizeEx (in: hFile=0x11ac, lpFileSize=0x923f86c | out: lpFileSize=0x923f86c*=31520) returned 1 [0132.792] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x7b1c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.792] ReadFile (in: hFile=0x11ac, lpBuffer=0x923f848, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x923f858, lpOverlapped=0x0 | out: lpBuffer=0x923f848*, lpNumberOfBytesRead=0x923f858*=0x4, lpOverlapped=0x0) returned 1 [0132.794] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0132.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0132.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.794] NtQuerySystemTime (in: CurrentTime=0x923f7e0 | out: CurrentTime=0x923f7e0*=132482710414536000) returned 0x0 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x79c0d315 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x41b9e00d [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x7c808983 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x24ec297e [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x76685f65 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x690f58a0 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x267ccb5d [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x5497ee10 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x61274ada [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x6435dc23 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x33a8a9e9 [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x764aa8bd [0132.794] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x1fa93623 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x34a9be69 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x75e033b4 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x34293429 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x7e8596aa [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x6ef108f3 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x45666969 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x72b9b860 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x2112b464 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x33bb5fbf [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x4224932d [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x6426e11 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x3d97d2a9 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x23a33eba [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x48b142a5 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x63262c5b [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x3063f28f [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x10495112 [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x57fa172a [0132.795] RtlRandomEx (in: Seed=0x923f7d8 | out: Seed=0x923f7d8) returned 0x74d48102 [0132.807] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.807] ReadFile (in: hFile=0x11ac, lpBuffer=0x66fd0a8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x923f7e0, lpOverlapped=0x0 | out: lpBuffer=0x66fd0a8*, lpNumberOfBytesRead=0x923f7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.808] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32a30 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0132.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6700cb0 [0132.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0132.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0132.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a30) returned 1 [0132.809] WriteFile (in: hFile=0x11ac, lpBuffer=0x6700cb0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x923f7e0, lpOverlapped=0x0 | out: lpBuffer=0x6700cb0*, lpNumberOfBytesWritten=0x923f7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6700cb0) returned 1 [0133.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd0a8) returned 1 [0133.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067400 [0133.246] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.246] WriteFile (in: hFile=0x11ac, lpBuffer=0x331860*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x923f860, lpOverlapped=0x0 | out: lpBuffer=0x331860*, lpNumberOfBytesWritten=0x923f860*=0x118, lpOverlapped=0x0) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331860) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066dc0) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067400) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0134.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0134.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d238 [0134.916] wcscpy (in: _Dest=0x3f1d238, _Source="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx") returned="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx" [0134.917] wcscat (in: _Dest=0x3f1d238, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx.ac3a86" [0134.917] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx.ac3a86", NtPathName=0x923f7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\JoxkwtTQmGo5 R.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db478 [0134.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db478) returned 1 [0134.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5e90) returned 1 [0134.958] NtQueryInformationFile (in: FileHandle=0x11ac, IoStatusBlock=0x923f7b0, FileInformation=0x923f7b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x923f7b0, FileInformation=0x923f7b8) returned 0x0 [0134.958] NtSetInformationFile (FileHandle=0x11ac, IoStatusBlock=0x923f7b0, FileInformation=0x923f7b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0134.960] FlushFileBuffers (hFile=0x11ac) returned 1 [0135.651] CloseHandle (hObject=0x11ac) returned 1 [0135.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8cbb8 [0135.699] wcscpy (in: _Dest=0x3d8cbb8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.699] wcscat (in: _Dest=0x3d8cbb8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.699] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 [0135.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 Thread: id = 284 os_tid = 0x8bc [0132.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\lltydn76gqa_234.xlsx")) returned 0x20 [0132.814] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx", dwFileAttributes=0x20) returned 1 [0132.815] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\lltydn76gqa_234.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x118c [0132.815] GetFileSizeEx (in: hFile=0x118c, lpFileSize=0x96df974 | out: lpFileSize=0x96df974*=70053) returned 1 [0132.815] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x111a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.815] ReadFile (in: hFile=0x118c, lpBuffer=0x96df950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x96df960, lpOverlapped=0x0 | out: lpBuffer=0x96df950*, lpNumberOfBytesRead=0x96df960*=0x4, lpOverlapped=0x0) returned 1 [0132.818] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0132.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0132.818] NtQuerySystemTime (in: CurrentTime=0x96df8e8 | out: CurrentTime=0x96df8e8*=132482710414848000) returned 0x0 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x5e836c14 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x1a9b67be [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x4fec9d90 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x6db81aaa [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x6aa31667 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x4022a296 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x3bf626f3 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x674d1c4a [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x355c60a7 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x748e1fa4 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x2b532fd9 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x5e3ba7ec [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x34d49729 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x6d566902 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x750e150 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0xeb4311 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x15ee6ce9 [0132.818] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0xa01aa14 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x516ef349 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x5857e43d [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x67267055 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x7426a27b [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x244b03f7 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x42290e54 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x33281fa9 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x119163a3 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x55d8e102 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x70f5fd1 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x57ca4796 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x1606e8d1 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x453b90a9 [0132.819] RtlRandomEx (in: Seed=0x96df8e0 | out: Seed=0x96df8e0) returned 0x4a46c910 [0132.830] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.830] ReadFile (in: hFile=0x118c, lpBuffer=0x67048b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x96df8e8, lpOverlapped=0x0 | out: lpBuffer=0x67048b8*, lpNumberOfBytesRead=0x96df8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.830] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0132.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0132.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67084c0 [0132.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0132.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0132.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0132.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0132.831] WriteFile (in: hFile=0x118c, lpBuffer=0x67084c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x96df8e8, lpOverlapped=0x0 | out: lpBuffer=0x67084c0*, lpNumberOfBytesWritten=0x96df8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67084c0) returned 1 [0133.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67048b8) returned 1 [0133.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e40 [0133.247] SetFilePointerEx (in: hFile=0x118c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.247] WriteFile (in: hFile=0x118c, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x96df968, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x96df968*=0x11a, lpOverlapped=0x0) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e40) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0134.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0134.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d2b0 [0134.922] wcscpy (in: _Dest=0x3f1d2b0, _Source="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx" [0134.922] wcscat (in: _Dest=0x3f1d2b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx.ac3a86" [0134.922] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx.ac3a86", NtPathName=0x96df8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\lltYDN76gQA_234.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db508 [0135.025] FlushFileBuffers (hFile=0x118c) returned 1 [0135.701] CloseHandle (hObject=0x118c) returned 1 [0135.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e8f8 [0135.702] wcscpy (in: _Dest=0x3d8e8f8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.702] wcscat (in: _Dest=0x3d8e8f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 [0135.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 Thread: id = 285 os_tid = 0x8cc [0132.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx" (normalized: "c:\\users\\eebsym5\\documents\\lvoej48nmdnihysqul.pptx")) returned 0x20 [0132.833] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx", dwFileAttributes=0x20) returned 1 [0132.834] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx" (normalized: "c:\\users\\eebsym5\\documents\\lvoej48nmdnihysqul.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a0 [0132.834] GetFileSizeEx (in: hFile=0x11a0, lpFileSize=0x8d6fe0c | out: lpFileSize=0x8d6fe0c*=57822) returned 1 [0132.834] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0xe1da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.834] ReadFile (in: hFile=0x11a0, lpBuffer=0x8d6fde8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d6fdf8, lpOverlapped=0x0 | out: lpBuffer=0x8d6fde8*, lpNumberOfBytesRead=0x8d6fdf8*=0x4, lpOverlapped=0x0) returned 1 [0132.836] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0132.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0132.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0132.836] NtQuerySystemTime (in: CurrentTime=0x8d6fd80 | out: CurrentTime=0x8d6fd80*=132482710415004000) returned 0x0 [0132.836] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0xb56b887 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x77b8885f [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x355368bb [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x591cfdd2 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x70712838 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x1c1cee85 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x79c96c33 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x4983fa66 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x17404443 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x29fd7068 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x3e7f0172 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x88dc361 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x63e87ab6 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x2689539 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x6260b7c1 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x2d34dd33 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x24ed7e6a [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x6fd6641c [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x13caba63 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x3ec81661 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x6b338283 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x77317e08 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x1cebc475 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x229db0e2 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x2762de0 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x32445c8a [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x149de497 [0132.837] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x590033e5 [0132.838] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x425d2d4e [0132.838] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x6fda2147 [0132.838] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x7986538f [0132.838] RtlRandomEx (in: Seed=0x8d6fd78 | out: Seed=0x8d6fd78) returned 0x6c8e264a [0132.849] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.849] ReadFile (in: hFile=0x11a0, lpBuffer=0x670c0c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d6fd80, lpOverlapped=0x0 | out: lpBuffer=0x670c0c8*, lpNumberOfBytesRead=0x8d6fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0132.849] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4088 [0132.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0132.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0132.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670fce8 [0132.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3db8 [0132.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0132.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0132.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4088) returned 1 [0132.856] WriteFile (in: hFile=0x11a0, lpBuffer=0x670fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d6fd80, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesWritten=0x8d6fd80*=0x3c00, lpOverlapped=0x0) returned 1 [0133.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0133.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670c0c8) returned 1 [0133.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33450 [0133.248] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.248] WriteFile (in: hFile=0x11a0, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x8d6fe00, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x8d6fe00*=0x120, lpOverlapped=0x0) returned 1 [0134.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0134.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 [0134.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0134.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0134.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0134.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0134.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0134.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0134.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da61f0 [0134.927] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx" [0134.927] wcscat (in: _Dest=0x3da61f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx.ac3a86" [0134.927] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx.ac3a86", NtPathName=0x8d6fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\LvOEj48nMdnIHYsqUl.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cd80 [0135.034] FlushFileBuffers (hFile=0x11a0) returned 1 [0135.706] CloseHandle (hObject=0x11a0) returned 1 [0135.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e758 [0135.707] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.707] wcscat (in: _Dest=0x3d8e758, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.707] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0135.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b4a0) returned 1 Thread: id = 286 os_tid = 0x8dc [0132.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx" (normalized: "c:\\users\\eebsym5\\documents\\mkfhyx0u3zyrrjqa27jn.docx")) returned 0x20 [0132.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx", dwFileAttributes=0x20) returned 1 [0132.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx" (normalized: "c:\\users\\eebsym5\\documents\\mkfhyx0u3zyrrjqa27jn.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1188 [0132.884] GetFileSizeEx (in: hFile=0x1188, lpFileSize=0x94ff85c | out: lpFileSize=0x94ff85c*=64695) returned 1 [0132.884] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0xfcb3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.884] ReadFile (in: hFile=0x1188, lpBuffer=0x94ff838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94ff848, lpOverlapped=0x0 | out: lpBuffer=0x94ff838*, lpNumberOfBytesRead=0x94ff848*=0x4, lpOverlapped=0x0) returned 1 [0132.886] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0132.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0132.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0132.886] NtQuerySystemTime (in: CurrentTime=0x94ff7d0 | out: CurrentTime=0x94ff7d0*=132482710415472000) returned 0x0 [0132.886] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x1e852323 [0132.886] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x753c575e [0132.886] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x2274bcbe [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x24c24806 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0xd514298 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x6a31035a [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x37834983 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x2ca94a99 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x528a6c9f [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x4478dd7c [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x3e010b3 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x2b3cbc62 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x1967cf8 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x6b419062 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x448d61b2 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x2814f72d [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x7660d27e [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x42efa9f1 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x672dc5da [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x774cfccf [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x72ae8f63 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x2e0f2136 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x5f73a66 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x4b260cc8 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x40f62ee6 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x65deca5f [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x3f7902e5 [0132.887] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x6df82539 [0132.888] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x42bacba5 [0132.888] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x733abbda [0132.888] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x39266511 [0132.888] RtlRandomEx (in: Seed=0x94ff7c8 | out: Seed=0x94ff7c8) returned 0x1a64a859 [0132.899] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.899] ReadFile (in: hFile=0x1188, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94ff7d0, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x94ff7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.899] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3e00 [0132.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0132.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0132.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0132.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67174f8 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0132.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0132.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0132.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0132.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3e00) returned 1 [0132.900] WriteFile (in: hFile=0x1188, lpBuffer=0x67174f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94ff7d0, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesWritten=0x94ff7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0133.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67138f0) returned 1 [0133.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e331c8 [0133.253] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.253] WriteFile (in: hFile=0x1188, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x94ff850, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x94ff850*=0x124, lpOverlapped=0x0) returned 1 [0134.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e325f8) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e331c8) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0134.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0134.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da63f0 [0134.930] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx") returned="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx" [0134.930] wcscat (in: _Dest=0x3da63f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx.ac3a86" [0134.930] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx.ac3a86", NtPathName=0x94ff7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\MKfhYX0u3zyRRJQa27jN.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cf48 [0135.051] FlushFileBuffers (hFile=0x1188) returned 1 [0135.712] CloseHandle (hObject=0x1188) returned 1 [0135.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e758 [0135.713] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.713] wcscat (in: _Dest=0x3d8e758, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0135.713] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0135.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0135.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 Thread: id = 287 os_tid = 0x8ec [0132.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7de0 [0132.904] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Users\\EEBsYm5\\Documents\\My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0132.904] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\" [0132.904] wcscat (in: _Dest=0x3ef7de0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\*" [0132.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0132.904] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Music\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0132.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 [0132.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62290) returned 1 Thread: id = 288 os_tid = 0x8fc [0132.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6788 [0132.910] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\EEBsYm5\\Documents\\My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0132.910] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\" [0132.910] wcscat (in: _Dest=0x2fe6788, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*" [0132.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0132.910] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0132.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0132.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7230) returned 1 Thread: id = 289 os_tid = 0x910 [0132.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7230 [0132.911] wcscpy (in: _Dest=0x3ef7230, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0132.911] wcscat (in: _Dest=0x3ef7230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0132.911] wcscat (in: _Dest=0x3ef7230, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*" [0132.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0132.912] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f440 [0133.268] wcscmp (_String1=".", _String2=".") returned 0 [0133.268] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.268] wcscmp (_String1="..", _String2=".") returned 1 [0133.268] wcscmp (_String1="..", _String2="..") returned 0 [0133.268] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.268] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.268] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.268] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0133.268] wcscmp (_String1="Favorites.vss", _String2=".") returned 1 [0133.268] wcscmp (_String1="Favorites.vss", _String2="..") returned 1 [0133.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0133.268] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0133.268] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0133.269] wcscat (in: _Dest=0x3f29020, _Source="Favorites.vss" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" [0134.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0134.438] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0134.438] wcscmp (_String1="_private", _String2=".") returned 1 [0134.438] wcscmp (_String1="_private", _String2="..") returned 1 [0134.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d030 [0134.438] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0134.438] wcscat (in: _Dest=0x3d8d030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0134.439] wcscat (in: _Dest=0x3d8d030, _Source="_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0134.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8d030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0134.440] FindNextFileW (in: hFindFile=0x3f1f440, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0134.440] FindClose (in: hFindFile=0x3f1f440 | out: hFindFile=0x3f1f440) returned 1 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7230) returned 1 [0134.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef71d8) returned 1 Thread: id = 290 os_tid = 0x920 [0133.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e035b8 [0133.269] wcscpy (in: _Dest=0x3e035b8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0133.269] wcscat (in: _Dest=0x3e035b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\" [0133.269] wcscat (in: _Dest=0x3e035b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*" [0133.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0133.269] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0133.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e035b8) returned 1 [0133.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7180) returned 1 Thread: id = 291 os_tid = 0x930 [0133.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e35438 [0133.271] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0133.271] wcscat (in: _Dest=0x3e35438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0133.271] wcscat (in: _Dest=0x3e35438, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*" [0133.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0133.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0133.939] wcscmp (_String1=".", _String2=".") returned 0 [0133.939] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.939] wcscmp (_String1="..", _String2=".") returned 1 [0133.940] wcscmp (_String1="..", _String2="..") returned 0 [0133.940] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0133.940] wcscmp (_String1="1033", _String2=".") returned 1 [0133.940] wcscmp (_String1="1033", _String2="..") returned 1 [0133.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5b70 [0133.940] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0133.940] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0133.940] wcscat (in: _Dest=0x3da5b70, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0143.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0143.584] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaee300, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x8834d0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaaee300, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0143.584] wcscmp (_String1="VSTAClientPkg.dll", _String2=".") returned 1 [0143.584] wcscmp (_String1="VSTAClientPkg.dll", _String2="..") returned 1 [0143.585] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0143.585] wcscmp (_String1="VSTAProject.dll", _String2=".") returned 1 [0143.585] wcscmp (_String1="VSTAProject.dll", _String2="..") returned 1 [0143.585] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0143.585] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0143.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0143.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0143.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae10) returned 1 Thread: id = 292 os_tid = 0x940 [0133.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bce0 [0133.272] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0133.272] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\" [0133.272] wcscat (in: _Dest=0x32bce0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*" [0133.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0133.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0133.275] wcscmp (_String1=".", _String2=".") returned 0 [0133.276] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.276] wcscmp (_String1="..", _String2=".") returned 1 [0133.276] wcscmp (_String1="..", _String2="..") returned 0 [0133.276] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.276] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0133.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0133.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 [0133.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 Thread: id = 293 os_tid = 0x950 [0133.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp")) returned 0x20 [0134.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0134.812] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.812] GetLastError () returned 0x5 [0134.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0134.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 Thread: id = 294 os_tid = 0x960 [0133.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp")) returned 0x20 [0134.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0134.086] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.086] GetLastError () returned 0x5 [0134.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0134.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6570) returned 1 Thread: id = 295 os_tid = 0x970 [0133.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp")) returned 0x20 [0134.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0134.807] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.807] GetLastError () returned 0x5 [0134.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0134.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 296 os_tid = 0x980 [0133.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp")) returned 0x20 [0134.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0134.810] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.810] GetLastError () returned 0x5 [0134.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0134.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 Thread: id = 297 os_tid = 0x990 [0133.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp")) returned 0x20 [0134.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0134.787] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.788] GetLastError () returned 0x5 [0134.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0134.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 Thread: id = 298 os_tid = 0x9a0 [0133.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp")) returned 0x20 [0134.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0134.790] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.790] GetLastError () returned 0x5 [0134.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0134.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 299 os_tid = 0x9b0 [0133.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp")) returned 0x20 [0134.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0134.792] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.792] GetLastError () returned 0x5 [0134.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0134.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59048) returned 1 Thread: id = 300 os_tid = 0x9c0 [0133.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp")) returned 0x20 [0134.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0134.794] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.794] GetLastError () returned 0x5 [0134.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0134.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 Thread: id = 301 os_tid = 0x9d0 [0133.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp")) returned 0x20 [0134.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0134.796] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.796] GetLastError () returned 0x5 [0134.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0134.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 Thread: id = 302 os_tid = 0x9e0 [0133.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp")) returned 0x20 [0134.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0134.803] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.803] GetLastError () returned 0x5 [0134.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0134.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 303 os_tid = 0x9f0 [0133.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp")) returned 0x20 [0134.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0134.805] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.805] GetLastError () returned 0x5 [0134.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0134.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 304 os_tid = 0xa00 [0133.311] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif" (normalized: "c:\\users\\eebsym5\\pictures\\32zcj4gm-63sn3mk 5.gif")) returned 0x20 [0133.312] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif", dwFileAttributes=0x20) returned 1 [0133.312] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif" (normalized: "c:\\users\\eebsym5\\pictures\\32zcj4gm-63sn3mk 5.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a8 [0133.312] GetFileSizeEx (in: hFile=0x11a8, lpFileSize=0x973fea4 | out: lpFileSize=0x973fea4*=81170) returned 1 [0133.313] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x13d0e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.313] ReadFile (in: hFile=0x11a8, lpBuffer=0x973fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x973fe90, lpOverlapped=0x0 | out: lpBuffer=0x973fe80*, lpNumberOfBytesRead=0x973fe90*=0x4, lpOverlapped=0x0) returned 1 [0133.316] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0133.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0133.316] NtQuerySystemTime (in: CurrentTime=0x973fe18 | out: CurrentTime=0x973fe18*=132482710419840000) returned 0x0 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x33e70644 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x5d77a90a [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x43bcd474 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x22ecf5bc [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x830fddc [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x18ae65f6 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x31fcbb99 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x5a37b95d [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x3fcd03f2 [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0xc93e97a [0133.316] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x461a3149 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x1d99952e [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x59c18ef4 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x15066905 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x2c7d46cf [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x2fd302a7 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x337dd129 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x58c9d67 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x1545fe3f [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x58227ced [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x64506bff [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x6c95cbed [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x97dcba1 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x615ceb98 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x732ff087 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x2dcd07a9 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x6d36488f [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x276bee27 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x79a75ee9 [0133.317] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x6067a466 [0133.318] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x42a6bfdc [0133.318] RtlRandomEx (in: Seed=0x973fe10 | out: Seed=0x973fe10) returned 0x6249639a [0133.332] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.332] ReadFile (in: hFile=0x11a8, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0133.332] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41f0 [0133.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0133.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0133.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67174f8 [0133.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0133.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0133.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0133.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41f0) returned 1 [0133.333] WriteFile (in: hFile=0x11a8, lpBuffer=0x67174f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesWritten=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0133.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0133.941] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.941] ReadFile (in: hFile=0x11a8, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0133.941] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33408 [0133.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0133.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0133.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0133.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67174f8 [0133.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0133.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2440 [0133.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0133.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0133.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.942] WriteFile (in: hFile=0x11a8, lpBuffer=0x67174f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesWritten=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0134.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0134.736] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x10112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.736] ReadFile (in: hFile=0x11a8, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0134.737] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x10112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60d18 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0134.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67174f8 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0134.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0134.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0134.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0134.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60d18) returned 1 [0134.738] WriteFile (in: hFile=0x11a8, lpBuffer=0x67174f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x973fe18, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesWritten=0x973fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0135.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0135.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce510 [0135.785] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.786] WriteFile (in: hFile=0x11a8, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x973fe98, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x973fe98*=0x15e, lpOverlapped=0x0) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e328c8) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce510) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0137.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0137.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0137.215] wcscpy (in: _Dest=0x3f1d670, _Source="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif" [0137.216] wcscat (in: _Dest=0x3f1d670, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif.ac3a86" [0137.216] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif.ac3a86", NtPathName=0x973fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\32zcJ4gm-63Sn3mk 5.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbe08 [0140.362] FlushFileBuffers (hFile=0x11a8) returned 1 [0140.364] CloseHandle (hObject=0x11a8) returned 1 [0140.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d030 [0140.365] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0140.365] wcscat (in: _Dest=0x3d8d030, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0140.365] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0140.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 [0140.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b580) returned 1 Thread: id = 305 os_tid = 0xa10 [0133.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\4jq3hn-wq.bmp")) returned 0x20 [0133.337] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp", dwFileAttributes=0x20) returned 1 [0133.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\4jq3hn-wq.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaec [0133.337] GetFileSizeEx (in: hFile=0xaec, lpFileSize=0x838fe1c | out: lpFileSize=0x838fe1c*=44984) returned 1 [0133.337] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0xafb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.337] ReadFile (in: hFile=0xaec, lpBuffer=0x838fdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x838fe08, lpOverlapped=0x0 | out: lpBuffer=0x838fdf8*, lpNumberOfBytesRead=0x838fe08*=0x4, lpOverlapped=0x0) returned 1 [0133.340] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0133.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0133.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0133.340] NtQuerySystemTime (in: CurrentTime=0x838fd90 | out: CurrentTime=0x838fd90*=132482710419996000) returned 0x0 [0133.340] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x2329cfff [0133.340] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x41c1db17 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x52c7e6c [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x93be915 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x38de7071 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x39594dbe [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5e32bf1 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x12288898 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x18c4d486 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x2e3913ed [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x10e98fdb [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x3ec04c94 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x1141f53 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x167a9d53 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x64996dbb [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x2d3132d7 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x62d38557 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5bee7309 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x4b71f590 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5aaf7cfa [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5cf34bab [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x38b3da0c [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x16929800 [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x13313aa [0133.341] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5655c507 [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x4d8073d0 [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x51c9f18b [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x41436353 [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0xf24fa76 [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x5aa38749 [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x4c109c5a [0133.342] RtlRandomEx (in: Seed=0x838fd88 | out: Seed=0x838fd88) returned 0x694303e4 [0133.353] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.353] ReadFile (in: hFile=0xaec, lpBuffer=0x670fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x838fd90, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesRead=0x838fd90*=0x3c00, lpOverlapped=0x0) returned 1 [0133.353] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4280 [0133.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0133.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0133.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6726518 [0133.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0133.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0133.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0133.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4280) returned 1 [0133.354] WriteFile (in: hFile=0xaec, lpBuffer=0x6726518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x838fd90, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesWritten=0x838fd90*=0x3c00, lpOverlapped=0x0) returned 1 [0133.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0133.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0133.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3bd0 [0133.944] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.944] WriteFile (in: hFile=0xaec, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x838fe10, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x838fe10*=0x10c, lpOverlapped=0x0) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3780) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2440) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0135.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0135.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d030 [0135.820] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp" [0135.820] wcscat (in: _Dest=0x3d8d030, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp.ac3a86" [0135.820] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp.ac3a86", NtPathName=0x838fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\4jQ3hN-wq.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0fc70 [0140.348] FlushFileBuffers (hFile=0xaec) returned 1 [0140.350] CloseHandle (hObject=0xaec) returned 1 [0140.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d030 [0140.351] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0140.351] wcscat (in: _Dest=0x3d8d030, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0140.351] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0140.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 [0140.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 Thread: id = 306 os_tid = 0xa20 [0133.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\ap3ln.bmp")) returned 0x20 [0133.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp", dwFileAttributes=0x20) returned 1 [0133.357] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\ap3ln.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x270 [0133.357] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x991fa5c | out: lpFileSize=0x991fa5c*=56296) returned 1 [0133.357] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0xdbe4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.357] ReadFile (in: hFile=0x270, lpBuffer=0x991fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x991fa48, lpOverlapped=0x0 | out: lpBuffer=0x991fa38*, lpNumberOfBytesRead=0x991fa48*=0x4, lpOverlapped=0x0) returned 1 [0133.360] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0133.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0133.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0133.360] NtQuerySystemTime (in: CurrentTime=0x991f9d0 | out: CurrentTime=0x991f9d0*=132482710420308000) returned 0x0 [0133.360] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x69b14fc0 [0133.360] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x5572d03e [0133.360] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x18f8f1af [0133.360] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x5217175a [0133.360] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x29c0e582 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x67952691 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x2da22ee9 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x6488063c [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x1cca9eed [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x62b6d5a0 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x6389501f [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x17b16263 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x4a4e727 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x5e240d5a [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x3297dad8 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0xce5ed23 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x732f2140 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0xc5004b9 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x653992b3 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x3ffc9913 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x7a36b4e3 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x225faac0 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x412572a2 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x62e431e3 [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x1949b9ad [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x5cd3444e [0133.361] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x744d06be [0133.362] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x6e236848 [0133.362] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x63e02013 [0133.362] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x5527ae70 [0133.362] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x585d88 [0133.362] RtlRandomEx (in: Seed=0x991f9c8 | out: Seed=0x991f9c8) returned 0x695ffc31 [0133.373] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.373] ReadFile (in: hFile=0x270, lpBuffer=0x672a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x991f9d0, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesRead=0x991f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.373] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3c98 [0133.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0133.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0133.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672dd28 [0133.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ef8 [0133.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0133.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0133.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3c98) returned 1 [0133.375] WriteFile (in: hFile=0x270, lpBuffer=0x672dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x991f9d0, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesWritten=0x991f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672dd28) returned 1 [0133.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0133.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39a8 [0133.949] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.949] WriteFile (in: hFile=0x270, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x991fa50, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x991fa50*=0x104, lpOverlapped=0x0) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4010) returned 1 [0134.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4038) returned 1 [0134.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ba8 [0134.898] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp" [0134.898] wcscat (in: _Dest=0x2fe6ba8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp.ac3a86" [0134.898] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp.ac3a86", NtPathName=0x991f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\aP3Ln.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aa48 [0134.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0134.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6fd0) returned 1 [0134.962] NtQueryInformationFile (in: FileHandle=0x270, IoStatusBlock=0x991f9a0, FileInformation=0x991f9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x991f9a0, FileInformation=0x991f9a8) returned 0x0 [0134.962] NtSetInformationFile (FileHandle=0x270, IoStatusBlock=0x991f9a0, FileInformation=0x991f9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0134.964] FlushFileBuffers (hFile=0x270) returned 1 [0135.652] CloseHandle (hObject=0x270) returned 1 [0135.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bbe0 [0135.661] wcscpy (in: _Dest=0x3d8bbe0, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.662] wcscat (in: _Dest=0x3d8bbe0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0xffffffff [0135.662] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfcc [0135.677] WriteFile (in: hFile=0xfcc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x991f9e4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x991f9e4*=0x8b9, lpOverlapped=0x0) returned 1 [0135.679] CloseHandle (hObject=0xfcc) returned 1 [0135.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bbe0) returned 1 [0135.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62290) returned 1 Thread: id = 307 os_tid = 0xa30 [0133.377] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif" (normalized: "c:\\users\\eebsym5\\pictures\\apwhipjt vcq6yi.gif")) returned 0x20 [0133.378] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif", dwFileAttributes=0x20) returned 1 [0133.378] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif" (normalized: "c:\\users\\eebsym5\\pictures\\apwhipjt vcq6yi.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac8 [0133.378] GetFileSizeEx (in: hFile=0xac8, lpFileSize=0x996fb8c | out: lpFileSize=0x996fb8c*=59160) returned 1 [0133.378] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0xe714, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.378] ReadFile (in: hFile=0xac8, lpBuffer=0x996fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x996fb78, lpOverlapped=0x0 | out: lpBuffer=0x996fb68*, lpNumberOfBytesRead=0x996fb78*=0x4, lpOverlapped=0x0) returned 1 [0133.381] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0133.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0133.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0133.381] NtQuerySystemTime (in: CurrentTime=0x996fb00 | out: CurrentTime=0x996fb00*=132482710420464000) returned 0x0 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x8922c65 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x4f36ebf8 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x14704101 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x6b5df056 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x38d0f196 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x19292ddd [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x20807c95 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x3a6df99e [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x1bbee4cb [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x522ee5a6 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x27776f06 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x51b6cef3 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x12972b15 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x399a3152 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x4a98b35b [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x3b1ac636 [0133.381] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0xfa28b8a [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x25c7707a [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x7bb1c0a9 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x7652298b [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x43dd721e [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x2d4c7d69 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x28000cbf [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x3a694100 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x46abfa9b [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x5371c9c8 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x6a56ef52 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x6b60efea [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x49e105c8 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x327cbca9 [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x5ae9968a [0133.382] RtlRandomEx (in: Seed=0x996faf8 | out: Seed=0x996faf8) returned 0x3c27e8ea [0133.394] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.394] ReadFile (in: hFile=0xac8, lpBuffer=0x6731930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x996fb00, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesRead=0x996fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0133.394] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3aa0 [0133.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0133.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0133.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6735538 [0133.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0133.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0133.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0133.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3aa0) returned 1 [0133.395] WriteFile (in: hFile=0xac8, lpBuffer=0x6735538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x996fb00, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesWritten=0x996fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0133.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6735538) returned 1 [0133.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0133.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f7c0 [0133.950] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.951] WriteFile (in: hFile=0xac8, lpBuffer=0x330cd0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x996fb80, lpOverlapped=0x0 | out: lpBuffer=0x330cd0*, lpNumberOfBytesWritten=0x996fb80*=0x118, lpOverlapped=0x0) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f800) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f7c0) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40b0) returned 1 [0134.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0134.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ac28 [0134.900] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif" [0134.900] wcscat (in: _Dest=0x3f1ac28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif.ac3a86" [0134.900] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif.ac3a86", NtPathName=0x996faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\apwhipjT vcQ6yi.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59048 [0134.985] FlushFileBuffers (hFile=0xac8) returned 1 [0135.652] CloseHandle (hObject=0xac8) returned 1 [0135.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eef3a0 [0135.664] wcscpy (in: _Dest=0x3eef3a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.664] wcscat (in: _Dest=0x3eef3a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef3a0) returned 1 [0135.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c538) returned 1 Thread: id = 308 os_tid = 0xa40 [0133.398] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif" (normalized: "c:\\users\\eebsym5\\pictures\\h4dxox8m0xqd0h.gif")) returned 0x20 [0133.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif", dwFileAttributes=0x20) returned 1 [0133.399] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif" (normalized: "c:\\users\\eebsym5\\pictures\\h4dxox8m0xqd0h.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaf4 [0133.399] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0x8a1fd84 | out: lpFileSize=0x8a1fd84*=20796) returned 1 [0133.399] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x5138, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.399] ReadFile (in: hFile=0xaf4, lpBuffer=0x8a1fd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a1fd70, lpOverlapped=0x0 | out: lpBuffer=0x8a1fd60*, lpNumberOfBytesRead=0x8a1fd70*=0x4, lpOverlapped=0x0) returned 1 [0133.401] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0133.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0133.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0133.402] NtQuerySystemTime (in: CurrentTime=0x8a1fcf8 | out: CurrentTime=0x8a1fcf8*=132482710420620000) returned 0x0 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x21a33b61 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x48ac6ffb [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x53002468 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x5ad84c7d [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x2b75e2d0 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x7c323e54 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x2e21276b [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x7c3acefa [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x21ffcfa8 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x101b6daf [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x2caf50b7 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x4705dc99 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x67a89d04 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x395b8b7 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x536b4ad5 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x976aff4 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x7cd8dd1 [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x71529c8c [0133.402] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x54cebd52 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x581e0fef [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x4da8fda2 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x4182aaa4 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0xc2e186e [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x7d95e529 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x45319f47 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x2acd017a [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x5a21d903 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x14f0330 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x6444729f [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x605e981c [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x1e946a52 [0133.403] RtlRandomEx (in: Seed=0x8a1fcf0 | out: Seed=0x8a1fcf0) returned 0x315822c6 [0133.417] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.417] ReadFile (in: hFile=0xaf4, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8a1fcf8, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0x8a1fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.417] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b37d0 [0133.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0133.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0133.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673cd48 [0133.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0133.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0133.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0133.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b37d0) returned 1 [0133.418] WriteFile (in: hFile=0xaf4, lpBuffer=0x673cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8a1fcf8, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesWritten=0x8a1fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0133.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6739140) returned 1 [0133.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f840 [0133.952] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.952] WriteFile (in: hFile=0xaf4, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x8a1fd78, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x8a1fd78*=0x116, lpOverlapped=0x0) returned 1 [0134.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0134.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f880) returned 1 [0134.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0134.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f840) returned 1 [0134.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0134.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4100) returned 1 [0134.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0134.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0134.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae80 [0134.902] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif" [0134.902] wcscat (in: _Dest=0x3e0ae80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif.ac3a86" [0134.902] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif.ac3a86", NtPathName=0x8a1fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\h4dXOx8m0XQD0H.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a1d0 [0134.983] FlushFileBuffers (hFile=0xaf4) returned 1 [0135.652] CloseHandle (hObject=0xaf4) returned 1 [0135.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8b970 [0135.663] wcscpy (in: _Dest=0x3d8b970, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.663] wcscat (in: _Dest=0x3d8b970, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b970) returned 1 [0135.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dac0) returned 1 Thread: id = 309 os_tid = 0xa50 [0133.421] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\hlwxo9ov.jpg")) returned 0x20 [0133.421] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg", dwFileAttributes=0x20) returned 1 [0133.422] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\hlwxo9ov.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xad0 [0133.422] GetFileSizeEx (in: hFile=0xad0, lpFileSize=0x99efe94 | out: lpFileSize=0x99efe94*=63057) returned 1 [0133.422] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0xf64d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.422] ReadFile (in: hFile=0xad0, lpBuffer=0x99efe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99efe80, lpOverlapped=0x0 | out: lpBuffer=0x99efe70*, lpNumberOfBytesRead=0x99efe80*=0x4, lpOverlapped=0x0) returned 1 [0133.425] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0133.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0133.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0133.426] NtQuerySystemTime (in: CurrentTime=0x99efe08 | out: CurrentTime=0x99efe08*=132482710420932000) returned 0x0 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x5e1456cc [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x744e6110 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0xc90e90e [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x36abba90 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x6291e55e [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x372a7ff1 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x2cf6cbe9 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x1b936a03 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x71b60d1d [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x7528abf [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0xcb55d7 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x527d2c93 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x53e0ae9 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x299ebd81 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x6692300d [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x2c67bf05 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x6f666375 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x28cf2842 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x4eff8c49 [0133.426] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x5442f2d5 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x5cac245b [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x50b29138 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x57b28ddb [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x3332dd62 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x79826a98 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x5d7b330a [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x3d38f560 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x375319a9 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x71b3f6a5 [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x134aecbe [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x56a5a95b [0133.427] RtlRandomEx (in: Seed=0x99efe00 | out: Seed=0x99efe00) returned 0x1b11e5b7 [0133.440] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.440] ReadFile (in: hFile=0xad0, lpBuffer=0x6740950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99efe08, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0x99efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.440] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4508 [0133.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0133.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0133.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6744558 [0133.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0133.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0133.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0133.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4508) returned 1 [0133.441] WriteFile (in: hFile=0xad0, lpBuffer=0x6744558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99efe08, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesWritten=0x99efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0133.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6744558) returned 1 [0133.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6740950) returned 1 [0133.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3750 [0133.953] SetFilePointerEx (in: hFile=0xad0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.953] WriteFile (in: hFile=0xad0, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x99efe88, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x99efe88*=0x10a, lpOverlapped=0x0) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0135.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0135.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0135.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0135.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8de00 [0135.246] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg" [0135.246] wcscat (in: _Dest=0x3d8de00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg.ac3a86" [0135.246] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg.ac3a86", NtPathName=0x99efe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\Hlwxo9ov.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da60f0 [0135.248] FlushFileBuffers (hFile=0xad0) returned 1 [0135.732] CloseHandle (hObject=0xad0) returned 1 [0135.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x2fcea58 [0135.733] wcscpy (in: _Dest=0x2fcea58, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.733] wcscat (in: _Dest=0x2fcea58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.733] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcea58) returned 1 [0135.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 310 os_tid = 0xa60 [0133.444] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif" (normalized: "c:\\users\\eebsym5\\pictures\\ox2s-m.gif")) returned 0x20 [0133.444] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif", dwFileAttributes=0x20) returned 1 [0133.444] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif" (normalized: "c:\\users\\eebsym5\\pictures\\ox2s-m.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x910 [0133.444] GetFileSizeEx (in: hFile=0x910, lpFileSize=0x9a7ff34 | out: lpFileSize=0x9a7ff34*=85154) returned 1 [0133.444] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x14c9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.444] ReadFile (in: hFile=0x910, lpBuffer=0x9a7ff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a7ff20, lpOverlapped=0x0 | out: lpBuffer=0x9a7ff10*, lpNumberOfBytesRead=0x9a7ff20*=0x4, lpOverlapped=0x0) returned 1 [0133.447] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0133.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4240 [0133.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0133.447] NtQuerySystemTime (in: CurrentTime=0x9a7fea8 | out: CurrentTime=0x9a7fea8*=132482710421088000) returned 0x0 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x3d3c65 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x27ece19c [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x3a3ed32d [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x49de0812 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x60c2f57 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x47a61a1f [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x1edfd60d [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x544a277e [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x11bddf1a [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x18bdd8e2 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x2010261d [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x6e6f8f7d [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x7b6d9127 [0133.447] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x22ef5767 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x5faf61db [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x2c9261ec [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x5c74a98f [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x6ad3a4a4 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x7c169216 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x6d961d02 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x5c17ca [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x39ffb476 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x59c99c48 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x524bcaf4 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x22df1c2b [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x3b9c7831 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x2d21a4a9 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x36eaa2b0 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x3a69de2 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x796bd7e8 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x24bb5a65 [0133.448] RtlRandomEx (in: Seed=0x9a7fea0 | out: Seed=0x9a7fea0) returned 0x27060c1a [0133.462] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.462] ReadFile (in: hFile=0x910, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.462] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b44c0 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0133.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x674bd68 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0133.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0133.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b44c0) returned 1 [0133.463] WriteFile (in: hFile=0x910, lpBuffer=0x674bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesWritten=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0133.954] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.954] ReadFile (in: hFile=0x910, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.954] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33408 [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0133.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x674bd68 [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0133.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0133.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0133.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0133.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0133.955] WriteFile (in: hFile=0x910, lpBuffer=0x674bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesWritten=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0134.739] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x110a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.739] ReadFile (in: hFile=0x910, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.739] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x110a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60d18 [0134.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0134.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0134.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0134.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x674bd68 [0134.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0134.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0134.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0134.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0134.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60d18) returned 1 [0134.740] WriteFile (in: hFile=0x910, lpBuffer=0x674bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesWritten=0x9a7fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0135.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x2fce100 [0135.786] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.787] WriteFile (in: hFile=0x910, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x9a7ff28, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x9a7ff28*=0x146, lpOverlapped=0x0) returned 1 [0137.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0137.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0137.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0137.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0137.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce100) returned 1 [0137.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4240) returned 1 [0137.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0137.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0137.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0137.218] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif" [0137.218] wcscat (in: _Dest=0x2fe6548, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif.ac3a86" [0137.218] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif.ac3a86", NtPathName=0x9a7fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\oX2s-m.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d5f8 [0138.317] FlushFileBuffers (hFile=0x910) returned 1 [0139.051] CloseHandle (hObject=0x910) returned 1 [0139.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd448 [0139.416] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0139.416] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0139.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0139.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0139.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02b68) returned 1 Thread: id = 311 os_tid = 0xa70 [0133.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0133.466] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0133.466] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0133.466] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\*" [0133.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0133.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3d8190, ftCreationTime.dwHighDateTime=0x1d5d826, ftLastAccessTime.dwLowDateTime=0x546c38f0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0x546c38f0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f400 [0133.467] wcscmp (_String1=".", _String2=".") returned 0 [0133.467] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3d8190, ftCreationTime.dwHighDateTime=0x1d5d826, ftLastAccessTime.dwLowDateTime=0x546c38f0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0x546c38f0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.467] wcscmp (_String1="..", _String2=".") returned 1 [0133.467] wcscmp (_String1="..", _String2="..") returned 0 [0133.467] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa53f6ae0, ftCreationTime.dwHighDateTime=0x1d5dc0d, ftLastAccessTime.dwLowDateTime=0xf9906630, ftLastAccessTime.dwHighDateTime=0x1d5dc67, ftLastWriteTime.dwLowDateTime=0xf9906630, ftLastWriteTime.dwHighDateTime=0x1d5dc67, nFileSizeHigh=0x0, nFileSizeLow=0x182ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Hnqrre5l85M4jeC.png", cAlternateFileName="5HNQRR~1.PNG")) returned 1 [0133.467] wcscmp (_String1="5Hnqrre5l85M4jeC.png", _String2=".") returned 1 [0133.467] wcscmp (_String1="5Hnqrre5l85M4jeC.png", _String2="..") returned 1 [0133.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a368 [0133.467] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0133.467] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0133.467] wcscat (in: _Dest=0x3d5a368, _Source="5Hnqrre5l85M4jeC.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png" [0134.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0134.443] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34f41830, ftCreationTime.dwHighDateTime=0x1d5df69, ftLastAccessTime.dwLowDateTime=0xed885430, ftLastAccessTime.dwHighDateTime=0x1d5e2aa, ftLastWriteTime.dwLowDateTime=0xed885430, ftLastWriteTime.dwHighDateTime=0x1d5e2aa, nFileSizeHigh=0x0, nFileSizeLow=0x5e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-SEkX.gif", cAlternateFileName="")) returned 1 [0134.443] wcscmp (_String1="g-SEkX.gif", _String2=".") returned 1 [0134.443] wcscmp (_String1="g-SEkX.gif", _String2="..") returned 1 [0134.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b240 [0134.443] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.444] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.444] wcscat (in: _Dest=0x3f1b240, _Source="g-SEkX.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif" [0134.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0134.445] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdd6740, ftCreationTime.dwHighDateTime=0x1d5e05c, ftLastAccessTime.dwLowDateTime=0xeebfe930, ftLastAccessTime.dwHighDateTime=0x1d5d93b, ftLastWriteTime.dwLowDateTime=0xeebfe930, ftLastWriteTime.dwHighDateTime=0x1d5d93b, nFileSizeHigh=0x0, nFileSizeLow=0x9aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieuI4WkVc.jpg", cAlternateFileName="IEUI4W~1.JPG")) returned 1 [0134.445] wcscmp (_String1="ieuI4WkVc.jpg", _String2=".") returned 1 [0134.446] wcscmp (_String1="ieuI4WkVc.jpg", _String2="..") returned 1 [0134.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0134.446] wcscpy (in: _Dest=0x3f1b2b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.446] wcscat (in: _Dest=0x3f1b2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.446] wcscat (in: _Dest=0x3f1b2b8, _Source="ieuI4WkVc.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg" [0134.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0134.447] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a659220, ftCreationTime.dwHighDateTime=0x1d5deee, ftLastAccessTime.dwLowDateTime=0x6fb14140, ftLastAccessTime.dwHighDateTime=0x1d5dd99, ftLastWriteTime.dwLowDateTime=0x6fb14140, ftLastWriteTime.dwHighDateTime=0x1d5dd99, nFileSizeHigh=0x0, nFileSizeLow=0x156fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sxbNF.jpg", cAlternateFileName="")) returned 1 [0134.447] wcscmp (_String1="sxbNF.jpg", _String2=".") returned 1 [0134.448] wcscmp (_String1="sxbNF.jpg", _String2="..") returned 1 [0134.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f292c0 [0134.448] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.448] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.448] wcscat (in: _Dest=0x3f292c0, _Source="sxbNF.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg" [0134.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f292c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0134.449] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a60350, ftCreationTime.dwHighDateTime=0x1d5e382, ftLastAccessTime.dwLowDateTime=0xdce05ff0, ftLastAccessTime.dwHighDateTime=0x1d5e4ea, ftLastWriteTime.dwLowDateTime=0xdce05ff0, ftLastWriteTime.dwHighDateTime=0x1d5e4ea, nFileSizeHigh=0x0, nFileSizeLow=0x14905, dwReserved0=0x0, dwReserved1=0x0, cFileName="U3pRUNbV.png", cAlternateFileName="")) returned 1 [0134.449] wcscmp (_String1="U3pRUNbV.png", _String2=".") returned 1 [0134.449] wcscmp (_String1="U3pRUNbV.png", _String2="..") returned 1 [0134.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b330 [0134.449] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.449] wcscat (in: _Dest=0x3f1b330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.449] wcscat (in: _Dest=0x3f1b330, _Source="U3pRUNbV.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png" [0134.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0134.451] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf79f7c0, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x8a658650, ftLastAccessTime.dwHighDateTime=0x1d5db9f, ftLastWriteTime.dwLowDateTime=0x8a658650, ftLastWriteTime.dwHighDateTime=0x1d5db9f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkZHRgWeke1", cAlternateFileName="ZKZHRG~1")) returned 1 [0134.451] wcscmp (_String1="zkZHRgWeke1", _String2=".") returned 1 [0134.451] wcscmp (_String1="zkZHRgWeke1", _String2="..") returned 1 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b3a8 [0134.451] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.451] wcscat (in: _Dest=0x3f1b3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.451] wcscat (in: _Dest=0x3f1b3a8, _Source="zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0134.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0134.453] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c946af0, ftCreationTime.dwHighDateTime=0x1d5dd8c, ftLastAccessTime.dwLowDateTime=0xc6a00310, ftLastAccessTime.dwHighDateTime=0x1d5daec, ftLastWriteTime.dwLowDateTime=0xc6a00310, ftLastWriteTime.dwHighDateTime=0x1d5daec, nFileSizeHigh=0x0, nFileSizeLow=0x9d89, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5-ff_KkQR2QTJ7J.gif", cAlternateFileName="_5-FF_~1.GIF")) returned 1 [0134.453] wcscmp (_String1="_5-ff_KkQR2QTJ7J.gif", _String2=".") returned 1 [0134.453] wcscmp (_String1="_5-ff_KkQR2QTJ7J.gif", _String2="..") returned 1 [0134.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e500 [0134.453] wcscpy (in: _Dest=0x36e500, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp" [0134.453] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0134.454] wcscat (in: _Dest=0x36e500, _Source="_5-ff_KkQR2QTJ7J.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif" [0134.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0134.460] FindNextFileW (in: hFindFile=0x3f1f400, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c946af0, ftCreationTime.dwHighDateTime=0x1d5dd8c, ftLastAccessTime.dwLowDateTime=0xc6a00310, ftLastAccessTime.dwHighDateTime=0x1d5daec, ftLastWriteTime.dwLowDateTime=0xc6a00310, ftLastWriteTime.dwHighDateTime=0x1d5daec, nFileSizeHigh=0x0, nFileSizeLow=0x9d89, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5-ff_KkQR2QTJ7J.gif", cAlternateFileName="_5-FF_~1.GIF")) returned 0 [0134.460] FindClose (in: hFindFile=0x3f1f400 | out: hFindFile=0x3f1f400) returned 1 [0134.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0134.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0134.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6128) returned 1 Thread: id = 312 os_tid = 0xa74 [0133.468] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\rqzgt egqf375qf.bmp")) returned 0x20 [0133.468] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp", dwFileAttributes=0x20) returned 1 [0133.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\rqzgt egqf375qf.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x668 [0133.469] GetFileSizeEx (in: hFile=0x668, lpFileSize=0x9adf8ec | out: lpFileSize=0x9adf8ec*=9929) returned 1 [0133.469] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x26c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.469] ReadFile (in: hFile=0x668, lpBuffer=0x9adf8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9adf8d8, lpOverlapped=0x0 | out: lpBuffer=0x9adf8c8*, lpNumberOfBytesRead=0x9adf8d8*=0x4, lpOverlapped=0x0) returned 1 [0133.471] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0133.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0133.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0133.472] NtQuerySystemTime (in: CurrentTime=0x9adf860 | out: CurrentTime=0x9adf860*=132482710421400000) returned 0x0 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x40a64fed [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x1c2831da [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x3434c4e7 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0xcf7db19 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x5936784f [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x60beacb7 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x4e636e75 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7383a10e [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x3ee2c884 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x4f93e25b [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7be57150 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x12d6acac [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7d023b7e [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x5104d573 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x35d7d0d6 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x732887f7 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x36b88d89 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x3cf45643 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x315ef847 [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7a3dbe5f [0133.472] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x736519a8 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x49b89ecb [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7fcc13a8 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x660842f0 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x45b3cbf6 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x7c2d4f2 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x727d988 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x25a0ead2 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x2ce7dba9 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x1dcf9cc6 [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x216f2b1a [0133.473] RtlRandomEx (in: Seed=0x9adf858 | out: Seed=0x9adf858) returned 0x180b2bc4 [0133.490] ReadFile (in: hFile=0x668, lpBuffer=0x674fce8, nNumberOfBytesToRead=0x26c9, lpNumberOfBytesRead=0x9adf854, lpOverlapped=0x0 | out: lpBuffer=0x674fce8*, lpNumberOfBytesRead=0x9adf854*=0x26c9, lpOverlapped=0x0) returned 1 [0133.490] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.490] WriteFile (in: hFile=0x668, lpBuffer=0x67538f0*, nNumberOfBytesToWrite=0x26c9, lpNumberOfBytesWritten=0x9adf858, lpOverlapped=0x0 | out: lpBuffer=0x67538f0*, lpNumberOfBytesWritten=0x9adf858*=0x26c9, lpOverlapped=0x0) returned 1 [0133.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0133.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0133.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0133.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67538f0) returned 1 [0133.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fce8) returned 1 [0133.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0133.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4550) returned 1 [0133.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f8c0 [0133.957] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.957] WriteFile (in: hFile=0x668, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x9adf8e0, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x9adf8e0*=0x11a, lpOverlapped=0x0) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f900) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f8c0) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0134.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0134.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1abb0 [0134.904] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp" [0134.904] wcscat (in: _Dest=0x3f1abb0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp.ac3a86" [0134.904] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp.ac3a86", NtPathName=0x9adf858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\RqZGt eGQf375qF.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df29a8 [0135.029] FlushFileBuffers (hFile=0x668) returned 1 [0135.704] CloseHandle (hObject=0x668) returned 1 [0135.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e890 [0135.705] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.705] wcscat (in: _Dest=0x3d8e890, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 [0135.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 Thread: id = 313 os_tid = 0xa84 [0133.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif" (normalized: "c:\\users\\eebsym5\\pictures\\snmwn8q.gif")) returned 0x20 [0133.494] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif", dwFileAttributes=0x20) returned 1 [0133.494] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif" (normalized: "c:\\users\\eebsym5\\pictures\\snmwn8q.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x674 [0133.494] GetFileSizeEx (in: hFile=0x674, lpFileSize=0x9bbfad4 | out: lpFileSize=0x9bbfad4*=4323) returned 1 [0133.494] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x10df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.494] ReadFile (in: hFile=0x674, lpBuffer=0x9bbfab0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bbfac0, lpOverlapped=0x0 | out: lpBuffer=0x9bbfab0*, lpNumberOfBytesRead=0x9bbfac0*=0x4, lpOverlapped=0x0) returned 1 [0133.497] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0133.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0133.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0133.498] NtQuerySystemTime (in: CurrentTime=0x9bbfa48 | out: CurrentTime=0x9bbfa48*=132482710421556000) returned 0x0 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x6766f9d3 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x738c0710 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x6a337c6f [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x68f048d9 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x334dc6c0 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x29aa5c03 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x3ac26edf [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x5e0415d6 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x7e860d4 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x72082296 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x6197adba [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x599085fb [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x5bd0732 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x36d1ef05 [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x390dbe8c [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x33dc649a [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x6a689dcf [0133.498] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x38859f0 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x2ca11a69 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x45843976 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x5a80ece8 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x6eb574c5 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x2fff1a50 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x32ee3420 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x7e3c00c9 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x7891d7c4 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x7c2c1485 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x5e124973 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x7d2ba7c1 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x60b49163 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x685a1751 [0133.499] RtlRandomEx (in: Seed=0x9bbfa40 | out: Seed=0x9bbfa40) returned 0x679a1552 [0133.512] ReadFile (in: hFile=0x674, lpBuffer=0x67574f8, nNumberOfBytesToRead=0x10e3, lpNumberOfBytesRead=0x9bbfa3c, lpOverlapped=0x0 | out: lpBuffer=0x67574f8*, lpNumberOfBytesRead=0x9bbfa3c*=0x10e3, lpOverlapped=0x0) returned 1 [0133.513] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.513] WriteFile (in: hFile=0x674, lpBuffer=0x675b100*, nNumberOfBytesToWrite=0x10e3, lpNumberOfBytesWritten=0x9bbfa40, lpOverlapped=0x0 | out: lpBuffer=0x675b100*, lpNumberOfBytesWritten=0x9bbfa40*=0x10e3, lpOverlapped=0x0) returned 1 [0133.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0133.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b100) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67574f8) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0133.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0133.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3db0 [0133.958] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.958] WriteFile (in: hFile=0x674, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x9bbfac8, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x9bbfac8*=0x108, lpOverlapped=0x0) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0134.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0134.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de00 [0134.906] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif" [0134.906] wcscat (in: _Dest=0x3d8de00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif.ac3a86" [0134.907] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif.ac3a86", NtPathName=0x9bbfa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\SnmwN8Q.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad90 [0135.045] FlushFileBuffers (hFile=0x674) returned 1 [0135.709] CloseHandle (hObject=0x674) returned 1 [0135.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e758 [0135.710] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.710] wcscat (in: _Dest=0x3d8e758, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.710] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0135.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02f88) returned 1 Thread: id = 314 os_tid = 0xb08 [0133.515] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png" (normalized: "c:\\users\\eebsym5\\pictures\\v0tqarhbcj59rz_dk.png")) returned 0x20 [0133.515] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png", dwFileAttributes=0x20) returned 1 [0133.515] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png" (normalized: "c:\\users\\eebsym5\\pictures\\v0tqarhbcj59rz_dk.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3a8 [0133.516] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x914fb5c | out: lpFileSize=0x914fb5c*=30462) returned 1 [0133.516] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x76fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.516] ReadFile (in: hFile=0x3a8, lpBuffer=0x914fb38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x914fb48, lpOverlapped=0x0 | out: lpBuffer=0x914fb38*, lpNumberOfBytesRead=0x914fb48*=0x4, lpOverlapped=0x0) returned 1 [0133.518] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0133.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43a8 [0133.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0133.518] NtQuerySystemTime (in: CurrentTime=0x914fad0 | out: CurrentTime=0x914fad0*=132482710421868000) returned 0x0 [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x6db81aaa [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x6943f31c [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x5f6603a0 [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x433d1f52 [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x7604eb01 [0133.518] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x4ad3be76 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x43f1039f [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x7b58be03 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x5bed3eb [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x35aaae4 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x1fc7f190 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x5e014e80 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x7a0c0169 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x777db653 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x3891f15d [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x1f984ca [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x3a2b8a29 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x16e52c3d [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x256edc0 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x41338567 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x63e2e376 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x7cb46b03 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x7731ce14 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x68b91a5b [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x75bac0d9 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x21728462 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x3f7e45b [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x66afa933 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x224899f9 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0xbf47dc0 [0133.519] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x63722346 [0133.520] RtlRandomEx (in: Seed=0x914fac8 | out: Seed=0x914fac8) returned 0x64d00032 [0133.532] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.532] ReadFile (in: hFile=0x3a8, lpBuffer=0x675ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x914fad0, lpOverlapped=0x0 | out: lpBuffer=0x675ed08*, lpNumberOfBytesRead=0x914fad0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.532] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3b78 [0133.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0133.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0133.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42e0) returned 1 [0133.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6762910 [0133.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42e0 [0133.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0133.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0133.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0133.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b78) returned 1 [0133.533] WriteFile (in: hFile=0x3a8, lpBuffer=0x6762910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x914fad0, lpOverlapped=0x0 | out: lpBuffer=0x6762910*, lpNumberOfBytesWritten=0x914fad0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762910) returned 1 [0133.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed08) returned 1 [0133.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f940 [0133.960] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.960] WriteFile (in: hFile=0x3a8, lpBuffer=0x3d54b88*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x914fb50, lpOverlapped=0x0 | out: lpBuffer=0x3d54b88*, lpNumberOfBytesWritten=0x914fb50*=0x11c, lpOverlapped=0x0) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54b88) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f980) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b28) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f940) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42e0) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43a8) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4448) returned 1 [0134.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4470) returned 1 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ad18 [0134.908] wcscpy (in: _Dest=0x3f1ad18, _Source="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png") returned="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png" [0134.908] wcscat (in: _Dest=0x3f1ad18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png.ac3a86" [0134.908] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png.ac3a86", NtPathName=0x914fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\v0tqaRhbCJ59Rz_DK.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1dd8 [0135.056] FlushFileBuffers (hFile=0x3a8) returned 1 [0135.714] CloseHandle (hObject=0x3a8) returned 1 [0135.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e758 [0135.715] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.715] wcscat (in: _Dest=0x3d8e758, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.715] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0135.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 Thread: id = 315 os_tid = 0x51c [0133.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\w7gsourp fdscc-pnc.bmp")) returned 0x20 [0133.536] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp", dwFileAttributes=0x20) returned 1 [0133.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\w7gsourp fdscc-pnc.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x67c [0133.536] GetFileSizeEx (in: hFile=0x67c, lpFileSize=0x989fe7c | out: lpFileSize=0x989fe7c*=59726) returned 1 [0133.537] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0xe94a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.537] ReadFile (in: hFile=0x67c, lpBuffer=0x989fe58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x989fe68, lpOverlapped=0x0 | out: lpBuffer=0x989fe58*, lpNumberOfBytesRead=0x989fe68*=0x4, lpOverlapped=0x0) returned 1 [0133.540] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0133.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0133.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0133.540] NtQuerySystemTime (in: CurrentTime=0x989fdf0 | out: CurrentTime=0x989fdf0*=132482710422024000) returned 0x0 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x60278093 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x509f2e5b [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x1f0300ca [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x32fd46e9 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x52958657 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x3d1c9b6d [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x1895193d [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x373dc9da [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x18b57e3f [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x22fc254f [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x3edd51b5 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x255de357 [0133.540] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x71a930da [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x419325ea [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x55a7a09a [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x23808f5c [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x65b5dcdb [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x5b7610fe [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x140de673 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x4e9e0fcd [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x35652dbc [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x4069ace3 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x7f27b3e5 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x682747bc [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x32fc1777 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x19f7de1a [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x372f7606 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x12058788 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0xc0437 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x2e643415 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0x7602bc16 [0133.541] RtlRandomEx (in: Seed=0x989fde8 | out: Seed=0x989fde8) returned 0xa456031 [0133.555] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.555] ReadFile (in: hFile=0x67c, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x989fdf0, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x989fdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.556] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3b30 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0133.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0133.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0133.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0133.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0133.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b30) returned 1 [0133.557] WriteFile (in: hFile=0x67c, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x989fdf0, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x989fdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0133.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766518) returned 1 [0133.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b45e0 [0133.961] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.961] WriteFile (in: hFile=0x67c, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x989fe70, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x989fe70*=0x11e, lpOverlapped=0x0) returned 1 [0134.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0134.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4110) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44e8) returned 1 [0134.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0134.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aca0 [0134.910] wcscpy (in: _Dest=0x3f1aca0, _Source="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp" [0134.910] wcscat (in: _Dest=0x3f1aca0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp.ac3a86" [0134.910] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp.ac3a86", NtPathName=0x989fde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\W7gSoUrP fdscc-Pnc.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2258 [0135.060] FlushFileBuffers (hFile=0x67c) returned 1 [0135.716] CloseHandle (hObject=0x67c) returned 1 [0135.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e6f0 [0135.717] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.717] wcscat (in: _Dest=0x3d8e6f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 [0135.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364930) returned 1 Thread: id = 316 os_tid = 0xd5c [0133.560] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\yirur53rs4.jpg")) returned 0x20 [0133.560] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg", dwFileAttributes=0x20) returned 1 [0133.560] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\yirur53rs4.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x660 [0133.560] GetFileSizeEx (in: hFile=0x660, lpFileSize=0x9c3fc5c | out: lpFileSize=0x9c3fc5c*=61490) returned 1 [0133.561] SetFilePointerEx (in: hFile=0x660, liDistanceToMove=0xf02e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.561] ReadFile (in: hFile=0x660, lpBuffer=0x9c3fc38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c3fc48, lpOverlapped=0x0 | out: lpBuffer=0x9c3fc38*, lpNumberOfBytesRead=0x9c3fc48*=0x4, lpOverlapped=0x0) returned 1 [0133.564] SetFilePointerEx (in: hFile=0x660, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0133.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0133.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0133.564] NtQuerySystemTime (in: CurrentTime=0x9c3fbd0 | out: CurrentTime=0x9c3fbd0*=132482710422336000) returned 0x0 [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x33fd1211 [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x4e2d97a9 [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x5e39726a [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x6183b89b [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x1cb3f56e [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x6d5bbfb1 [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x27c9fd8a [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x7fcdc219 [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x1c0365ef [0133.564] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x36f73d45 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x2355c8a2 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x64db2767 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x4de2e0e9 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x7d1e6c2c [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x6b27e650 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x2ba005e9 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x7d0899e3 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x17d5534c [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x1261dec2 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x2bf5b769 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x664c8d54 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x13d8864d [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x6b40557c [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x21a9060 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x25f2b0db [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x60d5cfa4 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x2285d2ed [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x6ab5a91e [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0xfea75bb [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x471f3c50 [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x12c938dc [0133.565] RtlRandomEx (in: Seed=0x9c3fbc8 | out: Seed=0x9c3fbc8) returned 0x67a069e6 [0133.578] SetFilePointerEx (in: hFile=0x660, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.578] ReadFile (in: hFile=0x660, lpBuffer=0x676dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9c3fbd0, lpOverlapped=0x0 | out: lpBuffer=0x676dd28*, lpNumberOfBytesRead=0x9c3fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.578] SetFilePointerEx (in: hFile=0x660, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3ae8 [0133.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0133.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0133.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0133.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6771930 [0133.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef44c0 [0133.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0133.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0133.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0133.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ae8) returned 1 [0133.579] WriteFile (in: hFile=0x660, lpBuffer=0x6771930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9c3fbd0, lpOverlapped=0x0 | out: lpBuffer=0x6771930*, lpNumberOfBytesWritten=0x9c3fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771930) returned 1 [0133.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676dd28) returned 1 [0133.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19b28 [0133.962] SetFilePointerEx (in: hFile=0x660, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.962] WriteFile (in: hFile=0x660, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x9c3fc50, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x9c3fc50*=0x10e, lpOverlapped=0x0) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199a0) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44c0) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0134.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45b0) returned 1 [0134.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ef0448 [0134.911] wcscpy (in: _Dest=0x3ef0448, _Source="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg" [0134.912] wcscat (in: _Dest=0x3ef0448, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg.ac3a86" [0134.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg.ac3a86", NtPathName=0x9c3fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\Yirur53Rs4.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da60f0 [0135.064] FlushFileBuffers (hFile=0x660) returned 1 [0135.718] CloseHandle (hObject=0x660) returned 1 [0135.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e6f0 [0135.719] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.719] wcscat (in: _Dest=0x3d8e6f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.719] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 [0135.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 Thread: id = 317 os_tid = 0xd90 [0133.581] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png" (normalized: "c:\\users\\eebsym5\\pictures\\_vkgzo5tybswo2jlx.png")) returned 0x20 [0133.582] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png", dwFileAttributes=0x20) returned 1 [0133.582] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png" (normalized: "c:\\users\\eebsym5\\pictures\\_vkgzo5tybswo2jlx.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb04 [0133.582] GetFileSizeEx (in: hFile=0xb04, lpFileSize=0x9b4fc3c | out: lpFileSize=0x9b4fc3c*=38112) returned 1 [0133.582] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x94dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.582] ReadFile (in: hFile=0xb04, lpBuffer=0x9b4fc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b4fc28, lpOverlapped=0x0 | out: lpBuffer=0x9b4fc18*, lpNumberOfBytesRead=0x9b4fc28*=0x4, lpOverlapped=0x0) returned 1 [0133.585] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0133.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef45d8 [0133.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0133.585] NtQuerySystemTime (in: CurrentTime=0x9b4fbb0 | out: CurrentTime=0x9b4fbb0*=132482710422492000) returned 0x0 [0133.585] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x1715e7d5 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x1e7f824b [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x1938e7bd [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x2c7641a9 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x3e48e5df [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0xe67c127 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x61ac16b4 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x253d3162 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x5811641f [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x2d3cf47d [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x6fe7a6a4 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x1ea9b350 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x5b08d679 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x63a15e4 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x6871c663 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x158a81a [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x38112796 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x75b61e61 [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x61b286da [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x6ae0645e [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x64e5e9ef [0133.586] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x544fe563 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x679a7209 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x67d58ce7 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x73492876 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x634c2a5b [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x2c209029 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x3d6c35fb [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x5879816c [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x45ab1e50 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x2c65a023 [0133.587] RtlRandomEx (in: Seed=0x9b4fba8 | out: Seed=0x9b4fba8) returned 0x54ef9058 [0133.600] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.600] ReadFile (in: hFile=0xb04, lpBuffer=0x6775538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b4fbb0, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesRead=0x9b4fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.600] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a58 [0133.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0133.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6779140 [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4560 [0133.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0133.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0133.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0133.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a58) returned 1 [0133.601] WriteFile (in: hFile=0xb04, lpBuffer=0x6779140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b4fbb0, lpOverlapped=0x0 | out: lpBuffer=0x6779140*, lpNumberOfBytesWritten=0x9b4fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779140) returned 1 [0133.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0133.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f9c0 [0133.964] SetFilePointerEx (in: hFile=0xb04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.964] WriteFile (in: hFile=0xb04, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x9b4fc30, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x9b4fc30*=0x11c, lpOverlapped=0x0) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa00) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f9c0) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4560) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef45d8) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4628) returned 1 [0134.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0134.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d1c0 [0134.913] wcscpy (in: _Dest=0x3f1d1c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png") returned="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png" [0134.913] wcscat (in: _Dest=0x3f1d1c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png.ac3a86" [0134.913] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png.ac3a86", NtPathName=0x9b4fba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\_VkgZO5tYbSwO2Jlx.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df3068 [0135.069] FlushFileBuffers (hFile=0xb04) returned 1 [0135.721] CloseHandle (hObject=0xb04) returned 1 [0135.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e6f0 [0135.722] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0135.722] wcscat (in: _Dest=0x3d8e6f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" [0135.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\ac3a86-readme.txt")) returned 0x20 [0135.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 [0135.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 Thread: id = 318 os_tid = 0xd88 [0133.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0133.604] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0133.604] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0133.604] wcscat (in: _Dest=0x3f29090, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*" [0133.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0133.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0133.969] wcscmp (_String1=".", _String2=".") returned 0 [0133.969] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.969] wcscmp (_String1="..", _String2=".") returned 1 [0133.969] wcscmp (_String1="..", _String2="..") returned 0 [0133.969] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0133.969] wcscmp (_String1="CURRENCY.GIF", _String2=".") returned 1 [0133.969] wcscmp (_String1="CURRENCY.GIF", _String2="..") returned 1 [0133.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d58eb0 [0133.969] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0133.969] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0133.969] wcscat (in: _Dest=0x3d58eb0, _Source="CURRENCY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" [0134.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0134.678] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbd4800, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cbd4800, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0134.679] wcscmp (_String1="CURRENCY.HTM", _String2=".") returned 1 [0134.679] wcscmp (_String1="CURRENCY.HTM", _String2="..") returned 1 [0134.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59b70 [0134.679] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.679] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.679] wcscat (in: _Dest=0x3d59b70, _Source="CURRENCY.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" [0134.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0134.681] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0134.681] wcscmp (_String1="DADSHIRT.GIF", _String2=".") returned 1 [0134.681] wcscmp (_String1="DADSHIRT.GIF", _String2="..") returned 1 [0134.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36f8a8 [0134.681] wcscpy (in: _Dest=0x36f8a8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.681] wcscat (in: _Dest=0x36f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.681] wcscat (in: _Dest=0x36f8a8, _Source="DADSHIRT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" [0134.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0134.683] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4f6100, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf4f6100, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0134.683] wcscmp (_String1="DADSHIRT.HTM", _String2=".") returned 1 [0134.683] wcscmp (_String1="DADSHIRT.HTM", _String2="..") returned 1 [0134.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ead8 [0134.683] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.683] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.683] wcscat (in: _Dest=0x36ead8, _Source="DADSHIRT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" [0134.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0134.685] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0134.685] wcscmp (_String1="JUDGESCH.GIF", _String2=".") returned 1 [0134.686] wcscmp (_String1="JUDGESCH.GIF", _String2="..") returned 1 [0134.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e478 [0134.686] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.686] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.686] wcscat (in: _Dest=0x36e478, _Source="JUDGESCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" [0134.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0134.688] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8581200, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8581200, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0134.688] wcscmp (_String1="JUDGESCH.HTM", _String2=".") returned 1 [0134.688] wcscmp (_String1="JUDGESCH.HTM", _String2="..") returned 1 [0134.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36f820 [0134.689] wcscpy (in: _Dest=0x36f820, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.689] wcscat (in: _Dest=0x36f820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.689] wcscat (in: _Dest=0x36f820, _Source="JUDGESCH.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" [0134.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36f820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0134.690] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0134.691] wcscmp (_String1="JUNGLE.GIF", _String2=".") returned 1 [0134.691] wcscmp (_String1="JUNGLE.GIF", _String2="..") returned 1 [0134.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ed80 [0134.691] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.691] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.691] wcscat (in: _Dest=0x36ed80, _Source="JUNGLE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" [0134.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0134.693] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcd3c00, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddcd3c00, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0134.693] wcscmp (_String1="JUNGLE.HTM", _String2=".") returned 1 [0134.693] wcscmp (_String1="JUNGLE.HTM", _String2="..") returned 1 [0134.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3099c68 [0134.693] wcscpy (in: _Dest=0x3099c68, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.693] wcscat (in: _Dest=0x3099c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.694] wcscat (in: _Dest=0x3099c68, _Source="JUNGLE.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" [0134.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0134.696] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13722500, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13722500, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0134.696] wcscmp (_String1="NOTEBOOK.HTM", _String2=".") returned 1 [0134.696] wcscmp (_String1="NOTEBOOK.HTM", _String2="..") returned 1 [0134.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3099cf0 [0134.696] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.696] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.696] wcscat (in: _Dest=0x3099cf0, _Source="NOTEBOOK.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" [0134.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0134.698] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0134.698] wcscmp (_String1="NOTEBOOK.JPG", _String2=".") returned 1 [0134.698] wcscmp (_String1="NOTEBOOK.JPG", _String2="..") returned 1 [0134.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e08270 [0134.698] wcscpy (in: _Dest=0x3e08270, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.698] wcscat (in: _Dest=0x3e08270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.698] wcscat (in: _Dest=0x3e08270, _Source="NOTEBOOK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" [0134.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0134.700] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0134.700] wcscmp (_String1="OFFISUPP.GIF", _String2=".") returned 1 [0134.701] wcscmp (_String1="OFFISUPP.GIF", _String2="..") returned 1 [0134.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3061f70 [0134.701] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.701] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.701] wcscat (in: _Dest=0x3061f70, _Source="OFFISUPP.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" [0134.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0134.703] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38669800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38669800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0134.703] wcscmp (_String1="OFFISUPP.HTM", _String2=".") returned 1 [0134.703] wcscmp (_String1="OFFISUPP.HTM", _String2="..") returned 1 [0134.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee498 [0134.703] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.703] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.703] wcscat (in: _Dest=0x66ee498, _Source="OFFISUPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" [0134.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0134.705] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e1e800, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x93e1e800, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0134.705] wcscmp (_String1="PAWPRINT.GIF", _String2=".") returned 1 [0134.705] wcscmp (_String1="PAWPRINT.GIF", _String2="..") returned 1 [0134.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee520 [0134.705] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.705] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.705] wcscat (in: _Dest=0x66ee520, _Source="PAWPRINT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" [0134.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0134.707] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516f4900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x516f4900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0134.707] wcscmp (_String1="PAWPRINT.HTM", _String2=".") returned 1 [0134.707] wcscmp (_String1="PAWPRINT.HTM", _String2="..") returned 1 [0134.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee5a8 [0134.707] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.707] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.707] wcscat (in: _Dest=0x66ee5a8, _Source="PAWPRINT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" [0134.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0134.709] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e8c3800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0134.709] wcscmp (_String1="PINELUMB.HTM", _String2=".") returned 1 [0134.709] wcscmp (_String1="PINELUMB.HTM", _String2="..") returned 1 [0134.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee630 [0134.709] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.709] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.709] wcscat (in: _Dest=0x66ee630, _Source="PINELUMB.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" [0134.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0134.710] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a69c00, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98a69c00, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0134.710] wcscmp (_String1="PINELUMB.JPG", _String2=".") returned 1 [0134.710] wcscmp (_String1="PINELUMB.JPG", _String2="..") returned 1 [0134.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee6b8 [0134.710] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.711] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.711] wcscat (in: _Dest=0x66ee6b8, _Source="PINELUMB.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" [0134.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0134.712] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7794e900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7794e900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0134.712] wcscmp (_String1="SEAMARBL.HTM", _String2=".") returned 1 [0134.712] wcscmp (_String1="SEAMARBL.HTM", _String2="..") returned 1 [0134.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee740 [0134.712] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0134.712] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0134.712] wcscat (in: _Dest=0x66ee740, _Source="SEAMARBL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" [0134.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0135.627] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0135.627] wcscmp (_String1="SEAMARBL.JPG", _String2=".") returned 1 [0135.627] wcscmp (_String1="SEAMARBL.JPG", _String2="..") returned 1 [0135.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eefc0 [0135.628] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0135.628] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0135.628] wcscat (in: _Dest=0x66eefc0, _Source="SEAMARBL.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" [0141.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0141.775] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc1f900, ftCreationTime.dwHighDateTime=0x1c02f7e, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fc1f900, ftLastWriteTime.dwHighDateTime=0x1c02f7e, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0141.775] wcscmp (_String1="TECHTOOL.GIF", _String2=".") returned 1 [0141.775] wcscmp (_String1="TECHTOOL.GIF", _String2="..") returned 1 [0141.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26bf0 [0141.776] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0141.776] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0141.776] wcscat (in: _Dest=0x3f26bf0, _Source="TECHTOOL.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" [0141.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0141.777] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0141.777] wcscmp (_String1="TECHTOOL.HTM", _String2=".") returned 1 [0141.777] wcscmp (_String1="TECHTOOL.HTM", _String2="..") returned 1 [0141.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f274f8 [0141.777] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0141.777] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0141.778] wcscat (in: _Dest=0x3f274f8, _Source="TECHTOOL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" [0141.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0141.779] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0141.779] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0141.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364d90) returned 1 Thread: id = 319 os_tid = 0x448 [0133.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f240 [0133.608] wcscpy (in: _Dest=0x3f1f240, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0133.608] wcscat (in: _Dest=0x3f1f240, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0133.608] wcscat (in: _Dest=0x3f1f240, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\*") returned="C:\\Users\\All Users\\Adobe\\*" [0133.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0133.608] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0133.609] wcscmp (_String1=".", _String2=".") returned 0 [0133.609] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.609] wcscmp (_String1="..", _String2=".") returned 1 [0133.609] wcscmp (_String1="..", _String2="..") returned 0 [0133.609] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0133.609] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0133.609] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0133.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61bb0 [0133.609] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0133.609] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0133.609] wcscat (in: _Dest=0x3e61bb0, _Source="Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0135.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0135.534] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0135.535] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0135.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0135.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f240) returned 1 [0135.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf510) returned 1 Thread: id = 320 os_tid = 0x500 [0133.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7288 [0133.610] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\All Users\\Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0133.610] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Application Data\\") returned="C:\\Users\\All Users\\Application Data\\" [0133.610] wcscat (in: _Dest=0x3ef7288, _Source="*" | out: _Dest="C:\\Users\\All Users\\Application Data\\*") returned="C:\\Users\\All Users\\Application Data\\*" [0133.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0133.610] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0133.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 [0133.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62510) returned 1 Thread: id = 321 os_tid = 0xdd0 [0133.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b3c08 [0133.612] wcscpy (in: _Dest=0x30b3c08, _Source="C:\\Users\\All Users\\Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0133.612] wcscat (in: _Dest=0x30b3c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Desktop\\") returned="C:\\Users\\All Users\\Desktop\\" [0133.612] wcscat (in: _Dest=0x30b3c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Desktop\\*") returned="C:\\Users\\All Users\\Desktop\\*" [0133.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0133.612] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0133.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3c08) returned 1 [0133.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066a80) returned 1 Thread: id = 322 os_tid = 0xe10 [0133.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b3c08 [0133.614] wcscpy (in: _Dest=0x30b3c08, _Source="C:\\Users\\All Users\\Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0133.614] wcscat (in: _Dest=0x30b3c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Documents\\") returned="C:\\Users\\All Users\\Documents\\" [0133.614] wcscat (in: _Dest=0x30b3c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Documents\\*") returned="C:\\Users\\All Users\\Documents\\*" [0133.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0133.614] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0133.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3c08) returned 1 [0133.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e414b0) returned 1 Thread: id = 323 os_tid = 0xe14 [0133.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b3c08 [0133.616] wcscpy (in: _Dest=0x30b3c08, _Source="C:\\Users\\All Users\\Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0133.616] wcscat (in: _Dest=0x30b3c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Favorites\\") returned="C:\\Users\\All Users\\Favorites\\" [0133.616] wcscat (in: _Dest=0x30b3c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Favorites\\*") returned="C:\\Users\\All Users\\Favorites\\*" [0133.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0133.616] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0133.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3c08) returned 1 [0133.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41738) returned 1 Thread: id = 324 os_tid = 0xe04 [0133.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b3c08 [0133.618] wcscpy (in: _Dest=0x30b3c08, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0133.618] wcscat (in: _Dest=0x30b3c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0133.618] wcscat (in: _Dest=0x30b3c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\*") returned="C:\\Users\\All Users\\Microsoft\\*" [0133.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0133.618] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfe10 [0134.024] wcscmp (_String1=".", _String2=".") returned 0 [0134.024] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.024] wcscmp (_String1="..", _String2=".") returned 1 [0134.024] wcscmp (_String1="..", _String2="..") returned 0 [0134.024] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0134.024] wcscmp (_String1="Assistance", _String2=".") returned 1 [0134.024] wcscmp (_String1="Assistance", _String2="..") returned 1 [0134.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef75a0 [0134.024] wcscpy (in: _Dest=0x3ef75a0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0134.024] wcscat (in: _Dest=0x3ef75a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0134.024] wcscat (in: _Dest=0x3ef75a0, _Source="Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0143.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0143.595] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0143.595] wcscmp (_String1="Crypto", _String2=".") returned 1 [0143.595] wcscmp (_String1="Crypto", _String2="..") returned 1 [0143.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e620b0 [0143.595] wcscpy (in: _Dest=0x3e620b0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.595] wcscat (in: _Dest=0x3e620b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.595] wcscat (in: _Dest=0x3e620b0, _Source="Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0143.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e620b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0143.597] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0143.597] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0143.597] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0143.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0143.597] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.597] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.597] wcscat (in: _Dest=0x2fe6c08, _Source="Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0143.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0143.598] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0143.599] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0143.599] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0143.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4ca8 [0143.599] wcscpy (in: _Dest=0x66d4ca8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.599] wcscat (in: _Dest=0x66d4ca8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.599] wcscat (in: _Dest=0x66d4ca8, _Source="DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0143.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0143.600] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0143.601] wcscmp (_String1="DRM", _String2=".") returned 1 [0143.601] wcscmp (_String1="DRM", _String2="..") returned 1 [0143.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62790 [0143.601] wcscpy (in: _Dest=0x3e62790, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.601] wcscat (in: _Dest=0x3e62790, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.601] wcscat (in: _Dest=0x3e62790, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0143.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0143.602] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0143.602] wcscmp (_String1="eHome", _String2=".") returned 1 [0143.602] wcscmp (_String1="eHome", _String2="..") returned 1 [0143.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62010 [0143.602] wcscpy (in: _Dest=0x3e62010, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.602] wcscat (in: _Dest=0x3e62010, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.602] wcscat (in: _Dest=0x3e62010, _Source="eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0143.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0143.604] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0143.604] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0143.604] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0143.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a88 [0143.604] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.604] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.604] wcscat (in: _Dest=0x2fe6a88, _Source="Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0143.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0143.605] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0143.605] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0143.605] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0143.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4d58 [0143.605] wcscpy (in: _Dest=0x66d4d58, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.605] wcscat (in: _Dest=0x66d4d58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.605] wcscat (in: _Dest=0x66d4d58, _Source="HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0143.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0143.607] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0143.607] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0143.607] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0143.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6e48 [0143.607] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.607] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.607] wcscat (in: _Dest=0x2fe6e48, _Source="IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0143.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0143.608] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0143.608] wcscmp (_String1="Media Player", _String2=".") returned 1 [0143.608] wcscmp (_String1="Media Player", _String2="..") returned 1 [0143.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6668 [0143.608] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.608] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.608] wcscat (in: _Dest=0x2fe6668, _Source="Media Player" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player" [0143.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 [0143.609] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0143.609] wcscmp (_String1="MF", _String2=".") returned 1 [0143.609] wcscmp (_String1="MF", _String2="..") returned 1 [0143.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e414f8 [0143.609] wcscpy (in: _Dest=0x3e414f8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.609] wcscat (in: _Dest=0x3e414f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.609] wcscat (in: _Dest=0x3e414f8, _Source="MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0143.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e414f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0143.610] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0143.610] wcscmp (_String1="MSDN", _String2=".") returned 1 [0143.610] wcscmp (_String1="MSDN", _String2="..") returned 1 [0143.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62100 [0143.610] wcscpy (in: _Dest=0x3e62100, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.610] wcscat (in: _Dest=0x3e62100, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.610] wcscat (in: _Dest=0x3e62100, _Source="MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0143.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0143.612] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0143.612] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0143.612] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0143.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6668 [0143.612] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.612] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.612] wcscat (in: _Dest=0x2fe6668, _Source="NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0143.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0143.613] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0143.613] wcscmp (_String1="Network", _String2=".") returned 1 [0143.613] wcscmp (_String1="Network", _String2="..") returned 1 [0143.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d4db0 [0143.613] wcscpy (in: _Dest=0x66d4db0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.613] wcscat (in: _Dest=0x66d4db0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.613] wcscat (in: _Dest=0x66d4db0, _Source="Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0143.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0143.615] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0143.615] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0143.615] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0143.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e624c0 [0143.615] wcscpy (in: _Dest=0x3e624c0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.615] wcscat (in: _Dest=0x3e624c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.615] wcscat (in: _Dest=0x3e624c0, _Source="OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0143.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e624c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0143.616] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0143.616] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0143.616] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0143.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a3f0 [0143.616] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.616] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.616] wcscat (in: _Dest=0x3d5a3f0, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0143.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0143.618] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0143.618] wcscmp (_String1="RAC", _String2=".") returned 1 [0143.618] wcscmp (_String1="RAC", _String2="..") returned 1 [0143.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62330 [0143.618] wcscpy (in: _Dest=0x3e62330, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.618] wcscat (in: _Dest=0x3e62330, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.618] wcscat (in: _Dest=0x3e62330, _Source="RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0143.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0143.620] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0143.620] wcscmp (_String1="Search", _String2=".") returned 1 [0143.620] wcscmp (_String1="Search", _String2="..") returned 1 [0143.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e626a0 [0143.620] wcscpy (in: _Dest=0x3e626a0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.620] wcscat (in: _Dest=0x3e626a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.620] wcscat (in: _Dest=0x3e626a0, _Source="Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0143.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e626a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0143.622] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0143.622] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0143.622] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0143.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0ae10 [0143.622] wcscpy (in: _Dest=0x3e0ae10, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.622] wcscat (in: _Dest=0x3e0ae10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.622] wcscat (in: _Dest=0x3e0ae10, _Source="User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0143.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0ae10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0143.624] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0143.624] wcscmp (_String1="Vault", _String2=".") returned 1 [0143.624] wcscmp (_String1="Vault", _String2="..") returned 1 [0143.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61de0 [0143.624] wcscpy (in: _Dest=0x3e61de0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.624] wcscat (in: _Dest=0x3e61de0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.624] wcscat (in: _Dest=0x3e61de0, _Source="Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0143.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0143.626] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0143.626] wcscmp (_String1="VISIO", _String2=".") returned 1 [0143.626] wcscmp (_String1="VISIO", _String2="..") returned 1 [0143.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62650 [0143.626] wcscpy (in: _Dest=0x3e62650, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.626] wcscat (in: _Dest=0x3e62650, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.626] wcscat (in: _Dest=0x3e62650, _Source="VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0143.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0143.628] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0143.628] wcscmp (_String1="Windows", _String2=".") returned 1 [0143.628] wcscmp (_String1="Windows", _String2="..") returned 1 [0143.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d4e08 [0143.628] wcscpy (in: _Dest=0x66d4e08, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.628] wcscat (in: _Dest=0x66d4e08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.628] wcscat (in: _Dest=0x66d4e08, _Source="Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0143.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0143.630] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xabc9e780, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xabc9e780, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0143.630] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0143.630] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0143.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ccf0 [0143.630] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.630] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.630] wcscat (in: _Dest=0x3d8ccf0, _Source="Windows Defender" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender" [0143.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0143.630] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0143.630] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0143.630] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0143.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4e60 [0143.630] wcscpy (in: _Dest=0x66d4e60, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0143.630] wcscat (in: _Dest=0x66d4e60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0143.630] wcscat (in: _Dest=0x66d4e60, _Source="Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0143.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0144.048] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0144.048] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0144.048] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0144.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d5228 [0144.048] wcscpy (in: _Dest=0x66d5228, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0144.048] wcscat (in: _Dest=0x66d5228, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0144.048] wcscat (in: _Dest=0x66d5228, _Source="WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0153.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d5228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0153.570] FindNextFileW (in: hFindFile=0x3dcfe10, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0153.570] FindClose (in: hFindFile=0x3dcfe10 | out: hFindFile=0x3dcfe10) returned 1 [0153.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0153.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3c08) returned 1 [0153.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a50) returned 1 Thread: id = 325 os_tid = 0xe4c [0133.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62510 [0133.619] wcscpy (in: _Dest=0x3e62510, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0133.619] wcscat (in: _Dest=0x3e62510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0133.619] wcscat (in: _Dest=0x3e62510, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\*") returned="C:\\Users\\All Users\\Microsoft Help\\*" [0133.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0133.619] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0133.934] wcscmp (_String1=".", _String2=".") returned 0 [0133.934] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.937] wcscmp (_String1="..", _String2=".") returned 1 [0133.937] wcscmp (_String1="..", _String2="..") returned 0 [0133.937] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0133.937] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0133.937] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0133.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d28 [0133.937] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0133.937] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0133.937] wcscat (in: _Dest=0x2fe6d28, _Source="Hx.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" [0141.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0141.358] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0141.359] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0141.359] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0141.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0510 [0141.359] wcscpy (in: _Dest=0x66d0510, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.359] wcscat (in: _Dest=0x66d0510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.359] wcscat (in: _Dest=0x66d0510, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0141.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0141.360] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0141.360] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0141.360] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0141.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f2f0 [0141.361] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.361] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.361] wcscat (in: _Dest=0x3e0f2f0, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0141.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0141.363] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0141.363] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0141.363] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0141.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0588 [0141.363] wcscpy (in: _Dest=0x66d0588, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.363] wcscat (in: _Dest=0x66d0588, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.363] wcscat (in: _Dest=0x66d0588, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0141.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0141.365] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0141.365] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0141.365] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0141.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10bf0 [0141.365] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.365] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.365] wcscat (in: _Dest=0x3e10bf0, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" [0141.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0141.366] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0141.366] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0141.366] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0141.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e11070 [0141.366] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.366] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.367] wcscat (in: _Dest=0x3e11070, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" [0141.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e11070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0141.368] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0141.368] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0141.368] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0141.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0600 [0141.368] wcscpy (in: _Dest=0x66d0600, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.368] wcscat (in: _Dest=0x66d0600, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.368] wcscat (in: _Dest=0x66d0600, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0141.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0141.370] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0141.370] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0141.370] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0141.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3eda478 [0141.370] wcscpy (in: _Dest=0x3eda478, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.370] wcscat (in: _Dest=0x3eda478, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.370] wcscat (in: _Dest=0x3eda478, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0141.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0141.371] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0141.371] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0141.372] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0141.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0678 [0141.372] wcscpy (in: _Dest=0x66d0678, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.372] wcscat (in: _Dest=0x66d0678, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.372] wcscat (in: _Dest=0x66d0678, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0141.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0141.373] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0141.373] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0141.373] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0141.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d06f0 [0141.373] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.373] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.373] wcscat (in: _Dest=0x66d06f0, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0141.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d06f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0141.375] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0141.375] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0141.375] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0141.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb5f8 [0141.375] wcscpy (in: _Dest=0x3edb5f8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.375] wcscat (in: _Dest=0x3edb5f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.376] wcscat (in: _Dest=0x3edb5f8, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0141.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0141.377] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0141.377] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0141.377] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0141.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27360 [0141.377] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.377] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.377] wcscat (in: _Dest=0x3f27360, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0141.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0141.379] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0141.379] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0141.379] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0141.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbaf8 [0141.379] wcscpy (in: _Dest=0x3edbaf8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.379] wcscat (in: _Dest=0x3edbaf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.379] wcscat (in: _Dest=0x3edbaf8, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0141.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0141.380] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0141.380] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0141.380] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0141.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f273e8 [0141.380] wcscpy (in: _Dest=0x3f273e8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.380] wcscat (in: _Dest=0x3f273e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.381] wcscat (in: _Dest=0x3f273e8, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0141.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f273e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0141.382] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0141.382] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0141.382] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0141.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0768 [0141.382] wcscpy (in: _Dest=0x66d0768, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.382] wcscat (in: _Dest=0x66d0768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.382] wcscat (in: _Dest=0x66d0768, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0141.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0141.383] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0141.383] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0141.383] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0141.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d07e0 [0141.384] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.384] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.384] wcscat (in: _Dest=0x66d07e0, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0141.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d07e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0141.386] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0141.386] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0141.386] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0141.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb6f8 [0141.386] wcscpy (in: _Dest=0x3edb6f8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.386] wcscat (in: _Dest=0x3edb6f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.386] wcscat (in: _Dest=0x3edb6f8, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0141.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0141.388] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0141.388] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0141.388] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0141.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0858 [0141.388] wcscpy (in: _Dest=0x66d0858, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.388] wcscat (in: _Dest=0x66d0858, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.388] wcscat (in: _Dest=0x66d0858, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0141.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0141.389] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0141.389] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0141.389] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0141.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d08d0 [0141.389] wcscpy (in: _Dest=0x66d08d0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.389] wcscat (in: _Dest=0x66d08d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.389] wcscat (in: _Dest=0x66d08d0, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" [0141.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d08d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0141.819] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0141.819] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0141.819] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0141.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edbef8 [0141.819] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0141.819] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0141.819] wcscat (in: _Dest=0x3edbef8, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0144.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0144.459] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0144.460] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0144.460] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0144.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb478 [0144.460] wcscpy (in: _Dest=0x3edb478, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.460] wcscat (in: _Dest=0x3edb478, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.460] wcscat (in: _Dest=0x3edb478, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0144.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0144.461] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0144.461] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0144.461] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0144.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee5a8 [0144.461] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.461] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.461] wcscat (in: _Dest=0x66ee5a8, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0144.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0144.462] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0144.462] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0144.462] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0144.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbff8 [0144.462] wcscpy (in: _Dest=0x3edbff8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.463] wcscat (in: _Dest=0x3edbff8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.463] wcscat (in: _Dest=0x3edbff8, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0144.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0144.473] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0144.474] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0144.474] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0144.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef950 [0144.474] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.474] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.474] wcscat (in: _Dest=0x66ef950, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0144.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0144.475] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0144.475] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0144.475] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0144.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edac78 [0144.475] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.475] wcscat (in: _Dest=0x3edac78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.475] wcscat (in: _Dest=0x3edac78, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0144.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0144.476] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0144.476] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0144.476] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0144.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0ab0 [0144.476] wcscpy (in: _Dest=0x66d0ab0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.476] wcscat (in: _Dest=0x66d0ab0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.476] wcscat (in: _Dest=0x66d0ab0, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0144.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0144.477] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0144.477] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0144.477] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0144.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edaff8 [0144.477] wcscpy (in: _Dest=0x3edaff8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.477] wcscat (in: _Dest=0x3edaff8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.477] wcscat (in: _Dest=0x3edaff8, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0144.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edaff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0144.478] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0144.478] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0144.478] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0144.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355200 [0144.479] wcscpy (in: _Dest=0x355200, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.479] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.479] wcscat (in: _Dest=0x355200, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0144.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0144.479] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0144.480] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0144.480] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0144.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3eda4f8 [0144.480] wcscpy (in: _Dest=0x3eda4f8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.480] wcscat (in: _Dest=0x3eda4f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.480] wcscat (in: _Dest=0x3eda4f8, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0144.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0144.481] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0144.481] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0144.481] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0144.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbdf8 [0144.481] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.481] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.481] wcscat (in: _Dest=0x3edbdf8, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0144.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0144.482] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0144.482] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0144.482] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0144.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edbe78 [0144.483] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.483] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.483] wcscat (in: _Dest=0x3edbe78, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0144.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0144.488] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0144.488] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0144.488] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0144.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f0368 [0144.489] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.489] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.489] wcscat (in: _Dest=0x66f0368, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0144.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0144.490] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0144.490] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0144.490] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0144.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3eda878 [0144.490] wcscpy (in: _Dest=0x3eda878, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.490] wcscat (in: _Dest=0x3eda878, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.490] wcscat (in: _Dest=0x3eda878, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0144.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0144.491] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0144.491] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0144.491] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0144.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f03f0 [0144.491] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.491] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.491] wcscat (in: _Dest=0x66f03f0, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0144.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0144.492] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0144.492] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0144.492] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0144.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ba40 [0144.492] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0144.492] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0144.492] wcscat (in: _Dest=0x3d8ba40, _Source="nslist.hxl" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl") returned="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" [0144.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0144.493] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0144.493] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62510) returned 1 [0146.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62560) returned 1 Thread: id = 326 os_tid = 0xe54 [0133.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066a80 [0133.619] wcscpy (in: _Dest=0x3066a80, _Source="C:\\Users\\All Users\\Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0133.619] wcscat (in: _Dest=0x3066a80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\") returned="C:\\Users\\All Users\\Oracle\\" [0133.620] wcscat (in: _Dest=0x3066a80, _Source="*" | out: _Dest="C:\\Users\\All Users\\Oracle\\*") returned="C:\\Users\\All Users\\Oracle\\*" [0133.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0133.620] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0133.620] wcscmp (_String1=".", _String2=".") returned 0 [0133.620] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.620] wcscmp (_String1="..", _String2=".") returned 1 [0133.620] wcscmp (_String1="..", _String2="..") returned 0 [0133.620] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.620] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0133.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0133.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066a80) returned 1 [0133.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067000) returned 1 Thread: id = 327 os_tid = 0xdf8 [0133.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62790 [0133.622] wcscpy (in: _Dest=0x3e62790, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0133.622] wcscat (in: _Dest=0x3e62790, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0133.622] wcscat (in: _Dest=0x3e62790, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\*") returned="C:\\Users\\All Users\\Package Cache\\*" [0133.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0133.622] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0133.980] wcscmp (_String1=".", _String2=".") returned 0 [0133.980] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.980] wcscmp (_String1="..", _String2=".") returned 1 [0133.980] wcscmp (_String1="..", _String2="..") returned 0 [0133.980] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0133.980] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0133.980] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0133.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0133.980] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0133.980] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0133.980] wcscat (in: _Dest=0x3e0d210, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0135.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0135.510] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0135.510] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0135.510] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0135.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eb10 [0135.510] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.510] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.510] wcscat (in: _Dest=0x3e0eb10, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0135.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0135.511] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0135.512] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0135.512] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0135.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c428 [0135.512] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.512] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.512] wcscat (in: _Dest=0x35c428, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0135.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0135.513] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0135.514] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0135.514] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0135.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32b820 [0135.514] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.514] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.514] wcscat (in: _Dest=0x32b820, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0135.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0135.516] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0135.516] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0135.516] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0135.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bc98 [0135.516] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.516] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.516] wcscat (in: _Dest=0x35bc98, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0135.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0135.517] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0135.517] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0135.517] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0135.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0135.517] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.517] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.517] wcscat (in: _Dest=0x35c168, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0135.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0135.519] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0135.519] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0135.519] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0135.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bbe8 [0135.519] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.519] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.519] wcscat (in: _Dest=0x35bbe8, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0135.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0135.520] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0135.520] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0135.520] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0135.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0135.520] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.521] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.521] wcscat (in: _Dest=0x35c378, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0135.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0135.522] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0135.522] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0135.522] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0135.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bea8 [0135.522] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.522] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.522] wcscat (in: _Dest=0x32bea8, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0135.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0135.525] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0135.525] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0135.525] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0135.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d370 [0135.525] wcscpy (in: _Dest=0x32d370, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.525] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.525] wcscat (in: _Dest=0x32d370, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0135.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0135.527] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0135.527] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0135.527] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0135.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35ba88 [0135.527] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0135.527] wcscat (in: _Dest=0x35ba88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0135.527] wcscat (in: _Dest=0x35ba88, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0135.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35ba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0135.529] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0135.529] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0135.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0135.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62790) returned 1 [0135.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e625b0) returned 1 Thread: id = 328 os_tid = 0xe50 [0133.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a10 [0133.623] wcscpy (in: _Dest=0x30b3a10, _Source="C:\\Users\\All Users\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0133.623] wcscat (in: _Dest=0x30b3a10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Start Menu\\") returned="C:\\Users\\All Users\\Start Menu\\" [0133.623] wcscat (in: _Dest=0x30b3a10, _Source="*" | out: _Dest="C:\\Users\\All Users\\Start Menu\\*") returned="C:\\Users\\All Users\\Start Menu\\*" [0133.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0133.623] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0133.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a10) returned 1 [0133.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41978) returned 1 Thread: id = 329 os_tid = 0xde8 [0133.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067000 [0133.625] wcscpy (in: _Dest=0x3067000, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0133.625] wcscat (in: _Dest=0x3067000, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0133.625] wcscat (in: _Dest=0x3067000, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\*") returned="C:\\Users\\All Users\\Sun\\*" [0133.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0133.625] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0133.626] wcscmp (_String1=".", _String2=".") returned 0 [0133.626] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.626] wcscmp (_String1="..", _String2=".") returned 1 [0133.626] wcscmp (_String1="..", _String2="..") returned 0 [0133.626] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0133.626] wcscmp (_String1="Java", _String2=".") returned 1 [0133.626] wcscmp (_String1="Java", _String2="..") returned 1 [0133.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f200 [0133.626] wcscpy (in: _Dest=0x3f1f200, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0133.626] wcscat (in: _Dest=0x3f1f200, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0133.626] wcscat (in: _Dest=0x3f1f200, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0135.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0135.538] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0135.538] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0135.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0135.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067000) returned 1 [0135.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19968) returned 1 Thread: id = 330 os_tid = 0xde4 [0133.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b3938 [0133.627] wcscpy (in: _Dest=0x30b3938, _Source="C:\\Users\\All Users\\Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0133.627] wcscat (in: _Dest=0x30b3938, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Templates\\") returned="C:\\Users\\All Users\\Templates\\" [0133.627] wcscat (in: _Dest=0x30b3938, _Source="*" | out: _Dest="C:\\Users\\All Users\\Templates\\*") returned="C:\\Users\\All Users\\Templates\\*" [0133.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0133.627] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3938) returned 1 [0133.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40da8) returned 1 Thread: id = 331 os_tid = 0xde0 [0133.629] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact")) returned 0x20 [0133.965] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0133.965] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0133.965] GetLastError () returned 0x5 [0133.965] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0133.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 332 os_tid = 0xddc [0133.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f300 [0133.630] wcscpy (in: _Dest=0x3f1f300, _Source="C:\\Users\\Default\\Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0133.630] wcscat (in: _Dest=0x3f1f300, _Source="\\" | out: _Dest="C:\\Users\\Default\\Videos\\") returned="C:\\Users\\Default\\Videos\\" [0133.630] wcscat (in: _Dest=0x3f1f300, _Source="*" | out: _Dest="C:\\Users\\Default\\Videos\\*") returned="C:\\Users\\Default\\Videos\\*" [0133.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0133.630] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0133.994] wcscmp (_String1=".", _String2=".") returned 0 [0133.994] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.994] wcscmp (_String1="..", _String2=".") returned 1 [0133.994] wcscmp (_String1="..", _String2="..") returned 0 [0133.994] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.994] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.994] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.994] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0133.994] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0133.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0133.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f300) returned 1 [0133.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b60) returned 1 Thread: id = 333 os_tid = 0xdec [0133.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0133.631] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0133.631] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0133.631] wcscat (in: _Dest=0x3da5d70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*" [0133.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0133.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0133.631] wcscmp (_String1=".", _String2=".") returned 0 [0133.631] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.631] wcscmp (_String1="..", _String2=".") returned 1 [0133.632] wcscmp (_String1="..", _String2="..") returned 0 [0133.632] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="PRIVAT~1")) returned 1 [0133.632] wcscmp (_String1="PrivateAssemblies", _String2=".") returned 1 [0133.632] wcscmp (_String1="PrivateAssemblies", _String2="..") returned 1 [0133.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d850 [0133.632] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0133.632] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0133.632] wcscat (in: _Dest=0x3e0d850, _Source="PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0135.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0135.449] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0135.450] wcscmp (_String1="PublicAssemblies", _String2=".") returned 1 [0135.450] wcscmp (_String1="PublicAssemblies", _String2="..") returned 1 [0135.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d538 [0135.450] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0135.450] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0135.450] wcscat (in: _Dest=0x32d538, _Source="PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0135.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0135.451] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0135.451] wcscmp (_String1="VSTA", _String2=".") returned 1 [0135.452] wcscmp (_String1="VSTA", _String2="..") returned 1 [0135.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5a70 [0135.452] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0135.452] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0135.452] wcscat (in: _Dest=0x3da5a70, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0135.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0135.453] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0135.454] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0135.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0135.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 [0135.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 334 os_tid = 0xdfc [0133.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59b70 [0133.632] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0133.633] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0133.633] wcscat (in: _Dest=0x3d59b70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*" [0133.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0133.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0133.968] wcscmp (_String1=".", _String2=".") returned 0 [0133.968] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.968] wcscmp (_String1="..", _String2=".") returned 1 [0133.968] wcscmp (_String1="..", _String2="..") returned 0 [0133.968] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0133.968] wcscmp (_String1="Debugger", _String2=".") returned 1 [0133.968] wcscmp (_String1="Debugger", _String2="..") returned 1 [0133.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d538 [0133.968] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0133.968] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0133.968] wcscat (in: _Dest=0x32d538, _Source="Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0134.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0134.675] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0134.675] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0134.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0134.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59b70) returned 1 [0134.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 335 os_tid = 0xdf4 [0133.634] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact")) returned 0x20 [0133.634] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 1 [0133.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb3c [0133.635] GetFileSizeEx (in: hFile=0xb3c, lpFileSize=0xa0dfafc | out: lpFileSize=0xa0dfafc*=68382) returned 1 [0133.635] SetFilePointerEx (in: hFile=0xb3c, liDistanceToMove=0x10b1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.635] ReadFile (in: hFile=0xb3c, lpBuffer=0xa0dfad8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa0dfae8, lpOverlapped=0x0 | out: lpBuffer=0xa0dfad8*, lpNumberOfBytesRead=0xa0dfae8*=0x4, lpOverlapped=0x0) returned 1 [0133.640] SetFilePointerEx (in: hFile=0xb3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0133.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0133.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0133.640] NtQuerySystemTime (in: CurrentTime=0xa0dfa70 | out: CurrentTime=0xa0dfa70*=132482710423116000) returned 0x0 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x14f64788 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x55e34843 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x5db51d25 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0xe9ad081 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x21b6482c [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x2b1f7ba9 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x317c8d9a [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x4ec6f589 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x66a11635 [0133.640] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x60dabd47 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x4669ba26 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0xe6f542e [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x631b9150 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x80fc816 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x1c508100 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x4972fd85 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x6075b2c6 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x6ebf955b [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x24732165 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x36d350b0 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x6ff343ec [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x5c1b0b0 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x5ba4e708 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x2dda0049 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0xa1e2a55 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x43ddf1b2 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x2d0e2827 [0133.641] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x63b676aa [0133.642] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x55ea2c5f [0133.642] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x7c29b31d [0133.642] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x7f32b432 [0133.642] RtlRandomEx (in: Seed=0xa0dfa68 | out: Seed=0xa0dfa68) returned 0x33cc2c0a [0133.656] SetFilePointerEx (in: hFile=0xb3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.656] ReadFile (in: hFile=0xb3c, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa0dfa70, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0xa0dfa70*=0x3c00, lpOverlapped=0x0) returned 1 [0133.657] SetFilePointerEx (in: hFile=0xb3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e611e0 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0133.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6780950 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0133.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0133.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0133.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e611e0) returned 1 [0133.659] WriteFile (in: hFile=0xb3c, lpBuffer=0x6780950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa0dfa70, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesWritten=0xa0dfa70*=0x3c00, lpOverlapped=0x0) returned 1 [0133.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0133.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f100 [0133.662] SetFilePointerEx (in: hFile=0xb3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.662] WriteFile (in: hFile=0xb3c, lpBuffer=0x3d546e8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa0dfaf0, lpOverlapped=0x0 | out: lpBuffer=0x3d546e8*, lpNumberOfBytesWritten=0xa0dfaf0*=0x11c, lpOverlapped=0x0) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d546e8) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f280) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0138.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0138.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ad90 [0138.120] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" [0138.120] wcscat (in: _Dest=0x3f1ad90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.ac3a86" [0138.120] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.ac3a86", NtPathName=0xa0dfa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3557a0 [0138.376] FlushFileBuffers (hFile=0xb3c) returned 1 [0139.052] CloseHandle (hObject=0xb3c) returned 1 [0139.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd448 [0139.419] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.419] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.419] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0xffffffff [0139.419] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb70 [0139.560] WriteFile (in: hFile=0xb70, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa0dfa84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa0dfa84*=0x8b9, lpOverlapped=0x0) returned 1 [0139.579] CloseHandle (hObject=0xb70) returned 1 [0139.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0139.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 336 os_tid = 0xe2c [0133.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact")) returned 0x20 [0138.772] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact", dwFileAttributes=0x20) returned 1 [0139.350] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc58 [0139.351] GetFileSizeEx (in: hFile=0xc58, lpFileSize=0xa14fcec | out: lpFileSize=0xa14fcec*=1259) returned 1 [0139.351] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x4e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.351] ReadFile (in: hFile=0xc58, lpBuffer=0xa14fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa14fcd8, lpOverlapped=0x0 | out: lpBuffer=0xa14fcc8*, lpNumberOfBytesRead=0xa14fcd8*=0x4, lpOverlapped=0x0) returned 1 [0139.354] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0139.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0139.354] NtQuerySystemTime (in: CurrentTime=0xa14fc60 | out: CurrentTime=0xa14fc60*=132482710480212000) returned 0x0 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x29090f68 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0xad1762c [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x104eb7c8 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x54f2ee7d [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0xc339bbf [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x2e6e7226 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x17ec2054 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x7ccd90e3 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x272d94d1 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x69c6e2b0 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x375db07 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x4bf3a2a [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x17a1d4f0 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x215beb89 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x314664fc [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x398bcfbc [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x32fdb0c9 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x205a130 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0xeb66b [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x6b50a87c [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x72e77a68 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x36764332 [0139.354] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x25d64d5f [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x5165b9d8 [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x25ffb595 [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x6536520e [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x7f4d8ed3 [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x118d930b [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x1117d3cb [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x19783e2 [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x338c8fb0 [0139.355] RtlRandomEx (in: Seed=0xa14fc58 | out: Seed=0xa14fc58) returned 0x4d20a9ca [0139.366] ReadFile (in: hFile=0xc58, lpBuffer=0x68a8160, nNumberOfBytesToRead=0x4eb, lpNumberOfBytesRead=0xa14fc54, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0xa14fc54*=0x4eb, lpOverlapped=0x0) returned 1 [0139.366] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.366] WriteFile (in: hFile=0xc58, lpBuffer=0x689cd48*, nNumberOfBytesToWrite=0x4eb, lpNumberOfBytesWritten=0xa14fc58, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesWritten=0xa14fc58*=0x4eb, lpOverlapped=0x0) returned 1 [0139.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0139.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0139.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0139.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689cd48) returned 1 [0139.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0139.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0139.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40e38) returned 1 [0139.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e40e38 [0139.825] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.825] WriteFile (in: hFile=0xc58, lpBuffer=0x3d54938*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xa14fce0, lpOverlapped=0x0 | out: lpBuffer=0x3d54938*, lpNumberOfBytesWritten=0xa14fce0*=0x11e, lpOverlapped=0x0) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54938) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e414b0) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40e38) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0139.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0139.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0139.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cf68 [0139.939] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" [0139.939] wcscat (in: _Dest=0x3f1cf68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.ac3a86" [0139.939] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.ac3a86", NtPathName=0xa14fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd008 [0139.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 [0139.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bc138) returned 1 [0139.989] NtQueryInformationFile (in: FileHandle=0xc58, IoStatusBlock=0xa14fc30, FileInformation=0xa14fc38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa14fc30, FileInformation=0xa14fc38) returned 0x0 [0139.989] NtSetInformationFile (FileHandle=0xc58, IoStatusBlock=0xa14fc30, FileInformation=0xa14fc38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0139.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0139.991] FlushFileBuffers (hFile=0xc58) returned 1 [0139.994] CloseHandle (hObject=0xc58) returned 1 [0139.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d440 [0139.995] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.995] wcscat (in: _Dest=0x3d8d440, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.995] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0x20 [0139.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 [0139.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 337 os_tid = 0xe0c [0133.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact")) returned 0x20 [0138.772] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact", dwFileAttributes=0x20) returned 1 [0139.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc48 [0139.366] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0xa1bfb7c | out: lpFileSize=0xa1bfb7c*=1256) returned 1 [0139.366] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x4e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.366] ReadFile (in: hFile=0xc48, lpBuffer=0xa1bfb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1bfb68, lpOverlapped=0x0 | out: lpBuffer=0xa1bfb58*, lpNumberOfBytesRead=0xa1bfb68*=0x4, lpOverlapped=0x0) returned 1 [0139.369] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0139.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0139.369] NtQuerySystemTime (in: CurrentTime=0xa1bfaf0 | out: CurrentTime=0xa1bfaf0*=132482710480368000) returned 0x0 [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x7443ec33 [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x4c531b7b [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x5136b2c7 [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x7ef72c3d [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x4fceb097 [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x129ee368 [0139.369] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x1c21485b [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x54053b44 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x56ee8f10 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x7eb6ce49 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x6cd87c88 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x3dc6d39d [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0xc8ef494 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x3de5df3e [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x4f080485 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x5de5b301 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x2f70d80e [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x3ab5a05e [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x3be73e18 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x5fb6ebc7 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x30d40271 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x2cad1282 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x6525029 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0xa5ab157 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x1504ff6 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x7d02a8d6 [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x2571c78f [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0xd4598b [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x7111b3fd [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x1a67d14e [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x1de7b03c [0139.370] RtlRandomEx (in: Seed=0xa1bfae8 | out: Seed=0xa1bfae8) returned 0x4ddefb88 [0139.379] ReadFile (in: hFile=0xc48, lpBuffer=0x68a0950, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0xa1bfae4, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesRead=0xa1bfae4*=0x4e8, lpOverlapped=0x0) returned 1 [0139.379] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.380] WriteFile (in: hFile=0xc48, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0xa1bfae8, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0xa1bfae8*=0x4e8, lpOverlapped=0x0) returned 1 [0139.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0139.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a08) returned 1 [0139.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f680 [0139.495] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.495] WriteFile (in: hFile=0xc48, lpBuffer=0x3d54938*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xa1bfb70, lpOverlapped=0x0 | out: lpBuffer=0x3d54938*, lpNumberOfBytesWritten=0xa1bfb70*=0x11a, lpOverlapped=0x0) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54938) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f900) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f680) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0139.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d7d8 [0139.513] wcscpy (in: _Dest=0x3f1d7d8, _Source="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" [0139.513] wcscat (in: _Dest=0x3f1d7d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.ac3a86" [0139.513] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.ac3a86", NtPathName=0xa1bfae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0139.577] FlushFileBuffers (hFile=0xc48) returned 1 [0139.809] CloseHandle (hObject=0xc48) returned 1 [0139.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de68 [0139.906] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.906] wcscat (in: _Dest=0x3d8de68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0x20 [0139.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 [0139.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 Thread: id = 338 os_tid = 0xdd8 [0133.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact")) returned 0x20 [0138.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact", dwFileAttributes=0x20) returned 1 [0139.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc64 [0139.336] GetFileSizeEx (in: hFile=0xc64, lpFileSize=0x9bff89c | out: lpFileSize=0x9bff89c*=1257) returned 1 [0139.336] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x4e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.336] ReadFile (in: hFile=0xc64, lpBuffer=0x9bff878, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bff888, lpOverlapped=0x0 | out: lpBuffer=0x9bff878*, lpNumberOfBytesRead=0x9bff888*=0x4, lpOverlapped=0x0) returned 1 [0139.339] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0139.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0139.339] NtQuerySystemTime (in: CurrentTime=0x9bff810 | out: CurrentTime=0x9bff810*=132482710480056000) returned 0x0 [0139.339] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x7227cb6 [0139.339] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x518b5987 [0139.339] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x5b9aaa63 [0139.339] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x159839f9 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x7a9b4ebf [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x6fbfaa2f [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x2dd333c9 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x2a8de8cf [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x21fe26a2 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x6d714996 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x21b82d5 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x4a96e4d4 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x6d323628 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x5d17d368 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x4cfd9c5a [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x401d4d9e [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x311993c7 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x1b69569c [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x6bb96463 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x1c008dba [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x22281113 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x521541fb [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x7b4bec3e [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x24b34844 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x11e6110a [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x68d5227a [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x184cf346 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x646f7532 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x6d5d0ee8 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x3c3bf911 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x2b9d81f0 [0139.340] RtlRandomEx (in: Seed=0x9bff808 | out: Seed=0x9bff808) returned 0x43c87c89 [0139.350] ReadFile (in: hFile=0xc64, lpBuffer=0x6886518, nNumberOfBytesToRead=0x4e9, lpNumberOfBytesRead=0x9bff804, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesRead=0x9bff804*=0x4e9, lpOverlapped=0x0) returned 1 [0139.350] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.350] WriteFile (in: hFile=0xc64, lpBuffer=0x68a4558*, nNumberOfBytesToWrite=0x4e9, lpNumberOfBytesWritten=0x9bff808, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesWritten=0x9bff808*=0x4e9, lpOverlapped=0x0) returned 1 [0139.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0139.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432f8 [0139.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0139.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0139.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0139.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0139.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e419c0) returned 1 [0139.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e419c0 [0139.827] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.827] WriteFile (in: hFile=0xc64, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x9bff890, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0x9bff890*=0x11e, lpOverlapped=0x0) returned 1 [0139.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60e38) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e419c0) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0139.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0139.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d760 [0139.943] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" [0139.943] wcscat (in: _Dest=0x3f1d760, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.ac3a86" [0139.943] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.ac3a86", NtPathName=0x9bff808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd098 [0139.993] FlushFileBuffers (hFile=0xc64) returned 1 [0139.997] CloseHandle (hObject=0xc64) returned 1 [0139.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d440 [0139.997] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.997] wcscat (in: _Dest=0x3d8d440, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0x20 [0139.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 [0139.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3648c0) returned 1 Thread: id = 339 os_tid = 0xe28 [0133.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact")) returned 0x20 [0138.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact", dwFileAttributes=0x20) returned 1 [0139.318] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc3c [0139.318] GetFileSizeEx (in: hFile=0xc3c, lpFileSize=0x8b5f864 | out: lpFileSize=0x8b5f864*=1265) returned 1 [0139.319] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.319] ReadFile (in: hFile=0xc3c, lpBuffer=0x8b5f840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b5f850, lpOverlapped=0x0 | out: lpBuffer=0x8b5f840*, lpNumberOfBytesRead=0x8b5f850*=0x4, lpOverlapped=0x0) returned 1 [0139.322] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4380 [0139.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0139.322] NtQuerySystemTime (in: CurrentTime=0x8b5f7d8 | out: CurrentTime=0x8b5f7d8*=132482710479900000) returned 0x0 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x738aef9a [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x7df08a9e [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x3e4873b5 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x63ecd860 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x5c9c4bf0 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x33a2cc74 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x7029c231 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x49bda20b [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x10040f55 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x6f345f28 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x7a4810d6 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x5d00e5cc [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x438c981e [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x56b6922d [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x55905f79 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0xbb88b58 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x17470faa [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x842a14b [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x6377951a [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x215ec4d5 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x6b64eaf6 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x51e4b261 [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x65a2d5fc [0139.322] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x56af9175 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x90ce605 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x6e936892 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x39a2a570 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x26bf7f63 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x71d9664d [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x5a10ccc9 [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x2661bdaa [0139.323] RtlRandomEx (in: Seed=0x8b5f7d0 | out: Seed=0x8b5f7d0) returned 0x2c8faeee [0139.335] ReadFile (in: hFile=0xc3c, lpBuffer=0x6882910, nNumberOfBytesToRead=0x4f1, lpNumberOfBytesRead=0x8b5f7cc, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0x8b5f7cc*=0x4f1, lpOverlapped=0x0) returned 1 [0139.336] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.336] WriteFile (in: hFile=0xc3c, lpBuffer=0x687b100*, nNumberOfBytesToWrite=0x4f1, lpNumberOfBytesWritten=0x8b5f7d0, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesWritten=0x8b5f7d0*=0x4f1, lpOverlapped=0x0) returned 1 [0139.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0139.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0139.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687b100) returned 1 [0139.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6882910) returned 1 [0139.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0139.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41540) returned 1 [0139.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e41540 [0139.484] SetFilePointerEx (in: hFile=0xc3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.484] WriteFile (in: hFile=0xc3c, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x8b5f858, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0x8b5f858*=0x11e, lpOverlapped=0x0) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0139.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0139.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41540) returned 1 [0139.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0139.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0139.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0139.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0139.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0139.510] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" [0139.510] wcscat (in: _Dest=0x3f1da30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.ac3a86" [0139.510] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.ac3a86", NtPathName=0x8b5f7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcca8 [0139.573] FlushFileBuffers (hFile=0xc3c) returned 1 [0139.808] CloseHandle (hObject=0xc3c) returned 1 [0139.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de68 [0139.903] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.903] wcscat (in: _Dest=0x3d8de68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0x20 [0139.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 [0139.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3649a0) returned 1 Thread: id = 340 os_tid = 0xe24 [0133.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact")) returned 0x20 [0135.788] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact", dwFileAttributes=0x20) returned 1 [0137.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x115c [0137.241] GetFileSizeEx (in: hFile=0x115c, lpFileSize=0xa25fafc | out: lpFileSize=0xa25fafc*=1267) returned 1 [0137.241] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x4ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.241] ReadFile (in: hFile=0x115c, lpBuffer=0xa25fad8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa25fae8, lpOverlapped=0x0 | out: lpBuffer=0xa25fad8*, lpNumberOfBytesRead=0xa25fae8*=0x4, lpOverlapped=0x0) returned 1 [0137.247] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0137.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0137.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.247] NtQuerySystemTime (in: CurrentTime=0xa25fa70 | out: CurrentTime=0xa25fa70*=132482710459152000) returned 0x0 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x57dc240d [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x67e1f0b6 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x50a3e112 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x297b3ee8 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x2aab8716 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x7df69fdf [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x756c329a [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x7ffba204 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x76e84102 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x7a5f9488 [0137.247] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x592a3be4 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x393749bd [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x8c285c6 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x492a73bd [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0xfd95226 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x5b70a2a3 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x79bf6f3e [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0xfc91ba2 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x249ef1f3 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x55835268 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x536e826b [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x88bace1 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x4d8c0fe1 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x1987ad68 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x29107d01 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x150cccd2 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x2984acf8 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x61c61cf3 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x7297dd5e [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x36913697 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x22bd1ae0 [0137.248] RtlRandomEx (in: Seed=0xa25fa68 | out: Seed=0xa25fa68) returned 0x7401fdfb [0137.260] ReadFile (in: hFile=0x115c, lpBuffer=0x6828160, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0xa25fa64, lpOverlapped=0x0 | out: lpBuffer=0x6828160*, lpNumberOfBytesRead=0xa25fa64*=0x4f3, lpOverlapped=0x0) returned 1 [0137.261] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.261] WriteFile (in: hFile=0x115c, lpBuffer=0x682bd68*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0xa25fa68, lpOverlapped=0x0 | out: lpBuffer=0x682bd68*, lpNumberOfBytesWritten=0xa25fa68*=0x4f3, lpOverlapped=0x0) returned 1 [0137.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0137.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0137.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd68) returned 1 [0137.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828160) returned 1 [0137.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e32958 [0137.264] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.264] WriteFile (in: hFile=0x115c, lpBuffer=0x30413a8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xa25faf0, lpOverlapped=0x0 | out: lpBuffer=0x30413a8*, lpNumberOfBytesWritten=0xa25faf0*=0x120, lpOverlapped=0x0) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e329e8) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0137.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0137.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10e70 [0137.266] wcscpy (in: _Dest=0x3e10e70, _Source="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" [0137.266] wcscat (in: _Dest=0x3e10e70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.ac3a86") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.ac3a86" [0137.266] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.ac3a86", NtPathName=0xa25fa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbc58 [0138.371] FlushFileBuffers (hFile=0x115c) returned 1 [0139.051] CloseHandle (hObject=0x115c) returned 1 [0139.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e828 [0139.538] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0139.538] wcscat (in: _Dest=0x3d8e828, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" [0139.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\ac3a86-readme.txt")) returned 0x20 [0139.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0139.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364a80) returned 1 Thread: id = 341 os_tid = 0xe20 [0133.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ccf0 [0133.670] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0133.670] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0133.670] wcscat (in: _Dest=0x3d8ccf0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\*" [0133.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0133.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0133.674] wcscmp (_String1=".", _String2=".") returned 0 [0133.674] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.674] wcscmp (_String1="..", _String2=".") returned 1 [0133.674] wcscmp (_String1="..", _String2="..") returned 0 [0133.674] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1 [0133.675] wcscmp (_String1="58.0.3029.110", _String2=".") returned 1 [0133.675] wcscmp (_String1="58.0.3029.110", _String2="..") returned 1 [0133.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5af0 [0133.675] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0133.675] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0133.675] wcscat (in: _Dest=0x3da5af0, _Source="58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0141.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0141.180] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf8c1abb6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0xee558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0141.180] wcscmp (_String1="chrome.exe", _String2=".") returned 1 [0141.180] wcscmp (_String1="chrome.exe", _String2="..") returned 1 [0141.180] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0141.180] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2=".") returned 1 [0141.181] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2="..") returned 1 [0141.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c770 [0141.181] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0141.181] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0141.181] wcscat (in: _Dest=0x3e5c770, _Source="chrome.VisualElementsManifest.xml" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml") returned="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" [0141.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0141.182] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0141.182] wcscmp (_String1="SetupMetrics", _String2=".") returned 1 [0141.182] wcscmp (_String1="SetupMetrics", _String2="..") returned 1 [0141.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0141.182] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0141.182] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0141.182] wcscat (in: _Dest=0x3f1b240, _Source="SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0141.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0141.184] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0141.184] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0141.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0141.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 Thread: id = 342 os_tid = 0xe18 [0133.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e627e0 [0133.676] wcscpy (in: _Dest=0x3e627e0, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0133.676] wcscat (in: _Dest=0x3e627e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0133.676] wcscat (in: _Dest=0x3e627e0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\*" [0133.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0133.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0133.976] wcscmp (_String1=".", _String2=".") returned 0 [0133.977] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.744] wcscmp (_String1="..", _String2=".") returned 1 [0134.744] wcscmp (_String1="..", _String2="..") returned 0 [0134.744] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0134.744] wcscmp (_String1="awt.dll", _String2=".") returned 1 [0134.744] wcscmp (_String1="awt.dll", _String2="..") returned 1 [0134.744] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0134.744] wcscmp (_String1="axbridge.dll", _String2=".") returned 1 [0134.744] wcscmp (_String1="axbridge.dll", _String2="..") returned 1 [0134.745] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0134.745] wcscmp (_String1="client", _String2=".") returned 1 [0134.745] wcscmp (_String1="client", _String2="..") returned 1 [0134.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7d30 [0134.745] wcscpy (in: _Dest=0x3ef7d30, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0134.745] wcscat (in: _Dest=0x3ef7d30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0134.745] wcscat (in: _Dest=0x3ef7d30, _Source="client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0141.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0141.133] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0141.133] wcscmp (_String1="dcpr.dll", _String2=".") returned 1 [0141.133] wcscmp (_String1="dcpr.dll", _String2="..") returned 1 [0141.133] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0141.134] wcscmp (_String1="decora-sse.dll", _String2=".") returned 1 [0141.134] wcscmp (_String1="decora-sse.dll", _String2="..") returned 1 [0141.134] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0141.134] wcscmp (_String1="deploy.dll", _String2=".") returned 1 [0141.134] wcscmp (_String1="deploy.dll", _String2="..") returned 1 [0141.134] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0141.134] wcscmp (_String1="dtplugin", _String2=".") returned 1 [0141.134] wcscmp (_String1="dtplugin", _String2="..") returned 1 [0141.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4ca8 [0141.134] wcscpy (in: _Dest=0x66d4ca8, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0141.134] wcscat (in: _Dest=0x66d4ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0141.134] wcscat (in: _Dest=0x66d4ca8, _Source="dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0141.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0141.136] wcscmp (_String1="dt_shmem.dll", _String2=".") returned 1 [0141.136] wcscmp (_String1="dt_shmem.dll", _String2="..") returned 1 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0141.136] wcscmp (_String1="dt_socket.dll", _String2=".") returned 1 [0141.136] wcscmp (_String1="dt_socket.dll", _String2="..") returned 1 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0141.136] wcscmp (_String1="eula.dll", _String2=".") returned 1 [0141.136] wcscmp (_String1="eula.dll", _String2="..") returned 1 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0141.136] wcscmp (_String1="fontmanager.dll", _String2=".") returned 1 [0141.136] wcscmp (_String1="fontmanager.dll", _String2="..") returned 1 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0141.136] wcscmp (_String1="fxplugins.dll", _String2=".") returned 1 [0141.136] wcscmp (_String1="fxplugins.dll", _String2="..") returned 1 [0141.136] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0141.137] wcscmp (_String1="glass.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="glass.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0141.137] wcscmp (_String1="glib-lite.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="glib-lite.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0141.137] wcscmp (_String1="gstreamer-lite.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="gstreamer-lite.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0141.137] wcscmp (_String1="hprof.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="hprof.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0141.137] wcscmp (_String1="installer.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="installer.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0141.137] wcscmp (_String1="instrument.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="instrument.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0141.137] wcscmp (_String1="j2pcsc.dll", _String2=".") returned 1 [0141.137] wcscmp (_String1="j2pcsc.dll", _String2="..") returned 1 [0141.137] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0141.137] wcscmp (_String1="j2pkcs11.dll", _String2=".") returned 1 [0141.138] wcscmp (_String1="j2pkcs11.dll", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0141.138] wcscmp (_String1="jaas_nt.dll", _String2=".") returned 1 [0141.138] wcscmp (_String1="jaas_nt.dll", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0141.138] wcscmp (_String1="jabswitch.exe", _String2=".") returned 1 [0141.138] wcscmp (_String1="jabswitch.exe", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0141.138] wcscmp (_String1="java-rmi.exe", _String2=".") returned 1 [0141.138] wcscmp (_String1="java-rmi.exe", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0141.138] wcscmp (_String1="java.dll", _String2=".") returned 1 [0141.138] wcscmp (_String1="java.dll", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0141.138] wcscmp (_String1="java.exe", _String2=".") returned 1 [0141.138] wcscmp (_String1="java.exe", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge.dll", cAlternateFileName="JAVAAC~2.DLL")) returned 1 [0141.138] wcscmp (_String1="JavaAccessBridge.dll", _String2=".") returned 1 [0141.138] wcscmp (_String1="JavaAccessBridge.dll", _String2="..") returned 1 [0141.138] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0141.138] wcscmp (_String1="javacpl.exe", _String2=".") returned 1 [0141.138] wcscmp (_String1="javacpl.exe", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0141.139] wcscmp (_String1="javafx-font.dll", _String2=".") returned 1 [0141.139] wcscmp (_String1="javafx-font.dll", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0141.139] wcscmp (_String1="javafx-iio.dll", _String2=".") returned 1 [0141.139] wcscmp (_String1="javafx-iio.dll", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0141.139] wcscmp (_String1="javaw.exe", _String2=".") returned 1 [0141.139] wcscmp (_String1="javaw.exe", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0141.139] wcscmp (_String1="javaws.exe", _String2=".") returned 1 [0141.139] wcscmp (_String1="javaws.exe", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0141.139] wcscmp (_String1="java_crw_demo.dll", _String2=".") returned 1 [0141.139] wcscmp (_String1="java_crw_demo.dll", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0141.139] wcscmp (_String1="jawt.dll", _String2=".") returned 1 [0141.139] wcscmp (_String1="jawt.dll", _String2="..") returned 1 [0141.139] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge.dll", cAlternateFileName="JAWTAC~2.DLL")) returned 1 [0141.145] wcscmp (_String1="JAWTAccessBridge.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="JAWTAccessBridge.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="JdbcOdbc.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="JdbcOdbc.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="jdwp.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jdwp.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="jfr.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jfr.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="jfxmedia.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jfxmedia.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0141.145] wcscmp (_String1="jfxwebkit.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jfxwebkit.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="jli.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jli.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0141.145] wcscmp (_String1="jp2iexp.dll", _String2=".") returned 1 [0141.145] wcscmp (_String1="jp2iexp.dll", _String2="..") returned 1 [0141.145] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0141.145] wcscmp (_String1="jp2launcher.exe", _String2=".") returned 1 [0141.146] wcscmp (_String1="jp2launcher.exe", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0141.146] wcscmp (_String1="jp2native.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jp2native.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jp2ssv.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jp2ssv.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpeg.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpeg.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpicom.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpicom.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpiexp.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpiexp.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpinscp.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpinscp.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpioji.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpioji.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jpishare.dll", _String2=".") returned 1 [0141.146] wcscmp (_String1="jpishare.dll", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0141.146] wcscmp (_String1="jqs.exe", _String2=".") returned 1 [0141.146] wcscmp (_String1="jqs.exe", _String2="..") returned 1 [0141.146] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="jsdt.dll", _String2=".") returned 1 [0141.147] wcscmp (_String1="jsdt.dll", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="jsound.dll", _String2=".") returned 1 [0141.147] wcscmp (_String1="jsound.dll", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="jsoundds.dll", _String2=".") returned 1 [0141.147] wcscmp (_String1="jsoundds.dll", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="kcms.dll", _String2=".") returned 1 [0141.147] wcscmp (_String1="kcms.dll", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="keytool.exe", _String2=".") returned 1 [0141.147] wcscmp (_String1="keytool.exe", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="kinit.exe", _String2=".") returned 1 [0141.147] wcscmp (_String1="kinit.exe", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="klist.exe", _String2=".") returned 1 [0141.147] wcscmp (_String1="klist.exe", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="ktab.exe", _String2=".") returned 1 [0141.147] wcscmp (_String1="ktab.exe", _String2="..") returned 1 [0141.147] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0141.147] wcscmp (_String1="libxml2.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="libxml2.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0141.148] wcscmp (_String1="libxslt.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="libxslt.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0141.148] wcscmp (_String1="management.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="management.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0141.148] wcscmp (_String1="mlib_image.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="mlib_image.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0141.148] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0141.148] wcscmp (_String1="net.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="net.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0141.148] wcscmp (_String1="nio.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="nio.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0141.148] wcscmp (_String1="npjpi170_45.dll", _String2=".") returned 1 [0141.148] wcscmp (_String1="npjpi170_45.dll", _String2="..") returned 1 [0141.148] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0141.150] wcscmp (_String1="npoji610.dll", _String2=".") returned 1 [0141.150] wcscmp (_String1="npoji610.dll", _String2="..") returned 1 [0141.150] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0141.150] wcscmp (_String1="npt.dll", _String2=".") returned 1 [0141.150] wcscmp (_String1="npt.dll", _String2="..") returned 1 [0141.150] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0141.150] wcscmp (_String1="orbd.exe", _String2=".") returned 1 [0141.150] wcscmp (_String1="orbd.exe", _String2="..") returned 1 [0141.150] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0141.150] wcscmp (_String1="pack200.exe", _String2=".") returned 1 [0141.150] wcscmp (_String1="pack200.exe", _String2="..") returned 1 [0141.150] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0141.150] wcscmp (_String1="plugin2", _String2=".") returned 1 [0141.150] wcscmp (_String1="plugin2", _String2="..") returned 1 [0141.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4d00 [0141.151] wcscpy (in: _Dest=0x66d4d00, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0141.151] wcscat (in: _Dest=0x66d4d00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0141.151] wcscat (in: _Dest=0x66d4d00, _Source="plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0148.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0148.452] wcscmp (_String1="policytool.exe", _String2=".") returned 1 [0148.452] wcscmp (_String1="policytool.exe", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0148.452] wcscmp (_String1="prism-d3d.dll", _String2=".") returned 1 [0148.452] wcscmp (_String1="prism-d3d.dll", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0148.452] wcscmp (_String1="rmid.exe", _String2=".") returned 1 [0148.452] wcscmp (_String1="rmid.exe", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0148.452] wcscmp (_String1="rmiregistry.exe", _String2=".") returned 1 [0148.452] wcscmp (_String1="rmiregistry.exe", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0148.452] wcscmp (_String1="servertool.exe", _String2=".") returned 1 [0148.452] wcscmp (_String1="servertool.exe", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0148.452] wcscmp (_String1="splashscreen.dll", _String2=".") returned 1 [0148.452] wcscmp (_String1="splashscreen.dll", _String2="..") returned 1 [0148.452] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="ssv.dll", _String2=".") returned 1 [0148.453] wcscmp (_String1="ssv.dll", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="ssvagent.exe", _String2=".") returned 1 [0148.453] wcscmp (_String1="ssvagent.exe", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="sunec.dll", _String2=".") returned 1 [0148.453] wcscmp (_String1="sunec.dll", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0148.453] wcscmp (_String1="sunmscapi.dll", _String2=".") returned 1 [0148.453] wcscmp (_String1="sunmscapi.dll", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="t2k.dll", _String2=".") returned 1 [0148.453] wcscmp (_String1="t2k.dll", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0148.453] wcscmp (_String1="tnameserv.exe", _String2=".") returned 1 [0148.453] wcscmp (_String1="tnameserv.exe", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="unpack.dll", _String2=".") returned 1 [0148.453] wcscmp (_String1="unpack.dll", _String2="..") returned 1 [0148.453] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0148.454] wcscmp (_String1="unpack200.exe", _String2=".") returned 1 [0148.454] wcscmp (_String1="unpack200.exe", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0148.454] wcscmp (_String1="verify.dll", _String2=".") returned 1 [0148.454] wcscmp (_String1="verify.dll", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0148.454] wcscmp (_String1="w2k_lsa_auth.dll", _String2=".") returned 1 [0148.454] wcscmp (_String1="w2k_lsa_auth.dll", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x171a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1 [0148.454] wcscmp (_String1="WindowsAccessBridge.dll", _String2=".") returned 1 [0148.454] wcscmp (_String1="WindowsAccessBridge.dll", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0148.454] wcscmp (_String1="wsdetect.dll", _String2=".") returned 1 [0148.454] wcscmp (_String1="wsdetect.dll", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0148.454] wcscmp (_String1="zip.dll", _String2=".") returned 1 [0148.454] wcscmp (_String1="zip.dll", _String2="..") returned 1 [0148.454] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0148.454] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0148.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0148.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e627e0) returned 1 [0148.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e8e0) returned 1 Thread: id = 343 os_tid = 0xe74 [0133.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright")) returned 0x20 [0134.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0134.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.756] GetLastError () returned 0x5 [0134.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0134.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03458) returned 1 Thread: id = 344 os_tid = 0xdc4 [0133.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62830 [0133.686] wcscpy (in: _Dest=0x3e62830, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0133.686] wcscat (in: _Dest=0x3e62830, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0133.686] wcscat (in: _Dest=0x3e62830, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\*" [0133.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0133.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0135.788] wcscmp (_String1=".", _String2=".") returned 0 [0135.788] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.193] wcscmp (_String1="..", _String2=".") returned 1 [0138.193] wcscmp (_String1="..", _String2="..") returned 0 [0138.193] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0138.194] wcscmp (_String1="accessibility.properties", _String2=".") returned 1 [0138.194] wcscmp (_String1="accessibility.properties", _String2="..") returned 1 [0138.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d512f0 [0138.194] wcscpy (in: _Dest=0x3d512f0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.194] wcscat (in: _Dest=0x3d512f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.194] wcscat (in: _Dest=0x3d512f0, _Source="accessibility.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" [0148.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d512f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0148.460] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0148.460] wcscmp (_String1="alt-rt.jar", _String2=".") returned 1 [0148.460] wcscmp (_String1="alt-rt.jar", _String2="..") returned 1 [0148.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0c68 [0148.460] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.460] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.460] wcscat (in: _Dest=0x2fe0c68, _Source="alt-rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" [0148.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0148.461] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0148.461] wcscmp (_String1="applet", _String2=".") returned 1 [0148.461] wcscmp (_String1="applet", _String2="..") returned 1 [0148.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7548 [0148.462] wcscpy (in: _Dest=0x3ef7548, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.462] wcscat (in: _Dest=0x3ef7548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.462] wcscat (in: _Dest=0x3ef7548, _Source="applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0148.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0148.463] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0148.463] wcscmp (_String1="calendars.properties", _String2=".") returned 1 [0148.463] wcscmp (_String1="calendars.properties", _String2="..") returned 1 [0148.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5808 [0148.463] wcscpy (in: _Dest=0x66e5808, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.463] wcscat (in: _Dest=0x66e5808, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.463] wcscat (in: _Dest=0x66e5808, _Source="calendars.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" [0148.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0148.464] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6970fd00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6970fd00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69782120, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0148.464] wcscmp (_String1="charsets.jar", _String2=".") returned 1 [0148.464] wcscmp (_String1="charsets.jar", _String2="..") returned 1 [0148.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6cc8 [0148.464] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.465] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.465] wcscat (in: _Dest=0x2fe6cc8, _Source="charsets.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" [0148.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0148.466] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0148.466] wcscmp (_String1="classlist", _String2=".") returned 1 [0148.466] wcscmp (_String1="classlist", _String2="..") returned 1 [0148.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe3c08 [0148.466] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.466] wcscat (in: _Dest=0x2fe3c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.466] wcscat (in: _Dest=0x2fe3c08, _Source="classlist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\classlist") returned="C:\\Program Files\\Java\\jre7\\lib\\classlist" [0148.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe3c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0148.468] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0148.468] wcscmp (_String1="cmm", _String2=".") returned 1 [0148.468] wcscmp (_String1="cmm", _String2="..") returned 1 [0148.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e627e0 [0148.468] wcscpy (in: _Dest=0x3e627e0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.468] wcscat (in: _Dest=0x3e627e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.468] wcscat (in: _Dest=0x3e627e0, _Source="cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0148.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e627e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0148.469] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0148.469] wcscmp (_String1="content-types.properties", _String2=".") returned 1 [0148.469] wcscmp (_String1="content-types.properties", _String2="..") returned 1 [0148.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0148.469] wcscpy (in: _Dest=0x3f1aef8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.469] wcscat (in: _Dest=0x3f1aef8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.469] wcscat (in: _Dest=0x3f1aef8, _Source="content-types.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" [0148.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0148.471] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0148.471] wcscmp (_String1="currency.data", _String2=".") returned 1 [0148.471] wcscmp (_String1="currency.data", _String2="..") returned 1 [0148.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8be50 [0148.471] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.471] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.471] wcscat (in: _Dest=0x3d8be50, _Source="currency.data" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\currency.data") returned="C:\\Program Files\\Java\\jre7\\lib\\currency.data" [0148.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0148.472] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0148.472] wcscmp (_String1="deploy", _String2=".") returned 1 [0148.472] wcscmp (_String1="deploy", _String2="..") returned 1 [0148.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7de0 [0148.472] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.472] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.472] wcscat (in: _Dest=0x3ef7de0, _Source="deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0148.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0148.474] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697a8280, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x697a8280, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6988cac0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0148.474] wcscmp (_String1="deploy.jar", _String2=".") returned 1 [0148.474] wcscmp (_String1="deploy.jar", _String2="..") returned 1 [0148.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f08 [0148.474] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.474] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.474] wcscat (in: _Dest=0x2fe6f08, _Source="deploy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" [0148.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0148.475] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0148.475] wcscmp (_String1="ext", _String2=".") returned 1 [0148.475] wcscmp (_String1="ext", _String2="..") returned 1 [0148.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61a70 [0148.475] wcscpy (in: _Dest=0x3e61a70, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.475] wcscat (in: _Dest=0x3e61a70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.475] wcscat (in: _Dest=0x3e61a70, _Source="ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0148.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0148.477] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0148.477] wcscmp (_String1="flavormap.properties", _String2=".") returned 1 [0148.477] wcscmp (_String1="flavormap.properties", _String2="..") returned 1 [0148.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f78 [0148.477] wcscpy (in: _Dest=0x66e5f78, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.477] wcscat (in: _Dest=0x66e5f78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.477] wcscat (in: _Dest=0x66e5f78, _Source="flavormap.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" [0148.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0148.478] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0148.479] wcscmp (_String1="fontconfig.bfc", _String2=".") returned 1 [0148.479] wcscmp (_String1="fontconfig.bfc", _String2="..") returned 1 [0148.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bf20 [0148.479] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.479] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.479] wcscat (in: _Dest=0x3d8bf20, _Source="fontconfig.bfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" [0148.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0148.480] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0148.480] wcscmp (_String1="fontconfig.properties.src", _String2=".") returned 1 [0148.480] wcscmp (_String1="fontconfig.properties.src", _String2="..") returned 1 [0148.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e096b0 [0148.480] wcscpy (in: _Dest=0x3e096b0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.480] wcscat (in: _Dest=0x3e096b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.480] wcscat (in: _Dest=0x3e096b0, _Source="fontconfig.properties.src" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" [0148.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e096b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0148.482] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0148.482] wcscmp (_String1="fonts", _String2=".") returned 1 [0148.482] wcscmp (_String1="fonts", _String2="..") returned 1 [0148.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7650 [0148.482] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.482] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.482] wcscat (in: _Dest=0x3ef7650, _Source="fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0148.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0148.483] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0148.483] wcscmp (_String1="i386", _String2=".") returned 1 [0148.483] wcscmp (_String1="i386", _String2="..") returned 1 [0148.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61d90 [0148.483] wcscpy (in: _Dest=0x3e61d90, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.483] wcscat (in: _Dest=0x3e61d90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.483] wcscat (in: _Dest=0x3e61d90, _Source="i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0148.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e61d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0148.485] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0148.485] wcscmp (_String1="images", _String2=".") returned 1 [0148.485] wcscmp (_String1="images", _String2="..") returned 1 [0148.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7b20 [0148.485] wcscpy (in: _Dest=0x3ef7b20, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.485] wcscat (in: _Dest=0x3ef7b20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.485] wcscat (in: _Dest=0x3ef7b20, _Source="images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0148.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0148.486] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0148.487] wcscmp (_String1="javafx.properties", _String2=".") returned 1 [0148.487] wcscmp (_String1="javafx.properties", _String2="..") returned 1 [0148.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e6138 [0148.487] wcscpy (in: _Dest=0x66e6138, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.487] wcscat (in: _Dest=0x66e6138, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.487] wcscat (in: _Dest=0x66e6138, _Source="javafx.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" [0148.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e6138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0148.488] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6988cac0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6988cac0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x698b2c20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0148.488] wcscmp (_String1="javaws.jar", _String2=".") returned 1 [0148.488] wcscmp (_String1="javaws.jar", _String2="..") returned 1 [0148.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6548 [0148.488] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.488] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.488] wcscat (in: _Dest=0x2fe6548, _Source="javaws.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" [0148.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0148.490] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0148.490] wcscmp (_String1="jce.jar", _String2=".") returned 1 [0148.490] wcscmp (_String1="jce.jar", _String2="..") returned 1 [0148.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7e90 [0148.490] wcscpy (in: _Dest=0x3ef7e90, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.490] wcscat (in: _Dest=0x3ef7e90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.490] wcscat (in: _Dest=0x3ef7e90, _Source="jce.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jce.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" [0148.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0148.492] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0148.492] wcscmp (_String1="jfr", _String2=".") returned 1 [0148.492] wcscmp (_String1="jfr", _String2="..") returned 1 [0148.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62600 [0148.492] wcscpy (in: _Dest=0x3e62600, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.492] wcscat (in: _Dest=0x3e62600, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.492] wcscat (in: _Dest=0x3e62600, _Source="jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0148.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0148.494] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0148.494] wcscmp (_String1="jfr.jar", _String2=".") returned 1 [0148.494] wcscmp (_String1="jfr.jar", _String2="..") returned 1 [0148.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7c28 [0148.494] wcscpy (in: _Dest=0x3ef7c28, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.494] wcscat (in: _Dest=0x3ef7c28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.494] wcscat (in: _Dest=0x3ef7c28, _Source="jfr.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" [0148.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0148.495] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69997460, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69997460, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0148.495] wcscmp (_String1="jfxrt.jar", _String2=".") returned 1 [0148.495] wcscmp (_String1="jfxrt.jar", _String2="..") returned 1 [0148.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6908 [0148.495] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.495] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.495] wcscat (in: _Dest=0x2fe6908, _Source="jfxrt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" [0148.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0148.496] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69925040, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69925040, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6994b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0148.496] wcscmp (_String1="jsse.jar", _String2=".") returned 1 [0148.497] wcscmp (_String1="jsse.jar", _String2="..") returned 1 [0148.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7cd8 [0148.497] wcscpy (in: _Dest=0x3ef7cd8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0148.497] wcscat (in: _Dest=0x3ef7cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0148.497] wcscat (in: _Dest=0x3ef7cd8, _Source="jsse.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" [0148.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0149.393] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8e3c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67f8e3c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0149.393] wcscmp (_String1="jvm.hprof.txt", _String2=".") returned 1 [0149.393] wcscmp (_String1="jvm.hprof.txt", _String2="..") returned 1 [0149.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd448 [0149.393] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0149.393] wcscat (in: _Dest=0x66cd448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0149.393] wcscat (in: _Dest=0x66cd448, _Source="jvm.hprof.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt") returned="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" [0151.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0151.570] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fb4520, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0151.570] wcscmp (_String1="logging.properties", _String2=".") returned 1 [0151.570] wcscmp (_String1="logging.properties", _String2="..") returned 1 [0151.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23df0 [0151.570] wcscpy (in: _Dest=0x3f23df0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.570] wcscat (in: _Dest=0x3f23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.570] wcscat (in: _Dest=0x3f23df0, _Source="logging.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\logging.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" [0151.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0151.571] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0151.571] wcscmp (_String1="management", _String2=".") returned 1 [0151.571] wcscmp (_String1="management", _String2="..") returned 1 [0151.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe65a8 [0151.571] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.571] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.571] wcscat (in: _Dest=0x2fe65a8, _Source="management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0151.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0151.572] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0151.572] wcscmp (_String1="management-agent.jar", _String2=".") returned 1 [0151.572] wcscmp (_String1="management-agent.jar", _String2="..") returned 1 [0151.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23bc0 [0151.572] wcscpy (in: _Dest=0x3f23bc0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.573] wcscat (in: _Dest=0x3f23bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.573] wcscat (in: _Dest=0x3f23bc0, _Source="management-agent.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" [0151.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0151.574] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0151.574] wcscmp (_String1="meta-index", _String2=".") returned 1 [0151.574] wcscmp (_String1="meta-index", _String2="..") returned 1 [0151.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0151.574] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.574] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.574] wcscat (in: _Dest=0x2fe6cc8, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\meta-index" [0151.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0151.575] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6804caa0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6804caa0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0151.575] wcscmp (_String1="net.properties", _String2=".") returned 1 [0151.575] wcscmp (_String1="net.properties", _String2="..") returned 1 [0151.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x2fce100 [0151.575] wcscpy (in: _Dest=0x2fce100, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.575] wcscat (in: _Dest=0x2fce100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.575] wcscat (in: _Dest=0x2fce100, _Source="net.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\net.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\net.properties" [0151.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fce100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0151.576] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698d8d80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x698d8d80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69925040, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0151.576] wcscmp (_String1="plugin.jar", _String2=".") returned 1 [0151.576] wcscmp (_String1="plugin.jar", _String2="..") returned 1 [0151.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f08 [0151.576] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.576] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.576] wcscat (in: _Dest=0x2fe6f08, _Source="plugin.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" [0151.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0151.578] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0151.578] wcscmp (_String1="psfont.properties.ja", _String2=".") returned 1 [0151.578] wcscmp (_String1="psfont.properties.ja", _String2="..") returned 1 [0151.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23a00 [0151.578] wcscpy (in: _Dest=0x3f23a00, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.578] wcscat (in: _Dest=0x3f23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.578] wcscat (in: _Dest=0x3f23a00, _Source="psfont.properties.ja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja") returned="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" [0151.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0151.579] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0151.579] wcscmp (_String1="psfontj2d.properties", _String2=".") returned 1 [0151.579] wcscmp (_String1="psfontj2d.properties", _String2="..") returned 1 [0151.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23840 [0151.580] wcscpy (in: _Dest=0x3f23840, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.580] wcscat (in: _Dest=0x3f23840, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.580] wcscat (in: _Dest=0x3f23840, _Source="psfontj2d.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" [0151.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0151.581] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68098d60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0151.581] wcscmp (_String1="resources.jar", _String2=".") returned 1 [0151.581] wcscmp (_String1="resources.jar", _String2="..") returned 1 [0151.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd310 [0151.581] wcscpy (in: _Dest=0x66cd310, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.581] wcscat (in: _Dest=0x66cd310, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.581] wcscat (in: _Dest=0x66cd310, _Source="resources.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\resources.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" [0151.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0151.583] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683928e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683928e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6970fd00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0151.583] wcscmp (_String1="rt.jar", _String2=".") returned 1 [0151.583] wcscmp (_String1="rt.jar", _String2="..") returned 1 [0151.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7e90 [0151.583] wcscpy (in: _Dest=0x3ef7e90, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.583] wcscat (in: _Dest=0x3ef7e90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.583] wcscat (in: _Dest=0x3ef7e90, _Source="rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" [0151.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0151.584] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0151.584] wcscmp (_String1="security", _String2=".") returned 1 [0151.584] wcscmp (_String1="security", _String2="..") returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7cd8 [0151.584] wcscpy (in: _Dest=0x3ef7cd8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.584] wcscat (in: _Dest=0x3ef7cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.584] wcscat (in: _Dest=0x3ef7cd8, _Source="security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0151.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0151.585] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0151.585] wcscmp (_String1="sound.properties", _String2=".") returned 1 [0151.585] wcscmp (_String1="sound.properties", _String2="..") returned 1 [0151.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd378 [0151.585] wcscpy (in: _Dest=0x66cd378, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.585] wcscat (in: _Dest=0x66cd378, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.585] wcscat (in: _Dest=0x66cd378, _Source="sound.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\sound.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" [0151.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0151.586] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0151.586] wcscmp (_String1="tzmappings", _String2=".") returned 1 [0151.586] wcscmp (_String1="tzmappings", _String2="..") returned 1 [0151.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3c08 [0151.586] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.586] wcscat (in: _Dest=0x2fe3c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.586] wcscat (in: _Dest=0x2fe3c08, _Source="tzmappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\tzmappings") returned="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" [0151.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe3c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0151.587] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0151.587] wcscmp (_String1="zi", _String2=".") returned 1 [0151.588] wcscmp (_String1="zi", _String2="..") returned 1 [0151.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e619d0 [0151.588] wcscpy (in: _Dest=0x3e619d0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0151.588] wcscat (in: _Dest=0x3e619d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0151.588] wcscat (in: _Dest=0x3e619d0, _Source="zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0151.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e619d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0151.589] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0151.589] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0151.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0151.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62830) returned 1 [0151.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ea00) returned 1 Thread: id = 345 os_tid = 0xdcc [0133.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license")) returned 0x20 [0134.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0134.761] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.761] GetLastError () returned 0x5 [0134.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0134.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61c00) returned 1 Thread: id = 346 os_tid = 0xe84 [0133.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt")) returned 0x20 [0134.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0134.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.764] GetLastError () returned 0x5 [0134.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0134.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e034b0) returned 1 Thread: id = 347 os_tid = 0xe98 [0133.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release")) returned 0x20 [0134.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0134.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.766] GetLastError () returned 0x5 [0134.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0134.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62600) returned 1 Thread: id = 348 os_tid = 0xea0 [0133.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0134.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0134.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.769] GetLastError () returned 0x5 [0134.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0134.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 Thread: id = 349 os_tid = 0xdd4 [0133.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt")) returned 0x20 [0133.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0134.000] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.000] GetLastError () returned 0x5 [0134.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0134.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a9d0) returned 1 Thread: id = 350 os_tid = 0xe48 [0133.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html")) returned 0x20 [0134.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0134.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.002] GetLastError () returned 0x5 [0134.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0134.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03610) returned 1 Thread: id = 351 os_tid = 0xee4 [0133.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7288 [0133.695] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\Public\\Documents\\My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0133.695] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\") returned="C:\\Users\\Public\\Documents\\My Music\\" [0133.695] wcscat (in: _Dest=0x3ef7288, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\*") returned="C:\\Users\\Public\\Documents\\My Music\\*" [0133.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0133.695] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0133.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 [0133.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e622e0) returned 1 Thread: id = 352 os_tid = 0xe44 [0133.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7288 [0133.697] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\Public\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0133.697] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\") returned="C:\\Users\\Public\\Documents\\My Pictures\\" [0133.697] wcscat (in: _Dest=0x3ef7288, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\*") returned="C:\\Users\\Public\\Documents\\My Pictures\\*" [0133.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0133.698] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 [0133.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02dd0) returned 1 Thread: id = 353 os_tid = 0xe70 [0133.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e02dd0 [0133.699] wcscpy (in: _Dest=0x3e02dd0, _Source="C:\\Users\\Public\\Documents\\My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0133.699] wcscat (in: _Dest=0x3e02dd0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\") returned="C:\\Users\\Public\\Documents\\My Videos\\" [0133.699] wcscat (in: _Dest=0x3e02dd0, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\*") returned="C:\\Users\\Public\\Documents\\My Videos\\*" [0133.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0133.700] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0133.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0133.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02dd0) returned 1 [0133.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62650) returned 1 Thread: id = 354 os_tid = 0xe38 [0133.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6968 [0133.702] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.702] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.702] wcscat (in: _Dest=0x2fe6968, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\*" [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0133.702] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0134.047] wcscmp (_String1=".", _String2=".") returned 0 [0134.047] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.047] wcscmp (_String1="..", _String2=".") returned 1 [0134.047] wcscmp (_String1="..", _String2="..") returned 0 [0134.047] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0134.047] wcscmp (_String1="Chrysanthemum.jpg", _String2=".") returned 1 [0134.048] wcscmp (_String1="Chrysanthemum.jpg", _String2="..") returned 1 [0134.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10670 [0134.048] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.048] wcscat (in: _Dest=0x3e10670, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.048] wcscat (in: _Dest=0x3e10670, _Source="Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0134.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0134.593] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0134.593] wcscmp (_String1="Desert.jpg", _String2=".") returned 1 [0134.593] wcscmp (_String1="Desert.jpg", _String2="..") returned 1 [0134.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f295d0 [0134.594] wcscpy (in: _Dest=0x3f295d0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.594] wcscat (in: _Dest=0x3f295d0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.594] wcscat (in: _Dest=0x3f295d0, _Source="Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0134.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f295d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0134.595] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0134.595] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0134.595] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0134.595] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0134.595] wcscmp (_String1="Hydrangeas.jpg", _String2=".") returned 1 [0134.595] wcscmp (_String1="Hydrangeas.jpg", _String2="..") returned 1 [0134.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0134.595] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.596] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.596] wcscat (in: _Dest=0x3f1b510, _Source="Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0134.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0134.598] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0134.598] wcscmp (_String1="Jellyfish.jpg", _String2=".") returned 1 [0134.598] wcscmp (_String1="Jellyfish.jpg", _String2="..") returned 1 [0134.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b588 [0134.598] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.598] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.598] wcscat (in: _Dest=0x3f1b588, _Source="Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0134.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0134.605] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="Koala.jpg", _String2=".") returned 1 [0134.605] wcscmp (_String1="Koala.jpg", _String2="..") returned 1 [0134.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29640 [0134.605] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.605] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.606] wcscat (in: _Dest=0x3f29640, _Source="Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0134.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0134.607] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0134.607] wcscmp (_String1="Lighthouse.jpg", _String2=".") returned 1 [0134.607] wcscmp (_String1="Lighthouse.jpg", _String2="..") returned 1 [0134.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0134.607] wcscpy (in: _Dest=0x3f1b600, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.607] wcscat (in: _Dest=0x3f1b600, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.607] wcscat (in: _Dest=0x3f1b600, _Source="Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0134.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0134.609] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0134.609] wcscmp (_String1="Penguins.jpg", _String2=".") returned 1 [0134.609] wcscmp (_String1="Penguins.jpg", _String2="..") returned 1 [0134.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3dc5d80 [0134.609] wcscpy (in: _Dest=0x3dc5d80, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.609] wcscat (in: _Dest=0x3dc5d80, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.609] wcscat (in: _Dest=0x3dc5d80, _Source="Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0134.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dc5d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0134.610] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0134.610] wcscmp (_String1="Tulips.jpg", _String2=".") returned 1 [0134.610] wcscmp (_String1="Tulips.jpg", _String2="..") returned 1 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f296b0 [0134.610] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0134.610] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0134.611] wcscat (in: _Dest=0x3f296b0, _Source="Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0134.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0134.619] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0134.619] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0134.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0134.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0134.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 355 os_tid = 0xe3c [0133.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe69c8 [0133.708] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.708] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0133.708] wcscat (in: _Dest=0x2fe69c8, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\*" [0133.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0133.708] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0133.709] wcscmp (_String1=".", _String2=".") returned 0 [0133.709] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.709] wcscmp (_String1="..", _String2=".") returned 1 [0133.709] wcscmp (_String1="..", _String2="..") returned 0 [0133.709] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e06f5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84e06f5a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.709] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.709] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.709] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0133.709] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2=".") returned 1 [0133.709] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2="..") returned 1 [0133.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bce0 [0133.709] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0133.709] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0133.709] wcscat (in: _Dest=0x32bce0, _Source="win7_scenic-demoshort_raw.wtv" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" [0138.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0138.524] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0138.524] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0138.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0138.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 [0138.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 356 os_tid = 0xe40 [0133.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e02dd0 [0133.714] wcscpy (in: _Dest=0x3e02dd0, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.714] wcscat (in: _Dest=0x3e02dd0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0133.714] wcscat (in: _Dest=0x3e02dd0, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\*") returned="C:\\Users\\Public\\Videos\\Sample Videos\\*" [0133.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca478 [0133.714] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0133.715] wcscmp (_String1=".", _String2=".") returned 0 [0133.715] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.715] wcscmp (_String1="..", _String2=".") returned 1 [0133.715] wcscmp (_String1="..", _String2="..") returned 0 [0133.715] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.715] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.715] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.715] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0133.715] wcscmp (_String1="Wildlife.wmv", _String2=".") returned 1 [0133.715] wcscmp (_String1="Wildlife.wmv", _String2="..") returned 1 [0133.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29100 [0133.715] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0133.715] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0133.715] wcscat (in: _Dest=0x3f29100, _Source="Wildlife.wmv" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" [0134.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0134.635] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0134.635] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0134.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca478) returned 1 [0134.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02dd0) returned 1 [0134.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d30) returned 1 Thread: id = 357 os_tid = 0xe34 [0133.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e035b8 [0133.726] wcscpy (in: _Dest=0x3e035b8, _Source="C:\\ProgramData\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0133.726] wcscat (in: _Dest=0x3e035b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\" [0133.726] wcscat (in: _Dest=0x3e035b8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*" [0133.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0133.726] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f500 [0133.727] wcscmp (_String1=".", _String2=".") returned 0 [0133.727] FindNextFileW (in: hFindFile=0x3f1f500, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.727] wcscmp (_String1="..", _String2=".") returned 1 [0133.727] wcscmp (_String1="..", _String2="..") returned 0 [0133.727] FindNextFileW (in: hFindFile=0x3f1f500, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.727] FindClose (in: hFindFile=0x3f1f500 | out: hFindFile=0x3f1f500) returned 1 [0133.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0133.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e035b8) returned 1 [0133.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c80) returned 1 Thread: id = 358 os_tid = 0xe30 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8df38 [0133.729] wcscpy (in: _Dest=0x3d8df38, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0133.729] wcscat (in: _Dest=0x3d8df38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0133.729] wcscat (in: _Dest=0x3d8df38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*" [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0133.729] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f500 [0133.730] wcscmp (_String1=".", _String2=".") returned 0 [0133.730] FindNextFileW (in: hFindFile=0x3f1f500, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.730] wcscmp (_String1="..", _String2=".") returned 1 [0133.730] wcscmp (_String1="..", _String2="..") returned 0 [0133.730] FindNextFileW (in: hFindFile=0x3f1f500, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xaf951880, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0133.730] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0133.730] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0133.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a2e0 [0133.730] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0133.730] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0133.730] wcscat (in: _Dest=0x3d5a2e0, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0134.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0134.463] FindNextFileW (in: hFindFile=0x3f1f500, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xaf951880, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0134.463] FindClose (in: hFindFile=0x3f1f500 | out: hFindFile=0x3f1f500) returned 1 [0134.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0134.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 [0134.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 359 os_tid = 0xee8 [0133.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6a28 [0133.731] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0133.731] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0133.731] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*" [0133.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0133.731] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f540 [0133.731] wcscmp (_String1=".", _String2=".") returned 0 [0133.731] FindNextFileW (in: hFindFile=0x3f1f540, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.731] wcscmp (_String1="..", _String2=".") returned 1 [0133.731] wcscmp (_String1="..", _String2="..") returned 0 [0133.731] FindNextFileW (in: hFindFile=0x3f1f540, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xaf92b720, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0133.731] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0133.732] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0133.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1af70 [0133.732] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0133.732] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0133.732] wcscat (in: _Dest=0x3f1af70, _Source="RacDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0134.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0134.465] FindNextFileW (in: hFindFile=0x3f1f540, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0134.466] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0134.466] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0134.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b420 [0134.466] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0134.466] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0134.466] wcscat (in: _Dest=0x3f1b420, _Source="RacMetaData.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0134.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0134.467] FindNextFileW (in: hFindFile=0x3f1f540, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0134.467] FindClose (in: hFindFile=0x3f1f540 | out: hFindFile=0x3f1f540) returned 1 [0134.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0134.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0134.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02a08) returned 1 Thread: id = 360 os_tid = 0xe6c [0133.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62650 [0133.732] wcscpy (in: _Dest=0x3e62650, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0133.733] wcscat (in: _Dest=0x3e62650, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0133.733] wcscat (in: _Dest=0x3e62650, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*" [0133.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0133.733] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0133.733] wcscmp (_String1=".", _String2=".") returned 0 [0133.733] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.733] wcscmp (_String1="..", _String2=".") returned 1 [0133.733] wcscmp (_String1="..", _String2="..") returned 0 [0133.733] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b948b00, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x8b948b00, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b948b00, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7619.tmp", cAlternateFileName="")) returned 1 [0133.733] wcscmp (_String1="sql7619.tmp", _String2=".") returned 1 [0133.733] wcscmp (_String1="sql7619.tmp", _String2="..") returned 1 [0133.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8aba0 [0133.733] wcscpy (in: _Dest=0x3d8aba0, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0133.733] wcscat (in: _Dest=0x3d8aba0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0133.733] wcscat (in: _Dest=0x3d8aba0, _Source="sql7619.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp" [0134.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8aba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0134.637] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b96ec60, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b994dc0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7629.tmp", cAlternateFileName="")) returned 1 [0134.637] wcscmp (_String1="sql7629.tmp", _String2=".") returned 1 [0134.637] wcscmp (_String1="sql7629.tmp", _String2="..") returned 1 [0134.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d510 [0134.637] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0134.637] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0134.637] wcscat (in: _Dest=0x3d8d510, _Source="sql7629.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" [0134.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0134.639] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b96ec60, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b994dc0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7629.tmp", cAlternateFileName="")) returned 0 [0134.639] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0134.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0134.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62650) returned 1 [0134.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626a0) returned 1 Thread: id = 361 os_tid = 0xe60 [0133.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e622e0 [0133.734] wcscpy (in: _Dest=0x3e622e0, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0133.734] wcscat (in: _Dest=0x3e622e0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0133.734] wcscat (in: _Dest=0x3e622e0, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\*") returned="C:\\Users\\Default\\AppData\\Local\\*" [0133.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0133.734] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f5c0 [0133.737] wcscmp (_String1=".", _String2=".") returned 0 [0133.737] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.737] wcscmp (_String1="..", _String2=".") returned 1 [0133.737] wcscmp (_String1="..", _String2="..") returned 0 [0133.737] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0133.737] wcscmp (_String1="Application Data", _String2=".") returned 1 [0133.737] wcscmp (_String1="Application Data", _String2="..") returned 1 [0133.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8dd98 [0133.737] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0133.737] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0133.737] wcscat (in: _Dest=0x3d8dd98, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0134.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0134.476] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0134.476] wcscmp (_String1="History", _String2=".") returned 1 [0134.476] wcscmp (_String1="History", _String2="..") returned 1 [0134.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e02a08 [0134.476] wcscpy (in: _Dest=0x3e02a08, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0134.476] wcscat (in: _Dest=0x3e02a08, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0134.476] wcscat (in: _Dest=0x3e02a08, _Source="History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0134.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e02a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0134.477] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x7959fd0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7959fd0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c78a07f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xbd860, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0134.477] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0134.477] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0134.477] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2b4e54c8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.477] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0134.478] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0134.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6a28 [0134.478] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0134.478] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0134.478] wcscat (in: _Dest=0x2fe6a28, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft" [0134.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0134.478] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x771eb30, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x5ac162de, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0134.478] wcscmp (_String1="Temp", _String2=".") returned 1 [0134.478] wcscmp (_String1="Temp", _String2="..") returned 1 [0134.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e626f0 [0134.478] wcscpy (in: _Dest=0x3e626f0, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0134.478] wcscat (in: _Dest=0x3e626f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0134.478] wcscat (in: _Dest=0x3e626f0, _Source="Temp" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temp") returned="C:\\Users\\Default\\AppData\\Local\\Temp" [0134.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626f0) returned 1 [0134.478] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0134.478] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0134.478] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0134.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0134.479] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0134.479] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0134.479] wcscat (in: _Dest=0x3f1b510, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" [0134.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0134.479] FindNextFileW (in: hFindFile=0x3f1f5c0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0134.479] FindClose (in: hFindFile=0x3f1f5c0 | out: hFindFile=0x3f1f5c0) returned 1 [0134.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0134.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e622e0) returned 1 [0134.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40d60) returned 1 Thread: id = 362 os_tid = 0xe64 [0133.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4e428 [0133.738] wcscpy (in: _Dest=0x3e4e428, _Source="C:\\Users\\Default\\AppData\\LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0133.738] wcscat (in: _Dest=0x3e4e428, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\") returned="C:\\Users\\Default\\AppData\\LocalLow\\" [0133.738] wcscat (in: _Dest=0x3e4e428, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\*") returned="C:\\Users\\Default\\AppData\\LocalLow\\*" [0133.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0133.738] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0134.042] wcscmp (_String1=".", _String2=".") returned 0 [0134.042] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.042] wcscmp (_String1="..", _String2=".") returned 1 [0134.042] wcscmp (_String1="..", _String2="..") returned 0 [0134.042] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.042] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0134.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0134.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e428) returned 1 [0134.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626f0) returned 1 Thread: id = 363 os_tid = 0xe68 [0133.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e388 [0133.739] wcscpy (in: _Dest=0x3e4e388, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0133.739] wcscat (in: _Dest=0x3e4e388, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0133.739] wcscat (in: _Dest=0x3e4e388, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\*" [0133.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0133.739] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0134.046] wcscmp (_String1=".", _String2=".") returned 0 [0134.046] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.046] wcscmp (_String1="..", _String2=".") returned 1 [0134.046] wcscmp (_String1="..", _String2="..") returned 0 [0134.046] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0134.047] wcscmp (_String1="Identities", _String2=".") returned 1 [0134.047] wcscmp (_String1="Identities", _String2="..") returned 1 [0134.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6e48 [0134.047] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0134.047] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0134.047] wcscat (in: _Dest=0x2fe6e48, _Source="Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0134.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0134.590] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.590] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0134.590] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0134.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0134.590] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0134.590] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0134.590] wcscat (in: _Dest=0x2fe6908, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" [0134.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0134.591] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0134.591] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0134.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0134.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e388) returned 1 [0134.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62740) returned 1 Thread: id = 364 os_tid = 0xe5c [0133.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e4e1f8 [0133.740] wcscpy (in: _Dest=0x3e4e1f8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0133.740] wcscat (in: _Dest=0x3e4e1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0133.740] wcscat (in: _Dest=0x3e4e1f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\*" [0133.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb550 [0133.741] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\*", lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0133.741] wcscmp (_String1=".", _String2=".") returned 0 [0133.743] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.743] wcscmp (_String1="..", _String2=".") returned 1 [0133.743] wcscmp (_String1="..", _String2="..") returned 0 [0133.743] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.743] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.743] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.743] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfe16b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d3737b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0133.743] wcscmp (_String1="Suggested Sites.url", _String2=".") returned 1 [0133.743] wcscmp (_String1="Suggested Sites.url", _String2="..") returned 1 [0133.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1afe8 [0133.744] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0133.744] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0133.744] wcscat (in: _Dest=0x3f1afe8, _Source="Suggested Sites.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" [0135.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0135.457] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0135.457] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0135.457] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0135.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1aac0 [0135.457] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0135.457] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0135.457] wcscat (in: _Dest=0x3f1aac0, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" [0135.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0135.459] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0135.459] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0135.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb550) returned 1 [0135.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e1f8) returned 1 [0135.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 Thread: id = 365 os_tid = 0xe58 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e620 [0133.744] wcscpy (in: _Dest=0x3d8e620, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0133.744] wcscat (in: _Dest=0x3d8e620, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0133.744] wcscat (in: _Dest=0x3d8e620, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*" [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0133.744] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0134.048] wcscmp (_String1=".", _String2=".") returned 0 [0134.048] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.048] wcscmp (_String1="..", _String2=".") returned 1 [0134.048] wcscmp (_String1="..", _String2="..") returned 0 [0134.049] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0134.049] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0134.049] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0134.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0134.049] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0134.049] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0134.049] wcscat (in: _Dest=0x354fc0, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0138.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0138.043] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0138.044] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0138.044] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0138.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e430 [0138.044] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0138.044] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0138.044] wcscat (in: _Dest=0x3e0e430, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0138.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0138.046] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903b950, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0138.046] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0138.046] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0138.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbc58 [0138.046] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0138.046] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0138.046] wcscat (in: _Dest=0x66dbc58, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0138.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0138.047] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0138.047] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0138.047] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0138.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbd78 [0138.047] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0138.048] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0138.048] wcscat (in: _Dest=0x66dbd78, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0138.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0138.049] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0138.049] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0138.049] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0138.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbce8 [0138.049] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0138.049] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0138.049] wcscat (in: _Dest=0x66dbce8, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0138.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0138.051] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0138.051] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0138.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0138.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e620) returned 1 [0138.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 Thread: id = 366 os_tid = 0xecc [0133.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a88 [0133.747] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0133.747] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0133.747] wcscat (in: _Dest=0x2fe6a88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*" [0133.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0133.747] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0134.049] wcscmp (_String1=".", _String2=".") returned 0 [0134.049] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.049] wcscmp (_String1="..", _String2=".") returned 1 [0134.049] wcscmp (_String1="..", _String2="..") returned 0 [0134.049] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0134.050] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0134.050] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0134.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aef8 [0134.050] wcscpy (in: _Dest=0x3f1aef8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0134.050] wcscat (in: _Dest=0x3f1aef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0134.050] wcscat (in: _Dest=0x3f1aef8, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" [0141.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0141.264] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0141.264] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0141.264] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0141.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59730 [0141.264] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0141.264] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.264] wcscat (in: _Dest=0x3d59730, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" [0141.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0141.265] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0141.265] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0141.266] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0141.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b2b8 [0141.266] wcscpy (in: _Dest=0x3f1b2b8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0141.266] wcscat (in: _Dest=0x3f1b2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.266] wcscat (in: _Dest=0x3f1b2b8, _Source="MSN Money.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" [0141.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0141.267] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0141.267] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0141.267] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0141.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b330 [0141.267] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0141.267] wcscat (in: _Dest=0x3f1b330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.267] wcscat (in: _Dest=0x3f1b330, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" [0141.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0141.269] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0141.269] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0141.269] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0141.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c740 [0141.269] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0141.269] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.269] wcscat (in: _Dest=0x3d8c740, _Source="MSN.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" [0141.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0141.270] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0141.271] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0141.271] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0141.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b420 [0141.271] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0141.271] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0141.271] wcscat (in: _Dest=0x3f1b420, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" [0141.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0141.272] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0141.272] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0141.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0141.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0141.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02bc0) returned 1 Thread: id = 367 os_tid = 0xec8 [0133.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ae8 [0133.751] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0133.751] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0133.751] wcscat (in: _Dest=0x2fe6ae8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*" [0133.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0133.751] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0134.051] wcscmp (_String1=".", _String2=".") returned 0 [0134.051] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.051] wcscmp (_String1="..", _String2=".") returned 1 [0134.051] wcscmp (_String1="..", _String2="..") returned 0 [0134.051] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0134.051] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0134.052] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0134.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d597b8 [0134.052] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0134.052] wcscat (in: _Dest=0x3d597b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0134.052] wcscat (in: _Dest=0x3d597b8, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" [0146.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d597b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0146.876] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0146.876] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0146.876] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0146.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0146.876] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0146.876] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0146.876] wcscat (in: _Dest=0x66dc828, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" [0146.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0146.878] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0146.878] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0146.878] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0146.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f273e8 [0146.878] wcscpy (in: _Dest=0x3f273e8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0146.878] wcscat (in: _Dest=0x3f273e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0146.878] wcscat (in: _Dest=0x3f273e8, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" [0146.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f273e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0146.879] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0146.879] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0146.879] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0146.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27360 [0146.879] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0146.879] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0146.879] wcscat (in: _Dest=0x3f27360, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" [0146.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0146.881] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0146.881] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0146.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0146.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0146.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02d20) returned 1 Thread: id = 368 os_tid = 0xec4 [0133.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5bf0 [0133.759] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0133.759] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0133.759] wcscat (in: _Dest=0x3da5bf0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*" [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0133.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0134.050] wcscmp (_String1=".", _String2=".") returned 0 [0134.050] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.050] wcscmp (_String1="..", _String2=".") returned 1 [0134.050] wcscmp (_String1="..", _String2="..") returned 0 [0134.050] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0134.050] wcscmp (_String1="Cartridges", _String2=".") returned 1 [0134.050] wcscmp (_String1="Cartridges", _String2="..") returned 1 [0134.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354f30 [0134.051] wcscpy (in: _Dest=0x354f30, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0134.051] wcscat (in: _Dest=0x354f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0134.051] wcscat (in: _Dest=0x354f30, _Source="Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0141.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x354f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0141.768] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa3f4b00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x7693a1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa3f4b00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0141.769] wcscmp (_String1="msmdlocal.dll", _String2=".") returned 1 [0141.769] wcscmp (_String1="msmdlocal.dll", _String2="..") returned 1 [0141.769] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f9e000, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4f9e000, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x82b958, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0141.769] wcscmp (_String1="msmgdsrv.dll", _String2=".") returned 1 [0141.769] wcscmp (_String1="msmgdsrv.dll", _String2="..") returned 1 [0141.769] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb62b0d00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb62b0d00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x63bb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0141.769] wcscmp (_String1="msolap100.dll", _String2=".") returned 1 [0141.769] wcscmp (_String1="msolap100.dll", _String2="..") returned 1 [0141.769] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970e2800, ftCreationTime.dwHighDateTime=0x1c8e244, ftLastAccessTime.dwLowDateTime=0x76960350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x970e2800, ftLastWriteTime.dwHighDateTime=0x1c8e244, nFileSizeHigh=0x0, nFileSizeLow=0x43618, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0141.769] wcscmp (_String1="msolui100.dll", _String2=".") returned 1 [0141.769] wcscmp (_String1="msolui100.dll", _String2="..") returned 1 [0141.769] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0141.769] wcscmp (_String1="Resources", _String2=".") returned 1 [0141.769] wcscmp (_String1="Resources", _String2="..") returned 1 [0141.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcca8 [0141.769] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0141.769] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0141.769] wcscat (in: _Dest=0x66dcca8, _Source="Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0141.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0141.771] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0141.771] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0141.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0141.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 [0141.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da62f0) returned 1 Thread: id = 369 os_tid = 0x150 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59488 [0133.762] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0133.762] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0133.762] wcscat (in: _Dest=0x3d59488, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*" [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0133.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0133.763] wcscmp (_String1=".", _String2=".") returned 0 [0133.763] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.763] wcscmp (_String1="..", _String2=".") returned 1 [0133.763] wcscmp (_String1="..", _String2="..") returned 0 [0133.763] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0133.763] wcscmp (_String1="1033", _String2=".") returned 1 [0133.763] wcscmp (_String1="1033", _String2="..") returned 1 [0133.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3557a0 [0133.763] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0133.764] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0133.764] wcscat (in: _Dest=0x3557a0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0134.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3557a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0134.484] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0134.484] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0134.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0134.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 [0134.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 370 os_tid = 0x11c [0133.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da66f0 [0133.764] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0133.764] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0133.764] wcscat (in: _Dest=0x3da66f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*" [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12248 [0133.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0133.765] wcscmp (_String1=".", _String2=".") returned 0 [0133.765] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.765] wcscmp (_String1="..", _String2=".") returned 1 [0133.765] wcscmp (_String1="..", _String2="..") returned 0 [0133.765] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0133.765] wcscmp (_String1="x86", _String2=".") returned 1 [0133.765] wcscmp (_String1="x86", _String2="..") returned 1 [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5cf0 [0133.765] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0133.765] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0133.765] wcscat (in: _Dest=0x3da5cf0, _Source="x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0134.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0134.486] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0134.486] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0134.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12248) returned 1 [0134.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0134.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 Thread: id = 371 os_tid = 0xef4 [0133.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354ab0 [0133.766] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0133.766] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0133.766] wcscat (in: _Dest=0x354ab0, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*" [0133.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0133.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f700 [0133.767] wcscmp (_String1=".", _String2=".") returned 0 [0133.767] FindNextFileW (in: hFindFile=0x3f1f700, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.767] wcscmp (_String1="..", _String2=".") returned 1 [0133.767] wcscmp (_String1="..", _String2="..") returned 0 [0133.767] FindNextFileW (in: hFindFile=0x3f1f700, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0133.767] wcscmp (_String1="v3.0", _String2=".") returned 1 [0133.767] wcscmp (_String1="v3.0", _String2="..") returned 1 [0133.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x356370 [0133.767] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0133.767] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0133.767] wcscat (in: _Dest=0x356370, _Source="v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0134.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0134.488] FindNextFileW (in: hFindFile=0x3f1f700, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0134.488] wcscmp (_String1="v3.5", _String2=".") returned 1 [0134.488] wcscmp (_String1="v3.5", _String2="..") returned 1 [0134.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3555f0 [0134.488] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0134.488] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0134.488] wcscat (in: _Dest=0x3555f0, _Source="v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0134.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0134.490] FindNextFileW (in: hFindFile=0x3f1f700, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0134.490] FindClose (in: hFindFile=0x3f1f700 | out: hFindFile=0x3f1f700) returned 1 [0134.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0134.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 [0134.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d596a8) returned 1 Thread: id = 372 os_tid = 0xeac [0133.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm")) returned 0x20 [0140.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0140.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.029] GetLastError () returned 0x5 [0141.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0141.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 373 os_tid = 0xebc [0133.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm")) returned 0x20 [0140.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0140.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.028] GetLastError () returned 0x5 [0141.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0141.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 Thread: id = 374 os_tid = 0xeb4 [0133.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6b48 [0133.772] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0133.772] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\" [0133.772] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*" [0133.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0133.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0140.521] wcscmp (_String1=".", _String2=".") returned 0 [0140.521] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.521] wcscmp (_String1="..", _String2=".") returned 1 [0140.522] wcscmp (_String1="..", _String2="..") returned 0 [0140.522] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0140.522] wcscmp (_String1="AiodLite.dll", _String2=".") returned 1 [0140.522] wcscmp (_String1="AiodLite.dll", _String2="..") returned 1 [0140.522] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0140.522] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0140.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0140.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0140.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7f98) returned 1 Thread: id = 375 os_tid = 0xeb8 [0133.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm")) returned 0x20 [0140.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0140.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.027] GetLastError () returned 0x5 [0141.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0141.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e5b8) returned 1 Thread: id = 376 os_tid = 0xeb0 [0133.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm")) returned 0x20 [0140.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0140.527] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.026] GetLastError () returned 0x5 [0141.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0141.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 377 os_tid = 0x4e4 [0133.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm")) returned 0x20 [0138.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0138.581] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.296] GetLastError () returned 0x5 [0139.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0139.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 Thread: id = 378 os_tid = 0x530 [0133.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm")) returned 0x20 [0140.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0140.527] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.025] GetLastError () returned 0x5 [0141.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0141.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 379 os_tid = 0xf04 [0133.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm")) returned 0x20 [0144.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0144.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.684] GetLastError () returned 0x5 [0145.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0145.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 380 os_tid = 0xf00 [0133.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm")) returned 0x20 [0140.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0140.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.023] GetLastError () returned 0x5 [0141.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0141.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 381 os_tid = 0xefc [0133.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm")) returned 0x20 [0140.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0140.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.023] GetLastError () returned 0x5 [0141.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0141.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 382 os_tid = 0x7ec [0133.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm")) returned 0x20 [0140.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0140.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.020] GetLastError () returned 0x5 [0141.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 Thread: id = 383 os_tid = 0x14c [0133.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm")) returned 0x20 [0140.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0140.530] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.022] GetLastError () returned 0x5 [0141.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0141.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 Thread: id = 384 os_tid = 0xef8 [0133.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0133.782] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0133.782] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0133.782] wcscat (in: _Dest=0x2fe6ba8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*" [0133.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0133.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0133.783] wcscmp (_String1=".", _String2=".") returned 0 [0133.783] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.783] wcscmp (_String1="..", _String2=".") returned 1 [0133.783] wcscmp (_String1="..", _String2="..") returned 0 [0133.783] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0133.783] wcscmp (_String1="A3DUtils.dll", _String2=".") returned 1 [0133.783] wcscmp (_String1="A3DUtils.dll", _String2="..") returned 1 [0133.783] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0133.783] wcscmp (_String1="ACE.dll", _String2=".") returned 1 [0133.783] wcscmp (_String1="ACE.dll", _String2="..") returned 1 [0133.783] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0133.784] wcscmp (_String1="AcroBroker.exe", _String2=".") returned 1 [0133.784] wcscmp (_String1="AcroBroker.exe", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0133.784] wcscmp (_String1="Acrofx32.dll", _String2=".") returned 1 [0133.784] wcscmp (_String1="Acrofx32.dll", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd550a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0133.784] wcscmp (_String1="AcroRd32.dll", _String2=".") returned 1 [0133.784] wcscmp (_String1="AcroRd32.dll", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0133.784] wcscmp (_String1="AcroRd32.exe", _String2=".") returned 1 [0133.784] wcscmp (_String1="AcroRd32.exe", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0133.784] wcscmp (_String1="AcroRd32Info.exe", _String2=".") returned 1 [0133.784] wcscmp (_String1="AcroRd32Info.exe", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0133.784] wcscmp (_String1="AcroTextExtractor.exe", _String2=".") returned 1 [0133.784] wcscmp (_String1="AcroTextExtractor.exe", _String2="..") returned 1 [0133.784] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0133.785] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2=".") returned 1 [0133.785] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2="..") returned 1 [0133.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5bee8 [0133.785] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0133.785] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0133.785] wcscat (in: _Dest=0x3e5bee8, _Source="Adobe.Reader.Dependencies.manifest" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" [0134.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0134.641] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0134.641] wcscmp (_String1="AdobeCollabSync.exe", _String2=".") returned 1 [0134.641] wcscmp (_String1="AdobeCollabSync.exe", _String2="..") returned 1 [0134.641] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0134.641] wcscmp (_String1="AdobeLinguistic.dll", _String2=".") returned 1 [0134.641] wcscmp (_String1="AdobeLinguistic.dll", _String2="..") returned 1 [0134.641] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0134.641] wcscmp (_String1="adoberfp.dll", _String2=".") returned 1 [0134.642] wcscmp (_String1="adoberfp.dll", _String2="..") returned 1 [0134.642] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0134.642] wcscmp (_String1="AdobeXMP.dll", _String2=".") returned 1 [0134.642] wcscmp (_String1="AdobeXMP.dll", _String2="..") returned 1 [0134.642] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0134.642] wcscmp (_String1="AGM.dll", _String2=".") returned 1 [0134.642] wcscmp (_String1="AGM.dll", _String2="..") returned 1 [0134.642] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0134.642] wcscmp (_String1="AGMGPUOptIn.ini", _String2=".") returned 1 [0134.642] wcscmp (_String1="AGMGPUOptIn.ini", _String2="..") returned 1 [0134.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da66f0 [0134.642] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.642] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.642] wcscat (in: _Dest=0x3da66f0, _Source="AGMGPUOptIn.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" [0134.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da66f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0134.643] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0134.643] wcscmp (_String1="ahclient.dll", _String2=".") returned 1 [0134.643] wcscmp (_String1="ahclient.dll", _String2="..") returned 1 [0134.643] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0134.643] wcscmp (_String1="AIR", _String2=".") returned 1 [0134.643] wcscmp (_String1="AIR", _String2="..") returned 1 [0134.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d2a0 [0134.643] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.643] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.643] wcscat (in: _Dest=0x3d8d2a0, _Source="AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0134.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8d2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3e0d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0134.645] wcscmp (_String1="authplay.dll", _String2=".") returned 1 [0134.645] wcscmp (_String1="authplay.dll", _String2="..") returned 1 [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0134.645] wcscmp (_String1="AXE8SharedExpat.dll", _String2=".") returned 1 [0134.645] wcscmp (_String1="AXE8SharedExpat.dll", _String2="..") returned 1 [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0134.645] wcscmp (_String1="AXSLE.dll", _String2=".") returned 1 [0134.645] wcscmp (_String1="AXSLE.dll", _String2="..") returned 1 [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0134.645] wcscmp (_String1="BIB.dll", _String2=".") returned 1 [0134.645] wcscmp (_String1="BIB.dll", _String2="..") returned 1 [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0134.645] wcscmp (_String1="BIBUtils.dll", _String2=".") returned 1 [0134.645] wcscmp (_String1="BIBUtils.dll", _String2="..") returned 1 [0134.645] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0134.645] wcscmp (_String1="Browser", _String2=".") returned 1 [0134.645] wcscmp (_String1="Browser", _String2="..") returned 1 [0134.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29720 [0134.645] wcscpy (in: _Dest=0x3f29720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.646] wcscat (in: _Dest=0x3f29720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.646] wcscat (in: _Dest=0x3f29720, _Source="Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0134.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0134.647] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0134.647] wcscmp (_String1="ccme_base.dll", _String2=".") returned 1 [0134.647] wcscmp (_String1="ccme_base.dll", _String2="..") returned 1 [0134.647] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc60ad40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0134.647] wcscmp (_String1="CoolType.dll", _String2=".") returned 1 [0134.647] wcscmp (_String1="CoolType.dll", _String2="..") returned 1 [0134.647] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9e9100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0134.647] wcscmp (_String1="cryptocme2.dll", _String2=".") returned 1 [0134.647] wcscmp (_String1="cryptocme2.dll", _String2="..") returned 1 [0134.647] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0134.647] wcscmp (_String1="cryptocme2.sig", _String2=".") returned 1 [0134.647] wcscmp (_String1="cryptocme2.sig", _String2="..") returned 1 [0134.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6770 [0134.647] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.647] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.647] wcscat (in: _Dest=0x3da6770, _Source="cryptocme2.sig" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" [0134.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0134.648] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0134.648] wcscmp (_String1="Eula.exe", _String2=".") returned 1 [0134.648] wcscmp (_String1="Eula.exe", _String2="..") returned 1 [0134.648] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0134.649] wcscmp (_String1="ExtendScript.dll", _String2=".") returned 1 [0134.649] wcscmp (_String1="ExtendScript.dll", _String2="..") returned 1 [0134.649] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0134.649] wcscmp (_String1="icucnv40.dll", _String2=".") returned 1 [0134.649] wcscmp (_String1="icucnv40.dll", _String2="..") returned 1 [0134.649] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0134.649] wcscmp (_String1="icudt40.dll", _String2=".") returned 1 [0134.649] wcscmp (_String1="icudt40.dll", _String2="..") returned 1 [0134.649] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0134.649] wcscmp (_String1="icudt40_full.dll", _String2=".") returned 1 [0134.649] wcscmp (_String1="icudt40_full.dll", _String2="..") returned 1 [0134.649] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0134.649] wcscmp (_String1="icuuc40.dll", _String2=".") returned 1 [0134.649] wcscmp (_String1="icuuc40.dll", _String2="..") returned 1 [0134.649] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0134.649] wcscmp (_String1="IDTemplates", _String2=".") returned 1 [0134.649] wcscmp (_String1="IDTemplates", _String2="..") returned 1 [0134.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1cfe0 [0134.649] wcscpy (in: _Dest=0x3f1cfe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.649] wcscat (in: _Dest=0x3f1cfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.649] wcscat (in: _Dest=0x3f1cfe0, _Source="IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0134.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1cfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0134.650] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0134.651] wcscmp (_String1="Javascripts", _String2=".") returned 1 [0134.651] wcscmp (_String1="Javascripts", _String2="..") returned 1 [0134.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d058 [0134.651] wcscpy (in: _Dest=0x3f1d058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.651] wcscat (in: _Dest=0x3f1d058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.651] wcscat (in: _Dest=0x3f1d058, _Source="Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0134.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0134.652] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0134.652] wcscmp (_String1="JP2KLib.dll", _String2=".") returned 1 [0134.652] wcscmp (_String1="JP2KLib.dll", _String2="..") returned 1 [0134.652] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0134.652] wcscmp (_String1="Legal", _String2=".") returned 1 [0134.652] wcscmp (_String1="Legal", _String2="..") returned 1 [0134.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d370 [0134.652] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.652] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.652] wcscat (in: _Dest=0x3d8d370, _Source="Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0134.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0134.654] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0134.654] wcscmp (_String1="Locale", _String2=".") returned 1 [0134.654] wcscmp (_String1="Locale", _String2="..") returned 1 [0134.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29790 [0134.654] wcscpy (in: _Dest=0x3f29790, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.654] wcscat (in: _Dest=0x3f29790, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.654] wcscat (in: _Dest=0x3f29790, _Source="Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0134.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0134.655] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd36e900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0134.655] wcscmp (_String1="logsession.dll", _String2=".") returned 1 [0134.655] wcscmp (_String1="logsession.dll", _String2="..") returned 1 [0134.655] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0134.655] wcscmp (_String1="LogTransport2.exe", _String2=".") returned 1 [0134.655] wcscmp (_String1="LogTransport2.exe", _String2="..") returned 1 [0134.655] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0134.655] wcscmp (_String1="Onix32.dll", _String2=".") returned 1 [0134.655] wcscmp (_String1="Onix32.dll", _String2="..") returned 1 [0134.655] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0134.655] wcscmp (_String1="PDFPrevHndlr.dll", _String2=".") returned 1 [0134.655] wcscmp (_String1="PDFPrevHndlr.dll", _String2="..") returned 1 [0134.656] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0134.656] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2=".") returned 1 [0134.656] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2="..") returned 1 [0134.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59488 [0134.656] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.656] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.656] wcscat (in: _Dest=0x3d59488, _Source="PDFSigQFormalRep.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" [0134.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0134.657] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0134.657] wcscmp (_String1="pe.dll", _String2=".") returned 1 [0134.657] wcscmp (_String1="pe.dll", _String2="..") returned 1 [0134.657] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0134.657] wcscmp (_String1="piaglbreakfinder.dll", _String2=".") returned 1 [0134.657] wcscmp (_String1="piaglbreakfinder.dll", _String2="..") returned 1 [0134.657] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0134.657] wcscmp (_String1="plug_ins", _String2=".") returned 1 [0134.657] wcscmp (_String1="plug_ins", _String2="..") returned 1 [0134.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29800 [0134.657] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.657] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.657] wcscat (in: _Dest=0x3f29800, _Source="plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0134.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0134.659] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0134.659] wcscmp (_String1="plug_ins3d", _String2=".") returned 1 [0134.659] wcscmp (_String1="plug_ins3d", _String2="..") returned 1 [0134.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d0d0 [0134.659] wcscpy (in: _Dest=0x3f1d0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.659] wcscat (in: _Dest=0x3f1d0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.659] wcscat (in: _Dest=0x3f1d0d0, _Source="plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0134.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0134.660] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0134.660] wcscmp (_String1="pmd.cer", _String2=".") returned 1 [0134.660] wcscmp (_String1="pmd.cer", _String2="..") returned 1 [0134.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29870 [0134.660] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.661] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.661] wcscat (in: _Dest=0x3f29870, _Source="pmd.cer" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" [0134.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0134.662] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0134.662] wcscmp (_String1="reader_sl.exe", _String2=".") returned 1 [0134.662] wcscmp (_String1="reader_sl.exe", _String2="..") returned 1 [0134.662] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0134.662] wcscmp (_String1="rt3d.dll", _String2=".") returned 1 [0134.662] wcscmp (_String1="rt3d.dll", _String2="..") returned 1 [0134.662] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0134.663] wcscmp (_String1="RTC.der", _String2=".") returned 1 [0134.663] wcscmp (_String1="RTC.der", _String2="..") returned 1 [0134.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f298e0 [0134.663] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.663] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.663] wcscat (in: _Dest=0x3f298e0, _Source="RTC.der" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" [0134.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0134.664] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0134.664] wcscmp (_String1="ScCore.dll", _String2=".") returned 1 [0134.664] wcscmp (_String1="ScCore.dll", _String2="..") returned 1 [0134.664] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0134.664] wcscmp (_String1="Services", _String2=".") returned 1 [0134.665] wcscmp (_String1="Services", _String2="..") returned 1 [0134.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29950 [0134.665] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.665] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.665] wcscat (in: _Dest=0x3f29950, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0134.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0134.666] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0134.666] wcscmp (_String1="SPPlugins", _String2=".") returned 1 [0134.666] wcscmp (_String1="SPPlugins", _String2="..") returned 1 [0134.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f299c0 [0134.667] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.667] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.667] wcscat (in: _Dest=0x3f299c0, _Source="SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0134.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0134.668] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0134.669] wcscmp (_String1="sqlite.dll", _String2=".") returned 1 [0134.669] wcscmp (_String1="sqlite.dll", _String2="..") returned 1 [0134.669] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0134.669] wcscmp (_String1="Tracker", _String2=".") returned 1 [0134.669] wcscmp (_String1="Tracker", _String2="..") returned 1 [0134.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29a30 [0134.669] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0134.669] wcscat (in: _Dest=0x3f29a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0134.669] wcscat (in: _Dest=0x3f29a30, _Source="Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0134.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0134.671] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0134.671] wcscmp (_String1="ViewerPS.dll", _String2=".") returned 1 [0134.671] wcscmp (_String1="ViewerPS.dll", _String2="..") returned 1 [0134.671] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 0 [0134.671] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0134.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0134.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0134.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 385 os_tid = 0xef0 [0133.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm")) returned 0x20 [0140.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0140.530] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.021] GetLastError () returned 0x5 [0141.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0141.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e1a8) returned 1 Thread: id = 386 os_tid = 0xf28 [0133.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm")) returned 0x20 [0144.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0144.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.443] GetLastError () returned 0x5 [0145.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0145.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 387 os_tid = 0x738 [0133.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm")) returned 0x20 [0144.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0144.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.076] GetLastError () returned 0x5 [0145.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0145.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e0d8) returned 1 Thread: id = 388 os_tid = 0x370 [0133.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm")) returned 0x20 [0140.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0140.532] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.019] GetLastError () returned 0x5 [0141.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0141.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3519c0) returned 1 Thread: id = 389 os_tid = 0xf3c [0133.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm")) returned 0x20 [0145.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0145.749] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.750] GetLastError () returned 0x5 [0145.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0145.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33fc0) returned 1 Thread: id = 390 os_tid = 0x15c [0134.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm")) returned 0x20 [0140.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0140.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.019] GetLastError () returned 0x5 [0141.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0141.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ed0) returned 1 Thread: id = 391 os_tid = 0x2a8 [0134.055] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 0x20 [0134.055] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x20) returned 1 [0134.055] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x101c [0134.056] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0x90ff79c | out: lpFileSize=0x90ff79c*=876) returned 1 [0134.056] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.056] ReadFile (in: hFile=0x101c, lpBuffer=0x90ff778, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90ff788, lpOverlapped=0x0 | out: lpBuffer=0x90ff778*, lpNumberOfBytesRead=0x90ff788*=0x4, lpOverlapped=0x0) returned 1 [0134.068] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f60 [0134.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0134.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4fb0 [0134.068] NtQuerySystemTime (in: CurrentTime=0x90ff710 | out: CurrentTime=0x90ff710*=132482710427328000) returned 0x0 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x2af4a2e9 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x791d56af [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x6a609e7c [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x681ea114 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x7b28c51 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x7579fcfc [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x4989c893 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x262ef7eb [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x731a1e22 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x75722210 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x46c3e253 [0134.068] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x479575db [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x69b90e18 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x2b752d29 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x1e014f4b [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x3a650136 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x430435da [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x4e35db67 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x2524535c [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x66960e58 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x33a779a1 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x6ee3ee36 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x4e01c62b [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x4774e61f [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x77e26517 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x63a75546 [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x791881bb [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0xeb043dd [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x5d9e334c [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x67c42def [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x351e561d [0134.069] RtlRandomEx (in: Seed=0x90ff708 | out: Seed=0x90ff708) returned 0x51542c8d [0134.085] ReadFile (in: hFile=0x101c, lpBuffer=0x6740950, nNumberOfBytesToRead=0x36c, lpNumberOfBytesRead=0x90ff704, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0x90ff704*=0x36c, lpOverlapped=0x0) returned 1 [0134.085] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.085] WriteFile (in: hFile=0x101c, lpBuffer=0x6744558*, nNumberOfBytesToWrite=0x36c, lpNumberOfBytesWritten=0x90ff708, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesWritten=0x90ff708*=0x36c, lpOverlapped=0x0) returned 1 [0135.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0135.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0135.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0135.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6744558) returned 1 [0135.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6740950) returned 1 [0135.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0135.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0135.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067200 [0135.849] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.849] WriteFile (in: hFile=0x101c, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x90ff790, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0x90ff790*=0x11c, lpOverlapped=0x0) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067200) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0137.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0137.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0137.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0137.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d580 [0137.271] wcscpy (in: _Dest=0x3f1d580, _Source="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0137.271] wcscat (in: _Dest=0x3f1d580, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.ac3a86") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.ac3a86" [0137.271] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.ac3a86", NtPathName=0x90ff708, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbc58 [0137.275] FlushFileBuffers (hFile=0x101c) returned 1 [0138.203] CloseHandle (hObject=0x101c) returned 1 [0138.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e620 [0138.205] wcscpy (in: _Dest=0x3d8e620, _Source="C:\\Users\\Public\\Libraries\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0138.205] wcscat (in: _Dest=0x3d8e620, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Libraries\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Libraries\\AC3A86-Readme.txt" [0138.205] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\libraries\\ac3a86-readme.txt")) returned 0xffffffff [0138.205] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\libraries\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcf8 [0138.646] WriteFile (in: hFile=0xcf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x90ff724, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x90ff724*=0x8b9, lpOverlapped=0x0) returned 1 [0138.649] CloseHandle (hObject=0xcf8) returned 1 [0138.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e620) returned 1 [0138.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 Thread: id = 392 os_tid = 0x2ac [0134.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef73e8 [0134.095] wcscpy (in: _Dest=0x3ef73e8, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0134.095] wcscat (in: _Dest=0x3ef73e8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0134.095] wcscat (in: _Dest=0x3ef73e8, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\*") returned="C:\\Users\\Public\\Music\\Sample Music\\*" [0134.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0134.095] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0134.814] wcscmp (_String1=".", _String2=".") returned 0 [0134.814] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.814] wcscmp (_String1="..", _String2=".") returned 1 [0134.814] wcscmp (_String1="..", _String2="..") returned 0 [0134.814] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0134.814] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0134.814] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0134.814] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d54062, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0134.814] wcscmp (_String1="Kalimba.mp3", _String2=".") returned 1 [0134.814] wcscmp (_String1="Kalimba.mp3", _String2="..") returned 1 [0134.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d440 [0134.814] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0134.814] wcscat (in: _Dest=0x3d8d440, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0134.814] wcscat (in: _Dest=0x3d8d440, _Source="Kalimba.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" [0135.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0135.563] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d2df02, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d54062, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0135.563] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2=".") returned 1 [0135.563] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2="..") returned 1 [0135.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db6b8 [0135.563] wcscpy (in: _Dest=0x66db6b8, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0135.563] wcscat (in: _Dest=0x66db6b8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0135.564] wcscat (in: _Dest=0x66db6b8, _Source="Maid with the Flaxen Hair.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" [0135.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0135.565] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0135.565] wcscmp (_String1="Sleep Away.mp3", _String2=".") returned 1 [0135.565] wcscmp (_String1="Sleep Away.mp3", _String2="..") returned 1 [0135.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e54f8 [0135.565] wcscpy (in: _Dest=0x66e54f8, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0135.565] wcscat (in: _Dest=0x66e54f8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0135.565] wcscat (in: _Dest=0x66e54f8, _Source="Sleep Away.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" [0135.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e54f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0135.567] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0135.567] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0135.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0135.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef73e8) returned 1 [0135.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62330) returned 1 Thread: id = 393 os_tid = 0x5f4 [0134.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355200 [0134.117] wcscpy (in: _Dest=0x355200, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0134.117] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0134.117] wcscat (in: _Dest=0x355200, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0134.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0134.117] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0134.815] wcscmp (_String1=".", _String2=".") returned 0 [0134.815] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.815] wcscmp (_String1="..", _String2=".") returned 1 [0134.815] wcscmp (_String1="..", _String2="..") returned 0 [0134.815] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0134.815] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0134.815] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0134.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5c818 [0134.815] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0134.815] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0134.815] wcscat (in: _Dest=0x3e5c818, _Source="usertile10.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0135.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0135.990] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0135.990] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0135.990] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0135.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052e98 [0135.990] wcscpy (in: _Dest=0x3052e98, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.990] wcscat (in: _Dest=0x3052e98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.990] wcscat (in: _Dest=0x3052e98, _Source="usertile11.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0135.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3052e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0135.992] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0135.992] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0135.992] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0135.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bd98 [0135.992] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.992] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.992] wcscat (in: _Dest=0x3e5bd98, _Source="usertile12.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0135.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0135.994] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0135.994] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0135.994] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0135.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5c968 [0135.994] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.994] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.994] wcscat (in: _Dest=0x3e5c968, _Source="usertile13.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0135.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0135.996] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0135.996] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0135.996] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0135.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ca10 [0135.996] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.996] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.996] wcscat (in: _Dest=0x3e5ca10, _Source="usertile14.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0135.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0135.997] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0135.997] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0135.997] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0135.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cab8 [0135.997] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.997] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.998] wcscat (in: _Dest=0x3e5cab8, _Source="usertile15.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0135.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0135.999] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0135.999] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0135.999] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0135.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cb60 [0135.999] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0135.999] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0135.999] wcscat (in: _Dest=0x3e5cb60, _Source="usertile16.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0135.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0136.001] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0136.001] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0136.001] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0136.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cc08 [0136.001] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.001] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.001] wcscat (in: _Dest=0x3e5cc08, _Source="usertile17.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0136.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0136.002] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0136.002] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0136.002] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0136.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ccb0 [0136.002] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.002] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.002] wcscat (in: _Dest=0x3e5ccb0, _Source="usertile18.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0136.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0136.004] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0136.004] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0136.004] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0136.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cd58 [0136.004] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.004] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.004] wcscat (in: _Dest=0x3e5cd58, _Source="usertile19.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0136.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0136.006] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0136.006] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0136.006] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0136.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ce00 [0136.006] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.006] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.006] wcscat (in: _Dest=0x3e5ce00, _Source="usertile20.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0136.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0136.008] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0136.008] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0136.008] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0136.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cea8 [0136.008] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.008] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.008] wcscat (in: _Dest=0x3e5cea8, _Source="usertile21.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0136.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0136.010] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0136.010] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0136.010] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0136.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cf50 [0136.010] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.010] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.010] wcscat (in: _Dest=0x3e5cf50, _Source="usertile22.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0136.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0136.011] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0136.011] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0136.011] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0136.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cff8 [0136.011] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.011] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.011] wcscat (in: _Dest=0x3e5cff8, _Source="usertile23.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0136.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0136.012] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0136.012] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0136.012] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0136.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d0a0 [0136.013] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.013] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.013] wcscat (in: _Dest=0x3e5d0a0, _Source="usertile24.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0136.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0136.014] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0136.014] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0136.014] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0136.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d148 [0136.014] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.014] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.014] wcscat (in: _Dest=0x3e5d148, _Source="usertile25.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0136.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0136.015] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0136.015] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0136.015] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0136.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d1f0 [0136.015] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.015] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.015] wcscat (in: _Dest=0x3e5d1f0, _Source="usertile26.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0136.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0136.016] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0136.016] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0136.016] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0136.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d298 [0136.017] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.017] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.017] wcscat (in: _Dest=0x3e5d298, _Source="usertile27.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0136.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0136.018] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0136.018] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0136.018] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0136.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d340 [0136.018] wcscpy (in: _Dest=0x3e5d340, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.018] wcscat (in: _Dest=0x3e5d340, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.018] wcscat (in: _Dest=0x3e5d340, _Source="usertile28.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0136.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0136.019] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0136.019] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0136.019] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0136.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d3e8 [0136.019] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.019] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.019] wcscat (in: _Dest=0x3e5d3e8, _Source="usertile29.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0136.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0136.020] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0136.020] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0136.020] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0136.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d490 [0136.020] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.020] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.020] wcscat (in: _Dest=0x3e5d490, _Source="usertile30.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0136.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0136.022] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0136.022] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0136.022] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0136.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d538 [0136.022] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.022] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.022] wcscat (in: _Dest=0x3e5d538, _Source="usertile31.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0136.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0136.023] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0136.023] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0136.023] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0136.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d5e0 [0136.023] wcscpy (in: _Dest=0x3e5d5e0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.023] wcscat (in: _Dest=0x3e5d5e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.023] wcscat (in: _Dest=0x3e5d5e0, _Source="usertile32.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0136.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0136.024] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0136.024] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0136.025] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0136.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d688 [0136.025] wcscpy (in: _Dest=0x3e5d688, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0136.025] wcscat (in: _Dest=0x3e5d688, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0136.025] wcscat (in: _Dest=0x3e5d688, _Source="usertile33.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0136.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0138.110] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0138.110] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0138.110] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0138.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5be40 [0138.110] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0138.110] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0138.110] wcscat (in: _Dest=0x3e5be40, _Source="usertile34.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0139.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0139.738] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0139.738] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0139.738] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0139.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d3e8 [0139.738] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.738] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.738] wcscat (in: _Dest=0x3e5d3e8, _Source="usertile35.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0139.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0139.739] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0139.739] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0139.739] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0139.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d1f0 [0139.739] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.739] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.739] wcscat (in: _Dest=0x3e5d1f0, _Source="usertile36.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0139.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0139.741] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0139.741] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0139.741] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0139.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d148 [0139.741] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.741] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.741] wcscat (in: _Dest=0x3e5d148, _Source="usertile37.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0139.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0139.743] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0139.743] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0139.743] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0139.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d0a0 [0139.743] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.743] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.743] wcscat (in: _Dest=0x3e5d0a0, _Source="usertile38.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0139.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0139.751] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0139.751] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0139.751] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0139.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d298 [0139.752] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.752] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.752] wcscat (in: _Dest=0x3e5d298, _Source="usertile39.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0139.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0139.753] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0139.753] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0139.753] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0139.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cff8 [0139.753] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.753] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.753] wcscat (in: _Dest=0x3e5cff8, _Source="usertile40.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0139.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0139.755] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0139.755] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0139.755] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0139.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cf50 [0139.755] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.755] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.755] wcscat (in: _Dest=0x3e5cf50, _Source="usertile41.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0139.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0139.757] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0139.757] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0139.757] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0139.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cea8 [0139.757] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.757] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.757] wcscat (in: _Dest=0x3e5cea8, _Source="usertile42.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0139.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0139.758] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0139.758] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0139.758] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0139.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ce00 [0139.758] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.758] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.758] wcscat (in: _Dest=0x3e5ce00, _Source="usertile43.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0139.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0139.760] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0139.760] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0139.760] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0139.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cd58 [0139.760] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0139.760] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0139.760] wcscat (in: _Dest=0x3e5cd58, _Source="usertile44.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0139.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0139.761] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0139.761] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59510) returned 1 Thread: id = 394 os_tid = 0x3c4 [0134.120] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0134.121] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0135.352] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1010 [0135.352] GetFileSizeEx (in: hFile=0x1010, lpFileSize=0x64cf8a4 | out: lpFileSize=0x64cf8a4*=0) returned 1 [0135.352] FlushFileBuffers (hFile=0x1010) returned 1 [0135.734] CloseHandle (hObject=0x1010) returned 1 [0135.734] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0135.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 395 os_tid = 0x5d8 [0134.122] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0134.122] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0134.122] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.123] GetLastError () returned 0x5 [0134.123] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0134.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6670) returned 1 Thread: id = 396 os_tid = 0x4f8 [0134.124] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0134.124] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0134.125] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.125] GetLastError () returned 0x5 [0134.125] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0134.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 Thread: id = 397 os_tid = 0x130 [0134.126] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav" (normalized: "c:\\users\\eebsym5\\desktop\\-gfcli7tint zifxb.wav")) returned 0x20 [0134.127] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav", dwFileAttributes=0x20) returned 1 [0134.130] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav" (normalized: "c:\\users\\eebsym5\\desktop\\-gfcli7tint zifxb.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1018 [0134.131] GetFileSizeEx (in: hFile=0x1018, lpFileSize=0x5c0fbbc | out: lpFileSize=0x5c0fbbc*=23958) returned 1 [0134.131] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x5d92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.131] ReadFile (in: hFile=0x1018, lpBuffer=0x5c0fb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c0fba8, lpOverlapped=0x0 | out: lpBuffer=0x5c0fb98*, lpNumberOfBytesRead=0x5c0fba8*=0x4, lpOverlapped=0x0) returned 1 [0134.133] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f60 [0134.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4fb0 [0134.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5028 [0134.133] NtQuerySystemTime (in: CurrentTime=0x5c0fb30 | out: CurrentTime=0x5c0fb30*=132482710427952000) returned 0x0 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x1e09fda2 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0xbc9a75d [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x6aef831 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x4921baaa [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x64a2ae47 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x1f785866 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x3a87f647 [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x4814ddce [0134.133] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x37d233e [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x5ca43a54 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x3df99a93 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x46ca929d [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x21e6670e [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x11b2cddb [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x439ffbbb [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x6a46595e [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x43ff0c02 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x3723fb13 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x1324aba5 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x36927b [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x74f4bef3 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x1a02ac51 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x5ead5ca [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x63e86c79 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x4fb464f5 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x2bcfe20e [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x4a50550 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x4b4e74b [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0xf5eb47 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x7c38f118 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0xb7e4081 [0134.134] RtlRandomEx (in: Seed=0x5c0fb28 | out: Seed=0x5c0fb28) returned 0x1e22c0be [0134.145] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.146] ReadFile (in: hFile=0x1018, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5c0fb30, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0x5c0fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0134.146] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32a78 [0134.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b060 [0134.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f60 [0134.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f60) returned 1 [0134.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673cd48 [0134.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f60 [0134.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5028 [0134.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5028) returned 1 [0134.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0134.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a78) returned 1 [0134.147] WriteFile (in: hFile=0x1018, lpBuffer=0x673cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5c0fb30, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesWritten=0x5c0fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0135.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0135.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6739140) returned 1 [0135.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80df8 [0135.943] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.943] WriteFile (in: hFile=0x1018, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x5c0fbb0, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x5c0fbb0*=0x11c, lpOverlapped=0x0) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80e38) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80df8) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f60) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fb0) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5050) returned 1 [0137.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5078) returned 1 [0137.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1cef0 [0137.682] wcscpy (in: _Dest=0x3f1cef0, _Source="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav" [0137.683] wcscat (in: _Dest=0x3f1cef0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav.ac3a86" [0137.683] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav.ac3a86", NtPathName=0x5c0fb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\-GFCLI7TInT ziFXB.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbc58 [0137.687] FlushFileBuffers (hFile=0x1018) returned 1 [0139.054] CloseHandle (hObject=0x1018) returned 1 [0139.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0139.473] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0139.473] wcscat (in: _Dest=0x2fe6c08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0139.473] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0139.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0139.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8eb00) returned 1 Thread: id = 398 os_tid = 0x650 [0134.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots" (normalized: "c:\\users\\eebsym5\\desktop\\-tqj6grctnbng.ots")) returned 0x20 [0134.147] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots", dwFileAttributes=0x20) returned 1 [0134.149] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots" (normalized: "c:\\users\\eebsym5\\desktop\\-tqj6grctnbng.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1014 [0134.149] GetFileSizeEx (in: hFile=0x1014, lpFileSize=0x9dbf954 | out: lpFileSize=0x9dbf954*=15837) returned 1 [0134.149] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x3dd9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.149] ReadFile (in: hFile=0x1014, lpBuffer=0x9dbf930, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dbf940, lpOverlapped=0x0 | out: lpBuffer=0x9dbf930*, lpNumberOfBytesRead=0x9dbf940*=0x4, lpOverlapped=0x0) returned 1 [0134.151] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5028 [0134.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50a0 [0134.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0134.151] NtQuerySystemTime (in: CurrentTime=0x9dbf8c8 | out: CurrentTime=0x9dbf8c8*=132482710428108000) returned 0x0 [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x20e5391c [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x79a85f33 [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x779b3a37 [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x64fcbf93 [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x6b37d5cd [0134.151] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x68f2e4de [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x3c1ffba4 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x24c6b5ea [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x36877f4e [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x6b621ac1 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x7a7e77e9 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x643df3dc [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x10fd0205 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x169d2c29 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x6d9815c [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x23fbf4c0 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x7588e109 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x65ed64aa [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x25c463a9 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x2a493fe9 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x4923a2ca [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x1705cbab [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x6213593a [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x3931dce1 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x79c7d18b [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x40b4d312 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x7b0a31c9 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x24270f68 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x451167a8 [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x4c8e263f [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x77c94ddb [0134.152] RtlRandomEx (in: Seed=0x9dbf8c0 | out: Seed=0x9dbf8c0) returned 0x554eebc1 [0134.164] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.164] ReadFile (in: hFile=0x1014, lpBuffer=0x6731930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dbf8c8, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesRead=0x9dbf8c8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.164] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e329e8 [0134.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b060 [0134.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5028 [0134.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5028) returned 1 [0134.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6735538 [0134.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5028 [0134.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0134.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0134.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0134.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e329e8) returned 1 [0134.165] WriteFile (in: hFile=0x1014, lpBuffer=0x6735538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dbf8c8, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesWritten=0x9dbf8c8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6735538) returned 1 [0135.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0135.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19968 [0135.944] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.944] WriteFile (in: hFile=0x1014, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x9dbf948, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0x9dbf948*=0x114, lpOverlapped=0x0) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198f8) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ac0) returned 1 [0137.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19968) returned 1 [0137.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5028) returned 1 [0137.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50a0) returned 1 [0137.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50f0) returned 1 [0137.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5118) returned 1 [0137.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5568 [0137.689] wcscpy (in: _Dest=0x66e5568, _Source="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots" [0137.689] wcscat (in: _Dest=0x66e5568, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots.ac3a86" [0137.689] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots.ac3a86", NtPathName=0x9dbf8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\-TqJ6GRcTnBng.ots.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59e18 [0137.692] FlushFileBuffers (hFile=0x1014) returned 1 [0139.053] CloseHandle (hObject=0x1014) returned 1 [0139.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6848 [0139.428] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0139.428] wcscat (in: _Dest=0x2fe6848, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0139.428] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0139.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0139.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 399 os_tid = 0x670 [0134.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7b20 [0134.166] wcscpy (in: _Dest=0x3ef7b20, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0134.166] wcscat (in: _Dest=0x3ef7b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0134.166] wcscat (in: _Dest=0x3ef7b20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\*" [0134.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0134.166] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa32fed0, ftCreationTime.dwHighDateTime=0x1d5e703, ftLastAccessTime.dwLowDateTime=0xd9ab8e0, ftLastAccessTime.dwHighDateTime=0x1d5e237, ftLastWriteTime.dwLowDateTime=0xd9ab8e0, ftLastWriteTime.dwHighDateTime=0x1d5e237, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0134.166] wcscmp (_String1=".", _String2=".") returned 0 [0134.166] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa32fed0, ftCreationTime.dwHighDateTime=0x1d5e703, ftLastAccessTime.dwLowDateTime=0xd9ab8e0, ftLastAccessTime.dwHighDateTime=0x1d5e237, ftLastWriteTime.dwLowDateTime=0xd9ab8e0, ftLastWriteTime.dwHighDateTime=0x1d5e237, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.167] wcscmp (_String1="..", _String2=".") returned 1 [0134.167] wcscmp (_String1="..", _String2="..") returned 0 [0134.167] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8915910, ftCreationTime.dwHighDateTime=0x1d5d8fa, ftLastAccessTime.dwLowDateTime=0x6b62c640, ftLastAccessTime.dwHighDateTime=0x1d5dbfa, ftLastWriteTime.dwLowDateTime=0x6b62c640, ftLastWriteTime.dwHighDateTime=0x1d5dbfa, nFileSizeHigh=0x0, nFileSizeLow=0xa194, dwReserved0=0x0, dwReserved1=0x0, cFileName="cOMgyk0nVd.mp3", cAlternateFileName="COMGYK~1.MP3")) returned 1 [0134.167] wcscmp (_String1="cOMgyk0nVd.mp3", _String2=".") returned 1 [0134.167] wcscmp (_String1="cOMgyk0nVd.mp3", _String2="..") returned 1 [0134.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b060 [0134.167] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0134.167] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0134.167] wcscat (in: _Dest=0x3f1b060, _Source="cOMgyk0nVd.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3" [0135.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0135.972] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd8074c0, ftCreationTime.dwHighDateTime=0x1d5deef, ftLastAccessTime.dwLowDateTime=0xaa511580, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0xaa511580, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x94cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gJ8NlbgQZgT.mp3", cAlternateFileName="GJ8NLB~1.MP3")) returned 1 [0135.972] wcscmp (_String1="gJ8NlbgQZgT.mp3", _String2=".") returned 1 [0135.972] wcscmp (_String1="gJ8NlbgQZgT.mp3", _String2="..") returned 1 [0135.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1cf68 [0135.973] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.973] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.973] wcscat (in: _Dest=0x3f1cf68, _Source="gJ8NlbgQZgT.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3" [0135.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0135.974] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdc880, ftCreationTime.dwHighDateTime=0x1d5e81d, ftLastAccessTime.dwLowDateTime=0x259546d0, ftLastAccessTime.dwHighDateTime=0x1d5e82d, ftLastWriteTime.dwLowDateTime=0x259546d0, ftLastWriteTime.dwHighDateTime=0x1d5e82d, nFileSizeHigh=0x0, nFileSizeLow=0xdd83, dwReserved0=0x0, dwReserved1=0x0, cFileName="JruvEu3f.jpg", cAlternateFileName="")) returned 1 [0135.974] wcscmp (_String1="JruvEu3f.jpg", _String2=".") returned 1 [0135.974] wcscmp (_String1="JruvEu3f.jpg", _String2="..") returned 1 [0135.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0135.974] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.974] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.975] wcscat (in: _Dest=0x3f29020, _Source="JruvEu3f.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg" [0135.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0135.976] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6a5730, ftCreationTime.dwHighDateTime=0x1d5e5b4, ftLastAccessTime.dwLowDateTime=0x2aa93c40, ftLastAccessTime.dwHighDateTime=0x1d5db48, ftLastWriteTime.dwLowDateTime=0x2aa93c40, ftLastWriteTime.dwHighDateTime=0x1d5db48, nFileSizeHigh=0x0, nFileSizeLow=0x18e1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mVM3eWlJ3h_OFqL.mp3", cAlternateFileName="MVM3EW~1.MP3")) returned 1 [0135.976] wcscmp (_String1="mVM3eWlJ3h_OFqL.mp3", _String2=".") returned 1 [0135.976] wcscmp (_String1="mVM3eWlJ3h_OFqL.mp3", _String2="..") returned 1 [0135.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e102f0 [0135.976] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.976] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.976] wcscat (in: _Dest=0x3e102f0, _Source="mVM3eWlJ3h_OFqL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3" [0135.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0135.978] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9c870, ftCreationTime.dwHighDateTime=0x1d5dac5, ftLastAccessTime.dwLowDateTime=0x895d7720, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x895d7720, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x17231, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJuA5fYuJ.avi", cAlternateFileName="QJUA5F~1.AVI")) returned 1 [0135.978] wcscmp (_String1="qJuA5fYuJ.avi", _String2=".") returned 1 [0135.978] wcscmp (_String1="qJuA5fYuJ.avi", _String2="..") returned 1 [0135.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e55d8 [0135.978] wcscpy (in: _Dest=0x66e55d8, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.978] wcscat (in: _Dest=0x66e55d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.978] wcscat (in: _Dest=0x66e55d8, _Source="qJuA5fYuJ.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi" [0135.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0135.979] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f4460, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0xb70dd020, ftLastAccessTime.dwHighDateTime=0x1d5d840, ftLastWriteTime.dwLowDateTime=0xb70dd020, ftLastWriteTime.dwHighDateTime=0x1d5d840, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ra6N", cAlternateFileName="")) returned 1 [0135.979] wcscmp (_String1="ra6N", _String2=".") returned 1 [0135.980] wcscmp (_String1="ra6N", _String2="..") returned 1 [0135.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe65a8 [0135.980] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.980] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.980] wcscat (in: _Dest=0x2fe65a8, _Source="ra6N" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" [0135.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0135.981] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bcf4860, ftCreationTime.dwHighDateTime=0x1d5e627, ftLastAccessTime.dwLowDateTime=0x87f716f0, ftLastAccessTime.dwHighDateTime=0x1d5e3b9, ftLastWriteTime.dwLowDateTime=0x87f716f0, ftLastWriteTime.dwHighDateTime=0x1d5e3b9, nFileSizeHigh=0x0, nFileSizeLow=0x8667, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCVITNm PsO3.odt", cAlternateFileName="UCVITN~1.ODT")) returned 1 [0135.981] wcscmp (_String1="UCVITNm PsO3.odt", _String2=".") returned 1 [0135.981] wcscmp (_String1="UCVITNm PsO3.odt", _String2="..") returned 1 [0135.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d6e8 [0135.981] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.981] wcscat (in: _Dest=0x3f1d6e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.981] wcscat (in: _Dest=0x3f1d6e8, _Source="UCVITNm PsO3.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt" [0135.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0135.982] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eccdb40, ftCreationTime.dwHighDateTime=0x1d5e7b1, ftLastAccessTime.dwLowDateTime=0x21d1aec0, ftLastAccessTime.dwHighDateTime=0x1d5e090, ftLastWriteTime.dwLowDateTime=0x21d1aec0, ftLastWriteTime.dwHighDateTime=0x1d5e090, nFileSizeHigh=0x0, nFileSizeLow=0x8495, dwReserved0=0x0, dwReserved1=0x0, cFileName="yx9 evDChi.flv", cAlternateFileName="YX9EVD~1.FLV")) returned 1 [0135.982] wcscmp (_String1="yx9 evDChi.flv", _String2=".") returned 1 [0135.982] wcscmp (_String1="yx9 evDChi.flv", _String2="..") returned 1 [0135.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d760 [0135.982] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.982] wcscat (in: _Dest=0x3f1d760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.982] wcscat (in: _Dest=0x3f1d760, _Source="yx9 evDChi.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv" [0135.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0135.984] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0495660, ftCreationTime.dwHighDateTime=0x1d5e87f, ftLastAccessTime.dwLowDateTime=0xc25d64b0, ftLastAccessTime.dwHighDateTime=0x1d5df3c, ftLastWriteTime.dwLowDateTime=0xc25d64b0, ftLastWriteTime.dwHighDateTime=0x1d5df3c, nFileSizeHigh=0x0, nFileSizeLow=0x13a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="zjkqVj.mp3", cAlternateFileName="")) returned 1 [0135.984] wcscmp (_String1="zjkqVj.mp3", _String2=".") returned 1 [0135.984] wcscmp (_String1="zjkqVj.mp3", _String2="..") returned 1 [0135.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e5648 [0135.984] wcscpy (in: _Dest=0x66e5648, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH" [0135.984] wcscat (in: _Dest=0x66e5648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0135.984] wcscat (in: _Dest=0x66e5648, _Source="zjkqVj.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3" [0135.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0135.985] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0495660, ftCreationTime.dwHighDateTime=0x1d5e87f, ftLastAccessTime.dwLowDateTime=0xc25d64b0, ftLastAccessTime.dwHighDateTime=0x1d5df3c, ftLastWriteTime.dwLowDateTime=0xc25d64b0, ftLastWriteTime.dwHighDateTime=0x1d5df3c, nFileSizeHigh=0x0, nFileSizeLow=0x13a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="zjkqVj.mp3", cAlternateFileName="")) returned 0 [0135.985] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0135.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0135.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7b20) returned 1 [0135.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c80) returned 1 Thread: id = 400 os_tid = 0xfac [0134.169] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots" (normalized: "c:\\users\\eebsym5\\desktop\\2vtr5zuegkcp28efsi.ots")) returned 0x20 [0134.169] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots", dwFileAttributes=0x20) returned 1 [0134.170] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots" (normalized: "c:\\users\\eebsym5\\desktop\\2vtr5zuegkcp28efsi.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1008 [0134.170] GetFileSizeEx (in: hFile=0x1008, lpFileSize=0x9f1feec | out: lpFileSize=0x9f1feec*=17737) returned 1 [0134.170] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x4545, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.170] ReadFile (in: hFile=0x1008, lpBuffer=0x9f1fec8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f1fed8, lpOverlapped=0x0 | out: lpBuffer=0x9f1fec8*, lpNumberOfBytesRead=0x9f1fed8*=0x4, lpOverlapped=0x0) returned 1 [0134.174] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5140 [0134.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0134.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.174] NtQuerySystemTime (in: CurrentTime=0x9f1fe60 | out: CurrentTime=0x9f1fe60*=132482710428420000) returned 0x0 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x7c46e08c [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x24bd04d0 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x2a790c40 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x33f93fe8 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x6a07354a [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x7ef83b9a [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x2291c3ee [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x37b96dca [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x3c602d11 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x187a8024 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x311f76b0 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x11c03903 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x14d792cd [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x11447a30 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x492f6861 [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x4d2c4e [0134.174] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x14a7a06e [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x6c8fbeb7 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x4fe27b07 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x2aeddef [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x1413b66c [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x157cf78f [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0xb2bda81 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x45f6aff6 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x4c2b2137 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x6e88673d [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0xae1c757 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x6d47ac5c [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x5a1e3e09 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x1f1ae073 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x5e7c5881 [0134.175] RtlRandomEx (in: Seed=0x9f1fe58 | out: Seed=0x9f1fe58) returned 0x4f8c8542 [0134.185] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.185] ReadFile (in: hFile=0x1008, lpBuffer=0x672a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f1fe60, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesRead=0x9f1fe60*=0x3c00, lpOverlapped=0x0) returned 1 [0134.186] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e334e0 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b150 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5140 [0134.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5140) returned 1 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672dd28 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5140 [0134.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0134.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0134.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e334e0) returned 1 [0134.186] WriteFile (in: hFile=0x1008, lpBuffer=0x672dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f1fe60, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesWritten=0x9f1fe60*=0x3c00, lpOverlapped=0x0) returned 1 [0135.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672dd28) returned 1 [0135.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0135.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3dd44b8 [0135.947] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.947] WriteFile (in: hFile=0x1008, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x9f1fee0, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x9f1fee0*=0x11e, lpOverlapped=0x0) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b37d0) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3db8) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5140) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0137.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0137.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cef0 [0137.696] wcscpy (in: _Dest=0x3f1cef0, _Source="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots" [0137.696] wcscat (in: _Dest=0x3f1cef0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots.ac3a86" [0137.696] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots.ac3a86", NtPathName=0x9f1fe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\2VTr5zuEgkCp28Efsi.ots.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbc58 [0137.700] FlushFileBuffers (hFile=0x1008) returned 1 [0139.053] CloseHandle (hObject=0x1008) returned 1 [0139.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0139.442] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0139.442] wcscat (in: _Dest=0x2fe6c08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0139.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0139.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0139.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 401 os_tid = 0x7c4 [0134.187] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\2wsmvjlpuw_3yzqib7-.mp3")) returned 0x20 [0134.187] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3", dwFileAttributes=0x20) returned 1 [0134.188] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\2wsmvjlpuw_3yzqib7-.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x100c [0134.188] GetFileSizeEx (in: hFile=0x100c, lpFileSize=0x9d7fcec | out: lpFileSize=0x9d7fcec*=1907) returned 1 [0134.188] SetFilePointerEx (in: hFile=0x100c, liDistanceToMove=0x76f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.188] ReadFile (in: hFile=0x100c, lpBuffer=0x9d7fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d7fcd8, lpOverlapped=0x0 | out: lpBuffer=0x9d7fcc8*, lpNumberOfBytesRead=0x9d7fcd8*=0x4, lpOverlapped=0x0) returned 1 [0134.191] SetFilePointerEx (in: hFile=0x100c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0134.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0134.191] NtQuerySystemTime (in: CurrentTime=0x9d7fc60 | out: CurrentTime=0x9d7fc60*=132482710428576000) returned 0x0 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x618e7263 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x6de412a7 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x7f0a6af9 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x8d7ad57 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x4762fd38 [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x3d6a873d [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x5830fddc [0134.191] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x651474fb [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0xecb3730 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x1211c436 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x7c73e5ce [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x5560082f [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x7a92e247 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x1ac68e57 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x1e8c8ac3 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x73a4da3d [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x655c38a4 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x1aa3b9a2 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x31d5c3c9 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x1dccc0c3 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0xe468844 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x29a6fa56 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x322b7425 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x7befe764 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x309eb0b8 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x413cd489 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x773114b8 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x648fc60f [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x67252422 [0134.192] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x33d69411 [0134.193] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x663a875f [0134.193] RtlRandomEx (in: Seed=0x9d7fc58 | out: Seed=0x9d7fc58) returned 0x66f695ba [0134.204] ReadFile (in: hFile=0x100c, lpBuffer=0x670fce8, nNumberOfBytesToRead=0x773, lpNumberOfBytesRead=0x9d7fc54, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesRead=0x9d7fc54*=0x773, lpOverlapped=0x0) returned 1 [0134.204] SetFilePointerEx (in: hFile=0x100c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.204] WriteFile (in: hFile=0x100c, lpBuffer=0x6726518*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x9d7fc58, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesWritten=0x9d7fc58*=0x773, lpOverlapped=0x0) returned 1 [0135.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0135.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a38 [0135.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0135.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0135.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0135.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0135.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0135.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33408 [0135.630] SetFilePointerEx (in: hFile=0x100c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.630] WriteFile (in: hFile=0x100c, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x9d7fce0, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x9d7fce0*=0x120, lpOverlapped=0x0) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4100) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0136.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0136.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0136.505] wcscpy (in: _Dest=0x3f1b1c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3" [0136.505] wcscat (in: _Dest=0x3f1b1c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3.ac3a86" [0136.505] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3.ac3a86", NtPathName=0x9d7fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\2WsMVjLPuw_3YZQib7-.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db628 [0136.746] FlushFileBuffers (hFile=0x100c) returned 1 [0136.827] CloseHandle (hObject=0x100c) returned 1 [0136.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.829] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.829] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.829] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364850) returned 1 Thread: id = 402 os_tid = 0x73c [0134.205] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif" (normalized: "c:\\users\\eebsym5\\desktop\\9ga9lhpfqj7csu5iov5l.gif")) returned 0x20 [0134.205] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif", dwFileAttributes=0x20) returned 1 [0134.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif" (normalized: "c:\\users\\eebsym5\\desktop\\9ga9lhpfqj7csu5iov5l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb4 [0134.206] GetFileSizeEx (in: hFile=0xfb4, lpFileSize=0x9caf864 | out: lpFileSize=0x9caf864*=64491) returned 1 [0134.206] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0xfbe7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.206] ReadFile (in: hFile=0xfb4, lpBuffer=0x9caf840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9caf850, lpOverlapped=0x0 | out: lpBuffer=0x9caf840*, lpNumberOfBytesRead=0x9caf850*=0x4, lpOverlapped=0x0) returned 1 [0134.208] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0134.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0134.208] NtQuerySystemTime (in: CurrentTime=0x9caf7d8 | out: CurrentTime=0x9caf7d8*=132482710428732000) returned 0x0 [0134.208] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x736c26 [0134.208] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x31febefb [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x6270aebd [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x5ff5f442 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x221c4bbf [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0xd8a6050 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0xf355998 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x7d3697b2 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0xc36b805 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x7eff034e [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x5123093d [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x42a978a1 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x3f637551 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x251900a9 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x450f207e [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x7f3f6c69 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x326f3700 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x143cb347 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x2f0258aa [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x59487f90 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x45c04e33 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x29dfa315 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x7848ca3e [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x44e68e58 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x23734c5b [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x50f5e13c [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x2dd8ac4d [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x124265b2 [0134.209] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x2442c4e9 [0134.210] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x24987669 [0134.210] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x1cd2ea0b [0134.210] RtlRandomEx (in: Seed=0x9caf7d0 | out: Seed=0x9caf7d0) returned 0x207cf25c [0134.219] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.219] ReadFile (in: hFile=0xfb4, lpBuffer=0x674fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9caf7d8, lpOverlapped=0x0 | out: lpBuffer=0x674fce8*, lpNumberOfBytesRead=0x9caf7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.220] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f1e0 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67538f0 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43758 [0134.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0134.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0134.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0134.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f1e0) returned 1 [0134.221] WriteFile (in: hFile=0xfb4, lpBuffer=0x67538f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9caf7d8, lpOverlapped=0x0 | out: lpBuffer=0x67538f0*, lpNumberOfBytesWritten=0x9caf7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67538f0) returned 1 [0136.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fce8) returned 1 [0136.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e41780 [0136.485] SetFilePointerEx (in: hFile=0xfb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.485] WriteFile (in: hFile=0xfb4, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9caf858, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x9caf858*=0x122, lpOverlapped=0x0) returned 1 [0136.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0136.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41618) returned 1 [0136.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0136.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0136.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43758) returned 1 [0136.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0136.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0136.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435f0) returned 1 [0136.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0faf0 [0136.575] wcscpy (in: _Dest=0x3e0faf0, _Source="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif" [0136.575] wcscat (in: _Dest=0x3e0faf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif.ac3a86" [0136.575] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif.ac3a86", NtPathName=0x9caf7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\9gA9lhPfqj7csu5iov5L.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbaa8 [0136.798] FlushFileBuffers (hFile=0xfb4) returned 1 [0136.812] CloseHandle (hObject=0xfb4) returned 1 [0136.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.814] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.814] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 Thread: id = 403 os_tid = 0x7b0 [0134.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf" (normalized: "c:\\users\\eebsym5\\desktop\\b3bl0.swf")) returned 0x20 [0134.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf", dwFileAttributes=0x20) returned 1 [0134.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf" (normalized: "c:\\users\\eebsym5\\desktop\\b3bl0.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffc [0134.223] GetFileSizeEx (in: hFile=0xffc, lpFileSize=0x879f7f4 | out: lpFileSize=0x879f7f4*=27011) returned 1 [0134.223] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x697f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.223] ReadFile (in: hFile=0xffc, lpBuffer=0x879f7d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x879f7e0, lpOverlapped=0x0 | out: lpBuffer=0x879f7d0*, lpNumberOfBytesRead=0x879f7e0*=0x4, lpOverlapped=0x0) returned 1 [0134.225] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0134.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435c8 [0134.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0134.225] NtQuerySystemTime (in: CurrentTime=0x879f768 | out: CurrentTime=0x879f768*=132482710428888000) returned 0x0 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x5d26c775 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x6c054f6f [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x7d32b5d1 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x3ffdc93d [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x5e68a769 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x38e70797 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x11bdef1d [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x5b3b9866 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x765164dc [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x3a68bd6a [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x71c2d2db [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x27d971 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x416d865b [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x49b43666 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x7acf291d [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x39e07f20 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x20001f79 [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x48b7b48c [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x6628b85c [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x3057b5fd [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x76eb5f4c [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x55012cff [0134.226] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x4f3c4b40 [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x7540ea6e [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x7fc1771d [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x53c2a37c [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x4cd8ab92 [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x5058923b [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x1bd92f8a [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x4eb62980 [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x2216b9ed [0134.227] RtlRandomEx (in: Seed=0x879f760 | out: Seed=0x879f760) returned 0x1960eb35 [0134.238] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.238] ReadFile (in: hFile=0xffc, lpBuffer=0x67574f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x879f768, lpOverlapped=0x0 | out: lpBuffer=0x67574f8*, lpNumberOfBytesRead=0x879f768*=0x3c00, lpOverlapped=0x0) returned 1 [0134.239] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ee80 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0134.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x675b100 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43640 [0134.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0134.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0134.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0134.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ee80) returned 1 [0134.239] WriteFile (in: hFile=0xffc, lpBuffer=0x675b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x879f768, lpOverlapped=0x0 | out: lpBuffer=0x675b100*, lpNumberOfBytesWritten=0x879f768*=0x3c00, lpOverlapped=0x0) returned 1 [0136.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b100) returned 1 [0136.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67574f8) returned 1 [0136.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43050 [0136.491] SetFilePointerEx (in: hFile=0xffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.491] WriteFile (in: hFile=0xffc, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x879f7e8, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x879f7e8*=0x104, lpOverlapped=0x0) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43050) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43640) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435c8) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43550) returned 1 [0136.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43528) returned 1 [0136.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6548 [0136.584] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf" [0136.584] wcscat (in: _Dest=0x2fe6548, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf.ac3a86" [0136.584] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf.ac3a86", NtPathName=0x879f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\b3Bl0.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d7d8 [0136.803] FlushFileBuffers (hFile=0xffc) returned 1 [0136.818] CloseHandle (hObject=0xffc) returned 1 [0136.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.818] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.818] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e4c8) returned 1 Thread: id = 404 os_tid = 0x5c8 [0134.240] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\d6q2pu.m4a")) returned 0x20 [0134.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a", dwFileAttributes=0x20) returned 1 [0134.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\d6q2pu.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1004 [0134.241] GetFileSizeEx (in: hFile=0x1004, lpFileSize=0x91ffb14 | out: lpFileSize=0x91ffb14*=39313) returned 1 [0134.241] SetFilePointerEx (in: hFile=0x1004, liDistanceToMove=0x998d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.241] ReadFile (in: hFile=0x1004, lpBuffer=0x91ffaf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91ffb00, lpOverlapped=0x0 | out: lpBuffer=0x91ffaf0*, lpNumberOfBytesRead=0x91ffb00*=0x4, lpOverlapped=0x0) returned 1 [0134.244] SetFilePointerEx (in: hFile=0x1004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0134.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434d8 [0134.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0134.244] NtQuerySystemTime (in: CurrentTime=0x91ffa88 | out: CurrentTime=0x91ffa88*=132482710429044000) returned 0x0 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x436880ee [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x42a6eefe [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x1ecfff88 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x59c5b792 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x534dafd [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x291e99ca [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x42392986 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5f84042d [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x23ed1369 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x246d9da9 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x2417ec29 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5369adfd [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5ff24e10 [0134.244] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x6741315c [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x7acc8b5b [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x734e275c [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x3fd9d736 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0xa62b712 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x70db719 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x30f7662e [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x501c37a9 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x2bd23b38 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x24c35446 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x75079285 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5b7e8d85 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x742e21bc [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x1030c34c [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x4577b259 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5e7cb068 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x13bb64c3 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x5d6f1ba8 [0134.245] RtlRandomEx (in: Seed=0x91ffa80 | out: Seed=0x91ffa80) returned 0x4b89596e [0134.257] SetFilePointerEx (in: hFile=0x1004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.257] ReadFile (in: hFile=0x1004, lpBuffer=0x675ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91ffa88, lpOverlapped=0x0 | out: lpBuffer=0x675ed08*, lpNumberOfBytesRead=0x91ffa88*=0x3c00, lpOverlapped=0x0) returned 1 [0134.258] SetFilePointerEx (in: hFile=0x1004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f108 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0134.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6762910 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43578 [0134.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0134.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0134.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0134.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f108) returned 1 [0134.258] WriteFile (in: hFile=0x1004, lpBuffer=0x6762910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91ffa88, lpOverlapped=0x0 | out: lpBuffer=0x6762910*, lpNumberOfBytesWritten=0x91ffa88*=0x3c00, lpOverlapped=0x0) returned 1 [0136.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762910) returned 1 [0136.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed08) returned 1 [0136.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3bd0 [0136.489] SetFilePointerEx (in: hFile=0x1004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.489] WriteFile (in: hFile=0x1004, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x91ffb08, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x91ffb08*=0x106, lpOverlapped=0x0) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3780) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e20) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3bd0) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43578) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434d8) returned 1 [0136.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43488) returned 1 [0136.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43460) returned 1 [0136.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6728 [0136.581] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a" [0136.581] wcscat (in: _Dest=0x2fe6728, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a.ac3a86" [0136.581] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a.ac3a86", NtPathName=0x91ffa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\D6Q2Pu.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d850 [0136.801] FlushFileBuffers (hFile=0x1004) returned 1 [0136.815] CloseHandle (hObject=0x1004) returned 1 [0136.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.816] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.816] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e478) returned 1 Thread: id = 405 os_tid = 0x3e8 [0134.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eda8 [0134.259] wcscpy (in: _Dest=0x3e5eda8, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0134.259] wcscat (in: _Dest=0x3e5eda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0134.259] wcscat (in: _Dest=0x3e5eda8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\*" [0134.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12e50 [0134.259] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\*", lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd625d380, ftCreationTime.dwHighDateTime=0x1d5e336, ftLastAccessTime.dwLowDateTime=0x500d0440, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x500d0440, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80f38 [0134.260] wcscmp (_String1=".", _String2=".") returned 0 [0134.260] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd625d380, ftCreationTime.dwHighDateTime=0x1d5e336, ftLastAccessTime.dwLowDateTime=0x500d0440, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x500d0440, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.260] wcscmp (_String1="..", _String2=".") returned 1 [0134.260] wcscmp (_String1="..", _String2="..") returned 0 [0134.260] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9340430, ftCreationTime.dwHighDateTime=0x1d5def9, ftLastAccessTime.dwLowDateTime=0xca4de840, ftLastAccessTime.dwHighDateTime=0x1d5db8e, ftLastWriteTime.dwLowDateTime=0xca4de840, ftLastWriteTime.dwHighDateTime=0x1d5db8e, nFileSizeHigh=0x0, nFileSizeLow=0x15c37, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Y amLZucO.mp3", cAlternateFileName="4YAMLZ~1.MP3")) returned 1 [0134.260] wcscmp (_String1="4Y amLZucO.mp3", _String2=".") returned 1 [0134.260] wcscmp (_String1="4Y amLZucO.mp3", _String2="..") returned 1 [0134.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ba40 [0134.260] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0134.260] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0134.260] wcscat (in: _Dest=0x3d8ba40, _Source="4Y amLZucO.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3" [0140.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0140.320] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae7c10, ftCreationTime.dwHighDateTime=0x1d5e0e6, ftLastAccessTime.dwLowDateTime=0x522fd610, ftLastAccessTime.dwHighDateTime=0x1d5dcac, ftLastWriteTime.dwLowDateTime=0x522fd610, ftLastWriteTime.dwHighDateTime=0x1d5dcac, nFileSizeHigh=0x0, nFileSizeLow=0x8eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="86eQI3ZQLoCLI0pJNqN4.mkv", cAlternateFileName="86EQI3~1.MKV")) returned 1 [0140.320] wcscmp (_String1="86eQI3ZQLoCLI0pJNqN4.mkv", _String2=".") returned 1 [0140.320] wcscmp (_String1="86eQI3ZQLoCLI0pJNqN4.mkv", _String2="..") returned 1 [0140.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b510 [0140.320] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0140.320] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0140.321] wcscat (in: _Dest=0x3f1b510, _Source="86eQI3ZQLoCLI0pJNqN4.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv" [0140.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0140.322] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c878e40, ftCreationTime.dwHighDateTime=0x1d5db24, ftLastAccessTime.dwLowDateTime=0x87c7e070, ftLastAccessTime.dwHighDateTime=0x1d5dcf1, ftLastWriteTime.dwLowDateTime=0x87c7e070, ftLastWriteTime.dwHighDateTime=0x1d5dcf1, nFileSizeHigh=0x0, nFileSizeLow=0x1708a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bOiOt6gF4NZ.avi", cAlternateFileName="BOIOT6~1.AVI")) returned 1 [0140.322] wcscmp (_String1="bOiOt6gF4NZ.avi", _String2=".") returned 1 [0140.322] wcscmp (_String1="bOiOt6gF4NZ.avi", _String2="..") returned 1 [0140.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x66cd4b0 [0140.322] wcscpy (in: _Dest=0x66cd4b0, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0140.322] wcscat (in: _Dest=0x66cd4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0140.322] wcscat (in: _Dest=0x66cd4b0, _Source="bOiOt6gF4NZ.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi" [0140.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0140.324] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28645160, ftCreationTime.dwHighDateTime=0x1d5e474, ftLastAccessTime.dwLowDateTime=0xbf8538a0, ftLastAccessTime.dwHighDateTime=0x1d5e214, ftLastWriteTime.dwLowDateTime=0xbf8538a0, ftLastWriteTime.dwHighDateTime=0x1d5e214, nFileSizeHigh=0x0, nFileSizeLow=0x1f2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JrtbhoQ pnDIg.png", cAlternateFileName="JRTBHO~1.PNG")) returned 1 [0140.324] wcscmp (_String1="JrtbhoQ pnDIg.png", _String2=".") returned 1 [0140.324] wcscmp (_String1="JrtbhoQ pnDIg.png", _String2="..") returned 1 [0140.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd650 [0140.324] wcscpy (in: _Dest=0x66cd650, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0140.324] wcscat (in: _Dest=0x66cd650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0140.324] wcscat (in: _Dest=0x66cd650, _Source="JrtbhoQ pnDIg.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png" [0140.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0140.326] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29677fc0, ftCreationTime.dwHighDateTime=0x1d5de01, ftLastAccessTime.dwLowDateTime=0x511f4550, ftLastAccessTime.dwHighDateTime=0x1d5e871, ftLastWriteTime.dwLowDateTime=0x511f4550, ftLastWriteTime.dwHighDateTime=0x1d5e871, nFileSizeHigh=0x0, nFileSizeLow=0x263d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUgdv68.jpg", cAlternateFileName="")) returned 1 [0140.326] wcscmp (_String1="MUgdv68.jpg", _String2=".") returned 1 [0140.326] wcscmp (_String1="MUgdv68.jpg", _String2="..") returned 1 [0140.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0140.326] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0140.326] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0140.326] wcscat (in: _Dest=0x2fe6848, _Source="MUgdv68.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg" [0140.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0140.327] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff59b10, ftCreationTime.dwHighDateTime=0x1d5d9e0, ftLastAccessTime.dwLowDateTime=0xdb64fcf0, ftLastAccessTime.dwHighDateTime=0x1d5e83f, ftLastWriteTime.dwLowDateTime=0xdb64fcf0, ftLastWriteTime.dwHighDateTime=0x1d5e83f, nFileSizeHigh=0x0, nFileSizeLow=0x934a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X Nyrc.flv", cAlternateFileName="XNYRC~1.FLV")) returned 1 [0140.327] wcscmp (_String1="X Nyrc.flv", _String2=".") returned 1 [0140.327] wcscmp (_String1="X Nyrc.flv", _String2="..") returned 1 [0140.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe67e8 [0140.327] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR" [0140.327] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0140.328] wcscat (in: _Dest=0x2fe67e8, _Source="X Nyrc.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv" [0140.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0140.329] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff59b10, ftCreationTime.dwHighDateTime=0x1d5d9e0, ftLastAccessTime.dwLowDateTime=0xdb64fcf0, ftLastAccessTime.dwHighDateTime=0x1d5e83f, ftLastWriteTime.dwLowDateTime=0xdb64fcf0, ftLastWriteTime.dwHighDateTime=0x1d5e83f, nFileSizeHigh=0x0, nFileSizeLow=0x934a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X Nyrc.flv", cAlternateFileName="XNYRC~1.FLV")) returned 0 [0140.329] FindClose (in: hFindFile=0x3e80f38 | out: hFindFile=0x3e80f38) returned 1 [0140.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12e50) returned 1 [0140.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0140.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32fd0) returned 1 Thread: id = 406 os_tid = 0x434 [0134.265] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf" (normalized: "c:\\users\\eebsym5\\desktop\\feetz.swf")) returned 0x20 [0134.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf", dwFileAttributes=0x20) returned 1 [0134.266] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf" (normalized: "c:\\users\\eebsym5\\desktop\\feetz.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfdc [0134.267] GetFileSizeEx (in: hFile=0xfdc, lpFileSize=0xa7ffb24 | out: lpFileSize=0xa7ffb24*=98822) returned 1 [0134.267] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x18202, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.267] ReadFile (in: hFile=0xfdc, lpBuffer=0xa7ffb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa7ffb10, lpOverlapped=0x0 | out: lpBuffer=0xa7ffb00*, lpNumberOfBytesRead=0xa7ffb10*=0x4, lpOverlapped=0x0) returned 1 [0134.269] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0134.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0134.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0134.269] NtQuerySystemTime (in: CurrentTime=0xa7ffa98 | out: CurrentTime=0xa7ffa98*=132482710429356000) returned 0x0 [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x776ce5fa [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x6ee9d58f [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x1a57d41f [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x7af03a30 [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3a63bc74 [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x78e2e34e [0134.269] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3bbdd31b [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x1e4a159 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0xb239d08 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3375ff48 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3cae57d0 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x4f520caa [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x2c4ac981 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x1912c238 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x6e370f7b [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3736f547 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x44617ba4 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x63154de1 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x46067b8f [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x557786da [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x25d31592 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x4250ae31 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x66224c3c [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0xabaa80c [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x62bdd4ab [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x5653c048 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x1c3f32bf [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x323ef848 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x2158115e [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x19d533f3 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x537a053 [0134.270] RtlRandomEx (in: Seed=0xa7ffa90 | out: Seed=0xa7ffa90) returned 0x3ffc3dff [0134.281] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.282] ReadFile (in: hFile=0xfdc, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0134.282] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ebf8 [0134.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0134.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0134.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0134.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0134.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0134.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0134.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0134.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0134.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebf8) returned 1 [0134.283] WriteFile (in: hFile=0xfdc, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0136.495] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.495] ReadFile (in: hFile=0xfdc, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.496] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e410c0 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0136.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0136.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0136.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e410c0) returned 1 [0136.497] WriteFile (in: hFile=0xfdc, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0136.500] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x14606, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.500] ReadFile (in: hFile=0xfdc, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.500] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x14606, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e410c0 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0136.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e410c0) returned 1 [0136.501] WriteFile (in: hFile=0xfdc, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0xa7ffa98*=0x3c00, lpOverlapped=0x0) returned 1 [0136.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0136.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e758 [0136.507] SetFilePointerEx (in: hFile=0xfdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.507] WriteFile (in: hFile=0xfdc, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xa7ffb18, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0xa7ffb18*=0x144, lpOverlapped=0x0) returned 1 [0136.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0136.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0136.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0136.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0136.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e758) returned 1 [0136.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0136.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0136.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0136.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0136.592] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf" [0136.592] wcscat (in: _Dest=0x2fe1328, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf.ac3a86" [0136.592] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf.ac3a86", NtPathName=0xa7ffa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\fEetz.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1da30 [0136.738] FlushFileBuffers (hFile=0xfdc) returned 1 [0136.822] CloseHandle (hObject=0xfdc) returned 1 [0136.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.823] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.823] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.823] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e3d8) returned 1 Thread: id = 407 os_tid = 0x7e0 [0134.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ea8 [0134.283] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9" [0134.284] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\" [0134.284] wcscat (in: _Dest=0x2fe6ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\*" [0134.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0134.284] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb410db80, ftCreationTime.dwHighDateTime=0x1d5dc6c, ftLastAccessTime.dwLowDateTime=0xfefa370, ftLastAccessTime.dwHighDateTime=0x1d5e189, ftLastWriteTime.dwLowDateTime=0xfefa370, ftLastWriteTime.dwHighDateTime=0x1d5e189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d38 [0134.284] wcscmp (_String1=".", _String2=".") returned 0 [0134.284] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb410db80, ftCreationTime.dwHighDateTime=0x1d5dc6c, ftLastAccessTime.dwLowDateTime=0xfefa370, ftLastAccessTime.dwHighDateTime=0x1d5e189, ftLastWriteTime.dwLowDateTime=0xfefa370, ftLastWriteTime.dwHighDateTime=0x1d5e189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.284] wcscmp (_String1="..", _String2=".") returned 1 [0134.284] wcscmp (_String1="..", _String2="..") returned 0 [0134.284] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c5f5c0, ftCreationTime.dwHighDateTime=0x1d5e0c4, ftLastAccessTime.dwLowDateTime=0x14cb5180, ftLastAccessTime.dwHighDateTime=0x1d5dd0d, ftLastWriteTime.dwLowDateTime=0x14cb5180, ftLastWriteTime.dwHighDateTime=0x1d5dd0d, nFileSizeHigh=0x0, nFileSizeLow=0xa2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_l9s6wp_l5v27F5Plmp.swf", cAlternateFileName="W_L9S6~1.SWF")) returned 1 [0134.284] wcscmp (_String1="W_l9s6wp_l5v27F5Plmp.swf", _String2=".") returned 1 [0134.284] wcscmp (_String1="W_l9s6wp_l5v27F5Plmp.swf", _String2="..") returned 1 [0134.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355170 [0134.285] wcscpy (in: _Dest=0x355170, _Source="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9" [0134.285] wcscat (in: _Dest=0x355170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\" [0134.285] wcscat (in: _Dest=0x355170, _Source="W_l9s6wp_l5v27F5Plmp.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf" [0135.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0135.532] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c5f5c0, ftCreationTime.dwHighDateTime=0x1d5e0c4, ftLastAccessTime.dwLowDateTime=0x14cb5180, ftLastAccessTime.dwHighDateTime=0x1d5dd0d, ftLastWriteTime.dwLowDateTime=0x14cb5180, ftLastWriteTime.dwHighDateTime=0x1d5dd0d, nFileSizeHigh=0x0, nFileSizeLow=0xa2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_l9s6wp_l5v27F5Plmp.swf", cAlternateFileName="W_L9S6~1.SWF")) returned 0 [0135.532] FindClose (in: hFindFile=0x3e80d38 | out: hFindFile=0x3e80d38) returned 1 [0135.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0135.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 [0135.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 408 os_tid = 0xaa4 [0134.285] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png" (normalized: "c:\\users\\eebsym5\\desktop\\gukykxvbeffx_yenulek.png")) returned 0x20 [0134.285] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png", dwFileAttributes=0x20) returned 1 [0134.286] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png" (normalized: "c:\\users\\eebsym5\\desktop\\gukykxvbeffx_yenulek.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xff0 [0134.286] GetFileSizeEx (in: hFile=0xff0, lpFileSize=0x841fad4 | out: lpFileSize=0x841fad4*=12186) returned 1 [0134.286] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x2f96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.286] ReadFile (in: hFile=0xff0, lpBuffer=0x841fab0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x841fac0, lpOverlapped=0x0 | out: lpBuffer=0x841fab0*, lpNumberOfBytesRead=0x841fac0*=0x4, lpOverlapped=0x0) returned 1 [0134.289] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0134.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0134.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432f8 [0134.289] NtQuerySystemTime (in: CurrentTime=0x841fa48 | out: CurrentTime=0x841fa48*=132482710429512000) returned 0x0 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x50158468 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x78f1d522 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x1214e415 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x3ad32dcb [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x73577fb [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x504331de [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x21571b9e [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x5b467e1c [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x4ca727d5 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0xb608039 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x24f7a9db [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x24efb6de [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x6b7dbd4f [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x5deca781 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0xb01c009 [0134.289] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x6c3b1bc4 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x5aa6c46e [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x3336fbc0 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x68973a77 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x24ee27e9 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x6e1c7aa7 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x1d957578 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x1584a3b4 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x2b47bc7d [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x2f512dae [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x7128b026 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x5177d7b4 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x40a52fb7 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x41ff5ff6 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x1da7ce68 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x604fcad9 [0134.290] RtlRandomEx (in: Seed=0x841fa40 | out: Seed=0x841fa40) returned 0x2b46b0bc [0134.301] ReadFile (in: hFile=0xff0, lpBuffer=0x676dd28, nNumberOfBytesToRead=0x2f9a, lpNumberOfBytesRead=0x841fa3c, lpOverlapped=0x0 | out: lpBuffer=0x676dd28*, lpNumberOfBytesRead=0x841fa3c*=0x2f9a, lpOverlapped=0x0) returned 1 [0134.301] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.301] WriteFile (in: hFile=0xff0, lpBuffer=0x6771930*, nNumberOfBytesToWrite=0x2f9a, lpNumberOfBytesWritten=0x841fa40, lpOverlapped=0x0 | out: lpBuffer=0x6771930*, lpNumberOfBytesWritten=0x841fa40*=0x2f9a, lpOverlapped=0x0) returned 1 [0136.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0136.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43168 [0136.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43168) returned 1 [0136.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771930) returned 1 [0136.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676dd28) returned 1 [0136.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0136.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ef58) returned 1 [0136.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5ef58 [0136.500] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.500] WriteFile (in: hFile=0xff0, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x841fac8, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0x841fac8*=0x122, lpOverlapped=0x0) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61228) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43168) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ef58) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0136.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0136.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0136.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0136.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f8f0 [0136.588] wcscpy (in: _Dest=0x3e0f8f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png") returned="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png" [0136.588] wcscat (in: _Dest=0x3e0f8f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png.ac3a86" [0136.588] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png.ac3a86", NtPathName=0x841fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\gUkYKxVbEfFX_yeNUleK.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbb38 [0136.711] FlushFileBuffers (hFile=0xff0) returned 1 [0136.716] CloseHandle (hObject=0xff0) returned 1 [0136.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe3ae8 [0136.717] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.717] wcscat (in: _Dest=0x2fe3ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 [0136.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 Thread: id = 409 os_tid = 0x644 [0134.302] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\h1y6f.bmp")) returned 0x20 [0134.302] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp", dwFileAttributes=0x20) returned 1 [0134.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\h1y6f.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe4 [0134.303] GetFileSizeEx (in: hFile=0xfe4, lpFileSize=0xac7fc74 | out: lpFileSize=0xac7fc74*=55137) returned 1 [0134.303] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0xd75d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.303] ReadFile (in: hFile=0xfe4, lpBuffer=0xac7fc50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac7fc60, lpOverlapped=0x0 | out: lpBuffer=0xac7fc50*, lpNumberOfBytesRead=0xac7fc60*=0x4, lpOverlapped=0x0) returned 1 [0134.305] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0134.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432f8 [0134.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0134.305] NtQuerySystemTime (in: CurrentTime=0xac7fbe8 | out: CurrentTime=0xac7fbe8*=132482710429668000) returned 0x0 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x5fc1b201 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x5b1be852 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x6d407400 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x1f234939 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x20462ffb [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x63d80bec [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x2fe1fbc7 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x33cec627 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x3b10a019 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x377ef532 [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x1bad049a [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x111a0c5d [0134.305] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x4592d510 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x5aaaa8e7 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x58d4bdf9 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x4020e90e [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x77928aac [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x38e6e52 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x494304bf [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x6f9d72a [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x6dc2b538 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0xea70bb0 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0xdd5acec [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x1abb8e3c [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x5f275123 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x37fd4a78 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0xf645fbd [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x71578331 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x595aaba6 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x1a66ed15 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x7d8c642 [0134.306] RtlRandomEx (in: Seed=0xac7fbe0 | out: Seed=0xac7fbe0) returned 0x26edecf [0134.316] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.316] ReadFile (in: hFile=0xfe4, lpBuffer=0x6775538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xac7fbe8, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesRead=0xac7fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.317] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5edf0 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0134.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6779140 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0134.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0134.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0134.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5edf0) returned 1 [0134.318] WriteFile (in: hFile=0xfe4, lpBuffer=0x6779140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xac7fbe8, lpOverlapped=0x0 | out: lpBuffer=0x6779140*, lpNumberOfBytesWritten=0xac7fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779140) returned 1 [0136.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0136.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0136.506] SetFilePointerEx (in: hFile=0xfe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.506] WriteFile (in: hFile=0xfe4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xac7fc68, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xac7fc68*=0x104, lpOverlapped=0x0) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0136.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0136.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3ae8 [0136.590] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp" [0136.590] wcscat (in: _Dest=0x2fe3ae8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp.ac3a86" [0136.590] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp.ac3a86", NtPathName=0xac7fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\H1y6F.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d9b8 [0136.709] FlushFileBuffers (hFile=0xfe4) returned 1 [0136.712] CloseHandle (hObject=0xfe4) returned 1 [0136.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe3ae8 [0136.714] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.714] wcscat (in: _Dest=0x2fe3ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.714] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 [0136.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e298) returned 1 Thread: id = 410 os_tid = 0x3c8 [0134.318] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png" (normalized: "c:\\users\\eebsym5\\desktop\\iz1n2.png")) returned 0x20 [0134.318] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png", dwFileAttributes=0x20) returned 1 [0134.319] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png" (normalized: "c:\\users\\eebsym5\\desktop\\iz1n2.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd0 [0134.319] GetFileSizeEx (in: hFile=0xfd0, lpFileSize=0x899f92c | out: lpFileSize=0x899f92c*=99142) returned 1 [0134.319] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x18342, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.319] ReadFile (in: hFile=0xfd0, lpBuffer=0x899f908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x899f918, lpOverlapped=0x0 | out: lpBuffer=0x899f908*, lpNumberOfBytesRead=0x899f918*=0x4, lpOverlapped=0x0) returned 1 [0134.321] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0134.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43208 [0134.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0134.322] NtQuerySystemTime (in: CurrentTime=0x899f8a0 | out: CurrentTime=0x899f8a0*=132482710429824000) returned 0x0 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x7462a4dc [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x53a26bdb [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x3bdf3402 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x239761e9 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x236c8929 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x43a3cd [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x31254e32 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x203465a9 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x1e3c59a7 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x242397f9 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x2341b069 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x61b40cac [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x54345535 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x467dd71b [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x7cac7d18 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0xc453a22 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x16c142f6 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x3bb464e3 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x2321e95e [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x737b3a18 [0134.322] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x15cf488b [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0xa79bcf8 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x40f68296 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x4c36f86b [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x45ea68ab [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x37ca89a7 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x12c49261 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x123bdbe5 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x5110683b [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x416f83f7 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x327d73f0 [0134.323] RtlRandomEx (in: Seed=0x899f898 | out: Seed=0x899f898) returned 0x3e7ba316 [0134.335] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.335] ReadFile (in: hFile=0xfd0, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.335] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f198 [0134.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0134.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0134.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6780950 [0134.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0134.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0134.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0134.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f198) returned 1 [0134.336] WriteFile (in: hFile=0xfd0, lpBuffer=0x6780950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesWritten=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0134.841] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.842] ReadFile (in: hFile=0xfd0, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.842] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b08 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0134.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6780950 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49e8 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0134.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0134.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0134.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b08) returned 1 [0134.843] WriteFile (in: hFile=0xfd0, lpBuffer=0x6780950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesWritten=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0134.847] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x14746, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.847] ReadFile (in: hFile=0xfd0, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.847] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x14746, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b08 [0134.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0134.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0134.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0134.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6780950 [0134.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef49c0 [0134.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0134.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0134.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0134.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b08) returned 1 [0134.848] WriteFile (in: hFile=0xfd0, lpBuffer=0x6780950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x899f8a0, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesWritten=0x899f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0134.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0134.853] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.854] WriteFile (in: hFile=0xfd0, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x899f920, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0x899f920*=0x144, lpOverlapped=0x0) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e20) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0134.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0134.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe65a8 [0134.937] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png") returned="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png" [0134.937] wcscat (in: _Dest=0x2fe65a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png.ac3a86" [0134.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png.ac3a86", NtPathName=0x899f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\Iz1N2.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d3a0 [0135.015] FlushFileBuffers (hFile=0xfd0) returned 1 [0135.653] CloseHandle (hObject=0xfd0) returned 1 [0135.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0135.670] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.671] wcscat (in: _Dest=0x2fe68a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.671] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0135.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e338) returned 1 Thread: id = 411 os_tid = 0x25c [0134.337] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt" (normalized: "c:\\users\\eebsym5\\desktop\\meq2zc.odt")) returned 0x20 [0134.337] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt", dwFileAttributes=0x20) returned 1 [0134.338] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt" (normalized: "c:\\users\\eebsym5\\desktop\\meq2zc.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe0 [0134.338] GetFileSizeEx (in: hFile=0xfe0, lpFileSize=0xad1f884 | out: lpFileSize=0xad1f884*=31414) returned 1 [0134.338] SetFilePointerEx (in: hFile=0xfe0, liDistanceToMove=0x7ab2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.338] ReadFile (in: hFile=0xfe0, lpBuffer=0xad1f860, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad1f870, lpOverlapped=0x0 | out: lpBuffer=0xad1f860*, lpNumberOfBytesRead=0xad1f870*=0x4, lpOverlapped=0x0) returned 1 [0134.340] SetFilePointerEx (in: hFile=0xfe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0134.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43168 [0134.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0134.340] NtQuerySystemTime (in: CurrentTime=0xad1f7f8 | out: CurrentTime=0xad1f7f8*=132482710429980000) returned 0x0 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x6e300de6 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x79d9723 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x7db73054 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x24dfaa61 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x24228833 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x3d9b2716 [0134.340] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x864d5dd [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x1f9eafc5 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x30bc30be [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x5196a37d [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x1d78995 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x6e5aef97 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x42132df6 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x1092001 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x5c5794c9 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x5e54340d [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x6fb885cc [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x5ed85349 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0xb6acee1 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x684604ec [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x561985d [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x66694a74 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x62ee5d54 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x9c96d50 [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x57287b7a [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x2b17402f [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x7064a91b [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x3d0c5b7b [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x704ae9dc [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x57fb144e [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x2e46e83b [0134.341] RtlRandomEx (in: Seed=0xad1f7f0 | out: Seed=0xad1f7f0) returned 0x6af14477 [0134.352] SetFilePointerEx (in: hFile=0xfe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.352] ReadFile (in: hFile=0xfe0, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0xad1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.352] SetFilePointerEx (in: hFile=0xfe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ed18 [0134.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0134.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0134.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0134.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0134.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0134.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0134.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ed18) returned 1 [0134.353] WriteFile (in: hFile=0xfe0, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad1f7f8, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0xad1f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0134.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784558) returned 1 [0134.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db4020 [0134.846] SetFilePointerEx (in: hFile=0xfe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.846] WriteFile (in: hFile=0xfe0, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xad1f878, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xad1f878*=0x106, lpOverlapped=0x0) returned 1 [0134.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43168) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0134.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0134.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe66c8 [0134.932] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt" [0134.932] wcscat (in: _Dest=0x2fe66c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt.ac3a86" [0134.932] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt.ac3a86", NtPathName=0xad1f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\meq2Zc.odt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d328 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d328) returned 1 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9e560) returned 1 [0134.989] NtQueryInformationFile (in: FileHandle=0xfe0, IoStatusBlock=0xad1f7c8, FileInformation=0xad1f7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad1f7c8, FileInformation=0xad1f7d0) returned 0x0 [0134.989] NtSetInformationFile (FileHandle=0xfe0, IoStatusBlock=0xad1f7c8, FileInformation=0xad1f7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0134.994] FlushFileBuffers (hFile=0xfe0) returned 1 [0135.653] CloseHandle (hObject=0xfe0) returned 1 [0135.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0135.665] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.665] wcscat (in: _Dest=0x2fe1328, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0xffffffff [0135.665] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfcc [0135.685] WriteFile (in: hFile=0xfcc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xad1f80c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xad1f80c*=0x8b9, lpOverlapped=0x0) returned 1 [0135.687] CloseHandle (hObject=0xfcc) returned 1 [0135.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0135.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e2e8) returned 1 Thread: id = 412 os_tid = 0xf5c [0134.354] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv" (normalized: "c:\\users\\eebsym5\\desktop\\mltdivlngnsq.csv")) returned 0x20 [0134.354] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv", dwFileAttributes=0x20) returned 1 [0134.355] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv" (normalized: "c:\\users\\eebsym5\\desktop\\mltdivlngnsq.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd8 [0134.355] GetFileSizeEx (in: hFile=0xfd8, lpFileSize=0xadcfba4 | out: lpFileSize=0xadcfba4*=55793) returned 1 [0134.355] SetFilePointerEx (in: hFile=0xfd8, liDistanceToMove=0xd9ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.355] ReadFile (in: hFile=0xfd8, lpBuffer=0xadcfb80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadcfb90, lpOverlapped=0x0 | out: lpBuffer=0xadcfb80*, lpNumberOfBytesRead=0xadcfb90*=0x4, lpOverlapped=0x0) returned 1 [0134.358] SetFilePointerEx (in: hFile=0xfd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0134.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430a0 [0134.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0134.358] NtQuerySystemTime (in: CurrentTime=0xadcfb18 | out: CurrentTime=0xadcfb18*=132482710430292000) returned 0x0 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x4c5ca8ae [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x88085e4 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x147a6c72 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0xad334f3 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x4c98c38d [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0xfec31dc [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x2ae47cbc [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x72294e1c [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x35ae2346 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x46d7a3e5 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x4370b652 [0134.358] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x1b4e882f [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x410aa435 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x7e3d901c [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x45e1816 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x565181a8 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x732dd8dc [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x49fcf22f [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x65f07ce6 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x31624e37 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x49c5316e [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x254580f5 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x680ad392 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x785d7c6f [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x374442da [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x5b41c6a4 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x5c924469 [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x25e5add [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x66c6c03b [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x578b695b [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x2007875f [0134.359] RtlRandomEx (in: Seed=0xadcfb10 | out: Seed=0xadcfb10) returned 0x88f157e [0134.370] SetFilePointerEx (in: hFile=0xfd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.370] ReadFile (in: hFile=0xfd8, lpBuffer=0x678bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xadcfb18, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesRead=0xadcfb18*=0x3c00, lpOverlapped=0x0) returned 1 [0134.370] SetFilePointerEx (in: hFile=0xfd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e9b8 [0134.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0134.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0134.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67efce8 [0134.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43118 [0134.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0134.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0134.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e9b8) returned 1 [0134.375] WriteFile (in: hFile=0xfd8, lpBuffer=0x67efce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xadcfb18, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesWritten=0xadcfb18*=0x3c00, lpOverlapped=0x0) returned 1 [0134.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67efce8) returned 1 [0134.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0134.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f199d8 [0134.852] SetFilePointerEx (in: hFile=0xfd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.852] WriteFile (in: hFile=0xfd8, lpBuffer=0x3d554c8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xadcfb98, lpOverlapped=0x0 | out: lpBuffer=0x3d554c8*, lpNumberOfBytesWritten=0xadcfb98*=0x112, lpOverlapped=0x0) returned 1 [0134.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 [0134.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0134.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0134.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0134.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43118) returned 1 [0134.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430a0) returned 1 [0134.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43050) returned 1 [0134.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0134.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b80 [0134.935] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv") returned="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv" [0134.935] wcscat (in: _Dest=0x3f29b80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv.ac3a86" [0134.935] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv.ac3a86", NtPathName=0xadcfb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\MLtdivlNGnSQ.csv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da64f0 [0134.998] FlushFileBuffers (hFile=0xfd8) returned 1 [0135.653] CloseHandle (hObject=0xfd8) returned 1 [0135.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6e48 [0135.666] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.667] wcscat (in: _Dest=0x2fe6e48, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 [0135.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 413 os_tid = 0xf60 [0134.376] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png" (normalized: "c:\\users\\eebsym5\\desktop\\psqam qhz9u8gfzxh.png")) returned 0x20 [0134.376] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png", dwFileAttributes=0x20) returned 1 [0134.377] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png" (normalized: "c:\\users\\eebsym5\\desktop\\psqam qhz9u8gfzxh.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd4 [0134.377] GetFileSizeEx (in: hFile=0xfd4, lpFileSize=0x895f9bc | out: lpFileSize=0x895f9bc*=28237) returned 1 [0134.377] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x6e49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.377] ReadFile (in: hFile=0xfd4, lpBuffer=0x895f998, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x895f9a8, lpOverlapped=0x0 | out: lpBuffer=0x895f998*, lpNumberOfBytesRead=0x895f9a8*=0x4, lpOverlapped=0x0) returned 1 [0134.379] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0134.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43000 [0134.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0134.379] NtQuerySystemTime (in: CurrentTime=0x895f930 | out: CurrentTime=0x895f930*=132482710430448000) returned 0x0 [0134.379] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x96d3fe5 [0134.379] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x2db3c9cb [0134.379] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x9875889 [0134.379] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x2506975c [0134.379] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x7879da49 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x62b34645 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x6ca6c551 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x4fd65022 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0xf1d819f [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x1efc9a6 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x5d23d217 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x5ba0dfc5 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x145201fe [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x6e83a90f [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x54c1a07b [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x6829e14f [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x780c953a [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0xf4c1178 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x7bef3a85 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x68a8b06e [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x43a3cc42 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x7be6d292 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x1c563be5 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x65895b46 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x2848a3b9 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x3c50d9dd [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x2ade6072 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x3d2646ac [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x46a2b7ae [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x78412d61 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x54623361 [0134.380] RtlRandomEx (in: Seed=0x895f928 | out: Seed=0x895f928) returned 0x5ac61589 [0134.392] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.392] ReadFile (in: hFile=0xfd4, lpBuffer=0x67f38f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x895f930, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesRead=0x895f930*=0x3c00, lpOverlapped=0x0) returned 1 [0134.392] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e928 [0134.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0134.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0134.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f74f8 [0134.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43078 [0134.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0134.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0134.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e928) returned 1 [0134.394] WriteFile (in: hFile=0xfd4, lpBuffer=0x67f74f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x895f930, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesWritten=0x895f930*=0x3c00, lpOverlapped=0x0) returned 1 [0134.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0134.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0134.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066d40 [0134.857] SetFilePointerEx (in: hFile=0xfd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.858] WriteFile (in: hFile=0xfd4, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x895f9b0, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0x895f9b0*=0x11c, lpOverlapped=0x0) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e80) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43000) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0134.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0134.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d418 [0134.939] wcscpy (in: _Dest=0x3f1d418, _Source="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png") returned="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png" [0134.939] wcscat (in: _Dest=0x3f1d418, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png.ac3a86" [0134.939] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png.ac3a86", NtPathName=0x895f928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\PSqaM qhZ9U8gFzxh.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db598 [0135.016] FlushFileBuffers (hFile=0xfd4) returned 1 [0135.654] CloseHandle (hObject=0xfd4) returned 1 [0135.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0135.673] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.673] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0135.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cbb8) returned 1 Thread: id = 414 os_tid = 0xf64 [0134.394] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\pyj eyoq.mkv")) returned 0x20 [0134.394] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv", dwFileAttributes=0x20) returned 1 [0134.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\pyj eyoq.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc8 [0134.395] GetFileSizeEx (in: hFile=0xfc8, lpFileSize=0xabbff0c | out: lpFileSize=0xabbff0c*=34763) returned 1 [0134.395] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x87c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.395] ReadFile (in: hFile=0xfc8, lpBuffer=0xabbfee8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabbfef8, lpOverlapped=0x0 | out: lpBuffer=0xabbfee8*, lpNumberOfBytesRead=0xabbfef8*=0x4, lpOverlapped=0x0) returned 1 [0134.397] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0134.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0134.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0134.398] NtQuerySystemTime (in: CurrentTime=0xabbfe80 | out: CurrentTime=0xabbfe80*=132482710430604000) returned 0x0 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x7005aec9 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x6fece293 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x150b21bf [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x18619363 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x68e8f638 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x3f9371c0 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x7daf9cbe [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x128bcede [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x4d679a0 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x1eebe819 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x432fd956 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x226b74a9 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x47313b7b [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x18ec1bce [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x5ea1fc0f [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0xb3d6fce [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x1809a9f3 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x6eaad12e [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x1f71f288 [0134.398] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x116e8e5d [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x2a081de3 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x138b4fac [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x409f0588 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x4c490b95 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x37322fc3 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x25c9717c [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x7c5d37b9 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x1d423fcf [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x1fefd010 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x7e89d113 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0xc72ad51 [0134.399] RtlRandomEx (in: Seed=0xabbfe78 | out: Seed=0xabbfe78) returned 0x27f58b80 [0134.411] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.411] ReadFile (in: hFile=0xfc8, lpBuffer=0x67fb100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabbfe80, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesRead=0xabbfe80*=0x3c00, lpOverlapped=0x0) returned 1 [0134.412] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f348 [0134.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0134.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0134.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fed08 [0134.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0134.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0134.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0134.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0134.413] WriteFile (in: hFile=0xfc8, lpBuffer=0x67fed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabbfe80, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesWritten=0xabbfe80*=0x3c00, lpOverlapped=0x0) returned 1 [0134.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fed08) returned 1 [0134.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0134.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5690 [0134.861] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.861] WriteFile (in: hFile=0xfc8, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xabbff00, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xabbff00*=0x10a, lpOverlapped=0x0) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5510) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0134.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d4a8 [0134.941] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv" [0134.941] wcscat (in: _Dest=0x3d8d4a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv.ac3a86" [0134.941] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv.ac3a86", NtPathName=0xabbfe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\Pyj Eyoq.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d490 [0135.075] FlushFileBuffers (hFile=0xfc8) returned 1 [0135.723] CloseHandle (hObject=0xfc8) returned 1 [0135.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6788 [0135.725] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.725] wcscat (in: _Dest=0x2fe6788, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.725] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0135.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 Thread: id = 415 os_tid = 0xf68 [0134.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf" (normalized: "c:\\users\\eebsym5\\desktop\\q2mn9bt5rur-bd-w5.swf")) returned 0x20 [0134.414] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf", dwFileAttributes=0x20) returned 1 [0134.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf" (normalized: "c:\\users\\eebsym5\\desktop\\q2mn9bt5rur-bd-w5.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfcc [0134.415] GetFileSizeEx (in: hFile=0xfcc, lpFileSize=0xae3fb2c | out: lpFileSize=0xae3fb2c*=51964) returned 1 [0134.415] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0xcaf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.415] ReadFile (in: hFile=0xfcc, lpBuffer=0xae3fb08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae3fb18, lpOverlapped=0x0 | out: lpBuffer=0xae3fb08*, lpNumberOfBytesRead=0xae3fb18*=0x4, lpOverlapped=0x0) returned 1 [0134.417] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0134.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0134.417] NtQuerySystemTime (in: CurrentTime=0xae3faa0 | out: CurrentTime=0xae3faa0*=132482710430760000) returned 0x0 [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x1346bf10 [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x7b092f56 [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x75926c28 [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x22964d69 [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x65fa8b5a [0134.417] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x547bc620 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x55173789 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x5a655a13 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x4c715c05 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x26ef1e94 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x54ca2494 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0xb26dfd4 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x39b3f3 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x76ea691 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x7faa0161 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x1f99b592 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x61647e49 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x13c251fe [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x5834ba8a [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x7345f97c [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x52f3a54b [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x7f5b1d5c [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x450307e7 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x64813b3b [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x6e44e1e7 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x28eb7283 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x69fda2c0 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x79490278 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x78bf64b5 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x2f3d1f71 [0134.418] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x1fabddba [0134.419] RtlRandomEx (in: Seed=0xae3fa98 | out: Seed=0xae3fa98) returned 0x6a6efb35 [0134.430] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.430] ReadFile (in: hFile=0xfcc, lpBuffer=0x6802910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xae3faa0, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesRead=0xae3faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.430] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f390 [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0134.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6806518 [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0134.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0134.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0134.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0134.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f390) returned 1 [0134.433] WriteFile (in: hFile=0xfcc, lpBuffer=0x6806518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xae3faa0, lpOverlapped=0x0 | out: lpBuffer=0x6806518*, lpNumberOfBytesWritten=0xae3faa0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6806518) returned 1 [0134.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0134.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066ec0 [0134.865] SetFilePointerEx (in: hFile=0xfcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.865] WriteFile (in: hFile=0xfcc, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xae3fb20, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0xae3fb20*=0x11c, lpOverlapped=0x0) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d508 [0134.944] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf" [0134.945] wcscat (in: _Dest=0x3f1d508, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf.ac3a86" [0134.945] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf.ac3a86", NtPathName=0xae3fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\Q2MN9BT5RUR-bD-w5.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db628 [0135.073] FlushFileBuffers (hFile=0xfcc) returned 1 [0135.655] CloseHandle (hObject=0xfcc) returned 1 [0135.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe3ae8 [0135.675] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.675] wcscat (in: _Dest=0x2fe3ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 [0135.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e4e8) returned 1 Thread: id = 416 os_tid = 0xf6c [0134.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif" (normalized: "c:\\users\\eebsym5\\desktop\\q7vntwo2c.gif")) returned 0x20 [0134.816] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif", dwFileAttributes=0x20) returned 1 [0134.817] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif" (normalized: "c:\\users\\eebsym5\\desktop\\q7vntwo2c.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe40 [0134.817] GetFileSizeEx (in: hFile=0xe40, lpFileSize=0xad6f8bc | out: lpFileSize=0xad6f8bc*=78235) returned 1 [0134.817] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0x13197, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.817] ReadFile (in: hFile=0xe40, lpBuffer=0xad6f898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad6f8a8, lpOverlapped=0x0 | out: lpBuffer=0xad6f898*, lpNumberOfBytesRead=0xad6f8a8*=0x4, lpOverlapped=0x0) returned 1 [0134.819] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0134.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0134.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0134.819] NtQuerySystemTime (in: CurrentTime=0xad6f830 | out: CurrentTime=0xad6f830*=132482710434816000) returned 0x0 [0134.819] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x56880e79 [0134.819] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x111862e6 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x3f660b44 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x2b13a71d [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x7086504a [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x217c237d [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x6854e1e1 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x1329c403 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x19927d65 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x7a2003b [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x7a384990 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x7fd63f19 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x5b847753 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x166fbb50 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x1471cbdd [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x22f3730d [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x1e78a406 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x1e414cea [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x57d60506 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x417214b0 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x123c163c [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x22d970b9 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x17b23f9b [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x18c3ef75 [0134.820] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x301fddeb [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x3c1da0c8 [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x5d744029 [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x37c66f89 [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x22409be9 [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x28aeaf9 [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0x60de7a0d [0134.821] RtlRandomEx (in: Seed=0xad6f828 | out: Seed=0xad6f828) returned 0xcb612bd [0134.832] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.832] ReadFile (in: hFile=0xe40, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.832] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33498 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0134.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0134.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0134.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0134.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33498) returned 1 [0134.833] WriteFile (in: hFile=0xe40, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0134.917] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.917] ReadFile (in: hFile=0xe40, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.918] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d2b0 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d68 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0134.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0134.919] WriteFile (in: hFile=0xe40, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0134.923] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0xf59b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.923] ReadFile (in: hFile=0xe40, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.923] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0xf59b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0134.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d328 [0134.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0134.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0134.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0134.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0134.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0134.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0134.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d328) returned 1 [0134.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0134.924] WriteFile (in: hFile=0xe40, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xad6f830, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0xad6f830*=0x3c00, lpOverlapped=0x0) returned 1 [0134.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0134.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef7b0 [0134.928] SetFilePointerEx (in: hFile=0xe40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.928] WriteFile (in: hFile=0xe40, lpBuffer=0x330b20*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xad6f8b0, lpOverlapped=0x0 | out: lpBuffer=0x330b20*, lpNumberOfBytesWritten=0xad6f8b0*=0x14c, lpOverlapped=0x0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330b20) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef7b0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0134.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef7b0 [0134.948] wcscpy (in: _Dest=0x3eef7b0, _Source="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif" [0134.948] wcscat (in: _Dest=0x3eef7b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif.ac3a86" [0134.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif.ac3a86", NtPathName=0xad6f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\Q7vntwo2c.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6670 [0135.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6670) returned 1 [0135.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da0a08) returned 1 [0135.020] NtQueryInformationFile (in: FileHandle=0xe40, IoStatusBlock=0xad6f800, FileInformation=0xad6f808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad6f800, FileInformation=0xad6f808) returned 0x0 [0135.020] NtSetInformationFile (FileHandle=0xe40, IoStatusBlock=0xad6f800, FileInformation=0xad6f808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0135.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef7b0) returned 1 [0135.022] FlushFileBuffers (hFile=0xe40) returned 1 [0135.654] CloseHandle (hObject=0xe40) returned 1 [0135.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0135.674] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0135.674] wcscat (in: _Dest=0x2fe6728, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0135.674] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0135.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0135.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7180) returned 1 Thread: id = 417 os_tid = 0xf70 [0134.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0134.834] wcscpy (in: _Dest=0x332ce8, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0134.834] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0134.834] wcscat (in: _Dest=0x332ce8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0134.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0134.834] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0134.835] wcscmp (_String1=".", _String2=".") returned 0 [0134.835] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.835] wcscmp (_String1="..", _String2=".") returned 1 [0134.835] wcscmp (_String1="..", _String2="..") returned 0 [0134.835] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.835] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0134.835] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0134.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56af0 [0134.835] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0134.835] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0134.835] wcscat (in: _Dest=0x3d56af0, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0140.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0140.338] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0140.338] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 418 os_tid = 0xf54 [0135.078] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss")) returned 0x20 [0135.809] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0135.810] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11c0 [0135.810] GetFileSizeEx (in: hFile=0x11c0, lpFileSize=0x7f6fb2c | out: lpFileSize=0x7f6fb2c*=0) returned 1 [0135.810] FlushFileBuffers (hFile=0x11c0) returned 1 [0135.812] CloseHandle (hObject=0x11c0) returned 1 [0135.812] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0135.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 419 os_tid = 0xfb8 [0135.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0135.079] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0135.079] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\" [0135.079] wcscat (in: _Dest=0x3d8d4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*" [0135.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0135.079] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0135.813] wcscmp (_String1=".", _String2=".") returned 0 [0135.813] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.813] wcscmp (_String1="..", _String2=".") returned 1 [0135.813] wcscmp (_String1="..", _String2="..") returned 0 [0135.813] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0135.813] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0135.813] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0135.813] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0135.813] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0135.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0135.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0135.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 Thread: id = 420 os_tid = 0xfc0 [0135.080] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\5hnqrre5l85m4jec.png")) returned 0x20 [0135.080] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png", dwFileAttributes=0x20) returned 1 [0135.080] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\5hnqrre5l85m4jec.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe38 [0135.080] GetFileSizeEx (in: hFile=0xe38, lpFileSize=0x8fcfbe4 | out: lpFileSize=0x8fcfbe4*=99055) returned 1 [0135.080] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x182eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.080] ReadFile (in: hFile=0xe38, lpBuffer=0x8fcfbc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fcfbd0, lpOverlapped=0x0 | out: lpBuffer=0x8fcfbc0*, lpNumberOfBytesRead=0x8fcfbd0*=0x4, lpOverlapped=0x0) returned 1 [0135.082] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0135.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0135.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0135.083] NtQuerySystemTime (in: CurrentTime=0x8fcfb58 | out: CurrentTime=0x8fcfb58*=132482710437468000) returned 0x0 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x64717646 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x72c20f1e [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x27cec723 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x65dbff2e [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x67250f [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x157f81b4 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x4d50e7c5 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x19db80e2 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x206501c3 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x219e962b [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x1b32ae78 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x7954a25c [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x405f7fd9 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x3f3ce798 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x1dc26537 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x70c3c5dc [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x10af9be1 [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x1c039b5e [0135.083] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x168e5a80 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0xed8d29c [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x39c184d0 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x338efba6 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x2e90efdc [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x3ee02eea [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x68cc85dd [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x4aa55c70 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x2e827d71 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x2796f165 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x47fa8831 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x3abe1ca6 [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x305b6acc [0135.084] RtlRandomEx (in: Seed=0x8fcfb50 | out: Seed=0x8fcfb50) returned 0x74d19c2a [0135.095] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.095] ReadFile (in: hFile=0xe38, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0135.095] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e333c0 [0135.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0135.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0135.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0135.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0135.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0135.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0135.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 [0135.096] WriteFile (in: hFile=0xe38, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0135.814] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.814] ReadFile (in: hFile=0xe38, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0135.814] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32a30 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0135.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a30) returned 1 [0135.815] WriteFile (in: hFile=0xe38, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0137.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0137.223] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x146ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.223] ReadFile (in: hFile=0xe38, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0137.224] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x146ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0137.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0137.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0137.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0137.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.225] WriteFile (in: hFile=0xe38, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fcfb58, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x8fcfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0138.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0138.198] SetFilePointerEx (in: hFile=0xe38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.198] WriteFile (in: hFile=0xe38, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x8fcfbd8, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x8fcfbd8*=0x15a, lpOverlapped=0x0) returned 1 [0138.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0138.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f280) returned 1 [0138.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0138.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 [0138.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0138.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0138.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0138.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0138.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0138.639] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png" [0138.639] wcscat (in: _Dest=0x32d2d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png.ac3a86" [0138.639] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png.ac3a86", NtPathName=0x8fcfb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\5Hnqrre5l85M4jeC.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0140.372] FlushFileBuffers (hFile=0xe38) returned 1 [0140.381] CloseHandle (hObject=0xe38) returned 1 [0140.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f260c8 [0140.382] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0140.382] wcscat (in: _Dest=0x3f260c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0140.382] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0x20 [0141.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0141.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 421 os_tid = 0x61c [0135.112] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\g-sekx.gif")) returned 0x20 [0135.112] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif", dwFileAttributes=0x20) returned 1 [0135.112] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\g-sekx.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0135.113] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0x906fd74 | out: lpFileSize=0x906fd74*=24192) returned 1 [0135.113] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x5e7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.113] ReadFile (in: hFile=0xe28, lpBuffer=0x906fd50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x906fd60, lpOverlapped=0x0 | out: lpBuffer=0x906fd50*, lpNumberOfBytesRead=0x906fd60*=0x4, lpOverlapped=0x0) returned 1 [0135.115] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0135.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0135.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0135.116] NtQuerySystemTime (in: CurrentTime=0x906fce8 | out: CurrentTime=0x906fce8*=132482710437780000) returned 0x0 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x792b8af9 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x19546c18 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x25020008 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x3c910ef4 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x32aea338 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x2215c329 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x682ad3c4 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x3e0eeb5f [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x1b4a6d23 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x492de258 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x9e01fd [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x38e5e009 [0135.116] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x3ac033f5 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x6ae4f449 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x3f787b11 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x523b7a41 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x58ff2bcc [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x67764689 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x266ca148 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x6dd37cd4 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0xc2a8e35 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x35602c02 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x2ee0403c [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x1e127c15 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x7490a73a [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x1a7846dd [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x39af0a13 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x48796dd8 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x1b098834 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x74e3dbf9 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0x21fa3351 [0135.117] RtlRandomEx (in: Seed=0x906fce0 | out: Seed=0x906fce0) returned 0xa8f6d6 [0135.131] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.131] ReadFile (in: hFile=0xe28, lpBuffer=0x671b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x906fce8, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesRead=0x906fce8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.132] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32ac0 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0135.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x677cd48 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0135.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0135.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0135.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0135.133] WriteFile (in: hFile=0xe28, lpBuffer=0x677cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x906fce8, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesWritten=0x906fce8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0135.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0135.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db4020 [0135.816] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.816] WriteFile (in: hFile=0xe28, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x906fd68, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x906fd68*=0x106, lpOverlapped=0x0) returned 1 [0137.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0137.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0137.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e109f0 [0137.228] wcscpy (in: _Dest=0x3e109f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif" [0137.228] wcscat (in: _Dest=0x3e109f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif.ac3a86" [0137.228] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif.ac3a86", NtPathName=0x906fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\g-SEkX.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30f30 [0138.676] FlushFileBuffers (hFile=0xe28) returned 1 [0139.809] CloseHandle (hObject=0xe28) returned 1 [0139.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25fb8 [0139.908] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0139.908] wcscat (in: _Dest=0x3f25fb8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0139.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0xffffffff [0139.908] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xaec [0140.353] WriteFile (in: hFile=0xaec, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x906fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x906fcfc*=0x8b9, lpOverlapped=0x0) returned 1 [0140.574] CloseHandle (hObject=0xaec) returned 1 [0140.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 [0140.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 422 os_tid = 0xae4 [0135.136] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ieui4wkvc.jpg")) returned 0x20 [0135.137] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg", dwFileAttributes=0x20) returned 1 [0135.157] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ieui4wkvc.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe24 [0135.158] GetFileSizeEx (in: hFile=0xe24, lpFileSize=0x918fe4c | out: lpFileSize=0x918fe4c*=39586) returned 1 [0135.158] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x9a9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.158] ReadFile (in: hFile=0xe24, lpBuffer=0x918fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x918fe38, lpOverlapped=0x0 | out: lpBuffer=0x918fe28*, lpNumberOfBytesRead=0x918fe38*=0x4, lpOverlapped=0x0) returned 1 [0135.160] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0135.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0135.160] NtQuerySystemTime (in: CurrentTime=0x918fdc0 | out: CurrentTime=0x918fdc0*=132482710438248000) returned 0x0 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0xb97ef3a [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x238b0436 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x59c1ddad [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x7ebdc302 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x53d15062 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x3f03ab97 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x7118d6e7 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x7f6b03b5 [0135.160] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x3475f41d [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x600607e3 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x30436db4 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x6550e67e [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x39cf2245 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0xb6de5c8 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x12ce7b93 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x377d9aea [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x789b7421 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x65691574 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x70626c47 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x27e00ea3 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x4fb4d5b2 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0xc40e376 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x6b0215 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x25e73a69 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x1c68640d [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x3af814b0 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x41235e9f [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x6ec70e96 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x7bf1324 [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x5d35998f [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x2b13cede [0135.161] RtlRandomEx (in: Seed=0x918fdb8 | out: Seed=0x918fdb8) returned 0x1baad5d [0135.170] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.170] ReadFile (in: hFile=0xe24, lpBuffer=0x6780950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x918fdc0, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesRead=0x918fdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.171] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32b08 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0135.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x678bd68 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0135.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0135.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0135.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32b08) returned 1 [0135.171] WriteFile (in: hFile=0xe24, lpBuffer=0x678bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x918fdc0, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesWritten=0x918fdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0135.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0135.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5840 [0135.817] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.817] WriteFile (in: hFile=0xe24, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x918fe40, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x918fe40*=0x10c, lpOverlapped=0x0) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0137.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0137.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef2f0 [0137.231] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg" [0137.231] wcscat (in: _Dest=0x66ef2f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg.ac3a86" [0137.231] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg.ac3a86", NtPathName=0x918fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\ieuI4WkVc.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e930 [0140.037] FlushFileBuffers (hFile=0xe24) returned 1 [0140.059] CloseHandle (hObject=0xe24) returned 1 [0140.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef2f0 [0140.060] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0140.060] wcscat (in: _Dest=0x66ef2f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0140.060] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0x20 [0140.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 [0140.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 Thread: id = 423 os_tid = 0xafc [0135.173] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\sxbnf.jpg")) returned 0x20 [0135.174] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg", dwFileAttributes=0x20) returned 1 [0135.174] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\sxbnf.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe18 [0135.174] GetFileSizeEx (in: hFile=0xe18, lpFileSize=0x875f7f4 | out: lpFileSize=0x875f7f4*=87806) returned 1 [0135.174] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x156fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.174] ReadFile (in: hFile=0xe18, lpBuffer=0x875f7d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x875f7e0, lpOverlapped=0x0 | out: lpBuffer=0x875f7d0*, lpNumberOfBytesRead=0x875f7e0*=0x4, lpOverlapped=0x0) returned 1 [0135.176] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0135.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0135.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0135.177] NtQuerySystemTime (in: CurrentTime=0x875f768 | out: CurrentTime=0x875f768*=132482710438404000) returned 0x0 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x376306a4 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x2d7b4f6b [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x3dccf293 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x4ea11ff0 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x6afdf1ad [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x1556dc46 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x60be6e0 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x45eab1ab [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x7474c75f [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x741ea4b7 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x64622cef [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x4b27e0e3 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x7d08e118 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x451ecece [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x59c55736 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x3245d7b2 [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x769bfb9c [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x5a8e8b5b [0135.177] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x35219115 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x74c130c9 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x53a709ef [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x60dfcf39 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x5c0b406e [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x1dbbbfa9 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x589c46a8 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x70575c61 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x4dd43d9f [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x25cb3c7f [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x5e9c7d8d [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x37d16726 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x7716d538 [0135.178] RtlRandomEx (in: Seed=0x875f760 | out: Seed=0x875f760) returned 0x472138cc [0135.188] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.188] ReadFile (in: hFile=0xe18, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0135.188] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32c70 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0135.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0135.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0135.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0135.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32c70) returned 1 [0135.189] WriteFile (in: hFile=0xe18, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0135.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0135.817] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.818] ReadFile (in: hFile=0xe18, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0135.818] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32a30 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cc8 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0135.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a30) returned 1 [0135.818] WriteFile (in: hFile=0xe18, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0137.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0137.232] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x11afe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.232] ReadFile (in: hFile=0xe18, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0137.232] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x11afe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0137.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0137.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0137.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0137.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.233] WriteFile (in: hFile=0xe18, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x875f768, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x875f768*=0x3c00, lpOverlapped=0x0) returned 1 [0138.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0138.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e070 [0138.200] SetFilePointerEx (in: hFile=0xe18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.200] WriteFile (in: hFile=0xe18, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x875f7e8, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x875f7e8*=0x144, lpOverlapped=0x0) returned 1 [0138.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0138.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0138.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0138.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0138.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0138.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0138.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0138.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0138.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0fbf0 [0138.641] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg" [0138.641] wcscat (in: _Dest=0x3e0fbf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg.ac3a86" [0138.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg.ac3a86", NtPathName=0x875f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\sxbNF.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0140.377] FlushFileBuffers (hFile=0xe18) returned 1 [0140.382] CloseHandle (hObject=0xe18) returned 1 [0140.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26150 [0140.383] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0140.383] wcscat (in: _Dest=0x3f26150, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0140.383] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0x20 [0140.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 [0140.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 Thread: id = 424 os_tid = 0x33c [0135.192] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\u3prunbv.png")) returned 0x20 [0135.192] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png", dwFileAttributes=0x20) returned 1 [0135.192] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\u3prunbv.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe14 [0135.192] GetFileSizeEx (in: hFile=0xe14, lpFileSize=0x928feb4 | out: lpFileSize=0x928feb4*=84229) returned 1 [0135.192] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x14901, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.193] ReadFile (in: hFile=0xe14, lpBuffer=0x928fe90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x928fea0, lpOverlapped=0x0 | out: lpBuffer=0x928fe90*, lpNumberOfBytesRead=0x928fea0*=0x4, lpOverlapped=0x0) returned 1 [0135.195] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0135.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0135.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0135.195] NtQuerySystemTime (in: CurrentTime=0x928fe28 | out: CurrentTime=0x928fe28*=132482710438560000) returned 0x0 [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0xae1e8d5 [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x5c83ae0a [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x29084ebb [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x61fef044 [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x1a4f4c5c [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x713aa8b [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x58329751 [0135.195] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x188c49a [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x7907091 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x56340913 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x6a9212cc [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x43255fb [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0xfffaa37 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x6a81b04 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x5b9cb5ef [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x6892f1e9 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0xf650edc [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x5d66b810 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x25458170 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0xc9b063a [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x1d9c8f01 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x368eb35d [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x5a5843bc [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x611ce5de [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x38106610 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0xb68135d [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x6548f934 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x5a2866ce [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x57b5bed0 [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x14c4534a [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x11ae7eee [0135.196] RtlRandomEx (in: Seed=0x928fe20 | out: Seed=0x928fe20) returned 0x55bde45c [0135.207] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.207] ReadFile (in: hFile=0xe14, lpBuffer=0x67efce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesRead=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0135.208] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32e20 [0135.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0135.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0135.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f38f0 [0135.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0135.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0135.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0135.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32e20) returned 1 [0135.209] WriteFile (in: hFile=0xe14, lpBuffer=0x67f38f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesWritten=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0135.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0135.821] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.821] ReadFile (in: hFile=0xe14, lpBuffer=0x67efce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesRead=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0135.821] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32a30 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0135.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f38f0 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0135.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0135.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0135.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0135.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32a30) returned 1 [0135.822] WriteFile (in: hFile=0xe14, lpBuffer=0x67f38f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesWritten=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0137.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0137.235] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x10d05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.235] ReadFile (in: hFile=0xe14, lpBuffer=0x67efce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesRead=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0137.235] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x10d05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f38f0 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0137.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.236] WriteFile (in: hFile=0xe14, lpBuffer=0x67f38f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x928fe28, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesWritten=0x928fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0138.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0138.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bd18 [0138.201] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.201] WriteFile (in: hFile=0xe14, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x928fea8, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x928fea8*=0x14a, lpOverlapped=0x0) returned 1 [0138.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0138.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0138.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eff28 [0138.643] wcscpy (in: _Dest=0x66eff28, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png" [0138.643] wcscat (in: _Dest=0x66eff28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png.ac3a86" [0138.643] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png.ac3a86", NtPathName=0x928fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\U3pRUNbV.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e250 [0138.673] FlushFileBuffers (hFile=0xe14) returned 1 [0139.809] CloseHandle (hObject=0xe14) returned 1 [0139.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25f30 [0139.910] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0139.910] wcscat (in: _Dest=0x3f25f30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0139.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0x20 [0140.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 [0140.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 Thread: id = 425 os_tid = 0x3f4 [0135.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0135.212] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.212] wcscat (in: _Dest=0x3f1d508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.212] wcscat (in: _Dest=0x3f1d508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\*" [0135.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0135.212] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf79f7c0, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x8a658650, ftLastAccessTime.dwHighDateTime=0x1d5db9f, ftLastWriteTime.dwLowDateTime=0x8a658650, ftLastWriteTime.dwHighDateTime=0x1d5db9f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0135.213] wcscmp (_String1=".", _String2=".") returned 0 [0135.213] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf79f7c0, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x8a658650, ftLastAccessTime.dwHighDateTime=0x1d5db9f, ftLastWriteTime.dwLowDateTime=0x8a658650, ftLastWriteTime.dwHighDateTime=0x1d5db9f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.213] wcscmp (_String1="..", _String2=".") returned 1 [0135.213] wcscmp (_String1="..", _String2="..") returned 0 [0135.213] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8e4df0, ftCreationTime.dwHighDateTime=0x1d5dd5c, ftLastAccessTime.dwLowDateTime=0x6ea193c0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6ea193c0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0xc508, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nlhh5mG56r0bo.bmp", cAlternateFileName="7NLHH5~1.BMP")) returned 1 [0135.213] wcscmp (_String1="7nlhh5mG56r0bo.bmp", _String2=".") returned 1 [0135.215] wcscmp (_String1="7nlhh5mG56r0bo.bmp", _String2="..") returned 1 [0135.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0135.215] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.215] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.215] wcscat (in: _Dest=0x3e0e930, _Source="7nlhh5mG56r0bo.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp" [0135.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0135.572] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b282080, ftCreationTime.dwHighDateTime=0x1d5d8e8, ftLastAccessTime.dwLowDateTime=0xacc31220, ftLastAccessTime.dwHighDateTime=0x1d5dfce, ftLastWriteTime.dwLowDateTime=0xacc31220, ftLastWriteTime.dwHighDateTime=0x1d5dfce, nFileSizeHigh=0x0, nFileSizeLow=0x1713a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9CguC6xY8GR6PzdPtM0s.jpg", cAlternateFileName="9CGUC6~1.JPG")) returned 1 [0135.572] wcscmp (_String1="9CguC6xY8GR6PzdPtM0s.jpg", _String2=".") returned 1 [0135.572] wcscmp (_String1="9CguC6xY8GR6PzdPtM0s.jpg", _String2="..") returned 1 [0135.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0135.572] wcscpy (in: _Dest=0x3053918, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.572] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.572] wcscat (in: _Dest=0x3053918, _Source="9CguC6xY8GR6PzdPtM0s.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg" [0135.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0135.573] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0c6390, ftCreationTime.dwHighDateTime=0x1d5e337, ftLastAccessTime.dwLowDateTime=0x8d9bc750, ftLastAccessTime.dwHighDateTime=0x1d5e601, ftLastWriteTime.dwLowDateTime=0x8d9bc750, ftLastWriteTime.dwHighDateTime=0x1d5e601, nFileSizeHigh=0x0, nFileSizeLow=0x16a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anr9s.gif", cAlternateFileName="")) returned 1 [0135.573] wcscmp (_String1="Anr9s.gif", _String2=".") returned 1 [0135.573] wcscmp (_String1="Anr9s.gif", _String2="..") returned 1 [0135.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a1d0 [0135.574] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.574] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.574] wcscat (in: _Dest=0x3d5a1d0, _Source="Anr9s.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif" [0135.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0135.575] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91bfb1d0, ftCreationTime.dwHighDateTime=0x1d5de8a, ftLastAccessTime.dwLowDateTime=0xa8873660, ftLastAccessTime.dwHighDateTime=0x1d5e522, ftLastWriteTime.dwLowDateTime=0xa8873660, ftLastWriteTime.dwHighDateTime=0x1d5e522, nFileSizeHigh=0x0, nFileSizeLow=0x10c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="fkFAf2.gif", cAlternateFileName="")) returned 1 [0135.575] wcscmp (_String1="fkFAf2.gif", _String2=".") returned 1 [0135.575] wcscmp (_String1="fkFAf2.gif", _String2="..") returned 1 [0135.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db748 [0135.575] wcscpy (in: _Dest=0x66db748, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.575] wcscat (in: _Dest=0x66db748, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.575] wcscat (in: _Dest=0x66db748, _Source="fkFAf2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif" [0135.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0135.577] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57da6c10, ftCreationTime.dwHighDateTime=0x1d5e224, ftLastAccessTime.dwLowDateTime=0x7b9dc9a0, ftLastAccessTime.dwHighDateTime=0x1d5df25, ftLastWriteTime.dwLowDateTime=0x7b9dc9a0, ftLastWriteTime.dwHighDateTime=0x1d5df25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="H5TQDPaZD6Kl6h_mV4t", cAlternateFileName="H5TQDP~1")) returned 1 [0135.577] wcscmp (_String1="H5TQDPaZD6Kl6h_mV4t", _String2=".") returned 1 [0135.577] wcscmp (_String1="H5TQDPaZD6Kl6h_mV4t", _String2="..") returned 1 [0135.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dcb0 [0135.577] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.577] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.577] wcscat (in: _Dest=0x3e0dcb0, _Source="H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0135.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0135.578] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16951d30, ftCreationTime.dwHighDateTime=0x1d5e1bc, ftLastAccessTime.dwLowDateTime=0xd9514b0, ftLastAccessTime.dwHighDateTime=0x1d5e586, ftLastWriteTime.dwLowDateTime=0xd9514b0, ftLastWriteTime.dwHighDateTime=0x1d5e586, nFileSizeHigh=0x0, nFileSizeLow=0x15dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmjO_8i6G7DfXDd8T.png", cAlternateFileName="RMJO_8~1.PNG")) returned 1 [0135.578] wcscmp (_String1="rmjO_8i6G7DfXDd8T.png", _String2=".") returned 1 [0135.578] wcscmp (_String1="rmjO_8i6G7DfXDd8T.png", _String2="..") returned 1 [0135.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e430 [0135.578] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.579] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.579] wcscat (in: _Dest=0x3e0e430, _Source="rmjO_8i6G7DfXDd8T.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png" [0135.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0135.580] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f1a3f00, ftCreationTime.dwHighDateTime=0x1d5e6a0, ftLastAccessTime.dwLowDateTime=0xfbc75f80, ftLastAccessTime.dwHighDateTime=0x1d5d9ab, ftLastWriteTime.dwLowDateTime=0xfbc75f80, ftLastWriteTime.dwHighDateTime=0x1d5d9ab, nFileSizeHigh=0x0, nFileSizeLow=0x693, dwReserved0=0x0, dwReserved1=0x0, cFileName="vhOdoH.png", cAlternateFileName="")) returned 1 [0135.580] wcscmp (_String1="vhOdoH.png", _String2=".") returned 1 [0135.580] wcscmp (_String1="vhOdoH.png", _String2="..") returned 1 [0135.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0135.580] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1" [0135.580] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0135.580] wcscat (in: _Dest=0x66db7d8, _Source="vhOdoH.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png" [0135.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0135.582] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f1a3f00, ftCreationTime.dwHighDateTime=0x1d5e6a0, ftLastAccessTime.dwLowDateTime=0xfbc75f80, ftLastAccessTime.dwHighDateTime=0x1d5d9ab, ftLastWriteTime.dwLowDateTime=0xfbc75f80, ftLastWriteTime.dwHighDateTime=0x1d5d9ab, nFileSizeHigh=0x0, nFileSizeLow=0x693, dwReserved0=0x0, dwReserved1=0x0, cFileName="vhOdoH.png", cAlternateFileName="")) returned 0 [0135.582] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0135.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0135.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0135.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 Thread: id = 426 os_tid = 0x300 [0135.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\_5-ff_kkqr2qtj7j.gif")) returned 0x20 [0135.216] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif", dwFileAttributes=0x20) returned 1 [0135.216] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\_5-ff_kkqr2qtj7j.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf8 [0135.217] GetFileSizeEx (in: hFile=0xdf8, lpFileSize=0x44cf944 | out: lpFileSize=0x44cf944*=40329) returned 1 [0135.217] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x9d85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.217] ReadFile (in: hFile=0xdf8, lpBuffer=0x44cf920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cf930, lpOverlapped=0x0 | out: lpBuffer=0x44cf920*, lpNumberOfBytesRead=0x44cf930*=0x4, lpOverlapped=0x0) returned 1 [0135.220] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0135.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0135.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0135.220] NtQuerySystemTime (in: CurrentTime=0x44cf8b8 | out: CurrentTime=0x44cf8b8*=132482710438872000) returned 0x0 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x2ef8ff0 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x78abc0d8 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x42612121 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x4907c388 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x19b76da9 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x382d13cf [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x45792d7f [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x4f84d9bd [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x7256475f [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x1775095d [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x511d561 [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x6b83588c [0135.220] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0xcd49b2e [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x82e197b [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x4481c387 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x6965e3fe [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x54e7b9b1 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x30c416f6 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x21fe573 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x773e69d1 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x1ae35ae9 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0xc26ce21 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x1d7acccc [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x12366271 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x555d9c39 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x44e75f9c [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x4df851d [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x78ddd342 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x379fee0b [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0xefb34e9 [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x16a8498e [0135.221] RtlRandomEx (in: Seed=0x44cf8b0 | out: Seed=0x44cf8b0) returned 0x71b14a65 [0135.231] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.231] ReadFile (in: hFile=0xdf8, lpBuffer=0x67f74f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesRead=0x44cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.231] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32dd8 [0135.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d490 [0135.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0135.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0135.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fb100 [0135.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0135.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4100 [0135.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4100) returned 1 [0135.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0135.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32dd8) returned 1 [0135.232] WriteFile (in: hFile=0xdf8, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0x44cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0135.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0135.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066ec0 [0135.822] SetFilePointerEx (in: hFile=0xdf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.823] WriteFile (in: hFile=0xdf8, lpBuffer=0x30413a8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x44cf938, lpOverlapped=0x0 | out: lpBuffer=0x30413a8*, lpNumberOfBytesWritten=0x44cf938*=0x11a, lpOverlapped=0x0) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30670c0) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0137.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31060 [0137.240] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif" [0137.240] wcscat (in: _Dest=0x3e31060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif.ac3a86" [0137.240] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif.ac3a86", NtPathName=0x44cf8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\_5-ff_KkQR2QTJ7J.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bd48 [0140.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 [0140.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2db38) returned 1 [0140.367] NtQueryInformationFile (in: FileHandle=0xdf8, IoStatusBlock=0x44cf888, FileInformation=0x44cf890, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x44cf888, FileInformation=0x44cf890) returned 0x0 [0140.367] NtSetInformationFile (FileHandle=0xdf8, IoStatusBlock=0x44cf888, FileInformation=0x44cf890, Length=0x28, FileInformationClass=0x4) returned 0x0 [0140.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 [0140.369] FlushFileBuffers (hFile=0xdf8) returned 1 [0140.378] CloseHandle (hObject=0xdf8) returned 1 [0140.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a148 [0140.380] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\" [0140.380] wcscat (in: _Dest=0x3d5a148, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" [0140.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\ac3a86-readme.txt")) returned 0x20 [0141.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 [0141.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 427 os_tid = 0xb94 [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df3068 [0135.234] wcscpy (in: _Dest=0x3df3068, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0135.234] wcscat (in: _Dest=0x3df3068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0135.234] wcscat (in: _Dest=0x3df3068, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0135.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0135.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0135.235] wcscmp (_String1=".", _String2=".") returned 0 [0135.235] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.235] wcscmp (_String1="..", _String2=".") returned 1 [0135.235] wcscmp (_String1="..", _String2="..") returned 0 [0135.235] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0135.235] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0135.235] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0135.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e6b0 [0135.236] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0135.236] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0135.236] wcscat (in: _Dest=0x3e0e6b0, _Source="cache.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0140.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0140.340] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0140.341] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0140.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0140.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3068) returned 1 [0140.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 Thread: id = 428 os_tid = 0xba4 [0135.237] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0135.237] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0135.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.237] GetLastError () returned 0x5 [0135.238] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0135.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 429 os_tid = 0xbbc [0135.239] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0135.239] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0135.240] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.240] GetLastError () returned 0x20 [0135.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de24e0 [0135.240] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0135.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de24e0) returned 1 [0135.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de24e0 [0135.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59048 [0135.240] wcscpy (in: _Dest=0x3d59048, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0135.241] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0135.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 430 os_tid = 0xad0 [0135.243] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0135.243] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0135.243] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.243] GetLastError () returned 0x5 [0135.243] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0135.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 431 os_tid = 0x570 [0135.249] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0135.250] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0135.250] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.250] GetLastError () returned 0x5 [0135.250] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0135.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 Thread: id = 432 os_tid = 0xbac [0135.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29b80 [0135.251] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Users\\Default\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0135.251] wcscat (in: _Dest=0x3f29b80, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\" [0135.251] wcscat (in: _Dest=0x3f29b80, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" [0135.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0135.251] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 [0135.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 Thread: id = 433 os_tid = 0x784 [0135.258] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms")) returned 0x23 [0135.260] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 0 [0135.260] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.260] GetLastError () returned 0x5 [0135.260] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x23) returned 0 [0135.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cc88) returned 1 Thread: id = 434 os_tid = 0xbd0 [0135.262] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms")) returned 0x23 [0135.824] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 0 [0135.824] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.824] GetLastError () returned 0x5 [0135.824] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x23) returned 0 [0135.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 435 os_tid = 0x564 [0135.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0135.263] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\Default\\AppData\\Local\\History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0135.263] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\") returned="C:\\Users\\Default\\AppData\\Local\\History\\" [0135.263] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\*") returned="C:\\Users\\Default\\AppData\\Local\\History\\*" [0135.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0135.263] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0135.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02a08) returned 1 Thread: id = 436 os_tid = 0x220 [0135.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db508 [0135.270] wcscpy (in: _Dest=0x66db508, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0135.270] wcscat (in: _Dest=0x66db508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0135.270] wcscat (in: _Dest=0x66db508, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*" [0135.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0135.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0135.830] wcscmp (_String1=".", _String2=".") returned 0 [0135.830] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.830] wcscmp (_String1="..", _String2=".") returned 1 [0135.830] wcscmp (_String1="..", _String2="..") returned 0 [0135.830] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1 [0135.830] wcscmp (_String1="License Agreements", _String2=".") returned 1 [0135.830] wcscmp (_String1="License Agreements", _String2="..") returned 1 [0135.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6180 [0135.830] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0135.831] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0135.831] wcscat (in: _Dest=0x2ff6180, _Source="License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0138.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0138.056] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 0 [0138.056] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0138.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0138.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db508) returned 1 [0138.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 Thread: id = 437 os_tid = 0x248 [0135.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a2e0 [0135.271] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0135.271] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0135.271] wcscat (in: _Dest=0x3d5a2e0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*" [0135.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0135.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0135.831] wcscmp (_String1=".", _String2=".") returned 0 [0135.831] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.831] wcscmp (_String1="..", _String2=".") returned 1 [0135.831] wcscmp (_String1="..", _String2="..") returned 0 [0135.831] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338d9500, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x338d9500, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x29370, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0135.831] wcscmp (_String1="FeedSync.dll", _String2=".") returned 1 [0135.831] wcscmp (_String1="FeedSync.dll", _String2="..") returned 1 [0135.831] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4902bf00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4902bf00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x33770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0135.831] wcscmp (_String1="Microsoft.Synchronization.dll", _String2=".") returned 1 [0135.831] wcscmp (_String1="Microsoft.Synchronization.dll", _String2="..") returned 1 [0135.831] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0135.831] wcscmp (_String1="resources", _String2=".") returned 1 [0135.831] wcscmp (_String1="resources", _String2="..") returned 1 [0135.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d240 [0135.832] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0135.832] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0135.832] wcscat (in: _Dest=0x32d240, _Source="resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0138.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0138.058] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1 [0138.058] wcscmp (_String1="Synchronization.dll", _String2=".") returned 1 [0138.058] wcscmp (_String1="Synchronization.dll", _String2="..") returned 1 [0138.058] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 0 [0138.059] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0138.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0138.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 [0138.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 438 os_tid = 0x754 [0135.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0135.273] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0135.273] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0135.274] wcscat (in: _Dest=0x32d5d0, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*" [0135.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0135.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0135.274] wcscmp (_String1=".", _String2=".") returned 0 [0135.274] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.274] wcscmp (_String1="..", _String2=".") returned 1 [0135.274] wcscmp (_String1="..", _String2="..") returned 0 [0135.274] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0135.274] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0135.274] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0135.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6f28 [0135.274] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0135.274] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0135.274] wcscat (in: _Dest=0x2ff6f28, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" [0140.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0140.343] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0140.343] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0140.343] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0140.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35d00 [0140.343] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0140.343] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0140.343] wcscat (in: _Dest=0x3e35d00, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" [0140.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0140.345] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0 [0140.345] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0140.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0140.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 [0140.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 439 os_tid = 0x5f8 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0135.275] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0135.275] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0135.275] wcscat (in: _Dest=0x32cf48, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*" [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0135.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0135.275] wcscmp (_String1=".", _String2=".") returned 0 [0135.275] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.275] wcscmp (_String1="..", _String2=".") returned 1 [0135.275] wcscmp (_String1="..", _String2="..") returned 0 [0135.275] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0135.275] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0135.275] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0135.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7cd0 [0135.275] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0135.275] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0135.276] wcscat (in: _Dest=0x2ff7cd0, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" [0141.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0141.151] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0141.151] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0141.151] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0141.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e358f0 [0141.151] wcscpy (in: _Dest=0x3e358f0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0141.151] wcscat (in: _Dest=0x3e358f0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0141.151] wcscat (in: _Dest=0x3e358f0, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" [0141.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e358f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0141.152] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0141.153] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0141.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0141.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 [0141.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 Thread: id = 440 os_tid = 0x640 [0135.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e02a08 [0135.276] wcscpy (in: _Dest=0x3e02a08, _Source="C:\\ProgramData\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0135.276] wcscat (in: _Dest=0x3e02a08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\" [0135.276] wcscat (in: _Dest=0x3e02a08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*" [0135.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0135.276] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0135.276] wcscmp (_String1=".", _String2=".") returned 0 [0135.276] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.277] wcscmp (_String1="..", _String2=".") returned 1 [0135.277] wcscmp (_String1="..", _String2="..") returned 0 [0135.277] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.277] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02a08) returned 1 [0135.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7cd8) returned 1 Thread: id = 441 os_tid = 0xba8 [0135.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b420 [0135.278] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0135.278] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0135.278] wcscat (in: _Dest=0x3f1b420, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0135.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0135.278] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0135.278] wcscmp (_String1=".", _String2=".") returned 0 [0135.278] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.279] wcscmp (_String1="..", _String2=".") returned 1 [0135.279] wcscmp (_String1="..", _String2="..") returned 0 [0135.279] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0135.279] wcscmp (_String1="en-US", _String2=".") returned 1 [0135.279] wcscmp (_String1="en-US", _String2="..") returned 1 [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da60f0 [0135.279] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0135.279] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0135.279] wcscat (in: _Dest=0x3da60f0, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0140.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0140.384] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0140.384] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0140.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0140.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0140.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 Thread: id = 442 os_tid = 0x56c [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7cd8 [0135.279] wcscpy (in: _Dest=0x3ef7cd8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0135.279] wcscat (in: _Dest=0x3ef7cd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0135.279] wcscat (in: _Dest=0x3ef7cd8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*" [0135.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1870 [0135.279] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0138.717] wcscmp (_String1=".", _String2=".") returned 0 [0138.721] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.721] wcscmp (_String1="..", _String2=".") returned 1 [0138.721] wcscmp (_String1="..", _String2="..") returned 0 [0138.721] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.bin", cAlternateFileName="")) returned 1 [0138.721] wcscmp (_String1="blackbox.bin", _String2=".") returned 1 [0138.721] wcscmp (_String1="blackbox.bin", _String2="..") returned 1 [0138.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5568 [0138.721] wcscpy (in: _Dest=0x66e5568, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0138.721] wcscat (in: _Dest=0x66e5568, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0138.722] wcscat (in: _Dest=0x66e5568, _Source="blackbox.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" [0142.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0142.753] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0142.753] wcscmp (_String1="Cache", _String2=".") returned 1 [0142.753] wcscmp (_String1="Cache", _String2="..") returned 1 [0142.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe64e8 [0142.753] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0142.753] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0142.753] wcscat (in: _Dest=0x2fe64e8, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0142.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0142.755] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0142.755] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0142.755] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0142.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3648c0 [0142.755] wcscpy (in: _Dest=0x3648c0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0142.755] wcscat (in: _Dest=0x3648c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0142.755] wcscat (in: _Dest=0x3648c0, _Source="drmstore.hds" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" [0142.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3648c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0142.756] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0142.756] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0142.756] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0142.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d3d8 [0142.756] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0142.756] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0142.756] wcscat (in: _Dest=0x3d8d3d8, _Source="v3ks.bla" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" [0142.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0142.758] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 1 [0142.758] wcscmp (_String1="v3ks.sec", _String2=".") returned 1 [0142.758] wcscmp (_String1="v3ks.sec", _String2="..") returned 1 [0142.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e3b0 [0142.758] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0142.758] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0142.758] wcscat (in: _Dest=0x3d8e3b0, _Source="v3ks.sec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" [0142.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0142.759] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 0 [0142.759] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0142.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1870) returned 1 [0142.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7cd8) returned 1 [0142.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02c18) returned 1 Thread: id = 443 os_tid = 0xc08 [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cc88 [0135.282] wcscpy (in: _Dest=0x3d8cc88, _Source="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0135.282] wcscat (in: _Dest=0x3d8cc88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\" [0135.282] wcscat (in: _Dest=0x3d8cc88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*" [0135.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3a20 [0135.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0138.632] wcscmp (_String1=".", _String2=".") returned 0 [0138.632] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.632] wcscmp (_String1="..", _String2=".") returned 1 [0138.632] wcscmp (_String1="..", _String2="..") returned 0 [0138.632] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.632] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a20) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cc88) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 Thread: id = 444 os_tid = 0x4f0 [0135.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a1d0 [0135.283] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0135.283] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0135.283] wcscat (in: _Dest=0x3d5a1d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0135.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0135.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0135.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 [0135.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d596a8) returned 1 Thread: id = 445 os_tid = 0x72c [0135.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dd98 [0135.285] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0135.285] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0135.285] wcscat (in: _Dest=0x3d8dd98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*" [0135.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0135.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80738 [0139.079] wcscmp (_String1=".", _String2=".") returned 0 [0139.079] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.079] wcscmp (_String1="..", _String2=".") returned 1 [0139.079] wcscmp (_String1="..", _String2="..") returned 0 [0139.079] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.079] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0139.079] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0139.079] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0139.079] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0139.079] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f470 [0139.080] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0139.080] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0139.080] wcscat (in: _Dest=0x3e0f470, _Source="Ringtone 01.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0157.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0157.157] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0157.157] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0157.157] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0157.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da63f0 [0157.157] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.157] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.157] wcscat (in: _Dest=0x3da63f0, _Source="Ringtone 02.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0157.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0157.158] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0157.158] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0157.158] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0157.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da62f0 [0157.159] wcscpy (in: _Dest=0x3da62f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.159] wcscat (in: _Dest=0x3da62f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.159] wcscat (in: _Dest=0x3da62f0, _Source="Ringtone 03.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0157.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0157.160] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0157.160] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0157.160] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0157.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6270 [0157.160] wcscpy (in: _Dest=0x3da6270, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.160] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.160] wcscat (in: _Dest=0x3da6270, _Source="Ringtone 04.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0157.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0157.161] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0157.161] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0157.161] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0157.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5ff0 [0157.161] wcscpy (in: _Dest=0x3da5ff0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.161] wcscat (in: _Dest=0x3da5ff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.161] wcscat (in: _Dest=0x3da5ff0, _Source="Ringtone 05.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0157.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0157.163] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0157.163] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0157.163] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0157.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5a70 [0157.163] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.163] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.163] wcscat (in: _Dest=0x3da5a70, _Source="Ringtone 06.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0157.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0157.164] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0157.164] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0157.164] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0157.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0157.164] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.164] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.164] wcscat (in: _Dest=0x3da66f0, _Source="Ringtone 07.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0157.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da66f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0157.165] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0157.165] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0157.165] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0157.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ad38 [0157.165] wcscpy (in: _Dest=0x674ad38, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.166] wcscat (in: _Dest=0x674ad38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.166] wcscat (in: _Dest=0x674ad38, _Source="Ringtone 08.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0157.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ad38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0157.166] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0157.167] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0157.167] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0157.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ab38 [0157.167] wcscpy (in: _Dest=0x674ab38, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.167] wcscat (in: _Dest=0x674ab38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.167] wcscat (in: _Dest=0x674ab38, _Source="Ringtone 09.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0157.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0157.168] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0157.168] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0157.168] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0157.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b0b8 [0157.168] wcscpy (in: _Dest=0x674b0b8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0157.168] wcscat (in: _Dest=0x674b0b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0157.168] wcscat (in: _Dest=0x674b0b8, _Source="Ringtone 10.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0157.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0157.169] FindNextFileW (in: hFindFile=0x3e80738, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0157.169] FindClose (in: hFindFile=0x3e80738 | out: hFindFile=0x3e80738) returned 1 [0157.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0157.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 [0157.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 Thread: id = 446 os_tid = 0xaf8 [0135.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef72e0 [0135.285] wcscpy (in: _Dest=0x3ef72e0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0135.285] wcscat (in: _Dest=0x3ef72e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0135.285] wcscat (in: _Dest=0x3ef72e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*" [0135.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0135.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0138.727] wcscmp (_String1=".", _String2=".") returned 0 [0138.727] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.727] wcscmp (_String1="..", _String2=".") returned 1 [0138.727] wcscmp (_String1="..", _String2="..") returned 0 [0138.727] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0138.727] wcscmp (_String1="Manifest", _String2=".") returned 1 [0138.727] wcscmp (_String1="Manifest", _String2="..") returned 1 [0138.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e620 [0138.727] wcscpy (in: _Dest=0x3d8e620, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0138.727] wcscat (in: _Dest=0x3d8e620, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0138.727] wcscat (in: _Dest=0x3d8e620, _Source="Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0152.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0152.085] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0152.085] wcscmp (_String1="Sessions", _String2=".") returned 1 [0152.085] wcscmp (_String1="Sessions", _String2="..") returned 1 [0152.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e210 [0152.085] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0152.085] wcscat (in: _Dest=0x3d8e210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0152.085] wcscat (in: _Dest=0x3d8e210, _Source="Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0152.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0152.086] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0152.086] wcscmp (_String1="Upload", _String2=".") returned 1 [0152.086] wcscmp (_String1="Upload", _String2="..") returned 1 [0152.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6e48 [0152.086] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0152.086] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0152.086] wcscat (in: _Dest=0x2fe6e48, _Source="Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0152.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0152.088] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0152.088] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0152.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0152.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef72e0) returned 1 [0152.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03770) returned 1 Thread: id = 447 os_tid = 0x6fc [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8de00 [0135.286] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0135.286] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0135.286] wcscat (in: _Dest=0x3d8de00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*" [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0135.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0135.286] wcscmp (_String1=".", _String2=".") returned 0 [0135.286] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.286] wcscmp (_String1="..", _String2=".") returned 1 [0135.286] wcscmp (_String1="..", _String2="..") returned 0 [0135.286] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0135.286] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0135.286] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0135.286] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.286] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0135.286] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0135.286] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0135.286] wcscmp (_String1="Programs", _String2=".") returned 1 [0135.286] wcscmp (_String1="Programs", _String2="..") returned 1 [0135.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1af70 [0135.287] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0135.287] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0135.287] wcscat (in: _Dest=0x3f1af70, _Source="Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0139.729] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0139.729] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0139.729] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0139.729] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0139.729] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0139.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0139.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 [0139.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 448 os_tid = 0xfdc [0135.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eef610 [0135.287] wcscpy (in: _Dest=0x3eef610, _Source="C:\\ProgramData\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0135.287] wcscat (in: _Dest=0x3eef610, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\" [0135.287] wcscat (in: _Dest=0x3eef610, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*" [0135.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0135.287] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc40 [0138.319] wcscmp (_String1=".", _String2=".") returned 0 [0138.319] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.319] wcscmp (_String1="..", _String2=".") returned 1 [0138.319] wcscmp (_String1="..", _String2="..") returned 0 [0138.319] FindNextFileW (in: hFindFile=0x3f1fc40, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.319] FindClose (in: hFindFile=0x3f1fc40 | out: hFindFile=0x3f1fc40) returned 1 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef610) returned 1 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6128) returned 1 Thread: id = 449 os_tid = 0xf50 [0135.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7338 [0135.288] wcscpy (in: _Dest=0x3ef7338, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0135.288] wcscat (in: _Dest=0x3ef7338, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0135.288] wcscat (in: _Dest=0x3ef7338, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\*" [0135.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0135.288] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0138.722] wcscmp (_String1=".", _String2=".") returned 0 [0138.722] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.722] wcscmp (_String1="..", _String2=".") returned 1 [0138.722] wcscmp (_String1="..", _String2="..") returned 0 [0138.722] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0138.722] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0138.723] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0138.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5488 [0138.723] wcscpy (in: _Dest=0x66e5488, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0138.723] wcscat (in: _Dest=0x66e5488, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0138.723] wcscat (in: _Dest=0x66e5488, _Source="ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0149.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0149.340] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0149.340] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0149.340] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0149.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29170 [0149.340] wcscpy (in: _Dest=0x3f29170, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0149.341] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0149.341] wcscat (in: _Dest=0x3f29170, _Source="ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0149.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0149.345] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0149.346] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0149.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0149.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7338) returned 1 [0149.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02d78) returned 1 Thread: id = 450 os_tid = 0xff4 [0135.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29b80 [0135.288] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0135.288] wcscat (in: _Dest=0x3f29b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0135.288] wcscat (in: _Dest=0x3f29b80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*" [0135.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f124b0 [0135.288] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0139.295] wcscmp (_String1=".", _String2=".") returned 0 [0139.295] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.515] wcscmp (_String1="..", _String2=".") returned 1 [0140.515] wcscmp (_String1="..", _String2="..") returned 0 [0140.515] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0140.515] wcscmp (_String1="Access", _String2=".") returned 1 [0140.515] wcscmp (_String1="Access", _String2="..") returned 1 [0140.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0240 [0140.516] wcscpy (in: _Dest=0x66d0240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0140.516] wcscat (in: _Dest=0x66d0240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0140.516] wcscat (in: _Dest=0x66d0240, _Source="Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0141.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0141.783] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0141.784] wcscmp (_String1="AdjacencyLetter.dotx", _String2=".") returned 1 [0141.784] wcscmp (_String1="AdjacencyLetter.dotx", _String2="..") returned 1 [0141.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0141.784] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.784] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.784] wcscat (in: _Dest=0x32d700, _Source="AdjacencyLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" [0141.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0141.785] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0141.785] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2=".") returned 1 [0141.785] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2="..") returned 1 [0141.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e930 [0141.785] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.786] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.786] wcscat (in: _Dest=0x3e0e930, _Source="AdjacencyMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" [0141.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0141.787] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0141.787] wcscmp (_String1="AdjacencyReport.dotx", _String2=".") returned 1 [0141.787] wcscmp (_String1="AdjacencyReport.dotx", _String2="..") returned 1 [0141.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0141.787] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.787] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.787] wcscat (in: _Dest=0x32b820, _Source="AdjacencyReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" [0141.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0141.789] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~4.DOT")) returned 1 [0141.789] wcscmp (_String1="AdjacencyResume.dotx", _String2=".") returned 1 [0141.789] wcscmp (_String1="AdjacencyResume.dotx", _String2="..") returned 1 [0141.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31060 [0141.789] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.789] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.789] wcscat (in: _Dest=0x3e31060, _Source="AdjacencyResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" [0141.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0141.791] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0141.791] wcscmp (_String1="ADR1.XLT", _String2=".") returned 1 [0141.791] wcscmp (_String1="ADR1.XLT", _String2="..") returned 1 [0141.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da62f0 [0141.791] wcscpy (in: _Dest=0x3da62f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.791] wcscat (in: _Dest=0x3da62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.791] wcscat (in: _Dest=0x3da62f0, _Source="ADR1.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" [0141.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0141.793] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0141.793] wcscmp (_String1="ADR10.XLT", _String2=".") returned 1 [0141.793] wcscmp (_String1="ADR10.XLT", _String2="..") returned 1 [0141.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5bf0 [0141.793] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.793] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.793] wcscat (in: _Dest=0x3da5bf0, _Source="ADR10.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" [0141.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0141.794] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0141.795] wcscmp (_String1="ADR2.XLT", _String2=".") returned 1 [0141.795] wcscmp (_String1="ADR2.XLT", _String2="..") returned 1 [0141.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6370 [0141.795] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.795] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.795] wcscat (in: _Dest=0x3da6370, _Source="ADR2.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" [0141.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0141.796] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0141.796] wcscmp (_String1="ADR3.XLT", _String2=".") returned 1 [0141.797] wcscmp (_String1="ADR3.XLT", _String2="..") returned 1 [0141.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edaff8 [0141.797] wcscpy (in: _Dest=0x3edaff8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.797] wcscat (in: _Dest=0x3edaff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.797] wcscat (in: _Dest=0x3edaff8, _Source="ADR3.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" [0141.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edaff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0141.799] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0141.800] wcscmp (_String1="ADR4.XLT", _String2=".") returned 1 [0141.800] wcscmp (_String1="ADR4.XLT", _String2="..") returned 1 [0141.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edac78 [0141.800] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.800] wcscat (in: _Dest=0x3edac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.800] wcscat (in: _Dest=0x3edac78, _Source="ADR4.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" [0141.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0141.801] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0141.801] wcscmp (_String1="ADR5.XLT", _String2=".") returned 1 [0141.801] wcscmp (_String1="ADR5.XLT", _String2="..") returned 1 [0141.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbdf8 [0141.801] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.801] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.801] wcscat (in: _Dest=0x3edbdf8, _Source="ADR5.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" [0141.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0141.803] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0141.803] wcscmp (_String1="ADR6.XLT", _String2=".") returned 1 [0141.803] wcscmp (_String1="ADR6.XLT", _String2="..") returned 1 [0141.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda4f8 [0141.803] wcscpy (in: _Dest=0x3eda4f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.803] wcscat (in: _Dest=0x3eda4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.803] wcscat (in: _Dest=0x3eda4f8, _Source="ADR6.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" [0141.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0141.804] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0141.804] wcscmp (_String1="ADR7.XLT", _String2=".") returned 1 [0141.804] wcscmp (_String1="ADR7.XLT", _String2="..") returned 1 [0141.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbff8 [0141.804] wcscpy (in: _Dest=0x3edbff8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.804] wcscat (in: _Dest=0x3edbff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.804] wcscat (in: _Dest=0x3edbff8, _Source="ADR7.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" [0141.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0141.806] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0141.806] wcscmp (_String1="ADR8.XLT", _String2=".") returned 1 [0141.806] wcscmp (_String1="ADR8.XLT", _String2="..") returned 1 [0141.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb478 [0141.806] wcscpy (in: _Dest=0x3edb478, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.806] wcscat (in: _Dest=0x3edb478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.806] wcscat (in: _Dest=0x3edb478, _Source="ADR8.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" [0141.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0141.807] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0141.807] wcscmp (_String1="ADR9.XLT", _String2=".") returned 1 [0141.808] wcscmp (_String1="ADR9.XLT", _String2="..") returned 1 [0141.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbe78 [0141.808] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.808] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.808] wcscat (in: _Dest=0x3edbe78, _Source="ADR9.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" [0141.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0141.809] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0141.809] wcscmp (_String1="ApothecaryLetter.dotx", _String2=".") returned 1 [0141.809] wcscmp (_String1="ApothecaryLetter.dotx", _String2="..") returned 1 [0141.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30f30 [0141.810] wcscpy (in: _Dest=0x3e30f30, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.810] wcscat (in: _Dest=0x3e30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.810] wcscat (in: _Dest=0x3e30f30, _Source="ApothecaryLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" [0141.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0141.811] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0141.811] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2=".") returned 1 [0141.811] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2="..") returned 1 [0141.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0ebb0 [0141.811] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.811] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.811] wcscat (in: _Dest=0x3e0ebb0, _Source="ApothecaryMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" [0141.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0141.813] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0141.813] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2=".") returned 1 [0141.813] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2="..") returned 1 [0141.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eb10 [0141.813] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.813] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.813] wcscat (in: _Dest=0x3e0eb10, _Source="ApothecaryNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" [0141.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0141.814] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~4.DOT")) returned 1 [0141.814] wcscmp (_String1="ApothecaryResume.dotx", _String2=".") returned 1 [0141.814] wcscmp (_String1="ApothecaryResume.dotx", _String2="..") returned 1 [0141.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30cd0 [0141.815] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.815] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.815] wcscat (in: _Dest=0x3e30cd0, _Source="ApothecaryResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" [0141.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0141.816] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24d7400, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24d7400, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0141.816] wcscmp (_String1="BillingStatement.xltx", _String2=".") returned 1 [0141.816] wcscmp (_String1="BillingStatement.xltx", _String2="..") returned 1 [0141.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30e98 [0141.816] wcscpy (in: _Dest=0x3e30e98, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.816] wcscat (in: _Dest=0x3e30e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.816] wcscat (in: _Dest=0x3e30e98, _Source="BillingStatement.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" [0141.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0141.817] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d50c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="BLACKT~1.DOT")) returned 1 [0141.817] wcscmp (_String1="BlackTieLetter.dotx", _String2=".") returned 1 [0141.817] wcscmp (_String1="BlackTieLetter.dotx", _String2="..") returned 1 [0141.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30d68 [0141.818] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0141.818] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0141.818] wcscat (in: _Dest=0x3e30d68, _Source="BlackTieLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" [0141.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0142.811] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63dc3090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="BLACKT~2.DOT")) returned 1 [0142.811] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2=".") returned 1 [0142.811] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2="..") returned 1 [0142.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0142.811] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.811] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.812] wcscat (in: _Dest=0x3e0d210, _Source="BlackTieMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" [0155.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0155.660] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63e5b610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="BLACKT~3.DOT")) returned 1 [0155.660] wcscmp (_String1="BlackTieNewsletter.dotx", _String2=".") returned 1 [0155.660] wcscmp (_String1="BlackTieNewsletter.dotx", _String2="..") returned 1 [0155.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d170 [0155.660] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.660] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.660] wcscat (in: _Dest=0x3e0d170, _Source="BlackTieNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" [0155.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0155.661] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="BLACKT~4.DOT")) returned 1 [0155.661] wcscmp (_String1="BlackTieResume.dotx", _String2=".") returned 1 [0155.661] wcscmp (_String1="BlackTieResume.dotx", _String2="..") returned 1 [0155.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2240 [0155.662] wcscpy (in: _Dest=0x69c2240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.662] wcscat (in: _Dest=0x69c2240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.662] wcscat (in: _Dest=0x69c2240, _Source="BlackTieResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" [0155.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0155.663] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37e2000, ftCreationTime.dwHighDateTime=0x1ca588f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37e2000, ftLastWriteTime.dwHighDateTime=0x1ca588f, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0155.663] wcscmp (_String1="Blog.dotx", _String2=".") returned 1 [0155.663] wcscmp (_String1="Blog.dotx", _String2="..") returned 1 [0155.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5b70 [0155.663] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.663] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.663] wcscat (in: _Dest=0x3da5b70, _Source="Blog.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" [0155.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0155.664] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1674200, ftCreationTime.dwHighDateTime=0x1c6d8c5, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1674200, ftLastWriteTime.dwHighDateTime=0x1c6d8c5, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0155.665] wcscmp (_String1="BloodPressureTracker.xltx", _String2=".") returned 1 [0155.665] wcscmp (_String1="BloodPressureTracker.xltx", _String2="..") returned 1 [0155.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0155.665] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.665] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.665] wcscat (in: _Dest=0x3e0ed90, _Source="BloodPressureTracker.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" [0155.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0155.666] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0000, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec0000, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0155.666] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2=".") returned 1 [0155.666] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2="..") returned 1 [0155.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c22d8 [0155.666] wcscpy (in: _Dest=0x69c22d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.666] wcscat (in: _Dest=0x69c22d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.666] wcscat (in: _Dest=0x69c22d8, _Source="ClassicPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" [0155.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c22d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0155.667] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20883800, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20883800, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0155.667] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2=".") returned 1 [0155.667] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2="..") returned 1 [0155.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e960 [0155.668] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.668] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.668] wcscat (in: _Dest=0x697e960, _Source="ContemporaryPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" [0155.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0155.669] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0155.669] wcscmp (_String1="EquityLetter.Dotx", _String2=".") returned 1 [0155.669] wcscmp (_String1="EquityLetter.Dotx", _String2="..") returned 1 [0155.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd248 [0155.669] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.669] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.669] wcscat (in: _Dest=0x66dd248, _Source="EquityLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" [0155.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0155.670] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="EQUITY~2.DOT")) returned 1 [0155.670] wcscmp (_String1="EquityMergeFax.Dotx", _String2=".") returned 1 [0155.670] wcscmp (_String1="EquityMergeFax.Dotx", _String2="..") returned 1 [0155.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2370 [0155.670] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.670] wcscat (in: _Dest=0x69c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.671] wcscat (in: _Dest=0x69c2370, _Source="EquityMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" [0155.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0155.672] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="EQUITY~3.DOT")) returned 1 [0155.676] wcscmp (_String1="EquityMergeLetter.Dotx", _String2=".") returned 1 [0155.676] wcscmp (_String1="EquityMergeLetter.Dotx", _String2="..") returned 1 [0155.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c2408 [0155.676] wcscpy (in: _Dest=0x69c2408, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0155.676] wcscat (in: _Dest=0x69c2408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0155.676] wcscat (in: _Dest=0x69c2408, _Source="EquityMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" [0157.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0157.173] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="EQUITY~4.DOT")) returned 1 [0157.173] wcscmp (_String1="EquityReport.Dotx", _String2=".") returned 1 [0157.173] wcscmp (_String1="EquityReport.Dotx", _String2="..") returned 1 [0157.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674ccf8 [0157.173] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.174] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.174] wcscat (in: _Dest=0x674ccf8, _Source="EquityReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" [0157.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0157.175] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="EQD69A~1.DOT")) returned 1 [0157.175] wcscmp (_String1="EquityResume.Dotx", _String2=".") returned 1 [0157.175] wcscmp (_String1="EquityResume.Dotx", _String2="..") returned 1 [0157.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cd88 [0157.175] wcscpy (in: _Dest=0x674cd88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.175] wcscat (in: _Dest=0x674cd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.175] wcscat (in: _Dest=0x674cd88, _Source="EquityResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" [0157.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0157.176] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0157.176] wcscmp (_String1="EssentialLetter.dotx", _String2=".") returned 1 [0157.176] wcscmp (_String1="EssentialLetter.dotx", _String2="..") returned 1 [0157.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958240 [0157.176] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.176] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.176] wcscat (in: _Dest=0x6958240, _Source="EssentialLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" [0157.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0157.177] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0157.177] wcscmp (_String1="EssentialMergeLetter.dotx", _String2=".") returned 1 [0157.177] wcscmp (_String1="EssentialMergeLetter.dotx", _String2="..") returned 1 [0157.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e390 [0157.177] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.177] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.177] wcscat (in: _Dest=0x3e0e390, _Source="EssentialMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" [0157.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0157.178] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0157.178] wcscmp (_String1="EssentialReport.dotx", _String2=".") returned 1 [0157.178] wcscmp (_String1="EssentialReport.dotx", _String2="..") returned 1 [0157.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958fe8 [0157.178] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.179] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.179] wcscat (in: _Dest=0x6958fe8, _Source="EssentialReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" [0157.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0157.179] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~4.DOT")) returned 1 [0157.180] wcscmp (_String1="EssentialResume.dotx", _String2=".") returned 1 [0157.180] wcscmp (_String1="EssentialResume.dotx", _String2="..") returned 1 [0157.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0157.180] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.180] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.180] wcscat (in: _Dest=0x69582d8, _Source="EssentialResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" [0157.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0157.181] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="EXECUT~1.DOT")) returned 1 [0157.181] wcscmp (_String1="ExecutiveLetter.dotx", _String2=".") returned 1 [0157.181] wcscmp (_String1="ExecutiveLetter.dotx", _String2="..") returned 1 [0157.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818078 [0157.181] wcscpy (in: _Dest=0x6818078, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.181] wcscat (in: _Dest=0x6818078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.181] wcscat (in: _Dest=0x6818078, _Source="ExecutiveLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" [0157.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0157.182] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="EXECUT~2.DOT")) returned 1 [0157.182] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2=".") returned 1 [0157.182] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2="..") returned 1 [0157.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c10e8 [0157.182] wcscpy (in: _Dest=0x69c10e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.182] wcscat (in: _Dest=0x69c10e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.182] wcscat (in: _Dest=0x69c10e8, _Source="ExecutiveMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" [0157.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c10e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0157.183] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="EXECUT~3.DOT")) returned 1 [0157.183] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2=".") returned 1 [0157.183] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2="..") returned 1 [0157.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c14a8 [0157.183] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.183] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.183] wcscat (in: _Dest=0x69c14a8, _Source="ExecutiveNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" [0157.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0157.184] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="EXECUT~4.DOT")) returned 1 [0157.184] wcscmp (_String1="ExecutiveReport.dotx", _String2=".") returned 1 [0157.184] wcscmp (_String1="ExecutiveReport.dotx", _String2="..") returned 1 [0157.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818110 [0157.185] wcscpy (in: _Dest=0x6818110, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.185] wcscat (in: _Dest=0x6818110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.185] wcscat (in: _Dest=0x6818110, _Source="ExecutiveReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" [0157.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0157.186] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="EX9D69~1.DOT")) returned 1 [0157.186] wcscmp (_String1="ExecutiveResume.dotx", _String2=".") returned 1 [0157.186] wcscmp (_String1="ExecutiveResume.dotx", _String2="..") returned 1 [0157.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68181a8 [0157.186] wcscpy (in: _Dest=0x68181a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.186] wcscat (in: _Dest=0x68181a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.186] wcscat (in: _Dest=0x68181a8, _Source="ExecutiveResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" [0157.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68181a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0157.187] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666a3b00, ftCreationTime.dwHighDateTime=0x1c6d8c6, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x666a3b00, ftLastWriteTime.dwHighDateTime=0x1c6d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0157.187] wcscmp (_String1="ExpenseReport.xltx", _String2=".") returned 1 [0157.187] wcscmp (_String1="ExpenseReport.xltx", _String2="..") returned 1 [0157.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cfc8 [0157.187] wcscpy (in: _Dest=0x674cfc8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.187] wcscat (in: _Dest=0x674cfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.187] wcscat (in: _Dest=0x674cfc8, _Source="ExpenseReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" [0157.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0157.188] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1 [0157.188] wcscmp (_String1="FAX", _String2=".") returned 1 [0157.188] wcscmp (_String1="FAX", _String2="..") returned 1 [0157.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b510 [0157.188] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.188] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.188] wcscat (in: _Dest=0x3f1b510, _Source="FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0157.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0157.189] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd4c6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="FIVERU~1.POT")) returned 1 [0157.189] wcscmp (_String1="FiveRules.potx", _String2=".") returned 1 [0157.189] wcscmp (_String1="FiveRules.potx", _String2="..") returned 1 [0157.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0157.190] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.190] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.190] wcscat (in: _Dest=0x3f26d00, _Source="FiveRules.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" [0157.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0157.191] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0dd1800, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3daeb0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0dd1800, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="INTROD~1.POT")) returned 1 [0157.191] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2=".") returned 1 [0157.191] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2="..") returned 1 [0157.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d730 [0157.191] wcscpy (in: _Dest=0x3e5d730, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.191] wcscat (in: _Dest=0x3e5d730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.191] wcscat (in: _Dest=0x3e5d730, _Source="IntroducingPowerPoint2010.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" [0157.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0157.192] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe880000, ftCreationTime.dwHighDateTime=0x1c6d8d7, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe880000, ftLastWriteTime.dwHighDateTime=0x1c6d8d7, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0157.192] wcscmp (_String1="LoanAmortization.xltx", _String2=".") returned 1 [0157.192] wcscmp (_String1="LoanAmortization.xltx", _String2="..") returned 1 [0157.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818240 [0157.192] wcscpy (in: _Dest=0x6818240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.192] wcscat (in: _Dest=0x6818240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.192] wcscat (in: _Dest=0x6818240, _Source="LoanAmortization.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" [0157.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0157.193] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0157.193] wcscmp (_String1="MedianLetter.Dotx", _String2=".") returned 1 [0157.193] wcscmp (_String1="MedianLetter.Dotx", _String2="..") returned 1 [0157.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d0e8 [0157.193] wcscpy (in: _Dest=0x674d0e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.194] wcscat (in: _Dest=0x674d0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.194] wcscat (in: _Dest=0x674d0e8, _Source="MedianLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" [0157.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0157.195] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="MEDIAN~2.DOT")) returned 1 [0157.195] wcscmp (_String1="MedianMergeFax.Dotx", _String2=".") returned 1 [0157.195] wcscmp (_String1="MedianMergeFax.Dotx", _String2="..") returned 1 [0157.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68182d8 [0157.195] wcscpy (in: _Dest=0x68182d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.195] wcscat (in: _Dest=0x68182d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.195] wcscat (in: _Dest=0x68182d8, _Source="MedianMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" [0157.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68182d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0157.196] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="MEDIAN~3.DOT")) returned 1 [0157.196] wcscmp (_String1="MedianMergeLetter.Dotx", _String2=".") returned 1 [0157.196] wcscmp (_String1="MedianMergeLetter.Dotx", _String2="..") returned 1 [0157.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818370 [0157.196] wcscpy (in: _Dest=0x6818370, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.196] wcscat (in: _Dest=0x6818370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.196] wcscat (in: _Dest=0x6818370, _Source="MedianMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" [0157.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0157.197] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="MEDIAN~4.DOT")) returned 1 [0157.197] wcscmp (_String1="MedianReport.Dotx", _String2=".") returned 1 [0157.197] wcscmp (_String1="MedianReport.Dotx", _String2="..") returned 1 [0157.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d178 [0157.197] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.197] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.197] wcscat (in: _Dest=0x674d178, _Source="MedianReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" [0157.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0157.198] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="ME105B~1.DOT")) returned 1 [0157.198] wcscmp (_String1="MedianResume.Dotx", _String2=".") returned 1 [0157.198] wcscmp (_String1="MedianResume.Dotx", _String2="..") returned 1 [0157.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d208 [0157.198] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.198] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.198] wcscat (in: _Dest=0x674d208, _Source="MedianResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" [0157.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0157.199] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0157.199] wcscmp (_String1="Office Word 2003 Look.dotx", _String2=".") returned 1 [0157.199] wcscmp (_String1="Office Word 2003 Look.dotx", _String2="..") returned 1 [0157.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c12c8 [0157.200] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.200] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.200] wcscat (in: _Dest=0x69c12c8, _Source="Office Word 2003 Look.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" [0157.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0157.201] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0157.201] wcscmp (_String1="ONENOTE", _String2=".") returned 1 [0157.201] wcscmp (_String1="ONENOTE", _String2="..") returned 1 [0157.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b138 [0157.201] wcscpy (in: _Dest=0x674b138, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.201] wcscat (in: _Dest=0x674b138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.201] wcscat (in: _Dest=0x674b138, _Source="ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0157.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674b138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0157.202] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="ORIELL~1.DOT")) returned 1 [0157.202] wcscmp (_String1="OrielLetter.Dotx", _String2=".") returned 1 [0157.202] wcscmp (_String1="OrielLetter.Dotx", _String2="..") returned 1 [0157.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d298 [0157.202] wcscpy (in: _Dest=0x674d298, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.202] wcscat (in: _Dest=0x674d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.202] wcscat (in: _Dest=0x674d298, _Source="OrielLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" [0157.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0157.203] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="ORIELM~1.DOT")) returned 1 [0157.203] wcscmp (_String1="OrielMergeFax.Dotx", _String2=".") returned 1 [0157.203] wcscmp (_String1="OrielMergeFax.Dotx", _String2="..") returned 1 [0157.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ce18 [0157.203] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.203] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.203] wcscat (in: _Dest=0x674ce18, _Source="OrielMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" [0157.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0157.207] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="ORIELM~2.DOT")) returned 1 [0157.207] wcscmp (_String1="OrielMergeLetter.Dotx", _String2=".") returned 1 [0157.207] wcscmp (_String1="OrielMergeLetter.Dotx", _String2="..") returned 1 [0157.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818408 [0157.207] wcscpy (in: _Dest=0x6818408, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.207] wcscat (in: _Dest=0x6818408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.207] wcscat (in: _Dest=0x6818408, _Source="OrielMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" [0157.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0157.208] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="ORIELR~1.DOT")) returned 1 [0157.208] wcscmp (_String1="OrielReport.Dotx", _String2=".") returned 1 [0157.208] wcscmp (_String1="OrielReport.Dotx", _String2="..") returned 1 [0157.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cea8 [0157.209] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.209] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.209] wcscat (in: _Dest=0x674cea8, _Source="OrielReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" [0157.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0157.210] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="ORIELR~2.DOT")) returned 1 [0157.210] wcscmp (_String1="OrielResume.Dotx", _String2=".") returned 1 [0157.210] wcscmp (_String1="OrielResume.Dotx", _String2="..") returned 1 [0157.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cf38 [0157.210] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.210] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.210] wcscat (in: _Dest=0x674cf38, _Source="OrielResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" [0157.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0157.211] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0157.211] wcscmp (_String1="OriginLetter.Dotx", _String2=".") returned 1 [0157.211] wcscmp (_String1="OriginLetter.Dotx", _String2="..") returned 1 [0157.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d058 [0157.211] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0157.211] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0157.211] wcscat (in: _Dest=0x674d058, _Source="OriginLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" [0157.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0157.212] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0158.933] wcscmp (_String1="OriginMergeFax.Dotx", _String2=".") returned 1 [0158.933] wcscmp (_String1="OriginMergeFax.Dotx", _String2="..") returned 1 [0158.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c1eb0 [0158.933] wcscpy (in: _Dest=0x69c1eb0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0158.933] wcscat (in: _Dest=0x69c1eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0158.933] wcscat (in: _Dest=0x69c1eb0, _Source="OriginMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" [0159.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0159.822] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0159.822] wcscmp (_String1="OriginMergeLetter.Dotx", _String2=".") returned 1 [0159.822] wcscmp (_String1="OriginMergeLetter.Dotx", _String2="..") returned 1 [0159.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958830 [0159.822] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.822] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.822] wcscat (in: _Dest=0x6958830, _Source="OriginMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" [0159.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0159.824] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~4.DOT")) returned 1 [0159.824] wcscmp (_String1="OriginReport.Dotx", _String2=".") returned 1 [0159.824] wcscmp (_String1="OriginReport.Dotx", _String2="..") returned 1 [0159.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cab8 [0159.824] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.824] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.824] wcscat (in: _Dest=0x674cab8, _Source="OriginReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" [0159.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0159.826] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORAE40~1.DOT")) returned 1 [0159.826] wcscmp (_String1="OriginResume.Dotx", _String2=".") returned 1 [0159.826] wcscmp (_String1="OriginResume.Dotx", _String2="..") returned 1 [0159.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e528 [0159.826] wcscpy (in: _Dest=0x674e528, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.826] wcscat (in: _Dest=0x674e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.826] wcscat (in: _Dest=0x674e528, _Source="OriginResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" [0159.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0159.827] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0159.827] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2=".") returned 1 [0159.827] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2="..") returned 1 [0159.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0e68 [0159.827] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.828] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.828] wcscat (in: _Dest=0x69c0e68, _Source="PersonalMonthlyBudget.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" [0159.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0159.829] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46628100, ftCreationTime.dwHighDateTime=0x1c69afa, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46628100, ftLastWriteTime.dwHighDateTime=0x1c69afa, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0159.829] wcscmp (_String1="Pitchbook.potx", _String2=".") returned 1 [0159.829] wcscmp (_String1="Pitchbook.potx", _String2="..") returned 1 [0159.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a1d0 [0159.829] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.829] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.829] wcscat (in: _Dest=0x3d5a1d0, _Source="Pitchbook.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" [0159.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0159.830] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="PROJEC~1.POT")) returned 1 [0159.831] wcscmp (_String1="ProjectStatusReport.potx", _String2=".") returned 1 [0159.831] wcscmp (_String1="ProjectStatusReport.potx", _String2="..") returned 1 [0159.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfd88 [0159.831] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.831] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.831] wcscat (in: _Dest=0x69bfd88, _Source="ProjectStatusReport.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" [0159.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0159.836] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x801f000, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x801f000, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0159.836] wcscmp (_String1="PROJPLAN.XLTX", _String2=".") returned 1 [0159.836] wcscmp (_String1="PROJPLAN.XLTX", _String2="..") returned 1 [0159.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eefc0 [0159.836] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.836] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.836] wcscat (in: _Dest=0x66eefc0, _Source="PROJPLAN.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" [0159.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0159.838] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740ee600, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x740ee600, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0159.838] wcscmp (_String1="QuizShow.potx", _String2=".") returned 1 [0159.838] wcscmp (_String1="QuizShow.potx", _String2="..") returned 1 [0159.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eea70 [0159.838] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.838] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.838] wcscat (in: _Dest=0x66eea70, _Source="QuizShow.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" [0159.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0159.839] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0159.839] wcscmp (_String1="SalesReport.xltx", _String2=".") returned 1 [0159.839] wcscmp (_String1="SalesReport.xltx", _String2="..") returned 1 [0159.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cb48 [0159.839] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.839] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.840] wcscat (in: _Dest=0x674cb48, _Source="SalesReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" [0159.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0159.841] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d771a00, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x99798450, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1d771a00, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0159.841] wcscmp (_String1="TASKLIST.XLTX", _String2=".") returned 1 [0159.841] wcscmp (_String1="TASKLIST.XLTX", _String2="..") returned 1 [0159.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eee28 [0159.841] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.841] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.841] wcscat (in: _Dest=0x66eee28, _Source="TASKLIST.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" [0159.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0159.842] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e95500, ftCreationTime.dwHighDateTime=0x1c6d8cf, ftLastAccessTime.dwLowDateTime=0x4309c8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5e95500, ftLastWriteTime.dwHighDateTime=0x1c6d8cf, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0159.843] wcscmp (_String1="TimeCard.xltx", _String2=".") returned 1 [0159.843] wcscmp (_String1="TimeCard.xltx", _String2="..") returned 1 [0159.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee9e8 [0159.843] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.843] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.843] wcscat (in: _Dest=0x66ee9e8, _Source="TimeCard.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" [0159.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0159.844] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0159.844] wcscmp (_String1="Training.potx", _String2=".") returned 1 [0159.844] wcscmp (_String1="Training.potx", _String2="..") returned 1 [0159.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef378 [0159.844] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.844] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.844] wcscat (in: _Dest=0x66ef378, _Source="Training.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" [0159.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0159.846] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="URBANL~1.DOT")) returned 1 [0159.846] wcscmp (_String1="UrbanLetter.Dotx", _String2=".") returned 1 [0159.846] wcscmp (_String1="UrbanLetter.Dotx", _String2="..") returned 1 [0159.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e498 [0159.846] wcscpy (in: _Dest=0x674e498, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.846] wcscat (in: _Dest=0x674e498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.846] wcscat (in: _Dest=0x674e498, _Source="UrbanLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" [0159.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0159.847] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="URBANM~1.DOT")) returned 1 [0159.847] wcscmp (_String1="UrbanMergeFax.Dotx", _String2=".") returned 1 [0159.847] wcscmp (_String1="UrbanMergeFax.Dotx", _String2="..") returned 1 [0159.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e0a8 [0159.847] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.847] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.847] wcscat (in: _Dest=0x674e0a8, _Source="UrbanMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" [0159.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0159.849] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="URBANM~2.DOT")) returned 1 [0159.849] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2=".") returned 1 [0159.849] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2="..") returned 1 [0159.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69594a8 [0159.849] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.849] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.849] wcscat (in: _Dest=0x69594a8, _Source="UrbanMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" [0159.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0159.850] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="URBANP~1.POT")) returned 1 [0159.850] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2=".") returned 1 [0159.850] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2="..") returned 1 [0159.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959540 [0159.851] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.851] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.851] wcscat (in: _Dest=0x6959540, _Source="UrbanPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" [0159.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0159.852] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="URBANR~1.DOT")) returned 1 [0159.852] wcscmp (_String1="UrbanReport.Dotx", _String2=".") returned 1 [0159.852] wcscmp (_String1="UrbanReport.Dotx", _String2="..") returned 1 [0159.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674db08 [0159.852] wcscpy (in: _Dest=0x674db08, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.852] wcscat (in: _Dest=0x674db08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.852] wcscat (in: _Dest=0x674db08, _Source="UrbanReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" [0159.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0159.853] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="URBANR~2.DOT")) returned 1 [0159.853] wcscmp (_String1="UrbanResume.Dotx", _String2=".") returned 1 [0159.853] wcscmp (_String1="UrbanResume.Dotx", _String2="..") returned 1 [0159.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d718 [0159.854] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.854] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.854] wcscat (in: _Dest=0x674d718, _Source="UrbanResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" [0159.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0159.860] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0159.860] wcscmp (_String1="WidescreenPresentation.potx", _String2=".") returned 1 [0159.860] wcscmp (_String1="WidescreenPresentation.potx", _String2="..") returned 1 [0159.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697de38 [0159.860] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0159.860] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0159.860] wcscat (in: _Dest=0x697de38, _Source="WidescreenPresentation.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" [0159.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0159.861] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 0 [0160.758] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0165.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f124b0) returned 1 [0165.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 [0165.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364bd0) returned 1 Thread: id = 451 os_tid = 0xbd8 [0135.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0135.289] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0135.289] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0135.289] wcscat (in: _Dest=0x66db598, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*" [0135.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0135.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0138.310] wcscmp (_String1=".", _String2=".") returned 0 [0138.310] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.311] wcscmp (_String1="..", _String2=".") returned 1 [0138.311] wcscmp (_String1="..", _String2="..") returned 0 [0138.311] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0138.311] wcscmp (_String1="Maple.gif", _String2=".") returned 1 [0138.311] wcscmp (_String1="Maple.gif", _String2="..") returned 1 [0138.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0138.311] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0138.311] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0138.311] wcscat (in: _Dest=0x3e0ecf0, _Source="Maple.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" [0140.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0140.408] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0140.408] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0140.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0140.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 [0140.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 452 os_tid = 0x6d0 [0135.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0135.290] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0135.290] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0135.290] wcscat (in: _Dest=0x3f29b10, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\*") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\*" [0135.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0135.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0135.291] wcscmp (_String1=".", _String2=".") returned 0 [0135.291] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="..", _String2=".") returned 1 [0135.292] wcscmp (_String1="..", _String2="..") returned 0 [0135.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd6dc00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9fd6dc00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="jaucheck.exe", _String2=".") returned 1 [0135.292] wcscmp (_String1="jaucheck.exe", _String2="..") returned 1 [0135.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d748200, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9d748200, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="jaureg.exe", _String2=".") returned 1 [0135.292] wcscmp (_String1="jaureg.exe", _String2="..") returned 1 [0135.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b122800, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9b122800, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="jucheck.exe", _String2=".") returned 1 [0135.292] wcscmp (_String1="jucheck.exe", _String2="..") returned 1 [0135.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977ea100, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x977ea100, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="jusched.exe", _String2=".") returned 1 [0135.292] wcscmp (_String1="jusched.exe", _String2="..") returned 1 [0135.292] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1 [0135.292] wcscmp (_String1="task.xml", _String2=".") returned 1 [0135.292] wcscmp (_String1="task.xml", _String2="..") returned 1 [0135.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aca0 [0135.292] wcscpy (in: _Dest=0x3f1aca0, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0135.292] wcscat (in: _Dest=0x3f1aca0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0135.292] wcscat (in: _Dest=0x3f1aca0, _Source="task.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" [0139.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0139.732] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1 [0139.732] wcscmp (_String1="task64.xml", _String2=".") returned 1 [0139.732] wcscmp (_String1="task64.xml", _String2="..") returned 1 [0139.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5cf0 [0139.732] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0139.732] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0139.732] wcscat (in: _Dest=0x3da5cf0, _Source="task64.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" [0139.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0139.733] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0 [0139.733] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0139.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0139.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 [0139.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 453 os_tid = 0xffc [0135.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ad18 [0135.293] wcscpy (in: _Dest=0x3f1ad18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0135.293] wcscat (in: _Dest=0x3f1ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0135.293] wcscat (in: _Dest=0x3f1ad18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*" [0135.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12248 [0135.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d38 [0135.932] wcscmp (_String1=".", _String2=".") returned 0 [0135.932] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.938] wcscmp (_String1="..", _String2=".") returned 1 [0135.938] wcscmp (_String1="..", _String2="..") returned 0 [0135.938] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ca0c00, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9ca0c00, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0135.938] wcscmp (_String1="AG00004_.GIF", _String2=".") returned 1 [0135.938] wcscmp (_String1="AG00004_.GIF", _String2="..") returned 1 [0135.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0135.938] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0135.938] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0135.938] wcscat (in: _Dest=0x66ef400, _Source="AG00004_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" [0138.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0138.082] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1847e700, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1847e700, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0138.082] wcscmp (_String1="AG00011_.GIF", _String2=".") returned 1 [0138.082] wcscmp (_String1="AG00011_.GIF", _String2="..") returned 1 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a2e0 [0138.082] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.082] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.082] wcscat (in: _Dest=0x3d5a2e0, _Source="AG00011_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" [0138.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0138.084] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d5200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8d5200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0138.084] wcscmp (_String1="AG00021_.GIF", _String2=".") returned 1 [0138.084] wcscmp (_String1="AG00021_.GIF", _String2="..") returned 1 [0138.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59b70 [0138.084] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.085] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.085] wcscat (in: _Dest=0x3d59b70, _Source="AG00021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" [0138.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0138.086] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9495500, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf9495500, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0138.086] wcscmp (_String1="AG00037_.GIF", _String2=".") returned 1 [0138.086] wcscmp (_String1="AG00037_.GIF", _String2="..") returned 1 [0138.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0138.086] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.087] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.087] wcscat (in: _Dest=0x3d59e18, _Source="AG00037_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" [0138.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0138.088] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8d7c00, ftCreationTime.dwHighDateTime=0x1bf32c1, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc8d7c00, ftLastWriteTime.dwHighDateTime=0x1bf32c1, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0138.088] wcscmp (_String1="AG00038_.GIF", _String2=".") returned 1 [0138.088] wcscmp (_String1="AG00038_.GIF", _String2="..") returned 1 [0138.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58740 [0138.088] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.088] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.088] wcscat (in: _Dest=0x3d58740, _Source="AG00038_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" [0138.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0138.090] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf484a100, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf484a100, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0138.090] wcscmp (_String1="AG00040_.GIF", _String2=".") returned 1 [0138.090] wcscmp (_String1="AG00040_.GIF", _String2="..") returned 1 [0138.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d586b8 [0138.090] wcscpy (in: _Dest=0x3d586b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.090] wcscat (in: _Dest=0x3d586b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.090] wcscat (in: _Dest=0x3d586b8, _Source="AG00040_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" [0138.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d586b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0138.092] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb633400, ftCreationTime.dwHighDateTime=0x1bd4c74, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb633400, ftLastWriteTime.dwHighDateTime=0x1bd4c74, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0138.092] wcscmp (_String1="AG00052_.GIF", _String2=".") returned 1 [0138.092] wcscmp (_String1="AG00052_.GIF", _String2="..") returned 1 [0138.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58630 [0138.092] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.092] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.092] wcscat (in: _Dest=0x3d58630, _Source="AG00052_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" [0138.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0138.093] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a02200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a02200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0138.093] wcscmp (_String1="AG00057_.GIF", _String2=".") returned 1 [0138.093] wcscmp (_String1="AG00057_.GIF", _String2="..") returned 1 [0138.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d585a8 [0138.093] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.093] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.093] wcscat (in: _Dest=0x3d585a8, _Source="AG00057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" [0138.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0138.095] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe966e00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe966e00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0138.095] wcscmp (_String1="AG00090_.GIF", _String2=".") returned 1 [0138.095] wcscmp (_String1="AG00090_.GIF", _String2="..") returned 1 [0138.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee5a8 [0138.095] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.095] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.095] wcscat (in: _Dest=0x66ee5a8, _Source="AG00090_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" [0138.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0138.096] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc341400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc341400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0138.096] wcscmp (_String1="AG00092_.GIF", _String2=".") returned 1 [0138.096] wcscmp (_String1="AG00092_.GIF", _String2="..") returned 1 [0138.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0138.096] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.096] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.096] wcscat (in: _Dest=0x66ee520, _Source="AG00092_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" [0138.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0138.097] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42a5700, ftCreationTime.dwHighDateTime=0x1bd4fef, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe42a5700, ftLastWriteTime.dwHighDateTime=0x1bd4fef, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0138.097] wcscmp (_String1="AG00103_.GIF", _String2=".") returned 1 [0138.098] wcscmp (_String1="AG00103_.GIF", _String2="..") returned 1 [0138.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee498 [0138.098] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.098] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.098] wcscat (in: _Dest=0x66ee498, _Source="AG00103_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" [0138.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14 [0138.099] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884b8100, ftCreationTime.dwHighDateTime=0x1bd4c31, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x884b8100, ftLastWriteTime.dwHighDateTime=0x1bd4c31, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0138.099] wcscmp (_String1="AG00120_.GIF", _String2=".") returned 1 [0138.099] wcscmp (_String1="AG00120_.GIF", _String2="..") returned 1 [0138.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0138.099] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.100] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.100] wcscat (in: _Dest=0x66ef268, _Source="AG00120_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" [0138.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0138.101] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9870ce00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9870ce00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0138.101] wcscmp (_String1="AG00126_.GIF", _String2=".") returned 1 [0138.101] wcscmp (_String1="AG00126_.GIF", _String2="..") returned 1 [0138.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef1e0 [0138.102] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.102] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.102] wcscat (in: _Dest=0x66ef1e0, _Source="AG00126_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" [0138.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0138.103] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960e7400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x960e7400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0138.103] wcscmp (_String1="AG00129_.GIF", _String2=".") returned 1 [0138.103] wcscmp (_String1="AG00129_.GIF", _String2="..") returned 1 [0138.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef0d0 [0138.103] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.103] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.103] wcscat (in: _Dest=0x66ef0d0, _Source="AG00129_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" [0138.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0138.104] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dd4700, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94dd4700, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0138.104] wcscmp (_String1="AG00130_.GIF", _String2=".") returned 1 [0138.104] wcscmp (_String1="AG00130_.GIF", _String2="..") returned 1 [0138.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef048 [0138.104] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.104] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.104] wcscat (in: _Dest=0x66ef048, _Source="AG00130_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" [0138.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0138.105] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee76600, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ee76600, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0138.105] wcscmp (_String1="AG00135_.GIF", _String2=".") returned 1 [0138.105] wcscmp (_String1="AG00135_.GIF", _String2="..") returned 1 [0138.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0138.105] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.106] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.106] wcscat (in: _Dest=0x66ee7c8, _Source="AG00135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" [0138.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0138.107] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f18500, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88f18500, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0138.107] wcscmp (_String1="AG00139_.GIF", _String2=".") returned 1 [0138.107] wcscmp (_String1="AG00139_.GIF", _String2="..") returned 1 [0138.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0138.107] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.107] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.107] wcscat (in: _Dest=0x66ef510, _Source="AG00139_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" [0138.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0138.108] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fba400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82fba400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0138.108] wcscmp (_String1="AG00142_.GIF", _String2=".") returned 1 [0138.108] wcscmp (_String1="AG00142_.GIF", _String2="..") returned 1 [0138.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0138.108] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.108] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.108] wcscat (in: _Dest=0x66ef730, _Source="AG00142_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" [0138.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0138.577] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d6900, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e9d6900, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0138.577] wcscmp (_String1="AG00154_.GIF", _String2=".") returned 1 [0138.577] wcscmp (_String1="AG00154_.GIF", _String2="..") returned 1 [0138.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee740 [0138.577] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0138.577] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0138.577] wcscat (in: _Dest=0x66ee740, _Source="AG00154_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" [0141.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0141.215] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47765b00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47765b00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0141.216] wcscmp (_String1="AG00157_.GIF", _String2=".") returned 1 [0141.216] wcscmp (_String1="AG00157_.GIF", _String2="..") returned 1 [0141.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0141.216] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.216] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.216] wcscat (in: _Dest=0x3f25fb8, _Source="AG00157_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" [0141.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0141.217] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42b1a700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0141.217] wcscmp (_String1="AG00158_.GIF", _String2=".") returned 1 [0141.217] wcscmp (_String1="AG00158_.GIF", _String2="..") returned 1 [0141.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26150 [0141.218] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.218] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.218] wcscat (in: _Dest=0x3f26150, _Source="AG00158_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" [0141.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0141.219] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9ed700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f9ed700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0141.219] wcscmp (_String1="AG00160_.GIF", _String2=".") returned 1 [0141.220] wcscmp (_String1="AG00160_.GIF", _String2="..") returned 1 [0141.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0141.220] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.220] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.220] wcscat (in: _Dest=0x3f25f30, _Source="AG00160_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" [0141.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0141.221] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ada2300, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ada2300, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0141.221] wcscmp (_String1="AG00161_.GIF", _String2=".") returned 1 [0141.221] wcscmp (_String1="AG00161_.GIF", _String2="..") returned 1 [0141.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d88 [0141.221] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.221] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.221] wcscat (in: _Dest=0x3f26d88, _Source="AG00161_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" [0141.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0141.223] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb195e00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb195e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0141.223] wcscmp (_String1="AG00163_.GIF", _String2=".") returned 1 [0141.223] wcscmp (_String1="AG00163_.GIF", _String2="..") returned 1 [0141.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0141.223] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.224] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.224] wcscat (in: _Dest=0x3f26e10, _Source="AG00163_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" [0141.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0141.225] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2281e800, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2281e800, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0141.225] wcscmp (_String1="AG00164_.GIF", _String2=".") returned 1 [0141.225] wcscmp (_String1="AG00164_.GIF", _String2="..") returned 1 [0141.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0141.225] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.226] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.226] wcscat (in: _Dest=0x3f26d00, _Source="AG00164_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" [0141.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0141.227] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee6100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1eee6100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0141.228] wcscmp (_String1="AG00165_.GIF", _String2=".") returned 1 [0141.228] wcscmp (_String1="AG00165_.GIF", _String2="..") returned 1 [0141.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0141.228] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.228] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.228] wcscat (in: _Dest=0x3f26e98, _Source="AG00165_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" [0141.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0141.230] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16962600, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16962600, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0141.230] wcscmp (_String1="AG00167_.GIF", _String2=".") returned 1 [0141.230] wcscmp (_String1="AG00167_.GIF", _String2="..") returned 1 [0141.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0141.231] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.231] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.231] wcscat (in: _Dest=0x3f26f20, _Source="AG00167_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" [0141.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0141.233] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d17200, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d17200, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0141.233] wcscmp (_String1="AG00169_.GIF", _String2=".") returned 1 [0141.233] wcscmp (_String1="AG00169_.GIF", _String2="..") returned 1 [0141.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0141.234] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.234] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.234] wcscat (in: _Dest=0x3f26fa8, _Source="AG00169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" [0141.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0141.235] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb9100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb9100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0141.235] wcscmp (_String1="AG00170_.GIF", _String2=".") returned 1 [0141.235] wcscmp (_String1="AG00170_.GIF", _String2="..") returned 1 [0141.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0141.235] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.235] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.235] wcscat (in: _Dest=0x3f27030, _Source="AG00170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" [0141.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0141.237] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716dd00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x716dd00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0141.237] wcscmp (_String1="AG00171_.GIF", _String2=".") returned 1 [0141.237] wcscmp (_String1="AG00171_.GIF", _String2="..") returned 1 [0141.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0141.237] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.237] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.237] wcscat (in: _Dest=0x3f270b8, _Source="AG00171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" [0141.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0141.239] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf39c500, ftCreationTime.dwHighDateTime=0x1bd4ec5, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf39c500, ftLastWriteTime.dwHighDateTime=0x1bd4ec5, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0141.239] wcscmp (_String1="AG00172_.GIF", _String2=".") returned 1 [0141.239] wcscmp (_String1="AG00172_.GIF", _String2="..") returned 1 [0141.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27140 [0141.239] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.239] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.240] wcscat (in: _Dest=0x3f27140, _Source="AG00172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" [0141.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0141.241] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73821e00, ftCreationTime.dwHighDateTime=0x1bd4ebb, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73821e00, ftLastWriteTime.dwHighDateTime=0x1bd4ebb, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0141.241] wcscmp (_String1="AG00174_.GIF", _String2=".") returned 1 [0141.241] wcscmp (_String1="AG00174_.GIF", _String2="..") returned 1 [0141.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0141.242] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.242] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.242] wcscat (in: _Dest=0x3f271c8, _Source="AG00174_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" [0141.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0141.244] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914d8400, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x914d8400, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0141.244] wcscmp (_String1="AG00175_.GIF", _String2=".") returned 1 [0141.244] wcscmp (_String1="AG00175_.GIF", _String2="..") returned 1 [0141.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0141.244] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0141.244] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0141.245] wcscat (in: _Dest=0x3f27250, _Source="AG00175_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" [0141.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0141.247] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3719900, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3719900, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0143.069] wcscmp (_String1="AG00176_.GIF", _String2=".") returned 1 [0143.069] wcscmp (_String1="AG00176_.GIF", _String2="..") returned 1 [0143.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0143.069] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0143.069] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0143.069] wcscat (in: _Dest=0x66eef38, _Source="AG00176_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" [0148.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0148.232] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef940300, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef940300, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0148.232] wcscmp (_String1="AN00010_.WMF", _String2=".") returned 1 [0148.232] wcscmp (_String1="AN00010_.WMF", _String2="..") returned 1 [0148.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0368 [0148.232] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.232] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.232] wcscat (in: _Dest=0x66f0368, _Source="AN00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" [0148.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0148.234] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40512f00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40512f00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0148.234] wcscmp (_String1="AN00015_.WMF", _String2=".") returned 1 [0148.234] wcscmp (_String1="AN00015_.WMF", _String2="..") returned 1 [0148.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0148.234] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.234] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.234] wcscat (in: _Dest=0x66ee520, _Source="AN00015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" [0148.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0148.236] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b60b00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13b60b00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0148.236] wcscmp (_String1="AN00790_.WMF", _String2=".") returned 1 [0148.236] wcscmp (_String1="AN00790_.WMF", _String2="..") returned 1 [0148.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee6b8 [0148.236] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.237] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.237] wcscat (in: _Dest=0x66ee6b8, _Source="AN00790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" [0148.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0148.238] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f200200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f200200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0148.238] wcscmp (_String1="AN00853_.WMF", _String2=".") returned 1 [0148.238] wcscmp (_String1="AN00853_.WMF", _String2="..") returned 1 [0148.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0148.238] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.238] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.238] wcscat (in: _Dest=0x66f00c0, _Source="AN00853_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" [0148.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0148.240] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4300900, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4300900, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0148.240] wcscmp (_String1="AN00914_.WMF", _String2=".") returned 1 [0148.240] wcscmp (_String1="AN00914_.WMF", _String2="..") returned 1 [0148.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0148.240] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.240] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.240] wcscat (in: _Dest=0x66ef2f0, _Source="AN00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" [0148.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0148.241] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3deed500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3deed500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0148.241] wcscmp (_String1="AN00932_.WMF", _String2=".") returned 1 [0148.241] wcscmp (_String1="AN00932_.WMF", _String2="..") returned 1 [0148.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efe18 [0148.242] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.242] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.242] wcscat (in: _Dest=0x66efe18, _Source="AN00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" [0148.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0148.243] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683dd00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5683dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0148.243] wcscmp (_String1="AN00965_.WMF", _String2=".") returned 1 [0148.243] wcscmp (_String1="AN00965_.WMF", _String2="..") returned 1 [0148.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0148.243] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.243] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.243] wcscat (in: _Dest=0x66ef730, _Source="AN00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" [0148.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0148.245] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8ca00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b8ca00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0148.245] wcscmp (_String1="AN01039_.WMF", _String2=".") returned 1 [0148.245] wcscmp (_String1="AN01039_.WMF", _String2="..") returned 1 [0148.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0148.245] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.245] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.245] wcscat (in: _Dest=0x66ef510, _Source="AN01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" [0148.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0148.246] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71e0000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc71e0000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0148.246] wcscmp (_String1="AN01044_.WMF", _String2=".") returned 1 [0148.246] wcscmp (_String1="AN01044_.WMF", _String2="..") returned 1 [0148.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0148.247] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.247] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.247] wcscat (in: _Dest=0x66ee7c8, _Source="AN01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" [0148.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0148.248] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37328300, ftCreationTime.dwHighDateTime=0x1bd4b86, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37328300, ftLastWriteTime.dwHighDateTime=0x1bd4b86, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0148.248] wcscmp (_String1="AN01060_.WMF", _String2=".") returned 1 [0148.248] wcscmp (_String1="AN01060_.WMF", _String2="..") returned 1 [0148.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef0d0 [0148.248] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.248] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.248] wcscat (in: _Dest=0x66ef0d0, _Source="AN01060_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" [0148.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0148.249] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c124400, ftCreationTime.dwHighDateTime=0x1bd4b83, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c124400, ftLastWriteTime.dwHighDateTime=0x1bd4b83, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0148.249] wcscmp (_String1="AN01084_.WMF", _String2=".") returned 1 [0148.250] wcscmp (_String1="AN01084_.WMF", _String2="..") returned 1 [0148.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef1e0 [0148.250] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.250] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.250] wcscat (in: _Dest=0x66ef1e0, _Source="AN01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" [0148.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0148.251] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9754500, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9754500, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0148.251] wcscmp (_String1="AN01173_.WMF", _String2=".") returned 1 [0148.251] wcscmp (_String1="AN01173_.WMF", _String2="..") returned 1 [0148.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0148.251] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.251] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.251] wcscat (in: _Dest=0x66ef268, _Source="AN01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" [0148.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0148.253] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8441800, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8441800, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0148.253] wcscmp (_String1="AN01174_.WMF", _String2=".") returned 1 [0148.253] wcscmp (_String1="AN01174_.WMF", _String2="..") returned 1 [0148.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee498 [0148.253] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.253] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.253] wcscat (in: _Dest=0x66ee498, _Source="AN01174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" [0148.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0148.254] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f42f00, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21f42f00, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0148.254] wcscmp (_String1="AN01184_.WMF", _String2=".") returned 1 [0148.254] wcscmp (_String1="AN01184_.WMF", _String2="..") returned 1 [0148.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef048 [0148.255] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.255] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.255] wcscat (in: _Dest=0x66ef048, _Source="AN01184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" [0148.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0148.256] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ac700, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x186ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0148.256] wcscmp (_String1="AN01216_.WMF", _String2=".") returned 1 [0148.256] wcscmp (_String1="AN01216_.WMF", _String2="..") returned 1 [0148.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee850 [0148.256] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.256] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.256] wcscat (in: _Dest=0x66ee850, _Source="AN01216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" [0148.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0148.257] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d74000, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14d74000, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0148.258] wcscmp (_String1="AN01218_.WMF", _String2=".") returned 1 [0148.258] wcscmp (_String1="AN01218_.WMF", _String2="..") returned 1 [0148.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeaf8 [0148.258] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.258] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.258] wcscat (in: _Dest=0x66eeaf8, _Source="AN01218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" [0148.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0148.259] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf01800, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdf01800, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0148.259] wcscmp (_String1="AN01251_.WMF", _String2=".") returned 1 [0148.259] wcscmp (_String1="AN01251_.WMF", _String2="..") returned 1 [0148.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeb80 [0148.259] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.259] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.259] wcscat (in: _Dest=0x66eeb80, _Source="AN01251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" [0148.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0148.261] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596bd700, ftCreationTime.dwHighDateTime=0x1bd4b6d, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x596bd700, ftLastWriteTime.dwHighDateTime=0x1bd4b6d, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0148.261] wcscmp (_String1="AN01545_.WMF", _String2=".") returned 1 [0148.261] wcscmp (_String1="AN01545_.WMF", _String2="..") returned 1 [0148.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec08 [0148.261] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.261] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.261] wcscat (in: _Dest=0x66eec08, _Source="AN01545_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" [0148.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0148.262] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78af3800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78af3800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0148.262] wcscmp (_String1="AN02122_.WMF", _String2=".") returned 1 [0148.262] wcscmp (_String1="AN02122_.WMF", _String2="..") returned 1 [0148.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eed18 [0148.262] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.262] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.262] wcscat (in: _Dest=0x66eed18, _Source="AN02122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" [0148.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0148.264] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63fe9d00, ftCreationTime.dwHighDateTime=0x1bd4c4f, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63fe9d00, ftLastWriteTime.dwHighDateTime=0x1bd4c4f, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0148.264] wcscmp (_String1="AN02559_.WMF", _String2=".") returned 1 [0148.264] wcscmp (_String1="AN02559_.WMF", _String2="..") returned 1 [0148.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeda0 [0148.264] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.264] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.264] wcscat (in: _Dest=0x66eeda0, _Source="AN02559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" [0148.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0148.265] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a0a300, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a0a300, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0148.265] wcscmp (_String1="AN02724_.WMF", _String2=".") returned 1 [0148.265] wcscmp (_String1="AN02724_.WMF", _String2="..") returned 1 [0148.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eee28 [0148.265] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.265] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.265] wcscat (in: _Dest=0x66eee28, _Source="AN02724_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" [0148.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0148.267] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc9100, ftCreationTime.dwHighDateTime=0x1bd4c7d, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1bc9100, ftLastWriteTime.dwHighDateTime=0x1bd4c7d, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0148.267] wcscmp (_String1="AN03500_.WMF", _String2=".") returned 1 [0148.267] wcscmp (_String1="AN03500_.WMF", _String2="..") returned 1 [0148.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0148.267] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.267] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.267] wcscat (in: _Dest=0x66eeeb0, _Source="AN03500_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" [0148.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0148.268] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0148.268] wcscmp (_String1="AN04108_.WMF", _String2=".") returned 1 [0148.268] wcscmp (_String1="AN04108_.WMF", _String2="..") returned 1 [0148.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee9e8 [0148.269] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.269] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.269] wcscat (in: _Dest=0x66ee9e8, _Source="AN04108_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" [0148.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0148.498] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0148.498] wcscmp (_String1="AN04117_.WMF", _String2=".") returned 1 [0148.498] wcscmp (_String1="AN04117_.WMF", _String2="..") returned 1 [0148.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0148.498] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0148.498] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0148.498] wcscat (in: _Dest=0x66eef38, _Source="AN04117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" [0151.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0151.256] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0151.256] wcscmp (_String1="AN04134_.WMF", _String2=".") returned 1 [0151.256] wcscmp (_String1="AN04134_.WMF", _String2="..") returned 1 [0151.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0151.256] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.256] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.256] wcscat (in: _Dest=0x3f26c78, _Source="AN04134_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" [0151.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0151.257] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0151.257] wcscmp (_String1="AN04174_.WMF", _String2=".") returned 1 [0151.258] wcscmp (_String1="AN04174_.WMF", _String2="..") returned 1 [0151.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0151.258] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.258] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.258] wcscat (in: _Dest=0x3f25fb8, _Source="AN04174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" [0151.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0151.259] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0151.259] wcscmp (_String1="AN04191_.WMF", _String2=".") returned 1 [0151.259] wcscmp (_String1="AN04191_.WMF", _String2="..") returned 1 [0151.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27470 [0151.259] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.259] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.259] wcscat (in: _Dest=0x3f27470, _Source="AN04191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" [0151.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0151.260] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0151.260] wcscmp (_String1="AN04195_.WMF", _String2=".") returned 1 [0151.260] wcscmp (_String1="AN04195_.WMF", _String2="..") returned 1 [0151.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0151.260] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.260] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.260] wcscat (in: _Dest=0x3f260c8, _Source="AN04195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" [0151.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0151.261] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0151.262] wcscmp (_String1="AN04196_.WMF", _String2=".") returned 1 [0151.262] wcscmp (_String1="AN04196_.WMF", _String2="..") returned 1 [0151.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0151.262] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.262] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.262] wcscat (in: _Dest=0x3f27608, _Source="AN04196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" [0151.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0151.263] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0151.263] wcscmp (_String1="AN04206_.WMF", _String2=".") returned 1 [0151.263] wcscmp (_String1="AN04206_.WMF", _String2="..") returned 1 [0151.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0151.263] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.263] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.263] wcscat (in: _Dest=0x3f27580, _Source="AN04206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" [0151.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0151.264] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0151.264] wcscmp (_String1="AN04225_.WMF", _String2=".") returned 1 [0151.264] wcscmp (_String1="AN04225_.WMF", _String2="..") returned 1 [0151.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27690 [0151.264] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.265] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.265] wcscat (in: _Dest=0x3f27690, _Source="AN04225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" [0151.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0151.266] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0151.266] wcscmp (_String1="AN04235_.WMF", _String2=".") returned 1 [0151.266] wcscmp (_String1="AN04235_.WMF", _String2="..") returned 1 [0151.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27718 [0151.266] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.266] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.266] wcscat (in: _Dest=0x3f27718, _Source="AN04235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" [0151.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0151.267] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0151.267] wcscmp (_String1="AN04267_.WMF", _String2=".") returned 1 [0151.267] wcscmp (_String1="AN04267_.WMF", _String2="..") returned 1 [0151.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f277a0 [0151.267] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.267] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.267] wcscat (in: _Dest=0x3f277a0, _Source="AN04267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" [0151.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0151.268] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0151.270] wcscmp (_String1="AN04269_.WMF", _String2=".") returned 1 [0151.270] wcscmp (_String1="AN04269_.WMF", _String2="..") returned 1 [0151.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27828 [0151.270] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0151.270] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0151.270] wcscat (in: _Dest=0x3f27828, _Source="AN04269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" [0159.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0159.863] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0159.863] wcscmp (_String1="AN04323_.WMF", _String2=".") returned 1 [0159.863] wcscmp (_String1="AN04323_.WMF", _String2="..") returned 1 [0159.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0159.863] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.863] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.863] wcscat (in: _Dest=0x66eeeb0, _Source="AN04323_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" [0159.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0159.865] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0159.865] wcscmp (_String1="AN04326_.WMF", _String2=".") returned 1 [0159.865] wcscmp (_String1="AN04326_.WMF", _String2="..") returned 1 [0159.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0159.865] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.865] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.865] wcscat (in: _Dest=0x66ef400, _Source="AN04326_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" [0159.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0159.867] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0159.867] wcscmp (_String1="AN04332_.WMF", _String2=".") returned 1 [0159.867] wcscmp (_String1="AN04332_.WMF", _String2="..") returned 1 [0159.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0159.867] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.867] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.867] wcscat (in: _Dest=0x3f26c78, _Source="AN04332_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" [0159.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0159.869] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0159.869] wcscmp (_String1="AN04355_.WMF", _String2=".") returned 1 [0159.869] wcscmp (_String1="AN04355_.WMF", _String2="..") returned 1 [0159.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0159.869] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.869] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.869] wcscat (in: _Dest=0x3f267b0, _Source="AN04355_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" [0159.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0159.870] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0159.870] wcscmp (_String1="AN04369_.WMF", _String2=".") returned 1 [0159.871] wcscmp (_String1="AN04369_.WMF", _String2="..") returned 1 [0159.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0159.871] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.871] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.871] wcscat (in: _Dest=0x3f26370, _Source="AN04369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" [0159.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0159.872] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0159.872] wcscmp (_String1="AN04384_.WMF", _String2=".") returned 1 [0159.872] wcscmp (_String1="AN04384_.WMF", _String2="..") returned 1 [0159.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0159.872] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.872] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.872] wcscat (in: _Dest=0x3061f70, _Source="AN04384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" [0159.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0159.874] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0159.874] wcscmp (_String1="AN04385_.WMF", _String2=".") returned 1 [0159.874] wcscmp (_String1="AN04385_.WMF", _String2="..") returned 1 [0159.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0159.874] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.874] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.874] wcscat (in: _Dest=0x682bce8, _Source="AN04385_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" [0159.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0159.875] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f8f400, ftCreationTime.dwHighDateTime=0x1bd4c7a, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64f8f400, ftLastWriteTime.dwHighDateTime=0x1bd4c7a, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0159.875] wcscmp (_String1="BABY_01.MID", _String2=".") returned 1 [0159.875] wcscmp (_String1="BABY_01.MID", _String2="..") returned 1 [0159.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bd70 [0159.875] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.875] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.875] wcscat (in: _Dest=0x682bd70, _Source="BABY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" [0159.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0159.877] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0159.877] wcscmp (_String1="BD00116_.WMF", _String2=".") returned 1 [0159.877] wcscmp (_String1="BD00116_.WMF", _String2="..") returned 1 [0159.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bdf8 [0159.877] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.877] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.877] wcscat (in: _Dest=0x682bdf8, _Source="BD00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" [0159.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0159.878] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8679b00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8679b00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0159.878] wcscmp (_String1="BD00141_.WMF", _String2=".") returned 1 [0159.878] wcscmp (_String1="BD00141_.WMF", _String2="..") returned 1 [0159.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682be80 [0159.879] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.879] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.879] wcscat (in: _Dest=0x682be80, _Source="BD00141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" [0159.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0159.880] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0159.880] wcscmp (_String1="BD00146_.WMF", _String2=".") returned 1 [0159.880] wcscmp (_String1="BD00146_.WMF", _String2="..") returned 1 [0159.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0159.880] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.880] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.880] wcscat (in: _Dest=0x682bf08, _Source="BD00146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" [0159.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0159.881] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9706af00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9706af00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0159.881] wcscmp (_String1="BD00155_.WMF", _String2=".") returned 1 [0159.881] wcscmp (_String1="BD00155_.WMF", _String2="..") returned 1 [0159.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf90 [0159.881] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.881] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.881] wcscat (in: _Dest=0x682bf90, _Source="BD00155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" [0159.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0159.882] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdfa100, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fdfa100, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0159.882] wcscmp (_String1="BD00160_.WMF", _String2=".") returned 1 [0159.882] wcscmp (_String1="BD00160_.WMF", _String2="..") returned 1 [0159.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c018 [0159.883] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.883] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.883] wcscat (in: _Dest=0x682c018, _Source="BD00160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" [0159.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0159.884] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60309900, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60309900, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0159.884] wcscmp (_String1="BD00173_.WMF", _String2=".") returned 1 [0159.884] wcscmp (_String1="BD00173_.WMF", _String2="..") returned 1 [0159.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0159.884] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.884] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.884] wcscat (in: _Dest=0x682c0a0, _Source="BD00173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" [0159.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0159.885] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0159.885] wcscmp (_String1="BD05119_.WMF", _String2=".") returned 1 [0159.886] wcscmp (_String1="BD05119_.WMF", _String2="..") returned 1 [0159.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0159.886] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.886] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.886] wcscat (in: _Dest=0x682c128, _Source="BD05119_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" [0159.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0159.887] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0159.887] wcscmp (_String1="BD06102_.WMF", _String2=".") returned 1 [0159.887] wcscmp (_String1="BD06102_.WMF", _String2="..") returned 1 [0159.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0159.887] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.887] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.887] wcscat (in: _Dest=0x682c1b0, _Source="BD06102_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" [0159.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0159.888] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0159.888] wcscmp (_String1="BD06200_.WMF", _String2=".") returned 1 [0159.888] wcscmp (_String1="BD06200_.WMF", _String2="..") returned 1 [0159.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0159.889] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.889] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.889] wcscat (in: _Dest=0x682c238, _Source="BD06200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" [0159.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0159.890] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0159.890] wcscmp (_String1="BD07761_.WMF", _String2=".") returned 1 [0159.890] wcscmp (_String1="BD07761_.WMF", _String2="..") returned 1 [0159.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c2c0 [0159.890] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.890] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.890] wcscat (in: _Dest=0x682c2c0, _Source="BD07761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" [0159.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0159.891] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0159.891] wcscmp (_String1="BD07804_.WMF", _String2=".") returned 1 [0159.891] wcscmp (_String1="BD07804_.WMF", _String2="..") returned 1 [0159.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0159.892] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.892] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.892] wcscat (in: _Dest=0x682c348, _Source="BD07804_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" [0159.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0159.893] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0159.893] wcscmp (_String1="BD07831_.WMF", _String2=".") returned 1 [0159.893] wcscmp (_String1="BD07831_.WMF", _String2="..") returned 1 [0159.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c3d0 [0159.894] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.894] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.894] wcscat (in: _Dest=0x682c3d0, _Source="BD07831_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" [0159.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0159.895] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0159.895] wcscmp (_String1="BD08758_.WMF", _String2=".") returned 1 [0159.895] wcscmp (_String1="BD08758_.WMF", _String2="..") returned 1 [0159.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0159.895] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.895] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.895] wcscat (in: _Dest=0x682c458, _Source="BD08758_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" [0159.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0159.896] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0159.896] wcscmp (_String1="BD08773_.WMF", _String2=".") returned 1 [0159.896] wcscmp (_String1="BD08773_.WMF", _String2="..") returned 1 [0159.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c4e0 [0159.897] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.897] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.897] wcscat (in: _Dest=0x682c4e0, _Source="BD08773_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" [0159.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0159.898] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0159.898] wcscmp (_String1="BD08808_.WMF", _String2=".") returned 1 [0159.898] wcscmp (_String1="BD08808_.WMF", _String2="..") returned 1 [0159.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0159.898] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.898] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.898] wcscat (in: _Dest=0x682c568, _Source="BD08808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" [0159.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0159.899] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0159.899] wcscmp (_String1="BD08868_.WMF", _String2=".") returned 1 [0159.899] wcscmp (_String1="BD08868_.WMF", _String2="..") returned 1 [0159.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c5f0 [0159.899] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.900] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.900] wcscat (in: _Dest=0x682c5f0, _Source="BD08868_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" [0159.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0159.901] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0159.901] wcscmp (_String1="BD09031_.WMF", _String2=".") returned 1 [0159.901] wcscmp (_String1="BD09031_.WMF", _String2="..") returned 1 [0159.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c678 [0159.901] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0159.901] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0159.901] wcscat (in: _Dest=0x682c678, _Source="BD09031_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" [0159.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0160.733] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0160.733] wcscmp (_String1="BD09194_.WMF", _String2=".") returned 1 [0160.734] wcscmp (_String1="BD09194_.WMF", _String2="..") returned 1 [0160.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0160.734] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0160.734] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0160.734] wcscat (in: _Dest=0x682c788, _Source="BD09194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" [0161.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0161.366] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0161.367] wcscmp (_String1="BD09662_.WMF", _String2=".") returned 1 [0161.367] wcscmp (_String1="BD09662_.WMF", _String2="..") returned 1 [0161.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee960 [0161.367] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.367] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.367] wcscat (in: _Dest=0x66ee960, _Source="BD09662_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" [0161.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0161.368] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0161.368] wcscmp (_String1="BD09664_.WMF", _String2=".") returned 1 [0161.369] wcscmp (_String1="BD09664_.WMF", _String2="..") returned 1 [0161.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c898 [0161.369] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.369] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.369] wcscat (in: _Dest=0x682c898, _Source="BD09664_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" [0161.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0161.370] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16b3a00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x85e1b930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe16b3a00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0161.370] wcscmp (_String1="BD10890_.GIF", _String2=".") returned 1 [0161.370] wcscmp (_String1="BD10890_.GIF", _String2="..") returned 1 [0161.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c920 [0161.370] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.370] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.370] wcscat (in: _Dest=0x682c920, _Source="BD10890_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" [0161.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0161.371] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a4fb00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x76a6acf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a4fb00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0161.372] wcscmp (_String1="BD10972_.GIF", _String2=".") returned 1 [0161.372] wcscmp (_String1="BD10972_.GIF", _String2="..") returned 1 [0161.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0161.372] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.372] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.372] wcscat (in: _Dest=0x682c9a8, _Source="BD10972_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" [0161.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0161.373] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8a5800, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b8a5800, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0161.373] wcscmp (_String1="BD19563_.GIF", _String2=".") returned 1 [0161.373] wcscmp (_String1="BD19563_.GIF", _String2="..") returned 1 [0161.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ca30 [0161.373] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.373] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.373] wcscat (in: _Dest=0x682ca30, _Source="BD19563_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" [0161.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0161.374] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a296c00, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a296c00, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0161.374] wcscmp (_String1="BD19582_.GIF", _String2=".") returned 1 [0161.374] wcscmp (_String1="BD19582_.GIF", _String2="..") returned 1 [0161.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0161.374] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.374] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.374] wcscat (in: _Dest=0x682cab8, _Source="BD19582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" [0161.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0161.375] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fbac00, ftCreationTime.dwHighDateTime=0x1bd4dbf, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59fbac00, ftLastWriteTime.dwHighDateTime=0x1bd4dbf, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0161.375] wcscmp (_String1="BD19695_.WMF", _String2=".") returned 1 [0161.376] wcscmp (_String1="BD19695_.WMF", _String2="..") returned 1 [0161.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cb40 [0161.376] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0161.376] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0161.376] wcscat (in: _Dest=0x682cb40, _Source="BD19695_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" [0161.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0161.377] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83680800, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x83680800, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0162.364] wcscmp (_String1="BD19827_.WMF", _String2=".") returned 1 [0162.364] wcscmp (_String1="BD19827_.WMF", _String2="..") returned 1 [0162.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d338 [0162.364] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.364] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.364] wcscat (in: _Dest=0x682d338, _Source="BD19827_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" [0162.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0162.715] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8236db00, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8236db00, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0162.715] wcscmp (_String1="BD19828_.WMF", _String2=".") returned 1 [0162.716] wcscmp (_String1="BD19828_.WMF", _String2="..") returned 1 [0162.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0162.716] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.716] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.716] wcscat (in: _Dest=0x66ef730, _Source="BD19828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" [0162.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0162.717] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac30200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ac30200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0162.717] wcscmp (_String1="BD19986_.WMF", _String2=".") returned 1 [0162.717] wcscmp (_String1="BD19986_.WMF", _String2="..") returned 1 [0162.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0148 [0162.717] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.717] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.717] wcscat (in: _Dest=0x66f0148, _Source="BD19986_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" [0162.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0162.718] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f7b00, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x772f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0162.718] wcscmp (_String1="BD19988_.WMF", _String2=".") returned 1 [0162.718] wcscmp (_String1="BD19988_.WMF", _String2="..") returned 1 [0162.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0162.718] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.718] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.718] wcscat (in: _Dest=0x66effb0, _Source="BD19988_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" [0162.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0162.719] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549d6200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x549d6200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0162.719] wcscmp (_String1="BD20013_.WMF", _String2=".") returned 1 [0162.719] wcscmp (_String1="BD20013_.WMF", _String2="..") returned 1 [0162.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0162.720] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.720] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.720] wcscat (in: _Dest=0x66ee7c8, _Source="BD20013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" [0162.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0162.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20495c00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20495c00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0162.721] wcscmp (_String1="BL00008_.WMF", _String2=".") returned 1 [0162.721] wcscmp (_String1="BL00008_.WMF", _String2="..") returned 1 [0162.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f03f0 [0162.721] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.721] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.721] wcscat (in: _Dest=0x66f03f0, _Source="BL00008_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" [0162.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0162.722] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a537b00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a537b00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0162.722] wcscmp (_String1="BL00012_.WMF", _String2=".") returned 1 [0162.722] wcscmp (_String1="BL00012_.WMF", _String2="..") returned 1 [0162.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efea0 [0162.722] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.722] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.722] wcscat (in: _Dest=0x66efea0, _Source="BL00012_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" [0162.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0162.723] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fe6800, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76fe6800, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0162.723] wcscmp (_String1="BL00045_.WMF", _String2=".") returned 1 [0162.723] wcscmp (_String1="BL00045_.WMF", _String2="..") returned 1 [0162.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d3c0 [0162.723] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.724] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.724] wcscat (in: _Dest=0x682d3c0, _Source="BL00045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" [0162.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0162.724] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f75dd00, ftCreationTime.dwHighDateTime=0x1bd4b8c, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f75dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b8c, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0162.725] wcscmp (_String1="BL00098_.WMF", _String2=".") returned 1 [0162.725] wcscmp (_String1="BL00098_.WMF", _String2="..") returned 1 [0162.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d448 [0162.725] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.725] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.725] wcscat (in: _Dest=0x682d448, _Source="BL00098_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" [0162.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0162.726] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbf1600, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dbf1600, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0162.726] wcscmp (_String1="BL00105_.WMF", _String2=".") returned 1 [0162.726] wcscmp (_String1="BL00105_.WMF", _String2="..") returned 1 [0162.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d4d0 [0162.726] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.726] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.726] wcscat (in: _Dest=0x682d4d0, _Source="BL00105_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" [0162.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0162.727] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2443c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2443c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0162.727] wcscmp (_String1="BL00122_.WMF", _String2=".") returned 1 [0162.727] wcscmp (_String1="BL00122_.WMF", _String2="..") returned 1 [0162.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d558 [0162.727] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.727] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.727] wcscat (in: _Dest=0x682d558, _Source="BL00122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" [0162.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0162.728] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf316c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf316c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0162.728] wcscmp (_String1="BL00130_.WMF", _String2=".") returned 1 [0162.728] wcscmp (_String1="BL00130_.WMF", _String2="..") returned 1 [0162.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d5e0 [0162.728] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.728] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.728] wcscat (in: _Dest=0x682d5e0, _Source="BL00130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" [0162.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0162.729] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fa6200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18fa6200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0162.729] wcscmp (_String1="BL00148_.WMF", _String2=".") returned 1 [0162.729] wcscmp (_String1="BL00148_.WMF", _String2="..") returned 1 [0162.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d668 [0162.729] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.729] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.729] wcscat (in: _Dest=0x682d668, _Source="BL00148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" [0162.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0162.731] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c93500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c93500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0162.731] wcscmp (_String1="BL00152_.WMF", _String2=".") returned 1 [0162.731] wcscmp (_String1="BL00152_.WMF", _String2="..") returned 1 [0162.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d6f0 [0162.731] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.731] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.731] wcscat (in: _Dest=0x682d6f0, _Source="BL00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" [0162.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0162.732] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adc0500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2adc0500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0162.732] wcscmp (_String1="BL00194_.WMF", _String2=".") returned 1 [0162.732] wcscmp (_String1="BL00194_.WMF", _String2="..") returned 1 [0162.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d778 [0162.732] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.732] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.732] wcscat (in: _Dest=0x682d778, _Source="BL00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" [0162.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0162.733] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16980800, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16980800, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0162.733] wcscmp (_String1="BL00195_.WMF", _String2=".") returned 1 [0162.733] wcscmp (_String1="BL00195_.WMF", _String2="..") returned 1 [0162.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d800 [0162.733] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.733] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.733] wcscat (in: _Dest=0x682d800, _Source="BL00195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" [0162.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0162.734] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16bdf500, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16bdf500, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0162.734] wcscmp (_String1="BL00234_.WMF", _String2=".") returned 1 [0162.734] wcscmp (_String1="BL00234_.WMF", _String2="..") returned 1 [0162.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0162.734] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.734] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.734] wcscat (in: _Dest=0x682d888, _Source="BL00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" [0162.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0162.735] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e786d00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e786d00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0162.735] wcscmp (_String1="BL00242_.WMF", _String2=".") returned 1 [0162.735] wcscmp (_String1="BL00242_.WMF", _String2="..") returned 1 [0162.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d910 [0162.735] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.736] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.736] wcscat (in: _Dest=0x682d910, _Source="BL00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" [0162.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0162.736] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a472300, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a472300, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0162.736] wcscmp (_String1="BL00247_.WMF", _String2=".") returned 1 [0162.736] wcscmp (_String1="BL00247_.WMF", _String2="..") returned 1 [0162.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0162.737] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.737] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.737] wcscat (in: _Dest=0x682d998, _Source="BL00247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" [0162.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0162.738] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeecb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9eeecb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0162.738] wcscmp (_String1="BL00248_.WMF", _String2=".") returned 1 [0162.738] wcscmp (_String1="BL00248_.WMF", _String2="..") returned 1 [0162.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682da20 [0162.738] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.738] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.738] wcscat (in: _Dest=0x682da20, _Source="BL00248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" [0162.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0162.739] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09c8200, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc09c8200, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0162.739] wcscmp (_String1="BL00252_.WMF", _String2=".") returned 1 [0162.739] wcscmp (_String1="BL00252_.WMF", _String2="..") returned 1 [0162.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682daa8 [0162.739] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.739] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.739] wcscat (in: _Dest=0x682daa8, _Source="BL00252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" [0162.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0162.741] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d35400, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d35400, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0162.741] wcscmp (_String1="BL00254_.WMF", _String2=".") returned 1 [0162.741] wcscmp (_String1="BL00254_.WMF", _String2="..") returned 1 [0162.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0162.741] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.741] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.741] wcscat (in: _Dest=0x682db30, _Source="BL00254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" [0162.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0162.742] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159f00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x159f00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0162.742] wcscmp (_String1="BL00261_.WMF", _String2=".") returned 1 [0162.742] wcscmp (_String1="BL00261_.WMF", _String2="..") returned 1 [0162.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dbb8 [0162.742] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.742] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.742] wcscat (in: _Dest=0x682dbb8, _Source="BL00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" [0162.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0162.743] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ee9100, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8ee9100, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0162.743] wcscmp (_String1="BL00262_.WMF", _String2=".") returned 1 [0162.743] wcscmp (_String1="BL00262_.WMF", _String2="..") returned 1 [0162.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0162.743] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.743] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.743] wcscat (in: _Dest=0x682dc40, _Source="BL00262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" [0162.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0162.744] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff4c00, ftCreationTime.dwHighDateTime=0x1bd4b77, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fff4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b77, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0162.744] wcscmp (_String1="BL00265_.WMF", _String2=".") returned 1 [0162.744] wcscmp (_String1="BL00265_.WMF", _String2="..") returned 1 [0162.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27ad0 [0162.744] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.744] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.744] wcscat (in: _Dest=0x3f27ad0, _Source="BL00265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" [0162.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0162.745] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875a1700, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x875a1700, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0162.745] wcscmp (_String1="BL00267_.WMF", _String2=".") returned 1 [0162.746] wcscmp (_String1="BL00267_.WMF", _String2="..") returned 1 [0162.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27e00 [0162.746] wcscpy (in: _Dest=0x3f27e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.746] wcscat (in: _Dest=0x3f27e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.746] wcscat (in: _Dest=0x3f27e00, _Source="BL00267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" [0162.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0162.747] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53173400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53173400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0162.747] wcscmp (_String1="BL00269_.WMF", _String2=".") returned 1 [0162.747] wcscmp (_String1="BL00269_.WMF", _String2="..") returned 1 [0162.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27d78 [0162.747] wcscpy (in: _Dest=0x3f27d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.747] wcscat (in: _Dest=0x3f27d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.747] wcscat (in: _Dest=0x3f27d78, _Source="BL00269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" [0162.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0162.748] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23e3f00, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe23e3f00, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0162.748] wcscmp (_String1="BL00270_.WMF", _String2=".") returned 1 [0162.748] wcscmp (_String1="BL00270_.WMF", _String2="..") returned 1 [0162.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27cf0 [0162.748] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0162.748] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0162.748] wcscat (in: _Dest=0x3f27cf0, _Source="BL00270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" [0162.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0163.382] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925f7800, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x925f7800, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0163.382] wcscmp (_String1="BL00273_.WMF", _String2=".") returned 1 [0163.382] wcscmp (_String1="BL00273_.WMF", _String2="..") returned 1 [0163.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27a48 [0163.382] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.382] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.382] wcscat (in: _Dest=0x3f27a48, _Source="BL00273_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" [0166.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0166.638] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1ce900, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f1ce900, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0166.638] wcscmp (_String1="BL00274_.WMF", _String2=".") returned 1 [0166.638] wcscmp (_String1="BL00274_.WMF", _String2="..") returned 1 [0166.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0166.638] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.638] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.638] wcscat (in: _Dest=0x3f27030, _Source="BL00274_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" [0166.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0166.639] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41657900, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41657900, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0166.639] wcscmp (_String1="BL00296_.WMF", _String2=".") returned 1 [0166.639] wcscmp (_String1="BL00296_.WMF", _String2="..") returned 1 [0166.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0166.639] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.639] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.639] wcscat (in: _Dest=0x3f263f8, _Source="BL00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" [0166.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0166.640] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74881800, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74881800, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0166.640] wcscmp (_String1="BL00390_.WMF", _String2=".") returned 1 [0166.640] wcscmp (_String1="BL00390_.WMF", _String2="..") returned 1 [0166.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0166.640] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.640] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.640] wcscat (in: _Dest=0x3f26480, _Source="BL00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" [0166.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0166.641] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7225be00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7225be00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0166.642] wcscmp (_String1="BL00392_.WMF", _String2=".") returned 1 [0166.642] wcscmp (_String1="BL00392_.WMF", _String2="..") returned 1 [0166.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0166.642] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.642] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.642] wcscat (in: _Dest=0x3f26728, _Source="BL00392_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" [0166.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0166.643] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b924900, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b924900, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0166.643] wcscmp (_String1="BL00524_.WMF", _String2=".") returned 1 [0166.643] wcscmp (_String1="BL00524_.WMF", _String2="..") returned 1 [0166.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0166.643] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.643] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.643] wcscat (in: _Dest=0x3f26618, _Source="BL00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" [0166.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0166.644] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a611c00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a611c00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0168.135] wcscmp (_String1="BL00525_.WMF", _String2=".") returned 1 [0168.135] wcscmp (_String1="BL00525_.WMF", _String2="..") returned 1 [0168.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0168.136] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0168.136] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0168.136] wcscat (in: _Dest=0x682d228, _Source="BL00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" [0172.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20 [0172.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0172.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.831] GetLastError () returned 0x5 [0172.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0172.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 [0172.831] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692fef00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x692fef00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0172.832] wcscmp (_String1="BL00526_.WMF", _String2=".") returned 1 [0172.832] wcscmp (_String1="BL00526_.WMF", _String2="..") returned 1 [0172.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0172.832] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.832] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.832] wcscat (in: _Dest=0x682d228, _Source="BL00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" [0172.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20 [0173.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0173.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.613] GetLastError () returned 0x5 [0173.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0173.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 [0173.613] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb631c500, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb631c500, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0173.613] wcscmp (_String1="BL00648_.WMF", _String2=".") returned 1 [0173.613] wcscmp (_String1="BL00648_.WMF", _String2="..") returned 1 [0173.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0173.613] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0173.613] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0173.613] wcscat (in: _Dest=0x682d228, _Source="BL00648_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" [0179.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0179.315] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d9a700, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80d9a700, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0179.315] wcscmp (_String1="BL00921_.WMF", _String2=".") returned 1 [0179.315] wcscmp (_String1="BL00921_.WMF", _String2="..") returned 1 [0179.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eff28 [0179.315] wcscpy (in: _Dest=0x66eff28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.315] wcscat (in: _Dest=0x66eff28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.315] wcscat (in: _Dest=0x66eff28, _Source="BL00921_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" [0179.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eff28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0179.317] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b80900, ftCreationTime.dwHighDateTime=0x1bd4c5c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b80900, ftLastWriteTime.dwHighDateTime=0x1bd4c5c, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0179.317] wcscmp (_String1="BL00923_.WMF", _String2=".") returned 1 [0179.317] wcscmp (_String1="BL00923_.WMF", _String2="..") returned 1 [0179.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0179.317] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.317] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.317] wcscat (in: _Dest=0x66ef950, _Source="BL00923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" [0179.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0179.318] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0179.318] wcscmp (_String1="BL00932_.WMF", _String2=".") returned 1 [0179.318] wcscmp (_String1="BL00932_.WMF", _String2="..") returned 1 [0179.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0179.318] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.318] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.318] wcscat (in: _Dest=0x66ef2f0, _Source="BL00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" [0179.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0179.319] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d094d00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d094d00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0179.319] wcscmp (_String1="BL00985_.WMF", _String2=".") returned 1 [0179.319] wcscmp (_String1="BL00985_.WMF", _String2="..") returned 1 [0179.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efe18 [0179.319] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.319] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.319] wcscat (in: _Dest=0x66efe18, _Source="BL00985_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" [0179.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0179.320] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0179.320] wcscmp (_String1="BOAT.WMF", _String2=".") returned 1 [0179.320] wcscmp (_String1="BOAT.WMF", _String2="..") returned 1 [0179.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e102f0 [0179.320] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.320] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.320] wcscat (in: _Dest=0x3e102f0, _Source="BOAT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" [0179.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0179.321] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0179.321] wcscmp (_String1="BOATINST.WMF", _String2=".") returned 1 [0179.321] wcscmp (_String1="BOATINST.WMF", _String2="..") returned 1 [0179.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0258 [0179.321] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.321] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.321] wcscat (in: _Dest=0x66f0258, _Source="BOATINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" [0179.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0179.322] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc98f800, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc98f800, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0179.322] wcscmp (_String1="BS00076_.WMF", _String2=".") returned 1 [0179.322] wcscmp (_String1="BS00076_.WMF", _String2="..") returned 1 [0179.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efc80 [0179.323] wcscpy (in: _Dest=0x66efc80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.323] wcscat (in: _Dest=0x66efc80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.323] wcscat (in: _Dest=0x66efc80, _Source="BS00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" [0179.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efc80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0179.323] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0179.324] wcscmp (_String1="BS00078_.WMF", _String2=".") returned 1 [0179.324] wcscmp (_String1="BS00078_.WMF", _String2="..") returned 1 [0179.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee6b8 [0179.324] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.324] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.324] wcscat (in: _Dest=0x66ee6b8, _Source="BS00078_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" [0179.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0179.325] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8caa300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8caa300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0179.325] wcscmp (_String1="BS00092_.WMF", _String2=".") returned 1 [0179.325] wcscmp (_String1="BS00092_.WMF", _String2="..") returned 1 [0179.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0179.325] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.325] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.325] wcscat (in: _Dest=0x66ef510, _Source="BS00092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" [0179.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0179.326] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5371c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5371c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0179.326] wcscmp (_String1="BS00100_.WMF", _String2=".") returned 1 [0179.326] wcscmp (_String1="BS00100_.WMF", _String2="..") returned 1 [0179.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee5a8 [0179.326] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.326] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.326] wcscat (in: _Dest=0x66ee5a8, _Source="BS00100_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" [0179.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0179.327] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a39500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a39500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0179.327] wcscmp (_String1="BS00135_.WMF", _String2=".") returned 1 [0179.327] wcscmp (_String1="BS00135_.WMF", _String2="..") returned 1 [0179.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0179.327] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.327] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.327] wcscat (in: _Dest=0x66eeeb0, _Source="BS00135_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" [0179.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0179.328] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5e3200, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a5e3200, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0179.328] wcscmp (_String1="BS00136_.WMF", _String2=".") returned 1 [0179.328] wcscmp (_String1="BS00136_.WMF", _String2="..") returned 1 [0179.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0179.328] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.328] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.328] wcscat (in: _Dest=0x66eef38, _Source="BS00136_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" [0179.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0179.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0a00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0a00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0179.330] wcscmp (_String1="BS00145_.WMF", _String2=".") returned 1 [0179.330] wcscmp (_String1="BS00145_.WMF", _String2="..") returned 1 [0179.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f01d0 [0179.330] wcscpy (in: _Dest=0x66f01d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.330] wcscat (in: _Dest=0x66f01d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.330] wcscat (in: _Dest=0x66f01d0, _Source="BS00145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" [0179.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f01d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0179.331] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d95100, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d95100, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0179.331] wcscmp (_String1="BS00174_.WMF", _String2=".") returned 1 [0179.331] wcscmp (_String1="BS00174_.WMF", _String2="..") returned 1 [0179.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0179.331] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.331] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.331] wcscat (in: _Dest=0x3f266a0, _Source="BS00174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" [0179.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0179.333] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a86600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14a86600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0179.333] wcscmp (_String1="BS00184_.WMF", _String2=".") returned 1 [0179.333] wcscmp (_String1="BS00184_.WMF", _String2="..") returned 1 [0179.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0179.333] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.333] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.333] wcscat (in: _Dest=0x3f25f30, _Source="BS00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" [0179.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0179.334] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1959600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1959600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0179.334] wcscmp (_String1="BS00186_.WMF", _String2=".") returned 1 [0179.334] wcscmp (_String1="BS00186_.WMF", _String2="..") returned 1 [0179.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26590 [0179.334] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.334] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.334] wcscat (in: _Dest=0x3f26590, _Source="BS00186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" [0179.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0179.335] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f24b600, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f24b600, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0179.335] wcscmp (_String1="BS00200_.WMF", _String2=".") returned 1 [0179.335] wcscmp (_String1="BS00200_.WMF", _String2="..") returned 1 [0179.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0179.335] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.335] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.335] wcscat (in: _Dest=0x3f26838, _Source="BS00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" [0179.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0179.336] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea2fbc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea2fbc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0179.336] wcscmp (_String1="BS00224_.WMF", _String2=".") returned 1 [0179.336] wcscmp (_String1="BS00224_.WMF", _String2="..") returned 1 [0179.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0179.336] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.336] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.336] wcscat (in: _Dest=0x3f26948, _Source="BS00224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" [0179.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0179.337] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa3700, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7fa3700, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0179.337] wcscmp (_String1="BS00438_.WMF", _String2=".") returned 1 [0179.338] wcscmp (_String1="BS00438_.WMF", _String2="..") returned 1 [0179.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0179.338] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.338] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.338] wcscat (in: _Dest=0x3f26508, _Source="BS00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" [0179.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0179.339] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca03e00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca03e00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0179.339] wcscmp (_String1="BS00439_.WMF", _String2=".") returned 1 [0179.339] wcscmp (_String1="BS00439_.WMF", _String2="..") returned 1 [0179.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0179.339] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.339] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.339] wcscat (in: _Dest=0x3f27030, _Source="BS00439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" [0179.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0179.340] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f1100, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb6f1100, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0179.340] wcscmp (_String1="BS00440_.WMF", _String2=".") returned 1 [0179.340] wcscmp (_String1="BS00440_.WMF", _String2="..") returned 1 [0179.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27a48 [0179.340] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.340] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.340] wcscat (in: _Dest=0x3f27a48, _Source="BS00440_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" [0179.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0179.341] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3de400, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba3de400, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0179.341] wcscmp (_String1="BS00441_.WMF", _String2=".") returned 1 [0179.341] wcscmp (_String1="BS00441_.WMF", _String2="..") returned 1 [0179.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0179.341] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.341] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.341] wcscat (in: _Dest=0x3f26618, _Source="BS00441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" [0179.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0179.342] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90cb700, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90cb700, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0179.342] wcscmp (_String1="BS00442_.WMF", _String2=".") returned 1 [0179.342] wcscmp (_String1="BS00442_.WMF", _String2="..") returned 1 [0179.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0179.342] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.342] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.342] wcscat (in: _Dest=0x3f26480, _Source="BS00442_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" [0179.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0179.344] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4da00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b4da00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0179.344] wcscmp (_String1="BS00443_.WMF", _String2=".") returned 1 [0179.344] wcscmp (_String1="BS00443_.WMF", _String2="..") returned 1 [0179.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0179.344] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.344] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.345] wcscat (in: _Dest=0x3f263f8, _Source="BS00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" [0179.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0179.345] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7db8a00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7db8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0179.345] wcscmp (_String1="BS00444_.WMF", _String2=".") returned 1 [0179.345] wcscmp (_String1="BS00444_.WMF", _String2="..") returned 1 [0179.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0179.346] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.346] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.346] wcscat (in: _Dest=0x3f26370, _Source="BS00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" [0179.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0179.347] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa5d00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6aa5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0179.347] wcscmp (_String1="BS00445_.WMF", _String2=".") returned 1 [0179.347] wcscmp (_String1="BS00445_.WMF", _String2="..") returned 1 [0179.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0179.347] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.347] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.347] wcscat (in: _Dest=0x3f267b0, _Source="BS00445_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" [0179.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0179.348] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0179.348] wcscmp (_String1="BS00453_.WMF", _String2=".") returned 1 [0179.348] wcscmp (_String1="BS00453_.WMF", _String2="..") returned 1 [0179.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27ad0 [0179.348] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.348] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.348] wcscat (in: _Dest=0x3f27ad0, _Source="BS00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" [0179.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0179.349] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0dd4700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0dd4700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0179.349] wcscmp (_String1="BS01080_.WMF", _String2=".") returned 1 [0179.349] wcscmp (_String1="BS01080_.WMF", _String2="..") returned 1 [0179.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27cf0 [0179.349] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.349] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.349] wcscat (in: _Dest=0x3f27cf0, _Source="BS01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" [0179.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0179.351] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d4600, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d4600, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0179.351] wcscmp (_String1="BS01603_.WMF", _String2=".") returned 1 [0179.351] wcscmp (_String1="BS01603_.WMF", _String2="..") returned 1 [0179.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0179.351] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.351] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.351] wcscat (in: _Dest=0x3f26728, _Source="BS01603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" [0179.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0179.352] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851ad00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5851ad00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0179.352] wcscmp (_String1="BS01634_.WMF", _String2=".") returned 1 [0179.352] wcscmp (_String1="BS01634_.WMF", _String2="..") returned 1 [0179.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27d78 [0179.352] wcscpy (in: _Dest=0x3f27d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.352] wcscat (in: _Dest=0x3f27d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.352] wcscat (in: _Dest=0x3f27d78, _Source="BS01634_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" [0179.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0179.353] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f39d00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8f39d00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0179.353] wcscmp (_String1="BS01635_.WMF", _String2=".") returned 1 [0179.353] wcscmp (_String1="BS01635_.WMF", _String2="..") returned 1 [0179.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27e00 [0179.353] wcscpy (in: _Dest=0x3f27e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.353] wcscat (in: _Dest=0x3f27e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.353] wcscat (in: _Dest=0x3f27e00, _Source="BS01635_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" [0179.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0179.354] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7975c600, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7975c600, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0179.646] wcscmp (_String1="BS01636_.WMF", _String2=".") returned 1 [0179.646] wcscmp (_String1="BS01636_.WMF", _String2="..") returned 1 [0179.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0179.646] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.646] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.646] wcscat (in: _Dest=0x66f00c0, _Source="BS01636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" [0180.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0180.339] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26404b00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26404b00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0180.339] wcscmp (_String1="BS01637_.WMF", _String2=".") returned 1 [0180.339] wcscmp (_String1="BS01637_.WMF", _String2="..") returned 1 [0180.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee630 [0180.339] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.340] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.340] wcscat (in: _Dest=0x66ee630, _Source="BS01637_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" [0180.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0180.341] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669fc900, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x669fc900, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0180.341] wcscmp (_String1="BS01638_.WMF", _String2=".") returned 1 [0180.341] wcscmp (_String1="BS01638_.WMF", _String2="..") returned 1 [0180.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0180.341] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.341] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.341] wcscat (in: _Dest=0x66ef268, _Source="BS01638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" [0180.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0180.342] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df80800, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df80800, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0180.342] wcscmp (_String1="BS01639_.WMF", _String2=".") returned 1 [0180.342] wcscmp (_String1="BS01639_.WMF", _String2="..") returned 1 [0180.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd08 [0180.342] wcscpy (in: _Dest=0x66efd08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.342] wcscat (in: _Dest=0x66efd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.342] wcscat (in: _Dest=0x66efd08, _Source="BS01639_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" [0180.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0180.343] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0180.343] wcscmp (_String1="CARBN_01.MID", _String2=".") returned 1 [0180.343] wcscmp (_String1="CARBN_01.MID", _String2="..") returned 1 [0180.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0180.343] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.343] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.343] wcscat (in: _Dest=0x66ef730, _Source="CARBN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" [0180.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0180.344] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6403ce00, ftCreationTime.dwHighDateTime=0x1c9b882, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6403ce00, ftLastWriteTime.dwHighDateTime=0x1c9b882, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0180.344] wcscmp (_String1="CG1606.WMF", _String2=".") returned 1 [0180.344] wcscmp (_String1="CG1606.WMF", _String2="..") returned 1 [0180.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeda0 [0180.344] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.344] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.344] wcscat (in: _Dest=0x66eeda0, _Source="CG1606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" [0180.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0180.345] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0180.345] wcscmp (_String1="CLASSIC1.WMF", _String2=".") returned 1 [0180.345] wcscmp (_String1="CLASSIC1.WMF", _String2="..") returned 1 [0180.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0180.345] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.345] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.345] wcscat (in: _Dest=0x66effb0, _Source="CLASSIC1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" [0180.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0180.347] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0180.347] wcscmp (_String1="CLASSIC2.WMF", _String2=".") returned 1 [0180.347] wcscmp (_String1="CLASSIC2.WMF", _String2="..") returned 1 [0180.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef1e0 [0180.347] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.347] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.347] wcscat (in: _Dest=0x66ef1e0, _Source="CLASSIC2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" [0180.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0180.348] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0180.348] wcscmp (_String1="CLIP.WMF", _String2=".") returned 1 [0180.348] wcscmp (_String1="CLIP.WMF", _String2="..") returned 1 [0180.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb778 [0180.348] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.348] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.348] wcscat (in: _Dest=0x3edb778, _Source="CLIP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" [0180.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0180.349] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0180.349] wcscmp (_String1="CMNTY_01.MID", _String2=".") returned 1 [0180.349] wcscmp (_String1="CMNTY_01.MID", _String2="..") returned 1 [0180.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee960 [0180.349] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.349] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.349] wcscat (in: _Dest=0x66ee960, _Source="CMNTY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" [0180.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0180.351] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x77084550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0180.351] wcscmp (_String1="CRANE.WMF", _String2=".") returned 1 [0180.351] wcscmp (_String1="CRANE.WMF", _String2="..") returned 1 [0180.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef9d8 [0180.351] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.351] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.351] wcscat (in: _Dest=0x66ef9d8, _Source="CRANE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" [0180.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0180.352] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0180.352] wcscmp (_String1="CRANINST.WMF", _String2=".") returned 1 [0180.352] wcscmp (_String1="CRANINST.WMF", _String2="..") returned 1 [0180.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0180.352] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.352] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.352] wcscat (in: _Dest=0x66ef400, _Source="CRANINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" [0180.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0180.354] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0180.354] wcscmp (_String1="CUP.WMF", _String2=".") returned 1 [0180.354] wcscmp (_String1="CUP.WMF", _String2="..") returned 1 [0180.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674bbb8 [0180.354] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.354] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.354] wcscat (in: _Dest=0x674bbb8, _Source="CUP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" [0180.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0180.355] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0180.355] wcscmp (_String1="CUPINST.WMF", _String2=".") returned 1 [0180.355] wcscmp (_String1="CUPINST.WMF", _String2="..") returned 1 [0180.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef378 [0180.355] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.355] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.355] wcscat (in: _Dest=0x66ef378, _Source="CUPINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" [0180.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0180.357] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0180.357] wcscmp (_String1="DD00117_.WMF", _String2=".") returned 1 [0180.357] wcscmp (_String1="DD00117_.WMF", _String2="..") returned 1 [0180.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee9e8 [0180.357] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.357] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.357] wcscat (in: _Dest=0x66ee9e8, _Source="DD00117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" [0180.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0180.358] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd91700, ftCreationTime.dwHighDateTime=0x1bd4b53, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6bd91700, ftLastWriteTime.dwHighDateTime=0x1bd4b53, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0180.358] wcscmp (_String1="DD00121_.WMF", _String2=".") returned 1 [0180.358] wcscmp (_String1="DD00121_.WMF", _String2="..") returned 1 [0180.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eee28 [0180.358] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.358] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.358] wcscat (in: _Dest=0x66eee28, _Source="DD00121_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" [0180.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0180.359] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0180.359] wcscmp (_String1="DD00234_.WMF", _String2=".") returned 1 [0180.359] wcscmp (_String1="DD00234_.WMF", _String2="..") returned 1 [0180.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec08 [0180.360] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.360] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.360] wcscat (in: _Dest=0x66eec08, _Source="DD00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" [0180.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0180.361] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa499e000, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa499e000, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0180.361] wcscmp (_String1="DD00255_.WMF", _String2=".") returned 1 [0180.361] wcscmp (_String1="DD00255_.WMF", _String2="..") returned 1 [0180.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeb80 [0180.361] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.361] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.361] wcscat (in: _Dest=0x66eeb80, _Source="DD00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" [0180.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0180.362] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0180.363] wcscmp (_String1="DD00256_.WMF", _String2=".") returned 1 [0180.363] wcscmp (_String1="DD00256_.WMF", _String2="..") returned 1 [0180.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f03f0 [0180.363] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.363] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.363] wcscat (in: _Dest=0x66f03f0, _Source="DD00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" [0180.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0180.364] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5389ec00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5389ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0180.364] wcscmp (_String1="DD00261_.WMF", _String2=".") returned 1 [0180.364] wcscmp (_String1="DD00261_.WMF", _String2="..") returned 1 [0180.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0180.364] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.364] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.364] wcscat (in: _Dest=0x66ee7c8, _Source="DD00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" [0180.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0180.366] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8c0f00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d8c0f00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0180.366] wcscmp (_String1="DD00297_.WMF", _String2=".") returned 1 [0180.366] wcscmp (_String1="DD00297_.WMF", _String2="..") returned 1 [0180.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efea0 [0180.366] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.366] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.366] wcscat (in: _Dest=0x66efea0, _Source="DD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" [0180.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0180.367] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c12300, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2c12300, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0180.367] wcscmp (_String1="DD00372_.WMF", _String2=".") returned 1 [0180.367] wcscmp (_String1="DD00372_.WMF", _String2="..") returned 1 [0180.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee498 [0180.367] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.367] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.367] wcscat (in: _Dest=0x66ee498, _Source="DD00372_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" [0180.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0180.369] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0180.369] wcscmp (_String1="DD00405_.WMF", _String2=".") returned 1 [0180.369] wcscmp (_String1="DD00405_.WMF", _String2="..") returned 1 [0180.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef048 [0180.369] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.369] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.369] wcscat (in: _Dest=0x66ef048, _Source="DD00405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" [0180.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0180.371] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0180.371] wcscmp (_String1="DD00407_.WMF", _String2=".") returned 1 [0180.371] wcscmp (_String1="DD00407_.WMF", _String2="..") returned 1 [0180.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efbf8 [0180.371] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.371] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.371] wcscat (in: _Dest=0x66efbf8, _Source="DD00407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" [0180.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0180.372] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0180.373] wcscmp (_String1="DD00413_.WMF", _String2=".") returned 1 [0180.373] wcscmp (_String1="DD00413_.WMF", _String2="..") returned 1 [0180.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee740 [0180.373] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.373] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.373] wcscat (in: _Dest=0x66ee740, _Source="DD00413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" [0180.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0180.374] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0180.374] wcscmp (_String1="DD00414_.WMF", _String2=".") returned 1 [0180.374] wcscmp (_String1="DD00414_.WMF", _String2="..") returned 1 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef0d0 [0180.374] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.374] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.374] wcscat (in: _Dest=0x66ef0d0, _Source="DD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" [0180.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0180.376] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83ad00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f83ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0180.376] wcscmp (_String1="DD00419_.WMF", _String2=".") returned 1 [0180.376] wcscmp (_String1="DD00419_.WMF", _String2="..") returned 1 [0180.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eed18 [0180.376] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.376] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.376] wcscat (in: _Dest=0x66eed18, _Source="DD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" [0180.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0180.377] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e528000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e528000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0180.377] wcscmp (_String1="DD00437_.WMF", _String2=".") returned 1 [0180.378] wcscmp (_String1="DD00437_.WMF", _String2="..") returned 1 [0180.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeaf8 [0180.378] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.378] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.378] wcscat (in: _Dest=0x66eeaf8, _Source="DD00437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" [0180.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0180.855] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0180.855] wcscmp (_String1="DD00448_.WMF", _String2=".") returned 1 [0180.855] wcscmp (_String1="DD00448_.WMF", _String2="..") returned 1 [0180.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0180.855] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.855] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.855] wcscat (in: _Dest=0x36e500, _Source="DD00448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" [0181.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0181.753] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0181.753] wcscmp (_String1="DD00449_.WMF", _String2=".") returned 1 [0181.753] wcscmp (_String1="DD00449_.WMF", _String2="..") returned 1 [0181.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeaf8 [0181.753] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.753] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.753] wcscat (in: _Dest=0x66eeaf8, _Source="DD00449_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" [0181.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0181.754] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4139de00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4139de00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0181.754] wcscmp (_String1="DD00687_.WMF", _String2=".") returned 1 [0181.754] wcscmp (_String1="DD00687_.WMF", _String2="..") returned 1 [0181.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0148 [0181.754] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.754] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.754] wcscat (in: _Dest=0x66f0148, _Source="DD00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" [0181.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0181.755] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffe00, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfffe00, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0181.755] wcscmp (_String1="DD00705_.WMF", _String2=".") returned 1 [0181.755] wcscmp (_String1="DD00705_.WMF", _String2="..") returned 1 [0181.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0181.756] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.756] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.756] wcscat (in: _Dest=0x682bce8, _Source="DD00705_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" [0181.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0181.757] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7b600, ftCreationTime.dwHighDateTime=0x1bd4ba7, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c7b600, ftLastWriteTime.dwHighDateTime=0x1bd4ba7, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0181.757] wcscmp (_String1="DD01015_.WMF", _String2=".") returned 1 [0181.757] wcscmp (_String1="DD01015_.WMF", _String2="..") returned 1 [0181.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dbb8 [0181.757] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.757] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.757] wcscat (in: _Dest=0x682dbb8, _Source="DD01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" [0181.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0181.758] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0181.758] wcscmp (_String1="DD01039_.WMF", _String2=".") returned 1 [0181.758] wcscmp (_String1="DD01039_.WMF", _String2="..") returned 1 [0181.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0181.759] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.759] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.759] wcscat (in: _Dest=0x682db30, _Source="DD01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" [0181.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0181.760] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0181.772] wcscmp (_String1="DD01138_.WMF", _String2=".") returned 1 [0181.772] wcscmp (_String1="DD01138_.WMF", _String2="..") returned 1 [0181.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0181.772] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.772] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.772] wcscat (in: _Dest=0x682d998, _Source="DD01138_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" [0182.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0182.576] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0182.576] wcscmp (_String1="DD01139_.WMF", _String2=".") returned 1 [0182.576] wcscmp (_String1="DD01139_.WMF", _String2="..") returned 1 [0182.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d118 [0182.576] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.576] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.576] wcscat (in: _Dest=0x682d118, _Source="DD01139_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" [0182.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0182.583] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0182.583] wcscmp (_String1="DD01140_.WMF", _String2=".") returned 1 [0182.583] wcscmp (_String1="DD01140_.WMF", _String2="..") returned 1 [0182.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0182.583] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.583] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.583] wcscat (in: _Dest=0x682c700, _Source="DD01140_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" [0182.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0182.585] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0182.585] wcscmp (_String1="DD01143_.WMF", _String2=".") returned 1 [0182.585] wcscmp (_String1="DD01143_.WMF", _String2="..") returned 1 [0182.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0182.585] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.585] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.585] wcscat (in: _Dest=0x682c458, _Source="DD01143_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" [0182.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0182.586] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0182.586] wcscmp (_String1="DD01145_.WMF", _String2=".") returned 1 [0182.586] wcscmp (_String1="DD01145_.WMF", _String2="..") returned 1 [0182.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0182.586] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.586] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.586] wcscat (in: _Dest=0x682c568, _Source="DD01145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" [0182.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0182.587] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0182.587] wcscmp (_String1="DD01146_.WMF", _String2=".") returned 1 [0182.587] wcscmp (_String1="DD01146_.WMF", _String2="..") returned 1 [0182.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bd70 [0182.587] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.587] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.587] wcscat (in: _Dest=0x682bd70, _Source="DD01146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" [0182.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0182.589] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0182.589] wcscmp (_String1="DD01151_.WMF", _String2=".") returned 1 [0182.589] wcscmp (_String1="DD01151_.WMF", _String2="..") returned 1 [0182.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0182.589] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.589] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.589] wcscat (in: _Dest=0x682bf08, _Source="DD01151_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" [0182.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0182.590] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0182.590] wcscmp (_String1="DD01152_.WMF", _String2=".") returned 1 [0182.590] wcscmp (_String1="DD01152_.WMF", _String2="..") returned 1 [0182.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0182.590] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.590] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.590] wcscat (in: _Dest=0x682c9a8, _Source="DD01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" [0182.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0182.592] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0182.592] wcscmp (_String1="DD01157_.WMF", _String2=".") returned 1 [0182.592] wcscmp (_String1="DD01157_.WMF", _String2="..") returned 1 [0182.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cf80 [0182.592] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.592] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.592] wcscat (in: _Dest=0x682cf80, _Source="DD01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" [0182.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0182.593] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0182.593] wcscmp (_String1="DD01160_.WMF", _String2=".") returned 1 [0182.593] wcscmp (_String1="DD01160_.WMF", _String2="..") returned 1 [0182.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c920 [0182.593] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.593] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.593] wcscat (in: _Dest=0x682c920, _Source="DD01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" [0182.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0182.594] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0182.594] wcscmp (_String1="DD01162_.WMF", _String2=".") returned 1 [0182.595] wcscmp (_String1="DD01162_.WMF", _String2="..") returned 1 [0182.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c898 [0182.595] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.595] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.595] wcscat (in: _Dest=0x682c898, _Source="DD01162_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" [0182.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0182.596] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0182.596] wcscmp (_String1="DD01163_.WMF", _String2=".") returned 1 [0182.596] wcscmp (_String1="DD01163_.WMF", _String2="..") returned 1 [0182.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c678 [0182.596] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.596] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.596] wcscat (in: _Dest=0x682c678, _Source="DD01163_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" [0182.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0182.597] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0182.597] wcscmp (_String1="DD01166_.WMF", _String2=".") returned 1 [0182.597] wcscmp (_String1="DD01166_.WMF", _String2="..") returned 1 [0182.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cbc8 [0182.597] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.597] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.597] wcscat (in: _Dest=0x682cbc8, _Source="DD01166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" [0182.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0182.599] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0182.599] wcscmp (_String1="DD01167_.WMF", _String2=".") returned 1 [0182.599] wcscmp (_String1="DD01167_.WMF", _String2="..") returned 1 [0182.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cb40 [0182.599] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.599] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.599] wcscat (in: _Dest=0x682cb40, _Source="DD01167_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" [0182.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0182.600] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0182.600] wcscmp (_String1="DD01168_.WMF", _String2=".") returned 1 [0182.600] wcscmp (_String1="DD01168_.WMF", _String2="..") returned 1 [0182.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ca30 [0182.600] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.600] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.600] wcscat (in: _Dest=0x682ca30, _Source="DD01168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" [0182.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0182.601] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0182.601] wcscmp (_String1="DD01169_.WMF", _String2=".") returned 1 [0182.601] wcscmp (_String1="DD01169_.WMF", _String2="..") returned 1 [0182.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c4e0 [0182.602] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.602] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.602] wcscat (in: _Dest=0x682c4e0, _Source="DD01169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" [0182.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0182.603] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0182.603] wcscmp (_String1="DD01170_.WMF", _String2=".") returned 1 [0182.603] wcscmp (_String1="DD01170_.WMF", _String2="..") returned 1 [0182.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cef8 [0182.603] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.603] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.603] wcscat (in: _Dest=0x682cef8, _Source="DD01170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" [0182.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0182.604] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0182.604] wcscmp (_String1="DD01171_.WMF", _String2=".") returned 1 [0182.604] wcscmp (_String1="DD01171_.WMF", _String2="..") returned 1 [0182.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d090 [0182.604] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.604] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.604] wcscat (in: _Dest=0x682d090, _Source="DD01171_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" [0182.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0182.605] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0182.606] wcscmp (_String1="DD01172_.WMF", _String2=".") returned 1 [0182.606] wcscmp (_String1="DD01172_.WMF", _String2="..") returned 1 [0182.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0182.606] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.606] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.606] wcscat (in: _Dest=0x682c238, _Source="DD01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" [0182.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0182.607] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0182.607] wcscmp (_String1="DD01173_.WMF", _String2=".") returned 1 [0182.607] wcscmp (_String1="DD01173_.WMF", _String2="..") returned 1 [0182.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cde8 [0182.607] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.607] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.607] wcscat (in: _Dest=0x682cde8, _Source="DD01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" [0182.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0182.711] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0182.711] wcscmp (_String1="DD01176_.WMF", _String2=".") returned 1 [0182.711] wcscmp (_String1="DD01176_.WMF", _String2="..") returned 1 [0182.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cc50 [0182.711] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.711] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.711] wcscat (in: _Dest=0x682cc50, _Source="DD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" [0182.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0182.712] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0182.712] wcscmp (_String1="DD01178_.WMF", _String2=".") returned 1 [0182.712] wcscmp (_String1="DD01178_.WMF", _String2="..") returned 1 [0182.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d008 [0182.712] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.712] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.712] wcscat (in: _Dest=0x682d008, _Source="DD01178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" [0182.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0182.713] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0182.713] wcscmp (_String1="DD01179_.WMF", _String2=".") returned 1 [0182.713] wcscmp (_String1="DD01179_.WMF", _String2="..") returned 1 [0182.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27be0 [0182.713] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.713] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.713] wcscat (in: _Dest=0x3f27be0, _Source="DD01179_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" [0182.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0182.714] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0182.715] wcscmp (_String1="DD01180_.WMF", _String2=".") returned 1 [0182.715] wcscmp (_String1="DD01180_.WMF", _String2="..") returned 1 [0182.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0182.715] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.715] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.715] wcscat (in: _Dest=0x3f26e10, _Source="DD01180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" [0182.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0182.716] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0182.716] wcscmp (_String1="DD01181_.WMF", _String2=".") returned 1 [0182.716] wcscmp (_String1="DD01181_.WMF", _String2="..") returned 1 [0182.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0182.716] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.716] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.716] wcscat (in: _Dest=0x3f26c78, _Source="DD01181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" [0182.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0182.717] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0182.717] wcscmp (_String1="DD01182_.WMF", _String2=".") returned 1 [0182.717] wcscmp (_String1="DD01182_.WMF", _String2="..") returned 1 [0182.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0182.717] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.717] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.717] wcscat (in: _Dest=0x3f27608, _Source="DD01182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" [0182.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0182.718] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0182.718] wcscmp (_String1="DD01183_.WMF", _String2=".") returned 1 [0182.718] wcscmp (_String1="DD01183_.WMF", _String2="..") returned 1 [0182.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0182.719] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.719] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.719] wcscat (in: _Dest=0x3f25ea8, _Source="DD01183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" [0182.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0182.720] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6bab00, ftCreationTime.dwHighDateTime=0x1bd4c73, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e6bab00, ftLastWriteTime.dwHighDateTime=0x1bd4c73, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0182.720] wcscmp (_String1="DD01186_.WMF", _String2=".") returned 1 [0182.720] wcscmp (_String1="DD01186_.WMF", _String2="..") returned 1 [0182.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0182.720] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.720] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.720] wcscat (in: _Dest=0x3f26e98, _Source="DD01186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" [0182.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0182.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a337900, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a337900, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0182.721] wcscmp (_String1="DD01366_.WMF", _String2=".") returned 1 [0182.721] wcscmp (_String1="DD01366_.WMF", _String2="..") returned 1 [0182.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0182.721] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.721] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.721] wcscat (in: _Dest=0x3f268c0, _Source="DD01366_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" [0182.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0182.722] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168e2a00, ftCreationTime.dwHighDateTime=0x1bd4c67, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x168e2a00, ftLastWriteTime.dwHighDateTime=0x1bd4c67, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0182.723] wcscmp (_String1="DD01434_.WMF", _String2=".") returned 1 [0182.723] wcscmp (_String1="DD01434_.WMF", _String2="..") returned 1 [0182.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0182.723] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.723] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.723] wcscat (in: _Dest=0x3f25fb8, _Source="DD01434_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" [0182.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0182.724] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab77800, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeab77800, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0182.724] wcscmp (_String1="DD01585_.WMF", _String2=".") returned 1 [0182.724] wcscmp (_String1="DD01585_.WMF", _String2="..") returned 1 [0182.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0182.724] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0182.724] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0182.724] wcscat (in: _Dest=0x3f26d00, _Source="DD01585_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" [0182.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0183.001] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12e1000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe12e1000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0183.001] wcscmp (_String1="DD01586_.WMF", _String2=".") returned 1 [0183.001] wcscmp (_String1="DD01586_.WMF", _String2="..") returned 1 [0183.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0183.001] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0183.001] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0183.001] wcscat (in: _Dest=0x682dc40, _Source="DD01586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" [0184.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0184.954] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c3e200, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87c3e200, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0184.954] wcscmp (_String1="DD01628_.WMF", _String2=".") returned 1 [0184.954] wcscmp (_String1="DD01628_.WMF", _String2="..") returned 1 [0184.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0184.955] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0184.955] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0184.955] wcscat (in: _Dest=0x682c1b0, _Source="DD01628_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" [0184.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0184.956] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f58f400, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f58f400, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0184.956] wcscmp (_String1="DD01629_.WMF", _String2=".") returned 1 [0184.956] wcscmp (_String1="DD01629_.WMF", _String2="..") returned 1 [0184.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d448 [0184.956] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0184.956] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0184.956] wcscat (in: _Dest=0x682d448, _Source="DD01629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" [0184.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0184.957] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c9f100, ftCreationTime.dwHighDateTime=0x1bd4c55, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84c9f100, ftLastWriteTime.dwHighDateTime=0x1bd4c55, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0184.958] wcscmp (_String1="DD01630_.WMF", _String2=".") returned 1 [0184.958] wcscmp (_String1="DD01630_.WMF", _String2="..") returned 1 [0184.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d4d0 [0184.958] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0184.958] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0184.958] wcscat (in: _Dest=0x682d4d0, _Source="DD01630_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" [0191.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0191.357] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b95ae00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b95ae00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0191.357] wcscmp (_String1="DD01631_.WMF", _String2=".") returned 1 [0191.357] wcscmp (_String1="DD01631_.WMF", _String2="..") returned 1 [0191.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cef8 [0191.357] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.357] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.357] wcscat (in: _Dest=0x682cef8, _Source="DD01631_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" [0191.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0191.359] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0191.359] wcscmp (_String1="DD01761_.WMF", _String2=".") returned 1 [0191.359] wcscmp (_String1="DD01761_.WMF", _String2="..") returned 1 [0191.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0191.359] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.359] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.359] wcscat (in: _Dest=0x682c238, _Source="DD01761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" [0191.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0191.360] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0191.360] wcscmp (_String1="DD01772_.WMF", _String2=".") returned 1 [0191.360] wcscmp (_String1="DD01772_.WMF", _String2="..") returned 1 [0191.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0191.360] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.360] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.360] wcscat (in: _Dest=0x682db30, _Source="DD01772_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" [0191.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0191.361] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0191.361] wcscmp (_String1="DD01793_.WMF", _String2=".") returned 1 [0191.361] wcscmp (_String1="DD01793_.WMF", _String2="..") returned 1 [0191.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ccd8 [0191.361] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.361] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.361] wcscat (in: _Dest=0x682ccd8, _Source="DD01793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" [0191.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0191.362] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0191.362] wcscmp (_String1="EAST_01.MID", _String2=".") returned 1 [0191.362] wcscmp (_String1="EAST_01.MID", _String2="..") returned 1 [0191.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c128 [0191.362] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.362] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.362] wcscat (in: _Dest=0x682c128, _Source="EAST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" [0191.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0191.363] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ad5d00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72ad5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0191.363] wcscmp (_String1="ED00010_.WMF", _String2=".") returned 1 [0191.363] wcscmp (_String1="ED00010_.WMF", _String2="..") returned 1 [0191.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0191.363] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.363] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.363] wcscat (in: _Dest=0x682c348, _Source="ED00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" [0191.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0191.364] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dcfc00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47dcfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0191.364] wcscmp (_String1="ED00019_.WMF", _String2=".") returned 1 [0191.364] wcscmp (_String1="ED00019_.WMF", _String2="..") returned 1 [0191.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c018 [0191.364] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.364] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.364] wcscat (in: _Dest=0x682c018, _Source="ED00019_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" [0191.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0191.366] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599ace00, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x87740190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599ace00, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0191.366] wcscmp (_String1="ED00172_.WMF", _String2=".") returned 1 [0191.366] wcscmp (_String1="ED00172_.WMF", _String2="..") returned 1 [0191.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cd60 [0191.366] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.366] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.366] wcscat (in: _Dest=0x682cd60, _Source="ED00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" [0191.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0191.367] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b001000, ftCreationTime.dwHighDateTime=0x1bd4cc3, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b001000, ftLastWriteTime.dwHighDateTime=0x1bd4cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0191.367] wcscmp (_String1="ED00184_.WMF", _String2=".") returned 1 [0191.367] wcscmp (_String1="ED00184_.WMF", _String2="..") returned 1 [0191.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c2c0 [0191.367] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.367] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.367] wcscat (in: _Dest=0x682c2c0, _Source="ED00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" [0191.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0191.368] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0cf900, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd0cf900, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0191.368] wcscmp (_String1="EN00006_.WMF", _String2=".") returned 1 [0191.368] wcscmp (_String1="EN00006_.WMF", _String2="..") returned 1 [0191.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0191.368] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.368] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.368] wcscat (in: _Dest=0x682c788, _Source="EN00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" [0191.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0191.369] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecba0200, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecba0200, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0191.369] wcscmp (_String1="EN00202_.WMF", _String2=".") returned 1 [0191.369] wcscmp (_String1="EN00202_.WMF", _String2="..") returned 1 [0191.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d2b0 [0191.369] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.369] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.369] wcscat (in: _Dest=0x682d2b0, _Source="EN00202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" [0191.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0191.370] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdb6a00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cdb6a00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0191.370] wcscmp (_String1="EN00222_.WMF", _String2=".") returned 1 [0191.370] wcscmp (_String1="EN00222_.WMF", _String2="..") returned 1 [0191.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0191.370] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.370] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.370] wcscat (in: _Dest=0x3f26e10, _Source="EN00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" [0191.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0191.371] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57117900, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57117900, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0191.371] wcscmp (_String1="EN00242_.WMF", _String2=".") returned 1 [0191.371] wcscmp (_String1="EN00242_.WMF", _String2="..") returned 1 [0191.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0191.371] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.371] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.371] wcscat (in: _Dest=0x3f270b8, _Source="EN00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" [0191.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0191.372] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d215300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d215300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0191.372] wcscmp (_String1="EN00319_.WMF", _String2=".") returned 1 [0191.372] wcscmp (_String1="EN00319_.WMF", _String2="..") returned 1 [0191.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f262e8 [0191.372] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.372] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.372] wcscat (in: _Dest=0x3f262e8, _Source="EN00319_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" [0191.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0191.373] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f11900, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9f11900, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0191.373] wcscmp (_String1="EN00320_.WMF", _String2=".") returned 1 [0191.373] wcscmp (_String1="EN00320_.WMF", _String2="..") returned 1 [0191.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27c68 [0191.373] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.373] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.373] wcscat (in: _Dest=0x3f27c68, _Source="EN00320_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" [0191.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0191.374] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa666a200, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa666a200, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0191.374] wcscmp (_String1="EN00397_.WMF", _String2=".") returned 1 [0191.374] wcscmp (_String1="EN00397_.WMF", _String2="..") returned 1 [0191.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0191.374] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.374] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.375] wcscat (in: _Dest=0x3f26ae0, _Source="EN00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" [0191.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0191.375] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c52f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe6c52f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0191.376] wcscmp (_String1="EN00902_.WMF", _String2=".") returned 1 [0191.376] wcscmp (_String1="EN00902_.WMF", _String2="..") returned 1 [0191.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f278b0 [0191.376] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.376] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.376] wcscat (in: _Dest=0x3f278b0, _Source="EN00902_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" [0191.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0191.377] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0191.377] wcscmp (_String1="EXPLR_01.MID", _String2=".") returned 1 [0191.377] wcscmp (_String1="EXPLR_01.MID", _String2="..") returned 1 [0191.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0191.377] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.377] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.377] wcscat (in: _Dest=0x3f26f20, _Source="EXPLR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" [0191.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0191.378] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0191.378] wcscmp (_String1="FALL_01.MID", _String2=".") returned 1 [0191.378] wcscmp (_String1="FALL_01.MID", _String2="..") returned 1 [0191.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26260 [0191.378] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.378] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.378] wcscat (in: _Dest=0x3f26260, _Source="FALL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" [0191.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0191.379] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43244200, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43244200, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0191.379] wcscmp (_String1="FD00074_.WMF", _String2=".") returned 1 [0191.379] wcscmp (_String1="FD00074_.WMF", _String2="..") returned 1 [0191.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f269d0 [0191.379] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.379] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.379] wcscat (in: _Dest=0x3f269d0, _Source="FD00074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" [0191.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0191.380] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90bb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f90bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0191.380] wcscmp (_String1="FD00076_.WMF", _String2=".") returned 1 [0191.380] wcscmp (_String1="FD00076_.WMF", _String2="..") returned 1 [0191.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0191.380] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.380] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.380] wcscat (in: _Dest=0x3f279c0, _Source="FD00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" [0191.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0191.383] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf02600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf02600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0191.383] wcscmp (_String1="FD00077_.WMF", _String2=".") returned 1 [0191.383] wcscmp (_String1="FD00077_.WMF", _String2="..") returned 1 [0191.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27b58 [0191.383] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.383] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.384] wcscat (in: _Dest=0x3f27b58, _Source="FD00077_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" [0191.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0191.384] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abef900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4abef900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0191.384] wcscmp (_String1="FD00086_.WMF", _String2=".") returned 1 [0191.384] wcscmp (_String1="FD00086_.WMF", _String2="..") returned 1 [0191.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0191.385] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.385] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.385] wcscat (in: _Dest=0x3f25ea8, _Source="FD00086_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" [0191.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0191.386] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f60fc00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f60fc00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0191.386] wcscmp (_String1="FD00090_.WMF", _String2=".") returned 1 [0191.386] wcscmp (_String1="FD00090_.WMF", _String2="..") returned 1 [0191.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0191.386] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.386] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.386] wcscat (in: _Dest=0x3f26d00, _Source="FD00090_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" [0191.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0191.387] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498dcc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x498dcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0191.387] wcscmp (_String1="FD00096_.WMF", _String2=".") returned 1 [0191.387] wcscmp (_String1="FD00096_.WMF", _String2="..") returned 1 [0191.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0191.387] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.387] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.387] wcscat (in: _Dest=0x3f25fb8, _Source="FD00096_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" [0191.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0191.388] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472b7200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x472b7200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0191.388] wcscmp (_String1="FD00296_.WMF", _String2=".") returned 1 [0191.388] wcscmp (_String1="FD00296_.WMF", _String2="..") returned 1 [0191.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27828 [0191.388] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.388] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.388] wcscat (in: _Dest=0x3f27828, _Source="FD00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" [0191.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0191.389] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e8ee00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9e8ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0191.389] wcscmp (_String1="FD00297_.WMF", _String2=".") returned 1 [0191.389] wcscmp (_String1="FD00297_.WMF", _String2="..") returned 1 [0191.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27be0 [0191.389] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.389] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.389] wcscat (in: _Dest=0x3f27be0, _Source="FD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" [0191.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0191.390] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fa4500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fa4500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0191.390] wcscmp (_String1="FD00306_.WMF", _String2=".") returned 1 [0191.390] wcscmp (_String1="FD00306_.WMF", _String2="..") returned 1 [0191.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0191.390] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.390] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.390] wcscat (in: _Dest=0x3f26c78, _Source="FD00306_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" [0191.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0191.391] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87fda800, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87fda800, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0191.391] wcscmp (_String1="FD00336_.WMF", _String2=".") returned 1 [0191.391] wcscmp (_String1="FD00336_.WMF", _String2="..") returned 1 [0191.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0191.391] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.391] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.391] wcscat (in: _Dest=0x3f27608, _Source="FD00336_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" [0191.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0191.392] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c91800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c91800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0191.392] wcscmp (_String1="FD00361_.WMF", _String2=".") returned 1 [0191.392] wcscmp (_String1="FD00361_.WMF", _String2="..") returned 1 [0191.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0191.392] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.393] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.393] wcscat (in: _Dest=0x3f26e98, _Source="FD00361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" [0191.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0191.393] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a0af00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90a0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0191.393] wcscmp (_String1="FD00369_.WMF", _String2=".") returned 1 [0191.393] wcscmp (_String1="FD00369_.WMF", _String2="..") returned 1 [0191.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0191.394] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.394] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.394] wcscat (in: _Dest=0x3f268c0, _Source="FD00369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" [0191.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0191.394] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9214ac00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9214ac00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0191.394] wcscmp (_String1="FD00382_.WMF", _String2=".") returned 1 [0191.395] wcscmp (_String1="FD00382_.WMF", _String2="..") returned 1 [0191.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0191.395] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.395] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.395] wcscat (in: _Dest=0x3f27250, _Source="FD00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" [0191.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0191.395] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397eb00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4397eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0191.396] wcscmp (_String1="FD00397_.WMF", _String2=".") returned 1 [0191.396] wcscmp (_String1="FD00397_.WMF", _String2="..") returned 1 [0191.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0191.396] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.396] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.396] wcscat (in: _Dest=0x3f271c8, _Source="FD00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" [0191.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0191.684] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4266be00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4266be00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0195.157] wcscmp (_String1="FD00403_.WMF", _String2=".") returned 1 [0195.157] wcscmp (_String1="FD00403_.WMF", _String2="..") returned 1 [0195.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0195.157] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.157] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.157] wcscat (in: _Dest=0x682c1b0, _Source="FD00403_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" [0197.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0197.052] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41359100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41359100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0197.052] wcscmp (_String1="FD00414_.WMF", _String2=".") returned 1 [0197.052] wcscmp (_String1="FD00414_.WMF", _String2="..") returned 1 [0197.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0197.052] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.052] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.052] wcscat (in: _Dest=0x682cab8, _Source="FD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" [0197.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0197.073] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40046400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40046400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0197.073] wcscmp (_String1="FD00419_.WMF", _String2=".") returned 1 [0197.073] wcscmp (_String1="FD00419_.WMF", _String2="..") returned 1 [0197.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0197.073] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.073] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.073] wcscat (in: _Dest=0x682bce8, _Source="FD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" [0197.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0197.074] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da20a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3da20a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0197.074] wcscmp (_String1="FD00428_.WMF", _String2=".") returned 1 [0197.074] wcscmp (_String1="FD00428_.WMF", _String2="..") returned 1 [0197.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dbb8 [0197.074] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.074] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.074] wcscat (in: _Dest=0x682dbb8, _Source="FD00428_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" [0197.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0197.075] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c70dd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c70dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0197.075] wcscmp (_String1="FD00435_.WMF", _String2=".") returned 1 [0197.075] wcscmp (_String1="FD00435_.WMF", _String2="..") returned 1 [0197.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0197.076] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.076] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.076] wcscat (in: _Dest=0x682bf08, _Source="FD00435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" [0197.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0197.077] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3fb000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b3fb000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0197.077] wcscmp (_String1="FD00438_.WMF", _String2=".") returned 1 [0197.077] wcscmp (_String1="FD00438_.WMF", _String2="..") returned 1 [0197.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682be80 [0197.077] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.077] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.077] wcscat (in: _Dest=0x682be80, _Source="FD00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" [0197.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0197.078] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0e8300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a0e8300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0197.078] wcscmp (_String1="FD00455_.WMF", _String2=".") returned 1 [0197.078] wcscmp (_String1="FD00455_.WMF", _String2="..") returned 1 [0197.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0197.078] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.078] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.078] wcscat (in: _Dest=0x682dc40, _Source="FD00455_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" [0197.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0197.079] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38dd5600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38dd5600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0197.079] wcscmp (_String1="FD00459_.WMF", _String2=".") returned 1 [0197.079] wcscmp (_String1="FD00459_.WMF", _String2="..") returned 1 [0197.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c920 [0197.079] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.079] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.079] wcscat (in: _Dest=0x682c920, _Source="FD00459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" [0197.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0197.081] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ac2900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ac2900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0197.081] wcscmp (_String1="FD00543_.WMF", _String2=".") returned 1 [0197.081] wcscmp (_String1="FD00543_.WMF", _String2="..") returned 1 [0197.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0197.081] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.081] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.081] wcscat (in: _Dest=0x682d228, _Source="FD00543_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" [0197.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0197.082] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a421100, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a421100, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0197.082] wcscmp (_String1="FD00544_.WMF", _String2=".") returned 1 [0197.082] wcscmp (_String1="FD00544_.WMF", _String2="..") returned 1 [0197.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0197.082] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.082] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.082] wcscat (in: _Dest=0x682c568, _Source="FD00544_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" [0197.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0197.083] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e9d600, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81e9d600, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0197.083] wcscmp (_String1="FD00564_.WMF", _String2=".") returned 1 [0197.083] wcscmp (_String1="FD00564_.WMF", _String2="..") returned 1 [0197.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d5e0 [0197.083] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.083] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.083] wcscat (in: _Dest=0x682d5e0, _Source="FD00564_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" [0197.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0197.084] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a125200, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a125200, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0197.084] wcscmp (_String1="FD00586_.WMF", _String2=".") returned 1 [0197.084] wcscmp (_String1="FD00586_.WMF", _String2="..") returned 1 [0197.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d668 [0197.085] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.085] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.085] wcscat (in: _Dest=0x682d668, _Source="FD00586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" [0197.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0197.086] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54258100, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54258100, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0197.086] wcscmp (_String1="FD00775_.WMF", _String2=".") returned 1 [0197.086] wcscmp (_String1="FD00775_.WMF", _String2="..") returned 1 [0197.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d6f0 [0197.086] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.086] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.086] wcscat (in: _Dest=0x682d6f0, _Source="FD00775_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" [0197.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0197.087] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b2900, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x676b2900, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0197.087] wcscmp (_String1="FD00779_.WMF", _String2=".") returned 1 [0197.087] wcscmp (_String1="FD00779_.WMF", _String2="..") returned 1 [0197.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d778 [0197.087] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.087] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.087] wcscat (in: _Dest=0x682d778, _Source="FD00779_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" [0197.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0197.088] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e29300, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e29300, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0197.088] wcscmp (_String1="FD00799_.WMF", _String2=".") returned 1 [0197.088] wcscmp (_String1="FD00799_.WMF", _String2="..") returned 1 [0197.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d800 [0197.088] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.088] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.088] wcscat (in: _Dest=0x682d800, _Source="FD00799_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" [0197.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0197.089] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb8500, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42bb8500, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0197.089] wcscmp (_String1="FD00814_.WMF", _String2=".") returned 1 [0197.090] wcscmp (_String1="FD00814_.WMF", _String2="..") returned 1 [0197.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0197.090] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.090] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.090] wcscat (in: _Dest=0x682d888, _Source="FD00814_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" [0197.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0197.091] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b32cb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b32cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0197.091] wcscmp (_String1="FD00965_.WMF", _String2=".") returned 1 [0197.091] wcscmp (_String1="FD00965_.WMF", _String2="..") returned 1 [0197.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682daa8 [0197.091] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.091] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.091] wcscat (in: _Dest=0x682daa8, _Source="FD00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" [0197.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0197.092] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e988600, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e988600, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0197.092] wcscmp (_String1="FD01074_.WMF", _String2=".") returned 1 [0197.092] wcscmp (_String1="FD01074_.WMF", _String2="..") returned 1 [0197.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c3d0 [0197.092] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.093] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.093] wcscat (in: _Dest=0x682c3d0, _Source="FD01074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" [0197.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0197.094] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898aa700, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x898aa700, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0197.094] wcscmp (_String1="FD01084_.WMF", _String2=".") returned 1 [0197.094] wcscmp (_String1="FD01084_.WMF", _String2="..") returned 1 [0197.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682da20 [0197.094] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.094] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.094] wcscat (in: _Dest=0x682da20, _Source="FD01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" [0197.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0197.095] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33f000, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe33f000, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0197.095] wcscmp (_String1="FD01176_.WMF", _String2=".") returned 1 [0197.095] wcscmp (_String1="FD01176_.WMF", _String2="..") returned 1 [0197.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf90 [0197.095] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.095] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.095] wcscat (in: _Dest=0x682bf90, _Source="FD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" [0197.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0197.096] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2aa0900, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2aa0900, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0197.097] wcscmp (_String1="FD01191_.WMF", _String2=".") returned 1 [0197.097] wcscmp (_String1="FD01191_.WMF", _String2="..") returned 1 [0197.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0197.097] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.097] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.097] wcscat (in: _Dest=0x682c0a0, _Source="FD01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" [0197.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0197.098] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c362c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c362c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0197.098] wcscmp (_String1="FD01193_.WMF", _String2=".") returned 1 [0197.098] wcscmp (_String1="FD01193_.WMF", _String2="..") returned 1 [0197.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d338 [0197.098] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.098] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.098] wcscat (in: _Dest=0x682d338, _Source="FD01193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" [0197.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0197.099] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf168200, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf168200, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0197.099] wcscmp (_String1="FD01196_.WMF", _String2=".") returned 1 [0197.100] wcscmp (_String1="FD01196_.WMF", _String2="..") returned 1 [0197.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0197.100] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.100] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.100] wcscat (in: _Dest=0x682d998, _Source="FD01196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" [0197.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0197.101] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1604be00, ftCreationTime.dwHighDateTime=0x1bf32a7, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1604be00, ftLastWriteTime.dwHighDateTime=0x1bf32a7, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0197.101] wcscmp (_String1="FD01548_.WMF", _String2=".") returned 1 [0197.101] wcscmp (_String1="FD01548_.WMF", _String2="..") returned 1 [0197.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0197.101] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.101] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.101] wcscat (in: _Dest=0x682c9a8, _Source="FD01548_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" [0197.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0197.102] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a335000, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a335000, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0197.102] wcscmp (_String1="FD01657_.WMF", _String2=".") returned 1 [0197.102] wcscmp (_String1="FD01657_.WMF", _String2="..") returned 1 [0197.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0197.102] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.102] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.102] wcscat (in: _Dest=0x682c700, _Source="FD01657_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" [0197.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0197.104] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e92f00, ftCreationTime.dwHighDateTime=0x1bd4c70, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e92f00, ftLastWriteTime.dwHighDateTime=0x1bd4c70, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0197.104] wcscmp (_String1="FD01658_.WMF", _String2=".") returned 1 [0197.104] wcscmp (_String1="FD01658_.WMF", _String2="..") returned 1 [0197.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cf80 [0197.104] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.104] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.104] wcscat (in: _Dest=0x682cf80, _Source="FD01658_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" [0197.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0197.105] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85618800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85618800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0197.105] wcscmp (_String1="FD01659_.WMF", _String2=".") returned 1 [0197.105] wcscmp (_String1="FD01659_.WMF", _String2="..") returned 1 [0197.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0197.105] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.105] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.105] wcscat (in: _Dest=0x682c128, _Source="FD01659_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" [0197.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0197.106] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b647d00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b647d00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0197.106] wcscmp (_String1="FD01660_.WMF", _String2=".") returned 1 [0197.106] wcscmp (_String1="FD01660_.WMF", _String2="..") returned 1 [0197.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ccd8 [0197.106] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.107] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.107] wcscat (in: _Dest=0x682ccd8, _Source="FD01660_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" [0197.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0197.108] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0197.108] wcscmp (_String1="FD02068_.WMF", _String2=".") returned 1 [0197.108] wcscmp (_String1="FD02068_.WMF", _String2="..") returned 1 [0197.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0197.108] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.108] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.108] wcscat (in: _Dest=0x682db30, _Source="FD02068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" [0197.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0197.109] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0197.109] wcscmp (_String1="FD02071_.WMF", _String2=".") returned 1 [0197.109] wcscmp (_String1="FD02071_.WMF", _String2="..") returned 1 [0197.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0197.109] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0197.109] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0197.109] wcscat (in: _Dest=0x682c238, _Source="FD02071_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" [0197.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0198.605] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0198.605] wcscmp (_String1="FD02075_.WMF", _String2=".") returned 1 [0198.605] wcscmp (_String1="FD02075_.WMF", _String2="..") returned 1 [0198.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d4d0 [0198.605] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0198.605] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0198.605] wcscat (in: _Dest=0x682d4d0, _Source="FD02075_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" [0201.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0201.236] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0201.236] wcscmp (_String1="FD02088_.WMF", _String2=".") returned 1 [0201.236] wcscmp (_String1="FD02088_.WMF", _String2="..") returned 1 [0201.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0201.236] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.237] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.237] wcscat (in: _Dest=0x682c700, _Source="FD02088_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" [0201.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0201.238] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0201.238] wcscmp (_String1="FD02097_.WMF", _String2=".") returned 1 [0201.238] wcscmp (_String1="FD02097_.WMF", _String2="..") returned 1 [0201.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0201.238] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.238] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.238] wcscat (in: _Dest=0x682c9a8, _Source="FD02097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" [0201.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0201.239] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0201.239] wcscmp (_String1="FD02115_.WMF", _String2=".") returned 1 [0201.239] wcscmp (_String1="FD02115_.WMF", _String2="..") returned 1 [0201.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0201.239] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.239] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.239] wcscat (in: _Dest=0x682d998, _Source="FD02115_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" [0201.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0201.241] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0201.643] wcscmp (_String1="FD02116_.WMF", _String2=".") returned 1 [0201.643] wcscmp (_String1="FD02116_.WMF", _String2="..") returned 1 [0201.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0201.643] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.643] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.643] wcscat (in: _Dest=0x682c128, _Source="FD02116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" [0201.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0201.822] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0201.822] wcscmp (_String1="FD02141_.WMF", _String2=".") returned 1 [0201.822] wcscmp (_String1="FD02141_.WMF", _String2="..") returned 1 [0201.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d338 [0201.822] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.822] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.822] wcscat (in: _Dest=0x682d338, _Source="FD02141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" [0201.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0201.823] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0201.823] wcscmp (_String1="FD02153_.WMF", _String2=".") returned 1 [0201.823] wcscmp (_String1="FD02153_.WMF", _String2="..") returned 1 [0201.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf90 [0201.823] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.823] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.823] wcscat (in: _Dest=0x682bf90, _Source="FD02153_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" [0201.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0201.824] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0201.824] wcscmp (_String1="FD02158_.WMF", _String2=".") returned 1 [0201.824] wcscmp (_String1="FD02158_.WMF", _String2="..") returned 1 [0201.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0201.825] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.825] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.825] wcscat (in: _Dest=0x682c0a0, _Source="FD02158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" [0201.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0201.826] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0201.826] wcscmp (_String1="FD02161_.WMF", _String2=".") returned 1 [0201.826] wcscmp (_String1="FD02161_.WMF", _String2="..") returned 1 [0201.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0201.826] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.826] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.826] wcscat (in: _Dest=0x682c788, _Source="FD02161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" [0201.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0201.827] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0201.827] wcscmp (_String1="FINCL_01.MID", _String2=".") returned 1 [0201.827] wcscmp (_String1="FINCL_01.MID", _String2="..") returned 1 [0201.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d2b0 [0201.827] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.827] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.827] wcscat (in: _Dest=0x682d2b0, _Source="FINCL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" [0201.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0201.828] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0201.828] wcscmp (_String1="FINCL_02.MID", _String2=".") returned 1 [0201.828] wcscmp (_String1="FINCL_02.MID", _String2="..") returned 1 [0201.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0201.828] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.829] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.829] wcscat (in: _Dest=0x682c348, _Source="FINCL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" [0201.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0201.830] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0201.830] wcscmp (_String1="FLAP.WMF", _String2=".") returned 1 [0201.830] wcscmp (_String1="FLAP.WMF", _String2="..") returned 1 [0201.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f370 [0201.830] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.830] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.830] wcscat (in: _Dest=0x3e0f370, _Source="FLAP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" [0201.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0201.832] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0201.832] wcscmp (_String1="GRDEN_01.MID", _String2=".") returned 1 [0201.832] wcscmp (_String1="GRDEN_01.MID", _String2="..") returned 1 [0201.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c018 [0201.832] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.832] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.832] wcscat (in: _Dest=0x682c018, _Source="GRDEN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" [0201.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0201.834] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0201.834] wcscmp (_String1="GRID_01.MID", _String2=".") returned 1 [0201.834] wcscmp (_String1="GRID_01.MID", _String2="..") returned 1 [0201.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cd60 [0201.834] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.834] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.834] wcscat (in: _Dest=0x682cd60, _Source="GRID_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" [0201.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0201.835] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a1c600, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8a1c600, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0201.835] wcscmp (_String1="HH00057_.WMF", _String2=".") returned 1 [0201.835] wcscmp (_String1="HH00057_.WMF", _String2="..") returned 1 [0201.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ce70 [0201.835] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.835] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.835] wcscat (in: _Dest=0x682ce70, _Source="HH00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" [0201.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0201.836] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e41b00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85e41b00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0201.836] wcscmp (_String1="HH00084_.WMF", _String2=".") returned 1 [0201.836] wcscmp (_String1="HH00084_.WMF", _String2="..") returned 1 [0201.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bdf8 [0201.837] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.837] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.837] wcscat (in: _Dest=0x682bdf8, _Source="HH00084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" [0201.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0201.838] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d53f600, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d53f600, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0201.838] wcscmp (_String1="HH00231_.WMF", _String2=".") returned 1 [0201.838] wcscmp (_String1="HH00231_.WMF", _String2="..") returned 1 [0201.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d448 [0201.838] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.838] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.838] wcscat (in: _Dest=0x682d448, _Source="HH00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" [0201.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0201.839] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd2900, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65fd2900, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0201.839] wcscmp (_String1="HH00235_.WMF", _String2=".") returned 1 [0201.839] wcscmp (_String1="HH00235_.WMF", _String2="..") returned 1 [0201.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c678 [0201.839] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.839] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.839] wcscat (in: _Dest=0x682c678, _Source="HH00235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" [0201.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0201.842] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cbfc00, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64cbfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0201.842] wcscmp (_String1="HH00236_.WMF", _String2=".") returned 1 [0201.842] wcscmp (_String1="HH00236_.WMF", _String2="..") returned 1 [0201.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cc50 [0201.842] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.842] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.842] wcscat (in: _Dest=0x682cc50, _Source="HH00236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" [0201.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0201.844] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220a2400, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x220a2400, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0201.844] wcscmp (_String1="HH00241_.WMF", _String2=".") returned 1 [0201.844] wcscmp (_String1="HH00241_.WMF", _String2="..") returned 1 [0201.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d558 [0201.844] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.844] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.844] wcscat (in: _Dest=0x682d558, _Source="HH00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" [0201.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0201.845] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x367afc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x367afc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0201.845] wcscmp (_String1="HH00260_.WMF", _String2=".") returned 1 [0201.845] wcscmp (_String1="HH00260_.WMF", _String2="..") returned 1 [0201.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d008 [0201.845] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.845] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.845] wcscat (in: _Dest=0x682d008, _Source="HH00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" [0201.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0201.846] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3549cf00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3549cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0201.846] wcscmp (_String1="HH00276_.WMF", _String2=".") returned 1 [0201.846] wcscmp (_String1="HH00276_.WMF", _String2="..") returned 1 [0201.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bd70 [0201.846] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.846] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.846] wcscat (in: _Dest=0x682bd70, _Source="HH00276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" [0201.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0201.848] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bd1400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5bd1400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0201.848] wcscmp (_String1="HH00334_.WMF", _String2=".") returned 1 [0201.848] wcscmp (_String1="HH00334_.WMF", _String2="..") returned 1 [0201.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0201.848] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.848] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.848] wcscat (in: _Dest=0x682c458, _Source="HH00334_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" [0201.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0201.849] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bf3000, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78bf3000, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0201.849] wcscmp (_String1="HH00443_.WMF", _String2=".") returned 1 [0201.849] wcscmp (_String1="HH00443_.WMF", _String2="..") returned 1 [0201.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d118 [0201.849] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.849] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.849] wcscat (in: _Dest=0x682d118, _Source="HH00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" [0201.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0201.850] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7effdd00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7effdd00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0201.850] wcscmp (_String1="HH00513_.WMF", _String2=".") returned 1 [0201.850] wcscmp (_String1="HH00513_.WMF", _String2="..") returned 1 [0201.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cb40 [0201.850] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.850] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.850] wcscat (in: _Dest=0x682cb40, _Source="HH00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" [0201.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0201.851] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8c4c00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b8c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0201.852] wcscmp (_String1="HH00524_.WMF", _String2=".") returned 1 [0201.852] wcscmp (_String1="HH00524_.WMF", _String2="..") returned 1 [0201.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cde8 [0201.852] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.852] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.852] wcscat (in: _Dest=0x682cde8, _Source="HH00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" [0201.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0201.853] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6929f200, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6929f200, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0201.853] wcscmp (_String1="HH00526_.WMF", _String2=".") returned 1 [0201.853] wcscmp (_String1="HH00526_.WMF", _String2="..") returned 1 [0201.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d3c0 [0201.853] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.853] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.853] wcscat (in: _Dest=0x682d3c0, _Source="HH00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" [0201.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0201.854] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8c500, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0201.854] wcscmp (_String1="HH00527_.WMF", _String2=".") returned 1 [0201.854] wcscmp (_String1="HH00527_.WMF", _String2="..") returned 1 [0201.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0201.854] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.854] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.854] wcscat (in: _Dest=0x682d1a0, _Source="HH00527_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" [0201.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0201.855] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17eb600, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17eb600, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0201.855] wcscmp (_String1="HH00546_.WMF", _String2=".") returned 1 [0201.856] wcscmp (_String1="HH00546_.WMF", _String2="..") returned 1 [0201.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c5f0 [0201.856] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.856] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.856] wcscat (in: _Dest=0x682c5f0, _Source="HH00546_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" [0201.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0201.857] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1b1d00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde1b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0201.857] wcscmp (_String1="HH00601_.WMF", _String2=".") returned 1 [0201.857] wcscmp (_String1="HH00601_.WMF", _String2="..") returned 1 [0201.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c898 [0201.857] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.857] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.857] wcscat (in: _Dest=0x682c898, _Source="HH00601_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" [0201.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0201.858] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3eb0b00, ftCreationTime.dwHighDateTime=0x1bd4bab, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3eb0b00, ftLastWriteTime.dwHighDateTime=0x1bd4bab, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0201.858] wcscmp (_String1="HH00602_.WMF", _String2=".") returned 1 [0201.858] wcscmp (_String1="HH00602_.WMF", _String2="..") returned 1 [0201.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ca30 [0201.858] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.858] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.858] wcscat (in: _Dest=0x682ca30, _Source="HH00602_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" [0201.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0201.860] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe21100, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafe21100, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0201.860] wcscmp (_String1="HH00612_.WMF", _String2=".") returned 1 [0201.860] wcscmp (_String1="HH00612_.WMF", _String2="..") returned 1 [0201.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c4e0 [0201.860] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.860] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.860] wcscat (in: _Dest=0x682c4e0, _Source="HH00612_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" [0201.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0201.968] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d585200, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d585200, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0201.968] wcscmp (_String1="HH00623_.WMF", _String2=".") returned 1 [0201.968] wcscmp (_String1="HH00623_.WMF", _String2="..") returned 1 [0201.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0201.968] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.968] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.968] wcscat (in: _Dest=0x3f25fb8, _Source="HH00623_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" [0201.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0201.969] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bc1a00, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10bc1a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0201.969] wcscmp (_String1="HH00625_.WMF", _String2=".") returned 1 [0201.969] wcscmp (_String1="HH00625_.WMF", _String2="..") returned 1 [0201.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0201.969] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.969] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.969] wcscat (in: _Dest=0x3f25ea8, _Source="HH00625_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" [0201.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0201.970] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0cd800, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b0cd800, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0201.970] wcscmp (_String1="HH00636_.WMF", _String2=".") returned 1 [0201.970] wcscmp (_String1="HH00636_.WMF", _String2="..") returned 1 [0201.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0201.971] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.971] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.971] wcscat (in: _Dest=0x3f26d00, _Source="HH00636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" [0201.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0201.971] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e77500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32e77500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0201.971] wcscmp (_String1="HH00669_.WMF", _String2=".") returned 1 [0201.972] wcscmp (_String1="HH00669_.WMF", _String2="..") returned 1 [0201.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27b58 [0201.972] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.972] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.972] wcscat (in: _Dest=0x3f27b58, _Source="HH00669_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" [0201.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0201.973] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf117c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf117c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0201.973] wcscmp (_String1="HH00681_.WMF", _String2=".") returned 1 [0201.973] wcscmp (_String1="HH00681_.WMF", _String2="..") returned 1 [0201.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0201.973] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.973] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.973] wcscat (in: _Dest=0x3f279c0, _Source="HH00681_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" [0201.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0201.974] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2295e00, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2295e00, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0201.974] wcscmp (_String1="HH00685_.WMF", _String2=".") returned 1 [0201.974] wcscmp (_String1="HH00685_.WMF", _String2="..") returned 1 [0201.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27c68 [0201.974] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.974] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.974] wcscat (in: _Dest=0x3f27c68, _Source="HH00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" [0201.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0201.975] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b64800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b64800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0202.325] wcscmp (_String1="HH00687_.WMF", _String2=".") returned 1 [0202.325] wcscmp (_String1="HH00687_.WMF", _String2="..") returned 1 [0202.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f262e8 [0202.325] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.325] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.325] wcscat (in: _Dest=0x3f262e8, _Source="HH00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" [0202.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0202.326] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad29100, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaad29100, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0202.326] wcscmp (_String1="HH00688_.WMF", _String2=".") returned 1 [0202.326] wcscmp (_String1="HH00688_.WMF", _String2="..") returned 1 [0202.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0202.326] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.326] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.326] wcscat (in: _Dest=0x3f270b8, _Source="HH00688_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" [0202.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0202.327] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30851b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30851b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0202.327] wcscmp (_String1="HH00693_.WMF", _String2=".") returned 1 [0202.327] wcscmp (_String1="HH00693_.WMF", _String2="..") returned 1 [0202.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0202.327] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.328] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.328] wcscat (in: _Dest=0x3f26e10, _Source="HH00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" [0202.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0202.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c9b00, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0202.329] wcscmp (_String1="HH01013_.WMF", _String2=".") returned 1 [0202.329] wcscmp (_String1="HH01013_.WMF", _String2="..") returned 1 [0202.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0202.329] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.329] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.329] wcscat (in: _Dest=0x3f271c8, _Source="HH01013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" [0202.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0202.330] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0202.330] wcscmp (_String1="HH01015_.WMF", _String2=".") returned 1 [0202.330] wcscmp (_String1="HH01015_.WMF", _String2="..") returned 1 [0202.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27828 [0202.330] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.330] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.330] wcscat (in: _Dest=0x3f27828, _Source="HH01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" [0202.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0202.331] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a2e000, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8a2e000, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0202.331] wcscmp (_String1="HH01058_.WMF", _String2=".") returned 1 [0202.331] wcscmp (_String1="HH01058_.WMF", _String2="..") returned 1 [0202.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f269d0 [0202.331] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.331] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.331] wcscat (in: _Dest=0x3f269d0, _Source="HH01058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" [0202.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0202.332] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf197800, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf197800, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0202.332] wcscmp (_String1="HH01065_.WMF", _String2=".") returned 1 [0202.332] wcscmp (_String1="HH01065_.WMF", _String2="..") returned 1 [0202.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26260 [0202.332] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.332] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.332] wcscat (in: _Dest=0x3f26260, _Source="HH01065_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" [0202.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0202.333] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad57b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad57b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0202.333] wcscmp (_String1="HH01080_.WMF", _String2=".") returned 1 [0202.333] wcscmp (_String1="HH01080_.WMF", _String2="..") returned 1 [0202.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0202.334] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.334] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.334] wcscat (in: _Dest=0x3f26f20, _Source="HH01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" [0202.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0202.335] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0202.335] wcscmp (_String1="HH01242_.WMF", _String2=".") returned 1 [0202.335] wcscmp (_String1="HH01242_.WMF", _String2="..") returned 1 [0202.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f278b0 [0202.335] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.335] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.335] wcscat (in: _Dest=0x3f278b0, _Source="HH01242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" [0202.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0202.336] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0202.336] wcscmp (_String1="HH01291_.WMF", _String2=".") returned 1 [0202.336] wcscmp (_String1="HH01291_.WMF", _String2="..") returned 1 [0202.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0202.336] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.336] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.336] wcscat (in: _Dest=0x3f26ae0, _Source="HH01291_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" [0202.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0202.337] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0202.337] wcscmp (_String1="HH01329_.WMF", _String2=".") returned 1 [0202.337] wcscmp (_String1="HH01329_.WMF", _String2="..") returned 1 [0202.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0202.337] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.337] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.337] wcscat (in: _Dest=0x3f26c78, _Source="HH01329_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" [0202.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0202.338] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253cea00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x253cea00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0202.338] wcscmp (_String1="HH01461_.WMF", _String2=".") returned 1 [0202.338] wcscmp (_String1="HH01461_.WMF", _String2="..") returned 1 [0202.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0202.338] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.338] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.338] wcscat (in: _Dest=0x3f27250, _Source="HH01461_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" [0202.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0202.339] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0202.339] wcscmp (_String1="HH01618_.WMF", _String2=".") returned 1 [0202.339] wcscmp (_String1="HH01618_.WMF", _String2="..") returned 1 [0202.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0202.340] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.340] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.340] wcscat (in: _Dest=0x3f26e98, _Source="HH01618_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" [0202.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0202.341] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1844f700, ftCreationTime.dwHighDateTime=0x1bd4c41, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1844f700, ftLastWriteTime.dwHighDateTime=0x1bd4c41, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0202.341] wcscmp (_String1="HH01759_.WMF", _String2=".") returned 1 [0202.341] wcscmp (_String1="HH01759_.WMF", _String2="..") returned 1 [0202.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0202.341] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.341] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.341] wcscat (in: _Dest=0x3f274f8, _Source="HH01759_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" [0202.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0202.342] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c86600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0c86600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0202.342] wcscmp (_String1="HH01875_.WMF", _String2=".") returned 1 [0202.342] wcscmp (_String1="HH01875_.WMF", _String2="..") returned 1 [0202.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0202.342] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.342] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.342] wcscat (in: _Dest=0x3f260c8, _Source="HH01875_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" [0202.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0202.343] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6774a00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6774a00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0202.343] wcscmp (_String1="HH01923_.WMF", _String2=".") returned 1 [0202.343] wcscmp (_String1="HH01923_.WMF", _String2="..") returned 1 [0202.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27470 [0202.343] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.344] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.344] wcscat (in: _Dest=0x3f27470, _Source="HH01923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" [0202.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0202.344] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0202.345] wcscmp (_String1="HH02155_.WMF", _String2=".") returned 1 [0202.345] wcscmp (_String1="HH02155_.WMF", _String2="..") returned 1 [0202.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0202.345] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.345] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.345] wcscat (in: _Dest=0x3f27580, _Source="HH02155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" [0202.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0202.346] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d9a00, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd07d9a00, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0202.346] wcscmp (_String1="HH02166_.WMF", _String2=".") returned 1 [0202.346] wcscmp (_String1="HH02166_.WMF", _String2="..") returned 1 [0202.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f277a0 [0202.346] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.346] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.346] wcscat (in: _Dest=0x3f277a0, _Source="HH02166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" [0202.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0202.347] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47199800, ftCreationTime.dwHighDateTime=0x1bd4c56, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47199800, ftLastWriteTime.dwHighDateTime=0x1bd4c56, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0202.347] wcscmp (_String1="HH02282_.WMF", _String2=".") returned 1 [0202.347] wcscmp (_String1="HH02282_.WMF", _String2="..") returned 1 [0202.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0202.347] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.347] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.347] wcscat (in: _Dest=0x3f266a0, _Source="HH02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" [0202.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0202.348] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4da7600, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4da7600, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0202.348] wcscmp (_String1="HH02298_.WMF", _String2=".") returned 1 [0202.348] wcscmp (_String1="HH02298_.WMF", _String2="..") returned 1 [0202.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26590 [0202.348] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.348] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.348] wcscat (in: _Dest=0x3f26590, _Source="HH02298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" [0202.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0202.349] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69022300, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69022300, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0202.349] wcscmp (_String1="HH02312_.WMF", _String2=".") returned 1 [0202.349] wcscmp (_String1="HH02312_.WMF", _String2="..") returned 1 [0202.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0202.349] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.349] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.349] wcscat (in: _Dest=0x3f26948, _Source="HH02312_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" [0202.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0202.350] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d3d200, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29d3d200, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0202.350] wcscmp (_String1="HH02313_.WMF", _String2=".") returned 1 [0202.350] wcscmp (_String1="HH02313_.WMF", _String2="..") returned 1 [0202.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27a48 [0202.350] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.350] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.351] wcscat (in: _Dest=0x3f27a48, _Source="HH02313_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" [0202.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0202.351] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed850100, ftCreationTime.dwHighDateTime=0x1bf0b4c, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed850100, ftLastWriteTime.dwHighDateTime=0x1bf0b4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0202.351] wcscmp (_String1="HM00005_.WMF", _String2=".") returned 1 [0202.352] wcscmp (_String1="HM00005_.WMF", _String2="..") returned 1 [0202.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0202.352] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.352] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.352] wcscat (in: _Dest=0x3f26618, _Source="HM00005_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" [0202.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0202.353] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d2a700, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d2a700, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0202.353] wcscmp (_String1="HM00114_.WMF", _String2=".") returned 1 [0202.353] wcscmp (_String1="HM00114_.WMF", _String2="..") returned 1 [0202.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0202.353] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.353] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.353] wcscat (in: _Dest=0x3f26370, _Source="HM00114_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" [0202.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0202.354] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f53ee00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f53ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0202.354] wcscmp (_String1="HM00116_.WMF", _String2=".") returned 1 [0202.354] wcscmp (_String1="HM00116_.WMF", _String2="..") returned 1 [0202.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0202.354] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.354] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.354] wcscat (in: _Dest=0x3f267b0, _Source="HM00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" [0202.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0202.355] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1242100, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1242100, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0202.355] wcscmp (_String1="HM00172_.WMF", _String2=".") returned 1 [0202.355] wcscmp (_String1="HM00172_.WMF", _String2="..") returned 1 [0202.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27cf0 [0202.355] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.355] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.355] wcscat (in: _Dest=0x3f27cf0, _Source="HM00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" [0202.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0202.356] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c75e300, ftCreationTime.dwHighDateTime=0x1bf3c3d, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c75e300, ftLastWriteTime.dwHighDateTime=0x1bf3c3d, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0202.356] wcscmp (_String1="HM00426_.WMF", _String2=".") returned 1 [0202.356] wcscmp (_String1="HM00426_.WMF", _String2="..") returned 1 [0202.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0202.356] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.356] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.356] wcscat (in: _Dest=0x3f25f30, _Source="HM00426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" [0202.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0202.358] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0202.358] wcscmp (_String1="HTECH_01.MID", _String2=".") returned 1 [0202.358] wcscmp (_String1="HTECH_01.MID", _String2="..") returned 1 [0202.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0202.358] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.358] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.358] wcscat (in: _Dest=0x3f26838, _Source="HTECH_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" [0202.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0202.359] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146cc00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0202.359] wcscmp (_String1="IN00046_.WMF", _String2=".") returned 1 [0202.359] wcscmp (_String1="IN00046_.WMF", _String2="..") returned 1 [0202.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0202.359] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.359] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.359] wcscat (in: _Dest=0x3f26508, _Source="IN00046_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" [0202.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0202.361] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb628bb00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb628bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0202.361] wcscmp (_String1="IN00118_.WMF", _String2=".") returned 1 [0202.361] wcscmp (_String1="IN00118_.WMF", _String2="..") returned 1 [0202.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0202.361] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0202.361] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0202.361] wcscat (in: _Dest=0x3f27030, _Source="IN00118_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" [0202.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0203.182] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa99f6500, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa99f6500, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0203.182] wcscmp (_String1="IN00177_.WMF", _String2=".") returned 1 [0203.182] wcscmp (_String1="IN00177_.WMF", _String2="..") returned 1 [0203.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0203.182] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.182] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.183] wcscat (in: _Dest=0x3f26480, _Source="IN00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" [0203.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0203.184] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd23d900, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd23d900, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0203.184] wcscmp (_String1="IN00204_.WMF", _String2=".") returned 1 [0203.184] wcscmp (_String1="IN00204_.WMF", _String2="..") returned 1 [0203.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0203.185] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.185] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.185] wcscat (in: _Dest=0x3f263f8, _Source="IN00204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" [0203.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0203.186] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e22c100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e22c100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0203.186] wcscmp (_String1="IN00233_.WMF", _String2=".") returned 1 [0203.187] wcscmp (_String1="IN00233_.WMF", _String2="..") returned 1 [0203.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27ad0 [0203.187] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.187] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.187] wcscat (in: _Dest=0x3f27ad0, _Source="IN00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" [0203.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0203.188] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b776b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b776b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0203.189] wcscmp (_String1="IN00343_.WMF", _String2=".") returned 1 [0203.189] wcscmp (_String1="IN00343_.WMF", _String2="..") returned 1 [0203.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0203.189] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.189] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.189] wcscat (in: _Dest=0x3f26728, _Source="IN00343_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" [0203.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0203.191] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b2b700, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56b2b700, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0204.304] wcscmp (_String1="IN00346_.WMF", _String2=".") returned 1 [0204.304] wcscmp (_String1="IN00346_.WMF", _String2="..") returned 1 [0204.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d910 [0204.305] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.305] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.305] wcscat (in: _Dest=0x682d910, _Source="IN00346_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" [0204.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0204.379] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ba900, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f8ba900, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0204.379] wcscmp (_String1="IN00351_.WMF", _String2=".") returned 1 [0204.379] wcscmp (_String1="IN00351_.WMF", _String2="..") returned 1 [0204.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d800 [0204.379] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.380] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.380] wcscat (in: _Dest=0x682d800, _Source="IN00351_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" [0204.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0204.381] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46233f00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46233f00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0204.381] wcscmp (_String1="IN00557_.WMF", _String2=".") returned 1 [0204.381] wcscmp (_String1="IN00557_.WMF", _String2="..") returned 1 [0204.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0204.381] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.381] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.381] wcscat (in: _Dest=0x3f26728, _Source="IN00557_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" [0204.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0204.383] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d00000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d00000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0204.383] wcscmp (_String1="IN00915_.WMF", _String2=".") returned 1 [0204.383] wcscmp (_String1="IN00915_.WMF", _String2="..") returned 1 [0204.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0204.383] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.383] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.383] wcscat (in: _Dest=0x3f26fa8, _Source="IN00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" [0204.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0204.384] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa58100, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa58100, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0204.385] wcscmp (_String1="IN00919_.WMF", _String2=".") returned 1 [0204.385] wcscmp (_String1="IN00919_.WMF", _String2="..") returned 1 [0204.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26a58 [0204.385] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.385] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.385] wcscat (in: _Dest=0x3f26a58, _Source="IN00919_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" [0204.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0204.386] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ec00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa9ec00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0204.386] wcscmp (_String1="IN00956_.WMF", _String2=".") returned 1 [0204.386] wcscmp (_String1="IN00956_.WMF", _String2="..") returned 1 [0204.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd90 [0204.386] wcscpy (in: _Dest=0x66efd90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.386] wcscat (in: _Dest=0x66efd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.387] wcscat (in: _Dest=0x66efd90, _Source="IN00956_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" [0204.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0204.388] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97432b00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97432b00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0204.388] wcscmp (_String1="IN00957_.WMF", _String2=".") returned 1 [0204.388] wcscmp (_String1="IN00957_.WMF", _String2="..") returned 1 [0204.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efa60 [0204.388] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.388] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.388] wcscat (in: _Dest=0x66efa60, _Source="IN00957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" [0204.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0204.389] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0204.389] wcscmp (_String1="INDST_01.MID", _String2=".") returned 1 [0204.390] wcscmp (_String1="INDST_01.MID", _String2="..") returned 1 [0204.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0148 [0204.390] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.390] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.390] wcscat (in: _Dest=0x66f0148, _Source="INDST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" [0204.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0204.391] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cfe900, ftCreationTime.dwHighDateTime=0x1bd63c5, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22cfe900, ftLastWriteTime.dwHighDateTime=0x1bd63c5, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0204.391] wcscmp (_String1="J0075478.GIF", _String2=".") returned 1 [0204.391] wcscmp (_String1="J0075478.GIF", _String2="..") returned 1 [0204.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eea70 [0204.391] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.391] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.391] wcscat (in: _Dest=0x66eea70, _Source="J0075478.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" [0204.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0204.392] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0204.392] wcscmp (_String1="J0086384.WMF", _String2=".") returned 1 [0204.392] wcscmp (_String1="J0086384.WMF", _String2="..") returned 1 [0204.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee850 [0204.393] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.393] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.393] wcscat (in: _Dest=0x66ee850, _Source="J0086384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" [0204.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0204.394] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0204.394] wcscmp (_String1="J0086420.WMF", _String2=".") returned 1 [0204.394] wcscmp (_String1="J0086420.WMF", _String2="..") returned 1 [0204.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeaf8 [0204.394] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.394] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.394] wcscat (in: _Dest=0x66eeaf8, _Source="J0086420.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" [0204.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0204.396] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0204.396] wcscmp (_String1="J0086424.WMF", _String2=".") returned 1 [0204.396] wcscmp (_String1="J0086424.WMF", _String2="..") returned 1 [0204.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eefc0 [0204.396] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.396] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.396] wcscat (in: _Dest=0x66eefc0, _Source="J0086424.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" [0204.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0204.397] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0204.397] wcscmp (_String1="J0086426.WMF", _String2=".") returned 1 [0204.397] wcscmp (_String1="J0086426.WMF", _String2="..") returned 1 [0204.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0204.397] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.397] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.397] wcscat (in: _Dest=0x66ee520, _Source="J0086426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" [0204.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0204.399] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0204.399] wcscmp (_String1="J0086428.WMF", _String2=".") returned 1 [0204.399] wcscmp (_String1="J0086428.WMF", _String2="..") returned 1 [0204.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec90 [0204.399] wcscpy (in: _Dest=0x66eec90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.399] wcscat (in: _Dest=0x66eec90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.399] wcscat (in: _Dest=0x66eec90, _Source="J0086428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" [0204.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0204.400] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0204.400] wcscmp (_String1="J0086432.WMF", _String2=".") returned 1 [0204.400] wcscmp (_String1="J0086432.WMF", _String2="..") returned 1 [0204.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efae8 [0204.400] wcscpy (in: _Dest=0x66efae8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.400] wcscat (in: _Dest=0x66efae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.400] wcscat (in: _Dest=0x66efae8, _Source="J0086432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" [0204.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0204.410] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0204.410] wcscmp (_String1="J0086478.WMF", _String2=".") returned 1 [0204.410] wcscmp (_String1="J0086478.WMF", _String2="..") returned 1 [0204.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef0d0 [0204.410] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.410] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.410] wcscat (in: _Dest=0x66ef0d0, _Source="J0086478.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" [0204.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0204.412] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0204.412] wcscmp (_String1="J0089945.WMF", _String2=".") returned 1 [0204.412] wcscmp (_String1="J0089945.WMF", _String2="..") returned 1 [0204.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee498 [0204.412] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.412] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.412] wcscat (in: _Dest=0x66ee498, _Source="J0089945.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" [0204.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0204.413] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0204.413] wcscmp (_String1="J0089992.WMF", _String2=".") returned 1 [0204.413] wcscmp (_String1="J0089992.WMF", _String2="..") returned 1 [0204.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee740 [0204.413] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.413] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.413] wcscat (in: _Dest=0x66ee740, _Source="J0089992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" [0204.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0205.479] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0205.479] wcscmp (_String1="J0090027.WMF", _String2=".") returned 1 [0205.479] wcscmp (_String1="J0090027.WMF", _String2="..") returned 1 [0205.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bdf8 [0205.479] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.479] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.480] wcscat (in: _Dest=0x682bdf8, _Source="J0090027.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" [0205.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0205.481] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0205.481] wcscmp (_String1="J0090087.WMF", _String2=".") returned 1 [0205.481] wcscmp (_String1="J0090087.WMF", _String2="..") returned 1 [0205.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d448 [0205.481] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.482] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.482] wcscat (in: _Dest=0x682d448, _Source="J0090087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" [0205.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0205.482] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0205.483] wcscmp (_String1="J0090089.WMF", _String2=".") returned 1 [0205.483] wcscmp (_String1="J0090089.WMF", _String2="..") returned 1 [0205.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c678 [0205.483] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.483] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.483] wcscat (in: _Dest=0x682c678, _Source="J0090089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" [0205.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0205.484] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0205.484] wcscmp (_String1="J0090149.WMF", _String2=".") returned 1 [0205.484] wcscmp (_String1="J0090149.WMF", _String2="..") returned 1 [0205.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cc50 [0205.484] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.484] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.484] wcscat (in: _Dest=0x682cc50, _Source="J0090149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" [0205.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0205.485] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0205.485] wcscmp (_String1="J0090390.WMF", _String2=".") returned 1 [0205.485] wcscmp (_String1="J0090390.WMF", _String2="..") returned 1 [0205.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d558 [0205.485] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.485] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.485] wcscat (in: _Dest=0x682d558, _Source="J0090390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" [0205.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0205.486] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ba900, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd20ba900, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0205.486] wcscmp (_String1="J0090777.WMF", _String2=".") returned 1 [0205.486] wcscmp (_String1="J0090777.WMF", _String2="..") returned 1 [0205.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d008 [0205.486] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.486] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.486] wcscat (in: _Dest=0x682d008, _Source="J0090777.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" [0205.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0205.487] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0205.487] wcscmp (_String1="J0090779.WMF", _String2=".") returned 1 [0205.487] wcscmp (_String1="J0090779.WMF", _String2="..") returned 1 [0205.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bd70 [0205.487] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.487] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.487] wcscat (in: _Dest=0x682bd70, _Source="J0090779.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" [0205.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0205.488] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0205.488] wcscmp (_String1="J0090781.WMF", _String2=".") returned 1 [0205.488] wcscmp (_String1="J0090781.WMF", _String2="..") returned 1 [0205.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0205.488] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.488] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.488] wcscat (in: _Dest=0x682c458, _Source="J0090781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" [0205.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0205.489] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0205.489] wcscmp (_String1="J0090783.WMF", _String2=".") returned 1 [0205.489] wcscmp (_String1="J0090783.WMF", _String2="..") returned 1 [0205.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d3c0 [0205.489] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.489] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.489] wcscat (in: _Dest=0x682d3c0, _Source="J0090783.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" [0205.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0205.492] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0205.492] wcscmp (_String1="J0093905.WMF", _String2=".") returned 1 [0205.492] wcscmp (_String1="J0093905.WMF", _String2="..") returned 1 [0205.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0205.492] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.492] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.492] wcscat (in: _Dest=0x682d1a0, _Source="J0093905.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" [0205.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0205.493] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0205.494] wcscmp (_String1="J0098497.WMF", _String2=".") returned 1 [0205.494] wcscmp (_String1="J0098497.WMF", _String2="..") returned 1 [0205.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c5f0 [0205.494] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.494] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.494] wcscat (in: _Dest=0x682c5f0, _Source="J0098497.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" [0205.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0205.495] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0205.495] wcscmp (_String1="J0099145.JPG", _String2=".") returned 1 [0205.495] wcscmp (_String1="J0099145.JPG", _String2="..") returned 1 [0205.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c898 [0205.495] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.495] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.495] wcscat (in: _Dest=0x682c898, _Source="J0099145.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" [0205.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0205.496] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0205.496] wcscmp (_String1="J0099146.WMF", _String2=".") returned 1 [0205.496] wcscmp (_String1="J0099146.WMF", _String2="..") returned 1 [0205.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ca30 [0205.496] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.496] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.496] wcscat (in: _Dest=0x682ca30, _Source="J0099146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" [0205.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0205.499] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0205.499] wcscmp (_String1="J0099147.JPG", _String2=".") returned 1 [0205.499] wcscmp (_String1="J0099147.JPG", _String2="..") returned 1 [0205.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d4d0 [0205.500] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.500] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.500] wcscat (in: _Dest=0x682d4d0, _Source="J0099147.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" [0205.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0205.501] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0205.501] wcscmp (_String1="J0099148.JPG", _String2=".") returned 1 [0205.501] wcscmp (_String1="J0099148.JPG", _String2="..") returned 1 [0205.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0205.501] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.501] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.501] wcscat (in: _Dest=0x682c128, _Source="J0099148.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" [0205.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0205.504] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0205.504] wcscmp (_String1="J0099149.WMF", _String2=".") returned 1 [0205.504] wcscmp (_String1="J0099149.WMF", _String2="..") returned 1 [0205.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf90 [0205.505] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.505] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.505] wcscat (in: _Dest=0x682bf90, _Source="J0099149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" [0205.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0205.506] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0207.149] wcscmp (_String1="J0099150.JPG", _String2=".") returned 1 [0207.149] wcscmp (_String1="J0099150.JPG", _String2="..") returned 1 [0207.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cbc8 [0207.150] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.150] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.150] wcscat (in: _Dest=0x682cbc8, _Source="J0099150.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" [0207.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0207.201] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0207.201] wcscmp (_String1="J0099151.WMF", _String2=".") returned 1 [0207.201] wcscmp (_String1="J0099151.WMF", _String2="..") returned 1 [0207.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0207.201] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.201] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.201] wcscat (in: _Dest=0x682c568, _Source="J0099151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" [0207.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0207.202] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0207.202] wcscmp (_String1="J0099152.JPG", _String2=".") returned 1 [0207.202] wcscmp (_String1="J0099152.JPG", _String2="..") returned 1 [0207.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0207.203] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.203] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.203] wcscat (in: _Dest=0x682d228, _Source="J0099152.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" [0207.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0207.203] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0207.203] wcscmp (_String1="J0099153.WMF", _String2=".") returned 1 [0207.203] wcscmp (_String1="J0099153.WMF", _String2="..") returned 1 [0207.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0207.204] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.204] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.204] wcscat (in: _Dest=0x682bf08, _Source="J0099153.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" [0207.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0207.204] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0207.205] wcscmp (_String1="J0099154.JPG", _String2=".") returned 1 [0207.205] wcscmp (_String1="J0099154.JPG", _String2="..") returned 1 [0207.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0207.205] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.205] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.205] wcscat (in: _Dest=0x682db30, _Source="J0099154.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" [0207.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0207.206] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0207.206] wcscmp (_String1="J0099155.JPG", _String2=".") returned 1 [0207.206] wcscmp (_String1="J0099155.JPG", _String2="..") returned 1 [0207.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d668 [0207.206] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.206] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.206] wcscat (in: _Dest=0x682d668, _Source="J0099155.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" [0207.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0207.207] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0207.207] wcscmp (_String1="J0099156.JPG", _String2=".") returned 1 [0207.207] wcscmp (_String1="J0099156.JPG", _String2="..") returned 1 [0207.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d5e0 [0207.207] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.207] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.207] wcscat (in: _Dest=0x682d5e0, _Source="J0099156.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" [0207.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0207.208] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0207.208] wcscmp (_String1="J0099157.JPG", _String2=".") returned 1 [0207.208] wcscmp (_String1="J0099157.JPG", _String2="..") returned 1 [0207.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c920 [0207.208] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.208] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.208] wcscat (in: _Dest=0x682c920, _Source="J0099157.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" [0207.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0207.209] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0207.209] wcscmp (_String1="J0099158.WMF", _String2=".") returned 1 [0207.209] wcscmp (_String1="J0099158.WMF", _String2="..") returned 1 [0207.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0207.209] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.209] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.209] wcscat (in: _Dest=0x682dc40, _Source="J0099158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" [0207.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0207.210] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0207.211] wcscmp (_String1="J0099159.WMF", _String2=".") returned 1 [0207.211] wcscmp (_String1="J0099159.WMF", _String2="..") returned 1 [0207.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d778 [0207.211] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.211] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.211] wcscat (in: _Dest=0x682d778, _Source="J0099159.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" [0207.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0207.212] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0207.212] wcscmp (_String1="J0099160.JPG", _String2=".") returned 1 [0207.212] wcscmp (_String1="J0099160.JPG", _String2="..") returned 1 [0207.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0207.212] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.212] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.212] wcscat (in: _Dest=0x682d888, _Source="J0099160.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" [0207.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0207.213] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0207.213] wcscmp (_String1="J0099161.JPG", _String2=".") returned 1 [0207.213] wcscmp (_String1="J0099161.JPG", _String2="..") returned 1 [0207.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efbf8 [0207.213] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.213] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.213] wcscat (in: _Dest=0x66efbf8, _Source="J0099161.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" [0207.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0207.214] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0207.214] wcscmp (_String1="J0099162.JPG", _String2=".") returned 1 [0207.214] wcscmp (_String1="J0099162.JPG", _String2="..") returned 1 [0207.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef048 [0207.214] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.214] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.214] wcscat (in: _Dest=0x66ef048, _Source="J0099162.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" [0207.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0207.215] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0207.215] wcscmp (_String1="J0099163.WMF", _String2=".") returned 1 [0207.215] wcscmp (_String1="J0099163.WMF", _String2="..") returned 1 [0207.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efea0 [0207.215] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.215] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.215] wcscat (in: _Dest=0x66efea0, _Source="J0099163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" [0207.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0207.216] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0207.216] wcscmp (_String1="J0099164.WMF", _String2=".") returned 1 [0207.216] wcscmp (_String1="J0099164.WMF", _String2="..") returned 1 [0207.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f03f0 [0207.216] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.216] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.216] wcscat (in: _Dest=0x66f03f0, _Source="J0099164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" [0207.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0207.217] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0207.217] wcscmp (_String1="J0099165.JPG", _String2=".") returned 1 [0207.217] wcscmp (_String1="J0099165.JPG", _String2="..") returned 1 [0207.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec08 [0207.218] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.218] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.218] wcscat (in: _Dest=0x66eec08, _Source="J0099165.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" [0207.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0207.219] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0207.219] wcscmp (_String1="J0099166.JPG", _String2=".") returned 1 [0207.219] wcscmp (_String1="J0099166.JPG", _String2="..") returned 1 [0207.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eee28 [0207.219] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.219] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.219] wcscat (in: _Dest=0x66eee28, _Source="J0099166.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" [0207.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0207.220] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0207.220] wcscmp (_String1="J0099167.JPG", _String2=".") returned 1 [0207.220] wcscmp (_String1="J0099167.JPG", _String2="..") returned 1 [0207.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0207.220] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.220] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.220] wcscat (in: _Dest=0x66ef730, _Source="J0099167.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" [0207.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0207.221] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0207.221] wcscmp (_String1="J0099168.JPG", _String2=".") returned 1 [0207.221] wcscmp (_String1="J0099168.JPG", _String2="..") returned 1 [0207.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0207.221] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.221] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.221] wcscat (in: _Dest=0x66ee7c8, _Source="J0099168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" [0207.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0207.222] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0207.222] wcscmp (_String1="J0099169.WMF", _String2=".") returned 1 [0207.222] wcscmp (_String1="J0099169.WMF", _String2="..") returned 1 [0207.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeb80 [0207.222] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.222] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.222] wcscat (in: _Dest=0x66eeb80, _Source="J0099169.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" [0207.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0207.223] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0207.223] wcscmp (_String1="J0099170.WMF", _String2=".") returned 1 [0207.223] wcscmp (_String1="J0099170.WMF", _String2="..") returned 1 [0207.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee9e8 [0207.223] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.223] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.223] wcscat (in: _Dest=0x66ee9e8, _Source="J0099170.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" [0207.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0207.224] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0207.224] wcscmp (_String1="J0099171.WMF", _String2=".") returned 1 [0207.225] wcscmp (_String1="J0099171.WMF", _String2="..") returned 1 [0207.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef378 [0207.225] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.225] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.225] wcscat (in: _Dest=0x66ef378, _Source="J0099171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" [0207.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0207.226] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0207.226] wcscmp (_String1="J0099172.WMF", _String2=".") returned 1 [0207.226] wcscmp (_String1="J0099172.WMF", _String2="..") returned 1 [0207.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0207.226] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.226] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.226] wcscat (in: _Dest=0x66ef400, _Source="J0099172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" [0207.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0207.227] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0207.227] wcscmp (_String1="J0099173.WMF", _String2=".") returned 1 [0207.227] wcscmp (_String1="J0099173.WMF", _String2="..") returned 1 [0207.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef9d8 [0207.228] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.228] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.228] wcscat (in: _Dest=0x66ef9d8, _Source="J0099173.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" [0207.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0207.229] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0207.229] wcscmp (_String1="J0099174.WMF", _String2=".") returned 1 [0207.229] wcscmp (_String1="J0099174.WMF", _String2="..") returned 1 [0207.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee960 [0207.229] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.229] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.229] wcscat (in: _Dest=0x66ee960, _Source="J0099174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" [0207.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0207.230] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0207.230] wcscmp (_String1="J0099175.WMF", _String2=".") returned 1 [0207.230] wcscmp (_String1="J0099175.WMF", _String2="..") returned 1 [0207.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef1e0 [0207.230] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.230] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.230] wcscat (in: _Dest=0x66ef1e0, _Source="J0099175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" [0207.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0207.231] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0207.231] wcscmp (_String1="J0099176.WMF", _String2=".") returned 1 [0207.231] wcscmp (_String1="J0099176.WMF", _String2="..") returned 1 [0207.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0207.231] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.231] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.231] wcscat (in: _Dest=0x66effb0, _Source="J0099176.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" [0207.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0207.232] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0207.232] wcscmp (_String1="J0099177.WMF", _String2=".") returned 1 [0207.232] wcscmp (_String1="J0099177.WMF", _String2="..") returned 1 [0207.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeda0 [0207.232] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.232] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.232] wcscat (in: _Dest=0x66eeda0, _Source="J0099177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" [0207.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0207.233] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0207.233] wcscmp (_String1="J0099178.WMF", _String2=".") returned 1 [0207.234] wcscmp (_String1="J0099178.WMF", _String2="..") returned 1 [0207.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd08 [0207.234] wcscpy (in: _Dest=0x66efd08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.234] wcscat (in: _Dest=0x66efd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.234] wcscat (in: _Dest=0x66efd08, _Source="J0099178.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" [0207.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0207.235] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0207.235] wcscmp (_String1="J0099179.WMF", _String2=".") returned 1 [0207.235] wcscmp (_String1="J0099179.WMF", _String2="..") returned 1 [0207.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0207.235] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.235] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.235] wcscat (in: _Dest=0x66ef268, _Source="J0099179.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" [0207.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0207.236] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0207.236] wcscmp (_String1="J0099180.WMF", _String2=".") returned 1 [0207.236] wcscmp (_String1="J0099180.WMF", _String2="..") returned 1 [0207.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee630 [0207.236] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.236] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.236] wcscat (in: _Dest=0x66ee630, _Source="J0099180.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" [0207.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0207.295] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0207.295] wcscmp (_String1="J0099181.WMF", _String2=".") returned 1 [0207.295] wcscmp (_String1="J0099181.WMF", _String2="..") returned 1 [0207.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0207.295] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.295] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.295] wcscat (in: _Dest=0x66f00c0, _Source="J0099181.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" [0207.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0207.296] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0207.296] wcscmp (_String1="J0099182.WMF", _String2=".") returned 1 [0207.296] wcscmp (_String1="J0099182.WMF", _String2="..") returned 1 [0207.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f01d0 [0207.296] wcscpy (in: _Dest=0x66f01d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.296] wcscat (in: _Dest=0x66f01d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.296] wcscat (in: _Dest=0x66f01d0, _Source="J0099182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" [0207.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f01d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0207.297] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0207.297] wcscmp (_String1="J0099183.WMF", _String2=".") returned 1 [0207.297] wcscmp (_String1="J0099183.WMF", _String2="..") returned 1 [0207.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0207.297] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.297] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.297] wcscat (in: _Dest=0x66eeeb0, _Source="J0099183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" [0207.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0207.298] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0207.300] wcscmp (_String1="J0099184.WMF", _String2=".") returned 1 [0207.300] wcscmp (_String1="J0099184.WMF", _String2="..") returned 1 [0207.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0207.300] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.300] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.300] wcscat (in: _Dest=0x66eef38, _Source="J0099184.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" [0207.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0207.301] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0207.301] wcscmp (_String1="J0099185.JPG", _String2=".") returned 1 [0207.301] wcscmp (_String1="J0099185.JPG", _String2="..") returned 1 [0207.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0207.301] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.301] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.301] wcscat (in: _Dest=0x66ef950, _Source="J0099185.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" [0207.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0207.302] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad71cf00, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad71cf00, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0207.302] wcscmp (_String1="J0099186.JPG", _String2=".") returned 1 [0207.302] wcscmp (_String1="J0099186.JPG", _String2="..") returned 1 [0207.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0207.302] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.302] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.302] wcscat (in: _Dest=0x66ef2f0, _Source="J0099186.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" [0207.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0207.303] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5199400, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5199400, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0207.303] wcscmp (_String1="J0099187.JPG", _String2=".") returned 1 [0207.303] wcscmp (_String1="J0099187.JPG", _String2="..") returned 1 [0207.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efe18 [0207.304] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.304] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.304] wcscat (in: _Dest=0x66efe18, _Source="J0099187.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" [0207.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0207.305] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0207.305] wcscmp (_String1="J0099188.JPG", _String2=".") returned 1 [0207.305] wcscmp (_String1="J0099188.JPG", _String2="..") returned 1 [0207.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0258 [0207.305] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.305] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.305] wcscat (in: _Dest=0x66f0258, _Source="J0099188.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" [0207.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0207.306] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0207.306] wcscmp (_String1="J0099189.JPG", _String2=".") returned 1 [0207.306] wcscmp (_String1="J0099189.JPG", _String2="..") returned 1 [0207.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efc80 [0207.306] wcscpy (in: _Dest=0x66efc80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.306] wcscat (in: _Dest=0x66efc80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.306] wcscat (in: _Dest=0x66efc80, _Source="J0099189.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" [0207.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efc80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0207.307] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0207.307] wcscmp (_String1="J0099190.JPG", _String2=".") returned 1 [0207.307] wcscmp (_String1="J0099190.JPG", _String2="..") returned 1 [0207.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee6b8 [0207.307] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.307] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.307] wcscat (in: _Dest=0x66ee6b8, _Source="J0099190.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" [0207.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0207.308] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0207.308] wcscmp (_String1="J0099191.JPG", _String2=".") returned 1 [0207.309] wcscmp (_String1="J0099191.JPG", _String2="..") returned 1 [0207.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0207.309] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.309] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.309] wcscat (in: _Dest=0x66ef510, _Source="J0099191.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" [0207.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0207.310] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0207.310] wcscmp (_String1="J0099192.GIF", _String2=".") returned 1 [0207.310] wcscmp (_String1="J0099192.GIF", _String2="..") returned 1 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eff28 [0207.310] wcscpy (in: _Dest=0x66eff28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.310] wcscat (in: _Dest=0x66eff28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.310] wcscat (in: _Dest=0x66eff28, _Source="J0099192.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" [0207.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eff28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0207.311] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0207.311] wcscmp (_String1="J0099193.GIF", _String2=".") returned 1 [0207.311] wcscmp (_String1="J0099193.GIF", _String2="..") returned 1 [0207.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee5a8 [0207.311] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.311] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.311] wcscat (in: _Dest=0x66ee5a8, _Source="J0099193.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" [0207.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0207.312] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0207.312] wcscmp (_String1="J0099194.GIF", _String2=".") returned 1 [0207.312] wcscmp (_String1="J0099194.GIF", _String2="..") returned 1 [0207.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eed18 [0207.313] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.313] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.313] wcscat (in: _Dest=0x66eed18, _Source="J0099194.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" [0207.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0207.314] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0207.314] wcscmp (_String1="J0099195.GIF", _String2=".") returned 1 [0207.314] wcscmp (_String1="J0099195.GIF", _String2="..") returned 1 [0207.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0368 [0207.314] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.314] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.314] wcscat (in: _Dest=0x66f0368, _Source="J0099195.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" [0207.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0207.315] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0207.315] wcscmp (_String1="J0099196.GIF", _String2=".") returned 1 [0207.315] wcscmp (_String1="J0099196.GIF", _String2="..") returned 1 [0207.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0207.315] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.315] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.315] wcscat (in: _Dest=0x3f26480, _Source="J0099196.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" [0207.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0207.316] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0207.316] wcscmp (_String1="J0099197.GIF", _String2=".") returned 1 [0207.316] wcscmp (_String1="J0099197.GIF", _String2="..") returned 1 [0207.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0207.316] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.316] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.316] wcscat (in: _Dest=0x3f263f8, _Source="J0099197.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" [0207.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0207.317] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0207.317] wcscmp (_String1="J0099198.GIF", _String2=".") returned 1 [0207.317] wcscmp (_String1="J0099198.GIF", _String2="..") returned 1 [0207.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27ad0 [0207.318] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.318] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.318] wcscat (in: _Dest=0x3f27ad0, _Source="J0099198.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" [0207.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0207.319] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0207.319] wcscmp (_String1="J0099199.GIF", _String2=".") returned 1 [0207.319] wcscmp (_String1="J0099199.GIF", _String2="..") returned 1 [0207.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0207.319] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.319] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.319] wcscat (in: _Dest=0x3f26508, _Source="J0099199.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" [0207.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0207.320] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0207.320] wcscmp (_String1="J0099200.GIF", _String2=".") returned 1 [0207.320] wcscmp (_String1="J0099200.GIF", _String2="..") returned 1 [0207.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27470 [0207.320] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.320] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.320] wcscat (in: _Dest=0x3f27470, _Source="J0099200.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" [0207.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0207.322] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0207.322] wcscmp (_String1="J0099201.GIF", _String2=".") returned 1 [0207.322] wcscmp (_String1="J0099201.GIF", _String2="..") returned 1 [0207.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0207.322] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.322] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.322] wcscat (in: _Dest=0x3f260c8, _Source="J0099201.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" [0207.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0207.323] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0207.323] wcscmp (_String1="J0099202.GIF", _String2=".") returned 1 [0207.323] wcscmp (_String1="J0099202.GIF", _String2="..") returned 1 [0207.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0207.323] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.323] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.323] wcscat (in: _Dest=0x3f274f8, _Source="J0099202.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" [0207.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0207.324] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0207.325] wcscmp (_String1="J0099203.GIF", _String2=".") returned 1 [0207.325] wcscmp (_String1="J0099203.GIF", _String2="..") returned 1 [0207.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0207.325] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.325] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.325] wcscat (in: _Dest=0x3f26e98, _Source="J0099203.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" [0207.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0207.326] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0207.326] wcscmp (_String1="J0099204.WMF", _String2=".") returned 1 [0207.326] wcscmp (_String1="J0099204.WMF", _String2="..") returned 1 [0207.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0207.326] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.326] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.326] wcscat (in: _Dest=0x3f27250, _Source="J0099204.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" [0207.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0207.328] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0207.328] wcscmp (_String1="J0099205.WMF", _String2=".") returned 1 [0207.328] wcscmp (_String1="J0099205.WMF", _String2="..") returned 1 [0207.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0207.328] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.328] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.328] wcscat (in: _Dest=0x3f26c78, _Source="J0099205.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" [0207.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0207.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52558e00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x52558e00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0207.329] wcscmp (_String1="J0101856.BMP", _String2=".") returned 1 [0207.329] wcscmp (_String1="J0101856.BMP", _String2="..") returned 1 [0207.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0207.329] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.329] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.329] wcscat (in: _Dest=0x3f26ae0, _Source="J0101856.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" [0207.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0207.330] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b7e800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54b7e800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0207.330] wcscmp (_String1="J0101857.BMP", _String2=".") returned 1 [0207.330] wcscmp (_String1="J0101857.BMP", _String2="..") returned 1 [0207.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f278b0 [0207.330] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.330] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.330] wcscat (in: _Dest=0x3f278b0, _Source="J0101857.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" [0207.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0207.352] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdef600, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bdef600, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0207.352] wcscmp (_String1="J0101858.BMP", _String2=".") returned 1 [0207.352] wcscmp (_String1="J0101858.BMP", _String2="..") returned 1 [0207.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0207.352] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.352] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.352] wcscat (in: _Dest=0x3f26f20, _Source="J0101858.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" [0207.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0207.353] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a51800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41a51800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0207.353] wcscmp (_String1="J0101859.BMP", _String2=".") returned 1 [0207.353] wcscmp (_String1="J0101859.BMP", _String2="..") returned 1 [0207.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26260 [0207.353] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.353] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.353] wcscat (in: _Dest=0x3f26260, _Source="J0101859.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" [0207.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0207.354] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44077200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44077200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0207.354] wcscmp (_String1="J0101860.BMP", _String2=".") returned 1 [0207.354] wcscmp (_String1="J0101860.BMP", _String2="..") returned 1 [0207.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f269d0 [0207.354] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.354] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.355] wcscat (in: _Dest=0x3f269d0, _Source="J0101860.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" [0207.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0207.355] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479af900, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x479af900, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0207.355] wcscmp (_String1="J0101861.BMP", _String2=".") returned 1 [0207.355] wcscmp (_String1="J0101861.BMP", _String2="..") returned 1 [0207.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27828 [0207.356] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.356] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.356] wcscat (in: _Dest=0x3f27828, _Source="J0101861.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" [0207.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0207.357] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2e8000, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b2e8000, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0207.357] wcscmp (_String1="J0101862.BMP", _String2=".") returned 1 [0207.357] wcscmp (_String1="J0101862.BMP", _String2="..") returned 1 [0207.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0207.357] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.357] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.357] wcscat (in: _Dest=0x3f271c8, _Source="J0101862.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" [0207.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0207.358] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571a4200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x571a4200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0207.358] wcscmp (_String1="J0101863.BMP", _String2=".") returned 1 [0207.358] wcscmp (_String1="J0101863.BMP", _String2="..") returned 1 [0207.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0207.358] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.358] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.358] wcscat (in: _Dest=0x3f26e10, _Source="J0101863.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" [0207.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0207.359] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597c9c00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x597c9c00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0207.359] wcscmp (_String1="J0101864.BMP", _String2=".") returned 1 [0207.359] wcscmp (_String1="J0101864.BMP", _String2="..") returned 1 [0207.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0207.359] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.359] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.359] wcscat (in: _Dest=0x3f270b8, _Source="J0101864.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" [0207.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0207.360] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec20700, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec20700, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0207.360] wcscmp (_String1="J0101865.BMP", _String2=".") returned 1 [0207.360] wcscmp (_String1="J0101865.BMP", _String2="..") returned 1 [0207.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0207.360] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.360] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.360] wcscat (in: _Dest=0x3f25fb8, _Source="J0101865.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" [0207.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0207.361] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff33400, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ff33400, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0207.361] wcscmp (_String1="J0101866.BMP", _String2=".") returned 1 [0207.361] wcscmp (_String1="J0101866.BMP", _String2="..") returned 1 [0207.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0207.361] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.361] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.361] wcscat (in: _Dest=0x3f25ea8, _Source="J0101866.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" [0207.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0207.362] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f42be00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f42be00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0207.362] wcscmp (_String1="J0101867.BMP", _String2=".") returned 1 [0207.362] wcscmp (_String1="J0101867.BMP", _String2="..") returned 1 [0207.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0207.362] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.362] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.362] wcscat (in: _Dest=0x3f26d00, _Source="J0101867.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" [0207.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0207.363] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0207.364] wcscmp (_String1="J0101980.WMF", _String2=".") returned 1 [0207.364] wcscmp (_String1="J0101980.WMF", _String2="..") returned 1 [0207.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27c68 [0207.365] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.365] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.365] wcscat (in: _Dest=0x3f27c68, _Source="J0101980.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" [0207.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0207.366] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0207.366] wcscmp (_String1="J0102002.WMF", _String2=".") returned 1 [0207.366] wcscmp (_String1="J0102002.WMF", _String2="..") returned 1 [0207.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27b58 [0207.366] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.366] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.366] wcscat (in: _Dest=0x3f27b58, _Source="J0102002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" [0207.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0207.367] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0207.367] wcscmp (_String1="J0102594.WMF", _String2=".") returned 1 [0207.367] wcscmp (_String1="J0102594.WMF", _String2="..") returned 1 [0207.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0207.367] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.367] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.367] wcscat (in: _Dest=0x3f279c0, _Source="J0102594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" [0207.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0207.368] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0207.368] wcscmp (_String1="J0102762.WMF", _String2=".") returned 1 [0207.368] wcscmp (_String1="J0102762.WMF", _String2="..") returned 1 [0207.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0207.368] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.368] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.368] wcscat (in: _Dest=0x3f27580, _Source="J0102762.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" [0207.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0207.369] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0207.369] wcscmp (_String1="J0102984.WMF", _String2=".") returned 1 [0207.369] wcscmp (_String1="J0102984.WMF", _String2="..") returned 1 [0207.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f277a0 [0207.369] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.370] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.370] wcscat (in: _Dest=0x3f277a0, _Source="J0102984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" [0207.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0207.371] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0207.371] wcscmp (_String1="J0103058.WMF", _String2=".") returned 1 [0207.371] wcscmp (_String1="J0103058.WMF", _String2="..") returned 1 [0207.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0207.371] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.371] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.371] wcscat (in: _Dest=0x3f266a0, _Source="J0103058.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" [0207.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0207.372] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0207.372] wcscmp (_String1="J0103262.WMF", _String2=".") returned 1 [0207.372] wcscmp (_String1="J0103262.WMF", _String2="..") returned 1 [0207.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26590 [0207.372] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.372] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.372] wcscat (in: _Dest=0x3f26590, _Source="J0103262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" [0207.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0207.373] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0207.373] wcscmp (_String1="J0103402.WMF", _String2=".") returned 1 [0207.373] wcscmp (_String1="J0103402.WMF", _String2="..") returned 1 [0207.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0207.373] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.373] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.373] wcscat (in: _Dest=0x3f26948, _Source="J0103402.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" [0207.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0207.374] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0207.374] wcscmp (_String1="J0103812.WMF", _String2=".") returned 1 [0207.375] wcscmp (_String1="J0103812.WMF", _String2="..") returned 1 [0207.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27a48 [0207.375] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.375] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.375] wcscat (in: _Dest=0x3f27a48, _Source="J0103812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" [0207.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0207.376] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0207.376] wcscmp (_String1="J0103850.WMF", _String2=".") returned 1 [0207.376] wcscmp (_String1="J0103850.WMF", _String2="..") returned 1 [0207.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0207.376] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.376] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.376] wcscat (in: _Dest=0x3f26618, _Source="J0103850.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" [0207.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0207.377] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0207.377] wcscmp (_String1="J0105230.WMF", _String2=".") returned 1 [0207.377] wcscmp (_String1="J0105230.WMF", _String2="..") returned 1 [0207.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0207.377] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.377] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.377] wcscat (in: _Dest=0x3f26370, _Source="J0105230.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" [0207.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0207.378] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0207.378] wcscmp (_String1="J0105232.WMF", _String2=".") returned 1 [0207.378] wcscmp (_String1="J0105232.WMF", _String2="..") returned 1 [0207.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0207.378] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.378] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.378] wcscat (in: _Dest=0x3f267b0, _Source="J0105232.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" [0207.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0207.379] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0207.379] wcscmp (_String1="J0105234.WMF", _String2=".") returned 1 [0207.380] wcscmp (_String1="J0105234.WMF", _String2="..") returned 1 [0207.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27cf0 [0207.380] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.380] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.380] wcscat (in: _Dest=0x3f27cf0, _Source="J0105234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" [0207.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0207.381] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0207.381] wcscmp (_String1="J0105238.WMF", _String2=".") returned 1 [0207.381] wcscmp (_String1="J0105238.WMF", _String2="..") returned 1 [0207.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0207.381] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.381] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.381] wcscat (in: _Dest=0x3f25f30, _Source="J0105238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" [0207.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0207.383] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0207.383] wcscmp (_String1="J0105240.WMF", _String2=".") returned 1 [0207.383] wcscmp (_String1="J0105240.WMF", _String2="..") returned 1 [0207.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0207.383] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.383] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.383] wcscat (in: _Dest=0x3f26838, _Source="J0105240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" [0207.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0207.384] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0207.384] wcscmp (_String1="J0105244.WMF", _String2=".") returned 1 [0207.384] wcscmp (_String1="J0105244.WMF", _String2="..") returned 1 [0207.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0207.385] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.385] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.385] wcscat (in: _Dest=0x3f27030, _Source="J0105244.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" [0207.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0207.386] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0207.386] wcscmp (_String1="J0105246.WMF", _String2=".") returned 1 [0207.386] wcscmp (_String1="J0105246.WMF", _String2="..") returned 1 [0207.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f262e8 [0207.386] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.386] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.386] wcscat (in: _Dest=0x3f262e8, _Source="J0105246.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" [0207.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0207.412] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0207.412] wcscmp (_String1="J0105250.WMF", _String2=".") returned 1 [0207.412] wcscmp (_String1="J0105250.WMF", _String2="..") returned 1 [0207.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0207.413] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.413] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.413] wcscat (in: _Dest=0x3f268c0, _Source="J0105250.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" [0207.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0207.414] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0207.414] wcscmp (_String1="J0105266.WMF", _String2=".") returned 1 [0207.414] wcscmp (_String1="J0105266.WMF", _String2="..") returned 1 [0207.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27be0 [0207.414] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.414] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.414] wcscat (in: _Dest=0x3f27be0, _Source="J0105266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" [0207.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0207.415] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0207.416] wcscmp (_String1="J0105272.WMF", _String2=".") returned 1 [0207.416] wcscmp (_String1="J0105272.WMF", _String2="..") returned 1 [0207.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0207.416] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.416] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.416] wcscat (in: _Dest=0x3f27608, _Source="J0105272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" [0207.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0207.417] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0207.417] wcscmp (_String1="J0105276.WMF", _String2=".") returned 1 [0207.417] wcscmp (_String1="J0105276.WMF", _String2="..") returned 1 [0207.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59510 [0207.417] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.417] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.417] wcscat (in: _Dest=0x3d59510, _Source="J0105276.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" [0207.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0207.418] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0207.418] wcscmp (_String1="J0105280.WMF", _String2=".") returned 1 [0207.418] wcscmp (_String1="J0105280.WMF", _String2="..") returned 1 [0207.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a1d0 [0207.418] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.418] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.418] wcscat (in: _Dest=0x3d5a1d0, _Source="J0105280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" [0207.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0207.419] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0207.419] wcscmp (_String1="J0105282.WMF", _String2=".") returned 1 [0207.419] wcscmp (_String1="J0105282.WMF", _String2="..") returned 1 [0207.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59b70 [0207.420] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.420] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.420] wcscat (in: _Dest=0x3d59b70, _Source="J0105282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" [0207.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0207.421] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0207.421] wcscmp (_String1="J0105286.WMF", _String2=".") returned 1 [0207.421] wcscmp (_String1="J0105286.WMF", _String2="..") returned 1 [0207.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58630 [0207.421] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.421] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.421] wcscat (in: _Dest=0x3d58630, _Source="J0105286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" [0207.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0207.422] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0207.422] wcscmp (_String1="J0105288.WMF", _String2=".") returned 1 [0207.422] wcscmp (_String1="J0105288.WMF", _String2="..") returned 1 [0207.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0207.422] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.422] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.422] wcscat (in: _Dest=0x3d59e18, _Source="J0105288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" [0207.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0207.423] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0207.423] wcscmp (_String1="J0105292.WMF", _String2=".") returned 1 [0207.423] wcscmp (_String1="J0105292.WMF", _String2="..") returned 1 [0207.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a3f0 [0207.423] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.423] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.423] wcscat (in: _Dest=0x3d5a3f0, _Source="J0105292.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" [0207.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0207.424] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0207.424] wcscmp (_String1="J0105294.WMF", _String2=".") returned 1 [0207.424] wcscmp (_String1="J0105294.WMF", _String2="..") returned 1 [0207.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59488 [0207.424] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.424] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.424] wcscat (in: _Dest=0x3d59488, _Source="J0105294.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" [0207.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0207.425] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0207.425] wcscmp (_String1="J0105298.WMF", _String2=".") returned 1 [0207.425] wcscmp (_String1="J0105298.WMF", _String2="..") returned 1 [0207.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a2e0 [0207.425] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.426] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.426] wcscat (in: _Dest=0x3d5a2e0, _Source="J0105298.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" [0207.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0207.427] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0207.427] wcscmp (_String1="J0105306.WMF", _String2=".") returned 1 [0207.427] wcscmp (_String1="J0105306.WMF", _String2="..") returned 1 [0207.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a148 [0207.427] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.427] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.427] wcscat (in: _Dest=0x3d5a148, _Source="J0105306.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" [0207.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0207.428] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0207.428] wcscmp (_String1="J0105320.WMF", _String2=".") returned 1 [0207.428] wcscmp (_String1="J0105320.WMF", _String2="..") returned 1 [0207.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58eb0 [0207.428] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.428] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.428] wcscat (in: _Dest=0x3d58eb0, _Source="J0105320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" [0207.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0207.429] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0207.429] wcscmp (_String1="J0105328.WMF", _String2=".") returned 1 [0207.429] wcscmp (_String1="J0105328.WMF", _String2="..") returned 1 [0207.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59730 [0207.429] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.429] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.430] wcscat (in: _Dest=0x3d59730, _Source="J0105328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" [0207.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0207.431] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0207.431] wcscmp (_String1="J0105332.WMF", _String2=".") returned 1 [0207.431] wcscmp (_String1="J0105332.WMF", _String2="..") returned 1 [0207.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a368 [0207.431] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.431] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.431] wcscat (in: _Dest=0x3d5a368, _Source="J0105332.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" [0207.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0207.432] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0207.432] wcscmp (_String1="J0105336.WMF", _String2=".") returned 1 [0207.432] wcscmp (_String1="J0105336.WMF", _String2="..") returned 1 [0207.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58740 [0207.432] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.432] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.432] wcscat (in: _Dest=0x3d58740, _Source="J0105336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" [0207.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0207.433] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0207.433] wcscmp (_String1="J0105338.WMF", _String2=".") returned 1 [0207.433] wcscmp (_String1="J0105338.WMF", _String2="..") returned 1 [0207.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a258 [0207.434] wcscpy (in: _Dest=0x3d5a258, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.434] wcscat (in: _Dest=0x3d5a258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.434] wcscat (in: _Dest=0x3d5a258, _Source="J0105338.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" [0207.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0207.441] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0207.444] wcscmp (_String1="J0105348.WMF", _String2=".") returned 1 [0207.444] wcscmp (_String1="J0105348.WMF", _String2="..") returned 1 [0207.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d597b8 [0207.444] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.444] wcscat (in: _Dest=0x3d597b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.444] wcscat (in: _Dest=0x3d597b8, _Source="J0105348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" [0207.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d597b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0207.445] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0207.445] wcscmp (_String1="J0105360.WMF", _String2=".") returned 1 [0207.445] wcscmp (_String1="J0105360.WMF", _String2="..") returned 1 [0207.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d586b8 [0207.445] wcscpy (in: _Dest=0x3d586b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.445] wcscat (in: _Dest=0x3d586b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.445] wcscat (in: _Dest=0x3d586b8, _Source="J0105360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" [0207.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d586b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0207.446] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0207.446] wcscmp (_String1="J0105368.WMF", _String2=".") returned 1 [0207.446] wcscmp (_String1="J0105368.WMF", _String2="..") returned 1 [0207.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d585a8 [0207.446] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.446] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.446] wcscat (in: _Dest=0x3d585a8, _Source="J0105368.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" [0207.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0207.447] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0207.447] wcscmp (_String1="J0105376.WMF", _String2=".") returned 1 [0207.447] wcscmp (_String1="J0105376.WMF", _String2="..") returned 1 [0207.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099e00 [0207.447] wcscpy (in: _Dest=0x3099e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.447] wcscat (in: _Dest=0x3099e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.447] wcscat (in: _Dest=0x3099e00, _Source="J0105376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" [0207.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0207.466] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0207.466] wcscmp (_String1="J0105378.WMF", _String2=".") returned 1 [0207.466] wcscmp (_String1="J0105378.WMF", _String2="..") returned 1 [0207.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099c68 [0207.466] wcscpy (in: _Dest=0x3099c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.466] wcscat (in: _Dest=0x3099c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.466] wcscat (in: _Dest=0x3099c68, _Source="J0105378.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" [0207.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0207.467] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0207.467] wcscmp (_String1="J0105380.WMF", _String2=".") returned 1 [0207.467] wcscmp (_String1="J0105380.WMF", _String2="..") returned 1 [0207.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099cf0 [0207.467] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.467] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.467] wcscat (in: _Dest=0x3099cf0, _Source="J0105380.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" [0207.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0207.469] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0207.469] wcscmp (_String1="J0105384.WMF", _String2=".") returned 1 [0207.469] wcscmp (_String1="J0105384.WMF", _String2="..") returned 1 [0207.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099ad0 [0207.469] wcscpy (in: _Dest=0x3099ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.469] wcscat (in: _Dest=0x3099ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.469] wcscat (in: _Dest=0x3099ad0, _Source="J0105384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" [0207.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0207.470] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0207.470] wcscmp (_String1="J0105386.WMF", _String2=".") returned 1 [0207.470] wcscmp (_String1="J0105386.WMF", _String2="..") returned 1 [0207.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a570 [0207.470] wcscpy (in: _Dest=0x309a570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.470] wcscat (in: _Dest=0x309a570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.471] wcscat (in: _Dest=0x309a570, _Source="J0105386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" [0207.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x309a570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0207.472] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0207.472] wcscmp (_String1="J0105388.WMF", _String2=".") returned 1 [0207.472] wcscmp (_String1="J0105388.WMF", _String2="..") returned 1 [0207.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0207.472] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.472] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.472] wcscat (in: _Dest=0x36e500, _Source="J0105388.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" [0207.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0207.473] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0207.474] wcscmp (_String1="J0105390.WMF", _String2=".") returned 1 [0207.474] wcscmp (_String1="J0105390.WMF", _String2="..") returned 1 [0207.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0207.474] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.474] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.474] wcscat (in: _Dest=0x36ed80, _Source="J0105390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" [0207.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0207.475] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0207.475] wcscmp (_String1="J0105396.WMF", _String2=".") returned 1 [0207.475] wcscmp (_String1="J0105396.WMF", _String2="..") returned 1 [0207.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0207.476] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.476] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.476] wcscat (in: _Dest=0x36e478, _Source="J0105396.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" [0207.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0207.477] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0207.477] wcscmp (_String1="J0105398.WMF", _String2=".") returned 1 [0207.477] wcscmp (_String1="J0105398.WMF", _String2="..") returned 1 [0207.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0207.477] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.477] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.477] wcscat (in: _Dest=0x3061f70, _Source="J0105398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" [0207.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0207.478] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0207.479] wcscmp (_String1="J0105410.WMF", _String2=".") returned 1 [0207.479] wcscmp (_String1="J0105410.WMF", _String2="..") returned 1 [0207.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e08270 [0207.479] wcscpy (in: _Dest=0x3e08270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.479] wcscat (in: _Dest=0x3e08270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.479] wcscat (in: _Dest=0x3e08270, _Source="J0105410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" [0207.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0207.480] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0207.480] wcscmp (_String1="J0105412.WMF", _String2=".") returned 1 [0207.480] wcscmp (_String1="J0105412.WMF", _String2="..") returned 1 [0207.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa060 [0207.480] wcscpy (in: _Dest=0x12eaa060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.480] wcscat (in: _Dest=0x12eaa060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.480] wcscat (in: _Dest=0x12eaa060, _Source="J0105412.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" [0207.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0207.482] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0207.482] wcscmp (_String1="J0105414.WMF", _String2=".") returned 1 [0207.482] wcscmp (_String1="J0105414.WMF", _String2="..") returned 1 [0207.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa0e8 [0207.482] wcscpy (in: _Dest=0x12eaa0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.482] wcscat (in: _Dest=0x12eaa0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.482] wcscat (in: _Dest=0x12eaa0e8, _Source="J0105414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" [0207.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0207.483] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0207.483] wcscmp (_String1="J0105490.WMF", _String2=".") returned 1 [0207.484] wcscmp (_String1="J0105490.WMF", _String2="..") returned 1 [0207.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa170 [0207.484] wcscpy (in: _Dest=0x12eaa170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.484] wcscat (in: _Dest=0x12eaa170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.484] wcscat (in: _Dest=0x12eaa170, _Source="J0105490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" [0207.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0207.485] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0207.485] wcscmp (_String1="J0105496.WMF", _String2=".") returned 1 [0207.485] wcscmp (_String1="J0105496.WMF", _String2="..") returned 1 [0207.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa1f8 [0207.485] wcscpy (in: _Dest=0x12eaa1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.485] wcscat (in: _Dest=0x12eaa1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.485] wcscat (in: _Dest=0x12eaa1f8, _Source="J0105496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" [0207.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0207.487] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0207.487] wcscmp (_String1="J0105502.WMF", _String2=".") returned 1 [0207.487] wcscmp (_String1="J0105502.WMF", _String2="..") returned 1 [0207.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa280 [0207.487] wcscpy (in: _Dest=0x12eaa280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.487] wcscat (in: _Dest=0x12eaa280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.487] wcscat (in: _Dest=0x12eaa280, _Source="J0105502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" [0207.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0207.488] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0207.488] wcscmp (_String1="J0105504.WMF", _String2=".") returned 1 [0207.489] wcscmp (_String1="J0105504.WMF", _String2="..") returned 1 [0207.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa308 [0207.489] wcscpy (in: _Dest=0x12eaa308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.489] wcscat (in: _Dest=0x12eaa308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.489] wcscat (in: _Dest=0x12eaa308, _Source="J0105504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" [0207.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0207.490] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0207.490] wcscmp (_String1="J0105506.WMF", _String2=".") returned 1 [0207.490] wcscmp (_String1="J0105506.WMF", _String2="..") returned 1 [0207.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa390 [0207.490] wcscpy (in: _Dest=0x12eaa390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.490] wcscat (in: _Dest=0x12eaa390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.490] wcscat (in: _Dest=0x12eaa390, _Source="J0105506.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" [0207.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0207.492] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0207.492] wcscmp (_String1="J0105520.WMF", _String2=".") returned 1 [0207.492] wcscmp (_String1="J0105520.WMF", _String2="..") returned 1 [0207.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa418 [0207.492] wcscpy (in: _Dest=0x12eaa418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.492] wcscat (in: _Dest=0x12eaa418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.492] wcscat (in: _Dest=0x12eaa418, _Source="J0105520.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" [0207.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0207.494] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0207.494] wcscmp (_String1="J0105526.WMF", _String2=".") returned 1 [0207.494] wcscmp (_String1="J0105526.WMF", _String2="..") returned 1 [0207.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa4a0 [0207.494] wcscpy (in: _Dest=0x12eaa4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.494] wcscat (in: _Dest=0x12eaa4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.494] wcscat (in: _Dest=0x12eaa4a0, _Source="J0105526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" [0207.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0207.495] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0207.495] wcscmp (_String1="J0105530.WMF", _String2=".") returned 1 [0207.495] wcscmp (_String1="J0105530.WMF", _String2="..") returned 1 [0207.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa528 [0207.495] wcscpy (in: _Dest=0x12eaa528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.495] wcscat (in: _Dest=0x12eaa528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.495] wcscat (in: _Dest=0x12eaa528, _Source="J0105530.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" [0207.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0207.497] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0207.497] wcscmp (_String1="J0105588.WMF", _String2=".") returned 1 [0207.497] wcscmp (_String1="J0105588.WMF", _String2="..") returned 1 [0207.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa5b0 [0207.497] wcscpy (in: _Dest=0x12eaa5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.497] wcscat (in: _Dest=0x12eaa5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.497] wcscat (in: _Dest=0x12eaa5b0, _Source="J0105588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" [0207.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0207.498] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0207.498] wcscmp (_String1="J0105600.WMF", _String2=".") returned 1 [0207.498] wcscmp (_String1="J0105600.WMF", _String2="..") returned 1 [0207.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa638 [0207.498] wcscpy (in: _Dest=0x12eaa638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.499] wcscat (in: _Dest=0x12eaa638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.499] wcscat (in: _Dest=0x12eaa638, _Source="J0105600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" [0207.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0207.500] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0207.500] wcscmp (_String1="J0105638.WMF", _String2=".") returned 1 [0207.500] wcscmp (_String1="J0105638.WMF", _String2="..") returned 1 [0207.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa6c0 [0207.500] wcscpy (in: _Dest=0x12eaa6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.500] wcscat (in: _Dest=0x12eaa6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.500] wcscat (in: _Dest=0x12eaa6c0, _Source="J0105638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" [0207.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0207.511] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0207.511] wcscmp (_String1="J0105710.WMF", _String2=".") returned 1 [0207.511] wcscmp (_String1="J0105710.WMF", _String2="..") returned 1 [0207.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa748 [0207.511] wcscpy (in: _Dest=0x12eaa748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.511] wcscat (in: _Dest=0x12eaa748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.511] wcscat (in: _Dest=0x12eaa748, _Source="J0105710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" [0207.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0207.512] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0207.512] wcscmp (_String1="J0105846.WMF", _String2=".") returned 1 [0207.512] wcscmp (_String1="J0105846.WMF", _String2="..") returned 1 [0207.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa7d0 [0207.513] wcscpy (in: _Dest=0x12eaa7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.513] wcscat (in: _Dest=0x12eaa7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.513] wcscat (in: _Dest=0x12eaa7d0, _Source="J0105846.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" [0207.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0207.514] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0207.514] wcscmp (_String1="J0105912.WMF", _String2=".") returned 1 [0207.514] wcscmp (_String1="J0105912.WMF", _String2="..") returned 1 [0207.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa858 [0207.514] wcscpy (in: _Dest=0x12eaa858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.514] wcscat (in: _Dest=0x12eaa858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.514] wcscat (in: _Dest=0x12eaa858, _Source="J0105912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" [0207.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0207.516] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0207.516] wcscmp (_String1="J0105974.WMF", _String2=".") returned 1 [0207.516] wcscmp (_String1="J0105974.WMF", _String2="..") returned 1 [0207.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa8e0 [0207.516] wcscpy (in: _Dest=0x12eaa8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.516] wcscat (in: _Dest=0x12eaa8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.516] wcscat (in: _Dest=0x12eaa8e0, _Source="J0105974.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" [0207.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0207.517] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0207.517] wcscmp (_String1="J0106020.WMF", _String2=".") returned 1 [0207.517] wcscmp (_String1="J0106020.WMF", _String2="..") returned 1 [0207.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa968 [0207.517] wcscpy (in: _Dest=0x12eaa968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.517] wcscat (in: _Dest=0x12eaa968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.517] wcscat (in: _Dest=0x12eaa968, _Source="J0106020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" [0207.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0207.519] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0207.519] wcscmp (_String1="J0106124.WMF", _String2=".") returned 1 [0207.519] wcscmp (_String1="J0106124.WMF", _String2="..") returned 1 [0207.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaa9f0 [0207.519] wcscpy (in: _Dest=0x12eaa9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.519] wcscat (in: _Dest=0x12eaa9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.519] wcscat (in: _Dest=0x12eaa9f0, _Source="J0106124.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" [0207.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaa9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0207.520] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0207.520] wcscmp (_String1="J0106146.WMF", _String2=".") returned 1 [0207.520] wcscmp (_String1="J0106146.WMF", _String2="..") returned 1 [0207.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaaa78 [0207.520] wcscpy (in: _Dest=0x12eaaa78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.520] wcscat (in: _Dest=0x12eaaa78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.520] wcscat (in: _Dest=0x12eaaa78, _Source="J0106146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" [0207.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaaa78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0207.522] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0207.522] wcscmp (_String1="J0106208.WMF", _String2=".") returned 1 [0207.522] wcscmp (_String1="J0106208.WMF", _String2="..") returned 1 [0207.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaab00 [0207.522] wcscpy (in: _Dest=0x12eaab00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.522] wcscat (in: _Dest=0x12eaab00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.522] wcscat (in: _Dest=0x12eaab00, _Source="J0106208.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" [0207.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0207.523] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0207.525] wcscmp (_String1="J0106222.WMF", _String2=".") returned 1 [0207.525] wcscmp (_String1="J0106222.WMF", _String2="..") returned 1 [0207.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaab88 [0207.525] wcscpy (in: _Dest=0x12eaab88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.525] wcscat (in: _Dest=0x12eaab88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.525] wcscat (in: _Dest=0x12eaab88, _Source="J0106222.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" [0207.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaab88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0207.527] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0207.527] wcscmp (_String1="J0106572.WMF", _String2=".") returned 1 [0207.527] wcscmp (_String1="J0106572.WMF", _String2="..") returned 1 [0207.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaac10 [0207.527] wcscpy (in: _Dest=0x12eaac10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.527] wcscat (in: _Dest=0x12eaac10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.527] wcscat (in: _Dest=0x12eaac10, _Source="J0106572.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" [0207.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaac10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0207.528] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0207.528] wcscmp (_String1="J0106816.WMF", _String2=".") returned 1 [0207.528] wcscmp (_String1="J0106816.WMF", _String2="..") returned 1 [0207.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaac98 [0207.528] wcscpy (in: _Dest=0x12eaac98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.528] wcscat (in: _Dest=0x12eaac98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.528] wcscat (in: _Dest=0x12eaac98, _Source="J0106816.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" [0207.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaac98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0207.530] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0207.530] wcscmp (_String1="J0106958.WMF", _String2=".") returned 1 [0207.530] wcscmp (_String1="J0106958.WMF", _String2="..") returned 1 [0207.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaad20 [0207.530] wcscpy (in: _Dest=0x12eaad20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.530] wcscat (in: _Dest=0x12eaad20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.530] wcscat (in: _Dest=0x12eaad20, _Source="J0106958.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" [0207.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaad20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0207.531] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0207.531] wcscmp (_String1="J0107024.WMF", _String2=".") returned 1 [0207.531] wcscmp (_String1="J0107024.WMF", _String2="..") returned 1 [0207.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaada8 [0207.531] wcscpy (in: _Dest=0x12eaada8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.531] wcscat (in: _Dest=0x12eaada8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.531] wcscat (in: _Dest=0x12eaada8, _Source="J0107024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" [0207.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaada8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0207.533] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0207.533] wcscmp (_String1="J0107026.WMF", _String2=".") returned 1 [0207.533] wcscmp (_String1="J0107026.WMF", _String2="..") returned 1 [0207.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaae30 [0207.533] wcscpy (in: _Dest=0x12eaae30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.533] wcscat (in: _Dest=0x12eaae30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.533] wcscat (in: _Dest=0x12eaae30, _Source="J0107026.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" [0207.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaae30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0207.534] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0207.534] wcscmp (_String1="J0107042.WMF", _String2=".") returned 1 [0207.534] wcscmp (_String1="J0107042.WMF", _String2="..") returned 1 [0207.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaaeb8 [0207.535] wcscpy (in: _Dest=0x12eaaeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.535] wcscat (in: _Dest=0x12eaaeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.535] wcscat (in: _Dest=0x12eaaeb8, _Source="J0107042.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" [0207.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaaeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0207.536] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0207.536] wcscmp (_String1="J0107090.WMF", _String2=".") returned 1 [0207.536] wcscmp (_String1="J0107090.WMF", _String2="..") returned 1 [0207.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaaf40 [0207.536] wcscpy (in: _Dest=0x12eaaf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.536] wcscat (in: _Dest=0x12eaaf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.536] wcscat (in: _Dest=0x12eaaf40, _Source="J0107090.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" [0207.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaaf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0207.538] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0207.539] wcscmp (_String1="J0107130.WMF", _String2=".") returned 1 [0207.539] wcscmp (_String1="J0107130.WMF", _String2="..") returned 1 [0207.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaafc8 [0207.539] wcscpy (in: _Dest=0x12eaafc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.539] wcscat (in: _Dest=0x12eaafc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.539] wcscat (in: _Dest=0x12eaafc8, _Source="J0107130.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" [0207.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaafc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0207.540] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0207.540] wcscmp (_String1="J0107132.WMF", _String2=".") returned 1 [0207.540] wcscmp (_String1="J0107132.WMF", _String2="..") returned 1 [0207.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab050 [0207.540] wcscpy (in: _Dest=0x12eab050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.540] wcscat (in: _Dest=0x12eab050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.540] wcscat (in: _Dest=0x12eab050, _Source="J0107132.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" [0207.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0207.542] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0207.542] wcscmp (_String1="J0107134.WMF", _String2=".") returned 1 [0207.542] wcscmp (_String1="J0107134.WMF", _String2="..") returned 1 [0207.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab0d8 [0207.542] wcscpy (in: _Dest=0x12eab0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.542] wcscat (in: _Dest=0x12eab0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.542] wcscat (in: _Dest=0x12eab0d8, _Source="J0107134.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" [0207.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0207.543] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0207.543] wcscmp (_String1="J0107138.WMF", _String2=".") returned 1 [0207.543] wcscmp (_String1="J0107138.WMF", _String2="..") returned 1 [0207.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab160 [0207.543] wcscpy (in: _Dest=0x12eab160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.543] wcscat (in: _Dest=0x12eab160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.544] wcscat (in: _Dest=0x12eab160, _Source="J0107138.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" [0207.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0207.545] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0207.545] wcscmp (_String1="J0107146.WMF", _String2=".") returned 1 [0207.545] wcscmp (_String1="J0107146.WMF", _String2="..") returned 1 [0207.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab1e8 [0207.545] wcscpy (in: _Dest=0x12eab1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.545] wcscat (in: _Dest=0x12eab1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.545] wcscat (in: _Dest=0x12eab1e8, _Source="J0107146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" [0207.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0207.547] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0207.547] wcscmp (_String1="J0107148.WMF", _String2=".") returned 1 [0207.547] wcscmp (_String1="J0107148.WMF", _String2="..") returned 1 [0207.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab270 [0207.547] wcscpy (in: _Dest=0x12eab270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.547] wcscat (in: _Dest=0x12eab270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.547] wcscat (in: _Dest=0x12eab270, _Source="J0107148.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" [0207.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0207.563] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0207.563] wcscmp (_String1="J0107150.WMF", _String2=".") returned 1 [0207.563] wcscmp (_String1="J0107150.WMF", _String2="..") returned 1 [0207.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab2f8 [0207.563] wcscpy (in: _Dest=0x12eab2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.563] wcscat (in: _Dest=0x12eab2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.563] wcscat (in: _Dest=0x12eab2f8, _Source="J0107150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" [0207.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0207.565] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0207.565] wcscmp (_String1="J0107152.WMF", _String2=".") returned 1 [0207.565] wcscmp (_String1="J0107152.WMF", _String2="..") returned 1 [0207.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab380 [0207.565] wcscpy (in: _Dest=0x12eab380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.565] wcscat (in: _Dest=0x12eab380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.565] wcscat (in: _Dest=0x12eab380, _Source="J0107152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" [0207.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0207.567] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0207.567] wcscmp (_String1="J0107154.WMF", _String2=".") returned 1 [0207.567] wcscmp (_String1="J0107154.WMF", _String2="..") returned 1 [0207.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab408 [0207.567] wcscpy (in: _Dest=0x12eab408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.567] wcscat (in: _Dest=0x12eab408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.567] wcscat (in: _Dest=0x12eab408, _Source="J0107154.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" [0207.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0207.568] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0207.568] wcscmp (_String1="J0107158.WMF", _String2=".") returned 1 [0207.568] wcscmp (_String1="J0107158.WMF", _String2="..") returned 1 [0207.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab490 [0207.568] wcscpy (in: _Dest=0x12eab490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.568] wcscat (in: _Dest=0x12eab490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.568] wcscat (in: _Dest=0x12eab490, _Source="J0107158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" [0207.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0207.570] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0207.570] wcscmp (_String1="J0107182.WMF", _String2=".") returned 1 [0207.570] wcscmp (_String1="J0107182.WMF", _String2="..") returned 1 [0207.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab518 [0207.570] wcscpy (in: _Dest=0x12eab518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.570] wcscat (in: _Dest=0x12eab518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.570] wcscat (in: _Dest=0x12eab518, _Source="J0107182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" [0207.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0207.571] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0207.572] wcscmp (_String1="J0107188.WMF", _String2=".") returned 1 [0207.572] wcscmp (_String1="J0107188.WMF", _String2="..") returned 1 [0207.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab5a0 [0207.572] wcscpy (in: _Dest=0x12eab5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.572] wcscat (in: _Dest=0x12eab5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.572] wcscat (in: _Dest=0x12eab5a0, _Source="J0107188.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" [0207.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0207.573] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0207.573] wcscmp (_String1="J0107192.WMF", _String2=".") returned 1 [0207.573] wcscmp (_String1="J0107192.WMF", _String2="..") returned 1 [0207.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab628 [0207.573] wcscpy (in: _Dest=0x12eab628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.573] wcscat (in: _Dest=0x12eab628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.573] wcscat (in: _Dest=0x12eab628, _Source="J0107192.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" [0207.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0207.575] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0207.575] wcscmp (_String1="J0107254.WMF", _String2=".") returned 1 [0207.575] wcscmp (_String1="J0107254.WMF", _String2="..") returned 1 [0207.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab6b0 [0207.575] wcscpy (in: _Dest=0x12eab6b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.575] wcscat (in: _Dest=0x12eab6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.575] wcscat (in: _Dest=0x12eab6b0, _Source="J0107254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" [0207.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0207.576] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0207.577] wcscmp (_String1="J0107258.WMF", _String2=".") returned 1 [0207.577] wcscmp (_String1="J0107258.WMF", _String2="..") returned 1 [0207.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab738 [0207.577] wcscpy (in: _Dest=0x12eab738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.577] wcscat (in: _Dest=0x12eab738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.577] wcscat (in: _Dest=0x12eab738, _Source="J0107258.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" [0207.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0207.578] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0207.578] wcscmp (_String1="J0107262.WMF", _String2=".") returned 1 [0207.578] wcscmp (_String1="J0107262.WMF", _String2="..") returned 1 [0207.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab7c0 [0207.579] wcscpy (in: _Dest=0x12eab7c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.579] wcscat (in: _Dest=0x12eab7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.579] wcscat (in: _Dest=0x12eab7c0, _Source="J0107262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" [0207.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0207.580] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0207.580] wcscmp (_String1="J0107264.WMF", _String2=".") returned 1 [0207.580] wcscmp (_String1="J0107264.WMF", _String2="..") returned 1 [0207.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab848 [0207.580] wcscpy (in: _Dest=0x12eab848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.580] wcscat (in: _Dest=0x12eab848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.580] wcscat (in: _Dest=0x12eab848, _Source="J0107264.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" [0207.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0207.582] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0207.582] wcscmp (_String1="J0107266.WMF", _String2=".") returned 1 [0207.582] wcscmp (_String1="J0107266.WMF", _String2="..") returned 1 [0207.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab8d0 [0207.582] wcscpy (in: _Dest=0x12eab8d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.582] wcscat (in: _Dest=0x12eab8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.582] wcscat (in: _Dest=0x12eab8d0, _Source="J0107266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" [0207.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0207.583] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0207.583] wcscmp (_String1="J0107280.WMF", _String2=".") returned 1 [0207.583] wcscmp (_String1="J0107280.WMF", _String2="..") returned 1 [0207.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab958 [0207.583] wcscpy (in: _Dest=0x12eab958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.583] wcscat (in: _Dest=0x12eab958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.613] wcscat (in: _Dest=0x12eab958, _Source="J0107280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" [0207.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0207.616] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0207.616] wcscmp (_String1="J0107282.WMF", _String2=".") returned 1 [0207.616] wcscmp (_String1="J0107282.WMF", _String2="..") returned 1 [0207.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eab9e0 [0207.621] wcscpy (in: _Dest=0x12eab9e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.621] wcscat (in: _Dest=0x12eab9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.621] wcscat (in: _Dest=0x12eab9e0, _Source="J0107282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" [0207.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eab9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0207.668] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0207.668] wcscmp (_String1="J0107288.WMF", _String2=".") returned 1 [0207.668] wcscmp (_String1="J0107288.WMF", _String2="..") returned 1 [0207.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eaba68 [0207.668] wcscpy (in: _Dest=0x12eaba68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.668] wcscat (in: _Dest=0x12eaba68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.668] wcscat (in: _Dest=0x12eaba68, _Source="J0107288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" [0207.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eaba68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0207.669] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0207.669] wcscmp (_String1="J0107290.WMF", _String2=".") returned 1 [0207.670] wcscmp (_String1="J0107290.WMF", _String2="..") returned 1 [0207.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabaf0 [0207.670] wcscpy (in: _Dest=0x12eabaf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.670] wcscat (in: _Dest=0x12eabaf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.670] wcscat (in: _Dest=0x12eabaf0, _Source="J0107290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" [0207.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0207.671] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0207.671] wcscmp (_String1="J0107300.WMF", _String2=".") returned 1 [0207.671] wcscmp (_String1="J0107300.WMF", _String2="..") returned 1 [0207.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabb78 [0207.671] wcscpy (in: _Dest=0x12eabb78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.671] wcscat (in: _Dest=0x12eabb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.671] wcscat (in: _Dest=0x12eabb78, _Source="J0107300.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" [0207.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0207.672] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0207.673] wcscmp (_String1="J0107302.WMF", _String2=".") returned 1 [0207.673] wcscmp (_String1="J0107302.WMF", _String2="..") returned 1 [0207.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabc00 [0207.673] wcscpy (in: _Dest=0x12eabc00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.673] wcscat (in: _Dest=0x12eabc00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.673] wcscat (in: _Dest=0x12eabc00, _Source="J0107302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" [0207.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0207.674] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0207.674] wcscmp (_String1="J0107308.WMF", _String2=".") returned 1 [0207.674] wcscmp (_String1="J0107308.WMF", _String2="..") returned 1 [0207.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabc88 [0207.674] wcscpy (in: _Dest=0x12eabc88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.674] wcscat (in: _Dest=0x12eabc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.674] wcscat (in: _Dest=0x12eabc88, _Source="J0107308.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" [0207.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0207.676] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0207.676] wcscmp (_String1="J0107314.WMF", _String2=".") returned 1 [0207.676] wcscmp (_String1="J0107314.WMF", _String2="..") returned 1 [0207.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabd10 [0207.676] wcscpy (in: _Dest=0x12eabd10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.676] wcscat (in: _Dest=0x12eabd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.676] wcscat (in: _Dest=0x12eabd10, _Source="J0107314.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" [0207.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0207.678] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0207.680] wcscmp (_String1="J0107316.WMF", _String2=".") returned 1 [0207.680] wcscmp (_String1="J0107316.WMF", _String2="..") returned 1 [0207.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabd98 [0207.680] wcscpy (in: _Dest=0x12eabd98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.680] wcscat (in: _Dest=0x12eabd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.680] wcscat (in: _Dest=0x12eabd98, _Source="J0107316.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" [0207.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0207.681] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0207.681] wcscmp (_String1="J0107328.WMF", _String2=".") returned 1 [0207.681] wcscmp (_String1="J0107328.WMF", _String2="..") returned 1 [0207.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabe20 [0207.682] wcscpy (in: _Dest=0x12eabe20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.682] wcscat (in: _Dest=0x12eabe20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.682] wcscat (in: _Dest=0x12eabe20, _Source="J0107328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" [0207.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabe20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0207.683] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0207.683] wcscmp (_String1="J0107342.WMF", _String2=".") returned 1 [0207.683] wcscmp (_String1="J0107342.WMF", _String2="..") returned 1 [0207.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabea8 [0207.683] wcscpy (in: _Dest=0x12eabea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.683] wcscat (in: _Dest=0x12eabea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.683] wcscat (in: _Dest=0x12eabea8, _Source="J0107342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" [0207.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0207.685] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0207.685] wcscmp (_String1="J0107344.WMF", _String2=".") returned 1 [0207.685] wcscmp (_String1="J0107344.WMF", _String2="..") returned 1 [0207.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabf30 [0207.685] wcscpy (in: _Dest=0x12eabf30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.685] wcscat (in: _Dest=0x12eabf30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.685] wcscat (in: _Dest=0x12eabf30, _Source="J0107344.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" [0207.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabf30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0207.686] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0207.686] wcscmp (_String1="J0107350.WMF", _String2=".") returned 1 [0207.686] wcscmp (_String1="J0107350.WMF", _String2="..") returned 1 [0207.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12eabfb8 [0207.686] wcscpy (in: _Dest=0x12eabfb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.686] wcscat (in: _Dest=0x12eabfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.686] wcscat (in: _Dest=0x12eabfb8, _Source="J0107350.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" [0207.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eabfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0207.687] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0207.687] wcscmp (_String1="J0107358.WMF", _String2=".") returned 1 [0207.687] wcscmp (_String1="J0107358.WMF", _String2="..") returned 1 [0207.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6060 [0207.688] wcscpy (in: _Dest=0x12ea6060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.688] wcscat (in: _Dest=0x12ea6060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.688] wcscat (in: _Dest=0x12ea6060, _Source="J0107358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" [0207.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0207.689] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0207.689] wcscmp (_String1="J0107364.WMF", _String2=".") returned 1 [0207.689] wcscmp (_String1="J0107364.WMF", _String2="..") returned 1 [0207.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea60e8 [0207.689] wcscpy (in: _Dest=0x12ea60e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.689] wcscat (in: _Dest=0x12ea60e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.690] wcscat (in: _Dest=0x12ea60e8, _Source="J0107364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" [0207.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea60e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0207.691] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0207.691] wcscmp (_String1="J0107426.WMF", _String2=".") returned 1 [0207.691] wcscmp (_String1="J0107426.WMF", _String2="..") returned 1 [0207.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6170 [0207.691] wcscpy (in: _Dest=0x12ea6170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.691] wcscat (in: _Dest=0x12ea6170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.691] wcscat (in: _Dest=0x12ea6170, _Source="J0107426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" [0207.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0207.692] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0207.692] wcscmp (_String1="J0107446.WMF", _String2=".") returned 1 [0207.692] wcscmp (_String1="J0107446.WMF", _String2="..") returned 1 [0207.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea61f8 [0207.693] wcscpy (in: _Dest=0x12ea61f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.693] wcscat (in: _Dest=0x12ea61f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.693] wcscat (in: _Dest=0x12ea61f8, _Source="J0107446.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" [0207.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea61f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0207.694] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0207.694] wcscmp (_String1="J0107450.WMF", _String2=".") returned 1 [0207.694] wcscmp (_String1="J0107450.WMF", _String2="..") returned 1 [0207.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6280 [0207.694] wcscpy (in: _Dest=0x12ea6280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.694] wcscat (in: _Dest=0x12ea6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.694] wcscat (in: _Dest=0x12ea6280, _Source="J0107450.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" [0207.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0207.696] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0207.696] wcscmp (_String1="J0107452.WMF", _String2=".") returned 1 [0207.696] wcscmp (_String1="J0107452.WMF", _String2="..") returned 1 [0207.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6308 [0207.696] wcscpy (in: _Dest=0x12ea6308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.696] wcscat (in: _Dest=0x12ea6308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.696] wcscat (in: _Dest=0x12ea6308, _Source="J0107452.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" [0207.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0207.698] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0207.698] wcscmp (_String1="J0107456.WMF", _String2=".") returned 1 [0207.698] wcscmp (_String1="J0107456.WMF", _String2="..") returned 1 [0207.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6390 [0207.698] wcscpy (in: _Dest=0x12ea6390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.698] wcscat (in: _Dest=0x12ea6390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.698] wcscat (in: _Dest=0x12ea6390, _Source="J0107456.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" [0207.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0207.699] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0207.699] wcscmp (_String1="J0107458.WMF", _String2=".") returned 1 [0207.699] wcscmp (_String1="J0107458.WMF", _String2="..") returned 1 [0207.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6418 [0207.699] wcscpy (in: _Dest=0x12ea6418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.699] wcscat (in: _Dest=0x12ea6418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.699] wcscat (in: _Dest=0x12ea6418, _Source="J0107458.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" [0207.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0207.700] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0207.701] wcscmp (_String1="J0107468.WMF", _String2=".") returned 1 [0207.701] wcscmp (_String1="J0107468.WMF", _String2="..") returned 1 [0207.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea64a0 [0207.701] wcscpy (in: _Dest=0x12ea64a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.701] wcscat (in: _Dest=0x12ea64a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.701] wcscat (in: _Dest=0x12ea64a0, _Source="J0107468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" [0207.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea64a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0207.702] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0207.702] wcscmp (_String1="J0107480.WMF", _String2=".") returned 1 [0207.702] wcscmp (_String1="J0107480.WMF", _String2="..") returned 1 [0207.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6528 [0207.702] wcscpy (in: _Dest=0x12ea6528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.702] wcscat (in: _Dest=0x12ea6528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.702] wcscat (in: _Dest=0x12ea6528, _Source="J0107480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" [0207.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0207.704] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0207.704] wcscmp (_String1="J0107482.WMF", _String2=".") returned 1 [0207.704] wcscmp (_String1="J0107482.WMF", _String2="..") returned 1 [0207.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea65b0 [0207.704] wcscpy (in: _Dest=0x12ea65b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.704] wcscat (in: _Dest=0x12ea65b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.704] wcscat (in: _Dest=0x12ea65b0, _Source="J0107482.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" [0207.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea65b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0207.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0207.721] wcscmp (_String1="J0107484.WMF", _String2=".") returned 1 [0207.721] wcscmp (_String1="J0107484.WMF", _String2="..") returned 1 [0207.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6638 [0207.722] wcscpy (in: _Dest=0x12ea6638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.722] wcscat (in: _Dest=0x12ea6638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.722] wcscat (in: _Dest=0x12ea6638, _Source="J0107484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" [0207.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0207.723] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0207.723] wcscmp (_String1="J0107488.WMF", _String2=".") returned 1 [0207.723] wcscmp (_String1="J0107488.WMF", _String2="..") returned 1 [0207.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea66c0 [0207.723] wcscpy (in: _Dest=0x12ea66c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.723] wcscat (in: _Dest=0x12ea66c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.723] wcscat (in: _Dest=0x12ea66c0, _Source="J0107488.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" [0207.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea66c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0207.725] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0207.725] wcscmp (_String1="J0107490.WMF", _String2=".") returned 1 [0207.725] wcscmp (_String1="J0107490.WMF", _String2="..") returned 1 [0207.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6748 [0207.725] wcscpy (in: _Dest=0x12ea6748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.725] wcscat (in: _Dest=0x12ea6748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.725] wcscat (in: _Dest=0x12ea6748, _Source="J0107490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" [0207.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0207.727] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0207.727] wcscmp (_String1="J0107492.WMF", _String2=".") returned 1 [0207.727] wcscmp (_String1="J0107492.WMF", _String2="..") returned 1 [0207.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea67d0 [0207.727] wcscpy (in: _Dest=0x12ea67d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.727] wcscat (in: _Dest=0x12ea67d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.727] wcscat (in: _Dest=0x12ea67d0, _Source="J0107492.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" [0207.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0207.729] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0207.729] wcscmp (_String1="J0107494.WMF", _String2=".") returned 1 [0207.729] wcscmp (_String1="J0107494.WMF", _String2="..") returned 1 [0207.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6858 [0207.729] wcscpy (in: _Dest=0x12ea6858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.729] wcscat (in: _Dest=0x12ea6858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.729] wcscat (in: _Dest=0x12ea6858, _Source="J0107494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" [0207.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0207.730] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0207.730] wcscmp (_String1="J0107496.WMF", _String2=".") returned 1 [0207.730] wcscmp (_String1="J0107496.WMF", _String2="..") returned 1 [0207.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea68e0 [0207.730] wcscpy (in: _Dest=0x12ea68e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.731] wcscat (in: _Dest=0x12ea68e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.731] wcscat (in: _Dest=0x12ea68e0, _Source="J0107496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" [0207.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea68e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0207.732] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0207.732] wcscmp (_String1="J0107500.WMF", _String2=".") returned 1 [0207.732] wcscmp (_String1="J0107500.WMF", _String2="..") returned 1 [0207.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6968 [0207.732] wcscpy (in: _Dest=0x12ea6968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.732] wcscat (in: _Dest=0x12ea6968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.732] wcscat (in: _Dest=0x12ea6968, _Source="J0107500.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" [0207.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0207.734] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0207.734] wcscmp (_String1="J0107502.WMF", _String2=".") returned 1 [0207.734] wcscmp (_String1="J0107502.WMF", _String2="..") returned 1 [0207.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea69f0 [0207.734] wcscpy (in: _Dest=0x12ea69f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.734] wcscat (in: _Dest=0x12ea69f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.734] wcscat (in: _Dest=0x12ea69f0, _Source="J0107502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" [0207.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea69f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0207.735] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0207.736] wcscmp (_String1="J0107512.WMF", _String2=".") returned 1 [0207.736] wcscmp (_String1="J0107512.WMF", _String2="..") returned 1 [0207.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6a78 [0207.736] wcscpy (in: _Dest=0x12ea6a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.736] wcscat (in: _Dest=0x12ea6a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.736] wcscat (in: _Dest=0x12ea6a78, _Source="J0107512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" [0207.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0207.737] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0207.737] wcscmp (_String1="J0107514.WMF", _String2=".") returned 1 [0207.737] wcscmp (_String1="J0107514.WMF", _String2="..") returned 1 [0207.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6b00 [0207.737] wcscpy (in: _Dest=0x12ea6b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.737] wcscat (in: _Dest=0x12ea6b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.738] wcscat (in: _Dest=0x12ea6b00, _Source="J0107514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" [0207.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0207.739] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0207.739] wcscmp (_String1="J0107516.WMF", _String2=".") returned 1 [0207.739] wcscmp (_String1="J0107516.WMF", _String2="..") returned 1 [0207.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6b88 [0207.739] wcscpy (in: _Dest=0x12ea6b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.739] wcscat (in: _Dest=0x12ea6b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.739] wcscat (in: _Dest=0x12ea6b88, _Source="J0107516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" [0207.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0207.741] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0207.741] wcscmp (_String1="J0107526.WMF", _String2=".") returned 1 [0207.741] wcscmp (_String1="J0107526.WMF", _String2="..") returned 1 [0207.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6c10 [0207.741] wcscpy (in: _Dest=0x12ea6c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.741] wcscat (in: _Dest=0x12ea6c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.741] wcscat (in: _Dest=0x12ea6c10, _Source="J0107526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" [0207.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0207.742] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0207.742] wcscmp (_String1="J0107528.WMF", _String2=".") returned 1 [0207.742] wcscmp (_String1="J0107528.WMF", _String2="..") returned 1 [0207.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6c98 [0207.743] wcscpy (in: _Dest=0x12ea6c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.743] wcscat (in: _Dest=0x12ea6c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.743] wcscat (in: _Dest=0x12ea6c98, _Source="J0107528.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" [0207.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0207.744] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0207.744] wcscmp (_String1="J0107544.WMF", _String2=".") returned 1 [0207.744] wcscmp (_String1="J0107544.WMF", _String2="..") returned 1 [0207.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6d20 [0207.744] wcscpy (in: _Dest=0x12ea6d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.744] wcscat (in: _Dest=0x12ea6d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.744] wcscat (in: _Dest=0x12ea6d20, _Source="J0107544.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" [0207.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0207.746] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0207.746] wcscmp (_String1="J0107658.WMF", _String2=".") returned 1 [0207.746] wcscmp (_String1="J0107658.WMF", _String2="..") returned 1 [0207.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6da8 [0207.746] wcscpy (in: _Dest=0x12ea6da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.746] wcscat (in: _Dest=0x12ea6da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.746] wcscat (in: _Dest=0x12ea6da8, _Source="J0107658.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" [0207.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0207.747] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0207.747] wcscmp (_String1="J0107708.WMF", _String2=".") returned 1 [0207.747] wcscmp (_String1="J0107708.WMF", _String2="..") returned 1 [0207.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6e30 [0207.748] wcscpy (in: _Dest=0x12ea6e30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.748] wcscat (in: _Dest=0x12ea6e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.748] wcscat (in: _Dest=0x12ea6e30, _Source="J0107708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" [0207.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0207.749] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0207.749] wcscmp (_String1="J0107712.WMF", _String2=".") returned 1 [0207.749] wcscmp (_String1="J0107712.WMF", _String2="..") returned 1 [0207.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6eb8 [0207.749] wcscpy (in: _Dest=0x12ea6eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.749] wcscat (in: _Dest=0x12ea6eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.749] wcscat (in: _Dest=0x12ea6eb8, _Source="J0107712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" [0207.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0207.751] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0207.751] wcscmp (_String1="J0107718.WMF", _String2=".") returned 1 [0207.751] wcscmp (_String1="J0107718.WMF", _String2="..") returned 1 [0207.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6f40 [0207.751] wcscpy (in: _Dest=0x12ea6f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.751] wcscat (in: _Dest=0x12ea6f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.751] wcscat (in: _Dest=0x12ea6f40, _Source="J0107718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" [0207.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0207.752] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0207.756] wcscmp (_String1="J0107722.WMF", _String2=".") returned 1 [0207.756] wcscmp (_String1="J0107722.WMF", _String2="..") returned 1 [0207.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea6fc8 [0207.756] wcscpy (in: _Dest=0x12ea6fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.756] wcscat (in: _Dest=0x12ea6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.756] wcscat (in: _Dest=0x12ea6fc8, _Source="J0107722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" [0207.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0207.758] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0207.758] wcscmp (_String1="J0107724.WMF", _String2=".") returned 1 [0207.758] wcscmp (_String1="J0107724.WMF", _String2="..") returned 1 [0207.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7050 [0207.758] wcscpy (in: _Dest=0x12ea7050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.758] wcscat (in: _Dest=0x12ea7050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.758] wcscat (in: _Dest=0x12ea7050, _Source="J0107724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" [0207.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0207.759] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0207.759] wcscmp (_String1="J0107728.WMF", _String2=".") returned 1 [0207.759] wcscmp (_String1="J0107728.WMF", _String2="..") returned 1 [0207.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea70d8 [0207.759] wcscpy (in: _Dest=0x12ea70d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.759] wcscat (in: _Dest=0x12ea70d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.759] wcscat (in: _Dest=0x12ea70d8, _Source="J0107728.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" [0207.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea70d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0207.776] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0207.776] wcscmp (_String1="J0107730.WMF", _String2=".") returned 1 [0207.776] wcscmp (_String1="J0107730.WMF", _String2="..") returned 1 [0207.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7160 [0207.776] wcscpy (in: _Dest=0x12ea7160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.776] wcscat (in: _Dest=0x12ea7160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.776] wcscat (in: _Dest=0x12ea7160, _Source="J0107730.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" [0207.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0207.777] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0207.777] wcscmp (_String1="J0107734.WMF", _String2=".") returned 1 [0207.777] wcscmp (_String1="J0107734.WMF", _String2="..") returned 1 [0207.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea71e8 [0207.777] wcscpy (in: _Dest=0x12ea71e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.777] wcscat (in: _Dest=0x12ea71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.777] wcscat (in: _Dest=0x12ea71e8, _Source="J0107734.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" [0207.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0207.778] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0207.779] wcscmp (_String1="J0107742.WMF", _String2=".") returned 1 [0207.779] wcscmp (_String1="J0107742.WMF", _String2="..") returned 1 [0207.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7270 [0207.779] wcscpy (in: _Dest=0x12ea7270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.779] wcscat (in: _Dest=0x12ea7270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.779] wcscat (in: _Dest=0x12ea7270, _Source="J0107742.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" [0207.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0207.780] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0207.780] wcscmp (_String1="J0107744.WMF", _String2=".") returned 1 [0207.780] wcscmp (_String1="J0107744.WMF", _String2="..") returned 1 [0207.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea72f8 [0207.780] wcscpy (in: _Dest=0x12ea72f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.780] wcscat (in: _Dest=0x12ea72f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.780] wcscat (in: _Dest=0x12ea72f8, _Source="J0107744.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" [0207.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea72f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0207.782] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0207.782] wcscmp (_String1="J0107746.WMF", _String2=".") returned 1 [0207.782] wcscmp (_String1="J0107746.WMF", _String2="..") returned 1 [0207.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7380 [0207.782] wcscpy (in: _Dest=0x12ea7380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.782] wcscat (in: _Dest=0x12ea7380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.782] wcscat (in: _Dest=0x12ea7380, _Source="J0107746.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" [0207.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0207.783] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0207.783] wcscmp (_String1="J0107748.WMF", _String2=".") returned 1 [0207.783] wcscmp (_String1="J0107748.WMF", _String2="..") returned 1 [0207.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7408 [0207.783] wcscpy (in: _Dest=0x12ea7408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.783] wcscat (in: _Dest=0x12ea7408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.783] wcscat (in: _Dest=0x12ea7408, _Source="J0107748.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" [0207.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0207.784] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0207.785] wcscmp (_String1="J0107750.WMF", _String2=".") returned 1 [0207.785] wcscmp (_String1="J0107750.WMF", _String2="..") returned 1 [0207.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7490 [0207.785] wcscpy (in: _Dest=0x12ea7490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.785] wcscat (in: _Dest=0x12ea7490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.785] wcscat (in: _Dest=0x12ea7490, _Source="J0107750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" [0207.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0207.787] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0207.787] wcscmp (_String1="J0136865.WMF", _String2=".") returned 1 [0207.787] wcscmp (_String1="J0136865.WMF", _String2="..") returned 1 [0207.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7518 [0207.787] wcscpy (in: _Dest=0x12ea7518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.787] wcscat (in: _Dest=0x12ea7518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.787] wcscat (in: _Dest=0x12ea7518, _Source="J0136865.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" [0207.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0207.788] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb202900, ftCreationTime.dwHighDateTime=0x1bdbfd3, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb202900, ftLastWriteTime.dwHighDateTime=0x1bdbfd3, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0207.789] wcscmp (_String1="J0144773.JPG", _String2=".") returned 1 [0207.789] wcscmp (_String1="J0144773.JPG", _String2="..") returned 1 [0207.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea75a0 [0207.789] wcscpy (in: _Dest=0x12ea75a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.789] wcscat (in: _Dest=0x12ea75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.789] wcscat (in: _Dest=0x12ea75a0, _Source="J0144773.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" [0207.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0207.790] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0207.790] wcscmp (_String1="J0145168.JPG", _String2=".") returned 1 [0207.790] wcscmp (_String1="J0145168.JPG", _String2="..") returned 1 [0207.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7628 [0207.790] wcscpy (in: _Dest=0x12ea7628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.790] wcscat (in: _Dest=0x12ea7628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.790] wcscat (in: _Dest=0x12ea7628, _Source="J0145168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" [0207.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0207.792] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0207.792] wcscmp (_String1="J0145212.JPG", _String2=".") returned 1 [0207.792] wcscmp (_String1="J0145212.JPG", _String2="..") returned 1 [0207.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea76b0 [0207.792] wcscpy (in: _Dest=0x12ea76b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.792] wcscat (in: _Dest=0x12ea76b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.792] wcscat (in: _Dest=0x12ea76b0, _Source="J0145212.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" [0207.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea76b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0207.793] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0207.793] wcscmp (_String1="J0145272.JPG", _String2=".") returned 1 [0207.794] wcscmp (_String1="J0145272.JPG", _String2="..") returned 1 [0207.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7738 [0207.794] wcscpy (in: _Dest=0x12ea7738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.794] wcscat (in: _Dest=0x12ea7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.794] wcscat (in: _Dest=0x12ea7738, _Source="J0145272.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" [0207.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0207.795] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0207.795] wcscmp (_String1="J0145361.JPG", _String2=".") returned 1 [0207.795] wcscmp (_String1="J0145361.JPG", _String2="..") returned 1 [0207.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea77c0 [0207.795] wcscpy (in: _Dest=0x12ea77c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.795] wcscat (in: _Dest=0x12ea77c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.795] wcscat (in: _Dest=0x12ea77c0, _Source="J0145361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" [0207.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea77c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0207.797] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6afac300, ftCreationTime.dwHighDateTime=0x1bdbfd5, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6afac300, ftLastWriteTime.dwHighDateTime=0x1bdbfd5, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0207.797] wcscmp (_String1="J0145373.JPG", _String2=".") returned 1 [0207.797] wcscmp (_String1="J0145373.JPG", _String2="..") returned 1 [0207.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7848 [0207.797] wcscpy (in: _Dest=0x12ea7848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.797] wcscat (in: _Dest=0x12ea7848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.798] wcscat (in: _Dest=0x12ea7848, _Source="J0145373.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" [0207.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0207.799] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd83900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacd83900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0207.800] wcscmp (_String1="J0145669.JPG", _String2=".") returned 1 [0207.800] wcscmp (_String1="J0145669.JPG", _String2="..") returned 1 [0207.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea78d0 [0207.800] wcscpy (in: _Dest=0x12ea78d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.800] wcscat (in: _Dest=0x12ea78d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.800] wcscat (in: _Dest=0x12ea78d0, _Source="J0145669.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" [0207.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea78d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0207.801] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3a9300, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf3a9300, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0207.801] wcscmp (_String1="J0145707.JPG", _String2=".") returned 1 [0207.801] wcscmp (_String1="J0145707.JPG", _String2="..") returned 1 [0207.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7958 [0207.801] wcscpy (in: _Dest=0x12ea7958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.801] wcscat (in: _Dest=0x12ea7958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.802] wcscat (in: _Dest=0x12ea7958, _Source="J0145707.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" [0207.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0207.804] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe610a900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe610a900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0207.804] wcscmp (_String1="J0145810.JPG", _String2=".") returned 1 [0207.804] wcscmp (_String1="J0145810.JPG", _String2="..") returned 1 [0207.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea79e0 [0207.804] wcscpy (in: _Dest=0x12ea79e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.804] wcscat (in: _Dest=0x12ea79e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.804] wcscat (in: _Dest=0x12ea79e0, _Source="J0145810.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" [0207.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea79e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0207.806] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d2e00, ftCreationTime.dwHighDateTime=0x1c0271b, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b0d2e00, ftLastWriteTime.dwHighDateTime=0x1c0271b, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0207.806] wcscmp (_String1="J0145879.JPG", _String2=".") returned 1 [0207.806] wcscmp (_String1="J0145879.JPG", _String2="..") returned 1 [0207.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7a68 [0207.806] wcscpy (in: _Dest=0x12ea7a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.806] wcscat (in: _Dest=0x12ea7a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.806] wcscat (in: _Dest=0x12ea7a68, _Source="J0145879.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" [0207.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0207.807] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccb0500, ftCreationTime.dwHighDateTime=0x1c03dee, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ccb0500, ftLastWriteTime.dwHighDateTime=0x1c03dee, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0207.807] wcscmp (_String1="J0145895.JPG", _String2=".") returned 1 [0207.807] wcscmp (_String1="J0145895.JPG", _String2="..") returned 1 [0207.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7af0 [0207.808] wcscpy (in: _Dest=0x12ea7af0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.808] wcscat (in: _Dest=0x12ea7af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.808] wcscat (in: _Dest=0x12ea7af0, _Source="J0145895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" [0207.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0207.809] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e47ab00, ftCreationTime.dwHighDateTime=0x1bdbfd7, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e47ab00, ftLastWriteTime.dwHighDateTime=0x1bdbfd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0207.809] wcscmp (_String1="J0145904.JPG", _String2=".") returned 1 [0207.809] wcscmp (_String1="J0145904.JPG", _String2="..") returned 1 [0207.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7b78 [0207.809] wcscpy (in: _Dest=0x12ea7b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.809] wcscat (in: _Dest=0x12ea7b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.809] wcscat (in: _Dest=0x12ea7b78, _Source="J0145904.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" [0207.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0207.811] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0207.811] wcscmp (_String1="J0146142.JPG", _String2=".") returned 1 [0207.811] wcscmp (_String1="J0146142.JPG", _String2="..") returned 1 [0207.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7c00 [0207.811] wcscpy (in: _Dest=0x12ea7c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.811] wcscat (in: _Dest=0x12ea7c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.811] wcscat (in: _Dest=0x12ea7c00, _Source="J0146142.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" [0207.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0207.841] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0207.841] wcscmp (_String1="J0148309.JPG", _String2=".") returned 1 [0207.841] wcscmp (_String1="J0148309.JPG", _String2="..") returned 1 [0207.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7c88 [0207.841] wcscpy (in: _Dest=0x12ea7c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.841] wcscat (in: _Dest=0x12ea7c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.841] wcscat (in: _Dest=0x12ea7c88, _Source="J0148309.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" [0207.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0207.842] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0207.842] wcscmp (_String1="J0148757.JPG", _String2=".") returned 1 [0207.842] wcscmp (_String1="J0148757.JPG", _String2="..") returned 1 [0207.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7d10 [0207.843] wcscpy (in: _Dest=0x12ea7d10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.843] wcscat (in: _Dest=0x12ea7d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.843] wcscat (in: _Dest=0x12ea7d10, _Source="J0148757.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" [0207.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0207.844] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0207.844] wcscmp (_String1="J0148798.JPG", _String2=".") returned 1 [0207.844] wcscmp (_String1="J0148798.JPG", _String2="..") returned 1 [0207.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7d98 [0207.844] wcscpy (in: _Dest=0x12ea7d98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.844] wcscat (in: _Dest=0x12ea7d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.844] wcscat (in: _Dest=0x12ea7d98, _Source="J0148798.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" [0207.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0207.853] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0207.853] wcscmp (_String1="J0149018.JPG", _String2=".") returned 1 [0207.853] wcscmp (_String1="J0149018.JPG", _String2="..") returned 1 [0207.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7e20 [0207.853] wcscpy (in: _Dest=0x12ea7e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.853] wcscat (in: _Dest=0x12ea7e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.853] wcscat (in: _Dest=0x12ea7e20, _Source="J0149018.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" [0207.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0207.855] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0207.855] wcscmp (_String1="J0149118.JPG", _String2=".") returned 1 [0207.855] wcscmp (_String1="J0149118.JPG", _String2="..") returned 1 [0207.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7ea8 [0207.855] wcscpy (in: _Dest=0x12ea7ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.855] wcscat (in: _Dest=0x12ea7ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.855] wcscat (in: _Dest=0x12ea7ea8, _Source="J0149118.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" [0207.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0207.856] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0207.856] wcscmp (_String1="J0150150.WMF", _String2=".") returned 1 [0207.856] wcscmp (_String1="J0150150.WMF", _String2="..") returned 1 [0207.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7f30 [0207.857] wcscpy (in: _Dest=0x12ea7f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.857] wcscat (in: _Dest=0x12ea7f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.857] wcscat (in: _Dest=0x12ea7f30, _Source="J0150150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" [0207.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0207.858] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0207.858] wcscmp (_String1="J0150861.WMF", _String2=".") returned 1 [0207.858] wcscmp (_String1="J0150861.WMF", _String2="..") returned 1 [0207.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea7fb8 [0207.858] wcscpy (in: _Dest=0x12ea7fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.858] wcscat (in: _Dest=0x12ea7fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.858] wcscat (in: _Dest=0x12ea7fb8, _Source="J0150861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" [0207.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea7fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0207.860] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0207.860] wcscmp (_String1="J0151041.WMF", _String2=".") returned 1 [0207.860] wcscmp (_String1="J0151041.WMF", _String2="..") returned 1 [0207.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4060 [0207.860] wcscpy (in: _Dest=0x12ea4060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.860] wcscat (in: _Dest=0x12ea4060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.860] wcscat (in: _Dest=0x12ea4060, _Source="J0151041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" [0207.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0207.861] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0207.861] wcscmp (_String1="J0151045.WMF", _String2=".") returned 1 [0207.861] wcscmp (_String1="J0151045.WMF", _String2="..") returned 1 [0207.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea40e8 [0207.861] wcscpy (in: _Dest=0x12ea40e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.862] wcscat (in: _Dest=0x12ea40e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.862] wcscat (in: _Dest=0x12ea40e8, _Source="J0151045.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" [0207.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea40e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0207.863] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0207.863] wcscmp (_String1="J0151047.WMF", _String2=".") returned 1 [0207.863] wcscmp (_String1="J0151047.WMF", _String2="..") returned 1 [0207.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4170 [0207.863] wcscpy (in: _Dest=0x12ea4170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.863] wcscat (in: _Dest=0x12ea4170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.863] wcscat (in: _Dest=0x12ea4170, _Source="J0151047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" [0207.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0207.865] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0207.866] wcscmp (_String1="J0151055.WMF", _String2=".") returned 1 [0207.866] wcscmp (_String1="J0151055.WMF", _String2="..") returned 1 [0207.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea41f8 [0207.866] wcscpy (in: _Dest=0x12ea41f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.866] wcscat (in: _Dest=0x12ea41f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.866] wcscat (in: _Dest=0x12ea41f8, _Source="J0151055.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" [0207.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea41f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0207.868] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0207.868] wcscmp (_String1="J0151061.WMF", _String2=".") returned 1 [0207.868] wcscmp (_String1="J0151061.WMF", _String2="..") returned 1 [0207.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4280 [0207.868] wcscpy (in: _Dest=0x12ea4280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.868] wcscat (in: _Dest=0x12ea4280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.868] wcscat (in: _Dest=0x12ea4280, _Source="J0151061.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" [0207.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0207.869] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0207.869] wcscmp (_String1="J0151063.WMF", _String2=".") returned 1 [0207.869] wcscmp (_String1="J0151063.WMF", _String2="..") returned 1 [0207.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4308 [0207.869] wcscpy (in: _Dest=0x12ea4308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.869] wcscat (in: _Dest=0x12ea4308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.869] wcscat (in: _Dest=0x12ea4308, _Source="J0151063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" [0207.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0207.871] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0207.871] wcscmp (_String1="J0151067.WMF", _String2=".") returned 1 [0207.871] wcscmp (_String1="J0151067.WMF", _String2="..") returned 1 [0207.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4390 [0207.871] wcscpy (in: _Dest=0x12ea4390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.871] wcscat (in: _Dest=0x12ea4390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.871] wcscat (in: _Dest=0x12ea4390, _Source="J0151067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" [0207.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0207.872] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0207.873] wcscmp (_String1="J0151073.WMF", _String2=".") returned 1 [0207.873] wcscmp (_String1="J0151073.WMF", _String2="..") returned 1 [0207.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4418 [0207.873] wcscpy (in: _Dest=0x12ea4418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.873] wcscat (in: _Dest=0x12ea4418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.873] wcscat (in: _Dest=0x12ea4418, _Source="J0151073.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" [0207.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0207.874] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0207.874] wcscmp (_String1="J0151581.WMF", _String2=".") returned 1 [0207.874] wcscmp (_String1="J0151581.WMF", _String2="..") returned 1 [0207.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea44a0 [0207.874] wcscpy (in: _Dest=0x12ea44a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.874] wcscat (in: _Dest=0x12ea44a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.874] wcscat (in: _Dest=0x12ea44a0, _Source="J0151581.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" [0207.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea44a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0207.875] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0207.876] wcscmp (_String1="J0152414.WMF", _String2=".") returned 1 [0207.876] wcscmp (_String1="J0152414.WMF", _String2="..") returned 1 [0207.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4528 [0207.876] wcscpy (in: _Dest=0x12ea4528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.876] wcscat (in: _Dest=0x12ea4528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.876] wcscat (in: _Dest=0x12ea4528, _Source="J0152414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" [0207.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0207.888] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0207.888] wcscmp (_String1="J0152430.WMF", _String2=".") returned 1 [0207.888] wcscmp (_String1="J0152430.WMF", _String2="..") returned 1 [0207.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea45b0 [0207.888] wcscpy (in: _Dest=0x12ea45b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.888] wcscat (in: _Dest=0x12ea45b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.889] wcscat (in: _Dest=0x12ea45b0, _Source="J0152430.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" [0207.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea45b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0207.890] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0207.890] wcscmp (_String1="J0152432.WMF", _String2=".") returned 1 [0207.890] wcscmp (_String1="J0152432.WMF", _String2="..") returned 1 [0207.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4638 [0207.890] wcscpy (in: _Dest=0x12ea4638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.890] wcscat (in: _Dest=0x12ea4638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.890] wcscat (in: _Dest=0x12ea4638, _Source="J0152432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" [0207.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0207.891] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0207.891] wcscmp (_String1="J0152436.WMF", _String2=".") returned 1 [0207.892] wcscmp (_String1="J0152436.WMF", _String2="..") returned 1 [0207.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea46c0 [0207.892] wcscpy (in: _Dest=0x12ea46c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.892] wcscat (in: _Dest=0x12ea46c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.892] wcscat (in: _Dest=0x12ea46c0, _Source="J0152436.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" [0207.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea46c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0207.893] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0207.893] wcscmp (_String1="J0152556.WMF", _String2=".") returned 1 [0207.893] wcscmp (_String1="J0152556.WMF", _String2="..") returned 1 [0207.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4748 [0207.893] wcscpy (in: _Dest=0x12ea4748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.893] wcscat (in: _Dest=0x12ea4748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.893] wcscat (in: _Dest=0x12ea4748, _Source="J0152556.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" [0207.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0207.894] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0207.895] wcscmp (_String1="J0152558.WMF", _String2=".") returned 1 [0207.895] wcscmp (_String1="J0152558.WMF", _String2="..") returned 1 [0207.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea47d0 [0207.895] wcscpy (in: _Dest=0x12ea47d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.895] wcscat (in: _Dest=0x12ea47d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.895] wcscat (in: _Dest=0x12ea47d0, _Source="J0152558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" [0207.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea47d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0207.896] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0207.896] wcscmp (_String1="J0152560.WMF", _String2=".") returned 1 [0207.896] wcscmp (_String1="J0152560.WMF", _String2="..") returned 1 [0207.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4858 [0207.896] wcscpy (in: _Dest=0x12ea4858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.896] wcscat (in: _Dest=0x12ea4858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.896] wcscat (in: _Dest=0x12ea4858, _Source="J0152560.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" [0207.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0207.898] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0207.898] wcscmp (_String1="J0152568.WMF", _String2=".") returned 1 [0207.898] wcscmp (_String1="J0152568.WMF", _String2="..") returned 1 [0207.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea48e0 [0207.898] wcscpy (in: _Dest=0x12ea48e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.898] wcscat (in: _Dest=0x12ea48e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.898] wcscat (in: _Dest=0x12ea48e0, _Source="J0152568.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" [0207.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea48e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0207.900] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0207.900] wcscmp (_String1="J0152570.WMF", _String2=".") returned 1 [0207.900] wcscmp (_String1="J0152570.WMF", _String2="..") returned 1 [0207.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4968 [0207.900] wcscpy (in: _Dest=0x12ea4968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.900] wcscat (in: _Dest=0x12ea4968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.900] wcscat (in: _Dest=0x12ea4968, _Source="J0152570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" [0207.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0207.901] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0207.901] wcscmp (_String1="J0152590.WMF", _String2=".") returned 1 [0207.901] wcscmp (_String1="J0152590.WMF", _String2="..") returned 1 [0207.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea49f0 [0207.901] wcscpy (in: _Dest=0x12ea49f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.901] wcscat (in: _Dest=0x12ea49f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.901] wcscat (in: _Dest=0x12ea49f0, _Source="J0152590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" [0207.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea49f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0207.903] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0207.903] wcscmp (_String1="J0152594.WMF", _String2=".") returned 1 [0207.903] wcscmp (_String1="J0152594.WMF", _String2="..") returned 1 [0207.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4a78 [0207.903] wcscpy (in: _Dest=0x12ea4a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.903] wcscat (in: _Dest=0x12ea4a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.903] wcscat (in: _Dest=0x12ea4a78, _Source="J0152594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" [0207.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0207.904] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0207.904] wcscmp (_String1="J0152600.WMF", _String2=".") returned 1 [0207.904] wcscmp (_String1="J0152600.WMF", _String2="..") returned 1 [0207.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4b00 [0207.905] wcscpy (in: _Dest=0x12ea4b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.905] wcscat (in: _Dest=0x12ea4b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.905] wcscat (in: _Dest=0x12ea4b00, _Source="J0152600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" [0207.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0207.906] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0207.906] wcscmp (_String1="J0152602.WMF", _String2=".") returned 1 [0207.906] wcscmp (_String1="J0152602.WMF", _String2="..") returned 1 [0207.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4b88 [0207.906] wcscpy (in: _Dest=0x12ea4b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.906] wcscat (in: _Dest=0x12ea4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.906] wcscat (in: _Dest=0x12ea4b88, _Source="J0152602.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" [0207.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0207.908] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0207.908] wcscmp (_String1="J0152606.WMF", _String2=".") returned 1 [0207.908] wcscmp (_String1="J0152606.WMF", _String2="..") returned 1 [0207.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4c10 [0207.909] wcscpy (in: _Dest=0x12ea4c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.910] wcscat (in: _Dest=0x12ea4c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.910] wcscat (in: _Dest=0x12ea4c10, _Source="J0152606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" [0207.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0207.911] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0207.911] wcscmp (_String1="J0152608.WMF", _String2=".") returned 1 [0207.911] wcscmp (_String1="J0152608.WMF", _String2="..") returned 1 [0207.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4c98 [0207.911] wcscpy (in: _Dest=0x12ea4c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.911] wcscat (in: _Dest=0x12ea4c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.911] wcscat (in: _Dest=0x12ea4c98, _Source="J0152608.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" [0207.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0207.913] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0207.913] wcscmp (_String1="J0152610.WMF", _String2=".") returned 1 [0207.913] wcscmp (_String1="J0152610.WMF", _String2="..") returned 1 [0207.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4d20 [0207.913] wcscpy (in: _Dest=0x12ea4d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.913] wcscat (in: _Dest=0x12ea4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.913] wcscat (in: _Dest=0x12ea4d20, _Source="J0152610.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" [0207.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0207.914] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0207.915] wcscmp (_String1="J0152622.WMF", _String2=".") returned 1 [0207.915] wcscmp (_String1="J0152622.WMF", _String2="..") returned 1 [0207.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4da8 [0207.915] wcscpy (in: _Dest=0x12ea4da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.915] wcscat (in: _Dest=0x12ea4da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.915] wcscat (in: _Dest=0x12ea4da8, _Source="J0152622.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" [0207.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0207.916] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0207.916] wcscmp (_String1="J0152626.WMF", _String2=".") returned 1 [0207.916] wcscmp (_String1="J0152626.WMF", _String2="..") returned 1 [0207.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4e30 [0207.916] wcscpy (in: _Dest=0x12ea4e30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.916] wcscat (in: _Dest=0x12ea4e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.916] wcscat (in: _Dest=0x12ea4e30, _Source="J0152626.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" [0207.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0207.918] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0207.918] wcscmp (_String1="J0152628.WMF", _String2=".") returned 1 [0207.918] wcscmp (_String1="J0152628.WMF", _String2="..") returned 1 [0207.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4eb8 [0207.918] wcscpy (in: _Dest=0x12ea4eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.918] wcscat (in: _Dest=0x12ea4eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.918] wcscat (in: _Dest=0x12ea4eb8, _Source="J0152628.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" [0207.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0207.920] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0207.920] wcscmp (_String1="J0152688.WMF", _String2=".") returned 1 [0207.920] wcscmp (_String1="J0152688.WMF", _String2="..") returned 1 [0207.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4f40 [0207.920] wcscpy (in: _Dest=0x12ea4f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.920] wcscat (in: _Dest=0x12ea4f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.920] wcscat (in: _Dest=0x12ea4f40, _Source="J0152688.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" [0207.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0207.921] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0207.921] wcscmp (_String1="J0152690.WMF", _String2=".") returned 1 [0207.921] wcscmp (_String1="J0152690.WMF", _String2="..") returned 1 [0207.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea4fc8 [0207.921] wcscpy (in: _Dest=0x12ea4fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.922] wcscat (in: _Dest=0x12ea4fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.922] wcscat (in: _Dest=0x12ea4fc8, _Source="J0152690.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" [0207.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea4fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0207.923] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0207.923] wcscmp (_String1="J0152694.WMF", _String2=".") returned 1 [0207.923] wcscmp (_String1="J0152694.WMF", _String2="..") returned 1 [0207.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5050 [0207.923] wcscpy (in: _Dest=0x12ea5050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.923] wcscat (in: _Dest=0x12ea5050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.923] wcscat (in: _Dest=0x12ea5050, _Source="J0152694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" [0207.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0207.925] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0207.925] wcscmp (_String1="J0152696.WMF", _String2=".") returned 1 [0207.925] wcscmp (_String1="J0152696.WMF", _String2="..") returned 1 [0207.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea50d8 [0207.925] wcscpy (in: _Dest=0x12ea50d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.925] wcscat (in: _Dest=0x12ea50d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.925] wcscat (in: _Dest=0x12ea50d8, _Source="J0152696.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" [0207.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea50d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0207.946] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0207.946] wcscmp (_String1="J0152698.WMF", _String2=".") returned 1 [0207.946] wcscmp (_String1="J0152698.WMF", _String2="..") returned 1 [0207.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5160 [0207.947] wcscpy (in: _Dest=0x12ea5160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.947] wcscat (in: _Dest=0x12ea5160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.947] wcscat (in: _Dest=0x12ea5160, _Source="J0152698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" [0207.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0207.948] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0207.948] wcscmp (_String1="J0152702.WMF", _String2=".") returned 1 [0207.948] wcscmp (_String1="J0152702.WMF", _String2="..") returned 1 [0207.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea51e8 [0207.948] wcscpy (in: _Dest=0x12ea51e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.948] wcscat (in: _Dest=0x12ea51e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.948] wcscat (in: _Dest=0x12ea51e8, _Source="J0152702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" [0207.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea51e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0207.950] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0207.950] wcscmp (_String1="J0152704.WMF", _String2=".") returned 1 [0207.950] wcscmp (_String1="J0152704.WMF", _String2="..") returned 1 [0207.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5270 [0207.950] wcscpy (in: _Dest=0x12ea5270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.950] wcscat (in: _Dest=0x12ea5270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.950] wcscat (in: _Dest=0x12ea5270, _Source="J0152704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" [0207.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0207.951] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0207.951] wcscmp (_String1="J0152708.WMF", _String2=".") returned 1 [0207.951] wcscmp (_String1="J0152708.WMF", _String2="..") returned 1 [0207.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea52f8 [0207.951] wcscpy (in: _Dest=0x12ea52f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.951] wcscat (in: _Dest=0x12ea52f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.951] wcscat (in: _Dest=0x12ea52f8, _Source="J0152708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" [0207.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea52f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0207.953] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0207.953] wcscmp (_String1="J0152716.WMF", _String2=".") returned 1 [0207.953] wcscmp (_String1="J0152716.WMF", _String2="..") returned 1 [0207.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5380 [0207.953] wcscpy (in: _Dest=0x12ea5380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.953] wcscat (in: _Dest=0x12ea5380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.953] wcscat (in: _Dest=0x12ea5380, _Source="J0152716.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" [0207.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0207.954] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0207.956] wcscmp (_String1="J0152722.WMF", _String2=".") returned 1 [0207.956] wcscmp (_String1="J0152722.WMF", _String2="..") returned 1 [0207.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5408 [0207.956] wcscpy (in: _Dest=0x12ea5408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.956] wcscat (in: _Dest=0x12ea5408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.956] wcscat (in: _Dest=0x12ea5408, _Source="J0152722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" [0207.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0207.961] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0207.961] wcscmp (_String1="J0152876.WMF", _String2=".") returned 1 [0207.961] wcscmp (_String1="J0152876.WMF", _String2="..") returned 1 [0207.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5490 [0207.962] wcscpy (in: _Dest=0x12ea5490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.962] wcscat (in: _Dest=0x12ea5490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.962] wcscat (in: _Dest=0x12ea5490, _Source="J0152876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" [0207.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0207.963] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0207.963] wcscmp (_String1="J0152878.WMF", _String2=".") returned 1 [0207.963] wcscmp (_String1="J0152878.WMF", _String2="..") returned 1 [0207.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5518 [0207.963] wcscpy (in: _Dest=0x12ea5518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.963] wcscat (in: _Dest=0x12ea5518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.963] wcscat (in: _Dest=0x12ea5518, _Source="J0152878.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" [0207.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0207.965] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0207.965] wcscmp (_String1="J0152882.WMF", _String2=".") returned 1 [0207.965] wcscmp (_String1="J0152882.WMF", _String2="..") returned 1 [0207.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea55a0 [0207.965] wcscpy (in: _Dest=0x12ea55a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.965] wcscat (in: _Dest=0x12ea55a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.965] wcscat (in: _Dest=0x12ea55a0, _Source="J0152882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" [0207.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea55a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0207.966] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0207.966] wcscmp (_String1="J0152884.WMF", _String2=".") returned 1 [0207.966] wcscmp (_String1="J0152884.WMF", _String2="..") returned 1 [0207.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5628 [0207.967] wcscpy (in: _Dest=0x12ea5628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.967] wcscat (in: _Dest=0x12ea5628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.967] wcscat (in: _Dest=0x12ea5628, _Source="J0152884.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" [0207.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0207.968] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0207.968] wcscmp (_String1="J0152890.WMF", _String2=".") returned 1 [0207.968] wcscmp (_String1="J0152890.WMF", _String2="..") returned 1 [0207.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea56b0 [0207.968] wcscpy (in: _Dest=0x12ea56b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.968] wcscat (in: _Dest=0x12ea56b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.968] wcscat (in: _Dest=0x12ea56b0, _Source="J0152890.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" [0207.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea56b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0207.969] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0207.970] wcscmp (_String1="J0152892.WMF", _String2=".") returned 1 [0207.970] wcscmp (_String1="J0152892.WMF", _String2="..") returned 1 [0207.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5738 [0207.970] wcscpy (in: _Dest=0x12ea5738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.970] wcscat (in: _Dest=0x12ea5738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.970] wcscat (in: _Dest=0x12ea5738, _Source="J0152892.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" [0207.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0207.971] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0207.971] wcscmp (_String1="J0152894.WMF", _String2=".") returned 1 [0207.971] wcscmp (_String1="J0152894.WMF", _String2="..") returned 1 [0207.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea57c0 [0207.972] wcscpy (in: _Dest=0x12ea57c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.972] wcscat (in: _Dest=0x12ea57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.972] wcscat (in: _Dest=0x12ea57c0, _Source="J0152894.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" [0207.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0207.973] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0207.973] wcscmp (_String1="J0152898.WMF", _String2=".") returned 1 [0207.973] wcscmp (_String1="J0152898.WMF", _String2="..") returned 1 [0207.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5848 [0207.974] wcscpy (in: _Dest=0x12ea5848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.974] wcscat (in: _Dest=0x12ea5848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.974] wcscat (in: _Dest=0x12ea5848, _Source="J0152898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" [0207.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0207.975] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0207.975] wcscmp (_String1="J0153047.WMF", _String2=".") returned 1 [0207.975] wcscmp (_String1="J0153047.WMF", _String2="..") returned 1 [0207.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea58d0 [0207.975] wcscpy (in: _Dest=0x12ea58d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.975] wcscat (in: _Dest=0x12ea58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.975] wcscat (in: _Dest=0x12ea58d0, _Source="J0153047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" [0207.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea58d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0207.977] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0207.977] wcscmp (_String1="J0153087.WMF", _String2=".") returned 1 [0207.977] wcscmp (_String1="J0153087.WMF", _String2="..") returned 1 [0207.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5958 [0207.977] wcscpy (in: _Dest=0x12ea5958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.977] wcscat (in: _Dest=0x12ea5958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.977] wcscat (in: _Dest=0x12ea5958, _Source="J0153087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" [0207.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0207.978] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0207.978] wcscmp (_String1="J0153089.WMF", _String2=".") returned 1 [0207.978] wcscmp (_String1="J0153089.WMF", _String2="..") returned 1 [0207.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea59e0 [0207.979] wcscpy (in: _Dest=0x12ea59e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.979] wcscat (in: _Dest=0x12ea59e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.979] wcscat (in: _Dest=0x12ea59e0, _Source="J0153089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" [0207.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea59e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0207.980] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0207.980] wcscmp (_String1="J0153091.WMF", _String2=".") returned 1 [0207.980] wcscmp (_String1="J0153091.WMF", _String2="..") returned 1 [0207.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5a68 [0207.980] wcscpy (in: _Dest=0x12ea5a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.980] wcscat (in: _Dest=0x12ea5a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.980] wcscat (in: _Dest=0x12ea5a68, _Source="J0153091.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" [0207.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0207.981] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0207.981] wcscmp (_String1="J0153093.WMF", _String2=".") returned 1 [0207.981] wcscmp (_String1="J0153093.WMF", _String2="..") returned 1 [0207.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5af0 [0207.982] wcscpy (in: _Dest=0x12ea5af0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.982] wcscat (in: _Dest=0x12ea5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.982] wcscat (in: _Dest=0x12ea5af0, _Source="J0153093.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" [0207.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0207.983] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0207.983] wcscmp (_String1="J0153095.WMF", _String2=".") returned 1 [0207.983] wcscmp (_String1="J0153095.WMF", _String2="..") returned 1 [0207.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5b78 [0207.983] wcscpy (in: _Dest=0x12ea5b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.983] wcscat (in: _Dest=0x12ea5b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.983] wcscat (in: _Dest=0x12ea5b78, _Source="J0153095.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" [0207.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0207.985] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0207.985] wcscmp (_String1="J0153265.WMF", _String2=".") returned 1 [0207.985] wcscmp (_String1="J0153265.WMF", _String2="..") returned 1 [0207.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5c00 [0207.985] wcscpy (in: _Dest=0x12ea5c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.985] wcscat (in: _Dest=0x12ea5c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.985] wcscat (in: _Dest=0x12ea5c00, _Source="J0153265.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" [0207.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0208.016] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0208.016] wcscmp (_String1="J0153273.WMF", _String2=".") returned 1 [0208.016] wcscmp (_String1="J0153273.WMF", _String2="..") returned 1 [0208.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5c88 [0208.016] wcscpy (in: _Dest=0x12ea5c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.016] wcscat (in: _Dest=0x12ea5c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.016] wcscat (in: _Dest=0x12ea5c88, _Source="J0153273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" [0208.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0208.017] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0208.017] wcscmp (_String1="J0153299.WMF", _String2=".") returned 1 [0208.017] wcscmp (_String1="J0153299.WMF", _String2="..") returned 1 [0208.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5d10 [0208.018] wcscpy (in: _Dest=0x12ea5d10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.018] wcscat (in: _Dest=0x12ea5d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.018] wcscat (in: _Dest=0x12ea5d10, _Source="J0153299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" [0208.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0208.020] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0208.020] wcscmp (_String1="J0153302.WMF", _String2=".") returned 1 [0208.020] wcscmp (_String1="J0153302.WMF", _String2="..") returned 1 [0208.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5d98 [0208.020] wcscpy (in: _Dest=0x12ea5d98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.020] wcscat (in: _Dest=0x12ea5d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.020] wcscat (in: _Dest=0x12ea5d98, _Source="J0153302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" [0208.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0208.022] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0208.022] wcscmp (_String1="J0153305.WMF", _String2=".") returned 1 [0208.022] wcscmp (_String1="J0153305.WMF", _String2="..") returned 1 [0208.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5e20 [0208.022] wcscpy (in: _Dest=0x12ea5e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.022] wcscat (in: _Dest=0x12ea5e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.022] wcscat (in: _Dest=0x12ea5e20, _Source="J0153305.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" [0208.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0208.023] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0208.023] wcscmp (_String1="J0153307.WMF", _String2=".") returned 1 [0208.023] wcscmp (_String1="J0153307.WMF", _String2="..") returned 1 [0208.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5ea8 [0208.024] wcscpy (in: _Dest=0x12ea5ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.024] wcscat (in: _Dest=0x12ea5ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.024] wcscat (in: _Dest=0x12ea5ea8, _Source="J0153307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" [0208.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0208.025] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0208.025] wcscmp (_String1="J0153313.WMF", _String2=".") returned 1 [0208.025] wcscmp (_String1="J0153313.WMF", _String2="..") returned 1 [0208.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5f30 [0208.025] wcscpy (in: _Dest=0x12ea5f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.025] wcscat (in: _Dest=0x12ea5f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.025] wcscat (in: _Dest=0x12ea5f30, _Source="J0153313.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" [0208.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0208.026] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0208.026] wcscmp (_String1="J0153398.WMF", _String2=".") returned 1 [0208.026] wcscmp (_String1="J0153398.WMF", _String2="..") returned 1 [0208.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12ea5fb8 [0208.026] wcscpy (in: _Dest=0x12ea5fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.026] wcscat (in: _Dest=0x12ea5fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.026] wcscat (in: _Dest=0x12ea5fb8, _Source="J0153398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" [0208.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12ea5fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0208.027] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0208.027] wcscmp (_String1="J0153508.WMF", _String2=".") returned 1 [0208.028] wcscmp (_String1="J0153508.WMF", _String2="..") returned 1 [0208.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e060 [0208.028] wcscpy (in: _Dest=0x12e9e060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.028] wcscat (in: _Dest=0x12e9e060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.028] wcscat (in: _Dest=0x12e9e060, _Source="J0153508.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" [0208.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0208.029] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0208.029] wcscmp (_String1="J0153514.WMF", _String2=".") returned 1 [0208.029] wcscmp (_String1="J0153514.WMF", _String2="..") returned 1 [0208.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e0e8 [0208.029] wcscpy (in: _Dest=0x12e9e0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.029] wcscat (in: _Dest=0x12e9e0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.029] wcscat (in: _Dest=0x12e9e0e8, _Source="J0153514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" [0208.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0208.031] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0208.031] wcscmp (_String1="J0153516.WMF", _String2=".") returned 1 [0208.031] wcscmp (_String1="J0153516.WMF", _String2="..") returned 1 [0208.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e170 [0208.031] wcscpy (in: _Dest=0x12e9e170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.031] wcscat (in: _Dest=0x12e9e170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.031] wcscat (in: _Dest=0x12e9e170, _Source="J0153516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" [0208.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0208.033] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0208.033] wcscmp (_String1="J0153518.WMF", _String2=".") returned 1 [0208.033] wcscmp (_String1="J0153518.WMF", _String2="..") returned 1 [0208.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e1f8 [0208.033] wcscpy (in: _Dest=0x12e9e1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.033] wcscat (in: _Dest=0x12e9e1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.033] wcscat (in: _Dest=0x12e9e1f8, _Source="J0153518.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" [0208.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0208.034] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0208.034] wcscmp (_String1="J0156537.WMF", _String2=".") returned 1 [0208.034] wcscmp (_String1="J0156537.WMF", _String2="..") returned 1 [0208.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e280 [0208.035] wcscpy (in: _Dest=0x12e9e280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.035] wcscat (in: _Dest=0x12e9e280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.035] wcscat (in: _Dest=0x12e9e280, _Source="J0156537.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" [0208.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0208.036] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0208.037] wcscmp (_String1="J0157167.WMF", _String2=".") returned 1 [0208.037] wcscmp (_String1="J0157167.WMF", _String2="..") returned 1 [0208.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e308 [0208.037] wcscpy (in: _Dest=0x12e9e308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.037] wcscat (in: _Dest=0x12e9e308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.037] wcscat (in: _Dest=0x12e9e308, _Source="J0157167.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" [0208.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0208.038] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0208.038] wcscmp (_String1="J0157177.WMF", _String2=".") returned 1 [0208.038] wcscmp (_String1="J0157177.WMF", _String2="..") returned 1 [0208.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e390 [0208.038] wcscpy (in: _Dest=0x12e9e390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.038] wcscat (in: _Dest=0x12e9e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.039] wcscat (in: _Dest=0x12e9e390, _Source="J0157177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" [0208.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0208.040] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0208.040] wcscmp (_String1="J0157191.WMF", _String2=".") returned 1 [0208.040] wcscmp (_String1="J0157191.WMF", _String2="..") returned 1 [0208.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e418 [0208.040] wcscpy (in: _Dest=0x12e9e418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.040] wcscat (in: _Dest=0x12e9e418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.040] wcscat (in: _Dest=0x12e9e418, _Source="J0157191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" [0208.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0208.041] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0208.041] wcscmp (_String1="J0157831.WMF", _String2=".") returned 1 [0208.042] wcscmp (_String1="J0157831.WMF", _String2="..") returned 1 [0208.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e4a0 [0208.042] wcscpy (in: _Dest=0x12e9e4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.042] wcscat (in: _Dest=0x12e9e4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.042] wcscat (in: _Dest=0x12e9e4a0, _Source="J0157831.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" [0208.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0208.043] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0208.043] wcscmp (_String1="J0158071.WMF", _String2=".") returned 1 [0208.043] wcscmp (_String1="J0158071.WMF", _String2="..") returned 1 [0208.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e528 [0208.043] wcscpy (in: _Dest=0x12e9e528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.043] wcscat (in: _Dest=0x12e9e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.043] wcscat (in: _Dest=0x12e9e528, _Source="J0158071.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" [0208.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0208.045] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0208.045] wcscmp (_String1="J0158477.WMF", _String2=".") returned 1 [0208.045] wcscmp (_String1="J0158477.WMF", _String2="..") returned 1 [0208.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e5b0 [0208.045] wcscpy (in: _Dest=0x12e9e5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.045] wcscat (in: _Dest=0x12e9e5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.045] wcscat (in: _Dest=0x12e9e5b0, _Source="J0158477.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" [0208.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0208.046] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0208.048] wcscmp (_String1="J0160590.WMF", _String2=".") returned 1 [0208.048] wcscmp (_String1="J0160590.WMF", _String2="..") returned 1 [0208.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e638 [0208.048] wcscpy (in: _Dest=0x12e9e638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.048] wcscat (in: _Dest=0x12e9e638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.048] wcscat (in: _Dest=0x12e9e638, _Source="J0160590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" [0208.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0208.050] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0208.050] wcscmp (_String1="J0164153.JPG", _String2=".") returned 1 [0208.050] wcscmp (_String1="J0164153.JPG", _String2="..") returned 1 [0208.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e6c0 [0208.050] wcscpy (in: _Dest=0x12e9e6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.050] wcscat (in: _Dest=0x12e9e6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.050] wcscat (in: _Dest=0x12e9e6c0, _Source="J0164153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" [0208.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0208.074] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0208.074] wcscmp (_String1="J0168644.WMF", _String2=".") returned 1 [0208.074] wcscmp (_String1="J0168644.WMF", _String2="..") returned 1 [0208.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e748 [0208.074] wcscpy (in: _Dest=0x12e9e748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0208.074] wcscat (in: _Dest=0x12e9e748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0208.074] wcscat (in: _Dest=0x12e9e748, _Source="J0168644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" [0208.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0210.870] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0210.870] wcscmp (_String1="J0171685.WMF", _String2=".") returned 1 [0210.870] wcscmp (_String1="J0171685.WMF", _String2="..") returned 1 [0210.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e7d0 [0210.870] wcscpy (in: _Dest=0x12e9e7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.870] wcscat (in: _Dest=0x12e9e7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.870] wcscat (in: _Dest=0x12e9e7d0, _Source="J0171685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" [0210.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0210.872] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0210.872] wcscmp (_String1="J0171847.WMF", _String2=".") returned 1 [0210.872] wcscmp (_String1="J0171847.WMF", _String2="..") returned 1 [0210.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e858 [0210.872] wcscpy (in: _Dest=0x12e9e858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.872] wcscat (in: _Dest=0x12e9e858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.872] wcscat (in: _Dest=0x12e9e858, _Source="J0171847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" [0210.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0210.873] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0210.873] wcscmp (_String1="J0172035.WMF", _String2=".") returned 1 [0210.874] wcscmp (_String1="J0172035.WMF", _String2="..") returned 1 [0210.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e8e0 [0210.874] wcscpy (in: _Dest=0x12e9e8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.874] wcscat (in: _Dest=0x12e9e8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.874] wcscat (in: _Dest=0x12e9e8e0, _Source="J0172035.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" [0210.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0210.875] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0210.875] wcscmp (_String1="J0172067.WMF", _String2=".") returned 1 [0210.875] wcscmp (_String1="J0172067.WMF", _String2="..") returned 1 [0210.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e968 [0210.875] wcscpy (in: _Dest=0x12e9e968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.875] wcscat (in: _Dest=0x12e9e968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.875] wcscat (in: _Dest=0x12e9e968, _Source="J0172067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" [0210.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0210.877] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0210.877] wcscmp (_String1="J0172193.WMF", _String2=".") returned 1 [0210.877] wcscmp (_String1="J0172193.WMF", _String2="..") returned 1 [0210.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9e9f0 [0210.877] wcscpy (in: _Dest=0x12e9e9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.877] wcscat (in: _Dest=0x12e9e9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.877] wcscat (in: _Dest=0x12e9e9f0, _Source="J0172193.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" [0210.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9e9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0210.879] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0210.879] wcscmp (_String1="J0174315.WMF", _String2=".") returned 1 [0210.879] wcscmp (_String1="J0174315.WMF", _String2="..") returned 1 [0210.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ea78 [0210.879] wcscpy (in: _Dest=0x12e9ea78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.879] wcscat (in: _Dest=0x12e9ea78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.879] wcscat (in: _Dest=0x12e9ea78, _Source="J0174315.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" [0210.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ea78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0210.880] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0210.880] wcscmp (_String1="J0174635.WMF", _String2=".") returned 1 [0210.880] wcscmp (_String1="J0174635.WMF", _String2="..") returned 1 [0210.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9eb00 [0210.880] wcscpy (in: _Dest=0x12e9eb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.880] wcscat (in: _Dest=0x12e9eb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.880] wcscat (in: _Dest=0x12e9eb00, _Source="J0174635.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" [0210.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9eb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0210.882] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0210.882] wcscmp (_String1="J0174639.WMF", _String2=".") returned 1 [0210.882] wcscmp (_String1="J0174639.WMF", _String2="..") returned 1 [0210.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9eb88 [0210.882] wcscpy (in: _Dest=0x12e9eb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.882] wcscat (in: _Dest=0x12e9eb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.882] wcscat (in: _Dest=0x12e9eb88, _Source="J0174639.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" [0210.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9eb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0210.883] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0210.883] wcscmp (_String1="J0174952.JPG", _String2=".") returned 1 [0210.883] wcscmp (_String1="J0174952.JPG", _String2="..") returned 1 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ec10 [0210.884] wcscpy (in: _Dest=0x12e9ec10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.884] wcscat (in: _Dest=0x12e9ec10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.884] wcscat (in: _Dest=0x12e9ec10, _Source="J0174952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" [0210.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ec10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0210.885] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0210.885] wcscmp (_String1="J0175361.JPG", _String2=".") returned 1 [0210.885] wcscmp (_String1="J0175361.JPG", _String2="..") returned 1 [0210.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ec98 [0210.885] wcscpy (in: _Dest=0x12e9ec98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.885] wcscat (in: _Dest=0x12e9ec98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.885] wcscat (in: _Dest=0x12e9ec98, _Source="J0175361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" [0210.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ec98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0210.887] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0210.887] wcscmp (_String1="J0175428.JPG", _String2=".") returned 1 [0210.887] wcscmp (_String1="J0175428.JPG", _String2="..") returned 1 [0210.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ed20 [0210.887] wcscpy (in: _Dest=0x12e9ed20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.887] wcscat (in: _Dest=0x12e9ed20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.887] wcscat (in: _Dest=0x12e9ed20, _Source="J0175428.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" [0210.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ed20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0210.888] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0210.889] wcscmp (_String1="J0177257.JPG", _String2=".") returned 1 [0210.889] wcscmp (_String1="J0177257.JPG", _String2="..") returned 1 [0210.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9eda8 [0210.889] wcscpy (in: _Dest=0x12e9eda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.889] wcscat (in: _Dest=0x12e9eda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.889] wcscat (in: _Dest=0x12e9eda8, _Source="J0177257.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" [0210.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9eda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0210.890] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0210.890] wcscmp (_String1="J0177806.JPG", _String2=".") returned 1 [0210.890] wcscmp (_String1="J0177806.JPG", _String2="..") returned 1 [0210.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ee30 [0210.891] wcscpy (in: _Dest=0x12e9ee30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.891] wcscat (in: _Dest=0x12e9ee30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.891] wcscat (in: _Dest=0x12e9ee30, _Source="J0177806.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" [0210.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0210.892] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0210.892] wcscmp (_String1="J0178348.JPG", _String2=".") returned 1 [0210.892] wcscmp (_String1="J0178348.JPG", _String2="..") returned 1 [0210.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9eeb8 [0210.893] wcscpy (in: _Dest=0x12e9eeb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.893] wcscat (in: _Dest=0x12e9eeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.893] wcscat (in: _Dest=0x12e9eeb8, _Source="J0178348.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" [0210.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9eeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0210.894] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0210.894] wcscmp (_String1="J0178459.JPG", _String2=".") returned 1 [0210.894] wcscmp (_String1="J0178459.JPG", _String2="..") returned 1 [0210.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ef40 [0210.894] wcscpy (in: _Dest=0x12e9ef40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.894] wcscat (in: _Dest=0x12e9ef40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.894] wcscat (in: _Dest=0x12e9ef40, _Source="J0178459.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" [0210.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ef40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0210.896] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x352e7200, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352e7200, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0210.896] wcscmp (_String1="J0178460.JPG", _String2=".") returned 1 [0210.896] wcscmp (_String1="J0178460.JPG", _String2="..") returned 1 [0210.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9efc8 [0210.896] wcscpy (in: _Dest=0x12e9efc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.896] wcscat (in: _Dest=0x12e9efc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.896] wcscat (in: _Dest=0x12e9efc8, _Source="J0178460.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" [0210.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9efc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914 [0210.897] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0210.897] wcscmp (_String1="J0178523.JPG", _String2=".") returned 1 [0210.897] wcscmp (_String1="J0178523.JPG", _String2="..") returned 1 [0210.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f050 [0210.897] wcscpy (in: _Dest=0x12e9f050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.897] wcscat (in: _Dest=0x12e9f050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.897] wcscat (in: _Dest=0x12e9f050, _Source="J0178523.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" [0210.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0210.899] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0210.899] wcscmp (_String1="J0178632.JPG", _String2=".") returned 1 [0210.899] wcscmp (_String1="J0178632.JPG", _String2="..") returned 1 [0210.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f0d8 [0210.899] wcscpy (in: _Dest=0x12e9f0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.899] wcscat (in: _Dest=0x12e9f0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.900] wcscat (in: _Dest=0x12e9f0d8, _Source="J0178632.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" [0210.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0210.901] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0210.901] wcscmp (_String1="J0178639.JPG", _String2=".") returned 1 [0210.901] wcscmp (_String1="J0178639.JPG", _String2="..") returned 1 [0210.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f160 [0210.902] wcscpy (in: _Dest=0x12e9f160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.902] wcscat (in: _Dest=0x12e9f160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.902] wcscat (in: _Dest=0x12e9f160, _Source="J0178639.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" [0210.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0210.903] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0210.903] wcscmp (_String1="J0178932.JPG", _String2=".") returned 1 [0210.903] wcscmp (_String1="J0178932.JPG", _String2="..") returned 1 [0210.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f1e8 [0210.903] wcscpy (in: _Dest=0x12e9f1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.903] wcscat (in: _Dest=0x12e9f1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.904] wcscat (in: _Dest=0x12e9f1e8, _Source="J0178932.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" [0210.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0210.905] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0210.905] wcscmp (_String1="J0179963.JPG", _String2=".") returned 1 [0210.905] wcscmp (_String1="J0179963.JPG", _String2="..") returned 1 [0210.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f270 [0210.906] wcscpy (in: _Dest=0x12e9f270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.906] wcscat (in: _Dest=0x12e9f270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.906] wcscat (in: _Dest=0x12e9f270, _Source="J0179963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" [0210.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0210.914] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0210.914] wcscmp (_String1="J0182689.JPG", _String2=".") returned 1 [0210.914] wcscmp (_String1="J0182689.JPG", _String2="..") returned 1 [0210.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f2f8 [0210.915] wcscpy (in: _Dest=0x12e9f2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.915] wcscat (in: _Dest=0x12e9f2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.915] wcscat (in: _Dest=0x12e9f2f8, _Source="J0182689.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" [0210.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0210.922] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0210.923] wcscmp (_String1="J0182888.WMF", _String2=".") returned 1 [0210.923] wcscmp (_String1="J0182888.WMF", _String2="..") returned 1 [0210.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f380 [0210.923] wcscpy (in: _Dest=0x12e9f380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.923] wcscat (in: _Dest=0x12e9f380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.923] wcscat (in: _Dest=0x12e9f380, _Source="J0182888.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" [0210.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0210.925] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0210.925] wcscmp (_String1="J0182898.WMF", _String2=".") returned 1 [0210.925] wcscmp (_String1="J0182898.WMF", _String2="..") returned 1 [0210.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f408 [0210.926] wcscpy (in: _Dest=0x12e9f408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.926] wcscat (in: _Dest=0x12e9f408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.926] wcscat (in: _Dest=0x12e9f408, _Source="J0182898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" [0210.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0215.154] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0215.154] wcscmp (_String1="J0182902.WMF", _String2=".") returned 1 [0215.154] wcscmp (_String1="J0182902.WMF", _String2="..") returned 1 [0215.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e089e0 [0215.154] wcscpy (in: _Dest=0x3e089e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.154] wcscat (in: _Dest=0x3e089e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.154] wcscat (in: _Dest=0x3e089e0, _Source="J0182902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" [0215.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e089e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0215.432] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65dea00, ftCreationTime.dwHighDateTime=0x1bdf759, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb65dea00, ftLastWriteTime.dwHighDateTime=0x1bdf759, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0215.432] wcscmp (_String1="J0182946.WMF", _String2=".") returned 1 [0215.432] wcscmp (_String1="J0182946.WMF", _String2="..") returned 1 [0215.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f490 [0215.432] wcscpy (in: _Dest=0x12e9f490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.432] wcscat (in: _Dest=0x12e9f490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.432] wcscat (in: _Dest=0x12e9f490, _Source="J0182946.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" [0215.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0215.433] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0215.433] wcscmp (_String1="J0183172.WMF", _String2=".") returned 1 [0215.433] wcscmp (_String1="J0183172.WMF", _String2="..") returned 1 [0215.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f518 [0215.433] wcscpy (in: _Dest=0x12e9f518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.433] wcscat (in: _Dest=0x12e9f518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.433] wcscat (in: _Dest=0x12e9f518, _Source="J0183172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" [0215.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0215.434] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0215.434] wcscmp (_String1="J0183174.WMF", _String2=".") returned 1 [0215.434] wcscmp (_String1="J0183174.WMF", _String2="..") returned 1 [0215.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f5a0 [0215.434] wcscpy (in: _Dest=0x12e9f5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.434] wcscat (in: _Dest=0x12e9f5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.434] wcscat (in: _Dest=0x12e9f5a0, _Source="J0183174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" [0215.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0215.435] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0215.435] wcscmp (_String1="J0183198.WMF", _String2=".") returned 1 [0215.435] wcscmp (_String1="J0183198.WMF", _String2="..") returned 1 [0215.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f628 [0215.435] wcscpy (in: _Dest=0x12e9f628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.435] wcscat (in: _Dest=0x12e9f628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.435] wcscat (in: _Dest=0x12e9f628, _Source="J0183198.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" [0215.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0215.436] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0215.436] wcscmp (_String1="J0183574.WMF", _String2=".") returned 1 [0215.436] wcscmp (_String1="J0183574.WMF", _String2="..") returned 1 [0215.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f6b0 [0215.436] wcscpy (in: _Dest=0x12e9f6b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.436] wcscat (in: _Dest=0x12e9f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.437] wcscat (in: _Dest=0x12e9f6b0, _Source="J0183574.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" [0215.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0215.437] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0215.437] wcscmp (_String1="J0185670.WMF", _String2=".") returned 1 [0215.437] wcscmp (_String1="J0185670.WMF", _String2="..") returned 1 [0215.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f738 [0215.438] wcscpy (in: _Dest=0x12e9f738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.438] wcscat (in: _Dest=0x12e9f738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.438] wcscat (in: _Dest=0x12e9f738, _Source="J0185670.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" [0215.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0215.439] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0215.440] wcscmp (_String1="J0185774.WMF", _String2=".") returned 1 [0215.440] wcscmp (_String1="J0185774.WMF", _String2="..") returned 1 [0215.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f7c0 [0215.440] wcscpy (in: _Dest=0x12e9f7c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.440] wcscat (in: _Dest=0x12e9f7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.440] wcscat (in: _Dest=0x12e9f7c0, _Source="J0185774.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" [0215.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0215.447] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0215.447] wcscmp (_String1="J0185776.WMF", _String2=".") returned 1 [0215.448] wcscmp (_String1="J0185776.WMF", _String2="..") returned 1 [0215.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f848 [0215.448] wcscpy (in: _Dest=0x12e9f848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.448] wcscat (in: _Dest=0x12e9f848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.448] wcscat (in: _Dest=0x12e9f848, _Source="J0185776.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" [0215.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0215.449] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0215.449] wcscmp (_String1="J0185778.WMF", _String2=".") returned 1 [0215.449] wcscmp (_String1="J0185778.WMF", _String2="..") returned 1 [0215.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f8d0 [0215.449] wcscpy (in: _Dest=0x12e9f8d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.449] wcscat (in: _Dest=0x12e9f8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.449] wcscat (in: _Dest=0x12e9f8d0, _Source="J0185778.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" [0215.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0215.450] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0215.450] wcscmp (_String1="J0185780.WMF", _String2=".") returned 1 [0215.450] wcscmp (_String1="J0185780.WMF", _String2="..") returned 1 [0215.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f958 [0215.450] wcscpy (in: _Dest=0x12e9f958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.450] wcscat (in: _Dest=0x12e9f958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.450] wcscat (in: _Dest=0x12e9f958, _Source="J0185780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" [0215.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0215.451] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0215.451] wcscmp (_String1="J0185786.WMF", _String2=".") returned 1 [0215.451] wcscmp (_String1="J0185786.WMF", _String2="..") returned 1 [0215.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9f9e0 [0215.451] wcscpy (in: _Dest=0x12e9f9e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.451] wcscat (in: _Dest=0x12e9f9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.451] wcscat (in: _Dest=0x12e9f9e0, _Source="J0185786.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" [0215.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9f9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0215.452] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0215.452] wcscmp (_String1="J0185790.WMF", _String2=".") returned 1 [0215.452] wcscmp (_String1="J0185790.WMF", _String2="..") returned 1 [0215.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fa68 [0215.452] wcscpy (in: _Dest=0x12e9fa68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.452] wcscat (in: _Dest=0x12e9fa68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.452] wcscat (in: _Dest=0x12e9fa68, _Source="J0185790.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" [0215.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fa68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0215.453] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0215.453] wcscmp (_String1="J0185796.WMF", _String2=".") returned 1 [0215.453] wcscmp (_String1="J0185796.WMF", _String2="..") returned 1 [0215.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9faf0 [0215.453] wcscpy (in: _Dest=0x12e9faf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.453] wcscat (in: _Dest=0x12e9faf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.453] wcscat (in: _Dest=0x12e9faf0, _Source="J0185796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" [0215.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9faf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0215.454] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0215.454] wcscmp (_String1="J0185798.WMF", _String2=".") returned 1 [0215.454] wcscmp (_String1="J0185798.WMF", _String2="..") returned 1 [0215.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fb78 [0215.454] wcscpy (in: _Dest=0x12e9fb78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.454] wcscat (in: _Dest=0x12e9fb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.454] wcscat (in: _Dest=0x12e9fb78, _Source="J0185798.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" [0215.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0215.455] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0215.455] wcscmp (_String1="J0185800.WMF", _String2=".") returned 1 [0215.455] wcscmp (_String1="J0185800.WMF", _String2="..") returned 1 [0215.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fc00 [0215.455] wcscpy (in: _Dest=0x12e9fc00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.456] wcscat (in: _Dest=0x12e9fc00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.456] wcscat (in: _Dest=0x12e9fc00, _Source="J0185800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" [0215.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0215.457] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0215.457] wcscmp (_String1="J0185806.WMF", _String2=".") returned 1 [0215.457] wcscmp (_String1="J0185806.WMF", _String2="..") returned 1 [0215.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fc88 [0215.457] wcscpy (in: _Dest=0x12e9fc88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.457] wcscat (in: _Dest=0x12e9fc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.457] wcscat (in: _Dest=0x12e9fc88, _Source="J0185806.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" [0215.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0215.458] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0215.458] wcscmp (_String1="J0185818.WMF", _String2=".") returned 1 [0215.458] wcscmp (_String1="J0185818.WMF", _String2="..") returned 1 [0215.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fd10 [0215.458] wcscpy (in: _Dest=0x12e9fd10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.458] wcscat (in: _Dest=0x12e9fd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.458] wcscat (in: _Dest=0x12e9fd10, _Source="J0185818.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" [0215.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0215.459] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0215.459] wcscmp (_String1="J0185828.WMF", _String2=".") returned 1 [0215.459] wcscmp (_String1="J0185828.WMF", _String2="..") returned 1 [0215.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fd98 [0215.459] wcscpy (in: _Dest=0x12e9fd98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.459] wcscat (in: _Dest=0x12e9fd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.459] wcscat (in: _Dest=0x12e9fd98, _Source="J0185828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" [0215.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0215.460] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0215.460] wcscmp (_String1="J0185834.WMF", _String2=".") returned 1 [0215.460] wcscmp (_String1="J0185834.WMF", _String2="..") returned 1 [0215.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fe20 [0215.460] wcscpy (in: _Dest=0x12e9fe20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.460] wcscat (in: _Dest=0x12e9fe20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.460] wcscat (in: _Dest=0x12e9fe20, _Source="J0185834.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" [0215.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fe20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0215.461] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0215.461] wcscmp (_String1="J0185842.WMF", _String2=".") returned 1 [0215.461] wcscmp (_String1="J0185842.WMF", _String2="..") returned 1 [0215.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9fea8 [0215.461] wcscpy (in: _Dest=0x12e9fea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.461] wcscat (in: _Dest=0x12e9fea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.461] wcscat (in: _Dest=0x12e9fea8, _Source="J0185842.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" [0215.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9fea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0215.462] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0215.462] wcscmp (_String1="J0186346.WMF", _String2=".") returned 1 [0215.462] wcscmp (_String1="J0186346.WMF", _String2="..") returned 1 [0215.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ff30 [0215.463] wcscpy (in: _Dest=0x12e9ff30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.463] wcscat (in: _Dest=0x12e9ff30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.463] wcscat (in: _Dest=0x12e9ff30, _Source="J0186346.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" [0215.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ff30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0215.463] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0215.463] wcscmp (_String1="J0186360.WMF", _String2=".") returned 1 [0215.464] wcscmp (_String1="J0186360.WMF", _String2="..") returned 1 [0215.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ffb8 [0215.464] wcscpy (in: _Dest=0x12e9ffb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.464] wcscat (in: _Dest=0x12e9ffb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.464] wcscat (in: _Dest=0x12e9ffb8, _Source="J0186360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" [0215.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ffb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0215.465] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0215.465] wcscmp (_String1="J0186362.WMF", _String2=".") returned 1 [0215.465] wcscmp (_String1="J0186362.WMF", _String2="..") returned 1 [0215.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0215.465] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.465] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.465] wcscat (in: _Dest=0x682c348, _Source="J0186362.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" [0215.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0215.466] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0215.466] wcscmp (_String1="J0186364.WMF", _String2=".") returned 1 [0215.466] wcscmp (_String1="J0186364.WMF", _String2="..") returned 1 [0215.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cde8 [0215.466] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.466] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.466] wcscat (in: _Dest=0x682cde8, _Source="J0186364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" [0215.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0215.467] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0215.467] wcscmp (_String1="J0187647.WMF", _String2=".") returned 1 [0215.467] wcscmp (_String1="J0187647.WMF", _String2="..") returned 1 [0215.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0215.467] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.467] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.467] wcscat (in: _Dest=0x682bce8, _Source="J0187647.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" [0215.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0215.468] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0215.468] wcscmp (_String1="J0187815.WMF", _String2=".") returned 1 [0215.468] wcscmp (_String1="J0187815.WMF", _String2="..") returned 1 [0215.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ccd8 [0215.468] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.468] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.468] wcscat (in: _Dest=0x682ccd8, _Source="J0187815.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" [0215.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0215.469] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0215.469] wcscmp (_String1="J0187817.WMF", _String2=".") returned 1 [0215.469] wcscmp (_String1="J0187817.WMF", _String2="..") returned 1 [0215.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c2c0 [0215.469] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.469] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.469] wcscat (in: _Dest=0x682c2c0, _Source="J0187817.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" [0215.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0215.471] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0215.471] wcscmp (_String1="J0187819.WMF", _String2=".") returned 1 [0215.471] wcscmp (_String1="J0187819.WMF", _String2="..") returned 1 [0215.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0215.471] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.471] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.471] wcscat (in: _Dest=0x682c238, _Source="J0187819.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" [0215.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0215.472] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0215.472] wcscmp (_String1="J0187825.WMF", _String2=".") returned 1 [0215.472] wcscmp (_String1="J0187825.WMF", _String2="..") returned 1 [0215.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c810 [0215.472] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.472] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.472] wcscat (in: _Dest=0x682c810, _Source="J0187825.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" [0215.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0215.473] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0215.473] wcscmp (_String1="J0187829.WMF", _String2=".") returned 1 [0215.473] wcscmp (_String1="J0187829.WMF", _String2="..") returned 1 [0215.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0215.473] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.473] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.473] wcscat (in: _Dest=0x682c1b0, _Source="J0187829.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" [0215.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0215.474] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0215.474] wcscmp (_String1="J0187835.WMF", _String2=".") returned 1 [0215.474] wcscmp (_String1="J0187835.WMF", _String2="..") returned 1 [0215.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f261d8 [0215.474] wcscpy (in: _Dest=0x3f261d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.474] wcscat (in: _Dest=0x3f261d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.474] wcscat (in: _Dest=0x3f261d8, _Source="J0187835.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" [0215.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f261d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0215.475] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0215.475] wcscmp (_String1="J0187837.WMF", _String2=".") returned 1 [0215.475] wcscmp (_String1="J0187837.WMF", _String2="..") returned 1 [0215.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26b68 [0215.476] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.476] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.476] wcscat (in: _Dest=0x3f26b68, _Source="J0187837.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" [0215.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0215.778] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0215.778] wcscmp (_String1="J0187839.WMF", _String2=".") returned 1 [0215.778] wcscmp (_String1="J0187839.WMF", _String2="..") returned 1 [0215.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cf80 [0215.778] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.778] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.778] wcscat (in: _Dest=0x682cf80, _Source="J0187839.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" [0215.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0215.779] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0215.779] wcscmp (_String1="J0187847.WMF", _String2=".") returned 1 [0215.779] wcscmp (_String1="J0187847.WMF", _String2="..") returned 1 [0215.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cb40 [0215.779] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.779] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.779] wcscat (in: _Dest=0x682cb40, _Source="J0187847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" [0215.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0215.780] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0215.780] wcscmp (_String1="J0187849.WMF", _String2=".") returned 1 [0215.780] wcscmp (_String1="J0187849.WMF", _String2="..") returned 1 [0215.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0215.780] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.780] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.780] wcscat (in: _Dest=0x682c0a0, _Source="J0187849.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" [0215.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0215.781] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0215.781] wcscmp (_String1="J0187851.WMF", _String2=".") returned 1 [0215.781] wcscmp (_String1="J0187851.WMF", _String2="..") returned 1 [0215.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27938 [0215.781] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.781] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.782] wcscat (in: _Dest=0x3f27938, _Source="J0187851.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" [0215.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0215.782] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0215.782] wcscmp (_String1="J0187859.WMF", _String2=".") returned 1 [0215.782] wcscmp (_String1="J0187859.WMF", _String2="..") returned 1 [0215.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27718 [0215.782] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.783] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.783] wcscat (in: _Dest=0x3f27718, _Source="J0187859.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" [0215.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0215.783] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0215.783] wcscmp (_String1="J0187861.WMF", _String2=".") returned 1 [0215.783] wcscmp (_String1="J0187861.WMF", _String2="..") returned 1 [0215.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27140 [0215.783] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.783] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.784] wcscat (in: _Dest=0x3f27140, _Source="J0187861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" [0215.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0215.784] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0215.784] wcscmp (_String1="J0187863.WMF", _String2=".") returned 1 [0215.784] wcscmp (_String1="J0187863.WMF", _String2="..") returned 1 [0215.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27360 [0215.785] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.785] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.785] wcscat (in: _Dest=0x3f27360, _Source="J0187863.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" [0215.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0215.786] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0215.786] wcscmp (_String1="J0187881.WMF", _String2=".") returned 1 [0215.786] wcscmp (_String1="J0187881.WMF", _String2="..") returned 1 [0215.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27690 [0215.786] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.786] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.786] wcscat (in: _Dest=0x3f27690, _Source="J0187881.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" [0215.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0215.787] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0215.788] wcscmp (_String1="J0187883.WMF", _String2=".") returned 1 [0215.788] wcscmp (_String1="J0187883.WMF", _String2="..") returned 1 [0215.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0215.788] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.788] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.788] wcscat (in: _Dest=0x36ead8, _Source="J0187883.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" [0215.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0215.789] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0215.789] wcscmp (_String1="J0187893.WMF", _String2=".") returned 1 [0215.789] wcscmp (_String1="J0187893.WMF", _String2="..") returned 1 [0215.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f02e0 [0215.789] wcscpy (in: _Dest=0x66f02e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.789] wcscat (in: _Dest=0x66f02e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.789] wcscat (in: _Dest=0x66f02e0, _Source="J0187893.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" [0215.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f02e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0215.790] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0215.790] wcscmp (_String1="J0187895.WMF", _String2=".") returned 1 [0215.790] wcscmp (_String1="J0187895.WMF", _String2="..") returned 1 [0215.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766ab8 [0215.790] wcscpy (in: _Dest=0x6766ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.790] wcscat (in: _Dest=0x6766ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.790] wcscat (in: _Dest=0x6766ab8, _Source="J0187895.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" [0215.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0215.791] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0215.791] wcscmp (_String1="J0187921.WMF", _String2=".") returned 1 [0215.791] wcscmp (_String1="J0187921.WMF", _String2="..") returned 1 [0215.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766b40 [0215.792] wcscpy (in: _Dest=0x6766b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.792] wcscat (in: _Dest=0x6766b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.792] wcscat (in: _Dest=0x6766b40, _Source="J0187921.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" [0215.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0215.792] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0215.792] wcscmp (_String1="J0188511.WMF", _String2=".") returned 1 [0215.793] wcscmp (_String1="J0188511.WMF", _String2="..") returned 1 [0215.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766bc8 [0215.793] wcscpy (in: _Dest=0x6766bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.793] wcscat (in: _Dest=0x6766bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.793] wcscat (in: _Dest=0x6766bc8, _Source="J0188511.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" [0215.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0215.794] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0215.794] wcscmp (_String1="J0188513.WMF", _String2=".") returned 1 [0215.794] wcscmp (_String1="J0188513.WMF", _String2="..") returned 1 [0215.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766c50 [0215.794] wcscpy (in: _Dest=0x6766c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.794] wcscat (in: _Dest=0x6766c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.794] wcscat (in: _Dest=0x6766c50, _Source="J0188513.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" [0215.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0215.795] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0215.795] wcscmp (_String1="J0188519.WMF", _String2=".") returned 1 [0215.795] wcscmp (_String1="J0188519.WMF", _String2="..") returned 1 [0215.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766cd8 [0215.795] wcscpy (in: _Dest=0x6766cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.795] wcscat (in: _Dest=0x6766cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.795] wcscat (in: _Dest=0x6766cd8, _Source="J0188519.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" [0215.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0215.797] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0215.797] wcscmp (_String1="J0188587.WMF", _String2=".") returned 1 [0215.797] wcscmp (_String1="J0188587.WMF", _String2="..") returned 1 [0215.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766d60 [0215.797] wcscpy (in: _Dest=0x6766d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.797] wcscat (in: _Dest=0x6766d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.797] wcscat (in: _Dest=0x6766d60, _Source="J0188587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" [0215.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0215.798] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0215.799] wcscmp (_String1="J0188667.WMF", _String2=".") returned 1 [0215.799] wcscmp (_String1="J0188667.WMF", _String2="..") returned 1 [0215.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766de8 [0215.799] wcscpy (in: _Dest=0x6766de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.799] wcscat (in: _Dest=0x6766de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.799] wcscat (in: _Dest=0x6766de8, _Source="J0188667.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" [0215.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0215.800] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0215.800] wcscmp (_String1="J0188669.WMF", _String2=".") returned 1 [0215.800] wcscmp (_String1="J0188669.WMF", _String2="..") returned 1 [0215.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766e70 [0215.800] wcscpy (in: _Dest=0x6766e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.800] wcscat (in: _Dest=0x6766e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.800] wcscat (in: _Dest=0x6766e70, _Source="J0188669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" [0215.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0215.801] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0215.801] wcscmp (_String1="J0188679.WMF", _String2=".") returned 1 [0215.801] wcscmp (_String1="J0188679.WMF", _String2="..") returned 1 [0215.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766ef8 [0215.802] wcscpy (in: _Dest=0x6766ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.802] wcscat (in: _Dest=0x6766ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.802] wcscat (in: _Dest=0x6766ef8, _Source="J0188679.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" [0215.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0215.803] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0215.803] wcscmp (_String1="J0195248.WMF", _String2=".") returned 1 [0215.803] wcscmp (_String1="J0195248.WMF", _String2="..") returned 1 [0215.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6766f80 [0215.804] wcscpy (in: _Dest=0x6766f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.804] wcscat (in: _Dest=0x6766f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.804] wcscat (in: _Dest=0x6766f80, _Source="J0195248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" [0215.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0215.805] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17119f00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17119f00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0215.805] wcscmp (_String1="J0195254.WMF", _String2=".") returned 1 [0215.805] wcscmp (_String1="J0195254.WMF", _String2="..") returned 1 [0215.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767008 [0215.805] wcscpy (in: _Dest=0x6767008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.805] wcscat (in: _Dest=0x6767008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.805] wcscat (in: _Dest=0x6767008, _Source="J0195254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" [0215.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0215.806] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aa52600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aa52600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0215.807] wcscmp (_String1="J0195260.WMF", _String2=".") returned 1 [0215.807] wcscmp (_String1="J0195260.WMF", _String2="..") returned 1 [0215.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767090 [0215.807] wcscpy (in: _Dest=0x6767090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.807] wcscat (in: _Dest=0x6767090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.807] wcscat (in: _Dest=0x6767090, _Source="J0195260.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" [0215.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0215.808] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db7f600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2db7f600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0215.808] wcscmp (_String1="J0195320.WMF", _String2=".") returned 1 [0215.808] wcscmp (_String1="J0195320.WMF", _String2="..") returned 1 [0215.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767118 [0215.808] wcscpy (in: _Dest=0x6767118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.809] wcscat (in: _Dest=0x6767118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.809] wcscat (in: _Dest=0x6767118, _Source="J0195320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" [0215.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0215.810] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e686c00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e686c00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0215.810] wcscmp (_String1="J0195342.WMF", _String2=".") returned 1 [0215.810] wcscmp (_String1="J0195342.WMF", _String2="..") returned 1 [0215.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67671a0 [0215.810] wcscpy (in: _Dest=0x67671a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.810] wcscat (in: _Dest=0x67671a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.810] wcscat (in: _Dest=0x67671a0, _Source="J0195342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" [0215.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67671a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0215.811] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0215.811] wcscmp (_String1="J0195428.WMF", _String2=".") returned 1 [0215.811] wcscmp (_String1="J0195428.WMF", _String2="..") returned 1 [0215.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767228 [0215.812] wcscpy (in: _Dest=0x6767228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.812] wcscat (in: _Dest=0x6767228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.812] wcscat (in: _Dest=0x6767228, _Source="J0195428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" [0215.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0215.813] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0215.813] wcscmp (_String1="J0195772.WMF", _String2=".") returned 1 [0215.813] wcscmp (_String1="J0195772.WMF", _String2="..") returned 1 [0215.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67672b0 [0215.813] wcscpy (in: _Dest=0x67672b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.813] wcscat (in: _Dest=0x67672b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.813] wcscat (in: _Dest=0x67672b0, _Source="J0195772.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" [0215.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67672b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0215.814] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0215.814] wcscmp (_String1="J0195788.WMF", _String2=".") returned 1 [0215.814] wcscmp (_String1="J0195788.WMF", _String2="..") returned 1 [0215.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767338 [0215.815] wcscpy (in: _Dest=0x6767338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.815] wcscat (in: _Dest=0x6767338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.815] wcscat (in: _Dest=0x6767338, _Source="J0195788.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" [0215.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0215.816] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0215.816] wcscmp (_String1="J0196060.WMF", _String2=".") returned 1 [0215.816] wcscmp (_String1="J0196060.WMF", _String2="..") returned 1 [0215.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67673c0 [0215.816] wcscpy (in: _Dest=0x67673c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0215.816] wcscat (in: _Dest=0x67673c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0215.816] wcscat (in: _Dest=0x67673c0, _Source="J0196060.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" [0215.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67673c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0217.090] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0217.090] wcscmp (_String1="J0196110.WMF", _String2=".") returned 1 [0217.090] wcscmp (_String1="J0196110.WMF", _String2="..") returned 1 [0217.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767448 [0217.090] wcscpy (in: _Dest=0x6767448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.090] wcscat (in: _Dest=0x6767448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.090] wcscat (in: _Dest=0x6767448, _Source="J0196110.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" [0217.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0217.381] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0217.381] wcscmp (_String1="J0196142.WMF", _String2=".") returned 1 [0217.381] wcscmp (_String1="J0196142.WMF", _String2="..") returned 1 [0217.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67674d0 [0217.381] wcscpy (in: _Dest=0x67674d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.382] wcscat (in: _Dest=0x67674d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.382] wcscat (in: _Dest=0x67674d0, _Source="J0196142.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" [0217.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67674d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0217.383] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d32f00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d32f00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0217.383] wcscmp (_String1="J0196354.WMF", _String2=".") returned 1 [0217.383] wcscmp (_String1="J0196354.WMF", _String2="..") returned 1 [0217.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767558 [0217.383] wcscpy (in: _Dest=0x6767558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.383] wcscat (in: _Dest=0x6767558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.383] wcscat (in: _Dest=0x6767558, _Source="J0196354.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" [0217.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0217.385] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa045c00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa045c00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0217.385] wcscmp (_String1="J0196358.WMF", _String2=".") returned 1 [0217.385] wcscmp (_String1="J0196358.WMF", _String2="..") returned 1 [0217.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67675e0 [0217.385] wcscpy (in: _Dest=0x67675e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.385] wcscat (in: _Dest=0x67675e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.385] wcscat (in: _Dest=0x67675e0, _Source="J0196358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" [0217.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67675e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0217.387] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd97e300, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd97e300, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0217.387] wcscmp (_String1="J0196364.WMF", _String2=".") returned 1 [0217.387] wcscmp (_String1="J0196364.WMF", _String2="..") returned 1 [0217.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767668 [0217.387] wcscpy (in: _Dest=0x6767668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.387] wcscat (in: _Dest=0x6767668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.387] wcscat (in: _Dest=0x6767668, _Source="J0196364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" [0217.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0217.389] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0217.389] wcscmp (_String1="J0197979.WMF", _String2=".") returned 1 [0217.389] wcscmp (_String1="J0197979.WMF", _String2="..") returned 1 [0217.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67676f0 [0217.389] wcscpy (in: _Dest=0x67676f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.389] wcscat (in: _Dest=0x67676f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.389] wcscat (in: _Dest=0x67676f0, _Source="J0197979.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" [0217.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67676f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0217.390] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb922a800, ftCreationTime.dwHighDateTime=0x1be3d65, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb922a800, ftLastWriteTime.dwHighDateTime=0x1be3d65, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0217.390] wcscmp (_String1="J0197983.WMF", _String2=".") returned 1 [0217.390] wcscmp (_String1="J0197983.WMF", _String2="..") returned 1 [0217.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767778 [0217.390] wcscpy (in: _Dest=0x6767778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.390] wcscat (in: _Dest=0x6767778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.391] wcscat (in: _Dest=0x6767778, _Source="J0197983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" [0217.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0217.392] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f334800, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f334800, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0217.392] wcscmp (_String1="J0198016.WMF", _String2=".") returned 1 [0217.392] wcscmp (_String1="J0198016.WMF", _String2="..") returned 1 [0217.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767800 [0217.392] wcscpy (in: _Dest=0x6767800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.392] wcscat (in: _Dest=0x6767800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.392] wcscat (in: _Dest=0x6767800, _Source="J0198016.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" [0217.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0217.393] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e2700, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72e2700, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0217.394] wcscmp (_String1="J0198020.WMF", _String2=".") returned 1 [0217.394] wcscmp (_String1="J0198020.WMF", _String2="..") returned 1 [0217.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767888 [0217.394] wcscpy (in: _Dest=0x6767888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.394] wcscat (in: _Dest=0x6767888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.394] wcscat (in: _Dest=0x6767888, _Source="J0198020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" [0217.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0217.395] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9908100, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9908100, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0217.395] wcscmp (_String1="J0198021.WMF", _String2=".") returned 1 [0217.395] wcscmp (_String1="J0198021.WMF", _String2="..") returned 1 [0217.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767910 [0217.396] wcscpy (in: _Dest=0x6767910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.396] wcscat (in: _Dest=0x6767910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.396] wcscat (in: _Dest=0x6767910, _Source="J0198021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" [0217.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0217.397] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31da00, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae31da00, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0217.398] wcscmp (_String1="J0198022.WMF", _String2=".") returned 1 [0217.398] wcscmp (_String1="J0198022.WMF", _String2="..") returned 1 [0217.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767998 [0217.398] wcscpy (in: _Dest=0x6767998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.398] wcscat (in: _Dest=0x6767998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.398] wcscat (in: _Dest=0x6767998, _Source="J0198022.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" [0217.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0217.399] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1319e900, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1319e900, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0217.399] wcscmp (_String1="J0198025.WMF", _String2=".") returned 1 [0217.399] wcscmp (_String1="J0198025.WMF", _String2="..") returned 1 [0217.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767a20 [0217.399] wcscpy (in: _Dest=0x6767a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.399] wcscat (in: _Dest=0x6767a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.399] wcscat (in: _Dest=0x6767a20, _Source="J0198025.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" [0217.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0217.401] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x608be900, ftCreationTime.dwHighDateTime=0x1bd9f94, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x608be900, ftLastWriteTime.dwHighDateTime=0x1bd9f94, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0217.401] wcscmp (_String1="J0198102.WMF", _String2=".") returned 1 [0217.401] wcscmp (_String1="J0198102.WMF", _String2="..") returned 1 [0217.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767aa8 [0217.401] wcscpy (in: _Dest=0x6767aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.401] wcscat (in: _Dest=0x6767aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.401] wcscat (in: _Dest=0x6767aa8, _Source="J0198102.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" [0217.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0217.403] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6214ea00, ftCreationTime.dwHighDateTime=0x1bda044, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6214ea00, ftLastWriteTime.dwHighDateTime=0x1bda044, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0217.403] wcscmp (_String1="J0198113.WMF", _String2=".") returned 1 [0217.403] wcscmp (_String1="J0198113.WMF", _String2="..") returned 1 [0217.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767b30 [0217.403] wcscpy (in: _Dest=0x6767b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.403] wcscat (in: _Dest=0x6767b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.403] wcscat (in: _Dest=0x6767b30, _Source="J0198113.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" [0217.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0217.404] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0217.406] wcscmp (_String1="J0198226.WMF", _String2=".") returned 1 [0217.406] wcscmp (_String1="J0198226.WMF", _String2="..") returned 1 [0217.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767bb8 [0217.406] wcscpy (in: _Dest=0x6767bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.406] wcscat (in: _Dest=0x6767bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.406] wcscat (in: _Dest=0x6767bb8, _Source="J0198226.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" [0217.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0217.407] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0217.407] wcscmp (_String1="J0198234.WMF", _String2=".") returned 1 [0217.407] wcscmp (_String1="J0198234.WMF", _String2="..") returned 1 [0217.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767c40 [0217.407] wcscpy (in: _Dest=0x6767c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.407] wcscat (in: _Dest=0x6767c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.407] wcscat (in: _Dest=0x6767c40, _Source="J0198234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" [0217.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0217.409] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0217.409] wcscmp (_String1="J0198372.WMF", _String2=".") returned 1 [0217.409] wcscmp (_String1="J0198372.WMF", _String2="..") returned 1 [0217.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767cc8 [0217.409] wcscpy (in: _Dest=0x6767cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.409] wcscat (in: _Dest=0x6767cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.409] wcscat (in: _Dest=0x6767cc8, _Source="J0198372.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" [0217.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0217.411] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c73100, ftCreationTime.dwHighDateTime=0x1be3a6d, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c73100, ftLastWriteTime.dwHighDateTime=0x1be3a6d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0217.411] wcscmp (_String1="J0198377.WMF", _String2=".") returned 1 [0217.411] wcscmp (_String1="J0198377.WMF", _String2="..") returned 1 [0217.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767d50 [0217.411] wcscpy (in: _Dest=0x6767d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.411] wcscat (in: _Dest=0x6767d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.411] wcscat (in: _Dest=0x6767d50, _Source="J0198377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" [0217.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0217.413] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0217.413] wcscmp (_String1="J0198447.WMF", _String2=".") returned 1 [0217.413] wcscmp (_String1="J0198447.WMF", _String2="..") returned 1 [0217.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767dd8 [0217.413] wcscpy (in: _Dest=0x6767dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.413] wcscat (in: _Dest=0x6767dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.413] wcscat (in: _Dest=0x6767dd8, _Source="J0198447.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" [0217.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0217.415] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0217.415] wcscmp (_String1="J0198494.WMF", _String2=".") returned 1 [0217.415] wcscmp (_String1="J0198494.WMF", _String2="..") returned 1 [0217.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767e60 [0217.415] wcscpy (in: _Dest=0x6767e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.415] wcscat (in: _Dest=0x6767e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.415] wcscat (in: _Dest=0x6767e60, _Source="J0198494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" [0217.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0217.416] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0217.416] wcscmp (_String1="J0198712.WMF", _String2=".") returned 1 [0217.416] wcscmp (_String1="J0198712.WMF", _String2="..") returned 1 [0217.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767ee8 [0217.417] wcscpy (in: _Dest=0x6767ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.417] wcscat (in: _Dest=0x6767ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.417] wcscat (in: _Dest=0x6767ee8, _Source="J0198712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" [0217.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0217.418] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0217.418] wcscmp (_String1="J0199279.WMF", _String2=".") returned 1 [0217.418] wcscmp (_String1="J0199279.WMF", _String2="..") returned 1 [0217.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767f70 [0217.418] wcscpy (in: _Dest=0x6767f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0217.418] wcscat (in: _Dest=0x6767f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0217.418] wcscat (in: _Dest=0x6767f70, _Source="J0199279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" [0217.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0218.628] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0218.628] wcscmp (_String1="J0199303.WMF", _String2=".") returned 1 [0218.628] wcscmp (_String1="J0199303.WMF", _String2="..") returned 1 [0218.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6767ff8 [0218.628] wcscpy (in: _Dest=0x6767ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.628] wcscat (in: _Dest=0x6767ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.628] wcscat (in: _Dest=0x6767ff8, _Source="J0199303.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" [0218.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6767ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0218.720] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0218.720] wcscmp (_String1="J0199307.WMF", _String2=".") returned 1 [0218.720] wcscmp (_String1="J0199307.WMF", _String2="..") returned 1 [0218.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768080 [0218.720] wcscpy (in: _Dest=0x6768080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.720] wcscat (in: _Dest=0x6768080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.720] wcscat (in: _Dest=0x6768080, _Source="J0199307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" [0218.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0218.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0218.721] wcscmp (_String1="J0199423.WMF", _String2=".") returned 1 [0218.721] wcscmp (_String1="J0199423.WMF", _String2="..") returned 1 [0218.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768108 [0218.722] wcscpy (in: _Dest=0x6768108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.722] wcscat (in: _Dest=0x6768108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.722] wcscat (in: _Dest=0x6768108, _Source="J0199423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" [0218.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0218.723] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0218.723] wcscmp (_String1="J0199429.WMF", _String2=".") returned 1 [0218.723] wcscmp (_String1="J0199429.WMF", _String2="..") returned 1 [0218.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768190 [0218.723] wcscpy (in: _Dest=0x6768190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.724] wcscat (in: _Dest=0x6768190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.724] wcscat (in: _Dest=0x6768190, _Source="J0199429.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" [0218.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0218.725] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0218.725] wcscmp (_String1="J0199465.WMF", _String2=".") returned 1 [0218.725] wcscmp (_String1="J0199465.WMF", _String2="..") returned 1 [0218.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768218 [0218.725] wcscpy (in: _Dest=0x6768218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.725] wcscat (in: _Dest=0x6768218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.725] wcscat (in: _Dest=0x6768218, _Source="J0199465.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" [0218.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0218.727] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0218.727] wcscmp (_String1="J0199469.WMF", _String2=".") returned 1 [0218.727] wcscmp (_String1="J0199469.WMF", _String2="..") returned 1 [0218.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67682a0 [0218.727] wcscpy (in: _Dest=0x67682a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.727] wcscat (in: _Dest=0x67682a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.727] wcscat (in: _Dest=0x67682a0, _Source="J0199469.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" [0218.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67682a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0218.728] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0218.728] wcscmp (_String1="J0199473.WMF", _String2=".") returned 1 [0218.729] wcscmp (_String1="J0199473.WMF", _String2="..") returned 1 [0218.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768328 [0218.729] wcscpy (in: _Dest=0x6768328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.729] wcscat (in: _Dest=0x6768328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.729] wcscat (in: _Dest=0x6768328, _Source="J0199473.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" [0218.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0218.730] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0218.730] wcscmp (_String1="J0199475.WMF", _String2=".") returned 1 [0218.730] wcscmp (_String1="J0199475.WMF", _String2="..") returned 1 [0218.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67683b0 [0218.730] wcscpy (in: _Dest=0x67683b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.730] wcscat (in: _Dest=0x67683b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.730] wcscat (in: _Dest=0x67683b0, _Source="J0199475.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" [0218.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67683b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0218.732] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0218.732] wcscmp (_String1="J0199483.WMF", _String2=".") returned 1 [0218.732] wcscmp (_String1="J0199483.WMF", _String2="..") returned 1 [0218.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768438 [0218.732] wcscpy (in: _Dest=0x6768438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.732] wcscat (in: _Dest=0x6768438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.732] wcscat (in: _Dest=0x6768438, _Source="J0199483.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" [0218.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0218.733] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2c600, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f2c600, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0218.733] wcscmp (_String1="J0199609.WMF", _String2=".") returned 1 [0218.734] wcscmp (_String1="J0199609.WMF", _String2="..") returned 1 [0218.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67684c0 [0218.734] wcscpy (in: _Dest=0x67684c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.734] wcscat (in: _Dest=0x67684c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.734] wcscat (in: _Dest=0x67684c0, _Source="J0199609.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" [0218.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67684c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0218.735] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0218.735] wcscmp (_String1="J0200151.WMF", _String2=".") returned 1 [0218.735] wcscmp (_String1="J0200151.WMF", _String2="..") returned 1 [0218.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768548 [0218.735] wcscpy (in: _Dest=0x6768548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.735] wcscat (in: _Dest=0x6768548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.736] wcscat (in: _Dest=0x6768548, _Source="J0200151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" [0218.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0218.737] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0218.737] wcscmp (_String1="J0200163.WMF", _String2=".") returned 1 [0218.737] wcscmp (_String1="J0200163.WMF", _String2="..") returned 1 [0218.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67685d0 [0218.737] wcscpy (in: _Dest=0x67685d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.737] wcscat (in: _Dest=0x67685d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.737] wcscat (in: _Dest=0x67685d0, _Source="J0200163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" [0218.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67685d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0218.738] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0218.739] wcscmp (_String1="J0200183.WMF", _String2=".") returned 1 [0218.739] wcscmp (_String1="J0200183.WMF", _String2="..") returned 1 [0218.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768658 [0218.739] wcscpy (in: _Dest=0x6768658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.739] wcscat (in: _Dest=0x6768658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.739] wcscat (in: _Dest=0x6768658, _Source="J0200183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" [0218.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0218.740] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0218.740] wcscmp (_String1="J0200189.WMF", _String2=".") returned 1 [0218.740] wcscmp (_String1="J0200189.WMF", _String2="..") returned 1 [0218.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67686e0 [0218.740] wcscpy (in: _Dest=0x67686e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.741] wcscat (in: _Dest=0x67686e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.741] wcscat (in: _Dest=0x67686e0, _Source="J0200189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" [0218.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67686e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0218.742] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b91a000, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b91a000, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0218.742] wcscmp (_String1="J0200273.WMF", _String2=".") returned 1 [0218.742] wcscmp (_String1="J0200273.WMF", _String2="..") returned 1 [0218.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768768 [0218.742] wcscpy (in: _Dest=0x6768768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.742] wcscat (in: _Dest=0x6768768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.742] wcscat (in: _Dest=0x6768768, _Source="J0200273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" [0218.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0218.743] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f252700, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f252700, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0218.743] wcscmp (_String1="J0200279.WMF", _String2=".") returned 1 [0218.744] wcscmp (_String1="J0200279.WMF", _String2="..") returned 1 [0218.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67687f0 [0218.744] wcscpy (in: _Dest=0x67687f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.744] wcscat (in: _Dest=0x67687f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.744] wcscat (in: _Dest=0x67687f0, _Source="J0200279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" [0218.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67687f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0218.745] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ae8f00, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ae8f00, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0218.745] wcscmp (_String1="J0200289.WMF", _String2=".") returned 1 [0218.745] wcscmp (_String1="J0200289.WMF", _String2="..") returned 1 [0218.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768878 [0218.745] wcscpy (in: _Dest=0x6768878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.745] wcscat (in: _Dest=0x6768878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.745] wcscat (in: _Dest=0x6768878, _Source="J0200289.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" [0218.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0218.747] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f86100, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3f86100, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0218.747] wcscmp (_String1="J0200377.WMF", _String2=".") returned 1 [0218.747] wcscmp (_String1="J0200377.WMF", _String2="..") returned 1 [0218.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768900 [0218.747] wcscpy (in: _Dest=0x6768900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.747] wcscat (in: _Dest=0x6768900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.747] wcscat (in: _Dest=0x6768900, _Source="J0200377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" [0218.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0218.748] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0218.748] wcscmp (_String1="J0200383.WMF", _String2=".") returned 1 [0218.748] wcscmp (_String1="J0200383.WMF", _String2="..") returned 1 [0218.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768988 [0218.748] wcscpy (in: _Dest=0x6768988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.748] wcscat (in: _Dest=0x6768988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.748] wcscat (in: _Dest=0x6768988, _Source="J0200383.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" [0218.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0218.750] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0218.750] wcscmp (_String1="J0200467.WMF", _String2=".") returned 1 [0218.750] wcscmp (_String1="J0200467.WMF", _String2="..") returned 1 [0218.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6768a10 [0218.750] wcscpy (in: _Dest=0x6768a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.750] wcscat (in: _Dest=0x6768a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.750] wcscat (in: _Dest=0x6768a10, _Source="J0200467.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" [0218.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0218.751] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0218.751] wcscmp (_String1="J0200521.WMF", _String2=".") returned 1 [0218.751] wcscmp (_String1="J0200521.WMF", _String2="..") returned 1 [0218.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c060 [0218.752] wcscpy (in: _Dest=0x12e9c060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.752] wcscat (in: _Dest=0x12e9c060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.752] wcscat (in: _Dest=0x12e9c060, _Source="J0200521.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" [0218.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0218.753] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0218.753] wcscmp (_String1="J0200611.WMF", _String2=".") returned 1 [0218.753] wcscmp (_String1="J0200611.WMF", _String2="..") returned 1 [0218.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c0e8 [0218.753] wcscpy (in: _Dest=0x12e9c0e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.753] wcscat (in: _Dest=0x12e9c0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.753] wcscat (in: _Dest=0x12e9c0e8, _Source="J0200611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" [0218.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0218.755] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0218.755] wcscmp (_String1="J0202045.JPG", _String2=".") returned 1 [0218.755] wcscmp (_String1="J0202045.JPG", _String2="..") returned 1 [0218.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c170 [0218.755] wcscpy (in: _Dest=0x12e9c170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.755] wcscat (in: _Dest=0x12e9c170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.755] wcscat (in: _Dest=0x12e9c170, _Source="J0202045.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" [0218.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0218.756] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb0300, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5eb0300, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0218.756] wcscmp (_String1="J0211981.WMF", _String2=".") returned 1 [0218.756] wcscmp (_String1="J0211981.WMF", _String2="..") returned 1 [0218.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c1f8 [0218.757] wcscpy (in: _Dest=0x12e9c1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.757] wcscat (in: _Dest=0x12e9c1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.757] wcscat (in: _Dest=0x12e9c1f8, _Source="J0211981.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" [0218.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0218.914] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0218.914] wcscmp (_String1="J0212299.WMF", _String2=".") returned 1 [0218.915] wcscmp (_String1="J0212299.WMF", _String2="..") returned 1 [0218.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c280 [0218.915] wcscpy (in: _Dest=0x12e9c280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.915] wcscat (in: _Dest=0x12e9c280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.915] wcscat (in: _Dest=0x12e9c280, _Source="J0212299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" [0219.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0219.051] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0219.051] wcscmp (_String1="J0212601.WMF", _String2=".") returned 1 [0219.051] wcscmp (_String1="J0212601.WMF", _String2="..") returned 1 [0219.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c308 [0219.051] wcscpy (in: _Dest=0x12e9c308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.051] wcscat (in: _Dest=0x12e9c308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.051] wcscat (in: _Dest=0x12e9c308, _Source="J0212601.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" [0219.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0219.054] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0219.055] wcscmp (_String1="J0212685.WMF", _String2=".") returned 1 [0219.055] wcscmp (_String1="J0212685.WMF", _String2="..") returned 1 [0219.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c390 [0219.055] wcscpy (in: _Dest=0x12e9c390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.056] wcscat (in: _Dest=0x12e9c390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.056] wcscat (in: _Dest=0x12e9c390, _Source="J0212685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" [0219.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0219.057] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0219.057] wcscmp (_String1="J0212751.WMF", _String2=".") returned 1 [0219.057] wcscmp (_String1="J0212751.WMF", _String2="..") returned 1 [0219.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c418 [0219.057] wcscpy (in: _Dest=0x12e9c418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.057] wcscat (in: _Dest=0x12e9c418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.057] wcscat (in: _Dest=0x12e9c418, _Source="J0212751.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" [0219.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0219.061] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0219.062] wcscmp (_String1="J0212953.WMF", _String2=".") returned 1 [0219.062] wcscmp (_String1="J0212953.WMF", _String2="..") returned 1 [0219.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c4a0 [0219.062] wcscpy (in: _Dest=0x12e9c4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.062] wcscat (in: _Dest=0x12e9c4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.062] wcscat (in: _Dest=0x12e9c4a0, _Source="J0212953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" [0219.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0219.063] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0219.063] wcscmp (_String1="J0213243.WMF", _String2=".") returned 1 [0219.063] wcscmp (_String1="J0213243.WMF", _String2="..") returned 1 [0219.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c528 [0219.063] wcscpy (in: _Dest=0x12e9c528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.063] wcscat (in: _Dest=0x12e9c528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.063] wcscat (in: _Dest=0x12e9c528, _Source="J0213243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" [0219.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0219.067] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0219.067] wcscmp (_String1="J0213449.WMF", _String2=".") returned 1 [0219.067] wcscmp (_String1="J0213449.WMF", _String2="..") returned 1 [0219.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c5b0 [0219.067] wcscpy (in: _Dest=0x12e9c5b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.067] wcscat (in: _Dest=0x12e9c5b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.067] wcscat (in: _Dest=0x12e9c5b0, _Source="J0213449.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" [0219.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0219.068] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0219.068] wcscmp (_String1="J0214934.WMF", _String2=".") returned 1 [0219.068] wcscmp (_String1="J0214934.WMF", _String2="..") returned 1 [0219.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c638 [0219.069] wcscpy (in: _Dest=0x12e9c638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.069] wcscat (in: _Dest=0x12e9c638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.069] wcscat (in: _Dest=0x12e9c638, _Source="J0214934.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" [0219.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0219.070] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0219.070] wcscmp (_String1="J0214948.WMF", _String2=".") returned 1 [0219.070] wcscmp (_String1="J0214948.WMF", _String2="..") returned 1 [0219.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c6c0 [0219.070] wcscpy (in: _Dest=0x12e9c6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.070] wcscat (in: _Dest=0x12e9c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.070] wcscat (in: _Dest=0x12e9c6c0, _Source="J0214948.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" [0219.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0219.074] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb575e00, ftCreationTime.dwHighDateTime=0x1be54ed, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb575e00, ftLastWriteTime.dwHighDateTime=0x1be54ed, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0219.074] wcscmp (_String1="J0215070.WMF", _String2=".") returned 1 [0219.074] wcscmp (_String1="J0215070.WMF", _String2="..") returned 1 [0219.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c748 [0219.074] wcscpy (in: _Dest=0x12e9c748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.075] wcscat (in: _Dest=0x12e9c748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.075] wcscat (in: _Dest=0x12e9c748, _Source="J0215070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" [0219.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0219.076] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73ec400, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb73ec400, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0219.076] wcscmp (_String1="J0215076.WMF", _String2=".") returned 1 [0219.076] wcscmp (_String1="J0215076.WMF", _String2="..") returned 1 [0219.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c7d0 [0219.076] wcscpy (in: _Dest=0x12e9c7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.076] wcscat (in: _Dest=0x12e9c7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.076] wcscat (in: _Dest=0x12e9c7d0, _Source="J0215076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" [0219.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0219.077] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0219.077] wcscmp (_String1="J0215210.WMF", _String2=".") returned 1 [0219.077] wcscmp (_String1="J0215210.WMF", _String2="..") returned 1 [0219.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c858 [0219.077] wcscpy (in: _Dest=0x12e9c858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.077] wcscat (in: _Dest=0x12e9c858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.078] wcscat (in: _Dest=0x12e9c858, _Source="J0215210.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" [0219.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0219.079] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a649100, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a649100, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0219.079] wcscmp (_String1="J0215709.WMF", _String2=".") returned 1 [0219.079] wcscmp (_String1="J0215709.WMF", _String2="..") returned 1 [0219.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c8e0 [0219.079] wcscpy (in: _Dest=0x12e9c8e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.079] wcscat (in: _Dest=0x12e9c8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.079] wcscat (in: _Dest=0x12e9c8e0, _Source="J0215709.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" [0219.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0219.080] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc6eb00, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc6eb00, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0219.080] wcscmp (_String1="J0215710.WMF", _String2=".") returned 1 [0219.080] wcscmp (_String1="J0215710.WMF", _String2="..") returned 1 [0219.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c968 [0219.081] wcscpy (in: _Dest=0x12e9c968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.081] wcscat (in: _Dest=0x12e9c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.081] wcscat (in: _Dest=0x12e9c968, _Source="J0215710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" [0219.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0219.082] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b150700, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b150700, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0219.082] wcscmp (_String1="J0215718.WMF", _String2=".") returned 1 [0219.082] wcscmp (_String1="J0215718.WMF", _String2="..") returned 1 [0219.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9c9f0 [0219.082] wcscpy (in: _Dest=0x12e9c9f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.082] wcscat (in: _Dest=0x12e9c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.082] wcscat (in: _Dest=0x12e9c9f0, _Source="J0215718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" [0219.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0219.083] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0219.083] wcscmp (_String1="J0216112.JPG", _String2=".") returned 1 [0219.083] wcscmp (_String1="J0216112.JPG", _String2="..") returned 1 [0219.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ca78 [0219.084] wcscpy (in: _Dest=0x12e9ca78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.084] wcscat (in: _Dest=0x12e9ca78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.084] wcscat (in: _Dest=0x12e9ca78, _Source="J0216112.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" [0219.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0219.085] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0219.085] wcscmp (_String1="J0216153.JPG", _String2=".") returned 1 [0219.085] wcscmp (_String1="J0216153.JPG", _String2="..") returned 1 [0219.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cb00 [0219.085] wcscpy (in: _Dest=0x12e9cb00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.085] wcscat (in: _Dest=0x12e9cb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.085] wcscat (in: _Dest=0x12e9cb00, _Source="J0216153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" [0219.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0219.087] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0219.087] wcscmp (_String1="J0216540.WMF", _String2=".") returned 1 [0219.087] wcscmp (_String1="J0216540.WMF", _String2="..") returned 1 [0219.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cb88 [0219.087] wcscpy (in: _Dest=0x12e9cb88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.087] wcscat (in: _Dest=0x12e9cb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.087] wcscat (in: _Dest=0x12e9cb88, _Source="J0216540.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" [0219.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0219.089] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0219.089] wcscmp (_String1="J0216570.WMF", _String2=".") returned 1 [0219.089] wcscmp (_String1="J0216570.WMF", _String2="..") returned 1 [0219.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cc10 [0219.089] wcscpy (in: _Dest=0x12e9cc10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.089] wcscat (in: _Dest=0x12e9cc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.089] wcscat (in: _Dest=0x12e9cc10, _Source="J0216570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" [0219.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0219.090] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0219.090] wcscmp (_String1="J0216600.WMF", _String2=".") returned 1 [0219.090] wcscmp (_String1="J0216600.WMF", _String2="..") returned 1 [0219.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cc98 [0219.090] wcscpy (in: _Dest=0x12e9cc98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.090] wcscat (in: _Dest=0x12e9cc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.090] wcscat (in: _Dest=0x12e9cc98, _Source="J0216600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" [0219.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0219.092] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0219.092] wcscmp (_String1="J0216612.WMF", _String2=".") returned 1 [0219.092] wcscmp (_String1="J0216612.WMF", _String2="..") returned 1 [0219.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cd20 [0219.092] wcscpy (in: _Dest=0x12e9cd20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.092] wcscat (in: _Dest=0x12e9cd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.092] wcscat (in: _Dest=0x12e9cd20, _Source="J0216612.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" [0219.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0219.093] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0219.093] wcscmp (_String1="J0216874.WMF", _String2=".") returned 1 [0219.093] wcscmp (_String1="J0216874.WMF", _String2="..") returned 1 [0219.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cda8 [0219.093] wcscpy (in: _Dest=0x12e9cda8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.093] wcscat (in: _Dest=0x12e9cda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.093] wcscat (in: _Dest=0x12e9cda8, _Source="J0216874.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" [0219.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0219.095] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0219.095] wcscmp (_String1="J0217262.WMF", _String2=".") returned 1 [0219.095] wcscmp (_String1="J0217262.WMF", _String2="..") returned 1 [0219.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ce30 [0219.095] wcscpy (in: _Dest=0x12e9ce30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.095] wcscat (in: _Dest=0x12e9ce30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.095] wcscat (in: _Dest=0x12e9ce30, _Source="J0217262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" [0219.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ce30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0219.097] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0219.097] wcscmp (_String1="J0217302.WMF", _String2=".") returned 1 [0219.097] wcscmp (_String1="J0217302.WMF", _String2="..") returned 1 [0219.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9ceb8 [0219.097] wcscpy (in: _Dest=0x12e9ceb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.097] wcscat (in: _Dest=0x12e9ceb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.097] wcscat (in: _Dest=0x12e9ceb8, _Source="J0217302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" [0219.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9ceb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0219.262] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0219.262] wcscmp (_String1="J0217872.WMF", _String2=".") returned 1 [0219.262] wcscmp (_String1="J0217872.WMF", _String2="..") returned 1 [0219.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cf40 [0219.262] wcscpy (in: _Dest=0x12e9cf40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.262] wcscat (in: _Dest=0x12e9cf40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.262] wcscat (in: _Dest=0x12e9cf40, _Source="J0217872.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" [0219.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cf40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0219.307] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0219.308] wcscmp (_String1="J0227419.JPG", _String2=".") returned 1 [0219.308] wcscmp (_String1="J0227419.JPG", _String2="..") returned 1 [0219.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9cfc8 [0219.308] wcscpy (in: _Dest=0x12e9cfc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.308] wcscat (in: _Dest=0x12e9cfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.308] wcscat (in: _Dest=0x12e9cfc8, _Source="J0227419.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" [0219.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9cfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0219.309] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0219.309] wcscmp (_String1="J0227558.JPG", _String2=".") returned 1 [0219.309] wcscmp (_String1="J0227558.JPG", _String2="..") returned 1 [0219.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d050 [0219.309] wcscpy (in: _Dest=0x12e9d050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.309] wcscat (in: _Dest=0x12e9d050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.309] wcscat (in: _Dest=0x12e9d050, _Source="J0227558.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" [0219.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0219.311] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fff700, ftCreationTime.dwHighDateTime=0x1be8667, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41fff700, ftLastWriteTime.dwHighDateTime=0x1be8667, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0219.311] wcscmp (_String1="J0228823.WMF", _String2=".") returned 1 [0219.311] wcscmp (_String1="J0228823.WMF", _String2="..") returned 1 [0219.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d0d8 [0219.311] wcscpy (in: _Dest=0x12e9d0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.311] wcscat (in: _Dest=0x12e9d0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.311] wcscat (in: _Dest=0x12e9d0d8, _Source="J0228823.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" [0219.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0219.312] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0219.312] wcscmp (_String1="J0228959.WMF", _String2=".") returned 1 [0219.312] wcscmp (_String1="J0228959.WMF", _String2="..") returned 1 [0219.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d160 [0219.312] wcscpy (in: _Dest=0x12e9d160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.312] wcscat (in: _Dest=0x12e9d160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.312] wcscat (in: _Dest=0x12e9d160, _Source="J0228959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" [0219.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0219.314] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0219.314] wcscmp (_String1="J0230553.WMF", _String2=".") returned 1 [0219.314] wcscmp (_String1="J0230553.WMF", _String2="..") returned 1 [0219.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d1e8 [0219.314] wcscpy (in: _Dest=0x12e9d1e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.314] wcscat (in: _Dest=0x12e9d1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.314] wcscat (in: _Dest=0x12e9d1e8, _Source="J0230553.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" [0219.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0219.315] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0219.315] wcscmp (_String1="J0230558.WMF", _String2=".") returned 1 [0219.315] wcscmp (_String1="J0230558.WMF", _String2="..") returned 1 [0219.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d270 [0219.315] wcscpy (in: _Dest=0x12e9d270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.315] wcscat (in: _Dest=0x12e9d270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.315] wcscat (in: _Dest=0x12e9d270, _Source="J0230558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" [0219.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0219.317] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0219.317] wcscmp (_String1="J0232171.WMF", _String2=".") returned 1 [0219.317] wcscmp (_String1="J0232171.WMF", _String2="..") returned 1 [0219.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d2f8 [0219.317] wcscpy (in: _Dest=0x12e9d2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.317] wcscat (in: _Dest=0x12e9d2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.317] wcscat (in: _Dest=0x12e9d2f8, _Source="J0232171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" [0219.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0219.318] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80da500, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb80da500, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0219.318] wcscmp (_String1="J0232393.WMF", _String2=".") returned 1 [0219.318] wcscmp (_String1="J0232393.WMF", _String2="..") returned 1 [0219.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d380 [0219.318] wcscpy (in: _Dest=0x12e9d380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.318] wcscat (in: _Dest=0x12e9d380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.318] wcscat (in: _Dest=0x12e9d380, _Source="J0232393.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" [0219.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0219.320] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd6a300, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fd6a300, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0219.320] wcscmp (_String1="J0232395.WMF", _String2=".") returned 1 [0219.320] wcscmp (_String1="J0232395.WMF", _String2="..") returned 1 [0219.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d408 [0219.320] wcscpy (in: _Dest=0x12e9d408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.320] wcscat (in: _Dest=0x12e9d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.320] wcscat (in: _Dest=0x12e9d408, _Source="J0232395.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" [0219.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0219.321] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aac7c00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9aac7c00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0219.321] wcscmp (_String1="J0232795.WMF", _String2=".") returned 1 [0219.321] wcscmp (_String1="J0232795.WMF", _String2="..") returned 1 [0219.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d490 [0219.321] wcscpy (in: _Dest=0x12e9d490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.321] wcscat (in: _Dest=0x12e9d490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.322] wcscat (in: _Dest=0x12e9d490, _Source="J0232795.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" [0219.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0219.323] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0a25d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0a25d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0219.323] wcscmp (_String1="J0232797.WMF", _String2=".") returned 1 [0219.323] wcscmp (_String1="J0232797.WMF", _String2="..") returned 1 [0219.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d518 [0219.323] wcscpy (in: _Dest=0x12e9d518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.323] wcscat (in: _Dest=0x12e9d518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.323] wcscat (in: _Dest=0x12e9d518, _Source="J0232797.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" [0219.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0219.324] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b52d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3b52d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0219.326] wcscmp (_String1="J0232803.WMF", _String2=".") returned 1 [0219.326] wcscmp (_String1="J0232803.WMF", _String2="..") returned 1 [0219.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d5a0 [0219.326] wcscpy (in: _Dest=0x12e9d5a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.326] wcscat (in: _Dest=0x12e9d5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.327] wcscat (in: _Dest=0x12e9d5a0, _Source="J0232803.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" [0219.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0219.328] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0219.328] wcscmp (_String1="J0233512.WMF", _String2=".") returned 1 [0219.328] wcscmp (_String1="J0233512.WMF", _String2="..") returned 1 [0219.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d628 [0219.328] wcscpy (in: _Dest=0x12e9d628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.328] wcscat (in: _Dest=0x12e9d628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.328] wcscat (in: _Dest=0x12e9d628, _Source="J0233512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" [0219.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0219.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0219.329] wcscmp (_String1="J0233665.WMF", _String2=".") returned 1 [0219.329] wcscmp (_String1="J0233665.WMF", _String2="..") returned 1 [0219.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d6b0 [0219.329] wcscpy (in: _Dest=0x12e9d6b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.329] wcscat (in: _Dest=0x12e9d6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.329] wcscat (in: _Dest=0x12e9d6b0, _Source="J0233665.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" [0219.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0219.331] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa291f00, ftCreationTime.dwHighDateTime=0x1be80fe, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa291f00, ftLastWriteTime.dwHighDateTime=0x1be80fe, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0219.331] wcscmp (_String1="J0233992.WMF", _String2=".") returned 1 [0219.331] wcscmp (_String1="J0233992.WMF", _String2="..") returned 1 [0219.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d738 [0219.331] wcscpy (in: _Dest=0x12e9d738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.331] wcscat (in: _Dest=0x12e9d738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.331] wcscat (in: _Dest=0x12e9d738, _Source="J0233992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" [0219.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0219.332] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a75e00, ftCreationTime.dwHighDateTime=0x1be7bbf, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a75e00, ftLastWriteTime.dwHighDateTime=0x1be7bbf, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0219.333] wcscmp (_String1="J0234000.WMF", _String2=".") returned 1 [0219.333] wcscmp (_String1="J0234000.WMF", _String2="..") returned 1 [0219.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d7c0 [0219.333] wcscpy (in: _Dest=0x12e9d7c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.333] wcscat (in: _Dest=0x12e9d7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.333] wcscat (in: _Dest=0x12e9d7c0, _Source="J0234000.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" [0219.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0219.334] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d315700, ftCreationTime.dwHighDateTime=0x1be7bc3, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d315700, ftLastWriteTime.dwHighDateTime=0x1be7bc3, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0219.334] wcscmp (_String1="J0234001.WMF", _String2=".") returned 1 [0219.334] wcscmp (_String1="J0234001.WMF", _String2="..") returned 1 [0219.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d848 [0219.334] wcscpy (in: _Dest=0x12e9d848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.334] wcscat (in: _Dest=0x12e9d848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.334] wcscat (in: _Dest=0x12e9d848, _Source="J0234001.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" [0219.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0219.336] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0219.336] wcscmp (_String1="J0234376.WMF", _String2=".") returned 1 [0219.336] wcscmp (_String1="J0234376.WMF", _String2="..") returned 1 [0219.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d8d0 [0219.336] wcscpy (in: _Dest=0x12e9d8d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.336] wcscat (in: _Dest=0x12e9d8d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.336] wcscat (in: _Dest=0x12e9d8d0, _Source="J0234376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" [0219.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0219.337] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0219.337] wcscmp (_String1="J0237225.WMF", _String2=".") returned 1 [0219.337] wcscmp (_String1="J0237225.WMF", _String2="..") returned 1 [0219.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d958 [0219.337] wcscpy (in: _Dest=0x12e9d958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.337] wcscat (in: _Dest=0x12e9d958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.338] wcscat (in: _Dest=0x12e9d958, _Source="J0237225.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" [0219.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0219.339] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9973400, ftCreationTime.dwHighDateTime=0x1be9020, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9973400, ftLastWriteTime.dwHighDateTime=0x1be9020, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0219.339] wcscmp (_String1="J0237228.WMF", _String2=".") returned 1 [0219.339] wcscmp (_String1="J0237228.WMF", _String2="..") returned 1 [0219.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9d9e0 [0219.339] wcscpy (in: _Dest=0x12e9d9e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.339] wcscat (in: _Dest=0x12e9d9e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.339] wcscat (in: _Dest=0x12e9d9e0, _Source="J0237228.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" [0219.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9d9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0219.340] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0219.340] wcscmp (_String1="J0237336.WMF", _String2=".") returned 1 [0219.340] wcscmp (_String1="J0237336.WMF", _String2="..") returned 1 [0219.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9da68 [0219.340] wcscpy (in: _Dest=0x12e9da68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.340] wcscat (in: _Dest=0x12e9da68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.340] wcscat (in: _Dest=0x12e9da68, _Source="J0237336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" [0219.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9da68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0219.341] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0219.342] wcscmp (_String1="J0237759.WMF", _String2=".") returned 1 [0219.342] wcscmp (_String1="J0237759.WMF", _String2="..") returned 1 [0219.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9daf0 [0219.342] wcscpy (in: _Dest=0x12e9daf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.342] wcscat (in: _Dest=0x12e9daf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.342] wcscat (in: _Dest=0x12e9daf0, _Source="J0237759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" [0219.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9daf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0219.343] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0219.343] wcscmp (_String1="J0238333.WMF", _String2=".") returned 1 [0219.343] wcscmp (_String1="J0238333.WMF", _String2="..") returned 1 [0219.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9db78 [0219.343] wcscpy (in: _Dest=0x12e9db78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.343] wcscat (in: _Dest=0x12e9db78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.343] wcscat (in: _Dest=0x12e9db78, _Source="J0238333.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" [0219.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9db78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0219.501] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0219.501] wcscmp (_String1="J0238927.WMF", _String2=".") returned 1 [0219.501] wcscmp (_String1="J0238927.WMF", _String2="..") returned 1 [0219.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dc00 [0219.501] wcscpy (in: _Dest=0x12e9dc00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.501] wcscat (in: _Dest=0x12e9dc00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.501] wcscat (in: _Dest=0x12e9dc00, _Source="J0238927.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" [0219.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0219.534] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0219.534] wcscmp (_String1="J0238959.WMF", _String2=".") returned 1 [0219.534] wcscmp (_String1="J0238959.WMF", _String2="..") returned 1 [0219.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dc88 [0219.534] wcscpy (in: _Dest=0x12e9dc88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.534] wcscat (in: _Dest=0x12e9dc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.534] wcscat (in: _Dest=0x12e9dc88, _Source="J0238959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" [0219.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0219.535] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0219.535] wcscmp (_String1="J0238983.WMF", _String2=".") returned 1 [0219.535] wcscmp (_String1="J0238983.WMF", _String2="..") returned 1 [0219.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dd10 [0219.535] wcscpy (in: _Dest=0x12e9dd10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.535] wcscat (in: _Dest=0x12e9dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.535] wcscat (in: _Dest=0x12e9dd10, _Source="J0238983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" [0219.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0219.536] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0219.536] wcscmp (_String1="J0239057.WMF", _String2=".") returned 1 [0219.537] wcscmp (_String1="J0239057.WMF", _String2="..") returned 1 [0219.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dd98 [0219.537] wcscpy (in: _Dest=0x12e9dd98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.537] wcscat (in: _Dest=0x12e9dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.537] wcscat (in: _Dest=0x12e9dd98, _Source="J0239057.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" [0219.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0219.538] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0219.538] wcscmp (_String1="J0239063.WMF", _String2=".") returned 1 [0219.538] wcscmp (_String1="J0239063.WMF", _String2="..") returned 1 [0219.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9de20 [0219.538] wcscpy (in: _Dest=0x12e9de20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.538] wcscat (in: _Dest=0x12e9de20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.538] wcscat (in: _Dest=0x12e9de20, _Source="J0239063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" [0219.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9de20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0219.539] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0219.539] wcscmp (_String1="J0239079.WMF", _String2=".") returned 1 [0219.539] wcscmp (_String1="J0239079.WMF", _String2="..") returned 1 [0219.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dea8 [0219.539] wcscpy (in: _Dest=0x12e9dea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.539] wcscat (in: _Dest=0x12e9dea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.539] wcscat (in: _Dest=0x12e9dea8, _Source="J0239079.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" [0219.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0219.540] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0219.540] wcscmp (_String1="J0239191.WMF", _String2=".") returned 1 [0219.540] wcscmp (_String1="J0239191.WMF", _String2="..") returned 1 [0219.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9df30 [0219.540] wcscpy (in: _Dest=0x12e9df30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.541] wcscat (in: _Dest=0x12e9df30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.541] wcscat (in: _Dest=0x12e9df30, _Source="J0239191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" [0219.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9df30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0219.542] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0219.542] wcscmp (_String1="J0239611.WMF", _String2=".") returned 1 [0219.542] wcscmp (_String1="J0239611.WMF", _String2="..") returned 1 [0219.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x12e9dfb8 [0219.542] wcscpy (in: _Dest=0x12e9dfb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.542] wcscat (in: _Dest=0x12e9dfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.542] wcscat (in: _Dest=0x12e9dfb8, _Source="J0239611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" [0219.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9dfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0219.543] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0219.543] wcscmp (_String1="J0239935.WMF", _String2=".") returned 1 [0219.543] wcscmp (_String1="J0239935.WMF", _String2="..") returned 1 [0219.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cab8 [0219.543] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.543] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.543] wcscat (in: _Dest=0x674cab8, _Source="J0239935.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" [0219.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0219.544] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0219.544] wcscmp (_String1="J0239941.WMF", _String2=".") returned 1 [0219.544] wcscmp (_String1="J0239941.WMF", _String2="..") returned 1 [0219.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cb40 [0219.544] wcscpy (in: _Dest=0x674cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.544] wcscat (in: _Dest=0x674cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.544] wcscat (in: _Dest=0x674cb40, _Source="J0239941.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" [0219.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0219.545] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0219.546] wcscmp (_String1="J0239943.WMF", _String2=".") returned 1 [0219.546] wcscmp (_String1="J0239943.WMF", _String2="..") returned 1 [0219.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cbc8 [0219.546] wcscpy (in: _Dest=0x674cbc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.546] wcscat (in: _Dest=0x674cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.546] wcscat (in: _Dest=0x674cbc8, _Source="J0239943.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" [0219.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0219.547] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0219.547] wcscmp (_String1="J0239951.WMF", _String2=".") returned 1 [0219.547] wcscmp (_String1="J0239951.WMF", _String2="..") returned 1 [0219.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cc50 [0219.547] wcscpy (in: _Dest=0x674cc50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.547] wcscat (in: _Dest=0x674cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.547] wcscat (in: _Dest=0x674cc50, _Source="J0239951.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" [0219.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0219.548] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0219.548] wcscmp (_String1="J0239953.WMF", _String2=".") returned 1 [0219.548] wcscmp (_String1="J0239953.WMF", _String2="..") returned 1 [0219.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ccd8 [0219.548] wcscpy (in: _Dest=0x674ccd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.548] wcscat (in: _Dest=0x674ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.548] wcscat (in: _Dest=0x674ccd8, _Source="J0239953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" [0219.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0219.549] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0219.550] wcscmp (_String1="J0239955.WMF", _String2=".") returned 1 [0219.550] wcscmp (_String1="J0239955.WMF", _String2="..") returned 1 [0219.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cd60 [0219.550] wcscpy (in: _Dest=0x674cd60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.550] wcscat (in: _Dest=0x674cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.550] wcscat (in: _Dest=0x674cd60, _Source="J0239955.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" [0219.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0219.551] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0219.551] wcscmp (_String1="J0239965.WMF", _String2=".") returned 1 [0219.551] wcscmp (_String1="J0239965.WMF", _String2="..") returned 1 [0219.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cde8 [0219.551] wcscpy (in: _Dest=0x674cde8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.551] wcscat (in: _Dest=0x674cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.551] wcscat (in: _Dest=0x674cde8, _Source="J0239965.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" [0219.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0219.552] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0219.552] wcscmp (_String1="J0239967.WMF", _String2=".") returned 1 [0219.552] wcscmp (_String1="J0239967.WMF", _String2="..") returned 1 [0219.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ce70 [0219.552] wcscpy (in: _Dest=0x674ce70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.552] wcscat (in: _Dest=0x674ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.552] wcscat (in: _Dest=0x674ce70, _Source="J0239967.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" [0219.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0219.554] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0219.554] wcscmp (_String1="J0239973.WMF", _String2=".") returned 1 [0219.554] wcscmp (_String1="J0239973.WMF", _String2="..") returned 1 [0219.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cef8 [0219.554] wcscpy (in: _Dest=0x674cef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.554] wcscat (in: _Dest=0x674cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.554] wcscat (in: _Dest=0x674cef8, _Source="J0239973.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" [0219.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0219.555] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0219.555] wcscmp (_String1="J0239975.WMF", _String2=".") returned 1 [0219.555] wcscmp (_String1="J0239975.WMF", _String2="..") returned 1 [0219.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674cf80 [0219.555] wcscpy (in: _Dest=0x674cf80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.555] wcscat (in: _Dest=0x674cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.555] wcscat (in: _Dest=0x674cf80, _Source="J0239975.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" [0219.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0219.556] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0219.556] wcscmp (_String1="J0239997.WMF", _String2=".") returned 1 [0219.556] wcscmp (_String1="J0239997.WMF", _String2="..") returned 1 [0219.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d008 [0219.556] wcscpy (in: _Dest=0x674d008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.556] wcscat (in: _Dest=0x674d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.556] wcscat (in: _Dest=0x674d008, _Source="J0239997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" [0219.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0219.557] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0219.557] wcscmp (_String1="J0240157.WMF", _String2=".") returned 1 [0219.557] wcscmp (_String1="J0240157.WMF", _String2="..") returned 1 [0219.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d090 [0219.558] wcscpy (in: _Dest=0x674d090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.558] wcscat (in: _Dest=0x674d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.558] wcscat (in: _Dest=0x674d090, _Source="J0240157.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" [0219.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0219.559] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0219.559] wcscmp (_String1="J0240175.WMF", _String2=".") returned 1 [0219.559] wcscmp (_String1="J0240175.WMF", _String2="..") returned 1 [0219.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d118 [0219.559] wcscpy (in: _Dest=0x674d118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.559] wcscat (in: _Dest=0x674d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.559] wcscat (in: _Dest=0x674d118, _Source="J0240175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" [0219.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0219.560] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0219.560] wcscmp (_String1="J0240189.WMF", _String2=".") returned 1 [0219.560] wcscmp (_String1="J0240189.WMF", _String2="..") returned 1 [0219.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d1a0 [0219.560] wcscpy (in: _Dest=0x674d1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.560] wcscat (in: _Dest=0x674d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.560] wcscat (in: _Dest=0x674d1a0, _Source="J0240189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" [0219.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0219.561] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0219.563] wcscmp (_String1="J0240291.WMF", _String2=".") returned 1 [0219.563] wcscmp (_String1="J0240291.WMF", _String2="..") returned 1 [0219.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d228 [0219.563] wcscpy (in: _Dest=0x674d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.563] wcscat (in: _Dest=0x674d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.563] wcscat (in: _Dest=0x674d228, _Source="J0240291.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" [0219.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0219.564] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260f7400, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x260f7400, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0219.564] wcscmp (_String1="J0241019.WMF", _String2=".") returned 1 [0219.564] wcscmp (_String1="J0241019.WMF", _String2="..") returned 1 [0219.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d2b0 [0219.564] wcscpy (in: _Dest=0x674d2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.564] wcscat (in: _Dest=0x674d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.564] wcscat (in: _Dest=0x674d2b0, _Source="J0241019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" [0219.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0219.565] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31fb3600, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31fb3600, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0219.565] wcscmp (_String1="J0241037.WMF", _String2=".") returned 1 [0219.565] wcscmp (_String1="J0241037.WMF", _String2="..") returned 1 [0219.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d338 [0219.565] wcscpy (in: _Dest=0x674d338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.565] wcscat (in: _Dest=0x674d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.565] wcscat (in: _Dest=0x674d338, _Source="J0241037.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" [0219.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0219.566] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358ebd00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x358ebd00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0219.566] wcscmp (_String1="J0241041.WMF", _String2=".") returned 1 [0219.566] wcscmp (_String1="J0241041.WMF", _String2="..") returned 1 [0219.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d3c0 [0219.566] wcscpy (in: _Dest=0x674d3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.566] wcscat (in: _Dest=0x674d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.567] wcscat (in: _Dest=0x674d3c0, _Source="J0241041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" [0219.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0219.567] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36bfea00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36bfea00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0219.568] wcscmp (_String1="J0241043.WMF", _String2=".") returned 1 [0219.568] wcscmp (_String1="J0241043.WMF", _String2="..") returned 1 [0219.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d448 [0219.568] wcscpy (in: _Dest=0x674d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.568] wcscat (in: _Dest=0x674d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.568] wcscat (in: _Dest=0x674d448, _Source="J0241043.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" [0219.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0219.569] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d2ba00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49d2ba00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0219.569] wcscmp (_String1="J0241077.WMF", _String2=".") returned 1 [0219.569] wcscmp (_String1="J0241077.WMF", _String2="..") returned 1 [0219.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d4d0 [0219.569] wcscpy (in: _Dest=0x674d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.569] wcscat (in: _Dest=0x674d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.569] wcscat (in: _Dest=0x674d4d0, _Source="J0241077.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" [0219.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0219.704] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfe6900, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfe6900, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0219.704] wcscmp (_String1="J0241773.WMF", _String2=".") returned 1 [0219.704] wcscmp (_String1="J0241773.WMF", _String2="..") returned 1 [0219.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d558 [0219.704] wcscpy (in: _Dest=0x674d558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.704] wcscat (in: _Dest=0x674d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.705] wcscat (in: _Dest=0x674d558, _Source="J0241773.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" [0219.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0219.877] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091f000, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7091f000, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0219.877] wcscmp (_String1="J0241781.WMF", _String2=".") returned 1 [0219.877] wcscmp (_String1="J0241781.WMF", _String2="..") returned 1 [0219.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d5e0 [0219.877] wcscpy (in: _Dest=0x674d5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.877] wcscat (in: _Dest=0x674d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.877] wcscat (in: _Dest=0x674d5e0, _Source="J0241781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" [0219.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0219.878] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0219.878] wcscmp (_String1="J0250504.WMF", _String2=".") returned 1 [0219.878] wcscmp (_String1="J0250504.WMF", _String2="..") returned 1 [0219.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d668 [0219.879] wcscpy (in: _Dest=0x674d668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.879] wcscat (in: _Dest=0x674d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.879] wcscat (in: _Dest=0x674d668, _Source="J0250504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" [0219.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0219.880] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0219.880] wcscmp (_String1="J0250997.WMF", _String2=".") returned 1 [0219.880] wcscmp (_String1="J0250997.WMF", _String2="..") returned 1 [0219.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d6f0 [0219.880] wcscpy (in: _Dest=0x674d6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.880] wcscat (in: _Dest=0x674d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.880] wcscat (in: _Dest=0x674d6f0, _Source="J0250997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" [0219.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0219.881] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0219.881] wcscmp (_String1="J0251007.WMF", _String2=".") returned 1 [0219.881] wcscmp (_String1="J0251007.WMF", _String2="..") returned 1 [0219.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d778 [0219.881] wcscpy (in: _Dest=0x674d778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.881] wcscat (in: _Dest=0x674d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.881] wcscat (in: _Dest=0x674d778, _Source="J0251007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" [0219.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0219.883] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4522200, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4522200, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0219.883] wcscmp (_String1="J0252629.WMF", _String2=".") returned 1 [0219.883] wcscmp (_String1="J0252629.WMF", _String2="..") returned 1 [0219.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d800 [0219.883] wcscpy (in: _Dest=0x674d800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.883] wcscat (in: _Dest=0x674d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.883] wcscat (in: _Dest=0x674d800, _Source="J0252629.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" [0219.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0219.884] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc29a600, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc29a600, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0219.884] wcscmp (_String1="J0252669.WMF", _String2=".") returned 1 [0219.884] wcscmp (_String1="J0252669.WMF", _String2="..") returned 1 [0219.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d888 [0219.884] wcscpy (in: _Dest=0x674d888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.884] wcscat (in: _Dest=0x674d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.884] wcscat (in: _Dest=0x674d888, _Source="J0252669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" [0219.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0219.885] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd03600, ftCreationTime.dwHighDateTime=0x1bec159, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd03600, ftLastWriteTime.dwHighDateTime=0x1bec159, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0219.885] wcscmp (_String1="J0278702.WMF", _String2=".") returned 1 [0219.885] wcscmp (_String1="J0278702.WMF", _String2="..") returned 1 [0219.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d910 [0219.885] wcscpy (in: _Dest=0x674d910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.885] wcscat (in: _Dest=0x674d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.885] wcscat (in: _Dest=0x674d910, _Source="J0278702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" [0219.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0219.886] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0219.886] wcscmp (_String1="J0279644.WMF", _String2=".") returned 1 [0219.886] wcscmp (_String1="J0279644.WMF", _String2="..") returned 1 [0219.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674d998 [0219.887] wcscpy (in: _Dest=0x674d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.887] wcscat (in: _Dest=0x674d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.887] wcscat (in: _Dest=0x674d998, _Source="J0279644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" [0219.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0219.888] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0219.888] wcscmp (_String1="J0280468.WMF", _String2=".") returned 1 [0219.888] wcscmp (_String1="J0280468.WMF", _String2="..") returned 1 [0219.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674da20 [0219.888] wcscpy (in: _Dest=0x674da20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.888] wcscat (in: _Dest=0x674da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.888] wcscat (in: _Dest=0x674da20, _Source="J0280468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" [0219.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0219.889] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56e6a00, ftCreationTime.dwHighDateTime=0x1bed373, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc56e6a00, ftLastWriteTime.dwHighDateTime=0x1bed373, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0219.889] wcscmp (_String1="J0281008.WMF", _String2=".") returned 1 [0219.889] wcscmp (_String1="J0281008.WMF", _String2="..") returned 1 [0219.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674daa8 [0219.889] wcscpy (in: _Dest=0x674daa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.889] wcscat (in: _Dest=0x674daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.889] wcscat (in: _Dest=0x674daa8, _Source="J0281008.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" [0219.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0219.890] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7275df00, ftCreationTime.dwHighDateTime=0x1bed467, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7275df00, ftLastWriteTime.dwHighDateTime=0x1bed467, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0219.890] wcscmp (_String1="J0281243.WMF", _String2=".") returned 1 [0219.890] wcscmp (_String1="J0281243.WMF", _String2="..") returned 1 [0219.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674db30 [0219.890] wcscpy (in: _Dest=0x674db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.890] wcscat (in: _Dest=0x674db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.891] wcscat (in: _Dest=0x674db30, _Source="J0281243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" [0219.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0219.892] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11aa5700, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11aa5700, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0219.892] wcscmp (_String1="J0281630.WMF", _String2=".") returned 1 [0219.892] wcscmp (_String1="J0281630.WMF", _String2="..") returned 1 [0219.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dbb8 [0219.892] wcscpy (in: _Dest=0x674dbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.892] wcscat (in: _Dest=0x674dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.892] wcscat (in: _Dest=0x674dbb8, _Source="J0281630.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" [0219.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0219.893] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12db8400, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12db8400, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0219.893] wcscmp (_String1="J0281632.WMF", _String2=".") returned 1 [0219.893] wcscmp (_String1="J0281632.WMF", _String2="..") returned 1 [0219.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dc40 [0219.893] wcscpy (in: _Dest=0x674dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.893] wcscat (in: _Dest=0x674dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.893] wcscat (in: _Dest=0x674dc40, _Source="J0281632.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" [0219.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0219.894] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c64ec00, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c64ec00, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0219.894] wcscmp (_String1="J0281638.WMF", _String2=".") returned 1 [0219.894] wcscmp (_String1="J0281638.WMF", _String2="..") returned 1 [0219.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dcc8 [0219.895] wcscpy (in: _Dest=0x674dcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.895] wcscat (in: _Dest=0x674dcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.895] wcscat (in: _Dest=0x674dcc8, _Source="J0281638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" [0219.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0219.896] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d961900, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d961900, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0219.896] wcscmp (_String1="J0281640.WMF", _String2=".") returned 1 [0219.896] wcscmp (_String1="J0281640.WMF", _String2="..") returned 1 [0219.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dd50 [0219.896] wcscpy (in: _Dest=0x674dd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.896] wcscat (in: _Dest=0x674dd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.896] wcscat (in: _Dest=0x674dd50, _Source="J0281640.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" [0219.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0219.897] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc43800, ftCreationTime.dwHighDateTime=0x1beed3d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc43800, ftLastWriteTime.dwHighDateTime=0x1beed3d, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0219.897] wcscmp (_String1="J0282126.WMF", _String2=".") returned 1 [0219.897] wcscmp (_String1="J0282126.WMF", _String2="..") returned 1 [0219.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ddd8 [0219.897] wcscpy (in: _Dest=0x674ddd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.898] wcscat (in: _Dest=0x674ddd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.898] wcscat (in: _Dest=0x674ddd8, _Source="J0282126.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" [0219.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ddd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0219.899] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0219.899] wcscmp (_String1="J0282928.WMF", _String2=".") returned 1 [0219.899] wcscmp (_String1="J0282928.WMF", _String2="..") returned 1 [0219.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674de60 [0219.899] wcscpy (in: _Dest=0x674de60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.899] wcscat (in: _Dest=0x674de60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.899] wcscat (in: _Dest=0x674de60, _Source="J0282928.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" [0219.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0219.900] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0219.900] wcscmp (_String1="J0282932.WMF", _String2=".") returned 1 [0219.900] wcscmp (_String1="J0282932.WMF", _String2="..") returned 1 [0219.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dee8 [0219.900] wcscpy (in: _Dest=0x674dee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.900] wcscat (in: _Dest=0x674dee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.900] wcscat (in: _Dest=0x674dee8, _Source="J0282932.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" [0219.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0219.901] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0219.901] wcscmp (_String1="J0285462.WMF", _String2=".") returned 1 [0219.901] wcscmp (_String1="J0285462.WMF", _String2="..") returned 1 [0219.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674df70 [0219.901] wcscpy (in: _Dest=0x674df70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.902] wcscat (in: _Dest=0x674df70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.902] wcscat (in: _Dest=0x674df70, _Source="J0285462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" [0219.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0219.903] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0219.903] wcscmp (_String1="J0285484.WMF", _String2=".") returned 1 [0219.903] wcscmp (_String1="J0285484.WMF", _String2="..") returned 1 [0219.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674dff8 [0219.903] wcscpy (in: _Dest=0x674dff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.903] wcscat (in: _Dest=0x674dff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.903] wcscat (in: _Dest=0x674dff8, _Source="J0285484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" [0219.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0219.904] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0219.904] wcscmp (_String1="J0285780.WMF", _String2=".") returned 1 [0219.904] wcscmp (_String1="J0285780.WMF", _String2="..") returned 1 [0219.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e080 [0219.904] wcscpy (in: _Dest=0x674e080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.904] wcscat (in: _Dest=0x674e080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.904] wcscat (in: _Dest=0x674e080, _Source="J0285780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" [0219.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0219.905] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0219.905] wcscmp (_String1="J0285782.WMF", _String2=".") returned 1 [0219.905] wcscmp (_String1="J0285782.WMF", _String2="..") returned 1 [0219.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e108 [0219.905] wcscpy (in: _Dest=0x674e108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.905] wcscat (in: _Dest=0x674e108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.905] wcscat (in: _Dest=0x674e108, _Source="J0285782.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" [0219.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0219.906] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0219.907] wcscmp (_String1="J0285792.WMF", _String2=".") returned 1 [0219.907] wcscmp (_String1="J0285792.WMF", _String2="..") returned 1 [0219.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e190 [0219.907] wcscpy (in: _Dest=0x674e190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.907] wcscat (in: _Dest=0x674e190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.907] wcscat (in: _Dest=0x674e190, _Source="J0285792.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" [0219.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0219.908] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0219.908] wcscmp (_String1="J0285796.WMF", _String2=".") returned 1 [0219.908] wcscmp (_String1="J0285796.WMF", _String2="..") returned 1 [0219.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e218 [0219.908] wcscpy (in: _Dest=0x674e218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.908] wcscat (in: _Dest=0x674e218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.908] wcscat (in: _Dest=0x674e218, _Source="J0285796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" [0219.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0219.910] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0219.910] wcscmp (_String1="J0285808.WMF", _String2=".") returned 1 [0219.910] wcscmp (_String1="J0285808.WMF", _String2="..") returned 1 [0219.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e2a0 [0219.910] wcscpy (in: _Dest=0x674e2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.910] wcscat (in: _Dest=0x674e2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.910] wcscat (in: _Dest=0x674e2a0, _Source="J0285808.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" [0219.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0219.911] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0219.911] wcscmp (_String1="J0285820.WMF", _String2=".") returned 1 [0219.911] wcscmp (_String1="J0285820.WMF", _String2="..") returned 1 [0219.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e328 [0219.911] wcscpy (in: _Dest=0x674e328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.911] wcscat (in: _Dest=0x674e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.911] wcscat (in: _Dest=0x674e328, _Source="J0285820.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" [0219.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0220.064] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0220.064] wcscmp (_String1="J0285822.WMF", _String2=".") returned 1 [0220.064] wcscmp (_String1="J0285822.WMF", _String2="..") returned 1 [0220.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e3b0 [0220.064] wcscpy (in: _Dest=0x674e3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.064] wcscat (in: _Dest=0x674e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.064] wcscat (in: _Dest=0x674e3b0, _Source="J0285822.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" [0220.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0220.328] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0220.330] wcscmp (_String1="J0287018.WMF", _String2=".") returned 1 [0220.330] wcscmp (_String1="J0287018.WMF", _String2="..") returned 1 [0220.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e438 [0220.330] wcscpy (in: _Dest=0x674e438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.330] wcscat (in: _Dest=0x674e438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.330] wcscat (in: _Dest=0x674e438, _Source="J0287018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" [0220.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0220.332] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0220.332] wcscmp (_String1="J0287019.WMF", _String2=".") returned 1 [0220.332] wcscmp (_String1="J0287019.WMF", _String2="..") returned 1 [0220.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e4c0 [0220.332] wcscpy (in: _Dest=0x674e4c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.332] wcscat (in: _Dest=0x674e4c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.332] wcscat (in: _Dest=0x674e4c0, _Source="J0287019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" [0220.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0220.333] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0220.334] wcscmp (_String1="J0287020.WMF", _String2=".") returned 1 [0220.334] wcscmp (_String1="J0287020.WMF", _String2="..") returned 1 [0220.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e548 [0220.334] wcscpy (in: _Dest=0x674e548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.334] wcscat (in: _Dest=0x674e548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.334] wcscat (in: _Dest=0x674e548, _Source="J0287020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" [0220.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0220.335] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0220.335] wcscmp (_String1="J0287024.WMF", _String2=".") returned 1 [0220.335] wcscmp (_String1="J0287024.WMF", _String2="..") returned 1 [0220.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e5d0 [0220.336] wcscpy (in: _Dest=0x674e5d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.336] wcscat (in: _Dest=0x674e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.336] wcscat (in: _Dest=0x674e5d0, _Source="J0287024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" [0220.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0220.337] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0220.337] wcscmp (_String1="J0287408.WMF", _String2=".") returned 1 [0220.337] wcscmp (_String1="J0287408.WMF", _String2="..") returned 1 [0220.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e658 [0220.337] wcscpy (in: _Dest=0x674e658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.337] wcscat (in: _Dest=0x674e658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.337] wcscat (in: _Dest=0x674e658, _Source="J0287408.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" [0220.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0220.338] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0220.338] wcscmp (_String1="J0287415.WMF", _String2=".") returned 1 [0220.338] wcscmp (_String1="J0287415.WMF", _String2="..") returned 1 [0220.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e6e0 [0220.339] wcscpy (in: _Dest=0x674e6e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.339] wcscat (in: _Dest=0x674e6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.339] wcscat (in: _Dest=0x674e6e0, _Source="J0287415.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" [0220.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0220.340] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0220.340] wcscmp (_String1="J0287417.WMF", _String2=".") returned 1 [0220.340] wcscmp (_String1="J0287417.WMF", _String2="..") returned 1 [0220.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e768 [0220.340] wcscpy (in: _Dest=0x674e768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.340] wcscat (in: _Dest=0x674e768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.340] wcscat (in: _Dest=0x674e768, _Source="J0287417.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" [0220.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0220.342] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176b7200, ftCreationTime.dwHighDateTime=0x1bf594b, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x176b7200, ftLastWriteTime.dwHighDateTime=0x1bf594b, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0220.342] wcscmp (_String1="J0287641.JPG", _String2=".") returned 1 [0220.342] wcscmp (_String1="J0287641.JPG", _String2="..") returned 1 [0220.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e7f0 [0220.342] wcscpy (in: _Dest=0x674e7f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.342] wcscat (in: _Dest=0x674e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.342] wcscat (in: _Dest=0x674e7f0, _Source="J0287641.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" [0220.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0220.343] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c08f000, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c08f000, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0220.343] wcscmp (_String1="J0287642.JPG", _String2=".") returned 1 [0220.343] wcscmp (_String1="J0287642.JPG", _String2="..") returned 1 [0220.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e878 [0220.343] wcscpy (in: _Dest=0x674e878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.343] wcscat (in: _Dest=0x674e878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.343] wcscat (in: _Dest=0x674e878, _Source="J0287642.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" [0220.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0220.345] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0220.345] wcscmp (_String1="J0287643.JPG", _String2=".") returned 1 [0220.345] wcscmp (_String1="J0287643.JPG", _String2="..") returned 1 [0220.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e900 [0220.345] wcscpy (in: _Dest=0x674e900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.345] wcscat (in: _Dest=0x674e900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.345] wcscat (in: _Dest=0x674e900, _Source="J0287643.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" [0220.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0220.347] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0220.347] wcscmp (_String1="J0287644.JPG", _String2=".") returned 1 [0220.347] wcscmp (_String1="J0287644.JPG", _String2="..") returned 1 [0220.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674e988 [0220.347] wcscpy (in: _Dest=0x674e988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.347] wcscat (in: _Dest=0x674e988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.347] wcscat (in: _Dest=0x674e988, _Source="J0287644.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" [0220.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0220.348] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0220.348] wcscmp (_String1="J0287645.JPG", _String2=".") returned 1 [0220.348] wcscmp (_String1="J0287645.JPG", _String2="..") returned 1 [0220.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ea10 [0220.348] wcscpy (in: _Dest=0x674ea10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.349] wcscat (in: _Dest=0x674ea10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.349] wcscat (in: _Dest=0x674ea10, _Source="J0287645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" [0220.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ea10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0220.350] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0220.350] wcscmp (_String1="J0289430.JPG", _String2=".") returned 1 [0220.350] wcscmp (_String1="J0289430.JPG", _String2="..") returned 1 [0220.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7ce8 [0220.350] wcscpy (in: _Dest=0x68b7ce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.350] wcscat (in: _Dest=0x68b7ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.350] wcscat (in: _Dest=0x68b7ce8, _Source="J0289430.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" [0220.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0220.352] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0220.352] wcscmp (_String1="J0290548.WMF", _String2=".") returned 1 [0220.352] wcscmp (_String1="J0290548.WMF", _String2="..") returned 1 [0220.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7d70 [0220.352] wcscpy (in: _Dest=0x68b7d70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.352] wcscat (in: _Dest=0x68b7d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.352] wcscat (in: _Dest=0x68b7d70, _Source="J0290548.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" [0220.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0220.353] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0220.353] wcscmp (_String1="J0291794.WMF", _String2=".") returned 1 [0220.354] wcscmp (_String1="J0291794.WMF", _String2="..") returned 1 [0220.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7df8 [0220.354] wcscpy (in: _Dest=0x68b7df8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.354] wcscat (in: _Dest=0x68b7df8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.354] wcscat (in: _Dest=0x68b7df8, _Source="J0291794.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" [0220.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0220.355] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0220.355] wcscmp (_String1="J0292248.WMF", _String2=".") returned 1 [0220.355] wcscmp (_String1="J0292248.WMF", _String2="..") returned 1 [0220.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7e80 [0220.355] wcscpy (in: _Dest=0x68b7e80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.355] wcscat (in: _Dest=0x68b7e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.355] wcscat (in: _Dest=0x68b7e80, _Source="J0292248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" [0220.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0220.357] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0220.357] wcscmp (_String1="J0292270.WMF", _String2=".") returned 1 [0220.357] wcscmp (_String1="J0292270.WMF", _String2="..") returned 1 [0220.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7f08 [0220.357] wcscpy (in: _Dest=0x68b7f08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.357] wcscat (in: _Dest=0x68b7f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.357] wcscat (in: _Dest=0x68b7f08, _Source="J0292270.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" [0220.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0220.358] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0220.358] wcscmp (_String1="J0292272.WMF", _String2=".") returned 1 [0220.359] wcscmp (_String1="J0292272.WMF", _String2="..") returned 1 [0220.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b7f90 [0220.359] wcscpy (in: _Dest=0x68b7f90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.359] wcscat (in: _Dest=0x68b7f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.359] wcscat (in: _Dest=0x68b7f90, _Source="J0292272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" [0220.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b7f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0220.360] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0220.360] wcscmp (_String1="J0292278.WMF", _String2=".") returned 1 [0220.360] wcscmp (_String1="J0292278.WMF", _String2="..") returned 1 [0220.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8018 [0220.360] wcscpy (in: _Dest=0x68b8018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.360] wcscat (in: _Dest=0x68b8018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.360] wcscat (in: _Dest=0x68b8018, _Source="J0292278.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" [0220.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0220.362] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0220.362] wcscmp (_String1="J0292286.WMF", _String2=".") returned 1 [0220.362] wcscmp (_String1="J0292286.WMF", _String2="..") returned 1 [0220.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b80a0 [0220.362] wcscpy (in: _Dest=0x68b80a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.362] wcscat (in: _Dest=0x68b80a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.362] wcscat (in: _Dest=0x68b80a0, _Source="J0292286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" [0220.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b80a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0220.364] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0220.364] wcscmp (_String1="J0293800.WMF", _String2=".") returned 1 [0220.364] wcscmp (_String1="J0293800.WMF", _String2="..") returned 1 [0220.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8128 [0220.364] wcscpy (in: _Dest=0x68b8128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.364] wcscat (in: _Dest=0x68b8128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.364] wcscat (in: _Dest=0x68b8128, _Source="J0293800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" [0220.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0220.419] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0220.420] wcscmp (_String1="J0293832.WMF", _String2=".") returned 1 [0220.420] wcscmp (_String1="J0293832.WMF", _String2="..") returned 1 [0220.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b81b0 [0220.420] wcscpy (in: _Dest=0x68b81b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.420] wcscat (in: _Dest=0x68b81b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.420] wcscat (in: _Dest=0x68b81b0, _Source="J0293832.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" [0220.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b81b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0220.421] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0220.421] wcscmp (_String1="J0294989.WMF", _String2=".") returned 1 [0220.421] wcscmp (_String1="J0294989.WMF", _String2="..") returned 1 [0220.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8238 [0220.422] wcscpy (in: _Dest=0x68b8238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.422] wcscat (in: _Dest=0x68b8238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.422] wcscat (in: _Dest=0x68b8238, _Source="J0294989.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" [0220.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0220.423] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0220.423] wcscmp (_String1="J0294991.WMF", _String2=".") returned 1 [0220.423] wcscmp (_String1="J0294991.WMF", _String2="..") returned 1 [0220.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b82c0 [0220.423] wcscpy (in: _Dest=0x68b82c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.424] wcscat (in: _Dest=0x68b82c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.424] wcscat (in: _Dest=0x68b82c0, _Source="J0294991.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" [0220.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b82c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0220.425] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0220.425] wcscmp (_String1="J0295069.WMF", _String2=".") returned 1 [0220.425] wcscmp (_String1="J0295069.WMF", _String2="..") returned 1 [0220.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8348 [0220.425] wcscpy (in: _Dest=0x68b8348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.425] wcscat (in: _Dest=0x68b8348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.425] wcscat (in: _Dest=0x68b8348, _Source="J0295069.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" [0220.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0220.426] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0220.426] wcscmp (_String1="J0296277.WMF", _String2=".") returned 1 [0220.426] wcscmp (_String1="J0296277.WMF", _String2="..") returned 1 [0220.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b83d0 [0220.426] wcscpy (in: _Dest=0x68b83d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.426] wcscat (in: _Dest=0x68b83d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.426] wcscat (in: _Dest=0x68b83d0, _Source="J0296277.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" [0220.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b83d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0220.428] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0220.428] wcscmp (_String1="J0296279.WMF", _String2=".") returned 1 [0220.428] wcscmp (_String1="J0296279.WMF", _String2="..") returned 1 [0220.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8458 [0220.428] wcscpy (in: _Dest=0x68b8458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.428] wcscat (in: _Dest=0x68b8458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.428] wcscat (in: _Dest=0x68b8458, _Source="J0296279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" [0220.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0220.429] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0220.429] wcscmp (_String1="J0296288.WMF", _String2=".") returned 1 [0220.429] wcscmp (_String1="J0296288.WMF", _String2="..") returned 1 [0220.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b84e0 [0220.429] wcscpy (in: _Dest=0x68b84e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.429] wcscat (in: _Dest=0x68b84e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.429] wcscat (in: _Dest=0x68b84e0, _Source="J0296288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" [0220.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b84e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0220.431] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0220.431] wcscmp (_String1="J0297229.WMF", _String2=".") returned 1 [0220.431] wcscmp (_String1="J0297229.WMF", _String2="..") returned 1 [0220.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8568 [0220.431] wcscpy (in: _Dest=0x68b8568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.431] wcscat (in: _Dest=0x68b8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.431] wcscat (in: _Dest=0x68b8568, _Source="J0297229.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" [0220.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0220.433] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0220.433] wcscmp (_String1="J0297269.WMF", _String2=".") returned 1 [0220.433] wcscmp (_String1="J0297269.WMF", _String2="..") returned 1 [0220.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b85f0 [0220.433] wcscpy (in: _Dest=0x68b85f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.433] wcscat (in: _Dest=0x68b85f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.433] wcscat (in: _Dest=0x68b85f0, _Source="J0297269.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" [0220.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b85f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0220.434] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0220.434] wcscmp (_String1="J0297725.WMF", _String2=".") returned 1 [0220.434] wcscmp (_String1="J0297725.WMF", _String2="..") returned 1 [0220.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8678 [0220.434] wcscpy (in: _Dest=0x68b8678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.434] wcscat (in: _Dest=0x68b8678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.435] wcscat (in: _Dest=0x68b8678, _Source="J0297725.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" [0220.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0220.436] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0220.436] wcscmp (_String1="J0297727.WMF", _String2=".") returned 1 [0220.436] wcscmp (_String1="J0297727.WMF", _String2="..") returned 1 [0220.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8700 [0220.436] wcscpy (in: _Dest=0x68b8700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.436] wcscat (in: _Dest=0x68b8700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.436] wcscat (in: _Dest=0x68b8700, _Source="J0297727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" [0220.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0220.437] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0220.437] wcscmp (_String1="J0297757.WMF", _String2=".") returned 1 [0220.437] wcscmp (_String1="J0297757.WMF", _String2="..") returned 1 [0220.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8788 [0220.438] wcscpy (in: _Dest=0x68b8788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.438] wcscat (in: _Dest=0x68b8788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.438] wcscat (in: _Dest=0x68b8788, _Source="J0297757.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" [0220.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0220.440] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0220.440] wcscmp (_String1="J0297759.WMF", _String2=".") returned 1 [0220.440] wcscmp (_String1="J0297759.WMF", _String2="..") returned 1 [0220.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8810 [0220.440] wcscpy (in: _Dest=0x68b8810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.440] wcscat (in: _Dest=0x68b8810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.440] wcscat (in: _Dest=0x68b8810, _Source="J0297759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" [0220.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0220.441] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0220.450] wcscmp (_String1="J0300862.WMF", _String2=".") returned 1 [0220.450] wcscmp (_String1="J0300862.WMF", _String2="..") returned 1 [0220.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8898 [0220.450] wcscpy (in: _Dest=0x68b8898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.450] wcscat (in: _Dest=0x68b8898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.450] wcscat (in: _Dest=0x68b8898, _Source="J0300862.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" [0220.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0220.452] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba43700, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba43700, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0220.452] wcscmp (_String1="J0301044.WMF", _String2=".") returned 1 [0220.452] wcscmp (_String1="J0301044.WMF", _String2="..") returned 1 [0220.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8920 [0220.452] wcscpy (in: _Dest=0x68b8920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.452] wcscat (in: _Dest=0x68b8920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.452] wcscat (in: _Dest=0x68b8920, _Source="J0301044.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" [0220.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0220.454] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e05300, ftCreationTime.dwHighDateTime=0x1bf4ad0, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5e05300, ftLastWriteTime.dwHighDateTime=0x1bf4ad0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0220.454] wcscmp (_String1="J0301052.WMF", _String2=".") returned 1 [0220.454] wcscmp (_String1="J0301052.WMF", _String2="..") returned 1 [0220.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b89a8 [0220.454] wcscpy (in: _Dest=0x68b89a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.454] wcscat (in: _Dest=0x68b89a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.454] wcscat (in: _Dest=0x68b89a8, _Source="J0301052.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" [0220.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b89a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0220.455] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0220.455] wcscmp (_String1="J0301418.WMF", _String2=".") returned 1 [0220.455] wcscmp (_String1="J0301418.WMF", _String2="..") returned 1 [0220.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8a30 [0220.456] wcscpy (in: _Dest=0x68b8a30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.456] wcscat (in: _Dest=0x68b8a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.456] wcscat (in: _Dest=0x68b8a30, _Source="J0301418.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" [0220.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0220.513] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0220.513] wcscmp (_String1="J0301432.WMF", _String2=".") returned 1 [0220.513] wcscmp (_String1="J0301432.WMF", _String2="..") returned 1 [0220.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8ab8 [0220.513] wcscpy (in: _Dest=0x68b8ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.513] wcscat (in: _Dest=0x68b8ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.513] wcscat (in: _Dest=0x68b8ab8, _Source="J0301432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" [0220.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0220.632] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0220.632] wcscmp (_String1="J0304371.WMF", _String2=".") returned 1 [0220.632] wcscmp (_String1="J0304371.WMF", _String2="..") returned 1 [0220.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8bc8 [0220.632] wcscpy (in: _Dest=0x68b8bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.632] wcscat (in: _Dest=0x68b8bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.632] wcscat (in: _Dest=0x68b8bc8, _Source="J0304371.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" [0220.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0220.633] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0220.633] wcscmp (_String1="J0304405.WMF", _String2=".") returned 1 [0220.633] wcscmp (_String1="J0304405.WMF", _String2="..") returned 1 [0220.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8c50 [0220.633] wcscpy (in: _Dest=0x68b8c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.633] wcscat (in: _Dest=0x68b8c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.633] wcscat (in: _Dest=0x68b8c50, _Source="J0304405.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" [0220.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0220.635] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0220.635] wcscmp (_String1="J0304853.WMF", _String2=".") returned 1 [0220.635] wcscmp (_String1="J0304853.WMF", _String2="..") returned 1 [0220.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8cd8 [0220.635] wcscpy (in: _Dest=0x68b8cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.635] wcscat (in: _Dest=0x68b8cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.635] wcscat (in: _Dest=0x68b8cd8, _Source="J0304853.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" [0220.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0220.636] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0220.637] wcscmp (_String1="J0304861.WMF", _String2=".") returned 1 [0220.637] wcscmp (_String1="J0304861.WMF", _String2="..") returned 1 [0220.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8d60 [0220.637] wcscpy (in: _Dest=0x68b8d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.637] wcscat (in: _Dest=0x68b8d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.637] wcscat (in: _Dest=0x68b8d60, _Source="J0304861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" [0220.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0220.638] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0220.638] wcscmp (_String1="J0304875.WMF", _String2=".") returned 1 [0220.639] wcscmp (_String1="J0304875.WMF", _String2="..") returned 1 [0220.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8de8 [0220.639] wcscpy (in: _Dest=0x68b8de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.639] wcscat (in: _Dest=0x68b8de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.639] wcscat (in: _Dest=0x68b8de8, _Source="J0304875.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" [0220.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0220.640] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0220.640] wcscmp (_String1="J0309480.JPG", _String2=".") returned 1 [0220.640] wcscmp (_String1="J0309480.JPG", _String2="..") returned 1 [0220.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8e70 [0220.640] wcscpy (in: _Dest=0x68b8e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.640] wcscat (in: _Dest=0x68b8e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.641] wcscat (in: _Dest=0x68b8e70, _Source="J0309480.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" [0220.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0220.642] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0220.642] wcscmp (_String1="J0309567.JPG", _String2=".") returned 1 [0220.642] wcscmp (_String1="J0309567.JPG", _String2="..") returned 1 [0220.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8ef8 [0220.642] wcscpy (in: _Dest=0x68b8ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.642] wcscat (in: _Dest=0x68b8ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.642] wcscat (in: _Dest=0x68b8ef8, _Source="J0309567.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" [0220.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0220.643] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0220.643] wcscmp (_String1="J0309585.JPG", _String2=".") returned 1 [0220.643] wcscmp (_String1="J0309585.JPG", _String2="..") returned 1 [0220.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b8f80 [0220.644] wcscpy (in: _Dest=0x68b8f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.644] wcscat (in: _Dest=0x68b8f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.644] wcscat (in: _Dest=0x68b8f80, _Source="J0309585.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" [0220.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b8f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0220.645] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0220.645] wcscmp (_String1="J0309598.JPG", _String2=".") returned 1 [0220.645] wcscmp (_String1="J0309598.JPG", _String2="..") returned 1 [0220.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9008 [0220.645] wcscpy (in: _Dest=0x68b9008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.645] wcscat (in: _Dest=0x68b9008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.645] wcscat (in: _Dest=0x68b9008, _Source="J0309598.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" [0220.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0220.647] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0220.647] wcscmp (_String1="J0309664.JPG", _String2=".") returned 1 [0220.647] wcscmp (_String1="J0309664.JPG", _String2="..") returned 1 [0220.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9090 [0220.647] wcscpy (in: _Dest=0x68b9090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.647] wcscat (in: _Dest=0x68b9090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.647] wcscat (in: _Dest=0x68b9090, _Source="J0309664.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" [0220.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0220.649] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0220.649] wcscmp (_String1="J0309705.JPG", _String2=".") returned 1 [0220.649] wcscmp (_String1="J0309705.JPG", _String2="..") returned 1 [0220.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9118 [0220.649] wcscpy (in: _Dest=0x68b9118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.649] wcscat (in: _Dest=0x68b9118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.649] wcscat (in: _Dest=0x68b9118, _Source="J0309705.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" [0220.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0220.650] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ca8400, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0ca8400, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0220.650] wcscmp (_String1="J0309902.WMF", _String2=".") returned 1 [0220.650] wcscmp (_String1="J0309902.WMF", _String2="..") returned 1 [0220.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b91a0 [0220.650] wcscpy (in: _Dest=0x68b91a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.650] wcscat (in: _Dest=0x68b91a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.650] wcscat (in: _Dest=0x68b91a0, _Source="J0309902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" [0220.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b91a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0220.652] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1fbb100, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1fbb100, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0220.652] wcscmp (_String1="J0309904.WMF", _String2=".") returned 1 [0220.652] wcscmp (_String1="J0309904.WMF", _String2="..") returned 1 [0220.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9228 [0220.652] wcscpy (in: _Dest=0x68b9228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.652] wcscat (in: _Dest=0x68b9228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.652] wcscat (in: _Dest=0x68b9228, _Source="J0309904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" [0220.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0220.654] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd5400, ftCreationTime.dwHighDateTime=0x1bf5d1b, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dd5400, ftLastWriteTime.dwHighDateTime=0x1bf5d1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0220.654] wcscmp (_String1="J0309920.WMF", _String2=".") returned 1 [0220.654] wcscmp (_String1="J0309920.WMF", _String2="..") returned 1 [0220.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b92b0 [0220.654] wcscpy (in: _Dest=0x68b92b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.654] wcscat (in: _Dest=0x68b92b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.654] wcscat (in: _Dest=0x68b92b0, _Source="J0309920.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" [0220.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b92b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0220.655] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f389100, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f389100, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0220.655] wcscmp (_String1="J0313896.JPG", _String2=".") returned 1 [0220.655] wcscmp (_String1="J0313896.JPG", _String2="..") returned 1 [0220.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9338 [0220.655] wcscpy (in: _Dest=0x68b9338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.655] wcscat (in: _Dest=0x68b9338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.656] wcscat (in: _Dest=0x68b9338, _Source="J0313896.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" [0220.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0220.657] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b09700, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b09700, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0220.657] wcscmp (_String1="J0313965.JPG", _String2=".") returned 1 [0220.657] wcscmp (_String1="J0313965.JPG", _String2="..") returned 1 [0220.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b93c0 [0220.657] wcscpy (in: _Dest=0x68b93c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.657] wcscat (in: _Dest=0x68b93c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.657] wcscat (in: _Dest=0x68b93c0, _Source="J0313965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" [0220.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b93c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0220.659] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b20500, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7b20500, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0220.659] wcscmp (_String1="J0313970.JPG", _String2=".") returned 1 [0220.659] wcscmp (_String1="J0313970.JPG", _String2="..") returned 1 [0220.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9448 [0220.659] wcscpy (in: _Dest=0x68b9448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.659] wcscat (in: _Dest=0x68b9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.659] wcscat (in: _Dest=0x68b9448, _Source="J0313970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" [0220.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0220.660] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23cdb00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd23cdb00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0220.660] wcscmp (_String1="J0313974.JPG", _String2=".") returned 1 [0220.660] wcscmp (_String1="J0313974.JPG", _String2="..") returned 1 [0220.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b94d0 [0220.661] wcscpy (in: _Dest=0x68b94d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.661] wcscat (in: _Dest=0x68b94d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.661] wcscat (in: _Dest=0x68b94d0, _Source="J0313974.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" [0220.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b94d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0220.662] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51fec00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc51fec00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0220.662] wcscmp (_String1="J0314068.JPG", _String2=".") returned 1 [0220.662] wcscmp (_String1="J0314068.JPG", _String2="..") returned 1 [0220.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9558 [0220.662] wcscpy (in: _Dest=0x68b9558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.662] wcscat (in: _Dest=0x68b9558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.662] wcscat (in: _Dest=0x68b9558, _Source="J0314068.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" [0220.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0220.664] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0220.664] wcscmp (_String1="J0315580.JPG", _String2=".") returned 1 [0220.664] wcscmp (_String1="J0315580.JPG", _String2="..") returned 1 [0220.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b95e0 [0220.664] wcscpy (in: _Dest=0x68b95e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.664] wcscat (in: _Dest=0x68b95e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.664] wcscat (in: _Dest=0x68b95e0, _Source="J0315580.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" [0220.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b95e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0220.665] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0220.665] wcscmp (_String1="J0315612.JPG", _String2=".") returned 1 [0220.666] wcscmp (_String1="J0315612.JPG", _String2="..") returned 1 [0220.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9668 [0220.666] wcscpy (in: _Dest=0x68b9668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.666] wcscat (in: _Dest=0x68b9668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.666] wcscat (in: _Dest=0x68b9668, _Source="J0315612.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" [0220.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0220.667] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0220.667] wcscmp (_String1="J0318448.WMF", _String2=".") returned 1 [0220.667] wcscmp (_String1="J0318448.WMF", _String2="..") returned 1 [0220.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b96f0 [0220.668] wcscpy (in: _Dest=0x68b96f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.668] wcscat (in: _Dest=0x68b96f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.668] wcscat (in: _Dest=0x68b96f0, _Source="J0318448.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" [0220.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b96f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0220.704] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0220.705] wcscmp (_String1="J0318804.WMF", _String2=".") returned 1 [0220.705] wcscmp (_String1="J0318804.WMF", _String2="..") returned 1 [0220.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9778 [0220.705] wcscpy (in: _Dest=0x68b9778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.705] wcscat (in: _Dest=0x68b9778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.705] wcscat (in: _Dest=0x68b9778, _Source="J0318804.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" [0220.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0220.706] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0220.706] wcscmp (_String1="J0318810.WMF", _String2=".") returned 1 [0220.707] wcscmp (_String1="J0318810.WMF", _String2="..") returned 1 [0220.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9800 [0220.707] wcscpy (in: _Dest=0x68b9800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.707] wcscat (in: _Dest=0x68b9800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.707] wcscat (in: _Dest=0x68b9800, _Source="J0318810.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" [0220.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0220.708] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0220.708] wcscmp (_String1="J0321179.JPG", _String2=".") returned 1 [0220.708] wcscmp (_String1="J0321179.JPG", _String2="..") returned 1 [0220.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9888 [0220.708] wcscpy (in: _Dest=0x68b9888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.708] wcscat (in: _Dest=0x68b9888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.708] wcscat (in: _Dest=0x68b9888, _Source="J0321179.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" [0220.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0220.710] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0220.710] wcscmp (_String1="J0324694.WMF", _String2=".") returned 1 [0220.710] wcscmp (_String1="J0324694.WMF", _String2="..") returned 1 [0220.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9910 [0220.710] wcscpy (in: _Dest=0x68b9910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.710] wcscat (in: _Dest=0x68b9910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.710] wcscat (in: _Dest=0x68b9910, _Source="J0324694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" [0220.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0220.712] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0220.712] wcscmp (_String1="J0324704.WMF", _String2=".") returned 1 [0220.712] wcscmp (_String1="J0324704.WMF", _String2="..") returned 1 [0220.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9998 [0220.712] wcscpy (in: _Dest=0x68b9998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.712] wcscat (in: _Dest=0x68b9998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.712] wcscat (in: _Dest=0x68b9998, _Source="J0324704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" [0220.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0220.713] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0220.714] wcscmp (_String1="J0337280.JPG", _String2=".") returned 1 [0220.714] wcscmp (_String1="J0337280.JPG", _String2="..") returned 1 [0220.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9a20 [0220.714] wcscpy (in: _Dest=0x68b9a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.714] wcscat (in: _Dest=0x68b9a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.714] wcscat (in: _Dest=0x68b9a20, _Source="J0337280.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" [0220.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0220.715] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0220.715] wcscmp (_String1="J0341328.JPG", _String2=".") returned 1 [0220.715] wcscmp (_String1="J0341328.JPG", _String2="..") returned 1 [0220.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9aa8 [0220.716] wcscpy (in: _Dest=0x68b9aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.716] wcscat (in: _Dest=0x68b9aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.716] wcscat (in: _Dest=0x68b9aa8, _Source="J0341328.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" [0220.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0220.717] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0220.726] wcscmp (_String1="J0341344.JPG", _String2=".") returned 1 [0220.726] wcscmp (_String1="J0341344.JPG", _String2="..") returned 1 [0220.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9b30 [0220.727] wcscpy (in: _Dest=0x68b9b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.727] wcscat (in: _Dest=0x68b9b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.727] wcscat (in: _Dest=0x68b9b30, _Source="J0341344.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" [0220.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0220.915] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0220.915] wcscmp (_String1="J0341439.JPG", _String2=".") returned 1 [0220.915] wcscmp (_String1="J0341439.JPG", _String2="..") returned 1 [0220.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9bb8 [0220.915] wcscpy (in: _Dest=0x68b9bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.915] wcscat (in: _Dest=0x68b9bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.915] wcscat (in: _Dest=0x68b9bb8, _Source="J0341439.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" [0220.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0220.916] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0220.916] wcscmp (_String1="J0341447.JPG", _String2=".") returned 1 [0220.916] wcscmp (_String1="J0341447.JPG", _String2="..") returned 1 [0220.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9c40 [0220.916] wcscpy (in: _Dest=0x68b9c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.916] wcscat (in: _Dest=0x68b9c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.916] wcscat (in: _Dest=0x68b9c40, _Source="J0341447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" [0220.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0220.918] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0220.918] wcscmp (_String1="J0341448.JPG", _String2=".") returned 1 [0220.918] wcscmp (_String1="J0341448.JPG", _String2="..") returned 1 [0220.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9cc8 [0220.918] wcscpy (in: _Dest=0x68b9cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.918] wcscat (in: _Dest=0x68b9cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.918] wcscat (in: _Dest=0x68b9cc8, _Source="J0341448.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" [0220.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0220.919] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0220.919] wcscmp (_String1="J0341455.JPG", _String2=".") returned 1 [0220.919] wcscmp (_String1="J0341455.JPG", _String2="..") returned 1 [0220.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9d50 [0220.919] wcscpy (in: _Dest=0x68b9d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.919] wcscat (in: _Dest=0x68b9d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.919] wcscat (in: _Dest=0x68b9d50, _Source="J0341455.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" [0220.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0220.921] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0220.921] wcscmp (_String1="J0341475.JPG", _String2=".") returned 1 [0220.921] wcscmp (_String1="J0341475.JPG", _String2="..") returned 1 [0220.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9dd8 [0220.921] wcscpy (in: _Dest=0x68b9dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.921] wcscat (in: _Dest=0x68b9dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.921] wcscat (in: _Dest=0x68b9dd8, _Source="J0341475.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" [0220.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0220.922] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0220.923] wcscmp (_String1="J0341499.JPG", _String2=".") returned 1 [0220.923] wcscmp (_String1="J0341499.JPG", _String2="..") returned 1 [0220.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9e60 [0220.923] wcscpy (in: _Dest=0x68b9e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.923] wcscat (in: _Dest=0x68b9e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.923] wcscat (in: _Dest=0x68b9e60, _Source="J0341499.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" [0220.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0220.924] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0220.924] wcscmp (_String1="J0341534.JPG", _String2=".") returned 1 [0220.925] wcscmp (_String1="J0341534.JPG", _String2="..") returned 1 [0220.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9ee8 [0220.925] wcscpy (in: _Dest=0x68b9ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.925] wcscat (in: _Dest=0x68b9ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.925] wcscat (in: _Dest=0x68b9ee8, _Source="J0341534.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" [0220.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0220.926] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0220.926] wcscmp (_String1="J0341551.JPG", _String2=".") returned 1 [0220.926] wcscmp (_String1="J0341551.JPG", _String2="..") returned 1 [0220.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9f70 [0220.926] wcscpy (in: _Dest=0x68b9f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.926] wcscat (in: _Dest=0x68b9f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.926] wcscat (in: _Dest=0x68b9f70, _Source="J0341551.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" [0220.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0220.927] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0220.927] wcscmp (_String1="J0341554.JPG", _String2=".") returned 1 [0220.927] wcscmp (_String1="J0341554.JPG", _String2="..") returned 1 [0220.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68b9ff8 [0220.927] wcscpy (in: _Dest=0x68b9ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.927] wcscat (in: _Dest=0x68b9ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.927] wcscat (in: _Dest=0x68b9ff8, _Source="J0341554.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" [0220.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68b9ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0220.928] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0220.928] wcscmp (_String1="J0341557.JPG", _String2=".") returned 1 [0220.928] wcscmp (_String1="J0341557.JPG", _String2="..") returned 1 [0220.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba080 [0220.929] wcscpy (in: _Dest=0x68ba080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.929] wcscat (in: _Dest=0x68ba080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.929] wcscat (in: _Dest=0x68ba080, _Source="J0341557.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" [0220.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0220.930] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0220.930] wcscmp (_String1="J0341559.JPG", _String2=".") returned 1 [0220.930] wcscmp (_String1="J0341559.JPG", _String2="..") returned 1 [0220.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba108 [0220.930] wcscpy (in: _Dest=0x68ba108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.930] wcscat (in: _Dest=0x68ba108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.930] wcscat (in: _Dest=0x68ba108, _Source="J0341559.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" [0220.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0220.931] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0220.931] wcscmp (_String1="J0341561.JPG", _String2=".") returned 1 [0220.931] wcscmp (_String1="J0341561.JPG", _String2="..") returned 1 [0220.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba190 [0220.931] wcscpy (in: _Dest=0x68ba190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.931] wcscat (in: _Dest=0x68ba190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.931] wcscat (in: _Dest=0x68ba190, _Source="J0341561.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" [0220.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0220.933] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0220.933] wcscmp (_String1="J0341634.JPG", _String2=".") returned 1 [0220.933] wcscmp (_String1="J0341634.JPG", _String2="..") returned 1 [0220.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba218 [0220.933] wcscpy (in: _Dest=0x68ba218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.933] wcscat (in: _Dest=0x68ba218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.933] wcscat (in: _Dest=0x68ba218, _Source="J0341634.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" [0220.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0220.934] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0220.934] wcscmp (_String1="J0341636.JPG", _String2=".") returned 1 [0220.934] wcscmp (_String1="J0341636.JPG", _String2="..") returned 1 [0220.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba2a0 [0220.934] wcscpy (in: _Dest=0x68ba2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.934] wcscat (in: _Dest=0x68ba2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.934] wcscat (in: _Dest=0x68ba2a0, _Source="J0341636.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" [0220.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0220.935] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0220.935] wcscmp (_String1="J0341645.JPG", _String2=".") returned 1 [0220.935] wcscmp (_String1="J0341645.JPG", _String2="..") returned 1 [0220.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba328 [0220.935] wcscpy (in: _Dest=0x68ba328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.935] wcscat (in: _Dest=0x68ba328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.935] wcscat (in: _Dest=0x68ba328, _Source="J0341645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" [0220.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0220.936] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0220.936] wcscmp (_String1="J0341653.JPG", _String2=".") returned 1 [0220.937] wcscmp (_String1="J0341653.JPG", _String2="..") returned 1 [0220.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba3b0 [0220.937] wcscpy (in: _Dest=0x68ba3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.937] wcscat (in: _Dest=0x68ba3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.937] wcscat (in: _Dest=0x68ba3b0, _Source="J0341653.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" [0220.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0220.938] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0220.938] wcscmp (_String1="J0341654.JPG", _String2=".") returned 1 [0220.938] wcscmp (_String1="J0341654.JPG", _String2="..") returned 1 [0220.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba438 [0220.938] wcscpy (in: _Dest=0x68ba438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.938] wcscat (in: _Dest=0x68ba438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.938] wcscat (in: _Dest=0x68ba438, _Source="J0341654.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" [0220.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0220.939] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0220.939] wcscmp (_String1="J0341738.JPG", _String2=".") returned 1 [0220.939] wcscmp (_String1="J0341738.JPG", _String2="..") returned 1 [0220.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba4c0 [0220.939] wcscpy (in: _Dest=0x68ba4c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.939] wcscat (in: _Dest=0x68ba4c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.939] wcscat (in: _Dest=0x68ba4c0, _Source="J0341738.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" [0220.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0220.940] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0220.941] wcscmp (_String1="J0341742.JPG", _String2=".") returned 1 [0220.941] wcscmp (_String1="J0341742.JPG", _String2="..") returned 1 [0220.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba548 [0220.941] wcscpy (in: _Dest=0x68ba548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.941] wcscat (in: _Dest=0x68ba548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.941] wcscat (in: _Dest=0x68ba548, _Source="J0341742.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" [0220.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0220.942] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0220.942] wcscmp (_String1="J0382836.JPG", _String2=".") returned 1 [0220.942] wcscmp (_String1="J0382836.JPG", _String2="..") returned 1 [0220.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba5d0 [0220.942] wcscpy (in: _Dest=0x68ba5d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.942] wcscat (in: _Dest=0x68ba5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.942] wcscat (in: _Dest=0x68ba5d0, _Source="J0382836.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" [0220.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0220.943] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0220.943] wcscmp (_String1="J0382925.JPG", _String2=".") returned 1 [0220.943] wcscmp (_String1="J0382925.JPG", _String2="..") returned 1 [0220.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba658 [0220.944] wcscpy (in: _Dest=0x68ba658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.944] wcscat (in: _Dest=0x68ba658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.944] wcscat (in: _Dest=0x68ba658, _Source="J0382925.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" [0220.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0220.945] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0220.945] wcscmp (_String1="J0382926.JPG", _String2=".") returned 1 [0220.945] wcscmp (_String1="J0382926.JPG", _String2="..") returned 1 [0220.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba6e0 [0220.945] wcscpy (in: _Dest=0x68ba6e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.945] wcscat (in: _Dest=0x68ba6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.945] wcscat (in: _Dest=0x68ba6e0, _Source="J0382926.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" [0220.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0220.946] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0220.946] wcscmp (_String1="J0382927.JPG", _String2=".") returned 1 [0220.946] wcscmp (_String1="J0382927.JPG", _String2="..") returned 1 [0220.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba768 [0220.946] wcscpy (in: _Dest=0x68ba768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.946] wcscat (in: _Dest=0x68ba768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.946] wcscat (in: _Dest=0x68ba768, _Source="J0382927.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" [0220.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0220.947] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0220.947] wcscmp (_String1="J0382930.JPG", _String2=".") returned 1 [0220.947] wcscmp (_String1="J0382930.JPG", _String2="..") returned 1 [0220.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba7f0 [0220.947] wcscpy (in: _Dest=0x68ba7f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.947] wcscat (in: _Dest=0x68ba7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.948] wcscat (in: _Dest=0x68ba7f0, _Source="J0382930.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" [0220.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0220.949] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0220.949] wcscmp (_String1="J0382931.JPG", _String2=".") returned 1 [0220.949] wcscmp (_String1="J0382931.JPG", _String2="..") returned 1 [0220.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba878 [0220.949] wcscpy (in: _Dest=0x68ba878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.949] wcscat (in: _Dest=0x68ba878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.949] wcscat (in: _Dest=0x68ba878, _Source="J0382931.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" [0220.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0220.950] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0220.950] wcscmp (_String1="J0382938.JPG", _String2=".") returned 1 [0220.950] wcscmp (_String1="J0382938.JPG", _String2="..") returned 1 [0220.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba900 [0220.950] wcscpy (in: _Dest=0x68ba900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.950] wcscat (in: _Dest=0x68ba900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.950] wcscat (in: _Dest=0x68ba900, _Source="J0382938.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" [0220.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0221.012] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0221.012] wcscmp (_String1="J0382939.JPG", _String2=".") returned 1 [0221.012] wcscmp (_String1="J0382939.JPG", _String2="..") returned 1 [0221.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f272d8 [0221.012] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.012] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.012] wcscat (in: _Dest=0x3f272d8, _Source="J0382939.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" [0221.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0221.013] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0221.013] wcscmp (_String1="J0382942.JPG", _String2=".") returned 1 [0221.013] wcscmp (_String1="J0382942.JPG", _String2="..") returned 1 [0221.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68ba988 [0221.013] wcscpy (in: _Dest=0x68ba988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.013] wcscat (in: _Dest=0x68ba988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.013] wcscat (in: _Dest=0x68ba988, _Source="J0382942.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" [0221.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ba988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0221.015] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0221.015] wcscmp (_String1="J0382944.JPG", _String2=".") returned 1 [0221.015] wcscmp (_String1="J0382944.JPG", _String2="..") returned 1 [0221.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68baa10 [0221.015] wcscpy (in: _Dest=0x68baa10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.015] wcscat (in: _Dest=0x68baa10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.015] wcscat (in: _Dest=0x68baa10, _Source="J0382944.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" [0221.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68baa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0221.016] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0221.016] wcscmp (_String1="J0382947.JPG", _String2=".") returned 1 [0221.016] wcscmp (_String1="J0382947.JPG", _String2="..") returned 1 [0221.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68baa98 [0221.016] wcscpy (in: _Dest=0x68baa98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.016] wcscat (in: _Dest=0x68baa98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.017] wcscat (in: _Dest=0x68baa98, _Source="J0382947.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" [0221.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68baa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0221.018] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0221.018] wcscmp (_String1="J0382948.JPG", _String2=".") returned 1 [0221.018] wcscmp (_String1="J0382948.JPG", _String2="..") returned 1 [0221.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bab20 [0221.018] wcscpy (in: _Dest=0x68bab20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.018] wcscat (in: _Dest=0x68bab20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.018] wcscat (in: _Dest=0x68bab20, _Source="J0382948.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" [0221.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bab20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0221.019] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0221.019] wcscmp (_String1="J0382950.JPG", _String2=".") returned 1 [0221.019] wcscmp (_String1="J0382950.JPG", _String2="..") returned 1 [0221.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68baba8 [0221.019] wcscpy (in: _Dest=0x68baba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.019] wcscat (in: _Dest=0x68baba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.019] wcscat (in: _Dest=0x68baba8, _Source="J0382950.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" [0221.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68baba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0221.020] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0221.020] wcscmp (_String1="J0382952.JPG", _String2=".") returned 1 [0221.020] wcscmp (_String1="J0382952.JPG", _String2="..") returned 1 [0221.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bac30 [0221.021] wcscpy (in: _Dest=0x68bac30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.021] wcscat (in: _Dest=0x68bac30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.021] wcscat (in: _Dest=0x68bac30, _Source="J0382952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" [0221.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bac30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0221.022] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0221.023] wcscmp (_String1="J0382954.JPG", _String2=".") returned 1 [0221.023] wcscmp (_String1="J0382954.JPG", _String2="..") returned 1 [0221.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bacb8 [0221.023] wcscpy (in: _Dest=0x68bacb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.024] wcscat (in: _Dest=0x68bacb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.024] wcscat (in: _Dest=0x68bacb8, _Source="J0382954.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" [0221.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bacb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0221.024] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0221.025] wcscmp (_String1="J0382955.JPG", _String2=".") returned 1 [0221.025] wcscmp (_String1="J0382955.JPG", _String2="..") returned 1 [0221.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bad40 [0221.025] wcscpy (in: _Dest=0x68bad40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.025] wcscat (in: _Dest=0x68bad40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.025] wcscat (in: _Dest=0x68bad40, _Source="J0382955.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" [0221.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bad40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0221.026] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0221.026] wcscmp (_String1="J0382957.JPG", _String2=".") returned 1 [0221.026] wcscmp (_String1="J0382957.JPG", _String2="..") returned 1 [0221.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68badc8 [0221.026] wcscpy (in: _Dest=0x68badc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.026] wcscat (in: _Dest=0x68badc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.026] wcscat (in: _Dest=0x68badc8, _Source="J0382957.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" [0221.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68badc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0221.027] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0221.027] wcscmp (_String1="J0382958.JPG", _String2=".") returned 1 [0221.027] wcscmp (_String1="J0382958.JPG", _String2="..") returned 1 [0221.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bae50 [0221.027] wcscpy (in: _Dest=0x68bae50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.027] wcscat (in: _Dest=0x68bae50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.028] wcscat (in: _Dest=0x68bae50, _Source="J0382958.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" [0221.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bae50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0221.029] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0221.029] wcscmp (_String1="J0382959.JPG", _String2=".") returned 1 [0221.029] wcscmp (_String1="J0382959.JPG", _String2="..") returned 1 [0221.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68baed8 [0221.029] wcscpy (in: _Dest=0x68baed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.029] wcscat (in: _Dest=0x68baed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.029] wcscat (in: _Dest=0x68baed8, _Source="J0382959.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" [0221.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68baed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0221.030] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0221.030] wcscmp (_String1="J0382960.JPG", _String2=".") returned 1 [0221.030] wcscmp (_String1="J0382960.JPG", _String2="..") returned 1 [0221.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68baf60 [0221.030] wcscpy (in: _Dest=0x68baf60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.030] wcscat (in: _Dest=0x68baf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.030] wcscat (in: _Dest=0x68baf60, _Source="J0382960.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" [0221.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68baf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0221.031] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0221.031] wcscmp (_String1="J0382961.JPG", _String2=".") returned 1 [0221.031] wcscmp (_String1="J0382961.JPG", _String2="..") returned 1 [0221.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bafe8 [0221.031] wcscpy (in: _Dest=0x68bafe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.032] wcscat (in: _Dest=0x68bafe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.032] wcscat (in: _Dest=0x68bafe8, _Source="J0382961.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" [0221.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bafe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0221.033] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0221.033] wcscmp (_String1="J0382962.JPG", _String2=".") returned 1 [0221.033] wcscmp (_String1="J0382962.JPG", _String2="..") returned 1 [0221.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb070 [0221.033] wcscpy (in: _Dest=0x68bb070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.033] wcscat (in: _Dest=0x68bb070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.033] wcscat (in: _Dest=0x68bb070, _Source="J0382962.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" [0221.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0221.034] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0221.034] wcscmp (_String1="J0382963.JPG", _String2=".") returned 1 [0221.034] wcscmp (_String1="J0382963.JPG", _String2="..") returned 1 [0221.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb0f8 [0221.034] wcscpy (in: _Dest=0x68bb0f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.034] wcscat (in: _Dest=0x68bb0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.034] wcscat (in: _Dest=0x68bb0f8, _Source="J0382963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" [0221.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0221.035] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0221.035] wcscmp (_String1="J0382965.JPG", _String2=".") returned 1 [0221.036] wcscmp (_String1="J0382965.JPG", _String2="..") returned 1 [0221.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb180 [0221.036] wcscpy (in: _Dest=0x68bb180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.036] wcscat (in: _Dest=0x68bb180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.036] wcscat (in: _Dest=0x68bb180, _Source="J0382965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" [0221.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0221.037] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0221.037] wcscmp (_String1="J0382966.JPG", _String2=".") returned 1 [0221.037] wcscmp (_String1="J0382966.JPG", _String2="..") returned 1 [0221.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb208 [0221.037] wcscpy (in: _Dest=0x68bb208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.037] wcscat (in: _Dest=0x68bb208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.037] wcscat (in: _Dest=0x68bb208, _Source="J0382966.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" [0221.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0221.039] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0221.039] wcscmp (_String1="J0382967.JPG", _String2=".") returned 1 [0221.040] wcscmp (_String1="J0382967.JPG", _String2="..") returned 1 [0221.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb290 [0221.040] wcscpy (in: _Dest=0x68bb290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.040] wcscat (in: _Dest=0x68bb290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.040] wcscat (in: _Dest=0x68bb290, _Source="J0382967.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" [0221.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0221.042] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0221.042] wcscmp (_String1="J0382968.JPG", _String2=".") returned 1 [0221.042] wcscmp (_String1="J0382968.JPG", _String2="..") returned 1 [0221.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb318 [0221.042] wcscpy (in: _Dest=0x68bb318, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.042] wcscat (in: _Dest=0x68bb318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.042] wcscat (in: _Dest=0x68bb318, _Source="J0382968.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" [0221.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0221.043] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0221.043] wcscmp (_String1="J0382969.JPG", _String2=".") returned 1 [0221.043] wcscmp (_String1="J0382969.JPG", _String2="..") returned 1 [0221.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb3a0 [0221.043] wcscpy (in: _Dest=0x68bb3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.043] wcscat (in: _Dest=0x68bb3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.043] wcscat (in: _Dest=0x68bb3a0, _Source="J0382969.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" [0221.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0221.044] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0221.044] wcscmp (_String1="J0382970.JPG", _String2=".") returned 1 [0221.044] wcscmp (_String1="J0382970.JPG", _String2="..") returned 1 [0221.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb428 [0221.044] wcscpy (in: _Dest=0x68bb428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.044] wcscat (in: _Dest=0x68bb428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.044] wcscat (in: _Dest=0x68bb428, _Source="J0382970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" [0221.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0221.045] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0221.045] wcscmp (_String1="J0384862.JPG", _String2=".") returned 1 [0221.045] wcscmp (_String1="J0384862.JPG", _String2="..") returned 1 [0221.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb4b0 [0221.045] wcscpy (in: _Dest=0x68bb4b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.045] wcscat (in: _Dest=0x68bb4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.045] wcscat (in: _Dest=0x68bb4b0, _Source="J0384862.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" [0221.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0221.047] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0221.047] wcscmp (_String1="J0384885.JPG", _String2=".") returned 1 [0221.047] wcscmp (_String1="J0384885.JPG", _String2="..") returned 1 [0221.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb538 [0221.047] wcscpy (in: _Dest=0x68bb538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.047] wcscat (in: _Dest=0x68bb538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.047] wcscat (in: _Dest=0x68bb538, _Source="J0384885.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" [0221.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0221.048] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0221.048] wcscmp (_String1="J0384888.JPG", _String2=".") returned 1 [0221.048] wcscmp (_String1="J0384888.JPG", _String2="..") returned 1 [0221.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb5c0 [0221.048] wcscpy (in: _Dest=0x68bb5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.048] wcscat (in: _Dest=0x68bb5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.048] wcscat (in: _Dest=0x68bb5c0, _Source="J0384888.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" [0221.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0221.049] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0221.049] wcscmp (_String1="J0384895.JPG", _String2=".") returned 1 [0221.049] wcscmp (_String1="J0384895.JPG", _String2="..") returned 1 [0221.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb648 [0221.049] wcscpy (in: _Dest=0x68bb648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.049] wcscat (in: _Dest=0x68bb648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.049] wcscat (in: _Dest=0x68bb648, _Source="J0384895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" [0221.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0221.050] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0221.050] wcscmp (_String1="J0384900.JPG", _String2=".") returned 1 [0221.050] wcscmp (_String1="J0384900.JPG", _String2="..") returned 1 [0221.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb6d0 [0221.051] wcscpy (in: _Dest=0x68bb6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.051] wcscat (in: _Dest=0x68bb6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.051] wcscat (in: _Dest=0x68bb6d0, _Source="J0384900.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" [0221.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0221.076] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0221.076] wcscmp (_String1="J0386120.JPG", _String2=".") returned 1 [0221.076] wcscmp (_String1="J0386120.JPG", _String2="..") returned 1 [0221.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cbc8 [0221.076] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.077] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.077] wcscat (in: _Dest=0x682cbc8, _Source="J0386120.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" [0221.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0221.078] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0221.078] wcscmp (_String1="J0386267.JPG", _String2=".") returned 1 [0221.078] wcscmp (_String1="J0386267.JPG", _String2="..") returned 1 [0221.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb758 [0221.078] wcscpy (in: _Dest=0x68bb758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.078] wcscat (in: _Dest=0x68bb758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.078] wcscat (in: _Dest=0x68bb758, _Source="J0386267.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" [0221.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0221.079] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0221.079] wcscmp (_String1="J0386270.JPG", _String2=".") returned 1 [0221.079] wcscmp (_String1="J0386270.JPG", _String2="..") returned 1 [0221.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb7e0 [0221.080] wcscpy (in: _Dest=0x68bb7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.080] wcscat (in: _Dest=0x68bb7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.080] wcscat (in: _Dest=0x68bb7e0, _Source="J0386270.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" [0221.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0221.083] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0221.083] wcscmp (_String1="J0386485.JPG", _String2=".") returned 1 [0221.083] wcscmp (_String1="J0386485.JPG", _String2="..") returned 1 [0221.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb868 [0221.083] wcscpy (in: _Dest=0x68bb868, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.083] wcscat (in: _Dest=0x68bb868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.083] wcscat (in: _Dest=0x68bb868, _Source="J0386485.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" [0221.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0221.085] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0221.085] wcscmp (_String1="J0386764.JPG", _String2=".") returned 1 [0221.085] wcscmp (_String1="J0386764.JPG", _String2="..") returned 1 [0221.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb8f0 [0221.085] wcscpy (in: _Dest=0x68bb8f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.085] wcscat (in: _Dest=0x68bb8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.085] wcscat (in: _Dest=0x68bb8f0, _Source="J0386764.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" [0221.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0221.089] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0221.089] wcscmp (_String1="J0387337.JPG", _String2=".") returned 1 [0221.089] wcscmp (_String1="J0387337.JPG", _String2="..") returned 1 [0221.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bb978 [0221.089] wcscpy (in: _Dest=0x68bb978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.089] wcscat (in: _Dest=0x68bb978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.090] wcscat (in: _Dest=0x68bb978, _Source="J0387337.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" [0221.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bb978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0221.091] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0221.091] wcscmp (_String1="J0387578.JPG", _String2=".") returned 1 [0221.091] wcscmp (_String1="J0387578.JPG", _String2="..") returned 1 [0221.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bba00 [0221.091] wcscpy (in: _Dest=0x68bba00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.091] wcscat (in: _Dest=0x68bba00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.091] wcscat (in: _Dest=0x68bba00, _Source="J0387578.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" [0221.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bba00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0221.092] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0221.092] wcscmp (_String1="J0387591.JPG", _String2=".") returned 1 [0221.092] wcscmp (_String1="J0387591.JPG", _String2="..") returned 1 [0221.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bba88 [0221.093] wcscpy (in: _Dest=0x68bba88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.093] wcscat (in: _Dest=0x68bba88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.093] wcscat (in: _Dest=0x68bba88, _Source="J0387591.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" [0221.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0221.094] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0221.094] wcscmp (_String1="J0387604.JPG", _String2=".") returned 1 [0221.094] wcscmp (_String1="J0387604.JPG", _String2="..") returned 1 [0221.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bbb10 [0221.094] wcscpy (in: _Dest=0x68bbb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.094] wcscat (in: _Dest=0x68bbb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.094] wcscat (in: _Dest=0x68bbb10, _Source="J0387604.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" [0221.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bbb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0221.096] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0221.096] wcscmp (_String1="J0387882.JPG", _String2=".") returned 1 [0221.096] wcscmp (_String1="J0387882.JPG", _String2="..") returned 1 [0221.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bbb98 [0221.096] wcscpy (in: _Dest=0x68bbb98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.096] wcscat (in: _Dest=0x68bbb98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.097] wcscat (in: _Dest=0x68bbb98, _Source="J0387882.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" [0221.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bbb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0221.098] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0221.098] wcscmp (_String1="J0387895.JPG", _String2=".") returned 1 [0221.098] wcscmp (_String1="J0387895.JPG", _String2="..") returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x68bbc20 [0221.098] wcscpy (in: _Dest=0x68bbc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.098] wcscat (in: _Dest=0x68bbc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.098] wcscat (in: _Dest=0x68bbc20, _Source="J0387895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" [0221.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68bbc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0221.101] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed91300, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeed91300, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0221.101] wcscmp (_String1="J0390072.JPG", _String2=".") returned 1 [0221.101] wcscmp (_String1="J0390072.JPG", _String2="..") returned 1 [0221.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0038 [0221.101] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.101] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.101] wcscat (in: _Dest=0x66f0038, _Source="J0390072.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" [0221.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0221.102] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2a3f00, ftCreationTime.dwHighDateTime=0x1c98d34, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2a3f00, ftLastWriteTime.dwHighDateTime=0x1c98d34, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0221.102] wcscmp (_String1="J0400001.PNG", _String2=".") returned 1 [0221.102] wcscmp (_String1="J0400001.PNG", _String2="..") returned 1 [0221.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0060 [0221.102] wcscpy (in: _Dest=0x66c0060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.102] wcscat (in: _Dest=0x66c0060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.102] wcscat (in: _Dest=0x66c0060, _Source="J0400001.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" [0221.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0221.105] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f48d600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f48d600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0221.105] wcscmp (_String1="J0400002.PNG", _String2=".") returned 1 [0221.105] wcscmp (_String1="J0400002.PNG", _String2="..") returned 1 [0221.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c00e8 [0221.106] wcscpy (in: _Dest=0x66c00e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.106] wcscat (in: _Dest=0x66c00e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.106] wcscat (in: _Dest=0x66c00e8, _Source="J0400002.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" [0221.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c00e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0221.107] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8814600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8814600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0221.109] wcscmp (_String1="J0400003.PNG", _String2=".") returned 1 [0221.109] wcscmp (_String1="J0400003.PNG", _String2="..") returned 1 [0221.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0170 [0221.109] wcscpy (in: _Dest=0x66c0170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.110] wcscat (in: _Dest=0x66c0170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.110] wcscat (in: _Dest=0x66c0170, _Source="J0400003.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" [0221.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0221.111] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf279d00, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf279d00, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0221.111] wcscmp (_String1="J0400004.PNG", _String2=".") returned 1 [0221.111] wcscmp (_String1="J0400004.PNG", _String2="..") returned 1 [0221.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c01f8 [0221.111] wcscpy (in: _Dest=0x66c01f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.111] wcscat (in: _Dest=0x66c01f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.111] wcscat (in: _Dest=0x66c01f8, _Source="J0400004.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" [0221.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c01f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0221.112] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17df5600, ftCreationTime.dwHighDateTime=0x1c98d37, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17df5600, ftLastWriteTime.dwHighDateTime=0x1c98d37, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0221.112] wcscmp (_String1="J0400005.PNG", _String2=".") returned 1 [0221.112] wcscmp (_String1="J0400005.PNG", _String2="..") returned 1 [0221.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0280 [0221.113] wcscpy (in: _Dest=0x66c0280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.113] wcscat (in: _Dest=0x66c0280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.113] wcscat (in: _Dest=0x66c0280, _Source="J0400005.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" [0221.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0221.114] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0221.114] wcscmp (_String1="JAVA_01.MID", _String2=".") returned 1 [0221.114] wcscmp (_String1="JAVA_01.MID", _String2="..") returned 1 [0221.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66c0308 [0221.114] wcscpy (in: _Dest=0x66c0308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.114] wcscat (in: _Dest=0x66c0308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.114] wcscat (in: _Dest=0x66c0308, _Source="JAVA_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" [0221.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0221.115] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0221.115] wcscmp (_String1="JNGLE_01.MID", _String2=".") returned 1 [0221.115] wcscmp (_String1="JNGLE_01.MID", _String2="..") returned 1 [0221.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0390 [0221.115] wcscpy (in: _Dest=0x66c0390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.115] wcscat (in: _Dest=0x66c0390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.115] wcscat (in: _Dest=0x66c0390, _Source="JNGLE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" [0221.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0221.116] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc06700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bc06700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0221.116] wcscmp (_String1="MP00021_.WMF", _String2=".") returned 1 [0221.116] wcscmp (_String1="MP00021_.WMF", _String2="..") returned 1 [0221.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0418 [0221.116] wcscpy (in: _Dest=0x66c0418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.116] wcscat (in: _Dest=0x66c0418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.116] wcscat (in: _Dest=0x66c0418, _Source="MP00021_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" [0221.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0221.117] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee1bd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8081de70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee1bd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0221.117] wcscmp (_String1="MP00132_.WMF", _String2=".") returned 1 [0221.117] wcscmp (_String1="MP00132_.WMF", _String2="..") returned 1 [0221.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c04a0 [0221.117] wcscpy (in: _Dest=0x66c04a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.117] wcscat (in: _Dest=0x66c04a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.117] wcscat (in: _Dest=0x66c04a0, _Source="MP00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" [0221.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c04a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0221.118] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb04bdc00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb04bdc00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0221.118] wcscmp (_String1="MP00646_.WMF", _String2=".") returned 1 [0221.118] wcscmp (_String1="MP00646_.WMF", _String2="..") returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0528 [0221.118] wcscpy (in: _Dest=0x66c0528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.118] wcscat (in: _Dest=0x66c0528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.118] wcscat (in: _Dest=0x66c0528, _Source="MP00646_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" [0221.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0221.119] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0221.119] wcscmp (_String1="MUSIC_01.MID", _String2=".") returned 1 [0221.119] wcscmp (_String1="MUSIC_01.MID", _String2="..") returned 1 [0221.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c05b0 [0221.119] wcscpy (in: _Dest=0x66c05b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.120] wcscat (in: _Dest=0x66c05b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.120] wcscat (in: _Dest=0x66c05b0, _Source="MUSIC_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" [0221.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c05b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0221.121] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a5a700, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25a5a700, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0221.121] wcscmp (_String1="NA00042_.WMF", _String2=".") returned 1 [0221.121] wcscmp (_String1="NA00042_.WMF", _String2="..") returned 1 [0221.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0638 [0221.121] wcscpy (in: _Dest=0x66c0638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.121] wcscat (in: _Dest=0x66c0638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.121] wcscat (in: _Dest=0x66c0638, _Source="NA00042_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" [0221.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0221.122] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc07e9100, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc07e9100, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0221.122] wcscmp (_String1="NA00057_.WMF", _String2=".") returned 1 [0221.122] wcscmp (_String1="NA00057_.WMF", _String2="..") returned 1 [0221.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c06c0 [0221.122] wcscpy (in: _Dest=0x66c06c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.122] wcscat (in: _Dest=0x66c06c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.122] wcscat (in: _Dest=0x66c06c0, _Source="NA00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" [0221.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c06c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0221.123] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f52900, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6f52900, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0221.123] wcscmp (_String1="NA00058_.WMF", _String2=".") returned 1 [0221.123] wcscmp (_String1="NA00058_.WMF", _String2="..") returned 1 [0221.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0748 [0221.123] wcscpy (in: _Dest=0x66c0748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.123] wcscat (in: _Dest=0x66c0748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.123] wcscat (in: _Dest=0x66c0748, _Source="NA00058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" [0221.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0221.125] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750fb700, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x750fb700, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0221.125] wcscmp (_String1="NA00068_.WMF", _String2=".") returned 1 [0221.125] wcscmp (_String1="NA00068_.WMF", _String2="..") returned 1 [0221.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c07d0 [0221.125] wcscpy (in: _Dest=0x66c07d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.125] wcscat (in: _Dest=0x66c07d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.125] wcscat (in: _Dest=0x66c07d0, _Source="NA00068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" [0221.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c07d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0221.126] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8d7d00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e8d7d00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0221.126] wcscmp (_String1="NA00238_.WMF", _String2=".") returned 1 [0221.126] wcscmp (_String1="NA00238_.WMF", _String2="..") returned 1 [0221.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0858 [0221.127] wcscpy (in: _Dest=0x66c0858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.127] wcscat (in: _Dest=0x66c0858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.127] wcscat (in: _Dest=0x66c0858, _Source="NA00238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" [0221.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0221.310] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5548b500, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5548b500, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0221.310] wcscmp (_String1="NA00330_.WMF", _String2=".") returned 1 [0221.310] wcscmp (_String1="NA00330_.WMF", _String2="..") returned 1 [0221.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c08e0 [0221.310] wcscpy (in: _Dest=0x66c08e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.310] wcscat (in: _Dest=0x66c08e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.310] wcscat (in: _Dest=0x66c08e0, _Source="NA00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" [0221.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c08e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0221.412] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed43a000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed43a000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0221.413] wcscmp (_String1="NA00388_.WMF", _String2=".") returned 1 [0221.413] wcscmp (_String1="NA00388_.WMF", _String2="..") returned 1 [0221.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0968 [0221.413] wcscpy (in: _Dest=0x66c0968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.413] wcscat (in: _Dest=0x66c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.413] wcscat (in: _Dest=0x66c0968, _Source="NA00388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" [0221.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0221.414] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15ac800, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf15ac800, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0221.414] wcscmp (_String1="NA00389_.WMF", _String2=".") returned 1 [0221.414] wcscmp (_String1="NA00389_.WMF", _String2="..") returned 1 [0221.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c09f0 [0221.414] wcscpy (in: _Dest=0x66c09f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.414] wcscat (in: _Dest=0x66c09f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.414] wcscat (in: _Dest=0x66c09f0, _Source="NA00389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" [0221.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c09f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0221.416] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0299b00, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0299b00, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0221.416] wcscmp (_String1="NA00390_.WMF", _String2=".") returned 1 [0221.416] wcscmp (_String1="NA00390_.WMF", _String2="..") returned 1 [0221.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0a78 [0221.416] wcscpy (in: _Dest=0x66c0a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.416] wcscat (in: _Dest=0x66c0a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.416] wcscat (in: _Dest=0x66c0a78, _Source="NA00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" [0221.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0221.418] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734af100, ftCreationTime.dwHighDateTime=0x1bd4b50, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x734af100, ftLastWriteTime.dwHighDateTime=0x1bd4b50, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0221.418] wcscmp (_String1="NA00391_.WMF", _String2=".") returned 1 [0221.418] wcscmp (_String1="NA00391_.WMF", _String2="..") returned 1 [0221.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0b00 [0221.418] wcscpy (in: _Dest=0x66c0b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.418] wcscat (in: _Dest=0x66c0b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.418] wcscat (in: _Dest=0x66c0b00, _Source="NA00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" [0221.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0221.419] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b0400, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba1b0400, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0221.419] wcscmp (_String1="NA00394_.WMF", _String2=".") returned 1 [0221.419] wcscmp (_String1="NA00394_.WMF", _String2="..") returned 1 [0221.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0b88 [0221.420] wcscpy (in: _Dest=0x66c0b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.420] wcscat (in: _Dest=0x66c0b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.420] wcscat (in: _Dest=0x66c0b88, _Source="NA00394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" [0221.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0221.422] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe157de00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe157de00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0221.422] wcscmp (_String1="NA00395_.WMF", _String2=".") returned 1 [0221.422] wcscmp (_String1="NA00395_.WMF", _String2="..") returned 1 [0221.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0c10 [0221.422] wcscpy (in: _Dest=0x66c0c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.422] wcscat (in: _Dest=0x66c0c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.422] wcscat (in: _Dest=0x66c0c10, _Source="NA00395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" [0221.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0221.423] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe026b100, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe026b100, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0221.423] wcscmp (_String1="NA00396_.WMF", _String2=".") returned 1 [0221.423] wcscmp (_String1="NA00396_.WMF", _String2="..") returned 1 [0221.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0c98 [0221.423] wcscpy (in: _Dest=0x66c0c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.423] wcscat (in: _Dest=0x66c0c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.424] wcscat (in: _Dest=0x66c0c98, _Source="NA00396_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" [0221.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0221.425] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cfe400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cfe400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0221.425] wcscmp (_String1="NA00417_.WMF", _String2=".") returned 1 [0221.425] wcscmp (_String1="NA00417_.WMF", _String2="..") returned 1 [0221.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0d20 [0221.425] wcscpy (in: _Dest=0x66c0d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.425] wcscat (in: _Dest=0x66c0d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.425] wcscat (in: _Dest=0x66c0d20, _Source="NA00417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" [0221.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0221.426] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6707400, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6707400, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0221.426] wcscmp (_String1="NA00433_.WMF", _String2=".") returned 1 [0221.426] wcscmp (_String1="NA00433_.WMF", _String2="..") returned 1 [0221.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0da8 [0221.426] wcscpy (in: _Dest=0x66c0da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.426] wcscat (in: _Dest=0x66c0da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.426] wcscat (in: _Dest=0x66c0da8, _Source="NA00433_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" [0221.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0221.427] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de8a00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73de8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0221.427] wcscmp (_String1="NA00438_.WMF", _String2=".") returned 1 [0221.428] wcscmp (_String1="NA00438_.WMF", _String2="..") returned 1 [0221.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0e30 [0221.428] wcscpy (in: _Dest=0x66c0e30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.428] wcscat (in: _Dest=0x66c0e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.428] wcscat (in: _Dest=0x66c0e30, _Source="NA00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" [0221.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0221.429] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb465f400, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb465f400, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0221.429] wcscmp (_String1="NA00452_.WMF", _String2=".") returned 1 [0221.429] wcscmp (_String1="NA00452_.WMF", _String2="..") returned 1 [0221.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0eb8 [0221.429] wcscpy (in: _Dest=0x66c0eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.429] wcscat (in: _Dest=0x66c0eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.429] wcscat (in: _Dest=0x66c0eb8, _Source="NA00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" [0221.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0221.430] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2039a00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2039a00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0221.430] wcscmp (_String1="NA00454_.WMF", _String2=".") returned 1 [0221.430] wcscmp (_String1="NA00454_.WMF", _String2="..") returned 1 [0221.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0f40 [0221.430] wcscpy (in: _Dest=0x66c0f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.430] wcscat (in: _Dest=0x66c0f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.430] wcscat (in: _Dest=0x66c0f40, _Source="NA00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" [0221.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0221.431] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc25c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cc25c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0221.431] wcscmp (_String1="NA00458_.WMF", _String2=".") returned 1 [0221.431] wcscmp (_String1="NA00458_.WMF", _String2="..") returned 1 [0221.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0fc8 [0221.431] wcscpy (in: _Dest=0x66c0fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.431] wcscat (in: _Dest=0x66c0fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.431] wcscat (in: _Dest=0x66c0fc8, _Source="NA00458_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" [0221.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0221.433] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d431300, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d431300, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0221.433] wcscmp (_String1="NA00462_.WMF", _String2=".") returned 1 [0221.433] wcscmp (_String1="NA00462_.WMF", _String2="..") returned 1 [0221.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1050 [0221.433] wcscpy (in: _Dest=0x66c1050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.433] wcscat (in: _Dest=0x66c1050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.433] wcscat (in: _Dest=0x66c1050, _Source="NA00462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" [0221.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0221.434] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a83300, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a83300, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0221.434] wcscmp (_String1="NA00487_.WMF", _String2=".") returned 1 [0221.434] wcscmp (_String1="NA00487_.WMF", _String2="..") returned 1 [0221.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c10d8 [0221.434] wcscpy (in: _Dest=0x66c10d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.434] wcscat (in: _Dest=0x66c10d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.434] wcscat (in: _Dest=0x66c10d8, _Source="NA00487_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" [0221.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c10d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0221.435] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8f3a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a8f3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0221.435] wcscmp (_String1="NA00494_.WMF", _String2=".") returned 1 [0221.435] wcscmp (_String1="NA00494_.WMF", _String2="..") returned 1 [0221.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1160 [0221.435] wcscpy (in: _Dest=0x66c1160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.435] wcscat (in: _Dest=0x66c1160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.436] wcscat (in: _Dest=0x66c1160, _Source="NA00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" [0221.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0221.437] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1281f00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1281f00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0221.437] wcscmp (_String1="NA00512_.WMF", _String2=".") returned 1 [0221.437] wcscmp (_String1="NA00512_.WMF", _String2="..") returned 1 [0221.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c11e8 [0221.437] wcscpy (in: _Dest=0x66c11e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.437] wcscat (in: _Dest=0x66c11e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.437] wcscat (in: _Dest=0x66c11e8, _Source="NA00512_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" [0221.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c11e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0221.438] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d00c00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d00c00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0221.438] wcscmp (_String1="NA00523_.WMF", _String2=".") returned 1 [0221.438] wcscmp (_String1="NA00523_.WMF", _String2="..") returned 1 [0221.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1270 [0221.438] wcscpy (in: _Dest=0x66c1270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.438] wcscat (in: _Dest=0x66c1270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.438] wcscat (in: _Dest=0x66c1270, _Source="NA00523_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" [0221.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0221.439] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bda2b00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bda2b00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0221.439] wcscmp (_String1="NA00525_.WMF", _String2=".") returned 1 [0221.439] wcscmp (_String1="NA00525_.WMF", _String2="..") returned 1 [0221.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c12f8 [0221.440] wcscpy (in: _Dest=0x66c12f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.440] wcscat (in: _Dest=0x66c12f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.440] wcscat (in: _Dest=0x66c12f8, _Source="NA00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" [0221.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c12f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0221.441] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb312a00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb312a00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0221.443] wcscmp (_String1="NA00530_.WMF", _String2=".") returned 1 [0221.443] wcscmp (_String1="NA00530_.WMF", _String2="..") returned 1 [0221.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1380 [0221.443] wcscpy (in: _Dest=0x66c1380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.443] wcscat (in: _Dest=0x66c1380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.443] wcscat (in: _Dest=0x66c1380, _Source="NA00530_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" [0221.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0221.444] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0221.444] wcscmp (_String1="NA00532_.WMF", _String2=".") returned 1 [0221.444] wcscmp (_String1="NA00532_.WMF", _String2="..") returned 1 [0221.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1408 [0221.444] wcscpy (in: _Dest=0x66c1408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.444] wcscat (in: _Dest=0x66c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.444] wcscat (in: _Dest=0x66c1408, _Source="NA00532_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" [0221.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0221.445] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fffd00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9fffd00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0221.445] wcscmp (_String1="NA00538_.WMF", _String2=".") returned 1 [0221.445] wcscmp (_String1="NA00538_.WMF", _String2="..") returned 1 [0221.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1490 [0221.445] wcscpy (in: _Dest=0x66c1490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.445] wcscat (in: _Dest=0x66c1490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.445] wcscat (in: _Dest=0x66c1490, _Source="NA00538_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" [0221.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0221.446] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cbe600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cbe600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0221.446] wcscmp (_String1="NA00641_.WMF", _String2=".") returned 1 [0221.446] wcscmp (_String1="NA00641_.WMF", _String2="..") returned 1 [0221.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1518 [0221.446] wcscpy (in: _Dest=0x66c1518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.446] wcscat (in: _Dest=0x66c1518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.446] wcscat (in: _Dest=0x66c1518, _Source="NA00641_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" [0221.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0221.447] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0221.447] wcscmp (_String1="NA00784_.WMF", _String2=".") returned 1 [0221.447] wcscmp (_String1="NA00784_.WMF", _String2="..") returned 1 [0221.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c15a0 [0221.448] wcscpy (in: _Dest=0x66c15a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.448] wcscat (in: _Dest=0x66c15a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.448] wcscat (in: _Dest=0x66c15a0, _Source="NA00784_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" [0221.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c15a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0221.449] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8561500, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8561500, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0221.449] wcscmp (_String1="NA00798_.WMF", _String2=".") returned 1 [0221.449] wcscmp (_String1="NA00798_.WMF", _String2="..") returned 1 [0221.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1628 [0221.449] wcscpy (in: _Dest=0x66c1628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.449] wcscat (in: _Dest=0x66c1628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.449] wcscat (in: _Dest=0x66c1628, _Source="NA00798_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" [0221.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0221.519] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f5d000, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81f5d000, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0221.519] wcscmp (_String1="NA00806_.WMF", _String2=".") returned 1 [0221.519] wcscmp (_String1="NA00806_.WMF", _String2="..") returned 1 [0221.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c16b0 [0221.520] wcscpy (in: _Dest=0x66c16b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.520] wcscat (in: _Dest=0x66c16b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.520] wcscat (in: _Dest=0x66c16b0, _Source="NA00806_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" [0221.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c16b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0221.521] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c4a300, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c4a300, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0221.521] wcscmp (_String1="NA00807_.WMF", _String2=".") returned 1 [0221.521] wcscmp (_String1="NA00807_.WMF", _String2="..") returned 1 [0221.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1738 [0221.521] wcscpy (in: _Dest=0x66c1738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.521] wcscat (in: _Dest=0x66c1738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.521] wcscat (in: _Dest=0x66c1738, _Source="NA00807_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" [0221.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0221.522] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102e800, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1102e800, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0221.522] wcscmp (_String1="NA00808_.WMF", _String2=".") returned 1 [0221.522] wcscmp (_String1="NA00808_.WMF", _String2="..") returned 1 [0221.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c17c0 [0221.523] wcscpy (in: _Dest=0x66c17c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.523] wcscat (in: _Dest=0x66c17c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.523] wcscat (in: _Dest=0x66c17c0, _Source="NA00808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" [0221.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c17c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0221.524] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e624900, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e624900, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0221.524] wcscmp (_String1="NA00809_.WMF", _String2=".") returned 1 [0221.524] wcscmp (_String1="NA00809_.WMF", _String2="..") returned 1 [0221.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1848 [0221.524] wcscpy (in: _Dest=0x66c1848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.524] wcscat (in: _Dest=0x66c1848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.524] wcscat (in: _Dest=0x66c1848, _Source="NA00809_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" [0221.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0221.534] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0221.534] wcscmp (_String1="NA00810_.WMF", _String2=".") returned 1 [0221.534] wcscmp (_String1="NA00810_.WMF", _String2="..") returned 1 [0221.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c18d0 [0221.534] wcscpy (in: _Dest=0x66c18d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.535] wcscat (in: _Dest=0x66c18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.535] wcscat (in: _Dest=0x66c18d0, _Source="NA00810_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" [0221.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0221.536] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0221.536] wcscmp (_String1="NA00932_.WMF", _String2=".") returned 1 [0221.536] wcscmp (_String1="NA00932_.WMF", _String2="..") returned 1 [0221.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1958 [0221.536] wcscpy (in: _Dest=0x66c1958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.537] wcscat (in: _Dest=0x66c1958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.537] wcscat (in: _Dest=0x66c1958, _Source="NA00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" [0221.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0221.538] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de0d600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4de0d600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0221.538] wcscmp (_String1="NA01064_.WMF", _String2=".") returned 1 [0221.538] wcscmp (_String1="NA01064_.WMF", _String2="..") returned 1 [0221.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c19e0 [0221.538] wcscpy (in: _Dest=0x66c19e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.538] wcscat (in: _Dest=0x66c19e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.538] wcscat (in: _Dest=0x66c19e0, _Source="NA01064_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" [0221.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0221.541] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6af6f00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6af6f00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0221.541] wcscmp (_String1="NA01066_.WMF", _String2=".") returned 1 [0221.541] wcscmp (_String1="NA01066_.WMF", _String2="..") returned 1 [0221.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1a68 [0221.541] wcscpy (in: _Dest=0x66c1a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.541] wcscat (in: _Dest=0x66c1a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.541] wcscat (in: _Dest=0x66c1a68, _Source="NA01066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" [0221.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0221.544] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460a3d00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460a3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0221.544] wcscmp (_String1="NA01069_.WMF", _String2=".") returned 1 [0221.544] wcscmp (_String1="NA01069_.WMF", _String2="..") returned 1 [0221.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1af0 [0221.544] wcscpy (in: _Dest=0x66c1af0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.544] wcscat (in: _Dest=0x66c1af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.544] wcscat (in: _Dest=0x66c1af0, _Source="NA01069_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" [0221.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0221.550] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ec000, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa34ec000, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0221.550] wcscmp (_String1="NA01123_.WMF", _String2=".") returned 1 [0221.550] wcscmp (_String1="NA01123_.WMF", _String2="..") returned 1 [0221.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1b78 [0221.550] wcscpy (in: _Dest=0x66c1b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.550] wcscat (in: _Dest=0x66c1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.550] wcscat (in: _Dest=0x66c1b78, _Source="NA01123_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" [0221.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0221.552] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77721100, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77721100, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0221.552] wcscmp (_String1="NA01126_.WMF", _String2=".") returned 1 [0221.552] wcscmp (_String1="NA01126_.WMF", _String2="..") returned 1 [0221.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1c00 [0221.552] wcscpy (in: _Dest=0x66c1c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.552] wcscat (in: _Dest=0x66c1c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.552] wcscat (in: _Dest=0x66c1c00, _Source="NA01126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" [0221.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0221.554] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295e0d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x295e0d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0221.554] wcscmp (_String1="NA01130_.WMF", _String2=".") returned 1 [0221.554] wcscmp (_String1="NA01130_.WMF", _String2="..") returned 1 [0221.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1c88 [0221.554] wcscpy (in: _Dest=0x66c1c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.554] wcscat (in: _Dest=0x66c1c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.554] wcscat (in: _Dest=0x66c1c88, _Source="NA01130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" [0221.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0221.555] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9762fe00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9762fe00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0221.555] wcscmp (_String1="NA01141_.WMF", _String2=".") returned 1 [0221.556] wcscmp (_String1="NA01141_.WMF", _String2="..") returned 1 [0221.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1d10 [0221.556] wcscpy (in: _Dest=0x66c1d10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.556] wcscat (in: _Dest=0x66c1d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.556] wcscat (in: _Dest=0x66c1d10, _Source="NA01141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" [0221.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0221.557] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d1d00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x916d1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0221.557] wcscmp (_String1="NA01148_.WMF", _String2=".") returned 1 [0221.557] wcscmp (_String1="NA01148_.WMF", _String2="..") returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1d98 [0221.557] wcscpy (in: _Dest=0x66c1d98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.558] wcscat (in: _Dest=0x66c1d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.558] wcscat (in: _Dest=0x66c1d98, _Source="NA01148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" [0221.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0221.559] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0221.559] wcscmp (_String1="NA01149_.WMF", _String2=".") returned 1 [0221.559] wcscmp (_String1="NA01149_.WMF", _String2="..") returned 1 [0221.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1e20 [0221.560] wcscpy (in: _Dest=0x66c1e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.560] wcscat (in: _Dest=0x66c1e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.560] wcscat (in: _Dest=0x66c1e20, _Source="NA01149_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" [0221.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0221.598] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca86900, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ca86900, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0221.598] wcscmp (_String1="NA01152_.WMF", _String2=".") returned 1 [0221.598] wcscmp (_String1="NA01152_.WMF", _String2="..") returned 1 [0221.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1ea8 [0221.598] wcscpy (in: _Dest=0x66c1ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.598] wcscat (in: _Dest=0x66c1ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.598] wcscat (in: _Dest=0x66c1ea8, _Source="NA01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" [0221.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0221.599] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b773c00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b773c00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0221.599] wcscmp (_String1="NA01154_.WMF", _String2=".") returned 1 [0221.599] wcscmp (_String1="NA01154_.WMF", _String2="..") returned 1 [0221.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1f30 [0221.600] wcscpy (in: _Dest=0x66c1f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.600] wcscat (in: _Dest=0x66c1f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.600] wcscat (in: _Dest=0x66c1f30, _Source="NA01154_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" [0221.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0221.601] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0221.601] wcscmp (_String1="NA01157_.WMF", _String2=".") returned 1 [0221.601] wcscmp (_String1="NA01157_.WMF", _String2="..") returned 1 [0221.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1fb8 [0221.601] wcscpy (in: _Dest=0x66c1fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.601] wcscat (in: _Dest=0x66c1fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.601] wcscat (in: _Dest=0x66c1fb8, _Source="NA01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" [0221.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0221.602] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85815b00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85815b00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0221.602] wcscmp (_String1="NA01158_.WMF", _String2=".") returned 1 [0221.603] wcscmp (_String1="NA01158_.WMF", _String2="..") returned 1 [0221.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2040 [0221.603] wcscpy (in: _Dest=0x66c2040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.603] wcscat (in: _Dest=0x66c2040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.603] wcscat (in: _Dest=0x66c2040, _Source="NA01158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" [0221.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0221.604] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0221.604] wcscmp (_String1="NA01161_.WMF", _String2=".") returned 1 [0221.604] wcscmp (_String1="NA01161_.WMF", _String2="..") returned 1 [0221.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c20c8 [0221.604] wcscpy (in: _Dest=0x66c20c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.604] wcscat (in: _Dest=0x66c20c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.604] wcscat (in: _Dest=0x66c20c8, _Source="NA01161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" [0221.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c20c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0221.606] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282ce000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x282ce000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0221.606] wcscmp (_String1="NA01164_.WMF", _String2=".") returned 1 [0221.606] wcscmp (_String1="NA01164_.WMF", _String2="..") returned 1 [0221.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2150 [0221.606] wcscpy (in: _Dest=0x66c2150, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.606] wcscat (in: _Dest=0x66c2150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.606] wcscat (in: _Dest=0x66c2150, _Source="NA01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" [0221.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0221.607] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fbb300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26fbb300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0221.607] wcscmp (_String1="NA01293_.WMF", _String2=".") returned 1 [0221.607] wcscmp (_String1="NA01293_.WMF", _String2="..") returned 1 [0221.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c21d8 [0221.607] wcscpy (in: _Dest=0x66c21d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.608] wcscat (in: _Dest=0x66c21d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.608] wcscat (in: _Dest=0x66c21d8, _Source="NA01293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" [0221.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c21d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0221.609] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d3e600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67d3e600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0221.609] wcscmp (_String1="NA01354_.WMF", _String2=".") returned 1 [0221.609] wcscmp (_String1="NA01354_.WMF", _String2="..") returned 1 [0221.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2260 [0221.609] wcscpy (in: _Dest=0x66c2260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.609] wcscat (in: _Dest=0x66c2260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.609] wcscat (in: _Dest=0x66c2260, _Source="NA01354_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" [0221.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0221.611] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64405f00, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64405f00, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0221.611] wcscmp (_String1="NA01356_.WMF", _String2=".") returned 1 [0221.611] wcscmp (_String1="NA01356_.WMF", _String2="..") returned 1 [0221.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c22e8 [0221.611] wcscpy (in: _Dest=0x66c22e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.611] wcscat (in: _Dest=0x66c22e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.611] wcscat (in: _Dest=0x66c22e8, _Source="NA01356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" [0221.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0221.613] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630f3200, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x630f3200, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0221.613] wcscmp (_String1="NA01357_.WMF", _String2=".") returned 1 [0221.613] wcscmp (_String1="NA01357_.WMF", _String2="..") returned 1 [0221.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2370 [0221.613] wcscpy (in: _Dest=0x66c2370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.613] wcscat (in: _Dest=0x66c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.613] wcscat (in: _Dest=0x66c2370, _Source="NA01357_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" [0221.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0221.614] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61de0500, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61de0500, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0221.614] wcscmp (_String1="NA01358_.WMF", _String2=".") returned 1 [0221.614] wcscmp (_String1="NA01358_.WMF", _String2="..") returned 1 [0221.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c23f8 [0221.615] wcscpy (in: _Dest=0x66c23f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.615] wcscat (in: _Dest=0x66c23f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.615] wcscat (in: _Dest=0x66c23f8, _Source="NA01358_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" [0221.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c23f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0221.616] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be82400, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be82400, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0221.616] wcscmp (_String1="NA01361_.WMF", _String2=".") returned 1 [0221.616] wcscmp (_String1="NA01361_.WMF", _String2="..") returned 1 [0221.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2480 [0221.616] wcscpy (in: _Dest=0x66c2480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.616] wcscat (in: _Dest=0x66c2480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.616] wcscat (in: _Dest=0x66c2480, _Source="NA01361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" [0221.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0221.618] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538fe900, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x538fe900, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0221.618] wcscmp (_String1="NA01368_.WMF", _String2=".") returned 1 [0221.618] wcscmp (_String1="NA01368_.WMF", _String2="..") returned 1 [0221.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2508 [0221.618] wcscpy (in: _Dest=0x66c2508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.618] wcscat (in: _Dest=0x66c2508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.618] wcscat (in: _Dest=0x66c2508, _Source="NA01368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" [0221.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0221.619] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b88a600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b88a600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0221.621] wcscmp (_String1="NA01421_.WMF", _String2=".") returned 1 [0221.621] wcscmp (_String1="NA01421_.WMF", _String2="..") returned 1 [0221.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2590 [0221.621] wcscpy (in: _Dest=0x66c2590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.622] wcscat (in: _Dest=0x66c2590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.622] wcscat (in: _Dest=0x66c2590, _Source="NA01421_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" [0221.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0221.623] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20783600, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20783600, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0221.623] wcscmp (_String1="NA01468_.WMF", _String2=".") returned 1 [0221.623] wcscmp (_String1="NA01468_.WMF", _String2="..") returned 1 [0221.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2618 [0221.623] wcscpy (in: _Dest=0x66c2618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.623] wcscat (in: _Dest=0x66c2618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.623] wcscat (in: _Dest=0x66c2618, _Source="NA01468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" [0221.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0221.624] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4af00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ce4af00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0221.625] wcscmp (_String1="NA01470_.WMF", _String2=".") returned 1 [0221.625] wcscmp (_String1="NA01470_.WMF", _String2="..") returned 1 [0221.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c26a0 [0221.625] wcscpy (in: _Dest=0x66c26a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.625] wcscat (in: _Dest=0x66c26a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.625] wcscat (in: _Dest=0x66c26a0, _Source="NA01470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" [0221.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c26a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0221.626] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19512800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19512800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0221.626] wcscmp (_String1="NA01472_.WMF", _String2=".") returned 1 [0221.626] wcscmp (_String1="NA01472_.WMF", _String2="..") returned 1 [0221.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2728 [0221.626] wcscpy (in: _Dest=0x66c2728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.626] wcscat (in: _Dest=0x66c2728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.626] wcscat (in: _Dest=0x66c2728, _Source="NA01472_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" [0221.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0221.628] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181ffb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181ffb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0221.628] wcscmp (_String1="NA01473_.WMF", _String2=".") returned 1 [0221.628] wcscmp (_String1="NA01473_.WMF", _String2="..") returned 1 [0221.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c27b0 [0221.628] wcscpy (in: _Dest=0x66c27b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.628] wcscat (in: _Dest=0x66c27b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.628] wcscat (in: _Dest=0x66c27b0, _Source="NA01473_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" [0221.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c27b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0221.630] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb492cf00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb492cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0221.630] wcscmp (_String1="NA01474_.WMF", _String2=".") returned 1 [0221.630] wcscmp (_String1="NA01474_.WMF", _String2="..") returned 1 [0221.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2838 [0221.630] wcscpy (in: _Dest=0x66c2838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.630] wcscat (in: _Dest=0x66c2838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.630] wcscat (in: _Dest=0x66c2838, _Source="NA01474_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" [0221.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0221.631] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ec5a00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0ec5a00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0221.631] wcscmp (_String1="NA01627_.WMF", _String2=".") returned 1 [0221.631] wcscmp (_String1="NA01627_.WMF", _String2="..") returned 1 [0221.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c28c0 [0221.631] wcscpy (in: _Dest=0x66c28c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.631] wcscat (in: _Dest=0x66c28c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.631] wcscat (in: _Dest=0x66c28c0, _Source="NA01627_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" [0221.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c28c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0221.633] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2436b600, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2436b600, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0221.633] wcscmp (_String1="NA01680_.WMF", _String2=".") returned 1 [0221.633] wcscmp (_String1="NA01680_.WMF", _String2="..") returned 1 [0221.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2948 [0221.633] wcscpy (in: _Dest=0x66c2948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.633] wcscat (in: _Dest=0x66c2948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.633] wcscat (in: _Dest=0x66c2948, _Source="NA01680_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" [0221.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0221.634] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a32f00, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a32f00, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0221.634] wcscmp (_String1="NA01682_.WMF", _String2=".") returned 1 [0221.635] wcscmp (_String1="NA01682_.WMF", _String2="..") returned 1 [0221.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c29d0 [0221.635] wcscpy (in: _Dest=0x66c29d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.635] wcscat (in: _Dest=0x66c29d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.635] wcscat (in: _Dest=0x66c29d0, _Source="NA01682_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" [0221.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c29d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0221.703] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb0f2900, ftCreationTime.dwHighDateTime=0x1bd4c3e, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb0f2900, ftLastWriteTime.dwHighDateTime=0x1bd4c3e, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0221.704] wcscmp (_String1="NA01701_.WMF", _String2=".") returned 1 [0221.704] wcscmp (_String1="NA01701_.WMF", _String2="..") returned 1 [0221.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2ae0 [0221.704] wcscpy (in: _Dest=0x66c2ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.704] wcscat (in: _Dest=0x66c2ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.704] wcscat (in: _Dest=0x66c2ae0, _Source="NA01701_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" [0221.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0221.705] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0221.705] wcscmp (_String1="NA01848_.WMF", _String2=".") returned 1 [0221.705] wcscmp (_String1="NA01848_.WMF", _String2="..") returned 1 [0221.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2a58 [0221.706] wcscpy (in: _Dest=0x66c2a58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.706] wcscat (in: _Dest=0x66c2a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.706] wcscat (in: _Dest=0x66c2a58, _Source="NA01848_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" [0221.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0221.707] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0221.707] wcscmp (_String1="NA01849_.WMF", _String2=".") returned 1 [0221.707] wcscmp (_String1="NA01849_.WMF", _String2="..") returned 1 [0221.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2b68 [0221.707] wcscpy (in: _Dest=0x66c2b68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.707] wcscat (in: _Dest=0x66c2b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.707] wcscat (in: _Dest=0x66c2b68, _Source="NA01849_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" [0221.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0221.708] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf398b00, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf398b00, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0221.708] wcscmp (_String1="NA01852_.WMF", _String2=".") returned 1 [0221.708] wcscmp (_String1="NA01852_.WMF", _String2="..") returned 1 [0221.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2bf0 [0221.708] wcscpy (in: _Dest=0x66c2bf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.709] wcscat (in: _Dest=0x66c2bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.709] wcscat (in: _Dest=0x66c2bf0, _Source="NA01852_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" [0221.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0221.710] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0221.710] wcscmp (_String1="NA01858_.WMF", _String2=".") returned 1 [0221.710] wcscmp (_String1="NA01858_.WMF", _String2="..") returned 1 [0221.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2c78 [0221.710] wcscpy (in: _Dest=0x66c2c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.710] wcscat (in: _Dest=0x66c2c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.710] wcscat (in: _Dest=0x66c2c78, _Source="NA01858_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" [0221.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0221.712] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f8a8300, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f8a8300, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0221.712] wcscmp (_String1="NA01866_.WMF", _String2=".") returned 1 [0221.712] wcscmp (_String1="NA01866_.WMF", _String2="..") returned 1 [0221.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2d00 [0221.712] wcscpy (in: _Dest=0x66c2d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.712] wcscat (in: _Dest=0x66c2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.712] wcscat (in: _Dest=0x66c2d00, _Source="NA01866_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" [0221.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0221.713] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0221.713] wcscmp (_String1="NA02009_.WMF", _String2=".") returned 1 [0221.713] wcscmp (_String1="NA02009_.WMF", _String2="..") returned 1 [0221.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2d88 [0221.713] wcscpy (in: _Dest=0x66c2d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.713] wcscat (in: _Dest=0x66c2d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.713] wcscat (in: _Dest=0x66c2d88, _Source="NA02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" [0221.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0221.715] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf742cd00, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf742cd00, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0221.715] wcscmp (_String1="NA02041_.WMF", _String2=".") returned 1 [0221.715] wcscmp (_String1="NA02041_.WMF", _String2="..") returned 1 [0221.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2e10 [0221.715] wcscpy (in: _Dest=0x66c2e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.715] wcscat (in: _Dest=0x66c2e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.715] wcscat (in: _Dest=0x66c2e10, _Source="NA02041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" [0221.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0221.716] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d624100, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d624100, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0221.716] wcscmp (_String1="NA02066_.WMF", _String2=".") returned 1 [0221.716] wcscmp (_String1="NA02066_.WMF", _String2="..") returned 1 [0221.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2e98 [0221.716] wcscpy (in: _Dest=0x66c2e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.717] wcscat (in: _Dest=0x66c2e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.717] wcscat (in: _Dest=0x66c2e98, _Source="NA02066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" [0221.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0221.718] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca87b900, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca87b900, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0221.718] wcscmp (_String1="NA02091_.WMF", _String2=".") returned 1 [0221.718] wcscmp (_String1="NA02091_.WMF", _String2="..") returned 1 [0221.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2f20 [0221.718] wcscpy (in: _Dest=0x66c2f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.718] wcscat (in: _Dest=0x66c2f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.718] wcscat (in: _Dest=0x66c2f20, _Source="NA02091_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" [0221.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0221.720] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1b4000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce1b4000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0221.720] wcscmp (_String1="NA02092_.WMF", _String2=".") returned 1 [0221.720] wcscmp (_String1="NA02092_.WMF", _String2="..") returned 1 [0221.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2fa8 [0221.720] wcscpy (in: _Dest=0x66c2fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.720] wcscat (in: _Dest=0x66c2fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.720] wcscat (in: _Dest=0x66c2fa8, _Source="NA02092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" [0221.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0221.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c30500, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5c30500, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0221.721] wcscmp (_String1="NA02093_.WMF", _String2=".") returned 1 [0221.721] wcscmp (_String1="NA02093_.WMF", _String2="..") returned 1 [0221.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3030 [0221.722] wcscpy (in: _Dest=0x66c3030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.722] wcscat (in: _Dest=0x66c3030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.722] wcscat (in: _Dest=0x66c3030, _Source="NA02093_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" [0221.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0221.723] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99f800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe99f800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0221.723] wcscmp (_String1="NA02124_.WMF", _String2=".") returned 1 [0221.723] wcscmp (_String1="NA02124_.WMF", _String2="..") returned 1 [0221.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c30b8 [0221.723] wcscpy (in: _Dest=0x66c30b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.723] wcscat (in: _Dest=0x66c30b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.723] wcscat (in: _Dest=0x66c30b8, _Source="NA02124_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" [0221.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c30b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0221.725] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62d9800, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe62d9800, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0221.725] wcscmp (_String1="NA02125_.WMF", _String2=".") returned 1 [0221.725] wcscmp (_String1="NA02125_.WMF", _String2="..") returned 1 [0221.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3140 [0221.725] wcscpy (in: _Dest=0x66c3140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.725] wcscat (in: _Dest=0x66c3140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.725] wcscat (in: _Dest=0x66c3140, _Source="NA02125_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" [0221.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0221.726] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d0fa00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16d0fa00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0221.726] wcscmp (_String1="NA02126_.WMF", _String2=".") returned 1 [0221.727] wcscmp (_String1="NA02126_.WMF", _String2="..") returned 1 [0221.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c31c8 [0221.727] wcscpy (in: _Dest=0x66c31c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.727] wcscat (in: _Dest=0x66c31c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.727] wcscat (in: _Dest=0x66c31c8, _Source="NA02126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" [0221.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c31c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0221.728] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a3900, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a3900, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0221.728] wcscmp (_String1="NA02127_.WMF", _String2=".") returned 1 [0221.728] wcscmp (_String1="NA02127_.WMF", _String2="..") returned 1 [0221.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3250 [0221.728] wcscpy (in: _Dest=0x66c3250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.728] wcscat (in: _Dest=0x66c3250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.728] wcscat (in: _Dest=0x66c3250, _Source="NA02127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" [0221.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0221.730] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0221.730] wcscmp (_String1="NA02262_.WMF", _String2=".") returned 1 [0221.730] wcscmp (_String1="NA02262_.WMF", _String2="..") returned 1 [0221.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c32d8 [0221.730] wcscpy (in: _Dest=0x66c32d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.730] wcscat (in: _Dest=0x66c32d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.730] wcscat (in: _Dest=0x66c32d8, _Source="NA02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" [0221.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c32d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0221.731] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0221.731] wcscmp (_String1="NA02264_.WMF", _String2=".") returned 1 [0221.731] wcscmp (_String1="NA02264_.WMF", _String2="..") returned 1 [0221.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3360 [0221.732] wcscpy (in: _Dest=0x66c3360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.732] wcscat (in: _Dest=0x66c3360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.732] wcscat (in: _Dest=0x66c3360, _Source="NA02264_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" [0221.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0221.733] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0221.733] wcscmp (_String1="NA02356_.WMF", _String2=".") returned 1 [0221.733] wcscmp (_String1="NA02356_.WMF", _String2="..") returned 1 [0221.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c33e8 [0221.733] wcscpy (in: _Dest=0x66c33e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.733] wcscat (in: _Dest=0x66c33e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.733] wcscat (in: _Dest=0x66c33e8, _Source="NA02356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" [0221.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c33e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0221.735] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0221.735] wcscmp (_String1="NA02361_.WMF", _String2=".") returned 1 [0221.735] wcscmp (_String1="NA02361_.WMF", _String2="..") returned 1 [0221.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3470 [0221.735] wcscpy (in: _Dest=0x66c3470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.735] wcscat (in: _Dest=0x66c3470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.735] wcscat (in: _Dest=0x66c3470, _Source="NA02361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" [0221.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0221.736] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0221.736] wcscmp (_String1="NA02368_.WMF", _String2=".") returned 1 [0221.737] wcscmp (_String1="NA02368_.WMF", _String2="..") returned 1 [0221.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c34f8 [0221.737] wcscpy (in: _Dest=0x66c34f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.737] wcscat (in: _Dest=0x66c34f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.737] wcscat (in: _Dest=0x66c34f8, _Source="NA02368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" [0221.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c34f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0221.738] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0221.738] wcscmp (_String1="NA02371_.WMF", _String2=".") returned 1 [0221.738] wcscmp (_String1="NA02371_.WMF", _String2="..") returned 1 [0221.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3580 [0221.738] wcscpy (in: _Dest=0x66c3580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.738] wcscat (in: _Dest=0x66c3580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.738] wcscat (in: _Dest=0x66c3580, _Source="NA02371_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" [0221.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0221.740] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0221.740] wcscmp (_String1="NA02373_.WMF", _String2=".") returned 1 [0221.740] wcscmp (_String1="NA02373_.WMF", _String2="..") returned 1 [0221.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3608 [0221.740] wcscpy (in: _Dest=0x66c3608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.740] wcscat (in: _Dest=0x66c3608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.740] wcscat (in: _Dest=0x66c3608, _Source="NA02373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" [0221.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0221.827] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0221.827] wcscmp (_String1="NA02384_.WMF", _String2=".") returned 1 [0221.827] wcscmp (_String1="NA02384_.WMF", _String2="..") returned 1 [0221.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3690 [0221.827] wcscpy (in: _Dest=0x66c3690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.827] wcscat (in: _Dest=0x66c3690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.827] wcscat (in: _Dest=0x66c3690, _Source="NA02384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" [0221.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0221.829] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0221.829] wcscmp (_String1="NA02386_.WMF", _String2=".") returned 1 [0221.829] wcscmp (_String1="NA02386_.WMF", _String2="..") returned 1 [0221.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3718 [0221.829] wcscpy (in: _Dest=0x66c3718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.829] wcscat (in: _Dest=0x66c3718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.829] wcscat (in: _Dest=0x66c3718, _Source="NA02386_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" [0221.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e8 [0221.830] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0221.832] wcscmp (_String1="NA02388_.WMF", _String2=".") returned 1 [0221.832] wcscmp (_String1="NA02388_.WMF", _String2="..") returned 1 [0221.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c37a0 [0221.833] wcscpy (in: _Dest=0x66c37a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.833] wcscat (in: _Dest=0x66c37a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.833] wcscat (in: _Dest=0x66c37a0, _Source="NA02388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" [0221.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c37a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ec [0221.834] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0221.834] wcscmp (_String1="NA02389_.WMF", _String2=".") returned 1 [0221.834] wcscmp (_String1="NA02389_.WMF", _String2="..") returned 1 [0221.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3828 [0221.834] wcscpy (in: _Dest=0x66c3828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.834] wcscat (in: _Dest=0x66c3828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.834] wcscat (in: _Dest=0x66c3828, _Source="NA02389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" [0221.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f0 [0221.835] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0221.835] wcscmp (_String1="NA02390_.WMF", _String2=".") returned 1 [0221.835] wcscmp (_String1="NA02390_.WMF", _String2="..") returned 1 [0221.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c38b0 [0221.835] wcscpy (in: _Dest=0x66c38b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.835] wcscat (in: _Dest=0x66c38b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.835] wcscat (in: _Dest=0x66c38b0, _Source="NA02390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" [0221.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c38b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f4 [0221.836] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0221.837] wcscmp (_String1="NA02398_.WMF", _String2=".") returned 1 [0221.837] wcscmp (_String1="NA02398_.WMF", _String2="..") returned 1 [0221.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3938 [0221.837] wcscpy (in: _Dest=0x66c3938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.837] wcscat (in: _Dest=0x66c3938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.837] wcscat (in: _Dest=0x66c3938, _Source="NA02398_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" [0221.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f8 [0221.838] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0221.838] wcscmp (_String1="NA02400_.WMF", _String2=".") returned 1 [0221.838] wcscmp (_String1="NA02400_.WMF", _String2="..") returned 1 [0221.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c39c0 [0221.838] wcscpy (in: _Dest=0x66c39c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.838] wcscat (in: _Dest=0x66c39c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.838] wcscat (in: _Dest=0x66c39c0, _Source="NA02400_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" [0221.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c39c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24fc [0221.839] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0221.839] wcscmp (_String1="NA02404_.WMF", _String2=".") returned 1 [0221.840] wcscmp (_String1="NA02404_.WMF", _String2="..") returned 1 [0221.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3a48 [0221.840] wcscpy (in: _Dest=0x66c3a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.840] wcscat (in: _Dest=0x66c3a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.840] wcscat (in: _Dest=0x66c3a48, _Source="NA02404_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" [0221.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf")) returned 0x20 [0236.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0236.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.964] GetLastError () returned 0x5 [0236.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0236.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a48) returned 1 [0236.967] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0236.967] wcscmp (_String1="NA02405_.WMF", _String2=".") returned 1 [0236.967] wcscmp (_String1="NA02405_.WMF", _String2="..") returned 1 [0236.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3a48 [0236.968] wcscpy (in: _Dest=0x66c3a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.968] wcscat (in: _Dest=0x66c3a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.968] wcscat (in: _Dest=0x66c3a48, _Source="NA02405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" [0236.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0236.969] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0236.969] wcscmp (_String1="NA02407_.WMF", _String2=".") returned 1 [0236.969] wcscmp (_String1="NA02407_.WMF", _String2="..") returned 1 [0236.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3608 [0236.969] wcscpy (in: _Dest=0x66c3608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.969] wcscat (in: _Dest=0x66c3608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.969] wcscat (in: _Dest=0x66c3608, _Source="NA02407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" [0236.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0236.970] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0236.970] wcscmp (_String1="NA02413_.WMF", _String2=".") returned 1 [0236.970] wcscmp (_String1="NA02413_.WMF", _String2="..") returned 1 [0236.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3690 [0236.970] wcscpy (in: _Dest=0x66c3690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.970] wcscat (in: _Dest=0x66c3690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.970] wcscat (in: _Dest=0x66c3690, _Source="NA02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" [0236.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0236.971] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0236.971] wcscmp (_String1="NA02417_.WMF", _String2=".") returned 1 [0236.971] wcscmp (_String1="NA02417_.WMF", _String2="..") returned 1 [0236.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3718 [0236.971] wcscpy (in: _Dest=0x66c3718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.971] wcscat (in: _Dest=0x66c3718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.971] wcscat (in: _Dest=0x66c3718, _Source="NA02417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" [0236.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0236.972] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0236.972] wcscmp (_String1="NA02423_.WMF", _String2=".") returned 1 [0236.972] wcscmp (_String1="NA02423_.WMF", _String2="..") returned 1 [0236.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c37a0 [0236.972] wcscpy (in: _Dest=0x66c37a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.972] wcscat (in: _Dest=0x66c37a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.972] wcscat (in: _Dest=0x66c37a0, _Source="NA02423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" [0236.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c37a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0236.973] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0236.973] wcscmp (_String1="NA02424_.WMF", _String2=".") returned 1 [0236.973] wcscmp (_String1="NA02424_.WMF", _String2="..") returned 1 [0236.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3828 [0236.973] wcscpy (in: _Dest=0x66c3828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.973] wcscat (in: _Dest=0x66c3828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.973] wcscat (in: _Dest=0x66c3828, _Source="NA02424_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" [0236.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0236.974] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0236.974] wcscmp (_String1="NA02426_.WMF", _String2=".") returned 1 [0236.974] wcscmp (_String1="NA02426_.WMF", _String2="..") returned 1 [0236.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c38b0 [0236.974] wcscpy (in: _Dest=0x66c38b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.974] wcscat (in: _Dest=0x66c38b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.974] wcscat (in: _Dest=0x66c38b0, _Source="NA02426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" [0236.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c38b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0236.975] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0236.975] wcscmp (_String1="NA02431_.WMF", _String2=".") returned 1 [0236.975] wcscmp (_String1="NA02431_.WMF", _String2="..") returned 1 [0236.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3938 [0236.975] wcscpy (in: _Dest=0x66c3938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.975] wcscat (in: _Dest=0x66c3938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.975] wcscat (in: _Dest=0x66c3938, _Source="NA02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" [0236.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0236.976] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0236.976] wcscmp (_String1="NA02435_.WMF", _String2=".") returned 1 [0236.976] wcscmp (_String1="NA02435_.WMF", _String2="..") returned 1 [0236.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c39c0 [0236.976] wcscpy (in: _Dest=0x66c39c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.976] wcscat (in: _Dest=0x66c39c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.976] wcscat (in: _Dest=0x66c39c0, _Source="NA02435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" [0236.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c39c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0236.977] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0236.977] wcscmp (_String1="NA02439_.WMF", _String2=".") returned 1 [0236.977] wcscmp (_String1="NA02439_.WMF", _String2="..") returned 1 [0236.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c31c8 [0236.977] wcscpy (in: _Dest=0x66c31c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.977] wcscat (in: _Dest=0x66c31c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.977] wcscat (in: _Dest=0x66c31c8, _Source="NA02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" [0236.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c31c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0236.978] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0236.978] wcscmp (_String1="NA02441_.WMF", _String2=".") returned 1 [0236.978] wcscmp (_String1="NA02441_.WMF", _String2="..") returned 1 [0236.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3250 [0236.978] wcscpy (in: _Dest=0x66c3250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.978] wcscat (in: _Dest=0x66c3250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.978] wcscat (in: _Dest=0x66c3250, _Source="NA02441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" [0236.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0236.979] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0236.979] wcscmp (_String1="NA02443_.WMF", _String2=".") returned 1 [0236.979] wcscmp (_String1="NA02443_.WMF", _String2="..") returned 1 [0236.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c32d8 [0236.979] wcscpy (in: _Dest=0x66c32d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.979] wcscat (in: _Dest=0x66c32d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.979] wcscat (in: _Dest=0x66c32d8, _Source="NA02443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" [0236.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c32d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0236.980] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0236.980] wcscmp (_String1="NA02444_.WMF", _String2=".") returned 1 [0236.980] wcscmp (_String1="NA02444_.WMF", _String2="..") returned 1 [0236.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3360 [0236.980] wcscpy (in: _Dest=0x66c3360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.980] wcscat (in: _Dest=0x66c3360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.980] wcscat (in: _Dest=0x66c3360, _Source="NA02444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" [0236.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0236.981] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0236.981] wcscmp (_String1="NA02446_.WMF", _String2=".") returned 1 [0236.981] wcscmp (_String1="NA02446_.WMF", _String2="..") returned 1 [0236.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c33e8 [0236.981] wcscpy (in: _Dest=0x66c33e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.981] wcscat (in: _Dest=0x66c33e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.981] wcscat (in: _Dest=0x66c33e8, _Source="NA02446_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" [0236.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c33e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0236.982] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0236.982] wcscmp (_String1="NA02448_.WMF", _String2=".") returned 1 [0236.982] wcscmp (_String1="NA02448_.WMF", _String2="..") returned 1 [0236.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3470 [0236.982] wcscpy (in: _Dest=0x66c3470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.982] wcscat (in: _Dest=0x66c3470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.982] wcscat (in: _Dest=0x66c3470, _Source="NA02448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" [0236.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0236.983] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0236.983] wcscmp (_String1="NA02450_.WMF", _String2=".") returned 1 [0236.983] wcscmp (_String1="NA02450_.WMF", _String2="..") returned 1 [0236.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3140 [0236.983] wcscpy (in: _Dest=0x66c3140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.983] wcscat (in: _Dest=0x66c3140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.983] wcscat (in: _Dest=0x66c3140, _Source="NA02450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" [0236.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0236.984] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0236.984] wcscmp (_String1="NA02451_.WMF", _String2=".") returned 1 [0236.984] wcscmp (_String1="NA02451_.WMF", _String2="..") returned 1 [0236.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3ad0 [0236.984] wcscpy (in: _Dest=0x66c3ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.984] wcscat (in: _Dest=0x66c3ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.984] wcscat (in: _Dest=0x66c3ad0, _Source="NA02451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" [0236.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0236.985] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0236.985] wcscmp (_String1="NA02453_.WMF", _String2=".") returned 1 [0236.985] wcscmp (_String1="NA02453_.WMF", _String2="..") returned 1 [0236.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3c68 [0236.985] wcscpy (in: _Dest=0x66c3c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.985] wcscat (in: _Dest=0x66c3c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.985] wcscat (in: _Dest=0x66c3c68, _Source="NA02453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" [0236.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0236.986] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0236.986] wcscmp (_String1="NBOOK_01.MID", _String2=".") returned 1 [0236.986] wcscmp (_String1="NBOOK_01.MID", _String2="..") returned 1 [0236.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3be0 [0236.986] wcscpy (in: _Dest=0x66c3be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.986] wcscat (in: _Dest=0x66c3be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.986] wcscat (in: _Dest=0x66c3be0, _Source="NBOOK_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" [0236.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0236.987] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0236.987] wcscmp (_String1="OCEAN_01.MID", _String2=".") returned 1 [0236.987] wcscmp (_String1="OCEAN_01.MID", _String2="..") returned 1 [0236.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3cf0 [0236.988] wcscpy (in: _Dest=0x66c3cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.988] wcscat (in: _Dest=0x66c3cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.988] wcscat (in: _Dest=0x66c3cf0, _Source="OCEAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" [0236.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0236.988] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0236.988] wcscmp (_String1="OUTDR_01.MID", _String2=".") returned 1 [0236.989] wcscmp (_String1="OUTDR_01.MID", _String2="..") returned 1 [0236.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3d78 [0236.989] wcscpy (in: _Dest=0x66c3d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.989] wcscat (in: _Dest=0x66c3d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.989] wcscat (in: _Dest=0x66c3d78, _Source="OUTDR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" [0236.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0236.990] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0236.990] wcscmp (_String1="PAPER_01.MID", _String2=".") returned 1 [0236.990] wcscmp (_String1="PAPER_01.MID", _String2="..") returned 1 [0236.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3e00 [0236.990] wcscpy (in: _Dest=0x66c3e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.990] wcscat (in: _Dest=0x66c3e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.990] wcscat (in: _Dest=0x66c3e00, _Source="PAPER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" [0236.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0236.991] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0236.991] wcscmp (_String1="PARNT_01.MID", _String2=".") returned 1 [0236.991] wcscmp (_String1="PARNT_01.MID", _String2="..") returned 1 [0236.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3b58 [0236.991] wcscpy (in: _Dest=0x66c3b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.991] wcscat (in: _Dest=0x66c3b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.991] wcscat (in: _Dest=0x66c3b58, _Source="PARNT_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" [0236.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0236.992] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0236.992] wcscmp (_String1="PARNT_02.MID", _String2=".") returned 1 [0236.992] wcscmp (_String1="PARNT_02.MID", _String2="..") returned 1 [0236.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3e88 [0236.992] wcscpy (in: _Dest=0x66c3e88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.992] wcscat (in: _Dest=0x66c3e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.992] wcscat (in: _Dest=0x66c3e88, _Source="PARNT_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" [0236.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0236.993] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0236.993] wcscmp (_String1="PARNT_03.MID", _String2=".") returned 1 [0236.993] wcscmp (_String1="PARNT_03.MID", _String2="..") returned 1 [0236.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3f10 [0236.993] wcscpy (in: _Dest=0x66c3f10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.993] wcscat (in: _Dest=0x66c3f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.993] wcscat (in: _Dest=0x66c3f10, _Source="PARNT_03.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" [0236.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0236.994] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0236.994] wcscmp (_String1="PARNT_04.MID", _String2=".") returned 1 [0236.994] wcscmp (_String1="PARNT_04.MID", _String2="..") returned 1 [0236.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3f98 [0236.994] wcscpy (in: _Dest=0x66c3f98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.994] wcscat (in: _Dest=0x66c3f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.994] wcscat (in: _Dest=0x66c3f98, _Source="PARNT_04.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" [0236.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0236.995] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0236.995] wcscmp (_String1="PARNT_05.MID", _String2=".") returned 1 [0236.995] wcscmp (_String1="PARNT_05.MID", _String2="..") returned 1 [0236.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27360 [0236.995] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.995] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.995] wcscat (in: _Dest=0x3f27360, _Source="PARNT_05.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" [0236.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0236.996] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0236.996] wcscmp (_String1="PARNT_06.MID", _String2=".") returned 1 [0236.996] wcscmp (_String1="PARNT_06.MID", _String2="..") returned 1 [0236.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27690 [0236.996] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0236.996] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0236.996] wcscat (in: _Dest=0x3f27690, _Source="PARNT_06.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" [0236.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0236.997] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0237.049] wcscmp (_String1="PARNT_07.MID", _String2=".") returned 1 [0237.049] wcscmp (_String1="PARNT_07.MID", _String2="..") returned 1 [0237.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27140 [0237.050] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.050] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.050] wcscat (in: _Dest=0x3f27140, _Source="PARNT_07.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" [0237.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24fc [0237.050] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0237.051] wcscmp (_String1="PARNT_08.MID", _String2=".") returned 1 [0237.051] wcscmp (_String1="PARNT_08.MID", _String2="..") returned 1 [0237.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27938 [0237.051] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.051] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.051] wcscat (in: _Dest=0x3f27938, _Source="PARNT_08.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" [0237.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f8 [0237.051] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0237.051] wcscmp (_String1="PARNT_09.MID", _String2=".") returned 1 [0237.052] wcscmp (_String1="PARNT_09.MID", _String2="..") returned 1 [0237.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27718 [0237.052] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.052] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.052] wcscat (in: _Dest=0x3f27718, _Source="PARNT_09.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" [0237.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f4 [0237.053] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0237.053] wcscmp (_String1="PARNT_10.MID", _String2=".") returned 1 [0237.053] wcscmp (_String1="PARNT_10.MID", _String2="..") returned 1 [0237.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26b68 [0237.053] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.053] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.053] wcscat (in: _Dest=0x3f26b68, _Source="PARNT_10.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" [0237.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24f0 [0237.054] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b5b800, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49b5b800, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0237.054] wcscmp (_String1="PE00013_.WMF", _String2=".") returned 1 [0237.054] wcscmp (_String1="PE00013_.WMF", _String2="..") returned 1 [0237.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f261d8 [0237.054] wcscpy (in: _Dest=0x3f261d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.054] wcscat (in: _Dest=0x3f261d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.054] wcscat (in: _Dest=0x3f261d8, _Source="PE00013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" [0237.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f261d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ec [0237.055] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46223100, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46223100, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0237.055] wcscmp (_String1="PE00014_.WMF", _String2=".") returned 1 [0237.055] wcscmp (_String1="PE00014_.WMF", _String2="..") returned 1 [0237.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0237.055] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.055] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.055] wcscat (in: _Dest=0x3f26ae0, _Source="PE00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" [0237.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e8 [0237.056] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0237.056] wcscmp (_String1="PE00034_.WMF", _String2=".") returned 1 [0237.056] wcscmp (_String1="PE00034_.WMF", _String2="..") returned 1 [0237.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f278b0 [0237.056] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.056] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.056] wcscat (in: _Dest=0x3f278b0, _Source="PE00034_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" [0237.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e4 [0237.057] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24995900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24995900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0237.057] wcscmp (_String1="PE00049_.WMF", _String2=".") returned 1 [0237.057] wcscmp (_String1="PE00049_.WMF", _String2="..") returned 1 [0237.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0237.057] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.057] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.057] wcscat (in: _Dest=0x3f26f20, _Source="PE00049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" [0237.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0237.058] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23682c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23682c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0237.058] wcscmp (_String1="PE00050_.WMF", _String2=".") returned 1 [0237.058] wcscmp (_String1="PE00050_.WMF", _String2="..") returned 1 [0237.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26260 [0237.058] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.058] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.058] wcscat (in: _Dest=0x3f26260, _Source="PE00050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" [0237.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0237.059] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2236ff00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2236ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0237.059] wcscmp (_String1="PE00052_.WMF", _String2=".") returned 1 [0237.059] wcscmp (_String1="PE00052_.WMF", _String2="..") returned 1 [0237.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27828 [0237.059] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.059] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.059] wcscat (in: _Dest=0x3f27828, _Source="PE00052_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" [0237.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0237.060] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0237.060] wcscmp (_String1="PE00231_.WMF", _String2=".") returned 1 [0237.060] wcscmp (_String1="PE00231_.WMF", _String2="..") returned 1 [0237.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f269d0 [0237.060] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.060] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.060] wcscat (in: _Dest=0x3f269d0, _Source="PE00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" [0237.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0237.061] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0237.061] wcscmp (_String1="PE00272_.WMF", _String2=".") returned 1 [0237.061] wcscmp (_String1="PE00272_.WMF", _String2="..") returned 1 [0237.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0237.061] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.061] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.061] wcscat (in: _Dest=0x3f271c8, _Source="PE00272_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" [0237.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0237.062] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe9200, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fe9200, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0237.062] wcscmp (_String1="PE00468_.WMF", _String2=".") returned 1 [0237.062] wcscmp (_String1="PE00468_.WMF", _String2="..") returned 1 [0237.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0237.062] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.062] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.062] wcscat (in: _Dest=0x3f26e10, _Source="PE00468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" [0237.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0237.063] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266e700, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2266e700, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0237.063] wcscmp (_String1="PE00478_.WMF", _String2=".") returned 1 [0237.063] wcscmp (_String1="PE00478_.WMF", _String2="..") returned 1 [0237.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0237.063] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.063] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.063] wcscat (in: _Dest=0x3f270b8, _Source="PE00478_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" [0237.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0237.064] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0237.064] wcscmp (_String1="PE00485_.WMF", _String2=".") returned 1 [0237.064] wcscmp (_String1="PE00485_.WMF", _String2="..") returned 1 [0237.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0237.064] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.064] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.064] wcscat (in: _Dest=0x3f25fb8, _Source="PE00485_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" [0237.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0237.065] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2975000, ftCreationTime.dwHighDateTime=0x1bd9909, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2975000, ftLastWriteTime.dwHighDateTime=0x1bd9909, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0237.065] wcscmp (_String1="PE00489_.WMF", _String2=".") returned 1 [0237.065] wcscmp (_String1="PE00489_.WMF", _String2="..") returned 1 [0237.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0237.065] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.065] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.065] wcscat (in: _Dest=0x3f26d00, _Source="PE00489_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" [0237.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0237.066] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0237.066] wcscmp (_String1="PE00531_.WMF", _String2=".") returned 1 [0237.066] wcscmp (_String1="PE00531_.WMF", _String2="..") returned 1 [0237.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0237.066] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.066] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.066] wcscat (in: _Dest=0x3f25ea8, _Source="PE00531_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" [0237.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0237.067] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88d3700, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc88d3700, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0237.067] wcscmp (_String1="PE00542_.WMF", _String2=".") returned 1 [0237.067] wcscmp (_String1="PE00542_.WMF", _String2="..") returned 1 [0237.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27c68 [0237.067] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.067] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.067] wcscat (in: _Dest=0x3f27c68, _Source="PE00542_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" [0237.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0237.068] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ba1b00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10ba1b00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0237.068] wcscmp (_String1="PE00555_.WMF", _String2=".") returned 1 [0237.068] wcscmp (_String1="PE00555_.WMF", _String2="..") returned 1 [0237.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27b58 [0237.068] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.068] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.068] wcscat (in: _Dest=0x3f27b58, _Source="PE00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" [0237.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0237.069] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53b4900, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc53b4900, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0237.069] wcscmp (_String1="PE00559_.WMF", _String2=".") returned 1 [0237.069] wcscmp (_String1="PE00559_.WMF", _String2="..") returned 1 [0237.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0237.069] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.069] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.069] wcscat (in: _Dest=0x3f27580, _Source="PE00559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" [0237.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0237.070] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf41a00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacf41a00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0237.070] wcscmp (_String1="PE00563_.WMF", _String2=".") returned 1 [0237.070] wcscmp (_String1="PE00563_.WMF", _String2="..") returned 1 [0237.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0237.070] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.070] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.070] wcscat (in: _Dest=0x3f26480, _Source="PE00563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" [0237.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0237.071] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0237.071] wcscmp (_String1="PE00578_.WMF", _String2=".") returned 1 [0237.071] wcscmp (_String1="PE00578_.WMF", _String2="..") returned 1 [0237.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0237.071] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.071] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.071] wcscat (in: _Dest=0x3f263f8, _Source="PE00578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" [0237.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0237.072] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ea37800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ea37800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0237.072] wcscmp (_String1="PE00608_.WMF", _String2=".") returned 1 [0237.072] wcscmp (_String1="PE00608_.WMF", _String2="..") returned 1 [0237.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27ad0 [0237.072] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.072] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.072] wcscat (in: _Dest=0x3f27ad0, _Source="PE00608_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" [0237.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0237.073] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16a0400, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb16a0400, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0237.073] wcscmp (_String1="PE00633_.WMF", _String2=".") returned 1 [0237.073] wcscmp (_String1="PE00633_.WMF", _String2="..") returned 1 [0237.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0237.073] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.073] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.073] wcscat (in: _Dest=0x3f26508, _Source="PE00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" [0237.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0237.074] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2105d200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2105d200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0237.074] wcscmp (_String1="PE00640_.WMF", _String2=".") returned 1 [0237.074] wcscmp (_String1="PE00640_.WMF", _String2="..") returned 1 [0237.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0237.074] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.074] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.074] wcscat (in: _Dest=0x3f260c8, _Source="PE00640_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" [0237.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0237.075] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d724b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d724b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0237.075] wcscmp (_String1="PE00668_.WMF", _String2=".") returned 1 [0237.075] wcscmp (_String1="PE00668_.WMF", _String2="..") returned 1 [0237.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27470 [0237.075] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.075] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.075] wcscat (in: _Dest=0x3f27470, _Source="PE00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" [0237.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0237.076] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd0ff00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfd0ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0237.076] wcscmp (_String1="PE00685_.WMF", _String2=".") returned 1 [0237.076] wcscmp (_String1="PE00685_.WMF", _String2="..") returned 1 [0237.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0237.076] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.076] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.076] wcscat (in: _Dest=0x3f274f8, _Source="PE00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" [0237.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0237.077] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7dea00, ftCreationTime.dwHighDateTime=0x1bf0b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7dea00, ftLastWriteTime.dwHighDateTime=0x1bf0b78, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0237.077] wcscmp (_String1="PE00686_.WMF", _String2=".") returned 1 [0237.077] wcscmp (_String1="PE00686_.WMF", _String2="..") returned 1 [0237.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0237.077] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.078] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.078] wcscat (in: _Dest=0x3f26e98, _Source="PE00686_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" [0237.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0237.078] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49921900, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49921900, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0237.078] wcscmp (_String1="PE00693_.WMF", _String2=".") returned 1 [0237.078] wcscmp (_String1="PE00693_.WMF", _String2="..") returned 1 [0237.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0237.078] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.078] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.078] wcscat (in: _Dest=0x3f26c78, _Source="PE00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" [0237.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0237.079] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf017e00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf017e00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0237.079] wcscmp (_String1="PE00720_.WMF", _String2=".") returned 1 [0237.079] wcscmp (_String1="PE00720_.WMF", _String2="..") returned 1 [0237.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0237.079] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.079] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.080] wcscat (in: _Dest=0x3f27250, _Source="PE00720_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" [0237.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0237.080] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d411400, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d411400, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0237.080] wcscmp (_String1="PE00723_.WMF", _String2=".") returned 1 [0237.080] wcscmp (_String1="PE00723_.WMF", _String2="..") returned 1 [0237.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0237.081] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.081] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.081] wcscat (in: _Dest=0x3f26948, _Source="PE00723_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" [0237.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0237.082] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2379300, ftCreationTime.dwHighDateTime=0x1c04274, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2379300, ftLastWriteTime.dwHighDateTime=0x1c04274, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0237.082] wcscmp (_String1="PE00726_.WMF", _String2=".") returned 1 [0237.082] wcscmp (_String1="PE00726_.WMF", _String2="..") returned 1 [0237.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27a48 [0237.082] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.082] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.082] wcscat (in: _Dest=0x3f27a48, _Source="PE00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" [0237.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0237.083] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94323700, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94323700, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0237.083] wcscmp (_String1="PE00737_.WMF", _String2=".") returned 1 [0237.083] wcscmp (_String1="PE00737_.WMF", _String2="..") returned 1 [0237.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0237.083] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.083] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.083] wcscat (in: _Dest=0x3f26618, _Source="PE00737_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" [0237.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0237.138] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bedc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77bedc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0237.138] wcscmp (_String1="PE00833_.WMF", _String2=".") returned 1 [0237.138] wcscmp (_String1="PE00833_.WMF", _String2="..") returned 1 [0237.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3580 [0237.138] wcscpy (in: _Dest=0x66c3580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.138] wcscat (in: _Dest=0x66c3580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.138] wcscat (in: _Dest=0x66c3580, _Source="PE00833_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" [0237.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0237.139] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c411e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c411e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0237.170] wcscmp (_String1="PE00898_.WMF", _String2=".") returned 1 [0237.170] wcscmp (_String1="PE00898_.WMF", _String2="..") returned 1 [0237.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efa60 [0237.170] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.170] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.170] wcscat (in: _Dest=0x66efa60, _Source="PE00898_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" [0237.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0237.172] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edd800, ftCreationTime.dwHighDateTime=0x1bd4b81, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30edd800, ftLastWriteTime.dwHighDateTime=0x1bd4b81, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0237.172] wcscmp (_String1="PE00934_.WMF", _String2=".") returned 1 [0237.172] wcscmp (_String1="PE00934_.WMF", _String2="..") returned 1 [0237.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0148 [0237.172] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.172] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.172] wcscat (in: _Dest=0x66f0148, _Source="PE00934_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" [0237.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0237.173] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ff1200, ftCreationTime.dwHighDateTime=0x1bd4b75, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9ff1200, ftLastWriteTime.dwHighDateTime=0x1bd4b75, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0237.173] wcscmp (_String1="PE00998_.WMF", _String2=".") returned 1 [0237.173] wcscmp (_String1="PE00998_.WMF", _String2="..") returned 1 [0237.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eea70 [0237.173] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.173] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.173] wcscat (in: _Dest=0x66eea70, _Source="PE00998_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" [0237.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0237.174] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1cca200, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1cca200, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0237.174] wcscmp (_String1="PE01160_.WMF", _String2=".") returned 1 [0237.174] wcscmp (_String1="PE01160_.WMF", _String2="..") returned 1 [0237.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec90 [0237.174] wcscpy (in: _Dest=0x66eec90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.174] wcscat (in: _Dest=0x66eec90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.174] wcscat (in: _Dest=0x66eec90, _Source="PE01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" [0237.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0237.175] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42efc00, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf42efc00, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0237.175] wcscmp (_String1="PE01172_.WMF", _String2=".") returned 1 [0237.175] wcscmp (_String1="PE01172_.WMF", _String2="..") returned 1 [0237.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efae8 [0237.175] wcscpy (in: _Dest=0x66efae8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.175] wcscat (in: _Dest=0x66efae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.175] wcscat (in: _Dest=0x66efae8, _Source="PE01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" [0237.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0237.176] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac34600, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ac34600, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0237.176] wcscmp (_String1="PE01191_.WMF", _String2=".") returned 1 [0237.176] wcscmp (_String1="PE01191_.WMF", _String2="..") returned 1 [0237.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef0d0 [0237.176] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.176] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.176] wcscat (in: _Dest=0x66ef0d0, _Source="PE01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" [0237.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0237.177] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f937600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f937600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0237.177] wcscmp (_String1="PE01661_.WMF", _String2=".") returned 1 [0237.177] wcscmp (_String1="PE01661_.WMF", _String2="..") returned 1 [0237.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee498 [0237.178] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.178] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.178] wcscat (in: _Dest=0x66ee498, _Source="PE01661_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" [0237.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0237.178] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0237.179] wcscmp (_String1="PE01797_.WMF", _String2=".") returned 1 [0237.179] wcscmp (_String1="PE01797_.WMF", _String2="..") returned 1 [0237.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee850 [0237.179] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.179] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.179] wcscat (in: _Dest=0x66ee850, _Source="PE01797_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" [0237.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0237.180] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0237.180] wcscmp (_String1="PE02120_.WMF", _String2=".") returned 1 [0237.180] wcscmp (_String1="PE02120_.WMF", _String2="..") returned 1 [0237.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeaf8 [0237.180] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.180] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.180] wcscat (in: _Dest=0x66eeaf8, _Source="PE02120_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" [0237.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0237.181] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0237.181] wcscmp (_String1="PE02169_.WMF", _String2=".") returned 1 [0237.181] wcscmp (_String1="PE02169_.WMF", _String2="..") returned 1 [0237.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eefc0 [0237.181] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.181] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.181] wcscat (in: _Dest=0x66eefc0, _Source="PE02169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" [0237.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0237.182] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ad9700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18ad9700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0237.182] wcscmp (_String1="PE02262_.WMF", _String2=".") returned 1 [0237.182] wcscmp (_String1="PE02262_.WMF", _String2="..") returned 1 [0237.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0237.182] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.182] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.182] wcscat (in: _Dest=0x66ee520, _Source="PE02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" [0237.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0237.183] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0237.183] wcscmp (_String1="PE02263_.WMF", _String2=".") returned 1 [0237.183] wcscmp (_String1="PE02263_.WMF", _String2="..") returned 1 [0237.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee740 [0237.183] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.183] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.183] wcscat (in: _Dest=0x66ee740, _Source="PE02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" [0237.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0237.184] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c88d100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c88d100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0237.184] wcscmp (_String1="PE02265_.WMF", _String2=".") returned 1 [0237.184] wcscmp (_String1="PE02265_.WMF", _String2="..") returned 1 [0237.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f02e0 [0237.184] wcscpy (in: _Dest=0x66f02e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.184] wcscat (in: _Dest=0x66f02e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.184] wcscat (in: _Dest=0x66f02e0, _Source="PE02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" [0237.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f02e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0237.185] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59250900, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59250900, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0237.185] wcscmp (_String1="PE02267_.WMF", _String2=".") returned 1 [0237.185] wcscmp (_String1="PE02267_.WMF", _String2="..") returned 1 [0237.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee9e8 [0237.185] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.185] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.185] wcscat (in: _Dest=0x66ee9e8, _Source="PE02267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" [0237.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0237.186] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151a1000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x151a1000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0237.186] wcscmp (_String1="PE02270_.WMF", _String2=".") returned 1 [0237.186] wcscmp (_String1="PE02270_.WMF", _String2="..") returned 1 [0237.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0237.186] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.186] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.186] wcscat (in: _Dest=0x66ef400, _Source="PE02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" [0237.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0237.187] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d39d00, ftCreationTime.dwHighDateTime=0x1c003a3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4d39d00, ftLastWriteTime.dwHighDateTime=0x1c003a3, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0237.187] wcscmp (_String1="PE02278_.WMF", _String2=".") returned 1 [0237.187] wcscmp (_String1="PE02278_.WMF", _String2="..") returned 1 [0237.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef9d8 [0237.188] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.188] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.188] wcscat (in: _Dest=0x66ef9d8, _Source="PE02278_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" [0237.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0237.188] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47456500, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47456500, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0237.188] wcscmp (_String1="PE02280_.WMF", _String2=".") returned 1 [0237.188] wcscmp (_String1="PE02280_.WMF", _String2="..") returned 1 [0237.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee960 [0237.189] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.189] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.189] wcscat (in: _Dest=0x66ee960, _Source="PE02280_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" [0237.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0237.190] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7864bb00, ftCreationTime.dwHighDateTime=0x1bf32b5, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7864bb00, ftLastWriteTime.dwHighDateTime=0x1bf32b5, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0237.190] wcscmp (_String1="PE02282_.WMF", _String2=".") returned 1 [0237.190] wcscmp (_String1="PE02282_.WMF", _String2="..") returned 1 [0237.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0237.190] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.190] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.190] wcscat (in: _Dest=0x66effb0, _Source="PE02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" [0237.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0237.191] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94eb3800, ftCreationTime.dwHighDateTime=0x1bf34ed, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94eb3800, ftLastWriteTime.dwHighDateTime=0x1bf34ed, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0237.191] wcscmp (_String1="PE02285_.WMF", _String2=".") returned 1 [0237.191] wcscmp (_String1="PE02285_.WMF", _String2="..") returned 1 [0237.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef1e0 [0237.191] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.191] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.191] wcscat (in: _Dest=0x66ef1e0, _Source="PE02285_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" [0237.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0237.192] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf47300, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf47300, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0237.192] wcscmp (_String1="PE02287_.WMF", _String2=".") returned 1 [0237.192] wcscmp (_String1="PE02287_.WMF", _String2="..") returned 1 [0237.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd08 [0237.192] wcscpy (in: _Dest=0x66efd08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.192] wcscat (in: _Dest=0x66efd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.192] wcscat (in: _Dest=0x66efd08, _Source="PE02287_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" [0237.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0237.193] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0237.193] wcscmp (_String1="PE02288_.WMF", _String2=".") returned 1 [0237.193] wcscmp (_String1="PE02288_.WMF", _String2="..") returned 1 [0237.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeda0 [0237.193] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.193] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.193] wcscat (in: _Dest=0x66eeda0, _Source="PE02288_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" [0237.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0237.194] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0237.194] wcscmp (_String1="PE02293_.WMF", _String2=".") returned 1 [0237.194] wcscmp (_String1="PE02293_.WMF", _String2="..") returned 1 [0237.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0237.194] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.194] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.194] wcscat (in: _Dest=0x66ef268, _Source="PE02293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" [0237.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0237.195] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993bc600, ftCreationTime.dwHighDateTime=0x1bf3a96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x993bc600, ftLastWriteTime.dwHighDateTime=0x1bf3a96, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0237.195] wcscmp (_String1="PE02296_.WMF", _String2=".") returned 1 [0237.195] wcscmp (_String1="PE02296_.WMF", _String2="..") returned 1 [0237.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee630 [0237.195] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.195] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.195] wcscat (in: _Dest=0x66ee630, _Source="PE02296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" [0237.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0237.196] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c5ff00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64c5ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0237.196] wcscmp (_String1="PE02369_.WMF", _String2=".") returned 1 [0237.196] wcscmp (_String1="PE02369_.WMF", _String2="..") returned 1 [0237.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0237.196] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.196] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.196] wcscat (in: _Dest=0x66f00c0, _Source="PE02369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" [0237.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0237.197] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c9b400, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39c9b400, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0237.197] wcscmp (_String1="PE02522_.WMF", _String2=".") returned 1 [0237.197] wcscmp (_String1="PE02522_.WMF", _String2="..") returned 1 [0237.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f01d0 [0237.197] wcscpy (in: _Dest=0x66f01d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.197] wcscat (in: _Dest=0x66f01d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.197] wcscat (in: _Dest=0x66f01d0, _Source="PE02522_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" [0237.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f01d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0237.261] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0237.261] wcscmp (_String1="PE02950_.WMF", _String2=".") returned 1 [0237.261] wcscmp (_String1="PE02950_.WMF", _String2="..") returned 1 [0237.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0237.261] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.261] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.262] wcscat (in: _Dest=0x66eef38, _Source="PE02950_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" [0237.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0237.262] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0237.262] wcscmp (_String1="PE02957_.WMF", _String2=".") returned 1 [0237.262] wcscmp (_String1="PE02957_.WMF", _String2="..") returned 1 [0237.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0237.263] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.263] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.263] wcscat (in: _Dest=0x66eeeb0, _Source="PE02957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" [0237.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0237.264] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04ca400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd04ca400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0237.264] wcscmp (_String1="PE03236_.WMF", _String2=".") returned 1 [0237.264] wcscmp (_String1="PE03236_.WMF", _String2="..") returned 1 [0237.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0237.264] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.264] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.264] wcscat (in: _Dest=0x66ef950, _Source="PE03236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" [0237.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0237.265] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc035c400, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc035c400, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0237.265] wcscmp (_String1="PE03241_.WMF", _String2=".") returned 1 [0237.265] wcscmp (_String1="PE03241_.WMF", _String2="..") returned 1 [0237.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0237.265] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.265] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.265] wcscat (in: _Dest=0x66ef510, _Source="PE03241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" [0237.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0237.266] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e56cd00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e56cd00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0237.266] wcscmp (_String1="PE03257_.WMF", _String2=".") returned 1 [0237.266] wcscmp (_String1="PE03257_.WMF", _String2="..") returned 1 [0237.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee5a8 [0237.266] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.266] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.266] wcscat (in: _Dest=0x66ee5a8, _Source="PE03257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" [0237.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0237.267] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66c7600, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc66c7600, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0237.267] wcscmp (_String1="PE03331_.WMF", _String2=".") returned 1 [0237.267] wcscmp (_String1="PE03331_.WMF", _String2="..") returned 1 [0237.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eff28 [0237.267] wcscpy (in: _Dest=0x66eff28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.267] wcscat (in: _Dest=0x66eff28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.267] wcscat (in: _Dest=0x66eff28, _Source="PE03331_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" [0237.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eff28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0237.601] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7695ab00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7695ab00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0237.601] wcscmp (_String1="PE03339_.WMF", _String2=".") returned 1 [0237.601] wcscmp (_String1="PE03339_.WMF", _String2="..") returned 1 [0237.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0237.601] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.601] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.601] wcscat (in: _Dest=0x3f26728, _Source="PE03339_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" [0237.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0237.602] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0237.602] wcscmp (_String1="PE03451_.WMF", _String2=".") returned 1 [0237.603] wcscmp (_String1="PE03451_.WMF", _String2="..") returned 1 [0237.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f272d8 [0237.603] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.603] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.603] wcscat (in: _Dest=0x3f272d8, _Source="PE03451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" [0237.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0237.604] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb29e3e00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb29e3e00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0237.604] wcscmp (_String1="PE03453_.WMF", _String2=".") returned 1 [0237.604] wcscmp (_String1="PE03453_.WMF", _String2="..") returned 1 [0237.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0237.604] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.604] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.604] wcscat (in: _Dest=0x3f26fa8, _Source="PE03453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" [0237.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0237.605] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0237.697] wcscmp (_String1="PE03459_.WMF", _String2=".") returned 1 [0237.697] wcscmp (_String1="PE03459_.WMF", _String2="..") returned 1 [0237.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0237.697] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.697] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.697] wcscat (in: _Dest=0x682d888, _Source="PE03459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" [0237.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0237.698] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0237.698] wcscmp (_String1="PE03464_.WMF", _String2=".") returned 1 [0237.698] wcscmp (_String1="PE03464_.WMF", _String2="..") returned 1 [0237.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d668 [0237.698] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.698] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.698] wcscat (in: _Dest=0x682d668, _Source="PE03464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" [0237.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0237.699] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0237.699] wcscmp (_String1="PE03466_.WMF", _String2=".") returned 1 [0237.699] wcscmp (_String1="PE03466_.WMF", _String2="..") returned 1 [0237.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0237.699] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.699] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.699] wcscat (in: _Dest=0x682c568, _Source="PE03466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" [0237.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0237.700] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0237.700] wcscmp (_String1="PE03470_.WMF", _String2=".") returned 1 [0237.700] wcscmp (_String1="PE03470_.WMF", _String2="..") returned 1 [0237.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d228 [0237.700] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.700] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.700] wcscat (in: _Dest=0x682d228, _Source="PE03470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" [0237.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0237.701] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a64500, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88a64500, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0237.701] wcscmp (_String1="PE03513_.WMF", _String2=".") returned 1 [0237.701] wcscmp (_String1="PE03513_.WMF", _String2="..") returned 1 [0237.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682db30 [0237.701] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.701] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.701] wcscat (in: _Dest=0x682db30, _Source="PE03513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" [0237.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0237.702] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc73b0000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc73b0000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0237.702] wcscmp (_String1="PE03668_.WMF", _String2=".") returned 1 [0237.702] wcscmp (_String1="PE03668_.WMF", _String2="..") returned 1 [0237.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0237.702] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.702] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.702] wcscat (in: _Dest=0x682bf08, _Source="PE03668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" [0237.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0237.703] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064ea00, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9064ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0237.703] wcscmp (_String1="PE03731_.WMF", _String2=".") returned 1 [0237.703] wcscmp (_String1="PE03731_.WMF", _String2="..") returned 1 [0237.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0237.703] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.703] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.703] wcscat (in: _Dest=0x682dc40, _Source="PE03731_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" [0237.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0237.704] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66abc300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66abc300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0237.704] wcscmp (_String1="PE03795_.WMF", _String2=".") returned 1 [0237.704] wcscmp (_String1="PE03795_.WMF", _String2="..") returned 1 [0237.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d5e0 [0237.704] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.704] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.704] wcscat (in: _Dest=0x682d5e0, _Source="PE03795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" [0237.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0237.705] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c85f00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9c85f00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0237.705] wcscmp (_String1="PE04050_.WMF", _String2=".") returned 1 [0237.705] wcscmp (_String1="PE04050_.WMF", _String2="..") returned 1 [0237.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cbc8 [0237.705] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.705] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.705] wcscat (in: _Dest=0x682cbc8, _Source="PE04050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" [0237.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0237.706] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0237.706] wcscmp (_String1="PE05665_.WMF", _String2=".") returned 1 [0237.706] wcscmp (_String1="PE05665_.WMF", _String2="..") returned 1 [0237.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c898 [0237.707] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.707] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.707] wcscat (in: _Dest=0x682c898, _Source="PE05665_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" [0237.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0237.708] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459bf00, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x459bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0237.708] wcscmp (_String1="PE05710_.WMF", _String2=".") returned 1 [0237.708] wcscmp (_String1="PE05710_.WMF", _String2="..") returned 1 [0237.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c5f0 [0237.708] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.708] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.708] wcscat (in: _Dest=0x682c5f0, _Source="PE05710_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" [0237.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0237.709] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c1b00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c1b00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0237.709] wcscmp (_String1="PE05869_.WMF", _String2=".") returned 1 [0237.709] wcscmp (_String1="PE05869_.WMF", _String2="..") returned 1 [0237.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0237.709] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.709] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.709] wcscat (in: _Dest=0x682d1a0, _Source="PE05869_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" [0237.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0237.710] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9776700, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9776700, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0237.710] wcscmp (_String1="PE05870_.WMF", _String2=".") returned 1 [0237.710] wcscmp (_String1="PE05870_.WMF", _String2="..") returned 1 [0237.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d3c0 [0237.710] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.710] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.710] wcscat (in: _Dest=0x682d3c0, _Source="PE05870_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" [0237.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0237.711] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc504e00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc504e00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0237.711] wcscmp (_String1="PE05930_.WMF", _String2=".") returned 1 [0237.711] wcscmp (_String1="PE05930_.WMF", _String2="..") returned 1 [0237.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0237.711] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.711] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.711] wcscat (in: _Dest=0x682c458, _Source="PE05930_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" [0237.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0237.712] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54388600, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54388600, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0237.712] wcscmp (_String1="PE06049_.WMF", _String2=".") returned 1 [0237.712] wcscmp (_String1="PE06049_.WMF", _String2="..") returned 1 [0237.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bd70 [0237.712] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.712] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.712] wcscat (in: _Dest=0x682bd70, _Source="PE06049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" [0237.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0237.713] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0237.713] wcscmp (_String1="PE06450_.WMF", _String2=".") returned 1 [0237.713] wcscmp (_String1="PE06450_.WMF", _String2="..") returned 1 [0237.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d008 [0237.713] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.713] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.713] wcscat (in: _Dest=0x682d008, _Source="PE06450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" [0237.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0237.714] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868ef100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x868ef100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0237.714] wcscmp (_String1="PH00601G.GIF", _String2=".") returned 1 [0237.714] wcscmp (_String1="PH00601G.GIF", _String2="..") returned 1 [0237.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d558 [0237.714] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.714] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.714] wcscat (in: _Dest=0x682d558, _Source="PH00601G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" [0237.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0237.715] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da31d00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da31d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0237.715] wcscmp (_String1="PH00780U.BMP", _String2=".") returned 1 [0237.715] wcscmp (_String1="PH00780U.BMP", _String2="..") returned 1 [0237.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cc50 [0237.715] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.715] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.715] wcscat (in: _Dest=0x682cc50, _Source="PH00780U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" [0237.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0237.717] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957aa100, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957aa100, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0237.717] wcscmp (_String1="PH01035U.BMP", _String2=".") returned 1 [0237.717] wcscmp (_String1="PH01035U.BMP", _String2="..") returned 1 [0237.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c678 [0237.717] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.717] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.717] wcscat (in: _Dest=0x682c678, _Source="PH01035U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" [0237.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0237.718] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0237.718] wcscmp (_String1="PH01046J.JPG", _String2=".") returned 1 [0237.718] wcscmp (_String1="PH01046J.JPG", _String2="..") returned 1 [0237.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d448 [0237.718] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.718] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.718] wcscat (in: _Dest=0x682d448, _Source="PH01046J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" [0237.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0237.719] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627f1a00, ftCreationTime.dwHighDateTime=0x1bd5112, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x627f1a00, ftLastWriteTime.dwHighDateTime=0x1bd5112, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0237.719] wcscmp (_String1="PH01179J.JPG", _String2=".") returned 1 [0237.719] wcscmp (_String1="PH01179J.JPG", _String2="..") returned 1 [0237.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bdf8 [0237.719] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.719] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.719] wcscat (in: _Dest=0x682bdf8, _Source="PH01179J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" [0237.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0237.720] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0237.720] wcscmp (_String1="PH01213K.JPG", _String2=".") returned 1 [0237.720] wcscmp (_String1="PH01213K.JPG", _String2="..") returned 1 [0237.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0237.720] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.720] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.720] wcscat (in: _Dest=0x682c128, _Source="PH01213K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" [0237.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0237.721] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0237.721] wcscmp (_String1="PH01221K.JPG", _String2=".") returned 1 [0237.721] wcscmp (_String1="PH01221K.JPG", _String2="..") returned 1 [0237.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf90 [0237.721] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.721] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.721] wcscat (in: _Dest=0x682bf90, _Source="PH01221K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" [0237.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0237.722] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce84e00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcce84e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0237.722] wcscmp (_String1="PH01235U.BMP", _String2=".") returned 1 [0237.722] wcscmp (_String1="PH01235U.BMP", _String2="..") returned 1 [0237.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ca30 [0237.722] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.723] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.723] wcscat (in: _Dest=0x682ca30, _Source="PH01235U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" [0237.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0237.723] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d735e00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d735e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1 [0237.723] wcscmp (_String1="PH01236U.BMP", _String2=".") returned 1 [0237.723] wcscmp (_String1="PH01236U.BMP", _String2="..") returned 1 [0237.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d4d0 [0237.724] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.724] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.724] wcscat (in: _Dest=0x682d4d0, _Source="PH01236U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" [0237.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0237.724] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1 [0237.724] wcscmp (_String1="PH01239K.JPG", _String2=".") returned 1 [0237.725] wcscmp (_String1="PH01239K.JPG", _String2="..") returned 1 [0237.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0237.725] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.725] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.725] wcscat (in: _Dest=0x682c0a0, _Source="PH01239K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" [0237.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0237.725] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e9f600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53e9f600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1 [0237.726] wcscmp (_String1="PH01247U.BMP", _String2=".") returned 1 [0237.726] wcscmp (_String1="PH01247U.BMP", _String2="..") returned 1 [0237.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cf80 [0237.726] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.726] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.726] wcscat (in: _Dest=0x682cf80, _Source="PH01247U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" [0237.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0237.727] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757e800, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x757e800, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1 [0237.727] wcscmp (_String1="PH01255G.GIF", _String2=".") returned 1 [0237.727] wcscmp (_String1="PH01255G.GIF", _String2="..") returned 1 [0237.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cb40 [0237.727] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.727] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.727] wcscat (in: _Dest=0x682cb40, _Source="PH01255G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" [0237.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0237.728] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ae7000, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ae7000, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1 [0237.728] wcscmp (_String1="PH01265U.BMP", _String2=".") returned 1 [0237.728] wcscmp (_String1="PH01265U.BMP", _String2="..") returned 1 [0237.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0237.728] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.728] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.728] wcscat (in: _Dest=0x682c1b0, _Source="PH01265U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" [0237.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0237.729] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df41500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4df41500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1 [0237.729] wcscmp (_String1="PH01332U.BMP", _String2=".") returned 1 [0237.729] wcscmp (_String1="PH01332U.BMP", _String2="..") returned 1 [0237.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c810 [0237.729] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.729] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.729] wcscat (in: _Dest=0x682c810, _Source="PH01332U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" [0237.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0237.730] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa5f900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fa5f900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1 [0237.730] wcscmp (_String1="PH01478U.BMP", _String2=".") returned 1 [0237.730] wcscmp (_String1="PH01478U.BMP", _String2="..") returned 1 [0237.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c238 [0237.730] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.730] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.730] wcscat (in: _Dest=0x682c238, _Source="PH01478U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" [0237.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0237.731] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b01800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39b01800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1 [0237.731] wcscmp (_String1="PH01562U.BMP", _String2=".") returned 1 [0237.731] wcscmp (_String1="PH01562U.BMP", _String2="..") returned 1 [0237.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ccd8 [0237.731] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.731] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.732] wcscat (in: _Dest=0x682ccd8, _Source="PH01562U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" [0237.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0237.733] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34eb6400, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34eb6400, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1 [0237.733] wcscmp (_String1="PH01607U.BMP", _String2=".") returned 1 [0237.733] wcscmp (_String1="PH01607U.BMP", _String2="..") returned 1 [0237.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c2c0 [0237.733] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.733] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.733] wcscat (in: _Dest=0x682c2c0, _Source="PH01607U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" [0237.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0237.734] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad8bc00, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcad8bc00, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1 [0237.734] wcscmp (_String1="PH01931J.JPG", _String2=".") returned 1 [0237.734] wcscmp (_String1="PH01931J.JPG", _String2="..") returned 1 [0237.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0237.734] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.734] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.734] wcscat (in: _Dest=0x682bce8, _Source="PH01931J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" [0237.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0237.735] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1 [0237.965] wcscmp (_String1="PH02028K.JPG", _String2=".") returned 1 [0237.965] wcscmp (_String1="PH02028K.JPG", _String2="..") returned 1 [0237.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d778 [0237.965] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.965] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.965] wcscat (in: _Dest=0x682d778, _Source="PH02028K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" [0237.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0237.966] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f763a00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f763a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1 [0237.966] wcscmp (_String1="PH02039U.BMP", _String2=".") returned 1 [0237.966] wcscmp (_String1="PH02039U.BMP", _String2="..") returned 1 [0237.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c920 [0237.967] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.967] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.967] wcscat (in: _Dest=0x682c920, _Source="PH02039U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" [0237.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0237.967] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ab18600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ab18600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1 [0237.968] wcscmp (_String1="PH02040U.BMP", _String2=".") returned 1 [0237.968] wcscmp (_String1="PH02040U.BMP", _String2="..") returned 1 [0237.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0237.968] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.968] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.968] wcscat (in: _Dest=0x682c348, _Source="PH02040U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" [0237.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0237.969] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8861b000, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8861b000, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1 [0237.969] wcscmp (_String1="PH02053J.JPG", _String2=".") returned 1 [0237.969] wcscmp (_String1="PH02053J.JPG", _String2="..") returned 1 [0237.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cde8 [0237.969] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.969] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.969] wcscat (in: _Dest=0x682cde8, _Source="PH02053J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" [0237.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0237.970] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ecd200, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15ecd200, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1 [0237.970] wcscmp (_String1="PH02058U.BMP", _String2=".") returned 1 [0237.970] wcscmp (_String1="PH02058U.BMP", _String2="..") returned 1 [0237.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0237.970] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.970] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.970] wcscat (in: _Dest=0x682c788, _Source="PH02058U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" [0237.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0237.971] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a8d500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1 [0237.971] wcscmp (_String1="PH02062U.BMP", _String2=".") returned 1 [0237.971] wcscmp (_String1="PH02062U.BMP", _String2="..") returned 1 [0237.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d2b0 [0237.971] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.971] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.971] wcscat (in: _Dest=0x682d2b0, _Source="PH02062U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" [0237.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0237.972] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e78ca00, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e78ca00, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1 [0237.972] wcscmp (_String1="PH02069J.JPG", _String2=".") returned 1 [0237.972] wcscmp (_String1="PH02069J.JPG", _String2="..") returned 1 [0237.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0237.972] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.972] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.972] wcscat (in: _Dest=0x682c9a8, _Source="PH02069J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" [0237.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0237.973] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce42100, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfce42100, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02071U.BMP", cAlternateFileName="")) returned 1 [0237.973] wcscmp (_String1="PH02071U.BMP", _String2=".") returned 1 [0237.973] wcscmp (_String1="PH02071U.BMP", _String2="..") returned 1 [0237.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c018 [0237.973] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.973] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.973] wcscat (in: _Dest=0x682c018, _Source="PH02071U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" [0237.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0237.974] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb027e00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb027e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02074U.BMP", cAlternateFileName="")) returned 1 [0237.974] wcscmp (_String1="PH02074U.BMP", _String2=".") returned 1 [0237.974] wcscmp (_String1="PH02074U.BMP", _String2="..") returned 1 [0237.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cd60 [0237.975] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.975] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.975] wcscat (in: _Dest=0x682cd60, _Source="PH02074U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" [0237.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0237.976] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1791600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02208U.BMP", cAlternateFileName="")) returned 1 [0237.976] wcscmp (_String1="PH02208U.BMP", _String2=".") returned 1 [0237.976] wcscmp (_String1="PH02208U.BMP", _String2="..") returned 1 [0237.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d6f0 [0237.976] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.976] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.976] wcscat (in: _Dest=0x682d6f0, _Source="PH02208U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" [0237.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0237.977] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe341da00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe341da00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02223U.BMP", cAlternateFileName="")) returned 1 [0237.977] wcscmp (_String1="PH02223U.BMP", _String2=".") returned 1 [0237.977] wcscmp (_String1="PH02223U.BMP", _String2="..") returned 1 [0237.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d090 [0237.977] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.977] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.977] wcscat (in: _Dest=0x682d090, _Source="PH02223U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" [0237.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0237.978] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60e0b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc60e0b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02291U.BMP", cAlternateFileName="")) returned 1 [0237.978] wcscmp (_String1="PH02291U.BMP", _String2=".") returned 1 [0237.978] wcscmp (_String1="PH02291U.BMP", _String2="..") returned 1 [0237.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d118 [0237.978] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.978] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.978] wcscat (in: _Dest=0x682d118, _Source="PH02291U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" [0237.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0237.979] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb5d000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb5d000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02398U.BMP", cAlternateFileName="")) returned 1 [0237.979] wcscmp (_String1="PH02398U.BMP", _String2=".") returned 1 [0237.979] wcscmp (_String1="PH02398U.BMP", _String2="..") returned 1 [0237.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d338 [0237.979] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.979] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.979] wcscat (in: _Dest=0x682d338, _Source="PH02398U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" [0237.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0237.980] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02412K.JPG", cAlternateFileName="")) returned 1 [0237.980] wcscmp (_String1="PH02412K.JPG", _String2=".") returned 1 [0237.980] wcscmp (_String1="PH02412K.JPG", _String2="..") returned 1 [0237.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d800 [0237.980] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.980] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.980] wcscat (in: _Dest=0x682d800, _Source="PH02412K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" [0237.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0237.981] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa30000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa30000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02417U.BMP", cAlternateFileName="")) returned 1 [0237.981] wcscmp (_String1="PH02417U.BMP", _String2=".") returned 1 [0237.981] wcscmp (_String1="PH02417U.BMP", _String2="..") returned 1 [0237.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d910 [0237.981] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.981] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.981] wcscat (in: _Dest=0x682d910, _Source="PH02417U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" [0237.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0237.982] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ad1f00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4ad1f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02466U.BMP", cAlternateFileName="")) returned 1 [0237.982] wcscmp (_String1="PH02466U.BMP", _String2=".") returned 1 [0237.982] wcscmp (_String1="PH02466U.BMP", _String2="..") returned 1 [0237.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c4e0 [0237.982] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.982] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.982] wcscat (in: _Dest=0x682c4e0, _Source="PH02466U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" [0237.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0237.983] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867700, ftCreationTime.dwHighDateTime=0x1bf1182, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd867700, ftLastWriteTime.dwHighDateTime=0x1bf1182, nFileSizeHigh=0x0, nFileSizeLow=0x48fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02470U.BMP", cAlternateFileName="")) returned 1 [0237.983] wcscmp (_String1="PH02470U.BMP", _String2=".") returned 1 [0237.984] wcscmp (_String1="PH02470U.BMP", _String2="..") returned 1 [0237.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0237.984] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.984] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.984] wcscat (in: _Dest=0x682c700, _Source="PH02470U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" [0237.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0237.985] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd59b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cd59b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02503U.BMP", cAlternateFileName="")) returned 1 [0237.985] wcscmp (_String1="PH02503U.BMP", _String2=".") returned 1 [0237.985] wcscmp (_String1="PH02503U.BMP", _String2="..") returned 1 [0237.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0237.985] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.985] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.985] wcscat (in: _Dest=0x682d998, _Source="PH02503U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" [0237.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0237.986] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e6c300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18e6c300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8499, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02567J.JPG", cAlternateFileName="")) returned 1 [0237.986] wcscmp (_String1="PH02567J.JPG", _String2=".") returned 1 [0237.986] wcscmp (_String1="PH02567J.JPG", _String2="..") returned 1 [0237.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ce70 [0237.986] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.986] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.986] wcscat (in: _Dest=0x682ce70, _Source="PH02567J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" [0237.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0237.987] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c77e00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92c77e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x639b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736G.GIF", cAlternateFileName="")) returned 1 [0237.987] wcscmp (_String1="PH02736G.GIF", _String2=".") returned 1 [0237.987] wcscmp (_String1="PH02736G.GIF", _String2="..") returned 1 [0237.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cef8 [0237.987] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.987] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.987] wcscat (in: _Dest=0x682cef8, _Source="PH02736G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" [0237.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0237.988] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2781aa00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2781aa00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736U.BMP", cAlternateFileName="")) returned 1 [0237.988] wcscmp (_String1="PH02736U.BMP", _String2=".") returned 1 [0237.988] wcscmp (_String1="PH02736U.BMP", _String2="..") returned 1 [0237.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dbb8 [0237.988] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.988] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.988] wcscat (in: _Dest=0x682dbb8, _Source="PH02736U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" [0237.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0237.989] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df84200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df84200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02738U.BMP", cAlternateFileName="")) returned 1 [0237.989] wcscmp (_String1="PH02738U.BMP", _String2=".") returned 1 [0237.989] wcscmp (_String1="PH02738U.BMP", _String2="..") returned 1 [0237.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682be80 [0237.989] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.989] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.989] wcscat (in: _Dest=0x682be80, _Source="PH02738U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" [0237.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0237.990] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33f700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f33f700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740G.GIF", cAlternateFileName="")) returned 1 [0237.990] wcscmp (_String1="PH02740G.GIF", _String2=".") returned 1 [0237.990] wcscmp (_String1="PH02740G.GIF", _String2="..") returned 1 [0237.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682daa8 [0237.990] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.990] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.990] wcscat (in: _Dest=0x682daa8, _Source="PH02740G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" [0237.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0237.991] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b44500, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b44500, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740U.BMP", cAlternateFileName="")) returned 1 [0237.991] wcscmp (_String1="PH02740U.BMP", _String2=".") returned 1 [0237.991] wcscmp (_String1="PH02740U.BMP", _String2="..") returned 1 [0237.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c3d0 [0237.991] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.992] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.992] wcscat (in: _Dest=0x682c3d0, _Source="PH02740U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" [0237.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0237.992] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6f4300, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a6f4300, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x50a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742G.GIF", cAlternateFileName="")) returned 1 [0237.992] wcscmp (_String1="PH02742G.GIF", _String2=".") returned 1 [0237.992] wcscmp (_String1="PH02742G.GIF", _String2="..") returned 1 [0237.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682da20 [0237.993] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.993] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.993] wcscat (in: _Dest=0x682da20, _Source="PH02742G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" [0237.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0237.993] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d3700, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28d3700, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742U.BMP", cAlternateFileName="")) returned 1 [0237.993] wcscmp (_String1="PH02742U.BMP", _String2=".") returned 1 [0237.993] wcscmp (_String1="PH02742U.BMP", _String2="..") returned 1 [0237.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0237.994] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.994] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.994] wcscat (in: _Dest=0x682cab8, _Source="PH02742U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" [0237.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0237.995] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbbc00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86dbbc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02743G.GIF", cAlternateFileName="")) returned 1 [0237.995] wcscmp (_String1="PH02743G.GIF", _String2=".") returned 1 [0237.995] wcscmp (_String1="PH02743G.GIF", _String2="..") returned 1 [0237.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c30b8 [0237.995] wcscpy (in: _Dest=0x66c30b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.995] wcscat (in: _Dest=0x66c30b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.995] wcscat (in: _Dest=0x66c30b8, _Source="PH02743G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" [0237.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c30b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0237.996] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79becd00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79becd00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746G.GIF", cAlternateFileName="")) returned 1 [0237.996] wcscmp (_String1="PH02746G.GIF", _String2=".") returned 1 [0237.996] wcscmp (_String1="PH02746G.GIF", _String2="..") returned 1 [0237.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2f20 [0237.996] wcscpy (in: _Dest=0x66c2f20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.996] wcscat (in: _Dest=0x66c2f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.996] wcscat (in: _Dest=0x66c2f20, _Source="PH02746G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" [0237.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0237.997] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa34fc00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa34fc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746U.BMP", cAlternateFileName="")) returned 1 [0237.997] wcscmp (_String1="PH02746U.BMP", _String2=".") returned 1 [0237.997] wcscmp (_String1="PH02746U.BMP", _String2="..") returned 1 [0237.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2fa8 [0237.997] wcscpy (in: _Dest=0x66c2fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.997] wcscat (in: _Dest=0x66c2fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.997] wcscat (in: _Dest=0x66c2fa8, _Source="PH02746U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" [0237.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0237.998] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7297bf00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7297bf00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748G.GIF", cAlternateFileName="")) returned 1 [0237.998] wcscmp (_String1="PH02748G.GIF", _String2=".") returned 1 [0237.998] wcscmp (_String1="PH02748G.GIF", _String2="..") returned 1 [0237.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2e98 [0237.998] wcscpy (in: _Dest=0x66c2e98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.998] wcscat (in: _Dest=0x66c2e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.998] wcscat (in: _Dest=0x66c2e98, _Source="PH02748G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" [0237.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0237.999] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dcc100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1dcc100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748U.BMP", cAlternateFileName="")) returned 1 [0237.999] wcscmp (_String1="PH02748U.BMP", _String2=".") returned 1 [0237.999] wcscmp (_String1="PH02748U.BMP", _String2="..") returned 1 [0237.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2e10 [0237.999] wcscpy (in: _Dest=0x66c2e10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0237.999] wcscat (in: _Dest=0x66c2e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0237.999] wcscat (in: _Dest=0x66c2e10, _Source="PH02748U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" [0237.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0238.000] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x690e5700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x690e5700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x8795, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749G.GIF", cAlternateFileName="")) returned 1 [0238.000] wcscmp (_String1="PH02749G.GIF", _String2=".") returned 1 [0238.000] wcscmp (_String1="PH02749G.GIF", _String2="..") returned 1 [0238.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2d88 [0238.000] wcscpy (in: _Dest=0x66c2d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.000] wcscat (in: _Dest=0x66c2d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.000] wcscat (in: _Dest=0x66c2d88, _Source="PH02749G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" [0238.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0238.001] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb366a00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb366a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749U.BMP", cAlternateFileName="")) returned 1 [0238.001] wcscmp (_String1="PH02749U.BMP", _String2=".") returned 1 [0238.001] wcscmp (_String1="PH02749U.BMP", _String2="..") returned 1 [0238.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2c78 [0238.001] wcscpy (in: _Dest=0x66c2c78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.001] wcscat (in: _Dest=0x66c2c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.002] wcscat (in: _Dest=0x66c2c78, _Source="PH02749U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" [0238.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0238.003] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657ad000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x657ad000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x64c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750G.GIF", cAlternateFileName="")) returned 1 [0238.003] wcscmp (_String1="PH02750G.GIF", _String2=".") returned 1 [0238.003] wcscmp (_String1="PH02750G.GIF", _String2="..") returned 1 [0238.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2d00 [0238.003] wcscpy (in: _Dest=0x66c2d00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.003] wcscat (in: _Dest=0x66c2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.003] wcscat (in: _Dest=0x66c2d00, _Source="PH02750G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" [0238.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0238.042] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5918100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5918100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x16f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750U.BMP", cAlternateFileName="")) returned 1 [0238.054] wcscmp (_String1="PH02750U.BMP", _String2=".") returned 1 [0238.054] wcscmp (_String1="PH02750U.BMP", _String2="..") returned 1 [0238.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2bf0 [0238.054] wcscpy (in: _Dest=0x66c2bf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.054] wcscat (in: _Dest=0x66c2bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.054] wcscat (in: _Dest=0x66c2bf0, _Source="PH02750U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" [0238.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0238.056] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f84ef00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f84ef00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xc382, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752G.GIF", cAlternateFileName="")) returned 1 [0238.056] wcscmp (_String1="PH02752G.GIF", _String2=".") returned 1 [0238.056] wcscmp (_String1="PH02752G.GIF", _String2="..") returned 1 [0238.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2a58 [0238.056] wcscpy (in: _Dest=0x66c2a58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.056] wcscat (in: _Dest=0x66c2a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.056] wcscat (in: _Dest=0x66c2a58, _Source="PH02752G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" [0238.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0238.057] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dab7700, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dab7700, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752U.BMP", cAlternateFileName="")) returned 1 [0238.057] wcscmp (_String1="PH02752U.BMP", _String2=".") returned 1 [0238.057] wcscmp (_String1="PH02752U.BMP", _String2="..") returned 1 [0238.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2b68 [0238.057] wcscpy (in: _Dest=0x66c2b68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.057] wcscat (in: _Dest=0x66c2b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.057] wcscat (in: _Dest=0x66c2b68, _Source="PH02752U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" [0238.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0238.058] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821b0600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x821b0600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02753U.BMP", cAlternateFileName="")) returned 1 [0238.058] wcscmp (_String1="PH02753U.BMP", _String2=".") returned 1 [0238.058] wcscmp (_String1="PH02753U.BMP", _String2="..") returned 1 [0238.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2ae0 [0238.058] wcscpy (in: _Dest=0x66c2ae0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.058] wcscat (in: _Dest=0x66c2ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.058] wcscat (in: _Dest=0x66c2ae0, _Source="PH02753U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" [0238.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0238.059] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c2cb00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79c2cb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02754U.BMP", cAlternateFileName="")) returned 1 [0238.059] wcscmp (_String1="PH02754U.BMP", _String2=".") returned 1 [0238.059] wcscmp (_String1="PH02754U.BMP", _String2="..") returned 1 [0238.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c29d0 [0238.059] wcscpy (in: _Dest=0x66c29d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.059] wcscat (in: _Dest=0x66c29d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.060] wcscat (in: _Dest=0x66c29d0, _Source="PH02754U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" [0238.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c29d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0238.061] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a438200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a438200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02755U.BMP", cAlternateFileName="")) returned 1 [0238.061] wcscmp (_String1="PH02755U.BMP", _String2=".") returned 1 [0238.061] wcscmp (_String1="PH02755U.BMP", _String2="..") returned 1 [0238.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2948 [0238.061] wcscpy (in: _Dest=0x66c2948, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.061] wcscat (in: _Dest=0x66c2948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.061] wcscat (in: _Dest=0x66c2948, _Source="PH02755U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" [0238.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0238.062] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ba1a00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60ba1a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02756U.BMP", cAlternateFileName="")) returned 1 [0238.062] wcscmp (_String1="PH02756U.BMP", _String2=".") returned 1 [0238.062] wcscmp (_String1="PH02756U.BMP", _String2="..") returned 1 [0238.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c28c0 [0238.062] wcscpy (in: _Dest=0x66c28c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.062] wcscat (in: _Dest=0x66c28c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.062] wcscat (in: _Dest=0x66c28c0, _Source="PH02756U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" [0238.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c28c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0238.063] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x539d2b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x539d2b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02757U.BMP", cAlternateFileName="")) returned 1 [0238.063] wcscmp (_String1="PH02757U.BMP", _String2=".") returned 1 [0238.063] wcscmp (_String1="PH02757U.BMP", _String2="..") returned 1 [0238.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2838 [0238.064] wcscpy (in: _Dest=0x66c2838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.064] wcscat (in: _Dest=0x66c2838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.064] wcscat (in: _Dest=0x66c2838, _Source="PH02757U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" [0238.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0238.065] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6d400, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3cf6d400, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x307f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02758U.BMP", cAlternateFileName="")) returned 1 [0238.065] wcscmp (_String1="PH02758U.BMP", _String2=".") returned 1 [0238.065] wcscmp (_String1="PH02758U.BMP", _String2="..") returned 1 [0238.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2728 [0238.065] wcscpy (in: _Dest=0x66c2728, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.065] wcscat (in: _Dest=0x66c2728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.065] wcscat (in: _Dest=0x66c2728, _Source="PH02758U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" [0238.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0238.066] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8578600, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8578600, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02759J.JPG", cAlternateFileName="")) returned 1 [0238.066] wcscmp (_String1="PH02759J.JPG", _String2=".") returned 1 [0238.067] wcscmp (_String1="PH02759J.JPG", _String2="..") returned 1 [0238.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c27b0 [0238.067] wcscpy (in: _Dest=0x66c27b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.067] wcscat (in: _Dest=0x66c27b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.067] wcscat (in: _Dest=0x66c27b0, _Source="PH02759J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" [0238.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c27b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0238.068] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e51b00, ftCreationTime.dwHighDateTime=0x1bd4eb5, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e51b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb5, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02810J.JPG", cAlternateFileName="")) returned 1 [0238.068] wcscmp (_String1="PH02810J.JPG", _String2=".") returned 1 [0238.068] wcscmp (_String1="PH02810J.JPG", _String2="..") returned 1 [0238.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c26a0 [0238.068] wcscpy (in: _Dest=0x66c26a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.068] wcscat (in: _Dest=0x66c26a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.068] wcscat (in: _Dest=0x66c26a0, _Source="PH02810J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" [0238.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c26a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0238.069] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164d5900, ftCreationTime.dwHighDateTime=0x1bd4c7e, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164d5900, ftLastWriteTime.dwHighDateTime=0x1bd4c7e, nFileSizeHigh=0x0, nFileSizeLow=0xf438, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02829J.JPG", cAlternateFileName="")) returned 1 [0238.069] wcscmp (_String1="PH02829J.JPG", _String2=".") returned 1 [0238.069] wcscmp (_String1="PH02829J.JPG", _String2="..") returned 1 [0238.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2590 [0238.070] wcscpy (in: _Dest=0x66c2590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.070] wcscat (in: _Dest=0x66c2590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.070] wcscat (in: _Dest=0x66c2590, _Source="PH02829J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" [0238.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0238.071] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6c2600, ftCreationTime.dwHighDateTime=0x1bd4ec3, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb6c2600, ftLastWriteTime.dwHighDateTime=0x1bd4ec3, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02845G.GIF", cAlternateFileName="")) returned 1 [0238.071] wcscmp (_String1="PH02845G.GIF", _String2=".") returned 1 [0238.071] wcscmp (_String1="PH02845G.GIF", _String2="..") returned 1 [0238.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2618 [0238.071] wcscpy (in: _Dest=0x66c2618, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.071] wcscat (in: _Dest=0x66c2618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.071] wcscat (in: _Dest=0x66c2618, _Source="PH02845G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" [0238.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0 [0238.072] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02897J.JPG", cAlternateFileName="")) returned 1 [0238.072] wcscmp (_String1="PH02897J.JPG", _String2=".") returned 1 [0238.072] wcscmp (_String1="PH02897J.JPG", _String2="..") returned 1 [0238.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2480 [0238.072] wcscpy (in: _Dest=0x66c2480, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.072] wcscat (in: _Dest=0x66c2480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.072] wcscat (in: _Dest=0x66c2480, _Source="PH02897J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" [0238.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0238.073] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b4600, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762b4600, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x3c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03011U.BMP", cAlternateFileName="")) returned 1 [0238.073] wcscmp (_String1="PH03011U.BMP", _String2=".") returned 1 [0238.073] wcscmp (_String1="PH03011U.BMP", _String2="..") returned 1 [0238.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2508 [0238.074] wcscpy (in: _Dest=0x66c2508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.074] wcscat (in: _Dest=0x66c2508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.074] wcscat (in: _Dest=0x66c2508, _Source="PH03011U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" [0238.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0238.075] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a907c00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a907c00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03012U.BMP", cAlternateFileName="")) returned 1 [0238.075] wcscmp (_String1="PH03012U.BMP", _String2=".") returned 1 [0238.075] wcscmp (_String1="PH03012U.BMP", _String2="..") returned 1 [0238.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c23f8 [0238.075] wcscpy (in: _Dest=0x66c23f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.075] wcscat (in: _Dest=0x66c23f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.075] wcscat (in: _Dest=0x66c23f8, _Source="PH03012U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" [0238.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c23f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0238.076] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5982da00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5982da00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x49d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03014_.GIF", cAlternateFileName="")) returned 1 [0238.076] wcscmp (_String1="PH03014_.GIF", _String2=".") returned 1 [0238.076] wcscmp (_String1="PH03014_.GIF", _String2="..") returned 1 [0238.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2370 [0238.077] wcscpy (in: _Dest=0x66c2370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.077] wcscat (in: _Dest=0x66c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.077] wcscat (in: _Dest=0x66c2370, _Source="PH03014_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" [0238.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0238.078] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x78af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03041I.JPG", cAlternateFileName="")) returned 1 [0238.078] wcscmp (_String1="PH03041I.JPG", _String2=".") returned 1 [0238.078] wcscmp (_String1="PH03041I.JPG", _String2="..") returned 1 [0238.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c22e8 [0238.078] wcscpy (in: _Dest=0x66c22e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.078] wcscat (in: _Dest=0x66c22e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.078] wcscat (in: _Dest=0x66c22e8, _Source="PH03041I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" [0238.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0238.079] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03143I.JPG", cAlternateFileName="")) returned 1 [0238.079] wcscmp (_String1="PH03143I.JPG", _String2=".") returned 1 [0238.079] wcscmp (_String1="PH03143I.JPG", _String2="..") returned 1 [0238.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2260 [0238.079] wcscpy (in: _Dest=0x66c2260, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.079] wcscat (in: _Dest=0x66c2260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.079] wcscat (in: _Dest=0x66c2260, _Source="PH03143I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" [0238.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0238.081] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa343, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03205I.JPG", cAlternateFileName="")) returned 1 [0238.081] wcscmp (_String1="PH03205I.JPG", _String2=".") returned 1 [0238.081] wcscmp (_String1="PH03205I.JPG", _String2="..") returned 1 [0238.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c21d8 [0238.081] wcscpy (in: _Dest=0x66c21d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.081] wcscat (in: _Dest=0x66c21d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.081] wcscat (in: _Dest=0x66c21d8, _Source="PH03205I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" [0238.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c21d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0238.082] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa445, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03224I.JPG", cAlternateFileName="")) returned 1 [0238.082] wcscmp (_String1="PH03224I.JPG", _String2=".") returned 1 [0238.082] wcscmp (_String1="PH03224I.JPG", _String2="..") returned 1 [0238.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2150 [0238.083] wcscpy (in: _Dest=0x66c2150, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.083] wcscat (in: _Dest=0x66c2150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.083] wcscat (in: _Dest=0x66c2150, _Source="PH03224I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" [0238.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0238.084] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03379I.JPG", cAlternateFileName="")) returned 1 [0238.084] wcscmp (_String1="PH03379I.JPG", _String2=".") returned 1 [0238.084] wcscmp (_String1="PH03379I.JPG", _String2="..") returned 1 [0238.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c2040 [0238.084] wcscpy (in: _Dest=0x66c2040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.084] wcscat (in: _Dest=0x66c2040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.084] wcscat (in: _Dest=0x66c2040, _Source="PH03379I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" [0238.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c2040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0238.085] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03380I.JPG", cAlternateFileName="")) returned 1 [0238.085] wcscmp (_String1="PH03380I.JPG", _String2=".") returned 1 [0238.085] wcscmp (_String1="PH03380I.JPG", _String2="..") returned 1 [0238.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c20c8 [0238.086] wcscpy (in: _Dest=0x66c20c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.086] wcscat (in: _Dest=0x66c20c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.086] wcscat (in: _Dest=0x66c20c8, _Source="PH03380I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" [0238.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c20c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0238.087] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03425I.JPG", cAlternateFileName="")) returned 1 [0238.087] wcscmp (_String1="PH03425I.JPG", _String2=".") returned 1 [0238.087] wcscmp (_String1="PH03425I.JPG", _String2="..") returned 1 [0238.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1fb8 [0238.087] wcscpy (in: _Dest=0x66c1fb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.087] wcscat (in: _Dest=0x66c1fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.087] wcscat (in: _Dest=0x66c1fb8, _Source="PH03425I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" [0238.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0238.088] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRT.WMF", cAlternateFileName="")) returned 1 [0238.088] wcscmp (_String1="PRRT.WMF", _String2=".") returned 1 [0238.088] wcscmp (_String1="PRRT.WMF", _String2="..") returned 1 [0238.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c8b8 [0238.089] wcscpy (in: _Dest=0x674c8b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.089] wcscat (in: _Dest=0x674c8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.089] wcscat (in: _Dest=0x674c8b8, _Source="PRRT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" [0238.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0238.090] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x7aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRTINST.WMF", cAlternateFileName="")) returned 1 [0238.090] wcscmp (_String1="PRRTINST.WMF", _String2=".") returned 1 [0238.090] wcscmp (_String1="PRRTINST.WMF", _String2="..") returned 1 [0238.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1f30 [0238.090] wcscpy (in: _Dest=0x66c1f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.090] wcscat (in: _Dest=0x66c1f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.090] wcscat (in: _Dest=0x66c1f30, _Source="PRRTINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" [0238.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0238.128] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRETRO.WMF", cAlternateFileName="")) returned 1 [0238.129] wcscmp (_String1="PSRETRO.WMF", _String2=".") returned 1 [0238.129] wcscmp (_String1="PSRETRO.WMF", _String2="..") returned 1 [0238.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66c1ea8 [0238.129] wcscpy (in: _Dest=0x66c1ea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.129] wcscat (in: _Dest=0x66c1ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.129] wcscat (in: _Dest=0x66c1ea8, _Source="PSRETRO.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" [0238.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0238.130] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETLG.WMF", cAlternateFileName="")) returned 1 [0238.130] wcscmp (_String1="PSSKETLG.WMF", _String2=".") returned 1 [0238.130] wcscmp (_String1="PSSKETLG.WMF", _String2="..") returned 1 [0238.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1e20 [0238.130] wcscpy (in: _Dest=0x66c1e20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.130] wcscat (in: _Dest=0x66c1e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.130] wcscat (in: _Dest=0x66c1e20, _Source="PSSKETLG.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" [0238.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0238.131] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETSM.WMF", cAlternateFileName="")) returned 1 [0238.132] wcscmp (_String1="PSSKETSM.WMF", _String2=".") returned 1 [0238.132] wcscmp (_String1="PSSKETSM.WMF", _String2="..") returned 1 [0238.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1d98 [0238.132] wcscpy (in: _Dest=0x66c1d98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.132] wcscat (in: _Dest=0x66c1d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.132] wcscat (in: _Dest=0x66c1d98, _Source="PSSKETSM.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" [0238.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0238.133] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWAVY.WMF", cAlternateFileName="")) returned 1 [0238.133] wcscmp (_String1="PSWAVY.WMF", _String2=".") returned 1 [0238.133] wcscmp (_String1="PSWAVY.WMF", _String2="..") returned 1 [0238.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66c1d10 [0238.133] wcscpy (in: _Dest=0x66c1d10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.133] wcscat (in: _Dest=0x66c1d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.133] wcscat (in: _Dest=0x66c1d10, _Source="PSWAVY.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" [0238.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0238.134] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE00006_.WMF", cAlternateFileName="")) returned 1 [0238.134] wcscmp (_String1="RE00006_.WMF", _String2=".") returned 1 [0238.134] wcscmp (_String1="RE00006_.WMF", _String2="..") returned 1 [0238.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1c88 [0238.134] wcscpy (in: _Dest=0x66c1c88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.134] wcscat (in: _Dest=0x66c1c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.134] wcscat (in: _Dest=0x66c1c88, _Source="RE00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" [0238.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0238.136] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECYCLE.WMF", cAlternateFileName="")) returned 1 [0238.136] wcscmp (_String1="RECYCLE.WMF", _String2=".") returned 1 [0238.136] wcscmp (_String1="RECYCLE.WMF", _String2="..") returned 1 [0238.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66c1c00 [0238.136] wcscpy (in: _Dest=0x66c1c00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.136] wcscat (in: _Dest=0x66c1c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.136] wcscat (in: _Dest=0x66c1c00, _Source="RECYCLE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" [0238.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0238.137] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x175f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_01.MID", cAlternateFileName="")) returned 1 [0238.137] wcscmp (_String1="ROAD_01.MID", _String2=".") returned 1 [0238.137] wcscmp (_String1="ROAD_01.MID", _String2="..") returned 1 [0238.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66c1b78 [0238.137] wcscpy (in: _Dest=0x66c1b78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.137] wcscat (in: _Dest=0x66c1b78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.137] wcscat (in: _Dest=0x66c1b78, _Source="ROAD_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" [0238.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0238.138] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x278a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAFRI_01.MID", cAlternateFileName="")) returned 1 [0238.139] wcscmp (_String1="SAFRI_01.MID", _String2=".") returned 1 [0238.139] wcscmp (_String1="SAFRI_01.MID", _String2="..") returned 1 [0238.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1af0 [0238.139] wcscpy (in: _Dest=0x66c1af0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.139] wcscat (in: _Dest=0x66c1af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.139] wcscat (in: _Dest=0x66c1af0, _Source="SAFRI_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" [0238.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0238.140] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1 [0238.157] wcscmp (_String1="SCHOL_02.MID", _String2=".") returned 1 [0238.157] wcscmp (_String1="SCHOL_02.MID", _String2="..") returned 1 [0238.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c19e0 [0238.157] wcscpy (in: _Dest=0x66c19e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.157] wcscat (in: _Dest=0x66c19e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.157] wcscat (in: _Dest=0x66c19e0, _Source="SCHOL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" [0238.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0238.158] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOW_01.MID", cAlternateFileName="")) returned 1 [0238.158] wcscmp (_String1="SHOW_01.MID", _String2=".") returned 1 [0238.158] wcscmp (_String1="SHOW_01.MID", _String2="..") returned 1 [0238.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66c1a68 [0238.158] wcscpy (in: _Dest=0x66c1a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.158] wcscat (in: _Dest=0x66c1a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.158] wcscat (in: _Dest=0x66c1a68, _Source="SHOW_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" [0238.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0238.160] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c7200, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d0c7200, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00256_.WMF", cAlternateFileName="")) returned 1 [0238.160] wcscmp (_String1="SL00256_.WMF", _String2=".") returned 1 [0238.160] wcscmp (_String1="SL00256_.WMF", _String2="..") returned 1 [0238.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1958 [0238.160] wcscpy (in: _Dest=0x66c1958, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.160] wcscat (in: _Dest=0x66c1958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.160] wcscat (in: _Dest=0x66c1958, _Source="SL00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" [0238.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0238.161] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3978eb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3978eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00260_.WMF", cAlternateFileName="")) returned 1 [0238.161] wcscmp (_String1="SL00260_.WMF", _String2=".") returned 1 [0238.161] wcscmp (_String1="SL00260_.WMF", _String2="..") returned 1 [0238.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c18d0 [0238.162] wcscpy (in: _Dest=0x66c18d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.162] wcscat (in: _Dest=0x66c18d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.162] wcscat (in: _Dest=0x66c18d0, _Source="SL00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" [0238.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c18d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0238.163] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91b9b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91b9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00268_.WMF", cAlternateFileName="")) returned 1 [0238.163] wcscmp (_String1="SL00268_.WMF", _String2=".") returned 1 [0238.163] wcscmp (_String1="SL00268_.WMF", _String2="..") returned 1 [0238.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c17c0 [0238.163] wcscpy (in: _Dest=0x66c17c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.163] wcscat (in: _Dest=0x66c17c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.163] wcscat (in: _Dest=0x66c17c0, _Source="SL00268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" [0238.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c17c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0238.165] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfa7500, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cfa7500, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00286_.WMF", cAlternateFileName="")) returned 1 [0238.165] wcscmp (_String1="SL00286_.WMF", _String2=".") returned 1 [0238.165] wcscmp (_String1="SL00286_.WMF", _String2="..") returned 1 [0238.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1848 [0238.165] wcscpy (in: _Dest=0x66c1848, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.165] wcscat (in: _Dest=0x66c1848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.165] wcscat (in: _Dest=0x66c1848, _Source="SL00286_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" [0238.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0238.166] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde04f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcde04f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1268, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00298_.WMF", cAlternateFileName="")) returned 1 [0238.166] wcscmp (_String1="SL00298_.WMF", _String2=".") returned 1 [0238.166] wcscmp (_String1="SL00298_.WMF", _String2="..") returned 1 [0238.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1738 [0238.167] wcscpy (in: _Dest=0x66c1738, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.167] wcscat (in: _Dest=0x66c1738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.167] wcscat (in: _Dest=0x66c1738, _Source="SL00298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" [0238.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0238.168] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd0af00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00308_.WMF", cAlternateFileName="")) returned 1 [0238.168] wcscmp (_String1="SL00308_.WMF", _String2=".") returned 1 [0238.168] wcscmp (_String1="SL00308_.WMF", _String2="..") returned 1 [0238.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c16b0 [0238.168] wcscpy (in: _Dest=0x66c16b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.168] wcscat (in: _Dest=0x66c16b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.168] wcscat (in: _Dest=0x66c16b0, _Source="SL00308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" [0238.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c16b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0238.170] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164b3d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164b3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00345_.WMF", cAlternateFileName="")) returned 1 [0238.170] wcscmp (_String1="SL00345_.WMF", _String2=".") returned 1 [0238.170] wcscmp (_String1="SL00345_.WMF", _String2="..") returned 1 [0238.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1628 [0238.170] wcscpy (in: _Dest=0x66c1628, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.170] wcscat (in: _Dest=0x66c1628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.170] wcscat (in: _Dest=0x66c1628, _Source="SL00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" [0238.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0238.171] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe0ce00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefe0ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00452_.WMF", cAlternateFileName="")) returned 1 [0238.171] wcscmp (_String1="SL00452_.WMF", _String2=".") returned 1 [0238.171] wcscmp (_String1="SL00452_.WMF", _String2="..") returned 1 [0238.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c15a0 [0238.171] wcscpy (in: _Dest=0x66c15a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.171] wcscat (in: _Dest=0x66c15a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.171] wcscat (in: _Dest=0x66c15a0, _Source="SL00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" [0238.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c15a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0238.173] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5263900, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5263900, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00712_.WMF", cAlternateFileName="")) returned 1 [0238.173] wcscmp (_String1="SL00712_.WMF", _String2=".") returned 1 [0238.173] wcscmp (_String1="SL00712_.WMF", _String2="..") returned 1 [0238.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1518 [0238.173] wcscpy (in: _Dest=0x66c1518, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.173] wcscat (in: _Dest=0x66c1518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.173] wcscat (in: _Dest=0x66c1518, _Source="SL00712_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" [0238.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0238.175] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0b1d00, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01040_.WMF", cAlternateFileName="")) returned 1 [0238.175] wcscmp (_String1="SL01040_.WMF", _String2=".") returned 1 [0238.175] wcscmp (_String1="SL01040_.WMF", _String2="..") returned 1 [0238.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1490 [0238.175] wcscpy (in: _Dest=0x66c1490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.175] wcscat (in: _Dest=0x66c1490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.175] wcscat (in: _Dest=0x66c1490, _Source="SL01040_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" [0238.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0238.176] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8c300, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8c300, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01041_.WMF", cAlternateFileName="")) returned 1 [0238.176] wcscmp (_String1="SL01041_.WMF", _String2=".") returned 1 [0238.177] wcscmp (_String1="SL01041_.WMF", _String2="..") returned 1 [0238.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1408 [0238.177] wcscpy (in: _Dest=0x66c1408, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.177] wcscat (in: _Dest=0x66c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.177] wcscat (in: _Dest=0x66c1408, _Source="SL01041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" [0238.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0238.178] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120c4600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x120c4600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01394_.WMF", cAlternateFileName="")) returned 1 [0238.178] wcscmp (_String1="SL01394_.WMF", _String2=".") returned 1 [0238.178] wcscmp (_String1="SL01394_.WMF", _String2="..") returned 1 [0238.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1380 [0238.178] wcscpy (in: _Dest=0x66c1380, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.178] wcscat (in: _Dest=0x66c1380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.178] wcscat (in: _Dest=0x66c1380, _Source="SL01394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" [0238.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0238.180] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b40b00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b40b00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01395_.WMF", cAlternateFileName="")) returned 1 [0238.180] wcscmp (_String1="SL01395_.WMF", _String2=".") returned 1 [0238.180] wcscmp (_String1="SL01395_.WMF", _String2="..") returned 1 [0238.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1270 [0238.180] wcscpy (in: _Dest=0x66c1270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.180] wcscat (in: _Dest=0x66c1270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.180] wcscat (in: _Dest=0x66c1270, _Source="SL01395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" [0238.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0238.181] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01565_.WMF", cAlternateFileName="")) returned 1 [0238.181] wcscmp (_String1="SL01565_.WMF", _String2=".") returned 1 [0238.181] wcscmp (_String1="SL01565_.WMF", _String2="..") returned 1 [0238.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c12f8 [0238.181] wcscpy (in: _Dest=0x66c12f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.181] wcscat (in: _Dest=0x66c12f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.182] wcscat (in: _Dest=0x66c12f8, _Source="SL01565_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" [0238.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c12f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0238.248] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ddbc400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ddbc400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x36aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00017_.WMF", cAlternateFileName="")) returned 1 [0238.248] wcscmp (_String1="SO00017_.WMF", _String2=".") returned 1 [0238.248] wcscmp (_String1="SO00017_.WMF", _String2="..") returned 1 [0238.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c11e8 [0238.248] wcscpy (in: _Dest=0x66c11e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.248] wcscat (in: _Dest=0x66c11e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.248] wcscat (in: _Dest=0x66c11e8, _Source="SO00017_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" [0238.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c11e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0238.250] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5caa9700, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5caa9700, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x32f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00018_.WMF", cAlternateFileName="")) returned 1 [0238.250] wcscmp (_String1="SO00018_.WMF", _String2=".") returned 1 [0238.250] wcscmp (_String1="SO00018_.WMF", _String2="..") returned 1 [0238.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c10d8 [0238.250] wcscpy (in: _Dest=0x66c10d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.250] wcscat (in: _Dest=0x66c10d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.250] wcscat (in: _Dest=0x66c10d8, _Source="SO00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" [0238.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c10d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0238.251] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41f00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6d41f00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00152_.WMF", cAlternateFileName="")) returned 1 [0238.252] wcscmp (_String1="SO00152_.WMF", _String2=".") returned 1 [0238.252] wcscmp (_String1="SO00152_.WMF", _String2="..") returned 1 [0238.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1160 [0238.252] wcscpy (in: _Dest=0x66c1160, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.252] wcscat (in: _Dest=0x66c1160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.252] wcscat (in: _Dest=0x66c1160, _Source="SO00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" [0238.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0238.253] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaef9100, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaef9100, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00157_.WMF", cAlternateFileName="")) returned 1 [0238.253] wcscmp (_String1="SO00157_.WMF", _String2=".") returned 1 [0238.253] wcscmp (_String1="SO00157_.WMF", _String2="..") returned 1 [0238.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c1050 [0238.254] wcscpy (in: _Dest=0x66c1050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.254] wcscat (in: _Dest=0x66c1050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.254] wcscat (in: _Dest=0x66c1050, _Source="SO00157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" [0238.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c1050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0238.255] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36d6d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe36d6d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00159_.WMF", cAlternateFileName="")) returned 1 [0238.255] wcscmp (_String1="SO00159_.WMF", _String2=".") returned 1 [0238.255] wcscmp (_String1="SO00159_.WMF", _String2="..") returned 1 [0238.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0f40 [0238.255] wcscpy (in: _Dest=0x66c0f40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.255] wcscat (in: _Dest=0x66c0f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.255] wcscat (in: _Dest=0x66c0f40, _Source="SO00159_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" [0238.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0238.257] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4ab700, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd4ab700, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x35b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00166_.WMF", cAlternateFileName="")) returned 1 [0238.257] wcscmp (_String1="SO00166_.WMF", _String2=".") returned 1 [0238.257] wcscmp (_String1="SO00166_.WMF", _String2="..") returned 1 [0238.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0fc8 [0238.257] wcscpy (in: _Dest=0x66c0fc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.257] wcscat (in: _Dest=0x66c0fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.257] wcscat (in: _Dest=0x66c0fc8, _Source="SO00166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" [0238.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0238.258] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcae85d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcae85d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00168_.WMF", cAlternateFileName="")) returned 1 [0238.258] wcscmp (_String1="SO00168_.WMF", _String2=".") returned 1 [0238.258] wcscmp (_String1="SO00168_.WMF", _String2="..") returned 1 [0238.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0eb8 [0238.259] wcscpy (in: _Dest=0x66c0eb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.259] wcscat (in: _Dest=0x66c0eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.259] wcscat (in: _Dest=0x66c0eb8, _Source="SO00168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" [0238.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0238.260] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b73000, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9b73000, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00170_.WMF", cAlternateFileName="")) returned 1 [0238.260] wcscmp (_String1="SO00170_.WMF", _String2=".") returned 1 [0238.260] wcscmp (_String1="SO00170_.WMF", _String2="..") returned 1 [0238.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0e30 [0238.260] wcscpy (in: _Dest=0x66c0e30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.260] wcscat (in: _Dest=0x66c0e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.260] wcscat (in: _Dest=0x66c0e30, _Source="SO00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" [0238.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0238.262] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02dc800, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc02dc800, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00177_.WMF", cAlternateFileName="")) returned 1 [0238.262] wcscmp (_String1="SO00177_.WMF", _String2=".") returned 1 [0238.262] wcscmp (_String1="SO00177_.WMF", _String2="..") returned 1 [0238.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0da8 [0238.262] wcscpy (in: _Dest=0x66c0da8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.262] wcscat (in: _Dest=0x66c0da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.262] wcscat (in: _Dest=0x66c0da8, _Source="SO00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" [0238.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0238.263] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x283c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00183_.WMF", cAlternateFileName="")) returned 1 [0238.263] wcscmp (_String1="SO00183_.WMF", _String2=".") returned 1 [0238.263] wcscmp (_String1="SO00183_.WMF", _String2="..") returned 1 [0238.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0d20 [0238.263] wcscpy (in: _Dest=0x66c0d20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.263] wcscat (in: _Dest=0x66c0d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.263] wcscat (in: _Dest=0x66c0d20, _Source="SO00183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" [0238.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0238.265] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d58d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7d58d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x514c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00190_.WMF", cAlternateFileName="")) returned 1 [0238.265] wcscmp (_String1="SO00190_.WMF", _String2=".") returned 1 [0238.265] wcscmp (_String1="SO00190_.WMF", _String2="..") returned 1 [0238.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0c98 [0238.265] wcscpy (in: _Dest=0x66c0c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.265] wcscat (in: _Dest=0x66c0c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.265] wcscat (in: _Dest=0x66c0c98, _Source="SO00190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" [0238.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0238.266] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2090, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00191_.WMF", cAlternateFileName="")) returned 1 [0238.266] wcscmp (_String1="SO00191_.WMF", _String2=".") returned 1 [0238.266] wcscmp (_String1="SO00191_.WMF", _String2="..") returned 1 [0238.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0b88 [0238.266] wcscpy (in: _Dest=0x66c0b88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.267] wcscat (in: _Dest=0x66c0b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.267] wcscat (in: _Dest=0x66c0b88, _Source="SO00191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" [0238.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0238.268] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00192_.WMF", cAlternateFileName="")) returned 1 [0238.268] wcscmp (_String1="SO00192_.WMF", _String2=".") returned 1 [0238.268] wcscmp (_String1="SO00192_.WMF", _String2="..") returned 1 [0238.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0c10 [0238.268] wcscpy (in: _Dest=0x66c0c10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.268] wcscat (in: _Dest=0x66c0c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.268] wcscat (in: _Dest=0x66c0c10, _Source="SO00192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" [0238.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0238.270] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4420600, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4420600, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x27c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00194_.WMF", cAlternateFileName="")) returned 1 [0238.270] wcscmp (_String1="SO00194_.WMF", _String2=".") returned 1 [0238.270] wcscmp (_String1="SO00194_.WMF", _String2="..") returned 1 [0238.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0b00 [0238.270] wcscpy (in: _Dest=0x66c0b00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.270] wcscat (in: _Dest=0x66c0b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.270] wcscat (in: _Dest=0x66c0b00, _Source="SO00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" [0238.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0238.271] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x238c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00197_.WMF", cAlternateFileName="")) returned 1 [0238.272] wcscmp (_String1="SO00197_.WMF", _String2=".") returned 1 [0238.272] wcscmp (_String1="SO00197_.WMF", _String2="..") returned 1 [0238.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0a78 [0238.272] wcscpy (in: _Dest=0x66c0a78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.272] wcscat (in: _Dest=0x66c0a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.272] wcscat (in: _Dest=0x66c0a78, _Source="SO00197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" [0238.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0238.273] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4c2500, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae4c2500, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00199_.WMF", cAlternateFileName="")) returned 1 [0238.273] wcscmp (_String1="SO00199_.WMF", _String2=".") returned 1 [0238.273] wcscmp (_String1="SO00199_.WMF", _String2="..") returned 1 [0238.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c09f0 [0238.273] wcscpy (in: _Dest=0x66c09f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.273] wcscat (in: _Dest=0x66c09f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.273] wcscat (in: _Dest=0x66c09f0, _Source="SO00199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" [0238.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c09f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0238.275] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe9cb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe9cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2926, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00200_.WMF", cAlternateFileName="")) returned 1 [0238.275] wcscmp (_String1="SO00200_.WMF", _String2=".") returned 1 [0238.275] wcscmp (_String1="SO00200_.WMF", _String2="..") returned 1 [0238.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c08e0 [0238.275] wcscpy (in: _Dest=0x66c08e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.275] wcscat (in: _Dest=0x66c08e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.275] wcscat (in: _Dest=0x66c08e0, _Source="SO00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" [0238.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c08e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0238.276] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30def00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa30def00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00208_.WMF", cAlternateFileName="")) returned 1 [0238.276] wcscmp (_String1="SO00208_.WMF", _String2=".") returned 1 [0238.276] wcscmp (_String1="SO00208_.WMF", _String2="..") returned 1 [0238.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0968 [0238.277] wcscpy (in: _Dest=0x66c0968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.277] wcscat (in: _Dest=0x66c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.277] wcscat (in: _Dest=0x66c0968, _Source="SO00208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" [0238.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0238.278] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be6e100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be6e100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x4f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00212_.WMF", cAlternateFileName="")) returned 1 [0238.291] wcscmp (_String1="SO00212_.WMF", _String2=".") returned 1 [0238.292] wcscmp (_String1="SO00212_.WMF", _String2="..") returned 1 [0238.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0858 [0238.292] wcscpy (in: _Dest=0x66c0858, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.292] wcscat (in: _Dest=0x66c0858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.292] wcscat (in: _Dest=0x66c0858, _Source="SO00212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" [0238.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0238.293] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00221_.WMF", cAlternateFileName="")) returned 1 [0238.293] wcscmp (_String1="SO00221_.WMF", _String2=".") returned 1 [0238.293] wcscmp (_String1="SO00221_.WMF", _String2="..") returned 1 [0238.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c07d0 [0238.294] wcscpy (in: _Dest=0x66c07d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.294] wcscat (in: _Dest=0x66c07d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.294] wcscat (in: _Dest=0x66c07d0, _Source="SO00221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" [0238.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c07d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0238.295] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00222_.WMF", cAlternateFileName="")) returned 1 [0238.295] wcscmp (_String1="SO00222_.WMF", _String2=".") returned 1 [0238.295] wcscmp (_String1="SO00222_.WMF", _String2="..") returned 1 [0238.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0748 [0238.295] wcscpy (in: _Dest=0x66c0748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.295] wcscat (in: _Dest=0x66c0748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.295] wcscat (in: _Dest=0x66c0748, _Source="SO00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" [0238.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0238.297] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3642, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00223_.WMF", cAlternateFileName="")) returned 1 [0238.297] wcscmp (_String1="SO00223_.WMF", _String2=".") returned 1 [0238.297] wcscmp (_String1="SO00223_.WMF", _String2="..") returned 1 [0238.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c06c0 [0238.297] wcscpy (in: _Dest=0x66c06c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.297] wcscat (in: _Dest=0x66c06c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.297] wcscat (in: _Dest=0x66c06c0, _Source="SO00223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" [0238.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c06c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0238.298] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a88df00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a88df00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x476e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00257_.WMF", cAlternateFileName="")) returned 1 [0238.298] wcscmp (_String1="SO00257_.WMF", _String2=".") returned 1 [0238.298] wcscmp (_String1="SO00257_.WMF", _String2="..") returned 1 [0238.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0638 [0238.298] wcscpy (in: _Dest=0x66c0638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.299] wcscat (in: _Dest=0x66c0638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.299] wcscat (in: _Dest=0x66c0638, _Source="SO00257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" [0238.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0238.327] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b14d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24b14d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00289_.WMF", cAlternateFileName="")) returned 1 [0238.327] wcscmp (_String1="SO00289_.WMF", _String2=".") returned 1 [0238.327] wcscmp (_String1="SO00289_.WMF", _String2="..") returned 1 [0238.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c05b0 [0238.327] wcscpy (in: _Dest=0x66c05b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.327] wcscat (in: _Dest=0x66c05b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.327] wcscat (in: _Dest=0x66c05b0, _Source="SO00289_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" [0238.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c05b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0238.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f87fa00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f87fa00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00299_.WMF", cAlternateFileName="")) returned 1 [0238.329] wcscmp (_String1="SO00299_.WMF", _String2=".") returned 1 [0238.329] wcscmp (_String1="SO00299_.WMF", _String2="..") returned 1 [0238.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0528 [0238.329] wcscpy (in: _Dest=0x66c0528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.329] wcscat (in: _Dest=0x66c0528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.329] wcscat (in: _Dest=0x66c0528, _Source="SO00299_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" [0238.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0238.330] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b7b600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12b7b600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00305_.WMF", cAlternateFileName="")) returned 1 [0238.330] wcscmp (_String1="SO00305_.WMF", _String2=".") returned 1 [0238.330] wcscmp (_String1="SO00305_.WMF", _String2="..") returned 1 [0238.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c04a0 [0238.331] wcscpy (in: _Dest=0x66c04a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.331] wcscat (in: _Dest=0x66c04a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.331] wcscat (in: _Dest=0x66c04a0, _Source="SO00305_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" [0238.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c04a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0238.332] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10555c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10555c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xee4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00333_.WMF", cAlternateFileName="")) returned 1 [0238.332] wcscmp (_String1="SO00333_.WMF", _String2=".") returned 1 [0238.332] wcscmp (_String1="SO00333_.WMF", _String2="..") returned 1 [0238.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0418 [0238.332] wcscpy (in: _Dest=0x66c0418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.333] wcscat (in: _Dest=0x66c0418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.333] wcscat (in: _Dest=0x66c0418, _Source="SO00333_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" [0238.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0238.334] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56152300, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56152300, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00345_.WMF", cAlternateFileName="")) returned 1 [0238.334] wcscmp (_String1="SO00345_.WMF", _String2=".") returned 1 [0238.334] wcscmp (_String1="SO00345_.WMF", _String2="..") returned 1 [0238.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0390 [0238.334] wcscpy (in: _Dest=0x66c0390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.334] wcscat (in: _Dest=0x66c0390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.334] wcscat (in: _Dest=0x66c0390, _Source="SO00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" [0238.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0238.336] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00350_.WMF", cAlternateFileName="")) returned 1 [0238.336] wcscmp (_String1="SO00350_.WMF", _String2=".") returned 1 [0238.336] wcscmp (_String1="SO00350_.WMF", _String2="..") returned 1 [0238.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0308 [0238.336] wcscpy (in: _Dest=0x66c0308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.336] wcscat (in: _Dest=0x66c0308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.336] wcscat (in: _Dest=0x66c0308, _Source="SO00350_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" [0238.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0238.338] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x934c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00352_.WMF", cAlternateFileName="")) returned 1 [0238.338] wcscmp (_String1="SO00352_.WMF", _String2=".") returned 1 [0238.338] wcscmp (_String1="SO00352_.WMF", _String2="..") returned 1 [0238.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0280 [0238.338] wcscpy (in: _Dest=0x66c0280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.338] wcscat (in: _Dest=0x66c0280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.338] wcscat (in: _Dest=0x66c0280, _Source="SO00352_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" [0238.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0238.339] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5881400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5881400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00364_.WMF", cAlternateFileName="")) returned 1 [0238.339] wcscmp (_String1="SO00364_.WMF", _String2=".") returned 1 [0238.339] wcscmp (_String1="SO00364_.WMF", _String2="..") returned 1 [0238.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0170 [0238.339] wcscpy (in: _Dest=0x66c0170, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.339] wcscat (in: _Dest=0x66c0170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.340] wcscat (in: _Dest=0x66c0170, _Source="SO00364_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" [0238.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0238.341] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b94100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6b94100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x51ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00367_.WMF", cAlternateFileName="")) returned 1 [0238.341] wcscmp (_String1="SO00367_.WMF", _String2=".") returned 1 [0238.341] wcscmp (_String1="SO00367_.WMF", _String2="..") returned 1 [0238.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c01f8 [0238.341] wcscpy (in: _Dest=0x66c01f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.341] wcscat (in: _Dest=0x66c01f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.341] wcscat (in: _Dest=0x66c01f8, _Source="SO00367_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" [0238.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c01f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0238.342] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3308, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00373_.WMF", cAlternateFileName="")) returned 1 [0238.342] wcscmp (_String1="SO00373_.WMF", _String2=".") returned 1 [0238.343] wcscmp (_String1="SO00373_.WMF", _String2="..") returned 1 [0238.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c00e8 [0238.343] wcscpy (in: _Dest=0x66c00e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.343] wcscat (in: _Dest=0x66c00e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.343] wcscat (in: _Dest=0x66c00e8, _Source="SO00373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" [0238.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c00e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0238.344] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ea6e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7ea6e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x27f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00382_.WMF", cAlternateFileName="")) returned 1 [0238.344] wcscmp (_String1="SO00382_.WMF", _String2=".") returned 1 [0238.344] wcscmp (_String1="SO00382_.WMF", _String2="..") returned 1 [0238.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c0060 [0238.344] wcscpy (in: _Dest=0x66c0060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.344] wcscat (in: _Dest=0x66c0060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.344] wcscat (in: _Dest=0x66c0060, _Source="SO00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" [0238.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0238.346] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbe2f00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcbe2f00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00390_.WMF", cAlternateFileName="")) returned 1 [0238.346] wcscmp (_String1="SO00390_.WMF", _String2=".") returned 1 [0238.346] wcscmp (_String1="SO00390_.WMF", _String2="..") returned 1 [0238.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c34f8 [0238.346] wcscpy (in: _Dest=0x66c34f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.346] wcscat (in: _Dest=0x66c34f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.346] wcscat (in: _Dest=0x66c34f8, _Source="SO00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" [0238.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c34f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0238.348] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f97b00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7f97b00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00391_.WMF", cAlternateFileName="")) returned 1 [0238.349] wcscmp (_String1="SO00391_.WMF", _String2=".") returned 1 [0238.349] wcscmp (_String1="SO00391_.WMF", _String2="..") returned 1 [0238.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3030 [0238.349] wcscpy (in: _Dest=0x66c3030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.349] wcscat (in: _Dest=0x66c3030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.349] wcscat (in: _Dest=0x66c3030, _Source="SO00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" [0238.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0238.351] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1a5d00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef1a5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x704e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00416_.WMF", cAlternateFileName="")) returned 1 [0238.351] wcscmp (_String1="SO00416_.WMF", _String2=".") returned 1 [0238.351] wcscmp (_String1="SO00416_.WMF", _String2="..") returned 1 [0238.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26a58 [0238.351] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.351] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.351] wcscat (in: _Dest=0x3f26a58, _Source="SO00416_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" [0238.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0238.352] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7df500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb7df500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x143c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00423_.WMF", cAlternateFileName="")) returned 1 [0238.352] wcscmp (_String1="SO00423_.WMF", _String2=".") returned 1 [0238.352] wcscmp (_String1="SO00423_.WMF", _String2="..") returned 1 [0238.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0238.353] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.353] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.353] wcscat (in: _Dest=0x3f267b0, _Source="SO00423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" [0238.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0238.354] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf242f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf242f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1544, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00444_.WMF", cAlternateFileName="")) returned 1 [0238.354] wcscmp (_String1="SO00444_.WMF", _String2=".") returned 1 [0238.354] wcscmp (_String1="SO00444_.WMF", _String2="..") returned 1 [0238.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0238.354] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.354] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.354] wcscat (in: _Dest=0x3f26370, _Source="SO00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" [0238.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0238.356] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa497e100, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa497e100, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00452_.WMF", cAlternateFileName="")) returned 1 [0238.356] wcscmp (_String1="SO00452_.WMF", _String2=".") returned 1 [0238.356] wcscmp (_String1="SO00452_.WMF", _String2="..") returned 1 [0238.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27cf0 [0238.356] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.356] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.356] wcscat (in: _Dest=0x3f27cf0, _Source="SO00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" [0238.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0238.357] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ea20000, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9ea20000, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x59ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00453_.WMF", cAlternateFileName="")) returned 1 [0238.358] wcscmp (_String1="SO00453_.WMF", _String2=".") returned 1 [0238.358] wcscmp (_String1="SO00453_.WMF", _String2="..") returned 1 [0238.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0238.358] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.358] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.358] wcscat (in: _Dest=0x3f26838, _Source="SO00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" [0238.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0238.359] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3582fb00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3582fb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00454_.WMF", cAlternateFileName="")) returned 1 [0238.359] wcscmp (_String1="SO00454_.WMF", _String2=".") returned 1 [0238.359] wcscmp (_String1="SO00454_.WMF", _String2="..") returned 1 [0238.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0238.359] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.360] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.360] wcscat (in: _Dest=0x3f25f30, _Source="SO00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" [0238.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0238.361] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00466_.WMF", cAlternateFileName="")) returned 1 [0238.361] wcscmp (_String1="SO00466_.WMF", _String2=".") returned 1 [0238.361] wcscmp (_String1="SO00466_.WMF", _String2="..") returned 1 [0238.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0238.361] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.361] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.362] wcscat (in: _Dest=0x3f27030, _Source="SO00466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" [0238.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0238.363] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf30200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf30200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00476_.WMF", cAlternateFileName="")) returned 1 [0238.363] wcscmp (_String1="SO00476_.WMF", _String2=".") returned 1 [0238.363] wcscmp (_String1="SO00476_.WMF", _String2="..") returned 1 [0238.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f262e8 [0238.363] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.364] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.364] wcscat (in: _Dest=0x3f262e8, _Source="SO00476_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" [0238.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0238.368] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd173d600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd173d600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00479_.WMF", cAlternateFileName="")) returned 1 [0238.368] wcscmp (_String1="SO00479_.WMF", _String2=".") returned 1 [0238.368] wcscmp (_String1="SO00479_.WMF", _String2="..") returned 1 [0238.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27be0 [0238.368] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.368] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.368] wcscat (in: _Dest=0x3f27be0, _Source="SO00479_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" [0238.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0238.427] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1d500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1d500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00483_.WMF", cAlternateFileName="")) returned 1 [0238.427] wcscmp (_String1="SO00483_.WMF", _String2=".") returned 1 [0238.427] wcscmp (_String1="SO00483_.WMF", _String2="..") returned 1 [0238.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0238.427] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.427] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.427] wcscat (in: _Dest=0x3f268c0, _Source="SO00483_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" [0238.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0238.428] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30057800, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30057800, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00486_.WMF", cAlternateFileName="")) returned 1 [0238.428] wcscmp (_String1="SO00486_.WMF", _String2=".") returned 1 [0238.428] wcscmp (_String1="SO00486_.WMF", _String2="..") returned 1 [0238.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0238.429] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.429] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.429] wcscat (in: _Dest=0x3f27608, _Source="SO00486_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" [0238.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0238.430] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f88800, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49f88800, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0xaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00505_.WMF", cAlternateFileName="")) returned 1 [0238.430] wcscmp (_String1="SO00505_.WMF", _String2=".") returned 1 [0238.430] wcscmp (_String1="SO00505_.WMF", _String2="..") returned 1 [0238.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0238.430] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.430] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.430] wcscat (in: _Dest=0x3f279c0, _Source="SO00505_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" [0238.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0238.432] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90a800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90a800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00513_.WMF", cAlternateFileName="")) returned 1 [0238.432] wcscmp (_String1="SO00513_.WMF", _String2=".") returned 1 [0238.432] wcscmp (_String1="SO00513_.WMF", _String2="..") returned 1 [0238.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0238.432] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.432] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.432] wcscat (in: _Dest=0x3f266a0, _Source="SO00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" [0238.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0238.433] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2602, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00555_.WMF", cAlternateFileName="")) returned 1 [0238.433] wcscmp (_String1="SO00555_.WMF", _String2=".") returned 1 [0238.433] wcscmp (_String1="SO00555_.WMF", _String2="..") returned 1 [0238.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f277a0 [0238.434] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.434] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.434] wcscat (in: _Dest=0x3f277a0, _Source="SO00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" [0238.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0238.435] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bc7c00, ftCreationTime.dwHighDateTime=0x1c01cc1, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8bc7c00, ftLastWriteTime.dwHighDateTime=0x1c01cc1, nFileSizeHigh=0x0, nFileSizeLow=0x6260, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00603_.WMF", cAlternateFileName="")) returned 1 [0238.435] wcscmp (_String1="SO00603_.WMF", _String2=".") returned 1 [0238.435] wcscmp (_String1="SO00603_.WMF", _String2="..") returned 1 [0238.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26590 [0238.435] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.435] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.435] wcscat (in: _Dest=0x3f26590, _Source="SO00603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" [0238.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0238.436] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8683b00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8683b00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x9c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00610_.WMF", cAlternateFileName="")) returned 1 [0238.436] wcscmp (_String1="SO00610_.WMF", _String2=".") returned 1 [0238.436] wcscmp (_String1="SO00610_.WMF", _String2="..") returned 1 [0238.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27e00 [0238.436] wcscpy (in: _Dest=0x3f27e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.436] wcscat (in: _Dest=0x3f27e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.436] wcscat (in: _Dest=0x3f27e00, _Source="SO00610_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" [0238.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0238.438] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c1e400, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91c1e400, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00629_.WMF", cAlternateFileName="")) returned 1 [0238.441] wcscmp (_String1="SO00629_.WMF", _String2=".") returned 1 [0238.441] wcscmp (_String1="SO00629_.WMF", _String2="..") returned 1 [0238.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f273e8 [0238.441] wcscpy (in: _Dest=0x3f273e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.441] wcscat (in: _Dest=0x3f273e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.441] wcscat (in: _Dest=0x3f273e8, _Source="SO00629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" [0238.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f273e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0238.442] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f7b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5006, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00633_.WMF", cAlternateFileName="")) returned 1 [0238.442] wcscmp (_String1="SO00633_.WMF", _String2=".") returned 1 [0238.442] wcscmp (_String1="SO00633_.WMF", _String2="..") returned 1 [0238.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27d78 [0238.442] wcscpy (in: _Dest=0x3f27d78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.442] wcscat (in: _Dest=0x3f27d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.442] wcscat (in: _Dest=0x3f27d78, _Source="SO00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" [0238.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0238.443] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88387c00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88387c00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x1aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00638_.WMF", cAlternateFileName="")) returned 1 [0238.444] wcscmp (_String1="SO00638_.WMF", _String2=".") returned 1 [0238.444] wcscmp (_String1="SO00638_.WMF", _String2="..") returned 1 [0238.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26bf0 [0238.444] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.444] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.444] wcscat (in: _Dest=0x3f26bf0, _Source="SO00638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" [0238.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0238.445] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a1500, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe84a1500, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00656_.WMF", cAlternateFileName="")) returned 1 [0238.445] wcscmp (_String1="SO00656_.WMF", _String2=".") returned 1 [0238.445] wcscmp (_String1="SO00656_.WMF", _String2="..") returned 1 [0238.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d88 [0238.445] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.446] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.446] wcscat (in: _Dest=0x3f26d88, _Source="SO00656_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" [0238.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0238.447] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00668_.WMF", cAlternateFileName="")) returned 1 [0238.447] wcscmp (_String1="SO00668_.WMF", _String2=".") returned 1 [0238.447] wcscmp (_String1="SO00668_.WMF", _String2="..") returned 1 [0238.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26040 [0238.447] wcscpy (in: _Dest=0x3f26040, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.447] wcscat (in: _Dest=0x3f26040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.447] wcscat (in: _Dest=0x3f26040, _Source="SO00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" [0238.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0238.448] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00670_.WMF", cAlternateFileName="")) returned 1 [0238.448] wcscmp (_String1="SO00670_.WMF", _String2=".") returned 1 [0238.448] wcscmp (_String1="SO00670_.WMF", _String2="..") returned 1 [0238.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26150 [0238.449] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.449] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.449] wcscat (in: _Dest=0x3f26150, _Source="SO00670_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" [0238.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0238.450] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00671_.WMF", cAlternateFileName="")) returned 1 [0238.450] wcscmp (_String1="SO00671_.WMF", _String2=".") returned 1 [0238.450] wcscmp (_String1="SO00671_.WMF", _String2="..") returned 1 [0238.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efbf8 [0238.450] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.450] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.450] wcscat (in: _Dest=0x66efbf8, _Source="SO00671_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" [0238.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0238.452] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1449a400, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1449a400, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00683_.WMF", cAlternateFileName="")) returned 1 [0238.452] wcscmp (_String1="SO00683_.WMF", _String2=".") returned 1 [0238.452] wcscmp (_String1="SO00683_.WMF", _String2="..") returned 1 [0238.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd90 [0238.452] wcscpy (in: _Dest=0x66efd90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.452] wcscat (in: _Dest=0x66efd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.452] wcscat (in: _Dest=0x66efd90, _Source="SO00683_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" [0238.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0238.453] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00694_.WMF", cAlternateFileName="")) returned 1 [0238.454] wcscmp (_String1="SO00694_.WMF", _String2=".") returned 1 [0238.454] wcscmp (_String1="SO00694_.WMF", _String2="..") returned 1 [0238.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0038 [0238.454] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.454] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.454] wcscat (in: _Dest=0x66f0038, _Source="SO00694_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" [0238.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0238.455] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3636, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00704_.WMF", cAlternateFileName="")) returned 1 [0238.455] wcscmp (_String1="SO00704_.WMF", _String2=".") returned 1 [0238.455] wcscmp (_String1="SO00704_.WMF", _String2="..") returned 1 [0238.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eed18 [0238.455] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.455] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.455] wcscat (in: _Dest=0x66eed18, _Source="SO00704_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" [0238.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0238.457] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcc9000, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbcc9000, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00726_.WMF", cAlternateFileName="")) returned 1 [0238.457] wcscmp (_String1="SO00726_.WMF", _String2=".") returned 1 [0238.457] wcscmp (_String1="SO00726_.WMF", _String2="..") returned 1 [0238.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0368 [0238.457] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.457] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.457] wcscat (in: _Dest=0x66f0368, _Source="SO00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" [0238.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0238.459] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2543400, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2543400, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00728_.WMF", cAlternateFileName="")) returned 1 [0238.459] wcscmp (_String1="SO00728_.WMF", _String2=".") returned 1 [0238.459] wcscmp (_String1="SO00728_.WMF", _String2="..") returned 1 [0238.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0238.459] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.459] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.459] wcscat (in: _Dest=0x66ef2f0, _Source="SO00728_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" [0238.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0238.460] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cbc900, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5cbc900, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00732_.WMF", cAlternateFileName="")) returned 1 [0238.460] wcscmp (_String1="SO00732_.WMF", _String2=".") returned 1 [0238.460] wcscmp (_String1="SO00732_.WMF", _String2="..") returned 1 [0238.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efe18 [0238.460] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.460] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.460] wcscat (in: _Dest=0x66efe18, _Source="SO00732_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" [0238.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0238.462] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3696f00, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3696f00, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00734_.WMF", cAlternateFileName="")) returned 1 [0238.462] wcscmp (_String1="SO00734_.WMF", _String2=".") returned 1 [0238.462] wcscmp (_String1="SO00734_.WMF", _String2="..") returned 1 [0238.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0258 [0238.462] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.462] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.462] wcscat (in: _Dest=0x66f0258, _Source="SO00734_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" [0238.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0238.463] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2384200, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2384200, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00735_.WMF", cAlternateFileName="")) returned 1 [0238.463] wcscmp (_String1="SO00735_.WMF", _String2=".") returned 1 [0238.463] wcscmp (_String1="SO00735_.WMF", _String2="..") returned 1 [0238.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee6b8 [0238.463] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.463] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.463] wcscat (in: _Dest=0x66ee6b8, _Source="SO00735_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" [0238.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0238.465] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec0ad00, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec0ad00, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x184c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00736_.WMF", cAlternateFileName="")) returned 1 [0238.465] wcscmp (_String1="SO00736_.WMF", _String2=".") returned 1 [0238.465] wcscmp (_String1="SO00736_.WMF", _String2="..") returned 1 [0238.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efc80 [0238.465] wcscpy (in: _Dest=0x66efc80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.465] wcscat (in: _Dest=0x66efc80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.465] wcscat (in: _Dest=0x66efc80, _Source="SO00736_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" [0238.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efc80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0238.513] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e4e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92e4e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x543a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00768_.WMF", cAlternateFileName="")) returned 1 [0238.513] wcscmp (_String1="SO00768_.WMF", _String2=".") returned 1 [0238.513] wcscmp (_String1="SO00768_.WMF", _String2="..") returned 1 [0238.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee7c8 [0238.513] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.513] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.513] wcscat (in: _Dest=0x66ee7c8, _Source="SO00768_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" [0238.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0238.518] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ebfa00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x16ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00783_.WMF", cAlternateFileName="")) returned 1 [0238.518] wcscmp (_String1="SO00783_.WMF", _String2=".") returned 1 [0238.518] wcscmp (_String1="SO00783_.WMF", _String2="..") returned 1 [0238.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeb80 [0238.518] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.519] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.519] wcscat (in: _Dest=0x66eeb80, _Source="SO00783_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" [0238.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0238.520] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8444700, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8444700, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00820_.WMF", cAlternateFileName="")) returned 1 [0238.520] wcscmp (_String1="SO00820_.WMF", _String2=".") returned 1 [0238.520] wcscmp (_String1="SO00820_.WMF", _String2="..") returned 1 [0238.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef378 [0238.520] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.520] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.521] wcscat (in: _Dest=0x66ef378, _Source="SO00820_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" [0238.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0238.522] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816e3100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x816e3100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00828_.WMF", cAlternateFileName="")) returned 1 [0238.522] wcscmp (_String1="SO00828_.WMF", _String2=".") returned 1 [0238.522] wcscmp (_String1="SO00828_.WMF", _String2="..") returned 1 [0238.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef730 [0238.522] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.522] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.522] wcscat (in: _Dest=0x66ef730, _Source="SO00828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" [0238.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0238.523] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a0cc00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63a0cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00834_.WMF", cAlternateFileName="")) returned 1 [0238.523] wcscmp (_String1="SO00834_.WMF", _String2=".") returned 1 [0238.523] wcscmp (_String1="SO00834_.WMF", _String2="..") returned 1 [0238.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eee28 [0238.524] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.524] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.524] wcscat (in: _Dest=0x66eee28, _Source="SO00834_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" [0238.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0238.525] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b489100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b489100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00837_.WMF", cAlternateFileName="")) returned 1 [0238.525] wcscmp (_String1="SO00837_.WMF", _String2=".") returned 1 [0238.525] wcscmp (_String1="SO00837_.WMF", _String2="..") returned 1 [0238.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efea0 [0238.525] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.525] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.525] wcscat (in: _Dest=0x66efea0, _Source="SO00837_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" [0238.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0238.527] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00910_.WMF", cAlternateFileName="")) returned 1 [0238.527] wcscmp (_String1="SO00910_.WMF", _String2=".") returned 1 [0238.527] wcscmp (_String1="SO00910_.WMF", _String2="..") returned 1 [0238.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f03f0 [0238.527] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.527] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.527] wcscat (in: _Dest=0x66f03f0, _Source="SO00910_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" [0238.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0238.528] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00911_.WMF", cAlternateFileName="")) returned 1 [0238.528] wcscmp (_String1="SO00911_.WMF", _String2=".") returned 1 [0238.528] wcscmp (_String1="SO00911_.WMF", _String2="..") returned 1 [0238.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec08 [0238.528] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.528] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.528] wcscat (in: _Dest=0x66eec08, _Source="SO00911_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" [0238.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0238.530] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00913_.WMF", cAlternateFileName="")) returned 1 [0238.530] wcscmp (_String1="SO00913_.WMF", _String2=".") returned 1 [0238.530] wcscmp (_String1="SO00913_.WMF", _String2="..") returned 1 [0238.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef048 [0238.530] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.530] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.530] wcscat (in: _Dest=0x66ef048, _Source="SO00913_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" [0238.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0238.531] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00914_.WMF", cAlternateFileName="")) returned 1 [0238.531] wcscmp (_String1="SO00914_.WMF", _String2=".") returned 1 [0238.532] wcscmp (_String1="SO00914_.WMF", _String2="..") returned 1 [0238.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a1d0 [0238.532] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.532] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.532] wcscat (in: _Dest=0x3d5a1d0, _Source="SO00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" [0238.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0238.533] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00915_.WMF", cAlternateFileName="")) returned 1 [0238.533] wcscmp (_String1="SO00915_.WMF", _String2=".") returned 1 [0238.533] wcscmp (_String1="SO00915_.WMF", _String2="..") returned 1 [0238.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58630 [0238.533] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.533] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.534] wcscat (in: _Dest=0x3d58630, _Source="SO00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" [0238.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0238.536] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00916_.WMF", cAlternateFileName="")) returned 1 [0238.537] wcscmp (_String1="SO00916_.WMF", _String2=".") returned 1 [0238.537] wcscmp (_String1="SO00916_.WMF", _String2="..") returned 1 [0238.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0238.537] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.537] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.537] wcscat (in: _Dest=0x3d59e18, _Source="SO00916_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" [0238.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0238.540] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00917_.WMF", cAlternateFileName="")) returned 1 [0238.540] wcscmp (_String1="SO00917_.WMF", _String2=".") returned 1 [0238.540] wcscmp (_String1="SO00917_.WMF", _String2="..") returned 1 [0238.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59488 [0238.540] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.540] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.541] wcscat (in: _Dest=0x3d59488, _Source="SO00917_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" [0238.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0238.542] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00918_.WMF", cAlternateFileName="")) returned 1 [0238.542] wcscmp (_String1="SO00918_.WMF", _String2=".") returned 1 [0238.542] wcscmp (_String1="SO00918_.WMF", _String2="..") returned 1 [0238.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a3f0 [0238.542] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.542] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.542] wcscat (in: _Dest=0x3d5a3f0, _Source="SO00918_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" [0238.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0238.543] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2944, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00935_.WMF", cAlternateFileName="")) returned 1 [0238.543] wcscmp (_String1="SO00935_.WMF", _String2=".") returned 1 [0238.543] wcscmp (_String1="SO00935_.WMF", _String2="..") returned 1 [0238.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a2e0 [0238.544] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.544] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.544] wcscat (in: _Dest=0x3d5a2e0, _Source="SO00935_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" [0238.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0238.545] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00938_.WMF", cAlternateFileName="")) returned 1 [0238.545] wcscmp (_String1="SO00938_.WMF", _String2=".") returned 1 [0238.545] wcscmp (_String1="SO00938_.WMF", _String2="..") returned 1 [0238.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a148 [0238.545] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.545] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.545] wcscat (in: _Dest=0x3d5a148, _Source="SO00938_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" [0238.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0238.553] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1708, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00941_.WMF", cAlternateFileName="")) returned 1 [0238.553] wcscmp (_String1="SO00941_.WMF", _String2=".") returned 1 [0238.553] wcscmp (_String1="SO00941_.WMF", _String2="..") returned 1 [0238.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58eb0 [0238.553] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.553] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.553] wcscat (in: _Dest=0x3d58eb0, _Source="SO00941_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" [0238.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0238.555] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00942_.WMF", cAlternateFileName="")) returned 1 [0238.555] wcscmp (_String1="SO00942_.WMF", _String2=".") returned 1 [0238.555] wcscmp (_String1="SO00942_.WMF", _String2="..") returned 1 [0238.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59730 [0238.555] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.555] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.555] wcscat (in: _Dest=0x3d59730, _Source="SO00942_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" [0238.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0238.556] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00943_.WMF", cAlternateFileName="")) returned 1 [0238.570] wcscmp (_String1="SO00943_.WMF", _String2=".") returned 1 [0238.570] wcscmp (_String1="SO00943_.WMF", _String2="..") returned 1 [0238.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58740 [0238.570] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.570] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.570] wcscat (in: _Dest=0x3d58740, _Source="SO00943_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" [0238.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0238.571] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a853900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a853900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0xae1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01044_.WMF", cAlternateFileName="")) returned 1 [0238.571] wcscmp (_String1="SO01044_.WMF", _String2=".") returned 1 [0238.571] wcscmp (_String1="SO01044_.WMF", _String2="..") returned 1 [0238.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a368 [0238.572] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.572] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.572] wcscat (in: _Dest=0x3d5a368, _Source="SO01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" [0238.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0238.573] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d684a00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d684a00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x5b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01063_.WMF", cAlternateFileName="")) returned 1 [0238.573] wcscmp (_String1="SO01063_.WMF", _String2=".") returned 1 [0238.573] wcscmp (_String1="SO01063_.WMF", _String2="..") returned 1 [0238.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a258 [0238.573] wcscpy (in: _Dest=0x3d5a258, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.573] wcscat (in: _Dest=0x3d5a258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.573] wcscat (in: _Dest=0x3d5a258, _Source="SO01063_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" [0238.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0238.574] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01236_.WMF", cAlternateFileName="")) returned 1 [0238.574] wcscmp (_String1="SO01236_.WMF", _String2=".") returned 1 [0238.574] wcscmp (_String1="SO01236_.WMF", _String2="..") returned 1 [0238.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d597b8 [0238.574] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.574] wcscat (in: _Dest=0x3d597b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.574] wcscat (in: _Dest=0x3d597b8, _Source="SO01236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" [0238.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d597b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0238.603] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e197c00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e197c00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x43b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01560_.WMF", cAlternateFileName="")) returned 1 [0238.603] wcscmp (_String1="SO01560_.WMF", _String2=".") returned 1 [0238.603] wcscmp (_String1="SO01560_.WMF", _String2="..") returned 1 [0238.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d585a8 [0238.603] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.603] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.603] wcscat (in: _Dest=0x3d585a8, _Source="SO01560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" [0238.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0238.604] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e5e300, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57e5e300, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x59d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01561_.WMF", cAlternateFileName="")) returned 1 [0238.604] wcscmp (_String1="SO01561_.WMF", _String2=".") returned 1 [0238.604] wcscmp (_String1="SO01561_.WMF", _String2="..") returned 1 [0238.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d586b8 [0238.604] wcscpy (in: _Dest=0x3d586b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.604] wcscat (in: _Dest=0x3d586b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.605] wcscat (in: _Dest=0x3d586b8, _Source="SO01561_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" [0238.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d586b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0238.606] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55838900, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55838900, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x75ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01563_.WMF", cAlternateFileName="")) returned 1 [0238.606] wcscmp (_String1="SO01563_.WMF", _String2=".") returned 1 [0238.606] wcscmp (_String1="SO01563_.WMF", _String2="..") returned 1 [0238.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59510 [0238.606] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.606] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.606] wcscat (in: _Dest=0x3d59510, _Source="SO01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" [0238.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0238.607] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f00200, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f00200, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x51a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01566_.WMF", cAlternateFileName="")) returned 1 [0238.607] wcscmp (_String1="SO01566_.WMF", _String2=".") returned 1 [0238.607] wcscmp (_String1="SO01566_.WMF", _String2="..") returned 1 [0238.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59b70 [0238.608] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.608] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.608] wcscat (in: _Dest=0x3d59b70, _Source="SO01566_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" [0238.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0238.609] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f05200, ftCreationTime.dwHighDateTime=0x1bd4b73, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3f05200, ftLastWriteTime.dwHighDateTime=0x1bd4b73, nFileSizeHigh=0x0, nFileSizeLow=0x54b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01568_.WMF", cAlternateFileName="")) returned 1 [0238.609] wcscmp (_String1="SO01568_.WMF", _String2=".") returned 1 [0238.609] wcscmp (_String1="SO01568_.WMF", _String2="..") returned 1 [0238.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0238.609] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.609] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.609] wcscat (in: _Dest=0x36ead8, _Source="SO01568_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" [0238.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0238.610] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea5400, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51ea5400, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01569_.WMF", cAlternateFileName="")) returned 1 [0238.610] wcscmp (_String1="SO01569_.WMF", _String2=".") returned 1 [0238.610] wcscmp (_String1="SO01569_.WMF", _String2="..") returned 1 [0238.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0238.610] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.610] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.610] wcscat (in: _Dest=0x36e500, _Source="SO01569_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" [0238.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0238.611] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62947e00, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62947e00, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01575_.WMF", cAlternateFileName="")) returned 1 [0238.612] wcscmp (_String1="SO01575_.WMF", _String2=".") returned 1 [0238.612] wcscmp (_String1="SO01575_.WMF", _String2="..") returned 1 [0238.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0238.612] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.612] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.612] wcscat (in: _Dest=0x36ed80, _Source="SO01575_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" [0238.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0238.613] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7c800, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6dc7c800, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01777_.WMF", cAlternateFileName="")) returned 1 [0238.613] wcscmp (_String1="SO01777_.WMF", _String2=".") returned 1 [0238.613] wcscmp (_String1="SO01777_.WMF", _String2="..") returned 1 [0238.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0238.614] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.614] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.614] wcscat (in: _Dest=0x36e478, _Source="SO01777_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" [0238.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0238.615] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01785_.WMF", cAlternateFileName="")) returned 1 [0238.615] wcscmp (_String1="SO01785_.WMF", _String2=".") returned 1 [0238.615] wcscmp (_String1="SO01785_.WMF", _String2="..") returned 1 [0238.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0238.615] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.615] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.615] wcscat (in: _Dest=0x36fc60, _Source="SO01785_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" [0238.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0238.616] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d980900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d980900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01805_.WMF", cAlternateFileName="")) returned 1 [0238.616] wcscmp (_String1="SO01805_.WMF", _String2=".") returned 1 [0238.616] wcscmp (_String1="SO01805_.WMF", _String2="..") returned 1 [0238.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f820 [0238.617] wcscpy (in: _Dest=0x36f820, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.617] wcscat (in: _Dest=0x36f820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.617] wcscat (in: _Dest=0x36f820, _Source="SO01805_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" [0238.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36f820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0238.618] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78626d00, ftCreationTime.dwHighDateTime=0x1bd4b5d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78626d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01905_.WMF", cAlternateFileName="")) returned 1 [0238.618] wcscmp (_String1="SO01905_.WMF", _String2=".") returned 1 [0238.618] wcscmp (_String1="SO01905_.WMF", _String2="..") returned 1 [0238.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099c68 [0238.618] wcscpy (in: _Dest=0x3099c68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.618] wcscat (in: _Dest=0x3099c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.618] wcscat (in: _Dest=0x3099c68, _Source="SO01905_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" [0238.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0238.620] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3086, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01954_.WMF", cAlternateFileName="")) returned 1 [0238.620] wcscmp (_String1="SO01954_.WMF", _String2=".") returned 1 [0238.620] wcscmp (_String1="SO01954_.WMF", _String2="..") returned 1 [0238.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099e00 [0238.620] wcscpy (in: _Dest=0x3099e00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.620] wcscat (in: _Dest=0x3099e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.620] wcscat (in: _Dest=0x3099e00, _Source="SO01954_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" [0238.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0238.621] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02009_.WMF", cAlternateFileName="")) returned 1 [0238.621] wcscmp (_String1="SO02009_.WMF", _String2=".") returned 1 [0238.621] wcscmp (_String1="SO02009_.WMF", _String2="..") returned 1 [0238.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099cf0 [0238.621] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.622] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.622] wcscat (in: _Dest=0x3099cf0, _Source="SO02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" [0238.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0238.623] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02022_.WMF", cAlternateFileName="")) returned 1 [0238.623] wcscmp (_String1="SO02022_.WMF", _String2=".") returned 1 [0238.623] wcscmp (_String1="SO02022_.WMF", _String2="..") returned 1 [0238.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099ad0 [0238.623] wcscpy (in: _Dest=0x3099ad0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.623] wcscat (in: _Dest=0x3099ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.623] wcscat (in: _Dest=0x3099ad0, _Source="SO02022_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" [0238.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0238.624] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02024_.WMF", cAlternateFileName="")) returned 1 [0238.624] wcscmp (_String1="SO02024_.WMF", _String2=".") returned 1 [0238.624] wcscmp (_String1="SO02024_.WMF", _String2="..") returned 1 [0238.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a570 [0238.624] wcscpy (in: _Dest=0x309a570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.624] wcscat (in: _Dest=0x309a570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.624] wcscat (in: _Dest=0x309a570, _Source="SO02024_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" [0238.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x309a570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0238.627] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2016, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02025_.WMF", cAlternateFileName="")) returned 1 [0238.627] wcscmp (_String1="SO02025_.WMF", _String2=".") returned 1 [0238.627] wcscmp (_String1="SO02025_.WMF", _String2="..") returned 1 [0238.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e089e0 [0238.627] wcscpy (in: _Dest=0x3e089e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.627] wcscat (in: _Dest=0x3e089e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.627] wcscat (in: _Dest=0x3e089e0, _Source="SO02025_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" [0238.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e089e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0238.629] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02028_.WMF", cAlternateFileName="")) returned 1 [0238.629] wcscmp (_String1="SO02028_.WMF", _String2=".") returned 1 [0238.629] wcscmp (_String1="SO02028_.WMF", _String2="..") returned 1 [0238.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e08270 [0238.629] wcscpy (in: _Dest=0x3e08270, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.629] wcscat (in: _Dest=0x3e08270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.629] wcscat (in: _Dest=0x3e08270, _Source="SO02028_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" [0238.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0238.630] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x266c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02045_.WMF", cAlternateFileName="")) returned 1 [0238.631] wcscmp (_String1="SO02045_.WMF", _String2=".") returned 1 [0238.631] wcscmp (_String1="SO02045_.WMF", _String2="..") returned 1 [0238.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0238.631] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.631] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.631] wcscat (in: _Dest=0x3061f70, _Source="SO02045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" [0238.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0238.632] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02048_.WMF", cAlternateFileName="")) returned 1 [0238.632] wcscmp (_String1="SO02048_.WMF", _String2=".") returned 1 [0238.632] wcscmp (_String1="SO02048_.WMF", _String2="..") returned 1 [0238.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674eab8 [0238.632] wcscpy (in: _Dest=0x674eab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.632] wcscat (in: _Dest=0x674eab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.632] wcscat (in: _Dest=0x674eab8, _Source="SO02048_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" [0238.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674eab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0238.633] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02051_.WMF", cAlternateFileName="")) returned 1 [0238.633] wcscmp (_String1="SO02051_.WMF", _String2=".") returned 1 [0238.633] wcscmp (_String1="SO02051_.WMF", _String2="..") returned 1 [0238.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674eb40 [0238.633] wcscpy (in: _Dest=0x674eb40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.633] wcscat (in: _Dest=0x674eb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.633] wcscat (in: _Dest=0x674eb40, _Source="SO02051_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" [0238.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674eb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0238.634] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23525400, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23525400, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x30ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02054_.WMF", cAlternateFileName="")) returned 1 [0238.634] wcscmp (_String1="SO02054_.WMF", _String2=".") returned 1 [0238.634] wcscmp (_String1="SO02054_.WMF", _String2="..") returned 1 [0238.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ebc8 [0238.635] wcscpy (in: _Dest=0x674ebc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.635] wcscat (in: _Dest=0x674ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.635] wcscat (in: _Dest=0x674ebc8, _Source="SO02054_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" [0238.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ebc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0238.636] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22212700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22212700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02055_.WMF", cAlternateFileName="")) returned 1 [0238.636] wcscmp (_String1="SO02055_.WMF", _String2=".") returned 1 [0238.636] wcscmp (_String1="SO02055_.WMF", _String2="..") returned 1 [0238.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ec50 [0238.636] wcscpy (in: _Dest=0x674ec50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.636] wcscat (in: _Dest=0x674ec50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.636] wcscat (in: _Dest=0x674ec50, _Source="SO02055_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" [0238.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ec50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0238.637] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1897bf00, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1897bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x382a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02067_.WMF", cAlternateFileName="")) returned 1 [0238.637] wcscmp (_String1="SO02067_.WMF", _String2=".") returned 1 [0238.637] wcscmp (_String1="SO02067_.WMF", _String2="..") returned 1 [0238.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ecd8 [0238.637] wcscpy (in: _Dest=0x674ecd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.637] wcscat (in: _Dest=0x674ecd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.637] wcscat (in: _Dest=0x674ecd8, _Source="SO02067_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" [0238.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0238.638] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8680000, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8680000, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02094_.WMF", cAlternateFileName="")) returned 1 [0238.638] wcscmp (_String1="SO02094_.WMF", _String2=".") returned 1 [0238.638] wcscmp (_String1="SO02094_.WMF", _String2="..") returned 1 [0238.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ed60 [0238.639] wcscpy (in: _Dest=0x674ed60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.639] wcscat (in: _Dest=0x674ed60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.639] wcscat (in: _Dest=0x674ed60, _Source="SO02094_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" [0238.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ed60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0238.654] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b04ff00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b04ff00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02227_.WMF", cAlternateFileName="")) returned 1 [0238.654] wcscmp (_String1="SO02227_.WMF", _String2=".") returned 1 [0238.654] wcscmp (_String1="SO02227_.WMF", _String2="..") returned 1 [0238.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ede8 [0238.654] wcscpy (in: _Dest=0x674ede8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.654] wcscat (in: _Dest=0x674ede8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.654] wcscat (in: _Dest=0x674ede8, _Source="SO02227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" [0238.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0238.655] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d72f500, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d72f500, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02228_.WMF", cAlternateFileName="")) returned 1 [0238.655] wcscmp (_String1="SO02228_.WMF", _String2=".") returned 1 [0238.655] wcscmp (_String1="SO02228_.WMF", _String2="..") returned 1 [0238.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ee70 [0238.655] wcscpy (in: _Dest=0x674ee70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.655] wcscat (in: _Dest=0x674ee70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.655] wcscat (in: _Dest=0x674ee70, _Source="SO02228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" [0238.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0238.657] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7207ea00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7207ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02233_.WMF", cAlternateFileName="")) returned 1 [0238.657] wcscmp (_String1="SO02233_.WMF", _String2=".") returned 1 [0238.657] wcscmp (_String1="SO02233_.WMF", _String2="..") returned 1 [0238.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674eef8 [0238.657] wcscpy (in: _Dest=0x674eef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.657] wcscat (in: _Dest=0x674eef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.657] wcscat (in: _Dest=0x674eef8, _Source="SO02233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" [0238.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674eef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0238.658] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9207200, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9207200, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02252_.WMF", cAlternateFileName="")) returned 1 [0238.658] wcscmp (_String1="SO02252_.WMF", _String2=".") returned 1 [0238.658] wcscmp (_String1="SO02252_.WMF", _String2="..") returned 1 [0238.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ef80 [0238.658] wcscpy (in: _Dest=0x674ef80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.658] wcscat (in: _Dest=0x674ef80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.658] wcscat (in: _Dest=0x674ef80, _Source="SO02252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" [0238.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0238.659] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bbe00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45bbe00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02253_.WMF", cAlternateFileName="")) returned 1 [0238.659] wcscmp (_String1="SO02253_.WMF", _String2=".") returned 1 [0238.659] wcscmp (_String1="SO02253_.WMF", _String2="..") returned 1 [0238.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f008 [0238.659] wcscpy (in: _Dest=0x674f008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.659] wcscat (in: _Dest=0x674f008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.659] wcscat (in: _Dest=0x674f008, _Source="SO02253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" [0238.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0238.660] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96b9c00, ftCreationTime.dwHighDateTime=0x1bd4c48, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa96b9c00, ftLastWriteTime.dwHighDateTime=0x1bd4c48, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02261_.WMF", cAlternateFileName="")) returned 1 [0238.660] wcscmp (_String1="SO02261_.WMF", _String2=".") returned 1 [0238.660] wcscmp (_String1="SO02261_.WMF", _String2="..") returned 1 [0238.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f090 [0238.660] wcscpy (in: _Dest=0x674f090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0238.660] wcscat (in: _Dest=0x674f090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0238.660] wcscat (in: _Dest=0x674f090, _Source="SO02261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" [0238.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0238.661] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1192f00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1192f00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02263_.WMF", cAlternateFileName="")) returned 1 [0239.107] wcscmp (_String1="SO02263_.WMF", _String2=".") returned 1 [0239.107] wcscmp (_String1="SO02263_.WMF", _String2="..") returned 1 [0239.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f118 [0239.107] wcscpy (in: _Dest=0x674f118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.107] wcscat (in: _Dest=0x674f118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.107] wcscat (in: _Dest=0x674f118, _Source="SO02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" [0239.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0239.108] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78fc700, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc78fc700, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02265_.WMF", cAlternateFileName="")) returned 1 [0239.108] wcscmp (_String1="SO02265_.WMF", _String2=".") returned 1 [0239.108] wcscmp (_String1="SO02265_.WMF", _String2="..") returned 1 [0239.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f1a0 [0239.108] wcscpy (in: _Dest=0x674f1a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.108] wcscat (in: _Dest=0x674f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.108] wcscat (in: _Dest=0x674f1a0, _Source="SO02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" [0239.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0239.109] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34bca00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34bca00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02268_.WMF", cAlternateFileName="")) returned 1 [0239.109] wcscmp (_String1="SO02268_.WMF", _String2=".") returned 1 [0239.109] wcscmp (_String1="SO02268_.WMF", _String2="..") returned 1 [0239.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f228 [0239.109] wcscpy (in: _Dest=0x674f228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.109] wcscat (in: _Dest=0x674f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.109] wcscat (in: _Dest=0x674f228, _Source="SO02268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" [0239.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0239.110] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb84300, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb84300, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02269_.WMF", cAlternateFileName="")) returned 1 [0239.110] wcscmp (_String1="SO02269_.WMF", _String2=".") returned 1 [0239.110] wcscmp (_String1="SO02269_.WMF", _String2="..") returned 1 [0239.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f2b0 [0239.110] wcscpy (in: _Dest=0x674f2b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.110] wcscat (in: _Dest=0x674f2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.110] wcscat (in: _Dest=0x674f2b0, _Source="SO02269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" [0239.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0239.111] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac24bc00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac24bc00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02270_.WMF", cAlternateFileName="")) returned 1 [0239.111] wcscmp (_String1="SO02270_.WMF", _String2=".") returned 1 [0239.111] wcscmp (_String1="SO02270_.WMF", _String2="..") returned 1 [0239.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f338 [0239.111] wcscpy (in: _Dest=0x674f338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.111] wcscat (in: _Dest=0x674f338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.111] wcscat (in: _Dest=0x674f338, _Source="SO02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" [0239.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0239.112] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98cb1e00, ftCreationTime.dwHighDateTime=0x1bd4c68, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98cb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4c68, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02276_.WMF", cAlternateFileName="")) returned 1 [0239.112] wcscmp (_String1="SO02276_.WMF", _String2=".") returned 1 [0239.112] wcscmp (_String1="SO02276_.WMF", _String2="..") returned 1 [0239.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f3c0 [0239.112] wcscpy (in: _Dest=0x674f3c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.112] wcscat (in: _Dest=0x674f3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.112] wcscat (in: _Dest=0x674f3c0, _Source="SO02276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" [0239.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0239.113] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b25f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3b25f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02413_.WMF", cAlternateFileName="")) returned 1 [0239.113] wcscmp (_String1="SO02413_.WMF", _String2=".") returned 1 [0239.113] wcscmp (_String1="SO02413_.WMF", _String2="..") returned 1 [0239.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f448 [0239.113] wcscpy (in: _Dest=0x674f448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.113] wcscat (in: _Dest=0x674f448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.113] wcscat (in: _Dest=0x674f448, _Source="SO02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" [0239.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0239.114] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a389100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a389100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02431_.WMF", cAlternateFileName="")) returned 1 [0239.114] wcscmp (_String1="SO02431_.WMF", _String2=".") returned 1 [0239.114] wcscmp (_String1="SO02431_.WMF", _String2="..") returned 1 [0239.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f4d0 [0239.114] wcscpy (in: _Dest=0x674f4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.114] wcscat (in: _Dest=0x674f4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.115] wcscat (in: _Dest=0x674f4d0, _Source="SO02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" [0239.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0239.115] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b49c00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28b49c00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02437_.WMF", cAlternateFileName="")) returned 1 [0239.115] wcscmp (_String1="SO02437_.WMF", _String2=".") returned 1 [0239.116] wcscmp (_String1="SO02437_.WMF", _String2="..") returned 1 [0239.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f558 [0239.116] wcscpy (in: _Dest=0x674f558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.116] wcscat (in: _Dest=0x674f558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.116] wcscat (in: _Dest=0x674f558, _Source="SO02437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" [0239.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0239.117] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc8da00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc8da00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02439_.WMF", cAlternateFileName="")) returned 1 [0239.117] wcscmp (_String1="SO02439_.WMF", _String2=".") returned 1 [0239.117] wcscmp (_String1="SO02439_.WMF", _String2="..") returned 1 [0239.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f5e0 [0239.117] wcscpy (in: _Dest=0x674f5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.117] wcscat (in: _Dest=0x674f5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.117] wcscat (in: _Dest=0x674f5e0, _Source="SO02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" [0239.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0239.118] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02464_.WMF", cAlternateFileName="")) returned 1 [0239.118] wcscmp (_String1="SO02464_.WMF", _String2=".") returned 1 [0239.118] wcscmp (_String1="SO02464_.WMF", _String2="..") returned 1 [0239.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f668 [0239.118] wcscpy (in: _Dest=0x674f668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.118] wcscat (in: _Dest=0x674f668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.118] wcscat (in: _Dest=0x674f668, _Source="SO02464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" [0239.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0239.119] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78816c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78816c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02465_.WMF", cAlternateFileName="")) returned 1 [0239.119] wcscmp (_String1="SO02465_.WMF", _String2=".") returned 1 [0239.119] wcscmp (_String1="SO02465_.WMF", _String2="..") returned 1 [0239.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f6f0 [0239.119] wcscpy (in: _Dest=0x674f6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.119] wcscat (in: _Dest=0x674f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.119] wcscat (in: _Dest=0x674f6f0, _Source="SO02465_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" [0239.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0239.120] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02578_.WMF", cAlternateFileName="")) returned 1 [0239.120] wcscmp (_String1="SO02578_.WMF", _String2=".") returned 1 [0239.120] wcscmp (_String1="SO02578_.WMF", _String2="..") returned 1 [0239.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f778 [0239.120] wcscpy (in: _Dest=0x674f778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.120] wcscat (in: _Dest=0x674f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.120] wcscat (in: _Dest=0x674f778, _Source="SO02578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" [0239.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0239.121] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c080800, ftCreationTime.dwHighDateTime=0x1bd4cb3, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c080800, ftLastWriteTime.dwHighDateTime=0x1bd4cb3, nFileSizeHigh=0x0, nFileSizeLow=0x5fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02617_.WMF", cAlternateFileName="")) returned 1 [0239.121] wcscmp (_String1="SO02617_.WMF", _String2=".") returned 1 [0239.121] wcscmp (_String1="SO02617_.WMF", _String2="..") returned 1 [0239.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f800 [0239.121] wcscpy (in: _Dest=0x674f800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.121] wcscat (in: _Dest=0x674f800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.121] wcscat (in: _Dest=0x674f800, _Source="SO02617_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" [0239.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0239.122] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02790_.WMF", cAlternateFileName="")) returned 1 [0239.122] wcscmp (_String1="SO02790_.WMF", _String2=".") returned 1 [0239.122] wcscmp (_String1="SO02790_.WMF", _String2="..") returned 1 [0239.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f888 [0239.123] wcscpy (in: _Dest=0x674f888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.123] wcscat (in: _Dest=0x674f888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.123] wcscat (in: _Dest=0x674f888, _Source="SO02790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" [0239.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0239.124] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x430c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02791_.WMF", cAlternateFileName="")) returned 1 [0239.124] wcscmp (_String1="SO02791_.WMF", _String2=".") returned 1 [0239.124] wcscmp (_String1="SO02791_.WMF", _String2="..") returned 1 [0239.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f910 [0239.124] wcscpy (in: _Dest=0x674f910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.124] wcscat (in: _Dest=0x674f910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.124] wcscat (in: _Dest=0x674f910, _Source="SO02791_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" [0239.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0239.125] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02793_.WMF", cAlternateFileName="")) returned 1 [0239.125] wcscmp (_String1="SO02793_.WMF", _String2=".") returned 1 [0239.125] wcscmp (_String1="SO02793_.WMF", _String2="..") returned 1 [0239.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674f998 [0239.125] wcscpy (in: _Dest=0x674f998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.125] wcscat (in: _Dest=0x674f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.125] wcscat (in: _Dest=0x674f998, _Source="SO02793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" [0239.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0239.126] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02794_.WMF", cAlternateFileName="")) returned 1 [0239.126] wcscmp (_String1="SO02794_.WMF", _String2=".") returned 1 [0239.126] wcscmp (_String1="SO02794_.WMF", _String2="..") returned 1 [0239.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fa20 [0239.126] wcscpy (in: _Dest=0x674fa20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.127] wcscat (in: _Dest=0x674fa20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.127] wcscat (in: _Dest=0x674fa20, _Source="SO02794_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" [0239.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fa20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0239.127] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1262e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02862_.WMF", cAlternateFileName="")) returned 1 [0239.128] wcscmp (_String1="SO02862_.WMF", _String2=".") returned 1 [0239.128] wcscmp (_String1="SO02862_.WMF", _String2="..") returned 1 [0239.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674faa8 [0239.128] wcscpy (in: _Dest=0x674faa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.128] wcscat (in: _Dest=0x674faa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.128] wcscat (in: _Dest=0x674faa8, _Source="SO02862_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" [0239.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674faa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0239.129] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02886_.WMF", cAlternateFileName="")) returned 1 [0239.129] wcscmp (_String1="SO02886_.WMF", _String2=".") returned 1 [0239.129] wcscmp (_String1="SO02886_.WMF", _String2="..") returned 1 [0239.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fb30 [0239.129] wcscpy (in: _Dest=0x674fb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.129] wcscat (in: _Dest=0x674fb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.129] wcscat (in: _Dest=0x674fb30, _Source="SO02886_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" [0239.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0239.130] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02958_.WMF", cAlternateFileName="")) returned 1 [0239.130] wcscmp (_String1="SO02958_.WMF", _String2=".") returned 1 [0239.130] wcscmp (_String1="SO02958_.WMF", _String2="..") returned 1 [0239.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fbb8 [0239.130] wcscpy (in: _Dest=0x674fbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.130] wcscat (in: _Dest=0x674fbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.130] wcscat (in: _Dest=0x674fbb8, _Source="SO02958_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" [0239.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0239.131] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x107b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE_01.MID", cAlternateFileName="")) returned 1 [0239.131] wcscmp (_String1="SPACE_01.MID", _String2=".") returned 1 [0239.131] wcscmp (_String1="SPACE_01.MID", _String2="..") returned 1 [0239.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fc40 [0239.131] wcscpy (in: _Dest=0x674fc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.131] wcscat (in: _Dest=0x674fc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.131] wcscat (in: _Dest=0x674fc40, _Source="SPACE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" [0239.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0239.132] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRNG_01.MID", cAlternateFileName="")) returned 1 [0239.132] wcscmp (_String1="SPRNG_01.MID", _String2=".") returned 1 [0239.132] wcscmp (_String1="SPRNG_01.MID", _String2="..") returned 1 [0239.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fcc8 [0239.132] wcscpy (in: _Dest=0x674fcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.132] wcscat (in: _Dest=0x674fcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.132] wcscat (in: _Dest=0x674fcc8, _Source="SPRNG_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" [0239.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0239.133] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY1.WMF", cAlternateFileName="")) returned 1 [0239.133] wcscmp (_String1="STUBBY1.WMF", _String2=".") returned 1 [0239.133] wcscmp (_String1="STUBBY1.WMF", _String2="..") returned 1 [0239.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x674fd50 [0239.133] wcscpy (in: _Dest=0x674fd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.133] wcscat (in: _Dest=0x674fd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.133] wcscat (in: _Dest=0x674fd50, _Source="STUBBY1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" [0239.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0239.134] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY2.WMF", cAlternateFileName="")) returned 1 [0239.134] wcscmp (_String1="STUBBY2.WMF", _String2=".") returned 1 [0239.134] wcscmp (_String1="STUBBY2.WMF", _String2="..") returned 1 [0239.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x674fdd8 [0239.135] wcscpy (in: _Dest=0x674fdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.135] wcscat (in: _Dest=0x674fdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.135] wcscat (in: _Dest=0x674fdd8, _Source="STUBBY2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" [0239.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0239.136] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMER_01.MID", cAlternateFileName="")) returned 1 [0239.136] wcscmp (_String1="SUMER_01.MID", _String2=".") returned 1 [0239.136] wcscmp (_String1="SUMER_01.MID", _String2="..") returned 1 [0239.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fe60 [0239.136] wcscpy (in: _Dest=0x674fe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.136] wcscat (in: _Dest=0x674fe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.136] wcscat (in: _Dest=0x674fe60, _Source="SUMER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" [0239.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0239.137] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2135, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWEST_01.MID", cAlternateFileName="")) returned 1 [0239.137] wcscmp (_String1="SWEST_01.MID", _String2=".") returned 1 [0239.137] wcscmp (_String1="SWEST_01.MID", _String2="..") returned 1 [0239.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fee8 [0239.137] wcscpy (in: _Dest=0x674fee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.137] wcscat (in: _Dest=0x674fee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.137] wcscat (in: _Dest=0x674fee8, _Source="SWEST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" [0239.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0239.138] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ac700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00110_.WMF", cAlternateFileName="")) returned 1 [0239.138] wcscmp (_String1="SY00110_.WMF", _String2=".") returned 1 [0239.138] wcscmp (_String1="SY00110_.WMF", _String2="..") returned 1 [0239.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674ff70 [0239.138] wcscpy (in: _Dest=0x674ff70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.138] wcscat (in: _Dest=0x674ff70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.138] wcscat (in: _Dest=0x674ff70, _Source="SY00110_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" [0239.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0239.139] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca3af00, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ca3af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x1844, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00127_.WMF", cAlternateFileName="")) returned 1 [0239.139] wcscmp (_String1="SY00127_.WMF", _String2=".") returned 1 [0239.139] wcscmp (_String1="SY00127_.WMF", _String2="..") returned 1 [0239.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x674fff8 [0239.139] wcscpy (in: _Dest=0x674fff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.139] wcscat (in: _Dest=0x674fff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.139] wcscat (in: _Dest=0x674fff8, _Source="SY00127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" [0239.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0239.140] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7097ce00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7097ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00132_.WMF", cAlternateFileName="")) returned 1 [0239.140] wcscmp (_String1="SY00132_.WMF", _String2=".") returned 1 [0239.140] wcscmp (_String1="SY00132_.WMF", _String2="..") returned 1 [0239.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750080 [0239.141] wcscpy (in: _Dest=0x6750080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.141] wcscat (in: _Dest=0x6750080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.141] wcscat (in: _Dest=0x6750080, _Source="SY00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" [0239.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0239.170] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4699a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4699a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00170_.WMF", cAlternateFileName="")) returned 1 [0239.170] wcscmp (_String1="SY00170_.WMF", _String2=".") returned 1 [0239.170] wcscmp (_String1="SY00170_.WMF", _String2="..") returned 1 [0239.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750108 [0239.170] wcscpy (in: _Dest=0x6750108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.170] wcscat (in: _Dest=0x6750108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.170] wcscat (in: _Dest=0x6750108, _Source="SY00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" [0239.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0239.171] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a50300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2a50300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00560_.WMF", cAlternateFileName="")) returned 1 [0239.171] wcscmp (_String1="SY00560_.WMF", _String2=".") returned 1 [0239.171] wcscmp (_String1="SY00560_.WMF", _String2="..") returned 1 [0239.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750190 [0239.171] wcscpy (in: _Dest=0x6750190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.171] wcscat (in: _Dest=0x6750190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.171] wcscat (in: _Dest=0x6750190, _Source="SY00560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" [0239.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0239.172] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c99700, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66c99700, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00642_.WMF", cAlternateFileName="")) returned 1 [0239.172] wcscmp (_String1="SY00642_.WMF", _String2=".") returned 1 [0239.172] wcscmp (_String1="SY00642_.WMF", _String2="..") returned 1 [0239.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750218 [0239.172] wcscpy (in: _Dest=0x6750218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.172] wcscat (in: _Dest=0x6750218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.173] wcscat (in: _Dest=0x6750218, _Source="SY00642_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" [0239.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0239.174] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00788_.WMF", cAlternateFileName="")) returned 1 [0239.174] wcscmp (_String1="SY00788_.WMF", _String2=".") returned 1 [0239.174] wcscmp (_String1="SY00788_.WMF", _String2="..") returned 1 [0239.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67502a0 [0239.174] wcscpy (in: _Dest=0x67502a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.174] wcscat (in: _Dest=0x67502a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.174] wcscat (in: _Dest=0x67502a0, _Source="SY00788_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" [0239.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67502a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0239.175] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00792_.WMF", cAlternateFileName="")) returned 1 [0239.196] wcscmp (_String1="SY00792_.WMF", _String2=".") returned 1 [0239.196] wcscmp (_String1="SY00792_.WMF", _String2="..") returned 1 [0239.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750328 [0239.197] wcscpy (in: _Dest=0x6750328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.197] wcscat (in: _Dest=0x6750328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.197] wcscat (in: _Dest=0x6750328, _Source="SY00792_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" [0239.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0239.198] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2764, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00795_.WMF", cAlternateFileName="")) returned 1 [0239.198] wcscmp (_String1="SY00795_.WMF", _String2=".") returned 1 [0239.198] wcscmp (_String1="SY00795_.WMF", _String2="..") returned 1 [0239.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67503b0 [0239.198] wcscpy (in: _Dest=0x67503b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.198] wcscat (in: _Dest=0x67503b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.198] wcscat (in: _Dest=0x67503b0, _Source="SY00795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" [0239.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67503b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0239.199] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa093a100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa093a100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00882_.WMF", cAlternateFileName="")) returned 1 [0239.199] wcscmp (_String1="SY00882_.WMF", _String2=".") returned 1 [0239.199] wcscmp (_String1="SY00882_.WMF", _String2="..") returned 1 [0239.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750438 [0239.199] wcscpy (in: _Dest=0x6750438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.199] wcscat (in: _Dest=0x6750438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.199] wcscat (in: _Dest=0x6750438, _Source="SY00882_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" [0239.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0239.200] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01006_.WMF", cAlternateFileName="")) returned 1 [0239.200] wcscmp (_String1="SY01006_.WMF", _String2=".") returned 1 [0239.200] wcscmp (_String1="SY01006_.WMF", _String2="..") returned 1 [0239.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67504c0 [0239.200] wcscpy (in: _Dest=0x67504c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.200] wcscat (in: _Dest=0x67504c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.200] wcscat (in: _Dest=0x67504c0, _Source="SY01006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" [0239.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67504c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0239.201] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b91b000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b91b000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x2734, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01252_.WMF", cAlternateFileName="")) returned 1 [0239.201] wcscmp (_String1="SY01252_.WMF", _String2=".") returned 1 [0239.201] wcscmp (_String1="SY01252_.WMF", _String2="..") returned 1 [0239.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750548 [0239.201] wcscpy (in: _Dest=0x6750548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.201] wcscat (in: _Dest=0x6750548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.201] wcscat (in: _Dest=0x6750548, _Source="SY01252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" [0239.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0239.202] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a608300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a608300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01253_.WMF", cAlternateFileName="")) returned 1 [0239.202] wcscmp (_String1="SY01253_.WMF", _String2=".") returned 1 [0239.202] wcscmp (_String1="SY01253_.WMF", _String2="..") returned 1 [0239.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67505d0 [0239.202] wcscpy (in: _Dest=0x67505d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.202] wcscat (in: _Dest=0x67505d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.202] wcscat (in: _Dest=0x67505d0, _Source="SY01253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" [0239.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67505d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0239.203] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8996a100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8996a100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01462_.WMF", cAlternateFileName="")) returned 1 [0239.203] wcscmp (_String1="SY01462_.WMF", _String2=".") returned 1 [0239.203] wcscmp (_String1="SY01462_.WMF", _String2="..") returned 1 [0239.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750658 [0239.203] wcscpy (in: _Dest=0x6750658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.203] wcscat (in: _Dest=0x6750658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.203] wcscat (in: _Dest=0x6750658, _Source="SY01462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" [0239.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0239.204] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c163600, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c163600, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01491_.WMF", cAlternateFileName="")) returned 1 [0239.204] wcscmp (_String1="SY01491_.WMF", _String2=".") returned 1 [0239.204] wcscmp (_String1="SY01491_.WMF", _String2="..") returned 1 [0239.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67506e0 [0239.204] wcscpy (in: _Dest=0x67506e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.204] wcscat (in: _Dest=0x67506e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.204] wcscat (in: _Dest=0x67506e0, _Source="SY01491_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" [0239.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67506e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0239.223] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad96d00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdad96d00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01563_.WMF", cAlternateFileName="")) returned 1 [0239.223] wcscmp (_String1="SY01563_.WMF", _String2=".") returned 1 [0239.223] wcscmp (_String1="SY01563_.WMF", _String2="..") returned 1 [0239.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750768 [0239.223] wcscpy (in: _Dest=0x6750768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.223] wcscat (in: _Dest=0x6750768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.224] wcscat (in: _Dest=0x6750768, _Source="SY01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" [0239.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0239.225] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146ea000, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146ea000, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01572_.WMF", cAlternateFileName="")) returned 1 [0239.225] wcscmp (_String1="SY01572_.WMF", _String2=".") returned 1 [0239.225] wcscmp (_String1="SY01572_.WMF", _String2="..") returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67507f0 [0239.225] wcscpy (in: _Dest=0x67507f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.225] wcscat (in: _Dest=0x67507f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.225] wcscat (in: _Dest=0x67507f0, _Source="SY01572_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" [0239.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67507f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0239.226] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcf7b00, ftCreationTime.dwHighDateTime=0x1bd4cb2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6fcf7b00, ftLastWriteTime.dwHighDateTime=0x1bd4cb2, nFileSizeHigh=0x0, nFileSizeLow=0x338e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01590_.WMF", cAlternateFileName="")) returned 1 [0239.226] wcscmp (_String1="SY01590_.WMF", _String2=".") returned 1 [0239.226] wcscmp (_String1="SY01590_.WMF", _String2="..") returned 1 [0239.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750878 [0239.226] wcscpy (in: _Dest=0x6750878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.226] wcscat (in: _Dest=0x6750878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.226] wcscat (in: _Dest=0x6750878, _Source="SY01590_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" [0239.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0239.227] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAIL.WMF", cAlternateFileName="")) returned 1 [0239.227] wcscmp (_String1="TAIL.WMF", _String2=".") returned 1 [0239.227] wcscmp (_String1="TAIL.WMF", _String2="..") returned 1 [0239.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674af38 [0239.227] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.227] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.227] wcscat (in: _Dest=0x674af38, _Source="TAIL.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" [0239.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0239.228] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e8d1f00, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e8d1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xbde2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00011_.WMF", cAlternateFileName="")) returned 1 [0239.228] wcscmp (_String1="TN00011_.WMF", _String2=".") returned 1 [0239.228] wcscmp (_String1="TN00011_.WMF", _String2="..") returned 1 [0239.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750900 [0239.228] wcscpy (in: _Dest=0x6750900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.228] wcscat (in: _Dest=0x6750900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.228] wcscat (in: _Dest=0x6750900, _Source="TN00011_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" [0239.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0239.229] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00014_.WMF", cAlternateFileName="")) returned 1 [0239.229] wcscmp (_String1="TN00014_.WMF", _String2=".") returned 1 [0239.229] wcscmp (_String1="TN00014_.WMF", _String2="..") returned 1 [0239.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750988 [0239.229] wcscpy (in: _Dest=0x6750988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.229] wcscat (in: _Dest=0x6750988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.229] wcscat (in: _Dest=0x6750988, _Source="TN00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" [0239.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0239.230] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x243c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00018_.WMF", cAlternateFileName="")) returned 1 [0239.230] wcscmp (_String1="TN00018_.WMF", _String2=".") returned 1 [0239.230] wcscmp (_String1="TN00018_.WMF", _String2="..") returned 1 [0239.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6750a10 [0239.230] wcscpy (in: _Dest=0x6750a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.230] wcscat (in: _Dest=0x6750a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.230] wcscat (in: _Dest=0x6750a10, _Source="TN00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" [0239.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0239.231] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00095_.WMF", cAlternateFileName="")) returned 1 [0239.231] wcscmp (_String1="TN00095_.WMF", _String2=".") returned 1 [0239.231] wcscmp (_String1="TN00095_.WMF", _String2="..") returned 1 [0239.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778ab8 [0239.232] wcscpy (in: _Dest=0x6778ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.232] wcscat (in: _Dest=0x6778ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.232] wcscat (in: _Dest=0x6778ab8, _Source="TN00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" [0239.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0239.232] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fe8f00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8fe8f00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00211_.WMF", cAlternateFileName="")) returned 1 [0239.233] wcscmp (_String1="TN00211_.WMF", _String2=".") returned 1 [0239.233] wcscmp (_String1="TN00211_.WMF", _String2="..") returned 1 [0239.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778b40 [0239.233] wcscpy (in: _Dest=0x6778b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.233] wcscat (in: _Dest=0x6778b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.233] wcscat (in: _Dest=0x6778b40, _Source="TN00211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" [0239.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0239.234] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e98700, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66e98700, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1224, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00217_.WMF", cAlternateFileName="")) returned 1 [0239.234] wcscmp (_String1="TN00217_.WMF", _String2=".") returned 1 [0239.234] wcscmp (_String1="TN00217_.WMF", _String2="..") returned 1 [0239.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778bc8 [0239.234] wcscpy (in: _Dest=0x6778bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.234] wcscat (in: _Dest=0x6778bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.234] wcscat (in: _Dest=0x6778bc8, _Source="TN00217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" [0239.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0239.235] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a517c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a517c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00218_.WMF", cAlternateFileName="")) returned 1 [0239.235] wcscmp (_String1="TN00218_.WMF", _String2=".") returned 1 [0239.235] wcscmp (_String1="TN00218_.WMF", _String2="..") returned 1 [0239.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778c50 [0239.235] wcscpy (in: _Dest=0x6778c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.235] wcscat (in: _Dest=0x6778c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.235] wcscat (in: _Dest=0x6778c50, _Source="TN00218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" [0239.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0239.236] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ced000, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8ced000, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00231_.WMF", cAlternateFileName="")) returned 1 [0239.236] wcscmp (_String1="TN00231_.WMF", _String2=".") returned 1 [0239.236] wcscmp (_String1="TN00231_.WMF", _String2="..") returned 1 [0239.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778cd8 [0239.236] wcscpy (in: _Dest=0x6778cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.236] wcscat (in: _Dest=0x6778cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.236] wcscat (in: _Dest=0x6778cd8, _Source="TN00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" [0239.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0239.237] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaad5a00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaad5a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00234_.WMF", cAlternateFileName="")) returned 1 [0239.237] wcscmp (_String1="TN00234_.WMF", _String2=".") returned 1 [0239.237] wcscmp (_String1="TN00234_.WMF", _String2="..") returned 1 [0239.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778d60 [0239.237] wcscpy (in: _Dest=0x6778d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.238] wcscat (in: _Dest=0x6778d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.238] wcscat (in: _Dest=0x6778d60, _Source="TN00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" [0239.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0239.238] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d8b200, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4d8b200, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00241_.WMF", cAlternateFileName="")) returned 1 [0239.239] wcscmp (_String1="TN00241_.WMF", _String2=".") returned 1 [0239.239] wcscmp (_String1="TN00241_.WMF", _String2="..") returned 1 [0239.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778de8 [0239.239] wcscpy (in: _Dest=0x6778de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.239] wcscat (in: _Dest=0x6778de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.239] wcscat (in: _Dest=0x6778de8, _Source="TN00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" [0239.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0239.240] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3386d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3386d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00246_.WMF", cAlternateFileName="")) returned 1 [0239.240] wcscmp (_String1="TN00246_.WMF", _String2=".") returned 1 [0239.240] wcscmp (_String1="TN00246_.WMF", _String2="..") returned 1 [0239.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778e70 [0239.240] wcscpy (in: _Dest=0x6778e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.240] wcscat (in: _Dest=0x6778e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.240] wcscat (in: _Dest=0x6778e70, _Source="TN00246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" [0239.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0239.241] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2074000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2074000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00253_.WMF", cAlternateFileName="")) returned 1 [0239.241] wcscmp (_String1="TN00253_.WMF", _String2=".") returned 1 [0239.241] wcscmp (_String1="TN00253_.WMF", _String2="..") returned 1 [0239.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778ef8 [0239.241] wcscpy (in: _Dest=0x6778ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.241] wcscat (in: _Dest=0x6778ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.241] wcscat (in: _Dest=0x6778ef8, _Source="TN00253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" [0239.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0239.242] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b822200, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b822200, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00255_.WMF", cAlternateFileName="")) returned 1 [0239.242] wcscmp (_String1="TN00255_.WMF", _String2=".") returned 1 [0239.242] wcscmp (_String1="TN00255_.WMF", _String2="..") returned 1 [0239.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6778f80 [0239.242] wcscpy (in: _Dest=0x6778f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.242] wcscat (in: _Dest=0x6778f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.242] wcscat (in: _Dest=0x6778f80, _Source="TN00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" [0239.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0239.243] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194d2a00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x194d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00330_.WMF", cAlternateFileName="")) returned 1 [0239.243] wcscmp (_String1="TN00330_.WMF", _String2=".") returned 1 [0239.243] wcscmp (_String1="TN00330_.WMF", _String2="..") returned 1 [0239.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779008 [0239.243] wcscpy (in: _Dest=0x6779008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.243] wcscat (in: _Dest=0x6779008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.243] wcscat (in: _Dest=0x6779008, _Source="TN00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" [0239.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0239.324] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00411_.WMF", cAlternateFileName="")) returned 1 [0239.324] wcscmp (_String1="TN00411_.WMF", _String2=".") returned 1 [0239.324] wcscmp (_String1="TN00411_.WMF", _String2="..") returned 1 [0239.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779090 [0239.324] wcscpy (in: _Dest=0x6779090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.324] wcscat (in: _Dest=0x6779090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.324] wcscat (in: _Dest=0x6779090, _Source="TN00411_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" [0239.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0239.325] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d36900, ftCreationTime.dwHighDateTime=0x1bd4c3b, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3d36900, ftLastWriteTime.dwHighDateTime=0x1bd4c3b, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00687_.WMF", cAlternateFileName="")) returned 1 [0239.325] wcscmp (_String1="TN00687_.WMF", _String2=".") returned 1 [0239.325] wcscmp (_String1="TN00687_.WMF", _String2="..") returned 1 [0239.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779118 [0239.325] wcscpy (in: _Dest=0x6779118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.325] wcscat (in: _Dest=0x6779118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.325] wcscat (in: _Dest=0x6779118, _Source="TN00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" [0239.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0239.327] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c58d700, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c58d700, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01164_.WMF", cAlternateFileName="")) returned 1 [0239.327] wcscmp (_String1="TN01164_.WMF", _String2=".") returned 1 [0239.327] wcscmp (_String1="TN01164_.WMF", _String2="..") returned 1 [0239.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67791a0 [0239.327] wcscpy (in: _Dest=0x67791a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.327] wcscat (in: _Dest=0x67791a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.327] wcscat (in: _Dest=0x67791a0, _Source="TN01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" [0239.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67791a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0239.328] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef5700, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ef5700, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01165_.WMF", cAlternateFileName="")) returned 1 [0239.328] wcscmp (_String1="TN01165_.WMF", _String2=".") returned 1 [0239.328] wcscmp (_String1="TN01165_.WMF", _String2="..") returned 1 [0239.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779228 [0239.328] wcscpy (in: _Dest=0x6779228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.328] wcscat (in: _Dest=0x6779228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.328] wcscat (in: _Dest=0x6779228, _Source="TN01165_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" [0239.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0239.329] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01308_.WMF", cAlternateFileName="")) returned 1 [0239.329] wcscmp (_String1="TN01308_.WMF", _String2=".") returned 1 [0239.329] wcscmp (_String1="TN01308_.WMF", _String2="..") returned 1 [0239.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67792b0 [0239.329] wcscpy (in: _Dest=0x67792b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.329] wcscat (in: _Dest=0x67792b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.329] wcscat (in: _Dest=0x67792b0, _Source="TN01308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" [0239.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67792b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0239.330] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec238c00, ftCreationTime.dwHighDateTime=0x1bf117d, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec238c00, ftLastWriteTime.dwHighDateTime=0x1bf117d, nFileSizeHigh=0x0, nFileSizeLow=0x276a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00006_.WMF", cAlternateFileName="")) returned 1 [0239.330] wcscmp (_String1="TR00006_.WMF", _String2=".") returned 1 [0239.330] wcscmp (_String1="TR00006_.WMF", _String2="..") returned 1 [0239.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779338 [0239.330] wcscpy (in: _Dest=0x6779338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.331] wcscat (in: _Dest=0x6779338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.331] wcscat (in: _Dest=0x6779338, _Source="TR00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" [0239.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0239.332] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c28c600, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c28c600, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00095_.WMF", cAlternateFileName="")) returned 1 [0239.332] wcscmp (_String1="TR00095_.WMF", _String2=".") returned 1 [0239.332] wcscmp (_String1="TR00095_.WMF", _String2="..") returned 1 [0239.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67793c0 [0239.332] wcscpy (in: _Dest=0x67793c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.332] wcscat (in: _Dest=0x67793c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.332] wcscat (in: _Dest=0x67793c0, _Source="TR00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" [0239.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67793c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0239.333] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd61300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00097_.WMF", cAlternateFileName="")) returned 1 [0239.333] wcscmp (_String1="TR00097_.WMF", _String2=".") returned 1 [0239.333] wcscmp (_String1="TR00097_.WMF", _String2="..") returned 1 [0239.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779448 [0239.333] wcscpy (in: _Dest=0x6779448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0239.333] wcscat (in: _Dest=0x6779448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0239.333] wcscat (in: _Dest=0x6779448, _Source="TR00097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" [0239.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0239.334] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d565300, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d565300, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x25bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00116_.WMF", cAlternateFileName="")) returned 1 [0240.107] wcscmp (_String1="TR00116_.WMF", _String2=".") returned 1 [0240.107] wcscmp (_String1="TR00116_.WMF", _String2="..") returned 1 [0240.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c37a0 [0240.107] wcscpy (in: _Dest=0x66c37a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.107] wcscat (in: _Dest=0x66c37a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.107] wcscat (in: _Dest=0x66c37a0, _Source="TR00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" [0240.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c37a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0240.108] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc20be00, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc20be00, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00126_.WMF", cAlternateFileName="")) returned 1 [0240.108] wcscmp (_String1="TR00126_.WMF", _String2=".") returned 1 [0240.108] wcscmp (_String1="TR00126_.WMF", _String2="..") returned 1 [0240.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66c3608 [0240.108] wcscpy (in: _Dest=0x66c3608, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.108] wcscat (in: _Dest=0x66c3608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.108] wcscat (in: _Dest=0x66c3608, _Source="TR00126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" [0240.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66c3608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0240.109] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc724f00, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc724f00, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x235c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00172_.WMF", cAlternateFileName="")) returned 1 [0240.109] wcscmp (_String1="TR00172_.WMF", _String2=".") returned 1 [0240.109] wcscmp (_String1="TR00172_.WMF", _String2="..") returned 1 [0240.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67794d0 [0240.109] wcscpy (in: _Dest=0x67794d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.110] wcscat (in: _Dest=0x67794d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.110] wcscat (in: _Dest=0x67794d0, _Source="TR00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" [0240.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67794d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0240.110] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff0e00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaff0e00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00178_.WMF", cAlternateFileName="")) returned 1 [0240.110] wcscmp (_String1="TR00178_.WMF", _String2=".") returned 1 [0240.111] wcscmp (_String1="TR00178_.WMF", _String2="..") returned 1 [0240.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779558 [0240.111] wcscpy (in: _Dest=0x6779558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.111] wcscat (in: _Dest=0x6779558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.111] wcscat (in: _Dest=0x6779558, _Source="TR00178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" [0240.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0240.112] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4317200, ftCreationTime.dwHighDateTime=0x1bf32b0, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4317200, ftLastWriteTime.dwHighDateTime=0x1bf32b0, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00232_.WMF", cAlternateFileName="")) returned 1 [0240.112] wcscmp (_String1="TR00232_.WMF", _String2=".") returned 1 [0240.112] wcscmp (_String1="TR00232_.WMF", _String2="..") returned 1 [0240.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67795e0 [0240.112] wcscpy (in: _Dest=0x67795e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.112] wcscat (in: _Dest=0x67795e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.112] wcscat (in: _Dest=0x67795e0, _Source="TR00232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" [0240.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67795e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0240.113] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d78500, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90d78500, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x7c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00233_.WMF", cAlternateFileName="")) returned 1 [0240.113] wcscmp (_String1="TR00233_.WMF", _String2=".") returned 1 [0240.113] wcscmp (_String1="TR00233_.WMF", _String2="..") returned 1 [0240.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779668 [0240.113] wcscpy (in: _Dest=0x6779668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.113] wcscat (in: _Dest=0x6779668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.113] wcscat (in: _Dest=0x6779668, _Source="TR00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" [0240.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0240.114] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00402_.WMF", cAlternateFileName="")) returned 1 [0240.114] wcscmp (_String1="TR00402_.WMF", _String2=".") returned 1 [0240.114] wcscmp (_String1="TR00402_.WMF", _String2="..") returned 1 [0240.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x67796f0 [0240.114] wcscpy (in: _Dest=0x67796f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.114] wcscat (in: _Dest=0x67796f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.114] wcscat (in: _Dest=0x67796f0, _Source="TR00402_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" [0240.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67796f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0240.115] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746e4200, ftCreationTime.dwHighDateTime=0x1bd4c66, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x746e4200, ftLastWriteTime.dwHighDateTime=0x1bd4c66, nFileSizeHigh=0x0, nFileSizeLow=0x2054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00482_.WMF", cAlternateFileName="")) returned 1 [0240.115] wcscmp (_String1="TR00482_.WMF", _String2=".") returned 1 [0240.115] wcscmp (_String1="TR00482_.WMF", _String2="..") returned 1 [0240.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779778 [0240.115] wcscpy (in: _Dest=0x6779778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.115] wcscat (in: _Dest=0x6779778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.115] wcscat (in: _Dest=0x6779778, _Source="TR00482_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" [0240.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0240.116] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a921200, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a921200, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00494_.WMF", cAlternateFileName="")) returned 1 [0240.116] wcscmp (_String1="TR00494_.WMF", _String2=".") returned 1 [0240.116] wcscmp (_String1="TR00494_.WMF", _String2="..") returned 1 [0240.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779800 [0240.116] wcscpy (in: _Dest=0x6779800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.116] wcscat (in: _Dest=0x6779800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.116] wcscat (in: _Dest=0x6779800, _Source="TR00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" [0240.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0240.117] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x921e4ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x342e, dwReserved0=0x0, dwReserved1=0x0, cFileName="URBAN_01.MID", cAlternateFileName="")) returned 1 [0240.117] wcscmp (_String1="URBAN_01.MID", _String2=".") returned 1 [0240.117] wcscmp (_String1="URBAN_01.MID", _String2="..") returned 1 [0240.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779888 [0240.117] wcscpy (in: _Dest=0x6779888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.117] wcscat (in: _Dest=0x6779888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.117] wcscat (in: _Dest=0x6779888, _Source="URBAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" [0240.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0240.118] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="VCTRN_01.MID", cAlternateFileName="")) returned 1 [0240.118] wcscmp (_String1="VCTRN_01.MID", _String2=".") returned 1 [0240.118] wcscmp (_String1="VCTRN_01.MID", _String2="..") returned 1 [0240.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779910 [0240.118] wcscpy (in: _Dest=0x6779910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.118] wcscat (in: _Dest=0x6779910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.118] wcscat (in: _Dest=0x6779910, _Source="VCTRN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" [0240.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0240.119] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb216d900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb216d900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01219_.GIF", cAlternateFileName="")) returned 1 [0240.119] wcscmp (_String1="WB01219_.GIF", _String2=".") returned 1 [0240.119] wcscmp (_String1="WB01219_.GIF", _String2="..") returned 1 [0240.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779998 [0240.119] wcscpy (in: _Dest=0x6779998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.119] wcscat (in: _Dest=0x6779998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.119] wcscat (in: _Dest=0x6779998, _Source="WB01219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" [0240.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0240.120] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9539d000, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9539d000, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01237_.GIF", cAlternateFileName="")) returned 1 [0240.120] wcscmp (_String1="WB01237_.GIF", _String2=".") returned 1 [0240.120] wcscmp (_String1="WB01237_.GIF", _String2="..") returned 1 [0240.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779a20 [0240.120] wcscpy (in: _Dest=0x6779a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.120] wcscat (in: _Dest=0x6779a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.120] wcscat (in: _Dest=0x6779a20, _Source="WB01237_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" [0240.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0240.121] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789d9800, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x789d9800, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01238_.GIF", cAlternateFileName="")) returned 1 [0240.121] wcscmp (_String1="WB01238_.GIF", _String2=".") returned 1 [0240.121] wcscmp (_String1="WB01238_.GIF", _String2="..") returned 1 [0240.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779aa8 [0240.121] wcscpy (in: _Dest=0x6779aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.121] wcscat (in: _Dest=0x6779aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.121] wcscat (in: _Dest=0x6779aa8, _Source="WB01238_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" [0240.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0240.122] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54da5200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54da5200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01239_.GIF", cAlternateFileName="")) returned 1 [0240.122] wcscmp (_String1="WB01239_.GIF", _String2=".") returned 1 [0240.122] wcscmp (_String1="WB01239_.GIF", _String2="..") returned 1 [0240.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779b30 [0240.122] wcscpy (in: _Dest=0x6779b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.122] wcscat (in: _Dest=0x6779b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.123] wcscat (in: _Dest=0x6779b30, _Source="WB01239_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" [0240.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0240.123] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370ced00, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x370ced00, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01240_.GIF", cAlternateFileName="")) returned 1 [0240.123] wcscmp (_String1="WB01240_.GIF", _String2=".") returned 1 [0240.123] wcscmp (_String1="WB01240_.GIF", _String2="..") returned 1 [0240.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779bb8 [0240.123] wcscpy (in: _Dest=0x6779bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.124] wcscat (in: _Dest=0x6779bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.124] wcscat (in: _Dest=0x6779bb8, _Source="WB01240_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" [0240.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0240.124] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba1e200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ba1e200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01241_.GIF", cAlternateFileName="")) returned 1 [0240.124] wcscmp (_String1="WB01241_.GIF", _String2=".") returned 1 [0240.124] wcscmp (_String1="WB01241_.GIF", _String2="..") returned 1 [0240.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779c40 [0240.125] wcscpy (in: _Dest=0x6779c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.125] wcscat (in: _Dest=0x6779c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.125] wcscat (in: _Dest=0x6779c40, _Source="WB01241_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" [0240.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0240.127] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1349a700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1349a700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01242_.GIF", cAlternateFileName="")) returned 1 [0240.127] wcscmp (_String1="WB01242_.GIF", _String2=".") returned 1 [0240.127] wcscmp (_String1="WB01242_.GIF", _String2="..") returned 1 [0240.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779cc8 [0240.127] wcscpy (in: _Dest=0x6779cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.127] wcscat (in: _Dest=0x6779cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.127] wcscat (in: _Dest=0x6779cc8, _Source="WB01242_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" [0240.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0240.128] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36d700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01243_.GIF", cAlternateFileName="")) returned 1 [0240.128] wcscmp (_String1="WB01243_.GIF", _String2=".") returned 1 [0240.128] wcscmp (_String1="WB01243_.GIF", _String2="..") returned 1 [0240.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779d50 [0240.128] wcscpy (in: _Dest=0x6779d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.128] wcscat (in: _Dest=0x6779d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.128] wcscat (in: _Dest=0x6779d50, _Source="WB01243_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" [0240.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0240.129] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b78e00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0b78e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01244_.GIF", cAlternateFileName="")) returned 1 [0240.129] wcscmp (_String1="WB01244_.GIF", _String2=".") returned 1 [0240.129] wcscmp (_String1="WB01244_.GIF", _String2="..") returned 1 [0240.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779dd8 [0240.129] wcscpy (in: _Dest=0x6779dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.129] wcscat (in: _Dest=0x6779dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.129] wcscat (in: _Dest=0x6779dd8, _Source="WB01244_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" [0240.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0240.130] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9908000, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9908000, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01245_.GIF", cAlternateFileName="")) returned 1 [0240.130] wcscmp (_String1="WB01245_.GIF", _String2=".") returned 1 [0240.130] wcscmp (_String1="WB01245_.GIF", _String2="..") returned 1 [0240.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779e60 [0240.130] wcscpy (in: _Dest=0x6779e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.130] wcscat (in: _Dest=0x6779e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.130] wcscat (in: _Dest=0x6779e60, _Source="WB01245_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" [0240.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0240.131] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4be00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4be00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01246_.GIF", cAlternateFileName="")) returned 1 [0240.131] wcscmp (_String1="WB01246_.GIF", _String2=".") returned 1 [0240.131] wcscmp (_String1="WB01246_.GIF", _String2="..") returned 1 [0240.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779ee8 [0240.131] wcscpy (in: _Dest=0x6779ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.131] wcscat (in: _Dest=0x6779ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.131] wcscat (in: _Dest=0x6779ee8, _Source="WB01246_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" [0240.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0240.132] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b43e00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2b43e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0xff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01253_.GIF", cAlternateFileName="")) returned 1 [0240.132] wcscmp (_String1="WB01253_.GIF", _String2=".") returned 1 [0240.132] wcscmp (_String1="WB01253_.GIF", _String2="..") returned 1 [0240.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779f70 [0240.132] wcscpy (in: _Dest=0x6779f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.132] wcscat (in: _Dest=0x6779f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.132] wcscat (in: _Dest=0x6779f70, _Source="WB01253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" [0240.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0240.133] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a859600, ftCreationTime.dwHighDateTime=0x1bd4eca, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a859600, ftLastWriteTime.dwHighDateTime=0x1bd4eca, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01268_.GIF", cAlternateFileName="")) returned 1 [0240.133] wcscmp (_String1="WB01268_.GIF", _String2=".") returned 1 [0240.133] wcscmp (_String1="WB01268_.GIF", _String2="..") returned 1 [0240.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6779ff8 [0240.133] wcscpy (in: _Dest=0x6779ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.133] wcscat (in: _Dest=0x6779ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.133] wcscat (in: _Dest=0x6779ff8, _Source="WB01268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" [0240.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0240.134] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586bda00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x586bda00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01292_.GIF", cAlternateFileName="")) returned 1 [0240.134] wcscmp (_String1="WB01292_.GIF", _String2=".") returned 1 [0240.134] wcscmp (_String1="WB01292_.GIF", _String2="..") returned 1 [0240.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a080 [0240.134] wcscpy (in: _Dest=0x677a080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.134] wcscat (in: _Dest=0x677a080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.134] wcscat (in: _Dest=0x677a080, _Source="WB01292_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" [0240.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0240.135] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5144cc00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5144cc00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01293_.GIF", cAlternateFileName="")) returned 1 [0240.135] wcscmp (_String1="WB01293_.GIF", _String2=".") returned 1 [0240.135] wcscmp (_String1="WB01293_.GIF", _String2="..") returned 1 [0240.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a108 [0240.135] wcscpy (in: _Dest=0x677a108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.135] wcscat (in: _Dest=0x677a108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.135] wcscat (in: _Dest=0x677a108, _Source="WB01293_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" [0240.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0240.136] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45590a00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45590a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01294_.GIF", cAlternateFileName="")) returned 1 [0240.136] wcscmp (_String1="WB01294_.GIF", _String2=".") returned 1 [0240.136] wcscmp (_String1="WB01294_.GIF", _String2="..") returned 1 [0240.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a190 [0240.136] wcscpy (in: _Dest=0x677a190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.136] wcscat (in: _Dest=0x677a190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.136] wcscat (in: _Dest=0x677a190, _Source="WB01294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" [0240.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0240.137] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5ab200, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc5ab200, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01295_.GIF", cAlternateFileName="")) returned 1 [0240.137] wcscmp (_String1="WB01295_.GIF", _String2=".") returned 1 [0240.137] wcscmp (_String1="WB01295_.GIF", _String2="..") returned 1 [0240.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a218 [0240.137] wcscpy (in: _Dest=0x677a218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.137] wcscat (in: _Dest=0x677a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.137] wcscat (in: _Dest=0x677a218, _Source="WB01295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" [0240.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0240.138] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eb2b300, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2eb2b300, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x1ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01296_.GIF", cAlternateFileName="")) returned 1 [0240.138] wcscmp (_String1="WB01296_.GIF", _String2=".") returned 1 [0240.138] wcscmp (_String1="WB01296_.GIF", _String2="..") returned 1 [0240.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a2a0 [0240.138] wcscpy (in: _Dest=0x677a2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.138] wcscat (in: _Dest=0x677a2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.138] wcscat (in: _Dest=0x677a2a0, _Source="WB01296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" [0240.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0240.139] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bcd200, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28bcd200, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01297_.GIF", cAlternateFileName="")) returned 1 [0240.139] wcscmp (_String1="WB01297_.GIF", _String2=".") returned 1 [0240.139] wcscmp (_String1="WB01297_.GIF", _String2="..") returned 1 [0240.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a328 [0240.139] wcscpy (in: _Dest=0x677a328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.139] wcscat (in: _Dest=0x677a328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.139] wcscat (in: _Dest=0x677a328, _Source="WB01297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" [0240.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0240.140] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c6f100, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22c6f100, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01298_.GIF", cAlternateFileName="")) returned 1 [0240.140] wcscmp (_String1="WB01298_.GIF", _String2=".") returned 1 [0240.140] wcscmp (_String1="WB01298_.GIF", _String2="..") returned 1 [0240.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a3b0 [0240.140] wcscpy (in: _Dest=0x677a3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.140] wcscat (in: _Dest=0x677a3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.140] wcscat (in: _Dest=0x677a3b0, _Source="WB01298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" [0240.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0240.141] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180c5c00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x180c5c00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01299_.GIF", cAlternateFileName="")) returned 1 [0240.141] wcscmp (_String1="WB01299_.GIF", _String2=".") returned 1 [0240.141] wcscmp (_String1="WB01299_.GIF", _String2="..") returned 1 [0240.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a438 [0240.141] wcscpy (in: _Dest=0x677a438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.141] wcscat (in: _Dest=0x677a438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.141] wcscat (in: _Dest=0x677a438, _Source="WB01299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" [0240.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0240.142] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f400, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f400, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01300_.GIF", cAlternateFileName="")) returned 1 [0240.142] wcscmp (_String1="WB01300_.GIF", _String2=".") returned 1 [0240.142] wcscmp (_String1="WB01300_.GIF", _String2="..") returned 1 [0240.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a4c0 [0240.142] wcscpy (in: _Dest=0x677a4c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.142] wcscat (in: _Dest=0x677a4c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.142] wcscat (in: _Dest=0x677a4c0, _Source="WB01300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" [0240.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0240.176] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be4000, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be4000, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01301_.GIF", cAlternateFileName="")) returned 1 [0240.176] wcscmp (_String1="WB01301_.GIF", _String2=".") returned 1 [0240.176] wcscmp (_String1="WB01301_.GIF", _String2="..") returned 1 [0240.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a548 [0240.176] wcscpy (in: _Dest=0x677a548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.176] wcscat (in: _Dest=0x677a548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.176] wcscat (in: _Dest=0x677a548, _Source="WB01301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" [0240.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0240.177] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5ca00, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cd5ca00, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x2076, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01304G.GIF", cAlternateFileName="")) returned 1 [0240.194] wcscmp (_String1="WB01304G.GIF", _String2=".") returned 1 [0240.194] wcscmp (_String1="WB01304G.GIF", _String2="..") returned 1 [0240.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a5d0 [0240.194] wcscpy (in: _Dest=0x677a5d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.194] wcscat (in: _Dest=0x677a5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.194] wcscat (in: _Dest=0x677a5d0, _Source="WB01304G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" [0240.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0240.195] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69feb300, ftCreationTime.dwHighDateTime=0x1bd4ec7, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69feb300, ftLastWriteTime.dwHighDateTime=0x1bd4ec7, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01330_.GIF", cAlternateFileName="")) returned 1 [0240.195] wcscmp (_String1="WB01330_.GIF", _String2=".") returned 1 [0240.195] wcscmp (_String1="WB01330_.GIF", _String2="..") returned 1 [0240.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a658 [0240.196] wcscpy (in: _Dest=0x677a658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.196] wcscat (in: _Dest=0x677a658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.196] wcscat (in: _Dest=0x677a658, _Source="WB01330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" [0240.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0240.196] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9f2300, ftCreationTime.dwHighDateTime=0x1bd4ed1, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c9f2300, ftLastWriteTime.dwHighDateTime=0x1bd4ed1, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01734_.GIF", cAlternateFileName="")) returned 1 [0240.196] wcscmp (_String1="WB01734_.GIF", _String2=".") returned 1 [0240.197] wcscmp (_String1="WB01734_.GIF", _String2="..") returned 1 [0240.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a6e0 [0240.197] wcscpy (in: _Dest=0x677a6e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.197] wcscat (in: _Dest=0x677a6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.197] wcscat (in: _Dest=0x677a6e0, _Source="WB01734_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" [0240.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0240.197] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104db700, ftCreationTime.dwHighDateTime=0x1bd4ece, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x104db700, ftLastWriteTime.dwHighDateTime=0x1bd4ece, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01740_.GIF", cAlternateFileName="")) returned 1 [0240.197] wcscmp (_String1="WB01740_.GIF", _String2=".") returned 1 [0240.197] wcscmp (_String1="WB01740_.GIF", _String2="..") returned 1 [0240.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a768 [0240.198] wcscpy (in: _Dest=0x677a768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.198] wcscat (in: _Dest=0x677a768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.198] wcscat (in: _Dest=0x677a768, _Source="WB01740_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" [0240.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0240.198] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c5500, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c5500, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01742_.GIF", cAlternateFileName="")) returned 1 [0240.198] wcscmp (_String1="WB01742_.GIF", _String2=".") returned 1 [0240.198] wcscmp (_String1="WB01742_.GIF", _String2="..") returned 1 [0240.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a7f0 [0240.199] wcscpy (in: _Dest=0x677a7f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.199] wcscat (in: _Dest=0x677a7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.199] wcscat (in: _Dest=0x677a7f0, _Source="WB01742_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" [0240.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0240.199] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0b2800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd0b2800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01743_.GIF", cAlternateFileName="")) returned 1 [0240.199] wcscmp (_String1="WB01743_.GIF", _String2=".") returned 1 [0240.199] wcscmp (_String1="WB01743_.GIF", _String2="..") returned 1 [0240.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a878 [0240.200] wcscpy (in: _Dest=0x677a878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.200] wcscat (in: _Dest=0x677a878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.200] wcscat (in: _Dest=0x677a878, _Source="WB01743_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" [0240.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0240.200] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a7300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a7300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x31f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01744_.GIF", cAlternateFileName="")) returned 1 [0240.200] wcscmp (_String1="WB01744_.GIF", _String2=".") returned 1 [0240.200] wcscmp (_String1="WB01744_.GIF", _String2="..") returned 1 [0240.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a900 [0240.201] wcscpy (in: _Dest=0x677a900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.201] wcscat (in: _Dest=0x677a900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.201] wcscat (in: _Dest=0x677a900, _Source="WB01744_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" [0240.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0240.201] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8467400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8467400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01745_.GIF", cAlternateFileName="")) returned 1 [0240.201] wcscmp (_String1="WB01745_.GIF", _String2=".") returned 1 [0240.201] wcscmp (_String1="WB01745_.GIF", _String2="..") returned 1 [0240.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677a988 [0240.201] wcscpy (in: _Dest=0x677a988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.201] wcscat (in: _Dest=0x677a988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.202] wcscat (in: _Dest=0x677a988, _Source="WB01745_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" [0240.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677a988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0240.202] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfee3900, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfee3900, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01746_.GIF", cAlternateFileName="")) returned 1 [0240.202] wcscmp (_String1="WB01746_.GIF", _String2=".") returned 1 [0240.202] wcscmp (_String1="WB01746_.GIF", _String2="..") returned 1 [0240.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x677aa10 [0240.203] wcscpy (in: _Dest=0x677aa10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.203] wcscat (in: _Dest=0x677aa10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.203] wcscat (in: _Dest=0x677aa10, _Source="WB01746_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" [0240.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x677aa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0240.223] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f85800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f85800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01747_.GIF", cAlternateFileName="")) returned 1 [0240.223] wcscmp (_String1="WB01747_.GIF", _String2=".") returned 1 [0240.223] wcscmp (_String1="WB01747_.GIF", _String2="..") returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758ab8 [0240.223] wcscpy (in: _Dest=0x6758ab8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.223] wcscat (in: _Dest=0x6758ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.223] wcscat (in: _Dest=0x6758ab8, _Source="WB01747_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" [0240.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0240.224] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d14a00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc2d14a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01748_.GIF", cAlternateFileName="")) returned 1 [0240.224] wcscmp (_String1="WB01748_.GIF", _String2=".") returned 1 [0240.224] wcscmp (_String1="WB01748_.GIF", _String2="..") returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758b40 [0240.224] wcscpy (in: _Dest=0x6758b40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.224] wcscat (in: _Dest=0x6758b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.224] wcscat (in: _Dest=0x6758b40, _Source="WB01748_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" [0240.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0240.225] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0c9600, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe0c9600, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01749_.GIF", cAlternateFileName="")) returned 1 [0240.225] wcscmp (_String1="WB01749_.GIF", _String2=".") returned 1 [0240.225] wcscmp (_String1="WB01749_.GIF", _String2="..") returned 1 [0240.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758bc8 [0240.226] wcscpy (in: _Dest=0x6758bc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.226] wcscat (in: _Dest=0x6758bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.226] wcscat (in: _Dest=0x6758bc8, _Source="WB01749_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" [0240.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0240.226] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b45b00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5b45b00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01750_.GIF", cAlternateFileName="")) returned 1 [0240.226] wcscmp (_String1="WB01750_.GIF", _String2=".") returned 1 [0240.226] wcscmp (_String1="WB01750_.GIF", _String2="..") returned 1 [0240.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758c50 [0240.227] wcscpy (in: _Dest=0x6758c50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.227] wcscat (in: _Dest=0x6758c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.227] wcscat (in: _Dest=0x6758c50, _Source="WB01750_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" [0240.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0240.227] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb220d400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb220d400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01751_.GIF", cAlternateFileName="")) returned 1 [0240.227] wcscmp (_String1="WB01751_.GIF", _String2=".") returned 1 [0240.227] wcscmp (_String1="WB01751_.GIF", _String2="..") returned 1 [0240.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758cd8 [0240.228] wcscpy (in: _Dest=0x6758cd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.228] wcscat (in: _Dest=0x6758cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.228] wcscat (in: _Dest=0x6758cd8, _Source="WB01751_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" [0240.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0240.229] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79313100, ftCreationTime.dwHighDateTime=0x1bd4ec6, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79313100, ftLastWriteTime.dwHighDateTime=0x1bd4ec6, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01770_.GIF", cAlternateFileName="")) returned 1 [0240.229] wcscmp (_String1="WB01770_.GIF", _String2=".") returned 1 [0240.229] wcscmp (_String1="WB01770_.GIF", _String2="..") returned 1 [0240.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758d60 [0240.229] wcscpy (in: _Dest=0x6758d60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.229] wcscat (in: _Dest=0x6758d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.229] wcscat (in: _Dest=0x6758d60, _Source="WB01770_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" [0240.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0240.230] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f4f00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x395f4f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01838_.GIF", cAlternateFileName="")) returned 1 [0240.230] wcscmp (_String1="WB01838_.GIF", _String2=".") returned 1 [0240.230] wcscmp (_String1="WB01838_.GIF", _String2="..") returned 1 [0240.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758de8 [0240.230] wcscpy (in: _Dest=0x6758de8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.230] wcscat (in: _Dest=0x6758de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.230] wcscat (in: _Dest=0x6758de8, _Source="WB01838_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" [0240.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0240.231] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fcf500, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36fcf500, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01839_.GIF", cAlternateFileName="")) returned 1 [0240.231] wcscmp (_String1="WB01839_.GIF", _String2=".") returned 1 [0240.231] wcscmp (_String1="WB01839_.GIF", _String2="..") returned 1 [0240.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758e70 [0240.231] wcscpy (in: _Dest=0x6758e70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.231] wcscat (in: _Dest=0x6758e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.231] wcscat (in: _Dest=0x6758e70, _Source="WB01839_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" [0240.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0240.232] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e2800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x990e2800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01840_.GIF", cAlternateFileName="")) returned 1 [0240.232] wcscmp (_String1="WB01840_.GIF", _String2=".") returned 1 [0240.232] wcscmp (_String1="WB01840_.GIF", _String2="..") returned 1 [0240.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758ef8 [0240.232] wcscpy (in: _Dest=0x6758ef8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.232] wcscat (in: _Dest=0x6758ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.232] wcscat (in: _Dest=0x6758ef8, _Source="WB01840_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" [0240.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0240.233] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d738d00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d738d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01842_.GIF", cAlternateFileName="")) returned 1 [0240.233] wcscmp (_String1="WB01842_.GIF", _String2=".") returned 1 [0240.233] wcscmp (_String1="WB01842_.GIF", _String2="..") returned 1 [0240.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6758f80 [0240.233] wcscpy (in: _Dest=0x6758f80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.233] wcscat (in: _Dest=0x6758f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.233] wcscat (in: _Dest=0x6758f80, _Source="WB01842_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" [0240.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0240.235] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c426000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c426000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01843_.GIF", cAlternateFileName="")) returned 1 [0240.235] wcscmp (_String1="WB01843_.GIF", _String2=".") returned 1 [0240.235] wcscmp (_String1="WB01843_.GIF", _String2="..") returned 1 [0240.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6759008 [0240.235] wcscpy (in: _Dest=0x6759008, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.235] wcscat (in: _Dest=0x6759008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.235] wcscat (in: _Dest=0x6759008, _Source="WB01843_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" [0240.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0240.236] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60695100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60695100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x102b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02229_.GIF", cAlternateFileName="")) returned 1 [0240.236] wcscmp (_String1="WB02229_.GIF", _String2=".") returned 1 [0240.236] wcscmp (_String1="WB02229_.GIF", _String2="..") returned 1 [0240.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6759090 [0240.236] wcscpy (in: _Dest=0x6759090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.236] wcscat (in: _Dest=0x6759090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.236] wcscat (in: _Dest=0x6759090, _Source="WB02229_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" [0240.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0240.237] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL1.WMF", cAlternateFileName="")) returned 1 [0240.237] wcscmp (_String1="WHIRL1.WMF", _String2=".") returned 1 [0240.237] wcscmp (_String1="WHIRL1.WMF", _String2="..") returned 1 [0240.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x6759118 [0240.237] wcscpy (in: _Dest=0x6759118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.237] wcscat (in: _Dest=0x6759118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.237] wcscat (in: _Dest=0x6759118, _Source="WHIRL1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" [0240.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0240.238] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL2.WMF", cAlternateFileName="")) returned 1 [0240.238] wcscmp (_String1="WHIRL2.WMF", _String2=".") returned 1 [0240.238] wcscmp (_String1="WHIRL2.WMF", _String2="..") returned 1 [0240.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x67591a0 [0240.239] wcscpy (in: _Dest=0x67591a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.239] wcscat (in: _Dest=0x67591a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.239] wcscat (in: _Dest=0x67591a0, _Source="WHIRL2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" [0240.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67591a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0240.240] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING1.WMF", cAlternateFileName="")) returned 1 [0240.240] wcscmp (_String1="WING1.WMF", _String2=".") returned 1 [0240.240] wcscmp (_String1="WING1.WMF", _String2="..") returned 1 [0240.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x6759228 [0240.240] wcscpy (in: _Dest=0x6759228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.240] wcscat (in: _Dest=0x6759228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.240] wcscat (in: _Dest=0x6759228, _Source="WING1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" [0240.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0240.241] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING2.WMF", cAlternateFileName="")) returned 1 [0240.241] wcscmp (_String1="WING2.WMF", _String2=".") returned 1 [0240.241] wcscmp (_String1="WING2.WMF", _String2="..") returned 1 [0240.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x67592b0 [0240.241] wcscpy (in: _Dest=0x67592b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.241] wcscat (in: _Dest=0x67592b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.241] wcscat (in: _Dest=0x67592b0, _Source="WING2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" [0240.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67592b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0240.242] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 1 [0240.242] wcscmp (_String1="WNTER_01.MID", _String2=".") returned 1 [0240.242] wcscmp (_String1="WNTER_01.MID", _String2="..") returned 1 [0240.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x6759338 [0240.242] wcscpy (in: _Dest=0x6759338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0240.242] wcscat (in: _Dest=0x6759338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0240.242] wcscat (in: _Dest=0x6759338, _Source="WNTER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" [0240.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0240.243] FindNextFileW (in: hFindFile=0x3e80d38, lpFindFileData=0x3f12248 | out: lpFindFileData=0x3f12248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 0 [0240.986] FindClose (in: hFindFile=0x3e80d38 | out: hFindFile=0x3e80d38) returned 1 [0241.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12248) returned 1 [0241.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 [0241.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28f40) returned 1 Thread: id = 454 os_tid = 0xff8 [0135.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ad90 [0135.294] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0135.294] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0135.294] wcscat (in: _Dest=0x3f1ad90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*" [0135.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0135.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0135.835] wcscmp (_String1=".", _String2=".") returned 0 [0135.835] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.835] wcscmp (_String1="..", _String2=".") returned 1 [0135.835] wcscmp (_String1="..", _String2="..") returned 0 [0135.835] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0135.835] wcscmp (_String1="Backgrounds", _String2=".") returned 1 [0135.835] wcscmp (_String1="Backgrounds", _String2="..") returned 1 [0135.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef378 [0135.836] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0135.836] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0135.836] wcscat (in: _Dest=0x66ef378, _Source="Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0138.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0138.063] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0138.063] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0138.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0138.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0138.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 455 os_tid = 0x74c [0135.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e41030 [0135.295] wcscpy (in: _Dest=0x3e41030, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0135.295] wcscat (in: _Dest=0x3e41030, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0135.295] wcscat (in: _Dest=0x3e41030, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\*" [0135.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0135.295] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0135.295] wcscmp (_String1=".", _String2=".") returned 0 [0135.295] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.295] wcscmp (_String1="..", _String2=".") returned 1 [0135.295] wcscmp (_String1="..", _String2="..") returned 0 [0135.295] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0135.295] wcscmp (_String1="10.0", _String2=".") returned 1 [0135.295] wcscmp (_String1="10.0", _String2="..") returned 1 [0135.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e62600 [0135.295] wcscpy (in: _Dest=0x3e62600, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0135.295] wcscat (in: _Dest=0x3e62600, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0135.295] wcscat (in: _Dest=0x3e62600, _Source="10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0135.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0135.584] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0135.585] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0135.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0135.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41030) returned 1 [0135.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e417c8) returned 1 Thread: id = 456 os_tid = 0xff0 [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eef678 [0135.296] wcscpy (in: _Dest=0x3eef678, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0135.296] wcscat (in: _Dest=0x3eef678, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0135.296] wcscat (in: _Dest=0x3eef678, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*" [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0135.296] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0135.296] wcscmp (_String1=".", _String2=".") returned 0 [0135.296] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.296] wcscmp (_String1="..", _String2=".") returned 1 [0135.296] wcscmp (_String1="..", _String2="..") returned 0 [0135.296] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0135.296] wcscmp (_String1="1.0", _String2=".") returned 1 [0135.296] wcscmp (_String1="1.0", _String2="..") returned 1 [0135.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eef540 [0135.297] wcscpy (in: _Dest=0x3eef540, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0135.297] wcscat (in: _Dest=0x3eef540, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0135.297] wcscat (in: _Dest=0x3eef540, _Source="1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0135.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3eef540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0135.587] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0135.587] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0135.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0135.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef678) returned 1 [0135.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 457 os_tid = 0xfec [0135.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067280 [0135.297] wcscpy (in: _Dest=0x3067280, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0135.297] wcscat (in: _Dest=0x3067280, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0135.297] wcscat (in: _Dest=0x3067280, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\*") returned="C:\\ProgramData\\Sun\\Java\\*" [0135.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0135.297] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0135.837] wcscmp (_String1=".", _String2=".") returned 0 [0135.837] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.837] wcscmp (_String1="..", _String2=".") returned 1 [0135.837] wcscmp (_String1="..", _String2="..") returned 0 [0135.837] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0135.837] wcscmp (_String1="Java Update", _String2=".") returned 1 [0135.837] wcscmp (_String1="Java Update", _String2="..") returned 1 [0135.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e626a0 [0135.837] wcscpy (in: _Dest=0x3e626a0, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0135.837] wcscat (in: _Dest=0x3e626a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0135.837] wcscat (in: _Dest=0x3e626a0, _Source="Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0138.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e626a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0138.065] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0138.066] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0138.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19af0) returned 1 Thread: id = 458 os_tid = 0xf88 [0135.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333168 [0135.298] wcscpy (in: _Dest=0x333168, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0135.298] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0135.298] wcscat (in: _Dest=0x333168, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0135.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0135.298] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0135.838] wcscmp (_String1=".", _String2=".") returned 0 [0135.838] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.838] wcscmp (_String1="..", _String2=".") returned 1 [0135.838] wcscmp (_String1="..", _String2="..") returned 0 [0135.838] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0135.838] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0135.838] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0135.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56838 [0135.838] wcscpy (in: _Dest=0x3d56838, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0135.838] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0135.838] wcscat (in: _Dest=0x3d56838, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0138.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0138.068] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0138.068] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0138.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0138.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0138.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332e68) returned 1 Thread: id = 459 os_tid = 0xfc4 [0135.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b928 [0135.299] wcscpy (in: _Dest=0x35b928, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0135.299] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0135.299] wcscat (in: _Dest=0x35b928, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0135.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0135.299] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0135.839] wcscmp (_String1=".", _String2=".") returned 0 [0135.839] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.839] wcscmp (_String1="..", _String2=".") returned 1 [0135.839] wcscmp (_String1="..", _String2="..") returned 0 [0135.839] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0135.839] wcscmp (_String1="Patch", _String2=".") returned 1 [0135.839] wcscmp (_String1="Patch", _String2="..") returned 1 [0135.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7658 [0135.839] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0135.839] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0135.839] wcscat (in: _Dest=0x2ff7658, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0138.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff7658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0138.072] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0138.072] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0138.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0138.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0138.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c0e0) returned 1 Thread: id = 460 os_tid = 0xfc8 [0135.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0135.300] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0135.300] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0135.300] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0135.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca478 [0135.300] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0135.840] wcscmp (_String1=".", _String2=".") returned 0 [0135.840] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.840] wcscmp (_String1="..", _String2=".") returned 1 [0135.840] wcscmp (_String1="..", _String2="..") returned 0 [0135.840] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0135.840] wcscmp (_String1="Patch", _String2=".") returned 1 [0135.840] wcscmp (_String1="Patch", _String2="..") returned 1 [0135.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff77c8 [0135.840] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0135.840] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0135.840] wcscat (in: _Dest=0x2ff77c8, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0138.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff77c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0138.074] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0138.075] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0138.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca478) returned 1 [0138.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0138.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 461 os_tid = 0x40c [0135.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm")) returned 0x20 [0140.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0140.519] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.030] GetLastError () returned 0x5 [0141.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0141.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 Thread: id = 462 os_tid = 0xcd4 [0135.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm")) returned 0x20 [0140.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0140.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.031] GetLastError () returned 0x5 [0141.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0141.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 Thread: id = 463 os_tid = 0xcc0 [0135.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm")) returned 0x20 [0143.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0143.742] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.686] GetLastError () returned 0x5 [0145.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0145.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 464 os_tid = 0xd0c [0135.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm")) returned 0x20 [0139.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0139.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.501] GetLastError () returned 0x5 [0141.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0141.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 465 os_tid = 0x264 [0135.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm")) returned 0x20 [0141.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0141.508] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.740] GetLastError () returned 0x5 [0143.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0143.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 Thread: id = 466 os_tid = 0x888 [0135.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm")) returned 0x20 [0139.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0139.029] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.534] GetLastError () returned 0x5 [0140.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0140.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 467 os_tid = 0x8d8 [0135.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm")) returned 0x20 [0138.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0138.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.297] GetLastError () returned 0x5 [0139.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0139.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 Thread: id = 468 os_tid = 0x860 [0135.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef4d8 [0135.305] wcscpy (in: _Dest=0x3eef4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0135.305] wcscat (in: _Dest=0x3eef4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0135.305] wcscat (in: _Dest=0x3eef4d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*" [0135.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0135.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0144.607] wcscmp (_String1=".", _String2=".") returned 0 [0144.607] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.607] wcscmp (_String1="..", _String2=".") returned 1 [0144.607] wcscmp (_String1="..", _String2="..") returned 0 [0144.607] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0144.607] wcscmp (_String1="CIDFont", _String2=".") returned 1 [0144.607] wcscmp (_String1="CIDFont", _String2="..") returned 1 [0144.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e62f8 [0144.607] wcscpy (in: _Dest=0x66e62f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0144.607] wcscat (in: _Dest=0x66e62f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0144.607] wcscat (in: _Dest=0x66e62f8, _Source="CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0153.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e62f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0153.545] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0153.545] wcscmp (_String1="CMap", _String2=".") returned 1 [0153.545] wcscmp (_String1="CMap", _String2="..") returned 1 [0153.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23ca0 [0153.546] wcscpy (in: _Dest=0x3f23ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.546] wcscat (in: _Dest=0x3f23ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.546] wcscat (in: _Dest=0x3f23ca0, _Source="CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0153.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0153.555] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0153.555] wcscmp (_String1="ENUtxt.pdf", _String2=".") returned 1 [0153.555] wcscmp (_String1="ENUtxt.pdf", _String2="..") returned 1 [0153.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0420 [0153.556] wcscpy (in: _Dest=0x66d0420, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.556] wcscat (in: _Dest=0x66d0420, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.556] wcscat (in: _Dest=0x66d0420, _Source="ENUtxt.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" [0153.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0153.557] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0153.557] wcscmp (_String1="Font", _String2=".") returned 1 [0153.557] wcscmp (_String1="Font", _String2="..") returned 1 [0153.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f235a0 [0153.557] wcscpy (in: _Dest=0x3f235a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.557] wcscat (in: _Dest=0x3f235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.557] wcscat (in: _Dest=0x3f235a0, _Source="Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0153.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0153.558] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0153.558] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0153.558] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0153.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0c18 [0153.558] wcscpy (in: _Dest=0x66d0c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.558] wcscat (in: _Dest=0x66d0c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.558] wcscat (in: _Dest=0x66d0c18, _Source="Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0153.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d0c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0153.559] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0153.559] wcscmp (_String1="SaslPrep", _String2=".") returned 1 [0153.560] wcscmp (_String1="SaslPrep", _String2="..") returned 1 [0153.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0948 [0153.560] wcscpy (in: _Dest=0x66d0948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.560] wcscat (in: _Dest=0x66d0948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.560] wcscat (in: _Dest=0x66d0948, _Source="SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0153.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d0948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0153.561] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0153.561] wcscmp (_String1="TypeSupport", _String2=".") returned 1 [0153.561] wcscmp (_String1="TypeSupport", _String2="..") returned 1 [0153.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0e70 [0153.561] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0153.561] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0153.561] wcscat (in: _Dest=0x66d0e70, _Source="TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0153.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0153.562] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0153.562] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0153.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0153.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef4d8) returned 1 [0153.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1ce8) returned 1 Thread: id = 469 os_tid = 0x884 [0135.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29bf0 [0135.305] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0135.305] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0135.305] wcscat (in: _Dest=0x3f29bf0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*" [0135.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0135.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0144.108] wcscmp (_String1=".", _String2=".") returned 0 [0144.108] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.108] wcscmp (_String1="..", _String2=".") returned 1 [0144.108] wcscmp (_String1="..", _String2="..") returned 0 [0144.108] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0144.108] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2=".") returned 1 [0144.108] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2="..") returned 1 [0144.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6740 [0144.108] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0144.108] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0144.108] wcscat (in: _Dest=0x2ff6740, _Source="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0146.081] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0146.081] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0146.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0146.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 [0146.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 470 os_tid = 0x8d4 [0135.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm")) returned 0x20 [0140.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0140.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.032] GetLastError () returned 0x5 [0141.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0141.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 471 os_tid = 0x8a0 [0135.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm")) returned 0x20 [0140.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0140.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.033] GetLastError () returned 0x5 [0141.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0141.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 Thread: id = 472 os_tid = 0x8c0 [0135.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm")) returned 0x20 [0140.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0140.534] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.017] GetLastError () returned 0x5 [0141.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0141.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c398) returned 1 Thread: id = 473 os_tid = 0x8d0 [0135.307] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20 [0135.307] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0135.308] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.308] GetLastError () returned 0x5 [0135.308] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0135.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03610) returned 1 Thread: id = 474 os_tid = 0x8e0 [0135.314] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl")) returned 0x20 [0135.844] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0135.845] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.845] GetLastError () returned 0x5 [0135.845] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0135.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7440) returned 1 Thread: id = 475 os_tid = 0x8f0 [0135.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e03610 [0135.315] wcscpy (in: _Dest=0x3e03610, _Source="C:\\ProgramData\\Microsoft\\DRM\\Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0135.315] wcscat (in: _Dest=0x3e03610, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\" [0135.315] wcscat (in: _Dest=0x3e03610, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\*" [0135.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0135.315] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.316] wcscmp (_String1=".", _String2=".") returned 0 [0135.316] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.316] wcscmp (_String1="..", _String2=".") returned 1 [0135.316] wcscmp (_String1="..", _String2="..") returned 0 [0135.316] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.316] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0135.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03610) returned 1 [0135.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 Thread: id = 476 os_tid = 0x914 [0135.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e03610 [0135.317] wcscpy (in: _Dest=0x3e03610, _Source="C:\\ProgramData\\Microsoft\\eHome\\logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0135.317] wcscat (in: _Dest=0x3e03610, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\" [0135.317] wcscat (in: _Dest=0x3e03610, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\*" [0135.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0135.317] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.318] wcscmp (_String1=".", _String2=".") returned 0 [0135.318] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.318] wcscmp (_String1="..", _String2=".") returned 1 [0135.318] wcscmp (_String1="..", _String2="..") returned 0 [0135.318] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.318] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0135.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03610) returned 1 [0135.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4dfc8) returned 1 Thread: id = 477 os_tid = 0x944 [0135.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef470 [0135.319] wcscpy (in: _Dest=0x3eef470, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0135.319] wcscat (in: _Dest=0x3eef470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0135.319] wcscat (in: _Dest=0x3eef470, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*" [0135.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0135.319] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0135.846] wcscmp (_String1=".", _String2=".") returned 0 [0135.846] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.846] wcscmp (_String1="..", _String2=".") returned 1 [0135.846] wcscmp (_String1="..", _String2="..") returned 0 [0135.846] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0135.846] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0135.846] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0135.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d2d8 [0135.846] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0135.846] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0135.846] wcscat (in: _Dest=0x32d2d8, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0138.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0138.077] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0138.077] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0138.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0138.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef470) returned 1 [0138.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5648) returned 1 Thread: id = 478 os_tid = 0x740 [0135.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eef3a0 [0135.320] wcscpy (in: _Dest=0x3eef3a0, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0135.320] wcscat (in: _Dest=0x3eef3a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\" [0135.320] wcscat (in: _Dest=0x3eef3a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\*" [0135.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0135.320] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.320] wcscmp (_String1=".", _String2=".") returned 0 [0135.320] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.320] wcscmp (_String1="..", _String2=".") returned 1 [0135.320] wcscmp (_String1="..", _String2="..") returned 0 [0135.320] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.321] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0135.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef3a0) returned 1 [0135.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 Thread: id = 479 os_tid = 0xc8 [0135.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e070 [0135.326] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0135.326] wcscat (in: _Dest=0x3d8e070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\" [0135.326] wcscat (in: _Dest=0x3d8e070, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*" [0135.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0135.326] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0135.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0135.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 480 os_tid = 0x904 [0135.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0135.327] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0135.327] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0135.327] wcscat (in: _Dest=0x3f1abb0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0135.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0135.327] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0135.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0135.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a9d0) returned 1 Thread: id = 481 os_tid = 0x954 [0135.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e4dfc8 [0135.328] wcscpy (in: _Dest=0x3e4dfc8, _Source="C:\\ProgramData\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0135.328] wcscat (in: _Dest=0x3e4dfc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\" [0135.328] wcscat (in: _Dest=0x3e4dfc8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*" [0135.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0135.328] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.329] wcscmp (_String1=".", _String2=".") returned 0 [0135.329] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.329] wcscmp (_String1="..", _String2=".") returned 1 [0135.329] wcscmp (_String1="..", _String2="..") returned 0 [0135.329] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.329] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0135.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4dfc8) returned 1 [0135.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e618e0) returned 1 Thread: id = 482 os_tid = 0x964 [0135.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe0c68 [0135.331] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0135.331] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\" [0135.331] wcscat (in: _Dest=0x2fe0c68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*" [0135.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0135.332] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.332] wcscmp (_String1=".", _String2=".") returned 0 [0135.332] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.332] wcscmp (_String1="..", _String2=".") returned 1 [0135.332] wcscmp (_String1="..", _String2="..") returned 0 [0135.332] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.332] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0135.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 483 os_tid = 0x974 [0135.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0135.334] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0135.334] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\" [0135.334] wcscat (in: _Dest=0x2fe6d88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*" [0135.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0135.334] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0135.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 484 os_tid = 0x984 [0135.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e070 [0135.335] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0135.335] wcscat (in: _Dest=0x3d8e070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0135.335] wcscat (in: _Dest=0x3d8e070, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*" [0135.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0135.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0135.848] wcscmp (_String1=".", _String2=".") returned 0 [0135.848] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.848] wcscmp (_String1="..", _String2=".") returned 1 [0135.848] wcscmp (_String1="..", _String2="..") returned 0 [0135.848] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0135.848] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0135.848] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0135.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0fbf0 [0135.848] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0135.848] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0135.848] wcscat (in: _Dest=0x3e0fbf0, _Source="WelcomeScan.jpg" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0138.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0138.079] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0138.079] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0138.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0138.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0138.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 485 os_tid = 0x994 [0135.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef3a0 [0135.337] wcscpy (in: _Dest=0x3eef3a0, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0135.337] wcscat (in: _Dest=0x3eef3a0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0135.337] wcscat (in: _Dest=0x3eef3a0, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*" [0135.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0135.337] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0135.338] wcscmp (_String1=".", _String2=".") returned 0 [0135.338] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.338] wcscmp (_String1="..", _String2=".") returned 1 [0135.338] wcscmp (_String1="..", _String2="..") returned 0 [0135.338] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0135.338] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0135.338] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0135.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bd48 [0135.338] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0135.338] wcscat (in: _Dest=0x35bd48, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0135.338] wcscat (in: _Dest=0x35bd48, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0135.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35bd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0135.589] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0135.589] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0135.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0135.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef3a0) returned 1 [0135.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 486 os_tid = 0x9a4 [0135.340] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 0x20 [0137.277] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", dwFileAttributes=0x20) returned 1 [0137.278] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe20 [0137.278] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x85efa5c | out: lpFileSize=0x85efa5c*=879394) returned 1 [0137.278] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0xd6b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.278] ReadFile (in: hFile=0xe20, lpBuffer=0x85efa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85efa48, lpOverlapped=0x0 | out: lpBuffer=0x85efa38*, lpNumberOfBytesRead=0x85efa48*=0x4, lpOverlapped=0x0) returned 1 [0137.282] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0137.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4fd8 [0137.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.282] NtQuerySystemTime (in: CurrentTime=0x85ef9d0 | out: CurrentTime=0x85ef9d0*=132482710459464000) returned 0x0 [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x7df24bb0 [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x78f4964d [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6470e482 [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6214bcaf [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x8343016 [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x528576cd [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6dc60e07 [0137.282] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x71526f17 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x50da737b [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6c633d67 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x532ce2c3 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x701a09b8 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x708a2d56 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x369512d2 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x44913bdd [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x16009392 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x50c6d0d5 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6cd2fca8 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x2f329f4f [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6ecc9426 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x7a79124f [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x4eba3543 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x620cdfe8 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0xf68df90 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x4c8889e8 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x46211fa9 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x44cc7ae1 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x20cd1229 [0137.283] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x5973d16d [0137.284] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x6185b17d [0137.284] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x3426d4d4 [0137.284] RtlRandomEx (in: Seed=0x85ef9c8 | out: Seed=0x85ef9c8) returned 0x38b0033 [0137.296] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.297] ReadFile (in: hFile=0xe20, lpBuffer=0x6828160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x6828160*, lpNumberOfBytesRead=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.301] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0137.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682bd68 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0137.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0137.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.302] WriteFile (in: hFile=0xe20, lpBuffer=0x682bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x682bd68*, lpNumberOfBytesWritten=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd68) returned 1 [0138.232] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.232] ReadFile (in: hFile=0xe20, lpBuffer=0x6828160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x6828160*, lpNumberOfBytesRead=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.235] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0138.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682bd68 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0138.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0138.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0138.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.236] WriteFile (in: hFile=0xe20, lpBuffer=0x682bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x682bd68*, lpNumberOfBytesWritten=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd68) returned 1 [0138.662] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.662] ReadFile (in: hFile=0xe20, lpBuffer=0x6828160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x6828160*, lpNumberOfBytesRead=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.714] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0138.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0138.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x681cd48 [0138.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0138.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0138.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0138.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.715] WriteFile (in: hFile=0xe20, lpBuffer=0x681cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85ef9d0, lpOverlapped=0x0 | out: lpBuffer=0x681cd48*, lpNumberOfBytesWritten=0x85ef9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681cd48) returned 1 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8df38 [0139.314] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.314] WriteFile (in: hFile=0xe20, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x85efa50, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x85efa50*=0x154, lpOverlapped=0x0) returned 1 [0139.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0139.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a180) returned 1 [0139.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0139.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19af0) returned 1 [0139.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 [0139.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0139.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0139.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0139.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcee8 [0139.927] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0139.927] wcscat (in: _Dest=0x66dcee8, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.ac3a86" [0139.927] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.ac3a86", NtPathName=0x85ef9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ccb0 [0140.023] FlushFileBuffers (hFile=0xe20) returned 1 [0140.043] CloseHandle (hObject=0xe20) returned 1 [0140.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0140.045] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0140.045] wcscat (in: _Dest=0x3da4c70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0140.045] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0140.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 [0140.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 Thread: id = 487 os_tid = 0x9b4 [0135.345] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 0x20 [0137.300] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", dwFileAttributes=0x20) returned 1 [0137.303] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf0 [0137.303] GetFileSizeEx (in: hFile=0xdf0, lpFileSize=0x866f7d4 | out: lpFileSize=0x866f7d4*=845941) returned 1 [0137.304] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0xce871, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.304] ReadFile (in: hFile=0xdf0, lpBuffer=0x866f7b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x866f7c0, lpOverlapped=0x0 | out: lpBuffer=0x866f7b0*, lpNumberOfBytesRead=0x866f7c0*=0x4, lpOverlapped=0x0) returned 1 [0137.334] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.334] NtQuerySystemTime (in: CurrentTime=0x866f748 | out: CurrentTime=0x866f748*=132482710459932000) returned 0x0 [0137.334] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x33cc6106 [0137.334] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x4999f363 [0137.334] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x77923b25 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0xcfa00e4 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x36a39128 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x39f0b0b1 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x504f512b [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x4c666288 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0xe3ea07 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x3a052750 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x1a0c4d9a [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x184b6694 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x64d72df5 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x2462bf33 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x4ac3fdc [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x75b4e72a [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x7bec4490 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x12cb896e [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x17234157 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x4dd63361 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x3a981738 [0137.335] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x58d5aa73 [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x63dc0e5d [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x2c14b6a [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x647a3557 [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x19ba7fe9 [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x52ec55bc [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x46f542e8 [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x2be3824b [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x61735669 [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x44cf039a [0137.336] RtlRandomEx (in: Seed=0x866f740 | out: Seed=0x866f740) returned 0x6b5f3123 [0137.348] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.348] ReadFile (in: hFile=0xdf0, lpBuffer=0x6824558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x6824558*, lpNumberOfBytesRead=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0137.354] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x681cd48 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0137.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0137.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.355] WriteFile (in: hFile=0xdf0, lpBuffer=0x681cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x681cd48*, lpNumberOfBytesWritten=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0138.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681cd48) returned 1 [0138.241] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.242] ReadFile (in: hFile=0xdf0, lpBuffer=0x6824558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x6824558*, lpNumberOfBytesRead=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0138.246] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0138.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x681cd48 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0138.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0138.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0138.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.247] WriteFile (in: hFile=0xdf0, lpBuffer=0x681cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x681cd48*, lpNumberOfBytesWritten=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0138.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681cd48) returned 1 [0138.666] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.666] ReadFile (in: hFile=0xdf0, lpBuffer=0x6824558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x6824558*, lpNumberOfBytesRead=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0138.700] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0138.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fb100 [0138.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0138.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0138.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.701] WriteFile (in: hFile=0xdf0, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x866f748, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0x866f748*=0x3c00, lpOverlapped=0x0) returned 1 [0139.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0139.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e070 [0139.312] SetFilePointerEx (in: hFile=0xdf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.312] WriteFile (in: hFile=0xdf0, lpBuffer=0x3e63ff0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x866f7c8, lpOverlapped=0x0 | out: lpBuffer=0x3e63ff0*, lpNumberOfBytesWritten=0x866f7c8*=0x146, lpOverlapped=0x0) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63ff0) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e70) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0139.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da4c70 [0139.923] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0139.923] wcscat (in: _Dest=0x3da4c70, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.ac3a86" [0139.923] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.ac3a86", NtPathName=0x866f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0140.010] FlushFileBuffers (hFile=0xdf0) returned 1 [0140.062] CloseHandle (hObject=0xdf0) returned 1 [0140.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10670 [0140.063] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0140.063] wcscat (in: _Dest=0x3e10670, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0140.063] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0140.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f295d0) returned 1 Thread: id = 488 os_tid = 0x9c4 [0135.347] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 0x20 [0137.307] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", dwFileAttributes=0x20) returned 1 [0137.308] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe30 [0137.308] GetFileSizeEx (in: hFile=0xe30, lpFileSize=0xb61f904 | out: lpFileSize=0xb61f904*=595284) returned 1 [0137.308] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x91550, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.308] ReadFile (in: hFile=0xe30, lpBuffer=0xb61f8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb61f8f0, lpOverlapped=0x0 | out: lpBuffer=0xb61f8e0*, lpNumberOfBytesRead=0xb61f8f0*=0x4, lpOverlapped=0x0) returned 1 [0137.314] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0137.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0137.314] NtQuerySystemTime (in: CurrentTime=0xb61f878 | out: CurrentTime=0xb61f878*=132482710459776000) returned 0x0 [0137.314] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x1b184166 [0137.314] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x287fcaec [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x299f5be8 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x417e4550 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x4ab2c958 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x6c549e36 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x14abd64e [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x4ad2f5e1 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x405d00b3 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x158e3ea2 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x5a6c4ab2 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x3fd1ae0 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x1a983ba [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x2c5d25da [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x12d86f9e [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x5bf4ef58 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x6ccbf35e [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x416fc086 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x614e5dcb [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x309324c6 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x6ee165f0 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x40fa03a1 [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x329da54e [0137.315] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x166ca35c [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x3eb6ee22 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x6a0e3cf2 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x41bcd712 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x32200807 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x6a2e829 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x549fa492 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0xbeaee45 [0137.316] RtlRandomEx (in: Seed=0xb61f870 | out: Seed=0xb61f870) returned 0x5512dffe [0137.330] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.330] ReadFile (in: hFile=0xe30, lpBuffer=0x6820950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6820950*, lpNumberOfBytesRead=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0137.351] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0137.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6819140 [0137.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0137.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0137.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0137.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.353] WriteFile (in: hFile=0xe30, lpBuffer=0x6819140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6819140*, lpNumberOfBytesWritten=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0138.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819140) returned 1 [0138.236] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.236] ReadFile (in: hFile=0xe30, lpBuffer=0x6820950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6820950*, lpNumberOfBytesRead=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0138.240] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0138.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6819140 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0138.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0138.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0138.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.241] WriteFile (in: hFile=0xe30, lpBuffer=0x6819140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6819140*, lpNumberOfBytesWritten=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0138.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819140) returned 1 [0138.663] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.663] ReadFile (in: hFile=0xe30, lpBuffer=0x6820950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6820950*, lpNumberOfBytesRead=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0138.664] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0138.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0138.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6819140 [0138.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0138.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0138.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0138.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.665] WriteFile (in: hFile=0xe30, lpBuffer=0x6819140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb61f878, lpOverlapped=0x0 | out: lpBuffer=0x6819140*, lpNumberOfBytesWritten=0xb61f878*=0x3c00, lpOverlapped=0x0) returned 1 [0139.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819140) returned 1 [0139.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e418 [0139.309] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.309] WriteFile (in: hFile=0xe30, lpBuffer=0x3e4d458*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xb61f8f8, lpOverlapped=0x0 | out: lpBuffer=0x3e4d458*, lpNumberOfBytesWritten=0xb61f8f8*=0x14e, lpOverlapped=0x0) returned 1 [0139.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d458) returned 1 [0139.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f198f8) returned 1 [0139.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0139.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4f1c0) returned 1 [0139.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 [0139.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0139.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0139.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0139.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f262e8 [0139.912] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0139.912] wcscat (in: _Dest=0x3f262e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.ac3a86" [0139.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.ac3a86", NtPathName=0xb61f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e930 [0139.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0139.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e27f0) returned 1 [0139.970] NtQueryInformationFile (in: FileHandle=0xe30, IoStatusBlock=0xb61f848, FileInformation=0xb61f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb61f848, FileInformation=0xb61f850) returned 0x0 [0139.970] NtSetInformationFile (FileHandle=0xe30, IoStatusBlock=0xb61f848, FileInformation=0xb61f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0139.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 [0139.971] FlushFileBuffers (hFile=0xe30) returned 1 [0139.986] CloseHandle (hObject=0xe30) returned 1 [0139.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f870 [0139.987] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.987] wcscat (in: _Dest=0x3e0f870, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0139.987] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0139.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 [0139.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 Thread: id = 489 os_tid = 0x9d4 [0135.348] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 0x20 [0137.357] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", dwFileAttributes=0x20) returned 1 [0137.357] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe2c [0137.358] GetFileSizeEx (in: hFile=0xe2c, lpFileSize=0x862f8ec | out: lpFileSize=0x862f8ec*=775702) returned 1 [0137.358] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0xbd612, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.358] ReadFile (in: hFile=0xe2c, lpBuffer=0x862f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x862f8d8, lpOverlapped=0x0 | out: lpBuffer=0x862f8c8*, lpNumberOfBytesRead=0x862f8d8*=0x4, lpOverlapped=0x0) returned 1 [0137.362] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0137.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0137.362] NtQuerySystemTime (in: CurrentTime=0x862f860 | out: CurrentTime=0x862f860*=132482710460244000) returned 0x0 [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x7ff08031 [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x4b30d249 [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x63b28afe [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x5706cb75 [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x272eb9de [0137.362] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0xcc66d74 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x2f447a9 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x73f59f7c [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0xe2c9e1d [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x7d3128a2 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x249984ec [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x6c1a726a [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x32ff357d [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x42ddde11 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x7975f324 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x707820d3 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x24f6ad52 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x36126e9 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x72377240 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x1cdca332 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x7d99e7d8 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x1423b50d [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x628232ac [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x59a8e318 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x6a00d677 [0137.363] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x2d185ba5 [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x25328847 [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x3194b8dd [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x349f929 [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x6e6bbe68 [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x6ba33c1b [0137.364] RtlRandomEx (in: Seed=0x862f858 | out: Seed=0x862f858) returned 0x66719dae [0137.377] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.377] ReadFile (in: hFile=0xe2c, lpBuffer=0x6811930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6811930*, lpNumberOfBytesRead=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0137.388] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0137.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0137.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6815538 [0137.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0137.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0137.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0137.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.389] WriteFile (in: hFile=0xe2c, lpBuffer=0x6815538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6815538*, lpNumberOfBytesWritten=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0138.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6815538) returned 1 [0138.247] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.247] ReadFile (in: hFile=0xe2c, lpBuffer=0x6811930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6811930*, lpNumberOfBytesRead=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0138.251] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0138.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0138.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6815538 [0138.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0138.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0138.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0138.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.252] WriteFile (in: hFile=0xe2c, lpBuffer=0x6815538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6815538*, lpNumberOfBytesWritten=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0138.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6815538) returned 1 [0138.667] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.667] ReadFile (in: hFile=0xe2c, lpBuffer=0x6811930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6811930*, lpNumberOfBytesRead=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0138.702] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0138.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0138.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6815538 [0138.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0138.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0138.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0138.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.703] WriteFile (in: hFile=0xe2c, lpBuffer=0x6815538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x862f860, lpOverlapped=0x0 | out: lpBuffer=0x6815538*, lpNumberOfBytesWritten=0x862f860*=0x3c00, lpOverlapped=0x0) returned 1 [0139.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6815538) returned 1 [0139.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0139.313] SetFilePointerEx (in: hFile=0xe2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.313] WriteFile (in: hFile=0xe2c, lpBuffer=0x3000ba0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x862f8e0, lpOverlapped=0x0 | out: lpBuffer=0x3000ba0*, lpNumberOfBytesWritten=0x862f8e0*=0x14c, lpOverlapped=0x0) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3000ba0) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0139.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0139.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f261d8 [0139.925] wcscpy (in: _Dest=0x3f261d8, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0139.925] wcscat (in: _Dest=0x3f261d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.ac3a86" [0139.925] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.ac3a86", NtPathName=0x862f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0da30 [0140.034] FlushFileBuffers (hFile=0xe2c) returned 1 [0140.056] CloseHandle (hObject=0xe2c) returned 1 [0140.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10670 [0140.057] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0140.057] wcscat (in: _Dest=0x3e10670, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0140.057] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0140.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 Thread: id = 490 os_tid = 0x9e4 [0135.349] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 0x20 [0137.380] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", dwFileAttributes=0x20) returned 1 [0137.381] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd78 [0137.381] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0xb67f934 | out: lpFileSize=0xb67f934*=780831) returned 1 [0137.381] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0xbea1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.381] ReadFile (in: hFile=0xd78, lpBuffer=0xb67f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb67f920, lpOverlapped=0x0 | out: lpBuffer=0xb67f910*, lpNumberOfBytesRead=0xb67f920*=0x4, lpOverlapped=0x0) returned 1 [0137.391] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0137.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0137.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.392] NtQuerySystemTime (in: CurrentTime=0xb67f8a8 | out: CurrentTime=0xb67f8a8*=132482710460556000) returned 0x0 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x2d99bb6a [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x328b244e [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x20562f0f [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x2d50ed41 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x787c863b [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x53dcae61 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x59ecc371 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0xe26bf08 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x29ca291e [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x49632d92 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x6f062e7 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x7ecd6e48 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0xa46d819 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x579f2f5b [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x48336021 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x520550be [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x29135d0a [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x710e8e28 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x39faaa9 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x35db460d [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x1ca3750a [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x3475ce70 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x5f8567a2 [0137.392] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0xdce1b8 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x56f50ecc [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x346345e8 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x3f6dd789 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x1a8abb68 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x3c6c9c64 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x178db0de [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x3190b85 [0137.393] RtlRandomEx (in: Seed=0xb67f8a0 | out: Seed=0xb67f8a0) returned 0x28531e1 [0137.405] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.405] ReadFile (in: hFile=0xd78, lpBuffer=0x680a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x680a120*, lpNumberOfBytesRead=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.408] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0137.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0137.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x680dd28 [0137.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0137.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0137.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.409] WriteFile (in: hFile=0xd78, lpBuffer=0x680dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x680dd28*, lpNumberOfBytesWritten=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x680dd28) returned 1 [0138.252] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.252] ReadFile (in: hFile=0xd78, lpBuffer=0x680a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x680a120*, lpNumberOfBytesRead=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.255] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0138.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0138.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fb100 [0138.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0138.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0138.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0138.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.256] WriteFile (in: hFile=0xd78, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0138.667] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.668] ReadFile (in: hFile=0xd78, lpBuffer=0x680a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x680a120*, lpNumberOfBytesRead=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.683] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0138.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0138.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f74f8 [0138.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0138.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0138.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.684] WriteFile (in: hFile=0xd78, lpBuffer=0x67f74f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb67f8a8, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesWritten=0xb67f8a8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0139.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bd18 [0139.311] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.311] WriteFile (in: hFile=0xd78, lpBuffer=0x324ea8*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xb67f928, lpOverlapped=0x0 | out: lpBuffer=0x324ea8*, lpNumberOfBytesWritten=0xb67f928*=0x144, lpOverlapped=0x0) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x324ea8) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 [0139.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0139.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4240) returned 1 [0139.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0139.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6370 [0139.922] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0139.922] wcscat (in: _Dest=0x3da6370, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.ac3a86" [0139.922] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.ac3a86", NtPathName=0xb67f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32b820 [0140.002] FlushFileBuffers (hFile=0xd78) returned 1 [0140.016] CloseHandle (hObject=0xd78) returned 1 [0140.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0140.018] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0140.018] wcscat (in: _Dest=0x3da4c70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0140.018] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0140.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 [0140.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 Thread: id = 491 os_tid = 0x9f4 [0135.349] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 0x20 [0137.385] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", dwFileAttributes=0x20) returned 1 [0137.385] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd88 [0137.385] GetFileSizeEx (in: hFile=0xd88, lpFileSize=0xb3ff8c4 | out: lpFileSize=0xb3ff8c4*=561276) returned 1 [0137.385] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x89078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.385] ReadFile (in: hFile=0xd88, lpBuffer=0xb3ff8a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb3ff8b0, lpOverlapped=0x0 | out: lpBuffer=0xb3ff8a0*, lpNumberOfBytesRead=0xb3ff8b0*=0x4, lpOverlapped=0x0) returned 1 [0137.600] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0137.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0137.600] NtQuerySystemTime (in: CurrentTime=0xb3ff838 | out: CurrentTime=0xb3ff838*=132482710462584000) returned 0x0 [0137.600] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x406b6728 [0137.600] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x21e0be9 [0137.600] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x432b4361 [0137.600] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x60b8e076 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x5cce8e5d [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x56ceab51 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x6d139349 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x5352787e [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x12430d22 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x493a48a5 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x6b509414 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x2b2db282 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x273bd69 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x79f4ab5a [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x5178d335 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x234cb794 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x3300376a [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x40f8fe44 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x7a3a8f0e [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x4e08d328 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x18f83a22 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x3b21d2b0 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x2db05605 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x5815a05c [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x65f299a5 [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x680f6d7f [0137.601] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x365a9a3a [0137.602] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x54519bb3 [0137.602] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x4039fc2d [0137.602] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x12560d0 [0137.602] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x6e7e1ef2 [0137.602] RtlRandomEx (in: Seed=0xb3ff830 | out: Seed=0xb3ff830) returned 0x2da127a8 [0137.612] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.613] ReadFile (in: hFile=0xd88, lpBuffer=0x67f74f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesRead=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0137.616] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0137.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fb100 [0137.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0137.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0137.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0137.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.617] WriteFile (in: hFile=0xd88, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0137.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0137.622] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.622] ReadFile (in: hFile=0xd88, lpBuffer=0x67f74f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesRead=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0137.626] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32958 [0137.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0137.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0137.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0137.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fb100 [0137.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0137.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0137.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0137.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0137.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32958) returned 1 [0137.627] WriteFile (in: hFile=0xd88, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0138.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0138.254] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.257] ReadFile (in: hFile=0xd88, lpBuffer=0x67f74f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesRead=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0138.262] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6722910 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0138.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0138.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.263] WriteFile (in: hFile=0xd88, lpBuffer=0x6722910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ff838, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesWritten=0xb3ff838*=0x3c00, lpOverlapped=0x0) returned 1 [0138.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6722910) returned 1 [0138.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0138.669] SetFilePointerEx (in: hFile=0xd88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.669] WriteFile (in: hFile=0xd88, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xb3ff8b8, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0xb3ff8b8*=0x14e, lpOverlapped=0x0) returned 1 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a110) returned 1 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a0d8) returned 1 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0139.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0139.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0139.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0139.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26040 [0139.506] wcscpy (in: _Dest=0x3f26040, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0139.506] wcscat (in: _Dest=0x3f26040, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.ac3a86" [0139.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.ac3a86", NtPathName=0xb3ff830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d8f0 [0139.546] FlushFileBuffers (hFile=0xd88) returned 1 [0139.807] CloseHandle (hObject=0xd88) returned 1 [0139.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6370 [0139.846] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.846] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0139.846] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0139.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 Thread: id = 492 os_tid = 0xa04 [0135.350] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 0x20 [0135.852] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", dwFileAttributes=0x20) returned 1 [0135.852] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3a8 [0135.853] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0xb59fb4c | out: lpFileSize=0xb59fb4c*=777835) returned 1 [0135.853] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0xbde67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.853] ReadFile (in: hFile=0x3a8, lpBuffer=0xb59fb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb59fb38, lpOverlapped=0x0 | out: lpBuffer=0xb59fb28*, lpNumberOfBytesRead=0xb59fb38*=0x4, lpOverlapped=0x0) returned 1 [0135.919] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2440 [0135.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0135.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0135.920] NtQuerySystemTime (in: CurrentTime=0xb59fac0 | out: CurrentTime=0xb59fac0*=132482710445892000) returned 0x0 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x4a6a9191 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x4639fd37 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x7a25018a [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x343b7b85 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x2824e43b [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x77aaef36 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x1771910d [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x410160a7 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x45be57fc [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x29f76332 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x779050ce [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x3f6dbcf1 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x4fc9fb05 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x1b424915 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x3dc50fc0 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x6cc2351c [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x77d81590 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x247763d9 [0135.920] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x596d3cd6 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x60a4a67f [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x4835c210 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x2d67f398 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x3d146a54 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x1b4858d4 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x5dd395b9 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x573288a0 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x6c385a99 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x7622774 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x104fb3df [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x32ffcad0 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x4d546a37 [0135.921] RtlRandomEx (in: Seed=0xb59fab8 | out: Seed=0xb59fab8) returned 0x273c29c7 [0135.930] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.930] ReadFile (in: hFile=0x3a8, lpBuffer=0x6744558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesRead=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.937] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd44b8 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0135.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6748160 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3de0 [0135.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3de0) returned 1 [0135.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0135.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0135.938] WriteFile (in: hFile=0x3a8, lpBuffer=0x6748160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesWritten=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6748160) returned 1 [0137.658] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.658] ReadFile (in: hFile=0x3a8, lpBuffer=0x6744558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesRead=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.661] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x301038 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e78 [0137.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e78) returned 1 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6748160 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e78 [0137.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0137.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0137.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301038) returned 1 [0137.662] WriteFile (in: hFile=0x3a8, lpBuffer=0x6748160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesWritten=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6748160) returned 1 [0138.259] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.259] ReadFile (in: hFile=0x3a8, lpBuffer=0x6744558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesRead=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.260] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0138.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4718) returned 1 [0138.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6748160 [0138.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4718 [0138.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0138.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0138.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.261] WriteFile (in: hFile=0x3a8, lpBuffer=0x6748160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb59fac0, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesWritten=0xb59fac0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6748160) returned 1 [0138.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8db28 [0138.302] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.302] WriteFile (in: hFile=0x3a8, lpBuffer=0x330b20*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xb59fb40, lpOverlapped=0x0 | out: lpBuffer=0x330b20*, lpNumberOfBytesWritten=0xb59fb40*=0x14a, lpOverlapped=0x0) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330b20) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8db28) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0138.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef950 [0138.305] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0138.305] wcscat (in: _Dest=0x66ef950, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.ac3a86" [0138.305] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.ac3a86", NtPathName=0xb59fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30cd0 [0138.308] FlushFileBuffers (hFile=0x3a8) returned 1 [0139.054] CloseHandle (hObject=0x3a8) returned 1 [0139.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6370 [0139.457] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0139.457] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0139.457] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0xffffffff [0139.457] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb70 [0139.547] WriteFile (in: hFile=0xb70, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb59fad4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb59fad4*=0x8b9, lpOverlapped=0x0) returned 1 [0139.549] CloseHandle (hObject=0xb70) returned 1 [0139.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 Thread: id = 493 os_tid = 0xa14 [0135.351] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 0x20 [0135.855] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", dwFileAttributes=0x20) returned 1 [0135.855] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1188 [0135.856] GetFileSizeEx (in: hFile=0x1188, lpFileSize=0xb6ef864 | out: lpFileSize=0xb6ef864*=620888) returned 1 [0135.856] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x97954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.856] ReadFile (in: hFile=0x1188, lpBuffer=0xb6ef840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb6ef850, lpOverlapped=0x0 | out: lpBuffer=0xb6ef840*, lpNumberOfBytesRead=0xb6ef850*=0x4, lpOverlapped=0x0) returned 1 [0135.858] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2440 [0135.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0135.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0135.859] NtQuerySystemTime (in: CurrentTime=0xb6ef7d8 | out: CurrentTime=0xb6ef7d8*=132482710445268000) returned 0x0 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x5459dc7d [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x2c68a167 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x40dc17f8 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x346c4ac8 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x3ec7083 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x17da5137 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x41bb1305 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x6f9afa7c [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x5f68974b [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x7afdc162 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x195c93d3 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x5ad37f4d [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x55412bde [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x7167fdf [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x43456646 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x4d735f4 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x30191773 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x2edf268 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x63cc595e [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x199c74b8 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x17b544a9 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x1d6a7698 [0135.859] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x33b32ea6 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x14e9c0d8 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x757f503c [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x1a0d1f29 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x10f64184 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x34d5061a [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x4eaf6479 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x3d8ef9b9 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x490591e8 [0135.860] RtlRandomEx (in: Seed=0xb6ef7d0 | out: Seed=0xb6ef7d0) returned 0x7456c582 [0135.869] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.869] ReadFile (in: hFile=0x1188, lpBuffer=0x6740950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.935] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd44b8 [0135.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0135.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0135.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0135.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0135.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0135.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0135.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0135.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0135.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0135.936] WriteFile (in: hFile=0x1188, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0138.652] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.652] ReadFile (in: hFile=0x1188, lpBuffer=0x6740950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.781] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d5f8 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0138.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0138.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0138.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0138.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0138.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.782] WriteFile (in: hFile=0x1188, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0139.810] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.810] ReadFile (in: hFile=0x1188, lpBuffer=0x6740950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.812] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32f40 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0240 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0139.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0139.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0139.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0139.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0139.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32f40) returned 1 [0139.813] WriteFile (in: hFile=0x1188, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xb6ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0140.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0140.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8b490 [0140.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0140.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5210 [0140.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0140.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0140.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0140.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0140.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e416a8) returned 1 [0140.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x66ce060 [0140.554] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.554] WriteFile (in: hFile=0x1188, lpBuffer=0x66ce060*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xb6ef858, lpOverlapped=0x0 | out: lpBuffer=0x66ce060*, lpNumberOfBytesWritten=0xb6ef858*=0x146, lpOverlapped=0x0) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce060) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d50) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0143.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x2fcaa08 [0143.128] wcscpy (in: _Dest=0x2fcaa08, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0143.128] wcscat (in: _Dest=0x2fcaa08, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.ac3a86") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.ac3a86" [0143.128] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.ac3a86", NtPathName=0xb6ef7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30810 [0143.207] FlushFileBuffers (hFile=0x1188) returned 1 [0143.210] CloseHandle (hObject=0x1188) returned 1 [0143.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcac08 [0143.220] wcscpy (in: _Dest=0x2fcac08, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0143.220] wcscat (in: _Dest=0x2fcac08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" [0143.220] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\ac3a86-readme.txt")) returned 0x20 [0143.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcac08) returned 1 [0143.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 494 os_tid = 0xa24 [0135.354] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0137.634] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0137.634] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.634] GetLastError () returned 0x5 [0137.634] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0137.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae08) returned 1 Thread: id = 495 os_tid = 0x7b4 [0135.357] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0137.636] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0137.636] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.636] GetLastError () returned 0x5 [0137.636] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0137.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 496 os_tid = 0xa44 [0135.358] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url")) returned 0x20 [0137.638] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0137.638] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.638] GetLastError () returned 0x5 [0137.638] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0137.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 Thread: id = 497 os_tid = 0xa54 [0135.359] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0137.642] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0137.642] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.642] GetLastError () returned 0x5 [0137.642] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0137.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 Thread: id = 498 os_tid = 0xa64 [0135.360] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url")) returned 0x20 [0135.940] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0135.940] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.940] GetLastError () returned 0x5 [0135.940] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0135.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 499 os_tid = 0xa7c [0135.360] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0135.940] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0135.940] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.941] GetLastError () returned 0x5 [0135.941] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0135.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 500 os_tid = 0xa78 [0135.371] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 0x20 [0135.372] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", dwFileAttributes=0x20) returned 1 [0135.372] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdec [0135.372] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x94af9d4 | out: lpFileSize=0x94af9d4*=26246026) returned 1 [0135.372] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x1907b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.372] ReadFile (in: hFile=0xdec, lpBuffer=0x94af9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94af9c0, lpOverlapped=0x0 | out: lpBuffer=0x94af9b0*, lpNumberOfBytesRead=0x94af9c0*=0x4, lpOverlapped=0x0) returned 1 [0135.376] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0135.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40b0 [0135.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0135.376] NtQuerySystemTime (in: CurrentTime=0x94af948 | out: CurrentTime=0x94af948*=132482710440432000) returned 0x0 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x1b222198 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x2bf270b9 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x6d5d9967 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x4a4e5797 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x76c87cbd [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x2b4ed877 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x220a165e [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x1eeccca [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x191462b6 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x426e11ec [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x189dd002 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x4b504f6f [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x25aafd53 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x23700176 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x27bb46c2 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x192b1b48 [0135.376] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x40250a06 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0xa32248d [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x3d31e [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x1d198fae [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x19e24669 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x6155ea03 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x3b0f21d [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x68f412bb [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x7d988463 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x546418ca [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x134eb354 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x754708d6 [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x1c131aee [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x51e61c8f [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0xdb7b70b [0135.377] RtlRandomEx (in: Seed=0x94af940 | out: Seed=0x94af940) returned 0x16d5f7d9 [0135.385] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.386] ReadFile (in: hFile=0xdec, lpBuffer=0x67fed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesRead=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0135.389] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3008a0 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ac28 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6802910 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0135.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0135.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0135.389] WriteFile (in: hFile=0xdec, lpBuffer=0x6802910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesWritten=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0138.211] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.211] ReadFile (in: hFile=0xdec, lpBuffer=0x67fed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesRead=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.215] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0138.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0138.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6802910 [0138.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0138.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0138.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0138.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.216] WriteFile (in: hFile=0xdec, lpBuffer=0x6802910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesWritten=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0138.655] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.655] ReadFile (in: hFile=0xdec, lpBuffer=0x67fed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesRead=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0138.765] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4380 [0138.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0138.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6802910 [0138.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4380 [0138.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0138.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0138.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.766] WriteFile (in: hFile=0xdec, lpBuffer=0x6802910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94af948, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesWritten=0x94af948*=0x3c00, lpOverlapped=0x0) returned 1 [0139.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0139.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd650 [0139.317] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.317] WriteFile (in: hFile=0xdec, lpBuffer=0x34b980*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x94af9c8, lpOverlapped=0x0 | out: lpBuffer=0x34b980*, lpNumberOfBytesWritten=0x94af9c8*=0x14a, lpOverlapped=0x0) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34b980) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd650) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40b0) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0139.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0139.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f870 [0139.937] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" [0139.937] wcscat (in: _Dest=0x3e0f870, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.ac3a86") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.ac3a86" [0139.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.ac3a86", NtPathName=0x94af940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcf78 [0139.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcf78) returned 1 [0139.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bbf10) returned 1 [0139.962] NtQueryInformationFile (in: FileHandle=0xdec, IoStatusBlock=0x94af918, FileInformation=0x94af920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x94af918, FileInformation=0x94af920) returned 0x0 [0139.963] NtSetInformationFile (FileHandle=0xdec, IoStatusBlock=0x94af918, FileInformation=0x94af920, Length=0x28, FileInformationClass=0x4) returned 0x0 [0139.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 [0139.965] FlushFileBuffers (hFile=0xdec) returned 1 [0139.972] CloseHandle (hObject=0xdec) returned 1 [0139.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0139.973] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Users\\Public\\Videos\\Sample Videos\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0139.973] wcscat (in: _Dest=0x3f1d6e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Videos\\Sample Videos\\AC3A86-Readme.txt" [0139.973] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\ac3a86-readme.txt")) returned 0xffffffff [0139.973] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdec [0139.974] WriteFile (in: hFile=0xdec, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x94af95c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x94af95c*=0x8b9, lpOverlapped=0x0) returned 1 [0139.976] CloseHandle (hObject=0xdec) returned 1 [0139.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0139.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 501 os_tid = 0xacc [0135.388] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7619.tmp")) returned 0x2020 [0135.390] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp", dwFileAttributes=0x20) returned 0 [0135.391] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7619.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.391] GetLastError () returned 0x5 [0135.391] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7619.tmp", dwFileAttributes=0x2020) returned 0 [0135.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8aba0) returned 1 Thread: id = 502 os_tid = 0xb00 [0135.392] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7629.tmp")) returned 0x2020 [0135.393] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp", dwFileAttributes=0x20) returned 1 [0135.393] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7629.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.393] GetLastError () returned 0x20 [0135.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3de2550 [0135.393] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0135.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de2550) returned 1 [0135.393] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de24e0, Size=0x10) returned 0x3dc5050 [0135.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8aba0 [0135.393] wcscpy (in: _Dest=0x3d8aba0, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" [0135.394] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp", dwFileAttributes=0x2020) returned 1 [0135.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 Thread: id = 503 os_tid = 0x3f0 [0135.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest")) returned 0x20 [0144.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0144.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.113] GetLastError () returned 0x5 [0144.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0144.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 504 os_tid = 0x4c0 [0135.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini")) returned 0x20 [0145.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0145.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.748] GetLastError () returned 0x5 [0145.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0145.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 Thread: id = 505 os_tid = 0x704 [0135.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d510 [0135.400] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0135.400] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0135.400] wcscat (in: _Dest=0x3d8d510, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*" [0135.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0135.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0146.169] wcscmp (_String1=".", _String2=".") returned 0 [0146.169] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.169] wcscmp (_String1="..", _String2=".") returned 1 [0146.169] wcscmp (_String1="..", _String2="..") returned 0 [0146.169] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0146.170] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0146.170] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0146.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6370 [0146.170] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0146.170] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0146.170] wcscat (in: _Dest=0x3da6370, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" [0157.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0157.344] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0157.344] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0157.344] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0157.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e08eb0 [0157.344] wcscpy (in: _Dest=0x3e08eb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.344] wcscat (in: _Dest=0x3e08eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.344] wcscat (in: _Dest=0x3e08eb0, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" [0157.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0157.345] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0157.345] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0157.345] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0157.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e093b0 [0157.345] wcscpy (in: _Dest=0x3e093b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.346] wcscat (in: _Dest=0x3e093b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.346] wcscat (in: _Dest=0x3e093b0, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" [0157.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e093b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0157.347] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0157.347] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0157.347] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0157.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09430 [0157.347] wcscpy (in: _Dest=0x3e09430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.347] wcscat (in: _Dest=0x3e09430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.347] wcscat (in: _Dest=0x3e09430, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" [0157.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0157.348] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0157.349] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0157.349] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0157.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e094b0 [0157.349] wcscpy (in: _Dest=0x3e094b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.349] wcscat (in: _Dest=0x3e094b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.349] wcscat (in: _Dest=0x3e094b0, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" [0157.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e094b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0157.350] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0157.350] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0157.350] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0157.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09c30 [0157.350] wcscpy (in: _Dest=0x3e09c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.350] wcscat (in: _Dest=0x3e09c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.350] wcscat (in: _Dest=0x3e09c30, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" [0157.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0157.352] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0157.352] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0157.352] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0157.352] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0157.352] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0157.352] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0157.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e08db0 [0157.352] wcscpy (in: _Dest=0x3e08db0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.352] wcscat (in: _Dest=0x3e08db0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.352] wcscat (in: _Dest=0x3e08db0, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" [0157.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0157.353] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0157.353] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0157.353] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0157.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e08f30 [0157.353] wcscpy (in: _Dest=0x3e08f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.353] wcscat (in: _Dest=0x3e08f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.353] wcscat (in: _Dest=0x3e08f30, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" [0157.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e08f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0157.355] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0157.355] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0157.355] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0157.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09bb0 [0157.355] wcscpy (in: _Dest=0x3e09bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.355] wcscat (in: _Dest=0x3e09bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.355] wcscat (in: _Dest=0x3e09bb0, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" [0157.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0157.357] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0157.357] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0157.357] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0157.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674be38 [0157.357] wcscpy (in: _Dest=0x674be38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.357] wcscat (in: _Dest=0x674be38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.357] wcscat (in: _Dest=0x674be38, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" [0157.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674be38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0157.358] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0157.358] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0157.358] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0157.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674beb8 [0157.359] wcscpy (in: _Dest=0x674beb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.359] wcscat (in: _Dest=0x674beb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.359] wcscat (in: _Dest=0x674beb8, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" [0157.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674beb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0157.360] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0157.360] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0157.360] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0157.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bf38 [0157.360] wcscpy (in: _Dest=0x674bf38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.360] wcscat (in: _Dest=0x674bf38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.360] wcscat (in: _Dest=0x674bf38, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" [0157.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0157.361] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0157.361] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0157.361] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0157.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bfb8 [0157.361] wcscpy (in: _Dest=0x674bfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.362] wcscat (in: _Dest=0x674bfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.362] wcscat (in: _Dest=0x674bfb8, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" [0157.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0157.363] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0157.363] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0157.363] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0157.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c038 [0157.363] wcscpy (in: _Dest=0x674c038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.363] wcscat (in: _Dest=0x674c038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.363] wcscat (in: _Dest=0x674c038, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" [0157.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0157.364] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0157.364] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0157.364] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0157.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c0b8 [0157.364] wcscpy (in: _Dest=0x674c0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.364] wcscat (in: _Dest=0x674c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.364] wcscat (in: _Dest=0x674c0b8, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" [0157.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0157.366] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0157.366] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0157.366] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0157.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c138 [0157.366] wcscpy (in: _Dest=0x674c138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.366] wcscat (in: _Dest=0x674c138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.366] wcscat (in: _Dest=0x674c138, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" [0157.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0157.367] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0157.367] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0157.368] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0157.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c1b8 [0157.368] wcscpy (in: _Dest=0x674c1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.368] wcscat (in: _Dest=0x674c1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.368] wcscat (in: _Dest=0x674c1b8, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" [0157.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0157.369] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0157.369] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0157.369] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0157.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c238 [0157.369] wcscpy (in: _Dest=0x674c238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.369] wcscat (in: _Dest=0x674c238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.369] wcscat (in: _Dest=0x674c238, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" [0157.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0157.370] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0157.370] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0157.370] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0157.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c2b8 [0157.370] wcscpy (in: _Dest=0x674c2b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.371] wcscat (in: _Dest=0x674c2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.371] wcscat (in: _Dest=0x674c2b8, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" [0157.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364 [0157.372] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0157.372] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0157.372] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0157.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c338 [0157.372] wcscpy (in: _Dest=0x674c338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.372] wcscat (in: _Dest=0x674c338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.372] wcscat (in: _Dest=0x674c338, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" [0157.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0157.373] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0157.373] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0157.373] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0157.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c3b8 [0157.373] wcscpy (in: _Dest=0x674c3b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.373] wcscat (in: _Dest=0x674c3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.373] wcscat (in: _Dest=0x674c3b8, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" [0157.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0157.374] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0157.374] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0157.374] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0157.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c438 [0157.374] wcscpy (in: _Dest=0x674c438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.374] wcscat (in: _Dest=0x674c438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.374] wcscat (in: _Dest=0x674c438, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" [0157.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0157.375] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0157.376] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0157.376] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0157.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c4b8 [0157.376] wcscpy (in: _Dest=0x674c4b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.376] wcscat (in: _Dest=0x674c4b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.376] wcscat (in: _Dest=0x674c4b8, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" [0157.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0157.377] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0157.377] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0157.377] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0157.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c538 [0157.377] wcscpy (in: _Dest=0x674c538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.377] wcscat (in: _Dest=0x674c538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.377] wcscat (in: _Dest=0x674c538, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" [0157.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0157.378] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0157.378] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0157.378] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0157.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c5b8 [0157.379] wcscpy (in: _Dest=0x674c5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.379] wcscat (in: _Dest=0x674c5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.379] wcscat (in: _Dest=0x674c5b8, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" [0157.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0157.380] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0157.380] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0157.380] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0157.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c638 [0157.380] wcscpy (in: _Dest=0x674c638, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0157.380] wcscat (in: _Dest=0x674c638, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0157.380] wcscat (in: _Dest=0x674c638, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" [0157.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0157.381] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0157.381] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0159.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0159.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 [0159.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 Thread: id = 506 os_tid = 0xb0c [0135.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29c60 [0135.401] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0135.401] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0135.401] wcscat (in: _Dest=0x3f29c60, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*" [0135.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0135.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0146.162] wcscmp (_String1=".", _String2=".") returned 0 [0146.162] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.162] wcscmp (_String1="..", _String2=".") returned 1 [0146.162] wcscmp (_String1="..", _String2="..") returned 0 [0146.162] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0146.162] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0146.162] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0146.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efea0 [0146.162] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0146.162] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0146.162] wcscat (in: _Dest=0x66efea0, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" [0157.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0157.930] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0157.930] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0157.930] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0157.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f270b8 [0157.930] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.930] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.930] wcscat (in: _Dest=0x3f270b8, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" [0157.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0157.931] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0157.931] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0157.931] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0157.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f271c8 [0157.931] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.931] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.931] wcscat (in: _Dest=0x3f271c8, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" [0157.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0157.932] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0157.932] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0157.932] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0157.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27250 [0157.932] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.932] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.932] wcscat (in: _Dest=0x3f27250, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" [0157.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0157.933] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0157.933] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0157.933] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0157.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26b68 [0157.934] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.934] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.934] wcscat (in: _Dest=0x3f26b68, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" [0157.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0157.935] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0157.935] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0157.935] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0157.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26ae0 [0157.935] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.935] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.935] wcscat (in: _Dest=0x3f26ae0, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" [0157.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0157.936] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0157.936] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0157.936] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0157.936] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0157.936] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0157.936] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0157.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26a58 [0157.936] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.936] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.936] wcscat (in: _Dest=0x3f26a58, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" [0157.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0157.937] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0157.937] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0157.937] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0157.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f25fb8 [0157.937] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.937] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.937] wcscat (in: _Dest=0x3f25fb8, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" [0157.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0157.938] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0157.938] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0157.938] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0157.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26fa8 [0157.939] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.939] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.939] wcscat (in: _Dest=0x3f26fa8, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" [0157.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0157.940] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0157.940] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0157.940] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0157.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f269d0 [0157.940] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.940] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.940] wcscat (in: _Dest=0x3f269d0, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" [0157.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0157.942] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0157.942] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0157.942] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0157.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26260 [0157.942] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.942] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.942] wcscat (in: _Dest=0x3f26260, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" [0157.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0157.943] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0157.943] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0157.943] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0157.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26150 [0157.943] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.943] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.943] wcscat (in: _Dest=0x3f26150, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" [0157.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0157.944] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0157.944] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0157.944] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0157.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26bf0 [0157.944] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.944] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.944] wcscat (in: _Dest=0x3f26bf0, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" [0157.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0157.945] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0157.945] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0157.945] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0157.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26f20 [0157.946] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.946] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.946] wcscat (in: _Dest=0x3f26f20, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" [0157.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0157.947] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0157.947] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0157.947] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0157.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f278b0 [0157.947] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.947] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.947] wcscat (in: _Dest=0x3f278b0, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" [0157.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0157.948] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0157.948] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0157.948] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0157.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27938 [0157.948] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.948] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.948] wcscat (in: _Dest=0x3f27938, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" [0157.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0157.958] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0157.958] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0157.958] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0157.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27a48 [0157.959] wcscpy (in: _Dest=0x3f27a48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0157.959] wcscat (in: _Dest=0x3f27a48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0157.959] wcscat (in: _Dest=0x3f27a48, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" [0161.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0161.378] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0161.378] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0161.378] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0161.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cbc8 [0161.378] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.378] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.378] wcscat (in: _Dest=0x682cbc8, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" [0161.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0161.379] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0161.379] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0161.379] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0161.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cc50 [0161.380] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.380] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.380] wcscat (in: _Dest=0x682cc50, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" [0161.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0161.381] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0161.381] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0161.381] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0161.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682ccd8 [0161.381] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.381] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.381] wcscat (in: _Dest=0x682ccd8, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" [0161.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0161.382] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0161.382] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0161.382] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0161.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cd60 [0161.382] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.382] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.382] wcscat (in: _Dest=0x682cd60, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" [0161.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0161.383] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0161.384] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0161.384] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0161.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cde8 [0161.384] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.384] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.384] wcscat (in: _Dest=0x682cde8, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" [0161.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0161.385] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0161.385] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0161.385] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0161.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682ce70 [0161.385] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.385] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.385] wcscat (in: _Dest=0x682ce70, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" [0161.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0161.386] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0161.386] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0161.386] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0161.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cef8 [0161.387] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.387] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.387] wcscat (in: _Dest=0x682cef8, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" [0161.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0161.388] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0161.388] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0161.388] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0161.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cf80 [0161.388] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.388] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.388] wcscat (in: _Dest=0x682cf80, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" [0161.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0161.389] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0161.389] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0161.389] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0161.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d008 [0161.389] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0161.389] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0161.389] wcscat (in: _Dest=0x682d008, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" [0161.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0161.390] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0162.368] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 [0162.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29720) returned 1 Thread: id = 507 os_tid = 0xb48 [0135.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig")) returned 0x20 [0145.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0145.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.703] GetLastError () returned 0x5 [0145.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0145.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 508 os_tid = 0xb40 [0135.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ac28 [0135.402] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0135.402] wcscat (in: _Dest=0x3f1ac28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0135.402] wcscat (in: _Dest=0x3f1ac28, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*" [0135.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0135.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0146.167] wcscmp (_String1=".", _String2=".") returned 0 [0146.167] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.167] wcscmp (_String1="..", _String2=".") returned 1 [0146.167] wcscmp (_String1="..", _String2="..") returned 0 [0146.167] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0146.167] wcscmp (_String1="CAT", _String2=".") returned 1 [0146.167] wcscmp (_String1="CAT", _String2="..") returned 1 [0146.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5df0 [0146.167] wcscpy (in: _Dest=0x3da5df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0146.168] wcscat (in: _Dest=0x3da5df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0146.168] wcscat (in: _Dest=0x3da5df0, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0151.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0151.684] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0151.684] wcscmp (_String1="CHS", _String2=".") returned 1 [0151.684] wcscmp (_String1="CHS", _String2="..") returned 1 [0151.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5af0 [0151.684] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.684] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.684] wcscat (in: _Dest=0x3da5af0, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0151.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0151.685] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0151.685] wcscmp (_String1="CHT", _String2=".") returned 1 [0151.685] wcscmp (_String1="CHT", _String2="..") returned 1 [0151.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5d70 [0151.686] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.686] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.686] wcscat (in: _Dest=0x3da5d70, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0151.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0151.687] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0151.687] wcscmp (_String1="CZE", _String2=".") returned 1 [0151.687] wcscmp (_String1="CZE", _String2="..") returned 1 [0151.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da60f0 [0151.687] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.687] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.687] wcscat (in: _Dest=0x3da60f0, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0151.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0151.688] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0151.688] wcscmp (_String1="DAN", _String2=".") returned 1 [0151.688] wcscmp (_String1="DAN", _String2="..") returned 1 [0151.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4af0 [0151.689] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.689] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.689] wcscat (in: _Dest=0x3da4af0, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0151.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0151.691] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0151.691] wcscmp (_String1="DEU", _String2=".") returned 1 [0151.691] wcscmp (_String1="DEU", _String2="..") returned 1 [0151.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da63f0 [0151.691] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.691] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.691] wcscat (in: _Dest=0x3da63f0, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0151.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0151.693] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0151.693] wcscmp (_String1="ENU", _String2=".") returned 1 [0151.693] wcscmp (_String1="ENU", _String2="..") returned 1 [0151.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5bf0 [0151.693] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.693] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.693] wcscat (in: _Dest=0x3da5bf0, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0151.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0151.694] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0151.694] wcscmp (_String1="ESP", _String2=".") returned 1 [0151.694] wcscmp (_String1="ESP", _String2="..") returned 1 [0151.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da62f0 [0151.694] wcscpy (in: _Dest=0x3da62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.694] wcscat (in: _Dest=0x3da62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.694] wcscat (in: _Dest=0x3da62f0, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0151.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0151.696] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0151.696] wcscmp (_String1="EUQ", _String2=".") returned 1 [0151.696] wcscmp (_String1="EUQ", _String2="..") returned 1 [0151.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5a70 [0151.696] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.696] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.696] wcscat (in: _Dest=0x3da5a70, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0151.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0151.697] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0151.697] wcscmp (_String1="FRA", _String2=".") returned 1 [0151.697] wcscmp (_String1="FRA", _String2="..") returned 1 [0151.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6270 [0151.697] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.697] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.697] wcscat (in: _Dest=0x3da6270, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0151.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0151.698] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0151.698] wcscmp (_String1="HRV", _String2=".") returned 1 [0151.698] wcscmp (_String1="HRV", _String2="..") returned 1 [0151.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5f70 [0151.699] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.699] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.699] wcscat (in: _Dest=0x3da5f70, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0151.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0151.700] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0151.700] wcscmp (_String1="HUN", _String2=".") returned 1 [0151.700] wcscmp (_String1="HUN", _String2="..") returned 1 [0151.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6470 [0151.700] wcscpy (in: _Dest=0x3da6470, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.700] wcscat (in: _Dest=0x3da6470, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.700] wcscat (in: _Dest=0x3da6470, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0151.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da6470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0151.701] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0151.701] wcscmp (_String1="ITA", _String2=".") returned 1 [0151.701] wcscmp (_String1="ITA", _String2="..") returned 1 [0151.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5ff0 [0151.701] wcscpy (in: _Dest=0x3da5ff0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.701] wcscat (in: _Dest=0x3da5ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.701] wcscat (in: _Dest=0x3da5ff0, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0151.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0151.703] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0151.703] wcscmp (_String1="JPN", _String2=".") returned 1 [0151.703] wcscmp (_String1="JPN", _String2="..") returned 1 [0151.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb8f8 [0151.703] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.703] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.703] wcscat (in: _Dest=0x3edb8f8, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0151.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edb8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0151.704] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0151.704] wcscmp (_String1="KOR", _String2=".") returned 1 [0151.704] wcscmp (_String1="KOR", _String2="..") returned 1 [0151.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb778 [0151.704] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.704] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.704] wcscat (in: _Dest=0x3edb778, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0151.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edb778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0151.705] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0151.705] wcscmp (_String1="NLD", _String2=".") returned 1 [0151.705] wcscmp (_String1="NLD", _String2="..") returned 1 [0151.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbbf8 [0151.706] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.706] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.706] wcscat (in: _Dest=0x3edbbf8, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0151.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0151.707] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0151.707] wcscmp (_String1="NOR", _String2=".") returned 1 [0151.707] wcscmp (_String1="NOR", _String2="..") returned 1 [0151.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda378 [0151.707] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.707] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.707] wcscat (in: _Dest=0x3eda378, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0151.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0151.708] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0151.708] wcscmp (_String1="POL", _String2=".") returned 1 [0151.708] wcscmp (_String1="POL", _String2="..") returned 1 [0151.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbe78 [0151.708] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.708] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.708] wcscat (in: _Dest=0x3edbe78, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0151.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0151.709] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0151.709] wcscmp (_String1="PTB", _String2=".") returned 1 [0151.709] wcscmp (_String1="PTB", _String2="..") returned 1 [0151.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda4f8 [0151.709] wcscpy (in: _Dest=0x3eda4f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.709] wcscat (in: _Dest=0x3eda4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.709] wcscat (in: _Dest=0x3eda4f8, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0151.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3eda4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0151.711] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0151.711] wcscmp (_String1="RUM", _String2=".") returned 1 [0151.711] wcscmp (_String1="RUM", _String2="..") returned 1 [0151.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbdf8 [0151.711] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.711] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.711] wcscat (in: _Dest=0x3edbdf8, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0151.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0151.712] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0151.712] wcscmp (_String1="RUS", _String2=".") returned 1 [0151.712] wcscmp (_String1="RUS", _String2="..") returned 1 [0151.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edaff8 [0151.712] wcscpy (in: _Dest=0x3edaff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.712] wcscat (in: _Dest=0x3edaff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.712] wcscat (in: _Dest=0x3edaff8, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0151.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edaff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0151.713] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0151.713] wcscmp (_String1="SKY", _String2=".") returned 1 [0151.713] wcscmp (_String1="SKY", _String2="..") returned 1 [0151.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edac78 [0151.713] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.713] wcscat (in: _Dest=0x3edac78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.713] wcscat (in: _Dest=0x3edac78, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0151.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0151.715] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0151.715] wcscmp (_String1="SLV", _String2=".") returned 1 [0151.715] wcscmp (_String1="SLV", _String2="..") returned 1 [0151.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbff8 [0151.715] wcscpy (in: _Dest=0x3edbff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.715] wcscat (in: _Dest=0x3edbff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.715] wcscat (in: _Dest=0x3edbff8, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0151.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0151.716] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0151.716] wcscmp (_String1="SUO", _String2=".") returned 1 [0151.716] wcscmp (_String1="SUO", _String2="..") returned 1 [0151.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb478 [0151.717] wcscpy (in: _Dest=0x3edb478, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.717] wcscat (in: _Dest=0x3edb478, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.717] wcscat (in: _Dest=0x3edb478, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0151.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edb478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0151.718] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0151.718] wcscmp (_String1="SVE", _String2=".") returned 1 [0151.718] wcscmp (_String1="SVE", _String2="..") returned 1 [0151.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbef8 [0151.718] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.718] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.718] wcscat (in: _Dest=0x3edbef8, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0151.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0151.719] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0151.719] wcscmp (_String1="TUR", _String2=".") returned 1 [0151.719] wcscmp (_String1="TUR", _String2="..") returned 1 [0151.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda178 [0151.719] wcscpy (in: _Dest=0x3eda178, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.719] wcscat (in: _Dest=0x3eda178, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.719] wcscat (in: _Dest=0x3eda178, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0151.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3eda178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0151.721] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0151.721] wcscmp (_String1="UKR", _String2=".") returned 1 [0151.721] wcscmp (_String1="UKR", _String2="..") returned 1 [0151.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb878 [0151.721] wcscpy (in: _Dest=0x3edb878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0151.721] wcscat (in: _Dest=0x3edb878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0151.721] wcscat (in: _Dest=0x3edb878, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0151.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edb878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0152.257] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0153.059] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 Thread: id = 509 os_tid = 0xb54 [0135.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0135.403] wcscpy (in: _Dest=0x3f1aa48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0135.403] wcscat (in: _Dest=0x3f1aa48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0135.403] wcscat (in: _Dest=0x3f1aa48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*" [0135.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0135.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0145.705] wcscmp (_String1=".", _String2=".") returned 0 [0145.705] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.706] wcscmp (_String1="..", _String2=".") returned 1 [0145.706] wcscmp (_String1="..", _String2="..") returned 0 [0145.706] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0145.706] wcscmp (_String1="JSByteCodeWin.bin", _String2=".") returned 1 [0145.706] wcscmp (_String1="JSByteCodeWin.bin", _String2="..") returned 1 [0145.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30e00 [0145.706] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0145.706] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0145.706] wcscat (in: _Dest=0x3e30e00, _Source="JSByteCodeWin.bin" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" [0150.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0150.317] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0150.317] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0150.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0150.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0150.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 Thread: id = 510 os_tid = 0xb3c [0135.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29cd0 [0135.405] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0135.405] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0135.405] wcscat (in: _Dest=0x3f29cd0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*" [0135.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0135.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0145.977] wcscmp (_String1=".", _String2=".") returned 0 [0145.977] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.977] wcscmp (_String1="..", _String2=".") returned 1 [0145.977] wcscmp (_String1="..", _String2="..") returned 0 [0145.977] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0145.977] wcscmp (_String1="CAT", _String2=".") returned 1 [0145.977] wcscmp (_String1="CAT", _String2="..") returned 1 [0145.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23450 [0145.977] wcscpy (in: _Dest=0x3f23450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0145.977] wcscat (in: _Dest=0x3f23450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0145.977] wcscat (in: _Dest=0x3f23450, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0146.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0146.498] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0146.498] wcscmp (_String1="CHS", _String2=".") returned 1 [0146.498] wcscmp (_String1="CHS", _String2="..") returned 1 [0146.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29870 [0146.498] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.498] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.498] wcscat (in: _Dest=0x3f29870, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0146.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0146.500] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0146.500] wcscmp (_String1="CHT", _String2=".") returned 1 [0146.500] wcscmp (_String1="CHT", _String2="..") returned 1 [0146.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f293a0 [0146.500] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.500] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.500] wcscat (in: _Dest=0x3f293a0, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0146.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0146.501] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0146.502] wcscmp (_String1="CZE", _String2=".") returned 1 [0146.502] wcscmp (_String1="CZE", _String2="..") returned 1 [0146.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f235a0 [0146.502] wcscpy (in: _Dest=0x3f235a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.502] wcscat (in: _Dest=0x3f235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.502] wcscat (in: _Dest=0x3f235a0, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0146.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0146.503] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0146.503] wcscmp (_String1="DAN", _String2=".") returned 1 [0146.503] wcscmp (_String1="DAN", _String2="..") returned 1 [0146.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23610 [0146.504] wcscpy (in: _Dest=0x3f23610, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.504] wcscat (in: _Dest=0x3f23610, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.504] wcscat (in: _Dest=0x3f23610, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0146.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0146.506] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0146.506] wcscmp (_String1="DEU", _String2=".") returned 1 [0146.506] wcscmp (_String1="DEU", _String2="..") returned 1 [0146.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0146.506] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.506] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.506] wcscat (in: _Dest=0x3f23680, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0146.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0146.508] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0146.508] wcscmp (_String1="ENU", _String2=".") returned 1 [0146.508] wcscmp (_String1="ENU", _String2="..") returned 1 [0146.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f236f0 [0146.508] wcscpy (in: _Dest=0x3f236f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.509] wcscat (in: _Dest=0x3f236f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.509] wcscat (in: _Dest=0x3f236f0, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0146.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f236f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0146.510] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0146.510] wcscmp (_String1="ESP", _String2=".") returned 1 [0146.510] wcscmp (_String1="ESP", _String2="..") returned 1 [0146.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23760 [0146.510] wcscpy (in: _Dest=0x3f23760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.510] wcscat (in: _Dest=0x3f23760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.511] wcscat (in: _Dest=0x3f23760, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0146.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0146.512] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0146.512] wcscmp (_String1="EUQ", _String2=".") returned 1 [0146.512] wcscmp (_String1="EUQ", _String2="..") returned 1 [0146.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f237d0 [0146.512] wcscpy (in: _Dest=0x3f237d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.512] wcscat (in: _Dest=0x3f237d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.512] wcscat (in: _Dest=0x3f237d0, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0146.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f237d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0146.513] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0146.513] wcscmp (_String1="FRA", _String2=".") returned 1 [0146.513] wcscmp (_String1="FRA", _String2="..") returned 1 [0146.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23840 [0146.513] wcscpy (in: _Dest=0x3f23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.513] wcscat (in: _Dest=0x3f23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.513] wcscat (in: _Dest=0x3f23840, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0146.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0146.515] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0146.515] wcscmp (_String1="HRV", _String2=".") returned 1 [0146.515] wcscmp (_String1="HRV", _String2="..") returned 1 [0146.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f238b0 [0146.515] wcscpy (in: _Dest=0x3f238b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.515] wcscat (in: _Dest=0x3f238b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.515] wcscat (in: _Dest=0x3f238b0, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0146.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f238b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0146.516] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0146.516] wcscmp (_String1="HUN", _String2=".") returned 1 [0146.516] wcscmp (_String1="HUN", _String2="..") returned 1 [0146.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23920 [0146.516] wcscpy (in: _Dest=0x3f23920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.516] wcscat (in: _Dest=0x3f23920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.516] wcscat (in: _Dest=0x3f23920, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0146.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0146.518] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0146.518] wcscmp (_String1="ITA", _String2=".") returned 1 [0146.518] wcscmp (_String1="ITA", _String2="..") returned 1 [0146.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23990 [0146.518] wcscpy (in: _Dest=0x3f23990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.518] wcscat (in: _Dest=0x3f23990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.518] wcscat (in: _Dest=0x3f23990, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0146.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0146.519] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0146.519] wcscmp (_String1="JPN", _String2=".") returned 1 [0146.519] wcscmp (_String1="JPN", _String2="..") returned 1 [0146.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23a00 [0146.519] wcscpy (in: _Dest=0x3f23a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.519] wcscat (in: _Dest=0x3f23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.519] wcscat (in: _Dest=0x3f23a00, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0146.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0146.521] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0146.521] wcscmp (_String1="KOR", _String2=".") returned 1 [0146.521] wcscmp (_String1="KOR", _String2="..") returned 1 [0146.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23a70 [0146.521] wcscpy (in: _Dest=0x3f23a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.521] wcscat (in: _Dest=0x3f23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.521] wcscat (in: _Dest=0x3f23a70, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0146.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0146.526] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0146.526] wcscmp (_String1="NLD", _String2=".") returned 1 [0146.526] wcscmp (_String1="NLD", _String2="..") returned 1 [0146.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23ae0 [0146.526] wcscpy (in: _Dest=0x3f23ae0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.526] wcscat (in: _Dest=0x3f23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.526] wcscat (in: _Dest=0x3f23ae0, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0146.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0146.527] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0146.527] wcscmp (_String1="NOR", _String2=".") returned 1 [0146.527] wcscmp (_String1="NOR", _String2="..") returned 1 [0146.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23b50 [0146.527] wcscpy (in: _Dest=0x3f23b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.527] wcscat (in: _Dest=0x3f23b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.527] wcscat (in: _Dest=0x3f23b50, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0146.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0146.528] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0146.528] wcscmp (_String1="POL", _String2=".") returned 1 [0146.528] wcscmp (_String1="POL", _String2="..") returned 1 [0146.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23bc0 [0146.528] wcscpy (in: _Dest=0x3f23bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.528] wcscat (in: _Dest=0x3f23bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.528] wcscat (in: _Dest=0x3f23bc0, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0146.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0146.529] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0146.529] wcscmp (_String1="PTB", _String2=".") returned 1 [0146.529] wcscmp (_String1="PTB", _String2="..") returned 1 [0146.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23c30 [0146.529] wcscpy (in: _Dest=0x3f23c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.529] wcscat (in: _Dest=0x3f23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.530] wcscat (in: _Dest=0x3f23c30, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0146.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0146.531] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0146.531] wcscmp (_String1="RUM", _String2=".") returned 1 [0146.531] wcscmp (_String1="RUM", _String2="..") returned 1 [0146.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23ca0 [0146.531] wcscpy (in: _Dest=0x3f23ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.531] wcscat (in: _Dest=0x3f23ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.531] wcscat (in: _Dest=0x3f23ca0, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0146.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0146.532] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0146.532] wcscmp (_String1="RUS", _String2=".") returned 1 [0146.532] wcscmp (_String1="RUS", _String2="..") returned 1 [0146.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23d10 [0146.532] wcscpy (in: _Dest=0x3f23d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.532] wcscat (in: _Dest=0x3f23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.532] wcscat (in: _Dest=0x3f23d10, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0146.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0146.533] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0146.533] wcscmp (_String1="SKY", _String2=".") returned 1 [0146.533] wcscmp (_String1="SKY", _String2="..") returned 1 [0146.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23d80 [0146.533] wcscpy (in: _Dest=0x3f23d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.533] wcscat (in: _Dest=0x3f23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.533] wcscat (in: _Dest=0x3f23d80, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0146.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0146.535] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0146.535] wcscmp (_String1="SLV", _String2=".") returned 1 [0146.535] wcscmp (_String1="SLV", _String2="..") returned 1 [0146.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23df0 [0146.535] wcscpy (in: _Dest=0x3f23df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.535] wcscat (in: _Dest=0x3f23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.535] wcscat (in: _Dest=0x3f23df0, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0146.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0146.536] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0146.536] wcscmp (_String1="SUO", _String2=".") returned 1 [0146.536] wcscmp (_String1="SUO", _String2="..") returned 1 [0146.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5b18 [0146.536] wcscpy (in: _Dest=0x66e5b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.536] wcscat (in: _Dest=0x66e5b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.536] wcscat (in: _Dest=0x66e5b18, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0146.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0146.537] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0146.537] wcscmp (_String1="SVE", _String2=".") returned 1 [0146.537] wcscmp (_String1="SVE", _String2="..") returned 1 [0146.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5958 [0146.537] wcscpy (in: _Dest=0x66e5958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0146.537] wcscat (in: _Dest=0x66e5958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0146.537] wcscat (in: _Dest=0x66e5958, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0146.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0147.004] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0147.004] wcscmp (_String1="TUR", _String2=".") returned 1 [0147.004] wcscmp (_String1="TUR", _String2="..") returned 1 [0147.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b6d0 [0147.004] wcscpy (in: _Dest=0x3e0b6d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0147.004] wcscat (in: _Dest=0x3e0b6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0147.004] wcscat (in: _Dest=0x3e0b6d0, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0151.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364 [0151.243] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0151.243] wcscmp (_String1="UKR", _String2=".") returned 1 [0151.243] wcscmp (_String1="UKR", _String2="..") returned 1 [0151.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23d80 [0151.243] wcscpy (in: _Dest=0x3f23d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0151.243] wcscat (in: _Dest=0x3f23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0151.243] wcscat (in: _Dest=0x3f23d80, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0151.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0151.245] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0151.245] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0151.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0151.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 [0151.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 Thread: id = 511 os_tid = 0x710 [0135.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29d40 [0135.406] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0135.406] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0135.406] wcscat (in: _Dest=0x3f29d40, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*" [0135.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0135.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0146.161] wcscmp (_String1=".", _String2=".") returned 0 [0146.161] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.161] wcscmp (_String1="..", _String2=".") returned 1 [0146.161] wcscmp (_String1="..", _String2="..") returned 0 [0146.161] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0146.161] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0146.161] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0146.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d148 [0146.161] wcscpy (in: _Dest=0x3f1d148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0146.161] wcscat (in: _Dest=0x3f1d148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0146.161] wcscat (in: _Dest=0x3f1d148, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0159.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0159.660] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0159.661] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0159.661] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0159.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d490 [0159.661] wcscpy (in: _Dest=0x3f1d490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.661] wcscat (in: _Dest=0x3f1d490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.661] wcscat (in: _Dest=0x3f1d490, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0159.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0159.662] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0159.662] wcscmp (_String1="da_DK", _String2=".") returned 1 [0159.662] wcscmp (_String1="da_DK", _String2="..") returned 1 [0159.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d0d0 [0159.662] wcscpy (in: _Dest=0x3f1d0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.662] wcscat (in: _Dest=0x3f1d0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.662] wcscat (in: _Dest=0x3f1d0d0, _Source="da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0159.663] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0159.663] wcscmp (_String1="de_DE", _String2=".") returned 1 [0159.663] wcscmp (_String1="de_DE", _String2="..") returned 1 [0159.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d1c0 [0159.663] wcscpy (in: _Dest=0x3f1d1c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.663] wcscat (in: _Dest=0x3f1d1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.664] wcscat (in: _Dest=0x3f1d1c0, _Source="de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0159.665] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0159.665] wcscmp (_String1="es_ES", _String2=".") returned 1 [0159.665] wcscmp (_String1="es_ES", _String2="..") returned 1 [0159.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d6e8 [0159.665] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.665] wcscat (in: _Dest=0x3f1d6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.665] wcscat (in: _Dest=0x3f1d6e8, _Source="es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0159.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0159.666] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0159.666] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0159.666] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0159.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cf68 [0159.666] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.666] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.666] wcscat (in: _Dest=0x3f1cf68, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0159.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0159.667] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0159.667] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0159.667] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0159.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d508 [0159.667] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.667] wcscat (in: _Dest=0x3f1d508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.668] wcscat (in: _Dest=0x3f1d508, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0159.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0159.669] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0159.669] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0159.669] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0159.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cfe0 [0159.669] wcscpy (in: _Dest=0x3f1cfe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.669] wcscat (in: _Dest=0x3f1cfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.669] wcscat (in: _Dest=0x3f1cfe0, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0159.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1cfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0159.670] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0159.670] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0159.670] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0159.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d940 [0159.670] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.670] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.670] wcscat (in: _Dest=0x3f1d940, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0159.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0159.671] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0159.671] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0159.671] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0159.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d418 [0159.671] wcscpy (in: _Dest=0x3f1d418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.671] wcscat (in: _Dest=0x3f1d418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.671] wcscat (in: _Dest=0x3f1d418, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0159.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0159.673] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0159.673] wcscmp (_String1="it_IT", _String2=".") returned 1 [0159.673] wcscmp (_String1="it_IT", _String2="..") returned 1 [0159.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d2b0 [0159.673] wcscpy (in: _Dest=0x3f1d2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.673] wcscat (in: _Dest=0x3f1d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.673] wcscat (in: _Dest=0x3f1d2b0, _Source="it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0159.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0159.674] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0159.674] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0159.674] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0159.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d8c8 [0159.674] wcscpy (in: _Dest=0x3f1d8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.674] wcscat (in: _Dest=0x3f1d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.675] wcscat (in: _Dest=0x3f1d8c8, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0159.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0159.675] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0159.676] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0159.676] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0159.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1dc88 [0159.676] wcscpy (in: _Dest=0x3f1dc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.676] wcscat (in: _Dest=0x3f1dc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.676] wcscat (in: _Dest=0x3f1dc88, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0159.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1dc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0159.677] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0159.677] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0159.677] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0159.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1da30 [0159.677] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.677] wcscat (in: _Dest=0x3f1da30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.677] wcscat (in: _Dest=0x3f1da30, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0159.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0159.678] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0159.678] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0159.678] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0159.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d058 [0159.678] wcscpy (in: _Dest=0x3f1d058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.678] wcscat (in: _Dest=0x3f1d058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.678] wcscat (in: _Dest=0x3f1d058, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0159.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0159.679] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0159.680] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0159.680] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0159.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d670 [0159.680] wcscpy (in: _Dest=0x3f1d670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.680] wcscat (in: _Dest=0x3f1d670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.680] wcscat (in: _Dest=0x3f1d670, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0159.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0159.681] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0159.681] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0159.681] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0159.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d238 [0159.681] wcscpy (in: _Dest=0x3f1d238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.681] wcscat (in: _Dest=0x3f1d238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.681] wcscat (in: _Dest=0x3f1d238, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0159.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0159.682] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0159.682] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0159.682] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0159.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d7d8 [0159.682] wcscpy (in: _Dest=0x3f1d7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.682] wcscat (in: _Dest=0x3f1d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.682] wcscat (in: _Dest=0x3f1d7d8, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0159.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0159.683] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0159.683] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0159.683] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0159.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b0d8 [0159.683] wcscpy (in: _Dest=0x3f1b0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.683] wcscat (in: _Dest=0x3f1b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.683] wcscat (in: _Dest=0x3f1b0d8, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0159.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0159.684] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0159.684] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0159.684] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0159.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1abb0 [0159.684] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.684] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.684] wcscat (in: _Dest=0x3f1abb0, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0159.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0159.685] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0159.685] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0159.685] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0159.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1aa48 [0159.686] wcscpy (in: _Dest=0x3f1aa48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.686] wcscat (in: _Dest=0x3f1aa48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.686] wcscat (in: _Dest=0x3f1aa48, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0159.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1aa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0159.686] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0159.687] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0159.687] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0159.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b588 [0159.687] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.687] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.687] wcscat (in: _Dest=0x3f1b588, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0159.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0159.688] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0159.688] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0159.688] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0159.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b060 [0159.688] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.688] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.688] wcscat (in: _Dest=0x3f1b060, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0159.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0159.689] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0159.689] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0159.690] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0159.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ad90 [0159.690] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.690] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.690] wcscat (in: _Dest=0x3f1ad90, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0159.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1ad90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0159.691] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0159.691] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0159.691] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0159.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b420 [0159.691] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.691] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.691] wcscat (in: _Dest=0x3f1b420, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0159.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0159.692] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0159.692] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0159.692] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0159.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b240 [0159.692] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0159.692] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0159.692] wcscat (in: _Dest=0x3f1b240, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0159.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0159.693] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0159.693] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0159.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0159.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 [0159.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29790) returned 1 Thread: id = 512 os_tid = 0xb70 [0135.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 0x20 [0145.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0145.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.701] GetLastError () returned 0x5 [0145.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0145.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 513 os_tid = 0x508 [0135.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d490 [0135.407] wcscpy (in: _Dest=0x3f1d490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.407] wcscat (in: _Dest=0x3f1d490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.407] wcscat (in: _Dest=0x3f1d490, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*" [0135.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0135.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0135.409] wcscmp (_String1=".", _String2=".") returned 0 [0135.409] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.409] wcscmp (_String1="..", _String2=".") returned 1 [0135.409] wcscmp (_String1="..", _String2="..") returned 0 [0135.409] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0135.409] wcscmp (_String1="Accessibility.api", _String2=".") returned 1 [0135.409] wcscmp (_String1="Accessibility.api", _String2="..") returned 1 [0135.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cd80 [0135.410] wcscpy (in: _Dest=0x32cd80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.410] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.410] wcscat (in: _Dest=0x32cd80, _Source="Accessibility.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" [0135.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0135.591] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0135.592] wcscmp (_String1="AcroForm", _String2=".") returned 1 [0135.592] wcscmp (_String1="AcroForm", _String2="..") returned 1 [0135.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5d70 [0135.592] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.592] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.592] wcscat (in: _Dest=0x3da5d70, _Source="AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0135.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0135.593] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe171faa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0135.593] wcscmp (_String1="AcroForm.api", _String2=".") returned 1 [0135.593] wcscmp (_String1="AcroForm.api", _String2="..") returned 1 [0135.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee8d8 [0135.593] wcscpy (in: _Dest=0x66ee8d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.593] wcscat (in: _Dest=0x66ee8d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.593] wcscat (in: _Dest=0x66ee8d8, _Source="AcroForm.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" [0135.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0135.594] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1 [0135.594] wcscmp (_String1="AcroSign.prc", _String2=".") returned 1 [0135.594] wcscmp (_String1="AcroSign.prc", _String2="..") returned 1 [0135.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee850 [0135.594] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.594] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.594] wcscat (in: _Dest=0x66ee850, _Source="AcroSign.prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" [0135.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0135.596] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0135.596] wcscmp (_String1="Annotations", _String2=".") returned 1 [0135.596] wcscmp (_String1="Annotations", _String2="..") returned 1 [0135.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee960 [0135.596] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.596] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.596] wcscat (in: _Dest=0x66ee960, _Source="Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0135.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0135.597] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0135.597] wcscmp (_String1="Annots.api", _String2=".") returned 1 [0135.597] wcscmp (_String1="Annots.api", _String2="..") returned 1 [0135.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee9e8 [0135.597] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.597] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.597] wcscat (in: _Dest=0x66ee9e8, _Source="Annots.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" [0135.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0135.599] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0135.599] wcscmp (_String1="Checkers.api", _String2=".") returned 1 [0135.599] wcscmp (_String1="Checkers.api", _String2="..") returned 1 [0135.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eea70 [0135.599] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.599] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.599] wcscat (in: _Dest=0x66eea70, _Source="Checkers.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" [0135.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0135.600] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0135.600] wcscmp (_String1="DigSig.api", _String2=".") returned 1 [0135.601] wcscmp (_String1="DigSig.api", _String2="..") returned 1 [0135.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeaf8 [0135.601] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.601] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.601] wcscat (in: _Dest=0x66eeaf8, _Source="DigSig.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" [0135.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0135.602] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0135.602] wcscmp (_String1="DVA.api", _String2=".") returned 1 [0135.602] wcscmp (_String1="DVA.api", _String2="..") returned 1 [0135.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5df0 [0135.602] wcscpy (in: _Dest=0x3da5df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.602] wcscat (in: _Dest=0x3da5df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.602] wcscat (in: _Dest=0x3da5df0, _Source="DVA.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" [0135.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0135.603] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0135.603] wcscmp (_String1="eBook.api", _String2=".") returned 1 [0135.603] wcscmp (_String1="eBook.api", _String2="..") returned 1 [0135.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eeb80 [0135.603] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.604] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.604] wcscat (in: _Dest=0x66eeb80, _Source="eBook.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" [0135.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0135.605] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0135.605] wcscmp (_String1="EScript.api", _String2=".") returned 1 [0135.605] wcscmp (_String1="EScript.api", _String2="..") returned 1 [0135.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eec08 [0135.605] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.605] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.605] wcscat (in: _Dest=0x66eec08, _Source="EScript.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" [0135.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0135.606] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0135.606] wcscmp (_String1="IA32.api", _String2=".") returned 1 [0135.606] wcscmp (_String1="IA32.api", _String2="..") returned 1 [0135.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da64f0 [0135.606] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.606] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.606] wcscat (in: _Dest=0x3da64f0, _Source="IA32.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" [0135.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0135.608] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0135.608] wcscmp (_String1="MakeAccessible.api", _String2=".") returned 1 [0135.608] wcscmp (_String1="MakeAccessible.api", _String2="..") returned 1 [0135.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d4a0 [0135.608] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.608] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.608] wcscat (in: _Dest=0x32d4a0, _Source="MakeAccessible.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" [0135.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0135.609] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0135.610] wcscmp (_String1="Multimedia", _String2=".") returned 1 [0135.610] wcscmp (_String1="Multimedia", _String2="..") returned 1 [0135.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eec90 [0135.610] wcscpy (in: _Dest=0x66eec90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.610] wcscat (in: _Dest=0x66eec90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.610] wcscat (in: _Dest=0x66eec90, _Source="Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0135.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eec90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0135.612] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98aa9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0135.612] wcscmp (_String1="Multimedia.api", _String2=".") returned 1 [0135.612] wcscmp (_String1="Multimedia.api", _String2="..") returned 1 [0135.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db868 [0135.612] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.612] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.612] wcscat (in: _Dest=0x66db868, _Source="Multimedia.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" [0135.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0135.614] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0135.614] wcscmp (_String1="PDDom.api", _String2=".") returned 1 [0135.614] wcscmp (_String1="PDDom.api", _String2="..") returned 1 [0135.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eed18 [0135.614] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.614] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.614] wcscat (in: _Dest=0x66eed18, _Source="PDDom.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" [0135.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0135.616] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73f263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0135.616] wcscmp (_String1="PPKLite.api", _String2=".") returned 1 [0135.616] wcscmp (_String1="PPKLite.api", _String2="..") returned 1 [0135.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eeda0 [0135.616] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.616] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.616] wcscat (in: _Dest=0x66eeda0, _Source="PPKLite.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" [0135.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0135.618] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0135.618] wcscmp (_String1="ReadOutLoud.api", _String2=".") returned 1 [0135.618] wcscmp (_String1="ReadOutLoud.api", _String2="..") returned 1 [0135.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db8f8 [0135.618] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.618] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.618] wcscat (in: _Dest=0x66db8f8, _Source="ReadOutLoud.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" [0135.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0135.620] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x54e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0135.620] wcscmp (_String1="reflow.api", _String2=".") returned 1 [0135.620] wcscmp (_String1="reflow.api", _String2="..") returned 1 [0135.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eee28 [0135.620] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.620] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.620] wcscat (in: _Dest=0x66eee28, _Source="reflow.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" [0135.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0135.622] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0135.622] wcscmp (_String1="SaveAsRTF.api", _String2=".") returned 1 [0135.622] wcscmp (_String1="SaveAsRTF.api", _String2="..") returned 1 [0135.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db988 [0135.622] wcscpy (in: _Dest=0x66db988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.622] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.622] wcscat (in: _Dest=0x66db988, _Source="SaveAsRTF.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" [0135.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0135.623] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0135.623] wcscmp (_String1="Search.api", _String2=".") returned 1 [0135.623] wcscmp (_String1="Search.api", _String2="..") returned 1 [0135.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeeb0 [0135.624] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.624] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.624] wcscat (in: _Dest=0x66eeeb0, _Source="Search.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" [0135.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0135.625] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0135.625] wcscmp (_String1="SendMail.api", _String2=".") returned 1 [0135.625] wcscmp (_String1="SendMail.api", _String2="..") returned 1 [0135.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eef38 [0135.625] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0135.626] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0135.626] wcscat (in: _Dest=0x66eef38, _Source="SendMail.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" [0135.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0136.026] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0136.026] wcscmp (_String1="Spelling.api", _String2=".") returned 1 [0136.026] wcscmp (_String1="Spelling.api", _String2="..") returned 1 [0136.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee6b8 [0136.026] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0136.026] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0136.026] wcscat (in: _Dest=0x66ee6b8, _Source="Spelling.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" [0146.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0146.074] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0146.074] wcscmp (_String1="Updater.api", _String2=".") returned 1 [0146.074] wcscmp (_String1="Updater.api", _String2="..") returned 1 [0146.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef2f0 [0146.075] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0146.075] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0146.075] wcscat (in: _Dest=0x66ef2f0, _Source="Updater.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" [0146.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0146.076] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0146.076] wcscmp (_String1="weblink.api", _String2=".") returned 1 [0146.076] wcscmp (_String1="weblink.api", _String2="..") returned 1 [0146.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efe18 [0146.076] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0146.076] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0146.076] wcscat (in: _Dest=0x66efe18, _Source="weblink.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" [0146.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0146.078] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0146.078] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0146.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0146.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0146.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 Thread: id = 514 os_tid = 0x124 [0135.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d1c0 [0135.410] wcscpy (in: _Dest=0x3f1d1c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.410] wcscat (in: _Dest=0x3f1d1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.410] wcscat (in: _Dest=0x3f1d1c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*" [0135.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0135.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0146.165] wcscmp (_String1=".", _String2=".") returned 0 [0146.165] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.166] wcscmp (_String1="..", _String2=".") returned 1 [0146.166] wcscmp (_String1="..", _String2="..") returned 0 [0146.166] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac740c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0146.166] wcscmp (_String1="2d.x3d", _String2=".") returned 1 [0146.166] wcscmp (_String1="2d.x3d", _String2="..") returned 1 [0146.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da64f0 [0146.166] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0146.166] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0146.167] wcscat (in: _Dest=0x3da64f0, _Source="2d.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" [0156.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0156.646] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0156.646] wcscmp (_String1="3difr.x3d", _String2=".") returned 1 [0156.646] wcscmp (_String1="3difr.x3d", _String2="..") returned 1 [0156.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef378 [0156.646] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.646] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.646] wcscat (in: _Dest=0x66ef378, _Source="3difr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" [0156.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0156.647] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0156.647] wcscmp (_String1="drvDX8.x3d", _String2=".") returned 1 [0156.647] wcscmp (_String1="drvDX8.x3d", _String2="..") returned 1 [0156.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee9e8 [0156.647] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.647] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.648] wcscat (in: _Dest=0x66ee9e8, _Source="drvDX8.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" [0156.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0156.649] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac27e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0156.649] wcscmp (_String1="drvDX9.x3d", _String2=".") returned 1 [0156.649] wcscmp (_String1="drvDX9.x3d", _String2="..") returned 1 [0156.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eee28 [0156.649] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.649] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.649] wcscat (in: _Dest=0x66eee28, _Source="drvDX9.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" [0156.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0156.650] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0156.650] wcscmp (_String1="drvSOFT.x3d", _String2=".") returned 1 [0156.650] wcscmp (_String1="drvSOFT.x3d", _String2="..") returned 1 [0156.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3557a0 [0156.650] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.650] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.650] wcscat (in: _Dest=0x3557a0, _Source="drvSOFT.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" [0156.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3557a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0156.651] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0156.651] wcscmp (_String1="prc", _String2=".") returned 1 [0156.651] wcscmp (_String1="prc", _String2="..") returned 1 [0156.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0156.652] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.652] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.652] wcscat (in: _Dest=0x3da5d70, _Source="prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0156.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0156.653] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0156.653] wcscmp (_String1="prcr.x3d", _String2=".") returned 1 [0156.653] wcscmp (_String1="prcr.x3d", _String2="..") returned 1 [0156.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeeb0 [0156.653] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.653] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.653] wcscat (in: _Dest=0x66eeeb0, _Source="prcr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" [0156.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0156.654] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0156.654] wcscmp (_String1="tesselate.x3d", _String2=".") returned 1 [0156.654] wcscmp (_String1="tesselate.x3d", _String2="..") returned 1 [0156.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e498 [0156.654] wcscpy (in: _Dest=0x674e498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0156.654] wcscat (in: _Dest=0x674e498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0156.654] wcscat (in: _Dest=0x674e498, _Source="tesselate.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" [0156.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0156.655] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0156.655] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0156.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 Thread: id = 515 os_tid = 0xb88 [0135.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer")) returned 0x20 [0145.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0145.688] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.688] GetLastError () returned 0x5 [0145.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0145.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 Thread: id = 516 os_tid = 0x524 [0135.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der")) returned 0x20 [0145.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0145.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.711] GetLastError () returned 0x5 [0145.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0145.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 517 os_tid = 0x5ec [0135.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d2b0 [0135.413] wcscpy (in: _Dest=0x3f1d2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0135.413] wcscat (in: _Dest=0x3f1d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0135.413] wcscat (in: _Dest=0x3f1d2b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*" [0135.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0135.413] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0145.687] wcscmp (_String1=".", _String2=".") returned 0 [0145.687] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.687] wcscmp (_String1="..", _String2=".") returned 1 [0145.687] wcscmp (_String1="..", _String2="..") returned 0 [0145.688] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0145.688] wcscmp (_String1="DEXShare.spi", _String2=".") returned 1 [0145.688] wcscmp (_String1="DEXShare.spi", _String2="..") returned 1 [0145.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0038 [0145.688] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0145.688] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0145.688] wcscat (in: _Dest=0x66f0038, _Source="DEXShare.spi" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" [0151.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0151.594] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0151.594] wcscmp (_String1="Services.cfg", _String2=".") returned 1 [0151.594] wcscmp (_String1="Services.cfg", _String2="..") returned 1 [0151.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0151.594] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0151.594] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0151.594] wcscat (in: _Dest=0x3f25fb8, _Source="Services.cfg" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" [0151.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0151.595] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0151.595] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0151.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0151.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0151.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 518 os_tid = 0xc24 [0135.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d418 [0135.413] wcscpy (in: _Dest=0x3f1d418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0135.413] wcscat (in: _Dest=0x3f1d418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0135.413] wcscat (in: _Dest=0x3f1d418, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*" [0135.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0135.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0145.704] wcscmp (_String1=".", _String2=".") returned 0 [0145.704] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.705] wcscmp (_String1="..", _String2=".") returned 1 [0145.705] wcscmp (_String1="..", _String2="..") returned 0 [0145.705] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1 [0145.705] wcscmp (_String1="ADMPlugin.apl", _String2=".") returned 1 [0145.705] wcscmp (_String1="ADMPlugin.apl", _String2="..") returned 1 [0145.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db868 [0145.705] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0145.705] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0145.705] wcscat (in: _Dest=0x66db868, _Source="ADMPlugin.apl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" [0152.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0152.050] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 0 [0152.050] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0152.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0152.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0152.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 519 os_tid = 0xbc8 [0135.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29db0 [0135.416] wcscpy (in: _Dest=0x3f29db0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0135.416] wcscat (in: _Dest=0x3f29db0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0135.416] wcscat (in: _Dest=0x3f29db0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*" [0135.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0135.416] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0145.520] wcscmp (_String1=".", _String2=".") returned 0 [0145.520] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.720] wcscmp (_String1="..", _String2=".") returned 1 [0145.720] wcscmp (_String1="..", _String2="..") returned 0 [0145.720] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0145.721] wcscmp (_String1="add_reviewer.gif", _String2=".") returned 1 [0145.721] wcscmp (_String1="add_reviewer.gif", _String2="..") returned 1 [0145.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db8f8 [0145.721] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0145.721] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0145.721] wcscat (in: _Dest=0x66db8f8, _Source="add_reviewer.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" [0146.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0146.291] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0146.291] wcscmp (_String1="bl.gif", _String2=".") returned 1 [0146.291] wcscmp (_String1="bl.gif", _String2="..") returned 1 [0146.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e100f0 [0146.292] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.292] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.292] wcscat (in: _Dest=0x3e100f0, _Source="bl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" [0146.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0146.293] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0146.293] wcscmp (_String1="br.gif", _String2=".") returned 1 [0146.293] wcscmp (_String1="br.gif", _String2="..") returned 1 [0146.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e094b0 [0146.293] wcscpy (in: _Dest=0x3e094b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.293] wcscat (in: _Dest=0x3e094b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.293] wcscat (in: _Dest=0x3e094b0, _Source="br.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" [0146.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e094b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0146.294] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0146.294] wcscmp (_String1="create_form.gif", _String2=".") returned 1 [0146.294] wcscmp (_String1="create_form.gif", _String2="..") returned 1 [0146.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0146.295] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.295] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.295] wcscat (in: _Dest=0x66dc948, _Source="create_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" [0146.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0146.296] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0146.296] wcscmp (_String1="distribute_form.gif", _String2=".") returned 1 [0146.296] wcscmp (_String1="distribute_form.gif", _String2="..") returned 1 [0146.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30f30 [0146.296] wcscpy (in: _Dest=0x3e30f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.296] wcscat (in: _Dest=0x3e30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.296] wcscat (in: _Dest=0x3e30f30, _Source="distribute_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" [0146.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0146.297] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0146.297] wcscmp (_String1="email_all.gif", _String2=".") returned 1 [0146.297] wcscmp (_String1="email_all.gif", _String2="..") returned 1 [0146.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee740 [0146.297] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.297] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.297] wcscat (in: _Dest=0x66ee740, _Source="email_all.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" [0146.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0146.298] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0146.298] wcscmp (_String1="email_initiator.gif", _String2=".") returned 1 [0146.298] wcscmp (_String1="email_initiator.gif", _String2="..") returned 1 [0146.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31060 [0146.298] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.298] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.298] wcscat (in: _Dest=0x3e31060, _Source="email_initiator.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" [0146.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0146.300] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0146.300] wcscmp (_String1="ended_review_or_form.gif", _String2=".") returned 1 [0146.300] wcscmp (_String1="ended_review_or_form.gif", _String2="..") returned 1 [0146.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0146.300] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.300] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.300] wcscat (in: _Dest=0x3e0e110, _Source="ended_review_or_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" [0146.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0146.301] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0146.301] wcscmp (_String1="end_review.gif", _String2=".") returned 1 [0146.301] wcscmp (_String1="end_review.gif", _String2="..") returned 1 [0146.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc558 [0146.302] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.302] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.302] wcscat (in: _Dest=0x66dc558, _Source="end_review.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" [0146.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0146.302] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0146.303] wcscmp (_String1="forms_distributed.gif", _String2=".") returned 1 [0146.303] wcscmp (_String1="forms_distributed.gif", _String2="..") returned 1 [0146.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30d68 [0146.303] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.303] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.303] wcscat (in: _Dest=0x3e30d68, _Source="forms_distributed.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" [0146.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0146.304] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0146.304] wcscmp (_String1="forms_received.gif", _String2=".") returned 1 [0146.304] wcscmp (_String1="forms_received.gif", _String2="..") returned 1 [0146.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30e98 [0146.304] wcscpy (in: _Dest=0x3e30e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.304] wcscat (in: _Dest=0x3e30e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.304] wcscat (in: _Dest=0x3e30e98, _Source="forms_received.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" [0146.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0146.305] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0146.305] wcscmp (_String1="forms_super.gif", _String2=".") returned 1 [0146.305] wcscmp (_String1="forms_super.gif", _String2="..") returned 1 [0146.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc798 [0146.305] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.306] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.306] wcscat (in: _Dest=0x66dc798, _Source="forms_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" [0146.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0146.307] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0146.307] wcscmp (_String1="form_responses.gif", _String2=".") returned 1 [0146.307] wcscmp (_String1="form_responses.gif", _String2="..") returned 1 [0146.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30cd0 [0146.307] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.307] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.307] wcscat (in: _Dest=0x3e30cd0, _Source="form_responses.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" [0146.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0146.309] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0146.309] wcscmp (_String1="info.gif", _String2=".") returned 1 [0146.309] wcscmp (_String1="info.gif", _String2="..") returned 1 [0146.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e098b0 [0146.309] wcscpy (in: _Dest=0x3e098b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.309] wcscat (in: _Dest=0x3e098b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.309] wcscat (in: _Dest=0x3e098b0, _Source="info.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" [0146.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e098b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0146.310] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0146.310] wcscmp (_String1="main.css", _String2=".") returned 1 [0146.310] wcscmp (_String1="main.css", _String2="..") returned 1 [0146.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e09bb0 [0146.310] wcscpy (in: _Dest=0x3e09bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.310] wcscat (in: _Dest=0x3e09bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.310] wcscat (in: _Dest=0x3e09bb0, _Source="main.css" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" [0146.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0146.311] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0146.311] wcscmp (_String1="open_original_form.gif", _String2=".") returned 1 [0146.311] wcscmp (_String1="open_original_form.gif", _String2="..") returned 1 [0146.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e890 [0146.311] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.311] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.311] wcscat (in: _Dest=0x3e0e890, _Source="open_original_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" [0146.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0146.312] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0146.312] wcscmp (_String1="pdf.gif", _String2=".") returned 1 [0146.312] wcscmp (_String1="pdf.gif", _String2="..") returned 1 [0146.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09b30 [0146.313] wcscpy (in: _Dest=0x3e09b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.313] wcscat (in: _Dest=0x3e09b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.313] wcscat (in: _Dest=0x3e09b30, _Source="pdf.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" [0146.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0146.314] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0146.314] wcscmp (_String1="reviewers.gif", _String2=".") returned 1 [0146.314] wcscmp (_String1="reviewers.gif", _String2="..") returned 1 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef400 [0146.314] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.314] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.314] wcscat (in: _Dest=0x66ef400, _Source="reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" [0146.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0146.315] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0146.315] wcscmp (_String1="reviews_joined.gif", _String2=".") returned 1 [0146.315] wcscmp (_String1="reviews_joined.gif", _String2="..") returned 1 [0146.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31650 [0146.315] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.315] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.315] wcscat (in: _Dest=0x3e31650, _Source="reviews_joined.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" [0146.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0146.316] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0146.316] wcscmp (_String1="reviews_sent.gif", _String2=".") returned 1 [0146.316] wcscmp (_String1="reviews_sent.gif", _String2="..") returned 1 [0146.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc8b8 [0146.317] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.317] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.317] wcscat (in: _Dest=0x66dc8b8, _Source="reviews_sent.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" [0146.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0146.318] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0146.318] wcscmp (_String1="reviews_super.gif", _String2=".") returned 1 [0146.318] wcscmp (_String1="reviews_super.gif", _String2="..") returned 1 [0146.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0146.318] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.318] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.318] wcscat (in: _Dest=0x66dc828, _Source="reviews_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" [0146.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0146.319] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0146.319] wcscmp (_String1="review_browser.gif", _String2=".") returned 1 [0146.319] wcscmp (_String1="review_browser.gif", _String2="..") returned 1 [0146.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31a78 [0146.319] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.319] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.319] wcscat (in: _Dest=0x3e31a78, _Source="review_browser.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" [0146.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0146.538] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0146.538] wcscmp (_String1="review_email.gif", _String2=".") returned 1 [0146.538] wcscmp (_String1="review_email.gif", _String2="..") returned 1 [0146.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcaf8 [0146.538] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0146.538] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0146.539] wcscat (in: _Dest=0x66dcaf8, _Source="review_email.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" [0147.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0147.387] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="RE78D9~1.GIF")) returned 1 [0147.387] wcscmp (_String1="review_same_reviewers.gif", _String2=".") returned 1 [0147.387] wcscmp (_String1="review_same_reviewers.gif", _String2="..") returned 1 [0147.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0147.387] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.387] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.387] wcscat (in: _Dest=0x3e0e890, _Source="review_same_reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" [0147.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0147.389] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0147.389] wcscmp (_String1="review_shared.gif", _String2=".") returned 1 [0147.389] wcscmp (_String1="review_shared.gif", _String2="..") returned 1 [0147.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc798 [0147.389] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.389] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.389] wcscat (in: _Dest=0x66dc798, _Source="review_shared.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" [0147.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0147.391] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0147.391] wcscmp (_String1="rss.gif", _String2=".") returned 1 [0147.391] wcscmp (_String1="rss.gif", _String2="..") returned 1 [0147.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09bb0 [0147.391] wcscpy (in: _Dest=0x3e09bb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.391] wcscat (in: _Dest=0x3e09bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.391] wcscat (in: _Dest=0x3e09bb0, _Source="rss.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" [0147.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0147.393] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0147.393] wcscmp (_String1="server_issue.gif", _String2=".") returned 1 [0147.393] wcscmp (_String1="server_issue.gif", _String2="..") returned 1 [0147.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc558 [0147.393] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.393] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.393] wcscat (in: _Dest=0x66dc558, _Source="server_issue.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" [0147.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0147.402] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0147.402] wcscmp (_String1="server_lg.gif", _String2=".") returned 1 [0147.402] wcscmp (_String1="server_lg.gif", _String2="..") returned 1 [0147.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0368 [0147.402] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.402] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.402] wcscat (in: _Dest=0x66f0368, _Source="server_lg.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" [0147.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0147.404] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0147.404] wcscmp (_String1="server_ok.gif", _String2=".") returned 1 [0147.404] wcscmp (_String1="server_ok.gif", _String2="..") returned 1 [0147.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0147.404] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.404] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.404] wcscat (in: _Dest=0x66ef950, _Source="server_ok.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" [0147.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0147.406] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0147.406] wcscmp (_String1="stop_collection_data.gif", _String2=".") returned 1 [0147.406] wcscmp (_String1="stop_collection_data.gif", _String2="..") returned 1 [0147.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0147.406] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.406] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.406] wcscat (in: _Dest=0x3e0e110, _Source="stop_collection_data.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" [0147.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0147.409] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0147.409] wcscmp (_String1="submission_history.gif", _String2=".") returned 1 [0147.409] wcscmp (_String1="submission_history.gif", _String2="..") returned 1 [0147.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e390 [0147.409] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.409] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.409] wcscat (in: _Dest=0x3e0e390, _Source="submission_history.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" [0147.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0147.410] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0147.411] wcscmp (_String1="tl.gif", _String2=".") returned 1 [0147.411] wcscmp (_String1="tl.gif", _String2="..") returned 1 [0147.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e098b0 [0147.411] wcscpy (in: _Dest=0x3e098b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.411] wcscat (in: _Dest=0x3e098b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.411] wcscat (in: _Dest=0x3e098b0, _Source="tl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" [0147.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e098b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0147.412] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0147.412] wcscmp (_String1="tr.gif", _String2=".") returned 1 [0147.412] wcscmp (_String1="tr.gif", _String2="..") returned 1 [0147.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e094b0 [0147.412] wcscpy (in: _Dest=0x3e094b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.412] wcscat (in: _Dest=0x3e094b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.412] wcscat (in: _Dest=0x3e094b0, _Source="tr.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" [0147.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e094b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0147.414] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0147.414] wcscmp (_String1="trash.gif", _String2=".") returned 1 [0147.414] wcscmp (_String1="trash.gif", _String2="..") returned 1 [0147.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e095b0 [0147.414] wcscpy (in: _Dest=0x3e095b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.414] wcscat (in: _Dest=0x3e095b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.415] wcscat (in: _Dest=0x3e095b0, _Source="trash.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" [0147.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e095b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0147.416] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0147.416] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2=".") returned 1 [0147.416] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2="..") returned 1 [0147.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0147.416] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.417] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.417] wcscat (in: _Dest=0x35c4d8, _Source="turnOffNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" [0147.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0147.418] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0147.418] wcscmp (_String1="turnOffNotificationInTray.gif", _String2=".") returned 1 [0147.418] wcscmp (_String1="turnOffNotificationInTray.gif", _String2="..") returned 1 [0147.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c770 [0147.418] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.418] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.418] wcscat (in: _Dest=0x3e5c770, _Source="turnOffNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" [0147.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0147.420] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0147.420] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2=".") returned 1 [0147.420] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2="..") returned 1 [0147.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0147.420] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.420] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.420] wcscat (in: _Dest=0x35c378, _Source="turnOnNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" [0147.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0147.422] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0147.422] wcscmp (_String1="turnOnNotificationInTray.gif", _String2=".") returned 1 [0147.422] wcscmp (_String1="turnOnNotificationInTray.gif", _String2="..") returned 1 [0147.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bee8 [0147.422] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.422] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.422] wcscat (in: _Dest=0x3e5bee8, _Source="turnOnNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" [0147.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0147.424] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0147.424] wcscmp (_String1="warning.gif", _String2=".") returned 1 [0147.424] wcscmp (_String1="warning.gif", _String2="..") returned 1 [0147.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee5a8 [0147.424] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0147.424] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0147.424] wcscat (in: _Dest=0x66ee5a8, _Source="warning.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" [0147.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0147.425] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0147.425] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0147.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0147.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29db0) returned 1 [0147.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 Thread: id = 520 os_tid = 0xc4c [0135.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32b820 [0135.417] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0135.417] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\" [0135.417] wcscat (in: _Dest=0x32b820, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*" [0135.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0135.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0135.417] wcscmp (_String1=".", _String2=".") returned 0 [0135.418] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.418] wcscmp (_String1="..", _String2=".") returned 1 [0135.418] wcscmp (_String1="..", _String2="..") returned 0 [0135.418] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0135.418] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0135.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0135.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 [0135.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 521 os_tid = 0xb24 [0135.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif")) returned 0x20 [0135.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0135.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.420] GetLastError () returned 0x5 [0135.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0135.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58eb0) returned 1 Thread: id = 522 os_tid = 0xb28 [0135.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm")) returned 0x20 [0137.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0137.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.704] GetLastError () returned 0x5 [0137.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0137.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59b70) returned 1 Thread: id = 523 os_tid = 0xb2c [0135.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif")) returned 0x20 [0137.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0137.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.707] GetLastError () returned 0x5 [0137.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0137.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f8a8) returned 1 Thread: id = 524 os_tid = 0xb20 [0135.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm")) returned 0x20 [0137.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0137.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.709] GetLastError () returned 0x5 [0137.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0137.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 525 os_tid = 0xac4 [0135.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif")) returned 0x20 [0137.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0137.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.711] GetLastError () returned 0x5 [0137.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0137.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 526 os_tid = 0xac0 [0135.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm")) returned 0x20 [0137.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0137.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.713] GetLastError () returned 0x5 [0137.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0137.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f820) returned 1 Thread: id = 527 os_tid = 0xabc [0135.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif")) returned 0x20 [0137.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0137.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.716] GetLastError () returned 0x5 [0137.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0137.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 528 os_tid = 0xab8 [0135.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm")) returned 0x20 [0137.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0137.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.719] GetLastError () returned 0x5 [0137.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0137.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099c68) returned 1 Thread: id = 529 os_tid = 0xa90 [0135.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm")) returned 0x20 [0137.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0137.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.721] GetLastError () returned 0x5 [0137.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0137.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 530 os_tid = 0xb1c [0135.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg")) returned 0x20 [0137.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0137.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.724] GetLastError () returned 0x5 [0137.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0137.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08270) returned 1 Thread: id = 531 os_tid = 0x1c4 [0135.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif")) returned 0x20 [0137.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0137.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.726] GetLastError () returned 0x5 [0137.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0137.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 532 os_tid = 0x7fc [0135.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm")) returned 0x20 [0137.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0137.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.729] GetLastError () returned 0x5 [0137.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0137.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 533 os_tid = 0xda0 [0135.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif")) returned 0x20 [0137.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0137.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.731] GetLastError () returned 0x5 [0137.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0137.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 534 os_tid = 0xd98 [0135.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm")) returned 0x20 [0137.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0137.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.733] GetLastError () returned 0x5 [0137.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0137.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 535 os_tid = 0xda4 [0135.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm")) returned 0x20 [0135.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0135.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.950] GetLastError () returned 0x5 [0135.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0135.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 536 os_tid = 0xdbc [0135.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg")) returned 0x20 [0135.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0135.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.951] GetLastError () returned 0x5 [0135.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0135.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 537 os_tid = 0xd94 [0136.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm")) returned 0x20 [0136.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0136.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.044] GetLastError () returned 0x5 [0136.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0136.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 538 os_tid = 0xd8c [0136.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0136.041] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0136.041] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\" [0136.041] wcscat (in: _Dest=0x3e0e750, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*" [0136.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0136.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0136.041] wcscmp (_String1=".", _String2=".") returned 0 [0136.041] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.042] wcscmp (_String1="..", _String2=".") returned 1 [0136.042] wcscmp (_String1="..", _String2="..") returned 0 [0136.042] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.042] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2=".") returned 1 [0136.042] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2="..") returned 1 [0136.042] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0136.042] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0136.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0136.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 [0136.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 539 os_tid = 0xa88 [0136.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d850 [0136.045] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0136.045] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\" [0136.045] wcscat (in: _Dest=0x3e0d850, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*" [0136.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0136.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0136.065] wcscmp (_String1=".", _String2=".") returned 0 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.065] wcscmp (_String1="..", _String2=".") returned 1 [0136.065] wcscmp (_String1="..", _String2="..") returned 0 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b90200, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4b90200, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2=".") returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2="..") returned 1 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ea2f00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5ea2f00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2=".") returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2="..") returned 1 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed113d00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x778b30f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed113d00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2=".") returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2="..") returned 1 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee426a00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee426a00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2=".") returned 1 [0136.065] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2="..") returned 1 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0136.065] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0136.065] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0136.065] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 0 [0136.065] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0136.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0136.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 [0136.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 540 os_tid = 0xc58 [0136.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee740 [0136.046] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0136.046] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0136.046] wcscat (in: _Dest=0x66ee740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*" [0136.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41608 [0136.047] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0136.047] wcscmp (_String1=".", _String2=".") returned 0 [0136.047] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.047] wcscmp (_String1="..", _String2=".") returned 1 [0136.047] wcscmp (_String1="..", _String2="..") returned 0 [0136.047] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 1 [0136.047] wcscmp (_String1="ItemTemplates", _String2=".") returned 1 [0136.047] wcscmp (_String1="ItemTemplates", _String2="..") returned 1 [0136.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e750 [0136.048] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0136.048] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0136.048] wcscat (in: _Dest=0x3e0e750, _Source="ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0138.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0138.561] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0 [0138.561] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0138.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41608) returned 1 [0138.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 [0138.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 Thread: id = 541 os_tid = 0x474 [0136.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url")) returned 0x20 [0136.051] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url", dwFileAttributes=0x20) returned 1 [0136.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5a4 [0136.051] GetFileSizeEx (in: hFile=0x5a4, lpFileSize=0x901f83c | out: lpFileSize=0x901f83c*=236) returned 1 [0136.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0136.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ea8 [0136.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0136.051] NtQuerySystemTime (in: CurrentTime=0x901f7b0 | out: CurrentTime=0x901f7b0*=132482710447140000) returned 0x0 [0136.051] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x11d9a269 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x4075a7a [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x6c68fd46 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x7d654b4e [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x3d4c8d1 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x5839f2de [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x79e259d7 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x4dd696e6 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x659ef909 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0xbbcb3bd [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x5ad27d13 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x24befef1 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x17dad6e8 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x5de496d6 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x2ee0b436 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x1fb22820 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x6a762b6c [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x3dd71e04 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x594e2c89 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x671f78b4 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x377ba32f [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x295765d3 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x1799a310 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x1082dc69 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x56cc805f [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x726650ed [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x6a03bd1c [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x4b44f473 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x789e3fb3 [0136.052] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x1d333461 [0136.053] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x5e726477 [0136.053] RtlRandomEx (in: Seed=0x901f7a8 | out: Seed=0x901f7a8) returned 0x8c72b87 [0136.061] ReadFile (in: hFile=0x5a4, lpBuffer=0x672a120, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x901f7a4, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesRead=0x901f7a4*=0xec, lpOverlapped=0x0) returned 1 [0136.063] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.063] WriteFile (in: hFile=0x5a4, lpBuffer=0x672dd28*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x901f7a8, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesWritten=0x901f7a8*=0xec, lpOverlapped=0x0) returned 1 [0136.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0136.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0136.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0136.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672dd28) returned 1 [0136.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0136.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0136.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ae8) returned 1 [0136.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f840 [0136.512] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.512] WriteFile (in: hFile=0x5a4, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x901f830, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x901f830*=0x118, lpOverlapped=0x0) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f880) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f840) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ea8) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d68) returned 1 [0136.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b60) returned 1 [0136.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f470 [0136.598] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" [0136.598] wcscat (in: _Dest=0x3e0f470, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.ac3a86" [0136.598] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.ac3a86", NtPathName=0x901f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d538 [0136.660] FlushFileBuffers (hFile=0x5a4) returned 1 [0136.682] CloseHandle (hObject=0x5a4) returned 1 [0136.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e58e8 [0136.685] wcscpy (in: _Dest=0x66e58e8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0136.685] wcscat (in: _Dest=0x66e58e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt" [0136.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\ac3a86-readme.txt")) returned 0xffffffff [0136.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1298 [0136.699] WriteFile (in: hFile=0x1298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x901f7c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x901f7c4*=0x8b9, lpOverlapped=0x0) returned 1 [0136.701] CloseHandle (hObject=0x1298) returned 1 [0136.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e58e8) returned 1 [0136.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 Thread: id = 542 os_tid = 0x528 [0136.068] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url")) returned 0x20 [0136.070] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 1 [0136.071] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5a0 [0136.071] GetFileSizeEx (in: hFile=0x5a0, lpFileSize=0x84bfd6c | out: lpFileSize=0x84bfd6c*=226) returned 1 [0136.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0136.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e08 [0136.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0136.071] NtQuerySystemTime (in: CurrentTime=0x84bfce0 | out: CurrentTime=0x84bfce0*=132482710447296000) returned 0x0 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x3dd1fdaa [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x51aba3f7 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2dcc2bfa [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2cbb5c78 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x41ee785a [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x387a8c04 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x4550945 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x6f06242 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x305e698d [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2316d7a9 [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2bf7d61a [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x4becec1b [0136.071] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x1a6530a2 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0xc9a4a63 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x7ba1b719 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2bbb98ab [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x1afa60d7 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x1961bc29 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2f0f1c03 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x7fe482d4 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x30f00787 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x271a62fc [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x791bbdcc [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x60d8a960 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x495bcf77 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2710378b [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x2928c53b [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x529ce370 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x71d0568a [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x3960168d [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x334f07a3 [0136.072] RtlRandomEx (in: Seed=0x84bfcd8 | out: Seed=0x84bfcd8) returned 0x7b19399a [0136.080] ReadFile (in: hFile=0x5a0, lpBuffer=0x6731930, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x84bfcd4, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesRead=0x84bfcd4*=0xe2, lpOverlapped=0x0) returned 1 [0136.083] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.083] WriteFile (in: hFile=0x5a0, lpBuffer=0x6735538*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x84bfcd8, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesWritten=0x84bfcd8*=0xe2, lpOverlapped=0x0) returned 1 [0136.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0136.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0136.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0136.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6735538) returned 1 [0136.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0136.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0136.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b78) returned 1 [0136.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f7c0 [0136.514] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.515] WriteFile (in: hFile=0x5a0, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x84bfd60, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0x84bfd60*=0x11c, lpOverlapped=0x0) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f800) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0136.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f7c0) returned 1 [0136.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0136.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e08) returned 1 [0136.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42e0) returned 1 [0136.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4470) returned 1 [0136.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d596a8 [0136.601] wcscpy (in: _Dest=0x3d596a8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" [0136.601] wcscat (in: _Dest=0x3d596a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.ac3a86" [0136.601] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.ac3a86", NtPathName=0x84bfcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d5d0 [0136.727] FlushFileBuffers (hFile=0x5a0) returned 1 [0136.809] CloseHandle (hObject=0x5a0) returned 1 [0136.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5488 [0136.810] wcscpy (in: _Dest=0x66e5488, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0136.810] wcscat (in: _Dest=0x66e5488, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt" [0136.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\ac3a86-readme.txt")) returned 0x20 [0136.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 [0136.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 543 os_tid = 0x140 [0136.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e61e80 [0136.069] wcscpy (in: _Dest=0x3e61e80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0136.069] wcscat (in: _Dest=0x3e61e80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0136.069] wcscat (in: _Dest=0x3e61e80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\*" [0136.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0136.069] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0136.070] wcscmp (_String1=".", _String2=".") returned 0 [0136.070] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.070] wcscmp (_String1="..", _String2=".") returned 1 [0136.070] wcscmp (_String1="..", _String2="..") returned 0 [0136.070] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0136.070] wcscmp (_String1="Adobe", _String2=".") returned 1 [0136.070] wcscmp (_String1="Adobe", _String2="..") returned 1 [0136.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7c80 [0136.070] wcscpy (in: _Dest=0x3ef7c80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0136.070] wcscat (in: _Dest=0x3ef7c80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0136.070] wcscat (in: _Dest=0x3ef7c80, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0145.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0145.377] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0145.377] wcscmp (_String1="Application Data", _String2=".") returned 1 [0145.377] wcscmp (_String1="Application Data", _String2="..") returned 1 [0145.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0145.377] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.377] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.377] wcscat (in: _Dest=0x3d8e278, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0145.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0145.378] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7756010, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0145.378] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2=".") returned 1 [0145.378] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2="..") returned 1 [0145.378] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0145.378] wcscmp (_String1="Google", _String2=".") returned 1 [0145.378] wcscmp (_String1="Google", _String2="..") returned 1 [0145.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d5070 [0145.379] wcscpy (in: _Dest=0x66d5070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.379] wcscat (in: _Dest=0x66d5070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.379] wcscat (in: _Dest=0x66d5070, _Source="Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0145.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d5070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0145.380] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0145.380] wcscmp (_String1="History", _String2=".") returned 1 [0145.380] wcscmp (_String1="History", _String2="..") returned 1 [0145.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d5178 [0145.380] wcscpy (in: _Dest=0x66d5178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.380] wcscat (in: _Dest=0x66d5178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.380] wcscat (in: _Dest=0x66d5178, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0145.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d5178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0145.387] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x90d3ed0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90d3ed0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x49056c20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0xf541a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0145.387] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0145.387] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0145.387] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x3b4a6850, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3b4a6850, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0145.387] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0145.387] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0145.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6668 [0145.387] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.387] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.387] wcscat (in: _Dest=0x2fe6668, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft" [0145.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 [0145.387] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0145.387] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0145.387] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0145.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bb78 [0145.387] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.387] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.387] wcscat (in: _Dest=0x3d8bb78, _Source="Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0145.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0145.388] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x887736a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x887736a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0145.388] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0145.388] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0145.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d5388 [0145.389] wcscpy (in: _Dest=0x66d5388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.389] wcscat (in: _Dest=0x66d5388, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.389] wcscat (in: _Dest=0x66d5388, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla" [0145.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5388) returned 1 [0145.389] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb71d3240, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xb71d3240, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0145.389] wcscmp (_String1="Temp", _String2=".") returned 1 [0145.389] wcscmp (_String1="Temp", _String2="..") returned 1 [0145.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e621f0 [0145.389] wcscpy (in: _Dest=0x3e621f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.389] wcscat (in: _Dest=0x3e621f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.389] wcscat (in: _Dest=0x3e621f0, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp" [0145.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621f0) returned 1 [0145.389] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0145.389] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0145.389] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0145.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0e70 [0145.389] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.389] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.389] wcscat (in: _Dest=0x66d0e70, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files" [0145.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0145.389] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0145.389] wcscmp (_String1="VirtualStore", _String2=".") returned 1 [0145.389] wcscmp (_String1="VirtualStore", _String2="..") returned 1 [0145.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6668 [0145.389] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0145.389] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0145.390] wcscat (in: _Dest=0x2fe6668, _Source="VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0145.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0145.391] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0145.391] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0145.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0145.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61e80) returned 1 [0145.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33330) returned 1 Thread: id = 544 os_tid = 0x23c [0136.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62650 [0136.083] wcscpy (in: _Dest=0x3e62650, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0136.083] wcscat (in: _Dest=0x3e62650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0136.083] wcscat (in: _Dest=0x3e62650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*" [0136.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0136.083] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0136.083] wcscmp (_String1=".", _String2=".") returned 0 [0136.083] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.084] wcscmp (_String1="..", _String2=".") returned 1 [0136.084] wcscmp (_String1="..", _String2="..") returned 0 [0136.084] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0136.084] wcscmp (_String1="Adobe", _String2=".") returned 1 [0136.084] wcscmp (_String1="Adobe", _String2="..") returned 1 [0136.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7b20 [0136.084] wcscpy (in: _Dest=0x3ef7b20, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0136.084] wcscat (in: _Dest=0x3ef7b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0136.084] wcscat (in: _Dest=0x3ef7b20, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0142.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0142.746] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc0b07b20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77142c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0142.746] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0142.746] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0142.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0142.746] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0142.747] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0142.747] wcscat (in: _Dest=0x2fe6b48, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft" [0142.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0142.747] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0142.747] wcscmp (_String1="Sun", _String2=".") returned 1 [0142.747] wcscmp (_String1="Sun", _String2="..") returned 1 [0142.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4c50 [0142.747] wcscpy (in: _Dest=0x66d4c50, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0142.747] wcscat (in: _Dest=0x66d4c50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0142.747] wcscat (in: _Dest=0x66d4c50, _Source="Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0142.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0142.748] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0142.748] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0142.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0142.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62650) returned 1 [0142.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 Thread: id = 545 os_tid = 0x64 [0136.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62740 [0136.084] wcscpy (in: _Dest=0x3e62740, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0136.084] wcscat (in: _Dest=0x3e62740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.084] wcscat (in: _Dest=0x3e62740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*" [0136.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40ed0 [0136.084] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*", lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0136.085] wcscmp (_String1=".", _String2=".") returned 0 [0136.085] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x901b6ba0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x901b6ba0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.085] wcscmp (_String1="..", _String2=".") returned 1 [0136.085] wcscmp (_String1="..", _String2="..") returned 0 [0136.085] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1e7e9d0, ftCreationTime.dwHighDateTime=0x1d5dbe4, ftLastAccessTime.dwLowDateTime=0xa20ca910, ftLastAccessTime.dwHighDateTime=0x1d5e382, ftLastWriteTime.dwLowDateTime=0xa20ca910, ftLastWriteTime.dwHighDateTime=0x1d5e382, nFileSizeHigh=0x0, nFileSizeLow=0xdcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="14Vd pUK5vUQ.png", cAlternateFileName="14VDPU~1.PNG")) returned 1 [0136.085] wcscmp (_String1="14Vd pUK5vUQ.png", _String2=".") returned 1 [0136.085] wcscmp (_String1="14Vd pUK5vUQ.png", _String2="..") returned 1 [0136.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e56b8 [0136.085] wcscpy (in: _Dest=0x66e56b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0136.085] wcscat (in: _Dest=0x66e56b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0136.085] wcscat (in: _Dest=0x66e56b8, _Source="14Vd pUK5vUQ.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png" [0146.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e56b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0146.817] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc5e876c0, ftCreationTime.dwHighDateTime=0x1d5e12a, ftLastAccessTime.dwLowDateTime=0x83d4f640, ftLastAccessTime.dwHighDateTime=0x1d5e121, ftLastWriteTime.dwLowDateTime=0x83d4f640, ftLastWriteTime.dwHighDateTime=0x1d5e121, nFileSizeHigh=0x0, nFileSizeLow=0xee75, dwReserved0=0x0, dwReserved1=0x0, cFileName="1h82UZM65KeV_Q.mp3", cAlternateFileName="1H82UZ~1.MP3")) returned 1 [0146.817] wcscmp (_String1="1h82UZM65KeV_Q.mp3", _String2=".") returned 1 [0146.817] wcscmp (_String1="1h82UZM65KeV_Q.mp3", _String2="..") returned 1 [0146.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5db8 [0146.817] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.817] wcscat (in: _Dest=0x66e5db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.817] wcscat (in: _Dest=0x66e5db8, _Source="1h82UZM65KeV_Q.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3" [0146.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0146.818] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2f72fb0, ftCreationTime.dwHighDateTime=0x1d5dafb, ftLastAccessTime.dwLowDateTime=0x3a85c1d0, ftLastAccessTime.dwHighDateTime=0x1d5e54b, ftLastWriteTime.dwLowDateTime=0x3a85c1d0, ftLastWriteTime.dwHighDateTime=0x1d5e54b, nFileSizeHigh=0x0, nFileSizeLow=0x2b3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="2T7_ebe7rqchnWYS.avi", cAlternateFileName="2T7_EB~1.AVI")) returned 1 [0146.819] wcscmp (_String1="2T7_ebe7rqchnWYS.avi", _String2=".") returned 1 [0146.819] wcscmp (_String1="2T7_ebe7rqchnWYS.avi", _String2="..") returned 1 [0146.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0600 [0146.819] wcscpy (in: _Dest=0x66d0600, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.819] wcscat (in: _Dest=0x66d0600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.819] wcscat (in: _Dest=0x66d0600, _Source="2T7_ebe7rqchnWYS.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi" [0146.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0146.820] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d34cb80, ftCreationTime.dwHighDateTime=0x1d5de3b, ftLastAccessTime.dwLowDateTime=0xf84c100, ftLastAccessTime.dwHighDateTime=0x1d5de86, ftLastWriteTime.dwLowDateTime=0xf84c100, ftLastWriteTime.dwHighDateTime=0x1d5de86, nFileSizeHigh=0x0, nFileSizeLow=0x148d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="83Uf6.gif", cAlternateFileName="")) returned 1 [0146.820] wcscmp (_String1="83Uf6.gif", _String2=".") returned 1 [0146.820] wcscmp (_String1="83Uf6.gif", _String2="..") returned 1 [0146.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1d48 [0146.820] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.820] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.820] wcscat (in: _Dest=0x2fe1d48, _Source="83Uf6.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif" [0146.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0146.821] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed0115d0, ftCreationTime.dwHighDateTime=0x1d5d975, ftLastAccessTime.dwLowDateTime=0x3e35dff0, ftLastAccessTime.dwHighDateTime=0x1d5da73, ftLastWriteTime.dwLowDateTime=0x3e35dff0, ftLastWriteTime.dwHighDateTime=0x1d5da73, nFileSizeHigh=0x0, nFileSizeLow=0x13af, dwReserved0=0x0, dwReserved1=0x0, cFileName="8rz1PFlsnddIa84s0pY.png", cAlternateFileName="8RZ1PF~1.PNG")) returned 1 [0146.821] wcscmp (_String1="8rz1PFlsnddIa84s0pY.png", _String2=".") returned 1 [0146.821] wcscmp (_String1="8rz1PFlsnddIa84s0pY.png", _String2="..") returned 1 [0146.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb6f8 [0146.821] wcscpy (in: _Dest=0x3edb6f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.822] wcscat (in: _Dest=0x3edb6f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.822] wcscat (in: _Dest=0x3edb6f8, _Source="8rz1PFlsnddIa84s0pY.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png" [0146.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0146.823] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0146.823] wcscmp (_String1="Adobe", _String2=".") returned 1 [0146.823] wcscmp (_String1="Adobe", _String2="..") returned 1 [0146.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7d30 [0146.823] wcscpy (in: _Dest=0x3ef7d30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.823] wcscat (in: _Dest=0x3ef7d30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.823] wcscat (in: _Dest=0x3ef7d30, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0146.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0146.824] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd029de70, ftCreationTime.dwHighDateTime=0x1d5e4eb, ftLastAccessTime.dwLowDateTime=0x833b7770, ftLastAccessTime.dwHighDateTime=0x1d5e79a, ftLastWriteTime.dwLowDateTime=0x833b7770, ftLastWriteTime.dwHighDateTime=0x1d5e79a, nFileSizeHigh=0x0, nFileSizeLow=0x16d66, dwReserved0=0x0, dwReserved1=0x0, cFileName="aKb7ie29mKJSS 0L.pdf", cAlternateFileName="AKB7IE~1.PDF")) returned 1 [0146.824] wcscmp (_String1="aKb7ie29mKJSS 0L.pdf", _String2=".") returned 1 [0146.824] wcscmp (_String1="aKb7ie29mKJSS 0L.pdf", _String2="..") returned 1 [0146.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0ab0 [0146.824] wcscpy (in: _Dest=0x66d0ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.824] wcscat (in: _Dest=0x66d0ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.824] wcscat (in: _Dest=0x66d0ab0, _Source="aKb7ie29mKJSS 0L.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf" [0146.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0146.825] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f7347f0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x51dec600, ftLastAccessTime.dwHighDateTime=0x1d5db92, ftLastWriteTime.dwLowDateTime=0x51dec600, ftLastWriteTime.dwHighDateTime=0x1d5db92, nFileSizeHigh=0x0, nFileSizeLow=0x9cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aw4nwlxSR4qh3bkRFMO_.bmp", cAlternateFileName="AW4NWL~1.BMP")) returned 1 [0146.825] wcscmp (_String1="aw4nwlxSR4qh3bkRFMO_.bmp", _String2=".") returned 1 [0146.825] wcscmp (_String1="aw4nwlxSR4qh3bkRFMO_.bmp", _String2="..") returned 1 [0146.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbaf8 [0146.825] wcscpy (in: _Dest=0x3edbaf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.825] wcscat (in: _Dest=0x3edbaf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.825] wcscat (in: _Dest=0x3edbaf8, _Source="aw4nwlxSR4qh3bkRFMO_.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp" [0146.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0146.826] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x811229f0, ftCreationTime.dwHighDateTime=0x1d5def6, ftLastAccessTime.dwLowDateTime=0x20f51e60, ftLastAccessTime.dwHighDateTime=0x1d5e496, ftLastWriteTime.dwLowDateTime=0x20f51e60, ftLastWriteTime.dwHighDateTime=0x1d5e496, nFileSizeHigh=0x0, nFileSizeLow=0x158ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="bRNjh.mkv", cAlternateFileName="")) returned 1 [0146.826] wcscmp (_String1="bRNjh.mkv", _String2=".") returned 1 [0146.826] wcscmp (_String1="bRNjh.mkv", _String2="..") returned 1 [0146.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3ae8 [0146.826] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.826] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.826] wcscat (in: _Dest=0x2fe3ae8, _Source="bRNjh.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv" [0146.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe3ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0146.828] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6402570, ftCreationTime.dwHighDateTime=0x1d5e040, ftLastAccessTime.dwLowDateTime=0xc631af70, ftLastAccessTime.dwHighDateTime=0x1d5dde2, ftLastWriteTime.dwLowDateTime=0xc631af70, ftLastWriteTime.dwHighDateTime=0x1d5dde2, nFileSizeHigh=0x0, nFileSizeLow=0x172d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="bTBQh6McSj.m4a", cAlternateFileName="BTBQH6~1.M4A")) returned 1 [0146.828] wcscmp (_String1="bTBQh6McSj.m4a", _String2=".") returned 1 [0146.828] wcscmp (_String1="bTBQh6McSj.m4a", _String2="..") returned 1 [0146.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ba40 [0146.828] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.828] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.828] wcscat (in: _Dest=0x3d8ba40, _Source="bTBQh6McSj.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a" [0146.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0146.829] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf9c73030, ftCreationTime.dwHighDateTime=0x1d5e1a2, ftLastAccessTime.dwLowDateTime=0xf02a8e30, ftLastAccessTime.dwHighDateTime=0x1d5d966, ftLastWriteTime.dwLowDateTime=0xf02a8e30, ftLastWriteTime.dwHighDateTime=0x1d5d966, nFileSizeHigh=0x0, nFileSizeLow=0x15577, dwReserved0=0x0, dwReserved1=0x0, cFileName="burbYf.m4a", cAlternateFileName="")) returned 1 [0146.829] wcscmp (_String1="burbYf.m4a", _String2=".") returned 1 [0146.829] wcscmp (_String1="burbYf.m4a", _String2="..") returned 1 [0146.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0146.829] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.829] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.829] wcscat (in: _Dest=0x2fe6d28, _Source="burbYf.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a" [0146.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0146.830] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc5311dd0, ftCreationTime.dwHighDateTime=0x1d5e09f, ftLastAccessTime.dwLowDateTime=0x10db6820, ftLastAccessTime.dwHighDateTime=0x1d5e4ac, ftLastWriteTime.dwLowDateTime=0x10db6820, ftLastWriteTime.dwHighDateTime=0x1d5e4ac, nFileSizeHigh=0x0, nFileSizeLow=0x1529e, dwReserved0=0x0, dwReserved1=0x0, cFileName="c3fvtPVTld.pptx", cAlternateFileName="C3FVTP~1.PPT")) returned 1 [0146.830] wcscmp (_String1="c3fvtPVTld.pptx", _String2=".") returned 1 [0146.830] wcscmp (_String1="c3fvtPVTld.pptx", _String2="..") returned 1 [0146.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e5e98 [0146.830] wcscpy (in: _Dest=0x66e5e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.830] wcscat (in: _Dest=0x66e5e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.830] wcscat (in: _Dest=0x66e5e98, _Source="c3fvtPVTld.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx" [0146.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0146.831] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a171720, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0xdc5625a0, ftLastAccessTime.dwHighDateTime=0x1d5e5cc, ftLastWriteTime.dwLowDateTime=0xdc5625a0, ftLastWriteTime.dwHighDateTime=0x1d5e5cc, nFileSizeHigh=0x0, nFileSizeLow=0x70a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cfn1ITQKnHD.mp3", cAlternateFileName="CFN1IT~1.MP3")) returned 1 [0146.831] wcscmp (_String1="Cfn1ITQKnHD.mp3", _String2=".") returned 1 [0146.832] wcscmp (_String1="Cfn1ITQKnHD.mp3", _String2="..") returned 1 [0146.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e5f08 [0146.832] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.832] wcscat (in: _Dest=0x66e5f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.832] wcscat (in: _Dest=0x66e5f08, _Source="Cfn1ITQKnHD.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3" [0146.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0146.833] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3b002570, ftCreationTime.dwHighDateTime=0x1d5dc99, ftLastAccessTime.dwLowDateTime=0x1496bf00, ftLastAccessTime.dwHighDateTime=0x1d5ddf4, ftLastWriteTime.dwLowDateTime=0x1496bf00, ftLastWriteTime.dwHighDateTime=0x1d5ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x110db, dwReserved0=0x0, dwReserved1=0x0, cFileName="cL-9 O-Sb2GQz4ofvuG.wav", cAlternateFileName="CL-9O-~1.WAV")) returned 1 [0146.833] wcscmp (_String1="cL-9 O-Sb2GQz4ofvuG.wav", _String2=".") returned 1 [0146.833] wcscmp (_String1="cL-9 O-Sb2GQz4ofvuG.wav", _String2="..") returned 1 [0146.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb5f8 [0146.833] wcscpy (in: _Dest=0x3edb5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.833] wcscat (in: _Dest=0x3edb5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.833] wcscat (in: _Dest=0x3edb5f8, _Source="cL-9 O-Sb2GQz4ofvuG.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav" [0146.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0146.834] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x512814c0, ftCreationTime.dwHighDateTime=0x1d5e3d8, ftLastAccessTime.dwLowDateTime=0x5e761b20, ftLastAccessTime.dwHighDateTime=0x1d5e894, ftLastWriteTime.dwLowDateTime=0x5e761b20, ftLastWriteTime.dwHighDateTime=0x1d5e894, nFileSizeHigh=0x0, nFileSizeLow=0x102a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eiLfQlxN.pps", cAlternateFileName="")) returned 1 [0146.834] wcscmp (_String1="eiLfQlxN.pps", _String2=".") returned 1 [0146.834] wcscmp (_String1="eiLfQlxN.pps", _String2="..") returned 1 [0146.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e348 [0146.834] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.834] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.834] wcscat (in: _Dest=0x3d8e348, _Source="eiLfQlxN.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps" [0146.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0146.835] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa936c210, ftCreationTime.dwHighDateTime=0x1d5e1c6, ftLastAccessTime.dwLowDateTime=0xe820a800, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0xe820a800, ftLastWriteTime.dwHighDateTime=0x1d5e811, nFileSizeHigh=0x0, nFileSizeLow=0x5fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJZ-hM2ni5Md3N0h8xPK.pps", cAlternateFileName="EJZ-HM~1.PPS")) returned 1 [0146.835] wcscmp (_String1="eJZ-hM2ni5Md3N0h8xPK.pps", _String2=".") returned 1 [0146.835] wcscmp (_String1="eJZ-hM2ni5Md3N0h8xPK.pps", _String2="..") returned 1 [0146.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda478 [0146.835] wcscpy (in: _Dest=0x3eda478, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.836] wcscat (in: _Dest=0x3eda478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.836] wcscat (in: _Dest=0x3eda478, _Source="eJZ-hM2ni5Md3N0h8xPK.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps" [0146.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0146.836] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d54d400, ftCreationTime.dwHighDateTime=0x1d5e5d2, ftLastAccessTime.dwLowDateTime=0x1198f950, ftLastAccessTime.dwHighDateTime=0x1d5dac8, ftLastWriteTime.dwLowDateTime=0x1198f950, ftLastWriteTime.dwHighDateTime=0x1d5dac8, nFileSizeHigh=0x0, nFileSizeLow=0x95d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f4gs_Hh6kqZM3QKVK.mp4", cAlternateFileName="F4GS_H~1.MP4")) returned 1 [0146.837] wcscmp (_String1="f4gs_Hh6kqZM3QKVK.mp4", _String2=".") returned 1 [0146.837] wcscmp (_String1="f4gs_Hh6kqZM3QKVK.mp4", _String2="..") returned 1 [0146.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0ee8 [0146.837] wcscpy (in: _Dest=0x66d0ee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.837] wcscat (in: _Dest=0x66d0ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.837] wcscat (in: _Dest=0x66d0ee8, _Source="f4gs_Hh6kqZM3QKVK.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4" [0146.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0146.838] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe7df520, ftCreationTime.dwHighDateTime=0x1d5e1dc, ftLastAccessTime.dwLowDateTime=0x82c1d080, ftLastAccessTime.dwHighDateTime=0x1d5dfcc, ftLastWriteTime.dwLowDateTime=0x82c1d080, ftLastWriteTime.dwHighDateTime=0x1d5dfcc, nFileSizeHigh=0x0, nFileSizeLow=0x108db, dwReserved0=0x0, dwReserved1=0x0, cFileName="i9AcFwR-kvHd1wW.mkv", cAlternateFileName="I9ACFW~1.MKV")) returned 1 [0146.838] wcscmp (_String1="i9AcFwR-kvHd1wW.mkv", _String2=".") returned 1 [0146.838] wcscmp (_String1="i9AcFwR-kvHd1wW.mkv", _String2="..") returned 1 [0146.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0f60 [0146.838] wcscpy (in: _Dest=0x66d0f60, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.838] wcscat (in: _Dest=0x66d0f60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.838] wcscat (in: _Dest=0x66d0f60, _Source="i9AcFwR-kvHd1wW.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv" [0146.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0146.839] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0146.839] wcscmp (_String1="Identities", _String2=".") returned 1 [0146.839] wcscmp (_String1="Identities", _String2="..") returned 1 [0146.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6668 [0146.839] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.839] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.839] wcscat (in: _Dest=0x2fe6668, _Source="Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0146.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14 [0146.840] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd47e1000, ftCreationTime.dwHighDateTime=0x1d5e530, ftLastAccessTime.dwLowDateTime=0xead0a930, ftLastAccessTime.dwHighDateTime=0x1d5d9e1, ftLastWriteTime.dwLowDateTime=0xead0a930, ftLastWriteTime.dwHighDateTime=0x1d5d9e1, nFileSizeHigh=0x0, nFileSizeLow=0x156b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHFA1Pvr4Kerh3.mp4", cAlternateFileName="IHFA1P~1.MP4")) returned 1 [0146.840] wcscmp (_String1="IHFA1Pvr4Kerh3.mp4", _String2=".") returned 1 [0146.840] wcscmp (_String1="IHFA1Pvr4Kerh3.mp4", _String2="..") returned 1 [0146.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0146.840] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.840] wcscat (in: _Dest=0x66e5e28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.840] wcscat (in: _Dest=0x66e5e28, _Source="IHFA1Pvr4Kerh3.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4" [0146.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0146.841] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe700d90, ftCreationTime.dwHighDateTime=0x1d5d89c, ftLastAccessTime.dwLowDateTime=0x7b00590, ftLastAccessTime.dwHighDateTime=0x1d5ddd0, ftLastWriteTime.dwLowDateTime=0x7b00590, ftLastWriteTime.dwHighDateTime=0x1d5ddd0, nFileSizeHigh=0x0, nFileSizeLow=0x23b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="iPyoF.mkv", cAlternateFileName="")) returned 1 [0146.841] wcscmp (_String1="iPyoF.mkv", _String2=".") returned 1 [0146.842] wcscmp (_String1="iPyoF.mkv", _String2="..") returned 1 [0146.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6c08 [0146.842] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.842] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.842] wcscat (in: _Dest=0x2fe6c08, _Source="iPyoF.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv" [0146.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0146.843] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b169e0, ftCreationTime.dwHighDateTime=0x1d5dbbf, ftLastAccessTime.dwLowDateTime=0x49012aa0, ftLastAccessTime.dwHighDateTime=0x1d5d8ae, ftLastWriteTime.dwLowDateTime=0x49012aa0, ftLastWriteTime.dwHighDateTime=0x1d5d8ae, nFileSizeHigh=0x0, nFileSizeLow=0x10637, dwReserved0=0x0, dwReserved1=0x0, cFileName="K3uUXkGRFKqO2g2a5R.png", cAlternateFileName="K3UUXK~1.PNG")) returned 1 [0146.843] wcscmp (_String1="K3uUXkGRFKqO2g2a5R.png", _String2=".") returned 1 [0146.843] wcscmp (_String1="K3uUXkGRFKqO2g2a5R.png", _String2="..") returned 1 [0146.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0146.843] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.843] wcscat (in: _Dest=0x3f1d508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.843] wcscat (in: _Dest=0x3f1d508, _Source="K3uUXkGRFKqO2g2a5R.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png" [0146.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0146.844] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0146.844] wcscmp (_String1="Macromedia", _String2=".") returned 1 [0146.844] wcscmp (_String1="Macromedia", _String2="..") returned 1 [0146.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0146.844] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.844] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.844] wcscat (in: _Dest=0x2fe6c68, _Source="Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0146.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0146.845] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x87b9a590, ftLastAccessTime.dwHighDateTime=0x1d30234, ftLastWriteTime.dwLowDateTime=0x87b9a590, ftLastWriteTime.dwHighDateTime=0x1d30234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0146.845] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0146.845] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0146.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6728 [0146.846] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.846] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.846] wcscat (in: _Dest=0x2fe6728, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft" [0146.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0146.846] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7feab630, ftCreationTime.dwHighDateTime=0x1d5e623, ftLastAccessTime.dwLowDateTime=0xf8e5aab0, ftLastAccessTime.dwHighDateTime=0x1d5de3d, ftLastWriteTime.dwLowDateTime=0xf8e5aab0, ftLastWriteTime.dwHighDateTime=0x1d5de3d, nFileSizeHigh=0x0, nFileSizeLow=0x7d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mov aD.wav", cAlternateFileName="MOVAD~1.WAV")) returned 1 [0146.846] wcscmp (_String1="mov aD.wav", _String2=".") returned 1 [0146.846] wcscmp (_String1="mov aD.wav", _String2="..") returned 1 [0146.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0146.846] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.846] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.846] wcscat (in: _Dest=0x2fe6728, _Source="mov aD.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav" [0146.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0146.847] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7e0ad140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7e0ad140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0146.848] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0146.848] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0146.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ba8 [0146.848] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.848] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.848] wcscat (in: _Dest=0x2fe6ba8, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla" [0146.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0146.848] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x810c9610, ftCreationTime.dwHighDateTime=0x1d5e032, ftLastAccessTime.dwLowDateTime=0x45331110, ftLastAccessTime.dwHighDateTime=0x1d5dcdf, ftLastWriteTime.dwLowDateTime=0x45331110, ftLastWriteTime.dwHighDateTime=0x1d5dcdf, nFileSizeHigh=0x0, nFileSizeLow=0xeec1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mV7QMcRH qs.ppt", cAlternateFileName="MV7QMC~1.PPT")) returned 1 [0146.848] wcscmp (_String1="mV7QMcRH qs.ppt", _String2=".") returned 1 [0146.848] wcscmp (_String1="mV7QMcRH qs.ppt", _String2="..") returned 1 [0146.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e5cd8 [0146.848] wcscpy (in: _Dest=0x66e5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.848] wcscat (in: _Dest=0x66e5cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.848] wcscat (in: _Dest=0x66e5cd8, _Source="mV7QMcRH qs.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt" [0146.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0146.849] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x849e13b0, ftCreationTime.dwHighDateTime=0x1d5e534, ftLastAccessTime.dwLowDateTime=0x1ecdf460, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x1ecdf460, ftLastWriteTime.dwHighDateTime=0x1d5e7d2, nFileSizeHigh=0x0, nFileSizeLow=0x1844f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OJ5zzas0Vl4.m4a", cAlternateFileName="OJ5ZZA~1.M4A")) returned 1 [0146.850] wcscmp (_String1="OJ5zzas0Vl4.m4a", _String2=".") returned 1 [0146.850] wcscmp (_String1="OJ5zzas0Vl4.m4a", _String2="..") returned 1 [0146.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0ae80 [0146.850] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.850] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.850] wcscat (in: _Dest=0x3e0ae80, _Source="OJ5zzas0Vl4.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a" [0146.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0146.851] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc56c1b0, ftCreationTime.dwHighDateTime=0x1d5e866, ftLastAccessTime.dwLowDateTime=0xaaf989c0, ftLastAccessTime.dwHighDateTime=0x1d5e581, ftLastWriteTime.dwLowDateTime=0xaaf989c0, ftLastWriteTime.dwHighDateTime=0x1d5e581, nFileSizeHigh=0x0, nFileSizeLow=0x1350c, dwReserved0=0x0, dwReserved1=0x0, cFileName="qXxsxZngn.gif", cAlternateFileName="QXXSXZ~1.GIF")) returned 1 [0146.851] wcscmp (_String1="qXxsxZngn.gif", _String2=".") returned 1 [0146.851] wcscmp (_String1="qXxsxZngn.gif", _String2="..") returned 1 [0146.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e7c0 [0146.852] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.852] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.852] wcscat (in: _Dest=0x3d8e7c0, _Source="qXxsxZngn.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif" [0146.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0146.855] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a129710, ftCreationTime.dwHighDateTime=0x1d5da5c, ftLastAccessTime.dwLowDateTime=0x82465e60, ftLastAccessTime.dwHighDateTime=0x1d5e43f, ftLastWriteTime.dwLowDateTime=0x82465e60, ftLastWriteTime.dwHighDateTime=0x1d5e43f, nFileSizeHigh=0x0, nFileSizeLow=0xa9cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="T3zqT9rGQlyqI3fL7.m4a", cAlternateFileName="T3ZQT9~1.M4A")) returned 1 [0146.855] wcscmp (_String1="T3zqT9rGQlyqI3fL7.m4a", _String2=".") returned 1 [0146.855] wcscmp (_String1="T3zqT9rGQlyqI3fL7.m4a", _String2="..") returned 1 [0146.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cf68 [0146.855] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.855] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.855] wcscat (in: _Dest=0x3f1cf68, _Source="T3zqT9rGQlyqI3fL7.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a" [0146.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0146.860] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x71d3d1f0, ftCreationTime.dwHighDateTime=0x1d5dd7f, ftLastAccessTime.dwLowDateTime=0xe9833150, ftLastAccessTime.dwHighDateTime=0x1d5e0d6, ftLastWriteTime.dwLowDateTime=0xe9833150, ftLastWriteTime.dwHighDateTime=0x1d5e0d6, nFileSizeHigh=0x0, nFileSizeLow=0x144ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="T506YyNzPz5zUZ2yR.wav", cAlternateFileName="T506YY~1.WAV")) returned 1 [0146.860] wcscmp (_String1="T506YyNzPz5zUZ2yR.wav", _String2=".") returned 1 [0146.860] wcscmp (_String1="T506YyNzPz5zUZ2yR.wav", _String2="..") returned 1 [0146.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d6e8 [0146.860] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.860] wcscat (in: _Dest=0x3f1d6e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.860] wcscat (in: _Dest=0x3f1d6e8, _Source="T506YyNzPz5zUZ2yR.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav" [0146.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0146.862] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67bd1a40, ftCreationTime.dwHighDateTime=0x1d5e523, ftLastAccessTime.dwLowDateTime=0xc61bd060, ftLastAccessTime.dwHighDateTime=0x1d5db17, ftLastWriteTime.dwLowDateTime=0xc61bd060, ftLastWriteTime.dwHighDateTime=0x1d5db17, nFileSizeHigh=0x0, nFileSizeLow=0x12683, dwReserved0=0x0, dwReserved1=0x0, cFileName="vpiErDf.bmp", cAlternateFileName="")) returned 1 [0146.862] wcscmp (_String1="vpiErDf.bmp", _String2=".") returned 1 [0146.862] wcscmp (_String1="vpiErDf.bmp", _String2="..") returned 1 [0146.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bb78 [0146.863] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.863] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.863] wcscat (in: _Dest=0x3d8bb78, _Source="vpiErDf.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp" [0146.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0146.864] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c9355c0, ftCreationTime.dwHighDateTime=0x1d5df63, ftLastAccessTime.dwLowDateTime=0xa83d8dc0, ftLastAccessTime.dwHighDateTime=0x1d5d8ee, ftLastWriteTime.dwLowDateTime=0xa83d8dc0, ftLastWriteTime.dwHighDateTime=0x1d5d8ee, nFileSizeHigh=0x0, nFileSizeLow=0x43ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="W9IPkbVNMPo0NdfC.mkv", cAlternateFileName="W9IPKB~1.MKV")) returned 1 [0146.864] wcscmp (_String1="W9IPkbVNMPo0NdfC.mkv", _String2=".") returned 1 [0146.865] wcscmp (_String1="W9IPkbVNMPo0NdfC.mkv", _String2="..") returned 1 [0146.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d5f8 [0146.865] wcscpy (in: _Dest=0x3f1d5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.865] wcscat (in: _Dest=0x3f1d5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.865] wcscat (in: _Dest=0x3f1d5f8, _Source="W9IPkbVNMPo0NdfC.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv" [0146.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0146.866] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7e8a330, ftCreationTime.dwHighDateTime=0x1d5e142, ftLastAccessTime.dwLowDateTime=0xf84e15f0, ftLastAccessTime.dwHighDateTime=0x1d5dd8a, ftLastWriteTime.dwLowDateTime=0xf84e15f0, ftLastWriteTime.dwHighDateTime=0x1d5dd8a, nFileSizeHigh=0x0, nFileSizeLow=0xef4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YeeBcTU6rx9E4ki.pdf", cAlternateFileName="YEEBCT~1.PDF")) returned 1 [0146.866] wcscmp (_String1="YeeBcTU6rx9E4ki.pdf", _String2=".") returned 1 [0146.866] wcscmp (_String1="YeeBcTU6rx9E4ki.pdf", _String2="..") returned 1 [0146.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1cef0 [0146.867] wcscpy (in: _Dest=0x3f1cef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.867] wcscat (in: _Dest=0x3f1cef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.867] wcscat (in: _Dest=0x3f1cef0, _Source="YeeBcTU6rx9E4ki.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf" [0146.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0146.868] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27b45d40, ftCreationTime.dwHighDateTime=0x1d5e08d, ftLastAccessTime.dwLowDateTime=0x253236e0, ftLastAccessTime.dwHighDateTime=0x1d5e5ca, ftLastWriteTime.dwLowDateTime=0x253236e0, ftLastWriteTime.dwHighDateTime=0x1d5e5ca, nFileSizeHigh=0x0, nFileSizeLow=0x109b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="YF9zT2wM.wav", cAlternateFileName="")) returned 1 [0146.868] wcscmp (_String1="YF9zT2wM.wav", _String2=".") returned 1 [0146.868] wcscmp (_String1="YF9zT2wM.wav", _String2="..") returned 1 [0146.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0146.868] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.868] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.868] wcscat (in: _Dest=0x3d8ea30, _Source="YF9zT2wM.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav" [0146.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0146.869] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa542bf60, ftCreationTime.dwHighDateTime=0x1d5e496, ftLastAccessTime.dwLowDateTime=0xa88aabc0, ftLastAccessTime.dwHighDateTime=0x1d5e675, ftLastWriteTime.dwLowDateTime=0xa88aabc0, ftLastWriteTime.dwHighDateTime=0x1d5e675, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6bySTBwAA.wav", cAlternateFileName="Z6BYST~1.WAV")) returned 1 [0146.869] wcscmp (_String1="Z6bySTBwAA.wav", _String2=".") returned 1 [0146.869] wcscmp (_String1="Z6bySTBwAA.wav", _String2="..") returned 1 [0146.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8de00 [0146.870] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.870] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.870] wcscat (in: _Dest=0x3d8de00, _Source="Z6bySTBwAA.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav" [0146.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0146.871] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa66217a0, ftCreationTime.dwHighDateTime=0x1d5db0a, ftLastAccessTime.dwLowDateTime=0x4a114030, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0x4a114030, ftLastWriteTime.dwHighDateTime=0x1d5e806, nFileSizeHigh=0x0, nFileSizeLow=0x2399, dwReserved0=0x0, dwReserved1=0x0, cFileName="zAivvyWe.png", cAlternateFileName="")) returned 1 [0146.871] wcscmp (_String1="zAivvyWe.png", _String2=".") returned 1 [0146.871] wcscmp (_String1="zAivvyWe.png", _String2="..") returned 1 [0146.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e828 [0146.871] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.871] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.871] wcscat (in: _Dest=0x3d8e828, _Source="zAivvyWe.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png" [0146.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0146.872] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b803640, ftCreationTime.dwHighDateTime=0x1d5d9ab, ftLastAccessTime.dwLowDateTime=0xae1ba850, ftLastAccessTime.dwHighDateTime=0x1d5de91, ftLastWriteTime.dwLowDateTime=0xae1ba850, ftLastWriteTime.dwHighDateTime=0x1d5de91, nFileSizeHigh=0x0, nFileSizeLow=0x5ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_odA65vv74WCX8YMW1x5.swf", cAlternateFileName="_ODA65~1.SWF")) returned 1 [0146.872] wcscmp (_String1="_odA65vv74WCX8YMW1x5.swf", _String2=".") returned 1 [0146.872] wcscmp (_String1="_odA65vv74WCX8YMW1x5.swf", _String2="..") returned 1 [0146.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda878 [0146.872] wcscpy (in: _Dest=0x3eda878, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0146.872] wcscat (in: _Dest=0x3eda878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0146.873] wcscat (in: _Dest=0x3eda878, _Source="_odA65vv74WCX8YMW1x5.swf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf" [0146.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0146.874] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b803640, ftCreationTime.dwHighDateTime=0x1d5d9ab, ftLastAccessTime.dwLowDateTime=0xae1ba850, ftLastAccessTime.dwHighDateTime=0x1d5de91, ftLastWriteTime.dwLowDateTime=0xae1ba850, ftLastWriteTime.dwHighDateTime=0x1d5de91, nFileSizeHigh=0x0, nFileSizeLow=0x5ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_odA65vv74WCX8YMW1x5.swf", cAlternateFileName="_ODA65~1.SWF")) returned 0 [0146.874] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0146.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ed0) returned 1 [0146.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62740) returned 1 [0146.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e618e0) returned 1 Thread: id = 546 os_tid = 0x3dc [0136.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d3d8 [0136.085] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0136.085] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0136.085] wcscat (in: _Dest=0x3d8d3d8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*" [0136.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41138 [0136.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0136.086] wcscmp (_String1=".", _String2=".") returned 0 [0136.086] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.086] wcscmp (_String1="..", _String2=".") returned 1 [0136.086] wcscmp (_String1="..", _String2="..") returned 0 [0136.086] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0136.086] wcscmp (_String1="ActiveX", _String2=".") returned 1 [0136.086] wcscmp (_String1="ActiveX", _String2="..") returned 1 [0136.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5728 [0136.086] wcscpy (in: _Dest=0x66e5728, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0136.086] wcscat (in: _Dest=0x66e5728, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0136.086] wcscat (in: _Dest=0x66e5728, _Source="ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0142.751] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0142.751] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0142.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41138) returned 1 [0142.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 [0142.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 Thread: id = 547 os_tid = 0x580 [0136.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0136.087] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0136.087] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0136.087] wcscat (in: _Dest=0x2fe6cc8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\*" [0136.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d402c8 [0136.087] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0136.087] wcscmp (_String1=".", _String2=".") returned 0 [0136.087] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.087] wcscmp (_String1="..", _String2=".") returned 1 [0136.087] wcscmp (_String1="..", _String2="..") returned 0 [0136.087] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0136.087] wcscmp (_String1="1.0", _String2=".") returned 1 [0136.087] wcscmp (_String1="1.0", _String2="..") returned 1 [0136.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6e48 [0136.087] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0136.088] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0136.088] wcscat (in: _Dest=0x2fe6e48, _Source="1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0141.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0141.212] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0141.213] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0141.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c8) returned 1 [0141.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0141.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03610) returned 1 Thread: id = 548 os_tid = 0x7c8 [0136.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0136.088] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0136.088] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0136.088] wcscat (in: _Dest=0x3d8d4a8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*" [0136.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40060 [0136.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d78 [0136.095] wcscmp (_String1=".", _String2=".") returned 0 [0136.095] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.095] wcscmp (_String1="..", _String2=".") returned 1 [0136.095] wcscmp (_String1="..", _String2="..") returned 0 [0136.095] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0136.095] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0136.095] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0136.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5808 [0136.095] wcscpy (in: _Dest=0x66e5808, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0136.095] wcscat (in: _Dest=0x66e5808, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0136.095] wcscat (in: _Dest=0x66e5808, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0138.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0139.026] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0139.026] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0139.026] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0139.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5bf8 [0139.026] wcscpy (in: _Dest=0x66e5bf8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.026] wcscat (in: _Dest=0x66e5bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.026] wcscat (in: _Dest=0x66e5bf8, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0144.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0144.565] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0144.565] wcscmp (_String1="da_DK", _String2=".") returned 1 [0144.565] wcscmp (_String1="da_DK", _String2="..") returned 1 [0144.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0ae10 [0144.565] wcscpy (in: _Dest=0x3e0ae10, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.566] wcscat (in: _Dest=0x3e0ae10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.566] wcscat (in: _Dest=0x3e0ae10, _Source="da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0144.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0ae10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0144.567] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0144.567] wcscmp (_String1="de_DE", _String2=".") returned 1 [0144.567] wcscmp (_String1="de_DE", _String2="..") returned 1 [0144.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b7b0 [0144.567] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.567] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.567] wcscat (in: _Dest=0x3e0b7b0, _Source="de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0144.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0144.568] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0144.568] wcscmp (_String1="en_US", _String2=".") returned 1 [0144.568] wcscmp (_String1="en_US", _String2="..") returned 1 [0144.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b580 [0144.568] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.568] wcscat (in: _Dest=0x3e0b580, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.569] wcscat (in: _Dest=0x3e0b580, _Source="en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0144.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0144.570] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0144.570] wcscmp (_String1="es_ES", _String2=".") returned 1 [0144.570] wcscmp (_String1="es_ES", _String2="..") returned 1 [0144.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b6d0 [0144.570] wcscpy (in: _Dest=0x3e0b6d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.570] wcscat (in: _Dest=0x3e0b6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.570] wcscat (in: _Dest=0x3e0b6d0, _Source="es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0144.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0144.572] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0144.572] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0144.572] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0144.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b820 [0144.572] wcscpy (in: _Dest=0x3e0b820, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.572] wcscat (in: _Dest=0x3e0b820, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.572] wcscat (in: _Dest=0x3e0b820, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0144.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0144.573] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0144.574] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0144.574] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0144.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b4a0 [0144.574] wcscpy (in: _Dest=0x3e0b4a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.574] wcscat (in: _Dest=0x3e0b4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.574] wcscat (in: _Dest=0x3e0b4a0, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0144.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0144.575] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0144.575] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0144.575] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0144.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b200 [0144.575] wcscpy (in: _Dest=0x3e0b200, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.575] wcscat (in: _Dest=0x3e0b200, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.575] wcscat (in: _Dest=0x3e0b200, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0144.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0b200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0144.577] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0144.577] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0144.577] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0144.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e59c8 [0144.577] wcscpy (in: _Dest=0x66e59c8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.577] wcscat (in: _Dest=0x66e59c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.577] wcscat (in: _Dest=0x66e59c8, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0144.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e59c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0144.578] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0144.578] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0144.578] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0144.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5aa8 [0144.578] wcscpy (in: _Dest=0x66e5aa8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.578] wcscat (in: _Dest=0x66e5aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.578] wcscat (in: _Dest=0x66e5aa8, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0144.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0144.580] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0144.580] wcscmp (_String1="it_IT", _String2=".") returned 1 [0144.580] wcscmp (_String1="it_IT", _String2="..") returned 1 [0144.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5878 [0144.580] wcscpy (in: _Dest=0x66e5878, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.580] wcscat (in: _Dest=0x66e5878, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.580] wcscat (in: _Dest=0x66e5878, _Source="it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0144.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0144.582] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0144.582] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0144.582] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0144.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e55d8 [0144.582] wcscpy (in: _Dest=0x66e55d8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.582] wcscat (in: _Dest=0x66e55d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.582] wcscat (in: _Dest=0x66e55d8, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0144.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0144.584] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0144.584] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0144.584] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0144.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5648 [0144.584] wcscpy (in: _Dest=0x66e5648, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.584] wcscat (in: _Dest=0x66e5648, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.584] wcscat (in: _Dest=0x66e5648, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0144.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0144.585] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0144.585] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0144.585] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0144.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5f78 [0144.586] wcscpy (in: _Dest=0x66e5f78, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.586] wcscat (in: _Dest=0x66e5f78, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.586] wcscat (in: _Dest=0x66e5f78, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0144.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0144.587] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0144.587] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0144.587] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0144.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e54f8 [0144.587] wcscpy (in: _Dest=0x66e54f8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.587] wcscat (in: _Dest=0x66e54f8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.587] wcscat (in: _Dest=0x66e54f8, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0144.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e54f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0144.589] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0144.589] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0144.589] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0144.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5fe8 [0144.589] wcscpy (in: _Dest=0x66e5fe8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.589] wcscat (in: _Dest=0x66e5fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.589] wcscat (in: _Dest=0x66e5fe8, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0144.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0144.591] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0144.591] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0144.591] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0144.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e6058 [0144.591] wcscpy (in: _Dest=0x66e6058, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.591] wcscat (in: _Dest=0x66e6058, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.591] wcscat (in: _Dest=0x66e6058, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0144.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e6058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0144.593] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0144.593] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0144.593] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0144.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e60c8 [0144.593] wcscpy (in: _Dest=0x66e60c8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.593] wcscat (in: _Dest=0x66e60c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.593] wcscat (in: _Dest=0x66e60c8, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0144.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e60c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0144.595] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0144.595] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0144.595] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0144.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e6138 [0144.595] wcscpy (in: _Dest=0x66e6138, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.595] wcscat (in: _Dest=0x66e6138, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.595] wcscat (in: _Dest=0x66e6138, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0144.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e6138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0144.597] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0144.597] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0144.597] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0144.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e61a8 [0144.597] wcscpy (in: _Dest=0x66e61a8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.597] wcscat (in: _Dest=0x66e61a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.597] wcscat (in: _Dest=0x66e61a8, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0144.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e61a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0144.599] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0144.599] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0144.599] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0144.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e6218 [0144.599] wcscpy (in: _Dest=0x66e6218, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.599] wcscat (in: _Dest=0x66e6218, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.599] wcscat (in: _Dest=0x66e6218, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0144.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e6218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0144.600] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0144.600] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0144.600] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0144.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e6288 [0144.601] wcscpy (in: _Dest=0x66e6288, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0144.601] wcscat (in: _Dest=0x66e6288, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0144.601] wcscat (in: _Dest=0x66e6288, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0144.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e6288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0145.430] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0145.430] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0145.430] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0145.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23300 [0145.430] wcscpy (in: _Dest=0x3f23300, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0145.430] wcscat (in: _Dest=0x3f23300, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0145.430] wcscat (in: _Dest=0x3f23300, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0157.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0157.336] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0157.336] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0157.336] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0157.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29480 [0157.336] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0157.336] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0157.336] wcscat (in: _Dest=0x3f29480, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0157.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0157.338] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0157.338] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0157.338] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0157.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29330 [0157.338] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0157.338] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0157.338] wcscat (in: _Dest=0x3f29330, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0157.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0157.340] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0157.340] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0157.340] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0157.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29950 [0157.340] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0157.340] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0157.340] wcscat (in: _Dest=0x3f29950, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0157.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0157.342] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0157.342] FindClose (in: hFindFile=0x3e80d78 | out: hFindFile=0x3e80d78) returned 1 [0157.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0157.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0157.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 549 os_tid = 0x5e8 [0136.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b4280 [0136.089] wcscpy (in: _Dest=0x30b4280, _Source="C:\\Users\\EEBsYm5\\Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0136.089] wcscat (in: _Dest=0x30b4280, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\") returned="C:\\Users\\EEBsYm5\\Templates\\" [0136.089] wcscat (in: _Dest=0x30b4280, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\*") returned="C:\\Users\\EEBsYm5\\Templates\\*" [0136.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0136.089] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Templates\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0136.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0136.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4280) returned 1 [0136.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067300) returned 1 Thread: id = 550 os_tid = 0x4fc [0136.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067300 [0136.093] wcscpy (in: _Dest=0x3067300, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0136.093] wcscat (in: _Dest=0x3067300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.093] wcscat (in: _Dest=0x3067300, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\*") returned="C:\\Users\\EEBsYm5\\Videos\\*" [0136.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0136.093] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x900860a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x900860a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0136.093] wcscmp (_String1=".", _String2=".") returned 0 [0136.093] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x900860a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x900860a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.093] wcscmp (_String1="..", _String2=".") returned 1 [0136.093] wcscmp (_String1="..", _String2="..") returned 0 [0136.093] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e64a60, ftCreationTime.dwHighDateTime=0x1d5e4c7, ftLastAccessTime.dwLowDateTime=0x66cdcc90, ftLastAccessTime.dwHighDateTime=0x1d5e6b5, ftLastWriteTime.dwLowDateTime=0x66cdcc90, ftLastWriteTime.dwHighDateTime=0x1d5e6b5, nFileSizeHigh=0x0, nFileSizeLow=0x10c81, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Az60dPH491W_7Oa2Qw.flv", cAlternateFileName="0AZ60D~1.FLV")) returned 1 [0136.093] wcscmp (_String1="0Az60dPH491W_7Oa2Qw.flv", _String2=".") returned 1 [0136.093] wcscmp (_String1="0Az60dPH491W_7Oa2Qw.flv", _String2="..") returned 1 [0136.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea98 [0136.093] wcscpy (in: _Dest=0x3d8ea98, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0136.093] wcscat (in: _Dest=0x3d8ea98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0136.094] wcscat (in: _Dest=0x3d8ea98, _Source="0Az60dPH491W_7Oa2Qw.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv") returned="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv" [0140.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0140.459] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22b11040, ftCreationTime.dwHighDateTime=0x1d5d953, ftLastAccessTime.dwLowDateTime=0xca88f870, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0xca88f870, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x9aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="7qO2fIbLvRzU7xY7vC.mp4", cAlternateFileName="7QO2FI~1.MP4")) returned 1 [0140.459] wcscmp (_String1="7qO2fIbLvRzU7xY7vC.mp4", _String2=".") returned 1 [0140.459] wcscmp (_String1="7qO2fIbLvRzU7xY7vC.mp4", _String2="..") returned 1 [0140.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e070 [0140.459] wcscpy (in: _Dest=0x3d8e070, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.459] wcscat (in: _Dest=0x3d8e070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.459] wcscat (in: _Dest=0x3d8e070, _Source="7qO2fIbLvRzU7xY7vC.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4" [0140.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0140.460] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe74a7a60, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x9a4b7460, ftLastAccessTime.dwHighDateTime=0x1d5e5e7, ftLastWriteTime.dwLowDateTime=0x9a4b7460, ftLastWriteTime.dwHighDateTime=0x1d5e5e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7SlO_ulD3tk", cAlternateFileName="7SLO_U~1")) returned 1 [0140.461] wcscmp (_String1="7SlO_ulD3tk", _String2=".") returned 1 [0140.461] wcscmp (_String1="7SlO_ulD3tk", _String2="..") returned 1 [0140.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62470 [0140.461] wcscpy (in: _Dest=0x3e62470, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.461] wcscat (in: _Dest=0x3e62470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.461] wcscat (in: _Dest=0x3e62470, _Source="7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0140.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e62470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0140.463] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7aeed0, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x79a4b500, ftLastAccessTime.dwHighDateTime=0x1d5e605, ftLastWriteTime.dwLowDateTime=0x79a4b500, ftLastWriteTime.dwHighDateTime=0x1d5e605, nFileSizeHigh=0x0, nFileSizeLow=0x13859, dwReserved0=0x0, dwReserved1=0x0, cFileName="aUZO3gv.mkv", cAlternateFileName="")) returned 1 [0140.463] wcscmp (_String1="aUZO3gv.mkv", _String2=".") returned 1 [0140.463] wcscmp (_String1="aUZO3gv.mkv", _String2="..") returned 1 [0140.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62600 [0140.463] wcscpy (in: _Dest=0x3e62600, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.463] wcscat (in: _Dest=0x3e62600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.463] wcscat (in: _Dest=0x3e62600, _Source="aUZO3gv.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv" [0140.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e62600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0140.465] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eca58c0, ftCreationTime.dwHighDateTime=0x1d5e6eb, ftLastAccessTime.dwLowDateTime=0x4dc95e80, ftLastAccessTime.dwHighDateTime=0x1d5dd37, ftLastWriteTime.dwLowDateTime=0x4dc95e80, ftLastWriteTime.dwHighDateTime=0x1d5dd37, nFileSizeHigh=0x0, nFileSizeLow=0x8b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BGBQXWwiSkbOnn0P.swf", cAlternateFileName="BGBQXW~1.SWF")) returned 1 [0140.465] wcscmp (_String1="BGBQXWwiSkbOnn0P.swf", _String2=".") returned 1 [0140.465] wcscmp (_String1="BGBQXWwiSkbOnn0P.swf", _String2="..") returned 1 [0140.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bd18 [0140.465] wcscpy (in: _Dest=0x3d8bd18, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.465] wcscat (in: _Dest=0x3d8bd18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.465] wcscat (in: _Dest=0x3d8bd18, _Source="BGBQXWwiSkbOnn0P.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf") returned="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf" [0140.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bd18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0140.466] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.466] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0140.467] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0140.467] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab443e0, ftCreationTime.dwHighDateTime=0x1d5e750, ftLastAccessTime.dwLowDateTime=0x501f25c0, ftLastAccessTime.dwHighDateTime=0x1d5d94f, ftLastWriteTime.dwLowDateTime=0x501f25c0, ftLastWriteTime.dwHighDateTime=0x1d5d94f, nFileSizeHigh=0x0, nFileSizeLow=0x14439, dwReserved0=0x0, dwReserved1=0x0, cFileName="G4hJoHIsq_VL7Mdioq.avi", cAlternateFileName="G4HJOH~1.AVI")) returned 1 [0140.467] wcscmp (_String1="G4hJoHIsq_VL7Mdioq.avi", _String2=".") returned 1 [0140.467] wcscmp (_String1="G4hJoHIsq_VL7Mdioq.avi", _String2="..") returned 1 [0140.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e688 [0140.467] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.467] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.467] wcscat (in: _Dest=0x3d8e688, _Source="G4hJoHIsq_VL7Mdioq.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi") returned="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi" [0140.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0140.469] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe5b120, ftCreationTime.dwHighDateTime=0x1d5e35f, ftLastAccessTime.dwLowDateTime=0xc36f9f10, ftLastAccessTime.dwHighDateTime=0x1d5e57e, ftLastWriteTime.dwLowDateTime=0xc36f9f10, ftLastWriteTime.dwHighDateTime=0x1d5e57e, nFileSizeHigh=0x0, nFileSizeLow=0x1791, dwReserved0=0x0, dwReserved1=0x0, cFileName="PZ_aZqlR39.swf", cAlternateFileName="PZ_AZQ~1.SWF")) returned 1 [0140.469] wcscmp (_String1="PZ_aZqlR39.swf", _String2=".") returned 1 [0140.469] wcscmp (_String1="PZ_aZqlR39.swf", _String2="..") returned 1 [0140.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7288 [0140.469] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.469] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.469] wcscat (in: _Dest=0x3ef7288, _Source="PZ_aZqlR39.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf") returned="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf" [0140.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0140.470] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ddca30, ftCreationTime.dwHighDateTime=0x1d5e070, ftLastAccessTime.dwLowDateTime=0xdba48940, ftLastAccessTime.dwHighDateTime=0x1d5e3a5, ftLastWriteTime.dwLowDateTime=0xdba48940, ftLastWriteTime.dwHighDateTime=0x1d5e3a5, nFileSizeHigh=0x0, nFileSizeLow=0x10229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vu38e1P.mkv", cAlternateFileName="")) returned 1 [0140.470] wcscmp (_String1="Vu38e1P.mkv", _String2=".") returned 1 [0140.470] wcscmp (_String1="Vu38e1P.mkv", _String2="..") returned 1 [0140.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62150 [0140.470] wcscpy (in: _Dest=0x3e62150, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.470] wcscat (in: _Dest=0x3e62150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.471] wcscat (in: _Dest=0x3e62150, _Source="Vu38e1P.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv" [0140.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e62150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0140.473] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c630a0, ftCreationTime.dwHighDateTime=0x1d5e149, ftLastAccessTime.dwLowDateTime=0x1ffe0630, ftLastAccessTime.dwHighDateTime=0x1d5e04e, ftLastWriteTime.dwLowDateTime=0x1ffe0630, ftLastWriteTime.dwHighDateTime=0x1d5e04e, nFileSizeHigh=0x0, nFileSizeLow=0xd1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRoKMhxRdhEElOoUn.avi", cAlternateFileName="WROKMH~1.AVI")) returned 1 [0140.473] wcscmp (_String1="WRoKMhxRdhEElOoUn.avi", _String2=".") returned 1 [0140.473] wcscmp (_String1="WRoKMhxRdhEElOoUn.avi", _String2="..") returned 1 [0140.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e418 [0140.473] wcscpy (in: _Dest=0x3d8e418, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0140.473] wcscat (in: _Dest=0x3d8e418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0140.473] wcscat (in: _Dest=0x3d8e418, _Source="WRoKMhxRdhEElOoUn.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi") returned="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi" [0140.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0140.475] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c630a0, ftCreationTime.dwHighDateTime=0x1d5e149, ftLastAccessTime.dwLowDateTime=0x1ffe0630, ftLastAccessTime.dwHighDateTime=0x1d5e04e, ftLastWriteTime.dwLowDateTime=0x1ffe0630, ftLastWriteTime.dwHighDateTime=0x1d5e04e, nFileSizeHigh=0x0, nFileSizeLow=0xd1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRoKMhxRdhEElOoUn.avi", cAlternateFileName="WROKMH~1.AVI")) returned 0 [0140.475] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0140.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0140.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067300) returned 1 [0140.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199a0) returned 1 Thread: id = 551 os_tid = 0x380 [0136.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5798 [0136.094] wcscpy (in: _Dest=0x66e5798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.094] wcscat (in: _Dest=0x66e5798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.094] wcscat (in: _Dest=0x66e5798, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*" [0136.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d413a0 [0136.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80c38 [0136.122] wcscmp (_String1=".", _String2=".") returned 0 [0136.122] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.123] wcscmp (_String1="..", _String2=".") returned 1 [0136.123] wcscmp (_String1="..", _String2="..") returned 0 [0136.123] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0136.124] wcscmp (_String1="1033", _String2=".") returned 1 [0136.124] wcscmp (_String1="1033", _String2="..") returned 1 [0136.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d8c8 [0136.124] wcscpy (in: _Dest=0x3f1d8c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0136.124] wcscat (in: _Dest=0x3f1d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0136.124] wcscat (in: _Dest=0x3f1d8c8, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0138.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0138.998] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0138.998] wcscmp (_String1="CAGCAT10.DLL", _String2=".") returned 1 [0138.998] wcscmp (_String1="CAGCAT10.DLL", _String2="..") returned 1 [0138.998] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0138.998] wcscmp (_String1="CAGCAT10.MMW", _String2=".") returned 1 [0138.998] wcscmp (_String1="CAGCAT10.MMW", _String2="..") returned 1 [0138.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0258 [0138.998] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0138.998] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0138.998] wcscat (in: _Dest=0x66f0258, _Source="CAGCAT10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" [0138.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0138.999] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7213600, ftCreationTime.dwHighDateTime=0x1bd4c78, ftLastAccessTime.dwLowDateTime=0xbdcceb50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7213600, ftLastWriteTime.dwHighDateTime=0x1bd4c78, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0138.999] wcscmp (_String1="ELPHRG01.WAV", _String2=".") returned 1 [0138.999] wcscmp (_String1="ELPHRG01.WAV", _String2="..") returned 1 [0138.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef950 [0138.999] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0138.999] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0138.999] wcscat (in: _Dest=0x66ef950, _Source="ELPHRG01.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" [0139.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0139.000] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f69400, ftCreationTime.dwHighDateTime=0x1bd21d2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8f69400, ftLastWriteTime.dwHighDateTime=0x1bd21d2, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0139.001] wcscmp (_String1="J0088542.WMF", _String2=".") returned 1 [0139.001] wcscmp (_String1="J0088542.WMF", _String2="..") returned 1 [0139.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f00c0 [0139.001] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.001] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.001] wcscat (in: _Dest=0x66f00c0, _Source="J0088542.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" [0139.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0139.002] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde24a00, ftCreationTime.dwHighDateTime=0x1bcf8eb, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfde24a00, ftLastWriteTime.dwHighDateTime=0x1bcf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0139.002] wcscmp (_String1="J0090070.WMF", _String2=".") returned 1 [0139.002] wcscmp (_String1="J0090070.WMF", _String2="..") returned 1 [0139.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0139.002] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.002] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.002] wcscat (in: _Dest=0x66efa60, _Source="J0090070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" [0139.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0139.004] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefd6400, ftCreationTime.dwHighDateTime=0x1bd20f2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeefd6400, ftLastWriteTime.dwHighDateTime=0x1bd20f2, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0139.004] wcscmp (_String1="J0090386.WMF", _String2=".") returned 1 [0139.004] wcscmp (_String1="J0090386.WMF", _String2="..") returned 1 [0139.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66effb0 [0139.004] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.004] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.004] wcscat (in: _Dest=0x66effb0, _Source="J0090386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" [0139.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0139.006] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3680700, ftCreationTime.dwHighDateTime=0x1bd3deb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3680700, ftLastWriteTime.dwHighDateTime=0x1bd3deb, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0139.006] wcscmp (_String1="J0149407.WMF", _String2=".") returned 1 [0139.006] wcscmp (_String1="J0149407.WMF", _String2="..") returned 1 [0139.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0148 [0139.006] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.007] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.007] wcscat (in: _Dest=0x66f0148, _Source="J0149407.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" [0139.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0139.008] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a323900, ftCreationTime.dwHighDateTime=0x1bd42ad, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a323900, ftLastWriteTime.dwHighDateTime=0x1bd42ad, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0139.008] wcscmp (_String1="J0149481.WMF", _String2=".") returned 1 [0139.008] wcscmp (_String1="J0149481.WMF", _String2="..") returned 1 [0139.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0038 [0139.008] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.008] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.008] wcscat (in: _Dest=0x66f0038, _Source="J0149481.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" [0139.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0139.010] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd518d700, ftCreationTime.dwHighDateTime=0x1bd50cb, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd518d700, ftLastWriteTime.dwHighDateTime=0x1bd50cb, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0139.010] wcscmp (_String1="J0149627.WMF", _String2=".") returned 1 [0139.010] wcscmp (_String1="J0149627.WMF", _String2="..") returned 1 [0139.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f01d0 [0139.010] wcscpy (in: _Dest=0x66f01d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.010] wcscat (in: _Dest=0x66f01d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.010] wcscat (in: _Dest=0x66f01d0, _Source="J0149627.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" [0139.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f01d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0139.012] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3307c700, ftCreationTime.dwHighDateTime=0x1bd649e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3307c700, ftLastWriteTime.dwHighDateTime=0x1bd649e, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0139.012] wcscmp (_String1="J0149887.WMF", _String2=".") returned 1 [0139.012] wcscmp (_String1="J0149887.WMF", _String2="..") returned 1 [0139.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f02e0 [0139.012] wcscpy (in: _Dest=0x66f02e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.012] wcscat (in: _Dest=0x66f02e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.012] wcscat (in: _Dest=0x66f02e0, _Source="J0149887.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" [0139.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f02e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0139.013] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fd5200, ftCreationTime.dwHighDateTime=0x1bd7f29, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4fd5200, ftLastWriteTime.dwHighDateTime=0x1bd7f29, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0139.013] wcscmp (_String1="J0157763.WMF", _String2=".") returned 1 [0139.013] wcscmp (_String1="J0157763.WMF", _String2="..") returned 1 [0139.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0368 [0139.014] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.014] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.014] wcscat (in: _Dest=0x66f0368, _Source="J0157763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" [0139.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0139.015] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44348900, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x44348900, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0139.015] wcscmp (_String1="J0157995.WMF", _String2=".") returned 1 [0139.015] wcscmp (_String1="J0157995.WMF", _String2="..") returned 1 [0139.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f03f0 [0139.015] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.015] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.015] wcscat (in: _Dest=0x66f03f0, _Source="J0157995.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" [0139.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0139.017] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eef1e00, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eef1e00, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0139.017] wcscmp (_String1="J0158007.WMF", _String2=".") returned 1 [0139.017] wcscmp (_String1="J0158007.WMF", _String2="..") returned 1 [0139.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099cf0 [0139.017] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.017] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.017] wcscat (in: _Dest=0x3099cf0, _Source="J0158007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" [0139.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0139.018] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435a800, ftCreationTime.dwHighDateTime=0x1bdf75b, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7435a800, ftLastWriteTime.dwHighDateTime=0x1bdf75b, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0139.018] wcscmp (_String1="J0183168.WMF", _String2=".") returned 1 [0139.018] wcscmp (_String1="J0183168.WMF", _String2="..") returned 1 [0139.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099c68 [0139.018] wcscpy (in: _Dest=0x3099c68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.018] wcscat (in: _Dest=0x3099c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.018] wcscat (in: _Dest=0x3099c68, _Source="J0183168.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" [0139.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0139.020] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0d4900, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f0d4900, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0139.020] wcscmp (_String1="J0183290.WMF", _String2=".") returned 1 [0139.020] wcscmp (_String1="J0183290.WMF", _String2="..") returned 1 [0139.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a570 [0139.020] wcscpy (in: _Dest=0x309a570, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.020] wcscat (in: _Dest=0x309a570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.020] wcscat (in: _Dest=0x309a570, _Source="J0183290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" [0139.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x309a570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0139.021] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b2400, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d8b2400, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0139.021] wcscmp (_String1="J0183328.WMF", _String2=".") returned 1 [0139.021] wcscmp (_String1="J0183328.WMF", _String2="..") returned 1 [0139.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099ad0 [0139.021] wcscpy (in: _Dest=0x3099ad0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.022] wcscat (in: _Dest=0x3099ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.022] wcscat (in: _Dest=0x3099ad0, _Source="J0183328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" [0139.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0139.023] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88cb8700, ftCreationTime.dwHighDateTime=0x1be0d7f, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x88cb8700, ftLastWriteTime.dwHighDateTime=0x1be0d7f, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0139.023] wcscmp (_String1="J0185604.WMF", _String2=".") returned 1 [0139.023] wcscmp (_String1="J0185604.WMF", _String2="..") returned 1 [0139.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099e00 [0139.023] wcscpy (in: _Dest=0x3099e00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.023] wcscat (in: _Dest=0x3099e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.023] wcscat (in: _Dest=0x3099e00, _Source="J0185604.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" [0139.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0139.024] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7144cc00, ftCreationTime.dwHighDateTime=0x1be0d88, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7144cc00, ftLastWriteTime.dwHighDateTime=0x1be0d88, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0139.024] wcscmp (_String1="J0186002.WMF", _String2=".") returned 1 [0139.024] wcscmp (_String1="J0186002.WMF", _String2="..") returned 1 [0139.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ed80 [0139.024] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.024] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.025] wcscat (in: _Dest=0x36ed80, _Source="J0186002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" [0139.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0139.294] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80774a00, ftCreationTime.dwHighDateTime=0x1be0d87, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80774a00, ftLastWriteTime.dwHighDateTime=0x1be0d87, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0139.294] wcscmp (_String1="J0186348.WMF", _String2=".") returned 1 [0139.294] wcscmp (_String1="J0186348.WMF", _String2="..") returned 1 [0139.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f25ea8 [0139.295] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0139.295] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0139.295] wcscat (in: _Dest=0x3f25ea8, _Source="J0186348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" [0140.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0140.386] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0956300, ftCreationTime.dwHighDateTime=0x1be1162, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0956300, ftLastWriteTime.dwHighDateTime=0x1be1162, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0140.386] wcscmp (_String1="J0187423.WMF", _String2=".") returned 1 [0140.386] wcscmp (_String1="J0187423.WMF", _String2="..") returned 1 [0140.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26370 [0140.386] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.386] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.386] wcscat (in: _Dest=0x3f26370, _Source="J0187423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" [0140.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0140.387] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a24a00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58a24a00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0140.387] wcscmp (_String1="J0195384.WMF", _String2=".") returned 1 [0140.387] wcscmp (_String1="J0195384.WMF", _String2="..") returned 1 [0140.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f263f8 [0140.388] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.388] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.388] wcscat (in: _Dest=0x3f263f8, _Source="J0195384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" [0140.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0140.389] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f786000, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f786000, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0140.389] wcscmp (_String1="J0195534.WMF", _String2=".") returned 1 [0140.389] wcscmp (_String1="J0195534.WMF", _String2="..") returned 1 [0140.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26480 [0140.389] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.389] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.389] wcscat (in: _Dest=0x3f26480, _Source="J0195534.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" [0140.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0140.390] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda927300, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda927300, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0140.390] wcscmp (_String1="J0195812.WMF", _String2=".") returned 1 [0140.390] wcscmp (_String1="J0195812.WMF", _String2="..") returned 1 [0140.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26508 [0140.390] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.390] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.390] wcscat (in: _Dest=0x3f26508, _Source="J0195812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" [0140.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0140.391] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33faa200, ftCreationTime.dwHighDateTime=0x1be276b, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33faa200, ftLastWriteTime.dwHighDateTime=0x1be276b, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0140.391] wcscmp (_String1="J0196164.WMF", _String2=".") returned 1 [0140.391] wcscmp (_String1="J0196164.WMF", _String2="..") returned 1 [0140.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26590 [0140.392] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.392] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.392] wcscat (in: _Dest=0x3f26590, _Source="J0196164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" [0140.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0140.393] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17214b00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17214b00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0140.393] wcscmp (_String1="J0196374.WMF", _String2=".") returned 1 [0140.393] wcscmp (_String1="J0196374.WMF", _String2="..") returned 1 [0140.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26618 [0140.393] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.393] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.393] wcscat (in: _Dest=0x3f26618, _Source="J0196374.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" [0140.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0140.395] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d1c100, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27d1c100, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0140.395] wcscmp (_String1="J0196400.WMF", _String2=".") returned 1 [0140.395] wcscmp (_String1="J0196400.WMF", _String2="..") returned 1 [0140.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f266a0 [0140.395] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.395] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.395] wcscat (in: _Dest=0x3f266a0, _Source="J0196400.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" [0140.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0140.397] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c6dc00, ftCreationTime.dwHighDateTime=0x1bdf12a, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95c6dc00, ftLastWriteTime.dwHighDateTime=0x1bdf12a, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0140.397] wcscmp (_String1="J0199036.WMF", _String2=".") returned 1 [0140.397] wcscmp (_String1="J0199036.WMF", _String2="..") returned 1 [0140.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26728 [0140.397] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.397] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.397] wcscat (in: _Dest=0x3f26728, _Source="J0199036.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" [0140.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0140.399] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810a3500, ftCreationTime.dwHighDateTime=0x1be0651, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x810a3500, ftLastWriteTime.dwHighDateTime=0x1be0651, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0140.399] wcscmp (_String1="J0199283.WMF", _String2=".") returned 1 [0140.399] wcscmp (_String1="J0199283.WMF", _String2="..") returned 1 [0140.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f267b0 [0140.399] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.399] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.399] wcscat (in: _Dest=0x3f267b0, _Source="J0199283.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" [0140.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0140.400] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ea1500, ftCreationTime.dwHighDateTime=0x1be3efe, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9ea1500, ftLastWriteTime.dwHighDateTime=0x1be3efe, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0140.401] wcscmp (_String1="J0199549.WMF", _String2=".") returned 1 [0140.401] wcscmp (_String1="J0199549.WMF", _String2="..") returned 1 [0140.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26838 [0140.401] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.401] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.401] wcscat (in: _Dest=0x3f26838, _Source="J0199549.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" [0140.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0140.402] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c02b00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20c02b00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0140.402] wcscmp (_String1="J0199661.WMF", _String2=".") returned 1 [0140.402] wcscmp (_String1="J0199661.WMF", _String2="..") returned 1 [0140.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f268c0 [0140.402] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.402] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.402] wcscat (in: _Dest=0x3f268c0, _Source="J0199661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" [0140.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0140.404] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e5cb00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46e5cb00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0140.404] wcscmp (_String1="J0199727.WMF", _String2=".") returned 1 [0140.404] wcscmp (_String1="J0199727.WMF", _String2="..") returned 1 [0140.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26948 [0140.404] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.404] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.404] wcscat (in: _Dest=0x3f26948, _Source="J0199727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" [0140.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0140.405] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a06000, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51a06000, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0140.405] wcscmp (_String1="J0199755.WMF", _String2=".") returned 1 [0140.405] wcscmp (_String1="J0199755.WMF", _String2="..") returned 1 [0140.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f269d0 [0140.405] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.405] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.406] wcscat (in: _Dest=0x3f269d0, _Source="J0199755.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" [0140.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0140.407] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6846b700, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6846b700, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0141.627] wcscmp (_String1="J0199805.WMF", _String2=".") returned 1 [0141.627] wcscmp (_String1="J0199805.WMF", _String2="..") returned 1 [0141.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26260 [0141.627] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.627] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.627] wcscat (in: _Dest=0x3f26260, _Source="J0199805.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" [0144.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0144.010] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b018b00, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b018b00, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0144.010] wcscmp (_String1="J0205462.WMF", _String2=".") returned 1 [0144.010] wcscmp (_String1="J0205462.WMF", _String2="..") returned 1 [0144.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef950 [0144.010] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.010] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.010] wcscat (in: _Dest=0x66ef950, _Source="J0205462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" [0144.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0144.011] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e951200, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e951200, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0144.011] wcscmp (_String1="J0205466.WMF", _String2=".") returned 1 [0144.011] wcscmp (_String1="J0205466.WMF", _String2="..") returned 1 [0144.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee5a8 [0144.011] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.011] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.011] wcscat (in: _Dest=0x66ee5a8, _Source="J0205466.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" [0144.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0144.012] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0ea300, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa0ea300, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0144.012] wcscmp (_String1="J0205582.WMF", _String2=".") returned 1 [0144.012] wcscmp (_String1="J0205582.WMF", _String2="..") returned 1 [0144.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee520 [0144.013] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.013] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.013] wcscat (in: _Dest=0x66ee520, _Source="J0205582.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" [0144.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0144.014] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd358ea00, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd358ea00, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0144.014] wcscmp (_String1="J0211949.WMF", _String2=".") returned 1 [0144.014] wcscmp (_String1="J0211949.WMF", _String2="..") returned 1 [0144.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee498 [0144.014] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.014] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.014] wcscat (in: _Dest=0x66ee498, _Source="J0211949.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" [0144.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0144.015] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5875800, ftCreationTime.dwHighDateTime=0x1be5674, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5875800, ftLastWriteTime.dwHighDateTime=0x1be5674, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0144.015] wcscmp (_String1="J0212219.WMF", _String2=".") returned 1 [0144.015] wcscmp (_String1="J0212219.WMF", _String2="..") returned 1 [0144.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef268 [0144.015] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.015] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.015] wcscat (in: _Dest=0x66ef268, _Source="J0212219.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" [0144.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0144.016] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebca0400, ftCreationTime.dwHighDateTime=0x1be5675, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebca0400, ftLastWriteTime.dwHighDateTime=0x1be5675, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0144.016] wcscmp (_String1="J0212661.WMF", _String2=".") returned 1 [0144.016] wcscmp (_String1="J0212661.WMF", _String2="..") returned 1 [0144.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef1e0 [0144.017] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.017] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.017] wcscat (in: _Dest=0x66ef1e0, _Source="J0212661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" [0144.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0144.018] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a18800, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3a18800, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0144.018] wcscmp (_String1="J0212701.WMF", _String2=".") returned 1 [0144.018] wcscmp (_String1="J0212701.WMF", _String2="..") returned 1 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef0d0 [0144.018] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.018] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.018] wcscat (in: _Dest=0x66ef0d0, _Source="J0212701.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" [0144.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0144.019] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c8700, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x701c8700, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0144.019] wcscmp (_String1="J0212957.WMF", _String2=".") returned 1 [0144.019] wcscmp (_String1="J0212957.WMF", _String2="..") returned 1 [0144.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee7c8 [0144.019] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.019] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.019] wcscat (in: _Dest=0x66ee7c8, _Source="J0212957.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" [0144.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0144.020] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c5bc600, ftCreationTime.dwHighDateTime=0x1be5a07, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c5bc600, ftLastWriteTime.dwHighDateTime=0x1be5a07, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0144.021] wcscmp (_String1="J0214098.WAV", _String2=".") returned 1 [0144.021] wcscmp (_String1="J0214098.WAV", _String2="..") returned 1 [0144.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef510 [0144.021] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.021] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.021] wcscat (in: _Dest=0x66ef510, _Source="J0214098.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" [0144.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0144.022] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ef3a00, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7ef3a00, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0144.022] wcscmp (_String1="J0215086.WMF", _String2=".") returned 1 [0144.022] wcscmp (_String1="J0215086.WMF", _String2="..") returned 1 [0144.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef730 [0144.022] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.022] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.022] wcscat (in: _Dest=0x66ef730, _Source="J0215086.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" [0144.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0144.024] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf9cc00, ftCreationTime.dwHighDateTime=0x1be6c7e, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcaf9cc00, ftLastWriteTime.dwHighDateTime=0x1be6c7e, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0144.024] wcscmp (_String1="J0216516.WMF", _String2=".") returned 1 [0144.024] wcscmp (_String1="J0216516.WMF", _String2="..") returned 1 [0144.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef400 [0144.024] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.024] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.024] wcscat (in: _Dest=0x66ef400, _Source="J0216516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" [0144.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0144.025] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b18500, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b18500, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0144.025] wcscmp (_String1="J0216588.WMF", _String2=".") returned 1 [0144.025] wcscmp (_String1="J0216588.WMF", _String2="..") returned 1 [0144.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef048 [0144.025] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.025] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.025] wcscat (in: _Dest=0x66ef048, _Source="J0216588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" [0144.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0144.026] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94708100, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94708100, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0144.026] wcscmp (_String1="J0216724.WMF", _String2=".") returned 1 [0144.026] wcscmp (_String1="J0216724.WMF", _String2="..") returned 1 [0144.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee740 [0144.026] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.026] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.027] wcscat (in: _Dest=0x66ee740, _Source="J0216724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" [0144.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0144.028] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1791d700, ftCreationTime.dwHighDateTime=0x1be6c80, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1791d700, ftLastWriteTime.dwHighDateTime=0x1be6c80, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0144.028] wcscmp (_String1="J0216858.WMF", _String2=".") returned 1 [0144.028] wcscmp (_String1="J0216858.WMF", _String2="..") returned 1 [0144.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efea0 [0144.028] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.028] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.028] wcscat (in: _Dest=0x66efea0, _Source="J0216858.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" [0144.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0144.029] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e001500, ftCreationTime.dwHighDateTime=0x1be6c82, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e001500, ftLastWriteTime.dwHighDateTime=0x1be6c82, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0144.029] wcscmp (_String1="J0217698.WMF", _String2=".") returned 1 [0144.029] wcscmp (_String1="J0217698.WMF", _String2="..") returned 1 [0144.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efe18 [0144.029] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.029] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.029] wcscat (in: _Dest=0x66efe18, _Source="J0217698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" [0144.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0144.030] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11329600, ftCreationTime.dwHighDateTime=0x1be7a9b, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11329600, ftLastWriteTime.dwHighDateTime=0x1be7a9b, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0144.030] wcscmp (_String1="J0221903.WMF", _String2=".") returned 1 [0144.030] wcscmp (_String1="J0221903.WMF", _String2="..") returned 1 [0144.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef2f0 [0144.030] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.030] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.030] wcscat (in: _Dest=0x66ef2f0, _Source="J0221903.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" [0144.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0144.032] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b08e00, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x12b08e00, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0144.032] wcscmp (_String1="J0222015.WMF", _String2=".") returned 1 [0144.032] wcscmp (_String1="J0222015.WMF", _String2="..") returned 1 [0144.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f274f8 [0144.032] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.032] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.032] wcscat (in: _Dest=0x3f274f8, _Source="J0222015.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" [0144.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0144.033] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1512e800, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1512e800, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0144.033] wcscmp (_String1="J0222017.WMF", _String2=".") returned 1 [0144.033] wcscmp (_String1="J0222017.WMF", _String2="..") returned 1 [0144.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26bf0 [0144.033] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.033] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.033] wcscat (in: _Dest=0x3f26bf0, _Source="J0222017.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" [0144.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0144.034] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17754200, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17754200, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0144.034] wcscmp (_String1="J0222019.WMF", _String2=".") returned 1 [0144.034] wcscmp (_String1="J0222019.WMF", _String2="..") returned 1 [0144.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f25f30 [0144.034] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.034] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.034] wcscat (in: _Dest=0x3f25f30, _Source="J0222019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" [0144.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0144.035] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b08c900, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b08c900, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0144.035] wcscmp (_String1="J0222021.WMF", _String2=".") returned 1 [0144.035] wcscmp (_String1="J0222021.WMF", _String2="..") returned 1 [0144.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26d00 [0144.035] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.035] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.036] wcscat (in: _Dest=0x3f26d00, _Source="J0222021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" [0144.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0144.036] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f5e00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x103f5e00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0144.037] wcscmp (_String1="J0229385.WMF", _String2=".") returned 1 [0144.037] wcscmp (_String1="J0229385.WMF", _String2="..") returned 1 [0144.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26e98 [0144.037] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.037] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.037] wcscat (in: _Dest=0x3f26e98, _Source="J0229385.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" [0144.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0144.038] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11708b00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11708b00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0144.038] wcscmp (_String1="J0229389.WMF", _String2=".") returned 1 [0144.038] wcscmp (_String1="J0229389.WMF", _String2="..") returned 1 [0144.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26f20 [0144.038] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.038] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.038] wcscat (in: _Dest=0x3f26f20, _Source="J0229389.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" [0144.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0144.039] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b2900, ftCreationTime.dwHighDateTime=0x1bc8349, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50b2900, ftLastWriteTime.dwHighDateTime=0x1bc8349, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0144.039] wcscmp (_String1="J0230876.WMF", _String2=".") returned 1 [0144.040] wcscmp (_String1="J0230876.WMF", _String2="..") returned 1 [0144.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26fa8 [0144.040] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.040] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.040] wcscat (in: _Dest=0x3f26fa8, _Source="J0230876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" [0144.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0144.041] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41169900, ftCreationTime.dwHighDateTime=0x1be51d0, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41169900, ftLastWriteTime.dwHighDateTime=0x1be51d0, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0144.041] wcscmp (_String1="J0233018.WMF", _String2=".") returned 1 [0144.041] wcscmp (_String1="J0233018.WMF", _String2="..") returned 1 [0144.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27140 [0144.041] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.041] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.041] wcscat (in: _Dest=0x3f27140, _Source="J0233018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" [0144.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0144.042] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd178a200, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd178a200, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0144.042] wcscmp (_String1="J0233070.WMF", _String2=".") returned 1 [0144.042] wcscmp (_String1="J0233070.WMF", _String2="..") returned 1 [0144.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26150 [0144.042] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.042] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.042] wcscat (in: _Dest=0x3f26150, _Source="J0233070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" [0144.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0144.043] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc080e00, ftCreationTime.dwHighDateTime=0x1be5751, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc080e00, ftLastWriteTime.dwHighDateTime=0x1be5751, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0144.043] wcscmp (_String1="J0233312.WMF", _String2=".") returned 1 [0144.043] wcscmp (_String1="J0233312.WMF", _String2="..") returned 1 [0144.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26d88 [0144.043] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.043] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.044] wcscat (in: _Dest=0x3f26d88, _Source="J0233312.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" [0144.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0144.045] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e0c00, ftCreationTime.dwHighDateTime=0x1be80f8, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb92e0c00, ftLastWriteTime.dwHighDateTime=0x1be80f8, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0144.045] wcscmp (_String1="J0234131.WMF", _String2=".") returned 1 [0144.045] wcscmp (_String1="J0234131.WMF", _String2="..") returned 1 [0144.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26e10 [0144.045] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.045] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.045] wcscat (in: _Dest=0x3f26e10, _Source="J0234131.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" [0144.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0144.046] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4aa200, ftCreationTime.dwHighDateTime=0x1be804d, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4aa200, ftLastWriteTime.dwHighDateTime=0x1be804d, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0144.046] wcscmp (_String1="J0234266.WMF", _String2=".") returned 1 [0144.046] wcscmp (_String1="J0234266.WMF", _String2="..") returned 1 [0144.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27030 [0144.046] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.047] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.047] wcscat (in: _Dest=0x3f27030, _Source="J0234266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" [0144.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0144.602] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96382e00, ftCreationTime.dwHighDateTime=0x1be7609, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96382e00, ftLastWriteTime.dwHighDateTime=0x1be7609, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0144.602] wcscmp (_String1="J0234657.WMF", _String2=".") returned 1 [0144.602] wcscmp (_String1="J0234657.WMF", _String2="..") returned 1 [0144.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d586b8 [0144.602] wcscpy (in: _Dest=0x3d586b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0144.602] wcscat (in: _Dest=0x3d586b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0144.602] wcscat (in: _Dest=0x3d586b8, _Source="J0234657.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" [0157.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d586b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0157.923] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f239500, ftCreationTime.dwHighDateTime=0x1bf2c4b, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f239500, ftLastWriteTime.dwHighDateTime=0x1bf2c4b, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0157.923] wcscmp (_String1="J0234687.GIF", _String2=".") returned 1 [0157.923] wcscmp (_String1="J0234687.GIF", _String2="..") returned 1 [0157.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0038 [0157.923] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.923] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.923] wcscat (in: _Dest=0x66f0038, _Source="J0234687.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" [0157.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0157.924] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b4d00, ftCreationTime.dwHighDateTime=0x1be9184, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a8b4d00, ftLastWriteTime.dwHighDateTime=0x1be9184, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0157.924] wcscmp (_String1="J0235241.WMF", _String2=".") returned 1 [0157.924] wcscmp (_String1="J0235241.WMF", _String2="..") returned 1 [0157.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0157.924] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.924] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.924] wcscat (in: _Dest=0x66efa60, _Source="J0235241.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" [0157.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0157.925] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fa4b00, ftCreationTime.dwHighDateTime=0x1c03781, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99fa4b00, ftLastWriteTime.dwHighDateTime=0x1c03781, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0157.925] wcscmp (_String1="J0235319.WMF", _String2=".") returned 1 [0157.925] wcscmp (_String1="J0235319.WMF", _String2="..") returned 1 [0157.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eea70 [0157.925] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.925] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.925] wcscat (in: _Dest=0x66eea70, _Source="J0235319.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" [0157.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0157.926] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f26800, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45f26800, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0157.926] wcscmp (_String1="J0240695.WMF", _String2=".") returned 1 [0157.926] wcscmp (_String1="J0240695.WMF", _String2="..") returned 1 [0157.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66effb0 [0157.926] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.926] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.926] wcscat (in: _Dest=0x66effb0, _Source="J0240695.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" [0157.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0157.927] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a2de00, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56a2de00, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0157.929] wcscmp (_String1="J0240719.WMF", _String2=".") returned 1 [0157.929] wcscmp (_String1="J0240719.WMF", _String2="..") returned 1 [0157.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f267b0 [0157.929] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.929] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.929] wcscat (in: _Dest=0x3f267b0, _Source="J0240719.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" [0158.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0158.517] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0d7700, ftCreationTime.dwHighDateTime=0x1beb358, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe0d7700, ftLastWriteTime.dwHighDateTime=0x1beb358, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0158.517] wcscmp (_String1="J0251301.WMF", _String2=".") returned 1 [0158.517] wcscmp (_String1="J0251301.WMF", _String2="..") returned 1 [0158.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a368 [0158.517] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.517] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.517] wcscat (in: _Dest=0x3d5a368, _Source="J0251301.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" [0158.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0158.518] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa46d2f00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa46d2f00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0158.518] wcscmp (_String1="J0251871.WMF", _String2=".") returned 1 [0158.518] wcscmp (_String1="J0251871.WMF", _String2="..") returned 1 [0158.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58740 [0158.519] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.519] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.519] wcscat (in: _Dest=0x3d58740, _Source="J0251871.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" [0158.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0158.520] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2eb0a00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2eb0a00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0158.520] wcscmp (_String1="J0251925.WMF", _String2=".") returned 1 [0158.520] wcscmp (_String1="J0251925.WMF", _String2="..") returned 1 [0158.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27ad0 [0158.520] wcscpy (in: _Dest=0x3f27ad0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.520] wcscat (in: _Dest=0x3f27ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.520] wcscat (in: _Dest=0x3f27ad0, _Source="J0251925.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" [0158.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0158.521] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c2c800, ftCreationTime.dwHighDateTime=0x1beb35c, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90c2c800, ftLastWriteTime.dwHighDateTime=0x1beb35c, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0158.521] wcscmp (_String1="J0252349.WMF", _String2=".") returned 1 [0158.521] wcscmp (_String1="J0252349.WMF", _String2="..") returned 1 [0158.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27b58 [0158.521] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.521] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.521] wcscat (in: _Dest=0x3f27b58, _Source="J0252349.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" [0158.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0158.603] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5140000, ftCreationTime.dwHighDateTime=0x1becd2e, ftLastAccessTime.dwLowDateTime=0xbe1dda10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5140000, ftLastWriteTime.dwHighDateTime=0x1becd2e, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0158.603] wcscmp (_String1="J0278882.WMF", _String2=".") returned 1 [0158.604] wcscmp (_String1="J0278882.WMF", _String2="..") returned 1 [0158.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27be0 [0158.604] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.604] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.604] wcscat (in: _Dest=0x3f27be0, _Source="J0278882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" [0158.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0158.605] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8205a800, ftCreationTime.dwHighDateTime=0x1bee4a8, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8205a800, ftLastWriteTime.dwHighDateTime=0x1bee4a8, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0158.605] wcscmp (_String1="J0281904.WMF", _String2=".") returned 1 [0158.605] wcscmp (_String1="J0281904.WMF", _String2="..") returned 1 [0158.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27c68 [0158.605] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.606] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.606] wcscat (in: _Dest=0x3f27c68, _Source="J0281904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" [0158.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0158.607] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d9d200, ftCreationTime.dwHighDateTime=0x1bed43e, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76d9d200, ftLastWriteTime.dwHighDateTime=0x1bed43e, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0158.607] wcscmp (_String1="J0283209.GIF", _String2=".") returned 1 [0158.607] wcscmp (_String1="J0283209.GIF", _String2="..") returned 1 [0158.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27cf0 [0158.607] wcscpy (in: _Dest=0x3f27cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.607] wcscat (in: _Dest=0x3f27cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.607] wcscat (in: _Dest=0x3f27cf0, _Source="J0283209.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" [0158.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0158.608] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce31400, ftCreationTime.dwHighDateTime=0x1bea231, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ce31400, ftLastWriteTime.dwHighDateTime=0x1bea231, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0158.608] wcscmp (_String1="J0284916.JPG", _String2=".") returned 1 [0158.608] wcscmp (_String1="J0284916.JPG", _String2="..") returned 1 [0158.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27d78 [0158.608] wcscpy (in: _Dest=0x3f27d78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.609] wcscat (in: _Dest=0x3f27d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.609] wcscat (in: _Dest=0x3f27d78, _Source="J0284916.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" [0158.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0158.610] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc0a300, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3bc0a300, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0158.610] wcscmp (_String1="J0285360.WMF", _String2=".") returned 1 [0158.610] wcscmp (_String1="J0285360.WMF", _String2="..") returned 1 [0158.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27e00 [0158.610] wcscpy (in: _Dest=0x3f27e00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.610] wcscat (in: _Dest=0x3f27e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.610] wcscat (in: _Dest=0x3f27e00, _Source="J0285360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" [0158.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0158.612] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6fab00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b6fab00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0158.612] wcscmp (_String1="J0285410.WMF", _String2=".") returned 1 [0158.612] wcscmp (_String1="J0285410.WMF", _String2="..") returned 1 [0158.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x309a570 [0158.612] wcscpy (in: _Dest=0x309a570, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.612] wcscat (in: _Dest=0x309a570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.612] wcscat (in: _Dest=0x309a570, _Source="J0285410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" [0158.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x309a570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0158.613] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb23a00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eb23a00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0158.613] wcscmp (_String1="J0285444.WMF", _String2=".") returned 1 [0158.613] wcscmp (_String1="J0285444.WMF", _String2="..") returned 1 [0158.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099ad0 [0158.614] wcscpy (in: _Dest=0x3099ad0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.614] wcscat (in: _Dest=0x3099ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.614] wcscat (in: _Dest=0x3099ad0, _Source="J0285444.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" [0158.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0158.615] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2715300, ftCreationTime.dwHighDateTime=0x1befddf, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2715300, ftLastWriteTime.dwHighDateTime=0x1befddf, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0158.615] wcscmp (_String1="J0285698.WMF", _String2=".") returned 1 [0158.615] wcscmp (_String1="J0285698.WMF", _String2="..") returned 1 [0158.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099cf0 [0158.615] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.615] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.615] wcscat (in: _Dest=0x3099cf0, _Source="J0285698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" [0158.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0158.617] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3401fe00, ftCreationTime.dwHighDateTime=0x1befde0, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1befde0, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0158.617] wcscmp (_String1="J0285750.WMF", _String2=".") returned 1 [0158.617] wcscmp (_String1="J0285750.WMF", _String2="..") returned 1 [0158.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099c68 [0158.617] wcscpy (in: _Dest=0x3099c68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.617] wcscat (in: _Dest=0x3099c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.617] wcscat (in: _Dest=0x3099c68, _Source="J0285750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" [0158.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0158.618] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac56100, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ac56100, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0158.618] wcscmp (_String1="J0285926.WMF", _String2=".") returned 1 [0158.618] wcscmp (_String1="J0285926.WMF", _String2="..") returned 1 [0158.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3099e00 [0158.618] wcscpy (in: _Dest=0x3099e00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.618] wcscat (in: _Dest=0x3099e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.618] wcscat (in: _Dest=0x3099e00, _Source="J0285926.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" [0158.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3099e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0158.620] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547e8800, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x547e8800, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0158.620] wcscmp (_String1="J0286034.WMF", _String2=".") returned 1 [0158.620] wcscmp (_String1="J0286034.WMF", _String2="..") returned 1 [0158.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efea0 [0158.620] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.620] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.620] wcscat (in: _Dest=0x66efea0, _Source="J0286034.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" [0158.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0158.621] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b24df00, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b24df00, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0158.621] wcscmp (_String1="J0286068.WMF", _String2=".") returned 1 [0158.621] wcscmp (_String1="J0286068.WMF", _String2="..") returned 1 [0158.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f03f0 [0158.622] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.622] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.622] wcscat (in: _Dest=0x66f03f0, _Source="J0286068.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" [0158.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0158.623] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f367c00, ftCreationTime.dwHighDateTime=0x1bef5df, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f367c00, ftLastWriteTime.dwHighDateTime=0x1bef5df, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0158.623] wcscmp (_String1="J0287005.WMF", _String2=".") returned 1 [0158.623] wcscmp (_String1="J0287005.WMF", _String2="..") returned 1 [0158.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee7c8 [0158.623] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.623] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.623] wcscat (in: _Dest=0x66ee7c8, _Source="J0287005.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" [0158.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0158.625] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c15400, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c15400, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0158.625] wcscmp (_String1="J0291984.WMF", _String2=".") returned 1 [0158.625] wcscmp (_String1="J0291984.WMF", _String2="..") returned 1 [0158.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e478 [0158.625] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.625] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.625] wcscat (in: _Dest=0x36e478, _Source="J0291984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" [0158.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0158.668] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e351000, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e351000, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0158.668] wcscmp (_String1="J0292020.WMF", _String2=".") returned 1 [0158.668] wcscmp (_String1="J0292020.WMF", _String2="..") returned 1 [0158.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ed80 [0158.668] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.668] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.668] wcscat (in: _Dest=0x36ed80, _Source="J0292020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" [0166.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0166.618] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0253900, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0253900, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0166.618] wcscmp (_String1="J0292152.WMF", _String2=".") returned 1 [0166.618] wcscmp (_String1="J0292152.WMF", _String2="..") returned 1 [0166.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f269d0 [0166.619] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.619] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.619] wcscat (in: _Dest=0x3f269d0, _Source="J0292152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" [0166.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0166.620] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddeae800, ftCreationTime.dwHighDateTime=0x1bf1708, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xddeae800, ftLastWriteTime.dwHighDateTime=0x1bf1708, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0166.620] wcscmp (_String1="J0292982.WMF", _String2=".") returned 1 [0166.620] wcscmp (_String1="J0292982.WMF", _String2="..") returned 1 [0166.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26260 [0166.620] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.620] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.620] wcscat (in: _Dest=0x3f26260, _Source="J0292982.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" [0166.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0166.621] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0166.621] wcscmp (_String1="J0293234.WMF", _String2=".") returned 1 [0166.621] wcscmp (_String1="J0293234.WMF", _String2="..") returned 1 [0166.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26f20 [0166.621] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.621] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.621] wcscat (in: _Dest=0x3f26f20, _Source="J0293234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" [0166.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0166.622] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0166.622] wcscmp (_String1="J0293236.WMF", _String2=".") returned 1 [0166.622] wcscmp (_String1="J0293236.WMF", _String2="..") returned 1 [0166.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f278b0 [0166.622] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.622] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.623] wcscat (in: _Dest=0x3f278b0, _Source="J0293236.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" [0166.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0166.624] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0166.624] wcscmp (_String1="J0293238.WMF", _String2=".") returned 1 [0166.624] wcscmp (_String1="J0293238.WMF", _String2="..") returned 1 [0166.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26ae0 [0166.624] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.624] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.624] wcscat (in: _Dest=0x3f26ae0, _Source="J0293238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" [0166.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0166.625] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315d3600, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x315d3600, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0166.625] wcscmp (_String1="J0293240.WMF", _String2=".") returned 1 [0166.625] wcscmp (_String1="J0293240.WMF", _String2="..") returned 1 [0166.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26150 [0166.625] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.625] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.625] wcscat (in: _Dest=0x3f26150, _Source="J0293240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" [0166.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0166.626] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde7d00, ftCreationTime.dwHighDateTime=0x1bf1587, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcde7d00, ftLastWriteTime.dwHighDateTime=0x1bf1587, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0166.626] wcscmp (_String1="J0293570.WMF", _String2=".") returned 1 [0166.626] wcscmp (_String1="J0293570.WMF", _String2="..") returned 1 [0166.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26bf0 [0166.627] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.627] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.627] wcscat (in: _Dest=0x3f26bf0, _Source="J0293570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" [0166.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0166.628] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c5f500, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c5f500, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0166.628] wcscmp (_String1="J0293828.WMF", _String2=".") returned 1 [0166.628] wcscmp (_String1="J0293828.WMF", _String2="..") returned 1 [0166.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f271c8 [0166.628] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.628] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.628] wcscat (in: _Dest=0x3f271c8, _Source="J0293828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" [0166.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0166.629] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced0300, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ced0300, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0166.629] wcscmp (_String1="J0293844.WMF", _String2=".") returned 1 [0166.629] wcscmp (_String1="J0293844.WMF", _String2="..") returned 1 [0166.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27250 [0166.629] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.629] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.630] wcscat (in: _Dest=0x3f27250, _Source="J0293844.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" [0166.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0166.630] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8116d00, ftCreationTime.dwHighDateTime=0x1bf08f6, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8116d00, ftLastWriteTime.dwHighDateTime=0x1bf08f6, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0166.630] wcscmp (_String1="J0295241.GIF", _String2=".") returned 1 [0166.631] wcscmp (_String1="J0295241.GIF", _String2="..") returned 1 [0166.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f270b8 [0166.631] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.631] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.631] wcscat (in: _Dest=0x3f270b8, _Source="J0295241.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" [0166.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0166.632] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10810400, ftCreationTime.dwHighDateTime=0x1bf2cfa, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10810400, ftLastWriteTime.dwHighDateTime=0x1bf2cfa, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0166.632] wcscmp (_String1="J0297185.WMF", _String2=".") returned 1 [0166.632] wcscmp (_String1="J0297185.WMF", _String2="..") returned 1 [0166.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27c68 [0166.632] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.632] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.632] wcscat (in: _Dest=0x3f27c68, _Source="J0297185.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" [0166.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0166.633] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f38c00, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f38c00, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0166.633] wcscmp (_String1="J0297551.WMF", _String2=".") returned 1 [0166.633] wcscmp (_String1="J0297551.WMF", _String2="..") returned 1 [0166.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27b58 [0166.633] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.633] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.633] wcscat (in: _Dest=0x3f27b58, _Source="J0297551.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" [0166.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0166.634] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54be400, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe54be400, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0166.634] wcscmp (_String1="J0297707.WMF", _String2=".") returned 1 [0166.634] wcscmp (_String1="J0297707.WMF", _String2="..") returned 1 [0166.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f279c0 [0166.634] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.634] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.634] wcscat (in: _Dest=0x3f279c0, _Source="J0297707.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" [0166.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0166.635] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bfa000, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19bfa000, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0166.635] wcscmp (_String1="J0297749.WMF", _String2=".") returned 1 [0166.635] wcscmp (_String1="J0297749.WMF", _String2="..") returned 1 [0166.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f262e8 [0166.635] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0166.635] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0166.635] wcscat (in: _Dest=0x3f262e8, _Source="J0297749.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" [0166.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0166.637] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4372ca00, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4372ca00, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0167.691] wcscmp (_String1="J0298653.WMF", _String2=".") returned 1 [0167.691] wcscmp (_String1="J0298653.WMF", _String2="..") returned 1 [0167.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0167.692] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0167.692] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0167.692] wcscat (in: _Dest=0x3f27360, _Source="J0298653.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" [0172.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf")) returned 0x20 [0172.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0172.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.571] GetLastError () returned 0x5 [0172.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0172.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.571] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3009900, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3009900, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0172.571] wcscmp (_String1="J0298897.WMF", _String2=".") returned 1 [0172.571] wcscmp (_String1="J0298897.WMF", _String2="..") returned 1 [0172.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.571] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.571] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.571] wcscat (in: _Dest=0x3f27360, _Source="J0298897.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" [0172.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf")) returned 0x20 [0172.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0172.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.594] GetLastError () returned 0x5 [0172.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0172.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.594] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2f1200, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab2f1200, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0172.594] wcscmp (_String1="J0299125.WMF", _String2=".") returned 1 [0172.594] wcscmp (_String1="J0299125.WMF", _String2="..") returned 1 [0172.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.594] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.594] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.594] wcscat (in: _Dest=0x3f27360, _Source="J0299125.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" [0172.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf")) returned 0x20 [0172.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0172.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.595] GetLastError () returned 0x5 [0172.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0172.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.595] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8ffe00, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc8ffe00, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0172.595] wcscmp (_String1="J0299171.WMF", _String2=".") returned 1 [0172.595] wcscmp (_String1="J0299171.WMF", _String2="..") returned 1 [0172.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.595] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.595] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.595] wcscat (in: _Dest=0x3f27360, _Source="J0299171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" [0172.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf")) returned 0x20 [0172.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0172.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.596] GetLastError () returned 0x5 [0172.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0172.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.596] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c44100, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35c44100, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0172.596] wcscmp (_String1="J0299587.WMF", _String2=".") returned 1 [0172.596] wcscmp (_String1="J0299587.WMF", _String2="..") returned 1 [0172.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.596] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.596] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.596] wcscat (in: _Dest=0x3f27360, _Source="J0299587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" [0172.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf")) returned 0x20 [0172.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0172.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.600] GetLastError () returned 0x5 [0172.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0172.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.601] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52607900, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52607900, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0172.601] wcscmp (_String1="J0299611.WMF", _String2=".") returned 1 [0172.601] wcscmp (_String1="J0299611.WMF", _String2="..") returned 1 [0172.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.601] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.601] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.601] wcscat (in: _Dest=0x3f27360, _Source="J0299611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" [0172.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf")) returned 0x20 [0172.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0172.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.617] GetLastError () returned 0x5 [0172.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0172.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.618] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34f3400, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf34f3400, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0172.618] wcscmp (_String1="J0299763.WMF", _String2=".") returned 1 [0172.618] wcscmp (_String1="J0299763.WMF", _String2="..") returned 1 [0172.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.618] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.618] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.618] wcscat (in: _Dest=0x3f27360, _Source="J0299763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" [0172.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf")) returned 0x20 [0172.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0172.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.619] GetLastError () returned 0x5 [0172.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0172.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.619] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85856500, ftCreationTime.dwHighDateTime=0x1bf3a80, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x85856500, ftLastWriteTime.dwHighDateTime=0x1bf3a80, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0172.619] wcscmp (_String1="J0300520.GIF", _String2=".") returned 1 [0172.619] wcscmp (_String1="J0300520.GIF", _String2="..") returned 1 [0172.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.619] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.619] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.619] wcscat (in: _Dest=0x3f27360, _Source="J0300520.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" [0172.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif")) returned 0x20 [0172.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0172.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.620] GetLastError () returned 0x5 [0172.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0172.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.620] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eeaf300, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8eeaf300, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0172.620] wcscmp (_String1="J0300840.WMF", _String2=".") returned 1 [0172.620] wcscmp (_String1="J0300840.WMF", _String2="..") returned 1 [0172.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.620] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.620] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.620] wcscat (in: _Dest=0x3f27360, _Source="J0300840.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" [0172.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf")) returned 0x20 [0172.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0172.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.621] GetLastError () returned 0x5 [0172.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0172.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.621] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a13e00, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6a13e00, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0172.621] wcscmp (_String1="J0300912.WMF", _String2=".") returned 1 [0172.621] wcscmp (_String1="J0300912.WMF", _String2="..") returned 1 [0172.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.621] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.621] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.621] wcscat (in: _Dest=0x3f27360, _Source="J0300912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" [0172.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf")) returned 0x20 [0172.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0172.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.641] GetLastError () returned 0x5 [0172.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0172.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.641] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9068eb00, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9068eb00, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0172.641] wcscmp (_String1="J0301050.WMF", _String2=".") returned 1 [0172.641] wcscmp (_String1="J0301050.WMF", _String2="..") returned 1 [0172.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.641] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.641] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.641] wcscat (in: _Dest=0x3f27360, _Source="J0301050.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" [0172.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf")) returned 0x20 [0172.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0172.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.642] GetLastError () returned 0x5 [0172.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0172.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.642] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ace800, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4ace800, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0172.642] wcscmp (_String1="J0301076.WMF", _String2=".") returned 1 [0172.642] wcscmp (_String1="J0301076.WMF", _String2="..") returned 1 [0172.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.642] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.642] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.643] wcscat (in: _Dest=0x3f27360, _Source="J0301076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" [0172.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf")) returned 0x20 [0172.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0172.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.643] GetLastError () returned 0x5 [0172.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0172.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.643] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e535c00, ftCreationTime.dwHighDateTime=0x1bf4593, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8e535c00, ftLastWriteTime.dwHighDateTime=0x1bf4593, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0172.643] wcscmp (_String1="J0301252.WMF", _String2=".") returned 1 [0172.643] wcscmp (_String1="J0301252.WMF", _String2="..") returned 1 [0172.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.643] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.644] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.644] wcscat (in: _Dest=0x3f27360, _Source="J0301252.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" [0172.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf")) returned 0x20 [0172.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0172.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.656] GetLastError () returned 0x5 [0172.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0172.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.656] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8be900, ftCreationTime.dwHighDateTime=0x1bf4594, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a8be900, ftLastWriteTime.dwHighDateTime=0x1bf4594, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0172.656] wcscmp (_String1="J0301480.WMF", _String2=".") returned 1 [0172.656] wcscmp (_String1="J0301480.WMF", _String2="..") returned 1 [0172.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.657] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.657] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.657] wcscat (in: _Dest=0x3f27360, _Source="J0301480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" [0172.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf")) returned 0x20 [0172.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0172.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.657] GetLastError () returned 0x5 [0172.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0172.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.658] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640a1d00, ftCreationTime.dwHighDateTime=0x1bf4b04, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x640a1d00, ftLastWriteTime.dwHighDateTime=0x1bf4b04, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0172.658] wcscmp (_String1="J0302827.JPG", _String2=".") returned 1 [0172.658] wcscmp (_String1="J0302827.JPG", _String2="..") returned 1 [0172.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.658] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.658] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.658] wcscat (in: _Dest=0x3f27360, _Source="J0302827.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" [0172.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg")) returned 0x20 [0172.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0172.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.658] GetLastError () returned 0x5 [0172.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0172.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.659] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8db7b00, ftCreationTime.dwHighDateTime=0x1bf4bc9, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8db7b00, ftLastWriteTime.dwHighDateTime=0x1bf4bc9, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0172.659] wcscmp (_String1="J0302953.JPG", _String2=".") returned 1 [0172.659] wcscmp (_String1="J0302953.JPG", _String2="..") returned 1 [0172.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.659] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.659] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.659] wcscat (in: _Dest=0x3f27360, _Source="J0302953.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" [0172.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg")) returned 0x20 [0172.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0172.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.659] GetLastError () returned 0x5 [0172.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0172.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.660] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f39bd00, ftCreationTime.dwHighDateTime=0x1bf4596, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f39bd00, ftLastWriteTime.dwHighDateTime=0x1bf4596, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0172.660] wcscmp (_String1="J0304933.WMF", _String2=".") returned 1 [0172.660] wcscmp (_String1="J0304933.WMF", _String2="..") returned 1 [0172.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.660] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.660] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.660] wcscat (in: _Dest=0x3f27360, _Source="J0304933.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" [0172.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf")) returned 0x20 [0172.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0172.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.688] GetLastError () returned 0x5 [0172.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0172.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.689] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe60600, ftCreationTime.dwHighDateTime=0x1bf4597, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfe60600, ftLastWriteTime.dwHighDateTime=0x1bf4597, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0172.689] wcscmp (_String1="J0305257.WMF", _String2=".") returned 1 [0172.689] wcscmp (_String1="J0305257.WMF", _String2="..") returned 1 [0172.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.689] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.689] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.689] wcscat (in: _Dest=0x3f27360, _Source="J0305257.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" [0172.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf")) returned 0x20 [0172.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0172.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.690] GetLastError () returned 0x5 [0172.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0172.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.690] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde80ed00, ftCreationTime.dwHighDateTime=0x1bf4598, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde80ed00, ftLastWriteTime.dwHighDateTime=0x1bf4598, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0172.690] wcscmp (_String1="J0305493.WMF", _String2=".") returned 1 [0172.690] wcscmp (_String1="J0305493.WMF", _String2="..") returned 1 [0172.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.690] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.690] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.690] wcscat (in: _Dest=0x3f27360, _Source="J0305493.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" [0172.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf")) returned 0x20 [0172.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0172.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.690] GetLastError () returned 0x5 [0172.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0172.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.691] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8e6100, ftCreationTime.dwHighDateTime=0x1bf722b, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d8e6100, ftLastWriteTime.dwHighDateTime=0x1bf722b, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0172.691] wcscmp (_String1="J0315447.JPG", _String2=".") returned 1 [0172.691] wcscmp (_String1="J0315447.JPG", _String2="..") returned 1 [0172.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.691] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.691] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.691] wcscat (in: _Dest=0x3f27360, _Source="J0315447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" [0172.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg")) returned 0x20 [0172.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0172.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.691] GetLastError () returned 0x5 [0172.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0172.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0172.692] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa6fb300, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa6fb300, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0172.692] wcscmp (_String1="J0332268.WMF", _String2=".") returned 1 [0172.692] wcscmp (_String1="J0332268.WMF", _String2="..") returned 1 [0172.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0172.692] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0172.692] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0172.692] wcscat (in: _Dest=0x3f27360, _Source="J0332268.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" [0172.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf")) returned 0x20 [0173.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0173.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.611] GetLastError () returned 0x5 [0173.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0173.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0173.611] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba0e000, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfba0e000, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0173.611] wcscmp (_String1="J0332364.WMF", _String2=".") returned 1 [0173.611] wcscmp (_String1="J0332364.WMF", _String2="..") returned 1 [0173.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0173.611] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0173.611] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0173.611] wcscat (in: _Dest=0x3f27360, _Source="J0332364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" [0179.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0179.946] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5afef000, ftCreationTime.dwHighDateTime=0x1bfafbd, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5afef000, ftLastWriteTime.dwHighDateTime=0x1bfafbd, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0179.946] wcscmp (_String1="J0335112.WMF", _String2=".") returned 1 [0179.946] wcscmp (_String1="J0335112.WMF", _String2="..") returned 1 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef730 [0179.947] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0179.947] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0179.947] wcscat (in: _Dest=0x66ef730, _Source="J0335112.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" [0179.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0179.948] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0179.948] wcscmp (_String1="J0336075.WMF", _String2=".") returned 1 [0179.948] wcscmp (_String1="J0336075.WMF", _String2="..") returned 1 [0179.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efd08 [0179.948] wcscpy (in: _Dest=0x66efd08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0179.948] wcscat (in: _Dest=0x66efd08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0179.949] wcscat (in: _Dest=0x66efd08, _Source="J0336075.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" [0179.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0179.950] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x3d413a0 | out: lpFindFileData=0x3d413a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0179.950] FindClose (in: hFindFile=0x3e80c38 | out: hFindFile=0x3e80c38) returned 1 [0179.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413a0) returned 1 [0179.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5798) returned 1 [0179.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28fb0) returned 1 Thread: id = 552 os_tid = 0x10c [0136.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5878 [0136.095] wcscpy (in: _Dest=0x66e5878, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0136.095] wcscat (in: _Dest=0x66e5878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0136.096] wcscat (in: _Dest=0x66e5878, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*" [0136.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40798 [0136.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0136.123] wcscmp (_String1=".", _String2=".") returned 0 [0136.123] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.124] wcscmp (_String1="..", _String2=".") returned 1 [0136.124] wcscmp (_String1="..", _String2="..") returned 0 [0136.124] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0136.124] wcscmp (_String1="1033", _String2=".") returned 1 [0136.124] wcscmp (_String1="1033", _String2="..") returned 1 [0136.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d940 [0136.124] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0136.124] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0136.124] wcscat (in: _Dest=0x3f1d940, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0140.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0140.290] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0140.290] wcscmp (_String1="AUTOSHAP", _String2=".") returned 1 [0140.291] wcscmp (_String1="AUTOSHAP", _String2="..") returned 1 [0140.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5cf0 [0140.291] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0140.291] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0140.291] wcscat (in: _Dest=0x3da5cf0, _Source="AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0140.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0140.292] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0140.292] wcscmp (_String1="BULLETS", _String2=".") returned 1 [0140.292] wcscmp (_String1="BULLETS", _String2="..") returned 1 [0140.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da4c70 [0140.292] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0140.292] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0140.292] wcscat (in: _Dest=0x3da4c70, _Source="BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0140.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0140.294] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES", cAlternateFileName="")) returned 1 [0140.294] wcscmp (_String1="LINES", _String2=".") returned 1 [0140.294] wcscmp (_String1="LINES", _String2="..") returned 1 [0140.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1aca0 [0140.294] wcscpy (in: _Dest=0x3f1aca0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0140.294] wcscat (in: _Dest=0x3f1aca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0140.294] wcscat (in: _Dest=0x3f1aca0, _Source="LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0140.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1aca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0140.296] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0140.296] wcscmp (_String1="OFFICE10.DLL", _String2=".") returned 1 [0140.296] wcscmp (_String1="OFFICE10.DLL", _String2="..") returned 1 [0140.296] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0140.296] wcscmp (_String1="OFFICE10.MMW", _String2=".") returned 1 [0140.296] wcscmp (_String1="OFFICE10.MMW", _String2="..") returned 1 [0140.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26260 [0140.296] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0140.296] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0140.296] wcscat (in: _Dest=0x3f26260, _Source="OFFICE10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" [0140.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0140.298] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0140.298] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0140.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40798) returned 1 [0140.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5878) returned 1 [0140.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 553 os_tid = 0x8ec [0136.096] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url")) returned 0x20 [0136.127] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0136.127] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.128] GetLastError () returned 0x5 [0136.128] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0136.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a258) returned 1 Thread: id = 554 os_tid = 0x8fc [0136.125] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0136.126] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0136.126] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.126] GetLastError () returned 0x5 [0136.126] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0136.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 555 os_tid = 0xb10 [0136.129] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0136.129] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0136.129] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.130] GetLastError () returned 0x5 [0136.130] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0136.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58eb0) returned 1 Thread: id = 556 os_tid = 0xb58 [0136.131] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0136.131] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0136.131] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.131] GetLastError () returned 0x5 [0136.131] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0136.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d596a8) returned 1 Thread: id = 557 os_tid = 0xb6c [0136.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0136.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0136.135] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.135] GetLastError () returned 0x5 [0136.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0136.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 558 os_tid = 0xb30 [0136.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0136.134] wcscpy (in: _Dest=0x3330a8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0136.134] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0136.134] wcscat (in: _Dest=0x3330a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0136.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40530 [0136.134] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0136.139] wcscmp (_String1=".", _String2=".") returned 0 [0136.139] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.139] wcscmp (_String1="..", _String2=".") returned 1 [0136.139] wcscmp (_String1="..", _String2="..") returned 0 [0136.139] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0136.139] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0136.139] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0136.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddf6a8 [0136.140] wcscpy (in: _Dest=0x3ddf6a8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0136.140] wcscat (in: _Dest=0x3ddf6a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0136.140] wcscat (in: _Dest=0x3ddf6a8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0139.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ddf6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0139.220] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.220] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0139.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40530) returned 1 [0139.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 [0139.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 559 os_tid = 0xdb4 [0136.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d850 [0136.137] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0136.137] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0136.137] wcscat (in: _Dest=0x3e0d850, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0136.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0136.137] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0136.138] wcscmp (_String1=".", _String2=".") returned 0 [0136.138] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.138] wcscmp (_String1="..", _String2=".") returned 1 [0136.138] wcscmp (_String1="..", _String2="..") returned 0 [0136.138] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.138] wcscmp (_String1="packages", _String2=".") returned 1 [0136.138] wcscmp (_String1="packages", _String2="..") returned 1 [0136.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35af88 [0136.138] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0136.138] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0136.138] wcscat (in: _Dest=0x35af88, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0139.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0139.217] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.217] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0139.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0139.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 [0139.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 560 os_tid = 0x154 [0136.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e110 [0136.140] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0136.140] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0136.140] wcscat (in: _Dest=0x3e0e110, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0136.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0136.140] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0136.140] wcscmp (_String1=".", _String2=".") returned 0 [0136.140] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.140] wcscmp (_String1="..", _String2=".") returned 1 [0136.140] wcscmp (_String1="..", _String2="..") returned 0 [0136.141] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.141] wcscmp (_String1="packages", _String2=".") returned 1 [0136.141] wcscmp (_String1="packages", _String2="..") returned 1 [0136.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c218 [0136.141] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0136.141] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0136.141] wcscat (in: _Dest=0x35c218, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0139.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0139.222] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.222] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0139.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0139.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 [0139.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 561 os_tid = 0x444 [0136.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6c48 [0136.141] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0136.141] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0136.141] wcscat (in: _Dest=0x2ff6c48, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0136.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0136.142] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0136.142] wcscmp (_String1=".", _String2=".") returned 0 [0136.142] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.142] wcscmp (_String1="..", _String2=".") returned 1 [0136.142] wcscmp (_String1="..", _String2="..") returned 0 [0136.142] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.142] wcscmp (_String1="packages", _String2=".") returned 1 [0136.142] wcscmp (_String1="packages", _String2="..") returned 1 [0136.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0136.142] wcscpy (in: _Dest=0x333528, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0136.142] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0136.142] wcscat (in: _Dest=0x333528, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0139.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0139.224] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.224] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0139.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0139.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 [0139.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 562 os_tid = 0x90 [0136.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d8f0 [0136.143] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0136.143] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0136.143] wcscat (in: _Dest=0x3e0d8f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0136.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0136.143] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0136.143] wcscmp (_String1=".", _String2=".") returned 0 [0136.143] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.143] wcscmp (_String1="..", _String2=".") returned 1 [0136.143] wcscmp (_String1="..", _String2="..") returned 0 [0136.143] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0136.144] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0136.144] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0136.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c588 [0136.144] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0136.144] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0136.144] wcscat (in: _Dest=0x35c588, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0139.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0139.226] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0139.227] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0139.227] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0139.227] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0139.227] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0139.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0139.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 [0139.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 563 os_tid = 0x308 [0136.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff67f8 [0136.144] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0136.144] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0136.144] wcscat (in: _Dest=0x2ff67f8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0136.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0136.145] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0136.145] wcscmp (_String1=".", _String2=".") returned 0 [0136.145] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.145] wcscmp (_String1="..", _String2=".") returned 1 [0136.145] wcscmp (_String1="..", _String2="..") returned 0 [0136.145] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.145] wcscmp (_String1="packages", _String2=".") returned 1 [0136.145] wcscmp (_String1="packages", _String2="..") returned 1 [0136.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def2c0 [0136.145] wcscpy (in: _Dest=0x3def2c0, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0136.145] wcscat (in: _Dest=0x3def2c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0136.145] wcscat (in: _Dest=0x3def2c0, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0139.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0139.229] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.229] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0139.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0139.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 [0139.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 564 os_tid = 0x75c [0136.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0136.146] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0136.146] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0136.146] wcscat (in: _Dest=0x2ff63a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0136.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0136.146] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0136.146] wcscmp (_String1=".", _String2=".") returned 0 [0136.146] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.146] wcscmp (_String1="..", _String2=".") returned 1 [0136.146] wcscmp (_String1="..", _String2="..") returned 0 [0136.146] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.147] wcscmp (_String1="packages", _String2=".") returned 1 [0136.147] wcscmp (_String1="packages", _String2="..") returned 1 [0136.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def900 [0136.147] wcscpy (in: _Dest=0x3def900, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0136.147] wcscat (in: _Dest=0x3def900, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0136.147] wcscat (in: _Dest=0x3def900, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0139.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0139.231] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.231] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 [0139.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 565 os_tid = 0x7e8 [0136.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0136.147] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0136.147] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0136.147] wcscat (in: _Dest=0x2ff6db8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0136.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0136.147] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0136.148] wcscmp (_String1=".", _String2=".") returned 0 [0136.148] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.148] wcscmp (_String1="..", _String2=".") returned 1 [0136.148] wcscmp (_String1="..", _String2="..") returned 0 [0136.148] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.148] wcscmp (_String1="packages", _String2=".") returned 1 [0136.148] wcscmp (_String1="packages", _String2="..") returned 1 [0136.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0136.148] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0136.148] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0136.148] wcscat (in: _Dest=0x333468, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0139.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0139.232] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.232] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0139.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0139.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0139.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 566 os_tid = 0x41c [0136.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7b60 [0136.148] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0136.148] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0136.149] wcscat (in: _Dest=0x2ff7b60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0136.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0136.149] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0136.149] wcscmp (_String1=".", _String2=".") returned 0 [0136.149] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.149] wcscmp (_String1="..", _String2=".") returned 1 [0136.149] wcscmp (_String1="..", _String2="..") returned 0 [0136.149] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.149] wcscmp (_String1="packages", _String2=".") returned 1 [0136.149] wcscmp (_String1="packages", _String2="..") returned 1 [0136.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3333a8 [0136.149] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0136.149] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0136.149] wcscat (in: _Dest=0x3333a8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0139.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0139.234] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.234] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0139.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0139.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 [0139.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 567 os_tid = 0xe74 [0136.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ebb0 [0136.150] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0136.150] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0136.150] wcscat (in: _Dest=0x3e0ebb0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0136.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0136.150] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0136.150] wcscmp (_String1=".", _String2=".") returned 0 [0136.150] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.150] wcscmp (_String1="..", _String2=".") returned 1 [0136.150] wcscmp (_String1="..", _String2="..") returned 0 [0136.150] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0136.150] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0136.150] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0136.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c2c8 [0136.151] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0136.151] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0136.151] wcscat (in: _Dest=0x35c2c8, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0139.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0139.236] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0139.236] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0139.236] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0139.236] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0139.236] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0139.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0139.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 [0139.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 568 os_tid = 0xb38 [0136.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0136.152] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0136.152] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0136.152] wcscat (in: _Dest=0x3e0eed0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0136.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0136.152] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0136.152] wcscmp (_String1=".", _String2=".") returned 0 [0136.152] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.152] wcscmp (_String1="..", _String2=".") returned 1 [0136.152] wcscmp (_String1="..", _String2="..") returned 0 [0136.152] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0136.152] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0136.152] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0136.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b878 [0136.152] wcscpy (in: _Dest=0x35b878, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0136.153] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0136.153] wcscat (in: _Dest=0x35b878, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0139.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0139.238] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0139.238] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0139.238] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0139.238] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0139.238] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0139.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0139.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 [0139.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 569 os_tid = 0xdcc [0136.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6968 [0136.153] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0136.153] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0136.153] wcscat (in: _Dest=0x2ff6968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0136.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0136.153] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0136.154] wcscmp (_String1=".", _String2=".") returned 0 [0136.154] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.154] wcscmp (_String1="..", _String2=".") returned 1 [0136.154] wcscmp (_String1="..", _String2="..") returned 0 [0136.154] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0136.154] wcscmp (_String1="packages", _String2=".") returned 1 [0136.154] wcscmp (_String1="packages", _String2="..") returned 1 [0136.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0136.154] wcscpy (in: _Dest=0x332268, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0136.154] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0136.154] wcscat (in: _Dest=0x332268, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0139.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0139.240] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.240] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0139.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0139.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 [0139.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 Thread: id = 570 os_tid = 0xe84 [0136.155] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf" (normalized: "c:\\users\\eebsym5\\desktop\\g-zk0i4zn_g6ej9\\w_l9s6wp_l5v27f5plmp.swf")) returned 0x20 [0136.155] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf", dwFileAttributes=0x20) returned 1 [0136.155] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf" (normalized: "c:\\users\\eebsym5\\desktop\\g-zk0i4zn_g6ej9\\w_l9s6wp_l5v27f5plmp.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb2c [0136.155] GetFileSizeEx (in: hFile=0xb2c, lpFileSize=0xb2cf98c | out: lpFileSize=0xb2cf98c*=41637) returned 1 [0136.155] SetFilePointerEx (in: hFile=0xb2c, liDistanceToMove=0xa2a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.155] ReadFile (in: hFile=0xb2c, lpBuffer=0xb2cf968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb2cf978, lpOverlapped=0x0 | out: lpBuffer=0xb2cf968*, lpNumberOfBytesRead=0xb2cf978*=0x4, lpOverlapped=0x0) returned 1 [0136.158] SetFilePointerEx (in: hFile=0xb2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0136.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e58 [0136.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0136.158] NtQuerySystemTime (in: CurrentTime=0xb2cf900 | out: CurrentTime=0xb2cf900*=132482710448232000) returned 0x0 [0136.158] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x609e30c8 [0136.158] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x7f59e9ff [0136.158] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x7b4f146 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x4a51d2e [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0xbad8bc4 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x185a4b94 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x590ea9a0 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x1902456e [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0xa48b6c9 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x16aea1c [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x349085d3 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x2cfd1bed [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x7667acd7 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x74ce4f09 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x7fbb27a7 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x105803a9 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x49a6af58 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x12b80ca7 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x2c63f287 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x6fc98b53 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x47a4e829 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x23d5753e [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0xf43e05f [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x73462967 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x5d074ace [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x5370f862 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x22b51e30 [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x5062bdac [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x3eb2945f [0136.159] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x1f04afc4 [0136.160] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x552bab68 [0136.160] RtlRandomEx (in: Seed=0xb2cf8f8 | out: Seed=0xb2cf8f8) returned 0x5cc33ef6 [0136.172] SetFilePointerEx (in: hFile=0xb2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.172] ReadFile (in: hFile=0xb2c, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb2cf900, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0xb2cf900*=0x3c00, lpOverlapped=0x0) returned 1 [0136.172] SetFilePointerEx (in: hFile=0xb2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32d00 [0136.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0136.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0136.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673cd48 [0136.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4128 [0136.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0136.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0136.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d00) returned 1 [0136.173] WriteFile (in: hFile=0xb2c, lpBuffer=0x673cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb2cf900, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesWritten=0xb2cf900*=0x3c00, lpOverlapped=0x0) returned 1 [0136.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0136.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6739140) returned 1 [0136.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b3ae8 [0136.518] SetFilePointerEx (in: hFile=0xb2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.518] WriteFile (in: hFile=0xb2c, lpBuffer=0x66cc060*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb2cf980, lpOverlapped=0x0 | out: lpBuffer=0x66cc060*, lpNumberOfBytesWritten=0xb2cf980*=0x122, lpOverlapped=0x0) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cc060) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ae8) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4128) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e58) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c00) returned 1 [0136.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35c0) returned 1 [0136.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ecf0 [0136.602] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf" [0136.602] wcscat (in: _Dest=0x3e0ecf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf.ac3a86" [0136.602] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf.ac3a86", NtPathName=0xb2cf8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\W_l9s6wp_l5v27F5Plmp.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c4d8 [0136.664] FlushFileBuffers (hFile=0xb2c) returned 1 [0136.673] CloseHandle (hObject=0xb2c) returned 1 [0136.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f470 [0136.674] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\" [0136.674] wcscat (in: _Dest=0x3e0f470, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\AC3A86-Readme.txt" [0136.674] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\g-zk0i4zn_g6ej9\\ac3a86-readme.txt")) returned 0xffffffff [0136.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\g-zk0I4zN_G6EJ9\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\g-zk0i4zn_g6ej9\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb2c [0136.677] WriteFile (in: hFile=0xb2c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb2cf914, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb2cf914*=0x8b9, lpOverlapped=0x0) returned 1 [0136.680] CloseHandle (hObject=0xb2c) returned 1 [0136.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 [0136.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355170) returned 1 Thread: id = 571 os_tid = 0xe98 [0136.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e621f0 [0136.174] wcscpy (in: _Dest=0x3e621f0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0136.174] wcscat (in: _Dest=0x3e621f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0136.174] wcscat (in: _Dest=0x3e621f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\*" [0136.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0136.174] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0136.174] wcscmp (_String1=".", _String2=".") returned 0 [0136.174] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.174] wcscmp (_String1="..", _String2=".") returned 1 [0136.174] wcscmp (_String1="..", _String2="..") returned 0 [0136.174] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0136.174] wcscmp (_String1="10.0", _String2=".") returned 1 [0136.174] wcscmp (_String1="10.0", _String2="..") returned 1 [0136.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7440 [0136.174] wcscpy (in: _Dest=0x3ef7440, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0136.174] wcscat (in: _Dest=0x3ef7440, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0136.174] wcscat (in: _Dest=0x3ef7440, _Source="10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0139.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0139.243] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0139.243] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0139.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0139.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621f0) returned 1 [0139.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 Thread: id = 572 os_tid = 0xea0 [0136.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e5e928 [0136.175] wcscpy (in: _Dest=0x3e5e928, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0136.175] wcscat (in: _Dest=0x3e5e928, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0136.175] wcscat (in: _Dest=0x3e5e928, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\*") returned="C:\\Users\\All Users\\Sun\\Java\\*" [0136.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0136.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0136.176] wcscmp (_String1=".", _String2=".") returned 0 [0136.176] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.176] wcscmp (_String1="..", _String2=".") returned 1 [0136.176] wcscmp (_String1="..", _String2="..") returned 0 [0136.176] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0136.176] wcscmp (_String1="Java Update", _String2=".") returned 1 [0136.176] wcscmp (_String1="Java Update", _String2="..") returned 1 [0136.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7180 [0136.176] wcscpy (in: _Dest=0x3ef7180, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0136.176] wcscat (in: _Dest=0x3ef7180, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0136.176] wcscat (in: _Dest=0x3ef7180, _Source="Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0139.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0139.246] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0139.246] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0139.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0139.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e928) returned 1 [0139.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f200) returned 1 Thread: id = 573 os_tid = 0xdd4 [0136.177] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif" (normalized: "c:\\users\\eebsym5\\desktop\\rh skxidli7ncrsur7o.gif")) returned 0x20 [0136.177] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif", dwFileAttributes=0x20) returned 1 [0136.177] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif" (normalized: "c:\\users\\eebsym5\\desktop\\rh skxidli7ncrsur7o.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12e4 [0136.177] GetFileSizeEx (in: hFile=0x12e4, lpFileSize=0xbacfa3c | out: lpFileSize=0xbacfa3c*=70416) returned 1 [0136.177] SetFilePointerEx (in: hFile=0x12e4, liDistanceToMove=0x1130c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.177] ReadFile (in: hFile=0x12e4, lpBuffer=0xbacfa18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbacfa28, lpOverlapped=0x0 | out: lpBuffer=0xbacfa18*, lpNumberOfBytesRead=0xbacfa28*=0x4, lpOverlapped=0x0) returned 1 [0136.180] SetFilePointerEx (in: hFile=0x12e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c90 [0136.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4010 [0136.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0136.180] NtQuerySystemTime (in: CurrentTime=0xbacf9b0 | out: CurrentTime=0xbacf9b0*=132482710448388000) returned 0x0 [0136.180] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x6ccf43b7 [0136.180] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x3720c4de [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x1ed6ae8f [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x2e170c5e [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x55389517 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x6c24d420 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x6bc1473f [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x5247ab89 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x205841a [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x49f0a6 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x54299303 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x4ee10d13 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x7b6227d7 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x6b0cae54 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0xeaad017 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x77fd5e23 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x69f76da1 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x51e7fc5e [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x5442bd22 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x57aa7b1 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x3cf81277 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x3526cfa3 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x5d949614 [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x3fb2131d [0136.181] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x444201a8 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x7bf71558 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x754d1227 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0xf2c1669 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x15fb2de7 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x10dd8142 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x3880de15 [0136.182] RtlRandomEx (in: Seed=0xbacf9a8 | out: Seed=0xbacf9a8) returned 0x65111675 [0136.193] SetFilePointerEx (in: hFile=0x12e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.193] ReadFile (in: hFile=0x12e4, lpBuffer=0x674bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbacf9b0, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesRead=0xbacf9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.194] SetFilePointerEx (in: hFile=0x12e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ed18 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c90 [0136.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c90) returned 1 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67138f0 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c90 [0136.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0136.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0136.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ed18) returned 1 [0136.195] WriteFile (in: hFile=0x12e4, lpBuffer=0x67138f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbacf9b0, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesWritten=0xbacf9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67138f0) returned 1 [0136.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0136.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x30b3b78 [0136.517] SetFilePointerEx (in: hFile=0x12e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.517] WriteFile (in: hFile=0x12e4, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xbacfa30, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0xbacfa30*=0x120, lpOverlapped=0x0) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60b68) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b78) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c90) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4010) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ef8) returned 1 [0136.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39a8) returned 1 [0136.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0136.600] wcscpy (in: _Dest=0x3f1daa8, _Source="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif" [0136.600] wcscat (in: _Dest=0x3f1daa8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif.ac3a86" [0136.600] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif.ac3a86", NtPathName=0xbacf9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\rH SKXiDlI7nCRSUr7O.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbbc8 [0136.742] FlushFileBuffers (hFile=0x12e4) returned 1 [0136.825] CloseHandle (hObject=0x12e4) returned 1 [0136.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.826] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.826] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 Thread: id = 574 os_tid = 0xe48 [0136.195] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\tkxnbudz069imi.bmp")) returned 0x20 [0136.195] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp", dwFileAttributes=0x20) returned 1 [0136.196] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\tkxnbudz069imi.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12d8 [0136.196] GetFileSizeEx (in: hFile=0x12d8, lpFileSize=0xb7cfb8c | out: lpFileSize=0xb7cfb8c*=72997) returned 1 [0136.196] SetFilePointerEx (in: hFile=0x12d8, liDistanceToMove=0x11d21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.196] ReadFile (in: hFile=0x12d8, lpBuffer=0xb7cfb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7cfb78, lpOverlapped=0x0 | out: lpBuffer=0xb7cfb68*, lpNumberOfBytesRead=0xb7cfb78*=0x4, lpOverlapped=0x0) returned 1 [0136.198] SetFilePointerEx (in: hFile=0x12d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0136.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38e0 [0136.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0136.199] NtQuerySystemTime (in: CurrentTime=0xb7cfb00 | out: CurrentTime=0xb7cfb00*=132482710448700000) returned 0x0 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x345a69eb [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x30f801d8 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x2aec531b [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x2be4081e [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x671bb43e [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x7bf158ad [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x26dfe373 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x174a7c7d [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x1ee13eee [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x400d5359 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x6d3a3913 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x4279b94c [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x2e3d37d0 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x43ea1f25 [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x2dc37eca [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x319171f [0136.199] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0xf56ef29 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x220e88d4 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x6de733fc [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0xf1f783f [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x638a1d48 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x56bc1092 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x4eb0df0d [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x45c2183b [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x551c0c87 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x6cf58d49 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x343353f1 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x744f6f7b [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x311a49de [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x497e7111 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x12850569 [0136.200] RtlRandomEx (in: Seed=0xb7cfaf8 | out: Seed=0xb7cfaf8) returned 0x2f64a609 [0136.211] SetFilePointerEx (in: hFile=0x12d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.211] ReadFile (in: hFile=0x12d8, lpBuffer=0x67174f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb7cfb00, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesRead=0xb7cfb00*=0x3c00, lpOverlapped=0x0) returned 1 [0136.212] SetFilePointerEx (in: hFile=0x12d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e9b8 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0136.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670fce8 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fc0 [0136.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0136.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0136.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e9b8) returned 1 [0136.213] WriteFile (in: hFile=0x12d8, lpBuffer=0x670fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb7cfb00, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesWritten=0xb7cfb00*=0x3c00, lpOverlapped=0x0) returned 1 [0136.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0136.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0136.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fbc0 [0136.521] SetFilePointerEx (in: hFile=0x12d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.521] WriteFile (in: hFile=0x12d8, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xb7cfb80, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xb7cfb80*=0x116, lpOverlapped=0x0) returned 1 [0136.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0136.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f300) returned 1 [0136.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0136.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fbc0) returned 1 [0136.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fc0) returned 1 [0136.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38e0) returned 1 [0136.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49e8) returned 1 [0136.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef49c0) returned 1 [0136.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29250 [0136.605] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp" [0136.605] wcscat (in: _Dest=0x3f29250, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp.ac3a86" [0136.605] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp.ac3a86", NtPathName=0xb7cfaf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\TKxnBUDz069imI.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58eb0 [0136.754] FlushFileBuffers (hFile=0x12d8) returned 1 [0136.830] CloseHandle (hObject=0x12d8) returned 1 [0136.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.831] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.831] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.831] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 575 os_tid = 0xee4 [0136.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\ucforipyjjs-hriwppxr.pptx")) returned 0x20 [0136.213] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx", dwFileAttributes=0x20) returned 1 [0136.213] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\ucforipyjjs-hriwppxr.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb18 [0136.214] GetFileSizeEx (in: hFile=0xb18, lpFileSize=0xb92fe84 | out: lpFileSize=0xb92fe84*=80462) returned 1 [0136.214] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0x13a4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.214] ReadFile (in: hFile=0xb18, lpBuffer=0xb92fe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb92fe70, lpOverlapped=0x0 | out: lpBuffer=0xb92fe60*, lpNumberOfBytesRead=0xb92fe70*=0x4, lpOverlapped=0x0) returned 1 [0136.215] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0136.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4998 [0136.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0136.216] NtQuerySystemTime (in: CurrentTime=0xb92fdf8 | out: CurrentTime=0xb92fdf8*=132482710448856000) returned 0x0 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x59cfbddf [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x1fa92d2f [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x3f7a1150 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x55d86ad5 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x3679a87e [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x7acd1417 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x5d3b8966 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0xed664e9 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x48411589 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x39f25bb1 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x6be32edf [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x22ebfee9 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x74ece75f [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x46e325a0 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x3fc9830d [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x51a48d36 [0136.216] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x64cc6b7b [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x6b21653b [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x2ce28cb9 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x6409a0f2 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x7a45926a [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x58579bae [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x7433e583 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x54d490cf [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x69544147 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0xe8fde8d [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x59fa2fe8 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x3989cf20 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x13a62a8c [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x111d6805 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x4094b8f5 [0136.217] RtlRandomEx (in: Seed=0xb92fdf0 | out: Seed=0xb92fdf0) returned 0x21765791 [0136.227] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.227] ReadFile (in: hFile=0xb18, lpBuffer=0x6726518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesRead=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.227] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f348 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f74f8 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3958 [0136.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0136.228] WriteFile (in: hFile=0xb18, lpBuffer=0x67f74f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesWritten=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0136.523] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.523] ReadFile (in: hFile=0xb18, lpBuffer=0x6726518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesRead=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.524] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60c88 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0136.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f74f8 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0136.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0136.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0136.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0136.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60c88) returned 1 [0136.525] WriteFile (in: hFile=0xb18, lpBuffer=0x67f74f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesWritten=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0136.535] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0xfe4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.535] ReadFile (in: hFile=0xb18, lpBuffer=0x6726518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesRead=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.536] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0xfe4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60c88 [0136.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0136.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0136.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0136.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f74f8 [0136.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0136.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0136.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0136.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0136.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60c88) returned 1 [0136.537] WriteFile (in: hFile=0xb18, lpBuffer=0x67f74f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb92fdf8, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesWritten=0xb92fdf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0136.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e890 [0136.541] SetFilePointerEx (in: hFile=0xb18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.541] WriteFile (in: hFile=0xb18, lpBuffer=0x3e631b0*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xb92fe78, lpOverlapped=0x0 | out: lpBuffer=0x3e631b0*, lpNumberOfBytesWritten=0xb92fe78*=0x164, lpOverlapped=0x0) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e631b0) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33408) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3958) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60c88) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e890) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4998) returned 1 [0136.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47e0) returned 1 [0136.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bd8) returned 1 [0136.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0fb70 [0136.609] wcscpy (in: _Dest=0x3e0fb70, _Source="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx" [0136.609] wcscat (in: _Dest=0x3e0fb70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx.ac3a86" [0136.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx.ac3a86", NtPathName=0xb92fdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\ucFoRiPYJJs-HRIWppXr.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0136.759] FlushFileBuffers (hFile=0xb18) returned 1 [0136.832] CloseHandle (hObject=0xb18) returned 1 [0136.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0136.833] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.833] wcscat (in: _Dest=0x2fe6c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0136.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 576 os_tid = 0xe44 [0136.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\v78tgwzbi.mkv")) returned 0x20 [0136.229] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv", dwFileAttributes=0x20) returned 1 [0136.230] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\v78tgwzbi.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11cc [0136.230] GetFileSizeEx (in: hFile=0x11cc, lpFileSize=0x9f6fabc | out: lpFileSize=0x9f6fabc*=68260) returned 1 [0136.230] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x10aa0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.230] ReadFile (in: hFile=0x11cc, lpBuffer=0x9f6fa98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f6faa8, lpOverlapped=0x0 | out: lpBuffer=0x9f6fa98*, lpNumberOfBytesRead=0x9f6faa8*=0x4, lpOverlapped=0x0) returned 1 [0136.231] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0136.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e98 [0136.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e70 [0136.231] NtQuerySystemTime (in: CurrentTime=0x9f6fa30 | out: CurrentTime=0x9f6fa30*=132482710449012000) returned 0x0 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x6d54cae2 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x121d33c8 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x53193294 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x4ea2a2e2 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x526a290d [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x6e15ae94 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x667b89cb [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x4c51b806 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x461ad271 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x76e9d986 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x483c5f95 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x5c462002 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x7669df2 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x4f6499c1 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x4071e3a [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x78908bd4 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x16f0fd7d [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x96ac81b [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x3c3a1ab3 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x36f5f016 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x22410f4d [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x5a8c2e9e [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x7ac8e4be [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x1d26c4cc [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x6a06b406 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x176cec55 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0xdf643d9 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x42b91726 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x4b08b704 [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x3dbee9e [0136.232] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x3004d2cf [0136.233] RtlRandomEx (in: Seed=0x9f6fa28 | out: Seed=0x9f6fa28) returned 0x5e866f2c [0136.242] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.242] ReadFile (in: hFile=0x11cc, lpBuffer=0x67fb100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f6fa30, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesRead=0x9f6fa30*=0x3c00, lpOverlapped=0x0) returned 1 [0136.242] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f198 [0136.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0136.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0136.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6806518 [0136.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4880 [0136.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e70 [0136.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e70) returned 1 [0136.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f198) returned 1 [0136.243] WriteFile (in: hFile=0x11cc, lpBuffer=0x6806518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f6fa30, lpOverlapped=0x0 | out: lpBuffer=0x6806518*, lpNumberOfBytesWritten=0x9f6fa30*=0x3c00, lpOverlapped=0x0) returned 1 [0136.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6806518) returned 1 [0136.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0136.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5510 [0136.540] SetFilePointerEx (in: hFile=0x11cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.540] WriteFile (in: hFile=0x11cc, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f6fab0, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x9f6fab0*=0x10c, lpOverlapped=0x0) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5510) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4880) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e98) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e20) returned 1 [0136.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4df8) returned 1 [0136.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e758 [0136.607] wcscpy (in: _Dest=0x3d8e758, _Source="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv" [0136.607] wcscat (in: _Dest=0x3d8e758, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv.ac3a86" [0136.607] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv.ac3a86", NtPathName=0x9f6fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\v78tGwzbi.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f270 [0136.752] FlushFileBuffers (hFile=0x11cc) returned 1 [0136.820] CloseHandle (hObject=0x11cc) returned 1 [0136.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.821] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.821] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.821] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ff0) returned 1 Thread: id = 577 os_tid = 0xe70 [0136.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi" (normalized: "c:\\users\\eebsym5\\desktop\\wmkkc1xe_u4cehw4zh.avi")) returned 0x20 [0136.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi", dwFileAttributes=0x20) returned 1 [0136.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi" (normalized: "c:\\users\\eebsym5\\desktop\\wmkkc1xe_u4cehw4zh.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11d8 [0136.244] GetFileSizeEx (in: hFile=0x11d8, lpFileSize=0x9a3f98c | out: lpFileSize=0x9a3f98c*=63481) returned 1 [0136.244] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0xf7f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.244] ReadFile (in: hFile=0x11d8, lpBuffer=0x9a3f968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a3f978, lpOverlapped=0x0 | out: lpBuffer=0x9a3f968*, lpNumberOfBytesRead=0x9a3f978*=0x4, lpOverlapped=0x0) returned 1 [0136.246] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e70 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4dd0 [0136.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4da8 [0136.246] NtQuerySystemTime (in: CurrentTime=0x9a3f900 | out: CurrentTime=0x9a3f900*=132482710449168000) returned 0x0 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x283a7150 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x3a8938a7 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x69a0710f [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x1d603551 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x7e48d1d2 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x58121abb [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x7768527b [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x2bade2c3 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x77a6e18e [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x48130336 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x48a07f82 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x49d70d7b [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x200868d6 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0xeab8c29 [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x377fdfaf [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x757cbd3a [0136.246] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x6ea9c5ed [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x742d1462 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x34e091a6 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x5d9bbd69 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x5b7bc665 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x3651b8ab [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x4be2cbe1 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x2fc2a15 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x78a5f13f [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x1513a982 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x5430f522 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x23d433de [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x57dfa77a [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x1a160318 [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x6ee66c5f [0136.247] RtlRandomEx (in: Seed=0x9a3f8f8 | out: Seed=0x9a3f8f8) returned 0x745aa531 [0136.255] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.255] ReadFile (in: hFile=0x11d8, lpBuffer=0x680a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a3f900, lpOverlapped=0x0 | out: lpBuffer=0x680a120*, lpNumberOfBytesRead=0x9a3f900*=0x3c00, lpOverlapped=0x0) returned 1 [0136.256] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5efe8 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e70 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e70) returned 1 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x680dd28 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4e70 [0136.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4da8 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4da8) returned 1 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efe8) returned 1 [0136.256] WriteFile (in: hFile=0x11d8, lpBuffer=0x680dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a3f900, lpOverlapped=0x0 | out: lpBuffer=0x680dd28*, lpNumberOfBytesWritten=0x9a3f900*=0x3c00, lpOverlapped=0x0) returned 1 [0136.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x680dd28) returned 1 [0136.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x680a120) returned 1 [0136.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x300858 [0136.544] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.544] WriteFile (in: hFile=0x11d8, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x9a3f980, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x9a3f980*=0x11e, lpOverlapped=0x0) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db5f00) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4100) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300858) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4e70) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4dd0) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d58) returned 1 [0136.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d30) returned 1 [0136.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1db20 [0136.610] wcscpy (in: _Dest=0x3f1db20, _Source="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi" [0136.610] wcscat (in: _Dest=0x3f1db20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi.ac3a86" [0136.610] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi.ac3a86", NtPathName=0x9a3f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\wmKkc1Xe_u4CeHw4zH.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbc58 [0136.763] FlushFileBuffers (hFile=0x11d8) returned 1 [0136.835] CloseHandle (hObject=0x11d8) returned 1 [0136.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0136.836] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.836] wcscat (in: _Dest=0x2fe6c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0136.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef338) returned 1 Thread: id = 578 os_tid = 0xe38 [0136.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\yeiztt0a4k0wc4pm1-.mp4")) returned 0x20 [0136.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4", dwFileAttributes=0x20) returned 1 [0136.257] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\yeiztt0a4k0wc4pm1-.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11e0 [0136.258] GetFileSizeEx (in: hFile=0x11e0, lpFileSize=0xc04fc2c | out: lpFileSize=0xc04fc2c*=18502) returned 1 [0136.258] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x4842, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.266] ReadFile (in: hFile=0x11e0, lpBuffer=0xc04fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc04fc18, lpOverlapped=0x0 | out: lpBuffer=0xc04fc08*, lpNumberOfBytesRead=0xc04fc18*=0x4, lpOverlapped=0x0) returned 1 [0136.268] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4da8 [0136.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d08 [0136.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ce0 [0136.268] NtQuerySystemTime (in: CurrentTime=0xc04fba0 | out: CurrentTime=0xc04fba0*=132482710449324000) returned 0x0 [0136.268] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x52463923 [0136.268] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x2e4103b6 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x66c6d573 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x664185aa [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x506ce91d [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x4af3a80 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x3c2ea80c [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x5009bbd0 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x2a73c810 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0xb0a0d80 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x7c138878 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x4efc5f0e [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x4beeaf67 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x3810150a [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x43c484df [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x3f68a0b3 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x36cf8b6a [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x102f613d [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x64eb17a1 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x2a0da9e7 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x723b33a8 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x1d210c4d [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x25add78d [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x394b0cc2 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x181368b7 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x32a59e5f [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x196b04d9 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x5ae31504 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0xe55daa9 [0136.269] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x47254697 [0136.270] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x4a450a49 [0136.270] RtlRandomEx (in: Seed=0xc04fb98 | out: Seed=0xc04fb98) returned 0x8b8bd16 [0136.280] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.280] ReadFile (in: hFile=0x11e0, lpBuffer=0x6811930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc04fba0, lpOverlapped=0x0 | out: lpBuffer=0x6811930*, lpNumberOfBytesRead=0xc04fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.281] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ebf8 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4da8 [0136.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4da8) returned 1 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6815538 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4da8 [0136.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ce0 [0136.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ce0) returned 1 [0136.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebf8) returned 1 [0136.282] WriteFile (in: hFile=0x11e0, lpBuffer=0x6815538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc04fba0, lpOverlapped=0x0 | out: lpBuffer=0x6815538*, lpNumberOfBytesWritten=0xc04fba0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6815538) returned 1 [0136.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6811930) returned 1 [0136.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e332e8 [0136.547] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.547] WriteFile (in: hFile=0x11e0, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xc04fc20, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xc04fc20*=0x11e, lpOverlapped=0x0) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fefdd0) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a38) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4da8) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d08) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1310) returned 1 [0136.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef20d0) returned 1 [0136.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1db98 [0136.612] wcscpy (in: _Dest=0x3f1db98, _Source="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4" [0136.612] wcscat (in: _Dest=0x3f1db98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4.ac3a86" [0136.612] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4.ac3a86", NtPathName=0xc04fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\yeizTt0a4K0wc4Pm1-.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbce8 [0136.768] FlushFileBuffers (hFile=0x11e0) returned 1 [0136.838] CloseHandle (hObject=0x11e0) returned 1 [0136.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0136.839] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.839] wcscat (in: _Dest=0x2fe6c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0136.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef2d0) returned 1 Thread: id = 579 os_tid = 0xe40 [0136.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp" (normalized: "c:\\users\\eebsym5\\desktop\\yiklt1ghepr.odp")) returned 0x20 [0136.282] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp", dwFileAttributes=0x20) returned 1 [0136.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp" (normalized: "c:\\users\\eebsym5\\desktop\\yiklt1ghepr.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12b8 [0136.283] GetFileSizeEx (in: hFile=0x12b8, lpFileSize=0x666fb74 | out: lpFileSize=0x666fb74*=70560) returned 1 [0136.283] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x1139c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.283] ReadFile (in: hFile=0x12b8, lpBuffer=0x666fb50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x666fb60, lpOverlapped=0x0 | out: lpBuffer=0x666fb50*, lpNumberOfBytesRead=0x666fb60*=0x4, lpOverlapped=0x0) returned 1 [0136.285] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ce0 [0136.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1568 [0136.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0136.285] NtQuerySystemTime (in: CurrentTime=0x666fae8 | out: CurrentTime=0x666fae8*=132482710449480000) returned 0x0 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x91520fc [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x630e2cf6 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x46a06742 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x73ad2255 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x6f3c400d [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0xf9dd60 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x5891a94e [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x3bc8bbc5 [0136.285] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x21f37856 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x9cf53ea [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x2e74d91c [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x295f30f9 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x307bdca0 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x7752aeb1 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x7707a5c9 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x6302b436 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x6f357ce2 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x25683248 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x24a8c204 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x4f6b3676 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0xa676d06 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x2ba0f263 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x335be1ea [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x4b179ca0 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x114c0c9d [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x791b5bf5 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x3b09e111 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x725f4616 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x47bbdbf2 [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x724150bc [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x2ae5ffae [0136.286] RtlRandomEx (in: Seed=0x666fae0 | out: Seed=0x666fae0) returned 0x164423b7 [0136.299] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.300] ReadFile (in: hFile=0x12b8, lpBuffer=0x6819140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x666fae8, lpOverlapped=0x0 | out: lpBuffer=0x6819140*, lpNumberOfBytesRead=0x666fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.300] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0136.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ce0 [0136.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ce0) returned 1 [0136.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x681cd48 [0136.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ce0 [0136.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0136.301] WriteFile (in: hFile=0x12b8, lpBuffer=0x681cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x666fae8, lpOverlapped=0x0 | out: lpBuffer=0x681cd48*, lpNumberOfBytesWritten=0x666fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681cd48) returned 1 [0136.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819140) returned 1 [0136.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19888 [0136.549] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.550] WriteFile (in: hFile=0x12b8, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x666fb68, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x666fb68*=0x110, lpOverlapped=0x0) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ce0) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1568) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3480) returned 1 [0136.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1248) returned 1 [0136.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e890 [0136.613] wcscpy (in: _Dest=0x3d8e890, _Source="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp") returned="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp" [0136.613] wcscat (in: _Dest=0x3d8e890, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp.ac3a86" [0136.613] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp.ac3a86", NtPathName=0x666fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\yikLt1GHePr.odp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e100f0 [0136.773] FlushFileBuffers (hFile=0x12b8) returned 1 [0136.840] CloseHandle (hObject=0x12b8) returned 1 [0136.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0136.842] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.842] wcscat (in: _Dest=0x2fe6c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0136.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 580 os_tid = 0xe34 [0136.302] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods" (normalized: "c:\\users\\eebsym5\\desktop\\zkenoy.ods")) returned 0x20 [0136.302] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods", dwFileAttributes=0x20) returned 1 [0136.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods" (normalized: "c:\\users\\eebsym5\\desktop\\zkenoy.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12d4 [0136.303] GetFileSizeEx (in: hFile=0x12d4, lpFileSize=0xc13f99c | out: lpFileSize=0xc13f99c*=76659) returned 1 [0136.303] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x12b6f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.303] ReadFile (in: hFile=0x12d4, lpBuffer=0xc13f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc13f988, lpOverlapped=0x0 | out: lpBuffer=0xc13f978*, lpNumberOfBytesRead=0xc13f988*=0x4, lpOverlapped=0x0) returned 1 [0136.306] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3458 [0136.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0136.306] NtQuerySystemTime (in: CurrentTime=0xc13f910 | out: CurrentTime=0xc13f910*=132482710449636000) returned 0x0 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x73805c4f [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x51a06241 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x55cf54f9 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0xb2d5bcc [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0xaa4b325 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x4757bb05 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x5a0547da [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x776c0635 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x44ba5556 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0xede8508 [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x2224b89b [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x90dd12a [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x1bebb6af [0136.306] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x1c08856f [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x7005860 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x48a71cb7 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x1c2fb741 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x65959168 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x4604fd9f [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x3c3c317e [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x77d65de3 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x3ff3568a [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x7f6c0826 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x5ba12d50 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x207434da [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x7b145a22 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x900d66a [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x44b82ee3 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x4f6c194e [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x700df638 [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x7f61091b [0136.307] RtlRandomEx (in: Seed=0xc13f908 | out: Seed=0xc13f908) returned 0x258097d [0136.320] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.321] ReadFile (in: hFile=0x12d4, lpBuffer=0x6820950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc13f910, lpOverlapped=0x0 | out: lpBuffer=0x6820950*, lpNumberOfBytesRead=0xc13f910*=0x3c00, lpOverlapped=0x0) returned 1 [0136.321] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ed60 [0136.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0136.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0136.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6824558 [0136.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3660 [0136.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0136.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0136.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ed60) returned 1 [0136.323] WriteFile (in: hFile=0x12d4, lpBuffer=0x6824558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc13f910, lpOverlapped=0x0 | out: lpBuffer=0x6824558*, lpNumberOfBytesWritten=0xc13f910*=0x3c00, lpOverlapped=0x0) returned 1 [0136.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6824558) returned 1 [0136.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6820950) returned 1 [0136.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5600 [0136.552] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.552] WriteFile (in: hFile=0x12d4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xc13f990, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xc13f990*=0x106, lpOverlapped=0x0) returned 1 [0136.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0136.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54b0) returned 1 [0136.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0136.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0136.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3660) returned 1 [0136.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3458) returned 1 [0136.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0136.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3548) returned 1 [0136.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6d88 [0136.615] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods" [0136.615] wcscat (in: _Dest=0x2fe6d88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods.ac3a86" [0136.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods.ac3a86", NtPathName=0xc13f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\zkENOY.ods.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1dc10 [0136.778] FlushFileBuffers (hFile=0x12d4) returned 1 [0136.843] CloseHandle (hObject=0x12d4) returned 1 [0136.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0136.844] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.844] wcscat (in: _Dest=0x2fe6ea8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 [0136.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e625b0) returned 1 Thread: id = 581 os_tid = 0xa34 [0136.324] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav" (normalized: "c:\\users\\eebsym5\\desktop\\_pms07swzsr4omrqc.wav")) returned 0x20 [0136.324] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav", dwFileAttributes=0x20) returned 1 [0136.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav" (normalized: "c:\\users\\eebsym5\\desktop\\_pms07swzsr4omrqc.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x55c [0136.325] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0xbedf804 | out: lpFileSize=0xbedf804*=56133) returned 1 [0136.325] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0xdb41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.325] ReadFile (in: hFile=0x55c, lpBuffer=0xbedf7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbedf7f0, lpOverlapped=0x0 | out: lpBuffer=0xbedf7e0*, lpNumberOfBytesRead=0xbedf7f0*=0x4, lpOverlapped=0x0) returned 1 [0136.328] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0136.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37c8 [0136.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0136.328] NtQuerySystemTime (in: CurrentTime=0xbedf778 | out: CurrentTime=0xbedf778*=132482710449948000) returned 0x0 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5d62acb [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x37b2c9b6 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x6b8d724e [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5697c378 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x4eba1e91 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x4a6b4a2 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x22dd2f3f [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x291e8db6 [0136.328] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x78245129 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x22d21e2a [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x2c474c5f [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5df0ec4e [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x4c88e05e [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x6b6c7c17 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x15abb7ec [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x18ce5178 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5eac76ae [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x11ee317c [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x77f024df [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x156dd0f0 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x6a66383c [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x3856fc79 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x6bf78c7e [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x4d00b7d [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x49c262f9 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5a863fb [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5a03ccd6 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x3176a519 [0136.329] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x1e5101e9 [0136.330] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0xd724ad1 [0136.330] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x7af3625f [0136.330] RtlRandomEx (in: Seed=0xbedf770 | out: Seed=0xbedf770) returned 0x5ddfea56 [0136.357] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.357] ReadFile (in: hFile=0x55c, lpBuffer=0x6828160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbedf778, lpOverlapped=0x0 | out: lpBuffer=0x6828160*, lpNumberOfBytesRead=0xbedf778*=0x3c00, lpOverlapped=0x0) returned 1 [0136.358] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ebb0 [0136.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0136.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0136.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682bd68 [0136.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3598 [0136.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0136.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0136.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebb0) returned 1 [0136.359] WriteFile (in: hFile=0x55c, lpBuffer=0x682bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbedf778, lpOverlapped=0x0 | out: lpBuffer=0x682bd68*, lpNumberOfBytesWritten=0xbedf778*=0x3c00, lpOverlapped=0x0) returned 1 [0136.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd68) returned 1 [0136.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828160) returned 1 [0136.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f4c0 [0136.554] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.554] WriteFile (in: hFile=0x55c, lpBuffer=0x3d54b88*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbedf7f8, lpOverlapped=0x0 | out: lpBuffer=0x3d54b88*, lpNumberOfBytesWritten=0xbedf7f8*=0x11c, lpOverlapped=0x0) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54b88) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f700) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f4c0) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3598) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0136.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0136.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1dc88 [0136.618] wcscpy (in: _Dest=0x3f1dc88, _Source="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav" [0136.618] wcscat (in: _Dest=0x3f1dc88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav.ac3a86" [0136.618] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav.ac3a86", NtPathName=0xbedf770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\_pMs07SwzsR4omRQC.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbd78 [0136.783] FlushFileBuffers (hFile=0x55c) returned 1 [0136.846] CloseHandle (hObject=0x55c) returned 1 [0136.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0136.847] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.847] wcscat (in: _Dest=0x2fe6ea8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 [0136.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 Thread: id = 582 os_tid = 0xe30 [0136.360] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\_q e6fifj0kzcfuz1bs.pptx")) returned 0x20 [0136.360] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx", dwFileAttributes=0x20) returned 1 [0136.361] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx" (normalized: "c:\\users\\eebsym5\\desktop\\_q e6fifj0kzcfuz1bs.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c8 [0136.361] GetFileSizeEx (in: hFile=0x12c8, lpFileSize=0xb4cfcec | out: lpFileSize=0xb4cfcec*=48908) returned 1 [0136.361] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0xbf08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.361] ReadFile (in: hFile=0x12c8, lpBuffer=0xb4cfcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4cfcd8, lpOverlapped=0x0 | out: lpBuffer=0xb4cfcc8*, lpNumberOfBytesRead=0xb4cfcd8*=0x4, lpOverlapped=0x0) returned 1 [0136.363] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0136.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0136.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0136.364] NtQuerySystemTime (in: CurrentTime=0xb4cfc60 | out: CurrentTime=0xb4cfc60*=132482710450260000) returned 0x0 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x79ed1128 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x38341c03 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xd39e0cb [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x34a30ff7 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x45477246 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x2aee3b80 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x5ff1f5 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x130d4e60 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xd06d360 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x5f50cb18 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xd29ed69 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xe80b369 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x7945a676 [0136.364] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x2b0cb3c4 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x7ca3899c [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x796e3e10 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x39632171 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xe2b01e9 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x6eaef4c7 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x5e4ddd5d [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xe002929 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x7f102378 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x1f9c903 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x5cab2977 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x3d3ab19f [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x625a03fd [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x78de39a7 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0xa3caca8 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x791a4b66 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x3a345074 [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x1a28f81d [0136.365] RtlRandomEx (in: Seed=0xb4cfc58 | out: Seed=0xb4cfc58) returned 0x7940fc89 [0136.377] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.378] ReadFile (in: hFile=0x12c8, lpBuffer=0x6780950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4cfc60, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesRead=0xb4cfc60*=0x3c00, lpOverlapped=0x0) returned 1 [0136.378] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e419c0 [0136.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0136.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0136.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x678bd68 [0136.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0136.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ec0 [0136.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0136.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e419c0) returned 1 [0136.379] WriteFile (in: hFile=0x12c8, lpBuffer=0x678bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4cfc60, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesWritten=0xb4cfc60*=0x3c00, lpOverlapped=0x0) returned 1 [0136.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0136.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0136.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e39450 [0136.560] SetFilePointerEx (in: hFile=0x12c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.560] WriteFile (in: hFile=0x12c8, lpBuffer=0x66cc198*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb4cfce0, lpOverlapped=0x0 | out: lpBuffer=0x66cc198*, lpNumberOfBytesWritten=0xb4cfce0*=0x122, lpOverlapped=0x0) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cc198) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e410c0) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39450) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0136.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0136.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0136.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f9f0 [0136.622] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx") returned="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx" [0136.622] wcscat (in: _Dest=0x3e0f9f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx.ac3a86" [0136.622] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx.ac3a86", NtPathName=0xb4cfc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\_Q E6fiFj0kZcfuZ1bS.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbe08 [0136.787] FlushFileBuffers (hFile=0x12c8) returned 1 [0136.807] CloseHandle (hObject=0x12c8) returned 1 [0136.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0136.808] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0136.808] wcscat (in: _Dest=0x2fe6548, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" [0136.808] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\ac3a86-readme.txt")) returned 0x20 [0136.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 [0136.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 Thread: id = 583 os_tid = 0xee8 [0136.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e688 [0136.380] wcscpy (in: _Dest=0x3d8e688, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0136.380] wcscat (in: _Dest=0x3d8e688, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0136.380] wcscat (in: _Dest=0x3d8e688, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*" [0136.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0136.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0136.383] wcscmp (_String1=".", _String2=".") returned 0 [0136.383] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.383] wcscmp (_String1="..", _String2=".") returned 1 [0136.383] wcscmp (_String1="..", _String2="..") returned 0 [0136.383] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0136.383] wcscmp (_String1="1036", _String2=".") returned 1 [0136.383] wcscmp (_String1="1036", _String2="..") returned 1 [0136.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e6f0 [0136.383] wcscpy (in: _Dest=0x3d8e6f0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0136.383] wcscat (in: _Dest=0x3d8e6f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0136.383] wcscat (in: _Dest=0x3d8e6f0, _Source="1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0139.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0139.248] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0139.248] wcscmp (_String1="3082", _String2=".") returned 1 [0139.248] wcscmp (_String1="3082", _String2="..") returned 1 [0139.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd788 [0139.249] wcscpy (in: _Dest=0x66cd788, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0139.249] wcscat (in: _Dest=0x66cd788, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0139.249] wcscat (in: _Dest=0x66cd788, _Source="3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0139.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66cd788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0139.250] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0139.250] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0139.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0139.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 [0139.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 584 os_tid = 0xe6c [0136.384] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 0x20 [0136.446] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", dwFileAttributes=0x20) returned 1 [0136.447] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1268 [0136.447] GetFileSizeEx (in: hFile=0x1268, lpFileSize=0xc1ffad4 | out: lpFileSize=0xc1ffad4*=8414449) returned 1 [0136.447] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x8064ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.447] ReadFile (in: hFile=0x1268, lpBuffer=0xc1ffab0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc1ffac0, lpOverlapped=0x0 | out: lpBuffer=0xc1ffab0*, lpNumberOfBytesRead=0xc1ffac0*=0x4, lpOverlapped=0x0) returned 1 [0136.555] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0136.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429e8 [0136.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429c0 [0136.555] NtQuerySystemTime (in: CurrentTime=0xc1ffa48 | out: CurrentTime=0xc1ffa48*=132482710452132000) returned 0x0 [0136.555] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x23ede884 [0136.555] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x421463d2 [0136.555] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x1312e836 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x62726ac0 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x7471813 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0xf0bfc3c [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x25441d84 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x5c0a45c2 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x2a35d75f [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x5105156c [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x2e70cc2f [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x471c3b5e [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x4b99a1cd [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x3537c18d [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x59c6d7d4 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x4e178dae [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0xc26e1e7 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x5b03dc6f [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x62fca10f [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x6542110 [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x3680fcae [0136.556] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x2f86916f [0136.806] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x39ba5986 [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x21ce5a6b [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x7d5a841c [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x50550a37 [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x51998fd [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x3782c292 [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x24333df9 [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x39e1af75 [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x72daaccd [0136.848] RtlRandomEx (in: Seed=0xc1ffa40 | out: Seed=0xc1ffa40) returned 0x7d004e6c [0136.859] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.859] ReadFile (in: hFile=0x1268, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0136.915] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0136.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0136.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0136.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0136.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0136.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0136.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0136.916] WriteFile (in: hFile=0x1268, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0138.216] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.216] ReadFile (in: hFile=0x1268, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.224] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0138.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0138.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0138.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0138.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.225] WriteFile (in: hFile=0x1268, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0138.655] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.655] ReadFile (in: hFile=0x1268, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.660] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0138.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6886518 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0138.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0138.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.661] WriteFile (in: hFile=0x1268, lpBuffer=0x6886518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc1ffa48, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesWritten=0xc1ffa48*=0x3c00, lpOverlapped=0x0) returned 1 [0139.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0139.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e688 [0139.310] SetFilePointerEx (in: hFile=0x1268, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.310] WriteFile (in: hFile=0x1268, lpBuffer=0x354340*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xc1ffac8, lpOverlapped=0x0 | out: lpBuffer=0x354340*, lpNumberOfBytesWritten=0xc1ffac8*=0x148, lpOverlapped=0x0) returned 1 [0139.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354340) returned 1 [0139.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0139.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0139.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0139.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 [0139.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0139.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0139.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0139.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d6e8 [0139.920] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" [0139.920] wcscat (in: _Dest=0x3f1d6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.ac3a86") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.ac3a86" [0139.920] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.ac3a86", NtPathName=0xc1ffa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcca8 [0139.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 [0139.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3708) returned 1 [0139.964] NtQueryInformationFile (in: FileHandle=0x1268, IoStatusBlock=0xc1ffa18, FileInformation=0xc1ffa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc1ffa18, FileInformation=0xc1ffa20) returned 0x0 [0139.964] NtSetInformationFile (FileHandle=0x1268, IoStatusBlock=0xc1ffa18, FileInformation=0xc1ffa20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0139.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0139.969] FlushFileBuffers (hFile=0x1268) returned 1 [0139.983] CloseHandle (hObject=0x1268) returned 1 [0139.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d6e8 [0139.985] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0139.985] wcscat (in: _Dest=0x3f1d6e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" [0139.985] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\ac3a86-readme.txt")) returned 0x20 [0139.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0139.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 Thread: id = 585 os_tid = 0xe60 [0136.388] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 0x20 [0136.418] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", dwFileAttributes=0x20) returned 1 [0136.418] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x129c [0136.418] GetFileSizeEx (in: hFile=0x129c, lpFileSize=0xb55fddc | out: lpFileSize=0xb55fddc*=4113874) returned 1 [0136.418] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x3ec5ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.418] ReadFile (in: hFile=0x129c, lpBuffer=0xb55fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb55fdc8, lpOverlapped=0x0 | out: lpBuffer=0xb55fdb8*, lpNumberOfBytesRead=0xb55fdc8*=0x4, lpOverlapped=0x0) returned 1 [0136.422] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0136.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f88 [0136.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0136.422] NtQuerySystemTime (in: CurrentTime=0xb55fd50 | out: CurrentTime=0xb55fd50*=132482710450884000) returned 0x0 [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x67d6e32f [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0xcd43be9 [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x20f9f6ce [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x1913c960 [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x194e866e [0136.422] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x7d946b59 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x25db1fcb [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x74ca88b5 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x46f185a3 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0xd7f9ee9 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x63cfbde1 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x60f80151 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x174e8e3c [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x1cd277c1 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x1e60391d [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x7b529d08 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0xe15aca3 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x6c225b76 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x1ff664c7 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x636cb945 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x7c26b286 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x502730ff [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x7bd40581 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x78a7542a [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x7933942d [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x1a8da969 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x3049a44 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x4d43ba41 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0xc560786 [0136.423] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x559a804b [0136.424] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x46c26fed [0136.424] RtlRandomEx (in: Seed=0xb55fd48 | out: Seed=0xb55fd48) returned 0x268f38a9 [0136.437] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.437] ReadFile (in: hFile=0x129c, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0136.440] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41030 [0136.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0136.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0136.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0136.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41030) returned 1 [0136.441] WriteFile (in: hFile=0x129c, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0137.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0137.650] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.651] ReadFile (in: hFile=0x129c, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0137.654] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x301038 [0137.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0137.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0137.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0137.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0137.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e78 [0137.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e78) returned 1 [0137.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301038) returned 1 [0137.655] WriteFile (in: hFile=0x129c, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0137.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0137.677] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.677] ReadFile (in: hFile=0x129c, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0137.678] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x301038 [0137.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0137.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0137.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ea0 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ea0) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301038) returned 1 [0137.679] WriteFile (in: hFile=0x129c, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb55fd50, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xb55fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0138.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0138.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8db28 [0138.273] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.273] WriteFile (in: hFile=0x129c, lpBuffer=0x3e62d48*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0xb55fdd0, lpOverlapped=0x0 | out: lpBuffer=0x3e62d48*, lpNumberOfBytesWritten=0xb55fdd0*=0x16c, lpOverlapped=0x0) returned 1 [0138.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62d48) returned 1 [0138.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62290) returned 1 [0138.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0138.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62380) returned 1 [0138.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8db28) returned 1 [0138.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f88) returned 1 [0138.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43000) returned 1 [0138.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43078) returned 1 [0138.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30cd0 [0138.276] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" [0138.276] wcscat (in: _Dest=0x3e30cd0, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.ac3a86") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.ac3a86" [0138.276] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.ac3a86", NtPathName=0xb55fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0138.280] FlushFileBuffers (hFile=0x129c) returned 1 [0139.052] CloseHandle (hObject=0x129c) returned 1 [0139.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014e78 [0139.424] wcscpy (in: _Dest=0x3014e78, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0139.424] wcscat (in: _Dest=0x3014e78, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" [0139.424] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\ac3a86-readme.txt")) returned 0xffffffff [0139.424] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb70 [0139.539] WriteFile (in: hFile=0xb70, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb55fd64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb55fd64*=0x8b9, lpOverlapped=0x0) returned 1 [0139.542] CloseHandle (hObject=0xb70) returned 1 [0139.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0139.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db6b8) returned 1 Thread: id = 586 os_tid = 0xa8c [0136.389] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 0x20 [0136.442] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", dwFileAttributes=0x20) returned 1 [0136.442] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1260 [0136.443] GetFileSizeEx (in: hFile=0x1260, lpFileSize=0xc23fdf4 | out: lpFileSize=0xc23fdf4*=4842585) returned 1 [0136.443] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x49e455, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.443] ReadFile (in: hFile=0x1260, lpBuffer=0xc23fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc23fde0, lpOverlapped=0x0 | out: lpBuffer=0xc23fdd0*, lpNumberOfBytesRead=0xc23fde0*=0x4, lpOverlapped=0x0) returned 1 [0136.468] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43190 [0136.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0136.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e20 [0136.469] NtQuerySystemTime (in: CurrentTime=0xc23fd68 | out: CurrentTime=0xc23fd68*=132482710451352000) returned 0x0 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x2e6ca543 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x2937aa7b [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x60870e64 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x7b64a5e3 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x190d1686 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x2df7ee70 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x4da47e20 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x1efc73f2 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x40ace9c1 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0xeb41bff [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0xc7e8a69 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x1cd735ac [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x4b2643d9 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x523fd8bb [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x36f57e7e [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0xa73249c [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x5c6fdd8d [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x601d63f6 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x719a0782 [0136.469] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x451c7357 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x7fea95fb [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x60194116 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x51d34213 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x5a90faf6 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0xb2b4012 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x6b4668a3 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x2ed23c58 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x1f7da439 [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x2fa2b5ba [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x5f4dbf6f [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x49e149d [0136.470] RtlRandomEx (in: Seed=0xc23fd60 | out: Seed=0xc23fd60) returned 0x4e5e86de [0136.480] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.480] ReadFile (in: hFile=0x1260, lpBuffer=0x6882910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0136.912] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6886518 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0136.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0136.913] WriteFile (in: hFile=0x1260, lpBuffer=0x6886518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesWritten=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0138.226] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.226] ReadFile (in: hFile=0x1260, lpBuffer=0x6882910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.230] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b45e0 [0138.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0138.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0138.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6886518 [0138.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0138.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0138.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0138.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b45e0) returned 1 [0138.231] WriteFile (in: hFile=0x1260, lpBuffer=0x6886518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesWritten=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0138.659] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.661] ReadFile (in: hFile=0x1260, lpBuffer=0x6882910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.719] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0138.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682bd68 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4380 [0138.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0138.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0138.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.720] WriteFile (in: hFile=0x1260, lpBuffer=0x682bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc23fd68, lpOverlapped=0x0 | out: lpBuffer=0x682bd68*, lpNumberOfBytesWritten=0xc23fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd68) returned 1 [0139.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cc88 [0139.315] SetFilePointerEx (in: hFile=0x1260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.315] WriteFile (in: hFile=0x1260, lpBuffer=0x34cc08*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xc23fde8, lpOverlapped=0x0 | out: lpBuffer=0x34cc08*, lpNumberOfBytesWritten=0xc23fde8*=0x14e, lpOverlapped=0x0) returned 1 [0139.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34cc08) returned 1 [0139.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a1f0) returned 1 [0139.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0139.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a1b8) returned 1 [0139.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cc88) returned 1 [0139.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0139.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0139.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0139.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f670 [0139.935] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" [0139.935] wcscat (in: _Dest=0x3e0f670, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.ac3a86") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.ac3a86" [0139.935] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.ac3a86", NtPathName=0xc23fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcdc8 [0140.007] FlushFileBuffers (hFile=0x1260) returned 1 [0140.053] CloseHandle (hObject=0x1260) returned 1 [0140.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d760 [0140.054] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0140.054] wcscat (in: _Dest=0x3f1d760, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" [0140.054] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\ac3a86-readme.txt")) returned 0x20 [0140.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0140.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e54f8) returned 1 Thread: id = 587 os_tid = 0xe64 [0136.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\7nlhh5mg56r0bo.bmp")) returned 0x20 [0136.390] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp", dwFileAttributes=0x20) returned 1 [0136.391] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\7nlhh5mg56r0bo.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1298 [0136.391] GetFileSizeEx (in: hFile=0x1298, lpFileSize=0xc2ffd84 | out: lpFileSize=0xc2ffd84*=50440) returned 1 [0136.391] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0xc504, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.391] ReadFile (in: hFile=0x1298, lpBuffer=0xc2ffd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc2ffd70, lpOverlapped=0x0 | out: lpBuffer=0xc2ffd60*, lpNumberOfBytesRead=0xc2ffd70*=0x4, lpOverlapped=0x0) returned 1 [0136.394] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0136.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0136.394] NtQuerySystemTime (in: CurrentTime=0xc2ffcf8 | out: CurrentTime=0xc2ffcf8*=132482710450572000) returned 0x0 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x5844fc37 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x6ff98b45 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x49ee03dc [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x578a63c0 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x1aaa330d [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x5a5761c6 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x7cc43467 [0136.394] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x254dd485 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x9e23f3a [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x7c7937e9 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x51149183 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x643ffadb [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x3d0ae1bb [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x78b91a17 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0xb875749 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x68981ed8 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x370ffb42 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x7c0ca75a [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x64b70895 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x3c9bd700 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x6e21a981 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x5ad7dce3 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x226bcd [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x265014f0 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x49b7bf03 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x7bd4d95f [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x758afe80 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x3c11a46f [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x656d4450 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x836db10 [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x181740c [0136.395] RtlRandomEx (in: Seed=0xc2ffcf0 | out: Seed=0xc2ffcf0) returned 0x374f3a77 [0136.407] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.407] ReadFile (in: hFile=0x1298, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc2ffcf8, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0xc2ffcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.408] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41030 [0136.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0136.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0136.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f60 [0136.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f60) returned 1 [0136.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41030) returned 1 [0136.416] WriteFile (in: hFile=0x1298, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc2ffcf8, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0xc2ffcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0136.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0136.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f6c0 [0136.562] SetFilePointerEx (in: hFile=0x1298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.562] WriteFile (in: hFile=0x1298, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xc2ffd78, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0xc2ffd78*=0x116, lpOverlapped=0x0) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f680) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f6c0) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0136.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0136.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0136.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0136.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d730 [0136.626] wcscpy (in: _Dest=0x3e5d730, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp" [0136.626] wcscat (in: _Dest=0x3e5d730, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp.ac3a86" [0136.626] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp.ac3a86", NtPathName=0xc2ffcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\7nlhh5mG56r0bo.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3321a8 [0136.670] FlushFileBuffers (hFile=0x1298) returned 1 [0136.689] CloseHandle (hObject=0x1298) returned 1 [0136.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ecf0 [0136.690] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0136.690] wcscat (in: _Dest=0x3e0ecf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0136.690] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0xffffffff [0136.690] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1298 [0136.691] WriteFile (in: hFile=0x1298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc2ffd0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc2ffd0c*=0x8b9, lpOverlapped=0x0) returned 1 [0136.694] CloseHandle (hObject=0x1298) returned 1 [0136.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0136.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 588 os_tid = 0xe68 [0136.451] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\9cguc6xy8gr6pzdptm0s.jpg")) returned 0x20 [0136.451] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg", dwFileAttributes=0x20) returned 1 [0136.451] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\9cguc6xy8gr6pzdptm0s.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe90 [0136.452] GetFileSizeEx (in: hFile=0xe90, lpFileSize=0xc38fbfc | out: lpFileSize=0xc38fbfc*=94522) returned 1 [0136.452] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x17136, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.452] ReadFile (in: hFile=0xe90, lpBuffer=0xc38fbd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc38fbe8, lpOverlapped=0x0 | out: lpBuffer=0xc38fbd8*, lpNumberOfBytesRead=0xc38fbe8*=0x4, lpOverlapped=0x0) returned 1 [0136.454] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0136.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43190 [0136.455] NtQuerySystemTime (in: CurrentTime=0xc38fb70 | out: CurrentTime=0xc38fb70*=132482710451196000) returned 0x0 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x25af8dc [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x1bda08f2 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x322f97c1 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x37d4486b [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x6c2498a2 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x7b22fa71 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x71c84cfc [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x128b9400 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x47cfc85d [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x1268b7fd [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x651f201a [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x3d408509 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x1e082e95 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x6aed3026 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x113ce727 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x629a8c56 [0136.455] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x31df828d [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x112221aa [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x2b907370 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x73d79028 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x2dc9ca30 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x3e396c2a [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x41a214a2 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x7363e92f [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x148ec354 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x12ed65bd [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x49ad26fb [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x3efa2ea7 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x1f1a4460 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x71284389 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x33c68a55 [0136.456] RtlRandomEx (in: Seed=0xc38fb68 | out: Seed=0xc38fb68) returned 0x7801fec6 [0136.466] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.466] ReadFile (in: hFile=0xe90, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.466] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41780 [0136.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0136.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0136.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0136.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0136.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0136.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43190 [0136.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43190) returned 1 [0136.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0136.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0136.467] WriteFile (in: hFile=0xe90, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0136.575] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.575] ReadFile (in: hFile=0xe90, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.575] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41780 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435f0 [0136.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d435f0) returned 1 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d435f0 [0136.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0136.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0136.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0136.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0136.576] WriteFile (in: hFile=0xe90, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0136.578] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x1353a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.578] ReadFile (in: hFile=0xe90, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.578] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x1353a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41780 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0136.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43618) returned 1 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43618 [0136.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436b8 [0136.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436b8) returned 1 [0136.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0136.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0136.579] WriteFile (in: hFile=0xe90, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc38fb70, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0xc38fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0136.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0136.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e8f8 [0136.581] SetFilePointerEx (in: hFile=0xe90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.581] WriteFile (in: hFile=0xe90, lpBuffer=0x3e63618*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0xc38fbf0, lpOverlapped=0x0 | out: lpBuffer=0x3e63618*, lpNumberOfBytesWritten=0xc38fbf0*=0x162, lpOverlapped=0x0) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63618) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358d80) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e8f8) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0136.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0136.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0136.628] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg" [0136.628] wcscat (in: _Dest=0x2ff72c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg.ac3a86" [0136.628] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg.ac3a86", NtPathName=0xc38fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\9CguC6xY8GR6PzdPtM0s.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35c30 [0136.733] FlushFileBuffers (hFile=0xe90) returned 1 [0136.793] CloseHandle (hObject=0xe90) returned 1 [0136.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d5d0 [0136.804] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0136.804] wcscat (in: _Dest=0x3e0d5d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0136.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0x20 [0136.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0136.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 589 os_tid = 0xe5c [0136.862] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\anr9s.gif")) returned 0x20 [0136.862] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif", dwFileAttributes=0x20) returned 1 [0136.863] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\anr9s.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x55c [0136.863] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x86afa1c | out: lpFileSize=0x86afa1c*=92696) returned 1 [0136.863] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x16a14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.863] ReadFile (in: hFile=0x55c, lpBuffer=0x86af9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x86afa08, lpOverlapped=0x0 | out: lpBuffer=0x86af9f8*, lpNumberOfBytesRead=0x86afa08*=0x4, lpOverlapped=0x0) returned 1 [0136.865] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0136.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429c0 [0136.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0136.865] NtQuerySystemTime (in: CurrentTime=0x86af990 | out: CurrentTime=0x86af990*=132482710455252000) returned 0x0 [0136.865] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0xc28d8e9 [0136.865] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x7465a43c [0136.865] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x1e2b50c4 [0136.865] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x7374fe60 [0136.865] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x3deef86a [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x3c8052ba [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x15852302 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0xbfe0029 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x25162c2e [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x1ee13982 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x303a040f [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0xa6f2179 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x64e5d6eb [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x7979fd2c [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x775607d3 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x617ec4a4 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x65478e22 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x7ced569 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x2011f6a0 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x1bf372dd [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x62f99a65 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x13f47e36 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x1cf0100d [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x4c8dc482 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x41c5b542 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x5cc2b892 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x3e6470df [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x750ca43e [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x4fa75fe3 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0xa0d9a4a [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x5d3bfbb5 [0136.866] RtlRandomEx (in: Seed=0x86af988 | out: Seed=0x86af988) returned 0x37343060 [0136.909] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.909] ReadFile (in: hFile=0x55c, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.910] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0136.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0136.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42df8 [0136.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0136.911] WriteFile (in: hFile=0x55c, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0136.935] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.935] ReadFile (in: hFile=0x55c, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.936] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ebf8 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0136.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0136.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0136.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebf8) returned 1 [0136.937] WriteFile (in: hFile=0x55c, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0136.940] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x12e18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.941] ReadFile (in: hFile=0x55c, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.941] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x12e18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5efe8 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0136.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0136.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0136.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0136.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efe8) returned 1 [0136.942] WriteFile (in: hFile=0x55c, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86af990, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x86af990*=0x3c00, lpOverlapped=0x0) returned 1 [0136.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0136.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef268 [0136.967] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.967] WriteFile (in: hFile=0x55c, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x86afa10, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0x86afa10*=0x144, lpOverlapped=0x0) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0136.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32c660 [0136.998] wcscpy (in: _Dest=0x32c660, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif" [0136.998] wcscat (in: _Dest=0x32c660, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif.ac3a86" [0136.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif.ac3a86", NtPathName=0x86af988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\Anr9s.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c6e8 [0137.001] FlushFileBuffers (hFile=0x55c) returned 1 [0137.008] CloseHandle (hObject=0x55c) returned 1 [0137.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0137.009] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0137.009] wcscat (in: _Dest=0x3e0e930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0137.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0x20 [0137.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0137.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 Thread: id = 590 os_tid = 0x6f0 [0136.917] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\fkfaf2.gif")) returned 0x20 [0136.918] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif", dwFileAttributes=0x20) returned 1 [0136.918] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\fkfaf2.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12d4 [0136.918] GetFileSizeEx (in: hFile=0x12d4, lpFileSize=0xc0df82c | out: lpFileSize=0xc0df82c*=68675) returned 1 [0136.918] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x10c3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.918] ReadFile (in: hFile=0x12d4, lpBuffer=0xc0df808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0df818, lpOverlapped=0x0 | out: lpBuffer=0xc0df808*, lpNumberOfBytesRead=0xc0df818*=0x4, lpOverlapped=0x0) returned 1 [0136.920] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0136.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0136.921] NtQuerySystemTime (in: CurrentTime=0xc0df7a0 | out: CurrentTime=0xc0df7a0*=132482710455876000) returned 0x0 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x4b0b268e [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x60f451f7 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x5d666988 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x359d9508 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x35fa7c1a [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x700fee91 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x353c2095 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x11abc5d8 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x32b7890 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x6206966d [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x66c54556 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x7237269 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x60f98225 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x7f81f460 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x6e6e6f03 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x32e40667 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x70e5b44f [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x6135ec76 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x7b3fd0bd [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0xaab5ebc [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x6c9fd949 [0136.921] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x5d3e8dca [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x30e3015e [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0xbaf663 [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x2d7837fe [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x6311a338 [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0xc77d435 [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x4fb77bdc [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x5429f49b [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x7d7239d9 [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x62b83915 [0136.922] RtlRandomEx (in: Seed=0xc0df798 | out: Seed=0xc0df798) returned 0x43e76cca [0136.932] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.932] ReadFile (in: hFile=0x12d4, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0df7a0, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0xc0df7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.932] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ebf8 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0136.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0136.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0136.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0136.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0136.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebf8) returned 1 [0136.933] WriteFile (in: hFile=0x12d4, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0df7a0, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0xc0df7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0136.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0136.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5600 [0136.940] SetFilePointerEx (in: hFile=0x12d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.940] WriteFile (in: hFile=0x12d4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xc0df820, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xc0df820*=0x106, lpOverlapped=0x0) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54b0) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0136.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0136.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0136.962] wcscpy (in: _Dest=0x32c660, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif" [0136.962] wcscat (in: _Dest=0x32c660, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif.ac3a86" [0136.962] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif.ac3a86", NtPathName=0xc0df798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\fkFAf2.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0136.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0136.965] FlushFileBuffers (hFile=0x12d4) returned 1 [0136.994] CloseHandle (hObject=0x12d4) returned 1 [0136.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0136.995] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0136.995] wcscat (in: _Dest=0x3e0e930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0136.995] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0x20 [0136.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0136.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db748) returned 1 Thread: id = 591 os_tid = 0xb04 [0136.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d5d0 [0136.938] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0136.938] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0136.938] wcscat (in: _Dest=0x3e0d5d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\*" [0136.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0136.938] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57da6c10, ftCreationTime.dwHighDateTime=0x1d5e224, ftLastAccessTime.dwLowDateTime=0x7b9dc9a0, ftLastAccessTime.dwHighDateTime=0x1d5df25, ftLastWriteTime.dwLowDateTime=0x7b9dc9a0, ftLastWriteTime.dwHighDateTime=0x1d5df25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0136.938] wcscmp (_String1=".", _String2=".") returned 0 [0136.938] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57da6c10, ftCreationTime.dwHighDateTime=0x1d5e224, ftLastAccessTime.dwLowDateTime=0x7b9dc9a0, ftLastAccessTime.dwHighDateTime=0x1d5df25, ftLastWriteTime.dwLowDateTime=0x7b9dc9a0, ftLastWriteTime.dwHighDateTime=0x1d5df25, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.938] wcscmp (_String1="..", _String2=".") returned 1 [0136.939] wcscmp (_String1="..", _String2="..") returned 0 [0136.939] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101f3150, ftCreationTime.dwHighDateTime=0x1d5dffc, ftLastAccessTime.dwLowDateTime=0x8168da00, ftLastAccessTime.dwHighDateTime=0x1d5dcc8, ftLastWriteTime.dwLowDateTime=0x8168da00, ftLastWriteTime.dwHighDateTime=0x1d5dcc8, nFileSizeHigh=0x0, nFileSizeLow=0x18720, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ByO.jpg", cAlternateFileName="")) returned 1 [0136.939] wcscmp (_String1="9ByO.jpg", _String2=".") returned 1 [0136.939] wcscmp (_String1="9ByO.jpg", _String2="..") returned 1 [0136.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0136.939] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0136.939] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0136.939] wcscat (in: _Dest=0x35c4d8, _Source="9ByO.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg" [0140.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0140.301] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc328d540, ftCreationTime.dwHighDateTime=0x1d5e7f3, ftLastAccessTime.dwLowDateTime=0x5d7d9a70, ftLastAccessTime.dwHighDateTime=0x1d5e3eb, ftLastWriteTime.dwLowDateTime=0x5d7d9a70, ftLastWriteTime.dwHighDateTime=0x1d5e3eb, nFileSizeHigh=0x0, nFileSizeLow=0x565e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A5KhyO_1.bmp", cAlternateFileName="")) returned 1 [0140.301] wcscmp (_String1="A5KhyO_1.bmp", _String2=".") returned 1 [0140.301] wcscmp (_String1="A5KhyO_1.bmp", _String2="..") returned 1 [0140.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff67f8 [0140.301] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.301] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.301] wcscat (in: _Dest=0x2ff67f8, _Source="A5KhyO_1.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp" [0140.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0140.302] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa506bfc0, ftCreationTime.dwHighDateTime=0x1d5e5b2, ftLastAccessTime.dwLowDateTime=0x79b09570, ftLastAccessTime.dwHighDateTime=0x1d5df6e, ftLastWriteTime.dwLowDateTime=0x79b09570, ftLastWriteTime.dwHighDateTime=0x1d5df6e, nFileSizeHigh=0x0, nFileSizeLow=0xa2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BVxe-BS4G6 6lL0WuFJm.jpg", cAlternateFileName="BVXE-B~1.JPG")) returned 1 [0140.303] wcscmp (_String1="BVxe-BS4G6 6lL0WuFJm.jpg", _String2=".") returned 1 [0140.303] wcscmp (_String1="BVxe-BS4G6 6lL0WuFJm.jpg", _String2="..") returned 1 [0140.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x338dd8 [0140.303] wcscpy (in: _Dest=0x338dd8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.303] wcscat (in: _Dest=0x338dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.303] wcscat (in: _Dest=0x338dd8, _Source="BVxe-BS4G6 6lL0WuFJm.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg" [0140.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x338dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0140.304] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fb999e0, ftCreationTime.dwHighDateTime=0x1d5e7b8, ftLastAccessTime.dwLowDateTime=0x7a319ae0, ftLastAccessTime.dwHighDateTime=0x1d5d950, ftLastWriteTime.dwLowDateTime=0x7a319ae0, ftLastWriteTime.dwHighDateTime=0x1d5d950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jt1JXxvtiJ", cAlternateFileName="JT1JXX~1")) returned 1 [0140.304] wcscmp (_String1="Jt1JXxvtiJ", _String2=".") returned 1 [0140.304] wcscmp (_String1="Jt1JXxvtiJ", _String2="..") returned 1 [0140.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6c48 [0140.305] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.305] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.305] wcscat (in: _Dest=0x2ff6c48, _Source="Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0140.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0140.306] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa291a8e0, ftCreationTime.dwHighDateTime=0x1d5e053, ftLastAccessTime.dwLowDateTime=0xd070b070, ftLastAccessTime.dwHighDateTime=0x1d5d87f, ftLastWriteTime.dwLowDateTime=0xd070b070, ftLastWriteTime.dwHighDateTime=0x1d5d87f, nFileSizeHigh=0x0, nFileSizeLow=0x5e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OuQIiA2FyQA59h0wYI6.bmp", cAlternateFileName="OUQIIA~1.BMP")) returned 1 [0140.306] wcscmp (_String1="OuQIiA2FyQA59h0wYI6.bmp", _String2=".") returned 1 [0140.306] wcscmp (_String1="OuQIiA2FyQA59h0wYI6.bmp", _String2="..") returned 1 [0140.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x338278 [0140.306] wcscpy (in: _Dest=0x338278, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.306] wcscat (in: _Dest=0x338278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.306] wcscat (in: _Dest=0x338278, _Source="OuQIiA2FyQA59h0wYI6.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp" [0140.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x338278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0140.309] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc00a3c20, ftCreationTime.dwHighDateTime=0x1d5db3a, ftLastAccessTime.dwLowDateTime=0x4a893ce0, ftLastAccessTime.dwHighDateTime=0x1d5e304, ftLastWriteTime.dwLowDateTime=0x4a893ce0, ftLastWriteTime.dwHighDateTime=0x1d5e304, nFileSizeHigh=0x0, nFileSizeLow=0xdc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="QNBKmrmWsfIjQBIXhdv.jpg", cAlternateFileName="QNBKMR~1.JPG")) returned 1 [0140.309] wcscmp (_String1="QNBKmrmWsfIjQBIXhdv.jpg", _String2=".") returned 1 [0140.309] wcscmp (_String1="QNBKmrmWsfIjQBIXhdv.jpg", _String2="..") returned 1 [0140.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x338ea8 [0140.309] wcscpy (in: _Dest=0x338ea8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.309] wcscat (in: _Dest=0x338ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.309] wcscat (in: _Dest=0x338ea8, _Source="QNBKmrmWsfIjQBIXhdv.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg" [0140.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x338ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0140.310] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18209eb0, ftCreationTime.dwHighDateTime=0x1d5de18, ftLastAccessTime.dwLowDateTime=0x3513e620, ftLastAccessTime.dwHighDateTime=0x1d5da90, ftLastWriteTime.dwLowDateTime=0x3513e620, ftLastWriteTime.dwHighDateTime=0x1d5da90, nFileSizeHigh=0x0, nFileSizeLow=0x12cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="QnQi_yLBb zDFcVbHN.png", cAlternateFileName="QNQI_Y~1.PNG")) returned 1 [0140.310] wcscmp (_String1="QnQi_yLBb zDFcVbHN.png", _String2=".") returned 1 [0140.311] wcscmp (_String1="QnQi_yLBb zDFcVbHN.png", _String2="..") returned 1 [0140.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35b60 [0140.311] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.311] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.311] wcscat (in: _Dest=0x3e35b60, _Source="QnQi_yLBb zDFcVbHN.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png" [0140.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0140.313] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555f4c30, ftCreationTime.dwHighDateTime=0x1d5dacc, ftLastAccessTime.dwLowDateTime=0xbfdfd350, ftLastAccessTime.dwHighDateTime=0x1d5d922, ftLastWriteTime.dwLowDateTime=0xbfdfd350, ftLastWriteTime.dwHighDateTime=0x1d5d922, nFileSizeHigh=0x0, nFileSizeLow=0xb650, dwReserved0=0x0, dwReserved1=0x0, cFileName="vNDPan.gif", cAlternateFileName="")) returned 1 [0140.313] wcscmp (_String1="vNDPan.gif", _String2=".") returned 1 [0140.313] wcscmp (_String1="vNDPan.gif", _String2="..") returned 1 [0140.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7e40 [0140.313] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.313] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.313] wcscat (in: _Dest=0x2ff7e40, _Source="vNDPan.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif" [0140.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0140.315] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d0335f0, ftCreationTime.dwHighDateTime=0x1d5d96d, ftLastAccessTime.dwLowDateTime=0x79c1bb10, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0x79c1bb10, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0x182a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_TU TqJuS2.bmp", cAlternateFileName="_TUTQJ~1.BMP")) returned 1 [0140.315] wcscmp (_String1="_TU TqJuS2.bmp", _String2=".") returned 1 [0140.315] wcscmp (_String1="_TU TqJuS2.bmp", _String2="..") returned 1 [0140.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3329e8 [0140.316] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t" [0140.316] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0140.316] wcscat (in: _Dest=0x3329e8, _Source="_TU TqJuS2.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp" [0140.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0140.317] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d0335f0, ftCreationTime.dwHighDateTime=0x1d5d96d, ftLastAccessTime.dwLowDateTime=0x79c1bb10, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0x79c1bb10, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0x182a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_TU TqJuS2.bmp", cAlternateFileName="_TUTQJ~1.BMP")) returned 0 [0140.317] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 592 os_tid = 0x150 [0136.943] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\rmjo_8i6g7dfxdd8t.png")) returned 0x20 [0136.943] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png", dwFileAttributes=0x20) returned 1 [0136.943] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\rmjo_8i6g7dfxdd8t.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11e0 [0136.943] GetFileSizeEx (in: hFile=0x11e0, lpFileSize=0xbd5fe64 | out: lpFileSize=0xbd5fe64*=89596) returned 1 [0136.943] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x15df8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.943] ReadFile (in: hFile=0x11e0, lpBuffer=0xbd5fe40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd5fe50, lpOverlapped=0x0 | out: lpBuffer=0xbd5fe40*, lpNumberOfBytesRead=0xbd5fe50*=0x4, lpOverlapped=0x0) returned 1 [0136.945] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0136.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0136.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0136.946] NtQuerySystemTime (in: CurrentTime=0xbd5fdd8 | out: CurrentTime=0xbd5fdd8*=132482710456032000) returned 0x0 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x7a4f0572 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x279dc4c [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x28ababf5 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x625297d6 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x60794ebe [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x663b41c2 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x15a769d1 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x23ffe39c [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x6b8cc68e [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x2d5a41c5 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x4fd56011 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x321d12e9 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x2a355f6a [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x1555936e [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x1c6de35e [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x70882fcc [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x547a2c74 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x6438c735 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x1e5498fc [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x70ea6040 [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x705add0e [0136.946] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x1009e721 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x7e474ee0 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x554508d4 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x18cf1ff5 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x3ebca87f [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x8dcd0f2 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x12149041 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x1ce189b3 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x69f957c0 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0xdf6bd10 [0136.947] RtlRandomEx (in: Seed=0xbd5fdd0 | out: Seed=0xbd5fdd0) returned 0x163152aa [0136.958] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.958] ReadFile (in: hFile=0x11e0, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.958] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f198 [0136.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0136.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0136.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0136.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0136.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433c0 [0136.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0136.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0136.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0136.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f198) returned 1 [0136.959] WriteFile (in: hFile=0x11e0, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0136.991] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.991] ReadFile (in: hFile=0x11e0, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0136.992] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ed18 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b1c8 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0136.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0136.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0136.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0136.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ed18) returned 1 [0136.992] WriteFile (in: hFile=0x11e0, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0137.006] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x121fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.006] ReadFile (in: hFile=0x11e0, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.006] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x121fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e9b8 [0137.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0137.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0137.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0137.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0137.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0137.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e48 [0137.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0137.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0137.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e9b8) returned 1 [0137.007] WriteFile (in: hFile=0x11e0, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0xbd5fdd8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0137.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef268 [0137.018] SetFilePointerEx (in: hFile=0x11e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.018] WriteFile (in: hFile=0x11e0, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xbd5fe58, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xbd5fe58*=0x15c, lpOverlapped=0x0) returned 1 [0137.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0137.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fbc0) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433c0) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f700) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0137.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bd48 [0137.026] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png" [0137.026] wcscat (in: _Dest=0x35bd48, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png.ac3a86" [0137.026] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png.ac3a86", NtPathName=0xbd5fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\rmjO_8i6G7DfXDd8T.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3def5e0 [0137.029] FlushFileBuffers (hFile=0x11e0) returned 1 [0137.031] CloseHandle (hObject=0x11e0) returned 1 [0137.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0137.032] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0137.032] wcscat (in: _Dest=0x3e0e930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0137.032] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0x20 [0137.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0137.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 593 os_tid = 0x11c [0136.968] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\vhodoh.png")) returned 0x20 [0136.968] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png", dwFileAttributes=0x20) returned 1 [0136.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\vhodoh.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11d8 [0136.969] GetFileSizeEx (in: hFile=0x11d8, lpFileSize=0xc33fb5c | out: lpFileSize=0xc33fb5c*=1683) returned 1 [0136.969] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x68f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.969] ReadFile (in: hFile=0x11d8, lpBuffer=0xc33fb38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc33fb48, lpOverlapped=0x0 | out: lpBuffer=0xc33fb38*, lpNumberOfBytesRead=0xc33fb48*=0x4, lpOverlapped=0x0) returned 1 [0136.971] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0136.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0136.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0136.972] NtQuerySystemTime (in: CurrentTime=0xc33fad0 | out: CurrentTime=0xc33fad0*=132482710456344000) returned 0x0 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x5c79ff88 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x20e05518 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x6c624343 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x6c5c8348 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x43c14bf [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x650f623a [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0xfdc15c7 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x6aa047a1 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0xf853b34 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x4e9b6a [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x62ff3e86 [0136.972] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x3778765a [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x2823fce0 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x3ba0525c [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x25e3ec54 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x628677c3 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x52a27df1 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0xdd55069 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0xb27c469 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x662dd7f0 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x8e1ec36 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x6105ae76 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x7a1cd071 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x3f255a62 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x763fa292 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x116fc40 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x105666e8 [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x734e8b3e [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x2889c5ef [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x71f943fd [0136.973] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x68a1d619 [0136.974] RtlRandomEx (in: Seed=0xc33fac8 | out: Seed=0xc33fac8) returned 0x23ab6d8f [0136.988] ReadFile (in: hFile=0x11d8, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x693, lpNumberOfBytesRead=0xc33fac4, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0xc33fac4*=0x693, lpOverlapped=0x0) returned 1 [0136.988] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.988] WriteFile (in: hFile=0x11d8, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x693, lpNumberOfBytesWritten=0xc33fac8, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0xc33fac8*=0x693, lpOverlapped=0x0) returned 1 [0137.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0137.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429c0 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e9b8) returned 1 [0137.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5600 [0137.005] SetFilePointerEx (in: hFile=0x11d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.005] WriteFile (in: hFile=0x11d8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xc33fb50, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xc33fb50*=0x106, lpOverlapped=0x0) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54b0) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0137.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0137.013] wcscpy (in: _Dest=0x32c660, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png" [0137.013] wcscat (in: _Dest=0x32c660, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png.ac3a86" [0137.013] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png.ac3a86", NtPathName=0xc33fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\vhOdoH.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0137.016] FlushFileBuffers (hFile=0x11d8) returned 1 [0137.022] CloseHandle (hObject=0x11d8) returned 1 [0137.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0137.023] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\" [0137.023] wcscat (in: _Dest=0x3e0e930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" [0137.023] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\ac3a86-readme.txt")) returned 0x20 [0137.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0137.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 Thread: id = 594 os_tid = 0xef4 [0137.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e625b0 [0137.002] wcscpy (in: _Dest=0x3e625b0, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0137.002] wcscat (in: _Dest=0x3e625b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0137.002] wcscat (in: _Dest=0x3e625b0, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*" [0137.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0137.003] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0137.003] wcscmp (_String1=".", _String2=".") returned 0 [0137.003] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.003] wcscmp (_String1="..", _String2=".") returned 1 [0137.003] wcscmp (_String1="..", _String2="..") returned 0 [0137.003] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0137.004] wcscmp (_String1="Replicate", _String2=".") returned 1 [0137.004] wcscmp (_String1="Replicate", _String2="..") returned 1 [0137.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0137.004] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0137.004] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0137.004] wcscat (in: _Dest=0x2fe6ea8, _Source="Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0139.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0139.253] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0139.253] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0139.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0139.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e625b0) returned 1 [0139.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62600) returned 1 Thread: id = 595 os_tid = 0xb68 [0137.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0ae80 [0137.010] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0137.010] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0137.010] wcscat (in: _Dest=0x3e0ae80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*" [0137.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0137.011] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0137.011] wcscmp (_String1=".", _String2=".") returned 0 [0137.011] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.011] wcscmp (_String1="..", _String2=".") returned 1 [0137.011] wcscmp (_String1="..", _String2="..") returned 0 [0137.011] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0137.011] wcscmp (_String1="en-US", _String2=".") returned 1 [0137.011] wcscmp (_String1="en-US", _String2="..") returned 1 [0137.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1aac0 [0137.011] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0137.012] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0137.012] wcscat (in: _Dest=0x3f1aac0, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0139.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0139.256] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0139.256] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0139.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0139.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 [0139.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef540) returned 1 Thread: id = 596 os_tid = 0xb44 [0137.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff72c0 [0137.019] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0137.019] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0137.019] wcscat (in: _Dest=0x2ff72c0, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0137.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0137.019] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f300 [0137.020] wcscmp (_String1=".", _String2=".") returned 0 [0137.020] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.020] wcscmp (_String1="..", _String2=".") returned 1 [0137.020] wcscmp (_String1="..", _String2="..") returned 0 [0137.020] FindNextFileW (in: hFindFile=0x3f1f300, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.020] FindClose (in: hFindFile=0x3f1f300 | out: hFindFile=0x3f1f300) returned 1 [0137.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0137.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0137.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 Thread: id = 597 os_tid = 0xb64 [0137.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api")) returned 0x20 [0145.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0145.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.744] GetLastError () returned 0x5 [0145.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0145.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 598 os_tid = 0xb74 [0137.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a1d0 [0137.034] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0137.034] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0137.034] wcscat (in: _Dest=0x3d5a1d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*" [0137.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0137.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80a38 [0145.743] wcscmp (_String1=".", _String2=".") returned 0 [0145.743] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.743] wcscmp (_String1="..", _String2=".") returned 1 [0145.743] wcscmp (_String1="..", _String2="..") returned 0 [0145.743] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0145.743] wcscmp (_String1="adobepdf.xdc", _String2=".") returned 1 [0145.743] wcscmp (_String1="adobepdf.xdc", _String2="..") returned 1 [0145.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0eb10 [0145.743] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0145.743] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0145.743] wcscat (in: _Dest=0x3e0eb10, _Source="adobepdf.xdc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" [0150.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0150.321] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0150.321] wcscmp (_String1="PMP", _String2=".") returned 1 [0150.321] wcscmp (_String1="PMP", _String2="..") returned 1 [0150.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee960 [0150.321] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0150.321] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0150.321] wcscat (in: _Dest=0x66ee960, _Source="PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0150.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0150.322] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0150.323] FindClose (in: hFindFile=0x3e80a38 | out: hFindFile=0x3e80a38) returned 1 [0150.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0150.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 [0150.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 599 os_tid = 0x668 [0137.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api")) returned 0x20 [0145.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0145.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.694] GetLastError () returned 0x5 [0145.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0145.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee8d8) returned 1 Thread: id = 600 os_tid = 0x6c0 [0137.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc")) returned 0x20 [0145.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0145.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.741] GetLastError () returned 0x5 [0145.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0145.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 601 os_tid = 0xb84 [0137.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0137.039] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0137.039] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0137.039] wcscat (in: _Dest=0x66db7d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*" [0137.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0137.039] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0145.712] wcscmp (_String1=".", _String2=".") returned 0 [0145.712] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.712] wcscmp (_String1="..", _String2=".") returned 1 [0145.712] wcscmp (_String1="..", _String2="..") returned 0 [0145.712] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0145.712] wcscmp (_String1="Stamps", _String2=".") returned 1 [0145.712] wcscmp (_String1="Stamps", _String2="..") returned 1 [0145.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0145.713] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0145.713] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0145.713] wcscat (in: _Dest=0x3e322c8, _Source="Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0150.319] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0150.319] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0150.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0150.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0150.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 602 os_tid = 0xba0 [0137.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api")) returned 0x20 [0145.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0145.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.697] GetLastError () returned 0x5 [0145.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0145.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 603 os_tid = 0xb7c [0137.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api")) returned 0x20 [0145.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0145.078] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.079] GetLastError () returned 0x5 [0145.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0145.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 604 os_tid = 0xb78 [0137.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api")) returned 0x20 [0145.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0145.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.739] GetLastError () returned 0x5 [0145.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0145.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 605 os_tid = 0xb9c [0137.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api")) returned 0x20 [0145.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0145.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.737] GetLastError () returned 0x5 [0145.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0145.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5df0) returned 1 Thread: id = 606 os_tid = 0xb80 [0137.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api")) returned 0x20 [0145.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0145.735] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.735] GetLastError () returned 0x5 [0145.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0145.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 607 os_tid = 0x6b0 [0137.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api")) returned 0x20 [0145.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0145.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.733] GetLastError () returned 0x5 [0145.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0145.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 608 os_tid = 0xbd4 [0137.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api")) returned 0x20 [0145.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0145.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.731] GetLastError () returned 0x5 [0145.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0145.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 609 os_tid = 0xbec [0137.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api")) returned 0x20 [0145.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0145.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.729] GetLastError () returned 0x5 [0145.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0145.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d4a0) returned 1 Thread: id = 610 os_tid = 0xbf4 [0137.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58eb0 [0137.045] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0137.045] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0137.046] wcscat (in: _Dest=0x3d58eb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*" [0137.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb550 [0137.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0146.168] wcscmp (_String1=".", _String2=".") returned 0 [0146.168] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.168] wcscmp (_String1="..", _String2=".") returned 1 [0146.168] wcscmp (_String1="..", _String2="..") returned 0 [0146.168] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0146.168] wcscmp (_String1="MPP", _String2=".") returned 1 [0146.168] wcscmp (_String1="MPP", _String2="..") returned 1 [0146.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc5e8 [0146.169] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0146.169] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0146.169] wcscat (in: _Dest=0x66dc5e8, _Source="MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0161.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0161.273] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0161.273] wcscmp (_String1="MPP_CZE", _String2=".") returned 1 [0161.273] wcscmp (_String1="MPP_CZE", _String2="..") returned 1 [0161.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819118 [0161.273] wcscpy (in: _Dest=0x6819118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.273] wcscat (in: _Dest=0x6819118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.273] wcscat (in: _Dest=0x6819118, _Source="MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0161.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0161.274] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0161.275] wcscmp (_String1="MPP_HRV", _String2=".") returned 1 [0161.275] wcscmp (_String1="MPP_HRV", _String2="..") returned 1 [0161.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819080 [0161.275] wcscpy (in: _Dest=0x6819080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.275] wcscat (in: _Dest=0x6819080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.275] wcscat (in: _Dest=0x6819080, _Source="MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0161.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0161.276] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0161.276] wcscmp (_String1="MPP_HUN", _String2=".") returned 1 [0161.276] wcscmp (_String1="MPP_HUN", _String2="..") returned 1 [0161.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818fe8 [0161.276] wcscpy (in: _Dest=0x6818fe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.276] wcscat (in: _Dest=0x6818fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.276] wcscat (in: _Dest=0x6818fe8, _Source="MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0161.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0161.278] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0161.278] wcscmp (_String1="MPP_POL", _String2=".") returned 1 [0161.278] wcscmp (_String1="MPP_POL", _String2="..") returned 1 [0161.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818f50 [0161.278] wcscpy (in: _Dest=0x6818f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.278] wcscat (in: _Dest=0x6818f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.278] wcscat (in: _Dest=0x6818f50, _Source="MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0161.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0161.279] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0161.279] wcscmp (_String1="MPP_RUM", _String2=".") returned 1 [0161.279] wcscmp (_String1="MPP_RUM", _String2="..") returned 1 [0161.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818eb8 [0161.279] wcscpy (in: _Dest=0x6818eb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.279] wcscat (in: _Dest=0x6818eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.279] wcscat (in: _Dest=0x6818eb8, _Source="MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0161.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0161.281] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0161.281] wcscmp (_String1="MPP_RUS", _String2=".") returned 1 [0161.281] wcscmp (_String1="MPP_RUS", _String2="..") returned 1 [0161.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818e20 [0161.281] wcscpy (in: _Dest=0x6818e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.281] wcscat (in: _Dest=0x6818e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.281] wcscat (in: _Dest=0x6818e20, _Source="MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0161.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0161.289] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0161.289] wcscmp (_String1="MPP_SKY", _String2=".") returned 1 [0161.289] wcscmp (_String1="MPP_SKY", _String2="..") returned 1 [0161.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819248 [0161.289] wcscpy (in: _Dest=0x6819248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.289] wcscat (in: _Dest=0x6819248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.289] wcscat (in: _Dest=0x6819248, _Source="MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0161.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0161.290] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0161.290] wcscmp (_String1="MPP_SLV", _String2=".") returned 1 [0161.291] wcscmp (_String1="MPP_SLV", _String2="..") returned 1 [0161.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818d88 [0161.291] wcscpy (in: _Dest=0x6818d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.291] wcscat (in: _Dest=0x6818d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.291] wcscat (in: _Dest=0x6818d88, _Source="MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0161.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0161.292] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0161.292] wcscmp (_String1="MPP_TUR", _String2=".") returned 1 [0161.292] wcscmp (_String1="MPP_TUR", _String2="..") returned 1 [0161.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818cf0 [0161.292] wcscpy (in: _Dest=0x6818cf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.292] wcscat (in: _Dest=0x6818cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.292] wcscat (in: _Dest=0x6818cf0, _Source="MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0161.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0161.294] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0161.294] wcscmp (_String1="MPP_UKR", _String2=".") returned 1 [0161.294] wcscmp (_String1="MPP_UKR", _String2="..") returned 1 [0161.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818c58 [0161.294] wcscpy (in: _Dest=0x6818c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0161.294] wcscat (in: _Dest=0x6818c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0161.294] wcscat (in: _Dest=0x6818c58, _Source="MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0161.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0161.295] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0161.295] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0161.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb550) returned 1 [0161.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58eb0) returned 1 [0161.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec90) returned 1 Thread: id = 611 os_tid = 0xbe0 [0137.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api")) returned 0x20 [0145.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0145.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.696] GetLastError () returned 0x5 [0145.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0145.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 612 os_tid = 0xbe4 [0137.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api")) returned 0x20 [0145.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0145.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.723] GetLastError () returned 0x5 [0145.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0145.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 613 os_tid = 0xbb4 [0137.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api")) returned 0x20 [0145.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0145.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.721] GetLastError () returned 0x5 [0145.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0145.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 614 os_tid = 0xef8 [0137.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api")) returned 0x20 [0145.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0145.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.719] GetLastError () returned 0x5 [0145.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0145.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 615 os_tid = 0x4bc [0137.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api")) returned 0x20 [0145.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0145.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.717] GetLastError () returned 0x5 [0145.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0145.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 616 os_tid = 0x5d8 [0137.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api")) returned 0x20 [0145.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0145.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.715] GetLastError () returned 0x5 [0145.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0145.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 617 os_tid = 0x5d4 [0137.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api")) returned 0x20 [0145.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0145.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.714] GetLastError () returned 0x5 [0145.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0145.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 618 os_tid = 0x4f8 [0137.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api")) returned 0x20 [0142.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0142.906] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.906] GetLastError () returned 0x5 [0142.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0142.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 619 os_tid = 0xb0 [0137.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\comgyk0nvd.mp3")) returned 0x20 [0137.739] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3", dwFileAttributes=0x20) returned 1 [0137.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\comgyk0nvd.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd8c [0137.739] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0x347fee4 | out: lpFileSize=0x347fee4*=41364) returned 1 [0137.740] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xa190, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.740] ReadFile (in: hFile=0xd8c, lpBuffer=0x347fec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x347fed0, lpOverlapped=0x0 | out: lpBuffer=0x347fec0*, lpNumberOfBytesRead=0x347fed0*=0x4, lpOverlapped=0x0) returned 1 [0137.760] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0137.760] NtQuerySystemTime (in: CurrentTime=0x347fe58 | out: CurrentTime=0x347fe58*=132482710464300000) returned 0x0 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x7063fcc1 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x17f89f71 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x3c81b0be [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x5d90d75b [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x179533df [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x59ed4823 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x7b5ef94a [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0xf5fa4d7 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x25d5f0f1 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x55f961d6 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x694231d5 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x4e68b24f [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x2e8fe804 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x83f4a4a [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x41ec1691 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x7455964c [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x2b7226e0 [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x243386dc [0137.761] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x5793946a [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x7f434694 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x57825a12 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x524c3f08 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x59066df0 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x157d44d7 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x70a79d2 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x6909ca3f [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x6fd7e1dd [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x59e32961 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x4b5fc5c5 [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x1436eff [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x188f4edb [0137.762] RtlRandomEx (in: Seed=0x347fe50 | out: Seed=0x347fe50) returned 0x646487a3 [0137.776] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.776] ReadFile (in: hFile=0xd8c, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x347fe58, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0x347fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0137.777] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41780 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0137.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43708 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0137.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0137.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0137.778] WriteFile (in: hFile=0xd8c, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x347fe58, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0x347fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0138.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0138.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0138.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19ee0 [0138.377] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.377] WriteFile (in: hFile=0xd8c, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x347fed8, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x347fed8*=0x10e, lpOverlapped=0x0) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f88) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ee0) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0139.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0139.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0139.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0139.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5cf0 [0139.487] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3" [0139.487] wcscat (in: _Dest=0x3da5cf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3.ac3a86" [0139.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3.ac3a86", NtPathName=0x347fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\cOMgyk0nVd.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bea8 [0139.563] FlushFileBuffers (hFile=0xd8c) returned 1 [0139.807] CloseHandle (hObject=0xd8c) returned 1 [0139.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6370 [0139.894] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0139.894] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0139.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0139.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 Thread: id = 620 os_tid = 0xda8 [0137.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\gj8nlbgqzgt.mp3")) returned 0x20 [0137.781] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3", dwFileAttributes=0x20) returned 1 [0137.781] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\gj8nlbgqzgt.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd80 [0137.781] GetFileSizeEx (in: hFile=0xd80, lpFileSize=0x94efc84 | out: lpFileSize=0x94efc84*=38091) returned 1 [0137.781] SetFilePointerEx (in: hFile=0xd80, liDistanceToMove=0x94c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.781] ReadFile (in: hFile=0xd80, lpBuffer=0x94efc60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94efc70, lpOverlapped=0x0 | out: lpBuffer=0x94efc60*, lpNumberOfBytesRead=0x94efc70*=0x4, lpOverlapped=0x0) returned 1 [0137.785] SetFilePointerEx (in: hFile=0xd80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0137.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d429c0 [0137.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0137.785] NtQuerySystemTime (in: CurrentTime=0x94efbf8 | out: CurrentTime=0x94efbf8*=132482710464456000) returned 0x0 [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x6516dc01 [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x3ec5ffe1 [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x458125fe [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x68dec47b [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x1e664d69 [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x54498e23 [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x1125588e [0137.785] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x2eea4cc7 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x3e8be95c [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x33519925 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x54d04206 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x2971bee6 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x18bfdeb4 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x4789d8ba [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x338699bf [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x3947bebf [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x1469132 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x6089304e [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x22349030 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x7c81c50b [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x7e19b9e8 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x6d34a726 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x3ee1925f [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x4add372b [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x2cc826a5 [0137.786] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x2520bf60 [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x12d40142 [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x334417df [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x19f49df1 [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x1a7bbce6 [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x67ce16de [0137.787] RtlRandomEx (in: Seed=0x94efbf0 | out: Seed=0x94efbf0) returned 0x3c721eb3 [0137.803] SetFilePointerEx (in: hFile=0xd80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.803] ReadFile (in: hFile=0xd80, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94efbf8, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0x94efbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.804] SetFilePointerEx (in: hFile=0xd80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e410c0 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0137.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0137.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0137.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0137.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0137.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e410c0) returned 1 [0137.809] WriteFile (in: hFile=0xd80, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94efbf8, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x94efbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0138.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0138.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19f50 [0138.378] SetFilePointerEx (in: hFile=0xd80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.379] WriteFile (in: hFile=0xd80, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x94efc78, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x94efc78*=0x110, lpOverlapped=0x0) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19fc0) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f50) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0139.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0139.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25f30 [0139.488] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3" [0139.488] wcscat (in: _Dest=0x3f25f30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3.ac3a86" [0139.489] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3.ac3a86", NtPathName=0x94efbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\gJ8NlbgQZgT.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32b820 [0139.566] FlushFileBuffers (hFile=0xd80) returned 1 [0139.808] CloseHandle (hObject=0xd80) returned 1 [0139.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6370 [0139.898] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0139.898] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0139.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0139.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 621 os_tid = 0xdac [0137.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\jruveu3f.jpg")) returned 0x20 [0137.812] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg", dwFileAttributes=0x20) returned 1 [0137.813] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\jruveu3f.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd7c [0137.813] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x96efc94 | out: lpFileSize=0x96efc94*=56707) returned 1 [0137.813] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0xdd7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.813] ReadFile (in: hFile=0xd7c, lpBuffer=0x96efc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x96efc80, lpOverlapped=0x0 | out: lpBuffer=0x96efc70*, lpNumberOfBytesRead=0x96efc80*=0x4, lpOverlapped=0x0) returned 1 [0137.816] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0137.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0137.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0137.816] NtQuerySystemTime (in: CurrentTime=0x96efc08 | out: CurrentTime=0x96efc08*=132482710464768000) returned 0x0 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x7819f733 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x3ff9d725 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x2b228aec [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x438063a3 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x6edf21 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x4a276dba [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x37d348b8 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x58099024 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x3749135d [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x6bb29857 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x37c7169a [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x6254fbda [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x603b26df [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x155fd166 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x25342ae2 [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x51fb6e5b [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x70ee763f [0137.816] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x140068e8 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x1362fdc0 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x58bac8fb [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x2ccce4ce [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x19587ebb [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x2b3aa5e2 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x6e85c5ce [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x1d4fc747 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x42c8e29f [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x56a9cf3c [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x5084c9ce [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x483d3069 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x59e6e41f [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x6f683f97 [0137.817] RtlRandomEx (in: Seed=0x96efc00 | out: Seed=0x96efc00) returned 0x3aaf0e5c [0137.833] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.833] ReadFile (in: hFile=0xd7c, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x96efc08, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0x96efc08*=0x3c00, lpOverlapped=0x0) returned 1 [0137.833] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e6f0 [0137.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0137.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0137.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0137.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0137.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0137.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0137.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e6f0) returned 1 [0137.834] WriteFile (in: hFile=0xd7c, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x96efc08, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0x96efc08*=0x3c00, lpOverlapped=0x0) returned 1 [0138.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0138.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6895538) returned 1 [0138.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5d50 [0138.381] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.381] WriteFile (in: hFile=0xd7c, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x96efc88, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x96efc88*=0x10a, lpOverlapped=0x0) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d50) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0138.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0138.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e10e70 [0138.384] wcscpy (in: _Dest=0x3e10e70, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg" [0138.384] wcscat (in: _Dest=0x3e10e70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg.ac3a86" [0138.384] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg.ac3a86", NtPathName=0x96efc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\JruvEu3f.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d538 [0138.388] FlushFileBuffers (hFile=0xd7c) returned 1 [0139.054] CloseHandle (hObject=0xd7c) returned 1 [0139.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da63f0 [0139.463] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0139.463] wcscat (in: _Dest=0x3da63f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0139.463] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0xffffffff [0139.463] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb70 [0139.556] WriteFile (in: hFile=0xb70, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x96efc1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x96efc1c*=0x8b9, lpOverlapped=0x0) returned 1 [0139.558] CloseHandle (hObject=0xb70) returned 1 [0139.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0139.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 622 os_tid = 0xbc4 [0137.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\mvm3ewlj3h_ofql.mp3")) returned 0x20 [0137.838] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3", dwFileAttributes=0x20) returned 1 [0137.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\mvm3ewlj3h_ofql.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd74 [0137.838] GetFileSizeEx (in: hFile=0xd74, lpFileSize=0x993fd54 | out: lpFileSize=0x993fd54*=101918) returned 1 [0137.838] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x18e1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.838] ReadFile (in: hFile=0xd74, lpBuffer=0x993fd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x993fd40, lpOverlapped=0x0 | out: lpBuffer=0x993fd30*, lpNumberOfBytesRead=0x993fd40*=0x4, lpOverlapped=0x0) returned 1 [0137.841] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0137.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42bc8 [0137.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0137.842] NtQuerySystemTime (in: CurrentTime=0x993fcc8 | out: CurrentTime=0x993fcc8*=132482710465080000) returned 0x0 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x5ff6283b [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x70b363aa [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x63ed5e1 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x3b07c9af [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x739b2b99 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x17b7d719 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x611744fe [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x2d17e91d [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0xb044ad [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x95b5b4c [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x314120e2 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x579f9043 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x74608446 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x33826419 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0xf3baf46 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x36052d84 [0137.842] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x4aab35ed [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x3639f671 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x2e0716e5 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x36341ceb [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0xb3899e7 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x70f9e6a6 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x2cf63f04 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x73e8f8d [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x1a299743 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x6d10dfdf [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x2dc3f589 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x7d437e28 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x3aeb852c [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x3bd74408 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x38874927 [0137.843] RtlRandomEx (in: Seed=0x993fcc0 | out: Seed=0x993fcc0) returned 0x184ddc5f [0137.858] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.859] ReadFile (in: hFile=0xd74, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.859] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e618 [0137.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0137.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0137.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0137.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0137.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0137.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0137.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0137.860] WriteFile (in: hFile=0xd74, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0138.389] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.389] ReadFile (in: hFile=0xd74, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.390] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300a08 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad90 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0138.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0138.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0138.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0138.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0138.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0138.391] WriteFile (in: hFile=0xd74, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0138.773] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x1521e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.773] ReadFile (in: hFile=0xd74, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.774] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x1521e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd3738 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d5f8 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0138.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0138.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3738) returned 1 [0138.775] WriteFile (in: hFile=0xd74, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x993fcc8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x993fcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0139.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd378 [0139.080] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.081] WriteFile (in: hFile=0xd74, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x993fd48, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0x993fd48*=0x158, lpOverlapped=0x0) returned 1 [0139.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0139.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e806b8) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80778) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd378) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42bc8) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0139.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0139.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0139.585] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3" [0139.585] wcscat (in: _Dest=0x66dcd38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3.ac3a86" [0139.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3.ac3a86", NtPathName=0x993fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\mVM3eWlJ3h_OFqL.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0eed0 [0140.087] FlushFileBuffers (hFile=0xd74) returned 1 [0140.089] CloseHandle (hObject=0xd74) returned 1 [0140.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10670 [0140.090] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0140.090] wcscat (in: _Dest=0x3e10670, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0140.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0140.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 623 os_tid = 0xbc0 [0137.863] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\qjua5fyuj.avi")) returned 0x20 [0137.863] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi", dwFileAttributes=0x20) returned 1 [0137.863] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\qjua5fyuj.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd70 [0137.864] GetFileSizeEx (in: hFile=0xd70, lpFileSize=0x99efad4 | out: lpFileSize=0x99efad4*=94769) returned 1 [0137.864] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x1722d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.864] ReadFile (in: hFile=0xd70, lpBuffer=0x99efab0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99efac0, lpOverlapped=0x0 | out: lpBuffer=0x99efab0*, lpNumberOfBytesRead=0x99efac0*=0x4, lpOverlapped=0x0) returned 1 [0137.867] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0137.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43398 [0137.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0137.896] NtQuerySystemTime (in: CurrentTime=0x99efa48 | out: CurrentTime=0x99efa48*=132482710465548000) returned 0x0 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0xaffb6b1 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x2c96ee9 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x45ec745a [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x1b896c0c [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x7cc2f3e8 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x7f608ac [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x5ae637e4 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x7bff985c [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x3055f736 [0137.896] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x62c4f55f [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x3a8ddb2f [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x393e8da5 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x4b0abf3a [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0xd45094a [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x40b12b90 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x52d5e00a [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x42f12e40 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x7345d751 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x287d6770 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x6dcdacd5 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x3a4ad962 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x6c4a92b7 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x38561db4 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x5ce1b8ea [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x4da53cb [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x6786b4cf [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x5997e941 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x7d214bcd [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x506332c4 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x723ace96 [0137.897] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0xb5ec172 [0137.898] RtlRandomEx (in: Seed=0x99efa40 | out: Seed=0x99efa40) returned 0x41fda12f [0137.911] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.912] ReadFile (in: hFile=0xd70, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0137.912] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e738 [0137.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0137.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0137.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0137.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0137.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0137.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0137.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e738) returned 1 [0137.913] WriteFile (in: hFile=0xd70, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0138.399] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.399] ReadFile (in: hFile=0xd70, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.399] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300a08 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad90 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0138.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0138.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0138.401] WriteFile (in: hFile=0xd70, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0138.915] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x13631, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.915] ReadFile (in: hFile=0xd70, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0138.916] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x13631, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5d00 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0138.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0138.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0138.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0138.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5d00) returned 1 [0138.916] WriteFile (in: hFile=0xd70, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99efa48, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0x99efa48*=0x3c00, lpOverlapped=0x0) returned 1 [0139.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0139.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd518 [0139.152] SetFilePointerEx (in: hFile=0xd70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.152] WriteFile (in: hFile=0xd70, lpBuffer=0x3e80fa0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x99efac8, lpOverlapped=0x0 | out: lpBuffer=0x3e80fa0*, lpNumberOfBytesWritten=0x99efac8*=0x14c, lpOverlapped=0x0) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fa0) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d50) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd518) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43398) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0140.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10670 [0140.065] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi" [0140.066] wcscat (in: _Dest=0x3e10670, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi.ac3a86" [0140.066] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi.ac3a86", NtPathName=0x99efa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\qJuA5fYuJ.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0140.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 [0140.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f78) returned 1 [0140.070] NtQueryInformationFile (in: FileHandle=0xd70, IoStatusBlock=0x99efa18, FileInformation=0x99efa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x99efa18, FileInformation=0x99efa20) returned 0x0 [0140.070] NtSetInformationFile (FileHandle=0xd70, IoStatusBlock=0x99efa18, FileInformation=0x99efa20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0140.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.072] FlushFileBuffers (hFile=0xd70) returned 1 [0140.074] CloseHandle (hObject=0xd70) returned 1 [0140.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10670 [0140.075] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0140.075] wcscat (in: _Dest=0x3e10670, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0140.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0140.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e55d8) returned 1 Thread: id = 624 os_tid = 0xdc0 [0137.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x2fce100 [0137.917] wcscpy (in: _Dest=0x2fce100, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" [0137.918] wcscat (in: _Dest=0x2fce100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0137.918] wcscat (in: _Dest=0x2fce100, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\*" [0137.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0137.918] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f4460, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0xb70dd020, ftLastAccessTime.dwHighDateTime=0x1d5d840, ftLastWriteTime.dwLowDateTime=0xb70dd020, ftLastWriteTime.dwHighDateTime=0x1d5d840, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80df8 [0137.918] wcscmp (_String1=".", _String2=".") returned 0 [0137.918] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f4460, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0xb70dd020, ftLastAccessTime.dwHighDateTime=0x1d5d840, ftLastWriteTime.dwLowDateTime=0xb70dd020, ftLastWriteTime.dwHighDateTime=0x1d5d840, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.918] wcscmp (_String1="..", _String2=".") returned 1 [0137.918] wcscmp (_String1="..", _String2="..") returned 0 [0137.918] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadea710, ftCreationTime.dwHighDateTime=0x1d5d8b6, ftLastAccessTime.dwLowDateTime=0x394c8540, ftLastAccessTime.dwHighDateTime=0x1d5e80e, ftLastWriteTime.dwLowDateTime=0x394c8540, ftLastWriteTime.dwHighDateTime=0x1d5e80e, nFileSizeHigh=0x0, nFileSizeLow=0x14ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GZXLSNdo5vE.jpg", cAlternateFileName="GZXLSN~1.JPG")) returned 1 [0137.918] wcscmp (_String1="GZXLSNdo5vE.jpg", _String2=".") returned 1 [0137.918] wcscmp (_String1="GZXLSNdo5vE.jpg", _String2="..") returned 1 [0137.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e106f0 [0137.919] wcscpy (in: _Dest=0x3e106f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" [0137.919] wcscat (in: _Dest=0x3e106f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0137.919] wcscat (in: _Dest=0x3e106f0, _Source="GZXLSNdo5vE.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg" [0151.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e106f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0151.565] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efcbb0, ftCreationTime.dwHighDateTime=0x1d5df48, ftLastAccessTime.dwLowDateTime=0x4cd460d0, ftLastAccessTime.dwHighDateTime=0x1d5e532, ftLastWriteTime.dwLowDateTime=0x4cd460d0, ftLastWriteTime.dwHighDateTime=0x1d5e532, nFileSizeHigh=0x0, nFileSizeLow=0x1317d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ml-CJXJmi.avi", cAlternateFileName="ML-CJX~1.AVI")) returned 1 [0151.565] wcscmp (_String1="Ml-CJXJmi.avi", _String2=".") returned 1 [0151.565] wcscmp (_String1="Ml-CJXJmi.avi", _String2="..") returned 1 [0151.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e09bb0 [0151.565] wcscpy (in: _Dest=0x3e09bb0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" [0151.565] wcscat (in: _Dest=0x3e09bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0151.565] wcscat (in: _Dest=0x3e09bb0, _Source="Ml-CJXJmi.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi" [0151.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0151.566] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a96ac0, ftCreationTime.dwHighDateTime=0x1d5dbfb, ftLastAccessTime.dwLowDateTime=0x14cca350, ftLastAccessTime.dwHighDateTime=0x1d5d826, ftLastWriteTime.dwLowDateTime=0x14cca350, ftLastWriteTime.dwHighDateTime=0x1d5d826, nFileSizeHigh=0x0, nFileSizeLow=0x12fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="VWll.avi", cAlternateFileName="")) returned 1 [0151.567] wcscmp (_String1="VWll.avi", _String2=".") returned 1 [0151.567] wcscmp (_String1="VWll.avi", _String2="..") returned 1 [0151.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23c30 [0151.567] wcscpy (in: _Dest=0x3f23c30, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N" [0151.567] wcscat (in: _Dest=0x3f23c30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0151.567] wcscat (in: _Dest=0x3f23c30, _Source="VWll.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi" [0151.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0151.568] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a96ac0, ftCreationTime.dwHighDateTime=0x1d5dbfb, ftLastAccessTime.dwLowDateTime=0x14cca350, ftLastAccessTime.dwHighDateTime=0x1d5d826, ftLastWriteTime.dwLowDateTime=0x14cca350, ftLastWriteTime.dwHighDateTime=0x1d5d826, nFileSizeHigh=0x0, nFileSizeLow=0x12fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="VWll.avi", cAlternateFileName="")) returned 0 [0151.568] FindClose (in: hFindFile=0x3e80df8 | out: hFindFile=0x3e80df8) returned 1 [0151.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0151.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce100) returned 1 [0151.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 625 os_tid = 0xd9c [0137.919] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ucvitnm pso3.odt")) returned 0x20 [0137.919] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt", dwFileAttributes=0x20) returned 1 [0137.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ucvitnm pso3.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd6c [0137.920] GetFileSizeEx (in: hFile=0xd6c, lpFileSize=0x987facc | out: lpFileSize=0x987facc*=34407) returned 1 [0137.920] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x8663, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.920] ReadFile (in: hFile=0xd6c, lpBuffer=0x987faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x987fab8, lpOverlapped=0x0 | out: lpBuffer=0x987faa8*, lpNumberOfBytesRead=0x987fab8*=0x4, lpOverlapped=0x0) returned 1 [0137.923] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0137.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0137.924] NtQuerySystemTime (in: CurrentTime=0x987fa40 | out: CurrentTime=0x987fa40*=132482710465860000) returned 0x0 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x26d80e02 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x5e23f4ac [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x6623f440 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x7a86fd2b [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x54f1321b [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x732b4960 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x428aec75 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x28a61b7d [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x161401e9 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x29b84169 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x66a7cffa [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0xdae0d0f [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x58c73e24 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x292b09a1 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x5c2aaa6c [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x230a2841 [0137.924] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x3c523d52 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0xc5269c1 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x78344f71 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x7958c8f5 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x799a0a21 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x245210f4 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x21039321 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x40515462 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x4a868112 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x6bd0db50 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x27d794ea [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x2581ae9a [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x335665be [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x500041f [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0x68525793 [0137.925] RtlRandomEx (in: Seed=0x987fa38 | out: Seed=0x987fa38) returned 0xe61b4aa [0137.938] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.939] ReadFile (in: hFile=0xd6c, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x987fa40, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0x987fa40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.939] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e858 [0137.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0137.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x677cd48 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e858) returned 1 [0137.940] WriteFile (in: hFile=0xd6c, lpBuffer=0x677cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x987fa40, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesWritten=0x987fa40*=0x3c00, lpOverlapped=0x0) returned 1 [0138.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0138.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0138.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19ff8 [0138.402] SetFilePointerEx (in: hFile=0xd6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.402] WriteFile (in: hFile=0xd6c, lpBuffer=0x3d54938*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x987fac0, lpOverlapped=0x0 | out: lpBuffer=0x3d54938*, lpNumberOfBytesWritten=0x987fac0*=0x112, lpOverlapped=0x0) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54938) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a030) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ff8) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0139.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f25fb8 [0139.490] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt" [0139.490] wcscat (in: _Dest=0x3f25fb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt.ac3a86" [0139.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt.ac3a86", NtPathName=0x987fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\UCVITNm PsO3.odt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0eed0 [0139.570] FlushFileBuffers (hFile=0xd6c) returned 1 [0139.808] CloseHandle (hObject=0xd6c) returned 1 [0139.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6370 [0139.901] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0139.901] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0139.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0139.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 Thread: id = 626 os_tid = 0x4b8 [0137.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\yx9 evdchi.flv")) returned 0x20 [0137.945] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv", dwFileAttributes=0x20) returned 1 [0137.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\yx9 evdchi.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd68 [0137.946] GetFileSizeEx (in: hFile=0xd68, lpFileSize=0x9abf874 | out: lpFileSize=0x9abf874*=33941) returned 1 [0137.946] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x8491, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.946] ReadFile (in: hFile=0xd68, lpBuffer=0x9abf850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9abf860, lpOverlapped=0x0 | out: lpBuffer=0x9abf850*, lpNumberOfBytesRead=0x9abf860*=0x4, lpOverlapped=0x0) returned 1 [0137.948] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0137.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0137.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0137.949] NtQuerySystemTime (in: CurrentTime=0x9abf7e8 | out: CurrentTime=0x9abf7e8*=132482710466172000) returned 0x0 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x44797b63 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x6f899a9 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x65194a40 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x107cc484 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x46401718 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x4cb82d8b [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x66678bad [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x4704ce00 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x2de86d27 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x115d950b [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x7dc95b44 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x1bd011af [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x622e3ab9 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x1648cfa8 [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x476b84fb [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x2dbfa76d [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x4838bc1b [0137.949] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x344d5a87 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0xf7e600a [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x7ca3762a [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x223ed270 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x2144b857 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x66bcb6d7 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x16c0673 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x566da280 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x715121d6 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x16064a62 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x4237aff7 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x5de8bb35 [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x4de0108c [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x1af9526c [0137.950] RtlRandomEx (in: Seed=0x9abf7e0 | out: Seed=0x9abf7e0) returned 0x5f16eef1 [0137.963] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.963] ReadFile (in: hFile=0xd68, lpBuffer=0x6780950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9abf7e8, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesRead=0x9abf7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.964] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e780 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0137.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x678bd68 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0137.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0137.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0137.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0137.965] WriteFile (in: hFile=0xd68, lpBuffer=0x678bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9abf7e8, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesWritten=0x9abf7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0138.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0138.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f1a068 [0138.403] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.403] WriteFile (in: hFile=0xd68, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x9abf868, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x9abf868*=0x10e, lpOverlapped=0x0) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a0a0) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a068) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0139.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0139.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4af0 [0139.491] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv" [0139.492] wcscat (in: _Dest=0x3da4af0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv.ac3a86" [0139.492] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv.ac3a86", NtPathName=0x9abf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\yx9 evDChi.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32c660 [0139.554] FlushFileBuffers (hFile=0xd68) returned 1 [0139.807] CloseHandle (hObject=0xd68) returned 1 [0139.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6370 [0139.861] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0139.861] wcscat (in: _Dest=0x3da6370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0139.861] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0139.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 [0139.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 Thread: id = 627 os_tid = 0x7e4 [0137.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\zjkqvj.mp3")) returned 0x20 [0137.977] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3", dwFileAttributes=0x20) returned 1 [0137.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\zjkqvj.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd58 [0137.978] GetFileSizeEx (in: hFile=0xd58, lpFileSize=0x924fdc4 | out: lpFileSize=0x924fdc4*=80404) returned 1 [0137.978] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0x13a10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.978] ReadFile (in: hFile=0xd58, lpBuffer=0x924fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x924fdb0, lpOverlapped=0x0 | out: lpBuffer=0x924fda0*, lpNumberOfBytesRead=0x924fdb0*=0x4, lpOverlapped=0x0) returned 1 [0137.980] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0137.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432a8 [0137.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0137.980] NtQuerySystemTime (in: CurrentTime=0x924fd38 | out: CurrentTime=0x924fd38*=132482710466484000) returned 0x0 [0137.980] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x48863a13 [0137.980] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x7820ff42 [0137.980] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x4f53dd2f [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x738ec4dc [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x1bf190cb [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x238c54f0 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x49b1757 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x9c314b4 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x7a5da66 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x528fa23e [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0xdd36ad6 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x29c02df5 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x6414525c [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x162b0165 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x42825718 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x2a10cec1 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x33a8ab48 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x75e055d9 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x2f7552c4 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x5a8cf3fd [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x5a0ac74e [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x25483fdd [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x2998b77e [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x2230ed62 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x10d48e2 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x76c97299 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x20d823ff [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x458e3100 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x6eecdcdd [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x43355409 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x2703bb26 [0137.981] RtlRandomEx (in: Seed=0x924fd30 | out: Seed=0x924fd30) returned 0x3d45b0aa [0137.991] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.991] ReadFile (in: hFile=0xd58, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0137.992] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e810 [0137.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0137.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0137.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0137.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0137.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0137.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432d0 [0137.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432d0) returned 1 [0137.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0137.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e810) returned 1 [0137.993] WriteFile (in: hFile=0xd58, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0138.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0138.404] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.404] ReadFile (in: hFile=0xd58, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0138.405] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300a08 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad90 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0138.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0138.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0138.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0138.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0138.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0138.406] WriteFile (in: hFile=0xd58, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0138.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0138.918] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0xfe14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.918] ReadFile (in: hFile=0xd58, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0138.918] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0xfe14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5d00 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cef0 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0138.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0138.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0138.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0138.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0138.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5d00) returned 1 [0138.918] WriteFile (in: hFile=0xd58, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x924fd38, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x924fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0139.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0139.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd4b0 [0139.153] SetFilePointerEx (in: hFile=0xd58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.153] WriteFile (in: hFile=0xd58, lpBuffer=0x330b20*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x924fdb8, lpOverlapped=0x0 | out: lpBuffer=0x330b20*, lpNumberOfBytesWritten=0x924fdb8*=0x146, lpOverlapped=0x0) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330b20) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52a0) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd4b0) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0140.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0140.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b588 [0140.061] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3" [0140.061] wcscat (in: _Dest=0x3f1b588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3.ac3a86" [0140.061] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3.ac3a86", NtPathName=0x924fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\zjkqVj.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbce8 [0140.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 [0140.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45818) returned 1 [0140.079] NtQueryInformationFile (in: FileHandle=0xd58, IoStatusBlock=0x924fd08, FileInformation=0x924fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x924fd08, FileInformation=0x924fd10) returned 0x0 [0140.079] NtSetInformationFile (FileHandle=0xd58, IoStatusBlock=0x924fd08, FileInformation=0x924fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0140.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0140.081] FlushFileBuffers (hFile=0xd58) returned 1 [0140.082] CloseHandle (hObject=0xd58) returned 1 [0140.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10670 [0140.083] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\" [0140.083] wcscat (in: _Dest=0x3e10670, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" [0140.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ac3a86-readme.txt")) returned 0x20 [0140.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0140.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5648) returned 1 Thread: id = 628 os_tid = 0x67c [0137.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3321a8 [0137.994] wcscpy (in: _Dest=0x3321a8, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0137.995] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0137.995] wcscat (in: _Dest=0x3321a8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0137.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0137.995] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0137.995] wcscmp (_String1=".", _String2=".") returned 0 [0137.995] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.995] wcscmp (_String1="..", _String2=".") returned 1 [0137.996] wcscmp (_String1="..", _String2="..") returned 0 [0137.996] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0137.996] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0137.996] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0137.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56668 [0137.996] wcscpy (in: _Dest=0x3d56668, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0137.996] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0137.996] wcscat (in: _Dest=0x3d56668, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0141.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0141.258] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.258] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0141.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0141.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 [0141.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 629 os_tid = 0x2dc [0137.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332f28 [0137.997] wcscpy (in: _Dest=0x332f28, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0137.997] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0137.997] wcscat (in: _Dest=0x332f28, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0137.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0137.997] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80a38 [0137.998] wcscmp (_String1=".", _String2=".") returned 0 [0137.998] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.998] wcscmp (_String1="..", _String2=".") returned 1 [0137.998] wcscmp (_String1="..", _String2="..") returned 0 [0137.998] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0137.998] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0137.998] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0137.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56750 [0137.998] wcscpy (in: _Dest=0x3d56750, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0137.998] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0137.998] wcscat (in: _Dest=0x3d56750, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0141.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0141.261] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.261] FindClose (in: hFindFile=0x3e80a38 | out: hFindFile=0x3e80a38) returned 1 [0141.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0141.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 [0141.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 630 os_tid = 0x598 [0137.999] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0138.000] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0138.000] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.000] GetLastError () returned 0x5 [0138.000] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0138.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 Thread: id = 631 os_tid = 0x230 [0138.002] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0138.919] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0138.920] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.920] GetLastError () returned 0x5 [0138.920] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0138.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052e98) returned 1 Thread: id = 632 os_tid = 0x240 [0138.003] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0138.922] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0138.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.922] GetLastError () returned 0x5 [0138.922] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0138.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 633 os_tid = 0x1e4 [0138.004] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0138.923] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0138.923] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.923] GetLastError () returned 0x5 [0138.923] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0138.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 634 os_tid = 0x480 [0138.006] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0138.925] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0138.925] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.925] GetLastError () returned 0x5 [0138.925] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0138.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 635 os_tid = 0x81c [0138.007] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0138.926] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0138.926] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.926] GetLastError () returned 0x5 [0138.926] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0138.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 636 os_tid = 0x85c [0138.014] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0138.928] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0138.928] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.928] GetLastError () returned 0x5 [0138.928] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0138.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 637 os_tid = 0x88c [0138.015] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0138.929] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0138.929] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.930] GetLastError () returned 0x5 [0138.930] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0138.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 638 os_tid = 0x910 [0138.020] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0138.932] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0138.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.932] GetLastError () returned 0x5 [0138.932] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0138.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 639 os_tid = 0x920 [0138.021] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0138.933] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0138.933] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.933] GetLastError () returned 0x5 [0138.934] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0138.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 640 os_tid = 0x940 [0138.022] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0138.935] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0138.935] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.935] GetLastError () returned 0x5 [0138.935] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0138.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 641 os_tid = 0x950 [0138.023] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0138.936] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0138.936] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.936] GetLastError () returned 0x5 [0138.936] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0138.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 642 os_tid = 0x960 [0138.024] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0138.938] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0138.938] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.938] GetLastError () returned 0x5 [0138.938] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0138.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 643 os_tid = 0x970 [0138.025] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0138.939] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0138.939] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.939] GetLastError () returned 0x5 [0138.939] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0138.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 644 os_tid = 0x980 [0138.029] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0138.940] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0138.941] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.941] GetLastError () returned 0x5 [0138.941] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0138.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 645 os_tid = 0x990 [0138.029] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0138.944] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0138.944] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.944] GetLastError () returned 0x5 [0138.944] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0138.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 646 os_tid = 0x9a0 [0138.030] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0138.946] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0138.946] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.946] GetLastError () returned 0x5 [0138.946] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0138.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 647 os_tid = 0x9b0 [0138.031] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0138.949] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0138.949] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.949] GetLastError () returned 0x5 [0138.949] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0138.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 648 os_tid = 0x9c0 [0138.032] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0138.950] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0138.951] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.951] GetLastError () returned 0x5 [0138.951] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0138.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d340) returned 1 Thread: id = 649 os_tid = 0x9d0 [0138.033] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0138.952] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0138.952] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.953] GetLastError () returned 0x5 [0138.953] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0138.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 650 os_tid = 0x9e0 [0138.035] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0138.954] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0138.954] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.955] GetLastError () returned 0x5 [0138.955] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0138.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 Thread: id = 651 os_tid = 0x9f0 [0138.036] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0138.413] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0138.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.414] GetLastError () returned 0x5 [0138.414] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0138.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 652 os_tid = 0xa70 [0138.037] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0138.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0138.416] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.416] GetLastError () returned 0x5 [0138.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0138.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5e0) returned 1 Thread: id = 653 os_tid = 0x500 [0138.418] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0138.419] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0138.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.419] GetLastError () returned 0x5 [0138.419] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0138.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d688) returned 1 Thread: id = 654 os_tid = 0xdd0 [0138.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7e38 [0138.421] wcscpy (in: _Dest=0x3ef7e38, _Source="C:\\ProgramData\\Microsoft\\Search\\Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0138.421] wcscat (in: _Dest=0x3ef7e38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\" [0138.421] wcscat (in: _Dest=0x3ef7e38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\*" [0138.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0138.421] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0138.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e38) returned 1 [0138.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c28) returned 1 Thread: id = 655 os_tid = 0xe10 [0138.423] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0138.426] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 1 [0138.426] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0138.427] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x841fbc4 | out: lpFileSize=0x841fbc4*=133) returned 1 [0138.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0138.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0138.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0138.427] NtQuerySystemTime (in: CurrentTime=0x841fb38 | out: CurrentTime=0x841fb38*=132482710470852000) returned 0x0 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x60eb8234 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x7bc1df68 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x67cdafe [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x27680d69 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x6d76d1c [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x7fb4d0b0 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x5d2ee923 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x7c1790e8 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x6f5f1533 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x77dd7927 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x20b90463 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x691d3f0d [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x110b665c [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x77122a68 [0138.427] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0xf94f5f1 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x489eb652 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x10bd05d1 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x66eed0a6 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x64009556 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x7c47ef31 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x3ff6350f [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x275628c5 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x903d17a [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x46bb2497 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x7c6d4268 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x145e5b43 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x1a2a29cc [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x68d183f7 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x62e78677 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x3d2ab5e7 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x375db410 [0138.428] RtlRandomEx (in: Seed=0x841fb30 | out: Seed=0x841fb30) returned 0x5fb0fd43 [0138.442] ReadFile (in: hFile=0xcd0, lpBuffer=0x6780950, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x841fb2c, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesRead=0x841fb2c*=0x85, lpOverlapped=0x0) returned 1 [0138.445] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.445] WriteFile (in: hFile=0xcd0, lpBuffer=0x678bd68*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x841fb30, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesWritten=0x841fb30*=0x85, lpOverlapped=0x0) returned 1 [0138.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0138.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0138.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0138.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0138.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0138.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e80e78 [0138.957] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.957] WriteFile (in: hFile=0xcd0, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x841fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x841fbb8*=0x116, lpOverlapped=0x0) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80978) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80e78) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0139.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0139.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30f30 [0139.498] wcscpy (in: _Dest=0x3e30f30, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0139.498] wcscat (in: _Dest=0x3e30f30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.ac3a86" [0139.498] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.ac3a86", NtPathName=0x841fb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35ba88 [0139.522] FlushFileBuffers (hFile=0xcd0) returned 1 [0139.807] CloseHandle (hObject=0xcd0) returned 1 [0139.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355200 [0139.842] wcscpy (in: _Dest=0x355200, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0139.842] wcscat (in: _Dest=0x355200, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" [0139.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt")) returned 0xffffffff [0139.842] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd78 [0140.038] WriteFile (in: hFile=0xd78, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x841fb4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x841fb4c*=0x8b9, lpOverlapped=0x0) returned 1 [0140.041] CloseHandle (hObject=0xd78) returned 1 [0140.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 [0140.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 656 os_tid = 0xe14 [0138.448] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0138.449] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 1 [0138.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0138.449] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x86dfe74 | out: lpFileSize=0x86dfe74*=133) returned 1 [0138.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0138.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0138.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0138.450] NtQuerySystemTime (in: CurrentTime=0x86dfde8 | out: CurrentTime=0x86dfde8*=132482710471164000) returned 0x0 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x523b5f80 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x76bc78e8 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x2789701d [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x6121ea8b [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x6aaed7f2 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x62c1aed6 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x3fd8752 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x30cd77d1 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x7ff10a28 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x1e28c84a [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x6a29919a [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x1297e8c8 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x382c7bff [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x1b0ccbf3 [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0xc8bf4dc [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x3358782a [0138.450] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x245f0c54 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x2f3b60aa [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x35d020a6 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x134318e2 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x31e6975c [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x488e3218 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x3f1105cb [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x38aacdcd [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x96bafd9 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x490b9db3 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x45a852ff [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x67a7c57d [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x11f3e299 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x63c78cc8 [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0x1919a8aa [0138.451] RtlRandomEx (in: Seed=0x86dfde0 | out: Seed=0x86dfde0) returned 0xe6dc808 [0138.466] ReadFile (in: hFile=0xcd8, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x86dfddc, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0x86dfddc*=0x85, lpOverlapped=0x0) returned 1 [0138.469] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.469] WriteFile (in: hFile=0xcd8, lpBuffer=0x6784558*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x86dfde0, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesWritten=0x86dfde0*=0x85, lpOverlapped=0x0) returned 1 [0138.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0138.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784558) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0138.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62150 [0138.958] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.958] WriteFile (in: hFile=0xcd8, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x86dfe68, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x86dfe68*=0x12a, lpOverlapped=0x0) returned 1 [0139.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62470) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62150) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0139.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0139.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0139.501] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0139.501] wcscat (in: _Dest=0x35c378, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.ac3a86" [0139.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.ac3a86", NtPathName=0x86dfde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def6a8 [0139.532] FlushFileBuffers (hFile=0xcd8) returned 1 [0139.807] CloseHandle (hObject=0xcd8) returned 1 [0139.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dce58 [0139.845] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0139.845] wcscat (in: _Dest=0x66dce58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" [0139.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt")) returned 0x20 [0140.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 [0140.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 657 os_tid = 0xe54 [0138.472] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0138.472] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 1 [0138.473] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xccc [0138.473] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0x7f2fcac | out: lpFileSize=0x7f2fcac*=133) returned 1 [0138.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0138.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0138.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0138.473] NtQuerySystemTime (in: CurrentTime=0x7f2fc20 | out: CurrentTime=0x7f2fc20*=132482710471320000) returned 0x0 [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x7a70a613 [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x65d969a4 [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x573a2e79 [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x4e7ab93f [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x3c3223cc [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x6178cb9e [0138.473] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x461de298 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x799977ca [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x7eb4f0e4 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x2b50821e [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x32d7874a [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x61147644 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x126d7af5 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x49e184bf [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x668fea63 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x913c2e1 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x6c02c5d3 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x6f778403 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x2fecabca [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x52b5970f [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x47265b9b [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x5e8d9f94 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x7f933af6 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x7bd94935 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x1a783428 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x46890ac8 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x7deee128 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x63daed63 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x745426fc [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x1d105842 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x72b39b40 [0138.474] RtlRandomEx (in: Seed=0x7f2fc18 | out: Seed=0x7f2fc18) returned 0x5dbb452e [0138.484] ReadFile (in: hFile=0xccc, lpBuffer=0x6788160, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x7f2fc14, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesRead=0x7f2fc14*=0x85, lpOverlapped=0x0) returned 1 [0138.487] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.487] WriteFile (in: hFile=0xccc, lpBuffer=0x6775538*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x7f2fc18, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesWritten=0x7f2fc18*=0x85, lpOverlapped=0x0) returned 1 [0138.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0138.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0138.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0138.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0138.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0138.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3032398) returned 1 [0138.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80938 [0138.959] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.959] WriteFile (in: hFile=0xccc, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x7f2fca0, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x7f2fca0*=0x11c, lpOverlapped=0x0) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e808f8) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80938) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0139.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0139.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0139.503] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0139.503] wcscat (in: _Dest=0x3e0ebb0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.ac3a86" [0139.503] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.ac3a86", NtPathName=0x7f2fc18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0139.530] FlushFileBuffers (hFile=0xccc) returned 1 [0139.807] CloseHandle (hObject=0xccc) returned 1 [0139.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbfb8 [0139.844] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0139.844] wcscat (in: _Dest=0x66dbfb8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" [0139.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt")) returned 0x20 [0140.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 [0140.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 658 os_tid = 0xe50 [0138.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0138.960] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 1 [0139.381] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x101c [0139.381] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0x84bfbec | out: lpFileSize=0x84bfbec*=133) returned 1 [0139.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0139.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0139.381] NtQuerySystemTime (in: CurrentTime=0x84bfb60 | out: CurrentTime=0x84bfb60*=132482710480524000) returned 0x0 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x1df2cd5a [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x587eabe4 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x5f3ab91f [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x3ca98867 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x2d77f0 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x685a6077 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x5e0d3e07 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x716fae5e [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x601de55c [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x65b59b87 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x593b1037 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x2e514ee4 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x6892f06 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x25f6f5ae [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x6fe3a881 [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x7335937e [0139.381] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x45236bb8 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x4c5e4a62 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x7a7afa2b [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0xe365ce1 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x54a96356 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x72905ddb [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x3e6c7ea7 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x192ecc69 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x6ddcf3c3 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x1ac87632 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x39d8dbd9 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x6d075d68 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x557b6e64 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x1332201 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x6a679bb1 [0139.382] RtlRandomEx (in: Seed=0x84bfb58 | out: Seed=0x84bfb58) returned 0x775fc697 [0139.392] ReadFile (in: hFile=0x101c, lpBuffer=0x6895538, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x84bfb54, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0x84bfb54*=0x85, lpOverlapped=0x0) returned 1 [0139.395] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.395] WriteFile (in: hFile=0x101c, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x84bfb58, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0x84bfb58*=0x85, lpOverlapped=0x0) returned 1 [0139.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0139.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0139.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0139.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0139.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6895538) returned 1 [0139.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0139.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6498) returned 1 [0139.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066f80 [0139.831] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.831] WriteFile (in: hFile=0x101c, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x84bfbe0, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x84bfbe0*=0x11c, lpOverlapped=0x0) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f00) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f80) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0139.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0139.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0139.954] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0139.954] wcscat (in: _Dest=0x3e0d8f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.ac3a86" [0139.954] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.ac3a86", NtPathName=0x84bfb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0140.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 [0140.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bc7b0) returned 1 [0140.026] NtQueryInformationFile (in: FileHandle=0x101c, IoStatusBlock=0x84bfb30, FileInformation=0x84bfb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x84bfb30, FileInformation=0x84bfb38) returned 0x0 [0140.026] NtSetInformationFile (FileHandle=0x101c, IoStatusBlock=0x84bfb30, FileInformation=0x84bfb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0140.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 [0140.028] FlushFileBuffers (hFile=0x101c) returned 1 [0140.046] CloseHandle (hObject=0x101c) returned 1 [0140.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0140.048] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0140.049] wcscat (in: _Dest=0x354fc0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" [0140.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt")) returned 0x20 [0140.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 [0140.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 659 os_tid = 0xde4 [0138.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0138.960] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 1 [0139.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc4c [0139.395] GetFileSizeEx (in: hFile=0xc4c, lpFileSize=0x89dfd54 | out: lpFileSize=0x89dfd54*=134) returned 1 [0139.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0139.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0139.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0139.395] NtQuerySystemTime (in: CurrentTime=0x89dfcc8 | out: CurrentTime=0x89dfcc8*=132482710480524000) returned 0x0 [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x29a53757 [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x7bf819a5 [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x267adc65 [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x2f0e088e [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x54011aa2 [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x51916c [0139.395] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x459f87a4 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x56a31258 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x6eb3aee [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x3522db17 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x1c5f17fd [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x15d998dd [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0xc1703ac [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x5ed1518 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x6cdc84a8 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x1c14d2b5 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x447f3866 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x1b440915 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x5339641d [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x47eef253 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x13b40f85 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x73aa2774 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x569f06e0 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x47c3566b [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x28051eb1 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0xba487de [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x27dcf835 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x2fa3d74c [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x32768c04 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x5bd4b299 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x1cec74f4 [0139.396] RtlRandomEx (in: Seed=0x89dfcc0 | out: Seed=0x89dfcc0) returned 0x6cf6f0be [0139.410] ReadFile (in: hFile=0xc4c, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x86, lpNumberOfBytesRead=0x89dfcbc, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0x89dfcbc*=0x86, lpOverlapped=0x0) returned 1 [0139.413] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.413] WriteFile (in: hFile=0xc4c, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0x89dfcc0, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x89dfcc0*=0x86, lpOverlapped=0x0) returned 1 [0139.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43258 [0139.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0139.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0139.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0139.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0139.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 [0139.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d64e0) returned 1 [0139.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067080 [0139.830] SetFilePointerEx (in: hFile=0xc4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.830] WriteFile (in: hFile=0xc4c, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x89dfd48, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x89dfd48*=0x118, lpOverlapped=0x0) returned 1 [0139.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0139.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067400) returned 1 [0139.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0139.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0139.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0db70 [0139.953] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0139.953] wcscat (in: _Dest=0x3e0db70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.ac3a86" [0139.953] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.ac3a86", NtPathName=0x89dfcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c2c8 [0140.029] FlushFileBuffers (hFile=0xc4c) returned 1 [0140.050] CloseHandle (hObject=0xc4c) returned 1 [0140.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbd78 [0140.051] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0140.051] wcscat (in: _Dest=0x66dbd78, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" [0140.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ac3a86-readme.txt")) returned 0x20 [0140.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 [0140.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 660 os_tid = 0xde0 [0138.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0138.492] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0138.492] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0138.492] wcscat (in: _Dest=0x2ff7c18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*" [0138.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0138.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0138.493] wcscmp (_String1=".", _String2=".") returned 0 [0138.493] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.493] wcscmp (_String1="..", _String2=".") returned 1 [0138.493] wcscmp (_String1="..", _String2="..") returned 0 [0138.493] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1 [0138.493] wcscmp (_String1="SynchronizationEula.rtf", _String2=".") returned 1 [0138.493] wcscmp (_String1="SynchronizationEula.rtf", _String2="..") returned 1 [0138.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56920 [0138.493] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0138.493] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0138.493] wcscat (in: _Dest=0x3d56920, _Source="SynchronizationEula.rtf" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" [0140.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0140.411] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 0 [0140.411] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0140.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0140.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0140.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 661 os_tid = 0xddc [0138.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d538 [0138.494] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0138.494] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0138.494] wcscat (in: _Dest=0x32d538, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*" [0138.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0138.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808b8 [0138.961] wcscmp (_String1=".", _String2=".") returned 0 [0138.961] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.961] wcscmp (_String1="..", _String2=".") returned 1 [0138.961] wcscmp (_String1="..", _String2="..") returned 0 [0138.961] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0138.961] wcscmp (_String1="1033", _String2=".") returned 1 [0138.961] wcscmp (_String1="1033", _String2="..") returned 1 [0138.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e250 [0138.962] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0138.962] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0138.962] wcscat (in: _Dest=0x3e0e250, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0149.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0149.348] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0149.348] FindClose (in: hFindFile=0x3e808b8 | out: hFindFile=0x3e808b8) returned 1 [0149.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0149.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 [0149.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 662 os_tid = 0xdec [0138.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3557a0 [0138.497] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0138.497] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0138.497] wcscat (in: _Dest=0x3557a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*" [0138.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0138.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0138.962] wcscmp (_String1=".", _String2=".") returned 0 [0138.962] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.962] wcscmp (_String1="..", _String2=".") returned 1 [0138.962] wcscmp (_String1="..", _String2="..") returned 0 [0138.962] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4394d00, ftCreationTime.dwHighDateTime=0x1bd9aee, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4394d00, ftLastWriteTime.dwHighDateTime=0x1bd9aee, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0138.962] wcscmp (_String1="J0143743.GIF", _String2=".") returned 1 [0138.962] wcscmp (_String1="J0143743.GIF", _String2="..") returned 1 [0138.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d490 [0138.963] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0138.963] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0138.963] wcscat (in: _Dest=0x3e5d490, _Source="J0143743.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" [0149.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0149.350] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a221400, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a221400, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0149.350] wcscmp (_String1="J0143744.GIF", _String2=".") returned 1 [0149.350] wcscmp (_String1="J0143744.GIF", _String2="..") returned 1 [0149.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053bb8 [0149.350] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.350] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.350] wcscat (in: _Dest=0x3053bb8, _Source="J0143744.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" [0149.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0149.351] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41492200, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41492200, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0149.351] wcscmp (_String1="J0143745.GIF", _String2=".") returned 1 [0149.351] wcscmp (_String1="J0143745.GIF", _String2="..") returned 1 [0149.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0149.351] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.351] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.351] wcscat (in: _Dest=0x3053330, _Source="J0143745.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" [0149.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0149.352] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd56600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0149.352] wcscmp (_String1="J0143746.GIF", _String2=".") returned 1 [0149.352] wcscmp (_String1="J0143746.GIF", _String2="..") returned 1 [0149.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cc08 [0149.353] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.353] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.353] wcscat (in: _Dest=0x3e5cc08, _Source="J0143746.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" [0149.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0149.354] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a00db00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a00db00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0149.354] wcscmp (_String1="J0143748.GIF", _String2=".") returned 1 [0149.354] wcscmp (_String1="J0143748.GIF", _String2="..") returned 1 [0149.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d1f0 [0149.354] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.354] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.354] wcscat (in: _Dest=0x3e5d1f0, _Source="J0143748.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" [0149.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0149.355] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342c3300, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x342c3300, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0149.355] wcscmp (_String1="J0143749.GIF", _String2=".") returned 1 [0149.355] wcscmp (_String1="J0143749.GIF", _String2="..") returned 1 [0149.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ca10 [0149.355] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.355] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.355] wcscat (in: _Dest=0x3e5ca10, _Source="J0143749.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" [0149.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0149.356] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56be4c00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56be4c00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0149.356] wcscmp (_String1="J0143750.GIF", _String2=".") returned 1 [0149.357] wcscmp (_String1="J0143750.GIF", _String2="..") returned 1 [0149.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ccb0 [0149.357] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.357] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.357] wcscat (in: _Dest=0x3e5ccb0, _Source="J0143750.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" [0149.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0149.358] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e661100, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e661100, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0149.358] wcscmp (_String1="J0143752.GIF", _String2=".") returned 1 [0149.358] wcscmp (_String1="J0143752.GIF", _String2="..") returned 1 [0149.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ce00 [0149.359] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.359] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.359] wcscat (in: _Dest=0x3e5ce00, _Source="J0143752.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" [0149.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0149.360] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c337600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c337600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0149.360] wcscmp (_String1="J0143753.GIF", _String2=".") returned 1 [0149.360] wcscmp (_String1="J0143753.GIF", _String2="..") returned 1 [0149.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cd58 [0149.360] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.360] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.360] wcscat (in: _Dest=0x3e5cd58, _Source="J0143753.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" [0149.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0149.361] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9127e900, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9127e900, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0149.361] wcscmp (_String1="J0143754.GIF", _String2=".") returned 1 [0149.361] wcscmp (_String1="J0143754.GIF", _String2="..") returned 1 [0149.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cb60 [0149.362] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.362] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.362] wcscat (in: _Dest=0x3e5cb60, _Source="J0143754.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" [0149.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0149.363] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de55a00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5de55a00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0149.363] wcscmp (_String1="J0143758.GIF", _String2=".") returned 1 [0149.363] wcscmp (_String1="J0143758.GIF", _String2="..") returned 1 [0149.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c968 [0149.363] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.363] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.363] wcscat (in: _Dest=0x3e5c968, _Source="J0143758.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" [0149.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0149.364] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0149.364] wcscmp (_String1="WB00516L.GIF", _String2=".") returned 1 [0149.364] wcscmp (_String1="WB00516L.GIF", _String2="..") returned 1 [0149.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5bd98 [0149.364] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.364] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.365] wcscat (in: _Dest=0x3e5bd98, _Source="WB00516L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" [0149.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0149.366] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0149.366] wcscmp (_String1="WB00531L.GIF", _String2=".") returned 1 [0149.366] wcscmp (_String1="WB00531L.GIF", _String2="..") returned 1 [0149.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d688 [0149.366] wcscpy (in: _Dest=0x3e5d688, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.366] wcscat (in: _Dest=0x3e5d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.366] wcscat (in: _Dest=0x3e5d688, _Source="WB00531L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" [0149.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0149.367] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0149.367] wcscmp (_String1="WB00673L.GIF", _String2=".") returned 1 [0149.367] wcscmp (_String1="WB00673L.GIF", _String2="..") returned 1 [0149.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d0a0 [0149.367] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.367] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.367] wcscat (in: _Dest=0x3e5d0a0, _Source="WB00673L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" [0149.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0149.368] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0149.368] wcscmp (_String1="WB00703L.GIF", _String2=".") returned 1 [0149.368] wcscmp (_String1="WB00703L.GIF", _String2="..") returned 1 [0149.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cf50 [0149.368] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.368] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.368] wcscat (in: _Dest=0x3e5cf50, _Source="WB00703L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" [0149.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0149.369] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0149.369] wcscmp (_String1="WB00760L.GIF", _String2=".") returned 1 [0149.369] wcscmp (_String1="WB00760L.GIF", _String2="..") returned 1 [0149.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5dc70 [0149.369] wcscpy (in: _Dest=0x3e5dc70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.369] wcscat (in: _Dest=0x3e5dc70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.369] wcscat (in: _Dest=0x3e5dc70, _Source="WB00760L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" [0149.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0149.371] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0149.371] wcscmp (_String1="WB00780L.GIF", _String2=".") returned 1 [0149.371] wcscmp (_String1="WB00780L.GIF", _String2="..") returned 1 [0149.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x325320 [0149.371] wcscpy (in: _Dest=0x325320, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.371] wcscat (in: _Dest=0x325320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.371] wcscat (in: _Dest=0x325320, _Source="WB00780L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" [0149.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x325320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0149.372] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0149.372] wcscmp (_String1="WB01741L.GIF", _String2=".") returned 1 [0149.372] wcscmp (_String1="WB01741L.GIF", _String2="..") returned 1 [0149.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x326430 [0149.372] wcscpy (in: _Dest=0x326430, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.372] wcscat (in: _Dest=0x326430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.372] wcscat (in: _Dest=0x326430, _Source="WB01741L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" [0149.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x326430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0149.373] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0149.373] wcscmp (_String1="WB02039_.GIF", _String2=".") returned 1 [0149.373] wcscmp (_String1="WB02039_.GIF", _String2="..") returned 1 [0149.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x326580 [0149.373] wcscpy (in: _Dest=0x326580, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.373] wcscat (in: _Dest=0x326580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.373] wcscat (in: _Dest=0x326580, _Source="WB02039_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" [0149.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x326580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0149.375] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0149.375] wcscmp (_String1="WB02055_.GIF", _String2=".") returned 1 [0149.375] wcscmp (_String1="WB02055_.GIF", _String2="..") returned 1 [0149.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3251d0 [0149.375] wcscpy (in: _Dest=0x3251d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.375] wcscat (in: _Dest=0x3251d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.375] wcscat (in: _Dest=0x3251d0, _Source="WB02055_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" [0149.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3251d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0149.377] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0149.377] wcscmp (_String1="WB02073_.GIF", _String2=".") returned 1 [0149.377] wcscmp (_String1="WB02073_.GIF", _String2="..") returned 1 [0149.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dce8 [0149.377] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.377] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.377] wcscat (in: _Dest=0x697dce8, _Source="WB02073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" [0149.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0149.378] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0149.378] wcscmp (_String1="WB02074_.GIF", _String2=".") returned 1 [0149.378] wcscmp (_String1="WB02074_.GIF", _String2="..") returned 1 [0149.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dd90 [0149.378] wcscpy (in: _Dest=0x697dd90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.378] wcscat (in: _Dest=0x697dd90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.378] wcscat (in: _Dest=0x697dd90, _Source="WB02074_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" [0149.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0149.383] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0149.383] wcscmp (_String1="WB02077_.GIF", _String2=".") returned 1 [0149.383] wcscmp (_String1="WB02077_.GIF", _String2="..") returned 1 [0149.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697de38 [0149.383] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.383] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.383] wcscat (in: _Dest=0x697de38, _Source="WB02077_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" [0149.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0149.385] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0149.385] wcscmp (_String1="WB02082_.GIF", _String2=".") returned 1 [0149.385] wcscmp (_String1="WB02082_.GIF", _String2="..") returned 1 [0149.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0149.385] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.385] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.385] wcscat (in: _Dest=0x697dee0, _Source="WB02082_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" [0149.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0149.386] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0149.386] wcscmp (_String1="WB02085_.GIF", _String2=".") returned 1 [0149.386] wcscmp (_String1="WB02085_.GIF", _String2="..") returned 1 [0149.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697df88 [0149.386] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.386] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.386] wcscat (in: _Dest=0x697df88, _Source="WB02085_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" [0149.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0149.387] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0149.387] wcscmp (_String1="WB02097_.GIF", _String2=".") returned 1 [0149.387] wcscmp (_String1="WB02097_.GIF", _String2="..") returned 1 [0149.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e030 [0149.388] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.388] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.388] wcscat (in: _Dest=0x697e030, _Source="WB02097_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" [0149.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0149.389] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0149.389] wcscmp (_String1="WB02106_.GIF", _String2=".") returned 1 [0149.389] wcscmp (_String1="WB02106_.GIF", _String2="..") returned 1 [0149.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e0d8 [0149.389] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.389] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.389] wcscat (in: _Dest=0x697e0d8, _Source="WB02106_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" [0149.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0149.390] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0149.390] wcscmp (_String1="WB02116_.GIF", _String2=".") returned 1 [0149.390] wcscmp (_String1="WB02116_.GIF", _String2="..") returned 1 [0149.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e180 [0149.390] wcscpy (in: _Dest=0x697e180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.390] wcscat (in: _Dest=0x697e180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.390] wcscat (in: _Dest=0x697e180, _Source="WB02116_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" [0149.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0149.391] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0149.391] wcscmp (_String1="WB02134_.GIF", _String2=".") returned 1 [0149.391] wcscmp (_String1="WB02134_.GIF", _String2="..") returned 1 [0149.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e228 [0149.392] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0149.392] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0149.392] wcscat (in: _Dest=0x697e228, _Source="WB02134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" [0149.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0150.428] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0150.428] wcscmp (_String1="WB02187_.GIF", _String2=".") returned 1 [0150.428] wcscmp (_String1="WB02187_.GIF", _String2="..") returned 1 [0150.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5bee8 [0150.429] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0150.429] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0150.429] wcscat (in: _Dest=0x3e5bee8, _Source="WB02187_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" [0156.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0156.639] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0156.639] wcscmp (_String1="WB02198_.GIF", _String2=".") returned 1 [0156.639] wcscmp (_String1="WB02198_.GIF", _String2="..") returned 1 [0156.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cea8 [0156.639] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0156.639] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0156.639] wcscat (in: _Dest=0x3e5cea8, _Source="WB02198_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" [0156.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0156.640] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0156.640] wcscmp (_String1="WB02201_.GIF", _String2=".") returned 1 [0156.640] wcscmp (_String1="WB02201_.GIF", _String2="..") returned 1 [0156.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d538 [0156.640] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0156.640] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0156.640] wcscat (in: _Dest=0x3e5d538, _Source="WB02201_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" [0156.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0156.641] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0156.641] wcscmp (_String1="WB02214_.GIF", _String2=".") returned 1 [0156.641] wcscmp (_String1="WB02214_.GIF", _String2="..") returned 1 [0156.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c818 [0156.641] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0156.641] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0156.641] wcscat (in: _Dest=0x3e5c818, _Source="WB02214_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" [0156.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0156.643] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0156.643] wcscmp (_String1="WB02218_.GIF", _String2=".") returned 1 [0156.643] wcscmp (_String1="WB02218_.GIF", _String2="..") returned 1 [0156.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d730 [0156.643] wcscpy (in: _Dest=0x3e5d730, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0156.643] wcscat (in: _Dest=0x3e5d730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0156.643] wcscat (in: _Dest=0x3e5d730, _Source="WB02218_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" [0156.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0156.644] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0156.644] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0156.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0156.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 [0156.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 663 os_tid = 0xdfc [0138.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7c28 [0138.502] wcscpy (in: _Dest=0x3ef7c28, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0138.502] wcscat (in: _Dest=0x3ef7c28, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0138.502] wcscat (in: _Dest=0x3ef7c28, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\*") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\*" [0138.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0138.502] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0138.967] wcscmp (_String1=".", _String2=".") returned 0 [0138.967] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.967] wcscmp (_String1="..", _String2=".") returned 1 [0138.967] wcscmp (_String1="..", _String2="..") returned 0 [0138.967] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0138.967] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0138.967] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0138.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5aa8 [0138.967] wcscpy (in: _Dest=0x66e5aa8, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0138.967] wcscat (in: _Dest=0x66e5aa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0138.967] wcscat (in: _Dest=0x66e5aa8, _Source="jaureglist.xml" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" [0142.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0142.764] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0142.764] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0142.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0142.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c28) returned 1 [0142.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626a0) returned 1 Thread: id = 664 os_tid = 0xba4 [0138.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56a08 [0138.503] wcscpy (in: _Dest=0x3d56a08, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0138.503] wcscat (in: _Dest=0x3d56a08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0138.503] wcscat (in: _Dest=0x3d56a08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0138.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0138.504] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0138.963] wcscmp (_String1=".", _String2=".") returned 0 [0138.963] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.963] wcscmp (_String1="..", _String2=".") returned 1 [0138.963] wcscmp (_String1="..", _String2="..") returned 0 [0138.963] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0138.964] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0138.964] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0138.964] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0138.964] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0138.964] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0138.964] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0138.964] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0138.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0138.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a08) returned 1 [0138.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 665 os_tid = 0xbbc [0138.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff72c0 [0138.505] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0138.505] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0138.505] wcscat (in: _Dest=0x2ff72c0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0138.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0138.505] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0138.966] wcscmp (_String1=".", _String2=".") returned 0 [0138.966] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.966] wcscmp (_String1="..", _String2=".") returned 1 [0138.966] wcscmp (_String1="..", _String2="..") returned 0 [0138.966] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0138.966] wcscmp (_String1="x86", _String2=".") returned 1 [0138.966] wcscmp (_String1="x86", _String2="..") returned 1 [0138.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0138.966] wcscpy (in: _Dest=0x3336a8, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0138.966] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0138.966] wcscat (in: _Dest=0x3336a8, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0142.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0142.762] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0142.762] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0142.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0142.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 [0142.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 Thread: id = 666 os_tid = 0xad0 [0138.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0138.506] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0138.506] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0138.506] wcscat (in: _Dest=0x2ff7aa8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0138.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0138.507] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809f8 [0138.507] wcscmp (_String1=".", _String2=".") returned 0 [0138.507] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.507] wcscmp (_String1="..", _String2=".") returned 1 [0138.507] wcscmp (_String1="..", _String2="..") returned 0 [0138.507] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0138.508] wcscmp (_String1="x86", _String2=".") returned 1 [0138.508] wcscmp (_String1="x86", _String2="..") returned 1 [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333168 [0138.508] wcscpy (in: _Dest=0x333168, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0138.508] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0138.508] wcscat (in: _Dest=0x333168, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0140.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0140.414] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0140.414] FindClose (in: hFindFile=0x3e809f8 | out: hFindFile=0x3e809f8) returned 1 [0140.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0140.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 [0140.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 Thread: id = 667 os_tid = 0x570 [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d408 [0138.508] wcscpy (in: _Dest=0x32d408, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0138.508] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0138.508] wcscat (in: _Dest=0x32d408, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0138.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca478 [0138.509] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80978 [0138.509] wcscmp (_String1=".", _String2=".") returned 0 [0138.509] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.509] wcscmp (_String1="..", _String2=".") returned 1 [0138.509] wcscmp (_String1="..", _String2="..") returned 0 [0138.509] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.509] FindClose (in: hFindFile=0x3e80978 | out: hFindFile=0x3e80978) returned 1 [0138.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca478) returned 1 [0138.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0138.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 668 os_tid = 0xbac [0138.511] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0138.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0138.512] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.512] GetLastError () returned 0x5 [0138.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0138.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 669 os_tid = 0x784 [0138.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20 [0143.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0143.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.083] GetLastError () returned 0x5 [0143.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0143.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 670 os_tid = 0x564 [0138.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20 [0140.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0140.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.805] GetLastError () returned 0x5 [0140.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0140.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 671 os_tid = 0x640 [0138.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20 [0143.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0143.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.080] GetLastError () returned 0x5 [0143.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0143.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59b70) returned 1 Thread: id = 672 os_tid = 0x4f0 [0138.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20 [0143.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0143.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.071] GetLastError () returned 0x5 [0143.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0143.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 673 os_tid = 0x8d0 [0138.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20 [0143.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0143.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.393] GetLastError () returned 0x5 [0143.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0143.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 674 os_tid = 0x8f0 [0138.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20 [0143.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0143.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.407] GetLastError () returned 0x5 [0143.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0143.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d586b8) returned 1 Thread: id = 675 os_tid = 0x914 [0138.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20 [0143.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0143.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.390] GetLastError () returned 0x5 [0143.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0143.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58630) returned 1 Thread: id = 676 os_tid = 0x740 [0138.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20 [0143.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0143.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.123] GetLastError () returned 0x5 [0143.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0143.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 Thread: id = 677 os_tid = 0xc8 [0138.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20 [0143.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0143.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.391] GetLastError () returned 0x5 [0143.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0143.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 678 os_tid = 0x954 [0138.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20 [0143.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0143.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.122] GetLastError () returned 0x5 [0143.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0143.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 679 os_tid = 0x964 [0138.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20 [0143.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0143.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.121] GetLastError () returned 0x5 [0143.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0143.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 680 os_tid = 0x974 [0138.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20 [0143.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0143.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.120] GetLastError () returned 0x5 [0143.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0143.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 681 os_tid = 0xacc [0138.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20 [0143.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0143.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.118] GetLastError () returned 0x5 [0143.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0143.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 682 os_tid = 0xb00 [0138.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20 [0143.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0143.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.117] GetLastError () returned 0x5 [0143.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0143.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 683 os_tid = 0xc4c [0138.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20 [0143.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0143.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.081] GetLastError () returned 0x5 [0143.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0143.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 684 os_tid = 0xb24 [0138.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20 [0143.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0143.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.087] GetLastError () returned 0x5 [0143.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 685 os_tid = 0x6d4 [0138.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20 [0143.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0143.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.086] GetLastError () returned 0x5 [0143.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0143.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 686 os_tid = 0xe00 [0138.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20 [0143.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0143.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.084] GetLastError () returned 0x5 [0143.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0143.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 687 os_tid = 0xc48 [0138.971] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv")) returned 0x20 [0139.154] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", dwFileAttributes=0x20) returned 1 [0139.155] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3a8 [0139.155] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0xa49fea4 | out: lpFileSize=0xa49fea4*=9699328) returned 1 [0139.155] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x93fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.155] ReadFile (in: hFile=0x3a8, lpBuffer=0xa49fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa49fe90, lpOverlapped=0x0 | out: lpBuffer=0xa49fe80*, lpNumberOfBytesRead=0xa49fe90*=0x4, lpOverlapped=0x0) returned 1 [0139.158] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0139.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0139.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0139.158] NtQuerySystemTime (in: CurrentTime=0xa49fe18 | out: CurrentTime=0xa49fe18*=132482710478184000) returned 0x0 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x3bf121e4 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x2d063392 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x5dfff7b0 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x48afb7cd [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x56c7db01 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x1d5cea6e [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x3cda10ff [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x7692353d [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0xa5d3daa [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x75efd75e [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x1ee7dd01 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x1324e2cc [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x53b275ad [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x29c2bce3 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x3151a1b1 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x4433b43a [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x66f4d6f3 [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x4676dbfe [0139.158] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0xcdf47ce [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x16bc26cd [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x663ba0d7 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x7656a496 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x6729b88d [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x1d73b98e [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x5495352 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x7d433343 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x3a815c12 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x4571a9ce [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x6577f405 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x23a09d45 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x4657cf62 [0139.159] RtlRandomEx (in: Seed=0xa49fe10 | out: Seed=0xa49fe10) returned 0x74d9cb1b [0139.167] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.167] ReadFile (in: hFile=0x3a8, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.170] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ec00 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc88 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0139.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0139.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0139.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0139.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0139.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ec00) returned 1 [0139.170] WriteFile (in: hFile=0x3a8, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0139.821] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.821] ReadFile (in: hFile=0x3a8, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.823] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32f40 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0240 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0139.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0139.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0139.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0139.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32f40) returned 1 [0139.824] WriteFile (in: hFile=0x3a8, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0139.834] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.834] ReadFile (in: hFile=0x3a8, lpBuffer=0x6722910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesRead=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0139.835] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6498 [0139.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d5f8 [0139.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0139.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0139.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0139.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0139.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0139.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0139.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0139.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6498) returned 1 [0139.836] WriteFile (in: hFile=0x3a8, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa49fe18, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0xa49fe18*=0x3c00, lpOverlapped=0x0) returned 1 [0141.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0141.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d920 [0141.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0141.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62010 [0141.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0141.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0141.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0141.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32eb0) returned 1 [0141.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16c) returned 0x2fed4c0 [0141.398] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.398] WriteFile (in: hFile=0x3a8, lpBuffer=0x2fed4c0*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0xa49fe98, lpOverlapped=0x0 | out: lpBuffer=0x2fed4c0*, lpNumberOfBytesWritten=0xa49fe98*=0x16c, lpOverlapped=0x0) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fed4c0) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62010) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62100) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0142.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0142.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0142.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0142.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5c770 [0142.079] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" [0142.079] wcscat (in: _Dest=0x3e5c770, _Source=".ac3a86" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.ac3a86") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.ac3a86" [0142.079] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.ac3a86", NtPathName=0xa49fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0142.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333468 [0143.179] FlushFileBuffers (hFile=0x3a8) returned 1 [0143.181] CloseHandle (hObject=0x3a8) returned 1 [0143.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa08 [0143.208] wcscpy (in: _Dest=0x2fcaa08, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0143.208] wcscat (in: _Dest=0x2fcaa08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\AC3A86-Readme.txt") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\AC3A86-Readme.txt" [0143.208] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\ac3a86-readme.txt")) returned 0xffffffff [0143.209] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\AC3A86-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0143.230] WriteFile (in: hFile=0x1570, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa49fe2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa49fe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0143.239] CloseHandle (hObject=0x1570) returned 1 [0143.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa08) returned 1 [0143.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 688 os_tid = 0xe08 [0138.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbbc8 [0138.972] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0138.972] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0138.972] wcscat (in: _Dest=0x66dbbc8, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*" [0138.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0138.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806f8 [0139.157] wcscmp (_String1=".", _String2=".") returned 0 [0139.157] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.169] wcscmp (_String1="..", _String2=".") returned 1 [0139.169] wcscmp (_String1="..", _String2="..") returned 0 [0139.169] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8adb1890, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8adb1890, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xef5d6500, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0139.169] wcscmp (_String1="PresentationBuildTasks.dll", _String2=".") returned 1 [0139.169] wcscmp (_String1="PresentationBuildTasks.dll", _String2="..") returned 1 [0139.169] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a231830, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a231830, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0139.169] wcscmp (_String1="PresentationCore.dll", _String2=".") returned 1 [0139.169] wcscmp (_String1="PresentationCore.dll", _String2="..") returned 1 [0139.169] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0139.170] wcscmp (_String1="PresentationFramework.Aero.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Aero.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Classic.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Classic.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad3f470, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8ad3f470, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0139.171] wcscmp (_String1="PresentationFramework.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="PresentationFramework.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a33c1d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a33c1d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Luna.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Luna.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Royale.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="PresentationFramework.Royale.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ba30b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x91ba30b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0139.171] wcscmp (_String1="ReachFramework.dll", _String2=".") returned 1 [0139.171] wcscmp (_String1="ReachFramework.dll", _String2="..") returned 1 [0139.171] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0139.171] wcscmp (_String1="RedistList", _String2=".") returned 1 [0139.171] wcscmp (_String1="RedistList", _String2="..") returned 1 [0139.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0139.171] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0139.171] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0139.171] wcscat (in: _Dest=0x3e0de90, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0141.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0141.249] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0141.249] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0141.249] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0141.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dcb0 [0141.249] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0141.249] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0141.249] wcscat (in: _Dest=0x3e0dcb0, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0141.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.IdentityModel.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.IdentityModel.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380de430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380de430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.IO.Log.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.IO.Log.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.Printing.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.Printing.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2d5430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a2d5430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.Runtime.Serialization.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.Runtime.Serialization.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3820ef30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3820ef30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd1900000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.ServiceModel.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.ServiceModel.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.Speech.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.Speech.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfdab8100, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0141.251] wcscmp (_String1="System.Workflow.Activities.dll", _String2=".") returned 1 [0141.251] wcscmp (_String1="System.Workflow.Activities.dll", _String2="..") returned 1 [0141.251] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="System.Workflow.Runtime.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="System.Workflow.Runtime.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="UIAutomationClient.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="UIAutomationClient.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="UIAutomationProvider.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="UIAutomationProvider.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="UIAutomationTypes.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="UIAutomationTypes.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932d8730, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x932d8730, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf2f0ec00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="WindowsBase.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="WindowsBase.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0141.252] wcscmp (_String1="WindowsFormsIntegration.dll", _String2=".") returned 1 [0141.252] wcscmp (_String1="WindowsFormsIntegration.dll", _String2="..") returned 1 [0141.252] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0141.252] wcscmp (_String1="WinFXList.xml", _String2=".") returned 1 [0141.253] wcscmp (_String1="WinFXList.xml", _String2="..") returned 1 [0141.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ccb0 [0141.253] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0141.253] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0141.253] wcscat (in: _Dest=0x3e5ccb0, _Source="WinFXList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" [0141.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0141.254] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0141.254] FindClose (in: hFindFile=0x3e806f8 | out: hFindFile=0x3e806f8) returned 1 [0141.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0141.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 [0141.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59730) returned 1 Thread: id = 689 os_tid = 0x608 [0138.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc288 [0138.975] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0138.975] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0138.975] wcscat (in: _Dest=0x66dc288, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*" [0138.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0138.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0139.660] wcscmp (_String1=".", _String2=".") returned 0 [0139.660] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.212] wcscmp (_String1="..", _String2=".") returned 1 [0140.212] wcscmp (_String1="..", _String2="..") returned 0 [0140.212] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2=".") returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2="..") returned 1 [0140.212] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a492e30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a492e30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2=".") returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2="..") returned 1 [0140.212] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2=".") returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2="..") returned 1 [0140.212] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9166e090, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9166e090, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0140.212] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2=".") returned 1 [0140.213] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2="..") returned 1 [0140.213] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0140.213] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2=".") returned 1 [0140.213] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2="..") returned 1 [0140.213] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0140.213] wcscmp (_String1="RedistList", _String2=".") returned 1 [0140.213] wcscmp (_String1="RedistList", _String2="..") returned 1 [0140.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0140.213] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0140.213] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0140.213] wcscat (in: _Dest=0x3e0eed0, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0142.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0142.767] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0142.767] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0142.767] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0142.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e110 [0142.768] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0142.768] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0142.768] wcscat (in: _Dest=0x3e0e110, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0142.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0142.769] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9380d750, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9380d750, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0142.769] wcscmp (_String1="System.AddIn.Contract.dll", _String2=".") returned 1 [0142.769] wcscmp (_String1="System.AddIn.Contract.dll", _String2="..") returned 1 [0142.769] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0142.769] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0142.769] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0142.769] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0142.769] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2=".") returned 1 [0142.769] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2="..") returned 1 [0142.769] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc3a8d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3bc3a8d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0142.769] wcscmp (_String1="System.Core.dll", _String2=".") returned 1 [0142.769] wcscmp (_String1="System.Core.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382cd610, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x382cd610, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Entity.Design.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Entity.Design.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2134f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2134f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Entity.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Entity.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c285910, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c285910, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Linq.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Linq.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Services.Client.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Services.Client.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383fe110, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383fe110, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Services.Design.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Services.Design.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383b1e50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383b1e50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Data.Services.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Data.Services.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a48bf0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a48bf0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Management.Instrumentation.dll", _String2=".") returned 1 [0142.770] wcscmp (_String1="System.Management.Instrumentation.dll", _String2="..") returned 1 [0142.770] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a22a90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a22a90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0142.770] wcscmp (_String1="System.Net.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Net.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.ServiceModel.Web.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.ServiceModel.Web.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c343ff0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c343ff0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Abstractions.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.Abstractions.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x381769b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x381769b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.DynamicData.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.DynamicData.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f32bab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f32bab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Entity.Design.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.Entity.Design.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384bc7f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384bc7f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Entity.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.Entity.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384e2950, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384e2950, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f351c10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f351c10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Extensions.dll", _String2=".") returned 1 [0142.771] wcscmp (_String1="System.Web.Extensions.dll", _String2="..") returned 1 [0142.771] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0142.771] wcscmp (_String1="System.Web.Routing.dll", _String2=".") returned 1 [0142.772] wcscmp (_String1="System.Web.Routing.dll", _String2="..") returned 1 [0142.772] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0142.772] wcscmp (_String1="System.Windows.Presentation.dll", _String2=".") returned 1 [0142.772] wcscmp (_String1="System.Windows.Presentation.dll", _String2="..") returned 1 [0142.772] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3852ec10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3852ec10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0142.772] wcscmp (_String1="System.WorkflowServices.dll", _String2=".") returned 1 [0142.772] wcscmp (_String1="System.WorkflowServices.dll", _String2="..") returned 1 [0142.772] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0142.772] wcscmp (_String1="System.Xml.Linq.dll", _String2=".") returned 1 [0142.772] wcscmp (_String1="System.Xml.Linq.dll", _String2="..") returned 1 [0142.772] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0142.772] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0142.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0142.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 [0142.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 690 os_tid = 0x518 [0138.976] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms")) returned 0x23 [0138.977] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 1 [0140.561] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0140.561] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0x9bbfbb4 | out: lpFileSize=0x9bbfbb4*=248) returned 1 [0140.561] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.561] ReadFile (in: hFile=0x1570, lpBuffer=0x9bbfb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bbfba0, lpOverlapped=0x0 | out: lpBuffer=0x9bbfb90*, lpNumberOfBytesRead=0x9bbfba0*=0x4, lpOverlapped=0x0) returned 1 [0140.588] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0140.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0140.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0140.588] NtQuerySystemTime (in: CurrentTime=0x9bbfb28 | out: CurrentTime=0x9bbfb28*=132482710492536000) returned 0x0 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x2baf4638 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x51701e10 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x5b81e964 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x10dd96af [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x612938e0 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x39320e88 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x4717e9af [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x4b70d43 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x27dcf835 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x10cd9775 [0140.588] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x34fa5fc6 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x2ad19995 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0xb0b70f5 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x4b70d43 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x22f92495 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x84b9ea8 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0xabe8518 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x7a43c62b [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x3e9aa412 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x1158b413 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x3f00ac49 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x2f0e088e [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x6cb1abe8 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x3add4980 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x4731cd28 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x447f3866 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x7bc700c0 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x63a5134f [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x7d992fa8 [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x674bea2f [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x50488b1a [0140.589] RtlRandomEx (in: Seed=0x9bbfb20 | out: Seed=0x9bbfb20) returned 0x1975f420 [0140.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0140.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6740950 [0140.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6744558 [0140.602] ReadFile (in: hFile=0x1570, lpBuffer=0x6740950, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x9bbfb1c, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0x9bbfb1c*=0xf8, lpOverlapped=0x0) returned 1 [0140.602] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.602] WriteFile (in: hFile=0x1570, lpBuffer=0x6744558*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x9bbfb20, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesWritten=0x9bbfb20*=0xf8, lpOverlapped=0x0) returned 1 [0140.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0140.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0140.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0140.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6744558) returned 1 [0140.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6740950) returned 1 [0140.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0140.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0140.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f40 [0140.623] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.623] WriteFile (in: hFile=0x1570, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x9bbfba8, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x9bbfba8*=0x11a, lpOverlapped=0x0) returned 1 [0140.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0140.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0140.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0140.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 [0140.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0140.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0140.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0140.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0140.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b330 [0140.627] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" [0140.627] wcscat (in: _Dest=0x3f1b330, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.ac3a86") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.ac3a86" [0140.627] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.ac3a86", NtPathName=0x9bbfb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dce58 [0140.630] FlushFileBuffers (hFile=0x1570) returned 1 [0140.647] CloseHandle (hObject=0x1570) returned 1 [0140.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de68 [0140.649] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0140.649] wcscat (in: _Dest=0x3d8de68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt" [0140.649] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\ac3a86-readme.txt")) returned 0xffffffff [0140.649] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0140.650] WriteFile (in: hFile=0x1570, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9bbfb3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9bbfb3c*=0x8b9, lpOverlapped=0x0) returned 1 [0140.653] CloseHandle (hObject=0x1570) returned 1 [0140.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 [0140.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 691 os_tid = 0x1004 [0138.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms")) returned 0x23 [0138.977] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 1 [0140.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1574 [0140.562] GetFileSizeEx (in: hFile=0x1574, lpFileSize=0xaa4fd7c | out: lpFileSize=0xaa4fd7c*=248) returned 1 [0140.562] SetFilePointerEx (in: hFile=0x1574, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.562] ReadFile (in: hFile=0x1574, lpBuffer=0xaa4fd58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa4fd68, lpOverlapped=0x0 | out: lpBuffer=0xaa4fd58*, lpNumberOfBytesRead=0xaa4fd68*=0x4, lpOverlapped=0x0) returned 1 [0140.606] SetFilePointerEx (in: hFile=0x1574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0140.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0140.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0140.607] NtQuerySystemTime (in: CurrentTime=0xaa4fcf0 | out: CurrentTime=0xaa4fcf0*=132482710492692000) returned 0x0 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0xfc75cdb [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x44364f6a [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x77acccd3 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x625bd18 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0xcc157ea [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x7456d9a1 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x3a4a39e [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x76b34036 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x46d8ee88 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x78de3a83 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x3e6fb322 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x3037bb64 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x35b4d580 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x7bf67f41 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x7bc700c0 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x342e6a46 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x41b69945 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x15916380 [0140.607] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x7dbc09b8 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x5872b9a2 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x15d998dd [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x2b21110d [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0xdc2d82b [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x15548413 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x5872b9a2 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x442afaaa [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x1b07ab50 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x32768c04 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x7ecd4191 [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x6112d44a [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x5c70d4bb [0140.608] RtlRandomEx (in: Seed=0xaa4fce8 | out: Seed=0xaa4fce8) returned 0x21fc521a [0140.619] ReadFile (in: hFile=0x1574, lpBuffer=0x6748160, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0xaa4fce4, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0xaa4fce4*=0xf8, lpOverlapped=0x0) returned 1 [0140.619] SetFilePointerEx (in: hFile=0x1574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.620] WriteFile (in: hFile=0x1574, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xaa4fce8, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0xaa4fce8*=0xf8, lpOverlapped=0x0) returned 1 [0140.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0140.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6748160) returned 1 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330a8) returned 1 [0140.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e622e0 [0140.658] SetFilePointerEx (in: hFile=0x1574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.658] WriteFile (in: hFile=0x1574, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0xaa4fd70, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0xaa4fd70*=0x128, lpOverlapped=0x0) returned 1 [0140.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626f0) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e622e0) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0140.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0140.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25fb8 [0140.670] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" [0140.670] wcscat (in: _Dest=0x3f25fb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.ac3a86") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.ac3a86" [0140.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.ac3a86", NtPathName=0xaa4fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0140.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d5d0 [0140.675] FlushFileBuffers (hFile=0x1574) returned 1 [0140.678] CloseHandle (hObject=0x1574) returned 1 [0140.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ea30 [0140.679] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0140.679] wcscat (in: _Dest=0x3d8ea30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt" [0140.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\ac3a86-readme.txt")) returned 0x20 [0140.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0140.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 Thread: id = 692 os_tid = 0x1008 [0138.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e58e8 [0138.978] wcscpy (in: _Dest=0x66e58e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0138.978] wcscat (in: _Dest=0x66e58e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0138.978] wcscat (in: _Dest=0x66e58e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*" [0138.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca478 [0138.978] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80038 [0139.201] wcscmp (_String1=".", _String2=".") returned 0 [0139.201] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.214] wcscmp (_String1="..", _String2=".") returned 1 [0140.214] wcscmp (_String1="..", _String2="..") returned 0 [0140.214] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c2e3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0140.214] wcscmp (_String1="ACCDDSUI.DLL", _String2=".") returned 1 [0140.214] wcscmp (_String1="ACCDDSUI.DLL", _String2="..") returned 1 [0140.214] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32755000, ftCreationTime.dwHighDateTime=0x1ca8d8b, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32755000, ftLastWriteTime.dwHighDateTime=0x1ca8d8b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0140.214] wcscmp (_String1="ACCESS12.ACC", _String2=".") returned 1 [0140.214] wcscmp (_String1="ACCESS12.ACC", _String2="..") returned 1 [0140.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f262e8 [0140.214] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0140.214] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0140.214] wcscat (in: _Dest=0x3f262e8, _Source="ACCESS12.ACC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" [0154.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0154.853] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0154.853] wcscmp (_String1="ACCOLKI.DLL", _String2=".") returned 1 [0154.853] wcscmp (_String1="ACCOLKI.DLL", _String2="..") returned 1 [0154.853] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0154.853] wcscmp (_String1="ACCVDTUI.DLL", _String2=".") returned 1 [0154.853] wcscmp (_String1="ACCVDTUI.DLL", _String2="..") returned 1 [0154.853] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6ba100, ftCreationTime.dwHighDateTime=0x1c6affe, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef6ba100, ftLastWriteTime.dwHighDateTime=0x1c6affe, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0154.854] wcscmp (_String1="ACTIP10.HLP", _String2=".") returned 1 [0154.854] wcscmp (_String1="ACTIP10.HLP", _String2="..") returned 1 [0154.854] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f13f00, ftCreationTime.dwHighDateTime=0x1ca67ab, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4f13f00, ftLastWriteTime.dwHighDateTime=0x1ca67ab, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0154.854] wcscmp (_String1="ACWIZRC.DLL", _String2=".") returned 1 [0154.854] wcscmp (_String1="ACWIZRC.DLL", _String2="..") returned 1 [0154.854] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xf778, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0154.854] wcscmp (_String1="AEC.VSL", _String2=".") returned 1 [0154.854] wcscmp (_String1="AEC.VSL", _String2="..") returned 1 [0154.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0154.854] wcscpy (in: _Dest=0x66d0330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.854] wcscat (in: _Dest=0x66d0330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.854] wcscat (in: _Dest=0x66d0330, _Source="AEC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" [0154.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0154.856] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0154.856] wcscmp (_String1="AECUTILS.VSL", _String2=".") returned 1 [0154.856] wcscmp (_String1="AECUTILS.VSL", _String2="..") returned 1 [0154.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef730 [0154.856] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.856] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.856] wcscat (in: _Dest=0x66ef730, _Source="AECUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" [0154.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0154.857] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e65900, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77e65900, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0154.857] wcscmp (_String1="ASSET.VRD", _String2=".") returned 1 [0154.857] wcscmp (_String1="ASSET.VRD", _String2="..") returned 1 [0154.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b2b8 [0154.857] wcscpy (in: _Dest=0x674b2b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.858] wcscat (in: _Dest=0x674b2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.858] wcscat (in: _Dest=0x674b2b8, _Source="ASSET.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" [0154.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0154.859] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586c3600, ftCreationTime.dwHighDateTime=0x1c2fece, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x586c3600, ftLastWriteTime.dwHighDateTime=0x1c2fece, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0154.859] wcscmp (_String1="BASIC.HTM", _String2=".") returned 1 [0154.859] wcscmp (_String1="BASIC.HTM", _String2="..") returned 1 [0154.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b338 [0154.859] wcscpy (in: _Dest=0x674b338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.859] wcscat (in: _Dest=0x674b338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.859] wcscat (in: _Dest=0x674b338, _Source="BASIC.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" [0154.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0154.860] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0154.860] wcscmp (_String1="BCSRuntimeRes.dll", _String2=".") returned 1 [0154.860] wcscmp (_String1="BCSRuntimeRes.dll", _String2="..") returned 1 [0154.860] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530ed300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35232150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x530ed300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0154.860] wcscmp (_String1="BHOINTL.DLL", _String2=".") returned 1 [0154.860] wcscmp (_String1="BHOINTL.DLL", _String2="..") returned 1 [0154.860] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0154.861] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0154.861] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0154.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66efe18 [0154.861] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.861] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.861] wcscat (in: _Dest=0x66efe18, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0154.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0154.862] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0154.862] wcscmp (_String1="BSTORM.VSL", _String2=".") returned 1 [0154.862] wcscmp (_String1="BSTORM.VSL", _String2="..") returned 1 [0154.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b3b8 [0154.862] wcscpy (in: _Dest=0x674b3b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.862] wcscat (in: _Dest=0x674b3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.862] wcscat (in: _Dest=0x674b3b8, _Source="BSTORM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" [0154.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0154.864] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0154.864] wcscmp (_String1="BW.CSS", _String2=".") returned 1 [0154.864] wcscmp (_String1="BW.CSS", _String2="..") returned 1 [0154.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0498 [0154.864] wcscpy (in: _Dest=0x66d0498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.864] wcscat (in: _Dest=0x66d0498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.864] wcscat (in: _Dest=0x66d0498, _Source="BW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" [0154.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0154.865] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803e9400, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x803e9400, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0154.865] wcscmp (_String1="CALEVENT.VRD", _String2=".") returned 1 [0154.865] wcscmp (_String1="CALEVENT.VRD", _String2="..") returned 1 [0154.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef2f0 [0154.865] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.865] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.865] wcscat (in: _Dest=0x66ef2f0, _Source="CALEVENT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" [0154.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0154.866] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b7e900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b7e900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0154.867] wcscmp (_String1="CERTINTL.DLL", _String2=".") returned 1 [0154.867] wcscmp (_String1="CERTINTL.DLL", _String2="..") returned 1 [0154.867] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07a5100, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07a5100, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0154.867] wcscmp (_String1="CLVWINTL.DLL", _String2=".") returned 1 [0154.867] wcscmp (_String1="CLVWINTL.DLL", _String2="..") returned 1 [0154.867] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0154.867] wcscmp (_String1="CMAXRES.DLL", _String2=".") returned 1 [0154.867] wcscmp (_String1="CMAXRES.DLL", _String2="..") returned 1 [0154.867] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0154.867] wcscmp (_String1="COFFEE.CSS", _String2=".") returned 1 [0154.867] wcscmp (_String1="COFFEE.CSS", _String2="..") returned 1 [0154.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b438 [0154.867] wcscpy (in: _Dest=0x674b438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.867] wcscat (in: _Dest=0x674b438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.867] wcscat (in: _Dest=0x674b438, _Source="COFFEE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" [0154.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0154.868] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0154.869] wcscmp (_String1="CollectSignatures_Init.xsn", _String2=".") returned 1 [0154.869] wcscmp (_String1="CollectSignatures_Init.xsn", _String2="..") returned 1 [0154.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0fa8 [0154.869] wcscpy (in: _Dest=0x69c0fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.869] wcscat (in: _Dest=0x69c0fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.869] wcscat (in: _Dest=0x69c0fa8, _Source="CollectSignatures_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" [0154.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0154.870] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0154.870] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2=".") returned 1 [0154.870] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2="..") returned 1 [0154.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1048 [0154.870] wcscpy (in: _Dest=0x69c1048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.870] wcscat (in: _Dest=0x69c1048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.870] wcscat (in: _Dest=0x69c1048, _Source="CollectSignatures_Sign.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" [0154.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0154.871] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d64600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46d64600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0154.871] wcscmp (_String1="ContactPickerIntl.dll", _String2=".") returned 1 [0154.872] wcscmp (_String1="ContactPickerIntl.dll", _String2="..") returned 1 [0154.872] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56200, ftCreationTime.dwHighDateTime=0x1ca7b1a, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c56200, ftLastWriteTime.dwHighDateTime=0x1ca7b1a, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0154.872] wcscmp (_String1="CT_ROOTS.XML", _String2=".") returned 1 [0154.872] wcscmp (_String1="CT_ROOTS.XML", _String2="..") returned 1 [0154.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f00c0 [0154.872] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.872] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.872] wcscat (in: _Dest=0x66f00c0, _Source="CT_ROOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" [0154.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0154.873] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0154.873] wcscmp (_String1="DataServices", _String2=".") returned 1 [0154.873] wcscmp (_String1="DataServices", _String2="..") returned 1 [0154.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee6b8 [0154.873] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.873] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.873] wcscat (in: _Dest=0x66ee6b8, _Source="DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0154.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0154.874] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xbd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0154.875] wcscmp (_String1="DBENGR.VSL", _String2=".") returned 1 [0154.875] wcscmp (_String1="DBENGR.VSL", _String2="..") returned 1 [0154.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b4b8 [0154.875] wcscpy (in: _Dest=0x674b4b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.875] wcscat (in: _Dest=0x674b4b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.875] wcscat (in: _Dest=0x674b4b8, _Source="DBENGR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" [0154.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0154.876] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1eea00, ftCreationTime.dwHighDateTime=0x1c321da, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1eea00, ftLastWriteTime.dwHighDateTime=0x1c321da, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0154.876] wcscmp (_String1="DBSAMPLE.MDB", _String2=".") returned 1 [0154.876] wcscmp (_String1="DBSAMPLE.MDB", _String2="..") returned 1 [0154.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee520 [0154.876] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.876] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.876] wcscat (in: _Dest=0x66ee520, _Source="DBSAMPLE.MDB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" [0154.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0154.878] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x26978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0154.878] wcscmp (_String1="DBWIZ.VSL", _String2=".") returned 1 [0154.878] wcscmp (_String1="DBWIZ.VSL", _String2="..") returned 1 [0154.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b538 [0154.878] wcscpy (in: _Dest=0x674b538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.878] wcscat (in: _Dest=0x674b538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.878] wcscat (in: _Dest=0x674b538, _Source="DBWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" [0154.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0154.879] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0154.879] wcscmp (_String1="DEFAULT.CSS", _String2=".") returned 1 [0154.879] wcscmp (_String1="DEFAULT.CSS", _String2="..") returned 1 [0154.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b5b8 [0154.879] wcscpy (in: _Dest=0x674b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.879] wcscat (in: _Dest=0x674b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.879] wcscat (in: _Dest=0x674b5b8, _Source="DEFAULT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" [0154.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0154.880] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="DISCUS~1.GTA")) returned 1 [0154.880] wcscmp (_String1="Discussion.gta", _String2=".") returned 1 [0154.880] wcscmp (_String1="Discussion.gta", _String2="..") returned 1 [0154.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66f0368 [0154.881] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.881] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.881] wcscat (in: _Dest=0x66f0368, _Source="Discussion.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" [0154.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0154.882] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae60e00, ftCreationTime.dwHighDateTime=0x1ca9a33, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdae60e00, ftLastWriteTime.dwHighDateTime=0x1ca9a33, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="DISCUS~2.GTA")) returned 1 [0154.882] wcscmp (_String1="Discussion14.gta", _String2=".") returned 1 [0154.882] wcscmp (_String1="Discussion14.gta", _String2="..") returned 1 [0154.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674db98 [0154.882] wcscpy (in: _Dest=0x674db98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.882] wcscat (in: _Dest=0x674db98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.882] wcscat (in: _Dest=0x674db98, _Source="Discussion14.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" [0154.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0154.883] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0154.883] wcscmp (_String1="DL_RES.DLL", _String2=".") returned 1 [0154.883] wcscmp (_String1="DL_RES.DLL", _String2="..") returned 1 [0154.883] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86347500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86347500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0154.892] wcscmp (_String1="DOORSCHD.VRD", _String2=".") returned 1 [0154.892] wcscmp (_String1="DOORSCHD.VRD", _String2="..") returned 1 [0154.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee5a8 [0154.892] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.892] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.892] wcscat (in: _Dest=0x66ee5a8, _Source="DOORSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" [0154.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0154.893] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xe568, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0154.893] wcscmp (_String1="DRILLDWN.VSL", _String2=".") returned 1 [0154.893] wcscmp (_String1="DRILLDWN.VSL", _String2="..") returned 1 [0154.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef950 [0154.893] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.893] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.893] wcscat (in: _Dest=0x66ef950, _Source="DRILLDWN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" [0154.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0154.894] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252c8d00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x252c8d00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8360, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0154.894] wcscmp (_String1="DWGCNV.VSL", _String2=".") returned 1 [0154.894] wcscmp (_String1="DWGCNV.VSL", _String2="..") returned 1 [0154.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b638 [0154.894] wcscpy (in: _Dest=0x674b638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0154.895] wcscat (in: _Dest=0x674b638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0154.895] wcscat (in: _Dest=0x674b638, _Source="DWGCNV.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" [0154.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0155.722] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0155.722] wcscmp (_String1="DWGDPRES.DLL", _String2=".") returned 1 [0155.722] wcscmp (_String1="DWGDPRES.DLL", _String2="..") returned 1 [0155.722] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0155.722] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2=".") returned 1 [0155.722] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2="..") returned 1 [0155.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d710 [0155.722] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0155.722] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0155.722] wcscat (in: _Dest=0x3e0d710, _Source="EADOCUMENTAPPROVAL_INIT.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" [0163.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0163.853] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0163.853] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2=".") returned 1 [0163.854] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2="..") returned 1 [0163.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0163.854] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.854] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.854] wcscat (in: _Dest=0x697e228, _Source="EADOCUMENTAPPROVAL_REVIEW.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" [0163.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0163.855] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1a4300, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1a4300, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0163.855] wcscmp (_String1="EAWFINTL.DLL", _String2=".") returned 1 [0163.855] wcscmp (_String1="EAWFINTL.DLL", _String2="..") returned 1 [0163.855] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0163.855] wcscmp (_String1="EDITRES.DLL", _String2=".") returned 1 [0163.855] wcscmp (_String1="EDITRES.DLL", _String2="..") returned 1 [0163.855] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0163.855] wcscmp (_String1="EntityPickerIntl.dll", _String2=".") returned 1 [0163.856] wcscmp (_String1="EntityPickerIntl.dll", _String2="..") returned 1 [0163.856] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0163.856] wcscmp (_String1="ENVELOPR.DLL", _String2=".") returned 1 [0163.856] wcscmp (_String1="ENVELOPR.DLL", _String2="..") returned 1 [0163.856] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="ENVELO~1.IDX")) returned 1 [0163.856] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2=".") returned 1 [0163.856] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2="..") returned 1 [0163.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68185d0 [0163.856] wcscpy (in: _Dest=0x68185d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.856] wcscat (in: _Dest=0x68185d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.856] wcscat (in: _Dest=0x68185d0, _Source="ENVELOPR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" [0163.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68185d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0163.857] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f167600, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f167600, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0163.857] wcscmp (_String1="EQPLIST.VRD", _String2=".") returned 1 [0163.857] wcscmp (_String1="EQPLIST.VRD", _String2="..") returned 1 [0163.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbe78 [0163.857] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.858] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.858] wcscat (in: _Dest=0x3edbe78, _Source="EQPLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" [0163.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0163.859] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4e5900, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f4e5900, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="EXCELD~1.HXS")) returned 1 [0163.859] wcscmp (_String1="EXCEL.DEV.HXS", _String2=".") returned 1 [0163.859] wcscmp (_String1="EXCEL.DEV.HXS", _String2="..") returned 1 [0163.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c700 [0163.859] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.859] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.859] wcscat (in: _Dest=0x682c700, _Source="EXCEL.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" [0163.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0163.860] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="EXCELD~1.HXC")) returned 1 [0163.860] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2=".") returned 1 [0163.860] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2="..") returned 1 [0163.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbbc8 [0163.860] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.860] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.860] wcscat (in: _Dest=0x66dbbc8, _Source="EXCEL.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" [0163.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0163.861] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="EXCELD~1.HXT")) returned 1 [0163.861] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2=".") returned 1 [0163.861] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2="..") returned 1 [0163.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc1f8 [0163.861] wcscpy (in: _Dest=0x66dc1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.861] wcscat (in: _Dest=0x66dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.862] wcscat (in: _Dest=0x66dc1f8, _Source="EXCEL.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" [0163.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0163.863] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="EXCELD~1.HXK")) returned 1 [0163.863] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2=".") returned 1 [0163.863] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2="..") returned 1 [0163.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dca68 [0163.863] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.863] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.863] wcscat (in: _Dest=0x66dca68, _Source="EXCEL.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" [0163.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1874 [0163.864] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="EXCELD~2.HXK")) returned 1 [0163.865] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2=".") returned 1 [0163.865] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2="..") returned 1 [0163.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc798 [0163.865] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.865] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.865] wcscat (in: _Dest=0x66dc798, _Source="EXCEL.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" [0163.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0163.866] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x742e7800, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x742e7800, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0163.866] wcscmp (_String1="EXCEL.HXS", _String2=".") returned 1 [0163.866] wcscmp (_String1="EXCEL.HXS", _String2="..") returned 1 [0163.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda4f8 [0163.866] wcscpy (in: _Dest=0x3eda4f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.866] wcscat (in: _Dest=0x3eda4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.866] wcscat (in: _Dest=0x3eda4f8, _Source="EXCEL.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" [0163.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0163.867] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0163.868] wcscmp (_String1="EXCEL_COL.HXC", _String2=".") returned 1 [0163.868] wcscmp (_String1="EXCEL_COL.HXC", _String2="..") returned 1 [0163.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d118 [0163.868] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.868] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.868] wcscat (in: _Dest=0x682d118, _Source="EXCEL_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" [0163.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0163.869] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0163.869] wcscmp (_String1="EXCEL_COL.HXT", _String2=".") returned 1 [0163.869] wcscmp (_String1="EXCEL_COL.HXT", _String2="..") returned 1 [0163.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d090 [0163.870] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.870] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.870] wcscat (in: _Dest=0x682d090, _Source="EXCEL_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" [0163.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0163.871] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0163.871] wcscmp (_String1="EXCEL_F_COL.HXK", _String2=".") returned 1 [0163.871] wcscmp (_String1="EXCEL_F_COL.HXK", _String2="..") returned 1 [0163.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ccd8 [0163.871] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.871] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.871] wcscat (in: _Dest=0x682ccd8, _Source="EXCEL_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" [0163.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0163.872] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0163.872] wcscmp (_String1="EXCEL_K_COL.HXK", _String2=".") returned 1 [0163.872] wcscmp (_String1="EXCEL_K_COL.HXK", _String2="..") returned 1 [0163.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cc50 [0163.872] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.872] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.872] wcscat (in: _Dest=0x682cc50, _Source="EXCEL_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" [0163.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0163.874] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0163.874] wcscmp (_String1="EXPTOOWS.DLL", _String2=".") returned 1 [0163.874] wcscmp (_String1="EXPTOOWS.DLL", _String2="..") returned 1 [0163.874] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c500, ftCreationTime.dwHighDateTime=0x1cac800, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x735c500, ftLastWriteTime.dwHighDateTime=0x1cac800, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0163.874] wcscmp (_String1="EXPTOOWS.XLA", _String2=".") returned 1 [0163.874] wcscmp (_String1="EXPTOOWS.XLA", _String2="..") returned 1 [0163.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d008 [0163.874] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.874] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.874] wcscat (in: _Dest=0x682d008, _Source="EXPTOOWS.XLA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" [0163.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0163.875] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x12f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0163.875] wcscmp (_String1="FACILITY.VSL", _String2=".") returned 1 [0163.875] wcscmp (_String1="FACILITY.VSL", _String2="..") returned 1 [0163.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cf80 [0163.875] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.875] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.875] wcscat (in: _Dest=0x682cf80, _Source="FACILITY.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" [0163.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0163.876] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1868e500, ftCreationTime.dwHighDateTime=0x1c9384b, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1868e500, ftLastWriteTime.dwHighDateTime=0x1c9384b, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0163.877] wcscmp (_String1="FLOCH.VRD", _String2=".") returned 1 [0163.877] wcscmp (_String1="FLOCH.VRD", _String2="..") returned 1 [0163.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edae78 [0163.877] wcscpy (in: _Dest=0x3edae78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.877] wcscat (in: _Dest=0x3edae78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.877] wcscat (in: _Dest=0x3edae78, _Source="FLOCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" [0163.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0163.878] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0163.878] wcscmp (_String1="FOREST.CSS", _String2=".") returned 1 [0163.878] wcscmp (_String1="FOREST.CSS", _String2="..") returned 1 [0163.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb8f8 [0163.878] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.878] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.878] wcscat (in: _Dest=0x3edb8f8, _Source="FOREST.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" [0163.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0163.880] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0163.880] wcscmp (_String1="GANTT.CSS", _String2=".") returned 1 [0163.880] wcscmp (_String1="GANTT.CSS", _String2="..") returned 1 [0163.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbbf8 [0163.880] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.880] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.880] wcscat (in: _Dest=0x3edbbf8, _Source="GANTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" [0163.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0163.883] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef0a00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90ef0a00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0163.883] wcscmp (_String1="GANTT.VRD", _String2=".") returned 1 [0163.883] wcscmp (_String1="GANTT.VRD", _String2="..") returned 1 [0163.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda478 [0163.883] wcscpy (in: _Dest=0x3eda478, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.883] wcscat (in: _Dest=0x3eda478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.883] wcscat (in: _Dest=0x3eda478, _Source="GANTT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" [0163.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0163.885] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4cd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0163.885] wcscmp (_String1="GANTT.VSL", _String2=".") returned 1 [0163.885] wcscmp (_String1="GANTT.VSL", _String2="..") returned 1 [0163.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edaff8 [0163.885] wcscpy (in: _Dest=0x3edaff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.885] wcscat (in: _Dest=0x3edaff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.885] wcscat (in: _Dest=0x3edaff8, _Source="GANTT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" [0163.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edaff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0163.886] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b1000, ftCreationTime.dwHighDateTime=0x1bbd42b, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0b1000, ftLastWriteTime.dwHighDateTime=0x1bbd42b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0163.887] wcscmp (_String1="GR8GALRY.GRA", _String2=".") returned 1 [0163.887] wcscmp (_String1="GR8GALRY.GRA", _String2="..") returned 1 [0163.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cef8 [0163.887] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.887] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.887] wcscat (in: _Dest=0x682cef8, _Source="GR8GALRY.GRA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" [0163.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0163.888] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf64a0c00, ftCreationTime.dwHighDateTime=0x1c6e65e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf64a0c00, ftLastWriteTime.dwHighDateTime=0x1c6e65e, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0163.888] wcscmp (_String1="GRAPH.HXS", _String2=".") returned 1 [0163.888] wcscmp (_String1="GRAPH.HXS", _String2="..") returned 1 [0163.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda178 [0163.888] wcscpy (in: _Dest=0x3eda178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.888] wcscat (in: _Dest=0x3eda178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.889] wcscat (in: _Dest=0x3eda178, _Source="GRAPH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" [0163.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0163.890] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0163.890] wcscmp (_String1="GRAPH_COL.HXC", _String2=".") returned 1 [0163.890] wcscmp (_String1="GRAPH_COL.HXC", _String2="..") returned 1 [0163.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cde8 [0163.890] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0163.890] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0163.890] wcscat (in: _Dest=0x682cde8, _Source="GRAPH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" [0163.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0163.891] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0165.501] wcscmp (_String1="GRAPH_COL.HXT", _String2=".") returned 1 [0165.501] wcscmp (_String1="GRAPH_COL.HXT", _String2="..") returned 1 [0165.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0368 [0165.501] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0165.501] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0165.501] wcscat (in: _Dest=0x66f0368, _Source="GRAPH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" [0172.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt")) returned 0x20 [0173.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0173.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.637] GetLastError () returned 0x5 [0173.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0173.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 [0173.637] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0173.638] wcscmp (_String1="GRAPH_F_COL.HXK", _String2=".") returned 1 [0173.638] wcscmp (_String1="GRAPH_F_COL.HXK", _String2="..") returned 1 [0173.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0368 [0173.638] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0173.638] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0173.638] wcscat (in: _Dest=0x66f0368, _Source="GRAPH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" [0179.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0179.358] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0179.358] wcscmp (_String1="GRAPH_K_COL.HXK", _String2=".") returned 1 [0179.358] wcscmp (_String1="GRAPH_K_COL.HXK", _String2="..") returned 1 [0179.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eec90 [0179.358] wcscpy (in: _Dest=0x66eec90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.358] wcscat (in: _Dest=0x66eec90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.358] wcscat (in: _Dest=0x66eec90, _Source="GRAPH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" [0179.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0179.359] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x2cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0179.359] wcscmp (_String1="GRINTL32.DLL", _String2=".") returned 1 [0179.359] wcscmp (_String1="GRINTL32.DLL", _String2="..") returned 1 [0179.359] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="GRINTL~1.IDX")) returned 1 [0179.359] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0179.359] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0179.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959540 [0179.359] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.359] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.359] wcscat (in: _Dest=0x6959540, _Source="GRINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" [0179.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0179.361] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="GRINTL~2.IDX")) returned 1 [0179.361] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2=".") returned 1 [0179.361] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2="..") returned 1 [0179.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959378 [0179.361] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.361] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.361] wcscat (in: _Dest=0x6959378, _Source="GRINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" [0179.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0179.362] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0179.362] wcscmp (_String1="GRLEX.DLL", _String2=".") returned 1 [0179.362] wcscmp (_String1="GRLEX.DLL", _String2="..") returned 1 [0179.362] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b0900, ftCreationTime.dwHighDateTime=0x1cacba2, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd90b0900, ftLastWriteTime.dwHighDateTime=0x1cacba2, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="GROOVE~1.XSN")) returned 1 [0179.362] wcscmp (_String1="Groove Starter Template.xsn", _String2=".") returned 1 [0179.362] wcscmp (_String1="Groove Starter Template.xsn", _String2="..") returned 1 [0179.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1188 [0179.362] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.362] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.362] wcscat (in: _Dest=0x69c1188, _Source="Groove Starter Template.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" [0179.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0179.363] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0179.363] wcscmp (_String1="GROOVE.HXS", _String2=".") returned 1 [0179.363] wcscmp (_String1="GROOVE.HXS", _String2="..") returned 1 [0179.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f2f0 [0179.363] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.363] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.363] wcscat (in: _Dest=0x3e0f2f0, _Source="GROOVE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" [0179.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0179.364] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~1")) returned 1 [0179.364] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0179.364] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0179.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27828 [0179.364] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.364] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.365] wcscat (in: _Dest=0x3f27828, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0179.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0179.365] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0x863160, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0179.365] wcscmp (_String1="GrooveIntlResource.dll", _String2=".") returned 1 [0179.366] wcscmp (_String1="GrooveIntlResource.dll", _String2="..") returned 1 [0179.366] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0179.366] wcscmp (_String1="GROOVE_COL.HXC", _String2=".") returned 1 [0179.366] wcscmp (_String1="GROOVE_COL.HXC", _String2="..") returned 1 [0179.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27140 [0179.366] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.366] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.366] wcscat (in: _Dest=0x3f27140, _Source="GROOVE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" [0179.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0179.367] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0179.367] wcscmp (_String1="GROOVE_COL.HXT", _String2=".") returned 1 [0179.367] wcscmp (_String1="GROOVE_COL.HXT", _String2="..") returned 1 [0179.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26e98 [0179.367] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.367] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.367] wcscat (in: _Dest=0x3f26e98, _Source="GROOVE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" [0179.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0179.368] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0179.368] wcscmp (_String1="GROOVE_F_COL.HXK", _String2=".") returned 1 [0179.368] wcscmp (_String1="GROOVE_F_COL.HXK", _String2="..") returned 1 [0179.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dd48 [0179.368] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.368] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.368] wcscat (in: _Dest=0x674dd48, _Source="GROOVE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" [0179.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0179.369] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0179.369] wcscmp (_String1="GROOVE_K_COL.HXK", _String2=".") returned 1 [0179.369] wcscmp (_String1="GROOVE_K_COL.HXK", _String2="..") returned 1 [0179.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d178 [0179.370] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.370] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.370] wcscat (in: _Dest=0x674d178, _Source="GROOVE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" [0179.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0179.371] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0179.371] wcscmp (_String1="HVAC.VSL", _String2=".") returned 1 [0179.371] wcscmp (_String1="HVAC.VSL", _String2="..") returned 1 [0179.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f9f0 [0179.371] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.371] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.371] wcscat (in: _Dest=0x3e0f9f0, _Source="HVAC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" [0179.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0179.372] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0179.372] wcscmp (_String1="HVACDIFF.VRD", _String2=".") returned 1 [0179.372] wcscmp (_String1="HVACDIFF.VRD", _String2="..") returned 1 [0179.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27608 [0179.372] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.372] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.372] wcscat (in: _Dest=0x3f27608, _Source="HVACDIFF.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" [0179.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0179.373] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0179.373] wcscmp (_String1="HVACDUCT.VRD", _String2=".") returned 1 [0179.373] wcscmp (_String1="HVACDUCT.VRD", _String2="..") returned 1 [0179.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27be0 [0179.373] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.373] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.373] wcscat (in: _Dest=0x3f27be0, _Source="HVACDUCT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" [0179.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0179.375] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x75990, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0179.375] wcscmp (_String1="INFINTL.DLL", _String2=".") returned 1 [0179.375] wcscmp (_String1="INFINTL.DLL", _String2="..") returned 1 [0179.375] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0179.375] wcscmp (_String1="INFOPATH.HXS", _String2=".") returned 1 [0179.375] wcscmp (_String1="INFOPATH.HXS", _String2="..") returned 1 [0179.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26e10 [0179.375] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.375] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.375] wcscat (in: _Dest=0x3f26e10, _Source="INFOPATH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" [0179.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0179.376] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="INFOPA~1.HXS")) returned 1 [0179.376] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2=".") returned 1 [0179.376] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2="..") returned 1 [0179.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d298 [0179.376] wcscpy (in: _Dest=0x674d298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.376] wcscat (in: _Dest=0x674d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.376] wcscat (in: _Dest=0x674d298, _Source="INFOPATHEDITOR.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" [0179.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0179.377] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="INFOPA~2.HXC")) returned 1 [0179.377] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2=".") returned 1 [0179.377] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2="..") returned 1 [0179.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959248 [0179.377] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.377] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.377] wcscat (in: _Dest=0x6959248, _Source="INFOPATHEDITOR_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" [0179.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0179.378] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="INFOPA~2.HXT")) returned 1 [0179.378] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2=".") returned 1 [0179.378] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2="..") returned 1 [0179.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69594a8 [0179.379] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.379] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.379] wcscat (in: _Dest=0x69594a8, _Source="INFOPATHEDITOR_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" [0179.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0179.380] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="INFOPA~3.HXK")) returned 1 [0179.380] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2=".") returned 1 [0179.380] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2="..") returned 1 [0179.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c12c8 [0179.380] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.380] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.380] wcscat (in: _Dest=0x69c12c8, _Source="INFOPATHEDITOR_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" [0179.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0179.381] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="INFOPA~4.HXK")) returned 1 [0179.381] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2=".") returned 1 [0179.381] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2="..") returned 1 [0179.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c01e8 [0179.381] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.381] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.381] wcscat (in: _Dest=0x69c01e8, _Source="INFOPATHEDITOR_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" [0179.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0179.382] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="INFOPA~1.HXC")) returned 1 [0179.382] wcscmp (_String1="INFOPATH_COL.HXC", _String2=".") returned 1 [0179.382] wcscmp (_String1="INFOPATH_COL.HXC", _String2="..") returned 1 [0179.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e0a8 [0179.382] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.382] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.382] wcscat (in: _Dest=0x674e0a8, _Source="INFOPATH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" [0179.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0179.383] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="INFOPA~1.HXT")) returned 1 [0179.383] wcscmp (_String1="INFOPATH_COL.HXT", _String2=".") returned 1 [0179.383] wcscmp (_String1="INFOPATH_COL.HXT", _String2="..") returned 1 [0179.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cab8 [0179.384] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.384] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.384] wcscat (in: _Dest=0x674cab8, _Source="INFOPATH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" [0179.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0179.384] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="INFOPA~1.HXK")) returned 1 [0179.384] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2=".") returned 1 [0179.384] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2="..") returned 1 [0179.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d688 [0179.385] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.385] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.385] wcscat (in: _Dest=0x674d688, _Source="INFOPATH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" [0179.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0179.386] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="INFOPA~2.HXK")) returned 1 [0179.386] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2=".") returned 1 [0179.386] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2="..") returned 1 [0179.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d328 [0179.386] wcscpy (in: _Dest=0x674d328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.386] wcscat (in: _Dest=0x674d328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.386] wcscat (in: _Dest=0x674d328, _Source="INFOPATH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" [0179.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0179.387] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x963d8400, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x963d8400, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0179.387] wcscmp (_String1="INSTLIST.VRD", _String2=".") returned 1 [0179.387] wcscmp (_String1="INSTLIST.VRD", _String2="..") returned 1 [0179.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25ea8 [0179.387] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.387] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.387] wcscat (in: _Dest=0x3f25ea8, _Source="INSTLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" [0179.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0179.388] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd139a00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd139a00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0179.388] wcscmp (_String1="INVENTRY.VRD", _String2=".") returned 1 [0179.388] wcscmp (_String1="INVENTRY.VRD", _String2="..") returned 1 [0179.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26c78 [0179.388] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.388] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.388] wcscat (in: _Dest=0x3f26c78, _Source="INVENTRY.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" [0179.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0179.389] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687dff00, ftCreationTime.dwHighDateTime=0x1ca0fb7, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x687dff00, ftLastWriteTime.dwHighDateTime=0x1ca0fb7, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0179.396] wcscmp (_String1="Invite or Link.one", _String2=".") returned 1 [0179.396] wcscmp (_String1="Invite or Link.one", _String2="..") returned 1 [0179.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc288 [0179.396] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.396] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.396] wcscat (in: _Dest=0x66dc288, _Source="Invite or Link.one" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" [0180.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0180.616] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x5936f850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0180.616] wcscmp (_String1="IPDSINTL.DLL", _String2=".") returned 1 [0180.616] wcscmp (_String1="IPDSINTL.DLL", _String2="..") returned 1 [0180.617] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0180.617] wcscmp (_String1="IPEDINTL.DLL", _String2=".") returned 1 [0180.617] wcscmp (_String1="IPEDINTL.DLL", _String2="..") returned 1 [0180.617] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x593959b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="IPOLKI~1.DLL")) returned 1 [0180.617] wcscmp (_String1="IPOLKINTL.DLL", _String2=".") returned 1 [0180.617] wcscmp (_String1="IPOLKINTL.DLL", _String2="..") returned 1 [0180.617] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="ISSUET~1.GTA")) returned 1 [0180.617] wcscmp (_String1="Issue Tracking.gta", _String2=".") returned 1 [0180.617] wcscmp (_String1="Issue Tracking.gta", _String2="..") returned 1 [0180.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d4d8 [0180.617] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.617] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.617] wcscat (in: _Dest=0x674d4d8, _Source="Issue Tracking.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" [0180.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0180.618] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0180.618] wcscmp (_String1="JADE.CSS", _String2=".") returned 1 [0180.618] wcscmp (_String1="JADE.CSS", _String2="..") returned 1 [0180.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674acb8 [0180.618] wcscpy (in: _Dest=0x674acb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.618] wcscat (in: _Dest=0x674acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.618] wcscat (in: _Dest=0x674acb8, _Source="JADE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" [0180.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674acb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0180.619] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0180.619] wcscmp (_String1="LGND.VSL", _String2=".") returned 1 [0180.619] wcscmp (_String1="LGND.VSL", _String2="..") returned 1 [0180.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c738 [0180.619] wcscpy (in: _Dest=0x674c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.619] wcscat (in: _Dest=0x674c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.619] wcscat (in: _Dest=0x674c738, _Source="LGND.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" [0180.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0180.620] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c67950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0180.620] wcscmp (_String1="MAPIR.DLL", _String2=".") returned 1 [0180.620] wcscmp (_String1="MAPIR.DLL", _String2="..") returned 1 [0180.620] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="MAPIRD~1.IDX")) returned 1 [0180.620] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2=".") returned 1 [0180.620] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2="..") returned 1 [0180.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e018 [0180.620] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.620] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.620] wcscat (in: _Dest=0x674e018, _Source="MAPIR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" [0180.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0180.621] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0180.621] wcscmp (_String1="MAPISHELLR.DLL", _String2=".") returned 1 [0180.621] wcscmp (_String1="MAPISHELLR.DLL", _String2="..") returned 1 [0180.621] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1009b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0180.621] wcscmp (_String1="MERES.DLL", _String2=".") returned 1 [0180.622] wcscmp (_String1="MERES.DLL", _String2="..") returned 1 [0180.622] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0180.622] wcscmp (_String1="MOR6INT.DLL", _String2=".") returned 1 [0180.622] wcscmp (_String1="MOR6INT.DLL", _String2="..") returned 1 [0180.622] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="MOR6IN~1.IDX")) returned 1 [0180.622] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2=".") returned 1 [0180.622] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2="..") returned 1 [0180.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959a00 [0180.622] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.622] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.622] wcscat (in: _Dest=0x6959a00, _Source="MOR6INT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" [0180.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0180.623] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e4eb00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96e4eb00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0180.623] wcscmp (_String1="MOVE.VRD", _String2=".") returned 1 [0180.623] wcscmp (_String1="MOVE.VRD", _String2="..") returned 1 [0180.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674ae38 [0180.623] wcscpy (in: _Dest=0x674ae38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.623] wcscat (in: _Dest=0x674ae38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.623] wcscat (in: _Dest=0x674ae38, _Source="MOVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" [0180.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ae38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0180.624] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0180.624] wcscmp (_String1="MPXRES.DLL", _String2=".") returned 1 [0180.624] wcscmp (_String1="MPXRES.DLL", _String2="..") returned 1 [0180.624] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="MSACCE~1.HXS")) returned 1 [0180.624] wcscmp (_String1="MSACCESS.DEV.HXS", _String2=".") returned 1 [0180.624] wcscmp (_String1="MSACCESS.DEV.HXS", _String2="..") returned 1 [0180.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dc28 [0180.624] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.624] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.624] wcscat (in: _Dest=0x674dc28, _Source="MSACCESS.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" [0180.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0180.625] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0180.625] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2=".") returned 1 [0180.625] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2="..") returned 1 [0180.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958668 [0180.625] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.625] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.625] wcscat (in: _Dest=0x6958668, _Source="MSACCESS.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" [0180.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0180.626] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0180.627] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2=".") returned 1 [0180.627] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2="..") returned 1 [0180.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69585d0 [0180.627] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.627] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.627] wcscat (in: _Dest=0x69585d0, _Source="MSACCESS.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" [0180.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0180.628] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0180.628] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2=".") returned 1 [0180.628] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2="..") returned 1 [0180.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69588c8 [0180.628] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.628] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.628] wcscat (in: _Dest=0x69588c8, _Source="MSACCESS.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" [0180.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0180.629] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0180.629] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2=".") returned 1 [0180.629] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2="..") returned 1 [0180.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958c58 [0180.629] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.629] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.629] wcscat (in: _Dest=0x6958c58, _Source="MSACCESS.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" [0180.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0180.630] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0180.630] wcscmp (_String1="MSACCESS.HXS", _String2=".") returned 1 [0180.630] wcscmp (_String1="MSACCESS.HXS", _String2="..") returned 1 [0180.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bf08 [0180.630] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.630] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.630] wcscat (in: _Dest=0x682bf08, _Source="MSACCESS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" [0180.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0180.631] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~2.HXC")) returned 1 [0180.631] wcscmp (_String1="MSACCESS_COL.HXC", _String2=".") returned 1 [0180.631] wcscmp (_String1="MSACCESS_COL.HXC", _String2="..") returned 1 [0180.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d8c8 [0180.631] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.631] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.631] wcscat (in: _Dest=0x674d8c8, _Source="MSACCESS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" [0180.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0180.632] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~2.HXT")) returned 1 [0180.632] wcscmp (_String1="MSACCESS_COL.HXT", _String2=".") returned 1 [0180.632] wcscmp (_String1="MSACCESS_COL.HXT", _String2="..") returned 1 [0180.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d838 [0180.632] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.632] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.632] wcscat (in: _Dest=0x674d838, _Source="MSACCESS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" [0180.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0180.633] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~3.HXK")) returned 1 [0180.633] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2=".") returned 1 [0180.633] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2="..") returned 1 [0180.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d058 [0180.633] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.633] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.633] wcscat (in: _Dest=0x674d058, _Source="MSACCESS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" [0180.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0180.634] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~4.HXK")) returned 1 [0180.634] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2=".") returned 1 [0180.635] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2="..") returned 1 [0180.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e138 [0180.635] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.635] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.635] wcscat (in: _Dest=0x674e138, _Source="MSACCESS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" [0180.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0180.636] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0180.636] wcscmp (_String1="MSAIN.DLL", _String2=".") returned 1 [0180.636] wcscmp (_String1="MSAIN.DLL", _String2="..") returned 1 [0180.636] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd2ea00, ftCreationTime.dwHighDateTime=0x1c99288, ftLastAccessTime.dwLowDateTime=0x51781ef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedd2ea00, ftLastWriteTime.dwHighDateTime=0x1c99288, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0180.636] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0180.636] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0180.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d058 [0180.636] wcscpy (in: _Dest=0x3f1d058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.636] wcscat (in: _Dest=0x3f1d058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.636] wcscat (in: _Dest=0x3f1d058, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" [0180.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0180.637] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690d200, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7690d200, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0180.637] wcscmp (_String1="MSOUC.HXS", _String2=".") returned 1 [0180.637] wcscmp (_String1="MSOUC.HXS", _String2="..") returned 1 [0180.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b1b8 [0180.637] wcscpy (in: _Dest=0x674b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.637] wcscat (in: _Dest=0x674b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.637] wcscat (in: _Dest=0x674b1b8, _Source="MSOUC.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" [0180.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0180.638] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0180.638] wcscmp (_String1="MSOUC_COL.HXC", _String2=".") returned 1 [0180.638] wcscmp (_String1="MSOUC_COL.HXC", _String2="..") returned 1 [0180.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bd70 [0180.638] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.638] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.638] wcscat (in: _Dest=0x682bd70, _Source="MSOUC_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" [0180.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0180.639] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0180.639] wcscmp (_String1="MSOUC_COL.HXT", _String2=".") returned 1 [0180.639] wcscmp (_String1="MSOUC_COL.HXT", _String2="..") returned 1 [0180.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c568 [0180.639] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.639] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.639] wcscat (in: _Dest=0x682c568, _Source="MSOUC_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" [0180.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0180.640] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0180.640] wcscmp (_String1="MSOUC_F_COL.HXK", _String2=".") returned 1 [0180.640] wcscmp (_String1="MSOUC_F_COL.HXK", _String2="..") returned 1 [0180.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0180.640] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.641] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.641] wcscat (in: _Dest=0x682cab8, _Source="MSOUC_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" [0180.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0180.642] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0180.642] wcscmp (_String1="MSOUC_K_COL.HXK", _String2=".") returned 1 [0180.642] wcscmp (_String1="MSOUC_K_COL.HXK", _String2="..") returned 1 [0180.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0180.642] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.642] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.642] wcscat (in: _Dest=0x682c9a8, _Source="MSOUC_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" [0180.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0180.643] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="MSPUBD~1.HXS")) returned 1 [0181.878] wcscmp (_String1="MSPUB.DEV.HXS", _String2=".") returned 1 [0181.878] wcscmp (_String1="MSPUB.DEV.HXS", _String2="..") returned 1 [0181.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682ce70 [0181.878] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0181.878] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0181.878] wcscat (in: _Dest=0x682ce70, _Source="MSPUB.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" [0183.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0183.224] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="MSPUBD~1.HXC")) returned 1 [0183.224] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2=".") returned 1 [0183.224] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2="..") returned 1 [0183.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d838 [0183.224] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.224] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.224] wcscat (in: _Dest=0x674d838, _Source="MSPUB.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" [0183.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0183.225] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="MSPUBD~1.HXT")) returned 1 [0183.225] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2=".") returned 1 [0183.225] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2="..") returned 1 [0183.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dc28 [0183.225] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.225] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.225] wcscat (in: _Dest=0x674dc28, _Source="MSPUB.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" [0183.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0183.226] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="MSPUBD~1.HXK")) returned 1 [0183.226] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2=".") returned 1 [0183.226] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2="..") returned 1 [0183.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d8c8 [0183.226] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.227] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.227] wcscat (in: _Dest=0x674d8c8, _Source="MSPUB.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" [0183.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0183.228] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="MSPUBD~2.HXK")) returned 1 [0183.228] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2=".") returned 1 [0183.228] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2="..") returned 1 [0183.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d058 [0183.228] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.228] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.228] wcscat (in: _Dest=0x674d058, _Source="MSPUB.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" [0183.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0183.229] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0183.229] wcscmp (_String1="MSPUB.HXS", _String2=".") returned 1 [0183.229] wcscmp (_String1="MSPUB.HXS", _String2="..") returned 1 [0183.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0f9f0 [0183.229] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.229] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.229] wcscat (in: _Dest=0x3e0f9f0, _Source="MSPUB.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" [0183.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0183.230] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2517e400, ftCreationTime.dwHighDateTime=0x1c2a219, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2517e400, ftLastWriteTime.dwHighDateTime=0x1c2a219, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0183.230] wcscmp (_String1="MSPUB.OPG", _String2=".") returned 1 [0183.230] wcscmp (_String1="MSPUB.OPG", _String2="..") returned 1 [0183.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0f2f0 [0183.230] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.230] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.230] wcscat (in: _Dest=0x3e0f2f0, _Source="MSPUB.OPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" [0183.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0183.231] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0183.231] wcscmp (_String1="MSPUB_COL.HXC", _String2=".") returned 1 [0183.231] wcscmp (_String1="MSPUB_COL.HXC", _String2="..") returned 1 [0183.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682daa8 [0183.231] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.231] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.231] wcscat (in: _Dest=0x682daa8, _Source="MSPUB_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" [0183.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0183.232] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0183.232] wcscmp (_String1="MSPUB_COL.HXT", _String2=".") returned 1 [0183.233] wcscmp (_String1="MSPUB_COL.HXT", _String2="..") returned 1 [0183.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682da20 [0183.233] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.233] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.233] wcscat (in: _Dest=0x682da20, _Source="MSPUB_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" [0183.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0183.234] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0183.234] wcscmp (_String1="MSPUB_F_COL.HXK", _String2=".") returned 1 [0183.234] wcscmp (_String1="MSPUB_F_COL.HXK", _String2="..") returned 1 [0183.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0183.234] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.234] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.234] wcscat (in: _Dest=0x682d888, _Source="MSPUB_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" [0183.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0183.235] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0183.235] wcscmp (_String1="MSPUB_K_COL.HXK", _String2=".") returned 1 [0183.235] wcscmp (_String1="MSPUB_K_COL.HXK", _String2="..") returned 1 [0183.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d800 [0183.235] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.235] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.235] wcscat (in: _Dest=0x682d800, _Source="MSPUB_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" [0183.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0183.238] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d875700, ftCreationTime.dwHighDateTime=0x1c33b04, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d875700, ftLastWriteTime.dwHighDateTime=0x1c33b04, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0183.238] wcscmp (_String1="MSQRY32.CHM", _String2=".") returned 1 [0183.238] wcscmp (_String1="MSQRY32.CHM", _String2="..") returned 1 [0183.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e102f0 [0183.238] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.238] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.238] wcscat (in: _Dest=0x3e102f0, _Source="MSQRY32.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" [0183.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0183.239] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0183.239] wcscmp (_String1="MSTINTL.DLL", _String2=".") returned 1 [0183.239] wcscmp (_String1="MSTINTL.DLL", _String2="..") returned 1 [0183.239] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0183.239] wcscmp (_String1="MSTORE.HXS", _String2=".") returned 1 [0183.239] wcscmp (_String1="MSTORE.HXS", _String2="..") returned 1 [0183.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f370 [0183.239] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.239] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.239] wcscat (in: _Dest=0x3e0f370, _Source="MSTORE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" [0183.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0183.240] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="MSTORE~1.HXC")) returned 1 [0183.240] wcscmp (_String1="MSTORE_COL.HXC", _String2=".") returned 1 [0183.240] wcscmp (_String1="MSTORE_COL.HXC", _String2="..") returned 1 [0183.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d778 [0183.240] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.240] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.241] wcscat (in: _Dest=0x682d778, _Source="MSTORE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" [0183.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0183.242] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="MSTORE~1.HXT")) returned 1 [0183.242] wcscmp (_String1="MSTORE_COL.HXT", _String2=".") returned 1 [0183.242] wcscmp (_String1="MSTORE_COL.HXT", _String2="..") returned 1 [0183.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d6f0 [0183.242] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.242] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.242] wcscat (in: _Dest=0x682d6f0, _Source="MSTORE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" [0183.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0183.243] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="MSTORE~1.HXK")) returned 1 [0183.243] wcscmp (_String1="MSTORE_F_COL.HXK", _String2=".") returned 1 [0183.243] wcscmp (_String1="MSTORE_F_COL.HXK", _String2="..") returned 1 [0183.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e018 [0183.243] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.243] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.243] wcscat (in: _Dest=0x674e018, _Source="MSTORE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" [0183.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0183.244] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="MSTORE~2.HXK")) returned 1 [0183.244] wcscmp (_String1="MSTORE_K_COL.HXK", _String2=".") returned 1 [0183.245] wcscmp (_String1="MSTORE_K_COL.HXK", _String2="..") returned 1 [0183.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d4d8 [0183.245] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.245] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.245] wcscat (in: _Dest=0x674d4d8, _Source="MSTORE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" [0183.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0183.246] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0183.246] wcscmp (_String1="NETWORK.CSS", _String2=".") returned 1 [0183.246] wcscmp (_String1="NETWORK.CSS", _String2="..") returned 1 [0183.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f470 [0183.246] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.246] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.246] wcscat (in: _Dest=0x3e0f470, _Source="NETWORK.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" [0183.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0183.247] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0183.247] wcscmp (_String1="NETWORK1.VRD", _String2=".") returned 1 [0183.247] wcscmp (_String1="NETWORK1.VRD", _String2="..") returned 1 [0183.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d668 [0183.247] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.247] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.247] wcscat (in: _Dest=0x682d668, _Source="NETWORK1.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" [0183.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0183.248] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0183.248] wcscmp (_String1="NETWORK2.VRD", _String2=".") returned 1 [0183.248] wcscmp (_String1="NETWORK2.VRD", _String2="..") returned 1 [0183.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d5e0 [0183.248] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.248] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.248] wcscat (in: _Dest=0x682d5e0, _Source="NETWORK2.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" [0183.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0183.249] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0183.249] wcscmp (_String1="NETWORK3.VRD", _String2=".") returned 1 [0183.249] wcscmp (_String1="NETWORK3.VRD", _String2="..") returned 1 [0183.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d558 [0183.250] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.250] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.250] wcscat (in: _Dest=0x682d558, _Source="NETWORK3.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" [0183.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0183.250] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8023dd00, ftCreationTime.dwHighDateTime=0x1c2c0db, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8023dd00, ftLastWriteTime.dwHighDateTime=0x1c2c0db, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0183.250] wcscmp (_String1="OCCMPVRD.XML", _String2=".") returned 1 [0183.250] wcscmp (_String1="OCCMPVRD.XML", _String2="..") returned 1 [0183.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d4d0 [0183.251] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.251] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.251] wcscat (in: _Dest=0x682d4d0, _Source="OCCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" [0183.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0183.251] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x19f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0183.252] wcscmp (_String1="OCLTINT.DLL", _String2=".") returned 1 [0183.252] wcscmp (_String1="OCLTINT.DLL", _String2="..") returned 1 [0183.252] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c3400, ftCreationTime.dwHighDateTime=0x1c2c146, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe09c3400, ftLastWriteTime.dwHighDateTime=0x1c2c146, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0183.252] wcscmp (_String1="OCMODVRD.XML", _String2=".") returned 1 [0183.252] wcscmp (_String1="OCMODVRD.XML", _String2="..") returned 1 [0183.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d448 [0183.252] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.252] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.252] wcscat (in: _Dest=0x682d448, _Source="OCMODVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" [0183.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0183.253] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34104100, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34104100, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0183.253] wcscmp (_String1="OFFOWCI.DLL", _String2=".") returned 1 [0183.253] wcscmp (_String1="OFFOWCI.DLL", _String2="..") returned 1 [0183.253] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0183.253] wcscmp (_String1="OIS.HXS", _String2=".") returned 1 [0183.253] wcscmp (_String1="OIS.HXS", _String2="..") returned 1 [0183.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0183.253] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.253] wcscat (in: _Dest=0x3f1da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.253] wcscat (in: _Dest=0x3f1da30, _Source="OIS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" [0183.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0183.254] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0183.254] wcscmp (_String1="OISINTL.DLL", _String2=".") returned 1 [0183.254] wcscmp (_String1="OISINTL.DLL", _String2="..") returned 1 [0183.254] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0183.254] wcscmp (_String1="OIS_COL.HXC", _String2=".") returned 1 [0183.254] wcscmp (_String1="OIS_COL.HXC", _String2="..") returned 1 [0183.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f7f0 [0183.255] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.255] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.255] wcscat (in: _Dest=0x3e0f7f0, _Source="OIS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" [0183.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0183.255] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0183.256] wcscmp (_String1="OIS_COL.HXT", _String2=".") returned 1 [0183.256] wcscmp (_String1="OIS_COL.HXT", _String2="..") returned 1 [0183.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e100f0 [0183.256] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.256] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.256] wcscat (in: _Dest=0x3e100f0, _Source="OIS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" [0183.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0183.257] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="OIS_F_~1.HXK")) returned 1 [0183.257] wcscmp (_String1="OIS_F_COL.HXK", _String2=".") returned 1 [0183.257] wcscmp (_String1="OIS_F_COL.HXK", _String2="..") returned 1 [0183.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d3c0 [0183.257] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.257] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.257] wcscat (in: _Dest=0x682d3c0, _Source="OIS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" [0183.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0183.258] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="OIS_K_~1.HXK")) returned 1 [0183.258] wcscmp (_String1="OIS_K_COL.HXK", _String2=".") returned 1 [0183.258] wcscmp (_String1="OIS_K_COL.HXK", _String2="..") returned 1 [0183.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bf90 [0183.258] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.258] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.258] wcscat (in: _Dest=0x682bf90, _Source="OIS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" [0183.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0183.259] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde5e9600, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde5e9600, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0183.259] wcscmp (_String1="OMSINTL.DLL", _String2=".") returned 1 [0183.259] wcscmp (_String1="OMSINTL.DLL", _String2="..") returned 1 [0183.259] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="OMSINT~1.IDX")) returned 1 [0183.272] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2=".") returned 1 [0183.272] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2="..") returned 1 [0183.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d178 [0183.272] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0183.272] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0183.273] wcscat (in: _Dest=0x674d178, _Source="OMSINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" [0190.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0190.960] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xb388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0190.960] wcscmp (_String1="ONELEV.EXE", _String2=".") returned 1 [0190.960] wcscmp (_String1="ONELEV.EXE", _String2="..") returned 1 [0190.960] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0190.960] wcscmp (_String1="ONENOTE.HXS", _String2=".") returned 1 [0190.960] wcscmp (_String1="ONENOTE.HXS", _String2="..") returned 1 [0190.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0fbf0 [0190.960] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.961] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.961] wcscat (in: _Dest=0x3e0fbf0, _Source="ONENOTE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" [0190.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0190.972] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0190.972] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2=".") returned 1 [0190.972] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2="..") returned 1 [0190.972] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0190.972] wcscmp (_String1="ONENOTE_COL.HXC", _String2=".") returned 1 [0190.973] wcscmp (_String1="ONENOTE_COL.HXC", _String2="..") returned 1 [0190.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0190.973] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.973] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.973] wcscat (in: _Dest=0x682cab8, _Source="ONENOTE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" [0190.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0190.974] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0190.974] wcscmp (_String1="ONENOTE_COL.HXT", _String2=".") returned 1 [0190.974] wcscmp (_String1="ONENOTE_COL.HXT", _String2="..") returned 1 [0190.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0190.974] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.974] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.974] wcscat (in: _Dest=0x682bce8, _Source="ONENOTE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" [0190.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0190.976] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0190.976] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2=".") returned 1 [0190.976] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2="..") returned 1 [0190.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db508 [0190.976] wcscpy (in: _Dest=0x66db508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.976] wcscat (in: _Dest=0x66db508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.976] wcscat (in: _Dest=0x66db508, _Source="ONENOTE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" [0190.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0190.977] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0190.977] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2=".") returned 1 [0190.977] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2="..") returned 1 [0190.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc438 [0190.977] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.977] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.977] wcscat (in: _Dest=0x66dc438, _Source="ONENOTE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" [0190.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0190.979] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0190.979] wcscmp (_String1="ONGuide.onepkg", _String2=".") returned 1 [0190.979] wcscmp (_String1="ONGuide.onepkg", _String2="..") returned 1 [0190.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682dbb8 [0190.979] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.979] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.979] wcscat (in: _Dest=0x682dbb8, _Source="ONGuide.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" [0190.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0190.980] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0190.980] wcscmp (_String1="ONINTL.DLL", _String2=".") returned 1 [0190.980] wcscmp (_String1="ONINTL.DLL", _String2="..") returned 1 [0190.980] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="ONINTL~1.IDX")) returned 1 [0190.980] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2=".") returned 1 [0190.980] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2="..") returned 1 [0190.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbd78 [0190.980] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.980] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.981] wcscat (in: _Dest=0x66dbd78, _Source="ONINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" [0190.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0190.982] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="ONINTL~2.IDX")) returned 1 [0190.982] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2=".") returned 1 [0190.982] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2="..") returned 1 [0190.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0190.982] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.982] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.982] wcscat (in: _Dest=0x66dc288, _Source="ONINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" [0190.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0190.983] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0190.983] wcscmp (_String1="ORGCH.VRD", _String2=".") returned 1 [0190.983] wcscmp (_String1="ORGCH.VRD", _String2="..") returned 1 [0190.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e100f0 [0190.983] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.983] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.984] wcscat (in: _Dest=0x3e100f0, _Source="ORGCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" [0190.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0190.986] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xc9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0190.986] wcscmp (_String1="ORGCHART.VSL", _String2=".") returned 1 [0190.987] wcscmp (_String1="ORGCHART.VSL", _String2="..") returned 1 [0190.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d118 [0190.987] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.987] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.987] wcscat (in: _Dest=0x682d118, _Source="ORGCHART.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" [0190.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0190.988] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0190.988] wcscmp (_String1="ORGPOS.VRD", _String2=".") returned 1 [0190.988] wcscmp (_String1="ORGPOS.VRD", _String2="..") returned 1 [0190.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f9f0 [0190.988] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.988] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.989] wcscat (in: _Dest=0x3e0f9f0, _Source="ORGPOS.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" [0190.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0190.990] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xedb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0190.990] wcscmp (_String1="ORGWIZ.VSL", _String2=".") returned 1 [0190.990] wcscmp (_String1="ORGWIZ.VSL", _String2="..") returned 1 [0190.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f870 [0190.990] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.990] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.990] wcscat (in: _Dest=0x3e0f870, _Source="ORGWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" [0190.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0190.992] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0190.992] wcscmp (_String1="ospintl.dll", _String2=".") returned 1 [0190.992] wcscmp (_String1="ospintl.dll", _String2="..") returned 1 [0190.992] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c12100, ftCreationTime.dwHighDateTime=0x1c67f3f, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82c12100, ftLastWriteTime.dwHighDateTime=0x1c67f3f, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0190.992] wcscmp (_String1="OUTFORM.DAT", _String2=".") returned 1 [0190.992] wcscmp (_String1="OUTFORM.DAT", _String2="..") returned 1 [0190.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e11070 [0190.992] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.992] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.992] wcscat (in: _Dest=0x3e11070, _Source="OUTFORM.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" [0190.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e11070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0190.993] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f584200, ftCreationTime.dwHighDateTime=0x1ca0fb6, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f584200, ftLastWriteTime.dwHighDateTime=0x1ca0fb6, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0190.993] wcscmp (_String1="OUTLBAR.INF", _String2=".") returned 1 [0190.993] wcscmp (_String1="OUTLBAR.INF", _String2="..") returned 1 [0190.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10f70 [0190.993] wcscpy (in: _Dest=0x3e10f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.993] wcscat (in: _Dest=0x3e10f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.993] wcscat (in: _Dest=0x3e10f70, _Source="OUTLBAR.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" [0190.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0190.995] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48d4c190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x645d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0190.995] wcscmp (_String1="OUTLLIBR.DLL", _String2=".") returned 1 [0190.995] wcscmp (_String1="OUTLLIBR.DLL", _String2="..") returned 1 [0190.995] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48cffed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="OUTLLI~1.IDX")) returned 1 [0190.995] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2=".") returned 1 [0190.995] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2="..") returned 1 [0190.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30d68 [0190.995] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.995] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.995] wcscat (in: _Dest=0x3e30d68, _Source="OUTLLIBR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" [0190.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0190.996] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48d722f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="OUTLLI~2.IDX")) returned 1 [0190.996] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2=".") returned 1 [0190.996] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2="..") returned 1 [0190.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30810 [0190.997] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.997] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.997] wcscat (in: _Dest=0x3e30810, _Source="OUTLLIBR.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" [0190.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0190.998] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430700, ftCreationTime.dwHighDateTime=0x1ca8f7c, ftLastAccessTime.dwLowDateTime=0x48de4710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d430700, ftLastWriteTime.dwHighDateTime=0x1ca8f7c, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="OUTLOO~1.HXS")) returned 1 [0190.998] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2=".") returned 1 [0190.998] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2="..") returned 1 [0190.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0190.998] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.998] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.998] wcscat (in: _Dest=0x682c458, _Source="OUTLOOK.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" [0190.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0190.999] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0191.000] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2=".") returned 1 [0191.000] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2="..") returned 1 [0191.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc5e8 [0191.000] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.000] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.000] wcscat (in: _Dest=0x66dc5e8, _Source="OUTLOOK.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" [0191.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0191.001] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0191.001] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2=".") returned 1 [0191.001] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2="..") returned 1 [0191.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db868 [0191.001] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.001] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.001] wcscat (in: _Dest=0x66db868, _Source="OUTLOOK.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" [0191.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0191.003] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0191.003] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2=".") returned 1 [0191.003] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2="..") returned 1 [0191.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30648 [0191.003] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.003] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.003] wcscat (in: _Dest=0x3e30648, _Source="OUTLOOK.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" [0191.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0191.004] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0191.004] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2=".") returned 1 [0191.004] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2="..") returned 1 [0191.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31a78 [0191.004] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.004] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.004] wcscat (in: _Dest=0x3e31a78, _Source="OUTLOOK.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" [0191.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0191.005] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aa9500, ftCreationTime.dwHighDateTime=0x1ca9620, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aa9500, ftLastWriteTime.dwHighDateTime=0x1ca9620, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0191.005] wcscmp (_String1="OUTLOOK.HOL", _String2=".") returned 1 [0191.006] wcscmp (_String1="OUTLOOK.HOL", _String2="..") returned 1 [0191.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e106f0 [0191.006] wcscpy (in: _Dest=0x3e106f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.006] wcscat (in: _Dest=0x3e106f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.006] wcscat (in: _Dest=0x3e106f0, _Source="OUTLOOK.HOL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" [0191.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e106f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0191.007] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24130d00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24130d00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0191.007] wcscmp (_String1="OUTLOOK.HXS", _String2=".") returned 1 [0191.007] wcscmp (_String1="OUTLOOK.HXS", _String2="..") returned 1 [0191.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f670 [0191.007] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.007] wcscat (in: _Dest=0x3e0f670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.007] wcscat (in: _Dest=0x3e0f670, _Source="OUTLOOK.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" [0191.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0191.008] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~2.HXC")) returned 1 [0191.008] wcscmp (_String1="OUTLOOK_COL.HXC", _String2=".") returned 1 [0191.008] wcscmp (_String1="OUTLOOK_COL.HXC", _String2="..") returned 1 [0191.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0191.008] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.008] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.008] wcscat (in: _Dest=0x682c568, _Source="OUTLOOK_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" [0191.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0191.009] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~2.HXT")) returned 1 [0191.009] wcscmp (_String1="OUTLOOK_COL.HXT", _String2=".") returned 1 [0191.009] wcscmp (_String1="OUTLOOK_COL.HXT", _String2="..") returned 1 [0191.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0191.009] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.009] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.009] wcscat (in: _Dest=0x682bf08, _Source="OUTLOOK_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" [0191.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0191.396] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~3.HXK")) returned 1 [0191.397] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2=".") returned 1 [0191.397] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2="..") returned 1 [0191.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0191.397] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.397] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.397] wcscat (in: _Dest=0x66dc558, _Source="OUTLOOK_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" [0196.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0196.973] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~4.HXK")) returned 1 [0196.983] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2=".") returned 1 [0196.983] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2="..") returned 1 [0196.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc438 [0196.983] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0196.983] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0196.983] wcscat (in: _Dest=0x66dc438, _Source="OUTLOOK_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" [0199.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0199.303] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0199.303] wcscmp (_String1="OUTLPERF.H", _String2=".") returned 1 [0199.303] wcscmp (_String1="OUTLPERF.H", _String2="..") returned 1 [0199.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e100f0 [0199.303] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.303] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.303] wcscat (in: _Dest=0x3e100f0, _Source="OUTLPERF.H" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" [0199.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0199.304] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0199.304] wcscmp (_String1="OUTLPERF.INI", _String2=".") returned 1 [0199.304] wcscmp (_String1="OUTLPERF.INI", _String2="..") returned 1 [0199.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c238 [0199.304] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.304] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.304] wcscat (in: _Dest=0x682c238, _Source="OUTLPERF.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" [0199.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0199.305] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1f360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0199.305] wcscmp (_String1="OUTLWVW.DLL", _String2=".") returned 1 [0199.305] wcscmp (_String1="OUTLWVW.DLL", _String2="..") returned 1 [0199.305] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19894c00, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19894c00, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="OUTLWV~1.IDX")) returned 1 [0199.305] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2=".") returned 1 [0199.305] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2="..") returned 1 [0199.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0199.305] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.305] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.305] wcscat (in: _Dest=0x66dc558, _Source="OUTLWVW.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" [0199.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0199.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d708c00, ftCreationTime.dwHighDateTime=0x1c65123, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d708c00, ftLastWriteTime.dwHighDateTime=0x1c65123, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0199.306] wcscmp (_String1="OWSHLP10.CHM", _String2=".") returned 1 [0199.306] wcscmp (_String1="OWSHLP10.CHM", _String2="..") returned 1 [0199.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c788 [0199.307] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.307] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.307] wcscat (in: _Dest=0x682c788, _Source="OWSHLP10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" [0199.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0199.308] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0199.308] wcscmp (_String1="PASSPORT.CSS", _String2=".") returned 1 [0199.308] wcscmp (_String1="PASSPORT.CSS", _String2="..") returned 1 [0199.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c810 [0199.308] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.308] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.308] wcscat (in: _Dest=0x682c810, _Source="PASSPORT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" [0199.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0199.309] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0199.309] wcscmp (_String1="PASTEL.CSS", _String2=".") returned 1 [0199.309] wcscmp (_String1="PASTEL.CSS", _String2="..") returned 1 [0199.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f9f0 [0199.309] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.309] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.309] wcscat (in: _Dest=0x3e0f9f0, _Source="PASTEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" [0199.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0199.310] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0199.310] wcscmp (_String1="PE.VSL", _String2=".") returned 1 [0199.310] wcscmp (_String1="PE.VSL", _String2="..") returned 1 [0199.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0f60 [0199.310] wcscpy (in: _Dest=0x66d0f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.310] wcscat (in: _Dest=0x66d0f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.310] wcscat (in: _Dest=0x66d0f60, _Source="PE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" [0199.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0199.311] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b023800, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b023800, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0199.311] wcscmp (_String1="PIPELINE.VRD", _String2=".") returned 1 [0199.311] wcscmp (_String1="PIPELINE.VRD", _String2="..") returned 1 [0199.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27690 [0199.311] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.311] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.311] wcscat (in: _Dest=0x3f27690, _Source="PIPELINE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" [0199.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0199.312] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb53c9e00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xeb649610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb53c9e00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0199.312] wcscmp (_String1="PJINTL.DLL", _String2=".") returned 1 [0199.312] wcscmp (_String1="PJINTL.DLL", _String2="..") returned 1 [0199.312] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xeb5fd350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0x25780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0199.312] wcscmp (_String1="PJINTLC.DLL", _String2=".") returned 1 [0199.313] wcscmp (_String1="PJINTLC.DLL", _String2="..") returned 1 [0199.313] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0199.313] wcscmp (_String1="PMENURES.DLL", _String2=".") returned 1 [0199.313] wcscmp (_String1="PMENURES.DLL", _String2="..") returned 1 [0199.313] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="POWERP~1.HXS")) returned 1 [0199.313] wcscmp (_String1="POWERPNT.DEV.HXS", _String2=".") returned 1 [0199.313] wcscmp (_String1="POWERPNT.DEV.HXS", _String2="..") returned 1 [0199.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db508 [0199.313] wcscpy (in: _Dest=0x66db508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.313] wcscat (in: _Dest=0x66db508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.313] wcscat (in: _Dest=0x66db508, _Source="POWERPNT.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" [0199.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0199.314] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0199.314] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2=".") returned 1 [0199.314] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2="..") returned 1 [0199.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e305b0 [0199.314] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.314] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.314] wcscat (in: _Dest=0x3e305b0, _Source="POWERPNT.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" [0199.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0199.315] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0199.315] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2=".") returned 1 [0199.315] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2="..") returned 1 [0199.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30d68 [0199.315] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.315] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.315] wcscat (in: _Dest=0x3e30d68, _Source="POWERPNT.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" [0199.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0199.316] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0199.316] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2=".") returned 1 [0199.316] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2="..") returned 1 [0199.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30810 [0199.317] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.317] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.317] wcscat (in: _Dest=0x3e30810, _Source="POWERPNT.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" [0199.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0199.317] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0199.318] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2=".") returned 1 [0199.318] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2="..") returned 1 [0199.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30648 [0199.318] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.318] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.318] wcscat (in: _Dest=0x3e30648, _Source="POWERPNT.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" [0199.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0199.319] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0199.319] wcscmp (_String1="POWERPNT.HXS", _String2=".") returned 1 [0199.319] wcscmp (_String1="POWERPNT.HXS", _String2="..") returned 1 [0199.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27718 [0199.319] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.319] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.319] wcscat (in: _Dest=0x3f27718, _Source="POWERPNT.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" [0199.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0199.320] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~2.HXC")) returned 1 [0199.320] wcscmp (_String1="POWERPNT_COL.HXC", _String2=".") returned 1 [0199.320] wcscmp (_String1="POWERPNT_COL.HXC", _String2="..") returned 1 [0199.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc5e8 [0199.320] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.320] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.320] wcscat (in: _Dest=0x66dc5e8, _Source="POWERPNT_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" [0199.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0199.321] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~2.HXT")) returned 1 [0199.321] wcscmp (_String1="POWERPNT_COL.HXT", _String2=".") returned 1 [0199.321] wcscmp (_String1="POWERPNT_COL.HXT", _String2="..") returned 1 [0199.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db868 [0199.321] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.321] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.321] wcscat (in: _Dest=0x66db868, _Source="POWERPNT_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" [0199.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0199.322] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~3.HXK")) returned 1 [0199.322] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2=".") returned 1 [0199.322] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2="..") returned 1 [0199.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dce58 [0199.322] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.322] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.322] wcscat (in: _Dest=0x66dce58, _Source="POWERPNT_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" [0199.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0199.323] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~4.HXK")) returned 1 [0199.323] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2=".") returned 1 [0199.323] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2="..") returned 1 [0199.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc048 [0199.323] wcscpy (in: _Dest=0x66dc048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.323] wcscat (in: _Dest=0x66dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.324] wcscat (in: _Dest=0x66dc048, _Source="POWERPNT_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" [0199.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0199.324] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0199.324] wcscmp (_String1="PPINTL.DLL", _String2=".") returned 1 [0199.325] wcscmp (_String1="PPINTL.DLL", _String2="..") returned 1 [0199.325] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="PPINTL~1.IDX")) returned 1 [0199.325] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2=".") returned 1 [0199.325] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2="..") returned 1 [0199.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc168 [0199.325] wcscpy (in: _Dest=0x66dc168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.325] wcscat (in: _Dest=0x66dc168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.325] wcscat (in: _Dest=0x66dc168, _Source="PPINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" [0199.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0199.326] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="PPINTL~2.IDX")) returned 1 [0199.326] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2=".") returned 1 [0199.326] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2="..") returned 1 [0199.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0199.326] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.326] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.326] wcscat (in: _Dest=0x66db628, _Source="PPINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" [0199.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0199.327] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0199.327] wcscmp (_String1="PRIMARY.CSS", _String2=".") returned 1 [0199.327] wcscmp (_String1="PRIMARY.CSS", _String2="..") returned 1 [0199.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10f70 [0199.327] wcscpy (in: _Dest=0x3e10f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.327] wcscat (in: _Dest=0x3e10f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.327] wcscat (in: _Dest=0x3e10f70, _Source="PRIMARY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" [0199.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0199.328] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1ff88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0199.328] wcscmp (_String1="PROPRPT.VSL", _String2=".") returned 1 [0199.328] wcscmp (_String1="PROPRPT.VSL", _String2="..") returned 1 [0199.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e106f0 [0199.329] wcscpy (in: _Dest=0x3e106f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.329] wcscat (in: _Dest=0x3e106f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.329] wcscat (in: _Dest=0x3e106f0, _Source="PROPRPT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" [0199.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e106f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0199.329] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b7eb00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b7eb00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0199.329] wcscmp (_String1="PROPRPT.VSS", _String2=".") returned 1 [0199.329] wcscmp (_String1="PROPRPT.VSS", _String2="..") returned 1 [0199.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0fbf0 [0199.330] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.330] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.330] wcscat (in: _Dest=0x3e0fbf0, _Source="PROPRPT.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" [0199.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0199.331] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc57b700, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc57b700, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0199.331] wcscmp (_String1="PROTTPLN.DOC", _String2=".") returned 1 [0199.331] wcscmp (_String1="PROTTPLN.DOC", _String2="..") returned 1 [0199.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27938 [0199.331] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.331] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.331] wcscat (in: _Dest=0x3f27938, _Source="PROTTPLN.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" [0199.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0199.332] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0199.332] wcscmp (_String1="PROTTPLN.PPT", _String2=".") returned 1 [0199.332] wcscmp (_String1="PROTTPLN.PPT", _String2="..") returned 1 [0199.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26b68 [0199.332] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.332] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.332] wcscat (in: _Dest=0x3f26b68, _Source="PROTTPLN.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" [0199.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0199.333] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7124c00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7124c00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0199.333] wcscmp (_String1="PROTTPLN.XLS", _String2=".") returned 1 [0199.333] wcscmp (_String1="PROTTPLN.XLS", _String2="..") returned 1 [0199.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26150 [0199.333] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.333] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.333] wcscat (in: _Dest=0x3f26150, _Source="PROTTPLN.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" [0199.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0199.334] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb268a00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb268a00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0199.335] wcscmp (_String1="PROTTPLV.DOC", _String2=".") returned 1 [0199.335] wcscmp (_String1="PROTTPLV.DOC", _String2="..") returned 1 [0199.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26bf0 [0199.335] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.335] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.336] wcscat (in: _Dest=0x3f26bf0, _Source="PROTTPLV.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" [0200.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0200.894] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0200.894] wcscmp (_String1="PROTTPLV.PPT", _String2=".") returned 1 [0200.894] wcscmp (_String1="PROTTPLV.PPT", _String2="..") returned 1 [0200.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cef8 [0200.894] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.894] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.894] wcscat (in: _Dest=0x682cef8, _Source="PROTTPLV.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" [0200.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0200.895] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d9800, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d9800, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0200.896] wcscmp (_String1="PROTTPLV.XLS", _String2=".") returned 1 [0200.896] wcscmp (_String1="PROTTPLV.XLS", _String2="..") returned 1 [0200.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c238 [0200.896] wcscpy (in: _Dest=0x682c238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.896] wcscat (in: _Dest=0x682c238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.896] wcscat (in: _Dest=0x682c238, _Source="PROTTPLV.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" [0200.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0200.897] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1cba00, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x554f36d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f1cba00, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0200.897] wcscmp (_String1="PSRCHKEY.DAT", _String2=".") returned 1 [0200.897] wcscmp (_String1="PSRCHKEY.DAT", _String2="..") returned 1 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c2c0 [0200.897] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.898] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.898] wcscat (in: _Dest=0x682c2c0, _Source="PSRCHKEY.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" [0200.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0200.899] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0200.899] wcscmp (_String1="PSRCHLEX.DAT", _String2=".") returned 1 [0200.899] wcscmp (_String1="PSRCHLEX.DAT", _String2="..") returned 1 [0200.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ccd8 [0200.899] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.899] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.899] wcscat (in: _Dest=0x682ccd8, _Source="PSRCHLEX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" [0200.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0200.900] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0200.900] wcscmp (_String1="PSRCHLTS.DAT", _String2=".") returned 1 [0200.900] wcscmp (_String1="PSRCHLTS.DAT", _String2="..") returned 1 [0200.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682da20 [0200.901] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.901] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.901] wcscat (in: _Dest=0x682da20, _Source="PSRCHLTS.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" [0200.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1368 [0200.902] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0200.902] wcscmp (_String1="PSRCHPHN.DAT", _String2=".") returned 1 [0200.902] wcscmp (_String1="PSRCHPHN.DAT", _String2="..") returned 1 [0200.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c3d0 [0200.902] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.902] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.902] wcscat (in: _Dest=0x682c3d0, _Source="PSRCHPHN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" [0200.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0200.903] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304de700, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x555b1db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x304de700, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0200.903] wcscmp (_String1="PSRCHSRN.DAT", _String2=".") returned 1 [0200.903] wcscmp (_String1="PSRCHSRN.DAT", _String2="..") returned 1 [0200.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682daa8 [0200.903] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.903] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.903] wcscat (in: _Dest=0x682daa8, _Source="PSRCHSRN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" [0200.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0200.904] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6a6568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0200.904] wcscmp (_String1="PUB6INTL.DLL", _String2=".") returned 1 [0200.905] wcscmp (_String1="PUB6INTL.DLL", _String2="..") returned 1 [0200.905] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="PUB6IN~1.IDX")) returned 1 [0200.905] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2=".") returned 1 [0200.905] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2="..") returned 1 [0200.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32230 [0200.905] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.905] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.905] wcscat (in: _Dest=0x3e32230, _Source="PUB6INTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" [0200.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0200.906] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6194900, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6194900, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="PUB6IN~2.IDX")) returned 1 [0200.906] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2=".") returned 1 [0200.906] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2="..") returned 1 [0200.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30e00 [0200.906] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.906] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.906] wcscat (in: _Dest=0x3e30e00, _Source="PUB6INTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" [0200.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0200.907] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c73f00, ftCreationTime.dwHighDateTime=0x1c92e11, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c73f00, ftLastWriteTime.dwHighDateTime=0x1c92e11, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0200.907] wcscmp (_String1="PUBCOLOR.SCM", _String2=".") returned 1 [0200.907] wcscmp (_String1="PUBCOLOR.SCM", _String2="..") returned 1 [0200.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682be80 [0200.908] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.908] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.908] wcscat (in: _Dest=0x682be80, _Source="PUBCOLOR.SCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" [0200.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0200.909] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0200.909] wcscmp (_String1="PUBFTSCM", _String2=".") returned 1 [0200.909] wcscmp (_String1="PUBFTSCM", _String2="..") returned 1 [0200.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e100f0 [0200.909] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.909] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.909] wcscat (in: _Dest=0x3e100f0, _Source="PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0200.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0200.910] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0200.911] wcscmp (_String1="PUBSPAPR", _String2=".") returned 1 [0200.911] wcscmp (_String1="PUBSPAPR", _String2="..") returned 1 [0200.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f670 [0200.911] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.911] wcscat (in: _Dest=0x3e0f670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.911] wcscat (in: _Dest=0x3e0f670, _Source="PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0200.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0f670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0200.912] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb05b00, ftCreationTime.dwHighDateTime=0x1ca9bec, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cb05b00, ftLastWriteTime.dwHighDateTime=0x1ca9bec, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0200.912] wcscmp (_String1="PUBWZINT.DLL", _String2=".") returned 1 [0200.912] wcscmp (_String1="PUBWZINT.DLL", _String2="..") returned 1 [0200.912] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e1a500, ftCreationTime.dwHighDateTime=0x1ca9bed, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e1a500, ftLastWriteTime.dwHighDateTime=0x1ca9bed, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="PUBWZI~1.IDX")) returned 1 [0200.912] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2=".") returned 1 [0200.912] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2="..") returned 1 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0200.912] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.912] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.912] wcscat (in: _Dest=0x3e322c8, _Source="PUBWZINT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" [0200.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0200.914] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x14560, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0200.914] wcscmp (_String1="QRYINT32.DLL", _String2=".") returned 1 [0200.914] wcscmp (_String1="QRYINT32.DLL", _String2="..") returned 1 [0200.914] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1 [0200.914] wcscmp (_String1="QuickStyles", _String2=".") returned 1 [0200.914] wcscmp (_String1="QuickStyles", _String2="..") returned 1 [0200.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f870 [0200.914] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.914] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.914] wcscat (in: _Dest=0x3e0f870, _Source="QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0200.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0200.915] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1 [0200.915] wcscmp (_String1="ReviewRouting_Init.xsn", _String2=".") returned 1 [0200.915] wcscmp (_String1="ReviewRouting_Init.xsn", _String2="..") returned 1 [0200.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31358 [0200.915] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.915] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.916] wcscat (in: _Dest=0x3e31358, _Source="ReviewRouting_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" [0200.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0200.917] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1 [0200.917] wcscmp (_String1="ReviewRouting_Review.xsn", _String2=".") returned 1 [0200.917] wcscmp (_String1="ReviewRouting_Review.xsn", _String2="..") returned 1 [0200.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1368 [0200.917] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.917] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.917] wcscat (in: _Dest=0x69c1368, _Source="ReviewRouting_Review.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" [0200.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0200.918] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0200.918] wcscmp (_String1="ROSE.CSS", _String2=".") returned 1 [0200.918] wcscmp (_String1="ROSE.CSS", _String2="..") returned 1 [0200.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e11070 [0200.918] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.918] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.919] wcscat (in: _Dest=0x3e11070, _Source="ROSE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" [0200.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e11070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0200.920] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57088600, ftCreationTime.dwHighDateTime=0x1be1e3c, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57088600, ftLastWriteTime.dwHighDateTime=0x1be1e3c, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0200.920] wcscmp (_String1="RPLBRF35.CHM", _String2=".") returned 1 [0200.920] wcscmp (_String1="RPLBRF35.CHM", _String2="..") returned 1 [0200.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682dbb8 [0200.920] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.920] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.920] wcscat (in: _Dest=0x682dbb8, _Source="RPLBRF35.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" [0200.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0200.921] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xa568, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0200.921] wcscmp (_String1="SAVASWEB.VSL", _String2=".") returned 1 [0200.921] wcscmp (_String1="SAVASWEB.VSL", _String2="..") returned 1 [0200.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bce8 [0200.921] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.921] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.921] wcscat (in: _Dest=0x682bce8, _Source="SAVASWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" [0200.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0200.922] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0200.923] wcscmp (_String1="SETLANG.HXS", _String2=".") returned 1 [0200.923] wcscmp (_String1="SETLANG.HXS", _String2="..") returned 1 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10270 [0200.923] wcscpy (in: _Dest=0x3e10270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.923] wcscat (in: _Dest=0x3e10270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.923] wcscat (in: _Dest=0x3e10270, _Source="SETLANG.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" [0200.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0200.924] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1 [0200.924] wcscmp (_String1="SETLANG_COL.HXC", _String2=".") returned 1 [0200.924] wcscmp (_String1="SETLANG_COL.HXC", _String2="..") returned 1 [0200.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0200.924] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.924] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.924] wcscat (in: _Dest=0x682cab8, _Source="SETLANG_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" [0200.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0200.925] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1 [0200.925] wcscmp (_String1="SETLANG_COL.HXT", _String2=".") returned 1 [0200.925] wcscmp (_String1="SETLANG_COL.HXT", _String2="..") returned 1 [0200.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0200.926] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.926] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.926] wcscat (in: _Dest=0x682c1b0, _Source="SETLANG_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" [0200.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0200.927] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1 [0200.927] wcscmp (_String1="SETLANG_F_COL.HXK", _String2=".") returned 1 [0200.927] wcscmp (_String1="SETLANG_F_COL.HXK", _String2="..") returned 1 [0200.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0200.927] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.927] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.927] wcscat (in: _Dest=0x66dc558, _Source="SETLANG_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" [0200.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0200.928] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1 [0200.928] wcscmp (_String1="SETLANG_K_COL.HXK", _String2=".") returned 1 [0200.928] wcscmp (_String1="SETLANG_K_COL.HXK", _String2="..") returned 1 [0200.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc438 [0200.928] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.928] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.928] wcscat (in: _Dest=0x66dc438, _Source="SETLANG_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" [0200.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0200.929] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0200.929] wcscmp (_String1="SGRES.DLL", _String2=".") returned 1 [0200.930] wcscmp (_String1="SGRES.DLL", _String2="..") returned 1 [0200.930] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe948f600, ftCreationTime.dwHighDateTime=0x1cab839, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe948f600, ftLastWriteTime.dwHighDateTime=0x1cab839, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="SGRESD~1.IDX")) returned 1 [0200.930] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2=".") returned 1 [0200.930] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2="..") returned 1 [0200.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbd78 [0200.930] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.930] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.930] wcscat (in: _Dest=0x66dbd78, _Source="SGRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" [0200.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0200.931] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0200.931] wcscmp (_String1="SHAPNUM.VSL", _String2=".") returned 1 [0200.931] wcscmp (_String1="SHAPNUM.VSL", _String2="..") returned 1 [0200.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10670 [0200.931] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0200.931] wcscat (in: _Dest=0x3e10670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0200.931] wcscat (in: _Dest=0x3e10670, _Source="SHAPNUM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" [0200.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0201.514] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0201.514] wcscmp (_String1="SKY.CSS", _String2=".") returned 1 [0201.514] wcscmp (_String1="SKY.CSS", _String2="..") returned 1 [0201.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d0d0 [0201.514] wcscpy (in: _Dest=0x3f1d0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.514] wcscat (in: _Dest=0x3f1d0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.514] wcscat (in: _Dest=0x3f1d0d0, _Source="SKY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" [0201.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0201.813] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0201.813] wcscmp (_String1="SLINTL.DLL", _String2=".") returned 1 [0201.813] wcscmp (_String1="SLINTL.DLL", _String2="..") returned 1 [0201.813] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e700, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x931e700, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1 [0203.293] wcscmp (_String1="SMIGRATE.VSL", _String2=".") returned 1 [0203.293] wcscmp (_String1="SMIGRATE.VSL", _String2="..") returned 1 [0203.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27d78 [0203.293] wcscpy (in: _Dest=0x3f27d78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.293] wcscat (in: _Dest=0x3f27d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.293] wcscat (in: _Dest=0x3f27d78, _Source="SMIGRATE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" [0203.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0203.294] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0203.294] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2=".") returned 1 [0203.294] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2="..") returned 1 [0203.294] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5330700, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5330700, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0203.294] wcscmp (_String1="SPACE.VRD", _String2=".") returned 1 [0203.294] wcscmp (_String1="SPACE.VRD", _String2="..") returned 1 [0203.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e10bf0 [0203.295] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.295] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.295] wcscat (in: _Dest=0x3e10bf0, _Source="SPACE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" [0203.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0203.296] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0203.296] wcscmp (_String1="SPRING.CSS", _String2=".") returned 1 [0203.296] wcscmp (_String1="SPRING.CSS", _String2="..") returned 1 [0203.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f7f0 [0203.296] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.296] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.296] wcscat (in: _Dest=0x3e0f7f0, _Source="SPRING.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" [0203.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0203.297] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0203.297] wcscmp (_String1="SPS.CSS", _String2=".") returned 1 [0203.297] wcscmp (_String1="SPS.CSS", _String2="..") returned 1 [0203.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ac28 [0203.297] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.297] wcscat (in: _Dest=0x3f1ac28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.297] wcscat (in: _Dest=0x3f1ac28, _Source="SPS.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" [0203.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ac28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0203.298] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0203.298] wcscmp (_String1="STEEL.CSS", _String2=".") returned 1 [0203.298] wcscmp (_String1="STEEL.CSS", _String2="..") returned 1 [0203.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e109f0 [0203.298] wcscpy (in: _Dest=0x3e109f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.298] wcscat (in: _Dest=0x3e109f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.298] wcscat (in: _Dest=0x3e109f0, _Source="STEEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" [0203.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e109f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0203.299] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc836ff00, ftCreationTime.dwHighDateTime=0x1ca65d4, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc836ff00, ftLastWriteTime.dwHighDateTime=0x1ca65d4, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0203.299] wcscmp (_String1="STSLIST.CHM", _String2=".") returned 1 [0203.299] wcscmp (_String1="STSLIST.CHM", _String2="..") returned 1 [0203.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c6b8 [0203.299] wcscpy (in: _Dest=0x674c6b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.299] wcscat (in: _Dest=0x674c6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.299] wcscat (in: _Dest=0x674c6b8, _Source="STSLIST.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" [0203.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0203.300] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47b600, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce47b600, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0203.300] wcscmp (_String1="STSLISTI.DLL", _String2=".") returned 1 [0203.300] wcscmp (_String1="STSLISTI.DLL", _String2="..") returned 1 [0203.300] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x37b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0203.300] wcscmp (_String1="STSUCRES.DLL", _String2=".") returned 1 [0203.300] wcscmp (_String1="STSUCRES.DLL", _String2="..") returned 1 [0203.301] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0203.301] wcscmp (_String1="STSUPLD.INTL.DLL", _String2=".") returned 1 [0203.301] wcscmp (_String1="STSUPLD.INTL.DLL", _String2="..") returned 1 [0203.301] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0203.301] wcscmp (_String1="SUNNY.CSS", _String2=".") returned 1 [0203.301] wcscmp (_String1="SUNNY.CSS", _String2="..") returned 1 [0203.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bbb8 [0203.301] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.301] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.301] wcscat (in: _Dest=0x674bbb8, _Source="SUNNY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" [0203.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0203.302] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0203.302] wcscmp (_String1="SUNSET.CSS", _String2=".") returned 1 [0203.302] wcscmp (_String1="SUNSET.CSS", _String2="..") returned 1 [0203.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b1b8 [0203.302] wcscpy (in: _Dest=0x674b1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.302] wcscat (in: _Dest=0x674b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.302] wcscat (in: _Dest=0x674b1b8, _Source="SUNSET.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" [0203.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364 [0203.303] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0203.303] wcscmp (_String1="TERRCOTT.CSS", _String2=".") returned 1 [0203.303] wcscmp (_String1="TERRCOTT.CSS", _String2="..") returned 1 [0203.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27e00 [0203.303] wcscpy (in: _Dest=0x3f27e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.303] wcscat (in: _Dest=0x3f27e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.303] wcscat (in: _Dest=0x3f27e00, _Source="TERRCOTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" [0203.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0203.304] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x43768, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0203.304] wcscmp (_String1="TIMESOLN.VSL", _String2=".") returned 1 [0203.304] wcscmp (_String1="TIMESOLN.VSL", _String2="..") returned 1 [0203.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f273e8 [0203.304] wcscpy (in: _Dest=0x3f273e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.304] wcscat (in: _Dest=0x3f273e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.304] wcscat (in: _Dest=0x3f273e8, _Source="TIMESOLN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" [0203.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f273e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0203.305] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x5eb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1 [0203.305] wcscmp (_String1="UML.VSL", _String2=".") returned 1 [0203.305] wcscmp (_String1="UML.VSL", _String2="..") returned 1 [0203.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0203.305] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.305] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.305] wcscat (in: _Dest=0x3f1af70, _Source="UML.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" [0203.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0203.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x5f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVBRES.DLL", cAlternateFileName="")) returned 1 [0203.306] wcscmp (_String1="UMLVBRES.DLL", _String2=".") returned 1 [0203.306] wcscmp (_String1="UMLVBRES.DLL", _String2="..") returned 1 [0203.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60R.DLL", cAlternateFileName="")) returned 1 [0203.306] wcscmp (_String1="UMLVC60R.DLL", _String2=".") returned 1 [0203.306] wcscmp (_String1="UMLVC60R.DLL", _String2="..") returned 1 [0203.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVSUI.DLL", cAlternateFileName="")) returned 1 [0203.306] wcscmp (_String1="UMLVSUI.DLL", _String2=".") returned 1 [0203.306] wcscmp (_String1="UMLVSUI.DLL", _String2="..") returned 1 [0203.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12ac700, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc12ac700, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0xe780, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0203.306] wcscmp (_String1="UmOutlookStrings.dll", _String2=".") returned 1 [0203.306] wcscmp (_String1="UmOutlookStrings.dll", _String2="..") returned 1 [0203.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e95bf00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e95bf00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1 [0203.306] wcscmp (_String1="VALVE.VRD", _String2=".") returned 1 [0203.306] wcscmp (_String1="VALVE.VRD", _String2="..") returned 1 [0203.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674acb8 [0203.306] wcscpy (in: _Dest=0x674acb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.307] wcscat (in: _Dest=0x674acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.307] wcscat (in: _Dest=0x674acb8, _Source="VALVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" [0203.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674acb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0203.307] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34395000, ftCreationTime.dwHighDateTime=0x1c314a0, ftLastAccessTime.dwLowDateTime=0x35636670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34395000, ftLastWriteTime.dwHighDateTime=0x1c314a0, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0203.307] wcscmp (_String1="VBAOWS10.CHM", _String2=".") returned 1 [0203.307] wcscmp (_String1="VBAOWS10.CHM", _String2="..") returned 1 [0203.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27140 [0203.308] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.308] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.308] wcscat (in: _Dest=0x3f27140, _Source="VBAOWS10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" [0203.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0203.309] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x265dba00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x265dba00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1 [0203.309] wcscmp (_String1="VISBRRES.DLL", _String2=".") returned 1 [0203.309] wcscmp (_String1="VISBRRES.DLL", _String2="..") returned 1 [0203.309] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="VISBRR~1.IDX")) returned 1 [0203.309] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2=".") returned 1 [0203.309] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2="..") returned 1 [0203.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30b08 [0203.309] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.309] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.309] wcscat (in: _Dest=0x3e30b08, _Source="VISBRRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" [0203.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0203.310] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1 [0203.310] wcscmp (_String1="VISCOLOR.VSL", _String2=".") returned 1 [0203.310] wcscmp (_String1="VISCOLOR.VSL", _String2="..") returned 1 [0203.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27360 [0203.310] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.310] wcscat (in: _Dest=0x3f27360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.310] wcscat (in: _Dest=0x3f27360, _Source="VISCOLOR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" [0203.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0203.311] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1 [0203.311] wcscmp (_String1="VISINTL.DLL", _String2=".") returned 1 [0203.311] wcscmp (_String1="VISINTL.DLL", _String2="..") returned 1 [0203.311] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c838000, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c838000, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="VISINT~1.IDX")) returned 1 [0203.311] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2=".") returned 1 [0203.311] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2="..") returned 1 [0203.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0203.311] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.311] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.311] wcscat (in: _Dest=0x66dd1b8, _Source="VISINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" [0203.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0203.312] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1 [0203.312] wcscmp (_String1="VISIO.CSS", _String2=".") returned 1 [0203.312] wcscmp (_String1="VISIO.CSS", _String2="..") returned 1 [0203.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c738 [0203.313] wcscpy (in: _Dest=0x674c738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.313] wcscat (in: _Dest=0x674c738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.313] wcscat (in: _Dest=0x674c738, _Source="VISIO.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" [0203.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0203.314] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="VISIOD~1.HXS")) returned 1 [0203.314] wcscmp (_String1="VISIO.DEV.HXS", _String2=".") returned 1 [0203.314] wcscmp (_String1="VISIO.DEV.HXS", _String2="..") returned 1 [0203.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26d88 [0203.314] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.314] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.314] wcscat (in: _Dest=0x3f26d88, _Source="VISIO.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" [0203.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0203.315] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="VISIOD~1.HXC")) returned 1 [0203.315] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2=".") returned 1 [0203.315] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2="..") returned 1 [0203.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0203.315] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.315] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.315] wcscat (in: _Dest=0x66dc288, _Source="VISIO.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" [0203.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0203.316] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="VISIOD~1.HXT")) returned 1 [0203.316] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2=".") returned 1 [0203.316] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2="..") returned 1 [0203.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd098 [0203.316] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.316] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.316] wcscat (in: _Dest=0x66dd098, _Source="VISIO.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" [0203.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0203.317] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="VISIOD~1.HXK")) returned 1 [0203.317] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2=".") returned 1 [0203.317] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2="..") returned 1 [0203.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0203.317] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.317] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.317] wcscat (in: _Dest=0x66dbfb8, _Source="VISIO.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" [0203.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0203.318] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="VISIOD~2.HXK")) returned 1 [0203.318] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2=".") returned 1 [0203.318] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2="..") returned 1 [0203.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcca8 [0203.318] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.318] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.318] wcscat (in: _Dest=0x66dcca8, _Source="VISIO.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" [0203.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0203.319] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3a1b00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b3a1b00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1 [0203.319] wcscmp (_String1="VISIO.HXS", _String2=".") returned 1 [0203.319] wcscmp (_String1="VISIO.HXS", _String2="..") returned 1 [0203.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674ae38 [0203.319] wcscpy (in: _Dest=0x674ae38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0203.319] wcscat (in: _Dest=0x674ae38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0203.319] wcscat (in: _Dest=0x674ae38, _Source="VISIO.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" [0203.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ae38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0203.320] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a182500, ftCreationTime.dwHighDateTime=0x1ca9159, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a182500, ftLastWriteTime.dwHighDateTime=0x1ca9159, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="VISIOS~1.HXS")) returned 1 [0204.314] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2=".") returned 1 [0204.314] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2="..") returned 1 [0204.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31948 [0204.314] wcscpy (in: _Dest=0x3e31948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0204.314] wcscat (in: _Dest=0x3e31948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0204.314] wcscat (in: _Dest=0x3e31948, _Source="VISIO.SHAPESHEET.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" [0205.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0205.443] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="VISIOS~1.HXC")) returned 1 [0205.443] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2=".") returned 1 [0205.443] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2="..") returned 1 [0205.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697e968 [0205.443] wcscpy (in: _Dest=0x697e968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.444] wcscat (in: _Dest=0x697e968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.444] wcscat (in: _Dest=0x697e968, _Source="VISIO.SHAPESHEET_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" [0205.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0205.444] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="VISIOS~1.HXT")) returned 1 [0205.444] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2=".") returned 1 [0205.444] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2="..") returned 1 [0205.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697ea08 [0205.445] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.445] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.445] wcscat (in: _Dest=0x697ea08, _Source="VISIO.SHAPESHEET_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" [0205.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0205.446] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="VISIOS~1.HXK")) returned 1 [0205.446] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2=".") returned 1 [0205.446] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2="..") returned 1 [0205.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697eaa8 [0205.446] wcscpy (in: _Dest=0x697eaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.446] wcscat (in: _Dest=0x697eaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.446] wcscat (in: _Dest=0x697eaa8, _Source="VISIO.SHAPESHEET_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" [0205.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697eaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0205.447] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="VISIOS~2.HXK")) returned 1 [0205.447] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2=".") returned 1 [0205.447] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2="..") returned 1 [0205.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697eb48 [0205.447] wcscpy (in: _Dest=0x697eb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.447] wcscat (in: _Dest=0x697eb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.447] wcscat (in: _Dest=0x697eb48, _Source="VISIO.SHAPESHEET_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" [0205.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697eb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0205.448] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="VISIO_~1.HXC")) returned 1 [0205.448] wcscmp (_String1="VISIO_COL.HXC", _String2=".") returned 1 [0205.448] wcscmp (_String1="VISIO_COL.HXC", _String2="..") returned 1 [0205.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d800 [0205.448] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.448] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.448] wcscat (in: _Dest=0x682d800, _Source="VISIO_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" [0205.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0205.449] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="VISIO_~1.HXT")) returned 1 [0205.449] wcscmp (_String1="VISIO_COL.HXT", _String2=".") returned 1 [0205.449] wcscmp (_String1="VISIO_COL.HXT", _String2="..") returned 1 [0205.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d910 [0205.449] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.449] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.449] wcscat (in: _Dest=0x682d910, _Source="VISIO_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" [0205.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0205.450] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="VISIO_~1.HXK")) returned 1 [0205.450] wcscmp (_String1="VISIO_F_COL.HXK", _String2=".") returned 1 [0205.450] wcscmp (_String1="VISIO_F_COL.HXK", _String2="..") returned 1 [0205.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c4e0 [0205.450] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.451] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.451] wcscat (in: _Dest=0x682c4e0, _Source="VISIO_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" [0205.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0205.451] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="VISIO_~2.HXK")) returned 1 [0205.451] wcscmp (_String1="VISIO_K_COL.HXK", _String2=".") returned 1 [0205.452] wcscmp (_String1="VISIO_K_COL.HXK", _String2="..") returned 1 [0205.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0205.452] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.452] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.452] wcscat (in: _Dest=0x682c700, _Source="VISIO_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" [0205.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0205.453] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b601700, ftCreationTime.dwHighDateTime=0x1ca506e, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b601700, ftLastWriteTime.dwHighDateTime=0x1ca506e, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="VISIO_~1.HXS")) returned 1 [0205.453] wcscmp (_String1="VISIO_PRM.HXS", _String2=".") returned 1 [0205.453] wcscmp (_String1="VISIO_PRM.HXS", _String2="..") returned 1 [0205.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d998 [0205.453] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.453] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.453] wcscat (in: _Dest=0x682d998, _Source="VISIO_PRM.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" [0205.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0205.454] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa57000, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfaa57000, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="VISIO_~2.HXC")) returned 1 [0205.454] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2=".") returned 1 [0205.454] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2="..") returned 1 [0205.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0205.454] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.454] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.454] wcscat (in: _Dest=0x66dd2d8, _Source="VISIO_PRM_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" [0205.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0205.455] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c0800, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf11c0800, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="VISIO_~2.HXT")) returned 1 [0205.455] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2=".") returned 1 [0205.455] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2="..") returned 1 [0205.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0205.455] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.455] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.455] wcscat (in: _Dest=0x66db598, _Source="VISIO_PRM_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" [0205.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0205.456] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="VISIO_~3.HXK")) returned 1 [0205.456] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2=".") returned 1 [0205.456] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2="..") returned 1 [0205.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0205.457] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.457] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.457] wcscat (in: _Dest=0x66dcaf8, _Source="VISIO_PRM_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" [0205.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0205.458] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="VISIO_~4.HXK")) returned 1 [0205.458] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2=".") returned 1 [0205.458] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2="..") returned 1 [0205.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd368 [0205.458] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.458] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.458] wcscat (in: _Dest=0x66dd368, _Source="VISIO_PRM_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" [0205.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0205.459] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="VISIO_~2.HXS")) returned 1 [0205.459] wcscmp (_String1="VISIO_STD.HXS", _String2=".") returned 1 [0205.459] wcscmp (_String1="VISIO_STD.HXS", _String2="..") returned 1 [0205.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d118 [0205.459] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.459] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.459] wcscat (in: _Dest=0x682d118, _Source="VISIO_STD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" [0205.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0205.460] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="VISIO_~3.HXC")) returned 1 [0205.460] wcscmp (_String1="VISIO_STD_COL.HXC", _String2=".") returned 1 [0205.460] wcscmp (_String1="VISIO_STD_COL.HXC", _String2="..") returned 1 [0205.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcb88 [0205.460] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.460] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.460] wcscat (in: _Dest=0x66dcb88, _Source="VISIO_STD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" [0205.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0205.461] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="VISIO_~3.HXT")) returned 1 [0205.461] wcscmp (_String1="VISIO_STD_COL.HXT", _String2=".") returned 1 [0205.462] wcscmp (_String1="VISIO_STD_COL.HXT", _String2="..") returned 1 [0205.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc708 [0205.462] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.462] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.462] wcscat (in: _Dest=0x66dc708, _Source="VISIO_STD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" [0205.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0205.463] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="VIB8A9~1.HXK")) returned 1 [0205.463] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2=".") returned 1 [0205.463] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2="..") returned 1 [0205.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db8f8 [0205.463] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.463] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.463] wcscat (in: _Dest=0x66db8f8, _Source="VISIO_STD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" [0205.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0205.464] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="VI5545~1.HXK")) returned 1 [0205.464] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2=".") returned 1 [0205.464] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2="..") returned 1 [0205.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0205.464] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.464] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.464] wcscat (in: _Dest=0x66dc828, _Source="VISIO_STD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" [0205.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0205.465] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xad70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1 [0205.465] wcscmp (_String1="VISUTILS.VSL", _String2=".") returned 1 [0205.465] wcscmp (_String1="VISUTILS.VSL", _String2="..") returned 1 [0205.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cb40 [0205.465] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.465] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.465] wcscat (in: _Dest=0x682cb40, _Source="VISUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" [0205.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0205.466] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1 [0205.466] wcscmp (_String1="VISWEB.VSL", _String2=".") returned 1 [0205.466] wcscmp (_String1="VISWEB.VSL", _String2="..") returned 1 [0205.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f370 [0205.466] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.466] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.467] wcscat (in: _Dest=0x3e0f370, _Source="VISWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" [0205.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0205.467] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1 [0205.467] wcscmp (_String1="Vsdir", _String2=".") returned 1 [0205.467] wcscmp (_String1="Vsdir", _String2="..") returned 1 [0205.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d148 [0205.468] wcscpy (in: _Dest=0x3f1d148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.468] wcscat (in: _Dest=0x3f1d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.468] wcscat (in: _Dest=0x3f1d148, _Source="Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0205.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0205.469] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0205.469] wcscmp (_String1="VVIEWRES.DLL", _String2=".") returned 1 [0205.469] wcscmp (_String1="VVIEWRES.DLL", _String2="..") returned 1 [0205.469] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1 [0205.469] wcscmp (_String1="WDALLLNK.VRD", _String2=".") returned 1 [0205.469] wcscmp (_String1="WDALLLNK.VRD", _String2="..") returned 1 [0205.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cde8 [0205.469] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.469] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.469] wcscat (in: _Dest=0x682cde8, _Source="WDALLLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" [0205.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0205.470] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69727b00, ftCreationTime.dwHighDateTime=0x1c2a085, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69727b00, ftLastWriteTime.dwHighDateTime=0x1c2a085, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1 [0205.470] wcscmp (_String1="WDCMPVRD.XML", _String2=".") returned 1 [0205.470] wcscmp (_String1="WDCMPVRD.XML", _String2="..") returned 1 [0205.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d338 [0205.470] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.470] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.470] wcscat (in: _Dest=0x682d338, _Source="WDCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" [0205.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0205.471] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1 [0205.471] wcscmp (_String1="WDERRLNK.VRD", _String2=".") returned 1 [0205.471] wcscmp (_String1="WDERRLNK.VRD", _String2="..") returned 1 [0205.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c348 [0205.471] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.471] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.471] wcscat (in: _Dest=0x682c348, _Source="WDERRLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" [0205.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0205.472] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="WINPRO~1.HXS")) returned 1 [0205.472] wcscmp (_String1="WINPROJ.DEV.HXS", _String2=".") returned 1 [0205.472] wcscmp (_String1="WINPROJ.DEV.HXS", _String2="..") returned 1 [0205.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682ce70 [0205.472] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.472] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.473] wcscat (in: _Dest=0x682ce70, _Source="WINPROJ.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" [0205.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0205.473] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="WINPRO~1.HXC")) returned 1 [0205.473] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2=".") returned 1 [0205.473] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2="..") returned 1 [0205.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc8b8 [0205.473] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.474] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.474] wcscat (in: _Dest=0x66dc8b8, _Source="WINPROJ.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" [0205.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0205.474] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="WINPRO~1.HXT")) returned 1 [0205.474] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2=".") returned 1 [0205.474] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2="..") returned 1 [0205.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbce8 [0205.475] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.475] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.475] wcscat (in: _Dest=0x66dbce8, _Source="WINPROJ.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" [0205.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0205.475] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="WINPRO~1.HXK")) returned 1 [0205.475] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2=".") returned 1 [0205.475] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2="..") returned 1 [0205.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30778 [0205.476] wcscpy (in: _Dest=0x3e30778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.476] wcscat (in: _Dest=0x3e30778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.476] wcscat (in: _Dest=0x3e30778, _Source="WINPROJ.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" [0205.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0205.477] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="WINPRO~2.HXK")) returned 1 [0205.477] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2=".") returned 1 [0205.477] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2="..") returned 1 [0205.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e318b0 [0205.477] wcscpy (in: _Dest=0x3e318b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.477] wcscat (in: _Dest=0x3e318b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.477] wcscat (in: _Dest=0x3e318b0, _Source="WINPROJ.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" [0205.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e318b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0205.478] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1 [0206.867] wcscmp (_String1="WINPROJ.HXS", _String2=".") returned 1 [0206.867] wcscmp (_String1="WINPROJ.HXS", _String2="..") returned 1 [0206.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f470 [0206.867] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.867] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.867] wcscat (in: _Dest=0x3e0f470, _Source="WINPROJ.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" [0206.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0206.869] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="WINPRO~2.HXC")) returned 1 [0206.869] wcscmp (_String1="WINPROJ_COL.HXC", _String2=".") returned 1 [0206.869] wcscmp (_String1="WINPROJ_COL.HXC", _String2="..") returned 1 [0206.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0206.869] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.869] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.869] wcscat (in: _Dest=0x682c0a0, _Source="WINPROJ_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" [0206.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c [0206.870] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="WINPRO~2.HXT")) returned 1 [0206.870] wcscmp (_String1="WINPROJ_COL.HXT", _String2=".") returned 1 [0206.870] wcscmp (_String1="WINPROJ_COL.HXT", _String2="..") returned 1 [0206.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0206.870] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.870] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.870] wcscat (in: _Dest=0x682c788, _Source="WINPROJ_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" [0206.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0206.871] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="WINPRO~3.HXK")) returned 1 [0206.871] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2=".") returned 1 [0206.871] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2="..") returned 1 [0206.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2378 [0206.871] wcscpy (in: _Dest=0x3df2378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.871] wcscat (in: _Dest=0x3df2378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.871] wcscat (in: _Dest=0x3df2378, _Source="WINPROJ_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" [0206.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0206.872] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x998309d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="WINPRO~4.HXK")) returned 1 [0206.872] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2=".") returned 1 [0206.872] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2="..") returned 1 [0206.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df14d8 [0206.872] wcscpy (in: _Dest=0x3df14d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.872] wcscat (in: _Dest=0x3df14d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.872] wcscat (in: _Dest=0x3df14d8, _Source="WINPROJ_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" [0206.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df14d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0206.873] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac5a1500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac5a1500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1 [0206.873] wcscmp (_String1="WINSCHD.VRD", _String2=".") returned 1 [0206.873] wcscmp (_String1="WINSCHD.VRD", _String2="..") returned 1 [0206.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e102f0 [0206.873] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.873] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.873] wcscat (in: _Dest=0x3e102f0, _Source="WINSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" [0206.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0206.874] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6b4800, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c6b4800, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="WINWOR~1.HXS")) returned 1 [0206.874] wcscmp (_String1="WINWORD.DEV.HXS", _String2=".") returned 1 [0206.874] wcscmp (_String1="WINWORD.DEV.HXS", _String2="..") returned 1 [0206.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d2b0 [0206.874] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.874] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.874] wcscat (in: _Dest=0x682d2b0, _Source="WINWORD.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" [0206.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0206.875] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="WINWOR~1.HXC")) returned 1 [0206.875] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2=".") returned 1 [0206.875] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2="..") returned 1 [0206.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df29a8 [0206.875] wcscpy (in: _Dest=0x3df29a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.875] wcscat (in: _Dest=0x3df29a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.875] wcscat (in: _Dest=0x3df29a8, _Source="WINWORD.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" [0206.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df29a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0206.876] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="WINWOR~1.HXT")) returned 1 [0206.876] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2=".") returned 1 [0206.876] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2="..") returned 1 [0206.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2498 [0206.877] wcscpy (in: _Dest=0x3df2498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.877] wcscat (in: _Dest=0x3df2498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.877] wcscat (in: _Dest=0x3df2498, _Source="WINWORD.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" [0206.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0206.877] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="WINWOR~1.HXK")) returned 1 [0206.878] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2=".") returned 1 [0206.878] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2="..") returned 1 [0206.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31488 [0206.878] wcscpy (in: _Dest=0x3e31488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.878] wcscat (in: _Dest=0x3e31488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.878] wcscat (in: _Dest=0x3e31488, _Source="WINWORD.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" [0206.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0206.879] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="WINWOR~2.HXK")) returned 1 [0206.879] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2=".") returned 1 [0206.879] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2="..") returned 1 [0206.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e316e8 [0206.879] wcscpy (in: _Dest=0x3e316e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.879] wcscat (in: _Dest=0x3e316e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.879] wcscat (in: _Dest=0x3e316e8, _Source="WINWORD.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" [0206.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e316e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0206.880] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1 [0206.880] wcscmp (_String1="WINWORD.HXS", _String2=".") returned 1 [0206.880] wcscmp (_String1="WINWORD.HXS", _String2="..") returned 1 [0206.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674af38 [0206.880] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.880] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.880] wcscat (in: _Dest=0x674af38, _Source="WINWORD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" [0206.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0206.882] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="WINWOR~2.HXC")) returned 1 [0206.882] wcscmp (_String1="WINWORD_COL.HXC", _String2=".") returned 1 [0206.882] wcscmp (_String1="WINWORD_COL.HXC", _String2="..") returned 1 [0206.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c018 [0206.882] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.882] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.882] wcscat (in: _Dest=0x682c018, _Source="WINWORD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" [0206.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0206.883] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="WINWOR~2.HXT")) returned 1 [0206.883] wcscmp (_String1="WINWORD_COL.HXT", _String2=".") returned 1 [0206.883] wcscmp (_String1="WINWORD_COL.HXT", _String2="..") returned 1 [0206.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cd60 [0206.884] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.884] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.884] wcscat (in: _Dest=0x682cd60, _Source="WINWORD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" [0206.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0206.884] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="WINWOR~3.HXK")) returned 1 [0206.885] wcscmp (_String1="WINWORD_F_COL.HXK", _String2=".") returned 1 [0206.885] wcscmp (_String1="WINWORD_F_COL.HXK", _String2="..") returned 1 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df22e8 [0206.885] wcscpy (in: _Dest=0x3df22e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.885] wcscat (in: _Dest=0x3df22e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.885] wcscat (in: _Dest=0x3df22e8, _Source="WINWORD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" [0206.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0206.886] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="WINWOR~4.HXK")) returned 1 [0206.886] wcscmp (_String1="WINWORD_K_COL.HXK", _String2=".") returned 1 [0206.886] wcscmp (_String1="WINWORD_K_COL.HXK", _String2="..") returned 1 [0206.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2258 [0206.886] wcscpy (in: _Dest=0x3df2258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.886] wcscat (in: _Dest=0x3df2258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.886] wcscat (in: _Dest=0x3df2258, _Source="WINWORD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" [0206.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0206.887] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1 [0206.887] wcscmp (_String1="WORKFLOW.VSL", _String2=".") returned 1 [0206.887] wcscmp (_String1="WORKFLOW.VSL", _String2="..") returned 1 [0206.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c9a8 [0206.887] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.887] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.887] wcscat (in: _Dest=0x682c9a8, _Source="WORKFLOW.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" [0206.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0206.888] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0xc8958, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1 [0206.888] wcscmp (_String1="WWINTL.DLL", _String2=".") returned 1 [0206.888] wcscmp (_String1="WWINTL.DLL", _String2="..") returned 1 [0206.888] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="WWINTL~1.IDX")) returned 1 [0206.888] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2=".") returned 1 [0206.888] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2="..") returned 1 [0206.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df3068 [0206.888] wcscpy (in: _Dest=0x3df3068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.888] wcscat (in: _Dest=0x3df3068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.888] wcscat (in: _Dest=0x3df3068, _Source="WWINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" [0206.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df3068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0206.889] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f614d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="WWINTL~2.IDX")) returned 1 [0206.889] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2=".") returned 1 [0206.889] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2="..") returned 1 [0206.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1dd8 [0206.889] wcscpy (in: _Dest=0x3df1dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.889] wcscat (in: _Dest=0x3df1dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.889] wcscat (in: _Dest=0x3df1dd8, _Source="WWINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" [0206.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df1dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0206.890] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1 [0206.890] wcscmp (_String1="wxpr.dll", _String2=".") returned 1 [0206.890] wcscmp (_String1="wxpr.dll", _String2="..") returned 1 [0206.890] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5346a00, ftCreationTime.dwHighDateTime=0x1bdfffe, ftLastAccessTime.dwLowDateTime=0x5c6e8470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5346a00, ftLastWriteTime.dwHighDateTime=0x1bdfffe, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1 [0206.890] wcscmp (_String1="WZCNFLCT.CHM", _String2=".") returned 1 [0206.890] wcscmp (_String1="WZCNFLCT.CHM", _String2="..") returned 1 [0206.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d6f0 [0206.890] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.890] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.890] wcscat (in: _Dest=0x682d6f0, _Source="WZCNFLCT.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" [0206.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0206.891] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1 [0206.891] wcscmp (_String1="XFUNC.VSL", _String2=".") returned 1 [0206.891] wcscmp (_String1="XFUNC.VSL", _String2="..") returned 1 [0206.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bdb8 [0206.892] wcscpy (in: _Dest=0x674bdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.892] wcscat (in: _Dest=0x674bdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.892] wcscat (in: _Dest=0x674bdb8, _Source="XFUNC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" [0206.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0206.892] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="XLATE_~1.XSN")) returned 1 [0206.892] wcscmp (_String1="Xlate_Complete.xsn", _String2=".") returned 1 [0206.893] wcscmp (_String1="Xlate_Complete.xsn", _String2="..") returned 1 [0206.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db988 [0206.893] wcscpy (in: _Dest=0x66db988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.893] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.893] wcscat (in: _Dest=0x66db988, _Source="Xlate_Complete.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" [0206.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0206.893] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="XLATE_~2.XSN")) returned 1 [0206.894] wcscmp (_String1="Xlate_Init.xsn", _String2=".") returned 1 [0206.894] wcscmp (_String1="Xlate_Init.xsn", _String2="..") returned 1 [0206.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d090 [0206.894] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.894] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.894] wcscat (in: _Dest=0x682d090, _Source="Xlate_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" [0206.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0206.895] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df87b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x231980, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1 [0206.895] wcscmp (_String1="XLINTL32.DLL", _String2=".") returned 1 [0206.895] wcscmp (_String1="XLINTL32.DLL", _String2="..") returned 1 [0206.895] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="XLINTL~1.IDX")) returned 1 [0206.895] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0206.895] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0206.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30f30 [0206.895] wcscpy (in: _Dest=0x3e30f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.895] wcscat (in: _Dest=0x3e30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.895] wcscat (in: _Dest=0x3e30f30, _Source="XLINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" [0206.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0206.896] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="XLINTL~2.IDX")) returned 1 [0206.896] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2=".") returned 1 [0206.896] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2="..") returned 1 [0206.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30ba0 [0206.896] wcscpy (in: _Dest=0x3e30ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.896] wcscat (in: _Dest=0x3e30ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.896] wcscat (in: _Dest=0x3e30ba0, _Source="XLINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" [0206.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0206.897] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1 [0206.897] wcscmp (_String1="XLLEX.DLL", _String2=".") returned 1 [0206.897] wcscmp (_String1="XLLEX.DLL", _String2="..") returned 1 [0206.897] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e4500, ftCreationTime.dwHighDateTime=0x1c30db2, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x433e4500, ftLastWriteTime.dwHighDateTime=0x1c30db2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1 [0206.897] wcscmp (_String1="XLMACRO.CHM", _String2=".") returned 1 [0206.897] wcscmp (_String1="XLMACRO.CHM", _String2="..") returned 1 [0206.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b6b8 [0206.897] wcscpy (in: _Dest=0x674b6b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.897] wcscat (in: _Dest=0x674b6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.897] wcscat (in: _Dest=0x674b6b8, _Source="XLMACRO.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" [0206.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0206.898] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x430e8bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x24780, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1 [0206.898] wcscmp (_String1="XLSLICER.DLL", _String2=".") returned 1 [0206.898] wcscmp (_String1="XLSLICER.DLL", _String2="..") returned 1 [0206.898] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b1dc00, ftCreationTime.dwHighDateTime=0x1cac25c, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b1dc00, ftLastWriteTime.dwHighDateTime=0x1cac25c, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="XLSLIC~1.IDX")) returned 1 [0206.898] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2=".") returned 1 [0206.898] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2="..") returned 1 [0206.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30e98 [0206.898] wcscpy (in: _Dest=0x3e30e98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.898] wcscat (in: _Dest=0x3e30e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.898] wcscat (in: _Dest=0x3e30e98, _Source="XLSLICER.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" [0206.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0206.899] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1 [0206.903] wcscmp (_String1="XMLSDK5.CHM", _String2=".") returned 1 [0206.903] wcscmp (_String1="XMLSDK5.CHM", _String2="..") returned 1 [0206.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c8b8 [0206.903] wcscpy (in: _Dest=0x674c8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0206.903] wcscat (in: _Dest=0x674c8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0206.903] wcscat (in: _Dest=0x674c8b8, _Source="XMLSDK5.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" [0206.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0206.904] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66ca478 | out: lpFindFileData=0x66ca478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0 [0207.238] FindClose (in: hFindFile=0x3e80038 | out: hFindFile=0x3e80038) returned 1 [0212.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca478) returned 1 [0212.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e58e8) returned 1 [0212.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b9d8) returned 1 Thread: id = 693 os_tid = 0x100c [0138.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5958 [0138.983] wcscpy (in: _Dest=0x66e5958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0138.983] wcscat (in: _Dest=0x66e5958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0138.983] wcscat (in: _Dest=0x66e5958, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*" [0138.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0138.983] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0144.241] wcscmp (_String1=".", _String2=".") returned 0 [0144.241] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.241] wcscmp (_String1="..", _String2=".") returned 1 [0144.241] wcscmp (_String1="..", _String2="..") returned 0 [0144.241] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0144.241] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0144.241] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0144.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ae80 [0144.242] wcscpy (in: _Dest=0x3f1ae80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0144.242] wcscat (in: _Dest=0x3f1ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0144.242] wcscat (in: _Dest=0x3f1ae80, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" [0146.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0146.085] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0146.085] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0146.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0146.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5958) returned 1 [0146.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd580) returned 1 Thread: id = 694 os_tid = 0x1010 [0138.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5b18 [0138.985] wcscpy (in: _Dest=0x66e5b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0138.985] wcscat (in: _Dest=0x66e5b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0138.985] wcscat (in: _Dest=0x66e5b18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*" [0138.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0138.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0144.242] wcscmp (_String1=".", _String2=".") returned 0 [0144.242] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.242] wcscmp (_String1="..", _String2=".") returned 1 [0144.242] wcscmp (_String1="..", _String2="..") returned 0 [0144.242] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0144.243] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0144.243] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0144.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0144.243] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0144.243] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0144.243] wcscat (in: _Dest=0x3f1afe8, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" [0146.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0146.088] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0146.089] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0146.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0146.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b18) returned 1 [0146.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 Thread: id = 695 os_tid = 0x1014 [0138.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b150 [0138.986] wcscpy (in: _Dest=0x3f1b150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0138.986] wcscat (in: _Dest=0x3f1b150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0138.986] wcscat (in: _Dest=0x3f1b150, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*" [0138.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0138.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0141.705] wcscmp (_String1=".", _String2=".") returned 0 [0141.705] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.705] wcscmp (_String1="..", _String2=".") returned 1 [0141.705] wcscmp (_String1="..", _String2="..") returned 0 [0141.705] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d93600, ftCreationTime.dwHighDateTime=0x1c90e05, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85d93600, ftLastWriteTime.dwHighDateTime=0x1c90e05, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0141.705] wcscmp (_String1="CLNTWRAP.HTM", _String2=".") returned 1 [0141.705] wcscmp (_String1="CLNTWRAP.HTM", _String2="..") returned 1 [0141.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd008 [0141.706] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0141.706] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0141.706] wcscat (in: _Dest=0x66dd008, _Source="CLNTWRAP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" [0153.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0153.482] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387b000, ftCreationTime.dwHighDateTime=0x1ca107c, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3387b000, ftLastWriteTime.dwHighDateTime=0x1ca107c, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0153.482] wcscmp (_String1="RPT2HTM4.XSL", _String2=".") returned 1 [0153.482] wcscmp (_String1="RPT2HTM4.XSL", _String2="..") returned 1 [0153.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcc18 [0153.482] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0153.482] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0153.482] wcscat (in: _Dest=0x66dcc18, _Source="RPT2HTM4.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" [0153.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0153.483] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0153.483] wcscmp (_String1="SERVWRAP.ASP", _String2=".") returned 1 [0153.484] wcscmp (_String1="SERVWRAP.ASP", _String2="..") returned 1 [0153.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d5f8 [0153.484] wcscpy (in: _Dest=0x674d5f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0153.484] wcscat (in: _Dest=0x674d5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0153.484] wcscat (in: _Dest=0x674d5f8, _Source="SERVWRAP.ASP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" [0153.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0153.485] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0153.485] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0153.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0153.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0153.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 696 os_tid = 0x1018 [0138.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e59c8 [0138.987] wcscpy (in: _Dest=0x66e59c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0138.987] wcscat (in: _Dest=0x66e59c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0138.987] wcscat (in: _Dest=0x66e59c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*" [0138.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0138.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0143.777] wcscmp (_String1=".", _String2=".") returned 0 [0143.777] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.777] wcscmp (_String1="..", _String2=".") returned 1 [0143.777] wcscmp (_String1="..", _String2="..") returned 0 [0143.777] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x856d15d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1 [0143.777] wcscmp (_String1="ACWZDAT12.ACCDU", _String2=".") returned 1 [0143.778] wcscmp (_String1="ACWZDAT12.ACCDU", _String2="..") returned 1 [0143.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc5e8 [0143.778] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0143.778] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0143.778] wcscat (in: _Dest=0x66dc5e8, _Source="ACWZDAT12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" [0144.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0144.503] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x856f7730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1 [0144.503] wcscmp (_String1="ACWZLIB.ACCDE", _String2=".") returned 1 [0144.503] wcscmp (_String1="ACWZLIB.ACCDE", _String2="..") returned 1 [0144.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0144.503] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0144.503] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0144.503] wcscat (in: _Dest=0x66f00c0, _Source="ACWZLIB.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" [0144.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0144.505] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x7e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1 [0144.505] wcscmp (_String1="ACWZMAIN.ACCDE", _String2=".") returned 1 [0144.505] wcscmp (_String1="ACWZMAIN.ACCDE", _String2="..") returned 1 [0144.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x354fc0 [0144.505] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0144.505] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0144.505] wcscat (in: _Dest=0x354fc0, _Source="ACWZMAIN.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" [0144.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0144.506] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x964000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1 [0144.506] wcscmp (_String1="ACWZTOOL.ACCDE", _String2=".") returned 1 [0144.506] wcscmp (_String1="ACWZTOOL.ACCDE", _String2="..") returned 1 [0144.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355050 [0144.506] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0144.506] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0144.506] wcscat (in: _Dest=0x355050, _Source="ACWZTOOL.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" [0144.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0144.507] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1 [0144.507] wcscmp (_String1="ACWZUSR12.ACCDU", _String2=".") returned 1 [0144.507] wcscmp (_String1="ACWZUSR12.ACCDU", _String2="..") returned 1 [0144.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x356370 [0144.507] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0144.507] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0144.507] wcscat (in: _Dest=0x356370, _Source="ACWZUSR12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" [0144.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0144.508] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1 [0144.509] wcscmp (_String1="UTILITY.ACCDA", _String2=".") returned 1 [0144.509] wcscmp (_String1="UTILITY.ACCDA", _String2="..") returned 1 [0144.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efa60 [0144.509] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0144.509] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0144.509] wcscat (in: _Dest=0x66efa60, _Source="UTILITY.ACCDA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" [0144.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0144.510] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0 [0144.510] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0144.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0144.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e59c8) returned 1 [0144.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 Thread: id = 697 os_tid = 0x101c [0138.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5b88 [0138.988] wcscpy (in: _Dest=0x66e5b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0138.988] wcscat (in: _Dest=0x66e5b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0138.988] wcscat (in: _Dest=0x66e5b88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*" [0138.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3a20 [0138.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0145.026] wcscmp (_String1=".", _String2=".") returned 0 [0145.026] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.026] wcscmp (_String1="..", _String2=".") returned 1 [0145.026] wcscmp (_String1="..", _String2="..") returned 0 [0145.026] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x16d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0145.026] wcscmp (_String1="ACCOLK.DLL", _String2=".") returned 1 [0145.026] wcscmp (_String1="ACCOLK.DLL", _String2="..") returned 1 [0145.026] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x25380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0145.026] wcscmp (_String1="BCSAddin.dll", _String2=".") returned 1 [0145.026] wcscmp (_String1="BCSAddin.dll", _String2="..") returned 1 [0145.026] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28734900, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28734900, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0145.026] wcscmp (_String1="ColleagueImport.dll", _String2=".") returned 1 [0145.026] wcscmp (_String1="ColleagueImport.dll", _String2="..") returned 1 [0145.026] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a73100, ftCreationTime.dwHighDateTime=0x1bdbc83, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a73100, ftLastWriteTime.dwHighDateTime=0x1bdbc83, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0145.026] wcscmp (_String1="FAXEXT.ECF", _String2=".") returned 1 [0145.026] wcscmp (_String1="FAXEXT.ECF", _String2="..") returned 1 [0145.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59510 [0145.026] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0145.026] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0145.026] wcscat (in: _Dest=0x3d59510, _Source="FAXEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" [0153.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0153.167] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69984400, ftCreationTime.dwHighDateTime=0x1c52bc7, ftLastAccessTime.dwLowDateTime=0x77b609b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69984400, ftLastWriteTime.dwHighDateTime=0x1c52bc7, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0153.168] wcscmp (_String1="MSOSEC.DLL", _String2=".") returned 1 [0153.168] wcscmp (_String1="MSOSEC.DLL", _String2="..") returned 1 [0153.168] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2c7900, ftCreationTime.dwHighDateTime=0x1c51fe0, ftLastAccessTime.dwLowDateTime=0x881d0330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d2c7900, ftLastWriteTime.dwHighDateTime=0x1c51fe0, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0153.168] wcscmp (_String1="MSOSEC.XML", _String2=".") returned 1 [0153.168] wcscmp (_String1="MSOSEC.XML", _String2="..") returned 1 [0153.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a368 [0153.168] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0153.168] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0153.168] wcscat (in: _Dest=0x3d5a368, _Source="MSOSEC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" [0153.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0153.169] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711f5100, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x711f5100, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0153.170] wcscmp (_String1="MSSPC.ECF", _String2=".") returned 1 [0153.170] wcscmp (_String1="MSSPC.ECF", _String2="..") returned 1 [0153.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674acb8 [0153.170] wcscpy (in: _Dest=0x674acb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0153.170] wcscat (in: _Dest=0x674acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0153.170] wcscat (in: _Dest=0x674acb8, _Source="MSSPC.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" [0153.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674acb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0153.171] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde238e00, ftCreationTime.dwHighDateTime=0x1c51fde, ftLastAccessTime.dwLowDateTime=0x77bd2dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde238e00, ftLastWriteTime.dwHighDateTime=0x1c51fde, nFileSizeHigh=0x0, nFileSizeLow=0x54000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR71.DLL", cAlternateFileName="")) returned 1 [0153.171] wcscmp (_String1="MSVCR71.DLL", _String2=".") returned 1 [0153.171] wcscmp (_String1="MSVCR71.DLL", _String2="..") returned 1 [0153.171] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb2dd00, ftCreationTime.dwHighDateTime=0x1c52bc0, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdb2dd00, ftLastWriteTime.dwHighDateTime=0x1c52bc0, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTKLOADR.DLL", cAlternateFileName="")) returned 1 [0153.171] wcscmp (_String1="OTKLOADR.DLL", _String2=".") returned 1 [0153.172] wcscmp (_String1="OTKLOADR.DLL", _String2="..") returned 1 [0153.172] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5cc500, ftCreationTime.dwHighDateTime=0x1c859e3, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe5cc500, ftLastWriteTime.dwHighDateTime=0x1c859e3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0153.172] wcscmp (_String1="OUTEX.ECF", _String2=".") returned 1 [0153.172] wcscmp (_String1="OUTEX.ECF", _String2="..") returned 1 [0153.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674ad38 [0153.172] wcscpy (in: _Dest=0x674ad38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0153.172] wcscat (in: _Dest=0x674ad38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0153.172] wcscat (in: _Dest=0x674ad38, _Source="OUTEX.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" [0153.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ad38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0153.173] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583d300, ftCreationTime.dwHighDateTime=0x1c859e4, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x583d300, ftLastWriteTime.dwHighDateTime=0x1c859e4, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0153.174] wcscmp (_String1="OUTEX2.ECF", _String2=".") returned 1 [0153.174] wcscmp (_String1="OUTEX2.ECF", _String2="..") returned 1 [0153.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d585a8 [0153.174] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0153.174] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0153.174] wcscat (in: _Dest=0x3d585a8, _Source="OUTEX2.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" [0153.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0153.175] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xe578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0153.175] wcscmp (_String1="OUTLVBA.DLL", _String2=".") returned 1 [0153.175] wcscmp (_String1="OUTLVBA.DLL", _String2="..") returned 1 [0153.175] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a280200, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a280200, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0153.175] wcscmp (_String1="PMAILEXT.ECF", _String2=".") returned 1 [0153.175] wcscmp (_String1="PMAILEXT.ECF", _String2="..") returned 1 [0153.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26e10 [0153.175] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0153.175] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0153.176] wcscat (in: _Dest=0x3f26e10, _Source="PMAILEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" [0153.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0153.177] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0153.177] wcscmp (_String1="UmOutlookAddin.dll", _String2=".") returned 1 [0153.177] wcscmp (_String1="UmOutlookAddin.dll", _String2="..") returned 1 [0153.177] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0 [0153.177] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0153.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a20) returned 1 [0153.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b88) returned 1 [0153.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 698 os_tid = 0x1020 [0138.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic")) returned 0x20 [0141.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0141.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.178] GetLastError () returned 0x5 [0144.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0144.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 699 os_tid = 0x1024 [0138.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic")) returned 0x20 [0144.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0144.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.181] GetLastError () returned 0x5 [0144.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0144.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a9d0) returned 1 Thread: id = 700 os_tid = 0x1028 [0138.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic")) returned 0x20 [0144.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0144.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.240] GetLastError () returned 0x5 [0144.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0144.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 Thread: id = 701 os_tid = 0x102c [0138.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng")) returned 0x20 [0144.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0144.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.238] GetLastError () returned 0x5 [0144.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0144.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 Thread: id = 702 os_tid = 0x1030 [0138.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man")) returned 0x20 [0144.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0144.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.187] GetLastError () returned 0x5 [0144.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0144.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbaa8) returned 1 Thread: id = 703 os_tid = 0x1034 [0138.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0dc10 [0138.991] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0138.991] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0138.991] wcscat (in: _Dest=0x3e0dc10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*" [0138.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0138.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0138.992] wcscmp (_String1=".", _String2=".") returned 0 [0138.992] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.992] wcscmp (_String1="..", _String2=".") returned 1 [0138.992] wcscmp (_String1="..", _String2="..") returned 0 [0138.992] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1 [0138.992] wcscmp (_String1="CSharp", _String2=".") returned 1 [0138.992] wcscmp (_String1="CSharp", _String2="..") returned 1 [0138.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c6e8 [0138.992] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0138.992] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0138.992] wcscat (in: _Dest=0x35c6e8, _Source="CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0140.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0140.286] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 1 [0140.286] wcscmp (_String1="VisualBasic", _String2=".") returned 1 [0140.286] wcscmp (_String1="VisualBasic", _String2="..") returned 1 [0140.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0140.286] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0140.286] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0140.286] wcscat (in: _Dest=0x2ff63a8, _Source="VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0140.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0140.287] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0 [0140.288] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0140.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0140.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 [0140.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 704 os_tid = 0x1038 [0138.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man")) returned 0x20 [0144.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0144.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.186] GetLastError () returned 0x5 [0144.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0144.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 Thread: id = 705 os_tid = 0x103c [0138.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd")) returned 0x20 [0144.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0144.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.185] GetLastError () returned 0x5 [0144.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0144.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 706 os_tid = 0x1040 [0138.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd")) returned 0x20 [0144.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0144.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.180] GetLastError () returned 0x5 [0144.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0144.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db748) returned 1 Thread: id = 707 os_tid = 0x1044 [0138.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e109f0 [0138.994] wcscpy (in: _Dest=0x3e109f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0138.994] wcscat (in: _Dest=0x3e109f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0138.994] wcscat (in: _Dest=0x3e109f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*" [0138.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0060 [0138.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0145.092] wcscmp (_String1=".", _String2=".") returned 0 [0145.092] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.092] wcscmp (_String1="..", _String2=".") returned 1 [0145.092] wcscmp (_String1="..", _String2="..") returned 0 [0145.092] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="AUTHOR~1.XSL")) returned 1 [0145.092] wcscmp (_String1="Author2String.XSL", _String2=".") returned 1 [0145.092] wcscmp (_String1="Author2String.XSL", _String2="..") returned 1 [0145.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ebb0 [0145.093] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0145.093] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0145.093] wcscat (in: _Dest=0x3e0ebb0, _Source="Author2String.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" [0161.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0161.356] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="AUTHOR~2.XSL")) returned 1 [0161.356] wcscmp (_String1="Author2XML.XSL", _String2=".") returned 1 [0161.356] wcscmp (_String1="Author2XML.XSL", _String2="..") returned 1 [0161.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c3968 [0161.356] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0161.357] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0161.357] wcscat (in: _Dest=0x69c3968, _Source="Author2XML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" [0161.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0161.358] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0161.358] wcscmp (_String1="Sort", _String2=".") returned 1 [0161.358] wcscmp (_String1="Sort", _String2="..") returned 1 [0161.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eec90 [0161.358] wcscpy (in: _Dest=0x66eec90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0161.358] wcscat (in: _Dest=0x66eec90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0161.358] wcscat (in: _Dest=0x66eec90, _Source="Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0161.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eec90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0161.360] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0161.360] wcscmp (_String1="Style", _String2=".") returned 1 [0161.360] wcscmp (_String1="Style", _String2="..") returned 1 [0161.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0258 [0161.360] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0161.360] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0161.360] wcscat (in: _Dest=0x66f0258, _Source="Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0161.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0161.362] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0161.362] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0161.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0060) returned 1 [0161.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e109f0) returned 1 [0161.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 Thread: id = 708 os_tid = 0x1048 [0138.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b3a8 [0138.995] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0138.995] wcscat (in: _Dest=0x3f1b3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0138.995] wcscat (in: _Dest=0x3f1b3a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*" [0138.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0138.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0145.075] wcscmp (_String1=".", _String2=".") returned 0 [0145.075] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.075] wcscmp (_String1="..", _String2=".") returned 1 [0145.075] wcscmp (_String1="..", _String2="..") returned 0 [0145.075] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0145.075] wcscmp (_String1="MSART1.BDR", _String2=".") returned 1 [0145.075] wcscmp (_String1="MSART1.BDR", _String2="..") returned 1 [0145.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58630 [0145.075] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0145.075] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0145.075] wcscat (in: _Dest=0x3d58630, _Source="MSART1.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" [0152.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0152.062] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0152.062] wcscmp (_String1="MSART10.BDR", _String2=".") returned 1 [0152.062] wcscmp (_String1="MSART10.BDR", _String2="..") returned 1 [0152.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee960 [0152.062] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.062] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.062] wcscat (in: _Dest=0x66ee960, _Source="MSART10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" [0152.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0152.063] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0152.063] wcscmp (_String1="MSART11.BDR", _String2=".") returned 1 [0152.063] wcscmp (_String1="MSART11.BDR", _String2="..") returned 1 [0152.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef400 [0152.063] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.063] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.063] wcscat (in: _Dest=0x66ef400, _Source="MSART11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" [0152.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0152.064] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0152.065] wcscmp (_String1="MSART12.BDR", _String2=".") returned 1 [0152.065] wcscmp (_String1="MSART12.BDR", _String2="..") returned 1 [0152.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66f0258 [0152.065] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.065] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.065] wcscat (in: _Dest=0x66f0258, _Source="MSART12.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" [0152.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0152.066] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0152.066] wcscmp (_String1="MSART13.BDR", _String2=".") returned 1 [0152.066] wcscmp (_String1="MSART13.BDR", _String2="..") returned 1 [0152.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eeda0 [0152.066] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.066] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.066] wcscat (in: _Dest=0x66eeda0, _Source="MSART13.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" [0152.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0152.067] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0152.067] wcscmp (_String1="MSART14.BDR", _String2=".") returned 1 [0152.067] wcscmp (_String1="MSART14.BDR", _String2="..") returned 1 [0152.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eed18 [0152.067] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.068] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.068] wcscat (in: _Dest=0x66eed18, _Source="MSART14.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" [0152.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0152.069] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0152.069] wcscmp (_String1="MSART15.BDR", _String2=".") returned 1 [0152.069] wcscmp (_String1="MSART15.BDR", _String2="..") returned 1 [0152.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eec08 [0152.069] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.069] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.069] wcscat (in: _Dest=0x66eec08, _Source="MSART15.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" [0152.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0152.070] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0152.070] wcscmp (_String1="MSART2.BDR", _String2=".") returned 1 [0152.070] wcscmp (_String1="MSART2.BDR", _String2="..") returned 1 [0152.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeb80 [0152.070] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.070] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.070] wcscat (in: _Dest=0x66eeb80, _Source="MSART2.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" [0152.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0152.071] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0152.071] wcscmp (_String1="MSART3.BDR", _String2=".") returned 1 [0152.071] wcscmp (_String1="MSART3.BDR", _String2="..") returned 1 [0152.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeaf8 [0152.071] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.071] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.072] wcscat (in: _Dest=0x66eeaf8, _Source="MSART3.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" [0152.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0152.073] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0152.073] wcscmp (_String1="MSART4.BDR", _String2=".") returned 1 [0152.073] wcscmp (_String1="MSART4.BDR", _String2="..") returned 1 [0152.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee850 [0152.073] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.073] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.073] wcscat (in: _Dest=0x66ee850, _Source="MSART4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" [0152.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0152.074] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0152.074] wcscmp (_String1="MSART5.BDR", _String2=".") returned 1 [0152.074] wcscmp (_String1="MSART5.BDR", _String2="..") returned 1 [0152.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef048 [0152.074] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.074] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.074] wcscat (in: _Dest=0x66ef048, _Source="MSART5.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" [0152.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0152.075] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x808b63f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0152.075] wcscmp (_String1="MSART6.BDR", _String2=".") returned 1 [0152.075] wcscmp (_String1="MSART6.BDR", _String2="..") returned 1 [0152.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee498 [0152.075] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.076] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.076] wcscat (in: _Dest=0x66ee498, _Source="MSART6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" [0152.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0152.077] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0152.077] wcscmp (_String1="MSART7.BDR", _String2=".") returned 1 [0152.077] wcscmp (_String1="MSART7.BDR", _String2="..") returned 1 [0152.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef268 [0152.077] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.077] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.077] wcscat (in: _Dest=0x66ef268, _Source="MSART7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" [0152.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0152.079] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0152.079] wcscmp (_String1="MSART8.BDR", _String2=".") returned 1 [0152.079] wcscmp (_String1="MSART8.BDR", _String2="..") returned 1 [0152.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef1e0 [0152.079] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.079] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.079] wcscat (in: _Dest=0x66ef1e0, _Source="MSART8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" [0152.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0152.080] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0152.080] wcscmp (_String1="MSART9.BDR", _String2=".") returned 1 [0152.080] wcscmp (_String1="MSART9.BDR", _String2="..") returned 1 [0152.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef0d0 [0152.080] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0152.080] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0152.080] wcscat (in: _Dest=0x66ef0d0, _Source="MSART9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" [0152.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0152.081] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0152.081] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0152.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0152.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0152.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 Thread: id = 709 os_tid = 0x104c [0139.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr")) returned 0x20 [0143.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0143.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.850] GetLastError () returned 0x5 [0143.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0143.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 711 os_tid = 0x1054 [0139.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29aa0 [0139.205] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0139.205] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0139.205] wcscat (in: _Dest=0x3f29aa0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*" [0139.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0139.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0139.670] wcscmp (_String1=".", _String2=".") returned 0 [0139.670] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.670] wcscmp (_String1="..", _String2=".") returned 1 [0139.670] wcscmp (_String1="..", _String2="..") returned 0 [0139.670] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0139.670] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0139.670] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0139.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bea8 [0139.670] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0139.670] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0139.671] wcscat (in: _Dest=0x32bea8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" [0148.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0148.457] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0148.457] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0148.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0148.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 [0148.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5808) returned 1 Thread: id = 712 os_tid = 0x1058 [0139.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc88 [0139.206] wcscpy (in: _Dest=0x3f1dc88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0139.206] wcscat (in: _Dest=0x3f1dc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0139.206] wcscat (in: _Dest=0x3f1dc88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*" [0139.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0139.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e805b8 [0139.206] wcscmp (_String1=".", _String2=".") returned 0 [0139.206] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.206] wcscmp (_String1="..", _String2=".") returned 1 [0139.206] wcscmp (_String1="..", _String2="..") returned 0 [0139.206] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0139.206] wcscmp (_String1="CAGCAT10.MML", _String2=".") returned 1 [0139.206] wcscmp (_String1="CAGCAT10.MML", _String2="..") returned 1 [0139.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc1f8 [0139.206] wcscpy (in: _Dest=0x66dc1f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0139.206] wcscat (in: _Dest=0x66dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0139.206] wcscat (in: _Dest=0x66dc1f8, _Source="CAGCAT10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" [0151.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0151.562] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0151.563] FindClose (in: hFindFile=0x3e805b8 | out: hFindFile=0x3e805b8) returned 1 [0151.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0151.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0151.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 Thread: id = 713 os_tid = 0x105c [0139.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw")) returned 0x20 [0143.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0143.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.786] GetLastError () returned 0x5 [0143.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0143.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 714 os_tid = 0x1060 [0139.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav")) returned 0x20 [0143.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0143.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.433] GetLastError () returned 0x5 [0143.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0143.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 715 os_tid = 0x1064 [0139.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf")) returned 0x20 [0144.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0144.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.288] GetLastError () returned 0x5 [0144.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0144.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 716 os_tid = 0x1068 [0139.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf")) returned 0x20 [0144.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0144.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.287] GetLastError () returned 0x5 [0144.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0144.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 717 os_tid = 0x106c [0139.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf")) returned 0x20 [0144.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0144.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.285] GetLastError () returned 0x5 [0144.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0144.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 718 os_tid = 0x1070 [0139.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf")) returned 0x20 [0144.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0144.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.259] GetLastError () returned 0x5 [0144.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0144.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 719 os_tid = 0x1074 [0139.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf")) returned 0x20 [0144.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0144.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.253] GetLastError () returned 0x5 [0144.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0144.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 Thread: id = 720 os_tid = 0x1078 [0139.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf")) returned 0x20 [0144.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0144.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.105] GetLastError () returned 0x5 [0144.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0144.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f01d0) returned 1 Thread: id = 721 os_tid = 0x107c [0139.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf")) returned 0x20 [0144.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0144.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.104] GetLastError () returned 0x5 [0144.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0144.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f02e0) returned 1 Thread: id = 722 os_tid = 0x1080 [0139.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf")) returned 0x20 [0144.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0144.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.292] GetLastError () returned 0x5 [0144.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0144.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 723 os_tid = 0x1084 [0139.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf")) returned 0x20 [0144.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0144.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.290] GetLastError () returned 0x5 [0144.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0144.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 724 os_tid = 0x1088 [0139.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf")) returned 0x20 [0144.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0144.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.103] GetLastError () returned 0x5 [0144.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0144.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 725 os_tid = 0x108c [0139.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf")) returned 0x20 [0144.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0144.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.101] GetLastError () returned 0x5 [0144.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0144.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099c68) returned 1 Thread: id = 726 os_tid = 0x1090 [0139.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf")) returned 0x20 [0144.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0144.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.254] GetLastError () returned 0x5 [0144.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0144.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a570) returned 1 Thread: id = 727 os_tid = 0x1094 [0139.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf")) returned 0x20 [0142.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0142.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.250] GetLastError () returned 0x5 [0144.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0144.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099ad0) returned 1 Thread: id = 728 os_tid = 0x1098 [0139.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf")) returned 0x20 [0144.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0144.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.100] GetLastError () returned 0x5 [0144.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0144.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099e00) returned 1 Thread: id = 729 os_tid = 0x109c [0139.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf")) returned 0x20 [0144.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0144.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.331] GetLastError () returned 0x5 [0144.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0144.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 730 os_tid = 0x10a0 [0139.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6968 [0139.672] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0139.672] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0139.672] wcscat (in: _Dest=0x2ff6968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0139.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0139.672] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0139.673] wcscmp (_String1=".", _String2=".") returned 0 [0139.673] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.673] wcscmp (_String1="..", _String2=".") returned 1 [0139.673] wcscmp (_String1="..", _String2="..") returned 0 [0139.673] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.673] wcscmp (_String1="Patch", _String2=".") returned 1 [0139.673] wcscmp (_String1="Patch", _String2="..") returned 1 [0139.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332da8 [0139.673] wcscpy (in: _Dest=0x332da8, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0139.673] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0139.673] wcscat (in: _Dest=0x332da8, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0141.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0141.155] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0141.155] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0141.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0141.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 [0141.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 731 os_tid = 0x10a4 [0139.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dde5c8 [0139.674] wcscpy (in: _Dest=0x3dde5c8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0139.674] wcscat (in: _Dest=0x3dde5c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0139.674] wcscat (in: _Dest=0x3dde5c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0139.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0139.674] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0140.224] wcscmp (_String1=".", _String2=".") returned 0 [0140.224] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.224] wcscmp (_String1="..", _String2=".") returned 1 [0140.224] wcscmp (_String1="..", _String2="..") returned 0 [0140.224] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.224] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0140.224] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0140.224] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.224] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0140.224] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0140.224] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.224] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0140.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0140.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde5c8) returned 1 [0140.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf6a8) returned 1 Thread: id = 732 os_tid = 0x10a8 [0139.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0139.675] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0139.675] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0139.675] wcscat (in: _Dest=0x2ff6db8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0139.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0139.675] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0139.675] wcscmp (_String1=".", _String2=".") returned 0 [0139.675] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.676] wcscmp (_String1="..", _String2=".") returned 1 [0139.676] wcscmp (_String1="..", _String2="..") returned 0 [0139.676] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.676] wcscmp (_String1="Patch", _String2=".") returned 1 [0139.676] wcscmp (_String1="Patch", _String2="..") returned 1 [0139.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3330a8 [0139.676] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0139.676] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0139.676] wcscat (in: _Dest=0x3330a8, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0141.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0141.158] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0141.158] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0141.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0141.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0141.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 733 os_tid = 0x10ac [0139.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3def6a8 [0139.677] wcscpy (in: _Dest=0x3def6a8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0139.677] wcscat (in: _Dest=0x3def6a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0139.677] wcscat (in: _Dest=0x3def6a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0139.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0139.677] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0139.677] wcscmp (_String1=".", _String2=".") returned 0 [0139.677] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.677] wcscmp (_String1="..", _String2=".") returned 1 [0139.677] wcscmp (_String1="..", _String2="..") returned 0 [0139.677] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.677] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0139.677] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0139.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea72d8 [0139.678] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0139.678] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0139.678] wcscat (in: _Dest=0x3ea72d8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0141.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0141.161] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.161] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0141.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0141.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def6a8) returned 1 [0141.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 734 os_tid = 0x10b0 [0139.678] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0140.227] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0140.227] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.228] GetLastError () returned 0x5 [0140.228] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0140.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 735 os_tid = 0x10b4 [0139.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def068 [0139.679] wcscpy (in: _Dest=0x3def068, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0139.679] wcscat (in: _Dest=0x3def068, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0139.679] wcscat (in: _Dest=0x3def068, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0139.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0139.679] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0139.679] wcscmp (_String1=".", _String2=".") returned 0 [0139.680] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.680] wcscmp (_String1="..", _String2=".") returned 1 [0139.680] wcscmp (_String1="..", _String2="..") returned 0 [0139.680] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.680] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0139.680] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0139.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea81d8 [0139.680] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0139.680] wcscat (in: _Dest=0x3ea81d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0139.680] wcscat (in: _Dest=0x3ea81d8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0141.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea81d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0141.164] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.164] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0141.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0141.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def068) returned 1 [0141.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def2c0) returned 1 Thread: id = 736 os_tid = 0x10b8 [0139.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defa90 [0139.687] wcscpy (in: _Dest=0x3defa90, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0139.687] wcscat (in: _Dest=0x3defa90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0139.687] wcscat (in: _Dest=0x3defa90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0139.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0139.687] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0140.570] wcscmp (_String1=".", _String2=".") returned 0 [0140.570] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.570] wcscmp (_String1="..", _String2=".") returned 1 [0140.571] wcscmp (_String1="..", _String2="..") returned 0 [0140.571] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.571] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0140.571] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0140.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dad560 [0140.571] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0140.571] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0140.571] wcscat (in: _Dest=0x3dad560, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0146.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0146.273] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0146.274] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0146.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0146.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defa90) returned 1 [0146.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def900) returned 1 Thread: id = 737 os_tid = 0x10bc [0139.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3defb58 [0139.688] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0139.689] wcscat (in: _Dest=0x3defb58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0139.689] wcscat (in: _Dest=0x3defb58, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0139.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0139.689] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0139.690] wcscmp (_String1=".", _String2=".") returned 0 [0139.690] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.690] wcscmp (_String1="..", _String2=".") returned 1 [0139.690] wcscmp (_String1="..", _String2="..") returned 0 [0139.690] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.690] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0139.690] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0139.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea80e8 [0139.690] wcscpy (in: _Dest=0x3ea80e8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0139.690] wcscat (in: _Dest=0x3ea80e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0139.690] wcscat (in: _Dest=0x3ea80e8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0141.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea80e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0141.166] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.166] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0141.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0141.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 [0141.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 738 os_tid = 0x10c0 [0139.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3defce8 [0139.692] wcscpy (in: _Dest=0x3defce8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0139.692] wcscat (in: _Dest=0x3defce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0139.692] wcscat (in: _Dest=0x3defce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0139.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0139.692] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0139.692] wcscmp (_String1=".", _String2=".") returned 0 [0139.692] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.692] wcscmp (_String1="..", _String2=".") returned 1 [0139.692] wcscmp (_String1="..", _String2="..") returned 0 [0139.692] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.692] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0139.692] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0139.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea82c8 [0139.692] wcscpy (in: _Dest=0x3ea82c8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0139.692] wcscat (in: _Dest=0x3ea82c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0139.693] wcscat (in: _Dest=0x3ea82c8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0141.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea82c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0141.168] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.169] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0141.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0141.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defce8) returned 1 [0141.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 739 os_tid = 0x10c4 [0139.693] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0139.694] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0139.695] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.695] GetLastError () returned 0x5 [0139.695] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0139.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 Thread: id = 740 os_tid = 0x10c8 [0139.696] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0140.230] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0140.230] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.230] GetLastError () returned 0x5 [0140.230] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0140.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 741 os_tid = 0x10cc [0139.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3defe78 [0139.697] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0139.698] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0139.698] wcscat (in: _Dest=0x3defe78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0139.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0139.698] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0139.698] wcscmp (_String1=".", _String2=".") returned 0 [0139.698] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.698] wcscmp (_String1="..", _String2=".") returned 1 [0139.698] wcscmp (_String1="..", _String2="..") returned 0 [0139.698] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.698] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0139.698] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0139.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea83b8 [0139.699] wcscpy (in: _Dest=0x3ea83b8, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0139.699] wcscat (in: _Dest=0x3ea83b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0139.699] wcscat (in: _Dest=0x3ea83b8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0141.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea83b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0141.171] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0141.171] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0141.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0141.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 [0141.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 742 os_tid = 0x10d0 [0139.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7d88 [0139.699] wcscpy (in: _Dest=0x3ef7d88, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0139.699] wcscat (in: _Dest=0x3ef7d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0139.699] wcscat (in: _Dest=0x3ef7d88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*" [0139.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0139.699] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0139.700] wcscmp (_String1=".", _String2=".") returned 0 [0139.700] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.700] wcscmp (_String1="..", _String2=".") returned 1 [0139.700] wcscmp (_String1="..", _String2="..") returned 0 [0139.700] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0139.700] wcscmp (_String1="Replicate", _String2=".") returned 1 [0139.700] wcscmp (_String1="Replicate", _String2="..") returned 1 [0139.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd378 [0139.700] wcscpy (in: _Dest=0x66cd378, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0139.700] wcscat (in: _Dest=0x66cd378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0139.700] wcscat (in: _Dest=0x66cd378, _Source="Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0141.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66cd378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0141.173] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0141.173] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0141.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0141.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d88) returned 1 [0141.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7440) returned 1 Thread: id = 743 os_tid = 0x10d4 [0139.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0139.701] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0139.701] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0139.701] wcscat (in: _Dest=0x2fe6c08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*" [0139.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0139.701] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0139.701] wcscmp (_String1=".", _String2=".") returned 0 [0139.701] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.701] wcscmp (_String1="..", _String2=".") returned 1 [0139.701] wcscmp (_String1="..", _String2="..") returned 0 [0139.701] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0139.701] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0139.701] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0139.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d7d8 [0139.702] wcscpy (in: _Dest=0x3f1d7d8, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0139.702] wcscat (in: _Dest=0x3f1d7d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0139.702] wcscat (in: _Dest=0x3f1d7d8, _Source="jaureglist.xml" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" [0141.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0141.175] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0141.175] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0141.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0141.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0141.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7180) returned 1 Thread: id = 744 os_tid = 0x10d8 [0139.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5d48 [0139.702] wcscpy (in: _Dest=0x66e5d48, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0139.702] wcscat (in: _Dest=0x66e5d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0139.702] wcscat (in: _Dest=0x66e5d48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0139.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0139.702] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0140.232] wcscmp (_String1=".", _String2=".") returned 0 [0140.232] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.462] wcscmp (_String1="..", _String2=".") returned 1 [0141.462] wcscmp (_String1="..", _String2="..") returned 0 [0141.462] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0141.463] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0141.463] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0141.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0141.464] wcscpy (in: _Dest=0x32cf48, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0141.464] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0141.464] wcscat (in: _Dest=0x32cf48, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0142.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0142.775] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0142.776] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0142.776] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0142.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d370 [0142.776] wcscpy (in: _Dest=0x32d370, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.776] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.776] wcscat (in: _Dest=0x32d370, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0142.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0142.777] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0142.777] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0142.777] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0142.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0142.777] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.777] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.777] wcscat (in: _Dest=0x3e322c8, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0142.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0142.778] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0142.778] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0142.778] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0142.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0142.779] wcscpy (in: _Dest=0x66dc288, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.779] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.779] wcscat (in: _Dest=0x66dc288, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0142.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0142.780] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0142.780] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0142.780] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0142.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30e00 [0142.780] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.780] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.780] wcscat (in: _Dest=0x3e30e00, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0142.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0142.782] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0142.783] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0142.783] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0142.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0142.783] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.783] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.783] wcscat (in: _Dest=0x66dcd38, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0142.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0142.784] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0142.784] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0142.784] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0142.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32068 [0142.784] wcscpy (in: _Dest=0x3e32068, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.785] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.785] wcscat (in: _Dest=0x3e32068, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0142.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0142.786] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0142.786] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0142.786] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0142.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbe08 [0142.786] wcscpy (in: _Dest=0x66dbe08, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.786] wcscat (in: _Dest=0x66dbe08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.786] wcscat (in: _Dest=0x66dbe08, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0142.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0142.787] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0142.787] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0142.787] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0142.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0142.787] wcscpy (in: _Dest=0x66db598, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.787] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.788] wcscat (in: _Dest=0x66db598, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0142.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0142.789] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0142.789] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0142.789] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0142.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0142.789] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.789] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.789] wcscat (in: _Dest=0x66dbfb8, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0142.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0142.791] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0142.791] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0142.791] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0142.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31358 [0142.791] wcscpy (in: _Dest=0x3e31358, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.791] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.791] wcscat (in: _Dest=0x3e31358, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0142.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0142.792] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0142.792] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0142.792] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e316e8 [0142.792] wcscpy (in: _Dest=0x3e316e8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.792] wcscat (in: _Dest=0x3e316e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.792] wcscat (in: _Dest=0x3e316e8, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0142.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e316e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0142.794] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0142.794] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0142.794] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0142.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0142.794] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.794] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.794] wcscat (in: _Dest=0x66dcaf8, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0142.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0142.795] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0142.795] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0142.795] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0142.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0142.795] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.795] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.795] wcscat (in: _Dest=0x66dc9d8, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0142.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0142.796] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0142.796] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0142.796] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0142.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc948 [0142.796] wcscpy (in: _Dest=0x66dc948, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.796] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.796] wcscat (in: _Dest=0x66dc948, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0142.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0142.798] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0142.798] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0142.798] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0142.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32198 [0142.798] wcscpy (in: _Dest=0x3e32198, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.798] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.798] wcscat (in: _Dest=0x3e32198, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0142.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0142.799] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0142.799] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0142.799] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0142.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30b08 [0142.800] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.800] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.800] wcscat (in: _Dest=0x3e30b08, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0142.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0142.801] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0142.801] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0142.801] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0142.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32230 [0142.801] wcscpy (in: _Dest=0x3e32230, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.801] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.801] wcscat (in: _Dest=0x3e32230, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0142.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0142.802] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0142.802] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0142.802] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0142.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0142.802] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.802] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.802] wcscat (in: _Dest=0x66dc8b8, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0142.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0142.804] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0142.804] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0142.804] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0142.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc798 [0142.804] wcscpy (in: _Dest=0x66dc798, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.804] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.804] wcscat (in: _Dest=0x66dc798, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0142.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0142.805] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0142.805] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0142.805] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0142.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30648 [0142.805] wcscpy (in: _Dest=0x3e30648, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.805] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.805] wcscat (in: _Dest=0x3e30648, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0142.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0142.807] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0142.807] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0142.807] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0142.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc708 [0142.807] wcscpy (in: _Dest=0x66dc708, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.807] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.807] wcscat (in: _Dest=0x66dc708, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0142.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0142.809] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0142.809] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0142.809] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0142.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc678 [0142.809] wcscpy (in: _Dest=0x66dc678, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0142.809] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0142.809] wcscat (in: _Dest=0x66dc678, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0142.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0143.632] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0143.632] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0143.632] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0143.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc4c8 [0143.632] wcscpy (in: _Dest=0x66dc4c8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0143.632] wcscat (in: _Dest=0x66dc4c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0143.632] wcscat (in: _Dest=0x66dc4c8, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0152.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0152.094] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0152.094] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0152.094] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0152.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958f50 [0152.094] wcscpy (in: _Dest=0x6958f50, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.094] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.094] wcscat (in: _Dest=0x6958f50, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0152.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0152.095] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0152.095] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0152.095] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0152.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958eb8 [0152.095] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.096] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.096] wcscat (in: _Dest=0x6958eb8, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0152.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0152.097] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0152.097] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0152.097] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0152.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958e20 [0152.097] wcscpy (in: _Dest=0x6958e20, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.097] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.097] wcscat (in: _Dest=0x6958e20, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0152.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0152.098] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0152.098] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0152.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0152.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5d48) returned 1 [0152.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e6f0) returned 1 Thread: id = 745 os_tid = 0x10dc [0139.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5a38 [0139.706] wcscpy (in: _Dest=0x66e5a38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0139.706] wcscat (in: _Dest=0x66e5a38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0139.706] wcscat (in: _Dest=0x66e5a38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0139.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0139.706] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0140.621] wcscmp (_String1=".", _String2=".") returned 0 [0140.621] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.671] wcscmp (_String1="..", _String2=".") returned 1 [0140.671] wcscmp (_String1="..", _String2="..") returned 0 [0140.676] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0140.676] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0140.676] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0140.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d5d0 [0140.676] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0140.676] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0140.676] wcscat (in: _Dest=0x32d5d0, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0146.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0146.277] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0146.277] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0146.277] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0146.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cd80 [0146.277] wcscpy (in: _Dest=0x32cd80, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.277] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.277] wcscat (in: _Dest=0x32cd80, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0146.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0146.279] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0146.279] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0146.279] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0146.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0146.279] wcscpy (in: _Dest=0x32d700, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.279] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.279] wcscat (in: _Dest=0x32d700, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0146.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0146.281] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0146.281] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0146.281] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0146.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcaf8 [0146.281] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.281] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.281] wcscat (in: _Dest=0x66dcaf8, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0146.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0146.286] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0146.286] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0146.286] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0146.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0146.286] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.286] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.286] wcscat (in: _Dest=0x32c660, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0146.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0146.287] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0146.288] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0146.288] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0146.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0146.288] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.288] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.288] wcscat (in: _Dest=0x66dc9d8, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0146.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0146.289] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0146.289] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0146.289] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0146.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bce0 [0146.289] wcscpy (in: _Dest=0x32bce0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.289] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.289] wcscat (in: _Dest=0x32bce0, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0146.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0146.320] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0146.320] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0146.320] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0146.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcc18 [0146.320] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.320] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.321] wcscat (in: _Dest=0x66dcc18, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0146.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0146.924] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0146.924] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0146.924] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0146.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x354f30 [0146.924] wcscpy (in: _Dest=0x354f30, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.924] wcscat (in: _Dest=0x354f30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.924] wcscat (in: _Dest=0x354f30, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0146.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0146.926] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0146.926] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0146.926] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0146.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355050 [0146.926] wcscpy (in: _Dest=0x355050, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.926] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.926] wcscat (in: _Dest=0x355050, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0146.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0146.928] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0146.928] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0146.928] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0146.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d2d8 [0146.928] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.928] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.928] wcscat (in: _Dest=0x32d2d8, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0146.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0146.929] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0146.929] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0146.929] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0146.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0146.930] wcscpy (in: _Dest=0x32d700, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.930] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.930] wcscat (in: _Dest=0x32d700, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0146.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0146.931] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0146.931] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0146.931] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0146.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354fc0 [0146.931] wcscpy (in: _Dest=0x354fc0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.931] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.931] wcscat (in: _Dest=0x354fc0, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0146.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0146.932] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0146.932] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0146.932] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0146.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3555f0 [0146.933] wcscpy (in: _Dest=0x3555f0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.933] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.933] wcscat (in: _Dest=0x3555f0, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0146.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0146.934] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0146.934] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0146.934] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0146.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0146.934] wcscpy (in: _Dest=0x354ab0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.934] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.934] wcscat (in: _Dest=0x354ab0, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0146.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0146.935] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0146.935] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0146.935] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0146.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cd80 [0146.935] wcscpy (in: _Dest=0x32cd80, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.935] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.935] wcscat (in: _Dest=0x32cd80, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0146.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0146.936] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0146.937] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0146.937] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0146.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0146.937] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.937] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.937] wcscat (in: _Dest=0x32d5d0, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0146.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0146.938] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0146.938] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0146.938] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0146.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958668 [0146.938] wcscpy (in: _Dest=0x6958668, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.938] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.938] wcscat (in: _Dest=0x6958668, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0146.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0146.939] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0146.939] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0146.939] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0146.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0146.939] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.939] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.940] wcscat (in: _Dest=0x66dc8b8, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0146.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0146.941] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0146.941] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0146.941] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0146.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dca68 [0146.941] wcscpy (in: _Dest=0x66dca68, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.941] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.941] wcscat (in: _Dest=0x66dca68, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0146.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0146.943] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0146.943] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0146.943] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0146.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958700 [0146.943] wcscpy (in: _Dest=0x6958700, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.943] wcscat (in: _Dest=0x6958700, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.943] wcscat (in: _Dest=0x6958700, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0146.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0146.944] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0146.944] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0146.944] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0146.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db598 [0146.944] wcscpy (in: _Dest=0x66db598, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.944] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.945] wcscat (in: _Dest=0x66db598, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0146.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0146.946] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0146.946] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0146.946] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0146.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbe08 [0146.946] wcscpy (in: _Dest=0x66dbe08, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.946] wcscat (in: _Dest=0x66dbe08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.946] wcscat (in: _Dest=0x66dbe08, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0146.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0146.947] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0146.947] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0146.947] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0146.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0146.947] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.947] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.947] wcscat (in: _Dest=0x66dcd38, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0146.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0146.954] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0146.954] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0146.954] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0146.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958798 [0146.954] wcscpy (in: _Dest=0x6958798, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.954] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.955] wcscat (in: _Dest=0x6958798, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0146.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0146.956] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0146.956] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0146.956] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0146.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958830 [0146.956] wcscpy (in: _Dest=0x6958830, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.956] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.956] wcscat (in: _Dest=0x6958830, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0146.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0146.957] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0146.957] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0146.957] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0146.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69588c8 [0146.957] wcscpy (in: _Dest=0x69588c8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0146.957] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0146.957] wcscat (in: _Dest=0x69588c8, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0146.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0146.958] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0148.125] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0148.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0148.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a38) returned 1 [0148.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd788) returned 1 Thread: id = 746 os_tid = 0x10e0 [0139.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x66cd7f0 [0139.707] wcscpy (in: _Dest=0x66cd7f0, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0139.707] wcscat (in: _Dest=0x66cd7f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0139.707] wcscat (in: _Dest=0x66cd7f0, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0139.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0139.707] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0139.708] wcscmp (_String1=".", _String2=".") returned 0 [0139.708] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.708] wcscmp (_String1="..", _String2=".") returned 1 [0139.708] wcscmp (_String1="..", _String2="..") returned 0 [0139.709] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0139.709] wcscmp (_String1="Security", _String2=".") returned 1 [0139.709] wcscmp (_String1="Security", _String2="..") returned 1 [0139.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1da30 [0139.709] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0139.709] wcscat (in: _Dest=0x3f1da30, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0139.709] wcscat (in: _Dest=0x3f1da30, _Source="Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0141.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0141.178] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0141.178] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0141.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0141.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd7f0) returned 1 [0141.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 747 os_tid = 0x10e4 [0139.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3014e78 [0139.709] wcscpy (in: _Dest=0x3014e78, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0139.709] wcscat (in: _Dest=0x3014e78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0139.709] wcscat (in: _Dest=0x3014e78, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0139.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0139.710] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0140.244] wcscmp (_String1=".", _String2=".") returned 0 [0140.244] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.244] wcscmp (_String1="..", _String2=".") returned 1 [0140.244] wcscmp (_String1="..", _String2="..") returned 0 [0140.244] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0140.244] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0140.244] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0140.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0da30 [0140.245] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.245] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.245] wcscat (in: _Dest=0x3e0da30, _Source="Help_CValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0141.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0141.754] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0141.754] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0141.754] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0141.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dc10 [0141.754] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.754] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.754] wcscat (in: _Dest=0x3e0dc10, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0141.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0141.755] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0141.755] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0141.755] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0141.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0db70 [0141.755] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.755] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.755] wcscat (in: _Dest=0x3e0db70, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0141.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0141.757] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0141.757] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0141.757] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0141.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0141.757] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.757] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.757] wcscat (in: _Dest=0x32c660, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0141.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0141.758] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0141.758] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0141.758] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0141.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d8f0 [0141.758] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.758] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.758] wcscat (in: _Dest=0x3e0d8f0, _Source="Help_MValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0141.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0141.760] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0141.760] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0141.760] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0141.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e430 [0141.760] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.760] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.760] wcscat (in: _Dest=0x3e0e430, _Source="Help_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0141.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0141.761] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0141.761] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0141.761] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0141.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e358f0 [0141.762] wcscpy (in: _Dest=0x3e358f0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0141.762] wcscat (in: _Dest=0x3e358f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0141.762] wcscat (in: _Dest=0x3e358f0, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0141.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e358f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0141.763] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0141.764] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0141.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0141.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0141.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 748 os_tid = 0x10e8 [0139.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx")) returned 0x20 [0140.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0140.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.622] GetLastError () returned 0x5 [0142.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0142.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 749 os_tid = 0x10ec [0139.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx")) returned 0x20 [0142.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0142.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.625] GetLastError () returned 0x5 [0142.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0142.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 750 os_tid = 0x10f0 [0139.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx")) returned 0x20 [0142.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0142.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.656] GetLastError () returned 0x5 [0142.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0142.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 751 os_tid = 0x10f4 [0139.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx")) returned 0x20 [0142.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0142.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.629] GetLastError () returned 0x5 [0142.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0142.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 752 os_tid = 0x10f8 [0139.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx")) returned 0x20 [0142.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0142.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.630] GetLastError () returned 0x5 [0142.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0142.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 753 os_tid = 0x10fc [0139.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx")) returned 0x20 [0142.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0142.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.638] GetLastError () returned 0x5 [0142.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0142.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc4c8) returned 1 Thread: id = 754 os_tid = 0x1100 [0139.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx")) returned 0x20 [0142.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0142.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.631] GetLastError () returned 0x5 [0142.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0142.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 755 os_tid = 0x1104 [0139.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx")) returned 0x20 [0142.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0142.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.640] GetLastError () returned 0x5 [0142.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0142.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 756 os_tid = 0x1108 [0139.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx")) returned 0x20 [0142.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0142.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.633] GetLastError () returned 0x5 [0142.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0142.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 757 os_tid = 0x110c [0139.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx")) returned 0x20 [0142.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0142.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.641] GetLastError () returned 0x5 [0142.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0142.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 758 os_tid = 0x1110 [0139.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx")) returned 0x20 [0142.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0142.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.643] GetLastError () returned 0x5 [0142.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0142.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 759 os_tid = 0x1114 [0139.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx")) returned 0x20 [0142.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0142.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.644] GetLastError () returned 0x5 [0142.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0142.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 760 os_tid = 0x1118 [0139.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx")) returned 0x20 [0142.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0142.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.634] GetLastError () returned 0x5 [0142.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0142.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 761 os_tid = 0x111c [0139.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx")) returned 0x20 [0142.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0142.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.646] GetLastError () returned 0x5 [0142.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0142.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 762 os_tid = 0x1120 [0139.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx")) returned 0x20 [0142.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0142.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.650] GetLastError () returned 0x5 [0142.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0142.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 763 os_tid = 0x1124 [0139.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx")) returned 0x20 [0142.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0142.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.651] GetLastError () returned 0x5 [0142.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0142.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 764 os_tid = 0x1128 [0139.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx")) returned 0x20 [0142.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0142.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.653] GetLastError () returned 0x5 [0142.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0142.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 765 os_tid = 0x112c [0139.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx")) returned 0x20 [0142.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0142.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.635] GetLastError () returned 0x5 [0142.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0142.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 766 os_tid = 0x1130 [0139.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx")) returned 0x20 [0142.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0142.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.626] GetLastError () returned 0x5 [0142.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0142.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 767 os_tid = 0x1134 [0139.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx")) returned 0x20 [0142.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0142.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.654] GetLastError () returned 0x5 [0142.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0142.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 768 os_tid = 0x1138 [0139.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx")) returned 0x20 [0142.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0142.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.628] GetLastError () returned 0x5 [0142.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0142.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 769 os_tid = 0x113c [0140.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx")) returned 0x20 [0142.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0142.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.637] GetLastError () returned 0x5 [0142.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0142.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 770 os_tid = 0x1140 [0140.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b588 [0140.248] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0140.248] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0140.248] wcscat (in: _Dest=0x3f1b588, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0140.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0140.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0140.249] wcscmp (_String1=".", _String2=".") returned 0 [0140.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.249] wcscmp (_String1="..", _String2=".") returned 1 [0140.249] wcscmp (_String1="..", _String2="..") returned 0 [0140.249] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0140.249] wcscmp (_String1="Accessories", _String2=".") returned 1 [0140.249] wcscmp (_String1="Accessories", _String2="..") returned 1 [0140.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbce8 [0140.249] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0140.249] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0140.249] wcscat (in: _Dest=0x66dbce8, _Source="Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0146.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0146.250] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0146.250] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0146.250] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0146.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0146.250] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.250] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.250] wcscat (in: _Dest=0x3e0e390, _Source="Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0146.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0146.251] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0146.251] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0146.251] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0146.251] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.251] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0146.251] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0146.251] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0146.251] wcscmp (_String1="Games", _String2=".") returned 1 [0146.251] wcscmp (_String1="Games", _String2="..") returned 1 [0146.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e11070 [0146.252] wcscpy (in: _Dest=0x3e11070, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.252] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.252] wcscat (in: _Dest=0x3e11070, _Source="Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0146.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e11070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0146.253] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0146.253] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0146.253] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0146.253] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0146.253] wcscmp (_String1="Java", _String2=".") returned 1 [0146.253] wcscmp (_String1="Java", _String2="..") returned 1 [0146.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0f9f0 [0146.253] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.253] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.253] wcscat (in: _Dest=0x3e0f9f0, _Source="Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0146.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0146.254] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0146.254] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0146.255] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0146.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0146.255] wcscpy (in: _Dest=0x66dca68, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.255] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.255] wcscat (in: _Dest=0x66dca68, _Source="Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0146.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0146.256] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0146.256] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0146.256] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0146.256] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0146.256] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0146.256] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0146.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d4a0 [0146.257] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.257] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.257] wcscat (in: _Dest=0x32d4a0, _Source="Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0146.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0146.258] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0146.258] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0146.258] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0146.258] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0146.258] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0146.258] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0146.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efe18 [0146.258] wcscpy (in: _Dest=0x66efe18, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.258] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.258] wcscat (in: _Dest=0x66efe18, _Source="SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0146.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66efe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0146.260] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0146.260] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0146.260] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0146.260] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0146.260] wcscmp (_String1="Startup", _String2=".") returned 1 [0146.260] wcscmp (_String1="Startup", _String2="..") returned 1 [0146.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef2f0 [0146.260] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.260] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.260] wcscat (in: _Dest=0x66ef2f0, _Source="Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0146.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0146.262] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0146.262] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0146.262] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0146.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee6b8 [0146.262] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0146.262] wcscat (in: _Dest=0x66ee6b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0146.262] wcscat (in: _Dest=0x66ee6b8, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0146.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0146.263] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0146.263] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0146.263] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0146.263] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0146.263] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0146.263] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0146.263] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.263] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0146.263] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0146.263] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0146.263] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0146.264] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0146.264] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0146.264] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0146.264] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0146.264] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0146.264] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0146.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0146.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0146.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 771 os_tid = 0x1144 [0140.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml")) returned 0x20 [0140.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0140.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.255] GetLastError () returned 0x5 [0140.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0140.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 Thread: id = 772 os_tid = 0x1148 [0140.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml")) returned 0x20 [0140.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0140.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.260] GetLastError () returned 0x5 [0140.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0140.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 773 os_tid = 0x114c [0140.262] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0140.262] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0140.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.262] GetLastError () returned 0x5 [0140.262] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0140.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 774 os_tid = 0x1150 [0140.264] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0141.465] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0141.466] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.162] GetLastError () returned 0x5 [0144.162] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0144.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 775 os_tid = 0x1154 [0140.265] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0144.163] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0144.163] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.165] GetLastError () returned 0x5 [0144.165] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0144.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 776 os_tid = 0x1158 [0140.266] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0144.172] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0144.172] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.172] GetLastError () returned 0x5 [0144.172] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0144.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 777 os_tid = 0x115c [0140.267] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0144.173] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0144.173] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.173] GetLastError () returned 0x5 [0144.173] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0144.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 778 os_tid = 0x1160 [0140.267] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0144.174] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0144.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.175] GetLastError () returned 0x5 [0144.175] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0144.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 779 os_tid = 0x1164 [0140.268] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0144.176] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0144.176] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.176] GetLastError () returned 0x5 [0144.176] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0144.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 780 os_tid = 0x1168 [0140.270] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0144.177] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0144.177] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.177] GetLastError () returned 0x5 [0144.177] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0144.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 781 os_tid = 0x116c [0140.270] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0143.760] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0143.760] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.761] GetLastError () returned 0x5 [0143.761] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0143.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 782 os_tid = 0x1170 [0140.271] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0144.170] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0144.170] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.171] GetLastError () returned 0x5 [0144.171] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0144.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 783 os_tid = 0x1174 [0140.272] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0144.169] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0144.169] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.169] GetLastError () returned 0x5 [0144.169] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0144.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 784 os_tid = 0x1178 [0140.272] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn")) returned 0x2022 [0140.273] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0140.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.273] GetLastError () returned 0x5 [0140.273] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0140.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e035b8) returned 1 Thread: id = 785 os_tid = 0x117c [0140.275] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0140.275] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0140.275] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.275] GetLastError () returned 0x5 [0140.275] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0140.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 Thread: id = 786 os_tid = 0x1180 [0140.277] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0145.545] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0145.546] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.348] GetLastError () returned 0x5 [0146.348] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0146.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 Thread: id = 787 os_tid = 0x1184 [0140.278] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0141.457] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0141.458] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.791] GetLastError () returned 0x5 [0143.791] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0143.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 788 os_tid = 0x1188 [0140.278] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0146.646] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0146.646] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.646] GetLastError () returned 0x5 [0146.647] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0146.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 Thread: id = 789 os_tid = 0x118c [0140.278] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0146.648] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0146.648] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.648] GetLastError () returned 0x5 [0146.648] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0146.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 Thread: id = 790 os_tid = 0x1190 [0140.279] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0146.347] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.347] GetLastError () returned 0x5 [0146.347] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 Thread: id = 791 os_tid = 0x1194 [0140.279] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0146.601] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.601] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.601] GetLastError () returned 0x5 [0146.601] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 Thread: id = 792 os_tid = 0x1198 [0140.279] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0146.650] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.650] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.650] GetLastError () returned 0x5 [0146.650] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 793 os_tid = 0x119c [0140.280] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0146.603] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.603] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.603] GetLastError () returned 0x5 [0146.603] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cd8) returned 1 Thread: id = 794 os_tid = 0x11a0 [0140.280] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0146.605] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.605] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.605] GetLastError () returned 0x5 [0146.605] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 Thread: id = 795 os_tid = 0x11a4 [0140.280] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0146.607] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.607] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.607] GetLastError () returned 0x5 [0146.607] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 796 os_tid = 0x11a8 [0140.281] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0146.609] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.609] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.609] GetLastError () returned 0x5 [0146.609] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 Thread: id = 797 os_tid = 0x11ac [0140.281] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0146.610] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.610] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.610] GetLastError () returned 0x5 [0146.610] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 798 os_tid = 0x11b0 [0140.282] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0146.612] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.612] GetLastError () returned 0x5 [0146.612] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 Thread: id = 799 os_tid = 0x11b4 [0140.282] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0146.642] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.642] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.643] GetLastError () returned 0x5 [0146.643] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e98) returned 1 Thread: id = 800 os_tid = 0x11b8 [0140.283] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0146.616] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.616] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.616] GetLastError () returned 0x5 [0146.616] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 Thread: id = 801 os_tid = 0x11bc [0140.283] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0146.614] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.614] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.614] GetLastError () returned 0x5 [0146.614] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 Thread: id = 802 os_tid = 0x11c0 [0140.283] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0146.644] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.644] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.645] GetLastError () returned 0x5 [0146.645] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 Thread: id = 803 os_tid = 0x11c4 [0140.816] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0146.585] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.585] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.586] GetLastError () returned 0x5 [0146.586] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 Thread: id = 805 os_tid = 0x11cc [0140.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0140.821] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0140.821] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0140.821] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*" [0140.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0140.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0141.467] wcscmp (_String1=".", _String2=".") returned 0 [0141.467] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.467] wcscmp (_String1="..", _String2=".") returned 1 [0141.467] wcscmp (_String1="..", _String2="..") returned 0 [0141.467] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0141.467] wcscmp (_String1="1033", _String2=".") returned 1 [0141.467] wcscmp (_String1="1033", _String2="..") returned 1 [0141.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7098 [0141.467] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0141.467] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0141.467] wcscat (in: _Dest=0x2ff7098, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0151.271] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0151.271] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0151.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0151.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0151.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 806 os_tid = 0x11d0 [0140.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff77c8 [0140.826] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0140.826] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0140.826] wcscat (in: _Dest=0x2ff77c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*" [0140.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0140.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0141.468] wcscmp (_String1=".", _String2=".") returned 0 [0141.468] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.468] wcscmp (_String1="..", _String2=".") returned 1 [0141.468] wcscmp (_String1="..", _String2="..") returned 0 [0141.468] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0141.468] wcscmp (_String1="1033", _String2=".") returned 1 [0141.468] wcscmp (_String1="1033", _String2="..") returned 1 [0141.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0141.468] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0141.468] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0141.468] wcscat (in: _Dest=0x332f28, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0151.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0151.273] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0151.273] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0151.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0151.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 [0151.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 807 os_tid = 0x11d4 [0140.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0140.828] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0140.828] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0140.828] wcscat (in: _Dest=0x3f1ab38, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*" [0140.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0140.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0140.832] wcscmp (_String1=".", _String2=".") returned 0 [0140.832] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.832] wcscmp (_String1="..", _String2=".") returned 1 [0140.832] wcscmp (_String1="..", _String2="..") returned 0 [0140.832] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0140.832] wcscmp (_String1="OFFICE10.MML", _String2=".") returned 1 [0140.832] wcscmp (_String1="OFFICE10.MML", _String2="..") returned 1 [0140.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcdc8 [0140.832] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0140.833] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0140.833] wcscat (in: _Dest=0x66dcdc8, _Source="OFFICE10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" [0145.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0145.657] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0145.657] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0145.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0145.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0145.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 Thread: id = 808 os_tid = 0x11d8 [0140.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e102f0 [0140.833] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0140.833] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0140.833] wcscat (in: _Dest=0x3e102f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*" [0140.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0140.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0142.894] wcscmp (_String1=".", _String2=".") returned 0 [0142.894] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.727] wcscmp (_String1="..", _String2=".") returned 1 [0143.727] wcscmp (_String1="..", _String2="..") returned 0 [0143.727] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0143.728] wcscmp (_String1="AUTOSHAP.DLL", _String2=".") returned 1 [0143.728] wcscmp (_String1="AUTOSHAP.DLL", _String2="..") returned 1 [0143.728] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf689c300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf689c300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0143.728] wcscmp (_String1="BD18180_.WMF", _String2=".") returned 1 [0143.728] wcscmp (_String1="BD18180_.WMF", _String2="..") returned 1 [0143.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cf48 [0143.728] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0143.728] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0143.728] wcscat (in: _Dest=0x32cf48, _Source="BD18180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" [0147.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0147.445] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5382f600, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5382f600, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0147.445] wcscmp (_String1="BD18181_.WMF", _String2=".") returned 1 [0147.445] wcscmp (_String1="BD18181_.WMF", _String2="..") returned 1 [0147.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69584a0 [0147.445] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.446] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.446] wcscat (in: _Dest=0x69584a0, _Source="BD18181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" [0147.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0147.447] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3602e000, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3602e000, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0147.447] wcscmp (_String1="BD18182_.WMF", _String2=".") returned 1 [0147.447] wcscmp (_String1="BD18182_.WMF", _String2="..") returned 1 [0147.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958408 [0147.447] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.447] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.447] wcscat (in: _Dest=0x6958408, _Source="BD18182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" [0147.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0147.449] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76625e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76625e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0147.449] wcscmp (_String1="BD18184_.WMF", _String2=".") returned 1 [0147.449] wcscmp (_String1="BD18184_.WMF", _String2="..") returned 1 [0147.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0147.449] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.449] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.449] wcscat (in: _Dest=0x6958370, _Source="BD18184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" [0147.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0147.451] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbb5900, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6dbb5900, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0147.451] wcscmp (_String1="BD18185_.WMF", _String2=".") returned 1 [0147.451] wcscmp (_String1="BD18185_.WMF", _String2="..") returned 1 [0147.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958960 [0147.451] wcscpy (in: _Dest=0x6958960, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.451] wcscat (in: _Dest=0x6958960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.451] wcscat (in: _Dest=0x6958960, _Source="BD18185_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" [0147.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0147.453] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a40b100, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a40b100, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0147.453] wcscmp (_String1="BD18187_.WMF", _String2=".") returned 1 [0147.453] wcscmp (_String1="BD18187_.WMF", _String2="..") returned 1 [0147.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69589f8 [0147.453] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.453] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.453] wcscat (in: _Dest=0x69589f8, _Source="BD18187_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" [0147.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0147.454] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fe3f00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19fe3f00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0147.454] wcscmp (_String1="BD18189_.WMF", _String2=".") returned 1 [0147.454] wcscmp (_String1="BD18189_.WMF", _String2="..") returned 1 [0147.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958a90 [0147.455] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.455] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.455] wcscat (in: _Dest=0x6958a90, _Source="BD18189_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" [0147.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0147.456] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0147.456] wcscmp (_String1="BD18190_.WMF", _String2=".") returned 1 [0147.456] wcscmp (_String1="BD18190_.WMF", _String2="..") returned 1 [0147.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958b28 [0147.456] wcscpy (in: _Dest=0x6958b28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.456] wcscat (in: _Dest=0x6958b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.456] wcscat (in: _Dest=0x6958b28, _Source="BD18190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" [0147.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0147.457] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac521300, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac521300, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0147.457] wcscmp (_String1="BD18191_.WMF", _String2=".") returned 1 [0147.457] wcscmp (_String1="BD18191_.WMF", _String2="..") returned 1 [0147.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958bc0 [0147.458] wcscpy (in: _Dest=0x6958bc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.458] wcscat (in: _Dest=0x6958bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.458] wcscat (in: _Dest=0x6958bc0, _Source="BD18191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" [0147.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0147.459] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b780a00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b780a00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0147.459] wcscmp (_String1="BD18192_.WMF", _String2=".") returned 1 [0147.459] wcscmp (_String1="BD18192_.WMF", _String2="..") returned 1 [0147.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958c58 [0147.459] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.459] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.459] wcscat (in: _Dest=0x6958c58, _Source="BD18192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" [0147.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0147.460] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b1e800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65b1e800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0147.460] wcscmp (_String1="BD18193_.WMF", _String2=".") returned 1 [0147.460] wcscmp (_String1="BD18193_.WMF", _String2="..") returned 1 [0147.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958cf0 [0147.460] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.460] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.461] wcscat (in: _Dest=0x6958cf0, _Source="BD18193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" [0147.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0147.462] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf181800, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf181800, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0147.462] wcscmp (_String1="BD18194_.WMF", _String2=".") returned 1 [0147.462] wcscmp (_String1="BD18194_.WMF", _String2="..") returned 1 [0147.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958d88 [0147.462] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.462] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.462] wcscat (in: _Dest=0x6958d88, _Source="BD18194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" [0147.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0147.470] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89752e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89752e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0147.470] wcscmp (_String1="BD18196_.WMF", _String2=".") returned 1 [0147.470] wcscmp (_String1="BD18196_.WMF", _String2="..") returned 1 [0147.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958e20 [0147.471] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.471] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.471] wcscat (in: _Dest=0x6958e20, _Source="BD18196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" [0147.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0147.472] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0147.472] wcscmp (_String1="BD18197_.WMF", _String2=".") returned 1 [0147.472] wcscmp (_String1="BD18197_.WMF", _String2="..") returned 1 [0147.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958eb8 [0147.472] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.472] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.473] wcscat (in: _Dest=0x6958eb8, _Source="BD18197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" [0147.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0147.474] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0147.474] wcscmp (_String1="BD18198_.WMF", _String2=".") returned 1 [0147.474] wcscmp (_String1="BD18198_.WMF", _String2="..") returned 1 [0147.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958f50 [0147.474] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.474] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.474] wcscat (in: _Dest=0x6958f50, _Source="BD18198_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" [0147.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0147.476] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50ff800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50ff800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0147.476] wcscmp (_String1="BD18199_.WMF", _String2=".") returned 1 [0147.476] wcscmp (_String1="BD18199_.WMF", _String2="..") returned 1 [0147.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958fe8 [0147.476] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.477] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.477] wcscat (in: _Dest=0x6958fe8, _Source="BD18199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" [0147.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0147.478] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92650000, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92650000, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0147.478] wcscmp (_String1="BD18200_.WMF", _String2=".") returned 1 [0147.478] wcscmp (_String1="BD18200_.WMF", _String2="..") returned 1 [0147.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959080 [0147.479] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.479] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.479] wcscat (in: _Dest=0x6959080, _Source="BD18200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" [0147.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0147.480] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f8a400, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f8a400, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0147.480] wcscmp (_String1="BD18201_.WMF", _String2=".") returned 1 [0147.480] wcscmp (_String1="BD18201_.WMF", _String2="..") returned 1 [0147.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959118 [0147.480] wcscpy (in: _Dest=0x6959118, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.481] wcscat (in: _Dest=0x6959118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.481] wcscat (in: _Dest=0x6959118, _Source="BD18201_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" [0147.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0147.482] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0147.482] wcscmp (_String1="BD18202_.WMF", _String2=".") returned 1 [0147.483] wcscmp (_String1="BD18202_.WMF", _String2="..") returned 1 [0147.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69591b0 [0147.483] wcscpy (in: _Dest=0x69591b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.483] wcscat (in: _Dest=0x69591b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.483] wcscat (in: _Dest=0x69591b0, _Source="BD18202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" [0147.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69591b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0147.484] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d4200, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d4200, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0147.484] wcscmp (_String1="BD18203_.WMF", _String2=".") returned 1 [0147.484] wcscmp (_String1="BD18203_.WMF", _String2="..") returned 1 [0147.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959248 [0147.484] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.484] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.484] wcscat (in: _Dest=0x6959248, _Source="BD18203_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" [0147.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0147.486] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d101a00, ftCreationTime.dwHighDateTime=0x1bddd17, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d101a00, ftLastWriteTime.dwHighDateTime=0x1bddd17, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0147.486] wcscmp (_String1="BD18204_.WMF", _String2=".") returned 1 [0147.486] wcscmp (_String1="BD18204_.WMF", _String2="..") returned 1 [0147.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69592e0 [0147.486] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.486] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.486] wcscat (in: _Dest=0x69592e0, _Source="BD18204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" [0147.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0147.488] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed97f200, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed97f200, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0147.488] wcscmp (_String1="BD18205_.WMF", _String2=".") returned 1 [0147.488] wcscmp (_String1="BD18205_.WMF", _String2="..") returned 1 [0147.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959378 [0147.488] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0147.488] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0147.488] wcscat (in: _Dest=0x6959378, _Source="BD18205_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" [0147.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0148.270] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30a8600, ftCreationTime.dwHighDateTime=0x1bddd03, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe30a8600, ftLastWriteTime.dwHighDateTime=0x1bddd03, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0148.270] wcscmp (_String1="BD18206_.WMF", _String2=".") returned 1 [0148.270] wcscmp (_String1="BD18206_.WMF", _String2="..") returned 1 [0148.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959410 [0148.270] wcscpy (in: _Dest=0x6959410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0148.270] wcscat (in: _Dest=0x6959410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0148.270] wcscat (in: _Dest=0x6959410, _Source="BD18206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" [0150.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0150.355] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4936e00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4936e00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0150.355] wcscmp (_String1="BD18207_.WMF", _String2=".") returned 1 [0150.355] wcscmp (_String1="BD18207_.WMF", _String2="..") returned 1 [0150.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32bea8 [0150.356] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.356] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.356] wcscat (in: _Dest=0x32bea8, _Source="BD18207_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" [0150.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0150.357] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a62100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4a62100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0150.357] wcscmp (_String1="BD18208_.WMF", _String2=".") returned 1 [0150.357] wcscmp (_String1="BD18208_.WMF", _String2="..") returned 1 [0150.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d240 [0150.357] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.357] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.357] wcscat (in: _Dest=0x32d240, _Source="BD18208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" [0150.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0150.359] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b951600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b951600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0150.359] wcscmp (_String1="BD18209_.WMF", _String2=".") returned 1 [0150.359] wcscmp (_String1="BD18209_.WMF", _String2="..") returned 1 [0150.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d538 [0150.359] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.359] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.359] wcscat (in: _Dest=0x32d538, _Source="BD18209_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" [0150.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0150.360] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9c1f00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd9c1f00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0150.361] wcscmp (_String1="BD18210_.WMF", _String2=".") returned 1 [0150.361] wcscmp (_String1="BD18210_.WMF", _String2="..") returned 1 [0150.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32b820 [0150.361] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.361] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.361] wcscat (in: _Dest=0x32b820, _Source="BD18210_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" [0150.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0150.362] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0150.362] wcscmp (_String1="BD18211_.WMF", _String2=".") returned 1 [0150.362] wcscmp (_String1="BD18211_.WMF", _String2="..") returned 1 [0150.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cf48 [0150.362] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.363] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.363] wcscat (in: _Dest=0x32cf48, _Source="BD18211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" [0150.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0150.364] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac8fc00, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ac8fc00, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0150.364] wcscmp (_String1="BD18212_.WMF", _String2=".") returned 1 [0150.364] wcscmp (_String1="BD18212_.WMF", _String2="..") returned 1 [0150.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0150.364] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.364] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.364] wcscat (in: _Dest=0x32d700, _Source="BD18212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" [0150.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0150.365] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab6db100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab6db100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0150.365] wcscmp (_String1="BD18213_.WMF", _String2=".") returned 1 [0150.365] wcscmp (_String1="BD18213_.WMF", _String2="..") returned 1 [0150.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d2d8 [0150.365] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.365] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.365] wcscat (in: _Dest=0x32d2d8, _Source="BD18213_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" [0150.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0150.367] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425900, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1425900, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0150.367] wcscmp (_String1="BD18214_.WMF", _String2=".") returned 1 [0150.367] wcscmp (_String1="BD18214_.WMF", _String2="..") returned 1 [0150.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d5d0 [0150.367] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.367] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.367] wcscat (in: _Dest=0x32d5d0, _Source="BD18214_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" [0150.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0150.368] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0961000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0961000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0150.368] wcscmp (_String1="BD18215_.WMF", _String2=".") returned 1 [0150.368] wcscmp (_String1="BD18215_.WMF", _String2="..") returned 1 [0150.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cd80 [0150.368] wcscpy (in: _Dest=0x32cd80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.368] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.369] wcscat (in: _Dest=0x32cd80, _Source="BD18215_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" [0150.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0150.370] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e01c00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1e01c00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0150.914] wcscmp (_String1="BD18216_.WMF", _String2=".") returned 1 [0150.914] wcscmp (_String1="BD18216_.WMF", _String2="..") returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958078 [0150.914] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.914] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.914] wcscat (in: _Dest=0x6958078, _Source="BD18216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" [0153.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0153.677] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1321fd00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1321fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0153.677] wcscmp (_String1="BD18217_.WMF", _String2=".") returned 1 [0153.677] wcscmp (_String1="BD18217_.WMF", _String2="..") returned 1 [0153.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e322c8 [0153.677] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.677] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.677] wcscat (in: _Dest=0x3e322c8, _Source="BD18217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" [0153.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0153.678] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2503a000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2503a000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0153.678] wcscmp (_String1="BD18218_.WMF", _String2=".") returned 1 [0153.678] wcscmp (_String1="BD18218_.WMF", _String2="..") returned 1 [0153.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30e00 [0153.678] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.679] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.679] wcscat (in: _Dest=0x3e30e00, _Source="BD18218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" [0153.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0153.680] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4595600, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4595600, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0153.680] wcscmp (_String1="BD18219_.WMF", _String2=".") returned 1 [0153.680] wcscmp (_String1="BD18219_.WMF", _String2="..") returned 1 [0153.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30810 [0153.680] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.680] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.680] wcscat (in: _Dest=0x3e30810, _Source="BD18219_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" [0153.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0153.681] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfe2d500, ftCreationTime.dwHighDateTime=0x1bddd09, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfe2d500, ftLastWriteTime.dwHighDateTime=0x1bddd09, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0153.681] wcscmp (_String1="BD18220_.WMF", _String2=".") returned 1 [0153.681] wcscmp (_String1="BD18220_.WMF", _String2="..") returned 1 [0153.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959248 [0153.681] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.682] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.682] wcscat (in: _Dest=0x6959248, _Source="BD18220_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" [0153.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0153.683] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35694a00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35694a00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0153.683] wcscmp (_String1="BD18221_.WMF", _String2=".") returned 1 [0153.683] wcscmp (_String1="BD18221_.WMF", _String2="..") returned 1 [0153.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958830 [0153.683] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.683] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.683] wcscat (in: _Dest=0x6958830, _Source="BD18221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" [0153.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0153.684] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ade7400, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ade7400, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0153.684] wcscmp (_String1="BD18222_.WMF", _String2=".") returned 1 [0153.684] wcscmp (_String1="BD18222_.WMF", _String2="..") returned 1 [0153.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69594a8 [0153.684] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.684] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.684] wcscat (in: _Dest=0x69594a8, _Source="BD18222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" [0153.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0153.685] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf419a100, ftCreationTime.dwHighDateTime=0x1bddbf6, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf419a100, ftLastWriteTime.dwHighDateTime=0x1bddbf6, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0153.685] wcscmp (_String1="BD18223_.WMF", _String2=".") returned 1 [0153.686] wcscmp (_String1="BD18223_.WMF", _String2="..") returned 1 [0153.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959540 [0153.686] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.686] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.686] wcscat (in: _Dest=0x6959540, _Source="BD18223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" [0153.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0153.687] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea7e600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ea7e600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0153.687] wcscmp (_String1="BD18224_.WMF", _String2=".") returned 1 [0153.687] wcscmp (_String1="BD18224_.WMF", _String2="..") returned 1 [0153.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69595d8 [0153.687] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.687] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.687] wcscat (in: _Dest=0x69595d8, _Source="BD18224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" [0153.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0153.689] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88c9f00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb88c9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0153.689] wcscmp (_String1="BD18225_.WMF", _String2=".") returned 1 [0153.689] wcscmp (_String1="BD18225_.WMF", _String2="..") returned 1 [0153.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959670 [0153.689] wcscpy (in: _Dest=0x6959670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.689] wcscat (in: _Dest=0x6959670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.689] wcscat (in: _Dest=0x6959670, _Source="BD18225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" [0153.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0153.690] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe245c600, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe245c600, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0153.691] wcscmp (_String1="BD18226_.WMF", _String2=".") returned 1 [0153.691] wcscmp (_String1="BD18226_.WMF", _String2="..") returned 1 [0153.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959708 [0153.691] wcscpy (in: _Dest=0x6959708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.691] wcscat (in: _Dest=0x6959708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.691] wcscat (in: _Dest=0x6959708, _Source="BD18226_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" [0153.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0153.692] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1919dd00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1919dd00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0153.692] wcscmp (_String1="BD18227_.WMF", _String2=".") returned 1 [0153.693] wcscmp (_String1="BD18227_.WMF", _String2="..") returned 1 [0153.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69597a0 [0153.693] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.693] wcscat (in: _Dest=0x69597a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.693] wcscat (in: _Dest=0x69597a0, _Source="BD18227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" [0153.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69597a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0153.694] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0685000, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0685000, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0153.694] wcscmp (_String1="BD18228_.WMF", _String2=".") returned 1 [0153.694] wcscmp (_String1="BD18228_.WMF", _String2="..") returned 1 [0153.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959838 [0153.694] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.694] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.694] wcscat (in: _Dest=0x6959838, _Source="BD18228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" [0153.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0153.696] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93a9200, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc93a9200, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0153.696] wcscmp (_String1="BD18229_.WMF", _String2=".") returned 1 [0153.696] wcscmp (_String1="BD18229_.WMF", _String2="..") returned 1 [0153.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69598d0 [0153.696] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.696] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.696] wcscat (in: _Dest=0x69598d0, _Source="BD18229_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" [0153.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0153.698] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8461b000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8461b000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0153.698] wcscmp (_String1="BD18230_.WMF", _String2=".") returned 1 [0153.698] wcscmp (_String1="BD18230_.WMF", _String2="..") returned 1 [0153.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959968 [0153.698] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.698] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.698] wcscat (in: _Dest=0x6959968, _Source="BD18230_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" [0153.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0153.699] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22f1500, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa22f1500, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0153.699] wcscmp (_String1="BD18231_.WMF", _String2=".") returned 1 [0153.699] wcscmp (_String1="BD18231_.WMF", _String2="..") returned 1 [0153.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959a00 [0153.700] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.700] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.700] wcscat (in: _Dest=0x6959a00, _Source="BD18231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" [0153.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0153.701] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc98b200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc98b200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0153.702] wcscmp (_String1="BD18232_.WMF", _String2=".") returned 1 [0153.702] wcscmp (_String1="BD18232_.WMF", _String2="..") returned 1 [0153.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959a98 [0153.702] wcscpy (in: _Dest=0x6959a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.702] wcscat (in: _Dest=0x6959a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.702] wcscat (in: _Dest=0x6959a98, _Source="BD18232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" [0153.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0153.703] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefab8200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xefab8200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0153.703] wcscmp (_String1="BD18233_.WMF", _String2=".") returned 1 [0153.703] wcscmp (_String1="BD18233_.WMF", _String2="..") returned 1 [0153.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959b30 [0153.703] wcscpy (in: _Dest=0x6959b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.703] wcscat (in: _Dest=0x6959b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.704] wcscat (in: _Dest=0x6959b30, _Source="BD18233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" [0153.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0153.705] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef7f00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ef7f00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0153.705] wcscmp (_String1="BD18234_.WMF", _String2=".") returned 1 [0153.705] wcscmp (_String1="BD18234_.WMF", _String2="..") returned 1 [0153.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959bc8 [0153.705] wcscpy (in: _Dest=0x6959bc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.705] wcscat (in: _Dest=0x6959bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.705] wcscat (in: _Dest=0x6959bc8, _Source="BD18234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" [0153.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0153.707] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5a8a00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f5a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0153.707] wcscmp (_String1="BD18235_.WMF", _String2=".") returned 1 [0153.707] wcscmp (_String1="BD18235_.WMF", _String2="..") returned 1 [0153.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1ce8 [0153.707] wcscpy (in: _Dest=0x69c1ce8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.707] wcscat (in: _Dest=0x69c1ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.707] wcscat (in: _Dest=0x69c1ce8, _Source="BD18235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" [0153.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0153.708] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cfb400, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34cfb400, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0153.708] wcscmp (_String1="BD18236_.WMF", _String2=".") returned 1 [0153.708] wcscmp (_String1="BD18236_.WMF", _String2="..") returned 1 [0153.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1d80 [0153.708] wcscpy (in: _Dest=0x69c1d80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.709] wcscat (in: _Dest=0x69c1d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.709] wcscat (in: _Dest=0x69c1d80, _Source="BD18236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" [0153.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0153.710] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecb4d00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecb4d00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0153.710] wcscmp (_String1="BD18237_.WMF", _String2=".") returned 1 [0153.710] wcscmp (_String1="BD18237_.WMF", _String2="..") returned 1 [0153.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1e18 [0153.710] wcscpy (in: _Dest=0x69c1e18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.710] wcscat (in: _Dest=0x69c1e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.710] wcscat (in: _Dest=0x69c1e18, _Source="BD18237_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" [0153.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0153.712] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a44de00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a44de00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0153.712] wcscmp (_String1="BD18238_.WMF", _String2=".") returned 1 [0153.712] wcscmp (_String1="BD18238_.WMF", _String2="..") returned 1 [0153.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1eb0 [0153.712] wcscpy (in: _Dest=0x69c1eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.712] wcscat (in: _Dest=0x69c1eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.712] wcscat (in: _Dest=0x69c1eb0, _Source="BD18238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" [0153.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0153.713] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3d4900, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e3d4900, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0153.713] wcscmp (_String1="BD18239_.WMF", _String2=".") returned 1 [0153.713] wcscmp (_String1="BD18239_.WMF", _String2="..") returned 1 [0153.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1f48 [0153.713] wcscpy (in: _Dest=0x69c1f48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.714] wcscat (in: _Dest=0x69c1f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.714] wcscat (in: _Dest=0x69c1f48, _Source="BD18239_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" [0153.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0154.896] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37653400, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37653400, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0154.896] wcscmp (_String1="BD18241_.WMF", _String2=".") returned 1 [0154.896] wcscmp (_String1="BD18241_.WMF", _String2="..") returned 1 [0154.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957eb0 [0154.896] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0154.896] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0154.896] wcscat (in: _Dest=0x6957eb0, _Source="BD18241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" [0157.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0157.294] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff779600, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff779600, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0157.294] wcscmp (_String1="BD18242_.WMF", _String2=".") returned 1 [0157.294] wcscmp (_String1="BD18242_.WMF", _String2="..") returned 1 [0157.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818538 [0157.295] wcscpy (in: _Dest=0x6818538, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.295] wcscat (in: _Dest=0x6818538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.295] wcscat (in: _Dest=0x6818538, _Source="BD18242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" [0157.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0157.296] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ecc000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ecc000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0157.296] wcscmp (_String1="BD18243_.WMF", _String2=".") returned 1 [0157.296] wcscmp (_String1="BD18243_.WMF", _String2="..") returned 1 [0157.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68185d0 [0157.296] wcscpy (in: _Dest=0x68185d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.296] wcscat (in: _Dest=0x68185d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.296] wcscat (in: _Dest=0x68185d0, _Source="BD18243_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" [0157.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68185d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0157.297] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249f300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb249f300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0157.297] wcscmp (_String1="BD18244_.WMF", _String2=".") returned 1 [0157.297] wcscmp (_String1="BD18244_.WMF", _String2="..") returned 1 [0157.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818668 [0157.297] wcscpy (in: _Dest=0x6818668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.297] wcscat (in: _Dest=0x6818668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.297] wcscat (in: _Dest=0x6818668, _Source="BD18244_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" [0157.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0157.299] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55cc300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc55cc300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0157.299] wcscmp (_String1="BD18245_.WMF", _String2=".") returned 1 [0157.299] wcscmp (_String1="BD18245_.WMF", _String2="..") returned 1 [0157.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818700 [0157.299] wcscpy (in: _Dest=0x6818700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.299] wcscat (in: _Dest=0x6818700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.299] wcscat (in: _Dest=0x6818700, _Source="BD18245_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" [0157.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0157.300] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6184cb00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6184cb00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0157.300] wcscmp (_String1="BD18246_.WMF", _String2=".") returned 1 [0157.300] wcscmp (_String1="BD18246_.WMF", _String2="..") returned 1 [0157.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818798 [0157.300] wcscpy (in: _Dest=0x6818798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.300] wcscat (in: _Dest=0x6818798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.300] wcscat (in: _Dest=0x6818798, _Source="BD18246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" [0157.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0157.302] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f585c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f585c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0157.302] wcscmp (_String1="BD18247_.WMF", _String2=".") returned 1 [0157.302] wcscmp (_String1="BD18247_.WMF", _String2="..") returned 1 [0157.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818830 [0157.302] wcscpy (in: _Dest=0x6818830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.302] wcscat (in: _Dest=0x6818830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.302] wcscat (in: _Dest=0x6818830, _Source="BD18247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" [0157.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0157.303] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x626b2c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x626b2c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0157.303] wcscmp (_String1="BD18248_.WMF", _String2=".") returned 1 [0157.303] wcscmp (_String1="BD18248_.WMF", _String2="..") returned 1 [0157.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68188c8 [0157.303] wcscpy (in: _Dest=0x68188c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.303] wcscat (in: _Dest=0x68188c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.303] wcscat (in: _Dest=0x68188c8, _Source="BD18248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" [0157.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68188c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0157.305] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0642300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0642300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0157.305] wcscmp (_String1="BD18249_.WMF", _String2=".") returned 1 [0157.305] wcscmp (_String1="BD18249_.WMF", _String2="..") returned 1 [0157.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818960 [0157.305] wcscpy (in: _Dest=0x6818960, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.305] wcscat (in: _Dest=0x6818960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.305] wcscat (in: _Dest=0x6818960, _Source="BD18249_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" [0157.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0157.306] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ccf00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744ccf00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0157.306] wcscmp (_String1="BD18250_.WMF", _String2=".") returned 1 [0157.306] wcscmp (_String1="BD18250_.WMF", _String2="..") returned 1 [0157.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68189f8 [0157.306] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.306] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.306] wcscat (in: _Dest=0x68189f8, _Source="BD18250_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" [0157.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68189f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0157.307] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fd4500, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84fd4500, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0158.050] wcscmp (_String1="BD18251_.WMF", _String2=".") returned 1 [0158.050] wcscmp (_String1="BD18251_.WMF", _String2="..") returned 1 [0158.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819a00 [0158.050] wcscpy (in: _Dest=0x6819a00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0158.050] wcscat (in: _Dest=0x6819a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0158.050] wcscat (in: _Dest=0x6819a00, _Source="BD18251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" [0159.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0159.595] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e210300, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e210300, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0159.595] wcscmp (_String1="BD18252_.WMF", _String2=".") returned 1 [0159.595] wcscmp (_String1="BD18252_.WMF", _String2="..") returned 1 [0159.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819968 [0159.595] wcscpy (in: _Dest=0x6819968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.595] wcscat (in: _Dest=0x6819968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.595] wcscat (in: _Dest=0x6819968, _Source="BD18252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" [0159.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0159.596] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b51b00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0b51b00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0159.596] wcscmp (_String1="BD18253_.WMF", _String2=".") returned 1 [0159.596] wcscmp (_String1="BD18253_.WMF", _String2="..") returned 1 [0159.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819838 [0159.596] wcscpy (in: _Dest=0x6819838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.596] wcscat (in: _Dest=0x6819838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.596] wcscat (in: _Dest=0x6819838, _Source="BD18253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" [0159.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0159.597] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ff2100, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0ff2100, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0159.597] wcscmp (_String1="BD18254_.WMF", _String2=".") returned 1 [0159.597] wcscmp (_String1="BD18254_.WMF", _String2="..") returned 1 [0159.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68194a8 [0159.597] wcscpy (in: _Dest=0x68194a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.597] wcscat (in: _Dest=0x68194a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.597] wcscat (in: _Dest=0x68194a8, _Source="BD18254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" [0159.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68194a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0159.599] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb339900, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb339900, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0159.599] wcscmp (_String1="BD18255_.WMF", _String2=".") returned 1 [0159.599] wcscmp (_String1="BD18255_.WMF", _String2="..") returned 1 [0159.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819410 [0159.599] wcscpy (in: _Dest=0x6819410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.599] wcscat (in: _Dest=0x6819410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.599] wcscat (in: _Dest=0x6819410, _Source="BD18255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" [0159.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0159.600] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd6f700, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cd6f700, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0159.600] wcscmp (_String1="BD18256_.WMF", _String2=".") returned 1 [0159.600] wcscmp (_String1="BD18256_.WMF", _String2="..") returned 1 [0159.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819378 [0159.600] wcscpy (in: _Dest=0x6819378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.600] wcscat (in: _Dest=0x6819378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.600] wcscat (in: _Dest=0x6819378, _Source="BD18256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" [0159.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0159.601] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0159.601] wcscmp (_String1="BD18257_.WMF", _String2=".") returned 1 [0159.601] wcscmp (_String1="BD18257_.WMF", _String2="..") returned 1 [0159.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68192e0 [0159.601] wcscpy (in: _Dest=0x68192e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0159.601] wcscat (in: _Dest=0x68192e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0159.601] wcscat (in: _Dest=0x68192e0, _Source="BD18257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" [0159.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68192e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0159.602] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0159.602] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0159.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0159.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 [0159.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 809 os_tid = 0x11dc [0140.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10670 [0140.835] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0140.835] wcscat (in: _Dest=0x3e10670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0140.835] wcscat (in: _Dest=0x3e10670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*" [0140.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12e50 [0140.835] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80bb8 [0143.728] wcscmp (_String1=".", _String2=".") returned 0 [0143.729] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.106] wcscmp (_String1="..", _String2=".") returned 1 [0144.106] wcscmp (_String1="..", _String2="..") returned 0 [0144.106] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e616400, ftCreationTime.dwHighDateTime=0x1bd5e49, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e616400, ftLastWriteTime.dwHighDateTime=0x1bd5e49, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0144.106] wcscmp (_String1="BD10253_.GIF", _String2=".") returned 1 [0144.107] wcscmp (_String1="BD10253_.GIF", _String2="..") returned 1 [0144.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30648 [0144.107] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0144.107] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0144.107] wcscat (in: _Dest=0x3e30648, _Source="BD10253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" [0153.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0153.181] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3211400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3211400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0153.181] wcscmp (_String1="BD10254_.GIF", _String2=".") returned 1 [0153.181] wcscmp (_String1="BD10254_.GIF", _String2="..") returned 1 [0153.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30cd0 [0153.181] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.181] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.181] wcscat (in: _Dest=0x3e30cd0, _Source="BD10254_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" [0153.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0153.182] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4524100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4524100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0153.182] wcscmp (_String1="BD10255_.GIF", _String2=".") returned 1 [0153.182] wcscmp (_String1="BD10255_.GIF", _String2="..") returned 1 [0153.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31650 [0153.182] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.182] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.182] wcscat (in: _Dest=0x3e31650, _Source="BD10255_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" [0153.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0153.184] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0153.184] wcscmp (_String1="BD10263_.GIF", _String2=".") returned 1 [0153.184] wcscmp (_String1="BD10263_.GIF", _String2="..") returned 1 [0153.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30ba0 [0153.184] wcscpy (in: _Dest=0x3e30ba0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.184] wcscat (in: _Dest=0x3e30ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.184] wcscat (in: _Dest=0x3e30ba0, _Source="BD10263_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" [0153.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0153.185] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0153.185] wcscmp (_String1="BD10264_.GIF", _String2=".") returned 1 [0153.185] wcscmp (_String1="BD10264_.GIF", _String2="..") returned 1 [0153.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32068 [0153.185] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.185] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.186] wcscat (in: _Dest=0x3e32068, _Source="BD10264_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" [0153.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0153.187] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0153.187] wcscmp (_String1="BD10265_.GIF", _String2=".") returned 1 [0153.187] wcscmp (_String1="BD10265_.GIF", _String2="..") returned 1 [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31358 [0153.187] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.187] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.187] wcscat (in: _Dest=0x3e31358, _Source="BD10265_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" [0153.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0153.189] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0153.189] wcscmp (_String1="BD10266_.GIF", _String2=".") returned 1 [0153.189] wcscmp (_String1="BD10266_.GIF", _String2="..") returned 1 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32198 [0153.189] wcscpy (in: _Dest=0x3e32198, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.189] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.189] wcscat (in: _Dest=0x3e32198, _Source="BD10266_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" [0153.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0153.190] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0153.190] wcscmp (_String1="BD10267_.GIF", _String2=".") returned 1 [0153.190] wcscmp (_String1="BD10267_.GIF", _String2="..") returned 1 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31520 [0153.190] wcscpy (in: _Dest=0x3e31520, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.190] wcscat (in: _Dest=0x3e31520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.190] wcscat (in: _Dest=0x3e31520, _Source="BD10267_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" [0153.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0153.192] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0153.192] wcscmp (_String1="BD10268_.GIF", _String2=".") returned 1 [0153.192] wcscmp (_String1="BD10268_.GIF", _String2="..") returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31948 [0153.192] wcscpy (in: _Dest=0x3e31948, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.192] wcscat (in: _Dest=0x3e31948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.192] wcscat (in: _Dest=0x3e31948, _Source="BD10268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" [0153.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0153.193] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0153.193] wcscmp (_String1="BD10297_.GIF", _String2=".") returned 1 [0153.193] wcscmp (_String1="BD10297_.GIF", _String2="..") returned 1 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e305b0 [0153.193] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.193] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.193] wcscat (in: _Dest=0x3e305b0, _Source="BD10297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" [0153.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0153.195] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0153.195] wcscmp (_String1="BD10298_.GIF", _String2=".") returned 1 [0153.195] wcscmp (_String1="BD10298_.GIF", _String2="..") returned 1 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30778 [0153.195] wcscpy (in: _Dest=0x3e30778, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.195] wcscat (in: _Dest=0x3e30778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.195] wcscat (in: _Dest=0x3e30778, _Source="BD10298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" [0153.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0153.196] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0153.196] wcscmp (_String1="BD10299_.GIF", _String2=".") returned 1 [0153.196] wcscmp (_String1="BD10299_.GIF", _String2="..") returned 1 [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e318b0 [0153.196] wcscpy (in: _Dest=0x3e318b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.196] wcscat (in: _Dest=0x3e318b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.196] wcscat (in: _Dest=0x3e318b0, _Source="BD10299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" [0153.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e318b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0153.198] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0153.198] wcscmp (_String1="BD10300_.GIF", _String2=".") returned 1 [0153.198] wcscmp (_String1="BD10300_.GIF", _String2="..") returned 1 [0153.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31488 [0153.198] wcscpy (in: _Dest=0x3e31488, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.198] wcscat (in: _Dest=0x3e31488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.198] wcscat (in: _Dest=0x3e31488, _Source="BD10300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" [0153.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0153.199] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0153.199] wcscmp (_String1="BD10301_.GIF", _String2=".") returned 1 [0153.199] wcscmp (_String1="BD10301_.GIF", _String2="..") returned 1 [0153.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e316e8 [0153.199] wcscpy (in: _Dest=0x3e316e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.199] wcscat (in: _Dest=0x3e316e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.199] wcscat (in: _Dest=0x3e316e8, _Source="BD10301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" [0153.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e316e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0153.201] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fca800, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fca800, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0153.201] wcscmp (_String1="BD10302_.GIF", _String2=".") returned 1 [0153.201] wcscmp (_String1="BD10302_.GIF", _String2="..") returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30f30 [0153.201] wcscpy (in: _Dest=0x3e30f30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.201] wcscat (in: _Dest=0x3e30f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.201] wcscat (in: _Dest=0x3e30f30, _Source="BD10302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" [0153.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0153.202] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0153.202] wcscmp (_String1="BD10335_.GIF", _String2=".") returned 1 [0153.202] wcscmp (_String1="BD10335_.GIF", _String2="..") returned 1 [0153.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31a78 [0153.202] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.202] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.202] wcscat (in: _Dest=0x3e31a78, _Source="BD10335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" [0153.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0153.203] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0153.203] wcscmp (_String1="BD10336_.GIF", _String2=".") returned 1 [0153.203] wcscmp (_String1="BD10336_.GIF", _String2="..") returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958d88 [0153.203] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.203] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.204] wcscat (in: _Dest=0x6958d88, _Source="BD10336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" [0153.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0153.205] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0153.205] wcscmp (_String1="BD10337_.GIF", _String2=".") returned 1 [0153.205] wcscmp (_String1="BD10337_.GIF", _String2="..") returned 1 [0153.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958e20 [0153.205] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.205] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.205] wcscat (in: _Dest=0x6958e20, _Source="BD10337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" [0153.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0153.206] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d20da00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d20da00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0153.206] wcscmp (_String1="BD14513_.GIF", _String2=".") returned 1 [0153.206] wcscmp (_String1="BD14513_.GIF", _String2="..") returned 1 [0153.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958eb8 [0153.206] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.206] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.206] wcscat (in: _Dest=0x6958eb8, _Source="BD14513_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" [0153.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0153.208] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0153.208] wcscmp (_String1="BD14514_.GIF", _String2=".") returned 1 [0153.208] wcscmp (_String1="BD14514_.GIF", _String2="..") returned 1 [0153.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958f50 [0153.208] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.208] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.208] wcscat (in: _Dest=0x6958f50, _Source="BD14514_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" [0153.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0153.209] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0153.209] wcscmp (_String1="BD14515_.GIF", _String2=".") returned 1 [0153.209] wcscmp (_String1="BD14515_.GIF", _String2="..") returned 1 [0153.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958cf0 [0153.209] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.210] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.210] wcscat (in: _Dest=0x6958cf0, _Source="BD14515_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" [0153.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0153.211] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658ff500, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x658ff500, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0153.211] wcscmp (_String1="BD14528_.GIF", _String2=".") returned 1 [0153.211] wcscmp (_String1="BD14528_.GIF", _String2="..") returned 1 [0153.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958c58 [0153.211] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.211] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.211] wcscat (in: _Dest=0x6958c58, _Source="BD14528_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" [0153.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0153.212] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0153.212] wcscmp (_String1="BD14529_.GIF", _String2=".") returned 1 [0153.212] wcscmp (_String1="BD14529_.GIF", _String2="..") returned 1 [0153.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958bc0 [0153.213] wcscpy (in: _Dest=0x6958bc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.213] wcscat (in: _Dest=0x6958bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.213] wcscat (in: _Dest=0x6958bc0, _Source="BD14529_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" [0153.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0153.214] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0153.214] wcscmp (_String1="BD14530_.GIF", _String2=".") returned 1 [0153.214] wcscmp (_String1="BD14530_.GIF", _String2="..") returned 1 [0153.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958b28 [0153.214] wcscpy (in: _Dest=0x6958b28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.214] wcscat (in: _Dest=0x6958b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.214] wcscat (in: _Dest=0x6958b28, _Source="BD14530_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" [0153.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0153.215] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0153.215] wcscmp (_String1="BD14531_.GIF", _String2=".") returned 1 [0153.215] wcscmp (_String1="BD14531_.GIF", _String2="..") returned 1 [0153.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958a90 [0153.215] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.215] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.215] wcscat (in: _Dest=0x6958a90, _Source="BD14531_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" [0153.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0153.217] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0153.217] wcscmp (_String1="BD14532_.GIF", _String2=".") returned 1 [0153.217] wcscmp (_String1="BD14532_.GIF", _String2="..") returned 1 [0153.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0153.217] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.217] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.217] wcscat (in: _Dest=0x69589f8, _Source="BD14532_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" [0153.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0153.714] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0153.714] wcscmp (_String1="BD14533_.GIF", _String2=".") returned 1 [0153.715] wcscmp (_String1="BD14533_.GIF", _String2="..") returned 1 [0153.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c1fe0 [0153.715] wcscpy (in: _Dest=0x69c1fe0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.715] wcscat (in: _Dest=0x69c1fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.715] wcscat (in: _Dest=0x69c1fe0, _Source="BD14533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" [0155.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0155.535] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b05100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53b05100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0155.535] wcscmp (_String1="BD14565_.GIF", _String2=".") returned 1 [0155.535] wcscmp (_String1="BD14565_.GIF", _String2="..") returned 1 [0155.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959410 [0155.535] wcscpy (in: _Dest=0x6959410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.535] wcscat (in: _Dest=0x6959410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.535] wcscat (in: _Dest=0x6959410, _Source="BD14565_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" [0155.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0155.537] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0155.537] wcscmp (_String1="BD14578_.GIF", _String2=".") returned 1 [0155.537] wcscmp (_String1="BD14578_.GIF", _String2="..") returned 1 [0155.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69591b0 [0155.537] wcscpy (in: _Dest=0x69591b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.537] wcscat (in: _Dest=0x69591b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.537] wcscat (in: _Dest=0x69591b0, _Source="BD14578_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" [0155.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69591b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0155.538] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0155.538] wcscmp (_String1="BD14579_.GIF", _String2=".") returned 1 [0155.538] wcscmp (_String1="BD14579_.GIF", _String2="..") returned 1 [0155.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0155.538] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.539] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.539] wcscat (in: _Dest=0x6958110, _Source="BD14579_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" [0155.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0155.540] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0155.540] wcscmp (_String1="BD14580_.GIF", _String2=".") returned 1 [0155.540] wcscmp (_String1="BD14580_.GIF", _String2="..") returned 1 [0155.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0155.540] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.540] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.540] wcscat (in: _Dest=0x6958370, _Source="BD14580_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" [0155.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0155.541] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0155.541] wcscmp (_String1="BD14581_.GIF", _String2=".") returned 1 [0155.541] wcscmp (_String1="BD14581_.GIF", _String2="..") returned 1 [0155.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958668 [0155.542] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.542] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.542] wcscat (in: _Dest=0x6958668, _Source="BD14581_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" [0155.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0155.543] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0155.543] wcscmp (_String1="BD14582_.GIF", _String2=".") returned 1 [0155.543] wcscmp (_String1="BD14582_.GIF", _String2="..") returned 1 [0155.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959118 [0155.543] wcscpy (in: _Dest=0x6959118, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0155.543] wcscat (in: _Dest=0x6959118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0155.543] wcscat (in: _Dest=0x6959118, _Source="BD14582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" [0155.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0155.544] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ac400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x164ac400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0156.341] wcscmp (_String1="BD14583_.GIF", _String2=".") returned 1 [0156.341] wcscmp (_String1="BD14583_.GIF", _String2="..") returned 1 [0156.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c31b0 [0156.341] wcscpy (in: _Dest=0x69c31b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.341] wcscat (in: _Dest=0x69c31b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.341] wcscat (in: _Dest=0x69c31b0, _Source="BD14583_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" [0156.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c31b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0156.687] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0156.687] wcscmp (_String1="BD14654_.GIF", _String2=".") returned 1 [0156.687] wcscmp (_String1="BD14654_.GIF", _String2="..") returned 1 [0156.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3a00 [0156.687] wcscpy (in: _Dest=0x69c3a00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.687] wcscat (in: _Dest=0x69c3a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.687] wcscat (in: _Dest=0x69c3a00, _Source="BD14654_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" [0156.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0156.689] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0156.689] wcscmp (_String1="BD14655_.GIF", _String2=".") returned 1 [0156.689] wcscmp (_String1="BD14655_.GIF", _String2="..") returned 1 [0156.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3a98 [0156.689] wcscpy (in: _Dest=0x69c3a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.689] wcscat (in: _Dest=0x69c3a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.689] wcscat (in: _Dest=0x69c3a98, _Source="BD14655_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" [0156.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0156.714] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4b00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b0b4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0156.714] wcscmp (_String1="BD14656_.GIF", _String2=".") returned 1 [0156.714] wcscmp (_String1="BD14656_.GIF", _String2="..") returned 1 [0156.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3b30 [0156.714] wcscpy (in: _Dest=0x69c3b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.714] wcscat (in: _Dest=0x69c3b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.714] wcscat (in: _Dest=0x69c3b30, _Source="BD14656_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" [0156.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0156.715] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0156.716] wcscmp (_String1="BD14691_.GIF", _String2=".") returned 1 [0156.716] wcscmp (_String1="BD14691_.GIF", _String2="..") returned 1 [0156.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3bc8 [0156.716] wcscpy (in: _Dest=0x69c3bc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.716] wcscat (in: _Dest=0x69c3bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.716] wcscat (in: _Dest=0x69c3bc8, _Source="BD14691_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" [0156.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0156.717] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0156.717] wcscmp (_String1="BD14692_.GIF", _String2=".") returned 1 [0156.717] wcscmp (_String1="BD14692_.GIF", _String2="..") returned 1 [0156.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957fe0 [0156.717] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.717] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.717] wcscat (in: _Dest=0x6957fe0, _Source="BD14692_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" [0156.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0156.718] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0156.718] wcscmp (_String1="BD14693_.GIF", _String2=".") returned 1 [0156.718] wcscmp (_String1="BD14693_.GIF", _String2="..") returned 1 [0156.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0156.718] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.719] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.719] wcscat (in: _Dest=0x69589f8, _Source="BD14693_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" [0156.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0156.720] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0156.720] wcscmp (_String1="BD14752_.GIF", _String2=".") returned 1 [0156.720] wcscmp (_String1="BD14752_.GIF", _String2="..") returned 1 [0156.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69592e0 [0156.720] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.720] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.720] wcscat (in: _Dest=0x69592e0, _Source="BD14752_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" [0156.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0156.721] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0156.721] wcscmp (_String1="BD14753_.GIF", _String2=".") returned 1 [0156.721] wcscmp (_String1="BD14753_.GIF", _String2="..") returned 1 [0156.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959378 [0156.721] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.721] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.721] wcscat (in: _Dest=0x6959378, _Source="BD14753_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" [0156.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0156.723] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0156.723] wcscmp (_String1="BD14754_.GIF", _String2=".") returned 1 [0156.723] wcscmp (_String1="BD14754_.GIF", _String2="..") returned 1 [0156.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69585d0 [0156.723] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.723] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.723] wcscat (in: _Dest=0x69585d0, _Source="BD14754_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" [0156.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0156.724] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc507d700, ftCreationTime.dwHighDateTime=0x1bd4fa7, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc507d700, ftLastWriteTime.dwHighDateTime=0x1bd4fa7, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0156.724] wcscmp (_String1="BD14755_.GIF", _String2=".") returned 1 [0156.724] wcscmp (_String1="BD14755_.GIF", _String2="..") returned 1 [0156.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69588c8 [0156.724] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.724] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.724] wcscat (in: _Dest=0x69588c8, _Source="BD14755_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" [0156.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0156.725] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0156.726] wcscmp (_String1="BD14756_.GIF", _String2=".") returned 1 [0156.726] wcscmp (_String1="BD14756_.GIF", _String2="..") returned 1 [0156.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958408 [0156.726] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.726] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.726] wcscat (in: _Dest=0x6958408, _Source="BD14756_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" [0156.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0156.730] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0156.730] wcscmp (_String1="BD14757_.GIF", _String2=".") returned 1 [0156.730] wcscmp (_String1="BD14757_.GIF", _String2="..") returned 1 [0156.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0156.730] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.730] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.730] wcscat (in: _Dest=0x6957f48, _Source="BD14757_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" [0156.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0156.731] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0156.731] wcscmp (_String1="BD14790_.GIF", _String2=".") returned 1 [0156.731] wcscmp (_String1="BD14790_.GIF", _String2="..") returned 1 [0156.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69584a0 [0156.731] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.731] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.731] wcscat (in: _Dest=0x69584a0, _Source="BD14790_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" [0156.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0156.733] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0156.733] wcscmp (_String1="BD14791_.GIF", _String2=".") returned 1 [0156.733] wcscmp (_String1="BD14791_.GIF", _String2="..") returned 1 [0156.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d370 [0156.733] wcscpy (in: _Dest=0x32d370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.733] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.733] wcscat (in: _Dest=0x32d370, _Source="BD14791_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" [0156.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0156.734] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0156.734] wcscmp (_String1="BD14792_.GIF", _String2=".") returned 1 [0156.734] wcscmp (_String1="BD14792_.GIF", _String2="..") returned 1 [0156.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d4a0 [0156.734] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.734] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.734] wcscat (in: _Dest=0x32d4a0, _Source="BD14792_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" [0156.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0156.736] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0156.736] wcscmp (_String1="BD14793_.GIF", _String2=".") returned 1 [0156.736] wcscmp (_String1="BD14793_.GIF", _String2="..") returned 1 [0156.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0156.736] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.736] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.736] wcscat (in: _Dest=0x32d668, _Source="BD14793_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" [0156.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0156.737] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0156.737] wcscmp (_String1="BD14794_.GIF", _String2=".") returned 1 [0156.737] wcscmp (_String1="BD14794_.GIF", _String2="..") returned 1 [0156.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0156.737] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.737] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.737] wcscat (in: _Dest=0x32c660, _Source="BD14794_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" [0156.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0156.738] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0156.739] wcscmp (_String1="BD14795_.GIF", _String2=".") returned 1 [0156.739] wcscmp (_String1="BD14795_.GIF", _String2="..") returned 1 [0156.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0156.739] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.739] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.739] wcscat (in: _Dest=0x32d408, _Source="BD14795_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" [0156.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0156.740] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0156.740] wcscmp (_String1="BD14828_.GIF", _String2=".") returned 1 [0156.740] wcscmp (_String1="BD14828_.GIF", _String2="..") returned 1 [0156.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bce0 [0156.740] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.740] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.740] wcscat (in: _Dest=0x32bce0, _Source="BD14828_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" [0156.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0156.742] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0156.742] wcscmp (_String1="BD14829_.GIF", _String2=".") returned 1 [0156.742] wcscmp (_String1="BD14829_.GIF", _String2="..") returned 1 [0156.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0156.742] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.742] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.742] wcscat (in: _Dest=0x32bd78, _Source="BD14829_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" [0156.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0156.743] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0156.743] wcscmp (_String1="BD14830_.GIF", _String2=".") returned 1 [0156.743] wcscmp (_String1="BD14830_.GIF", _String2="..") returned 1 [0156.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817ce8 [0156.743] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.743] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.743] wcscat (in: _Dest=0x6817ce8, _Source="BD14830_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" [0156.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0156.745] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0156.745] wcscmp (_String1="BD14831_.GIF", _String2=".") returned 1 [0156.745] wcscmp (_String1="BD14831_.GIF", _String2="..") returned 1 [0156.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817d80 [0156.745] wcscpy (in: _Dest=0x6817d80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.745] wcscat (in: _Dest=0x6817d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.745] wcscat (in: _Dest=0x6817d80, _Source="BD14831_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" [0156.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0156.746] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0156.746] wcscmp (_String1="BD14832_.GIF", _String2=".") returned 1 [0156.746] wcscmp (_String1="BD14832_.GIF", _String2="..") returned 1 [0156.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817e18 [0156.746] wcscpy (in: _Dest=0x6817e18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.747] wcscat (in: _Dest=0x6817e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.747] wcscat (in: _Dest=0x6817e18, _Source="BD14832_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" [0156.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0156.748] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0156.748] wcscmp (_String1="BD14833_.GIF", _String2=".") returned 1 [0156.748] wcscmp (_String1="BD14833_.GIF", _String2="..") returned 1 [0156.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817eb0 [0156.748] wcscpy (in: _Dest=0x6817eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.748] wcscat (in: _Dest=0x6817eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.748] wcscat (in: _Dest=0x6817eb0, _Source="BD14833_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" [0156.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0156.749] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccbb500, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaccbb500, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0156.749] wcscmp (_String1="BD14866_.GIF", _String2=".") returned 1 [0156.749] wcscmp (_String1="BD14866_.GIF", _String2="..") returned 1 [0156.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817f48 [0156.749] wcscpy (in: _Dest=0x6817f48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.749] wcscat (in: _Dest=0x6817f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.749] wcscat (in: _Dest=0x6817f48, _Source="BD14866_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" [0156.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0156.751] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0156.751] wcscmp (_String1="BD14867_.GIF", _String2=".") returned 1 [0156.751] wcscmp (_String1="BD14867_.GIF", _String2="..") returned 1 [0156.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817fe0 [0156.751] wcscpy (in: _Dest=0x6817fe0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0156.751] wcscat (in: _Dest=0x6817fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0156.751] wcscat (in: _Dest=0x6817fe0, _Source="BD14867_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" [0156.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0157.454] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0157.455] wcscmp (_String1="BD14868_.GIF", _String2=".") returned 1 [0157.455] wcscmp (_String1="BD14868_.GIF", _String2="..") returned 1 [0157.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819708 [0157.455] wcscpy (in: _Dest=0x6819708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0157.455] wcscat (in: _Dest=0x6819708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0157.455] wcscat (in: _Dest=0x6819708, _Source="BD14868_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" [0161.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0161.301] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0161.301] wcscmp (_String1="BD14869_.GIF", _String2=".") returned 1 [0161.301] wcscmp (_String1="BD14869_.GIF", _String2="..") returned 1 [0161.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818bc0 [0161.301] wcscpy (in: _Dest=0x6818bc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.301] wcscat (in: _Dest=0x6818bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.301] wcscat (in: _Dest=0x6818bc0, _Source="BD14869_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" [0161.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0161.302] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0161.303] wcscmp (_String1="BD14870_.GIF", _String2=".") returned 1 [0161.303] wcscmp (_String1="BD14870_.GIF", _String2="..") returned 1 [0161.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818668 [0161.303] wcscpy (in: _Dest=0x6818668, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.303] wcscat (in: _Dest=0x6818668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.303] wcscat (in: _Dest=0x6818668, _Source="BD14870_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" [0161.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0161.304] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0161.304] wcscmp (_String1="BD14871_.GIF", _String2=".") returned 1 [0161.304] wcscmp (_String1="BD14871_.GIF", _String2="..") returned 1 [0161.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818700 [0161.304] wcscpy (in: _Dest=0x6818700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.304] wcscat (in: _Dest=0x6818700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.304] wcscat (in: _Dest=0x6818700, _Source="BD14871_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" [0161.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0161.305] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f3000, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16f3000, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0161.305] wcscmp (_String1="BD14980_.GIF", _String2=".") returned 1 [0161.306] wcscmp (_String1="BD14980_.GIF", _String2="..") returned 1 [0161.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818798 [0161.306] wcscpy (in: _Dest=0x6818798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.306] wcscat (in: _Dest=0x6818798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.306] wcscat (in: _Dest=0x6818798, _Source="BD14980_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" [0161.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0161.307] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a05d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a05d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0161.307] wcscmp (_String1="BD14981_.GIF", _String2=".") returned 1 [0161.307] wcscmp (_String1="BD14981_.GIF", _String2="..") returned 1 [0161.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818830 [0161.307] wcscpy (in: _Dest=0x6818830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.307] wcscat (in: _Dest=0x6818830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.307] wcscat (in: _Dest=0x6818830, _Source="BD14981_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" [0161.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0161.309] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa26700, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5aa26700, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0161.309] wcscmp (_String1="BD14982_.GIF", _String2=".") returned 1 [0161.309] wcscmp (_String1="BD14982_.GIF", _String2="..") returned 1 [0161.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68188c8 [0161.309] wcscpy (in: _Dest=0x68188c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.309] wcscat (in: _Dest=0x68188c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.309] wcscat (in: _Dest=0x68188c8, _Source="BD14982_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" [0161.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68188c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0161.310] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59713a00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59713a00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0161.312] wcscmp (_String1="BD14983_.GIF", _String2=".") returned 1 [0161.312] wcscmp (_String1="BD14983_.GIF", _String2="..") returned 1 [0161.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818960 [0161.312] wcscpy (in: _Dest=0x6818960, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0161.312] wcscat (in: _Dest=0x6818960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0161.312] wcscat (in: _Dest=0x6818960, _Source="BD14983_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" [0163.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0163.343] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58400d00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58400d00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0163.343] wcscmp (_String1="BD14984_.GIF", _String2=".") returned 1 [0163.343] wcscmp (_String1="BD14984_.GIF", _String2="..") returned 1 [0163.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819708 [0163.344] wcscpy (in: _Dest=0x6819708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.344] wcscat (in: _Dest=0x6819708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.344] wcscat (in: _Dest=0x6819708, _Source="BD14984_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" [0163.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0163.344] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570ee000, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x570ee000, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0163.345] wcscmp (_String1="BD14985_.GIF", _String2=".") returned 1 [0163.345] wcscmp (_String1="BD14985_.GIF", _String2="..") returned 1 [0163.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818830 [0163.345] wcscpy (in: _Dest=0x6818830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.345] wcscat (in: _Dest=0x6818830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.345] wcscat (in: _Dest=0x6818830, _Source="BD14985_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" [0163.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0163.346] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a2000, ftCreationTime.dwHighDateTime=0x1bd5f25, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec5a2000, ftLastWriteTime.dwHighDateTime=0x1bd5f25, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0163.346] wcscmp (_String1="BD15018_.GIF", _String2=".") returned 1 [0163.346] wcscmp (_String1="BD15018_.GIF", _String2="..") returned 1 [0163.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818a90 [0163.346] wcscpy (in: _Dest=0x6818a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.346] wcscat (in: _Dest=0x6818a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.346] wcscat (in: _Dest=0x6818a90, _Source="BD15018_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" [0163.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0163.347] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ee7900, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10ee7900, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0163.347] wcscmp (_String1="BD15019_.GIF", _String2=".") returned 1 [0163.347] wcscmp (_String1="BD15019_.GIF", _String2="..") returned 1 [0163.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819670 [0163.347] wcscpy (in: _Dest=0x6819670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.347] wcscat (in: _Dest=0x6819670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.347] wcscat (in: _Dest=0x6819670, _Source="BD15019_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" [0163.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0163.348] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1911bc00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1911bc00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0163.348] wcscmp (_String1="BD15020_.GIF", _String2=".") returned 1 [0163.348] wcscmp (_String1="BD15020_.GIF", _String2="..") returned 1 [0163.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68195d8 [0163.348] wcscpy (in: _Dest=0x68195d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.348] wcscat (in: _Dest=0x68195d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.348] wcscat (in: _Dest=0x68195d8, _Source="BD15020_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" [0163.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68195d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0163.349] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17e08f00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17e08f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0163.349] wcscmp (_String1="BD15021_.GIF", _String2=".") returned 1 [0163.350] wcscmp (_String1="BD15021_.GIF", _String2="..") returned 1 [0163.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819540 [0163.350] wcscpy (in: _Dest=0x6819540, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.350] wcscat (in: _Dest=0x6819540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.350] wcscat (in: _Dest=0x6819540, _Source="BD15021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" [0163.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0163.351] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16af6200, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16af6200, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0163.351] wcscmp (_String1="BD15022_.GIF", _String2=".") returned 1 [0163.351] wcscmp (_String1="BD15022_.GIF", _String2="..") returned 1 [0163.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817e18 [0163.351] wcscpy (in: _Dest=0x6817e18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.351] wcscat (in: _Dest=0x6817e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.351] wcscat (in: _Dest=0x6817e18, _Source="BD15022_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" [0163.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0163.352] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157e3500, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x157e3500, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0163.352] wcscmp (_String1="BD15023_.GIF", _String2=".") returned 1 [0163.352] wcscmp (_String1="BD15023_.GIF", _String2="..") returned 1 [0163.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817f48 [0163.352] wcscpy (in: _Dest=0x6817f48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.352] wcscat (in: _Dest=0x6817f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.352] wcscat (in: _Dest=0x6817f48, _Source="BD15023_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" [0163.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0163.353] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0163.353] wcscmp (_String1="BD15056_.GIF", _String2=".") returned 1 [0163.353] wcscmp (_String1="BD15056_.GIF", _String2="..") returned 1 [0163.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817ce8 [0163.353] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.353] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.353] wcscat (in: _Dest=0x6817ce8, _Source="BD15056_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" [0163.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0163.355] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0163.355] wcscmp (_String1="BD15057_.GIF", _String2=".") returned 1 [0163.355] wcscmp (_String1="BD15057_.GIF", _String2="..") returned 1 [0163.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817d80 [0163.355] wcscpy (in: _Dest=0x6817d80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.355] wcscat (in: _Dest=0x6817d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.355] wcscat (in: _Dest=0x6817d80, _Source="BD15057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" [0163.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0163.356] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c598400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c598400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15058_.GIF", cAlternateFileName="")) returned 1 [0163.356] wcscmp (_String1="BD15058_.GIF", _String2=".") returned 1 [0163.356] wcscmp (_String1="BD15058_.GIF", _String2="..") returned 1 [0163.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817eb0 [0163.356] wcscpy (in: _Dest=0x6817eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.356] wcscat (in: _Dest=0x6817eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.356] wcscat (in: _Dest=0x6817eb0, _Source="BD15058_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" [0163.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0163.357] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d09b00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc6d09b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15059_.GIF", cAlternateFileName="")) returned 1 [0163.358] wcscmp (_String1="BD15059_.GIF", _String2=".") returned 1 [0163.358] wcscmp (_String1="BD15059_.GIF", _String2="..") returned 1 [0163.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6817fe0 [0163.358] wcscpy (in: _Dest=0x6817fe0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.358] wcscat (in: _Dest=0x6817fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.358] wcscat (in: _Dest=0x6817fe0, _Source="BD15059_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" [0163.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6817fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0163.359] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59f6e00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59f6e00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15060_.GIF", cAlternateFileName="")) returned 1 [0163.359] wcscmp (_String1="BD15060_.GIF", _String2=".") returned 1 [0163.359] wcscmp (_String1="BD15060_.GIF", _String2="..") returned 1 [0163.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819a98 [0163.359] wcscpy (in: _Dest=0x6819a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.359] wcscat (in: _Dest=0x6819a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.359] wcscat (in: _Dest=0x6819a98, _Source="BD15060_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" [0163.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0163.360] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46e4100, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46e4100, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15061_.GIF", cAlternateFileName="")) returned 1 [0163.360] wcscmp (_String1="BD15061_.GIF", _String2=".") returned 1 [0163.360] wcscmp (_String1="BD15061_.GIF", _String2="..") returned 1 [0163.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819b30 [0163.360] wcscpy (in: _Dest=0x6819b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.360] wcscat (in: _Dest=0x6819b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.360] wcscat (in: _Dest=0x6819b30, _Source="BD15061_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" [0163.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0163.361] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e17e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54e17e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15132_.GIF", cAlternateFileName="")) returned 1 [0163.361] wcscmp (_String1="BD15132_.GIF", _String2=".") returned 1 [0163.361] wcscmp (_String1="BD15132_.GIF", _String2="..") returned 1 [0163.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819bc8 [0163.362] wcscpy (in: _Dest=0x6819bc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.362] wcscat (in: _Dest=0x6819bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.362] wcscat (in: _Dest=0x6819bc8, _Source="BD15132_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" [0163.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0163.363] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15133_.GIF", cAlternateFileName="")) returned 1 [0163.363] wcscmp (_String1="BD15133_.GIF", _String2=".") returned 1 [0163.363] wcscmp (_String1="BD15133_.GIF", _String2="..") returned 1 [0163.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958798 [0163.363] wcscpy (in: _Dest=0x6958798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.363] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.363] wcscat (in: _Dest=0x6958798, _Source="BD15133_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" [0163.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0163.364] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15134_.GIF", cAlternateFileName="")) returned 1 [0163.364] wcscmp (_String1="BD15134_.GIF", _String2=".") returned 1 [0163.364] wcscmp (_String1="BD15134_.GIF", _String2="..") returned 1 [0163.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957e18 [0163.364] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.364] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.364] wcscat (in: _Dest=0x6957e18, _Source="BD15134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" [0163.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0163.365] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15135_.GIF", cAlternateFileName="")) returned 1 [0163.365] wcscmp (_String1="BD15135_.GIF", _String2=".") returned 1 [0163.365] wcscmp (_String1="BD15135_.GIF", _String2="..") returned 1 [0163.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959708 [0163.366] wcscpy (in: _Dest=0x6959708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.366] wcscat (in: _Dest=0x6959708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.366] wcscat (in: _Dest=0x6959708, _Source="BD15135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" [0163.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0163.367] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5743d800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5743d800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15136_.GIF", cAlternateFileName="")) returned 1 [0163.367] wcscmp (_String1="BD15136_.GIF", _String2=".") returned 1 [0163.367] wcscmp (_String1="BD15136_.GIF", _String2="..") returned 1 [0163.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959670 [0163.367] wcscpy (in: _Dest=0x6959670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.367] wcscat (in: _Dest=0x6959670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.367] wcscat (in: _Dest=0x6959670, _Source="BD15136_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" [0163.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0163.368] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15168_.GIF", cAlternateFileName="")) returned 1 [0163.368] wcscmp (_String1="BD15168_.GIF", _String2=".") returned 1 [0163.368] wcscmp (_String1="BD15168_.GIF", _String2="..") returned 1 [0163.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69597a0 [0163.369] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.369] wcscat (in: _Dest=0x69597a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.369] wcscat (in: _Dest=0x69597a0, _Source="BD15168_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" [0163.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69597a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0163.370] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15169_.GIF", cAlternateFileName="")) returned 1 [0163.370] wcscmp (_String1="BD15169_.GIF", _String2=".") returned 1 [0163.370] wcscmp (_String1="BD15169_.GIF", _String2="..") returned 1 [0163.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69595d8 [0163.370] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.370] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.370] wcscat (in: _Dest=0x69595d8, _Source="BD15169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" [0163.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0163.371] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15170_.GIF", cAlternateFileName="")) returned 1 [0163.371] wcscmp (_String1="BD15170_.GIF", _String2=".") returned 1 [0163.371] wcscmp (_String1="BD15170_.GIF", _String2="..") returned 1 [0163.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958538 [0163.371] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.371] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.372] wcscat (in: _Dest=0x6958538, _Source="BD15170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" [0163.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0163.373] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8900, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3b8900, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15171_.GIF", cAlternateFileName="")) returned 1 [0163.373] wcscmp (_String1="BD15171_.GIF", _String2=".") returned 1 [0163.373] wcscmp (_String1="BD15171_.GIF", _String2="..") returned 1 [0163.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959838 [0163.373] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.373] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.373] wcscat (in: _Dest=0x6959838, _Source="BD15171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" [0163.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0163.374] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15172_.GIF", cAlternateFileName="")) returned 1 [0163.374] wcscmp (_String1="BD15172_.GIF", _String2=".") returned 1 [0163.374] wcscmp (_String1="BD15172_.GIF", _String2="..") returned 1 [0163.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69598d0 [0163.374] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.374] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.374] wcscat (in: _Dest=0x69598d0, _Source="BD15172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" [0163.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0163.375] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd92f00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd92f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15173_.GIF", cAlternateFileName="")) returned 1 [0163.375] wcscmp (_String1="BD15173_.GIF", _String2=".") returned 1 [0163.375] wcscmp (_String1="BD15173_.GIF", _String2="..") returned 1 [0163.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959968 [0163.375] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.375] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.376] wcscat (in: _Dest=0x6959968, _Source="BD15173_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" [0163.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0163.377] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907c4800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x907c4800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15272_.GIF", cAlternateFileName="")) returned 1 [0163.377] wcscmp (_String1="BD15272_.GIF", _String2=".") returned 1 [0163.377] wcscmp (_String1="BD15272_.GIF", _String2="..") returned 1 [0163.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a00 [0163.377] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.377] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.377] wcscat (in: _Dest=0x6959a00, _Source="BD15272_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" [0163.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0163.378] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ad7500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x91ad7500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15273_.GIF", cAlternateFileName="")) returned 1 [0163.378] wcscmp (_String1="BD15273_.GIF", _String2=".") returned 1 [0163.378] wcscmp (_String1="BD15273_.GIF", _String2="..") returned 1 [0163.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a98 [0163.378] wcscpy (in: _Dest=0x6959a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.378] wcscat (in: _Dest=0x6959a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.378] wcscat (in: _Dest=0x6959a98, _Source="BD15273_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" [0163.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0163.379] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ecd8500, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ecd8500, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15274_.GIF", cAlternateFileName="")) returned 1 [0163.379] wcscmp (_String1="BD15274_.GIF", _String2=".") returned 1 [0163.379] wcscmp (_String1="BD15274_.GIF", _String2="..") returned 1 [0163.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959b30 [0163.379] wcscpy (in: _Dest=0x6959b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.379] wcscat (in: _Dest=0x6959b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.379] wcscat (in: _Dest=0x6959b30, _Source="BD15274_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" [0163.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0163.380] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6b2b00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5c6b2b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15275_.GIF", cAlternateFileName="")) returned 1 [0163.380] wcscmp (_String1="BD15275_.GIF", _String2=".") returned 1 [0163.380] wcscmp (_String1="BD15275_.GIF", _String2="..") returned 1 [0163.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959bc8 [0163.381] wcscpy (in: _Dest=0x6959bc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0163.381] wcscat (in: _Dest=0x6959bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0163.381] wcscat (in: _Dest=0x6959bc8, _Source="BD15275_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" [0163.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0164.155] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d7a400, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58d7a400, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15276_.GIF", cAlternateFileName="")) returned 1 [0164.155] wcscmp (_String1="BD15276_.GIF", _String2=".") returned 1 [0164.155] wcscmp (_String1="BD15276_.GIF", _String2="..") returned 1 [0164.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68189f8 [0164.156] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0164.156] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0164.156] wcscat (in: _Dest=0x68189f8, _Source="BD15276_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" [0172.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif")) returned 0x20 [0172.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0172.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.710] GetLastError () returned 0x5 [0172.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0172.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 [0172.710] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a67700, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57a67700, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15277_.GIF", cAlternateFileName="")) returned 1 [0172.710] wcscmp (_String1="BD15277_.GIF", _String2=".") returned 1 [0172.710] wcscmp (_String1="BD15277_.GIF", _String2="..") returned 1 [0172.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68189f8 [0172.710] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.710] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.710] wcscat (in: _Dest=0x68189f8, _Source="BD15277_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" [0172.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif")) returned 0x20 [0172.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0172.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.711] GetLastError () returned 0x5 [0172.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0172.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 [0172.711] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd76def00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd76def00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21294_.GIF", cAlternateFileName="")) returned 1 [0172.711] wcscmp (_String1="BD21294_.GIF", _String2=".") returned 1 [0172.711] wcscmp (_String1="BD21294_.GIF", _String2="..") returned 1 [0172.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68189f8 [0172.711] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.711] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.711] wcscat (in: _Dest=0x68189f8, _Source="BD21294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" [0172.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif")) returned 0x20 [0172.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0172.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.712] GetLastError () returned 0x5 [0172.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0172.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 [0172.712] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89f1c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd89f1c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21295_.GIF", cAlternateFileName="")) returned 1 [0172.712] wcscmp (_String1="BD21295_.GIF", _String2=".") returned 1 [0172.712] wcscmp (_String1="BD21295_.GIF", _String2="..") returned 1 [0172.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68189f8 [0172.712] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.712] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.712] wcscat (in: _Dest=0x68189f8, _Source="BD21295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" [0172.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif")) returned 0x20 [0172.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0172.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.713] GetLastError () returned 0x5 [0172.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0172.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 [0172.713] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb017600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdb017600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21296_.GIF", cAlternateFileName="")) returned 1 [0174.079] wcscmp (_String1="BD21296_.GIF", _String2=".") returned 1 [0174.079] wcscmp (_String1="BD21296_.GIF", _String2="..") returned 1 [0174.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958a90 [0174.079] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.079] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.079] wcscat (in: _Dest=0x6958a90, _Source="BD21296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" [0174.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0174.881] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d04900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9d04900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21297_.GIF", cAlternateFileName="")) returned 1 [0174.881] wcscmp (_String1="BD21297_.GIF", _String2=".") returned 1 [0174.881] wcscmp (_String1="BD21297_.GIF", _String2="..") returned 1 [0174.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69592e0 [0174.882] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.882] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.882] wcscat (in: _Dest=0x69592e0, _Source="BD21297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" [0174.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0174.883] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc62a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfc62a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21298_.GIF", cAlternateFileName="")) returned 1 [0174.883] wcscmp (_String1="BD21298_.GIF", _String2=".") returned 1 [0174.883] wcscmp (_String1="BD21298_.GIF", _String2="..") returned 1 [0174.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0174.883] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.883] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.883] wcscat (in: _Dest=0x69589f8, _Source="BD21298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" [0174.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0174.885] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde94fd00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde94fd00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21299_.GIF", cAlternateFileName="")) returned 1 [0174.885] wcscmp (_String1="BD21299_.GIF", _String2=".") returned 1 [0174.885] wcscmp (_String1="BD21299_.GIF", _String2="..") returned 1 [0174.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69585d0 [0174.885] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.885] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.885] wcscat (in: _Dest=0x69585d0, _Source="BD21299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" [0174.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0174.887] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd63d000, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd63d000, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21300_.GIF", cAlternateFileName="")) returned 1 [0174.887] wcscmp (_String1="BD21300_.GIF", _String2=".") returned 1 [0174.887] wcscmp (_String1="BD21300_.GIF", _String2="..") returned 1 [0174.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69584a0 [0174.887] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.888] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.888] wcscat (in: _Dest=0x69584a0, _Source="BD21300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" [0174.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0174.889] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ed3800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe6ed3800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21301_.GIF", cAlternateFileName="")) returned 1 [0174.889] wcscmp (_String1="BD21301_.GIF", _String2=".") returned 1 [0174.889] wcscmp (_String1="BD21301_.GIF", _String2="..") returned 1 [0174.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69588c8 [0174.889] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.889] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.889] wcscat (in: _Dest=0x69588c8, _Source="BD21301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" [0174.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0174.891] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5bc0b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5bc0b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21302_.GIF", cAlternateFileName="")) returned 1 [0174.891] wcscmp (_String1="BD21302_.GIF", _String2=".") returned 1 [0174.891] wcscmp (_String1="BD21302_.GIF", _String2="..") returned 1 [0174.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958c58 [0174.891] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.891] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.891] wcscat (in: _Dest=0x6958c58, _Source="BD21302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" [0174.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0174.892] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2288400, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2288400, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21304_.GIF", cAlternateFileName="")) returned 1 [0174.892] wcscmp (_String1="BD21304_.GIF", _String2=".") returned 1 [0174.892] wcscmp (_String1="BD21304_.GIF", _String2="..") returned 1 [0174.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69598d0 [0174.892] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.893] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.893] wcscat (in: _Dest=0x69598d0, _Source="BD21304_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" [0174.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0174.894] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f75700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0f75700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21306_.GIF", cAlternateFileName="")) returned 1 [0174.894] wcscmp (_String1="BD21306_.GIF", _String2=".") returned 1 [0174.894] wcscmp (_String1="BD21306_.GIF", _String2="..") returned 1 [0174.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959838 [0174.894] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.894] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.894] wcscat (in: _Dest=0x6959838, _Source="BD21306_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" [0174.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0174.895] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63cc200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd63cc200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21308_.GIF", cAlternateFileName="")) returned 1 [0174.895] wcscmp (_String1="BD21308_.GIF", _String2=".") returned 1 [0174.895] wcscmp (_String1="BD21308_.GIF", _String2="..") returned 1 [0174.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958538 [0174.896] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.896] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.896] wcscat (in: _Dest=0x6958538, _Source="BD21308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" [0174.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0174.897] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3da6800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3da6800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21310_.GIF", cAlternateFileName="")) returned 1 [0174.897] wcscmp (_String1="BD21310_.GIF", _String2=".") returned 1 [0174.897] wcscmp (_String1="BD21310_.GIF", _String2="..") returned 1 [0174.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69595d8 [0174.897] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.897] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.897] wcscat (in: _Dest=0x69595d8, _Source="BD21310_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" [0174.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0174.898] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1780e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1780e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21312_.GIF", cAlternateFileName="")) returned 1 [0174.898] wcscmp (_String1="BD21312_.GIF", _String2=".") returned 1 [0174.898] wcscmp (_String1="BD21312_.GIF", _String2="..") returned 1 [0174.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958eb8 [0174.899] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.899] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.899] wcscat (in: _Dest=0x6958eb8, _Source="BD21312_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" [0174.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0174.900] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde48700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcde48700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21314_.GIF", cAlternateFileName="")) returned 1 [0174.900] wcscmp (_String1="BD21314_.GIF", _String2=".") returned 1 [0174.900] wcscmp (_String1="BD21314_.GIF", _String2="..") returned 1 [0174.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958d88 [0174.900] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.900] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.900] wcscat (in: _Dest=0x6958d88, _Source="BD21314_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" [0174.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0174.902] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91fd300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc91fd300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21316_.GIF", cAlternateFileName="")) returned 1 [0174.902] wcscmp (_String1="BD21316_.GIF", _String2=".") returned 1 [0174.902] wcscmp (_String1="BD21316_.GIF", _String2="..") returned 1 [0174.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959968 [0174.902] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.902] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.902] wcscat (in: _Dest=0x6959968, _Source="BD21316_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" [0174.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0174.903] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f8c500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21327_.GIF", cAlternateFileName="")) returned 1 [0174.903] wcscmp (_String1="BD21327_.GIF", _String2=".") returned 1 [0174.903] wcscmp (_String1="BD21327_.GIF", _String2="..") returned 1 [0174.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958e20 [0174.903] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.903] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.903] wcscat (in: _Dest=0x6958e20, _Source="BD21327_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" [0174.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0174.905] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe653e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe653e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21329_.GIF", cAlternateFileName="")) returned 1 [0174.905] wcscmp (_String1="BD21329_.GIF", _String2=".") returned 1 [0174.905] wcscmp (_String1="BD21329_.GIF", _String2="..") returned 1 [0174.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958cf0 [0174.905] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.905] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.905] wcscat (in: _Dest=0x6958cf0, _Source="BD21329_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" [0174.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0174.906] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad1b700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbad1b700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21331_.GIF", cAlternateFileName="")) returned 1 [0174.906] wcscmp (_String1="BD21331_.GIF", _String2=".") returned 1 [0174.906] wcscmp (_String1="BD21331_.GIF", _String2="..") returned 1 [0174.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958f50 [0174.906] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.906] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.906] wcscat (in: _Dest=0x6958f50, _Source="BD21331_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" [0174.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0174.908] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60d0300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb60d0300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21333_.GIF", cAlternateFileName="")) returned 1 [0174.908] wcscmp (_String1="BD21333_.GIF", _String2=".") returned 1 [0174.908] wcscmp (_String1="BD21333_.GIF", _String2="..") returned 1 [0174.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0174.908] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.908] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.908] wcscat (in: _Dest=0x69582d8, _Source="BD21333_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" [0174.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0174.909] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2797c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2797c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21335_.GIF", cAlternateFileName="")) returned 1 [0174.909] wcscmp (_String1="BD21335_.GIF", _String2=".") returned 1 [0174.909] wcscmp (_String1="BD21335_.GIF", _String2="..") returned 1 [0174.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958240 [0174.909] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.910] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.910] wcscat (in: _Dest=0x6958240, _Source="BD21335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" [0174.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0174.911] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1484f00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1484f00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21337_.GIF", cAlternateFileName="")) returned 1 [0174.911] wcscmp (_String1="BD21337_.GIF", _String2=".") returned 1 [0174.911] wcscmp (_String1="BD21337_.GIF", _String2="..") returned 1 [0174.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69597a0 [0174.911] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.911] wcscat (in: _Dest=0x69597a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.911] wcscat (in: _Dest=0x69597a0, _Source="BD21337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" [0174.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69597a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0174.912] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee5f500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaee5f500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21339_.GIF", cAlternateFileName="")) returned 1 [0174.912] wcscmp (_String1="BD21339_.GIF", _String2=".") returned 1 [0174.912] wcscmp (_String1="BD21339_.GIF", _String2="..") returned 1 [0174.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959670 [0174.913] wcscpy (in: _Dest=0x6959670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.913] wcscat (in: _Dest=0x6959670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.913] wcscat (in: _Dest=0x6959670, _Source="BD21339_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" [0174.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0174.914] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21342_.GIF", cAlternateFileName="")) returned 1 [0174.914] wcscmp (_String1="BD21342_.GIF", _String2=".") returned 1 [0174.914] wcscmp (_String1="BD21342_.GIF", _String2="..") returned 1 [0174.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959708 [0174.914] wcscpy (in: _Dest=0x6959708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.914] wcscat (in: _Dest=0x6959708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.914] wcscat (in: _Dest=0x6959708, _Source="BD21342_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" [0174.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0174.915] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21343_.GIF", cAlternateFileName="")) returned 1 [0174.915] wcscmp (_String1="BD21343_.GIF", _String2=".") returned 1 [0174.915] wcscmp (_String1="BD21343_.GIF", _String2="..") returned 1 [0174.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957e18 [0174.915] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.915] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.915] wcscat (in: _Dest=0x6957e18, _Source="BD21343_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" [0174.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0174.917] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2367b300, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2367b300, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21344_.GIF", cAlternateFileName="")) returned 1 [0174.917] wcscmp (_String1="BD21344_.GIF", _String2=".") returned 1 [0174.917] wcscmp (_String1="BD21344_.GIF", _String2="..") returned 1 [0174.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959b30 [0174.917] wcscpy (in: _Dest=0x6959b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.917] wcscat (in: _Dest=0x6959b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.917] wcscat (in: _Dest=0x6959b30, _Source="BD21344_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" [0174.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0174.918] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21364_.GIF", cAlternateFileName="")) returned 1 [0174.918] wcscmp (_String1="BD21364_.GIF", _String2=".") returned 1 [0174.918] wcscmp (_String1="BD21364_.GIF", _String2="..") returned 1 [0174.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a98 [0174.918] wcscpy (in: _Dest=0x6959a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.918] wcscat (in: _Dest=0x6959a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.918] wcscat (in: _Dest=0x6959a98, _Source="BD21364_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" [0174.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0175.480] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21365_.GIF", cAlternateFileName="")) returned 1 [0175.480] wcscmp (_String1="BD21365_.GIF", _String2=".") returned 1 [0175.480] wcscmp (_String1="BD21365_.GIF", _String2="..") returned 1 [0175.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958798 [0175.480] wcscpy (in: _Dest=0x6958798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.480] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.480] wcscat (in: _Dest=0x6958798, _Source="BD21365_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" [0178.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0178.841] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21366_.GIF", cAlternateFileName="")) returned 1 [0178.841] wcscmp (_String1="BD21366_.GIF", _String2=".") returned 1 [0178.841] wcscmp (_String1="BD21366_.GIF", _String2="..") returned 1 [0178.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69581a8 [0178.841] wcscpy (in: _Dest=0x69581a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.841] wcscat (in: _Dest=0x69581a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.841] wcscat (in: _Dest=0x69581a8, _Source="BD21366_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" [0178.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0178.842] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b6800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e0b6800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21375_.GIF", cAlternateFileName="")) returned 1 [0178.842] wcscmp (_String1="BD21375_.GIF", _String2=".") returned 1 [0178.842] wcscmp (_String1="BD21375_.GIF", _String2="..") returned 1 [0178.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958830 [0178.842] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.842] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.842] wcscat (in: _Dest=0x6958830, _Source="BD21375_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" [0178.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0178.843] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21376_.GIF", cAlternateFileName="")) returned 1 [0178.843] wcscmp (_String1="BD21376_.GIF", _String2=".") returned 1 [0178.843] wcscmp (_String1="BD21376_.GIF", _String2="..") returned 1 [0178.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958078 [0178.843] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.843] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.843] wcscat (in: _Dest=0x6958078, _Source="BD21376_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" [0178.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0178.844] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21377_.GIF", cAlternateFileName="")) returned 1 [0178.844] wcscmp (_String1="BD21377_.GIF", _String2=".") returned 1 [0178.844] wcscmp (_String1="BD21377_.GIF", _String2="..") returned 1 [0178.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958a90 [0178.844] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.844] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.844] wcscat (in: _Dest=0x6958a90, _Source="BD21377_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" [0178.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0178.847] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c48f00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47c48f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21398_.GIF", cAlternateFileName="")) returned 1 [0178.847] wcscmp (_String1="BD21398_.GIF", _String2=".") returned 1 [0178.847] wcscmp (_String1="BD21398_.GIF", _String2="..") returned 1 [0178.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958538 [0178.847] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.848] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.848] wcscat (in: _Dest=0x6958538, _Source="BD21398_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" [0178.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0178.849] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21399_.GIF", cAlternateFileName="")) returned 1 [0178.849] wcscmp (_String1="BD21399_.GIF", _String2=".") returned 1 [0178.849] wcscmp (_String1="BD21399_.GIF", _String2="..") returned 1 [0178.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959968 [0178.849] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.849] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.849] wcscat (in: _Dest=0x6959968, _Source="BD21399_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" [0178.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0178.850] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21400_.GIF", cAlternateFileName="")) returned 1 [0178.850] wcscmp (_String1="BD21400_.GIF", _String2=".") returned 1 [0178.850] wcscmp (_String1="BD21400_.GIF", _String2="..") returned 1 [0178.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69597a0 [0178.850] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.851] wcscat (in: _Dest=0x69597a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.851] wcscat (in: _Dest=0x69597a0, _Source="BD21400_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" [0178.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69597a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0178.852] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21421_.GIF", cAlternateFileName="")) returned 1 [0178.852] wcscmp (_String1="BD21421_.GIF", _String2=".") returned 1 [0178.852] wcscmp (_String1="BD21421_.GIF", _String2="..") returned 1 [0178.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959708 [0178.852] wcscpy (in: _Dest=0x6959708, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.852] wcscat (in: _Dest=0x6959708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.852] wcscat (in: _Dest=0x6959708, _Source="BD21421_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" [0178.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0178.853] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21422_.GIF", cAlternateFileName="")) returned 1 [0178.855] wcscmp (_String1="BD21422_.GIF", _String2=".") returned 1 [0178.855] wcscmp (_String1="BD21422_.GIF", _String2="..") returned 1 [0178.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959b30 [0178.855] wcscpy (in: _Dest=0x6959b30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.855] wcscat (in: _Dest=0x6959b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.855] wcscat (in: _Dest=0x6959b30, _Source="BD21422_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" [0180.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0180.676] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12cbe00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa12cbe00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21423_.GIF", cAlternateFileName="")) returned 1 [0180.676] wcscmp (_String1="BD21423_.GIF", _String2=".") returned 1 [0180.676] wcscmp (_String1="BD21423_.GIF", _String2="..") returned 1 [0180.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69598d0 [0180.676] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.676] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.676] wcscat (in: _Dest=0x69598d0, _Source="BD21423_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" [0180.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0180.677] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21433_.GIF", cAlternateFileName="")) returned 1 [0180.677] wcscmp (_String1="BD21433_.GIF", _String2=".") returned 1 [0180.677] wcscmp (_String1="BD21433_.GIF", _String2="..") returned 1 [0180.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959838 [0180.677] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.677] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.677] wcscat (in: _Dest=0x6959838, _Source="BD21433_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" [0180.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0180.678] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21434_.GIF", cAlternateFileName="")) returned 1 [0180.678] wcscmp (_String1="BD21434_.GIF", _String2=".") returned 1 [0180.678] wcscmp (_String1="BD21434_.GIF", _String2="..") returned 1 [0180.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69595d8 [0180.679] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.679] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.679] wcscat (in: _Dest=0x69595d8, _Source="BD21434_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" [0180.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0180.680] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c6700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x282c6700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21435_.GIF", cAlternateFileName="")) returned 1 [0180.680] wcscmp (_String1="BD21435_.GIF", _String2=".") returned 1 [0180.680] wcscmp (_String1="BD21435_.GIF", _String2="..") returned 1 [0180.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958eb8 [0180.680] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.680] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.680] wcscat (in: _Dest=0x6958eb8, _Source="BD21435_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" [0180.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0180.681] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac8d900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeac8d900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21480_.GIF", cAlternateFileName="")) returned 1 [0180.681] wcscmp (_String1="BD21480_.GIF", _String2=".") returned 1 [0180.681] wcscmp (_String1="BD21480_.GIF", _String2="..") returned 1 [0180.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958d88 [0180.681] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.681] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.681] wcscat (in: _Dest=0x6958d88, _Source="BD21480_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" [0180.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0180.682] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21481_.GIF", cAlternateFileName="")) returned 1 [0180.682] wcscmp (_String1="BD21481_.GIF", _String2=".") returned 1 [0180.682] wcscmp (_String1="BD21481_.GIF", _String2="..") returned 1 [0180.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958e20 [0180.682] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.682] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.682] wcscat (in: _Dest=0x6958e20, _Source="BD21481_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" [0180.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0180.684] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21482_.GIF", cAlternateFileName="")) returned 1 [0180.684] wcscmp (_String1="BD21482_.GIF", _String2=".") returned 1 [0180.684] wcscmp (_String1="BD21482_.GIF", _String2="..") returned 1 [0180.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958cf0 [0180.684] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.684] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.684] wcscat (in: _Dest=0x6958cf0, _Source="BD21482_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" [0180.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0180.685] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25327600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25327600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21503_.GIF", cAlternateFileName="")) returned 1 [0180.685] wcscmp (_String1="BD21503_.GIF", _String2=".") returned 1 [0180.685] wcscmp (_String1="BD21503_.GIF", _String2="..") returned 1 [0180.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958f50 [0180.685] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.685] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.685] wcscat (in: _Dest=0x6958f50, _Source="BD21503_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" [0180.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0180.686] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21504_.GIF", cAlternateFileName="")) returned 1 [0180.686] wcscmp (_String1="BD21504_.GIF", _String2=".") returned 1 [0180.686] wcscmp (_String1="BD21504_.GIF", _String2="..") returned 1 [0180.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0180.686] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.687] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.687] wcscat (in: _Dest=0x69582d8, _Source="BD21504_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" [0180.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0180.688] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21505_.GIF", cAlternateFileName="")) returned 1 [0180.688] wcscmp (_String1="BD21505_.GIF", _String2=".") returned 1 [0180.688] wcscmp (_String1="BD21505_.GIF", _String2="..") returned 1 [0180.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958240 [0180.688] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.688] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.688] wcscat (in: _Dest=0x6958240, _Source="BD21505_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" [0180.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0180.689] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeb9d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eeb9d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21518_.GIF", cAlternateFileName="")) returned 1 [0180.689] wcscmp (_String1="BD21518_.GIF", _String2=".") returned 1 [0180.689] wcscmp (_String1="BD21518_.GIF", _String2="..") returned 1 [0180.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959670 [0180.689] wcscpy (in: _Dest=0x6959670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.689] wcscat (in: _Dest=0x6959670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.689] wcscat (in: _Dest=0x6959670, _Source="BD21518_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" [0180.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0180.690] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21519_.GIF", cAlternateFileName="")) returned 1 [0180.690] wcscmp (_String1="BD21519_.GIF", _String2=".") returned 1 [0180.690] wcscmp (_String1="BD21519_.GIF", _String2="..") returned 1 [0180.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a98 [0180.690] wcscpy (in: _Dest=0x6959a98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.690] wcscat (in: _Dest=0x6959a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.691] wcscat (in: _Dest=0x6959a98, _Source="BD21519_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" [0180.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0180.691] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21520_.GIF", cAlternateFileName="")) returned 1 [0180.692] wcscmp (_String1="BD21520_.GIF", _String2=".") returned 1 [0180.692] wcscmp (_String1="BD21520_.GIF", _String2="..") returned 1 [0180.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69584a0 [0180.692] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.692] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.692] wcscat (in: _Dest=0x69584a0, _Source="BD21520_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" [0180.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0180.693] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21533_.GIF", cAlternateFileName="")) returned 1 [0180.693] wcscmp (_String1="BD21533_.GIF", _String2=".") returned 1 [0180.693] wcscmp (_String1="BD21533_.GIF", _String2="..") returned 1 [0180.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959bc8 [0180.693] wcscpy (in: _Dest=0x6959bc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.693] wcscat (in: _Dest=0x6959bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.693] wcscat (in: _Dest=0x6959bc8, _Source="BD21533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" [0180.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0180.712] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21534_.GIF", cAlternateFileName="")) returned 1 [0180.713] wcscmp (_String1="BD21534_.GIF", _String2=".") returned 1 [0180.713] wcscmp (_String1="BD21534_.GIF", _String2="..") returned 1 [0180.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958a90 [0180.713] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.713] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.713] wcscat (in: _Dest=0x6958a90, _Source="BD21534_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" [0180.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0180.715] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21535_.GIF", cAlternateFileName="")) returned 1 [0180.715] wcscmp (_String1="BD21535_.GIF", _String2=".") returned 1 [0180.715] wcscmp (_String1="BD21535_.GIF", _String2="..") returned 1 [0180.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958798 [0180.715] wcscpy (in: _Dest=0x6958798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.715] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.715] wcscat (in: _Dest=0x6958798, _Source="BD21535_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" [0180.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0180.716] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481cb800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x481cb800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS.DLL", cAlternateFileName="")) returned 1 [0180.716] wcscmp (_String1="BULLETS.DLL", _String2=".") returned 1 [0180.716] wcscmp (_String1="BULLETS.DLL", _String2="..") returned 1 [0180.716] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58283a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58283a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115834.GIF", cAlternateFileName="")) returned 1 [0180.716] wcscmp (_String1="J0115834.GIF", _String2=".") returned 1 [0180.716] wcscmp (_String1="J0115834.GIF", _String2="..") returned 1 [0180.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958fe8 [0180.717] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.717] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.717] wcscat (in: _Dest=0x6958fe8, _Source="J0115834.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" [0180.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0180.718] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115835.GIF", cAlternateFileName="")) returned 1 [0180.718] wcscmp (_String1="J0115835.GIF", _String2=".") returned 1 [0180.718] wcscmp (_String1="J0115835.GIF", _String2="..") returned 1 [0180.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958b28 [0180.718] wcscpy (in: _Dest=0x6958b28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.718] wcscat (in: _Dest=0x6958b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.718] wcscat (in: _Dest=0x6958b28, _Source="J0115835.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" [0180.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0180.719] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115836.GIF", cAlternateFileName="")) returned 1 [0180.719] wcscmp (_String1="J0115836.GIF", _String2=".") returned 1 [0180.719] wcscmp (_String1="J0115836.GIF", _String2="..") returned 1 [0180.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958bc0 [0180.719] wcscpy (in: _Dest=0x6958bc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.719] wcscat (in: _Dest=0x6958bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.719] wcscat (in: _Dest=0x6958bc0, _Source="J0115836.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" [0180.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0180.720] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb09300, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdeb09300, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115839.GIF", cAlternateFileName="")) returned 1 [0180.721] wcscmp (_String1="J0115839.GIF", _String2=".") returned 1 [0180.721] wcscmp (_String1="J0115839.GIF", _String2="..") returned 1 [0180.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959410 [0180.721] wcscpy (in: _Dest=0x6959410, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.721] wcscat (in: _Dest=0x6959410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.721] wcscat (in: _Dest=0x6959410, _Source="J0115839.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" [0180.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0180.722] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115840.GIF", cAlternateFileName="")) returned 1 [0180.722] wcscmp (_String1="J0115840.GIF", _String2=".") returned 1 [0180.722] wcscmp (_String1="J0115840.GIF", _String2="..") returned 1 [0180.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69591b0 [0180.722] wcscpy (in: _Dest=0x69591b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.722] wcscat (in: _Dest=0x69591b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.722] wcscat (in: _Dest=0x69591b0, _Source="J0115840.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" [0180.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69591b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0180.723] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115841.GIF", cAlternateFileName="")) returned 1 [0180.723] wcscmp (_String1="J0115841.GIF", _String2=".") returned 1 [0180.723] wcscmp (_String1="J0115841.GIF", _String2="..") returned 1 [0180.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959118 [0180.723] wcscpy (in: _Dest=0x6959118, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.723] wcscat (in: _Dest=0x6959118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.723] wcscat (in: _Dest=0x6959118, _Source="J0115841.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" [0180.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0180.724] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115842.GIF", cAlternateFileName="")) returned 1 [0180.724] wcscmp (_String1="J0115842.GIF", _String2=".") returned 1 [0180.724] wcscmp (_String1="J0115842.GIF", _String2="..") returned 1 [0180.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0180.725] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.725] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.725] wcscat (in: _Dest=0x6958110, _Source="J0115842.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" [0180.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0180.848] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115843.GIF", cAlternateFileName="")) returned 1 [0180.848] wcscmp (_String1="J0115843.GIF", _String2=".") returned 1 [0180.848] wcscmp (_String1="J0115843.GIF", _String2="..") returned 1 [0180.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0180.848] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.848] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.848] wcscat (in: _Dest=0x6957eb0, _Source="J0115843.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" [0180.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0180.849] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe112ed00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe112ed00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115844.GIF", cAlternateFileName="")) returned 1 [0180.849] wcscmp (_String1="J0115844.GIF", _String2=".") returned 1 [0180.849] wcscmp (_String1="J0115844.GIF", _String2="..") returned 1 [0180.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959080 [0180.850] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.850] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.850] wcscat (in: _Dest=0x6959080, _Source="J0115844.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" [0180.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0180.851] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115863.GIF", cAlternateFileName="")) returned 1 [0180.851] wcscmp (_String1="J0115863.GIF", _String2=".") returned 1 [0180.851] wcscmp (_String1="J0115863.GIF", _String2="..") returned 1 [0180.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958960 [0180.852] wcscpy (in: _Dest=0x6958960, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.852] wcscat (in: _Dest=0x6958960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.852] wcscat (in: _Dest=0x6958960, _Source="J0115863.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" [0180.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0180.853] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115864.GIF", cAlternateFileName="")) returned 1 [0180.853] wcscmp (_String1="J0115864.GIF", _String2=".") returned 1 [0180.853] wcscmp (_String1="J0115864.GIF", _String2="..") returned 1 [0180.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957ce8 [0180.854] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0180.854] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0180.854] wcscat (in: _Dest=0x6957ce8, _Source="J0115864.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" [0180.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0181.811] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115865.GIF", cAlternateFileName="")) returned 1 [0181.811] wcscmp (_String1="J0115865.GIF", _String2=".") returned 1 [0181.811] wcscmp (_String1="J0115865.GIF", _String2="..") returned 1 [0181.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69592e0 [0181.811] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0181.811] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0181.811] wcscat (in: _Dest=0x69592e0, _Source="J0115865.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" [0184.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0184.573] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115866.GIF", cAlternateFileName="")) returned 1 [0184.573] wcscmp (_String1="J0115866.GIF", _String2=".") returned 1 [0184.573] wcscmp (_String1="J0115866.GIF", _String2="..") returned 1 [0184.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959080 [0184.573] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0184.573] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0184.573] wcscat (in: _Dest=0x6959080, _Source="J0115866.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" [0184.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0184.574] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115867.GIF", cAlternateFileName="")) returned 1 [0184.574] wcscmp (_String1="J0115867.GIF", _String2=".") returned 1 [0184.574] wcscmp (_String1="J0115867.GIF", _String2="..") returned 1 [0184.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0184.574] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0184.575] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0184.575] wcscat (in: _Dest=0x6957eb0, _Source="J0115867.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" [0184.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0184.576] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 1 [0184.576] wcscmp (_String1="J0115868.GIF", _String2=".") returned 1 [0184.576] wcscmp (_String1="J0115868.GIF", _String2="..") returned 1 [0184.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0184.576] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0184.576] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0184.576] wcscat (in: _Dest=0x6958110, _Source="J0115868.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" [0184.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0184.577] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 0 [0184.577] FindClose (in: hFindFile=0x3e80bb8 | out: hFindFile=0x3e80bb8) returned 1 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12e50) returned 1 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 810 os_tid = 0x11e0 [0140.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f670 [0140.836] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0140.836] wcscat (in: _Dest=0x3e0f670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0140.836] wcscat (in: _Dest=0x3e0f670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*" [0140.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0140.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0141.474] wcscmp (_String1=".", _String2=".") returned 0 [0141.474] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.476] wcscmp (_String1="..", _String2=".") returned 1 [0141.476] wcscmp (_String1="..", _String2="..") returned 0 [0141.476] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30432a00, ftCreationTime.dwHighDateTime=0x1bd5f12, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x30432a00, ftLastWriteTime.dwHighDateTime=0x1bd5f12, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0141.476] wcscmp (_String1="BD10219_.GIF", _String2=".") returned 1 [0141.476] wcscmp (_String1="BD10219_.GIF", _String2="..") returned 1 [0141.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbbc8 [0141.476] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0141.476] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0141.476] wcscat (in: _Dest=0x66dbbc8, _Source="BD10219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" [0151.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0151.275] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0151.275] wcscmp (_String1="BD10256_.GIF", _String2=".") returned 1 [0151.275] wcscmp (_String1="BD10256_.GIF", _String2="..") returned 1 [0151.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcdc8 [0151.275] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.275] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.275] wcscat (in: _Dest=0x66dcdc8, _Source="BD10256_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" [0151.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0151.276] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0151.276] wcscmp (_String1="BD10289_.GIF", _String2=".") returned 1 [0151.277] wcscmp (_String1="BD10289_.GIF", _String2="..") returned 1 [0151.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0151.277] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.277] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.277] wcscat (in: _Dest=0x66db7d8, _Source="BD10289_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" [0151.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0151.278] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0151.278] wcscmp (_String1="BD10290_.GIF", _String2=".") returned 1 [0151.278] wcscmp (_String1="BD10290_.GIF", _String2="..") returned 1 [0151.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc438 [0151.278] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.278] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.278] wcscat (in: _Dest=0x66dc438, _Source="BD10290_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" [0151.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0151.279] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92dd500, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92dd500, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0151.279] wcscmp (_String1="BD10307_.GIF", _String2=".") returned 1 [0151.279] wcscmp (_String1="BD10307_.GIF", _String2="..") returned 1 [0151.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcf78 [0151.279] wcscpy (in: _Dest=0x66dcf78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.279] wcscat (in: _Dest=0x66dcf78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.279] wcscat (in: _Dest=0x66dcf78, _Source="BD10307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" [0151.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0151.280] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f0200, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5f0200, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0151.280] wcscmp (_String1="BD10308_.GIF", _String2=".") returned 1 [0151.280] wcscmp (_String1="BD10308_.GIF", _String2="..") returned 1 [0151.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db748 [0151.280] wcscpy (in: _Dest=0x66db748, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.280] wcscat (in: _Dest=0x66db748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.281] wcscat (in: _Dest=0x66db748, _Source="BD10308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" [0151.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0151.282] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddba900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfddba900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0151.282] wcscmp (_String1="BD10358_.GIF", _String2=".") returned 1 [0151.282] wcscmp (_String1="BD10358_.GIF", _String2="..") returned 1 [0151.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbaa8 [0151.282] wcscpy (in: _Dest=0x66dbaa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.282] wcscat (in: _Dest=0x66dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.282] wcscat (in: _Dest=0x66dbaa8, _Source="BD10358_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" [0151.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0151.284] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0151.284] wcscmp (_String1="BD14516_.GIF", _String2=".") returned 1 [0151.284] wcscmp (_String1="BD14516_.GIF", _String2="..") returned 1 [0151.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db8f8 [0151.284] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.284] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.284] wcscat (in: _Dest=0x66db8f8, _Source="BD14516_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" [0151.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0151.285] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0151.285] wcscmp (_String1="BD14538_.GIF", _String2=".") returned 1 [0151.285] wcscmp (_String1="BD14538_.GIF", _String2="..") returned 1 [0151.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0151.285] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.286] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.286] wcscat (in: _Dest=0x66dc288, _Source="BD14538_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" [0151.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0151.287] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0151.287] wcscmp (_String1="BD14539_.GIF", _String2=".") returned 1 [0151.287] wcscmp (_String1="BD14539_.GIF", _String2="..") returned 1 [0151.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc3a8 [0151.287] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.287] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.287] wcscat (in: _Dest=0x66dc3a8, _Source="BD14539_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" [0151.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0151.288] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0151.288] wcscmp (_String1="BD14594_.GIF", _String2=".") returned 1 [0151.288] wcscmp (_String1="BD14594_.GIF", _String2="..") returned 1 [0151.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd128 [0151.288] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.288] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.288] wcscat (in: _Dest=0x66dd128, _Source="BD14594_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" [0151.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0151.289] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0151.289] wcscmp (_String1="BD14595_.GIF", _String2=".") returned 1 [0151.289] wcscmp (_String1="BD14595_.GIF", _String2="..") returned 1 [0151.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0151.289] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.289] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.289] wcscat (in: _Dest=0x66dd1b8, _Source="BD14595_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" [0151.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0151.291] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53638600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53638600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0151.291] wcscmp (_String1="BD14677_.GIF", _String2=".") returned 1 [0151.291] wcscmp (_String1="BD14677_.GIF", _String2="..") returned 1 [0151.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0151.291] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.291] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.291] wcscat (in: _Dest=0x66dd248, _Source="BD14677_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" [0151.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0151.292] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0151.292] wcscmp (_String1="BD14710_.GIF", _String2=".") returned 1 [0151.292] wcscmp (_String1="BD14710_.GIF", _String2="..") returned 1 [0151.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0151.292] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.292] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.292] wcscat (in: _Dest=0x66dd2d8, _Source="BD14710_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" [0151.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0151.293] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0151.293] wcscmp (_String1="BD14711_.GIF", _String2=".") returned 1 [0151.293] wcscmp (_String1="BD14711_.GIF", _String2="..") returned 1 [0151.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd368 [0151.293] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.293] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.293] wcscat (in: _Dest=0x66dd368, _Source="BD14711_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" [0151.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0151.294] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0151.294] wcscmp (_String1="BD14768_.GIF", _String2=".") returned 1 [0151.294] wcscmp (_String1="BD14768_.GIF", _String2="..") returned 1 [0151.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3550e0 [0151.294] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.294] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.294] wcscat (in: _Dest=0x3550e0, _Source="BD14768_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" [0151.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0151.295] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0151.295] wcscmp (_String1="BD14769_.GIF", _String2=".") returned 1 [0151.295] wcscmp (_String1="BD14769_.GIF", _String2="..") returned 1 [0151.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0151.295] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.296] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.296] wcscat (in: _Dest=0x354ab0, _Source="BD14769_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" [0151.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0151.296] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0151.296] wcscmp (_String1="BD14800_.GIF", _String2=".") returned 1 [0151.296] wcscmp (_String1="BD14800_.GIF", _String2="..") returned 1 [0151.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354fc0 [0151.297] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.297] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.297] wcscat (in: _Dest=0x354fc0, _Source="BD14800_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" [0151.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0151.298] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0151.298] wcscmp (_String1="BD14801_.GIF", _String2=".") returned 1 [0151.298] wcscmp (_String1="BD14801_.GIF", _String2="..") returned 1 [0151.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355050 [0151.298] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.298] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.298] wcscat (in: _Dest=0x355050, _Source="BD14801_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" [0151.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0151.299] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0151.299] wcscmp (_String1="BD14844_.GIF", _String2=".") returned 1 [0151.299] wcscmp (_String1="BD14844_.GIF", _String2="..") returned 1 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354f30 [0151.299] wcscpy (in: _Dest=0x354f30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.299] wcscat (in: _Dest=0x354f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.299] wcscat (in: _Dest=0x354f30, _Source="BD14844_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" [0151.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0151.300] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0151.300] wcscmp (_String1="BD14845_.GIF", _String2=".") returned 1 [0151.300] wcscmp (_String1="BD14845_.GIF", _String2="..") returned 1 [0151.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3555f0 [0151.300] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.301] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.301] wcscat (in: _Dest=0x3555f0, _Source="BD14845_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" [0151.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0151.302] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0151.302] wcscmp (_String1="BD14882_.GIF", _String2=".") returned 1 [0151.302] wcscmp (_String1="BD14882_.GIF", _String2="..") returned 1 [0151.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0151.302] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.302] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.302] wcscat (in: _Dest=0x355290, _Source="BD14882_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" [0151.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0151.303] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0151.303] wcscmp (_String1="BD14883_.GIF", _String2=".") returned 1 [0151.303] wcscmp (_String1="BD14883_.GIF", _String2="..") returned 1 [0151.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x356370 [0151.303] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.303] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.303] wcscat (in: _Dest=0x356370, _Source="BD14883_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" [0151.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0151.304] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0151.304] wcscmp (_String1="BD14996_.GIF", _String2=".") returned 1 [0151.304] wcscmp (_String1="BD14996_.GIF", _String2="..") returned 1 [0151.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2498 [0151.304] wcscpy (in: _Dest=0x3df2498, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.304] wcscat (in: _Dest=0x3df2498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.304] wcscat (in: _Dest=0x3df2498, _Source="BD14996_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" [0151.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0151.305] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0151.305] wcscmp (_String1="BD14997_.GIF", _String2=".") returned 1 [0151.305] wcscmp (_String1="BD14997_.GIF", _String2="..") returned 1 [0151.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df22e8 [0151.305] wcscpy (in: _Dest=0x3df22e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.305] wcscat (in: _Dest=0x3df22e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.305] wcscat (in: _Dest=0x3df22e8, _Source="BD14997_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" [0151.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0151.722] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0151.722] wcscmp (_String1="BD15034_.GIF", _String2=".") returned 1 [0151.722] wcscmp (_String1="BD15034_.GIF", _String2="..") returned 1 [0151.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc798 [0151.722] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0151.722] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0151.722] wcscat (in: _Dest=0x66dc798, _Source="BD15034_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" [0154.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0154.812] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0154.812] wcscmp (_String1="BD15035_.GIF", _String2=".") returned 1 [0154.812] wcscmp (_String1="BD15035_.GIF", _String2="..") returned 1 [0154.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d718 [0154.812] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.813] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.813] wcscat (in: _Dest=0x674d718, _Source="BD15035_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" [0154.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0154.814] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x311e3800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x311e3800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0154.814] wcscmp (_String1="BD15072_.GIF", _String2=".") returned 1 [0154.814] wcscmp (_String1="BD15072_.GIF", _String2="..") returned 1 [0154.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d688 [0154.814] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.814] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.814] wcscat (in: _Dest=0x674d688, _Source="BD15072_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" [0154.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0154.815] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324f6500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x324f6500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0154.815] wcscmp (_String1="BD15073_.GIF", _String2=".") returned 1 [0154.815] wcscmp (_String1="BD15073_.GIF", _String2="..") returned 1 [0154.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d838 [0154.816] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.816] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.816] wcscat (in: _Dest=0x674d838, _Source="BD15073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" [0154.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0154.817] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0154.817] wcscmp (_String1="BD15155_.GIF", _String2=".") returned 1 [0154.817] wcscmp (_String1="BD15155_.GIF", _String2="..") returned 1 [0154.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d8c8 [0154.817] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.817] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.817] wcscat (in: _Dest=0x674d8c8, _Source="BD15155_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" [0154.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0154.818] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0154.818] wcscmp (_String1="BD15156_.GIF", _String2=".") returned 1 [0154.818] wcscmp (_String1="BD15156_.GIF", _String2="..") returned 1 [0154.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d958 [0154.819] wcscpy (in: _Dest=0x674d958, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.819] wcscat (in: _Dest=0x674d958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.819] wcscat (in: _Dest=0x674d958, _Source="BD15156_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" [0154.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0154.820] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0154.820] wcscmp (_String1="BD15184_.GIF", _String2=".") returned 1 [0154.820] wcscmp (_String1="BD15184_.GIF", _String2="..") returned 1 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d9e8 [0154.820] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.820] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.820] wcscat (in: _Dest=0x674d9e8, _Source="BD15184_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" [0154.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0154.821] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0154.821] wcscmp (_String1="BD15185_.GIF", _String2=".") returned 1 [0154.821] wcscmp (_String1="BD15185_.GIF", _String2="..") returned 1 [0154.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674da78 [0154.822] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.822] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.822] wcscat (in: _Dest=0x674da78, _Source="BD15185_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" [0154.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0154.823] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a22a00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41a22a00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0154.825] wcscmp (_String1="BD15301_.GIF", _String2=".") returned 1 [0154.825] wcscmp (_String1="BD15301_.GIF", _String2="..") returned 1 [0154.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674db08 [0154.825] wcscpy (in: _Dest=0x674db08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0154.825] wcscat (in: _Dest=0x674db08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0154.825] wcscat (in: _Dest=0x674db08, _Source="BD15301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" [0155.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0155.681] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c680a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9c680a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0155.681] wcscmp (_String1="BD15302_.GIF", _String2=".") returned 1 [0155.682] wcscmp (_String1="BD15302_.GIF", _String2="..") returned 1 [0155.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355200 [0155.682] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.682] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.682] wcscat (in: _Dest=0x355200, _Source="BD15302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" [0155.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0155.683] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe359b100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe359b100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0155.683] wcscmp (_String1="BD21303_.GIF", _String2=".") returned 1 [0155.683] wcscmp (_String1="BD21303_.GIF", _String2="..") returned 1 [0155.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3550e0 [0155.684] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.684] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.684] wcscat (in: _Dest=0x3550e0, _Source="BD21303_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" [0155.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0155.685] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8549eb00, ftCreationTime.dwHighDateTime=0x1bd4fb9, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8549eb00, ftLastWriteTime.dwHighDateTime=0x1bd4fb9, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0155.685] wcscmp (_String1="BD21305_.GIF", _String2=".") returned 1 [0155.685] wcscmp (_String1="BD21305_.GIF", _String2="..") returned 1 [0155.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354fc0 [0155.685] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.685] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.685] wcscat (in: _Dest=0x354fc0, _Source="BD21305_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" [0155.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0155.686] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744caa00, ftCreationTime.dwHighDateTime=0x1bd4fb8, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744caa00, ftLastWriteTime.dwHighDateTime=0x1bd4fb8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0155.686] wcscmp (_String1="BD21307_.GIF", _String2=".") returned 1 [0155.686] wcscmp (_String1="BD21307_.GIF", _String2="..") returned 1 [0155.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0155.687] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.687] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.687] wcscat (in: _Dest=0x354ab0, _Source="BD21307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" [0155.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0155.688] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb357300, ftCreationTime.dwHighDateTime=0x1bd4fb7, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb357300, ftLastWriteTime.dwHighDateTime=0x1bd4fb7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0155.688] wcscmp (_String1="BD21309_.GIF", _String2=".") returned 1 [0155.688] wcscmp (_String1="BD21309_.GIF", _String2="..") returned 1 [0155.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355050 [0155.688] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.688] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.688] wcscat (in: _Dest=0x355050, _Source="BD21309_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" [0155.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0155.690] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a93b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2a93b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0155.690] wcscmp (_String1="BD21311_.GIF", _String2=".") returned 1 [0155.690] wcscmp (_String1="BD21311_.GIF", _String2="..") returned 1 [0155.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354f30 [0155.690] wcscpy (in: _Dest=0x354f30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.690] wcscat (in: _Dest=0x354f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.690] wcscat (in: _Dest=0x354f30, _Source="BD21311_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" [0155.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0155.692] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd046e100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd046e100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0155.692] wcscmp (_String1="BD21313_.GIF", _String2=".") returned 1 [0155.692] wcscmp (_String1="BD21313_.GIF", _String2="..") returned 1 [0155.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3555f0 [0155.692] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.692] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.692] wcscat (in: _Dest=0x3555f0, _Source="BD21313_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" [0155.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0155.694] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb822d00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb822d00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0155.694] wcscmp (_String1="BD21315_.GIF", _String2=".") returned 1 [0155.694] wcscmp (_String1="BD21315_.GIF", _String2="..") returned 1 [0155.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x356370 [0155.694] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.694] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.694] wcscat (in: _Dest=0x356370, _Source="BD21315_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" [0155.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0155.695] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508b6300, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x508b6300, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0155.695] wcscmp (_String1="BD21318_.GIF", _String2=".") returned 1 [0155.695] wcscmp (_String1="BD21318_.GIF", _String2="..") returned 1 [0155.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0155.695] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.695] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.695] wcscat (in: _Dest=0x355290, _Source="BD21318_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" [0155.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0155.697] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c476600, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c476600, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0155.697] wcscmp (_String1="BD21319_.GIF", _String2=".") returned 1 [0155.697] wcscmp (_String1="BD21319_.GIF", _String2="..") returned 1 [0155.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354c60 [0155.697] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.697] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.697] wcscat (in: _Dest=0x354c60, _Source="BD21319_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" [0155.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0155.698] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc81d00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cc81d00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0155.698] wcscmp (_String1="BD21320_.GIF", _String2=".") returned 1 [0155.698] wcscmp (_String1="BD21320_.GIF", _String2="..") returned 1 [0155.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dc28 [0155.698] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.698] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.698] wcscat (in: _Dest=0x674dc28, _Source="BD21320_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" [0155.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0155.700] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae67a00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ae67a00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0155.700] wcscmp (_String1="BD21321_.GIF", _String2=".") returned 1 [0155.700] wcscmp (_String1="BD21321_.GIF", _String2="..") returned 1 [0155.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dcb8 [0155.700] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.700] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.700] wcscat (in: _Dest=0x674dcb8, _Source="BD21321_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" [0155.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0155.701] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4911b00, ftCreationTime.dwHighDateTime=0x1bd4fbb, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4911b00, ftLastWriteTime.dwHighDateTime=0x1bd4fbb, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0155.701] wcscmp (_String1="BD21322_.GIF", _String2=".") returned 1 [0155.702] wcscmp (_String1="BD21322_.GIF", _String2="..") returned 1 [0155.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dd48 [0155.702] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.702] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.702] wcscat (in: _Dest=0x674dd48, _Source="BD21322_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" [0155.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0155.703] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7eea600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7eea600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0155.703] wcscmp (_String1="BD21323_.GIF", _String2=".") returned 1 [0155.703] wcscmp (_String1="BD21323_.GIF", _String2="..") returned 1 [0155.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ddd8 [0155.703] wcscpy (in: _Dest=0x674ddd8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.703] wcscat (in: _Dest=0x674ddd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.703] wcscat (in: _Dest=0x674ddd8, _Source="BD21323_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" [0155.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ddd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0155.704] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58c4c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc58c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0155.704] wcscmp (_String1="BD21324_.GIF", _String2=".") returned 1 [0155.704] wcscmp (_String1="BD21324_.GIF", _String2="..") returned 1 [0155.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674de68 [0155.705] wcscpy (in: _Dest=0x674de68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.705] wcscat (in: _Dest=0x674de68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.705] wcscat (in: _Dest=0x674de68, _Source="BD21324_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" [0155.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0155.706] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc329f200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc329f200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0155.706] wcscmp (_String1="BD21325_.GIF", _String2=".") returned 1 [0155.706] wcscmp (_String1="BD21325_.GIF", _String2="..") returned 1 [0155.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674def8 [0155.706] wcscpy (in: _Dest=0x674def8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.706] wcscat (in: _Dest=0x674def8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.706] wcscat (in: _Dest=0x674def8, _Source="BD21325_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" [0155.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674def8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0155.708] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e36400, ftCreationTime.dwHighDateTime=0x1bd4fba, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2e36400, ftLastWriteTime.dwHighDateTime=0x1bd4fba, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0155.708] wcscmp (_String1="BD21326_.GIF", _String2=".") returned 1 [0155.708] wcscmp (_String1="BD21326_.GIF", _String2="..") returned 1 [0155.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674df88 [0155.708] wcscpy (in: _Dest=0x674df88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.708] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.708] wcscat (in: _Dest=0x674df88, _Source="BD21326_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" [0155.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0155.709] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf966b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf966b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0155.709] wcscmp (_String1="BD21328_.GIF", _String2=".") returned 1 [0155.709] wcscmp (_String1="BD21328_.GIF", _String2="..") returned 1 [0155.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e018 [0155.709] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.709] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.709] wcscat (in: _Dest=0x674e018, _Source="BD21328_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" [0155.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0155.711] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd341100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd341100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0155.711] wcscmp (_String1="BD21330_.GIF", _String2=".") returned 1 [0155.711] wcscmp (_String1="BD21330_.GIF", _String2="..") returned 1 [0155.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e0a8 [0155.711] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.711] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.711] wcscat (in: _Dest=0x674e0a8, _Source="BD21330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" [0155.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0155.712] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a08a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9a08a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0155.712] wcscmp (_String1="BD21332_.GIF", _String2=".") returned 1 [0155.712] wcscmp (_String1="BD21332_.GIF", _String2="..") returned 1 [0155.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e138 [0155.712] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.712] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.712] wcscat (in: _Dest=0x674e138, _Source="BD21332_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" [0155.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0155.713] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaa900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3aaa900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0155.717] wcscmp (_String1="BD21334_.GIF", _String2=".") returned 1 [0155.717] wcscmp (_String1="BD21334_.GIF", _String2="..") returned 1 [0155.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e1c8 [0155.717] wcscpy (in: _Dest=0x674e1c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.717] wcscat (in: _Dest=0x674e1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.717] wcscat (in: _Dest=0x674e1c8, _Source="BD21334_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" [0155.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0155.718] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a9e00, ftCreationTime.dwHighDateTime=0x1bd4fac, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd99a9e00, ftLastWriteTime.dwHighDateTime=0x1bd4fac, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0155.718] wcscmp (_String1="BD21336_.GIF", _String2=".") returned 1 [0155.718] wcscmp (_String1="BD21336_.GIF", _String2="..") returned 1 [0155.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e258 [0155.718] wcscpy (in: _Dest=0x674e258, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.718] wcscat (in: _Dest=0x674e258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.719] wcscat (in: _Dest=0x674e258, _Source="BD21336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" [0155.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0155.720] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0172200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0172200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0155.720] wcscmp (_String1="BD21338_.GIF", _String2=".") returned 1 [0155.720] wcscmp (_String1="BD21338_.GIF", _String2="..") returned 1 [0155.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e2e8 [0155.720] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.720] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.720] wcscat (in: _Dest=0x674e2e8, _Source="BD21338_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" [0155.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0155.721] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf885400, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf885400, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0155.721] wcscmp (_String1="BD21340_.GIF", _String2=".") returned 1 [0155.721] wcscmp (_String1="BD21340_.GIF", _String2="..") returned 1 [0155.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e378 [0155.721] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0155.721] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0155.721] wcscat (in: _Dest=0x674e378, _Source="BD21340_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" [0155.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0156.330] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdd7600, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cdd7600, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0156.330] wcscmp (_String1="BD21348_.GIF", _String2=".") returned 1 [0156.330] wcscmp (_String1="BD21348_.GIF", _String2="..") returned 1 [0156.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d7a8 [0156.331] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0156.331] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0156.331] wcscat (in: _Dest=0x674d7a8, _Source="BD21348_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" [0161.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0161.210] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe997ac00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe997ac00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0161.210] wcscmp (_String1="BD21370_.GIF", _String2=".") returned 1 [0161.210] wcscmp (_String1="BD21370_.GIF", _String2="..") returned 1 [0161.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db8f8 [0161.211] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.211] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.211] wcscat (in: _Dest=0x66db8f8, _Source="BD21370_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" [0161.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0161.212] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d01c00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22d01c00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0161.212] wcscmp (_String1="BD21390_.GIF", _String2=".") returned 1 [0161.212] wcscmp (_String1="BD21390_.GIF", _String2="..") returned 1 [0161.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db598 [0161.212] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.212] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.212] wcscat (in: _Dest=0x66db598, _Source="BD21390_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" [0161.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0161.213] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c894300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c894300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0161.213] wcscmp (_String1="BD21413_.GIF", _String2=".") returned 1 [0161.213] wcscmp (_String1="BD21413_.GIF", _String2="..") returned 1 [0161.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0161.213] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.214] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.214] wcscat (in: _Dest=0x66dc288, _Source="BD21413_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" [0161.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0161.215] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25deb00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa25deb00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0161.215] wcscmp (_String1="BD21427_.GIF", _String2=".") returned 1 [0161.215] wcscmp (_String1="BD21427_.GIF", _String2="..") returned 1 [0161.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbd78 [0161.215] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.215] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.216] wcscat (in: _Dest=0x66dbd78, _Source="BD21427_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" [0161.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0161.217] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf11b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cf11b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0161.217] wcscmp (_String1="BD21448_.GIF", _String2=".") returned 1 [0161.217] wcscmp (_String1="BD21448_.GIF", _String2="..") returned 1 [0161.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc3a8 [0161.217] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.217] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.217] wcscat (in: _Dest=0x66dc3a8, _Source="BD21448_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" [0161.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0161.218] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0beba00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf0beba00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0161.218] wcscmp (_String1="BD21495_.GIF", _String2=".") returned 1 [0161.218] wcscmp (_String1="BD21495_.GIF", _String2="..") returned 1 [0161.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbc58 [0161.218] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.218] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.218] wcscat (in: _Dest=0x66dbc58, _Source="BD21495_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" [0161.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0161.220] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c5fd00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28c5fd00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0161.220] wcscmp (_String1="BD21512_.GIF", _String2=".") returned 1 [0161.220] wcscmp (_String1="BD21512_.GIF", _String2="..") returned 1 [0161.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0161.220] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.221] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.221] wcscat (in: _Dest=0x66dbfb8, _Source="BD21512_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" [0161.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0161.223] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f2400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x527f2400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0161.223] wcscmp (_String1="BD21527_.GIF", _String2=".") returned 1 [0161.223] wcscmp (_String1="BD21527_.GIF", _String2="..") returned 1 [0161.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd098 [0161.223] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.223] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.223] wcscat (in: _Dest=0x66dd098, _Source="BD21527_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" [0161.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0161.224] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab62600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaab62600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0161.224] wcscmp (_String1="BD21548_.GIF", _String2=".") returned 1 [0161.224] wcscmp (_String1="BD21548_.GIF", _String2="..") returned 1 [0161.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcee8 [0161.224] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.224] wcscat (in: _Dest=0x66dcee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.224] wcscat (in: _Dest=0x66dcee8, _Source="BD21548_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" [0161.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0161.226] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0161.226] wcscmp (_String1="J0115855.GIF", _String2=".") returned 1 [0161.226] wcscmp (_String1="J0115855.GIF", _String2="..") returned 1 [0161.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dce58 [0161.226] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.226] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.226] wcscat (in: _Dest=0x66dce58, _Source="J0115855.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" [0161.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0161.227] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0161.227] wcscmp (_String1="J0115856.GIF", _String2=".") returned 1 [0161.227] wcscmp (_String1="J0115856.GIF", _String2="..") returned 1 [0161.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc798 [0161.228] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.228] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.228] wcscat (in: _Dest=0x66dc798, _Source="J0115856.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" [0161.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0161.229] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0161.229] wcscmp (_String1="J0115875.GIF", _String2=".") returned 1 [0161.229] wcscmp (_String1="J0115875.GIF", _String2="..") returned 1 [0161.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dca68 [0161.229] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.229] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.229] wcscat (in: _Dest=0x66dca68, _Source="J0115875.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" [0161.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0161.230] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0161.230] wcscmp (_String1="J0115876.GIF", _String2=".") returned 1 [0161.230] wcscmp (_String1="J0115876.GIF", _String2="..") returned 1 [0161.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc1f8 [0161.231] wcscpy (in: _Dest=0x66dc1f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0161.231] wcscat (in: _Dest=0x66dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0161.231] wcscat (in: _Dest=0x66dc1f8, _Source="J0115876.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" [0161.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0161.232] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0161.232] wcscmp (_String1="LINES.DLL", _String2=".") returned 1 [0161.232] wcscmp (_String1="LINES.DLL", _String2="..") returned 1 [0161.232] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0161.232] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f670) returned 1 [0161.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 Thread: id = 811 os_tid = 0x11e4 [0140.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw")) returned 0x20 [0141.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0141.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.477] GetLastError () returned 0x5 [0141.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0141.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 812 os_tid = 0x11e8 [0140.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\9byo.jpg")) returned 0x20 [0140.842] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg", dwFileAttributes=0x20) returned 1 [0140.843] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\9byo.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaec [0140.843] GetFileSizeEx (in: hFile=0xaec, lpFileSize=0x7f2fc0c | out: lpFileSize=0x7f2fc0c*=100128) returned 1 [0140.843] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x1871c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.843] ReadFile (in: hFile=0xaec, lpBuffer=0x7f2fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f2fbf8, lpOverlapped=0x0 | out: lpBuffer=0x7f2fbe8*, lpNumberOfBytesRead=0x7f2fbf8*=0x4, lpOverlapped=0x0) returned 1 [0140.845] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0140.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0140.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0140.845] NtQuerySystemTime (in: CurrentTime=0x7f2fb80 | out: CurrentTime=0x7f2fb80*=132482710495032000) returned 0x0 [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x6a999a8a [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x4f74f364 [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x5a8e95a [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x5fe27d [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x4d15f2d7 [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x29dd3487 [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x787ca133 [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x2b21110d [0140.845] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x63f91379 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x673c10ac [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x1c4239eb [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x10dd96af [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x48ab0d20 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x6888b587 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x506b6773 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x4b5c80a4 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x27657be7 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0xb184c8e [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x17257e90 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x357ed3a [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x110a91 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x54eb6623 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x76b34036 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x15916380 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x8991167 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x1474ec9b [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x15375c46 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x4e24aa4b [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x68eaebe7 [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x49d4e34a [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x1e020f3e [0140.846] RtlRandomEx (in: Seed=0x7f2fb78 | out: Seed=0x7f2fb78) returned 0x20eb440c [0140.856] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.856] ReadFile (in: hFile=0xaec, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0140.857] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e330a8 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0140.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0140.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330a8) returned 1 [0140.858] WriteFile (in: hFile=0xaec, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0141.479] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.479] ReadFile (in: hFile=0xaec, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.480] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e333c0 [0141.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0141.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0141.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0141.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0141.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0141.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0141.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 [0141.483] WriteFile (in: hFile=0xaec, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0141.853] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x14b20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.853] ReadFile (in: hFile=0xaec, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0141.853] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x14b20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a58 [0141.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0141.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0141.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0141.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0141.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0141.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0141.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0141.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0141.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a58) returned 1 [0141.854] WriteFile (in: hFile=0xaec, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f2fb80, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x7f2fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0142.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0142.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0142.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0142.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef41f0 [0142.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2cb0 [0142.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0142.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0142.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0142.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1768) returned 1 [0142.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce310 [0142.896] SetFilePointerEx (in: hFile=0xaec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.896] WriteFile (in: hFile=0xaec, lpBuffer=0x66ce310*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x7f2fc00, lpOverlapped=0x0 | out: lpBuffer=0x66ce310*, lpNumberOfBytesWritten=0x7f2fc00*=0x142, lpOverlapped=0x0) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2cb0) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0143.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0143.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0143.730] wcscpy (in: _Dest=0x332ce8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg" [0143.730] wcscat (in: _Dest=0x332ce8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg.ac3a86" [0143.730] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg.ac3a86", NtPathName=0x7f2fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\9ByO.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e47ec0 [0143.733] FlushFileBuffers (hFile=0xaec) returned 1 [0144.107] CloseHandle (hObject=0xaec) returned 1 [0147.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defb58 [0147.371] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0147.371] wcscat (in: _Dest=0x3defb58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0147.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0147.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 [0147.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 813 os_tid = 0x11ec [0140.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\a5khyo_1.bmp")) returned 0x20 [0140.860] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp", dwFileAttributes=0x20) returned 1 [0140.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\a5khyo_1.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0140.860] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0x95cf86c | out: lpFileSize=0x95cf86c*=22110) returned 1 [0140.861] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x565a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.861] ReadFile (in: hFile=0x1570, lpBuffer=0x95cf848, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95cf858, lpOverlapped=0x0 | out: lpBuffer=0x95cf848*, lpNumberOfBytesRead=0x95cf858*=0x4, lpOverlapped=0x0) returned 1 [0140.920] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0140.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0140.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0140.920] NtQuerySystemTime (in: CurrentTime=0x95cf7e0 | out: CurrentTime=0x95cf7e0*=132482710495812000) returned 0x0 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x7132f5e3 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x84cccbc [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x437b68e6 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x29c2237f [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x4ab8d9f8 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x1332201 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x110a91 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x635a68ac [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x2f7536e7 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x54bc86d0 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x1ea4a137 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x7691a028 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x3deb74e6 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x59b4f121 [0140.920] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x5dad6f87 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x310365c1 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x4e89d085 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x6a679bb1 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0xa445825 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x1f56ce5f [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x61ba0a6d [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x467ea666 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x351a0e81 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x337ef431 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x6baff7f2 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0xc7de81c [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x105980d0 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x2313f0cc [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x68679152 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x3948fcbc [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x3bb7ab62 [0140.921] RtlRandomEx (in: Seed=0x95cf7d8 | out: Seed=0x95cf7d8) returned 0x9f1e914 [0140.930] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.930] ReadFile (in: hFile=0x1570, lpBuffer=0x6740950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x95cf7e0, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesRead=0x95cf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.930] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32dd8 [0140.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0140.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0140.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6744558 [0140.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0140.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0140.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0140.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32dd8) returned 1 [0140.931] WriteFile (in: hFile=0x1570, lpBuffer=0x6744558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x95cf7e0, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesWritten=0x95cf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6744558) returned 1 [0141.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6740950) returned 1 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f30 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e333c0 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0141.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f60 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0141.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0141.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0141.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 [0141.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debe50 [0141.489] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.489] WriteFile (in: hFile=0x1570, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x95cf860, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x95cf860*=0x10a, lpOverlapped=0x0) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0143.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0143.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3def5e0 [0143.166] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp" [0143.166] wcscat (in: _Dest=0x3def5e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp.ac3a86" [0143.166] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp.ac3a86", NtPathName=0x95cf7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\A5KhyO_1.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0143.223] FlushFileBuffers (hFile=0x1570) returned 1 [0143.229] CloseHandle (hObject=0x1570) returned 1 [0143.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0143.235] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0143.235] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0143.236] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0xffffffff [0143.236] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1618 [0143.242] WriteFile (in: hFile=0x1618, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x95cf7f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x95cf7f4*=0x8b9, lpOverlapped=0x0) returned 1 [0143.250] CloseHandle (hObject=0x1618) returned 1 [0143.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0143.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 814 os_tid = 0x11f0 [0140.933] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\bvxe-bs4g6 6ll0wufjm.jpg")) returned 0x20 [0140.934] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg", dwFileAttributes=0x20) returned 1 [0140.934] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\bvxe-bs4g6 6ll0wufjm.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1584 [0140.934] GetFileSizeEx (in: hFile=0x1584, lpFileSize=0x5d2fda4 | out: lpFileSize=0x5d2fda4*=41667) returned 1 [0140.934] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0xa2bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.934] ReadFile (in: hFile=0x1584, lpBuffer=0x5d2fd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d2fd90, lpOverlapped=0x0 | out: lpBuffer=0x5d2fd80*, lpNumberOfBytesRead=0x5d2fd90*=0x4, lpOverlapped=0x0) returned 1 [0140.936] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0140.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0140.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0140.936] NtQuerySystemTime (in: CurrentTime=0x5d2fd18 | out: CurrentTime=0x5d2fd18*=132482710495968000) returned 0x0 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x1f7b6977 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x384a9dc6 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x7407970b [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x77acccd3 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0xe724e40 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x5fce7a28 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0xf2004c1 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x7fd1c826 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x26633c37 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x4d0956ba [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x2d1c35d0 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x5b81e964 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0xac0e7d0 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x5fa3a168 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x64433b22 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x3dd2cd0d [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x4be57d11 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x6830c7be [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x435250e8 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x50508f28 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x742b6483 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x6a999a8a [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x19207677 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x79ed491e [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x5c2b1e7 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x77f57fa9 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x7b5bea35 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x310365c1 [0140.937] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x47eef253 [0140.938] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x586ca9e1 [0140.938] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x7e7f92e9 [0140.938] RtlRandomEx (in: Seed=0x5d2fd10 | out: Seed=0x5d2fd10) returned 0x1c256757 [0140.947] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.947] ReadFile (in: hFile=0x1584, lpBuffer=0x6726518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d2fd18, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesRead=0x5d2fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0140.947] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33498 [0140.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0140.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0140.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67174f8 [0140.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0140.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33498) returned 1 [0140.948] WriteFile (in: hFile=0x1584, lpBuffer=0x67174f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d2fd18, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesWritten=0x5d2fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0141.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0141.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e333c0 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33450 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0141.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e32ef8 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4178 [0141.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0141.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0141.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0141.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8b80 [0141.491] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.491] WriteFile (in: hFile=0x1584, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x5d2fd98, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0x5d2fd98*=0x122, lpOverlapped=0x0) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ef8) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e333c0) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0143.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40b0) returned 1 [0143.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9528 [0143.169] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg" [0143.169] wcscat (in: _Dest=0x2c9528, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg.ac3a86" [0143.169] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg.ac3a86", NtPathName=0x5d2fd10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\BVxe-BS4G6 6lL0WuFJm.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadb30 [0143.266] FlushFileBuffers (hFile=0x1584) returned 1 [0143.297] CloseHandle (hObject=0x1584) returned 1 [0143.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0143.298] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0143.298] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0143.298] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0143.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0143.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338dd8) returned 1 Thread: id = 815 os_tid = 0x11f4 [0140.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0140.950] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0140.950] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0140.950] wcscat (in: _Dest=0x2ff7aa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\*" [0140.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0140.950] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fb999e0, ftCreationTime.dwHighDateTime=0x1d5e7b8, ftLastAccessTime.dwLowDateTime=0x7a319ae0, ftLastAccessTime.dwHighDateTime=0x1d5d950, ftLastWriteTime.dwLowDateTime=0x7a319ae0, ftLastWriteTime.dwHighDateTime=0x1d5d950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0140.950] wcscmp (_String1=".", _String2=".") returned 0 [0140.950] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fb999e0, ftCreationTime.dwHighDateTime=0x1d5e7b8, ftLastAccessTime.dwLowDateTime=0x7a319ae0, ftLastAccessTime.dwHighDateTime=0x1d5d950, ftLastWriteTime.dwLowDateTime=0x7a319ae0, ftLastWriteTime.dwHighDateTime=0x1d5d950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.950] wcscmp (_String1="..", _String2=".") returned 1 [0140.950] wcscmp (_String1="..", _String2="..") returned 0 [0140.950] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3631d890, ftCreationTime.dwHighDateTime=0x1d5dba9, ftLastAccessTime.dwLowDateTime=0xe261fc60, ftLastAccessTime.dwHighDateTime=0x1d5e68c, ftLastWriteTime.dwLowDateTime=0xe261fc60, ftLastWriteTime.dwHighDateTime=0x1d5e68c, nFileSizeHigh=0x0, nFileSizeLow=0x15185, dwReserved0=0x0, dwReserved1=0x0, cFileName="An1AAlLIxo.png", cAlternateFileName="AN1AAL~1.PNG")) returned 1 [0140.950] wcscmp (_String1="An1AAlLIxo.png", _String2=".") returned 1 [0140.950] wcscmp (_String1="An1AAlLIxo.png", _String2="..") returned 1 [0140.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35750 [0140.950] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0140.950] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0140.950] wcscat (in: _Dest=0x3e35750, _Source="An1AAlLIxo.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png" [0150.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0150.312] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50eef90, ftCreationTime.dwHighDateTime=0x1d5dcd1, ftLastAccessTime.dwLowDateTime=0xcbe34a70, ftLastAccessTime.dwHighDateTime=0x1d5da7f, ftLastWriteTime.dwLowDateTime=0xcbe34a70, ftLastWriteTime.dwHighDateTime=0x1d5da7f, nFileSizeHigh=0x0, nFileSizeLow=0x11a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KEYXG5748tUbayvgS.bmp", cAlternateFileName="KEYXG5~1.BMP")) returned 1 [0150.312] wcscmp (_String1="KEYXG5748tUbayvgS.bmp", _String2=".") returned 1 [0150.312] wcscmp (_String1="KEYXG5748tUbayvgS.bmp", _String2="..") returned 1 [0150.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c96e8 [0150.312] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0150.312] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0150.312] wcscat (in: _Dest=0x2c96e8, _Source="KEYXG5748tUbayvgS.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp" [0150.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0150.313] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f8164f0, ftCreationTime.dwHighDateTime=0x1d5dbf5, ftLastAccessTime.dwLowDateTime=0xa65d40e0, ftLastAccessTime.dwHighDateTime=0x1d5e3b6, ftLastWriteTime.dwLowDateTime=0xa65d40e0, ftLastWriteTime.dwHighDateTime=0x1d5e3b6, nFileSizeHigh=0x0, nFileSizeLow=0x1230a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURk3mlTMdzrX8ju.jpg", cAlternateFileName="TURK3M~1.JPG")) returned 1 [0150.313] wcscmp (_String1="TURk3mlTMdzrX8ju.jpg", _String2=".") returned 1 [0150.313] wcscmp (_String1="TURk3mlTMdzrX8ju.jpg", _String2="..") returned 1 [0150.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0150.313] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0150.313] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0150.313] wcscat (in: _Dest=0x2c97c8, _Source="TURk3mlTMdzrX8ju.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg" [0150.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0150.314] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace69d10, ftCreationTime.dwHighDateTime=0x1d5e2aa, ftLastAccessTime.dwLowDateTime=0xfde00970, ftLastAccessTime.dwHighDateTime=0x1d5df55, ftLastWriteTime.dwLowDateTime=0xfde00970, ftLastWriteTime.dwHighDateTime=0x1d5df55, nFileSizeHigh=0x0, nFileSizeLow=0x9b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnwQ5NUW_O8TxZR.png", cAlternateFileName="UNWQ5N~1.PNG")) returned 1 [0150.314] wcscmp (_String1="UnwQ5NUW_O8TxZR.png", _String2=".") returned 1 [0150.314] wcscmp (_String1="UnwQ5NUW_O8TxZR.png", _String2="..") returned 1 [0150.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c98a8 [0150.314] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ" [0150.314] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0150.314] wcscat (in: _Dest=0x2c98a8, _Source="UnwQ5NUW_O8TxZR.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png" [0150.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0150.315] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace69d10, ftCreationTime.dwHighDateTime=0x1d5e2aa, ftLastAccessTime.dwLowDateTime=0xfde00970, ftLastAccessTime.dwHighDateTime=0x1d5df55, ftLastWriteTime.dwLowDateTime=0xfde00970, ftLastWriteTime.dwHighDateTime=0x1d5df55, nFileSizeHigh=0x0, nFileSizeLow=0x9b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnwQ5NUW_O8TxZR.png", cAlternateFileName="UNWQ5N~1.PNG")) returned 0 [0150.315] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0150.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0150.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 [0150.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 816 os_tid = 0x11f8 [0140.951] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ouqiia2fyqa59h0wyi6.bmp")) returned 0x20 [0140.951] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp", dwFileAttributes=0x20) returned 1 [0140.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ouqiia2fyqa59h0wyi6.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x158c [0140.952] GetFileSizeEx (in: hFile=0x158c, lpFileSize=0x85ffb94 | out: lpFileSize=0x85ffb94*=24203) returned 1 [0140.952] SetFilePointerEx (in: hFile=0x158c, liDistanceToMove=0x5e87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.952] ReadFile (in: hFile=0x158c, lpBuffer=0x85ffb70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85ffb80, lpOverlapped=0x0 | out: lpBuffer=0x85ffb70*, lpNumberOfBytesRead=0x85ffb80*=0x4, lpOverlapped=0x0) returned 1 [0140.954] SetFilePointerEx (in: hFile=0x158c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0140.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0140.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0140.954] NtQuerySystemTime (in: CurrentTime=0x85ffb08 | out: CurrentTime=0x85ffb08*=132482710496124000) returned 0x0 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x209814d7 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x4a692c66 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x407a646a [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x4ab5d354 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x7ac89906 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x63fb785b [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x1c95920 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x345d53a6 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x6da090b0 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x54c26280 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x88b4899 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x25164096 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0xdcf1777 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x4b0c22af [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x1a83026e [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x27657be7 [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x7a19b6ba [0140.954] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x4c01f232 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x411fcafe [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x2bf7467 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x5a55eee8 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x14819a87 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x20547048 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0xa6ab5be [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x49529561 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x64ed8f6b [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x485c0de5 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x77c1de78 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x5047e5b5 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x5c70d4bb [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x5a7713b1 [0140.955] RtlRandomEx (in: Seed=0x85ffb00 | out: Seed=0x85ffb00) returned 0x33ef9208 [0140.963] SetFilePointerEx (in: hFile=0x158c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.964] ReadFile (in: hFile=0x158c, lpBuffer=0x670fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85ffb08, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesRead=0x85ffb08*=0x3c00, lpOverlapped=0x0) returned 1 [0140.964] SetFilePointerEx (in: hFile=0x158c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f2b8 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6739140 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0140.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f2b8) returned 1 [0140.964] WriteFile (in: hFile=0x158c, lpBuffer=0x6739140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85ffb08, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesWritten=0x85ffb08*=0x3c00, lpOverlapped=0x0) returned 1 [0141.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6739140) returned 1 [0141.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33450 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32eb0 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0141.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e33258 [0141.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0141.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0141.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0141.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32eb0) returned 1 [0141.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54f00 [0141.493] SetFilePointerEx (in: hFile=0x158c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.493] WriteFile (in: hFile=0x158c, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x85ffb88, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0x85ffb88*=0x120, lpOverlapped=0x0) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33258) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0143.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0143.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9608 [0143.171] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp" [0143.171] wcscat (in: _Dest=0x2c9608, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp.ac3a86" [0143.172] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp.ac3a86", NtPathName=0x85ffb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\OuQIiA2FyQA59h0wYI6.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea82c8 [0143.270] FlushFileBuffers (hFile=0x158c) returned 1 [0143.364] CloseHandle (hObject=0x158c) returned 1 [0143.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0143.366] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0143.366] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0143.366] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0143.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0143.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338278) returned 1 Thread: id = 817 os_tid = 0x11fc [0140.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\qnbkmrmwsfijqbixhdv.jpg")) returned 0x20 [0140.966] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg", dwFileAttributes=0x20) returned 1 [0140.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\qnbkmrmwsfijqbixhdv.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1590 [0140.967] GetFileSizeEx (in: hFile=0x1590, lpFileSize=0x94ffc4c | out: lpFileSize=0x94ffc4c*=56468) returned 1 [0140.967] SetFilePointerEx (in: hFile=0x1590, liDistanceToMove=0xdc90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.967] ReadFile (in: hFile=0x1590, lpBuffer=0x94ffc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94ffc38, lpOverlapped=0x0 | out: lpBuffer=0x94ffc28*, lpNumberOfBytesRead=0x94ffc38*=0x4, lpOverlapped=0x0) returned 1 [0140.969] SetFilePointerEx (in: hFile=0x1590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0140.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0140.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0140.969] NtQuerySystemTime (in: CurrentTime=0x94ffbc0 | out: CurrentTime=0x94ffbc0*=132482710496280000) returned 0x0 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0xce13b1a [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x6987059f [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x7256dc3e [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x1ce7ff9c [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x1a16a65a [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x5af1d8fe [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x4c695429 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0xee32243 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x4af72474 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x5927bb2c [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x6a9cd875 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x5bf500e8 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x67dbec1f [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x666bed16 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x7e64a427 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x506b6773 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x1d56e867 [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x33b7e08d [0140.969] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x1bc01dc2 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x6c3cee18 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x39258f6b [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x3add4980 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0xeae742 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x41529f8e [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x3b34d69f [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x111e74c2 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x50aa9af3 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x5bca2828 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x35eec395 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x3316b0cd [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x5ca817f8 [0140.970] RtlRandomEx (in: Seed=0x94ffbb8 | out: Seed=0x94ffbb8) returned 0x63b74204 [0140.978] SetFilePointerEx (in: hFile=0x1590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.978] ReadFile (in: hFile=0x1590, lpBuffer=0x673cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94ffbc0, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesRead=0x94ffbc0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.978] SetFilePointerEx (in: hFile=0x1590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f030 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0140.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x674bd68 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0140.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0140.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0140.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0140.979] WriteFile (in: hFile=0x1590, lpBuffer=0x674bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94ffbc0, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesWritten=0x94ffbc0*=0x3c00, lpOverlapped=0x0) returned 1 [0141.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0141.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e32eb0 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e330f0 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0141.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e32d90 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3638 [0141.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0141.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0141.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330f0) returned 1 [0141.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54498 [0141.495] SetFilePointerEx (in: hFile=0x1590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.495] WriteFile (in: hFile=0x1590, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x94ffc40, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x94ffc40*=0x120, lpOverlapped=0x0) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d90) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3638) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32eb0) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0143.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0143.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9448 [0143.173] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg" [0143.173] wcscat (in: _Dest=0x2c9448, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg.ac3a86" [0143.173] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg.ac3a86", NtPathName=0x94ffbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QNBKmrmWsfIjQBIXhdv.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea80e8 [0143.274] FlushFileBuffers (hFile=0x1590) returned 1 [0143.367] CloseHandle (hObject=0x1590) returned 1 [0143.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0143.367] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0143.367] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0143.367] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0143.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0143.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x338ea8) returned 1 Thread: id = 818 os_tid = 0x1200 [0140.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\qnqi_ylbb zdfcvbhn.png")) returned 0x20 [0140.986] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png", dwFileAttributes=0x20) returned 1 [0140.986] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\qnqi_ylbb zdfcvbhn.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1594 [0140.986] GetFileSizeEx (in: hFile=0x1594, lpFileSize=0x996fd94 | out: lpFileSize=0x996fd94*=77021) returned 1 [0140.986] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x12cd9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.986] ReadFile (in: hFile=0x1594, lpBuffer=0x996fd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x996fd80, lpOverlapped=0x0 | out: lpBuffer=0x996fd70*, lpNumberOfBytesRead=0x996fd80*=0x4, lpOverlapped=0x0) returned 1 [0140.988] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0140.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0140.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0140.988] NtQuerySystemTime (in: CurrentTime=0x996fd08 | out: CurrentTime=0x996fd08*=132482710496592000) returned 0x0 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x28c750c2 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x7705964 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x189b6052 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x5404371d [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x42d4d080 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x3d56ae68 [0140.988] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x25f53367 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x527830e4 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x7d523caf [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x354e88a1 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x294cb386 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x6d50db96 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x794212f9 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x55ebba2 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x15b05ce3 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x184f7d85 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x1c1723f6 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x54c455f4 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x84cccbc [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x31470b65 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x11cfa7e7 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x7ecd4191 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x538987f8 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x487ccda2 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x5d1235d2 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x3f663183 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x16f7af16 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x12621ba0 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x5555c584 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0xe1f7b09 [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x6bc3b9de [0140.989] RtlRandomEx (in: Seed=0x996fd00 | out: Seed=0x996fd00) returned 0x3a101aaf [0140.997] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.997] ReadFile (in: hFile=0x1594, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0140.997] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5efa0 [0140.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0140.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0140.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6731930 [0140.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0140.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0140.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efa0) returned 1 [0140.998] WriteFile (in: hFile=0x1594, lpBuffer=0x6731930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesWritten=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0141.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0141.496] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.496] ReadFile (in: hFile=0x1594, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0141.496] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e330f0 [0141.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0141.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0141.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6731930 [0141.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0141.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0141.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0141.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330f0) returned 1 [0141.497] WriteFile (in: hFile=0x1594, lpBuffer=0x6731930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesWritten=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0141.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0141.856] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0xf0dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.856] ReadFile (in: hFile=0x1594, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0141.856] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0xf0dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a58 [0141.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0141.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0141.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0141.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6731930 [0141.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0141.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0141.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0141.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0141.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a58) returned 1 [0141.857] WriteFile (in: hFile=0x1594, lpBuffer=0x6731930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x996fd08, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesWritten=0x996fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0142.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66fe8b8 [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0142.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0142.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0142.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0142.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcde38 [0142.898] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.898] WriteFile (in: hFile=0x1594, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x996fd88, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x996fd88*=0x15e, lpOverlapped=0x0) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe8b8) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1768) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0143.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0143.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e47ec0 [0143.736] wcscpy (in: _Dest=0x3e47ec0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png" [0143.736] wcscat (in: _Dest=0x3e47ec0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png.ac3a86" [0143.736] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png.ac3a86", NtPathName=0x996fd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\QnQi_yLBb zDFcVbHN.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea82c8 [0143.738] FlushFileBuffers (hFile=0x1594) returned 1 [0145.442] CloseHandle (hObject=0x1594) returned 1 [0147.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0147.614] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0147.614] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0147.614] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0147.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0147.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 819 os_tid = 0x1204 [0141.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\vndpan.gif")) returned 0x20 [0141.000] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif", dwFileAttributes=0x20) returned 1 [0141.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\vndpan.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1598 [0141.000] GetFileSizeEx (in: hFile=0x1598, lpFileSize=0x987fc9c | out: lpFileSize=0x987fc9c*=46672) returned 1 [0141.000] SetFilePointerEx (in: hFile=0x1598, liDistanceToMove=0xb64c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.000] ReadFile (in: hFile=0x1598, lpBuffer=0x987fc78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x987fc88, lpOverlapped=0x0 | out: lpBuffer=0x987fc78*, lpNumberOfBytesRead=0x987fc88*=0x4, lpOverlapped=0x0) returned 1 [0141.002] SetFilePointerEx (in: hFile=0x1598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0141.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4150 [0141.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0141.002] NtQuerySystemTime (in: CurrentTime=0x987fc10 | out: CurrentTime=0x987fc10*=132482710496748000) returned 0x0 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x4d05c3e0 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x34b96184 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x69284544 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x24d31895 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x1829d7ee [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x772d142 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x2a8bc9af [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x2fe7bc6b [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x5b7476a8 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x422f8d18 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x4f59c78b [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x6ec08a79 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x43d151af [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x23826cca [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x8c5ef67 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x109a9e12 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x1b85a1df [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x3b012ee [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x3f7515c1 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x77d9bac3 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x24a5ec02 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x58a8140a [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x68b94510 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x62152a84 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x599b2f0d [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x509fc252 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x3a9f6f91 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0xf812bc5 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x73af40e6 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x1b2b20ed [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x5fd7bb83 [0141.003] RtlRandomEx (in: Seed=0x987fc08 | out: Seed=0x987fc08) returned 0x11799c0e [0141.012] SetFilePointerEx (in: hFile=0x1598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.012] ReadFile (in: hFile=0x1598, lpBuffer=0x6735538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x987fc10, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesRead=0x987fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0141.012] SetFilePointerEx (in: hFile=0x1598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f108 [0141.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0141.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0141.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672a120 [0141.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0141.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0141.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f108) returned 1 [0141.013] WriteFile (in: hFile=0x1598, lpBuffer=0x672a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x987fc10, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesWritten=0x987fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0141.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0141.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6735538) returned 1 [0141.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5840 [0141.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e330f0 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0141.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ed0 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0141.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0141.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0141.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330f0) returned 1 [0141.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0141.499] SetFilePointerEx (in: hFile=0x1598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.499] WriteFile (in: hFile=0x1598, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x987fc90, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x987fc90*=0x106, lpOverlapped=0x0) returned 1 [0143.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0143.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0143.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0143.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0143.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0143.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4150) returned 1 [0143.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4240) returned 1 [0143.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0143.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0143.175] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif" [0143.175] wcscat (in: _Dest=0x333468, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif.ac3a86" [0143.175] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif.ac3a86", NtPathName=0x987fc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\vNDPan.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e47ec0 [0143.278] FlushFileBuffers (hFile=0x1598) returned 1 [0143.368] CloseHandle (hObject=0x1598) returned 1 [0143.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0143.369] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0143.369] wcscat (in: _Dest=0x3def5e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0143.369] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0143.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0143.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 820 os_tid = 0x1208 [0141.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\_tu tqjus2.bmp")) returned 0x20 [0141.040] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp", dwFileAttributes=0x20) returned 1 [0141.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\_tu tqjus2.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x159c [0141.040] GetFileSizeEx (in: hFile=0x159c, lpFileSize=0x8b5fd1c | out: lpFileSize=0x8b5fd1c*=98980) returned 1 [0141.040] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x182a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.040] ReadFile (in: hFile=0x159c, lpBuffer=0x8b5fcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b5fd08, lpOverlapped=0x0 | out: lpBuffer=0x8b5fcf8*, lpNumberOfBytesRead=0x8b5fd08*=0x4, lpOverlapped=0x0) returned 1 [0141.042] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0141.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0141.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0141.042] NtQuerySystemTime (in: CurrentTime=0x8b5fc90 | out: CurrentTime=0x8b5fc90*=132482710497060000) returned 0x0 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x7cd07973 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x2bdad784 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x67398a55 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x6dad0fcd [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x14d2e567 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x5af3ec68 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x2ad7f93d [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x3adc7baa [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x5648e88d [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x2c020117 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x1ad96067 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x69ce2838 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x5d20ee28 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x6c55679a [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0xbc92ce7 [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x2a684d6c [0141.042] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x6e81f91d [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x65f7874 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0xad08485 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x21b4c037 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0xa54abd2 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x460beafe [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x4fe68a5f [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x5f068cbf [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x61feb6e0 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x28b7c7f1 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x12b0ddfd [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0xa6ab5be [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x4c851379 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x1bded9ff [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x1de985e0 [0141.043] RtlRandomEx (in: Seed=0x8b5fc88 | out: Seed=0x8b5fc88) returned 0x380adad4 [0141.052] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.052] ReadFile (in: hFile=0x159c, lpBuffer=0x672dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesRead=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0141.052] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e418e8 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0141.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0141.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e418e8) returned 1 [0141.053] WriteFile (in: hFile=0x159c, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0142.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0142.080] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.080] ReadFile (in: hFile=0x159c, lpBuffer=0x672dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesRead=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0142.080] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1fd8 [0142.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0142.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0142.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0142.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673cd48 [0142.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0142.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0142.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0142.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0142.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0142.081] WriteFile (in: hFile=0x159c, lpBuffer=0x673cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesWritten=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0143.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0143.429] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x146a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.429] ReadFile (in: hFile=0x159c, lpBuffer=0x672dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x672dd28*, lpNumberOfBytesRead=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0143.430] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x146a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32760 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0d08 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0143.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673cd48 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0143.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0143.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0143.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0143.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32760) returned 1 [0143.431] WriteFile (in: hFile=0x159c, lpBuffer=0x673cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b5fc90, lpOverlapped=0x0 | out: lpBuffer=0x673cd48*, lpNumberOfBytesWritten=0x8b5fc90*=0x3c00, lpOverlapped=0x0) returned 1 [0143.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673cd48) returned 1 [0143.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0143.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0143.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19cb0 [0143.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0143.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0143.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0143.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0143.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eb28) returned 1 [0143.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x294aa0 [0143.788] SetFilePointerEx (in: hFile=0x159c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.788] WriteFile (in: hFile=0x159c, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x8b5fd10, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x8b5fd10*=0x14e, lpOverlapped=0x0) returned 1 [0144.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0144.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0144.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0144.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0144.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0144.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0144.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0144.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0144.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3def5e0 [0144.672] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp" [0144.672] wcscat (in: _Dest=0x3def5e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp.ac3a86" [0144.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp.ac3a86", NtPathName=0x8b5fc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\_TU TqJuS2.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0144.741] FlushFileBuffers (hFile=0x159c) returned 1 [0145.433] CloseHandle (hObject=0x159c) returned 1 [0146.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defa90 [0146.545] wcscpy (in: _Dest=0x3defa90, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\" [0146.545] wcscat (in: _Dest=0x3defa90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" [0146.545] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\ac3a86-readme.txt")) returned 0x20 [0146.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defa90) returned 1 [0146.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 821 os_tid = 0x120c [0141.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\4y amlzuco.mp3")) returned 0x20 [0141.059] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3", dwFileAttributes=0x20) returned 1 [0142.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\4y amlzuco.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15a0 [0142.052] GetFileSizeEx (in: hFile=0x15a0, lpFileSize=0x9aafbac | out: lpFileSize=0x9aafbac*=89143) returned 1 [0142.052] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x15c33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.052] ReadFile (in: hFile=0x15a0, lpBuffer=0x9aafb88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9aafb98, lpOverlapped=0x0 | out: lpBuffer=0x9aafb88*, lpNumberOfBytesRead=0x9aafb98*=0x4, lpOverlapped=0x0) returned 1 [0142.054] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0142.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0142.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0142.054] NtQuerySystemTime (in: CurrentTime=0x9aafb20 | out: CurrentTime=0x9aafb20*=132482710507200000) returned 0x0 [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x1ae71ac7 [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x5aea5a8c [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x3df445bb [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0xdc2d82b [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x1c22a9bf [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x464daba6 [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x61ca450a [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x632af7b5 [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x1cb73882 [0142.054] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x17b41fae [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x49c88685 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x518a1a48 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x43ff659b [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0xa31f490 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x100ddbb9 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x17299457 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x3b48416c [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x653cc684 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x77478bff [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x1afebddb [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x695c87fc [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x58317ee7 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x3bfe518f [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x2c91f459 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0xf3c9cd4 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x24860866 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x3f3723d1 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x67556d3b [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x444a26a8 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x31c93814 [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x56cb153c [0142.055] RtlRandomEx (in: Seed=0x9aafb18 | out: Seed=0x9aafb18) returned 0x407e4124 [0142.071] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.071] ReadFile (in: hFile=0x15a0, lpBuffer=0x6735538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesRead=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.071] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1fd8 [0142.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0142.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0142.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0142.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672a120 [0142.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0142.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0142.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0142.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0142.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0142.072] WriteFile (in: hFile=0x15a0, lpBuffer=0x672a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesWritten=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0142.596] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.596] ReadFile (in: hFile=0x15a0, lpBuffer=0x6735538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesRead=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.597] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0142.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672a120 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0142.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0142.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0142.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.597] WriteFile (in: hFile=0x15a0, lpBuffer=0x672a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesWritten=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0142.598] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x12037, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.598] ReadFile (in: hFile=0x15a0, lpBuffer=0x6735538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesRead=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.598] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x12037, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0142.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0142.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672a120 [0142.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0142.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0142.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0142.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.599] WriteFile (in: hFile=0x15a0, lpBuffer=0x672a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9aafb20, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesWritten=0x9aafb20*=0x3c00, lpOverlapped=0x0) returned 1 [0142.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0142.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d920 [0142.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0142.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f199d8 [0142.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0142.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0142.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0142.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x294aa0 [0142.600] SetFilePointerEx (in: hFile=0x15a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.601] WriteFile (in: hFile=0x15a0, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x9aafba0, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x9aafba0*=0x14e, lpOverlapped=0x0) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0143.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0143.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3649a0 [0143.176] wcscpy (in: _Dest=0x3649a0, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3" [0143.176] wcscat (in: _Dest=0x3649a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3.ac3a86" [0143.176] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3.ac3a86", NtPathName=0x9aafb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\4Y amLZucO.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d585a8 [0143.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 [0143.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ca8b8) returned 1 [0143.204] NtQueryInformationFile (in: FileHandle=0x15a0, IoStatusBlock=0x9aafaf0, FileInformation=0x9aafaf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9aafaf0, FileInformation=0x9aafaf8) returned 0x0 [0143.204] NtSetInformationFile (FileHandle=0x15a0, IoStatusBlock=0x9aafaf0, FileInformation=0x9aafaf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3649a0) returned 1 [0143.218] FlushFileBuffers (hFile=0x15a0) returned 1 [0143.221] CloseHandle (hObject=0x15a0) returned 1 [0143.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f296b0 [0143.233] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0143.233] wcscat (in: _Dest=0x3f296b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0143.233] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0xffffffff [0143.233] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0143.240] WriteFile (in: hFile=0x1570, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9aafb34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9aafb34*=0x8b9, lpOverlapped=0x0) returned 1 [0143.247] CloseHandle (hObject=0x1570) returned 1 [0143.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 [0143.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 822 os_tid = 0x1210 [0141.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\86eqi3zqlocli0pjnqn4.mkv")) returned 0x20 [0141.059] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv", dwFileAttributes=0x20) returned 1 [0142.089] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\86eqi3zqlocli0pjnqn4.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15a4 [0142.090] GetFileSizeEx (in: hFile=0x15a4, lpFileSize=0x967fe24 | out: lpFileSize=0x967fe24*=2283) returned 1 [0142.090] SetFilePointerEx (in: hFile=0x15a4, liDistanceToMove=0x8e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.090] ReadFile (in: hFile=0x15a4, lpBuffer=0x967fe00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x967fe10, lpOverlapped=0x0 | out: lpBuffer=0x967fe00*, lpNumberOfBytesRead=0x967fe10*=0x4, lpOverlapped=0x0) returned 1 [0142.092] SetFilePointerEx (in: hFile=0x15a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0142.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0142.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0142.092] NtQuerySystemTime (in: CurrentTime=0x967fd98 | out: CurrentTime=0x967fd98*=132482710507512000) returned 0x0 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x5520e27d [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x6dbcf8d9 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x74b836f2 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x552492fd [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x67707e17 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x125f4671 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x481e43ad [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x54a2b982 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x4aa8e26 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x6a31269e [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x424a0d07 [0142.092] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x57e82566 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x41cf59f2 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0xa7b6d45 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x2e10c075 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x5b8d73c7 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x4d339884 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x7764f046 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x8dffe4 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x3c05c06b [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x1f25adca [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x5c4ab268 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x7f0c87b8 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x21fe1300 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x4f9d669f [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x3bf9270a [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x1fca762f [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x22c9d404 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x487b4107 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x591c1ff6 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x5cbfd714 [0142.093] RtlRandomEx (in: Seed=0x967fd90 | out: Seed=0x967fd90) returned 0x3ecb890c [0142.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0142.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x674bd68 [0142.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670fce8 [0142.104] ReadFile (in: hFile=0x15a4, lpBuffer=0x674bd68, nNumberOfBytesToRead=0x8eb, lpNumberOfBytesRead=0x967fd8c, lpOverlapped=0x0 | out: lpBuffer=0x674bd68*, lpNumberOfBytesRead=0x967fd8c*=0x8eb, lpOverlapped=0x0) returned 1 [0142.104] SetFilePointerEx (in: hFile=0x15a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.104] WriteFile (in: hFile=0x15a4, lpBuffer=0x670fce8*, nNumberOfBytesToWrite=0x8eb, lpNumberOfBytesWritten=0x967fd90, lpOverlapped=0x0 | out: lpBuffer=0x670fce8*, lpNumberOfBytesWritten=0x967fd90*=0x8eb, lpOverlapped=0x0) returned 1 [0143.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a88 [0143.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0143.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0143.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670fce8) returned 1 [0143.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd68) returned 1 [0143.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0143.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0143.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e60ec8 [0143.795] SetFilePointerEx (in: hFile=0x15a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.795] WriteFile (in: hFile=0x15a4, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x967fe18, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x967fe18*=0x122, lpOverlapped=0x0) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdd78) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a88) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0144.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0144.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58740 [0144.676] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv" [0144.676] wcscat (in: _Dest=0x3d58740, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv.ac3a86" [0144.676] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv.ac3a86", NtPathName=0x967fd90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\86eQI3ZQLoCLI0pJNqN4.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ebb0 [0144.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 [0144.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb740) returned 1 [0144.735] NtQueryInformationFile (in: FileHandle=0x15a4, IoStatusBlock=0x967fd68, FileInformation=0x967fd70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x967fd68, FileInformation=0x967fd70) returned 0x0 [0144.736] NtSetInformationFile (FileHandle=0x15a4, IoStatusBlock=0x967fd68, FileInformation=0x967fd70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 [0144.744] FlushFileBuffers (hFile=0x15a4) returned 1 [0145.434] CloseHandle (hObject=0x15a4) returned 1 [0147.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29a30 [0147.534] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0147.534] wcscat (in: _Dest=0x3f29a30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0147.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0x20 [0147.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0147.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 Thread: id = 823 os_tid = 0x1214 [0141.060] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\boiot6gf4nz.avi")) returned 0x20 [0141.060] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi", dwFileAttributes=0x20) returned 1 [0142.105] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\boiot6gf4nz.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15a8 [0142.105] GetFileSizeEx (in: hFile=0x15a8, lpFileSize=0xa1afefc | out: lpFileSize=0xa1afefc*=94346) returned 1 [0142.105] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x17086, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.105] ReadFile (in: hFile=0x15a8, lpBuffer=0xa1afed8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1afee8, lpOverlapped=0x0 | out: lpBuffer=0xa1afed8*, lpNumberOfBytesRead=0xa1afee8*=0x4, lpOverlapped=0x0) returned 1 [0142.107] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0142.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0142.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.108] NtQuerySystemTime (in: CurrentTime=0xa1afe70 | out: CurrentTime=0xa1afe70*=132482710507668000) returned 0x0 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x44469b45 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x1557e6a5 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x5c1e04d [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0xdf68b07 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x5200615f [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x7e840e25 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x7b5d3a83 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x67b5b668 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x771f6b32 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x10371dea [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x3957759c [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x177e6ffd [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x214a7be1 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x451339fc [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x60ca2789 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x42046ace [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x1cf827c5 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x92bde83 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x911c95f [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x5bb07d3e [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x1fc72502 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x159f85b5 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x63a35488 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x6b737f65 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x5eabfde8 [0142.108] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x66eec88a [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0xa79b14e [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x3160c78 [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x57e388cc [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x45815557 [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0xd49879b [0142.109] RtlRandomEx (in: Seed=0xa1afe68 | out: Seed=0xa1afe68) returned 0x132979de [0142.120] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.120] ReadFile (in: hFile=0x15a8, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0142.121] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60b20 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b0d8 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0142.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6726518 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0142.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0142.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0142.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60b20) returned 1 [0142.122] WriteFile (in: hFile=0x15a8, lpBuffer=0x6726518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesWritten=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0143.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0143.841] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.841] ReadFile (in: hFile=0x15a8, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0143.841] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60cd0 [0143.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0143.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0143.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0143.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6726518 [0143.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0143.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0143.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0143.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0143.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60cd0) returned 1 [0143.842] WriteFile (in: hFile=0x15a8, lpBuffer=0x6726518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesWritten=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0144.336] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x1348a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.336] ReadFile (in: hFile=0x15a8, lpBuffer=0x6739140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6739140*, lpNumberOfBytesRead=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0144.336] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x1348a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fde08 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0588 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6726518 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0144.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0144.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0144.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0144.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fde08) returned 1 [0144.337] WriteFile (in: hFile=0x15a8, lpBuffer=0x6726518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1afe70, lpOverlapped=0x0 | out: lpBuffer=0x6726518*, lpNumberOfBytesWritten=0xa1afe70*=0x3c00, lpOverlapped=0x0) returned 1 [0145.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6726518) returned 1 [0145.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e0d8 [0145.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0145.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19bd0 [0145.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0145.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0145.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0145.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0145.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0145.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x294aa0 [0145.096] SetFilePointerEx (in: hFile=0x15a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.096] WriteFile (in: hFile=0x15a8, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xa1afef0, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0xa1afef0*=0x150, lpOverlapped=0x0) returned 1 [0147.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0147.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19bd0) returned 1 [0147.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0147.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e0d8) returned 1 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e34790 [0147.665] wcscpy (in: _Dest=0x3e34790, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi" [0147.665] wcscat (in: _Dest=0x3e34790, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi.ac3a86" [0147.665] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi.ac3a86", NtPathName=0xa1afe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\bOiOt6gF4NZ.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0147.754] FlushFileBuffers (hFile=0x15a8) returned 1 [0147.757] CloseHandle (hObject=0x15a8) returned 1 [0147.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29a30 [0147.774] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0147.774] wcscat (in: _Dest=0x3f29a30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0147.774] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0x20 [0147.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0147.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd4b0) returned 1 Thread: id = 824 os_tid = 0x1218 [0141.061] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\jrtbhoq pndig.png")) returned 0x20 [0141.061] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png", dwFileAttributes=0x20) returned 1 [0142.122] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\jrtbhoq pndig.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15ac [0142.122] GetFileSizeEx (in: hFile=0x15ac, lpFileSize=0x992fc14 | out: lpFileSize=0x992fc14*=7980) returned 1 [0142.122] SetFilePointerEx (in: hFile=0x15ac, liDistanceToMove=0x1f28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.122] ReadFile (in: hFile=0x15ac, lpBuffer=0x992fbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x992fc00, lpOverlapped=0x0 | out: lpBuffer=0x992fbf0*, lpNumberOfBytesRead=0x992fc00*=0x4, lpOverlapped=0x0) returned 1 [0142.125] SetFilePointerEx (in: hFile=0x15ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0142.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0142.125] NtQuerySystemTime (in: CurrentTime=0x992fb88 | out: CurrentTime=0x992fb88*=132482710507824000) returned 0x0 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x5c1fd9a8 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x502f8ce0 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x36cacfb5 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x4635d3a8 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x5012e3a8 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x4f925968 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x35363f42 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x466543d0 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x3df38b43 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x75d849c7 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0xd97315b [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x47d32400 [0142.125] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x422bafdd [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x54729ab [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x1ab70118 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x4c01f232 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x31461f77 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x9c47829 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x44be5ac6 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x577760ed [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x2e1a0470 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x495fe57e [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x442e9703 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x2244cd14 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x5dbcd17b [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x6f119144 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x3b0ca7fb [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x15e104f [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x7a4d42c5 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x732777b9 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x73aa2774 [0142.126] RtlRandomEx (in: Seed=0x992fb80 | out: Seed=0x992fb80) returned 0x1c0c31e5 [0142.137] ReadFile (in: hFile=0x15ac, lpBuffer=0x67174f8, nNumberOfBytesToRead=0x1f2c, lpNumberOfBytesRead=0x992fb7c, lpOverlapped=0x0 | out: lpBuffer=0x67174f8*, lpNumberOfBytesRead=0x992fb7c*=0x1f2c, lpOverlapped=0x0) returned 1 [0142.137] SetFilePointerEx (in: hFile=0x15ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.137] WriteFile (in: hFile=0x15ac, lpBuffer=0x6740950*, nNumberOfBytesToWrite=0x1f2c, lpNumberOfBytesWritten=0x992fb80, lpOverlapped=0x0 | out: lpBuffer=0x6740950*, lpNumberOfBytesWritten=0x992fb80*=0x1f2c, lpOverlapped=0x0) returned 1 [0143.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0143.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0143.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0143.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6740950) returned 1 [0143.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67174f8) returned 1 [0143.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0143.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60b20) returned 1 [0143.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19c08 [0143.844] SetFilePointerEx (in: hFile=0x15ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.844] WriteFile (in: hFile=0x15ac, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x992fc08, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0x992fc08*=0x114, lpOverlapped=0x0) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c40) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c08) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0147.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0147.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34a60 [0147.641] wcscpy (in: _Dest=0x3e34a60, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png" [0147.641] wcscat (in: _Dest=0x3e34a60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png.ac3a86" [0147.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png.ac3a86", NtPathName=0x992fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\JrtbhoQ pnDIg.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0147.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 [0147.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 [0147.712] NtQueryInformationFile (in: FileHandle=0x15ac, IoStatusBlock=0x992fb58, FileInformation=0x992fb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x992fb58, FileInformation=0x992fb60) returned 0x0 [0147.713] NtSetInformationFile (FileHandle=0x15ac, IoStatusBlock=0x992fb58, FileInformation=0x992fb60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0147.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.719] FlushFileBuffers (hFile=0x15ac) returned 1 [0147.720] CloseHandle (hObject=0x15ac) returned 1 [0147.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29a30 [0147.755] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0147.755] wcscat (in: _Dest=0x3f29a30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0147.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0x20 [0147.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0147.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd650) returned 1 Thread: id = 825 os_tid = 0x121c [0141.061] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\mugdv68.jpg")) returned 0x20 [0141.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg", dwFileAttributes=0x20) returned 1 [0142.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\mugdv68.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15b0 [0142.138] GetFileSizeEx (in: hFile=0x15b0, lpFileSize=0x5daf904 | out: lpFileSize=0x5daf904*=9789) returned 1 [0142.138] SetFilePointerEx (in: hFile=0x15b0, liDistanceToMove=0x2639, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.138] ReadFile (in: hFile=0x15b0, lpBuffer=0x5daf8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5daf8f0, lpOverlapped=0x0 | out: lpBuffer=0x5daf8e0*, lpNumberOfBytesRead=0x5daf8f0*=0x4, lpOverlapped=0x0) returned 1 [0142.141] SetFilePointerEx (in: hFile=0x15b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0142.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0142.141] NtQuerySystemTime (in: CurrentTime=0x5daf878 | out: CurrentTime=0x5daf878*=132482710507980000) returned 0x0 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x2a9d9dce [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x41fae0a2 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x2a125999 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x123bdf25 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x80d3f07 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x760401bb [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x48c48664 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0xba938a1 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x47acdf71 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x1f21ec10 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x58eda230 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x7c2e5046 [0142.141] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x7c61ca0a [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x13c0e98d [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x7a4f565e [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x32896587 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x5bff4398 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x4f3ca7e8 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x70262d8a [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x3c049e3d [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x6ddf3d8f [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x659495ff [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x4335e601 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x3bca2cd6 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x25bd6502 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x1a68d2b8 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x6dbc3168 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x3d5a9bc4 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x5c1fe54d [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x1214b6aa [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x27156e25 [0142.142] RtlRandomEx (in: Seed=0x5daf870 | out: Seed=0x5daf870) returned 0x87757d7 [0142.152] ReadFile (in: hFile=0x15b0, lpBuffer=0x6744558, nNumberOfBytesToRead=0x263d, lpNumberOfBytesRead=0x5daf86c, lpOverlapped=0x0 | out: lpBuffer=0x6744558*, lpNumberOfBytesRead=0x5daf86c*=0x263d, lpOverlapped=0x0) returned 1 [0142.153] SetFilePointerEx (in: hFile=0x15b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.153] WriteFile (in: hFile=0x15b0, lpBuffer=0x6722910*, nNumberOfBytesToWrite=0x263d, lpNumberOfBytesWritten=0x5daf870, lpOverlapped=0x0 | out: lpBuffer=0x6722910*, lpNumberOfBytesWritten=0x5daf870*=0x263d, lpOverlapped=0x0) returned 1 [0143.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4600 [0143.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6722910) returned 1 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6744558) returned 1 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0143.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe240) returned 1 [0143.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5d50 [0143.845] SetFilePointerEx (in: hFile=0x15b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.845] WriteFile (in: hFile=0x15b0, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x5daf8f8, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x5daf8f8*=0x108, lpOverlapped=0x0) returned 1 [0144.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0144.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0144.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0144.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d50) returned 1 [0144.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4600) returned 1 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e6368 [0144.680] wcscpy (in: _Dest=0x66e6368, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg" [0144.680] wcscat (in: _Dest=0x66e6368, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg.ac3a86" [0144.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg.ac3a86", NtPathName=0x5daf870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\MUgdv68.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edae78 [0144.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edae78) returned 1 [0144.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee7f30) returned 1 [0144.765] NtQueryInformationFile (in: FileHandle=0x15b0, IoStatusBlock=0x5daf848, FileInformation=0x5daf850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5daf848, FileInformation=0x5daf850) returned 0x0 [0144.765] NtSetInformationFile (FileHandle=0x15b0, IoStatusBlock=0x5daf848, FileInformation=0x5daf850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6368) returned 1 [0144.766] FlushFileBuffers (hFile=0x15b0) returned 1 [0145.439] CloseHandle (hObject=0x15b0) returned 1 [0147.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29a30 [0147.579] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0147.579] wcscat (in: _Dest=0x3f29a30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0147.579] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0x20 [0147.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0147.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 826 os_tid = 0x1220 [0141.062] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\x nyrc.flv")) returned 0x20 [0141.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv", dwFileAttributes=0x20) returned 1 [0142.153] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\x nyrc.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15b4 [0142.154] GetFileSizeEx (in: hFile=0x15b4, lpFileSize=0x65ef83c | out: lpFileSize=0x65ef83c*=37706) returned 1 [0142.154] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x9346, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.154] ReadFile (in: hFile=0x15b4, lpBuffer=0x65ef818, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x65ef828, lpOverlapped=0x0 | out: lpBuffer=0x65ef818*, lpNumberOfBytesRead=0x65ef828*=0x4, lpOverlapped=0x0) returned 1 [0142.156] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0142.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0142.156] NtQuerySystemTime (in: CurrentTime=0x65ef7b0 | out: CurrentTime=0x65ef7b0*=132482710508136000) returned 0x0 [0142.156] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x6a5f9a1d [0142.156] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x4f6780a8 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x6ab8f3e8 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x43718846 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x48731f53 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x5f1391a2 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x5c5c3456 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x7ff81c6f [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x324862b9 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x3f4a9857 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x6e9a5c9c [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x7d1d5b6d [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x239cf69f [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x2f9063f7 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x58aee59a [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x22bd170 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x1ccf90f3 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x76b377d0 [0142.157] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x5be0d412 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x26ad28a7 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x6295b034 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x321fb904 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x42d27783 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x70bf6ee8 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x1a423446 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x5901052 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x1ff737af [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x27d8f85f [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x39257cbc [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x30428e85 [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x64b241bd [0142.158] RtlRandomEx (in: Seed=0x65ef7a8 | out: Seed=0x65ef7a8) returned 0x4a40be7 [0142.169] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.170] ReadFile (in: hFile=0x15b4, lpBuffer=0x671b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x65ef7b0, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesRead=0x65ef7b0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.170] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe288 [0142.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0142.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0142.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686fce8 [0142.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0142.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0142.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0142.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0142.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0142.171] WriteFile (in: hFile=0x15b4, lpBuffer=0x686fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x65ef7b0, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesWritten=0x65ef7b0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0143.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0143.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5840 [0143.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0143.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ed0 [0143.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0143.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2cb0 [0143.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2cb0) returned 1 [0143.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0143.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe240) returned 1 [0143.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec828 [0143.848] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.848] WriteFile (in: hFile=0x15b4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x65ef830, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x65ef830*=0x106, lpOverlapped=0x0) returned 1 [0144.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0144.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0144.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0144.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5840) returned 1 [0144.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0144.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0144.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0144.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0144.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e1a8 [0144.683] wcscpy (in: _Dest=0x3d8e1a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv" [0144.683] wcscat (in: _Dest=0x3d8e1a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv.ac3a86" [0144.683] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv.ac3a86", NtPathName=0x65ef7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\esVR\\X Nyrc.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb878 [0144.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 [0144.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eea600) returned 1 [0144.768] NtQueryInformationFile (in: FileHandle=0x15b4, IoStatusBlock=0x65ef780, FileInformation=0x65ef788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x65ef780, FileInformation=0x65ef788) returned 0x0 [0144.769] NtSetInformationFile (FileHandle=0x15b4, IoStatusBlock=0x65ef780, FileInformation=0x65ef788, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e1a8) returned 1 [0144.770] FlushFileBuffers (hFile=0x15b4) returned 1 [0145.440] CloseHandle (hObject=0x15b4) returned 1 [0147.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29a30 [0147.583] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\" [0147.583] wcscat (in: _Dest=0x3f29a30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" [0147.583] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\esVR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\esvr\\ac3a86-readme.txt")) returned 0x20 [0147.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0147.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 827 os_tid = 0x1224 [0141.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0141.063] wcscpy (in: _Dest=0x332ce8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0141.063] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0141.063] wcscat (in: _Dest=0x332ce8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0141.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0141.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0141.063] wcscmp (_String1=".", _String2=".") returned 0 [0141.063] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.063] wcscmp (_String1="..", _String2=".") returned 1 [0141.063] wcscmp (_String1="..", _String2="..") returned 0 [0141.063] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0141.063] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0141.064] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0141.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56838 [0141.064] wcscpy (in: _Dest=0x3d56838, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0141.064] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0141.064] wcscat (in: _Dest=0x3d56838, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0143.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0143.562] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0143.562] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0143.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0143.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 [0143.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 828 os_tid = 0x1228 [0141.064] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0141.064] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0141.065] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.065] GetLastError () returned 0x5 [0141.065] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0141.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 829 os_tid = 0x122c [0141.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56a08 [0141.066] wcscpy (in: _Dest=0x3d56a08, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0141.066] wcscat (in: _Dest=0x3d56a08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0141.066] wcscat (in: _Dest=0x3d56a08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0141.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0141.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0141.067] wcscmp (_String1=".", _String2=".") returned 0 [0141.067] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.067] wcscmp (_String1="..", _String2=".") returned 1 [0141.067] wcscmp (_String1="..", _String2="..") returned 0 [0141.067] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.067] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.067] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.067] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.067] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0141.067] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0141.067] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.067] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0141.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0141.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a08) returned 1 [0141.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 830 os_tid = 0x1230 [0141.069] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0141.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0141.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.519] GetLastError () returned 0x5 [0141.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0141.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 831 os_tid = 0x1234 [0141.070] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20 [0141.521] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0141.522] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.522] GetLastError () returned 0x5 [0141.522] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0141.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 832 os_tid = 0x1238 [0141.071] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20 [0141.524] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0141.524] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.524] GetLastError () returned 0x5 [0141.524] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0141.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 833 os_tid = 0x123c [0141.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a2e0 [0141.072] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0141.072] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0141.072] wcscat (in: _Dest=0x3d5a2e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0141.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0141.072] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0141.072] wcscmp (_String1=".", _String2=".") returned 0 [0141.072] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.072] wcscmp (_String1="..", _String2=".") returned 1 [0141.073] wcscmp (_String1="..", _String2="..") returned 0 [0141.073] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0141.073] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0141.073] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0141.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf6a8 [0141.073] wcscpy (in: _Dest=0x3ddf6a8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0141.073] wcscat (in: _Dest=0x3ddf6a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0141.073] wcscat (in: _Dest=0x3ddf6a8, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0143.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ddf6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0143.565] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0143.565] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0143.565] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0143.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea80e8 [0143.565] wcscpy (in: _Dest=0x3ea80e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0143.565] wcscat (in: _Dest=0x3ea80e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0143.565] wcscat (in: _Dest=0x3ea80e8, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0143.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea80e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0143.566] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0143.567] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0143.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0143.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 [0143.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 834 os_tid = 0x1240 [0141.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf")) returned 0x20 [0144.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0144.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.294] GetLastError () returned 0x5 [0144.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0144.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 835 os_tid = 0x1244 [0141.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf")) returned 0x20 [0144.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0144.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.304] GetLastError () returned 0x5 [0144.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0144.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 836 os_tid = 0x1248 [0141.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf")) returned 0x20 [0144.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0144.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.306] GetLastError () returned 0x5 [0144.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0144.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 837 os_tid = 0x124c [0141.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf")) returned 0x20 [0144.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0144.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.307] GetLastError () returned 0x5 [0144.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0144.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 838 os_tid = 0x1250 [0141.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf")) returned 0x20 [0144.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0144.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.308] GetLastError () returned 0x5 [0144.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0144.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 839 os_tid = 0x1254 [0141.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf")) returned 0x20 [0144.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0144.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.324] GetLastError () returned 0x5 [0144.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0144.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26590) returned 1 Thread: id = 840 os_tid = 0x1258 [0141.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf")) returned 0x20 [0144.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0144.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.325] GetLastError () returned 0x5 [0144.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0144.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 841 os_tid = 0x125c [0141.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf")) returned 0x20 [0144.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0144.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.327] GetLastError () returned 0x5 [0144.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0144.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 842 os_tid = 0x1260 [0141.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf")) returned 0x20 [0144.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0144.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.328] GetLastError () returned 0x5 [0144.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0144.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 843 os_tid = 0x1264 [0141.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf")) returned 0x20 [0144.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0144.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.098] GetLastError () returned 0x5 [0144.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0144.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 844 os_tid = 0x1268 [0141.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf")) returned 0x20 [0144.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0144.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.296] GetLastError () returned 0x5 [0144.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0144.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 845 os_tid = 0x126c [0141.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf")) returned 0x20 [0144.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0144.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.300] GetLastError () returned 0x5 [0144.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0144.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 846 os_tid = 0x1270 [0141.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf")) returned 0x20 [0144.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0144.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.303] GetLastError () returned 0x5 [0144.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0144.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 847 os_tid = 0x1274 [0141.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf")) returned 0x20 [0144.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0144.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.330] GetLastError () returned 0x5 [0144.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0144.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 848 os_tid = 0x1278 [0141.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif")) returned 0x20 [0141.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0141.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.527] GetLastError () returned 0x5 [0141.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0141.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 849 os_tid = 0x127c [0141.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 0x20 [0141.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0141.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.080] GetLastError () returned 0x5 [0141.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0141.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 850 os_tid = 0x1280 [0141.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332e68 [0141.082] wcscpy (in: _Dest=0x332e68, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0141.082] wcscat (in: _Dest=0x332e68, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0141.082] wcscat (in: _Dest=0x332e68, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0141.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0141.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0141.082] wcscmp (_String1=".", _String2=".") returned 0 [0141.082] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.082] wcscmp (_String1="..", _String2=".") returned 1 [0141.082] wcscmp (_String1="..", _String2="..") returned 0 [0141.082] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0141.082] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0141.082] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0141.082] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0141.082] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0141.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0141.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332e68) returned 1 [0141.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 851 os_tid = 0x1284 [0141.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav" (normalized: "c:\\users\\eebsym5\\music\\70tyy2lpnh_cqx.wav")) returned 0x20 [0141.084] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav", dwFileAttributes=0x20) returned 1 [0142.173] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav" (normalized: "c:\\users\\eebsym5\\music\\70tyy2lpnh_cqx.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15c0 [0142.173] GetFileSizeEx (in: hFile=0x15c0, lpFileSize=0xcf5f77c | out: lpFileSize=0xcf5f77c*=90070) returned 1 [0142.173] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x15fd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.174] ReadFile (in: hFile=0x15c0, lpBuffer=0xcf5f758, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcf5f768, lpOverlapped=0x0 | out: lpBuffer=0xcf5f758*, lpNumberOfBytesRead=0xcf5f768*=0x4, lpOverlapped=0x0) returned 1 [0142.176] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0142.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0142.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.176] NtQuerySystemTime (in: CurrentTime=0xcf5f6f0 | out: CurrentTime=0xcf5f6f0*=132482710508448000) returned 0x0 [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x51ad5e8b [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x6fa94fc [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x768d33e5 [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x457306c5 [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x18ba1b44 [0142.176] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x409e1571 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x59212831 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x6a324237 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x32be8910 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x7132f5e3 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x2be0c36b [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0xa2f0a26 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x5f9f1463 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x128a3364 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x37612399 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x275852d4 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x46d090c0 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x71e10a9a [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x28c349ed [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x4aa3944 [0142.177] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x5b499de8 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x7d37205f [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x7ef6a890 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x335a7b4a [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x17d97dab [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x7f6f2a16 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x4b8a864a [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x673994b1 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x6f7bbd1f [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x481327a3 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0x591c3015 [0142.178] RtlRandomEx (in: Seed=0xcf5f6e8 | out: Seed=0xcf5f6e8) returned 0xda3e7ea [0142.195] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.195] ReadFile (in: hFile=0x15c0, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.195] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe288 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0142.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0142.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0142.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0142.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0142.197] WriteFile (in: hFile=0x15c0, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0143.852] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.852] ReadFile (in: hFile=0x15c0, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.852] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ec00 [0143.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0143.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2cb0 [0143.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2cb0) returned 1 [0143.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0143.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2cb0 [0143.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0143.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0143.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0143.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ec00) returned 1 [0143.853] WriteFile (in: hFile=0x15c0, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0144.338] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x123d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.338] ReadFile (in: hFile=0x15c0, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.339] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x123d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fde08 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0588 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0144.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0144.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0144.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0144.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0144.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fde08) returned 1 [0144.339] WriteFile (in: hFile=0x15c0, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcf5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xcf5f6f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0145.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e1a8 [0145.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0145.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067100 [0145.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0145.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0145.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0145.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0145.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0145.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcde38 [0145.098] SetFilePointerEx (in: hFile=0x15c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.098] WriteFile (in: hFile=0x15c0, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0xcf5f770, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0xcf5f770*=0x156, lpOverlapped=0x0) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d00) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e1a8) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0147.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0147.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29410 [0147.499] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav") returned="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav" [0147.499] wcscat (in: _Dest=0x3f29410, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav.ac3a86" [0147.499] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav.ac3a86", NtPathName=0xcf5f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\70tYy2LPNH_cqx.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e09c30 [0147.860] FlushFileBuffers (hFile=0x15c0) returned 1 [0147.861] CloseHandle (hObject=0x15c0) returned 1 [0147.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe70e8 [0147.862] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.862] wcscat (in: _Dest=0x2fe70e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.862] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0x20 [0147.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 [0147.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 Thread: id = 852 os_tid = 0x1288 [0141.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav" (normalized: "c:\\users\\eebsym5\\music\\f1mayiixcilysxt.wav")) returned 0x20 [0141.085] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav", dwFileAttributes=0x20) returned 1 [0142.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav" (normalized: "c:\\users\\eebsym5\\music\\f1mayiixcilysxt.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15c4 [0142.197] GetFileSizeEx (in: hFile=0x15c4, lpFileSize=0xa35f80c | out: lpFileSize=0xa35f80c*=7300) returned 1 [0142.198] SetFilePointerEx (in: hFile=0x15c4, liDistanceToMove=0x1c80, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.198] ReadFile (in: hFile=0x15c4, lpBuffer=0xa35f7e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa35f7f8, lpOverlapped=0x0 | out: lpBuffer=0xa35f7e8*, lpNumberOfBytesRead=0xa35f7f8*=0x4, lpOverlapped=0x0) returned 1 [0142.200] SetFilePointerEx (in: hFile=0x15c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0142.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0142.201] NtQuerySystemTime (in: CurrentTime=0xa35f780 | out: CurrentTime=0xa35f780*=132482710508604000) returned 0x0 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x24e03505 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x2c07f8fb [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x4e9144e8 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x577353ab [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x6caab51e [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x2d48d435 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x7efed964 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x5cdd5894 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x4e901aa9 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x27619313 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x4df6e2e1 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x6388dc2d [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0xba0b1e0 [0142.201] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x18451ab [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x7247da6 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x261860b [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x66914dd8 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x7051a7bf [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x57f23be [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x8242037 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x5371e27c [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x383e2efe [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x223b073a [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x73caa1d [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x4f11cf28 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x3d9eab07 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x8735912 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x3346f5a8 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x6762da35 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x30c3c8ec [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x185e3a59 [0142.202] RtlRandomEx (in: Seed=0xa35f778 | out: Seed=0xa35f778) returned 0x7c3a947a [0142.216] ReadFile (in: hFile=0x15c4, lpBuffer=0x687b100, nNumberOfBytesToRead=0x1c84, lpNumberOfBytesRead=0xa35f774, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0xa35f774*=0x1c84, lpOverlapped=0x0) returned 1 [0142.216] SetFilePointerEx (in: hFile=0x15c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.216] WriteFile (in: hFile=0x15c4, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x1c84, lpNumberOfBytesWritten=0xa35f778, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0xa35f778*=0x1c84, lpOverlapped=0x0) returned 1 [0143.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0143.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687b100) returned 1 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0143.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0143.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e80838 [0143.856] SetFilePointerEx (in: hFile=0x15c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.856] WriteFile (in: hFile=0x15c4, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xa35f800, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xa35f800*=0x118, lpOverlapped=0x0) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80a38) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80838) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0144.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0144.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0144.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e63d8 [0144.685] wcscpy (in: _Dest=0x66e63d8, _Source="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav") returned="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav" [0144.685] wcscat (in: _Dest=0x66e63d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav.ac3a86" [0144.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav.ac3a86", NtPathName=0xa35f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\F1MAyIixCilysxt.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d58630 [0144.753] FlushFileBuffers (hFile=0x15c4) returned 1 [0145.435] CloseHandle (hObject=0x15c4) returned 1 [0147.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6908 [0147.537] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.537] wcscat (in: _Dest=0x2fe6908, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.537] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.668] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1294 [0147.861] WriteFile (in: hFile=0x1294, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa35f794, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa35f794*=0x8b9, lpOverlapped=0x0) returned 1 [0147.873] CloseHandle (hObject=0x1294) returned 1 [0147.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0147.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 Thread: id = 853 os_tid = 0x128c [0141.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3" (normalized: "c:\\users\\eebsym5\\music\\gibpoh7q2eyr4j.mp3")) returned 0x20 [0141.085] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3", dwFileAttributes=0x20) returned 1 [0142.217] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3" (normalized: "c:\\users\\eebsym5\\music\\gibpoh7q2eyr4j.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15c8 [0142.217] GetFileSizeEx (in: hFile=0x15c8, lpFileSize=0xd05f99c | out: lpFileSize=0xd05f99c*=29203) returned 1 [0142.217] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x720f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.218] ReadFile (in: hFile=0x15c8, lpBuffer=0xd05f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd05f988, lpOverlapped=0x0 | out: lpBuffer=0xd05f978*, lpNumberOfBytesRead=0xd05f988*=0x4, lpOverlapped=0x0) returned 1 [0142.220] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0142.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0142.221] NtQuerySystemTime (in: CurrentTime=0xd05f910 | out: CurrentTime=0xd05f910*=132482710508916000) returned 0x0 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x50e11403 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x6634e500 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x7fcfa268 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x42ea14f8 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x79de1fd6 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x52b529ba [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x4bc8d8af [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x279aa2 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x502c9782 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x1e3a2875 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x7735a867 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x7ea418d1 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x1353f1 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x157b4887 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x42c990df [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x2295e4d0 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x47987835 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x3a172217 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x75e48357 [0142.221] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x555d23a [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x4ddcf778 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x6ea73643 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x67e7cbe3 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x479976a1 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x1d50cc00 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x70b93591 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x6769949 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x4db8c9ac [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x4bdbca1d [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x5c7f4dc7 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x33fed06 [0142.222] RtlRandomEx (in: Seed=0xd05f908 | out: Seed=0xd05f908) returned 0x901d1a1 [0142.235] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.235] ReadFile (in: hFile=0x15c8, lpBuffer=0x6882910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd05f910, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0xd05f910*=0x3c00, lpOverlapped=0x0) returned 1 [0142.235] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0142.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0142.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0142.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6886518 [0142.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0142.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0142.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0142.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0142.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0142.236] WriteFile (in: hFile=0x15c8, lpBuffer=0x6886518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd05f910, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesWritten=0xd05f910*=0x3c00, lpOverlapped=0x0) returned 1 [0143.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0143.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6882910) returned 1 [0143.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e806f8 [0143.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0143.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e80ab8 [0143.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0143.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0143.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0143.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0143.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1570) returned 1 [0143.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55718 [0143.862] SetFilePointerEx (in: hFile=0x15c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.862] WriteFile (in: hFile=0x15c8, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xd05f990, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0xd05f990*=0x116, lpOverlapped=0x0) returned 1 [0144.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0144.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80ab8) returned 1 [0144.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0144.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e806f8) returned 1 [0144.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0144.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0144.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0144.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0144.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0144.694] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3") returned="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3" [0144.694] wcscat (in: _Dest=0x3f29b10, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3.ac3a86" [0144.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3.ac3a86", NtPathName=0xd05f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\GibPoH7Q2EyR4j.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e093b0 [0144.773] FlushFileBuffers (hFile=0x15c8) returned 1 [0145.440] CloseHandle (hObject=0x15c8) returned 1 [0147.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe67e8 [0147.587] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.587] wcscat (in: _Dest=0x2fe67e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11f4 [0147.865] WriteFile (in: hFile=0x11f4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd05f924, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd05f924*=0x8b9, lpOverlapped=0x0) returned 1 [0147.869] CloseHandle (hObject=0x11f4) returned 1 [0147.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 [0147.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 854 os_tid = 0x1290 [0141.086] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a" (normalized: "c:\\users\\eebsym5\\music\\hja46qtiqcc4cg.m4a")) returned 0x20 [0141.086] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a", dwFileAttributes=0x20) returned 1 [0142.237] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a" (normalized: "c:\\users\\eebsym5\\music\\hja46qtiqcc4cg.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc [0142.237] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0xcfffacc | out: lpFileSize=0xcfffacc*=93019) returned 1 [0142.237] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x16b57, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.237] ReadFile (in: hFile=0x15cc, lpBuffer=0xcfffaa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcfffab8, lpOverlapped=0x0 | out: lpBuffer=0xcfffaa8*, lpNumberOfBytesRead=0xcfffab8*=0x4, lpOverlapped=0x0) returned 1 [0142.239] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0142.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0142.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0142.239] NtQuerySystemTime (in: CurrentTime=0xcfffa40 | out: CurrentTime=0xcfffa40*=132482710509072000) returned 0x0 [0142.239] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x2a67d09d [0142.239] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x70c25092 [0142.239] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x7e2d40df [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0xb5e875c [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x4fbd3228 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x72f737d7 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x21369c92 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x37ca4f27 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x3689156e [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x7b1e069b [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x36da9ee [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x7967cea9 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x3bab2c45 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x67e3bc7e [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x31fcbed9 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x3a8b27cd [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x5b512d56 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x193b0f64 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x39d8eab8 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x2d2dfe9 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x62373351 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x5fe92785 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x43e18f1e [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x3007cf0e [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x41355548 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x79c4fd74 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x786fc54e [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x67ce4087 [0142.240] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x144acfab [0142.241] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0xadf259c [0142.241] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x91e2d18 [0142.241] RtlRandomEx (in: Seed=0xcfffa38 | out: Seed=0xcfffa38) returned 0x622e8cb1 [0142.253] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.253] ReadFile (in: hFile=0x15cc, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0142.254] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0142.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0142.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0142.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0142.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0142.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0142.255] WriteFile (in: hFile=0x15cc, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0143.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0143.865] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.865] ReadFile (in: hFile=0x15cc, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0143.865] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1570 [0143.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0143.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0143.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0143.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0143.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0143.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1570) returned 1 [0143.866] WriteFile (in: hFile=0x15cc, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0144.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0144.349] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x12f5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.349] ReadFile (in: hFile=0x15cc, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0144.349] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x12f5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1de0 [0144.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0588 [0144.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0144.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0144.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0144.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0144.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0144.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0144.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0144.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1de0) returned 1 [0144.350] WriteFile (in: hFile=0x15cc, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcfffa40, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0xcfffa40*=0x3c00, lpOverlapped=0x0) returned 1 [0145.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0145.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c398 [0145.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0145.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067280 [0145.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0145.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0145.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0145.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0145.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f228) returned 1 [0145.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcdfa0 [0145.136] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.136] WriteFile (in: hFile=0x15cc, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0xcfffac0, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xcfffac0*=0x156, lpOverlapped=0x0) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066a80) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c398) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0145.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0145.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b3c0 [0145.140] wcscpy (in: _Dest=0x3e0b3c0, _Source="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a" [0145.141] wcscat (in: _Dest=0x3e0b3c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a.ac3a86" [0145.141] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a.ac3a86", NtPathName=0xcfffa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hJA46QtiQCc4Cg.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e08db0 [0145.145] FlushFileBuffers (hFile=0x15cc) returned 1 [0145.442] CloseHandle (hObject=0x15cc) returned 1 [0147.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0147.611] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.611] wcscat (in: _Dest=0x2fe6fc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568 [0147.854] WriteFile (in: hFile=0x568, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcfffa54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcfffa54*=0x8b9, lpOverlapped=0x0) returned 1 [0147.869] CloseHandle (hObject=0x568) returned 1 [0147.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0147.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5648) returned 1 Thread: id = 855 os_tid = 0x1294 [0141.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3009c0 [0141.086] wcscpy (in: _Dest=0x3009c0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0141.086] wcscat (in: _Dest=0x3009c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0141.086] wcscat (in: _Dest=0x3009c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\*") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\*" [0141.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0141.086] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x530ac4e0, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0x696b1cc0, ftLastAccessTime.dwHighDateTime=0x1d5ddee, ftLastWriteTime.dwLowDateTime=0x696b1cc0, ftLastWriteTime.dwHighDateTime=0x1d5ddee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0141.086] wcscmp (_String1=".", _String2=".") returned 0 [0141.086] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x530ac4e0, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0x696b1cc0, ftLastAccessTime.dwHighDateTime=0x1d5ddee, ftLastWriteTime.dwLowDateTime=0x696b1cc0, ftLastWriteTime.dwHighDateTime=0x1d5ddee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.087] wcscmp (_String1="..", _String2=".") returned 1 [0141.087] wcscmp (_String1="..", _String2="..") returned 0 [0141.087] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae53a650, ftCreationTime.dwHighDateTime=0x1d5e536, ftLastAccessTime.dwLowDateTime=0xa2071d80, ftLastAccessTime.dwHighDateTime=0x1d5e574, ftLastWriteTime.dwLowDateTime=0xa2071d80, ftLastWriteTime.dwHighDateTime=0x1d5e574, nFileSizeHigh=0x0, nFileSizeLow=0x11b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5GHkI5eAiCL6IRp7.m4a", cAlternateFileName="5GHKI5~1.M4A")) returned 1 [0141.087] wcscmp (_String1="5GHkI5eAiCL6IRp7.m4a", _String2=".") returned 1 [0141.087] wcscmp (_String1="5GHkI5eAiCL6IRp7.m4a", _String2="..") returned 1 [0141.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b740 [0141.087] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0141.087] wcscat (in: _Dest=0x3e0b740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0141.087] wcscat (in: _Dest=0x3e0b740, _Source="5GHkI5eAiCL6IRp7.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a" [0146.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0146.015] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e0ea40, ftCreationTime.dwHighDateTime=0x1d5e751, ftLastAccessTime.dwLowDateTime=0xaf730c10, ftLastAccessTime.dwHighDateTime=0x1d5e3a1, ftLastWriteTime.dwLowDateTime=0xaf730c10, ftLastWriteTime.dwHighDateTime=0x1d5e3a1, nFileSizeHigh=0x0, nFileSizeLow=0x118ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Qe0Vfbe809-.m4a", cAlternateFileName="5QE0VF~1.M4A")) returned 1 [0146.016] wcscmp (_String1="5Qe0Vfbe809-.m4a", _String2=".") returned 1 [0146.016] wcscmp (_String1="5Qe0Vfbe809-.m4a", _String2="..") returned 1 [0146.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd7f0 [0146.016] wcscpy (in: _Dest=0x66cd7f0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.016] wcscat (in: _Dest=0x66cd7f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.016] wcscat (in: _Dest=0x66cd7f0, _Source="5Qe0Vfbe809-.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a" [0146.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0146.017] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9e569e0, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x51cdfd0, ftLastAccessTime.dwHighDateTime=0x1d5e1bb, ftLastWriteTime.dwLowDateTime=0x51cdfd0, ftLastWriteTime.dwHighDateTime=0x1d5e1bb, nFileSizeHigh=0x0, nFileSizeLow=0xebe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BGuUyoYiCQnm6Rpz_cGQ.m4a", cAlternateFileName="BGUUYO~1.M4A")) returned 1 [0146.017] wcscmp (_String1="BGuUyoYiCQnm6Rpz_cGQ.m4a", _String2=".") returned 1 [0146.017] wcscmp (_String1="BGuUyoYiCQnm6Rpz_cGQ.m4a", _String2="..") returned 1 [0146.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0d80 [0146.017] wcscpy (in: _Dest=0x66d0d80, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.017] wcscat (in: _Dest=0x66d0d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.017] wcscat (in: _Dest=0x66d0d80, _Source="BGuUyoYiCQnm6Rpz_cGQ.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a" [0146.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0146.019] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8036afb0, ftCreationTime.dwHighDateTime=0x1d5df46, ftLastAccessTime.dwLowDateTime=0x5f7281d0, ftLastAccessTime.dwHighDateTime=0x1d5e489, ftLastWriteTime.dwLowDateTime=0x5f7281d0, ftLastWriteTime.dwHighDateTime=0x1d5e489, nFileSizeHigh=0x0, nFileSizeLow=0x114fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvqS.mp3", cAlternateFileName="")) returned 1 [0146.019] wcscmp (_String1="cvqS.mp3", _String2=".") returned 1 [0146.019] wcscmp (_String1="cvqS.mp3", _String2="..") returned 1 [0146.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef75a0 [0146.020] wcscpy (in: _Dest=0x3ef75a0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.020] wcscat (in: _Dest=0x3ef75a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.020] wcscat (in: _Dest=0x3ef75a0, _Source="cvqS.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3" [0146.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0146.021] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e859f40, ftCreationTime.dwHighDateTime=0x1d5e2d9, ftLastAccessTime.dwLowDateTime=0x947c3600, ftLastAccessTime.dwHighDateTime=0x1d5d935, ftLastWriteTime.dwLowDateTime=0x947c3600, ftLastWriteTime.dwHighDateTime=0x1d5d935, nFileSizeHigh=0x0, nFileSizeLow=0x93fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dk2 94Huwca3.m4a", cAlternateFileName="DK294H~1.M4A")) returned 1 [0146.021] wcscmp (_String1="dk2 94Huwca3.m4a", _String2=".") returned 1 [0146.021] wcscmp (_String1="dk2 94Huwca3.m4a", _String2="..") returned 1 [0146.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd448 [0146.021] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.021] wcscat (in: _Dest=0x66cd448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.021] wcscat (in: _Dest=0x66cd448, _Source="dk2 94Huwca3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a" [0146.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0146.023] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e6c1b0, ftCreationTime.dwHighDateTime=0x1d5e043, ftLastAccessTime.dwLowDateTime=0x1f89e1c0, ftLastAccessTime.dwHighDateTime=0x1d5da26, ftLastWriteTime.dwLowDateTime=0x1f89e1c0, ftLastWriteTime.dwHighDateTime=0x1d5da26, nFileSizeHigh=0x0, nFileSizeLow=0x3186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gc0ri56sp3sL_oPt4BJ8.wav", cAlternateFileName="GC0RI5~1.WAV")) returned 1 [0146.023] wcscmp (_String1="Gc0ri56sp3sL_oPt4BJ8.wav", _String2=".") returned 1 [0146.023] wcscmp (_String1="Gc0ri56sp3sL_oPt4BJ8.wav", _String2="..") returned 1 [0146.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0a38 [0146.023] wcscpy (in: _Dest=0x66d0a38, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.023] wcscat (in: _Dest=0x66d0a38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.023] wcscat (in: _Dest=0x66d0a38, _Source="Gc0ri56sp3sL_oPt4BJ8.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav" [0146.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0146.024] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ad1d70, ftCreationTime.dwHighDateTime=0x1d5ddea, ftLastAccessTime.dwLowDateTime=0xc3c32210, ftLastAccessTime.dwHighDateTime=0x1d5dd82, ftLastWriteTime.dwLowDateTime=0xc3c32210, ftLastWriteTime.dwHighDateTime=0x1d5dd82, nFileSizeHigh=0x0, nFileSizeLow=0x13908, dwReserved0=0x0, dwReserved1=0x0, cFileName="jKNXS-s_s.m4a", cAlternateFileName="JKNXS-~1.M4A")) returned 1 [0146.024] wcscmp (_String1="jKNXS-s_s.m4a", _String2=".") returned 1 [0146.025] wcscmp (_String1="jKNXS-s_s.m4a", _String2="..") returned 1 [0146.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d88 [0146.025] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.025] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.025] wcscat (in: _Dest=0x2fe6d88, _Source="jKNXS-s_s.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a" [0146.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0146.027] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c61310, ftCreationTime.dwHighDateTime=0x1d5db5b, ftLastAccessTime.dwLowDateTime=0x71ec9320, ftLastAccessTime.dwHighDateTime=0x1d5dc58, ftLastWriteTime.dwLowDateTime=0x71ec9320, ftLastWriteTime.dwHighDateTime=0x1d5dc58, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="K5Zx8O.mp3", cAlternateFileName="")) returned 1 [0146.027] wcscmp (_String1="K5Zx8O.mp3", _String2=".") returned 1 [0146.027] wcscmp (_String1="K5Zx8O.mp3", _String2="..") returned 1 [0146.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7e38 [0146.027] wcscpy (in: _Dest=0x3ef7e38, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.027] wcscat (in: _Dest=0x3ef7e38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.027] wcscat (in: _Dest=0x3ef7e38, _Source="K5Zx8O.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3" [0146.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0146.029] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1c4a00, ftCreationTime.dwHighDateTime=0x1d5e2c5, ftLastAccessTime.dwLowDateTime=0x5137a7f0, ftLastAccessTime.dwHighDateTime=0x1d5e874, ftLastWriteTime.dwLowDateTime=0x5137a7f0, ftLastWriteTime.dwHighDateTime=0x1d5e874, nFileSizeHigh=0x0, nFileSizeLow=0xa0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="L0QzjxUnOD07MCa.m4a", cAlternateFileName="L0QZJX~1.M4A")) returned 1 [0146.029] wcscmp (_String1="L0QzjxUnOD07MCa.m4a", _String2=".") returned 1 [0146.029] wcscmp (_String1="L0QzjxUnOD07MCa.m4a", _String2="..") returned 1 [0146.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd3e0 [0146.029] wcscpy (in: _Dest=0x66cd3e0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.029] wcscat (in: _Dest=0x66cd3e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.029] wcscat (in: _Dest=0x66cd3e0, _Source="L0QzjxUnOD07MCa.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a" [0146.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0146.030] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b603a10, ftCreationTime.dwHighDateTime=0x1d5defa, ftLastAccessTime.dwLowDateTime=0x87786e30, ftLastAccessTime.dwHighDateTime=0x1d5daff, ftLastWriteTime.dwLowDateTime=0x87786e30, ftLastWriteTime.dwHighDateTime=0x1d5daff, nFileSizeHigh=0x0, nFileSizeLow=0x6709, dwReserved0=0x0, dwReserved1=0x0, cFileName="N42iMchxoV3.mp3", cAlternateFileName="N42IMC~1.MP3")) returned 1 [0146.030] wcscmp (_String1="N42iMchxoV3.mp3", _String2=".") returned 1 [0146.031] wcscmp (_String1="N42iMchxoV3.mp3", _String2="..") returned 1 [0146.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0146.031] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.031] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.031] wcscat (in: _Dest=0x2fe1328, _Source="N42iMchxoV3.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3" [0146.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0146.032] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44f9540, ftCreationTime.dwHighDateTime=0x1d5e831, ftLastAccessTime.dwLowDateTime=0x8f09faf0, ftLastAccessTime.dwHighDateTime=0x1d5e83e, ftLastWriteTime.dwLowDateTime=0x8f09faf0, ftLastWriteTime.dwHighDateTime=0x1d5e83e, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nMAJVcizhPRnX4fXJ4Ds.mp3", cAlternateFileName="NMAJVC~1.MP3")) returned 1 [0146.033] wcscmp (_String1="nMAJVcizhPRnX4fXJ4Ds.mp3", _String2=".") returned 1 [0146.033] wcscmp (_String1="nMAJVcizhPRnX4fXJ4Ds.mp3", _String2="..") returned 1 [0146.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0df8 [0146.033] wcscpy (in: _Dest=0x66d0df8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.033] wcscat (in: _Dest=0x66d0df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.033] wcscat (in: _Dest=0x66d0df8, _Source="nMAJVcizhPRnX4fXJ4Ds.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3" [0146.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0146.034] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d5ac80, ftCreationTime.dwHighDateTime=0x1d5e562, ftLastAccessTime.dwLowDateTime=0x362ba8b0, ftLastAccessTime.dwHighDateTime=0x1d5deb7, ftLastWriteTime.dwLowDateTime=0x362ba8b0, ftLastWriteTime.dwHighDateTime=0x1d5deb7, nFileSizeHigh=0x0, nFileSizeLow=0x5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rgHVdk_.m4a", cAlternateFileName="")) returned 1 [0146.034] wcscmp (_String1="rgHVdk_.m4a", _String2=".") returned 1 [0146.034] wcscmp (_String1="rgHVdk_.m4a", _String2="..") returned 1 [0146.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7288 [0146.035] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.035] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.035] wcscat (in: _Dest=0x3ef7288, _Source="rgHVdk_.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a" [0146.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0146.037] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8181cba0, ftCreationTime.dwHighDateTime=0x1d5e06a, ftLastAccessTime.dwLowDateTime=0x70f3d930, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x70f3d930, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x14cd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="U3-7s-2U9yn N.wav", cAlternateFileName="U3-7S-~1.WAV")) returned 1 [0146.037] wcscmp (_String1="U3-7s-2U9yn N.wav", _String2=".") returned 1 [0146.037] wcscmp (_String1="U3-7s-2U9yn N.wav", _String2="..") returned 1 [0146.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x66cd310 [0146.037] wcscpy (in: _Dest=0x66cd310, _Source="C:\\Users\\EEBsYm5\\Music\\hN _" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _") returned="C:\\Users\\EEBsYm5\\Music\\hN _" [0146.037] wcscat (in: _Dest=0x66cd310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0146.037] wcscat (in: _Dest=0x66cd310, _Source="U3-7s-2U9yn N.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav" [0146.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0146.039] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8181cba0, ftCreationTime.dwHighDateTime=0x1d5e06a, ftLastAccessTime.dwLowDateTime=0x70f3d930, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x70f3d930, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x14cd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="U3-7s-2U9yn N.wav", cAlternateFileName="U3-7S-~1.WAV")) returned 0 [0146.039] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0146.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0146.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3009c0) returned 1 [0146.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e809f8) returned 1 Thread: id = 856 os_tid = 0x1298 [0141.095] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a" (normalized: "c:\\users\\eebsym5\\music\\knjx d8nxemc6y0oauc2.m4a")) returned 0x20 [0141.095] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a", dwFileAttributes=0x20) returned 1 [0142.255] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a" (normalized: "c:\\users\\eebsym5\\music\\knjx d8nxemc6y0oauc2.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15d4 [0142.255] GetFileSizeEx (in: hFile=0x15d4, lpFileSize=0x8d2fdec | out: lpFileSize=0x8d2fdec*=16645) returned 1 [0142.256] SetFilePointerEx (in: hFile=0x15d4, liDistanceToMove=0x4101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.256] ReadFile (in: hFile=0x15d4, lpBuffer=0x8d2fdc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d2fdd8, lpOverlapped=0x0 | out: lpBuffer=0x8d2fdc8*, lpNumberOfBytesRead=0x8d2fdd8*=0x4, lpOverlapped=0x0) returned 1 [0142.258] SetFilePointerEx (in: hFile=0x15d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0142.258] NtQuerySystemTime (in: CurrentTime=0x8d2fd60 | out: CurrentTime=0x8d2fd60*=132482710509228000) returned 0x0 [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x5ddf4270 [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x426b9d87 [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x79c92768 [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x472508cb [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x354425ea [0142.258] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x679bd2a4 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x6502b9ec [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x6cb1abe8 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x2a5c7e00 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x422d0334 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x337f7637 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x16f1ee61 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x71db6c29 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x62cc3a36 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x10336380 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x5d13343e [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x6d75bbe4 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x6339f097 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x5d61d69 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x2281830b [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x2fa10bf3 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x4e10baa8 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x7df08452 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x587df146 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x43b3dae3 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x74e94081 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x12565570 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x449ae08d [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x36fcb879 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x12a82592 [0142.259] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x6b836d49 [0142.260] RtlRandomEx (in: Seed=0x8d2fd58 | out: Seed=0x8d2fd58) returned 0x2b640b1b [0142.271] SetFilePointerEx (in: hFile=0x15d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.271] ReadFile (in: hFile=0x15d4, lpBuffer=0x6891930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d2fd60, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesRead=0x8d2fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0142.271] SetFilePointerEx (in: hFile=0x15d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0142.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0142.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0142.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0142.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6895538 [0142.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0142.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0142.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0142.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0142.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0142.272] WriteFile (in: hFile=0x15d4, lpBuffer=0x6895538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d2fd60, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesWritten=0x8d2fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0143.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6895538) returned 1 [0143.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0143.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d1570 [0143.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0143.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d1690 [0143.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0143.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0143.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0143.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0143.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1840) returned 1 [0143.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8b80 [0143.869] SetFilePointerEx (in: hFile=0x15d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.869] WriteFile (in: hFile=0x15d4, lpBuffer=0x3dd8b80*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x8d2fde0, lpOverlapped=0x0 | out: lpBuffer=0x3dd8b80*, lpNumberOfBytesWritten=0x8d2fde0*=0x122, lpOverlapped=0x0) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8b80) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1690) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1570) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0144.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0144.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0a38 [0144.696] wcscpy (in: _Dest=0x66d0a38, _Source="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a" [0144.696] wcscat (in: _Dest=0x66d0a38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a.ac3a86" [0144.696] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a.ac3a86", NtPathName=0x8d2fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\knJX d8nXEmc6y0OauC2.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354ab0 [0144.776] FlushFileBuffers (hFile=0x15d4) returned 1 [0145.440] CloseHandle (hObject=0x15d4) returned 1 [0147.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0147.589] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.589] wcscat (in: _Dest=0x2fe6848, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15c0 [0147.865] WriteFile (in: hFile=0x15c0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d2fd74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d2fd74*=0x8b9, lpOverlapped=0x0) returned 1 [0147.869] CloseHandle (hObject=0x15c0) returned 1 [0147.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0147.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 Thread: id = 857 os_tid = 0x129c [0141.096] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3" (normalized: "c:\\users\\eebsym5\\music\\lfyy05r-a2i7qfvlt2bt.mp3")) returned 0x20 [0141.097] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3", dwFileAttributes=0x20) returned 1 [0142.273] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3" (normalized: "c:\\users\\eebsym5\\music\\lfyy05r-a2i7qfvlt2bt.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15d8 [0142.273] GetFileSizeEx (in: hFile=0x15d8, lpFileSize=0xccdfd6c | out: lpFileSize=0xccdfd6c*=61292) returned 1 [0142.274] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0xef68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.274] ReadFile (in: hFile=0x15d8, lpBuffer=0xccdfd48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xccdfd58, lpOverlapped=0x0 | out: lpBuffer=0xccdfd48*, lpNumberOfBytesRead=0xccdfd58*=0x4, lpOverlapped=0x0) returned 1 [0142.276] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0142.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0142.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0142.276] NtQuerySystemTime (in: CurrentTime=0xccdfce0 | out: CurrentTime=0xccdfce0*=132482710509384000) returned 0x0 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x504299e9 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x6ebf7ecb [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x546eec3c [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x13fd4c27 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x74e27dc8 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x12fa3b82 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x58eb45e3 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x63160942 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x419b385c [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x71b5ee1 [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0xa31b6fa [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x436f46eb [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x577e286b [0142.276] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x6bd08765 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x62fd3cee [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x77ff3c1 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x24a12ed0 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x2eaed89b [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x2d51a21a [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x3669462 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x4c4e235f [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x18764100 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x1f03b011 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x12e366e7 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x37e35048 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x4881222e [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x2516b1ee [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x6a9e1295 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x181e6404 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x6168f23b [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x44b598e3 [0142.277] RtlRandomEx (in: Seed=0xccdfcd8 | out: Seed=0xccdfcd8) returned 0x4dbb0928 [0142.289] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.289] ReadFile (in: hFile=0x15d8, lpBuffer=0x6899140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xccdfce0, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesRead=0xccdfce0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.289] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0142.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0142.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0142.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x689cd48 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0142.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0142.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0142.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0142.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0142.290] WriteFile (in: hFile=0x15d8, lpBuffer=0x689cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xccdfce0, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesWritten=0xccdfce0*=0x3c00, lpOverlapped=0x0) returned 1 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689cd48) returned 1 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0143.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d1840 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0143.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d12e8 [0143.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0143.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0143.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1768) returned 1 [0143.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67078b0 [0143.873] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.873] WriteFile (in: hFile=0x15d8, lpBuffer=0x67078b0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xccdfd60, lpOverlapped=0x0 | out: lpBuffer=0x67078b0*, lpNumberOfBytesWritten=0xccdfd60*=0x122, lpOverlapped=0x0) returned 1 [0147.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67078b0) returned 1 [0147.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d12e8) returned 1 [0147.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0147.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1840) returned 1 [0147.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0147.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0147.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0147.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0147.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1da30 [0147.502] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3") returned="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3" [0147.502] wcscat (in: _Dest=0x3f1da30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3.ac3a86" [0147.502] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3.ac3a86", NtPathName=0xccdfcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\lfYY05r-A2I7QFvlt2bT.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0149.000] FlushFileBuffers (hFile=0x15d8) returned 1 [0149.002] CloseHandle (hObject=0x15d8) returned 1 [0149.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe5648 [0149.012] wcscpy (in: _Dest=0x2fe5648, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0149.012] wcscat (in: _Dest=0x2fe5648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0149.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0x20 [0149.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5648) returned 1 [0149.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 Thread: id = 858 os_tid = 0x12a0 [0141.097] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3" (normalized: "c:\\users\\eebsym5\\music\\lgmg.mp3")) returned 0x20 [0141.097] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3", dwFileAttributes=0x20) returned 1 [0142.291] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3" (normalized: "c:\\users\\eebsym5\\music\\lgmg.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15dc [0142.291] GetFileSizeEx (in: hFile=0x15dc, lpFileSize=0xd10f9d4 | out: lpFileSize=0xd10f9d4*=62065) returned 1 [0142.291] SetFilePointerEx (in: hFile=0x15dc, liDistanceToMove=0xf26d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.291] ReadFile (in: hFile=0x15dc, lpBuffer=0xd10f9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd10f9c0, lpOverlapped=0x0 | out: lpBuffer=0xd10f9b0*, lpNumberOfBytesRead=0xd10f9c0*=0x4, lpOverlapped=0x0) returned 1 [0142.293] SetFilePointerEx (in: hFile=0x15dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0142.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0142.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.293] NtQuerySystemTime (in: CurrentTime=0xd10f948 | out: CurrentTime=0xd10f948*=132482710509540000) returned 0x0 [0142.293] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x6131569d [0142.293] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x143c64ca [0142.293] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x6a4000aa [0142.293] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x4b354b4 [0142.293] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x51bd9e8d [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x60848c [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x5708644e [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x1b51fa63 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x77b006c7 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x40aad9ce [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x5ea3ab78 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x25d4ddf8 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x45b59b93 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0xe2b13b [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x35e6a0a1 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x330914e0 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x6fdb3a62 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x468f9de7 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x83a7505 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x40f81273 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0xc45dcad [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x302d5b7d [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x31479dc0 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x20d17004 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x2df5e945 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x13c66efe [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x698e5f4f [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x5a1be26e [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x4a688278 [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x12bd65bb [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x3cdb0ce [0142.294] RtlRandomEx (in: Seed=0xd10f940 | out: Seed=0xd10f940) returned 0x6b77606b [0142.326] SetFilePointerEx (in: hFile=0x15dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.326] ReadFile (in: hFile=0x15dc, lpBuffer=0x68a0950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd10f948, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesRead=0xd10f948*=0x3c00, lpOverlapped=0x0) returned 1 [0142.326] SetFilePointerEx (in: hFile=0x15dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a4558 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0142.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0142.328] WriteFile (in: hFile=0x15dc, lpBuffer=0x68a4558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd10f948, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesWritten=0xd10f948*=0x3c00, lpOverlapped=0x0) returned 1 [0144.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0144.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0144.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef1360 [0144.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0144.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef3750 [0144.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0144.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0144.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0144.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0144.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0144.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec4e0 [0144.049] SetFilePointerEx (in: hFile=0x15dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.049] WriteFile (in: hFile=0x15dc, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xd10f9c8, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xd10f9c8*=0x102, lpOverlapped=0x0) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d5178 [0144.697] wcscpy (in: _Dest=0x66d5178, _Source="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3") returned="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3" [0144.697] wcscat (in: _Dest=0x66d5178, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3.ac3a86" [0144.697] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\lgmg.mp3.ac3a86", NtPathName=0xd10f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\lgmg.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f292c0 [0144.818] FlushFileBuffers (hFile=0x15dc) returned 1 [0145.437] CloseHandle (hObject=0x15dc) returned 1 [0147.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f68 [0147.576] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.576] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x125c [0147.865] WriteFile (in: hFile=0x125c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd10f95c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd10f95c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.871] CloseHandle (hObject=0x125c) returned 1 [0147.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d57a8) returned 1 Thread: id = 859 os_tid = 0x12a4 [0141.102] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mL3p.wav" (normalized: "c:\\users\\eebsym5\\music\\ml3p.wav")) returned 0x20 [0141.103] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mL3p.wav", dwFileAttributes=0x20) returned 1 [0142.328] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mL3p.wav" (normalized: "c:\\users\\eebsym5\\music\\ml3p.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e0 [0142.328] GetFileSizeEx (in: hFile=0x15e0, lpFileSize=0xd15fe54 | out: lpFileSize=0xd15fe54*=3831) returned 1 [0142.329] SetFilePointerEx (in: hFile=0x15e0, liDistanceToMove=0xef3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.329] ReadFile (in: hFile=0x15e0, lpBuffer=0xd15fe30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd15fe40, lpOverlapped=0x0 | out: lpBuffer=0xd15fe30*, lpNumberOfBytesRead=0xd15fe40*=0x4, lpOverlapped=0x0) returned 1 [0142.331] SetFilePointerEx (in: hFile=0x15e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0142.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0142.331] NtQuerySystemTime (in: CurrentTime=0xd15fdc8 | out: CurrentTime=0xd15fdc8*=132482710510008000) returned 0x0 [0142.331] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x2a28fd7b [0142.331] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x6e61c2a6 [0142.331] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x8f6e83d [0142.331] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x73eb60e0 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x75aa4839 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x5b5e0554 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x39f75e2c [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x2bff8a70 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x19b4e900 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x2a75e8b7 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x23167b98 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x4ebc1da8 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x737e6b14 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x1830a503 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0xc924a5 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x7f656173 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x1d0f7c67 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x6c9b60a3 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x48d2979e [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x4bcdcf99 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x3a23ef9e [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x27372d20 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x78d6096a [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x35c8b46a [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x4dc3dd0a [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x6e8eb3a4 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x60b79b60 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x6b567a9a [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x75d583f5 [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x719b382e [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x66eb987d [0142.332] RtlRandomEx (in: Seed=0xd15fdc0 | out: Seed=0xd15fdc0) returned 0x154a289e [0142.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0142.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0142.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68abd68 [0142.346] ReadFile (in: hFile=0x15e0, lpBuffer=0x68a8160, nNumberOfBytesToRead=0xef7, lpNumberOfBytesRead=0xd15fdbc, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0xd15fdbc*=0xef7, lpOverlapped=0x0) returned 1 [0142.346] SetFilePointerEx (in: hFile=0x15e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.346] WriteFile (in: hFile=0x15e0, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0xef7, lpNumberOfBytesWritten=0xd15fdc0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0xd15fdc0*=0xef7, lpOverlapped=0x0) returned 1 [0144.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0144.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0144.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0144.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0144.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0144.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0144.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4ab0 [0144.052] SetFilePointerEx (in: hFile=0x15e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.052] WriteFile (in: hFile=0x15e0, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xd15fe48, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0xd15fe48*=0x102, lpOverlapped=0x0) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0144.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0144.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4db0 [0144.699] wcscpy (in: _Dest=0x66d4db0, _Source="C:\\Users\\EEBsYm5\\Music\\mL3p.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mL3p.wav") returned="C:\\Users\\EEBsYm5\\Music\\mL3p.wav" [0144.699] wcscat (in: _Dest=0x66d4db0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mL3p.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\mL3p.wav.ac3a86" [0144.699] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\mL3p.wav.ac3a86", NtPathName=0xd15fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\mL3p.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f294f0 [0144.820] FlushFileBuffers (hFile=0x15e0) returned 1 [0145.437] CloseHandle (hObject=0x15e0) returned 1 [0147.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3c08 [0147.525] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.525] wcscat (in: _Dest=0x2fe3c08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.525] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1200 [0147.867] WriteFile (in: hFile=0x1200, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd15fddc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd15fddc*=0x8b9, lpOverlapped=0x0) returned 1 [0147.873] CloseHandle (hObject=0x1200) returned 1 [0147.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 [0147.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6180) returned 1 Thread: id = 860 os_tid = 0x12a8 [0141.103] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a" (normalized: "c:\\users\\eebsym5\\music\\mrmuokewwh_2.m4a")) returned 0x20 [0141.103] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a", dwFileAttributes=0x20) returned 1 [0142.347] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a" (normalized: "c:\\users\\eebsym5\\music\\mrmuokewwh_2.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e4 [0142.347] GetFileSizeEx (in: hFile=0x15e4, lpFileSize=0xbf9f834 | out: lpFileSize=0xbf9f834*=86715) returned 1 [0142.347] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x152b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.347] ReadFile (in: hFile=0x15e4, lpBuffer=0xbf9f810, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbf9f820, lpOverlapped=0x0 | out: lpBuffer=0xbf9f810*, lpNumberOfBytesRead=0xbf9f820*=0x4, lpOverlapped=0x0) returned 1 [0142.349] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0142.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0142.350] NtQuerySystemTime (in: CurrentTime=0xbf9f7a8 | out: CurrentTime=0xbf9f7a8*=132482710510164000) returned 0x0 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x4a6ddaea [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x1f7370c1 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x6860aa70 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x2c772985 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x4dd3d00c [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x223a08ce [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x54027e17 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x2c452498 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x370b302d [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x65ceed1d [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x293403d5 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x4dab2394 [0142.350] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x527c0ec8 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x9e8451f [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x49e2122d [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x31e22785 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x1a57bac4 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x58d5c612 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x6be3c568 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x4d2c4161 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x13639fcf [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x687470b4 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x20ff11bd [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x5173290a [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x664d53d6 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x7900dc30 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x74a6535a [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x59e41db1 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x6f2a87b [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x17e98e69 [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x76e90eba [0142.351] RtlRandomEx (in: Seed=0xbf9f7a0 | out: Seed=0xbf9f7a0) returned 0x2a0a13fb [0142.366] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.366] ReadFile (in: hFile=0x15e4, lpBuffer=0x682fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesRead=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.366] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe318 [0142.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ab0 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68338f0 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0142.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0142.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0142.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe318) returned 1 [0142.367] WriteFile (in: hFile=0x15e4, lpBuffer=0x68338f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesWritten=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0144.085] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.085] ReadFile (in: hFile=0x15e4, lpBuffer=0x682fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesRead=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.085] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe2d0 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68338f0 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0144.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0144.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0144.086] WriteFile (in: hFile=0x15e4, lpBuffer=0x68338f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesWritten=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0144.603] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x116bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.603] ReadFile (in: hFile=0x15e4, lpBuffer=0x682fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesRead=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.603] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x116bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff3f8 [0144.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0144.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0144.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0144.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68338f0 [0144.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0144.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0144.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0144.604] WriteFile (in: hFile=0x15e4, lpBuffer=0x68338f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf9f7a8, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesWritten=0xbf9f7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0145.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0145.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0145.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19cb0 [0145.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0145.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0145.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0145.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0145.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b30) returned 1 [0145.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dcdfa0 [0145.432] SetFilePointerEx (in: hFile=0x15e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.432] WriteFile (in: hFile=0x15e4, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xbf9f828, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xbf9f828*=0x152, lpOverlapped=0x0) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0147.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0147.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0147.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e550 [0147.672] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a") returned="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a" [0147.672] wcscat (in: _Dest=0x3d8e550, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a.ac3a86" [0147.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a.ac3a86", NtPathName=0xbf9f7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\MRmuOkEWWh_2.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e09430 [0147.814] FlushFileBuffers (hFile=0x15e4) returned 1 [0147.817] CloseHandle (hObject=0x15e4) returned 1 [0147.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7028 [0147.818] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.818] wcscat (in: _Dest=0x2fe7028, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0x20 [0147.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 [0147.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 Thread: id = 861 os_tid = 0x12ac [0141.104] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3" (normalized: "c:\\users\\eebsym5\\music\\mujpz4ueihtryrk_tr_c.mp3")) returned 0x20 [0141.104] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3", dwFileAttributes=0x20) returned 1 [0142.368] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3" (normalized: "c:\\users\\eebsym5\\music\\mujpz4ueihtryrk_tr_c.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e8 [0142.368] GetFileSizeEx (in: hFile=0x15e8, lpFileSize=0x838fc44 | out: lpFileSize=0x838fc44*=55392) returned 1 [0142.368] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0xd85c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.368] ReadFile (in: hFile=0x15e8, lpBuffer=0x838fc20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x838fc30, lpOverlapped=0x0 | out: lpBuffer=0x838fc20*, lpNumberOfBytesRead=0x838fc30*=0x4, lpOverlapped=0x0) returned 1 [0142.370] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0142.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b708 [0142.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0142.370] NtQuerySystemTime (in: CurrentTime=0x838fbb8 | out: CurrentTime=0x838fbb8*=132482710510320000) returned 0x0 [0142.370] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x2f0271d [0142.370] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x59732ff3 [0142.370] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x7e193862 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x1b746624 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x27d0130d [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x5193fc5e [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x37b4c4d7 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x63236d0d [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x5053c8bd [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x48b68072 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x2b3b3fc4 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x74366844 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x602690d6 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x13b21724 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x1d7a5f39 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x269ef790 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0xab5b2fc [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x5623a3a3 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x2be9de3f [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x3b23a868 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x4de5e1e8 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0xf8c77b [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x7a82e04e [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x2417cf5f [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x4e3b9368 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x1aeccbe9 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x9e6e57c [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0xb4a9818 [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x21d520df [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0xf3563f [0142.371] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x3e1ed37e [0142.372] RtlRandomEx (in: Seed=0x838fbb0 | out: Seed=0x838fbb0) returned 0x41938567 [0142.382] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.382] ReadFile (in: hFile=0x15e8, lpBuffer=0x68374f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x838fbb8, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesRead=0x838fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.383] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe318 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ab0 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0142.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683b100 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0142.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0142.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0142.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe318) returned 1 [0142.384] WriteFile (in: hFile=0x15e8, lpBuffer=0x683b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x838fbb8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesWritten=0x838fbb8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0144.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0144.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66fe2d0 [0144.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0144.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66ff488 [0144.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0144.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0144.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0144.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0144.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67079e8 [0144.097] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.097] WriteFile (in: hFile=0x15e8, lpBuffer=0x67079e8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x838fc38, lpOverlapped=0x0 | out: lpBuffer=0x67079e8*, lpNumberOfBytesWritten=0x838fc38*=0x122, lpOverlapped=0x0) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67079e8) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff488) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0144.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0144.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0948 [0144.702] wcscpy (in: _Dest=0x66d0948, _Source="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3") returned="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3" [0144.702] wcscat (in: _Dest=0x66d0948, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3.ac3a86" [0144.702] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3.ac3a86", NtPathName=0x838fbb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\mUJpZ4UEIhTryRK_TR_c.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3555f0 [0144.823] FlushFileBuffers (hFile=0x15e8) returned 1 [0145.437] CloseHandle (hObject=0x15e8) returned 1 [0147.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0147.525] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.525] wcscat (in: _Dest=0x2fe6cc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.526] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1120 [0147.867] WriteFile (in: hFile=0x1120, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x838fbcc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x838fbcc*=0x8b9, lpOverlapped=0x0) returned 1 [0147.872] CloseHandle (hObject=0x1120) returned 1 [0147.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0147.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cc88) returned 1 Thread: id = 862 os_tid = 0x12b0 [0141.105] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav" (normalized: "c:\\users\\eebsym5\\music\\p9xsx.wav")) returned 0x20 [0141.105] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav", dwFileAttributes=0x20) returned 1 [0142.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav" (normalized: "c:\\users\\eebsym5\\music\\p9xsx.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15ec [0142.385] GetFileSizeEx (in: hFile=0x15ec, lpFileSize=0xd0afb1c | out: lpFileSize=0xd0afb1c*=38763) returned 1 [0142.385] SetFilePointerEx (in: hFile=0x15ec, liDistanceToMove=0x9767, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.385] ReadFile (in: hFile=0x15ec, lpBuffer=0xd0afaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd0afb08, lpOverlapped=0x0 | out: lpBuffer=0xd0afaf8*, lpNumberOfBytesRead=0xd0afb08*=0x4, lpOverlapped=0x0) returned 1 [0142.387] SetFilePointerEx (in: hFile=0x15ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0142.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0142.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.387] NtQuerySystemTime (in: CurrentTime=0xd0afa90 | out: CurrentTime=0xd0afa90*=132482710510476000) returned 0x0 [0142.387] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x62be9102 [0142.387] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x2a87e8ac [0142.387] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x174899e8 [0142.387] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x17d3221a [0142.387] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x6ade1f6d [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x4c990c10 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x64677d02 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x51b1f22 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x175e5506 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x5c6300c1 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x7a83a298 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x7ba952af [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x331712f6 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x1e1318df [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0xbdc9869 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x4e182f64 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x4b1d3fb9 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x3a06ebb1 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x2b0b77cc [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x255330d4 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x1104aade [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0xe99cd92 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x3f4b6bc2 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x164ddea [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x2eb37e02 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x78254cc [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x4dabfc25 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x335ea8d4 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x44a6d349 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x3d918838 [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x3b36e8ac [0142.388] RtlRandomEx (in: Seed=0xd0afa88 | out: Seed=0xd0afa88) returned 0x3cddead2 [0142.401] SetFilePointerEx (in: hFile=0x15ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.401] ReadFile (in: hFile=0x15ec, lpBuffer=0x683ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd0afa90, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesRead=0xd0afa90*=0x3c00, lpOverlapped=0x0) returned 1 [0142.402] SetFilePointerEx (in: hFile=0x15ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe318 [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ab0 [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0142.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0142.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6842910 [0142.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0142.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe318) returned 1 [0142.403] WriteFile (in: hFile=0x15ec, lpBuffer=0x6842910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd0afa90, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesWritten=0xd0afa90*=0x3c00, lpOverlapped=0x0) returned 1 [0144.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0144.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0144.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0144.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0144.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0144.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0144.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0144.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0144.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0144.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec5f8 [0144.115] SetFilePointerEx (in: hFile=0x15ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.115] WriteFile (in: hFile=0x15ec, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xd0afb10, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xd0afb10*=0x104, lpOverlapped=0x0) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0144.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0144.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d50c8 [0144.703] wcscpy (in: _Dest=0x66d50c8, _Source="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav") returned="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav" [0144.703] wcscat (in: _Dest=0x66d50c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav.ac3a86" [0144.704] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\p9xsX.wav.ac3a86", NtPathName=0xd0afa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\p9xsX.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f295d0 [0144.826] FlushFileBuffers (hFile=0x15ec) returned 1 [0145.438] CloseHandle (hObject=0x15ec) returned 1 [0147.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0147.527] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.527] wcscat (in: _Dest=0x2fe64e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.527] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1278 [0147.866] WriteFile (in: hFile=0x1278, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd0afaa4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd0afaa4*=0x8b9, lpOverlapped=0x0) returned 1 [0147.872] CloseHandle (hObject=0x1278) returned 1 [0147.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0147.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61a70) returned 1 Thread: id = 863 os_tid = 0x12b4 [0141.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3" (normalized: "c:\\users\\eebsym5\\music\\r30lmiupr0owkp66e47.mp3")) returned 0x20 [0141.106] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3", dwFileAttributes=0x20) returned 1 [0142.403] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3" (normalized: "c:\\users\\eebsym5\\music\\r30lmiupr0owkp66e47.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f0 [0142.404] GetFileSizeEx (in: hFile=0x15f0, lpFileSize=0xd22f8bc | out: lpFileSize=0xd22f8bc*=5110) returned 1 [0142.404] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x13f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.404] ReadFile (in: hFile=0x15f0, lpBuffer=0xd22f898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd22f8a8, lpOverlapped=0x0 | out: lpBuffer=0xd22f898*, lpNumberOfBytesRead=0xd22f8a8*=0x4, lpOverlapped=0x0) returned 1 [0142.406] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0142.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0142.407] NtQuerySystemTime (in: CurrentTime=0xd22f830 | out: CurrentTime=0xd22f830*=132482710510788000) returned 0x0 [0142.407] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x69fc1e64 [0142.407] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x69080c05 [0142.407] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x76c5e9e8 [0142.407] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x770c2334 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x717e7e41 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x3d3a8c03 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x7ce4f5f [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x4d0fa628 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x6d4807a9 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x532799ec [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x26158d63 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x5f6bacb6 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x3577ea32 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x6f87a940 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0xe89ee0e [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x423b1299 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x3f5149d1 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x5bffa0e7 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x48b14916 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x397d0593 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x792f8b7d [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x35edfde1 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x3b899147 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x17eb6143 [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x707ac25f [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x7880bdbc [0142.408] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x5ce52d70 [0142.409] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x8d95ae9 [0142.409] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x3f396a0a [0142.409] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x30cf53c7 [0142.409] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x1d3d2699 [0142.409] RtlRandomEx (in: Seed=0xd22f828 | out: Seed=0xd22f828) returned 0x86b4f0f [0142.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0142.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0142.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684a120 [0142.421] ReadFile (in: hFile=0x15f0, lpBuffer=0x6846518, nNumberOfBytesToRead=0x13f6, lpNumberOfBytesRead=0xd22f824, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesRead=0xd22f824*=0x13f6, lpOverlapped=0x0) returned 1 [0142.422] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.422] WriteFile (in: hFile=0x15f0, lpBuffer=0x684a120*, nNumberOfBytesToWrite=0x13f6, lpNumberOfBytesWritten=0xd22f828, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesWritten=0xd22f828*=0x13f6, lpOverlapped=0x0) returned 1 [0144.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0144.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0144.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0144.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0144.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0144.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0144.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe318) returned 1 [0144.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66fe318 [0144.116] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.116] WriteFile (in: hFile=0x15f0, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xd22f8b0, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0xd22f8b0*=0x120, lpOverlapped=0x0) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff4d0) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe318) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0144.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0144.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0510 [0144.705] wcscpy (in: _Dest=0x66d0510, _Source="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3") returned="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3" [0144.705] wcscat (in: _Dest=0x66d0510, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3.ac3a86" [0144.706] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3.ac3a86", NtPathName=0xd22f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\r30LmIUPR0oWkP66E47.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3550e0 [0144.828] FlushFileBuffers (hFile=0x15f0) returned 1 [0145.438] CloseHandle (hObject=0x15f0) returned 1 [0147.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ba8 [0147.528] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.528] wcscat (in: _Dest=0x2fe6ba8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.528] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15e4 [0147.866] WriteFile (in: hFile=0x15e4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd22f844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd22f844*=0x8b9, lpOverlapped=0x0) returned 1 [0147.872] CloseHandle (hObject=0x15e4) returned 1 [0147.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0147.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 Thread: id = 864 os_tid = 0x12b8 [0141.107] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a" (normalized: "c:\\users\\eebsym5\\music\\t6yllj_xedxs.m4a")) returned 0x20 [0141.107] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a", dwFileAttributes=0x20) returned 1 [0142.423] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a" (normalized: "c:\\users\\eebsym5\\music\\t6yllj_xedxs.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f4 [0142.423] GetFileSizeEx (in: hFile=0x15f4, lpFileSize=0xd2bfc8c | out: lpFileSize=0xd2bfc8c*=64998) returned 1 [0142.423] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0xfde2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.423] ReadFile (in: hFile=0x15f4, lpBuffer=0xd2bfc68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd2bfc78, lpOverlapped=0x0 | out: lpBuffer=0xd2bfc68*, lpNumberOfBytesRead=0xd2bfc78*=0x4, lpOverlapped=0x0) returned 1 [0142.425] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0142.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0142.425] NtQuerySystemTime (in: CurrentTime=0xd2bfc00 | out: CurrentTime=0xd2bfc00*=132482710510944000) returned 0x0 [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x27b23a16 [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x116c1bbf [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x76536b10 [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x1d90dc05 [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x7d54e642 [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2e957fad [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x7851894f [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x23d334c [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x651f565d [0142.425] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2bc46bcb [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x78aab05c [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x102b7e84 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x6924ef3d [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x1b59a95e [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x23f68469 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x4c0e91a8 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x7dccc477 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x4c94658a [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x4cb9f4a8 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x3728abd6 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2125860b [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x11d0d138 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x16362d14 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2b8766f7 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x569bff51 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x4c8f1be8 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2fffcc8e [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x4398411c [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x2d9ddd91 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0xc260b7f [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0x45e71d04 [0142.426] RtlRandomEx (in: Seed=0xd2bfbf8 | out: Seed=0xd2bfbf8) returned 0xcd321e4 [0142.442] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.442] ReadFile (in: hFile=0x15f4, lpBuffer=0x684dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd2bfc00, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesRead=0xd2bfc00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.442] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe360 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0142.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0142.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0142.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe360) returned 1 [0142.444] WriteFile (in: hFile=0x15f4, lpBuffer=0x6851930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd2bfc00, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesWritten=0xd2bfc00*=0x3c00, lpOverlapped=0x0) returned 1 [0144.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0144.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19b98 [0144.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19bd0 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4088 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0144.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0144.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0144.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d554c8 [0144.118] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.118] WriteFile (in: hFile=0x15f4, lpBuffer=0x3d554c8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xd2bfc80, lpOverlapped=0x0 | out: lpBuffer=0x3d554c8*, lpNumberOfBytesWritten=0xd2bfc80*=0x112, lpOverlapped=0x0) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19bd0) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0144.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0144.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c398 [0144.707] wcscpy (in: _Dest=0x3d8c398, _Source="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a") returned="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a" [0144.708] wcscat (in: _Dest=0x3d8c398, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a.ac3a86" [0144.708] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a.ac3a86", NtPathName=0xd2bfbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\t6ylLJ_XeDxS.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e08db0 [0144.833] FlushFileBuffers (hFile=0x15f4) returned 1 [0145.439] CloseHandle (hObject=0x15f4) returned 1 [0147.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f08 [0147.538] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.538] wcscat (in: _Dest=0x2fe6f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x127c [0147.865] WriteFile (in: hFile=0x127c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd2bfc14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd2bfc14*=0x8b9, lpOverlapped=0x0) returned 1 [0147.871] CloseHandle (hObject=0x127c) returned 1 [0147.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0147.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7548) returned 1 Thread: id = 865 os_tid = 0x12bc [0141.107] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav" (normalized: "c:\\users\\eebsym5\\music\\tewf1 lz.wav")) returned 0x20 [0141.107] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav", dwFileAttributes=0x20) returned 1 [0142.444] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav" (normalized: "c:\\users\\eebsym5\\music\\tewf1 lz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f8 [0142.445] GetFileSizeEx (in: hFile=0x15f8, lpFileSize=0xd34f994 | out: lpFileSize=0xd34f994*=28952) returned 1 [0142.445] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x7114, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.445] ReadFile (in: hFile=0x15f8, lpBuffer=0xd34f970, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd34f980, lpOverlapped=0x0 | out: lpBuffer=0xd34f970*, lpNumberOfBytesRead=0xd34f980*=0x4, lpOverlapped=0x0) returned 1 [0142.447] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0142.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0142.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0142.447] NtQuerySystemTime (in: CurrentTime=0xd34f908 | out: CurrentTime=0xd34f908*=132482710511100000) returned 0x0 [0142.447] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x5574f031 [0142.447] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x6669ef78 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0xf7df2b2 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x1c51eeea [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x35392c65 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x806af79 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x24caab1 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x47af6dc0 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x3d49d0aa [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x542caaeb [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0xc360a5c [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x42705d5c [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x2e3ffeba [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x34c14e12 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x41a443c7 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x2a7d4860 [0142.448] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x60325b84 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0xb051564 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x64b278e8 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x279a2f54 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x1df00969 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x10af037c [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x271a3a6 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x1175e91f [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x280002d8 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x3f8016a9 [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x4ffd33ca [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x888563d [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x50e3b5ff [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x4cacfcd [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x146b28ca [0142.449] RtlRandomEx (in: Seed=0xd34f900 | out: Seed=0xd34f900) returned 0x63a09e7c [0142.466] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.466] ReadFile (in: hFile=0x15f8, lpBuffer=0x6855538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd34f908, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesRead=0xd34f908*=0x3c00, lpOverlapped=0x0) returned 1 [0142.466] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe360 [0142.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0142.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6859140 [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0142.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0142.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe360) returned 1 [0142.467] WriteFile (in: hFile=0x15f8, lpBuffer=0x6859140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd34f908, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesWritten=0xd34f908*=0x3c00, lpOverlapped=0x0) returned 1 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f30 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f60 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0144.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec710 [0144.119] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.119] WriteFile (in: hFile=0x15f8, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xd34f988, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xd34f988*=0x10a, lpOverlapped=0x0) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0144.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0144.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6668 [0144.710] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav") returned="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav" [0144.710] wcscat (in: _Dest=0x2fe6668, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav.ac3a86" [0144.710] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav.ac3a86", NtPathName=0xd34f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tEwf1 lz.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0b28 [0144.830] FlushFileBuffers (hFile=0x15f8) returned 1 [0145.438] CloseHandle (hObject=0x15f8) returned 1 [0147.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6968 [0147.529] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.529] wcscat (in: _Dest=0x2fe6968, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.529] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0xffffffff [0147.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15fc [0147.866] WriteFile (in: hFile=0x15fc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd34f91c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd34f91c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.872] CloseHandle (hObject=0x15fc) returned 1 [0147.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0147.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 Thread: id = 866 os_tid = 0x12c0 [0141.108] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3" (normalized: "c:\\users\\eebsym5\\music\\xvujhsryacrendsdrtye.mp3")) returned 0x20 [0141.108] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3", dwFileAttributes=0x20) returned 1 [0142.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3" (normalized: "c:\\users\\eebsym5\\music\\xvujhsryacrendsdrtye.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15fc [0142.468] GetFileSizeEx (in: hFile=0x15fc, lpFileSize=0x99ef90c | out: lpFileSize=0x99ef90c*=72125) returned 1 [0142.468] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x119b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.468] ReadFile (in: hFile=0x15fc, lpBuffer=0x99ef8e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99ef8f8, lpOverlapped=0x0 | out: lpBuffer=0x99ef8e8*, lpNumberOfBytesRead=0x99ef8f8*=0x4, lpOverlapped=0x0) returned 1 [0142.470] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0142.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0142.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0142.471] NtQuerySystemTime (in: CurrentTime=0x99ef880 | out: CurrentTime=0x99ef880*=132482710511412000) returned 0x0 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x6c17acf [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x1b672d6b [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x78c87f65 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x2433454a [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x5432ef7f [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x6655d35 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x726f16a7 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x4be3b8e8 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x3807399d [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x29bd6359 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x1077218d [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x6f112290 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x14dbfb32 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x1d806d16 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x7dc71c45 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x56c67a99 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x4ae66b8b [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x69750b0a [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x71b348fd [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x12bece3a [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0xf3ba9ee [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x4466f159 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x3ff993b [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x62a84011 [0142.471] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x24fd899e [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x330e8fe [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x2666bb12 [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x498b6475 [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x70ee768b [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x7e73b61a [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x61fb72b6 [0142.472] RtlRandomEx (in: Seed=0x99ef878 | out: Seed=0x99ef878) returned 0x737daa3b [0142.483] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.483] ReadFile (in: hFile=0x15fc, lpBuffer=0x685cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99ef880, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesRead=0x99ef880*=0x3c00, lpOverlapped=0x0) returned 1 [0142.483] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe360 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0142.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6860950 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0142.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0142.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0142.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe360) returned 1 [0142.485] WriteFile (in: hFile=0x15fc, lpBuffer=0x6860950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99ef880, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesWritten=0x99ef880*=0x3c00, lpOverlapped=0x0) returned 1 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0145.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66ff290 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0145.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66ff320 [0145.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0145.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0510) returned 1 [0145.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff248) returned 1 [0145.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67079e8 [0145.021] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.021] WriteFile (in: hFile=0x15fc, lpBuffer=0x67079e8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x99ef900, lpOverlapped=0x0 | out: lpBuffer=0x67079e8*, lpNumberOfBytesWritten=0x99ef900*=0x122, lpOverlapped=0x0) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67079e8) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff320) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0147.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0147.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34c40 [0147.658] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3") returned="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3" [0147.658] wcscat (in: _Dest=0x3e34c40, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3.ac3a86" [0147.658] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3.ac3a86", NtPathName=0x99ef878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\XvuJhSRyaCRENDSdRTYE.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbaa8 [0147.816] FlushFileBuffers (hFile=0x15fc) returned 1 [0147.819] CloseHandle (hObject=0x15fc) returned 1 [0147.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7088 [0147.820] wcscpy (in: _Dest=0x2fe7088, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0147.820] wcscat (in: _Dest=0x2fe7088, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" [0147.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\ac3a86-readme.txt")) returned 0x20 [0147.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7088) returned 1 [0147.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 Thread: id = 867 os_tid = 0x12c4 [0141.115] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv" (normalized: "c:\\users\\eebsym5\\videos\\0az60dph491w_7oa2qw.flv")) returned 0x20 [0141.115] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv", dwFileAttributes=0x20) returned 1 [0142.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv" (normalized: "c:\\users\\eebsym5\\videos\\0az60dph491w_7oa2qw.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1600 [0142.523] GetFileSizeEx (in: hFile=0x1600, lpFileSize=0xd3cf7c4 | out: lpFileSize=0xd3cf7c4*=68737) returned 1 [0142.523] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x10c7d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.523] ReadFile (in: hFile=0x1600, lpBuffer=0xd3cf7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd3cf7b0, lpOverlapped=0x0 | out: lpBuffer=0xd3cf7a0*, lpNumberOfBytesRead=0xd3cf7b0*=0x4, lpOverlapped=0x0) returned 1 [0142.525] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0142.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0142.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0142.525] NtQuerySystemTime (in: CurrentTime=0xd3cf738 | out: CurrentTime=0xd3cf738*=132482710511880000) returned 0x0 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x620888a3 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x2acf47b3 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x612a078d [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x4617c091 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x19279dba [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x3fbbd7ff [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x31b3a9bf [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x6d654dbd [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x7773441f [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x6a4a959b [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x34b47370 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x38890f46 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x4783155a [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x3da1d8b9 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x4b8e0768 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x6dfa7846 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x1c6f93d7 [0142.525] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x493ac91 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x602c8f62 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x3282e683 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x3fbee82d [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x44638ac8 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x4b96c35e [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x46660c53 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x580b0b6b [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x43f3213a [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x649a9d68 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x50230dc3 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x6d20ee65 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x583bad57 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x15c53901 [0142.526] RtlRandomEx (in: Seed=0xd3cf730 | out: Seed=0xd3cf730) returned 0x2547c85e [0142.535] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.535] ReadFile (in: hFile=0x1600, lpBuffer=0x68cf8f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd3cf738, lpOverlapped=0x0 | out: lpBuffer=0x68cf8f0*, lpNumberOfBytesRead=0xd3cf738*=0x3c00, lpOverlapped=0x0) returned 1 [0142.536] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0142.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68d34f8 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0142.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0142.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0142.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.536] WriteFile (in: hFile=0x1600, lpBuffer=0x68d34f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd3cf738, lpOverlapped=0x0 | out: lpBuffer=0x68d34f8*, lpNumberOfBytesWritten=0xd3cf738*=0x3c00, lpOverlapped=0x0) returned 1 [0144.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d34f8) returned 1 [0144.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cf8f0) returned 1 [0144.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66ff320 [0144.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0144.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66ff248 [0144.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0144.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0144.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0144.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0144.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54a60 [0144.651] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.651] WriteFile (in: hFile=0x1600, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xd3cf7b8, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0xd3cf7b8*=0x120, lpOverlapped=0x0) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff248) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff320) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0144.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0144.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0c90 [0144.716] wcscpy (in: _Dest=0x66d0c90, _Source="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv") returned="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv" [0144.716] wcscat (in: _Dest=0x66d0c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv.ac3a86" [0144.716] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv.ac3a86", NtPathName=0xd3cf730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\0Az60dPH491W_7Oa2Qw.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0144.762] FlushFileBuffers (hFile=0x1600) returned 1 [0145.435] CloseHandle (hObject=0x1600) returned 1 [0147.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.550] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.550] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.550] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea98) returned 1 Thread: id = 868 os_tid = 0x12c8 [0141.116] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7qo2fiblvrzu7xy7vc.mp4")) returned 0x20 [0141.116] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4", dwFileAttributes=0x20) returned 1 [0142.537] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7qo2fiblvrzu7xy7vc.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1604 [0142.537] GetFileSizeEx (in: hFile=0x1604, lpFileSize=0xd19fd8c | out: lpFileSize=0xd19fd8c*=39597) returned 1 [0142.537] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x9aa9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.537] ReadFile (in: hFile=0x1604, lpBuffer=0xd19fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd19fd78, lpOverlapped=0x0 | out: lpBuffer=0xd19fd68*, lpNumberOfBytesRead=0xd19fd78*=0x4, lpOverlapped=0x0) returned 1 [0142.539] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0142.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0142.539] NtQuerySystemTime (in: CurrentTime=0xd19fd00 | out: CurrentTime=0xd19fd00*=132482710512036000) returned 0x0 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x1eee0c75 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x5119df2a [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x4d61e6ed [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x568a141e [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x3b5a2e0 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6c5d6f92 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x4f69eeb2 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x2b5c92f9 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x38657cf7 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x14e650e9 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6a68ff26 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x54196f42 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x5498b079 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6109afde [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0xa727e24 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x1514ffe8 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x72fc5af3 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x60f3e922 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x360fbc31 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x5776692c [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6a8d3734 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6979269f [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x15bff572 [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x6987115a [0142.539] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x65cecd0 [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x53b1c109 [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x49c529e3 [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x69c8b7b7 [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x34621e41 [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x241a30bf [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x77fb7b8e [0142.540] RtlRandomEx (in: Seed=0xd19fcf8 | out: Seed=0xd19fcf8) returned 0x1f23eab0 [0142.549] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.549] ReadFile (in: hFile=0x1604, lpBuffer=0x68d7100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd19fd00, lpOverlapped=0x0 | out: lpBuffer=0x68d7100*, lpNumberOfBytesRead=0xd19fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.549] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0142.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0142.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68dad08 [0142.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0142.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0142.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0142.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.550] WriteFile (in: hFile=0x1604, lpBuffer=0x68dad08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd19fd00, lpOverlapped=0x0 | out: lpBuffer=0x68dad08*, lpNumberOfBytesWritten=0xd19fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0144.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68dad08) returned 1 [0144.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d7100) returned 1 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66ff290 [0144.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66ff170 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0144.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0144.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0144.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55028 [0144.655] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.655] WriteFile (in: hFile=0x1604, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xd19fd80, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0xd19fd80*=0x11e, lpOverlapped=0x0) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff170) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0144.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0144.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0d80 [0144.719] wcscpy (in: _Dest=0x66d0d80, _Source="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4" [0144.719] wcscat (in: _Dest=0x66d0d80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4.ac3a86" [0144.719] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4.ac3a86", NtPathName=0xd19fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7qO2fIbLvRzU7xY7vC.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc798 [0144.761] FlushFileBuffers (hFile=0x1604) returned 1 [0145.435] CloseHandle (hObject=0x1604) returned 1 [0147.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.545] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.545] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.545] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e070) returned 1 Thread: id = 869 os_tid = 0x12cc [0141.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4b48 [0141.117] wcscpy (in: _Dest=0x66d4b48, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0141.117] wcscat (in: _Dest=0x66d4b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0141.117] wcscat (in: _Dest=0x66d4b48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\*" [0141.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0141.117] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe74a7a60, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x9a4b7460, ftLastAccessTime.dwHighDateTime=0x1d5e5e7, ftLastWriteTime.dwLowDateTime=0x9a4b7460, ftLastWriteTime.dwHighDateTime=0x1d5e5e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0141.117] wcscmp (_String1=".", _String2=".") returned 0 [0141.117] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe74a7a60, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x9a4b7460, ftLastAccessTime.dwHighDateTime=0x1d5e5e7, ftLastWriteTime.dwLowDateTime=0x9a4b7460, ftLastWriteTime.dwHighDateTime=0x1d5e5e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.117] wcscmp (_String1="..", _String2=".") returned 1 [0141.117] wcscmp (_String1="..", _String2="..") returned 0 [0141.117] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a5e750, ftCreationTime.dwHighDateTime=0x1d5e86c, ftLastAccessTime.dwLowDateTime=0x63ea2f90, ftLastAccessTime.dwHighDateTime=0x1d5e7b0, ftLastWriteTime.dwLowDateTime=0x63ea2f90, ftLastWriteTime.dwHighDateTime=0x1d5e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x165b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="5XoCdpyTOndNXwtJz.swf", cAlternateFileName="5XOCDP~1.SWF")) returned 1 [0141.118] wcscmp (_String1="5XoCdpyTOndNXwtJz.swf", _String2=".") returned 1 [0141.118] wcscmp (_String1="5XoCdpyTOndNXwtJz.swf", _String2="..") returned 1 [0141.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0f870 [0141.118] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0141.118] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0141.118] wcscat (in: _Dest=0x3e0f870, _Source="5XoCdpyTOndNXwtJz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf" [0143.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0143.569] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1cf400, ftCreationTime.dwHighDateTime=0x1d5e50f, ftLastAccessTime.dwLowDateTime=0x7a5b10, ftLastAccessTime.dwHighDateTime=0x1d5e864, ftLastWriteTime.dwLowDateTime=0x7a5b10, ftLastWriteTime.dwHighDateTime=0x1d5e864, nFileSizeHigh=0x0, nFileSizeLow=0xf76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="I6Qa7E.flv", cAlternateFileName="")) returned 1 [0143.570] wcscmp (_String1="I6Qa7E.flv", _String2=".") returned 1 [0143.570] wcscmp (_String1="I6Qa7E.flv", _String2="..") returned 1 [0143.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e960 [0143.570] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0143.570] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0143.570] wcscat (in: _Dest=0x3d8e960, _Source="I6Qa7E.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv" [0143.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0143.572] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x326eb200, ftCreationTime.dwHighDateTime=0x1d5e65d, ftLastAccessTime.dwLowDateTime=0x927f370, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0x927f370, ftLastWriteTime.dwHighDateTime=0x1d5dfdc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jP0cA0DUPWZ", cAlternateFileName="JP0CA0~1")) returned 1 [0143.572] wcscmp (_String1="jP0cA0DUPWZ", _String2=".") returned 1 [0143.572] wcscmp (_String1="jP0cA0DUPWZ", _String2="..") returned 1 [0143.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0143.572] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0143.572] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0143.572] wcscat (in: _Dest=0x3d8e7c0, _Source="jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0143.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0143.574] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb5b5510, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0x4f6a1e50, ftLastAccessTime.dwHighDateTime=0x1d5e2aa, ftLastWriteTime.dwLowDateTime=0x4f6a1e50, ftLastWriteTime.dwHighDateTime=0x1d5e2aa, nFileSizeHigh=0x0, nFileSizeLow=0xe7a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuBgzJiLnK7Vt0rqcd.mkv", cAlternateFileName="KUBGZJ~1.MKV")) returned 1 [0143.574] wcscmp (_String1="kuBgzJiLnK7Vt0rqcd.mkv", _String2=".") returned 1 [0143.574] wcscmp (_String1="kuBgzJiLnK7Vt0rqcd.mkv", _String2="..") returned 1 [0143.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da60f0 [0143.574] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0143.574] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0143.574] wcscat (in: _Dest=0x3da60f0, _Source="kuBgzJiLnK7Vt0rqcd.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv" [0143.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0143.575] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80baf90, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x3a82db80, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0x3a82db80, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFH f", cAlternateFileName="LFHF~1")) returned 1 [0143.575] wcscmp (_String1="LFH f", _String2=".") returned 1 [0143.576] wcscmp (_String1="LFH f", _String2="..") returned 1 [0143.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ea8 [0143.576] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk" [0143.576] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0143.576] wcscat (in: _Dest=0x2fe6ea8, _Source="LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0143.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0143.577] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80baf90, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x3a82db80, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0x3a82db80, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFH f", cAlternateFileName="LFHF~1")) returned 0 [0143.578] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0143.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0143.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4b48) returned 1 [0143.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62470) returned 1 Thread: id = 870 os_tid = 0x12d0 [0141.118] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv" (normalized: "c:\\users\\eebsym5\\videos\\auzo3gv.mkv")) returned 0x20 [0141.118] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv", dwFileAttributes=0x20) returned 1 [0142.551] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv" (normalized: "c:\\users\\eebsym5\\videos\\auzo3gv.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c [0142.551] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0xd52fda4 | out: lpFileSize=0xd52fda4*=79961) returned 1 [0142.551] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x13855, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.551] ReadFile (in: hFile=0x160c, lpBuffer=0xd52fd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd52fd90, lpOverlapped=0x0 | out: lpBuffer=0xd52fd80*, lpNumberOfBytesRead=0xd52fd90*=0x4, lpOverlapped=0x0) returned 1 [0142.553] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0142.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c170 [0142.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0142.553] NtQuerySystemTime (in: CurrentTime=0xd52fd18 | out: CurrentTime=0xd52fd18*=132482710512192000) returned 0x0 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4c2e4ec4 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x1e70a99 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x69887224 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0xcb26c17 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x6dabc247 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x12547588 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x6d10d739 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x31dd2089 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4b63e12b [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x473cf13c [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x63cbed2b [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x264139d6 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x6bea3288 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4754bb33 [0142.553] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4ae2a468 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x49e0f09 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x24be75f1 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4b3855e8 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x2ed99b52 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4860171 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x73c721b6 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x6a419a9d [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x1dadbce4 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x4c5b1396 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x2a9ec2b9 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x75c7e18e [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x34b313f9 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0xd439736 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x53332e7b [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x57d8b0f8 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x6576b686 [0142.554] RtlRandomEx (in: Seed=0xd52fd10 | out: Seed=0xd52fd10) returned 0x13e5cc7e [0142.563] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.563] ReadFile (in: hFile=0x160c, lpBuffer=0x68de910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68de910*, lpNumberOfBytesRead=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0142.563] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0142.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0142.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68e2518 [0142.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0142.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0142.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0142.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.564] WriteFile (in: hFile=0x160c, lpBuffer=0x68e2518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68e2518*, lpNumberOfBytesWritten=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0144.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e2518) returned 1 [0144.658] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.658] ReadFile (in: hFile=0x160c, lpBuffer=0x68de910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68de910*, lpNumberOfBytesRead=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0144.658] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff1b8 [0144.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0144.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0144.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0144.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68e2518 [0144.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0144.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0144.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0144.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.659] WriteFile (in: hFile=0x160c, lpBuffer=0x68e2518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68e2518*, lpNumberOfBytesWritten=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0144.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e2518) returned 1 [0144.662] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0xfc59, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.662] ReadFile (in: hFile=0x160c, lpBuffer=0x68de910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68de910*, lpNumberOfBytesRead=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0144.662] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0xfc59, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff1b8 [0144.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0144.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0144.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0144.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68e2518 [0144.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0144.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0144.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0144.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.663] WriteFile (in: hFile=0x160c, lpBuffer=0x68e2518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd52fd18, lpOverlapped=0x0 | out: lpBuffer=0x68e2518*, lpNumberOfBytesWritten=0xd52fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0144.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e2518) returned 1 [0144.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e210 [0144.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0144.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5690 [0144.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0144.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0144.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0144.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce310 [0144.669] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.669] WriteFile (in: hFile=0x160c, lpBuffer=0x66ce310*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xd52fd98, lpOverlapped=0x0 | out: lpBuffer=0x66ce310*, lpNumberOfBytesWritten=0xd52fd98*=0x148, lpOverlapped=0x0) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0144.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0144.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6d88 [0144.724] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv" [0144.724] wcscat (in: _Dest=0x2fe6d88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv.ac3a86" [0144.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv.ac3a86", NtPathName=0xd52fd10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\aUZO3gv.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0df8 [0144.811] FlushFileBuffers (hFile=0x160c) returned 1 [0145.436] CloseHandle (hObject=0x160c) returned 1 [0147.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.571] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.572] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62600) returned 1 Thread: id = 871 os_tid = 0x12d4 [0141.119] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf" (normalized: "c:\\users\\eebsym5\\videos\\bgbqxwwiskbonn0p.swf")) returned 0x20 [0141.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf", dwFileAttributes=0x20) returned 1 [0142.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf" (normalized: "c:\\users\\eebsym5\\videos\\bgbqxwwiskbonn0p.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1610 [0142.566] GetFileSizeEx (in: hFile=0x1610, lpFileSize=0xd45f93c | out: lpFileSize=0xd45f93c*=35594) returned 1 [0142.566] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x8b06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.566] ReadFile (in: hFile=0x1610, lpBuffer=0xd45f918, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd45f928, lpOverlapped=0x0 | out: lpBuffer=0xd45f918*, lpNumberOfBytesRead=0xd45f928*=0x4, lpOverlapped=0x0) returned 1 [0142.568] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0142.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0142.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0142.568] NtQuerySystemTime (in: CurrentTime=0xd45f8b0 | out: CurrentTime=0xd45f8b0*=132482710512348000) returned 0x0 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x3999d70b [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x6fe848b3 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x1d6f275b [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x5da72a49 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x76289250 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x5d890802 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x683d4be4 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x35bf7f23 [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x73fcaf3e [0142.568] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x2bb0a9ad [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x2e227893 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x231578e9 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0xf1dc30f [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x3f13ade9 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x54d0ddb2 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x77c45858 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x390d32e9 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x10f97cde [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0xd64ebc [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x2f66431d [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x52c38e47 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x4216eb69 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x9506934 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x21989f2d [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x5d811ef [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x4f157e84 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x7c0ad623 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x29549c08 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x53431f85 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x5ce3ce74 [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x5f22f45e [0142.569] RtlRandomEx (in: Seed=0xd45f8a8 | out: Seed=0xd45f8a8) returned 0x109dc559 [0142.579] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.579] ReadFile (in: hFile=0x1610, lpBuffer=0x68e6120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd45f8b0, lpOverlapped=0x0 | out: lpBuffer=0x68e6120*, lpNumberOfBytesRead=0xd45f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.579] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0142.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68e9d28 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0142.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0142.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0142.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.580] WriteFile (in: hFile=0x1610, lpBuffer=0x68e9d28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd45f8b0, lpOverlapped=0x0 | out: lpBuffer=0x68e9d28*, lpNumberOfBytesWritten=0xd45f8b0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e9d28) returned 1 [0144.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e6120) returned 1 [0144.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066e80 [0144.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0144.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067040 [0144.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0144.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0144.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0144.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54810 [0144.661] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.661] WriteFile (in: hFile=0x1610, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xd45f930, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xd45f930*=0x11a, lpOverlapped=0x0) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067040) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e80) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0144.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0144.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29e20 [0144.721] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf") returned="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf" [0144.721] wcscat (in: _Dest=0x3f29e20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf.ac3a86" [0144.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf.ac3a86", NtPathName=0xd45f8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\BGBQXWwiSkbOnn0P.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59510 [0144.806] FlushFileBuffers (hFile=0x1610) returned 1 [0145.436] CloseHandle (hObject=0x1610) returned 1 [0147.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.554] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.554] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.554] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bd18) returned 1 Thread: id = 872 os_tid = 0x12d8 [0141.119] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi" (normalized: "c:\\users\\eebsym5\\videos\\g4hjohisq_vl7mdioq.avi")) returned 0x20 [0141.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi", dwFileAttributes=0x20) returned 1 [0142.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi" (normalized: "c:\\users\\eebsym5\\videos\\g4hjohisq_vl7mdioq.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1614 [0142.580] GetFileSizeEx (in: hFile=0x1614, lpFileSize=0xd5bf86c | out: lpFileSize=0xd5bf86c*=83001) returned 1 [0142.580] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x14435, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.580] ReadFile (in: hFile=0x1614, lpBuffer=0xd5bf848, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd5bf858, lpOverlapped=0x0 | out: lpBuffer=0xd5bf848*, lpNumberOfBytesRead=0xd5bf858*=0x4, lpOverlapped=0x0) returned 1 [0142.582] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0142.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0142.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0142.582] NtQuerySystemTime (in: CurrentTime=0xd5bf7e0 | out: CurrentTime=0xd5bf7e0*=132482710512504000) returned 0x0 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0xdfba9c9 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x257306b8 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x32b209f3 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x40add372 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0xf030dfb [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x71c9041b [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x7db70981 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x3609f569 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x440bafb7 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0xafd3ba [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x32e4c44a [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x642f7e4a [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x32fa2ab3 [0142.582] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x7bc20d1e [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x49ec56b6 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x33ba7484 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x2501f587 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x55c4aaf7 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x751bcb8e [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x616e2770 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x4735d4d6 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x4c1bdaa1 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0xb593267 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x260aa067 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x1431c983 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x579fa3d7 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x6b5e45fd [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x4316014d [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x2344ce95 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x791894d [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x66b42e79 [0142.583] RtlRandomEx (in: Seed=0xd5bf7d8 | out: Seed=0xd5bf7d8) returned 0x662c52a2 [0142.591] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.591] ReadFile (in: hFile=0x1614, lpBuffer=0x68ed930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68ed930*, lpNumberOfBytesRead=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.591] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0142.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68f1538 [0142.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0142.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.592] WriteFile (in: hFile=0x1614, lpBuffer=0x68f1538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesWritten=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0144.673] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.673] ReadFile (in: hFile=0x1614, lpBuffer=0x68ed930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68ed930*, lpNumberOfBytesRead=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.673] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff1b8 [0144.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0144.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0144.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0144.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68f1538 [0144.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0144.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0144.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0144.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0144.674] WriteFile (in: hFile=0x1614, lpBuffer=0x68f1538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesWritten=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0144.677] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x10839, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.677] ReadFile (in: hFile=0x1614, lpBuffer=0x68ed930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68ed930*, lpNumberOfBytesRead=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.677] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x10839, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60ec8 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0144.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68f1538 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0144.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0144.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0144.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0144.678] WriteFile (in: hFile=0x1614, lpBuffer=0x68f1538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd5bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesWritten=0xd5bf7e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e60928 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0144.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e608e0) returned 1 [0144.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcde38 [0144.681] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.681] WriteFile (in: hFile=0x1614, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0xd5bf860, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0xd5bf860*=0x15e, lpOverlapped=0x0) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60928) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0144.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0144.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0e70 [0144.727] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi") returned="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi" [0144.727] wcscat (in: _Dest=0x66d0e70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi.ac3a86" [0144.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi.ac3a86", NtPathName=0xd5bf7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\G4hJoHIsq_VL7Mdioq.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0144.809] FlushFileBuffers (hFile=0x1614) returned 1 [0145.436] CloseHandle (hObject=0x1614) returned 1 [0147.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.557] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.557] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 Thread: id = 873 os_tid = 0x12dc [0141.120] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf" (normalized: "c:\\users\\eebsym5\\videos\\pz_azqlr39.swf")) returned 0x20 [0141.120] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf", dwFileAttributes=0x20) returned 1 [0142.593] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf" (normalized: "c:\\users\\eebsym5\\videos\\pz_azqlr39.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1618 [0142.593] GetFileSizeEx (in: hFile=0x1618, lpFileSize=0xcdffcc4 | out: lpFileSize=0xcdffcc4*=6033) returned 1 [0142.593] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x178d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.593] ReadFile (in: hFile=0x1618, lpBuffer=0xcdffca0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcdffcb0, lpOverlapped=0x0 | out: lpBuffer=0xcdffca0*, lpNumberOfBytesRead=0xcdffcb0*=0x4, lpOverlapped=0x0) returned 1 [0142.603] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0142.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0142.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0142.603] NtQuerySystemTime (in: CurrentTime=0xcdffc38 | out: CurrentTime=0xcdffc38*=132482710512660000) returned 0x0 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x2121e0d [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x37f184b7 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x20039dc1 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x4a8cf2e8 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x28761934 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0xfe314d7 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x526bef1c [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x59ac9a9f [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x3c107069 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x3da7002f [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x16cebcf5 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x6350993f [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x17a8ddd0 [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x5de986ce [0142.603] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x735f13ea [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x2693748 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x3eef115e [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x5e557ad8 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x4535a196 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x4e753825 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x30644b1a [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x5dfd5c86 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x4b68983a [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x75c4014 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x5cf11a79 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x4a7ec706 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x50c77a69 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x6ee3ef55 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0xb0cd46a [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x6c306b77 [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x680843dd [0142.604] RtlRandomEx (in: Seed=0xcdffc30 | out: Seed=0xcdffc30) returned 0x24291f58 [0142.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6735538 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672a120 [0142.615] ReadFile (in: hFile=0x1618, lpBuffer=0x6735538, nNumberOfBytesToRead=0x1791, lpNumberOfBytesRead=0xcdffc2c, lpOverlapped=0x0 | out: lpBuffer=0x6735538*, lpNumberOfBytesRead=0xcdffc2c*=0x1791, lpOverlapped=0x0) returned 1 [0142.615] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.615] WriteFile (in: hFile=0x1618, lpBuffer=0x672a120*, nNumberOfBytesToWrite=0x1791, lpNumberOfBytesWritten=0xcdffc30, lpOverlapped=0x0 | out: lpBuffer=0x672a120*, lpNumberOfBytesWritten=0xcdffc30*=0x1791, lpOverlapped=0x0) returned 1 [0143.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0143.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c78 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672a120) returned 1 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6735538) returned 1 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0143.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19b60 [0143.129] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.129] WriteFile (in: hFile=0x1618, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xcdffcb8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xcdffcb8*=0x10e, lpOverlapped=0x0) returned 1 [0143.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0143.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a80) returned 1 [0143.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c78) returned 1 [0143.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b60) returned 1 [0143.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0143.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0143.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0143.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0143.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d920 [0143.183] wcscpy (in: _Dest=0x3d8d920, _Source="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf") returned="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf" [0143.183] wcscat (in: _Dest=0x3d8d920, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf.ac3a86" [0143.183] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf.ac3a86", NtPathName=0xcdffc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\PZ_aZqlR39.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x2fcac08 [0143.226] FlushFileBuffers (hFile=0x1618) returned 1 [0143.233] CloseHandle (hObject=0x1618) returned 1 [0143.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a88 [0143.242] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0143.242] wcscat (in: _Dest=0x2fe6a88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0143.242] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0xffffffff [0143.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0143.247] WriteFile (in: hFile=0x1570, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcdffc4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcdffc4c*=0x8b9, lpOverlapped=0x0) returned 1 [0143.255] CloseHandle (hObject=0x1570) returned 1 [0143.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0143.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 Thread: id = 874 os_tid = 0x12e0 [0141.121] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv" (normalized: "c:\\users\\eebsym5\\videos\\vu38e1p.mkv")) returned 0x20 [0141.121] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv", dwFileAttributes=0x20) returned 1 [0142.490] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv" (normalized: "c:\\users\\eebsym5\\videos\\vu38e1p.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x161c [0142.490] GetFileSizeEx (in: hFile=0x161c, lpFileSize=0xd41fa04 | out: lpFileSize=0xd41fa04*=66089) returned 1 [0142.490] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x10225, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.490] ReadFile (in: hFile=0x161c, lpBuffer=0xd41f9e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd41f9f0, lpOverlapped=0x0 | out: lpBuffer=0xd41f9e0*, lpNumberOfBytesRead=0xd41f9f0*=0x4, lpOverlapped=0x0) returned 1 [0142.492] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0142.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0142.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0142.492] NtQuerySystemTime (in: CurrentTime=0xd41f978 | out: CurrentTime=0xd41f978*=132482710511568000) returned 0x0 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x57b2646b [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x1249794d [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x64987156 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x7821fdae [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x4c8d2945 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x7e9264d1 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x30037a69 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x6cf85433 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0xc48cf09 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0xd9c2977 [0142.492] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x7b07b3bc [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x4c396a68 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x8fe67d9 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x3306b7e9 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x4d903068 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0xef1faef [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x11afc355 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x4b632ea8 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x1849fb20 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x743067f5 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x1fc1645b [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x4ce4cd68 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x7c3cda3f [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0xcdf7209 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x3d043cf2 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x7aa830e8 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x2e56c2f4 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x39a47eba [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x1c911184 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0xd9bbb4c [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x36d57857 [0142.493] RtlRandomEx (in: Seed=0xd41f970 | out: Seed=0xd41f970) returned 0x59755c7a [0142.503] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.503] ReadFile (in: hFile=0x161c, lpBuffer=0x6864558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd41f978, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesRead=0xd41f978*=0x3c00, lpOverlapped=0x0) returned 1 [0142.503] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0142.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6868160 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0142.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0142.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0142.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.504] WriteFile (in: hFile=0x161c, lpBuffer=0x6868160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd41f978, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesWritten=0xd41f978*=0x3c00, lpOverlapped=0x0) returned 1 [0144.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0144.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0144.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5d20 [0144.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5cf0 [0144.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0144.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0144.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff320) returned 1 [0144.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec198 [0144.644] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.644] WriteFile (in: hFile=0x161c, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xd41f9f8, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xd41f9f8*=0x108, lpOverlapped=0x0) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0144.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0144.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0144.712] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv" [0144.712] wcscat (in: _Dest=0x2fe1328, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv.ac3a86" [0144.712] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv.ac3a86", NtPathName=0xd41f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\Vu38e1P.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0ba0 [0144.758] FlushFileBuffers (hFile=0x161c) returned 1 [0145.435] CloseHandle (hObject=0x161c) returned 1 [0147.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f68 [0147.542] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.542] wcscat (in: _Dest=0x2fe6f68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.542] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0147.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62150) returned 1 Thread: id = 875 os_tid = 0x12e4 [0141.121] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi" (normalized: "c:\\users\\eebsym5\\videos\\wrokmhxrdheelooun.avi")) returned 0x20 [0141.121] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi", dwFileAttributes=0x20) returned 1 [0142.505] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi" (normalized: "c:\\users\\eebsym5\\videos\\wrokmhxrdheelooun.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1620 [0142.505] GetFileSizeEx (in: hFile=0x1620, lpFileSize=0xd60fe5c | out: lpFileSize=0xd60fe5c*=53735) returned 1 [0142.505] SetFilePointerEx (in: hFile=0x1620, liDistanceToMove=0xd1e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.505] ReadFile (in: hFile=0x1620, lpBuffer=0xd60fe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd60fe48, lpOverlapped=0x0 | out: lpBuffer=0xd60fe38*, lpNumberOfBytesRead=0xd60fe48*=0x4, lpOverlapped=0x0) returned 1 [0142.507] SetFilePointerEx (in: hFile=0x1620, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0142.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c670 [0142.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0142.507] NtQuerySystemTime (in: CurrentTime=0xd60fdd0 | out: CurrentTime=0xd60fdd0*=132482710511724000) returned 0x0 [0142.507] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x6dce0d05 [0142.507] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x79319365 [0142.507] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x3c75906e [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x2f6b3a2b [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x4f8ad11a [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x1480c761 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x4f797f5f [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x2f4310a4 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x75359b65 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x30cb9194 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0xd775923 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x53af3c9a [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x43b8a744 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x30c30778 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x50ef75d2 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x25cec141 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x1467f92d [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x4acc5780 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x2ce2f121 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x38e7a9a6 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x1b666440 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x3919104e [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x5e1cb280 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x31003daa [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x7030d458 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x3de64a95 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x611c784b [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x334cbe5a [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x12e4c8f9 [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x3c4f5aca [0142.508] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x29fcff69 [0142.509] RtlRandomEx (in: Seed=0xd60fdc8 | out: Seed=0xd60fdc8) returned 0x113f5df6 [0142.518] SetFilePointerEx (in: hFile=0x1620, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.518] ReadFile (in: hFile=0x1620, lpBuffer=0x686bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd60fdd0, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesRead=0xd60fdd0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.518] SetFilePointerEx (in: hFile=0x1620, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41078 [0142.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0142.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0142.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0142.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68cbce8 [0142.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0142.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0142.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0142.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0142.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0142.522] WriteFile (in: hFile=0x1620, lpBuffer=0x68cbce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd60fdd0, lpOverlapped=0x0 | out: lpBuffer=0x68cbce8*, lpNumberOfBytesWritten=0xd60fdd0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cbce8) returned 1 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0144.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067400 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0144.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066d00 [0144.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0144.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0144.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff320) returned 1 [0144.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d553a0 [0144.648] SetFilePointerEx (in: hFile=0x1620, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.648] WriteFile (in: hFile=0x1620, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xd60fe50, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0xd60fe50*=0x11c, lpOverlapped=0x0) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d00) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067400) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0144.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0144.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0c18 [0144.714] wcscpy (in: _Dest=0x66d0c18, _Source="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi") returned="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi" [0144.714] wcscat (in: _Dest=0x66d0c18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi.ac3a86" [0144.714] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi.ac3a86", NtPathName=0xd60fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\WRoKMhxRdhEElOoUn.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59b70 [0144.835] FlushFileBuffers (hFile=0x1620) returned 1 [0145.441] CloseHandle (hObject=0x1620) returned 1 [0147.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6fc8 [0147.594] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0147.594] wcscat (in: _Dest=0x2fe6fc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" [0147.595] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\ac3a86-readme.txt")) returned 0x20 [0147.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0147.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 Thread: id = 876 os_tid = 0x12e8 [0141.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx")) returned 0x20 [0142.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0142.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.670] GetLastError () returned 0x5 [0142.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0142.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59510) returned 1 Thread: id = 877 os_tid = 0x12ec [0141.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx")) returned 0x20 [0142.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0142.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.658] GetLastError () returned 0x5 [0142.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0142.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 878 os_tid = 0x12f0 [0141.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx")) returned 0x20 [0142.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0142.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.672] GetLastError () returned 0x5 [0142.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0142.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 879 os_tid = 0x12f4 [0141.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx")) returned 0x20 [0142.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0142.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.674] GetLastError () returned 0x5 [0142.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0142.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 880 os_tid = 0x12f8 [0141.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx")) returned 0x20 [0142.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0142.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.677] GetLastError () returned 0x5 [0142.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0142.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 881 os_tid = 0x12fc [0141.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx")) returned 0x20 [0142.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0142.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.678] GetLastError () returned 0x5 [0142.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0142.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 882 os_tid = 0x1300 [0141.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx")) returned 0x20 [0142.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0142.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.680] GetLastError () returned 0x5 [0142.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0142.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 883 os_tid = 0x1304 [0141.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx")) returned 0x20 [0142.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0142.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.682] GetLastError () returned 0x5 [0142.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0142.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 884 os_tid = 0x1308 [0141.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx")) returned 0x20 [0142.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0142.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.684] GetLastError () returned 0x5 [0142.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0142.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 885 os_tid = 0x130c [0141.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx")) returned 0x20 [0142.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0142.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.686] GetLastError () returned 0x5 [0142.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0142.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 886 os_tid = 0x1310 [0141.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx")) returned 0x20 [0142.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0142.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.688] GetLastError () returned 0x5 [0142.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0142.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 887 os_tid = 0x1314 [0141.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx")) returned 0x20 [0142.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0142.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.689] GetLastError () returned 0x5 [0142.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0142.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbe08) returned 1 Thread: id = 888 os_tid = 0x1318 [0141.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx")) returned 0x20 [0142.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0142.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.691] GetLastError () returned 0x5 [0142.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0142.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 889 os_tid = 0x131c [0141.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dce58 [0141.127] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0141.127] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0141.127] wcscat (in: _Dest=0x66dce58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*" [0141.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0141.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0143.466] wcscmp (_String1=".", _String2=".") returned 0 [0143.466] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.846] wcscmp (_String1="..", _String2=".") returned 1 [0143.846] wcscmp (_String1="..", _String2="..") returned 0 [0143.846] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ad9900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5ad9900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0143.846] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0143.847] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0143.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cea8 [0143.847] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0143.847] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0143.847] wcscat (in: _Dest=0x3e5cea8, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" [0156.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0156.290] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0156.290] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0156.290] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0156.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d880 [0156.290] wcscpy (in: _Dest=0x3e5d880, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.290] wcscat (in: _Dest=0x3e5d880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.290] wcscat (in: _Dest=0x3e5d880, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" [0156.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0156.292] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564f8900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x564f8900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0156.292] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0156.292] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0156.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d170 [0156.292] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.292] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.292] wcscat (in: _Dest=0x3e0d170, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" [0156.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0156.293] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x944cad00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x944cad00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0156.293] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0156.293] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0156.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b5b8 [0156.293] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.293] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.293] wcscat (in: _Dest=0x35b5b8, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" [0156.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0156.294] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e31000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e31000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0156.294] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0156.294] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0156.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c770 [0156.294] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.294] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.294] wcscat (in: _Dest=0x3e5c770, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" [0156.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0156.295] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0156.295] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0156.295] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0156.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5dc70 [0156.295] wcscpy (in: _Dest=0x3e5dc70, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.295] wcscat (in: _Dest=0x3e5dc70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.295] wcscat (in: _Dest=0x3e5dc70, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" [0156.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0156.296] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0156.296] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0156.296] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0156.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d0a0 [0156.297] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.297] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.297] wcscat (in: _Dest=0x3e5d0a0, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" [0156.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0156.297] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0156.297] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0156.298] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0156.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d210 [0156.298] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.298] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.298] wcscat (in: _Dest=0x3e0d210, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" [0156.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0156.299] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0156.299] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0156.299] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0156.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5bd98 [0156.299] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.299] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.299] wcscat (in: _Dest=0x3e5bd98, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" [0156.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0156.300] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0156.300] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0156.300] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0156.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c968 [0156.300] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.300] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.300] wcscat (in: _Dest=0x3e5c968, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" [0156.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0156.301] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0156.301] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0156.301] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0156.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cb60 [0156.301] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.301] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.301] wcscat (in: _Dest=0x3e5cb60, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" [0156.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0156.302] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fbb500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3fbb500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0156.302] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0156.302] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0156.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cd58 [0156.302] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.302] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.302] wcscat (in: _Dest=0x3e5cd58, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" [0156.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0156.303] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c06900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c06900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0156.303] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0156.303] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0156.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5ce00 [0156.303] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.303] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.303] wcscat (in: _Dest=0x3e5ce00, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" [0156.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0156.304] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c7800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x636c7800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0156.304] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0156.304] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0156.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ccb0 [0156.305] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.305] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.305] wcscat (in: _Dest=0x3e5ccb0, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" [0156.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0156.306] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd61500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dd61500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0156.306] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0156.306] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0156.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5ca10 [0156.306] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.306] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.306] wcscat (in: _Dest=0x3e5ca10, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" [0156.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0156.307] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0156.307] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0156.307] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0156.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d1f0 [0156.307] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.307] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.308] wcscat (in: _Dest=0x3e5d1f0, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" [0156.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0156.309] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0156.309] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0156.309] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0156.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0da30 [0156.309] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.309] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.309] wcscat (in: _Dest=0x3e0da30, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" [0156.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0156.310] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ffff00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66ffff00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0156.310] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0156.310] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0156.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d490 [0156.310] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.310] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.311] wcscat (in: _Dest=0x3e5d490, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" [0156.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0156.312] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e662000, ftCreationTime.dwHighDateTime=0x1c6baf0, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e662000, ftLastWriteTime.dwHighDateTime=0x1c6baf0, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0156.312] wcscmp (_String1="Grayscale.xml", _String2=".") returned 1 [0156.312] wcscmp (_String1="Grayscale.xml", _String2="..") returned 1 [0156.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cc08 [0156.312] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.312] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.312] wcscat (in: _Dest=0x3e5cc08, _Source="Grayscale.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" [0156.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0156.313] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1699c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa1699c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0156.313] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0156.313] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0156.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0156.314] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.314] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.314] wcscat (in: _Dest=0x3e0d8f0, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" [0156.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0156.315] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0156.315] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0156.315] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0156.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d688 [0156.315] wcscpy (in: _Dest=0x3e5d688, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.315] wcscat (in: _Dest=0x3e5d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.315] wcscat (in: _Dest=0x3e5d688, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" [0156.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0156.316] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0156.316] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0156.316] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0156.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cf50 [0156.317] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.317] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.317] wcscat (in: _Dest=0x3e5cf50, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" [0156.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0156.318] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf5e000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cf5e000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0156.318] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0156.318] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0156.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d3e8 [0156.318] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.318] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.318] wcscat (in: _Dest=0x3e5d3e8, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" [0156.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0156.319] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70896700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70896700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0156.320] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0156.320] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0156.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d5d0 [0156.320] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.320] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.320] wcscat (in: _Dest=0x3e0d5d0, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" [0156.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0156.321] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0156.322] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0156.322] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0156.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c8c0 [0156.322] wcscpy (in: _Dest=0x3e5c8c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.322] wcscat (in: _Dest=0x3e5c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.322] wcscat (in: _Dest=0x3e5c8c0, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" [0156.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0156.323] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd249d100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd249d100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0156.323] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0156.323] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0156.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d5e0 [0156.323] wcscpy (in: _Dest=0x3e5d5e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.323] wcscat (in: _Dest=0x3e5d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.323] wcscat (in: _Dest=0x3e5d5e0, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" [0156.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0156.325] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0156.325] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0156.325] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0156.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5da78 [0156.325] wcscpy (in: _Dest=0x3e5da78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.325] wcscat (in: _Dest=0x3e5da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.325] wcscat (in: _Dest=0x3e5da78, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" [0156.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0156.326] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a12cf00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a12cf00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0156.326] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0156.326] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0156.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e430 [0156.327] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.327] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.327] wcscat (in: _Dest=0x3e0e430, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" [0156.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0156.328] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da65600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da65600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0156.328] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0156.328] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0156.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5db20 [0156.329] wcscpy (in: _Dest=0x3e5db20, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.329] wcscat (in: _Dest=0x3e5db20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.329] wcscat (in: _Dest=0x3e5db20, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" [0156.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5db20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0156.752] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0156.752] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0156.752] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0156.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e6b0 [0156.752] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0156.752] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0156.752] wcscat (in: _Dest=0x3e0e6b0, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" [0157.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0157.253] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75f7d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa75f7d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0157.254] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0157.254] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0157.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c6e8 [0157.254] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0157.254] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0157.254] wcscat (in: _Dest=0x35c6e8, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" [0157.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0157.266] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf30400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaf30400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0157.266] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0157.266] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0157.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5c818 [0157.266] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0157.266] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0157.266] wcscat (in: _Dest=0x3e5c818, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" [0157.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0157.268] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd5800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5dd5800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0157.268] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0157.268] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0157.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0157.268] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0157.268] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0157.268] wcscat (in: _Dest=0x35c378, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" [0157.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0157.270] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839c3700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x839c3700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0157.654] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0157.654] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0157.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d7d8 [0157.655] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0157.655] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0157.655] wcscat (in: _Dest=0x3e5d7d8, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" [0158.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0158.416] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872fbe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x872fbe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0158.416] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0158.416] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0158.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d148 [0158.416] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.416] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.416] wcscat (in: _Dest=0x3e5d148, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" [0158.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0158.418] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0158.418] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0158.418] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0158.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d928 [0158.418] wcscpy (in: _Dest=0x3e5d928, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.418] wcscat (in: _Dest=0x3e5d928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.418] wcscat (in: _Dest=0x3e5d928, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" [0158.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0158.419] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac34500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ac34500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0158.419] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0158.419] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0158.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e7f0 [0158.419] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.419] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.419] wcscat (in: _Dest=0x3e0e7f0, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" [0158.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0158.421] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0158.421] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0158.421] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0158.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0f0b0 [0158.421] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.421] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.421] wcscat (in: _Dest=0x3e0f0b0, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" [0158.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0158.422] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b92600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b92600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0158.422] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0158.422] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0158.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e110 [0158.422] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.422] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.422] wcscat (in: _Dest=0x3e0e110, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" [0158.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0158.423] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0158.423] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0158.423] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0158.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cab8 [0158.424] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0158.424] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0158.424] wcscat (in: _Dest=0x3e5cab8, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" [0158.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0158.425] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0158.425] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0158.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0158.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 [0158.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcee8) returned 1 Thread: id = 890 os_tid = 0x1320 [0141.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bd78 [0141.128] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0141.128] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0141.128] wcscat (in: _Dest=0x32bd78, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*" [0141.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0141.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0143.468] wcscmp (_String1=".", _String2=".") returned 0 [0143.468] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.338] wcscmp (_String1="..", _String2=".") returned 1 [0144.338] wcscmp (_String1="..", _String2="..") returned 0 [0144.338] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0144.338] wcscmp (_String1="Adjacency.eftx", _String2=".") returned 1 [0144.338] wcscmp (_String1="Adjacency.eftx", _String2="..") returned 1 [0144.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c218 [0144.338] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0144.338] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0144.338] wcscat (in: _Dest=0x35c218, _Source="Adjacency.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" [0145.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0145.393] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f52b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56f52b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0145.393] wcscmp (_String1="Angles.eftx", _String2=".") returned 1 [0145.393] wcscmp (_String1="Angles.eftx", _String2="..") returned 1 [0145.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d298 [0145.393] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.393] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.393] wcscat (in: _Dest=0x3e5d298, _Source="Angles.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" [0145.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0145.394] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a13a00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1a13a00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0145.394] wcscmp (_String1="Apex.eftx", _String2=".") returned 1 [0145.394] wcscmp (_String1="Apex.eftx", _String2="..") returned 1 [0145.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d0a0 [0145.394] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.394] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.394] wcscat (in: _Dest=0x3e5d0a0, _Source="Apex.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" [0145.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0145.395] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0145.395] wcscmp (_String1="Apothecary.eftx", _String2=".") returned 1 [0145.395] wcscmp (_String1="Apothecary.eftx", _String2="..") returned 1 [0145.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b718 [0145.395] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.395] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.395] wcscat (in: _Dest=0x35b718, _Source="Apothecary.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" [0145.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0145.396] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf534c100, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf534c100, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0145.396] wcscmp (_String1="Aspect.eftx", _String2=".") returned 1 [0145.396] wcscmp (_String1="Aspect.eftx", _String2="..") returned 1 [0145.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d148 [0145.396] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.396] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.396] wcscat (in: _Dest=0x3e5d148, _Source="Aspect.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" [0145.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0145.397] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34631200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34631200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0145.397] wcscmp (_String1="Austin.eftx", _String2=".") returned 1 [0145.397] wcscmp (_String1="Austin.eftx", _String2="..") returned 1 [0145.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ce00 [0145.397] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.397] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.397] wcscat (in: _Dest=0x3e5ce00, _Source="Austin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" [0145.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0145.398] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb9df00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5bb9df00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0145.398] wcscmp (_String1="Black Tie.eftx", _String2=".") returned 1 [0145.398] wcscmp (_String1="Black Tie.eftx", _String2="..") returned 1 [0145.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b878 [0145.399] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.399] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.399] wcscat (in: _Dest=0x35b878, _Source="Black Tie.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" [0145.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0145.400] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0145.400] wcscmp (_String1="Civic.eftx", _String2=".") returned 1 [0145.400] wcscmp (_String1="Civic.eftx", _String2="..") returned 1 [0145.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cd58 [0145.400] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.400] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.400] wcscat (in: _Dest=0x3e5cd58, _Source="Civic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" [0145.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0145.401] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f69900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f69900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0145.401] wcscmp (_String1="Clarity.eftx", _String2=".") returned 1 [0145.401] wcscmp (_String1="Clarity.eftx", _String2="..") returned 1 [0145.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d1f0 [0145.401] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.401] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.401] wcscat (in: _Dest=0x3e5d1f0, _Source="Clarity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" [0145.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0145.403] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4d6600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe955d110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f4d6600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0145.403] wcscmp (_String1="Composite.eftx", _String2=".") returned 1 [0145.403] wcscmp (_String1="Composite.eftx", _String2="..") returned 1 [0145.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c588 [0145.403] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.403] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.403] wcscat (in: _Dest=0x35c588, _Source="Composite.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" [0145.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0145.404] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2aa200, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfb2aa200, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0145.404] wcscmp (_String1="Concourse.eftx", _String2=".") returned 1 [0145.404] wcscmp (_String1="Concourse.eftx", _String2="..") returned 1 [0145.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0145.405] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.405] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.405] wcscat (in: _Dest=0x35c378, _Source="Concourse.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" [0145.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0145.406] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64121a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95cf530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64121a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0145.406] wcscmp (_String1="Couture.eftx", _String2=".") returned 1 [0145.406] wcscmp (_String1="Couture.eftx", _String2="..") returned 1 [0145.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d3e8 [0145.406] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.406] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.406] wcscat (in: _Dest=0x3e5d3e8, _Source="Couture.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" [0145.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0145.407] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0145.407] wcscmp (_String1="Elemental.eftx", _String2=".") returned 1 [0145.407] wcscmp (_String1="Elemental.eftx", _String2="..") returned 1 [0145.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35ba88 [0145.407] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.407] wcscat (in: _Dest=0x35ba88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.407] wcscat (in: _Dest=0x35ba88, _Source="Elemental.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" [0145.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35ba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0145.409] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebe2900, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebe2900, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0145.409] wcscmp (_String1="Equity.eftx", _String2=".") returned 1 [0145.409] wcscmp (_String1="Equity.eftx", _String2="..") returned 1 [0145.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bee8 [0145.409] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.409] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.409] wcscat (in: _Dest=0x3e5bee8, _Source="Equity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" [0145.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0145.410] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8a2000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b8a2000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0145.410] wcscmp (_String1="Essential.eftx", _String2=".") returned 1 [0145.410] wcscmp (_String1="Essential.eftx", _String2="..") returned 1 [0145.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bbe8 [0145.410] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.410] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.410] wcscat (in: _Dest=0x35bbe8, _Source="Essential.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" [0145.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0145.411] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b392800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b392800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0145.411] wcscmp (_String1="Executive.eftx", _String2=".") returned 1 [0145.411] wcscmp (_String1="Executive.eftx", _String2="..") returned 1 [0145.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c168 [0145.411] wcscpy (in: _Dest=0x35c168, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.411] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.411] wcscat (in: _Dest=0x35c168, _Source="Executive.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" [0145.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0145.413] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e53700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0145.413] wcscmp (_String1="Flow.eftx", _String2=".") returned 1 [0145.413] wcscmp (_String1="Flow.eftx", _String2="..") returned 1 [0145.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5ccb0 [0145.413] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.413] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.413] wcscat (in: _Dest=0x3e5ccb0, _Source="Flow.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" [0145.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0145.414] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251b000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x251b000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0145.414] wcscmp (_String1="Foundry.eftx", _String2=".") returned 1 [0145.414] wcscmp (_String1="Foundry.eftx", _String2="..") returned 1 [0145.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cc08 [0145.414] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.414] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.414] wcscat (in: _Dest=0x3e5cc08, _Source="Foundry.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" [0145.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0145.416] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1da700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f1da700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0145.417] wcscmp (_String1="Grid.eftx", _String2=".") returned 1 [0145.417] wcscmp (_String1="Grid.eftx", _String2="..") returned 1 [0145.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cb60 [0145.417] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.417] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.417] wcscat (in: _Dest=0x3e5cb60, _Source="Grid.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" [0145.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0145.420] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b12e00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x42b12e00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0145.420] wcscmp (_String1="Hardcover.eftx", _String2=".") returned 1 [0145.420] wcscmp (_String1="Hardcover.eftx", _String2="..") returned 1 [0145.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bc98 [0145.420] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.420] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.420] wcscat (in: _Dest=0x35bc98, _Source="Hardcover.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" [0145.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0145.421] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eccaf00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eccaf00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0145.421] wcscmp (_String1="Horizon.eftx", _String2=".") returned 1 [0145.422] wcscmp (_String1="Horizon.eftx", _String2="..") returned 1 [0145.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cab8 [0145.422] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.422] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.422] wcscat (in: _Dest=0x3e5cab8, _Source="Horizon.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" [0145.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0145.423] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0145.423] wcscmp (_String1="Median.eftx", _String2=".") returned 1 [0145.423] wcscmp (_String1="Median.eftx", _String2="..") returned 1 [0145.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ca10 [0145.423] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.423] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.423] wcscat (in: _Dest=0x3e5ca10, _Source="Median.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" [0145.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0145.424] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb1800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9700030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbdb1800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0145.424] wcscmp (_String1="Metro.eftx", _String2=".") returned 1 [0145.424] wcscmp (_String1="Metro.eftx", _String2="..") returned 1 [0145.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5c968 [0145.424] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.424] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.424] wcscat (in: _Dest=0x3e5c968, _Source="Metro.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" [0145.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0145.426] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e9f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6e9f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0145.426] wcscmp (_String1="Module.eftx", _String2=".") returned 1 [0145.426] wcscmp (_String1="Module.eftx", _String2="..") returned 1 [0145.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bd98 [0145.426] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.426] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.426] wcscat (in: _Dest=0x3e5bd98, _Source="Module.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" [0145.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0145.427] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0145.428] wcscmp (_String1="Newsprint.eftx", _String2=".") returned 1 [0145.428] wcscmp (_String1="Newsprint.eftx", _String2="..") returned 1 [0145.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c428 [0145.428] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.428] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.428] wcscat (in: _Dest=0x35c428, _Source="Newsprint.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" [0145.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0145.429] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13022600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13022600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0145.429] wcscmp (_String1="Opulent.eftx", _String2=".") returned 1 [0145.429] wcscmp (_String1="Opulent.eftx", _String2="..") returned 1 [0145.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d688 [0145.429] wcscpy (in: _Dest=0x3e5d688, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.429] wcscat (in: _Dest=0x3e5d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.429] wcscat (in: _Dest=0x3e5d688, _Source="Opulent.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" [0145.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0145.661] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1695ad00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1695ad00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0145.661] wcscmp (_String1="Oriel.eftx", _String2=".") returned 1 [0145.661] wcscmp (_String1="Oriel.eftx", _String2="..") returned 1 [0145.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d298 [0145.661] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0145.661] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0145.661] wcscat (in: _Dest=0x3e5d298, _Source="Oriel.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" [0151.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0151.216] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a293400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a293400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0151.216] wcscmp (_String1="Origin.eftx", _String2=".") returned 1 [0151.216] wcscmp (_String1="Origin.eftx", _String2="..") returned 1 [0151.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cab8 [0151.216] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.216] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.216] wcscat (in: _Dest=0x3e5cab8, _Source="Origin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" [0151.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0151.217] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0151.217] wcscmp (_String1="Paper.eftx", _String2=".") returned 1 [0151.217] wcscmp (_String1="Paper.eftx", _String2="..") returned 1 [0151.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0151.217] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.217] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.217] wcscat (in: _Dest=0x697e2d0, _Source="Paper.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" [0151.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0151.218] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4644b500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4644b500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0151.218] wcscmp (_String1="Perspective.eftx", _String2=".") returned 1 [0151.218] wcscmp (_String1="Perspective.eftx", _String2="..") returned 1 [0151.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2fc0 [0151.219] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.219] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.219] wcscat (in: _Dest=0x3ea2fc0, _Source="Perspective.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" [0151.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0151.220] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d83c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49d83c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0151.220] wcscmp (_String1="Pushpin.eftx", _String2=".") returned 1 [0151.220] wcscmp (_String1="Pushpin.eftx", _String2="..") returned 1 [0151.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e378 [0151.220] wcscpy (in: _Dest=0x697e378, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.220] wcscat (in: _Dest=0x697e378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.220] wcscat (in: _Dest=0x697e378, _Source="Pushpin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" [0151.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0151.221] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f3bd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75f3bd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0151.221] wcscmp (_String1="Slipstream.eftx", _String2=".") returned 1 [0151.221] wcscmp (_String1="Slipstream.eftx", _String2="..") returned 1 [0151.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2e60 [0151.221] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.221] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.221] wcscat (in: _Dest=0x3ea2e60, _Source="Slipstream.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" [0151.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0151.222] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201f1500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x201f1500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0151.222] wcscmp (_String1="Solstice.eftx", _String2=".") returned 1 [0151.222] wcscmp (_String1="Solstice.eftx", _String2="..") returned 1 [0151.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2db0 [0151.223] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.223] wcscat (in: _Dest=0x3ea2db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.223] wcscat (in: _Dest=0x3ea2db0, _Source="Solstice.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" [0151.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0151.224] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b29c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23b29c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0151.224] wcscmp (_String1="Technic.eftx", _String2=".") returned 1 [0151.224] wcscmp (_String1="Technic.eftx", _String2="..") returned 1 [0151.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e420 [0151.224] wcscpy (in: _Dest=0x697e420, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.224] wcscat (in: _Dest=0x697e420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.224] wcscat (in: _Dest=0x697e420, _Source="Technic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" [0151.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0151.225] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6bc300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d6bc300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0151.225] wcscmp (_String1="Thatch.eftx", _String2=".") returned 1 [0151.225] wcscmp (_String1="Thatch.eftx", _String2="..") returned 1 [0151.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e4c8 [0151.225] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.225] wcscat (in: _Dest=0x697e4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.225] wcscat (in: _Dest=0x697e4c8, _Source="Thatch.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" [0151.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0151.226] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27462300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27462300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0151.226] wcscmp (_String1="Trek.eftx", _String2=".") returned 1 [0151.226] wcscmp (_String1="Trek.eftx", _String2="..") returned 1 [0151.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e570 [0151.226] wcscpy (in: _Dest=0x697e570, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.226] wcscat (in: _Dest=0x697e570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.226] wcscat (in: _Dest=0x697e570, _Source="Trek.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" [0151.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0151.227] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad9aa00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9a1fd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ad9aa00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0151.227] wcscmp (_String1="Urban.eftx", _String2=".") returned 1 [0151.227] wcscmp (_String1="Urban.eftx", _String2="..") returned 1 [0151.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e618 [0151.227] wcscpy (in: _Dest=0x697e618, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.227] wcscat (in: _Dest=0x697e618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.227] wcscat (in: _Dest=0x697e618, _Source="Urban.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" [0151.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388 [0151.228] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0151.228] wcscmp (_String1="Verve.eftx", _String2=".") returned 1 [0151.228] wcscmp (_String1="Verve.eftx", _String2="..") returned 1 [0151.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e6c0 [0151.229] wcscpy (in: _Dest=0x697e6c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.229] wcscat (in: _Dest=0x697e6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.229] wcscat (in: _Dest=0x697e6c0, _Source="Verve.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" [0151.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0151.230] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0151.230] wcscmp (_String1="Waveform.eftx", _String2=".") returned 1 [0151.230] wcscmp (_String1="Waveform.eftx", _String2="..") returned 1 [0151.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2a40 [0151.230] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0151.230] wcscat (in: _Dest=0x3ea2a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0151.230] wcscat (in: _Dest=0x3ea2a40, _Source="Waveform.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" [0151.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0151.231] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 0 [0151.231] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0151.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0151.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 [0151.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 891 os_tid = 0x1324 [0141.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd098 [0141.129] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.129] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.129] wcscat (in: _Dest=0x66dd098, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*" [0141.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0141.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0143.471] wcscmp (_String1=".", _String2=".") returned 0 [0143.471] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.345] wcscmp (_String1="..", _String2=".") returned 1 [0144.345] wcscmp (_String1="..", _String2="..") returned 0 [0144.345] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6dec600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6dec600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0144.345] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0144.345] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0144.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cf50 [0144.345] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0144.345] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0144.345] wcscat (in: _Dest=0x3e5cf50, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" [0146.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0146.096] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0146.096] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0146.096] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0146.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d8f0 [0146.096] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.096] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.096] wcscat (in: _Dest=0x3e0d8f0, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" [0146.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0146.107] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5780b600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5780b600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0146.107] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0146.107] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0146.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0146.107] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.107] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.108] wcscat (in: _Dest=0x3e0dc10, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" [0146.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0146.109] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957dda00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957dda00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0146.109] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0146.109] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0146.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053480 [0146.109] wcscpy (in: _Dest=0x3053480, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.109] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.109] wcscat (in: _Dest=0x3053480, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" [0146.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0146.110] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b143d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b143d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0146.110] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0146.110] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0146.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0dcb0 [0146.110] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.110] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.110] wcscat (in: _Dest=0x3e0dcb0, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" [0146.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0146.116] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0146.116] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0146.116] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0146.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e750 [0146.116] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.116] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.116] wcscat (in: _Dest=0x3e0e750, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" [0146.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0146.117] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0146.117] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0146.117] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0146.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052e98 [0146.117] wcscpy (in: _Dest=0x3052e98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.117] wcscat (in: _Dest=0x3052e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.117] wcscat (in: _Dest=0x3052e98, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" [0146.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3052e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0146.118] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0146.118] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0146.118] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0146.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0146.118] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.118] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.118] wcscat (in: _Dest=0x3e0de90, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" [0146.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0146.119] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0146.119] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0146.119] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0146.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d5e0 [0146.119] wcscpy (in: _Dest=0x3e5d5e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.119] wcscat (in: _Dest=0x3e5d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.119] wcscat (in: _Dest=0x3e5d5e0, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" [0146.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0146.121] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0146.121] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0146.121] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0146.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d538 [0146.121] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.121] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.121] wcscat (in: _Dest=0x3e5d538, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" [0146.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0146.122] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0146.122] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0146.122] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0146.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5c818 [0146.122] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.122] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.122] wcscat (in: _Dest=0x3e5c818, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" [0146.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0146.123] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ce200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ce200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0146.123] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0146.123] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0146.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c8c0 [0146.123] wcscpy (in: _Dest=0x3e5c8c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.123] wcscat (in: _Dest=0x3e5c8c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.123] wcscat (in: _Dest=0x3e5c8c0, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" [0146.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0146.124] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f19600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f19600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0146.124] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0146.124] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0146.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d730 [0146.124] wcscpy (in: _Dest=0x3e5d730, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.124] wcscat (in: _Dest=0x3e5d730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.124] wcscat (in: _Dest=0x3e5d730, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" [0146.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0146.126] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649da500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649da500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0146.126] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0146.126] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0146.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d5d0 [0146.126] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.126] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.126] wcscat (in: _Dest=0x3e0d5d0, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" [0146.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0146.127] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f074200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f074200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0146.128] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0146.128] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0146.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d7d8 [0146.128] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.128] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.128] wcscat (in: _Dest=0x3e5d7d8, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" [0146.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0146.129] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0146.129] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0146.129] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0146.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d880 [0146.129] wcscpy (in: _Dest=0x3e5d880, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.130] wcscat (in: _Dest=0x3e5d880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.130] wcscat (in: _Dest=0x3e5d880, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" [0146.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0146.131] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0146.131] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0146.131] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0146.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0da30 [0146.131] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.131] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.131] wcscat (in: _Dest=0x3e0da30, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" [0146.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0146.132] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68312c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68312c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0146.132] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0146.132] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0146.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d928 [0146.133] wcscpy (in: _Dest=0x3e5d928, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.133] wcscat (in: _Dest=0x3e5d928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.133] wcscat (in: _Dest=0x3e5d928, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" [0146.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0146.134] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29ac900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa29ac900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0146.134] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0146.134] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0146.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e430 [0146.134] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.134] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.134] wcscat (in: _Dest=0x3e0e430, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" [0146.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0146.136] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0146.136] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0146.136] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0146.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d9d0 [0146.136] wcscpy (in: _Dest=0x3e5d9d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.136] wcscat (in: _Dest=0x3e5d9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.136] wcscat (in: _Dest=0x3e5d9d0, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" [0146.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0146.138] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0146.138] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0146.138] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0146.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5da78 [0146.138] wcscpy (in: _Dest=0x3e5da78, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.138] wcscat (in: _Dest=0x3e5da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.138] wcscat (in: _Dest=0x3e5da78, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" [0146.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0146.139] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e270d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6e270d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0146.139] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0146.140] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0146.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e2f0 [0146.140] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.140] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.140] wcscat (in: _Dest=0x3e0e2f0, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" [0146.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0146.141] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ba9400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71ba9400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0146.141] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0146.141] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0146.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e4d0 [0146.141] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.141] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.141] wcscat (in: _Dest=0x3e0e4d0, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" [0146.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0146.143] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0146.143] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0146.143] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0146.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0dfd0 [0146.143] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.143] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.143] wcscat (in: _Dest=0x3e0dfd0, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" [0146.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0146.145] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37afe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd37afe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0146.145] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0146.145] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0146.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5db20 [0146.145] wcscpy (in: _Dest=0x3e5db20, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.145] wcscat (in: _Dest=0x3e5db20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.145] wcscat (in: _Dest=0x3e5db20, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" [0146.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5db20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0146.147] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0146.147] wcscmp (_String1="Office 2.xml", _String2=".") returned 1 [0146.147] wcscmp (_String1="Office 2.xml", _String2="..") returned 1 [0146.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5dbc8 [0146.147] wcscpy (in: _Dest=0x3e5dbc8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.147] wcscat (in: _Dest=0x3e5dbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.147] wcscat (in: _Dest=0x3e5dbc8, _Source="Office 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" [0146.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0146.321] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0146.321] wcscmp (_String1="Office Classic 2.xml", _String2=".") returned 1 [0146.321] wcscmp (_String1="Office Classic 2.xml", _String2="..") returned 1 [0146.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0146.321] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0146.321] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0146.321] wcscat (in: _Dest=0x2ff6f28, _Source="Office Classic 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" [0151.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0151.598] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0151.598] wcscmp (_String1="Office Classic.xml", _String2=".") returned 1 [0151.598] wcscmp (_String1="Office Classic.xml", _String2="..") returned 1 [0151.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0151.598] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.598] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.598] wcscat (in: _Dest=0x35b7c8, _Source="Office Classic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" [0151.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0151.599] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0151.599] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0151.599] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0151.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d3e8 [0151.599] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.599] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.599] wcscat (in: _Dest=0x3e5d3e8, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" [0151.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0151.600] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b43fc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b43fc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0151.600] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0151.600] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0151.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d850 [0151.600] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.600] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.600] wcscat (in: _Dest=0x3e0d850, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" [0151.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0151.601] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed78300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ed78300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0151.601] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0151.601] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0151.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0db70 [0151.601] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.601] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.601] wcscat (in: _Dest=0x3e0db70, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" [0151.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0151.603] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0151.603] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0151.603] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0151.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0151.603] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.603] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.603] wcscat (in: _Dest=0x3e0d2b0, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" [0151.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0151.604] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa890aa00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa890aa00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0151.604] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0151.604] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0151.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0151.604] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0151.604] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0151.604] wcscat (in: _Dest=0x35b878, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" [0151.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0151.605] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac243100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac243100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0152.371] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0152.371] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0152.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5dbc8 [0152.371] wcscpy (in: _Dest=0x3e5dbc8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0152.371] wcscat (in: _Dest=0x3e5dbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0152.371] wcscat (in: _Dest=0x3e5dbc8, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" [0158.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0158.503] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd70e8500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd70e8500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0158.503] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0158.503] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0158.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697dce8 [0158.504] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.504] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.504] wcscat (in: _Dest=0x697dce8, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" [0158.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0158.505] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cd6400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84cd6400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0158.505] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0158.505] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0158.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e0d8 [0158.505] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.505] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.505] wcscat (in: _Dest=0x697e0d8, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" [0158.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0158.506] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860eb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8860eb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0158.507] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0158.507] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0158.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e8b8 [0158.507] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.507] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.507] wcscat (in: _Dest=0x697e8b8, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" [0158.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0158.508] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0158.508] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0158.508] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0158.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7738 [0158.508] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.508] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.508] wcscat (in: _Dest=0x2c7738, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" [0158.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0158.509] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf47200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8bf47200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0158.509] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0158.509] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0158.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7558 [0158.509] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.510] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.510] wcscat (in: _Dest=0x2c7558, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" [0158.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0158.511] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0158.511] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0158.511] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0158.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0158.511] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.511] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.511] wcscat (in: _Dest=0x2c7698, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" [0158.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0158.512] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ea5300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91ea5300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0158.512] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0158.512] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0158.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0158.512] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.512] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.513] wcscat (in: _Dest=0x2c7378, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" [0158.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0158.514] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0158.514] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0158.514] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0158.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0158.514] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0158.514] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0158.514] wcscat (in: _Dest=0x697e2d0, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" [0158.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0158.515] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0158.515] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0158.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0158.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 [0158.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 892 os_tid = 0x1328 [0141.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx")) returned 0x20 [0142.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0142.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.695] GetLastError () returned 0x5 [0142.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0142.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 893 os_tid = 0x132c [0141.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx")) returned 0x20 [0141.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0141.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.723] GetLastError () returned 0x5 [0141.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0141.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 894 os_tid = 0x1330 [0141.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx")) returned 0x20 [0142.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0142.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.621] GetLastError () returned 0x5 [0142.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0142.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 895 os_tid = 0x1334 [0141.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx")) returned 0x20 [0142.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0142.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.668] GetLastError () returned 0x5 [0142.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0142.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 897 os_tid = 0x133c [0141.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7650 [0141.530] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0141.530] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0141.530] wcscat (in: _Dest=0x3ef7650, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\*" [0141.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0141.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0142.086] wcscmp (_String1=".", _String2=".") returned 0 [0142.086] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.086] wcscmp (_String1="..", _String2=".") returned 1 [0142.086] wcscmp (_String1="..", _String2="..") returned 0 [0142.086] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6a8ea200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a910360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0142.086] wcscmp (_String1="classes.jsa", _String2=".") returned 1 [0142.086] wcscmp (_String1="classes.jsa", _String2="..") returned 1 [0142.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x364d90 [0142.086] wcscpy (in: _Dest=0x364d90, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0142.086] wcscat (in: _Dest=0x364d90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0142.086] wcscat (in: _Dest=0x364d90, _Source="classes.jsa" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" [0146.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x364d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0146.814] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0146.814] wcscmp (_String1="jvm.dll", _String2=".") returned 1 [0146.814] wcscmp (_String1="jvm.dll", _String2="..") returned 1 [0146.814] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0146.814] wcscmp (_String1="Xusage.txt", _String2=".") returned 1 [0146.814] wcscmp (_String1="Xusage.txt", _String2="..") returned 1 [0146.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29330 [0146.814] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0146.814] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0146.814] wcscat (in: _Dest=0x3f29330, _Source="Xusage.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" [0146.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0146.815] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0146.815] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0146.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0146.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 [0146.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d30) returned 1 Thread: id = 898 os_tid = 0x1340 [0141.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a88 [0141.533] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0141.533] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\" [0141.533] wcscat (in: _Dest=0x2fe6a88, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*" [0141.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0141.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0142.087] wcscmp (_String1=".", _String2=".") returned 0 [0142.087] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.087] wcscmp (_String1="..", _String2=".") returned 1 [0142.087] wcscmp (_String1="..", _String2="..") returned 0 [0142.087] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0142.087] wcscmp (_String1="deployJava1.dll", _String2=".") returned 1 [0142.087] wcscmp (_String1="deployJava1.dll", _String2="..") returned 1 [0142.087] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0142.087] wcscmp (_String1="npdeployJava1.dll", _String2=".") returned 1 [0142.087] wcscmp (_String1="npdeployJava1.dll", _String2="..") returned 1 [0142.088] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0142.088] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0142.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0142.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0142.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4ca8) returned 1 Thread: id = 899 os_tid = 0x1344 [0141.534] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0141.535] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0141.535] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.535] GetLastError () returned 0x5 [0141.535] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0141.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 900 os_tid = 0x1348 [0141.536] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20 [0141.537] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0141.537] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.537] GetLastError () returned 0x5 [0141.537] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0141.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 901 os_tid = 0x134c [0141.539] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20 [0141.539] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0141.539] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.539] GetLastError () returned 0x5 [0141.539] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0141.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e358f0) returned 1 Thread: id = 902 os_tid = 0x1350 [0141.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3321a8 [0141.541] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0141.541] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0141.541] wcscat (in: _Dest=0x3321a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0141.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0141.541] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0141.542] wcscmp (_String1=".", _String2=".") returned 0 [0141.542] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.542] wcscmp (_String1="..", _String2=".") returned 1 [0141.542] wcscmp (_String1="..", _String2="..") returned 0 [0141.542] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0141.542] wcscmp (_String1="x86", _String2=".") returned 1 [0141.542] wcscmp (_String1="x86", _String2="..") returned 1 [0141.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defe78 [0141.542] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0141.542] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0141.542] wcscat (in: _Dest=0x3defe78, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0152.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3defe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0152.090] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0152.090] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0152.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0152.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 [0152.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 903 os_tid = 0x1354 [0141.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332268 [0141.543] wcscpy (in: _Dest=0x332268, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0141.543] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0141.543] wcscat (in: _Dest=0x332268, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0141.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0141.543] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0141.543] wcscmp (_String1=".", _String2=".") returned 0 [0141.543] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.543] wcscmp (_String1="..", _String2=".") returned 1 [0141.543] wcscmp (_String1="..", _String2="..") returned 0 [0141.543] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0141.543] wcscmp (_String1="x86", _String2=".") returned 1 [0141.543] wcscmp (_String1="x86", _String2="..") returned 1 [0141.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defce8 [0141.543] wcscpy (in: _Dest=0x3defce8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0141.543] wcscat (in: _Dest=0x3defce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0141.543] wcscat (in: _Dest=0x3defce8, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0147.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3defce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0147.430] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0147.430] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0147.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0147.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 [0147.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 904 os_tid = 0x1358 [0141.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dde5c8 [0141.544] wcscpy (in: _Dest=0x3dde5c8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0141.544] wcscat (in: _Dest=0x3dde5c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0141.544] wcscat (in: _Dest=0x3dde5c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0141.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.544] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.545] wcscmp (_String1=".", _String2=".") returned 0 [0141.545] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.545] wcscmp (_String1="..", _String2=".") returned 1 [0141.545] wcscmp (_String1="..", _String2="..") returned 0 [0141.545] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.545] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.545] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.545] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.545] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0141.545] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0141.545] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.545] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0141.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde5c8) returned 1 [0141.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 905 os_tid = 0x135c [0141.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea72d8 [0141.547] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0141.547] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0141.547] wcscat (in: _Dest=0x3ea72d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0141.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.547] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.547] wcscmp (_String1=".", _String2=".") returned 0 [0141.548] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.548] wcscmp (_String1="..", _String2=".") returned 1 [0141.548] wcscmp (_String1="..", _String2="..") returned 0 [0141.548] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.548] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.548] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.548] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.548] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0141.548] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0141.548] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.548] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0141.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 [0141.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea81d8) returned 1 Thread: id = 906 os_tid = 0x1360 [0141.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0141.550] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0141.550] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0141.551] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0141.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.551] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.551] wcscmp (_String1=".", _String2=".") returned 0 [0141.551] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.551] wcscmp (_String1="..", _String2=".") returned 1 [0141.551] wcscmp (_String1="..", _String2="..") returned 0 [0141.551] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.551] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.551] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.551] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.551] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0141.552] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0141.552] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.552] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0141.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0141.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea80e8) returned 1 Thread: id = 907 os_tid = 0x1364 [0141.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea80e8 [0141.553] wcscpy (in: _Dest=0x3ea80e8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0141.554] wcscat (in: _Dest=0x3ea80e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0141.554] wcscat (in: _Dest=0x3ea80e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0141.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.554] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.554] wcscmp (_String1=".", _String2=".") returned 0 [0141.554] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.554] wcscmp (_String1="..", _String2=".") returned 1 [0141.554] wcscmp (_String1="..", _String2="..") returned 0 [0141.554] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.554] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.554] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.554] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.554] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0141.554] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0141.555] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.555] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0141.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea80e8) returned 1 [0141.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea82c8) returned 1 Thread: id = 908 os_tid = 0x1368 [0141.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0141.556] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0141.556] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0141.557] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0141.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.557] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.557] wcscmp (_String1=".", _String2=".") returned 0 [0141.557] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.557] wcscmp (_String1="..", _String2=".") returned 1 [0141.557] wcscmp (_String1="..", _String2="..") returned 0 [0141.557] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.557] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.557] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.557] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.558] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0141.558] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0141.558] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.558] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0141.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0141.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0141.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea83b8) returned 1 Thread: id = 909 os_tid = 0x136c [0141.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29410 [0141.562] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0141.562] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0141.562] wcscat (in: _Dest=0x3f29410, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0141.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0141.562] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0141.562] wcscmp (_String1=".", _String2=".") returned 0 [0141.562] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.562] wcscmp (_String1="..", _String2=".") returned 1 [0141.562] wcscmp (_String1="..", _String2="..") returned 0 [0141.562] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0141.563] wcscmp (_String1="Security", _String2=".") returned 1 [0141.563] wcscmp (_String1="Security", _String2="..") returned 1 [0141.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0fbf0 [0141.563] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0141.563] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0141.563] wcscat (in: _Dest=0x3e0fbf0, _Source="Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0147.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0147.433] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0147.433] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0147.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0147.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 [0147.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd378) returned 1 Thread: id = 910 os_tid = 0x1370 [0141.566] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0141.567] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0141.567] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.567] GetLastError () returned 0x5 [0141.567] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0141.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 Thread: id = 911 os_tid = 0x1374 [0141.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d7d8 [0141.569] wcscpy (in: _Dest=0x3f1d7d8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0141.569] wcscat (in: _Dest=0x3f1d7d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0141.569] wcscat (in: _Dest=0x3f1d7d8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0141.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0141.569] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0141.569] wcscmp (_String1=".", _String2=".") returned 0 [0141.570] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.570] wcscmp (_String1="..", _String2=".") returned 1 [0141.570] wcscmp (_String1="..", _String2="..") returned 0 [0141.570] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0141.570] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0141.570] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0141.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ecf0 [0141.570] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0141.570] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0141.570] wcscat (in: _Dest=0x3e0ecf0, _Source="directories.acrodata" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0147.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0147.436] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0147.436] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0147.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0147.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0147.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 Thread: id = 912 os_tid = 0x1378 [0141.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb8f8 [0141.571] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0141.571] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0141.571] wcscat (in: _Dest=0x3edb8f8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*" [0141.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c26e0 [0141.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0141.571] wcscmp (_String1=".", _String2=".") returned 0 [0141.571] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.172] wcscmp (_String1="..", _String2=".") returned 1 [0142.172] wcscmp (_String1="..", _String2="..") returned 0 [0142.172] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x260e6157, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1 [0142.172] wcscmp (_String1="58.0.3029.110.manifest", _String2=".") returned 1 [0142.172] wcscmp (_String1="58.0.3029.110.manifest", _String2="..") returned 1 [0142.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5be40 [0142.172] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0142.172] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0142.172] wcscat (in: _Dest=0x3e5be40, _Source="58.0.3029.110.manifest" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" [0151.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0151.653] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0bfb530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0bfb530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf98067d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2164d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0151.653] wcscmp (_String1="chrome.dll", _String2=".") returned 1 [0151.653] wcscmp (_String1="chrome.dll", _String2="..") returned 1 [0151.653] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf9ebb1a8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0151.653] wcscmp (_String1="chrome.dll.sig", _String2=".") returned 1 [0151.653] wcscmp (_String1="chrome.dll.sig", _String2="..") returned 1 [0151.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957eb0 [0151.653] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.653] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.653] wcscat (in: _Dest=0x6957eb0, _Source="chrome.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" [0151.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0151.654] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf919e2b8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0151.654] wcscmp (_String1="chrome.exe.sig", _String2=".") returned 1 [0151.654] wcscmp (_String1="chrome.exe.sig", _String2="..") returned 1 [0151.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957e18 [0151.654] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.654] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.655] wcscat (in: _Dest=0x6957e18, _Source="chrome.exe.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" [0151.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0151.656] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2613dfbb, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0151.656] wcscmp (_String1="chrome_100_percent.pak", _String2=".") returned 1 [0151.656] wcscmp (_String1="chrome_100_percent.pak", _String2="..") returned 1 [0151.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e810 [0151.656] wcscpy (in: _Dest=0x697e810, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.656] wcscat (in: _Dest=0x697e810, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.656] wcscat (in: _Dest=0x697e810, _Source="chrome_100_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" [0151.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0151.660] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26f2acaf, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0151.660] wcscmp (_String1="chrome_200_percent.pak", _String2=".") returned 1 [0151.660] wcscmp (_String1="chrome_200_percent.pak", _String2="..") returned 1 [0151.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e8b8 [0151.660] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.660] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.660] wcscat (in: _Dest=0x697e8b8, _Source="chrome_200_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" [0151.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0151.661] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cf11f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe1cf11f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfa6ed2fe, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2ca2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0151.662] wcscmp (_String1="chrome_child.dll", _String2=".") returned 1 [0151.662] wcscmp (_String1="chrome_child.dll", _String2="..") returned 1 [0151.662] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfaf456ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0151.662] wcscmp (_String1="chrome_child.dll.sig", _String2=".") returned 1 [0151.662] wcscmp (_String1="chrome_child.dll.sig", _String2="..") returned 1 [0151.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e960 [0151.662] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.662] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.662] wcscat (in: _Dest=0x697e960, _Source="chrome_child.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" [0151.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0151.663] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb1a7c4e, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x69d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0151.663] wcscmp (_String1="chrome_elf.dll", _String2=".") returned 1 [0151.663] wcscmp (_String1="chrome_elf.dll", _String2="..") returned 1 [0151.663] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb515264, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x75558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0151.663] wcscmp (_String1="chrome_watcher.dll", _String2=".") returned 1 [0151.664] wcscmp (_String1="chrome_watcher.dll", _String2="..") returned 1 [0151.664] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2645ed83, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0151.664] wcscmp (_String1="d3dcompiler_47.dll", _String2=".") returned 1 [0151.664] wcscmp (_String1="d3dcompiler_47.dll", _String2="..") returned 1 [0151.664] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0151.664] wcscmp (_String1="default_apps", _String2=".") returned 1 [0151.664] wcscmp (_String1="default_apps", _String2="..") returned 1 [0151.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957d80 [0151.664] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.664] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.664] wcscat (in: _Dest=0x6957d80, _Source="default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0151.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0151.665] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfba7270c, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0151.665] wcscmp (_String1="eventlog_provider.dll", _String2=".") returned 1 [0151.665] wcscmp (_String1="eventlog_provider.dll", _String2="..") returned 1 [0151.665] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0151.665] wcscmp (_String1="Extensions", _String2=".") returned 1 [0151.665] wcscmp (_String1="Extensions", _String2="..") returned 1 [0151.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc8b8 [0151.665] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.666] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.666] wcscat (in: _Dest=0x66dc8b8, _Source="Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0151.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0151.667] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a0c350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a0c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2647c24f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0151.667] wcscmp (_String1="icudtl.dat", _String2=".") returned 1 [0151.667] wcscmp (_String1="icudtl.dat", _String2="..") returned 1 [0151.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcc18 [0151.667] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.667] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.667] wcscat (in: _Dest=0x66dcc18, _Source="icudtl.dat" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" [0151.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0151.668] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0151.668] wcscmp (_String1="Installer", _String2=".") returned 1 [0151.668] wcscmp (_String1="Installer", _String2="..") returned 1 [0151.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0151.668] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.668] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.668] wcscat (in: _Dest=0x66dc9d8, _Source="Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0151.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0151.669] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a9450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20a9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfbe2c1d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0151.670] wcscmp (_String1="libegl.dll", _String2=".") returned 1 [0151.670] wcscmp (_String1="libegl.dll", _String2="..") returned 1 [0151.670] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20cf5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20cf5b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc1e5ca0, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0151.670] wcscmp (_String1="libglesv2.dll", _String2=".") returned 1 [0151.670] wcscmp (_String1="libglesv2.dll", _String2="..") returned 1 [0151.670] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0151.670] wcscmp (_String1="Locales", _String2=".") returned 1 [0151.670] wcscmp (_String1="Locales", _String2="..") returned 1 [0151.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc558 [0151.670] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.670] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.670] wcscat (in: _Dest=0x66dc558, _Source="Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0151.671] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc684586, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x60e358, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl64.exe", cAlternateFileName="")) returned 1 [0151.671] wcscmp (_String1="nacl64.exe", _String2=".") returned 1 [0151.671] wcscmp (_String1="nacl64.exe", _String2="..") returned 1 [0151.671] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2651ada0, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3404b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_32.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0151.671] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2=".") returned 1 [0151.671] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2="..") returned 1 [0151.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0151.671] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.671] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.671] wcscat (in: _Dest=0x697ea08, _Source="nacl_irt_x86_32.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" [0151.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0151.673] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2656dde2, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x410630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~2.NEX")) returned 1 [0151.673] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2=".") returned 1 [0151.673] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2="..") returned 1 [0151.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697eab0 [0151.673] wcscpy (in: _Dest=0x697eab0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.673] wcscat (in: _Dest=0x697eab0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.673] wcscat (in: _Dest=0x697eab0, _Source="nacl_irt_x86_64.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" [0151.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697eab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0151.674] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0af0b90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0af0b90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2657c848, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0151.674] wcscmp (_String1="natives_blob.bin", _String2=".") returned 1 [0151.674] wcscmp (_String1="natives_blob.bin", _String2="..") returned 1 [0151.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e890 [0151.674] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.674] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.674] wcscat (in: _Dest=0x3e0e890, _Source="natives_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" [0151.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0151.676] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265aae8b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0151.676] wcscmp (_String1="resources.pak", _String2=".") returned 1 [0151.676] wcscmp (_String1="resources.pak", _String2="..") returned 1 [0151.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957ce8 [0151.676] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.676] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.676] wcscat (in: _Dest=0x6957ce8, _Source="resources.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" [0151.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0151.677] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265afcad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x10c4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0151.677] wcscmp (_String1="snapshot_blob.bin", _String2=".") returned 1 [0151.677] wcscmp (_String1="snapshot_blob.bin", _String2="..") returned 1 [0151.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0151.677] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.678] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.678] wcscat (in: _Dest=0x3e0ecf0, _Source="snapshot_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" [0151.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0151.679] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0151.679] wcscmp (_String1="VisualElements", _String2=".") returned 1 [0151.679] wcscmp (_String1="VisualElements", _String2="..") returned 1 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69582d8 [0151.679] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.679] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.679] wcscat (in: _Dest=0x69582d8, _Source="VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0151.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0151.680] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0151.680] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0151.680] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0151.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958240 [0151.680] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0151.681] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0151.681] wcscat (in: _Dest=0x6958240, _Source="WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0151.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0151.682] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0151.682] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0151.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26e0) returned 1 [0151.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 [0151.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 913 os_tid = 0x137c [0141.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20 [0141.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0141.573] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.573] GetLastError () returned 0x5 [0141.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0141.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 914 os_tid = 0x1380 [0141.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbbf8 [0141.575] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0141.575] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0141.575] wcscat (in: _Dest=0x3edbbf8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*" [0141.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0141.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0141.575] wcscmp (_String1=".", _String2=".") returned 0 [0141.575] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.576] wcscmp (_String1="..", _String2=".") returned 1 [0141.576] wcscmp (_String1="..", _String2="..") returned 0 [0141.576] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 1 [0141.576] wcscmp (_String1="20170531124044.pma", _String2=".") returned 1 [0141.576] wcscmp (_String1="20170531124044.pma", _String2="..") returned 1 [0141.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e6b0 [0141.576] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0141.576] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0141.576] wcscat (in: _Dest=0x3e0e6b0, _Source="20170531124044.pma" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" [0144.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0144.494] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 0 [0144.495] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0144.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0144.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 [0144.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 915 os_tid = 0x1384 [0141.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ncwro1mfmnlqo.ppt")) returned 0x20 [0141.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt", dwFileAttributes=0x20) returned 1 [0142.908] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ncwro1mfmnlqo.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda8 [0142.908] GetFileSizeEx (in: hFile=0xda8, lpFileSize=0xa90f924 | out: lpFileSize=0xa90f924*=30894) returned 1 [0142.908] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x78aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.908] ReadFile (in: hFile=0xda8, lpBuffer=0xa90f900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa90f910, lpOverlapped=0x0 | out: lpBuffer=0xa90f900*, lpNumberOfBytesRead=0xa90f910*=0x4, lpOverlapped=0x0) returned 1 [0142.910] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0142.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0142.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0142.910] NtQuerySystemTime (in: CurrentTime=0xa90f898 | out: CurrentTime=0xa90f898*=132482710515780000) returned 0x0 [0142.910] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x7fddb5cd [0142.910] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x6a9bb4cc [0142.910] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x46826360 [0142.910] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4b4fe1dc [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x5a70529c [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4ab7cba8 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x3160504f [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x10d495d [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x1028956 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x157b919a [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x3b7e0b8 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x19e53585 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x54e81f7f [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x25da278a [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x732ee0f5 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x451a28e9 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x689e245 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4873e850 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x9f77f51 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x3fa301a3 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x7d6cf527 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x7adc8ca [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x50189a06 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x301fedfc [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x7de5a874 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4ce4978 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x26e8e7c1 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x3d1232d3 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4b41837b [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x67d9aa19 [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x76320ab [0142.911] RtlRandomEx (in: Seed=0xa90f890 | out: Seed=0xa90f890) returned 0x4f29b6f4 [0142.922] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.922] ReadFile (in: hFile=0xda8, lpBuffer=0x67138f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa90f898, lpOverlapped=0x0 | out: lpBuffer=0x67138f0*, lpNumberOfBytesRead=0xa90f898*=0x3c00, lpOverlapped=0x0) returned 1 [0142.922] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x358ab0 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3dc6b18 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6731930 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0142.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0142.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0142.923] WriteFile (in: hFile=0xda8, lpBuffer=0x6731930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa90f898, lpOverlapped=0x0 | out: lpBuffer=0x6731930*, lpNumberOfBytesWritten=0xa90f898*=0x3c00, lpOverlapped=0x0) returned 1 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6731930) returned 1 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67138f0) returned 1 [0143.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19a10 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0143.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19a48 [0143.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0143.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0143.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0143.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54a60 [0143.133] SetFilePointerEx (in: hFile=0xda8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.134] WriteFile (in: hFile=0xda8, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xa90f918, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0xa90f918*=0x114, lpOverlapped=0x0) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a10) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0143.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0143.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364a80 [0143.185] wcscpy (in: _Dest=0x364a80, _Source="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt" [0143.185] wcscat (in: _Dest=0x364a80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt.ac3a86" [0143.185] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt.ac3a86", NtPathName=0xa90f890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\NCwro1mFmNLQO.ppt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59b70 [0143.345] FlushFileBuffers (hFile=0xda8) returned 1 [0143.355] CloseHandle (hObject=0xda8) returned 1 [0143.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e480 [0143.362] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.362] wcscat (in: _Dest=0x3d8e480, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 [0143.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 Thread: id = 916 os_tid = 0x1388 [0141.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx" (normalized: "c:\\users\\eebsym5\\documents\\nesv5v.docx")) returned 0x20 [0141.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx", dwFileAttributes=0x20) returned 1 [0142.924] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx" (normalized: "c:\\users\\eebsym5\\documents\\nesv5v.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbbc [0142.924] GetFileSizeEx (in: hFile=0xbbc, lpFileSize=0x7fcf7c4 | out: lpFileSize=0x7fcf7c4*=65836) returned 1 [0142.924] SetFilePointerEx (in: hFile=0xbbc, liDistanceToMove=0x10128, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.924] ReadFile (in: hFile=0xbbc, lpBuffer=0x7fcf7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fcf7b0, lpOverlapped=0x0 | out: lpBuffer=0x7fcf7a0*, lpNumberOfBytesRead=0x7fcf7b0*=0x4, lpOverlapped=0x0) returned 1 [0142.927] SetFilePointerEx (in: hFile=0xbbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0142.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0142.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.927] NtQuerySystemTime (in: CurrentTime=0x7fcf738 | out: CurrentTime=0x7fcf738*=132482710515936000) returned 0x0 [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x372da4dc [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x4b0857a2 [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x2691ff93 [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x56a9380a [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x1eca6844 [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x297ed553 [0142.927] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x7465208a [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0xce86571 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x6e59a92c [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x509aa43c [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x7e3708ad [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x7d4fc2ec [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x567ac335 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x35b3b6b7 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0xe2f1ee4 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x7b25fd4e [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x1630214a [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x1dc14405 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x5c149beb [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x660b60f5 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x6e2f3b59 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x46d81859 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x43065299 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x49bc0768 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x50b41934 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x5419c53f [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x2a41fc6d [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x6d941193 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x1f61c165 [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x3acf0fda [0142.928] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x681a0f03 [0142.929] RtlRandomEx (in: Seed=0x7fcf730 | out: Seed=0x7fcf730) returned 0x53563a10 [0142.940] SetFilePointerEx (in: hFile=0xbbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.940] ReadFile (in: hFile=0xbbc, lpBuffer=0x6748160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7fcf738, lpOverlapped=0x0 | out: lpBuffer=0x6748160*, lpNumberOfBytesRead=0x7fcf738*=0x3c00, lpOverlapped=0x0) returned 1 [0142.940] SetFilePointerEx (in: hFile=0xbbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x358ab0 [0142.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3dc6b18 [0142.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0142.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0142.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671ed08 [0142.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0142.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0142.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0142.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0142.941] WriteFile (in: hFile=0xbbc, lpBuffer=0x671ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7fcf738, lpOverlapped=0x0 | out: lpBuffer=0x671ed08*, lpNumberOfBytesWritten=0x7fcf738*=0x3c00, lpOverlapped=0x0) returned 1 [0143.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671ed08) returned 1 [0143.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6748160) returned 1 [0143.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5d50 [0143.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0143.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5210 [0143.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0143.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0143.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0143.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41078) returned 1 [0143.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec080 [0143.136] SetFilePointerEx (in: hFile=0xbbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.136] WriteFile (in: hFile=0xbbc, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x7fcf7b8, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x7fcf7b8*=0x108, lpOverlapped=0x0) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d50) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0143.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0143.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0143.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b490 [0143.187] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx") returned="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx" [0143.187] wcscat (in: _Dest=0x3d8b490, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx.ac3a86" [0143.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx.ac3a86", NtPathName=0x7fcf730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\nEsV5v.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x2fc9808 [0143.259] FlushFileBuffers (hFile=0xbbc) returned 1 [0143.261] CloseHandle (hObject=0xbbc) returned 1 [0143.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b490 [0143.262] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.262] wcscat (in: _Dest=0x3d8b490, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 [0143.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7180) returned 1 Thread: id = 917 os_tid = 0x138c [0141.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7e38 [0141.578] wcscpy (in: _Dest=0x3ef7e38, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0141.578] wcscat (in: _Dest=0x3ef7e38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0141.578] wcscat (in: _Dest=0x3ef7e38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\*") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\*" [0141.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0141.578] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe502c9c0, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xb31cbfd0, ftLastAccessTime.dwHighDateTime=0x1d5e6e6, ftLastWriteTime.dwLowDateTime=0xb31cbfd0, ftLastWriteTime.dwHighDateTime=0x1d5e6e6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0141.578] wcscmp (_String1=".", _String2=".") returned 0 [0141.578] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe502c9c0, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xb31cbfd0, ftLastAccessTime.dwHighDateTime=0x1d5e6e6, ftLastWriteTime.dwLowDateTime=0xb31cbfd0, ftLastWriteTime.dwHighDateTime=0x1d5e6e6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.578] wcscmp (_String1="..", _String2=".") returned 1 [0141.579] wcscmp (_String1="..", _String2="..") returned 0 [0141.579] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0419c90, ftCreationTime.dwHighDateTime=0x1d5dbac, ftLastAccessTime.dwLowDateTime=0xa72c1d90, ftLastAccessTime.dwHighDateTime=0x1d5e4fe, ftLastWriteTime.dwLowDateTime=0xa72c1d90, ftLastWriteTime.dwHighDateTime=0x1d5e4fe, nFileSizeHigh=0x0, nFileSizeLow=0x16e05, dwReserved0=0x0, dwReserved1=0x0, cFileName="aTvKY6JYtlu1Hn.ots", cAlternateFileName="ATVKY6~1.OTS")) returned 1 [0141.579] wcscmp (_String1="aTvKY6JYtlu1Hn.ots", _String2=".") returned 1 [0141.579] wcscmp (_String1="aTvKY6JYtlu1Hn.ots", _String2="..") returned 1 [0141.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0141.579] wcscpy (in: _Dest=0x3f1d670, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0141.579] wcscat (in: _Dest=0x3f1d670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0141.579] wcscat (in: _Dest=0x3f1d670, _Source="aTvKY6JYtlu1Hn.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots" [0144.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0144.497] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3704de30, ftCreationTime.dwHighDateTime=0x1d5e337, ftLastAccessTime.dwLowDateTime=0xb4651570, ftLastAccessTime.dwHighDateTime=0x1d5de6e, ftLastWriteTime.dwLowDateTime=0xb4651570, ftLastWriteTime.dwHighDateTime=0x1d5de6e, nFileSizeHigh=0x0, nFileSizeLow=0xe768, dwReserved0=0x0, dwReserved1=0x0, cFileName="iZRs1zRr84To.ods", cAlternateFileName="IZRS1Z~1.ODS")) returned 1 [0144.497] wcscmp (_String1="iZRs1zRr84To.ods", _String2=".") returned 1 [0144.497] wcscmp (_String1="iZRs1zRr84To.ods", _String2="..") returned 1 [0144.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b240 [0144.497] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.497] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.497] wcscat (in: _Dest=0x3f1b240, _Source="iZRs1zRr84To.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods" [0144.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0144.498] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa2183c0, ftCreationTime.dwHighDateTime=0x1d5dd45, ftLastAccessTime.dwLowDateTime=0x16ab9d60, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0x16ab9d60, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0xd6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMKmmHaRGZ9t.xls", cAlternateFileName="PMKMMH~1.XLS")) returned 1 [0144.498] wcscmp (_String1="PMKmmHaRGZ9t.xls", _String2=".") returned 1 [0144.498] wcscmp (_String1="PMKmmHaRGZ9t.xls", _String2="..") returned 1 [0144.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1abb0 [0144.498] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.498] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.499] wcscat (in: _Dest=0x3f1abb0, _Source="PMKmmHaRGZ9t.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls" [0144.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0144.500] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87f2a1e0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0x905f400, ftLastAccessTime.dwHighDateTime=0x1d5e333, ftLastWriteTime.dwLowDateTime=0x905f400, ftLastWriteTime.dwHighDateTime=0x1d5e333, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qhbz7FgII7PxeXr5Y1i", cAlternateFileName="QHBZ7F~1")) returned 1 [0144.500] wcscmp (_String1="qhbz7FgII7PxeXr5Y1i", _String2=".") returned 1 [0144.500] wcscmp (_String1="qhbz7FgII7PxeXr5Y1i", _String2="..") returned 1 [0144.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edbbf8 [0144.500] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.500] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.500] wcscat (in: _Dest=0x3edbbf8, _Source="qhbz7FgII7PxeXr5Y1i" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" [0144.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edbbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0144.513] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f94000, ftCreationTime.dwHighDateTime=0x1d5e1a5, ftLastAccessTime.dwLowDateTime=0xf4f59de0, ftLastAccessTime.dwHighDateTime=0x1d5e7d7, ftLastWriteTime.dwLowDateTime=0xf4f59de0, ftLastWriteTime.dwHighDateTime=0x1d5e7d7, nFileSizeHigh=0x0, nFileSizeLow=0xbd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T4mP8Tq0.ots", cAlternateFileName="")) returned 1 [0144.514] wcscmp (_String1="T4mP8Tq0.ots", _String2=".") returned 1 [0144.514] wcscmp (_String1="T4mP8Tq0.ots", _String2="..") returned 1 [0144.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29170 [0144.514] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.514] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.514] wcscat (in: _Dest=0x3f29170, _Source="T4mP8Tq0.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots" [0144.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0144.515] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c41a560, ftCreationTime.dwHighDateTime=0x1d5e861, ftLastAccessTime.dwLowDateTime=0x9f3da980, ftLastAccessTime.dwHighDateTime=0x1d5d81c, ftLastWriteTime.dwLowDateTime=0x9f3da980, ftLastWriteTime.dwHighDateTime=0x1d5d81c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tf7JXXXlXVNs1k", cAlternateFileName="TF7JXX~1")) returned 1 [0144.515] wcscmp (_String1="Tf7JXXXlXVNs1k", _String2=".") returned 1 [0144.515] wcscmp (_String1="Tf7JXXXlXVNs1k", _String2="..") returned 1 [0144.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0144.515] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.515] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.515] wcscat (in: _Dest=0x3f29090, _Source="Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0144.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0144.517] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e377930, ftCreationTime.dwHighDateTime=0x1d5d97f, ftLastAccessTime.dwLowDateTime=0x1fdac440, ftLastAccessTime.dwHighDateTime=0x1d5da4f, ftLastWriteTime.dwLowDateTime=0x1fdac440, ftLastWriteTime.dwHighDateTime=0x1d5da4f, nFileSizeHigh=0x0, nFileSizeLow=0x155b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="wVu_iz.xls", cAlternateFileName="")) returned 1 [0144.517] wcscmp (_String1="wVu_iz.xls", _String2=".") returned 1 [0144.517] wcscmp (_String1="wVu_iz.xls", _String2="..") returned 1 [0144.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d920 [0144.517] wcscpy (in: _Dest=0x3d8d920, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.517] wcscat (in: _Dest=0x3d8d920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.517] wcscat (in: _Dest=0x3d8d920, _Source="wVu_iz.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls" [0144.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0144.518] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe287fd0, ftCreationTime.dwHighDateTime=0x1d5e79b, ftLastAccessTime.dwLowDateTime=0xf561bae0, ftLastAccessTime.dwHighDateTime=0x1d5db5a, ftLastWriteTime.dwLowDateTime=0xf561bae0, ftLastWriteTime.dwHighDateTime=0x1d5db5a, nFileSizeHigh=0x0, nFileSizeLow=0x3a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="XER5wQ9WbbSJaKUyzhl.pdf", cAlternateFileName="XER5WQ~1.PDF")) returned 1 [0144.518] wcscmp (_String1="XER5wQ9WbbSJaKUyzhl.pdf", _String2=".") returned 1 [0144.518] wcscmp (_String1="XER5wQ9WbbSJaKUyzhl.pdf", _String2="..") returned 1 [0144.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66effb0 [0144.518] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.518] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.518] wcscat (in: _Dest=0x66effb0, _Source="XER5wQ9WbbSJaKUyzhl.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf" [0144.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0144.519] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853cad50, ftCreationTime.dwHighDateTime=0x1d5e376, ftLastAccessTime.dwLowDateTime=0x49fce5a0, ftLastAccessTime.dwHighDateTime=0x1d5e1f7, ftLastWriteTime.dwLowDateTime=0x49fce5a0, ftLastWriteTime.dwHighDateTime=0x1d5e1f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtsiWIbg", cAlternateFileName="")) returned 1 [0144.519] wcscmp (_String1="YtsiWIbg", _String2=".") returned 1 [0144.519] wcscmp (_String1="YtsiWIbg", _String2="..") returned 1 [0144.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e5b8 [0144.520] wcscpy (in: _Dest=0x3d8e5b8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi" [0144.520] wcscat (in: _Dest=0x3d8e5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0144.520] wcscat (in: _Dest=0x3d8e5b8, _Source="YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0144.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0144.523] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853cad50, ftCreationTime.dwHighDateTime=0x1d5e376, ftLastAccessTime.dwLowDateTime=0x49fce5a0, ftLastAccessTime.dwHighDateTime=0x1d5e1f7, ftLastWriteTime.dwLowDateTime=0x49fce5a0, ftLastWriteTime.dwHighDateTime=0x1d5e1f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtsiWIbg", cAlternateFileName="")) returned 0 [0144.523] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0144.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0144.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e38) returned 1 [0144.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7440) returned 1 Thread: id = 918 os_tid = 0x1390 [0141.579] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx" (normalized: "c:\\users\\eebsym5\\documents\\otj4raohuemm7.docx")) returned 0x20 [0141.579] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx", dwFileAttributes=0x20) returned 1 [0142.941] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx" (normalized: "c:\\users\\eebsym5\\documents\\otj4raohuemm7.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd0 [0142.942] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0xb19f9f4 | out: lpFileSize=0xb19f9f4*=6411) returned 1 [0142.942] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x1907, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.942] ReadFile (in: hFile=0xdd0, lpBuffer=0xb19f9d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb19f9e0, lpOverlapped=0x0 | out: lpBuffer=0xb19f9d0*, lpNumberOfBytesRead=0xb19f9e0*=0x4, lpOverlapped=0x0) returned 1 [0142.943] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0142.944] NtQuerySystemTime (in: CurrentTime=0xb19f968 | out: CurrentTime=0xb19f968*=132482710516092000) returned 0x0 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x7e917b30 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x180d072e [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x584378ae [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x150237e1 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x5dd4bc5 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0xad502fa [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x4a621a28 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x4ee0886a [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x22e17120 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x44ebaa4e [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x3d817c97 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x72cbca86 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x4a7fa610 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x7ba4ecb6 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x5297945 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x2ce53d1d [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x223aa32e [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x3c76f1ac [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x395d26de [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x20216388 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x3597c87f [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0xa64af6a [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x3b53e6ce [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x6dd257b7 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x7f0d71c7 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x498e30f8 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x52215d21 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x50e23051 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x709da88c [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x147fd48b [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0x252a20d8 [0142.944] RtlRandomEx (in: Seed=0xb19f960 | out: Seed=0xb19f960) returned 0xa155a51 [0142.954] ReadFile (in: hFile=0xdd0, lpBuffer=0x68f5140, nNumberOfBytesToRead=0x190b, lpNumberOfBytesRead=0xb19f95c, lpOverlapped=0x0 | out: lpBuffer=0x68f5140*, lpNumberOfBytesRead=0xb19f95c*=0x190b, lpOverlapped=0x0) returned 1 [0142.955] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.955] WriteFile (in: hFile=0xdd0, lpBuffer=0x68f8d48*, nNumberOfBytesToWrite=0x190b, lpNumberOfBytesWritten=0xb19f960, lpOverlapped=0x0 | out: lpBuffer=0x68f8d48*, lpNumberOfBytesWritten=0xb19f960*=0x190b, lpOverlapped=0x0) returned 1 [0143.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c788) returned 1 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f8d48) returned 1 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f5140) returned 1 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0143.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f0c0 [0143.138] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.138] WriteFile (in: hFile=0xdd0, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xb19f9e8, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0xb19f9e8*=0x116, lpOverlapped=0x0) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c788) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f0c0) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0143.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0143.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0c90 [0143.189] wcscpy (in: _Dest=0x66d0c90, _Source="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx") returned="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx" [0143.189] wcscat (in: _Dest=0x66d0c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx.ac3a86" [0143.189] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx.ac3a86", NtPathName=0xb19f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\otJ4RAohueMm7.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0143.282] FlushFileBuffers (hFile=0xdd0) returned 1 [0143.370] CloseHandle (hObject=0xdd0) returned 1 [0143.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e008 [0143.371] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.371] wcscat (in: _Dest=0x3d8e008, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 [0143.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 919 os_tid = 0x1394 [0141.580] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ou3ey8q-jrht7ot.xlsx")) returned 0x20 [0141.580] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx", dwFileAttributes=0x20) returned 1 [0142.955] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ou3ey8q-jrht7ot.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0142.955] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0xa04fb9c | out: lpFileSize=0xa04fb9c*=25103) returned 1 [0142.955] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x620b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.955] ReadFile (in: hFile=0xd90, lpBuffer=0xa04fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa04fb88, lpOverlapped=0x0 | out: lpBuffer=0xa04fb78*, lpNumberOfBytesRead=0xa04fb88*=0x4, lpOverlapped=0x0) returned 1 [0142.957] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0142.957] NtQuerySystemTime (in: CurrentTime=0xa04fb10 | out: CurrentTime=0xa04fb10*=132482710516248000) returned 0x0 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x2e93e5d1 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x6e101478 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x1142c219 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x3db21a9c [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x6309b08e [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x34b86ce5 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x5340b880 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x70ed9edd [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x7fd91663 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x12ccf340 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0xf4ad42a [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x3d05ca2e [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0xeb1574e [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x23efea98 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x71f0fb6f [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x37b8c81f [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x56206720 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x3a438f62 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x17f5fe96 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x5e452b4c [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x15b7a3f7 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x7cbb9b8c [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x1ba80c7e [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x673fead7 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x51f96456 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x62733bbc [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x4b2066a5 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x26f9c1e9 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x4d040519 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x7bdc8326 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x40706136 [0142.958] RtlRandomEx (in: Seed=0xa04fb08 | out: Seed=0xa04fb08) returned 0x57543036 [0142.969] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.969] ReadFile (in: hFile=0xd90, lpBuffer=0x68fc950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa04fb10, lpOverlapped=0x0 | out: lpBuffer=0x68fc950*, lpNumberOfBytesRead=0xa04fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0142.969] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe870 [0142.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ba0 [0142.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0142.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6900558 [0142.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0142.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0142.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0142.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0142.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0142.970] WriteFile (in: hFile=0xd90, lpBuffer=0x6900558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa04fb10, lpOverlapped=0x0 | out: lpBuffer=0x6900558*, lpNumberOfBytesWritten=0xa04fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0143.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6900558) returned 1 [0143.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68fc950) returned 1 [0143.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f240 [0143.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0143.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1fe00 [0143.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0143.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0143.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0143.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0143.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0143.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55028 [0143.141] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.141] WriteFile (in: hFile=0xd90, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xa04fb90, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0xa04fb90*=0x11a, lpOverlapped=0x0) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fe00) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f240) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0143.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4380) returned 1 [0143.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0c18 [0143.190] wcscpy (in: _Dest=0x66d0c18, _Source="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx" [0143.190] wcscat (in: _Dest=0x66d0c18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx.ac3a86" [0143.190] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx.ac3a86", NtPathName=0xa04fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\oU3Ey8q-jRht7Ot.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc4c8 [0143.286] FlushFileBuffers (hFile=0xd90) returned 1 [0143.372] CloseHandle (hObject=0xd90) returned 1 [0143.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ccf0 [0143.373] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.373] wcscat (in: _Dest=0x3d8ccf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.373] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0143.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 Thread: id = 920 os_tid = 0x1398 [0141.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6cc8 [0141.581] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0141.581] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0141.581] wcscat (in: _Dest=0x2fe6cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*" [0141.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0141.581] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0141.583] wcscmp (_String1=".", _String2=".") returned 0 [0141.583] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.583] wcscmp (_String1="..", _String2=".") returned 1 [0141.583] wcscmp (_String1="..", _String2="..") returned 0 [0141.583] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e91a80, ftCreationTime.dwHighDateTime=0x1d2fb32, ftLastAccessTime.dwLowDateTime=0x74e91a80, ftLastAccessTime.dwHighDateTime=0x1d2fb32, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="feasf@efw.com.pst", cAlternateFileName="FEASF@~1.PST")) returned 1 [0141.584] wcscmp (_String1="feasf@efw.com.pst", _String2=".") returned 1 [0141.584] wcscmp (_String1="feasf@efw.com.pst", _String2="..") returned 1 [0141.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb1f8 [0141.584] wcscpy (in: _Dest=0x3edb1f8, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0141.584] wcscat (in: _Dest=0x3edb1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0141.584] wcscat (in: _Dest=0x3edb1f8, _Source="feasf@efw.com.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" [0147.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0147.439] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 1 [0147.439] wcscmp (_String1="Outlook Data File - mail.pst", _String2=".") returned 1 [0147.439] wcscmp (_String1="Outlook Data File - mail.pst", _String2="..") returned 1 [0147.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958538 [0147.439] wcscpy (in: _Dest=0x6958538, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0147.439] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0147.439] wcscat (in: _Dest=0x6958538, _Source="Outlook Data File - mail.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" [0147.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0147.441] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 0 [0147.441] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0147.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0147.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0147.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 Thread: id = 921 os_tid = 0x139c [0141.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\qo4ruvampco5-y.xlsx")) returned 0x20 [0141.584] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx", dwFileAttributes=0x20) returned 1 [0142.971] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\qo4ruvampco5-y.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe1c [0142.971] GetFileSizeEx (in: hFile=0xe1c, lpFileSize=0xb36ff44 | out: lpFileSize=0xb36ff44*=38953) returned 1 [0142.971] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x9825, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.971] ReadFile (in: hFile=0xe1c, lpBuffer=0xb36ff20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb36ff30, lpOverlapped=0x0 | out: lpBuffer=0xb36ff20*, lpNumberOfBytesRead=0xb36ff30*=0x4, lpOverlapped=0x0) returned 1 [0142.972] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0142.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0142.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0142.973] NtQuerySystemTime (in: CurrentTime=0xb36feb8 | out: CurrentTime=0xb36feb8*=132482710516404000) returned 0x0 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x587dabcb [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x781929ee [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x46b379a8 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x7eb4dafd [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x3486d57a [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x39a77366 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x782bfa59 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x65dcbc40 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4c7dc689 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x35f88259 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x5877044d [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x20b135b3 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4f53da0 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x14ea25dc [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4e84fd28 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4dfe6586 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0xd075b74 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x19875e8 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x1501ed8e [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x1330c71f [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x3a5872d2 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x2459c124 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x58589a1a [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4ec05a8b [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x2d96e541 [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x47f2cc7e [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x7c6b88ce [0142.973] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x5107ed99 [0142.974] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x1f4e5883 [0142.974] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x4a374168 [0142.974] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x68d0931 [0142.974] RtlRandomEx (in: Seed=0xb36feb0 | out: Seed=0xb36feb0) returned 0x1bdd31de [0142.981] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.981] ReadFile (in: hFile=0xe1c, lpBuffer=0x6904160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb36feb8, lpOverlapped=0x0 | out: lpBuffer=0x6904160*, lpNumberOfBytesRead=0xb36feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.982] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe870 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ba0 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0142.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6907d68 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0142.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0142.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0142.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0142.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0142.983] WriteFile (in: hFile=0xe1c, lpBuffer=0x6907d68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb36feb8, lpOverlapped=0x0 | out: lpBuffer=0x6907d68*, lpNumberOfBytesWritten=0xb36feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6907d68) returned 1 [0143.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6904160) returned 1 [0143.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f1c0 [0143.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0143.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1fd80 [0143.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0143.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cc88 [0143.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cc88) returned 1 [0143.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0143.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0143.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54810 [0143.145] SetFilePointerEx (in: hFile=0xe1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.145] WriteFile (in: hFile=0xe1c, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb36ff38, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xb36ff38*=0x118, lpOverlapped=0x0) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fd80) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f1c0) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0143.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0143.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0ba0 [0143.193] wcscpy (in: _Dest=0x66d0ba0, _Source="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx" [0143.193] wcscat (in: _Dest=0x66d0ba0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx.ac3a86" [0143.193] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx.ac3a86", NtPathName=0xb36feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\qO4ruVaMpCO5-Y.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0143.290] FlushFileBuffers (hFile=0xe1c) returned 1 [0143.374] CloseHandle (hObject=0xe1c) returned 1 [0143.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d238 [0143.374] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.374] wcscat (in: _Dest=0x3d8d238, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.375] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 [0143.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 922 os_tid = 0x13a0 [0141.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx" (normalized: "c:\\users\\eebsym5\\documents\\tyw80ydubuo.pptx")) returned 0x20 [0141.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx", dwFileAttributes=0x20) returned 1 [0142.983] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx" (normalized: "c:\\users\\eebsym5\\documents\\tyw80ydubuo.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe68 [0142.983] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0xb43f9ec | out: lpFileSize=0xb43f9ec*=12056) returned 1 [0142.983] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x2f14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.983] ReadFile (in: hFile=0xe68, lpBuffer=0xb43f9c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb43f9d8, lpOverlapped=0x0 | out: lpBuffer=0xb43f9c8*, lpNumberOfBytesRead=0xb43f9d8*=0x4, lpOverlapped=0x0) returned 1 [0142.985] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0142.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0142.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0142.985] NtQuerySystemTime (in: CurrentTime=0xb43f960 | out: CurrentTime=0xb43f960*=132482710516560000) returned 0x0 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x2de23c66 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0xd67ecea [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x110dffb4 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x2bc6cbc [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x21ad56b5 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x1670abe9 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x1f280a17 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x9588fcc [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0xcc1499d [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x57c5e36a [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x7239e28f [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x45e346a [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x1673d702 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x57e1b3b3 [0142.985] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x4729eb71 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x3969d655 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x5e33e8e6 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x28f19a7d [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x40c7c061 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x460816a8 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x4e675ae6 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x140b38ce [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x5ab9e2d9 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x79167862 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0xf234037 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x77ee11a5 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x6047fada [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x6deecc57 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x106b2a6a [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x1a29a421 [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x87d7f5d [0142.986] RtlRandomEx (in: Seed=0xb43f958 | out: Seed=0xb43f958) returned 0x1384608f [0142.999] ReadFile (in: hFile=0xe68, lpBuffer=0x690bce8, nNumberOfBytesToRead=0x2f18, lpNumberOfBytesRead=0xb43f954, lpOverlapped=0x0 | out: lpBuffer=0x690bce8*, lpNumberOfBytesRead=0xb43f954*=0x2f18, lpOverlapped=0x0) returned 1 [0142.999] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.999] WriteFile (in: hFile=0xe68, lpBuffer=0x690f8f0*, nNumberOfBytesToWrite=0x2f18, lpNumberOfBytesWritten=0xb43f958, lpOverlapped=0x0 | out: lpBuffer=0x690f8f0*, lpNumberOfBytesWritten=0xb43f958*=0x2f18, lpOverlapped=0x0) returned 1 [0143.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cc88 [0143.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6d0 [0143.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0143.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690f8f0) returned 1 [0143.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690bce8) returned 1 [0143.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0143.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0143.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19b98 [0143.147] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.147] WriteFile (in: hFile=0xe68, lpBuffer=0x3d554c8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xb43f9e0, lpOverlapped=0x0 | out: lpBuffer=0x3d554c8*, lpNumberOfBytesWritten=0xb43f9e0*=0x112, lpOverlapped=0x0) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19bd0) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cc88) returned 1 [0143.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0143.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0143.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0143.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x364930 [0143.195] wcscpy (in: _Dest=0x364930, _Source="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx" [0143.195] wcscat (in: _Dest=0x364930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx.ac3a86" [0143.195] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx.ac3a86", NtPathName=0xb43f958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Tyw80yDUbuO.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59510 [0143.347] FlushFileBuffers (hFile=0xe68) returned 1 [0143.362] CloseHandle (hObject=0xe68) returned 1 [0143.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e008 [0143.363] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.363] wcscat (in: _Dest=0x3d8e008, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 [0143.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 923 os_tid = 0x13a4 [0141.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx" (normalized: "c:\\users\\eebsym5\\documents\\u2kj4vcnbe-.docx")) returned 0x20 [0141.586] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx", dwFileAttributes=0x20) returned 1 [0143.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx" (normalized: "c:\\users\\eebsym5\\documents\\u2kj4vcnbe-.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x938 [0143.000] GetFileSizeEx (in: hFile=0x938, lpFileSize=0xb27fdbc | out: lpFileSize=0xb27fdbc*=54204) returned 1 [0143.000] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0xd3b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.000] ReadFile (in: hFile=0x938, lpBuffer=0xb27fd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb27fda8, lpOverlapped=0x0 | out: lpBuffer=0xb27fd98*, lpNumberOfBytesRead=0xb27fda8*=0x4, lpOverlapped=0x0) returned 1 [0143.002] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0143.002] NtQuerySystemTime (in: CurrentTime=0xb27fd30 | out: CurrentTime=0xb27fd30*=132482710516716000) returned 0x0 [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x6f7b4ca6 [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x6d9bfaf9 [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x47a1b24d [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x4553948 [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x2e2af17f [0143.002] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x537c7ecc [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x50c11d5e [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x68693765 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x95195ba [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x7b5ca39b [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0xd1bd22a [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x2912756e [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x3125b613 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x2b4f381c [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x7b837e5a [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x3564c113 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x136e67ea [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x223cb14d [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x382a4204 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x671158da [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x1569b208 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x73a5a2f [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x504307d9 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x6a3f0694 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x4e052c29 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x6a9c22bc [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x17bb8855 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x4632ef68 [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x1671a56a [0143.003] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x5e87fb65 [0143.004] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x7921810e [0143.004] RtlRandomEx (in: Seed=0xb27fd28 | out: Seed=0xb27fd28) returned 0x3af05c62 [0143.012] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.012] ReadFile (in: hFile=0x938, lpBuffer=0x69134f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb27fd30, lpOverlapped=0x0 | out: lpBuffer=0x69134f8*, lpNumberOfBytesRead=0xb27fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0143.012] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe900 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0c18 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6917100 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0143.013] WriteFile (in: hFile=0x938, lpBuffer=0x6917100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb27fd30, lpOverlapped=0x0 | out: lpBuffer=0x6917100*, lpNumberOfBytesWritten=0xb27fd30*=0x3c00, lpOverlapped=0x0) returned 1 [0143.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6917100) returned 1 [0143.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69134f8) returned 1 [0143.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19c08 [0143.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0143.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19c40 [0143.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0143.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0143.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0143.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0143.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0143.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d555f0 [0143.150] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.150] WriteFile (in: hFile=0x938, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xb27fdb0, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0xb27fdb0*=0x112, lpOverlapped=0x0) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c40) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c08) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0143.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x364850 [0143.196] wcscpy (in: _Dest=0x364850, _Source="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx") returned="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx" [0143.196] wcscat (in: _Dest=0x364850, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx.ac3a86" [0143.196] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx.ac3a86", NtPathName=0xb27fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\u2Kj4vcnbe-.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a368 [0143.331] FlushFileBuffers (hFile=0x938) returned 1 [0143.348] CloseHandle (hObject=0x938) returned 1 [0143.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b490 [0143.349] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.350] wcscat (in: _Dest=0x3d8b490, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.350] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 [0143.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 924 os_tid = 0x13a8 [0141.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv" (normalized: "c:\\users\\eebsym5\\documents\\vlywmbwdgpzxz.csv")) returned 0x20 [0141.586] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv", dwFileAttributes=0x20) returned 1 [0143.014] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv" (normalized: "c:\\users\\eebsym5\\documents\\vlywmbwdgpzxz.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe64 [0143.014] GetFileSizeEx (in: hFile=0xe64, lpFileSize=0x81ffd54 | out: lpFileSize=0x81ffd54*=40029) returned 1 [0143.014] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x9c59, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.014] ReadFile (in: hFile=0xe64, lpBuffer=0x81ffd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81ffd40, lpOverlapped=0x0 | out: lpBuffer=0x81ffd30*, lpNumberOfBytesRead=0x81ffd40*=0x4, lpOverlapped=0x0) returned 1 [0143.016] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0143.016] NtQuerySystemTime (in: CurrentTime=0x81ffcc8 | out: CurrentTime=0x81ffcc8*=132482710516872000) returned 0x0 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x3a2e4d7 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x1058e7d [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x256063db [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x1c328f6e [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x62579050 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x71f478e8 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x289d49be [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x187282d9 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x2b729caf [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x45dd3de8 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x2530080b [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x1ae0bf21 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x37ef3464 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x18e1305d [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x71b06b36 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x716def97 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x5a4864e3 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x60506b62 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x173423d4 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x74a91e81 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x1974e2ea [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x2adea43c [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x4f393231 [0143.016] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x65c7ecf7 [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x40fb04cf [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x21cfe705 [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x5ec8179c [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x465dc828 [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x40c2e516 [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x55ee56be [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x276e063e [0143.017] RtlRandomEx (in: Seed=0x81ffcc0 | out: Seed=0x81ffcc0) returned 0x32ff5d3d [0143.026] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.026] ReadFile (in: hFile=0xe64, lpBuffer=0x691ad08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x81ffcc8, lpOverlapped=0x0 | out: lpBuffer=0x691ad08*, lpNumberOfBytesRead=0x81ffcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.027] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe900 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0c18 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0143.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x691e910 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0143.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0143.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 [0143.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0143.027] WriteFile (in: hFile=0xe64, lpBuffer=0x691e910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x81ffcc8, lpOverlapped=0x0 | out: lpBuffer=0x691e910*, lpNumberOfBytesWritten=0x81ffcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691e910) returned 1 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691ad08) returned 1 [0143.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19c78 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0143.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19cb0 [0143.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0143.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0143.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0143.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d55718 [0143.153] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.154] WriteFile (in: hFile=0xe64, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x81ffd48, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x81ffd48*=0x114, lpOverlapped=0x0) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c78) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0143.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5878 [0143.198] wcscpy (in: _Dest=0x66e5878, _Source="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv") returned="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv" [0143.198] wcscat (in: _Dest=0x66e5878, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv.ac3a86" [0143.198] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv.ac3a86", NtPathName=0x81ffcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\VlyWMbwDgpZXZ.csv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a148 [0143.334] FlushFileBuffers (hFile=0xe64) returned 1 [0143.350] CloseHandle (hObject=0xe64) returned 1 [0143.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b490 [0143.351] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.351] wcscat (in: _Dest=0x3d8b490, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.351] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 [0143.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 Thread: id = 925 os_tid = 0x13ac [0141.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp" (normalized: "c:\\users\\eebsym5\\documents\\vlztbu1xcb0hidx_v.odp")) returned 0x20 [0141.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp", dwFileAttributes=0x20) returned 1 [0143.028] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp" (normalized: "c:\\users\\eebsym5\\documents\\vlztbu1xcb0hidx_v.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe78 [0143.028] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0xb2cf774 | out: lpFileSize=0xb2cf774*=41311) returned 1 [0143.028] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0xa15b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.028] ReadFile (in: hFile=0xe78, lpBuffer=0xb2cf750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb2cf760, lpOverlapped=0x0 | out: lpBuffer=0xb2cf750*, lpNumberOfBytesRead=0xb2cf760*=0x4, lpOverlapped=0x0) returned 1 [0143.030] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.030] NtQuerySystemTime (in: CurrentTime=0xb2cf6e8 | out: CurrentTime=0xb2cf6e8*=132482710516872000) returned 0x0 [0143.030] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x471ea04 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x41c7e058 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x34692fc0 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x3e8be8a5 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x29907eff [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x5a637258 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x13d711d0 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x2c52cab0 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x3e9e27f7 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x7d0139ee [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x39690abc [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x6452716 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x44e0fa0 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x76d2aa34 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x3c0febdc [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x10ca3246 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x292154a0 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x769d3e83 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x18e1305d [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x40c2e516 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x76922c01 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x35c80b4c [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x3201f8b3 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x2f196bc4 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x7c587385 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x60599f8a [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x6c025e4c [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x7ccf7f63 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0xa4e16e9 [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x12aeea2c [0143.031] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x10514fb7 [0143.032] RtlRandomEx (in: Seed=0xb2cf6e0 | out: Seed=0xb2cf6e0) returned 0x1cb3be02 [0143.041] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.041] ReadFile (in: hFile=0xe78, lpBuffer=0x6922518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb2cf6e8, lpOverlapped=0x0 | out: lpBuffer=0x6922518*, lpNumberOfBytesRead=0xb2cf6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.041] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe900 [0143.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0c18 [0143.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0143.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0143.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6926120 [0143.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0143.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0143.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 [0143.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0143.042] WriteFile (in: hFile=0xe78, lpBuffer=0x6926120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb2cf6e8, lpOverlapped=0x0 | out: lpBuffer=0x6926120*, lpNumberOfBytesWritten=0xb2cf6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6926120) returned 1 [0143.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6922518) returned 1 [0143.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f7c0 [0143.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0143.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f200 [0143.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0143.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0143.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0143.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0143.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0143.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d54dd8 [0143.157] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.158] WriteFile (in: hFile=0xe78, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xb2cf768, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xb2cf768*=0x11c, lpOverlapped=0x0) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f200) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f7c0) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cc8) returned 1 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0143.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0143.199] wcscpy (in: _Dest=0x66d0b28, _Source="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp") returned="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp" [0143.199] wcscat (in: _Dest=0x66d0b28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp.ac3a86" [0143.199] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp.ac3a86", NtPathName=0xb2cf6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\vLztBu1XcB0hiDx_V.odp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dca68 [0143.337] FlushFileBuffers (hFile=0xe78) returned 1 [0143.352] CloseHandle (hObject=0xe78) returned 1 [0143.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c4d0 [0143.354] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.354] wcscat (in: _Dest=0x3d8c4d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.354] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 [0143.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b580) returned 1 Thread: id = 926 os_tid = 0x13b0 [0141.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx" (normalized: "c:\\users\\eebsym5\\documents\\vxkr4fykimrxpvjgu-z.pptx")) returned 0x20 [0141.588] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx", dwFileAttributes=0x20) returned 1 [0143.042] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx" (normalized: "c:\\users\\eebsym5\\documents\\vxkr4fykimrxpvjgu-z.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe74 [0143.042] GetFileSizeEx (in: hFile=0xe74, lpFileSize=0xbd6fbf4 | out: lpFileSize=0xbd6fbf4*=6248) returned 1 [0143.042] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x1864, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.043] ReadFile (in: hFile=0xe74, lpBuffer=0xbd6fbd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd6fbe0, lpOverlapped=0x0 | out: lpBuffer=0xbd6fbd0*, lpNumberOfBytesRead=0xbd6fbe0*=0x4, lpOverlapped=0x0) returned 1 [0143.044] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0143.044] NtQuerySystemTime (in: CurrentTime=0xbd6fb68 | out: CurrentTime=0xbd6fb68*=132482710517028000) returned 0x0 [0143.044] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x76a1764f [0143.044] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x18c88b2c [0143.044] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x629f6ef8 [0143.044] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x17e08683 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x41cdc4d [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x19c55652 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x4abe5319 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x7d126b59 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x2c02c383 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x30366bf5 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x17360145 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x46e16a43 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x5505fa50 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x358d5670 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x675d3142 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x54d069c6 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x1c78206a [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x4268704 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x76a9f477 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0xe3b0cf7 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x37f223b7 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x707d1a70 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x35e9ecf6 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x73a31caf [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x4e0a68a [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x672d0b38 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x22f1fb10 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x45b26528 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x37ef3464 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x45b26528 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x1c2c6883 [0143.045] RtlRandomEx (in: Seed=0xbd6fb60 | out: Seed=0xbd6fb60) returned 0x45878c68 [0143.054] ReadFile (in: hFile=0xe74, lpBuffer=0x6929d28, nNumberOfBytesToRead=0x1868, lpNumberOfBytesRead=0xbd6fb5c, lpOverlapped=0x0 | out: lpBuffer=0x6929d28*, lpNumberOfBytesRead=0xbd6fb5c*=0x1868, lpOverlapped=0x0) returned 1 [0143.054] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.054] WriteFile (in: hFile=0xe74, lpBuffer=0x692d930*, nNumberOfBytesToWrite=0x1868, lpNumberOfBytesWritten=0xbd6fb60, lpOverlapped=0x0 | out: lpBuffer=0x692d930*, lpNumberOfBytesWritten=0xbd6fb60*=0x1868, lpOverlapped=0x0) returned 1 [0143.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0143.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0143.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0143.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x692d930) returned 1 [0143.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6929d28) returned 1 [0143.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 [0143.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0143.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66fe900 [0143.160] SetFilePointerEx (in: hFile=0xe74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.160] WriteFile (in: hFile=0xe74, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xbd6fbe8, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0xbd6fbe8*=0x122, lpOverlapped=0x0) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe990) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0143.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0143.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0143.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x2fcac88 [0143.202] wcscpy (in: _Dest=0x2fcac88, _Source="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx" [0143.202] wcscat (in: _Dest=0x2fcac88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx.ac3a86" [0143.202] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx.ac3a86", NtPathName=0xbd6fb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\VxKR4fYKimRxPVjgu-z.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30810 [0143.341] FlushFileBuffers (hFile=0xe74) returned 1 [0143.353] CloseHandle (hObject=0xe74) returned 1 [0143.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e480 [0143.360] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.360] wcscat (in: _Dest=0x3d8e480, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.360] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 [0143.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 927 os_tid = 0x13b4 [0141.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp" (normalized: "c:\\users\\eebsym5\\documents\\wjrhdtfm5lyb89q.odp")) returned 0x20 [0141.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp", dwFileAttributes=0x20) returned 1 [0143.054] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp" (normalized: "c:\\users\\eebsym5\\documents\\wjrhdtfm5lyb89q.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe70 [0143.055] GetFileSizeEx (in: hFile=0xe70, lpFileSize=0xa77f774 | out: lpFileSize=0xa77f774*=5165) returned 1 [0143.055] SetFilePointerEx (in: hFile=0xe70, liDistanceToMove=0x1429, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.055] ReadFile (in: hFile=0xe70, lpBuffer=0xa77f750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa77f760, lpOverlapped=0x0 | out: lpBuffer=0xa77f750*, lpNumberOfBytesRead=0xa77f760*=0x4, lpOverlapped=0x0) returned 1 [0143.056] SetFilePointerEx (in: hFile=0xe70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0143.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0143.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0143.057] NtQuerySystemTime (in: CurrentTime=0xa77f6e8 | out: CurrentTime=0xa77f6e8*=132482710517184000) returned 0x0 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x51c876d5 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0xafc589f [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x46e16a43 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x280ccf55 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x28344a0f [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x622dbf5d [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x746e0dc5 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x5b497276 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x5dd027ea [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x29b8e7a1 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x8f4e23b [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x39b2c802 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0xb3205b1 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x3eea6c66 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x28a5ae25 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x5822e073 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x289a1a9b [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x7aa632e8 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x720a4a3d [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x55b9620d [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x481d6669 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x78f71acd [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x1f4ebcc6 [0143.057] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x46620288 [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0xa83dcbf [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x612c8515 [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x76171ea [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x4c59ecf2 [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x14d5f36b [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x3b728911 [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x5ab4894a [0143.058] RtlRandomEx (in: Seed=0xa77f6e0 | out: Seed=0xa77f6e0) returned 0x1974e2ea [0143.068] ReadFile (in: hFile=0xe70, lpBuffer=0x6931538, nNumberOfBytesToRead=0x142d, lpNumberOfBytesRead=0xa77f6dc, lpOverlapped=0x0 | out: lpBuffer=0x6931538*, lpNumberOfBytesRead=0xa77f6dc*=0x142d, lpOverlapped=0x0) returned 1 [0143.068] SetFilePointerEx (in: hFile=0xe70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.068] WriteFile (in: hFile=0xe70, lpBuffer=0x6935140*, nNumberOfBytesToWrite=0x142d, lpNumberOfBytesWritten=0xa77f6e0, lpOverlapped=0x0 | out: lpBuffer=0x6935140*, lpNumberOfBytesWritten=0xa77f6e0*=0x142d, lpOverlapped=0x0) returned 1 [0143.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0143.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0143.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0143.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6935140) returned 1 [0143.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6931538) returned 1 [0143.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0143.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe948) returned 1 [0143.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f900 [0143.167] SetFilePointerEx (in: hFile=0xe70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.167] WriteFile (in: hFile=0xe70, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xa77f768, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0xa77f768*=0x118, lpOverlapped=0x0) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ef40) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f900) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0143.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0143.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0d08 [0143.203] wcscpy (in: _Dest=0x66d0d08, _Source="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp") returned="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp" [0143.203] wcscat (in: _Dest=0x66d0d08, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp.ac3a86" [0143.203] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp.ac3a86", NtPathName=0xa77f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\WjrhDtfM5lyb89Q.odp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0143.339] FlushFileBuffers (hFile=0xe70) returned 1 [0143.353] CloseHandle (hObject=0xe70) returned 1 [0143.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c4d0 [0143.356] wcscpy (in: _Dest=0x3d8c4d0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0143.356] wcscat (in: _Dest=0x3d8c4d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" [0143.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ac3a86-readme.txt")) returned 0x20 [0143.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c4d0) returned 1 [0143.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 Thread: id = 928 os_tid = 0x13b8 [0141.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8c670 [0141.589] wcscpy (in: _Dest=0x3d8c670, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0141.589] wcscat (in: _Dest=0x3d8c670, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\" [0141.589] wcscat (in: _Dest=0x3d8c670, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*" [0141.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0141.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0141.590] wcscmp (_String1=".", _String2=".") returned 0 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.590] wcscmp (_String1="..", _String2=".") returned 1 [0141.590] wcscmp (_String1="..", _String2="..") returned 0 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="ACROBA~1.EXE")) returned 1 [0141.590] wcscmp (_String1="AcrobatUpdater.exe", _String2=".") returned 1 [0141.590] wcscmp (_String1="AcrobatUpdater.exe", _String2="..") returned 1 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0141.590] wcscmp (_String1="AdobeARM.exe", _String2=".") returned 1 [0141.590] wcscmp (_String1="AdobeARM.exe", _String2="..") returned 1 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="ADOBEE~1.DLL")) returned 1 [0141.590] wcscmp (_String1="AdobeExtractFiles.dll", _String2=".") returned 1 [0141.590] wcscmp (_String1="AdobeExtractFiles.dll", _String2="..") returned 1 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0141.590] wcscmp (_String1="ReaderUpdater.exe", _String2=".") returned 1 [0141.590] wcscmp (_String1="ReaderUpdater.exe", _String2="..") returned 1 [0141.590] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 0 [0141.591] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c670) returned 1 [0141.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 929 os_tid = 0x13bc [0141.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20 [0143.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0143.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.069] GetLastError () returned 0x5 [0143.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0143.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 930 os_tid = 0x13c0 [0141.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20 [0142.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0142.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.038] GetLastError () returned 0x5 [0142.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0142.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 931 os_tid = 0x13c4 [0141.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20 [0143.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0143.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.405] GetLastError () returned 0x5 [0143.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0143.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 932 os_tid = 0x13c8 [0141.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20 [0143.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0143.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.428] GetLastError () returned 0x5 [0143.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0143.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 933 os_tid = 0x13cc [0141.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20 [0143.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0143.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.403] GetLastError () returned 0x5 [0143.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0143.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 934 os_tid = 0x13d0 [0141.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20 [0143.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0143.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.401] GetLastError () returned 0x5 [0143.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0143.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 935 os_tid = 0x13d4 [0141.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20 [0143.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0143.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.426] GetLastError () returned 0x5 [0143.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0143.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 936 os_tid = 0x13d8 [0141.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20 [0143.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0143.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.421] GetLastError () returned 0x5 [0143.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0143.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 937 os_tid = 0x13dc [0141.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20 [0143.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0143.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.419] GetLastError () returned 0x5 [0143.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0143.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 938 os_tid = 0x13e0 [0141.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20 [0143.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0143.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.410] GetLastError () returned 0x5 [0143.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0143.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 939 os_tid = 0x13e4 [0141.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20 [0143.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0143.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.399] GetLastError () returned 0x5 [0143.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0143.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 940 os_tid = 0x13e8 [0141.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0143.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0143.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.398] GetLastError () returned 0x5 [0143.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0143.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 941 os_tid = 0x13ec [0141.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20 [0143.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0143.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.408] GetLastError () returned 0x5 [0143.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0143.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 942 os_tid = 0x13f0 [0141.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20 [0143.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0143.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.396] GetLastError () returned 0x5 [0143.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0143.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 943 os_tid = 0x13f4 [0141.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20 [0143.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0143.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.395] GetLastError () returned 0x5 [0143.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0143.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 944 os_tid = 0x13f8 [0141.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d5d0 [0141.606] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0141.606] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0141.606] wcscat (in: _Dest=0x3e0d5d0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*" [0141.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0141.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0141.609] wcscmp (_String1=".", _String2=".") returned 0 [0141.609] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.609] wcscmp (_String1="..", _String2=".") returned 1 [0141.609] wcscmp (_String1="..", _String2="..") returned 0 [0141.609] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0141.609] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0141.609] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0141.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3333a8 [0141.609] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0141.609] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0141.609] wcscat (in: _Dest=0x3333a8, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" [0144.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0144.003] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0144.004] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 945 os_tid = 0x13fc [0141.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e750 [0141.610] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0141.610] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0141.610] wcscat (in: _Dest=0x3e0e750, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*" [0141.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0141.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0141.610] wcscmp (_String1=".", _String2=".") returned 0 [0141.610] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.610] wcscmp (_String1="..", _String2=".") returned 1 [0141.610] wcscmp (_String1="..", _String2="..") returned 0 [0141.610] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0141.610] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0141.610] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0141.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7cd0 [0141.611] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0141.611] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0141.611] wcscat (in: _Dest=0x2ff7cd0, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" [0144.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0144.005] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0144.005] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0144.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0144.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 [0144.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 946 os_tid = 0x1400 [0141.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20 [0142.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0142.487] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.488] GetLastError () returned 0x5 [0142.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0142.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 947 os_tid = 0x1404 [0141.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea83b8 [0141.612] wcscpy (in: _Dest=0x3ea83b8, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0141.612] wcscat (in: _Dest=0x3ea83b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0141.612] wcscat (in: _Dest=0x3ea83b8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0141.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0141.612] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0141.613] wcscmp (_String1=".", _String2=".") returned 0 [0141.613] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.613] wcscmp (_String1="..", _String2=".") returned 1 [0141.613] wcscmp (_String1="..", _String2="..") returned 0 [0141.613] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.613] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.613] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.613] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.613] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0141.613] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0141.613] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.613] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea83b8) returned 1 [0141.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 948 os_tid = 0x1408 [0141.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56668 [0141.614] wcscpy (in: _Dest=0x3d56668, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0141.615] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0141.615] wcscat (in: _Dest=0x3d56668, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0141.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0141.615] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0141.615] wcscmp (_String1=".", _String2=".") returned 0 [0141.615] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.615] wcscmp (_String1="..", _String2=".") returned 1 [0141.615] wcscmp (_String1="..", _String2="..") returned 0 [0141.615] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.615] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0141.615] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0141.615] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.615] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0141.615] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0141.615] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.615] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0141.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0141.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 [0141.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 949 os_tid = 0x140c [0141.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0143.751] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 1 [0144.608] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1104 [0144.608] GetFileSizeEx (in: hFile=0x1104, lpFileSize=0xdd3fb24 | out: lpFileSize=0xdd3fb24*=133) returned 1 [0144.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0144.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0144.608] NtQuerySystemTime (in: CurrentTime=0xdd3fa98 | out: CurrentTime=0xdd3fa98*=132482710532628000) returned 0x0 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x39fb20a8 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x10ffb66c [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x4cdf24c [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x338a3929 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x35e9ecf6 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x7427265d [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x553f4d29 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x464333c9 [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x67208c1b [0144.608] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x6cbd14cd [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x2c52cab0 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x3ba806b2 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x6d0d8f11 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x4d714af6 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x3b3ccfdf [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x487e3117 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x4b0d7d28 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x1effba7a [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x4ee365d2 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x39b45e8c [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0xc3b64b4 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x4b085a32 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x54160243 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x18bdf0a2 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x5220a566 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x3bf8fd42 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x76a9f477 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x715159e3 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x33f5bdf7 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x5dd027ea [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x41e636a8 [0144.609] RtlRandomEx (in: Seed=0xdd3fa90 | out: Seed=0xdd3fa90) returned 0x7b46c769 [0144.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0144.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0144.619] ReadFile (in: hFile=0x1104, lpBuffer=0x684dd28, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xdd3fa8c, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesRead=0xdd3fa8c*=0x85, lpOverlapped=0x0) returned 1 [0144.621] SetFilePointerEx (in: hFile=0x1104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.621] WriteFile (in: hFile=0x1104, lpBuffer=0x6851930*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xdd3fa90, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesWritten=0xdd3fa90*=0x85, lpOverlapped=0x0) returned 1 [0144.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0144.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0144.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0144.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0144.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0144.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5690 [0144.958] SetFilePointerEx (in: hFile=0x1104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.958] WriteFile (in: hFile=0x1104, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdd3fb18, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xdd3fb18*=0x10c, lpOverlapped=0x0) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0144.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0144.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59510 [0144.960] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" [0144.960] wcscat (in: _Dest=0x3d59510, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.ac3a86" [0144.960] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.ac3a86", NtPathName=0xdd3fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32230 [0144.965] FlushFileBuffers (hFile=0x1104) returned 1 [0145.441] CloseHandle (hObject=0x1104) returned 1 [0147.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e096b0 [0147.601] wcscpy (in: _Dest=0x3e096b0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.601] wcscat (in: _Dest=0x3e096b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0xffffffff [0147.601] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1294 [0147.855] WriteFile (in: hFile=0x1294, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdd3faac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdd3faac*=0x8b9, lpOverlapped=0x0) returned 1 [0147.857] CloseHandle (hObject=0x1294) returned 1 [0147.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e096b0) returned 1 [0147.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 Thread: id = 950 os_tid = 0x1410 [0141.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0143.789] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 1 [0144.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x568 [0144.841] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x9b0f9d4 | out: lpFileSize=0x9b0f9d4*=133) returned 1 [0144.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0144.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0144.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0144.841] NtQuerySystemTime (in: CurrentTime=0x9b0f948 | out: CurrentTime=0x9b0f948*=132482710534968000) returned 0x0 [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x4268704 [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x37d9d688 [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x6f857be3 [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x5ff2398a [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x58edc914 [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x4304711b [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x531572d [0144.841] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x1b66a5f [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x4cbf63ec [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x408847e7 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x1b90d213 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x57cce28b [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x35c80b4c [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x75e9dad7 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x7787dc45 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x1bcc92a9 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x172a730a [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x635820d4 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x9bbd750 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x51b99cde [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x724be42e [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x455cb3a8 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x57f15657 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x3a42fd9 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x72f101d1 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x6926867d [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x358d5670 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x2c9a2bee [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x3533159c [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x42de8f44 [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x56f1913e [0144.842] RtlRandomEx (in: Seed=0x9b0f940 | out: Seed=0x9b0f940) returned 0x5946618 [0144.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0144.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6855538 [0144.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6859140 [0144.855] ReadFile (in: hFile=0x568, lpBuffer=0x6855538, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x9b0f93c, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesRead=0x9b0f93c*=0x85, lpOverlapped=0x0) returned 1 [0144.859] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.859] WriteFile (in: hFile=0x568, lpBuffer=0x6859140*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x9b0f940, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesWritten=0x9b0f940*=0x85, lpOverlapped=0x0) returned 1 [0145.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b230 [0145.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0145.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0145.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0145.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0145.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0145.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1fc80 [0145.454] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.454] WriteFile (in: hFile=0x568, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x9b0f9c8, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x9b0f9c8*=0x11c, lpOverlapped=0x0) returned 1 [0147.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0147.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f9c0) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fc80) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0147.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0147.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959410 [0147.653] wcscpy (in: _Dest=0x6959410, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" [0147.653] wcscat (in: _Dest=0x6959410, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.ac3a86" [0147.653] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.ac3a86", NtPathName=0x9b0f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cc08 [0147.845] FlushFileBuffers (hFile=0x568) returned 1 [0147.851] CloseHandle (hObject=0x568) returned 1 [0147.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbdf8 [0147.852] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.852] wcscat (in: _Dest=0x3edbdf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.852] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0x20 [0147.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 [0147.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59730) returned 1 Thread: id = 951 os_tid = 0x1414 [0141.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url")) returned 0x20 [0143.790] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 1 [0144.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x127c [0144.864] GetFileSizeEx (in: hFile=0x127c, lpFileSize=0x9c6fd44 | out: lpFileSize=0x9c6fd44*=133) returned 1 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0144.865] NtQuerySystemTime (in: CurrentTime=0x9c6fcb8 | out: CurrentTime=0x9c6fcb8*=132482710535124000) returned 0x0 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x5291694 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x223a7b6e [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x3c0febdc [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x23d2eb1a [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x60db6e9c [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x79effe6c [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x321d5568 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x3196921c [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x137b730 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x5d70e267 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x1f7b5dea [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x40f2f81c [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x6eea8dc2 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x6b0ddf01 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x3b461db2 [0144.865] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x7d8e424e [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x184f7139 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x3969a835 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x4d8c37a1 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x3bb3d004 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x1b4a8aeb [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x235a6f1b [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x847adbe [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x494e59ff [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x680beff1 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x2ee9a226 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x8090a6c [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x1fa6eee3 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x956f206 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x45d2f998 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x25766c84 [0144.866] RtlRandomEx (in: Seed=0x9c6fcb0 | out: Seed=0x9c6fcb0) returned 0x2287de99 [0144.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0144.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686bd68 [0144.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0144.881] ReadFile (in: hFile=0x127c, lpBuffer=0x686bd68, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x9c6fcac, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesRead=0x9c6fcac*=0x85, lpOverlapped=0x0) returned 1 [0144.883] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.883] WriteFile (in: hFile=0x127c, lpBuffer=0x6864558*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x9c6fcb0, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesWritten=0x9c6fcb0*=0x85, lpOverlapped=0x0) returned 1 [0145.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0145.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0145.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e608e0) returned 1 [0145.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5690 [0145.455] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.455] WriteFile (in: hFile=0x127c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c6fd38, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x9c6fd38*=0x10c, lpOverlapped=0x0) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0147.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f00c0 [0147.655] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" [0147.655] wcscat (in: _Dest=0x66f00c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.ac3a86" [0147.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.ac3a86", NtPathName=0x9c6fcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69594a8 [0147.822] FlushFileBuffers (hFile=0x127c) returned 1 [0147.827] CloseHandle (hObject=0x127c) returned 1 [0147.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e09430 [0147.829] wcscpy (in: _Dest=0x3e09430, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.829] wcscat (in: _Dest=0x3e09430, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.829] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0x20 [0147.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09430) returned 1 [0147.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 Thread: id = 952 os_tid = 0x1418 [0141.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0143.790] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 1 [0144.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x125c [0144.886] GetFileSizeEx (in: hFile=0x125c, lpFileSize=0xdddf7dc | out: lpFileSize=0xdddf7dc*=133) returned 1 [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0144.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.886] NtQuerySystemTime (in: CurrentTime=0xdddf750 | out: CurrentTime=0xdddf750*=132482710535280000) returned 0x0 [0144.887] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0xcf2822d [0144.887] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x7679a1f2 [0144.887] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x67c6ea2b [0144.887] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x340388af [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x6f5d442a [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0xb9dafde [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x4b7b4d56 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x354a817b [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x17e35203 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x127258fd [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x5d495b45 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x42ba7a54 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x2f1bb207 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x48b7b78 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x1f0d554f [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x7c7f744f [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x13fb9624 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x525647f4 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x2547f34 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x18f2b7e9 [0144.933] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x2f2920c3 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x31f27ca8 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x57e2fb56 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x7f8db84b [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x49b00bd4 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x1ca395f8 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x1c50a396 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x67a4d24b [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x78b797cb [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x50cadc22 [0144.934] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x149b2c57 [0144.935] RtlRandomEx (in: Seed=0xdddf748 | out: Seed=0xdddf748) returned 0x231c695b [0144.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0144.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6868160 [0144.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0144.947] ReadFile (in: hFile=0x125c, lpBuffer=0x6868160, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xdddf744, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesRead=0xdddf744*=0x85, lpOverlapped=0x0) returned 1 [0144.953] SetFilePointerEx (in: hFile=0x125c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.953] WriteFile (in: hFile=0x125c, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xdddf748, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0xdddf748*=0x85, lpOverlapped=0x0) returned 1 [0145.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0145.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b708 [0145.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0145.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0145.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0145.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0145.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff170) returned 1 [0145.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19a80 [0145.480] SetFilePointerEx (in: hFile=0x125c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.480] WriteFile (in: hFile=0x125c, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xdddf7d0, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xdddf7d0*=0x10e, lpOverlapped=0x0) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a80) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0147.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee6b8 [0147.657] wcscpy (in: _Dest=0x66ee6b8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" [0147.657] wcscat (in: _Dest=0x66ee6b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.ac3a86" [0147.657] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.ac3a86", NtPathName=0xdddf748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e7f0 [0147.826] FlushFileBuffers (hFile=0x125c) returned 1 [0147.832] CloseHandle (hObject=0x125c) returned 1 [0147.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbe78 [0147.833] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.833] wcscat (in: _Dest=0x3edbe78, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0x20 [0147.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 [0147.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 Thread: id = 953 os_tid = 0x141c [0141.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url")) returned 0x20 [0143.790] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 1 [0144.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f4 [0144.968] GetFileSizeEx (in: hFile=0x11f4, lpFileSize=0xdd9f7d4 | out: lpFileSize=0xdd9f7d4*=133) returned 1 [0144.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0144.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0144.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0144.968] NtQuerySystemTime (in: CurrentTime=0xdd9f748 | out: CurrentTime=0xdd9f748*=132482710536216000) returned 0x0 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x592eecca [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x277bd36b [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x23d7dbe8 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x753de65b [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x114f3933 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x2b30a31f [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0xf06aced [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x519f2ad1 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x25b6482a [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0xfd13a6a [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x790651a2 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x67d55e5c [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x33929911 [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x21639fdf [0144.968] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x36e5c91a [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x29c6347b [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x30366bf5 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x486dfa2b [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0xc75da70 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x54a75df2 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x547901fb [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x72c0e6e8 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x112e50b4 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x52368a8a [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x73b4d03f [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x641dacb7 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x3fc0f76e [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x4a6a09be [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x7ad2896e [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0xd16e1a3 [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x6349e44d [0144.969] RtlRandomEx (in: Seed=0xdd9f740 | out: Seed=0xdd9f740) returned 0x46e99ff [0144.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0144.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0144.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0144.980] ReadFile (in: hFile=0x11f4, lpBuffer=0x684dd28, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xdd9f73c, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesRead=0xdd9f73c*=0x85, lpOverlapped=0x0) returned 1 [0144.984] SetFilePointerEx (in: hFile=0x11f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.984] WriteFile (in: hFile=0x11f4, lpBuffer=0x6851930*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xdd9f740, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesWritten=0xdd9f740*=0x85, lpOverlapped=0x0) returned 1 [0145.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0145.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0145.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0145.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0145.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0145.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0145.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0145.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b140 [0145.487] SetFilePointerEx (in: hFile=0x11f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.488] WriteFile (in: hFile=0x11f4, lpBuffer=0x2f96e8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xdd9f7c8, lpOverlapped=0x0 | out: lpBuffer=0x2f96e8*, lpNumberOfBytesWritten=0xdd9f7c8*=0x100, lpOverlapped=0x0) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0147.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0147.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e35438 [0147.659] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" [0147.659] wcscat (in: _Dest=0x3e35438, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.ac3a86" [0147.659] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.ac3a86", NtPathName=0xdd9f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db748 [0147.831] FlushFileBuffers (hFile=0x11f4) returned 1 [0147.834] CloseHandle (hObject=0x11f4) returned 1 [0147.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbdf8 [0147.836] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.836] wcscat (in: _Dest=0x3edbdf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0x20 [0147.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 [0147.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 954 os_tid = 0x1420 [0141.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0143.789] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 1 [0144.621] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1294 [0144.622] GetFileSizeEx (in: hFile=0x1294, lpFileSize=0xdadfbd4 | out: lpFileSize=0xdadfbd4*=133) returned 1 [0144.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0144.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0144.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0144.622] NtQuerySystemTime (in: CurrentTime=0xdadfb48 | out: CurrentTime=0xdadfb48*=132482710532784000) returned 0x0 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x358e9c95 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x5f11a622 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x4688a0e8 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x4abe5319 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x3fb625cf [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x3e9e27f7 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0xf465b98 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x539811f1 [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x52043b8a [0144.622] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x26c1aa83 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x67602d53 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x20bf90b4 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x41e636a8 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x675d3142 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x520a53ab [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x2984f66b [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x5d28e901 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x5f38fa58 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x42cefd06 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x7ab7e888 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x41a5cd4d [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x4d72354e [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x3a41c494 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x6af5c866 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x5511e937 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x71b8bf77 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x4953654b [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x6bdae19c [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x34cae168 [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x3669366f [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0xdf8403d [0144.623] RtlRandomEx (in: Seed=0xdadfb40 | out: Seed=0xdadfb40) returned 0x50c54c21 [0144.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0144.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0144.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684a120 [0144.635] ReadFile (in: hFile=0x1294, lpBuffer=0x6846518, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xdadfb3c, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesRead=0xdadfb3c*=0x85, lpOverlapped=0x0) returned 1 [0144.838] SetFilePointerEx (in: hFile=0x1294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.838] WriteFile (in: hFile=0x1294, lpBuffer=0x684a120*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xdadfb40, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesWritten=0xdadfb40*=0x85, lpOverlapped=0x0) returned 1 [0145.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0145.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0145.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0145.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0145.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0145.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0145.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0145.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19b60 [0145.453] SetFilePointerEx (in: hFile=0x1294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.453] WriteFile (in: hFile=0x1294, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xdadfbc8, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xdadfbc8*=0x10e, lpOverlapped=0x0) returned 1 [0147.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b60) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0147.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0147.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee520 [0147.651] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" [0147.651] wcscat (in: _Dest=0x66ee520, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.ac3a86" [0147.651] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.ac3a86", NtPathName=0xdadfb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d2b0 [0147.842] FlushFileBuffers (hFile=0x1294) returned 1 [0147.848] CloseHandle (hObject=0x1294) returned 1 [0147.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbdf8 [0147.849] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0147.849] wcscat (in: _Dest=0x3edbdf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" [0147.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\ac3a86-readme.txt")) returned 0x20 [0147.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 [0147.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 Thread: id = 955 os_tid = 0x1424 [0141.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d760 [0141.622] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0141.622] wcscat (in: _Dest=0x3f1d760, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0141.622] wcscat (in: _Dest=0x3f1d760, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*" [0141.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0141.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0141.622] wcscmp (_String1=".", _String2=".") returned 0 [0141.622] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.622] wcscmp (_String1="..", _String2=".") returned 1 [0141.622] wcscmp (_String1="..", _String2="..") returned 0 [0141.622] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0141.622] wcscmp (_String1="TTS20", _String2=".") returned 1 [0141.623] wcscmp (_String1="TTS20", _String2="..") returned 1 [0141.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda378 [0141.623] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0141.623] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0141.623] wcscat (in: _Dest=0x3eda378, _Source="TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0144.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0144.008] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0144.008] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0144.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0144.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0144.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 Thread: id = 956 os_tid = 0x1428 [0141.623] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0146.624] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.625] GetLastError () returned 0x5 [0146.625] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 Thread: id = 957 os_tid = 0x142c [0141.624] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0146.622] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.623] GetLastError () returned 0x5 [0146.623] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f4f0) returned 1 Thread: id = 958 os_tid = 0x1430 [0141.624] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0146.590] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.590] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.590] GetLastError () returned 0x5 [0146.590] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 Thread: id = 959 os_tid = 0x1434 [0141.626] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0146.621] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.621] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.621] GetLastError () returned 0x5 [0146.621] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 960 os_tid = 0x1438 [0141.703] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0146.619] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.619] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.619] GetLastError () returned 0x5 [0146.619] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 Thread: id = 961 os_tid = 0x143c [0141.704] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0146.591] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.592] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.592] GetLastError () returned 0x5 [0146.592] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 962 os_tid = 0x1440 [0141.704] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0146.583] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.583] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.583] GetLastError () returned 0x5 [0146.584] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 Thread: id = 963 os_tid = 0x1444 [0141.705] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0146.617] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.618] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.618] GetLastError () returned 0x5 [0146.618] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 964 os_tid = 0x1448 [0141.725] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0146.593] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.593] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.593] GetLastError () returned 0x5 [0146.593] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 Thread: id = 965 os_tid = 0x144c [0141.725] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0146.597] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.597] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.597] GetLastError () returned 0x5 [0146.597] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 Thread: id = 966 os_tid = 0x1450 [0141.726] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0146.596] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.596] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.596] GetLastError () returned 0x5 [0146.596] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 Thread: id = 967 os_tid = 0x1454 [0141.727] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0146.588] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.588] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.588] GetLastError () returned 0x5 [0146.588] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 968 os_tid = 0x1458 [0141.727] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0146.600] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.600] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.600] GetLastError () returned 0x5 [0146.600] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 Thread: id = 969 os_tid = 0x145c [0141.728] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0146.598] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.598] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.599] GetLastError () returned 0x5 [0146.599] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10f70) returned 1 Thread: id = 970 os_tid = 0x1460 [0141.728] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl")) returned 0x2022 [0146.581] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0146.581] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.582] GetLastError () returned 0x5 [0146.582] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0146.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 971 os_tid = 0x1464 [0141.728] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url")) returned 0x20 [0141.729] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0141.729] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.729] GetLastError () returned 0x5 [0141.729] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0141.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 Thread: id = 972 os_tid = 0x1468 [0141.730] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn")) returned 0x2022 [0141.730] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0141.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.441] GetLastError () returned 0x5 [0143.441] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0143.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 973 os_tid = 0x146c [0141.731] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0141.731] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0141.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.791] GetLastError () returned 0x5 [0143.791] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0143.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0510) returned 1 Thread: id = 974 os_tid = 0x1470 [0141.731] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0143.443] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0143.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.543] GetLastError () returned 0x5 [0145.544] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0145.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 Thread: id = 975 os_tid = 0x1474 [0141.732] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0143.444] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0143.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.333] GetLastError () returned 0x5 [0144.333] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0144.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 Thread: id = 976 os_tid = 0x1478 [0141.732] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0146.349] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0146.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.350] GetLastError () returned 0x5 [0146.350] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0146.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 977 os_tid = 0x147c [0141.733] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0145.093] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0145.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.174] GetLastError () returned 0x5 [0146.174] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0146.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 Thread: id = 978 os_tid = 0x1480 [0141.733] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0146.567] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.567] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.568] GetLastError () returned 0x5 [0146.568] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0600) returned 1 Thread: id = 979 os_tid = 0x1484 [0141.734] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0146.580] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.580] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.580] GetLastError () returned 0x5 [0146.580] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda478) returned 1 Thread: id = 980 os_tid = 0x1488 [0141.734] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0146.628] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.628] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.628] GetLastError () returned 0x5 [0146.628] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 Thread: id = 981 os_tid = 0x148c [0141.747] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0146.629] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.629] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.630] GetLastError () returned 0x5 [0146.630] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 Thread: id = 982 os_tid = 0x1490 [0141.748] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0146.631] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.631] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.631] GetLastError () returned 0x5 [0146.632] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5f8) returned 1 Thread: id = 983 os_tid = 0x1494 [0141.749] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0146.633] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.633] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.633] GetLastError () returned 0x5 [0146.633] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 984 os_tid = 0x1498 [0141.750] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0146.634] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.635] GetLastError () returned 0x5 [0146.635] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 Thread: id = 985 os_tid = 0x149c [0141.750] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0146.636] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.636] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.636] GetLastError () returned 0x5 [0146.636] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f273e8) returned 1 Thread: id = 986 os_tid = 0x14a0 [0141.751] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0146.637] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.638] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.638] GetLastError () returned 0x5 [0146.638] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 Thread: id = 987 os_tid = 0x14a4 [0141.751] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0146.594] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.594] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.595] GetLastError () returned 0x5 [0146.595] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 Thread: id = 988 os_tid = 0x14a8 [0141.752] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0146.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.639] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.639] GetLastError () returned 0x5 [0146.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6f8) returned 1 Thread: id = 989 os_tid = 0x14ac [0141.752] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0146.641] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.641] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.641] GetLastError () returned 0x5 [0146.641] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 Thread: id = 990 os_tid = 0x14b0 [0142.701] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0146.626] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.626] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.626] GetLastError () returned 0x5 [0146.626] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 Thread: id = 991 os_tid = 0x14b4 [0142.701] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0143.854] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0143.854] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.854] GetLastError () returned 0x5 [0143.854] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0143.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 992 os_tid = 0x14b8 [0142.704] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0144.245] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0144.245] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.245] GetLastError () returned 0x5 [0144.245] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0144.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 993 os_tid = 0x14bc [0142.705] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0144.246] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0144.246] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.247] GetLastError () returned 0x5 [0144.247] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0144.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 994 os_tid = 0x14c0 [0142.706] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0144.248] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0144.248] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.248] GetLastError () returned 0x5 [0144.248] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0144.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 995 os_tid = 0x14c4 [0142.706] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0144.249] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0144.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.249] GetLastError () returned 0x5 [0144.249] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0144.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 996 os_tid = 0x14c8 [0142.707] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0143.766] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0143.766] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.767] GetLastError () returned 0x5 [0143.767] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0143.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 997 os_tid = 0x14cc [0142.708] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0144.243] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0144.243] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.243] GetLastError () returned 0x5 [0144.244] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0144.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e358f0) returned 1 Thread: id = 998 os_tid = 0x14d0 [0142.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0142.708] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0142.708] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0142.708] wcscat (in: _Dest=0x32d2d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*" [0142.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0142.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0143.487] wcscmp (_String1=".", _String2=".") returned 0 [0143.487] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.487] wcscmp (_String1="..", _String2=".") returned 1 [0143.487] wcscmp (_String1="..", _String2="..") returned 0 [0143.487] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x76724eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0143.487] wcscmp (_String1="as80.xsl", _String2=".") returned 1 [0143.487] wcscmp (_String1="as80.xsl", _String2="..") returned 1 [0143.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c770 [0143.488] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0143.488] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0143.488] wcscat (in: _Dest=0x3e5c770, _Source="as80.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" [0146.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0146.909] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0146.909] wcscmp (_String1="as90.xsl", _String2=".") returned 1 [0146.909] wcscmp (_String1="as90.xsl", _String2="..") returned 1 [0146.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cd58 [0146.909] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.909] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.909] wcscat (in: _Dest=0x3e5cd58, _Source="as90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" [0146.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0146.911] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0146.911] wcscmp (_String1="Informix.xsl", _String2=".") returned 1 [0146.911] wcscmp (_String1="Informix.xsl", _String2="..") returned 1 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35ba88 [0146.911] wcscpy (in: _Dest=0x35ba88, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.911] wcscat (in: _Dest=0x35ba88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.911] wcscat (in: _Dest=0x35ba88, _Source="Informix.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" [0146.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35ba88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0146.912] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0146.913] wcscmp (_String1="msjet.xsl", _String2=".") returned 1 [0146.913] wcscmp (_String1="msjet.xsl", _String2="..") returned 1 [0146.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ccb0 [0146.913] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.913] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.913] wcscat (in: _Dest=0x3e5ccb0, _Source="msjet.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" [0146.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0146.914] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0146.914] wcscmp (_String1="sql2000.xsl", _String2=".") returned 1 [0146.914] wcscmp (_String1="sql2000.xsl", _String2="..") returned 1 [0146.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5ca10 [0146.914] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.914] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.914] wcscat (in: _Dest=0x3e5ca10, _Source="sql2000.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" [0146.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0146.915] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0146.915] wcscmp (_String1="sql70.xsl", _String2=".") returned 1 [0146.915] wcscmp (_String1="sql70.xsl", _String2="..") returned 1 [0146.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ce00 [0146.915] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.915] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.915] wcscat (in: _Dest=0x3e5ce00, _Source="sql70.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" [0146.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0146.917] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0146.917] wcscmp (_String1="sql90.xsl", _String2=".") returned 1 [0146.917] wcscmp (_String1="sql90.xsl", _String2="..") returned 1 [0146.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d1f0 [0146.917] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.917] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.917] wcscat (in: _Dest=0x3e5d1f0, _Source="sql90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" [0146.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0146.918] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0146.918] wcscmp (_String1="Sybase.xsl", _String2=".") returned 1 [0146.918] wcscmp (_String1="Sybase.xsl", _String2="..") returned 1 [0146.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d3e8 [0146.918] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0146.918] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0146.918] wcscat (in: _Dest=0x3e5d3e8, _Source="Sybase.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" [0146.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0146.919] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0146.919] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0146.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354f30) returned 1 Thread: id = 999 os_tid = 0x14d4 [0142.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0142.714] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0142.714] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0142.714] wcscat (in: _Dest=0x32d408, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*" [0142.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0142.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0143.476] wcscmp (_String1=".", _String2=".") returned 0 [0143.476] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.476] wcscmp (_String1="..", _String2=".") returned 1 [0143.476] wcscmp (_String1="..", _String2="..") returned 0 [0143.476] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0143.477] wcscmp (_String1="1033", _String2=".") returned 1 [0143.477] wcscmp (_String1="1033", _String2="..") returned 1 [0143.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30810 [0143.477] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0143.477] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0143.477] wcscat (in: _Dest=0x3e30810, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0151.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0151.212] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0151.212] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0151.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0151.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0151.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 1000 os_tid = 0x14d8 [0142.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg")) returned 0x20 [0143.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0143.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.858] GetLastError () returned 0x5 [0143.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0143.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 1001 os_tid = 0x14dc [0142.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif")) returned 0x20 [0143.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0143.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.482] GetLastError () returned 0x5 [0143.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0143.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 1002 os_tid = 0x14e0 [0142.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm")) returned 0x20 [0143.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0143.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.485] GetLastError () returned 0x5 [0143.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0143.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 1003 os_tid = 0x14e4 [0142.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb778 [0142.721] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0142.722] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0142.722] wcscat (in: _Dest=0x3edb778, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*" [0142.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0142.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0145.080] wcscmp (_String1=".", _String2=".") returned 0 [0145.080] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.081] wcscmp (_String1="..", _String2=".") returned 1 [0145.081] wcscmp (_String1="..", _String2="..") returned 0 [0145.081] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d1d500, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c356370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d1d500, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="ASSETS~1.ACC")) returned 1 [0145.081] wcscmp (_String1="Assets.accdt", _String2=".") returned 1 [0145.081] wcscmp (_String1="Assets.accdt", _String2="..") returned 1 [0145.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32230 [0145.081] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0145.081] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0145.081] wcscat (in: _Dest=0x3e32230, _Source="Assets.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" [0151.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0151.607] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8463ee00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c37c4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8463ee00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="CHARIT~1.ACC")) returned 1 [0151.607] wcscmp (_String1="Charitable Contributions.accdt", _String2=".") returned 1 [0151.607] wcscmp (_String1="Charitable Contributions.accdt", _String2="..") returned 1 [0151.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff77c8 [0151.607] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.607] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.607] wcscat (in: _Dest=0x2ff77c8, _Source="Charitable Contributions.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" [0151.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff77c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0151.608] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3628000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3628000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0151.608] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0151.608] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0151.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d408 [0151.608] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.608] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.608] wcscat (in: _Dest=0x32d408, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" [0151.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0151.609] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0151.609] wcscmp (_String1="DataType", _String2=".") returned 1 [0151.609] wcscmp (_String1="DataType", _String2="..") returned 1 [0151.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0151.609] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.609] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.609] wcscat (in: _Dest=0x66dca68, _Source="DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0151.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0151.610] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e22b00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e22b00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="EVENTS~1.ACC")) returned 1 [0151.610] wcscmp (_String1="Events.accdt", _String2=".") returned 1 [0151.610] wcscmp (_String1="Events.accdt", _String2="..") returned 1 [0151.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0151.610] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.610] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.610] wcscat (in: _Dest=0x32c660, _Source="Events.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" [0151.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0151.625] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7414c600, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7414c600, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="FACULT~1.ACC")) returned 1 [0151.625] wcscmp (_String1="Faculty.accdt", _String2=".") returned 1 [0151.625] wcscmp (_String1="Faculty.accdt", _String2="..") returned 1 [0151.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0151.625] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.625] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.625] wcscat (in: _Dest=0x32d668, _Source="Faculty.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" [0151.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0151.633] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecd8b00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbecd8b00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0151.633] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0151.633] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0151.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d4a0 [0151.633] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.633] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.633] wcscat (in: _Dest=0x32d4a0, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" [0151.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0151.634] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b0fe00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c414a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b0fe00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="MARKET~1.ACC")) returned 1 [0151.634] wcscmp (_String1="Marketing Projects.accdt", _String2=".") returned 1 [0151.635] wcscmp (_String1="Marketing Projects.accdt", _String2="..") returned 1 [0151.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0151.635] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.635] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.635] wcscat (in: _Dest=0x35c428, _Source="Marketing Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" [0151.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0151.636] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="NORTHW~1.ACC")) returned 1 [0151.636] wcscmp (_String1="Northwind.accdt", _String2=".") returned 1 [0151.636] wcscmp (_String1="Northwind.accdt", _String2="..") returned 1 [0151.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d370 [0151.636] wcscpy (in: _Dest=0x32d370, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.636] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.636] wcscat (in: _Dest=0x32d370, _Source="Northwind.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" [0151.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0151.637] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0151.637] wcscmp (_String1="Part", _String2=".") returned 1 [0151.637] wcscmp (_String1="Part", _String2="..") returned 1 [0151.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26c78 [0151.637] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.637] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.637] wcscat (in: _Dest=0x3f26c78, _Source="Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0151.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0151.638] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9af000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4d3130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc9af000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="PROJEC~1.ACC")) returned 1 [0151.638] wcscmp (_String1="Projects.accdt", _String2=".") returned 1 [0151.638] wcscmp (_String1="Projects.accdt", _String2="..") returned 1 [0151.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957fe0 [0151.639] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.639] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.639] wcscat (in: _Dest=0x6957fe0, _Source="Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" [0151.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0151.640] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="SALESP~1.ACC")) returned 1 [0151.640] wcscmp (_String1="Sales Pipeline.accdt", _String2=".") returned 1 [0151.640] wcscmp (_String1="Sales Pipeline.accdt", _String2="..") returned 1 [0151.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e768 [0151.640] wcscpy (in: _Dest=0x697e768, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.640] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.640] wcscat (in: _Dest=0x697e768, _Source="Sales Pipeline.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" [0151.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0151.641] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9e2e00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d9e2e00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="STUDEN~1.ACC")) returned 1 [0151.641] wcscmp (_String1="Students.accdt", _String2=".") returned 1 [0151.641] wcscmp (_String1="Students.accdt", _String2="..") returned 1 [0151.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957f48 [0151.641] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.641] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.641] wcscat (in: _Dest=0x6957f48, _Source="Students.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" [0151.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0151.643] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8262e200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8262e200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0151.643] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0151.643] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0151.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc948 [0151.643] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.643] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.643] wcscat (in: _Dest=0x66dc948, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" [0151.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0151.644] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1 [0151.644] wcscmp (_String1="WSS", _String2=".") returned 1 [0151.644] wcscmp (_String1="WSS", _String2="..") returned 1 [0151.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e098b0 [0151.644] wcscpy (in: _Dest=0x3e098b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0151.644] wcscat (in: _Dest=0x3e098b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0151.645] wcscat (in: _Dest=0x3e098b0, _Source="WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0151.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e098b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0151.646] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0 [0151.646] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0151.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0151.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 [0151.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 Thread: id = 1004 os_tid = 0x14e8 [0142.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx")) returned 0x20 [0144.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.260] GetLastError () returned 0x5 [0144.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1005 os_tid = 0x14ec [0142.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx")) returned 0x20 [0144.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.268] GetLastError () returned 0x5 [0144.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 1006 os_tid = 0x14f0 [0142.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx")) returned 0x20 [0144.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0144.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.269] GetLastError () returned 0x5 [0144.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0144.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1007 os_tid = 0x14f4 [0142.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx")) returned 0x20 [0144.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0144.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.271] GetLastError () returned 0x5 [0144.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0144.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 1008 os_tid = 0x14f8 [0142.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt")) returned 0x20 [0144.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0144.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.262] GetLastError () returned 0x5 [0144.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0144.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da62f0) returned 1 Thread: id = 1009 os_tid = 0x14fc [0142.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt")) returned 0x20 [0144.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0144.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.272] GetLastError () returned 0x5 [0144.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0144.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 Thread: id = 1010 os_tid = 0x1500 [0142.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt")) returned 0x20 [0144.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0144.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.274] GetLastError () returned 0x5 [0144.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0144.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 1011 os_tid = 0x1504 [0142.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt")) returned 0x20 [0144.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0144.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.275] GetLastError () returned 0x5 [0144.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0144.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edaff8) returned 1 Thread: id = 1012 os_tid = 0x1508 [0142.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt")) returned 0x20 [0144.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0144.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.276] GetLastError () returned 0x5 [0144.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0144.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 Thread: id = 1013 os_tid = 0x150c [0142.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt")) returned 0x20 [0144.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0144.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.263] GetLastError () returned 0x5 [0144.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0144.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 1014 os_tid = 0x1510 [0142.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt")) returned 0x20 [0144.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0144.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.265] GetLastError () returned 0x5 [0144.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0144.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda4f8) returned 1 Thread: id = 1015 os_tid = 0x1514 [0142.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt")) returned 0x20 [0144.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0144.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.278] GetLastError () returned 0x5 [0144.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0144.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbff8) returned 1 Thread: id = 1016 os_tid = 0x1518 [0142.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt")) returned 0x20 [0144.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0144.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.280] GetLastError () returned 0x5 [0144.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0144.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb478) returned 1 Thread: id = 1017 os_tid = 0x151c [0142.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt")) returned 0x20 [0144.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0144.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.252] GetLastError () returned 0x5 [0144.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0144.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 1018 os_tid = 0x1520 [0142.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx")) returned 0x20 [0144.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.281] GetLastError () returned 0x5 [0144.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30f30) returned 1 Thread: id = 1019 os_tid = 0x1524 [0142.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx")) returned 0x20 [0144.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.282] GetLastError () returned 0x5 [0144.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 1020 os_tid = 0x1528 [0142.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx")) returned 0x20 [0144.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0144.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.284] GetLastError () returned 0x5 [0144.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0144.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 1021 os_tid = 0x152c [0142.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx")) returned 0x20 [0143.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0143.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.783] GetLastError () returned 0x5 [0143.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0143.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 1022 os_tid = 0x1530 [0142.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx")) returned 0x20 [0144.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0144.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.255] GetLastError () returned 0x5 [0144.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0144.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e98) returned 1 Thread: id = 1023 os_tid = 0x1534 [0143.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx")) returned 0x20 [0144.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.266] GetLastError () returned 0x5 [0144.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0144.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 1024 os_tid = 0x1538 [0143.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d28 [0143.491] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0143.491] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0143.491] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*" [0143.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0143.491] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0143.492] wcscmp (_String1=".", _String2=".") returned 0 [0143.492] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.492] wcscmp (_String1="..", _String2=".") returned 1 [0143.492] wcscmp (_String1="..", _String2="..") returned 0 [0143.492] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0143.492] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0143.492] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0143.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0143.492] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0143.492] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0143.492] wcscat (in: _Dest=0x3d8be50, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0146.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0146.266] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0146.266] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0146.266] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0146.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29bf0 [0146.266] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0146.267] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0146.267] wcscat (in: _Dest=0x3f29bf0, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0146.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0146.268] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0146.268] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0146.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0146.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0146.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7b20) returned 1 Thread: id = 1025 os_tid = 0x153c [0143.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7180 [0143.493] wcscpy (in: _Dest=0x3ef7180, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0143.493] wcscat (in: _Dest=0x3ef7180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0143.493] wcscat (in: _Dest=0x3ef7180, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*" [0143.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0143.493] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0143.860] wcscmp (_String1=".", _String2=".") returned 0 [0143.860] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.860] wcscmp (_String1="..", _String2=".") returned 1 [0143.861] wcscmp (_String1="..", _String2="..") returned 0 [0143.861] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0143.861] wcscmp (_String1="Java", _String2=".") returned 1 [0143.861] wcscmp (_String1="Java", _String2="..") returned 1 [0143.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe69c8 [0143.861] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0143.861] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0143.861] wcscat (in: _Dest=0x2fe69c8, _Source="Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0150.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0150.924] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0150.924] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0150.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0150.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7180) returned 1 [0150.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4c50) returned 1 Thread: id = 1026 os_tid = 0x1540 [0143.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0d08 [0143.496] wcscpy (in: _Dest=0x66d0d08, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0143.497] wcscat (in: _Dest=0x66d0d08, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0143.497] wcscat (in: _Dest=0x66d0d08, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*" [0143.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0143.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0143.500] wcscmp (_String1=".", _String2=".") returned 0 [0143.500] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.863] wcscmp (_String1="..", _String2=".") returned 1 [0143.863] wcscmp (_String1="..", _String2="..") returned 0 [0143.863] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0143.863] wcscmp (_String1="AcroIEHelper.dll", _String2=".") returned 1 [0143.863] wcscmp (_String1="AcroIEHelper.dll", _String2="..") returned 1 [0143.863] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0143.864] wcscmp (_String1="AcroIEHelperShim.dll", _String2=".") returned 1 [0143.864] wcscmp (_String1="AcroIEHelperShim.dll", _String2="..") returned 1 [0143.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0143.864] wcscmp (_String1="AcroPDF.CAT", _String2=".") returned 1 [0143.864] wcscmp (_String1="AcroPDF.CAT", _String2="..") returned 1 [0143.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eefc0 [0143.864] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0143.864] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0143.864] wcscat (in: _Dest=0x66eefc0, _Source="AcroPDF.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" [0150.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0150.926] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0150.926] wcscmp (_String1="AcroPDF.CHS", _String2=".") returned 1 [0150.926] wcscmp (_String1="AcroPDF.CHS", _String2="..") returned 1 [0150.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0150.926] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.926] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.927] wcscat (in: _Dest=0x3f26fa8, _Source="AcroPDF.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" [0150.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0150.928] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0150.928] wcscmp (_String1="AcroPDF.CHT", _String2=".") returned 1 [0150.928] wcscmp (_String1="AcroPDF.CHT", _String2="..") returned 1 [0150.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27030 [0150.928] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.928] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.928] wcscat (in: _Dest=0x3f27030, _Source="AcroPDF.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" [0150.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0150.929] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0150.929] wcscmp (_String1="AcroPDF.CZE", _String2=".") returned 1 [0150.929] wcscmp (_String1="AcroPDF.CZE", _String2="..") returned 1 [0150.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d88 [0150.929] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.929] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.929] wcscat (in: _Dest=0x3f26d88, _Source="AcroPDF.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" [0150.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0150.931] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0150.931] wcscmp (_String1="AcroPDF.DAN", _String2=".") returned 1 [0150.931] wcscmp (_String1="AcroPDF.DAN", _String2="..") returned 1 [0150.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0150.931] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.931] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.931] wcscat (in: _Dest=0x3f274f8, _Source="AcroPDF.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" [0150.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0150.932] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0150.932] wcscmp (_String1="AcroPDF.DEU", _String2=".") returned 1 [0150.932] wcscmp (_String1="AcroPDF.DEU", _String2="..") returned 1 [0150.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25f30 [0150.932] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.932] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.932] wcscat (in: _Dest=0x3f25f30, _Source="AcroPDF.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" [0150.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0150.933] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0150.934] wcscmp (_String1="AcroPDF.dll", _String2=".") returned 1 [0150.934] wcscmp (_String1="AcroPDF.dll", _String2="..") returned 1 [0150.934] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0150.934] wcscmp (_String1="AcroPDF.ESP", _String2=".") returned 1 [0150.934] wcscmp (_String1="AcroPDF.ESP", _String2="..") returned 1 [0150.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e98 [0150.934] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.934] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.934] wcscat (in: _Dest=0x3f26e98, _Source="AcroPDF.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" [0150.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0150.935] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0150.935] wcscmp (_String1="AcroPDF.EUQ", _String2=".") returned 1 [0150.935] wcscmp (_String1="AcroPDF.EUQ", _String2="..") returned 1 [0150.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f272d8 [0150.935] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.935] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.935] wcscat (in: _Dest=0x3f272d8, _Source="AcroPDF.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" [0150.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0150.937] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0150.937] wcscmp (_String1="AcroPDF.FRA", _String2=".") returned 1 [0150.937] wcscmp (_String1="AcroPDF.FRA", _String2="..") returned 1 [0150.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0150.937] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.937] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.937] wcscat (in: _Dest=0x3f266a0, _Source="AcroPDF.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" [0150.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0150.938] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0150.938] wcscmp (_String1="AcroPDF.HRV", _String2=".") returned 1 [0150.938] wcscmp (_String1="AcroPDF.HRV", _String2="..") returned 1 [0150.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0150.938] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.938] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.938] wcscat (in: _Dest=0x3f26508, _Source="AcroPDF.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" [0150.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0150.940] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0150.940] wcscmp (_String1="AcroPDF.HUN", _String2=".") returned 1 [0150.940] wcscmp (_String1="AcroPDF.HUN", _String2="..") returned 1 [0150.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0150.940] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.940] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.940] wcscat (in: _Dest=0x3f26618, _Source="AcroPDF.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" [0150.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0150.941] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0150.941] wcscmp (_String1="AcroPDF.ITA", _String2=".") returned 1 [0150.942] wcscmp (_String1="AcroPDF.ITA", _String2="..") returned 1 [0150.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0150.942] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.942] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.942] wcscat (in: _Dest=0x3f26728, _Source="AcroPDF.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" [0150.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0150.943] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0150.943] wcscmp (_String1="AcroPDF.JPN", _String2=".") returned 1 [0150.943] wcscmp (_String1="AcroPDF.JPN", _String2="..") returned 1 [0150.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0150.943] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.943] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.943] wcscat (in: _Dest=0x3f26480, _Source="AcroPDF.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" [0150.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0150.944] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0150.944] wcscmp (_String1="AcroPDF.KOR", _String2=".") returned 1 [0150.944] wcscmp (_String1="AcroPDF.KOR", _String2="..") returned 1 [0150.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0150.945] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.945] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.945] wcscat (in: _Dest=0x3f263f8, _Source="AcroPDF.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" [0150.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0150.946] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0150.946] wcscmp (_String1="AcroPDF.NLD", _String2=".") returned 1 [0150.946] wcscmp (_String1="AcroPDF.NLD", _String2="..") returned 1 [0150.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0150.946] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.946] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.946] wcscat (in: _Dest=0x3f26370, _Source="AcroPDF.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" [0150.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0150.947] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0150.947] wcscmp (_String1="AcroPDF.NOR", _String2=".") returned 1 [0150.948] wcscmp (_String1="AcroPDF.NOR", _String2="..") returned 1 [0150.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0150.948] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.948] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.948] wcscat (in: _Dest=0x3f26948, _Source="AcroPDF.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" [0150.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0150.949] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0150.949] wcscmp (_String1="AcroPDF.POL", _String2=".") returned 1 [0150.949] wcscmp (_String1="AcroPDF.POL", _String2="..") returned 1 [0150.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0150.949] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.949] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.949] wcscat (in: _Dest=0x3f268c0, _Source="AcroPDF.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" [0150.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0150.951] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0150.951] wcscmp (_String1="AcroPDF.PTB", _String2=".") returned 1 [0150.951] wcscmp (_String1="AcroPDF.PTB", _String2="..") returned 1 [0150.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0150.951] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.951] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.951] wcscat (in: _Dest=0x3f26838, _Source="AcroPDF.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" [0150.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0150.952] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0150.952] wcscmp (_String1="AcroPDF.RUM", _String2=".") returned 1 [0150.952] wcscmp (_String1="AcroPDF.RUM", _String2="..") returned 1 [0150.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0150.952] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.952] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.952] wcscat (in: _Dest=0x3f25ea8, _Source="AcroPDF.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" [0150.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0150.954] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0150.954] wcscmp (_String1="AcroPDF.RUS", _String2=".") returned 1 [0150.954] wcscmp (_String1="AcroPDF.RUS", _String2="..") returned 1 [0150.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f267b0 [0150.954] wcscpy (in: _Dest=0x3f267b0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.954] wcscat (in: _Dest=0x3f267b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.954] wcscat (in: _Dest=0x3f267b0, _Source="AcroPDF.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" [0150.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f267b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0150.956] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0150.956] wcscmp (_String1="AcroPDF.SKY", _String2=".") returned 1 [0150.956] wcscmp (_String1="AcroPDF.SKY", _String2="..") returned 1 [0150.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0150.956] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.956] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.956] wcscat (in: _Dest=0x3f270b8, _Source="AcroPDF.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" [0150.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0150.957] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0150.957] wcscmp (_String1="AcroPDF.SLV", _String2=".") returned 1 [0150.957] wcscmp (_String1="AcroPDF.SLV", _String2="..") returned 1 [0150.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0150.958] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.958] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.958] wcscat (in: _Dest=0x3f271c8, _Source="AcroPDF.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" [0150.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0150.959] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0150.959] wcscmp (_String1="AcroPDF.SUO", _String2=".") returned 1 [0150.959] wcscmp (_String1="AcroPDF.SUO", _String2="..") returned 1 [0150.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0150.959] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.959] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.959] wcscat (in: _Dest=0x3f27250, _Source="AcroPDF.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" [0150.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0150.960] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0150.960] wcscmp (_String1="AcroPDF.SVE", _String2=".") returned 1 [0150.960] wcscmp (_String1="AcroPDF.SVE", _String2="..") returned 1 [0150.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26b68 [0150.960] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.961] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.961] wcscat (in: _Dest=0x3f26b68, _Source="AcroPDF.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" [0150.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0150.962] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0150.962] wcscmp (_String1="AcroPDF.TUR", _String2=".") returned 1 [0150.962] wcscmp (_String1="AcroPDF.TUR", _String2="..") returned 1 [0150.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0150.962] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.962] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.962] wcscat (in: _Dest=0x3f26ae0, _Source="AcroPDF.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" [0150.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0150.963] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0150.963] wcscmp (_String1="AcroPDF.UKR", _String2=".") returned 1 [0150.963] wcscmp (_String1="AcroPDF.UKR", _String2="..") returned 1 [0150.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26a58 [0150.963] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0150.963] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0150.964] wcscat (in: _Dest=0x3f26a58, _Source="AcroPDF.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" [0150.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0151.306] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0151.306] wcscmp (_String1="PDFShell.CAT", _String2=".") returned 1 [0151.306] wcscmp (_String1="PDFShell.CAT", _String2="..") returned 1 [0151.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df3068 [0151.306] wcscpy (in: _Dest=0x3df3068, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0151.306] wcscat (in: _Dest=0x3df3068, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0151.306] wcscat (in: _Dest=0x3df3068, _Source="PDFShell.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" [0152.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df3068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0152.848] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0152.848] wcscmp (_String1="PDFShell.CHS", _String2=".") returned 1 [0152.848] wcscmp (_String1="PDFShell.CHS", _String2="..") returned 1 [0152.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbce8 [0152.848] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.848] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.848] wcscat (in: _Dest=0x66dbce8, _Source="PDFShell.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" [0152.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0152.849] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0152.849] wcscmp (_String1="PDFShell.CHT", _String2=".") returned 1 [0152.849] wcscmp (_String1="PDFShell.CHT", _String2="..") returned 1 [0152.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcb88 [0152.850] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.850] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.850] wcscat (in: _Dest=0x66dcb88, _Source="PDFShell.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" [0152.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0152.851] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0152.851] wcscmp (_String1="PDFShell.CZE", _String2=".") returned 1 [0152.851] wcscmp (_String1="PDFShell.CZE", _String2="..") returned 1 [0152.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db988 [0152.851] wcscpy (in: _Dest=0x66db988, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.851] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.851] wcscat (in: _Dest=0x66db988, _Source="PDFShell.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" [0152.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0152.852] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0152.854] wcscmp (_String1="PDFShell.DAN", _String2=".") returned 1 [0152.854] wcscmp (_String1="PDFShell.DAN", _String2="..") returned 1 [0152.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db868 [0152.854] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.854] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.854] wcscat (in: _Dest=0x66db868, _Source="PDFShell.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" [0152.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0152.855] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0152.856] wcscmp (_String1="PDFShell.DEU", _String2=".") returned 1 [0152.856] wcscmp (_String1="PDFShell.DEU", _String2="..") returned 1 [0152.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcaf8 [0152.856] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.856] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.856] wcscat (in: _Dest=0x66dcaf8, _Source="PDFShell.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" [0152.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0152.857] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0152.857] wcscmp (_String1="pdfshell.dll", _String2=".") returned 1 [0152.857] wcscmp (_String1="pdfshell.dll", _String2="..") returned 1 [0152.857] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0152.857] wcscmp (_String1="PDFShell.ESP", _String2=".") returned 1 [0152.857] wcscmp (_String1="PDFShell.ESP", _String2="..") returned 1 [0152.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1dd8 [0152.858] wcscpy (in: _Dest=0x3df1dd8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.858] wcscat (in: _Dest=0x3df1dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.858] wcscat (in: _Dest=0x3df1dd8, _Source="PDFShell.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" [0152.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df1dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0152.861] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0152.861] wcscmp (_String1="PDFShell.EUQ", _String2=".") returned 1 [0152.861] wcscmp (_String1="PDFShell.EUQ", _String2="..") returned 1 [0152.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cab8 [0152.861] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.861] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.861] wcscat (in: _Dest=0x674cab8, _Source="PDFShell.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" [0152.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0152.862] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0152.862] wcscmp (_String1="PDFShell.FRA", _String2=".") returned 1 [0152.862] wcscmp (_String1="PDFShell.FRA", _String2="..") returned 1 [0152.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cb48 [0152.863] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.863] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.863] wcscat (in: _Dest=0x674cb48, _Source="PDFShell.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" [0152.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0152.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0152.864] wcscmp (_String1="PDFShell.HRV", _String2=".") returned 1 [0152.864] wcscmp (_String1="PDFShell.HRV", _String2="..") returned 1 [0152.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cbd8 [0152.864] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.864] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.864] wcscat (in: _Dest=0x674cbd8, _Source="PDFShell.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" [0152.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0152.866] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0152.866] wcscmp (_String1="PDFShell.HUN", _String2=".") returned 1 [0152.866] wcscmp (_String1="PDFShell.HUN", _String2="..") returned 1 [0152.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cc68 [0152.866] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.866] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.866] wcscat (in: _Dest=0x674cc68, _Source="PDFShell.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" [0152.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0152.867] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0152.867] wcscmp (_String1="PDFShell.ITA", _String2=".") returned 1 [0152.867] wcscmp (_String1="PDFShell.ITA", _String2="..") returned 1 [0152.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674ccf8 [0152.867] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.868] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.868] wcscat (in: _Dest=0x674ccf8, _Source="PDFShell.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" [0152.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0152.869] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0152.869] wcscmp (_String1="PDFShell.JPN", _String2=".") returned 1 [0152.869] wcscmp (_String1="PDFShell.JPN", _String2="..") returned 1 [0152.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cd88 [0152.869] wcscpy (in: _Dest=0x674cd88, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.869] wcscat (in: _Dest=0x674cd88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.869] wcscat (in: _Dest=0x674cd88, _Source="PDFShell.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" [0152.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0152.871] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0152.871] wcscmp (_String1="PDFShell.KOR", _String2=".") returned 1 [0152.871] wcscmp (_String1="PDFShell.KOR", _String2="..") returned 1 [0152.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674ce18 [0152.871] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.871] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.871] wcscat (in: _Dest=0x674ce18, _Source="PDFShell.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" [0152.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0152.872] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0152.872] wcscmp (_String1="PDFShell.NLD", _String2=".") returned 1 [0152.872] wcscmp (_String1="PDFShell.NLD", _String2="..") returned 1 [0152.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cea8 [0152.873] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.873] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.873] wcscat (in: _Dest=0x674cea8, _Source="PDFShell.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" [0152.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0152.874] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0152.874] wcscmp (_String1="PDFShell.NOR", _String2=".") returned 1 [0152.874] wcscmp (_String1="PDFShell.NOR", _String2="..") returned 1 [0152.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cf38 [0152.874] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.874] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.874] wcscat (in: _Dest=0x674cf38, _Source="PDFShell.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" [0152.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0152.875] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0152.876] wcscmp (_String1="PDFShell.POL", _String2=".") returned 1 [0152.876] wcscmp (_String1="PDFShell.POL", _String2="..") returned 1 [0152.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cfc8 [0152.876] wcscpy (in: _Dest=0x674cfc8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.876] wcscat (in: _Dest=0x674cfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.876] wcscat (in: _Dest=0x674cfc8, _Source="PDFShell.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" [0152.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0152.877] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0152.877] wcscmp (_String1="PDFShell.PTB", _String2=".") returned 1 [0152.877] wcscmp (_String1="PDFShell.PTB", _String2="..") returned 1 [0152.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d058 [0152.877] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.877] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.877] wcscat (in: _Dest=0x674d058, _Source="PDFShell.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" [0152.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0152.879] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0152.879] wcscmp (_String1="PDFShell.RUM", _String2=".") returned 1 [0152.879] wcscmp (_String1="PDFShell.RUM", _String2="..") returned 1 [0152.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d0e8 [0152.879] wcscpy (in: _Dest=0x674d0e8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.879] wcscat (in: _Dest=0x674d0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.879] wcscat (in: _Dest=0x674d0e8, _Source="PDFShell.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" [0152.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0152.880] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0152.880] wcscmp (_String1="PDFShell.RUS", _String2=".") returned 1 [0152.881] wcscmp (_String1="PDFShell.RUS", _String2="..") returned 1 [0152.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d178 [0152.881] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.881] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.881] wcscat (in: _Dest=0x674d178, _Source="PDFShell.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" [0152.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0152.882] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0152.882] wcscmp (_String1="PDFShell.SKY", _String2=".") returned 1 [0152.882] wcscmp (_String1="PDFShell.SKY", _String2="..") returned 1 [0152.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d208 [0152.882] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.882] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.882] wcscat (in: _Dest=0x674d208, _Source="PDFShell.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" [0152.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0152.884] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0152.884] wcscmp (_String1="PDFShell.SLV", _String2=".") returned 1 [0152.884] wcscmp (_String1="PDFShell.SLV", _String2="..") returned 1 [0152.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d298 [0152.884] wcscpy (in: _Dest=0x674d298, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.884] wcscat (in: _Dest=0x674d298, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.884] wcscat (in: _Dest=0x674d298, _Source="PDFShell.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" [0152.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0152.885] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0152.885] wcscmp (_String1="PDFShell.SUO", _String2=".") returned 1 [0152.885] wcscmp (_String1="PDFShell.SUO", _String2="..") returned 1 [0152.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d328 [0152.885] wcscpy (in: _Dest=0x674d328, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0152.885] wcscat (in: _Dest=0x674d328, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0152.886] wcscat (in: _Dest=0x674d328, _Source="PDFShell.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" [0152.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0153.219] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0153.219] wcscmp (_String1="PDFShell.SVE", _String2=".") returned 1 [0153.219] wcscmp (_String1="PDFShell.SVE", _String2="..") returned 1 [0153.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d448 [0153.219] wcscpy (in: _Dest=0x674d448, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0153.219] wcscat (in: _Dest=0x674d448, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0153.219] wcscat (in: _Dest=0x674d448, _Source="PDFShell.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" [0157.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0157.289] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0157.289] wcscmp (_String1="PDFShell.TUR", _String2=".") returned 1 [0157.289] wcscmp (_String1="PDFShell.TUR", _String2="..") returned 1 [0157.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e408 [0157.289] wcscpy (in: _Dest=0x674e408, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0157.289] wcscat (in: _Dest=0x674e408, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0157.289] wcscat (in: _Dest=0x674e408, _Source="PDFShell.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" [0157.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0157.290] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0157.290] wcscmp (_String1="PDFShell.UKR", _String2=".") returned 1 [0157.291] wcscmp (_String1="PDFShell.UKR", _String2="..") returned 1 [0157.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cab8 [0157.291] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0157.291] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0157.291] wcscat (in: _Dest=0x674cab8, _Source="PDFShell.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" [0157.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0157.292] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0157.292] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0157.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0157.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0157.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5728) returned 1 Thread: id = 1027 os_tid = 0x1544 [0143.501] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin")) returned 0x2026 [0145.107] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin", dwFileAttributes=0x20) returned 1 [0145.108] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0145.108] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0xa3afa34 | out: lpFileSize=0xa3afa34*=20) returned 1 [0145.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0145.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0145.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0145.108] NtQuerySystemTime (in: CurrentTime=0xa3af9a8 | out: CurrentTime=0xa3af9a8*=132482710537620000) returned 0x0 [0145.108] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x90f77b9 [0145.108] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x24a68c25 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x394b2238 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x10104f18 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x29a5eece [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x56baf182 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x402a9936 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x40be9fd0 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x5f63b485 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x32482e28 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x3570f625 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x24a78a61 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x2bef95a [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x53be05e0 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x20b34632 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x30f16828 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x12553542 [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x76ecc0ec [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x75433d1d [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x555b665a [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x317536d [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x6f05db6c [0145.109] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x85b7e0a [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x485c2219 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x17a047e7 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x548b0dd1 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x30392bd5 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x577fcd0 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x26a0d71 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x5eda7011 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x7cdb3c06 [0145.110] RtlRandomEx (in: Seed=0xa3af9a0 | out: Seed=0xa3af9a0) returned 0x61ecb05d [0145.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0145.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0145.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0145.124] ReadFile (in: hFile=0x108c, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x14, lpNumberOfBytesRead=0xa3af99c, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0xa3af99c*=0x14, lpOverlapped=0x0) returned 1 [0145.128] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.128] WriteFile (in: hFile=0x108c, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xa3af9a0, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0xa3af9a0*=0x14, lpOverlapped=0x0) returned 1 [0145.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0145.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0145.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0145.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0145.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0145.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0145.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f348) returned 1 [0145.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f60 [0145.554] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.554] WriteFile (in: hFile=0x108c, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa3afa28, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xa3afa28*=0x10a, lpOverlapped=0x0) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0147.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0147.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e09730 [0147.673] wcscpy (in: _Dest=0x3e09730, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" [0147.673] wcscat (in: _Dest=0x3e09730, _Source=".ac3a86" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86" [0147.673] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86", NtPathName=0xa3af9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0149.232] FlushFileBuffers (hFile=0x108c) returned 1 [0149.234] CloseHandle (hObject=0x108c) returned 1 [0149.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0a38 [0149.235] wcscpy (in: _Dest=0x66d0a38, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0149.235] wcscat (in: _Dest=0x66d0a38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" [0149.235] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt")) returned 0xffffffff [0151.074] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1978 [0155.914] WriteFile (in: hFile=0x1978, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa3af9bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa3af9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0162.419] CloseHandle (hObject=0x1978) returned 1 [0166.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0166.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5568) returned 1 Thread: id = 1028 os_tid = 0x1548 [0143.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d238 [0143.502] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0143.502] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\" [0143.502] wcscat (in: _Dest=0x3d8d238, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*" [0143.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1870 [0143.502] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0144.347] wcscmp (_String1=".", _String2=".") returned 0 [0144.347] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.347] wcscmp (_String1="..", _String2=".") returned 1 [0144.347] wcscmp (_String1="..", _String2="..") returned 0 [0144.347] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c1870 | out: lpFindFileData=0x66c1870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.347] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0144.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1870) returned 1 [0144.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 [0144.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 Thread: id = 1029 os_tid = 0x154c [0143.503] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds")) returned 0x2026 [0144.347] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0150.578] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12cc [0150.578] GetFileSizeEx (in: hFile=0x12cc, lpFileSize=0x9b8f89c | out: lpFileSize=0x9b8f89c*=135168) returned 1 [0150.578] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x20ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.578] ReadFile (in: hFile=0x12cc, lpBuffer=0x9b8f878, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b8f888, lpOverlapped=0x0 | out: lpBuffer=0x9b8f878*, lpNumberOfBytesRead=0x9b8f888*=0x4, lpOverlapped=0x0) returned 1 [0150.580] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0150.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0150.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0150.581] NtQuerySystemTime (in: CurrentTime=0x9b8f810 | out: CurrentTime=0x9b8f810*=132482710592220000) returned 0x0 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x22be78a4 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x42f04062 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x6fd8f948 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x2e914ec2 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x56a25e37 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x153fe72c [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x5eda6990 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0xbe5d982 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x181bea9 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x49d2325b [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x47320840 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x753a2ebf [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0xe2ab0c4 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x20db3271 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x716a7209 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x184488cb [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x512b5ef4 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x1a12cd93 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x72a1fa80 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x4e1cea59 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x860dac6 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x5f744fe6 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x53138cf4 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x3caf7f21 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x190b1102 [0150.581] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x309673cd [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x33c001ae [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x3c84f575 [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x4891eb75 [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x38003107 [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x45a8a173 [0150.582] RtlRandomEx (in: Seed=0x9b8f808 | out: Seed=0x9b8f808) returned 0x39bf97a5 [0150.590] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.590] ReadFile (in: hFile=0x12cc, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0150.593] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff128 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d058 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0150.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff128) returned 1 [0150.594] WriteFile (in: hFile=0x12cc, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0151.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0151.732] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.732] ReadFile (in: hFile=0x12cc, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0151.733] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe558 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0588 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0151.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0151.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0151.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0151.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0151.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0151.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe558) returned 1 [0151.734] WriteFile (in: hFile=0x12cc, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0152.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0152.975] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.975] ReadFile (in: hFile=0x12cc, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0152.976] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3bc0 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0152.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0152.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0152.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0152.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3bc0) returned 1 [0152.977] WriteFile (in: hFile=0x12cc, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b8f810, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0x9b8f810*=0x3c00, lpOverlapped=0x0) returned 1 [0153.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0153.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ccf0 [0153.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0153.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5ed0 [0153.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0153.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0153.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0153.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0153.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d59e8) returned 1 [0153.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x323c98 [0153.765] SetFilePointerEx (in: hFile=0x12cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.765] WriteFile (in: hFile=0x12cc, lpBuffer=0x323c98*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x9b8f890, lpOverlapped=0x0 | out: lpBuffer=0x323c98*, lpNumberOfBytesWritten=0x9b8f890*=0x14a, lpOverlapped=0x0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x323c98) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0159.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0159.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da64f0 [0159.437] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" [0159.437] wcscat (in: _Dest=0x3da64f0, _Source=".ac3a86" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.ac3a86") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.ac3a86" [0159.437] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.ac3a86", NtPathName=0x9b8f808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0160.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 [0160.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825b18) returned 1 [0160.424] NtQueryInformationFile (in: FileHandle=0x12cc, IoStatusBlock=0x9b8f7e0, FileInformation=0x9b8f7e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b8f7e0, FileInformation=0x9b8f7e8) returned 0x0 [0160.424] NtSetInformationFile (FileHandle=0x12cc, IoStatusBlock=0x9b8f7e0, FileInformation=0x9b8f7e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0162.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 [0162.765] FlushFileBuffers (hFile=0x12cc) returned 1 [0164.187] CloseHandle (hObject=0x12cc) returned 1 [0164.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0164.188] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0164.188] wcscat (in: _Dest=0x66d00d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" [0164.188] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt")) returned 0x20 [0167.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0167.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3648c0) returned 1 Thread: id = 1030 os_tid = 0x1550 [0143.503] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla")) returned 0x2026 [0144.346] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 1 [0149.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa0 [0155.901] GetFileSizeEx (in: hFile=0xfa0, lpFileSize=0x81bfe84 | out: lpFileSize=0x81bfe84*=9506) returned 1 [0155.901] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x251e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.901] ReadFile (in: hFile=0xfa0, lpBuffer=0x81bfe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81bfe70, lpOverlapped=0x0 | out: lpBuffer=0x81bfe60*, lpNumberOfBytesRead=0x81bfe70*=0x4, lpOverlapped=0x0) returned 1 [0155.904] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0155.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0155.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0155.904] NtQuerySystemTime (in: CurrentTime=0x81bfdf8 | out: CurrentTime=0x81bfdf8*=132482710644480000) returned 0x0 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x13aac455 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x4857e7f4 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x4eabd1f7 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x4120057e [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x7f56896b [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x26641b56 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x6fd60c67 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x4b33a157 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x788a1367 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x2be0fe97 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x7b014a4c [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x1f68677b [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x25dd29f6 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x66f72ca7 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0xac91179 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x7c2f2878 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x149513ca [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x2e85b4ad [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x227bca53 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x65010057 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x71baa91a [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0xdb211f6 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x57a2fd16 [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0xe43d03c [0155.904] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x4ba89477 [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x71cc5c19 [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0xcad0fd8 [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x403644d9 [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x3d6278b8 [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x7edf85bc [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x1d3bc1fb [0155.905] RtlRandomEx (in: Seed=0x81bfdf0 | out: Seed=0x81bfdf0) returned 0x29257eff [0155.913] ReadFile (in: hFile=0xfa0, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x2522, lpNumberOfBytesRead=0x81bfdec, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0x81bfdec*=0x2522, lpOverlapped=0x0) returned 1 [0155.914] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.914] WriteFile (in: hFile=0xfa0, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0x2522, lpNumberOfBytesWritten=0x81bfdf0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0x81bfdf0*=0x2522, lpOverlapped=0x0) returned 1 [0156.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0156.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0156.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0156.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0156.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0156.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 [0156.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe480) returned 1 [0156.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4aaa0 [0156.791] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.791] WriteFile (in: hFile=0xfa0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x81bfe78, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x81bfe78*=0x102, lpOverlapped=0x0) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0160.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0160.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d00d8 [0160.767] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" [0160.767] wcscat (in: _Dest=0x66d00d8, _Source=".ac3a86" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.ac3a86") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.ac3a86" [0160.767] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.ac3a86", NtPathName=0x81bfdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c810 [0162.767] FlushFileBuffers (hFile=0xfa0) returned 1 [0164.157] CloseHandle (hObject=0xfa0) returned 1 [0164.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0d80 [0164.191] wcscpy (in: _Dest=0x66d0d80, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0164.191] wcscat (in: _Dest=0x66d0d80, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" [0164.191] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt")) returned 0x20 [0167.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0167.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 1031 os_tid = 0x1554 [0143.504] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec")) returned 0x2026 [0145.130] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0x20) returned 1 [0145.131] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12d0 [0145.131] GetFileSizeEx (in: hFile=0x12d0, lpFileSize=0x953f8cc | out: lpFileSize=0x953f8cc*=740) returned 1 [0145.131] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.131] ReadFile (in: hFile=0x12d0, lpBuffer=0x953f8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x953f8b8, lpOverlapped=0x0 | out: lpBuffer=0x953f8a8*, lpNumberOfBytesRead=0x953f8b8*=0x4, lpOverlapped=0x0) returned 1 [0145.235] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0145.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0145.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0145.235] NtQuerySystemTime (in: CurrentTime=0x953f840 | out: CurrentTime=0x953f840*=132482710538868000) returned 0x0 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x23703aaf [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2fc3c9d3 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0xd206770 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x37b50ff9 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x4145b3a9 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2bfb24f9 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x59ef4ec [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2bff5636 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x423dc26d [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x472e016 [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x767435ab [0145.235] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2bd439ad [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x29dacf8f [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x3c2442be [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x12db75a3 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x6eacc966 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x5a0a49d1 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x244a9dd3 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x243bcee7 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x710a6919 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x280b1e09 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x112d08be [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x18c88b2c [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2fec3e37 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x2b46cf05 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x6104090 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x684468b3 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x7298c31a [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x37a8a9ff [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x3f09d224 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x6356b0e4 [0145.236] RtlRandomEx (in: Seed=0x953f838 | out: Seed=0x953f838) returned 0x150d27ed [0145.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0145.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0145.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68abd68 [0145.250] ReadFile (in: hFile=0x12d0, lpBuffer=0x68a8160, nNumberOfBytesToRead=0x2e4, lpNumberOfBytesRead=0x953f834, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0x953f834*=0x2e4, lpOverlapped=0x0) returned 1 [0145.250] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.250] WriteFile (in: hFile=0x12d0, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0x2e4, lpNumberOfBytesWritten=0x953f838, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0x953f838*=0x2e4, lpOverlapped=0x0) returned 1 [0148.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0148.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0148.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0148.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0148.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0148.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdd78) returned 1 [0148.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5af60 [0148.287] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.287] WriteFile (in: hFile=0x12d0, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x953f8c0, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x953f8c0*=0x102, lpOverlapped=0x0) returned 1 [0149.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0149.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0149.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0df8 [0149.221] wcscpy (in: _Dest=0x66d0df8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" [0149.221] wcscat (in: _Dest=0x66d0df8, _Source=".ac3a86" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86" [0149.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86", NtPathName=0x953f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0149.230] FlushFileBuffers (hFile=0x12d0) returned 1 [0149.231] CloseHandle (hObject=0x12d0) returned 1 [0149.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0df8 [0149.232] wcscpy (in: _Dest=0x66d0df8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0149.232] wcscat (in: _Dest=0x66d0df8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" [0149.232] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt")) returned 0xffffffff [0150.575] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b64 [0156.485] WriteFile (in: hFile=0x1b64, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x953f854, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x953f854*=0x8b9, lpOverlapped=0x0) returned 1 [0165.167] CloseHandle (hObject=0x1b64) returned 1 [0168.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0168.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 1032 os_tid = 0x1558 [0143.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0143.504] wcscpy (in: _Dest=0x333468, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0143.504] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0143.504] wcscat (in: _Dest=0x333468, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0143.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0143.504] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0143.505] wcscmp (_String1=".", _String2=".") returned 0 [0143.505] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.505] wcscmp (_String1="..", _String2=".") returned 1 [0143.505] wcscmp (_String1="..", _String2="..") returned 0 [0143.505] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0143.505] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0143.505] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0143.505] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0143.505] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0143.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0143.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 [0143.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 1033 os_tid = 0x155c [0143.510] GetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0143.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0143.510] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.510] GetLastError () returned 0x5 [0143.511] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0143.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5aa8) returned 1 Thread: id = 1034 os_tid = 0x1560 [0143.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d850 [0143.515] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0143.515] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0143.515] wcscat (in: _Dest=0x3e0d850, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*" [0143.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0143.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0143.517] wcscmp (_String1=".", _String2=".") returned 0 [0143.517] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.517] wcscmp (_String1="..", _String2=".") returned 1 [0143.517] wcscmp (_String1="..", _String2="..") returned 0 [0143.517] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0143.517] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0143.517] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0143.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0143.517] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0143.517] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0143.517] wcscat (in: _Dest=0x3336a8, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" [0151.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0151.214] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0151.214] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0151.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0151.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 [0151.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 1035 os_tid = 0x1564 [0143.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0143.518] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0143.518] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0143.518] wcscat (in: _Dest=0x3e0e890, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*" [0143.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0143.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0143.519] wcscmp (_String1=".", _String2=".") returned 0 [0143.519] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.519] wcscmp (_String1="..", _String2=".") returned 1 [0143.519] wcscmp (_String1="..", _String2="..") returned 0 [0143.519] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0143.519] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0143.519] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0143.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7e40 [0143.519] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0143.519] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0143.519] wcscat (in: _Dest=0x2ff7e40, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" [0146.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0146.271] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0146.271] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0146.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0146.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 [0146.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 1036 os_tid = 0x1568 [0143.520] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0143.520] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0143.520] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.520] GetLastError () returned 0x5 [0143.520] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0143.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 1037 os_tid = 0x156c [0143.522] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0144.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.351] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.351] GetLastError () returned 0x5 [0144.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 1038 os_tid = 0x1570 [0143.524] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0144.352] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.352] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.353] GetLastError () returned 0x5 [0144.353] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 1039 os_tid = 0x1574 [0143.525] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0144.354] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.354] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.354] GetLastError () returned 0x5 [0144.354] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 1040 os_tid = 0x1578 [0143.527] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0144.356] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.356] GetLastError () returned 0x5 [0144.356] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 1041 os_tid = 0x157c [0143.528] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0144.358] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.358] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.358] GetLastError () returned 0x5 [0144.358] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 1042 os_tid = 0x1580 [0143.529] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0144.360] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.360] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.360] GetLastError () returned 0x5 [0144.360] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 1043 os_tid = 0x1584 [0143.530] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0144.361] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.361] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.362] GetLastError () returned 0x5 [0144.362] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbe08) returned 1 Thread: id = 1044 os_tid = 0x1588 [0143.531] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0144.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.363] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.364] GetLastError () returned 0x5 [0144.364] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 1045 os_tid = 0x158c [0143.532] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0144.365] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.365] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.365] GetLastError () returned 0x5 [0144.365] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 1046 os_tid = 0x1590 [0143.533] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0144.367] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.367] GetLastError () returned 0x5 [0144.367] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 1047 os_tid = 0x1594 [0143.534] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0144.368] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.368] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.368] GetLastError () returned 0x5 [0144.368] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e316e8) returned 1 Thread: id = 1048 os_tid = 0x1598 [0143.535] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0144.370] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.370] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.370] GetLastError () returned 0x5 [0144.370] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 1049 os_tid = 0x159c [0143.536] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0144.371] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.371] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.371] GetLastError () returned 0x5 [0144.371] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 1050 os_tid = 0x15a0 [0143.538] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0144.374] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.374] GetLastError () returned 0x5 [0144.374] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 1051 os_tid = 0x15a4 [0143.539] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0144.375] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.375] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.376] GetLastError () returned 0x5 [0144.376] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 Thread: id = 1052 os_tid = 0x15a8 [0143.540] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0144.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.385] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.385] GetLastError () returned 0x5 [0144.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 1053 os_tid = 0x15ac [0143.542] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0144.387] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0144.387] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.387] GetLastError () returned 0x5 [0144.387] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 1054 os_tid = 0x15b0 [0143.543] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0144.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.416] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.416] GetLastError () returned 0x5 [0144.416] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1055 os_tid = 0x15b4 [0143.544] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0144.417] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0144.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.418] GetLastError () returned 0x5 [0144.418] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0144.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 1056 os_tid = 0x15b8 [0143.545] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0143.875] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0143.875] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.876] GetLastError () returned 0x5 [0143.876] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0143.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 1057 os_tid = 0x15bc [0143.546] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0143.877] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0143.877] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.877] GetLastError () returned 0x5 [0143.877] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0143.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 1058 os_tid = 0x15c0 [0143.888] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0143.888] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0143.888] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.914] GetLastError () returned 0x5 [0143.914] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0143.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 1059 os_tid = 0x15cc [0143.918] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0145.927] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0145.927] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.927] GetLastError () returned 0x5 [0145.927] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0145.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df22e8) returned 1 Thread: id = 1060 os_tid = 0x15d0 [0143.922] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0145.929] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0145.929] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.929] GetLastError () returned 0x5 [0145.929] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0145.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 Thread: id = 1061 os_tid = 0x15d4 [0143.923] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0145.556] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0145.556] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.556] GetLastError () returned 0x5 [0145.556] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0145.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 1062 os_tid = 0x15d8 [0143.924] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0145.924] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0145.925] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.925] GetLastError () returned 0x5 [0145.925] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0145.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1063 os_tid = 0x15dc [0143.925] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0145.165] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0145.166] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.557] GetLastError () returned 0x5 [0145.557] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0145.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 1064 os_tid = 0x15e0 [0143.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea82c8 [0143.925] wcscpy (in: _Dest=0x3ea82c8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0143.925] wcscat (in: _Dest=0x3ea82c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0143.926] wcscat (in: _Dest=0x3ea82c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0143.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0143.926] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0143.926] wcscmp (_String1=".", _String2=".") returned 0 [0143.926] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.926] wcscmp (_String1="..", _String2=".") returned 1 [0143.926] wcscmp (_String1="..", _String2="..") returned 0 [0143.926] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.926] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0143.926] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0143.926] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.927] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0143.927] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0143.927] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0143.927] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0143.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0143.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea82c8) returned 1 [0143.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 1065 os_tid = 0x15e4 [0143.928] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0144.421] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0144.421] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.421] GetLastError () returned 0x5 [0144.421] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0144.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf6a8) returned 1 Thread: id = 1066 os_tid = 0x15e8 [0143.930] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0144.422] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0144.422] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.423] GetLastError () returned 0x5 [0144.423] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0144.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea80e8) returned 1 Thread: id = 1067 os_tid = 0x15ec [0143.931] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\5xocdpytondnxwtjz.swf")) returned 0x20 [0143.931] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf", dwFileAttributes=0x20) returned 1 [0144.986] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\5xocdpytondnxwtjz.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1120 [0144.986] GetFileSizeEx (in: hFile=0x1120, lpFileSize=0x8c4f97c | out: lpFileSize=0x8c4f97c*=91576) returned 1 [0144.986] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x165b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.986] ReadFile (in: hFile=0x1120, lpBuffer=0x8c4f958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c4f968, lpOverlapped=0x0 | out: lpBuffer=0x8c4f958*, lpNumberOfBytesRead=0x8c4f968*=0x4, lpOverlapped=0x0) returned 1 [0144.988] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0144.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0144.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0144.989] NtQuerySystemTime (in: CurrentTime=0x8c4f8f0 | out: CurrentTime=0x8c4f8f0*=132482710536372000) returned 0x0 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x46de5268 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x2fb388a9 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x13cb88b9 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x54a41e84 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x8009759 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x7b2b77ea [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x3b4d8417 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x73a3dd7 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x70d794dc [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x74ed158 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x448b505d [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x550bf082 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x5f03e90c [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x3e74a281 [0144.989] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x3ed535c5 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x68973129 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x3a307d41 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0xe1b31ae [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x10d7883c [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0xf7ddc12 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x548cb61d [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x1fb6a3e2 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x1de47d0c [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x3ab35983 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x33820810 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x1209ea6d [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x33d76bb2 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x731f9da4 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x7275f46a [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x50c87016 [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x98b57b [0144.990] RtlRandomEx (in: Seed=0x8c4f8e8 | out: Seed=0x8c4f8e8) returned 0x50c25152 [0145.001] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.001] ReadFile (in: hFile=0x1120, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.001] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff290 [0145.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0510 [0145.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0145.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0145.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0145.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0145.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0145.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0145.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0510) returned 1 [0145.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0145.002] WriteFile (in: hFile=0x1120, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0145.488] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.488] ReadFile (in: hFile=0x1120, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.488] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff3f8 [0145.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0145.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0145.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0145.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0145.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0145.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0145.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0145.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0145.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0145.489] WriteFile (in: hFile=0x1120, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0145.751] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x129b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.751] ReadFile (in: hFile=0x1120, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.751] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x129b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd4308 [0145.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0145.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0145.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0145.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0145.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0145.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0145.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0145.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0145.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4308) returned 1 [0145.752] WriteFile (in: hFile=0x1120, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x8c4f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0146.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd5e8 [0146.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0146.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1f980 [0146.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0146.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0146.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0146.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0146.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5ef8) returned 1 [0146.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15c) returned 0x3dce108 [0146.158] SetFilePointerEx (in: hFile=0x1120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.158] WriteFile (in: hFile=0x1120, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0x8c4f970, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x8c4f970*=0x15c, lpOverlapped=0x0) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f980) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f940) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0147.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0147.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db8f8 [0147.637] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf" [0147.637] wcscat (in: _Dest=0x66db8f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf.ac3a86" [0147.637] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf.ac3a86", NtPathName=0x8c4f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\5XoCdpyTOndNXwtJz.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d710 [0147.781] FlushFileBuffers (hFile=0x1120) returned 1 [0147.784] CloseHandle (hObject=0x1120) returned 1 [0147.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34790 [0147.787] wcscpy (in: _Dest=0x3e34790, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0147.787] wcscat (in: _Dest=0x3e34790, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" [0147.787] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\ac3a86-readme.txt")) returned 0x20 [0147.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0147.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 Thread: id = 1068 os_tid = 0x15f0 [0143.932] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\i6qa7e.flv")) returned 0x20 [0143.932] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv", dwFileAttributes=0x20) returned 1 [0145.006] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\i6qa7e.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x112c [0145.006] GetFileSizeEx (in: hFile=0x112c, lpFileSize=0x91ffc94 | out: lpFileSize=0x91ffc94*=63342) returned 1 [0145.006] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0xf76a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.006] ReadFile (in: hFile=0x112c, lpBuffer=0x91ffc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91ffc80, lpOverlapped=0x0 | out: lpBuffer=0x91ffc70*, lpNumberOfBytesRead=0x91ffc80*=0x4, lpOverlapped=0x0) returned 1 [0145.008] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0145.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0145.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0145.008] NtQuerySystemTime (in: CurrentTime=0x91ffc08 | out: CurrentTime=0x91ffc08*=132482710536528000) returned 0x0 [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x714247df [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7cf33bec [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7c754792 [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7c723fc1 [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x560f0e1b [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x3a2215f1 [0145.008] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x4f2f4a21 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x5133117 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x4d5b5f73 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x5d3255f6 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x6e188a6 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x213f1560 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x3602411d [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x42a5145c [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7a40e530 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x297a20c3 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x80de593 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x58b8a45e [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x69195dd8 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x4e92776f [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x51100031 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x35fd668 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7273281e [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x7ea01d48 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x2e345930 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x51e81e2c [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x640b271c [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x454b5fa4 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x35eef090 [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x49bc266c [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x309238be [0145.009] RtlRandomEx (in: Seed=0x91ffc00 | out: Seed=0x91ffc00) returned 0x68a15bda [0145.018] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.018] ReadFile (in: hFile=0x112c, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91ffc08, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x91ffc08*=0x3c00, lpOverlapped=0x0) returned 1 [0145.019] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff290 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0510 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0145.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671b100 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0145.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0145.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0510) returned 1 [0145.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0145.019] WriteFile (in: hFile=0x112c, lpBuffer=0x671b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91ffc08, lpOverlapped=0x0 | out: lpBuffer=0x671b100*, lpNumberOfBytesWritten=0x91ffc08*=0x3c00, lpOverlapped=0x0) returned 1 [0145.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671b100) returned 1 [0145.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0145.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5cf0 [0145.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0145.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5cc0 [0145.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0145.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0145.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0145.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0145.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0145.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3debe50 [0145.491] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.491] WriteFile (in: hFile=0x112c, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x91ffc88, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x91ffc88*=0x106, lpOverlapped=0x0) returned 1 [0147.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0147.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0147.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0147.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0147.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0147.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0147.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0147.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0147.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3dc5d80 [0147.670] wcscpy (in: _Dest=0x3dc5d80, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv" [0147.670] wcscat (in: _Dest=0x3dc5d80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv.ac3a86" [0147.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv.ac3a86", NtPathName=0x91ffc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\I6Qa7E.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc3a8 [0147.696] FlushFileBuffers (hFile=0x112c) returned 1 [0147.698] CloseHandle (hObject=0x112c) returned 1 [0147.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3dc5d80 [0147.709] wcscpy (in: _Dest=0x3dc5d80, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0147.709] wcscat (in: _Dest=0x3dc5d80, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" [0147.709] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\ac3a86-readme.txt")) returned 0x20 [0147.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0147.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 1069 os_tid = 0x15f4 [0143.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0143.932] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0143.932] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0143.932] wcscat (in: _Dest=0x3f29020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\*" [0143.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0143.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x326eb200, ftCreationTime.dwHighDateTime=0x1d5e65d, ftLastAccessTime.dwLowDateTime=0x927f370, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0x927f370, ftLastWriteTime.dwHighDateTime=0x1d5dfdc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0143.933] wcscmp (_String1=".", _String2=".") returned 0 [0143.933] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x326eb200, ftCreationTime.dwHighDateTime=0x1d5e65d, ftLastAccessTime.dwLowDateTime=0x927f370, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0x927f370, ftLastWriteTime.dwHighDateTime=0x1d5dfdc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.933] wcscmp (_String1="..", _String2=".") returned 1 [0143.933] wcscmp (_String1="..", _String2="..") returned 0 [0143.933] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c4fce0, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x78ac4790, ftLastAccessTime.dwHighDateTime=0x1d5e25d, ftLastWriteTime.dwLowDateTime=0x78ac4790, ftLastWriteTime.dwHighDateTime=0x1d5e25d, nFileSizeHigh=0x0, nFileSizeLow=0x3b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DID1GBMoHz0yTqN.mkv", cAlternateFileName="DID1GB~1.MKV")) returned 1 [0143.933] wcscmp (_String1="DID1GBMoHz0yTqN.mkv", _String2=".") returned 1 [0143.933] wcscmp (_String1="DID1GBMoHz0yTqN.mkv", _String2="..") returned 1 [0143.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc678 [0143.933] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0143.933] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0143.933] wcscat (in: _Dest=0x66dc678, _Source="DID1GBMoHz0yTqN.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv" [0145.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0145.607] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a12430, ftCreationTime.dwHighDateTime=0x1d5dc5e, ftLastAccessTime.dwLowDateTime=0x55f38380, ftLastAccessTime.dwHighDateTime=0x1d5e88e, ftLastWriteTime.dwLowDateTime=0x55f38380, ftLastWriteTime.dwHighDateTime=0x1d5e88e, nFileSizeHigh=0x0, nFileSizeLow=0x1073d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUadsdv.mp4", cAlternateFileName="")) returned 1 [0145.607] wcscmp (_String1="eUadsdv.mp4", _String2=".") returned 1 [0145.607] wcscmp (_String1="eUadsdv.mp4", _String2="..") returned 1 [0145.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f2f0 [0145.607] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.607] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.607] wcscat (in: _Dest=0x3e0f2f0, _Source="eUadsdv.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4" [0145.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0145.608] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d79d10, ftCreationTime.dwHighDateTime=0x1d5df9c, ftLastAccessTime.dwLowDateTime=0x3a1d0ef0, ftLastAccessTime.dwHighDateTime=0x1d5e0ab, ftLastWriteTime.dwLowDateTime=0x3a1d0ef0, ftLastWriteTime.dwHighDateTime=0x1d5e0ab, nFileSizeHigh=0x0, nFileSizeLow=0x3ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="evjkfQON6.mkv", cAlternateFileName="EVJKFQ~1.MKV")) returned 1 [0145.608] wcscmp (_String1="evjkfQON6.mkv", _String2=".") returned 1 [0145.608] wcscmp (_String1="evjkfQON6.mkv", _String2="..") returned 1 [0145.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0145.608] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.609] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.609] wcscat (in: _Dest=0x66efa60, _Source="evjkfQON6.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv" [0145.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0145.610] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a54f40, ftCreationTime.dwHighDateTime=0x1d5dcbb, ftLastAccessTime.dwLowDateTime=0x5d2d6210, ftLastAccessTime.dwHighDateTime=0x1d5dfce, ftLastWriteTime.dwLowDateTime=0x5d2d6210, ftLastWriteTime.dwHighDateTime=0x1d5dfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOTCgmAeNBHzL", cAlternateFileName="HOTCGM~1")) returned 1 [0145.610] wcscmp (_String1="HOTCgmAeNBHzL", _String2=".") returned 1 [0145.610] wcscmp (_String1="HOTCgmAeNBHzL", _String2="..") returned 1 [0145.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee520 [0145.610] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.610] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.610] wcscat (in: _Dest=0x66ee520, _Source="HOTCgmAeNBHzL" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL" [0145.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0145.611] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4049ca20, ftCreationTime.dwHighDateTime=0x1d5e2ea, ftLastAccessTime.dwLowDateTime=0xbeb0dab0, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0xbeb0dab0, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x10a93, dwReserved0=0x0, dwReserved1=0x0, cFileName="OdLi19Se8kG.flv", cAlternateFileName="ODLI19~1.FLV")) returned 1 [0145.611] wcscmp (_String1="OdLi19Se8kG.flv", _String2=".") returned 1 [0145.611] wcscmp (_String1="OdLi19Se8kG.flv", _String2="..") returned 1 [0145.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eea70 [0145.611] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.611] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.611] wcscat (in: _Dest=0x66eea70, _Source="OdLi19Se8kG.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv" [0145.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0145.612] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa50b54d0, ftCreationTime.dwHighDateTime=0x1d5dc08, ftLastAccessTime.dwLowDateTime=0xde61b450, ftLastAccessTime.dwHighDateTime=0x1d5d8ab, ftLastWriteTime.dwLowDateTime=0xde61b450, ftLastWriteTime.dwHighDateTime=0x1d5d8ab, nFileSizeHigh=0x0, nFileSizeLow=0x12355, dwReserved0=0x0, dwReserved1=0x0, cFileName="oIYgozC7QS7CQAjN.mkv", cAlternateFileName="OIYGOZ~1.MKV")) returned 1 [0145.612] wcscmp (_String1="oIYgozC7QS7CQAjN.mkv", _String2=".") returned 1 [0145.612] wcscmp (_String1="oIYgozC7QS7CQAjN.mkv", _String2="..") returned 1 [0145.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32068 [0145.612] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.612] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.612] wcscat (in: _Dest=0x3e32068, _Source="oIYgozC7QS7CQAjN.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv" [0145.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0145.614] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c54b150, ftCreationTime.dwHighDateTime=0x1d5e292, ftLastAccessTime.dwLowDateTime=0x4b1d8ba0, ftLastAccessTime.dwHighDateTime=0x1d5e31a, ftLastWriteTime.dwLowDateTime=0x4b1d8ba0, ftLastWriteTime.dwHighDateTime=0x1d5e31a, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tx50a3TJ3Jv89lF0ip.flv", cAlternateFileName="TX50A3~1.FLV")) returned 1 [0145.614] wcscmp (_String1="Tx50a3TJ3Jv89lF0ip.flv", _String2=".") returned 1 [0145.614] wcscmp (_String1="Tx50a3TJ3Jv89lF0ip.flv", _String2="..") returned 1 [0145.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31358 [0145.614] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.614] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.614] wcscat (in: _Dest=0x3e31358, _Source="Tx50a3TJ3Jv89lF0ip.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv" [0145.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0145.615] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aafbf10, ftCreationTime.dwHighDateTime=0x1d5e4af, ftLastAccessTime.dwLowDateTime=0xadd2dc20, ftLastAccessTime.dwHighDateTime=0x1d5e0d9, ftLastWriteTime.dwLowDateTime=0xadd2dc20, ftLastWriteTime.dwHighDateTime=0x1d5e0d9, nFileSizeHigh=0x0, nFileSizeLow=0x8175, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wjq7.mkv", cAlternateFileName="")) returned 1 [0145.615] wcscmp (_String1="Wjq7.mkv", _String2=".") returned 1 [0145.615] wcscmp (_String1="Wjq7.mkv", _String2="..") returned 1 [0145.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e093b0 [0145.615] wcscpy (in: _Dest=0x3e093b0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.615] wcscat (in: _Dest=0x3e093b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.615] wcscat (in: _Dest=0x3e093b0, _Source="Wjq7.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv" [0145.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e093b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0145.616] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c49b20, ftCreationTime.dwHighDateTime=0x1d5e457, ftLastAccessTime.dwLowDateTime=0xe9085690, ftLastAccessTime.dwHighDateTime=0x1d5dca5, ftLastWriteTime.dwLowDateTime=0xe9085690, ftLastWriteTime.dwHighDateTime=0x1d5dca5, nFileSizeHigh=0x0, nFileSizeLow=0x8d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_MJGJqX_wX97.mkv", cAlternateFileName="Y_MJGJ~1.MKV")) returned 1 [0145.616] wcscmp (_String1="Y_MJGJqX_wX97.mkv", _String2=".") returned 1 [0145.616] wcscmp (_String1="Y_MJGJqX_wX97.mkv", _String2="..") returned 1 [0145.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x356370 [0145.616] wcscpy (in: _Dest=0x356370, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ" [0145.616] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0145.616] wcscat (in: _Dest=0x356370, _Source="Y_MJGJqX_wX97.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv" [0145.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0145.617] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c49b20, ftCreationTime.dwHighDateTime=0x1d5e457, ftLastAccessTime.dwLowDateTime=0xe9085690, ftLastAccessTime.dwHighDateTime=0x1d5dca5, ftLastWriteTime.dwLowDateTime=0xe9085690, ftLastWriteTime.dwHighDateTime=0x1d5dca5, nFileSizeHigh=0x0, nFileSizeLow=0x8d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_MJGJqX_wX97.mkv", cAlternateFileName="Y_MJGJ~1.MKV")) returned 0 [0145.617] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0145.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0145.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0145.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 1070 os_tid = 0x15f8 [0143.934] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\kubgzjilnk7vt0rqcd.mkv")) returned 0x20 [0143.934] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv", dwFileAttributes=0x20) returned 1 [0144.123] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\kubgzjilnk7vt0rqcd.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ec [0144.124] GetFileSizeEx (in: hFile=0x5ec, lpFileSize=0x8e8fa6c | out: lpFileSize=0x8e8fa6c*=59298) returned 1 [0144.124] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0xe79e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.124] ReadFile (in: hFile=0x5ec, lpBuffer=0x8e8fa48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e8fa58, lpOverlapped=0x0 | out: lpBuffer=0x8e8fa48*, lpNumberOfBytesRead=0x8e8fa58*=0x4, lpOverlapped=0x0) returned 1 [0144.125] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0144.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d40 [0144.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0144.125] NtQuerySystemTime (in: CurrentTime=0x8e8f9e0 | out: CurrentTime=0x8e8f9e0*=132482710527792000) returned 0x0 [0144.125] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x2b7134c0 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0xc241667 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x15d7da16 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x16f2d898 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x3b728911 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x24f0d062 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x55207380 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x4e2f8737 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x622dbf5d [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x7402d6f4 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x6ff55b80 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x18c92d6 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x724be42e [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x6a0b7172 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x14a6ac38 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x367b9950 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x3fe7a4be [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0xc47e3d1 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x2f196bc4 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x7d0139ee [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x4c76b9d3 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x5dac5e76 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x69e15b6a [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0xe279241 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x1c2c6883 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x50649142 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0xa87ddb [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x112e50b4 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x280ccf55 [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x354a817b [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x61d5592e [0144.126] RtlRandomEx (in: Seed=0x8e8f9d8 | out: Seed=0x8e8f9d8) returned 0x5204e32b [0144.138] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.138] ReadFile (in: hFile=0x5ec, lpBuffer=0x6855538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e8f9e0, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesRead=0x8e8f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.138] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fd8f8 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ab0 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0144.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6859140 [0144.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0144.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0144.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0144.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0144.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0144.139] WriteFile (in: hFile=0x5ec, lpBuffer=0x6859140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e8f9e0, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesWritten=0x8e8f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0144.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0144.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e60ec8 [0144.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0144.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e608e0 [0144.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0144.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0144.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0144.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0144.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60928) returned 1 [0144.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54810 [0144.738] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.738] WriteFile (in: hFile=0x5ec, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x8e8fa60, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x8e8fa60*=0x11e, lpOverlapped=0x0) returned 1 [0144.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0144.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e608e0) returned 1 [0144.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0144.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0144.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0144.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0144.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0144.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0144.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0144.746] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv" [0144.746] wcscat (in: _Dest=0x66dc948, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv.ac3a86" [0144.746] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv.ac3a86", NtPathName=0x8e8f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\kuBgzJiLnK7Vt0rqcd.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cff8 [0144.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 [0144.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb740) returned 1 [0144.748] NtQueryInformationFile (in: FileHandle=0x5ec, IoStatusBlock=0x8e8f9b0, FileInformation=0x8e8f9b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8e8f9b0, FileInformation=0x8e8f9b8) returned 0x0 [0144.748] NtSetInformationFile (FileHandle=0x5ec, IoStatusBlock=0x8e8f9b0, FileInformation=0x8e8f9b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 [0144.749] FlushFileBuffers (hFile=0x5ec) returned 1 [0145.434] CloseHandle (hObject=0x5ec) returned 1 [0147.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b510 [0147.536] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\" [0147.536] wcscat (in: _Dest=0x3f1b510, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" [0147.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\ac3a86-readme.txt")) returned 0xffffffff [0147.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb98 [0147.690] WriteFile (in: hFile=0xb98, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e8f9f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e8f9f4*=0x8b9, lpOverlapped=0x0) returned 1 [0147.702] CloseHandle (hObject=0xb98) returned 1 [0147.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0147.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 1071 os_tid = 0x15fc [0143.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0143.934] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0143.934] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0143.935] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\*" [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f137f0 [0143.935] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\*", lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80baf90, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x3a82db80, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0x3a82db80, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80f38 [0143.935] wcscmp (_String1=".", _String2=".") returned 0 [0143.935] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80baf90, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x3a82db80, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0x3a82db80, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.935] wcscmp (_String1="..", _String2=".") returned 1 [0143.935] wcscmp (_String1="..", _String2="..") returned 0 [0143.935] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8bf7e90, ftCreationTime.dwHighDateTime=0x1d5e22e, ftLastAccessTime.dwLowDateTime=0x181d1290, ftLastAccessTime.dwHighDateTime=0x1d5dd23, ftLastWriteTime.dwLowDateTime=0x181d1290, ftLastWriteTime.dwHighDateTime=0x1d5dd23, nFileSizeHigh=0x0, nFileSizeLow=0x17e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9YlzUfe7rIm4Hn9hyW0.flv", cAlternateFileName="9YLZUF~1.FLV")) returned 1 [0143.935] wcscmp (_String1="9YlzUfe7rIm4Hn9hyW0.flv", _String2=".") returned 1 [0143.935] wcscmp (_String1="9YlzUfe7rIm4Hn9hyW0.flv", _String2="..") returned 1 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc708 [0143.935] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0143.935] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0143.935] wcscat (in: _Dest=0x66dc708, _Source="9YlzUfe7rIm4Hn9hyW0.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv" [0156.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0156.237] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de69270, ftCreationTime.dwHighDateTime=0x1d5e397, ftLastAccessTime.dwLowDateTime=0x8fe9c530, ftLastAccessTime.dwHighDateTime=0x1d5df8e, ftLastWriteTime.dwLowDateTime=0x8fe9c530, ftLastWriteTime.dwHighDateTime=0x1d5df8e, nFileSizeHigh=0x0, nFileSizeLow=0xf7f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ArDZ4YMX3VRYWijdEm.swf", cAlternateFileName="ARDZ4Y~1.SWF")) returned 1 [0156.237] wcscmp (_String1="ArDZ4YMX3VRYWijdEm.swf", _String2=".") returned 1 [0156.237] wcscmp (_String1="ArDZ4YMX3VRYWijdEm.swf", _String2="..") returned 1 [0156.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc3a8 [0156.238] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.238] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.238] wcscat (in: _Dest=0x66dc3a8, _Source="ArDZ4YMX3VRYWijdEm.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf" [0156.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0156.239] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45891730, ftCreationTime.dwHighDateTime=0x1d5e3ac, ftLastAccessTime.dwLowDateTime=0x44469920, ftLastAccessTime.dwHighDateTime=0x1d5dd2a, ftLastWriteTime.dwLowDateTime=0x44469920, ftLastWriteTime.dwHighDateTime=0x1d5dd2a, nFileSizeHigh=0x0, nFileSizeLow=0x14022, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtDCKZwA-yM95pl8IuiQ.mkv", cAlternateFileName="DTDCKZ~1.MKV")) returned 1 [0156.239] wcscmp (_String1="DtDCKZwA-yM95pl8IuiQ.mkv", _String2=".") returned 1 [0156.239] wcscmp (_String1="DtDCKZwA-yM95pl8IuiQ.mkv", _String2="..") returned 1 [0156.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db628 [0156.239] wcscpy (in: _Dest=0x66db628, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.239] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.239] wcscat (in: _Dest=0x66db628, _Source="DtDCKZwA-yM95pl8IuiQ.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv" [0156.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0156.240] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93d83e0, ftCreationTime.dwHighDateTime=0x1d5e7dc, ftLastAccessTime.dwLowDateTime=0x4bf4d120, ftLastAccessTime.dwHighDateTime=0x1d5df9e, ftLastWriteTime.dwLowDateTime=0x4bf4d120, ftLastWriteTime.dwHighDateTime=0x1d5df9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qwO2O", cAlternateFileName="")) returned 1 [0156.240] wcscmp (_String1="qwO2O", _String2=".") returned 1 [0156.240] wcscmp (_String1="qwO2O", _String2="..") returned 1 [0156.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0156.241] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.241] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.241] wcscat (in: _Dest=0x3d8be50, _Source="qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0156.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0156.242] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55191770, ftCreationTime.dwHighDateTime=0x1d5e4bc, ftLastAccessTime.dwLowDateTime=0x15e71f80, ftLastAccessTime.dwHighDateTime=0x1d5e2a4, ftLastWriteTime.dwLowDateTime=0x15e71f80, ftLastWriteTime.dwHighDateTime=0x1d5e2a4, nFileSizeHigh=0x0, nFileSizeLow=0x195c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rMBlWzrcu-zprf7.flv", cAlternateFileName="RMBLWZ~1.FLV")) returned 1 [0156.242] wcscmp (_String1="rMBlWzrcu-zprf7.flv", _String2=".") returned 1 [0156.242] wcscmp (_String1="rMBlWzrcu-zprf7.flv", _String2="..") returned 1 [0156.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59488 [0156.242] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.242] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.242] wcscat (in: _Dest=0x3d59488, _Source="rMBlWzrcu-zprf7.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv" [0156.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0156.243] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c0f7b40, ftCreationTime.dwHighDateTime=0x1d5e0a6, ftLastAccessTime.dwLowDateTime=0x8d9c910, ftLastAccessTime.dwHighDateTime=0x1d5e271, ftLastWriteTime.dwLowDateTime=0x8d9c910, ftLastWriteTime.dwHighDateTime=0x1d5e271, nFileSizeHigh=0x0, nFileSizeLow=0x1288c, dwReserved0=0x0, dwReserved1=0x0, cFileName="T8zugHYwGTpTU6tm_E63.mp4", cAlternateFileName="T8ZUGH~1.MP4")) returned 1 [0156.243] wcscmp (_String1="T8zugHYwGTpTU6tm_E63.mp4", _String2=".") returned 1 [0156.243] wcscmp (_String1="T8zugHYwGTpTU6tm_E63.mp4", _String2="..") returned 1 [0156.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc948 [0156.243] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.244] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.244] wcscat (in: _Dest=0x66dc948, _Source="T8zugHYwGTpTU6tm_E63.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4" [0156.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0156.245] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62b2e80, ftCreationTime.dwHighDateTime=0x1d5dfff, ftLastAccessTime.dwLowDateTime=0xe3a21770, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0xe3a21770, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x12b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xB4k.mkv", cAlternateFileName="")) returned 1 [0156.245] wcscmp (_String1="xB4k.mkv", _String2=".") returned 1 [0156.245] wcscmp (_String1="xB4k.mkv", _String2="..") returned 1 [0156.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f292c0 [0156.245] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.245] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.245] wcscat (in: _Dest=0x3f292c0, _Source="xB4k.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv" [0156.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f292c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0156.246] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa509d9b0, ftCreationTime.dwHighDateTime=0x1d5dcc2, ftLastAccessTime.dwLowDateTime=0xaaf3ca00, ftLastAccessTime.dwHighDateTime=0x1d5e237, ftLastWriteTime.dwLowDateTime=0xaaf3ca00, ftLastWriteTime.dwHighDateTime=0x1d5e237, nFileSizeHigh=0x0, nFileSizeLow=0x17f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="_1ueW_W6dAOHvIr.mp4", cAlternateFileName="_1UEW_~1.MP4")) returned 1 [0156.246] wcscmp (_String1="_1ueW_W6dAOHvIr.mp4", _String2=".") returned 1 [0156.246] wcscmp (_String1="_1ueW_W6dAOHvIr.mp4", _String2="..") returned 1 [0156.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a2e0 [0156.246] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f" [0156.246] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0156.246] wcscat (in: _Dest=0x3d5a2e0, _Source="_1ueW_W6dAOHvIr.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4" [0156.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0156.247] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa509d9b0, ftCreationTime.dwHighDateTime=0x1d5dcc2, ftLastAccessTime.dwLowDateTime=0xaaf3ca00, ftLastAccessTime.dwHighDateTime=0x1d5e237, ftLastWriteTime.dwLowDateTime=0xaaf3ca00, ftLastWriteTime.dwHighDateTime=0x1d5e237, nFileSizeHigh=0x0, nFileSizeLow=0x17f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="_1ueW_W6dAOHvIr.mp4", cAlternateFileName="_1UEW_~1.MP4")) returned 0 [0156.247] FindClose (in: hFindFile=0x3e80f38 | out: hFindFile=0x3e80f38) returned 1 [0156.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f137f0) returned 1 [0156.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0156.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 1072 os_tid = 0x1600 [0143.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc558 [0143.936] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0143.936] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\" [0143.936] wcscat (in: _Dest=0x66dc558, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*" [0143.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0143.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0144.424] wcscmp (_String1=".", _String2=".") returned 0 [0144.424] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.424] wcscmp (_String1="..", _String2=".") returned 1 [0144.424] wcscmp (_String1="..", _String2="..") returned 0 [0144.424] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2=".") returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2="..") returned 1 [0144.424] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2=".") returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2="..") returned 1 [0144.424] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2=".") returned 1 [0144.424] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2="..") returned 1 [0144.425] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0144.425] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0144.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0144.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0144.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 Thread: id = 1073 os_tid = 0x1604 [0143.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5f70 [0143.939] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0143.940] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\" [0143.940] wcscat (in: _Dest=0x3da5f70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*" [0143.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0143.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0143.940] wcscmp (_String1=".", _String2=".") returned 0 [0143.940] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.941] wcscmp (_String1="..", _String2=".") returned 1 [0143.941] wcscmp (_String1="..", _String2="..") returned 0 [0143.941] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257b00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1257b00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0143.941] wcscmp (_String1="VSTAClientPkgUI.dll", _String2=".") returned 1 [0143.941] wcscmp (_String1="VSTAClientPkgUI.dll", _String2="..") returned 1 [0143.941] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0143.941] wcscmp (_String1="VSTAProjectUI.dll", _String2=".") returned 1 [0143.941] wcscmp (_String1="VSTAProjectUI.dll", _String2="..") returned 1 [0143.941] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0143.941] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0143.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0143.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 [0143.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 1074 os_tid = 0x1608 [0143.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4eb8 [0143.943] wcscpy (in: _Dest=0x66d4eb8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0143.943] wcscat (in: _Dest=0x66d4eb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0143.943] wcscat (in: _Dest=0x66d4eb8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*" [0143.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0143.943] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0143.944] wcscmp (_String1=".", _String2=".") returned 0 [0143.944] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.944] wcscmp (_String1="..", _String2=".") returned 1 [0143.944] wcscmp (_String1="..", _String2="..") returned 0 [0143.944] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0143.944] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0143.944] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0143.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0143.944] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0143.944] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0143.944] wcscat (in: _Dest=0x3d8bb78, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0144.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0144.526] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0144.526] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0144.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0144.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4eb8) returned 1 [0144.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e1a8) returned 1 Thread: id = 1075 os_tid = 0x160c [0143.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4f10 [0143.945] wcscpy (in: _Dest=0x66d4f10, _Source="C:\\ProgramData\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0143.945] wcscat (in: _Dest=0x66d4f10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\" [0143.945] wcscat (in: _Dest=0x66d4f10, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*" [0143.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0143.945] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0144.429] wcscmp (_String1=".", _String2=".") returned 0 [0144.429] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.429] wcscmp (_String1="..", _String2=".") returned 1 [0144.429] wcscmp (_String1="..", _String2="..") returned 0 [0144.429] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.429] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0144.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0144.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4f10) returned 1 [0144.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4b48) returned 1 Thread: id = 1076 os_tid = 0x1610 [0143.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4f68 [0143.946] wcscpy (in: _Dest=0x66d4f68, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0143.946] wcscat (in: _Dest=0x66d4f68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0143.946] wcscat (in: _Dest=0x66d4f68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*" [0143.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0143.946] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0144.430] wcscmp (_String1=".", _String2=".") returned 0 [0144.430] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.431] wcscmp (_String1="..", _String2=".") returned 1 [0144.431] wcscmp (_String1="..", _String2="..") returned 0 [0144.431] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0144.431] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0144.431] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0144.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d238 [0144.431] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0144.431] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0144.431] wcscat (in: _Dest=0x3d8d238, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0153.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0153.572] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0153.572] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0153.572] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0153.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e008 [0153.572] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0153.572] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0153.572] wcscat (in: _Dest=0x3d8e008, _Source="S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0153.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0153.574] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0153.574] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0153.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0153.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4f68) returned 1 [0153.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62470) returned 1 Thread: id = 1077 os_tid = 0x1614 [0143.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6728 [0143.947] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0143.947] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0143.947] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\*" [0143.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0143.947] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0143.948] wcscmp (_String1=".", _String2=".") returned 0 [0143.948] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.948] wcscmp (_String1="..", _String2=".") returned 1 [0143.948] wcscmp (_String1="..", _String2="..") returned 0 [0143.948] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0143.948] wcscmp (_String1="Client", _String2=".") returned 1 [0143.948] wcscmp (_String1="Client", _String2="..") returned 1 [0143.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0143.948] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0143.948] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0143.948] wcscat (in: _Dest=0x3d8ccf0, _Source="Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0144.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0144.529] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0144.529] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0144.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0144.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0144.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75a0) returned 1 Thread: id = 1078 os_tid = 0x1618 [0143.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4fc0 [0143.953] wcscpy (in: _Dest=0x66d4fc0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0143.953] wcscat (in: _Dest=0x66d4fc0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0143.953] wcscat (in: _Dest=0x66d4fc0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\*" [0143.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0143.953] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0145.166] wcscmp (_String1=".", _String2=".") returned 0 [0145.166] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.166] wcscmp (_String1="..", _String2=".") returned 1 [0145.166] wcscmp (_String1="..", _String2="..") returned 0 [0145.166] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0145.167] wcscmp (_String1="DSS", _String2=".") returned 1 [0145.167] wcscmp (_String1="DSS", _String2="..") returned 1 [0145.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d50c8 [0145.167] wcscpy (in: _Dest=0x66d50c8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0145.167] wcscat (in: _Dest=0x66d50c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0145.167] wcscat (in: _Dest=0x66d50c8, _Source="DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0156.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d50c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0156.627] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0156.627] wcscmp (_String1="Keys", _String2=".") returned 1 [0156.627] wcscmp (_String1="Keys", _String2="..") returned 1 [0156.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1d48 [0156.628] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0156.628] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0156.628] wcscat (in: _Dest=0x2fe1d48, _Source="Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0156.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0156.629] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0156.629] wcscmp (_String1="RSA", _String2=".") returned 1 [0156.629] wcscmp (_String1="RSA", _String2="..") returned 1 [0156.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4e08 [0156.629] wcscpy (in: _Dest=0x66d4e08, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0156.629] wcscat (in: _Dest=0x66d4e08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0156.629] wcscat (in: _Dest=0x66d4e08, _Source="RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0156.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0156.630] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0156.630] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0156.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0156.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4fc0) returned 1 [0156.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e620b0) returned 1 Thread: id = 1079 os_tid = 0x161c [0143.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0143.954] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0143.954] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0143.954] wcscat (in: _Dest=0x2fe6c68, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\*" [0143.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41138 [0143.954] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80778 [0143.954] wcscmp (_String1=".", _String2=".") returned 0 [0143.954] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.954] wcscmp (_String1="..", _String2=".") returned 1 [0143.954] wcscmp (_String1="..", _String2="..") returned 0 [0143.954] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0143.955] wcscmp (_String1="Device", _String2=".") returned 1 [0143.955] wcscmp (_String1="Device", _String2="..") returned 1 [0143.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29480 [0143.955] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0143.955] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0143.955] wcscat (in: _Dest=0x3f29480, _Source="Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0144.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0144.531] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0144.531] wcscmp (_String1="Task", _String2=".") returned 1 [0144.531] wcscmp (_String1="Task", _String2="..") returned 1 [0144.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e2e0 [0144.531] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0144.531] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0144.531] wcscat (in: _Dest=0x3d8e2e0, _Source="Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0144.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0144.532] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0144.532] FindClose (in: hFindFile=0x3e80778 | out: hFindFile=0x3e80778) returned 1 [0144.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41138) returned 1 [0144.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0144.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 1080 os_tid = 0x1620 [0143.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d88 [0143.955] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\All Users\\Microsoft\\DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0143.955] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\" [0143.955] wcscat (in: _Dest=0x2fe6d88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*" [0143.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0143.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0143.956] wcscmp (_String1=".", _String2=".") returned 0 [0143.956] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.956] wcscmp (_String1="..", _String2=".") returned 1 [0143.956] wcscmp (_String1="..", _String2="..") returned 0 [0143.956] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.956] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0143.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0143.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0143.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4ca8) returned 1 Thread: id = 1081 os_tid = 0x1624 [0143.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e625b0 [0143.959] wcscpy (in: _Dest=0x3e625b0, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0143.959] wcscat (in: _Dest=0x3e625b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0143.959] wcscat (in: _Dest=0x3e625b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\*" [0143.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0143.959] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0143.959] wcscmp (_String1=".", _String2=".") returned 0 [0143.959] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.959] wcscmp (_String1="..", _String2=".") returned 1 [0143.959] wcscmp (_String1="..", _String2="..") returned 0 [0143.959] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0143.959] wcscmp (_String1="Server", _String2=".") returned 1 [0143.959] wcscmp (_String1="Server", _String2="..") returned 1 [0143.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4ca8 [0143.959] wcscpy (in: _Dest=0x66d4ca8, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0143.960] wcscat (in: _Dest=0x66d4ca8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0143.960] wcscat (in: _Dest=0x66d4ca8, _Source="Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0146.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c8 [0146.236] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0146.237] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0146.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0146.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e625b0) returned 1 [0146.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62790) returned 1 Thread: id = 1082 os_tid = 0x1628 [0143.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d5018 [0143.960] wcscpy (in: _Dest=0x66d5018, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0143.960] wcscat (in: _Dest=0x66d5018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0143.960] wcscat (in: _Dest=0x66d5018, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\*" [0143.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d402c8 [0143.960] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0143.961] wcscmp (_String1=".", _String2=".") returned 0 [0143.961] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.961] wcscmp (_String1="..", _String2=".") returned 1 [0143.961] wcscmp (_String1="..", _String2="..") returned 0 [0143.961] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0143.961] wcscmp (_String1="logs", _String2=".") returned 1 [0143.961] wcscmp (_String1="logs", _String2="..") returned 1 [0143.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d5070 [0143.961] wcscpy (in: _Dest=0x66d5070, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0143.961] wcscat (in: _Dest=0x66d5070, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0143.961] wcscat (in: _Dest=0x66d5070, _Source="logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0144.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d5070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0144.535] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0144.535] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c8) returned 1 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5018) returned 1 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62010) returned 1 Thread: id = 1083 os_tid = 0x162c [0143.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0143.961] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0143.961] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0143.961] wcscat (in: _Dest=0x2fe6d88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*" [0143.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41d40 [0143.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808f8 [0143.962] wcscmp (_String1=".", _String2=".") returned 0 [0143.962] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.962] wcscmp (_String1="..", _String2=".") returned 1 [0143.962] wcscmp (_String1="..", _String2="..") returned 0 [0143.962] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0143.962] wcscmp (_String1="Views", _String2=".") returned 1 [0143.962] wcscmp (_String1="Views", _String2="..") returned 1 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e008 [0143.962] wcscpy (in: _Dest=0x3d8e008, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0143.962] wcscat (in: _Dest=0x3d8e008, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0143.962] wcscat (in: _Dest=0x3d8e008, _Source="Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0144.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0144.537] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0144.537] FindClose (in: hFindFile=0x3e808f8 | out: hFindFile=0x3e808f8) returned 1 [0144.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d40) returned 1 [0144.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0144.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 1084 os_tid = 0x1630 [0143.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1328 [0143.964] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\All Users\\Microsoft\\HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0143.964] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\" [0143.964] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\*") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\*" [0143.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0143.964] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\HTML Help\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0143.965] wcscmp (_String1=".", _String2=".") returned 0 [0143.965] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.965] wcscmp (_String1="..", _String2=".") returned 1 [0143.965] wcscmp (_String1="..", _String2="..") returned 0 [0143.965] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.965] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4d58) returned 1 Thread: id = 1085 os_tid = 0x1634 [0143.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0143.967] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\All Users\\Microsoft\\IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0143.967] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\" [0143.967] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*" [0143.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0143.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0143.967] wcscmp (_String1=".", _String2=".") returned 0 [0143.967] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.967] wcscmp (_String1="..", _String2=".") returned 1 [0143.967] wcscmp (_String1="..", _String2="..") returned 0 [0143.967] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0143.967] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0143.967] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0143.967] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0143.967] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0143.968] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0143.968] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0143.968] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0143.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0143.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0143.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 1086 os_tid = 0x1638 [0143.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e621f0 [0143.969] wcscpy (in: _Dest=0x3e621f0, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0143.969] wcscat (in: _Dest=0x3e621f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0143.969] wcscat (in: _Dest=0x3e621f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\*") returned="C:\\Users\\All Users\\Microsoft\\MF\\*" [0143.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0143.969] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0143.970] wcscmp (_String1=".", _String2=".") returned 0 [0143.970] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.970] wcscmp (_String1="..", _String2=".") returned 1 [0143.970] wcscmp (_String1="..", _String2="..") returned 0 [0143.970] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0143.970] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0143.970] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0143.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6e48 [0143.970] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0143.970] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0143.970] wcscat (in: _Dest=0x2fe6e48, _Source="Active.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" [0144.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0144.539] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0144.539] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0144.539] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0144.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a88 [0144.539] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0144.539] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0144.540] wcscat (in: _Dest=0x2fe6a88, _Source="Pending.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" [0144.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0144.541] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0144.541] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0144.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0144.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e621f0) returned 1 [0144.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e414f8) returned 1 Thread: id = 1087 os_tid = 0x163c [0143.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e61bb0 [0143.970] wcscpy (in: _Dest=0x3e61bb0, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0143.970] wcscat (in: _Dest=0x3e61bb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0143.970] wcscat (in: _Dest=0x3e61bb0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\*" [0143.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41870 [0143.971] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80978 [0143.971] wcscmp (_String1=".", _String2=".") returned 0 [0143.971] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.971] wcscmp (_String1="..", _String2=".") returned 1 [0143.971] wcscmp (_String1="..", _String2="..") returned 0 [0143.971] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0143.971] wcscmp (_String1="8.0", _String2=".") returned 1 [0143.971] wcscmp (_String1="8.0", _String2="..") returned 1 [0143.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4d58 [0143.971] wcscpy (in: _Dest=0x66d4d58, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0143.971] wcscat (in: _Dest=0x66d4d58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0143.971] wcscat (in: _Dest=0x66d4d58, _Source="8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0146.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0146.239] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0146.239] FindClose (in: hFindFile=0x3e80978 | out: hFindFile=0x3e80978) returned 1 [0146.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41870) returned 1 [0146.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61bb0) returned 1 [0146.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62100) returned 1 Thread: id = 1088 os_tid = 0x1640 [0143.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0143.972] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0143.972] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0143.972] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\*" [0143.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40798 [0143.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0143.972] wcscmp (_String1=".", _String2=".") returned 0 [0143.972] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.972] wcscmp (_String1="..", _String2=".") returned 1 [0143.973] wcscmp (_String1="..", _String2="..") returned 0 [0143.973] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0143.973] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0143.973] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0143.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5b70 [0143.973] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0143.973] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0143.973] wcscat (in: _Dest=0x3da5b70, _Source="BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0144.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0144.544] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0144.544] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0144.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40798) returned 1 [0144.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0144.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 1089 os_tid = 0x1644 [0143.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d50c8 [0143.978] wcscpy (in: _Dest=0x66d50c8, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0143.978] wcscat (in: _Dest=0x66d50c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0143.978] wcscat (in: _Dest=0x66d50c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\*" [0143.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40530 [0143.978] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0143.979] wcscmp (_String1=".", _String2=".") returned 0 [0143.979] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.979] wcscmp (_String1="..", _String2=".") returned 1 [0143.979] wcscmp (_String1="..", _String2="..") returned 0 [0143.979] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0143.979] wcscmp (_String1="Connections", _String2=".") returned 1 [0143.979] wcscmp (_String1="Connections", _String2="..") returned 1 [0143.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f296b0 [0143.979] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0143.979] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0143.979] wcscat (in: _Dest=0x3f296b0, _Source="Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0144.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0144.547] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0144.547] wcscmp (_String1="Downloader", _String2=".") returned 1 [0144.547] wcscmp (_String1="Downloader", _String2="..") returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0144.547] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0144.547] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0144.547] wcscat (in: _Dest=0x3d8e278, _Source="Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0144.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0144.549] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0144.549] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0144.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40530) returned 1 [0144.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d50c8) returned 1 [0144.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4db0) returned 1 Thread: id = 1090 os_tid = 0x1648 [0143.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d5120 [0143.980] wcscpy (in: _Dest=0x66d5120, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0143.980] wcscat (in: _Dest=0x66d5120, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0143.980] wcscat (in: _Dest=0x66d5120, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\*" [0143.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41608 [0143.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0143.980] wcscmp (_String1=".", _String2=".") returned 0 [0143.980] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.980] wcscmp (_String1="..", _String2=".") returned 1 [0143.980] wcscmp (_String1="..", _String2="..") returned 0 [0143.980] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0143.981] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0143.981] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0143.981] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0143.981] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0143.981] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0143.981] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0143.981] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0143.981] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0143.981] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0143.981] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0143.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e480 [0143.982] wcscpy (in: _Dest=0x3d8e480, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0143.982] wcscat (in: _Dest=0x3d8e480, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0143.982] wcscat (in: _Dest=0x3d8e480, _Source="UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0146.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0146.241] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0146.241] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0146.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41608) returned 1 [0146.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5120) returned 1 [0146.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e624c0) returned 1 Thread: id = 1091 os_tid = 0x164c [0143.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0258 [0143.988] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0143.988] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0143.988] wcscat (in: _Dest=0x66f0258, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0143.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0143.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0143.989] wcscmp (_String1=".", _String2=".") returned 0 [0143.989] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.989] wcscmp (_String1="..", _String2=".") returned 1 [0143.989] wcscmp (_String1="..", _String2="..") returned 0 [0143.989] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0143.989] wcscmp (_String1="Cache", _String2=".") returned 1 [0143.989] wcscmp (_String1="Cache", _String2="..") returned 1 [0143.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc438 [0143.989] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0143.989] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0143.989] wcscat (in: _Dest=0x66dc438, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0144.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0144.551] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0144.551] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0144.551] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0144.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0eb10 [0144.551] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0144.551] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0144.551] wcscat (in: _Dest=0x3e0eb10, _Source="tokens.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0144.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0144.552] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0144.552] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0144.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0144.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 [0144.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 Thread: id = 1092 os_tid = 0x1650 [0143.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e62290 [0143.990] wcscpy (in: _Dest=0x3e62290, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0143.990] wcscat (in: _Dest=0x3e62290, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0143.990] wcscat (in: _Dest=0x3e62290, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\*" [0143.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0143.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0143.990] wcscmp (_String1=".", _String2=".") returned 0 [0143.990] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.990] wcscmp (_String1="..", _String2=".") returned 1 [0143.991] wcscmp (_String1="..", _String2="..") returned 0 [0143.991] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0143.991] wcscmp (_String1="Outbound", _String2=".") returned 1 [0143.991] wcscmp (_String1="Outbound", _String2="..") returned 1 [0143.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3ae8 [0143.991] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0143.991] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0143.991] wcscat (in: _Dest=0x2fe3ae8, _Source="Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0146.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0146.243] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0146.243] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0146.243] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0146.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e210 [0146.243] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0146.244] wcscat (in: _Dest=0x3d8e210, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0146.244] wcscat (in: _Dest=0x3d8e210, _Source="PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0146.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0146.245] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0146.245] wcscmp (_String1="StateData", _String2=".") returned 1 [0146.245] wcscmp (_String1="StateData", _String2="..") returned 1 [0146.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe0c68 [0146.245] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0146.245] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0146.245] wcscat (in: _Dest=0x2fe0c68, _Source="StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0146.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0146.246] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0146.246] wcscmp (_String1="Temp", _String2=".") returned 1 [0146.246] wcscmp (_String1="Temp", _String2="..") returned 1 [0146.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d5120 [0146.246] wcscpy (in: _Dest=0x66d5120, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0146.247] wcscat (in: _Dest=0x66d5120, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0146.247] wcscat (in: _Dest=0x66d5120, _Source="Temp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Temp") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" [0146.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5120) returned 1 [0146.247] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b96ec60, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b96ec60, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0146.247] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0146.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0146.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62290) returned 1 [0146.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62330) returned 1 Thread: id = 1093 os_tid = 0x1654 [0143.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d5178 [0143.992] wcscpy (in: _Dest=0x66d5178, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0143.992] wcscat (in: _Dest=0x66d5178, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0143.992] wcscat (in: _Dest=0x66d5178, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\*" [0143.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0143.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0143.992] wcscmp (_String1=".", _String2=".") returned 0 [0143.992] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.992] wcscmp (_String1="..", _String2=".") returned 1 [0143.992] wcscmp (_String1="..", _String2="..") returned 0 [0143.992] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0143.992] wcscmp (_String1="Data", _String2=".") returned 1 [0143.992] wcscmp (_String1="Data", _String2="..") returned 1 [0143.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe0c68 [0143.993] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0143.993] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0143.993] wcscat (in: _Dest=0x2fe0c68, _Source="Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0144.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0144.554] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0144.554] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0144.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0144.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5178) returned 1 [0144.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e626a0) returned 1 Thread: id = 1094 os_tid = 0x1658 [0143.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d09c0 [0143.994] wcscpy (in: _Dest=0x66d09c0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0143.994] wcscat (in: _Dest=0x66d09c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0143.995] wcscat (in: _Dest=0x66d09c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*" [0143.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0143.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0143.995] wcscmp (_String1=".", _String2=".") returned 0 [0143.995] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.995] wcscmp (_String1="..", _String2=".") returned 1 [0143.995] wcscmp (_String1="..", _String2="..") returned 0 [0143.995] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0143.995] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0143.995] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0143.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcb88 [0143.995] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0143.995] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0143.995] wcscat (in: _Dest=0x66dcb88, _Source="Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0144.557] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0144.557] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0144.557] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0144.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a3f0 [0144.557] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0144.557] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0144.557] wcscat (in: _Dest=0x3d5a3f0, _Source="EEBsYm5.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0144.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0144.559] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0144.559] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0144.559] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0144.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a2e0 [0144.559] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0144.559] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0144.559] wcscat (in: _Dest=0x3d5a2e0, _Source="guest.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" [0144.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0144.561] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0144.561] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0144.561] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0144.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda178 [0144.561] wcscpy (in: _Dest=0x3eda178, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0144.561] wcscat (in: _Dest=0x3eda178, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0144.561] wcscat (in: _Dest=0x3eda178, _Source="user.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" [0144.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0144.562] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0144.562] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0144.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0144.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0144.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae10) returned 1 Thread: id = 1095 os_tid = 0x165c [0143.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d51d0 [0143.997] wcscpy (in: _Dest=0x66d51d0, _Source="C:\\Users\\All Users\\Microsoft\\Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0143.997] wcscat (in: _Dest=0x66d51d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\") returned="C:\\Users\\All Users\\Microsoft\\Vault\\" [0143.997] wcscat (in: _Dest=0x66d51d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\*") returned="C:\\Users\\All Users\\Microsoft\\Vault\\*" [0143.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0143.997] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0143.998] wcscmp (_String1=".", _String2=".") returned 0 [0143.998] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.998] wcscmp (_String1="..", _String2=".") returned 1 [0143.998] wcscmp (_String1="..", _String2="..") returned 0 [0143.998] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.998] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0143.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0143.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d51d0) returned 1 [0143.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61de0) returned 1 Thread: id = 1096 os_tid = 0x1660 [0143.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d51d0 [0143.999] wcscpy (in: _Dest=0x66d51d0, _Source="C:\\Users\\All Users\\Microsoft\\VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0143.999] wcscat (in: _Dest=0x66d51d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\" [0144.000] wcscat (in: _Dest=0x66d51d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\*") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\*" [0144.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0144.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0144.000] wcscmp (_String1=".", _String2=".") returned 0 [0144.000] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.000] wcscmp (_String1="..", _String2=".") returned 1 [0144.000] wcscmp (_String1="..", _String2="..") returned 0 [0144.000] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.000] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d51d0) returned 1 [0144.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62650) returned 1 Thread: id = 1097 os_tid = 0x1664 [0144.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d51d0 [0144.002] wcscpy (in: _Dest=0x66d51d0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0144.002] wcscat (in: _Dest=0x66d51d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0144.002] wcscat (in: _Dest=0x66d51d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\*" [0144.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0144.002] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0144.002] wcscmp (_String1=".", _String2=".") returned 0 [0144.002] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.002] wcscmp (_String1="..", _String2=".") returned 1 [0144.002] wcscmp (_String1="..", _String2="..") returned 0 [0144.002] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0144.002] wcscmp (_String1="AIT", _String2=".") returned 1 [0144.002] wcscmp (_String1="AIT", _String2="..") returned 1 [0144.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0144.002] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0144.002] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0144.002] wcscat (in: _Dest=0x2fe66c8, _Source="AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0156.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0156.585] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0156.585] wcscmp (_String1="Caches", _String2=".") returned 1 [0156.585] wcscmp (_String1="Caches", _String2="..") returned 1 [0156.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0156.585] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.585] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.585] wcscat (in: _Dest=0x2fe6c08, _Source="Caches" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Caches") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches" [0156.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0156.585] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0156.585] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0156.585] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0156.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da4af0 [0156.585] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.585] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.585] wcscat (in: _Dest=0x3da4af0, _Source="DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0156.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0156.586] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0156.586] wcscmp (_String1="DRM", _String2=".") returned 1 [0156.586] wcscmp (_String1="DRM", _String2="..") returned 1 [0156.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c08 [0156.586] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.586] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.586] wcscat (in: _Dest=0x2fe6c08, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0156.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0156.587] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0156.587] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0156.587] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0156.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29bf0 [0156.587] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.587] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.587] wcscat (in: _Dest=0x3f29bf0, _Source="GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0156.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0156.589] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0156.589] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0156.589] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0156.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d9e8 [0156.589] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.589] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.589] wcscat (in: _Dest=0x674d9e8, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0156.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0156.590] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0156.590] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0156.590] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0156.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e960 [0156.590] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.590] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.590] wcscat (in: _Dest=0x3d8e960, _Source="Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0156.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0156.591] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0156.591] wcscmp (_String1="Sqm", _String2=".") returned 1 [0156.591] wcscmp (_String1="Sqm", _String2="..") returned 1 [0156.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6728 [0156.592] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.592] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.592] wcscat (in: _Dest=0x2fe6728, _Source="Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0156.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0156.593] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0156.593] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0156.593] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0156.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0156.593] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.593] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.593] wcscat (in: _Dest=0x3d8bb78, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0156.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0156.594] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0156.594] wcscmp (_String1="Templates", _String2=".") returned 1 [0156.594] wcscmp (_String1="Templates", _String2="..") returned 1 [0156.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de00 [0156.594] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.594] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.594] wcscat (in: _Dest=0x3d8de00, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0156.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0156.595] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0156.595] wcscmp (_String1="WER", _String2=".") returned 1 [0156.595] wcscmp (_String1="WER", _String2="..") returned 1 [0156.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe3ae8 [0156.595] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0156.595] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0156.595] wcscat (in: _Dest=0x2fe3ae8, _Source="WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0156.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0156.597] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0156.597] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0156.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0156.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d51d0) returned 1 [0156.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4e08) returned 1 Thread: id = 1098 os_tid = 0x1668 [0144.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0144.432] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0144.432] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0144.432] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\*" [0144.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0144.432] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0144.432] wcscmp (_String1=".", _String2=".") returned 0 [0144.432] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.432] wcscmp (_String1="..", _String2=".") returned 1 [0144.432] wcscmp (_String1="..", _String2="..") returned 0 [0144.432] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0144.432] wcscmp (_String1="MSFax", _String2=".") returned 1 [0144.433] wcscmp (_String1="MSFax", _String2="..") returned 1 [0144.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8b490 [0144.433] wcscpy (in: _Dest=0x3d8b490, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0144.433] wcscat (in: _Dest=0x3d8b490, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0144.433] wcscat (in: _Dest=0x3d8b490, _Source="MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0147.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0147.377] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0147.377] wcscmp (_String1="MSScan", _String2=".") returned 1 [0147.377] wcscmp (_String1="MSScan", _String2="..") returned 1 [0147.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e9c8 [0147.378] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0147.378] wcscat (in: _Dest=0x3d8e9c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0147.378] wcscat (in: _Dest=0x3d8e9c8, _Source="MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0147.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0147.379] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0147.379] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0147.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0147.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0147.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4e60) returned 1 Thread: id = 1099 os_tid = 0x1670 [0144.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20 [0144.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0144.434] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.434] GetLastError () returned 0x5 [0144.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0144.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 1100 os_tid = 0x1674 [0144.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20 [0144.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0144.437] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.437] GetLastError () returned 0x5 [0144.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0144.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 1101 os_tid = 0x1678 [0144.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e478 [0144.438] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0144.439] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0144.439] wcscat (in: _Dest=0x36e478, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*" [0144.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0144.439] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0144.439] wcscmp (_String1=".", _String2=".") returned 0 [0144.439] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.439] wcscmp (_String1="..", _String2=".") returned 1 [0144.439] wcscmp (_String1="..", _String2="..") returned 0 [0144.439] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0144.439] wcscmp (_String1="en-US", _String2=".") returned 1 [0144.439] wcscmp (_String1="en-US", _String2="..") returned 1 [0144.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354c60 [0144.439] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0144.439] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0144.439] wcscat (in: _Dest=0x354c60, _Source="en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0149.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x354c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0149.324] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0149.324] wcscmp (_String1="MSTTSCommon.dll", _String2=".") returned 1 [0149.324] wcscmp (_String1="MSTTSCommon.dll", _String2="..") returned 1 [0149.324] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0149.324] wcscmp (_String1="MSTTSDecWrp.dll", _String2=".") returned 1 [0149.324] wcscmp (_String1="MSTTSDecWrp.dll", _String2="..") returned 1 [0149.324] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0149.324] wcscmp (_String1="MSTTSEngine.dll", _String2=".") returned 1 [0149.324] wcscmp (_String1="MSTTSEngine.dll", _String2="..") returned 1 [0149.324] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0149.324] wcscmp (_String1="MSTTSLoc.dll", _String2=".") returned 1 [0149.324] wcscmp (_String1="MSTTSLoc.dll", _String2="..") returned 1 [0149.324] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0149.324] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0149.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0149.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 [0149.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 1102 os_tid = 0x167c [0144.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf")) returned 0x20 [0144.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0144.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.440] GetLastError () returned 0x5 [0144.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0144.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 1103 os_tid = 0x1680 [0144.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf")) returned 0x20 [0144.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0144.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.442] GetLastError () returned 0x5 [0144.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0144.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 1104 os_tid = 0x1684 [0144.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf")) returned 0x20 [0144.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0144.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.444] GetLastError () returned 0x5 [0144.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0144.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 1105 os_tid = 0x1688 [0144.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf")) returned 0x20 [0145.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0145.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.559] GetLastError () returned 0x5 [0145.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0145.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 1106 os_tid = 0x168c [0144.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf")) returned 0x20 [0145.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0145.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.756] GetLastError () returned 0x5 [0145.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0145.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 1107 os_tid = 0x1690 [0144.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf")) returned 0x20 [0145.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0145.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.759] GetLastError () returned 0x5 [0145.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0145.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 1108 os_tid = 0x1694 [0144.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf")) returned 0x20 [0145.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0145.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.760] GetLastError () returned 0x5 [0145.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0145.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 1109 os_tid = 0x1698 [0144.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf")) returned 0x20 [0145.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0145.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.764] GetLastError () returned 0x5 [0145.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0145.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 1110 os_tid = 0x169c [0144.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf")) returned 0x20 [0145.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0145.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.765] GetLastError () returned 0x5 [0145.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0145.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 1111 os_tid = 0x16a0 [0144.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav")) returned 0x20 [0145.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0145.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.767] GetLastError () returned 0x5 [0145.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0145.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 1112 os_tid = 0x16a4 [0144.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf")) returned 0x20 [0145.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0145.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.769] GetLastError () returned 0x5 [0145.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0145.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 1113 os_tid = 0x16a8 [0144.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf")) returned 0x20 [0145.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0145.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.770] GetLastError () returned 0x5 [0145.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0145.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 1114 os_tid = 0x16ac [0144.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf")) returned 0x20 [0145.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0145.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.755] GetLastError () returned 0x5 [0145.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0145.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 1115 os_tid = 0x16b0 [0144.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf")) returned 0x20 [0145.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0145.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.776] GetLastError () returned 0x5 [0145.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0145.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 1116 os_tid = 0x16b4 [0144.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf")) returned 0x20 [0145.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0145.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.778] GetLastError () returned 0x5 [0145.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0145.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 1117 os_tid = 0x16b8 [0144.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf")) returned 0x20 [0145.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0145.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.779] GetLastError () returned 0x5 [0145.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0145.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 1118 os_tid = 0x16bc [0144.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf")) returned 0x20 [0145.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0145.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.780] GetLastError () returned 0x5 [0145.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0145.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 1119 os_tid = 0x16c0 [0144.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf")) returned 0x20 [0145.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0145.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.782] GetLastError () returned 0x5 [0145.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0145.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 1120 os_tid = 0x16c4 [0144.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf")) returned 0x20 [0145.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0145.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.783] GetLastError () returned 0x5 [0145.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0145.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 1121 os_tid = 0x16c8 [0144.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf")) returned 0x20 [0145.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0145.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.785] GetLastError () returned 0x5 [0145.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0145.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 1122 os_tid = 0x16cc [0144.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf")) returned 0x20 [0145.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0145.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.787] GetLastError () returned 0x5 [0145.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 1123 os_tid = 0x16d0 [0144.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf")) returned 0x20 [0145.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0145.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.788] GetLastError () returned 0x5 [0145.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0145.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 1124 os_tid = 0x16d4 [0144.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf")) returned 0x20 [0145.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0145.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.790] GetLastError () returned 0x5 [0145.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0145.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 1125 os_tid = 0x16d8 [0144.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf")) returned 0x20 [0145.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0145.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.523] GetLastError () returned 0x5 [0145.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0145.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 1126 os_tid = 0x16dc [0144.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf")) returned 0x20 [0145.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0145.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.754] GetLastError () returned 0x5 [0145.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0145.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 1127 os_tid = 0x16e0 [0144.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf")) returned 0x20 [0145.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0145.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.772] GetLastError () returned 0x5 [0145.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0145.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 1128 os_tid = 0x16e4 [0144.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf")) returned 0x20 [0145.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0145.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.773] GetLastError () returned 0x5 [0145.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0145.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 1129 os_tid = 0x16e8 [0144.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf")) returned 0x20 [0145.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0145.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.775] GetLastError () returned 0x5 [0145.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0145.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 1130 os_tid = 0x16ec [0145.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf")) returned 0x20 [0145.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0145.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.762] GetLastError () returned 0x5 [0145.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0145.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 1131 os_tid = 0x16fc [0145.179] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0146.551] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.551] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.551] GetLastError () returned 0x5 [0146.551] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 Thread: id = 1132 os_tid = 0x1700 [0145.179] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0146.553] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.553] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.553] GetLastError () returned 0x5 [0146.553] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb478) returned 1 Thread: id = 1133 os_tid = 0x1704 [0145.180] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0146.555] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.555] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.555] GetLastError () returned 0x5 [0146.555] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 1134 os_tid = 0x1708 [0145.181] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0146.556] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.557] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.557] GetLastError () returned 0x5 [0146.557] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbff8) returned 1 Thread: id = 1135 os_tid = 0x170c [0145.181] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0146.559] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.559] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.559] GetLastError () returned 0x5 [0146.559] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 1136 os_tid = 0x1710 [0145.182] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0146.561] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.561] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.561] GetLastError () returned 0x5 [0146.561] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 Thread: id = 1137 os_tid = 0x1714 [0145.182] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0146.562] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.563] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.563] GetLastError () returned 0x5 [0146.563] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 Thread: id = 1138 os_tid = 0x1718 [0145.183] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0146.564] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.564] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.564] GetLastError () returned 0x5 [0146.564] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edaff8) returned 1 Thread: id = 1139 os_tid = 0x171c [0145.184] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0146.566] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.566] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.566] GetLastError () returned 0x5 [0146.566] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 1140 os_tid = 0x1720 [0145.185] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0146.569] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.569] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.569] GetLastError () returned 0x5 [0146.569] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda4f8) returned 1 Thread: id = 1141 os_tid = 0x1724 [0145.185] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0146.570] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.570] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.570] GetLastError () returned 0x5 [0146.570] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 1142 os_tid = 0x1728 [0145.186] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0146.572] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.572] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.572] GetLastError () returned 0x5 [0146.572] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 1143 os_tid = 0x172c [0145.187] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0146.573] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.573] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.573] GetLastError () returned 0x5 [0146.573] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 1144 os_tid = 0x1730 [0145.187] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0146.575] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.575] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.575] GetLastError () returned 0x5 [0146.575] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda878) returned 1 Thread: id = 1145 os_tid = 0x1734 [0145.188] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0146.576] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0146.577] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.577] GetLastError () returned 0x5 [0146.577] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0146.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 1146 os_tid = 0x1738 [0145.188] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl")) returned 0x2022 [0146.578] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0146.578] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.578] GetLastError () returned 0x5 [0146.578] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0146.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 1147 os_tid = 0x173c [0145.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma")) returned 0x20 [0145.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0145.190] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.190] GetLastError () returned 0x5 [0145.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0145.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 1148 os_tid = 0x1740 [0145.192] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\atvky6jytlu1hn.ots")) returned 0x20 [0145.192] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots", dwFileAttributes=0x20) returned 1 [0145.192] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\atvky6jytlu1hn.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0145.193] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0x8d6f894 | out: lpFileSize=0x8d6f894*=93701) returned 1 [0145.193] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x16e01, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.193] ReadFile (in: hFile=0x1040, lpBuffer=0x8d6f870, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d6f880, lpOverlapped=0x0 | out: lpBuffer=0x8d6f870*, lpNumberOfBytesRead=0x8d6f880*=0x4, lpOverlapped=0x0) returned 1 [0145.195] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0145.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0145.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0145.195] NtQuerySystemTime (in: CurrentTime=0x8d6f808 | out: CurrentTime=0x8d6f808*=132482710538400000) returned 0x0 [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x7f92cd63 [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x72c416ab [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x5ada6d38 [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x48b3a75d [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x451bda0e [0145.195] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x1a8af921 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x2f6fc968 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x66db0493 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x2e315153 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x45734e5f [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0xa9833a1 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x1c570812 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x62e4db96 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x635e3b2f [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x50d86b89 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x2e998da8 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x1ad2c72b [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x54008e49 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x414c5e70 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x100e044 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x75cbf68a [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x27eddff6 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x53dc317 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x62c9632c [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x4e0a68a [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x6df03afb [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x402a9936 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x7ad8ebc [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x7694878f [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x65ef34e7 [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x1cf98b3a [0145.196] RtlRandomEx (in: Seed=0x8d6f800 | out: Seed=0x8d6f800) returned 0x23a49d3f [0145.210] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.210] ReadFile (in: hFile=0x1040, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0145.210] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff488 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0145.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0145.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0145.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0145.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0145.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff488) returned 1 [0145.212] WriteFile (in: hFile=0x1040, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0147.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0147.491] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.491] ReadFile (in: hFile=0x1040, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0147.491] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1d50 [0147.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0147.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0147.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0147.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0147.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0147.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0147.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0147.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0147.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1d50) returned 1 [0147.492] WriteFile (in: hFile=0x1040, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0148.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0148.271] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x13205, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.271] ReadFile (in: hFile=0x1040, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0148.271] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x13205, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4238 [0148.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0148.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0148.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0148.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688dd28 [0148.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0148.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0148.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0148.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4238) returned 1 [0148.272] WriteFile (in: hFile=0x1040, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d6f808, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0x8d6f808*=0x3c00, lpOverlapped=0x0) returned 1 [0148.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0148.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e480 [0148.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0148.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fb00 [0148.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0148.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0148.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0148.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ebb8) returned 1 [0148.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcde38 [0148.499] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.500] WriteFile (in: hFile=0x1040, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x8d6f888, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x8d6f888*=0x156, lpOverlapped=0x0) returned 1 [0149.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0149.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fb00) returned 1 [0149.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f680) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0149.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36e478 [0149.410] wcscpy (in: _Dest=0x36e478, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots" [0149.410] wcscat (in: _Dest=0x36e478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots.ac3a86" [0149.410] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots.ac3a86", NtPathName=0x8d6f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\aTvKY6JYtlu1Hn.ots.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0db70 [0149.413] FlushFileBuffers (hFile=0x1040) returned 1 [0150.429] CloseHandle (hObject=0x1040) returned 1 [0150.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0150.474] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0150.474] wcscat (in: _Dest=0x3f1b510, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0150.474] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0x20 [0150.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0150.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 Thread: id = 1149 os_tid = 0x1744 [0145.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\izrs1zrr84to.ods")) returned 0x20 [0145.220] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods", dwFileAttributes=0x20) returned 1 [0145.220] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\izrs1zrr84to.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1038 [0145.220] GetFileSizeEx (in: hFile=0x1038, lpFileSize=0x90ff9f4 | out: lpFileSize=0x90ff9f4*=59240) returned 1 [0145.221] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0xe764, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.221] ReadFile (in: hFile=0x1038, lpBuffer=0x90ff9d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90ff9e0, lpOverlapped=0x0 | out: lpBuffer=0x90ff9d0*, lpNumberOfBytesRead=0x90ff9e0*=0x4, lpOverlapped=0x0) returned 1 [0145.223] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0145.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0145.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0145.223] NtQuerySystemTime (in: CurrentTime=0x90ff968 | out: CurrentTime=0x90ff968*=132482710538712000) returned 0x0 [0145.223] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x3e0eb122 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x38d548dc [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x290e94b2 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x7de7a6a4 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x7e6cf150 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x1e153f0f [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x42165a8c [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x3f47dc4f [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x6d201c1a [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x4afd4e5c [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x5a6da1e2 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x3895c746 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x7ffd8155 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x34a008a8 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x31464072 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x552e4777 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x2a23d66d [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x4499ad5f [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x4051ba5d [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x1e1d8469 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x2c91ba4b [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x1d903923 [0145.224] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0xd7e3321 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x5dc0e677 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x567d8eb5 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0xdd7069e [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x2ce7b8 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x309bb6a8 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x16240bce [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x79b399ea [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x7a574d11 [0145.225] RtlRandomEx (in: Seed=0x90ff960 | out: Seed=0x90ff960) returned 0x22f78b57 [0145.255] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.255] ReadFile (in: hFile=0x1038, lpBuffer=0x68a0950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x90ff968, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesRead=0x90ff968*=0x3c00, lpOverlapped=0x0) returned 1 [0145.255] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff1b8 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0145.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a4558 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0145.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0145.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0145.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0145.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0145.256] WriteFile (in: hFile=0x1038, lpBuffer=0x68a4558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x90ff968, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesWritten=0x90ff968*=0x3c00, lpOverlapped=0x0) returned 1 [0147.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0147.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0147.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19850 [0147.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0147.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19ce8 [0147.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0147.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0147.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0147.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1498) returned 1 [0147.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d54810 [0147.612] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.612] WriteFile (in: hFile=0x1038, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x90ff9e8, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x90ff9e8*=0x112, lpOverlapped=0x0) returned 1 [0147.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0147.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ce8) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0147.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0147.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66efe18 [0147.676] wcscpy (in: _Dest=0x66efe18, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods" [0147.676] wcscat (in: _Dest=0x66efe18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods.ac3a86" [0147.676] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods.ac3a86", NtPathName=0x90ff960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\iZRs1zRr84To.ods.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959540 [0147.699] FlushFileBuffers (hFile=0x1038) returned 1 [0147.704] CloseHandle (hObject=0x1038) returned 1 [0147.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0147.714] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0147.714] wcscat (in: _Dest=0x3f1b510, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0147.714] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0xffffffff [0147.715] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1538 [0147.720] WriteFile (in: hFile=0x1538, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x90ff97c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x90ff97c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.731] CloseHandle (hObject=0x1538) returned 1 [0147.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0147.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 1150 os_tid = 0x1748 [0145.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\pmkmmhargz9t.xls")) returned 0x20 [0145.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls", dwFileAttributes=0x20) returned 1 [0148.616] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\pmkmmhargz9t.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1074 [0148.616] GetFileSizeEx (in: hFile=0x1074, lpFileSize=0x913fd0c | out: lpFileSize=0x913fd0c*=55029) returned 1 [0148.616] SetFilePointerEx (in: hFile=0x1074, liDistanceToMove=0xd6f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.616] ReadFile (in: hFile=0x1074, lpBuffer=0x913fce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x913fcf8, lpOverlapped=0x0 | out: lpBuffer=0x913fce8*, lpNumberOfBytesRead=0x913fcf8*=0x4, lpOverlapped=0x0) returned 1 [0148.618] SetFilePointerEx (in: hFile=0x1074, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0148.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0148.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0148.619] NtQuerySystemTime (in: CurrentTime=0x913fc80 | out: CurrentTime=0x913fc80*=132482710572720000) returned 0x0 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x2b01b713 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x40fdd1de [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x49f668f2 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x20d7e20f [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x5d81c2f1 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x3c10830e [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x6037f8b4 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x17de0053 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x668b7b71 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x78335090 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x1bdcd6ff [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x6af463cc [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x12fa6a61 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x32f26c38 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x10a3ff68 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x6fe761de [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x7b7972a7 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x723dcf33 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x508cd52b [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x5dbeb4f3 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x12abbca0 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x10ced828 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x4e5e24c [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x6c91f671 [0148.619] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x413da198 [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0xbe6d063 [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x620c1a5b [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x5059f6b8 [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x68bbec12 [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x609c5025 [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x381876de [0148.620] RtlRandomEx (in: Seed=0x913fc78 | out: Seed=0x913fc78) returned 0x16724bb5 [0148.632] SetFilePointerEx (in: hFile=0x1074, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.632] ReadFile (in: hFile=0x1074, lpBuffer=0x68a0950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x913fc80, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesRead=0x913fc80*=0x3c00, lpOverlapped=0x0) returned 1 [0148.632] SetFilePointerEx (in: hFile=0x1074, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f038 [0148.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0148.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0148.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a4558 [0148.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0148.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0148.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0148.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.633] WriteFile (in: hFile=0x1074, lpBuffer=0x68a4558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x913fc80, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesWritten=0x913fc80*=0x3c00, lpOverlapped=0x0) returned 1 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0148.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19850 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19ce8 [0148.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3041720 [0148.877] SetFilePointerEx (in: hFile=0x1074, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.878] WriteFile (in: hFile=0x1074, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x913fd00, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x913fd00*=0x112, lpOverlapped=0x0) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ce8) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0148.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0148.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26590 [0148.979] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls" [0148.979] wcscat (in: _Dest=0x3f26590, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls.ac3a86" [0148.979] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls.ac3a86", NtPathName=0x913fc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\PMKmmHaRGZ9t.xls.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958668 [0149.152] FlushFileBuffers (hFile=0x1074) returned 1 [0149.167] CloseHandle (hObject=0x1074) returned 1 [0149.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.168] wcscpy (in: _Dest=0x3f1b2b8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0149.169] wcscat (in: _Dest=0x3f1b2b8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0149.169] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0x20 [0149.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 1151 os_tid = 0x174c [0145.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e08db0 [0145.260] wcscpy (in: _Dest=0x3e08db0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" [0145.260] wcscat (in: _Dest=0x3e08db0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0145.260] wcscat (in: _Dest=0x3e08db0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\*") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\*" [0145.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0145.260] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87f2a1e0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0x905f400, ftLastAccessTime.dwHighDateTime=0x1d5e333, ftLastWriteTime.dwLowDateTime=0x905f400, ftLastWriteTime.dwHighDateTime=0x1d5e333, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0145.261] wcscmp (_String1=".", _String2=".") returned 0 [0145.261] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87f2a1e0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0x905f400, ftLastAccessTime.dwHighDateTime=0x1d5e333, ftLastWriteTime.dwLowDateTime=0x905f400, ftLastWriteTime.dwHighDateTime=0x1d5e333, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.261] wcscmp (_String1="..", _String2=".") returned 1 [0145.261] wcscmp (_String1="..", _String2="..") returned 0 [0145.261] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5baec80, ftCreationTime.dwHighDateTime=0x1d5db84, ftLastAccessTime.dwLowDateTime=0xc4597620, ftLastAccessTime.dwHighDateTime=0x1d5dbf7, ftLastWriteTime.dwLowDateTime=0xc4597620, ftLastWriteTime.dwHighDateTime=0x1d5dbf7, nFileSizeHigh=0x0, nFileSizeLow=0xd528, dwReserved0=0x0, dwReserved1=0x0, cFileName="I0By-T57e-A.xls", cAlternateFileName="I0BY-T~1.XLS")) returned 1 [0145.261] wcscmp (_String1="I0By-T57e-A.xls", _String2=".") returned 1 [0145.261] wcscmp (_String1="I0By-T57e-A.xls", _String2="..") returned 1 [0145.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e6b0 [0145.261] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" [0145.261] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0145.261] wcscat (in: _Dest=0x3e0e6b0, _Source="I0By-T57e-A.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls" [0150.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0150.371] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ebda2f0, ftCreationTime.dwHighDateTime=0x1d5e066, ftLastAccessTime.dwLowDateTime=0xd66bb180, ftLastAccessTime.dwHighDateTime=0x1d5e899, ftLastWriteTime.dwLowDateTime=0xd66bb180, ftLastWriteTime.dwHighDateTime=0x1d5e899, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MrCXNa1TCEdLNqpv.docx", cAlternateFileName="MRCXNA~1.DOC")) returned 1 [0150.371] wcscmp (_String1="MrCXNa1TCEdLNqpv.docx", _String2=".") returned 1 [0150.371] wcscmp (_String1="MrCXNa1TCEdLNqpv.docx", _String2="..") returned 1 [0150.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5c770 [0150.372] wcscpy (in: _Dest=0x3e5c770, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" [0150.372] wcscat (in: _Dest=0x3e5c770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0150.372] wcscat (in: _Dest=0x3e5c770, _Source="MrCXNa1TCEdLNqpv.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx" [0150.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0150.373] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe786770, ftCreationTime.dwHighDateTime=0x1d5e25f, ftLastAccessTime.dwLowDateTime=0xfb170a00, ftLastAccessTime.dwHighDateTime=0x1d5e5da, ftLastWriteTime.dwLowDateTime=0xfb170a00, ftLastWriteTime.dwHighDateTime=0x1d5e5da, nFileSizeHigh=0x0, nFileSizeLow=0x17198, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshmpZz.odt", cAlternateFileName="")) returned 1 [0150.373] wcscmp (_String1="mshmpZz.odt", _String2=".") returned 1 [0150.373] wcscmp (_String1="mshmpZz.odt", _String2="..") returned 1 [0150.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bce0 [0150.373] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i" [0150.373] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0150.373] wcscat (in: _Dest=0x32bce0, _Source="mshmpZz.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt" [0150.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0150.374] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe786770, ftCreationTime.dwHighDateTime=0x1d5e25f, ftLastAccessTime.dwLowDateTime=0xfb170a00, ftLastAccessTime.dwHighDateTime=0x1d5e5da, ftLastWriteTime.dwLowDateTime=0xfb170a00, ftLastWriteTime.dwHighDateTime=0x1d5e5da, nFileSizeHigh=0x0, nFileSizeLow=0x17198, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshmpZz.odt", cAlternateFileName="")) returned 0 [0150.374] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0150.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0150.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08db0) returned 1 [0150.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 Thread: id = 1152 os_tid = 0x1750 [0145.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu")) returned 0x20 [0145.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0145.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.934] GetLastError () returned 0x5 [0145.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0145.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 1153 os_tid = 0x1754 [0145.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 0x20 [0145.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0145.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.936] GetLastError () returned 0x5 [0145.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0145.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 1154 os_tid = 0x1758 [0145.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 0x20 [0145.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0145.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.933] GetLastError () returned 0x5 [0145.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0145.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 1155 os_tid = 0x175c [0145.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 0x20 [0145.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0145.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.938] GetLastError () returned 0x5 [0145.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0145.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 1156 os_tid = 0x1760 [0145.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu")) returned 0x20 [0145.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0145.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.574] GetLastError () returned 0x5 [0145.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0145.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 1157 os_tid = 0x1764 [0145.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda")) returned 0x20 [0145.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0145.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.576] GetLastError () returned 0x5 [0145.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0145.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 1158 os_tid = 0x1768 [0145.279] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\t4mp8tq0.ots")) returned 0x20 [0145.279] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots", dwFileAttributes=0x20) returned 1 [0148.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\t4mp8tq0.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xadc [0148.634] GetFileSizeEx (in: hFile=0xadc, lpFileSize=0x8fbf9a4 | out: lpFileSize=0x8fbf9a4*=48432) returned 1 [0148.634] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0xbd2c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.634] ReadFile (in: hFile=0xadc, lpBuffer=0x8fbf980, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fbf990, lpOverlapped=0x0 | out: lpBuffer=0x8fbf980*, lpNumberOfBytesRead=0x8fbf990*=0x4, lpOverlapped=0x0) returned 1 [0148.635] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0148.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0148.636] NtQuerySystemTime (in: CurrentTime=0x8fbf918 | out: CurrentTime=0x8fbf918*=132482710572876000) returned 0x0 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x707e25a2 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x68a7d548 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x11d61b2e [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x2e8b74de [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x26306f69 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0xb5d3de2 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x4d8f9f13 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x64d55268 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x5073f526 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x277eb3f9 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x417805e3 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x6dc1025e [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x7469f424 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x4a29dae5 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x1bd02737 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x113a1f4b [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x741a54f8 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x3e424058 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x55616fee [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x46365176 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x42f53857 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x24376d0b [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x30d21ab1 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x6946da0 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x5263f9ea [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x7e8319fe [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x2505bc36 [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x19467c4f [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x69aaa30a [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x61e2033a [0148.636] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0x717e973c [0148.637] RtlRandomEx (in: Seed=0x8fbf910 | out: Seed=0x8fbf910) returned 0xd848c5d [0148.645] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.645] ReadFile (in: hFile=0xadc, lpBuffer=0x6860950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fbf918, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesRead=0x8fbf918*=0x3c00, lpOverlapped=0x0) returned 1 [0148.645] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f038 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0148.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4768 [0148.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0148.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0148.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.646] WriteFile (in: hFile=0xadc, lpBuffer=0x6864558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fbf918, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesWritten=0x8fbf918*=0x3c00, lpOverlapped=0x0) returned 1 [0148.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0148.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0148.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5c90 [0148.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5a20 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0148.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0148.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debe50 [0148.902] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.902] WriteFile (in: hFile=0xadc, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x8fbf998, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x8fbf998*=0x10a, lpOverlapped=0x0) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0148.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0148.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e094b0 [0148.982] wcscpy (in: _Dest=0x3e094b0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots" [0148.982] wcscat (in: _Dest=0x3e094b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots.ac3a86" [0148.982] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots.ac3a86", NtPathName=0x8fbf910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\T4mP8Tq0.ots.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dca68 [0149.166] FlushFileBuffers (hFile=0xadc) returned 1 [0149.198] CloseHandle (hObject=0xadc) returned 1 [0149.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0df8 [0149.202] wcscpy (in: _Dest=0x66d0df8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0149.202] wcscat (in: _Dest=0x66d0df8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0149.202] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0x20 [0149.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0149.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 Thread: id = 1159 os_tid = 0x176c [0145.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014e78 [0145.280] wcscpy (in: _Dest=0x3014e78, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0145.280] wcscat (in: _Dest=0x3014e78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0145.280] wcscat (in: _Dest=0x3014e78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\*") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\*" [0145.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0145.280] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c41a560, ftCreationTime.dwHighDateTime=0x1d5e861, ftLastAccessTime.dwLowDateTime=0x9f3da980, ftLastAccessTime.dwHighDateTime=0x1d5d81c, ftLastWriteTime.dwLowDateTime=0x9f3da980, ftLastWriteTime.dwHighDateTime=0x1d5d81c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0145.281] wcscmp (_String1=".", _String2=".") returned 0 [0145.281] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c41a560, ftCreationTime.dwHighDateTime=0x1d5e861, ftLastAccessTime.dwLowDateTime=0x9f3da980, ftLastAccessTime.dwHighDateTime=0x1d5d81c, ftLastWriteTime.dwLowDateTime=0x9f3da980, ftLastWriteTime.dwHighDateTime=0x1d5d81c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.281] wcscmp (_String1="..", _String2=".") returned 1 [0145.281] wcscmp (_String1="..", _String2="..") returned 0 [0145.281] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x399d3380, ftCreationTime.dwHighDateTime=0x1d5dedd, ftLastAccessTime.dwLowDateTime=0x1a72ce40, ftLastAccessTime.dwHighDateTime=0x1d5e57a, ftLastWriteTime.dwLowDateTime=0x1a72ce40, ftLastWriteTime.dwHighDateTime=0x1d5e57a, nFileSizeHigh=0x0, nFileSizeLow=0xef42, dwReserved0=0x0, dwReserved1=0x0, cFileName="7GxtS6_5-v.rtf", cAlternateFileName="7GXTS6~1.RTF")) returned 1 [0145.281] wcscmp (_String1="7GxtS6_5-v.rtf", _String2=".") returned 1 [0145.281] wcscmp (_String1="7GxtS6_5-v.rtf", _String2="..") returned 1 [0145.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3550e0 [0145.281] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0145.281] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0145.281] wcscat (in: _Dest=0x3550e0, _Source="7GxtS6_5-v.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf" [0146.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0146.042] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed91ac50, ftCreationTime.dwHighDateTime=0x1d5e837, ftLastAccessTime.dwLowDateTime=0x2e45aa40, ftLastAccessTime.dwHighDateTime=0x1d5e256, ftLastWriteTime.dwLowDateTime=0x2e45aa40, ftLastWriteTime.dwHighDateTime=0x1d5e256, nFileSizeHigh=0x0, nFileSizeLow=0x1593, dwReserved0=0x0, dwReserved1=0x0, cFileName="8icn.csv", cAlternateFileName="")) returned 1 [0146.042] wcscmp (_String1="8icn.csv", _String2=".") returned 1 [0146.042] wcscmp (_String1="8icn.csv", _String2="..") returned 1 [0146.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee630 [0146.042] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.042] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.042] wcscat (in: _Dest=0x66ee630, _Source="8icn.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv" [0146.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0146.044] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35707550, ftCreationTime.dwHighDateTime=0x1d5dd12, ftLastAccessTime.dwLowDateTime=0x807ef9a0, ftLastAccessTime.dwHighDateTime=0x1d5dbe0, ftLastWriteTime.dwLowDateTime=0x807ef9a0, ftLastWriteTime.dwHighDateTime=0x1d5dbe0, nFileSizeHigh=0x0, nFileSizeLow=0xd2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="G67YeRUC1Ijc10S.ppt", cAlternateFileName="G67YER~1.PPT")) returned 1 [0146.044] wcscmp (_String1="G67YeRUC1Ijc10S.ppt", _String2=".") returned 1 [0146.044] wcscmp (_String1="G67YeRUC1Ijc10S.ppt", _String2="..") returned 1 [0146.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32b820 [0146.044] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.044] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.044] wcscat (in: _Dest=0x32b820, _Source="G67YeRUC1Ijc10S.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt" [0146.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0146.062] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1ff1e0, ftCreationTime.dwHighDateTime=0x1d5dd78, ftLastAccessTime.dwLowDateTime=0xe1c2aa00, ftLastAccessTime.dwHighDateTime=0x1d5e0f8, ftLastWriteTime.dwLowDateTime=0xe1c2aa00, ftLastWriteTime.dwHighDateTime=0x1d5e0f8, nFileSizeHigh=0x0, nFileSizeLow=0x1484a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jn4t9MEKzml RmTX4n.xlsx", cAlternateFileName="JN4T9M~1.XLS")) returned 1 [0146.062] wcscmp (_String1="Jn4t9MEKzml RmTX4n.xlsx", _String2=".") returned 1 [0146.062] wcscmp (_String1="Jn4t9MEKzml RmTX4n.xlsx", _String2="..") returned 1 [0146.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e1b0 [0146.063] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.063] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.063] wcscat (in: _Dest=0x3e0e1b0, _Source="Jn4t9MEKzml RmTX4n.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx" [0146.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0146.064] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa349b510, ftCreationTime.dwHighDateTime=0x1d5daff, ftLastAccessTime.dwLowDateTime=0x4d959af0, ftLastAccessTime.dwHighDateTime=0x1d5e714, ftLastWriteTime.dwLowDateTime=0x4d959af0, ftLastWriteTime.dwHighDateTime=0x1d5e714, nFileSizeHigh=0x0, nFileSizeLow=0xef96, dwReserved0=0x0, dwReserved1=0x0, cFileName="jWCimMV0s.odt", cAlternateFileName="JWCIMM~1.ODT")) returned 1 [0146.064] wcscmp (_String1="jWCimMV0s.odt", _String2=".") returned 1 [0146.064] wcscmp (_String1="jWCimMV0s.odt", _String2="..") returned 1 [0146.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcdc8 [0146.064] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.065] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.065] wcscat (in: _Dest=0x66dcdc8, _Source="jWCimMV0s.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt" [0146.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0146.066] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58173b0, ftCreationTime.dwHighDateTime=0x1d5e218, ftLastAccessTime.dwLowDateTime=0x704570b0, ftLastAccessTime.dwHighDateTime=0x1d5e7ba, ftLastWriteTime.dwLowDateTime=0x704570b0, ftLastWriteTime.dwHighDateTime=0x1d5e7ba, nFileSizeHigh=0x0, nFileSizeLow=0x1784d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MBWGGhM6y7 VIu fi1N1.odt", cAlternateFileName="MBWGGH~1.ODT")) returned 1 [0146.066] wcscmp (_String1="MBWGGhM6y7 VIu fi1N1.odt", _String2=".") returned 1 [0146.066] wcscmp (_String1="MBWGGhM6y7 VIu fi1N1.odt", _String2="..") returned 1 [0146.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0146.066] wcscpy (in: _Dest=0x3053330, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.066] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.066] wcscat (in: _Dest=0x3053330, _Source="MBWGGhM6y7 VIu fi1N1.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt" [0146.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0146.068] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd43f0c0, ftCreationTime.dwHighDateTime=0x1d5dc45, ftLastAccessTime.dwLowDateTime=0xec87c2d0, ftLastAccessTime.dwHighDateTime=0x1d5dd75, ftLastWriteTime.dwLowDateTime=0xec87c2d0, ftLastWriteTime.dwHighDateTime=0x1d5dd75, nFileSizeHigh=0x0, nFileSizeLow=0x17d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="oNZouoeGCn4WBdVh.doc", cAlternateFileName="ONZOUO~1.DOC")) returned 1 [0146.068] wcscmp (_String1="oNZouoeGCn4WBdVh.doc", _String2=".") returned 1 [0146.068] wcscmp (_String1="oNZouoeGCn4WBdVh.doc", _String2="..") returned 1 [0146.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0db70 [0146.068] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k" [0146.068] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0146.068] wcscat (in: _Dest=0x3e0db70, _Source="oNZouoeGCn4WBdVh.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc" [0146.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0146.069] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd43f0c0, ftCreationTime.dwHighDateTime=0x1d5dc45, ftLastAccessTime.dwLowDateTime=0xec87c2d0, ftLastAccessTime.dwHighDateTime=0x1d5dd75, ftLastWriteTime.dwLowDateTime=0xec87c2d0, ftLastWriteTime.dwHighDateTime=0x1d5dd75, nFileSizeHigh=0x0, nFileSizeLow=0x17d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="oNZouoeGCn4WBdVh.doc", cAlternateFileName="ONZOUO~1.DOC")) returned 0 [0146.070] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0146.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0146.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0146.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 1160 os_tid = 0x1770 [0145.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\wvu_iz.xls")) returned 0x20 [0145.282] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls", dwFileAttributes=0x20) returned 1 [0148.603] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\wvu_iz.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1034 [0148.603] GetFileSizeEx (in: hFile=0x1034, lpFileSize=0x9f6ff2c | out: lpFileSize=0x9f6ff2c*=87473) returned 1 [0148.603] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x155ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.603] ReadFile (in: hFile=0x1034, lpBuffer=0x9f6ff08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f6ff18, lpOverlapped=0x0 | out: lpBuffer=0x9f6ff08*, lpNumberOfBytesRead=0x9f6ff18*=0x4, lpOverlapped=0x0) returned 1 [0148.604] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0148.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0148.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0148.605] NtQuerySystemTime (in: CurrentTime=0x9f6fea0 | out: CurrentTime=0x9f6fea0*=132482710572564000) returned 0x0 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5175eff4 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0xf4d3968 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x18bdfccb [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x53dac28c [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x63883df1 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x68470409 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x687fed69 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x1deceab4 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x454cc319 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x8a853b5 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x3d9f393 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x4a6b6d33 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5ca92e6c [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x561902b2 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x3a3462d2 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x4bdea51f [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x79b1db23 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5dbcabc2 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x324238ff [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x1943b59a [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x396c62ba [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x2f3ef431 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x7818e22f [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x20de3e00 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x6830c93c [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x55f1fed2 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x3526f04f [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5d81c2f1 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x7f7e48a7 [0148.605] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5fc52fc5 [0148.606] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x1b3ee8c9 [0148.606] RtlRandomEx (in: Seed=0x9f6fe98 | out: Seed=0x9f6fe98) returned 0x5fd84a11 [0148.614] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.614] ReadFile (in: hFile=0x1034, lpBuffer=0x68a8160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.614] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f038 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0148.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68abd68 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0148.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0148.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.616] WriteFile (in: hFile=0x1034, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0148.873] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.873] ReadFile (in: hFile=0x1034, lpBuffer=0x68a8160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.873] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ea50 [0148.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0148.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0148.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0148.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68abd68 [0148.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0148.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.874] WriteFile (in: hFile=0x1034, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0148.878] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x119b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.878] ReadFile (in: hFile=0x1034, lpBuffer=0x68a8160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesRead=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.879] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x119b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ea50 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0148.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68abd68 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0148.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0148.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0148.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.879] WriteFile (in: hFile=0x1034, lpBuffer=0x68abd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f6fea0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesWritten=0x9f6fea0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd68) returned 1 [0148.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd5e8 [0148.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0148.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ab0 [0148.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0148.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0148.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0148.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x66ce310 [0148.904] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.904] WriteFile (in: hFile=0x1034, lpBuffer=0x66ce310*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x9f6ff20, lpOverlapped=0x0 | out: lpBuffer=0x66ce310*, lpNumberOfBytesWritten=0x9f6ff20*=0x146, lpOverlapped=0x0) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0148.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0148.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b330 [0148.980] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls" [0148.980] wcscat (in: _Dest=0x3f1b330, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls.ac3a86" [0148.980] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls.ac3a86", NtPathName=0x9f6fe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\wVu_iz.xls.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0149.044] FlushFileBuffers (hFile=0x1034) returned 1 [0149.046] CloseHandle (hObject=0x1034) returned 1 [0149.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0149.047] wcscpy (in: _Dest=0x3f1b330, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0149.047] wcscat (in: _Dest=0x3f1b330, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0149.047] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0x20 [0149.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0149.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 Thread: id = 1161 os_tid = 0x1774 [0145.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\xer5wq9wbbsjakuyzhl.pdf")) returned 0x20 [0145.282] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf", dwFileAttributes=0x20) returned 1 [0148.590] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\xer5wq9wbbsjakuyzhl.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb20 [0148.590] GetFileSizeEx (in: hFile=0xb20, lpFileSize=0x960fa7c | out: lpFileSize=0x960fa7c*=14892) returned 1 [0148.590] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x3a28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.590] ReadFile (in: hFile=0xb20, lpBuffer=0x960fa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x960fa68, lpOverlapped=0x0 | out: lpBuffer=0x960fa58*, lpNumberOfBytesRead=0x960fa68*=0x4, lpOverlapped=0x0) returned 1 [0148.592] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0148.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3930 [0148.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0148.592] NtQuerySystemTime (in: CurrentTime=0x960f9f0 | out: CurrentTime=0x960f9f0*=132482710572408000) returned 0x0 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x62025620 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x1a9e51e0 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0xa1cfa28 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x78b5f11 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x2a58638b [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x4548287e [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x15a0b7a [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x466c6b93 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x267058d3 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x65577f17 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0xa78e1d2 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x29c34de3 [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x20f1fb6c [0148.592] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x209a47f8 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x34f86d44 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0xc606f64 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x9c2e7ed [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0xfcdc3a8 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x468850f4 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0xb1884e3 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x3846a7cc [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x31dc45a7 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x2d2cf7f5 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x43431a2e [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x577b47f1 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x6dc005f4 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x42caca84 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x6a64fdd2 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x52d69083 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x20aff8f5 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x2c253547 [0148.593] RtlRandomEx (in: Seed=0x960f9e8 | out: Seed=0x960f9e8) returned 0x62025620 [0148.602] ReadFile (in: hFile=0xb20, lpBuffer=0x688a120, nNumberOfBytesToRead=0x3a2c, lpNumberOfBytesRead=0x960f9e4, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesRead=0x960f9e4*=0x3a2c, lpOverlapped=0x0) returned 1 [0148.602] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.602] WriteFile (in: hFile=0xb20, lpBuffer=0x688dd28*, nNumberOfBytesToWrite=0x3a2c, lpNumberOfBytesWritten=0x960f9e8, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesWritten=0x960f9e8*=0x3a2c, lpOverlapped=0x0) returned 1 [0148.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0148.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e660) returned 1 [0148.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e4e660 [0148.871] SetFilePointerEx (in: hFile=0xb20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.871] WriteFile (in: hFile=0xb20, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x960fa70, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0x960fa70*=0x120, lpOverlapped=0x0) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e978) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e660) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0148.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0148.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0148.976] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf" [0148.976] wcscat (in: _Dest=0x66dcd38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf.ac3a86" [0148.976] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf.ac3a86", NtPathName=0x960f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\XER5wQ9WbbSJaKUyzhl.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cc08 [0149.210] FlushFileBuffers (hFile=0xb20) returned 1 [0149.214] CloseHandle (hObject=0xb20) returned 1 [0149.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0df8 [0149.215] wcscpy (in: _Dest=0x66d0df8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\" [0149.215] wcscat (in: _Dest=0x66d0df8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" [0149.215] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ac3a86-readme.txt")) returned 0x20 [0149.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0149.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 1162 os_tid = 0x1778 [0145.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c398 [0145.283] wcscpy (in: _Dest=0x3d8c398, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0145.283] wcscat (in: _Dest=0x3d8c398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0145.283] wcscat (in: _Dest=0x3d8c398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\*") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\*" [0145.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0145.283] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853cad50, ftCreationTime.dwHighDateTime=0x1d5e376, ftLastAccessTime.dwLowDateTime=0x49fce5a0, ftLastAccessTime.dwHighDateTime=0x1d5e1f7, ftLastWriteTime.dwLowDateTime=0x49fce5a0, ftLastWriteTime.dwHighDateTime=0x1d5e1f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0145.283] wcscmp (_String1=".", _String2=".") returned 0 [0145.284] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853cad50, ftCreationTime.dwHighDateTime=0x1d5e376, ftLastAccessTime.dwLowDateTime=0x49fce5a0, ftLastAccessTime.dwHighDateTime=0x1d5e1f7, ftLastWriteTime.dwLowDateTime=0x49fce5a0, ftLastWriteTime.dwHighDateTime=0x1d5e1f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.284] wcscmp (_String1="..", _String2=".") returned 1 [0145.284] wcscmp (_String1="..", _String2="..") returned 0 [0145.284] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca6551c0, ftCreationTime.dwHighDateTime=0x1d5de08, ftLastAccessTime.dwLowDateTime=0xb9d4cf90, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0xb9d4cf90, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0xbd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="-MGpOig0fW5prPbfr.pptx", cAlternateFileName="-MGPOI~1.PPT")) returned 1 [0145.284] wcscmp (_String1="-MGpOig0fW5prPbfr.pptx", _String2=".") returned -1 [0145.284] wcscmp (_String1="-MGpOig0fW5prPbfr.pptx", _String2="..") returned -1 [0145.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30b08 [0145.284] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0145.284] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0145.284] wcscat (in: _Dest=0x3e30b08, _Source="-MGpOig0fW5prPbfr.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx" [0151.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0151.234] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf783d490, ftCreationTime.dwHighDateTime=0x1d5e7b0, ftLastAccessTime.dwLowDateTime=0x1e21b760, ftLastAccessTime.dwHighDateTime=0x1d5e096, ftLastWriteTime.dwLowDateTime=0x1e21b760, ftLastWriteTime.dwHighDateTime=0x1d5e096, nFileSizeHigh=0x0, nFileSizeLow=0x9f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="a_23cGl.pps", cAlternateFileName="")) returned 1 [0151.235] wcscmp (_String1="a_23cGl.pps", _String2=".") returned 1 [0151.235] wcscmp (_String1="a_23cGl.pps", _String2="..") returned 1 [0151.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e0fbf0 [0151.235] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0151.235] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0151.235] wcscat (in: _Dest=0x3e0fbf0, _Source="a_23cGl.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps" [0151.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0151.236] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c7a840, ftCreationTime.dwHighDateTime=0x1d5e634, ftLastAccessTime.dwLowDateTime=0x54264880, ftLastAccessTime.dwHighDateTime=0x1d5e3f7, ftLastWriteTime.dwLowDateTime=0x54264880, ftLastWriteTime.dwHighDateTime=0x1d5e3f7, nFileSizeHigh=0x0, nFileSizeLow=0x7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsaYQMyCizGDWMWQM.xlsx", cAlternateFileName="FSAYQM~1.XLS")) returned 1 [0151.236] wcscmp (_String1="fsaYQMyCizGDWMWQM.xlsx", _String2=".") returned 1 [0151.236] wcscmp (_String1="fsaYQMyCizGDWMWQM.xlsx", _String2="..") returned 1 [0151.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32bd78 [0151.236] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0151.236] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0151.236] wcscat (in: _Dest=0x32bd78, _Source="fsaYQMyCizGDWMWQM.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx" [0151.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0151.237] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8c29d0, ftCreationTime.dwHighDateTime=0x1d5dfb4, ftLastAccessTime.dwLowDateTime=0x9427e8a0, ftLastAccessTime.dwHighDateTime=0x1d5e724, ftLastWriteTime.dwLowDateTime=0x9427e8a0, ftLastWriteTime.dwHighDateTime=0x1d5e724, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lj7bwxQg.pdf", cAlternateFileName="")) returned 1 [0151.237] wcscmp (_String1="Lj7bwxQg.pdf", _String2=".") returned 1 [0151.237] wcscmp (_String1="Lj7bwxQg.pdf", _String2="..") returned 1 [0151.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10bf0 [0151.238] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0151.238] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0151.238] wcscat (in: _Dest=0x3e10bf0, _Source="Lj7bwxQg.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf" [0151.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0151.239] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf630e820, ftCreationTime.dwHighDateTime=0x1d5de83, ftLastAccessTime.dwLowDateTime=0xb3924ea0, ftLastAccessTime.dwHighDateTime=0x1d5db59, ftLastWriteTime.dwLowDateTime=0xb3924ea0, ftLastWriteTime.dwHighDateTime=0x1d5db59, nFileSizeHigh=0x0, nFileSizeLow=0x10739, dwReserved0=0x0, dwReserved1=0x0, cFileName="OF3KgY_zhCQn_k2.pdf", cAlternateFileName="OF3KGY~1.PDF")) returned 1 [0151.239] wcscmp (_String1="OF3KgY_zhCQn_k2.pdf", _String2=".") returned 1 [0151.239] wcscmp (_String1="OF3KgY_zhCQn_k2.pdf", _String2="..") returned 1 [0151.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbd78 [0151.239] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0151.239] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0151.239] wcscat (in: _Dest=0x66dbd78, _Source="OF3KgY_zhCQn_k2.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf" [0151.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0151.240] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c64820, ftCreationTime.dwHighDateTime=0x1d5e39d, ftLastAccessTime.dwLowDateTime=0xbc2cd0c0, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0xbc2cd0c0, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x17920, dwReserved0=0x0, dwReserved1=0x0, cFileName="rXVQOtVGUeHNIEzk.pdf", cAlternateFileName="RXVQOT~1.PDF")) returned 1 [0151.240] wcscmp (_String1="rXVQOtVGUeHNIEzk.pdf", _String2=".") returned 1 [0151.240] wcscmp (_String1="rXVQOtVGUeHNIEzk.pdf", _String2="..") returned 1 [0151.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcca8 [0151.240] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg" [0151.240] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0151.240] wcscat (in: _Dest=0x66dcca8, _Source="rXVQOtVGUeHNIEzk.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf" [0151.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0151.241] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c64820, ftCreationTime.dwHighDateTime=0x1d5e39d, ftLastAccessTime.dwLowDateTime=0xbc2cd0c0, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0xbc2cd0c0, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x17920, dwReserved0=0x0, dwReserved1=0x0, cFileName="rXVQOtVGUeHNIEzk.pdf", cAlternateFileName="RXVQOT~1.PDF")) returned 0 [0151.241] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c398) returned 1 [0151.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e5b8) returned 1 Thread: id = 1163 os_tid = 0x177c [0145.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b3c0 [0145.285] wcscpy (in: _Dest=0x3e0b3c0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0145.285] wcscat (in: _Dest=0x3e0b3c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0145.285] wcscat (in: _Dest=0x3e0b3c0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0145.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0145.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0145.286] wcscmp (_String1=".", _String2=".") returned 0 [0145.286] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.286] wcscmp (_String1="..", _String2=".") returned 1 [0145.286] wcscmp (_String1="..", _String2="..") returned 0 [0145.286] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.286] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0145.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0145.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b3c0) returned 1 [0145.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 1164 os_tid = 0x1780 [0145.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b3c0 [0145.288] wcscpy (in: _Dest=0x3e0b3c0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0145.288] wcscat (in: _Dest=0x3e0b3c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0145.288] wcscat (in: _Dest=0x3e0b3c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*" [0145.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0145.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0145.288] wcscmp (_String1=".", _String2=".") returned 0 [0145.288] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.288] wcscmp (_String1="..", _String2=".") returned 1 [0145.288] wcscmp (_String1="..", _String2="..") returned 0 [0145.289] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0145.289] wcscmp (_String1="1.0", _String2=".") returned 1 [0145.289] wcscmp (_String1="1.0", _String2="..") returned 1 [0145.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f294f0 [0145.289] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0145.289] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0145.289] wcscat (in: _Dest=0x3f294f0, _Source="1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0153.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0153.566] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0153.566] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0153.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0153.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b3c0) returned 1 [0153.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 1165 os_tid = 0x1784 [0145.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f292c0 [0145.289] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0145.289] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0145.289] wcscat (in: _Dest=0x3f292c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*" [0145.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0145.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0145.290] wcscmp (_String1=".", _String2=".") returned 0 [0145.290] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.290] wcscmp (_String1="..", _String2=".") returned 1 [0145.290] wcscmp (_String1="..", _String2="..") returned 0 [0145.290] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0145.290] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0145.290] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0145.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7658 [0145.290] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0145.290] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0145.291] wcscat (in: _Dest=0x2ff7658, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0150.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff7658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0150.376] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0150.376] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0150.376] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0150.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6c48 [0150.376] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0150.376] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0150.376] wcscat (in: _Dest=0x2ff6c48, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0150.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0150.377] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0150.377] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0150.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0150.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 [0150.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 Thread: id = 1166 os_tid = 0x1788 [0145.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29e20 [0145.291] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0145.291] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0145.291] wcscat (in: _Dest=0x3f29e20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*" [0145.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0145.291] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0145.572] wcscmp (_String1=".", _String2=".") returned 0 [0145.572] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.572] wcscmp (_String1="..", _String2=".") returned 1 [0145.572] wcscmp (_String1="..", _String2="..") returned 0 [0145.572] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0145.572] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0145.572] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0145.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff72c0 [0145.572] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0145.573] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0145.573] wcscat (in: _Dest=0x2ff72c0, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0146.224] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0146.224] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0146.224] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0146.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff67f8 [0146.225] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0146.225] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0146.225] wcscat (in: _Dest=0x2ff67f8, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0146.226] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0146.226] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0146.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0146.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 [0146.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 1167 os_tid = 0x178c [0145.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6668 [0145.292] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\All Users\\Microsoft\\eHome\\logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0145.292] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\" [0145.292] wcscat (in: _Dest=0x2fe6668, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*" [0145.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0145.293] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0145.293] wcscmp (_String1=".", _String2=".") returned 0 [0145.293] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.293] wcscmp (_String1="..", _String2=".") returned 1 [0145.293] wcscmp (_String1="..", _String2="..") returned 0 [0145.293] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.293] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0145.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0145.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 [0145.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5070) returned 1 Thread: id = 1168 os_tid = 0x1790 [0145.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29b10 [0145.295] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0145.295] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0145.295] wcscat (in: _Dest=0x3f29b10, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*" [0145.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0145.295] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0145.296] wcscmp (_String1=".", _String2=".") returned 0 [0145.296] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.296] wcscmp (_String1="..", _String2=".") returned 1 [0145.296] wcscmp (_String1="..", _String2="..") returned 0 [0145.296] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0145.296] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0145.296] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0145.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0145.297] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0145.297] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0145.297] wcscat (in: _Dest=0x3e0e930, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0153.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0153.568] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0153.568] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0153.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0153.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 [0153.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 Thread: id = 1169 os_tid = 0x1794 [0145.297] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl")) returned 0x20 [0145.297] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0149.418] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.444] GetLastError () returned 0x5 [0150.444] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0150.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 1170 os_tid = 0x1798 [0145.298] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl")) returned 0x20 [0145.298] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0148.589] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.590] GetLastError () returned 0x5 [0148.590] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0150.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 1171 os_tid = 0x179c [0145.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e093b0 [0145.299] wcscpy (in: _Dest=0x3e093b0, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0145.299] wcscat (in: _Dest=0x3e093b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0145.299] wcscat (in: _Dest=0x3e093b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0145.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0145.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0145.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e093b0) returned 1 [0145.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 1172 os_tid = 0x17a0 [0145.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29640 [0145.301] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0145.301] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\" [0145.302] wcscat (in: _Dest=0x3f29640, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*" [0145.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0145.302] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0145.302] wcscmp (_String1=".", _String2=".") returned 0 [0145.302] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.302] wcscmp (_String1="..", _String2=".") returned 1 [0145.302] wcscmp (_String1="..", _String2="..") returned 0 [0145.302] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.302] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0145.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0145.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 [0145.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 1173 os_tid = 0x17a4 [0145.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f296b0 [0145.304] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0145.304] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\" [0145.304] wcscat (in: _Dest=0x3f296b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*" [0145.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0145.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0145.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 [0145.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 1174 os_tid = 0x17a8 [0145.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32198 [0145.306] wcscpy (in: _Dest=0x3e32198, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0145.307] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0145.307] wcscat (in: _Dest=0x3e32198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0145.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0145.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0145.307] wcscmp (_String1=".", _String2=".") returned 0 [0145.307] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.307] wcscmp (_String1="..", _String2=".") returned 1 [0145.307] wcscmp (_String1="..", _String2="..") returned 0 [0145.307] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0145.307] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0145.307] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0145.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cff8 [0145.308] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0145.308] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0145.308] wcscat (in: _Dest=0x3e5cff8, _Source="cache.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0150.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0150.379] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0150.380] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0150.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0150.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 [0150.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 1175 os_tid = 0x17ac [0145.309] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0145.309] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0145.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.310] GetLastError () returned 0x5 [0145.310] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0145.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 1176 os_tid = 0x17b0 [0145.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6668 [0145.311] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Users\\All Users\\Microsoft\\Search\\Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0145.311] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\" [0145.311] wcscat (in: _Dest=0x2fe6668, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*" [0145.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0145.312] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0145.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 [0145.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 1177 os_tid = 0x17b4 [0145.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e316e8 [0145.329] wcscpy (in: _Dest=0x3e316e8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0145.329] wcscat (in: _Dest=0x3e316e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0145.329] wcscat (in: _Dest=0x3e316e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0145.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0145.329] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0145.330] wcscmp (_String1=".", _String2=".") returned 0 [0145.330] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.330] wcscmp (_String1="..", _String2=".") returned 1 [0145.330] wcscmp (_String1="..", _String2="..") returned 0 [0145.330] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0145.330] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0145.330] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0145.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bd48 [0145.330] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0145.330] wcscat (in: _Dest=0x35bd48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0145.330] wcscat (in: _Dest=0x35bd48, _Source="usertile10.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0150.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0150.381] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0150.381] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0150.382] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0150.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0150.382] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.382] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.382] wcscat (in: _Dest=0x35c378, _Source="usertile11.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0150.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0150.383] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0150.383] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0150.383] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0150.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c218 [0150.383] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.383] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.383] wcscat (in: _Dest=0x35c218, _Source="usertile12.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0150.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0150.384] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0150.384] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0150.384] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0150.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0150.384] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.384] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.384] wcscat (in: _Dest=0x35c588, _Source="usertile13.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0150.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0150.385] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0150.385] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0150.386] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0150.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b928 [0150.386] wcscpy (in: _Dest=0x35b928, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.386] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.386] wcscat (in: _Dest=0x35b928, _Source="usertile14.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0150.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0150.387] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0150.387] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0150.387] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0150.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0150.387] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.387] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.387] wcscat (in: _Dest=0x35c168, _Source="usertile15.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0150.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0150.388] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0150.388] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0150.388] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0150.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bbe8 [0150.389] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.389] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.389] wcscat (in: _Dest=0x35bbe8, _Source="usertile16.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0150.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0150.390] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0150.390] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0150.390] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0150.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0150.390] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.390] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.390] wcscat (in: _Dest=0x35c4d8, _Source="usertile17.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0150.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0150.391] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0150.391] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0150.391] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0150.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bc98 [0150.391] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.391] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.391] wcscat (in: _Dest=0x35bc98, _Source="usertile18.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0150.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0150.392] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0150.392] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0150.392] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0150.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c428 [0150.392] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.393] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.393] wcscat (in: _Dest=0x35c428, _Source="usertile19.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0150.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0150.394] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0150.394] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0150.394] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0150.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b878 [0150.394] wcscpy (in: _Dest=0x35b878, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.394] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.394] wcscat (in: _Dest=0x35b878, _Source="usertile20.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0150.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0150.395] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0150.395] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0150.395] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0150.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2150 [0150.395] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.395] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.395] wcscat (in: _Dest=0x3ea2150, _Source="usertile21.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0150.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0150.396] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0150.396] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0150.396] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0150.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea24c0 [0150.397] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.397] wcscat (in: _Dest=0x3ea24c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.397] wcscat (in: _Dest=0x3ea24c0, _Source="usertile22.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0150.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0150.398] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0150.398] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0150.398] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0150.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2360 [0150.398] wcscpy (in: _Dest=0x3ea2360, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.398] wcscat (in: _Dest=0x3ea2360, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.398] wcscat (in: _Dest=0x3ea2360, _Source="usertile23.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0150.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0150.399] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0150.399] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0150.399] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0150.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2570 [0150.400] wcscpy (in: _Dest=0x3ea2570, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.400] wcscat (in: _Dest=0x3ea2570, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.400] wcscat (in: _Dest=0x3ea2570, _Source="usertile24.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0150.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0150.401] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0150.401] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0150.401] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0150.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea28e0 [0150.401] wcscpy (in: _Dest=0x3ea28e0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.401] wcscat (in: _Dest=0x3ea28e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.401] wcscat (in: _Dest=0x3ea28e0, _Source="usertile25.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0150.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea28e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0150.402] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0150.402] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0150.402] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0150.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea22b0 [0150.402] wcscpy (in: _Dest=0x3ea22b0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.402] wcscat (in: _Dest=0x3ea22b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.402] wcscat (in: _Dest=0x3ea22b0, _Source="usertile26.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0150.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea22b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0150.403] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0150.403] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0150.403] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0150.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2200 [0150.403] wcscpy (in: _Dest=0x3ea2200, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.403] wcscat (in: _Dest=0x3ea2200, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.403] wcscat (in: _Dest=0x3ea2200, _Source="usertile27.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0150.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0150.404] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0150.404] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0150.404] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0150.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2780 [0150.404] wcscpy (in: _Dest=0x3ea2780, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.404] wcscat (in: _Dest=0x3ea2780, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.404] wcscat (in: _Dest=0x3ea2780, _Source="usertile28.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0150.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0150.405] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0150.405] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0150.406] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0150.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea26d0 [0150.406] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.406] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.406] wcscat (in: _Dest=0x3ea26d0, _Source="usertile29.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0150.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0150.407] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0150.407] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0150.407] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0150.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2830 [0150.407] wcscpy (in: _Dest=0x3ea2830, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.407] wcscat (in: _Dest=0x3ea2830, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.407] wcscat (in: _Dest=0x3ea2830, _Source="usertile30.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0150.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0150.408] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0150.408] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0150.408] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0150.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2410 [0150.408] wcscpy (in: _Dest=0x3ea2410, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.408] wcscat (in: _Dest=0x3ea2410, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.408] wcscat (in: _Dest=0x3ea2410, _Source="usertile31.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0150.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0150.419] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0150.419] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0150.419] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0150.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2a40 [0150.420] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.420] wcscat (in: _Dest=0x3ea2a40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.420] wcscat (in: _Dest=0x3ea2a40, _Source="usertile32.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0150.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0150.421] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0150.421] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0150.421] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0150.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2db0 [0150.421] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.421] wcscat (in: _Dest=0x3ea2db0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.421] wcscat (in: _Dest=0x3ea2db0, _Source="usertile33.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0150.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0150.423] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0150.423] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0150.423] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0150.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2e60 [0150.423] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.423] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.423] wcscat (in: _Dest=0x3ea2e60, _Source="usertile34.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0150.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0150.425] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0150.425] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0150.425] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0150.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2f10 [0150.425] wcscpy (in: _Dest=0x3ea2f10, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.426] wcscat (in: _Dest=0x3ea2f10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.426] wcscat (in: _Dest=0x3ea2f10, _Source="usertile35.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0150.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0150.427] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0150.427] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0150.427] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0150.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2fc0 [0150.427] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.427] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.427] wcscat (in: _Dest=0x3ea2fc0, _Source="usertile36.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0150.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0150.965] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0150.965] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0150.965] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0150.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2f10 [0150.965] wcscpy (in: _Dest=0x3ea2f10, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0150.965] wcscat (in: _Dest=0x3ea2f10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0150.965] wcscat (in: _Dest=0x3ea2f10, _Source="usertile37.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0152.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0152.172] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0152.172] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0152.172] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0152.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0152.172] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.172] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.172] wcscat (in: _Dest=0x35c4d8, _Source="usertile38.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0152.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0152.173] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0152.173] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0152.173] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0152.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bbe8 [0152.173] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.173] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.174] wcscat (in: _Dest=0x35bbe8, _Source="usertile39.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0152.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0152.175] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0152.175] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0152.175] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0152.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0152.175] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.175] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.175] wcscat (in: _Dest=0x35c168, _Source="usertile40.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0152.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0152.176] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0152.176] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0152.176] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0152.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b928 [0152.176] wcscpy (in: _Dest=0x35b928, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.176] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.176] wcscat (in: _Dest=0x35b928, _Source="usertile41.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0152.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0152.178] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0152.178] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0152.178] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0152.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0152.178] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.178] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.178] wcscat (in: _Dest=0x35c588, _Source="usertile42.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0152.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0152.179] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0152.179] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0152.179] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0152.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c218 [0152.179] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.179] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.179] wcscat (in: _Dest=0x35c218, _Source="usertile43.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0152.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0152.180] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0152.180] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0152.181] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0152.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0152.181] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0152.181] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0152.181] wcscat (in: _Dest=0x35c378, _Source="usertile44.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0152.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0152.182] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0152.182] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0152.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0152.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e316e8) returned 1 [0152.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 1178 os_tid = 0x17b8 [0145.331] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0145.332] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0150.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1248 [0150.155] GetFileSizeEx (in: hFile=0x1248, lpFileSize=0xafcfa94 | out: lpFileSize=0xafcfa94*=0) returned 1 [0150.155] FlushFileBuffers (hFile=0x1248) returned 1 [0151.309] CloseHandle (hObject=0x1248) returned 1 [0151.309] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0151.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 Thread: id = 1179 os_tid = 0x17bc [0145.332] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0145.333] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0145.333] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.333] GetLastError () returned 0x5 [0145.333] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0145.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 1180 os_tid = 0x17c0 [0145.335] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0145.335] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0145.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.335] GetLastError () returned 0x5 [0145.335] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0145.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda178) returned 1 Thread: id = 1181 os_tid = 0x17c4 [0145.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f296b0 [0145.337] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0145.337] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0145.337] wcscat (in: _Dest=0x3f296b0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*" [0145.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0145.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0146.386] wcscmp (_String1=".", _String2=".") returned 0 [0146.386] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.386] wcscmp (_String1="..", _String2=".") returned 1 [0146.386] wcscmp (_String1="..", _String2="..") returned 0 [0146.386] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.386] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.386] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0146.386] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0146.386] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0146.386] wcscat (in: _Dest=0x69582d8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" [0148.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0148.433] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0148.433] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0148.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0148.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 [0148.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5bf8) returned 1 Thread: id = 1182 os_tid = 0x17c8 [0145.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29640 [0145.338] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0145.338] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0145.338] wcscat (in: _Dest=0x3f29640, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*" [0145.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0145.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0146.386] wcscmp (_String1=".", _String2=".") returned 0 [0146.387] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.387] wcscmp (_String1="..", _String2=".") returned 1 [0146.387] wcscmp (_String1="..", _String2="..") returned 0 [0146.387] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.387] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.387] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0146.387] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0146.387] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0146.387] wcscat (in: _Dest=0x6958370, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" [0146.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0146.959] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.959] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0146.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0146.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 [0146.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae10) returned 1 Thread: id = 1183 os_tid = 0x17cc [0145.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29100 [0145.340] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0145.340] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0145.340] wcscat (in: _Dest=0x3f29100, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*" [0145.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0145.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0146.387] wcscmp (_String1=".", _String2=".") returned 0 [0146.387] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.387] wcscmp (_String1="..", _String2=".") returned 1 [0146.387] wcscmp (_String1="..", _String2="..") returned 0 [0146.388] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.388] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.388] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958408 [0146.388] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0146.388] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0146.388] wcscat (in: _Dest=0x6958408, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" [0146.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0146.961] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.961] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0146.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0146.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 [0146.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 1184 os_tid = 0x17d0 [0145.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364930 [0145.341] wcscpy (in: _Dest=0x364930, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0145.341] wcscat (in: _Dest=0x364930, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0145.341] wcscat (in: _Dest=0x364930, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*" [0145.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40530 [0145.341] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0146.388] wcscmp (_String1=".", _String2=".") returned 0 [0146.388] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.388] wcscmp (_String1="..", _String2=".") returned 1 [0146.388] wcscmp (_String1="..", _String2="..") returned 0 [0146.388] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.388] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.389] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69584a0 [0146.389] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0146.389] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0146.389] wcscat (in: _Dest=0x69584a0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" [0146.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0146.963] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.963] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0146.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40530) returned 1 [0146.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364930) returned 1 [0146.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b580) returned 1 Thread: id = 1185 os_tid = 0x17d4 [0145.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364a80 [0145.352] wcscpy (in: _Dest=0x364a80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0145.352] wcscat (in: _Dest=0x364a80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0145.352] wcscat (in: _Dest=0x364a80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*" [0145.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40798 [0145.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0146.389] wcscmp (_String1=".", _String2=".") returned 0 [0146.389] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.389] wcscmp (_String1="..", _String2=".") returned 1 [0146.389] wcscmp (_String1="..", _String2="..") returned 0 [0146.389] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.389] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.389] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958538 [0146.389] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0146.389] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0146.390] wcscat (in: _Dest=0x6958538, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" [0146.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0146.966] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.966] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0146.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40798) returned 1 [0146.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364a80) returned 1 [0146.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b6d0) returned 1 Thread: id = 1186 os_tid = 0x17d8 [0145.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x364850 [0145.353] wcscpy (in: _Dest=0x364850, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0145.353] wcscat (in: _Dest=0x364850, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0145.353] wcscat (in: _Dest=0x364850, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*" [0145.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0145.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0146.371] wcscmp (_String1=".", _String2=".") returned 0 [0146.371] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.372] wcscmp (_String1="..", _String2=".") returned 1 [0146.372] wcscmp (_String1="..", _String2="..") returned 0 [0146.372] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.372] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.372] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31948 [0146.372] wcscpy (in: _Dest=0x3e31948, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0146.372] wcscat (in: _Dest=0x3e31948, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0146.372] wcscat (in: _Dest=0x3e31948, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" [0150.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0150.326] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.326] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0150.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0150.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364850) returned 1 [0150.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b820) returned 1 Thread: id = 1187 os_tid = 0x17dc [0145.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3649a0 [0145.354] wcscpy (in: _Dest=0x3649a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0145.354] wcscat (in: _Dest=0x3649a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0145.354] wcscat (in: _Dest=0x3649a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*" [0145.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41d40 [0145.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809f8 [0146.380] wcscmp (_String1=".", _String2=".") returned 0 [0146.380] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.380] wcscmp (_String1="..", _String2=".") returned 1 [0146.381] wcscmp (_String1="..", _String2="..") returned 0 [0146.381] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.381] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.381] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957fe0 [0146.381] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0146.381] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0146.381] wcscat (in: _Dest=0x6957fe0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" [0150.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0150.350] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.350] FindClose (in: hFindFile=0x3e809f8 | out: hFindFile=0x3e809f8) returned 1 [0150.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d40) returned 1 [0150.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3649a0) returned 1 [0150.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b4a0) returned 1 Thread: id = 1188 os_tid = 0x17e0 [0145.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e6368 [0145.356] wcscpy (in: _Dest=0x66e6368, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0145.356] wcscat (in: _Dest=0x66e6368, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0145.356] wcscat (in: _Dest=0x66e6368, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*" [0145.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d402c8 [0145.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806f8 [0146.380] wcscmp (_String1=".", _String2=".") returned 0 [0146.380] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.380] wcscmp (_String1="..", _String2=".") returned 1 [0146.380] wcscmp (_String1="..", _String2="..") returned 0 [0146.380] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.380] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.380] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0146.380] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0146.380] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0146.380] wcscat (in: _Dest=0x6957f48, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" [0150.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0150.345] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.345] FindClose (in: hFindFile=0x3e806f8 | out: hFindFile=0x3e806f8) returned 1 [0150.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c8) returned 1 [0150.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6368) returned 1 [0150.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b200) returned 1 Thread: id = 1189 os_tid = 0x17e4 [0145.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e63d8 [0145.357] wcscpy (in: _Dest=0x66e63d8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0145.357] wcscat (in: _Dest=0x66e63d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0145.357] wcscat (in: _Dest=0x66e63d8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*" [0145.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41138 [0145.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0146.379] wcscmp (_String1=".", _String2=".") returned 0 [0146.379] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.379] wcscmp (_String1="..", _String2=".") returned 1 [0146.379] wcscmp (_String1="..", _String2="..") returned 0 [0146.379] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.379] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.379] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0146.379] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0146.379] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0146.379] wcscat (in: _Dest=0x6957eb0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" [0150.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0150.343] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.343] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0150.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41138) returned 1 [0150.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e63d8) returned 1 [0150.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e59c8) returned 1 Thread: id = 1190 os_tid = 0x17e8 [0145.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3db1398 [0145.358] wcscpy (in: _Dest=0x3db1398, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0145.358] wcscat (in: _Dest=0x3db1398, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0145.358] wcscat (in: _Dest=0x3db1398, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*" [0145.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0145.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80978 [0146.378] wcscmp (_String1=".", _String2=".") returned 0 [0146.378] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.378] wcscmp (_String1="..", _String2=".") returned 1 [0146.378] wcscmp (_String1="..", _String2="..") returned 0 [0146.378] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.378] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.378] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957e18 [0146.378] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0146.378] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0146.378] wcscat (in: _Dest=0x6957e18, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" [0150.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0150.341] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.341] FindClose (in: hFindFile=0x3e80978 | out: hFindFile=0x3e80978) returned 1 [0150.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0150.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1398) returned 1 [0150.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5aa8) returned 1 Thread: id = 1191 os_tid = 0x17ec [0145.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3519c0 [0145.359] wcscpy (in: _Dest=0x3519c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0145.359] wcscat (in: _Dest=0x3519c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0145.359] wcscat (in: _Dest=0x3519c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*" [0145.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0145.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0146.377] wcscmp (_String1=".", _String2=".") returned 0 [0146.377] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.377] wcscmp (_String1="..", _String2=".") returned 1 [0146.377] wcscmp (_String1="..", _String2="..") returned 0 [0146.377] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.377] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.377] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957d80 [0146.377] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0146.377] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0146.377] wcscat (in: _Dest=0x6957d80, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" [0150.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0150.338] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.338] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0150.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0150.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3519c0) returned 1 [0150.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5878) returned 1 Thread: id = 1192 os_tid = 0x17f0 [0145.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f22ea0 [0145.359] wcscpy (in: _Dest=0x3f22ea0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0145.359] wcscat (in: _Dest=0x3f22ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0145.359] wcscat (in: _Dest=0x3f22ea0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*" [0145.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0145.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0146.376] wcscmp (_String1=".", _String2=".") returned 0 [0146.376] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.376] wcscmp (_String1="..", _String2=".") returned 1 [0146.376] wcscmp (_String1="..", _String2="..") returned 0 [0146.376] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.376] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.377] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957ce8 [0146.377] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0146.377] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0146.377] wcscat (in: _Dest=0x6957ce8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" [0150.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0150.337] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.337] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0150.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0150.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ea0) returned 1 [0150.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e55d8) returned 1 Thread: id = 1193 os_tid = 0x17f4 [0145.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f22f10 [0145.360] wcscpy (in: _Dest=0x3f22f10, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0145.360] wcscat (in: _Dest=0x3f22f10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0145.360] wcscat (in: _Dest=0x3f22f10, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*" [0145.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0145.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0146.375] wcscmp (_String1=".", _String2=".") returned 0 [0146.375] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.375] wcscmp (_String1="..", _String2=".") returned 1 [0146.375] wcscmp (_String1="..", _String2="..") returned 0 [0146.375] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.376] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.376] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31488 [0146.376] wcscpy (in: _Dest=0x3e31488, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0146.376] wcscat (in: _Dest=0x3e31488, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0146.376] wcscat (in: _Dest=0x3e31488, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" [0150.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0150.335] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.335] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0150.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0150.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22f10) returned 1 [0150.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5648) returned 1 Thread: id = 1194 os_tid = 0x17f8 [0145.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f22f80 [0145.360] wcscpy (in: _Dest=0x3f22f80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0145.361] wcscat (in: _Dest=0x3f22f80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0145.361] wcscat (in: _Dest=0x3f22f80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*" [0145.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0145.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80778 [0146.385] wcscmp (_String1=".", _String2=".") returned 0 [0146.385] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.385] wcscmp (_String1="..", _String2=".") returned 1 [0146.385] wcscmp (_String1="..", _String2="..") returned 0 [0146.385] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.385] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.385] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958240 [0146.385] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0146.385] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0146.385] wcscat (in: _Dest=0x6958240, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" [0148.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0148.430] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0148.430] FindClose (in: hFindFile=0x3e80778 | out: hFindFile=0x3e80778) returned 1 [0148.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0148.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22f80) returned 1 [0148.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f78) returned 1 Thread: id = 1195 os_tid = 0x17fc [0145.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f22ff0 [0145.362] wcscpy (in: _Dest=0x3f22ff0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0145.362] wcscat (in: _Dest=0x3f22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0145.362] wcscat (in: _Dest=0x3f22ff0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*" [0145.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b81b8 [0145.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0146.374] wcscmp (_String1=".", _String2=".") returned 0 [0146.374] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.375] wcscmp (_String1="..", _String2=".") returned 1 [0146.375] wcscmp (_String1="..", _String2="..") returned 0 [0146.375] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.375] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.375] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e318b0 [0146.375] wcscpy (in: _Dest=0x3e318b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0146.375] wcscat (in: _Dest=0x3e318b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0146.375] wcscat (in: _Dest=0x3e318b0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" [0150.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e318b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0150.333] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.333] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0150.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b8) returned 1 [0150.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ff0) returned 1 [0150.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e54f8) returned 1 Thread: id = 1196 os_tid = 0x22c [0145.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23060 [0145.364] wcscpy (in: _Dest=0x3f23060, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0145.364] wcscat (in: _Dest=0x3f23060, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0145.364] wcscat (in: _Dest=0x3f23060, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*" [0145.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0145.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0146.373] wcscmp (_String1=".", _String2=".") returned 0 [0146.374] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.374] wcscmp (_String1="..", _String2=".") returned 1 [0146.374] wcscmp (_String1="..", _String2="..") returned 0 [0146.374] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.374] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.374] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30778 [0146.374] wcscpy (in: _Dest=0x3e30778, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0146.374] wcscat (in: _Dest=0x3e30778, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0146.374] wcscat (in: _Dest=0x3e30778, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" [0150.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0150.330] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.330] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0150.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0150.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23060) returned 1 [0150.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5fe8) returned 1 Thread: id = 1197 os_tid = 0xe20 [0145.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f230d0 [0145.364] wcscpy (in: _Dest=0x3f230d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0145.364] wcscat (in: _Dest=0x3f230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0145.364] wcscat (in: _Dest=0x3f230d0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*" [0145.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0145.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0146.373] wcscmp (_String1=".", _String2=".") returned 0 [0146.373] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.373] wcscmp (_String1="..", _String2=".") returned 1 [0146.373] wcscmp (_String1="..", _String2="..") returned 0 [0146.373] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.373] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.373] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e305b0 [0146.373] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0146.373] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0146.373] wcscat (in: _Dest=0x3e305b0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" [0150.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0150.328] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.328] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0150.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0150.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f230d0) returned 1 [0150.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6058) returned 1 Thread: id = 1198 os_tid = 0x180 [0145.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23140 [0145.365] wcscpy (in: _Dest=0x3f23140, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0145.365] wcscat (in: _Dest=0x3f23140, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0145.365] wcscat (in: _Dest=0x3f23140, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*" [0145.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0145.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0146.351] wcscmp (_String1=".", _String2=".") returned 0 [0146.351] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.351] wcscmp (_String1="..", _String2=".") returned 1 [0146.351] wcscmp (_String1="..", _String2="..") returned 0 [0146.351] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.351] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.351] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31520 [0146.351] wcscpy (in: _Dest=0x3e31520, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0146.351] wcscat (in: _Dest=0x3e31520, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0146.351] wcscat (in: _Dest=0x3e31520, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" [0150.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0150.324] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.325] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0150.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0150.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23140) returned 1 [0150.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e60c8) returned 1 Thread: id = 1199 os_tid = 0x5e8 [0145.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f231b0 [0145.366] wcscpy (in: _Dest=0x3f231b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0145.366] wcscat (in: _Dest=0x3f231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0145.366] wcscat (in: _Dest=0x3f231b0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*" [0145.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0145.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0146.384] wcscmp (_String1=".", _String2=".") returned 0 [0146.384] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.384] wcscmp (_String1="..", _String2=".") returned 1 [0146.384] wcscmp (_String1="..", _String2="..") returned 0 [0146.384] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.384] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.384] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69581a8 [0146.384] wcscpy (in: _Dest=0x69581a8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0146.384] wcscat (in: _Dest=0x69581a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0146.384] wcscat (in: _Dest=0x69581a8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" [0148.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0148.427] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0148.427] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0148.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0148.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f231b0) returned 1 [0148.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6138) returned 1 Thread: id = 1200 os_tid = 0x4fc [0145.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23220 [0145.367] wcscpy (in: _Dest=0x3f23220, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0145.367] wcscat (in: _Dest=0x3f23220, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0145.367] wcscat (in: _Dest=0x3f23220, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*" [0145.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0145.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808f8 [0146.382] wcscmp (_String1=".", _String2=".") returned 0 [0146.382] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.383] wcscmp (_String1="..", _String2=".") returned 1 [0146.383] wcscmp (_String1="..", _String2="..") returned 0 [0146.383] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.383] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.383] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0146.383] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0146.383] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0146.383] wcscat (in: _Dest=0x6958110, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" [0148.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0148.424] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0148.424] FindClose (in: hFindFile=0x3e808f8 | out: hFindFile=0x3e808f8) returned 1 [0148.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0148.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23220) returned 1 [0148.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e61a8) returned 1 Thread: id = 1201 os_tid = 0x10c [0145.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23290 [0145.368] wcscpy (in: _Dest=0x3f23290, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0145.368] wcscat (in: _Dest=0x3f23290, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0145.368] wcscat (in: _Dest=0x3f23290, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*" [0145.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0145.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0146.381] wcscmp (_String1=".", _String2=".") returned 0 [0146.381] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.381] wcscmp (_String1="..", _String2=".") returned 1 [0146.381] wcscmp (_String1="..", _String2="..") returned 0 [0146.381] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.381] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.382] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958078 [0146.382] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0146.382] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0146.382] wcscat (in: _Dest=0x6958078, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" [0150.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0150.353] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0150.353] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0150.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0150.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23290) returned 1 [0150.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6218) returned 1 Thread: id = 1202 os_tid = 0xb18 [0145.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23370 [0145.581] wcscpy (in: _Dest=0x3f23370, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0145.581] wcscat (in: _Dest=0x3f23370, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0145.581] wcscat (in: _Dest=0x3f23370, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*" [0145.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f154d0 [0145.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0146.209] wcscmp (_String1=".", _String2=".") returned 0 [0146.209] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.209] wcscmp (_String1="..", _String2=".") returned 1 [0146.209] wcscmp (_String1="..", _String2="..") returned 0 [0146.209] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0146.209] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0146.209] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0146.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d370 [0146.209] wcscpy (in: _Dest=0x32d370, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0146.209] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0146.209] wcscat (in: _Dest=0x32d370, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" [0146.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0146.858] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.858] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0146.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f154d0) returned 1 [0146.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23370) returned 1 [0146.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6288) returned 1 Thread: id = 1203 os_tid = 0x8fc [0145.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0145.582] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0145.582] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0145.582] wcscat (in: _Dest=0x3d8e140, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*" [0145.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0145.582] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0145.582] wcscmp (_String1=".", _String2=".") returned 0 [0145.582] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.583] wcscmp (_String1="..", _String2=".") returned 1 [0145.583] wcscmp (_String1="..", _String2="..") returned 0 [0145.583] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0145.583] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0145.583] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0145.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35aa08 [0145.583] wcscpy (in: _Dest=0x35aa08, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0145.583] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0145.583] wcscat (in: _Dest=0x35aa08, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0161.192] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0161.192] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0161.192] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0161.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c218 [0161.192] wcscpy (in: _Dest=0x35c218, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0161.192] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0161.192] wcscat (in: _Dest=0x35c218, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0161.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0161.193] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0161.193] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0161.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0161.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 [0161.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 1204 os_tid = 0xb10 [0145.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e210 [0145.583] wcscpy (in: _Dest=0x3d8e210, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0145.584] wcscat (in: _Dest=0x3d8e210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0145.584] wcscat (in: _Dest=0x3d8e210, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*" [0145.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0145.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0145.584] wcscmp (_String1=".", _String2=".") returned 0 [0145.584] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.584] wcscmp (_String1="..", _String2=".") returned 1 [0145.584] wcscmp (_String1="..", _String2="..") returned 0 [0145.584] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0145.584] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0145.584] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0145.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b928 [0145.584] wcscpy (in: _Dest=0x35b928, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0145.584] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0145.584] wcscat (in: _Dest=0x35b928, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0146.228] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0146.228] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0146.228] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0146.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35aed8 [0146.228] wcscpy (in: _Dest=0x35aed8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0146.228] wcscat (in: _Dest=0x35aed8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0146.229] wcscat (in: _Dest=0x35aed8, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0146.229] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0146.230] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0146.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0146.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 [0146.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 1205 os_tid = 0xb58 [0145.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7808 [0145.585] wcscpy (in: _Dest=0x3ef7808, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0145.585] wcscat (in: _Dest=0x3ef7808, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0145.585] wcscat (in: _Dest=0x3ef7808, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*" [0145.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0145.585] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0145.585] wcscmp (_String1=".", _String2=".") returned 0 [0145.585] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.585] wcscmp (_String1="..", _String2=".") returned 1 [0145.585] wcscmp (_String1="..", _String2="..") returned 0 [0145.585] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0145.586] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0145.586] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0145.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de68 [0145.586] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0145.586] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0145.586] wcscat (in: _Dest=0x3d8de68, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0159.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0159.752] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0159.752] wcscmp (_String1="Color", _String2=".") returned 1 [0159.752] wcscmp (_String1="Color", _String2="..") returned 1 [0159.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3ae8 [0159.752] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0159.752] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0159.752] wcscat (in: _Dest=0x2fe3ae8, _Source="Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0159.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0159.753] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0159.753] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0159.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0159.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7808) returned 1 [0159.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c80) returned 1 Thread: id = 1206 os_tid = 0xb6c [0145.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f233e0 [0145.586] wcscpy (in: _Dest=0x3f233e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0145.586] wcscat (in: _Dest=0x3f233e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\" [0145.586] wcscat (in: _Dest=0x3f233e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*" [0145.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0145.586] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0145.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f233e0) returned 1 [0145.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 1207 os_tid = 0xb30 [0145.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7e90 [0145.588] wcscpy (in: _Dest=0x3ef7e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0145.588] wcscat (in: _Dest=0x3ef7e90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0145.588] wcscat (in: _Dest=0x3ef7e90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*" [0145.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0145.588] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806f8 [0145.589] wcscmp (_String1=".", _String2=".") returned 0 [0145.589] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.589] wcscmp (_String1="..", _String2=".") returned 1 [0145.589] wcscmp (_String1="..", _String2="..") returned 0 [0145.589] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0145.589] wcscmp (_String1="Chrome", _String2=".") returned 1 [0145.589] wcscmp (_String1="Chrome", _String2="..") returned 1 [0145.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e278 [0145.589] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0145.590] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0145.590] wcscat (in: _Dest=0x3d8e278, _Source="Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0146.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0146.232] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0146.232] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0146.232] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0146.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29e20 [0146.232] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0146.232] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0146.232] wcscat (in: _Dest=0x3f29e20, _Source="CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0146.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0146.234] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0146.234] FindClose (in: hFindFile=0x3e806f8 | out: hFindFile=0x3e806f8) returned 1 [0146.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0146.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e90) returned 1 [0146.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5070) returned 1 Thread: id = 1208 os_tid = 0xdb4 [0145.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d88 [0145.590] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0145.590] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\" [0145.590] wcscat (in: _Dest=0x2fe6d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*" [0145.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0145.590] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0145.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 [0145.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5178) returned 1 Thread: id = 1209 os_tid = 0x154 [0145.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0145.592] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0145.592] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\" [0145.592] wcscat (in: _Dest=0x3d8ea30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*" [0145.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0145.592] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0145.592] wcscmp (_String1=".", _String2=".") returned 0 [0145.592] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.592] wcscmp (_String1="..", _String2=".") returned 1 [0145.592] wcscmp (_String1="..", _String2="..") returned 0 [0145.592] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.592] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0145.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0145.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0145.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 1210 os_tid = 0x444 [0145.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bb78 [0145.594] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0145.594] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\" [0145.594] wcscat (in: _Dest=0x3d8bb78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*" [0145.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0145.594] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0145.594] wcscmp (_String1=".", _String2=".") returned 0 [0145.594] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.595] wcscmp (_String1="..", _String2=".") returned 1 [0145.595] wcscmp (_String1="..", _String2="..") returned 0 [0145.595] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.595] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0145.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0145.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 [0145.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 1211 os_tid = 0x90 [0145.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx")) returned 0x20 [0145.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0145.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.596] GetLastError () returned 0x5 [0145.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0145.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1212 os_tid = 0xe3c [0145.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx")) returned 0x20 [0145.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0145.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.598] GetLastError () returned 0x5 [0145.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0145.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 1213 os_tid = 0x308 [0145.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx")) returned 0x20 [0146.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0146.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.710] GetLastError () returned 0x5 [0146.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0146.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 1214 os_tid = 0x75c [0145.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx")) returned 0x20 [0146.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0146.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.737] GetLastError () returned 0x5 [0146.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0146.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 1215 os_tid = 0x7e8 [0145.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx")) returned 0x20 [0146.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0146.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.414] GetLastError () returned 0x5 [0146.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0146.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 1216 os_tid = 0x41c [0145.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx")) returned 0x20 [0146.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0146.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.736] GetLastError () returned 0x5 [0146.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0146.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 1217 os_tid = 0xe74 [0145.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx")) returned 0x20 [0146.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0146.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.412] GetLastError () returned 0x5 [0146.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0146.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1218 os_tid = 0xb38 [0145.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx")) returned 0x20 [0146.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0146.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.746] GetLastError () returned 0x5 [0146.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0146.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 1219 os_tid = 0xdcc [0145.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx")) returned 0x20 [0146.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0146.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.734] GetLastError () returned 0x5 [0146.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0146.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 1220 os_tid = 0xe84 [0145.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx")) returned 0x20 [0146.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0146.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.745] GetLastError () returned 0x5 [0146.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0146.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 1221 os_tid = 0xe98 [0145.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx")) returned 0x20 [0146.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0146.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.732] GetLastError () returned 0x5 [0146.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0146.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 1222 os_tid = 0xea0 [0145.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx")) returned 0x20 [0146.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0146.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.731] GetLastError () returned 0x5 [0146.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0146.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 1223 os_tid = 0xdd4 [0145.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx")) returned 0x20 [0146.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0146.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.743] GetLastError () returned 0x5 [0146.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0146.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 Thread: id = 1224 os_tid = 0xe48 [0145.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx")) returned 0x20 [0146.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0146.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.729] GetLastError () returned 0x5 [0146.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0146.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 1225 os_tid = 0xe58 [0145.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx")) returned 0x20 [0146.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0146.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.727] GetLastError () returned 0x5 [0146.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0146.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 1226 os_tid = 0xecc [0145.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx")) returned 0x20 [0146.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0146.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.725] GetLastError () returned 0x5 [0146.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0146.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1227 os_tid = 0xee4 [0145.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx")) returned 0x20 [0146.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0146.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.741] GetLastError () returned 0x5 [0146.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0146.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 1228 os_tid = 0x410 [0145.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx")) returned 0x20 [0146.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0146.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.723] GetLastError () returned 0x5 [0146.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0146.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 1229 os_tid = 0xb14 [0145.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx")) returned 0x20 [0146.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0146.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.722] GetLastError () returned 0x5 [0146.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0146.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 1230 os_tid = 0xe44 [0145.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx")) returned 0x20 [0146.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0146.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.720] GetLastError () returned 0x5 [0146.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0146.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 1231 os_tid = 0xe70 [0145.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx")) returned 0x20 [0146.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0146.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.719] GetLastError () returned 0x5 [0146.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0146.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 1232 os_tid = 0xe38 [0145.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx")) returned 0x20 [0146.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0146.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.740] GetLastError () returned 0x5 [0146.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0146.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 1233 os_tid = 0xeac [0145.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx")) returned 0x20 [0146.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0146.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.717] GetLastError () returned 0x5 [0146.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0146.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 1234 os_tid = 0xe40 [0145.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx")) returned 0x20 [0146.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0146.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.715] GetLastError () returned 0x5 [0146.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0146.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 1235 os_tid = 0xb5c [0145.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx")) returned 0x20 [0146.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0146.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.714] GetLastError () returned 0x5 [0146.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0146.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1236 os_tid = 0xebc [0145.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx")) returned 0x20 [0146.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0146.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.712] GetLastError () returned 0x5 [0146.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0146.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d688) returned 1 Thread: id = 1237 os_tid = 0xe34 [0145.956] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\did1gbmohz0ytqn.mkv")) returned 0x20 [0145.956] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv", dwFileAttributes=0x20) returned 1 [0148.056] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\did1gbmohz0ytqn.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1564 [0148.056] GetFileSizeEx (in: hFile=0x1564, lpFileSize=0x7e8fb54 | out: lpFileSize=0x7e8fb54*=15185) returned 1 [0148.056] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x3b4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.056] ReadFile (in: hFile=0x1564, lpBuffer=0x7e8fb30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e8fb40, lpOverlapped=0x0 | out: lpBuffer=0x7e8fb30*, lpNumberOfBytesRead=0x7e8fb40*=0x4, lpOverlapped=0x0) returned 1 [0148.058] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0148.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0148.059] NtQuerySystemTime (in: CurrentTime=0x7e8fac8 | out: CurrentTime=0x7e8fac8*=132482710567104000) returned 0x0 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x5eb71a62 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x622688bc [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x596bed1b [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0xd660768 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x10237528 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x78335090 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x224abb4 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x55e2869e [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x5be777ed [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0xa6a4e92 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x316c729e [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x34f86d44 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x70ad3b2c [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x16d7b44c [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x6f74e952 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x3a31c821 [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x4486797e [0148.059] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x2bdd19be [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x6c6aa7b1 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x3a31c821 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x5312d239 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x6ce04ac4 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x1bd5f176 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0xb1617b8 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x583abdec [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x360d72e3 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x7f36cbdf [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x36d954bc [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x21156a70 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x1aaecc68 [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x3371a5de [0148.060] RtlRandomEx (in: Seed=0x7e8fac0 | out: Seed=0x7e8fac0) returned 0x27014e53 [0148.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6859140 [0148.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0148.078] ReadFile (in: hFile=0x1564, lpBuffer=0x6859140, nNumberOfBytesToRead=0x3b51, lpNumberOfBytesRead=0x7e8fabc, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesRead=0x7e8fabc*=0x3b51, lpOverlapped=0x0) returned 1 [0148.078] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.079] WriteFile (in: hFile=0x1564, lpBuffer=0x685cd48*, nNumberOfBytesToWrite=0x3b51, lpNumberOfBytesWritten=0x7e8fac0, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesWritten=0x7e8fac0*=0x3b51, lpOverlapped=0x0) returned 1 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5d968 [0148.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x66d24a0 [0148.318] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.318] WriteFile (in: hFile=0x1564, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x7e8fb48, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x7e8fb48*=0x118, lpOverlapped=0x0) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d24e0) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d24a0) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0148.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0148.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0148.863] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv" [0148.863] wcscat (in: _Dest=0x3e0d2b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv.ac3a86" [0148.863] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv.ac3a86", NtPathName=0x7e8fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\DID1GBMoHz0yTqN.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6180 [0149.142] FlushFileBuffers (hFile=0x1564) returned 1 [0149.210] CloseHandle (hObject=0x1564) returned 1 [0149.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcd38 [0149.212] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.212] wcscat (in: _Dest=0x66dcd38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.212] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 [0149.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 1238 os_tid = 0xeb4 [0145.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\euadsdv.mp4")) returned 0x20 [0145.957] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4", dwFileAttributes=0x20) returned 1 [0148.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\euadsdv.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1560 [0148.036] GetFileSizeEx (in: hFile=0x1560, lpFileSize=0x9a7fcec | out: lpFileSize=0x9a7fcec*=67389) returned 1 [0148.036] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x10739, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.036] ReadFile (in: hFile=0x1560, lpBuffer=0x9a7fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a7fcd8, lpOverlapped=0x0 | out: lpBuffer=0x9a7fcc8*, lpNumberOfBytesRead=0x9a7fcd8*=0x4, lpOverlapped=0x0) returned 1 [0148.038] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0148.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0148.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0148.038] NtQuerySystemTime (in: CurrentTime=0x9a7fc60 | out: CurrentTime=0x9a7fc60*=132482710566792000) returned 0x0 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x1fb5a070 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0xa57d5ad [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x16fddbf2 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0xbe2a4c1 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x4edb9888 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x4a1679eb [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x3fade689 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2a0cfeab [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2a106a30 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x4c072ee0 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x13635df0 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x5263f9ea [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x7757fdce [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x70823d14 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x5c8fff8 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x468850f4 [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2e8b74de [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x67ab312f [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x7c7f8ada [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2c981b0a [0148.038] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x29c797f0 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x95a138 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0xb5d3de2 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2efc5227 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x5c8fff8 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x1881caa8 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x27014e53 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x7b3a86ba [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x757aa9d3 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x2efc5227 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x687fed69 [0148.039] RtlRandomEx (in: Seed=0x9a7fc58 | out: Seed=0x9a7fc58) returned 0x4486797e [0148.048] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.048] ReadFile (in: hFile=0x1560, lpBuffer=0x6859140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a7fc60, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesRead=0x9a7fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0148.048] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0148.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0148.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0148.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0148.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0148.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0148.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0148.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0148.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0148.049] WriteFile (in: hFile=0x1560, lpBuffer=0x685cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a7fc60, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesWritten=0x9a7fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0148.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0148.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0148.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5f60 [0148.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0148.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5f30 [0148.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0148.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0148.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec4e0 [0148.055] SetFilePointerEx (in: hFile=0x1560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.055] WriteFile (in: hFile=0x1560, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x9a7fce0, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x9a7fce0*=0x108, lpOverlapped=0x0) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0148.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0148.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc948 [0148.956] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4" [0148.956] wcscat (in: _Dest=0x66dc948, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4.ac3a86" [0148.956] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4.ac3a86", NtPathName=0x9a7fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\eUadsdv.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ccb0 [0149.125] FlushFileBuffers (hFile=0x1560) returned 1 [0149.186] CloseHandle (hObject=0x1560) returned 1 [0149.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcdc8 [0149.187] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.187] wcscat (in: _Dest=0x66dcdc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.187] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 [0149.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 Thread: id = 1239 os_tid = 0xa34 [0145.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\evjkfqon6.mkv")) returned 0x20 [0145.958] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv", dwFileAttributes=0x20) returned 1 [0148.020] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\evjkfqon6.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1550 [0148.020] GetFileSizeEx (in: hFile=0x1550, lpFileSize=0x987f9d4 | out: lpFileSize=0x987f9d4*=16376) returned 1 [0148.020] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x3ff4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.020] ReadFile (in: hFile=0x1550, lpBuffer=0x987f9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x987f9c0, lpOverlapped=0x0 | out: lpBuffer=0x987f9b0*, lpNumberOfBytesRead=0x987f9c0*=0x4, lpOverlapped=0x0) returned 1 [0148.022] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0148.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0148.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0148.023] NtQuerySystemTime (in: CurrentTime=0x987f948 | out: CurrentTime=0x987f948*=132482710566792000) returned 0x0 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x7f608f8 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x2bb8d87a [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0xee5e92d [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x13d1d69c [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x80e9955 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x490e1ba0 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0xe25aa04 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x6d2f0ad8 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x4646869d [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x5174ccf1 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x5fbd68f3 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x15d43ea8 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x67078de1 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x34aa447e [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x554cfc3 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x476850f9 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x7798473d [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0xa6a4e92 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x583abdec [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x6d00c729 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x17de0053 [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x31548fad [0148.023] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x78b5f11 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x45d573c4 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x28ad37b6 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x7ef67581 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x68f2a03d [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x4ed8902a [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x38c512e4 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x6a3f5e42 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x1658e336 [0148.024] RtlRandomEx (in: Seed=0x987f940 | out: Seed=0x987f940) returned 0x4422a3dc [0148.033] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.033] ReadFile (in: hFile=0x1550, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x987f948, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x987f948*=0x3c00, lpOverlapped=0x0) returned 1 [0148.033] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0148.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0148.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0148.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0148.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0148.034] WriteFile (in: hFile=0x1550, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x987f948, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x987f948*=0x3c00, lpOverlapped=0x0) returned 1 [0148.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0148.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0148.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cf0 [0148.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5d968 [0148.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0148.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0148.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec5f8 [0148.317] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.317] WriteFile (in: hFile=0x1550, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x987f9c8, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x987f9c8*=0x10c, lpOverlapped=0x0) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0148.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0148.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69584a0 [0148.951] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv" [0148.951] wcscat (in: _Dest=0x69584a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv.ac3a86" [0148.951] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv.ac3a86", NtPathName=0x987f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\evjkfQON6.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5ce00 [0149.122] FlushFileBuffers (hFile=0x1550) returned 1 [0149.183] CloseHandle (hObject=0x1550) returned 1 [0149.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcdc8 [0149.184] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.184] wcscat (in: _Dest=0x66dcdc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.184] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 [0149.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 1240 os_tid = 0xeb8 [0145.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0145.958] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL" [0145.958] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\" [0145.958] wcscat (in: _Dest=0x66f00c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\*" [0145.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0145.959] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a54f40, ftCreationTime.dwHighDateTime=0x1d5dcbb, ftLastAccessTime.dwLowDateTime=0x5d2d6210, ftLastAccessTime.dwHighDateTime=0x1d5dfce, ftLastWriteTime.dwLowDateTime=0x5d2d6210, ftLastWriteTime.dwHighDateTime=0x1d5dfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0145.959] wcscmp (_String1=".", _String2=".") returned 0 [0145.959] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a54f40, ftCreationTime.dwHighDateTime=0x1d5dcbb, ftLastAccessTime.dwLowDateTime=0x5d2d6210, ftLastAccessTime.dwHighDateTime=0x1d5dfce, ftLastWriteTime.dwLowDateTime=0x5d2d6210, ftLastWriteTime.dwHighDateTime=0x1d5dfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.959] wcscmp (_String1="..", _String2=".") returned 1 [0145.959] wcscmp (_String1="..", _String2="..") returned 0 [0145.959] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e60d30, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0xaefa50e0, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xaefa50e0, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L6PZVFE7mpFrEYrW3L2", cAlternateFileName="L6PZVF~1")) returned 1 [0145.959] wcscmp (_String1="L6PZVFE7mpFrEYrW3L2", _String2=".") returned 1 [0145.959] wcscmp (_String1="L6PZVFE7mpFrEYrW3L2", _String2="..") returned 1 [0145.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c218 [0145.959] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL" [0145.959] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\" [0145.959] wcscat (in: _Dest=0x35c218, _Source="L6PZVFE7mpFrEYrW3L2" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" [0146.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0146.495] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e60d30, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0xaefa50e0, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xaefa50e0, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L6PZVFE7mpFrEYrW3L2", cAlternateFileName="L6PZVF~1")) returned 0 [0146.495] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0146.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0146.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 [0146.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 1241 os_tid = 0xeb0 [0145.960] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\odli19se8kg.flv")) returned 0x20 [0145.960] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv", dwFileAttributes=0x20) returned 1 [0148.002] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\odli19se8kg.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1548 [0148.002] GetFileSizeEx (in: hFile=0x1548, lpFileSize=0x662f84c | out: lpFileSize=0x662f84c*=68243) returned 1 [0148.002] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x10a8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.002] ReadFile (in: hFile=0x1548, lpBuffer=0x662f828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x662f838, lpOverlapped=0x0 | out: lpBuffer=0x662f828*, lpNumberOfBytesRead=0x662f838*=0x4, lpOverlapped=0x0) returned 1 [0148.004] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0148.004] NtQuerySystemTime (in: CurrentTime=0x662f7c0 | out: CurrentTime=0x662f7c0*=132482710566480000) returned 0x0 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0xf0a88b0 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x2ff63944 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x4c19c0e8 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x3ceacd76 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x2d92d44b [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x33494d0c [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0xba137f7 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x216b8946 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x65ff0a1 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x4bd973f9 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x107926a8 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x74c5dcc4 [0148.004] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x71426361 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x70b35e52 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x752163bd [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x380711dd [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x5439d6a [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x7b9ea2a4 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x2dd4b35b [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x2ab5d837 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x6b849924 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x72c2aed5 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0xf80be32 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x7a16d570 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x5954f0c5 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0xff750de [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x3151cabb [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x194a627e [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x20a1c71b [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x78ed5368 [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x50982a5c [0148.005] RtlRandomEx (in: Seed=0x662f7b8 | out: Seed=0x662f7b8) returned 0x67bcaeae [0148.016] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.017] ReadFile (in: hFile=0x1548, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x662f7c0, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x662f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.017] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0148.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0148.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0148.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0148.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0148.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0148.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0148.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0148.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0148.018] WriteFile (in: hFile=0x1548, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x662f7c0, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0x662f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0148.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19b98 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0148.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19cb0 [0148.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0148.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0148.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3debe50 [0148.316] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.316] WriteFile (in: hFile=0x1548, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x662f840, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x662f840*=0x110, lpOverlapped=0x0) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0148.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0148.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958408 [0148.862] wcscpy (in: _Dest=0x6958408, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv" [0148.862] wcscat (in: _Dest=0x6958408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv.ac3a86" [0148.862] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv.ac3a86", NtPathName=0x662f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\OdLi19Se8kG.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c4d8 [0149.077] FlushFileBuffers (hFile=0x1548) returned 1 [0149.085] CloseHandle (hObject=0x1548) returned 1 [0149.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc8b8 [0149.087] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.087] wcscat (in: _Dest=0x66dc8b8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.087] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 [0149.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 1242 os_tid = 0x4e4 [0145.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\oiygozc7qs7cqajn.mkv")) returned 0x20 [0145.961] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv", dwFileAttributes=0x20) returned 1 [0147.985] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\oiygozc7qs7cqajn.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1544 [0147.985] GetFileSizeEx (in: hFile=0x1544, lpFileSize=0xa64f87c | out: lpFileSize=0xa64f87c*=74581) returned 1 [0147.985] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x12351, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.985] ReadFile (in: hFile=0x1544, lpBuffer=0xa64f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa64f868, lpOverlapped=0x0 | out: lpBuffer=0xa64f858*, lpNumberOfBytesRead=0xa64f868*=0x4, lpOverlapped=0x0) returned 1 [0147.987] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0147.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0147.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0147.987] NtQuerySystemTime (in: CurrentTime=0xa64f7f0 | out: CurrentTime=0xa64f7f0*=132482710566324000) returned 0x0 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0xed37a72 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x75cb4635 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x554d0540 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x278cdcf0 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x387254d2 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x1cb262f0 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x3f8b02ce [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x67ed3bd5 [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x2009640d [0147.987] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x279e97b9 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x2b1b92e1 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x7aaa4e37 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0xc5d94ce [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x771374ec [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x67a9eb61 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x3c9e7ef3 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x2406adc8 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x2c04c83e [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x9b9910d [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0xf59d920 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x4cc0027a [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x7f502262 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x192c0dee [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x25bc1b70 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x1323c993 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x44725223 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x35f68a67 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x4bad1277 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x83fbe97 [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x6c3844ec [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x5f1aba0f [0147.988] RtlRandomEx (in: Seed=0xa64f7e8 | out: Seed=0xa64f7e8) returned 0x33a07e85 [0147.999] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.999] ReadFile (in: hFile=0x1544, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa64f7f0, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0xa64f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0147.999] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0148.000] WriteFile (in: hFile=0x1544, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa64f7f0, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0xa64f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d2420 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x66d2460 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0148.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3041e10 [0148.309] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.309] WriteFile (in: hFile=0x1544, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xa64f870, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0xa64f870*=0x11a, lpOverlapped=0x0) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2460) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2420) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0148.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0148.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0148.860] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv" [0148.860] wcscat (in: _Dest=0x3e0e890, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv.ac3a86" [0148.860] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv.ac3a86", NtPathName=0xa64f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\oIYgozC7QS7CQAjN.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0149.022] FlushFileBuffers (hFile=0x1544) returned 1 [0149.026] CloseHandle (hObject=0x1544) returned 1 [0149.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcc18 [0149.033] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.033] wcscat (in: _Dest=0x66dcc18, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 [0149.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 1243 os_tid = 0x530 [0145.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\tx50a3tj3jv89lf0ip.flv")) returned 0x20 [0145.961] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv", dwFileAttributes=0x20) returned 1 [0147.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\tx50a3tj3jv89lf0ip.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540 [0147.969] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0x8a7febc | out: lpFileSize=0x8a7febc*=28542) returned 1 [0147.969] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x6f7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.969] ReadFile (in: hFile=0x1540, lpBuffer=0x8a7fe98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a7fea8, lpOverlapped=0x0 | out: lpBuffer=0x8a7fe98*, lpNumberOfBytesRead=0x8a7fea8*=0x4, lpOverlapped=0x0) returned 1 [0147.971] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0147.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6c8 [0147.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0147.971] NtQuerySystemTime (in: CurrentTime=0x8a7fe30 | out: CurrentTime=0x8a7fe30*=132482710566168000) returned 0x0 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x15a965e8 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x60067fd4 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x230364e1 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x46dfbff0 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x418bb07c [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x3898b021 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x7ae8bd1a [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x21382aba [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x47d8bd62 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x504bb118 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x1a7fd325 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x17d365ce [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x2bc29670 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x69081ae9 [0147.971] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0xe47a420 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x34cc50e9 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x62466a2a [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x6adc7845 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x45c996c6 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x4ded10e3 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0xd411471 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x6c516bdd [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x642d9702 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x45427594 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x52966b65 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x66b317ee [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x4e626f1 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x5322d744 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x1eaf3fe3 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x3ff78420 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x3f56f6d5 [0147.972] RtlRandomEx (in: Seed=0x8a7fe28 | out: Seed=0x8a7fe28) returned 0x19ffbbf9 [0147.981] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.981] ReadFile (in: hFile=0x1540, lpBuffer=0x684a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8a7fe30, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesRead=0x8a7fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0147.981] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0147.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0147.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0147.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0147.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0147.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0147.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0147.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0147.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0147.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0147.982] WriteFile (in: hFile=0x1540, lpBuffer=0x684dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8a7fe30, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesWritten=0x8a7fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0148.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e32ac0 [0148.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0148.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e332a0 [0148.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332e8) returned 1 [0148.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3040a68 [0148.308] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.308] WriteFile (in: hFile=0x1540, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x8a7feb0, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0x8a7feb0*=0x11e, lpOverlapped=0x0) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332a0) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0148.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0148.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0148.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0148.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ca10 [0148.955] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv" [0148.955] wcscat (in: _Dest=0x3e5ca10, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv.ac3a86" [0148.955] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv.ac3a86", NtPathName=0x8a7fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Tx50a3TJ3Jv89lF0ip.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3330a8 [0149.127] FlushFileBuffers (hFile=0x1540) returned 1 [0149.188] CloseHandle (hObject=0x1540) returned 1 [0149.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcdc8 [0149.189] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.189] wcscat (in: _Dest=0x66dcdc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 1244 os_tid = 0xe30 [0145.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\wjq7.mkv")) returned 0x20 [0145.962] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv", dwFileAttributes=0x20) returned 1 [0147.516] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\wjq7.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x153c [0147.516] GetFileSizeEx (in: hFile=0x153c, lpFileSize=0x823f954 | out: lpFileSize=0x823f954*=33141) returned 1 [0147.516] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x8171, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.516] ReadFile (in: hFile=0x153c, lpBuffer=0x823f930, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x823f940, lpOverlapped=0x0 | out: lpBuffer=0x823f930*, lpNumberOfBytesRead=0x823f940*=0x4, lpOverlapped=0x0) returned 1 [0147.518] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0147.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0147.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0147.518] NtQuerySystemTime (in: CurrentTime=0x823f8c8 | out: CurrentTime=0x823f8c8*=132482710561644000) returned 0x0 [0147.518] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x67210166 [0147.518] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x1c12a615 [0147.518] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x465de321 [0147.518] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x6b8076 [0147.518] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x3f3a84ed [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x9c73f13 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x27d142d1 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x39b7e587 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x300d7b3f [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x43a6fc69 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x64d894e4 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x122c9423 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x12fb4460 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x73d59a97 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x4e42fe5c [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x1f57798b [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x3d498e3 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x4275eede [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0xf3cc302 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0xdc3b918 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x44480da [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x2df91818 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x23032726 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x221c758b [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x3ae70504 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x330debc6 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x771397f0 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x70d168f6 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x2b0d9697 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x6bef9154 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x69056bd0 [0147.519] RtlRandomEx (in: Seed=0x823f8c0 | out: Seed=0x823f8c0) returned 0x602bd820 [0147.965] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.965] ReadFile (in: hFile=0x153c, lpBuffer=0x6851930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x823f8c8, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesRead=0x823f8c8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.965] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d10a8 [0147.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0147.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0147.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0147.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6855538 [0147.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0147.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0147.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0147.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0147.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d10a8) returned 1 [0147.966] WriteFile (in: hFile=0x153c, lpBuffer=0x6855538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x823f8c8, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesWritten=0x823f8c8*=0x3c00, lpOverlapped=0x0) returned 1 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0148.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ae48 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0148.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ae70 [0148.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0148.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0148.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0148.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300da60 [0148.306] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.306] WriteFile (in: hFile=0x153c, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x823f948, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x823f948*=0x102, lpOverlapped=0x0) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0148.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0148.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26728 [0148.856] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv" [0148.856] wcscat (in: _Dest=0x3f26728, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv.ac3a86" [0148.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv.ac3a86", NtPathName=0x823f8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Wjq7.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0149.014] FlushFileBuffers (hFile=0x153c) returned 1 [0149.018] CloseHandle (hObject=0x153c) returned 1 [0149.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0149.025] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0149.025] wcscat (in: _Dest=0x66dc9d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0149.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0x20 [0149.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0149.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e093b0) returned 1 Thread: id = 1245 os_tid = 0xf00 [0145.971] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\y_mjgjqx_wx97.mkv")) returned 0x20 [0145.972] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv", dwFileAttributes=0x20) returned 1 [0147.502] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\y_mjgjqx_wx97.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1538 [0147.503] GetFileSizeEx (in: hFile=0x1538, lpFileSize=0xb05fdf4 | out: lpFileSize=0xb05fdf4*=2261) returned 1 [0147.503] SetFilePointerEx (in: hFile=0x1538, liDistanceToMove=0x8d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.503] ReadFile (in: hFile=0x1538, lpBuffer=0xb05fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb05fde0, lpOverlapped=0x0 | out: lpBuffer=0xb05fdd0*, lpNumberOfBytesRead=0xb05fde0*=0x4, lpOverlapped=0x0) returned 1 [0147.504] SetFilePointerEx (in: hFile=0x1538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0147.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0147.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0147.504] NtQuerySystemTime (in: CurrentTime=0xb05fd68 | out: CurrentTime=0xb05fd68*=132482710561488000) returned 0x0 [0147.504] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x4342ec73 [0147.504] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x5c5ca19 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x487f948c [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x6a743061 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x52b13c84 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0xad8885e [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0xc625da1 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x2d52cd1d [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x7e783d21 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x133eb9f5 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x3365103b [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x4ffd906c [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x2c7e83df [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x748f4628 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x62b3e5b3 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x1862c590 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x1ab65fd [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0xe8f5a1b [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x16bf8f8 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x5bc1a573 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x174afd69 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x209f50d3 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x170c88c2 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x2e190368 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x22b8ddf0 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x49a24f5a [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x32d61dd2 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x49255450 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x6927c7cc [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x3cc66926 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x2f89be70 [0147.505] RtlRandomEx (in: Seed=0xb05fd60 | out: Seed=0xb05fd60) returned 0x1b33f35d [0147.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0147.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0147.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6855538 [0147.515] ReadFile (in: hFile=0x1538, lpBuffer=0x6851930, nNumberOfBytesToRead=0x8d5, lpNumberOfBytesRead=0xb05fd5c, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesRead=0xb05fd5c*=0x8d5, lpOverlapped=0x0) returned 1 [0147.515] SetFilePointerEx (in: hFile=0x1538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.515] WriteFile (in: hFile=0x1538, lpBuffer=0x6855538*, nNumberOfBytesToWrite=0x8d5, lpNumberOfBytesWritten=0xb05fd60, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesWritten=0xb05fd60*=0x8d5, lpOverlapped=0x0) returned 1 [0147.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0147.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0147.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0147.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0147.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0147.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0147.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1840) returned 1 [0147.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19b98 [0147.674] SetFilePointerEx (in: hFile=0x1538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.674] WriteFile (in: hFile=0x1538, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xb05fde8, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0xb05fde8*=0x114, lpOverlapped=0x0) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0147.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0147.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ed90 [0147.685] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv" [0147.685] wcscat (in: _Dest=0x3e0ed90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv.ac3a86" [0147.686] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv.ac3a86", NtPathName=0xb05fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\Y_MJGJqX_wX97.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0147.706] FlushFileBuffers (hFile=0x1538) returned 1 [0147.709] CloseHandle (hObject=0x1538) returned 1 [0147.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc288 [0147.716] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\" [0147.716] wcscat (in: _Dest=0x66dc288, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" [0147.716] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt")) returned 0xffffffff [0147.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15ac [0147.729] WriteFile (in: hFile=0x15ac, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb05fd7c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb05fd7c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.759] CloseHandle (hObject=0x15ac) returned 1 [0147.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 [0147.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 1246 os_tid = 0xefc [0145.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51368 [0145.973] wcscpy (in: _Dest=0x3d51368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0145.973] wcscat (in: _Dest=0x3d51368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0145.973] wcscat (in: _Dest=0x3d51368, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*" [0145.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0145.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0146.178] wcscmp (_String1=".", _String2=".") returned 0 [0146.178] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.178] wcscmp (_String1="..", _String2=".") returned 1 [0146.178] wcscmp (_String1="..", _String2="..") returned 0 [0146.178] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0146.178] wcscmp (_String1="1033", _String2=".") returned 1 [0146.178] wcscmp (_String1="1033", _String2="..") returned 1 [0146.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d760 [0146.178] wcscpy (in: _Dest=0x3f1d760, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0146.178] wcscat (in: _Dest=0x3f1d760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0146.178] wcscat (in: _Dest=0x3f1d760, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0161.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0161.409] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xfb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0161.409] wcscmp (_String1="ACT3.SAM", _String2=".") returned 1 [0161.409] wcscmp (_String1="ACT3.SAM", _String2="..") returned 1 [0161.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e109f0 [0161.409] wcscpy (in: _Dest=0x3e109f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.409] wcscat (in: _Dest=0x3e109f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.409] wcscat (in: _Dest=0x3e109f0, _Source="ACT3.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" [0161.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e109f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0161.410] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6390, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0161.410] wcscmp (_String1="DELIMDOS.FAE", _String2=".") returned 1 [0161.410] wcscmp (_String1="DELIMDOS.FAE", _String2="..") returned 1 [0161.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a258 [0161.410] wcscpy (in: _Dest=0x3d5a258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.410] wcscat (in: _Dest=0x3d5a258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.410] wcscat (in: _Dest=0x3d5a258, _Source="DELIMDOS.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" [0161.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0161.411] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0161.411] wcscmp (_String1="DELIMWIN.FAE", _String2=".") returned 1 [0161.411] wcscmp (_String1="DELIMWIN.FAE", _String2="..") returned 1 [0161.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58eb0 [0161.411] wcscpy (in: _Dest=0x3d58eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.411] wcscat (in: _Dest=0x3d58eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.412] wcscat (in: _Dest=0x3d58eb0, _Source="DELIMWIN.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" [0161.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0161.413] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0161.413] wcscmp (_String1="DESKSAM.SAM", _String2=".") returned 1 [0161.413] wcscmp (_String1="DESKSAM.SAM", _String2="..") returned 1 [0161.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a148 [0161.413] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.413] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.413] wcscat (in: _Dest=0x3d5a148, _Source="DESKSAM.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" [0161.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0161.414] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xc178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0161.414] wcscmp (_String1="ODBC.SAM", _String2=".") returned 1 [0161.414] wcscmp (_String1="ODBC.SAM", _String2="..") returned 1 [0161.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f670 [0161.415] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.415] wcscat (in: _Dest=0x3e0f670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.415] wcscat (in: _Dest=0x3e0f670, _Source="ODBC.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" [0161.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0161.417] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0161.418] wcscmp (_String1="OL.SAM", _String2=".") returned 1 [0161.418] wcscmp (_String1="OL.SAM", _String2="..") returned 1 [0161.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e106f0 [0161.418] wcscpy (in: _Dest=0x3e106f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.418] wcscat (in: _Dest=0x3e106f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.418] wcscat (in: _Dest=0x3e106f0, _Source="OL.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" [0161.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e106f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0161.419] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81581a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x16da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0161.419] wcscmp (_String1="OLADD.FAE", _String2=".") returned 1 [0161.419] wcscmp (_String1="OLADD.FAE", _String2="..") returned 1 [0161.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59e18 [0161.419] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.419] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.419] wcscat (in: _Dest=0x3d59e18, _Source="OLADD.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" [0161.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0161.420] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x155a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0161.420] wcscmp (_String1="OLAPPT.FAE", _String2=".") returned 1 [0161.420] wcscmp (_String1="OLAPPT.FAE", _String2="..") returned 1 [0161.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d597b8 [0161.420] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.420] wcscat (in: _Dest=0x3d597b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.420] wcscat (in: _Dest=0x3d597b8, _Source="OLAPPT.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" [0161.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d597b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0161.421] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0161.421] wcscmp (_String1="OLJRNL.FAE", _String2=".") returned 1 [0161.421] wcscmp (_String1="OLJRNL.FAE", _String2="..") returned 1 [0161.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a2e0 [0161.421] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.421] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.421] wcscat (in: _Dest=0x3d5a2e0, _Source="OLJRNL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" [0161.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0161.422] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0161.423] wcscmp (_String1="OLMAIL.FAE", _String2=".") returned 1 [0161.423] wcscmp (_String1="OLMAIL.FAE", _String2="..") returned 1 [0161.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d59488 [0161.423] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.423] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.423] wcscat (in: _Dest=0x3d59488, _Source="OLMAIL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" [0161.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0161.424] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x9798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0161.424] wcscmp (_String1="OLNOTE.FAE", _String2=".") returned 1 [0161.424] wcscmp (_String1="OLNOTE.FAE", _String2="..") returned 1 [0161.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a3f0 [0161.424] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.424] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.424] wcscat (in: _Dest=0x3d5a3f0, _Source="OLNOTE.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" [0161.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0161.425] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x14198, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0161.425] wcscmp (_String1="OLTASK.FAE", _String2=".") returned 1 [0161.425] wcscmp (_String1="OLTASK.FAE", _String2="..") returned 1 [0161.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d090 [0161.426] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.426] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.426] wcscat (in: _Dest=0x682d090, _Source="OLTASK.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" [0161.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0161.427] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xa988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0161.427] wcscmp (_String1="ORG97.SAM", _String2=".") returned 1 [0161.427] wcscmp (_String1="ORG97.SAM", _String2="..") returned 1 [0161.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d118 [0161.427] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.427] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.427] wcscat (in: _Dest=0x682d118, _Source="ORG97.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" [0161.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0161.428] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0161.428] wcscmp (_String1="PAB.SAM", _String2=".") returned 1 [0161.428] wcscmp (_String1="PAB.SAM", _String2="..") returned 1 [0161.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbe78 [0161.428] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0161.428] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0161.428] wcscat (in: _Dest=0x3edbe78, _Source="PAB.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" [0161.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0161.429] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x13168, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0161.429] wcscmp (_String1="RM.DLL", _String2=".") returned 1 [0161.429] wcscmp (_String1="RM.DLL", _String2="..") returned 1 [0161.429] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0161.429] wcscmp (_String1="TRANSMGR.DLL", _String2=".") returned 1 [0161.429] wcscmp (_String1="TRANSMGR.DLL", _String2="..") returned 1 [0161.429] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0161.429] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0161.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0161.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 [0161.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c68) returned 1 Thread: id = 1247 os_tid = 0x7ec [0145.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc")) returned 0x20 [0149.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0149.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.417] GetLastError () returned 0x5 [0149.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0149.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08f30) returned 1 Thread: id = 1248 os_tid = 0x14c [0145.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6770 [0145.983] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0145.983] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0145.983] wcscat (in: _Dest=0x3da6770, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*" [0145.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0145.983] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0150.433] wcscmp (_String1=".", _String2=".") returned 0 [0150.433] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.433] wcscmp (_String1="..", _String2=".") returned 1 [0150.433] wcscmp (_String1="..", _String2="..") returned 0 [0150.433] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0150.433] wcscmp (_String1="1033", _String2=".") returned 1 [0150.434] wcscmp (_String1="1033", _String2="..") returned 1 [0150.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a1d0 [0150.434] wcscpy (in: _Dest=0x3d5a1d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0150.434] wcscat (in: _Dest=0x3d5a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0150.434] wcscat (in: _Dest=0x3d5a1d0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0157.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d5a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0157.331] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0157.332] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0157.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0157.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 [0157.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08eb0) returned 1 Thread: id = 1249 os_tid = 0xee8 [0145.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat")) returned 0x20 [0150.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0150.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.265] GetLastError () returned 0x5 [0152.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0152.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 Thread: id = 1250 os_tid = 0xe6c [0145.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat")) returned 0x20 [0150.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0150.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.084] GetLastError () returned 0x5 [0153.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0153.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 Thread: id = 1251 os_tid = 0xe60 [0146.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng")) returned 0x20 [0150.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0150.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.729] GetLastError () returned 0x5 [0151.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0151.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 Thread: id = 1252 os_tid = 0xa8c [0146.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add")) returned 0x20 [0152.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0152.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.904] GetLastError () returned 0x5 [0152.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0152.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 Thread: id = 1253 os_tid = 0xe64 [0146.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest")) returned 0x20 [0148.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0148.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.605] GetLastError () returned 0x5 [0150.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0150.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 1254 os_tid = 0xe68 [0146.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml")) returned 0x20 [0153.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0153.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.125] GetLastError () returned 0x5 [0153.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0153.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 Thread: id = 1255 os_tid = 0xe5c [0146.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml")) returned 0x20 [0150.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0150.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.730] GetLastError () returned 0x5 [0151.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0151.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 Thread: id = 1256 os_tid = 0x6f0 [0146.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f234c0 [0146.009] wcscpy (in: _Dest=0x3f234c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0146.009] wcscat (in: _Dest=0x3f234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0146.009] wcscat (in: _Dest=0x3f234c0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*" [0146.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9e98 [0146.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0150.610] wcscmp (_String1=".", _String2=".") returned 0 [0150.610] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.610] wcscmp (_String1="..", _String2=".") returned 1 [0150.610] wcscmp (_String1="..", _String2="..") returned 0 [0150.610] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0150.610] wcscmp (_String1="1033", _String2=".") returned 1 [0150.610] wcscmp (_String1="1033", _String2="..") returned 1 [0150.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ae80 [0150.610] wcscpy (in: _Dest=0x3f1ae80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0150.610] wcscat (in: _Dest=0x3f1ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0150.610] wcscat (in: _Dest=0x3f1ae80, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0152.103] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0152.103] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0152.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9e98) returned 1 [0152.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f234c0) returned 1 [0152.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 1257 os_tid = 0xb04 [0146.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng")) returned 0x20 [0150.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0150.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.728] GetLastError () returned 0x5 [0151.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0151.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 Thread: id = 1258 os_tid = 0x150 [0146.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest")) returned 0x20 [0150.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0150.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.727] GetLastError () returned 0x5 [0151.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0151.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 1259 os_tid = 0x11c [0146.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23530 [0146.011] wcscpy (in: _Dest=0x3f23530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0146.011] wcscat (in: _Dest=0x3f23530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0146.011] wcscat (in: _Dest=0x3f23530, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*" [0146.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0146.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0153.453] wcscmp (_String1=".", _String2=".") returned 0 [0153.453] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.453] wcscmp (_String1="..", _String2=".") returned 1 [0153.453] wcscmp (_String1="..", _String2="..") returned 0 [0153.453] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0153.453] wcscmp (_String1="Certificates", _String2=".") returned 1 [0153.453] wcscmp (_String1="Certificates", _String2="..") returned 1 [0153.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27030 [0153.454] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.454] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.454] wcscat (in: _Dest=0x3f27030, _Source="Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0153.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0153.620] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0153.620] wcscmp (_String1="Sounds", _String2=".") returned 1 [0153.620] wcscmp (_String1="Sounds", _String2="..") returned 1 [0153.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674adb8 [0153.620] wcscpy (in: _Dest=0x674adb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.620] wcscat (in: _Dest=0x674adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.620] wcscat (in: _Dest=0x674adb8, _Source="Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0153.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0153.621] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0153.621] wcscmp (_String1="ToolBMPs", _String2=".") returned 1 [0153.621] wcscmp (_String1="ToolBMPs", _String2="..") returned 1 [0153.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ae38 [0153.622] wcscpy (in: _Dest=0x674ae38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.622] wcscat (in: _Dest=0x674ae38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.622] wcscat (in: _Dest=0x674ae38, _Source="ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0153.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674ae38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0153.623] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0153.623] wcscmp (_String1="ToolData", _String2=".") returned 1 [0153.623] wcscmp (_String1="ToolData", _String2="..") returned 1 [0153.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674aeb8 [0153.623] wcscpy (in: _Dest=0x674aeb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.623] wcscat (in: _Dest=0x674aeb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.623] wcscat (in: _Dest=0x674aeb8, _Source="ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0153.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674aeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0153.624] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1 [0153.624] wcscmp (_String1="ToolIcons", _String2=".") returned 1 [0153.624] wcscmp (_String1="ToolIcons", _String2="..") returned 1 [0153.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674af38 [0153.624] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.624] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.624] wcscat (in: _Dest=0x674af38, _Source="ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0153.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0153.625] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 1 [0153.625] wcscmp (_String1="XML Files", _String2=".") returned 1 [0153.625] wcscmp (_String1="XML Files", _String2="..") returned 1 [0153.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674afb8 [0153.625] wcscpy (in: _Dest=0x674afb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.625] wcscat (in: _Dest=0x674afb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.626] wcscat (in: _Dest=0x674afb8, _Source="XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0153.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674afb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0153.627] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 0 [0153.627] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0153.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0153.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23530) returned 1 [0153.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f233e0) returned 1 Thread: id = 1260 os_tid = 0xbf8 [0146.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml")) returned 0x20 [0146.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0146.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.012] GetLastError () returned 0x5 [0146.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0146.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 1261 os_tid = 0xef4 [0146.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add")) returned 0x20 [0153.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0153.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.080] GetLastError () returned 0x5 [0153.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0153.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 Thread: id = 1262 os_tid = 0xb44 [0146.185] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\5ghki5eaicl6irp7.m4a")) returned 0x20 [0146.185] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a", dwFileAttributes=0x20) returned 1 [0148.100] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\5ghki5eaicl6irp7.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x156c [0148.100] GetFileSizeEx (in: hFile=0x156c, lpFileSize=0x812f9e4 | out: lpFileSize=0x812f9e4*=72526) returned 1 [0148.100] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x11b4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.100] ReadFile (in: hFile=0x156c, lpBuffer=0x812f9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x812f9d0, lpOverlapped=0x0 | out: lpBuffer=0x812f9c0*, lpNumberOfBytesRead=0x812f9d0*=0x4, lpOverlapped=0x0) returned 1 [0148.102] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0148.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0148.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0148.103] NtQuerySystemTime (in: CurrentTime=0x812f958 | out: CurrentTime=0x812f958*=132482710567572000) returned 0x0 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x7783aad4 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x3e0b4bc8 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x1bd02737 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0xc645593 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x116c8fd0 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x6ca14484 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x5da7256a [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x24b80a84 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x20f1fb6c [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x4a3151c3 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x572024d2 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0xf8f43c6 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x7757fdce [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x95502e2 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x7d355837 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x42a4397a [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x1fb89ecf [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x7509f525 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x6b0f4276 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x6e5ab58 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x5d4e1909 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x2e56e00a [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x3ef21685 [0148.103] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x1935fa7f [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x4dbdc272 [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x2f534423 [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x5da7256a [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x3aacdf6d [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x2a6484ef [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x1593a19e [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x1bd5f176 [0148.104] RtlRandomEx (in: Seed=0x812f950 | out: Seed=0x812f950) returned 0x3f083c5e [0148.114] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.114] ReadFile (in: hFile=0x156c, lpBuffer=0x6868160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x812f958, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesRead=0x812f958*=0x3c00, lpOverlapped=0x0) returned 1 [0148.114] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0148.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0148.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0148.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0148.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686bd68 [0148.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0148.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0148.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0148.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0148.115] WriteFile (in: hFile=0x156c, lpBuffer=0x686bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x812f958, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesWritten=0x812f958*=0x3c00, lpOverlapped=0x0) returned 1 [0148.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0148.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066d40 [0148.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067100 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0148.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c788) returned 1 [0148.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55840 [0148.820] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.820] WriteFile (in: hFile=0x156c, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x812f9d8, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0x812f9d8*=0x11a, lpOverlapped=0x0) returned 1 [0149.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0149.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 [0149.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0149.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 [0149.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0149.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0149.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0149.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0149.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34790 [0149.423] wcscpy (in: _Dest=0x3e34790, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a" [0149.423] wcscat (in: _Dest=0x3e34790, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a.ac3a86" [0149.423] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a.ac3a86", NtPathName=0x812f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\5GHkI5eAiCL6IRp7.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db628 [0149.426] FlushFileBuffers (hFile=0x156c) returned 1 [0151.309] CloseHandle (hObject=0x156c) returned 1 [0151.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e9c8 [0151.631] wcscpy (in: _Dest=0x3d8e9c8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0151.631] wcscat (in: _Dest=0x3d8e9c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0151.631] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0151.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 [0151.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 Thread: id = 1263 os_tid = 0xbe8 [0146.186] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\5qe0vfbe809-.m4a")) returned 0x20 [0146.186] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a", dwFileAttributes=0x20) returned 1 [0148.081] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\5qe0vfbe809-.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0148.081] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0x5c8f9e4 | out: lpFileSize=0x5c8f9e4*=71916) returned 1 [0148.081] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x118e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.081] ReadFile (in: hFile=0x1568, lpBuffer=0x5c8f9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c8f9d0, lpOverlapped=0x0 | out: lpBuffer=0x5c8f9c0*, lpNumberOfBytesRead=0x5c8f9d0*=0x4, lpOverlapped=0x0) returned 1 [0148.083] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0148.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0148.083] NtQuerySystemTime (in: CurrentTime=0x5c8f958 | out: CurrentTime=0x5c8f958*=132482710567260000) returned 0x0 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x6dba499d [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x1873f577 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x6a3f5e42 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x2a58638b [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x4eea6f0 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x3917583c [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x5bd3f89a [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x44ae9ea0 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x324238ff [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0xc645593 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x366953d1 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x3371a5de [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x7c1abc1e [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x6bbe26d8 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x83c8c0d [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x41e87de8 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x5b635e40 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x273842e3 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x786e69fb [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x6ce04ac4 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x91ee3f4 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x23d214f2 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0xb083364 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x10237528 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x10f61d39 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0xfa2eae8 [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x71b2e3ee [0148.084] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x48884003 [0148.085] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x777d004a [0148.085] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x6c4a2524 [0148.085] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0x323fcbd4 [0148.085] RtlRandomEx (in: Seed=0x5c8f950 | out: Seed=0x5c8f950) returned 0xe401865 [0148.096] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.096] ReadFile (in: hFile=0x1568, lpBuffer=0x6860950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5c8f958, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesRead=0x5c8f958*=0x3c00, lpOverlapped=0x0) returned 1 [0148.097] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0148.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0148.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0148.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0148.098] WriteFile (in: hFile=0x1568, lpBuffer=0x6864558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5c8f958, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesWritten=0x5c8f958*=0x3c00, lpOverlapped=0x0) returned 1 [0148.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0148.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0148.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19850 [0148.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0148.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19ce8 [0148.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0148.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0148.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0148.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0148.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3042500 [0148.320] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.320] WriteFile (in: hFile=0x1568, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x5c8f9d8, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0x5c8f9d8*=0x112, lpOverlapped=0x0) returned 1 [0148.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0148.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ce8) returned 1 [0148.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0148.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0148.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0148.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0148.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0148.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0148.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e61a8 [0148.867] wcscpy (in: _Dest=0x66e61a8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a" [0148.867] wcscat (in: _Dest=0x66e61a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a.ac3a86" [0148.867] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a.ac3a86", NtPathName=0x5c8f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\5Qe0Vfbe809-.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f266a0 [0149.007] FlushFileBuffers (hFile=0x1568) returned 1 [0149.010] CloseHandle (hObject=0x1568) returned 1 [0149.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d440 [0149.017] wcscpy (in: _Dest=0x3d8d440, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.017] wcscat (in: _Dest=0x3d8d440, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 [0149.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd7f0) returned 1 Thread: id = 1264 os_tid = 0xbb0 [0146.186] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\bguuyoyicqnm6rpz_cgq.m4a")) returned 0x20 [0146.186] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a", dwFileAttributes=0x20) returned 1 [0147.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\bguuyoyicqnm6rpz_cgq.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1278 [0147.223] GetFileSizeEx (in: hFile=0x1278, lpFileSize=0x85efedc | out: lpFileSize=0x85efedc*=60386) returned 1 [0147.224] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0xebde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.224] ReadFile (in: hFile=0x1278, lpBuffer=0x85efeb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85efec8, lpOverlapped=0x0 | out: lpBuffer=0x85efeb8*, lpNumberOfBytesRead=0x85efec8*=0x4, lpOverlapped=0x0) returned 1 [0147.225] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0147.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0147.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0147.226] NtQuerySystemTime (in: CurrentTime=0x85efe50 | out: CurrentTime=0x85efe50*=132482710558680000) returned 0x0 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x3f05bd28 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x3f5a9952 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x698599f7 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x3cdb12a5 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x2eaa1064 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x70b926da [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x25a90248 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x281cd3fb [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x38dd954b [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x1a2e4228 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x5ccb9d22 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x18c08f29 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x29e6e77b [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x6d6e0e4c [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x1b3b51bb [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x13035f37 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x48e6d2aa [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x2ac06e5e [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x2a553101 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x15d4409a [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x611e621c [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x2596ec87 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x13d209ab [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x28bf58f0 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x5e263b0b [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x6028dac [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x4908dc71 [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x377d8d6f [0147.226] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0xd990e52 [0147.227] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x3a2a3761 [0147.227] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x228bbede [0147.227] RtlRandomEx (in: Seed=0x85efe48 | out: Seed=0x85efe48) returned 0x501eeaa8 [0147.238] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.238] ReadFile (in: hFile=0x1278, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85efe50, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x85efe50*=0x3c00, lpOverlapped=0x0) returned 1 [0147.239] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fdc10 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3dc5d80 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0147.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0147.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0147.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0147.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0147.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdc10) returned 1 [0147.239] WriteFile (in: hFile=0x1278, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85efe50, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x85efe50*=0x3c00, lpOverlapped=0x0) returned 1 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0147.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4f428 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0147.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4f590 [0147.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0147.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a880 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0147.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0147.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67078b0 [0147.643] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.643] WriteFile (in: hFile=0x1278, lpBuffer=0x67078b0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x85efed0, lpOverlapped=0x0 | out: lpBuffer=0x67078b0*, lpNumberOfBytesWritten=0x85efed0*=0x122, lpOverlapped=0x0) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67078b0) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f590) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f428) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0147.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0147.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbe78 [0147.682] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a" [0147.682] wcscat (in: _Dest=0x3edbe78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a.ac3a86" [0147.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a.ac3a86", NtPathName=0x85efe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\BGuUyoYiCQnm6Rpz_cGQ.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69595d8 [0147.771] FlushFileBuffers (hFile=0x1278) returned 1 [0147.773] CloseHandle (hObject=0x1278) returned 1 [0147.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd4b0 [0147.785] wcscpy (in: _Dest=0x66cd4b0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0147.785] wcscat (in: _Dest=0x66cd4b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0147.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0xffffffff [0147.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1278 [0147.792] WriteFile (in: hFile=0x1278, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x85efe64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x85efe64*=0x8b9, lpOverlapped=0x0) returned 1 [0147.801] CloseHandle (hObject=0x1278) returned 1 [0147.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd4b0) returned 1 [0147.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 Thread: id = 1265 os_tid = 0xc18 [0146.187] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\cvqs.mp3")) returned 0x20 [0146.187] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3", dwFileAttributes=0x20) returned 1 [0148.647] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\cvqs.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf8c [0148.647] GetFileSizeEx (in: hFile=0xf8c, lpFileSize=0x5bdfb1c | out: lpFileSize=0x5bdfb1c*=70908) returned 1 [0148.647] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x114f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.647] ReadFile (in: hFile=0xf8c, lpBuffer=0x5bdfaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5bdfb08, lpOverlapped=0x0 | out: lpBuffer=0x5bdfaf8*, lpNumberOfBytesRead=0x5bdfb08*=0x4, lpOverlapped=0x0) returned 1 [0148.649] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0148.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0148.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0148.649] NtQuerySystemTime (in: CurrentTime=0x5bdfa90 | out: CurrentTime=0x5bdfa90*=132482710573032000) returned 0x0 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x461ec596 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x505db1c4 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x262c893a [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x35025d1c [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x9c748a8 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x1e1bc5a2 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x7a8fe35c [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x509707fd [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x5cbf1e05 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x464ba599 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x22c96671 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x81ff1a2 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x6f8a702a [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x57d8c30c [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x12008901 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x243300a5 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x305fa3bf [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x76346761 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x9719728 [0148.649] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x99c6fe8 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x393d3aec [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x15580345 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0xdd6cbcd [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x74cb6191 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x5bdc111f [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x6bf6ad06 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x3e5b52c1 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x6b2bcd99 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x2985f09e [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x101fc166 [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x46d6c8bf [0148.650] RtlRandomEx (in: Seed=0x5bdfa88 | out: Seed=0x5bdfa88) returned 0x21bb1e18 [0148.658] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.658] ReadFile (in: hFile=0xf8c, lpBuffer=0x6859140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5bdfa90, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesRead=0x5bdfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0148.659] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f038 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0148.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.659] WriteFile (in: hFile=0xf8c, lpBuffer=0x685cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5bdfa90, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesWritten=0x5bdfa90*=0x3c00, lpOverlapped=0x0) returned 1 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4c378 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4c620 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c490 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec080 [0148.906] SetFilePointerEx (in: hFile=0xf8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.907] WriteFile (in: hFile=0xf8c, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x5bdfb10, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x5bdfb10*=0x102, lpOverlapped=0x0) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0148.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0148.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0148.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6968 [0148.984] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3" [0148.984] wcscat (in: _Dest=0x2fe6968, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3.ac3a86" [0148.984] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3.ac3a86", NtPathName=0x5bdfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\cvqS.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b420 [0149.052] FlushFileBuffers (hFile=0xf8c) returned 1 [0149.054] CloseHandle (hObject=0xf8c) returned 1 [0149.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d920 [0149.055] wcscpy (in: _Dest=0x3d8d920, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.055] wcscat (in: _Dest=0x3d8d920, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0149.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75a0) returned 1 Thread: id = 1266 os_tid = 0xc20 [0146.187] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\dk2 94huwca3.m4a")) returned 0x20 [0146.188] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a", dwFileAttributes=0x20) returned 1 [0148.660] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\dk2 94huwca3.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf80 [0148.660] GetFileSizeEx (in: hFile=0xf80, lpFileSize=0x7fafb24 | out: lpFileSize=0x7fafb24*=37883) returned 1 [0148.660] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x93f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.660] ReadFile (in: hFile=0xf80, lpBuffer=0x7fafb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fafb10, lpOverlapped=0x0 | out: lpBuffer=0x7fafb00*, lpNumberOfBytesRead=0x7fafb10*=0x4, lpOverlapped=0x0) returned 1 [0148.662] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0148.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0148.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.662] NtQuerySystemTime (in: CurrentTime=0x7fafa98 | out: CurrentTime=0x7fafa98*=132482710573188000) returned 0x0 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x255d0875 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x71538f01 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x48ad696d [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x4c71087f [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x63ce960f [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x5f756784 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x59069c72 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x73c91b7a [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x73c352b3 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x3050bae1 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x421a7d3e [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x7c5bcb83 [0148.662] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x77a76e1d [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0xea948c1 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x148a7fd8 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x50de59aa [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x1ac82bd6 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x2e42c5a4 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x2a4d1657 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x5a23315e [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x230026c9 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x6598c3f2 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x946be68 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x67e25e82 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x2fecbc81 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x7fcfc4e6 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x53002172 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x6e25d59c [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0xbf753af [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x3c39510e [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x762c58e7 [0148.663] RtlRandomEx (in: Seed=0x7fafa90 | out: Seed=0x7fafa90) returned 0x3132ed24 [0148.672] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.672] ReadFile (in: hFile=0xf80, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7fafa98, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x7fafa98*=0x3c00, lpOverlapped=0x0) returned 1 [0148.672] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f038 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0148.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0148.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0148.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.673] WriteFile (in: hFile=0xf80, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7fafa98, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x7fafa98*=0x3c00, lpOverlapped=0x0) returned 1 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19b98 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19cb0 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c490 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0148.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3041e10 [0148.910] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.910] WriteFile (in: hFile=0xf80, lpBuffer=0x3041e10*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x7fafb18, lpOverlapped=0x0 | out: lpBuffer=0x3041e10*, lpNumberOfBytesWritten=0x7fafb18*=0x112, lpOverlapped=0x0) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0148.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0148.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0148.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0148.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5a38 [0148.987] wcscpy (in: _Dest=0x66e5a38, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a" [0148.987] wcscat (in: _Dest=0x66e5a38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a.ac3a86" [0148.987] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a.ac3a86", NtPathName=0x7fafa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\dk2 94Huwca3.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f266a0 [0149.130] FlushFileBuffers (hFile=0xf80) returned 1 [0149.190] CloseHandle (hObject=0xf80) returned 1 [0149.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd310 [0149.191] wcscpy (in: _Dest=0x66cd310, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.191] wcscat (in: _Dest=0x66cd310, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd310) returned 1 [0149.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 Thread: id = 1267 os_tid = 0xc1c [0146.188] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav" (normalized: "c:\\users\\eebsym5\\music\\hn _\\gc0ri56sp3sl_opt4bj8.wav")) returned 0x20 [0146.188] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav", dwFileAttributes=0x20) returned 1 [0148.674] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav" (normalized: "c:\\users\\eebsym5\\music\\hn _\\gc0ri56sp3sl_opt4bj8.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb0 [0148.674] GetFileSizeEx (in: hFile=0xfb0, lpFileSize=0x647faec | out: lpFileSize=0x647faec*=12678) returned 1 [0148.674] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x3182, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.674] ReadFile (in: hFile=0xfb0, lpBuffer=0x647fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x647fad8, lpOverlapped=0x0 | out: lpBuffer=0x647fac8*, lpNumberOfBytesRead=0x647fad8*=0x4, lpOverlapped=0x0) returned 1 [0148.676] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0148.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0148.676] NtQuerySystemTime (in: CurrentTime=0x647fa60 | out: CurrentTime=0x647fa60*=132482710573188000) returned 0x0 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x369500d7 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x79e12067 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x767cf9f0 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x68c587ad [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x45b52090 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x4cf9a672 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x56260643 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0xc2a5916 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x77bd9a51 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x49e9cc7b [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x4156fabc [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x3d88ffb3 [0148.676] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x49beb86e [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x54780a71 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x2b366cd3 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x4ffce3f2 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x656240bf [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x17215a50 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x9fd459d [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x388a9a4c [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0xcae2138 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0xc822801 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x4ac2099c [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x29c558cc [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x2c5e0525 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x30e1bf75 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x1d942e29 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0xccf43a4 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x3f4e1a35 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x26fe8740 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x689746a0 [0148.677] RtlRandomEx (in: Seed=0x647fa58 | out: Seed=0x647fa58) returned 0x6a749a9b [0148.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0148.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683b100 [0148.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0148.686] ReadFile (in: hFile=0xfb0, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3186, lpNumberOfBytesRead=0x647fa54, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x647fa54*=0x3186, lpOverlapped=0x0) returned 1 [0148.687] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.687] WriteFile (in: hFile=0xfb0, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3186, lpNumberOfBytesWritten=0x647fa58, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0x647fa58*=0x3186, lpOverlapped=0x0) returned 1 [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0148.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0148.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0148.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0148.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4f038 [0148.913] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.913] WriteFile (in: hFile=0xfb0, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x647fae0, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x647fae0*=0x122, lpOverlapped=0x0) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eae0) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f038) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0148.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0148.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e095b0 [0148.988] wcscpy (in: _Dest=0x3e095b0, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav" [0148.988] wcscat (in: _Dest=0x3e095b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav.ac3a86" [0148.988] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav.ac3a86", NtPathName=0x647fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\Gc0ri56sp3sL_oPt4BJ8.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958798 [0149.133] FlushFileBuffers (hFile=0xfb0) returned 1 [0149.193] CloseHandle (hObject=0xfb0) returned 1 [0149.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd448 [0149.194] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.194] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.194] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0149.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 Thread: id = 1268 os_tid = 0xbcc [0146.188] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\jknxs-s_s.m4a")) returned 0x20 [0146.189] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a", dwFileAttributes=0x20) returned 1 [0148.687] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\jknxs-s_s.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1304 [0148.687] GetFileSizeEx (in: hFile=0x1304, lpFileSize=0x22cf91c | out: lpFileSize=0x22cf91c*=80136) returned 1 [0148.687] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0x13904, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.687] ReadFile (in: hFile=0x1304, lpBuffer=0x22cf8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x22cf908, lpOverlapped=0x0 | out: lpBuffer=0x22cf8f8*, lpNumberOfBytesRead=0x22cf908*=0x4, lpOverlapped=0x0) returned 1 [0148.689] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0148.689] NtQuerySystemTime (in: CurrentTime=0x22cf890 | out: CurrentTime=0x22cf890*=132482710573344000) returned 0x0 [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x3c39510e [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0xf6b4cbb [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5b80b631 [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5c473d80 [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x7c77db2c [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x26fe8740 [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x490e9b9f [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x4f9d8a01 [0148.689] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x1b262550 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x4ee69ae7 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0xe430291 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5195d7c [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0xccf43a4 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x14ab2601 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x149514a2 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x1ef0bb6b [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x54baa55f [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5a23315e [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x248c1ec9 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x1bc1a9d2 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x7612889b [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5bb00f13 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x66ef9a9e [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x4c311ab8 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x6e273e1e [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x6163a323 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x9904a83 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x4cac9eb5 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x59697ff0 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x5cf90e8b [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x68510cf7 [0148.690] RtlRandomEx (in: Seed=0x22cf888 | out: Seed=0x22cf888) returned 0x4285b020 [0148.698] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.698] ReadFile (in: hFile=0x1304, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.699] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ecd8 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0148.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0148.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.700] WriteFile (in: hFile=0x1304, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0148.915] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.915] ReadFile (in: hFile=0x1304, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.916] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ea50 [0148.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0148.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0148.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0148.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0148.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0148.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0148.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.917] WriteFile (in: hFile=0x1304, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0148.922] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0xfd08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.922] ReadFile (in: hFile=0x1304, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.922] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0xfd08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ea50 [0148.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b330 [0148.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0148.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0148.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0148.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0148.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0148.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0148.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.923] WriteFile (in: hFile=0x1304, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x22cf890, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x22cf890*=0x3c00, lpOverlapped=0x0) returned 1 [0148.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd378 [0148.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0148.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0148.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x294aa0 [0148.928] SetFilePointerEx (in: hFile=0x1304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.928] WriteFile (in: hFile=0x1304, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x22cf910, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x22cf910*=0x14c, lpOverlapped=0x0) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd378) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0148.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0148.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e6288 [0148.993] wcscpy (in: _Dest=0x66e6288, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a" [0148.993] wcscat (in: _Dest=0x66e6288, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a.ac3a86" [0148.993] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a.ac3a86", NtPathName=0x22cf888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\jKNXS-s_s.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbdf8 [0149.063] FlushFileBuffers (hFile=0x1304) returned 1 [0149.069] CloseHandle (hObject=0x1304) returned 1 [0149.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd5e8 [0149.070] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.070] wcscat (in: _Dest=0x66cd5e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.070] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0149.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 1269 os_tid = 0xef0 [0146.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\k5zx8o.mp3")) returned 0x20 [0146.189] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3", dwFileAttributes=0x20) returned 1 [0148.700] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\k5zx8o.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x674 [0148.701] GetFileSizeEx (in: hFile=0x674, lpFileSize=0x945f8dc | out: lpFileSize=0x945f8dc*=44609) returned 1 [0148.701] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0xae3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.701] ReadFile (in: hFile=0x674, lpBuffer=0x945f8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x945f8c8, lpOverlapped=0x0 | out: lpBuffer=0x945f8b8*, lpNumberOfBytesRead=0x945f8c8*=0x4, lpOverlapped=0x0) returned 1 [0148.703] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0148.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0148.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.703] NtQuerySystemTime (in: CurrentTime=0x945f850 | out: CurrentTime=0x945f850*=132482710573500000) returned 0x0 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x642a1d08 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x2fdacb7 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x4f9d8a01 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x215abeab [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x598db589 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x3cd20cf [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x7b168e7 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x76610ea7 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x7ad0fb5c [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x102e456e [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x6412664 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x2b35fa3e [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x2ca10e90 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x66ec4ba6 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x1d1dac01 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x68644a8d [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x59aca6c8 [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x3cd20cf [0148.703] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x54baa55f [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x74fc14f3 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x3f0ec579 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x50f3ccd8 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x1a52dbeb [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0xe430291 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x196d3e3a [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x43272099 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x52c248df [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0xc819c91 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x163a41a9 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x3e61e835 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x946be68 [0148.704] RtlRandomEx (in: Seed=0x945f848 | out: Seed=0x945f848) returned 0x4c91b134 [0148.716] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.716] ReadFile (in: hFile=0x674, lpBuffer=0x684a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x945f850, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesRead=0x945f850*=0x3c00, lpOverlapped=0x0) returned 1 [0148.717] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ecd8 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0148.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0148.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0148.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.718] WriteFile (in: hFile=0x674, lpBuffer=0x684dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x945f850, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesWritten=0x945f850*=0x3c00, lpOverlapped=0x0) returned 1 [0148.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0148.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0148.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5b10 [0148.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0148.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5b40 [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0148.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0148.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0148.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec2b0 [0148.921] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.921] WriteFile (in: hFile=0x674, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x945f8d0, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x945f8d0*=0x106, lpOverlapped=0x0) returned 1 [0148.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0148.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0148.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0148.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0148.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0148.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0148.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0148.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0148.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x66cd5e8 [0148.990] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3" [0148.990] wcscat (in: _Dest=0x66cd5e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3.ac3a86" [0148.990] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3.ac3a86", NtPathName=0x945f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\K5Zx8O.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e09430 [0149.060] FlushFileBuffers (hFile=0x674) returned 1 [0149.064] CloseHandle (hObject=0x674) returned 1 [0149.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd5e8 [0149.065] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.065] wcscat (in: _Dest=0x66cd5e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.065] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0149.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e38) returned 1 Thread: id = 1270 os_tid = 0xb34 [0146.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\l0qzjxunod07mca.m4a")) returned 0x20 [0146.190] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a", dwFileAttributes=0x20) returned 1 [0148.718] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\l0qzjxunod07mca.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1228 [0148.718] GetFileSizeEx (in: hFile=0x1228, lpFileSize=0x62af8dc | out: lpFileSize=0x62af8dc*=2573) returned 1 [0148.718] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0xa09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.719] ReadFile (in: hFile=0x1228, lpBuffer=0x62af8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x62af8c8, lpOverlapped=0x0 | out: lpBuffer=0x62af8b8*, lpNumberOfBytesRead=0x62af8c8*=0x4, lpOverlapped=0x0) returned 1 [0148.720] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0148.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c670 [0148.721] NtQuerySystemTime (in: CurrentTime=0x62af850 | out: CurrentTime=0x62af850*=132482710573656000) returned 0x0 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x6cfb1b1d [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x4bdea51f [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x3d600edd [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x5fa7a620 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x25b0d82a [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x2fd5532a [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x565817aa [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x5c09d9f2 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x91be5a8 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x36519fac [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x6841989e [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x1d9e6b15 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x666b7f83 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x3d88ffb3 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x73e9e7ad [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x28441cc0 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x3f4e1a35 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x1ed92fb0 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0xc822801 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x7bf07d87 [0148.721] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x4362ae09 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x5b433486 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x28f2c1cb [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x2986871b [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x289c1d74 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x6818aa69 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x6412664 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x7b6de228 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x2986871b [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0xb59851d [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x29fda5b4 [0148.722] RtlRandomEx (in: Seed=0x62af848 | out: Seed=0x62af848) returned 0x390b4232 [0148.730] ReadFile (in: hFile=0x1228, lpBuffer=0x6851930, nNumberOfBytesToRead=0xa0d, lpNumberOfBytesRead=0x62af844, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesRead=0x62af844*=0xa0d, lpOverlapped=0x0) returned 1 [0148.731] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.731] WriteFile (in: hFile=0x1228, lpBuffer=0x6855538*, nNumberOfBytesToWrite=0xa0d, lpNumberOfBytesWritten=0x62af848, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesWritten=0x62af848*=0xa0d, lpOverlapped=0x0) returned 1 [0148.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0148.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bdb0 [0148.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0148.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0148.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0148.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x66d24a0 [0148.926] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.926] WriteFile (in: hFile=0x1228, lpBuffer=0x30413a8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x62af8d0, lpOverlapped=0x0 | out: lpBuffer=0x30413a8*, lpNumberOfBytesWritten=0x62af8d0*=0x118, lpOverlapped=0x0) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d24e0) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d24a0) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0148.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b510 [0148.991] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a" [0148.991] wcscat (in: _Dest=0x3f1b510, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a.ac3a86" [0148.992] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a.ac3a86", NtPathName=0x62af848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\L0QzjxUnOD07MCa.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0149.067] FlushFileBuffers (hFile=0x1228) returned 1 [0149.071] CloseHandle (hObject=0x1228) returned 1 [0149.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd5e8 [0149.073] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.073] wcscat (in: _Dest=0x66cd5e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.073] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0149.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd3e0) returned 1 Thread: id = 1271 os_tid = 0x370 [0146.190] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\n42imchxov3.mp3")) returned 0x20 [0146.190] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3", dwFileAttributes=0x20) returned 1 [0148.731] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\n42imchxov3.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318 [0148.731] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0x83cfbcc | out: lpFileSize=0x83cfbcc*=26377) returned 1 [0148.731] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x6705, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.731] ReadFile (in: hFile=0x1318, lpBuffer=0x83cfba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x83cfbb8, lpOverlapped=0x0 | out: lpBuffer=0x83cfba8*, lpNumberOfBytesRead=0x83cfbb8*=0x4, lpOverlapped=0x0) returned 1 [0148.733] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c670 [0148.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0148.734] NtQuerySystemTime (in: CurrentTime=0x83cfb40 | out: CurrentTime=0x83cfb40*=132482710573812000) returned 0x0 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x1ada06b2 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x66ec4ba6 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5f0d1772 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x69a2d60d [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x4c5745da [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5d4e533a [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5990ccca [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0xae05f0a [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x41e87de8 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x49172c34 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5759c642 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x15464e4b [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x477df7fe [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x7f49d18f [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5dc46695 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x388a9a4c [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0xbda9998 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x43f84cbf [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x116bc11f [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x1e746ca5 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x5b4238b1 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x32b264cd [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x7d854649 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x334afad [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x2334abab [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x7a634d16 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x332b93d7 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x7404a72f [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x3b0d3fcd [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x984a011 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x2bb37097 [0148.734] RtlRandomEx (in: Seed=0x83cfb38 | out: Seed=0x83cfb38) returned 0x533d494f [0148.743] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.743] ReadFile (in: hFile=0x1318, lpBuffer=0x674fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x83cfb40, lpOverlapped=0x0 | out: lpBuffer=0x674fce8*, lpNumberOfBytesRead=0x83cfb40*=0x3c00, lpOverlapped=0x0) returned 1 [0148.744] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e858 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67538f0 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0148.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0148.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0148.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0148.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e858) returned 1 [0148.744] WriteFile (in: hFile=0x1318, lpBuffer=0x67538f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x83cfb40, lpOverlapped=0x0 | out: lpBuffer=0x67538f0*, lpNumberOfBytesWritten=0x83cfb40*=0x3c00, lpOverlapped=0x0) returned 1 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67538f0) returned 1 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fce8) returned 1 [0148.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19d20 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0148.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19d58 [0148.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0148.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3deca58 [0148.931] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.931] WriteFile (in: hFile=0x1318, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x83cfbc0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x83cfbc0*=0x110, lpOverlapped=0x0) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d58) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d20) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0148.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0148.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0148.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0148.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b580 [0148.995] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3" [0148.995] wcscat (in: _Dest=0x3e0b580, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3.ac3a86" [0148.995] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3.ac3a86", NtPathName=0x83cfb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\N42iMchxoV3.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26508 [0149.136] FlushFileBuffers (hFile=0x1318) returned 1 [0149.195] CloseHandle (hObject=0x1318) returned 1 [0149.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd448 [0149.196] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.196] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.196] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0149.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 1272 os_tid = 0x15c [0146.190] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\nmajvcizhprnx4fxj4ds.mp3")) returned 0x20 [0146.191] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3", dwFileAttributes=0x20) returned 1 [0148.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3" (normalized: "c:\\users\\eebsym5\\music\\hn _\\nmajvcizhprnx4fxj4ds.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x124c [0148.745] GetFileSizeEx (in: hFile=0x124c, lpFileSize=0x66bf8e4 | out: lpFileSize=0x66bf8e4*=45838) returned 1 [0148.745] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0xb30a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.745] ReadFile (in: hFile=0x124c, lpBuffer=0x66bf8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x66bf8d0, lpOverlapped=0x0 | out: lpBuffer=0x66bf8c0*, lpNumberOfBytesRead=0x66bf8d0*=0x4, lpOverlapped=0x0) returned 1 [0148.747] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0148.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0148.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0148.747] NtQuerySystemTime (in: CurrentTime=0x66bf858 | out: CurrentTime=0x66bf858*=132482710573968000) returned 0x0 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x6a749a9b [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x37123fd4 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0xe157d7d [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x473fb4f8 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x196d3e3a [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x6ba4c4 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x4362ae09 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x24de9704 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x2e6560b1 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x4117e482 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x3642786 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x52999d7a [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0xa857c21 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x524618e2 [0148.747] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x2e440453 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x29b72569 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x5c5ee411 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0xaa687a [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x3cdf334b [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x36d7307c [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x64bedb9 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x4752474 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x8f10ce8 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x8e46b5c [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x3bf65daf [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x10e7e7b [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x529b43a1 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x11cf6c9e [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x623d3928 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x20ed26de [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x6163a323 [0148.748] RtlRandomEx (in: Seed=0x66bf850 | out: Seed=0x66bf850) returned 0x6c51ee96 [0148.784] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.784] ReadFile (in: hFile=0x124c, lpBuffer=0x67574f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x66bf858, lpOverlapped=0x0 | out: lpBuffer=0x67574f8*, lpNumberOfBytesRead=0x66bf858*=0x3c00, lpOverlapped=0x0) returned 1 [0148.784] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f470 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0148.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x675b100 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0148.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0148.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0148.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.785] WriteFile (in: hFile=0x124c, lpBuffer=0x675b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x66bf858, lpOverlapped=0x0 | out: lpBuffer=0x675b100*, lpNumberOfBytesWritten=0x66bf858*=0x3c00, lpOverlapped=0x0) returned 1 [0148.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b100) returned 1 [0148.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67574f8) returned 1 [0148.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4ecd8 [0148.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0148.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4e6a8 [0148.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0148.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0148.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0148.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x697dce8 [0148.934] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.934] WriteFile (in: hFile=0x124c, lpBuffer=0x697dce8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x66bf8d8, lpOverlapped=0x0 | out: lpBuffer=0x697dce8*, lpNumberOfBytesWritten=0x66bf8d8*=0x122, lpOverlapped=0x0) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e6a8) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0148.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0148.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbe78 [0148.996] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3" [0148.996] wcscat (in: _Dest=0x3edbe78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3.ac3a86" [0148.996] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3.ac3a86", NtPathName=0x66bf850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\nMAJVcizhPRnX4fXJ4Ds.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958700 [0149.139] FlushFileBuffers (hFile=0x124c) returned 1 [0149.198] CloseHandle (hObject=0x124c) returned 1 [0149.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd448 [0149.200] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.200] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.200] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0149.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 Thread: id = 1273 os_tid = 0x2a8 [0146.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\rghvdk_.m4a")) returned 0x20 [0146.191] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a", dwFileAttributes=0x20) returned 1 [0148.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a" (normalized: "c:\\users\\eebsym5\\music\\hn _\\rghvdk_.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a0 [0148.785] GetFileSizeEx (in: hFile=0x11a0, lpFileSize=0x9b4f8dc | out: lpFileSize=0x9b4f8dc*=24056) returned 1 [0148.785] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x5df4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.785] ReadFile (in: hFile=0x11a0, lpBuffer=0x9b4f8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b4f8c8, lpOverlapped=0x0 | out: lpBuffer=0x9b4f8b8*, lpNumberOfBytesRead=0x9b4f8c8*=0x4, lpOverlapped=0x0) returned 1 [0148.787] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0148.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0148.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.787] NtQuerySystemTime (in: CurrentTime=0x9b4f850 | out: CurrentTime=0x9b4f850*=132482710574436000) returned 0x0 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x5f177247 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x22d6e03a [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x3b93b135 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x3c88c86b [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x1cab873c [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x6dce55c3 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x735944a0 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x5bd05c25 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x3163ec24 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x5cacf99d [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x7fc09a67 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0xa6b5335 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0xd9ef061 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x19d93f3f [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x56035ef2 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x3f6a5ca5 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x63b98d91 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0xae05f0a [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x63b92c73 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x2d830a74 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x34093c15 [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x1d8e7a5c [0148.787] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x3216ed7b [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x244226d7 [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x1eee5f78 [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x2d2cb562 [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x384e6475 [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x5168f15d [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0xce43bab [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x38e713da [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0xc620efc [0148.788] RtlRandomEx (in: Seed=0x9b4f848 | out: Seed=0x9b4f848) returned 0x2fc36f9b [0148.796] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.796] ReadFile (in: hFile=0x11a0, lpBuffer=0x675ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b4f850, lpOverlapped=0x0 | out: lpBuffer=0x675ed08*, lpNumberOfBytesRead=0x9b4f850*=0x3c00, lpOverlapped=0x0) returned 1 [0148.796] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f470 [0148.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0148.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0148.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0148.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6762910 [0148.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0148.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0148.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.797] WriteFile (in: hFile=0x11a0, lpBuffer=0x6762910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b4f850, lpOverlapped=0x0 | out: lpBuffer=0x6762910*, lpNumberOfBytesWritten=0x9b4f850*=0x3c00, lpOverlapped=0x0) returned 1 [0148.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762910) returned 1 [0148.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed08) returned 1 [0148.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5bd0 [0148.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0148.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5c30 [0148.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0148.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300da60 [0148.936] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.936] WriteFile (in: hFile=0x11a0, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x9b4f8d0, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x9b4f8d0*=0x108, lpOverlapped=0x0) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0148.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0148.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd378 [0148.998] wcscpy (in: _Dest=0x66cd378, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a" [0148.999] wcscat (in: _Dest=0x66cd378, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a.ac3a86" [0148.999] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a.ac3a86", NtPathName=0x9b4f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\rgHVdk_.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda4f8 [0149.138] FlushFileBuffers (hFile=0x11a0) returned 1 [0149.197] CloseHandle (hObject=0x11a0) returned 1 [0149.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd448 [0149.204] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.204] wcscat (in: _Dest=0x66cd448, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.204] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0149.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 Thread: id = 1274 os_tid = 0x2ac [0146.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav" (normalized: "c:\\users\\eebsym5\\music\\hn _\\u3-7s-2u9yn n.wav")) returned 0x20 [0146.192] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav", dwFileAttributes=0x20) returned 1 [0147.017] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav" (normalized: "c:\\users\\eebsym5\\music\\hn _\\u3-7s-2u9yn n.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1244 [0147.017] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0x907fae4 | out: lpFileSize=0x907fae4*=85206) returned 1 [0147.017] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x14cd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.017] ReadFile (in: hFile=0x1244, lpBuffer=0x907fac0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x907fad0, lpOverlapped=0x0 | out: lpBuffer=0x907fac0*, lpNumberOfBytesRead=0x907fad0*=0x4, lpOverlapped=0x0) returned 1 [0147.019] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0147.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3fe8 [0147.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0147.019] NtQuerySystemTime (in: CurrentTime=0x907fa58 | out: CurrentTime=0x907fa58*=132482710556652000) returned 0x0 [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x2e1207c5 [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x26fec211 [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x222aed25 [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x402cb58a [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x1e16e7c [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x5fb13c8a [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0xcbe836a [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x4ad56265 [0147.019] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x1d5b992c [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x56fdc244 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6a151e63 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x3dc67e51 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x57a85410 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x23276e54 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x77373fbd [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6857663b [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6b05246 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x77938a36 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x31af5de0 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x97aec14 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x772824a4 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x562a1697 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x61f2d3f9 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x4ece64b9 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6b2bf6fd [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x21bdf71 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x459e06bd [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x3d377ee7 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6e3667ad [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x3b0e0b70 [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x452879db [0147.020] RtlRandomEx (in: Seed=0x907fa50 | out: Seed=0x907fa50) returned 0x6303c95b [0147.028] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.028] ReadFile (in: hFile=0x1244, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0147.028] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff830 [0147.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0147.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0147.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0147.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0147.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0147.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0147.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0147.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0147.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0147.029] WriteFile (in: hFile=0x1244, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0148.811] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.811] ReadFile (in: hFile=0x1244, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.812] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f470 [0148.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0148.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0148.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0148.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0148.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c788) returned 1 [0148.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.813] WriteFile (in: hFile=0x1244, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0148.814] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x110d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.814] ReadFile (in: hFile=0x1244, lpBuffer=0x68738f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesRead=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.815] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x110d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f470 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0148.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c788) returned 1 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68774f8 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c788 [0148.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0148.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0148.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.816] WriteFile (in: hFile=0x1244, lpBuffer=0x68774f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa58, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesWritten=0x907fa58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0148.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd788 [0148.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0148.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19b28 [0148.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0148.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0148.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0148.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f470) returned 1 [0148.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dcdfa0 [0148.818] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.818] WriteFile (in: hFile=0x1244, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x907fad8, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0x907fad8*=0x154, lpOverlapped=0x0) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a80) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd788) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0148.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0148.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b2b8 [0148.953] wcscpy (in: _Dest=0x3f1b2b8, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav" [0148.953] wcscat (in: _Dest=0x3f1b2b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav.ac3a86" [0148.953] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav.ac3a86", NtPathName=0x907fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\hN _\\U3-7s-2U9yn N.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0149.081] FlushFileBuffers (hFile=0x1244) returned 1 [0149.178] CloseHandle (hObject=0x1244) returned 1 [0149.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x66cd378 [0149.179] wcscpy (in: _Dest=0x66cd378, _Source="C:\\Users\\EEBsYm5\\Music\\hN _\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\" [0149.179] wcscat (in: _Dest=0x66cd378, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" [0149.179] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\hN _\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\hn _\\ac3a86-readme.txt")) returned 0x20 [0149.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd378) returned 1 [0149.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd310) returned 1 Thread: id = 1275 os_tid = 0x5f4 [0146.192] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\7gxts6_5-v.rtf")) returned 0x20 [0146.192] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf", dwFileAttributes=0x20) returned 1 [0147.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\7gxts6_5-v.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x122c [0147.030] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0x643fc7c | out: lpFileSize=0x643fc7c*=61250) returned 1 [0147.030] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0xef3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.030] ReadFile (in: hFile=0x122c, lpBuffer=0x643fc58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x643fc68, lpOverlapped=0x0 | out: lpBuffer=0x643fc58*, lpNumberOfBytesRead=0x643fc68*=0x4, lpOverlapped=0x0) returned 1 [0147.031] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0147.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0147.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.031] NtQuerySystemTime (in: CurrentTime=0x643fbf0 | out: CurrentTime=0x643fbf0*=132482710556808000) returned 0x0 [0147.031] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x715f2d3e [0147.031] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x7a3ca0f2 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x65dc9480 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x7b750adf [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x3cff149f [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x3d9439a5 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x5867cc05 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0xbe88f2a [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x628190b1 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x14c23b3a [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x42bb73e3 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x6c57b3eb [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x28344a0f [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x5718caa3 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x5ccf09c1 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x7d9ff9da [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x1ca451c7 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x6347b573 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x76eb8af2 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x3dade0a0 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x1bb062bf [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x1a9ac24e [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0xde2a711 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x757ceab6 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0xe390706 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x11753e3a [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x5ce994c0 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x140783bc [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x1b047de8 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x4589be02 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x51bc8554 [0147.032] RtlRandomEx (in: Seed=0x643fbe8 | out: Seed=0x643fbe8) returned 0x686fcb58 [0147.041] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.041] ReadFile (in: hFile=0x122c, lpBuffer=0x6899140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x643fbf0, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesRead=0x643fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0147.041] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff830 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0147.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x689cd48 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0147.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0147.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0147.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0147.042] WriteFile (in: hFile=0x122c, lpBuffer=0x689cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x643fbf0, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesWritten=0x643fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689cd48) returned 1 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0148.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19c08 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0148.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19c40 [0148.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0148.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0148.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0148.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec710 [0148.841] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.841] WriteFile (in: hFile=0x122c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x643fc70, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x643fc70*=0x10e, lpOverlapped=0x0) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c40) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c08) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0148.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0148.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e7f0 [0148.962] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf" [0148.962] wcscat (in: _Dest=0x3e0e7f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf.ac3a86" [0148.962] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf.ac3a86", NtPathName=0x643fbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\7GxtS6_5-v.rtf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7c18 [0149.182] FlushFileBuffers (hFile=0x122c) returned 1 [0149.205] CloseHandle (hObject=0x122c) returned 1 [0149.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31358 [0149.207] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0149.207] wcscat (in: _Dest=0x3e31358, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0149.207] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0149.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 [0149.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 1276 os_tid = 0x3c4 [0146.192] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\8icn.csv")) returned 0x20 [0146.192] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv", dwFileAttributes=0x20) returned 1 [0147.042] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\8icn.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x668 [0147.042] GetFileSizeEx (in: hFile=0x668, lpFileSize=0x873fef4 | out: lpFileSize=0x873fef4*=5523) returned 1 [0147.042] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x158f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.042] ReadFile (in: hFile=0x668, lpBuffer=0x873fed0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x873fee0, lpOverlapped=0x0 | out: lpBuffer=0x873fed0*, lpNumberOfBytesRead=0x873fee0*=0x4, lpOverlapped=0x0) returned 1 [0147.044] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0147.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0147.044] NtQuerySystemTime (in: CurrentTime=0x873fe68 | out: CurrentTime=0x873fe68*=132482710556964000) returned 0x0 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x4246417 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x1f2d6c2b [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x76e8a1ea [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x6f8f3aa7 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x393409ed [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x34bbb779 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x102d6300 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x5e2c90a4 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x753eaff0 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x2168186 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x1e50bae7 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x5d020e79 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x3271106a [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x1bfaeac3 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x740cd848 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x3bc20fc8 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x79a36d7 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x13b8b9e2 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x3e78fae [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x18fb5325 [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x7899035e [0147.044] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x75dafb34 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x45c19fad [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x7cd7b4d3 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x62b2ec80 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x6a7356f5 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x3e542726 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x5d607fc7 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x11469e68 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x2b93f221 [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x1d2dfeba [0147.045] RtlRandomEx (in: Seed=0x873fe60 | out: Seed=0x873fe60) returned 0x1d42559c [0147.053] ReadFile (in: hFile=0x668, lpBuffer=0x6891930, nNumberOfBytesToRead=0x1593, lpNumberOfBytesRead=0x873fe5c, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesRead=0x873fe5c*=0x1593, lpOverlapped=0x0) returned 1 [0147.053] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.053] WriteFile (in: hFile=0x668, lpBuffer=0x6895538*, nNumberOfBytesToWrite=0x1593, lpNumberOfBytesWritten=0x873fe60, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesWritten=0x873fe60*=0x1593, lpOverlapped=0x0) returned 1 [0148.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0148.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcacd8 [0148.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0148.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6895538) returned 1 [0148.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0148.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dcacd8 [0148.843] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.843] WriteFile (in: hFile=0x668, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x873fee8, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x873fee8*=0x102, lpOverlapped=0x0) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0148.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0148.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcc18 [0148.961] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv" [0148.961] wcscat (in: _Dest=0x66dcc18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv.ac3a86" [0148.961] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv.ac3a86", NtPathName=0x873fe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\8icn.csv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cd58 [0149.031] FlushFileBuffers (hFile=0x668) returned 1 [0149.035] CloseHandle (hObject=0x668) returned 1 [0149.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e32068 [0149.038] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0149.038] wcscat (in: _Dest=0x3e32068, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0149.038] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0149.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 [0149.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 1277 os_tid = 0x130 [0146.193] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\g67yeruc1ijc10s.ppt")) returned 0x20 [0146.193] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt", dwFileAttributes=0x20) returned 1 [0147.053] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\g67yeruc1ijc10s.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1234 [0147.053] GetFileSizeEx (in: hFile=0x1234, lpFileSize=0x94ffb34 | out: lpFileSize=0x94ffb34*=53938) returned 1 [0147.053] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0xd2ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.054] ReadFile (in: hFile=0x1234, lpBuffer=0x94ffb10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94ffb20, lpOverlapped=0x0 | out: lpBuffer=0x94ffb10*, lpNumberOfBytesRead=0x94ffb20*=0x4, lpOverlapped=0x0) returned 1 [0147.055] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0147.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0147.056] NtQuerySystemTime (in: CurrentTime=0x94ffaa8 | out: CurrentTime=0x94ffaa8*=132482710557120000) returned 0x0 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x12ae02ff [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x247bf199 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x2925f2f6 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x3067147a [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6f3703b8 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x790b691f [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x34cea19b [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6991230e [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x7c7fae5d [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1778bc89 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1929e2e8 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6f4902fc [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x3d9bb082 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6e6fc363 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1ad9a528 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1198b2eb [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x369a560b [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1d02eddd [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x2cddc9fc [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x211e5644 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x76085d2a [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1ced1834 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6a885492 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x4ed1d9c4 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x77544c17 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x6b13f193 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1c3fe60b [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0xe9d67b0 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x41a0b9f5 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x1a83f3a8 [0147.056] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x2823b385 [0147.057] RtlRandomEx (in: Seed=0x94ffaa0 | out: Seed=0x94ffaa0) returned 0x2e21bcc4 [0147.064] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.065] ReadFile (in: hFile=0x1234, lpBuffer=0x6882910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94ffaa8, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesRead=0x94ffaa8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.065] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff7e8 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6886518 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3868 [0147.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0147.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0147.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0147.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff7e8) returned 1 [0147.065] WriteFile (in: hFile=0x1234, lpBuffer=0x6886518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94ffaa8, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesWritten=0x94ffaa8*=0x3c00, lpOverlapped=0x0) returned 1 [0148.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0148.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6882910) returned 1 [0148.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x66d2520 [0148.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0148.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x66d25a0 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0148.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0148.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d55278 [0148.846] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.846] WriteFile (in: hFile=0x1234, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x94ffb28, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x94ffb28*=0x118, lpOverlapped=0x0) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d25a0) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d2520) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0148.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0148.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d1f0 [0148.966] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt" [0148.966] wcscat (in: _Dest=0x3e5d1f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt.ac3a86" [0148.967] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt.ac3a86", NtPathName=0x94ffaa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\G67YeRUC1Ijc10S.ppt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332268 [0149.156] FlushFileBuffers (hFile=0x1234) returned 1 [0149.170] CloseHandle (hObject=0x1234) returned 1 [0149.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958668 [0149.171] wcscpy (in: _Dest=0x6958668, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0149.171] wcscat (in: _Dest=0x6958668, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0149.171] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0149.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 [0149.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1278 os_tid = 0x650 [0146.195] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\jn4t9mekzml rmtx4n.xlsx")) returned 0x20 [0146.195] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx", dwFileAttributes=0x20) returned 1 [0147.066] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\jn4t9mekzml rmtx4n.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1220 [0147.066] GetFileSizeEx (in: hFile=0x1220, lpFileSize=0x89af914 | out: lpFileSize=0x89af914*=84042) returned 1 [0147.066] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x14846, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.066] ReadFile (in: hFile=0x1220, lpBuffer=0x89af8f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89af900, lpOverlapped=0x0 | out: lpBuffer=0x89af8f0*, lpNumberOfBytesRead=0x89af900*=0x4, lpOverlapped=0x0) returned 1 [0147.068] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0147.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0147.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0147.068] NtQuerySystemTime (in: CurrentTime=0x89af888 | out: CurrentTime=0x89af888*=132482710557120000) returned 0x0 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x5e52db81 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x66687e53 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x4197a0d3 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0xf0064df [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x590331db [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x447c4e0d [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x502d93b3 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x184042cd [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x1198b2eb [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x5ccb9d22 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0xf6b5eb6 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0xf9349a3 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0xf0064df [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x6295ee4e [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x22b8ddf0 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x381d2fa [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x6041c041 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x676fe252 [0147.068] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x12e3d344 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x36108c8d [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x3f05bd28 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x5a6ae457 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x3e3e27b [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x3219137d [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x2d52cd1d [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x2f4282d0 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x2f4282d0 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x6cf1e6f8 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x281cd3fb [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x51c53c04 [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x53b5341e [0147.069] RtlRandomEx (in: Seed=0x89af880 | out: Seed=0x89af880) returned 0x36fc4112 [0147.077] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.077] ReadFile (in: hFile=0x1220, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0147.077] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff7e8 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff7e8) returned 1 [0147.078] WriteFile (in: hFile=0x1220, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0148.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0148.848] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.848] ReadFile (in: hFile=0x1220, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0148.848] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff830 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0148.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0148.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0148.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0148.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.850] WriteFile (in: hFile=0x1220, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0148.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0148.852] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x10c4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.852] ReadFile (in: hFile=0x1220, lpBuffer=0x687b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesRead=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0148.852] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x10c4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff830 [0148.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0148.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0148.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0148.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x687ed08 [0148.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0148.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0148.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0148.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.853] WriteFile (in: hFile=0x1220, lpBuffer=0x687ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89af888, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesWritten=0x89af888*=0x3c00, lpOverlapped=0x0) returned 1 [0148.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0148.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd650 [0148.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0148.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66ff3f8 [0148.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0148.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0148.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0148.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff518) returned 1 [0148.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x160) returned 0x3dce270 [0148.858] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.858] WriteFile (in: hFile=0x1220, lpBuffer=0x3dce270*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x89af908, lpOverlapped=0x0 | out: lpBuffer=0x3dce270*, lpNumberOfBytesWritten=0x89af908*=0x160, lpOverlapped=0x0) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce270) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3f8) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd650) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0148.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0148.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0148.973] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx" [0148.973] wcscat (in: _Dest=0x35c168, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx.ac3a86" [0148.973] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx.ac3a86", NtPathName=0x89af880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\Jn4t9MEKzml RmTX4n.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df0a30 [0149.162] FlushFileBuffers (hFile=0x1220) returned 1 [0149.172] CloseHandle (hObject=0x1220) returned 1 [0149.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32b820 [0149.174] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0149.174] wcscat (in: _Dest=0x32b820, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0149.174] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0149.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 [0149.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 Thread: id = 1279 os_tid = 0x670 [0146.196] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\jwcimmv0s.odt")) returned 0x20 [0146.196] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt", dwFileAttributes=0x20) returned 1 [0147.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\jwcimmv0s.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1210 [0147.079] GetFileSizeEx (in: hFile=0x1210, lpFileSize=0x9d1fb24 | out: lpFileSize=0x9d1fb24*=61334) returned 1 [0147.079] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0xef92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.079] ReadFile (in: hFile=0x1210, lpBuffer=0x9d1fb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d1fb10, lpOverlapped=0x0 | out: lpBuffer=0x9d1fb00*, lpNumberOfBytesRead=0x9d1fb10*=0x4, lpOverlapped=0x0) returned 1 [0147.080] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0147.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c440 [0147.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.081] NtQuerySystemTime (in: CurrentTime=0x9d1fa98 | out: CurrentTime=0x9d1fa98*=132482710557276000) returned 0x0 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x4978a2d6 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x1a83f3a8 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x273e762e [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x298e77a5 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x7787c7ae [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x2e43dc28 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x2d7d6064 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x40df2a2f [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x79aef352 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x7111dc3d [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x17425f4f [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x16bf8f8 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0xd449bf2 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x79aef352 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x71b2e3ee [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x21df120c [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x2862bed6 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x1c3fe60b [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x2153bb52 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x4ca71ddf [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x21a84825 [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x6f98f96b [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x7787c7ae [0147.081] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x1b8bb360 [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x58c611de [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x7c7fae5d [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x704f086c [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x66687e53 [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x3287d317 [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x22436c78 [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x2df91818 [0147.082] RtlRandomEx (in: Seed=0x9d1fa90 | out: Seed=0x9d1fa90) returned 0x381d2fa [0147.094] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.094] ReadFile (in: hFile=0x1210, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d1fa98, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0x9d1fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0147.094] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff7e8 [0147.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0147.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0147.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0147.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682fce8 [0147.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0147.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0147.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0147.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff7e8) returned 1 [0147.095] WriteFile (in: hFile=0x1210, lpBuffer=0x682fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d1fa98, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesWritten=0x9d1fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686fce8) returned 1 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ed0 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5210 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0148.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff830) returned 1 [0148.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec940 [0148.851] SetFilePointerEx (in: hFile=0x1210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.851] WriteFile (in: hFile=0x1210, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d1fb18, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x9d1fb18*=0x10c, lpOverlapped=0x0) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0148.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0148.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0db70 [0148.971] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt" [0148.971] wcscat (in: _Dest=0x3e0db70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt.ac3a86" [0148.972] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt.ac3a86", NtPathName=0x9d1fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\jWCimMV0s.odt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bbe8 [0149.163] FlushFileBuffers (hFile=0x1210) returned 1 [0149.176] CloseHandle (hObject=0x1210) returned 1 [0149.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32b820 [0149.177] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0149.177] wcscat (in: _Dest=0x32b820, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0149.177] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0149.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 [0149.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 1280 os_tid = 0xfac [0146.196] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\mbwgghm6y7 viu fi1n1.odt")) returned 0x20 [0146.196] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt", dwFileAttributes=0x20) returned 1 [0147.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\mbwgghm6y7 viu fi1n1.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1218 [0147.096] GetFileSizeEx (in: hFile=0x1218, lpFileSize=0x9dbfaa4 | out: lpFileSize=0x9dbfaa4*=96333) returned 1 [0147.096] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x17849, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.096] ReadFile (in: hFile=0x1218, lpBuffer=0x9dbfa80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dbfa90, lpOverlapped=0x0 | out: lpBuffer=0x9dbfa80*, lpNumberOfBytesRead=0x9dbfa90*=0x4, lpOverlapped=0x0) returned 1 [0147.097] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0147.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.097] NtQuerySystemTime (in: CurrentTime=0x9dbfa18 | out: CurrentTime=0x9dbfa18*=132482710557432000) returned 0x0 [0147.097] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x39fa131d [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x4acd193a [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x55ccdf95 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x57ad81c9 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x28509bdd [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x4021c770 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x57c0636e [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x1a71681c [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x5ba2b3de [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x4d2f38b5 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x614fd8f0 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x73cb7380 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x6280e00b [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x7155fac7 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x4cdffc46 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x2406adc8 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x699a74c9 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x5aaea1d4 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x6ef937c8 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x45427594 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x13a0ee37 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x736a9e34 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x79715024 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x6bb6467e [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x1b54ea72 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x1a591ae8 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x55848cad [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x622856ef [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x5982be1e [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x704f086c [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x6db6d0a2 [0147.098] RtlRandomEx (in: Seed=0x9dbfa10 | out: Seed=0x9dbfa10) returned 0x7187d717 [0147.106] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.106] ReadFile (in: hFile=0x1218, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.106] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff7e8 [0147.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0147.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0147.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0147.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0147.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff7e8) returned 1 [0147.107] WriteFile (in: hFile=0x1218, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0147.622] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.622] ReadFile (in: hFile=0x1218, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.623] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f030 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0147.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0147.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0147.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0147.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0147.623] WriteFile (in: hFile=0x1218, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0147.627] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x13c4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.627] ReadFile (in: hFile=0x1218, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.627] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x13c4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f030 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0147.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0147.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0147.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0147.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0147.628] WriteFile (in: hFile=0x1218, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dbfa18, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x9dbfa18*=0x3c00, lpOverlapped=0x0) returned 1 [0147.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0147.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e418 [0147.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0147.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4e618 [0147.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0147.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0147.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0147.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f428) returned 1 [0147.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e63618 [0147.632] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.632] WriteFile (in: hFile=0x1218, lpBuffer=0x3e63618*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x9dbfa98, lpOverlapped=0x0 | out: lpBuffer=0x3e63618*, lpNumberOfBytesWritten=0x9dbfa98*=0x162, lpOverlapped=0x0) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63618) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e418) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0147.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0147.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bbe8 [0147.678] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt" [0147.678] wcscat (in: _Dest=0x35bbe8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt.ac3a86" [0147.678] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt.ac3a86", NtPathName=0x9dbfa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\MBWGGhM6y7 VIu fi1N1.odt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def5e0 [0147.762] FlushFileBuffers (hFile=0x1218) returned 1 [0147.764] CloseHandle (hObject=0x1218) returned 1 [0147.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69595d8 [0147.778] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0147.778] wcscat (in: _Dest=0x69595d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0147.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0xffffffff [0147.778] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1120 [0147.790] WriteFile (in: hFile=0x1120, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9dbfa2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9dbfa2c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.797] CloseHandle (hObject=0x1120) returned 1 [0147.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 [0147.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 1281 os_tid = 0x7c4 [0146.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\onzouoegcn4wbdvh.doc")) returned 0x20 [0146.197] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc", dwFileAttributes=0x20) returned 1 [0147.107] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\onzouoegcn4wbdvh.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1200 [0147.107] GetFileSizeEx (in: hFile=0x1200, lpFileSize=0x89ef864 | out: lpFileSize=0x89ef864*=97646) returned 1 [0147.108] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x17d6a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.108] ReadFile (in: hFile=0x1200, lpBuffer=0x89ef840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89ef850, lpOverlapped=0x0 | out: lpBuffer=0x89ef840*, lpNumberOfBytesRead=0x89ef850*=0x4, lpOverlapped=0x0) returned 1 [0147.109] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0147.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0147.109] NtQuerySystemTime (in: CurrentTime=0x89ef7d8 | out: CurrentTime=0x89ef7d8*=132482710557588000) returned 0x0 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x502d93b3 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x780fabeb [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1873f577 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x5cba2e5e [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x5a1dd6ae [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x5b601219 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x56f60172 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x71f8e813 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x60803542 [0147.109] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x6bdbfb49 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1544e03a [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x42687ac4 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x79eba9db [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x7cae1b8d [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x43436b3b [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1283bad [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x43436b3b [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x5bb1e0b3 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x4ca71ddf [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x4212be1b [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1a036968 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x6054816 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x19af2570 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1a71681c [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x5afb2115 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x336972bf [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x1a57ac3d [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x7d329b84 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x35907a42 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x12f03ef0 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x83cfc12 [0147.110] RtlRandomEx (in: Seed=0x89ef7d0 | out: Seed=0x89ef7d0) returned 0x447c4e0d [0147.118] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.118] ReadFile (in: hFile=0x1200, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.118] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff7e8 [0147.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0147.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0147.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0147.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0147.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff7e8) returned 1 [0147.119] WriteFile (in: hFile=0x1200, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0147.625] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.625] ReadFile (in: hFile=0x1200, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.625] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f030 [0147.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0147.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0147.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0147.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0147.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0147.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0147.626] WriteFile (in: hFile=0x1200, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0147.629] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x1416e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.629] ReadFile (in: hFile=0x1200, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.629] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x1416e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5f030 [0147.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0147.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0147.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0147.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0147.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0147.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0147.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0147.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f030) returned 1 [0147.630] WriteFile (in: hFile=0x1200, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ef7d8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0x89ef7d8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0147.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e688 [0147.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0147.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067100 [0147.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0147.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0147.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0147.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0147.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f428) returned 1 [0147.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcde38 [0147.633] SetFilePointerEx (in: hFile=0x1200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.633] WriteFile (in: hFile=0x1200, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x89ef858, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x89ef858*=0x15a, lpOverlapped=0x0) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d00) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e688) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0147.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0147.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cb60 [0147.680] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc" [0147.680] wcscat (in: _Dest=0x3e5cb60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc.ac3a86" [0147.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc.ac3a86", NtPathName=0x89ef7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\oNZouoeGCn4WBdVh.doc.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0147.765] FlushFileBuffers (hFile=0x1200) returned 1 [0147.768] CloseHandle (hObject=0x1200) returned 1 [0147.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959540 [0147.779] wcscpy (in: _Dest=0x6959540, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\" [0147.779] wcscat (in: _Dest=0x6959540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" [0147.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\Tf7JXXXlXVNs1k\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\tf7jxxxlxvns1k\\ac3a86-readme.txt")) returned 0x20 [0147.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 [0147.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 1282 os_tid = 0x73c [0146.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api")) returned 0x20 [0146.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0146.198] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.198] GetLastError () returned 0x5 [0146.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0146.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 1283 os_tid = 0xdb0 [0146.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api")) returned 0x20 [0146.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0146.200] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.200] GetLastError () returned 0x5 [0146.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0146.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 1284 os_tid = 0xdb8 [0146.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api")) returned 0x20 [0146.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0146.202] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.202] GetLastError () returned 0x5 [0146.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0146.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 1285 os_tid = 0x7b0 [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7cd0 [0146.204] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.204] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.204] wcscat (in: _Dest=0x2ff7cd0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*" [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0146.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0146.408] wcscmp (_String1=".", _String2=".") returned 0 [0146.408] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.408] wcscmp (_String1="..", _String2=".") returned 1 [0146.408] wcscmp (_String1="..", _String2="..") returned 0 [0146.408] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0146.408] wcscmp (_String1="1027.mst", _String2=".") returned 1 [0146.408] wcscmp (_String1="1027.mst", _String2="..") returned 1 [0146.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def900 [0146.408] wcscpy (in: _Dest=0x3def900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.408] wcscat (in: _Dest=0x3def900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.408] wcscat (in: _Dest=0x3def900, _Source="1027.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" [0146.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0146.968] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0146.968] wcscmp (_String1="1028.mst", _String2=".") returned 1 [0146.968] wcscmp (_String1="1028.mst", _String2="..") returned 1 [0146.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defa90 [0146.968] wcscpy (in: _Dest=0x3defa90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.968] wcscat (in: _Dest=0x3defa90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.968] wcscat (in: _Dest=0x3defa90, _Source="1028.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" [0146.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3defa90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0146.969] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0146.969] wcscmp (_String1="1029.mst", _String2=".") returned 1 [0146.969] wcscmp (_String1="1029.mst", _String2="..") returned 1 [0146.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def5e0 [0146.969] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.969] wcscat (in: _Dest=0x3def5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.969] wcscat (in: _Dest=0x3def5e0, _Source="1029.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" [0146.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0146.970] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0146.970] wcscmp (_String1="1030.mst", _String2=".") returned 1 [0146.970] wcscmp (_String1="1030.mst", _String2="..") returned 1 [0146.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defb58 [0146.970] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.970] wcscat (in: _Dest=0x3defb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.970] wcscat (in: _Dest=0x3defb58, _Source="1030.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" [0146.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3defb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0146.971] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0146.971] wcscmp (_String1="1031.mst", _String2=".") returned 1 [0146.971] wcscmp (_String1="1031.mst", _String2="..") returned 1 [0146.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def2c0 [0146.971] wcscpy (in: _Dest=0x3def2c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.971] wcscat (in: _Dest=0x3def2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.971] wcscat (in: _Dest=0x3def2c0, _Source="1031.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" [0146.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0146.972] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0146.972] wcscmp (_String1="1033.mst", _String2=".") returned 1 [0146.972] wcscmp (_String1="1033.mst", _String2="..") returned 1 [0146.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def068 [0146.972] wcscpy (in: _Dest=0x3def068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.972] wcscat (in: _Dest=0x3def068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.972] wcscat (in: _Dest=0x3def068, _Source="1033.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" [0146.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0146.973] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0146.974] wcscmp (_String1="1034.mst", _String2=".") returned 1 [0146.974] wcscmp (_String1="1034.mst", _String2="..") returned 1 [0146.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def6a8 [0146.974] wcscpy (in: _Dest=0x3def6a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.974] wcscat (in: _Dest=0x3def6a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.974] wcscat (in: _Dest=0x3def6a8, _Source="1034.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" [0146.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0146.975] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0146.975] wcscmp (_String1="1035.mst", _String2=".") returned 1 [0146.975] wcscmp (_String1="1035.mst", _String2="..") returned 1 [0146.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3deff40 [0146.975] wcscpy (in: _Dest=0x3deff40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.975] wcscat (in: _Dest=0x3deff40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.975] wcscat (in: _Dest=0x3deff40, _Source="1035.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" [0146.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3deff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0146.976] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0146.976] wcscmp (_String1="1036.mst", _String2=".") returned 1 [0146.976] wcscmp (_String1="1036.mst", _String2="..") returned 1 [0146.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0008 [0146.976] wcscpy (in: _Dest=0x3df0008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.976] wcscat (in: _Dest=0x3df0008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.976] wcscat (in: _Dest=0x3df0008, _Source="1036.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" [0146.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0146.978] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0146.978] wcscmp (_String1="1038.mst", _String2=".") returned 1 [0146.978] wcscmp (_String1="1038.mst", _String2="..") returned 1 [0146.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df00d0 [0146.978] wcscpy (in: _Dest=0x3df00d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.978] wcscat (in: _Dest=0x3df00d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.978] wcscat (in: _Dest=0x3df00d0, _Source="1038.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" [0146.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df00d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0146.979] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0146.979] wcscmp (_String1="1040.mst", _String2=".") returned 1 [0146.979] wcscmp (_String1="1040.mst", _String2="..") returned 1 [0146.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0198 [0146.979] wcscpy (in: _Dest=0x3df0198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.979] wcscat (in: _Dest=0x3df0198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.979] wcscat (in: _Dest=0x3df0198, _Source="1040.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" [0146.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0146.980] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0146.980] wcscmp (_String1="1041.mst", _String2=".") returned 1 [0146.980] wcscmp (_String1="1041.mst", _String2="..") returned 1 [0146.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0260 [0146.981] wcscpy (in: _Dest=0x3df0260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.981] wcscat (in: _Dest=0x3df0260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.981] wcscat (in: _Dest=0x3df0260, _Source="1041.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" [0146.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0146.982] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0146.982] wcscmp (_String1="1042.mst", _String2=".") returned 1 [0146.982] wcscmp (_String1="1042.mst", _String2="..") returned 1 [0146.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0328 [0146.982] wcscpy (in: _Dest=0x3df0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.982] wcscat (in: _Dest=0x3df0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.982] wcscat (in: _Dest=0x3df0328, _Source="1042.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" [0146.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0146.983] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0146.983] wcscmp (_String1="1043.mst", _String2=".") returned 1 [0146.983] wcscmp (_String1="1043.mst", _String2="..") returned 1 [0146.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df03f0 [0146.983] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.983] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.983] wcscat (in: _Dest=0x3df03f0, _Source="1043.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" [0146.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0146.984] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0146.984] wcscmp (_String1="1044.mst", _String2=".") returned 1 [0146.984] wcscmp (_String1="1044.mst", _String2="..") returned 1 [0146.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df04b8 [0146.984] wcscpy (in: _Dest=0x3df04b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.985] wcscat (in: _Dest=0x3df04b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.985] wcscat (in: _Dest=0x3df04b8, _Source="1044.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" [0146.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df04b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0146.986] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0146.986] wcscmp (_String1="1045.mst", _String2=".") returned 1 [0146.986] wcscmp (_String1="1045.mst", _String2="..") returned 1 [0146.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0580 [0146.986] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.986] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.986] wcscat (in: _Dest=0x3df0580, _Source="1045.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" [0146.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0146.987] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0146.987] wcscmp (_String1="1046.mst", _String2=".") returned 1 [0146.987] wcscmp (_String1="1046.mst", _String2="..") returned 1 [0146.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0146.987] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.987] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.987] wcscat (in: _Dest=0x3df0648, _Source="1046.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" [0146.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0146.988] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0146.988] wcscmp (_String1="1048.mst", _String2=".") returned 1 [0146.988] wcscmp (_String1="1048.mst", _String2="..") returned 1 [0146.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0146.988] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.988] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.988] wcscat (in: _Dest=0x3df0710, _Source="1048.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" [0146.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0146.990] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0146.990] wcscmp (_String1="1049.mst", _String2=".") returned 1 [0146.990] wcscmp (_String1="1049.mst", _String2="..") returned 1 [0146.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df07d8 [0146.990] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.990] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.990] wcscat (in: _Dest=0x3df07d8, _Source="1049.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" [0146.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0146.991] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0146.991] wcscmp (_String1="1050.mst", _String2=".") returned 1 [0146.991] wcscmp (_String1="1050.mst", _String2="..") returned 1 [0146.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df08a0 [0146.991] wcscpy (in: _Dest=0x3df08a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.991] wcscat (in: _Dest=0x3df08a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.991] wcscat (in: _Dest=0x3df08a0, _Source="1050.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" [0146.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df08a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0146.993] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0146.993] wcscmp (_String1="1051.mst", _String2=".") returned 1 [0146.993] wcscmp (_String1="1051.mst", _String2="..") returned 1 [0146.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0968 [0146.993] wcscpy (in: _Dest=0x3df0968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.993] wcscat (in: _Dest=0x3df0968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.993] wcscat (in: _Dest=0x3df0968, _Source="1051.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" [0146.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0146.994] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0146.994] wcscmp (_String1="1053.mst", _String2=".") returned 1 [0146.994] wcscmp (_String1="1053.mst", _String2="..") returned 1 [0146.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0a30 [0146.994] wcscpy (in: _Dest=0x3df0a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.994] wcscat (in: _Dest=0x3df0a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.994] wcscat (in: _Dest=0x3df0a30, _Source="1053.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" [0146.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0146.995] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0146.996] wcscmp (_String1="1055.mst", _String2=".") returned 1 [0146.996] wcscmp (_String1="1055.mst", _String2="..") returned 1 [0146.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x697dce8 [0146.996] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.996] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.996] wcscat (in: _Dest=0x697dce8, _Source="1055.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" [0146.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0146.997] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0146.997] wcscmp (_String1="1058.mst", _String2=".") returned 1 [0146.997] wcscmp (_String1="1058.mst", _String2="..") returned 1 [0146.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x697ddb0 [0146.997] wcscpy (in: _Dest=0x697ddb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.997] wcscat (in: _Dest=0x697ddb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.997] wcscat (in: _Dest=0x697ddb0, _Source="1058.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" [0146.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ddb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0146.999] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0146.999] wcscmp (_String1="1060.mst", _String2=".") returned 1 [0146.999] wcscmp (_String1="1060.mst", _String2="..") returned 1 [0146.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x697de78 [0146.999] wcscpy (in: _Dest=0x697de78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0146.999] wcscat (in: _Dest=0x697de78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0146.999] wcscat (in: _Dest=0x697de78, _Source="1060.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" [0146.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0147.000] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0147.000] wcscmp (_String1="1069.mst", _String2=".") returned 1 [0147.000] wcscmp (_String1="1069.mst", _String2="..") returned 1 [0147.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x697df40 [0147.000] wcscpy (in: _Dest=0x697df40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.000] wcscat (in: _Dest=0x697df40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.000] wcscat (in: _Dest=0x697df40, _Source="1069.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" [0147.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0147.001] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0147.001] wcscmp (_String1="2052.mst", _String2=".") returned 1 [0147.002] wcscmp (_String1="2052.mst", _String2="..") returned 1 [0147.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x697e008 [0147.002] wcscpy (in: _Dest=0x697e008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.002] wcscat (in: _Dest=0x697e008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.002] wcscat (in: _Dest=0x697e008, _Source="2052.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" [0147.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0147.003] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0147.003] wcscmp (_String1="ABCPY.INI", _String2=".") returned 1 [0147.003] wcscmp (_String1="ABCPY.INI", _String2="..") returned 1 [0147.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x697e0d0 [0147.003] wcscpy (in: _Dest=0x697e0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.003] wcscat (in: _Dest=0x697e0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.003] wcscat (in: _Dest=0x697e0d0, _Source="ABCPY.INI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" [0147.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344 [0147.489] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0147.489] wcscmp (_String1="AcroRead.msi", _String2=".") returned 1 [0147.489] wcscmp (_String1="AcroRead.msi", _String2="..") returned 1 [0147.490] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x37422680, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x37422680, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0147.490] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0147.490] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0147.490] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90c8100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0147.490] wcscmp (_String1="Setup.exe", _String2=".") returned 1 [0147.490] wcscmp (_String1="Setup.exe", _String2="..") returned 1 [0147.490] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0147.490] wcscmp (_String1="setup.ini", _String2=".") returned 1 [0147.490] wcscmp (_String1="setup.ini", _String2="..") returned 1 [0147.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3defb58 [0147.490] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0147.490] wcscat (in: _Dest=0x3defb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0147.490] wcscat (in: _Dest=0x3defb58, _Source="setup.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" [0152.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3defb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0152.158] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0152.158] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0152.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0152.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 [0152.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1286 os_tid = 0x5c8 [0146.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl")) returned 0x20 [0150.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0150.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.607] GetLastError () returned 0x5 [0150.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0150.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 Thread: id = 1287 os_tid = 0x3e8 [0146.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl")) returned 0x20 [0150.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0150.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.436] GetLastError () returned 0x5 [0150.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0150.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 Thread: id = 1288 os_tid = 0x434 [0146.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 0x20 [0146.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0146.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.210] GetLastError () returned 0x5 [0146.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0146.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 1289 os_tid = 0xdc8 [0146.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 0x20 [0152.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0152.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.264] GetLastError () returned 0x5 [0153.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0153.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 1290 os_tid = 0x7e0 [0146.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 0x20 [0151.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0151.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.370] GetLastError () returned 0x5 [0152.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0152.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 1291 os_tid = 0xaa4 [0146.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 0x20 [0153.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0153.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.279] GetLastError () returned 0x5 [0153.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0153.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 1292 os_tid = 0x644 [0146.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 0x20 [0153.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0153.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.287] GetLastError () returned 0x5 [0153.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0153.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 1293 os_tid = 0x3c8 [0146.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 0x20 [0153.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0153.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.277] GetLastError () returned 0x5 [0153.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0153.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 1294 os_tid = 0x25c [0146.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 0x20 [0148.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0148.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.761] GetLastError () returned 0x5 [0151.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0153.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052e98) returned 1 Thread: id = 1295 os_tid = 0xf5c [0146.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 0x20 [0153.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0153.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.288] GetLastError () returned 0x5 [0153.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0153.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 1296 os_tid = 0x20c [0146.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 0x20 [0153.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0153.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.290] GetLastError () returned 0x5 [0153.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0153.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5e0) returned 1 Thread: id = 1297 os_tid = 0xf60 [0146.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 0x20 [0153.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0153.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.274] GetLastError () returned 0x5 [0153.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0153.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 1298 os_tid = 0xf64 [0146.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 0x20 [0153.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0153.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.272] GetLastError () returned 0x5 [0153.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0153.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 Thread: id = 1299 os_tid = 0xf68 [0146.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 0x20 [0153.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0153.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.291] GetLastError () returned 0x5 [0153.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0153.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c8c0) returned 1 Thread: id = 1300 os_tid = 0xf6c [0146.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 0x20 [0153.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0153.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.270] GetLastError () returned 0x5 [0153.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0153.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d730) returned 1 Thread: id = 1301 os_tid = 0xf70 [0146.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 0x20 [0152.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0152.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.267] GetLastError () returned 0x5 [0153.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0153.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 Thread: id = 1302 os_tid = 0xf54 [0146.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 0x20 [0151.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0151.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.912] GetLastError () returned 0x5 [0152.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0152.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 Thread: id = 1303 os_tid = 0xfb8 [0146.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 0x20 [0151.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0151.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.371] GetLastError () returned 0x5 [0152.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0152.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d880) returned 1 Thread: id = 1304 os_tid = 0x61c [0146.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 0x20 [0153.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0153.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.262] GetLastError () returned 0x5 [0153.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0153.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 1305 os_tid = 0xae4 [0146.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 0x20 [0153.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0153.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.265] GetLastError () returned 0x5 [0153.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0153.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d928) returned 1 Thread: id = 1306 os_tid = 0x358 [0146.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 0x20 [0153.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0153.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.268] GetLastError () returned 0x5 [0153.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0153.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 1307 os_tid = 0xafc [0146.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 0x20 [0151.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0151.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.367] GetLastError () returned 0x5 [0152.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0152.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d0) returned 1 Thread: id = 1308 os_tid = 0x33c [0146.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 0x20 [0153.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0153.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.280] GetLastError () returned 0x5 [0153.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0153.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da78) returned 1 Thread: id = 1309 os_tid = 0x3f4 [0146.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 0x20 [0153.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0153.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.282] GetLastError () returned 0x5 [0153.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0153.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 Thread: id = 1310 os_tid = 0xc0 [0146.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 0x20 [0153.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0153.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.283] GetLastError () returned 0x5 [0153.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0153.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 1311 os_tid = 0xb0 [0146.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 0x20 [0153.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0153.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.285] GetLastError () returned 0x5 [0153.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0153.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 1312 os_tid = 0x82c [0146.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 0x20 [0153.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0153.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.275] GetLastError () returned 0x5 [0153.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0153.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db20) returned 1 Thread: id = 1313 os_tid = 0x83c [0146.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 0x20 [0151.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0151.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.368] GetLastError () returned 0x5 [0152.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0152.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dbc8) returned 1 Thread: id = 1314 os_tid = 0x87c [0146.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7b60 [0146.391] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.391] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0146.391] wcscat (in: _Dest=0x2ff7b60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0146.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0146.391] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8b08 [0146.749] wcscmp (_String1=".", _String2=".") returned 0 [0146.749] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.749] wcscmp (_String1="..", _String2=".") returned 1 [0146.749] wcscmp (_String1="..", _String2="..") returned 0 [0146.749] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.749] wcscmp (_String1="en-US", _String2=".") returned 1 [0146.749] wcscmp (_String1="en-US", _String2="..") returned 1 [0146.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0146.749] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.749] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0146.749] wcscat (in: _Dest=0x3329e8, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0156.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0156.632] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0156.632] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0156.632] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0156.632] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0156.632] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0156.632] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0156.632] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0156.632] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0156.632] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0156.633] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0156.633] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0156.633] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0156.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036b00 [0156.633] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0156.633] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0156.633] wcscat (in: _Dest=0x3036b00, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0156.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0156.634] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0156.634] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0156.634] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0156.634] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0156.634] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0156.634] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0156.634] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0156.634] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0156.634] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0156.634] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0156.634] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0156.634] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0156.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df07d8 [0156.634] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0156.634] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0156.634] wcscat (in: _Dest=0x3df07d8, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0156.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0156.636] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0156.636] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0156.636] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0156.636] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0156.636] FindClose (in: hFindFile=0x2fc8b08 | out: hFindFile=0x2fc8b08) returned 1 [0156.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0156.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 [0156.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 1315 os_tid = 0xdac [0146.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6fe0 [0146.399] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.399] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0146.399] wcscat (in: _Dest=0x2ff6fe0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0146.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0146.399] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0146.753] wcscmp (_String1=".", _String2=".") returned 0 [0146.753] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.753] wcscmp (_String1="..", _String2=".") returned 1 [0146.753] wcscmp (_String1="..", _String2="..") returned 0 [0146.753] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.753] wcscmp (_String1="en-US", _String2=".") returned 1 [0146.753] wcscmp (_String1="en-US", _String2="..") returned 1 [0146.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3333a8 [0146.753] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.753] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0146.753] wcscat (in: _Dest=0x3333a8, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0149.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0149.333] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0149.333] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0149.333] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0149.333] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0149.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df0968 [0149.334] wcscpy (in: _Dest=0x3df0968, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0149.334] wcscat (in: _Dest=0x3df0968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0149.334] wcscat (in: _Dest=0x3df0968, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0149.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0149.335] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0149.335] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0149.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0149.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 [0149.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 1316 os_tid = 0x89c [0146.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2150 [0146.403] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.403] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0146.403] wcscat (in: _Dest=0x3ea2150, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0146.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0146.403] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0146.748] wcscmp (_String1=".", _String2=".") returned 0 [0146.748] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.748] wcscmp (_String1="..", _String2=".") returned 1 [0146.748] wcscmp (_String1="..", _String2="..") returned 0 [0146.749] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.749] wcscmp (_String1="en-US", _String2=".") returned 1 [0146.749] wcscmp (_String1="en-US", _String2="..") returned 1 [0146.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6db8 [0146.749] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0146.749] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0146.749] wcscat (in: _Dest=0x2ff6db8, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0149.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0149.327] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0149.327] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0149.327] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0149.327] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0149.327] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0149.327] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0149.327] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0149.327] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0149.327] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0149.327] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0149.327] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0149.327] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0149.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0a30 [0149.327] wcscpy (in: _Dest=0x3df0a30, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0149.328] wcscat (in: _Dest=0x3df0a30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0149.328] wcscat (in: _Dest=0x3df0a30, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0149.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0149.329] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0149.329] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0149.329] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0149.329] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0149.329] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0149.329] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0149.329] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0149.329] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0149.329] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0149.329] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0149.329] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0149.329] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0149.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0149.329] wcscpy (in: _Dest=0x332268, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0149.329] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0149.330] wcscat (in: _Dest=0x332268, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0149.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0149.331] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0149.331] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0149.331] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0149.331] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0149.331] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0149.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0149.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 [0149.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 1317 os_tid = 0x8ac [0146.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2d00 [0146.403] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.404] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0146.404] wcscat (in: _Dest=0x3ea2d00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0146.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0146.404] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8e08 [0146.752] wcscmp (_String1=".", _String2=".") returned 0 [0146.752] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.752] wcscmp (_String1="..", _String2=".") returned 1 [0146.752] wcscmp (_String1="..", _String2="..") returned 0 [0146.752] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0146.752] wcscmp (_String1="en-US", _String2=".") returned 1 [0146.753] wcscmp (_String1="en-US", _String2="..") returned 1 [0146.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6968 [0146.753] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0146.753] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0146.753] wcscat (in: _Dest=0x2ff6968, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0157.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0157.316] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0157.316] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0157.316] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0157.317] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0157.317] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0157.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0157.317] wcscpy (in: _Dest=0x3330a8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0157.317] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0157.317] wcscat (in: _Dest=0x3330a8, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0157.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0157.318] FindNextFileW (in: hFindFile=0x2fc8e08, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0157.318] FindClose (in: hFindFile=0x2fc8e08 | out: hFindFile=0x2fc8e08) returned 1 [0157.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0157.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 [0157.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aed8) returned 1 Thread: id = 1318 os_tid = 0x8bc [0146.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e2e0 [0146.405] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0146.405] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0146.405] wcscat (in: _Dest=0x3d8e2e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*" [0146.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0146.405] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0147.140] wcscmp (_String1=".", _String2=".") returned 0 [0147.140] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.140] wcscmp (_String1="..", _String2=".") returned 1 [0147.140] wcscmp (_String1="..", _String2="..") returned 0 [0147.140] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0147.140] wcscmp (_String1="User Data", _String2=".") returned 1 [0147.140] wcscmp (_String1="User Data", _String2="..") returned 1 [0147.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1db20 [0147.140] wcscpy (in: _Dest=0x3f1db20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0147.140] wcscat (in: _Dest=0x3f1db20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0147.140] wcscat (in: _Dest=0x3f1db20, _Source="User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0162.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1db20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0162.653] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0162.653] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0162.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0162.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 [0162.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 1319 os_tid = 0x8cc [0146.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3dc6a28 [0146.406] wcscpy (in: _Dest=0x3dc6a28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0146.406] wcscat (in: _Dest=0x3dc6a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\" [0146.407] wcscat (in: _Dest=0x3dc6a28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*" [0146.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0146.407] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0147.141] wcscmp (_String1=".", _String2=".") returned 0 [0147.141] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.141] wcscmp (_String1="..", _String2=".") returned 1 [0147.141] wcscmp (_String1="..", _String2="..") returned 0 [0147.141] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.141] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0147.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0147.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0147.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 1320 os_tid = 0x8dc [0146.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d28 [0146.409] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\DRM\\Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0146.409] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\" [0146.409] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*" [0146.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0146.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0146.409] wcscmp (_String1=".", _String2=".") returned 0 [0146.409] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.409] wcscmp (_String1="..", _String2=".") returned 1 [0146.409] wcscmp (_String1="..", _String2="..") returned 0 [0146.409] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.409] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0146.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0146.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0146.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4ca8) returned 1 Thread: id = 1321 os_tid = 0xb94 [0146.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4ca8 [0146.417] wcscpy (in: _Dest=0x66d4ca8, _Source="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0146.417] wcscat (in: _Dest=0x66d4ca8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\" [0146.417] wcscat (in: _Dest=0x66d4ca8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*" [0146.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0146.417] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0146.417] wcscmp (_String1=".", _String2=".") returned 0 [0146.417] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.417] wcscmp (_String1="..", _String2=".") returned 1 [0146.417] wcscmp (_String1="..", _String2="..") returned 0 [0146.417] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.417] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0146.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0146.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4ca8) returned 1 [0146.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4d58) returned 1 Thread: id = 1322 os_tid = 0xbc4 [0146.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29560 [0146.419] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0146.419] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0146.419] wcscat (in: _Dest=0x3f29560, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*" [0146.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0146.419] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0146.419] wcscmp (_String1=".", _String2=".") returned 0 [0146.419] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.419] wcscmp (_String1="..", _String2=".") returned 1 [0146.419] wcscmp (_String1="..", _String2="..") returned 0 [0146.419] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0146.419] wcscmp (_String1="1036", _String2=".") returned 1 [0146.419] wcscmp (_String1="1036", _String2="..") returned 1 [0146.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29800 [0146.419] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0146.419] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0146.420] wcscat (in: _Dest=0x3f29800, _Source="1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0148.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0148.435] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0148.435] wcscmp (_String1="3082", _String2=".") returned 1 [0148.435] wcscmp (_String1="3082", _String2="..") returned 1 [0148.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5bf8 [0148.435] wcscpy (in: _Dest=0x66e5bf8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0148.435] wcscat (in: _Dest=0x66e5bf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0148.435] wcscat (in: _Dest=0x66e5bf8, _Source="3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0148.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66e5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0148.437] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0148.437] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0148.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0148.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 [0148.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e480) returned 1 Thread: id = 1323 os_tid = 0xbc0 [0146.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0146.420] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0146.420] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\" [0146.420] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*" [0146.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0146.420] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0146.420] wcscmp (_String1=".", _String2=".") returned 0 [0146.421] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.421] wcscmp (_String1="..", _String2=".") returned 1 [0146.421] wcscmp (_String1="..", _String2="..") returned 0 [0146.421] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.421] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0146.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0146.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0146.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 Thread: id = 1324 os_tid = 0xd9c [0146.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29090 [0146.422] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0146.422] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0146.422] wcscat (in: _Dest=0x3f29090, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*" [0146.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0146.422] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0146.423] wcscmp (_String1=".", _String2=".") returned 0 [0146.423] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.423] wcscmp (_String1="..", _String2=".") returned 1 [0146.423] wcscmp (_String1="..", _String2="..") returned 0 [0146.423] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xaf951880, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0146.423] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0146.423] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0146.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db988 [0146.423] wcscpy (in: _Dest=0x66db988, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0146.423] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0146.423] wcscat (in: _Dest=0x66db988, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0152.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0152.052] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xaf951880, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0152.052] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0152.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0152.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0152.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 Thread: id = 1325 os_tid = 0x4b8 [0146.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bf20 [0146.423] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0146.424] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0146.424] wcscat (in: _Dest=0x3d8bf20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*" [0146.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0146.424] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0146.424] wcscmp (_String1=".", _String2=".") returned 0 [0146.424] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b6c13a0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0x8b6c13a0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.424] wcscmp (_String1="..", _String2=".") returned 1 [0146.424] wcscmp (_String1="..", _String2="..") returned 0 [0146.424] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xaf92b720, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0146.424] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0146.424] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0146.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10bf0 [0146.424] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0146.424] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0146.424] wcscat (in: _Dest=0x3e10bf0, _Source="RacDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0148.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0148.439] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0148.439] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0148.440] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0148.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e09c30 [0148.440] wcscpy (in: _Dest=0x3e09c30, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0148.440] wcscat (in: _Dest=0x3e09c30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0148.440] wcscat (in: _Dest=0x3e09c30, _Source="RacMetaData.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0148.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e09c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0148.441] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0148.441] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0148.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0148.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 [0148.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 1326 os_tid = 0x7e4 [0146.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbfb8 [0146.425] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0146.425] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0146.425] wcscat (in: _Dest=0x66dbfb8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0146.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bad08 [0146.425] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0146.425] wcscmp (_String1=".", _String2=".") returned 0 [0146.425] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.425] wcscmp (_String1="..", _String2=".") returned 1 [0146.425] wcscmp (_String1="..", _String2="..") returned 0 [0146.425] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0146.425] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0146.425] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0146.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d148 [0146.425] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0146.425] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0146.426] wcscat (in: _Dest=0x3e5d148, _Source="Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0152.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0152.053] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0152.053] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0152.053] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0152.053] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0152.053] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0152.053] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0152.053] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0152.054] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0152.054] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0152.054] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0152.054] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0152.054] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0152.054] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0152.054] wcscmp (_String1="System Tools", _String2=".") returned 1 [0152.055] wcscmp (_String1="System Tools", _String2="..") returned 1 [0152.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0152.055] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0152.055] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0152.055] wcscat (in: _Dest=0x697e2d0, _Source="System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0152.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0152.056] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0152.056] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0152.056] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0152.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6e78 [0152.056] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0152.056] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0152.056] wcscat (in: _Dest=0x2c6e78, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0152.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0152.058] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0152.058] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0152.058] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0152.058] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0152.058] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0152.058] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0152.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bc98 [0152.058] wcscpy (in: _Dest=0x35bc98, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0152.058] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0152.058] wcscat (in: _Dest=0x35bc98, _Source="Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0152.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0152.059] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0152.059] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0152.059] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0152.059] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0152.059] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0152.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bad08) returned 1 [0152.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 [0152.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 1327 os_tid = 0x67c [0146.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d710 [0146.426] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0146.426] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0146.426] wcscat (in: _Dest=0x3e0d710, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0146.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0146.426] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8708 [0146.426] wcscmp (_String1=".", _String2=".") returned 0 [0146.426] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.426] wcscmp (_String1="..", _String2=".") returned 1 [0146.426] wcscmp (_String1="..", _String2="..") returned 0 [0146.426] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.427] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0146.427] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0146.427] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0146.427] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0146.427] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0146.427] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0146.428] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0146.428] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0146.428] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0146.428] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0146.428] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.428] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0146.428] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0146.428] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0146.428] FindClose (in: hFindFile=0x2fc8708 | out: hFindFile=0x2fc8708) returned 1 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 [0146.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 1328 os_tid = 0x2dc [0146.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef730 [0146.429] wcscpy (in: _Dest=0x66ef730, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0146.429] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0146.429] wcscat (in: _Dest=0x66ef730, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0146.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0146.430] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8708 [0146.430] wcscmp (_String1=".", _String2=".") returned 0 [0146.430] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.430] wcscmp (_String1="..", _String2=".") returned 1 [0146.430] wcscmp (_String1="..", _String2="..") returned 0 [0146.430] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.430] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0146.430] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0146.430] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0146.430] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0146.430] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0146.430] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0146.430] FindClose (in: hFindFile=0x2fc8708 | out: hFindFile=0x2fc8708) returned 1 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 [0146.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 Thread: id = 1329 os_tid = 0x598 [0146.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e11070 [0146.432] wcscpy (in: _Dest=0x3e11070, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0146.432] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0146.432] wcscat (in: _Dest=0x3e11070, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0146.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0146.432] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8708 [0146.434] wcscmp (_String1=".", _String2=".") returned 0 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.434] wcscmp (_String1="..", _String2=".") returned 1 [0146.434] wcscmp (_String1="..", _String2="..") returned 0 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0146.434] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0146.434] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0146.434] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0146.434] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0146.434] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0146.434] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0146.434] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0146.434] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0146.434] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0146.434] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0146.434] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0146.434] FindClose (in: hFindFile=0x2fc8708 | out: hFindFile=0x2fc8708) returned 1 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 [0146.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 1330 os_tid = 0x230 [0146.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0146.437] wcscpy (in: _Dest=0x66db598, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0146.437] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0146.437] wcscat (in: _Dest=0x66db598, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0146.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0146.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8708 [0146.437] wcscmp (_String1=".", _String2=".") returned 0 [0146.437] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.437] wcscmp (_String1="..", _String2=".") returned 1 [0146.437] wcscmp (_String1="..", _String2="..") returned 0 [0146.438] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0146.438] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0146.438] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0146.438] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0146.438] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0146.438] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0146.438] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0146.438] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0146.438] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0146.438] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0146.438] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0146.438] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0146.439] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0146.439] FindClose (in: hFindFile=0x2fc8708 | out: hFindFile=0x2fc8708) returned 1 [0146.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0146.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 [0146.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1331 os_tid = 0x240 [0146.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69585d0 [0146.440] wcscpy (in: _Dest=0x69585d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0146.440] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0146.440] wcscat (in: _Dest=0x69585d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0146.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0146.440] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8708 [0146.440] wcscmp (_String1=".", _String2=".") returned 0 [0146.440] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.440] wcscmp (_String1="..", _String2=".") returned 1 [0146.440] wcscmp (_String1="..", _String2="..") returned 0 [0146.440] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0146.440] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0146.440] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0146.441] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0146.441] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0146.441] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0146.441] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0146.441] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0146.441] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0146.441] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0146.441] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0146.441] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0146.441] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0146.441] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0146.441] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036bd0 [0146.441] wcscpy (in: _Dest=0x3036bd0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0146.441] wcscat (in: _Dest=0x3036bd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0146.441] wcscat (in: _Dest=0x3036bd0, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0148.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3036bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0148.444] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0148.444] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0148.444] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0148.445] FindNextFileW (in: hFindFile=0x2fc8708, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0148.445] FindClose (in: hFindFile=0x2fc8708 | out: hFindFile=0x2fc8708) returned 1 [0148.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0148.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 [0148.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d4a0) returned 1 Thread: id = 1332 os_tid = 0x1e4 [0146.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dca68 [0146.442] wcscpy (in: _Dest=0x66dca68, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0146.442] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0146.442] wcscat (in: _Dest=0x66dca68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0146.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0146.442] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0146.443] wcscmp (_String1=".", _String2=".") returned 0 [0146.443] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.443] wcscmp (_String1="..", _String2=".") returned 1 [0146.443] wcscmp (_String1="..", _String2="..") returned 0 [0146.443] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0146.443] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0146.443] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0146.444] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0146.444] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0146.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0146.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 [0146.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 1333 os_tid = 0x480 [0146.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efe18 [0146.450] wcscpy (in: _Dest=0x66efe18, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0146.450] wcscat (in: _Dest=0x66efe18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0146.450] wcscat (in: _Dest=0x66efe18, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0146.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0146.451] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0146.451] wcscmp (_String1=".", _String2=".") returned 0 [0146.451] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.451] wcscmp (_String1="..", _String2=".") returned 1 [0146.451] wcscmp (_String1="..", _String2="..") returned 0 [0146.451] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.451] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0146.451] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0146.451] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0146.451] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0146.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0146.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 [0146.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 1334 os_tid = 0x81c [0146.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0146.453] wcscpy (in: _Dest=0x66dca68, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0146.453] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0146.453] wcscat (in: _Dest=0x66dca68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0146.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0146.453] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0146.454] wcscmp (_String1=".", _String2=".") returned 0 [0146.454] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.454] wcscmp (_String1="..", _String2=".") returned 1 [0146.454] wcscmp (_String1="..", _String2="..") returned 0 [0146.454] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.454] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0146.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0146.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 [0146.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 1335 os_tid = 0xa00 [0146.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f298e0 [0146.456] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0146.456] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0146.456] wcscat (in: _Dest=0x3f298e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*" [0146.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0146.456] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0146.457] wcscmp (_String1=".", _String2=".") returned 0 [0146.457] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.457] wcscmp (_String1="..", _String2=".") returned 1 [0146.457] wcscmp (_String1="..", _String2="..") returned 0 [0146.457] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0146.457] wcscmp (_String1="10.0", _String2=".") returned 1 [0146.457] wcscmp (_String1="10.0", _String2="..") returned 1 [0146.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3dc6b18 [0146.457] wcscpy (in: _Dest=0x3dc6b18, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0146.457] wcscat (in: _Dest=0x3dc6b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0146.457] wcscat (in: _Dest=0x3dc6b18, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0148.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dc6b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0148.446] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0148.446] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0148.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0148.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 [0148.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 1336 os_tid = 0xa10 [0146.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0ba0 [0146.458] wcscpy (in: _Dest=0x66d0ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0146.458] wcscat (in: _Dest=0x66d0ba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0146.458] wcscat (in: _Dest=0x66d0ba0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*" [0146.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0146.458] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0146.754] wcscmp (_String1=".", _String2=".") returned 0 [0146.754] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.754] wcscmp (_String1="..", _String2=".") returned 1 [0146.754] wcscmp (_String1="..", _String2="..") returned 0 [0146.754] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0146.754] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0146.754] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0146.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355200 [0146.755] wcscpy (in: _Dest=0x355200, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0146.755] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0146.755] wcscat (in: _Dest=0x355200, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0151.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0151.650] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0151.650] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0151.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0151.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0151.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 1337 os_tid = 0xa20 [0146.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20 [0146.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0146.755] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.756] GetLastError () returned 0x5 [0146.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0146.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 1338 os_tid = 0xa30 [0146.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0146.465] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0146.465] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0146.465] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0146.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0146.465] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8b08 [0146.466] wcscmp (_String1=".", _String2=".") returned 0 [0146.466] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.466] wcscmp (_String1="..", _String2=".") returned 1 [0146.466] wcscmp (_String1="..", _String2="..") returned 0 [0146.466] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0146.466] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0146.466] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0146.466] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0146.466] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0146.466] FindClose (in: hFindFile=0x2fc8b08 | out: hFindFile=0x2fc8b08) returned 1 [0146.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0146.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0146.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 1339 os_tid = 0xa40 [0146.468] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0146.468] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0146.468] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.468] GetLastError () returned 0x5 [0146.468] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0146.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1340 os_tid = 0xa50 [0146.469] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0146.470] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0146.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.470] GetLastError () returned 0x5 [0146.470] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0146.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 1341 os_tid = 0xa60 [0146.471] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0146.471] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0146.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.471] GetLastError () returned 0x5 [0146.471] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0146.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1342 os_tid = 0x85c [0146.473] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0146.473] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0146.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.473] GetLastError () returned 0x5 [0146.473] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0146.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 1343 os_tid = 0xa74 [0146.474] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0148.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.510] GetLastError () returned 0x5 [0148.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 1344 os_tid = 0xa84 [0146.475] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0148.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.513] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.513] GetLastError () returned 0x5 [0148.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 1345 os_tid = 0xb08 [0146.475] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0148.511] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.511] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.511] GetLastError () returned 0x5 [0148.511] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 1346 os_tid = 0x51c [0146.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif")) returned 0x20 [0147.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0147.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.143] GetLastError () returned 0x5 [0147.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0147.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 1347 os_tid = 0xd5c [0146.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif")) returned 0x20 [0147.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0147.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.145] GetLastError () returned 0x5 [0147.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0147.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 1348 os_tid = 0xd90 [0146.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif")) returned 0x20 [0147.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0147.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.146] GetLastError () returned 0x5 [0147.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0147.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e094b0) returned 1 Thread: id = 1349 os_tid = 0x448 [0146.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif")) returned 0x20 [0147.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0147.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.148] GetLastError () returned 0x5 [0147.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0147.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 1350 os_tid = 0x88c [0146.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif")) returned 0x20 [0147.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0147.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.149] GetLastError () returned 0x5 [0147.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0147.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30f30) returned 1 Thread: id = 1351 os_tid = 0x910 [0146.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif")) returned 0x20 [0147.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0147.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.151] GetLastError () returned 0x5 [0147.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0147.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 1352 os_tid = 0x920 [0146.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif")) returned 0x20 [0147.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0147.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.152] GetLastError () returned 0x5 [0147.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0147.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 1353 os_tid = 0x940 [0146.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20 [0147.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0147.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.153] GetLastError () returned 0x5 [0147.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0147.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 1354 os_tid = 0x950 [0146.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif")) returned 0x20 [0147.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0147.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.156] GetLastError () returned 0x5 [0147.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0147.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 1355 os_tid = 0xdf8 [0146.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 0x20 [0147.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0147.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.158] GetLastError () returned 0x5 [0147.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0147.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 1356 os_tid = 0x960 [0146.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif")) returned 0x20 [0147.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0147.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.159] GetLastError () returned 0x5 [0147.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0147.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e98) returned 1 Thread: id = 1357 os_tid = 0xde8 [0146.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 0x20 [0147.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0147.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.160] GetLastError () returned 0x5 [0147.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0147.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 1358 os_tid = 0x970 [0146.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif")) returned 0x20 [0147.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0147.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.162] GetLastError () returned 0x5 [0147.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0147.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 1359 os_tid = 0x980 [0146.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif")) returned 0x20 [0147.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0147.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.163] GetLastError () returned 0x5 [0147.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0147.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e098b0) returned 1 Thread: id = 1360 os_tid = 0x990 [0146.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 0x20 [0147.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0147.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.165] GetLastError () returned 0x5 [0147.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0147.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09bb0) returned 1 Thread: id = 1361 os_tid = 0x9a0 [0146.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif")) returned 0x20 [0147.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0147.166] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.166] GetLastError () returned 0x5 [0147.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0147.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 1362 os_tid = 0x9b0 [0146.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif")) returned 0x20 [0147.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0147.168] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.168] GetLastError () returned 0x5 [0147.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0147.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09b30) returned 1 Thread: id = 1363 os_tid = 0xdf4 [0146.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 0x20 [0147.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0147.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.169] GetLastError () returned 0x5 [0147.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0147.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 1364 os_tid = 0xe2c [0146.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 0x20 [0147.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0147.170] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.171] GetLastError () returned 0x5 [0147.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0147.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 1365 os_tid = 0xe0c [0146.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif")) returned 0x20 [0146.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0146.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.762] GetLastError () returned 0x5 [0146.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0146.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1366 os_tid = 0xdd8 [0146.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif")) returned 0x20 [0146.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0146.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.764] GetLastError () returned 0x5 [0146.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0146.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 1367 os_tid = 0xe28 [0146.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif")) returned 0x20 [0146.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0146.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.767] GetLastError () returned 0x5 [0146.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0146.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 1368 os_tid = 0xe24 [0146.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0146.769] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" [0146.769] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" [0146.769] wcscat (in: _Dest=0x35c588, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\*" [0146.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0146.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e60d30, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0xaefa50e0, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xaefa50e0, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0146.769] wcscmp (_String1=".", _String2=".") returned 0 [0146.769] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e60d30, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0xaefa50e0, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xaefa50e0, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.769] wcscmp (_String1="..", _String2=".") returned 1 [0146.769] wcscmp (_String1="..", _String2="..") returned 0 [0146.769] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d5a1e0, ftCreationTime.dwHighDateTime=0x1d5e67a, ftLastAccessTime.dwLowDateTime=0x6b04fcd0, ftLastAccessTime.dwHighDateTime=0x1d5e795, ftLastWriteTime.dwLowDateTime=0x6b04fcd0, ftLastWriteTime.dwHighDateTime=0x1d5e795, nFileSizeHigh=0x0, nFileSizeLow=0x15929, dwReserved0=0x0, dwReserved1=0x0, cFileName="q5vheg7iUFEb-k31v8M3.swf", cAlternateFileName="Q5VHEG~1.SWF")) returned 1 [0146.769] wcscmp (_String1="q5vheg7iUFEb-k31v8M3.swf", _String2=".") returned 1 [0146.769] wcscmp (_String1="q5vheg7iUFEb-k31v8M3.swf", _String2="..") returned 1 [0146.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0146.769] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" [0146.769] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" [0146.770] wcscat (in: _Dest=0x2c9448, _Source="q5vheg7iUFEb-k31v8M3.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf" [0149.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0149.337] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97827690, ftCreationTime.dwHighDateTime=0x1d5daf5, ftLastAccessTime.dwLowDateTime=0xcd204df0, ftLastAccessTime.dwHighDateTime=0x1d5e71a, ftLastWriteTime.dwLowDateTime=0xcd204df0, ftLastWriteTime.dwHighDateTime=0x1d5e71a, nFileSizeHigh=0x0, nFileSizeLow=0x8afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSQWdt8j-RDRIxyLn5y.mp4", cAlternateFileName="SSQWDT~1.MP4")) returned 1 [0149.337] wcscmp (_String1="sSQWdt8j-RDRIxyLn5y.mp4", _String2=".") returned 1 [0149.337] wcscmp (_String1="sSQWdt8j-RDRIxyLn5y.mp4", _String2="..") returned 1 [0149.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9528 [0149.337] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2" [0149.337] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" [0149.337] wcscat (in: _Dest=0x2c9528, _Source="sSQWdt8j-RDRIxyLn5y.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4" [0149.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0149.338] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97827690, ftCreationTime.dwHighDateTime=0x1d5daf5, ftLastAccessTime.dwLowDateTime=0xcd204df0, ftLastAccessTime.dwHighDateTime=0x1d5e71a, ftLastWriteTime.dwLowDateTime=0xcd204df0, ftLastWriteTime.dwHighDateTime=0x1d5e71a, nFileSizeHigh=0x0, nFileSizeLow=0x8afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSQWdt8j-RDRIxyLn5y.mp4", cAlternateFileName="SSQWDT~1.MP4")) returned 0 [0149.338] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0149.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0149.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 [0149.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1369 os_tid = 0x9c0 [0146.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ad90 [0146.770] wcscpy (in: _Dest=0x3f1ad90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0146.770] wcscat (in: _Dest=0x3f1ad90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0146.770] wcscat (in: _Dest=0x3f1ad90, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*" [0146.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0146.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0148.126] wcscmp (_String1=".", _String2=".") returned 0 [0148.126] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.126] wcscmp (_String1="..", _String2=".") returned 1 [0148.126] wcscmp (_String1="..", _String2="..") returned 0 [0148.126] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.126] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.126] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59730 [0148.127] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0148.127] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0148.127] wcscat (in: _Dest=0x3d59730, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" [0150.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0150.262] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.263] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.263] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0150.263] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0150.263] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0150.263] wcscat (in: _Dest=0x66dcd38, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" [0150.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0150.264] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.264] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0150.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0150.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0150.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23450) returned 1 Thread: id = 1370 os_tid = 0x9d0 [0146.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b600 [0146.771] wcscpy (in: _Dest=0x3f1b600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0146.771] wcscat (in: _Dest=0x3f1b600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0146.771] wcscat (in: _Dest=0x3f1b600, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*" [0146.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0146.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0148.127] wcscmp (_String1=".", _String2=".") returned 0 [0148.127] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.127] wcscmp (_String1="..", _String2=".") returned 1 [0148.127] wcscmp (_String1="..", _String2="..") returned 0 [0148.127] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.127] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.127] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59488 [0148.127] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0148.127] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0148.127] wcscat (in: _Dest=0x3d59488, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" [0151.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0151.191] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.191] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.191] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db598 [0151.192] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0151.192] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0151.192] wcscat (in: _Dest=0x66db598, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" [0151.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0151.193] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.193] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0151.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0151.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0151.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 Thread: id = 1371 os_tid = 0x9e0 [0146.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b060 [0146.773] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0146.773] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0146.773] wcscat (in: _Dest=0x3f1b060, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*" [0146.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0146.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0148.128] wcscmp (_String1=".", _String2=".") returned 0 [0148.128] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.128] wcscmp (_String1="..", _String2=".") returned 1 [0148.128] wcscmp (_String1="..", _String2="..") returned 0 [0148.128] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.128] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.128] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d58740 [0148.128] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0148.128] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0148.128] wcscat (in: _Dest=0x3d58740, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" [0150.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0150.266] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.266] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.266] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcdc8 [0150.266] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0150.266] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0150.266] wcscat (in: _Dest=0x66dcdc8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" [0150.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0150.267] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.267] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0150.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0150.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0150.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 1372 os_tid = 0x9f0 [0146.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1af70 [0146.774] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0146.774] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0146.774] wcscat (in: _Dest=0x3f1af70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*" [0146.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0146.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0148.129] wcscmp (_String1=".", _String2=".") returned 0 [0148.129] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.129] wcscmp (_String1="..", _String2=".") returned 1 [0148.129] wcscmp (_String1="..", _String2="..") returned 0 [0148.129] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.129] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.129] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a148 [0148.129] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0148.129] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0148.129] wcscat (in: _Dest=0x3d5a148, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" [0153.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0153.537] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0153.537] wcscmp (_String1="license.html", _String2=".") returned 1 [0153.537] wcscmp (_String1="license.html", _String2="..") returned 1 [0153.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d688 [0153.537] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0153.537] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0153.537] wcscat (in: _Dest=0x674d688, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" [0153.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0153.538] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0153.538] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0153.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0153.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0153.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f235a0) returned 1 Thread: id = 1373 os_tid = 0xa70 [0146.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b588 [0146.775] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0146.775] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0146.775] wcscat (in: _Dest=0x3f1b588, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*" [0146.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0146.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0148.129] wcscmp (_String1=".", _String2=".") returned 0 [0148.129] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.129] wcscmp (_String1="..", _String2=".") returned 1 [0148.129] wcscmp (_String1="..", _String2="..") returned 0 [0148.129] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.129] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.129] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a2e0 [0148.130] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0148.130] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0148.130] wcscat (in: _Dest=0x3d5a2e0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" [0150.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0150.270] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.270] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.270] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0150.270] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0150.270] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0150.270] wcscat (in: _Dest=0x66dca68, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" [0150.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0150.271] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.271] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0150.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0150.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0150.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23610) returned 1 Thread: id = 1374 os_tid = 0x500 [0146.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1a958 [0146.776] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0146.776] wcscat (in: _Dest=0x3f1a958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0146.776] wcscat (in: _Dest=0x3f1a958, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*" [0146.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0146.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0148.130] wcscmp (_String1=".", _String2=".") returned 0 [0148.130] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.130] wcscmp (_String1="..", _String2=".") returned 1 [0148.130] wcscmp (_String1="..", _String2="..") returned 0 [0148.130] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.130] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.130] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a368 [0148.130] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0148.130] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0148.130] wcscat (in: _Dest=0x3d5a368, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" [0151.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0151.195] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.195] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.195] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc798 [0151.195] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0151.195] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0151.195] wcscat (in: _Dest=0x66dc798, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" [0151.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0151.196] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.196] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0151.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0151.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0151.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 Thread: id = 1375 os_tid = 0xbd0 [0146.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aac0 [0146.777] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0146.777] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0146.777] wcscat (in: _Dest=0x3f1aac0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*" [0146.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0146.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0148.131] wcscmp (_String1=".", _String2=".") returned 0 [0148.131] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.131] wcscmp (_String1="..", _String2=".") returned 1 [0148.131] wcscmp (_String1="..", _String2="..") returned 0 [0148.131] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.131] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.131] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59e18 [0148.131] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0148.131] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0148.131] wcscat (in: _Dest=0x3d59e18, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" [0150.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0150.273] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.273] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.274] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc948 [0150.274] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0150.274] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0150.274] wcscat (in: _Dest=0x66dc948, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" [0150.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0150.275] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.275] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0150.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0150.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0150.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f236f0) returned 1 Thread: id = 1376 os_tid = 0xdd0 [0146.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b0d8 [0146.778] wcscpy (in: _Dest=0x3f1b0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0146.778] wcscat (in: _Dest=0x3f1b0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0146.778] wcscat (in: _Dest=0x3f1b0d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*" [0146.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41608 [0146.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0148.131] wcscmp (_String1=".", _String2=".") returned 0 [0148.131] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.131] wcscmp (_String1="..", _String2=".") returned 1 [0148.132] wcscmp (_String1="..", _String2="..") returned 0 [0148.132] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.132] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.132] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d585a8 [0148.132] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0148.132] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0148.132] wcscat (in: _Dest=0x3d585a8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" [0152.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0152.042] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0152.042] wcscmp (_String1="license.html", _String2=".") returned 1 [0152.042] wcscmp (_String1="license.html", _String2="..") returned 1 [0152.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcaf8 [0152.042] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0152.042] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0152.042] wcscat (in: _Dest=0x66dcaf8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" [0152.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0152.043] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0152.043] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0152.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41608) returned 1 [0152.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0152.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23760) returned 1 Thread: id = 1377 os_tid = 0x220 [0146.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1ab38 [0146.784] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0146.784] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0146.784] wcscat (in: _Dest=0x3f1ab38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*" [0146.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41870 [0146.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0148.132] wcscmp (_String1=".", _String2=".") returned 0 [0148.132] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.132] wcscmp (_String1="..", _String2=".") returned 1 [0148.132] wcscmp (_String1="..", _String2="..") returned 0 [0148.132] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.132] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.132] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f272d8 [0148.133] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0148.133] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0148.133] wcscat (in: _Dest=0x3f272d8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" [0150.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0150.277] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.277] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.277] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0150.277] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0150.277] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0150.277] wcscat (in: _Dest=0x66dc8b8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" [0150.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0150.278] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.278] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0150.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41870) returned 1 [0150.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f237d0) returned 1 Thread: id = 1378 os_tid = 0x248 [0146.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0858 [0146.785] wcscpy (in: _Dest=0x66d0858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0146.785] wcscat (in: _Dest=0x66d0858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0146.785] wcscat (in: _Dest=0x66d0858, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*" [0146.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0146.785] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0148.133] wcscmp (_String1=".", _String2=".") returned 0 [0148.133] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.133] wcscmp (_String1="..", _String2=".") returned 1 [0148.133] wcscmp (_String1="..", _String2="..") returned 0 [0148.133] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.133] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.133] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26f20 [0148.133] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0148.133] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0148.133] wcscat (in: _Dest=0x3f26f20, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" [0151.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0151.198] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.198] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.198] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc558 [0151.198] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0151.198] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0151.198] wcscat (in: _Dest=0x66dc558, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" [0151.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0151.199] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.199] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0151.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0151.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0151.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23840) returned 1 Thread: id = 1379 os_tid = 0x754 [0146.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0768 [0146.786] wcscpy (in: _Dest=0x66d0768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0146.786] wcscat (in: _Dest=0x66d0768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0146.786] wcscat (in: _Dest=0x66d0768, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*" [0146.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0146.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0148.134] wcscmp (_String1=".", _String2=".") returned 0 [0148.134] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.134] wcscmp (_String1="..", _String2=".") returned 1 [0148.134] wcscmp (_String1="..", _String2="..") returned 0 [0148.134] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.134] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.134] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26e98 [0148.134] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0148.134] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0148.134] wcscat (in: _Dest=0x3f26e98, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" [0150.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0150.280] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.281] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.281] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db598 [0150.281] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0150.281] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0150.281] wcscat (in: _Dest=0x66db598, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" [0150.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0150.282] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.282] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0150.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0150.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0150.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f238b0) returned 1 Thread: id = 1380 os_tid = 0x5f8 [0146.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d06f0 [0146.793] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0146.793] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0146.793] wcscat (in: _Dest=0x66d06f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*" [0146.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0146.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d20a0 [0148.134] wcscmp (_String1=".", _String2=".") returned 0 [0148.134] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.134] wcscmp (_String1="..", _String2=".") returned 1 [0148.134] wcscmp (_String1="..", _String2="..") returned 0 [0148.134] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.135] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.135] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26d00 [0148.135] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0148.135] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0148.135] wcscat (in: _Dest=0x3f26d00, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" [0156.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0156.617] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0156.617] wcscmp (_String1="license.html", _String2=".") returned 1 [0156.617] wcscmp (_String1="license.html", _String2="..") returned 1 [0156.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e408 [0156.617] wcscpy (in: _Dest=0x674e408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0156.617] wcscat (in: _Dest=0x674e408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0156.618] wcscat (in: _Dest=0x674e408, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" [0156.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0156.619] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0156.619] FindClose (in: hFindFile=0x66d20a0 | out: hFindFile=0x66d20a0) returned 1 [0156.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0156.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0156.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23920) returned 1 Thread: id = 1381 os_tid = 0xe10 [0146.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0678 [0146.794] wcscpy (in: _Dest=0x66d0678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0146.794] wcscat (in: _Dest=0x66d0678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0146.794] wcscat (in: _Dest=0x66d0678, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*" [0146.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0146.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d20e0 [0148.135] wcscmp (_String1=".", _String2=".") returned 0 [0148.135] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.136] wcscmp (_String1="..", _String2=".") returned 1 [0148.136] wcscmp (_String1="..", _String2="..") returned 0 [0148.136] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.136] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.136] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25f30 [0148.136] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0148.136] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0148.136] wcscat (in: _Dest=0x3f25f30, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" [0150.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0150.284] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.284] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.284] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0150.285] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0150.285] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0150.285] wcscat (in: _Dest=0x66dcc18, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" [0150.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0150.286] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.286] FindClose (in: hFindFile=0x66d20e0 | out: hFindFile=0x66d20e0) returned 1 [0150.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0150.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0150.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23990) returned 1 Thread: id = 1382 os_tid = 0xba8 [0146.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d08d0 [0146.795] wcscpy (in: _Dest=0x66d08d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0146.795] wcscat (in: _Dest=0x66d08d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0146.795] wcscat (in: _Dest=0x66d08d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*" [0146.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0146.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2120 [0148.136] wcscmp (_String1=".", _String2=".") returned 0 [0148.136] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.136] wcscmp (_String1="..", _String2=".") returned 1 [0148.136] wcscmp (_String1="..", _String2="..") returned 0 [0148.136] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.137] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.137] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26bf0 [0148.137] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0148.137] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0148.137] wcscat (in: _Dest=0x3f26bf0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" [0151.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0151.201] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.201] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.201] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0151.201] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0151.201] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0151.201] wcscat (in: _Dest=0x66dc9d8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" [0151.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0151.202] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.203] FindClose (in: hFindFile=0x66d2120 | out: hFindFile=0x66d2120) returned 1 [0151.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0151.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0151.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a00) returned 1 Thread: id = 1383 os_tid = 0xc08 [0146.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0150 [0146.796] wcscpy (in: _Dest=0x66d0150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0146.796] wcscat (in: _Dest=0x66d0150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0146.796] wcscat (in: _Dest=0x66d0150, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*" [0146.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0146.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2160 [0148.137] wcscmp (_String1=".", _String2=".") returned 0 [0148.137] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.137] wcscmp (_String1="..", _String2=".") returned 1 [0148.137] wcscmp (_String1="..", _String2="..") returned 0 [0148.137] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.137] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.137] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0148.138] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0148.138] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0148.138] wcscat (in: _Dest=0x3f274f8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" [0150.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0150.288] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.288] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.288] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0150.288] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0150.288] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0150.288] wcscat (in: _Dest=0x66dc9d8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" [0150.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0150.289] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.289] FindClose (in: hFindFile=0x66d2160 | out: hFindFile=0x66d2160) returned 1 [0150.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0150.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 [0150.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a70) returned 1 Thread: id = 1384 os_tid = 0xe14 [0146.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d00d8 [0146.798] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0146.798] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0146.798] wcscat (in: _Dest=0x66d00d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*" [0146.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0146.798] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0148.138] wcscmp (_String1=".", _String2=".") returned 0 [0148.138] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.138] wcscmp (_String1="..", _String2=".") returned 1 [0148.138] wcscmp (_String1="..", _String2="..") returned 0 [0148.138] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.138] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.138] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26e10 [0148.138] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0148.138] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0148.138] wcscat (in: _Dest=0x3f26e10, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" [0152.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0152.046] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0152.046] wcscmp (_String1="license.html", _String2=".") returned 1 [0152.046] wcscmp (_String1="license.html", _String2="..") returned 1 [0152.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1dd8 [0152.046] wcscpy (in: _Dest=0x3df1dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0152.046] wcscat (in: _Dest=0x3df1dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0152.046] wcscat (in: _Dest=0x3df1dd8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" [0152.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df1dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0152.047] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0152.047] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0152.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0152.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0152.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ae0) returned 1 Thread: id = 1385 os_tid = 0x6fc [0146.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0060 [0146.799] wcscpy (in: _Dest=0x66d0060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0146.799] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0146.799] wcscat (in: _Dest=0x66d0060, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*" [0146.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979ce8 [0146.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21e0 [0148.139] wcscmp (_String1=".", _String2=".") returned 0 [0148.139] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.139] wcscmp (_String1="..", _String2=".") returned 1 [0148.139] wcscmp (_String1="..", _String2="..") returned 0 [0148.139] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.139] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.139] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26d88 [0148.139] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0148.139] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0148.139] wcscat (in: _Dest=0x3f26d88, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" [0150.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0150.292] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.292] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.292] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc558 [0150.292] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0150.292] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0150.292] wcscat (in: _Dest=0x66dc558, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" [0150.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0150.293] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.293] FindClose (in: hFindFile=0x66d21e0 | out: hFindFile=0x66d21e0) returned 1 [0150.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979ce8) returned 1 [0150.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0150.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23b50) returned 1 Thread: id = 1386 os_tid = 0xfdc [0146.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0498 [0146.800] wcscpy (in: _Dest=0x66d0498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0146.801] wcscat (in: _Dest=0x66d0498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0146.801] wcscat (in: _Dest=0x66d0498, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*" [0146.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979f50 [0146.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2220 [0148.139] wcscmp (_String1=".", _String2=".") returned 0 [0148.139] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.140] wcscmp (_String1="..", _String2=".") returned 1 [0148.140] wcscmp (_String1="..", _String2="..") returned 0 [0148.140] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.140] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.140] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26150 [0148.140] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0148.140] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0148.140] wcscat (in: _Dest=0x3f26150, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" [0151.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0151.204] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.204] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.204] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0151.204] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0151.204] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0151.204] wcscat (in: _Dest=0x66dcc18, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" [0151.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0151.205] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.205] FindClose (in: hFindFile=0x66d2220 | out: hFindFile=0x66d2220) returned 1 [0151.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979f50) returned 1 [0151.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 [0151.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23bc0) returned 1 Thread: id = 1387 os_tid = 0xbd8 [0146.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d03a8 [0146.807] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0146.807] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0146.807] wcscat (in: _Dest=0x66d03a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*" [0146.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0146.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2260 [0148.140] wcscmp (_String1=".", _String2=".") returned 0 [0148.140] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.140] wcscmp (_String1="..", _String2=".") returned 1 [0148.140] wcscmp (_String1="..", _String2="..") returned 0 [0148.141] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.141] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.141] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27030 [0148.141] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0148.141] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0148.141] wcscat (in: _Dest=0x3f27030, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" [0150.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0150.295] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.295] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.295] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc798 [0150.296] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0150.296] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0150.296] wcscat (in: _Dest=0x66dc798, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" [0150.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0150.297] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.297] FindClose (in: hFindFile=0x66d2260 | out: hFindFile=0x66d2260) returned 1 [0150.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0150.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0150.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c30) returned 1 Thread: id = 1388 os_tid = 0x6d0 [0146.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0420 [0146.808] wcscpy (in: _Dest=0x66d0420, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0146.808] wcscat (in: _Dest=0x66d0420, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0146.808] wcscat (in: _Dest=0x66d0420, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*" [0146.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0146.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0148.141] wcscmp (_String1=".", _String2=".") returned 0 [0148.141] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.141] wcscmp (_String1="..", _String2=".") returned 1 [0148.141] wcscmp (_String1="..", _String2="..") returned 0 [0148.141] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.141] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.141] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27140 [0148.141] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0148.142] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0148.142] wcscat (in: _Dest=0x3f27140, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" [0153.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0153.541] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0153.541] wcscmp (_String1="license.html", _String2=".") returned 1 [0153.541] wcscmp (_String1="license.html", _String2="..") returned 1 [0153.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d718 [0153.541] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0153.541] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0153.541] wcscat (in: _Dest=0x674d718, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" [0153.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0153.543] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0153.543] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0153.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0153.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0153.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ca0) returned 1 Thread: id = 1389 os_tid = 0xff8 [0146.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d07e0 [0146.809] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0146.809] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0146.809] wcscat (in: _Dest=0x66d07e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*" [0146.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a688 [0146.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0148.142] wcscmp (_String1=".", _String2=".") returned 0 [0148.142] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.142] wcscmp (_String1="..", _String2=".") returned 1 [0148.142] wcscmp (_String1="..", _String2="..") returned 0 [0148.142] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.142] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.142] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26fa8 [0148.142] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0148.142] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0148.142] wcscat (in: _Dest=0x3f26fa8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" [0150.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0150.299] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0150.299] wcscmp (_String1="license.html", _String2=".") returned 1 [0150.299] wcscmp (_String1="license.html", _String2="..") returned 1 [0150.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcaf8 [0150.299] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0150.299] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0150.299] wcscat (in: _Dest=0x66dcaf8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" [0150.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0150.300] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0150.300] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0150.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a688) returned 1 [0150.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0150.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d10) returned 1 Thread: id = 1390 os_tid = 0x74c [0146.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0330 [0146.810] wcscpy (in: _Dest=0x66d0330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0146.810] wcscat (in: _Dest=0x66d0330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0146.810] wcscat (in: _Dest=0x66d0330, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*" [0146.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a8f0 [0146.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2320 [0148.143] wcscmp (_String1=".", _String2=".") returned 0 [0148.143] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.143] wcscmp (_String1="..", _String2=".") returned 1 [0148.143] wcscmp (_String1="..", _String2="..") returned 0 [0148.143] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0148.143] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0148.143] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0148.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26260 [0148.143] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0148.143] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0148.143] wcscat (in: _Dest=0x3f26260, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" [0151.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0151.207] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.207] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.207] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0151.207] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0151.207] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0151.207] wcscat (in: _Dest=0x66dc8b8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" [0151.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0151.208] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.208] FindClose (in: hFindFile=0x66d2320 | out: hFindFile=0x66d2320) returned 1 [0151.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a8f0) returned 1 [0151.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0151.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d80) returned 1 Thread: id = 1391 os_tid = 0xff0 [0146.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d01c8 [0146.811] wcscpy (in: _Dest=0x66d01c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0146.811] wcscat (in: _Dest=0x66d01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0146.811] wcscat (in: _Dest=0x66d01c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*" [0146.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0146.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0147.188] wcscmp (_String1=".", _String2=".") returned 0 [0147.188] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.188] wcscmp (_String1="..", _String2=".") returned 1 [0147.188] wcscmp (_String1="..", _String2="..") returned 0 [0147.188] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0147.188] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0147.188] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0147.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef400 [0147.188] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0147.188] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0147.188] wcscat (in: _Dest=0x66ef400, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" [0151.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0151.247] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.247] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.247] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc948 [0151.247] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0151.247] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0151.247] wcscat (in: _Dest=0x66dc948, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" [0151.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0151.248] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.248] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0151.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0151.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 [0151.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23df0) returned 1 Thread: id = 1392 os_tid = 0xfec [0146.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d02b8 [0146.812] wcscpy (in: _Dest=0x66d02b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0146.812] wcscat (in: _Dest=0x66d02b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0146.812] wcscat (in: _Dest=0x66d02b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*" [0146.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697adc0 [0146.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0147.189] wcscmp (_String1=".", _String2=".") returned 0 [0147.189] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.189] wcscmp (_String1="..", _String2=".") returned 1 [0147.189] wcscmp (_String1="..", _String2="..") returned 0 [0147.189] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0147.189] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0147.189] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0147.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee740 [0147.189] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0147.189] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0147.189] wcscat (in: _Dest=0x66ee740, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" [0153.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0153.576] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0153.576] wcscmp (_String1="license.html", _String2=".") returned 1 [0153.576] wcscmp (_String1="license.html", _String2="..") returned 1 [0153.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d7a8 [0153.576] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0153.576] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0153.576] wcscat (in: _Dest=0x674d7a8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" [0153.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0153.577] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0153.577] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0153.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697adc0) returned 1 [0153.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0153.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b18) returned 1 Thread: id = 1393 os_tid = 0xf88 [0147.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3dc6a28 [0147.195] wcscpy (in: _Dest=0x3dc6a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0147.195] wcscat (in: _Dest=0x3dc6a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0147.195] wcscat (in: _Dest=0x3dc6a28, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*" [0147.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0147.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0147.196] wcscmp (_String1=".", _String2=".") returned 0 [0147.196] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.196] wcscmp (_String1="..", _String2=".") returned 1 [0147.196] wcscmp (_String1="..", _String2="..") returned 0 [0147.196] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0147.196] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0147.196] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0147.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f03f0 [0147.196] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0147.196] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0147.196] wcscat (in: _Dest=0x66f03f0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" [0151.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0151.250] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0151.250] wcscmp (_String1="license.html", _String2=".") returned 1 [0151.250] wcscmp (_String1="license.html", _String2="..") returned 1 [0151.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0151.251] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0151.251] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0151.251] wcscat (in: _Dest=0x66dca68, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" [0151.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0151.252] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0151.252] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0151.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0151.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0151.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5958) returned 1 Thread: id = 1394 os_tid = 0xfc8 [0147.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa")) returned 0x21 [0148.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x20) returned 0 [0148.291] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.291] GetLastError () returned 0x5 [0148.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x21) returned 0 [0148.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x364d90) returned 1 Thread: id = 1395 os_tid = 0x40c [0147.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt")) returned 0x20 [0148.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0148.504] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.505] GetLastError () returned 0x5 [0148.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0148.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 1396 os_tid = 0xcd4 [0147.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\14vd puk5vuq.png")) returned 0x2020 [0147.201] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png", dwFileAttributes=0x20) returned 1 [0149.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\14vd puk5vuq.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x106c [0149.473] GetFileSizeEx (in: hFile=0x106c, lpFileSize=0x5dffd3c | out: lpFileSize=0x5dffd3c*=56571) returned 1 [0149.473] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0xdcf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.473] ReadFile (in: hFile=0x106c, lpBuffer=0x5dffd18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5dffd28, lpOverlapped=0x0 | out: lpBuffer=0x5dffd18*, lpNumberOfBytesRead=0x5dffd28*=0x4, lpOverlapped=0x0) returned 1 [0149.475] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0149.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0149.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0149.476] NtQuerySystemTime (in: CurrentTime=0x5dffcb0 | out: CurrentTime=0x5dffcb0*=132482710581300000) returned 0x0 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x10f33045 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x3318ccd7 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x14cdf718 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x20b782d4 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x6cc55d43 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x5d4c7ccc [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x4eb1f1bf [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x429d4570 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0xa86cb89 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x1ed92fb0 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x3f37b1e7 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x10601913 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x1dc18a11 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x146c705f [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x1396d2f9 [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x2c91d97d [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x50618fec [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x4b545d1f [0149.476] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x17b1fae6 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x50f11dda [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0xf6b4cbb [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x1f652a3f [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x111f5e5c [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x92b768 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x266cede2 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x65954b32 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x4cc94395 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x75869f84 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x5a1f70fe [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x6b94c0dd [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0x65139272 [0149.477] RtlRandomEx (in: Seed=0x5dffca8 | out: Seed=0x5dffca8) returned 0xcfb73fb [0149.490] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.490] ReadFile (in: hFile=0x106c, lpBuffer=0x675ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5dffcb0, lpOverlapped=0x0 | out: lpBuffer=0x675ed08*, lpNumberOfBytesRead=0x5dffcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.490] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e618 [0149.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34790 [0149.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0149.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6762910 [0149.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0149.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0149.491] WriteFile (in: hFile=0x106c, lpBuffer=0x6762910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5dffcb0, lpOverlapped=0x0 | out: lpBuffer=0x6762910*, lpNumberOfBytesWritten=0x5dffcb0*=0x3c00, lpOverlapped=0x0) returned 1 [0152.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762910) returned 1 [0152.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed08) returned 1 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19d20 [0152.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19d58 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0152.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0152.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0152.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe990) returned 1 [0152.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55718 [0152.363] SetFilePointerEx (in: hFile=0x106c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.363] WriteFile (in: hFile=0x106c, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x5dffd30, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x5dffd30*=0x112, lpOverlapped=0x0) returned 1 [0155.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0155.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d58) returned 1 [0155.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d20) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0155.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b738 [0155.068] wcscpy (in: _Dest=0x674b738, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png" [0155.068] wcscat (in: _Dest=0x674b738, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png.ac3a86" [0155.068] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png.ac3a86", NtPathName=0x5dffca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\14Vd pUK5vUQ.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db8f8 [0155.314] FlushFileBuffers (hFile=0x106c) returned 1 [0155.345] CloseHandle (hObject=0x106c) returned 1 [0155.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5cd8 [0155.346] wcscpy (in: _Dest=0x66e5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.346] wcscat (in: _Dest=0x66e5cd8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.346] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cd8) returned 1 [0155.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e56b8) returned 1 Thread: id = 1397 os_tid = 0x888 [0147.204] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1h82uzm65kev_q.mp3")) returned 0x2020 [0147.204] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3", dwFileAttributes=0x20) returned 1 [0149.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1h82uzm65kev_q.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc48 [0149.492] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0x63bfc3c | out: lpFileSize=0x63bfc3c*=61045) returned 1 [0149.492] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0xee71, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.492] ReadFile (in: hFile=0xc48, lpBuffer=0x63bfc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63bfc28, lpOverlapped=0x0 | out: lpBuffer=0x63bfc18*, lpNumberOfBytesRead=0x63bfc28*=0x4, lpOverlapped=0x0) returned 1 [0149.494] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0149.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0149.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.495] NtQuerySystemTime (in: CurrentTime=0x63bfbb0 | out: CurrentTime=0x63bfbb0*=132482710581456000) returned 0x0 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x9f22168 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x75af1a73 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x399fc031 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x4d8040a7 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x4337289e [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x87082a8 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x56c5dff6 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0xa7cef82 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x29241b8a [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x57ac3e65 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x59069c72 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x6bfb6547 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x7cfadf9f [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x691d6f2e [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x421a7d3e [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x66624f58 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x17516020 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x495baa8 [0149.495] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x7bd672ac [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x511459b2 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x34298c6a [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x41b754b9 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x2c5e0525 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x3b6926e5 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x4f1a8386 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x27d2cf8 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x793fb02c [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x677d95d1 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0xad318f0 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x3411738b [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x2e27f669 [0149.496] RtlRandomEx (in: Seed=0x63bfba8 | out: Seed=0x63bfba8) returned 0x43801efe [0149.507] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.507] ReadFile (in: hFile=0xc48, lpBuffer=0x67574f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x63bfbb0, lpOverlapped=0x0 | out: lpBuffer=0x67574f8*, lpNumberOfBytesRead=0x63bfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.508] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e618 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34790 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x675b100 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0149.508] WriteFile (in: hFile=0xc48, lpBuffer=0x675b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x63bfbb0, lpOverlapped=0x0 | out: lpBuffer=0x675b100*, lpNumberOfBytesWritten=0x63bfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b100) returned 1 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67574f8) returned 1 [0151.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e809f8 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0151.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e806f8 [0151.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0f8 [0151.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c878 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c878) returned 1 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0151.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0151.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55840 [0151.075] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.076] WriteFile (in: hFile=0xc48, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x63bfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0x63bfc30*=0x116, lpOverlapped=0x0) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e806f8) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e809f8) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0151.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0151.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0151.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0151.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e08db0 [0151.870] wcscpy (in: _Dest=0x3e08db0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3" [0151.870] wcscat (in: _Dest=0x3e08db0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3.ac3a86" [0151.870] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3.ac3a86", NtPathName=0x63bfba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\1h82UZM65KeV_Q.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0155.351] FlushFileBuffers (hFile=0xc48) returned 1 [0155.375] CloseHandle (hObject=0xc48) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f291e0 [0155.381] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.381] wcscat (in: _Dest=0x3f291e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.381] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 Thread: id = 1398 os_tid = 0x8d8 [0147.205] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\2t7_ebe7rqchnwys.avi")) returned 0x2020 [0147.205] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi", dwFileAttributes=0x20) returned 1 [0149.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\2t7_ebe7rqchnwys.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0149.509] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0x47afbd4 | out: lpFileSize=0x47afbd4*=11069) returned 1 [0149.509] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x2b39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.509] ReadFile (in: hFile=0xe28, lpBuffer=0x47afbb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x47afbc0, lpOverlapped=0x0 | out: lpBuffer=0x47afbb0*, lpNumberOfBytesRead=0x47afbc0*=0x4, lpOverlapped=0x0) returned 1 [0149.511] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0149.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0149.512] NtQuerySystemTime (in: CurrentTime=0x47afb48 | out: CurrentTime=0x47afb48*=132482710581612000) returned 0x0 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x2e42c5a4 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x2a2c32e9 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x649fb3b1 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x4130ac5b [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x2ed60c28 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x152f01db [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x3f92969a [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x43f84cbf [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x486dd518 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x4d3b7d9c [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x19a27cd [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x318671bc [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x2eb98d52 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x33d19983 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x611c0ab8 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x7d418f4f [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x7d65e2dd [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x74eacb3 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x25019b [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x33b4a3b8 [0149.512] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x7eff868 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x5972d566 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x4bb3c974 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x469f072e [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x3f9587a4 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x416c50e9 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x73052cfb [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x7f49d18f [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x6c579eb7 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x375d09d [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x21dd1665 [0149.513] RtlRandomEx (in: Seed=0x47afb40 | out: Seed=0x47afb40) returned 0x6d4fe9c4 [0149.521] ReadFile (in: hFile=0xe28, lpBuffer=0x674fce8, nNumberOfBytesToRead=0x2b3d, lpNumberOfBytesRead=0x47afb3c, lpOverlapped=0x0 | out: lpBuffer=0x674fce8*, lpNumberOfBytesRead=0x47afb3c*=0x2b3d, lpOverlapped=0x0) returned 1 [0149.522] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.522] WriteFile (in: hFile=0xe28, lpBuffer=0x67538f0*, nNumberOfBytesToWrite=0x2b3d, lpNumberOfBytesWritten=0x47afb40, lpOverlapped=0x0 | out: lpBuffer=0x67538f0*, lpNumberOfBytesWritten=0x47afb40*=0x2b3d, lpOverlapped=0x0) returned 1 [0151.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c878 [0151.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bc70 [0151.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0151.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67538f0) returned 1 [0151.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fce8) returned 1 [0151.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0151.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0151.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e806b8 [0151.077] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.077] WriteFile (in: hFile=0xe28, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x47afbc8, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x47afbc8*=0x11a, lpOverlapped=0x0) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80978) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e806b8) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c878) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0151.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0151.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a3f0 [0151.872] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi" [0151.872] wcscat (in: _Dest=0x3d5a3f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi.ac3a86" [0151.872] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi.ac3a86", NtPathName=0x47afb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\2T7_ebe7rqchnWYS.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69591b0 [0155.353] FlushFileBuffers (hFile=0xe28) returned 1 [0155.400] CloseHandle (hObject=0xe28) returned 1 [0155.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0155.400] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.401] wcscat (in: _Dest=0x66e5f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.401] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0155.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0600) returned 1 Thread: id = 1399 os_tid = 0x8d4 [0147.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\83uf6.gif")) returned 0x2020 [0147.206] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif", dwFileAttributes=0x20) returned 1 [0149.522] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\83uf6.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe14 [0149.522] GetFileSizeEx (in: hFile=0xe14, lpFileSize=0x5e3fc0c | out: lpFileSize=0x5e3fc0c*=84179) returned 1 [0149.522] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x148cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.523] ReadFile (in: hFile=0xe14, lpBuffer=0x5e3fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e3fbf8, lpOverlapped=0x0 | out: lpBuffer=0x5e3fbe8*, lpNumberOfBytesRead=0x5e3fbf8*=0x4, lpOverlapped=0x0) returned 1 [0149.525] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0149.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.525] NtQuerySystemTime (in: CurrentTime=0x5e3fb80 | out: CurrentTime=0x5e3fb80*=132482710581768000) returned 0x0 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0xfcd02a0 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x3b93b135 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x7129ccb0 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x5923e120 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x5ff0734a [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x148a7fd8 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x78b257f3 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x5edd9742 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x69cd334b [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x4e55da5e [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x1d79f1a6 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x6816cff2 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x5309ab8a [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x6c28fcaa [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x29ca0ddb [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0xcba206d [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x557c5b94 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x6e3ecdc8 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x1bee2e79 [0149.525] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x55e39c9d [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0xfcb0658 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x172c9407 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x2ed1742 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x2b0ff431 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0xbb667b0 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x54acbe90 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x7a43a3fb [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x36519fac [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0xf92646f [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x709f395e [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x2f580442 [0149.526] RtlRandomEx (in: Seed=0x5e3fb78 | out: Seed=0x5e3fb78) returned 0x4f0be664 [0149.535] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.535] ReadFile (in: hFile=0xe14, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0149.535] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e780 [0149.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0149.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0149.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0149.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0149.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0149.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0149.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0149.537] WriteFile (in: hFile=0xe14, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0151.078] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.078] ReadFile (in: hFile=0xe14, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.079] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e618 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34790 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0151.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0151.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cbe8 [0151.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0151.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0151.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0151.079] WriteFile (in: hFile=0xe14, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0151.381] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x10cd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.382] ReadFile (in: hFile=0xe14, lpBuffer=0x6766518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x6766518*, lpNumberOfBytesRead=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.382] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x10cd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676a120 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.383] WriteFile (in: hFile=0xe14, lpBuffer=0x676a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e3fb80, lpOverlapped=0x0 | out: lpBuffer=0x676a120*, lpNumberOfBytesWritten=0x5e3fb80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a120) returned 1 [0151.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e9c8 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0151.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0151.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0151.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b708 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce310 [0151.740] SetFilePointerEx (in: hFile=0xe14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.740] WriteFile (in: hFile=0xe14, lpBuffer=0x66ce310*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x5e3fc00, lpOverlapped=0x0 | out: lpBuffer=0x66ce310*, lpNumberOfBytesWritten=0x5e3fc00*=0x144, lpOverlapped=0x0) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0155.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0155.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f299c0 [0155.079] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif" [0155.079] wcscat (in: _Dest=0x3f299c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif.ac3a86" [0155.079] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif.ac3a86", NtPathName=0x5e3fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\83Uf6.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66effb0 [0155.288] FlushFileBuffers (hFile=0xe14) returned 1 [0155.331] CloseHandle (hObject=0xe14) returned 1 [0155.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0155.331] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.331] wcscat (in: _Dest=0x66e5e28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.331] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 [0155.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 1400 os_tid = 0x8a0 [0147.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\8rz1pflsnddia84s0py.png")) returned 0x2020 [0147.206] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png", dwFileAttributes=0x20) returned 1 [0149.537] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\8rz1pflsnddia84s0py.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdec [0149.537] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x80dfb0c | out: lpFileSize=0x80dfb0c*=5039) returned 1 [0149.537] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x13ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.537] ReadFile (in: hFile=0xdec, lpBuffer=0x80dfae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x80dfaf8, lpOverlapped=0x0 | out: lpBuffer=0x80dfae8*, lpNumberOfBytesRead=0x80dfaf8*=0x4, lpOverlapped=0x0) returned 1 [0149.539] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0149.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0149.539] NtQuerySystemTime (in: CurrentTime=0x80dfa80 | out: CurrentTime=0x80dfa80*=132482710581924000) returned 0x0 [0149.539] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x546b5d12 [0149.539] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x27d6166b [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x365c4684 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x71a6374 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x295d94e3 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x7bb59573 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x3b7a2b77 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2d5bd591 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2505ed96 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x89b5b68 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0xb0f9b54 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x24a863ba [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x719d7eb1 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x79859c9a [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x99be83c [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2417dd57 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x6e2f4291 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x651e3bc0 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x36f40ff9 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x61451ae6 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2be660b1 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x1b76100a [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x7cf40b83 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x4d1a3817 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x605c3c29 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0xeae5af8 [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x7df6a51c [0149.540] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x44742608 [0149.541] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x50504b2f [0149.541] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x34f324ed [0149.541] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2aa13312 [0149.541] RtlRandomEx (in: Seed=0x80dfa78 | out: Seed=0x80dfa78) returned 0x2d78dff3 [0149.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0149.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x676dd28 [0149.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6771930 [0149.558] ReadFile (in: hFile=0xdec, lpBuffer=0x676dd28, nNumberOfBytesToRead=0x13af, lpNumberOfBytesRead=0x80dfa74, lpOverlapped=0x0 | out: lpBuffer=0x676dd28*, lpNumberOfBytesRead=0x80dfa74*=0x13af, lpOverlapped=0x0) returned 1 [0149.558] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.558] WriteFile (in: hFile=0xdec, lpBuffer=0x6771930*, nNumberOfBytesToWrite=0x13af, lpNumberOfBytesWritten=0x80dfa78, lpOverlapped=0x0 | out: lpBuffer=0x6771930*, lpNumberOfBytesWritten=0x80dfa78*=0x13af, lpOverlapped=0x0) returned 1 [0151.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cbe8 [0151.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0151.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0151.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771930) returned 1 [0151.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676dd28) returned 1 [0151.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0151.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e4e780 [0151.081] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.081] WriteFile (in: hFile=0xdec, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x80dfb00, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x80dfb00*=0x120, lpOverlapped=0x0) returned 1 [0151.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e810) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0151.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0151.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d597b8 [0151.873] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png" [0151.873] wcscat (in: _Dest=0x3d597b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png.ac3a86" [0151.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png.ac3a86", NtPathName=0x80dfa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\8rz1PFlsnddIa84s0pY.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d710 [0155.356] FlushFileBuffers (hFile=0xdec) returned 1 [0155.383] CloseHandle (hObject=0xdec) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5db8 [0155.383] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.383] wcscat (in: _Dest=0x66e5db8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.384] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6f8) returned 1 Thread: id = 1401 os_tid = 0x8c0 [0147.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ae8 [0147.207] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0147.207] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0147.207] wcscat (in: _Dest=0x2fe6ae8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*" [0147.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b028 [0147.207] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0148.144] wcscmp (_String1=".", _String2=".") returned 0 [0148.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.144] wcscmp (_String1="..", _String2=".") returned 1 [0148.144] wcscmp (_String1="..", _String2="..") returned 0 [0148.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0148.144] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0148.144] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0148.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ef03e0 [0148.144] wcscpy (in: _Dest=0x3ef03e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0148.144] wcscat (in: _Dest=0x3ef03e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0148.144] wcscat (in: _Dest=0x3ef03e0, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0150.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef03e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0150.302] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0150.302] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0150.302] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0150.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23d10 [0150.302] wcscpy (in: _Dest=0x3f23d10, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0150.302] wcscat (in: _Dest=0x3f23d10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0150.302] wcscat (in: _Dest=0x3f23d10, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0150.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0150.303] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0150.303] wcscmp (_String1="Headlights", _String2=".") returned 1 [0150.304] wcscmp (_String1="Headlights", _String2="..") returned 1 [0150.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23c30 [0150.304] wcscpy (in: _Dest=0x3f23c30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0150.304] wcscat (in: _Dest=0x3f23c30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0150.304] wcscat (in: _Dest=0x3f23c30, _Source="Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0150.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0150.305] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0150.305] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0150.305] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0150.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23b50 [0150.305] wcscpy (in: _Dest=0x3f23b50, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0150.305] wcscat (in: _Dest=0x3f23b50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0150.305] wcscat (in: _Dest=0x3f23b50, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0150.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0150.306] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0150.306] wcscmp (_String1="LogTransport2", _String2=".") returned 1 [0150.306] wcscmp (_String1="LogTransport2", _String2="..") returned 1 [0150.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d07e0 [0150.307] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0150.307] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0150.307] wcscat (in: _Dest=0x66d07e0, _Source="LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0150.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d07e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0150.308] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0150.308] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0150.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b028) returned 1 [0150.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0150.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7d30) returned 1 Thread: id = 1402 os_tid = 0xe54 [0147.210] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\akb7ie29mkjss 0l.pdf")) returned 0x2020 [0147.210] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf", dwFileAttributes=0x20) returned 1 [0149.558] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\akb7ie29mkjss 0l.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1344 [0149.559] GetFileSizeEx (in: hFile=0x1344, lpFileSize=0x84cfa44 | out: lpFileSize=0x84cfa44*=93542) returned 1 [0149.559] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x16d62, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.559] ReadFile (in: hFile=0x1344, lpBuffer=0x84cfa20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84cfa30, lpOverlapped=0x0 | out: lpBuffer=0x84cfa20*, lpNumberOfBytesRead=0x84cfa30*=0x4, lpOverlapped=0x0) returned 1 [0149.561] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0149.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0149.561] NtQuerySystemTime (in: CurrentTime=0x84cf9b8 | out: CurrentTime=0x84cf9b8*=132482710582080000) returned 0x0 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x5acee308 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x79248fdd [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x2e342673 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x7fe75467 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x3547209f [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x68596176 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x40554ba7 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x1f95fee7 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x1651d81c [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x176b87c8 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x72deb00e [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x352e1eeb [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x59d7d893 [0149.561] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x526f782f [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x122d28 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x4ac520dd [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x61eb00c8 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x31126d [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x48f3256 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x6e054dbe [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x392b7703 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x6317881d [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x31153e66 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x60c6d79b [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x6d6d0213 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x1d740927 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x683a4ff2 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x461f249e [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x78e0d44b [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x8c63428 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0x63293359 [0149.562] RtlRandomEx (in: Seed=0x84cf9b0 | out: Seed=0x84cf9b0) returned 0xfead1c1 [0149.574] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.574] ReadFile (in: hFile=0x1344, lpBuffer=0x6775538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesRead=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.574] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6779140 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0149.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0149.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0149.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.575] WriteFile (in: hFile=0x1344, lpBuffer=0x6779140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6779140*, lpNumberOfBytesWritten=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779140) returned 1 [0151.082] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.082] ReadFile (in: hFile=0x1344, lpBuffer=0x6775538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesRead=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.083] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4e618 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6779140 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0151.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0151.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0151.084] WriteFile (in: hFile=0x1344, lpBuffer=0x6779140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6779140*, lpNumberOfBytesWritten=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779140) returned 1 [0151.383] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x13166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.383] ReadFile (in: hFile=0x1344, lpBuffer=0x6775538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesRead=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.384] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x13166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6779140 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.384] WriteFile (in: hFile=0x1344, lpBuffer=0x6779140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84cf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6779140*, lpNumberOfBytesWritten=0x84cf9b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779140) returned 1 [0151.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e5b8 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0151.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1fe00 [0151.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0151.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcde38 [0151.741] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.741] WriteFile (in: hFile=0x1344, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x84cfa38, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x84cfa38*=0x15a, lpOverlapped=0x0) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fe00) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f600) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e5b8) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0155.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0155.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0155.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66efa60 [0155.081] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf" [0155.081] wcscat (in: _Dest=0x66efa60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf.ac3a86" [0155.081] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf.ac3a86", NtPathName=0x84cf9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\aKb7ie29mKJSS 0L.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958668 [0155.292] FlushFileBuffers (hFile=0x1344) returned 1 [0155.315] CloseHandle (hObject=0x1344) returned 1 [0155.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0155.316] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.316] wcscat (in: _Dest=0x3f29090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0155.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 Thread: id = 1403 os_tid = 0x8e0 [0147.210] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\aw4nwlxsr4qh3bkrfmo_.bmp")) returned 0x2020 [0147.210] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp", dwFileAttributes=0x20) returned 1 [0149.576] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\aw4nwlxsr4qh3bkrfmo_.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf94 [0149.576] GetFileSizeEx (in: hFile=0xf94, lpFileSize=0x44cfa74 | out: lpFileSize=0x44cfa74*=40118) returned 1 [0149.576] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x9cb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.577] ReadFile (in: hFile=0xf94, lpBuffer=0x44cfa50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cfa60, lpOverlapped=0x0 | out: lpBuffer=0x44cfa50*, lpNumberOfBytesRead=0x44cfa60*=0x4, lpOverlapped=0x0) returned 1 [0149.579] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0149.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0149.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0149.580] NtQuerySystemTime (in: CurrentTime=0x44cf9e8 | out: CurrentTime=0x44cf9e8*=132482710582236000) returned 0x0 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x4aebef9a [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x200d66cb [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x2213f4db [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x11b2df0c [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x183d1f76 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x3d283ee2 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x14280e1b [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x22f46308 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x21cd000c [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x6dd75b01 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x2b634499 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x128cf2cb [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x2b1de5b [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x2c959476 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x19b16b72 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x1b910e10 [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x30a5902d [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x6ff18d4f [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x617d402f [0149.580] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x3e23b02f [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x7452319a [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x306c05fa [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x19d07187 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x7f91a2e7 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x5a7073b0 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x2ed2c561 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x48b794de [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x5d7b8f71 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x633a8708 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x7c8cb419 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x6a93e154 [0149.581] RtlRandomEx (in: Seed=0x44cf9e0 | out: Seed=0x44cf9e0) returned 0x3346bf94 [0149.594] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.594] ReadFile (in: hFile=0xf94, lpBuffer=0x677cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf9e8, lpOverlapped=0x0 | out: lpBuffer=0x677cd48*, lpNumberOfBytesRead=0x44cf9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.594] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0149.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0149.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6780950 [0149.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0149.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0149.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0149.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.595] WriteFile (in: hFile=0xf94, lpBuffer=0x6780950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf9e8, lpOverlapped=0x0 | out: lpBuffer=0x6780950*, lpNumberOfBytesWritten=0x44cf9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6780950) returned 1 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677cd48) returned 1 [0151.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4e618 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0151.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4f500 [0151.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0151.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8cb8 [0151.086] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.086] WriteFile (in: hFile=0xf94, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x44cfa68, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x44cfa68*=0x122, lpOverlapped=0x0) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e618) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0151.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0151.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db598 [0151.874] wcscpy (in: _Dest=0x66db598, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp" [0151.874] wcscat (in: _Dest=0x66db598, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp.ac3a86" [0151.874] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp.ac3a86", NtPathName=0x44cf9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\aw4nwlxSR4qh3bkRFMO_.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0ed90 [0155.358] FlushFileBuffers (hFile=0xf94) returned 1 [0155.385] CloseHandle (hObject=0xf94) returned 1 [0155.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5db8 [0155.385] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.385] wcscat (in: _Dest=0x66e5db8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.385] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 [0155.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 Thread: id = 1404 os_tid = 0xe50 [0147.211] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\brnjh.mkv")) returned 0x2020 [0147.211] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv", dwFileAttributes=0x20) returned 1 [0149.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\brnjh.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1030 [0149.596] GetFileSizeEx (in: hFile=0x1030, lpFileSize=0x8cdfd4c | out: lpFileSize=0x8cdfd4c*=88319) returned 1 [0149.596] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x158fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.596] ReadFile (in: hFile=0x1030, lpBuffer=0x8cdfd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8cdfd38, lpOverlapped=0x0 | out: lpBuffer=0x8cdfd28*, lpNumberOfBytesRead=0x8cdfd38*=0x4, lpOverlapped=0x0) returned 1 [0149.599] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0149.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0149.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0149.599] NtQuerySystemTime (in: CurrentTime=0x8cdfcc0 | out: CurrentTime=0x8cdfcc0*=132482710582548000) returned 0x0 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x6d62151f [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x4bcb5d49 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x12235711 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x2951f004 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x4f7e5d5d [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x1ee2fd90 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x8586dac [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x452b4fd1 [0149.599] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x7d4f54fc [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x43a08858 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x5b6fd07b [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x7ba8e51c [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x55142048 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x2c073ec6 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x4f8afb8b [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x62f9fe44 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x3babf417 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x5c442f1d [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x1708d978 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x3d9b8edd [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x12a177fa [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x6616406b [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x72ab7822 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x17012a9c [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x1924202c [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x52db3ed9 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x7873bbe1 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x21eacd8 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x4e1fe3ba [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x1bc1074 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x1fb1e586 [0149.600] RtlRandomEx (in: Seed=0x8cdfcb8 | out: Seed=0x8cdfcb8) returned 0x593e3c6b [0149.613] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.613] ReadFile (in: hFile=0x1030, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.614] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0149.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0149.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0149.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0149.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0149.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0149.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.615] WriteFile (in: hFile=0x1030, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0151.087] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.087] ReadFile (in: hFile=0x1030, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.087] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0151.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0151.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0151.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0151.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0151.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0151.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0151.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.088] WriteFile (in: hFile=0x1030, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0151.385] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x11cff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.385] ReadFile (in: hFile=0x1030, lpBuffer=0x6784558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesRead=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.385] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x11cff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6788160 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.386] WriteFile (in: hFile=0x1030, lpBuffer=0x6788160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8cdfcc0, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesWritten=0x8cdfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788160) returned 1 [0151.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c398 [0151.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0151.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0151.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0151.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b708 [0151.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0151.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce060 [0151.743] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.743] WriteFile (in: hFile=0x1030, lpBuffer=0x66ce060*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x8cdfd40, lpOverlapped=0x0 | out: lpBuffer=0x66ce060*, lpNumberOfBytesWritten=0x8cdfd40*=0x144, lpOverlapped=0x0) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce060) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c398) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0155.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0155.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f298e0 [0155.082] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv" [0155.082] wcscat (in: _Dest=0x3f298e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv.ac3a86" [0155.082] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv.ac3a86", NtPathName=0x8cdfcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\bRNjh.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eea70 [0155.291] FlushFileBuffers (hFile=0x1030) returned 1 [0155.332] CloseHandle (hObject=0x1030) returned 1 [0155.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0155.333] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.334] wcscat (in: _Dest=0x66e5e28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 [0155.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 Thread: id = 1405 os_tid = 0xde4 [0147.212] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\btbqh6mcsj.m4a")) returned 0x2020 [0147.212] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a", dwFileAttributes=0x20) returned 1 [0149.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\btbqh6mcsj.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf98 [0149.616] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0x846fcdc | out: lpFileSize=0x846fcdc*=94933) returned 1 [0149.616] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x172d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.616] ReadFile (in: hFile=0xf98, lpBuffer=0x846fcb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x846fcc8, lpOverlapped=0x0 | out: lpBuffer=0x846fcb8*, lpNumberOfBytesRead=0x846fcc8*=0x4, lpOverlapped=0x0) returned 1 [0149.618] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0149.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0149.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0149.618] NtQuerySystemTime (in: CurrentTime=0x846fc50 | out: CurrentTime=0x846fc50*=132482710582704000) returned 0x0 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x3b75bca8 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x66c8651 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x673e780c [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x18679429 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x74ba35ad [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x65068754 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0xcf1493d [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x25317c68 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x1c1fca5 [0149.618] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x51a33899 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x7c28b74 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x118a7d6b [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x4de8d61d [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x736f84d3 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x215a0290 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x659f76a3 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x6852e0b6 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x6395d081 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x5e28126 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x6738f49d [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x5ac9a83f [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x658a7bcd [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x3e657e32 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x1612eb17 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x7a00adfc [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x1aaf0175 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x21ccaa57 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x6228a8dd [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x2dee75b7 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x734addb7 [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x5a5ab66a [0149.619] RtlRandomEx (in: Seed=0x846fc48 | out: Seed=0x846fc48) returned 0x6ac0a0bb [0149.631] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.631] ReadFile (in: hFile=0xf98, lpBuffer=0x678bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesRead=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0149.632] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0149.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682fce8 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0149.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0149.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0149.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.633] WriteFile (in: hFile=0xf98, lpBuffer=0x682fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesWritten=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0151.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0151.089] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.089] ReadFile (in: hFile=0xf98, lpBuffer=0x678bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesRead=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0151.089] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0151.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0151.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0151.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682fce8 [0151.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0151.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0151.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0151.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.090] WriteFile (in: hFile=0xf98, lpBuffer=0x682fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesWritten=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0151.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0151.387] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x136d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.387] ReadFile (in: hFile=0xf98, lpBuffer=0x678bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesRead=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0151.387] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x136d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0151.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0151.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682fce8 [0151.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0151.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0151.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.388] WriteFile (in: hFile=0xf98, lpBuffer=0x682fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x846fc50, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesWritten=0x846fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0151.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0151.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d440 [0151.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0151.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19c40 [0151.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0151.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0151.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0151.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x294aa0 [0151.744] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.744] WriteFile (in: hFile=0xf98, lpBuffer=0x294aa0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x846fcd0, lpOverlapped=0x0 | out: lpBuffer=0x294aa0*, lpNumberOfBytesWritten=0x846fcd0*=0x14e, lpOverlapped=0x0) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x294aa0) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c40) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19c08) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d440) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0155.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0155.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ac28 [0155.084] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a" [0155.084] wcscat (in: _Dest=0x3f1ac28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a.ac3a86" [0155.084] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a.ac3a86", NtPathName=0x846fc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\bTBQh6McSj.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc3a8 [0155.293] FlushFileBuffers (hFile=0xf98) returned 1 [0155.317] CloseHandle (hObject=0xf98) returned 1 [0155.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0155.319] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.319] wcscat (in: _Dest=0x3f29090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.319] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0155.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 1406 os_tid = 0x944 [0147.212] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\burbyf.m4a")) returned 0x2020 [0147.212] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a", dwFileAttributes=0x20) returned 1 [0149.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\burbyf.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1008 [0149.633] GetFileSizeEx (in: hFile=0x1008, lpFileSize=0x850fed4 | out: lpFileSize=0x850fed4*=87415) returned 1 [0149.633] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x15573, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.633] ReadFile (in: hFile=0x1008, lpBuffer=0x850feb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x850fec0, lpOverlapped=0x0 | out: lpBuffer=0x850feb0*, lpNumberOfBytesRead=0x850fec0*=0x4, lpOverlapped=0x0) returned 1 [0149.636] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0149.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0149.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0149.636] NtQuerySystemTime (in: CurrentTime=0x850fe48 | out: CurrentTime=0x850fe48*=132482710582860000) returned 0x0 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x27abd19f [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0xf85a708 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x6285406e [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x7dd8b9a [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x24159bb5 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x3983e08f [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x73bc7e37 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x7464b2f7 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x2141e97e [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x13cf8174 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x5293a66e [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x689a4131 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x5cbf1fd5 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x50eb6a55 [0149.636] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x7279cdf0 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0xdc90674 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x319e4bfc [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x30d7294e [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x6bf3c3fa [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x7022c04c [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x5c434b4b [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x344b471 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x259f2c43 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x76526fa0 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x3204d6d0 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x69c849aa [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x77c7633 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x25276a43 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x51b8bbeb [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x4102c932 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x10df1841 [0149.637] RtlRandomEx (in: Seed=0x850fe40 | out: Seed=0x850fe40) returned 0x749afcde [0149.648] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.648] ReadFile (in: hFile=0x1008, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0149.648] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0149.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0149.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0149.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0149.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0149.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0149.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.649] WriteFile (in: hFile=0x1008, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0151.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0151.091] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.091] ReadFile (in: hFile=0x1008, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0151.091] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0151.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0151.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.092] WriteFile (in: hFile=0x1008, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0151.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0151.389] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x11977, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.389] ReadFile (in: hFile=0x1008, lpBuffer=0x68338f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0151.389] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x11977, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0151.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0151.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0151.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0151.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.390] WriteFile (in: hFile=0x1008, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x850fe48, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x850fe48*=0x3c00, lpOverlapped=0x0) returned 1 [0151.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8b490 [0151.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5b10 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0151.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x66ce468 [0151.745] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.745] WriteFile (in: hFile=0x1008, lpBuffer=0x66ce468*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x850fec8, lpOverlapped=0x0 | out: lpBuffer=0x66ce468*, lpNumberOfBytesWritten=0x850fec8*=0x146, lpOverlapped=0x0) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce468) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0155.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0155.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29560 [0155.088] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a" [0155.088] wcscat (in: _Dest=0x3f29560, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a.ac3a86" [0155.088] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a.ac3a86", NtPathName=0x850fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\burbYf.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee630 [0155.296] FlushFileBuffers (hFile=0x1008) returned 1 [0155.320] CloseHandle (hObject=0x1008) returned 1 [0155.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0155.321] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.321] wcscat (in: _Dest=0x3f29090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.321] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0155.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 1407 os_tid = 0xde0 [0147.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\c3fvtpvtld.pptx")) returned 0x2020 [0147.213] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx", dwFileAttributes=0x20) returned 1 [0149.649] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\c3fvtpvtld.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c4 [0149.650] GetFileSizeEx (in: hFile=0x12c4, lpFileSize=0xa28ff54 | out: lpFileSize=0xa28ff54*=86686) returned 1 [0149.650] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x1529a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.650] ReadFile (in: hFile=0x12c4, lpBuffer=0xa28ff30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa28ff40, lpOverlapped=0x0 | out: lpBuffer=0xa28ff30*, lpNumberOfBytesRead=0xa28ff40*=0x4, lpOverlapped=0x0) returned 1 [0149.652] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0149.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0149.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0149.652] NtQuerySystemTime (in: CurrentTime=0xa28fec8 | out: CurrentTime=0xa28fec8*=132482710583016000) returned 0x0 [0149.652] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x67c583bf [0149.652] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x71208872 [0149.652] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x46951f5a [0149.652] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x726c2eee [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x2dea805 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x7e74b28e [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x1b68e599 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x983cb66 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x62b9b105 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x4465d306 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x61e44e7a [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x30c25df3 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x4bf4df4 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x1ee4e4aa [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x54bbb296 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x153f685 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x74bc28d3 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x2ebdc676 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x40ad5182 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x3d05e8 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0xacd712c [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x8d17e7e [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x78883169 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x523882df [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x115e465 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x67b4eff3 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0xa6c1eee [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x4ae83989 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x7f7756a3 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0xc5e8e11 [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x7a8fc2bc [0149.653] RtlRandomEx (in: Seed=0xa28fec0 | out: Seed=0xa28fec0) returned 0x3f4afe2f [0149.665] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.665] ReadFile (in: hFile=0x12c4, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.665] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0149.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0149.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0149.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0149.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0149.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0149.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.666] WriteFile (in: hFile=0x12c4, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0151.093] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.093] ReadFile (in: hFile=0x12c4, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.094] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e34a60 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.094] WriteFile (in: hFile=0x12c4, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0151.391] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x1169e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.391] ReadFile (in: hFile=0x12c4, lpBuffer=0x683b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.391] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x1169e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5e20 [0151.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0151.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0151.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0151.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0151.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0151.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0151.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0151.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5e20) returned 1 [0151.392] WriteFile (in: hFile=0x12c4, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa28fec8, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0xa28fec8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8cc88 [0151.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19b28 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0151.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0151.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x29fc20 [0151.747] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.747] WriteFile (in: hFile=0x12c4, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xa28ff48, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0xa28ff48*=0x150, lpOverlapped=0x0) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b28) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a80) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8cc88) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0155.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0155.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1af70 [0155.089] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx" [0155.089] wcscat (in: _Dest=0x3f1af70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx.ac3a86" [0155.089] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx.ac3a86", NtPathName=0xa28fec0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\c3fvtPVTld.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd248 [0155.299] FlushFileBuffers (hFile=0x12c4) returned 1 [0155.323] CloseHandle (hObject=0x12c4) returned 1 [0155.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0155.326] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.326] wcscat (in: _Dest=0x3f29090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.326] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 [0155.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e98) returned 1 Thread: id = 1408 os_tid = 0x904 [0147.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\cfn1itqknhd.mp3")) returned 0x2020 [0147.213] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3", dwFileAttributes=0x20) returned 1 [0149.666] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\cfn1itqknhd.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb28 [0149.667] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0x8b5fabc | out: lpFileSize=0x8b5fabc*=28840) returned 1 [0149.667] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x70a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.667] ReadFile (in: hFile=0xb28, lpBuffer=0x8b5fa98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b5faa8, lpOverlapped=0x0 | out: lpBuffer=0x8b5fa98*, lpNumberOfBytesRead=0x8b5faa8*=0x4, lpOverlapped=0x0) returned 1 [0149.669] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0149.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0149.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0149.669] NtQuerySystemTime (in: CurrentTime=0x8b5fa30 | out: CurrentTime=0x8b5fa30*=132482710583172000) returned 0x0 [0149.669] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x428604f6 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x11d12ac1 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x36a80b71 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x56a2b850 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x63dfcc35 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x4f7285be [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x457ddc53 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x5b5b2d27 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x55fac2be [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x10cc43f4 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x5bbb0809 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x644a0156 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x19d5fc74 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x27d2854d [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x2ef43f98 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x66e3db4f [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x4786a7e8 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x21041026 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x7fbc7ba7 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x6c75f0a9 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x2db6dd13 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x3dfeccab [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x9238604 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x7388f48f [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x7eb8d2f3 [0149.670] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x561c978 [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x4fc2ffe9 [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x3eb6698a [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x129fdafe [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x2cae7f8a [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x4a113702 [0149.671] RtlRandomEx (in: Seed=0x8b5fa28 | out: Seed=0x8b5fa28) returned 0x282f31ca [0149.684] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.684] ReadFile (in: hFile=0xb28, lpBuffer=0x6842910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b5fa30, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x8b5fa30*=0x3c00, lpOverlapped=0x0) returned 1 [0149.684] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0149.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0149.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0149.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0149.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0149.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0149.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.685] WriteFile (in: hFile=0xb28, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b5fa30, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x8b5fa30*=0x3c00, lpOverlapped=0x0) returned 1 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0151.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19d20 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0151.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19d58 [0151.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0151.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3deca58 [0151.096] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.096] WriteFile (in: hFile=0xb28, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x8b5fab0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x8b5fab0*=0x110, lpOverlapped=0x0) returned 1 [0151.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0151.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d58) returned 1 [0151.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0151.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d20) returned 1 [0151.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0151.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0151.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0151.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0151.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0151.876] wcscpy (in: _Dest=0x3f1aef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3" [0151.876] wcscat (in: _Dest=0x3f1aef8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3.ac3a86" [0151.876] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3.ac3a86", NtPathName=0x8b5fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Cfn1ITQKnHD.mp3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcd38 [0155.360] FlushFileBuffers (hFile=0xb28) returned 1 [0155.386] CloseHandle (hObject=0xb28) returned 1 [0155.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5db8 [0155.387] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.387] wcscat (in: _Dest=0x66e5db8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.387] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 [0155.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 Thread: id = 1409 os_tid = 0xba4 [0147.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\cl-9 o-sb2gqz4ofvug.wav")) returned 0x2020 [0147.214] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav", dwFileAttributes=0x20) returned 1 [0149.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\cl-9 o-sb2gqz4ofvug.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb30 [0149.686] GetFileSizeEx (in: hFile=0xb30, lpFileSize=0x863fd84 | out: lpFileSize=0x863fd84*=69851) returned 1 [0149.686] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x110d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.686] ReadFile (in: hFile=0xb30, lpBuffer=0x863fd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x863fd70, lpOverlapped=0x0 | out: lpBuffer=0x863fd60*, lpNumberOfBytesRead=0x863fd70*=0x4, lpOverlapped=0x0) returned 1 [0149.688] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0149.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0149.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0149.688] NtQuerySystemTime (in: CurrentTime=0x863fcf8 | out: CurrentTime=0x863fcf8*=132482710583328000) returned 0x0 [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x475b304e [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2135f4cf [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x44432e3b [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x3983c4d4 [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x7d784c40 [0149.688] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x1d230ed8 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x7f3bf167 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0xef18d5c [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x3607e059 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x72c47c49 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x32d3870d [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x23768fb7 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2b59156b [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2ed5d15 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2875869 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x515e7d4d [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x341cbc47 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x10737474 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x1cdd2037 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x252b0015 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2d8aa332 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x10f5a123 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x6160b550 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x621054f2 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x2a34c931 [0149.689] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x5b80937a [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x3469d297 [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x6dcdda36 [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x849da4c [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x4c12eecd [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x47f64030 [0149.690] RtlRandomEx (in: Seed=0x863fcf0 | out: Seed=0x863fcf0) returned 0x1772410 [0149.702] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.702] ReadFile (in: hFile=0xb30, lpBuffer=0x684a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x863fcf8, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesRead=0x863fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.703] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0149.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0149.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0149.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0149.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.704] WriteFile (in: hFile=0xb30, lpBuffer=0x684dd28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x863fcf8, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesWritten=0x863fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0151.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0151.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66d1720 [0151.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0151.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66d1fd8 [0151.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0151.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0151.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0151.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d16d8) returned 1 [0151.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54b88 [0151.107] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.107] WriteFile (in: hFile=0xb30, lpBuffer=0x3d54b88*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x863fd78, lpOverlapped=0x0 | out: lpBuffer=0x3d54b88*, lpNumberOfBytesWritten=0x863fd78*=0x120, lpOverlapped=0x0) returned 1 [0151.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54b88) returned 1 [0151.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1720) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0151.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0151.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59e18 [0151.878] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav" [0151.878] wcscat (in: _Dest=0x3d59e18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav.ac3a86" [0151.878] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav.ac3a86", NtPathName=0x863fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\cL-9 O-Sb2GQz4ofvuG.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d170 [0155.363] FlushFileBuffers (hFile=0xb30) returned 1 [0155.388] CloseHandle (hObject=0xb30) returned 1 [0155.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0155.391] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.391] wcscat (in: _Dest=0x66e5f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0155.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5f8) returned 1 Thread: id = 1410 os_tid = 0x984 [0147.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\eilfqlxn.pps")) returned 0x2020 [0147.214] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps", dwFileAttributes=0x20) returned 1 [0149.704] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\eilfqlxn.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd5c [0149.705] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x917fdcc | out: lpFileSize=0x917fdcc*=66214) returned 1 [0149.705] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x102a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.705] ReadFile (in: hFile=0xd5c, lpBuffer=0x917fda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x917fdb8, lpOverlapped=0x0 | out: lpBuffer=0x917fda8*, lpNumberOfBytesRead=0x917fdb8*=0x4, lpOverlapped=0x0) returned 1 [0149.707] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0149.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0149.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0149.708] NtQuerySystemTime (in: CurrentTime=0x917fd40 | out: CurrentTime=0x917fd40*=132482710583640000) returned 0x0 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x2a8c849b [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x3372397a [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x43fa9427 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x1cd939f4 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x35feec03 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x6b6567fb [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x3806cc0a [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x1d2681e4 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x53b6f0f0 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x18b63048 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x605ecda5 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x35eb4290 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x3d8e0aaa [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x75cf95e4 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x5da32ee0 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x61d6d6d6 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x1df27b22 [0149.708] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x7e908e67 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x4c582f69 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x53e7ebcb [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x145bdc93 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x7dcc9e1 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x7dd24b93 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x6c12c795 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0xded797f [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x1f1fd553 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x364aca4b [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x1ae9b818 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x334be8e6 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x688f0a17 [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x66adf73a [0149.709] RtlRandomEx (in: Seed=0x917fd38 | out: Seed=0x917fd38) returned 0x39558a1c [0149.722] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.722] ReadFile (in: hFile=0xd5c, lpBuffer=0x6851930, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x917fd40, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesRead=0x917fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0149.723] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0149.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0149.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6855538 [0149.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0149.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0149.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0149.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.724] WriteFile (in: hFile=0xd5c, lpBuffer=0x6855538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x917fd40, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesWritten=0x917fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0151.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0151.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0151.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5690 [0151.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0151.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0151.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0151.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0151.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0151.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d16d8) returned 1 [0151.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec2b0 [0151.109] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.109] WriteFile (in: hFile=0xd5c, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x917fdc0, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x917fdc0*=0x10a, lpOverlapped=0x0) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0151.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0151.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ab38 [0151.879] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps" [0151.879] wcscat (in: _Dest=0x3f1ab38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps.ac3a86" [0151.879] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps.ac3a86", NtPathName=0x917fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\eiLfQlxN.pps.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a2e0 [0155.365] FlushFileBuffers (hFile=0xd5c) returned 1 [0155.392] CloseHandle (hObject=0xd5c) returned 1 [0155.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0155.393] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.393] wcscat (in: _Dest=0x66e5f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.393] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0155.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 1411 os_tid = 0x994 [0147.215] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ejz-hm2ni5md3n0h8xpk.pps")) returned 0x2020 [0147.215] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps", dwFileAttributes=0x20) returned 1 [0149.724] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ejz-hm2ni5md3n0h8xpk.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x700 [0149.725] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x854f8dc | out: lpFileSize=0x854f8dc*=24545) returned 1 [0149.725] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x5fdd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.725] ReadFile (in: hFile=0x700, lpBuffer=0x854f8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x854f8c8, lpOverlapped=0x0 | out: lpBuffer=0x854f8b8*, lpNumberOfBytesRead=0x854f8c8*=0x4, lpOverlapped=0x0) returned 1 [0149.727] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0149.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0149.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0149.727] NtQuerySystemTime (in: CurrentTime=0x854f850 | out: CurrentTime=0x854f850*=132482710583796000) returned 0x0 [0149.727] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x376775ab [0149.727] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x148f4059 [0149.727] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x508f311e [0149.727] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x6670b9d4 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x6a86b3f6 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x4b4f7449 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x1f9c05a1 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x26ab354f [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x5332d653 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x24796e7c [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x4c408639 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x428f0385 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x169fef23 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x742cea67 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x7f1118a7 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x1a6b0812 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x34136786 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x2736af5c [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x7ee63fe7 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x7af1a185 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x226aac81 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x386194fc [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x7e65b5a7 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0xc454697 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x69b6ec91 [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x323e1f8a [0149.728] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x3332a054 [0149.729] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x22dfb4f4 [0149.729] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x1042cffd [0149.729] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x530f0e97 [0149.729] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x4ea1c3c5 [0149.729] RtlRandomEx (in: Seed=0x854f848 | out: Seed=0x854f848) returned 0x27334016 [0149.741] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.741] ReadFile (in: hFile=0x700, lpBuffer=0x6859140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x854f850, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesRead=0x854f850*=0x3c00, lpOverlapped=0x0) returned 1 [0149.741] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0149.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0149.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0149.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0149.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.742] WriteFile (in: hFile=0x700, lpBuffer=0x685cd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x854f850, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesWritten=0x854f850*=0x3c00, lpOverlapped=0x0) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d16d8 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d6408 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d63c0) returned 1 [0151.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67078b0 [0151.125] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.126] WriteFile (in: hFile=0x700, lpBuffer=0x67078b0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x854f8d0, lpOverlapped=0x0 | out: lpBuffer=0x67078b0*, lpNumberOfBytesWritten=0x854f8d0*=0x122, lpOverlapped=0x0) returned 1 [0153.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67078b0) returned 1 [0153.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6408) returned 1 [0153.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0153.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d16d8) returned 1 [0153.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0153.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0153.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0153.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aec0) returned 1 [0153.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d568 [0153.378] wcscpy (in: _Dest=0x674d568, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps" [0153.378] wcscat (in: _Dest=0x674d568, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps.ac3a86" [0153.378] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps.ac3a86", NtPathName=0x854f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\eJZ-hM2ni5Md3N0h8xPK.pps.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0153.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d850 [0162.615] FlushFileBuffers (hFile=0x700) returned 1 [0162.616] CloseHandle (hObject=0x700) returned 1 [0162.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5728 [0162.617] wcscpy (in: _Dest=0x66e5728, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0162.617] wcscat (in: _Dest=0x66e5728, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0162.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0162.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5728) returned 1 [0162.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda478) returned 1 Thread: id = 1412 os_tid = 0x9a4 [0147.215] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f4gs_hh6kqzm3qkvk.mp4")) returned 0x2020 [0147.215] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4", dwFileAttributes=0x20) returned 1 [0149.743] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\f4gs_hh6kqzm3qkvk.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa0 [0149.743] GetFileSizeEx (in: hFile=0xfa0, lpFileSize=0x62efccc | out: lpFileSize=0x62efccc*=38353) returned 1 [0149.743] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x95cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.743] ReadFile (in: hFile=0xfa0, lpBuffer=0x62efca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x62efcb8, lpOverlapped=0x0 | out: lpBuffer=0x62efca8*, lpNumberOfBytesRead=0x62efcb8*=0x4, lpOverlapped=0x0) returned 1 [0149.745] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0149.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0149.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0149.746] NtQuerySystemTime (in: CurrentTime=0x62efc40 | out: CurrentTime=0x62efc40*=132482710583952000) returned 0x0 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x53dd9bfb [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x1f0e7bea [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x6ad397f1 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x28f0f91a [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0xd6a9586 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x745e4e5b [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x6a9b3a68 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0xcd96f15 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x47c49da1 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x60c3a8e6 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x33cc520e [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x43309ab0 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x2be1fc7 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x3d0078f8 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x733adf2b [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x67dea8 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x6295c9e2 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x4bbca17 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x1ef0f0f4 [0149.746] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x6acea66a [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x453bb8df [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x25e2f274 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x31cc50b [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x4a2de883 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x79525fe3 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x54d74d4 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x35f77e4b [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x49247467 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x64a99f90 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x4354b533 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x48c0085 [0149.747] RtlRandomEx (in: Seed=0x62efc38 | out: Seed=0x62efc38) returned 0x336974c5 [0149.758] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.759] ReadFile (in: hFile=0xfa0, lpBuffer=0x6860950, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x62efc40, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesRead=0x62efc40*=0x3c00, lpOverlapped=0x0) returned 1 [0149.759] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0149.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0149.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0149.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0149.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0149.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0149.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.760] WriteFile (in: hFile=0xfa0, lpBuffer=0x6864558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x62efc40, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesWritten=0x62efc40*=0x3c00, lpOverlapped=0x0) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0151.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80578 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80a38 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d63c0) returned 1 [0151.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d554c8 [0151.127] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.127] WriteFile (in: hFile=0xfa0, lpBuffer=0x3d554c8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x62efcc0, lpOverlapped=0x0 | out: lpBuffer=0x3d554c8*, lpNumberOfBytesWritten=0x62efcc0*=0x11c, lpOverlapped=0x0) returned 1 [0151.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 [0151.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80a38) returned 1 [0151.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0151.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80578) returned 1 [0151.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0151.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0151.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0151.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0151.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58740 [0151.881] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4" [0151.881] wcscat (in: _Dest=0x3d58740, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4.ac3a86" [0151.881] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4.ac3a86", NtPathName=0x62efc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\f4gs_Hh6kqZM3QKVK.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ef70 [0155.367] FlushFileBuffers (hFile=0xfa0) returned 1 [0155.394] CloseHandle (hObject=0xfa0) returned 1 [0155.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0155.397] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.397] wcscat (in: _Dest=0x66e5f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.397] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0155.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 Thread: id = 1413 os_tid = 0x9b4 [0147.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\i9acfwr-kvhd1ww.mkv")) returned 0x2020 [0147.216] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv", dwFileAttributes=0x20) returned 1 [0149.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\i9acfwr-kvhd1ww.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1310 [0149.761] GetFileSizeEx (in: hFile=0x1310, lpFileSize=0x91bfe44 | out: lpFileSize=0x91bfe44*=67803) returned 1 [0149.761] SetFilePointerEx (in: hFile=0x1310, liDistanceToMove=0x108d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.761] ReadFile (in: hFile=0x1310, lpBuffer=0x91bfe20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91bfe30, lpOverlapped=0x0 | out: lpBuffer=0x91bfe20*, lpNumberOfBytesRead=0x91bfe30*=0x4, lpOverlapped=0x0) returned 1 [0149.764] SetFilePointerEx (in: hFile=0x1310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0149.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0149.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0149.764] NtQuerySystemTime (in: CurrentTime=0x91bfdb8 | out: CurrentTime=0x91bfdb8*=132482710584108000) returned 0x0 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x652e9298 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x12512da3 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6cf81d58 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x4f692768 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x48a7b328 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x37355932 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x5ba23ac0 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x3dc9a33f [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6f763b06 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x4b836c8b [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x125564a7 [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0xdac4db [0149.764] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x1ab9b9b6 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x440b4224 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6a9e8345 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x25f14a17 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x81a708c [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x35f28ab3 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x3e27ab46 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0xf025797 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x45650794 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x73040f49 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6d2080d2 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6da9b5d1 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x6e394c42 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x223a359b [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x84889b [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x73d04496 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x54d78475 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x208dc8db [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x1177cdd2 [0149.765] RtlRandomEx (in: Seed=0x91bfdb0 | out: Seed=0x91bfdb0) returned 0x39b0239d [0149.779] SetFilePointerEx (in: hFile=0x1310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.779] ReadFile (in: hFile=0x1310, lpBuffer=0x6868160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91bfdb8, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesRead=0x91bfdb8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.779] SetFilePointerEx (in: hFile=0x1310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0149.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0149.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686bd68 [0149.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0149.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0149.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0149.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.780] WriteFile (in: hFile=0x1310, lpBuffer=0x686bd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91bfdb8, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesWritten=0x91bfdb8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e80838 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e80ab8 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe4c8) returned 1 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d555f0 [0151.133] SetFilePointerEx (in: hFile=0x1310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.133] WriteFile (in: hFile=0x1310, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x91bfe38, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0x91bfe38*=0x118, lpOverlapped=0x0) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80ab8) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80838) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0151.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aad8) returned 1 [0151.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e08f30 [0151.882] wcscpy (in: _Dest=0x3e08f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv" [0151.882] wcscat (in: _Dest=0x3e08f30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv.ac3a86" [0151.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv.ac3a86", NtPathName=0x91bfdb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\i9AcFwR-kvHd1wW.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959118 [0155.180] FlushFileBuffers (hFile=0x1310) returned 1 [0155.188] CloseHandle (hObject=0x1310) returned 1 [0155.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23c30 [0155.189] wcscpy (in: _Dest=0x3f23c30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.189] wcscat (in: _Dest=0x3f23c30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c30) returned 1 [0155.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0f60) returned 1 Thread: id = 1414 os_tid = 0x9c4 [0147.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bb10 [0147.216] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0147.216] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0147.216] wcscat (in: _Dest=0x3d8bb10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*" [0147.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b290 [0147.216] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0147.217] wcscmp (_String1=".", _String2=".") returned 0 [0147.217] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.217] wcscmp (_String1="..", _String2=".") returned 1 [0147.217] wcscmp (_String1="..", _String2="..") returned 0 [0147.217] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0147.217] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0147.217] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0147.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b718 [0147.217] wcscpy (in: _Dest=0x35b718, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0147.217] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0147.217] wcscat (in: _Dest=0x35b718, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0157.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0157.314] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0157.314] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0157.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b290) returned 1 [0157.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 [0157.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 1415 os_tid = 0x9d4 [0147.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ihfa1pvr4kerh3.mp4")) returned 0x2020 [0147.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4", dwFileAttributes=0x20) returned 1 [0149.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ihfa1pvr4kerh3.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x135c [0149.781] GetFileSizeEx (in: hFile=0x135c, lpFileSize=0x9d6fde4 | out: lpFileSize=0x9d6fde4*=87737) returned 1 [0149.781] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x156b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.781] ReadFile (in: hFile=0x135c, lpBuffer=0x9d6fdc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d6fdd0, lpOverlapped=0x0 | out: lpBuffer=0x9d6fdc0*, lpNumberOfBytesRead=0x9d6fdd0*=0x4, lpOverlapped=0x0) returned 1 [0149.783] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0149.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0149.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.783] NtQuerySystemTime (in: CurrentTime=0x9d6fd58 | out: CurrentTime=0x9d6fd58*=132482710584264000) returned 0x0 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x41767540 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x7e08c7b4 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x1dd22b49 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x2bcfb319 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x2d609265 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x6e2415ea [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x47079a6d [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x2be96d74 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x2dda27d7 [0149.783] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x30c299e5 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x55ee8b9c [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x767b0d04 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x76ae64dd [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x42c1d336 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x34b7acdc [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x47741381 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x78a03bde [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x82b1acd [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x14e1292a [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x7dba52a7 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x5d831442 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x4b15d844 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x6cc89312 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x5be160f8 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x81e0bd1 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x77fc49c3 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x64f3575b [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x65dc4ead [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x7d8f79e7 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x46a9329f [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x7d64a127 [0149.784] RtlRandomEx (in: Seed=0x9d6fd50 | out: Seed=0x9d6fd50) returned 0x616aa9e2 [0149.797] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.797] ReadFile (in: hFile=0x135c, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0149.798] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f080 [0149.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0149.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0149.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0149.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0149.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0149.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0149.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0149.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0149.799] WriteFile (in: hFile=0x135c, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0151.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0151.134] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.134] ReadFile (in: hFile=0x135c, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0151.134] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe4c8 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d512f0 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0151.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe4c8) returned 1 [0151.135] WriteFile (in: hFile=0x135c, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0151.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0151.436] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x11ab9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.436] ReadFile (in: hFile=0x135c, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0151.437] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x11ab9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d17f8 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0151.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0151.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0151.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0151.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0151.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d17f8) returned 1 [0151.438] WriteFile (in: hFile=0x135c, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d6fd58, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0x9d6fd58*=0x3c00, lpOverlapped=0x0) returned 1 [0151.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8df38 [0151.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fa80 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0151.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0151.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dce270 [0151.753] SetFilePointerEx (in: hFile=0x135c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.753] WriteFile (in: hFile=0x135c, lpBuffer=0x3dce270*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x9d6fdd8, lpOverlapped=0x0 | out: lpBuffer=0x3dce270*, lpNumberOfBytesWritten=0x9d6fdd8*=0x156, lpOverlapped=0x0) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce270) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa80) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f9c0) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8df38) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0155.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0155.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b838 [0155.090] wcscpy (in: _Dest=0x674b838, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4" [0155.090] wcscat (in: _Dest=0x674b838, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4.ac3a86" [0155.090] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4.ac3a86", NtPathName=0x9d6fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\IHFA1Pvr4Kerh3.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0155.302] FlushFileBuffers (hFile=0x135c) returned 1 [0155.329] CloseHandle (hObject=0x135c) returned 1 [0155.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae80 [0155.330] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.330] wcscat (in: _Dest=0x3e0ae80, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.330] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 [0155.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 Thread: id = 1416 os_tid = 0x9e4 [0147.218] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ipyof.mkv")) returned 0x2020 [0147.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv", dwFileAttributes=0x20) returned 1 [0149.800] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ipyof.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10d8 [0149.800] GetFileSizeEx (in: hFile=0x10d8, lpFileSize=0x226f84c | out: lpFileSize=0x226f84c*=9140) returned 1 [0149.800] SetFilePointerEx (in: hFile=0x10d8, liDistanceToMove=0x23b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.800] ReadFile (in: hFile=0x10d8, lpBuffer=0x226f828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x226f838, lpOverlapped=0x0 | out: lpBuffer=0x226f828*, lpNumberOfBytesRead=0x226f838*=0x4, lpOverlapped=0x0) returned 1 [0149.804] SetFilePointerEx (in: hFile=0x10d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0149.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0149.804] NtQuerySystemTime (in: CurrentTime=0x226f7c0 | out: CurrentTime=0x226f7c0*=132482710584576000) returned 0x0 [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x783541bc [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x190e2e3e [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x68c12f4a [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x7012d107 [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x3a118225 [0149.804] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x48c5a683 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x743ec353 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x51abdc7e [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x3bc0d52 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x5b02a458 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x41e8b645 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x4d166b85 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x7a5baca [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x5a0f1af [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x1f6f3a2e [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x1896d4e6 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x26800dd2 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x2361f50a [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x4aca2195 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x4606f894 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x3e1b55f0 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x5682778b [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x483abd6a [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x599695f1 [0149.805] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x7e100427 [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x147fdead [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x41b2f68c [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x7d0eefa7 [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0xa928083 [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x27bce829 [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x4e54d872 [0149.806] RtlRandomEx (in: Seed=0x226f7b8 | out: Seed=0x226f7b8) returned 0x2d2b753a [0149.819] ReadFile (in: hFile=0x10d8, lpBuffer=0x68774f8, nNumberOfBytesToRead=0x23b4, lpNumberOfBytesRead=0x226f7b4, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesRead=0x226f7b4*=0x23b4, lpOverlapped=0x0) returned 1 [0149.820] SetFilePointerEx (in: hFile=0x10d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.820] WriteFile (in: hFile=0x10d8, lpBuffer=0x687b100*, nNumberOfBytesToWrite=0x23b4, lpNumberOfBytesWritten=0x226f7b8, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesWritten=0x226f7b8*=0x23b4, lpOverlapped=0x0) returned 1 [0151.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0151.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0151.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0151.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687b100) returned 1 [0151.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0151.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0151.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0151.145] SetFilePointerEx (in: hFile=0x10d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.146] WriteFile (in: hFile=0x10d8, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x226f840, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x226f840*=0x104, lpOverlapped=0x0) returned 1 [0155.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0155.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0155.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0155.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0155.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f291e0 [0155.031] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv" [0155.031] wcscat (in: _Dest=0x3f291e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv.ac3a86" [0155.031] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv.ac3a86", NtPathName=0x226f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\iPyoF.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee9e8 [0155.369] FlushFileBuffers (hFile=0x10d8) returned 1 [0155.398] CloseHandle (hObject=0x10d8) returned 1 [0155.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5f08 [0155.399] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.399] wcscat (in: _Dest=0x66e5f08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0155.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 1417 os_tid = 0x9f4 [0147.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\k3uuxkgrfkqo2g2a5r.png")) returned 0x2020 [0147.219] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png", dwFileAttributes=0x20) returned 1 [0149.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\k3uuxkgrfkqo2g2a5r.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1068 [0149.821] GetFileSizeEx (in: hFile=0x1068, lpFileSize=0xb18f88c | out: lpFileSize=0xb18f88c*=67127) returned 1 [0149.821] SetFilePointerEx (in: hFile=0x1068, liDistanceToMove=0x10633, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.821] ReadFile (in: hFile=0x1068, lpBuffer=0xb18f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb18f878, lpOverlapped=0x0 | out: lpBuffer=0xb18f868*, lpNumberOfBytesRead=0xb18f878*=0x4, lpOverlapped=0x0) returned 1 [0149.824] SetFilePointerEx (in: hFile=0x1068, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0149.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0149.824] NtQuerySystemTime (in: CurrentTime=0xb18f800 | out: CurrentTime=0xb18f800*=132482710584732000) returned 0x0 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x16d2bef4 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x6bf04351 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x1c153791 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x7e28bb62 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x2eecaaf4 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x78b9ec97 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0xe97de37 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x34f23f26 [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x3575519c [0149.824] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x493ebec4 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x7ce416e7 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x527bc861 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x79f91eb1 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x297f09a [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x29ebdb3c [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x7de52b67 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0xe817c56 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x1c90c2e6 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x1ead4d36 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x4cbc720e [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x13bfbc25 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x48786cdf [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x3f8c8d8d [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x691b4402 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x20d29ffd [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x5af95b73 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x3c571bf3 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x1ab3c174 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x30f098ab [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x170d90f1 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0xf1543b7 [0149.825] RtlRandomEx (in: Seed=0xb18f7f8 | out: Seed=0xb18f7f8) returned 0x217d9c6d [0149.836] SetFilePointerEx (in: hFile=0x1068, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.836] ReadFile (in: hFile=0x1068, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb18f800, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0xb18f800*=0x3c00, lpOverlapped=0x0) returned 1 [0149.837] SetFilePointerEx (in: hFile=0x1068, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6882910 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0149.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0149.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0149.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.837] WriteFile (in: hFile=0x1068, lpBuffer=0x6882910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb18f800, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesWritten=0xb18f800*=0x3c00, lpOverlapped=0x0) returned 1 [0151.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6882910) returned 1 [0151.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0151.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e4f080 [0151.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0151.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e4ea98 [0151.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0151.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0151.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0151.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54f00 [0151.147] SetFilePointerEx (in: hFile=0x1068, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.147] WriteFile (in: hFile=0x1068, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb18f880, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0xb18f880*=0x11e, lpOverlapped=0x0) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea98) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0155.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0155.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0155.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eeeb0 [0155.033] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png" [0155.033] wcscat (in: _Dest=0x66eeeb0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png.ac3a86" [0155.033] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png.ac3a86", NtPathName=0xb18f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\K3uUXkGRFKqO2g2a5R.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c10e8 [0155.304] FlushFileBuffers (hFile=0x1068) returned 1 [0155.334] CloseHandle (hObject=0x1068) returned 1 [0155.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0155.338] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.338] wcscat (in: _Dest=0x66e5e28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 [0155.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 Thread: id = 1418 os_tid = 0xa04 [0147.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8eb00 [0147.220] wcscpy (in: _Dest=0x3d8eb00, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0147.220] wcscat (in: _Dest=0x3d8eb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0147.220] wcscat (in: _Dest=0x3d8eb00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*" [0147.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0147.220] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0147.220] wcscmp (_String1=".", _String2=".") returned 0 [0147.220] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.221] wcscmp (_String1="..", _String2=".") returned 1 [0147.221] wcscmp (_String1="..", _String2="..") returned 0 [0147.221] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0147.221] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0147.221] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0147.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e09b30 [0147.221] wcscpy (in: _Dest=0x3e09b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0147.221] wcscat (in: _Dest=0x3e09b30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0147.221] wcscat (in: _Dest=0x3e09b30, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0151.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e09b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0151.254] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0151.254] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0151.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0151.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8eb00) returned 1 [0151.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 1419 os_tid = 0xa24 [0147.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mov ad.wav")) returned 0x2020 [0147.221] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav", dwFileAttributes=0x20) returned 1 [0149.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mov ad.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15b8 [0149.838] GetFileSizeEx (in: hFile=0x15b8, lpFileSize=0xb55fb24 | out: lpFileSize=0xb55fb24*=32059) returned 1 [0149.838] SetFilePointerEx (in: hFile=0x15b8, liDistanceToMove=0x7d37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.838] ReadFile (in: hFile=0x15b8, lpBuffer=0xb55fb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb55fb10, lpOverlapped=0x0 | out: lpBuffer=0xb55fb00*, lpNumberOfBytesRead=0xb55fb10*=0x4, lpOverlapped=0x0) returned 1 [0149.840] SetFilePointerEx (in: hFile=0x15b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0149.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0149.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0149.841] NtQuerySystemTime (in: CurrentTime=0xb55fa98 | out: CurrentTime=0xb55fa98*=132482710584888000) returned 0x0 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x5f8af576 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x53d5e359 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x940bb3e [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x13828552 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x3ff8a310 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x3ee72033 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x539643dd [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x484c86ea [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x16c3510 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x57d091f3 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x3cc70fff [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x7c37af21 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x335bfa95 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x5f4add34 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x63886142 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x706965ef [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x11235d83 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x69f2985c [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x10ad0194 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x17a86fe0 [0149.841] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x4cf32c3f [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x5355bca1 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x29afd948 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x71d5d723 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x1fd0a096 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x28e62ff4 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x643566e9 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x1e434af0 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x16e9b7be [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x7d1f50c2 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x7acb96e6 [0149.842] RtlRandomEx (in: Seed=0xb55fa90 | out: Seed=0xb55fa90) returned 0x7ae541b5 [0149.855] SetFilePointerEx (in: hFile=0x15b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.855] ReadFile (in: hFile=0x15b8, lpBuffer=0x6886518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb55fa98, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesRead=0xb55fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0149.855] SetFilePointerEx (in: hFile=0x15b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0149.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0149.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0149.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.856] WriteFile (in: hFile=0x15b8, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb55fa98, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xb55fa98*=0x3c00, lpOverlapped=0x0) returned 1 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ba0 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5bd0 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3debe50 [0151.148] SetFilePointerEx (in: hFile=0x15b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.148] WriteFile (in: hFile=0x15b8, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xb55fb18, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0xb55fb18*=0x106, lpOverlapped=0x0) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0155.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0155.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29090 [0155.034] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav" [0155.034] wcscat (in: _Dest=0x3f29090, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav.ac3a86" [0155.034] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav.ac3a86", NtPathName=0xb55fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\mov aD.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eee28 [0155.306] FlushFileBuffers (hFile=0x15b8) returned 1 [0155.339] CloseHandle (hObject=0x15b8) returned 1 [0155.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0155.340] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.340] wcscat (in: _Dest=0x66e5e28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 [0155.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 1420 os_tid = 0x7b4 [0147.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mv7qmcrh qs.ppt")) returned 0x2020 [0147.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt", dwFileAttributes=0x20) returned 1 [0149.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mv7qmcrh qs.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe78 [0149.857] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0x5d6fcfc | out: lpFileSize=0x5d6fcfc*=61121) returned 1 [0149.857] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0xeebd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.857] ReadFile (in: hFile=0xe78, lpBuffer=0x5d6fcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d6fce8, lpOverlapped=0x0 | out: lpBuffer=0x5d6fcd8*, lpNumberOfBytesRead=0x5d6fce8*=0x4, lpOverlapped=0x0) returned 1 [0149.860] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0149.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0149.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0149.860] NtQuerySystemTime (in: CurrentTime=0x5d6fc70 | out: CurrentTime=0x5d6fc70*=132482710585044000) returned 0x0 [0149.860] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x52c887de [0149.860] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x7cb93e27 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x41ea7edc [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x61f7f528 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x2367371c [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x2122d2ce [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x6c7bd740 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x28fc42ef [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0xc41607b [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x23f8bc66 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x136e8b3b [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x1a98c859 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x2045684f [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0xa272e47 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x5a72ae93 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x7b969a3d [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x46db99a2 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x2b0061d6 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x4e82e961 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x5f84e7cf [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x5c1984c1 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x7ba5a0be [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x294652c0 [0149.861] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x5f44badf [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x12fc8729 [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x46f78f10 [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x725e755c [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x6de32b10 [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x2b8d2d43 [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x69964d95 [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x7d9f75ac [0149.862] RtlRandomEx (in: Seed=0x5d6fc68 | out: Seed=0x5d6fc68) returned 0x3f3a9087 [0149.873] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.873] ReadFile (in: hFile=0xe78, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d6fc70, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0x5d6fc70*=0x3c00, lpOverlapped=0x0) returned 1 [0149.874] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0149.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0149.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6891930 [0149.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0149.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0149.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0149.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.875] WriteFile (in: hFile=0xe78, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d6fc70, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0x5d6fc70*=0x3c00, lpOverlapped=0x0) returned 1 [0151.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0151.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0151.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19850 [0151.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0151.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19ce8 [0151.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0151.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0151.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0151.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec710 [0151.156] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.156] WriteFile (in: hFile=0xe78, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x5d6fcf0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x5d6fcf0*=0x110, lpOverlapped=0x0) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19ce8) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19850) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0155.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0155.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d08d0 [0155.038] wcscpy (in: _Dest=0x66d08d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt" [0155.038] wcscat (in: _Dest=0x66d08d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt.ac3a86" [0155.038] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt.ac3a86", NtPathName=0x5d6fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\mV7QMcRH qs.ppt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbbc8 [0155.308] FlushFileBuffers (hFile=0xe78) returned 1 [0155.341] CloseHandle (hObject=0xe78) returned 1 [0155.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e28 [0155.342] wcscpy (in: _Dest=0x66e5e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.342] wcscat (in: _Dest=0x66e5e28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.342] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e28) returned 1 [0155.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cd8) returned 1 Thread: id = 1421 os_tid = 0xa44 [0147.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\oj5zzas0vl4.m4a")) returned 0x2020 [0147.223] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a", dwFileAttributes=0x20) returned 1 [0149.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\oj5zzas0vl4.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1608 [0149.875] GetFileSizeEx (in: hFile=0x1608, lpFileSize=0xb7cf944 | out: lpFileSize=0xb7cf944*=99407) returned 1 [0149.876] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x1844b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.876] ReadFile (in: hFile=0x1608, lpBuffer=0xb7cf920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7cf930, lpOverlapped=0x0 | out: lpBuffer=0xb7cf920*, lpNumberOfBytesRead=0xb7cf930*=0x4, lpOverlapped=0x0) returned 1 [0149.878] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0149.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6f8 [0149.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0149.878] NtQuerySystemTime (in: CurrentTime=0xb7cf8b8 | out: CurrentTime=0xb7cf8b8*=132482710585200000) returned 0x0 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x634aa25 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x52cf6a95 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x4e5ab256 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x3bcf071d [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x6a57beda [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x515114ef [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x8d8af7e [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x4d2adc08 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x3a00dfcd [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x1ee57752 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x47fa24fd [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x2acbca25 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x5e3f6420 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x64bc68d5 [0149.878] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x3fe1d59f [0149.879] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x666444a3 [0149.879] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x72b1a035 [0149.879] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x4e5f25ee [0149.879] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x1c84c527 [0149.879] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x789b1c7f [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x593efdb8 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x11d32953 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x34f325f4 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x3d00bf64 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x17e83ad9 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x6d7a4a07 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x7c638ca7 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x621a4a83 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x203b9c09 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x180989a0 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x63911464 [0149.899] RtlRandomEx (in: Seed=0xb7cf8b0 | out: Seed=0xb7cf8b0) returned 0x16e6e34b [0149.910] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.910] ReadFile (in: hFile=0x1608, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.910] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0149.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0149.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0149.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0149.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0149.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0149.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.911] WriteFile (in: hFile=0x1608, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0151.164] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.164] ReadFile (in: hFile=0x1608, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.164] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0151.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0151.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0151.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0151.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0151.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0151.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0151.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.165] WriteFile (in: hFile=0x1608, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0151.453] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x1484f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.453] ReadFile (in: hFile=0x1608, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.453] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x1484f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fda60 [0151.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d07e0 [0151.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0151.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0151.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0151.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0151.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0151.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fda60) returned 1 [0151.454] WriteFile (in: hFile=0x1608, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb7cf8b8, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0xb7cf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0151.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e550 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0151.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19e00 [0151.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0151.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x330b20 [0151.759] SetFilePointerEx (in: hFile=0x1608, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.759] WriteFile (in: hFile=0x1608, lpBuffer=0x330b20*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xb7cf938, lpOverlapped=0x0 | out: lpBuffer=0x330b20*, lpNumberOfBytesWritten=0xb7cf938*=0x150, lpOverlapped=0x0) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330b20) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e00) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0155.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0155.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b3a8 [0155.096] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a" [0155.096] wcscat (in: _Dest=0x3f1b3a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a.ac3a86" [0155.096] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a.ac3a86", NtPathName=0xb7cf8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\OJ5zzas0Vl4.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd1b8 [0155.300] FlushFileBuffers (hFile=0x1608) returned 1 [0155.327] CloseHandle (hObject=0x1608) returned 1 [0155.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5e98 [0155.328] wcscpy (in: _Dest=0x66e5e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.328] wcscat (in: _Dest=0x66e5e98, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.328] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e98) returned 1 [0155.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 1422 os_tid = 0xa54 [0147.240] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\qxxsxzngn.gif")) returned 0x2020 [0147.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif", dwFileAttributes=0x20) returned 1 [0149.912] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\qxxsxzngn.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x138c [0149.912] GetFileSizeEx (in: hFile=0x138c, lpFileSize=0x8bdfd64 | out: lpFileSize=0x8bdfd64*=79116) returned 1 [0149.912] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0x13508, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.912] ReadFile (in: hFile=0x138c, lpBuffer=0x8bdfd40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8bdfd50, lpOverlapped=0x0 | out: lpBuffer=0x8bdfd40*, lpNumberOfBytesRead=0x8bdfd50*=0x4, lpOverlapped=0x0) returned 1 [0149.914] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0149.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6d0 [0149.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0149.914] NtQuerySystemTime (in: CurrentTime=0x8bdfcd8 | out: CurrentTime=0x8bdfcd8*=132482710585668000) returned 0x0 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x274eeb50 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x470835ed [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3ca5d3c4 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x771896a2 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x41001bf4 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x2d6a813e [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x56282200 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x53e5333e [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x245015e9 [0149.914] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3679aafa [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x23efb961 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x692912 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3dfcde74 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x1e805e76 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3130bff5 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x7924f6ec [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x1abffabd [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x21efa8d [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x6e592b3b [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x52f1c1a9 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x2a3e7edf [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x1af60376 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x7658dd8e [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x4415af60 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3dbaf58e [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x50fb494b [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x78987bec [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x3b1eaa31 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x7dabc923 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x104c0929 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x6ac4d921 [0149.915] RtlRandomEx (in: Seed=0x8bdfcd0 | out: Seed=0x8bdfcd0) returned 0x2ac9b99a [0149.925] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.925] ReadFile (in: hFile=0x138c, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.926] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0149.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0149.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0149.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0149.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.927] WriteFile (in: hFile=0x138c, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0151.323] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.323] ReadFile (in: hFile=0x138c, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.323] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5dd8 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3dc6a28 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0151.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0151.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0151.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0151.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0151.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5dd8) returned 1 [0151.324] WriteFile (in: hFile=0x138c, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0151.725] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0xf90c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.725] ReadFile (in: hFile=0x138c, lpBuffer=0x689cd48, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x689cd48*, lpNumberOfBytesRead=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.725] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0xf90c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1b58 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ba0 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0151.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a0950 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0151.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0151.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0151.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0151.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b58) returned 1 [0151.726] WriteFile (in: hFile=0x138c, lpBuffer=0x68a0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfcd8, lpOverlapped=0x0 | out: lpBuffer=0x68a0950*, lpNumberOfBytesWritten=0x8bdfcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0152.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0950) returned 1 [0152.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ef03e0 [0152.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0152.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0152.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0152.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0152.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0152.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0152.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6648) returned 1 [0152.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e4d458 [0152.261] SetFilePointerEx (in: hFile=0x138c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.261] WriteFile (in: hFile=0x138c, lpBuffer=0x3e4d458*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x8bdfd58, lpOverlapped=0x0 | out: lpBuffer=0x3e4d458*, lpNumberOfBytesWritten=0x8bdfd58*=0x14c, lpOverlapped=0x0) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d458) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef03e0) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0155.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0155.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1a958 [0155.062] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif" [0155.062] wcscat (in: _Dest=0x3f1a958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif.ac3a86" [0155.062] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif.ac3a86", NtPathName=0x8bdfcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\qXxsxZngn.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc288 [0155.312] FlushFileBuffers (hFile=0x138c) returned 1 [0155.343] CloseHandle (hObject=0x138c) returned 1 [0155.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x66e5cd8 [0155.344] wcscpy (in: _Dest=0x66e5cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0155.344] wcscat (in: _Dest=0x66e5cd8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0155.344] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0155.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cd8) returned 1 [0155.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 1423 os_tid = 0xa64 [0147.241] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\t3zqt9rgqlyqi3fl7.m4a")) returned 0x2020 [0147.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a", dwFileAttributes=0x20) returned 1 [0149.928] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\t3zqt9rgqlyqi3fl7.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x107c [0149.928] GetFileSizeEx (in: hFile=0x107c, lpFileSize=0xbf5fd34 | out: lpFileSize=0xbf5fd34*=43467) returned 1 [0149.928] SetFilePointerEx (in: hFile=0x107c, liDistanceToMove=0xa9c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.928] ReadFile (in: hFile=0x107c, lpBuffer=0xbf5fd10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbf5fd20, lpOverlapped=0x0 | out: lpBuffer=0xbf5fd10*, lpNumberOfBytesRead=0xbf5fd20*=0x4, lpOverlapped=0x0) returned 1 [0149.930] SetFilePointerEx (in: hFile=0x107c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0149.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0149.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0149.930] NtQuerySystemTime (in: CurrentTime=0xbf5fca8 | out: CurrentTime=0xbf5fca8*=132482710585824000) returned 0x0 [0149.930] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x32050547 [0149.930] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x4eece70c [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0xacb0cd6 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0xf405135 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7be30267 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x259594de [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7f8eef84 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x4b717fb1 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x6f82bbf9 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0xd255e77 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x648f07d1 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7828972e [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x4d0d11f4 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7357c0e0 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x4b4f0f91 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x2e43db83 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x34d5a21f [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x69ab004a [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x234b92b9 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x4b1b78d6 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7c47fc68 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x209ecc50 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x3470e787 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x5b7b8822 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7dd0f2e9 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x2e14df48 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x399228c7 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x7bb829a7 [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x59439d6c [0149.931] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x48fa998e [0149.932] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0x66b86ec4 [0149.932] RtlRandomEx (in: Seed=0xbf5fca0 | out: Seed=0xbf5fca0) returned 0xde1d63d [0149.941] SetFilePointerEx (in: hFile=0x107c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.941] ReadFile (in: hFile=0x107c, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf5fca8, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0xbf5fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.942] SetFilePointerEx (in: hFile=0x107c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0149.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0149.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0149.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0149.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.943] WriteFile (in: hFile=0x107c, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf5fca8, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0xbf5fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0150.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0150.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0150.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067340 [0150.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0150.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067280 [0150.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0150.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0150.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0150.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55278 [0150.558] SetFilePointerEx (in: hFile=0x107c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.558] WriteFile (in: hFile=0x107c, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbf5fd28, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xbf5fd28*=0x11c, lpOverlapped=0x0) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0150.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0150.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f266a0 [0150.560] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a" [0150.560] wcscat (in: _Dest=0x3f266a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a.ac3a86" [0150.560] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a.ac3a86", NtPathName=0xbf5fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\T3zqT9rGQlyqI3fL7.m4a.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0db70 [0150.562] FlushFileBuffers (hFile=0x107c) returned 1 [0151.309] CloseHandle (hObject=0x107c) returned 1 [0151.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29330 [0151.630] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.630] wcscat (in: _Dest=0x3f29330, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.630] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 [0156.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 1424 os_tid = 0xa7c [0147.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg")) returned 0x20 [0147.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.242] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.242] GetLastError () returned 0x5 [0147.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 1425 os_tid = 0xa78 [0147.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\t506yynzpz5zuz2yr.wav")) returned 0x2020 [0147.243] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav", dwFileAttributes=0x20) returned 1 [0149.943] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\t506yynzpz5zuz2yr.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0149.944] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0xb20f85c | out: lpFileSize=0xb20f85c*=83182) returned 1 [0149.944] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x144ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.944] ReadFile (in: hFile=0x1570, lpBuffer=0xb20f838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb20f848, lpOverlapped=0x0 | out: lpBuffer=0xb20f838*, lpNumberOfBytesRead=0xb20f848*=0x4, lpOverlapped=0x0) returned 1 [0149.946] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0149.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0149.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0149.946] NtQuerySystemTime (in: CurrentTime=0xb20f7d0 | out: CurrentTime=0xb20f7d0*=132482710585980000) returned 0x0 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x610bcece [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x2dc06bb7 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x4f90570 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x547491b [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x712d9bb7 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x7c8e6567 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x764eb854 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x135f5b64 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x5e5efba3 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x1a26c280 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x53aea4ff [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x1f5c6598 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x6c1232b8 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x39dd388 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x59ec69a1 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x7515585 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x7ebb6727 [0149.946] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x40694e6f [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x59e5a870 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x4a09d474 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x7b8d50e7 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x3582ddda [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x3ccc6668 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x11a2b8ae [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x6df17303 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x4afaebd [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x70367f36 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x4aff06fa [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x204aceaa [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x267d9de3 [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x65abc13a [0149.947] RtlRandomEx (in: Seed=0xb20f7c8 | out: Seed=0xb20f7c8) returned 0x45cbf9c5 [0149.965] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.966] ReadFile (in: hFile=0x1570, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0149.966] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0149.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0149.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0149.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0149.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0149.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0149.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0149.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0149.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0149.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0149.967] WriteFile (in: hFile=0x1570, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0150.546] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.546] ReadFile (in: hFile=0x1570, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.546] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff5a8 [0150.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0150.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0150.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0150.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0150.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0150.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0150.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0150.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.547] WriteFile (in: hFile=0x1570, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0150.548] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x108ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.548] ReadFile (in: hFile=0x1570, lpBuffer=0x68abd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x68abd68*, lpNumberOfBytesRead=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.548] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x108ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff5a8 [0150.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0150.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0150.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0150.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0150.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0150.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0150.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0150.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.549] WriteFile (in: hFile=0x1570, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20f7d0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xb20f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0150.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d920 [0150.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0150.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067280 [0150.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0150.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0150.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0150.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15c) returned 0x3dcde38 [0150.551] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.551] WriteFile (in: hFile=0x1570, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xb20f850, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0xb20f850*=0x15c, lpOverlapped=0x0) returned 1 [0150.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0150.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0150.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0150.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 [0150.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0150.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0150.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0150.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0150.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f266a0 [0150.553] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav" [0150.553] wcscat (in: _Dest=0x3f266a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav.ac3a86" [0150.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav.ac3a86", NtPathName=0xb20f7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\T506YyNzPz5zUZ2yR.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0db70 [0150.556] FlushFileBuffers (hFile=0x1570) returned 1 [0151.309] CloseHandle (hObject=0x1570) returned 1 [0151.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29aa0 [0151.630] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.630] wcscat (in: _Dest=0x3f29aa0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.630] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 [0156.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 Thread: id = 1426 os_tid = 0xad0 [0147.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\vpierdf.bmp")) returned 0x2020 [0147.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp", dwFileAttributes=0x20) returned 1 [0149.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\vpierdf.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x105c [0149.967] GetFileSizeEx (in: hFile=0x105c, lpFileSize=0xbe2fd9c | out: lpFileSize=0xbe2fd9c*=75395) returned 1 [0149.968] SetFilePointerEx (in: hFile=0x105c, liDistanceToMove=0x1267f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.968] ReadFile (in: hFile=0x105c, lpBuffer=0xbe2fd78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbe2fd88, lpOverlapped=0x0 | out: lpBuffer=0xbe2fd78*, lpNumberOfBytesRead=0xbe2fd88*=0x4, lpOverlapped=0x0) returned 1 [0149.970] SetFilePointerEx (in: hFile=0x105c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0149.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0149.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0149.970] NtQuerySystemTime (in: CurrentTime=0xbe2fd10 | out: CurrentTime=0xbe2fd10*=132482710586136000) returned 0x0 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x5ee50b5c [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x177c3e5a [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x1db865ca [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x7b627827 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x4505e97e [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x4ea8695d [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x2175ec3a [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x63d46ff3 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x5ead9375 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0xec4f392 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x28a01690 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x314448e9 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x6ca70296 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x560af396 [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x3abd77cb [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x932df5b [0149.970] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x70c036b2 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x6fe7b1f9 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x4b2ae5c8 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x1c0097dc [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x3f97ed03 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x381180ad [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x24be699e [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x7f55248 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x37f66374 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x21b57c32 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x500fb83e [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x3c73741e [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x2c033fc7 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x449ad060 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x517fec5 [0149.971] RtlRandomEx (in: Seed=0xbe2fd08 | out: Seed=0xbe2fd08) returned 0x51f1c060 [0150.077] SetFilePointerEx (in: hFile=0x105c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.077] ReadFile (in: hFile=0x105c, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbe2fd10, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xbe2fd10*=0x3c00, lpOverlapped=0x0) returned 1 [0150.077] SetFilePointerEx (in: hFile=0x105c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0150.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0150.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0150.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0150.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.078] WriteFile (in: hFile=0x105c, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbe2fd10, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xbe2fd10*=0x3c00, lpOverlapped=0x0) returned 1 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0150.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5b70 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0150.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5ba0 [0150.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0150.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3deca58 [0150.539] SetFilePointerEx (in: hFile=0x105c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.539] WriteFile (in: hFile=0x105c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xbe2fd90, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xbe2fd90*=0x108, lpOverlapped=0x0) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0150.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0150.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29480 [0150.541] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp" [0150.541] wcscat (in: _Dest=0x3f29480, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp.ac3a86" [0150.541] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp.ac3a86", NtPathName=0xbe2fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\vpiErDf.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f266a0 [0150.544] FlushFileBuffers (hFile=0x105c) returned 1 [0151.308] CloseHandle (hObject=0x105c) returned 1 [0151.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b740 [0151.633] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.633] wcscat (in: _Dest=0x3e0b740, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 [0156.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 1427 os_tid = 0x570 [0147.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\w9ipkbvnmpo0ndfc.mkv")) returned 0x2020 [0147.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv", dwFileAttributes=0x20) returned 1 [0150.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\w9ipkbvnmpo0ndfc.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1188 [0150.079] GetFileSizeEx (in: hFile=0x1188, lpFileSize=0xb81fda4 | out: lpFileSize=0xb81fda4*=17391) returned 1 [0150.079] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x43eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.079] ReadFile (in: hFile=0x1188, lpBuffer=0xb81fd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb81fd90, lpOverlapped=0x0 | out: lpBuffer=0xb81fd80*, lpNumberOfBytesRead=0xb81fd90*=0x4, lpOverlapped=0x0) returned 1 [0150.081] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0150.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bdb0 [0150.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0150.081] NtQuerySystemTime (in: CurrentTime=0xb81fd18 | out: CurrentTime=0xb81fd18*=132482710587228000) returned 0x0 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x48abd8f [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x7ad5b37 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x53c713fe [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x5b4d5ff7 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x5508ca20 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x1655879d [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x358fa862 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x7f3286a [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x557343d3 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x20fcdbdd [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x4f545280 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x4aef8eb0 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x2f351e75 [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x1d60d7ef [0150.081] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x41132a82 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x19e2655c [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x393eee1f [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x29b13399 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x7626df7d [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x23210924 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x3db918b6 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x5d49461 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x6bdeae45 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x3b58dd92 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0xada57c7 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x3b27f759 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x3b6cb0b4 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x6908d78b [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x34810f98 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x57309b79 [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x2de6721c [0150.082] RtlRandomEx (in: Seed=0xb81fd10 | out: Seed=0xb81fd10) returned 0x46e75494 [0150.091] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.091] ReadFile (in: hFile=0x1188, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb81fd18, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0xb81fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0150.091] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0150.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0150.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0150.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0150.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0150.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0150.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0150.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0150.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0150.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.092] WriteFile (in: hFile=0x1188, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb81fd18, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0xb81fd18*=0x3c00, lpOverlapped=0x0) returned 1 [0150.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0150.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067340 [0150.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067280 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0150.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0150.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55278 [0150.532] SetFilePointerEx (in: hFile=0x1188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.532] WriteFile (in: hFile=0x1188, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xb81fd98, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xb81fd98*=0x11a, lpOverlapped=0x0) returned 1 [0150.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0150.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0150.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0150.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f266a0 [0150.534] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv" [0150.534] wcscat (in: _Dest=0x3f266a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv.ac3a86" [0150.534] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv.ac3a86", NtPathName=0xb81fd10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\W9IPkbVNMPo0NdfC.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32198 [0150.537] FlushFileBuffers (hFile=0x1188) returned 1 [0151.308] CloseHandle (hObject=0x1188) returned 1 [0151.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29170 [0151.624] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.624] wcscat (in: _Dest=0x3f29170, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0161.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 [0161.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 Thread: id = 1428 os_tid = 0xbac [0147.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\yeebctu6rx9e4ki.pdf")) returned 0x2020 [0147.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf", dwFileAttributes=0x20) returned 1 [0150.095] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\yeebctu6rx9e4ki.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3a8 [0150.095] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x934facc | out: lpFileSize=0x934facc*=61261) returned 1 [0150.095] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0xef49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.095] ReadFile (in: hFile=0x3a8, lpBuffer=0x934faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x934fab8, lpOverlapped=0x0 | out: lpBuffer=0x934faa8*, lpNumberOfBytesRead=0x934fab8*=0x4, lpOverlapped=0x0) returned 1 [0150.096] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0150.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0150.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0150.097] NtQuerySystemTime (in: CurrentTime=0x934fa40 | out: CurrentTime=0x934fa40*=132482710587384000) returned 0x0 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x54687c2b [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x561e89fe [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x2e388a35 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x526a9b90 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x7de53ae1 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x49d1208b [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x53efbe29 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x34cacedd [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x682968aa [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x1c2b0de8 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x53c06b77 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x7993418d [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x44236570 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0xfbf2a38 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x3f2717eb [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x7f88076b [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x41e008a5 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x4c0fa7ce [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x33082a48 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x28cec832 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x1e3fba38 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x578c4a1e [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x5cfba069 [0150.097] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x6dfe0892 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x525b9313 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x434cbb85 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x18480648 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x57cba17c [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x25e1dbe0 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x5c142e58 [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x755bbf3b [0150.098] RtlRandomEx (in: Seed=0x934fa38 | out: Seed=0x934fa38) returned 0x6e299a11 [0150.106] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.106] ReadFile (in: hFile=0x3a8, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934fa40, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0x934fa40*=0x3c00, lpOverlapped=0x0) returned 1 [0150.107] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0150.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67212e8 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0150.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0150.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0150.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0150.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.107] WriteFile (in: hFile=0x3a8, lpBuffer=0x67212e8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934fa40, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesWritten=0x934fa40*=0x3c00, lpOverlapped=0x0) returned 1 [0150.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0150.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0150.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067340 [0150.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0150.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067280 [0150.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0150.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0150.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0150.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0150.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d55840 [0150.457] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.457] WriteFile (in: hFile=0x3a8, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x934fac0, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0x934fac0*=0x118, lpOverlapped=0x0) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067340) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0150.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0150.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbbf8 [0150.485] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf" [0150.485] wcscat (in: _Dest=0x3edbbf8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf.ac3a86" [0150.485] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf.ac3a86", NtPathName=0x934fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\YeeBcTU6rx9E4ki.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e32198 [0150.522] FlushFileBuffers (hFile=0x3a8) returned 1 [0151.308] CloseHandle (hObject=0x3a8) returned 1 [0151.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29410 [0151.619] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.619] wcscat (in: _Dest=0x3f29410, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 [0156.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cef0) returned 1 Thread: id = 1429 os_tid = 0xb28 [0147.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\yf9zt2wm.wav")) returned 0x2020 [0147.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav", dwFileAttributes=0x20) returned 1 [0150.108] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\yf9zt2wm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac4 [0150.108] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0xc04fe34 | out: lpFileSize=0xc04fe34*=68018) returned 1 [0150.108] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x109ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.108] ReadFile (in: hFile=0xac4, lpBuffer=0xc04fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc04fe20, lpOverlapped=0x0 | out: lpBuffer=0xc04fe10*, lpNumberOfBytesRead=0xc04fe20*=0x4, lpOverlapped=0x0) returned 1 [0150.109] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0150.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0150.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.110] NtQuerySystemTime (in: CurrentTime=0xc04fda8 | out: CurrentTime=0xc04fda8*=132482710587540000) returned 0x0 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x48434ac8 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x98aac45 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x40064803 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0xceae014 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x5a6c4b5c [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x79e0d967 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x2d07d18d [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x49bd7432 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x26e6333d [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x57d80849 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x11f9fa81 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x543d2b3d [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x5753ea63 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x2ba5b679 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x710f6550 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x1c78715a [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x7ef6df3d [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x6fafbf4c [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x31252934 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x8326100 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x5fc2c810 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x694bd87 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x709e285d [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x7a368ae7 [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x40ffb48e [0150.110] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x73622178 [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x7c85ee6f [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x2e7709cb [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x6e30b674 [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x86f7a2c [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x50104f74 [0150.111] RtlRandomEx (in: Seed=0xc04fda0 | out: Seed=0xc04fda0) returned 0x752aa9d2 [0150.119] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.119] ReadFile (in: hFile=0xac4, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc04fda8, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xc04fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0150.119] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b2b8 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0150.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6728af8 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0150.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0150.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0150.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.120] WriteFile (in: hFile=0xac4, lpBuffer=0x6728af8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc04fda8, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesWritten=0xc04fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0150.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0150.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0150.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5bd0 [0150.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0150.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5c30 [0150.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0150.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0150.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0150.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0150.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x300dfd8 [0150.459] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.459] WriteFile (in: hFile=0xac4, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xc04fe28, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0xc04fe28*=0x10a, lpOverlapped=0x0) returned 1 [0150.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0150.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0150.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0150.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0150.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0150.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0150.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0150.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0150.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d670 [0150.484] wcscpy (in: _Dest=0x3f1d670, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav" [0150.484] wcscat (in: _Dest=0x3f1d670, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav.ac3a86" [0150.484] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav.ac3a86", NtPathName=0xc04fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\YF9zT2wM.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26508 [0150.520] FlushFileBuffers (hFile=0xac4) returned 1 [0151.307] CloseHandle (hObject=0xac4) returned 1 [0151.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29950 [0151.617] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.618] wcscat (in: _Dest=0x3f29950, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0xffffffff [0151.618] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x197c [0156.024] WriteFile (in: hFile=0x197c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc04fdbc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc04fdbc*=0x8b9, lpOverlapped=0x0) returned 1 [0156.026] CloseHandle (hObject=0x197c) returned 1 [0156.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 [0156.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 1430 os_tid = 0xb2c [0147.246] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\z6bystbwaa.wav")) returned 0x2020 [0147.246] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav", dwFileAttributes=0x20) returned 1 [0150.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\z6bystbwaa.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1340 [0150.120] GetFileSizeEx (in: hFile=0x1340, lpFileSize=0xc19ff14 | out: lpFileSize=0xc19ff14*=1867) returned 1 [0150.120] SetFilePointerEx (in: hFile=0x1340, liDistanceToMove=0x747, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.120] ReadFile (in: hFile=0x1340, lpBuffer=0xc19fef0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc19ff00, lpOverlapped=0x0 | out: lpBuffer=0xc19fef0*, lpNumberOfBytesRead=0xc19ff00*=0x4, lpOverlapped=0x0) returned 1 [0150.122] SetFilePointerEx (in: hFile=0x1340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0150.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0150.122] NtQuerySystemTime (in: CurrentTime=0xc19fe88 | out: CurrentTime=0xc19fe88*=132482710587696000) returned 0x0 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x7b66a31a [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x24c5016 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x73a563c8 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x285d6c82 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x127c2730 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x7fcc90ad [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x59d261d9 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0xa58d88c [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x25a48c5c [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x2441a8cb [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x5c41d128 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x61eef78 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x50add435 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x24385b93 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x6c752dc2 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x72cbe7a9 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x7e6a93ea [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x13820b68 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x213d443b [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x543fe2e8 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x4b80db0f [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x68955fd9 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x6dfc76b6 [0150.122] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x1405f6bc [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x1981c9b3 [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x185aa94f [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x3af9a0f4 [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x5984c9fc [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x391500f6 [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x39c87619 [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x43000eef [0150.123] RtlRandomEx (in: Seed=0xc19fe80 | out: Seed=0xc19fe80) returned 0x35f4ae7 [0150.130] ReadFile (in: hFile=0x1340, lpBuffer=0x672c700, nNumberOfBytesToRead=0x74b, lpNumberOfBytesRead=0xc19fe7c, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesRead=0xc19fe7c*=0x74b, lpOverlapped=0x0) returned 1 [0150.131] SetFilePointerEx (in: hFile=0x1340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.131] WriteFile (in: hFile=0x1340, lpBuffer=0x6730308*, nNumberOfBytesToWrite=0x74b, lpNumberOfBytesWritten=0xc19fe80, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesWritten=0xc19fe80*=0x74b, lpOverlapped=0x0) returned 1 [0150.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0150.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0150.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0150.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0150.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0150.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0150.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19d20 [0150.464] SetFilePointerEx (in: hFile=0x1340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.464] WriteFile (in: hFile=0x1340, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xc19ff08, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0xc19ff08*=0x10e, lpOverlapped=0x0) returned 1 [0150.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0150.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d58) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d20) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0150.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0150.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d058 [0150.487] wcscpy (in: _Dest=0x3f1d058, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav" [0150.487] wcscat (in: _Dest=0x3f1d058, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav.ac3a86" [0150.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav.ac3a86", NtPathName=0xc19fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Z6bySTBwAA.wav.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc438 [0150.524] FlushFileBuffers (hFile=0x1340) returned 1 [0151.308] CloseHandle (hObject=0x1340) returned 1 [0151.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f293a0 [0151.620] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.620] wcscat (in: _Dest=0x3f293a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 [0156.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 1431 os_tid = 0xb20 [0147.246] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zaivvywe.png")) returned 0x2020 [0147.246] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png", dwFileAttributes=0x20) returned 1 [0150.131] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zaivvywe.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10e8 [0150.131] GetFileSizeEx (in: hFile=0x10e8, lpFileSize=0xa52fedc | out: lpFileSize=0xa52fedc*=9113) returned 1 [0150.131] SetFilePointerEx (in: hFile=0x10e8, liDistanceToMove=0x2395, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.131] ReadFile (in: hFile=0x10e8, lpBuffer=0xa52feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa52fec8, lpOverlapped=0x0 | out: lpBuffer=0xa52feb8*, lpNumberOfBytesRead=0xa52fec8*=0x4, lpOverlapped=0x0) returned 1 [0150.133] SetFilePointerEx (in: hFile=0x10e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0150.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0150.133] NtQuerySystemTime (in: CurrentTime=0xa52fe50 | out: CurrentTime=0xa52fe50*=132482710587852000) returned 0x0 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x58ddb484 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x15572629 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0xb631a15 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x258d19db [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x2462b33f [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x72581596 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x6b44bda9 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x1953e282 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x76a108bc [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x296e5e9a [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x7fdf50de [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x33203b18 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x4f35b4a3 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x5ecefa5 [0150.133] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x52be4c35 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x6319a543 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x6b6ce257 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x798b27e7 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x71f7bd4f [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x4f4bb5f3 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x7a23a2b8 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x3ba14f77 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x1794a689 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x48920102 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x6cad34a2 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x54a49396 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x7b70a80e [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x34db71b5 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x3d8b9d18 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x67479f2d [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x444dee96 [0150.134] RtlRandomEx (in: Seed=0xa52fe48 | out: Seed=0xa52fe48) returned 0x67bbd80c [0150.142] ReadFile (in: hFile=0x10e8, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x2399, lpNumberOfBytesRead=0xa52fe44, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xa52fe44*=0x2399, lpOverlapped=0x0) returned 1 [0150.142] SetFilePointerEx (in: hFile=0x10e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.142] WriteFile (in: hFile=0x10e8, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x2399, lpNumberOfBytesWritten=0xa52fe48, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xa52fe48*=0x2399, lpOverlapped=0x0) returned 1 [0150.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0150.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0150.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0150.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0150.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0150.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0150.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e810) returned 1 [0150.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5b70 [0150.467] SetFilePointerEx (in: hFile=0x10e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.467] WriteFile (in: hFile=0x10e8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa52fed0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xa52fed0*=0x10a, lpOverlapped=0x0) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0150.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0150.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1da30 [0150.489] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png" [0150.489] wcscat (in: _Dest=0x3f1da30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png.ac3a86" [0150.489] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png.ac3a86", NtPathName=0xa52fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\zAivvyWe.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0150.530] FlushFileBuffers (hFile=0x10e8) returned 1 [0151.308] CloseHandle (hObject=0x10e8) returned 1 [0151.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29870 [0151.623] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.623] wcscat (in: _Dest=0x3f29870, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.623] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 [0156.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 Thread: id = 1432 os_tid = 0xac4 [0147.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\_oda65vv74wcx8ymw1x5.swf")) returned 0x2020 [0147.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf", dwFileAttributes=0x20) returned 1 [0150.142] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\_oda65vv74wcx8ymw1x5.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc28 [0150.143] GetFileSizeEx (in: hFile=0xc28, lpFileSize=0xc0cf96c | out: lpFileSize=0xc0cf96c*=24027) returned 1 [0150.143] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x5dd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.143] ReadFile (in: hFile=0xc28, lpBuffer=0xc0cf948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0cf958, lpOverlapped=0x0 | out: lpBuffer=0xc0cf948*, lpNumberOfBytesRead=0xc0cf958*=0x4, lpOverlapped=0x0) returned 1 [0150.144] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0150.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.145] NtQuerySystemTime (in: CurrentTime=0xc0cf8e0 | out: CurrentTime=0xc0cf8e0*=132482710588008000) returned 0x0 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0xc072d07 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x2e3eabb5 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x5bd24c50 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x24378740 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x381a129c [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x541e858b [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x74098f68 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0xc6d9f2c [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x773a6ef4 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x39a0cc6b [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x75ce7b27 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x257f4273 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x79604f27 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x682178e [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x5daf6386 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x697e8ec2 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x15da9bf2 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x1d6abe05 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x5c7fe180 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x296c5a38 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x71da4bdb [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x66ef8fd0 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x45c0c5ea [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x75a6efe2 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x6f30d0f1 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x3a94b6ec [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x1b5275b0 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x63c4047a [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x49a01832 [0150.145] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x34a9cbff [0150.146] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x5dd63f1b [0150.146] RtlRandomEx (in: Seed=0xc0cf8d8 | out: Seed=0xc0cf8d8) returned 0x13b2f56e [0150.153] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.153] ReadFile (in: hFile=0xc28, lpBuffer=0x673b720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cf8e0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xc0cf8e0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.154] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0150.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0150.154] WriteFile (in: hFile=0xc28, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cf8e0, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xc0cf8e0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0150.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4e810 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0150.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e4ed20 [0150.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0150.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0150.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8cb8 [0150.470] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.470] WriteFile (in: hFile=0xc28, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xc0cf960, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0xc0cf960*=0x122, lpOverlapped=0x0) returned 1 [0150.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0150.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0150.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0150.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e810) returned 1 [0150.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0150.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0150.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0150.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0150.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0150.491] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf" [0150.491] wcscat (in: _Dest=0x66db7d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf.ac3a86" [0150.491] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf.ac3a86", NtPathName=0xc0cf8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\_odA65vv74WCX8YMW1x5.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0db70 [0150.529] FlushFileBuffers (hFile=0xc28) returned 1 [0151.308] CloseHandle (hObject=0xc28) returned 1 [0151.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29cd0 [0151.621] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0151.621] wcscat (in: _Dest=0x3f29cd0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" [0151.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac3a86-readme.txt")) returned 0x2020 [0156.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 [0156.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda878) returned 1 Thread: id = 1433 os_tid = 0xac0 [0147.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url")) returned 0x20 [0147.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 1 [0147.254] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0147.254] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0x957fc54 | out: lpFileSize=0x957fc54*=133) returned 1 [0147.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0147.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0147.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0147.254] NtQuerySystemTime (in: CurrentTime=0x957fbc8 | out: CurrentTime=0x957fbc8*=132482710558992000) returned 0x0 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x7f45db6 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x380ad8b5 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x71772b44 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x3bd76718 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x5dd37fe8 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x332ef06f [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x75057163 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x1d6e1b53 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x2153bb52 [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x40df2a2f [0147.254] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x3cc4c405 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x47d8bd62 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x6e4213e9 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x7870f777 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x72c2aed5 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x2f37e31c [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x327a13a4 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x4504d531 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x453ab7df [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x18d77c28 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x40d944f0 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x60ddd42e [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x71f8e813 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x6baebb81 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x59118351 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x4adac00b [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x25d5e376 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x349fffd9 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x30c68f68 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x2a550a34 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x658f95c4 [0147.255] RtlRandomEx (in: Seed=0x957fbc0 | out: Seed=0x957fbc0) returned 0x839cd3f [0147.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0147.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684a120 [0147.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0147.265] ReadFile (in: hFile=0xeb4, lpBuffer=0x684a120, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x957fbbc, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesRead=0x957fbbc*=0x85, lpOverlapped=0x0) returned 1 [0147.267] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.267] WriteFile (in: hFile=0xeb4, lpBuffer=0x684dd28*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x957fbc0, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesWritten=0x957fbc0*=0x85, lpOverlapped=0x0) returned 1 [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6c8 [0147.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0147.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0147.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0147.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0147.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e928) returned 1 [0147.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1fc80 [0147.666] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.666] WriteFile (in: hFile=0xeb4, lpBuffer=0x3d54a60*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x957fc48, lpOverlapped=0x0 | out: lpBuffer=0x3d54a60*, lpNumberOfBytesWritten=0x957fc48*=0x11a, lpOverlapped=0x0) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f9c0) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fc80) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0147.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0147.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcf78 [0147.686] wcscpy (in: _Dest=0x66dcf78, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" [0147.686] wcscat (in: _Dest=0x66dcf78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.ac3a86" [0147.686] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.ac3a86", NtPathName=0x957fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cab8 [0150.512] FlushFileBuffers (hFile=0xeb4) returned 1 [0151.307] CloseHandle (hObject=0xeb4) returned 1 [0151.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e08db0 [0151.616] wcscpy (in: _Dest=0x3e08db0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0151.616] wcscat (in: _Dest=0x3e08db0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" [0151.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\ac3a86-readme.txt")) returned 0xffffffff [0151.617] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd54 [0151.631] WriteFile (in: hFile=0xd54, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x957fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x957fbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0151.851] CloseHandle (hObject=0xd54) returned 1 [0151.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08db0) returned 1 [0151.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d597b8) returned 1 Thread: id = 1434 os_tid = 0xabc [0147.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0151.039] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 1 [0151.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14a4 [0151.040] GetFileSizeEx (in: hFile=0x14a4, lpFileSize=0xc6ff9d4 | out: lpFileSize=0xc6ff9d4*=133) returned 1 [0151.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0151.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0151.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0151.040] NtQuerySystemTime (in: CurrentTime=0xc6ff948 | out: CurrentTime=0xc6ff948*=132482710596900000) returned 0x0 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x764876ca [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x2ee7a57f [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x32b7573f [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x138cb2a5 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x6204f332 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x29c8627e [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x27e2b62b [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x3bb519ac [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x4c0f0786 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x61b590f6 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x44020b83 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x57156b70 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0xa4988a7 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x22f32076 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x1f441bcd [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x4ca546e7 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x4327e315 [0151.040] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x17355f89 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x24186b2a [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x5a3a8416 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x7384ace7 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x775c5d73 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x3d5d3c8c [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x6e8ce779 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x277ed544 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x7a64f731 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x1938b1f4 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x3a037c98 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x49f6d161 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x394908f5 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x4674e0f3 [0151.041] RtlRandomEx (in: Seed=0xc6ff940 | out: Seed=0xc6ff940) returned 0x213bce6a [0151.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0151.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0151.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6992910 [0151.061] ReadFile (in: hFile=0x14a4, lpBuffer=0x698ed08, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xc6ff93c, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesRead=0xc6ff93c*=0x85, lpOverlapped=0x0) returned 1 [0151.064] SetFilePointerEx (in: hFile=0x14a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.064] WriteFile (in: hFile=0x14a4, lpBuffer=0x6992910*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xc6ff940, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesWritten=0xc6ff940*=0x85, lpOverlapped=0x0) returned 1 [0151.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0151.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0151.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0151.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0151.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0151.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0151.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d6570 [0151.737] SetFilePointerEx (in: hFile=0x14a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.737] WriteFile (in: hFile=0x14a4, lpBuffer=0x67079e8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xc6ff9c8, lpOverlapped=0x0 | out: lpBuffer=0x67079e8*, lpNumberOfBytesWritten=0xc6ff9c8*=0x122, lpOverlapped=0x0) returned 1 [0152.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67079e8) returned 1 [0152.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ea00) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0152.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30e98 [0152.364] wcscpy (in: _Dest=0x3e30e98, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" [0152.364] wcscat (in: _Dest=0x3e30e98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.ac3a86" [0152.364] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.ac3a86", NtPathName=0xc6ff940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0152.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bd48 [0155.119] FlushFileBuffers (hFile=0x14a4) returned 1 [0155.122] CloseHandle (hObject=0x14a4) returned 1 [0155.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b8b8 [0155.126] wcscpy (in: _Dest=0x674b8b8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0155.126] wcscat (in: _Dest=0x674b8b8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" [0155.126] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\ac3a86-readme.txt")) returned 0x20 [0155.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b8b8) returned 1 [0155.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 1435 os_tid = 0xab8 [0147.268] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0148.145] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 1 [0150.504] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x112c [0150.504] GetFileSizeEx (in: hFile=0x112c, lpFileSize=0xc23fde4 | out: lpFileSize=0xc23fde4*=133) returned 1 [0150.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0150.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0150.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0150.504] NtQuerySystemTime (in: CurrentTime=0xc23fd58 | out: CurrentTime=0xc23fd58*=132482710591596000) returned 0x0 [0150.504] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x73bc9c5d [0150.504] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x65f471f9 [0150.504] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x3a88e377 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x1514bc91 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x7e7b6b39 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0xc2bcabd [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x42884cad [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x1911ce1f [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0xab8587f [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0xe84cf9 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x56473157 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x41d8b591 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x7586d5e7 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x7ea6aa4d [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x2d1d58fa [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x163d58ea [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x69309dd6 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x25b563ab [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0xd63180b [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x6e07bfe2 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x657493b9 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x3f09c6d4 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x3f419b18 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x683fb12 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x6efe8799 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x3ea6bd81 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x5822c99b [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x321a76f2 [0150.505] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x44fae689 [0150.506] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x7ab5ead4 [0150.506] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x4f387553 [0150.506] RtlRandomEx (in: Seed=0xc23fd50 | out: Seed=0xc23fd50) returned 0x41cedf1a [0150.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0150.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a4558 [0150.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0150.572] ReadFile (in: hFile=0x112c, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xc23fd4c, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0xc23fd4c*=0x85, lpOverlapped=0x0) returned 1 [0150.574] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.574] WriteFile (in: hFile=0x112c, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xc23fd50, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0xc23fd50*=0x85, lpOverlapped=0x0) returned 1 [0151.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0151.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0151.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0151.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0151.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0151.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0151.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0151.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e80e38 [0151.073] SetFilePointerEx (in: hFile=0x112c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.074] WriteFile (in: hFile=0x112c, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xc23fdd8, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xc23fdd8*=0x11c, lpOverlapped=0x0) returned 1 [0152.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0152.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80e78) returned 1 [0152.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0152.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80e38) returned 1 [0152.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0152.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0152.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0152.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0152.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30d68 [0152.390] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" [0152.390] wcscat (in: _Dest=0x3e30d68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.ac3a86" [0152.390] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.ac3a86", NtPathName=0xc23fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0152.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d880 [0156.035] FlushFileBuffers (hFile=0x112c) returned 1 [0157.503] CloseHandle (hObject=0x112c) returned 1 [0159.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ab38 [0159.983] wcscpy (in: _Dest=0x674ab38, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0159.983] wcscat (in: _Dest=0x674ab38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" [0159.983] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\ac3a86-readme.txt")) returned 0x20 [0159.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 [0159.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f273e8) returned 1 Thread: id = 1436 os_tid = 0xa90 [0147.269] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0151.015] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 1 [0151.016] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14a0 [0151.016] GetFileSizeEx (in: hFile=0x14a0, lpFileSize=0xc80f82c | out: lpFileSize=0xc80f82c*=133) returned 1 [0151.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0151.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0151.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0151.016] NtQuerySystemTime (in: CurrentTime=0xc80f7a0 | out: CurrentTime=0xc80f7a0*=132482710596588000) returned 0x0 [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x530316f5 [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x22b9f5a9 [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x78c5c375 [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x2969e9f3 [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0xeecb9dd [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x25d424af [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x22fbea2c [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x33ead97c [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x6ac86bef [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x7b4dc18d [0151.016] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x52bf7736 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x2e899dec [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x312738ba [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x6376927e [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x77997aad [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x19170a3e [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x2bf1a4c8 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x320f30b8 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x7f3b5b89 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x6d6c0c24 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x28d1d442 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x50ea0763 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x201b7027 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x2dab2d3e [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x572a11b6 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x12aa404d [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x564c0056 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x63d10374 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x6ea7f9ab [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x54cffc33 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x383a5775 [0151.017] RtlRandomEx (in: Seed=0xc80f798 | out: Seed=0xc80f798) returned 0x475c7613 [0151.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0151.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0151.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0151.030] ReadFile (in: hFile=0x14a0, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xc80f794, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0xc80f794*=0x85, lpOverlapped=0x0) returned 1 [0151.033] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.037] WriteFile (in: hFile=0x14a0, lpBuffer=0x69838f0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xc80f798, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesWritten=0xc80f798*=0x85, lpOverlapped=0x0) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6528) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66d6528 [0151.379] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.379] WriteFile (in: hFile=0x14a0, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xc80f820, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xc80f820*=0x120, lpOverlapped=0x0) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d58c8) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6528) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0152.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0152.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31060 [0152.393] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" [0152.393] wcscat (in: _Dest=0x3e31060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.ac3a86") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.ac3a86" [0152.394] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.ac3a86", NtPathName=0xc80f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0152.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2410 [0156.401] FlushFileBuffers (hFile=0x14a0) returned 1 [0158.536] CloseHandle (hObject=0x14a0) returned 1 [0160.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbef8 [0160.400] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0160.400] wcscat (in: _Dest=0x3edbef8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" [0160.400] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\ac3a86-readme.txt")) returned 0x20 [0160.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 [0160.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 1437 os_tid = 0xb1c [0147.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20 [0147.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0147.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.286] GetLastError () returned 0x5 [0147.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0147.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 1438 os_tid = 0x1c4 [0147.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0148.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0148.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.369] GetLastError () returned 0x5 [0148.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0148.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 1439 os_tid = 0x7fc [0147.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0148.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0148.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.371] GetLastError () returned 0x5 [0148.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0148.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35ba88) returned 1 Thread: id = 1440 os_tid = 0xda0 [0147.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20 [0148.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0148.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.373] GetLastError () returned 0x5 [0148.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0148.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 1441 os_tid = 0xd98 [0147.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20 [0148.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0148.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.374] GetLastError () returned 0x5 [0148.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0148.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 1442 os_tid = 0xda4 [0147.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20 [0148.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0148.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.376] GetLastError () returned 0x5 [0148.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0148.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 1443 os_tid = 0xdbc [0147.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20 [0148.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0148.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.147] GetLastError () returned 0x5 [0148.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0148.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 1444 os_tid = 0xd94 [0147.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20 [0148.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0148.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.149] GetLastError () returned 0x5 [0148.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0148.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 1445 os_tid = 0xd8c [0147.298] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0148.530] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.530] GetLastError () returned 0x5 [0148.531] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 1446 os_tid = 0xa88 [0147.298] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0148.532] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.532] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.532] GetLastError () returned 0x5 [0148.532] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354f30) returned 1 Thread: id = 1447 os_tid = 0xc58 [0147.299] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0148.533] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.534] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.534] GetLastError () returned 0x5 [0148.534] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 1448 os_tid = 0x474 [0147.299] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0148.535] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.535] GetLastError () returned 0x5 [0148.535] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 1449 os_tid = 0x528 [0147.299] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0148.537] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.537] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.537] GetLastError () returned 0x5 [0148.537] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1450 os_tid = 0x580 [0147.299] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0148.539] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.539] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.539] GetLastError () returned 0x5 [0148.539] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 1451 os_tid = 0x564 [0147.300] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0148.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.514] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.515] GetLastError () returned 0x5 [0148.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 Thread: id = 1452 os_tid = 0xe08 [0147.300] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0148.540] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.540] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.540] GetLastError () returned 0x5 [0148.541] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 1453 os_tid = 0x518 [0147.300] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0148.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.516] GetLastError () returned 0x5 [0148.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 1454 os_tid = 0x1004 [0147.301] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0148.517] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.518] GetLastError () returned 0x5 [0148.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1455 os_tid = 0x1034 [0147.301] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0148.542] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.542] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.542] GetLastError () returned 0x5 [0148.542] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 1456 os_tid = 0x10a0 [0147.301] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0148.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.519] GetLastError () returned 0x5 [0148.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1457 os_tid = 0x10a4 [0147.302] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0148.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.521] GetLastError () returned 0x5 [0148.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1458 os_tid = 0x10a8 [0147.302] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0148.523] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.523] GetLastError () returned 0x5 [0148.523] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958700) returned 1 Thread: id = 1459 os_tid = 0x10ac [0147.302] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0148.524] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.525] GetLastError () returned 0x5 [0148.525] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 1460 os_tid = 0x10b0 [0147.303] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0148.543] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.544] GetLastError () returned 0x5 [0148.544] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbe08) returned 1 Thread: id = 1461 os_tid = 0x10b4 [0147.303] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0148.526] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.526] GetLastError () returned 0x5 [0148.526] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 1462 os_tid = 0x10bc [0147.303] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0148.545] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.545] GetLastError () returned 0x5 [0148.545] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 1463 os_tid = 0x10c0 [0147.303] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0148.299] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0148.299] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.299] GetLastError () returned 0x5 [0148.299] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 1464 os_tid = 0x10c4 [0147.304] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0148.506] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0148.506] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.506] GetLastError () returned 0x5 [0148.506] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0148.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 1465 os_tid = 0x10c8 [0147.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg")) returned 0x20 [0147.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.304] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.305] GetLastError () returned 0x5 [0147.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 1466 os_tid = 0x10cc [0147.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg")) returned 0x20 [0147.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.307] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.307] GetLastError () returned 0x5 [0147.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 1467 os_tid = 0x10d0 [0147.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg")) returned 0x20 [0147.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.309] GetLastError () returned 0x5 [0147.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 1468 os_tid = 0x10d4 [0147.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg")) returned 0x20 [0147.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.310] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.310] GetLastError () returned 0x5 [0147.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0147.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 1469 os_tid = 0x10e0 [0147.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst")) returned 0x21 [0147.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x20) returned 0 [0147.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.312] GetLastError () returned 0x5 [0147.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x21) returned 0 [0147.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def900) returned 1 Thread: id = 1470 os_tid = 0x1144 [0147.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst")) returned 0x21 [0147.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x20) returned 0 [0147.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.314] GetLastError () returned 0x5 [0147.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x21) returned 0 [0147.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defa90) returned 1 Thread: id = 1471 os_tid = 0x1148 [0147.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst")) returned 0x21 [0147.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x20) returned 0 [0147.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.315] GetLastError () returned 0x5 [0147.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x21) returned 0 [0147.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 Thread: id = 1472 os_tid = 0x114c [0147.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst")) returned 0x21 [0147.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x20) returned 0 [0147.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.317] GetLastError () returned 0x5 [0147.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x21) returned 0 [0147.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 Thread: id = 1473 os_tid = 0x1178 [0147.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst")) returned 0x21 [0148.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x20) returned 0 [0148.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.378] GetLastError () returned 0x5 [0148.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x21) returned 0 [0148.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def2c0) returned 1 Thread: id = 1474 os_tid = 0x117c [0147.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst")) returned 0x21 [0148.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x20) returned 0 [0148.551] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.551] GetLastError () returned 0x5 [0148.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x21) returned 0 [0148.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def068) returned 1 Thread: id = 1475 os_tid = 0x1228 [0147.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst")) returned 0x21 [0148.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x20) returned 0 [0148.557] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.557] GetLastError () returned 0x5 [0148.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x21) returned 0 [0148.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def6a8) returned 1 Thread: id = 1476 os_tid = 0x122c [0147.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst")) returned 0x21 [0148.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x20) returned 0 [0148.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.558] GetLastError () returned 0x5 [0148.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x21) returned 0 [0148.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deff40) returned 1 Thread: id = 1477 os_tid = 0x127c [0147.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst")) returned 0x21 [0148.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x20) returned 0 [0148.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.560] GetLastError () returned 0x5 [0148.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x21) returned 0 [0148.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0008) returned 1 Thread: id = 1478 os_tid = 0x1280 [0147.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst")) returned 0x21 [0148.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x20) returned 0 [0148.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.562] GetLastError () returned 0x5 [0148.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x21) returned 0 [0148.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df00d0) returned 1 Thread: id = 1479 os_tid = 0xc30 [0147.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst")) returned 0x21 [0148.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x20) returned 0 [0148.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.563] GetLastError () returned 0x5 [0148.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x21) returned 0 [0148.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0198) returned 1 Thread: id = 1480 os_tid = 0xaf4 [0147.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst")) returned 0x21 [0148.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x20) returned 0 [0148.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.565] GetLastError () returned 0x5 [0148.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x21) returned 0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0260) returned 1 Thread: id = 1481 os_tid = 0x934 [0147.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst")) returned 0x21 [0148.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x20) returned 0 [0148.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.567] GetLastError () returned 0x5 [0148.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x21) returned 0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0328) returned 1 Thread: id = 1482 os_tid = 0x1468 [0147.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst")) returned 0x21 [0148.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x20) returned 0 [0148.568] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.568] GetLastError () returned 0x5 [0148.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x21) returned 0 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 Thread: id = 1483 os_tid = 0x146c [0147.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst")) returned 0x21 [0148.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x20) returned 0 [0148.570] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.570] GetLastError () returned 0x5 [0148.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x21) returned 0 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df04b8) returned 1 Thread: id = 1484 os_tid = 0x1474 [0147.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst")) returned 0x21 [0148.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x20) returned 0 [0148.571] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.571] GetLastError () returned 0x5 [0148.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x21) returned 0 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 1485 os_tid = 0x14b4 [0147.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst")) returned 0x21 [0148.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x20) returned 0 [0148.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.573] GetLastError () returned 0x5 [0148.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x21) returned 0 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 Thread: id = 1486 os_tid = 0x14b8 [0147.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst")) returned 0x21 [0148.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x20) returned 0 [0148.574] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.574] GetLastError () returned 0x5 [0148.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x21) returned 0 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 Thread: id = 1487 os_tid = 0x14bc [0147.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst")) returned 0x21 [0148.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x20) returned 0 [0148.575] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.575] GetLastError () returned 0x5 [0148.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x21) returned 0 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 1488 os_tid = 0x14c0 [0147.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst")) returned 0x21 [0148.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x20) returned 0 [0148.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.577] GetLastError () returned 0x5 [0148.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x21) returned 0 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df08a0) returned 1 Thread: id = 1489 os_tid = 0x14c4 [0147.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst")) returned 0x21 [0148.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x20) returned 0 [0148.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.578] GetLastError () returned 0x5 [0148.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x21) returned 0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0968) returned 1 Thread: id = 1490 os_tid = 0x14c8 [0147.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst")) returned 0x21 [0148.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x20) returned 0 [0148.579] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.579] GetLastError () returned 0x5 [0148.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x21) returned 0 [0148.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0a30) returned 1 Thread: id = 1491 os_tid = 0x14cc [0147.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst")) returned 0x21 [0148.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x20) returned 0 [0148.581] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.581] GetLastError () returned 0x5 [0148.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x21) returned 0 [0148.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 1492 os_tid = 0x14d8 [0147.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst")) returned 0x21 [0148.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x20) returned 0 [0148.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.582] GetLastError () returned 0x5 [0148.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x21) returned 0 [0148.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ddb0) returned 1 Thread: id = 1493 os_tid = 0x14dc [0147.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst")) returned 0x21 [0148.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x20) returned 0 [0148.584] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.584] GetLastError () returned 0x5 [0148.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x21) returned 0 [0148.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de78) returned 1 Thread: id = 1494 os_tid = 0x14e0 [0147.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst")) returned 0x21 [0148.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x20) returned 0 [0148.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.302] GetLastError () returned 0x5 [0148.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x21) returned 0 [0148.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df40) returned 1 Thread: id = 1495 os_tid = 0x14e8 [0147.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst")) returned 0x21 [0148.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x20) returned 0 [0148.549] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.549] GetLastError () returned 0x5 [0148.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x21) returned 0 [0148.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e008) returned 1 Thread: id = 1496 os_tid = 0xec4 [0148.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini")) returned 0x21 [0148.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x20) returned 0 [0148.547] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.547] GetLastError () returned 0x5 [0148.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x21) returned 0 [0148.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d0) returned 1 Thread: id = 1497 os_tid = 0x14ec [0148.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef268 [0148.158] wcscpy (in: _Dest=0x3eef268, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0148.158] wcscat (in: _Dest=0x3eef268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\" [0148.158] wcscat (in: _Dest=0x3eef268, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*" [0148.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0148.158] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0148.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 [0148.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8b490) returned 1 Thread: id = 1498 os_tid = 0x14f0 [0148.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29410 [0148.160] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0148.160] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0148.160] wcscat (in: _Dest=0x3f29410, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*" [0148.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0148.160] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0148.161] wcscmp (_String1=".", _String2=".") returned 0 [0148.161] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.161] wcscmp (_String1="..", _String2=".") returned 1 [0148.161] wcscmp (_String1="..", _String2="..") returned 0 [0148.161] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0148.161] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0148.161] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0148.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f269d0 [0148.161] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0148.161] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0148.161] wcscat (in: _Dest=0x3f269d0, _Source="WelcomeScan.jpg" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0151.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0151.592] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0151.592] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0151.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0151.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 [0151.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e9c8) returned 1 Thread: id = 1499 os_tid = 0x14f4 [0148.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif")) returned 0x20 [0148.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0148.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.176] GetLastError () returned 0x5 [0148.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0148.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 1500 os_tid = 0x14f8 [0148.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif")) returned 0x20 [0148.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0148.185] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.185] GetLastError () returned 0x5 [0148.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0148.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 1501 os_tid = 0x14fc [0148.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 0x20 [0148.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0148.187] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.187] GetLastError () returned 0x5 [0148.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0148.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 1502 os_tid = 0x1500 [0148.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif")) returned 0x20 [0148.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0148.189] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.189] GetLastError () returned 0x5 [0148.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0148.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09bb0) returned 1 Thread: id = 1503 os_tid = 0xb60 [0148.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif")) returned 0x20 [0148.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0148.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.191] GetLastError () returned 0x5 [0148.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0148.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 1504 os_tid = 0x1504 [0148.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif")) returned 0x20 [0148.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0148.193] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.193] GetLastError () returned 0x5 [0148.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0148.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 1505 os_tid = 0x1508 [0148.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif")) returned 0x20 [0149.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0149.432] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.432] GetLastError () returned 0x5 [0149.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0149.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 1506 os_tid = 0x150c [0148.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif")) returned 0x20 [0149.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0149.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.434] GetLastError () returned 0x5 [0149.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 1507 os_tid = 0x1510 [0148.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif")) returned 0x20 [0149.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0149.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.435] GetLastError () returned 0x5 [0149.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0149.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 1508 os_tid = 0x1514 [0148.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif")) returned 0x20 [0149.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0149.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.437] GetLastError () returned 0x5 [0149.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0149.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e098b0) returned 1 Thread: id = 1509 os_tid = 0xb4c [0148.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 0x20 [0148.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0148.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.830] GetLastError () returned 0x5 [0148.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0148.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e094b0) returned 1 Thread: id = 1510 os_tid = 0x1518 [0148.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif")) returned 0x20 [0148.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0148.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.829] GetLastError () returned 0x5 [0148.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0148.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e095b0) returned 1 Thread: id = 1511 os_tid = 0x151c [0148.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 0x20 [0148.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.827] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.827] GetLastError () returned 0x5 [0148.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 1512 os_tid = 0x1520 [0148.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 0x20 [0149.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0149.444] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.444] GetLastError () returned 0x5 [0149.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0149.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 1513 os_tid = 0x1524 [0148.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 0x20 [0149.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0149.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.442] GetLastError () returned 0x5 [0149.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0149.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 1514 os_tid = 0x1528 [0148.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif")) returned 0x20 [0149.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0149.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.440] GetLastError () returned 0x5 [0149.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0149.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 1515 os_tid = 0x152c [0148.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif")) returned 0x20 [0149.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0149.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.439] GetLastError () returned 0x5 [0149.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0149.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 1516 os_tid = 0x1530 [0148.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def5e0 [0148.201] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0148.201] wcscat (in: _Dest=0x3def5e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0148.201] wcscat (in: _Dest=0x3def5e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0148.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0148.201] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0148.202] wcscmp (_String1=".", _String2=".") returned 0 [0148.202] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.202] wcscmp (_String1="..", _String2=".") returned 1 [0148.202] wcscmp (_String1="..", _String2="..") returned 0 [0148.202] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0148.202] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0148.202] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0148.202] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0148.202] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0148.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0148.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 [0148.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defce8) returned 1 Thread: id = 1517 os_tid = 0x1534 [0148.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e09bb0 [0148.204] wcscpy (in: _Dest=0x3e09bb0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0148.204] wcscat (in: _Dest=0x3e09bb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0148.204] wcscat (in: _Dest=0x3e09bb0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0148.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0148.204] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0148.205] wcscmp (_String1=".", _String2=".") returned 0 [0148.205] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.205] wcscmp (_String1="..", _String2=".") returned 1 [0148.205] wcscmp (_String1="..", _String2="..") returned 0 [0148.205] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0148.205] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0148.205] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0148.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d3e8 [0148.205] wcscpy (in: _Dest=0x3e5d3e8, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0148.205] wcscat (in: _Dest=0x3e5d3e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0148.205] wcscat (in: _Dest=0x3e5d3e8, _Source="directories.acrodata" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0151.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0151.210] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0151.210] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0151.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0151.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09bb0) returned 1 [0151.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 1518 os_tid = 0x714 [0148.206] GetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0148.206] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0148.206] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.206] GetLastError () returned 0x5 [0148.206] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0148.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 1519 os_tid = 0x1548 [0148.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst")) returned 0x2020 [0148.210] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst", dwFileAttributes=0x20) returned 1 [0150.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8bc [0150.979] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0xbc7faec | out: lpFileSize=0xbc7faec*=271360) returned 1 [0150.979] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.979] ReadFile (in: hFile=0x8bc, lpBuffer=0xbc7fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbc7fad8, lpOverlapped=0x0 | out: lpBuffer=0xbc7fac8*, lpNumberOfBytesRead=0xbc7fad8*=0x4, lpOverlapped=0x0) returned 1 [0150.981] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0150.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0150.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0150.981] NtQuerySystemTime (in: CurrentTime=0xbc7fa60 | out: CurrentTime=0xbc7fa60*=132482710596276000) returned 0x0 [0150.981] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0xc2606c1 [0150.981] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x3bb44ec0 [0150.981] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x5e3f481e [0150.981] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x72ae7127 [0150.981] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x5a4b6541 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x38a9f734 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x12dc11a [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x1dd4918b [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x77da18db [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x7c9e4df1 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x52142eb6 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x570c51f8 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x6f895d07 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x460a7d7f [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x385aaa3b [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x25a89f86 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x4d9dca80 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x68315e14 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x15f1cf63 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x670dc3f9 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x7ee33963 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x341f7ce7 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x607e71d7 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x7061ea1b [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x5026fba [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0xe68fba8 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x1a26c980 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x2f71bde3 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x40932b8c [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0x6b2d78f4 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0xbf457c0 [0150.982] RtlRandomEx (in: Seed=0xbc7fa58 | out: Seed=0xbc7fa58) returned 0xb77bc63 [0150.993] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.993] ReadFile (in: hFile=0x8bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0151.033] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6570 [0151.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0151.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0151.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0151.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0151.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0151.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0151.035] WriteFile (in: hFile=0x8bc, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0151.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0151.050] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.050] ReadFile (in: hFile=0x8bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0151.050] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6570 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0151.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caf8 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0151.051] WriteFile (in: hFile=0x8bc, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0153.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0153.831] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.831] ReadFile (in: hFile=0x8bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0153.832] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e970 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e35438 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0153.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e970) returned 1 [0153.833] WriteFile (in: hFile=0x8bc, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbc7fa60, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xbc7fa60*=0x3c00, lpOverlapped=0x0) returned 1 [0156.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0156.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0156.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0156.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199d8 [0156.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0156.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0156.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0156.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0156.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d15b8) returned 1 [0156.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce3d8 [0156.767] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.767] WriteFile (in: hFile=0x8bc, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xbc7fae0, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0xbc7fae0*=0x154, lpOverlapped=0x0) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0159.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0159.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d688 [0159.981] wcscpy (in: _Dest=0x674d688, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" [0159.981] wcscat (in: _Dest=0x674d688, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.ac3a86" [0159.981] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.ac3a86", NtPathName=0xbc7fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e768 [0160.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 [0160.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69579f8) returned 1 [0160.449] NtQueryInformationFile (in: FileHandle=0x8bc, IoStatusBlock=0xbc7fa30, FileInformation=0xbc7fa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbc7fa30, FileInformation=0xbc7fa38) returned 0x0 [0160.449] NtSetInformationFile (FileHandle=0x8bc, IoStatusBlock=0xbc7fa30, FileInformation=0xbc7fa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 [0160.463] FlushFileBuffers (hFile=0x8bc) returned 1 [0160.465] CloseHandle (hObject=0x8bc) returned 1 [0160.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e106f0 [0160.476] wcscpy (in: _Dest=0x3e106f0, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0160.476] wcscat (in: _Dest=0x3e106f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt" [0160.476] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\ac3a86-readme.txt")) returned 0xffffffff [0160.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x197c [0160.489] WriteFile (in: hFile=0x197c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbc7fa74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbc7fa74*=0x8b9, lpOverlapped=0x0) returned 1 [0160.491] CloseHandle (hObject=0x197c) returned 1 [0160.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e106f0) returned 1 [0160.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1f8) returned 1 Thread: id = 1520 os_tid = 0x1558 [0148.211] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst")) returned 0x2020 [0148.383] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst", dwFileAttributes=0x20) returned 1 [0150.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x149c [0150.997] GetFileSizeEx (in: hFile=0x149c, lpFileSize=0xc5ff78c | out: lpFileSize=0xc5ff78c*=271360) returned 1 [0150.997] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.997] ReadFile (in: hFile=0x149c, lpBuffer=0xc5ff768, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc5ff778, lpOverlapped=0x0 | out: lpBuffer=0xc5ff768*, lpNumberOfBytesRead=0xc5ff778*=0x4, lpOverlapped=0x0) returned 1 [0150.999] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0150.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0150.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0150.999] NtQuerySystemTime (in: CurrentTime=0xc5ff700 | out: CurrentTime=0xc5ff700*=132482710596432000) returned 0x0 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x5e7b1653 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x69fde32a [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x5585d18e [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x40edd664 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x43a2d2cb [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x4a71aa03 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x1a94e6a9 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x4f8b7ac2 [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x783f6d2d [0150.999] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x1033af93 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x33e04dfb [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x5b586de0 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x72bf4875 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x305b74ee [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x97890ca [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x5f8ced9a [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x49626cf3 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x2d96b074 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x2546d969 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0xc980180 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x6d8d631f [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x78a43e49 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x2b97c2b8 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x2a00a5c7 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x480b4344 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x7fcc3249 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x74ff6aca [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x7c9743bb [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x19e967f6 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x7077333d [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x9a00796 [0151.000] RtlRandomEx (in: Seed=0xc5ff6f8 | out: Seed=0xc5ff6f8) returned 0x26b2e125 [0151.012] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.012] ReadFile (in: hFile=0x149c, lpBuffer=0x6746b38, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesRead=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0151.045] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6570 [0151.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aac0 [0151.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0151.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0151.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0151.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0151.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0151.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0151.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0151.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6570) returned 1 [0151.046] WriteFile (in: hFile=0x149c, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0152.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0152.583] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.583] ReadFile (in: hFile=0x149c, lpBuffer=0x6746b38, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesRead=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0152.583] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fef78 [0152.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0948 [0152.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0152.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0152.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0152.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0152.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0152.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0152.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0152.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fef78) returned 1 [0152.584] WriteFile (in: hFile=0x149c, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0154.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0154.986] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.986] ReadFile (in: hFile=0x149c, lpBuffer=0x6746b38, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesRead=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0154.986] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d59a0 [0154.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d08d0 [0154.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0154.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0154.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0154.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0154.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caf8 [0154.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0154.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0154.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d59a0) returned 1 [0154.987] WriteFile (in: hFile=0x149c, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ff700, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xc5ff700*=0x3c00, lpOverlapped=0x0) returned 1 [0156.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0156.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0156.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0156.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e61a70 [0156.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0156.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0156.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0156.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0156.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d15b8) returned 1 [0156.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16a) returned 0x3e62bd0 [0156.764] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.764] WriteFile (in: hFile=0x149c, lpBuffer=0x3e62bd0*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0xc5ff780, lpOverlapped=0x0 | out: lpBuffer=0x3e62bd0*, lpNumberOfBytesWritten=0xc5ff780*=0x16a, lpOverlapped=0x0) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62bd0) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61a70) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e620b0) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0159.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0159.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0159.978] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" [0159.978] wcscat (in: _Dest=0x697dee0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.ac3a86" [0159.978] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.ac3a86", NtPathName=0xc5ff6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0159.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1320 [0160.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1320) returned 1 [0160.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6953720) returned 1 [0160.452] NtQueryInformationFile (in: FileHandle=0x149c, IoStatusBlock=0xc5ff6d0, FileInformation=0xc5ff6d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5ff6d0, FileInformation=0xc5ff6d8) returned 0x0 [0160.452] NtSetInformationFile (FileHandle=0x149c, IoStatusBlock=0xc5ff6d0, FileInformation=0xc5ff6d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 [0160.468] FlushFileBuffers (hFile=0x149c) returned 1 [0160.472] CloseHandle (hObject=0x149c) returned 1 [0160.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbef8 [0160.479] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0160.479] wcscat (in: _Dest=0x3edbef8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt" [0160.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\ac3a86-readme.txt")) returned 0x20 [0160.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 [0160.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 1521 os_tid = 0x155c [0148.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf")) returned 0x20 [0148.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0148.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.832] GetLastError () returned 0x5 [0148.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0148.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 1522 os_tid = 0x1568 [0148.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf")) returned 0x20 [0148.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0148.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.833] GetLastError () returned 0x5 [0148.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0148.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 1523 os_tid = 0x156c [0148.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf")) returned 0x20 [0148.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0148.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.834] GetLastError () returned 0x5 [0148.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0148.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 1524 os_tid = 0x1570 [0148.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf")) returned 0x20 [0149.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0149.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.236] GetLastError () returned 0x5 [0149.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0149.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 1525 os_tid = 0x1574 [0148.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf")) returned 0x20 [0149.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0149.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.237] GetLastError () returned 0x5 [0149.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0149.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958960) returned 1 Thread: id = 1526 os_tid = 0x1578 [0148.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf")) returned 0x20 [0149.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0149.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.239] GetLastError () returned 0x5 [0149.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0149.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 1527 os_tid = 0x157c [0148.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf")) returned 0x20 [0149.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0149.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.240] GetLastError () returned 0x5 [0149.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0149.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 1528 os_tid = 0x1580 [0148.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf")) returned 0x20 [0149.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0149.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.242] GetLastError () returned 0x5 [0149.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0149.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958b28) returned 1 Thread: id = 1529 os_tid = 0x1584 [0148.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf")) returned 0x20 [0149.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0149.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.243] GetLastError () returned 0x5 [0149.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0149.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958bc0) returned 1 Thread: id = 1530 os_tid = 0x1588 [0148.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf")) returned 0x20 [0149.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0149.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.245] GetLastError () returned 0x5 [0149.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0149.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 1531 os_tid = 0x158c [0148.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf")) returned 0x20 [0149.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0149.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.246] GetLastError () returned 0x5 [0149.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0149.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 Thread: id = 1532 os_tid = 0x1590 [0148.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf")) returned 0x20 [0149.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0149.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.247] GetLastError () returned 0x5 [0149.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0149.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 1533 os_tid = 0x1594 [0148.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf")) returned 0x20 [0149.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0149.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.248] GetLastError () returned 0x5 [0149.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0149.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 1534 os_tid = 0x738 [0148.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf")) returned 0x20 [0149.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0149.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.250] GetLastError () returned 0x5 [0149.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0149.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 1535 os_tid = 0x1598 [0148.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf")) returned 0x20 [0149.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0149.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.251] GetLastError () returned 0x5 [0149.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0149.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 1536 os_tid = 0x159c [0148.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf")) returned 0x20 [0149.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0149.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.253] GetLastError () returned 0x5 [0149.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0149.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958fe8) returned 1 Thread: id = 1537 os_tid = 0x15a0 [0148.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf")) returned 0x20 [0149.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0149.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.254] GetLastError () returned 0x5 [0149.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 Thread: id = 1538 os_tid = 0x15a4 [0148.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf")) returned 0x20 [0149.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0149.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.259] GetLastError () returned 0x5 [0149.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959118) returned 1 Thread: id = 1539 os_tid = 0x15a8 [0148.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf")) returned 0x20 [0149.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0149.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.261] GetLastError () returned 0x5 [0149.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69591b0) returned 1 Thread: id = 1540 os_tid = 0x15ac [0148.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf")) returned 0x20 [0148.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0148.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.393] GetLastError () returned 0x5 [0148.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0148.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 1541 os_tid = 0x15b0 [0148.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf")) returned 0x20 [0148.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0148.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.395] GetLastError () returned 0x5 [0148.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0148.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 1542 os_tid = 0xb7c [0148.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf")) returned 0x20 [0148.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0148.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.400] GetLastError () returned 0x5 [0148.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0148.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 1543 os_tid = 0x15b4 [0148.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20 [0148.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0148.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.402] GetLastError () returned 0x5 [0148.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0148.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 1544 os_tid = 0x15b8 [0148.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20 [0150.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0150.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.158] GetLastError () returned 0x5 [0150.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0150.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 1545 os_tid = 0x15bc [0148.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20 [0150.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0150.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.160] GetLastError () returned 0x5 [0150.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0150.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 1546 os_tid = 0x15c0 [0148.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20 [0150.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0150.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.161] GetLastError () returned 0x5 [0150.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0150.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 1547 os_tid = 0x15e0 [0148.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20 [0150.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0150.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.162] GetLastError () returned 0x5 [0150.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0150.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 1548 os_tid = 0x15e4 [0148.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20 [0150.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0150.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.164] GetLastError () returned 0x5 [0150.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0150.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 1549 os_tid = 0x15e8 [0148.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20 [0150.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0150.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.166] GetLastError () returned 0x5 [0150.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0150.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 1550 os_tid = 0x1600 [0148.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20 [0150.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0150.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.167] GetLastError () returned 0x5 [0150.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0150.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 1551 os_tid = 0x1604 [0148.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20 [0150.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0150.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.169] GetLastError () returned 0x5 [0150.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0150.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 1552 os_tid = 0x1608 [0148.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20 [0150.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0150.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.170] GetLastError () returned 0x5 [0150.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0150.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 1553 os_tid = 0x160c [0148.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20 [0150.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0150.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.172] GetLastError () returned 0x5 [0150.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0150.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 1554 os_tid = 0x1614 [0148.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20 [0150.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0150.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.173] GetLastError () returned 0x5 [0150.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0150.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 1555 os_tid = 0x161c [0148.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20 [0150.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0150.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.176] GetLastError () returned 0x5 [0150.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0150.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 1556 os_tid = 0x1620 [0148.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20 [0150.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0150.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.177] GetLastError () returned 0x5 [0150.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0150.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 1557 os_tid = 0xfc0 [0148.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20 [0150.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0150.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.179] GetLastError () returned 0x5 [0150.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0150.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 1558 os_tid = 0x1628 [0148.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20 [0150.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0150.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.181] GetLastError () returned 0x5 [0150.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0150.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 1559 os_tid = 0x162c [0148.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20 [0150.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0150.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.183] GetLastError () returned 0x5 [0150.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0150.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 1560 os_tid = 0x4f8 [0148.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20 [0150.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0150.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.184] GetLastError () returned 0x5 [0150.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0150.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 1561 os_tid = 0x1630 [0148.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20 [0150.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0150.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.186] GetLastError () returned 0x5 [0150.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0150.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 1562 os_tid = 0x1634 [0148.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20 [0150.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0150.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.188] GetLastError () returned 0x5 [0150.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0150.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 1563 os_tid = 0x1638 [0148.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20 [0150.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0150.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.189] GetLastError () returned 0x5 [0150.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0150.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 1564 os_tid = 0x80c [0148.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20 [0149.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0149.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.269] GetLastError () returned 0x5 [0149.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0149.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 1565 os_tid = 0x1640 [0148.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20 [0149.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0149.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.272] GetLastError () returned 0x5 [0149.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0149.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 1566 os_tid = 0x1644 [0149.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20 [0149.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0149.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.274] GetLastError () returned 0x5 [0149.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0149.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 1567 os_tid = 0x1654 [0149.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg")) returned 0x20 [0149.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.276] GetLastError () returned 0x5 [0149.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 1568 os_tid = 0x1658 [0149.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg")) returned 0x20 [0149.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.278] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.278] GetLastError () returned 0x5 [0149.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69581a8) returned 1 Thread: id = 1569 os_tid = 0x165c [0149.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg")) returned 0x20 [0149.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.280] GetLastError () returned 0x5 [0149.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 1570 os_tid = 0x1660 [0149.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg")) returned 0x20 [0149.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.281] GetLastError () returned 0x5 [0149.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0149.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 1571 os_tid = 0x1670 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0d80 [0149.283] wcscpy (in: _Dest=0x66d0d80, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0149.283] wcscat (in: _Dest=0x66d0d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0149.283] wcscat (in: _Dest=0x66d0d80, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0149.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0149.283] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24a0 [0149.283] wcscmp (_String1=".", _String2=".") returned 0 [0149.283] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.283] wcscmp (_String1="..", _String2=".") returned 1 [0149.283] wcscmp (_String1="..", _String2="..") returned 0 [0149.283] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0149.283] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0149.283] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0149.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e7f0 [0149.283] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0149.283] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0149.283] wcscat (in: _Dest=0x3e0e7f0, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0152.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0152.220] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0152.220] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0152.220] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0152.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e250 [0152.220] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.220] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.220] wcscat (in: _Dest=0x3e0e250, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0152.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0152.221] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0152.221] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0152.222] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0152.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e110 [0152.222] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.222] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.222] wcscat (in: _Dest=0x3e0e110, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0152.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0152.223] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0152.223] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0152.223] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0152.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e316e8 [0152.223] wcscpy (in: _Dest=0x3e316e8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.223] wcscat (in: _Dest=0x3e316e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.223] wcscat (in: _Dest=0x3e316e8, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0152.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e316e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0152.224] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0152.224] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0152.224] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0152.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7738 [0152.224] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.224] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.224] wcscat (in: _Dest=0x2c7738, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0152.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0152.225] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0152.225] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0152.225] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0152.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31488 [0152.226] wcscpy (in: _Dest=0x3e31488, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.226] wcscat (in: _Dest=0x3e31488, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.226] wcscat (in: _Dest=0x3e31488, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0152.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0152.227] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0152.227] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0152.227] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0152.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7558 [0152.227] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.227] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.227] wcscat (in: _Dest=0x2c7558, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0152.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0152.228] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0152.228] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0152.228] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0152.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e318b0 [0152.228] wcscpy (in: _Dest=0x3e318b0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.228] wcscat (in: _Dest=0x3e318b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.228] wcscat (in: _Dest=0x3e318b0, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0152.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e318b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0152.229] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0152.230] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0152.230] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0152.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30778 [0152.230] wcscpy (in: _Dest=0x3e30778, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.230] wcscat (in: _Dest=0x3e30778, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.230] wcscat (in: _Dest=0x3e30778, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0152.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0152.231] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0152.231] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0152.231] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0152.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e305b0 [0152.231] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.231] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.231] wcscat (in: _Dest=0x3e305b0, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0152.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0152.233] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0152.233] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0152.233] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0152.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0152.233] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.233] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.233] wcscat (in: _Dest=0x2c75f8, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0152.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0152.235] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0152.235] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0152.235] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0152.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c72d8 [0152.235] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.235] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.235] wcscat (in: _Dest=0x2c72d8, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0152.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0152.236] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0152.237] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0152.237] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0152.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31948 [0152.237] wcscpy (in: _Dest=0x3e31948, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.237] wcscat (in: _Dest=0x3e31948, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.237] wcscat (in: _Dest=0x3e31948, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0152.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0152.238] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0152.238] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0152.238] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0152.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31520 [0152.238] wcscpy (in: _Dest=0x3e31520, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.239] wcscat (in: _Dest=0x3e31520, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.239] wcscat (in: _Dest=0x3e31520, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0152.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0152.240] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0152.240] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0152.240] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0152.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32198 [0152.240] wcscpy (in: _Dest=0x3e32198, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.240] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.240] wcscat (in: _Dest=0x3e32198, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0152.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0152.242] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0152.242] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0152.242] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0152.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6fb8 [0152.242] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.242] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.242] wcscat (in: _Dest=0x2c6fb8, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0152.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0152.243] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0152.243] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0152.243] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0152.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0152.243] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.243] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.243] wcscat (in: _Dest=0x2c7238, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0152.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0152.245] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0152.245] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0152.245] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0152.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0152.245] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.245] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.245] wcscat (in: _Dest=0x2c7698, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0152.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0152.246] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0152.247] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0152.247] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0152.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31358 [0152.247] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.247] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.247] wcscat (in: _Dest=0x3e31358, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0152.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0152.248] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0152.248] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0152.248] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0152.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e32068 [0152.249] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.249] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.249] wcscat (in: _Dest=0x3e32068, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0152.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc [0152.250] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0152.250] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0152.250] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0152.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7378 [0152.250] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.250] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.250] wcscat (in: _Dest=0x2c7378, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0152.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0152.252] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0152.252] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0152.252] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0152.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30ba0 [0152.252] wcscpy (in: _Dest=0x3e30ba0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.252] wcscat (in: _Dest=0x3e30ba0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.252] wcscat (in: _Dest=0x3e30ba0, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0152.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0152.253] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0152.253] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0152.254] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0152.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31650 [0152.254] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.254] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.254] wcscat (in: _Dest=0x3e31650, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0152.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0152.255] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0152.255] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0152.255] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0152.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30cd0 [0152.255] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.255] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.255] wcscat (in: _Dest=0x3e30cd0, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0152.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0152.887] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0152.887] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0152.887] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0152.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7378 [0152.887] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.887] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.887] wcscat (in: _Dest=0x2c7378, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0156.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0156.621] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0156.621] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0156.621] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0156.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0156.621] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0156.621] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0156.621] wcscat (in: _Dest=0x3e0e390, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0156.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0156.622] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0156.622] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0156.622] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0156.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dcb0 [0156.622] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0156.622] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0156.622] wcscat (in: _Dest=0x3e0dcb0, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0156.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0156.623] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0156.623] FindClose (in: hFindFile=0x66d24a0 | out: hFindFile=0x66d24a0) returned 1 [0156.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0156.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0156.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 Thread: id = 1572 os_tid = 0x1674 [0149.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e35438 [0149.284] wcscpy (in: _Dest=0x3e35438, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0149.284] wcscat (in: _Dest=0x3e35438, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0149.284] wcscat (in: _Dest=0x3e35438, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0149.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0149.284] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0149.284] wcscmp (_String1=".", _String2=".") returned 0 [0149.284] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.284] wcscmp (_String1="..", _String2=".") returned 1 [0149.284] wcscmp (_String1="..", _String2="..") returned 0 [0149.284] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0149.284] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0149.284] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0149.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e1b0 [0149.284] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0149.284] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0149.284] wcscat (in: _Dest=0x3e0e1b0, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0153.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0153.579] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0153.579] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0153.579] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0153.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0f010 [0153.579] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.579] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.580] wcscat (in: _Dest=0x3e0f010, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0153.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0153.581] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0153.581] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0153.581] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0153.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ecf0 [0153.581] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.581] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.581] wcscat (in: _Dest=0x3e0ecf0, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0153.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0153.582] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0153.582] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0153.582] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0153.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0153.583] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.583] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.583] wcscat (in: _Dest=0x69582d8, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0153.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0153.584] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0153.584] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0153.584] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0153.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e890 [0153.584] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.584] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.584] wcscat (in: _Dest=0x3e0e890, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0153.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0153.586] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0153.586] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0153.586] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0153.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957ce8 [0153.586] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.586] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.586] wcscat (in: _Dest=0x6957ce8, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0153.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0153.587] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0153.587] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0153.588] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0153.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0de90 [0153.588] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.588] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.588] wcscat (in: _Dest=0x3e0de90, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0153.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0153.589] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0153.589] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0153.589] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0153.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958960 [0153.589] wcscpy (in: _Dest=0x6958960, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.589] wcscat (in: _Dest=0x6958960, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.589] wcscat (in: _Dest=0x6958960, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0153.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0153.591] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0153.591] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0153.591] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0153.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0153.591] wcscpy (in: _Dest=0x6958370, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.591] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.591] wcscat (in: _Dest=0x6958370, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0153.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0153.593] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0153.593] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0153.593] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0153.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958668 [0153.593] wcscpy (in: _Dest=0x6958668, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.593] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.593] wcscat (in: _Dest=0x6958668, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0153.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0153.594] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0153.594] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0153.594] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0153.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dcb0 [0153.594] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.594] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.594] wcscat (in: _Dest=0x3e0dcb0, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0153.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0153.595] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0153.595] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0153.595] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0153.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dfd0 [0153.595] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.595] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.596] wcscat (in: _Dest=0x3e0dfd0, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0153.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0153.597] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0153.597] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0153.597] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0153.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958700 [0153.597] wcscpy (in: _Dest=0x6958700, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.597] wcscat (in: _Dest=0x6958700, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.597] wcscat (in: _Dest=0x6958700, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0153.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0153.598] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0153.598] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0153.598] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0153.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958798 [0153.598] wcscpy (in: _Dest=0x6958798, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.598] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.598] wcscat (in: _Dest=0x6958798, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0153.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0153.600] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0153.600] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0153.600] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0153.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69584a0 [0153.600] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.600] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.600] wcscat (in: _Dest=0x69584a0, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0153.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0153.601] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0153.601] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0153.601] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0153.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e4d0 [0153.601] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.601] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.601] wcscat (in: _Dest=0x3e0e4d0, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0153.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0153.602] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0153.602] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0153.602] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0153.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e2f0 [0153.603] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.603] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.603] wcscat (in: _Dest=0x3e0e2f0, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0153.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0153.604] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0153.604] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0153.604] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0153.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e750 [0153.604] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.604] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.604] wcscat (in: _Dest=0x3e0e750, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0153.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0153.605] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0153.605] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0153.605] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0153.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958408 [0153.605] wcscpy (in: _Dest=0x6958408, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.605] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.605] wcscat (in: _Dest=0x6958408, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0153.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0153.606] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0153.606] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0153.606] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0153.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69588c8 [0153.607] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.607] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.607] wcscat (in: _Dest=0x69588c8, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0153.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0153.608] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0153.608] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0153.608] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0153.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e430 [0153.608] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.608] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.608] wcscat (in: _Dest=0x3e0e430, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0153.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0153.609] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0153.609] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0153.609] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0153.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69585d0 [0153.609] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.610] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.610] wcscat (in: _Dest=0x69585d0, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0153.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0153.610] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0153.611] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0153.611] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0153.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959378 [0153.611] wcscpy (in: _Dest=0x6959378, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.611] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.611] wcscat (in: _Dest=0x6959378, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0153.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0153.612] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0153.612] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0153.612] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0153.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69592e0 [0153.612] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.612] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.612] wcscat (in: _Dest=0x69592e0, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0153.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0153.613] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0153.613] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0153.613] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0153.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d5d0 [0153.613] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.613] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.613] wcscat (in: _Dest=0x3e0d5d0, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0153.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0153.614] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0153.614] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0153.614] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0153.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d8f0 [0153.614] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.614] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.614] wcscat (in: _Dest=0x3e0d8f0, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0153.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0153.615] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0153.615] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0153.615] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0153.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0da30 [0153.615] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0153.615] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0153.615] wcscat (in: _Dest=0x3e0da30, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0153.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0153.616] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0153.617] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0153.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0153.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0153.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5bf8) returned 1 Thread: id = 1573 os_tid = 0x300 [0149.285] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0149.285] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0149.285] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.285] GetLastError () returned 0x5 [0149.285] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0149.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 1574 os_tid = 0x167c [0149.287] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0149.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0149.287] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.287] GetLastError () returned 0x5 [0149.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0149.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09c30) returned 1 Thread: id = 1575 os_tid = 0x1680 [0149.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36040 [0149.288] wcscpy (in: _Dest=0x3e36040, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0149.288] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0149.288] wcscat (in: _Dest=0x3e36040, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0149.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0149.288] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0149.290] wcscmp (_String1=".", _String2=".") returned 0 [0149.290] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.290] wcscmp (_String1="..", _String2=".") returned 1 [0149.290] wcscmp (_String1="..", _String2="..") returned 0 [0149.290] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0149.290] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0149.290] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0149.290] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0149.290] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0149.290] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0149.290] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0149.290] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0149.291] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0149.291] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0149.291] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0149.291] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0149.291] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0149.291] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0149.291] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0149.291] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0149.291] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0149.291] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0149.291] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0149.291] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0149.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0149.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 [0149.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036bd0) returned 1 Thread: id = 1576 os_tid = 0x930 [0149.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e34c40 [0149.294] wcscpy (in: _Dest=0x3e34c40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0149.294] wcscat (in: _Dest=0x3e34c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0149.294] wcscat (in: _Dest=0x3e34c40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*" [0149.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0149.294] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0150.191] wcscmp (_String1=".", _String2=".") returned 0 [0150.191] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.191] wcscmp (_String1="..", _String2=".") returned 1 [0150.191] wcscmp (_String1="..", _String2="..") returned 0 [0150.191] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47d0310, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe47d0310, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x887094a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0150.191] wcscmp (_String1="rdrmessage.zip", _String2=".") returned 1 [0150.191] wcscmp (_String1="rdrmessage.zip", _String2="..") returned 1 [0150.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0150.191] wcscpy (in: _Dest=0x66db628, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0150.191] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0150.191] wcscat (in: _Dest=0x66db628, _Source="rdrmessage.zip" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0152.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0152.162] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7b19f10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd7b19f10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x7f2b59c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0152.162] wcscmp (_String1="ReaderMessages", _String2=".") returned 1 [0152.162] wcscmp (_String1="ReaderMessages", _String2="..") returned 1 [0152.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0152.163] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0152.163] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0152.163] wcscat (in: _Dest=0x66dbfb8, _Source="ReaderMessages" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" [0152.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0152.164] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0152.164] wcscmp (_String1="Search", _String2=".") returned 1 [0152.164] wcscmp (_String1="Search", _String2="..") returned 1 [0152.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674aab8 [0152.164] wcscpy (in: _Dest=0x674aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0152.164] wcscat (in: _Dest=0x674aab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0152.164] wcscat (in: _Dest=0x674aab8, _Source="Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0152.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0152.165] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0152.165] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0152.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0152.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0152.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 Thread: id = 1577 os_tid = 0x1684 [0149.296] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0149.296] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.296] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.297] GetLastError () returned 0x5 [0149.297] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0149.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 1578 os_tid = 0xd88 [0149.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1328 [0149.298] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\bin\\plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0149.298] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\" [0149.298] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*" [0149.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0149.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0150.192] wcscmp (_String1=".", _String2=".") returned 0 [0150.192] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.192] wcscmp (_String1="..", _String2=".") returned 1 [0150.192] wcscmp (_String1="..", _String2="..") returned 0 [0150.192] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0150.192] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0150.192] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0150.192] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0150.192] wcscmp (_String1="npjp2.dll", _String2=".") returned 1 [0150.192] wcscmp (_String1="npjp2.dll", _String2="..") returned 1 [0150.192] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0150.192] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0150.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0150.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0150.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4d00) returned 1 Thread: id = 1579 os_tid = 0x173c [0149.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg")) returned 0x20 [0150.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.194] GetLastError () returned 0x5 [0150.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 1580 os_tid = 0x56c [0149.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties")) returned 0x20 [0151.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0151.105] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.105] GetLastError () returned 0x5 [0151.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0151.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 Thread: id = 1581 os_tid = 0x177c [0149.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar")) returned 0x20 [0151.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0151.103] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.103] GetLastError () returned 0x5 [0151.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0151.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 1582 os_tid = 0x178c [0149.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7288 [0149.301] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Program Files\\Java\\jre7\\lib\\applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0149.301] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\" [0149.301] wcscat (in: _Dest=0x3ef7288, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\*" [0149.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b9c8 [0149.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0151.101] wcscmp (_String1=".", _String2=".") returned 0 [0151.101] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.101] wcscmp (_String1="..", _String2=".") returned 1 [0151.101] wcscmp (_String1="..", _String2="..") returned 0 [0151.101] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.101] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0151.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b9c8) returned 1 [0151.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 [0151.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7548) returned 1 Thread: id = 1583 os_tid = 0x179c [0149.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties")) returned 0x20 [0151.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0151.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.393] GetLastError () returned 0x5 [0151.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0151.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5808) returned 1 Thread: id = 1584 os_tid = 0x17a0 [0149.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar")) returned 0x20 [0151.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0151.428] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.428] GetLastError () returned 0x5 [0151.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0151.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 1585 os_tid = 0x17a4 [0149.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist")) returned 0x20 [0151.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0151.394] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.394] GetLastError () returned 0x5 [0151.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0151.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 Thread: id = 1586 os_tid = 0x17ac [0149.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3ef7e38 [0149.304] wcscpy (in: _Dest=0x3ef7e38, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0149.304] wcscat (in: _Dest=0x3ef7e38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0149.304] wcscat (in: _Dest=0x3ef7e38, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*" [0149.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697bc30 [0149.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0151.427] wcscmp (_String1=".", _String2=".") returned 0 [0151.427] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.427] wcscmp (_String1="..", _String2=".") returned 1 [0151.427] wcscmp (_String1="..", _String2="..") returned 0 [0151.427] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0151.427] wcscmp (_String1="CIEXYZ.pf", _String2=".") returned 1 [0151.427] wcscmp (_String1="CIEXYZ.pf", _String2="..") returned 1 [0151.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d370 [0151.427] wcscpy (in: _Dest=0x3d8d370, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0151.427] wcscat (in: _Dest=0x3d8d370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0151.427] wcscat (in: _Dest=0x3d8d370, _Source="CIEXYZ.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" [0152.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0152.148] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0152.148] wcscmp (_String1="GRAY.pf", _String2=".") returned 1 [0152.148] wcscmp (_String1="GRAY.pf", _String2="..") returned 1 [0152.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ae8 [0152.149] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0152.149] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0152.149] wcscat (in: _Dest=0x2fe6ae8, _Source="GRAY.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" [0152.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4 [0152.150] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0152.150] wcscmp (_String1="LINEAR_RGB.pf", _String2=".") returned 1 [0152.150] wcscmp (_String1="LINEAR_RGB.pf", _String2="..") returned 1 [0152.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0152.150] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0152.150] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0152.150] wcscat (in: _Dest=0x3f29020, _Source="LINEAR_RGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" [0152.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0152.152] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0152.152] wcscmp (_String1="PYCC.pf", _String2=".") returned 1 [0152.152] wcscmp (_String1="PYCC.pf", _String2="..") returned 1 [0152.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0152.152] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0152.152] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0152.152] wcscat (in: _Dest=0x2fe6908, _Source="PYCC.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" [0152.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0 [0152.154] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0152.154] wcscmp (_String1="sRGB.pf", _String2=".") returned 1 [0152.154] wcscmp (_String1="sRGB.pf", _String2="..") returned 1 [0152.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0152.154] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0152.154] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0152.154] wcscat (in: _Dest=0x2fe1328, _Source="sRGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" [0152.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0152.156] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0152.156] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0152.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697bc30) returned 1 [0152.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e38) returned 1 [0152.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e627e0) returned 1 Thread: id = 1587 os_tid = 0x17b0 [0149.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties")) returned 0x20 [0151.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0151.396] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.396] GetLastError () returned 0x5 [0151.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0151.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 Thread: id = 1588 os_tid = 0xd0c [0149.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data")) returned 0x20 [0151.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0151.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.397] GetLastError () returned 0x5 [0151.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0151.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 1589 os_tid = 0x264 [0149.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef75a0 [0149.307] wcscpy (in: _Dest=0x3ef75a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0149.307] wcscat (in: _Dest=0x3ef75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0149.307] wcscat (in: _Dest=0x3ef75a0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*" [0149.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697be98 [0149.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0151.750] wcscmp (_String1=".", _String2=".") returned 0 [0151.750] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.750] wcscmp (_String1="..", _String2=".") returned 1 [0151.750] wcscmp (_String1="..", _String2="..") returned 0 [0151.750] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0151.750] wcscmp (_String1="ffjcext.zip", _String2=".") returned 1 [0151.750] wcscmp (_String1="ffjcext.zip", _String2="..") returned 1 [0151.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29bf0 [0151.750] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0151.750] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0151.750] wcscat (in: _Dest=0x3f29bf0, _Source="ffjcext.zip" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" [0156.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0156.270] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0156.270] wcscmp (_String1="jqs", _String2=".") returned 1 [0156.270] wcscmp (_String1="jqs", _String2="..") returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0c68 [0156.270] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.270] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.270] wcscat (in: _Dest=0x2fe0c68, _Source="jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0156.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0156.271] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0156.271] wcscmp (_String1="messages.properties", _String2=".") returned 1 [0156.271] wcscmp (_String1="messages.properties", _String2="..") returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bb38 [0156.271] wcscpy (in: _Dest=0x674bb38, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.271] wcscat (in: _Dest=0x674bb38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.271] wcscat (in: _Dest=0x674bb38, _Source="messages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" [0156.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bb38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0156.272] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0156.272] wcscmp (_String1="messages_de.properties", _String2=".") returned 1 [0156.273] wcscmp (_String1="messages_de.properties", _String2="..") returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27030 [0156.273] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.273] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.273] wcscat (in: _Dest=0x3f27030, _Source="messages_de.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" [0156.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0156.274] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0156.274] wcscmp (_String1="messages_es.properties", _String2=".") returned 1 [0156.274] wcscmp (_String1="messages_es.properties", _String2="..") returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27140 [0156.274] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.274] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.274] wcscat (in: _Dest=0x3f27140, _Source="messages_es.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" [0156.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0156.275] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0156.275] wcscmp (_String1="messages_fr.properties", _String2=".") returned 1 [0156.275] wcscmp (_String1="messages_fr.properties", _String2="..") returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26e98 [0156.275] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.275] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.275] wcscat (in: _Dest=0x3f26e98, _Source="messages_fr.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" [0156.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0156.276] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0156.276] wcscmp (_String1="messages_it.properties", _String2=".") returned 1 [0156.276] wcscmp (_String1="messages_it.properties", _String2="..") returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f272d8 [0156.276] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.276] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.276] wcscat (in: _Dest=0x3f272d8, _Source="messages_it.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" [0156.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0156.277] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0156.278] wcscmp (_String1="messages_ja.properties", _String2=".") returned 1 [0156.278] wcscmp (_String1="messages_ja.properties", _String2="..") returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f266a0 [0156.278] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.278] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.278] wcscat (in: _Dest=0x3f266a0, _Source="messages_ja.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" [0156.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0156.279] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0156.279] wcscmp (_String1="messages_ko.properties", _String2=".") returned 1 [0156.279] wcscmp (_String1="messages_ko.properties", _String2="..") returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26508 [0156.279] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.279] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.279] wcscat (in: _Dest=0x3f26508, _Source="messages_ko.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" [0156.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0156.280] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0156.280] wcscmp (_String1="messages_pt_BR.properties", _String2=".") returned 1 [0156.280] wcscmp (_String1="messages_pt_BR.properties", _String2="..") returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26618 [0156.280] wcscpy (in: _Dest=0x3f26618, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.280] wcscat (in: _Dest=0x3f26618, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.280] wcscat (in: _Dest=0x3f26618, _Source="messages_pt_BR.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" [0156.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0156.281] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0156.281] wcscmp (_String1="messages_sv.properties", _String2=".") returned 1 [0156.281] wcscmp (_String1="messages_sv.properties", _String2="..") returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26728 [0156.281] wcscpy (in: _Dest=0x3f26728, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.281] wcscat (in: _Dest=0x3f26728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.281] wcscat (in: _Dest=0x3f26728, _Source="messages_sv.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" [0156.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0156.282] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0156.282] wcscmp (_String1="messages_zh_CN.properties", _String2=".") returned 1 [0156.282] wcscmp (_String1="messages_zh_CN.properties", _String2="..") returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26480 [0156.282] wcscpy (in: _Dest=0x3f26480, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.282] wcscat (in: _Dest=0x3f26480, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.282] wcscat (in: _Dest=0x3f26480, _Source="messages_zh_CN.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" [0156.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0156.283] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0156.283] wcscmp (_String1="messages_zh_HK.properties", _String2=".") returned 1 [0156.283] wcscmp (_String1="messages_zh_HK.properties", _String2="..") returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f263f8 [0156.283] wcscpy (in: _Dest=0x3f263f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.283] wcscat (in: _Dest=0x3f263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.283] wcscat (in: _Dest=0x3f263f8, _Source="messages_zh_HK.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" [0156.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0156.284] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0156.284] wcscmp (_String1="messages_zh_TW.properties", _String2=".") returned 1 [0156.284] wcscmp (_String1="messages_zh_TW.properties", _String2="..") returned 1 [0156.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26370 [0156.284] wcscpy (in: _Dest=0x3f26370, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.284] wcscat (in: _Dest=0x3f26370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.284] wcscat (in: _Dest=0x3f26370, _Source="messages_zh_TW.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" [0156.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0156.285] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0156.285] wcscmp (_String1="splash.gif", _String2=".") returned 1 [0156.285] wcscmp (_String1="splash.gif", _String2="..") returned 1 [0156.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f294f0 [0156.285] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0156.286] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0156.286] wcscat (in: _Dest=0x3f294f0, _Source="splash.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" [0156.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0156.287] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0156.287] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697be98) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75a0) returned 1 [0156.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 Thread: id = 1590 os_tid = 0x17bc [0149.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar")) returned 0x20 [0151.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0151.423] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.424] GetLastError () returned 0x5 [0151.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0151.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 1591 os_tid = 0x17c0 [0149.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d5018 [0149.308] wcscpy (in: _Dest=0x66d5018, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0149.308] wcscat (in: _Dest=0x66d5018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0149.308] wcscat (in: _Dest=0x66d5018, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\*" [0149.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c100 [0149.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0151.749] wcscmp (_String1=".", _String2=".") returned 0 [0151.749] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.749] wcscmp (_String1="..", _String2=".") returned 1 [0151.749] wcscmp (_String1="..", _String2="..") returned 0 [0151.749] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x148e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge.jar", cAlternateFileName="ACCESS~2.JAR")) returned 1 [0151.749] wcscmp (_String1="access-bridge.jar", _String2=".") returned 1 [0151.749] wcscmp (_String1="access-bridge.jar", _String2="..") returned 1 [0151.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1aac0 [0151.750] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0151.750] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0151.750] wcscat (in: _Dest=0x3f1aac0, _Source="access-bridge.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" [0155.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0155.546] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0155.546] wcscmp (_String1="dnsns.jar", _String2=".") returned 1 [0155.546] wcscmp (_String1="dnsns.jar", _String2="..") returned 1 [0155.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3eef540 [0155.546] wcscpy (in: _Dest=0x3eef540, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.546] wcscat (in: _Dest=0x3eef540, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.546] wcscat (in: _Dest=0x3eef540, _Source="dnsns.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" [0155.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0155.547] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0155.547] wcscmp (_String1="jaccess.jar", _String2=".") returned 1 [0155.547] wcscmp (_String1="jaccess.jar", _String2="..") returned 1 [0155.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eef338 [0155.547] wcscpy (in: _Dest=0x3eef338, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.547] wcscat (in: _Dest=0x3eef338, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.547] wcscat (in: _Dest=0x3eef338, _Source="jaccess.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" [0155.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0155.549] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6994b1a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6994b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69997460, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0155.549] wcscmp (_String1="localedata.jar", _String2=".") returned 1 [0155.549] wcscmp (_String1="localedata.jar", _String2="..") returned 1 [0155.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f292c0 [0155.549] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.549] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.549] wcscat (in: _Dest=0x3f292c0, _Source="localedata.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" [0155.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f292c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0155.550] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0155.550] wcscmp (_String1="meta-index", _String2=".") returned 1 [0155.550] wcscmp (_String1="meta-index", _String2="..") returned 1 [0155.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3eef4d8 [0155.550] wcscpy (in: _Dest=0x3eef4d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.550] wcscat (in: _Dest=0x3eef4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.550] wcscat (in: _Dest=0x3eef4d8, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" [0155.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0155.552] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0155.552] wcscmp (_String1="sunec.jar", _String2=".") returned 1 [0155.552] wcscmp (_String1="sunec.jar", _String2="..") returned 1 [0155.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd3e0 [0155.552] wcscpy (in: _Dest=0x66cd3e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.552] wcscat (in: _Dest=0x66cd3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.552] wcscat (in: _Dest=0x66cd3e0, _Source="sunec.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" [0155.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0155.553] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0155.553] wcscmp (_String1="sunjce_provider.jar", _String2=".") returned 1 [0155.553] wcscmp (_String1="sunjce_provider.jar", _String2="..") returned 1 [0155.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d07e0 [0155.553] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.553] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.553] wcscat (in: _Dest=0x66d07e0, _Source="sunjce_provider.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" [0155.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d07e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0155.554] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0155.555] wcscmp (_String1="sunmscapi.jar", _String2=".") returned 1 [0155.555] wcscmp (_String1="sunmscapi.jar", _String2="..") returned 1 [0155.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f291e0 [0155.555] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.555] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.555] wcscat (in: _Dest=0x3f291e0, _Source="sunmscapi.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" [0155.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f291e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0155.556] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0155.556] wcscmp (_String1="sunpkcs11.jar", _String2=".") returned 1 [0155.556] wcscmp (_String1="sunpkcs11.jar", _String2="..") returned 1 [0155.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29090 [0155.556] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.556] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.556] wcscat (in: _Dest=0x3f29090, _Source="sunpkcs11.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" [0155.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0155.558] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0155.558] wcscmp (_String1="zipfs.jar", _String2=".") returned 1 [0155.558] wcscmp (_String1="zipfs.jar", _String2="..") returned 1 [0155.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x66cd448 [0155.558] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0155.558] wcscat (in: _Dest=0x66cd448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0155.558] wcscat (in: _Dest=0x66cd448, _Source="zipfs.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" [0155.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66cd448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0155.559] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0155.559] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0155.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c100) returned 1 [0155.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5018) returned 1 [0155.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61a70) returned 1 Thread: id = 1592 os_tid = 0xdfc [0149.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties")) returned 0x20 [0151.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0151.398] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.398] GetLastError () returned 0x5 [0151.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0151.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f78) returned 1 Thread: id = 1593 os_tid = 0xa14 [0149.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc")) returned 0x20 [0151.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0151.399] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.399] GetLastError () returned 0x5 [0151.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0151.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 1594 os_tid = 0xbbc [0149.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src")) returned 0x20 [0151.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0151.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.401] GetLastError () returned 0x5 [0151.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0151.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e096b0) returned 1 Thread: id = 1595 os_tid = 0x3f0 [0149.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4ca8 [0149.311] wcscpy (in: _Dest=0x66d4ca8, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0149.311] wcscat (in: _Dest=0x66d4ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0149.311] wcscat (in: _Dest=0x66d4ca8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*" [0149.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c368 [0149.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0151.747] wcscmp (_String1=".", _String2=".") returned 0 [0151.747] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.747] wcscmp (_String1="..", _String2=".") returned 1 [0151.747] wcscmp (_String1="..", _String2="..") returned 0 [0151.747] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0151.748] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2=".") returned 1 [0151.748] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2="..") returned 1 [0151.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0148 [0151.748] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0151.748] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0151.748] wcscat (in: _Dest=0x66f0148, _Source="LucidaBrightDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" [0159.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340 [0159.740] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0159.740] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2=".") returned 1 [0159.740] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2="..") returned 1 [0159.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d58740 [0159.740] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.740] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.741] wcscat (in: _Dest=0x3d58740, _Source="LucidaBrightDemiItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" [0159.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0159.741] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0159.742] wcscmp (_String1="LucidaBrightItalic.ttf", _String2=".") returned 1 [0159.742] wcscmp (_String1="LucidaBrightItalic.ttf", _String2="..") returned 1 [0159.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbbf8 [0159.742] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.742] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.742] wcscat (in: _Dest=0x3edbbf8, _Source="LucidaBrightItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" [0159.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0159.743] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0159.743] wcscmp (_String1="LucidaBrightRegular.ttf", _String2=".") returned 1 [0159.743] wcscmp (_String1="LucidaBrightRegular.ttf", _String2="..") returned 1 [0159.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a368 [0159.743] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.743] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.743] wcscat (in: _Dest=0x3d5a368, _Source="LucidaBrightRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" [0159.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0159.744] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0159.744] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2=".") returned 1 [0159.744] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2="..") returned 1 [0159.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb8f8 [0159.744] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.744] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.744] wcscat (in: _Dest=0x3edb8f8, _Source="LucidaSansDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" [0159.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0159.745] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0159.745] wcscmp (_String1="LucidaSansRegular.ttf", _String2=".") returned 1 [0159.745] wcscmp (_String1="LucidaSansRegular.ttf", _String2="..") returned 1 [0159.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edae78 [0159.745] wcscpy (in: _Dest=0x3edae78, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.745] wcscat (in: _Dest=0x3edae78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.745] wcscat (in: _Dest=0x3edae78, _Source="LucidaSansRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" [0159.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0159.746] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0159.746] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2=".") returned 1 [0159.746] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2="..") returned 1 [0159.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66effb0 [0159.746] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.746] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.746] wcscat (in: _Dest=0x66effb0, _Source="LucidaTypewriterBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" [0159.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0159.747] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0159.747] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2=".") returned 1 [0159.747] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2="..") returned 1 [0159.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x356370 [0159.747] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0159.747] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0159.747] wcscat (in: _Dest=0x356370, _Source="LucidaTypewriterRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" [0159.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0159.748] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0159.748] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0159.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c368) returned 1 [0159.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4ca8) returned 1 [0159.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 1596 os_tid = 0x23c [0149.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x66d4e60 [0149.312] wcscpy (in: _Dest=0x66d4e60, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0149.312] wcscat (in: _Dest=0x66d4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0149.312] wcscat (in: _Dest=0x66d4e60, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\*" [0149.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c5d0 [0149.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0151.408] wcscmp (_String1=".", _String2=".") returned 0 [0151.408] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.409] wcscmp (_String1="..", _String2=".") returned 1 [0151.409] wcscmp (_String1="..", _String2="..") returned 0 [0151.409] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0151.409] wcscmp (_String1="jvm.cfg", _String2=".") returned 1 [0151.409] wcscmp (_String1="jvm.cfg", _String2="..") returned 1 [0151.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0151.409] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0151.409] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0151.409] wcscat (in: _Dest=0x2fe6548, _Source="jvm.cfg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" [0152.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0152.146] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0152.146] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0152.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c5d0) returned 1 [0152.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4e60) returned 1 [0152.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61d90) returned 1 Thread: id = 1597 os_tid = 0x3dc [0149.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x66d4d58 [0149.313] wcscpy (in: _Dest=0x66d4d58, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0149.313] wcscat (in: _Dest=0x66d4d58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0149.313] wcscat (in: _Dest=0x66d4d58, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\*" [0149.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c838 [0149.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0151.408] wcscmp (_String1=".", _String2=".") returned 0 [0151.408] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.408] wcscmp (_String1="..", _String2=".") returned 1 [0151.408] wcscmp (_String1="..", _String2="..") returned 0 [0151.408] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0151.408] wcscmp (_String1="cursors", _String2=".") returned 1 [0151.408] wcscmp (_String1="cursors", _String2="..") returned 1 [0151.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8be50 [0151.408] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0151.408] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0151.408] wcscat (in: _Dest=0x3d8be50, _Source="cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0152.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0152.143] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0152.143] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0152.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c838) returned 1 [0152.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4d58) returned 1 [0152.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7b20) returned 1 Thread: id = 1598 os_tid = 0x784 [0149.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties")) returned 0x20 [0151.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0151.402] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.402] GetLastError () returned 0x5 [0151.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0151.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6138) returned 1 Thread: id = 1599 os_tid = 0x640 [0149.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar")) returned 0x20 [0151.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0151.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.407] GetLastError () returned 0x5 [0151.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0151.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 Thread: id = 1600 os_tid = 0x4f0 [0149.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar")) returned 0x20 [0151.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0151.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.405] GetLastError () returned 0x5 [0151.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0151.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e90) returned 1 Thread: id = 1601 os_tid = 0x8d0 [0149.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x66d5120 [0149.320] wcscpy (in: _Dest=0x66d5120, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0149.320] wcscat (in: _Dest=0x66d5120, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0149.320] wcscat (in: _Dest=0x66d5120, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*" [0149.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697caa0 [0149.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0151.404] wcscmp (_String1=".", _String2=".") returned 0 [0151.405] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.405] wcscmp (_String1="..", _String2=".") returned 1 [0151.405] wcscmp (_String1="..", _String2="..") returned 0 [0151.405] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0151.405] wcscmp (_String1="default.jfc", _String2=".") returned 1 [0151.405] wcscmp (_String1="default.jfc", _String2="..") returned 1 [0151.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bf20 [0151.405] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0151.405] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0151.405] wcscat (in: _Dest=0x3d8bf20, _Source="default.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" [0155.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0155.655] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0155.655] wcscmp (_String1="profile.jfc", _String2=".") returned 1 [0155.655] wcscmp (_String1="profile.jfc", _String2="..") returned 1 [0155.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8be50 [0155.656] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0155.656] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0155.656] wcscat (in: _Dest=0x3d8be50, _Source="profile.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" [0155.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0155.657] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0155.657] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0155.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697caa0) returned 1 [0155.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5120) returned 1 [0155.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62600) returned 1 Thread: id = 1602 os_tid = 0x8f0 [0149.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar")) returned 0x20 [0150.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0150.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.200] GetLastError () returned 0x5 [0150.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0150.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c28) returned 1 Thread: id = 1603 os_tid = 0x914 [0149.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar")) returned 0x20 [0150.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0150.202] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.202] GetLastError () returned 0x5 [0150.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0150.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 1604 os_tid = 0x740 [0150.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar")) returned 0x20 [0151.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0151.403] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.403] GetLastError () returned 0x5 [0151.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0151.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7cd8) returned 1 Thread: id = 1605 os_tid = 0x964 Thread: id = 1612 os_tid = 0x974 [0150.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc678 [0150.205] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0150.205] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0150.205] wcscat (in: _Dest=0x66dc678, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*" [0150.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0150.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0150.205] wcscmp (_String1=".", _String2=".") returned 0 [0150.205] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.205] wcscmp (_String1="..", _String2=".") returned 1 [0150.205] wcscmp (_String1="..", _String2="..") returned 0 [0150.206] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0150.206] wcscmp (_String1="enu-dsk", _String2=".") returned 1 [0150.206] wcscmp (_String1="enu-dsk", _String2="..") returned 1 [0150.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0150.206] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0150.206] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0150.206] wcscat (in: _Dest=0x3e0e390, _Source="enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0153.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0153.635] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0153.635] wcscmp (_String1="MSTTSFrontendENU.dll", _String2=".") returned 1 [0153.635] wcscmp (_String1="MSTTSFrontendENU.dll", _String2="..") returned 1 [0153.635] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0153.635] wcscmp (_String1="MSTTSLoc.dll.mui", _String2=".") returned 1 [0153.635] wcscmp (_String1="MSTTSLoc.dll.mui", _String2="..") returned 1 [0153.635] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0153.635] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0153.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0153.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 [0153.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 Thread: id = 1613 os_tid = 0xacc [0150.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0150.206] wcscpy (in: _Dest=0x3330a8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0150.206] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0150.206] wcscat (in: _Dest=0x3330a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0150.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cd08 [0150.206] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0150.207] wcscmp (_String1=".", _String2=".") returned 0 [0150.207] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.207] wcscmp (_String1="..", _String2=".") returned 1 [0150.207] wcscmp (_String1="..", _String2="..") returned 0 [0150.207] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0150.207] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0150.207] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0150.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e484a8 [0150.207] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0150.207] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0150.207] wcscat (in: _Dest=0x3e484a8, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0153.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0153.637] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0153.637] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0153.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cd08) returned 1 [0153.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 [0153.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 1614 os_tid = 0xb00 [0150.208] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0150.618] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0150.618] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.618] GetLastError () returned 0x5 [0150.618] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0150.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0a30) returned 1 Thread: id = 1615 os_tid = 0xc4c [0150.209] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0150.620] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0150.620] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.620] GetLastError () returned 0x5 [0150.620] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0150.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 1616 os_tid = 0xb24 [0150.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df08a0 [0150.210] wcscpy (in: _Dest=0x3df08a0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0150.210] wcscat (in: _Dest=0x3df08a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0150.210] wcscat (in: _Dest=0x3df08a0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0150.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0150.210] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0150.211] wcscmp (_String1=".", _String2=".") returned 0 [0150.211] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.211] wcscmp (_String1="..", _String2=".") returned 1 [0150.211] wcscmp (_String1="..", _String2="..") returned 0 [0150.211] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0150.211] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0150.211] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0150.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0150.211] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0150.211] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0150.211] wcscat (in: _Dest=0x2c8568, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0152.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0152.168] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0152.168] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0152.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0152.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df08a0) returned 1 [0152.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 1617 os_tid = 0x6d4 [0150.212] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0150.621] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0150.621] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.621] GetLastError () returned 0x5 [0150.621] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0150.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0968) returned 1 Thread: id = 1618 os_tid = 0xe00 [0150.212] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\q5vheg7iufeb-k31v8m3.swf")) returned 0x20 [0150.212] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf", dwFileAttributes=0x20) returned 1 [0150.213] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\q5vheg7iufeb-k31v8m3.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12bc [0150.213] GetFileSizeEx (in: hFile=0x12bc, lpFileSize=0x643fa5c | out: lpFileSize=0x643fa5c*=88361) returned 1 [0150.213] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x15925, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.213] ReadFile (in: hFile=0x12bc, lpBuffer=0x643fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x643fa48, lpOverlapped=0x0 | out: lpBuffer=0x643fa38*, lpNumberOfBytesRead=0x643fa48*=0x4, lpOverlapped=0x0) returned 1 [0150.215] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.216] NtQuerySystemTime (in: CurrentTime=0x643f9d0 | out: CurrentTime=0x643f9d0*=132482710588632000) returned 0x0 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x6f175d0b [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x1a24a5a4 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x65bbed95 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x64b2d6f7 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x7a0bb227 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x2d16a3c1 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x539864ec [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x573b355e [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x3e953be4 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x145cf701 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x7062f0d1 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x24ebbe78 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x38d877e1 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x77a1c808 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x9604422 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x7c94b025 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x28dabbbf [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x3285392e [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x58c94b3b [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x1f48e720 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x32018ac3 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x70e7284e [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x156bdb53 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x59555298 [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x676c9b4e [0150.216] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x4cdfbf7f [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x5ec33b88 [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x76cd7e8c [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0xff91fa [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x4d8dd2d1 [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x4d8bca0e [0150.217] RtlRandomEx (in: Seed=0x643f9c8 | out: Seed=0x643f9c8) returned 0x23cf1318 [0150.225] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.226] ReadFile (in: hFile=0x12bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.226] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1e70 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1e70) returned 1 [0150.227] WriteFile (in: hFile=0x12bc, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0150.472] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.472] ReadFile (in: hFile=0x12bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.472] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4f500 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0150.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0150.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0150.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0150.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0150.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f500) returned 1 [0150.473] WriteFile (in: hFile=0x12bc, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0150.477] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x11d29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.477] ReadFile (in: hFile=0x12bc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.477] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x11d29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff5a8 [0150.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0150.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0150.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0150.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0150.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0150.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0150.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0150.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0150.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.478] WriteFile (in: hFile=0x12bc, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x643f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0x643f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0150.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d920 [0150.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66ff128 [0150.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0150.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0150.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0150.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8f8) returned 1 [0150.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e63618 [0150.480] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.480] WriteFile (in: hFile=0x12bc, lpBuffer=0x3e63618*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x643fa50, lpOverlapped=0x0 | out: lpBuffer=0x3e63618*, lpNumberOfBytesWritten=0x643fa50*=0x162, lpOverlapped=0x0) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63618) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff128) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0150.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0150.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0150.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea81d8 [0150.494] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf" [0150.494] wcscat (in: _Dest=0x3ea81d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf.ac3a86" [0150.494] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf.ac3a86", NtPathName=0x643f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\q5vheg7iUFEb-k31v8M3.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f96e8 [0150.510] FlushFileBuffers (hFile=0x12bc) returned 1 [0151.307] CloseHandle (hObject=0x12bc) returned 1 [0151.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48580 [0151.615] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" [0151.615] wcscat (in: _Dest=0x3e48580, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt" [0151.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\ac3a86-readme.txt")) returned 0xffffffff [0151.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xabc [0151.632] WriteFile (in: hFile=0xabc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x643f9e4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x643f9e4*=0x8b9, lpOverlapped=0x0) returned 1 [0151.855] CloseHandle (hObject=0xabc) returned 1 [0151.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 [0151.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 1619 os_tid = 0xc48 [0150.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\ssqwdt8j-rdrixyln5y.mp4")) returned 0x20 [0150.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4", dwFileAttributes=0x20) returned 1 [0150.228] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\ssqwdt8j-rdrixyln5y.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1320 [0150.228] GetFileSizeEx (in: hFile=0x1320, lpFileSize=0x662fcdc | out: lpFileSize=0x662fcdc*=35582) returned 1 [0150.228] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x8afa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.228] ReadFile (in: hFile=0x1320, lpBuffer=0x662fcb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x662fcc8, lpOverlapped=0x0 | out: lpBuffer=0x662fcb8*, lpNumberOfBytesRead=0x662fcc8*=0x4, lpOverlapped=0x0) returned 1 [0150.230] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0150.230] NtQuerySystemTime (in: CurrentTime=0x662fc50 | out: CurrentTime=0x662fc50*=132482710588788000) returned 0x0 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x6a9c92a2 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0xc791ea [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x3a5d1439 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0xee74ca2 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x6d223344 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x43d06574 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x78b4ec27 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x6e7ea365 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x6cdeac63 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x10a744b2 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x1c81993e [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0xfdb051 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x4b2e617a [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x36fbd7a9 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x73b921bd [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x1661a7ce [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x7be43e06 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x5237b7c [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x1924a0d6 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x5d524e40 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x377b56f5 [0150.230] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x7b10209f [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x5cbd0129 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x28ad627b [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x3be628d8 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x49f3a346 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x26b36322 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x709c62b3 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x437481d0 [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x3a4321cf [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x74187d3e [0150.231] RtlRandomEx (in: Seed=0x662fc48 | out: Seed=0x662fc48) returned 0x4cde84cd [0150.243] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.243] ReadFile (in: hFile=0x1320, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x662fc50, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x662fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0150.243] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1570 [0150.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b420 [0150.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0150.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0150.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0150.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0150.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0150.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1570) returned 1 [0150.244] WriteFile (in: hFile=0x1320, lpBuffer=0x69838f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x662fc50, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesWritten=0x662fc50*=0x3c00, lpOverlapped=0x0) returned 1 [0150.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0150.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0150.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66fe2d0 [0150.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0150.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x66ff638 [0150.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0150.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0150.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0150.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0150.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff5a8) returned 1 [0150.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55278 [0150.476] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.476] WriteFile (in: hFile=0x1320, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x662fcd0, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x662fcd0*=0x120, lpOverlapped=0x0) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff638) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0150.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0150.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea82c8 [0150.492] wcscpy (in: _Dest=0x3ea82c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4" [0150.492] wcscat (in: _Dest=0x3ea82c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4.ac3a86" [0150.492] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4.ac3a86", NtPathName=0x662fc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\sSQWdt8j-RDRIxyLn5y.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0150.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e15c70 [0150.508] FlushFileBuffers (hFile=0x1320) returned 1 [0151.307] CloseHandle (hObject=0x1320) returned 1 [0151.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48658 [0151.623] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\" [0151.623] wcscat (in: _Dest=0x3e48658, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt" [0151.623] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\jP0cA0DUPWZ\\HOTCgmAeNBHzL\\L6PZVFE7mpFrEYrW3L2\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\jp0ca0dupwz\\hotcgmaenbhzl\\l6pzvfe7mpfreyrw3l2\\ac3a86-readme.txt")) returned 0x20 [0151.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 [0151.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 1620 os_tid = 0x608 [0150.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b420 [0150.244] wcscpy (in: _Dest=0x3f1b420, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0150.245] wcscat (in: _Dest=0x3f1b420, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\" [0150.245] wcscat (in: _Dest=0x3f1b420, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0150.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0150.245] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0150.245] wcscmp (_String1=".", _String2=".") returned 0 [0150.245] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.245] wcscmp (_String1="..", _String2=".") returned 1 [0150.245] wcscmp (_String1="..", _String2="..") returned 0 [0150.245] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.245] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0150.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0150.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0150.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 Thread: id = 1621 os_tid = 0x1018 [0150.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5488 [0150.247] wcscpy (in: _Dest=0x66e5488, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0150.247] wcscat (in: _Dest=0x66e5488, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\" [0150.247] wcscat (in: _Dest=0x66e5488, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0150.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0150.247] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0150.247] wcscmp (_String1=".", _String2=".") returned 0 [0150.247] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.247] wcscmp (_String1="..", _String2=".") returned 1 [0150.247] wcscmp (_String1="..", _String2="..") returned 0 [0150.247] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.247] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0150.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0150.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 [0150.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 Thread: id = 1622 os_tid = 0x1020 [0150.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e110 [0150.249] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0150.249] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0150.249] wcscat (in: _Dest=0x3e0e110, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*" [0150.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0150.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0150.250] wcscmp (_String1=".", _String2=".") returned 0 [0150.250] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.250] wcscmp (_String1="..", _String2=".") returned 1 [0150.250] wcscmp (_String1="..", _String2="..") returned 0 [0150.250] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1 [0150.250] wcscmp (_String1="Synchronization.rll", _String2=".") returned 1 [0150.250] wcscmp (_String1="Synchronization.rll", _String2="..") returned 1 [0150.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df07d8 [0150.250] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0150.250] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0150.250] wcscat (in: _Dest=0x3df07d8, _Source="Synchronization.rll" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" [0152.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0152.170] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 0 [0152.170] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0152.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0152.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 [0152.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 1623 os_tid = 0x1024 [0150.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif")) returned 0x20 [0153.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0153.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.771] GetLastError () returned 0x5 [0153.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0153.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 Thread: id = 1624 os_tid = 0x1028 [0150.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif")) returned 0x20 [0151.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0151.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.766] GetLastError () returned 0x5 [0153.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0153.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 1625 os_tid = 0x102c [0150.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif")) returned 0x20 [0153.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0153.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.773] GetLastError () returned 0x5 [0153.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0153.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 1626 os_tid = 0x1030 [0150.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif")) returned 0x20 [0153.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0153.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.769] GetLastError () returned 0x5 [0153.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0153.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 1627 os_tid = 0x1038 [0150.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif")) returned 0x20 [0153.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0153.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.774] GetLastError () returned 0x5 [0153.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0153.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 1628 os_tid = 0x103c [0150.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif")) returned 0x20 [0153.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0153.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.775] GetLastError () returned 0x5 [0153.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0153.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 1629 os_tid = 0x1040 [0150.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif")) returned 0x20 [0153.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0153.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.777] GetLastError () returned 0x5 [0153.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0153.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 1630 os_tid = 0x104c [0150.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif")) returned 0x20 [0153.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0153.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.778] GetLastError () returned 0x5 [0153.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0153.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 1631 os_tid = 0x105c [0150.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif")) returned 0x20 [0153.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0153.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.779] GetLastError () returned 0x5 [0153.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0153.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 1632 os_tid = 0x1060 [0150.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif")) returned 0x20 [0153.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0153.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.781] GetLastError () returned 0x5 [0153.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0153.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 1633 os_tid = 0x1064 [0150.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif")) returned 0x20 [0153.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0153.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.782] GetLastError () returned 0x5 [0153.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0153.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 1634 os_tid = 0x1068 [0150.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif")) returned 0x20 [0153.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0153.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.783] GetLastError () returned 0x5 [0153.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0153.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 1635 os_tid = 0x106c [0150.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif")) returned 0x20 [0153.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0153.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.767] GetLastError () returned 0x5 [0153.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0153.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d688) returned 1 Thread: id = 1636 os_tid = 0x1070 [0150.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif")) returned 0x20 [0153.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0153.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.784] GetLastError () returned 0x5 [0153.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0153.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 1637 os_tid = 0x1074 [0150.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif")) returned 0x20 [0153.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0153.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.357] GetLastError () returned 0x5 [0153.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0153.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 1638 os_tid = 0x1078 [0150.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif")) returned 0x20 [0153.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0153.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.786] GetLastError () returned 0x5 [0153.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0153.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dc70) returned 1 Thread: id = 1639 os_tid = 0x107c [0150.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif")) returned 0x20 [0153.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0153.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.787] GetLastError () returned 0x5 [0153.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0153.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x325320) returned 1 Thread: id = 1640 os_tid = 0x1080 [0150.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif")) returned 0x20 [0153.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0153.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.788] GetLastError () returned 0x5 [0153.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0153.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326430) returned 1 Thread: id = 1641 os_tid = 0x1084 [0150.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif")) returned 0x20 [0153.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0153.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.789] GetLastError () returned 0x5 [0153.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0153.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326580) returned 1 Thread: id = 1642 os_tid = 0x1088 [0150.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif")) returned 0x20 [0153.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0153.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.791] GetLastError () returned 0x5 [0153.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0153.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3251d0) returned 1 Thread: id = 1643 os_tid = 0x108c [0150.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif")) returned 0x20 [0153.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0153.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.323] GetLastError () returned 0x5 [0153.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0153.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 1644 os_tid = 0x1090 [0150.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif")) returned 0x20 [0153.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0153.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.792] GetLastError () returned 0x5 [0153.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0153.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dd90) returned 1 Thread: id = 1645 os_tid = 0x1094 [0150.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif")) returned 0x20 [0153.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0153.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.793] GetLastError () returned 0x5 [0153.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0153.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 1646 os_tid = 0x1098 [0150.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif")) returned 0x20 [0153.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0153.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.794] GetLastError () returned 0x5 [0153.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0153.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 1647 os_tid = 0x109c [0150.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif")) returned 0x20 [0153.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0153.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.799] GetLastError () returned 0x5 [0153.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0153.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 1648 os_tid = 0x10e4 [0150.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif")) returned 0x20 [0153.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0153.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.797] GetLastError () returned 0x5 [0153.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0153.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 1649 os_tid = 0x10e8 [0150.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif")) returned 0x20 [0153.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0153.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.311] GetLastError () returned 0x5 [0153.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0153.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 1650 os_tid = 0x10ec [0150.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif")) returned 0x20 [0153.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0153.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.796] GetLastError () returned 0x5 [0153.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0153.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e180) returned 1 Thread: id = 1651 os_tid = 0x10f0 [0150.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif")) returned 0x20 [0153.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0153.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.770] GetLastError () returned 0x5 [0153.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0153.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 1652 os_tid = 0x10f4 [0150.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini")) returned 0x20 [0151.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.433] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.433] GetLastError () returned 0x5 [0151.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59730) returned 1 Thread: id = 1653 os_tid = 0x10f8 [0150.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 0x20 [0151.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0151.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.434] GetLastError () returned 0x5 [0151.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0151.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 1654 os_tid = 0x10fc [0150.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini")) returned 0x20 [0150.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.627] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.627] GetLastError () returned 0x5 [0150.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 1655 os_tid = 0x1100 [0150.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 0x20 [0150.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0150.628] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.628] GetLastError () returned 0x5 [0150.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0150.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 1656 os_tid = 0x1104 [0150.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini")) returned 0x20 [0150.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.631] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.631] GetLastError () returned 0x5 [0150.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 1657 os_tid = 0x1108 [0150.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 0x20 [0150.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0150.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.633] GetLastError () returned 0x5 [0150.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0150.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1658 os_tid = 0x110c [0150.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini")) returned 0x20 [0150.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.634] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.635] GetLastError () returned 0x5 [0150.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 1659 os_tid = 0x1110 [0150.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 0x20 [0150.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0150.636] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.636] GetLastError () returned 0x5 [0150.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0150.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 1660 os_tid = 0x1114 [0150.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini")) returned 0x20 [0150.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.637] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.638] GetLastError () returned 0x5 [0150.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 1661 os_tid = 0x1118 [0150.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 0x20 [0150.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0150.639] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.639] GetLastError () returned 0x5 [0150.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0150.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1662 os_tid = 0x111c [0150.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini")) returned 0x20 [0150.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.641] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.641] GetLastError () returned 0x5 [0150.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 1663 os_tid = 0x1120 [0150.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 0x20 [0151.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0151.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.131] GetLastError () returned 0x5 [0151.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0151.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 1664 os_tid = 0x1124 [0150.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini")) returned 0x20 [0150.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.643] GetLastError () returned 0x5 [0150.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 1665 os_tid = 0x1128 [0150.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 0x20 [0150.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0150.647] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.647] GetLastError () returned 0x5 [0150.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0150.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 1666 os_tid = 0x112c [0150.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini")) returned 0x20 [0150.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.648] GetLastError () returned 0x5 [0150.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 1667 os_tid = 0x1130 [0150.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 0x20 [0150.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0150.650] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.650] GetLastError () returned 0x5 [0150.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0150.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 1668 os_tid = 0x1134 [0150.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini")) returned 0x20 [0150.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.652] GetLastError () returned 0x5 [0150.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 1669 os_tid = 0x1138 [0150.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 0x20 [0150.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0150.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.653] GetLastError () returned 0x5 [0150.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0150.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 1670 os_tid = 0x113c [0150.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini")) returned 0x20 [0150.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.655] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.655] GetLastError () returned 0x5 [0150.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 1671 os_tid = 0x1150 [0150.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 0x20 [0150.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0150.657] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.657] GetLastError () returned 0x5 [0150.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0150.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 1672 os_tid = 0x1154 [0150.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini")) returned 0x20 [0150.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.661] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.661] GetLastError () returned 0x5 [0150.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0150.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 1673 os_tid = 0x1158 [0150.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 0x20 [0150.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0150.662] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.662] GetLastError () returned 0x5 [0150.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0150.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 1674 os_tid = 0x115c [0150.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29480 [0150.665] wcscpy (in: _Dest=0x3f29480, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0150.665] wcscat (in: _Dest=0x3f29480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0150.665] wcscat (in: _Dest=0x3f29480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*" [0150.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0150.665] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0150.667] wcscmp (_String1=".", _String2=".") returned 0 [0150.667] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.667] wcscmp (_String1="..", _String2=".") returned 1 [0150.667] wcscmp (_String1="..", _String2="..") returned 0 [0150.667] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0150.667] wcscmp (_String1="10.0", _String2=".") returned 1 [0150.667] wcscmp (_String1="10.0", _String2="..") returned 1 [0150.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f292c0 [0150.667] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0150.667] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0150.667] wcscat (in: _Dest=0x3f292c0, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0152.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f292c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0152.105] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0152.105] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0152.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0152.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 [0152.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef03e0) returned 1 Thread: id = 1675 os_tid = 0x1160 [0150.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b510 [0150.667] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0150.667] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0150.667] wcscat (in: _Dest=0x3f1b510, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*" [0150.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0150.668] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0151.756] wcscmp (_String1=".", _String2=".") returned 0 [0151.756] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.756] wcscmp (_String1="..", _String2=".") returned 1 [0151.756] wcscmp (_String1="..", _String2="..") returned 0 [0151.756] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0151.756] wcscmp (_String1="AssetCache", _String2=".") returned 1 [0151.756] wcscmp (_String1="AssetCache", _String2="..") returned 1 [0151.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eef38 [0151.756] wcscpy (in: _Dest=0x66eef38, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0151.756] wcscat (in: _Dest=0x66eef38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0151.756] wcscat (in: _Dest=0x66eef38, _Source="AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0157.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eef38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0157.171] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0157.171] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0157.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0157.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0157.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d10) returned 1 Thread: id = 1676 os_tid = 0x1164 [0150.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f293a0 [0150.668] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0150.668] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\" [0150.668] wcscat (in: _Dest=0x3f293a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*" [0150.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0150.668] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0151.442] wcscmp (_String1=".", _String2=".") returned 0 [0151.442] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.442] wcscmp (_String1="..", _String2=".") returned 1 [0151.442] wcscmp (_String1="..", _String2="..") returned 0 [0151.442] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.442] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0151.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0151.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 [0151.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c30) returned 1 Thread: id = 1677 os_tid = 0x1168 [0150.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b2b8 [0150.669] wcscpy (in: _Dest=0x3f1b2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0150.669] wcscat (in: _Dest=0x3f1b2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0150.669] wcscat (in: _Dest=0x3f1b2b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*" [0150.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0150.669] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0151.445] wcscmp (_String1=".", _String2=".") returned 0 [0151.445] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.445] wcscmp (_String1="..", _String2=".") returned 1 [0151.445] wcscmp (_String1="..", _String2="..") returned 0 [0151.445] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0151.445] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0151.445] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0151.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d59730 [0151.446] wcscpy (in: _Dest=0x3d59730, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0151.446] wcscat (in: _Dest=0x3d59730, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0151.446] wcscat (in: _Dest=0x3d59730, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0159.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d59730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0159.738] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0159.738] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0159.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0159.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0159.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23b50) returned 1 Thread: id = 1678 os_tid = 0x116c [0150.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1afe8 [0150.670] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0150.670] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\" [0150.670] wcscat (in: _Dest=0x3f1afe8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*" [0150.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0150.670] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0151.443] wcscmp (_String1=".", _String2=".") returned 0 [0151.444] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.444] wcscmp (_String1="..", _String2=".") returned 1 [0151.444] wcscmp (_String1="..", _String2="..") returned 0 [0151.444] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.444] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0151.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0151.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 Thread: id = 1679 os_tid = 0x1170 [0150.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\an1aallixo.png")) returned 0x20 [0150.670] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png", dwFileAttributes=0x20) returned 1 [0150.670] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\an1aallixo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14b8 [0150.671] GetFileSizeEx (in: hFile=0x14b8, lpFileSize=0xaadfe54 | out: lpFileSize=0xaadfe54*=86405) returned 1 [0150.671] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x15181, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.671] ReadFile (in: hFile=0x14b8, lpBuffer=0xaadfe30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaadfe40, lpOverlapped=0x0 | out: lpBuffer=0xaadfe30*, lpNumberOfBytesRead=0xaadfe40*=0x4, lpOverlapped=0x0) returned 1 [0150.672] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0150.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0150.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.672] NtQuerySystemTime (in: CurrentTime=0xaadfdc8 | out: CurrentTime=0xaadfdc8*=132482710593156000) returned 0x0 [0150.672] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x2e9ea3fe [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x59112f12 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x36a579f5 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x552b6e6 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x36bd2525 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x205f7f7d [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x1519f611 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x3876caf1 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x3c3e10b8 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x7b097b65 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x7cdaf941 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x7eaa2301 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x75f249b1 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x5aa75adf [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x5aa55c75 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x57ccd4a [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x3cbf8192 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x5857e0be [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x782ba071 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x65895351 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x5f8d98b1 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x73da5e67 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x1846aca9 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x6f5aa1 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x39728a1d [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x65bd717f [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x3ba90f69 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x118a5efc [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0xe9b8437 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x5a6e2146 [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0xf084efc [0150.673] RtlRandomEx (in: Seed=0xaadfdc0 | out: Seed=0xaadfdc0) returned 0x389a7920 [0150.682] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.682] ReadFile (in: hFile=0x14b8, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0150.682] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fdf70 [0150.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aa48 [0150.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0150.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0150.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0150.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0150.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0150.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0150.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdf70) returned 1 [0150.683] WriteFile (in: hFile=0x14b8, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0151.136] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.136] ReadFile (in: hFile=0x14b8, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.136] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe4c8 [0151.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d512f0 [0151.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0151.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0151.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0151.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0151.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0151.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0151.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0151.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe4c8) returned 1 [0151.137] WriteFile (in: hFile=0x14b8, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0151.439] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x11585, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.439] ReadFile (in: hFile=0x14b8, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.439] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x11585, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d17f8 [0151.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1aef8 [0151.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0151.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0151.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0151.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0151.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0151.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0151.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d17f8) returned 1 [0151.440] WriteFile (in: hFile=0x14b8, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaadfdc8, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xaadfdc8*=0x3c00, lpOverlapped=0x0) returned 1 [0151.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0151.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d030 [0151.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0151.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19d90 [0151.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0151.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e80fa0 [0151.755] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.755] WriteFile (in: hFile=0x14b8, lpBuffer=0x3e80fa0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xaadfe48, lpOverlapped=0x0 | out: lpBuffer=0x3e80fa0*, lpNumberOfBytesWritten=0xaadfe48*=0x14e, lpOverlapped=0x0) returned 1 [0155.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fa0) returned 1 [0155.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19d90) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0155.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0155.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9a68 [0155.092] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png" [0155.092] wcscat (in: _Dest=0x2c9a68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png.ac3a86" [0155.092] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png.ac3a86", NtPathName=0xaadfdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\An1AAlLIxo.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad560 [0155.228] FlushFileBuffers (hFile=0x14b8) returned 1 [0155.373] CloseHandle (hObject=0x14b8) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30126a0 [0155.374] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0155.374] wcscat (in: _Dest=0x30126a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" [0155.374] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\ac3a86-readme.txt")) returned 0x20 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 1680 os_tid = 0x1174 [0150.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\keyxg5748tubayvgs.bmp")) returned 0x20 [0150.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp", dwFileAttributes=0x20) returned 1 [0150.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\keyxg5748tubayvgs.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14bc [0150.685] GetFileSizeEx (in: hFile=0x14bc, lpFileSize=0xa96facc | out: lpFileSize=0xa96facc*=4517) returned 1 [0150.685] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x11a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.685] ReadFile (in: hFile=0x14bc, lpBuffer=0xa96faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa96fab8, lpOverlapped=0x0 | out: lpBuffer=0xa96faa8*, lpNumberOfBytesRead=0xa96fab8*=0x4, lpOverlapped=0x0) returned 1 [0150.687] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0150.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0150.687] NtQuerySystemTime (in: CurrentTime=0xa96fa40 | out: CurrentTime=0xa96fa40*=132482710593312000) returned 0x0 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3e8d2d74 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x2381510b [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x79b600a7 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x6175c808 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x49d2618a [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3cf6ce8b [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x202f2397 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x7fb1f494 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x5c989d65 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0xceeb7c1 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x6e43775e [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x1cd7781 [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3923b07a [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x696d06ac [0150.687] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x7133f3f4 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x43c3a9b9 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3a47690 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x5dcd9cb3 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x34dfd12a [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x6f3544f1 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0xb36a217 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3d38cd9c [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x4f352405 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x1de4328b [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3f5ce74c [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x16a3a31 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x3194c0cc [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x70813ce3 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x71f3d5b1 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x17371430 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x5da899f5 [0150.688] RtlRandomEx (in: Seed=0xa96fa38 | out: Seed=0xa96fa38) returned 0x79b1410 [0150.699] ReadFile (in: hFile=0x14bc, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0x11a5, lpNumberOfBytesRead=0xa96fa34, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0xa96fa34*=0x11a5, lpOverlapped=0x0) returned 1 [0150.699] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.699] WriteFile (in: hFile=0x14bc, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x11a5, lpNumberOfBytesWritten=0xa96fa38, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0xa96fa38*=0x11a5, lpOverlapped=0x0) returned 1 [0151.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0151.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcacd8 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0151.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe000) returned 1 [0151.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e808b8 [0151.138] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.138] WriteFile (in: hFile=0x14bc, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa96fac0, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0xa96fac0*=0x11c, lpOverlapped=0x0) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e807f8) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e808b8) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0151.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0151.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0151.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea81d8 [0151.884] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp" [0151.884] wcscat (in: _Dest=0x3ea81d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp.ac3a86" [0151.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp.ac3a86", NtPathName=0xa96fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\KEYXG5748tUbayvgS.bmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0151.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f96e8 [0151.887] FlushFileBuffers (hFile=0x14bc) returned 1 [0152.586] CloseHandle (hObject=0x14bc) returned 1 [0155.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30120b8 [0155.054] wcscpy (in: _Dest=0x30120b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0155.054] wcscat (in: _Dest=0x30120b8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" [0155.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\ac3a86-readme.txt")) returned 0xffffffff [0155.076] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe64 [0155.209] WriteFile (in: hFile=0xe64, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa96fa54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa96fa54*=0x8b9, lpOverlapped=0x0) returned 1 [0155.211] CloseHandle (hObject=0xe64) returned 1 [0155.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30120b8) returned 1 [0155.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 1681 os_tid = 0x1184 [0150.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\turk3mltmdzrx8ju.jpg")) returned 0x20 [0150.701] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg", dwFileAttributes=0x20) returned 1 [0150.701] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\turk3mltmdzrx8ju.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1584 [0150.701] GetFileSizeEx (in: hFile=0x1584, lpFileSize=0x9c5fc3c | out: lpFileSize=0x9c5fc3c*=74506) returned 1 [0150.701] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x12306, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.701] ReadFile (in: hFile=0x1584, lpBuffer=0x9c5fc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c5fc28, lpOverlapped=0x0 | out: lpBuffer=0x9c5fc18*, lpNumberOfBytesRead=0x9c5fc28*=0x4, lpOverlapped=0x0) returned 1 [0150.703] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0150.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.703] NtQuerySystemTime (in: CurrentTime=0x9c5fbb0 | out: CurrentTime=0x9c5fbb0*=132482710593468000) returned 0x0 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x18721546 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x6faa9641 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x73af85a7 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x678afb20 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x1433b960 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x597cb504 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x2aad8b6a [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x1f78577 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x5bf482f9 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x3e6fa9a3 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x5c582403 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x5f03e4fe [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x47fa80d4 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x74db72e7 [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x6966efb [0150.703] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x74373174 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x66b3c089 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x37db3084 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x38a7165 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x43c4bc40 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x6f46ecb2 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x115004d3 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x69461f33 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x7910b3e3 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x78dd5e81 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x352f78c3 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x30463220 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x2e4126c2 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x4d52763b [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x682a3b74 [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x6260015d [0150.704] RtlRandomEx (in: Seed=0x9c5fba8 | out: Seed=0x9c5fba8) returned 0x44455209 [0150.713] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.713] ReadFile (in: hFile=0x1584, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9c5fbb0, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0x9c5fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.713] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe120 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67212e8 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0150.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0150.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe120) returned 1 [0150.714] WriteFile (in: hFile=0x1584, lpBuffer=0x67212e8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9c5fbb0, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesWritten=0x9c5fbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0151.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0151.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80778 [0151.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0151.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80938 [0151.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca260 [0151.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0151.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0151.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0151.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe000) returned 1 [0151.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54dd8 [0151.140] SetFilePointerEx (in: hFile=0x1584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.140] WriteFile (in: hFile=0x1584, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x9c5fc30, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x9c5fc30*=0x11a, lpOverlapped=0x0) returned 1 [0153.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0153.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80938) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80778) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0153.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea81d8 [0153.035] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg" [0153.035] wcscat (in: _Dest=0x3ea81d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg.ac3a86" [0153.035] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg.ac3a86", NtPathName=0x9c5fba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\TURk3mlTMdzrX8ju.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0153.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e15c70 [0155.225] FlushFileBuffers (hFile=0x1584) returned 1 [0155.372] CloseHandle (hObject=0x1584) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30126a0 [0155.372] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0155.372] wcscat (in: _Dest=0x30126a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" [0155.372] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\ac3a86-readme.txt")) returned 0x20 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 1682 os_tid = 0x11e4 [0150.716] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\unwq5nuw_o8txzr.png")) returned 0x20 [0150.716] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png", dwFileAttributes=0x20) returned 1 [0150.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\unwq5nuw_o8txzr.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe64 [0150.716] GetFileSizeEx (in: hFile=0xe64, lpFileSize=0x82ffec4 | out: lpFileSize=0x82ffec4*=39701) returned 1 [0150.717] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x9b11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.717] ReadFile (in: hFile=0xe64, lpBuffer=0x82ffea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x82ffeb0, lpOverlapped=0x0 | out: lpBuffer=0x82ffea0*, lpNumberOfBytesRead=0x82ffeb0*=0x4, lpOverlapped=0x0) returned 1 [0150.719] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0150.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.719] NtQuerySystemTime (in: CurrentTime=0x82ffe38 | out: CurrentTime=0x82ffe38*=132482710593624000) returned 0x0 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x1176a1af [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x7d8f050d [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x4e3d3982 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0xae7c2b9 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x3a8b1072 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x6cef70c7 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x5e951135 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x49fef2ec [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x4280780 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x55c9377e [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x7675a01f [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x1c261245 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0xb3e02a9 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x55780ded [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x6687e851 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x7cbf62a0 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x51b9e5da [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x46a5492a [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x29968b0c [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x8ceca35 [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x6f544ecd [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x41d51dee [0150.719] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x645c73b0 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x139f2f70 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x3f6b4619 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x618b2323 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0xec09389 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x3ae43199 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x566479b8 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x58ae04c7 [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x2c2ef40b [0150.720] RtlRandomEx (in: Seed=0x82ffe30 | out: Seed=0x82ffe30) returned 0x5014db4e [0150.729] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.729] ReadFile (in: hFile=0xe64, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x82ffe38, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0x82ffe38*=0x3c00, lpOverlapped=0x0) returned 1 [0150.730] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe1f8 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6728af8 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0150.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0150.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe1f8) returned 1 [0150.730] WriteFile (in: hFile=0xe64, lpBuffer=0x6728af8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x82ffe38, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesWritten=0x82ffe38*=0x3c00, lpOverlapped=0x0) returned 1 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0151.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e808f8 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0151.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e807b8 [0151.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0151.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0151.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe000) returned 1 [0151.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54498 [0151.142] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.142] WriteFile (in: hFile=0xe64, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x82ffeb8, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x82ffeb8*=0x118, lpOverlapped=0x0) returned 1 [0155.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0155.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e807b8) returned 1 [0155.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0155.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e808f8) returned 1 [0155.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0155.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0155.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0155.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0155.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56668 [0155.020] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png" [0155.020] wcscat (in: _Dest=0x3d56668, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png.ac3a86") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png.ac3a86" [0155.020] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png.ac3a86", NtPathName=0x82ffe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\UnwQ5NUW_O8TxZR.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15a70 [0155.205] FlushFileBuffers (hFile=0xe64) returned 1 [0155.207] CloseHandle (hObject=0xe64) returned 1 [0155.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30126a0 [0155.208] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\" [0155.208] wcscat (in: _Dest=0x30126a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" [0155.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\PWqGp-oId4NZOMp\\zkZHRgWeke1\\H5TQDPaZD6Kl6h_mV4t\\Jt1JXxvtiJ\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\pwqgp-oid4nzomp\\zkzhrgweke1\\h5tqdpazd6kl6h_mv4t\\jt1jxxvtij\\ac3a86-readme.txt")) returned 0x20 [0155.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 [0155.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 1683 os_tid = 0x11ec [0150.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20 [0150.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0150.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.732] GetLastError () returned 0x5 [0150.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0150.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 1684 os_tid = 0x11f0 [0150.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30e00 [0150.734] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0150.734] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0150.734] wcscat (in: _Dest=0x3e30e00, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*" [0150.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0150.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0151.143] wcscmp (_String1=".", _String2=".") returned 0 [0151.143] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.143] wcscmp (_String1="..", _String2=".") returned 1 [0151.143] wcscmp (_String1="..", _String2="..") returned 0 [0151.143] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0151.143] wcscmp (_String1="CAT", _String2=".") returned 1 [0151.143] wcscmp (_String1="CAT", _String2="..") returned 1 [0151.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eb10 [0151.143] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0151.144] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0151.144] wcscat (in: _Dest=0x3e0eb10, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0153.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0153.639] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0153.639] wcscmp (_String1="CHS", _String2=".") returned 1 [0153.639] wcscmp (_String1="CHS", _String2="..") returned 1 [0153.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0153.639] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.639] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.639] wcscat (in: _Dest=0x3e0eed0, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0153.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0153.640] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0153.640] wcscmp (_String1="CHT", _String2=".") returned 1 [0153.640] wcscmp (_String1="CHT", _String2="..") returned 1 [0153.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d2b0 [0153.640] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.640] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.640] wcscat (in: _Dest=0x3e0d2b0, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0153.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0153.641] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0153.641] wcscmp (_String1="CZE", _String2=".") returned 1 [0153.641] wcscmp (_String1="CZE", _String2="..") returned 1 [0153.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0db70 [0153.641] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.642] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.642] wcscat (in: _Dest=0x3e0db70, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0153.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0153.642] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0153.643] wcscmp (_String1="DAN", _String2=".") returned 1 [0153.643] wcscmp (_String1="DAN", _String2="..") returned 1 [0153.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e110 [0153.643] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.643] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.643] wcscat (in: _Dest=0x3e0e110, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0153.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0153.644] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0153.644] wcscmp (_String1="DEU", _String2=".") returned 1 [0153.644] wcscmp (_String1="DEU", _String2="..") returned 1 [0153.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e250 [0153.644] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.644] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.644] wcscat (in: _Dest=0x3e0e250, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0153.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0153.645] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0153.645] wcscmp (_String1="ENU", _String2=".") returned 1 [0153.645] wcscmp (_String1="ENU", _String2="..") returned 1 [0153.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e7f0 [0153.645] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.645] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.645] wcscat (in: _Dest=0x3e0e7f0, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0153.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0153.646] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0153.646] wcscmp (_String1="ESP", _String2=".") returned 1 [0153.646] wcscmp (_String1="ESP", _String2="..") returned 1 [0153.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0f0b0 [0153.646] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.646] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.646] wcscat (in: _Dest=0x3e0f0b0, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0153.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0153.647] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0153.647] wcscmp (_String1="EUQ", _String2=".") returned 1 [0153.647] wcscmp (_String1="EUQ", _String2="..") returned 1 [0153.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0153.648] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.648] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.648] wcscat (in: _Dest=0x3e0dc10, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0153.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0153.649] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0153.649] wcscmp (_String1="FRA", _String2=".") returned 1 [0153.649] wcscmp (_String1="FRA", _String2="..") returned 1 [0153.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0153.649] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.649] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.649] wcscat (in: _Dest=0x2c7698, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0153.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0153.650] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0153.650] wcscmp (_String1="HRV", _String2=".") returned 1 [0153.650] wcscmp (_String1="HRV", _String2="..") returned 1 [0153.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0153.650] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.651] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.651] wcscat (in: _Dest=0x2c7238, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0153.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0153.652] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0153.652] wcscmp (_String1="HUN", _String2=".") returned 1 [0153.652] wcscmp (_String1="HUN", _String2="..") returned 1 [0153.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c6fb8 [0153.652] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.652] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.652] wcscat (in: _Dest=0x2c6fb8, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0153.653] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0153.653] wcscmp (_String1="ITA", _String2=".") returned 1 [0153.653] wcscmp (_String1="ITA", _String2="..") returned 1 [0153.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c72d8 [0153.653] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.653] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.653] wcscat (in: _Dest=0x2c72d8, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0153.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0153.654] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0153.654] wcscmp (_String1="JPN", _String2=".") returned 1 [0153.654] wcscmp (_String1="JPN", _String2="..") returned 1 [0153.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0153.654] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.654] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.654] wcscat (in: _Dest=0x2c75f8, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0153.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0153.655] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0153.655] wcscmp (_String1="KOR", _String2=".") returned 1 [0153.655] wcscmp (_String1="KOR", _String2="..") returned 1 [0153.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7558 [0153.656] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.656] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.656] wcscat (in: _Dest=0x2c7558, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0153.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0153.657] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0153.657] wcscmp (_String1="NLD", _String2=".") returned 1 [0153.657] wcscmp (_String1="NLD", _String2="..") returned 1 [0153.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7738 [0153.657] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.657] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.657] wcscat (in: _Dest=0x2c7738, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0153.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0153.658] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0153.658] wcscmp (_String1="NOR", _String2=".") returned 1 [0153.658] wcscmp (_String1="NOR", _String2="..") returned 1 [0153.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c6e78 [0153.658] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.658] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.658] wcscat (in: _Dest=0x2c6e78, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0153.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0153.659] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0153.659] wcscmp (_String1="POL", _String2=".") returned 1 [0153.659] wcscmp (_String1="POL", _String2="..") returned 1 [0153.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0153.659] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.659] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.659] wcscat (in: _Dest=0x2c7198, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0153.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0153.660] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0153.660] wcscmp (_String1="PTB", _String2=".") returned 1 [0153.660] wcscmp (_String1="PTB", _String2="..") returned 1 [0153.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfce8 [0153.661] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.661] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.661] wcscat (in: _Dest=0x69bfce8, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0153.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0153.662] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0153.662] wcscmp (_String1="RUM", _String2=".") returned 1 [0153.662] wcscmp (_String1="RUM", _String2="..") returned 1 [0153.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfd88 [0153.662] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.662] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.662] wcscat (in: _Dest=0x69bfd88, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0153.663] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0153.663] wcscmp (_String1="RUS", _String2=".") returned 1 [0153.663] wcscmp (_String1="RUS", _String2="..") returned 1 [0153.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfe28 [0153.663] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.663] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.663] wcscat (in: _Dest=0x69bfe28, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0153.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0153.664] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0153.664] wcscmp (_String1="SKY", _String2=".") returned 1 [0153.664] wcscmp (_String1="SKY", _String2="..") returned 1 [0153.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfec8 [0153.664] wcscpy (in: _Dest=0x69bfec8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.664] wcscat (in: _Dest=0x69bfec8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.664] wcscat (in: _Dest=0x69bfec8, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0153.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69bfec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0153.665] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0153.665] wcscmp (_String1="SLV", _String2=".") returned 1 [0153.665] wcscmp (_String1="SLV", _String2="..") returned 1 [0153.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bff68 [0153.665] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.666] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.666] wcscat (in: _Dest=0x69bff68, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0153.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0153.667] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0153.667] wcscmp (_String1="SUO", _String2=".") returned 1 [0153.667] wcscmp (_String1="SUO", _String2="..") returned 1 [0153.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0008 [0153.667] wcscpy (in: _Dest=0x69c0008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.667] wcscat (in: _Dest=0x69c0008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.667] wcscat (in: _Dest=0x69c0008, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0153.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0153.668] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0153.668] wcscmp (_String1="SVE", _String2=".") returned 1 [0153.668] wcscmp (_String1="SVE", _String2="..") returned 1 [0153.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c00a8 [0153.668] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.668] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.668] wcscat (in: _Dest=0x69c00a8, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0153.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0153.669] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0153.669] wcscmp (_String1="TUR", _String2=".") returned 1 [0153.669] wcscmp (_String1="TUR", _String2="..") returned 1 [0153.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0148 [0153.669] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.669] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.669] wcscat (in: _Dest=0x69c0148, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0153.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0153.671] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0153.671] wcscmp (_String1="UKR", _String2=".") returned 1 [0153.671] wcscmp (_String1="UKR", _String2="..") returned 1 [0153.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c01e8 [0153.671] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.671] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.671] wcscat (in: _Dest=0x69c01e8, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0153.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0153.672] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0153.672] wcscmp (_String1="Words.pdf", _String2=".") returned 1 [0153.672] wcscmp (_String1="Words.pdf", _String2="..") returned 1 [0153.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697ea08 [0153.672] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0153.672] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0153.672] wcscat (in: _Dest=0x697ea08, _Source="Words.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" [0153.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0153.673] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0153.673] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0153.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0153.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 [0153.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 1685 os_tid = 0x11f8 [0150.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc")) returned 0x20 [0150.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0150.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.737] GetLastError () returned 0x5 [0150.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0150.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 1686 os_tid = 0x11fc [0150.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcaf8 [0150.739] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0150.739] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0150.739] wcscat (in: _Dest=0x66dcaf8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*" [0150.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0150.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0151.144] wcscmp (_String1=".", _String2=".") returned 0 [0151.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.144] wcscmp (_String1="..", _String2=".") returned 1 [0151.144] wcscmp (_String1="..", _String2="..") returned 0 [0151.145] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0151.145] wcscmp (_String1="AdobePDF417.pmp", _String2=".") returned 1 [0151.145] wcscmp (_String1="AdobePDF417.pmp", _String2="..") returned 1 [0151.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cff8 [0151.145] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0151.145] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0151.145] wcscat (in: _Dest=0x3e5cff8, _Source="AdobePDF417.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" [0152.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0152.037] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0152.037] wcscmp (_String1="DataMatrix.pmp", _String2=".") returned 1 [0152.037] wcscmp (_String1="DataMatrix.pmp", _String2="..") returned 1 [0152.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e810 [0152.037] wcscpy (in: _Dest=0x697e810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0152.037] wcscat (in: _Dest=0x697e810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0152.037] wcscat (in: _Dest=0x697e810, _Source="DataMatrix.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" [0152.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0152.038] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0152.039] wcscmp (_String1="QRCode.pmp", _String2=".") returned 1 [0152.039] wcscmp (_String1="QRCode.pmp", _String2="..") returned 1 [0152.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f0b0 [0152.039] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0152.039] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0152.039] wcscat (in: _Dest=0x3e0f0b0, _Source="QRCode.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" [0152.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0152.040] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0152.040] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0152.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0152.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 [0152.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 1687 os_tid = 0x1204 [0150.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg")) returned 0x20 [0150.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.740] GetLastError () returned 0x5 [0150.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31520) returned 1 Thread: id = 1688 os_tid = 0x120c [0150.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg")) returned 0x20 [0150.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.742] GetLastError () returned 0x5 [0150.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31948) returned 1 Thread: id = 1689 os_tid = 0x1224 [0150.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg")) returned 0x20 [0150.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.743] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.744] GetLastError () returned 0x5 [0150.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 1690 os_tid = 0x1230 [0150.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg")) returned 0x20 [0150.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.745] GetLastError () returned 0x5 [0150.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30778) returned 1 Thread: id = 1691 os_tid = 0x1234 [0150.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg")) returned 0x20 [0150.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.751] GetLastError () returned 0x5 [0150.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e318b0) returned 1 Thread: id = 1692 os_tid = 0x1238 [0150.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg")) returned 0x20 [0150.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.755] GetLastError () returned 0x5 [0150.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31488) returned 1 Thread: id = 1693 os_tid = 0x123c [0150.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg")) returned 0x20 [0150.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.757] GetLastError () returned 0x5 [0150.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 1694 os_tid = 0x1240 [0150.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg")) returned 0x20 [0150.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.758] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.758] GetLastError () returned 0x5 [0150.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 1695 os_tid = 0x1244 [0150.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg")) returned 0x20 [0150.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.760] GetLastError () returned 0x5 [0150.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 1696 os_tid = 0x1248 [0150.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg")) returned 0x20 [0150.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.761] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.762] GetLastError () returned 0x5 [0150.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 1697 os_tid = 0x124c [0150.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg")) returned 0x20 [0150.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.763] GetLastError () returned 0x5 [0150.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 1698 os_tid = 0x1250 [0150.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg")) returned 0x20 [0150.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.766] GetLastError () returned 0x5 [0150.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 1699 os_tid = 0x1254 [0150.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg")) returned 0x20 [0150.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.768] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.768] GetLastError () returned 0x5 [0150.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0150.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 1700 os_tid = 0x1258 [0150.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf")) returned 0x20 [0153.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0153.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.461] GetLastError () returned 0x5 [0155.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0155.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959410) returned 1 Thread: id = 1701 os_tid = 0x125c [0150.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf")) returned 0x20 [0153.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0153.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.482] GetLastError () returned 0x5 [0156.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0156.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 1702 os_tid = 0x1260 [0150.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf")) returned 0x20 [0156.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0156.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.850] GetLastError () returned 0x5 [0156.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0156.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 1703 os_tid = 0x1264 [0150.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf")) returned 0x20 [0156.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0156.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.849] GetLastError () returned 0x5 [0156.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0156.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 1704 os_tid = 0x1268 [0150.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf")) returned 0x20 [0156.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0156.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.848] GetLastError () returned 0x5 [0156.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0156.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1705 os_tid = 0x126c [0150.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf")) returned 0x20 [0156.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0156.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.846] GetLastError () returned 0x5 [0156.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0156.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 1706 os_tid = 0x1270 [0150.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf")) returned 0x20 [0156.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0156.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.844] GetLastError () returned 0x5 [0156.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0156.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1707 os_tid = 0x1274 [0150.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf")) returned 0x20 [0155.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0155.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.465] GetLastError () returned 0x5 [0157.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0158.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 1708 os_tid = 0x1278 [0150.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf")) returned 0x20 [0156.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0156.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.851] GetLastError () returned 0x5 [0156.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0156.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1709 os_tid = 0x12cc [0150.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf")) returned 0x20 [0154.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0155.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.846] GetLastError () returned 0x5 [0156.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0157.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 1710 os_tid = 0x12dc [0150.774] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\i0by-t57e-a.xls")) returned 0x20 [0150.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls", dwFileAttributes=0x20) returned 1 [0150.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\i0by-t57e-a.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14c0 [0150.775] GetFileSizeEx (in: hFile=0x14c0, lpFileSize=0xc40fe1c | out: lpFileSize=0xc40fe1c*=54568) returned 1 [0150.775] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0xd524, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.775] ReadFile (in: hFile=0x14c0, lpBuffer=0xc40fdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc40fe08, lpOverlapped=0x0 | out: lpBuffer=0xc40fdf8*, lpNumberOfBytesRead=0xc40fe08*=0x4, lpOverlapped=0x0) returned 1 [0150.777] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0150.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0150.777] NtQuerySystemTime (in: CurrentTime=0xc40fd90 | out: CurrentTime=0xc40fd90*=132482710594248000) returned 0x0 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x51d02c06 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x478518f8 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x5f0ac0eb [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0xfb14278 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x2bbabd85 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x1991c701 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x136a38e6 [0150.777] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x61223c47 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x6a252c7c [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x1d39908f [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x63af14f5 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x2936bbe7 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x3c2ac33a [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x690269ad [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x26016f22 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x717fdd55 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x2287ff95 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x15010f1e [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x5f357cca [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x25b7ef26 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x12969674 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x7359d427 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x261f19fc [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x63531c03 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x4e67252c [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x4b07dbde [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x12700745 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x34f6d141 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x42cb28f [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x4128fab3 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x18d774f6 [0150.778] RtlRandomEx (in: Seed=0xc40fd88 | out: Seed=0xc40fd88) returned 0x30077a57 [0150.789] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.789] ReadFile (in: hFile=0x14c0, lpBuffer=0x672c700, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc40fd90, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesRead=0xc40fd90*=0x3c00, lpOverlapped=0x0) returned 1 [0150.790] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fedc8 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6730308 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0150.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0150.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0150.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fedc8) returned 1 [0150.791] WriteFile (in: hFile=0x14c0, lpBuffer=0x6730308*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc40fd90, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesWritten=0xc40fd90*=0x3c00, lpOverlapped=0x0) returned 1 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0151.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19b98 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0151.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19cb0 [0151.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0151.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec940 [0151.150] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.150] WriteFile (in: hFile=0x14c0, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xc40fe10, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xc40fe10*=0x110, lpOverlapped=0x0) returned 1 [0155.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0155.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19cb0) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19b98) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0155.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0155.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e180 [0155.036] wcscpy (in: _Dest=0x697e180, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls" [0155.036] wcscat (in: _Dest=0x697e180, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls.ac3a86" [0155.036] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls.ac3a86", NtPathName=0xc40fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\I0By-T57e-A.xls.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0155.214] FlushFileBuffers (hFile=0x14c0) returned 1 [0155.229] CloseHandle (hObject=0x14c0) returned 1 [0155.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c14a8 [0155.230] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0155.230] wcscat (in: _Dest=0x69c14a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" [0155.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\ac3a86-readme.txt")) returned 0x20 [0155.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 [0155.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 1711 os_tid = 0x12e8 [0150.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\mrcxna1tcedlnqpv.docx")) returned 0x20 [0150.794] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx", dwFileAttributes=0x20) returned 1 [0150.794] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\mrcxna1tcedlnqpv.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14c4 [0150.794] GetFileSizeEx (in: hFile=0x14c4, lpFileSize=0xb40fb0c | out: lpFileSize=0xb40fb0c*=88744) returned 1 [0150.794] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x15aa4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.794] ReadFile (in: hFile=0x14c4, lpBuffer=0xb40fae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb40faf8, lpOverlapped=0x0 | out: lpBuffer=0xb40fae8*, lpNumberOfBytesRead=0xb40faf8*=0x4, lpOverlapped=0x0) returned 1 [0150.796] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0150.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0150.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0150.797] NtQuerySystemTime (in: CurrentTime=0xb40fa80 | out: CurrentTime=0xb40fa80*=132482710594404000) returned 0x0 [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x35bdab24 [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x12706e9b [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x1b10797d [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x40d9c674 [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x571456a3 [0150.797] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x510574bc [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x35a3cfe0 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x34764f5 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x41083833 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x4976da91 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x265bca18 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x70b00b92 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x7b7fb263 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x7b7d9727 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x5e209460 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x3a17b932 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x1f79659f [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x3bec4f44 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x6fbc0af5 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x3c614764 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x4763075a [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x55a4a187 [0150.798] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x55c3965d [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x29d6b49e [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x962defd [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x29cb7c4b [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x2c12754a [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x3db5d91a [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x6020905e [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x96c321d [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x6b1e5f24 [0150.799] RtlRandomEx (in: Seed=0xb40fa78 | out: Seed=0xb40fa78) returned 0x6a9e647d [0150.810] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.810] ReadFile (in: hFile=0x14c4, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0150.810] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff290 [0150.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0150.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0150.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0150.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0150.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0150.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0150.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0150.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff290) returned 1 [0150.811] WriteFile (in: hFile=0x14c4, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0151.150] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.150] ReadFile (in: hFile=0x14c4, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.151] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0151.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.151] WriteFile (in: hFile=0x14c4, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0151.447] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x11ea8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.447] ReadFile (in: hFile=0x14c4, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.447] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x11ea8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fda60 [0151.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d07e0 [0151.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0151.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0151.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0151.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0151.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0151.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fda60) returned 1 [0151.448] WriteFile (in: hFile=0x14c4, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb40fa80, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xb40fa80*=0x3c00, lpOverlapped=0x0) returned 1 [0151.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0151.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0151.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0151.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1fa00 [0151.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0151.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15c) returned 0x3dcdfa0 [0151.757] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.757] WriteFile (in: hFile=0x14c4, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xb40fb00, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xb40fb00*=0x15c, lpOverlapped=0x0) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcdfa0) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa00) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ef00) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0155.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0155.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0155.094] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx" [0155.094] wcscat (in: _Dest=0x2ff63a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx.ac3a86" [0155.094] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx.ac3a86", NtPathName=0xb40fa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\MrCXNa1TCEdLNqpv.docx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e365f0 [0155.163] FlushFileBuffers (hFile=0x14c4) returned 1 [0155.169] CloseHandle (hObject=0x14c4) returned 1 [0155.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1188 [0155.172] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0155.172] wcscat (in: _Dest=0x69c1188, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" [0155.172] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\ac3a86-readme.txt")) returned 0x20 [0155.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 [0155.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 1712 os_tid = 0x12ec [0150.813] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\mshmpzz.odt")) returned 0x20 [0150.814] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt", dwFileAttributes=0x20) returned 1 [0150.814] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\mshmpzz.odt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1508 [0150.814] GetFileSizeEx (in: hFile=0x1508, lpFileSize=0xc7bfb4c | out: lpFileSize=0xc7bfb4c*=94616) returned 1 [0150.814] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x17194, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.814] ReadFile (in: hFile=0x1508, lpBuffer=0xc7bfb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc7bfb38, lpOverlapped=0x0 | out: lpBuffer=0xc7bfb28*, lpNumberOfBytesRead=0xc7bfb38*=0x4, lpOverlapped=0x0) returned 1 [0150.816] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0150.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0150.817] NtQuerySystemTime (in: CurrentTime=0xc7bfac0 | out: CurrentTime=0xc7bfac0*=132482710594716000) returned 0x0 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x29d9c1f2 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x735aee37 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x7db0867b [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x2254b38b [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x160b5ff9 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x42a98206 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0xa7511f9 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x371bfe98 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x64be4fbc [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x24c73a7a [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x70875621 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x3e121d01 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x1ecea9e1 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0xdceeeb [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x25538630 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x191d89ce [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x2187c7de [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x67c8df35 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x4af35290 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x639b3fd5 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x353b456f [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x2473f223 [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x341838db [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x7d44ee9c [0150.817] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x6a54fa37 [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x64aa275 [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x107cce8c [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x64785e5f [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x383071ae [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x64e69e40 [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x7f1582bb [0150.818] RtlRandomEx (in: Seed=0xc7bfab8 | out: Seed=0xc7bfab8) returned 0x5e88943c [0150.828] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.829] ReadFile (in: hFile=0x1508, lpBuffer=0x673b720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0150.829] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff320 [0150.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ab38 [0150.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0150.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0150.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0150.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0150.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0150.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0150.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0150.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff320) returned 1 [0150.830] WriteFile (in: hFile=0x1508, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0151.152] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.152] ReadFile (in: hFile=0x1508, lpBuffer=0x673b720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.153] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1abb0 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0151.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0151.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0151.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0151.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0151.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0151.154] WriteFile (in: hFile=0x1508, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0151.449] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x13598, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.449] ReadFile (in: hFile=0x1508, lpBuffer=0x673b720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.449] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x13598, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fda60 [0151.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d07e0 [0151.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0151.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0151.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0151.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0151.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0151.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0151.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fda60) returned 1 [0151.450] WriteFile (in: hFile=0x1508, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7bfac0, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xc7bfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0151.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c740 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0151.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5c90 [0151.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0151.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eda8) returned 1 [0151.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce5c0 [0151.758] SetFilePointerEx (in: hFile=0x1508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.758] WriteFile (in: hFile=0x1508, lpBuffer=0x66ce5c0*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xc7bfb40, lpOverlapped=0x0 | out: lpBuffer=0x66ce5c0*, lpNumberOfBytesWritten=0xc7bfb40*=0x148, lpOverlapped=0x0) returned 1 [0155.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce5c0) returned 1 [0155.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0155.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0155.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0155.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 [0155.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0155.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0155.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0155.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1188 [0155.095] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt" [0155.095] wcscat (in: _Dest=0x69c1188, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt.ac3a86" [0155.095] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt.ac3a86", NtPathName=0xc7bfab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\mshmpZz.odt.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0155.161] FlushFileBuffers (hFile=0x1508) returned 1 [0155.164] CloseHandle (hObject=0x1508) returned 1 [0155.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1188 [0155.165] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\" [0155.165] wcscat (in: _Dest=0x69c1188, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" [0155.165] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\ac3a86-readme.txt")) returned 0xffffffff [0155.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\qhbz7FgII7PxeXr5Y1i\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\qhbz7fgii7pxexr5y1i\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1508 [0155.166] WriteFile (in: hFile=0x1508, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc7bfad4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc7bfad4*=0x8b9, lpOverlapped=0x0) returned 1 [0155.168] CloseHandle (hObject=0x1508) returned 1 [0155.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 [0155.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 1713 os_tid = 0x12f0 [0150.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332268 [0150.835] wcscpy (in: _Dest=0x332268, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0150.835] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0150.835] wcscat (in: _Dest=0x332268, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0150.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b028 [0150.835] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0151.155] wcscmp (_String1=".", _String2=".") returned 0 [0151.155] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.155] wcscmp (_String1="..", _String2=".") returned 1 [0151.155] wcscmp (_String1="..", _String2="..") returned 0 [0151.155] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0151.155] wcscmp (_String1="background.png", _String2=".") returned 1 [0151.155] wcscmp (_String1="background.png", _String2="..") returned 1 [0151.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e483d0 [0151.155] wcscpy (in: _Dest=0x3e483d0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0151.155] wcscat (in: _Dest=0x3e483d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0151.155] wcscat (in: _Dest=0x3e483d0, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0154.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e483d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0154.825] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0154.825] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0154.825] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0154.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3012a00 [0154.825] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0154.825] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0154.825] wcscat (in: _Dest=0x3012a00, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0154.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0154.827] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0154.827] wcscmp (_String1="device.png", _String2=".") returned 1 [0154.827] wcscmp (_String1="device.png", _String2="..") returned 1 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036ca0 [0154.827] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0154.827] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0154.827] wcscat (in: _Dest=0x3036ca0, _Source="device.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0154.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0154.828] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0154.828] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0154.828] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0154.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3036b00 [0154.828] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0154.828] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0154.828] wcscat (in: _Dest=0x3036b00, _Source="overlay.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0154.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0154.830] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0154.830] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0154.830] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0154.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x30125c8 [0154.830] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0154.830] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0154.830] wcscat (in: _Dest=0x30125c8, _Source="superbar.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0154.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0154.831] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0154.831] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0154.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b028) returned 1 [0154.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 [0154.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 Thread: id = 1714 os_tid = 0x12f4 [0150.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0150.839] wcscpy (in: _Dest=0x332ce8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0150.839] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0150.839] wcscat (in: _Dest=0x332ce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0150.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a688 [0150.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0150.840] wcscmp (_String1=".", _String2=".") returned 0 [0150.840] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.840] wcscmp (_String1="..", _String2=".") returned 1 [0150.840] wcscmp (_String1="..", _String2="..") returned 0 [0150.840] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0150.840] wcscmp (_String1="background.png", _String2=".") returned 1 [0150.840] wcscmp (_String1="background.png", _String2="..") returned 1 [0150.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48220 [0150.840] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0150.840] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0150.840] wcscat (in: _Dest=0x3e48220, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0152.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0152.107] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0152.107] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0152.107] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0152.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48658 [0152.107] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0152.107] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0152.107] wcscat (in: _Dest=0x3e48658, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0152.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0152.109] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0152.109] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0152.109] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0152.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48580 [0152.109] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0152.109] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0152.109] wcscat (in: _Dest=0x3e48580, _Source="watermark.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0152.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0152.112] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0152.112] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0152.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a688) returned 1 [0152.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 [0152.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 1715 os_tid = 0x12f8 [0150.842] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0150.843] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0150.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.843] GetLastError () returned 0x5 [0150.843] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0150.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 1716 os_tid = 0x12fc [0150.845] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0150.845] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0150.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.846] GetLastError () returned 0x5 [0150.846] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0150.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 Thread: id = 1717 os_tid = 0x1300 [0150.848] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0150.848] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0150.848] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.848] GetLastError () returned 0x5 [0150.848] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0150.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 1718 os_tid = 0x1304 [0150.850] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0150.850] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0150.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.850] GetLastError () returned 0x5 [0150.850] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0150.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1719 os_tid = 0x1308 [0150.852] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0150.852] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0150.852] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.853] GetLastError () returned 0x5 [0150.853] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0150.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 1720 os_tid = 0x130c [0150.855] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0150.855] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0150.855] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.855] GetLastError () returned 0x5 [0150.855] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0150.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 1721 os_tid = 0x1310 [0150.860] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0150.861] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0150.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.861] GetLastError () returned 0x5 [0150.861] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0150.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1722 os_tid = 0x1314 [0150.863] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0150.863] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0150.863] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.864] GetLastError () returned 0x5 [0150.864] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0150.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 1723 os_tid = 0x1318 [0150.865] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0150.865] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0150.866] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.866] GetLastError () returned 0x5 [0150.866] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0150.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 1724 os_tid = 0x1328 [0150.867] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0150.868] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0150.868] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.868] GetLastError () returned 0x5 [0150.868] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0150.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 1725 os_tid = 0x132c [0150.870] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0150.870] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0150.870] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.870] GetLastError () returned 0x5 [0150.870] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0150.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1726 os_tid = 0x1330 [0150.872] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0150.872] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0150.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.872] GetLastError () returned 0x5 [0150.872] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0150.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1727 os_tid = 0x1334 [0150.874] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0150.874] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0150.874] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.874] GetLastError () returned 0x5 [0150.874] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0150.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 1728 os_tid = 0x1340 [0150.876] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0150.876] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0150.876] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.877] GetLastError () returned 0x5 [0150.877] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0150.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 Thread: id = 1729 os_tid = 0x1344 [0150.897] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0150.897] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0150.897] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.898] GetLastError () returned 0x5 [0150.898] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0150.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2360) returned 1 Thread: id = 1730 os_tid = 0x1348 [0150.899] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0150.899] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0150.899] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.900] GetLastError () returned 0x5 [0150.900] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0150.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2570) returned 1 Thread: id = 1731 os_tid = 0x134c [0150.901] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0150.901] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0150.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.902] GetLastError () returned 0x5 [0150.902] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea28e0) returned 1 Thread: id = 1732 os_tid = 0x1358 [0150.903] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0150.903] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0150.903] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.903] GetLastError () returned 0x5 [0150.903] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea22b0) returned 1 Thread: id = 1733 os_tid = 0x135c [0150.905] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0150.905] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0150.905] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.905] GetLastError () returned 0x5 [0150.905] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2200) returned 1 Thread: id = 1734 os_tid = 0x1360 [0150.907] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0150.907] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0150.907] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.907] GetLastError () returned 0x5 [0150.907] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0150.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2780) returned 1 Thread: id = 1735 os_tid = 0x1364 [0150.908] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0150.909] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0150.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.909] GetLastError () returned 0x5 [0150.909] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 1736 os_tid = 0x1368 [0150.910] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0150.910] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0150.910] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.911] GetLastError () returned 0x5 [0150.911] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2830) returned 1 Thread: id = 1737 os_tid = 0x1370 [0150.912] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0150.912] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0150.912] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.912] GetLastError () returned 0x5 [0150.912] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2410) returned 1 Thread: id = 1738 os_tid = 0x137c [0150.914] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0150.915] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0150.915] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.915] GetLastError () returned 0x5 [0150.915] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 Thread: id = 1739 os_tid = 0x1380 [0150.916] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0150.916] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0150.916] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.917] GetLastError () returned 0x5 [0150.917] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0150.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 Thread: id = 1740 os_tid = 0x1384 [0150.918] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0150.918] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0150.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.918] GetLastError () returned 0x5 [0150.918] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0150.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 1741 os_tid = 0x1388 [0150.921] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0150.921] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0150.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.921] GetLastError () returned 0x5 [0150.921] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0150.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2f10) returned 1 Thread: id = 1742 os_tid = 0x138c [0151.166] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0151.166] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0151.166] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.166] GetLastError () returned 0x5 [0151.166] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0151.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 1743 os_tid = 0x1394 [0151.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d920 [0151.168] wcscpy (in: _Dest=0x3d8d920, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0151.168] wcscat (in: _Dest=0x3d8d920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0151.168] wcscat (in: _Dest=0x3d8d920, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*" [0151.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b9c8 [0151.168] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808b8 [0151.991] wcscmp (_String1=".", _String2=".") returned 0 [0151.991] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.991] wcscmp (_String1="..", _String2=".") returned 1 [0151.991] wcscmp (_String1="..", _String2="..") returned 0 [0151.992] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0151.992] wcscmp (_String1="AU", _String2=".") returned 1 [0151.992] wcscmp (_String1="AU", _String2="..") returned 1 [0151.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e960 [0151.992] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0151.992] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0151.992] wcscat (in: _Dest=0x3d8e960, _Source="AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0153.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0153.531] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0153.531] wcscmp (_String1="Deployment", _String2=".") returned 1 [0153.531] wcscmp (_String1="Deployment", _String2="..") returned 1 [0153.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b498 [0153.531] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0153.531] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0153.531] wcscat (in: _Dest=0x3f1b498, _Source="Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0153.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0153.532] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0153.532] wcscmp (_String1="jre1.7.0_45", _String2=".") returned 1 [0153.532] wcscmp (_String1="jre1.7.0_45", _String2="..") returned 1 [0153.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b150 [0153.533] wcscpy (in: _Dest=0x3f1b150, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0153.533] wcscat (in: _Dest=0x3f1b150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0153.533] wcscat (in: _Dest=0x3f1b150, _Source="jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0153.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1b150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0153.534] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0153.534] FindClose (in: hFindFile=0x3e808b8 | out: hFindFile=0x3e808b8) returned 1 [0153.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b9c8) returned 1 [0153.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d920) returned 1 [0153.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 Thread: id = 1744 os_tid = 0x139c [0151.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat")) returned 0x20 [0151.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0151.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.990] GetLastError () returned 0x5 [0151.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0151.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 1745 os_tid = 0x13a0 [0151.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs")) returned 0x20 [0151.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0151.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.989] GetLastError () returned 0x5 [0151.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0151.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 1746 os_tid = 0x13a4 [0151.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht")) returned 0x20 [0152.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0152.460] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.460] GetLastError () returned 0x5 [0152.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0152.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 1747 os_tid = 0x13a8 [0151.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze")) returned 0x20 [0152.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0152.458] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.458] GetLastError () returned 0x5 [0152.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0152.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 1748 os_tid = 0x13ac [0151.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan")) returned 0x20 [0152.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0152.456] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.456] GetLastError () returned 0x5 [0152.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0152.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 1749 os_tid = 0x13b0 [0151.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu")) returned 0x20 [0152.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0152.454] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.455] GetLastError () returned 0x5 [0152.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0152.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 1750 os_tid = 0x13b4 [0151.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp")) returned 0x20 [0152.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0152.452] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.452] GetLastError () returned 0x5 [0152.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0152.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 1751 os_tid = 0x13b8 [0151.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq")) returned 0x20 [0152.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0152.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.451] GetLastError () returned 0x5 [0152.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0152.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 1752 os_tid = 0x13bc [0151.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra")) returned 0x20 [0152.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0152.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.449] GetLastError () returned 0x5 [0152.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0152.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 1753 os_tid = 0x13c0 [0151.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv")) returned 0x20 [0152.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0152.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.447] GetLastError () returned 0x5 [0152.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0152.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 1754 os_tid = 0x13c4 [0151.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun")) returned 0x20 [0152.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0152.446] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.446] GetLastError () returned 0x5 [0152.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0152.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 1755 os_tid = 0x13c8 [0151.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita")) returned 0x20 [0152.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0152.444] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.444] GetLastError () returned 0x5 [0152.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0152.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 1756 os_tid = 0x13cc [0151.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn")) returned 0x20 [0152.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0152.442] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.443] GetLastError () returned 0x5 [0152.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0152.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 1757 os_tid = 0x13d0 [0151.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor")) returned 0x20 [0152.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0152.441] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.441] GetLastError () returned 0x5 [0152.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0152.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 1758 os_tid = 0x13d4 [0151.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld")) returned 0x20 [0152.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0152.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.439] GetLastError () returned 0x5 [0152.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0152.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 1759 os_tid = 0x13d8 [0151.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor")) returned 0x20 [0152.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0152.437] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.438] GetLastError () returned 0x5 [0152.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0152.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 1760 os_tid = 0x13dc [0151.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol")) returned 0x20 [0152.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0152.436] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.436] GetLastError () returned 0x5 [0152.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0152.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 1761 os_tid = 0x13e0 [0151.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb")) returned 0x20 [0152.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0152.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.434] GetLastError () returned 0x5 [0152.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0152.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 1762 os_tid = 0x13e4 [0151.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum")) returned 0x20 [0152.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0152.432] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.432] GetLastError () returned 0x5 [0152.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0152.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 1763 os_tid = 0x13e8 [0151.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus")) returned 0x20 [0152.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0152.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.431] GetLastError () returned 0x5 [0152.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0152.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 1764 os_tid = 0x13ec [0151.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky")) returned 0x20 [0152.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0152.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.429] GetLastError () returned 0x5 [0152.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0152.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 1765 os_tid = 0x13f0 [0151.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv")) returned 0x20 [0152.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0152.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.427] GetLastError () returned 0x5 [0152.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0152.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 1766 os_tid = 0x13f4 [0151.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0x20 [0152.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0152.425] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.426] GetLastError () returned 0x5 [0152.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0152.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 1767 os_tid = 0x13f8 [0151.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve")) returned 0x20 [0152.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0152.424] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.424] GetLastError () returned 0x5 [0152.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0152.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 1768 os_tid = 0x13fc [0151.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur")) returned 0x20 [0152.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0152.422] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.422] GetLastError () returned 0x5 [0152.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0152.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 1769 os_tid = 0x1400 [0151.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr")) returned 0x20 [0152.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0152.420] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.420] GetLastError () returned 0x5 [0152.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0152.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 1770 os_tid = 0x1404 Thread: id = 1771 os_tid = 0x1408 [0151.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini")) returned 0x20 [0151.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.762] GetLastError () returned 0x5 [0151.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 1772 os_tid = 0x1424 [0151.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 0x20 [0151.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0151.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.763] GetLastError () returned 0x5 [0151.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0151.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 1773 os_tid = 0x1464 [0151.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini")) returned 0x20 [0151.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.473] GetLastError () returned 0x5 [0151.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 1774 os_tid = 0x1470 [0151.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 0x20 [0151.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0151.476] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.476] GetLastError () returned 0x5 [0151.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0151.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 1775 os_tid = 0xb6c [0151.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini")) returned 0x20 [0151.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.478] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.478] GetLastError () returned 0x5 [0151.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 1776 os_tid = 0xdb4 [0151.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 0x20 [0151.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0151.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.480] GetLastError () returned 0x5 [0151.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0151.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 1777 os_tid = 0x154 [0151.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini")) returned 0x20 [0151.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.482] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.482] GetLastError () returned 0x5 [0151.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 1778 os_tid = 0x444 [0151.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 0x20 [0151.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0151.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.484] GetLastError () returned 0x5 [0151.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0151.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 1779 os_tid = 0x90 [0151.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini")) returned 0x20 [0151.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.486] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.486] GetLastError () returned 0x5 [0151.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 1780 os_tid = 0xa80 [0151.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 0x20 [0151.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0151.488] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.488] GetLastError () returned 0x5 [0151.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0151.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 1781 os_tid = 0xe3c [0151.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini")) returned 0x20 [0151.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.490] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.490] GetLastError () returned 0x5 [0151.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 1782 os_tid = 0xf04 [0151.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 0x20 [0151.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0151.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.492] GetLastError () returned 0x5 [0151.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0151.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1783 os_tid = 0x520 [0151.493] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0151.494] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0151.494] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.494] GetLastError () returned 0x5 [0151.494] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0151.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 1784 os_tid = 0xb64 [0151.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0151.497] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0151.497] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0151.497] wcscat (in: _Dest=0x3e0eed0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*" [0151.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0151.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0151.497] wcscmp (_String1=".", _String2=".") returned 0 [0151.498] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.498] wcscmp (_String1="..", _String2=".") returned 1 [0151.498] wcscmp (_String1="..", _String2="..") returned 0 [0151.498] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88301400, ftCreationTime.dwHighDateTime=0x1c9b0f8, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88301400, ftLastWriteTime.dwHighDateTime=0x1c9b0f8, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0151.498] wcscmp (_String1="msmdsrv.rll", _String2=".") returned 1 [0151.498] wcscmp (_String1="msmdsrv.rll", _String2="..") returned 1 [0151.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0151.498] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0151.498] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0151.498] wcscat (in: _Dest=0x35c6e8, _Source="msmdsrv.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" [0153.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0153.630] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0153.631] wcscmp (_String1="msolui100.rll", _String2=".") returned 1 [0153.631] wcscmp (_String1="msolui100.rll", _String2="..") returned 1 [0153.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0153.631] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0153.631] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0153.631] wcscat (in: _Dest=0x2ff63a8, _Source="msolui100.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" [0153.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0153.633] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0153.633] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0153.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0153.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 [0153.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 1785 os_tid = 0xf28 [0151.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20 [0151.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0151.499] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.499] GetLastError () returned 0x5 [0151.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0151.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 1786 os_tid = 0xf3c [0151.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx")) returned 0x20 [0152.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0152.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.400] GetLastError () returned 0x5 [0152.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0152.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 1787 os_tid = 0xbf8 [0151.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx")) returned 0x20 [0151.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0151.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.981] GetLastError () returned 0x5 [0151.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0151.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 1788 os_tid = 0x668 [0151.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx")) returned 0x20 [0151.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0151.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.980] GetLastError () returned 0x5 [0151.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0151.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 Thread: id = 1789 os_tid = 0x6c0 [0151.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx")) returned 0x20 [0152.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0152.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.418] GetLastError () returned 0x5 [0152.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0152.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 1790 os_tid = 0xba0 [0151.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx")) returned 0x20 [0152.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0152.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.402] GetLastError () returned 0x5 [0152.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0152.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e378) returned 1 Thread: id = 1791 os_tid = 0xb78 [0151.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx")) returned 0x20 [0152.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0152.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.417] GetLastError () returned 0x5 [0152.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0152.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 1792 os_tid = 0xb9c [0151.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx")) returned 0x20 [0152.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0152.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.415] GetLastError () returned 0x5 [0152.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0152.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 Thread: id = 1793 os_tid = 0xb80 [0151.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx")) returned 0x20 [0152.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0152.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.404] GetLastError () returned 0x5 [0152.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0152.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e420) returned 1 Thread: id = 1794 os_tid = 0x6b0 [0151.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx")) returned 0x20 [0152.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0152.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.413] GetLastError () returned 0x5 [0152.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0152.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 Thread: id = 1795 os_tid = 0xbd4 [0151.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx")) returned 0x20 [0152.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0152.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.412] GetLastError () returned 0x5 [0152.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0152.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e570) returned 1 Thread: id = 1796 os_tid = 0xbec [0151.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx")) returned 0x20 [0152.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0152.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.405] GetLastError () returned 0x5 [0152.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0152.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e618) returned 1 Thread: id = 1797 os_tid = 0x15cc [0151.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx")) returned 0x20 [0152.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0152.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.410] GetLastError () returned 0x5 [0152.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0152.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e6c0) returned 1 Thread: id = 1798 os_tid = 0x15d0 [0151.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx")) returned 0x20 [0152.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0152.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.409] GetLastError () returned 0x5 [0152.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0152.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 Thread: id = 1799 os_tid = 0x15d4 [0151.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\-mgpoig0fw5prpbfr.pptx")) returned 0x20 [0151.510] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx", dwFileAttributes=0x20) returned 1 [0151.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\-mgpoig0fw5prpbfr.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac4 [0151.888] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0xc88fd94 | out: lpFileSize=0xc88fd94*=48403) returned 1 [0151.888] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0xbd0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.888] ReadFile (in: hFile=0xac4, lpBuffer=0xc88fd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc88fd80, lpOverlapped=0x0 | out: lpBuffer=0xc88fd70*, lpNumberOfBytesRead=0xc88fd80*=0x4, lpOverlapped=0x0) returned 1 [0151.890] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0151.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0151.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0151.890] NtQuerySystemTime (in: CurrentTime=0xc88fd08 | out: CurrentTime=0xc88fd08*=132482710605012000) returned 0x0 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x600f0271 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x4e30fc05 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x3b2921f8 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x123333bf [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x119a13fb [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x8e475f [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x32330ff0 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x25dfa29e [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x5d9df133 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x6f1fbdd2 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x1e886d2 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x77fd5a28 [0151.890] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x20598f0b [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x46d46404 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x33b65ccf [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x6a4aa5c8 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x17e2e470 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x548863c8 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x2bb4d40c [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x7aee92cc [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x485fa8eb [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x6f8bd39f [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x3ccab073 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x379456c3 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x34125839 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x3e15dc3f [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x455c916 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x7c51c370 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0xae7b773 [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x365ea79b [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x5d2d792e [0151.891] RtlRandomEx (in: Seed=0xc88fd00 | out: Seed=0xc88fd00) returned 0x74675e74 [0151.898] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.898] ReadFile (in: hFile=0xac4, lpBuffer=0x6886518, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc88fd08, lpOverlapped=0x0 | out: lpBuffer=0x6886518*, lpNumberOfBytesRead=0xc88fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0151.899] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1720 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1a958 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0151.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x688a120 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0151.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0151.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0151.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0151.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1720) returned 1 [0151.899] WriteFile (in: hFile=0xac4, lpBuffer=0x688a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc88fd08, lpOverlapped=0x0 | out: lpBuffer=0x688a120*, lpNumberOfBytesWritten=0xc88fd08*=0x3c00, lpOverlapped=0x0) returned 1 [0155.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a120) returned 1 [0155.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6886518) returned 1 [0155.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e4f080 [0155.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0155.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e4ed20 [0155.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0155.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0155.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0155.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0155.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea98) returned 1 [0155.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54f00 [0155.042] SetFilePointerEx (in: hFile=0xac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.043] WriteFile (in: hFile=0xac4, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xc88fd88, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0xc88fd88*=0x11e, lpOverlapped=0x0) returned 1 [0155.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0155.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0155.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0155.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f080) returned 1 [0155.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0155.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0155.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0155.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0155.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c12c8 [0155.109] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx" [0155.109] wcscat (in: _Dest=0x69c12c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx.ac3a86" [0155.109] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx.ac3a86", NtPathName=0xc88fd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\-MGpOig0fW5prPbfr.pptx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6c48 [0155.219] FlushFileBuffers (hFile=0xac4) returned 1 [0155.347] CloseHandle (hObject=0xac4) returned 1 [0155.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db8f8 [0155.348] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.348] wcscat (in: _Dest=0x66db8f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.348] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0x20 [0155.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 [0155.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 1800 os_tid = 0x15d8 [0151.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\a_23cgl.pps")) returned 0x20 [0151.511] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps", dwFileAttributes=0x20) returned 1 [0151.900] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\a_23cgl.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0151.900] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0xca2febc | out: lpFileSize=0xca2febc*=40747) returned 1 [0151.900] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x9f27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.900] ReadFile (in: hFile=0xeb4, lpBuffer=0xca2fe98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca2fea8, lpOverlapped=0x0 | out: lpBuffer=0xca2fe98*, lpNumberOfBytesRead=0xca2fea8*=0x4, lpOverlapped=0x0) returned 1 [0151.901] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0151.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0151.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.902] NtQuerySystemTime (in: CurrentTime=0xca2fe30 | out: CurrentTime=0xca2fe30*=132482710605168000) returned 0x0 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x72839867 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x71e9a4fc [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x3c4afcd2 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x4fcc24b1 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x6ae50a20 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x2d882d77 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x550ef98 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x520befe0 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x6ecda5c1 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0xf49339 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x69b05435 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x5da684ff [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x43058a54 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x2184179 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x358a5822 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x63429d57 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x67f84127 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x69d1b091 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x870be21 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x12ff1bf3 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x510e6940 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x5d33490e [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x16327a5f [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0xf419583 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0xdd39010 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x10575382 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x2fd62d05 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x73b01d40 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x682319e7 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x763b365f [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x6d4916e5 [0151.902] RtlRandomEx (in: Seed=0xca2fe28 | out: Seed=0xca2fe28) returned 0x429edbf7 [0151.927] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.927] ReadFile (in: hFile=0xeb4, lpBuffer=0x687ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xca2fe30, lpOverlapped=0x0 | out: lpBuffer=0x687ed08*, lpNumberOfBytesRead=0xca2fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0151.927] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1720 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1a958 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0151.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6882910 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0151.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0151.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0151.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1720) returned 1 [0151.928] WriteFile (in: hFile=0xeb4, lpBuffer=0x6882910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xca2fe30, lpOverlapped=0x0 | out: lpBuffer=0x6882910*, lpNumberOfBytesWritten=0xca2fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6882910) returned 1 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687ed08) returned 1 [0155.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5ba0 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0155.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5bd0 [0155.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0155.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0155.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea98) returned 1 [0155.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec710 [0155.045] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.046] WriteFile (in: hFile=0xeb4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xca2feb0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xca2feb0*=0x108, lpOverlapped=0x0) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0155.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0155.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd368 [0155.110] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps" [0155.110] wcscat (in: _Dest=0x66dd368, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps.ac3a86" [0155.110] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps.ac3a86", NtPathName=0xca2fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\a_23cGl.pps.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1368 [0155.176] FlushFileBuffers (hFile=0xeb4) returned 1 [0155.183] CloseHandle (hObject=0xeb4) returned 1 [0155.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd368 [0155.187] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.187] wcscat (in: _Dest=0x66dd368, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.187] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0xffffffff [0155.187] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1310 [0155.191] WriteFile (in: hFile=0x1310, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xca2fe44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xca2fe44*=0x8b9, lpOverlapped=0x0) returned 1 [0155.193] CloseHandle (hObject=0x1310) returned 1 [0155.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 [0155.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 1801 os_tid = 0x15dc [0151.511] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\fsayqmycizgdwmwqm.xlsx")) returned 0x20 [0151.511] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx", dwFileAttributes=0x20) returned 1 [0151.929] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\fsayqmycizgdwmwqm.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12bc [0151.929] GetFileSizeEx (in: hFile=0x12bc, lpFileSize=0xb8ffe0c | out: lpFileSize=0xb8ffe0c*=1989) returned 1 [0151.929] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x7c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.929] ReadFile (in: hFile=0x12bc, lpBuffer=0xb8ffde8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb8ffdf8, lpOverlapped=0x0 | out: lpBuffer=0xb8ffde8*, lpNumberOfBytesRead=0xb8ffdf8*=0x4, lpOverlapped=0x0) returned 1 [0151.930] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0151.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c878 [0151.931] NtQuerySystemTime (in: CurrentTime=0xb8ffd80 | out: CurrentTime=0xb8ffd80*=132482710605480000) returned 0x0 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x59e8c65a [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x12506e32 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x2945d4c0 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x573ac6ea [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x4cfc25b5 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x38665c53 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x204f2713 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0xfe912e2 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x3a7b61fc [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x577b5ef6 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x59dc209d [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x52d38ff2 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0xb10fec9 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x499c45d2 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x6737aca3 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x159c5f6a [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x5080fee4 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x300a7038 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x5645d026 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0xbbe00c6 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x692308ef [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x73ab1c6 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x2a03aa9c [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x31696b99 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x70816f67 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x16b29d35 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x67220567 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x6a4854b1 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x5421faaf [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x3a6f4069 [0151.931] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x36289a24 [0151.932] RtlRandomEx (in: Seed=0xb8ffd78 | out: Seed=0xb8ffd78) returned 0x568a342b [0151.940] ReadFile (in: hFile=0x12bc, lpBuffer=0x68774f8, nNumberOfBytesToRead=0x7c5, lpNumberOfBytesRead=0xb8ffd74, lpOverlapped=0x0 | out: lpBuffer=0x68774f8*, lpNumberOfBytesRead=0xb8ffd74*=0x7c5, lpOverlapped=0x0) returned 1 [0151.940] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.940] WriteFile (in: hFile=0x12bc, lpBuffer=0x687b100*, nNumberOfBytesToWrite=0x7c5, lpNumberOfBytesWritten=0xb8ffd78, lpOverlapped=0x0 | out: lpBuffer=0x687b100*, lpNumberOfBytesWritten=0xb8ffd78*=0x7c5, lpOverlapped=0x0) returned 1 [0155.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0155.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c170 [0155.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0155.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x687b100) returned 1 [0155.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68774f8) returned 1 [0155.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0155.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1720) returned 1 [0155.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66d1720 [0155.048] SetFilePointerEx (in: hFile=0x12bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.048] WriteFile (in: hFile=0x12bc, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb8ffe00, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0xb8ffe00*=0x11e, lpOverlapped=0x0) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61348) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1720) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0155.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0155.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1408 [0155.112] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx" [0155.112] wcscat (in: _Dest=0x69c1408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx.ac3a86" [0155.112] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx.ac3a86", NtPathName=0xb8ffd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\fsaYQMyCizGDWMWQM.xlsx.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7cd0 [0155.182] FlushFileBuffers (hFile=0x12bc) returned 1 [0155.194] CloseHandle (hObject=0x12bc) returned 1 [0155.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd368 [0155.197] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.197] wcscat (in: _Dest=0x66dd368, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0x20 [0155.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 [0155.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 1802 os_tid = 0x15f4 [0151.512] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\lj7bwxqg.pdf")) returned 0x20 [0151.512] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf", dwFileAttributes=0x20) returned 1 [0151.940] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\lj7bwxqg.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1320 [0151.940] GetFileSizeEx (in: hFile=0x1320, lpFileSize=0xcadf8bc | out: lpFileSize=0xcadf8bc*=45992) returned 1 [0151.940] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0xb3a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.940] ReadFile (in: hFile=0x1320, lpBuffer=0xcadf898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcadf8a8, lpOverlapped=0x0 | out: lpBuffer=0xcadf898*, lpNumberOfBytesRead=0xcadf8a8*=0x4, lpOverlapped=0x0) returned 1 [0151.942] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c878 [0151.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.942] NtQuerySystemTime (in: CurrentTime=0xcadf830 | out: CurrentTime=0xcadf830*=132482710605636000) returned 0x0 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x47014dd4 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x6f1bdd4e [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x38ce15a0 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4d360b55 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x66a17b27 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4fcebef5 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4ee7fe5c [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0xd782b5a [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x1c61037b [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4c6ccd5f [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x42ba38f7 [0151.942] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x2a84eff7 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4aa8b919 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x6ea0b43 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x308b6af7 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x39b3f0f9 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x8cd81e6 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x7142154f [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x619cabdd [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4cadebbe [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x95a8026 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x4fd81315 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x3c45cd58 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x2dcb7b72 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x2fc4a6f0 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x415beb57 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x5ab316ae [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x2a1008ab [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x3f9b9e77 [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x1bc56c5d [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x38b350d [0151.943] RtlRandomEx (in: Seed=0xcadf828 | out: Seed=0xcadf828) returned 0x5692a5f9 [0151.951] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.951] ReadFile (in: hFile=0x1320, lpBuffer=0x68a4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcadf830, lpOverlapped=0x0 | out: lpBuffer=0x68a4558*, lpNumberOfBytesRead=0xcadf830*=0x3c00, lpOverlapped=0x0) returned 1 [0151.952] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1fd8 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68a8160 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0151.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0151.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0151.952] WriteFile (in: hFile=0x1320, lpBuffer=0x68a8160*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcadf830, lpOverlapped=0x0 | out: lpBuffer=0x68a8160*, lpNumberOfBytesWritten=0xcadf830*=0x3c00, lpOverlapped=0x0) returned 1 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a8160) returned 1 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4558) returned 1 [0155.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f60 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0155.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5210 [0155.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0155.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0155.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0155.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec940 [0155.051] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.052] WriteFile (in: hFile=0x1320, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xcadf8b0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xcadf8b0*=0x10a, lpOverlapped=0x0) returned 1 [0155.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0155.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0155.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0155.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0155.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0155.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c878) returned 1 [0155.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0155.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0155.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0155.114] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf" [0155.114] wcscat (in: _Dest=0x66dd2d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf.ac3a86" [0155.114] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf.ac3a86", NtPathName=0xcadf828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\Lj7bwxQg.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0155.188] FlushFileBuffers (hFile=0x1320) returned 1 [0155.200] CloseHandle (hObject=0x1320) returned 1 [0155.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcca8 [0155.201] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.201] wcscat (in: _Dest=0x66dcca8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0x20 [0155.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 [0155.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 1803 os_tid = 0xbe0 [0151.512] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\of3kgy_zhcqn_k2.pdf")) returned 0x20 [0151.512] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf", dwFileAttributes=0x20) returned 1 [0151.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\of3kgy_zhcqn_k2.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1028 [0151.953] GetFileSizeEx (in: hFile=0x1028, lpFileSize=0xcb4fe4c | out: lpFileSize=0xcb4fe4c*=67385) returned 1 [0151.953] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x10735, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.953] ReadFile (in: hFile=0x1028, lpBuffer=0xcb4fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb4fe38, lpOverlapped=0x0 | out: lpBuffer=0xcb4fe28*, lpNumberOfBytesRead=0xcb4fe38*=0x4, lpOverlapped=0x0) returned 1 [0151.955] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0151.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.955] NtQuerySystemTime (in: CurrentTime=0xcb4fdc0 | out: CurrentTime=0xcb4fdc0*=132482710605792000) returned 0x0 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x3a0efb49 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x4f013dee [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x498c559d [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x9225cea [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x5dde0343 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x445da395 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x7be54974 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x71fdea2 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x43178f8b [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x77eb3c5a [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x47a76085 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x3d6278b8 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x2276834d [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x5953526b [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x3ddcc540 [0151.955] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x74e34c34 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x703e0a03 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x1827a7c [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x2da20d63 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x74e87a9f [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x32921309 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x1ceca576 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x66e2108a [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x3c70e32a [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x2a72060 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x64d3630b [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x6770f206 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x1ba6e632 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x4a4ed70b [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x31f6ddec [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x2baf3d16 [0151.956] RtlRandomEx (in: Seed=0xcb4fdb8 | out: Seed=0xcb4fdb8) returned 0x6091e841 [0151.964] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.964] ReadFile (in: hFile=0x1028, lpBuffer=0x678bd68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcb4fdc0, lpOverlapped=0x0 | out: lpBuffer=0x678bd68*, lpNumberOfBytesRead=0xcb4fdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.965] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1fd8 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6784558 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0151.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0151.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0151.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0151.965] WriteFile (in: hFile=0x1028, lpBuffer=0x6784558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcb4fdc0, lpOverlapped=0x0 | out: lpBuffer=0x6784558*, lpNumberOfBytesWritten=0xcb4fdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784558) returned 1 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd68) returned 1 [0155.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e808f8 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0155.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e807b8 [0155.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0155.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0155.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0155.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54dd8 [0155.057] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.058] WriteFile (in: hFile=0x1028, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xcb4fe40, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xcb4fe40*=0x118, lpOverlapped=0x0) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e807b8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e808f8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0155.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0155.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c14a8 [0155.115] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf" [0155.115] wcscat (in: _Dest=0x69c14a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf.ac3a86" [0155.115] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf.ac3a86", NtPathName=0xcb4fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\OF3KgY_zhCQn_k2.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bd48 [0155.222] FlushFileBuffers (hFile=0x1028) returned 1 [0155.370] CloseHandle (hObject=0x1028) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0155.370] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.370] wcscat (in: _Dest=0x66dcd38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.371] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0x20 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 1804 os_tid = 0xbe4 [0151.513] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\rxvqotvguehniezk.pdf")) returned 0x20 [0151.513] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf", dwFileAttributes=0x20) returned 1 [0151.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\rxvqotvguehniezk.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf1c [0151.966] GetFileSizeEx (in: hFile=0xf1c, lpFileSize=0xb51fb9c | out: lpFileSize=0xb51fb9c*=96544) returned 1 [0151.966] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x1791c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.966] ReadFile (in: hFile=0xf1c, lpBuffer=0xb51fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb51fb88, lpOverlapped=0x0 | out: lpBuffer=0xb51fb78*, lpNumberOfBytesRead=0xb51fb88*=0x4, lpOverlapped=0x0) returned 1 [0151.968] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcacd8 [0151.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0151.968] NtQuerySystemTime (in: CurrentTime=0xb51fb10 | out: CurrentTime=0xb51fb10*=132482710605792000) returned 0x0 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6a2e191f [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x45b86713 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x8c23b87 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x7d9265fb [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x4cfc9938 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x62cea83e [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x4eabd1f7 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x60667d7 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x1374bf20 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x14b18d5f [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x30b6f06c [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x257d2698 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6dadb431 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6789739c [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x9f65672 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x684df2a7 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x664bc9a7 [0151.968] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x316a7f40 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x386a9300 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x361cf3a8 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x702bbde7 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x267a213b [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x1b5d11d0 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x1908c064 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6be91fb3 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0xc1e6136 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x13231825 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x163d39c9 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6830d3d [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x361cf3a8 [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x6d637c8b [0151.969] RtlRandomEx (in: Seed=0xb51fb08 | out: Seed=0xb51fb08) returned 0x30a0cd77 [0151.977] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.977] ReadFile (in: hFile=0xf1c, lpBuffer=0x6788160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesRead=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0151.977] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1fd8 [0151.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0151.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0151.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6775538 [0151.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0151.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0151.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0151.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0151.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0151.978] WriteFile (in: hFile=0xf1c, lpBuffer=0x6775538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesWritten=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0155.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0155.062] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.062] ReadFile (in: hFile=0xf1c, lpBuffer=0x6788160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesRead=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0155.063] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60970 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ac28 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0155.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6775538 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0155.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0155.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0155.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0155.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0155.063] WriteFile (in: hFile=0xf1c, lpBuffer=0x6775538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesWritten=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0155.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0155.069] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x13d20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.069] ReadFile (in: hFile=0xf1c, lpBuffer=0x6788160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6788160*, lpNumberOfBytesRead=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0155.069] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x13d20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e60970 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ac28 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0155.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6775538 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0155.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0155.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0155.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0155.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0155.070] WriteFile (in: hFile=0xf1c, lpBuffer=0x6775538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb51fb10, lpOverlapped=0x0 | out: lpBuffer=0x6775538*, lpNumberOfBytesWritten=0xb51fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0155.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775538) returned 1 [0155.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ef03e0 [0155.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0155.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80ab8 [0155.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0155.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0155.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0155.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0155.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0155.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dce3d8 [0155.073] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.073] WriteFile (in: hFile=0xf1c, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0xb51fb90, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0xb51fb90*=0x15a, lpOverlapped=0x0) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80ab8) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80838) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef03e0) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcacd8) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0155.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac38) returned 1 [0155.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1548 [0155.117] wcscpy (in: _Dest=0x69c1548, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf" [0155.117] wcscat (in: _Dest=0x69c1548, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf.ac3a86") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf.ac3a86" [0155.117] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf.ac3a86", NtPathName=0xb51fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\rXVQOtVGUeHNIEzk.pdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7aa8 [0155.185] FlushFileBuffers (hFile=0xf1c) returned 1 [0155.198] CloseHandle (hObject=0xf1c) returned 1 [0155.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd368 [0155.198] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\" [0155.198] wcscat (in: _Dest=0x66dd368, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" [0155.198] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\n_ww7nLCi\\YtsiWIbg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\n_ww7nlci\\ytsiwibg\\ac3a86-readme.txt")) returned 0x20 [0155.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 [0155.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 1805 os_tid = 0xbb4 [0151.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d07e0 [0151.513] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0151.514] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0151.514] wcscat (in: _Dest=0x66d07e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*" [0151.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0151.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0151.766] wcscmp (_String1=".", _String2=".") returned 0 [0151.766] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.766] wcscmp (_String1="..", _String2=".") returned 1 [0151.767] wcscmp (_String1="..", _String2="..") returned 0 [0151.767] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0151.767] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0151.767] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0151.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d5a368 [0151.767] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0151.767] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0151.767] wcscat (in: _Dest=0x3d5a368, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" [0152.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0152.184] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0152.184] wcscmp (_String1="license.html", _String2=".") returned 1 [0152.184] wcscmp (_String1="license.html", _String2="..") returned 1 [0152.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcb88 [0152.184] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0152.184] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0152.184] wcscat (in: _Dest=0x66dcb88, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" [0152.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0152.185] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0152.185] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0152.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0152.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0152.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b6d0) returned 1 Thread: id = 1806 os_tid = 0xef8 [0151.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d01c8 [0151.515] wcscpy (in: _Dest=0x66d01c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0151.515] wcscat (in: _Dest=0x66d01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0151.515] wcscat (in: _Dest=0x66d01c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*" [0151.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0151.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0151.765] wcscmp (_String1=".", _String2=".") returned 0 [0151.765] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.766] wcscmp (_String1="..", _String2=".") returned 1 [0151.766] wcscmp (_String1="..", _String2="..") returned 0 [0151.766] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0151.766] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0151.766] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0151.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59488 [0151.766] wcscpy (in: _Dest=0x3d59488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0151.766] wcscat (in: _Dest=0x3d59488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0151.766] wcscat (in: _Dest=0x3d59488, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" [0155.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0155.674] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0155.674] wcscmp (_String1="license.html", _String2=".") returned 1 [0155.674] wcscmp (_String1="license.html", _String2="..") returned 1 [0155.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc3a8 [0155.674] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0155.675] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0155.675] wcscat (in: _Dest=0x66dc3a8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" [0155.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0155.676] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0155.677] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0155.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0155.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 [0155.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d80) returned 1 Thread: id = 1807 os_tid = 0x4bc [0151.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini")) returned 0x20 [0151.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.516] GetLastError () returned 0x5 [0151.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 1808 os_tid = 0x5d8 [0151.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 0x20 [0151.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0151.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.518] GetLastError () returned 0x5 [0151.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0151.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 1809 os_tid = 0x5d4 [0151.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini")) returned 0x20 [0151.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.520] GetLastError () returned 0x5 [0151.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0151.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 1810 os_tid = 0x1688 [0151.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 0x20 [0151.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0151.522] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.522] GetLastError () returned 0x5 [0151.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0151.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1811 os_tid = 0x168c [0151.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e096b0 [0151.524] wcscpy (in: _Dest=0x3e096b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0151.524] wcscat (in: _Dest=0x3e096b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0151.524] wcscat (in: _Dest=0x3e096b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*" [0151.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0151.524] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0151.768] wcscmp (_String1=".", _String2=".") returned 0 [0151.768] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.768] wcscmp (_String1="..", _String2=".") returned 1 [0151.768] wcscmp (_String1="..", _String2="..") returned 0 [0151.768] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0151.768] wcscmp (_String1="macromedia.com", _String2=".") returned 1 [0151.768] wcscmp (_String1="macromedia.com", _String2="..") returned 1 [0151.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69581a8 [0151.769] wcscpy (in: _Dest=0x69581a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0151.769] wcscat (in: _Dest=0x69581a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0151.769] wcscat (in: _Dest=0x69581a8, _Source="macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0157.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0157.921] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0157.921] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0157.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0157.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e096b0) returned 1 [0157.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09b30) returned 1 Thread: id = 1812 os_tid = 0x1690 [0151.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20 [0151.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0151.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.525] GetLastError () returned 0x5 [0151.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0151.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 1813 os_tid = 0x1694 [0151.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20 [0151.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0151.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.526] GetLastError () returned 0x5 [0151.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0151.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 1814 os_tid = 0x1698 [0151.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20 [0151.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0151.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.528] GetLastError () returned 0x5 [0151.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0151.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 1815 os_tid = 0x169c [0151.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20 [0154.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0155.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.724] GetLastError () returned 0x5 [0155.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0155.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 1816 os_tid = 0x16a0 [0151.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20 [0156.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0156.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.331] GetLastError () returned 0x5 [0156.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0156.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 1817 os_tid = 0x16a4 [0151.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20 [0156.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0156.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.333] GetLastError () returned 0x5 [0156.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0156.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 1818 os_tid = 0x16a8 [0151.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20 [0154.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0156.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.065] GetLastError () returned 0x5 [0156.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0156.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 1819 os_tid = 0x16ac [0151.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20 [0156.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0156.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.336] GetLastError () returned 0x5 [0156.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0156.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 1820 os_tid = 0x16b0 [0151.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20 [0156.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0156.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.335] GetLastError () returned 0x5 [0156.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0156.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 1821 os_tid = 0x16b4 [0151.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20 [0156.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0156.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.338] GetLastError () returned 0x5 [0156.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0156.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f277a0) returned 1 Thread: id = 1822 os_tid = 0x16b8 [0151.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0151.533] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.533] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.533] wcscat (in: _Dest=0x2ff63a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*" [0151.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0151.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0151.769] wcscmp (_String1=".", _String2=".") returned 0 [0151.769] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.769] wcscmp (_String1="..", _String2=".") returned 1 [0151.769] wcscmp (_String1="..", _String2="..") returned 0 [0151.769] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1 [0151.769] wcscmp (_String1="AboutBox.zip", _String2=".") returned 1 [0151.769] wcscmp (_String1="AboutBox.zip", _String2="..") returned 1 [0151.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036ca0 [0151.769] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0151.769] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0151.769] wcscat (in: _Dest=0x3036ca0, _Source="AboutBox.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" [0152.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0152.188] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0152.188] wcscmp (_String1="AppConfig.zip", _String2=".") returned 1 [0152.188] wcscmp (_String1="AppConfig.zip", _String2="..") returned 1 [0152.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3036b00 [0152.188] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.188] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.188] wcscat (in: _Dest=0x3036b00, _Source="AppConfig.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" [0152.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0152.189] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="APPCON~2.ZIP")) returned 1 [0152.189] wcscmp (_String1="AppConfigInternal.zip", _String2=".") returned 1 [0152.189] wcscmp (_String1="AppConfigInternal.zip", _String2="..") returned 1 [0152.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9528 [0152.189] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.189] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.189] wcscat (in: _Dest=0x2c9528, _Source="AppConfigInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" [0152.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0152.191] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0152.191] wcscmp (_String1="AssemblyInfo.zip", _String2=".") returned 1 [0152.191] wcscmp (_String1="AssemblyInfo.zip", _String2="..") returned 1 [0152.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48730 [0152.191] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.191] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.191] wcscat (in: _Dest=0x3e48730, _Source="AssemblyInfo.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" [0152.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0152.192] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~2.ZIP")) returned 1 [0152.192] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0152.192] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0152.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56838 [0152.192] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.192] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.192] wcscat (in: _Dest=0x3d56838, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" [0152.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0152.194] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0152.194] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0152.194] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0152.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df08a0 [0152.194] wcscpy (in: _Dest=0x3df08a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.194] wcscat (in: _Dest=0x3df08a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.194] wcscat (in: _Dest=0x3df08a0, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" [0152.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df08a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0152.195] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1 [0152.195] wcscmp (_String1="CodeFile.zip", _String2=".") returned 1 [0152.195] wcscmp (_String1="CodeFile.zip", _String2="..") returned 1 [0152.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x30352a0 [0152.195] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.195] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.195] wcscat (in: _Dest=0x30352a0, _Source="CodeFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" [0152.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0152.197] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1 [0152.197] wcscmp (_String1="DataSet.zip", _String2=".") returned 1 [0152.197] wcscmp (_String1="DataSet.zip", _String2="..") returned 1 [0152.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036210 [0152.197] wcscpy (in: _Dest=0x3036210, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.197] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.197] wcscat (in: _Dest=0x3036210, _Source="DataSet.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" [0152.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0152.198] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0152.198] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0152.198] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0152.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48808 [0152.198] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.198] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.198] wcscat (in: _Dest=0x3e48808, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" [0152.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0152.200] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0152.200] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0152.200] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0152.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0a30 [0152.200] wcscpy (in: _Dest=0x3df0a30, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.200] wcscat (in: _Dest=0x3df0a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.200] wcscat (in: _Dest=0x3df0a30, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" [0152.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0152.201] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="INTERF~1.ZIP")) returned 1 [0152.201] wcscmp (_String1="Interface.zip", _String2=".") returned 1 [0152.201] wcscmp (_String1="Interface.zip", _String2="..") returned 1 [0152.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36040 [0152.201] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.201] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.201] wcscat (in: _Dest=0x3e36040, _Source="Interface.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" [0152.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0152.203] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0152.203] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0152.203] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0152.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35b60 [0152.203] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.203] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.203] wcscat (in: _Dest=0x3e35b60, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" [0152.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0152.204] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1 [0152.204] wcscmp (_String1="Resource.zip", _String2=".") returned 1 [0152.204] wcscmp (_String1="Resource.zip", _String2="..") returned 1 [0152.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0152.204] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.204] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.204] wcscat (in: _Dest=0x3e35d00, _Source="Resource.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" [0152.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0152.206] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0152.206] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0152.206] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0152.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0152.206] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.206] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.206] wcscat (in: _Dest=0x2c9448, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" [0152.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0152.207] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1 [0152.207] wcscmp (_String1="Settings.zip", _String2=".") returned 1 [0152.207] wcscmp (_String1="Settings.zip", _String2="..") returned 1 [0152.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35f70 [0152.208] wcscpy (in: _Dest=0x3e35f70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.208] wcscat (in: _Dest=0x3e35f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.208] wcscat (in: _Dest=0x3e35f70, _Source="Settings.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" [0152.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0152.209] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0152.209] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0152.209] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0152.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9988 [0152.209] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.209] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.209] wcscat (in: _Dest=0x2c9988, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" [0152.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0152.210] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1 [0152.210] wcscmp (_String1="TextFile.zip", _String2=".") returned 1 [0152.210] wcscmp (_String1="TextFile.zip", _String2="..") returned 1 [0152.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36110 [0152.210] wcscpy (in: _Dest=0x3e36110, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.210] wcscat (in: _Dest=0x3e36110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.210] wcscat (in: _Dest=0x3e36110, _Source="TextFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" [0152.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0152.212] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0152.212] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0152.212] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0152.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e488e0 [0152.212] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.212] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.212] wcscat (in: _Dest=0x3e488e0, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" [0152.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e488e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0152.213] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="VISUAL~1.ZIP")) returned 1 [0152.213] wcscmp (_String1="Visualizer.zip", _String2=".") returned 1 [0152.213] wcscmp (_String1="Visualizer.zip", _String2="..") returned 1 [0152.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e489b8 [0152.213] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.213] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.213] wcscat (in: _Dest=0x3e489b8, _Source="Visualizer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" [0152.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0152.215] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1 [0152.215] wcscmp (_String1="XmlFile.zip", _String2=".") returned 1 [0152.215] wcscmp (_String1="XmlFile.zip", _String2="..") returned 1 [0152.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36520 [0152.215] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0152.215] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0152.215] wcscat (in: _Dest=0x3e36520, _Source="XmlFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" [0152.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0152.216] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0 [0152.216] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0152.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0152.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 [0152.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 1823 os_tid = 0x16bc [0151.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df0968 [0151.535] wcscpy (in: _Dest=0x3df0968, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0151.535] wcscat (in: _Dest=0x3df0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0151.535] wcscat (in: _Dest=0x3df0968, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*" [0151.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0151.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0152.379] wcscmp (_String1=".", _String2=".") returned 0 [0152.379] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.379] wcscmp (_String1="..", _String2=".") returned 1 [0152.379] wcscmp (_String1="..", _String2="..") returned 0 [0152.379] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0152.379] wcscmp (_String1="AppConfigurationInternal.zip", _String2=".") returned 1 [0152.379] wcscmp (_String1="AppConfigurationInternal.zip", _String2="..") returned 1 [0152.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad560 [0152.379] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0152.379] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0152.380] wcscat (in: _Dest=0x3dad560, _Source="AppConfigurationInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" [0153.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0153.488] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0153.488] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0153.488] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0153.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea82c8 [0153.488] wcscpy (in: _Dest=0x3ea82c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.488] wcscat (in: _Dest=0x3ea82c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.488] wcscat (in: _Dest=0x3ea82c8, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" [0153.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea82c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0153.489] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0153.489] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0153.489] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0153.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48730 [0153.490] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.490] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.490] wcscat (in: _Dest=0x3e48730, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" [0153.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0153.491] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0153.491] wcscmp (_String1="Dataset.zip", _String2=".") returned 1 [0153.491] wcscmp (_String1="Dataset.zip", _String2="..") returned 1 [0153.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48a90 [0153.491] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.491] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.491] wcscat (in: _Dest=0x3e48a90, _Source="Dataset.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" [0153.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0153.492] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0153.493] wcscmp (_String1="Dialog.zip", _String2=".") returned 1 [0153.493] wcscmp (_String1="Dialog.zip", _String2="..") returned 1 [0153.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0153.493] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.493] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.493] wcscat (in: _Dest=0x3e48b68, _Source="Dialog.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" [0153.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0153.494] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0153.494] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0153.494] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0153.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56838 [0153.494] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.494] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.494] wcscat (in: _Dest=0x3d56838, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" [0153.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0153.496] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0153.496] wcscmp (_String1="Explorer.zip", _String2=".") returned 1 [0153.496] wcscmp (_String1="Explorer.zip", _String2="..") returned 1 [0153.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30125c8 [0153.496] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.496] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.496] wcscat (in: _Dest=0x30125c8, _Source="Explorer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" [0153.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0153.497] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0153.497] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0153.497] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0153.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3036b00 [0153.497] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.497] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.497] wcscat (in: _Dest=0x3036b00, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" [0153.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0153.500] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0153.500] wcscmp (_String1="LoginForm.zip", _String2=".") returned 1 [0153.500] wcscmp (_String1="LoginForm.zip", _String2="..") returned 1 [0153.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9528 [0153.500] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.500] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.500] wcscat (in: _Dest=0x2c9528, _Source="LoginForm.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" [0153.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0153.502] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0153.502] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0153.502] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0153.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0153.502] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.502] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.502] wcscat (in: _Dest=0x2c8568, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" [0153.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0153.503] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5915a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0153.503] wcscmp (_String1="Module.zip", _String2=".") returned 1 [0153.503] wcscmp (_String1="Module.zip", _String2="..") returned 1 [0153.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3012a00 [0153.503] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.503] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.503] wcscat (in: _Dest=0x3012a00, _Source="Module.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" [0153.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0153.505] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0153.505] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0153.505] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0153.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56750 [0153.505] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.505] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.505] wcscat (in: _Dest=0x3d56750, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" [0153.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0153.506] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0153.506] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0153.506] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0153.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56668 [0153.506] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.506] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.506] wcscat (in: _Dest=0x3d56668, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" [0153.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0153.508] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0153.508] wcscmp (_String1="SplashScreen.zip", _String2=".") returned 1 [0153.508] wcscmp (_String1="SplashScreen.zip", _String2="..") returned 1 [0153.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9a68 [0153.508] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.508] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.508] wcscat (in: _Dest=0x2c9a68, _Source="SplashScreen.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" [0153.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0153.509] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0153.509] wcscmp (_String1="Text.zip", _String2=".") returned 1 [0153.509] wcscmp (_String1="Text.zip", _String2="..") returned 1 [0153.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3036ca0 [0153.509] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.509] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.509] wcscat (in: _Dest=0x3036ca0, _Source="Text.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" [0153.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0153.511] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0153.511] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0153.511] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0153.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x67078b0 [0153.511] wcscpy (in: _Dest=0x67078b0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0153.511] wcscat (in: _Dest=0x67078b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0153.511] wcscat (in: _Dest=0x67078b0, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" [0153.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67078b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0153.512] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0153.512] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0153.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0153.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0968) returned 1 [0153.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 1824 os_tid = 0x16c0 [0151.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif")) returned 0x20 [0154.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0154.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.983] GetLastError () returned 0x5 [0154.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0154.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 Thread: id = 1825 os_tid = 0x16c4 [0151.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif")) returned 0x20 [0153.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0153.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.762] GetLastError () returned 0x5 [0153.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0153.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 1826 os_tid = 0x16c8 [0151.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif")) returned 0x20 [0153.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0153.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.763] GetLastError () returned 0x5 [0153.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0153.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 Thread: id = 1827 os_tid = 0x16cc [0151.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif")) returned 0x20 [0154.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0154.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.948] GetLastError () returned 0x5 [0154.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0154.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 1828 os_tid = 0x16d0 [0151.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif")) returned 0x20 [0154.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0154.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.950] GetLastError () returned 0x5 [0154.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0154.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcf78) returned 1 Thread: id = 1829 os_tid = 0x16d4 [0151.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif")) returned 0x20 [0154.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0154.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.952] GetLastError () returned 0x5 [0154.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0154.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db748) returned 1 Thread: id = 1830 os_tid = 0x16d8 [0151.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif")) returned 0x20 [0154.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0154.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.953] GetLastError () returned 0x5 [0154.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0154.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbaa8) returned 1 Thread: id = 1831 os_tid = 0x16dc [0151.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif")) returned 0x20 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0154.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.980] GetLastError () returned 0x5 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0154.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 1832 os_tid = 0x16e0 [0151.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif")) returned 0x20 [0154.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0154.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.982] GetLastError () returned 0x5 [0154.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0154.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 1833 os_tid = 0x16e4 [0151.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif")) returned 0x20 [0154.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0154.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.979] GetLastError () returned 0x5 [0154.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0154.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 1834 os_tid = 0x16e8 [0151.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif")) returned 0x20 [0154.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0154.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.968] GetLastError () returned 0x5 [0154.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0154.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 Thread: id = 1835 os_tid = 0x16ec [0151.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif")) returned 0x20 [0154.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0154.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.976] GetLastError () returned 0x5 [0154.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0154.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 1836 os_tid = 0x1750 [0151.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif")) returned 0x20 [0154.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0154.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.977] GetLastError () returned 0x5 [0154.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0154.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 Thread: id = 1837 os_tid = 0x1754 [0151.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif")) returned 0x20 [0154.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0154.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.969] GetLastError () returned 0x5 [0154.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0154.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 1838 os_tid = 0x1758 [0151.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif")) returned 0x20 [0154.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0154.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.974] GetLastError () returned 0x5 [0154.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0154.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 1839 os_tid = 0x175c [0151.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif")) returned 0x20 [0154.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0154.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.972] GetLastError () returned 0x5 [0154.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0154.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 1840 os_tid = 0x1760 [0151.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif")) returned 0x20 [0154.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0154.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.966] GetLastError () returned 0x5 [0154.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0154.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 1841 os_tid = 0x1764 [0151.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif")) returned 0x20 [0154.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0154.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.971] GetLastError () returned 0x5 [0154.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0154.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 1842 os_tid = 0x176c [0151.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif")) returned 0x20 [0154.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0154.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.965] GetLastError () returned 0x5 [0154.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0154.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 1843 os_tid = 0xcc0 [0151.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif")) returned 0x20 [0154.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0154.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.961] GetLastError () returned 0x5 [0154.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0154.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354f30) returned 1 Thread: id = 1844 os_tid = 0x884 [0151.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif")) returned 0x20 [0154.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0154.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.959] GetLastError () returned 0x5 [0154.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0154.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 Thread: id = 1845 os_tid = 0x4c0 [0151.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif")) returned 0x20 [0154.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0154.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.955] GetLastError () returned 0x5 [0154.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0154.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 1846 os_tid = 0xb48 [0151.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif")) returned 0x20 [0154.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0154.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.957] GetLastError () returned 0x5 [0154.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0154.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 1847 os_tid = 0xb70 [0151.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif")) returned 0x20 [0154.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0154.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.963] GetLastError () returned 0x5 [0154.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0154.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2498) returned 1 Thread: id = 1848 os_tid = 0x508 [0151.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif")) returned 0x20 [0153.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0153.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.760] GetLastError () returned 0x5 [0153.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0153.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df22e8) returned 1 Thread: id = 1849 os_tid = 0xb88 [0151.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml")) returned 0x20 [0151.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0151.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.770] GetLastError () returned 0x5 [0151.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0151.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc1f8) returned 1 Thread: id = 1850 os_tid = 0x524 [0151.776] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\gzxlsndo5ve.jpg")) returned 0x20 [0151.776] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg", dwFileAttributes=0x20) returned 1 [0151.776] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\gzxlsndo5ve.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbac [0151.777] GetFileSizeEx (in: hFile=0xbac, lpFileSize=0x450fcbc | out: lpFileSize=0x450fcbc*=86012) returned 1 [0151.777] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x14ff8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.777] ReadFile (in: hFile=0xbac, lpBuffer=0x450fc98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x450fca8, lpOverlapped=0x0 | out: lpBuffer=0x450fc98*, lpNumberOfBytesRead=0x450fca8*=0x4, lpOverlapped=0x0) returned 1 [0151.778] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0151.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.779] NtQuerySystemTime (in: CurrentTime=0x450fc30 | out: CurrentTime=0x450fc30*=132482710603920000) returned 0x0 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x4b679795 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x3cde84c0 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x2becb83a [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x164558ff [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x8c6d608 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x1791e606 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x2d035b30 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x564690a2 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x26f1784d [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x6104b65c [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x28577536 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x6812a170 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x40c9e14 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x13c845f7 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x4d4431a3 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x706067e0 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x695b0ba9 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x1a9b2da [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x17992dd3 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x662be321 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0xa3fb77d [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x2fded991 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x573979e9 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x2008190c [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x5b39ad5a [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x56dcde4c [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x102fa8e3 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x424041d2 [0151.779] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x31f7dc37 [0151.780] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x242c42dd [0151.780] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x1beb1463 [0151.780] RtlRandomEx (in: Seed=0x450fc28 | out: Seed=0x450fc28) returned 0x47b151b9 [0151.787] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.787] ReadFile (in: hFile=0xbac, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0151.788] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe558 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0151.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0151.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe558) returned 1 [0151.788] WriteFile (in: hFile=0xbac, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0152.377] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.377] ReadFile (in: hFile=0xbac, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.377] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32d90 [0152.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30152b0 [0152.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c9b8 [0152.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0152.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0152.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c9b8 [0152.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caf8 [0152.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0152.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0152.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d90) returned 1 [0152.378] WriteFile (in: hFile=0xbac, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0152.985] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x113fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.985] ReadFile (in: hFile=0xbac, lpBuffer=0x6895538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6895538*, lpNumberOfBytesRead=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.986] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x113fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3bc0 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0152.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6899140 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0152.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0152.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0152.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3bc0) returned 1 [0152.986] WriteFile (in: hFile=0xbac, lpBuffer=0x6899140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x450fc30, lpOverlapped=0x0 | out: lpBuffer=0x6899140*, lpNumberOfBytesWritten=0x450fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0153.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899140) returned 1 [0153.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd5e8 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0153.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19e70 [0153.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0153.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66feb88) returned 1 [0153.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x354340 [0153.314] SetFilePointerEx (in: hFile=0xbac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.314] WriteFile (in: hFile=0xbac, lpBuffer=0x354340*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x450fcb0, lpOverlapped=0x0 | out: lpBuffer=0x354340*, lpNumberOfBytesWritten=0x450fcb0*=0x150, lpOverlapped=0x0) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354340) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e38) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0157.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0157.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d328 [0157.510] wcscpy (in: _Dest=0x674d328, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg" [0157.510] wcscat (in: _Dest=0x674d328, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg.ac3a86" [0157.510] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg.ac3a86", NtPathName=0x450fc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\GZXLSNdo5vE.jpg.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5bee8 [0160.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 [0160.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6951d40) returned 1 [0160.001] NtQueryInformationFile (in: FileHandle=0xbac, IoStatusBlock=0x450fc00, FileInformation=0x450fc08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x450fc00, FileInformation=0x450fc08) returned 0x0 [0160.001] NtSetInformationFile (FileHandle=0xbac, IoStatusBlock=0x450fc00, FileInformation=0x450fc08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 [0160.385] FlushFileBuffers (hFile=0xbac) returned 1 [0160.389] CloseHandle (hObject=0xbac) returned 1 [0160.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27360 [0160.439] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0160.439] wcscat (in: _Dest=0x3f27360, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" [0160.439] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ac3a86-readme.txt")) returned 0x20 [0160.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0160.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e106f0) returned 1 Thread: id = 1851 os_tid = 0x140 [0151.790] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ml-cjxjmi.avi")) returned 0x20 [0151.790] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi", dwFileAttributes=0x20) returned 1 [0151.790] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ml-cjxjmi.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xecc [0151.791] GetFileSizeEx (in: hFile=0xecc, lpFileSize=0xa46febc | out: lpFileSize=0xa46febc*=78205) returned 1 [0151.791] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x13179, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.791] ReadFile (in: hFile=0xecc, lpBuffer=0xa46fe98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa46fea8, lpOverlapped=0x0 | out: lpBuffer=0xa46fe98*, lpNumberOfBytesRead=0xa46fea8*=0x4, lpOverlapped=0x0) returned 1 [0151.792] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0151.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.793] NtQuerySystemTime (in: CurrentTime=0xa46fe30 | out: CurrentTime=0xa46fe30*=132482710604076000) returned 0x0 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0xd74544a [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x3a52e525 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x38243431 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x62116c6f [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x1ac65fe8 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x6fac76f3 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x7fc2585e [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x179e656a [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x5df56d55 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x50bb5b8b [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x722de6e7 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x1b816d9d [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x72cd7a7a [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x6bc13d0b [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x264902a6 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x510f772 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x7c9283de [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x2c87624d [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x2eb0a5d5 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x282b1e86 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x5a24c852 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x6663c500 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x432a981b [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x1d4fe4c2 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x618cdd96 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x4eddd012 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x7e5e74c9 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x3f6e3ce7 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x6f09d453 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x77dd4f2c [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x503fb903 [0151.793] RtlRandomEx (in: Seed=0xa46fe28 | out: Seed=0xa46fe28) returned 0x2990a7eb [0151.803] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.803] ReadFile (in: hFile=0xecc, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0151.803] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe870 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0151.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0151.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0151.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0151.804] WriteFile (in: hFile=0xecc, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0152.380] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.380] ReadFile (in: hFile=0xecc, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.380] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32d90 [0152.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30152b0 [0152.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caf8 [0152.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0152.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0152.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caf8 [0152.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0152.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0152.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30152b0) returned 1 [0152.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d90) returned 1 [0152.381] WriteFile (in: hFile=0xecc, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0152.988] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0xf57d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.988] ReadFile (in: hFile=0xecc, lpBuffer=0x686fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x686fce8*, lpNumberOfBytesRead=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0152.988] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0xf57d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3bc0 [0152.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0152.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0152.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0152.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68738f0 [0152.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0152.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c670 [0152.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0152.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0152.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3bc0) returned 1 [0152.989] WriteFile (in: hFile=0xecc, lpBuffer=0x68738f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa46fe30, lpOverlapped=0x0 | out: lpBuffer=0x68738f0*, lpNumberOfBytesWritten=0xa46fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0153.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68738f0) returned 1 [0153.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd3e0 [0153.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0153.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ae0 [0153.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0153.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0153.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0153.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 [0153.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66feb88) returned 1 [0153.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e63ff0 [0153.315] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.315] WriteFile (in: hFile=0xecc, lpBuffer=0x3e63ff0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xa46feb0, lpOverlapped=0x0 | out: lpBuffer=0x3e63ff0*, lpNumberOfBytesWritten=0xa46feb0*=0x14c, lpOverlapped=0x0) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63ff0) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd3e0) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0155.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b708) returned 1 [0155.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27140 [0155.097] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi" [0155.097] wcscat (in: _Dest=0x3f27140, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi.ac3a86" [0155.097] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi.ac3a86", NtPathName=0xa46fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\Ml-CJXJmi.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0155.149] FlushFileBuffers (hFile=0xecc) returned 1 [0155.156] CloseHandle (hObject=0xecc) returned 1 [0155.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27140 [0155.157] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0155.157] wcscat (in: _Dest=0x3f27140, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" [0155.158] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ac3a86-readme.txt")) returned 0x20 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09bb0) returned 1 Thread: id = 1852 os_tid = 0x11d4 [0151.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\vwll.avi")) returned 0x20 [0151.806] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi", dwFileAttributes=0x20) returned 1 [0151.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\vwll.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xea0 [0151.807] GetFileSizeEx (in: hFile=0xea0, lpFileSize=0x7fafd84 | out: lpFileSize=0x7fafd84*=4862) returned 1 [0151.807] SetFilePointerEx (in: hFile=0xea0, liDistanceToMove=0x12fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.807] ReadFile (in: hFile=0xea0, lpBuffer=0x7fafd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fafd70, lpOverlapped=0x0 | out: lpBuffer=0x7fafd60*, lpNumberOfBytesRead=0x7fafd70*=0x4, lpOverlapped=0x0) returned 1 [0151.808] SetFilePointerEx (in: hFile=0xea0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0151.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0151.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0151.809] NtQuerySystemTime (in: CurrentTime=0x7fafcf8 | out: CurrentTime=0x7fafcf8*=132482710604232000) returned 0x0 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x5c5da76b [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x296eea2f [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x2d1fe0b4 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x5ca61fcb [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x10a62c93 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x679d629 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x213f131a [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x1e0d4170 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x7cd359bc [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x74b6053e [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x13432ccc [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x631165df [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x16e62a76 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x44fe45a7 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x16338870 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x5b84fd82 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0xb6ef0e1 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0xb8a5289 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x11348243 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x3c6b72d5 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x8a0303b [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x758840b7 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x168d8ca8 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0xeb05cba [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x63a56b46 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x75fefb15 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x314f11de [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x7ddf7fd6 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x705696a7 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x5450dd6b [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x4739e91 [0151.809] RtlRandomEx (in: Seed=0x7fafcf0 | out: Seed=0x7fafcf0) returned 0x3ef1d3c4 [0151.817] ReadFile (in: hFile=0xea0, lpBuffer=0x688dd28, nNumberOfBytesToRead=0x12fe, lpNumberOfBytesRead=0x7fafcec, lpOverlapped=0x0 | out: lpBuffer=0x688dd28*, lpNumberOfBytesRead=0x7fafcec*=0x12fe, lpOverlapped=0x0) returned 1 [0151.817] SetFilePointerEx (in: hFile=0xea0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.817] WriteFile (in: hFile=0xea0, lpBuffer=0x6891930*, nNumberOfBytesToWrite=0x12fe, lpNumberOfBytesWritten=0x7fafcf0, lpOverlapped=0x0 | out: lpBuffer=0x6891930*, lpNumberOfBytesWritten=0x7fafcf0*=0x12fe, lpOverlapped=0x0) returned 1 [0152.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0152.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0152.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0152.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891930) returned 1 [0152.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dd28) returned 1 [0152.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0152.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66feaf8) returned 1 [0152.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dcaa30 [0152.383] SetFilePointerEx (in: hFile=0xea0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.383] WriteFile (in: hFile=0xea0, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x7fafd78, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x7fafd78*=0x102, lpOverlapped=0x0) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0155.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0155.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0155.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b7b8 [0155.072] wcscpy (in: _Dest=0x674b7b8, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi" [0155.072] wcscat (in: _Dest=0x674b7b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi.ac3a86" [0155.072] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi.ac3a86", NtPathName=0x7fafcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\VWll.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958700 [0155.144] FlushFileBuffers (hFile=0xea0) returned 1 [0155.149] CloseHandle (hObject=0xea0) returned 1 [0155.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27140 [0155.150] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\" [0155.150] wcscat (in: _Dest=0x3f27140, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" [0155.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ac3a86-readme.txt")) returned 0xffffffff [0155.150] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\0EEg-ZlYVqrH\\ra6N\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\0eeg-zlyvqrh\\ra6n\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xea0 [0155.151] WriteFile (in: hFile=0xea0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7fafd0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7fafd0c*=0x8b9, lpOverlapped=0x0) returned 1 [0155.153] CloseHandle (hObject=0xea0) returned 1 [0155.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 [0155.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c30) returned 1 Thread: id = 1853 os_tid = 0x1294 [0151.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt")) returned 0x20 [0153.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0153.816] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.816] GetLastError () returned 0x5 [0153.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0153.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 Thread: id = 1854 os_tid = 0x100c [0151.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties")) returned 0x20 [0153.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0153.815] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.815] GetLastError () returned 0x5 [0153.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0153.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23df0) returned 1 Thread: id = 1855 os_tid = 0x1010 [0151.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0151.821] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0151.821] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0151.821] wcscat (in: _Dest=0x2fe6c68, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\*" [0151.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c26e0 [0151.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0154.990] wcscmp (_String1=".", _String2=".") returned 0 [0154.990] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.990] wcscmp (_String1="..", _String2=".") returned 1 [0154.990] wcscmp (_String1="..", _String2="..") returned 0 [0154.990] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fda680, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fda680, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fda680, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0154.990] wcscmp (_String1="jmxremote.access", _String2=".") returned 1 [0154.990] wcscmp (_String1="jmxremote.access", _String2="..") returned 1 [0154.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b6b8 [0154.990] wcscpy (in: _Dest=0x674b6b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0154.990] wcscat (in: _Dest=0x674b6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0154.990] wcscat (in: _Dest=0x674b6b8, _Source="jmxremote.access" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" [0157.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0157.910] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0157.911] wcscmp (_String1="jmxremote.password.template", _String2=".") returned 1 [0157.911] wcscmp (_String1="jmxremote.password.template", _String2="..") returned 1 [0157.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68197a0 [0157.911] wcscpy (in: _Dest=0x68197a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0157.911] wcscat (in: _Dest=0x68197a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0157.911] wcscat (in: _Dest=0x68197a0, _Source="jmxremote.password.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" [0157.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68197a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0157.912] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0157.912] wcscmp (_String1="management.properties", _String2=".") returned 1 [0157.912] wcscmp (_String1="management.properties", _String2="..") returned 1 [0157.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f03f0 [0157.912] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0157.912] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0157.912] wcscat (in: _Dest=0x66f03f0, _Source="management.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" [0157.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0157.913] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0157.913] wcscmp (_String1="snmp.acl.template", _String2=".") returned 1 [0157.913] wcscmp (_String1="snmp.acl.template", _String2="..") returned 1 [0157.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb8f8 [0157.913] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0157.913] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0157.913] wcscat (in: _Dest=0x3edb8f8, _Source="snmp.acl.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" [0157.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0157.914] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0157.914] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0157.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26e0) returned 1 [0157.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0157.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 1856 os_tid = 0xb10 [0151.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar")) returned 0x20 [0153.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0153.812] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.812] GetLastError () returned 0x5 [0153.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0153.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23bc0) returned 1 Thread: id = 1857 os_tid = 0x1478 [0151.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index")) returned 0x20 [0153.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0153.810] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.810] GetLastError () returned 0x5 [0153.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0153.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 1858 os_tid = 0x147c [0151.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties")) returned 0x20 [0153.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0153.809] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.809] GetLastError () returned 0x5 [0153.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0153.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce100) returned 1 Thread: id = 1859 os_tid = 0x1480 [0151.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar")) returned 0x20 [0153.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0153.807] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.807] GetLastError () returned 0x5 [0153.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0153.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 1860 os_tid = 0x1484 [0151.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja")) returned 0x20 [0153.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0153.806] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.806] GetLastError () returned 0x5 [0153.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0153.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a00) returned 1 Thread: id = 1861 os_tid = 0x1488 [0151.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties")) returned 0x20 [0153.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0153.805] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.805] GetLastError () returned 0x5 [0153.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0153.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23840) returned 1 Thread: id = 1862 os_tid = 0x148c [0151.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar")) returned 0x20 [0153.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0153.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.803] GetLastError () returned 0x5 [0153.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0153.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd310) returned 1 Thread: id = 1863 os_tid = 0x1490 [0151.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar")) returned 0x20 [0153.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0153.321] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.321] GetLastError () returned 0x5 [0153.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0153.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7e90) returned 1 Thread: id = 1864 os_tid = 0x1494 [0151.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe0c68 [0151.826] wcscpy (in: _Dest=0x2fe0c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0151.826] wcscat (in: _Dest=0x2fe0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0151.826] wcscat (in: _Dest=0x2fe0c68, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\*" [0151.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0151.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0154.989] wcscmp (_String1=".", _String2=".") returned 0 [0154.989] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.989] wcscmp (_String1="..", _String2=".") returned 1 [0154.989] wcscmp (_String1="..", _String2="..") returned 0 [0154.989] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0154.989] wcscmp (_String1="blacklist", _String2=".") returned 1 [0154.989] wcscmp (_String1="blacklist", _String2="..") returned 1 [0154.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29250 [0154.989] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0154.989] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0154.989] wcscat (in: _Dest=0x3f29250, _Source="blacklist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" [0156.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0156.249] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0156.249] wcscmp (_String1="cacerts", _String2=".") returned 1 [0156.249] wcscmp (_String1="cacerts", _String2="..") returned 1 [0156.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0156.249] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.249] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.249] wcscat (in: _Dest=0x3d8bf20, _Source="cacerts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" [0156.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0156.250] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0156.250] wcscmp (_String1="java.policy", _String2=".") returned 1 [0156.251] wcscmp (_String1="java.policy", _String2="..") returned 1 [0156.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29410 [0156.251] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.251] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.251] wcscat (in: _Dest=0x3f29410, _Source="java.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" [0156.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0156.252] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0156.252] wcscmp (_String1="java.security", _String2=".") returned 1 [0156.252] wcscmp (_String1="java.security", _String2="..") returned 1 [0156.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aac0 [0156.252] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.252] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.252] wcscat (in: _Dest=0x3f1aac0, _Source="java.security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" [0156.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1aac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0156.253] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="JAVAFX~1.POL")) returned 1 [0156.253] wcscmp (_String1="javafx.policy", _String2=".") returned 1 [0156.253] wcscmp (_String1="javafx.policy", _String2="..") returned 1 [0156.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b150 [0156.253] wcscpy (in: _Dest=0x3f1b150, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.253] wcscat (in: _Dest=0x3f1b150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.253] wcscat (in: _Dest=0x3f1b150, _Source="javafx.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" [0156.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0156.254] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0156.254] wcscmp (_String1="javaws.policy", _String2=".") returned 1 [0156.254] wcscmp (_String1="javaws.policy", _String2="..") returned 1 [0156.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b498 [0156.254] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.254] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.255] wcscat (in: _Dest=0x3f1b498, _Source="javaws.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" [0156.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0156.255] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0156.255] wcscmp (_String1="local_policy.jar", _String2=".") returned 1 [0156.255] wcscmp (_String1="local_policy.jar", _String2="..") returned 1 [0156.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674abb8 [0156.256] wcscpy (in: _Dest=0x674abb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.256] wcscat (in: _Dest=0x674abb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.256] wcscat (in: _Dest=0x674abb8, _Source="local_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" [0156.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674abb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0156.257] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0156.257] wcscmp (_String1="trusted.libraries", _String2=".") returned 1 [0156.257] wcscmp (_String1="trusted.libraries", _String2="..") returned 1 [0156.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b038 [0156.257] wcscpy (in: _Dest=0x674b038, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.257] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.257] wcscat (in: _Dest=0x674b038, _Source="trusted.libraries" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" [0156.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0156.258] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0156.258] wcscmp (_String1="US_export_policy.jar", _String2=".") returned 1 [0156.258] wcscmp (_String1="US_export_policy.jar", _String2="..") returned 1 [0156.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26d88 [0156.258] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0156.258] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0156.258] wcscat (in: _Dest=0x3f26d88, _Source="US_export_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" [0156.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0156.259] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0156.259] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0156.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0156.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 [0156.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7cd8) returned 1 Thread: id = 1865 os_tid = 0x1498 [0151.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties")) returned 0x20 [0153.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0153.319] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.319] GetLastError () returned 0x5 [0153.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0153.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd378) returned 1 Thread: id = 1866 os_tid = 0x149c [0151.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings")) returned 0x20 [0153.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0153.820] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.820] GetLastError () returned 0x5 [0153.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0153.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 Thread: id = 1867 os_tid = 0x14a0 [0151.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e62830 [0151.828] wcscpy (in: _Dest=0x3e62830, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0151.828] wcscat (in: _Dest=0x3e62830, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0151.828] wcscat (in: _Dest=0x3e62830, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\*" [0151.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0151.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0154.990] wcscmp (_String1=".", _String2=".") returned 0 [0154.990] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.991] wcscmp (_String1="..", _String2=".") returned 1 [0154.991] wcscmp (_String1="..", _String2="..") returned 0 [0154.991] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0154.991] wcscmp (_String1="Africa", _String2=".") returned 1 [0154.991] wcscmp (_String1="Africa", _String2="..") returned 1 [0154.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe3c08 [0154.991] wcscpy (in: _Dest=0x2fe3c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0154.991] wcscat (in: _Dest=0x2fe3c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0154.991] wcscat (in: _Dest=0x2fe3c08, _Source="Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0160.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe3c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0160.657] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0160.657] wcscmp (_String1="America", _String2=".") returned 1 [0160.657] wcscmp (_String1="America", _String2="..") returned 1 [0160.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ea8 [0160.657] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.657] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.657] wcscat (in: _Dest=0x2fe6ea8, _Source="America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0160.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0160.658] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1 [0160.659] wcscmp (_String1="Antarctica", _String2=".") returned 1 [0160.659] wcscmp (_String1="Antarctica", _String2="..") returned 1 [0160.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ea30 [0160.659] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.659] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.659] wcscat (in: _Dest=0x3d8ea30, _Source="Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0160.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0160.660] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0160.660] wcscmp (_String1="Asia", _String2=".") returned 1 [0160.660] wcscmp (_String1="Asia", _String2="..") returned 1 [0160.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef7c80 [0160.660] wcscpy (in: _Dest=0x3ef7c80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.660] wcscat (in: _Dest=0x3ef7c80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.660] wcscat (in: _Dest=0x3ef7c80, _Source="Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0160.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef7c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0160.662] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0160.662] wcscmp (_String1="Atlantic", _String2=".") returned 1 [0160.662] wcscmp (_String1="Atlantic", _String2="..") returned 1 [0160.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f08 [0160.662] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.662] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.662] wcscat (in: _Dest=0x2fe6f08, _Source="Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0160.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0160.663] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1 [0160.663] wcscmp (_String1="Australia", _String2=".") returned 1 [0160.663] wcscmp (_String1="Australia", _String2="..") returned 1 [0160.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0160.663] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.664] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.664] wcscat (in: _Dest=0x2fe6728, _Source="Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0160.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0160.665] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0160.665] wcscmp (_String1="CET", _String2=".") returned 1 [0160.665] wcscmp (_String1="CET", _String2="..") returned 1 [0160.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7808 [0160.665] wcscpy (in: _Dest=0x3ef7808, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.665] wcscat (in: _Dest=0x3ef7808, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.665] wcscat (in: _Dest=0x3ef7808, _Source="CET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" [0160.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0160.666] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0160.666] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0160.666] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0160.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d28 [0160.667] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.667] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.667] wcscat (in: _Dest=0x2fe6d28, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" [0160.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0160.668] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0160.668] wcscmp (_String1="EET", _String2=".") returned 1 [0160.668] wcscmp (_String1="EET", _String2="..") returned 1 [0160.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7650 [0160.668] wcscpy (in: _Dest=0x3ef7650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.668] wcscat (in: _Dest=0x3ef7650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.668] wcscat (in: _Dest=0x3ef7650, _Source="EET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" [0160.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0160.669] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0160.669] wcscmp (_String1="EST", _String2=".") returned 1 [0160.669] wcscmp (_String1="EST", _String2="..") returned 1 [0160.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7de0 [0160.670] wcscpy (in: _Dest=0x3ef7de0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.670] wcscat (in: _Dest=0x3ef7de0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.670] wcscat (in: _Dest=0x3ef7de0, _Source="EST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" [0160.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0160.671] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0160.671] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0160.671] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0160.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe65a8 [0160.671] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.671] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.671] wcscat (in: _Dest=0x2fe65a8, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" [0160.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0160.672] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0160.672] wcscmp (_String1="Etc", _String2=".") returned 1 [0160.672] wcscmp (_String1="Etc", _String2="..") returned 1 [0160.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef75a0 [0160.673] wcscpy (in: _Dest=0x3ef75a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.673] wcscat (in: _Dest=0x3ef75a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.673] wcscat (in: _Dest=0x3ef75a0, _Source="Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0160.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ef75a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0160.674] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0160.674] wcscmp (_String1="Europe", _String2=".") returned 1 [0160.674] wcscmp (_String1="Europe", _String2="..") returned 1 [0160.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0160.674] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.674] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.674] wcscat (in: _Dest=0x2fe6c68, _Source="Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0160.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0160.675] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0160.676] wcscmp (_String1="GMT", _String2=".") returned 1 [0160.676] wcscmp (_String1="GMT", _String2="..") returned 1 [0160.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef73e8 [0160.676] wcscpy (in: _Dest=0x3ef73e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.676] wcscat (in: _Dest=0x3ef73e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.676] wcscat (in: _Dest=0x3ef73e8, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" [0160.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef73e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0160.677] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0160.677] wcscmp (_String1="HST", _String2=".") returned 1 [0160.677] wcscmp (_String1="HST", _String2="..") returned 1 [0160.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7cd8 [0160.677] wcscpy (in: _Dest=0x3ef7cd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.677] wcscat (in: _Dest=0x3ef7cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.677] wcscat (in: _Dest=0x3ef7cd8, _Source="HST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" [0160.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0160.679] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0160.679] wcscmp (_String1="Indian", _String2=".") returned 1 [0160.679] wcscmp (_String1="Indian", _String2="..") returned 1 [0160.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6de8 [0160.679] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.679] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.679] wcscat (in: _Dest=0x2fe6de8, _Source="Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0160.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0160.680] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0160.680] wcscmp (_String1="MET", _String2=".") returned 1 [0160.680] wcscmp (_String1="MET", _String2="..") returned 1 [0160.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7ff0 [0160.680] wcscpy (in: _Dest=0x3ef7ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.680] wcscat (in: _Dest=0x3ef7ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.680] wcscat (in: _Dest=0x3ef7ff0, _Source="MET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" [0160.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0160.681] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0160.681] wcscmp (_String1="MST", _String2=".") returned 1 [0160.681] wcscmp (_String1="MST", _String2="..") returned 1 [0160.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef7548 [0160.682] wcscpy (in: _Dest=0x3ef7548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.682] wcscat (in: _Dest=0x3ef7548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.682] wcscat (in: _Dest=0x3ef7548, _Source="MST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" [0160.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef7548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0160.683] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0160.683] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0160.683] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0160.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6668 [0160.683] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.683] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.683] wcscat (in: _Dest=0x2fe6668, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" [0160.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0160.684] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0160.684] wcscmp (_String1="Pacific", _String2=".") returned 1 [0160.684] wcscmp (_String1="Pacific", _String2="..") returned 1 [0160.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0160.684] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.684] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.685] wcscat (in: _Dest=0x2fe1d48, _Source="Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0160.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0160.686] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0160.686] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0160.686] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0160.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1ce8 [0160.686] wcscpy (in: _Dest=0x2fe1ce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.686] wcscat (in: _Dest=0x2fe1ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.686] wcscat (in: _Dest=0x2fe1ce8, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" [0160.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0160.687] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0160.687] wcscmp (_String1="SystemV", _String2=".") returned 1 [0160.687] wcscmp (_String1="SystemV", _String2="..") returned 1 [0160.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0160.687] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.687] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.687] wcscat (in: _Dest=0x2fe6c08, _Source="SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0160.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0160.689] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0160.689] wcscmp (_String1="WET", _String2=".") returned 1 [0160.689] wcscmp (_String1="WET", _String2="..") returned 1 [0160.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3ef72e0 [0160.689] wcscpy (in: _Dest=0x3ef72e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.689] wcscat (in: _Dest=0x3ef72e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.689] wcscat (in: _Dest=0x3ef72e0, _Source="WET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" [0160.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ef72e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0160.690] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 1 [0160.690] wcscmp (_String1="ZoneInfoMappings", _String2=".") returned 1 [0160.690] wcscmp (_String1="ZoneInfoMappings", _String2="..") returned 1 [0160.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f292c0 [0160.691] wcscpy (in: _Dest=0x3f292c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0160.691] wcscat (in: _Dest=0x3f292c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0160.691] wcscat (in: _Dest=0x3f292c0, _Source="ZoneInfoMappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" [0160.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f292c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0160.692] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 0 [0160.692] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0160.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0160.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62830) returned 1 [0160.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e619d0) returned 1 Thread: id = 1868 os_tid = 0x14a4 [0151.829] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0151.830] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0151.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.830] GetLastError () returned 0x5 [0151.830] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0151.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 1869 os_tid = 0x14a8 [0151.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi")) returned 0x20 [0152.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0152.387] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.387] GetLastError () returned 0x5 [0152.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0152.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 Thread: id = 1870 os_tid = 0x14ac [0151.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg")) returned 0x20 [0152.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0152.385] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.385] GetLastError () returned 0x5 [0152.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0152.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 1871 os_tid = 0x14b0 [0151.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 0x20 [0153.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0153.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.293] GetLastError () returned 0x5 [0153.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0153.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 1872 os_tid = 0xb30 [0151.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 0x20 [0153.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0153.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.295] GetLastError () returned 0x5 [0153.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0153.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 1873 os_tid = 0x434 [0151.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 0x20 [0153.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0153.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.297] GetLastError () returned 0x5 [0153.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0153.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 1874 os_tid = 0x14d0 [0151.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 0x20 [0153.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0153.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.299] GetLastError () returned 0x5 [0153.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0153.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 1875 os_tid = 0x308 [0151.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 0x20 [0152.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0152.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.916] GetLastError () returned 0x5 [0152.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0152.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 1876 os_tid = 0x75c [0151.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 0x20 [0153.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0153.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.259] GetLastError () returned 0x5 [0153.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0153.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 1877 os_tid = 0x7e8 [0151.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 0x20 [0153.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0153.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.300] GetLastError () returned 0x5 [0153.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0153.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1878 os_tid = 0xec8 [0151.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt")) returned 0x20 [0156.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0156.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.346] GetLastError () returned 0x5 [0156.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0156.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 1879 os_tid = 0x41c [0151.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt")) returned 0x20 [0156.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0156.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.348] GetLastError () returned 0x5 [0156.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0156.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 Thread: id = 1880 os_tid = 0xe74 [0151.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt")) returned 0x20 [0156.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0156.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.349] GetLastError () returned 0x5 [0156.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0156.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 1881 os_tid = 0xb38 [0151.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc1f8 [0151.845] wcscpy (in: _Dest=0x66dc1f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0151.845] wcscat (in: _Dest=0x66dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0151.845] wcscat (in: _Dest=0x66dc1f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*" [0151.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0151.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e805b8 [0156.759] wcscmp (_String1=".", _String2=".") returned 0 [0156.759] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.759] wcscmp (_String1="..", _String2=".") returned 1 [0156.760] wcscmp (_String1="..", _String2="..") returned 0 [0156.760] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60a0a800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60a0a800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0156.760] wcscmp (_String1="Address.accft", _String2=".") returned 1 [0156.760] wcscmp (_String1="Address.accft", _String2="..") returned 1 [0156.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d928 [0156.760] wcscpy (in: _Dest=0x3e5d928, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0156.760] wcscat (in: _Dest=0x3e5d928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0156.760] wcscat (in: _Dest=0x3e5d928, _Source="Address.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" [0157.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0157.897] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71511e00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71511e00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0157.897] wcscmp (_String1="Category.accft", _String2=".") returned 1 [0157.897] wcscmp (_String1="Category.accft", _String2="..") returned 1 [0157.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d148 [0157.897] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.897] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.897] wcscat (in: _Dest=0x3e5d148, _Source="Category.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" [0157.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0157.898] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c0bb300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c0bb300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0157.898] wcscmp (_String1="Name.accft", _String2=".") returned 1 [0157.898] wcscmp (_String1="Name.accft", _String2="..") returned 1 [0157.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0eed0 [0157.898] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.898] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.899] wcscat (in: _Dest=0x3e0eed0, _Source="Name.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" [0157.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0157.900] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0157.900] wcscmp (_String1="Payment Type.accft", _String2=".") returned 1 [0157.900] wcscmp (_String1="Payment Type.accft", _String2="..") returned 1 [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35aed8 [0157.900] wcscpy (in: _Dest=0x35aed8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.900] wcscat (in: _Dest=0x35aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.900] wcscat (in: _Dest=0x35aed8, _Source="Payment Type.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" [0157.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0157.901] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180dd00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9180dd00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0157.901] wcscmp (_String1="Phone.accft", _String2=".") returned 1 [0157.901] wcscmp (_String1="Phone.accft", _String2="..") returned 1 [0157.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cff8 [0157.901] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.901] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.901] wcscat (in: _Dest=0x3e5cff8, _Source="Phone.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" [0157.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0157.902] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3b7200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9c3b7200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0157.902] wcscmp (_String1="Priority.accft", _String2=".") returned 1 [0157.902] wcscmp (_String1="Priority.accft", _String2="..") returned 1 [0157.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d298 [0157.902] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.902] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.902] wcscat (in: _Dest=0x3e5d298, _Source="Priority.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" [0157.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0157.903] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b09c00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1b09c00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0157.903] wcscmp (_String1="Start End Dates.accft", _String2=".") returned 1 [0157.903] wcscmp (_String1="Start End Dates.accft", _String2="..") returned 1 [0157.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1ea0 [0157.904] wcscpy (in: _Dest=0x3ee1ea0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.904] wcscat (in: _Dest=0x3ee1ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.904] wcscat (in: _Dest=0x3ee1ea0, _Source="Start End Dates.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" [0157.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0157.904] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d7aa00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8d7aa00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0157.904] wcscmp (_String1="Status.accft", _String2=".") returned 1 [0157.905] wcscmp (_String1="Status.accft", _String2="..") returned 1 [0157.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d9d0 [0157.905] wcscpy (in: _Dest=0x3e5d9d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.905] wcscat (in: _Dest=0x3e5d9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.905] wcscat (in: _Dest=0x3e5d9d0, _Source="Status.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" [0157.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0157.906] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0157.906] wcscmp (_String1="Tags.accft", _String2=".") returned 1 [0157.906] wcscmp (_String1="Tags.accft", _String2="..") returned 1 [0157.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0157.906] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0157.906] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0157.906] wcscat (in: _Dest=0x3e0e890, _Source="Tags.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" [0157.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0157.907] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0 [0157.907] FindClose (in: hFindFile=0x3e805b8 | out: hFindFile=0x3e805b8) returned 1 [0157.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0157.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc1f8) returned 1 [0157.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 1882 os_tid = 0xdcc [0151.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt")) returned 0x20 [0156.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0156.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.351] GetLastError () returned 0x5 [0156.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0156.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 1883 os_tid = 0xe84 [0151.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt")) returned 0x20 [0156.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0156.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.352] GetLastError () returned 0x5 [0156.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0156.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 1884 os_tid = 0xe98 [0151.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt")) returned 0x20 [0156.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0156.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.354] GetLastError () returned 0x5 [0156.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0156.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d4a0) returned 1 Thread: id = 1885 os_tid = 0xea0 [0151.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt")) returned 0x20 [0156.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0156.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.356] GetLastError () returned 0x5 [0156.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0156.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1886 os_tid = 0xdd4 [0151.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt")) returned 0x20 [0156.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0156.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.358] GetLastError () returned 0x5 [0156.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0156.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 1887 os_tid = 0xe48 [0151.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eefc0 [0151.996] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0151.996] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0151.996] wcscat (in: _Dest=0x66eefc0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*" [0151.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0151.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0155.895] wcscmp (_String1=".", _String2=".") returned 0 [0155.895] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.899] wcscmp (_String1="..", _String2=".") returned 1 [0155.900] wcscmp (_String1="..", _String2="..") returned 0 [0155.900] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64342f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64342f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0155.900] wcscmp (_String1="1 Right.accdt", _String2=".") returned 1 [0155.900] wcscmp (_String1="1 Right.accdt", _String2="..") returned 1 [0155.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0155.900] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0155.900] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0155.900] wcscat (in: _Dest=0x3e0e750, _Source="1 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" [0159.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d4 [0159.755] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8c6a00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c8c6a00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0159.755] wcscmp (_String1="1 Top.accdt", _String2=".") returned 1 [0159.755] wcscmp (_String1="1 Top.accdt", _String2="..") returned 1 [0159.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c72d8 [0159.756] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.756] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.756] wcscat (in: _Dest=0x2c72d8, _Source="1 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" [0159.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0159.757] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a95900, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79a95900, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0159.757] wcscmp (_String1="2 Right.accdt", _String2=".") returned 1 [0159.757] wcscmp (_String1="2 Right.accdt", _String2="..") returned 1 [0159.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6fb8 [0159.757] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.757] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.757] wcscat (in: _Dest=0x2c6fb8, _Source="2 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" [0159.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0159.758] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82019400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82019400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0159.758] wcscmp (_String1="2 Top.accdt", _String2=".") returned 1 [0159.758] wcscmp (_String1="2 Top.accdt", _String2="..") returned 1 [0159.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6e78 [0159.758] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.758] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.758] wcscat (in: _Dest=0x2c6e78, _Source="2 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" [0159.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0159.759] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0159.759] wcscmp (_String1="Comments.accdt", _String2=".") returned 1 [0159.759] wcscmp (_String1="Comments.accdt", _String2="..") returned 1 [0159.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0648 [0159.760] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.760] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.760] wcscat (in: _Dest=0x69c0648, _Source="Comments.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" [0159.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30 [0159.761] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9776be00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9776be00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0159.761] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0159.761] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0159.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfe28 [0159.761] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.761] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.761] wcscat (in: _Dest=0x69bfe28, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" [0159.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0159.762] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8273400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8273400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0159.762] wcscmp (_String1="Details.accdt", _String2=".") returned 1 [0159.762] wcscmp (_String1="Details.accdt", _String2="..") returned 1 [0159.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0b48 [0159.762] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.762] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.762] wcscat (in: _Dest=0x69c0b48, _Source="Details.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" [0159.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0159.763] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07f6f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07f6f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0159.763] wcscmp (_String1="Dialog.accdt", _String2=".") returned 1 [0159.763] wcscmp (_String1="Dialog.accdt", _String2="..") returned 1 [0159.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c05a8 [0159.763] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.763] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.763] wcscat (in: _Dest=0x69c05a8, _Source="Dialog.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" [0159.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0159.764] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b3100, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc6b3100, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0159.764] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0159.765] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0159.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0dc8 [0159.765] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.765] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.765] wcscat (in: _Dest=0x69c0dc8, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" [0159.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0159.766] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc856f300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc856f300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0159.766] wcscmp (_String1="List.accdt", _String2=".") returned 1 [0159.766] wcscmp (_String1="List.accdt", _String2="..") returned 1 [0159.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957e18 [0159.766] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.766] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.766] wcscat (in: _Dest=0x6957e18, _Source="List.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" [0159.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0159.767] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd573e200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd573e200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0159.767] wcscmp (_String1="Media.accdt", _String2=".") returned 1 [0159.767] wcscmp (_String1="Media.accdt", _String2="..") returned 1 [0159.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1688 [0159.767] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.767] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.767] wcscat (in: _Dest=0x69c1688, _Source="Media.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" [0159.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0159.798] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02e7700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe02e7700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0159.798] wcscmp (_String1="Msgbox.accdt", _String2=".") returned 1 [0159.798] wcscmp (_String1="Msgbox.accdt", _String2="..") returned 1 [0159.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfce8 [0159.799] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.799] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.799] wcscat (in: _Dest=0x69bfce8, _Source="Msgbox.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" [0159.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0159.801] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3414700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3414700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0159.801] wcscmp (_String1="Tabs.accdt", _String2=".") returned 1 [0159.801] wcscmp (_String1="Tabs.accdt", _String2="..") returned 1 [0159.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959248 [0159.802] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.802] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.802] wcscat (in: _Dest=0x6959248, _Source="Tabs.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" [0159.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0159.803] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6541700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6541700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0159.804] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0159.804] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0159.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0a08 [0159.804] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.804] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.804] wcscat (in: _Dest=0x69c0a08, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" [0159.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0159.805] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0159.805] wcscmp (_String1="Users.accdt", _String2=".") returned 1 [0159.805] wcscmp (_String1="Users.accdt", _String2="..") returned 1 [0159.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0148 [0159.805] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0159.805] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0159.805] wcscat (in: _Dest=0x69c0148, _Source="Users.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" [0159.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0159.807] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0 [0159.807] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0159.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0159.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 [0159.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 1888 os_tid = 0xe58 [0151.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt")) returned 0x20 [0156.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0156.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.359] GetLastError () returned 0x5 [0156.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0156.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 1889 os_tid = 0xecc [0151.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt")) returned 0x20 [0156.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0156.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.361] GetLastError () returned 0x5 [0156.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0156.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 Thread: id = 1890 os_tid = 0xee4 [0151.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt")) returned 0x20 [0155.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0155.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.797] GetLastError () returned 0x5 [0155.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0155.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 1891 os_tid = 0x410 [0151.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt")) returned 0x20 [0152.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0153.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.800] GetLastError () returned 0x5 [0155.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0155.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 1892 os_tid = 0xb14 [0151.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f03f0 [0151.998] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0151.998] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0151.998] wcscat (in: _Dest=0x66f03f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*" [0151.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a8f0 [0151.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0156.345] wcscmp (_String1=".", _String2=".") returned 0 [0156.345] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.345] wcscmp (_String1="..", _String2=".") returned 1 [0156.345] wcscmp (_String1="..", _String2="..") returned 0 [0156.345] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8888200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8888200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="107~1.ACC")) returned 1 [0156.345] wcscmp (_String1="107.accdt", _String2=".") returned 1 [0156.345] wcscmp (_String1="107.accdt", _String2="..") returned 1 [0156.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3248 [0156.345] wcscpy (in: _Dest=0x69c3248, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0156.345] wcscat (in: _Dest=0x69c3248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0156.345] wcscat (in: _Dest=0x69c3248, _Source="107.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" [0157.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0157.868] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 1 [0157.869] wcscmp (_String1="1100.accdt", _String2=".") returned 1 [0157.869] wcscmp (_String1="1100.accdt", _String2="..") returned 1 [0157.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6818b28 [0157.869] wcscpy (in: _Dest=0x6818b28, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0157.869] wcscat (in: _Dest=0x6818b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0157.869] wcscat (in: _Dest=0x6818b28, _Source="1100.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" [0157.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0157.870] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 0 [0157.870] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0157.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a8f0) returned 1 [0157.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 [0157.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e098b0) returned 1 Thread: id = 1893 os_tid = 0xe44 [0151.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df29a8 [0151.999] wcscpy (in: _Dest=0x3df29a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0151.999] wcscat (in: _Dest=0x3df29a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0151.999] wcscat (in: _Dest=0x3df29a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*" [0151.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979f50 [0151.999] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0151.999] wcscmp (_String1=".", _String2=".") returned 0 [0151.999] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.999] wcscmp (_String1="..", _String2=".") returned 1 [0151.999] wcscmp (_String1="..", _String2="..") returned 0 [0151.999] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0151.999] wcscmp (_String1="Adobe Custom Dictionary", _String2=".") returned 1 [0151.999] wcscmp (_String1="Adobe Custom Dictionary", _String2="..") returned 1 [0151.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0151.999] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0152.000] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0152.000] wcscat (in: _Dest=0x3336a8, _Source="Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0155.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0155.679] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0155.679] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0155.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979f50) returned 1 [0155.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df29a8) returned 1 [0155.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 1894 os_tid = 0xe70 [0152.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest")) returned 0x20 [0152.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0152.000] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.000] GetLastError () returned 0x5 [0152.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0152.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 1895 os_tid = 0xe38 [0152.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig")) returned 0x20 [0152.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0152.002] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.002] GetLastError () returned 0x5 [0152.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0152.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 1896 os_tid = 0xeac [0152.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig")) returned 0x20 [0152.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0152.003] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.004] GetLastError () returned 0x5 [0152.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0152.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 1897 os_tid = 0xe40 [0152.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak")) returned 0x20 [0152.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0152.005] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.005] GetLastError () returned 0x5 [0152.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0152.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e810) returned 1 Thread: id = 1898 os_tid = 0xb5c [0152.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak")) returned 0x20 [0153.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0153.056] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.057] GetLastError () returned 0x5 [0153.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0153.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 Thread: id = 1899 os_tid = 0xebc [0152.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig")) returned 0x20 [0153.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0153.380] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.380] GetLastError () returned 0x5 [0153.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0153.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 1900 os_tid = 0x1538 [0152.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957e18 [0152.010] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0152.010] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0152.010] wcscat (in: _Dest=0x6957e18, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*" [0152.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0152.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0153.834] wcscmp (_String1=".", _String2=".") returned 0 [0153.834] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.834] wcscmp (_String1="..", _String2=".") returned 1 [0153.834] wcscmp (_String1="..", _String2="..") returned 0 [0153.834] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265c5c46, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0153.834] wcscmp (_String1="docs.crx", _String2=".") returned 1 [0153.834] wcscmp (_String1="docs.crx", _String2="..") returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697df88 [0153.835] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0153.835] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0153.835] wcscat (in: _Dest=0x697df88, _Source="docs.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" [0159.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0159.651] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265d46ac, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0159.651] wcscmp (_String1="drive.crx", _String2=".") returned 1 [0159.651] wcscmp (_String1="drive.crx", _String2="..") returned 1 [0159.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e0d8 [0159.651] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0159.652] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0159.652] wcscat (in: _Dest=0x697e0d8, _Source="drive.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" [0159.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0159.653] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26602cef, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0159.653] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0159.653] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0159.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0198 [0159.653] wcscpy (in: _Dest=0x3df0198, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0159.653] wcscat (in: _Dest=0x3df0198, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0159.653] wcscat (in: _Dest=0x3df0198, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" [0159.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0159.654] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265e3112, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0159.654] wcscmp (_String1="gmail.crx", _String2=".") returned 1 [0159.654] wcscmp (_String1="gmail.crx", _String2="..") returned 1 [0159.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697dce8 [0159.654] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0159.654] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0159.654] wcscat (in: _Dest=0x697dce8, _Source="gmail.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" [0159.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0159.655] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0159.655] wcscmp (_String1="youtube.crx", _String2=".") returned 1 [0159.655] wcscmp (_String1="youtube.crx", _String2="..") returned 1 [0159.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b928 [0159.655] wcscpy (in: _Dest=0x35b928, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0159.655] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0159.655] wcscat (in: _Dest=0x35b928, _Source="youtube.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" [0159.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0159.657] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0159.657] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0159.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0159.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 [0159.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 1901 os_tid = 0xeb8 [0152.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0152.011] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0152.011] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0152.011] wcscat (in: _Dest=0x6957eb0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*" [0152.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979ce8 [0152.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0153.386] wcscmp (_String1=".", _String2=".") returned 0 [0153.386] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.386] wcscmp (_String1="..", _String2=".") returned 1 [0153.386] wcscmp (_String1="..", _String2="..") returned 0 [0153.386] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0153.386] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0153.386] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0153.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df07d8 [0153.387] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0153.387] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0153.387] wcscat (in: _Dest=0x3df07d8, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" [0154.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0154.890] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x6979ce8 | out: lpFindFileData=0x6979ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0154.890] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0154.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979ce8) returned 1 [0154.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 [0154.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 1902 os_tid = 0x1564 [0152.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat")) returned 0x20 [0153.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0153.387] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.388] GetLastError () returned 0x5 [0153.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0153.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 1903 os_tid = 0x1624 [0152.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959080 [0152.012] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0152.012] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0152.012] wcscat (in: _Dest=0x6959080, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*" [0152.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d440 [0152.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0153.384] wcscmp (_String1=".", _String2=".") returned 0 [0153.385] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.385] wcscmp (_String1="..", _String2=".") returned 1 [0153.385] wcscmp (_String1="..", _String2="..") returned 0 [0153.385] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0153.385] wcscmp (_String1="chrmstp.exe", _String2=".") returned 1 [0153.385] wcscmp (_String1="chrmstp.exe", _String2="..") returned 1 [0153.385] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe067a250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe067a250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x62faaaa, ftLastWriteTime.dwHighDateTime=0x1d2c89c, nFileSizeHigh=0x0, nFileSizeLow=0x9aa2b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0153.385] wcscmp (_String1="chrome.7z", _String2=".") returned 1 [0153.385] wcscmp (_String1="chrome.7z", _String2="..") returned 1 [0153.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e960 [0153.385] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0153.385] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0153.386] wcscat (in: _Dest=0x697e960, _Source="chrome.7z" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" [0154.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0154.886] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0154.886] wcscmp (_String1="setup.exe", _String2=".") returned 1 [0154.886] wcscmp (_String1="setup.exe", _String2="..") returned 1 [0154.886] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0154.886] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0154.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d440) returned 1 [0154.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 [0154.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 1904 os_tid = 0x8cc [0152.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2258 [0152.012] wcscpy (in: _Dest=0x3df2258, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0152.012] wcscat (in: _Dest=0x3df2258, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0152.012] wcscat (in: _Dest=0x3df2258, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*" [0152.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d6a8 [0152.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80778 [0153.835] wcscmp (_String1=".", _String2=".") returned 0 [0153.835] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.023] wcscmp (_String1="..", _String2=".") returned 1 [0155.023] wcscmp (_String1="..", _String2="..") returned 0 [0155.023] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26638865, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0155.023] wcscmp (_String1="am.pak", _String2=".") returned 1 [0155.023] wcscmp (_String1="am.pak", _String2="..") returned 1 [0155.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959080 [0155.023] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0155.023] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0155.023] wcscat (in: _Dest=0x6959080, _Source="am.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" [0157.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0157.417] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26664797, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0157.417] wcscmp (_String1="ar.pak", _String2=".") returned 1 [0157.418] wcscmp (_String1="ar.pak", _String2="..") returned 1 [0157.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818a90 [0157.418] wcscpy (in: _Dest=0x6818a90, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.418] wcscat (in: _Dest=0x6818a90, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.418] wcscat (in: _Dest=0x6818a90, _Source="ar.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" [0157.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0157.419] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26686a85, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0157.419] wcscmp (_String1="bg.pak", _String2=".") returned 1 [0157.419] wcscmp (_String1="bg.pak", _String2="..") returned 1 [0157.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818b28 [0157.419] wcscpy (in: _Dest=0x6818b28, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.419] wcscat (in: _Dest=0x6818b28, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.419] wcscat (in: _Dest=0x6818b28, _Source="bg.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" [0157.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0157.420] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266b9eea, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0157.420] wcscmp (_String1="bn.pak", _String2=".") returned 1 [0157.420] wcscmp (_String1="bn.pak", _String2="..") returned 1 [0157.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818bc0 [0157.420] wcscpy (in: _Dest=0x6818bc0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.420] wcscat (in: _Dest=0x6818bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.420] wcscat (in: _Dest=0x6818bc0, _Source="bn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" [0157.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0157.422] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266e370b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0157.422] wcscmp (_String1="ca.pak", _String2=".") returned 1 [0157.422] wcscmp (_String1="ca.pak", _String2="..") returned 1 [0157.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818c58 [0157.422] wcscpy (in: _Dest=0x6818c58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.422] wcscat (in: _Dest=0x6818c58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.422] wcscat (in: _Dest=0x6818c58, _Source="ca.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" [0157.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0157.423] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2670a81b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0157.423] wcscmp (_String1="cs.pak", _String2=".") returned 1 [0157.423] wcscmp (_String1="cs.pak", _String2="..") returned 1 [0157.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818cf0 [0157.423] wcscpy (in: _Dest=0x6818cf0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.423] wcscat (in: _Dest=0x6818cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.423] wcscat (in: _Dest=0x6818cf0, _Source="cs.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" [0157.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0157.425] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2673b56f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0157.425] wcscmp (_String1="da.pak", _String2=".") returned 1 [0157.425] wcscmp (_String1="da.pak", _String2="..") returned 1 [0157.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818d88 [0157.425] wcscpy (in: _Dest=0x6818d88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.425] wcscat (in: _Dest=0x6818d88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.425] wcscat (in: _Dest=0x6818d88, _Source="da.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" [0157.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0157.426] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2675ff6e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0157.426] wcscmp (_String1="de.pak", _String2=".") returned 1 [0157.426] wcscmp (_String1="de.pak", _String2="..") returned 1 [0157.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818e20 [0157.427] wcscpy (in: _Dest=0x6818e20, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.427] wcscat (in: _Dest=0x6818e20, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.427] wcscat (in: _Dest=0x6818e20, _Source="de.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" [0157.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0157.428] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678225c, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0157.428] wcscmp (_String1="el.pak", _String2=".") returned 1 [0157.428] wcscmp (_String1="el.pak", _String2="..") returned 1 [0157.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818eb8 [0157.428] wcscpy (in: _Dest=0x6818eb8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.428] wcscat (in: _Dest=0x6818eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.428] wcscat (in: _Dest=0x6818eb8, _Source="el.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" [0157.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0157.430] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0157.430] wcscmp (_String1="en-GB.pak", _String2=".") returned 1 [0157.430] wcscmp (_String1="en-GB.pak", _String2="..") returned 1 [0157.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1368 [0157.430] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.430] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.430] wcscat (in: _Dest=0x69c1368, _Source="en-GB.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" [0157.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0157.431] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0157.431] wcscmp (_String1="en-US.pak", _String2=".") returned 1 [0157.431] wcscmp (_String1="en-US.pak", _String2="..") returned 1 [0157.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0157.431] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.431] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.431] wcscat (in: _Dest=0x69c1188, _Source="en-US.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" [0157.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0157.433] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267ae18e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0157.433] wcscmp (_String1="es-419.pak", _String2=".") returned 1 [0157.433] wcscmp (_String1="es-419.pak", _String2="..") returned 1 [0157.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1228 [0157.433] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.433] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.433] wcscat (in: _Dest=0x69c1228, _Source="es-419.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" [0157.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0157.434] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267d79af, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0157.434] wcscmp (_String1="es.pak", _String2=".") returned 1 [0157.434] wcscmp (_String1="es.pak", _String2="..") returned 1 [0157.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818f50 [0157.434] wcscpy (in: _Dest=0x6818f50, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.434] wcscat (in: _Dest=0x6818f50, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.434] wcscat (in: _Dest=0x6818f50, _Source="es.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" [0157.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0157.435] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268038e1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0157.435] wcscmp (_String1="et.pak", _String2=".") returned 1 [0157.435] wcscmp (_String1="et.pak", _String2="..") returned 1 [0157.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818fe8 [0157.436] wcscpy (in: _Dest=0x6818fe8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.436] wcscat (in: _Dest=0x6818fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.436] wcscat (in: _Dest=0x6818fe8, _Source="et.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" [0157.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0157.437] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26820dad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0157.437] wcscmp (_String1="fa.pak", _String2=".") returned 1 [0157.437] wcscmp (_String1="fa.pak", _String2="..") returned 1 [0157.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819080 [0157.437] wcscpy (in: _Dest=0x6819080, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.437] wcscat (in: _Dest=0x6819080, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.437] wcscat (in: _Dest=0x6819080, _Source="fa.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" [0157.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0157.438] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2684309b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0157.438] wcscmp (_String1="fi.pak", _String2=".") returned 1 [0157.438] wcscmp (_String1="fi.pak", _String2="..") returned 1 [0157.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819118 [0157.438] wcscpy (in: _Dest=0x6819118, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.438] wcscat (in: _Dest=0x6819118, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.438] wcscat (in: _Dest=0x6819118, _Source="fi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" [0157.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0157.440] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2686c8bc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0157.440] wcscmp (_String1="fil.pak", _String2=".") returned 1 [0157.440] wcscmp (_String1="fil.pak", _String2="..") returned 1 [0157.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c15e8 [0157.440] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.440] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.440] wcscat (in: _Dest=0x69c15e8, _Source="fil.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" [0157.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0157.441] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268716de, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0157.442] wcscmp (_String1="fr.pak", _String2=".") returned 1 [0157.442] wcscmp (_String1="fr.pak", _String2="..") returned 1 [0157.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68191b0 [0157.442] wcscpy (in: _Dest=0x68191b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.442] wcscat (in: _Dest=0x68191b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.442] wcscat (in: _Dest=0x68191b0, _Source="fr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" [0157.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68191b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0157.443] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268939cc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0157.443] wcscmp (_String1="gu.pak", _String2=".") returned 1 [0157.443] wcscmp (_String1="gu.pak", _String2="..") returned 1 [0157.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819248 [0157.443] wcscpy (in: _Dest=0x6819248, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.443] wcscat (in: _Dest=0x6819248, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.443] wcscat (in: _Dest=0x6819248, _Source="gu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" [0157.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0157.444] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268c200f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0157.444] wcscmp (_String1="he.pak", _String2=".") returned 1 [0157.444] wcscmp (_String1="he.pak", _String2="..") returned 1 [0157.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68192e0 [0157.444] wcscpy (in: _Dest=0x68192e0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.444] wcscat (in: _Dest=0x68192e0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.445] wcscat (in: _Dest=0x68192e0, _Source="he.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" [0157.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68192e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0157.446] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268eb830, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0157.446] wcscmp (_String1="hi.pak", _String2=".") returned 1 [0157.446] wcscmp (_String1="hi.pak", _String2="..") returned 1 [0157.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819378 [0157.446] wcscpy (in: _Dest=0x6819378, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.446] wcscat (in: _Dest=0x6819378, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.446] wcscat (in: _Dest=0x6819378, _Source="hi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" [0157.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0157.447] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268edf41, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0157.448] wcscmp (_String1="hr.pak", _String2=".") returned 1 [0157.448] wcscmp (_String1="hr.pak", _String2="..") returned 1 [0157.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819410 [0157.448] wcscpy (in: _Dest=0x6819410, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.448] wcscat (in: _Dest=0x6819410, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.448] wcscat (in: _Dest=0x6819410, _Source="hr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" [0157.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0157.449] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f2d63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0157.449] wcscmp (_String1="hu.pak", _String2=".") returned 1 [0157.449] wcscmp (_String1="hu.pak", _String2="..") returned 1 [0157.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68194a8 [0157.449] wcscpy (in: _Dest=0x68194a8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.449] wcscat (in: _Dest=0x68194a8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.449] wcscat (in: _Dest=0x68194a8, _Source="hu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" [0157.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68194a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0157.450] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f5474, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0157.450] wcscmp (_String1="id.pak", _String2=".") returned 1 [0157.450] wcscmp (_String1="id.pak", _String2="..") returned 1 [0157.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819540 [0157.450] wcscpy (in: _Dest=0x6819540, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.451] wcscat (in: _Dest=0x6819540, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.451] wcscat (in: _Dest=0x6819540, _Source="id.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" [0157.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0157.452] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269213a6, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0157.452] wcscmp (_String1="it.pak", _String2=".") returned 1 [0157.452] wcscmp (_String1="it.pak", _String2="..") returned 1 [0157.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68195d8 [0157.452] wcscpy (in: _Dest=0x68195d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.452] wcscat (in: _Dest=0x68195d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.452] wcscat (in: _Dest=0x68195d8, _Source="it.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" [0157.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68195d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0157.453] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2694abc7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0157.453] wcscmp (_String1="ja.pak", _String2=".") returned 1 [0157.453] wcscmp (_String1="ja.pak", _String2="..") returned 1 [0157.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819670 [0157.453] wcscpy (in: _Dest=0x6819670, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.453] wcscat (in: _Dest=0x6819670, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.453] wcscat (in: _Dest=0x6819670, _Source="ja.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" [0157.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0157.959] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2696ceb5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0157.959] wcscmp (_String1="kn.pak", _String2=".") returned 1 [0157.959] wcscmp (_String1="kn.pak", _String2="..") returned 1 [0157.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68198d0 [0157.959] wcscpy (in: _Dest=0x68198d0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.959] wcscat (in: _Dest=0x68198d0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.959] wcscat (in: _Dest=0x68198d0, _Source="kn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" [0163.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68198d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0163.695] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26971cd7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0163.695] wcscmp (_String1="ko.pak", _String2=".") returned 1 [0163.695] wcscmp (_String1="ko.pak", _String2="..") returned 1 [0163.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818798 [0163.696] wcscpy (in: _Dest=0x6818798, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.696] wcscat (in: _Dest=0x6818798, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.696] wcscat (in: _Dest=0x6818798, _Source="ko.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" [0163.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0163.697] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2698f1a3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0163.697] wcscmp (_String1="lt.pak", _String2=".") returned 1 [0163.697] wcscmp (_String1="lt.pak", _String2="..") returned 1 [0163.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818700 [0163.697] wcscpy (in: _Dest=0x6818700, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.697] wcscat (in: _Dest=0x6818700, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.697] wcscat (in: _Dest=0x6818700, _Source="lt.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" [0163.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0163.699] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269b62b3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0163.699] wcscmp (_String1="lv.pak", _String2=".") returned 1 [0163.699] wcscmp (_String1="lv.pak", _String2="..") returned 1 [0163.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818668 [0163.699] wcscpy (in: _Dest=0x6818668, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.699] wcscat (in: _Dest=0x6818668, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.699] wcscat (in: _Dest=0x6818668, _Source="lv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" [0163.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0163.700] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269e21e5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0163.700] wcscmp (_String1="ml.pak", _String2=".") returned 1 [0163.700] wcscmp (_String1="ml.pak", _String2="..") returned 1 [0163.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818bc0 [0163.701] wcscpy (in: _Dest=0x6818bc0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.701] wcscat (in: _Dest=0x6818bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.701] wcscat (in: _Dest=0x6818bc0, _Source="ml.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" [0163.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0163.702] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a044d3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0163.702] wcscmp (_String1="mr.pak", _String2=".") returned 1 [0163.702] wcscmp (_String1="mr.pak", _String2="..") returned 1 [0163.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68188c8 [0163.702] wcscpy (in: _Dest=0x68188c8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.702] wcscat (in: _Dest=0x68188c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.702] wcscat (in: _Dest=0x68188c8, _Source="mr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" [0163.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68188c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0163.703] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a2dcf4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0163.703] wcscmp (_String1="ms.pak", _String2=".") returned 1 [0163.703] wcscmp (_String1="ms.pak", _String2="..") returned 1 [0163.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958078 [0163.703] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.703] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.703] wcscat (in: _Dest=0x6958078, _Source="ms.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" [0163.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0163.704] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a5c337, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0163.704] wcscmp (_String1="nb.pak", _String2=".") returned 1 [0163.704] wcscmp (_String1="nb.pak", _String2="..") returned 1 [0163.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69584a0 [0163.705] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.705] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.705] wcscat (in: _Dest=0x69584a0, _Source="nb.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" [0163.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0163.706] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a80d36, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0163.706] wcscmp (_String1="nl.pak", _String2=".") returned 1 [0163.706] wcscmp (_String1="nl.pak", _String2="..") returned 1 [0163.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69585d0 [0163.706] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.706] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.706] wcscat (in: _Dest=0x69585d0, _Source="nl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" [0163.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0163.707] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26aaa557, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0163.707] wcscmp (_String1="pl.pak", _String2=".") returned 1 [0163.707] wcscmp (_String1="pl.pak", _String2="..") returned 1 [0163.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69588c8 [0163.707] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.707] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.707] wcscat (in: _Dest=0x69588c8, _Source="pl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" [0163.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0163.708] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26acef56, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0163.708] wcscmp (_String1="pt-BR.pak", _String2=".") returned 1 [0163.708] wcscmp (_String1="pt-BR.pak", _String2="..") returned 1 [0163.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0163.708] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.708] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.708] wcscat (in: _Dest=0x69c1408, _Source="pt-BR.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" [0163.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0163.709] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26af1244, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0163.710] wcscmp (_String1="pt-PT.pak", _String2=".") returned 1 [0163.710] wcscmp (_String1="pt-PT.pak", _String2="..") returned 1 [0163.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0788 [0163.710] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.710] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.710] wcscat (in: _Dest=0x69c0788, _Source="pt-PT.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" [0163.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0163.711] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b1d176, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0163.711] wcscmp (_String1="ro.pak", _String2=".") returned 1 [0163.711] wcscmp (_String1="ro.pak", _String2="..") returned 1 [0163.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958c58 [0163.711] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.711] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.711] wcscat (in: _Dest=0x6958c58, _Source="ro.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" [0163.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0163.712] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b2e2ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0163.712] wcscmp (_String1="ru.pak", _String2=".") returned 1 [0163.712] wcscmp (_String1="ru.pak", _String2="..") returned 1 [0163.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957fe0 [0163.712] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.712] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.712] wcscat (in: _Dest=0x6957fe0, _Source="ru.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" [0163.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0163.714] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b63e63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0163.714] wcscmp (_String1="sk.pak", _String2=".") returned 1 [0163.714] wcscmp (_String1="sk.pak", _String2="..") returned 1 [0163.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958408 [0163.714] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.714] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.714] wcscat (in: _Dest=0x6958408, _Source="sk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" [0163.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0163.715] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b8af73, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0163.715] wcscmp (_String1="sl.pak", _String2=".") returned 1 [0163.715] wcscmp (_String1="sl.pak", _String2="..") returned 1 [0163.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957f48 [0163.715] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.715] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.715] wcscat (in: _Dest=0x6957f48, _Source="sl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" [0163.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0163.717] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bb2083, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0163.717] wcscmp (_String1="sr.pak", _String2=".") returned 1 [0163.717] wcscmp (_String1="sr.pak", _String2="..") returned 1 [0163.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69589f8 [0163.717] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.717] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.717] wcscat (in: _Dest=0x69589f8, _Source="sr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" [0163.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0163.718] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bdb8a4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0163.718] wcscmp (_String1="sv.pak", _String2=".") returned 1 [0163.718] wcscmp (_String1="sv.pak", _String2="..") returned 1 [0163.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69592e0 [0163.718] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.718] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.718] wcscat (in: _Dest=0x69592e0, _Source="sv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" [0163.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0163.719] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c050c5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0163.719] wcscmp (_String1="sw.pak", _String2=".") returned 1 [0163.719] wcscmp (_String1="sw.pak", _String2="..") returned 1 [0163.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959378 [0163.719] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.719] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.720] wcscat (in: _Dest=0x6959378, _Source="sw.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" [0163.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0163.721] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c3852a, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0163.721] wcscmp (_String1="ta.pak", _String2=".") returned 1 [0163.721] wcscmp (_String1="ta.pak", _String2="..") returned 1 [0163.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958370 [0163.721] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.721] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.721] wcscat (in: _Dest=0x6958370, _Source="ta.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" [0163.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0163.722] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c707b1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0163.722] wcscmp (_String1="te.pak", _String2=".") returned 1 [0163.722] wcscmp (_String1="te.pak", _String2="..") returned 1 [0163.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958668 [0163.722] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.722] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.722] wcscat (in: _Dest=0x6958668, _Source="te.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" [0163.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0163.723] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c978c1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0163.723] wcscmp (_String1="th.pak", _String2=".") returned 1 [0163.723] wcscmp (_String1="th.pak", _String2="..") returned 1 [0163.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958a90 [0163.723] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.723] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.723] wcscat (in: _Dest=0x6958a90, _Source="th.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" [0163.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0163.724] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cc8615, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0163.724] wcscmp (_String1="tr.pak", _String2=".") returned 1 [0163.724] wcscmp (_String1="tr.pak", _String2="..") returned 1 [0163.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958eb8 [0163.725] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.725] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.725] wcscat (in: _Dest=0x6958eb8, _Source="tr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" [0163.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0163.726] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cf4547, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0163.726] wcscmp (_String1="uk.pak", _String2=".") returned 1 [0163.726] wcscmp (_String1="uk.pak", _String2="..") returned 1 [0163.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958d88 [0163.726] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.726] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.726] wcscat (in: _Dest=0x6958d88, _Source="uk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" [0163.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0163.727] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d11a13, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0163.727] wcscmp (_String1="vi.pak", _String2=".") returned 1 [0163.727] wcscmp (_String1="vi.pak", _String2="..") returned 1 [0163.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958e20 [0163.727] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.727] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.727] wcscat (in: _Dest=0x6958e20, _Source="vi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" [0163.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0163.728] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d3d945, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0163.728] wcscmp (_String1="zh-CN.pak", _String2=".") returned 1 [0163.728] wcscmp (_String1="zh-CN.pak", _String2="..") returned 1 [0163.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0a08 [0163.728] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.728] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.728] wcscat (in: _Dest=0x69c0a08, _Source="zh-CN.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" [0163.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0163.729] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0163.729] wcscmp (_String1="zh-TW.pak", _String2=".") returned 1 [0163.729] wcscmp (_String1="zh-TW.pak", _String2="..") returned 1 [0163.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0328 [0163.729] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0163.729] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0163.729] wcscat (in: _Dest=0x69c0328, _Source="zh-TW.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" [0163.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0163.731] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0163.731] FindClose (in: hFindFile=0x3e80778 | out: hFindFile=0x3e80778) returned 1 [0163.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d6a8) returned 1 [0163.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2258) returned 1 [0163.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 1905 os_tid = 0x8dc [0152.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe")) returned 0x20 [0153.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0153.392] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.392] GetLastError () returned 0x5 [0153.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0153.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 1906 os_tid = 0xb94 [0152.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe")) returned 0x20 [0153.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0153.394] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.394] GetLastError () returned 0x5 [0153.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0153.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eab0) returned 1 Thread: id = 1907 os_tid = 0x73c [0152.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin")) returned 0x20 [0153.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0153.396] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.396] GetLastError () returned 0x5 [0153.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0153.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 1908 os_tid = 0xdb0 [0152.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak")) returned 0x20 [0153.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0153.398] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.398] GetLastError () returned 0x5 [0153.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0153.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 1909 os_tid = 0xdb8 [0152.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin")) returned 0x20 [0153.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0153.399] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.400] GetLastError () returned 0x5 [0153.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0153.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 1910 os_tid = 0x163c [0152.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0f010 [0152.015] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0152.015] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0152.015] wcscat (in: _Dest=0x3e0f010, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*" [0152.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d910 [0152.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80778 [0153.054] wcscmp (_String1=".", _String2=".") returned 0 [0153.054] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.054] wcscmp (_String1="..", _String2=".") returned 1 [0153.054] wcscmp (_String1="..", _String2="..") returned 0 [0153.054] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0153.054] wcscmp (_String1="logo.png", _String2=".") returned 1 [0153.054] wcscmp (_String1="logo.png", _String2="..") returned 1 [0153.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0153.054] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0153.054] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0153.054] wcscat (in: _Dest=0x35c378, _Source="logo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" [0153.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0153.548] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0153.548] wcscmp (_String1="logocanary.png", _String2=".") returned 1 [0153.548] wcscmp (_String1="logocanary.png", _String2="..") returned 1 [0153.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6f28 [0153.548] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0153.548] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0153.548] wcscat (in: _Dest=0x2ff6f28, _Source="logocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" [0153.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0153.549] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d86d43, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0153.549] wcscmp (_String1="smalllogo.png", _String2=".") returned 1 [0153.549] wcscmp (_String1="smalllogo.png", _String2="..") returned 1 [0153.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7098 [0153.550] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0153.550] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0153.550] wcscat (in: _Dest=0x2ff7098, _Source="smalllogo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" [0153.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0153.551] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0153.551] wcscmp (_String1="smalllogocanary.png", _String2=".") returned 1 [0153.551] wcscmp (_String1="smalllogocanary.png", _String2="..") returned 1 [0153.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0153.551] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0153.551] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0153.551] wcscat (in: _Dest=0x332f28, _Source="smalllogocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" [0153.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0153.552] FindNextFileW (in: hFindFile=0x3e80778, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0 [0153.552] FindClose (in: hFindFile=0x3e80778 | out: hFindFile=0x3e80778) returned 1 [0153.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d910) returned 1 [0153.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 [0153.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 1911 os_tid = 0xbc0 [0152.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958fe8 [0152.016] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0152.016] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0152.016] wcscat (in: _Dest=0x6958fe8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*" [0152.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0152.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0153.379] wcscmp (_String1=".", _String2=".") returned 0 [0153.379] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.379] wcscmp (_String1="..", _String2=".") returned 1 [0153.379] wcscmp (_String1="..", _String2="..") returned 0 [0153.379] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d9f3ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0153.379] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0153.379] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0153.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b878 [0153.379] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0153.379] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0153.379] wcscat (in: _Dest=0x35b878, _Source="manifest.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" [0157.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0157.153] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0157.154] wcscmp (_String1="_platform_specific", _String2=".") returned 1 [0157.154] wcscmp (_String1="_platform_specific", _String2="..") returned 1 [0157.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff72c0 [0157.154] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0157.154] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0157.154] wcscat (in: _Dest=0x2ff72c0, _Source="_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0157.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0157.155] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0157.155] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0157.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0157.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958fe8) returned 1 [0157.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 1912 os_tid = 0x1648 [0152.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e09c30 [0152.017] wcscpy (in: _Dest=0x3e09c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0152.017] wcscat (in: _Dest=0x3e09c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0152.017] wcscat (in: _Dest=0x3e09c30, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*" [0152.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0152.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0155.508] wcscmp (_String1=".", _String2=".") returned 0 [0155.508] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.508] wcscmp (_String1="..", _String2=".") returned 1 [0155.508] wcscmp (_String1="..", _String2="..") returned 0 [0155.508] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0155.508] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0155.508] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0155.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0155.508] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0155.508] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0155.508] wcscat (in: _Dest=0x69589f8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" [0155.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0155.634] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0155.634] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0155.634] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0155.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c2110 [0155.634] wcscpy (in: _Dest=0x69c2110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0155.634] wcscat (in: _Dest=0x69c2110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0155.634] wcscat (in: _Dest=0x69c2110, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" [0155.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0155.635] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0155.635] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0155.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0155.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09c30) returned 1 [0155.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5df0) returned 1 Thread: id = 1913 os_tid = 0x1650 [0152.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e09730 [0152.018] wcscpy (in: _Dest=0x3e09730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0152.018] wcscat (in: _Dest=0x3e09730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0152.018] wcscat (in: _Dest=0x3e09730, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*" [0152.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0152.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808f8 [0156.113] wcscmp (_String1=".", _String2=".") returned 0 [0156.113] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.113] wcscmp (_String1="..", _String2=".") returned 1 [0156.113] wcscmp (_String1="..", _String2="..") returned 0 [0156.113] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.113] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.113] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30b08 [0156.113] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0156.114] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0156.114] wcscat (in: _Dest=0x3e30b08, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" [0161.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0161.196] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0161.196] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0161.196] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0161.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68192e0 [0161.196] wcscpy (in: _Dest=0x68192e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0161.196] wcscat (in: _Dest=0x68192e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0161.196] wcscat (in: _Dest=0x68192e0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" [0161.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68192e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0161.197] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0161.198] FindClose (in: hFindFile=0x3e808f8 | out: hFindFile=0x3e808f8) returned 1 [0161.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0161.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09730) returned 1 [0161.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 1914 os_tid = 0x67c [0152.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e094b0 [0152.019] wcscpy (in: _Dest=0x3e094b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0152.019] wcscat (in: _Dest=0x3e094b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0152.019] wcscat (in: _Dest=0x3e094b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*" [0152.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0152.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0156.133] wcscmp (_String1=".", _String2=".") returned 0 [0156.133] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.133] wcscmp (_String1="..", _String2=".") returned 1 [0156.134] wcscmp (_String1="..", _String2="..") returned 0 [0156.134] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.134] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.134] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2f50 [0156.134] wcscpy (in: _Dest=0x69c2f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0156.134] wcscat (in: _Dest=0x69c2f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0156.134] wcscat (in: _Dest=0x69c2f50, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" [0156.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0156.578] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.578] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.578] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3540 [0156.578] wcscpy (in: _Dest=0x69c3540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0156.578] wcscat (in: _Dest=0x69c3540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0156.578] wcscat (in: _Dest=0x69c3540, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" [0156.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0156.580] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.580] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0156.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0156.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e094b0) returned 1 [0156.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 1915 os_tid = 0x2dc [0152.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e095b0 [0152.020] wcscpy (in: _Dest=0x3e095b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0152.020] wcscat (in: _Dest=0x3e095b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0152.020] wcscat (in: _Dest=0x3e095b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*" [0152.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0152.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0156.134] wcscmp (_String1=".", _String2=".") returned 0 [0156.134] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.134] wcscmp (_String1="..", _String2=".") returned 1 [0156.134] wcscmp (_String1="..", _String2="..") returned 0 [0156.134] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.134] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.135] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2fe8 [0156.135] wcscpy (in: _Dest=0x69c2fe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0156.135] wcscat (in: _Dest=0x69c2fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0156.135] wcscat (in: _Dest=0x69c2fe8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" [0158.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0158.499] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0158.499] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0158.499] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0158.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819838 [0158.499] wcscpy (in: _Dest=0x6819838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0158.499] wcscat (in: _Dest=0x6819838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0158.500] wcscat (in: _Dest=0x6819838, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" [0158.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0158.501] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0158.501] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0158.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0158.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e095b0) returned 1 [0158.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 1916 os_tid = 0x598 [0152.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e09430 [0152.020] wcscpy (in: _Dest=0x3e09430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0152.020] wcscat (in: _Dest=0x3e09430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0152.020] wcscat (in: _Dest=0x3e09430, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*" [0152.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b81b8 [0152.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0156.135] wcscmp (_String1=".", _String2=".") returned 0 [0156.135] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.135] wcscmp (_String1="..", _String2=".") returned 1 [0156.135] wcscmp (_String1="..", _String2="..") returned 0 [0156.135] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.135] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.135] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3080 [0156.135] wcscpy (in: _Dest=0x69c3080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0156.136] wcscat (in: _Dest=0x69c3080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0156.136] wcscat (in: _Dest=0x69c3080, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" [0156.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0156.582] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.582] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.582] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c35d8 [0156.582] wcscpy (in: _Dest=0x69c35d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0156.582] wcscat (in: _Dest=0x69c35d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0156.582] wcscat (in: _Dest=0x69c35d8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" [0156.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c35d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0156.583] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.583] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0156.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b8) returned 1 [0156.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09430) returned 1 [0156.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 1917 os_tid = 0x230 [0152.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e093b0 [0152.021] wcscpy (in: _Dest=0x3e093b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0152.021] wcscat (in: _Dest=0x3e093b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0152.021] wcscat (in: _Dest=0x3e093b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*" [0152.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0152.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2320 [0156.136] wcscmp (_String1=".", _String2=".") returned 0 [0156.136] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.136] wcscmp (_String1="..", _String2=".") returned 1 [0156.136] wcscmp (_String1="..", _String2="..") returned 0 [0156.136] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.136] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.136] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3118 [0156.136] wcscpy (in: _Dest=0x69c3118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0156.136] wcscat (in: _Dest=0x69c3118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0156.136] wcscat (in: _Dest=0x69c3118, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" [0157.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0157.149] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0157.149] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0157.149] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0157.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c29f8 [0157.149] wcscpy (in: _Dest=0x69c29f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0157.150] wcscat (in: _Dest=0x69c29f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0157.150] wcscat (in: _Dest=0x69c29f8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" [0157.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c29f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0157.151] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0157.151] FindClose (in: hFindFile=0x66d2320 | out: hFindFile=0x66d2320) returned 1 [0157.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0157.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e093b0) returned 1 [0157.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 1918 os_tid = 0x1e4 [0152.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edae78 [0152.022] wcscpy (in: _Dest=0x3edae78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0152.022] wcscat (in: _Dest=0x3edae78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0152.022] wcscat (in: _Dest=0x3edae78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*" [0152.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0152.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808b8 [0153.838] wcscmp (_String1=".", _String2=".") returned 0 [0153.838] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.838] wcscmp (_String1="..", _String2=".") returned 1 [0153.838] wcscmp (_String1="..", _String2="..") returned 0 [0153.838] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0153.838] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0153.838] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2078 [0153.838] wcscpy (in: _Dest=0x69c2078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0153.838] wcscat (in: _Dest=0x69c2078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0153.838] wcscat (in: _Dest=0x69c2078, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" [0157.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0157.918] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0157.918] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0157.918] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0157.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819838 [0157.918] wcscpy (in: _Dest=0x6819838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0157.918] wcscat (in: _Dest=0x6819838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0157.918] wcscat (in: _Dest=0x6819838, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" [0157.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0157.919] FindNextFileW (in: hFindFile=0x3e808b8, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0157.919] FindClose (in: hFindFile=0x3e808b8 | out: hFindFile=0x3e808b8) returned 1 [0157.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0157.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edae78) returned 1 [0157.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 Thread: id = 1919 os_tid = 0x480 [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f2f0 [0152.023] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0152.023] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0152.023] wcscat (in: _Dest=0x3e0f2f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*" [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0152.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0156.132] wcscmp (_String1=".", _String2=".") returned 0 [0156.133] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.133] wcscmp (_String1="..", _String2=".") returned 1 [0156.133] wcscmp (_String1="..", _String2="..") returned 0 [0156.133] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.133] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.133] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2eb8 [0156.133] wcscpy (in: _Dest=0x69c2eb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0156.133] wcscat (in: _Dest=0x69c2eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0156.133] wcscat (in: _Dest=0x69c2eb8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" [0157.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0157.145] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0157.145] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0157.145] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0157.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3968 [0157.145] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0157.145] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0157.145] wcscat (in: _Dest=0x69c3968, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" [0157.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0157.146] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0157.146] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0157.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0157.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 [0157.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da62f0) returned 1 Thread: id = 1920 os_tid = 0x81c [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f870 [0152.023] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0152.023] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\" [0152.023] wcscat (in: _Dest=0x3e0f870, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*" [0152.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0152.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0156.085] wcscmp (_String1=".", _String2=".") returned 0 [0156.085] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.085] wcscmp (_String1="..", _String2=".") returned 1 [0156.085] wcscmp (_String1="..", _String2="..") returned 0 [0156.085] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.085] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0156.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0156.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 [0156.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 Thread: id = 1921 os_tid = 0xa20 [0152.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e100f0 [0152.024] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0152.024] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0152.024] wcscat (in: _Dest=0x3e100f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*" [0152.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0152.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0156.132] wcscmp (_String1=".", _String2=".") returned 0 [0156.132] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.132] wcscmp (_String1="..", _String2=".") returned 1 [0156.132] wcscmp (_String1="..", _String2="..") returned 0 [0156.132] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.132] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.132] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2e20 [0156.132] wcscpy (in: _Dest=0x69c2e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0156.132] wcscat (in: _Dest=0x69c2e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0156.132] wcscat (in: _Dest=0x69c2e20, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" [0156.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0156.575] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.575] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.575] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c34a8 [0156.575] wcscpy (in: _Dest=0x69c34a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0156.575] wcscat (in: _Dest=0x69c34a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0156.575] wcscat (in: _Dest=0x69c34a8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" [0156.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c34a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb0 [0156.576] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.576] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0156.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0156.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 [0156.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 1922 os_tid = 0xa30 [0152.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f4f0 [0152.025] wcscpy (in: _Dest=0x3e0f4f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0152.025] wcscat (in: _Dest=0x3e0f4f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0152.025] wcscat (in: _Dest=0x3e0f4f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*" [0152.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0152.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0156.115] wcscmp (_String1=".", _String2=".") returned 0 [0156.115] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.115] wcscmp (_String1="..", _String2=".") returned 1 [0156.116] wcscmp (_String1="..", _String2="..") returned 0 [0156.116] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.116] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.116] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c24a0 [0156.116] wcscpy (in: _Dest=0x69c24a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0156.116] wcscat (in: _Dest=0x69c24a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0156.116] wcscat (in: _Dest=0x69c24a0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" [0163.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c24a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0163.306] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0163.307] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0163.307] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0163.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818cf0 [0163.307] wcscpy (in: _Dest=0x6818cf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0163.307] wcscat (in: _Dest=0x6818cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0163.307] wcscat (in: _Dest=0x6818cf0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" [0163.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0163.308] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0163.308] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0163.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0163.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f4f0) returned 1 [0163.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 1923 os_tid = 0xa40 [0152.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f370 [0152.025] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0152.025] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0152.025] wcscat (in: _Dest=0x3e0f370, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*" [0152.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0152.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0156.131] wcscmp (_String1=".", _String2=".") returned 0 [0156.131] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.131] wcscmp (_String1="..", _String2=".") returned 1 [0156.131] wcscmp (_String1="..", _String2="..") returned 0 [0156.131] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.131] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.131] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2d88 [0156.131] wcscpy (in: _Dest=0x69c2d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0156.131] wcscat (in: _Dest=0x69c2d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0156.131] wcscat (in: _Dest=0x69c2d88, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" [0159.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0159.634] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0159.634] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0159.634] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0159.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819248 [0159.634] wcscpy (in: _Dest=0x6819248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0159.634] wcscat (in: _Dest=0x6819248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0159.634] wcscat (in: _Dest=0x6819248, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" [0159.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0159.636] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0159.636] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0159.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0159.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 [0159.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6470) returned 1 Thread: id = 1924 os_tid = 0xa50 [0152.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10f70 [0152.026] wcscpy (in: _Dest=0x3e10f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0152.026] wcscat (in: _Dest=0x3e10f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0152.026] wcscat (in: _Dest=0x3e10f70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*" [0152.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0152.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0156.130] wcscmp (_String1=".", _String2=".") returned 0 [0156.130] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.130] wcscmp (_String1="..", _String2=".") returned 1 [0156.130] wcscmp (_String1="..", _String2="..") returned 0 [0156.130] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.130] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.130] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2cf0 [0156.130] wcscpy (in: _Dest=0x69c2cf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0156.130] wcscat (in: _Dest=0x69c2cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0156.130] wcscat (in: _Dest=0x69c2cf0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" [0156.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0156.572] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.572] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.572] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3410 [0156.572] wcscpy (in: _Dest=0x69c3410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0156.572] wcscat (in: _Dest=0x69c3410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0156.572] wcscat (in: _Dest=0x69c3410, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" [0156.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0156.573] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.573] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0156.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0156.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10f70) returned 1 [0156.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ff0) returned 1 Thread: id = 1925 os_tid = 0xa60 [0152.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f7f0 [0152.027] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0152.027] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0152.027] wcscat (in: _Dest=0x3e0f7f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*" [0152.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0152.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0156.126] wcscmp (_String1=".", _String2=".") returned 0 [0156.126] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.126] wcscmp (_String1="..", _String2=".") returned 1 [0156.126] wcscmp (_String1="..", _String2="..") returned 0 [0156.126] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.127] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.127] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2c58 [0156.127] wcscpy (in: _Dest=0x69c2c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0156.127] wcscat (in: _Dest=0x69c2c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0156.127] wcscat (in: _Dest=0x69c2c58, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" [0157.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0157.894] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0157.894] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0157.894] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0157.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818a90 [0157.894] wcscpy (in: _Dest=0x6818a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0157.894] wcscat (in: _Dest=0x6818a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0157.894] wcscat (in: _Dest=0x6818a90, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" [0157.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0157.895] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0157.895] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0157.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0157.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 [0157.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 Thread: id = 1926 os_tid = 0x85c [0152.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f9f0 [0152.027] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0152.027] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0152.027] wcscat (in: _Dest=0x3e0f9f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*" [0152.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0152.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0156.126] wcscmp (_String1=".", _String2=".") returned 0 [0156.126] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.126] wcscmp (_String1="..", _String2=".") returned 1 [0156.126] wcscmp (_String1="..", _String2="..") returned 0 [0156.126] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.126] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.126] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2bc0 [0156.126] wcscpy (in: _Dest=0x69c2bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0156.126] wcscat (in: _Dest=0x69c2bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0156.126] wcscat (in: _Dest=0x69c2bc0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" [0156.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0156.569] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.569] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.569] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3378 [0156.569] wcscpy (in: _Dest=0x69c3378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0156.569] wcscat (in: _Dest=0x69c3378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0156.569] wcscat (in: _Dest=0x69c3378, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" [0156.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0156.570] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.570] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0156.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0156.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 [0156.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 Thread: id = 1927 os_tid = 0x51c [0152.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e11070 [0152.028] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0152.028] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0152.028] wcscat (in: _Dest=0x3e11070, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*" [0152.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0152.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0156.125] wcscmp (_String1=".", _String2=".") returned 0 [0156.125] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.125] wcscmp (_String1="..", _String2=".") returned 1 [0156.125] wcscmp (_String1="..", _String2="..") returned 0 [0156.125] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.125] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.125] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2b28 [0156.125] wcscpy (in: _Dest=0x69c2b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0156.125] wcscat (in: _Dest=0x69c2b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0156.125] wcscat (in: _Dest=0x69c2b28, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" [0159.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0159.728] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0159.728] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0159.728] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0159.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957d80 [0159.728] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0159.728] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0159.728] wcscat (in: _Dest=0x6957d80, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" [0159.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0159.729] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0159.730] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0159.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0159.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 [0159.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 Thread: id = 1928 os_tid = 0xd5c [0152.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcac88 [0152.028] wcscpy (in: _Dest=0x2fcac88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0152.028] wcscat (in: _Dest=0x2fcac88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0152.028] wcscat (in: _Dest=0x2fcac88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*" [0152.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0152.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0156.124] wcscmp (_String1=".", _String2=".") returned 0 [0156.124] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.124] wcscmp (_String1="..", _String2=".") returned 1 [0156.124] wcscmp (_String1="..", _String2="..") returned 0 [0156.124] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.124] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.124] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2a90 [0156.124] wcscpy (in: _Dest=0x69c2a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0156.124] wcscat (in: _Dest=0x69c2a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0156.124] wcscat (in: _Dest=0x69c2a90, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" [0156.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0156.566] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.566] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.566] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c32e0 [0156.566] wcscpy (in: _Dest=0x69c32e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0156.566] wcscat (in: _Dest=0x69c32e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0156.566] wcscat (in: _Dest=0x69c32e0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" [0156.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c32e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0156.567] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.567] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0156.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0156.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcac88) returned 1 [0156.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 1929 os_tid = 0xd90 [0152.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fc9808 [0152.029] wcscpy (in: _Dest=0x2fc9808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0152.029] wcscat (in: _Dest=0x2fc9808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0152.029] wcscat (in: _Dest=0x2fc9808, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*" [0152.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0152.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e805b8 [0156.123] wcscmp (_String1=".", _String2=".") returned 0 [0156.123] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.123] wcscmp (_String1="..", _String2=".") returned 1 [0156.123] wcscmp (_String1="..", _String2="..") returned 0 [0156.123] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.123] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.123] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c29f8 [0156.123] wcscpy (in: _Dest=0x69c29f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0156.123] wcscat (in: _Dest=0x69c29f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0156.124] wcscat (in: _Dest=0x69c29f8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" [0156.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c29f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0156.683] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.683] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.683] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3968 [0156.683] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0156.683] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0156.683] wcscat (in: _Dest=0x69c3968, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" [0156.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0156.685] FindNextFileW (in: hFindFile=0x3e805b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.685] FindClose (in: hFindFile=0x3e805b8 | out: hFindFile=0x3e805b8) returned 1 [0156.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0156.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc9808) returned 1 [0156.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 1930 os_tid = 0x448 [0152.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa08 [0152.030] wcscpy (in: _Dest=0x2fcaa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0152.030] wcscat (in: _Dest=0x2fcaa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0152.030] wcscat (in: _Dest=0x2fcaa08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*" [0152.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0152.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80df8 [0156.122] wcscmp (_String1=".", _String2=".") returned 0 [0156.122] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.122] wcscmp (_String1="..", _String2=".") returned 1 [0156.122] wcscmp (_String1="..", _String2="..") returned 0 [0156.122] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.123] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.123] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2960 [0156.123] wcscpy (in: _Dest=0x69c2960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0156.123] wcscat (in: _Dest=0x69c2960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0156.123] wcscat (in: _Dest=0x69c2960, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" [0163.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0163.310] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0163.310] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0163.310] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0163.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818538 [0163.310] wcscpy (in: _Dest=0x6818538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0163.310] wcscat (in: _Dest=0x6818538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0163.310] wcscat (in: _Dest=0x6818538, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" [0163.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0163.312] FindNextFileW (in: hFindFile=0x3e80df8, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0163.312] FindClose (in: hFindFile=0x3e80df8 | out: hFindFile=0x3e80df8) returned 1 [0163.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0163.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa08) returned 1 [0163.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda4f8) returned 1 Thread: id = 1931 os_tid = 0x88c [0152.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcac08 [0152.031] wcscpy (in: _Dest=0x2fcac08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0152.031] wcscat (in: _Dest=0x2fcac08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0152.031] wcscat (in: _Dest=0x2fcac08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*" [0152.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0152.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0156.121] wcscmp (_String1=".", _String2=".") returned 0 [0156.121] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.122] wcscmp (_String1="..", _String2=".") returned 1 [0156.122] wcscmp (_String1="..", _String2="..") returned 0 [0156.122] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.122] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.122] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c28c8 [0156.122] wcscpy (in: _Dest=0x69c28c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0156.122] wcscat (in: _Dest=0x69c28c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0156.122] wcscat (in: _Dest=0x69c28c8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" [0156.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c28c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0156.679] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.679] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.679] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c38d0 [0156.679] wcscpy (in: _Dest=0x69c38d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0156.679] wcscat (in: _Dest=0x69c38d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0156.679] wcscat (in: _Dest=0x69c38d0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" [0156.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c38d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0156.681] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.681] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0156.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0156.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcac08) returned 1 [0156.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 1932 os_tid = 0x910 [0152.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcab88 [0152.031] wcscpy (in: _Dest=0x2fcab88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0152.031] wcscat (in: _Dest=0x2fcab88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0152.031] wcscat (in: _Dest=0x2fcab88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*" [0152.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0152.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806f8 [0156.121] wcscmp (_String1=".", _String2=".") returned 0 [0156.121] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.121] wcscmp (_String1="..", _String2=".") returned 1 [0156.121] wcscmp (_String1="..", _String2="..") returned 0 [0156.121] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.121] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.121] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2830 [0156.121] wcscpy (in: _Dest=0x69c2830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0156.121] wcscat (in: _Dest=0x69c2830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0156.121] wcscat (in: _Dest=0x69c2830, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" [0161.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0161.204] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0161.204] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0161.206] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0161.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819a00 [0161.206] wcscpy (in: _Dest=0x6819a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0161.206] wcscat (in: _Dest=0x6819a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0161.206] wcscat (in: _Dest=0x6819a00, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" [0161.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0161.208] FindNextFileW (in: hFindFile=0x3e806f8, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0161.208] FindClose (in: hFindFile=0x3e806f8 | out: hFindFile=0x3e806f8) returned 1 [0161.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0161.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcab88) returned 1 [0161.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edaff8) returned 1 Thread: id = 1933 os_tid = 0x920 [0152.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x2fcaa88 [0152.032] wcscpy (in: _Dest=0x2fcaa88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0152.032] wcscat (in: _Dest=0x2fcaa88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0152.032] wcscat (in: _Dest=0x2fcaa88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*" [0152.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0152.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809f8 [0156.120] wcscmp (_String1=".", _String2=".") returned 0 [0156.120] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.120] wcscmp (_String1="..", _String2=".") returned 1 [0156.120] wcscmp (_String1="..", _String2="..") returned 0 [0156.120] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.120] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.120] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2798 [0156.120] wcscpy (in: _Dest=0x69c2798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0156.120] wcscat (in: _Dest=0x69c2798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0156.120] wcscat (in: _Dest=0x69c2798, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" [0156.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0156.676] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.676] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.676] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3838 [0156.676] wcscpy (in: _Dest=0x69c3838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0156.676] wcscat (in: _Dest=0x69c3838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0156.676] wcscat (in: _Dest=0x69c3838, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" [0156.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0156.677] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.677] FindClose (in: hFindFile=0x3e809f8 | out: hFindFile=0x3e809f8) returned 1 [0156.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0156.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa88) returned 1 [0156.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 Thread: id = 1934 os_tid = 0x940 [0152.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x290300 [0152.033] wcscpy (in: _Dest=0x290300, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0152.033] wcscat (in: _Dest=0x290300, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0152.033] wcscat (in: _Dest=0x290300, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*" [0152.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0152.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80978 [0156.119] wcscmp (_String1=".", _String2=".") returned 0 [0156.119] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.119] wcscmp (_String1="..", _String2=".") returned 1 [0156.119] wcscmp (_String1="..", _String2="..") returned 0 [0156.119] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.119] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.119] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2700 [0156.119] wcscpy (in: _Dest=0x69c2700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0156.119] wcscat (in: _Dest=0x69c2700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0156.119] wcscat (in: _Dest=0x69c2700, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" [0163.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0163.770] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0163.770] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0163.770] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0163.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818c58 [0163.770] wcscpy (in: _Dest=0x6818c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0163.770] wcscat (in: _Dest=0x6818c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0163.771] wcscat (in: _Dest=0x6818c58, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" [0163.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0163.772] FindNextFileW (in: hFindFile=0x3e80978, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0163.772] FindClose (in: hFindFile=0x3e80978 | out: hFindFile=0x3e80978) returned 1 [0163.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0163.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x290300) returned 1 [0163.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbff8) returned 1 Thread: id = 1935 os_tid = 0x950 [0152.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x290080 [0152.034] wcscpy (in: _Dest=0x290080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0152.034] wcscat (in: _Dest=0x290080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0152.034] wcscat (in: _Dest=0x290080, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*" [0152.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0152.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0156.114] wcscmp (_String1=".", _String2=".") returned 0 [0156.114] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.114] wcscmp (_String1="..", _String2=".") returned 1 [0156.114] wcscmp (_String1="..", _String2="..") returned 0 [0156.114] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.114] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.114] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30e98 [0156.114] wcscpy (in: _Dest=0x3e30e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0156.114] wcscat (in: _Dest=0x3e30e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0156.114] wcscat (in: _Dest=0x3e30e98, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" [0156.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0156.666] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.666] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.666] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3670 [0156.666] wcscpy (in: _Dest=0x69c3670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0156.666] wcscat (in: _Dest=0x69c3670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0156.666] wcscat (in: _Dest=0x69c3670, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" [0156.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0156.668] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.668] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0156.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0156.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x290080) returned 1 [0156.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb478) returned 1 Thread: id = 1936 os_tid = 0xdf8 [0152.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x303290 [0152.035] wcscpy (in: _Dest=0x303290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0152.035] wcscat (in: _Dest=0x303290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0152.035] wcscat (in: _Dest=0x303290, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*" [0152.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0152.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0156.118] wcscmp (_String1=".", _String2=".") returned 0 [0156.118] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.118] wcscmp (_String1="..", _String2=".") returned 1 [0156.118] wcscmp (_String1="..", _String2="..") returned 0 [0156.118] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.118] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.118] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2668 [0156.118] wcscpy (in: _Dest=0x69c2668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0156.118] wcscat (in: _Dest=0x69c2668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0156.119] wcscat (in: _Dest=0x69c2668, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" [0156.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0156.673] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.673] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.673] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c37a0 [0156.673] wcscpy (in: _Dest=0x69c37a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0156.673] wcscat (in: _Dest=0x69c37a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0156.673] wcscat (in: _Dest=0x69c37a0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" [0156.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c37a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0156.674] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.674] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0156.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0156.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303290) returned 1 [0156.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 Thread: id = 1937 os_tid = 0x960 [0152.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x30911e0 [0152.035] wcscpy (in: _Dest=0x30911e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0152.036] wcscat (in: _Dest=0x30911e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0152.036] wcscat (in: _Dest=0x30911e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*" [0152.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0152.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80a38 [0156.117] wcscmp (_String1=".", _String2=".") returned 0 [0156.117] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.117] wcscmp (_String1="..", _String2=".") returned 1 [0156.117] wcscmp (_String1="..", _String2="..") returned 0 [0156.117] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.117] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.117] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c25d0 [0156.118] wcscpy (in: _Dest=0x69c25d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0156.118] wcscat (in: _Dest=0x69c25d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0156.118] wcscat (in: _Dest=0x69c25d0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" [0161.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c25d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0161.200] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0161.200] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0161.200] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0161.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819378 [0161.200] wcscpy (in: _Dest=0x6819378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0161.200] wcscat (in: _Dest=0x6819378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0161.200] wcscat (in: _Dest=0x6819378, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" [0161.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0161.202] FindNextFileW (in: hFindFile=0x3e80a38, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0161.202] FindClose (in: hFindFile=0x3e80a38 | out: hFindFile=0x3e80a38) returned 1 [0161.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0161.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30911e0) returned 1 [0161.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda178) returned 1 Thread: id = 1938 os_tid = 0xde8 [0152.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674ab38 [0152.466] wcscpy (in: _Dest=0x674ab38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0152.466] wcscat (in: _Dest=0x674ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0152.466] wcscat (in: _Dest=0x674ab38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*" [0152.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0152.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0156.116] wcscmp (_String1=".", _String2=".") returned 0 [0156.116] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.116] wcscmp (_String1="..", _String2=".") returned 1 [0156.116] wcscmp (_String1="..", _String2="..") returned 0 [0156.117] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0156.117] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0156.117] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0156.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2538 [0156.117] wcscpy (in: _Dest=0x69c2538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0156.117] wcscat (in: _Dest=0x69c2538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0156.117] wcscat (in: _Dest=0x69c2538, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" [0156.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0156.670] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0156.670] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0156.670] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0156.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3708 [0156.670] wcscpy (in: _Dest=0x69c3708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0156.670] wcscat (in: _Dest=0x69c3708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0156.670] wcscat (in: _Dest=0x69c3708, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" [0156.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0156.671] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0156.671] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0156.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0156.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 [0156.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 Thread: id = 1939 os_tid = 0x980 [0152.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp")) returned 0x20 [0152.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0152.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.467] GetLastError () returned 0x5 [0152.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0152.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 1940 os_tid = 0x990 [0152.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp")) returned 0x20 [0152.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0152.472] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.472] GetLastError () returned 0x5 [0152.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0152.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e810) returned 1 Thread: id = 1941 os_tid = 0x9a0 [0152.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp")) returned 0x20 [0152.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0152.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.474] GetLastError () returned 0x5 [0152.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0152.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 1942 os_tid = 0x9b0 [0152.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini")) returned 0x20 [0152.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.476] GetLastError () returned 0x5 [0152.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 Thread: id = 1943 os_tid = 0x16fc [0152.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 0x20 [0152.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0152.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.477] GetLastError () returned 0x5 [0152.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0152.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 1944 os_tid = 0x1700 [0152.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini")) returned 0x20 [0152.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.479] GetLastError () returned 0x5 [0152.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 1945 os_tid = 0x1704 [0152.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 0x20 [0152.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0152.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.481] GetLastError () returned 0x5 [0152.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0152.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1dd8) returned 1 Thread: id = 1946 os_tid = 0xe4c [0152.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl")) returned 0x20 [0152.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0152.483] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.483] GetLastError () returned 0x5 [0152.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0152.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 1947 os_tid = 0x1708 [0152.484] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0152.485] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0152.563] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.564] GetLastError () returned 0x20 [0152.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x30bee00 [0152.564] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0152.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bee00) returned 1 [0152.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc5050, Size=0x18) returned 0x3f22978 [0152.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc4c8 [0152.564] wcscpy (in: _Dest=0x66dc4c8, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0152.564] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0152.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 1948 os_tid = 0x170c [0152.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2fc0 [0152.485] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0152.485] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0152.485] wcscat (in: _Dest=0x3ea2fc0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0152.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0152.485] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.485] wcscmp (_String1=".", _String2=".") returned 0 [0152.486] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.486] wcscmp (_String1="..", _String2=".") returned 1 [0152.486] wcscmp (_String1="..", _String2="..") returned 0 [0152.486] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0152.486] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0152.486] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0152.486] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0152.486] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0152.486] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0152.486] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0152.486] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0152.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0152.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 [0152.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 1949 os_tid = 0x1710 [0152.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d148 [0152.487] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0152.488] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0152.488] wcscat (in: _Dest=0x3e5d148, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0152.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0152.488] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.488] wcscmp (_String1=".", _String2=".") returned 0 [0152.488] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.488] wcscmp (_String1="..", _String2=".") returned 1 [0152.488] wcscmp (_String1="..", _String2="..") returned 0 [0152.488] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0152.488] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0152.488] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0152.488] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0152.488] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0152.488] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0152.488] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0152.488] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0152.488] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0152.488] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0152.489] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0152.489] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0152.489] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0152.489] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0152.489] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0152.489] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0152.489] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0152.489] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0152.489] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0152.489] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0152.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0152.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 [0152.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 Thread: id = 1950 os_tid = 0x1714 [0152.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e2d0 [0152.491] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0152.491] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0152.491] wcscat (in: _Dest=0x697e2d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0152.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0152.491] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.491] wcscmp (_String1=".", _String2=".") returned 0 [0152.491] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.492] wcscmp (_String1="..", _String2=".") returned 1 [0152.492] wcscmp (_String1="..", _String2="..") returned 0 [0152.492] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0152.492] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0152.492] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0152.492] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0152.492] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0152.492] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0152.492] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0152.492] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0152.492] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0152.492] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0152.492] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0152.492] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0152.492] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0152.492] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0152.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0152.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 [0152.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 1951 os_tid = 0x1718 [0152.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7098 [0152.494] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0152.494] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0152.494] wcscat (in: _Dest=0x2ff7098, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0152.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0152.494] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.494] wcscmp (_String1=".", _String2=".") returned 0 [0152.494] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.494] wcscmp (_String1="..", _String2=".") returned 1 [0152.494] wcscmp (_String1="..", _String2="..") returned 0 [0152.494] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0152.494] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0152.494] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0152.494] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0152.495] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0152.495] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0152.495] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0152.495] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0152.495] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0152.495] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0152.495] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0152.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0152.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 [0152.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 1952 os_tid = 0x171c [0152.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr")) returned 0x20 [0152.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0152.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.527] GetLastError () returned 0x5 [0152.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0152.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58630) returned 1 Thread: id = 1953 os_tid = 0x1720 [0152.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr")) returned 0x20 [0159.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0160.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.876] GetLastError () returned 0x5 [0160.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0160.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 1954 os_tid = 0x1724 [0152.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr")) returned 0x20 [0154.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0156.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.026] GetLastError () returned 0x5 [0158.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0158.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 1955 os_tid = 0x1728 [0152.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr")) returned 0x20 [0161.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0161.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.059] GetLastError () returned 0x5 [0161.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0161.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 1956 os_tid = 0x172c [0152.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr")) returned 0x20 [0160.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0161.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.706] GetLastError () returned 0x5 [0161.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0161.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 1957 os_tid = 0x1730 [0152.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr")) returned 0x20 [0158.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0159.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.709] GetLastError () returned 0x5 [0161.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0161.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 1958 os_tid = 0x1734 [0152.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr")) returned 0x20 [0161.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0161.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.572] GetLastError () returned 0x5 [0161.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0161.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 1959 os_tid = 0x1738 [0152.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr")) returned 0x20 [0161.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0161.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.703] GetLastError () returned 0x5 [0161.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0161.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 1960 os_tid = 0xdf4 [0152.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr")) returned 0x20 [0160.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0161.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.712] GetLastError () returned 0x5 [0161.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0161.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 1961 os_tid = 0xe2c [0152.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr")) returned 0x20 [0161.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0161.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.707] GetLastError () returned 0x5 [0161.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0161.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 1962 os_tid = 0xe0c [0152.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr")) returned 0x20 [0158.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0160.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.704] GetLastError () returned 0x5 [0161.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0161.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 1963 os_tid = 0xdd8 [0152.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr")) returned 0x20 [0161.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0161.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.710] GetLastError () returned 0x5 [0161.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0161.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 1964 os_tid = 0xe28 [0152.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr")) returned 0x20 [0161.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0161.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.713] GetLastError () returned 0x5 [0161.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0161.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 1965 os_tid = 0x1788 [0152.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr")) returned 0x20 [0160.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0161.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.701] GetLastError () returned 0x5 [0161.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0161.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 1966 os_tid = 0x17c8 [0152.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr")) returned 0x20 [0161.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0161.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.570] GetLastError () returned 0x5 [0161.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0161.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 1967 os_tid = 0x17cc [0152.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3eef268 [0152.541] wcscpy (in: _Dest=0x3eef268, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0152.541] wcscat (in: _Dest=0x3eef268, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\" [0152.541] wcscat (in: _Dest=0x3eef268, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0152.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0152.541] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0153.365] wcscmp (_String1=".", _String2=".") returned 0 [0153.365] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.365] wcscmp (_String1="..", _String2=".") returned 1 [0153.365] wcscmp (_String1="..", _String2="..") returned 0 [0153.365] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.365] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0153.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0153.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 [0153.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e620) returned 1 Thread: id = 1968 os_tid = 0x17d0 [0152.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd3e0 [0152.542] wcscpy (in: _Dest=0x66cd3e0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0152.542] wcscat (in: _Dest=0x66cd3e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\" [0152.542] wcscat (in: _Dest=0x66cd3e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0152.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0152.542] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0153.028] wcscmp (_String1=".", _String2=".") returned 0 [0153.028] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.028] wcscmp (_String1="..", _String2=".") returned 1 [0153.028] wcscmp (_String1="..", _String2="..") returned 0 [0153.028] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.028] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0153.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0153.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd3e0) returned 1 [0153.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e210) returned 1 Thread: id = 1969 os_tid = 0x17d4 [0152.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x66cd5e8 [0152.543] wcscpy (in: _Dest=0x66cd5e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0152.543] wcscat (in: _Dest=0x66cd5e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\" [0152.543] wcscat (in: _Dest=0x66cd5e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*" [0152.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0152.543] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0153.030] wcscmp (_String1=".", _String2=".") returned 0 [0153.031] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.031] wcscmp (_String1="..", _String2=".") returned 1 [0153.031] wcscmp (_String1="..", _String2="..") returned 0 [0153.031] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.031] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0153.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0153.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd5e8) returned 1 [0153.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 1970 os_tid = 0xb18 [0152.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0152.544] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0152.544] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0152.544] wcscat (in: _Dest=0x3df0710, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0152.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0152.544] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.545] wcscmp (_String1=".", _String2=".") returned 0 [0152.545] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.545] wcscmp (_String1="..", _String2=".") returned 1 [0152.545] wcscmp (_String1="..", _String2="..") returned 0 [0152.545] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0152.545] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0152.545] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0152.545] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0152.545] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0152.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0152.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 [0152.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 Thread: id = 1971 os_tid = 0xa7c [0152.547] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0152.547] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.547] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.547] GetLastError () returned 0x5 [0152.547] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc4c8) returned 1 Thread: id = 1972 os_tid = 0x64 [0152.549] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0152.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.549] GetLastError () returned 0x5 [0152.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 1973 os_tid = 0xb1c [0152.550] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0152.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.551] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.551] GetLastError () returned 0x5 [0152.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 1974 os_tid = 0x10c8 [0152.552] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0152.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.553] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.553] GetLastError () returned 0x5 [0152.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 1975 os_tid = 0x10cc [0152.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0152.554] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.554] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.554] wcscat (in: _Dest=0x3f1afe8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*" [0152.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0152.555] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0153.033] wcscmp (_String1=".", _String2=".") returned 0 [0153.033] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.367] wcscmp (_String1="..", _String2=".") returned 1 [0153.367] wcscmp (_String1="..", _String2="..") returned 0 [0153.367] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc2300, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc2300, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0153.367] wcscmp (_String1="ACTIVITL.ICO", _String2=".") returned 1 [0153.367] wcscmp (_String1="ACTIVITL.ICO", _String2="..") returned 1 [0153.367] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0153.367] wcscmp (_String1="ACTIVITS.ICO", _String2=".") returned 1 [0153.367] wcscmp (_String1="ACTIVITS.ICO", _String2="..") returned 1 [0153.367] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0153.367] wcscmp (_String1="ACTIVITY.CFG", _String2=".") returned 1 [0153.367] wcscmp (_String1="ACTIVITY.CFG", _String2="..") returned 1 [0153.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d4d8 [0153.367] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0153.367] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0153.367] wcscat (in: _Dest=0x674d4d8, _Source="ACTIVITY.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" [0155.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0155.607] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0155.607] wcscmp (_String1="APPT.CFG", _String2=".") returned 1 [0155.607] wcscmp (_String1="APPT.CFG", _String2="..") returned 1 [0155.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59e18 [0155.607] wcscpy (in: _Dest=0x3d59e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.607] wcscat (in: _Dest=0x3d59e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.607] wcscat (in: _Dest=0x3d59e18, _Source="APPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" [0155.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0155.608] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0155.608] wcscmp (_String1="APPTL.ICO", _String2=".") returned 1 [0155.608] wcscmp (_String1="APPTL.ICO", _String2="..") returned 1 [0155.608] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0155.609] wcscmp (_String1="APPTS.ICO", _String2=".") returned 1 [0155.609] wcscmp (_String1="APPTS.ICO", _String2="..") returned 1 [0155.609] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0155.609] wcscmp (_String1="CNFNOT.CFG", _String2=".") returned 1 [0155.609] wcscmp (_String1="CNFNOT.CFG", _String2="..") returned 1 [0155.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbd78 [0155.609] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.609] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.609] wcscat (in: _Dest=0x66dbd78, _Source="CNFNOT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" [0155.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0155.610] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3b400, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81c3b400, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0155.610] wcscmp (_String1="CNFNOT.ICO", _String2=".") returned 1 [0155.610] wcscmp (_String1="CNFNOT.ICO", _String2="..") returned 1 [0155.610] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0155.610] wcscmp (_String1="CNFRES.CFG", _String2=".") returned 1 [0155.610] wcscmp (_String1="CNFRES.CFG", _String2="..") returned 1 [0155.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcd38 [0155.610] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.611] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.611] wcscat (in: _Dest=0x66dcd38, _Source="CNFRES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" [0155.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0155.612] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0155.612] wcscmp (_String1="CONFLICT.ICO", _String2=".") returned 1 [0155.612] wcscmp (_String1="CONFLICT.ICO", _String2="..") returned 1 [0155.612] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0155.612] wcscmp (_String1="CONTACT.CFG", _String2=".") returned 1 [0155.612] wcscmp (_String1="CONTACT.CFG", _String2="..") returned 1 [0155.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0155.612] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.612] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.612] wcscat (in: _Dest=0x66db598, _Source="CONTACT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" [0155.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0155.614] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0155.614] wcscmp (_String1="CONTACTL.ICO", _String2=".") returned 1 [0155.614] wcscmp (_String1="CONTACTL.ICO", _String2="..") returned 1 [0155.614] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0155.614] wcscmp (_String1="CONTACTS.ICO", _String2=".") returned 1 [0155.614] wcscmp (_String1="CONTACTS.ICO", _String2="..") returned 1 [0155.614] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0155.614] wcscmp (_String1="DISTLIST.CFG", _String2=".") returned 1 [0155.614] wcscmp (_String1="DISTLIST.CFG", _String2="..") returned 1 [0155.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db8f8 [0155.614] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.614] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.614] wcscat (in: _Dest=0x66db8f8, _Source="DISTLIST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" [0155.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0155.615] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0155.616] wcscmp (_String1="DISTLSTL.ICO", _String2=".") returned 1 [0155.616] wcscmp (_String1="DISTLSTL.ICO", _String2="..") returned 1 [0155.616] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0155.616] wcscmp (_String1="DISTLSTS.ICO", _String2=".") returned 1 [0155.616] wcscmp (_String1="DISTLSTS.ICO", _String2="..") returned 1 [0155.616] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0155.616] wcscmp (_String1="DOC.CFG", _String2=".") returned 1 [0155.616] wcscmp (_String1="DOC.CFG", _String2="..") returned 1 [0155.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d597b8 [0155.616] wcscpy (in: _Dest=0x3d597b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.616] wcscat (in: _Dest=0x3d597b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.616] wcscat (in: _Dest=0x3d597b8, _Source="DOC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" [0155.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d597b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0155.617] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0155.617] wcscmp (_String1="DOCL.ICO", _String2=".") returned 1 [0155.618] wcscmp (_String1="DOCL.ICO", _String2="..") returned 1 [0155.618] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0155.618] wcscmp (_String1="DOCS.ICO", _String2=".") returned 1 [0155.618] wcscmp (_String1="DOCS.ICO", _String2="..") returned 1 [0155.618] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc737c00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc737c00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0155.618] wcscmp (_String1="EXITEM.CFG", _String2=".") returned 1 [0155.618] wcscmp (_String1="EXITEM.CFG", _String2="..") returned 1 [0155.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc288 [0155.618] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.618] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.618] wcscat (in: _Dest=0x66dc288, _Source="EXITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" [0155.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0155.620] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0155.620] wcscmp (_String1="EXITEML.ICO", _String2=".") returned 1 [0155.620] wcscmp (_String1="EXITEML.ICO", _String2="..") returned 1 [0155.620] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0155.620] wcscmp (_String1="EXITEMS.ICO", _String2=".") returned 1 [0155.620] wcscmp (_String1="EXITEMS.ICO", _String2="..") returned 1 [0155.620] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ce7900, ftCreationTime.dwHighDateTime=0x1c45223, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ce7900, ftLastWriteTime.dwHighDateTime=0x1c45223, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0155.620] wcscmp (_String1="INFOMAIL.CFG", _String2=".") returned 1 [0155.620] wcscmp (_String1="INFOMAIL.CFG", _String2="..") returned 1 [0155.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbbc8 [0155.620] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.620] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.621] wcscat (in: _Dest=0x66dbbc8, _Source="INFOMAIL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" [0155.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0155.622] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1244b900, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1244b900, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0155.622] wcscmp (_String1="INFOML.ICO", _String2=".") returned 1 [0155.622] wcscmp (_String1="INFOML.ICO", _String2="..") returned 1 [0155.622] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b87500, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b87500, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0155.622] wcscmp (_String1="INFOMS.ICO", _String2=".") returned 1 [0155.622] wcscmp (_String1="INFOMS.ICO", _String2="..") returned 1 [0155.622] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0155.622] wcscmp (_String1="IPM.CFG", _String2=".") returned 1 [0155.622] wcscmp (_String1="IPM.CFG", _String2="..") returned 1 [0155.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d5a3f0 [0155.623] wcscpy (in: _Dest=0x3d5a3f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.623] wcscat (in: _Dest=0x3d5a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.623] wcscat (in: _Dest=0x3d5a3f0, _Source="IPM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" [0155.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0155.624] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0155.624] wcscmp (_String1="IPML.ICO", _String2=".") returned 1 [0155.624] wcscmp (_String1="IPML.ICO", _String2="..") returned 1 [0155.624] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0155.624] wcscmp (_String1="IPMS.ICO", _String2=".") returned 1 [0155.624] wcscmp (_String1="IPMS.ICO", _String2="..") returned 1 [0155.624] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3bfd00, ftCreationTime.dwHighDateTime=0x1c67fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c3bfd00, ftLastWriteTime.dwHighDateTime=0x1c67fa8, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0155.625] wcscmp (_String1="MMSL.ICO", _String2=".") returned 1 [0155.625] wcscmp (_String1="MMSL.ICO", _String2="..") returned 1 [0155.625] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d33cc00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d33cc00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0155.625] wcscmp (_String1="MMSS.ICO", _String2=".") returned 1 [0155.625] wcscmp (_String1="MMSS.ICO", _String2="..") returned 1 [0155.625] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0155.625] wcscmp (_String1="NOTE.CFG", _String2=".") returned 1 [0155.625] wcscmp (_String1="NOTE.CFG", _String2="..") returned 1 [0155.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a148 [0155.625] wcscpy (in: _Dest=0x3d5a148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.625] wcscat (in: _Dest=0x3d5a148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.625] wcscat (in: _Dest=0x3d5a148, _Source="NOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" [0155.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0155.627] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0155.627] wcscmp (_String1="NOTEL.ICO", _String2=".") returned 1 [0155.627] wcscmp (_String1="NOTEL.ICO", _String2="..") returned 1 [0155.627] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0155.627] wcscmp (_String1="NOTES.ICO", _String2=".") returned 1 [0155.627] wcscmp (_String1="NOTES.ICO", _String2="..") returned 1 [0155.627] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9620200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9620200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0155.627] wcscmp (_String1="OMSMMS.CFG", _String2=".") returned 1 [0155.627] wcscmp (_String1="OMSMMS.CFG", _String2="..") returned 1 [0155.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd1b8 [0155.627] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0155.627] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0155.628] wcscat (in: _Dest=0x66dd1b8, _Source="OMSMMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" [0155.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0155.641] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc74d200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc74d200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0157.512] wcscmp (_String1="OMSSMS.CFG", _String2=".") returned 1 [0157.512] wcscmp (_String1="OMSSMS.CFG", _String2="..") returned 1 [0157.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e5b8 [0157.512] wcscpy (in: _Dest=0x674e5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0157.512] wcscat (in: _Dest=0x674e5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0157.512] wcscat (in: _Dest=0x674e5b8, _Source="OMSSMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" [0162.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0162.288] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0162.288] wcscmp (_String1="OOFL.ICO", _String2=".") returned 1 [0162.288] wcscmp (_String1="OOFL.ICO", _String2="..") returned 1 [0162.288] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0162.288] wcscmp (_String1="OOFS.ICO", _String2=".") returned 1 [0162.288] wcscmp (_String1="OOFS.ICO", _String2="..") returned 1 [0162.288] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99b8600, ftCreationTime.dwHighDateTime=0x1c944fe, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd99b8600, ftLastWriteTime.dwHighDateTime=0x1c944fe, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0162.288] wcscmp (_String1="OOFTMPL.CFG", _String2=".") returned 1 [0162.288] wcscmp (_String1="OOFTMPL.CFG", _String2="..") returned 1 [0162.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674db98 [0162.288] wcscpy (in: _Dest=0x674db98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.288] wcscat (in: _Dest=0x674db98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.288] wcscat (in: _Dest=0x674db98, _Source="OOFTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" [0162.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0162.290] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0162.290] wcscmp (_String1="POST.CFG", _String2=".") returned 1 [0162.290] wcscmp (_String1="POST.CFG", _String2="..") returned 1 [0162.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef730 [0162.290] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.290] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.290] wcscat (in: _Dest=0x66ef730, _Source="POST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" [0162.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0162.291] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0162.291] wcscmp (_String1="POSTIT.CFG", _String2=".") returned 1 [0162.291] wcscmp (_String1="POSTIT.CFG", _String2="..") returned 1 [0162.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d5f8 [0162.291] wcscpy (in: _Dest=0x674d5f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.291] wcscat (in: _Dest=0x674d5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.291] wcscat (in: _Dest=0x674d5f8, _Source="POSTIT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" [0162.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0162.292] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0162.292] wcscmp (_String1="POSTITL.ICO", _String2=".") returned 1 [0162.292] wcscmp (_String1="POSTITL.ICO", _String2="..") returned 1 [0162.292] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0162.293] wcscmp (_String1="POSTITS.ICO", _String2=".") returned 1 [0162.293] wcscmp (_String1="POSTITS.ICO", _String2="..") returned 1 [0162.293] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0162.293] wcscmp (_String1="POSTL.ICO", _String2=".") returned 1 [0162.293] wcscmp (_String1="POSTL.ICO", _String2="..") returned 1 [0162.293] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0162.293] wcscmp (_String1="POSTS.ICO", _String2=".") returned 1 [0162.293] wcscmp (_String1="POSTS.ICO", _String2="..") returned 1 [0162.293] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0162.293] wcscmp (_String1="RCLRPT.CFG", _String2=".") returned 1 [0162.293] wcscmp (_String1="RCLRPT.CFG", _String2="..") returned 1 [0162.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d7a8 [0162.293] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.293] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.293] wcscat (in: _Dest=0x674d7a8, _Source="RCLRPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" [0162.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0162.294] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0162.294] wcscmp (_String1="REC.CFG", _String2=".") returned 1 [0162.294] wcscmp (_String1="REC.CFG", _String2="..") returned 1 [0162.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f0368 [0162.294] wcscpy (in: _Dest=0x66f0368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.294] wcscat (in: _Dest=0x66f0368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.294] wcscat (in: _Dest=0x66f0368, _Source="REC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" [0162.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0162.295] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0162.296] wcscmp (_String1="RECL.ICO", _String2=".") returned 1 [0162.296] wcscmp (_String1="RECL.ICO", _String2="..") returned 1 [0162.296] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0162.296] wcscmp (_String1="RECS.ICO", _String2=".") returned 1 [0162.296] wcscmp (_String1="RECS.ICO", _String2="..") returned 1 [0162.296] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0162.296] wcscmp (_String1="REMOTE.CFG", _String2=".") returned 1 [0162.296] wcscmp (_String1="REMOTE.CFG", _String2="..") returned 1 [0162.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cc68 [0162.296] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.296] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.296] wcscat (in: _Dest=0x674cc68, _Source="REMOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" [0162.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0162.297] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0162.297] wcscmp (_String1="REMOTEL.ICO", _String2=".") returned 1 [0162.297] wcscmp (_String1="REMOTEL.ICO", _String2="..") returned 1 [0162.297] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0162.297] wcscmp (_String1="REMOTES.ICO", _String2=".") returned 1 [0162.297] wcscmp (_String1="REMOTES.ICO", _String2="..") returned 1 [0162.297] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0162.297] wcscmp (_String1="REPLTMPL.CFG", _String2=".") returned 1 [0162.297] wcscmp (_String1="REPLTMPL.CFG", _String2="..") returned 1 [0162.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d688 [0162.298] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.298] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.298] wcscat (in: _Dest=0x674d688, _Source="REPLTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" [0162.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0162.299] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0162.299] wcscmp (_String1="REPORT.CFG", _String2=".") returned 1 [0162.299] wcscmp (_String1="REPORT.CFG", _String2="..") returned 1 [0162.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d328 [0162.299] wcscpy (in: _Dest=0x674d328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.299] wcscat (in: _Dest=0x674d328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.299] wcscat (in: _Dest=0x674d328, _Source="REPORT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" [0162.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0162.301] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0162.301] wcscmp (_String1="REPORTL.ICO", _String2=".") returned 1 [0162.301] wcscmp (_String1="REPORTL.ICO", _String2="..") returned 1 [0162.301] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0162.301] wcscmp (_String1="REPORTS.ICO", _String2=".") returned 1 [0162.301] wcscmp (_String1="REPORTS.ICO", _String2="..") returned 1 [0162.301] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0162.301] wcscmp (_String1="RESEND.CFG", _String2=".") returned 1 [0162.301] wcscmp (_String1="RESEND.CFG", _String2="..") returned 1 [0162.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d8c8 [0162.302] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.302] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.302] wcscat (in: _Dest=0x674d8c8, _Source="RESEND.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" [0162.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0162.303] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0162.303] wcscmp (_String1="RESENDL.ICO", _String2=".") returned 1 [0162.303] wcscmp (_String1="RESENDL.ICO", _String2="..") returned 1 [0162.303] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0162.303] wcscmp (_String1="RESENDS.ICO", _String2=".") returned 1 [0162.303] wcscmp (_String1="RESENDS.ICO", _String2="..") returned 1 [0162.303] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a45400, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6a45400, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0162.303] wcscmp (_String1="RSSITEM.CFG", _String2=".") returned 1 [0162.303] wcscmp (_String1="RSSITEM.CFG", _String2="..") returned 1 [0162.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d958 [0162.303] wcscpy (in: _Dest=0x674d958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.303] wcscat (in: _Dest=0x674d958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.303] wcscat (in: _Dest=0x674d958, _Source="RSSITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" [0162.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0162.304] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd404d500, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd404d500, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0162.304] wcscmp (_String1="RSSITEML.ICO", _String2=".") returned 1 [0162.304] wcscmp (_String1="RSSITEML.ICO", _String2="..") returned 1 [0162.304] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6b900, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5b6b900, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0162.304] wcscmp (_String1="RSSITEMS.ICO", _String2=".") returned 1 [0162.304] wcscmp (_String1="RSSITEMS.ICO", _String2="..") returned 1 [0162.304] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0162.304] wcscmp (_String1="SCDCNCLL.ICO", _String2=".") returned 1 [0162.304] wcscmp (_String1="SCDCNCLL.ICO", _String2="..") returned 1 [0162.304] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0162.304] wcscmp (_String1="SCDCNCLS.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDCNCLS.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0162.305] wcscmp (_String1="SCDREQL.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDREQL.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0162.305] wcscmp (_String1="SCDREQS.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDREQS.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0162.305] wcscmp (_String1="SCDRESNL.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDRESNL.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0162.305] wcscmp (_String1="SCDRESNS.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDRESNS.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0162.305] wcscmp (_String1="SCDRESPL.ICO", _String2=".") returned 1 [0162.305] wcscmp (_String1="SCDRESPL.ICO", _String2="..") returned 1 [0162.305] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0162.307] wcscmp (_String1="SCDRESPS.ICO", _String2=".") returned 1 [0162.307] wcscmp (_String1="SCDRESPS.ICO", _String2="..") returned 1 [0162.307] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0162.307] wcscmp (_String1="SCDRESTL.ICO", _String2=".") returned 1 [0162.307] wcscmp (_String1="SCDRESTL.ICO", _String2="..") returned 1 [0162.307] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0162.307] wcscmp (_String1="SCDRESTS.ICO", _String2=".") returned 1 [0162.307] wcscmp (_String1="SCDRESTS.ICO", _String2="..") returned 1 [0162.307] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0162.307] wcscmp (_String1="SCHDCNCL.CFG", _String2=".") returned 1 [0162.307] wcscmp (_String1="SCHDCNCL.CFG", _String2="..") returned 1 [0162.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e378 [0162.307] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.307] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.307] wcscat (in: _Dest=0x674e378, _Source="SCHDCNCL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" [0162.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0162.712] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fdf200, ftCreationTime.dwHighDateTime=0x1bfc516, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40fdf200, ftLastWriteTime.dwHighDateTime=0x1bfc516, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0162.712] wcscmp (_String1="SCHDREQ.CFG", _String2=".") returned 1 [0162.712] wcscmp (_String1="SCHDREQ.CFG", _String2="..") returned 1 [0162.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0162.712] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.712] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.713] wcscat (in: _Dest=0x66dc948, _Source="SCHDREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" [0162.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0162.751] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0162.751] wcscmp (_String1="SCHDRESN.CFG", _String2=".") returned 1 [0162.751] wcscmp (_String1="SCHDRESN.CFG", _String2="..") returned 1 [0162.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd098 [0162.751] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0162.751] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0162.751] wcscat (in: _Dest=0x66dd098, _Source="SCHDRESN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" [0169.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0169.019] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0169.019] wcscmp (_String1="SCHDRESP.CFG", _String2=".") returned 1 [0169.019] wcscmp (_String1="SCHDRESP.CFG", _String2="..") returned 1 [0169.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac8b8 [0169.019] wcscpy (in: _Dest=0x68ac8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.019] wcscat (in: _Dest=0x68ac8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.019] wcscat (in: _Dest=0x68ac8b8, _Source="SCHDRESP.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" [0169.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0169.037] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0169.037] wcscmp (_String1="SCHDREST.CFG", _String2=".") returned 1 [0169.037] wcscmp (_String1="SCHDREST.CFG", _String2="..") returned 1 [0169.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac948 [0169.037] wcscpy (in: _Dest=0x68ac948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.037] wcscat (in: _Dest=0x68ac948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.037] wcscat (in: _Dest=0x68ac948, _Source="SCHDREST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" [0169.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0169.039] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fef800, ftCreationTime.dwHighDateTime=0x1c2b0e3, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19fef800, ftLastWriteTime.dwHighDateTime=0x1c2b0e3, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0169.039] wcscmp (_String1="SECREC.CFG", _String2=".") returned 1 [0169.039] wcscmp (_String1="SECREC.CFG", _String2="..") returned 1 [0169.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac9d8 [0169.039] wcscpy (in: _Dest=0x68ac9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.039] wcscat (in: _Dest=0x68ac9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.039] wcscat (in: _Dest=0x68ac9d8, _Source="SECREC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" [0169.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0169.040] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0169.040] wcscmp (_String1="SECRECL.ICO", _String2=".") returned 1 [0169.040] wcscmp (_String1="SECRECL.ICO", _String2="..") returned 1 [0169.040] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0169.040] wcscmp (_String1="SECRECS.ICO", _String2=".") returned 1 [0169.040] wcscmp (_String1="SECRECS.ICO", _String2="..") returned 1 [0169.040] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0169.040] wcscmp (_String1="SECURE.CFG", _String2=".") returned 1 [0169.041] wcscmp (_String1="SECURE.CFG", _String2="..") returned 1 [0169.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68aca68 [0169.041] wcscpy (in: _Dest=0x68aca68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.041] wcscat (in: _Dest=0x68aca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.041] wcscat (in: _Dest=0x68aca68, _Source="SECURE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" [0169.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0169.042] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0169.042] wcscmp (_String1="SECURL.ICO", _String2=".") returned 1 [0169.042] wcscmp (_String1="SECURL.ICO", _String2="..") returned 1 [0169.042] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0169.042] wcscmp (_String1="SECURS.ICO", _String2=".") returned 1 [0169.042] wcscmp (_String1="SECURS.ICO", _String2="..") returned 1 [0169.042] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ae7300, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0ae7300, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0169.042] wcscmp (_String1="SHARING.CFG", _String2=".") returned 1 [0169.042] wcscmp (_String1="SHARING.CFG", _String2="..") returned 1 [0169.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68acaf8 [0169.042] wcscpy (in: _Dest=0x68acaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.042] wcscat (in: _Dest=0x68acaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.042] wcscat (in: _Dest=0x68acaf8, _Source="SHARING.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" [0169.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0169.043] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0169.043] wcscmp (_String1="SIGN.CFG", _String2=".") returned 1 [0169.043] wcscmp (_String1="SIGN.CFG", _String2="..") returned 1 [0169.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c2c0 [0169.043] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.043] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.043] wcscat (in: _Dest=0x682c2c0, _Source="SIGN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" [0169.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0169.044] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0169.044] wcscmp (_String1="SIGNL.ICO", _String2=".") returned 1 [0169.044] wcscmp (_String1="SIGNL.ICO", _String2="..") returned 1 [0169.044] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0169.044] wcscmp (_String1="SIGNS.ICO", _String2=".") returned 1 [0169.044] wcscmp (_String1="SIGNS.ICO", _String2="..") returned 1 [0169.044] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0169.044] wcscmp (_String1="SMIMEE.CFG", _String2=".") returned 1 [0169.044] wcscmp (_String1="SMIMEE.CFG", _String2="..") returned 1 [0169.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68acb88 [0169.045] wcscpy (in: _Dest=0x68acb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.045] wcscat (in: _Dest=0x68acb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.045] wcscat (in: _Dest=0x68acb88, _Source="SMIMEE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" [0169.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0169.046] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0169.046] wcscmp (_String1="SMIMES.CFG", _String2=".") returned 1 [0169.046] wcscmp (_String1="SMIMES.CFG", _String2="..") returned 1 [0169.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68acc18 [0169.046] wcscpy (in: _Dest=0x68acc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.046] wcscat (in: _Dest=0x68acc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.046] wcscat (in: _Dest=0x68acc18, _Source="SMIMES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" [0169.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0169.047] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ded00, ftCreationTime.dwHighDateTime=0x1c6674a, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ded00, ftLastWriteTime.dwHighDateTime=0x1c6674a, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0169.047] wcscmp (_String1="SMSL.ICO", _String2=".") returned 1 [0169.047] wcscmp (_String1="SMSL.ICO", _String2="..") returned 1 [0169.047] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41480a00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41480a00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0169.047] wcscmp (_String1="SMSS.ICO", _String2=".") returned 1 [0169.047] wcscmp (_String1="SMSS.ICO", _String2="..") returned 1 [0169.047] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0169.047] wcscmp (_String1="TASK.CFG", _String2=".") returned 1 [0169.047] wcscmp (_String1="TASK.CFG", _String2="..") returned 1 [0169.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c788 [0169.047] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.047] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.047] wcscat (in: _Dest=0x682c788, _Source="TASK.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" [0169.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0169.048] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0169.048] wcscmp (_String1="TASKACC.CFG", _String2=".") returned 1 [0169.048] wcscmp (_String1="TASKACC.CFG", _String2="..") returned 1 [0169.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68acca8 [0169.048] wcscpy (in: _Dest=0x68acca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.048] wcscat (in: _Dest=0x68acca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.048] wcscat (in: _Dest=0x68acca8, _Source="TASKACC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" [0169.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0169.049] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0169.049] wcscmp (_String1="TASKACCL.ICO", _String2=".") returned 1 [0169.050] wcscmp (_String1="TASKACCL.ICO", _String2="..") returned 1 [0169.050] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0169.050] wcscmp (_String1="TASKACCS.ICO", _String2=".") returned 1 [0169.050] wcscmp (_String1="TASKACCS.ICO", _String2="..") returned 1 [0169.050] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0169.050] wcscmp (_String1="TASKDEC.CFG", _String2=".") returned 1 [0169.050] wcscmp (_String1="TASKDEC.CFG", _String2="..") returned 1 [0169.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68acd38 [0169.050] wcscpy (in: _Dest=0x68acd38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.050] wcscat (in: _Dest=0x68acd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.050] wcscat (in: _Dest=0x68acd38, _Source="TASKDEC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" [0169.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0169.051] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0169.051] wcscmp (_String1="TASKDECL.ICO", _String2=".") returned 1 [0169.051] wcscmp (_String1="TASKDECL.ICO", _String2="..") returned 1 [0169.051] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0169.051] wcscmp (_String1="TASKDECS.ICO", _String2=".") returned 1 [0169.051] wcscmp (_String1="TASKDECS.ICO", _String2="..") returned 1 [0169.051] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0169.051] wcscmp (_String1="TASKL.ICO", _String2=".") returned 1 [0169.051] wcscmp (_String1="TASKL.ICO", _String2="..") returned 1 [0169.051] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0169.051] wcscmp (_String1="TASKREQ.CFG", _String2=".") returned 1 [0169.051] wcscmp (_String1="TASKREQ.CFG", _String2="..") returned 1 [0169.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68acdc8 [0169.051] wcscpy (in: _Dest=0x68acdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.051] wcscat (in: _Dest=0x68acdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.052] wcscat (in: _Dest=0x68acdc8, _Source="TASKREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" [0169.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0169.052] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0169.053] wcscmp (_String1="TASKREQL.ICO", _String2=".") returned 1 [0169.053] wcscmp (_String1="TASKREQL.ICO", _String2="..") returned 1 [0169.053] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0169.053] wcscmp (_String1="TASKREQS.ICO", _String2=".") returned 1 [0169.053] wcscmp (_String1="TASKREQS.ICO", _String2="..") returned 1 [0169.053] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0169.053] wcscmp (_String1="TASKS.ICO", _String2=".") returned 1 [0169.053] wcscmp (_String1="TASKS.ICO", _String2="..") returned 1 [0169.053] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0169.053] wcscmp (_String1="TASKUPD.CFG", _String2=".") returned 1 [0169.053] wcscmp (_String1="TASKUPD.CFG", _String2="..") returned 1 [0169.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ace58 [0169.053] wcscpy (in: _Dest=0x68ace58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0169.053] wcscat (in: _Dest=0x68ace58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0169.053] wcscat (in: _Dest=0x68ace58, _Source="TASKUPD.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" [0169.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ace58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0169.054] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0169.054] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0169.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0169.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0169.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 Thread: id = 1976 os_tid = 0x10d0 [0152.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d07e0 [0152.558] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0152.558] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0152.558] wcscat (in: _Dest=0x66d07e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*" [0152.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0152.558] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e38 [0152.558] wcscmp (_String1=".", _String2=".") returned 0 [0152.558] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.559] wcscmp (_String1="..", _String2=".") returned 1 [0152.559] wcscmp (_String1="..", _String2="..") returned 0 [0152.559] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0152.559] wcscmp (_String1="Collab", _String2=".") returned 1 [0152.559] wcscmp (_String1="Collab", _String2="..") returned 1 [0152.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674abb8 [0152.559] wcscpy (in: _Dest=0x674abb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0152.559] wcscat (in: _Dest=0x674abb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0152.559] wcscat (in: _Dest=0x674abb8, _Source="Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0155.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674abb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0155.528] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0155.528] wcscmp (_String1="Forms", _String2=".") returned 1 [0155.528] wcscmp (_String1="Forms", _String2="..") returned 1 [0155.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674aab8 [0155.529] wcscpy (in: _Dest=0x674aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0155.529] wcscat (in: _Dest=0x674aab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0155.529] wcscat (in: _Dest=0x674aab8, _Source="Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0155.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0155.530] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0155.530] wcscmp (_String1="JavaScripts", _String2=".") returned 1 [0155.530] wcscmp (_String1="JavaScripts", _String2="..") returned 1 [0155.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3d5a258 [0155.530] wcscpy (in: _Dest=0x3d5a258, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0155.530] wcscat (in: _Dest=0x3d5a258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0155.530] wcscat (in: _Dest=0x3d5a258, _Source="JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0155.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d5a258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0155.531] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0155.531] wcscmp (_String1="Security", _String2=".") returned 1 [0155.531] wcscmp (_String1="Security", _String2="..") returned 1 [0155.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d58740 [0155.531] wcscpy (in: _Dest=0x3d58740, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0155.531] wcscat (in: _Dest=0x3d58740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0155.531] wcscat (in: _Dest=0x3d58740, _Source="Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0155.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d58740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0155.533] FindNextFileW (in: hFindFile=0x3e80e38, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0155.533] FindClose (in: hFindFile=0x3e80e38 | out: hFindFile=0x3e80e38) returned 1 [0155.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0155.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0155.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 Thread: id = 1977 os_tid = 0x10d4 [0152.559] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0156.488] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0156.488] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.488] GetLastError () returned 0x5 [0156.488] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0156.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 1978 os_tid = 0x10e0 [0152.560] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0156.853] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0156.853] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.854] GetLastError () returned 0x5 [0156.854] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0156.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 1979 os_tid = 0x1144 [0152.561] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0154.995] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0156.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.489] GetLastError () returned 0x5 [0156.489] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0156.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 1980 os_tid = 0x1148 [0152.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0152.573] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0152.573] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0152.573] wcscat (in: _Dest=0x66d00d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*" [0152.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0152.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0153.452] wcscmp (_String1=".", _String2=".") returned 0 [0153.452] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.452] wcscmp (_String1="..", _String2=".") returned 1 [0153.452] wcscmp (_String1="..", _String2="..") returned 0 [0153.452] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1 [0153.452] wcscmp (_String1="InfoPathOMFormServices", _String2=".") returned 1 [0153.452] wcscmp (_String1="InfoPathOMFormServices", _String2="..") returned 1 [0153.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697eab0 [0153.452] wcscpy (in: _Dest=0x697eab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0153.453] wcscat (in: _Dest=0x697eab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0153.453] wcscat (in: _Dest=0x697eab0, _Source="InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0159.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697eab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0159.644] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1 [0159.644] wcscmp (_String1="InfoPathOMV12", _String2=".") returned 1 [0159.644] wcscmp (_String1="InfoPathOMV12", _String2="..") returned 1 [0159.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354c60 [0159.644] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0159.644] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0159.644] wcscat (in: _Dest=0x354c60, _Source="InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0159.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x354c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0159.646] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0159.646] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0159.646] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0159.646] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0159.646] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0159.646] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0159.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0159.646] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0159.646] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0159.646] wcscat (in: _Dest=0x35c378, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" [0159.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0159.647] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0159.647] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0159.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0159.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0159.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 Thread: id = 1981 os_tid = 0x114c [0152.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss")) returned 0x20 [0153.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0153.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.082] GetLastError () returned 0x5 [0153.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0153.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 1982 os_tid = 0x10b8 [0152.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss")) returned 0x20 [0152.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0152.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.812] GetLastError () returned 0x5 [0152.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0152.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 1983 os_tid = 0x1140 [0152.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml")) returned 0x20 [0153.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0153.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.147] GetLastError () returned 0x5 [0153.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0153.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 Thread: id = 1984 os_tid = 0x1180 [0152.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml")) returned 0x20 [0153.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0153.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.145] GetLastError () returned 0x5 [0153.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0153.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 Thread: id = 1985 os_tid = 0x1188 [0152.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl")) returned 0x20 [0153.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0153.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.143] GetLastError () returned 0x5 [0153.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0153.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 Thread: id = 1986 os_tid = 0x118c [0152.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl")) returned 0x20 [0153.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0153.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.142] GetLastError () returned 0x5 [0153.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0153.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 1987 os_tid = 0x1190 [0152.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl")) returned 0x20 [0153.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0153.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.140] GetLastError () returned 0x5 [0153.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0153.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 Thread: id = 1988 os_tid = 0x1194 [0152.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl")) returned 0x20 [0153.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0153.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.138] GetLastError () returned 0x5 [0153.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0153.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 Thread: id = 1989 os_tid = 0x1198 [0152.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl")) returned 0x20 [0153.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0153.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.136] GetLastError () returned 0x5 [0153.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0153.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 Thread: id = 1990 os_tid = 0x119c [0152.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl")) returned 0x20 [0153.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0153.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.134] GetLastError () returned 0x5 [0153.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0153.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 Thread: id = 1991 os_tid = 0x11a0 [0152.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat")) returned 0x20 [0153.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0153.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.133] GetLastError () returned 0x5 [0153.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0153.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 Thread: id = 1992 os_tid = 0x11a4 [0152.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp")) returned 0x20 [0153.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0153.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.149] GetLastError () returned 0x5 [0153.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0153.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b330) returned 1 Thread: id = 1993 os_tid = 0x11a8 [0152.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0588 [0152.582] wcscpy (in: _Dest=0x66d0588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0152.582] wcscat (in: _Dest=0x66d0588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0152.582] wcscat (in: _Dest=0x66d0588, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*" [0152.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0152.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0153.131] wcscmp (_String1=".", _String2=".") returned 0 [0153.131] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.131] wcscmp (_String1="..", _String2=".") returned 1 [0153.131] wcscmp (_String1="..", _String2="..") returned 0 [0153.131] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0153.131] wcscmp (_String1="Analysis", _String2=".") returned 1 [0153.131] wcscmp (_String1="Analysis", _String2="..") returned 1 [0153.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674ac38 [0153.132] wcscpy (in: _Dest=0x674ac38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0153.132] wcscat (in: _Dest=0x674ac38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0153.132] wcscat (in: _Dest=0x674ac38, _Source="Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0157.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674ac38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0157.309] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x87909210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0157.309] wcscmp (_String1="EUROTOOL.XLAM", _String2=".") returned 1 [0157.309] wcscmp (_String1="EUROTOOL.XLAM", _String2="..") returned 1 [0157.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cbd8 [0157.309] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0157.309] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0157.309] wcscat (in: _Dest=0x674cbd8, _Source="EUROTOOL.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" [0157.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0157.310] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0157.310] wcscmp (_String1="SOLVER", _String2=".") returned 1 [0157.310] wcscmp (_String1="SOLVER", _String2="..") returned 1 [0157.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bdb8 [0157.310] wcscpy (in: _Dest=0x674bdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0157.310] wcscat (in: _Dest=0x674bdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0157.310] wcscat (in: _Dest=0x674bdb8, _Source="SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0157.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674bdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0157.311] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0157.311] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 Thread: id = 1994 os_tid = 0x11ac [0152.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl")) returned 0x20 [0153.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0153.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.130] GetLastError () returned 0x5 [0153.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0153.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 1995 os_tid = 0x11b0 [0152.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd7f0 [0152.593] wcscpy (in: _Dest=0x66cd7f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0152.593] wcscat (in: _Dest=0x66cd7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0152.593] wcscat (in: _Dest=0x66cd7f0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*" [0152.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0152.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0153.069] wcscmp (_String1=".", _String2=".") returned 0 [0153.069] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.069] wcscmp (_String1="..", _String2=".") returned 1 [0153.069] wcscmp (_String1="..", _String2="..") returned 0 [0153.069] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0153.069] wcscmp (_String1="cursors.properties", _String2=".") returned 1 [0153.069] wcscmp (_String1="cursors.properties", _String2="..") returned 1 [0153.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d3b8 [0153.069] wcscpy (in: _Dest=0x674d3b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0153.069] wcscat (in: _Dest=0x674d3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0153.069] wcscat (in: _Dest=0x674d3b8, _Source="cursors.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" [0155.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0155.563] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0155.563] wcscmp (_String1="invalid32x32.gif", _String2=".") returned 1 [0155.563] wcscmp (_String1="invalid32x32.gif", _String2="..") returned 1 [0155.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a2e0 [0155.564] wcscpy (in: _Dest=0x3d5a2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.564] wcscat (in: _Dest=0x3d5a2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.564] wcscat (in: _Dest=0x3d5a2e0, _Source="invalid32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" [0155.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d5a2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0155.565] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0155.565] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2=".") returned 1 [0155.565] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2="..") returned 1 [0155.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958700 [0155.565] wcscpy (in: _Dest=0x6958700, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.565] wcscat (in: _Dest=0x6958700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.565] wcscat (in: _Dest=0x6958700, _Source="win32_CopyDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" [0155.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0155.567] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0155.567] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2=".") returned 1 [0155.567] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2="..") returned 1 [0155.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957ce8 [0155.567] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.567] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.567] wcscat (in: _Dest=0x6957ce8, _Source="win32_CopyNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" [0155.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344 [0155.568] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0155.568] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2=".") returned 1 [0155.568] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2="..") returned 1 [0155.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958960 [0155.568] wcscpy (in: _Dest=0x6958960, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.568] wcscat (in: _Dest=0x6958960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.568] wcscat (in: _Dest=0x6958960, _Source="win32_LinkDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" [0155.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0155.570] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0155.570] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2=".") returned 1 [0155.570] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2="..") returned 1 [0155.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69582d8 [0155.570] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.570] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.570] wcscat (in: _Dest=0x69582d8, _Source="win32_LinkNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" [0155.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0155.571] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0155.571] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2=".") returned 1 [0155.571] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2="..") returned 1 [0155.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c1e18 [0155.571] wcscpy (in: _Dest=0x69c1e18, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.571] wcscat (in: _Dest=0x69c1e18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.571] wcscat (in: _Dest=0x69c1e18, _Source="win32_MoveDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" [0155.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0155.572] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0155.572] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2=".") returned 1 [0155.572] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2="..") returned 1 [0155.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c21a8 [0155.573] wcscpy (in: _Dest=0x69c21a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0155.573] wcscat (in: _Dest=0x69c21a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0155.573] wcscat (in: _Dest=0x69c21a8, _Source="win32_MoveNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" [0155.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c21a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0155.574] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0155.574] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0155.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0155.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd7f0) returned 1 [0155.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 1996 os_tid = 0x11b4 [0152.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg")) returned 0x20 [0152.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0152.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.597] GetLastError () returned 0x5 [0152.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0152.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 Thread: id = 1997 os_tid = 0x11b8 [0152.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0152.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0152.599] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.599] GetLastError () returned 0x5 [0152.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0152.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d370) returned 1 Thread: id = 1998 os_tid = 0x11bc [0152.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf")) returned 0x20 [0153.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0153.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.406] GetLastError () returned 0x5 [0153.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0153.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 Thread: id = 1999 os_tid = 0x11c0 [0152.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0153.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0153.409] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.409] GetLastError () returned 0x5 [0153.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0153.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 2000 os_tid = 0x11c4 [0152.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf")) returned 0x20 [0153.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0153.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.071] GetLastError () returned 0x5 [0153.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0153.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 2001 os_tid = 0x11e8 [0152.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf")) returned 0x20 [0153.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0153.073] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.073] GetLastError () returned 0x5 [0153.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0153.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 2002 os_tid = 0x1208 [0152.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini")) returned 0x21 [0152.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x20) returned 0 [0152.611] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.618] GetLastError () returned 0x5 [0152.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x21) returned 0 [0152.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 Thread: id = 2003 os_tid = 0x133c [0152.623] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip")) returned 0x2020 [0155.509] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", dwFileAttributes=0x20) returned 1 [0155.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa0 [0155.509] GetFileSizeEx (in: hFile=0xfa0, lpFileSize=0xf25fbc4 | out: lpFileSize=0xf25fbc4*=42495) returned 1 [0155.509] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0xa5fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.509] ReadFile (in: hFile=0xfa0, lpBuffer=0xf25fba0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf25fbb0, lpOverlapped=0x0 | out: lpBuffer=0xf25fba0*, lpNumberOfBytesRead=0xf25fbb0*=0x4, lpOverlapped=0x0) returned 1 [0155.745] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0155.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0155.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0155.745] NtQuerySystemTime (in: CurrentTime=0xf25fb38 | out: CurrentTime=0xf25fb38*=132482710642920000) returned 0x0 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x7264dcba [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x22f0d563 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x2f1382cb [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x1908c064 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x7f7e1744 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x56ee13b0 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x476c2b24 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x1ba34b7e [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x56b5cbba [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x642d7859 [0155.745] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x12e5472d [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x571b9c4b [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x5c78feb1 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x130c2399 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0xadf63b8 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0xdd2128e [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x71590e39 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x881a9bc [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x10e64ab6 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x27884d27 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x3855debd [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0xc16e206 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x6af25499 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x2be0fe97 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x1448987a [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x50dc639a [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x6257d044 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x49c95442 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x44af2742 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x396ec50a [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x1f32dea0 [0155.746] RtlRandomEx (in: Seed=0xf25fb30 | out: Seed=0xf25fb30) returned 0x49e0d58a [0155.754] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.754] ReadFile (in: hFile=0xfa0, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf25fb38, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xf25fb38*=0x3c00, lpOverlapped=0x0) returned 1 [0155.884] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4eb70 [0155.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d01c8 [0155.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0155.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0155.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673b720 [0155.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0155.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0155.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0155.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 [0155.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eb70) returned 1 [0155.885] WriteFile (in: hFile=0xfa0, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf25fb38, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0xf25fb38*=0x3c00, lpOverlapped=0x0) returned 1 [0155.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0155.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0155.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19f18 [0155.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0155.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0155.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0155.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0155.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0155.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 [0155.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eb70) returned 1 [0155.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec828 [0155.889] SetFilePointerEx (in: hFile=0xfa0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.889] WriteFile (in: hFile=0xfa0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xf25fbb8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xf25fbb8*=0x10e, lpOverlapped=0x0) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0155.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0155.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0155.891] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0155.891] wcscat (in: _Dest=0x3e0e750, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.ac3a86" [0155.891] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.ac3a86", NtPathName=0xf25fb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6c48 [0155.894] FlushFileBuffers (hFile=0xfa0) returned 1 [0155.895] CloseHandle (hObject=0xfa0) returned 1 [0155.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6957f48 [0155.896] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0155.896] wcscat (in: _Dest=0x6957f48, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0155.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0xffffffff [0155.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfa0 [0155.897] WriteFile (in: hFile=0xfa0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf25fb4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf25fb4c*=0x8b9, lpOverlapped=0x0) returned 1 [0155.898] CloseHandle (hObject=0xfa0) returned 1 [0155.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 [0155.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 2004 os_tid = 0x1428 [0152.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages")) returned 0x2020 [0156.086] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages", dwFileAttributes=0x20) returned 1 [0156.912] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x197c [0156.912] GetFileSizeEx (in: hFile=0x197c, lpFileSize=0xd18fdf4 | out: lpFileSize=0xd18fdf4*=8192) returned 1 [0156.912] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.912] ReadFile (in: hFile=0x197c, lpBuffer=0xd18fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd18fde0, lpOverlapped=0x0 | out: lpBuffer=0xd18fdd0*, lpNumberOfBytesRead=0xd18fde0*=0x4, lpOverlapped=0x0) returned 1 [0157.108] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0157.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0157.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0157.108] NtQuerySystemTime (in: CurrentTime=0xd18fd68 | out: CurrentTime=0xd18fd68*=132482710656492000) returned 0x0 [0157.108] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x14b18d5f [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0xb840f13 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x2ca3f1d6 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x1ab20977 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x3c70e32a [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x1c86e203 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x3e764727 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x39cf65fd [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x3658403d [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x7edf85bc [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x6aa1adef [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x7c61c6ca [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x5ad2036e [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x31f6ddec [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x45b86713 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x21ca8f81 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x44d0ffec [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x294e0122 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x3cc9cfa7 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x7af60cf2 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x12e5472d [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x2d5836d6 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0xb840f13 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x70736512 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0xa1c4e7 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0xe01be0 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x441ad601 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x699bc51e [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x4f323715 [0157.109] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x401006c7 [0157.110] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x74cd8973 [0157.110] RtlRandomEx (in: Seed=0xd18fd60 | out: Seed=0xd18fd60) returned 0x86d8a43 [0157.120] ReadFile (in: hFile=0x197c, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xd18fd5c, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xd18fd5c*=0x2000, lpOverlapped=0x0) returned 1 [0157.121] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.121] WriteFile (in: hFile=0x197c, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xd18fd60, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0xd18fd60*=0x2000, lpOverlapped=0x0) returned 1 [0160.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0160.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0160.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5f40) returned 1 [0160.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19888 [0160.105] SetFilePointerEx (in: hFile=0x197c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.105] WriteFile (in: hFile=0x197c, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xd18fde8, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0xd18fde8*=0x10e, lpOverlapped=0x0) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0160.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c878) returned 1 [0160.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0aa8 [0160.434] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" [0160.434] wcscat (in: _Dest=0x69c0aa8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.ac3a86" [0160.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.ac3a86", NtPathName=0xd18fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee13d8 [0160.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee13d8) returned 1 [0160.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6816d08) returned 1 [0160.458] NtQueryInformationFile (in: FileHandle=0x197c, IoStatusBlock=0xd18fd38, FileInformation=0xd18fd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd18fd38, FileInformation=0xd18fd40) returned 0x0 [0160.458] NtSetInformationFile (FileHandle=0x197c, IoStatusBlock=0xd18fd38, FileInformation=0xd18fd40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 [0160.471] FlushFileBuffers (hFile=0x197c) returned 1 [0160.477] CloseHandle (hObject=0x197c) returned 1 [0160.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959838 [0160.482] wcscpy (in: _Dest=0x6959838, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0160.482] wcscat (in: _Dest=0x6959838, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0160.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0x2020 [0160.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 [0160.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 2005 os_tid = 0x142c [0152.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3d58630 [0152.628] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0152.628] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\" [0152.628] wcscat (in: _Dest=0x3d58630, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*" [0152.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0152.628] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0155.442] wcscmp (_String1=".", _String2=".") returned 0 [0155.442] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.443] wcscmp (_String1="..", _String2=".") returned 1 [0155.443] wcscmp (_String1="..", _String2="..") returned 0 [0155.443] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.443] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0155.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0155.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58630) returned 1 [0155.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674aab8) returned 1 Thread: id = 2006 os_tid = 0x1430 [0152.629] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0152.629] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0152.629] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.629] GetLastError () returned 0x5 [0152.629] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0152.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 2007 os_tid = 0x1434 [0152.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll")) returned 0x20 [0153.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0153.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.076] GetLastError () returned 0x5 [0153.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0153.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 2008 os_tid = 0x1438 [0152.632] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0152.632] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0152.632] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.633] GetLastError () returned 0x5 [0152.633] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0152.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2f10) returned 1 Thread: id = 2009 os_tid = 0x143c [0152.634] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0152.634] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0152.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.635] GetLastError () returned 0x5 [0152.635] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0152.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 2010 os_tid = 0x1440 [0152.636] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0152.636] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0152.637] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.637] GetLastError () returned 0x5 [0152.637] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0152.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 2011 os_tid = 0x1444 [0152.638] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0152.638] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0152.639] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.639] GetLastError () returned 0x5 [0152.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0152.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 2012 os_tid = 0x1448 [0152.640] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0152.641] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0152.641] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.641] GetLastError () returned 0x5 [0152.641] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0152.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 2013 os_tid = 0x144c [0152.642] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0152.643] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0152.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.643] GetLastError () returned 0x5 [0152.643] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0152.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 2014 os_tid = 0x1450 [0152.644] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0152.645] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0152.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.645] GetLastError () returned 0x5 [0152.645] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0152.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 2015 os_tid = 0x1454 [0152.646] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0152.646] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0152.647] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.647] GetLastError () returned 0x5 [0152.647] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0152.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2016 os_tid = 0x1458 [0152.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini")) returned 0x20 [0152.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.649] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.649] GetLastError () returned 0x5 [0152.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0152.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 2017 os_tid = 0x145c [0152.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 0x20 [0152.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0152.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.651] GetLastError () returned 0x5 [0152.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0152.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 2018 os_tid = 0x1460 [0152.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 0x20 [0152.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0152.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.666] GetLastError () returned 0x5 [0152.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0152.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 2019 os_tid = 0xfc4 [0152.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 0x20 [0152.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0152.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.686] GetLastError () returned 0x5 [0152.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0152.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 2020 os_tid = 0xb98 [0152.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 0x20 [0152.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0152.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.705] GetLastError () returned 0x5 [0152.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0152.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 2021 os_tid = 0xe18 [0152.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 0x20 [0152.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0152.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.726] GetLastError () returned 0x5 [0152.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0152.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 2022 os_tid = 0x14ec [0152.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 0x20 [0152.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0152.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.745] GetLastError () returned 0x5 [0152.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 2023 os_tid = 0x14f4 [0152.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 0x20 [0160.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0160.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.849] GetLastError () returned 0x5 [0160.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0160.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df08a0) returned 1 Thread: id = 2024 os_tid = 0x14f8 [0152.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 0x20 [0160.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0160.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.740] GetLastError () returned 0x5 [0160.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0160.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 2025 os_tid = 0x14fc [0152.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 0x20 [0160.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0160.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.738] GetLastError () returned 0x5 [0160.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0160.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 Thread: id = 2026 os_tid = 0x1500 [0152.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 0x20 [0160.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0160.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.734] GetLastError () returned 0x5 [0160.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0160.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 2027 os_tid = 0xb60 [0152.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 0x20 [0160.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0160.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.736] GetLastError () returned 0x5 [0160.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0160.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0a30) returned 1 Thread: id = 2028 os_tid = 0x1504 [0152.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 0x20 [0160.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0160.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.859] GetLastError () returned 0x5 [0160.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0160.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 Thread: id = 2029 os_tid = 0xb4c [0152.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 0x20 [0160.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0160.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.093] GetLastError () returned 0x5 [0160.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0160.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 2030 os_tid = 0x1518 [0152.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 0x20 [0160.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0160.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.854] GetLastError () returned 0x5 [0160.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0160.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 2031 os_tid = 0x151c [0152.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 0x20 [0160.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0160.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.860] GetLastError () returned 0x5 [0160.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0160.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 2032 os_tid = 0x1530 [0152.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 0x20 [0155.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0156.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.846] GetLastError () returned 0x5 [0160.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0160.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35f70) returned 1 Thread: id = 2033 os_tid = 0x714 [0152.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 0x20 [0160.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0160.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.852] GetLastError () returned 0x5 [0160.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0160.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 2034 os_tid = 0x155c [0152.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 0x20 [0160.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0160.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.857] GetLastError () returned 0x5 [0160.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0160.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36110) returned 1 Thread: id = 2035 os_tid = 0x1568 [0152.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 0x20 [0160.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0160.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.850] GetLastError () returned 0x5 [0160.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0160.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 Thread: id = 2036 os_tid = 0x156c [0152.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 0x20 [0157.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0157.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.906] GetLastError () returned 0x5 [0159.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0159.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 2037 os_tid = 0x1570 [0152.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 0x20 [0160.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0160.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.855] GetLastError () returned 0x5 [0160.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0160.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 2038 os_tid = 0x1574 [0152.766] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0152.767] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.767] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.767] GetLastError () returned 0x5 [0152.767] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 2039 os_tid = 0x1578 [0152.769] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0152.769] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.769] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.769] GetLastError () returned 0x5 [0152.769] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 2040 os_tid = 0x157c [0152.771] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0152.772] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.772] GetLastError () returned 0x5 [0152.772] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 2041 os_tid = 0x1580 [0152.774] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0152.774] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.774] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.774] GetLastError () returned 0x5 [0152.774] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e316e8) returned 1 Thread: id = 2042 os_tid = 0x1584 [0152.776] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0152.776] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.776] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.777] GetLastError () returned 0x5 [0152.777] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 2043 os_tid = 0x1588 [0152.778] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0152.778] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.779] GetLastError () returned 0x5 [0152.779] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31488) returned 1 Thread: id = 2044 os_tid = 0x158c [0152.780] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0152.781] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.781] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.781] GetLastError () returned 0x5 [0152.781] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 2045 os_tid = 0x1590 [0152.783] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0152.783] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.783] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.783] GetLastError () returned 0x5 [0152.783] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e318b0) returned 1 Thread: id = 2046 os_tid = 0x1594 [0152.785] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0152.785] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.785] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.785] GetLastError () returned 0x5 [0152.785] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30778) returned 1 Thread: id = 2047 os_tid = 0x738 [0152.791] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0152.791] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.791] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.791] GetLastError () returned 0x5 [0152.791] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 2048 os_tid = 0x1598 [0152.793] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0152.793] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.793] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.793] GetLastError () returned 0x5 [0152.793] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 2049 os_tid = 0x159c [0152.814] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0152.814] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.814] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.814] GetLastError () returned 0x5 [0152.814] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 2050 os_tid = 0x15a0 [0152.816] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0152.816] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.816] GetLastError () returned 0x5 [0152.816] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31948) returned 1 Thread: id = 2051 os_tid = 0x15a4 [0152.818] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0152.818] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.818] GetLastError () returned 0x5 [0152.819] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31520) returned 1 Thread: id = 2052 os_tid = 0x15a8 [0152.820] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0152.820] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.821] GetLastError () returned 0x5 [0152.821] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 Thread: id = 2053 os_tid = 0x15ac [0152.822] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0152.822] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.823] GetLastError () returned 0x5 [0152.823] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 2054 os_tid = 0xe34 [0152.824] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0152.825] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.825] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.825] GetLastError () returned 0x5 [0152.825] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 2055 os_tid = 0xeb4 [0152.827] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0152.827] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0152.827] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.827] GetLastError () returned 0x5 [0152.827] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 2056 os_tid = 0x15b0 [0152.829] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0152.829] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.829] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.830] GetLastError () returned 0x5 [0152.830] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 2057 os_tid = 0xa34 [0152.837] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0152.837] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.838] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.838] GetLastError () returned 0x5 [0152.838] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 2058 os_tid = 0xb7c [0152.840] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0152.840] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.840] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.840] GetLastError () returned 0x5 [0152.840] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2059 os_tid = 0xeb0 [0152.842] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0152.842] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.843] GetLastError () returned 0x5 [0152.843] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30ba0) returned 1 Thread: id = 2060 os_tid = 0x4e4 [0152.844] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0152.845] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0152.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.845] GetLastError () returned 0x5 [0152.845] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0152.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 2061 os_tid = 0x15b4 [0153.153] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0153.154] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0153.154] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.154] GetLastError () returned 0x5 [0153.154] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0153.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 2062 os_tid = 0xe30 [0153.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat")) returned 0x20 [0156.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0156.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.825] GetLastError () returned 0x5 [0156.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0156.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3068) returned 1 Thread: id = 2063 os_tid = 0xf00 [0153.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs")) returned 0x20 [0156.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0156.827] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.827] GetLastError () returned 0x5 [0156.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0156.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 2064 os_tid = 0xc14 [0153.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht")) returned 0x20 [0156.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0156.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.374] GetLastError () returned 0x5 [0156.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0156.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 2065 os_tid = 0xbe8 [0153.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze")) returned 0x20 [0156.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0156.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.805] GetLastError () returned 0x5 [0156.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0156.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 2066 os_tid = 0xbb0 [0153.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan")) returned 0x20 [0156.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0156.800] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.800] GetLastError () returned 0x5 [0156.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0156.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 2067 os_tid = 0xc18 [0153.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu")) returned 0x20 [0156.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0156.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.799] GetLastError () returned 0x5 [0156.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0156.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 2068 os_tid = 0xc20 [0153.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp")) returned 0x20 [0156.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0156.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.823] GetLastError () returned 0x5 [0156.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0156.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1dd8) returned 1 Thread: id = 2069 os_tid = 0xc1c [0153.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq")) returned 0x20 [0156.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0156.796] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.796] GetLastError () returned 0x5 [0156.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0156.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 2070 os_tid = 0xbcc [0153.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra")) returned 0x20 [0156.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0156.822] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.822] GetLastError () returned 0x5 [0156.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0156.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 Thread: id = 2071 os_tid = 0xef0 [0153.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv")) returned 0x20 [0156.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0156.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.794] GetLastError () returned 0x5 [0156.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0156.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 2072 os_tid = 0xb34 [0153.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun")) returned 0x20 [0156.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0156.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.477] GetLastError () returned 0x5 [0156.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0156.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 2073 os_tid = 0x15ec [0153.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita")) returned 0x20 [0156.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0156.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.820] GetLastError () returned 0x5 [0156.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0156.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 Thread: id = 2074 os_tid = 0x15f0 [0153.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn")) returned 0x20 [0156.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0156.818] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.818] GetLastError () returned 0x5 [0156.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0156.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd88) returned 1 Thread: id = 2075 os_tid = 0x15f8 [0153.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor")) returned 0x20 [0156.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0156.808] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.809] GetLastError () returned 0x5 [0156.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0156.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 2076 os_tid = 0x370 [0153.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld")) returned 0x20 [0156.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0156.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.807] GetLastError () returned 0x5 [0156.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0156.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 2077 os_tid = 0x15c [0153.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor")) returned 0x20 [0156.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0156.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.804] GetLastError () returned 0x5 [0156.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0156.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 Thread: id = 2078 os_tid = 0x2a8 [0153.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol")) returned 0x20 [0156.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0156.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.817] GetLastError () returned 0x5 [0156.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0156.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cfc8) returned 1 Thread: id = 2079 os_tid = 0x2ac [0153.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb")) returned 0x20 [0156.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0156.802] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.802] GetLastError () returned 0x5 [0156.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0156.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 2080 os_tid = 0x5f4 [0153.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum")) returned 0x20 [0156.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0156.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.815] GetLastError () returned 0x5 [0156.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0156.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d0e8) returned 1 Thread: id = 2081 os_tid = 0x3c4 [0153.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus")) returned 0x20 [0156.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0156.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.813] GetLastError () returned 0x5 [0156.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0156.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 2082 os_tid = 0x130 [0153.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky")) returned 0x20 [0156.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0156.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.812] GetLastError () returned 0x5 [0156.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0156.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 2083 os_tid = 0x650 [0153.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv")) returned 0x20 [0156.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0156.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.810] GetLastError () returned 0x5 [0156.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0156.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d298) returned 1 Thread: id = 2084 os_tid = 0x670 [0153.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0x20 [0156.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0156.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.792] GetLastError () returned 0x5 [0156.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0156.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 Thread: id = 2092 os_tid = 0xfac [0153.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf")) returned 0x20 [0156.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0156.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.479] GetLastError () returned 0x5 [0156.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0156.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59510) returned 1 Thread: id = 2093 os_tid = 0x7c4 [0153.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml")) returned 0x20 [0156.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0156.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.768] GetLastError () returned 0x5 [0156.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0156.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 2094 os_tid = 0xbc4 [0153.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf")) returned 0x20 [0156.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0156.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.782] GetLastError () returned 0x5 [0156.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0156.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674acb8) returned 1 Thread: id = 2095 os_tid = 0x4b8 [0153.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf")) returned 0x20 [0156.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0156.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.771] GetLastError () returned 0x5 [0156.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0156.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ad38) returned 1 Thread: id = 2096 os_tid = 0x1668 [0153.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf")) returned 0x20 [0156.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0156.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.770] GetLastError () returned 0x5 [0156.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0156.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 Thread: id = 2097 os_tid = 0x240 [0153.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf")) returned 0x20 [0156.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0156.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.370] GetLastError () returned 0x5 [0156.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0156.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 2098 os_tid = 0x1678 [0153.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif")) returned 0x20 [0158.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0158.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.093] GetLastError () returned 0x5 [0158.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0158.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 2099 os_tid = 0xa00 [0153.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif")) returned 0x20 [0158.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0158.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.092] GetLastError () returned 0x5 [0158.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0158.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 2100 os_tid = 0x80c [0153.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif")) returned 0x20 [0158.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0158.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.090] GetLastError () returned 0x5 [0158.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0158.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 2101 os_tid = 0x1640 [0153.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif")) returned 0x20 [0158.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0158.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.072] GetLastError () returned 0x5 [0158.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0158.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30ba0) returned 1 Thread: id = 2102 os_tid = 0x1644 [0153.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif")) returned 0x20 [0158.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0158.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.089] GetLastError () returned 0x5 [0158.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0158.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 2103 os_tid = 0x1654 [0153.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif")) returned 0x20 [0158.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0158.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.087] GetLastError () returned 0x5 [0158.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0158.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 2104 os_tid = 0xa74 [0153.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif")) returned 0x20 [0158.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0158.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.086] GetLastError () returned 0x5 [0158.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0158.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 Thread: id = 2105 os_tid = 0xa84 [0153.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif")) returned 0x20 [0158.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0158.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.084] GetLastError () returned 0x5 [0158.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0158.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31520) returned 1 Thread: id = 2106 os_tid = 0xb08 [0153.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif")) returned 0x20 [0158.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0158.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.083] GetLastError () returned 0x5 [0158.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0158.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31948) returned 1 Thread: id = 2107 os_tid = 0x1658 [0153.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif")) returned 0x20 [0158.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0158.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.094] GetLastError () returned 0x5 [0158.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0158.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 2108 os_tid = 0x165c [0153.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif")) returned 0x20 [0158.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0158.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.082] GetLastError () returned 0x5 [0158.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0158.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30778) returned 1 Thread: id = 2109 os_tid = 0x1660 [0153.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif")) returned 0x20 [0158.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0158.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.080] GetLastError () returned 0x5 [0158.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0158.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e318b0) returned 1 Thread: id = 2110 os_tid = 0x300 [0153.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif")) returned 0x20 [0158.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0158.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.079] GetLastError () returned 0x5 [0158.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0158.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31488) returned 1 Thread: id = 2111 os_tid = 0x167c [0153.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif")) returned 0x20 [0158.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0158.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.078] GetLastError () returned 0x5 [0158.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0158.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e316e8) returned 1 Thread: id = 2112 os_tid = 0x1680 [0153.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif")) returned 0x20 [0158.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0158.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.076] GetLastError () returned 0x5 [0158.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0158.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30f30) returned 1 Thread: id = 2113 os_tid = 0x1684 [0153.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif")) returned 0x20 [0158.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0158.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.096] GetLastError () returned 0x5 [0158.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0158.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 2114 os_tid = 0x1744 [0153.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif")) returned 0x20 [0158.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0158.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.110] GetLastError () returned 0x5 [0158.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0158.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 2115 os_tid = 0x1748 [0153.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif")) returned 0x20 [0158.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0158.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.108] GetLastError () returned 0x5 [0158.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0158.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 2116 os_tid = 0x1768 [0153.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif")) returned 0x20 [0158.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0158.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.111] GetLastError () returned 0x5 [0158.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0158.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 2117 os_tid = 0x1770 [0153.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif")) returned 0x20 [0158.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0158.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.107] GetLastError () returned 0x5 [0158.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0158.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 2118 os_tid = 0x1774 [0153.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif")) returned 0x20 [0158.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0158.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.105] GetLastError () returned 0x5 [0158.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0158.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 Thread: id = 2119 os_tid = 0x17c4 [0153.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif")) returned 0x20 [0158.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0158.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.137] GetLastError () returned 0x5 [0158.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0158.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 2120 os_tid = 0x17f8 [0153.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif")) returned 0x20 [0158.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0158.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.103] GetLastError () returned 0x5 [0158.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0158.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958bc0) returned 1 Thread: id = 2121 os_tid = 0x5e8 [0153.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif")) returned 0x20 [0158.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0158.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.104] GetLastError () returned 0x5 [0158.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0158.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958b28) returned 1 Thread: id = 2122 os_tid = 0x4fc [0153.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif")) returned 0x20 [0158.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0158.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.112] GetLastError () returned 0x5 [0158.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0158.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 2123 os_tid = 0xfc8 [0153.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif")) returned 0x20 [0155.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0155.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.467] GetLastError () returned 0x5 [0155.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0155.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 2135 os_tid = 0x40c [0153.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm")) returned 0x20 [0162.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0162.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.217] GetLastError () returned 0x5 [0162.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0162.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 Thread: id = 2136 os_tid = 0xbc8 [0153.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl")) returned 0x20 [0155.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0155.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.459] GetLastError () returned 0x5 [0155.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0155.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 2137 os_tid = 0x1c4 [0153.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp")) returned 0x20 [0162.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0162.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.101] GetLastError () returned 0x5 [0162.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0162.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d5f8) returned 1 Thread: id = 2138 os_tid = 0x7fc [0153.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 0x20 [0153.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0153.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.912] GetLastError () returned 0x5 [0153.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0153.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 2139 os_tid = 0xda0 [0153.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 0x20 [0153.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0153.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.934] GetLastError () returned 0x5 [0153.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0153.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea82c8) returned 1 Thread: id = 2140 os_tid = 0xd98 [0153.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 0x20 [0153.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0153.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.954] GetLastError () returned 0x5 [0153.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0153.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 2141 os_tid = 0xda4 [0153.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 0x20 [0153.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0153.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.975] GetLastError () returned 0x5 [0153.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0153.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 2142 os_tid = 0xdbc [0153.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 0x20 [0153.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0153.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.994] GetLastError () returned 0x5 [0153.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0154.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 2143 os_tid = 0xd94 [0154.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 0x20 [0154.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0154.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.049] GetLastError () returned 0x5 [0154.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0154.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 2144 os_tid = 0xd8c [0154.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 0x20 [0154.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0154.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.076] GetLastError () returned 0x5 [0154.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0154.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 2145 os_tid = 0xa88 [0154.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 0x20 [0154.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0154.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.098] GetLastError () returned 0x5 [0154.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0154.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 2146 os_tid = 0xc58 [0154.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 0x20 [0154.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0154.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.119] GetLastError () returned 0x5 [0154.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0154.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 2147 os_tid = 0x474 [0154.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 0x20 [0154.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0154.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.139] GetLastError () returned 0x5 [0154.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0154.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 2148 os_tid = 0x528 [0154.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 0x20 [0154.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0154.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.160] GetLastError () returned 0x5 [0154.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0154.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 2149 os_tid = 0x580 [0154.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 0x20 [0154.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0154.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.181] GetLastError () returned 0x5 [0154.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0154.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 2150 os_tid = 0x564 [0154.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 0x20 [0154.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0154.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.200] GetLastError () returned 0x5 [0154.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0154.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 2151 os_tid = 0xe08 [0154.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 0x20 [0154.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0154.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.220] GetLastError () returned 0x5 [0154.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0154.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 2152 os_tid = 0x518 [0154.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 0x20 [0154.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0154.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.240] GetLastError () returned 0x5 [0154.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0154.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 2153 os_tid = 0x1004 [0154.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 0x20 [0154.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0154.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.260] GetLastError () returned 0x5 [0154.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0154.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67078b0) returned 1 Thread: id = 2154 os_tid = 0x1034 [0154.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x66cd448 [0154.269] wcscpy (in: _Dest=0x66cd448, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0154.269] wcscat (in: _Dest=0x66cd448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\" [0154.269] wcscat (in: _Dest=0x66cd448, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*" [0154.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0154.270] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0154.270] wcscmp (_String1=".", _String2=".") returned 0 [0154.270] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.270] wcscmp (_String1="..", _String2=".") returned 1 [0154.270] wcscmp (_String1="..", _String2="..") returned 0 [0154.270] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0154.270] wcscmp (_String1="au.cab", _String2=".") returned 1 [0154.270] wcscmp (_String1="au.cab", _String2="..") returned 1 [0154.270] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0154.270] wcscmp (_String1="au.msi", _String2=".") returned 1 [0154.270] wcscmp (_String1="au.msi", _String2="..") returned 1 [0154.271] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0154.271] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0154.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0154.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 [0154.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 2155 os_tid = 0x10a0 [0154.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d09c0 [0154.273] wcscpy (in: _Dest=0x66d09c0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0154.273] wcscat (in: _Dest=0x66d09c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0154.273] wcscat (in: _Dest=0x66d09c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" [0154.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0154.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0155.474] wcscmp (_String1=".", _String2=".") returned 0 [0155.474] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.474] wcscmp (_String1="..", _String2=".") returned 1 [0155.474] wcscmp (_String1="..", _String2="..") returned 0 [0155.474] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dd3c10, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0155.474] wcscmp (_String1="deployment.properties", _String2=".") returned 1 [0155.474] wcscmp (_String1="deployment.properties", _String2="..") returned 1 [0155.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0ef70 [0155.474] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0155.474] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0155.474] wcscat (in: _Dest=0x3e0ef70, _Source="deployment.properties" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0155.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0155.637] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0155.637] wcscmp (_String1="security", _String2=".") returned 1 [0155.637] wcscmp (_String1="security", _String2="..") returned 1 [0155.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f274f8 [0155.637] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0155.637] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0155.637] wcscat (in: _Dest=0x3f274f8, _Source="security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0155.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0155.638] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0155.638] wcscmp (_String1="tmp", _String2=".") returned 1 [0155.638] wcscmp (_String1="tmp", _String2="..") returned 1 [0155.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5df0 [0155.638] wcscpy (in: _Dest=0x3da5df0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0155.638] wcscat (in: _Dest=0x3da5df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0155.638] wcscat (in: _Dest=0x3da5df0, _Source="tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0155.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3da5df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0155.639] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0155.640] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0155.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0155.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0155.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 2156 os_tid = 0x10a4 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b038 [0154.274] wcscpy (in: _Dest=0x674b038, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0154.274] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\" [0154.274] wcscat (in: _Dest=0x674b038, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*" [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0154.274] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0156.093] wcscmp (_String1=".", _String2=".") returned 0 [0156.093] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.094] wcscmp (_String1="..", _String2=".") returned 1 [0156.094] wcscmp (_String1="..", _String2="..") returned 0 [0156.094] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0156.094] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0156.094] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0156.094] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0156.094] wcscmp (_String1="jre1.7.0_45.msi", _String2=".") returned 1 [0156.094] wcscmp (_String1="jre1.7.0_45.msi", _String2="..") returned 1 [0156.094] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0156.094] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0156.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0156.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 [0156.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 Thread: id = 2157 os_tid = 0x10a8 [0154.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini")) returned 0x20 [0154.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.275] GetLastError () returned 0x5 [0154.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 Thread: id = 2158 os_tid = 0x10ac [0154.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 0x20 [0154.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0154.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.277] GetLastError () returned 0x5 [0154.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0154.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 2159 os_tid = 0x10b0 [0154.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini")) returned 0x20 [0154.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.280] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.280] GetLastError () returned 0x5 [0154.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 2160 os_tid = 0x10b4 [0154.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 0x20 [0154.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0154.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.282] GetLastError () returned 0x5 [0154.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0154.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 2161 os_tid = 0x10bc [0154.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d02b8 [0154.284] wcscpy (in: _Dest=0x66d02b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0154.284] wcscat (in: _Dest=0x66d02b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0154.285] wcscat (in: _Dest=0x66d02b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*" [0154.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0154.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0156.485] wcscmp (_String1=".", _String2=".") returned 0 [0156.485] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.485] wcscmp (_String1="..", _String2=".") returned 1 [0156.485] wcscmp (_String1="..", _String2="..") returned 0 [0156.485] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1 [0156.485] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2=".") returned 1 [0156.485] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2="..") returned 1 [0156.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0156.485] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0156.485] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0156.485] wcscat (in: _Dest=0x697ea08, _Source="AdobeFanHeitiStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" [0157.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0157.383] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1 [0157.383] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2=".") returned 1 [0157.383] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2="..") returned 1 [0157.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0788 [0157.384] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.384] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.384] wcscat (in: _Dest=0x69c0788, _Source="AdobeGothicStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" [0157.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0157.385] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbd43c20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0157.385] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2=".") returned 1 [0157.385] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2="..") returned 1 [0157.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d538 [0157.385] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.385] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.385] wcscat (in: _Dest=0x3e5d538, _Source="AdobeHeitiStd-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" [0157.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388 [0157.386] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc8461e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1 [0157.386] wcscmp (_String1="AdobeMingStd-Light.otf", _String2=".") returned 1 [0157.386] wcscmp (_String1="AdobeMingStd-Light.otf", _String2="..") returned 1 [0157.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0328 [0157.386] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.386] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.387] wcscat (in: _Dest=0x69c0328, _Source="AdobeMingStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" [0157.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0157.388] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbae2620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1 [0157.388] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2=".") returned 1 [0157.388] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2="..") returned 1 [0157.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cea8 [0157.388] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.388] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.388] wcscat (in: _Dest=0x3e5cea8, _Source="AdobeMyungjoStd-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" [0157.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0157.395] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbec09e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1 [0157.395] wcscmp (_String1="AdobeSongStd-Light.otf", _String2=".") returned 1 [0157.395] wcscmp (_String1="AdobeSongStd-Light.otf", _String2="..") returned 1 [0157.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0468 [0157.395] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.396] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.396] wcscat (in: _Dest=0x69c0468, _Source="AdobeSongStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" [0157.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0157.397] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb8a7180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1 [0157.397] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2=".") returned 1 [0157.397] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2="..") returned 1 [0157.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1548 [0157.397] wcscpy (in: _Dest=0x69c1548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.397] wcscat (in: _Dest=0x69c1548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.397] wcscat (in: _Dest=0x69c1548, _Source="KozGoPr6N-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" [0157.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0157.398] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1 [0157.398] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2=".") returned 1 [0157.398] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2="..") returned 1 [0157.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0157.398] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0157.398] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0157.398] wcscat (in: _Dest=0x69c1408, _Source="KozMinPr6N-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" [0157.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0157.400] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 0 [0157.400] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0157.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0157.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0157.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e62f8) returned 1 Thread: id = 2162 os_tid = 0x1054 [0154.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f295d0 [0154.287] wcscpy (in: _Dest=0x3f295d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0154.287] wcscat (in: _Dest=0x3f295d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0154.288] wcscat (in: _Dest=0x3f295d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*" [0154.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0154.288] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0156.852] wcscmp (_String1=".", _String2=".") returned 0 [0156.852] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.815] wcscmp (_String1="..", _String2=".") returned 1 [0157.815] wcscmp (_String1="..", _String2="..") returned 0 [0157.815] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1 [0157.815] wcscmp (_String1="83pv-RKSJ-H", _String2=".") returned 1 [0157.815] wcscmp (_String1="83pv-RKSJ-H", _String2="..") returned 1 [0157.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25ea8 [0157.815] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.815] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.815] wcscat (in: _Dest=0x3f25ea8, _Source="83pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" [0162.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0162.307] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1 [0162.307] wcscmp (_String1="90ms-RKSJ-H", _String2=".") returned 1 [0162.307] wcscmp (_String1="90ms-RKSJ-H", _String2="..") returned 1 [0162.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee630 [0162.308] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.308] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.308] wcscat (in: _Dest=0x66ee630, _Source="90ms-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" [0162.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0162.309] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1 [0162.309] wcscmp (_String1="90ms-RKSJ-UCS2", _String2=".") returned 1 [0162.309] wcscmp (_String1="90ms-RKSJ-UCS2", _String2="..") returned 1 [0162.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0162.309] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.309] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.309] wcscat (in: _Dest=0x66ef950, _Source="90ms-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" [0162.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0162.310] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1 [0162.310] wcscmp (_String1="90ms-RKSJ-V", _String2=".") returned 1 [0162.310] wcscmp (_String1="90ms-RKSJ-V", _String2="..") returned 1 [0162.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee5a8 [0162.310] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.310] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.310] wcscat (in: _Dest=0x66ee5a8, _Source="90ms-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" [0162.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0162.311] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1 [0162.311] wcscmp (_String1="90msp-RKSJ-H", _String2=".") returned 1 [0162.311] wcscmp (_String1="90msp-RKSJ-H", _String2="..") returned 1 [0162.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee520 [0162.311] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.311] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.311] wcscat (in: _Dest=0x66ee520, _Source="90msp-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" [0162.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0162.312] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1 [0162.313] wcscmp (_String1="90msp-RKSJ-V", _String2=".") returned 1 [0162.313] wcscmp (_String1="90msp-RKSJ-V", _String2="..") returned 1 [0162.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f00c0 [0162.313] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.313] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.313] wcscat (in: _Dest=0x66f00c0, _Source="90msp-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" [0162.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0162.314] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1 [0162.314] wcscmp (_String1="90pv-RKSJ-H", _String2=".") returned 1 [0162.314] wcscmp (_String1="90pv-RKSJ-H", _String2="..") returned 1 [0162.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef2f0 [0162.314] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.314] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.314] wcscat (in: _Dest=0x66ef2f0, _Source="90pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" [0162.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0162.315] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1 [0162.315] wcscmp (_String1="90pv-RKSJ-UCS2", _String2=".") returned 1 [0162.315] wcscmp (_String1="90pv-RKSJ-UCS2", _String2="..") returned 1 [0162.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efa60 [0162.315] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.315] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.315] wcscat (in: _Dest=0x66efa60, _Source="90pv-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" [0162.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0162.316] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1 [0162.316] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2=".") returned 1 [0162.316] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2="..") returned 1 [0162.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e138 [0162.316] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.316] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.316] wcscat (in: _Dest=0x674e138, _Source="90pv-RKSJ-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" [0162.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0162.317] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1 [0162.317] wcscmp (_String1="Add-RKSJ-H", _String2=".") returned 1 [0162.318] wcscmp (_String1="Add-RKSJ-H", _String2="..") returned 1 [0162.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b2b8 [0162.318] wcscpy (in: _Dest=0x674b2b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.318] wcscat (in: _Dest=0x674b2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.318] wcscat (in: _Dest=0x674b2b8, _Source="Add-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" [0162.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0162.319] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1 [0162.319] wcscmp (_String1="Add-RKSJ-V", _String2=".") returned 1 [0162.319] wcscmp (_String1="Add-RKSJ-V", _String2="..") returned 1 [0162.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b8b8 [0162.319] wcscpy (in: _Dest=0x674b8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.319] wcscat (in: _Dest=0x674b8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.319] wcscat (in: _Dest=0x674b8b8, _Source="Add-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" [0162.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0162.320] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1 [0162.320] wcscmp (_String1="Adobe-CNS1-0", _String2=".") returned 1 [0162.321] wcscmp (_String1="Adobe-CNS1-0", _String2="..") returned 1 [0162.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef268 [0162.321] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.321] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.321] wcscat (in: _Dest=0x66ef268, _Source="Adobe-CNS1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" [0162.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0162.322] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1 [0162.322] wcscmp (_String1="Adobe-CNS1-1", _String2=".") returned 1 [0162.322] wcscmp (_String1="Adobe-CNS1-1", _String2="..") returned 1 [0162.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeaf8 [0162.322] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.322] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.322] wcscat (in: _Dest=0x66eeaf8, _Source="Adobe-CNS1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" [0162.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0162.323] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1 [0162.323] wcscmp (_String1="Adobe-CNS1-2", _String2=".") returned 1 [0162.323] wcscmp (_String1="Adobe-CNS1-2", _String2="..") returned 1 [0162.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee498 [0162.323] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.323] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.323] wcscat (in: _Dest=0x66ee498, _Source="Adobe-CNS1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" [0162.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0162.324] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1 [0162.324] wcscmp (_String1="Adobe-CNS1-3", _String2=".") returned 1 [0162.324] wcscmp (_String1="Adobe-CNS1-3", _String2="..") returned 1 [0162.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eed18 [0162.324] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.324] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.325] wcscat (in: _Dest=0x66eed18, _Source="Adobe-CNS1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" [0162.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0162.326] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1 [0162.326] wcscmp (_String1="Adobe-CNS1-4", _String2=".") returned 1 [0162.326] wcscmp (_String1="Adobe-CNS1-4", _String2="..") returned 1 [0162.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee850 [0162.326] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.326] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.326] wcscat (in: _Dest=0x66ee850, _Source="Adobe-CNS1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" [0162.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0162.327] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1 [0162.327] wcscmp (_String1="Adobe-CNS1-5", _String2=".") returned 1 [0162.327] wcscmp (_String1="Adobe-CNS1-5", _String2="..") returned 1 [0162.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeda0 [0162.327] wcscpy (in: _Dest=0x66eeda0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.327] wcscat (in: _Dest=0x66eeda0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.327] wcscat (in: _Dest=0x66eeda0, _Source="Adobe-CNS1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" [0162.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0162.328] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1 [0162.328] wcscmp (_String1="Adobe-CNS1-B5pc", _String2=".") returned 1 [0162.328] wcscmp (_String1="Adobe-CNS1-B5pc", _String2="..") returned 1 [0162.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e018 [0162.328] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.328] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.328] wcscat (in: _Dest=0x674e018, _Source="Adobe-CNS1-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" [0162.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0162.329] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1 [0162.329] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2=".") returned 1 [0162.329] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2="..") returned 1 [0162.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674df88 [0162.330] wcscpy (in: _Dest=0x674df88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.330] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.330] wcscat (in: _Dest=0x674df88, _Source="Adobe-CNS1-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" [0162.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0162.331] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1 [0162.331] wcscmp (_String1="Adobe-CNS1-H-CID", _String2=".") returned 1 [0162.331] wcscmp (_String1="Adobe-CNS1-H-CID", _String2="..") returned 1 [0162.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674de68 [0162.331] wcscpy (in: _Dest=0x674de68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.331] wcscat (in: _Dest=0x674de68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.331] wcscat (in: _Dest=0x674de68, _Source="Adobe-CNS1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" [0162.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0162.332] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1 [0162.332] wcscmp (_String1="Adobe-CNS1-H-Host", _String2=".") returned 1 [0162.332] wcscmp (_String1="Adobe-CNS1-H-Host", _String2="..") returned 1 [0162.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674def8 [0162.332] wcscpy (in: _Dest=0x674def8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.332] wcscat (in: _Dest=0x674def8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.332] wcscat (in: _Dest=0x674def8, _Source="Adobe-CNS1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" [0162.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674def8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0162.333] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1 [0162.334] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2=".") returned 1 [0162.334] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2="..") returned 1 [0162.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dcb8 [0162.334] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.334] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.334] wcscat (in: _Dest=0x674dcb8, _Source="Adobe-CNS1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" [0162.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0162.335] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1 [0162.335] wcscmp (_String1="Adobe-CNS1-UCS2", _String2=".") returned 1 [0162.335] wcscmp (_String1="Adobe-CNS1-UCS2", _String2="..") returned 1 [0162.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dd48 [0162.335] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.335] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.335] wcscat (in: _Dest=0x674dd48, _Source="Adobe-CNS1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" [0162.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0162.336] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1 [0162.336] wcscmp (_String1="Adobe-GB1-0", _String2=".") returned 1 [0162.336] wcscmp (_String1="Adobe-GB1-0", _String2="..") returned 1 [0162.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef048 [0162.337] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.337] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.337] wcscat (in: _Dest=0x66ef048, _Source="Adobe-GB1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" [0162.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0162.338] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1 [0162.338] wcscmp (_String1="Adobe-GB1-1", _String2=".") returned 1 [0162.338] wcscmp (_String1="Adobe-GB1-1", _String2="..") returned 1 [0162.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eeb80 [0162.338] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.338] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.338] wcscat (in: _Dest=0x66eeb80, _Source="Adobe-GB1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" [0162.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0162.339] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1 [0162.339] wcscmp (_String1="Adobe-GB1-2", _String2=".") returned 1 [0162.339] wcscmp (_String1="Adobe-GB1-2", _String2="..") returned 1 [0162.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef1e0 [0162.339] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.339] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.339] wcscat (in: _Dest=0x66ef1e0, _Source="Adobe-GB1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" [0162.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0162.340] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1 [0162.340] wcscmp (_String1="Adobe-GB1-3", _String2=".") returned 1 [0162.340] wcscmp (_String1="Adobe-GB1-3", _String2="..") returned 1 [0162.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f01d0 [0162.340] wcscpy (in: _Dest=0x66f01d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.340] wcscat (in: _Dest=0x66f01d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.341] wcscat (in: _Dest=0x66f01d0, _Source="Adobe-GB1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" [0162.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f01d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0162.341] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1 [0162.341] wcscmp (_String1="Adobe-GB1-4", _String2=".") returned 1 [0162.341] wcscmp (_String1="Adobe-GB1-4", _String2="..") returned 1 [0162.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f0038 [0162.342] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.342] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.342] wcscat (in: _Dest=0x66f0038, _Source="Adobe-GB1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" [0162.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0162.343] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1 [0162.343] wcscmp (_String1="Adobe-GB1-5", _String2=".") returned 1 [0162.343] wcscmp (_String1="Adobe-GB1-5", _String2="..") returned 1 [0162.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eec08 [0162.343] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.343] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.343] wcscat (in: _Dest=0x66eec08, _Source="Adobe-GB1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" [0162.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0162.344] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1 [0162.344] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2=".") returned 1 [0162.344] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2="..") returned 1 [0162.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674ddd8 [0162.344] wcscpy (in: _Dest=0x674ddd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.344] wcscat (in: _Dest=0x674ddd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.344] wcscat (in: _Dest=0x674ddd8, _Source="Adobe-GB1-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" [0162.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ddd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0162.345] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1 [0162.345] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2=".") returned 1 [0162.345] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2="..") returned 1 [0162.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dc28 [0162.346] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.346] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.346] wcscat (in: _Dest=0x674dc28, _Source="Adobe-GB1-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" [0162.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0162.751] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1 [0162.751] wcscmp (_String1="Adobe-GB1-H-CID", _String2=".") returned 1 [0162.751] wcscmp (_String1="Adobe-GB1-H-CID", _String2="..") returned 1 [0162.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcc18 [0162.752] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0162.752] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0162.752] wcscat (in: _Dest=0x66dcc18, _Source="Adobe-GB1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" [0163.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0163.804] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1 [0163.805] wcscmp (_String1="Adobe-GB1-H-Host", _String2=".") returned 1 [0163.805] wcscmp (_String1="Adobe-GB1-H-Host", _String2="..") returned 1 [0163.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0163.806] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0163.806] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0163.806] wcscat (in: _Dest=0x66dc558, _Source="Adobe-GB1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" [0172.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host")) returned 0x20 [0172.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0172.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.614] GetLastError () returned 0x5 [0172.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0172.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0172.614] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1 [0172.614] wcscmp (_String1="Adobe-GB1-H-Mac", _String2=".") returned 1 [0172.614] wcscmp (_String1="Adobe-GB1-H-Mac", _String2="..") returned 1 [0172.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc558 [0172.614] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.614] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.614] wcscat (in: _Dest=0x66dc558, _Source="Adobe-GB1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" [0172.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac")) returned 0x20 [0172.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0172.615] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.615] GetLastError () returned 0x5 [0172.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0172.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0172.615] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1 [0172.615] wcscmp (_String1="Adobe-GB1-UCS2", _String2=".") returned 1 [0172.615] wcscmp (_String1="Adobe-GB1-UCS2", _String2="..") returned 1 [0172.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.615] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.615] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.615] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-GB1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" [0172.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2")) returned 0x20 [0172.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0172.616] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.616] GetLastError () returned 0x5 [0172.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0172.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.616] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1 [0172.616] wcscmp (_String1="Adobe-Japan1-0", _String2=".") returned 1 [0172.616] wcscmp (_String1="Adobe-Japan1-0", _String2="..") returned 1 [0172.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.616] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.616] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.616] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" [0172.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0")) returned 0x20 [0172.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0172.638] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.638] GetLastError () returned 0x5 [0172.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0172.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.638] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1 [0172.638] wcscmp (_String1="Adobe-Japan1-1", _String2=".") returned 1 [0172.638] wcscmp (_String1="Adobe-Japan1-1", _String2="..") returned 1 [0172.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.638] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.638] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.639] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" [0172.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1")) returned 0x20 [0172.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0172.650] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.650] GetLastError () returned 0x5 [0172.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0172.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.650] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1 [0172.650] wcscmp (_String1="Adobe-Japan1-2", _String2=".") returned 1 [0172.650] wcscmp (_String1="Adobe-Japan1-2", _String2="..") returned 1 [0172.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.651] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.651] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.651] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" [0172.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2")) returned 0x20 [0172.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0172.652] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.652] GetLastError () returned 0x5 [0172.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0172.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.652] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1 [0172.652] wcscmp (_String1="Adobe-Japan1-3", _String2=".") returned 1 [0172.652] wcscmp (_String1="Adobe-Japan1-3", _String2="..") returned 1 [0172.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.652] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.652] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.652] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" [0172.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3")) returned 0x20 [0172.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0172.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.653] GetLastError () returned 0x5 [0172.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0172.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.653] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1 [0172.653] wcscmp (_String1="Adobe-Japan1-4", _String2=".") returned 1 [0172.653] wcscmp (_String1="Adobe-Japan1-4", _String2="..") returned 1 [0172.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.653] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.653] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.653] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" [0172.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4")) returned 0x20 [0172.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0172.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.654] GetLastError () returned 0x5 [0172.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0172.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.654] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1 [0172.654] wcscmp (_String1="Adobe-Japan1-5", _String2=".") returned 1 [0172.654] wcscmp (_String1="Adobe-Japan1-5", _String2="..") returned 1 [0172.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.654] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.654] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.654] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" [0172.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5")) returned 0x20 [0172.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0172.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.687] GetLastError () returned 0x5 [0172.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0172.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0172.687] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1 [0172.687] wcscmp (_String1="Adobe-Japan1-6", _String2=".") returned 1 [0172.687] wcscmp (_String1="Adobe-Japan1-6", _String2="..") returned 1 [0172.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0172.687] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.688] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.688] wcscat (in: _Dest=0x3f260c8, _Source="Adobe-Japan1-6" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" [0172.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6")) returned 0x20 [0173.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0173.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.609] GetLastError () returned 0x5 [0173.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0173.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0173.609] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1 [0173.609] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2=".") returned 1 [0173.609] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2="..") returned 1 [0173.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30810 [0173.609] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0173.609] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0173.610] wcscat (in: _Dest=0x3e30810, _Source="Adobe-Japan1-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" [0177.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0177.944] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1 [0177.944] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2=".") returned 1 [0177.945] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2="..") returned 1 [0177.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958078 [0177.945] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.945] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.945] wcscat (in: _Dest=0x6958078, _Source="Adobe-Japan1-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" [0177.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0177.946] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1 [0177.946] wcscmp (_String1="Adobe-Japan1-H-CID", _String2=".") returned 1 [0177.946] wcscmp (_String1="Adobe-Japan1-H-CID", _String2="..") returned 1 [0177.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcb88 [0177.946] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.946] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.946] wcscat (in: _Dest=0x66dcb88, _Source="Adobe-Japan1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" [0177.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0177.947] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1 [0177.947] wcscmp (_String1="Adobe-Japan1-H-Host", _String2=".") returned 1 [0177.947] wcscmp (_String1="Adobe-Japan1-H-Host", _String2="..") returned 1 [0177.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958830 [0177.947] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.947] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.947] wcscat (in: _Dest=0x6958830, _Source="Adobe-Japan1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" [0177.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0177.948] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1 [0177.948] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2=".") returned 1 [0177.948] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2="..") returned 1 [0177.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbc58 [0177.949] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.949] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.949] wcscat (in: _Dest=0x66dbc58, _Source="Adobe-Japan1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" [0177.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0177.950] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1 [0177.950] wcscmp (_String1="Adobe-Japan1-UCS2", _String2=".") returned 1 [0177.950] wcscmp (_String1="Adobe-Japan1-UCS2", _String2="..") returned 1 [0177.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd128 [0177.950] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.950] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.950] wcscat (in: _Dest=0x66dd128, _Source="Adobe-Japan1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" [0177.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0177.951] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1 [0177.951] wcscmp (_String1="Adobe-Korea1-0", _String2=".") returned 1 [0177.951] wcscmp (_String1="Adobe-Korea1-0", _String2="..") returned 1 [0177.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee5a8 [0177.951] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.951] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.951] wcscat (in: _Dest=0x66ee5a8, _Source="Adobe-Korea1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" [0177.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0177.952] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1 [0177.952] wcscmp (_String1="Adobe-Korea1-1", _String2=".") returned 1 [0177.952] wcscmp (_String1="Adobe-Korea1-1", _String2="..") returned 1 [0177.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef2f0 [0177.952] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.952] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.952] wcscat (in: _Dest=0x66ef2f0, _Source="Adobe-Korea1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" [0177.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0177.953] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1 [0177.953] wcscmp (_String1="Adobe-Korea1-2", _String2=".") returned 1 [0177.953] wcscmp (_String1="Adobe-Korea1-2", _String2="..") returned 1 [0177.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef268 [0177.954] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.954] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.954] wcscat (in: _Dest=0x66ef268, _Source="Adobe-Korea1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" [0177.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0177.955] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1 [0177.955] wcscmp (_String1="Adobe-Korea1-H-CID", _String2=".") returned 1 [0177.955] wcscmp (_String1="Adobe-Korea1-H-CID", _String2="..") returned 1 [0177.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0177.955] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.955] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.955] wcscat (in: _Dest=0x66db628, _Source="Adobe-Korea1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" [0177.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0177.956] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="ADCDCC~1")) returned 1 [0177.956] wcscmp (_String1="Adobe-Korea1-H-Host", _String2=".") returned 1 [0177.956] wcscmp (_String1="Adobe-Korea1-H-Host", _String2="..") returned 1 [0177.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957e18 [0177.956] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.956] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.956] wcscat (in: _Dest=0x6957e18, _Source="Adobe-Korea1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" [0177.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0177.957] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="ADF8FD~1")) returned 1 [0177.957] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2=".") returned 1 [0177.957] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2="..") returned 1 [0177.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0177.957] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.957] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.957] wcscat (in: _Dest=0x66dc558, _Source="Adobe-Korea1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" [0177.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0177.959] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="ADF15E~1")) returned 1 [0177.959] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2=".") returned 1 [0177.959] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2="..") returned 1 [0177.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69589f8 [0177.959] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.959] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.959] wcscat (in: _Dest=0x69589f8, _Source="Adobe-Korea1-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" [0177.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0177.960] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="AD662F~1")) returned 1 [0177.960] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2=".") returned 1 [0177.960] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2="..") returned 1 [0177.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69592e0 [0177.961] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.961] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.961] wcscat (in: _Dest=0x69592e0, _Source="Adobe-Korea1-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" [0177.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0177.962] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="AD8F7C~1")) returned 1 [0177.962] wcscmp (_String1="Adobe-Korea1-UCS2", _String2=".") returned 1 [0177.962] wcscmp (_String1="Adobe-Korea1-UCS2", _String2="..") returned 1 [0177.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db868 [0177.962] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.962] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.962] wcscat (in: _Dest=0x66db868, _Source="Adobe-Korea1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" [0177.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0177.963] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0177.963] wcscmp (_String1="B5pc-H", _String2=".") returned 1 [0177.963] wcscmp (_String1="B5pc-H", _String2="..") returned 1 [0177.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0177.963] wcscpy (in: _Dest=0x3f1d670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.964] wcscat (in: _Dest=0x3f1d670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.964] wcscat (in: _Dest=0x3f1d670, _Source="B5pc-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" [0177.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0177.965] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="B5PC-U~1")) returned 1 [0177.965] wcscmp (_String1="B5pc-UCS2", _String2=".") returned 1 [0177.965] wcscmp (_String1="B5pc-UCS2", _String2="..") returned 1 [0177.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b1b8 [0177.965] wcscpy (in: _Dest=0x674b1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.965] wcscat (in: _Dest=0x674b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.965] wcscat (in: _Dest=0x674b1b8, _Source="B5pc-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" [0177.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0177.966] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="B5PC-U~2")) returned 1 [0177.966] wcscmp (_String1="B5pc-UCS2C", _String2=".") returned 1 [0177.966] wcscmp (_String1="B5pc-UCS2C", _String2="..") returned 1 [0177.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674af38 [0177.967] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.967] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.967] wcscat (in: _Dest=0x674af38, _Source="B5pc-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" [0177.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0177.968] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0177.968] wcscmp (_String1="B5pc-V", _String2=".") returned 1 [0177.968] wcscmp (_String1="B5pc-V", _String2="..") returned 1 [0177.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc88 [0177.968] wcscpy (in: _Dest=0x3f1dc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.968] wcscat (in: _Dest=0x3f1dc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.968] wcscat (in: _Dest=0x3f1dc88, _Source="B5pc-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" [0177.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1dc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0177.969] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="CNS-EU~1")) returned 1 [0177.969] wcscmp (_String1="CNS-EUC-H", _String2=".") returned 1 [0177.969] wcscmp (_String1="CNS-EUC-H", _String2="..") returned 1 [0177.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674bbb8 [0177.970] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.970] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.970] wcscat (in: _Dest=0x674bbb8, _Source="CNS-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" [0177.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0177.971] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="CNS-EU~2")) returned 1 [0177.971] wcscmp (_String1="CNS-EUC-V", _String2=".") returned 1 [0177.971] wcscmp (_String1="CNS-EUC-V", _String2="..") returned 1 [0177.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ae38 [0177.971] wcscpy (in: _Dest=0x674ae38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.971] wcscat (in: _Dest=0x674ae38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.971] wcscat (in: _Dest=0x674ae38, _Source="CNS-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" [0177.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ae38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0177.972] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="ETEN-B~1")) returned 1 [0177.979] wcscmp (_String1="ETen-B5-H", _String2=".") returned 1 [0177.979] wcscmp (_String1="ETen-B5-H", _String2="..") returned 1 [0177.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ab38 [0177.979] wcscpy (in: _Dest=0x674ab38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.980] wcscat (in: _Dest=0x674ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.980] wcscat (in: _Dest=0x674ab38, _Source="ETen-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" [0177.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0177.981] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="ETEN-B~2")) returned 1 [0177.981] wcscmp (_String1="ETen-B5-UCS2", _String2=".") returned 1 [0177.981] wcscmp (_String1="ETen-B5-UCS2", _String2="..") returned 1 [0177.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0177.981] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.981] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.981] wcscat (in: _Dest=0x66efa60, _Source="ETen-B5-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" [0177.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0177.982] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="ETEN-B~3")) returned 1 [0177.982] wcscmp (_String1="ETen-B5-V", _String2=".") returned 1 [0177.982] wcscmp (_String1="ETen-B5-V", _String2="..") returned 1 [0177.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674c6b8 [0177.982] wcscpy (in: _Dest=0x674c6b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.982] wcscat (in: _Dest=0x674c6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.982] wcscat (in: _Dest=0x674c6b8, _Source="ETen-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" [0177.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0178.243] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="ETENMS~1")) returned 1 [0178.243] wcscmp (_String1="ETenms-B5-H", _String2=".") returned 1 [0178.243] wcscmp (_String1="ETenms-B5-H", _String2="..") returned 1 [0178.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef268 [0178.244] wcscpy (in: _Dest=0x66ef268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.244] wcscat (in: _Dest=0x66ef268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.244] wcscat (in: _Dest=0x66ef268, _Source="ETenms-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" [0179.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0179.957] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="ETENMS~2")) returned 1 [0179.957] wcscmp (_String1="ETenms-B5-V", _String2=".") returned 1 [0179.958] wcscmp (_String1="ETenms-B5-V", _String2="..") returned 1 [0179.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cf80 [0179.958] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.958] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.958] wcscat (in: _Dest=0x682cf80, _Source="ETenms-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" [0179.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0179.959] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="ETHK-B~1")) returned 1 [0179.959] wcscmp (_String1="ETHK-B5-H", _String2=".") returned 1 [0179.959] wcscmp (_String1="ETHK-B5-H", _String2="..") returned 1 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3eda378 [0179.959] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.959] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.959] wcscat (in: _Dest=0x3eda378, _Source="ETHK-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" [0179.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0179.960] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="ETHK-B~2")) returned 1 [0179.960] wcscmp (_String1="ETHK-B5-V", _String2=".") returned 1 [0179.960] wcscmp (_String1="ETHK-B5-V", _String2="..") returned 1 [0179.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbdf8 [0179.960] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.960] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.960] wcscat (in: _Dest=0x3edbdf8, _Source="ETHK-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" [0179.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0179.962] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0179.962] wcscmp (_String1="EUC-H", _String2=".") returned 1 [0179.962] wcscmp (_String1="EUC-H", _String2="..") returned 1 [0179.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d580 [0179.962] wcscpy (in: _Dest=0x3f1d580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.962] wcscat (in: _Dest=0x3f1d580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.962] wcscat (in: _Dest=0x3f1d580, _Source="EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" [0179.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0179.963] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0179.963] wcscmp (_String1="EUC-V", _String2=".") returned 1 [0179.963] wcscmp (_String1="EUC-V", _String2="..") returned 1 [0179.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1cf68 [0179.963] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.963] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.963] wcscat (in: _Dest=0x3f1cf68, _Source="EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" [0179.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0179.965] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="EXT-RK~1")) returned 1 [0179.965] wcscmp (_String1="Ext-RKSJ-H", _String2=".") returned 1 [0179.965] wcscmp (_String1="Ext-RKSJ-H", _String2="..") returned 1 [0179.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbef8 [0179.965] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.965] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.965] wcscat (in: _Dest=0x3edbef8, _Source="Ext-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" [0179.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0179.966] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="EXT-RK~2")) returned 1 [0179.966] wcscmp (_String1="Ext-RKSJ-V", _String2=".") returned 1 [0179.966] wcscmp (_String1="Ext-RKSJ-V", _String2="..") returned 1 [0179.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbff8 [0179.967] wcscpy (in: _Dest=0x3edbff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.967] wcscat (in: _Dest=0x3edbff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.967] wcscat (in: _Dest=0x3edbff8, _Source="Ext-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" [0179.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0179.968] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0179.968] wcscmp (_String1="GB-EUC-H", _String2=".") returned 1 [0179.968] wcscmp (_String1="GB-EUC-H", _String2="..") returned 1 [0179.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbaf8 [0179.968] wcscpy (in: _Dest=0x3edbaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.968] wcscat (in: _Dest=0x3edbaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.968] wcscat (in: _Dest=0x3edbaf8, _Source="GB-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" [0179.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0179.969] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0179.969] wcscmp (_String1="GB-EUC-V", _String2=".") returned 1 [0179.969] wcscmp (_String1="GB-EUC-V", _String2="..") returned 1 [0179.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb6f8 [0179.969] wcscpy (in: _Dest=0x3edb6f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.969] wcscat (in: _Dest=0x3edb6f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.969] wcscat (in: _Dest=0x3edb6f8, _Source="GB-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" [0179.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0179.970] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="GBK-EU~1")) returned 1 [0179.970] wcscmp (_String1="GBK-EUC-H", _String2=".") returned 1 [0179.970] wcscmp (_String1="GBK-EUC-H", _String2="..") returned 1 [0179.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb5f8 [0179.970] wcscpy (in: _Dest=0x3edb5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.971] wcscat (in: _Dest=0x3edb5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.971] wcscat (in: _Dest=0x3edb5f8, _Source="GBK-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" [0179.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0179.972] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="GBK-EU~2")) returned 1 [0179.972] wcscmp (_String1="GBK-EUC-UCS2", _String2=".") returned 1 [0179.972] wcscmp (_String1="GBK-EUC-UCS2", _String2="..") returned 1 [0179.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cd60 [0179.972] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.973] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.973] wcscat (in: _Dest=0x682cd60, _Source="GBK-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" [0179.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0179.973] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="GBK-EU~3")) returned 1 [0179.974] wcscmp (_String1="GBK-EUC-V", _String2=".") returned 1 [0179.974] wcscmp (_String1="GBK-EUC-V", _String2="..") returned 1 [0179.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3eda878 [0179.974] wcscpy (in: _Dest=0x3eda878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.974] wcscat (in: _Dest=0x3eda878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.974] wcscat (in: _Dest=0x3eda878, _Source="GBK-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" [0179.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0179.975] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0179.975] wcscmp (_String1="GBK2K-H", _String2=".") returned 1 [0179.975] wcscmp (_String1="GBK2K-H", _String2="..") returned 1 [0179.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb1f8 [0179.975] wcscpy (in: _Dest=0x3edb1f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.975] wcscat (in: _Dest=0x3edb1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.975] wcscat (in: _Dest=0x3edb1f8, _Source="GBK2K-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" [0179.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0179.976] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0179.976] wcscmp (_String1="GBK2K-V", _String2=".") returned 1 [0179.976] wcscmp (_String1="GBK2K-V", _String2="..") returned 1 [0179.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edb878 [0179.976] wcscpy (in: _Dest=0x3edb878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.976] wcscat (in: _Dest=0x3edb878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.976] wcscat (in: _Dest=0x3edb878, _Source="GBK2K-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" [0179.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0179.977] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="GBKP-E~1")) returned 1 [0179.977] wcscmp (_String1="GBKp-EUC-H", _String2=".") returned 1 [0179.977] wcscmp (_String1="GBKp-EUC-H", _String2="..") returned 1 [0179.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb478 [0179.977] wcscpy (in: _Dest=0x3edb478, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.977] wcscat (in: _Dest=0x3edb478, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.977] wcscat (in: _Dest=0x3edb478, _Source="GBKp-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" [0179.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0179.978] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="GBKP-E~2")) returned 1 [0179.978] wcscmp (_String1="GBKp-EUC-V", _String2=".") returned 1 [0179.978] wcscmp (_String1="GBKp-EUC-V", _String2="..") returned 1 [0179.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbe78 [0179.978] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.978] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.978] wcscat (in: _Dest=0x3edbe78, _Source="GBKp-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" [0179.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0179.979] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="GBPC-E~1")) returned 1 [0179.979] wcscmp (_String1="GBpc-EUC-H", _String2=".") returned 1 [0179.979] wcscmp (_String1="GBpc-EUC-H", _String2="..") returned 1 [0179.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda4f8 [0179.979] wcscpy (in: _Dest=0x3eda4f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.979] wcscat (in: _Dest=0x3eda4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.980] wcscat (in: _Dest=0x3eda4f8, _Source="GBpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" [0179.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0179.981] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="GBPC-E~2")) returned 1 [0179.981] wcscmp (_String1="GBpc-EUC-UCS2", _String2=".") returned 1 [0179.981] wcscmp (_String1="GBpc-EUC-UCS2", _String2="..") returned 1 [0179.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c2c0 [0179.981] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.981] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.981] wcscat (in: _Dest=0x682c2c0, _Source="GBpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" [0179.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0179.982] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="GBPC-E~3")) returned 1 [0179.982] wcscmp (_String1="GBpc-EUC-UCS2C", _String2=".") returned 1 [0179.982] wcscmp (_String1="GBpc-EUC-UCS2C", _String2="..") returned 1 [0179.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0179.982] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.982] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.982] wcscat (in: _Dest=0x682c788, _Source="GBpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" [0179.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0179.983] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="GBPC-E~4")) returned 1 [0179.983] wcscmp (_String1="GBpc-EUC-V", _String2=".") returned 1 [0179.983] wcscmp (_String1="GBpc-EUC-V", _String2="..") returned 1 [0179.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda478 [0179.983] wcscpy (in: _Dest=0x3eda478, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.983] wcscat (in: _Dest=0x3eda478, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.983] wcscat (in: _Dest=0x3eda478, _Source="GBpc-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" [0179.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0179.986] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="GBT-EU~1")) returned 1 [0179.986] wcscmp (_String1="GBT-EUC-H", _String2=".") returned 1 [0179.986] wcscmp (_String1="GBT-EUC-H", _String2="..") returned 1 [0179.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbbf8 [0179.986] wcscpy (in: _Dest=0x3edbbf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.986] wcscat (in: _Dest=0x3edbbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.986] wcscat (in: _Dest=0x3edbbf8, _Source="GBT-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" [0179.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0179.987] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="GBT-EU~2")) returned 1 [0179.987] wcscmp (_String1="GBT-EUC-V", _String2=".") returned 1 [0179.987] wcscmp (_String1="GBT-EUC-V", _String2="..") returned 1 [0179.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb8f8 [0179.987] wcscpy (in: _Dest=0x3edb8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.987] wcscat (in: _Dest=0x3edb8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.987] wcscat (in: _Dest=0x3edb8f8, _Source="GBT-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" [0179.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0179.988] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0179.988] wcscmp (_String1="H", _String2=".") returned 1 [0179.988] wcscmp (_String1="H", _String2="..") returned 1 [0179.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f28fb0 [0179.988] wcscpy (in: _Dest=0x3f28fb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.988] wcscat (in: _Dest=0x3f28fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.988] wcscat (in: _Dest=0x3f28fb0, _Source="H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" [0179.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f28fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0179.989] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="HKDLA-~1")) returned 1 [0179.989] wcscmp (_String1="HKdla-B5-H", _String2=".") returned 1 [0179.989] wcscmp (_String1="HKdla-B5-H", _String2="..") returned 1 [0179.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edae78 [0179.989] wcscpy (in: _Dest=0x3edae78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.989] wcscat (in: _Dest=0x3edae78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.990] wcscat (in: _Dest=0x3edae78, _Source="HKdla-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" [0179.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0179.991] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="HKDLA-~2")) returned 1 [0179.991] wcscmp (_String1="HKdla-B5-V", _String2=".") returned 1 [0179.991] wcscmp (_String1="HKdla-B5-V", _String2="..") returned 1 [0179.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda178 [0179.991] wcscpy (in: _Dest=0x3eda178, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.991] wcscat (in: _Dest=0x3eda178, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.991] wcscat (in: _Dest=0x3eda178, _Source="HKdla-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" [0179.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0179.992] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="HKDLB-~1")) returned 1 [0179.992] wcscmp (_String1="HKdlb-B5-H", _String2=".") returned 1 [0179.992] wcscmp (_String1="HKdlb-B5-H", _String2="..") returned 1 [0179.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edaff8 [0179.992] wcscpy (in: _Dest=0x3edaff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.992] wcscat (in: _Dest=0x3edaff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.992] wcscat (in: _Dest=0x3edaff8, _Source="HKdlb-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" [0179.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edaff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0179.993] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="HKDLB-~2")) returned 1 [0179.993] wcscmp (_String1="HKdlb-B5-V", _String2=".") returned 1 [0179.993] wcscmp (_String1="HKdlb-B5-V", _String2="..") returned 1 [0179.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edac78 [0179.993] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.993] wcscat (in: _Dest=0x3edac78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.993] wcscat (in: _Dest=0x3edac78, _Source="HKdlb-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" [0179.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0179.994] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="HKGCCS~1")) returned 1 [0179.994] wcscmp (_String1="HKgccs-B5-H", _String2=".") returned 1 [0179.994] wcscmp (_String1="HKgccs-B5-H", _String2="..") returned 1 [0179.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ccd8 [0179.995] wcscpy (in: _Dest=0x682ccd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.995] wcscat (in: _Dest=0x682ccd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.995] wcscat (in: _Dest=0x682ccd8, _Source="HKgccs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" [0179.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ccd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0179.996] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="HKGCCS~2")) returned 1 [0179.996] wcscmp (_String1="HKgccs-B5-V", _String2=".") returned 1 [0179.996] wcscmp (_String1="HKgccs-B5-V", _String2="..") returned 1 [0179.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c128 [0179.996] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.996] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.996] wcscat (in: _Dest=0x682c128, _Source="HKgccs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" [0179.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0179.997] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="HKM314~1")) returned 1 [0179.997] wcscmp (_String1="HKm314-B5-H", _String2=".") returned 1 [0179.997] wcscmp (_String1="HKm314-B5-H", _String2="..") returned 1 [0179.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c348 [0179.997] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.997] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.997] wcscat (in: _Dest=0x682c348, _Source="HKm314-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" [0179.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0179.998] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="HKM314~2")) returned 1 [0179.998] wcscmp (_String1="HKm314-B5-V", _String2=".") returned 1 [0179.998] wcscmp (_String1="HKm314-B5-V", _String2="..") returned 1 [0179.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c018 [0179.998] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.998] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.998] wcscat (in: _Dest=0x682c018, _Source="HKm314-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" [0179.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0180.379] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="HKM471~1")) returned 1 [0182.287] wcscmp (_String1="HKm471-B5-H", _String2=".") returned 1 [0182.287] wcscmp (_String1="HKm471-B5-H", _String2="..") returned 1 [0182.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f270b8 [0182.287] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0182.287] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0182.287] wcscat (in: _Dest=0x3f270b8, _Source="HKm471-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" [0190.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0190.214] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="HKM471~2")) returned 1 [0190.214] wcscmp (_String1="HKm471-B5-V", _String2=".") returned 1 [0190.214] wcscmp (_String1="HKm471-B5-V", _String2="..") returned 1 [0190.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cab8 [0190.214] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.214] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.214] wcscat (in: _Dest=0x682cab8, _Source="HKm471-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" [0190.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0190.216] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="HKSCS-~1")) returned 1 [0190.216] wcscmp (_String1="HKscs-B5-H", _String2=".") returned 1 [0190.216] wcscmp (_String1="HKscs-B5-H", _String2="..") returned 1 [0190.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10270 [0190.216] wcscpy (in: _Dest=0x3e10270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.216] wcscat (in: _Dest=0x3e10270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.216] wcscat (in: _Dest=0x3e10270, _Source="HKscs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" [0190.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0190.218] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="HKSCS-~2")) returned 1 [0190.218] wcscmp (_String1="HKscs-B5-V", _String2=".") returned 1 [0190.218] wcscmp (_String1="HKscs-B5-V", _String2="..") returned 1 [0190.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0fb70 [0190.218] wcscpy (in: _Dest=0x3e0fb70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.218] wcscat (in: _Dest=0x3e0fb70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.218] wcscat (in: _Dest=0x3e0fb70, _Source="HKscs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" [0190.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fb70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0190.219] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0190.219] wcscmp (_String1="Identity-H", _String2=".") returned 1 [0190.219] wcscmp (_String1="Identity-H", _String2="..") returned 1 [0190.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f7f0 [0190.219] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.219] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.219] wcscat (in: _Dest=0x3e0f7f0, _Source="Identity-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" [0190.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0190.220] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0190.220] wcscmp (_String1="Identity-V", _String2=".") returned 1 [0190.220] wcscmp (_String1="Identity-V", _String2="..") returned 1 [0190.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10bf0 [0190.220] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.220] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.220] wcscat (in: _Dest=0x3e10bf0, _Source="Identity-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" [0190.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0190.222] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3047, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-H", cAlternateFileName="KSC-EU~1")) returned 1 [0190.222] wcscmp (_String1="KSC-EUC-H", _String2=".") returned 1 [0190.222] wcscmp (_String1="KSC-EUC-H", _String2="..") returned 1 [0190.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f370 [0190.222] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.222] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.222] wcscat (in: _Dest=0x3e0f370, _Source="KSC-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" [0190.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0190.223] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-V", cAlternateFileName="KSC-EU~2")) returned 1 [0190.223] wcscmp (_String1="KSC-EUC-V", _String2=".") returned 1 [0190.223] wcscmp (_String1="KSC-EUC-V", _String2="..") returned 1 [0190.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f470 [0190.223] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.223] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.223] wcscat (in: _Dest=0x3e0f470, _Source="KSC-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" [0190.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0190.225] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4191, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-H", cAlternateFileName="KSCMS-~1")) returned 1 [0190.225] wcscmp (_String1="KSCms-UHC-H", _String2=".") returned 1 [0190.225] wcscmp (_String1="KSCms-UHC-H", _String2="..") returned 1 [0190.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d558 [0190.225] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.225] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.225] wcscat (in: _Dest=0x682d558, _Source="KSCms-UHC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" [0190.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0190.226] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-H", cAlternateFileName="KSCMS-~2")) returned 1 [0190.226] wcscmp (_String1="KSCms-UHC-HW-H", _String2=".") returned 1 [0190.226] wcscmp (_String1="KSCms-UHC-HW-H", _String2="..") returned 1 [0190.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d5e0 [0190.226] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.226] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.226] wcscat (in: _Dest=0x682d5e0, _Source="KSCms-UHC-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" [0190.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0190.228] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-V", cAlternateFileName="KSCMS-~3")) returned 1 [0190.228] wcscmp (_String1="KSCms-UHC-HW-V", _String2=".") returned 1 [0190.228] wcscmp (_String1="KSCms-UHC-HW-V", _String2="..") returned 1 [0190.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d668 [0190.228] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.228] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.228] wcscat (in: _Dest=0x682d668, _Source="KSCms-UHC-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" [0190.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0190.229] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e597, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-UCS2", cAlternateFileName="KSCMS-~4")) returned 1 [0190.229] wcscmp (_String1="KSCms-UHC-UCS2", _String2=".") returned 1 [0190.230] wcscmp (_String1="KSCms-UHC-UCS2", _String2="..") returned 1 [0190.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d6f0 [0190.230] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.230] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.230] wcscat (in: _Dest=0x682d6f0, _Source="KSCms-UHC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" [0190.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0190.231] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-V", cAlternateFileName="KS3FF3~1")) returned 1 [0190.231] wcscmp (_String1="KSCms-UHC-V", _String2=".") returned 1 [0190.231] wcscmp (_String1="KSCms-UHC-V", _String2="..") returned 1 [0190.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d778 [0190.231] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.231] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.231] wcscat (in: _Dest=0x682d778, _Source="KSCms-UHC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" [0190.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0190.232] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-H", cAlternateFileName="KSCPC-~1")) returned 1 [0190.232] wcscmp (_String1="KSCpc-EUC-H", _String2=".") returned 1 [0190.233] wcscmp (_String1="KSCpc-EUC-H", _String2="..") returned 1 [0190.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d800 [0190.233] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.233] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.233] wcscat (in: _Dest=0x682d800, _Source="KSCpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" [0190.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0190.234] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2", cAlternateFileName="KSCPC-~2")) returned 1 [0190.234] wcscmp (_String1="KSCpc-EUC-UCS2", _String2=".") returned 1 [0190.234] wcscmp (_String1="KSCpc-EUC-UCS2", _String2="..") returned 1 [0190.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d888 [0190.234] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.234] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.234] wcscat (in: _Dest=0x682d888, _Source="KSCpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" [0190.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0190.235] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26499, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2C", cAlternateFileName="KSCPC-~3")) returned 1 [0190.235] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2=".") returned 1 [0190.235] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2="..") returned 1 [0190.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc168 [0190.236] wcscpy (in: _Dest=0x66dc168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.236] wcscat (in: _Dest=0x66dc168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.236] wcscat (in: _Dest=0x66dc168, _Source="KSCpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" [0190.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0190.237] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90ms-RKSJ", cAlternateFileName="UCS2-9~1")) returned 1 [0190.237] wcscmp (_String1="UCS2-90ms-RKSJ", _String2=".") returned 1 [0190.237] wcscmp (_String1="UCS2-90ms-RKSJ", _String2="..") returned 1 [0190.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682da20 [0190.237] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.237] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.237] wcscat (in: _Dest=0x682da20, _Source="UCS2-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" [0190.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0190.238] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24373, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90pv-RKSJ", cAlternateFileName="UCS2-9~2")) returned 1 [0190.238] wcscmp (_String1="UCS2-90pv-RKSJ", _String2=".") returned 1 [0190.238] wcscmp (_String1="UCS2-90pv-RKSJ", _String2="..") returned 1 [0190.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682daa8 [0190.239] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.239] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.239] wcscat (in: _Dest=0x682daa8, _Source="UCS2-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" [0190.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0190.240] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45903, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-B5pc", cAlternateFileName="UCS2-B~1")) returned 1 [0190.240] wcscmp (_String1="UCS2-B5pc", _String2=".") returned 1 [0190.240] wcscmp (_String1="UCS2-B5pc", _String2="..") returned 1 [0190.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e102f0 [0190.240] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.240] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.240] wcscat (in: _Dest=0x3e102f0, _Source="UCS2-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" [0190.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0190.242] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49113, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-ETen-B5", cAlternateFileName="UCS2-E~1")) returned 1 [0190.242] wcscmp (_String1="UCS2-ETen-B5", _String2=".") returned 1 [0190.242] wcscmp (_String1="UCS2-ETen-B5", _String2="..") returned 1 [0190.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bf90 [0190.242] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.242] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.242] wcscat (in: _Dest=0x682bf90, _Source="UCS2-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" [0190.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0190.243] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBK-EUC", cAlternateFileName="UCS2-G~1")) returned 1 [0190.243] wcscmp (_String1="UCS2-GBK-EUC", _String2=".") returned 1 [0190.243] wcscmp (_String1="UCS2-GBK-EUC", _String2="..") returned 1 [0190.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c0a0 [0190.243] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.243] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.243] wcscat (in: _Dest=0x682c0a0, _Source="UCS2-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" [0190.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0190.245] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3022b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBpc-EUC", cAlternateFileName="UCS2-G~2")) returned 1 [0190.245] wcscmp (_String1="UCS2-GBpc-EUC", _String2=".") returned 1 [0190.245] wcscmp (_String1="UCS2-GBpc-EUC", _String2="..") returned 1 [0190.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d338 [0190.245] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.245] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.245] wcscat (in: _Dest=0x682d338, _Source="UCS2-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" [0190.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0190.246] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ff61, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCms-UHC", cAlternateFileName="UCS2-K~2")) returned 1 [0190.246] wcscmp (_String1="UCS2-KSCms-UHC", _String2=".") returned 1 [0190.246] wcscmp (_String1="UCS2-KSCms-UHC", _String2="..") returned 1 [0190.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c3d0 [0190.246] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.246] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.246] wcscat (in: _Dest=0x682c3d0, _Source="UCS2-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" [0190.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0190.248] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25737, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCpc-EUC", cAlternateFileName="UCS2-K~1")) returned 1 [0190.248] wcscmp (_String1="UCS2-KSCpc-EUC", _String2=".") returned 1 [0190.248] wcscmp (_String1="UCS2-KSCpc-EUC", _String2="..") returned 1 [0190.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d998 [0190.248] wcscpy (in: _Dest=0x682d998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.248] wcscat (in: _Dest=0x682d998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.248] wcscat (in: _Dest=0x682d998, _Source="UCS2-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" [0190.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0190.249] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-H", cAlternateFileName="UNICNS~2")) returned 1 [0190.249] wcscmp (_String1="UniCNS-UCS2-H", _String2=".") returned 1 [0190.249] wcscmp (_String1="UniCNS-UCS2-H", _String2="..") returned 1 [0190.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c700 [0190.249] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.249] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.250] wcscat (in: _Dest=0x682c700, _Source="UniCNS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" [0190.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0190.251] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-V", cAlternateFileName="UNICNS~1")) returned 1 [0190.251] wcscmp (_String1="UniCNS-UCS2-V", _String2=".") returned 1 [0190.251] wcscmp (_String1="UniCNS-UCS2-V", _String2="..") returned 1 [0190.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bd70 [0190.251] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.251] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.251] wcscat (in: _Dest=0x682bd70, _Source="UniCNS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" [0190.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0190.744] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x425e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-H", cAlternateFileName="UNICNS~4")) returned 1 [0190.744] wcscmp (_String1="UniCNS-UTF16-H", _String2=".") returned 1 [0190.744] wcscmp (_String1="UniCNS-UTF16-H", _String2="..") returned 1 [0190.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d008 [0190.745] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0190.745] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0190.745] wcscat (in: _Dest=0x682d008, _Source="UniCNS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" [0191.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0191.347] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc33, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-V", cAlternateFileName="UNICNS~3")) returned 1 [0191.347] wcscmp (_String1="UniCNS-UTF16-V", _String2=".") returned 1 [0191.347] wcscmp (_String1="UniCNS-UTF16-V", _String2="..") returned 1 [0191.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0191.347] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.347] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.347] wcscat (in: _Dest=0x682c9a8, _Source="UniCNS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" [0191.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0191.348] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x46805, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-H", cAlternateFileName="UNIGB-~2")) returned 1 [0191.348] wcscmp (_String1="UniGB-UCS2-H", _String2=".") returned 1 [0191.348] wcscmp (_String1="UniGB-UCS2-H", _String2="..") returned 1 [0191.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cf80 [0191.348] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.348] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.348] wcscat (in: _Dest=0x682cf80, _Source="UniGB-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" [0191.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0191.349] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-V", cAlternateFileName="UNIGB-~1")) returned 1 [0191.349] wcscmp (_String1="UniGB-UCS2-V", _String2=".") returned 1 [0191.349] wcscmp (_String1="UniGB-UCS2-V", _String2="..") returned 1 [0191.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c920 [0191.349] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.349] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.349] wcscat (in: _Dest=0x682c920, _Source="UniGB-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" [0191.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0191.350] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3453e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-H", cAlternateFileName="UNIGB-~4")) returned 1 [0191.350] wcscmp (_String1="UniGB-UTF16-H", _String2=".") returned 1 [0191.350] wcscmp (_String1="UniGB-UTF16-H", _String2="..") returned 1 [0191.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c678 [0191.350] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.350] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.351] wcscat (in: _Dest=0x682c678, _Source="UniGB-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" [0191.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0191.351] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-V", cAlternateFileName="UNIGB-~3")) returned 1 [0191.351] wcscmp (_String1="UniGB-UTF16-V", _String2=".") returned 1 [0191.352] wcscmp (_String1="UniGB-UTF16-V", _String2="..") returned 1 [0191.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cbc8 [0191.352] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.352] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.352] wcscat (in: _Dest=0x682cbc8, _Source="UniGB-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" [0191.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0191.353] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-H", cAlternateFileName="UNIJIS~1")) returned 1 [0191.353] wcscmp (_String1="UniJIS-UCS2-H", _String2=".") returned 1 [0191.353] wcscmp (_String1="UniJIS-UCS2-H", _String2="..") returned 1 [0191.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cb40 [0191.353] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.353] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.353] wcscat (in: _Dest=0x682cb40, _Source="UniJIS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" [0191.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0191.354] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-H", cAlternateFileName="UNIJIS~2")) returned 1 [0191.786] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2=".") returned 1 [0191.786] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2="..") returned 1 [0191.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db628 [0191.786] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0191.786] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0191.786] wcscat (in: _Dest=0x66db628, _Source="UniJIS-UCS2-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" [0194.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0194.899] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-V", cAlternateFileName="UNIJIS~3")) returned 1 [0194.899] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2=".") returned 1 [0194.899] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2="..") returned 1 [0194.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc168 [0194.899] wcscpy (in: _Dest=0x66dc168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.899] wcscat (in: _Dest=0x66dc168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.899] wcscat (in: _Dest=0x66dc168, _Source="UniJIS-UCS2-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" [0194.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0194.900] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-V", cAlternateFileName="UNIJIS~4")) returned 1 [0194.900] wcscmp (_String1="UniJIS-UCS2-V", _String2=".") returned 1 [0194.900] wcscmp (_String1="UniJIS-UCS2-V", _String2="..") returned 1 [0194.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f274f8 [0194.900] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.900] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.900] wcscat (in: _Dest=0x3f274f8, _Source="UniJIS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" [0194.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0194.901] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x315bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-H", cAlternateFileName="UN87E6~1")) returned 1 [0194.901] wcscmp (_String1="UniJIS-UTF16-H", _String2=".") returned 1 [0194.901] wcscmp (_String1="UniJIS-UTF16-H", _String2="..") returned 1 [0194.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26bf0 [0194.901] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.901] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.901] wcscat (in: _Dest=0x3f26bf0, _Source="UniJIS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" [0194.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0194.902] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-V", cAlternateFileName="UN275C~1")) returned 1 [0194.902] wcscmp (_String1="UniJIS-UTF16-V", _String2=".") returned 1 [0194.902] wcscmp (_String1="UniJIS-UTF16-V", _String2="..") returned 1 [0194.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26150 [0194.902] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.902] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.902] wcscat (in: _Dest=0x3f26150, _Source="UniJIS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" [0194.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0194.903] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-H", cAlternateFileName="UN288D~1")) returned 1 [0194.903] wcscmp (_String1="UniJIS2004-UTF16-H", _String2=".") returned 1 [0194.903] wcscmp (_String1="UniJIS2004-UTF16-H", _String2="..") returned 1 [0194.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc048 [0194.904] wcscpy (in: _Dest=0x66dc048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.904] wcscat (in: _Dest=0x66dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.904] wcscat (in: _Dest=0x66dc048, _Source="UniJIS2004-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" [0194.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0194.905] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-V", cAlternateFileName="UNC565~1")) returned 1 [0194.905] wcscmp (_String1="UniJIS2004-UTF16-V", _String2=".") returned 1 [0194.905] wcscmp (_String1="UniJIS2004-UTF16-V", _String2="..") returned 1 [0194.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dce58 [0194.905] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.905] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.905] wcscat (in: _Dest=0x66dce58, _Source="UniJIS2004-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" [0194.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0194.906] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-H", cAlternateFileName="UNIKS-~4")) returned 1 [0194.906] wcscmp (_String1="UniKS-UCS2-H", _String2=".") returned 1 [0194.906] wcscmp (_String1="UniKS-UCS2-H", _String2="..") returned 1 [0194.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26b68 [0194.906] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.906] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.906] wcscat (in: _Dest=0x3f26b68, _Source="UniKS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" [0194.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0194.907] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-V", cAlternateFileName="UNIKS-~3")) returned 1 [0194.907] wcscmp (_String1="UniKS-UCS2-V", _String2=".") returned 1 [0194.907] wcscmp (_String1="UniKS-UCS2-V", _String2="..") returned 1 [0194.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27938 [0194.907] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.907] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.907] wcscat (in: _Dest=0x3f27938, _Source="UniKS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" [0194.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0194.908] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-H", cAlternateFileName="UNIKS-~2")) returned 1 [0194.908] wcscmp (_String1="UniKS-UTF16-H", _String2=".") returned 1 [0194.908] wcscmp (_String1="UniKS-UTF16-H", _String2="..") returned 1 [0194.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27718 [0194.908] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.908] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.908] wcscat (in: _Dest=0x3f27718, _Source="UniKS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" [0194.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0194.909] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-V", cAlternateFileName="UNIKS-~1")) returned 1 [0194.910] wcscmp (_String1="UniKS-UTF16-V", _String2=".") returned 1 [0194.910] wcscmp (_String1="UniKS-UTF16-V", _String2="..") returned 1 [0194.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27690 [0194.910] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.910] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.910] wcscat (in: _Dest=0x3f27690, _Source="UniKS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" [0194.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0194.911] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 1 [0194.911] wcscmp (_String1="V", _String2=".") returned 1 [0194.911] wcscmp (_String1="V", _String2="..") returned 1 [0194.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29e20 [0194.911] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0194.911] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0194.911] wcscat (in: _Dest=0x3f29e20, _Source="V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" [0194.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0194.912] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 0 [0194.912] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0194.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0194.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f295d0) returned 1 [0194.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ca0) returned 1 Thread: id = 2163 os_tid = 0x10c0 [0154.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 0x20 [0154.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0154.296] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.303] GetLastError () returned 0x5 [0154.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0154.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2164 os_tid = 0x10c4 [0154.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 0x20 [0156.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0156.082] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.082] GetLastError () returned 0x5 [0156.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0156.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 2165 os_tid = 0x1178 [0154.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 0x20 [0156.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0156.084] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.084] GetLastError () returned 0x5 [0156.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0156.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 2166 os_tid = 0x117c [0154.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 0x20 [0155.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0155.440] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.440] GetLastError () returned 0x5 [0155.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0155.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 2167 os_tid = 0x1228 [0154.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 0x20 [0156.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0156.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.108] GetLastError () returned 0x5 [0156.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0156.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 Thread: id = 2168 os_tid = 0x122c [0154.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29b10 [0154.314] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0154.314] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0154.314] wcscat (in: _Dest=0x3f29b10, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*" [0154.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0154.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0156.484] wcscmp (_String1=".", _String2=".") returned 0 [0156.484] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.813] wcscmp (_String1="..", _String2=".") returned 1 [0157.813] wcscmp (_String1="..", _String2="..") returned 0 [0157.813] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="ADOBEA~2.OTF")) returned 1 [0157.813] wcscmp (_String1="AdobeArabic-Bold.otf", _String2=".") returned 1 [0157.813] wcscmp (_String1="AdobeArabic-Bold.otf", _String2="..") returned 1 [0157.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2798 [0157.813] wcscpy (in: _Dest=0x69c2798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0157.813] wcscat (in: _Dest=0x69c2798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0157.813] wcscat (in: _Dest=0x69c2798, _Source="AdobeArabic-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" [0161.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0161.486] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-BoldItalic.otf", cAlternateFileName="ADOBEA~3.OTF")) returned 1 [0161.486] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2=".") returned 1 [0161.487] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2="..") returned 1 [0161.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfec8 [0161.487] wcscpy (in: _Dest=0x69bfec8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.487] wcscat (in: _Dest=0x69bfec8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.487] wcscat (in: _Dest=0x69bfec8, _Source="AdobeArabic-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" [0161.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0161.488] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3dce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Italic.otf", cAlternateFileName="ADOBEA~1.OTF")) returned 1 [0161.488] wcscmp (_String1="AdobeArabic-Italic.otf", _String2=".") returned 1 [0161.488] wcscmp (_String1="AdobeArabic-Italic.otf", _String2="..") returned 1 [0161.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31060 [0161.488] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.488] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.488] wcscat (in: _Dest=0x3e31060, _Source="AdobeArabic-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" [0161.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0161.489] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Regular.otf", cAlternateFileName="ADOBEA~4.OTF")) returned 1 [0161.489] wcscmp (_String1="AdobeArabic-Regular.otf", _String2=".") returned 1 [0161.489] wcscmp (_String1="AdobeArabic-Regular.otf", _String2="..") returned 1 [0161.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0be8 [0161.490] wcscpy (in: _Dest=0x69c0be8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.490] wcscat (in: _Dest=0x69c0be8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.490] wcscat (in: _Dest=0x69c0be8, _Source="AdobeArabic-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" [0161.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0161.491] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Bold.otf", cAlternateFileName="ADOBEH~4.OTF")) returned 1 [0161.491] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2=".") returned 1 [0161.491] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2="..") returned 1 [0161.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0161.491] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.491] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.491] wcscat (in: _Dest=0x3e322c8, _Source="AdobeHebrew-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" [0161.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0161.492] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-BoldItalic.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0161.492] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2=".") returned 1 [0161.492] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2="..") returned 1 [0161.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0508 [0161.492] wcscpy (in: _Dest=0x69c0508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.492] wcscat (in: _Dest=0x69c0508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.493] wcscat (in: _Dest=0x69c0508, _Source="AdobeHebrew-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" [0161.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0161.498] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Italic.otf", cAlternateFileName="ADOBEH~2.OTF")) returned 1 [0161.498] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2=".") returned 1 [0161.498] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2="..") returned 1 [0161.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30e00 [0161.498] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.498] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.498] wcscat (in: _Dest=0x3e30e00, _Source="AdobeHebrew-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" [0161.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0161.500] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Regular.otf", cAlternateFileName="ADOBEH~3.OTF")) returned 1 [0161.500] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2=".") returned 1 [0161.500] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2="..") returned 1 [0161.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0968 [0161.500] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.500] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.500] wcscat (in: _Dest=0x69c0968, _Source="AdobeHebrew-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" [0161.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0161.509] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0161.509] wcscmp (_String1="AdobePiStd.otf", _String2=".") returned 1 [0161.509] wcscmp (_String1="AdobePiStd.otf", _String2="..") returned 1 [0161.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef510 [0161.509] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.509] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.509] wcscat (in: _Dest=0x66ef510, _Source="AdobePiStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" [0161.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0161.510] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Bold.otf", cAlternateFileName="ADOBET~1.OTF")) returned 1 [0161.510] wcscmp (_String1="AdobeThai-Bold.otf", _String2=".") returned 1 [0161.510] wcscmp (_String1="AdobeThai-Bold.otf", _String2="..") returned 1 [0161.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cbd8 [0161.510] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.510] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.510] wcscat (in: _Dest=0x674cbd8, _Source="AdobeThai-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" [0161.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0161.512] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-BoldItalic.otf", cAlternateFileName="ADOBET~3.OTF")) returned 1 [0161.512] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2=".") returned 1 [0161.512] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2="..") returned 1 [0161.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c06e8 [0161.512] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.512] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.512] wcscat (in: _Dest=0x69c06e8, _Source="AdobeThai-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" [0161.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0161.513] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Italic.otf", cAlternateFileName="ADOBET~4.OTF")) returned 1 [0161.513] wcscmp (_String1="AdobeThai-Italic.otf", _String2=".") returned 1 [0161.513] wcscmp (_String1="AdobeThai-Italic.otf", _String2="..") returned 1 [0161.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30810 [0161.513] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.513] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.513] wcscat (in: _Dest=0x3e30810, _Source="AdobeThai-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" [0161.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0161.515] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10530, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Regular.otf", cAlternateFileName="ADOBET~2.OTF")) returned 1 [0161.515] wcscmp (_String1="AdobeThai-Regular.otf", _String2=".") returned 1 [0161.515] wcscmp (_String1="AdobeThai-Regular.otf", _String2="..") returned 1 [0161.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31a78 [0161.515] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.515] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.515] wcscat (in: _Dest=0x3e31a78, _Source="AdobeThai-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" [0161.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0161.516] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0161.516] wcscmp (_String1="CourierStd-Bold.otf", _String2=".") returned 1 [0161.517] wcscmp (_String1="CourierStd-Bold.otf", _String2="..") returned 1 [0161.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e305b0 [0161.517] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.517] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.517] wcscat (in: _Dest=0x3e305b0, _Source="CourierStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" [0161.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0161.518] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x90dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0161.518] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2=".") returned 1 [0161.518] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2="..") returned 1 [0161.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0148 [0161.518] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.518] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.518] wcscat (in: _Dest=0x69c0148, _Source="CourierStd-BoldOblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" [0161.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0161.519] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9238, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0161.519] wcscmp (_String1="CourierStd-Oblique.otf", _String2=".") returned 1 [0161.519] wcscmp (_String1="CourierStd-Oblique.otf", _String2="..") returned 1 [0161.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30648 [0161.520] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.520] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.520] wcscat (in: _Dest=0x3e30648, _Source="CourierStd-Oblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" [0161.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0161.521] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0161.521] wcscmp (_String1="CourierStd.otf", _String2=".") returned 1 [0161.521] wcscmp (_String1="CourierStd.otf", _String2="..") returned 1 [0161.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0161.521] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.521] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.521] wcscat (in: _Dest=0x682d1a0, _Source="CourierStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" [0161.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0161.522] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0161.522] wcscmp (_String1="MinionPro-Bold.otf", _String2=".") returned 1 [0161.522] wcscmp (_String1="MinionPro-Bold.otf", _String2="..") returned 1 [0161.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674da78 [0161.522] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.522] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.522] wcscat (in: _Dest=0x674da78, _Source="MinionPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" [0161.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0161.523] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0161.524] wcscmp (_String1="MinionPro-BoldIt.otf", _String2=".") returned 1 [0161.524] wcscmp (_String1="MinionPro-BoldIt.otf", _String2="..") returned 1 [0161.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30cd0 [0161.524] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.524] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.524] wcscat (in: _Dest=0x3e30cd0, _Source="MinionPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" [0161.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0161.525] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x436ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0161.525] wcscmp (_String1="MinionPro-It.otf", _String2=".") returned 1 [0161.525] wcscmp (_String1="MinionPro-It.otf", _String2="..") returned 1 [0161.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d3b8 [0161.525] wcscpy (in: _Dest=0x674d3b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.525] wcscat (in: _Dest=0x674d3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.525] wcscat (in: _Dest=0x674d3b8, _Source="MinionPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" [0161.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0161.526] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0161.526] wcscmp (_String1="MinionPro-Regular.otf", _String2=".") returned 1 [0161.526] wcscmp (_String1="MinionPro-Regular.otf", _String2="..") returned 1 [0161.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31650 [0161.526] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.527] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.527] wcscat (in: _Dest=0x3e31650, _Source="MinionPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" [0161.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0161.528] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x175c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0161.528] wcscmp (_String1="MyriadPro-Bold.otf", _String2=".") returned 1 [0161.528] wcscmp (_String1="MyriadPro-Bold.otf", _String2="..") returned 1 [0161.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d9e8 [0161.528] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.528] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.528] wcscat (in: _Dest=0x674d9e8, _Source="MyriadPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" [0161.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0161.529] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1879c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0161.529] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2=".") returned 1 [0161.529] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2="..") returned 1 [0161.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32068 [0161.529] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.529] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.529] wcscat (in: _Dest=0x3e32068, _Source="MyriadPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" [0161.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0161.530] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0161.530] wcscmp (_String1="MyriadPro-It.otf", _String2=".") returned 1 [0161.531] wcscmp (_String1="MyriadPro-It.otf", _String2="..") returned 1 [0161.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d4d8 [0161.531] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.531] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.531] wcscat (in: _Dest=0x674d4d8, _Source="MyriadPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" [0161.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0161.532] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17098, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0161.532] wcscmp (_String1="MyriadPro-Regular.otf", _String2=".") returned 1 [0161.533] wcscmp (_String1="MyriadPro-Regular.otf", _String2="..") returned 1 [0161.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31358 [0161.533] wcscpy (in: _Dest=0x3e31358, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.533] wcscat (in: _Dest=0x3e31358, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.533] wcscat (in: _Dest=0x3e31358, _Source="MyriadPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" [0161.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0161.534] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0161.534] wcscmp (_String1="PFM", _String2=".") returned 1 [0161.534] wcscmp (_String1="PFM", _String2="..") returned 1 [0161.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51368 [0161.534] wcscpy (in: _Dest=0x3d51368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.535] wcscat (in: _Dest=0x3d51368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.535] wcscat (in: _Dest=0x3d51368, _Source="PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0161.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d51368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0161.536] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0161.536] wcscmp (_String1="SY______.PFB", _String2=".") returned 1 [0161.536] wcscmp (_String1="SY______.PFB", _String2="..") returned 1 [0161.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d228 [0161.536] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.536] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.536] wcscat (in: _Dest=0x682d228, _Source="SY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" [0161.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0161.537] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0161.537] wcscmp (_String1="ZX______.PFB", _String2=".") returned 1 [0161.537] wcscmp (_String1="ZX______.PFB", _String2="..") returned 1 [0161.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d2b0 [0161.537] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0161.537] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0161.537] wcscat (in: _Dest=0x682d2b0, _Source="ZX______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" [0161.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0162.347] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0162.347] wcscmp (_String1="ZY______.PFB", _String2=".") returned 1 [0162.347] wcscmp (_String1="ZY______.PFB", _String2="..") returned 1 [0162.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef0d0 [0162.347] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0162.347] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0162.347] wcscat (in: _Dest=0x66ef0d0, _Source="ZY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" [0169.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0169.016] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0169.016] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0169.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0169.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 [0169.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f235a0) returned 1 Thread: id = 2169 os_tid = 0x127c [0154.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b0b8 [0154.315] wcscpy (in: _Dest=0x674b0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0154.315] wcscat (in: _Dest=0x674b0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0154.315] wcscat (in: _Dest=0x674b0b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*" [0154.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0154.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0156.110] wcscmp (_String1=".", _String2=".") returned 0 [0156.110] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.110] wcscmp (_String1="..", _String2=".") returned 1 [0156.110] wcscmp (_String1="..", _String2="..") returned 0 [0156.110] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1 [0156.110] wcscmp (_String1="LanguageNames2", _String2=".") returned 1 [0156.110] wcscmp (_String1="LanguageNames2", _String2="..") returned 1 [0156.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30d68 [0156.110] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0156.110] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0156.110] wcscat (in: _Dest=0x3e30d68, _Source="LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0156.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0156.661] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1 [0156.661] wcscmp (_String1="Providers", _String2=".") returned 1 [0156.661] wcscmp (_String1="Providers", _String2="..") returned 1 [0156.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e528 [0156.661] wcscpy (in: _Dest=0x674e528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0156.661] wcscat (in: _Dest=0x674e528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0156.661] wcscat (in: _Dest=0x674e528, _Source="Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0156.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0156.663] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0 [0156.663] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0156.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0156.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b0b8) returned 1 [0156.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 Thread: id = 2170 os_tid = 0x1280 [0154.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0ba0 [0154.315] wcscpy (in: _Dest=0x66d0ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0154.315] wcscat (in: _Dest=0x66d0ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0154.315] wcscat (in: _Dest=0x66d0ba0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*" [0154.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0154.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e808f8 [0155.485] wcscmp (_String1=".", _String2=".") returned 0 [0155.485] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.485] wcscmp (_String1="..", _String2=".") returned 1 [0155.485] wcscmp (_String1="..", _String2="..") returned 0 [0155.486] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0155.486] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2=".") returned 1 [0155.486] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2="..") returned 1 [0155.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b5b8 [0155.486] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0155.486] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0155.486] wcscat (in: _Dest=0x35b5b8, _Source="SaslPrepProfile_norm_bidi.spp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" [0155.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0155.631] FindNextFileW (in: hFindFile=0x3e808f8, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0 [0155.631] FindClose (in: hFindFile=0x3e808f8 | out: hFindFile=0x3e808f8) returned 1 [0155.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0155.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0155.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 Thread: id = 2171 os_tid = 0xc30 [0154.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674b138 [0154.317] wcscpy (in: _Dest=0x674b138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0154.317] wcscat (in: _Dest=0x674b138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0154.317] wcscat (in: _Dest=0x674b138, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*" [0154.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0154.317] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0156.102] wcscmp (_String1=".", _String2=".") returned 0 [0156.102] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.102] wcscmp (_String1="..", _String2=".") returned 1 [0156.102] wcscmp (_String1="..", _String2="..") returned 0 [0156.102] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0156.102] wcscmp (_String1="Unicode", _String2=".") returned 1 [0156.102] wcscmp (_String1="Unicode", _String2="..") returned 1 [0156.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0156.102] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0156.102] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0156.102] wcscat (in: _Dest=0x3f27580, _Source="Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0156.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0156.659] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0156.659] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0156.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0156.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b138) returned 1 [0156.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 Thread: id = 2172 os_tid = 0xaf4 [0154.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0240 [0154.318] wcscpy (in: _Dest=0x66d0240, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0154.318] wcscat (in: _Dest=0x66d0240, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0154.318] wcscat (in: _Dest=0x66d0240, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*" [0154.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0154.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0154.318] wcscmp (_String1=".", _String2=".") returned 0 [0154.318] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.318] wcscmp (_String1="..", _String2=".") returned 1 [0154.318] wcscmp (_String1="..", _String2="..") returned 0 [0154.318] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0154.318] wcscmp (_String1="en-US", _String2=".") returned 1 [0154.318] wcscmp (_String1="en-US", _String2="..") returned 1 [0154.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b1b8 [0154.318] wcscpy (in: _Dest=0x674b1b8, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0154.318] wcscat (in: _Dest=0x674b1b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0154.318] wcscat (in: _Dest=0x674b1b8, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0156.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0156.263] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0156.263] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0156.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0156.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0156.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 2173 os_tid = 0x934 [0154.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0288 [0154.319] wcscpy (in: _Dest=0x69c0288, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0154.319] wcscat (in: _Dest=0x69c0288, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0154.319] wcscat (in: _Dest=0x69c0288, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0154.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0154.319] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0154.320] wcscmp (_String1=".", _String2=".") returned 0 [0154.320] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.320] wcscmp (_String1="..", _String2=".") returned 1 [0154.320] wcscmp (_String1="..", _String2="..") returned 0 [0154.320] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.320] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0154.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0154.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0288) returned 1 [0154.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 2174 os_tid = 0x1468 [0154.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3ef73e8 [0154.325] wcscpy (in: _Dest=0x3ef73e8, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0154.325] wcscat (in: _Dest=0x3ef73e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0154.326] wcscat (in: _Dest=0x3ef73e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*" [0154.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0154.326] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0154.326] wcscmp (_String1=".", _String2=".") returned 0 [0154.326] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.326] wcscmp (_String1="..", _String2=".") returned 1 [0154.326] wcscmp (_String1="..", _String2="..") returned 0 [0154.326] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0154.326] wcscmp (_String1="Profiles", _String2=".") returned 1 [0154.326] wcscmp (_String1="Profiles", _String2="..") returned 1 [0154.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e960 [0154.326] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0154.326] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0154.327] wcscat (in: _Dest=0x3d8e960, _Source="Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0156.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0156.265] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0156.265] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0156.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0156.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef73e8) returned 1 [0156.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5228) returned 1 Thread: id = 2175 os_tid = 0x146c [0154.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0154.327] wcscpy (in: _Dest=0x3f29020, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0154.327] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0154.327] wcscat (in: _Dest=0x3f29020, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0154.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0154.327] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0154.328] wcscmp (_String1=".", _String2=".") returned 0 [0154.328] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.328] wcscmp (_String1="..", _String2=".") returned 1 [0154.328] wcscmp (_String1="..", _String2="..") returned 0 [0154.328] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.328] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0154.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0154.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0154.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 Thread: id = 2176 os_tid = 0x1474 [0154.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d238 [0154.330] wcscpy (in: _Dest=0x3d8d238, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0154.330] wcscat (in: _Dest=0x3d8d238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0154.330] wcscat (in: _Dest=0x3d8d238, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0154.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0154.330] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0154.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0154.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d238) returned 1 [0154.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e008) returned 1 Thread: id = 2177 os_tid = 0x14b4 [0154.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini")) returned 0x20 [0154.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.332] GetLastError () returned 0x5 [0154.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0154.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 2178 os_tid = 0x14b8 [0154.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 0x20 [0154.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0154.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.334] GetLastError () returned 0x5 [0154.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0154.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 Thread: id = 2179 os_tid = 0x14bc [0154.336] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0154.339] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.350] GetLastError () returned 0x5 [0154.350] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 Thread: id = 2180 os_tid = 0x14c0 [0154.355] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0154.359] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.369] GetLastError () returned 0x5 [0154.369] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 2181 os_tid = 0x14c4 [0154.375] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0154.378] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.389] GetLastError () returned 0x5 [0154.389] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 2182 os_tid = 0x14c8 [0154.396] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0154.400] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.411] GetLastError () returned 0x5 [0154.411] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 2183 os_tid = 0x14cc [0154.417] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0154.421] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.424] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.431] GetLastError () returned 0x5 [0154.431] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 2184 os_tid = 0x14d8 [0154.436] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0154.440] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.452] GetLastError () returned 0x5 [0154.452] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 2185 os_tid = 0x10dc [0154.457] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0154.461] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.464] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.471] GetLastError () returned 0x5 [0154.471] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 2186 os_tid = 0x14dc [0154.476] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0154.480] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.484] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.491] GetLastError () returned 0x5 [0154.491] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958960) returned 1 Thread: id = 2187 os_tid = 0x14e0 [0154.500] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0154.504] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.514] GetLastError () returned 0x5 [0154.514] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 2188 os_tid = 0x14e8 [0154.520] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0154.523] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.527] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.534] GetLastError () returned 0x5 [0154.534] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 2189 os_tid = 0xec4 [0154.539] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0154.543] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.547] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.554] GetLastError () returned 0x5 [0154.554] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 2190 os_tid = 0x1200 [0154.560] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0154.563] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.567] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.574] GetLastError () returned 0x5 [0154.574] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 2191 os_tid = 0x1210 [0154.580] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0154.584] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.587] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.595] GetLastError () returned 0x5 [0154.595] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958700) returned 1 Thread: id = 2192 os_tid = 0x1214 [0154.600] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0154.603] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.607] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.614] GetLastError () returned 0x5 [0154.614] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 2193 os_tid = 0x1218 [0154.619] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0154.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.761] GetLastError () returned 0x5 [0155.761] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 2194 os_tid = 0x121c [0154.648] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0154.652] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.656] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.771] GetLastError () returned 0x5 [0155.771] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 2195 os_tid = 0x1220 [0154.656] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0154.660] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.663] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.781] GetLastError () returned 0x5 [0155.781] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 Thread: id = 2196 os_tid = 0x1284 [0154.665] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0154.669] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.672] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.791] GetLastError () returned 0x5 [0155.791] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 2197 os_tid = 0x1288 [0154.675] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0154.679] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.683] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.690] GetLastError () returned 0x5 [0154.690] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 2198 os_tid = 0x128c [0154.691] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0154.695] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.698] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.930] GetLastError () returned 0x5 [0155.931] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 2199 os_tid = 0x1290 [0154.703] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0154.706] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.710] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.942] GetLastError () returned 0x5 [0155.942] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 2200 os_tid = 0x1298 [0154.711] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0154.714] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.718] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.952] GetLastError () returned 0x5 [0155.952] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 2201 os_tid = 0x129c [0154.719] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0154.723] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.726] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.962] GetLastError () returned 0x5 [0155.962] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 2202 os_tid = 0x12a0 [0154.727] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0154.730] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.734] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.975] GetLastError () returned 0x5 [0155.975] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 2203 os_tid = 0x12a4 [0154.734] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0154.738] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.741] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.985] GetLastError () returned 0x5 [0155.985] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 Thread: id = 2204 os_tid = 0x12a8 [0154.742] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0154.745] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0154.749] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.009] GetLastError () returned 0x5 [0156.009] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0156.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 2205 os_tid = 0x12ac [0154.753] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0154.757] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.760] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.019] GetLastError () returned 0x5 [0156.019] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0156.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 2206 os_tid = 0x12b0 [0154.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d7a8 [0154.761] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0154.761] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0154.761] wcscat (in: _Dest=0x674d7a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*" [0154.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0154.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0154.763] wcscmp (_String1=".", _String2=".") returned 0 [0154.763] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.763] wcscmp (_String1="..", _String2=".") returned 1 [0154.763] wcscmp (_String1="..", _String2="..") returned 0 [0154.764] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0154.764] wcscmp (_String1="groove.net", _String2=".") returned 1 [0154.764] wcscmp (_String1="groove.net", _String2="..") returned 1 [0154.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dfd0 [0154.764] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0154.764] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0154.764] wcscat (in: _Dest=0x3e0dfd0, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0156.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0156.267] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0156.267] wcscmp (_String1="Verisign", _String2=".") returned 1 [0156.267] wcscmp (_String1="Verisign", _String2="..") returned 1 [0156.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c2110 [0156.267] wcscpy (in: _Dest=0x69c2110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0156.267] wcscat (in: _Dest=0x69c2110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0156.267] wcscat (in: _Dest=0x69c2110, _Source="Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0156.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0156.268] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0156.268] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0156.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0156.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 [0156.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 2207 os_tid = 0x12b4 [0154.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b238 [0154.765] wcscpy (in: _Dest=0x674b238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0154.765] wcscat (in: _Dest=0x674b238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0154.765] wcscat (in: _Dest=0x674b238, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*" [0154.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0154.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0156.375] wcscmp (_String1=".", _String2=".") returned 0 [0156.375] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.375] wcscmp (_String1="..", _String2=".") returned 1 [0156.375] wcscmp (_String1="..", _String2="..") returned 0 [0156.375] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0156.375] wcscmp (_String1="People", _String2=".") returned 1 [0156.376] wcscmp (_String1="People", _String2="..") returned 1 [0156.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0156.376] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0156.376] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0156.376] wcscat (in: _Dest=0x3f26e10, _Source="People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0160.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0160.649] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0160.649] wcscmp (_String1="Places", _String2=".") returned 1 [0160.649] wcscmp (_String1="Places", _String2="..") returned 1 [0160.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eeeb0 [0160.649] wcscpy (in: _Dest=0x66eeeb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0160.649] wcscat (in: _Dest=0x66eeeb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0160.649] wcscat (in: _Dest=0x66eeeb0, _Source="Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0160.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eeeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0160.650] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0160.650] wcscmp (_String1="Things", _String2=".") returned 1 [0160.650] wcscmp (_String1="Things", _String2="..") returned 1 [0160.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c700 [0160.650] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0160.650] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0160.651] wcscat (in: _Dest=0x682c700, _Source="Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0160.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0160.652] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0160.652] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0160.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0160.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b238) returned 1 [0160.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674adb8) returned 1 Thread: id = 2208 os_tid = 0x12b8 [0154.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee740 [0154.766] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.766] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.766] wcscat (in: _Dest=0x66ee740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*" [0154.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0154.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0158.180] wcscmp (_String1=".", _String2=".") returned 0 [0158.180] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.947] wcscmp (_String1="..", _String2=".") returned 1 [0160.947] wcscmp (_String1="..", _String2="..") returned 0 [0160.947] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0160.947] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0160.947] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0160.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7cd0 [0160.948] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0160.948] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0160.948] wcscat (in: _Dest=0x2ff7cd0, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" [0162.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0162.658] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0162.658] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0162.658] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0162.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0162.658] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.658] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.658] wcscat (in: _Dest=0x332da8, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" [0162.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0162.659] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="CHESSI~1.BMP")) returned 1 [0162.659] wcscmp (_String1="ChessIconImages.bmp", _String2=".") returned 1 [0162.659] wcscmp (_String1="ChessIconImages.bmp", _String2="..") returned 1 [0162.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d928 [0162.659] wcscpy (in: _Dest=0x3e5d928, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.660] wcscat (in: _Dest=0x3e5d928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.660] wcscat (in: _Dest=0x3e5d928, _Source="ChessIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" [0162.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0162.661] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="CHESSI~2.BMP")) returned 1 [0162.661] wcscmp (_String1="ChessIconImagesMask.bmp", _String2=".") returned 1 [0162.661] wcscmp (_String1="ChessIconImagesMask.bmp", _String2="..") returned 1 [0162.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0162.661] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.661] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.661] wcscat (in: _Dest=0x35c588, _Source="ChessIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" [0162.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0162.662] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="CREATE~1.JPG")) returned 1 [0162.662] wcscmp (_String1="CreateSpaceImage.jpg", _String2=".") returned 1 [0162.662] wcscmp (_String1="CreateSpaceImage.jpg", _String2="..") returned 1 [0162.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d148 [0162.662] wcscpy (in: _Dest=0x3e5d148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.662] wcscat (in: _Dest=0x3e5d148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.662] wcscat (in: _Dest=0x3e5d148, _Source="CreateSpaceImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" [0162.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0162.664] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="CREATE~1.BMP")) returned 1 [0162.664] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2=".") returned 1 [0162.664] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2="..") returned 1 [0162.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea33e0 [0162.664] wcscpy (in: _Dest=0x3ea33e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.664] wcscat (in: _Dest=0x3ea33e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.664] wcscat (in: _Dest=0x3ea33e0, _Source="CreateSpaceImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" [0162.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea33e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0162.665] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1 [0162.665] wcscmp (_String1="DataListIconImages.jpg", _String2=".") returned 1 [0162.665] wcscmp (_String1="DataListIconImages.jpg", _String2="..") returned 1 [0162.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3490 [0162.665] wcscpy (in: _Dest=0x3ea3490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.665] wcscat (in: _Dest=0x3ea3490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.665] wcscat (in: _Dest=0x3ea3490, _Source="DataListIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" [0162.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0162.666] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1 [0162.666] wcscmp (_String1="DataListIconImagesMask.bmp", _String2=".") returned 1 [0162.666] wcscmp (_String1="DataListIconImagesMask.bmp", _String2="..") returned 1 [0162.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff79f0 [0162.666] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.666] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.666] wcscat (in: _Dest=0x2ff79f0, _Source="DataListIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" [0162.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0162.667] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="DATAVI~1.JPG")) returned 1 [0162.668] wcscmp (_String1="DataViewIconImages.jpg", _String2=".") returned 1 [0162.668] wcscmp (_String1="DataViewIconImages.jpg", _String2="..") returned 1 [0162.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3540 [0162.668] wcscpy (in: _Dest=0x3ea3540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.668] wcscat (in: _Dest=0x3ea3540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.668] wcscat (in: _Dest=0x3ea3540, _Source="DataViewIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" [0162.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0162.669] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="DATAVI~1.BMP")) returned 1 [0162.669] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2=".") returned 1 [0162.669] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2="..") returned 1 [0162.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7658 [0162.669] wcscpy (in: _Dest=0x2ff7658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.669] wcscat (in: _Dest=0x2ff7658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.669] wcscat (in: _Dest=0x2ff7658, _Source="DataViewIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" [0162.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0162.670] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0162.670] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0162.670] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0162.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6968 [0162.670] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.670] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.670] wcscat (in: _Dest=0x2ff6968, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" [0162.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0162.673] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0162.673] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0162.673] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0162.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3321a8 [0162.673] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.673] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.673] wcscat (in: _Dest=0x3321a8, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" [0162.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0162.674] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="FORM_S~1.JPG")) returned 1 [0162.674] wcscmp (_String1="Form_StatusImage.jpg", _String2=".") returned 1 [0162.674] wcscmp (_String1="Form_StatusImage.jpg", _String2="..") returned 1 [0162.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cea8 [0162.674] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.674] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.674] wcscat (in: _Dest=0x3e5cea8, _Source="Form_StatusImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" [0162.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0162.676] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="FORM_S~1.BMP")) returned 1 [0162.676] wcscmp (_String1="Form_StatusImageMask.bmp", _String2=".") returned 1 [0162.676] wcscmp (_String1="Form_StatusImageMask.bmp", _String2="..") returned 1 [0162.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea35f0 [0162.676] wcscpy (in: _Dest=0x3ea35f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.676] wcscat (in: _Dest=0x3ea35f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.676] wcscat (in: _Dest=0x3ea35f0, _Source="Form_StatusImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" [0162.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea35f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0162.677] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0162.677] wcscmp (_String1="GRIP.JPG", _String2=".") returned 1 [0162.677] wcscmp (_String1="GRIP.JPG", _String2="..") returned 1 [0162.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc708 [0162.677] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.677] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.677] wcscat (in: _Dest=0x66dc708, _Source="GRIP.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" [0162.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0162.678] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0162.678] wcscmp (_String1="GRIPMASK.BMP", _String2=".") returned 1 [0162.678] wcscmp (_String1="GRIPMASK.BMP", _String2="..") returned 1 [0162.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c2370 [0162.678] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.678] wcscat (in: _Dest=0x69c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.678] wcscat (in: _Dest=0x69c2370, _Source="GRIPMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" [0162.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0162.683] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1 [0162.683] wcscmp (_String1="InformationIcon.jpg", _String2=".") returned 1 [0162.683] wcscmp (_String1="InformationIcon.jpg", _String2="..") returned 1 [0162.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5bee8 [0162.683] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.683] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.683] wcscat (in: _Dest=0x3e5bee8, _Source="InformationIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" [0162.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0162.684] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1 [0162.684] wcscmp (_String1="InformationIconMask.bmp", _String2=".") returned 1 [0162.684] wcscmp (_String1="InformationIconMask.bmp", _String2="..") returned 1 [0162.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea36a0 [0162.685] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.685] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.685] wcscat (in: _Dest=0x3ea36a0, _Source="InformationIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" [0162.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea36a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0162.691] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8f8300, ftCreationTime.dwHighDateTime=0x1c9f985, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc8f8300, ftLastWriteTime.dwHighDateTime=0x1c9f985, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1 [0162.691] wcscmp (_String1="LoginDialogBackground.jpg", _String2=".") returned 1 [0162.691] wcscmp (_String1="LoginDialogBackground.jpg", _String2="..") returned 1 [0162.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6e70 [0162.691] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.691] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.691] wcscat (in: _Dest=0x2ff6e70, _Source="LoginDialogBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" [0162.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0162.692] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1 [0162.692] wcscmp (_String1="LoginTool24x24Images.jpg", _String2=".") returned 1 [0162.692] wcscmp (_String1="LoginTool24x24Images.jpg", _String2="..") returned 1 [0162.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3750 [0162.692] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.692] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.692] wcscat (in: _Dest=0x3ea3750, _Source="LoginTool24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" [0162.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0162.694] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1 [0162.694] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2=".") returned 1 [0162.694] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2="..") returned 1 [0162.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6db8 [0162.694] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.694] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.694] wcscat (in: _Dest=0x2ff6db8, _Source="LoginTool24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" [0162.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0162.695] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0162.695] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2=".") returned 1 [0162.695] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2="..") returned 1 [0162.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0162.695] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.695] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.695] wcscat (in: _Dest=0x333468, _Source="MessageAttachmentIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" [0162.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0162.696] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0162.696] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2=".") returned 1 [0162.697] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2="..") returned 1 [0162.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f840 [0162.697] wcscpy (in: _Dest=0x682f840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.697] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.697] wcscat (in: _Dest=0x682f840, _Source="MessageAttachmentIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" [0162.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0162.698] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1 [0162.698] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2=".") returned 1 [0162.698] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2="..") returned 1 [0162.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7378 [0162.698] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.698] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.698] wcscat (in: _Dest=0x2ff7378, _Source="MessageHistoryIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" [0162.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0162.699] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1 [0162.699] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2=".") returned 1 [0162.699] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2="..") returned 1 [0162.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0162.700] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.700] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.700] wcscat (in: _Dest=0x333528, _Source="MessageHistoryIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" [0162.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0162.701] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbec8400, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbec8400, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1 [0162.701] wcscmp (_String1="NotifierBackground.jpg", _String2=".") returned 1 [0162.701] wcscmp (_String1="NotifierBackground.jpg", _String2="..") returned 1 [0162.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3800 [0162.701] wcscpy (in: _Dest=0x3ea3800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.701] wcscat (in: _Dest=0x3ea3800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.701] wcscat (in: _Dest=0x3ea3800, _Source="NotifierBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" [0162.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0162.709] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe575ec00, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe575ec00, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOBA77~1.JPG")) returned 1 [0162.709] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2=".") returned 1 [0162.709] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2="..") returned 1 [0162.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff72c0 [0162.709] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.709] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.709] wcscat (in: _Dest=0x2ff72c0, _Source="NotifierBackgroundRTL.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" [0162.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0162.710] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe652700, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80e376d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe652700, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1 [0162.714] wcscmp (_String1="NotifierCloseButton.jpg", _String2=".") returned 1 [0162.714] wcscmp (_String1="NotifierCloseButton.jpg", _String2="..") returned 1 [0162.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea38b0 [0162.714] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0162.714] wcscat (in: _Dest=0x3ea38b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0162.714] wcscat (in: _Dest=0x3ea38b0, _Source="NotifierCloseButton.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" [0164.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea38b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0164.117] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145b0800, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x145b0800, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1 [0164.117] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2=".") returned 1 [0164.117] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2="..") returned 1 [0164.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2740 [0164.117] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.117] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.117] wcscat (in: _Dest=0x3ee2740, _Source="NotifierDisableDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" [0164.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0164.119] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ee8f00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17ee8f00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NO795D~1.JPG")) returned 1 [0164.119] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2=".") returned 1 [0164.119] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2="..") returned 1 [0164.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee27f8 [0164.119] wcscpy (in: _Dest=0x3ee27f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.119] wcscat (in: _Dest=0x3ee27f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.119] wcscat (in: _Dest=0x3ee27f8, _Source="NotifierDisableUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" [0164.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee27f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0164.121] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b821600, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b821600, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOE4F1~1.JPG")) returned 1 [0164.121] wcscmp (_String1="NotifierDownArrow.jpg", _String2=".") returned 1 [0164.121] wcscmp (_String1="NotifierDownArrow.jpg", _String2="..") returned 1 [0164.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2fc0 [0164.121] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.121] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.121] wcscat (in: _Dest=0x3ea2fc0, _Source="NotifierDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" [0164.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0164.122] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f159d00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f159d00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1 [0164.123] wcscmp (_String1="NotifierUpArrow.jpg", _String2=".") returned 1 [0164.123] wcscmp (_String1="NotifierUpArrow.jpg", _String2="..") returned 1 [0164.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697dce8 [0164.123] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.123] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.123] wcscat (in: _Dest=0x697dce8, _Source="NotifierUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" [0164.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0164.124] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7c0000, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d7c0000, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1 [0164.124] wcscmp (_String1="NotifierWindowMask.bmp", _String2=".") returned 1 [0164.124] wcscmp (_String1="NotifierWindowMask.bmp", _String2="..") returned 1 [0164.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3a10 [0164.124] wcscpy (in: _Dest=0x3ea3a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.124] wcscat (in: _Dest=0x3ea3a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.124] wcscat (in: _Dest=0x3ea3a10, _Source="NotifierWindowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" [0164.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0164.126] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8d6200, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf8d6200, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1 [0164.126] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2=".") returned 1 [0164.126] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2="..") returned 1 [0164.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee28b0 [0164.126] wcscpy (in: _Dest=0x3ee28b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.126] wcscat (in: _Dest=0x3ee28b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.126] wcscat (in: _Dest=0x3ee28b0, _Source="NotifierWindowMaskRTL.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" [0164.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee28b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0164.127] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe8500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbe8500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="OUTLIN~1.JPG")) returned 1 [0164.127] wcscmp (_String1="OutlineToolIconImages.jpg", _String2=".") returned 1 [0164.127] wcscmp (_String1="OutlineToolIconImages.jpg", _String2="..") returned 1 [0164.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee2968 [0164.127] wcscpy (in: _Dest=0x3ee2968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.128] wcscat (in: _Dest=0x3ee2968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.128] wcscat (in: _Dest=0x3ee2968, _Source="OutlineToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" [0164.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0164.129] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="OUTLIN~1.BMP")) returned 1 [0164.129] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2=".") returned 1 [0164.129] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2="..") returned 1 [0164.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0164.129] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.129] wcscat (in: _Dest=0x3daf388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.129] wcscat (in: _Dest=0x3daf388, _Source="OutlineToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" [0164.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0164.131] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1 [0164.131] wcscmp (_String1="OutofSyncIconImages.jpg", _String2=".") returned 1 [0164.131] wcscmp (_String1="OutofSyncIconImages.jpg", _String2="..") returned 1 [0164.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3ac0 [0164.131] wcscpy (in: _Dest=0x3ea3ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.131] wcscat (in: _Dest=0x3ea3ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.131] wcscat (in: _Dest=0x3ea3ac0, _Source="OutofSyncIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" [0164.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0164.132] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1 [0164.132] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2=".") returned 1 [0164.132] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2="..") returned 1 [0164.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2a20 [0164.133] wcscpy (in: _Dest=0x3ee2a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.133] wcscat (in: _Dest=0x3ee2a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.133] wcscat (in: _Dest=0x3ee2a20, _Source="OutofSyncIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" [0164.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0164.134] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd8a500, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cd8a500, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1 [0164.134] wcscmp (_String1="PicturesToolIconImages.jpg", _String2=".") returned 1 [0164.134] wcscmp (_String1="PicturesToolIconImages.jpg", _String2="..") returned 1 [0164.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2ad8 [0164.134] wcscpy (in: _Dest=0x3ee2ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.134] wcscat (in: _Dest=0x3ee2ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.135] wcscat (in: _Dest=0x3ee2ad8, _Source="PicturesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" [0164.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0164.136] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f3d00, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x934f3d00, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="PICTUR~1.BMP")) returned 1 [0164.136] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2=".") returned 1 [0164.136] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2="..") returned 1 [0164.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf2c8 [0164.136] wcscpy (in: _Dest=0x3daf2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.136] wcscat (in: _Dest=0x3daf2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.136] wcscat (in: _Dest=0x3daf2c8, _Source="PicturesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" [0164.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0164.138] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1 [0164.138] wcscmp (_String1="QuestionIcon.jpg", _String2=".") returned 1 [0164.138] wcscmp (_String1="QuestionIcon.jpg", _String2="..") returned 1 [0164.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0db70 [0164.138] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.138] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.138] wcscat (in: _Dest=0x3e0db70, _Source="QuestionIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" [0164.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0164.140] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1 [0164.140] wcscmp (_String1="QuestionIconMask.bmp", _String2=".") returned 1 [0164.140] wcscmp (_String1="QuestionIconMask.bmp", _String2="..") returned 1 [0164.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e030 [0164.140] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.140] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.140] wcscat (in: _Dest=0x697e030, _Source="QuestionIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" [0164.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0164.141] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1 [0164.142] wcscmp (_String1="Shared16x16Images.jpg", _String2=".") returned 1 [0164.142] wcscmp (_String1="Shared16x16Images.jpg", _String2="..") returned 1 [0164.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3b70 [0164.142] wcscpy (in: _Dest=0x3ea3b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.142] wcscat (in: _Dest=0x3ea3b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.142] wcscat (in: _Dest=0x3ea3b70, _Source="Shared16x16Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" [0164.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0164.143] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1 [0164.143] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2=".") returned 1 [0164.143] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2="..") returned 1 [0164.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee2b90 [0164.143] wcscpy (in: _Dest=0x3ee2b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.143] wcscat (in: _Dest=0x3ee2b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.143] wcscat (in: _Dest=0x3ee2b90, _Source="Shared16x16ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" [0164.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0164.145] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1 [0164.145] wcscmp (_String1="Shared24x24Images.jpg", _String2=".") returned 1 [0164.145] wcscmp (_String1="Shared24x24Images.jpg", _String2="..") returned 1 [0164.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3c20 [0164.145] wcscpy (in: _Dest=0x3ea3c20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.145] wcscat (in: _Dest=0x3ea3c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.145] wcscat (in: _Dest=0x3ea3c20, _Source="Shared24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" [0164.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0164.146] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1 [0164.147] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2=".") returned 1 [0164.147] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2="..") returned 1 [0164.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee2c48 [0164.147] wcscpy (in: _Dest=0x3ee2c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.147] wcscat (in: _Dest=0x3ee2c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.147] wcscat (in: _Dest=0x3ee2c48, _Source="Shared24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" [0164.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0164.148] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="SKETCH~1.BMP")) returned 1 [0164.148] wcscmp (_String1="SketchIconImages.bmp", _String2=".") returned 1 [0164.148] wcscmp (_String1="SketchIconImages.bmp", _String2="..") returned 1 [0164.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697ea08 [0164.148] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.149] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.149] wcscat (in: _Dest=0x697ea08, _Source="SketchIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" [0164.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0164.150] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="SPACEB~1.JPG")) returned 1 [0164.150] wcscmp (_String1="spacebackupicons.jpg", _String2=".") returned 1 [0164.150] wcscmp (_String1="spacebackupicons.jpg", _String2="..") returned 1 [0164.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e2d0 [0164.150] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.150] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.150] wcscat (in: _Dest=0x697e2d0, _Source="spacebackupicons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" [0164.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0164.151] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="SPACEB~1.BMP")) returned 1 [0164.151] wcscmp (_String1="spacebackupiconsmask.bmp", _String2=".") returned 1 [0164.151] wcscmp (_String1="spacebackupiconsmask.bmp", _String2="..") returned 1 [0164.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3cd0 [0164.151] wcscpy (in: _Dest=0x3ea3cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.151] wcscat (in: _Dest=0x3ea3cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.152] wcscat (in: _Dest=0x3ea3cd0, _Source="spacebackupiconsmask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" [0164.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0164.153] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0164.153] wcscmp (_String1="STOPICON.JPG", _String2=".") returned 1 [0164.153] wcscmp (_String1="STOPICON.JPG", _String2="..") returned 1 [0164.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818d88 [0164.153] wcscpy (in: _Dest=0x6818d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.153] wcscat (in: _Dest=0x6818d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.154] wcscat (in: _Dest=0x6818d88, _Source="STOPICON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" [0164.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0165.388] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1 [0165.388] wcscmp (_String1="StopIconMask.bmp", _String2=".") returned 1 [0165.388] wcscmp (_String1="StopIconMask.bmp", _String2="..") returned 1 [0165.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0c88 [0165.388] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.388] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.388] wcscat (in: _Dest=0x69c0c88, _Source="StopIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" [0172.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 0x20 [0172.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0172.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.753] GetLastError () returned 0x5 [0172.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0172.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28a2a00, ftCreationTime.dwHighDateTime=0x1ca0ba9, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf28a2a00, ftLastWriteTime.dwHighDateTime=0x1ca0ba9, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1 [0172.753] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2=".") returned 1 [0172.753] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2="..") returned 1 [0172.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf2c8 [0172.753] wcscpy (in: _Dest=0x3daf2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.753] wcscat (in: _Dest=0x3daf2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.753] wcscat (in: _Dest=0x3daf2c8, _Source="TaskbarIconImages256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" [0172.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 0x20 [0172.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0172.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.754] GetLastError () returned 0x5 [0172.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0172.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf2c8) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2097300, ftCreationTime.dwHighDateTime=0x1ca0baa, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2097300, ftLastWriteTime.dwHighDateTime=0x1ca0baa, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1 [0172.754] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2=".") returned 1 [0172.754] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2="..") returned 1 [0172.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df03f0 [0172.754] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.754] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.754] wcscat (in: _Dest=0x3df03f0, _Source="TaskbarIconImagesMask256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" [0172.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 0x20 [0172.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0172.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.755] GetLastError () returned 0x5 [0172.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0172.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1 [0172.755] wcscmp (_String1="TipsImage.jpg", _String2=".") returned 1 [0172.756] wcscmp (_String1="TipsImage.jpg", _String2="..") returned 1 [0172.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0c88 [0172.756] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.756] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.756] wcscat (in: _Dest=0x69c0c88, _Source="TipsImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" [0172.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 0x20 [0173.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0173.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.535] GetLastError () returned 0x5 [0173.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0173.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 [0173.535] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1 [0173.535] wcscmp (_String1="TipsImageMask.bmp", _String2=".") returned 1 [0173.536] wcscmp (_String1="TipsImageMask.bmp", _String2="..") returned 1 [0173.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5be40 [0173.536] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.536] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.536] wcscat (in: _Dest=0x3e5be40, _Source="TipsImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" [0173.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0173.537] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1 [0173.537] wcscmp (_String1="VeriSignLogo.jpg", _String2=".") returned 1 [0173.537] wcscmp (_String1="VeriSignLogo.jpg", _String2="..") returned 1 [0173.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0c88 [0173.537] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.537] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.537] wcscat (in: _Dest=0x69c0c88, _Source="VeriSignLogo.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" [0173.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0173.538] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25efdc00, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25efdc00, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="WEBTOO~2.JPG")) returned 1 [0173.538] wcscmp (_String1="WebToolIconImages.jpg", _String2=".") returned 1 [0173.538] wcscmp (_String1="WebToolIconImages.jpg", _String2="..") returned 1 [0173.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea35f0 [0173.539] wcscpy (in: _Dest=0x3ea35f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.539] wcscat (in: _Dest=0x3ea35f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.539] wcscat (in: _Dest=0x3ea35f0, _Source="WebToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" [0173.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea35f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0173.540] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d97a100, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d97a100, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="WEBTOO~1.BMP")) returned 1 [0173.540] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2=".") returned 1 [0173.540] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2="..") returned 1 [0173.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1998 [0173.540] wcscpy (in: _Dest=0x3ee1998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.540] wcscat (in: _Dest=0x3ee1998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.540] wcscat (in: _Dest=0x3ee1998, _Source="WebToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" [0173.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0173.543] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="WEBTOO~1.JPG")) returned 1 [0173.543] wcscmp (_String1="WebToolImages16x16.jpg", _String2=".") returned 1 [0173.543] wcscmp (_String1="WebToolImages16x16.jpg", _String2="..") returned 1 [0173.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3490 [0173.543] wcscpy (in: _Dest=0x3ea3490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.543] wcscat (in: _Dest=0x3ea3490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.543] wcscat (in: _Dest=0x3ea3490, _Source="WebToolImages16x16.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" [0173.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0173.545] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="WEBTOO~2.BMP")) returned 1 [0173.545] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2=".") returned 1 [0173.545] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2="..") returned 1 [0173.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee25d0 [0173.545] wcscpy (in: _Dest=0x3ee25d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.545] wcscat (in: _Dest=0x3ee25d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.545] wcscat (in: _Dest=0x3ee25d0, _Source="WebToolImagesMask16x16.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" [0173.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee25d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0173.546] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0173.546] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2=".") returned 1 [0173.546] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2="..") returned 1 [0173.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2518 [0173.546] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.546] wcscat (in: _Dest=0x3ee2518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.546] wcscat (in: _Dest=0x3ee2518, _Source="WSSFilesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" [0173.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0173.548] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 1 [0173.548] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2=".") returned 1 [0173.548] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2="..") returned 1 [0173.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0173.548] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0173.548] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0173.548] wcscat (in: _Dest=0x332da8, _Source="WSSFilesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" [0173.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0173.549] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 0 [0173.549] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0173.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0173.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 [0173.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ae38) returned 1 Thread: id = 2209 os_tid = 0x12bc [0154.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f0038 [0154.767] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0154.767] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0154.767] wcscat (in: _Dest=0x66f0038, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*" [0154.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0154.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0156.442] wcscmp (_String1=".", _String2=".") returned 0 [0156.442] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.442] wcscmp (_String1="..", _String2=".") returned 1 [0156.442] wcscmp (_String1="..", _String2="..") returned 0 [0156.442] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0156.442] wcscmp (_String1="groove.net", _String2=".") returned 1 [0156.442] wcscmp (_String1="groove.net", _String2="..") returned 1 [0156.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31060 [0156.442] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0156.442] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0156.443] wcscat (in: _Dest=0x3e31060, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0157.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0157.213] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0157.214] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0157.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0157.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 [0157.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674aeb8) returned 1 Thread: id = 2210 os_tid = 0x12c0 [0154.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee7c8 [0154.767] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0154.767] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\" [0154.767] wcscat (in: _Dest=0x66ee7c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*" [0154.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0154.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0157.704] wcscmp (_String1=".", _String2=".") returned 0 [0157.704] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.173] wcscmp (_String1="..", _String2=".") returned 1 [0158.173] wcscmp (_String1="..", _String2="..") returned 0 [0158.173] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0158.173] wcscmp (_String1="ALERT.ICO", _String2=".") returned 1 [0158.173] wcscmp (_String1="ALERT.ICO", _String2="..") returned 1 [0158.173] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="CHEVRON.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="CHEVRON.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76febfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="COMPUTER.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="COMPUTER.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0158.174] wcscmp (_String1="ContactSelector.ico", _String2=".") returned 1 [0158.174] wcscmp (_String1="ContactSelector.ico", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ab2200, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13ab2200, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1 [0158.174] wcscmp (_String1="gfserrorfromgroove.ico", _String2=".") returned 1 [0158.174] wcscmp (_String1="gfserrorfromgroove.ico", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb54100, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb54100, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1 [0158.174] wcscmp (_String1="gfserrortogroove.ico", _String2=".") returned 1 [0158.174] wcscmp (_String1="gfserrortogroove.ico", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73232300, ftCreationTime.dwHighDateTime=0x1c9e05e, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73232300, ftLastWriteTime.dwHighDateTime=0x1c9e05e, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="GWE.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="GWE.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="INCOMING.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="INCOMING.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="INDOMAIN.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="INDOMAIN.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="MAIL.ICO", _String2=".") returned 1 [0158.174] wcscmp (_String1="MAIL.ICO", _String2="..") returned 1 [0158.174] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0158.174] wcscmp (_String1="MANUAL.ICO", _String2=".") returned 1 [0158.175] wcscmp (_String1="MANUAL.ICO", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0158.175] wcscmp (_String1="messageboxalert.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="messageboxalert.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0158.175] wcscmp (_String1="messageboxerror.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="messageboxerror.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0158.175] wcscmp (_String1="messageboxinfo.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="messageboxinfo.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3dc400, ftCreationTime.dwHighDateTime=0x1ca045a, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xab3dc400, ftLastWriteTime.dwHighDateTime=0x1ca045a, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0158.175] wcscmp (_String1="ModifiedTelespace.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="ModifiedTelespace.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0158.175] wcscmp (_String1="OFFLINE.ICO", _String2=".") returned 1 [0158.175] wcscmp (_String1="OFFLINE.ICO", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0158.175] wcscmp (_String1="ONLINE.ICO", _String2=".") returned 1 [0158.175] wcscmp (_String1="ONLINE.ICO", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0158.175] wcscmp (_String1="OnLineBusy.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="OnLineBusy.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0158.175] wcscmp (_String1="OnLineIdle.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="OnLineIdle.ico", _String2="..") returned 1 [0158.175] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0158.175] wcscmp (_String1="OutDomain.ico", _String2=".") returned 1 [0158.175] wcscmp (_String1="OutDomain.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d18050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0158.176] wcscmp (_String1="OUTGOING.ICO", _String2=".") returned 1 [0158.176] wcscmp (_String1="OUTGOING.ICO", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0158.176] wcscmp (_String1="OutSyncPC.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="OutSyncPC.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0158.176] wcscmp (_String1="PersonalContact.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="PersonalContact.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0158.176] wcscmp (_String1="SessionMember.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="SessionMember.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0158.176] wcscmp (_String1="SessionOwner.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="SessionOwner.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0158.176] wcscmp (_String1="SpaceSelector.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="SpaceSelector.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0158.176] wcscmp (_String1="StatusAway.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="StatusAway.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0158.176] wcscmp (_String1="StatusDoNotDisturb.ico", _String2=".") returned 1 [0158.176] wcscmp (_String1="StatusDoNotDisturb.ico", _String2="..") returned 1 [0158.176] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0158.176] wcscmp (_String1="StatusOnline.ico", _String2=".") returned 1 [0158.177] wcscmp (_String1="StatusOnline.ico", _String2="..") returned 1 [0158.177] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0158.177] wcscmp (_String1="TOOLICON.ICO", _String2=".") returned 1 [0158.177] wcscmp (_String1="TOOLICON.ICO", _String2="..") returned 1 [0158.177] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0158.177] wcscmp (_String1="WSS.ICO", _String2=".") returned 1 [0158.177] wcscmp (_String1="WSS.ICO", _String2="..") returned 1 [0158.177] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0158.177] wcscmp (_String1="WSS_DocLib.ico", _String2=".") returned 1 [0158.177] wcscmp (_String1="WSS_DocLib.ico", _String2="..") returned 1 [0158.177] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0 [0158.177] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0158.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0158.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 [0158.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 Thread: id = 2211 os_tid = 0x12c4 [0154.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef510 [0154.768] wcscpy (in: _Dest=0x66ef510, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0154.768] wcscat (in: _Dest=0x66ef510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0154.768] wcscat (in: _Dest=0x66ef510, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*" [0154.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0154.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0157.716] wcscmp (_String1=".", _String2=".") returned 0 [0157.716] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.716] wcscmp (_String1="..", _String2=".") returned 1 [0157.716] wcscmp (_String1="..", _String2="..") returned 0 [0157.716] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1 [0157.716] wcscmp (_String1="builtincontrolsschema.xsd", _String2=".") returned 1 [0157.716] wcscmp (_String1="builtincontrolsschema.xsd", _String2="..") returned 1 [0157.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1490 [0157.716] wcscpy (in: _Dest=0x3ee1490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0157.716] wcscat (in: _Dest=0x3ee1490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0157.717] wcscat (in: _Dest=0x3ee1490, _Source="builtincontrolsschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" [0161.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0161.433] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1 [0161.433] wcscmp (_String1="grvschema.xsd", _String2=".") returned 1 [0161.434] wcscmp (_String1="grvschema.xsd", _String2="..") returned 1 [0161.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0161.434] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.434] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.434] wcscat (in: _Dest=0x2c7238, _Source="grvschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" [0161.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0161.435] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1 [0161.435] wcscmp (_String1="Messenger.xml", _String2=".") returned 1 [0161.435] wcscmp (_String1="Messenger.xml", _String2="..") returned 1 [0161.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0161.435] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.435] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.435] wcscat (in: _Dest=0x2c7198, _Source="Messenger.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" [0161.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0161.436] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1 [0161.436] wcscmp (_String1="Space Templates", _String2=".") returned 1 [0161.436] wcscmp (_String1="Space Templates", _String2="..") returned 1 [0161.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c75f8 [0161.436] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.436] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.436] wcscat (in: _Dest=0x2c75f8, _Source="Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0161.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0161.438] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf779900, ftCreationTime.dwHighDateTime=0x1c9d7ab, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf779900, ftLastWriteTime.dwHighDateTime=0x1c9d7ab, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~2.XML")) returned 1 [0161.438] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2=".") returned 1 [0161.438] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2="..") returned 1 [0161.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f390 [0161.438] wcscpy (in: _Dest=0x682f390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.438] wcscat (in: _Dest=0x682f390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.438] wcscat (in: _Dest=0x682f390, _Source="StarterApplicationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" [0161.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0161.439] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x593af200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x593af200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1 [0161.439] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2=".") returned 1 [0161.439] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2="..") returned 1 [0161.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f458 [0161.439] wcscpy (in: _Dest=0x682f458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.439] wcscat (in: _Dest=0x682f458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.439] wcscat (in: _Dest=0x682f458, _Source="StarterNotificationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" [0161.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0161.440] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 1 [0161.440] wcscmp (_String1="StarterToolTemplates.xml", _String2=".") returned 1 [0161.441] wcscmp (_String1="StarterToolTemplates.xml", _String2="..") returned 1 [0161.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7098 [0161.441] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0161.441] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0161.441] wcscat (in: _Dest=0x2ff7098, _Source="StarterToolTemplates.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" [0161.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0161.442] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 0 [0161.442] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0161.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0161.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 [0161.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674afb8) returned 1 Thread: id = 2212 os_tid = 0x12c8 [0154.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20 [0154.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0154.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.769] GetLastError () returned 0x5 [0154.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0154.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 2213 os_tid = 0x12d0 [0154.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20 [0154.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0154.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.771] GetLastError () returned 0x5 [0154.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0154.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 2214 os_tid = 0x12d4 [0154.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0dcb0 [0154.773] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0154.773] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0154.773] wcscat (in: _Dest=0x3e0dcb0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*" [0154.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0154.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0155.471] wcscmp (_String1=".", _String2=".") returned 0 [0155.471] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.471] wcscmp (_String1="..", _String2=".") returned 1 [0155.471] wcscmp (_String1="..", _String2="..") returned 0 [0155.471] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0155.471] wcscmp (_String1="M1033DSK.APL", _String2=".") returned 1 [0155.471] wcscmp (_String1="M1033DSK.APL", _String2="..") returned 1 [0155.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6db8 [0155.471] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0155.471] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0155.471] wcscat (in: _Dest=0x2ff6db8, _Source="M1033DSK.APL" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" [0156.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0156.605] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0156.605] wcscmp (_String1="M1033DSK.CRT", _String2=".") returned 1 [0156.605] wcscmp (_String1="M1033DSK.CRT", _String2="..") returned 1 [0156.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7150 [0156.605] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.605] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.605] wcscat (in: _Dest=0x2ff7150, _Source="M1033DSK.CRT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" [0156.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0156.606] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0156.606] wcscmp (_String1="M1033DSK.CSD", _String2=".") returned 1 [0156.606] wcscmp (_String1="M1033DSK.CSD", _String2="..") returned 1 [0156.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0156.606] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.606] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.606] wcscat (in: _Dest=0x2ff79f0, _Source="M1033DSK.CSD" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" [0156.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0156.607] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0156.607] wcscmp (_String1="M1033DSK.IDX", _String2=".") returned 1 [0156.607] wcscmp (_String1="M1033DSK.IDX", _String2="..") returned 1 [0156.607] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0156.607] wcscmp (_String1="M1033DSK.LTS", _String2=".") returned 1 [0156.607] wcscmp (_String1="M1033DSK.LTS", _String2="..") returned 1 [0156.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0156.607] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.607] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.608] wcscat (in: _Dest=0x2ff6b90, _Source="M1033DSK.LTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" [0156.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0156.609] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0156.609] wcscmp (_String1="M1033DSK.TTS", _String2=".") returned 1 [0156.609] wcscmp (_String1="M1033DSK.TTS", _String2="..") returned 1 [0156.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6e70 [0156.609] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.609] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.609] wcscat (in: _Dest=0x2ff6e70, _Source="M1033DSK.TTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" [0156.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0156.610] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0156.610] wcscmp (_String1="M1033DSK.UDT", _String2=".") returned 1 [0156.610] wcscmp (_String1="M1033DSK.UDT", _String2="..") returned 1 [0156.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee13d8 [0156.610] wcscpy (in: _Dest=0x3ee13d8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.610] wcscat (in: _Dest=0x3ee13d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.610] wcscat (in: _Dest=0x3ee13d8, _Source="M1033DSK.UDT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" [0156.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0156.611] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0156.611] wcscmp (_String1="M1033DSK.UNT", _String2=".") returned 1 [0156.611] wcscmp (_String1="M1033DSK.UNT", _String2="..") returned 1 [0156.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1268 [0156.611] wcscpy (in: _Dest=0x3ee1268, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.611] wcscat (in: _Dest=0x3ee1268, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.611] wcscat (in: _Dest=0x3ee1268, _Source="M1033DSK.UNT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" [0156.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0156.612] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0156.613] wcscmp (_String1="M1033DSK.WIH", _String2=".") returned 1 [0156.613] wcscmp (_String1="M1033DSK.WIH", _String2="..") returned 1 [0156.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1320 [0156.613] wcscpy (in: _Dest=0x3ee1320, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0156.613] wcscat (in: _Dest=0x3ee1320, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0156.613] wcscat (in: _Dest=0x3ee1320, _Source="M1033DSK.WIH" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" [0156.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0156.614] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0156.614] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0156.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0156.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 [0156.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 2215 os_tid = 0x12d8 [0154.776] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0155.472] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0155.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.472] GetLastError () returned 0x5 [0155.472] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0155.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 2216 os_tid = 0x12e0 [0154.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0de90 [0154.777] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0154.777] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0154.778] wcscat (in: _Dest=0x3e0de90, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*" [0154.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0154.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0157.715] wcscmp (_String1=".", _String2=".") returned 0 [0157.715] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.715] wcscmp (_String1="..", _String2=".") returned 1 [0157.715] wcscmp (_String1="..", _String2="..") returned 0 [0157.715] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.715] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.715] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1548 [0157.716] wcscpy (in: _Dest=0x3ee1548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0157.716] wcscat (in: _Dest=0x3ee1548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0157.716] wcscat (in: _Dest=0x3ee1548, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" [0158.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0158.429] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd642320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0158.429] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0158.429] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0158.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0158.429] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0158.429] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0158.430] wcscat (in: _Dest=0x35c6e8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" [0158.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0158.431] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0158.431] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0158.431] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0158.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0158.431] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0158.431] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0158.431] wcscat (in: _Dest=0x2ff6968, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" [0158.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0158.432] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.432] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.432] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff72c0 [0158.433] wcscpy (in: _Dest=0x2ff72c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0158.433] wcscat (in: _Dest=0x2ff72c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0158.433] wcscat (in: _Dest=0x2ff72c0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" [0158.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff72c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0158.434] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0158.434] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0158.434] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0158.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0158.434] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0158.434] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0158.434] wcscat (in: _Dest=0x2ff7c18, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" [0158.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0158.435] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.435] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.435] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0158.436] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0158.436] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0158.436] wcscat (in: _Dest=0x3df0710, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" [0158.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0158.437] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.437] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0158.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0158.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0158.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 2217 os_tid = 0x12e4 [0154.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0154.780] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0154.781] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0154.781] wcscat (in: _Dest=0x3e0e890, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*" [0154.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0154.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0156.475] wcscmp (_String1=".", _String2=".") returned 0 [0156.475] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.475] wcscmp (_String1="..", _String2=".") returned 1 [0156.475] wcscmp (_String1="..", _String2="..") returned 0 [0156.475] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.475] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.475] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7ef8 [0156.476] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0156.476] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0156.476] wcscat (in: _Dest=0x2ff7ef8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" [0157.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0157.888] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0157.888] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0157.888] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0157.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0157.888] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0157.888] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0157.888] wcscat (in: _Dest=0x35b878, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" [0157.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0157.889] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.889] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.889] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1de8 [0157.889] wcscpy (in: _Dest=0x3ee1de8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0157.889] wcscat (in: _Dest=0x3ee1de8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0157.889] wcscat (in: _Dest=0x3ee1de8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" [0157.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0157.890] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.890] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.890] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df07d8 [0157.890] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0157.890] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0157.891] wcscat (in: _Dest=0x3df07d8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" [0157.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0157.892] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.892] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0157.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0157.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 [0157.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 2218 os_tid = 0x1354 [0154.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0ecf0 [0154.781] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0154.781] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0154.781] wcscat (in: _Dest=0x3e0ecf0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*" [0154.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0154.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0156.451] wcscmp (_String1=".", _String2=".") returned 0 [0156.451] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.451] wcscmp (_String1="..", _String2=".") returned 1 [0156.452] wcscmp (_String1="..", _String2="..") returned 0 [0156.452] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.452] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.452] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0156.452] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0156.452] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0156.452] wcscat (in: _Dest=0x2ff6f28, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" [0158.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0158.470] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0158.470] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0158.470] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0158.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0158.470] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0158.471] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0158.471] wcscat (in: _Dest=0x35c588, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" [0158.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0158.472] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.472] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.472] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6db8 [0158.472] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0158.472] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0158.472] wcscat (in: _Dest=0x2ff6db8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" [0158.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0158.474] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.474] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.474] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0328 [0158.474] wcscpy (in: _Dest=0x3df0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0158.474] wcscat (in: _Dest=0x3df0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0158.474] wcscat (in: _Dest=0x3df0328, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" [0158.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0158.475] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.475] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0158.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0158.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0158.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 2219 os_tid = 0x136c [0154.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0f010 [0154.782] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0154.782] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0154.782] wcscat (in: _Dest=0x3e0f010, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*" [0154.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f154d0 [0154.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0157.722] wcscmp (_String1=".", _String2=".") returned 0 [0157.722] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.722] wcscmp (_String1="..", _String2=".") returned 1 [0157.723] wcscmp (_String1="..", _String2="..") returned 0 [0157.723] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.723] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.723] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1998 [0157.723] wcscpy (in: _Dest=0x3ee1998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0157.723] wcscat (in: _Dest=0x3ee1998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0157.723] wcscat (in: _Dest=0x3ee1998, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" [0164.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0164.104] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0164.104] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0164.104] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0164.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3960 [0164.104] wcscpy (in: _Dest=0x3ea3960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0164.104] wcscat (in: _Dest=0x3ea3960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0164.104] wcscat (in: _Dest=0x3ea3960, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" [0164.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0164.105] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0164.105] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0164.105] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0164.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee25d0 [0164.106] wcscpy (in: _Dest=0x3ee25d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0164.106] wcscat (in: _Dest=0x3ee25d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0164.106] wcscat (in: _Dest=0x3ee25d0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" [0164.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee25d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0164.107] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0164.108] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0164.108] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0164.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2518 [0164.108] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0164.108] wcscat (in: _Dest=0x3ee2518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0164.108] wcscat (in: _Dest=0x3ee2518, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" [0164.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0164.109] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0164.109] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0164.109] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0164.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2688 [0164.109] wcscpy (in: _Dest=0x3ee2688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0164.109] wcscat (in: _Dest=0x3ee2688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0164.109] wcscat (in: _Dest=0x3ee2688, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" [0164.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0164.111] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0164.111] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0164.111] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0164.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f390 [0164.111] wcscpy (in: _Dest=0x682f390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0164.111] wcscat (in: _Dest=0x682f390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0164.111] wcscat (in: _Dest=0x682f390, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" [0164.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0164.112] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0164.112] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0164.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f154d0) returned 1 [0164.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 [0164.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 2220 os_tid = 0x1374 [0154.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e1b0 [0154.783] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0154.783] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0154.783] wcscat (in: _Dest=0x3e0e1b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*" [0154.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0154.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0156.454] wcscmp (_String1=".", _String2=".") returned 0 [0156.454] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.454] wcscmp (_String1="..", _String2=".") returned 1 [0156.454] wcscmp (_String1="..", _String2="..") returned 0 [0156.454] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.454] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.454] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6c48 [0156.454] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0156.454] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0156.454] wcscat (in: _Dest=0x2ff6c48, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" [0157.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0157.221] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.221] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.221] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee11b0 [0157.221] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0157.221] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0157.221] wcscat (in: _Dest=0x3ee11b0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" [0157.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0157.222] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.222] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.222] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0157.222] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0157.222] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0157.222] wcscat (in: _Dest=0x3df0710, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" [0157.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0157.223] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.224] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0157.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0157.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 [0157.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 2221 os_tid = 0x1398 [0154.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e930 [0154.783] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0154.783] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0154.783] wcscat (in: _Dest=0x3e0e930, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*" [0154.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0154.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0156.455] wcscmp (_String1=".", _String2=".") returned 0 [0156.455] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.455] wcscmp (_String1="..", _String2=".") returned 1 [0156.455] wcscmp (_String1="..", _String2="..") returned 0 [0156.455] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.455] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.455] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7aa8 [0156.455] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0156.455] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0156.455] wcscat (in: _Dest=0x2ff7aa8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" [0159.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0159.623] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.623] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.623] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0159.624] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0159.624] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0159.624] wcscat (in: _Dest=0x2ff6b90, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" [0159.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0159.625] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.625] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.625] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0580 [0159.625] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0159.625] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0159.625] wcscat (in: _Dest=0x3df0580, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" [0159.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0159.626] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.626] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0159.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0159.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 [0159.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 2222 os_tid = 0x140c [0154.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0288 [0154.784] wcscpy (in: _Dest=0x69c0288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0154.784] wcscat (in: _Dest=0x69c0288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0154.784] wcscat (in: _Dest=0x69c0288, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*" [0154.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0154.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0156.455] wcscmp (_String1=".", _String2=".") returned 0 [0156.455] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.456] wcscmp (_String1="..", _String2=".") returned 1 [0156.456] wcscmp (_String1="..", _String2="..") returned 0 [0156.456] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.456] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.456] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7cd0 [0156.456] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0156.456] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0156.456] wcscat (in: _Dest=0x2ff7cd0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" [0157.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0157.877] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.877] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.877] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1268 [0157.877] wcscpy (in: _Dest=0x3ee1268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0157.877] wcscat (in: _Dest=0x3ee1268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0157.877] wcscat (in: _Dest=0x3ee1268, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" [0157.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0157.878] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.878] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.878] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0157.878] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0157.878] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0157.878] wcscat (in: _Dest=0x3df0648, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" [0157.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0157.879] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.879] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0157.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0157.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0288) returned 1 [0157.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 2223 os_tid = 0x1410 [0154.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0328 [0154.784] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0154.785] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0154.785] wcscat (in: _Dest=0x69c0328, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*" [0154.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0154.785] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0156.456] wcscmp (_String1=".", _String2=".") returned 0 [0156.456] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.456] wcscmp (_String1="..", _String2=".") returned 1 [0156.456] wcscmp (_String1="..", _String2="..") returned 0 [0156.456] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.456] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.456] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0156.456] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0156.456] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0156.457] wcscat (in: _Dest=0x2ff63a8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" [0157.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0157.226] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.226] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.226] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1490 [0157.226] wcscpy (in: _Dest=0x3ee1490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0157.226] wcscat (in: _Dest=0x3ee1490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0157.226] wcscat (in: _Dest=0x3ee1490, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" [0157.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0157.227] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.227] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.227] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0157.227] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0157.227] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0157.227] wcscat (in: _Dest=0x3df0648, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" [0157.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0157.228] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.228] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0157.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0157.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 [0157.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 2224 os_tid = 0x1414 [0154.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c03c8 [0154.789] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0154.789] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0154.789] wcscat (in: _Dest=0x69c03c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*" [0154.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0154.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0157.723] wcscmp (_String1=".", _String2=".") returned 0 [0157.723] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.723] wcscmp (_String1="..", _String2=".") returned 1 [0157.723] wcscmp (_String1="..", _String2="..") returned 0 [0157.723] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.723] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.723] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1a50 [0157.724] wcscpy (in: _Dest=0x3ee1a50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0157.724] wcscat (in: _Dest=0x3ee1a50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0157.724] wcscat (in: _Dest=0x3ee1a50, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" [0160.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0160.635] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0160.635] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0160.635] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0160.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bc98 [0160.635] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0160.636] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0160.636] wcscat (in: _Dest=0x35bc98, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" [0160.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0160.637] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0160.637] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0160.637] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0160.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee13d8 [0160.637] wcscpy (in: _Dest=0x3ee13d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0160.637] wcscat (in: _Dest=0x3ee13d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0160.637] wcscat (in: _Dest=0x3ee13d8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" [0160.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0160.638] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0160.639] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0160.639] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0160.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1320 [0160.639] wcscpy (in: _Dest=0x3ee1320, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0160.639] wcscat (in: _Dest=0x3ee1320, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0160.639] wcscat (in: _Dest=0x3ee1320, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" [0160.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0160.640] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0160.640] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0160.640] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0160.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1f58 [0160.640] wcscpy (in: _Dest=0x3ee1f58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0160.640] wcscat (in: _Dest=0x3ee1f58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0160.640] wcscat (in: _Dest=0x3ee1f58, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" [0160.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0160.642] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0160.642] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0160.642] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0160.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3deff40 [0160.642] wcscpy (in: _Dest=0x3deff40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0160.642] wcscat (in: _Dest=0x3deff40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0160.642] wcscat (in: _Dest=0x3deff40, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" [0160.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3deff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0160.644] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0160.644] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0160.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0160.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 [0160.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 2225 os_tid = 0x1418 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0468 [0154.790] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0154.790] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0154.790] wcscat (in: _Dest=0x69c0468, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*" [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0154.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0156.448] wcscmp (_String1=".", _String2=".") returned 0 [0156.448] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.448] wcscmp (_String1="..", _String2=".") returned 1 [0156.448] wcscmp (_String1="..", _String2="..") returned 0 [0156.448] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.448] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.448] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff77c8 [0156.448] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0156.448] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0156.449] wcscat (in: _Dest=0x2ff77c8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" [0157.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff77c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0157.216] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.216] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.216] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7b60 [0157.216] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0157.216] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0157.216] wcscat (in: _Dest=0x2ff7b60, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" [0157.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0157.217] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.217] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.217] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df07d8 [0157.218] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0157.218] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0157.218] wcscat (in: _Dest=0x3df07d8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" [0157.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0157.219] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.219] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0157.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0157.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 [0157.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 2226 os_tid = 0x141c [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0508 [0154.790] wcscpy (in: _Dest=0x69c0508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0154.790] wcscat (in: _Dest=0x69c0508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0154.790] wcscat (in: _Dest=0x69c0508, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*" [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0154.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0157.724] wcscmp (_String1=".", _String2=".") returned 0 [0157.724] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.724] wcscmp (_String1="..", _String2=".") returned 1 [0157.724] wcscmp (_String1="..", _String2="..") returned 0 [0157.724] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.724] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.724] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1b08 [0157.724] wcscpy (in: _Dest=0x3ee1b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0157.724] wcscat (in: _Dest=0x3ee1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0157.724] wcscat (in: _Dest=0x3ee1b08, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" [0161.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0161.342] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0161.342] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0161.342] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0161.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2fc0 [0161.342] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0161.342] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0161.343] wcscat (in: _Dest=0x3ea2fc0, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" [0161.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0161.344] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0161.344] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0161.344] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0161.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0161.344] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0161.344] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0161.344] wcscat (in: _Dest=0x2ff7c18, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" [0161.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0161.347] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.347] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.348] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0161.348] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0161.348] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0161.348] wcscat (in: _Dest=0x2ff6740, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" [0161.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0161.349] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0161.349] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0161.349] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0161.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6fe0 [0161.349] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0161.349] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0161.350] wcscat (in: _Dest=0x2ff6fe0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" [0161.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0161.351] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.351] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.351] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f2c8 [0161.351] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0161.351] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0161.351] wcscat (in: _Dest=0x682f2c8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" [0161.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0161.352] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.352] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0161.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0161.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0508) returned 1 [0161.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 2227 os_tid = 0x1420 [0154.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c05a8 [0154.791] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0154.791] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0154.791] wcscat (in: _Dest=0x69c05a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*" [0154.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0154.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0157.718] wcscmp (_String1=".", _String2=".") returned 0 [0157.718] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.718] wcscmp (_String1="..", _String2=".") returned 1 [0157.718] wcscmp (_String1="..", _String2="..") returned 0 [0157.718] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.718] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.718] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee11b0 [0157.718] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0157.718] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0157.718] wcscat (in: _Dest=0x3ee11b0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" [0159.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0159.703] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.703] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.703] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0159.703] wcscpy (in: _Dest=0x35c168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0159.703] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0159.703] wcscat (in: _Dest=0x35c168, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" [0159.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0159.704] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.704] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.704] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff63a8 [0159.704] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0159.704] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0159.704] wcscat (in: _Dest=0x2ff63a8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" [0159.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0159.705] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.705] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.705] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6c48 [0159.706] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0159.706] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0159.706] wcscat (in: _Dest=0x2ff6c48, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" [0159.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0159.707] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.707] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.707] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7b60 [0159.707] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0159.707] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0159.707] wcscat (in: _Dest=0x2ff7b60, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" [0159.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0159.708] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.708] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.708] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df00d0 [0159.709] wcscpy (in: _Dest=0x3df00d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0159.709] wcscat (in: _Dest=0x3df00d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0159.709] wcscat (in: _Dest=0x3df00d0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" [0159.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df00d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0159.710] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.710] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0159.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0159.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 [0159.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 2228 os_tid = 0xb00 [0154.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0648 [0154.792] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0154.792] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0154.792] wcscat (in: _Dest=0x69c0648, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*" [0154.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0154.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0156.462] wcscmp (_String1=".", _String2=".") returned 0 [0156.462] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.462] wcscmp (_String1="..", _String2=".") returned 1 [0156.462] wcscmp (_String1="..", _String2="..") returned 0 [0156.462] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.462] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.462] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6740 [0156.462] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0156.462] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0156.462] wcscat (in: _Dest=0x2ff6740, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" [0159.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0159.723] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.723] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.723] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee13d8 [0159.723] wcscpy (in: _Dest=0x3ee13d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0159.723] wcscat (in: _Dest=0x3ee13d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0159.723] wcscat (in: _Dest=0x3ee13d8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" [0159.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0159.724] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.725] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.725] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3deff40 [0159.725] wcscpy (in: _Dest=0x3deff40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0159.725] wcscat (in: _Dest=0x3deff40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0159.725] wcscat (in: _Dest=0x3deff40, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" [0159.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3deff40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0159.726] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.726] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0159.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0159.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 [0159.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 2229 os_tid = 0x5c8 [0154.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c06e8 [0154.792] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0154.792] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0154.792] wcscat (in: _Dest=0x69c06e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*" [0154.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0154.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0156.463] wcscmp (_String1=".", _String2=".") returned 0 [0156.463] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.463] wcscmp (_String1="..", _String2=".") returned 1 [0156.463] wcscmp (_String1="..", _String2="..") returned 0 [0156.463] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.463] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.463] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff67f8 [0156.463] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0156.463] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0156.463] wcscat (in: _Dest=0x2ff67f8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" [0161.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0161.265] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0161.265] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0161.265] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0161.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2d00 [0161.265] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0161.265] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0161.265] wcscat (in: _Dest=0x3ea2d00, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" [0161.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0161.266] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.266] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.266] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0161.266] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0161.266] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0161.266] wcscat (in: _Dest=0x2ff79f0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" [0161.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0161.269] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.269] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.269] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f138 [0161.269] wcscpy (in: _Dest=0x682f138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0161.269] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0161.269] wcscat (in: _Dest=0x682f138, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" [0161.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0161.270] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.270] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0161.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0161.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 [0161.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 2230 os_tid = 0x14f0 [0154.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0788 [0154.793] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0154.793] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0154.793] wcscat (in: _Dest=0x69c0788, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*" [0154.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0154.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0156.463] wcscmp (_String1=".", _String2=".") returned 0 [0156.463] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.463] wcscmp (_String1="..", _String2=".") returned 1 [0156.463] wcscmp (_String1="..", _String2="..") returned 0 [0156.463] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.463] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.464] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6fe0 [0156.464] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0156.464] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0156.464] wcscat (in: _Dest=0x2ff6fe0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" [0157.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0157.230] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0157.231] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0157.231] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0157.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bd48 [0157.231] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0157.231] wcscat (in: _Dest=0x35bd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0157.231] wcscat (in: _Dest=0x35bd48, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" [0157.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0157.232] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.232] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.232] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1548 [0157.232] wcscpy (in: _Dest=0x3ee1548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0157.232] wcscat (in: _Dest=0x3ee1548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0157.232] wcscat (in: _Dest=0x3ee1548, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" [0157.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0157.233] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.233] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.233] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0580 [0157.233] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0157.233] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0157.233] wcscat (in: _Dest=0x3df0580, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" [0157.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c [0157.234] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.234] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0157.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0157.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 [0157.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 2231 os_tid = 0xc4c [0154.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0828 [0154.794] wcscpy (in: _Dest=0x69c0828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0154.794] wcscat (in: _Dest=0x69c0828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0154.794] wcscat (in: _Dest=0x69c0828, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*" [0154.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0154.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0156.464] wcscmp (_String1=".", _String2=".") returned 0 [0156.464] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.464] wcscmp (_String1="..", _String2=".") returned 1 [0156.464] wcscmp (_String1="..", _String2="..") returned 0 [0156.464] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.464] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.464] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0156.464] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0156.464] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0156.464] wcscat (in: _Dest=0x2ff7c18, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" [0157.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0157.881] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.881] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.882] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee13d8 [0157.882] wcscpy (in: _Dest=0x3ee13d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0157.882] wcscat (in: _Dest=0x3ee13d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0157.882] wcscat (in: _Dest=0x3ee13d8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" [0157.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee13d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0157.883] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.883] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.883] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0157.883] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0157.883] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0157.883] wcscat (in: _Dest=0x3df0710, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" [0157.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0157.885] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.885] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0157.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0157.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0828) returned 1 [0157.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 2232 os_tid = 0xdc4 [0154.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c08c8 [0154.794] wcscpy (in: _Dest=0x69c08c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0154.794] wcscat (in: _Dest=0x69c08c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0154.794] wcscat (in: _Dest=0x69c08c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*" [0154.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0154.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0156.465] wcscmp (_String1=".", _String2=".") returned 0 [0156.465] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.465] wcscmp (_String1="..", _String2=".") returned 1 [0156.465] wcscmp (_String1="..", _String2="..") returned 0 [0156.465] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.465] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.465] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6180 [0156.465] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0156.465] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0156.465] wcscat (in: _Dest=0x2ff6180, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" [0158.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0158.478] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.478] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.478] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0158.478] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0158.478] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0158.478] wcscat (in: _Dest=0x2ff7378, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" [0158.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0158.479] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.479] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.479] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0260 [0158.480] wcscpy (in: _Dest=0x3df0260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0158.480] wcscat (in: _Dest=0x3df0260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0158.480] wcscat (in: _Dest=0x3df0260, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" [0158.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0158.482] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.482] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0158.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0158.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c08c8) returned 1 [0158.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 2233 os_tid = 0x6d4 [0154.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0968 [0154.795] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0154.795] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0154.795] wcscat (in: _Dest=0x69c0968, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*" [0154.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0154.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0157.719] wcscmp (_String1=".", _String2=".") returned 0 [0157.719] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.719] wcscmp (_String1="..", _String2=".") returned 1 [0157.719] wcscmp (_String1="..", _String2="..") returned 0 [0157.719] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.719] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.719] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee16b8 [0157.719] wcscpy (in: _Dest=0x3ee16b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0157.719] wcscat (in: _Dest=0x3ee16b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0157.719] wcscat (in: _Dest=0x3ee16b8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" [0161.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee16b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0161.319] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0161.319] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0161.319] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0161.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2f10 [0161.319] wcscpy (in: _Dest=0x3ea2f10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.319] wcscat (in: _Dest=0x3ea2f10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.319] wcscat (in: _Dest=0x3ea2f10, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" [0161.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0161.320] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0161.320] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0161.320] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0161.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6db8 [0161.321] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.321] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.321] wcscat (in: _Dest=0x2ff6db8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" [0161.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0161.322] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.322] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.322] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6e70 [0161.322] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.322] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.322] wcscat (in: _Dest=0x2ff6e70, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" [0161.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0161.324] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0161.324] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0161.324] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0161.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0161.324] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.324] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.324] wcscat (in: _Dest=0x2ff6968, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" [0161.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0161.325] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.325] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.325] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f200 [0161.325] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.325] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.325] wcscat (in: _Dest=0x682f200, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" [0161.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0161.327] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.327] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0161.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0161.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 [0161.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 2234 os_tid = 0x608 [0154.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0a08 [0154.796] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0154.796] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0154.796] wcscat (in: _Dest=0x69c0a08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*" [0154.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0154.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0156.467] wcscmp (_String1=".", _String2=".") returned 0 [0156.467] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.467] wcscmp (_String1="..", _String2=".") returned 1 [0156.467] wcscmp (_String1="..", _String2="..") returned 0 [0156.467] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0d5d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.467] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.467] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7e40 [0156.467] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0156.467] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0156.467] wcscat (in: _Dest=0x2ff7e40, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" [0159.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0159.628] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.628] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.628] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6fe0 [0159.628] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0159.628] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0159.628] wcscat (in: _Dest=0x2ff6fe0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" [0159.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0159.629] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.629] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.630] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defe78 [0159.630] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0159.630] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0159.630] wcscat (in: _Dest=0x3defe78, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" [0159.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3defe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0159.631] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.631] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0159.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0159.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 [0159.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 2235 os_tid = 0x1508 [0154.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0aa8 [0154.796] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0154.796] wcscat (in: _Dest=0x69c0aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0154.796] wcscat (in: _Dest=0x69c0aa8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*" [0154.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cd08 [0154.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0157.719] wcscmp (_String1=".", _String2=".") returned 0 [0157.719] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.719] wcscmp (_String1="..", _String2=".") returned 1 [0157.719] wcscmp (_String1="..", _String2="..") returned 0 [0157.719] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.719] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.719] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1770 [0157.720] wcscpy (in: _Dest=0x3ee1770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0157.720] wcscat (in: _Dest=0x3ee1770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0157.720] wcscat (in: _Dest=0x3ee1770, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" [0159.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0159.604] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.604] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.604] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0159.604] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0159.604] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0159.604] wcscat (in: _Dest=0x35c588, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" [0159.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0159.605] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.605] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.605] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0159.606] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0159.606] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0159.606] wcscat (in: _Dest=0x2ff7378, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" [0159.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0159.607] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.607] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.607] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6180 [0159.607] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0159.607] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0159.607] wcscat (in: _Dest=0x2ff6180, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" [0159.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0159.608] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.608] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.608] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6db8 [0159.608] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0159.608] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0159.608] wcscat (in: _Dest=0x2ff6db8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" [0159.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0159.609] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.609] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.609] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0260 [0159.609] wcscpy (in: _Dest=0x3df0260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0159.609] wcscat (in: _Dest=0x3df0260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0159.609] wcscat (in: _Dest=0x3df0260, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" [0159.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0159.610] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.610] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0159.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cd08) returned 1 [0159.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 [0159.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 2236 os_tid = 0x150c [0154.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0b48 [0154.797] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0154.797] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0154.797] wcscat (in: _Dest=0x69c0b48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*" [0154.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0154.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0157.725] wcscmp (_String1=".", _String2=".") returned 0 [0157.725] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.725] wcscmp (_String1="..", _String2=".") returned 1 [0157.725] wcscmp (_String1="..", _String2="..") returned 0 [0157.725] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.725] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.725] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1bc0 [0157.725] wcscpy (in: _Dest=0x3ee1bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0157.725] wcscat (in: _Dest=0x3ee1bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0157.725] wcscat (in: _Dest=0x3ee1bc0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" [0159.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0159.713] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.713] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.713] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bbe8 [0159.713] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.714] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.714] wcscat (in: _Dest=0x35bbe8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" [0159.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0159.715] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.715] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.715] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff77c8 [0159.715] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.715] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.715] wcscat (in: _Dest=0x2ff77c8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" [0159.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff77c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0159.716] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.716] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.716] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1c78 [0159.716] wcscpy (in: _Dest=0x3ee1c78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.716] wcscat (in: _Dest=0x3ee1c78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.716] wcscat (in: _Dest=0x3ee1c78, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" [0159.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0159.717] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.717] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.717] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1548 [0159.717] wcscpy (in: _Dest=0x3ee1548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.717] wcscat (in: _Dest=0x3ee1548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.717] wcscat (in: _Dest=0x3ee1548, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" [0159.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0159.718] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.718] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.718] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0008 [0159.718] wcscpy (in: _Dest=0x3df0008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.718] wcscat (in: _Dest=0x3df0008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.718] wcscat (in: _Dest=0x3df0008, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" [0159.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0159.719] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.720] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 [0159.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 2237 os_tid = 0x1510 [0154.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0be8 [0154.798] wcscpy (in: _Dest=0x69c0be8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0154.798] wcscat (in: _Dest=0x69c0be8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0154.798] wcscat (in: _Dest=0x69c0be8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*" [0154.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697adc0 [0154.798] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0157.722] wcscmp (_String1=".", _String2=".") returned 0 [0157.722] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.722] wcscmp (_String1="..", _String2=".") returned 1 [0157.722] wcscmp (_String1="..", _String2="..") returned 0 [0157.722] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.722] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.722] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee18e0 [0157.722] wcscpy (in: _Dest=0x3ee18e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0157.722] wcscat (in: _Dest=0x3ee18e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0157.722] wcscat (in: _Dest=0x3ee18e0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" [0161.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee18e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0161.476] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0161.476] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0161.476] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0161.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2150 [0161.476] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0161.476] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0161.476] wcscat (in: _Dest=0x3ea2150, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" [0161.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0161.478] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0161.478] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0161.478] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0161.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0161.478] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0161.478] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0161.478] wcscat (in: _Dest=0x2ff7e40, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" [0161.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0161.479] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.479] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.479] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0161.479] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0161.479] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0161.479] wcscat (in: _Dest=0x2ff6b90, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" [0161.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0161.480] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0161.480] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0161.480] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0161.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0161.480] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0161.480] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0161.480] wcscat (in: _Dest=0x2ff7aa8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" [0161.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0161.481] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.482] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.482] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f520 [0161.482] wcscpy (in: _Dest=0x682f520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0161.482] wcscat (in: _Dest=0x682f520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0161.482] wcscat (in: _Dest=0x682f520, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" [0161.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0161.483] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.483] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0161.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697adc0) returned 1 [0161.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0be8) returned 1 [0161.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfec8) returned 1 Thread: id = 2238 os_tid = 0x1514 [0154.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0c88 [0154.799] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0154.799] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0154.799] wcscat (in: _Dest=0x69c0c88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*" [0154.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d910 [0154.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0157.726] wcscmp (_String1=".", _String2=".") returned 0 [0157.726] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.726] wcscmp (_String1="..", _String2=".") returned 1 [0157.726] wcscmp (_String1="..", _String2="..") returned 0 [0157.726] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.726] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.726] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1c78 [0157.726] wcscpy (in: _Dest=0x3ee1c78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0157.726] wcscat (in: _Dest=0x3ee1c78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0157.726] wcscat (in: _Dest=0x3ee1c78, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" [0158.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0158.454] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0158.454] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0158.454] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0158.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0158.454] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.454] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.454] wcscat (in: _Dest=0x35b7c8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" [0158.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0158.455] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0158.455] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0158.455] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0158.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0158.455] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.455] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.455] wcscat (in: _Dest=0x2ff6b90, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" [0158.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0158.456] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.456] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.457] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0158.457] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.457] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.457] wcscat (in: _Dest=0x2ff79f0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" [0158.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0158.458] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0158.458] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0158.458] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0158.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7150 [0158.458] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.458] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.458] wcscat (in: _Dest=0x2ff7150, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" [0158.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0158.459] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.460] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.460] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0580 [0158.460] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.460] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.460] wcscat (in: _Dest=0x3df0580, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" [0158.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0158.461] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.461] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0158.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d910) returned 1 [0158.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 [0158.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 2239 os_tid = 0x1018 [0154.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0d28 [0154.800] wcscpy (in: _Dest=0x69c0d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0154.800] wcscat (in: _Dest=0x69c0d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0154.800] wcscat (in: _Dest=0x69c0d28, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*" [0154.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0154.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0156.451] wcscmp (_String1=".", _String2=".") returned 0 [0156.451] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.451] wcscmp (_String1="..", _String2=".") returned 1 [0156.451] wcscmp (_String1="..", _String2="..") returned 0 [0156.451] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.451] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.451] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7098 [0156.451] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0156.451] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0156.451] wcscat (in: _Dest=0x2ff7098, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" [0157.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0157.872] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.872] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.872] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1320 [0157.872] wcscpy (in: _Dest=0x3ee1320, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0157.872] wcscat (in: _Dest=0x3ee1320, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0157.872] wcscat (in: _Dest=0x3ee1320, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" [0157.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0157.873] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.873] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.873] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0580 [0157.873] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0157.873] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0157.874] wcscat (in: _Dest=0x3df0580, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" [0157.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0157.874] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.875] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0157.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0157.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0d28) returned 1 [0157.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0008) returned 1 Thread: id = 2240 os_tid = 0x1520 [0154.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0dc8 [0154.801] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0154.801] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0154.801] wcscat (in: _Dest=0x69c0dc8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*" [0154.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b9c8 [0154.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0156.473] wcscmp (_String1=".", _String2=".") returned 0 [0156.473] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.473] wcscmp (_String1="..", _String2=".") returned 1 [0156.473] wcscmp (_String1="..", _String2="..") returned 0 [0156.473] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0156.473] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0156.473] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0156.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7378 [0156.473] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0156.473] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0156.473] wcscat (in: _Dest=0x2ff7378, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" [0157.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0157.236] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0157.236] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0157.236] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0157.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1600 [0157.236] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0157.236] wcscat (in: _Dest=0x3ee1600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0157.237] wcscat (in: _Dest=0x3ee1600, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" [0157.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0157.237] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0157.237] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0157.237] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0157.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df04b8 [0157.238] wcscpy (in: _Dest=0x3df04b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0157.238] wcscat (in: _Dest=0x3df04b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0157.238] wcscat (in: _Dest=0x3df04b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" [0157.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df04b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0157.239] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0157.239] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0157.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b9c8) returned 1 [0157.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 [0157.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 2241 os_tid = 0x3e8 [0154.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0e68 [0154.801] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.801] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.801] wcscat (in: _Dest=0x69c0e68, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*" [0154.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0154.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0157.726] wcscmp (_String1=".", _String2=".") returned 0 [0157.726] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.726] wcscmp (_String1="..", _String2=".") returned 1 [0157.726] wcscmp (_String1="..", _String2="..") returned 0 [0157.726] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.726] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.726] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1d30 [0157.727] wcscpy (in: _Dest=0x3ee1d30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0157.727] wcscat (in: _Dest=0x3ee1d30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0157.727] wcscat (in: _Dest=0x3ee1d30, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" [0159.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0159.614] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.614] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.614] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0159.614] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0159.614] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0159.614] wcscat (in: _Dest=0x35b7c8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" [0159.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0159.615] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.615] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.615] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6f28 [0159.615] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0159.615] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0159.615] wcscat (in: _Dest=0x2ff6f28, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" [0159.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0159.616] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.616] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.616] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7150 [0159.617] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0159.617] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0159.617] wcscat (in: _Dest=0x2ff7150, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" [0159.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0159.618] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.618] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.618] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0159.618] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0159.618] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0159.618] wcscat (in: _Dest=0x2ff79f0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" [0159.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0159.619] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.619] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.619] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0328 [0159.619] wcscpy (in: _Dest=0x3df0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0159.619] wcscat (in: _Dest=0x3df0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0159.619] wcscat (in: _Dest=0x3df0328, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" [0159.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0159.620] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.620] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0159.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0159.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 [0159.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 2242 os_tid = 0x1524 [0154.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0f08 [0154.802] wcscpy (in: _Dest=0x69c0f08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0154.802] wcscat (in: _Dest=0x69c0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0154.802] wcscat (in: _Dest=0x69c0f08, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*" [0154.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0154.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0157.721] wcscmp (_String1=".", _String2=".") returned 0 [0157.721] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.721] wcscmp (_String1="..", _String2=".") returned 1 [0157.721] wcscmp (_String1="..", _String2="..") returned 0 [0157.721] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0157.721] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0157.721] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0157.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1828 [0157.721] wcscpy (in: _Dest=0x3ee1828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0157.721] wcscat (in: _Dest=0x3ee1828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0157.721] wcscat (in: _Dest=0x3ee1828, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" [0158.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0158.441] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0158.441] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0158.441] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0158.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c218 [0158.441] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0158.441] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0158.441] wcscat (in: _Dest=0x35c218, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" [0158.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0158.442] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0158.442] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0158.442] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0158.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7cd0 [0158.443] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0158.443] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0158.443] wcscat (in: _Dest=0x2ff7cd0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" [0158.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0158.444] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.444] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.444] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7098 [0158.444] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0158.444] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0158.444] wcscat (in: _Dest=0x2ff7098, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" [0158.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0158.446] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0158.446] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0158.446] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0158.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6e70 [0158.446] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0158.446] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0158.446] wcscat (in: _Dest=0x2ff6e70, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" [0158.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0158.447] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.447] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.447] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0158.448] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0158.448] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0158.448] wcscat (in: _Dest=0x3df0648, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" [0158.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0158.449] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.449] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0158.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0158.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0f08) returned 1 [0158.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 2243 os_tid = 0x1528 [0154.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 0x20 [0156.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0156.446] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.447] GetLastError () returned 0x5 [0156.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0156.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 2244 os_tid = 0x152c [0154.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf")) returned 0x20 [0158.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0158.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.770] GetLastError () returned 0x5 [0158.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0158.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 2245 os_tid = 0x14d4 [0154.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf")) returned 0x20 [0158.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0158.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.768] GetLastError () returned 0x5 [0158.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0158.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 2246 os_tid = 0x1534 [0154.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf")) returned 0x20 [0158.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0158.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.766] GetLastError () returned 0x5 [0158.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0158.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 2247 os_tid = 0x14e4 [0154.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf")) returned 0x20 [0158.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0158.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.761] GetLastError () returned 0x5 [0158.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0158.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 2248 os_tid = 0x153c [0154.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf")) returned 0x20 [0158.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0158.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.805] GetLastError () returned 0x5 [0158.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0158.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 2249 os_tid = 0x10f4 [0154.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf")) returned 0x20 [0158.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0158.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.803] GetLastError () returned 0x5 [0158.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0158.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 2250 os_tid = 0x1560 [0154.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf")) returned 0x20 [0158.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0158.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.801] GetLastError () returned 0x5 [0158.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0158.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 2251 os_tid = 0x10f8 [0154.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf")) returned 0x20 [0158.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0158.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.799] GetLastError () returned 0x5 [0158.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0158.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 2252 os_tid = 0x10fc [0154.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf")) returned 0x20 [0158.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0158.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.796] GetLastError () returned 0x5 [0158.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0158.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 Thread: id = 2253 os_tid = 0x1100 [0154.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf")) returned 0x20 [0158.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0158.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.795] GetLastError () returned 0x5 [0158.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0158.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959670) returned 1 Thread: id = 2254 os_tid = 0x1104 [0154.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf")) returned 0x20 [0158.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0158.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.792] GetLastError () returned 0x5 [0158.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0158.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959708) returned 1 Thread: id = 2255 os_tid = 0x7ec [0154.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf")) returned 0x20 [0158.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0158.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.784] GetLastError () returned 0x5 [0158.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0158.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69597a0) returned 1 Thread: id = 2256 os_tid = 0x1108 [0154.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf")) returned 0x20 [0158.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0158.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.783] GetLastError () returned 0x5 [0158.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0158.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 Thread: id = 2257 os_tid = 0xb74 [0154.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf")) returned 0x20 [0158.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0158.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.781] GetLastError () returned 0x5 [0158.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0158.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598d0) returned 1 Thread: id = 2258 os_tid = 0xe64 [0154.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf")) returned 0x20 [0158.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0158.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.779] GetLastError () returned 0x5 [0158.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0158.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959968) returned 1 Thread: id = 2259 os_tid = 0xb84 [0154.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf")) returned 0x20 [0158.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0158.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.777] GetLastError () returned 0x5 [0158.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0158.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a00) returned 1 Thread: id = 2260 os_tid = 0xb44 [0154.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf")) returned 0x20 [0158.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0158.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.775] GetLastError () returned 0x5 [0158.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0158.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a98) returned 1 Thread: id = 2261 os_tid = 0x110c [0154.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf")) returned 0x20 [0158.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0158.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.774] GetLastError () returned 0x5 [0158.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959b30) returned 1 Thread: id = 2262 os_tid = 0x1110 [0154.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf")) returned 0x20 [0158.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0158.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.772] GetLastError () returned 0x5 [0158.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0158.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959bc8) returned 1 Thread: id = 2263 os_tid = 0x1114 [0154.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf")) returned 0x20 [0158.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0158.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.806] GetLastError () returned 0x5 [0158.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0158.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ce8) returned 1 Thread: id = 2264 os_tid = 0x1118 [0154.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf")) returned 0x20 [0158.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0158.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.059] GetLastError () returned 0x5 [0158.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0158.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1d80) returned 1 Thread: id = 2265 os_tid = 0x111c [0154.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf")) returned 0x20 [0155.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0155.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.465] GetLastError () returned 0x5 [0155.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0155.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e18) returned 1 Thread: id = 2266 os_tid = 0x1120 [0154.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf")) returned 0x20 [0158.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0158.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.825] GetLastError () returned 0x5 [0158.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0158.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1eb0) returned 1 Thread: id = 2267 os_tid = 0x1124 [0155.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf")) returned 0x20 [0158.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0158.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.808] GetLastError () returned 0x5 [0158.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0158.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f48) returned 1 Thread: id = 2270 os_tid = 0x1130 [0155.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif")) returned 0x20 [0158.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0158.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.172] GetLastError () returned 0x5 [0158.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0158.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 2271 os_tid = 0x1134 [0155.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif")) returned 0x20 [0158.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0158.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.171] GetLastError () returned 0x5 [0158.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0158.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 2272 os_tid = 0x1138 [0155.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif")) returned 0x20 [0158.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0158.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.169] GetLastError () returned 0x5 [0158.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0158.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 2273 os_tid = 0x113c [0155.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif")) returned 0x20 [0158.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0158.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.168] GetLastError () returned 0x5 [0158.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0158.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 2274 os_tid = 0x1150 [0155.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif")) returned 0x20 [0158.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0158.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.167] GetLastError () returned 0x5 [0158.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0158.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 2275 os_tid = 0x1154 [0155.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif")) returned 0x20 [0158.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0158.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.165] GetLastError () returned 0x5 [0158.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0158.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d958) returned 1 Thread: id = 2276 os_tid = 0x1158 [0155.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif")) returned 0x20 [0156.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0156.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.099] GetLastError () returned 0x5 [0156.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0156.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 2277 os_tid = 0xdac [0155.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif")) returned 0x20 [0156.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0156.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.100] GetLastError () returned 0x5 [0156.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0156.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 2278 os_tid = 0x1164 [0155.486] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0155.489] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0155.489] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.489] GetLastError () returned 0x5 [0155.489] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0155.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 Thread: id = 2279 os_tid = 0x15b8 [0155.490] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0155.491] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0155.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.491] GetLastError () returned 0x5 [0155.491] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0155.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 2280 os_tid = 0x89c [0155.492] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0155.493] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0155.493] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.493] GetLastError () returned 0x5 [0155.493] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0155.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 2281 os_tid = 0x116c [0155.495] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0155.495] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0155.495] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.496] GetLastError () returned 0x5 [0155.496] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0155.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 2282 os_tid = 0x15bc [0155.498] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0155.498] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0155.499] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.499] GetLastError () returned 0x5 [0155.499] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0155.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 2283 os_tid = 0x15c0 [0155.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat")) returned 0x20 [0162.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0162.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.138] GetLastError () returned 0x5 [0162.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0162.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 Thread: id = 2284 os_tid = 0x15e0 [0155.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5f08 [0155.502] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0155.502] wcscat (in: _Dest=0x66e5f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0155.502] wcscat (in: _Dest=0x66e5f08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*" [0155.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0155.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0162.508] wcscmp (_String1=".", _String2=".") returned 0 [0162.508] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.508] wcscmp (_String1="..", _String2=".") returned 1 [0162.508] wcscmp (_String1="..", _String2="..") returned 0 [0162.508] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x8589a650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0162.508] wcscmp (_String1="APPLAUSE.WAV", _String2=".") returned 1 [0162.508] wcscmp (_String1="APPLAUSE.WAV", _String2="..") returned 1 [0162.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cd60 [0162.509] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0162.509] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0162.509] wcscat (in: _Dest=0x682cd60, _Source="APPLAUSE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" [0163.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0163.934] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b9000, ftCreationTime.dwHighDateTime=0x1bfbf53, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x707b9000, ftLastWriteTime.dwHighDateTime=0x1bfbf53, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0163.934] wcscmp (_String1="ARROW.WAV", _String2=".") returned 1 [0163.934] wcscmp (_String1="ARROW.WAV", _String2="..") returned 1 [0163.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edac78 [0163.934] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.934] wcscat (in: _Dest=0x3edac78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.934] wcscat (in: _Dest=0x3edac78, _Source="ARROW.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" [0163.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edac78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0163.940] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ac4900, ftCreationTime.dwHighDateTime=0x1bfbf50, ftLastAccessTime.dwLowDateTime=0x76cf2450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25ac4900, ftLastWriteTime.dwHighDateTime=0x1bfbf50, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0163.941] wcscmp (_String1="BOMB.WAV", _String2=".") returned 1 [0163.941] wcscmp (_String1="BOMB.WAV", _String2="..") returned 1 [0163.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbef8 [0163.941] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.941] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.941] wcscat (in: _Dest=0x3edbef8, _Source="BOMB.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" [0163.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0163.942] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a29200, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5a29200, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0163.942] wcscmp (_String1="BREEZE.WAV", _String2=".") returned 1 [0163.943] wcscmp (_String1="BREEZE.WAV", _String2="..") returned 1 [0163.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb1f8 [0163.943] wcscpy (in: _Dest=0x3edb1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.943] wcscat (in: _Dest=0x3edb1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.943] wcscat (in: _Dest=0x3edb1f8, _Source="BREEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" [0163.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0163.944] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76e95370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0163.944] wcscmp (_String1="CAMERA.WAV", _String2=".") returned 1 [0163.944] wcscmp (_String1="CAMERA.WAV", _String2="..") returned 1 [0163.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb878 [0163.944] wcscpy (in: _Dest=0x3edb878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.944] wcscat (in: _Dest=0x3edb878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.944] wcscat (in: _Dest=0x3edb878, _Source="CAMERA.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" [0163.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0163.946] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0163.946] wcscmp (_String1="CASHREG.WAV", _String2=".") returned 1 [0163.946] wcscmp (_String1="CASHREG.WAV", _String2="..") returned 1 [0163.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ce70 [0163.946] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.946] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.946] wcscat (in: _Dest=0x682ce70, _Source="CASHREG.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" [0163.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0163.948] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0163.948] wcscmp (_String1="CHIMES.WAV", _String2=".") returned 1 [0163.948] wcscmp (_String1="CHIMES.WAV", _String2="..") returned 1 [0163.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edb478 [0163.948] wcscpy (in: _Dest=0x3edb478, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.948] wcscat (in: _Dest=0x3edb478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.948] wcscat (in: _Dest=0x3edb478, _Source="CHIMES.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" [0163.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0163.950] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94f21c00, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94f21c00, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0163.950] wcscmp (_String1="CLICK.WAV", _String2=".") returned 1 [0163.950] wcscmp (_String1="CLICK.WAV", _String2="..") returned 1 [0163.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb778 [0163.950] wcscpy (in: _Dest=0x3edb778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.950] wcscat (in: _Dest=0x3edb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.950] wcscat (in: _Dest=0x3edb778, _Source="CLICK.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" [0163.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0163.952] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8441a600, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8441a600, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0163.952] wcscmp (_String1="COIN.WAV", _String2=".") returned 1 [0163.952] wcscmp (_String1="COIN.WAV", _String2="..") returned 1 [0163.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3eda378 [0163.952] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.952] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.952] wcscat (in: _Dest=0x3eda378, _Source="COIN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" [0163.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0163.953] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0163.954] wcscmp (_String1="DRUMROLL.WAV", _String2=".") returned 1 [0163.954] wcscmp (_String1="DRUMROLL.WAV", _String2="..") returned 1 [0163.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c810 [0163.954] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.954] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.954] wcscat (in: _Dest=0x682c810, _Source="DRUMROLL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" [0163.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0163.955] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0163.955] wcscmp (_String1="EXPLODE.WAV", _String2=".") returned 1 [0163.956] wcscmp (_String1="EXPLODE.WAV", _String2="..") returned 1 [0163.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25ea8 [0163.956] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.956] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.956] wcscat (in: _Dest=0x3f25ea8, _Source="EXPLODE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" [0163.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0163.957] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6b9000, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6b9000, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0163.957] wcscmp (_String1="HAMMER.WAV", _String2=".") returned 1 [0163.957] wcscmp (_String1="HAMMER.WAV", _String2="..") returned 1 [0163.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda878 [0163.957] wcscpy (in: _Dest=0x3eda878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.957] wcscat (in: _Dest=0x3eda878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.957] wcscat (in: _Dest=0x3eda878, _Source="HAMMER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" [0163.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0163.959] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0163.959] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0163.959] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0163.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edb5f8 [0163.959] wcscpy (in: _Dest=0x3edb5f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.959] wcscat (in: _Dest=0x3edb5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.959] wcscat (in: _Dest=0x3edb5f8, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" [0163.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0163.961] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89eabc00, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89eabc00, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0163.961] wcscmp (_String1="PUSH.WAV", _String2=".") returned 1 [0163.961] wcscmp (_String1="PUSH.WAV", _String2="..") returned 1 [0163.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbaf8 [0163.961] wcscpy (in: _Dest=0x3edbaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.961] wcscat (in: _Dest=0x3edbaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.961] wcscat (in: _Dest=0x3edbaf8, _Source="PUSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" [0163.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0163.962] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ef1e00, ftCreationTime.dwHighDateTime=0x1bfa314, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3ef1e00, ftLastWriteTime.dwHighDateTime=0x1bfa314, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0163.962] wcscmp (_String1="SUCTION.WAV", _String2=".") returned 1 [0163.962] wcscmp (_String1="SUCTION.WAV", _String2="..") returned 1 [0163.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27938 [0163.963] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.963] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.963] wcscat (in: _Dest=0x3f27938, _Source="SUCTION.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" [0163.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0163.964] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0163.964] wcscmp (_String1="TYPE.WAV", _String2=".") returned 1 [0163.964] wcscmp (_String1="TYPE.WAV", _String2="..") returned 1 [0163.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edb6f8 [0163.964] wcscpy (in: _Dest=0x3edb6f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.964] wcscat (in: _Dest=0x3edb6f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.964] wcscat (in: _Dest=0x3edb6f8, _Source="TYPE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" [0163.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edb6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0164.094] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82106800, ftCreationTime.dwHighDateTime=0x1bfbf52, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82106800, ftLastWriteTime.dwHighDateTime=0x1bfbf52, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0164.094] wcscmp (_String1="VOLTAGE.WAV", _String2=".") returned 1 [0164.094] wcscmp (_String1="VOLTAGE.WAV", _String2="..") returned 1 [0164.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26b68 [0164.095] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0164.095] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0164.095] wcscat (in: _Dest=0x3f26b68, _Source="VOLTAGE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" [0164.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0164.096] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0164.096] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0164.096] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0164.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b038 [0164.096] wcscpy (in: _Dest=0x674b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0164.096] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0164.096] wcscat (in: _Dest=0x674b038, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" [0164.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0164.098] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0164.098] wcscmp (_String1="WIND.WAV", _String2=".") returned 1 [0164.098] wcscmp (_String1="WIND.WAV", _String2="..") returned 1 [0164.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c338 [0164.098] wcscpy (in: _Dest=0x674c338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0164.098] wcscat (in: _Dest=0x674c338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0164.098] wcscat (in: _Dest=0x674c338, _Source="WIND.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" [0164.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0164.099] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0164.100] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0164.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0164.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0164.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 2285 os_tid = 0x15e4 [0155.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 0x20 [0162.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0162.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.146] GetLastError () returned 0x5 [0162.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0162.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 2286 os_tid = 0x15e8 [0155.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 0x20 [0162.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0162.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.209] GetLastError () returned 0x5 [0162.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0162.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0968) returned 1 Thread: id = 2287 os_tid = 0x1600 [0155.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 0x20 [0162.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0162.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.144] GetLastError () returned 0x5 [0162.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0162.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 Thread: id = 2288 os_tid = 0x1604 [0155.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 0x20 [0162.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0162.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.143] GetLastError () returned 0x5 [0162.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0162.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 2289 os_tid = 0x1608 [0155.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 0x20 [0162.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0162.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.141] GetLastError () returned 0x5 [0162.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0162.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 2290 os_tid = 0x160c [0155.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 0x20 [0162.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0162.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.139] GetLastError () returned 0x5 [0162.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0162.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 Thread: id = 2291 os_tid = 0x1614 [0155.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc")) returned 0x20 [0162.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0162.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.215] GetLastError () returned 0x5 [0162.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0162.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 2292 os_tid = 0x161c [0155.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl")) returned 0x20 [0159.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0159.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.951] GetLastError () returned 0x5 [0159.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0159.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 Thread: id = 2293 os_tid = 0x1620 [0155.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl")) returned 0x20 [0162.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0162.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.250] GetLastError () returned 0x5 [0162.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0162.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 2294 os_tid = 0xfc0 [0155.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd")) returned 0x20 [0162.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0162.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.270] GetLastError () returned 0x5 [0162.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0162.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b2b8) returned 1 Thread: id = 2295 os_tid = 0x1628 [0155.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm")) returned 0x20 [0162.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0162.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.106] GetLastError () returned 0x5 [0162.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0162.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b338) returned 1 Thread: id = 2296 os_tid = 0x11ec [0155.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d58630 [0155.517] wcscpy (in: _Dest=0x3d58630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0155.517] wcscat (in: _Dest=0x3d58630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0155.517] wcscat (in: _Dest=0x3d58630, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*" [0155.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d440 [0155.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0162.247] wcscmp (_String1=".", _String2=".") returned 0 [0162.247] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.247] wcscmp (_String1="..", _String2=".") returned 1 [0162.247] wcscmp (_String1="..", _String2="..") returned 0 [0162.247] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0162.247] wcscmp (_String1="BIBFORM.XML", _String2=".") returned 1 [0162.247] wcscmp (_String1="BIBFORM.XML", _String2="..") returned 1 [0162.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1048 [0162.247] wcscpy (in: _Dest=0x69c1048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0162.248] wcscat (in: _Dest=0x69c1048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0162.248] wcscat (in: _Dest=0x69c1048, _Source="BIBFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" [0163.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0163.692] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0163.692] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0163.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d440) returned 1 [0163.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58630) returned 1 [0163.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 2297 os_tid = 0x162c [0155.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl")) returned 0x20 [0162.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0162.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.131] GetLastError () returned 0x5 [0162.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0162.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b3b8) returned 1 Thread: id = 2298 os_tid = 0x4f8 [0155.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css")) returned 0x20 [0162.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0162.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.108] GetLastError () returned 0x5 [0162.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0162.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 Thread: id = 2299 os_tid = 0x1630 [0155.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd")) returned 0x20 [0162.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0162.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.114] GetLastError () returned 0x5 [0162.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0162.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 2300 os_tid = 0xdc0 [0155.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css")) returned 0x20 [0162.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0162.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.116] GetLastError () returned 0x5 [0162.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0162.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b438) returned 1 Thread: id = 2301 os_tid = 0x11f8 [0155.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn")) returned 0x20 [0162.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0162.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.252] GetLastError () returned 0x5 [0162.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0162.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0fa8) returned 1 Thread: id = 2302 os_tid = 0xa10 [0155.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn")) returned 0x20 [0162.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0162.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.242] GetLastError () returned 0x5 [0162.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0162.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1048) returned 1 Thread: id = 2303 os_tid = 0x1634 [0155.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml")) returned 0x20 [0162.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0162.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.118] GetLastError () returned 0x5 [0162.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0162.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 2304 os_tid = 0x1638 [0155.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d59b70 [0155.520] wcscpy (in: _Dest=0x3d59b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0155.520] wcscat (in: _Dest=0x3d59b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0155.520] wcscat (in: _Dest=0x3d59b70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*" [0155.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b028 [0155.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0162.552] wcscmp (_String1=".", _String2=".") returned 0 [0162.552] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.552] wcscmp (_String1="..", _String2=".") returned 1 [0162.552] wcscmp (_String1="..", _String2="..") returned 0 [0162.552] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbc8200, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dbc8200, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0162.552] wcscmp (_String1="+Connect to New Data Source.odc", _String2=".") returned -1 [0162.553] wcscmp (_String1="+Connect to New Data Source.odc", _String2="..") returned -1 [0162.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f138 [0162.553] wcscpy (in: _Dest=0x682f138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0162.553] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0162.553] wcscat (in: _Dest=0x682f138, _Source="+Connect to New Data Source.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" [0163.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0163.741] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b5a2800, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b5a2800, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0163.741] wcscmp (_String1="+NewSQLServerConnection.odc", _String2=".") returned -1 [0163.741] wcscmp (_String1="+NewSQLServerConnection.odc", _String2="..") returned -1 [0163.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332268 [0163.741] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0163.741] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0163.741] wcscat (in: _Dest=0x332268, _Source="+NewSQLServerConnection.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" [0163.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0163.742] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed46a800, ftCreationTime.dwHighDateTime=0x1bff7e7, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed46a800, ftLastWriteTime.dwHighDateTime=0x1bff7e7, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0163.742] wcscmp (_String1="DESKTOP.INI", _String2=".") returned 1 [0163.742] wcscmp (_String1="DESKTOP.INI", _String2="..") returned 1 [0163.742] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0163.742] wcscmp (_String1="FOLDER.ICO", _String2=".") returned 1 [0163.742] wcscmp (_String1="FOLDER.ICO", _String2="..") returned 1 [0163.742] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0163.742] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0163.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b028) returned 1 [0163.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59b70) returned 1 [0163.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 2305 os_tid = 0x1204 [0155.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl")) returned 0x20 [0162.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0162.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.120] GetLastError () returned 0x5 [0162.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0162.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b4b8) returned 1 Thread: id = 2306 os_tid = 0x120c [0155.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 0x20 [0162.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0162.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.122] GetLastError () returned 0x5 [0162.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0162.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 2307 os_tid = 0x1224 [0155.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl")) returned 0x20 [0162.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0162.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.124] GetLastError () returned 0x5 [0162.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0162.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b538) returned 1 Thread: id = 2308 os_tid = 0x1230 [0155.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css")) returned 0x20 [0162.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0162.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.104] GetLastError () returned 0x5 [0162.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0162.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b5b8) returned 1 Thread: id = 2309 os_tid = 0x1234 [0155.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta")) returned 0x20 [0162.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0162.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.246] GetLastError () returned 0x5 [0162.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0162.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 2310 os_tid = 0x1238 [0155.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta")) returned 0x20 [0162.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0162.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.248] GetLastError () returned 0x5 [0162.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0162.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db98) returned 1 Thread: id = 2311 os_tid = 0x123c [0155.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 0x20 [0155.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0155.523] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.524] GetLastError () returned 0x5 [0155.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0155.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 2312 os_tid = 0x1240 [0155.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json")) returned 0x20 [0156.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0156.138] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.138] GetLastError () returned 0x5 [0156.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0156.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 2313 os_tid = 0x1244 [0155.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd")) returned 0x20 [0162.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0162.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.126] GetLastError () returned 0x5 [0162.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0162.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 2314 os_tid = 0x1248 [0155.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl")) returned 0x20 [0162.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0162.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.128] GetLastError () returned 0x5 [0162.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0162.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 2315 os_tid = 0x124c [0156.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl")) returned 0x20 [0162.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0162.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.130] GetLastError () returned 0x5 [0162.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0162.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b638) returned 1 Thread: id = 2316 os_tid = 0x1250 [0156.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27470 [0156.140] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0156.140] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\" [0156.140] wcscat (in: _Dest=0x3f27470, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*" [0156.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0156.140] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2220 [0156.141] wcscmp (_String1=".", _String2=".") returned 0 [0156.141] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.141] wcscmp (_String1="..", _String2=".") returned 1 [0156.141] wcscmp (_String1="..", _String2="..") returned 0 [0156.141] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.141] FindClose (in: hFindFile=0x66d2220 | out: hFindFile=0x66d2220) returned 1 [0156.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0156.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 [0156.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674abb8) returned 1 Thread: id = 2317 os_tid = 0x1254 [0156.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674abb8 [0156.143] wcscpy (in: _Dest=0x674abb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0156.143] wcscat (in: _Dest=0x674abb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\" [0156.143] wcscat (in: _Dest=0x674abb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*" [0156.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0156.143] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2220 [0156.143] wcscmp (_String1=".", _String2=".") returned 0 [0156.143] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.143] wcscmp (_String1="..", _String2=".") returned 1 [0156.143] wcscmp (_String1="..", _String2="..") returned 0 [0156.143] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.143] FindClose (in: hFindFile=0x66d2220 | out: hFindFile=0x66d2220) returned 1 [0156.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0156.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674abb8) returned 1 [0156.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674aab8) returned 1 Thread: id = 2318 os_tid = 0xd88 [0156.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674da78 [0156.145] wcscpy (in: _Dest=0x674da78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0156.145] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0156.145] wcscat (in: _Dest=0x674da78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*" [0156.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0156.145] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0156.487] wcscmp (_String1=".", _String2=".") returned 0 [0156.487] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.487] wcscmp (_String1="..", _String2=".") returned 1 [0156.487] wcscmp (_String1="..", _String2="..") returned 0 [0156.487] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0156.487] wcscmp (_String1="glob.js", _String2=".") returned 1 [0156.487] wcscmp (_String1="glob.js", _String2="..") returned 1 [0156.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32230 [0156.487] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0156.487] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0156.487] wcscat (in: _Dest=0x3e32230, _Source="glob.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" [0161.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0161.405] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0161.405] wcscmp (_String1="glob.settings.js", _String2=".") returned 1 [0161.405] wcscmp (_String1="glob.settings.js", _String2="..") returned 1 [0161.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2a40 [0161.405] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0161.405] wcscat (in: _Dest=0x3ea2a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0161.405] wcscat (in: _Dest=0x3ea2a40, _Source="glob.settings.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" [0161.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0161.407] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0161.407] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0161.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0161.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 [0161.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a258) returned 1 Thread: id = 2319 os_tid = 0x173c [0156.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27470 [0156.146] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0156.146] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0156.146] wcscat (in: _Dest=0x3f27470, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*" [0156.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0156.146] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0156.486] wcscmp (_String1=".", _String2=".") returned 0 [0156.486] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.486] wcscmp (_String1="..", _String2=".") returned 1 [0156.486] wcscmp (_String1="..", _String2="..") returned 0 [0156.486] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe50712d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5097430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0156.486] wcscmp (_String1="addressbook.acrodata", _String2=".") returned 1 [0156.486] wcscmp (_String1="addressbook.acrodata", _String2="..") returned 1 [0156.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c428 [0156.486] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0156.486] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0156.486] wcscat (in: _Dest=0x35c428, _Source="addressbook.acrodata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" [0157.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0157.241] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0157.241] wcscmp (_String1="CRLCache", _String2=".") returned 1 [0157.241] wcscmp (_String1="CRLCache", _String2="..") returned 1 [0157.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68184a0 [0157.241] wcscpy (in: _Dest=0x68184a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0157.241] wcscat (in: _Dest=0x68184a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0157.241] wcscat (in: _Dest=0x68184a0, _Source="CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0157.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68184a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0157.243] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0157.243] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0157.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0157.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 [0157.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 2320 os_tid = 0x56c [0156.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif")) returned 0x20 [0158.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0158.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.101] GetLastError () returned 0x5 [0158.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0158.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1fe0) returned 1 Thread: id = 2321 os_tid = 0x177c [0156.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif")) returned 0x20 [0158.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0158.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.100] GetLastError () returned 0x5 [0158.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0158.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959410) returned 1 Thread: id = 2322 os_tid = 0x178c [0156.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif")) returned 0x20 [0158.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0158.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.099] GetLastError () returned 0x5 [0158.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0158.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69591b0) returned 1 Thread: id = 2323 os_tid = 0x179c [0156.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif")) returned 0x20 [0158.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0158.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.071] GetLastError () returned 0x5 [0158.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0158.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 2324 os_tid = 0x17a0 [0156.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif")) returned 0x20 [0158.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0158.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.115] GetLastError () returned 0x5 [0158.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0158.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 2325 os_tid = 0x17a4 [0156.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif")) returned 0x20 [0158.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0158.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.113] GetLastError () returned 0x5 [0158.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0158.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 2326 os_tid = 0x17b0 [0156.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif")) returned 0x20 [0158.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0158.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.097] GetLastError () returned 0x5 [0158.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0158.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959118) returned 1 Thread: id = 2327 os_tid = 0xd0c [0156.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar")) returned 0x20 [0156.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0156.158] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.158] GetLastError () returned 0x5 [0156.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0156.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 2328 os_tid = 0x17bc [0156.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar")) returned 0x20 [0156.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0156.161] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.161] GetLastError () returned 0x5 [0156.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0156.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef540) returned 1 Thread: id = 2329 os_tid = 0xdfc [0156.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar")) returned 0x20 [0156.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0156.163] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.163] GetLastError () returned 0x5 [0156.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0156.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef338) returned 1 Thread: id = 2330 os_tid = 0xa14 [0156.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar")) returned 0x20 [0156.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0156.165] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.166] GetLastError () returned 0x5 [0156.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0156.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 Thread: id = 2331 os_tid = 0xbbc [0156.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index")) returned 0x20 [0157.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0157.467] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.467] GetLastError () returned 0x5 [0157.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef4d8) returned 1 Thread: id = 2332 os_tid = 0x784 [0156.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar")) returned 0x20 [0156.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0156.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.858] GetLastError () returned 0x5 [0156.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0156.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd3e0) returned 1 Thread: id = 2333 os_tid = 0x640 [0156.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0156.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0156.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.857] GetLastError () returned 0x5 [0156.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0156.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 Thread: id = 2334 os_tid = 0x4f0 [0156.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0156.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0156.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.855] GetLastError () returned 0x5 [0156.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0156.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 Thread: id = 2335 os_tid = 0x8f0 [0156.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0157.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0157.470] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.470] GetLastError () returned 0x5 [0157.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0157.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 2336 os_tid = 0x1740 [0156.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar")) returned 0x20 [0157.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0157.468] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.469] GetLastError () returned 0x5 [0157.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0157.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cd448) returned 1 Thread: id = 2337 os_tid = 0x174c [0156.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0156.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0156.176] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.177] GetLastError () returned 0x5 [0156.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0156.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3b8) returned 1 Thread: id = 2338 os_tid = 0x914 [0156.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0156.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0156.178] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.178] GetLastError () returned 0x5 [0156.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0156.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 2339 os_tid = 0x740 [0156.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0157.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.471] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.472] GetLastError () returned 0x5 [0157.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958700) returned 1 Thread: id = 2340 os_tid = 0xe24 [0156.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0157.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.473] GetLastError () returned 0x5 [0157.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 2341 os_tid = 0x9c0 [0156.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0157.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.474] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.474] GetLastError () returned 0x5 [0157.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0157.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958960) returned 1 Thread: id = 2342 os_tid = 0x9d0 [0156.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0156.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.863] GetLastError () returned 0x5 [0156.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 2343 os_tid = 0x1778 [0156.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0156.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.861] GetLastError () returned 0x5 [0156.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e18) returned 1 Thread: id = 2344 os_tid = 0x9e0 [0156.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0156.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.860] GetLastError () returned 0x5 [0156.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0156.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c21a8) returned 1 Thread: id = 2345 os_tid = 0x1784 [0156.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 0x20 [0162.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0162.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.219] GetLastError () returned 0x5 [0162.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0162.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 2346 os_tid = 0xf50 [0156.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl")) returned 0x20 [0162.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0162.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.167] GetLastError () returned 0x5 [0162.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0162.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0600) returned 1 Thread: id = 2347 os_tid = 0xa70 [0156.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb")) returned 0x20 [0162.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0162.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.135] GetLastError () returned 0x5 [0162.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0162.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 Thread: id = 2348 os_tid = 0x1794 [0156.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest")) returned 0x20 [0162.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0162.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.221] GetLastError () returned 0x5 [0162.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0162.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 2349 os_tid = 0x1798 [0156.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf")) returned 0x20 [0162.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0162.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.159] GetLastError () returned 0x5 [0162.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0162.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 Thread: id = 2350 os_tid = 0x500 [0156.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd")) returned 0x20 [0162.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0162.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.229] GetLastError () returned 0x5 [0162.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0162.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 Thread: id = 2351 os_tid = 0xbd0 [0156.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub")) returned 0x20 [0162.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0162.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.208] GetLastError () returned 0x5 [0162.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0162.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b738) returned 1 Thread: id = 2352 os_tid = 0x17a8 [0156.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub")) returned 0x20 [0162.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0162.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.147] GetLastError () returned 0x5 [0162.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0162.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b838) returned 1 Thread: id = 2353 os_tid = 0x220 [0156.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub")) returned 0x20 [0162.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0162.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.214] GetLastError () returned 0x5 [0162.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0162.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b8b8) returned 1 Thread: id = 2354 os_tid = 0x248 [0156.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub")) returned 0x20 [0162.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0162.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.206] GetLastError () returned 0x5 [0162.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0162.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b7b8) returned 1 Thread: id = 2355 os_tid = 0x754 [0156.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub")) returned 0x20 [0162.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0162.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.212] GetLastError () returned 0x5 [0162.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0162.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b938) returned 1 Thread: id = 2356 os_tid = 0xe10 [0156.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub")) returned 0x20 [0162.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0162.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.211] GetLastError () returned 0x5 [0162.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0162.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bab8) returned 1 Thread: id = 2357 os_tid = 0xba8 [0156.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic")) returned 0x20 [0162.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0162.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.155] GetLastError () returned 0x5 [0162.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0162.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 Thread: id = 2358 os_tid = 0xc08 [0156.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic")) returned 0x20 [0162.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0162.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.157] GetLastError () returned 0x5 [0162.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0162.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 Thread: id = 2359 os_tid = 0x17d8 [0156.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic")) returned 0x20 [0161.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0161.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.102] GetLastError () returned 0x5 [0162.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0162.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 Thread: id = 2360 os_tid = 0x17dc [0156.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic")) returned 0x20 [0162.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0162.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.150] GetLastError () returned 0x5 [0162.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0162.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 Thread: id = 2361 os_tid = 0x17e0 [0156.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic")) returned 0x20 [0162.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0162.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.151] GetLastError () returned 0x5 [0162.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0162.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 Thread: id = 2362 os_tid = 0xddc [0156.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic")) returned 0x20 [0162.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0162.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.153] GetLastError () returned 0x5 [0162.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0162.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 Thread: id = 2363 os_tid = 0x17e4 [0156.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg")) returned 0x20 [0160.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0160.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.867] GetLastError () returned 0x5 [0160.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0160.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 2364 os_tid = 0x6fc [0156.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg")) returned 0x20 [0160.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0160.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.868] GetLastError () returned 0x5 [0160.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0160.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 2365 os_tid = 0x17e8 [0156.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg")) returned 0x20 [0160.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0160.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.741] GetLastError () returned 0x5 [0160.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0160.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 2366 os_tid = 0x17ec [0156.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg")) returned 0x20 [0160.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0160.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.870] GetLastError () returned 0x5 [0160.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0160.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 2367 os_tid = 0x17f0 [0156.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg")) returned 0x20 [0160.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0160.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.862] GetLastError () returned 0x5 [0160.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0160.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 2368 os_tid = 0x17f4 [0156.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg")) returned 0x20 [0160.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0160.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.864] GetLastError () returned 0x5 [0160.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0160.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 2369 os_tid = 0x17fc [0156.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg")) returned 0x20 [0160.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0160.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.865] GetLastError () returned 0x5 [0160.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0160.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d597b8) returned 1 Thread: id = 2370 os_tid = 0x22c [0156.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg")) returned 0x20 [0160.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0160.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.743] GetLastError () returned 0x5 [0160.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0160.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 2371 os_tid = 0xe20 [0156.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg")) returned 0x20 [0160.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0160.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.873] GetLastError () returned 0x5 [0160.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0160.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 Thread: id = 2372 os_tid = 0x180 [0156.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg")) returned 0x20 [0160.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0160.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.095] GetLastError () returned 0x5 [0160.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0160.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 Thread: id = 2373 os_tid = 0xfdc [0156.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg")) returned 0x20 [0160.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0160.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.872] GetLastError () returned 0x5 [0160.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0160.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 Thread: id = 2374 os_tid = 0x10c [0156.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg")) returned 0x20 [0160.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0160.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.875] GetLastError () returned 0x5 [0160.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0160.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 2375 os_tid = 0x12f8 [0156.203] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties")) returned 0x2020 [0156.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", dwFileAttributes=0x20) returned 1 [0162.759] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb38 [0162.759] GetFileSizeEx (in: hFile=0xb38, lpFileSize=0xb7cfda4 | out: lpFileSize=0xb7cfda4*=707) returned 1 [0162.759] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x2bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.759] ReadFile (in: hFile=0xb38, lpBuffer=0xb7cfd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7cfd90, lpOverlapped=0x0 | out: lpBuffer=0xb7cfd80*, lpNumberOfBytesRead=0xb7cfd90*=0x4, lpOverlapped=0x0) returned 1 [0162.769] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0162.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0162.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0162.769] NtQuerySystemTime (in: CurrentTime=0xb7cfd18 | out: CurrentTime=0xb7cfd18*=132482710712964000) returned 0x0 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5b53318b [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x1267bc2c [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x241d0545 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5e828e04 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x73501e66 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x1bb049fa [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5771104b [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x7002649e [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x39c5e95f [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x51ad507 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x49ff40a [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0xd9acc2c [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x8cab44d [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x184c0673 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x27d9574c [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x40382dc5 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x32b7dc66 [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x2d884bbe [0162.769] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x7e79bde6 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x4b4a2bda [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5c6a1c47 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5923dad6 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x71667e37 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x38efc2ee [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5cea1c73 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x7f4f2c77 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x73d8f447 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x4f331016 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x288a6ddd [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x5b7c2b7 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x3161b152 [0162.770] RtlRandomEx (in: Seed=0xb7cfd10 | out: Seed=0xb7cfd10) returned 0x413dba32 [0162.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0162.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6992910 [0162.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0162.784] ReadFile (in: hFile=0xb38, lpBuffer=0x6992910, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0xb7cfd0c, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0xb7cfd0c*=0x2c3, lpOverlapped=0x0) returned 1 [0162.784] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.784] WriteFile (in: hFile=0xb38, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x2c3, lpNumberOfBytesWritten=0xb7cfd10, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xb7cfd10*=0x2c3, lpOverlapped=0x0) returned 1 [0163.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0163.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0163.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0163.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0163.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0163.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3f1fa80 [0163.939] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.939] WriteFile (in: hFile=0xb38, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xb7cfd98, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xb7cfd98*=0x11c, lpOverlapped=0x0) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f9c0) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa80) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0164.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0164.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0164.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2fc0 [0164.001] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0164.001] wcscat (in: _Dest=0x3ea2fc0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.ac3a86" [0164.001] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.ac3a86", NtPathName=0xb7cfd10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f520 [0164.056] FlushFileBuffers (hFile=0xb38) returned 1 [0164.158] CloseHandle (hObject=0xb38) returned 1 [0164.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0f010 [0164.160] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0164.160] wcscat (in: _Dest=0x3e0f010, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\AC3A86-Readme.txt" [0164.160] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\ac3a86-readme.txt")) returned 0xffffffff [0164.160] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2040 [0164.175] WriteFile (in: hFile=0x2040, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb7cfd2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb7cfd2c*=0x8b9, lpOverlapped=0x0) returned 1 [0164.177] CloseHandle (hObject=0x2040) returned 1 [0164.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 [0164.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 2376 os_tid = 0xbd8 [0156.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp")) returned 0x20 [0156.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0156.204] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.204] GetLastError () returned 0x5 [0156.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0156.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 2377 os_tid = 0xff8 [0156.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 0x20 [0156.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.206] GetLastError () returned 0x5 [0156.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 2378 os_tid = 0x74c [0156.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 0x20 [0156.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.208] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.208] GetLastError () returned 0x5 [0156.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2110) returned 1 Thread: id = 2379 os_tid = 0xff0 [0156.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d3b8 [0156.210] wcscpy (in: _Dest=0x674d3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0156.210] wcscat (in: _Dest=0x674d3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0156.210] wcscat (in: _Dest=0x674d3b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*" [0156.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0156.210] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0157.727] wcscmp (_String1=".", _String2=".") returned 0 [0157.727] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.727] wcscmp (_String1="..", _String2=".") returned 1 [0157.727] wcscmp (_String1="..", _String2="..") returned 0 [0157.727] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x230b0c00, ftLastWriteTime.dwHighDateTime=0x1d38ef3, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseline.versions", cAlternateFileName="BASELI~1.VER")) returned 1 [0157.727] wcscmp (_String1="baseline.versions", _String2=".") returned 1 [0157.727] wcscmp (_String1="baseline.versions", _String2="..") returned 1 [0157.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bd48 [0157.727] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0157.728] wcscat (in: _Dest=0x35bd48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0157.728] wcscat (in: _Dest=0x35bd48, _Source="baseline.versions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" [0161.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0161.397] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xc1ed2680, ftLastWriteTime.dwHighDateTime=0x1ce952b, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist.dynamic", cAlternateFileName="BLACKL~1.DYN")) returned 1 [0161.397] wcscmp (_String1="blacklist.dynamic", _String2=".") returned 1 [0161.397] wcscmp (_String1="blacklist.dynamic", _String2="..") returned 1 [0161.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2e60 [0161.397] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0161.397] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0161.397] wcscat (in: _Dest=0x3ea2e60, _Source="blacklist.dynamic" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" [0161.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0161.399] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x191caa00, ftLastWriteTime.dwHighDateTime=0x1ce1f40, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0161.399] wcscmp (_String1="blacklisted.certs", _String2=".") returned 1 [0161.399] wcscmp (_String1="blacklisted.certs", _String2="..") returned 1 [0161.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2db0 [0161.399] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0161.399] wcscat (in: _Dest=0x3ea2db0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0161.399] wcscat (in: _Dest=0x3ea2db0, _Source="blacklisted.certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" [0161.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0161.400] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 1 [0161.400] wcscmp (_String1="update.timestamp", _String2=".") returned 1 [0161.400] wcscmp (_String1="update.timestamp", _String2="..") returned 1 [0161.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e768 [0161.400] wcscpy (in: _Dest=0x697e768, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0161.400] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0161.400] wcscat (in: _Dest=0x697e768, _Source="update.timestamp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" [0161.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0161.401] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 0 [0161.401] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0161.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0161.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3b8) returned 1 [0161.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 2380 os_tid = 0xf88 [0156.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674aab8 [0156.211] wcscpy (in: _Dest=0x674aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0156.211] wcscat (in: _Dest=0x674aab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0156.211] wcscat (in: _Dest=0x674aab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*" [0156.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979f50 [0156.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809f8 [0156.878] wcscmp (_String1=".", _String2=".") returned 0 [0156.878] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.878] wcscmp (_String1="..", _String2=".") returned 1 [0156.878] wcscmp (_String1="..", _String2="..") returned 0 [0156.878] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0156.878] wcscmp (_String1="si", _String2=".") returned 1 [0156.878] wcscmp (_String1="si", _String2="..") returned 1 [0156.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d585a8 [0156.878] wcscpy (in: _Dest=0x3d585a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0156.878] wcscat (in: _Dest=0x3d585a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0156.879] wcscat (in: _Dest=0x3d585a8, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0160.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d585a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0160.654] FindNextFileW (in: hFindFile=0x3e809f8, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0160.655] FindClose (in: hFindFile=0x3e809f8 | out: hFindFile=0x3e809f8) returned 1 [0160.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979f50) returned 1 [0160.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674aab8) returned 1 [0160.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5df0) returned 1 Thread: id = 2381 os_tid = 0x12fc [0156.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc")) returned 0x20 [0156.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0156.213] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.213] GetLastError () returned 0x5 [0156.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0156.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 2382 os_tid = 0x1300 [0156.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc")) returned 0x20 [0156.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0156.215] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.215] GetLastError () returned 0x5 [0156.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0156.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 2383 os_tid = 0xb54 [0156.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx")) returned 0x20 [0156.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0156.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.216] GetLastError () returned 0x5 [0156.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0156.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 2384 os_tid = 0xb3c [0156.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx")) returned 0x20 [0156.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0156.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.218] GetLastError () returned 0x5 [0156.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0156.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 2385 os_tid = 0x5ec [0156.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx")) returned 0x20 [0165.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0165.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0165.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2240) returned 1 Thread: id = 2386 os_tid = 0x1304 [0156.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx")) returned 0x20 [0166.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0166.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.200] GetLastError () returned 0x5 [0166.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0166.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 2387 os_tid = 0x8c0 [0156.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx")) returned 0x20 [0160.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0160.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.057] GetLastError () returned 0x5 [0163.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0163.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 2388 os_tid = 0xa04 [0156.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx")) returned 0x20 [0166.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0166.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.202] GetLastError () returned 0x5 [0166.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0166.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c22d8) returned 1 Thread: id = 2389 os_tid = 0x1308 [0156.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx")) returned 0x20 [0165.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0165.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0165.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 2390 os_tid = 0x130c [0156.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx")) returned 0x20 [0165.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0165.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0165.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 Thread: id = 2391 os_tid = 0x1310 [0156.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx")) returned 0x20 [0158.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0159.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.391] GetLastError () returned 0x5 [0162.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0162.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 Thread: id = 2392 os_tid = 0x1314 [0156.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini")) returned 0x20 [0156.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.222] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.223] GetLastError () returned 0x5 [0156.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 2393 os_tid = 0x1318 [0156.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 0x20 [0156.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0156.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.224] GetLastError () returned 0x5 [0156.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0156.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 2394 os_tid = 0x1328 [0156.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0156.226] wcscpy (in: _Dest=0x332f28, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0156.226] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0156.226] wcscat (in: _Dest=0x332f28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*" [0156.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697caa0 [0156.226] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0157.717] wcscmp (_String1=".", _String2=".") returned 0 [0157.717] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.717] wcscmp (_String1="..", _String2=".") returned 1 [0157.717] wcscmp (_String1="..", _String2="..") returned 0 [0157.717] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0157.717] wcscmp (_String1="all", _String2=".") returned 1 [0157.717] wcscmp (_String1="all", _String2="..") returned 1 [0157.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df04b8 [0157.717] wcscpy (in: _Dest=0x3df04b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0157.718] wcscat (in: _Dest=0x3df04b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0157.718] wcscat (in: _Dest=0x3df04b8, _Source="all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0160.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df04b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0160.696] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara", cAlternateFileName="")) returned 1 [0160.696] wcscmp (_String1="ara", _String2=".") returned 1 [0160.696] wcscmp (_String1="ara", _String2="..") returned 1 [0160.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df0198 [0160.696] wcscpy (in: _Dest=0x3df0198, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.697] wcscat (in: _Dest=0x3df0198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.697] wcscat (in: _Dest=0x3df0198, _Source="ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0160.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df0198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0160.698] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0160.698] wcscmp (_String1="brt", _String2=".") returned 1 [0160.698] wcscmp (_String1="brt", _String2="..") returned 1 [0160.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defe78 [0160.698] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.698] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.698] wcscat (in: _Dest=0x3defe78, _Source="brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0160.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3defe78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0160.699] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0160.699] wcscmp (_String1="brz", _String2=".") returned 1 [0160.699] wcscmp (_String1="brz", _String2="..") returned 1 [0160.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df0580 [0160.700] wcscpy (in: _Dest=0x3df0580, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.700] wcscat (in: _Dest=0x3df0580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.700] wcscat (in: _Dest=0x3df0580, _Source="brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0160.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0160.701] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul", cAlternateFileName="")) returned 1 [0160.701] wcscmp (_String1="bul", _String2=".") returned 1 [0160.701] wcscmp (_String1="bul", _String2="..") returned 1 [0160.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def068 [0160.701] wcscpy (in: _Dest=0x3def068, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.701] wcscat (in: _Dest=0x3def068, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.701] wcscat (in: _Dest=0x3def068, _Source="bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0160.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0160.703] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="can", cAlternateFileName="")) returned 1 [0160.703] wcscmp (_String1="can", _String2=".") returned 1 [0160.703] wcscmp (_String1="can", _String2="..") returned 1 [0160.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def2c0 [0160.703] wcscpy (in: _Dest=0x3def2c0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.703] wcscat (in: _Dest=0x3def2c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.703] wcscat (in: _Dest=0x3def2c0, _Source="can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0160.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0160.704] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr", cAlternateFileName="")) returned 1 [0160.704] wcscmp (_String1="cfr", _String2=".") returned 1 [0160.704] wcscmp (_String1="cfr", _String2="..") returned 1 [0160.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defce8 [0160.705] wcscpy (in: _Dest=0x3defce8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.705] wcscat (in: _Dest=0x3defce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.705] wcscat (in: _Dest=0x3defce8, _Source="cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0160.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3defce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0160.706] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl", cAlternateFileName="")) returned 1 [0160.706] wcscmp (_String1="ctl", _String2=".") returned 1 [0160.706] wcscmp (_String1="ctl", _String2="..") returned 1 [0160.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def5e0 [0160.706] wcscpy (in: _Dest=0x3def5e0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.706] wcscat (in: _Dest=0x3def5e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.706] wcscat (in: _Dest=0x3def5e0, _Source="ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0160.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0160.708] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze", cAlternateFileName="")) returned 1 [0160.708] wcscmp (_String1="cze", _String2=".") returned 1 [0160.708] wcscmp (_String1="cze", _String2="..") returned 1 [0160.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3defa90 [0160.708] wcscpy (in: _Dest=0x3defa90, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.708] wcscat (in: _Dest=0x3defa90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.708] wcscat (in: _Dest=0x3defa90, _Source="cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0160.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3defa90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0160.710] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0160.710] wcscmp (_String1="dan", _String2=".") returned 1 [0160.710] wcscmp (_String1="dan", _String2="..") returned 1 [0160.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3def900 [0160.710] wcscpy (in: _Dest=0x3def900, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.710] wcscat (in: _Dest=0x3def900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.710] wcscat (in: _Dest=0x3def900, _Source="dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0160.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3def900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0160.711] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0160.711] wcscmp (_String1="dut", _String2=".") returned 1 [0160.711] wcscmp (_String1="dut", _String2="..") returned 1 [0160.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682dce8 [0160.711] wcscpy (in: _Dest=0x682dce8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.712] wcscat (in: _Dest=0x682dce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.712] wcscat (in: _Dest=0x682dce8, _Source="dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0160.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0160.713] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0160.713] wcscmp (_String1="eng", _String2=".") returned 1 [0160.713] wcscmp (_String1="eng", _String2="..") returned 1 [0160.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ddb0 [0160.713] wcscpy (in: _Dest=0x682ddb0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.713] wcscat (in: _Dest=0x682ddb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.713] wcscat (in: _Dest=0x682ddb0, _Source="eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0160.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682ddb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0160.714] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="est", cAlternateFileName="")) returned 1 [0160.714] wcscmp (_String1="est", _String2=".") returned 1 [0160.714] wcscmp (_String1="est", _String2="..") returned 1 [0160.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682de78 [0160.715] wcscpy (in: _Dest=0x682de78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.715] wcscat (in: _Dest=0x682de78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.715] wcscat (in: _Dest=0x682de78, _Source="est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0160.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0160.716] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin", cAlternateFileName="")) returned 1 [0160.716] wcscmp (_String1="fin", _String2=".") returned 1 [0160.716] wcscmp (_String1="fin", _String2="..") returned 1 [0160.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682df40 [0160.716] wcscpy (in: _Dest=0x682df40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.716] wcscat (in: _Dest=0x682df40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.716] wcscat (in: _Dest=0x682df40, _Source="fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0160.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682df40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0160.717] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0160.718] wcscmp (_String1="frn", _String2=".") returned 1 [0160.718] wcscmp (_String1="frn", _String2="..") returned 1 [0160.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e008 [0160.718] wcscpy (in: _Dest=0x682e008, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.718] wcscat (in: _Dest=0x682e008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.718] wcscat (in: _Dest=0x682e008, _Source="frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0160.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0160.719] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre", cAlternateFileName="")) returned 1 [0160.719] wcscmp (_String1="gre", _String2=".") returned 1 [0160.719] wcscmp (_String1="gre", _String2="..") returned 1 [0160.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e0d0 [0160.719] wcscpy (in: _Dest=0x682e0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.719] wcscat (in: _Dest=0x682e0d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.719] wcscat (in: _Dest=0x682e0d0, _Source="gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0160.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0160.721] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0160.721] wcscmp (_String1="grm", _String2=".") returned 1 [0160.721] wcscmp (_String1="grm", _String2="..") returned 1 [0160.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e198 [0160.721] wcscpy (in: _Dest=0x682e198, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.721] wcscat (in: _Dest=0x682e198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.721] wcscat (in: _Dest=0x682e198, _Source="grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0160.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0160.722] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb", cAlternateFileName="")) returned 1 [0160.722] wcscmp (_String1="heb", _String2=".") returned 1 [0160.722] wcscmp (_String1="heb", _String2="..") returned 1 [0160.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e260 [0160.723] wcscpy (in: _Dest=0x682e260, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.723] wcscat (in: _Dest=0x682e260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.723] wcscat (in: _Dest=0x682e260, _Source="heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0160.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0160.724] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv", cAlternateFileName="")) returned 1 [0160.724] wcscmp (_String1="hrv", _String2=".") returned 1 [0160.724] wcscmp (_String1="hrv", _String2="..") returned 1 [0160.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e328 [0160.724] wcscpy (in: _Dest=0x682e328, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.724] wcscat (in: _Dest=0x682e328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.724] wcscat (in: _Dest=0x682e328, _Source="hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0160.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0160.726] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun", cAlternateFileName="")) returned 1 [0160.726] wcscmp (_String1="hun", _String2=".") returned 1 [0160.726] wcscmp (_String1="hun", _String2="..") returned 1 [0160.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e3f0 [0160.726] wcscpy (in: _Dest=0x682e3f0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.726] wcscat (in: _Dest=0x682e3f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.726] wcscat (in: _Dest=0x682e3f0, _Source="hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0160.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0160.727] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0160.727] wcscmp (_String1="itl", _String2=".") returned 1 [0160.727] wcscmp (_String1="itl", _String2="..") returned 1 [0160.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e4b8 [0160.727] wcscpy (in: _Dest=0x682e4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.727] wcscat (in: _Dest=0x682e4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.727] wcscat (in: _Dest=0x682e4b8, _Source="itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0160.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0160.729] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav", cAlternateFileName="")) returned 1 [0160.729] wcscmp (_String1="lav", _String2=".") returned 1 [0160.729] wcscmp (_String1="lav", _String2="..") returned 1 [0160.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e580 [0160.729] wcscpy (in: _Dest=0x682e580, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.729] wcscat (in: _Dest=0x682e580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.729] wcscat (in: _Dest=0x682e580, _Source="lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0160.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0160.730] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit", cAlternateFileName="")) returned 1 [0160.730] wcscmp (_String1="lit", _String2=".") returned 1 [0160.730] wcscmp (_String1="lit", _String2="..") returned 1 [0160.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e648 [0160.730] wcscpy (in: _Dest=0x682e648, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.731] wcscat (in: _Dest=0x682e648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.731] wcscat (in: _Dest=0x682e648, _Source="lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0160.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0160.732] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0160.732] wcscmp (_String1="nrw", _String2=".") returned 1 [0160.732] wcscmp (_String1="nrw", _String2="..") returned 1 [0160.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e710 [0160.732] wcscpy (in: _Dest=0x682e710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0160.732] wcscat (in: _Dest=0x682e710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0160.732] wcscat (in: _Dest=0x682e710, _Source="nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0160.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682e710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0161.538] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn", cAlternateFileName="")) returned 1 [0161.538] wcscmp (_String1="nyn", _String2=".") returned 1 [0161.538] wcscmp (_String1="nyn", _String2="..") returned 1 [0161.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f5e8 [0161.538] wcscpy (in: _Dest=0x682f5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0161.538] wcscat (in: _Dest=0x682f5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0161.538] wcscat (in: _Dest=0x682f5e8, _Source="nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0165.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0165.332] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol", cAlternateFileName="")) returned 1 [0165.332] wcscmp (_String1="pol", _String2=".") returned 1 [0165.332] wcscmp (_String1="pol", _String2="..") returned 1 [0165.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f138 [0165.332] wcscpy (in: _Dest=0x682f138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.333] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.333] wcscat (in: _Dest=0x682f138, _Source="pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0165.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0165.334] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0165.334] wcscmp (_String1="prt", _String2=".") returned 1 [0165.334] wcscmp (_String1="prt", _String2="..") returned 1 [0165.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f520 [0165.334] wcscpy (in: _Dest=0x682f520, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.334] wcscat (in: _Dest=0x682f520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.334] wcscat (in: _Dest=0x682f520, _Source="prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0165.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0165.335] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum", cAlternateFileName="")) returned 1 [0165.335] wcscmp (_String1="rum", _String2=".") returned 1 [0165.335] wcscmp (_String1="rum", _String2="..") returned 1 [0165.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f2c8 [0165.336] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.336] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.336] wcscat (in: _Dest=0x682f2c8, _Source="rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0165.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0165.337] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus", cAlternateFileName="")) returned 1 [0165.337] wcscmp (_String1="rus", _String2=".") returned 1 [0165.337] wcscmp (_String1="rus", _String2="..") returned 1 [0165.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f908 [0165.337] wcscpy (in: _Dest=0x682f908, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.337] wcscat (in: _Dest=0x682f908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.337] wcscat (in: _Dest=0x682f908, _Source="rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0165.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0165.339] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr", cAlternateFileName="")) returned 1 [0165.339] wcscmp (_String1="sgr", _String2=".") returned 1 [0165.339] wcscmp (_String1="sgr", _String2="..") returned 1 [0165.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f9d0 [0165.339] wcscpy (in: _Dest=0x682f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.339] wcscat (in: _Dest=0x682f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.339] wcscat (in: _Dest=0x682f9d0, _Source="sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0165.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0165.341] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo", cAlternateFileName="")) returned 1 [0165.341] wcscmp (_String1="slo", _String2=".") returned 1 [0165.341] wcscmp (_String1="slo", _String2="..") returned 1 [0165.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0165.341] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.341] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.341] wcscat (in: _Dest=0x682fa98, _Source="slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0165.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0165.343] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0165.343] wcscmp (_String1="spn", _String2=".") returned 1 [0165.343] wcscmp (_String1="spn", _String2="..") returned 1 [0165.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fb60 [0165.343] wcscpy (in: _Dest=0x682fb60, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.343] wcscat (in: _Dest=0x682fb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.343] wcscat (in: _Dest=0x682fb60, _Source="spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0165.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682fb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0165.345] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0165.345] wcscmp (_String1="swd", _String2=".") returned 1 [0165.346] wcscmp (_String1="swd", _String2="..") returned 1 [0165.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df0008 [0165.346] wcscpy (in: _Dest=0x3df0008, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.346] wcscat (in: _Dest=0x3df0008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.346] wcscat (in: _Dest=0x3df0008, _Source="swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0165.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0165.347] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 1 [0165.347] wcscmp (_String1="tur", _String2=".") returned 1 [0165.347] wcscmp (_String1="tur", _String2="..") returned 1 [0165.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df00d0 [0165.347] wcscpy (in: _Dest=0x3df00d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0165.348] wcscat (in: _Dest=0x3df00d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0165.348] wcscat (in: _Dest=0x3df00d0, _Source="tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0165.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df00d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0165.349] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 0 [0166.109] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697caa0) returned 1 [0168.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 [0168.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 2395 os_tid = 0x132c [0156.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif")) returned 0x20 [0158.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0158.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.183] GetLastError () returned 0x5 [0158.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0158.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db08) returned 1 Thread: id = 2396 os_tid = 0x1330 [0156.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif")) returned 0x20 [0157.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0157.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.740] GetLastError () returned 0x5 [0157.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0157.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 2397 os_tid = 0x1334 [0156.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif")) returned 0x20 [0157.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0157.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.784] GetLastError () returned 0x5 [0157.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0157.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 2398 os_tid = 0x1340 [0156.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif")) returned 0x20 [0157.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0157.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.786] GetLastError () returned 0x5 [0157.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0157.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 2399 os_tid = 0x1344 [0156.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif")) returned 0x20 [0157.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0157.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.787] GetLastError () returned 0x5 [0157.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0157.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 2400 os_tid = 0x1348 [0156.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif")) returned 0x20 [0157.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0157.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.790] GetLastError () returned 0x5 [0157.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0157.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 2401 os_tid = 0x134c [0156.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif")) returned 0x20 [0157.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0157.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.788] GetLastError () returned 0x5 [0157.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0157.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354f30) returned 1 Thread: id = 2402 os_tid = 0x1358 [0156.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif")) returned 0x20 [0157.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0157.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.791] GetLastError () returned 0x5 [0157.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0157.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 Thread: id = 2403 os_tid = 0x135c [0156.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif")) returned 0x20 [0157.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0157.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.793] GetLastError () returned 0x5 [0157.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0157.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 2404 os_tid = 0x1360 [0156.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif")) returned 0x20 [0157.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0157.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.797] GetLastError () returned 0x5 [0157.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0157.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 Thread: id = 2405 os_tid = 0x1364 [0156.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif")) returned 0x20 [0157.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0157.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.795] GetLastError () returned 0x5 [0157.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0157.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 Thread: id = 2406 os_tid = 0x1368 [0156.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif")) returned 0x20 [0157.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0157.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.794] GetLastError () returned 0x5 [0157.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0157.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 2407 os_tid = 0x1370 [0156.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif")) returned 0x20 [0157.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0157.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.802] GetLastError () returned 0x5 [0157.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0157.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 2408 os_tid = 0x137c [0156.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif")) returned 0x20 [0157.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0157.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.801] GetLastError () returned 0x5 [0157.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0157.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 2409 os_tid = 0x1380 [0156.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif")) returned 0x20 [0157.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0157.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.799] GetLastError () returned 0x5 [0157.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0157.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ddd8) returned 1 Thread: id = 2410 os_tid = 0x1384 [0156.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif")) returned 0x20 [0157.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0157.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.805] GetLastError () returned 0x5 [0157.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0157.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de68) returned 1 Thread: id = 2411 os_tid = 0x1388 [0156.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif")) returned 0x20 [0157.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0157.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.804] GetLastError () returned 0x5 [0157.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0157.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674def8) returned 1 Thread: id = 2412 os_tid = 0x138c [0156.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif")) returned 0x20 [0157.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0157.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.806] GetLastError () returned 0x5 [0157.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0157.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 2413 os_tid = 0x1058 [0156.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif")) returned 0x20 [0157.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0157.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.808] GetLastError () returned 0x5 [0157.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0157.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 2414 os_tid = 0x1464 [0156.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif")) returned 0x20 [0157.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0157.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.811] GetLastError () returned 0x5 [0157.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 Thread: id = 2415 os_tid = 0x1470 [0156.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif")) returned 0x20 [0157.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0157.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.809] GetLastError () returned 0x5 [0157.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0157.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 2416 os_tid = 0xb6c [0156.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif")) returned 0x20 [0157.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0157.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.742] GetLastError () returned 0x5 [0157.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0157.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e1c8) returned 1 Thread: id = 2417 os_tid = 0xdb4 [0156.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif")) returned 0x20 [0157.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0157.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.781] GetLastError () returned 0x5 [0157.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0157.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e258) returned 1 Thread: id = 2418 os_tid = 0x154 [0156.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif")) returned 0x20 [0157.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0157.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.783] GetLastError () returned 0x5 [0157.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0157.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 2419 os_tid = 0x444 [0156.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif")) returned 0x20 [0158.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0158.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.164] GetLastError () returned 0x5 [0158.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0158.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 2420 os_tid = 0xe3c [0156.499] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\9ylzufe7rim4hn9hyw0.flv")) returned 0x20 [0156.499] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv", dwFileAttributes=0x20) returned 1 [0159.535] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\9ylzufe7rim4hn9hyw0.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b74 [0159.535] GetFileSizeEx (in: hFile=0x1b74, lpFileSize=0x8eaf98c | out: lpFileSize=0x8eaf98c*=97886) returned 1 [0159.535] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x17e5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.535] ReadFile (in: hFile=0x1b74, lpBuffer=0x8eaf968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eaf978, lpOverlapped=0x0 | out: lpBuffer=0x8eaf968*, lpNumberOfBytesRead=0x8eaf978*=0x4, lpOverlapped=0x0) returned 1 [0159.537] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0159.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0159.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0159.537] NtQuerySystemTime (in: CurrentTime=0x8eaf900 | out: CurrentTime=0x8eaf900*=132482710680828000) returned 0x0 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x737cf5b9 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x59eba96c [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x40cc9c88 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x1ceb3b9f [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x1e74a49e [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x686c3a13 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x30577ca6 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x3fae66 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x430dbf11 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x7884f5f1 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x49089088 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x4a8f9b8f [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x27f3f4c6 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x28f98510 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x2f620c0 [0159.537] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x16997628 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x3ecabff3 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x2378e791 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x15f561a7 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0xa188a2d [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x34adf65e [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x2162fec7 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x41e70fab [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x3ffcb801 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x60d23f9f [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x51e07da7 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x75f5a0e4 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x1675ebe7 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x31378688 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x470ee509 [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x7b8b79c [0159.538] RtlRandomEx (in: Seed=0x8eaf8f8 | out: Seed=0x8eaf8f8) returned 0x6c6f4f05 [0159.545] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.546] ReadFile (in: hFile=0x1b74, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0159.546] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822240 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b0d8 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0159.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0159.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0159.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0159.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0159.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0159.547] WriteFile (in: hFile=0x1b74, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0162.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0162.600] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.600] ReadFile (in: hFile=0x1b74, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0162.600] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822288 [0162.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0162.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0162.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0162.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0162.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0162.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0162.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0162.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0162.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822288) returned 1 [0162.601] WriteFile (in: hFile=0x1b74, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0162.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0162.603] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x1425e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.603] ReadFile (in: hFile=0x1b74, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0162.603] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x1425e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822288 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014fe0 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0162.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0162.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0162.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0162.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0162.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822288) returned 1 [0162.604] WriteFile (in: hFile=0x1b74, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eaf900, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x8eaf900*=0x3c00, lpOverlapped=0x0) returned 1 [0162.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0162.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ccf0 [0162.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0162.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x6821d30 [0162.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0162.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0162.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0162.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0162.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823758) returned 1 [0162.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x160) returned 0x3dce3d8 [0162.606] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.606] WriteFile (in: hFile=0x1b74, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x8eaf980, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0x8eaf980*=0x160, lpOverlapped=0x0) returned 1 [0162.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0162.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821d30) returned 1 [0162.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822288) returned 1 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0162.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0162.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d850 [0162.613] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv" [0162.613] wcscat (in: _Dest=0x3e0d850, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv.ac3a86" [0162.613] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv.ac3a86", NtPathName=0x8eaf8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\9YlzUfe7rIm4Hn9hyW0.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0162.627] FlushFileBuffers (hFile=0x1b74) returned 1 [0162.631] CloseHandle (hObject=0x1b74) returned 1 [0162.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef730 [0162.632] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0162.632] wcscat (in: _Dest=0x66ef730, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0162.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0162.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 [0162.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 2421 os_tid = 0xf04 [0156.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ardz4ymx3vrywijdem.swf")) returned 0x20 [0156.500] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf", dwFileAttributes=0x20) returned 1 [0159.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ardz4ymx3vrywijdem.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b78 [0159.523] GetFileSizeEx (in: hFile=0x1b78, lpFileSize=0x879fc94 | out: lpFileSize=0x879fc94*=63475) returned 1 [0159.523] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0xf7ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.523] ReadFile (in: hFile=0x1b78, lpBuffer=0x879fc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x879fc80, lpOverlapped=0x0 | out: lpBuffer=0x879fc70*, lpNumberOfBytesRead=0x879fc80*=0x4, lpOverlapped=0x0) returned 1 [0159.524] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0159.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0159.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0159.524] NtQuerySystemTime (in: CurrentTime=0x879fc08 | out: CurrentTime=0x879fc08*=132482710680672000) returned 0x0 [0159.524] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0xdd6109d [0159.524] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x4e0c2892 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x3549f74a [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x5d1e2f9 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x5d65d629 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0xc9ee90 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x42a07066 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x71cd39a3 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x34baafab [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x58f425a4 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0xd64bb37 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x6a3a5d44 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x15be80a5 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x1d0b1f7c [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x23f85e89 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x65edf997 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x373d4b6b [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x6fa8708b [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x7ebe95dd [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x1883eb5a [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x4657341a [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x71de0f18 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x2654a866 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0xeead5e4 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x367562a9 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x2d8ebabc [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x6446203 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x6bb56982 [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x415258cd [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x497b74ac [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x73a1797c [0159.525] RtlRandomEx (in: Seed=0x879fc00 | out: Seed=0x879fc00) returned 0x47590e55 [0159.533] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.533] ReadFile (in: hFile=0x1b78, lpBuffer=0x698b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x879fc08, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0x879fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0159.534] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822240 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b0d8 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0159.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0159.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0159.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0159.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0159.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0159.534] WriteFile (in: hFile=0x1b78, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x879fc08, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0x879fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0160.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0160.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0160.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66d1b58 [0160.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0160.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66d1c78 [0160.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0160.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6f8 [0160.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0160.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0160.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54dd8 [0160.382] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.382] WriteFile (in: hFile=0x1b78, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x879fc88, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x879fc88*=0x11e, lpOverlapped=0x0) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1c78) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b58) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0160.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0160.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0160.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0160.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69597a0 [0160.433] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf" [0160.433] wcscat (in: _Dest=0x69597a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf.ac3a86" [0160.433] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf.ac3a86", NtPathName=0x879fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\ArDZ4YMX3VRYWijdEm.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0160.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 [0160.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825b18) returned 1 [0160.522] NtQueryInformationFile (in: FileHandle=0x1b78, IoStatusBlock=0x879fbd8, FileInformation=0x879fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x879fbd8, FileInformation=0x879fbe0) returned 0x0 [0160.522] NtSetInformationFile (FileHandle=0x1b78, IoStatusBlock=0x879fbd8, FileInformation=0x879fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69597a0) returned 1 [0160.528] FlushFileBuffers (hFile=0x1b78) returned 1 [0160.537] CloseHandle (hObject=0x1b78) returned 1 [0160.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27360 [0160.538] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0160.538] wcscat (in: _Dest=0x3f27360, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0160.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0160.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0160.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 2422 os_tid = 0x520 [0156.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\dtdckzwa-ym95pl8iuiq.mkv")) returned 0x20 [0156.501] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv", dwFileAttributes=0x20) returned 1 [0159.511] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\dtdckzwa-ym95pl8iuiq.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b7c [0159.511] GetFileSizeEx (in: hFile=0x1b7c, lpFileSize=0x86efcb4 | out: lpFileSize=0x86efcb4*=81954) returned 1 [0159.511] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x1401e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.511] ReadFile (in: hFile=0x1b7c, lpBuffer=0x86efc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x86efca0, lpOverlapped=0x0 | out: lpBuffer=0x86efc90*, lpNumberOfBytesRead=0x86efca0*=0x4, lpOverlapped=0x0) returned 1 [0159.512] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0159.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0159.512] NtQuerySystemTime (in: CurrentTime=0x86efc28 | out: CurrentTime=0x86efc28*=132482710680516000) returned 0x0 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6f5e222 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x205f42fa [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x555ebf76 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6d62463 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x14985fc5 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x22401c51 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x77239b04 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6e8c0fd7 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6c057a5 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x74b69a72 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6eb8a702 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x3401b70f [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x4d13faaa [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x61fae90f [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x13231825 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x53b0bb49 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x68c38ca2 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x7775ce91 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x1dbf53be [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x3a25c482 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x7cc5ccb [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x5ea574fb [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x719cfe2a [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x19b77981 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x4ab1b243 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x65aeee82 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x10c1cef9 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x4adfa5b6 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x9c30846 [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x5a72339f [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x262600bf [0159.513] RtlRandomEx (in: Seed=0x86efc20 | out: Seed=0x86efc20) returned 0x6afcc850 [0159.521] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.521] ReadFile (in: hFile=0x1b7c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0159.521] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822240 [0159.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b0d8 [0159.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0159.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0159.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0159.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0159.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0159.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0159.522] WriteFile (in: hFile=0x1b7c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0160.039] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.039] ReadFile (in: hFile=0x1b7c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.040] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68221f8 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0160.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0160.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0160.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0160.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0160.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0160.040] WriteFile (in: hFile=0x1b7c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0160.393] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x10422, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.393] ReadFile (in: hFile=0x1b7c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.393] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x10422, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1918 [0160.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0160.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0160.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0160.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0160.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0160.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0160.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0160.394] WriteFile (in: hFile=0x1b7c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x86efc28, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x86efc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0160.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0160.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0160.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x66d1c78 [0160.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0160.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0160.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0160.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b58) returned 1 [0160.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e631b0 [0160.451] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.451] WriteFile (in: hFile=0x1b7c, lpBuffer=0x3e631b0*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x86efca8, lpOverlapped=0x0 | out: lpBuffer=0x3e631b0*, lpNumberOfBytesWritten=0x86efca8*=0x162, lpOverlapped=0x0) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e631b0) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1c78) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff638) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0160.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0160.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0aa8 [0160.474] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv" [0160.474] wcscat (in: _Dest=0x69c0aa8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv.ac3a86" [0160.474] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv.ac3a86", NtPathName=0x86efc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\DtDCKZwA-yM95pl8IuiQ.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee13d8 [0160.552] FlushFileBuffers (hFile=0x1b7c) returned 1 [0160.555] CloseHandle (hObject=0x1b7c) returned 1 [0160.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f27608 [0160.556] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0160.556] wcscat (in: _Dest=0x3f27608, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0160.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0160.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 [0160.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 2423 os_tid = 0xf28 [0156.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f293a0 [0156.501] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0156.501] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0156.501] wcscat (in: _Dest=0x3f293a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\*" [0156.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697be98 [0156.501] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\*", lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93d83e0, ftCreationTime.dwHighDateTime=0x1d5e7dc, ftLastAccessTime.dwLowDateTime=0x4bf4d120, ftLastAccessTime.dwHighDateTime=0x1d5df9e, ftLastWriteTime.dwLowDateTime=0x4bf4d120, ftLastWriteTime.dwHighDateTime=0x1d5df9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0156.501] wcscmp (_String1=".", _String2=".") returned 0 [0156.501] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93d83e0, ftCreationTime.dwHighDateTime=0x1d5e7dc, ftLastAccessTime.dwLowDateTime=0x4bf4d120, ftLastAccessTime.dwHighDateTime=0x1d5df9e, ftLastWriteTime.dwLowDateTime=0x4bf4d120, ftLastWriteTime.dwHighDateTime=0x1d5df9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.501] wcscmp (_String1="..", _String2=".") returned 1 [0156.501] wcscmp (_String1="..", _String2="..") returned 0 [0156.501] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8146830, ftCreationTime.dwHighDateTime=0x1d5e861, ftLastAccessTime.dwLowDateTime=0x1a08e9d0, ftLastAccessTime.dwHighDateTime=0x1d5dee0, ftLastWriteTime.dwLowDateTime=0x1a08e9d0, ftLastWriteTime.dwHighDateTime=0x1d5dee0, nFileSizeHigh=0x0, nFileSizeLow=0x16c77, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhBlPAs253_8j.mp4", cAlternateFileName="BHBLPA~1.MP4")) returned 1 [0156.502] wcscmp (_String1="bhBlPAs253_8j.mp4", _String2=".") returned 1 [0156.502] wcscmp (_String1="bhBlPAs253_8j.mp4", _String2="..") returned 1 [0156.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cc68 [0156.502] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0156.502] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0156.502] wcscat (in: _Dest=0x674cc68, _Source="bhBlPAs253_8j.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4" [0157.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0157.245] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd346f1c0, ftCreationTime.dwHighDateTime=0x1d5db7b, ftLastAccessTime.dwLowDateTime=0xa30a98c0, ftLastAccessTime.dwHighDateTime=0x1d5e48d, ftLastWriteTime.dwLowDateTime=0xa30a98c0, ftLastWriteTime.dwHighDateTime=0x1d5e48d, nFileSizeHigh=0x0, nFileSizeLow=0x1333c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBmQJicJSN0f6RkUSGJW.swf", cAlternateFileName="NBMQJI~1.SWF")) returned 1 [0157.245] wcscmp (_String1="NBmQJicJSN0f6RkUSGJW.swf", _String2=".") returned 1 [0157.245] wcscmp (_String1="NBmQJicJSN0f6RkUSGJW.swf", _String2="..") returned 1 [0157.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c00a8 [0157.245] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0157.245] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0157.245] wcscat (in: _Dest=0x69c00a8, _Source="NBmQJicJSN0f6RkUSGJW.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf" [0157.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0157.247] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1dd7020, ftCreationTime.dwHighDateTime=0x1d5e783, ftLastAccessTime.dwLowDateTime=0x3fd4fc0, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0x3fd4fc0, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0xd501, dwReserved0=0x0, dwReserved1=0x0, cFileName="OVRd.mkv", cAlternateFileName="")) returned 1 [0157.247] wcscmp (_String1="OVRd.mkv", _String2=".") returned 1 [0157.247] wcscmp (_String1="OVRd.mkv", _String2="..") returned 1 [0157.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674aeb8 [0157.247] wcscpy (in: _Dest=0x674aeb8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0157.247] wcscat (in: _Dest=0x674aeb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0157.247] wcscat (in: _Dest=0x674aeb8, _Source="OVRd.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv" [0157.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674aeb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0157.248] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d8a0, ftCreationTime.dwHighDateTime=0x1d5e599, ftLastAccessTime.dwLowDateTime=0x3aaf43f0, ftLastAccessTime.dwHighDateTime=0x1d5e147, ftLastWriteTime.dwLowDateTime=0x3aaf43f0, ftLastWriteTime.dwHighDateTime=0x1d5e147, nFileSizeHigh=0x0, nFileSizeLow=0x158a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="psebtn.flv", cAlternateFileName="")) returned 1 [0157.248] wcscmp (_String1="psebtn.flv", _String2=".") returned 1 [0157.248] wcscmp (_String1="psebtn.flv", _String2="..") returned 1 [0157.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674bc38 [0157.248] wcscpy (in: _Dest=0x674bc38, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0157.248] wcscat (in: _Dest=0x674bc38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0157.248] wcscat (in: _Dest=0x674bc38, _Source="psebtn.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv" [0157.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bc38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0157.249] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1944e3b0, ftCreationTime.dwHighDateTime=0x1d5e83a, ftLastAccessTime.dwLowDateTime=0x9fe8ff70, ftLastAccessTime.dwHighDateTime=0x1d5e2b6, ftLastWriteTime.dwLowDateTime=0x9fe8ff70, ftLastWriteTime.dwHighDateTime=0x1d5e2b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SFs9MqIGv", cAlternateFileName="SFS9MQ~1")) returned 1 [0157.249] wcscmp (_String1="SFs9MqIGv", _String2=".") returned 1 [0157.249] wcscmp (_String1="SFs9MqIGv", _String2="..") returned 1 [0157.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bcb8 [0157.250] wcscpy (in: _Dest=0x674bcb8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O" [0157.250] wcscat (in: _Dest=0x674bcb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0157.250] wcscat (in: _Dest=0x674bcb8, _Source="SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0157.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0157.251] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1944e3b0, ftCreationTime.dwHighDateTime=0x1d5e83a, ftLastAccessTime.dwLowDateTime=0x9fe8ff70, ftLastAccessTime.dwHighDateTime=0x1d5e2b6, ftLastWriteTime.dwLowDateTime=0x9fe8ff70, ftLastWriteTime.dwHighDateTime=0x1d5e2b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SFs9MqIGv", cAlternateFileName="SFS9MQ~1")) returned 0 [0157.251] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0157.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697be98) returned 1 [0157.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 [0157.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 2424 os_tid = 0x4bc [0156.502] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\rmblwzrcu-zprf7.flv")) returned 0x20 [0156.502] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv", dwFileAttributes=0x20) returned 1 [0159.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\rmblwzrcu-zprf7.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84 [0159.499] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0x896f88c | out: lpFileSize=0x896f88c*=6492) returned 1 [0159.499] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x1958, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.499] ReadFile (in: hFile=0x1b84, lpBuffer=0x896f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x896f878, lpOverlapped=0x0 | out: lpBuffer=0x896f868*, lpNumberOfBytesRead=0x896f878*=0x4, lpOverlapped=0x0) returned 1 [0159.501] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49ad8 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0159.501] NtQuerySystemTime (in: CurrentTime=0x896f800 | out: CurrentTime=0x896f800*=132482710680360000) returned 0x0 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x4e42718f [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x50d4885c [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x20344bda [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x386a9300 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x21b3639c [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x699377f3 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x65a45273 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x1c6a5105 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0xe61eef3 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x2a270344 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x7e570ed [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x6e59847d [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x650517d9 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x68b22c02 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x13a1909f [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x42300435 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x6bad0d33 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x512e7502 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x7ea44444 [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x2e258f5b [0159.501] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x3b7a9cab [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x2055e027 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x3f977b12 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x414a782c [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x164b1327 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x10d93984 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x4cb62844 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x587b0d69 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0xdde55e6 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x589fb400 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x5fdaa468 [0159.502] RtlRandomEx (in: Seed=0x896f7f8 | out: Seed=0x896f7f8) returned 0x46b9736c [0159.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0159.510] ReadFile (in: hFile=0x1b84, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0x195c, lpNumberOfBytesRead=0x896f7f4, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0x896f7f4*=0x195c, lpOverlapped=0x0) returned 1 [0159.510] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.510] WriteFile (in: hFile=0x1b84, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x195c, lpNumberOfBytesWritten=0x896f7f8, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0x896f7f8*=0x195c, lpOverlapped=0x0) returned 1 [0160.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0160.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f0c0 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68221f8 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1fa80 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0160.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0160.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d553a0 [0160.036] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.036] WriteFile (in: hFile=0x1b84, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x896f880, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x896f880*=0x118, lpOverlapped=0x0) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa80) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f0c0) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0160.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0160.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959670 [0160.397] wcscpy (in: _Dest=0x6959670, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv" [0160.397] wcscat (in: _Dest=0x6959670, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv.ac3a86" [0160.397] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv.ac3a86", NtPathName=0x896f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\rMBlWzrcu-zprf7.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697df88 [0160.536] FlushFileBuffers (hFile=0x1b84) returned 1 [0160.539] CloseHandle (hObject=0x1b84) returned 1 [0160.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26948 [0160.540] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0160.540] wcscat (in: _Dest=0x3f26948, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0160.540] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0160.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 [0160.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 2425 os_tid = 0x5d8 [0156.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\t8zughywgtptu6tm_e63.mp4")) returned 0x20 [0156.503] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4", dwFileAttributes=0x20) returned 1 [0159.482] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\t8zughywgtptu6tm_e63.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88 [0159.482] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0x9def924 | out: lpFileSize=0x9def924*=75916) returned 1 [0159.482] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x12888, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.482] ReadFile (in: hFile=0x1b88, lpBuffer=0x9def900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9def910, lpOverlapped=0x0 | out: lpBuffer=0x9def900*, lpNumberOfBytesRead=0x9def910*=0x4, lpOverlapped=0x0) returned 1 [0159.483] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0159.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0159.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.484] NtQuerySystemTime (in: CurrentTime=0x9def898 | out: CurrentTime=0x9def898*=132482710680204000) returned 0x0 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x3cf97a81 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x44c557b7 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x17dd72a [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x7a39ea14 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x16a0c4a7 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x27061159 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x43340b50 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0xd8cf36e [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x314c4681 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x64a47b98 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x5d2f2319 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x4022fbf7 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x3b73873a [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x294bb347 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x38ed6112 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x657a9bb [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0xc6edf54 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x1b895ee7 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x6136b8b1 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x941c4f6 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x3c52aa6b [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x27884d27 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x231f502a [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x6c69b4ee [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x522bb37b [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x1acab439 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x52eccf36 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x3a26e296 [0159.484] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x1b312af1 [0159.485] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x5ad67cac [0159.485] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x36f009c1 [0159.485] RtlRandomEx (in: Seed=0x9def890 | out: Seed=0x9def890) returned 0x15a61409 [0159.495] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.496] ReadFile (in: hFile=0x1b88, lpBuffer=0x67212e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9def898, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x9def898*=0x3c00, lpOverlapped=0x0) returned 1 [0159.496] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68221f8 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0159.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0159.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0159.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0159.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0159.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0159.497] WriteFile (in: hFile=0x1b88, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9def898, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x9def898*=0x3c00, lpOverlapped=0x0) returned 1 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0162.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x68226c0 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0162.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x6822240 [0162.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0162.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0162.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822288) returned 1 [0162.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8cb8 [0162.597] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.597] WriteFile (in: hFile=0x1b88, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9def918, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0x9def918*=0x122, lpOverlapped=0x0) returned 1 [0162.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0162.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68226c0) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0162.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0162.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0162.610] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4" [0162.610] wcscat (in: _Dest=0x3e0eed0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4.ac3a86" [0162.610] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4.ac3a86", NtPathName=0x9def890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\T8zugHYwGTpTU6tm_E63.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff79f0 [0162.624] FlushFileBuffers (hFile=0x1b88) returned 1 [0162.627] CloseHandle (hObject=0x1b88) returned 1 [0162.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef730 [0162.628] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0162.628] wcscat (in: _Dest=0x66ef730, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0162.628] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0162.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 [0162.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 2426 os_tid = 0x5d4 [0156.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\xb4k.mkv")) returned 0x20 [0156.503] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv", dwFileAttributes=0x20) returned 1 [0159.446] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\xb4k.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b8c [0159.446] GetFileSizeEx (in: hFile=0x1b8c, lpFileSize=0x885fcb4 | out: lpFileSize=0x885fcb4*=76555) returned 1 [0159.446] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x12b07, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.446] ReadFile (in: hFile=0x1b8c, lpBuffer=0x885fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x885fca0, lpOverlapped=0x0 | out: lpBuffer=0x885fc90*, lpNumberOfBytesRead=0x885fca0*=0x4, lpOverlapped=0x0) returned 1 [0159.448] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0159.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0159.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0159.448] NtQuerySystemTime (in: CurrentTime=0x885fc28 | out: CurrentTime=0x885fc28*=132482710679892000) returned 0x0 [0159.448] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x6f6ad3f1 [0159.448] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x48e75c6e [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x36ec7335 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x3a994b93 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x173e0a41 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x12fe81a [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x7bb7c764 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x5f611ff2 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x21c8e57f [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x1ab61010 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x48a556f7 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x71cc7461 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x1c5b9ca8 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x282f2b80 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0xd68b4e5 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x6e3eb209 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x688c1c63 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x2eb9c68e [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x77889d81 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0xfb8d54d [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x3165e185 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x5153f250 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x4abfd5e0 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x2985f0aa [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x6944112f [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x602c715a [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x2cf7da52 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x4abbc594 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x6c34fe0 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x4818f618 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x1f7b5562 [0159.449] RtlRandomEx (in: Seed=0x885fc20 | out: Seed=0x885fc20) returned 0x2d6e161f [0159.461] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.461] ReadFile (in: hFile=0x1b8c, lpBuffer=0x6730308, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x885fc28, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0x885fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0159.461] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68221f8 [0159.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0159.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0159.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0159.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6724ef0 [0159.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0159.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0159.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0159.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0159.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0159.462] WriteFile (in: hFile=0x1b8c, lpBuffer=0x6724ef0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x885fc28, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesWritten=0x885fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0159.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0159.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0159.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4bb80 [0159.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec88 [0159.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0159.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0159.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0159.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d4cb20 [0159.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0159.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0159.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0159.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0159.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0159.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec710 [0159.996] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.996] WriteFile (in: hFile=0x1b8c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x885fca8, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x885fca8*=0x102, lpOverlapped=0x0) returned 1 [0160.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0160.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0160.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edac78 [0160.388] wcscpy (in: _Dest=0x3edac78, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv" [0160.388] wcscat (in: _Dest=0x3edac78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv.ac3a86" [0160.388] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv.ac3a86", NtPathName=0x885fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\xB4k.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69595d8 [0160.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 [0160.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68114a0) returned 1 [0160.499] NtQueryInformationFile (in: FileHandle=0x1b8c, IoStatusBlock=0x885fbf8, FileInformation=0x885fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x885fbf8, FileInformation=0x885fc00) returned 0x0 [0160.499] NtSetInformationFile (FileHandle=0x1b8c, IoStatusBlock=0x885fbf8, FileInformation=0x885fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 [0160.502] FlushFileBuffers (hFile=0x1b8c) returned 1 [0160.503] CloseHandle (hObject=0x1b8c) returned 1 [0160.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f268c0 [0160.507] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0160.507] wcscat (in: _Dest=0x3f268c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0160.507] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0xffffffff [0160.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b7c [0160.564] WriteFile (in: hFile=0x1b7c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x885fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x885fc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0160.566] CloseHandle (hObject=0x1b7c) returned 1 [0160.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 [0160.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 Thread: id = 2427 os_tid = 0x1688 [0156.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\_1uew_w6daohvir.mp4")) returned 0x20 [0156.504] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4", dwFileAttributes=0x20) returned 1 [0159.464] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\_1uew_w6daohvir.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b90 [0159.465] GetFileSizeEx (in: hFile=0x1b90, lpFileSize=0x934fa5c | out: lpFileSize=0x934fa5c*=98133) returned 1 [0159.465] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x17f51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.465] ReadFile (in: hFile=0x1b90, lpBuffer=0x934fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x934fa48, lpOverlapped=0x0 | out: lpBuffer=0x934fa38*, lpNumberOfBytesRead=0x934fa48*=0x4, lpOverlapped=0x0) returned 1 [0159.466] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0159.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0159.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0159.466] NtQuerySystemTime (in: CurrentTime=0x934f9d0 | out: CurrentTime=0x934f9d0*=132482710680048000) returned 0x0 [0159.466] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x262815ee [0159.466] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x64893fbc [0159.466] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x2bbf0fda [0159.466] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x59b33a91 [0159.466] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x2080b8e7 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x7dc47d91 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x4f170cd [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x78f6dfbf [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x7bd8e5e1 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x6a6b4c1 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x6062817 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x2108910b [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x8474a31 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x8a30aab [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x67ed8a4a [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x2caef0be [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x20002ea7 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x3b59bcb1 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x78895a1c [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x6bbf9cde [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x77239b04 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x53202f8 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x383f7ad7 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x13912e25 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x4192c77c [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x43ceea40 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x3db4aeea [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x1a0c4601 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x5dd01452 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x17fb78d [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x4071ecc1 [0159.467] RtlRandomEx (in: Seed=0x934f9c8 | out: Seed=0x934f9c8) returned 0x6f2d4b8 [0159.476] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.476] ReadFile (in: hFile=0x1b90, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0159.476] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68221f8 [0159.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0159.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0159.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0159.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671d6e0 [0159.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0159.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0159.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0159.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0159.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0159.477] WriteFile (in: hFile=0x1b90, lpBuffer=0x671d6e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesWritten=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0160.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0160.001] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.001] ReadFile (in: hFile=0x1b90, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0160.002] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec88 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0160.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671d6e0 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0160.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0160.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0160.003] WriteFile (in: hFile=0x1b90, lpBuffer=0x671d6e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesWritten=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0160.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0160.026] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x14355, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.027] ReadFile (in: hFile=0x1b90, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0160.027] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x14355, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec88 [0160.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0160.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671d6e0 [0160.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0160.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0160.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0160.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0160.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0160.028] WriteFile (in: hFile=0x1b90, lpBuffer=0x671d6e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934f9d0, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesWritten=0x934f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0160.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0160.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f680 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec88 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f200 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c5d0 [0160.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0160.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0160.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0160.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0160.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x158) returned 0x3dce3d8 [0160.031] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.031] WriteFile (in: hFile=0x1b90, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x934fa50, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0x934fa50*=0x158, lpOverlapped=0x0) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f200) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f680) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0160.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0160.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959708 [0160.398] wcscpy (in: _Dest=0x6959708, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4" [0160.398] wcscat (in: _Dest=0x6959708, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4.ac3a86" [0160.398] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4.ac3a86", NtPathName=0x934f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\_1ueW_W6dAOHvIr.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e810 [0160.542] FlushFileBuffers (hFile=0x1b90) returned 1 [0160.546] CloseHandle (hObject=0x1b90) returned 1 [0160.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f260c8 [0160.548] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\" [0160.548] wcscat (in: _Dest=0x3f260c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" [0160.548] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\ac3a86-readme.txt")) returned 0x20 [0160.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0160.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 2428 os_tid = 0x1690 [0156.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist")) returned 0x20 [0157.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0157.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.478] GetLastError () returned 0x5 [0157.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0157.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 2429 os_tid = 0x1694 [0156.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts")) returned 0x20 [0157.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0157.479] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.479] GetLastError () returned 0x5 [0157.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0157.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 2430 os_tid = 0x1698 [0156.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy")) returned 0x20 [0157.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0157.481] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.481] GetLastError () returned 0x5 [0157.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0157.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 2431 os_tid = 0x11cc [0156.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security")) returned 0x20 [0157.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0157.482] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.482] GetLastError () returned 0x5 [0157.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0157.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 2432 os_tid = 0x11d0 [0156.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy")) returned 0x20 [0157.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0157.484] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.484] GetLastError () returned 0x5 [0157.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0157.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 Thread: id = 2433 os_tid = 0x11f4 [0156.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy")) returned 0x20 [0157.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0157.695] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.700] GetLastError () returned 0x5 [0157.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0157.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 2434 os_tid = 0x1320 [0156.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar")) returned 0x20 [0156.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0156.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.873] GetLastError () returned 0x5 [0156.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0156.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674abb8) returned 1 Thread: id = 2435 os_tid = 0xe70 [0156.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries")) returned 0x20 [0156.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0156.874] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.875] GetLastError () returned 0x5 [0156.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0156.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 Thread: id = 2436 os_tid = 0xe38 [0156.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar")) returned 0x20 [0157.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0157.476] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.476] GetLastError () returned 0x5 [0157.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0157.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 2437 os_tid = 0xeac [0156.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674bbb8 [0156.515] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0156.515] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0156.515] wcscat (in: _Dest=0x674bbb8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0156.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c100 [0156.515] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0156.516] wcscmp (_String1=".", _String2=".") returned 0 [0156.516] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.516] wcscmp (_String1="..", _String2=".") returned 1 [0156.516] wcscmp (_String1="..", _String2="..") returned 0 [0156.517] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0156.517] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0156.517] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0156.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e768 [0156.517] wcscpy (in: _Dest=0x697e768, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0156.517] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0156.517] wcscat (in: _Dest=0x697e768, _Source="Help_CValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0158.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0158.485] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0158.485] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0158.485] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0158.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697dee0 [0158.485] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.485] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.485] wcscat (in: _Dest=0x697dee0, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0158.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0158.486] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0158.486] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0158.486] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0158.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697de38 [0158.486] wcscpy (in: _Dest=0x697de38, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.487] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.487] wcscat (in: _Dest=0x697de38, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0158.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0158.488] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0158.488] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0158.488] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0158.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c6e78 [0158.488] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.488] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.488] wcscat (in: _Dest=0x2c6e78, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0158.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0158.489] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0158.489] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0158.489] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0158.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dd90 [0158.490] wcscpy (in: _Dest=0x697dd90, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.490] wcscat (in: _Dest=0x697dd90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.490] wcscat (in: _Dest=0x697dd90, _Source="Help_MValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0158.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0158.491] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0158.491] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0158.491] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0158.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e228 [0158.491] wcscpy (in: _Dest=0x697e228, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.491] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.491] wcscat (in: _Dest=0x697e228, _Source="Help_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0158.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0158.492] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0158.492] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0158.492] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0158.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48580 [0158.492] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0158.492] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0158.492] wcscat (in: _Dest=0x3e48580, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0158.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0158.493] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0158.493] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0158.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c100) returned 1 [0158.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 [0158.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b1b8) returned 1 Thread: id = 2438 os_tid = 0xe40 [0156.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0156.517] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0156.517] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\" [0156.517] wcscat (in: _Dest=0x3d8bb78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*" [0156.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0156.517] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0156.518] wcscmp (_String1=".", _String2=".") returned 0 [0156.518] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.518] wcscmp (_String1="..", _String2=".") returned 1 [0156.518] wcscmp (_String1="..", _String2="..") returned 0 [0156.518] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.518] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0156.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0156.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 [0156.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 2439 os_tid = 0xe00 [0156.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e2f0 [0156.519] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0156.519] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0156.519] wcscat (in: _Dest=0x3e0e2f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*" [0156.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0156.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0159.944] wcscmp (_String1=".", _String2=".") returned 0 [0159.945] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.945] wcscmp (_String1="..", _String2=".") returned 1 [0159.945] wcscmp (_String1="..", _String2="..") returned 0 [0159.945] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0159.945] wcscmp (_String1="Components", _String2=".") returned 1 [0159.945] wcscmp (_String1="Components", _String2="..") returned 1 [0159.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1268 [0159.945] wcscpy (in: _Dest=0x3ee1268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0159.945] wcscat (in: _Dest=0x3ee1268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0159.945] wcscat (in: _Dest=0x3ee1268, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0161.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee1268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0161.235] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1 [0161.235] wcscmp (_String1="ManagedObjects", _String2=".") returned 1 [0161.235] wcscmp (_String1="ManagedObjects", _String2="..") returned 1 [0161.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3329e8 [0161.235] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0161.235] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0161.235] wcscat (in: _Dest=0x3329e8, _Source="ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0161.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0161.238] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0161.238] wcscmp (_String1="Servers", _String2=".") returned 1 [0161.238] wcscmp (_String1="Servers", _String2="..") returned 1 [0161.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c6e8 [0161.238] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0161.238] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0161.238] wcscat (in: _Dest=0x35c6e8, _Source="Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0161.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0161.239] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0161.239] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0161.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0161.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 [0161.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 2440 os_tid = 0xc48 [0156.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e4d0 [0156.520] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0156.520] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0156.520] wcscat (in: _Dest=0x3e0e4d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*" [0156.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697bc30 [0156.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0160.755] wcscmp (_String1=".", _String2=".") returned 0 [0160.755] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.755] wcscmp (_String1="..", _String2=".") returned 1 [0160.755] wcscmp (_String1="..", _String2="..") returned 0 [0160.755] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0160.755] wcscmp (_String1="Components", _String2=".") returned 1 [0160.755] wcscmp (_String1="Components", _String2="..") returned 1 [0160.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b878 [0160.755] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0160.755] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0160.755] wcscat (in: _Dest=0x35b878, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0161.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0161.453] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0 [0161.453] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0161.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697bc30) returned 1 [0161.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 [0161.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2110) returned 1 Thread: id = 2441 os_tid = 0xe60 [0156.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0156.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0156.526] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.532] GetLastError () returned 0x5 [0156.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0156.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 2442 os_tid = 0xe5c [0156.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0156.536] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0156.536] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0156.537] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*" [0156.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c5d0 [0156.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807f8 [0160.098] wcscmp (_String1=".", _String2=".") returned 0 [0160.098] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.098] wcscmp (_String1="..", _String2=".") returned 1 [0160.098] wcscmp (_String1="..", _String2="..") returned 0 [0160.098] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1 [0160.098] wcscmp (_String1="jqs.conf", _String2=".") returned 1 [0160.098] wcscmp (_String1="jqs.conf", _String2="..") returned 1 [0160.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29bf0 [0160.098] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0160.098] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0160.098] wcscat (in: _Dest=0x3f29bf0, _Source="jqs.conf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" [0169.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0169.011] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1 [0169.011] wcscmp (_String1="jqsmessages.properties", _String2=".") returned 1 [0169.011] wcscmp (_String1="jqsmessages.properties", _String2="..") returned 1 [0169.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x355050 [0169.011] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0169.011] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0169.011] wcscat (in: _Dest=0x355050, _Source="jqsmessages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" [0169.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0169.013] FindNextFileW (in: hFindFile=0x3e807f8, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0 [0169.013] FindClose (in: hFindFile=0x3e807f8 | out: hFindFile=0x3e807f8) returned 1 [0169.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c5d0) returned 1 [0169.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0169.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe0c68) returned 1 Thread: id = 2443 os_tid = 0xb04 [0156.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties")) returned 0x20 [0160.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0160.878] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.879] GetLastError () returned 0x5 [0160.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0160.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bb38) returned 1 Thread: id = 2444 os_tid = 0x150 [0156.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties")) returned 0x20 [0161.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0161.061] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.061] GetLastError () returned 0x5 [0161.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0161.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 2445 os_tid = 0xd9c [0156.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties")) returned 0x20 [0161.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0161.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.574] GetLastError () returned 0x5 [0161.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0161.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 2446 os_tid = 0x7e4 [0156.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0161.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0161.575] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.575] GetLastError () returned 0x5 [0161.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0161.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 2447 os_tid = 0x11fc [0156.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties")) returned 0x20 [0161.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0161.576] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.576] GetLastError () returned 0x5 [0161.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0161.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 2448 os_tid = 0xaf8 [0156.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0161.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0161.578] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.578] GetLastError () returned 0x5 [0161.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0161.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 2449 os_tid = 0xdd0 [0156.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0161.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0161.580] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.580] GetLastError () returned 0x5 [0161.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0161.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 2450 os_tid = 0x17b8 [0156.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0161.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0161.582] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.582] GetLastError () returned 0x5 [0161.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0161.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 2451 os_tid = 0xe14 [0156.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0161.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0161.697] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.697] GetLastError () returned 0x5 [0161.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0161.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 2452 os_tid = 0xc24 [0156.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0161.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0161.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.699] GetLastError () returned 0x5 [0161.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0161.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 2453 os_tid = 0xac0 [0156.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0161.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0161.700] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.700] GetLastError () returned 0x5 [0161.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0161.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 2454 os_tid = 0x139c [0156.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0158.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0158.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.678] GetLastError () returned 0x5 [0158.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0158.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 2455 os_tid = 0x13a0 [0156.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif")) returned 0x20 [0158.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0160.109] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.695] GetLastError () returned 0x5 [0161.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0161.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 2456 os_tid = 0x1048 [0156.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 0x20 [0156.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0156.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.548] GetLastError () returned 0x5 [0156.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0156.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 2457 os_tid = 0x1408 [0156.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 0x20 [0158.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0158.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.830] GetLastError () returned 0x5 [0158.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0158.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d880) returned 1 Thread: id = 2458 os_tid = 0x1424 [0156.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 0x20 [0158.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0158.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.878] GetLastError () returned 0x5 [0158.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0158.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 2459 os_tid = 0xbf8 [0156.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 0x20 [0158.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0158.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.075] GetLastError () returned 0x5 [0158.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0158.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 2460 os_tid = 0x668 [0156.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 0x20 [0158.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0158.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.833] GetLastError () returned 0x5 [0158.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0158.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c770) returned 1 Thread: id = 2461 os_tid = 0xb88 [0156.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 0x20 [0158.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0158.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.832] GetLastError () returned 0x5 [0158.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0158.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dc70) returned 1 Thread: id = 2462 os_tid = 0x14a4 [0156.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 0x20 [0158.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0158.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.876] GetLastError () returned 0x5 [0158.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0158.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 2463 os_tid = 0x1378 [0156.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 0x20 [0158.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0158.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.842] GetLastError () returned 0x5 [0158.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0158.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 2464 os_tid = 0x64c [0156.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 0x20 [0158.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0158.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.874] GetLastError () returned 0x5 [0158.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0158.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 2465 os_tid = 0x530 [0156.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 0x20 [0158.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0158.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.872] GetLastError () returned 0x5 [0158.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0158.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 2466 os_tid = 0x1804 [0156.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 0x20 [0158.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0158.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.870] GetLastError () returned 0x5 [0158.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0158.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 2467 os_tid = 0x1808 [0156.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 0x20 [0158.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0158.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.869] GetLastError () returned 0x5 [0158.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0158.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 2468 os_tid = 0x180c [0156.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 0x20 [0158.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0158.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.867] GetLastError () returned 0x5 [0158.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0158.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 2469 os_tid = 0x1810 [0156.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 0x20 [0158.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0158.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.865] GetLastError () returned 0x5 [0158.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0158.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 2470 os_tid = 0x1814 [0156.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 0x20 [0158.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0158.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.863] GetLastError () returned 0x5 [0158.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0158.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 2471 os_tid = 0x1818 [0156.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 0x20 [0158.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0158.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.861] GetLastError () returned 0x5 [0158.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0158.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 2472 os_tid = 0x181c [0156.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 0x20 [0158.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0158.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.859] GetLastError () returned 0x5 [0158.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0158.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 2473 os_tid = 0x1820 [0156.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 0x20 [0158.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0158.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.857] GetLastError () returned 0x5 [0158.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0158.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 Thread: id = 2474 os_tid = 0x1824 [0156.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 0x20 [0158.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0158.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.855] GetLastError () returned 0x5 [0158.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0158.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 2475 os_tid = 0x1828 [0156.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 0x20 [0158.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0158.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.854] GetLastError () returned 0x5 [0158.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0158.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 2476 os_tid = 0x182c [0156.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 0x20 [0158.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0158.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.840] GetLastError () returned 0x5 [0158.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0158.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d688) returned 1 Thread: id = 2477 os_tid = 0x1830 [0156.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 0x20 [0158.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0158.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.852] GetLastError () returned 0x5 [0158.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0158.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 2478 os_tid = 0x1834 [0156.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 0x20 [0158.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0158.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.839] GetLastError () returned 0x5 [0158.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0158.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d3e8) returned 1 Thread: id = 2479 os_tid = 0x1838 [0156.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 0x20 [0158.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0158.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.850] GetLastError () returned 0x5 [0158.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0158.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 Thread: id = 2480 os_tid = 0x183c [0156.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 0x20 [0158.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0158.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.837] GetLastError () returned 0x5 [0158.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0158.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c8c0) returned 1 Thread: id = 2481 os_tid = 0x1840 [0156.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 0x20 [0158.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0158.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.848] GetLastError () returned 0x5 [0158.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0158.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5e0) returned 1 Thread: id = 2482 os_tid = 0x1844 [0156.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 0x20 [0158.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0158.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.846] GetLastError () returned 0x5 [0158.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0158.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da78) returned 1 Thread: id = 2483 os_tid = 0x1848 [0156.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 0x20 [0158.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0158.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.835] GetLastError () returned 0x5 [0158.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0158.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 2484 os_tid = 0x184c [0156.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 0x20 [0158.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0158.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.844] GetLastError () returned 0x5 [0158.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0158.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db20) returned 1 Thread: id = 2486 os_tid = 0x1854 [0156.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 0x20 [0156.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.880] GetLastError () returned 0x5 [0156.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2a90) returned 1 Thread: id = 2487 os_tid = 0x1858 [0156.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 0x20 [0156.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.882] GetLastError () returned 0x5 [0156.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32e0) returned 1 Thread: id = 2488 os_tid = 0x185c [0156.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 0x20 [0156.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.885] GetLastError () returned 0x5 [0156.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2bc0) returned 1 Thread: id = 2489 os_tid = 0x1860 [0156.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 0x20 [0156.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.888] GetLastError () returned 0x5 [0156.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3378) returned 1 Thread: id = 2490 os_tid = 0x1864 [0156.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 0x20 [0156.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.890] GetLastError () returned 0x5 [0156.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2cf0) returned 1 Thread: id = 2491 os_tid = 0x1868 [0156.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 0x20 [0156.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.893] GetLastError () returned 0x5 [0156.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3410) returned 1 Thread: id = 2492 os_tid = 0x186c [0156.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 0x20 [0156.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.895] GetLastError () returned 0x5 [0156.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2e20) returned 1 Thread: id = 2493 os_tid = 0x1870 [0156.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 0x20 [0156.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.897] GetLastError () returned 0x5 [0156.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c34a8) returned 1 Thread: id = 2494 os_tid = 0x1874 [0156.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 0x20 [0156.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.899] GetLastError () returned 0x5 [0156.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2f50) returned 1 Thread: id = 2495 os_tid = 0x1878 [0156.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 0x20 [0156.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.902] GetLastError () returned 0x5 [0156.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3540) returned 1 Thread: id = 2496 os_tid = 0x187c [0156.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 0x20 [0156.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.904] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.904] GetLastError () returned 0x5 [0156.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0156.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3080) returned 1 Thread: id = 2497 os_tid = 0x1880 [0156.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 0x20 [0156.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.906] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.906] GetLastError () returned 0x5 [0156.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0156.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c35d8) returned 1 Thread: id = 2498 os_tid = 0x1884 [0156.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6d28 [0156.908] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0156.908] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\" [0156.908] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*" [0156.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0156.908] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0156.908] wcscmp (_String1=".", _String2=".") returned 0 [0156.908] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.909] wcscmp (_String1="..", _String2=".") returned 1 [0156.909] wcscmp (_String1="..", _String2="..") returned 0 [0156.909] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.909] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0156.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0156.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0156.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 2499 os_tid = 0x1888 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674b038 [0156.910] wcscpy (in: _Dest=0x674b038, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0156.910] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0156.910] wcscat (in: _Dest=0x674b038, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0156.911] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0156.911] wcscmp (_String1=".", _String2=".") returned 0 [0156.911] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.911] wcscmp (_String1="..", _String2=".") returned 1 [0156.911] wcscmp (_String1="..", _String2="..") returned 0 [0156.911] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0156.911] wcscmp (_String1="en-US", _String2=".") returned 1 [0156.911] wcscmp (_String1="en-US", _String2="..") returned 1 [0156.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3d5a368 [0156.911] wcscpy (in: _Dest=0x3d5a368, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0156.911] wcscat (in: _Dest=0x3d5a368, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0156.912] wcscat (in: _Dest=0x3d5a368, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0157.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d5a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0157.401] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0157.401] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0157.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0157.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 [0157.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 2500 os_tid = 0x188c [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe66c8 [0156.916] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0156.916] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0156.916] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*" [0156.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0156.916] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xc88ec5c0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xc88ec5c0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0156.916] wcscmp (_String1=".", _String2=".") returned 0 [0156.916] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xc88ec5c0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xc88ec5c0, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.916] wcscmp (_String1="..", _String2=".") returned 1 [0156.916] wcscmp (_String1="..", _String2="..") returned 0 [0156.916] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88ec5c0, ftCreationTime.dwHighDateTime=0x1d6ac52, ftLastAccessTime.dwLowDateTime=0xc88ec5c0, ftLastAccessTime.dwHighDateTime=0x1d6ac52, ftLastWriteTime.dwLowDateTime=0xcad85800, ftLastWriteTime.dwHighDateTime=0x1d6ac52, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC3A86-Readme.txt", cAlternateFileName="AC3A86~1.TXT")) returned 1 [0156.916] wcscmp (_String1="AC3A86-Readme.txt", _String2=".") returned 1 [0156.916] wcscmp (_String1="AC3A86-Readme.txt", _String2="..") returned 1 [0156.916] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.bin.ac3a86", cAlternateFileName="BLACKB~1.AC3")) returned 1 [0156.916] wcscmp (_String1="blackbox.bin.ac3a86", _String2=".") returned 1 [0156.916] wcscmp (_String1="blackbox.bin.ac3a86", _String2="..") returned 1 [0156.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3d59510 [0156.917] wcscpy (in: _Dest=0x3d59510, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0156.917] wcscat (in: _Dest=0x3d59510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0156.917] wcscat (in: _Dest=0x3d59510, _Source="blackbox.bin.ac3a86" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86" [0157.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d59510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0157.271] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0157.271] wcscmp (_String1="Cache", _String2=".") returned 1 [0157.271] wcscmp (_String1="Cache", _String2="..") returned 1 [0157.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8be50 [0157.271] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0157.271] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0157.271] wcscat (in: _Dest=0x3d8be50, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0157.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0157.272] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0157.273] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0157.273] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0157.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1af70 [0157.273] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0157.273] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0157.273] wcscat (in: _Dest=0x3f1af70, _Source="drmstore.hds" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" [0157.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0157.274] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0157.274] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0157.274] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0157.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f293a0 [0157.274] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0157.274] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0157.274] wcscat (in: _Dest=0x3f293a0, _Source="v3ks.bla" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" [0157.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0157.276] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec.ac3a86", cAlternateFileName="V3KSSE~1.AC3")) returned 1 [0157.276] wcscmp (_String1="v3ks.sec.ac3a86", _String2=".") returned 1 [0157.276] wcscmp (_String1="v3ks.sec.ac3a86", _String2="..") returned 1 [0157.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674bd38 [0157.276] wcscpy (in: _Dest=0x674bd38, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0157.276] wcscat (in: _Dest=0x674bd38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0157.276] wcscat (in: _Dest=0x674bd38, _Source="v3ks.sec.ac3a86" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86" [0157.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0157.277] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec.ac3a86", cAlternateFileName="V3KSSE~1.AC3")) returned 0 [0157.277] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0157.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0157.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0157.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 2501 os_tid = 0x1890 [0156.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f291e0 [0156.917] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0156.917] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\" [0156.917] wcscat (in: _Dest=0x3f291e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*" [0156.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0156.917] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0156.918] wcscmp (_String1=".", _String2=".") returned 0 [0156.918] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.918] wcscmp (_String1="..", _String2=".") returned 1 [0156.918] wcscmp (_String1="..", _String2="..") returned 0 [0156.918] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.918] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0156.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0156.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 [0156.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 2502 os_tid = 0x1894 [0156.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbce8 [0156.920] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0156.920] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0156.920] wcscat (in: _Dest=0x66dbce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0156.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0156.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0156.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0156.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 [0156.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 2503 os_tid = 0x1898 [0156.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29bf0 [0156.922] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0156.922] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0156.922] wcscat (in: _Dest=0x3f29bf0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*" [0156.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0156.922] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0156.922] wcscmp (_String1=".", _String2=".") returned 0 [0156.922] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.922] wcscmp (_String1="..", _String2=".") returned 1 [0156.922] wcscmp (_String1="..", _String2="..") returned 0 [0156.922] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.923] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0156.923] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0156.923] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0156.923] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0156.923] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0156.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f277a0 [0156.923] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0156.923] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0156.923] wcscat (in: _Dest=0x3f277a0, _Source="Ringtone 01.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0157.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0157.404] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0157.404] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0157.404] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0157.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27580 [0157.404] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.404] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.404] wcscat (in: _Dest=0x3f27580, _Source="Ringtone 02.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0157.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0157.405] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0157.405] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0157.405] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0157.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27470 [0157.405] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.405] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.405] wcscat (in: _Dest=0x3f27470, _Source="Ringtone 03.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0157.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0157.406] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0157.406] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0157.406] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0157.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27690 [0157.407] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.407] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.407] wcscat (in: _Dest=0x3f27690, _Source="Ringtone 04.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0157.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0157.408] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0157.408] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0157.408] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0157.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27718 [0157.408] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.408] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.408] wcscat (in: _Dest=0x3f27718, _Source="Ringtone 05.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0157.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0157.409] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0157.409] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0157.409] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0157.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27608 [0157.409] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.409] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.409] wcscat (in: _Dest=0x3f27608, _Source="Ringtone 06.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0157.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0157.410] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0157.410] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0157.410] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0157.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f260c8 [0157.410] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.410] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.411] wcscat (in: _Dest=0x3f260c8, _Source="Ringtone 07.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0157.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0157.412] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0157.412] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0157.412] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0157.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26948 [0157.412] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.412] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.412] wcscat (in: _Dest=0x3f26948, _Source="Ringtone 08.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0157.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0157.413] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0157.413] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0157.413] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0157.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f268c0 [0157.413] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.413] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.413] wcscat (in: _Dest=0x3f268c0, _Source="Ringtone 09.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0157.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0157.415] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0157.415] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0157.415] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0157.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26838 [0157.415] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0157.415] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0157.415] wcscat (in: _Dest=0x3f26838, _Source="Ringtone 10.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0157.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0157.416] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0157.416] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0160.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0160.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 [0160.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 2504 os_tid = 0x189c [0156.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6d28 [0156.923] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0156.924] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0156.924] wcscat (in: _Dest=0x2fe6d28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*" [0156.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0156.924] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e807b8 [0156.924] wcscmp (_String1=".", _String2=".") returned 0 [0156.924] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.924] wcscmp (_String1="..", _String2=".") returned 1 [0156.924] wcscmp (_String1="..", _String2="..") returned 0 [0156.924] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0156.924] wcscmp (_String1="Manifest", _String2=".") returned 1 [0156.924] wcscmp (_String1="Manifest", _String2="..") returned 1 [0156.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f291e0 [0156.924] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0156.924] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0156.924] wcscat (in: _Dest=0x3f291e0, _Source="Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0159.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f291e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0159.638] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0159.638] wcscmp (_String1="Sessions", _String2=".") returned 1 [0159.638] wcscmp (_String1="Sessions", _String2="..") returned 1 [0159.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29950 [0159.638] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0159.638] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0159.638] wcscat (in: _Dest=0x3f29950, _Source="Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0159.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0159.640] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0159.640] wcscmp (_String1="Upload", _String2=".") returned 1 [0159.640] wcscmp (_String1="Upload", _String2="..") returned 1 [0159.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ccf0 [0159.640] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0159.640] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0159.640] wcscat (in: _Dest=0x3d8ccf0, _Source="Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0159.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c [0159.641] FindNextFileW (in: hFindFile=0x3e807b8, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0159.641] FindClose (in: hFindFile=0x3e807b8 | out: hFindFile=0x3e807b8) returned 1 [0159.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0159.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0159.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 2505 os_tid = 0x18a0 [0156.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29800 [0156.925] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0156.925] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0156.925] wcscat (in: _Dest=0x3f29800, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*" [0156.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0156.925] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0156.925] wcscmp (_String1=".", _String2=".") returned 0 [0156.925] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.925] wcscmp (_String1="..", _String2=".") returned 1 [0156.925] wcscmp (_String1="..", _String2="..") returned 0 [0156.925] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0156.925] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0156.925] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0156.925] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.925] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0156.925] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0156.925] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0156.925] wcscmp (_String1="Programs", _String2=".") returned 1 [0156.925] wcscmp (_String1="Programs", _String2="..") returned 1 [0156.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674abb8 [0156.926] wcscpy (in: _Dest=0x674abb8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0156.926] wcscat (in: _Dest=0x674abb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0156.926] wcscat (in: _Dest=0x674abb8, _Source="Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0159.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674abb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0159.732] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0159.732] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0159.732] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0159.732] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0159.732] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0159.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0159.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 [0159.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 2506 os_tid = 0x18a4 [0156.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29cd0 [0156.926] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0156.926] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\" [0156.926] wcscat (in: _Dest=0x3f29cd0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*" [0156.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0156.926] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0156.927] wcscmp (_String1=".", _String2=".") returned 0 [0156.927] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.927] wcscmp (_String1="..", _String2=".") returned 1 [0156.927] wcscmp (_String1="..", _String2="..") returned 0 [0156.927] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.927] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0156.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0156.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 [0156.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 2507 os_tid = 0x18a8 [0156.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f08 [0156.928] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0156.928] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0156.928] wcscat (in: _Dest=0x2fe6f08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*" [0156.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0156.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0156.929] wcscmp (_String1=".", _String2=".") returned 0 [0156.929] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.929] wcscmp (_String1="..", _String2=".") returned 1 [0156.929] wcscmp (_String1="..", _String2="..") returned 0 [0156.929] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0156.929] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0156.929] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0156.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d07e0 [0156.929] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0156.929] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0156.929] wcscat (in: _Dest=0x66d07e0, _Source="ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0159.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d07e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0159.734] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0159.734] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0159.734] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0159.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d00d8 [0159.734] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0159.734] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0159.734] wcscat (in: _Dest=0x66d00d8, _Source="ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0159.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66d00d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0159.735] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0159.735] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0159.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0159.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0159.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 Thread: id = 2508 os_tid = 0x18ac [0156.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl")) returned 0x20 [0157.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0157.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.730] GetLastError () returned 0x5 [0157.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0157.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 2509 os_tid = 0x18b0 [0156.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt")) returned 0x20 [0157.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0157.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.732] GetLastError () returned 0x5 [0157.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0157.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 2510 os_tid = 0x18b4 [0156.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd")) returned 0x20 [0157.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0157.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.760] GetLastError () returned 0x5 [0157.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0157.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2511 os_tid = 0x18b8 [0156.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts")) returned 0x20 [0157.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0157.761] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.761] GetLastError () returned 0x5 [0157.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0157.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 2512 os_tid = 0x18bc [0156.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts")) returned 0x20 [0157.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0157.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.763] GetLastError () returned 0x5 [0157.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0157.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 2513 os_tid = 0x18c0 [0156.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt")) returned 0x20 [0157.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0157.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.765] GetLastError () returned 0x5 [0157.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0157.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee13d8) returned 1 Thread: id = 2514 os_tid = 0x18c4 [0156.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt")) returned 0x20 [0157.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0157.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.766] GetLastError () returned 0x5 [0157.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0157.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1268) returned 1 Thread: id = 2515 os_tid = 0x18c8 [0156.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih")) returned 0x20 [0157.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0157.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.777] GetLastError () returned 0x5 [0157.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0157.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1320) returned 1 Thread: id = 2516 os_tid = 0x18cc [0156.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini")) returned 0x20 [0156.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.935] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.935] GetLastError () returned 0x5 [0156.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0156.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 2517 os_tid = 0x18d0 [0156.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 0x20 [0156.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0156.940] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.941] GetLastError () returned 0x5 [0156.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0156.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e408) returned 1 Thread: id = 2518 os_tid = 0x18d4 [0156.943] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0156.946] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0156.949] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.955] GetLastError () returned 0x5 [0156.955] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0156.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2519 os_tid = 0x18d8 [0156.959] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0156.962] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0156.966] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.973] GetLastError () returned 0x5 [0156.973] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0156.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 2520 os_tid = 0x18dc [0156.978] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0156.982] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0156.986] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.013] GetLastError () returned 0x5 [0157.014] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0157.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 2521 os_tid = 0x18e0 [0157.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1ce8 [0157.019] wcscpy (in: _Dest=0x2fe1ce8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0157.019] wcscat (in: _Dest=0x2fe1ce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0157.019] wcscat (in: _Dest=0x2fe1ce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" [0157.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0157.019] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0157.020] wcscmp (_String1=".", _String2=".") returned 0 [0157.020] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.020] wcscmp (_String1="..", _String2=".") returned 1 [0157.020] wcscmp (_String1="..", _String2="..") returned 0 [0157.020] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0157.020] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0157.020] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0157.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29cd0 [0157.020] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0157.021] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0157.021] wcscat (in: _Dest=0x3f29cd0, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0157.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0157.279] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0157.279] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0157.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0157.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1ce8) returned 1 [0157.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d50c8) returned 1 Thread: id = 2522 os_tid = 0x18e4 [0157.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6cc8 [0157.025] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0157.025] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\" [0157.025] wcscat (in: _Dest=0x2fe6cc8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" [0157.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0157.026] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0157.026] wcscmp (_String1=".", _String2=".") returned 0 [0157.026] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.026] wcscmp (_String1="..", _String2=".") returned 1 [0157.026] wcscmp (_String1="..", _String2="..") returned 0 [0157.026] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.026] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0157.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0157.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0157.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 2523 os_tid = 0x18e8 [0157.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0157.028] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0157.028] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0157.028] wcscat (in: _Dest=0x2fe1d48, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*" [0157.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0157.028] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0157.029] wcscmp (_String1=".", _String2=".") returned 0 [0157.029] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.029] wcscmp (_String1="..", _String2=".") returned 1 [0157.029] wcscmp (_String1="..", _String2="..") returned 0 [0157.029] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0157.029] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0157.029] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0157.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29870 [0157.029] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0157.029] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0157.029] wcscat (in: _Dest=0x3f29870, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0157.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0157.282] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0157.282] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0157.282] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0157.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29aa0 [0157.282] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0157.282] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0157.282] wcscat (in: _Dest=0x3f29aa0, _Source="S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0157.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0157.283] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0157.283] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0157.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0157.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 [0157.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4e08) returned 1 Thread: id = 2524 os_tid = 0x18ec [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3defe78 [0157.034] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0157.034] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0157.034] wcscat (in: _Dest=0x3defe78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c838 [0157.034] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80f38 [0157.034] wcscmp (_String1=".", _String2=".") returned 0 [0157.034] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.034] wcscmp (_String1="..", _String2=".") returned 1 [0157.034] wcscmp (_String1="..", _String2="..") returned 0 [0157.034] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0157.034] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0157.034] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c97c8 [0157.035] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0157.035] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0157.035] wcscat (in: _Dest=0x2c97c8, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0158.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0158.497] FindNextFileW (in: hFindFile=0x3e80f38, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0158.497] FindClose (in: hFindFile=0x3e80f38 | out: hFindFile=0x3e80f38) returned 1 [0158.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c838) returned 1 [0158.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 [0158.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 2525 os_tid = 0x18f0 [0157.037] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0157.037] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0157.037] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.038] GetLastError () returned 0x5 [0157.038] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0157.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 2526 os_tid = 0x18f4 [0157.039] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0157.040] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0157.040] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.040] GetLastError () returned 0x5 [0157.040] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0157.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 2527 os_tid = 0x18f8 [0157.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif")) returned 0x20 [0157.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0157.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.042] GetLastError () returned 0x5 [0157.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0157.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 2528 os_tid = 0x18fc [0157.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif")) returned 0x20 [0157.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0157.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.044] GetLastError () returned 0x5 [0157.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0157.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 2529 os_tid = 0x1900 [0157.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif")) returned 0x20 [0157.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0157.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.046] GetLastError () returned 0x5 [0157.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0157.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 2530 os_tid = 0x1904 [0157.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif")) returned 0x20 [0157.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0157.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.048] GetLastError () returned 0x5 [0157.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0157.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 Thread: id = 2531 os_tid = 0x1908 [0157.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif")) returned 0x20 [0157.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0157.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.053] GetLastError () returned 0x5 [0157.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0157.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d730) returned 1 Thread: id = 2532 os_tid = 0x190c [0157.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d")) returned 0x20 [0158.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0158.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.732] GetLastError () returned 0x5 [0158.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0158.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 2533 os_tid = 0x1910 [0157.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20 [0158.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0158.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.733] GetLastError () returned 0x5 [0158.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0158.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 2534 os_tid = 0x1914 [0157.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d")) returned 0x20 [0158.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0158.735] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.735] GetLastError () returned 0x5 [0158.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0158.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 2535 os_tid = 0x1918 [0157.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20 [0158.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0158.742] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.749] GetLastError () returned 0x5 [0158.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0158.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 2536 os_tid = 0x191c [0157.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20 [0158.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0158.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.730] GetLastError () returned 0x5 [0158.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0158.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 Thread: id = 2537 os_tid = 0x1920 [0157.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674acb8 [0157.058] wcscpy (in: _Dest=0x674acb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0157.058] wcscat (in: _Dest=0x674acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0157.058] wcscat (in: _Dest=0x674acb8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*" [0157.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a688 [0157.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0158.033] wcscmp (_String1=".", _String2=".") returned 0 [0158.033] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.033] wcscmp (_String1="..", _String2=".") returned 1 [0158.033] wcscmp (_String1="..", _String2="..") returned 0 [0158.033] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0158.033] wcscmp (_String1="MyriadCAD.otf", _String2=".") returned 1 [0158.033] wcscmp (_String1="MyriadCAD.otf", _String2="..") returned 1 [0158.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819968 [0158.033] wcscpy (in: _Dest=0x6819968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0158.033] wcscat (in: _Dest=0x6819968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0158.033] wcscat (in: _Dest=0x6819968, _Source="MyriadCAD.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" [0158.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6819968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0158.628] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0158.628] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0158.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a688) returned 1 [0158.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674acb8) returned 1 [0158.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 2538 os_tid = 0x1924 [0157.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d")) returned 0x20 [0158.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0158.725] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.726] GetLastError () returned 0x5 [0158.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0158.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 2539 os_tid = 0x1928 [0157.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20 [0158.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0158.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.728] GetLastError () returned 0x5 [0158.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0158.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e498) returned 1 Thread: id = 2540 os_tid = 0x192c [0157.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e408 [0157.059] wcscpy (in: _Dest=0x674e408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0157.059] wcscat (in: _Dest=0x674e408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0157.059] wcscat (in: _Dest=0x674e408, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*" [0157.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24a0 [0157.060] wcscmp (_String1=".", _String2=".") returned 0 [0157.060] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.060] wcscmp (_String1="..", _String2=".") returned 1 [0157.060] wcscmp (_String1="..", _String2="..") returned 0 [0157.060] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0157.060] wcscmp (_String1="ICU", _String2=".") returned 1 [0157.060] wcscmp (_String1="ICU", _String2="..") returned 1 [0157.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d9e8 [0157.060] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0157.060] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0157.060] wcscat (in: _Dest=0x674d9e8, _Source="ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0157.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0157.285] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0157.286] wcscmp (_String1="Mappings", _String2=".") returned 1 [0157.286] wcscmp (_String1="Mappings", _String2="..") returned 1 [0157.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0dc8 [0157.286] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0157.286] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0157.286] wcscat (in: _Dest=0x69c0dc8, _Source="Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0157.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0157.287] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0157.287] FindClose (in: hFindFile=0x66d24a0 | out: hFindFile=0x66d24a0) returned 1 [0157.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0157.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e408) returned 1 [0157.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 2541 os_tid = 0x1930 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dcb0 [0157.061] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0157.061] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0157.061] wcscat (in: _Dest=0x3e0dcb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*" [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0157.061] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0158.037] wcscmp (_String1=".", _String2=".") returned 0 [0158.037] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.041] wcscmp (_String1="..", _String2=".") returned 1 [0158.041] wcscmp (_String1="..", _String2="..") returned 0 [0158.041] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="DICAC9~1.TXT")) returned 1 [0158.041] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2=".") returned 1 [0158.041] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2="..") returned 1 [0158.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036b00 [0158.042] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.042] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.042] wcscat (in: _Dest=0x3036b00, _Source="DisplayLanguageNames.ar.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" [0158.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0158.634] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_AE.txt", cAlternateFileName="DI3495~1.TXT")) returned 1 [0158.634] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2=".") returned 1 [0158.634] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2="..") returned 1 [0158.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48220 [0158.634] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.634] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.634] wcscat (in: _Dest=0x3e48220, _Source="DisplayLanguageNames.ar_AE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" [0158.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0158.635] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_BH.txt", cAlternateFileName="DI7F79~1.TXT")) returned 1 [0158.635] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2=".") returned 1 [0158.635] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2="..") returned 1 [0158.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e483d0 [0158.635] wcscpy (in: _Dest=0x3e483d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.635] wcscat (in: _Dest=0x3e483d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.635] wcscat (in: _Dest=0x3e483d0, _Source="DisplayLanguageNames.ar_BH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" [0158.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e483d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0158.637] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_DZ.txt", cAlternateFileName="DIF61A~1.TXT")) returned 1 [0158.637] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2=".") returned 1 [0158.637] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2="..") returned 1 [0158.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e484a8 [0158.637] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.637] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.637] wcscat (in: _Dest=0x3e484a8, _Source="DisplayLanguageNames.ar_DZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" [0158.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0158.642] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_EG.txt", cAlternateFileName="DIC7FA~1.TXT")) returned 1 [0158.642] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2=".") returned 1 [0158.642] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2="..") returned 1 [0158.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e47578 [0158.642] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.642] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.642] wcscat (in: _Dest=0x3e47578, _Source="DisplayLanguageNames.ar_EG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" [0158.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0158.644] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IN.txt", cAlternateFileName="DI4FA4~1.TXT")) returned 1 [0158.644] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2=".") returned 1 [0158.644] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2="..") returned 1 [0158.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0158.644] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.644] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.644] wcscat (in: _Dest=0x3e48b68, _Source="DisplayLanguageNames.ar_IN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" [0158.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0158.645] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IQ.txt", cAlternateFileName="DI3F41~1.TXT")) returned 1 [0158.645] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2=".") returned 1 [0158.645] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2="..") returned 1 [0158.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0158.645] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.645] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.645] wcscat (in: _Dest=0x3e48a90, _Source="DisplayLanguageNames.ar_IQ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" [0158.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0158.647] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_JO.txt", cAlternateFileName="DI0622~1.TXT")) returned 1 [0158.647] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2=".") returned 1 [0158.647] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2="..") returned 1 [0158.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48730 [0158.647] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.647] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.647] wcscat (in: _Dest=0x3e48730, _Source="DisplayLanguageNames.ar_JO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" [0158.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0158.648] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_KW.txt", cAlternateFileName="DIF6C4~1.TXT")) returned 1 [0158.648] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2=".") returned 1 [0158.648] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2="..") returned 1 [0158.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e57f8 [0158.648] wcscpy (in: _Dest=0x2e57f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.648] wcscat (in: _Dest=0x2e57f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.648] wcscat (in: _Dest=0x2e57f8, _Source="DisplayLanguageNames.ar_KW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" [0158.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e57f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0158.650] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LB.txt", cAlternateFileName="DI621E~1.TXT")) returned 1 [0158.650] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2=".") returned 1 [0158.650] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2="..") returned 1 [0158.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e6650 [0158.650] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.650] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.650] wcscat (in: _Dest=0x2e6650, _Source="DisplayLanguageNames.ar_LB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" [0158.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e6650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0158.651] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LY.txt", cAlternateFileName="DID7B2~1.TXT")) returned 1 [0158.651] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2=".") returned 1 [0158.651] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2="..") returned 1 [0158.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e58d0 [0158.651] wcscpy (in: _Dest=0x2e58d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.651] wcscat (in: _Dest=0x2e58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.651] wcscat (in: _Dest=0x2e58d0, _Source="DisplayLanguageNames.ar_LY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" [0158.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e58d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0158.652] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_MA.txt", cAlternateFileName="DIEC69~1.TXT")) returned 1 [0158.653] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2=".") returned 1 [0158.653] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2="..") returned 1 [0158.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e5b58 [0158.653] wcscpy (in: _Dest=0x2e5b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.653] wcscat (in: _Dest=0x2e5b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.653] wcscat (in: _Dest=0x2e5b58, _Source="DisplayLanguageNames.ar_MA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" [0158.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e5b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0158.654] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_OM.txt", cAlternateFileName="DIC553~1.TXT")) returned 1 [0158.654] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2=".") returned 1 [0158.654] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2="..") returned 1 [0158.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e5648 [0158.654] wcscpy (in: _Dest=0x2e5648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.654] wcscat (in: _Dest=0x2e5648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.654] wcscat (in: _Dest=0x2e5648, _Source="DisplayLanguageNames.ar_OM.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" [0158.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0158.656] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_QA.txt", cAlternateFileName="DI2F38~1.TXT")) returned 1 [0158.656] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2=".") returned 1 [0158.656] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2="..") returned 1 [0158.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e6800 [0158.656] wcscpy (in: _Dest=0x2e6800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.656] wcscat (in: _Dest=0x2e6800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.656] wcscat (in: _Dest=0x2e6800, _Source="DisplayLanguageNames.ar_QA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" [0158.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e6800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0158.657] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SA.txt", cAlternateFileName="DI48AF~1.TXT")) returned 1 [0158.657] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2=".") returned 1 [0158.657] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2="..") returned 1 [0158.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30125c8 [0158.657] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.657] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.657] wcscat (in: _Dest=0x30125c8, _Source="DisplayLanguageNames.ar_SA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" [0158.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0158.658] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SD.txt", cAlternateFileName="DIC7AF~1.TXT")) returned 1 [0158.658] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2=".") returned 1 [0158.658] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2="..") returned 1 [0158.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3012a00 [0158.659] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.659] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.659] wcscat (in: _Dest=0x3012a00, _Source="DisplayLanguageNames.ar_SD.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" [0158.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0158.660] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SY.txt", cAlternateFileName="DID7BE~1.TXT")) returned 1 [0158.660] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2=".") returned 1 [0158.660] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2="..") returned 1 [0158.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011d58 [0158.660] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.660] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.660] wcscat (in: _Dest=0x3011d58, _Source="DisplayLanguageNames.ar_SY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" [0158.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0158.662] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_TN.txt", cAlternateFileName="DI7175~1.TXT")) returned 1 [0158.662] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2=".") returned 1 [0158.662] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2="..") returned 1 [0158.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30126a0 [0158.662] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.662] wcscat (in: _Dest=0x30126a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.662] wcscat (in: _Dest=0x30126a0, _Source="DisplayLanguageNames.ar_TN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" [0158.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30126a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0158.663] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_YE.txt", cAlternateFileName="DIE8B6~1.TXT")) returned 1 [0158.663] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2=".") returned 1 [0158.663] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2="..") returned 1 [0158.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011188 [0158.663] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.663] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.663] wcscat (in: _Dest=0x3011188, _Source="DisplayLanguageNames.ar_YE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" [0158.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0158.664] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg.txt", cAlternateFileName="DI8E5A~1.TXT")) returned 1 [0158.665] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2=".") returned 1 [0158.665] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2="..") returned 1 [0158.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036ca0 [0158.665] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.665] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.665] wcscat (in: _Dest=0x3036ca0, _Source="DisplayLanguageNames.bg.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" [0158.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0158.666] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg_BG.txt", cAlternateFileName="DIC784~1.TXT")) returned 1 [0158.666] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2=".") returned 1 [0158.666] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2="..") returned 1 [0158.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011770 [0158.666] wcscpy (in: _Dest=0x3011770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0158.666] wcscat (in: _Dest=0x3011770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0158.666] wcscat (in: _Dest=0x3011770, _Source="DisplayLanguageNames.bg_BG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" [0158.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0159.902] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca.txt", cAlternateFileName="DIFBE9~1.TXT")) returned 1 [0159.902] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2=".") returned 1 [0159.902] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2="..") returned 1 [0159.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35750 [0159.902] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0159.902] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0159.902] wcscat (in: _Dest=0x3e35750, _Source="DisplayLanguageNames.ca.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" [0161.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0161.391] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES.txt", cAlternateFileName="DI0E62~1.TXT")) returned 1 [0161.391] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2=".") returned 1 [0161.391] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2="..") returned 1 [0161.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30126a0 [0161.391] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0161.391] wcscat (in: _Dest=0x30126a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0161.391] wcscat (in: _Dest=0x30126a0, _Source="DisplayLanguageNames.ca_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" [0161.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30126a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0161.393] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES_PREEURO.txt", cAlternateFileName="DIFFE0~1.TXT")) returned 1 [0161.393] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2=".") returned 1 [0161.393] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2="..") returned 1 [0161.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56668 [0161.393] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0161.393] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0161.393] wcscat (in: _Dest=0x3d56668, _Source="DisplayLanguageNames.ca_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" [0161.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0161.394] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs.txt", cAlternateFileName="DI5C2E~1.TXT")) returned 1 [0161.394] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2=".") returned 1 [0161.394] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2="..") returned 1 [0161.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x30352a0 [0161.394] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0161.394] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0161.394] wcscat (in: _Dest=0x30352a0, _Source="DisplayLanguageNames.cs.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" [0161.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0161.395] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs_CZ.txt", cAlternateFileName="DICA81~1.TXT")) returned 1 [0161.397] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2=".") returned 1 [0161.397] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2="..") returned 1 [0161.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011d58 [0161.397] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0161.397] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0161.397] wcscat (in: _Dest=0x3011d58, _Source="DisplayLanguageNames.cs_CZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" [0165.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0165.350] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da.txt", cAlternateFileName="DI3825~1.TXT")) returned 1 [0165.350] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2=".") returned 1 [0165.350] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2="..") returned 1 [0165.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36110 [0165.350] wcscpy (in: _Dest=0x3e36110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.350] wcscat (in: _Dest=0x3e36110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.350] wcscat (in: _Dest=0x3e36110, _Source="DisplayLanguageNames.da.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" [0165.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0165.352] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da_DK.txt", cAlternateFileName="DID241~1.TXT")) returned 1 [0165.352] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2=".") returned 1 [0165.352] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2="..") returned 1 [0165.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30125c8 [0165.352] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.352] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.352] wcscat (in: _Dest=0x30125c8, _Source="DisplayLanguageNames.da_DK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" [0165.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0165.353] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_CH.txt", cAlternateFileName="DI26AE~1.TXT")) returned 1 [0165.353] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2=".") returned 1 [0165.353] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2="..") returned 1 [0165.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011770 [0165.354] wcscpy (in: _Dest=0x3011770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.354] wcscat (in: _Dest=0x3011770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.354] wcscat (in: _Dest=0x3011770, _Source="DisplayLanguageNames.de_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" [0165.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0165.355] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7328, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE.txt", cAlternateFileName="DID4A5~1.TXT")) returned 1 [0165.355] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2=".") returned 1 [0165.355] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2="..") returned 1 [0165.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011188 [0165.355] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.355] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.355] wcscat (in: _Dest=0x3011188, _Source="DisplayLanguageNames.de_DE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" [0165.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0165.357] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7326, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE_PREEURO.txt", cAlternateFileName="DI06A0~1.TXT")) returned 1 [0165.357] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2=".") returned 1 [0165.357] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2="..") returned 1 [0165.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56838 [0165.357] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.357] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.357] wcscat (in: _Dest=0x3d56838, _Source="DisplayLanguageNames.de_DE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" [0165.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0165.358] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el.txt", cAlternateFileName="DI372F~1.TXT")) returned 1 [0165.358] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2=".") returned 1 [0165.359] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2="..") returned 1 [0165.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36520 [0165.359] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.359] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.359] wcscat (in: _Dest=0x3e36520, _Source="DisplayLanguageNames.el.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" [0165.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0165.360] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR.txt", cAlternateFileName="DI5702~1.TXT")) returned 1 [0165.360] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2=".") returned 1 [0165.360] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2="..") returned 1 [0165.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48730 [0165.360] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.360] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.361] wcscat (in: _Dest=0x3e48730, _Source="DisplayLanguageNames.el_GR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" [0165.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0165.362] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR_PREEURO.txt", cAlternateFileName="DI8CEE~1.TXT")) returned 1 [0165.362] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2=".") returned 1 [0165.362] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2="..") returned 1 [0165.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56920 [0165.362] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.362] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.362] wcscat (in: _Dest=0x3d56920, _Source="DisplayLanguageNames.el_GR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" [0165.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0165.364] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="DI579A~1.TXT")) returned 1 [0165.364] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2=".") returned 1 [0165.364] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2="..") returned 1 [0165.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0165.364] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.364] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.364] wcscat (in: _Dest=0x3e48a90, _Source="DisplayLanguageNames.en_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" [0165.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0165.365] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="DICF87~1.TXT")) returned 1 [0165.365] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2=".") returned 1 [0165.365] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2="..") returned 1 [0165.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0165.365] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.366] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.366] wcscat (in: _Dest=0x3e48b68, _Source="DisplayLanguageNames.en_GB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" [0165.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0165.367] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="DIB168~1.TXT")) returned 1 [0165.367] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2=".") returned 1 [0165.367] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2="..") returned 1 [0165.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9a68 [0165.367] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.367] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.367] wcscat (in: _Dest=0x2c9a68, _Source="DisplayLanguageNames.en_GB_EURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" [0165.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0165.369] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="DI0A37~1.TXT")) returned 1 [0165.369] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2=".") returned 1 [0165.369] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2="..") returned 1 [0165.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e47578 [0165.369] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.369] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.369] wcscat (in: _Dest=0x3e47578, _Source="DisplayLanguageNames.en_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" [0165.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0165.371] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 1 [0165.371] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2=".") returned 1 [0165.371] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2="..") returned 1 [0165.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c96e8 [0165.371] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.371] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.371] wcscat (in: _Dest=0x2c96e8, _Source="DisplayLanguageNames.en_US_POSIX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" [0165.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0165.372] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es.txt", cAlternateFileName="DIA363~1.TXT")) returned 1 [0165.372] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2=".") returned 1 [0165.373] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2="..") returned 1 [0165.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0165.373] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.373] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.373] wcscat (in: _Dest=0x3e35d00, _Source="DisplayLanguageNames.es.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" [0165.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0165.374] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_AR.txt", cAlternateFileName="DID78F~1.TXT")) returned 1 [0165.374] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2=".") returned 1 [0165.374] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2="..") returned 1 [0165.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e484a8 [0165.374] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.374] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.375] wcscat (in: _Dest=0x3e484a8, _Source="DisplayLanguageNames.es_AR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" [0165.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0165.376] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_BO.txt", cAlternateFileName="DIA31D~1.TXT")) returned 1 [0165.376] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2=".") returned 1 [0165.376] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2="..") returned 1 [0165.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e483d0 [0165.376] wcscpy (in: _Dest=0x3e483d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.376] wcscat (in: _Dest=0x3e483d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.376] wcscat (in: _Dest=0x3e483d0, _Source="DisplayLanguageNames.es_BO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" [0165.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e483d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0165.378] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CL.txt", cAlternateFileName="DI9065~1.TXT")) returned 1 [0165.378] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2=".") returned 1 [0165.378] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2="..") returned 1 [0165.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48220 [0165.378] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.378] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.378] wcscat (in: _Dest=0x3e48220, _Source="DisplayLanguageNames.es_CL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" [0165.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac [0165.380] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CO.txt", cAlternateFileName="DIF0AE~1.TXT")) returned 1 [0165.380] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2=".") returned 1 [0165.380] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2="..") returned 1 [0165.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e488e0 [0165.380] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.380] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.380] wcscat (in: _Dest=0x3e488e0, _Source="DisplayLanguageNames.es_CO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" [0165.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e488e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0165.381] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CR.txt", cAlternateFileName="DI0002~1.TXT")) returned 1 [0165.381] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2=".") returned 1 [0165.381] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2="..") returned 1 [0165.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48808 [0165.381] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.382] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.382] wcscat (in: _Dest=0x3e48808, _Source="DisplayLanguageNames.es_CR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" [0165.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0165.383] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_DO.txt", cAlternateFileName="DI1A09~1.TXT")) returned 1 [0165.383] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2=".") returned 1 [0165.383] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2="..") returned 1 [0165.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e489b8 [0165.383] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.383] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.383] wcscat (in: _Dest=0x3e489b8, _Source="DisplayLanguageNames.es_DO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" [0165.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0165.385] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_EC.txt", cAlternateFileName="DIE9E6~1.TXT")) returned 1 [0165.385] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2=".") returned 1 [0165.385] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2="..") returned 1 [0165.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48580 [0165.385] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.385] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.385] wcscat (in: _Dest=0x3e48580, _Source="DisplayLanguageNames.es_EC.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" [0165.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0165.386] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES.txt", cAlternateFileName="DI408C~1.TXT")) returned 1 [0165.386] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2=".") returned 1 [0165.386] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2="..") returned 1 [0165.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0165.386] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.386] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.386] wcscat (in: _Dest=0x3e48658, _Source="DisplayLanguageNames.es_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" [0165.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0166.095] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES_PREEURO.txt", cAlternateFileName="DI260B~1.TXT")) returned 1 [0166.095] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2=".") returned 1 [0166.095] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2="..") returned 1 [0166.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56750 [0166.095] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.095] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.095] wcscat (in: _Dest=0x3d56750, _Source="DisplayLanguageNames.es_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" [0167.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0167.828] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_GT.txt", cAlternateFileName="DID1E0~1.TXT")) returned 1 [0167.828] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2=".") returned 1 [0167.828] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2="..") returned 1 [0167.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0167.828] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.828] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.828] wcscat (in: _Dest=0x3e48658, _Source="DisplayLanguageNames.es_GT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" [0167.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0167.830] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_HN.txt", cAlternateFileName="DI2D6E~1.TXT")) returned 1 [0167.836] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2=".") returned 1 [0167.837] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2="..") returned 1 [0167.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48808 [0167.837] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.837] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.837] wcscat (in: _Dest=0x3e48808, _Source="DisplayLanguageNames.es_HN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" [0170.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0170.301] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_MX.txt", cAlternateFileName="DI31D9~1.TXT")) returned 1 [0170.302] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2=".") returned 1 [0170.302] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2="..") returned 1 [0170.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0bfb8 [0170.302] wcscpy (in: _Dest=0x3e0bfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.302] wcscat (in: _Dest=0x3e0bfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.302] wcscat (in: _Dest=0x3e0bfb8, _Source="DisplayLanguageNames.es_MX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" [0170.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0bfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0170.303] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_NI.txt", cAlternateFileName="DI4326~1.TXT")) returned 1 [0170.303] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2=".") returned 1 [0170.303] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2="..") returned 1 [0170.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0c828 [0170.303] wcscpy (in: _Dest=0x3e0c828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.304] wcscat (in: _Dest=0x3e0c828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.304] wcscat (in: _Dest=0x3e0c828, _Source="DisplayLanguageNames.es_NI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" [0170.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0170.305] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PA.txt", cAlternateFileName="DI714F~1.TXT")) returned 1 [0170.305] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2=".") returned 1 [0170.305] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2="..") returned 1 [0170.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0c090 [0170.305] wcscpy (in: _Dest=0x3e0c090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.305] wcscat (in: _Dest=0x3e0c090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.305] wcscat (in: _Dest=0x3e0c090, _Source="DisplayLanguageNames.es_PA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" [0170.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0170.307] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PE.txt", cAlternateFileName="DIE843~1.TXT")) returned 1 [0170.307] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2=".") returned 1 [0170.307] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2="..") returned 1 [0170.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0cab0 [0170.307] wcscpy (in: _Dest=0x3e0cab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.307] wcscat (in: _Dest=0x3e0cab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.307] wcscat (in: _Dest=0x3e0cab0, _Source="DisplayLanguageNames.es_PE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" [0170.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0cab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0170.309] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PR.txt", cAlternateFileName="DID39C~1.TXT")) returned 1 [0170.309] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2=".") returned 1 [0170.309] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2="..") returned 1 [0170.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0c4c8 [0170.309] wcscpy (in: _Dest=0x3e0c4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.309] wcscat (in: _Dest=0x3e0c4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.309] wcscat (in: _Dest=0x3e0c4c8, _Source="DisplayLanguageNames.es_PR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" [0170.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0170.310] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PY.txt", cAlternateFileName="DI61E0~1.TXT")) returned 1 [0170.311] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2=".") returned 1 [0170.311] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2="..") returned 1 [0170.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48580 [0170.311] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.311] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.311] wcscat (in: _Dest=0x3e48580, _Source="DisplayLanguageNames.es_PY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" [0170.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0170.312] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_SV.txt", cAlternateFileName="DIBEBA~1.TXT")) returned 1 [0170.312] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2=".") returned 1 [0170.312] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2="..") returned 1 [0170.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e489b8 [0170.312] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.312] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.312] wcscat (in: _Dest=0x3e489b8, _Source="DisplayLanguageNames.es_SV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" [0170.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0170.314] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_US.txt", cAlternateFileName="DI5822~1.TXT")) returned 1 [0170.314] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2=".") returned 1 [0170.314] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2="..") returned 1 [0170.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0170.314] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.314] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.314] wcscat (in: _Dest=0x3e48658, _Source="DisplayLanguageNames.es_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" [0170.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0170.315] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_UY.txt", cAlternateFileName="DIC7CE~1.TXT")) returned 1 [0170.315] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2=".") returned 1 [0170.315] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2="..") returned 1 [0170.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48220 [0170.316] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.316] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.316] wcscat (in: _Dest=0x3e48220, _Source="DisplayLanguageNames.es_UY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" [0170.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0170.318] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_VE.txt", cAlternateFileName="DIACC3~1.TXT")) returned 1 [0170.318] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2=".") returned 1 [0170.318] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2="..") returned 1 [0170.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e483d0 [0170.318] wcscpy (in: _Dest=0x3e483d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.318] wcscat (in: _Dest=0x3e483d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.318] wcscat (in: _Dest=0x3e483d0, _Source="DisplayLanguageNames.es_VE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" [0170.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e483d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0170.320] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es__TRADITIONAL.txt", cAlternateFileName="DI8400~1.TXT")) returned 1 [0170.320] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2=".") returned 1 [0170.320] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2="..") returned 1 [0170.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57148 [0170.320] wcscpy (in: _Dest=0x3d57148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.320] wcscat (in: _Dest=0x3d57148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.320] wcscat (in: _Dest=0x3d57148, _Source="DisplayLanguageNames.es__TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" [0170.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0170.322] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et.txt", cAlternateFileName="DIED82~1.TXT")) returned 1 [0170.322] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2=".") returned 1 [0170.322] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2="..") returned 1 [0170.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0170.322] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.322] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.322] wcscat (in: _Dest=0x3e35d00, _Source="DisplayLanguageNames.et.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" [0170.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0170.323] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et_EE.txt", cAlternateFileName="DI9AE7~1.TXT")) returned 1 [0170.323] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2=".") returned 1 [0170.324] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2="..") returned 1 [0170.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e484a8 [0170.324] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.324] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.324] wcscat (in: _Dest=0x3e484a8, _Source="DisplayLanguageNames.et_EE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" [0170.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0170.325] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi.txt", cAlternateFileName="DIC325~1.TXT")) returned 1 [0170.325] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2=".") returned 1 [0170.325] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2="..") returned 1 [0170.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35750 [0170.325] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.325] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.325] wcscat (in: _Dest=0x3e35750, _Source="DisplayLanguageNames.fi.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" [0170.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0170.327] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI.txt", cAlternateFileName="DI7250~1.TXT")) returned 1 [0170.327] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2=".") returned 1 [0170.327] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2="..") returned 1 [0170.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e47578 [0170.327] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.327] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.327] wcscat (in: _Dest=0x3e47578, _Source="DisplayLanguageNames.fi_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" [0170.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0170.328] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI_PREEURO.txt", cAlternateFileName="DI4571~1.TXT")) returned 1 [0170.329] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2=".") returned 1 [0170.329] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2="..") returned 1 [0170.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57060 [0170.329] wcscpy (in: _Dest=0x3d57060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.329] wcscat (in: _Dest=0x3d57060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.329] wcscat (in: _Dest=0x3d57060, _Source="DisplayLanguageNames.fi_FI_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" [0170.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0170.330] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_CA.txt", cAlternateFileName="DI603C~1.TXT")) returned 1 [0170.330] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2=".") returned 1 [0170.330] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2="..") returned 1 [0170.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0170.330] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.331] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.331] wcscat (in: _Dest=0x3e48b68, _Source="DisplayLanguageNames.fr_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" [0170.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0170.332] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR.txt", cAlternateFileName="DIC6EF~1.TXT")) returned 1 [0170.332] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2=".") returned 1 [0170.332] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2="..") returned 1 [0170.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0170.332] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.332] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.332] wcscat (in: _Dest=0x3e48a90, _Source="DisplayLanguageNames.fr_FR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" [0170.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0170.334] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR_PREEURO.txt", cAlternateFileName="DIFF6A~1.TXT")) returned 1 [0170.334] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2=".") returned 1 [0170.334] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2="..") returned 1 [0170.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56f78 [0170.334] wcscpy (in: _Dest=0x3d56f78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.334] wcscat (in: _Dest=0x3d56f78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.334] wcscat (in: _Dest=0x3d56f78, _Source="DisplayLanguageNames.fr_FR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" [0170.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0170.335] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he.txt", cAlternateFileName="DI503B~1.TXT")) returned 1 [0170.336] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2=".") returned 1 [0170.336] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2="..") returned 1 [0170.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36520 [0170.336] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.336] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.336] wcscat (in: _Dest=0x3e36520, _Source="DisplayLanguageNames.he.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" [0170.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0170.337] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he_IL.txt", cAlternateFileName="DI97E6~1.TXT")) returned 1 [0170.337] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2=".") returned 1 [0170.337] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2="..") returned 1 [0170.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48730 [0170.337] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.337] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.338] wcscat (in: _Dest=0x3e48730, _Source="DisplayLanguageNames.he_IL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" [0170.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0170.339] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr.txt", cAlternateFileName="DI4B74~1.TXT")) returned 1 [0170.339] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2=".") returned 1 [0170.339] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2="..") returned 1 [0170.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36110 [0170.339] wcscpy (in: _Dest=0x3e36110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.339] wcscat (in: _Dest=0x3e36110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.339] wcscat (in: _Dest=0x3e36110, _Source="DisplayLanguageNames.hr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" [0170.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0170.699] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr_HR.txt", cAlternateFileName="DI0D1D~1.TXT")) returned 1 [0170.699] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2=".") returned 1 [0170.699] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2="..") returned 1 [0170.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e5b58 [0170.699] wcscpy (in: _Dest=0x2e5b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0170.699] wcscat (in: _Dest=0x2e5b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0170.699] wcscat (in: _Dest=0x2e5b58, _Source="DisplayLanguageNames.hr_HR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" [0172.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 0x20 [0173.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0173.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.801] GetLastError () returned 0x5 [0173.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0173.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5b58) returned 1 [0173.801] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu.txt", cAlternateFileName="DIB428~1.TXT")) returned 1 [0173.801] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2=".") returned 1 [0173.801] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2="..") returned 1 [0173.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36520 [0173.801] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0173.801] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0173.801] wcscat (in: _Dest=0x3e36520, _Source="DisplayLanguageNames.hu.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" [0175.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0175.440] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu_HU.txt", cAlternateFileName="DI4400~1.TXT")) returned 1 [0175.442] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2=".") returned 1 [0175.442] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2="..") returned 1 [0175.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011fe0 [0175.442] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0175.443] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0175.443] wcscat (in: _Dest=0x3011fe0, _Source="DisplayLanguageNames.hu_HU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" [0176.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0176.799] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it.txt", cAlternateFileName="DIABB3~1.TXT")) returned 1 [0176.799] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2=".") returned 1 [0176.799] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2="..") returned 1 [0176.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35750 [0176.799] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.799] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.799] wcscat (in: _Dest=0x3e35750, _Source="DisplayLanguageNames.it.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" [0176.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0176.801] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_CH.txt", cAlternateFileName="DIFC7F~1.TXT")) returned 1 [0176.801] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2=".") returned 1 [0176.801] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2="..") returned 1 [0176.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0176.801] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.801] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.801] wcscat (in: _Dest=0x3e48658, _Source="DisplayLanguageNames.it_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" [0176.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0176.802] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT.txt", cAlternateFileName="DI5DFF~1.TXT")) returned 1 [0176.802] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2=".") returned 1 [0176.802] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2="..") returned 1 [0176.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0176.802] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.802] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.802] wcscat (in: _Dest=0x3e48a90, _Source="DisplayLanguageNames.it_IT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" [0176.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0176.804] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT_PREEURO.txt", cAlternateFileName="DI988F~1.TXT")) returned 1 [0176.804] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2=".") returned 1 [0176.804] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2="..") returned 1 [0176.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56af0 [0176.804] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.804] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.804] wcscat (in: _Dest=0x3d56af0, _Source="DisplayLanguageNames.it_IT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" [0176.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0176.805] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja.txt", cAlternateFileName="DI0CF7~1.TXT")) returned 1 [0176.805] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2=".") returned 1 [0176.805] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2="..") returned 1 [0176.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36d40 [0176.805] wcscpy (in: _Dest=0x3e36d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.805] wcscat (in: _Dest=0x3e36d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.806] wcscat (in: _Dest=0x3e36d40, _Source="DisplayLanguageNames.ja.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" [0176.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0176.807] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP.txt", cAlternateFileName="DI3A02~1.TXT")) returned 1 [0176.807] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2=".") returned 1 [0176.807] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2="..") returned 1 [0176.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0176.807] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.807] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.807] wcscat (in: _Dest=0x3e48b68, _Source="DisplayLanguageNames.ja_JP.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" [0176.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0176.808] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6594, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cAlternateFileName="DI1663~1.TXT")) returned 1 [0176.808] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2=".") returned 1 [0176.808] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2="..") returned 1 [0176.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8958 [0176.809] wcscpy (in: _Dest=0x3ea8958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.809] wcscat (in: _Dest=0x3ea8958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.809] wcscat (in: _Dest=0x3ea8958, _Source="DisplayLanguageNames.ja_JP_TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" [0176.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0176.810] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko.txt", cAlternateFileName="DI1265~1.TXT")) returned 1 [0176.810] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2=".") returned 1 [0176.810] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2="..") returned 1 [0176.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36e10 [0176.811] wcscpy (in: _Dest=0x3e36e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.811] wcscat (in: _Dest=0x3e36e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.811] wcscat (in: _Dest=0x3e36e10, _Source="DisplayLanguageNames.ko.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" [0176.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0176.812] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko_KR.txt", cAlternateFileName="DI9E0C~1.TXT")) returned 1 [0176.812] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2=".") returned 1 [0176.812] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2="..") returned 1 [0176.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e47578 [0176.812] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.812] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.812] wcscat (in: _Dest=0x3e47578, _Source="DisplayLanguageNames.ko_KR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" [0176.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0176.813] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt.txt", cAlternateFileName="DIA1C2~1.TXT")) returned 1 [0176.813] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2=".") returned 1 [0176.814] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2="..") returned 1 [0176.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36ee0 [0176.814] wcscpy (in: _Dest=0x3e36ee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.814] wcscat (in: _Dest=0x3e36ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.814] wcscat (in: _Dest=0x3e36ee0, _Source="DisplayLanguageNames.lt.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" [0176.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0176.815] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt_LT.txt", cAlternateFileName="DI6CC8~1.TXT")) returned 1 [0176.815] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2=".") returned 1 [0176.815] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2="..") returned 1 [0176.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e489b8 [0176.815] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.815] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.815] wcscat (in: _Dest=0x3e489b8, _Source="DisplayLanguageNames.lt_LT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" [0176.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0176.816] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv.txt", cAlternateFileName="DI4C2B~1.TXT")) returned 1 [0176.816] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2=".") returned 1 [0176.816] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2="..") returned 1 [0176.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36fb0 [0176.817] wcscpy (in: _Dest=0x3e36fb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.817] wcscat (in: _Dest=0x3e36fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.817] wcscat (in: _Dest=0x3e36fb0, _Source="DisplayLanguageNames.lv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" [0176.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0176.818] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv_LV.txt", cAlternateFileName="DI7CF0~1.TXT")) returned 1 [0176.818] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2=".") returned 1 [0176.818] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2="..") returned 1 [0176.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48580 [0176.818] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.818] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.818] wcscat (in: _Dest=0x3e48580, _Source="DisplayLanguageNames.lv_LV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" [0176.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0176.819] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb.txt", cAlternateFileName="DI74F4~1.TXT")) returned 1 [0176.819] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2=".") returned 1 [0176.819] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2="..") returned 1 [0176.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e37080 [0176.820] wcscpy (in: _Dest=0x3e37080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.820] wcscat (in: _Dest=0x3e37080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.820] wcscat (in: _Dest=0x3e37080, _Source="DisplayLanguageNames.nb.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" [0176.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0176.821] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb_NO.txt", cAlternateFileName="DI7EFB~1.TXT")) returned 1 [0176.821] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2=".") returned 1 [0176.821] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2="..") returned 1 [0176.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0c828 [0176.821] wcscpy (in: _Dest=0x3e0c828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.822] wcscat (in: _Dest=0x3e0c828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.822] wcscat (in: _Dest=0x3e0c828, _Source="DisplayLanguageNames.nb_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" [0176.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0176.823] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl.txt", cAlternateFileName="DIDFDB~1.TXT")) returned 1 [0176.823] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2=".") returned 1 [0176.823] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2="..") returned 1 [0176.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0176.823] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.823] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.823] wcscat (in: _Dest=0x3e35d00, _Source="DisplayLanguageNames.nl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" [0176.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0176.824] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE.txt", cAlternateFileName="DI6018~1.TXT")) returned 1 [0176.824] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2=".") returned 1 [0176.824] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2="..") returned 1 [0176.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0bfb8 [0176.824] wcscpy (in: _Dest=0x3e0bfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.824] wcscat (in: _Dest=0x3e0bfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.824] wcscat (in: _Dest=0x3e0bfb8, _Source="DisplayLanguageNames.nl_BE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" [0176.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0bfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0176.826] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE_PREEURO.txt", cAlternateFileName="DIB2C6~1.TXT")) returned 1 [0176.826] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2=".") returned 1 [0176.826] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2="..") returned 1 [0176.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57318 [0176.826] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.826] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.826] wcscat (in: _Dest=0x3d57318, _Source="DisplayLanguageNames.nl_BE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" [0176.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0176.827] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL.txt", cAlternateFileName="DI742E~1.TXT")) returned 1 [0176.827] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2=".") returned 1 [0176.827] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2="..") returned 1 [0176.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e57f8 [0176.827] wcscpy (in: _Dest=0x2e57f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.827] wcscat (in: _Dest=0x2e57f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.827] wcscat (in: _Dest=0x2e57f8, _Source="DisplayLanguageNames.nl_NL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" [0176.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e57f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0176.829] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL_PREEURO.txt", cAlternateFileName="DI3524~1.TXT")) returned 1 [0176.829] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2=".") returned 1 [0176.829] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2="..") returned 1 [0176.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57400 [0176.829] wcscpy (in: _Dest=0x3d57400, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.829] wcscat (in: _Dest=0x3d57400, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.829] wcscat (in: _Dest=0x3d57400, _Source="DisplayLanguageNames.nl_NL_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" [0176.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0176.830] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nn_NO.txt", cAlternateFileName="DIF7B3~1.TXT")) returned 1 [0176.830] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2=".") returned 1 [0176.830] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2="..") returned 1 [0176.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e5b58 [0176.830] wcscpy (in: _Dest=0x2e5b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.830] wcscat (in: _Dest=0x2e5b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.830] wcscat (in: _Dest=0x2e5b58, _Source="DisplayLanguageNames.nn_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" [0176.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e5b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0176.832] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl.txt", cAlternateFileName="DI69EF~1.TXT")) returned 1 [0176.832] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2=".") returned 1 [0176.832] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2="..") returned 1 [0176.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36c70 [0176.832] wcscpy (in: _Dest=0x3e36c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.832] wcscat (in: _Dest=0x3e36c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.832] wcscat (in: _Dest=0x3e36c70, _Source="DisplayLanguageNames.pl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" [0176.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0176.833] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl_PL.txt", cAlternateFileName="DI4ABE~1.TXT")) returned 1 [0176.833] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2=".") returned 1 [0176.833] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2="..") returned 1 [0176.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e58d0 [0176.833] wcscpy (in: _Dest=0x2e58d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.833] wcscat (in: _Dest=0x2e58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.833] wcscat (in: _Dest=0x2e58d0, _Source="DisplayLanguageNames.pl_PL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" [0176.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e58d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0176.835] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_BR.txt", cAlternateFileName="DIC9A4~1.TXT")) returned 1 [0176.835] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2=".") returned 1 [0176.835] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2="..") returned 1 [0176.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3ddcbb0 [0176.835] wcscpy (in: _Dest=0x3ddcbb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0176.835] wcscat (in: _Dest=0x3ddcbb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0176.835] wcscat (in: _Dest=0x3ddcbb0, _Source="DisplayLanguageNames.pt_BR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" [0176.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ddcbb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0177.184] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT.txt", cAlternateFileName="DI7FB1~1.TXT")) returned 1 [0177.707] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2=".") returned 1 [0177.707] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2="..") returned 1 [0177.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac558 [0177.707] wcscpy (in: _Dest=0x68ac558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0177.707] wcscat (in: _Dest=0x68ac558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0177.707] wcscat (in: _Dest=0x68ac558, _Source="DisplayLanguageNames.pt_PT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" [0179.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0179.718] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT_PREEURO.txt", cAlternateFileName="DIB661~1.TXT")) returned 1 [0179.719] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2=".") returned 1 [0179.719] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2="..") returned 1 [0179.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d58198 [0179.719] wcscpy (in: _Dest=0x3d58198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.719] wcscat (in: _Dest=0x3d58198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.719] wcscat (in: _Dest=0x3d58198, _Source="DisplayLanguageNames.pt_PT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" [0179.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0179.720] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro.txt", cAlternateFileName="DI0257~1.TXT")) returned 1 [0179.720] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2=".") returned 1 [0179.720] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2="..") returned 1 [0179.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36ba0 [0179.720] wcscpy (in: _Dest=0x3e36ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.720] wcscat (in: _Dest=0x3e36ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.720] wcscat (in: _Dest=0x3e36ba0, _Source="DisplayLanguageNames.ro.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" [0179.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0179.722] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro_RO.txt", cAlternateFileName="DIC031~1.TXT")) returned 1 [0179.722] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2=".") returned 1 [0179.722] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2="..") returned 1 [0179.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68abf70 [0179.722] wcscpy (in: _Dest=0x68abf70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.722] wcscat (in: _Dest=0x68abf70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.722] wcscat (in: _Dest=0x68abf70, _Source="DisplayLanguageNames.ro_RO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" [0179.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0179.723] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru.txt", cAlternateFileName="DIBDC2~1.TXT")) returned 1 [0179.723] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2=".") returned 1 [0179.723] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2="..") returned 1 [0179.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36860 [0179.724] wcscpy (in: _Dest=0x3e36860, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.724] wcscat (in: _Dest=0x3e36860, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.724] wcscat (in: _Dest=0x3e36860, _Source="DisplayLanguageNames.ru.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" [0179.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0179.725] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_RU.txt", cAlternateFileName="DI759A~1.TXT")) returned 1 [0179.725] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2=".") returned 1 [0179.725] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2="..") returned 1 [0179.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68acdc8 [0179.725] wcscpy (in: _Dest=0x68acdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.725] wcscat (in: _Dest=0x68acdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.725] wcscat (in: _Dest=0x68acdc8, _Source="DisplayLanguageNames.ru_RU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" [0179.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0179.727] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_UA.txt", cAlternateFileName="DI0840~1.TXT")) returned 1 [0179.727] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2=".") returned 1 [0179.727] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2="..") returned 1 [0179.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68acea0 [0179.727] wcscpy (in: _Dest=0x68acea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.727] wcscat (in: _Dest=0x68acea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.727] wcscat (in: _Dest=0x68acea0, _Source="DisplayLanguageNames.ru_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" [0179.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0179.728] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk.txt", cAlternateFileName="DIDD84~1.TXT")) returned 1 [0179.728] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2=".") returned 1 [0179.728] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2="..") returned 1 [0179.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36fb0 [0179.728] wcscpy (in: _Dest=0x3e36fb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.729] wcscat (in: _Dest=0x3e36fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.729] wcscat (in: _Dest=0x3e36fb0, _Source="DisplayLanguageNames.sk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" [0179.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0179.730] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk_SK.txt", cAlternateFileName="DI9804~1.TXT")) returned 1 [0179.730] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2=".") returned 1 [0179.730] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2="..") returned 1 [0179.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68acf78 [0179.730] wcscpy (in: _Dest=0x68acf78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.730] wcscat (in: _Dest=0x68acf78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.730] wcscat (in: _Dest=0x68acf78, _Source="DisplayLanguageNames.sk_SK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" [0179.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0179.732] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl.txt", cAlternateFileName="DIF8FC~1.TXT")) returned 1 [0179.732] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2=".") returned 1 [0179.732] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2="..") returned 1 [0179.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e37080 [0179.732] wcscpy (in: _Dest=0x3e37080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.732] wcscat (in: _Dest=0x3e37080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.732] wcscat (in: _Dest=0x3e37080, _Source="DisplayLanguageNames.sl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" [0179.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0179.733] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl_SI.txt", cAlternateFileName="DI9B2F~1.TXT")) returned 1 [0179.733] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2=".") returned 1 [0179.733] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2="..") returned 1 [0179.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad050 [0179.733] wcscpy (in: _Dest=0x68ad050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.734] wcscat (in: _Dest=0x68ad050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.734] wcscat (in: _Dest=0x68ad050, _Source="DisplayLanguageNames.sl_SI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" [0179.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0179.735] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv.txt", cAlternateFileName="DIF2A9~1.TXT")) returned 1 [0179.735] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2=".") returned 1 [0179.735] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2="..") returned 1 [0179.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36040 [0179.735] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.735] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.735] wcscat (in: _Dest=0x3e36040, _Source="DisplayLanguageNames.sv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" [0179.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0179.737] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7144, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_FI.txt", cAlternateFileName="DIE445~1.TXT")) returned 1 [0179.737] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2=".") returned 1 [0179.737] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2="..") returned 1 [0179.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad128 [0179.737] wcscpy (in: _Dest=0x68ad128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.737] wcscat (in: _Dest=0x68ad128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.737] wcscat (in: _Dest=0x68ad128, _Source="DisplayLanguageNames.sv_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" [0179.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0179.738] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_SE.txt", cAlternateFileName="DISPLA~4.TXT")) returned 1 [0179.739] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2=".") returned 1 [0179.739] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2="..") returned 1 [0179.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad200 [0179.739] wcscpy (in: _Dest=0x68ad200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.739] wcscat (in: _Dest=0x68ad200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.739] wcscat (in: _Dest=0x68ad200, _Source="DisplayLanguageNames.sv_SE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" [0179.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0179.740] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr.txt", cAlternateFileName="DIA3CE~1.TXT")) returned 1 [0179.740] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2=".") returned 1 [0179.740] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2="..") returned 1 [0179.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x30352a0 [0179.740] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.740] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.741] wcscat (in: _Dest=0x30352a0, _Source="DisplayLanguageNames.tr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" [0179.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0179.742] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr_TR.txt", cAlternateFileName="DIF209~1.TXT")) returned 1 [0179.742] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2=".") returned 1 [0179.742] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2="..") returned 1 [0179.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad2d8 [0179.742] wcscpy (in: _Dest=0x68ad2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.742] wcscat (in: _Dest=0x68ad2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.742] wcscat (in: _Dest=0x68ad2d8, _Source="DisplayLanguageNames.tr_TR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" [0179.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0179.744] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk.txt", cAlternateFileName="DI4480~1.TXT")) returned 1 [0179.744] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2=".") returned 1 [0179.744] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2="..") returned 1 [0179.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036ca0 [0179.744] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.744] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.744] wcscat (in: _Dest=0x3036ca0, _Source="DisplayLanguageNames.uk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" [0179.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0179.746] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk_UA.txt", cAlternateFileName="DICC10~1.TXT")) returned 1 [0179.746] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2=".") returned 1 [0179.746] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2="..") returned 1 [0179.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad3b0 [0179.746] wcscpy (in: _Dest=0x68ad3b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.746] wcscat (in: _Dest=0x68ad3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.746] wcscat (in: _Dest=0x68ad3b0, _Source="DisplayLanguageNames.uk_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" [0179.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0179.747] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_CN.txt", cAlternateFileName="DISPLA~3.TXT")) returned 1 [0179.748] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2=".") returned 1 [0179.748] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2="..") returned 1 [0179.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad488 [0179.748] wcscpy (in: _Dest=0x68ad488, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.748] wcscat (in: _Dest=0x68ad488, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.748] wcscat (in: _Dest=0x68ad488, _Source="DisplayLanguageNames.zh_CN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" [0179.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0179.750] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x605a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW.txt", cAlternateFileName="DISPLA~1.TXT")) returned 1 [0179.750] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2=".") returned 1 [0179.750] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2="..") returned 1 [0179.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ad560 [0179.750] wcscpy (in: _Dest=0x68ad560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.750] wcscat (in: _Dest=0x68ad560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.750] wcscat (in: _Dest=0x68ad560, _Source="DisplayLanguageNames.zh_TW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" [0179.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0179.752] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 1 [0179.752] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2=".") returned 1 [0179.752] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2="..") returned 1 [0179.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56cc0 [0179.752] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0179.752] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0179.752] wcscat (in: _Dest=0x3d56cc0, _Source="DisplayLanguageNames.zh_TW_STROKE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" [0179.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0179.753] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 0 [0179.753] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0179.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0179.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 [0179.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 2542 os_tid = 0x1934 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cb48 [0157.061] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0157.061] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0157.061] wcscat (in: _Dest=0x674cb48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*" [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0157.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0158.759] wcscmp (_String1=".", _String2=".") returned 0 [0158.759] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.759] wcscmp (_String1="..", _String2=".") returned 1 [0158.759] wcscmp (_String1="..", _String2="..") returned 0 [0158.759] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0158.759] wcscmp (_String1="Proximity", _String2=".") returned 1 [0158.759] wcscmp (_String1="Proximity", _String2="..") returned 1 [0158.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c08c8 [0158.759] wcscpy (in: _Dest=0x69c08c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0158.759] wcscat (in: _Dest=0x69c08c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0158.759] wcscat (in: _Dest=0x69c08c8, _Source="Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0159.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c08c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0159.813] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0159.813] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0159.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0159.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 [0159.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e528) returned 1 Thread: id = 2543 os_tid = 0x1938 [0157.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 0x20 [0157.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.064] GetLastError () returned 0x5 [0157.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e98) returned 1 Thread: id = 2544 os_tid = 0x193c [0157.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 0x20 [0157.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.066] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.066] GetLastError () returned 0x5 [0157.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3670) returned 1 Thread: id = 2545 os_tid = 0x1940 [0157.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 0x20 [0157.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.068] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.068] GetLastError () returned 0x5 [0157.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2538) returned 1 Thread: id = 2546 os_tid = 0x1944 [0157.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 0x20 [0157.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.070] GetLastError () returned 0x5 [0157.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3708) returned 1 Thread: id = 2547 os_tid = 0x1948 [0157.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 0x20 [0157.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.076] GetLastError () returned 0x5 [0157.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2668) returned 1 Thread: id = 2548 os_tid = 0x194c [0157.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 0x20 [0157.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.077] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.077] GetLastError () returned 0x5 [0157.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c37a0) returned 1 Thread: id = 2549 os_tid = 0x1950 [0157.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 0x20 [0157.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.079] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.080] GetLastError () returned 0x5 [0157.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2798) returned 1 Thread: id = 2550 os_tid = 0x1954 [0157.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 0x20 [0157.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.081] GetLastError () returned 0x5 [0157.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3838) returned 1 Thread: id = 2551 os_tid = 0x1958 [0157.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 0x20 [0157.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.083] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.083] GetLastError () returned 0x5 [0157.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c28c8) returned 1 Thread: id = 2552 os_tid = 0x195c [0157.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 0x20 [0157.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.085] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.085] GetLastError () returned 0x5 [0157.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c38d0) returned 1 Thread: id = 2553 os_tid = 0x1960 [0157.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 0x20 [0157.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.086] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.087] GetLastError () returned 0x5 [0157.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c29f8) returned 1 Thread: id = 2554 os_tid = 0x1964 [0157.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 0x20 [0157.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.088] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.089] GetLastError () returned 0x5 [0157.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 Thread: id = 2555 os_tid = 0x1968 [0157.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif")) returned 0x20 [0158.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0158.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.135] GetLastError () returned 0x5 [0158.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0158.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b0) returned 1 Thread: id = 2556 os_tid = 0x196c [0157.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif")) returned 0x20 [0157.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0157.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.689] GetLastError () returned 0x5 [0157.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0157.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a00) returned 1 Thread: id = 2557 os_tid = 0x1970 [0157.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif")) returned 0x20 [0158.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0158.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.134] GetLastError () returned 0x5 [0158.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0158.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a98) returned 1 Thread: id = 2558 os_tid = 0x1974 [0157.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl")) returned 0x20 [0162.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0162.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.269] GetLastError () returned 0x5 [0162.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0162.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 Thread: id = 2559 os_tid = 0x1978 [0157.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb")) returned 0x20 [0162.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0162.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.240] GetLastError () returned 0x5 [0162.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0162.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c18) returned 1 Thread: id = 2560 os_tid = 0x197c [0157.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb")) returned 0x20 [0162.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0162.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.227] GetLastError () returned 0x5 [0162.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0162.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 Thread: id = 2561 os_tid = 0x1980 [0157.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb")) returned 0x20 [0162.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0162.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.233] GetLastError () returned 0x5 [0162.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0162.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 Thread: id = 2562 os_tid = 0x1984 [0157.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest")) returned 0x20 [0162.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0162.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.136] GetLastError () returned 0x5 [0162.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0162.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 2563 os_tid = 0x1988 [0157.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb")) returned 0x20 [0162.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0162.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.232] GetLastError () returned 0x5 [0162.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0162.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 Thread: id = 2564 os_tid = 0x198c [0157.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb")) returned 0x20 [0162.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0162.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.230] GetLastError () returned 0x5 [0162.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0162.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 Thread: id = 2565 os_tid = 0x1990 [0157.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif")) returned 0x20 [0158.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0158.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.130] GetLastError () returned 0x5 [0158.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0158.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3b30) returned 1 Thread: id = 2566 os_tid = 0x1994 [0157.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif")) returned 0x20 [0158.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0158.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.131] GetLastError () returned 0x5 [0158.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0158.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3bc8) returned 1 Thread: id = 2567 os_tid = 0x1998 [0157.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif")) returned 0x20 [0158.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0158.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.133] GetLastError () returned 0x5 [0158.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0158.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 2568 os_tid = 0x199c [0157.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif")) returned 0x20 [0158.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0158.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.119] GetLastError () returned 0x5 [0158.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0158.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 2569 os_tid = 0x19a0 [0157.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif")) returned 0x20 [0158.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0158.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.118] GetLastError () returned 0x5 [0158.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0158.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 2570 os_tid = 0x19a4 [0157.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif")) returned 0x20 [0158.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0158.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.116] GetLastError () returned 0x5 [0158.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0158.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 2571 os_tid = 0x19a8 [0157.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif")) returned 0x20 [0158.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0158.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.139] GetLastError () returned 0x5 [0158.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0158.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 2572 os_tid = 0x19ac [0157.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif")) returned 0x20 [0158.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0158.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.138] GetLastError () returned 0x5 [0158.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0158.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 2573 os_tid = 0x19b0 [0157.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif")) returned 0x20 [0158.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0158.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.128] GetLastError () returned 0x5 [0158.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0158.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 2574 os_tid = 0x19b4 [0157.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif")) returned 0x20 [0158.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0158.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.127] GetLastError () returned 0x5 [0158.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0158.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 2575 os_tid = 0x19b8 [0157.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif")) returned 0x20 [0158.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0158.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.151] GetLastError () returned 0x5 [0158.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0158.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 2576 os_tid = 0x19bc [0157.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif")) returned 0x20 [0158.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0158.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.149] GetLastError () returned 0x5 [0158.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0158.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 2577 os_tid = 0x19c0 [0157.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif")) returned 0x20 [0158.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0158.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.148] GetLastError () returned 0x5 [0158.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0158.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d4a0) returned 1 Thread: id = 2578 os_tid = 0x19c4 [0157.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif")) returned 0x20 [0158.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0158.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.146] GetLastError () returned 0x5 [0158.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0158.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 2579 os_tid = 0x19c8 [0157.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif")) returned 0x20 [0158.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0158.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.145] GetLastError () returned 0x5 [0158.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0158.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 2580 os_tid = 0x19cc [0157.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif")) returned 0x20 [0158.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0158.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.144] GetLastError () returned 0x5 [0158.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0158.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 2581 os_tid = 0x19d0 [0157.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif")) returned 0x20 [0158.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0158.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.126] GetLastError () returned 0x5 [0158.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0158.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 2582 os_tid = 0x19d4 [0157.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif")) returned 0x20 [0158.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0158.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.124] GetLastError () returned 0x5 [0158.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0158.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 2583 os_tid = 0x19d8 [0157.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif")) returned 0x20 [0158.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0158.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.123] GetLastError () returned 0x5 [0158.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0158.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 Thread: id = 2584 os_tid = 0x19dc [0157.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif")) returned 0x20 [0158.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0158.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.122] GetLastError () returned 0x5 [0158.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0158.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817d80) returned 1 Thread: id = 2585 os_tid = 0x19e0 [0157.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif")) returned 0x20 [0158.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0158.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.142] GetLastError () returned 0x5 [0158.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0158.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817e18) returned 1 Thread: id = 2586 os_tid = 0x19e4 [0157.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif")) returned 0x20 [0158.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0158.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.120] GetLastError () returned 0x5 [0158.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0158.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817eb0) returned 1 Thread: id = 2587 os_tid = 0x19e8 [0157.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif")) returned 0x20 [0158.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0158.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.141] GetLastError () returned 0x5 [0158.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0158.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817f48) returned 1 Thread: id = 2588 os_tid = 0x19ec [0157.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif")) returned 0x20 [0158.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0158.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.073] GetLastError () returned 0x5 [0158.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0158.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817fe0) returned 1 Thread: id = 2589 os_tid = 0x19f0 [0157.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 0x20 [0157.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.516] GetLastError () returned 0x5 [0157.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2eb8) returned 1 Thread: id = 2590 os_tid = 0x19f4 [0157.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 0x20 [0157.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.517] GetLastError () returned 0x5 [0157.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 Thread: id = 2591 os_tid = 0x19f8 [0157.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 0x20 [0157.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.519] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.519] GetLastError () returned 0x5 [0157.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0157.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3118) returned 1 Thread: id = 2592 os_tid = 0x19fc [0157.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 0x20 [0157.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.521] GetLastError () returned 0x5 [0157.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0157.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c29f8) returned 1 Thread: id = 2593 os_tid = 0x1a00 [0157.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json")) returned 0x20 [0157.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0157.522] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.523] GetLastError () returned 0x5 [0157.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0157.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 2594 os_tid = 0x1a04 [0157.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0157.524] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0157.524] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0157.524] wcscat (in: _Dest=0x3333a8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*" [0157.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0157.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e806b8 [0157.524] wcscmp (_String1=".", _String2=".") returned 0 [0157.525] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.525] wcscmp (_String1="..", _String2=".") returned 1 [0157.525] wcscmp (_String1="..", _String2="..") returned 0 [0157.525] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 1 [0157.525] wcscmp (_String1="win_x86", _String2=".") returned 1 [0157.525] wcscmp (_String1="win_x86", _String2="..") returned 1 [0157.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0157.525] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0157.525] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0157.525] wcscat (in: _Dest=0x3df03f0, _Source="win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0158.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3df03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0158.401] FindNextFileW (in: hFindFile=0x3e806b8, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 0 [0158.401] FindClose (in: hFindFile=0x3e806b8 | out: hFindFile=0x3e806b8) returned 1 [0158.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0158.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0158.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 2595 os_tid = 0x1a08 [0157.525] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0160.068] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0160.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.069] GetLastError () returned 0x5 [0160.069] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0160.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 2596 os_tid = 0x1a0c [0157.526] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0160.067] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0160.067] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.067] GetLastError () returned 0x5 [0160.067] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0160.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 2597 os_tid = 0x1a10 [0157.526] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0160.065] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0160.065] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.065] GetLastError () returned 0x5 [0160.065] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0160.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da62f0) returned 1 Thread: id = 2598 os_tid = 0x1a14 [0157.526] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0160.063] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0160.063] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.064] GetLastError () returned 0x5 [0160.064] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0160.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 2599 os_tid = 0x1a18 [0157.527] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0160.061] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0160.062] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.062] GetLastError () returned 0x5 [0160.062] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0160.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ff0) returned 1 Thread: id = 2600 os_tid = 0x1a1c [0157.527] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0160.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0160.060] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.060] GetLastError () returned 0x5 [0160.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0160.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 Thread: id = 2601 os_tid = 0x1a20 [0157.527] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0160.046] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0160.046] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.047] GetLastError () returned 0x5 [0160.047] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0160.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 Thread: id = 2602 os_tid = 0x1a24 [0157.528] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0160.044] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0160.045] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.045] GetLastError () returned 0x5 [0160.045] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0160.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ad38) returned 1 Thread: id = 2603 os_tid = 0x1a28 [0157.528] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0159.936] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0159.936] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.937] GetLastError () returned 0x5 [0159.937] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0159.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 Thread: id = 2604 os_tid = 0x1a2c [0157.528] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0160.998] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0160.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.998] GetLastError () returned 0x5 [0160.998] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0160.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b0b8) returned 1 Thread: id = 2605 os_tid = 0x1a30 [0157.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e648 [0157.529] wcscpy (in: _Dest=0x674e648, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0157.529] wcscat (in: _Dest=0x674e648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\" [0157.529] wcscat (in: _Dest=0x674e648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*" [0157.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0157.529] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0163.558] wcscmp (_String1=".", _String2=".") returned 0 [0163.558] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.558] wcscmp (_String1="..", _String2=".") returned 1 [0163.558] wcscmp (_String1="..", _String2="..") returned 0 [0163.558] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0163.558] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0163.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0163.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e648) returned 1 [0163.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 2606 os_tid = 0x1a34 [0157.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx")) returned 0x20 [0166.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.244] GetLastError () returned 0x5 [0166.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2408) returned 1 Thread: id = 2607 os_tid = 0x1a38 [0157.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx")) returned 0x20 [0165.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0165.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 Thread: id = 2608 os_tid = 0x1a3c [0157.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx")) returned 0x20 [0165.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0165.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0165.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd88) returned 1 Thread: id = 2609 os_tid = 0x1a40 [0157.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx")) returned 0x20 [0165.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 2610 os_tid = 0x1a44 [0157.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx")) returned 0x20 [0165.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.480] GetLastError () returned 0x5 [0165.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 2611 os_tid = 0x1a48 [0157.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx")) returned 0x20 [0164.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0165.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.192] GetLastError () returned 0x5 [0166.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0166.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958fe8) returned 1 Thread: id = 2612 os_tid = 0x1a4c [0157.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx")) returned 0x20 [0163.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0165.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.479] GetLastError () returned 0x5 [0165.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0165.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 2613 os_tid = 0x1a50 [0157.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx")) returned 0x20 [0162.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0163.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.472] GetLastError () returned 0x5 [0165.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818078) returned 1 Thread: id = 2614 os_tid = 0x1a54 [0157.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx")) returned 0x20 [0162.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0163.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.473] GetLastError () returned 0x5 [0165.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0165.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c10e8) returned 1 Thread: id = 2615 os_tid = 0x1a58 [0157.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx")) returned 0x20 [0165.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0166.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.177] GetLastError () returned 0x5 [0166.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0166.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 2616 os_tid = 0x1a5c [0157.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx")) returned 0x20 [0165.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0165.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.182] GetLastError () returned 0x5 [0166.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0166.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818110) returned 1 Thread: id = 2617 os_tid = 0x1a60 [0157.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx")) returned 0x20 [0165.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0165.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.189] GetLastError () returned 0x5 [0166.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0166.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68181a8) returned 1 Thread: id = 2618 os_tid = 0x1a64 [0157.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx")) returned 0x20 [0166.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0166.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.242] GetLastError () returned 0x5 [0166.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0166.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cfc8) returned 1 Thread: id = 2619 os_tid = 0x1a68 [0157.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b150 [0157.533] wcscpy (in: _Dest=0x3f1b150, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0157.533] wcscat (in: _Dest=0x3f1b150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0157.533] wcscat (in: _Dest=0x3f1b150, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*" [0157.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0157.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0165.682] wcscmp (_String1=".", _String2=".") returned 0 [0165.683] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.683] wcscmp (_String1="..", _String2=".") returned 1 [0165.683] wcscmp (_String1="..", _String2="..") returned 0 [0165.683] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0165.683] wcscmp (_String1="EquityFax.Dotx", _String2=".") returned 1 [0165.683] wcscmp (_String1="EquityFax.Dotx", _String2="..") returned 1 [0165.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dd48 [0165.683] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0165.683] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0165.683] wcscat (in: _Dest=0x674dd48, _Source="EquityFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" [0172.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx")) returned 0x20 [0172.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.103] GetLastError () returned 0x5 [0172.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0172.103] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0172.103] wcscmp (_String1="MedianFax.Dotx", _String2=".") returned 1 [0172.103] wcscmp (_String1="MedianFax.Dotx", _String2="..") returned 1 [0172.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dd48 [0172.103] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0172.103] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0172.103] wcscat (in: _Dest=0x674dd48, _Source="MedianFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" [0172.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx")) returned 0x20 [0172.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.104] GetLastError () returned 0x5 [0172.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0172.104] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="ORIELF~1.DOT")) returned 1 [0172.104] wcscmp (_String1="OrielFax.Dotx", _String2=".") returned 1 [0172.104] wcscmp (_String1="OrielFax.Dotx", _String2="..") returned 1 [0172.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674dd48 [0172.104] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0172.104] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0172.104] wcscat (in: _Dest=0x674dd48, _Source="OrielFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" [0172.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx")) returned 0x20 [0172.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.105] GetLastError () returned 0x5 [0172.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0172.105] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0172.105] wcscmp (_String1="OriginFax.Dotx", _String2=".") returned 1 [0172.105] wcscmp (_String1="OriginFax.Dotx", _String2="..") returned 1 [0172.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dd48 [0172.105] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0172.105] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0172.105] wcscat (in: _Dest=0x674dd48, _Source="OriginFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" [0172.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx")) returned 0x20 [0172.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.106] GetLastError () returned 0x5 [0172.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0172.106] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 1 [0172.106] wcscmp (_String1="UrbanFax.Dotx", _String2=".") returned 1 [0172.106] wcscmp (_String1="UrbanFax.Dotx", _String2="..") returned 1 [0172.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674dd48 [0172.107] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0172.107] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0172.107] wcscat (in: _Dest=0x674dd48, _Source="UrbanFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" [0172.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx")) returned 0x20 [0172.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.107] GetLastError () returned 0x5 [0172.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0172.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0172.107] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 0 [0172.107] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0172.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0172.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0172.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 Thread: id = 2620 os_tid = 0x1a6c [0157.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx")) returned 0x20 [0166.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0166.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.241] GetLastError () returned 0x5 [0166.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0166.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 2621 os_tid = 0x1a70 [0157.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx")) returned 0x20 [0166.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0166.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.239] GetLastError () returned 0x5 [0166.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0166.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d730) returned 1 Thread: id = 2622 os_tid = 0x1a74 [0157.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx")) returned 0x20 [0166.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0166.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.198] GetLastError () returned 0x5 [0166.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0166.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818240) returned 1 Thread: id = 2623 os_tid = 0x1a78 [0157.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx")) returned 0x20 [0166.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.196] GetLastError () returned 0x5 [0166.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d0e8) returned 1 Thread: id = 2624 os_tid = 0x1a7c [0157.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx")) returned 0x20 [0166.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.194] GetLastError () returned 0x5 [0166.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68182d8) returned 1 Thread: id = 2625 os_tid = 0x1a80 [0157.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx")) returned 0x20 [0166.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.191] GetLastError () returned 0x5 [0166.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818370) returned 1 Thread: id = 2626 os_tid = 0x1a84 [0157.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx")) returned 0x20 [0166.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.188] GetLastError () returned 0x5 [0166.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 2627 os_tid = 0x1a88 [0157.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx")) returned 0x20 [0166.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.184] GetLastError () returned 0x5 [0166.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 2628 os_tid = 0x1a8c [0157.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx")) returned 0x20 [0166.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0166.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.237] GetLastError () returned 0x5 [0166.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0166.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 2629 os_tid = 0x1a90 [0157.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da4af0 [0157.537] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0157.537] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0157.537] wcscat (in: _Dest=0x3da4af0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*" [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0157.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0165.172] wcscmp (_String1=".", _String2=".") returned 0 [0165.172] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.172] wcscmp (_String1="..", _String2=".") returned 1 [0165.172] wcscmp (_String1="..", _String2="..") returned 0 [0165.172] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0165.172] wcscmp (_String1="14", _String2=".") returned 1 [0165.172] wcscmp (_String1="14", _String2="..") returned 1 [0165.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbef8 [0165.172] wcscpy (in: _Dest=0x3edbef8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0165.172] wcscat (in: _Dest=0x3edbef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0165.172] wcscat (in: _Dest=0x3edbef8, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0172.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c9a8 [0172.127] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0172.127] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0172.127] wcscat (in: _Dest=0x682c9a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*" [0172.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0172.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0172.127] wcscmp (_String1=".", _String2=".") returned 0 [0172.127] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.127] wcscmp (_String1="..", _String2=".") returned 1 [0172.127] wcscmp (_String1="..", _String2="..") returned 0 [0172.127] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0172.127] wcscmp (_String1="Notebook Templates", _String2=".") returned 1 [0172.127] wcscmp (_String1="Notebook Templates", _String2="..") returned 1 [0172.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e228 [0172.128] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0172.128] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0172.128] wcscat (in: _Dest=0x697e228, _Source="Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0172.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3ac0 [0172.128] wcscpy (in: _Dest=0x3ea3ac0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0172.128] wcscat (in: _Dest=0x3ea3ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0172.128] wcscat (in: _Dest=0x3ea3ac0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*" [0172.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0172.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0172.165] wcscmp (_String1=".", _String2=".") returned 0 [0172.165] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.165] wcscmp (_String1="..", _String2=".") returned 1 [0172.165] wcscmp (_String1="..", _String2="..") returned 0 [0172.165] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0172.165] wcscmp (_String1="Notebook03.onepkg", _String2=".") returned 1 [0172.165] wcscmp (_String1="Notebook03.onepkg", _String2="..") returned 1 [0172.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36d40 [0172.165] wcscpy (in: _Dest=0x3e36d40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0172.165] wcscat (in: _Dest=0x3e36d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0172.165] wcscat (in: _Dest=0x3e36d40, _Source="Notebook03.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" [0172.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg")) returned 0x20 [0172.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0172.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.166] GetLastError () returned 0x5 [0172.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0172.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36d40) returned 1 [0172.166] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0 [0172.166] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0172.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0172.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3ac0) returned 1 [0172.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0172.166] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0172.166] wcscmp (_String1="Stationery", _String2=".") returned 1 [0172.166] wcscmp (_String1="Stationery", _String2="..") returned 1 [0172.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69589f8 [0172.167] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0172.167] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0172.167] wcscat (in: _Dest=0x69589f8, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0172.167] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.167] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.167] wcscat (in: _Dest=0x2c75f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*" [0172.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0172.167] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0172.215] wcscmp (_String1=".", _String2=".") returned 0 [0172.215] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.216] wcscmp (_String1="..", _String2=".") returned 1 [0172.216] wcscmp (_String1="..", _String2="..") returned 0 [0172.216] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0172.216] wcscmp (_String1="ACADEMIC.ONE", _String2=".") returned 1 [0172.216] wcscmp (_String1="ACADEMIC.ONE", _String2="..") returned 1 [0172.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea36a0 [0172.216] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.216] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.216] wcscat (in: _Dest=0x3ea36a0, _Source="ACADEMIC.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" [0172.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one")) returned 0x20 [0172.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0172.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.217] GetLastError () returned 0x5 [0172.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0172.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0172.217] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0172.217] wcscmp (_String1="BLANK.ONE", _String2=".") returned 1 [0172.217] wcscmp (_String1="BLANK.ONE", _String2="..") returned 1 [0172.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea36a0 [0172.217] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.217] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.217] wcscat (in: _Dest=0x3ea36a0, _Source="BLANK.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" [0172.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one")) returned 0x20 [0172.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0172.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.218] GetLastError () returned 0x5 [0172.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0172.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0172.219] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5539ca70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0172.219] wcscmp (_String1="BUSINESS.ONE", _String2=".") returned 1 [0172.219] wcscmp (_String1="BUSINESS.ONE", _String2="..") returned 1 [0172.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea36a0 [0172.219] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.219] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.219] wcscat (in: _Dest=0x3ea36a0, _Source="BUSINESS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" [0172.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one")) returned 0x20 [0172.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0172.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.220] GetLastError () returned 0x5 [0172.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0172.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0172.220] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac1ed00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ac1ed00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0172.220] wcscmp (_String1="DESIGNER.ONE", _String2=".") returned 1 [0172.220] wcscmp (_String1="DESIGNER.ONE", _String2="..") returned 1 [0172.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea36a0 [0172.220] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.220] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.220] wcscat (in: _Dest=0x3ea36a0, _Source="DESIGNER.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" [0172.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one")) returned 0x20 [0172.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0172.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.221] GetLastError () returned 0x5 [0172.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0172.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0172.222] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0172.222] wcscmp (_String1="PLANNERS.ONE", _String2=".") returned 1 [0172.222] wcscmp (_String1="PLANNERS.ONE", _String2="..") returned 1 [0172.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea36a0 [0172.222] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0172.222] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0172.222] wcscat (in: _Dest=0x3ea36a0, _Source="PLANNERS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" [0172.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one")) returned 0x20 [0172.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0172.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.297] GetLastError () returned 0x5 [0172.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0172.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0172.298] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0172.298] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0172.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0172.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0172.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.298] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0172.298] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 [0172.299] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0172.299] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 [0172.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b138) returned 1 Thread: id = 2630 os_tid = 0x1a94 [0157.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx")) returned 0x20 [0166.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.180] GetLastError () returned 0x5 [0166.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d298) returned 1 Thread: id = 2631 os_tid = 0x1a98 [0157.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx")) returned 0x20 [0166.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.097] GetLastError () returned 0x5 [0166.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 2632 os_tid = 0x1a9c [0157.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx")) returned 0x20 [0164.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0165.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.186] GetLastError () returned 0x5 [0166.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818408) returned 1 Thread: id = 2633 os_tid = 0x1aa0 [0157.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx")) returned 0x20 [0164.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0165.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.178] GetLastError () returned 0x5 [0166.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 2634 os_tid = 0x1aa4 [0157.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx")) returned 0x20 [0163.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0163.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.473] GetLastError () returned 0x5 [0165.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0165.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 Thread: id = 2635 os_tid = 0x1aa8 [0157.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx")) returned 0x20 [0163.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.461] GetLastError () returned 0x5 [0163.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0163.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 2636 os_tid = 0x1aac [0157.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c29f8 [0157.539] wcscpy (in: _Dest=0x69c29f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0157.539] wcscat (in: _Dest=0x69c29f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0157.540] wcscat (in: _Dest=0x69c29f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*" [0157.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0157.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0160.758] wcscmp (_String1=".", _String2=".") returned 0 [0160.758] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.759] wcscmp (_String1="..", _String2=".") returned 1 [0160.759] wcscmp (_String1="..", _String2="..") returned 0 [0160.759] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1 [0160.759] wcscmp (_String1="Calendar", _String2=".") returned 1 [0160.759] wcscmp (_String1="Calendar", _String2="..") returned 1 [0160.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697df88 [0160.759] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0160.759] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0160.759] wcscat (in: _Dest=0x697df88, _Source="Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0161.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0161.455] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1 [0161.455] wcscmp (_String1="CommonData", _String2=".") returned 1 [0161.456] wcscmp (_String1="CommonData", _String2="..") returned 1 [0161.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea26d0 [0161.456] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.456] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.456] wcscat (in: _Dest=0x3ea26d0, _Source="CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0161.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0161.457] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1 [0161.457] wcscmp (_String1="Computers", _String2=".") returned 1 [0161.457] wcscmp (_String1="Computers", _String2="..") returned 1 [0161.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e570 [0161.457] wcscpy (in: _Dest=0x697e570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.457] wcscat (in: _Dest=0x697e570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.457] wcscat (in: _Dest=0x697e570, _Source="Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0161.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0161.459] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1 [0161.459] wcscmp (_String1="Discussion", _String2=".") returned 1 [0161.459] wcscmp (_String1="Discussion", _String2="..") returned 1 [0161.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2780 [0161.459] wcscpy (in: _Dest=0x3ea2780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.459] wcscat (in: _Dest=0x3ea2780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.459] wcscat (in: _Dest=0x3ea2780, _Source="Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0161.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea2780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0161.460] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1 [0161.460] wcscmp (_String1="DocumentShare", _String2=".") returned 1 [0161.460] wcscmp (_String1="DocumentShare", _String2="..") returned 1 [0161.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2200 [0161.460] wcscpy (in: _Dest=0x3ea2200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.460] wcscat (in: _Dest=0x3ea2200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.460] wcscat (in: _Dest=0x3ea2200, _Source="DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0161.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea2200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0161.461] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1 [0161.461] wcscmp (_String1="GrooveDocumentReview", _String2=".") returned 1 [0161.461] wcscmp (_String1="GrooveDocumentReview", _String2="..") returned 1 [0161.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332ce8 [0161.462] wcscpy (in: _Dest=0x332ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.462] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.462] wcscat (in: _Dest=0x332ce8, _Source="GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0161.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x332ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0161.463] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~4")) returned 1 [0161.463] wcscmp (_String1="GrooveForms", _String2=".") returned 1 [0161.463] wcscmp (_String1="GrooveForms", _String2="..") returned 1 [0161.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea22b0 [0161.463] wcscpy (in: _Dest=0x3ea22b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.463] wcscat (in: _Dest=0x3ea22b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.463] wcscat (in: _Dest=0x3ea22b0, _Source="GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0161.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea22b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0161.465] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GROOVE~2")) returned 1 [0161.465] wcscmp (_String1="GrooveForms3", _String2=".") returned 1 [0161.465] wcscmp (_String1="GrooveForms3", _String2="..") returned 1 [0161.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea28e0 [0161.465] wcscpy (in: _Dest=0x3ea28e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.465] wcscat (in: _Dest=0x3ea28e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.465] wcscat (in: _Dest=0x3ea28e0, _Source="GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0161.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea28e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0161.466] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~3")) returned 1 [0161.466] wcscmp (_String1="GrooveForms4", _String2=".") returned 1 [0161.466] wcscmp (_String1="GrooveForms4", _String2="..") returned 1 [0161.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2570 [0161.466] wcscpy (in: _Dest=0x3ea2570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.466] wcscat (in: _Dest=0x3ea2570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.467] wcscat (in: _Dest=0x3ea2570, _Source="GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0161.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea2570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0161.468] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GR3B08~1")) returned 1 [0161.468] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0161.468] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0161.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2360 [0161.468] wcscpy (in: _Dest=0x3ea2360, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.468] wcscat (in: _Dest=0x3ea2360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.468] wcscat (in: _Dest=0x3ea2360, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0161.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea2360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0161.470] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1 [0161.470] wcscmp (_String1="GrooveProjectToolset", _String2=".") returned 1 [0161.470] wcscmp (_String1="GrooveProjectToolset", _String2="..") returned 1 [0161.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3333a8 [0161.470] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.470] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.470] wcscat (in: _Dest=0x3333a8, _Source="GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0161.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0161.471] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1 [0161.471] wcscmp (_String1="Welcome Tool", _String2=".") returned 1 [0161.471] wcscmp (_String1="Welcome Tool", _String2="..") returned 1 [0161.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea24c0 [0161.471] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0161.471] wcscat (in: _Dest=0x3ea24c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0161.472] wcscat (in: _Dest=0x3ea24c0, _Source="Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0161.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0161.473] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 0 [0161.473] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0161.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0161.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c29f8) returned 1 [0161.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 2637 os_tid = 0x1ab0 [0157.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 0x20 [0157.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.541] GetLastError () returned 0x5 [0157.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 Thread: id = 2638 os_tid = 0x1ab4 [0157.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 0x20 [0157.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.543] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.543] GetLastError () returned 0x5 [0157.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 Thread: id = 2639 os_tid = 0x1ab8 [0157.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 0x20 [0157.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.544] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.544] GetLastError () returned 0x5 [0157.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 2640 os_tid = 0x1abc [0157.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 0x20 [0157.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.546] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.546] GetLastError () returned 0x5 [0157.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 2641 os_tid = 0x1ac0 [0157.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 0x20 [0157.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.548] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.548] GetLastError () returned 0x5 [0157.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 2642 os_tid = 0x1ac4 [0157.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 0x20 [0157.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.550] GetLastError () returned 0x5 [0157.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 Thread: id = 2643 os_tid = 0x1ac8 [0157.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 0x20 [0157.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.552] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.552] GetLastError () returned 0x5 [0157.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 2644 os_tid = 0x1acc [0157.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 0x20 [0157.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.554] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.555] GetLastError () returned 0x5 [0157.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1490) returned 1 Thread: id = 2645 os_tid = 0x1ad0 [0157.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 0x20 [0157.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.557] GetLastError () returned 0x5 [0157.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 Thread: id = 2646 os_tid = 0x1ad4 [0157.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 0x20 [0157.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.559] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.559] GetLastError () returned 0x5 [0157.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 2647 os_tid = 0x1ad8 [0157.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 0x20 [0157.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0157.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.561] GetLastError () returned 0x5 [0157.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0157.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 Thread: id = 2648 os_tid = 0x1adc [0157.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 0x20 [0157.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.563] GetLastError () returned 0x5 [0157.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1548) returned 1 Thread: id = 2649 os_tid = 0x1ae0 [0157.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 0x20 [0157.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.565] GetLastError () returned 0x5 [0157.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 2650 os_tid = 0x1ae4 [0157.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 0x20 [0157.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.567] GetLastError () returned 0x5 [0157.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2651 os_tid = 0x1ae8 [0157.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 0x20 [0157.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.569] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.570] GetLastError () returned 0x5 [0157.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1600) returned 1 Thread: id = 2652 os_tid = 0x1aec [0157.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 0x20 [0157.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.572] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.572] GetLastError () returned 0x5 [0157.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df04b8) returned 1 Thread: id = 2653 os_tid = 0x1af0 [0157.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata")) returned 0x2020 [0163.561] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata", dwFileAttributes=0x20) returned 1 [0165.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a50 [0165.109] GetFileSizeEx (in: hFile=0x1a50, lpFileSize=0xf45fc14 | out: lpFileSize=0xf45fc14*=5399) returned 1 [0165.109] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x1513, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.110] ReadFile (in: hFile=0x1a50, lpBuffer=0xf45fbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf45fc00, lpOverlapped=0x0 | out: lpBuffer=0xf45fbf0*, lpNumberOfBytesRead=0xf45fc00*=0x4, lpOverlapped=0x0) returned 1 [0165.113] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0165.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0165.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0165.113] NtQuerySystemTime (in: CurrentTime=0xf45fb88 | out: CurrentTime=0xf45fb88*=132482710736208000) returned 0x0 [0165.113] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x42332ff1 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x570e9ea4 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0xcd3b6d1 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x1219f54f [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x37918d3e [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x4b833d95 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x2a0e6491 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x25d48565 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x6701b32 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x17c41160 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x79168887 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x7e62f003 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x520cd46f [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x3f37b8be [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x15cd616c [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x1e00dc10 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x5d4da944 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x154ab8cf [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x14ae2d13 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x272c6480 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x26e7c01f [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x2a8266a0 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x4fbc04cd [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x20a3451b [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x88411b [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x6cb1fd6 [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x2cc0d70f [0165.114] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x4c6660d2 [0165.115] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x49cae346 [0165.115] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x306eeee7 [0165.115] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0xa949398 [0165.115] RtlRandomEx (in: Seed=0xf45fb80 | out: Seed=0xf45fb80) returned 0x464272d1 [0165.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0165.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0165.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0165.130] ReadFile (in: hFile=0x1a50, lpBuffer=0x698b100, nNumberOfBytesToRead=0x1517, lpNumberOfBytesRead=0xf45fb7c, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xf45fb7c*=0x1517, lpOverlapped=0x0) returned 1 [0165.149] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.149] WriteFile (in: hFile=0x1a50, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x1517, lpNumberOfBytesWritten=0xf45fb80, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xf45fb80*=0x1517, lpOverlapped=0x0) returned 1 [0167.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0167.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0167.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0167.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0167.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0167.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0167.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823950) returned 1 [0167.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1fa80 [0167.905] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.906] WriteFile (in: hFile=0x1a50, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xf45fc08, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0xf45fc08*=0x11a, lpOverlapped=0x0) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f040) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa80) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0168.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0168.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3338e8 [0168.350] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" [0168.350] wcscat (in: _Dest=0x3338e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.ac3a86" [0168.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.ac3a86", NtPathName=0xf45fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35d00 [0168.356] FlushFileBuffers (hFile=0x1a50) returned 1 [0169.247] CloseHandle (hObject=0x1a50) returned 1 [0169.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e768 [0169.263] wcscpy (in: _Dest=0x697e768, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0169.264] wcscat (in: _Dest=0x697e768, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\AC3A86-Readme.txt" [0169.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\ac3a86-readme.txt")) returned 0xffffffff [0169.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b20 [0169.285] WriteFile (in: hFile=0x1b20, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf45fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf45fb9c*=0x8b9, lpOverlapped=0x0) returned 1 [0169.290] CloseHandle (hObject=0x1b20) returned 1 [0169.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 [0169.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 2654 os_tid = 0x1af4 [0157.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3118 [0157.574] wcscpy (in: _Dest=0x69c3118, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0157.574] wcscat (in: _Dest=0x69c3118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0157.574] wcscat (in: _Dest=0x69c3118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*" [0157.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0157.574] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0163.560] wcscmp (_String1=".", _String2=".") returned 0 [0163.560] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.561] wcscmp (_String1="..", _String2=".") returned 1 [0163.561] wcscmp (_String1="..", _String2="..") returned 0 [0163.561] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0163.561] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2=".") returned 1 [0163.561] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2="..") returned 1 [0163.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea84a8 [0163.561] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0163.561] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0163.561] wcscat (in: _Dest=0x3ea84a8, _Source="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" [0165.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea84a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0165.220] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0165.220] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2=".") returned 1 [0165.220] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2="..") returned 1 [0165.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8598 [0165.220] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0165.220] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0165.220] wcscat (in: _Dest=0x3ea8598, _Source="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" [0165.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0165.222] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0165.222] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0165.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0165.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3118) returned 1 [0165.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68184a0) returned 1 Thread: id = 2655 os_tid = 0x1af8 [0157.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\bhblpas253_8j.mp4")) returned 0x20 [0157.575] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4", dwFileAttributes=0x20) returned 1 [0158.538] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\bhblpas253_8j.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11d4 [0158.539] GetFileSizeEx (in: hFile=0x11d4, lpFileSize=0xe23fb9c | out: lpFileSize=0xe23fb9c*=93303) returned 1 [0158.539] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x16c73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.539] ReadFile (in: hFile=0x11d4, lpBuffer=0xe23fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe23fb88, lpOverlapped=0x0 | out: lpBuffer=0xe23fb78*, lpNumberOfBytesRead=0xe23fb88*=0x4, lpOverlapped=0x0) returned 1 [0158.541] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0158.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0158.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0158.541] NtQuerySystemTime (in: CurrentTime=0xe23fb10 | out: CurrentTime=0xe23fb10*=132482710670844000) returned 0x0 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x1448987a [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0xbc82ea4 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x74a02785 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x77eb3c5a [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x70edb5d [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x4cbd3859 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x609146f8 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x7e841b89 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x6138af65 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x2b2313ae [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x2b6195f [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x1175c15f [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x334421a [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x4b69a998 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x6c86f818 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x235fe602 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x4242790d [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x60abd775 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x4e4e91e1 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x29f9f915 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x134bc5e9 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x1dfe31c7 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x441ad601 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x36f2ff81 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x1fdfdcd1 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x401006c7 [0158.542] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x7fa185f1 [0158.543] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x6526decf [0158.543] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x50521771 [0158.543] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x4e6c587f [0158.543] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x64207fc1 [0158.543] RtlRandomEx (in: Seed=0xe23fb08 | out: Seed=0xe23fb08) returned 0x7f5403aa [0158.553] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.553] ReadFile (in: hFile=0x11d4, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0158.554] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1918 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0158.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0158.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0158.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0158.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0158.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0158.554] WriteFile (in: hFile=0x11d4, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0160.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0160.402] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.403] ReadFile (in: hFile=0x11d4, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0160.403] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec40 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0160.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0160.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0160.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0160.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0160.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.404] WriteFile (in: hFile=0x11d4, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0160.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0160.405] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x13077, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.405] ReadFile (in: hFile=0x11d4, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0160.405] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x13077, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec40 [0160.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0160.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0160.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0160.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0160.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0160.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0160.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.406] WriteFile (in: hFile=0x11d4, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xe23fb10, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xe23fb10*=0x3c00, lpOverlapped=0x0) returned 1 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19e38 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce3d8 [0160.408] SetFilePointerEx (in: hFile=0x11d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.408] WriteFile (in: hFile=0x11d4, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xe23fb90, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0xe23fb90*=0x154, lpOverlapped=0x0) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e38) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0160.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0160.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c15e8 [0160.447] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4" [0160.447] wcscat (in: _Dest=0x69c15e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4.ac3a86" [0160.447] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4.ac3a86", NtPathName=0xe23fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\bhBlPAs253_8j.mp4.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bc98 [0160.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 [0160.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f29f0) returned 1 [0160.508] NtQueryInformationFile (in: FileHandle=0x11d4, IoStatusBlock=0xe23fae0, FileInformation=0xe23fae8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe23fae0, FileInformation=0xe23fae8) returned 0x0 [0160.508] NtSetInformationFile (FileHandle=0x11d4, IoStatusBlock=0xe23fae0, FileInformation=0xe23fae8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 [0160.510] FlushFileBuffers (hFile=0x11d4) returned 1 [0160.512] CloseHandle (hObject=0x11d4) returned 1 [0160.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbfb8 [0160.514] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0160.514] wcscat (in: _Dest=0x66dbfb8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" [0160.515] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ac3a86-readme.txt")) returned 0xffffffff [0160.516] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b84 [0160.541] WriteFile (in: hFile=0x1b84, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe23fb24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe23fb24*=0x8b9, lpOverlapped=0x0) returned 1 [0160.545] CloseHandle (hObject=0x1b84) returned 1 [0160.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 [0160.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 2656 os_tid = 0x1afc [0157.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\nbmqjicjsn0f6rkusgjw.swf")) returned 0x20 [0157.576] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf", dwFileAttributes=0x20) returned 1 [0158.556] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\nbmqjicjsn0f6rkusgjw.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf60 [0158.556] GetFileSizeEx (in: hFile=0xf60, lpFileSize=0xf66fee4 | out: lpFileSize=0xf66fee4*=78652) returned 1 [0158.556] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x13338, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.556] ReadFile (in: hFile=0xf60, lpBuffer=0xf66fec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf66fed0, lpOverlapped=0x0 | out: lpBuffer=0xf66fec0*, lpNumberOfBytesRead=0xf66fed0*=0x4, lpOverlapped=0x0) returned 1 [0158.558] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0158.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0158.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0158.558] NtQuerySystemTime (in: CurrentTime=0xf66fe58 | out: CurrentTime=0xf66fe58*=132482710671000000) returned 0x0 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x6257d044 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x5c213917 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x2fe69de7 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x465359ef [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x69cb1094 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x15d35aee [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x7ca46524 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x7890c8b5 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x7868e0dc [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x1d5bc990 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x394d4a2b [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x6a84fe7a [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x5fbb7ffd [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x57537cd0 [0158.558] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x881a9bc [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x30b6f06c [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x56730c72 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x31d9a378 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x1175c15f [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x6cafb5a9 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x334c3202 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x5a3a59c6 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x1772e85a [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x3cff71eb [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x24ac155f [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x22ea08aa [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x43be6b01 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x27e5afcb [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x7a6ca439 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x7ca46524 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x664bc9a7 [0158.559] RtlRandomEx (in: Seed=0xf66fe50 | out: Seed=0xf66fe50) returned 0x3c9c79a8 [0158.570] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.570] ReadFile (in: hFile=0xf60, lpBuffer=0x673f328, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0158.570] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1918 [0158.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0158.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0158.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0158.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0158.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0158.571] WriteFile (in: hFile=0xf60, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0160.414] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.414] ReadFile (in: hFile=0xf60, lpBuffer=0x673f328, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.414] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec40 [0160.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0160.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0160.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0160.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0160.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.415] WriteFile (in: hFile=0xf60, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0160.420] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0xf73c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.420] ReadFile (in: hFile=0xf60, lpBuffer=0x673f328, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.421] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0xf73c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec40 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0160.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0160.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0160.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0160.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.422] WriteFile (in: hFile=0xf60, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf66fe58, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xf66fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0160.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0160.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0160.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e5eec8 [0160.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0160.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0160.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0160.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e62bd0 [0160.427] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.427] WriteFile (in: hFile=0xf60, lpBuffer=0x3e62bd0*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0xf66fed8, lpOverlapped=0x0 | out: lpBuffer=0x3e62bd0*, lpNumberOfBytesWritten=0xf66fed8*=0x162, lpOverlapped=0x0) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62bd0) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eec8) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0160.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0160.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e768 [0160.456] wcscpy (in: _Dest=0x697e768, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf" [0160.456] wcscat (in: _Dest=0x697e768, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf.ac3a86" [0160.457] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf.ac3a86", NtPathName=0xf66fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\NBmQJicJSN0f6RkUSGJW.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3329e8 [0160.519] FlushFileBuffers (hFile=0xf60) returned 1 [0160.523] CloseHandle (hObject=0xf60) returned 1 [0160.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbc58 [0160.524] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0160.524] wcscat (in: _Dest=0x66dbc58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" [0160.524] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ac3a86-readme.txt")) returned 0x20 [0160.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 [0160.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 2657 os_tid = 0x1b00 [0157.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ovrd.mkv")) returned 0x20 [0157.576] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv", dwFileAttributes=0x20) returned 1 [0158.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ovrd.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1100 [0158.572] GetFileSizeEx (in: hFile=0x1100, lpFileSize=0x5e2fcb4 | out: lpFileSize=0x5e2fcb4*=54529) returned 1 [0158.572] SetFilePointerEx (in: hFile=0x1100, liDistanceToMove=0xd4fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.572] ReadFile (in: hFile=0x1100, lpBuffer=0x5e2fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e2fca0, lpOverlapped=0x0 | out: lpBuffer=0x5e2fc90*, lpNumberOfBytesRead=0x5e2fca0*=0x4, lpOverlapped=0x0) returned 1 [0158.574] SetFilePointerEx (in: hFile=0x1100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0158.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0158.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0158.574] NtQuerySystemTime (in: CurrentTime=0x5e2fc28 | out: CurrentTime=0x5e2fc28*=132482710671156000) returned 0x0 [0158.574] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x3609fd35 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x5a9fc19 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x8c23b87 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1fc1e8ad [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x4953fedb [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x6a494c0 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x97abc76 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0xc17bdbe [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0xd849b8d [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x19d93c11 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1baefefd [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x76362507 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x864d66 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0xc6c7c44 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x675e91f2 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x5da3472e [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x3032fb7c [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x7eb2814c [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x6a2e191f [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x30316535 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1aaf30a [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0xb8b63cb [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x455f1edd [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1fcac127 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x39f63d01 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x7d1d32ab [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1d92d496 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x3ce00762 [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x14ffa86d [0158.575] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x1f4fd430 [0158.576] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x4704b998 [0158.576] RtlRandomEx (in: Seed=0x5e2fc20 | out: Seed=0x5e2fc20) returned 0x7f9fd0e1 [0158.586] SetFilePointerEx (in: hFile=0x1100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.586] ReadFile (in: hFile=0x1100, lpBuffer=0x6737b18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e2fc28, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0x5e2fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0158.586] SetFilePointerEx (in: hFile=0x1100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1918 [0158.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0158.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0158.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0158.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670e6c0 [0158.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0158.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0158.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0158.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0158.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0158.587] WriteFile (in: hFile=0x1100, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e2fc28, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0x5e2fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0160.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0160.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4c68 [0160.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4948 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4fd8 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0160.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0160.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec710 [0160.419] SetFilePointerEx (in: hFile=0x1100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.419] WriteFile (in: hFile=0x1100, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x5e2fca8, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x5e2fca8*=0x102, lpOverlapped=0x0) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0160.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0160.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27360 [0160.454] wcscpy (in: _Dest=0x3f27360, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv" [0160.454] wcscat (in: _Dest=0x3f27360, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv.ac3a86" [0160.454] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv.ac3a86", NtPathName=0x5e2fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\OVRd.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0160.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 [0160.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6953720) returned 1 [0160.513] NtQueryInformationFile (in: FileHandle=0x1100, IoStatusBlock=0x5e2fbf8, FileInformation=0x5e2fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e2fbf8, FileInformation=0x5e2fc00) returned 0x0 [0160.513] NtSetInformationFile (FileHandle=0x1100, IoStatusBlock=0x5e2fbf8, FileInformation=0x5e2fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0160.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 [0160.521] FlushFileBuffers (hFile=0x1100) returned 1 [0160.529] CloseHandle (hObject=0x1100) returned 1 [0160.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355290 [0160.530] wcscpy (in: _Dest=0x355290, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0160.530] wcscat (in: _Dest=0x355290, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" [0160.530] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ac3a86-readme.txt")) returned 0x20 [0160.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 [0160.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674aeb8) returned 1 Thread: id = 2658 os_tid = 0x1b04 [0157.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\psebtn.flv")) returned 0x20 [0157.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv", dwFileAttributes=0x20) returned 1 [0158.588] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\psebtn.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13a4 [0158.588] GetFileSizeEx (in: hFile=0x13a4, lpFileSize=0xaecfbe4 | out: lpFileSize=0xaecfbe4*=88227) returned 1 [0158.588] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x1589f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.588] ReadFile (in: hFile=0x13a4, lpBuffer=0xaecfbc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaecfbd0, lpOverlapped=0x0 | out: lpBuffer=0xaecfbc0*, lpNumberOfBytesRead=0xaecfbd0*=0x4, lpOverlapped=0x0) returned 1 [0158.590] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0158.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0158.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0158.590] NtQuerySystemTime (in: CurrentTime=0xaecfb58 | out: CurrentTime=0xaecfb58*=132482710671312000) returned 0x0 [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x6dd5121e [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x4c63145f [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x645fe25b [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3252575 [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x63f248e3 [0158.590] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x2f1382cb [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x7de868e6 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3b8dbb58 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x7bcffb2 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x1bd4e292 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3b0fa9 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x66e2108a [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3e82f5f9 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3db2ba16 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x63445527 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x1864eca1 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x1936ca67 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x15d35aee [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x4b2bc0b2 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x3ed55a2f [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x30a0cd77 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x6e78203e [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0xf311b8d [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x768e8e97 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x6c90e269 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x73b64525 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x341d39b [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x7595877 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0xb08117c [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x2a61b21 [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x4804a40b [0158.591] RtlRandomEx (in: Seed=0xaecfb50 | out: Seed=0xaecfb50) returned 0x1b70a586 [0158.601] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.602] ReadFile (in: hFile=0x13a4, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0158.602] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1918 [0158.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b600 [0158.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0158.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0158.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0158.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0158.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0158.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0158.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0158.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0158.603] WriteFile (in: hFile=0x13a4, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0160.424] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.424] ReadFile (in: hFile=0x13a4, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.424] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec40 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0160.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0160.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0160.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0160.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec40) returned 1 [0160.425] WriteFile (in: hFile=0x13a4, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0160.429] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x11ca3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.429] ReadFile (in: hFile=0x13a4, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.430] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x11ca3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5ec88 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0160.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0160.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0160.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ec88) returned 1 [0160.430] WriteFile (in: hFile=0x13a4, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaecfb58, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0xaecfb58*=0x3c00, lpOverlapped=0x0) returned 1 [0160.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0160.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0160.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0160.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ed0 [0160.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0160.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0160.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0160.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0160.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b58) returned 1 [0160.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x66ce5c0 [0160.436] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.436] WriteFile (in: hFile=0x13a4, lpBuffer=0x66ce5c0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xaecfbd8, lpOverlapped=0x0 | out: lpBuffer=0x66ce5c0*, lpNumberOfBytesWritten=0xaecfbd8*=0x146, lpOverlapped=0x0) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce5c0) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ed0) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0160.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0160.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355290 [0160.460] wcscpy (in: _Dest=0x355290, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv" [0160.460] wcscat (in: _Dest=0x355290, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv.ac3a86" [0160.461] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv.ac3a86", NtPathName=0xaecfb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\psebtn.flv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0160.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e4c8 [0160.527] FlushFileBuffers (hFile=0x13a4) returned 1 [0160.534] CloseHandle (hObject=0x13a4) returned 1 [0160.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3555f0 [0160.535] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\" [0160.535] wcscat (in: _Dest=0x3555f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" [0160.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\ac3a86-readme.txt")) returned 0x20 [0160.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 [0160.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bc38) returned 1 Thread: id = 2659 os_tid = 0x1b08 [0157.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6770 [0157.578] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0157.578] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0157.578] wcscat (in: _Dest=0x3da6770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\*") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\*" [0157.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0157.578] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1944e3b0, ftCreationTime.dwHighDateTime=0x1d5e83a, ftLastAccessTime.dwLowDateTime=0x9fe8ff70, ftLastAccessTime.dwHighDateTime=0x1d5e2b6, ftLastWriteTime.dwLowDateTime=0x9fe8ff70, ftLastWriteTime.dwHighDateTime=0x1d5e2b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0157.757] wcscmp (_String1=".", _String2=".") returned 0 [0157.757] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1944e3b0, ftCreationTime.dwHighDateTime=0x1d5e83a, ftLastAccessTime.dwLowDateTime=0x9fe8ff70, ftLastAccessTime.dwHighDateTime=0x1d5e2b6, ftLastWriteTime.dwLowDateTime=0x9fe8ff70, ftLastWriteTime.dwHighDateTime=0x1d5e2b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.758] wcscmp (_String1="..", _String2=".") returned 1 [0157.758] wcscmp (_String1="..", _String2="..") returned 0 [0157.758] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb091b10, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0xfec1ae10, ftLastAccessTime.dwHighDateTime=0x1d5dafb, ftLastWriteTime.dwLowDateTime=0xfec1ae10, ftLastWriteTime.dwHighDateTime=0x1d5dafb, nFileSizeHigh=0x0, nFileSizeLow=0x13390, dwReserved0=0x0, dwReserved1=0x0, cFileName="7rbCo6.avi", cAlternateFileName="")) returned 1 [0157.758] wcscmp (_String1="7rbCo6.avi", _String2=".") returned 1 [0157.758] wcscmp (_String1="7rbCo6.avi", _String2="..") returned 1 [0157.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c3a00 [0157.758] wcscpy (in: _Dest=0x69c3a00, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0157.758] wcscat (in: _Dest=0x69c3a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0157.758] wcscat (in: _Dest=0x69c3a00, _Source="7rbCo6.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi" [0161.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0161.445] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f35a000, ftCreationTime.dwHighDateTime=0x1d5e5c0, ftLastAccessTime.dwLowDateTime=0xc20bace0, ftLastAccessTime.dwHighDateTime=0x1d5e72c, ftLastWriteTime.dwLowDateTime=0xc20bace0, ftLastWriteTime.dwHighDateTime=0x1d5e72c, nFileSizeHigh=0x0, nFileSizeLow=0xaa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="bVviOZkehpk7Hdx9.swf", cAlternateFileName="BVVIOZ~1.SWF")) returned 1 [0161.445] wcscmp (_String1="bVviOZkehpk7Hdx9.swf", _String2=".") returned 1 [0161.445] wcscmp (_String1="bVviOZkehpk7Hdx9.swf", _String2="..") returned 1 [0161.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e4c8 [0161.445] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0161.445] wcscat (in: _Dest=0x697e4c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0161.445] wcscat (in: _Dest=0x697e4c8, _Source="bVviOZkehpk7Hdx9.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf" [0161.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0161.447] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa26a0cd0, ftCreationTime.dwHighDateTime=0x1d5e71b, ftLastAccessTime.dwLowDateTime=0xea668620, ftLastAccessTime.dwHighDateTime=0x1d5e27b, ftLastWriteTime.dwLowDateTime=0xea668620, ftLastWriteTime.dwHighDateTime=0x1d5e27b, nFileSizeHigh=0x0, nFileSizeLow=0x110ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="GHKyOUh47J9xIn.mkv", cAlternateFileName="GHKYOU~1.MKV")) returned 1 [0161.447] wcscmp (_String1="GHKyOUh47J9xIn.mkv", _String2=".") returned 1 [0161.447] wcscmp (_String1="GHKyOUh47J9xIn.mkv", _String2="..") returned 1 [0161.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0161.447] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0161.447] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0161.447] wcscat (in: _Dest=0x697dee0, _Source="GHKyOUh47J9xIn.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv" [0161.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0161.448] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0fd4d0, ftCreationTime.dwHighDateTime=0x1d5d9e9, ftLastAccessTime.dwLowDateTime=0x96053ba0, ftLastAccessTime.dwHighDateTime=0x1d5e599, ftLastWriteTime.dwLowDateTime=0x96053ba0, ftLastWriteTime.dwHighDateTime=0x1d5e599, nFileSizeHigh=0x0, nFileSizeLow=0xf16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="xym2Fame.avi", cAlternateFileName="")) returned 1 [0161.448] wcscmp (_String1="xym2Fame.avi", _String2=".") returned 1 [0161.448] wcscmp (_String1="xym2Fame.avi", _String2="..") returned 1 [0161.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c2b28 [0161.448] wcscpy (in: _Dest=0x69c2b28, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0161.448] wcscat (in: _Dest=0x69c2b28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0161.448] wcscat (in: _Dest=0x69c2b28, _Source="xym2Fame.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi" [0161.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0161.450] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc978afc0, ftCreationTime.dwHighDateTime=0x1d5d992, ftLastAccessTime.dwLowDateTime=0x14cebc70, ftLastAccessTime.dwHighDateTime=0x1d5e69b, ftLastWriteTime.dwLowDateTime=0x14cebc70, ftLastWriteTime.dwHighDateTime=0x1d5e69b, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZO53QlmwImMFHBV2Hjg.swf", cAlternateFileName="ZO53QL~1.SWF")) returned 1 [0161.450] wcscmp (_String1="ZO53QlmwImMFHBV2Hjg.swf", _String2=".") returned 1 [0161.450] wcscmp (_String1="ZO53QlmwImMFHBV2Hjg.swf", _String2="..") returned 1 [0161.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2830 [0161.450] wcscpy (in: _Dest=0x3ea2830, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv" [0161.450] wcscat (in: _Dest=0x3ea2830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0161.450] wcscat (in: _Dest=0x3ea2830, _Source="ZO53QlmwImMFHBV2Hjg.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf" [0161.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0161.451] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc978afc0, ftCreationTime.dwHighDateTime=0x1d5d992, ftLastAccessTime.dwLowDateTime=0x14cebc70, ftLastAccessTime.dwHighDateTime=0x1d5e69b, ftLastWriteTime.dwLowDateTime=0x14cebc70, ftLastWriteTime.dwHighDateTime=0x1d5e69b, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZO53QlmwImMFHBV2Hjg.swf", cAlternateFileName="ZO53QL~1.SWF")) returned 0 [0161.451] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0161.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0161.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 [0161.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bcb8) returned 1 Thread: id = 2660 os_tid = 0x1b0c [0157.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 0x20 [0158.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0158.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.069] GetLastError () returned 0x5 [0158.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0158.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 2661 os_tid = 0x1b10 [0157.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 0x20 [0158.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0158.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.067] GetLastError () returned 0x5 [0158.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0158.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 2662 os_tid = 0x1b14 [0157.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat")) returned 0x20 [0162.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0162.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.261] GetLastError () returned 0x5 [0162.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0162.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d01c8) returned 1 Thread: id = 2663 os_tid = 0x1b18 [0157.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat")) returned 0x20 [0162.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0162.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.266] GetLastError () returned 0x5 [0162.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0162.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 Thread: id = 2664 os_tid = 0x1b1c [0157.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat")) returned 0x20 [0162.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0162.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.267] GetLastError () returned 0x5 [0162.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0162.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 Thread: id = 2665 os_tid = 0x1b20 [0157.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml")) returned 0x20 [0162.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0162.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.224] GetLastError () returned 0x5 [0162.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0162.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 Thread: id = 2666 os_tid = 0x1b24 [0157.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml")) returned 0x20 [0162.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0162.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.253] GetLastError () returned 0x5 [0162.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0162.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 Thread: id = 2667 os_tid = 0x1b28 [0157.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl")) returned 0x20 [0162.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0162.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.255] GetLastError () returned 0x5 [0162.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0162.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 Thread: id = 2668 os_tid = 0x1b2c [0157.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 0x20 [0158.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0158.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.895] GetLastError () returned 0x5 [0158.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0158.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 Thread: id = 2669 os_tid = 0x1b30 [0157.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 0x20 [0158.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0158.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.879] GetLastError () returned 0x5 [0158.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0158.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2670 os_tid = 0x1b34 [0157.584] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\blackbox.bin.ac3a86")) returned 0x2026 [0157.584] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86", dwFileAttributes=0x20) returned 1 [0163.210] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\blackbox.bin.ac3a86"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec [0163.210] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0x10d7fa2c | out: lpFileSize=0x10d7fa2c*=286) returned 1 [0163.210] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.210] ReadFile (in: hFile=0x1bec, lpBuffer=0x10d7fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10d7fa18, lpOverlapped=0x0 | out: lpBuffer=0x10d7fa08*, lpNumberOfBytesRead=0x10d7fa18*=0x4, lpOverlapped=0x0) returned 1 [0163.212] FlushFileBuffers (hFile=0x1bec) returned 1 [0167.522] CloseHandle (hObject=0x1bec) returned 1 [0167.522] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\blackbox.bin.ac3a86", dwFileAttributes=0x2026) returned 1 [0170.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59510) returned 1 Thread: id = 2671 os_tid = 0x1b38 [0157.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29410 [0157.585] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0157.585] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\" [0157.585] wcscat (in: _Dest=0x3f29410, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*" [0157.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.585] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d78 [0157.585] wcscmp (_String1=".", _String2=".") returned 0 [0157.585] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.586] wcscmp (_String1="..", _String2=".") returned 1 [0157.586] wcscmp (_String1="..", _String2="..") returned 0 [0157.586] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.586] FindClose (in: hFindFile=0x3e80d78 | out: hFindFile=0x3e80d78) returned 1 [0157.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0157.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 [0157.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 2672 os_tid = 0x1b3c [0157.587] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds")) returned 0x20 [0159.436] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0163.577] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.577] GetLastError () returned 0x2 [0163.577] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 0 [0163.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 2673 os_tid = 0x1b40 [0157.588] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla")) returned 0x20 [0160.761] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 1 [0160.764] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.764] GetLastError () returned 0x20 [0160.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x30bec80 [0160.765] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0160.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bec80) returned 1 [0160.765] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f22978, Size=0x20) returned 0x3d4ce40 [0160.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f291e0 [0160.765] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" [0160.765] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 1 [0160.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 2674 os_tid = 0x1b44 [0157.588] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec.ac3a86")) returned 0x2026 [0157.588] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86", dwFileAttributes=0x20) returned 1 [0163.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec.ac3a86"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be8 [0163.214] GetFileSizeEx (in: hFile=0x1be8, lpFileSize=0x1103fe9c | out: lpFileSize=0x1103fe9c*=998) returned 1 [0163.214] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x3e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.214] ReadFile (in: hFile=0x1be8, lpBuffer=0x1103fe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1103fe88, lpOverlapped=0x0 | out: lpBuffer=0x1103fe78*, lpNumberOfBytesRead=0x1103fe88*=0x4, lpOverlapped=0x0) returned 1 [0163.216] FlushFileBuffers (hFile=0x1be8) returned 1 [0164.188] CloseHandle (hObject=0x1be8) returned 1 [0164.188] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec.ac3a86", dwFileAttributes=0x2026) returned 1 [0164.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bd38) returned 1 Thread: id = 2675 os_tid = 0x1b48 [0157.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aac0 [0157.589] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0157.589] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0157.589] wcscat (in: _Dest=0x3f1aac0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0157.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.589] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d78 [0157.589] wcscmp (_String1=".", _String2=".") returned 0 [0157.589] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.589] wcscmp (_String1="..", _String2=".") returned 1 [0157.589] wcscmp (_String1="..", _String2="..") returned 0 [0157.589] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.589] FindClose (in: hFindFile=0x3e80d78 | out: hFindFile=0x3e80d78) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 2676 os_tid = 0x1b4c [0157.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1aac0 [0157.591] wcscpy (in: _Dest=0x3f1aac0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0157.591] wcscat (in: _Dest=0x3f1aac0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0157.591] wcscat (in: _Dest=0x3f1aac0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0157.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.591] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d78 [0157.591] wcscmp (_String1=".", _String2=".") returned 0 [0157.591] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.592] wcscmp (_String1="..", _String2=".") returned 1 [0157.592] wcscmp (_String1="..", _String2="..") returned 0 [0157.592] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.592] FindClose (in: hFindFile=0x3e80d78 | out: hFindFile=0x3e80d78) returned 1 [0157.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0157.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0157.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 Thread: id = 2677 os_tid = 0x1b50 [0157.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29870 [0157.593] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0157.593] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0157.593] wcscat (in: _Dest=0x3f29870, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0157.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.593] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0157.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 [0157.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 Thread: id = 2678 os_tid = 0x1b54 [0157.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3968 [0157.595] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0157.595] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0157.595] wcscat (in: _Dest=0x69c3968, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*" [0157.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0157.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0158.184] wcscmp (_String1=".", _String2=".") returned 0 [0158.184] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.184] wcscmp (_String1="..", _String2=".") returned 1 [0158.184] wcscmp (_String1="..", _String2="..") returned 0 [0158.184] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl_gb18030.cnv", cAlternateFileName="CTL_GB~1.CNV")) returned 1 [0158.184] wcscmp (_String1="ctl_gb18030.cnv", _String2=".") returned 1 [0158.184] wcscmp (_String1="ctl_gb18030.cnv", _String2="..") returned 1 [0158.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b5b8 [0158.184] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0158.184] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0158.185] wcscat (in: _Dest=0x35b5b8, _Source="ctl_gb18030.cnv" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" [0161.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0161.313] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0161.313] wcscmp (_String1="icudt26l.dat", _String2=".") returned 1 [0161.313] wcscmp (_String1="icudt26l.dat", _String2="..") returned 1 [0161.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2410 [0161.313] wcscpy (in: _Dest=0x3ea2410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0161.313] wcscat (in: _Dest=0x3ea2410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0161.313] wcscat (in: _Dest=0x3ea2410, _Source="icudt26l.dat" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" [0161.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0161.316] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0161.316] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0161.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0161.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 [0161.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 2679 os_tid = 0x1b58 [0157.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1688 [0157.595] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0157.595] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0157.595] wcscat (in: _Dest=0x69c1688, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*" [0157.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0157.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0158.185] wcscmp (_String1=".", _String2=".") returned 0 [0158.185] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.185] wcscmp (_String1="..", _String2=".") returned 1 [0158.185] wcscmp (_String1="..", _String2="..") returned 0 [0158.185] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0158.185] wcscmp (_String1="Adobe", _String2=".") returned 1 [0158.185] wcscmp (_String1="Adobe", _String2="..") returned 1 [0158.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5be40 [0158.185] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0158.185] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0158.185] wcscat (in: _Dest=0x3e5be40, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0159.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0159.697] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0159.697] wcscmp (_String1="Mac", _String2=".") returned 1 [0159.697] wcscmp (_String1="Mac", _String2="..") returned 1 [0159.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e228 [0159.698] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.698] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0159.698] wcscat (in: _Dest=0x697e228, _Source="Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0159.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0159.699] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0159.699] wcscmp (_String1="win", _String2=".") returned 1 [0159.699] wcscmp (_String1="win", _String2="..") returned 1 [0159.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dd90 [0159.699] wcscpy (in: _Dest=0x697dd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0159.699] wcscat (in: _Dest=0x697dd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0159.699] wcscat (in: _Dest=0x697dd90, _Source="win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0159.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697dd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0159.701] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0159.701] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0159.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0159.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 [0159.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 2680 os_tid = 0x1b5c [0157.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve")) returned 0x20 [0157.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0157.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.596] GetLastError () returned 0x5 [0157.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0157.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d448) returned 1 Thread: id = 2681 os_tid = 0x1b60 [0157.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur")) returned 0x20 [0157.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0157.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.598] GetLastError () returned 0x5 [0157.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0157.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e408) returned 1 Thread: id = 2682 os_tid = 0x1b64 [0157.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr")) returned 0x20 [0157.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0157.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.600] GetLastError () returned 0x5 [0157.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0157.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 2683 os_tid = 0x1b68 [0157.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf")) returned 0x20 [0158.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0158.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.053] GetLastError () returned 0x5 [0158.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0158.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 2684 os_tid = 0x1b6c [0157.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf")) returned 0x20 [0158.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0158.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.812] GetLastError () returned 0x5 [0158.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0158.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818538) returned 1 Thread: id = 2685 os_tid = 0x1b70 [0157.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf")) returned 0x20 [0158.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0158.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.810] GetLastError () returned 0x5 [0158.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0158.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68185d0) returned 1 Thread: id = 2686 os_tid = 0x1b74 [0157.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf")) returned 0x20 [0158.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0158.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.824] GetLastError () returned 0x5 [0158.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0158.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818668) returned 1 Thread: id = 2687 os_tid = 0x1b78 [0157.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf")) returned 0x20 [0158.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0158.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.822] GetLastError () returned 0x5 [0158.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0158.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818700) returned 1 Thread: id = 2688 os_tid = 0x1b7c [0157.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf")) returned 0x20 [0158.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0158.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.820] GetLastError () returned 0x5 [0158.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0158.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818798) returned 1 Thread: id = 2689 os_tid = 0x1b80 [0157.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf")) returned 0x20 [0158.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0158.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.819] GetLastError () returned 0x5 [0158.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0158.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818830) returned 1 Thread: id = 2690 os_tid = 0x1b84 [0157.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf")) returned 0x20 [0158.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0158.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.817] GetLastError () returned 0x5 [0158.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0158.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68188c8) returned 1 Thread: id = 2691 os_tid = 0x1b88 [0157.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf")) returned 0x20 [0158.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0158.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.815] GetLastError () returned 0x5 [0158.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0158.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818960) returned 1 Thread: id = 2692 os_tid = 0x1b8c [0157.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf")) returned 0x20 [0158.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0158.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.813] GetLastError () returned 0x5 [0158.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0158.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 Thread: id = 2693 os_tid = 0x1b90 [0157.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26d88 [0157.605] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0157.605] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0157.605] wcscat (in: _Dest=0x3f26d88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*" [0157.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0157.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0162.396] wcscmp (_String1=".", _String2=".") returned 0 [0162.396] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.396] wcscmp (_String1="..", _String2=".") returned 1 [0162.396] wcscmp (_String1="..", _String2="..") returned 0 [0162.396] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x2c360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0162.396] wcscmp (_String1="ANALYS32.XLL", _String2=".") returned 1 [0162.396] wcscmp (_String1="ANALYS32.XLL", _String2="..") returned 1 [0162.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0fa8 [0162.396] wcscpy (in: _Dest=0x69c0fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0162.396] wcscat (in: _Dest=0x69c0fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0162.396] wcscat (in: _Dest=0x69c0fa8, _Source="ANALYS32.XLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" [0165.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0165.253] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xd726, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0165.253] wcscmp (_String1="ATPVBAEN.XLAM", _String2=".") returned 1 [0165.253] wcscmp (_String1="ATPVBAEN.XLAM", _String2="..") returned 1 [0165.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1368 [0165.253] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0165.253] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0165.253] wcscat (in: _Dest=0x69c1368, _Source="ATPVBAEN.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" [0165.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0165.255] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x697b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0165.255] wcscmp (_String1="FUNCRES.XLAM", _String2=".") returned 1 [0165.255] wcscmp (_String1="FUNCRES.XLAM", _String2="..") returned 1 [0165.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69bff68 [0165.255] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0165.255] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0165.255] wcscat (in: _Dest=0x69bff68, _Source="FUNCRES.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" [0165.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0165.257] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0165.257] wcscmp (_String1="PROCDB.XLAM", _String2=".") returned 1 [0165.257] wcscmp (_String1="PROCDB.XLAM", _String2="..") returned 1 [0165.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818c58 [0165.257] wcscpy (in: _Dest=0x6818c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0165.257] wcscat (in: _Dest=0x6818c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0165.257] wcscat (in: _Dest=0x6818c58, _Source="PROCDB.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" [0165.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0165.259] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0 [0165.259] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0165.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0165.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 [0165.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ac38) returned 1 Thread: id = 2694 os_tid = 0x1b94 [0157.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam")) returned 0x20 [0161.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0161.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.507] GetLastError () returned 0x5 [0161.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0161.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 2695 os_tid = 0x1b98 [0157.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b038 [0157.606] wcscpy (in: _Dest=0x674b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0157.606] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0157.606] wcscat (in: _Dest=0x674b038, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*" [0157.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0157.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0161.620] wcscmp (_String1=".", _String2=".") returned 0 [0161.621] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.621] wcscmp (_String1="..", _String2=".") returned 1 [0161.621] wcscmp (_String1="..", _String2="..") returned 0 [0161.621] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x65460, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0161.621] wcscmp (_String1="SOLVER.XLAM", _String2=".") returned 1 [0161.621] wcscmp (_String1="SOLVER.XLAM", _String2="..") returned 1 [0161.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818b28 [0161.621] wcscpy (in: _Dest=0x6818b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0161.621] wcscat (in: _Dest=0x6818b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0161.621] wcscat (in: _Dest=0x6818b28, _Source="SOLVER.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" [0163.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0163.314] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0163.314] wcscmp (_String1="SOLVER32.DLL", _String2=".") returned 1 [0163.314] wcscmp (_String1="SOLVER32.DLL", _String2="..") returned 1 [0163.314] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0163.314] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0163.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0163.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 [0163.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bdb8) returned 1 Thread: id = 2696 os_tid = 0x1b9c [0157.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1600 [0157.606] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0157.606] wcscat (in: _Dest=0x3ee1600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0157.606] wcscat (in: _Dest=0x3ee1600, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0157.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0157.606] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0163.218] wcscmp (_String1=".", _String2=".") returned 0 [0163.218] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.218] wcscmp (_String1="..", _String2=".") returned 1 [0163.218] wcscmp (_String1="..", _String2="..") returned 0 [0163.218] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0163.218] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0163.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0163.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1600) returned 1 [0163.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 2697 os_tid = 0x1ba0 [0157.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0157.607] wcscpy (in: _Dest=0x332ce8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0157.607] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0157.607] wcscat (in: _Dest=0x332ce8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0157.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0157.607] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80d78 [0157.607] wcscmp (_String1=".", _String2=".") returned 0 [0157.607] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.607] wcscmp (_String1="..", _String2=".") returned 1 [0157.607] wcscmp (_String1="..", _String2="..") returned 0 [0157.607] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0157.607] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0157.607] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0157.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48658 [0157.608] wcscpy (in: _Dest=0x3e48658, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0157.608] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0157.608] wcscat (in: _Dest=0x3e48658, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0158.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0158.404] FindNextFileW (in: hFindFile=0x3e80d78, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0158.404] FindClose (in: hFindFile=0x3e80d78 | out: hFindFile=0x3e80d78) returned 1 [0158.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0158.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 [0158.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2698 os_tid = 0x1ba4 [0157.608] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0157.608] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0157.608] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.608] GetLastError () returned 0x5 [0157.608] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0157.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 2699 os_tid = 0x1ba8 [0157.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cab8 [0157.610] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0157.610] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0157.610] wcscat (in: _Dest=0x674cab8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*" [0157.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0157.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0158.916] wcscmp (_String1=".", _String2=".") returned 0 [0158.917] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.917] wcscmp (_String1="..", _String2=".") returned 1 [0158.917] wcscmp (_String1="..", _String2="..") returned 0 [0158.917] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0158.917] wcscmp (_String1="14", _String2=".") returned 1 [0158.917] wcscmp (_String1="14", _String2="..") returned 1 [0158.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3557a0 [0158.917] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0158.917] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0158.917] wcscat (in: _Dest=0x3557a0, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0159.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3557a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0159.815] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0159.815] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0159.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0159.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 [0159.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 Thread: id = 2700 os_tid = 0x1bac [0157.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29aa0 [0157.611] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0157.612] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0157.612] wcscat (in: _Dest=0x3f29aa0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*" [0157.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0157.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e809b8 [0157.612] wcscmp (_String1=".", _String2=".") returned 0 [0157.612] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.612] wcscmp (_String1="..", _String2=".") returned 1 [0157.612] wcscmp (_String1="..", _String2="..") returned 0 [0157.612] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0157.612] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0157.612] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0157.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2eb8 [0157.612] wcscpy (in: _Dest=0x69c2eb8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0157.612] wcscat (in: _Dest=0x69c2eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0157.612] wcscat (in: _Dest=0x69c2eb8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" [0158.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0158.406] FindNextFileW (in: hFindFile=0x3e809b8, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.407] FindClose (in: hFindFile=0x3e809b8 | out: hFindFile=0x3e809b8) returned 1 [0158.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0158.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 [0158.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23300) returned 1 Thread: id = 2701 os_tid = 0x1bb0 [0157.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29870 [0157.613] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0157.613] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0157.613] wcscat (in: _Dest=0x3f29870, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*" [0157.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0157.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e804f8 [0157.613] wcscmp (_String1=".", _String2=".") returned 0 [0157.613] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.613] wcscmp (_String1="..", _String2=".") returned 1 [0157.613] wcscmp (_String1="..", _String2="..") returned 0 [0157.613] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0157.613] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0157.613] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0157.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c38d0 [0157.614] wcscpy (in: _Dest=0x69c38d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0157.614] wcscat (in: _Dest=0x69c38d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0157.614] wcscat (in: _Dest=0x69c38d0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" [0158.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c38d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0158.409] FindNextFileW (in: hFindFile=0x3e804f8, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.409] FindClose (in: hFindFile=0x3e804f8 | out: hFindFile=0x3e804f8) returned 1 [0158.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0158.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 [0158.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 Thread: id = 2702 os_tid = 0x1bb4 [0157.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29cd0 [0157.614] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0157.614] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0157.614] wcscat (in: _Dest=0x3f29cd0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*" [0157.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0157.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ab8 [0157.614] wcscmp (_String1=".", _String2=".") returned 0 [0157.614] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.615] wcscmp (_String1="..", _String2=".") returned 1 [0157.615] wcscmp (_String1="..", _String2="..") returned 0 [0157.615] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0157.615] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0157.615] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0157.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c28c8 [0157.615] wcscpy (in: _Dest=0x69c28c8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0157.615] wcscat (in: _Dest=0x69c28c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0157.615] wcscat (in: _Dest=0x69c28c8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" [0158.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c28c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0158.412] FindNextFileW (in: hFindFile=0x3e80ab8, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.412] FindClose (in: hFindFile=0x3e80ab8 | out: hFindFile=0x3e80ab8) returned 1 [0158.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0158.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 [0158.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 2703 os_tid = 0x1bb8 [0157.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29410 [0157.618] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0157.618] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0157.618] wcscat (in: _Dest=0x3f29410, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*" [0157.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0157.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80578 [0157.618] wcscmp (_String1=".", _String2=".") returned 0 [0157.618] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.618] wcscmp (_String1="..", _String2=".") returned 1 [0157.618] wcscmp (_String1="..", _String2="..") returned 0 [0157.618] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0157.618] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0157.618] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0157.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3838 [0157.618] wcscpy (in: _Dest=0x69c3838, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0157.618] wcscat (in: _Dest=0x69c3838, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0157.618] wcscat (in: _Dest=0x69c3838, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" [0158.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0158.426] FindNextFileW (in: hFindFile=0x3e80578, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.427] FindClose (in: hFindFile=0x3e80578 | out: hFindFile=0x3e80578) returned 1 [0158.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0158.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 [0158.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 2704 os_tid = 0x1bbc [0157.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat")) returned 0x20 [0162.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0162.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.880] GetLastError () returned 0x5 [0162.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0162.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 2705 os_tid = 0x1bc0 [0157.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs")) returned 0x20 [0162.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0162.878] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.878] GetLastError () returned 0x5 [0162.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0162.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08eb0) returned 1 Thread: id = 2706 os_tid = 0x1bc4 [0157.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht")) returned 0x20 [0162.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0162.394] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.394] GetLastError () returned 0x5 [0162.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0162.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e093b0) returned 1 Thread: id = 2707 os_tid = 0x1bc8 [0157.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze")) returned 0x20 [0163.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0163.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.072] GetLastError () returned 0x5 [0163.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0163.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09430) returned 1 Thread: id = 2708 os_tid = 0x1bcc [0157.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan")) returned 0x20 [0162.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0162.881] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.882] GetLastError () returned 0x5 [0162.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0162.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e094b0) returned 1 Thread: id = 2709 os_tid = 0x1bd0 [0157.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu")) returned 0x20 [0163.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0163.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.074] GetLastError () returned 0x5 [0163.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0163.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09c30) returned 1 Thread: id = 2710 os_tid = 0x1bd4 [0157.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp")) returned 0x20 [0163.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0163.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.076] GetLastError () returned 0x5 [0163.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0163.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08db0) returned 1 Thread: id = 2711 os_tid = 0x1bd8 [0157.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq")) returned 0x20 [0163.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0163.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.064] GetLastError () returned 0x5 [0163.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0163.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08f30) returned 1 Thread: id = 2712 os_tid = 0x1bdc [0157.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra")) returned 0x20 [0163.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0163.078] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.078] GetLastError () returned 0x5 [0163.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0163.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09bb0) returned 1 Thread: id = 2713 os_tid = 0x1be0 [0157.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv")) returned 0x20 [0163.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0163.080] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.080] GetLastError () returned 0x5 [0163.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0163.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674be38) returned 1 Thread: id = 2714 os_tid = 0x1be4 [0157.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun")) returned 0x20 [0163.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0163.082] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.082] GetLastError () returned 0x5 [0163.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0163.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674beb8) returned 1 Thread: id = 2715 os_tid = 0x1be8 [0157.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita")) returned 0x20 [0163.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0163.083] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.084] GetLastError () returned 0x5 [0163.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0163.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bf38) returned 1 Thread: id = 2716 os_tid = 0x1bec [0157.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn")) returned 0x20 [0163.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0163.085] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.085] GetLastError () returned 0x5 [0163.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0163.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bfb8) returned 1 Thread: id = 2717 os_tid = 0x1bf0 [0157.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor")) returned 0x20 [0163.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0163.087] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.087] GetLastError () returned 0x5 [0163.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0163.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c038) returned 1 Thread: id = 2718 os_tid = 0x1bf4 [0157.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld")) returned 0x20 [0163.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0163.065] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.065] GetLastError () returned 0x5 [0163.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0163.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c0b8) returned 1 Thread: id = 2719 os_tid = 0x1bf8 [0157.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor")) returned 0x20 [0163.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0163.089] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.089] GetLastError () returned 0x5 [0163.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0163.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c138) returned 1 Thread: id = 2720 os_tid = 0x1bfc [0157.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol")) returned 0x20 [0163.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0163.090] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.091] GetLastError () returned 0x5 [0163.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0163.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c1b8) returned 1 Thread: id = 2721 os_tid = 0x1c00 [0157.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb")) returned 0x20 [0163.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0163.092] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.093] GetLastError () returned 0x5 [0163.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0163.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c238) returned 1 Thread: id = 2722 os_tid = 0x1c04 [0157.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum")) returned 0x20 [0163.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0163.094] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.094] GetLastError () returned 0x5 [0163.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0163.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c2b8) returned 1 Thread: id = 2723 os_tid = 0x1c08 [0157.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus")) returned 0x20 [0163.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0163.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.096] GetLastError () returned 0x5 [0163.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0163.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c338) returned 1 Thread: id = 2724 os_tid = 0x1c0c [0157.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky")) returned 0x20 [0163.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0163.098] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.098] GetLastError () returned 0x5 [0163.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0163.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c3b8) returned 1 Thread: id = 2725 os_tid = 0x1c10 [0157.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv")) returned 0x20 [0163.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0163.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.067] GetLastError () returned 0x5 [0163.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0163.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c438) returned 1 Thread: id = 2726 os_tid = 0x1c14 [0157.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo")) returned 0x20 [0163.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0163.068] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.069] GetLastError () returned 0x5 [0163.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0163.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c4b8) returned 1 Thread: id = 2727 os_tid = 0x1c18 [0157.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve")) returned 0x20 [0160.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0160.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.449] GetLastError () returned 0x5 [0163.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0163.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c538) returned 1 Thread: id = 2728 os_tid = 0x1c1c [0157.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur")) returned 0x20 [0163.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0163.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.070] GetLastError () returned 0x5 [0163.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0163.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c5b8) returned 1 Thread: id = 2729 os_tid = 0x1c20 [0157.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr")) returned 0x20 [0162.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0162.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.500] GetLastError () returned 0x5 [0162.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0162.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c638) returned 1 Thread: id = 2730 os_tid = 0x1c24 [0157.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf")) returned 0x20 [0161.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0161.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.583] GetLastError () returned 0x5 [0161.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0161.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 2731 os_tid = 0x1c28 [0157.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf")) returned 0x20 [0161.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0161.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.585] GetLastError () returned 0x5 [0161.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0161.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 Thread: id = 2732 os_tid = 0x1c2c [0157.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf")) returned 0x20 [0160.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0160.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.103] GetLastError () returned 0x5 [0160.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0160.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 2733 os_tid = 0x1c30 [0157.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf")) returned 0x20 [0158.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0159.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.883] GetLastError () returned 0x5 [0160.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0160.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 Thread: id = 2734 os_tid = 0x1c34 [0157.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf")) returned 0x20 [0160.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0160.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.882] GetLastError () returned 0x5 [0160.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0160.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 2735 os_tid = 0x1c38 [0157.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf")) returned 0x20 [0161.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0161.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.590] GetLastError () returned 0x5 [0161.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0161.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 Thread: id = 2736 os_tid = 0x1c3c [0157.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf")) returned 0x20 [0161.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0161.588] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.589] GetLastError () returned 0x5 [0161.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0161.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1548) returned 1 Thread: id = 2737 os_tid = 0x1c40 [0157.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf")) returned 0x20 [0161.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0161.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.587] GetLastError () returned 0x5 [0161.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0161.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 2738 os_tid = 0x1c44 [0157.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e0a8 [0157.826] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0157.827] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0157.827] wcscat (in: _Dest=0x674e0a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0157.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0157.827] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0157.827] wcscmp (_String1=".", _String2=".") returned 0 [0157.827] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.827] wcscmp (_String1="..", _String2=".") returned 1 [0157.827] wcscmp (_String1="..", _String2="..") returned 0 [0157.827] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0157.827] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0157.827] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0157.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad560 [0157.827] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0157.828] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0157.828] wcscat (in: _Dest=0x3dad560, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0158.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0158.466] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0158.466] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0158.466] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0158.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0158.466] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0158.466] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0158.466] wcscat (in: _Dest=0x3dadb30, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0158.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0158.468] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0158.468] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0158.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0158.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 [0158.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 2739 os_tid = 0x1c48 [0157.828] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0160.071] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0160.071] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.072] GetLastError () returned 0x5 [0160.072] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0160.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f277a0) returned 1 Thread: id = 2740 os_tid = 0x1c4c [0157.828] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0160.073] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0160.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.073] GetLastError () returned 0x5 [0160.073] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0160.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 2741 os_tid = 0x1c50 [0157.829] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0160.075] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0160.075] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.075] GetLastError () returned 0x5 [0160.075] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0160.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 2742 os_tid = 0x1c54 [0157.829] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0160.076] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0160.077] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.077] GetLastError () returned 0x5 [0160.077] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0160.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 2743 os_tid = 0x1c58 [0157.829] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0160.078] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0160.078] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.079] GetLastError () returned 0x5 [0160.079] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0160.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 2744 os_tid = 0x1c5c [0157.830] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0160.080] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0160.080] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.080] GetLastError () returned 0x5 [0160.080] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0160.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 2745 os_tid = 0x1c60 [0157.830] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0160.082] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0160.082] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.082] GetLastError () returned 0x5 [0160.082] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0160.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 2746 os_tid = 0x1c64 [0157.830] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0160.084] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0160.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.084] GetLastError () returned 0x5 [0160.084] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0160.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 2747 os_tid = 0x1c68 [0157.831] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0160.085] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0160.085] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.086] GetLastError () returned 0x5 [0160.086] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0160.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 2748 os_tid = 0x1c6c [0157.837] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0161.001] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0161.030] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.038] GetLastError () returned 0x5 [0161.038] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0161.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 2749 os_tid = 0x1c70 [0157.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak")) returned 0x20 [0157.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0157.838] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.838] GetLastError () returned 0x5 [0157.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0157.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 Thread: id = 2750 os_tid = 0x1c74 [0157.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak")) returned 0x20 [0157.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0157.840] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.840] GetLastError () returned 0x5 [0157.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0157.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a90) returned 1 Thread: id = 2751 os_tid = 0x1c78 [0157.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak")) returned 0x20 [0157.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0157.843] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.843] GetLastError () returned 0x5 [0157.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0157.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b28) returned 1 Thread: id = 2752 os_tid = 0x1c7c [0157.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak")) returned 0x20 [0158.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0158.943] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.943] GetLastError () returned 0x5 [0158.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0158.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818bc0) returned 1 Thread: id = 2753 os_tid = 0x1c80 [0157.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak")) returned 0x20 [0158.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0158.945] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.945] GetLastError () returned 0x5 [0158.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0158.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c58) returned 1 Thread: id = 2754 os_tid = 0x1c84 [0157.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak")) returned 0x20 [0158.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0158.947] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.947] GetLastError () returned 0x5 [0158.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0158.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818cf0) returned 1 Thread: id = 2755 os_tid = 0x1c88 [0157.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak")) returned 0x20 [0158.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0158.948] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.949] GetLastError () returned 0x5 [0158.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0158.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818d88) returned 1 Thread: id = 2756 os_tid = 0x1c8c [0157.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak")) returned 0x20 [0158.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0158.950] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.950] GetLastError () returned 0x5 [0158.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0158.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e20) returned 1 Thread: id = 2757 os_tid = 0x1c90 [0157.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak")) returned 0x20 [0158.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0158.952] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.952] GetLastError () returned 0x5 [0158.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0158.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818eb8) returned 1 Thread: id = 2758 os_tid = 0x1c94 [0157.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak")) returned 0x20 [0158.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0158.954] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.954] GetLastError () returned 0x5 [0158.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0158.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 2759 os_tid = 0x1c98 [0157.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak")) returned 0x20 [0158.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0158.955] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.956] GetLastError () returned 0x5 [0158.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0158.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 2760 os_tid = 0x1c9c [0157.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak")) returned 0x20 [0158.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0158.958] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.958] GetLastError () returned 0x5 [0158.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0158.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 2761 os_tid = 0x1ca0 [0157.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak")) returned 0x20 [0158.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0158.959] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.960] GetLastError () returned 0x5 [0158.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0158.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f50) returned 1 Thread: id = 2762 os_tid = 0x1ca4 [0157.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak")) returned 0x20 [0158.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0158.961] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.961] GetLastError () returned 0x5 [0158.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0158.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818fe8) returned 1 Thread: id = 2763 os_tid = 0x1ca8 [0157.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak")) returned 0x20 [0158.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0158.963] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.963] GetLastError () returned 0x5 [0158.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0158.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819080) returned 1 Thread: id = 2764 os_tid = 0x1cac [0157.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak")) returned 0x20 [0158.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0158.965] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.965] GetLastError () returned 0x5 [0158.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0158.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819118) returned 1 Thread: id = 2765 os_tid = 0x1cb0 [0157.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak")) returned 0x20 [0158.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0158.966] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.967] GetLastError () returned 0x5 [0158.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0158.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 2766 os_tid = 0x1cb4 [0157.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak")) returned 0x20 [0158.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0158.968] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.968] GetLastError () returned 0x5 [0158.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0158.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68191b0) returned 1 Thread: id = 2767 os_tid = 0x1cb8 [0157.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak")) returned 0x20 [0158.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0158.970] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.970] GetLastError () returned 0x5 [0158.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0158.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819248) returned 1 Thread: id = 2768 os_tid = 0x1cbc [0157.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak")) returned 0x20 [0158.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0158.971] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.972] GetLastError () returned 0x5 [0158.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0158.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68192e0) returned 1 Thread: id = 2769 os_tid = 0x1cc0 [0157.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak")) returned 0x20 [0158.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0158.973] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.973] GetLastError () returned 0x5 [0158.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0158.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819378) returned 1 Thread: id = 2770 os_tid = 0x1cc4 [0157.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak")) returned 0x20 [0158.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0158.975] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.975] GetLastError () returned 0x5 [0158.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0158.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819410) returned 1 Thread: id = 2771 os_tid = 0x1cc8 [0157.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak")) returned 0x20 [0158.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0158.977] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.977] GetLastError () returned 0x5 [0158.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0158.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a8) returned 1 Thread: id = 2772 os_tid = 0x1ccc [0157.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak")) returned 0x20 [0158.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0158.205] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.205] GetLastError () returned 0x5 [0158.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0158.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819540) returned 1 Thread: id = 2773 os_tid = 0x1cd0 [0157.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak")) returned 0x20 [0158.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0158.207] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.207] GetLastError () returned 0x5 [0158.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0158.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68195d8) returned 1 Thread: id = 2774 os_tid = 0x1cd4 [0158.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak")) returned 0x20 [0158.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0158.210] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.210] GetLastError () returned 0x5 [0158.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0158.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819670) returned 1 Thread: id = 2775 os_tid = 0x1cd8 [0158.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt")) returned 0x20 [0161.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0161.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.611] GetLastError () returned 0x5 [0161.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0161.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3248) returned 1 Thread: id = 2776 os_tid = 0x1cdc [0158.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt")) returned 0x20 [0161.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0161.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.613] GetLastError () returned 0x5 [0161.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0161.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b28) returned 1 Thread: id = 2777 os_tid = 0x1ce0 [0158.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 0x20 [0158.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.213] GetLastError () returned 0x5 [0158.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 2778 os_tid = 0x1ce4 [0158.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 0x20 [0158.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.215] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.215] GetLastError () returned 0x5 [0158.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1320) returned 1 Thread: id = 2779 os_tid = 0x1ce8 [0158.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 0x20 [0158.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.221] GetLastError () returned 0x5 [0158.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 2780 os_tid = 0x1cec [0158.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 0x20 [0158.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.223] GetLastError () returned 0x5 [0158.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 2781 os_tid = 0x1cf0 [0158.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 0x20 [0158.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.227] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.227] GetLastError () returned 0x5 [0158.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1268) returned 1 Thread: id = 2782 os_tid = 0x1cf4 [0158.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 0x20 [0158.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.229] GetLastError () returned 0x5 [0158.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 Thread: id = 2783 os_tid = 0x1cf8 [0158.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 0x20 [0158.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.231] GetLastError () returned 0x5 [0158.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 2784 os_tid = 0x1cfc [0158.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 0x20 [0158.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.234] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.234] GetLastError () returned 0x5 [0158.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee13d8) returned 1 Thread: id = 2785 os_tid = 0x1d00 [0158.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 0x20 [0158.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.236] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.236] GetLastError () returned 0x5 [0158.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 Thread: id = 2786 os_tid = 0x1d04 [0158.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 0x20 [0160.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.106] GetLastError () returned 0x5 [0160.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 2787 os_tid = 0x1d08 [0158.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 0x20 [0160.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0160.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.748] GetLastError () returned 0x5 [0160.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0160.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 2788 os_tid = 0x1d0c [0158.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 0x20 [0160.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.750] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.750] GetLastError () returned 0x5 [0160.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1de8) returned 1 Thread: id = 2789 os_tid = 0x1d10 [0158.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 0x20 [0160.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.746] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.747] GetLastError () returned 0x5 [0160.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 Thread: id = 2790 os_tid = 0x1d14 [0158.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 0x20 [0158.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0158.240] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.241] GetLastError () returned 0x5 [0158.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0158.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2c58) returned 1 Thread: id = 2791 os_tid = 0x1d18 [0158.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 0x20 [0158.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0158.243] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.243] GetLastError () returned 0x5 [0158.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0158.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a90) returned 1 Thread: id = 2792 os_tid = 0x1d1c [0158.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft")) returned 0x20 [0158.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0158.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.259] GetLastError () returned 0x5 [0158.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0158.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d928) returned 1 Thread: id = 2793 os_tid = 0x1d20 [0158.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft")) returned 0x20 [0158.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0158.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.280] GetLastError () returned 0x5 [0158.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0158.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 2794 os_tid = 0x1d24 [0158.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft")) returned 0x20 [0160.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0160.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.548] GetLastError () returned 0x5 [0162.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0162.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 2795 os_tid = 0x1d28 [0158.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft")) returned 0x20 [0162.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0162.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.358] GetLastError () returned 0x5 [0162.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0162.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aed8) returned 1 Thread: id = 2796 os_tid = 0x1d2c [0158.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft")) returned 0x20 [0162.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0162.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.884] GetLastError () returned 0x5 [0162.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0162.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 2797 os_tid = 0x1d30 [0158.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft")) returned 0x20 [0162.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0162.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.886] GetLastError () returned 0x5 [0162.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0162.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 2798 os_tid = 0x1d34 [0158.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft")) returned 0x20 [0162.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0162.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.401] GetLastError () returned 0x5 [0162.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0162.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1ea0) returned 1 Thread: id = 2799 os_tid = 0x1d38 [0158.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft")) returned 0x20 [0162.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0162.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.403] GetLastError () returned 0x5 [0162.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0162.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d0) returned 1 Thread: id = 2800 os_tid = 0x1d3c [0158.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft")) returned 0x20 [0162.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0162.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.887] GetLastError () returned 0x5 [0162.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0162.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 2801 os_tid = 0x1d40 [0158.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access")) returned 0x20 [0158.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0158.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.306] GetLastError () returned 0x5 [0158.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0158.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b6b8) returned 1 Thread: id = 2802 os_tid = 0x1d44 [0158.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template")) returned 0x20 [0158.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0158.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.325] GetLastError () returned 0x5 [0158.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0158.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197a0) returned 1 Thread: id = 2803 os_tid = 0x1d48 [0158.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties")) returned 0x20 [0158.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0158.338] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.345] GetLastError () returned 0x5 [0158.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0158.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 2804 os_tid = 0x1d4c [0158.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template")) returned 0x20 [0158.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0158.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.365] GetLastError () returned 0x5 [0158.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0158.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 Thread: id = 2805 os_tid = 0x1d50 [0158.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 0x20 [0158.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0158.371] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.371] GetLastError () returned 0x5 [0158.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0158.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2078) returned 1 Thread: id = 2806 os_tid = 0x1d54 [0158.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 0x20 [0158.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0158.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.373] GetLastError () returned 0x5 [0158.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0158.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819838) returned 1 Thread: id = 2807 os_tid = 0x1d58 [0158.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e6b0 [0158.374] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0158.374] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0158.374] wcscat (in: _Dest=0x3e0e6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*" [0158.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0158.374] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0163.572] wcscmp (_String1=".", _String2=".") returned 0 [0163.572] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.572] wcscmp (_String1="..", _String2=".") returned 1 [0163.572] wcscmp (_String1="..", _String2="..") returned 0 [0163.572] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0163.572] wcscmp (_String1="support", _String2=".") returned 1 [0163.572] wcscmp (_String1="support", _String2="..") returned 1 [0163.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e8b8 [0163.572] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0163.572] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0163.572] wcscat (in: _Dest=0x697e8b8, _Source="support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3ac0 [0172.189] wcscpy (in: _Dest=0x3ea3ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.189] wcscat (in: _Dest=0x3ea3ac0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0172.189] wcscat (in: _Dest=0x3ea3ac0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*" [0172.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0172.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0172.189] wcscmp (_String1=".", _String2=".") returned 0 [0172.189] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.189] wcscmp (_String1="..", _String2=".") returned 1 [0172.189] wcscmp (_String1="..", _String2="..") returned 0 [0172.189] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0172.189] wcscmp (_String1="flashplayer", _String2=".") returned 1 [0172.190] wcscmp (_String1="flashplayer", _String2="..") returned 1 [0172.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0172.190] wcscpy (in: _Dest=0x333528, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.190] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0172.190] wcscat (in: _Dest=0x333528, _Source="flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0172.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f2c8 [0172.190] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0172.190] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0172.190] wcscat (in: _Dest=0x682f2c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*" [0172.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0172.190] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0172.278] wcscmp (_String1=".", _String2=".") returned 0 [0172.278] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.278] wcscmp (_String1="..", _String2=".") returned 1 [0172.279] wcscmp (_String1="..", _String2="..") returned 0 [0172.279] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0172.279] wcscmp (_String1="sys", _String2=".") returned 1 [0172.279] wcscmp (_String1="sys", _String2="..") returned 1 [0172.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682ed50 [0172.279] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0172.279] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0172.279] wcscat (in: _Dest=0x682ed50, _Source="sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0172.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036210 [0172.279] wcscpy (in: _Dest=0x3036210, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0172.279] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0172.279] wcscat (in: _Dest=0x3036210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*" [0172.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0172.279] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0172.536] wcscmp (_String1=".", _String2=".") returned 0 [0172.536] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.536] wcscmp (_String1="..", _String2=".") returned 1 [0172.536] wcscmp (_String1="..", _String2="..") returned 0 [0172.536] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0172.536] wcscmp (_String1="settings.sol", _String2=".") returned 1 [0172.536] wcscmp (_String1="settings.sol", _String2="..") returned 1 [0172.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57230 [0172.536] wcscpy (in: _Dest=0x3d57230, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0172.536] wcscat (in: _Dest=0x3d57230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0172.536] wcscat (in: _Dest=0x3d57230, _Source="settings.sol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0172.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0172.946] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0172.946] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0172.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0172.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 [0172.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 [0172.946] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0172.947] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 [0172.947] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0172.947] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3ac0) returned 1 [0172.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 [0172.947] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0172.947] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0172.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0172.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 [0172.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69581a8) returned 1 Thread: id = 2808 os_tid = 0x1d5c [0158.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf")) returned 0x20 [0160.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0160.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.444] GetLastError () returned 0x5 [0162.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0162.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d586b8) returned 1 Thread: id = 2809 os_tid = 0x1d60 [0158.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif")) returned 0x20 [0160.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0160.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.595] GetLastError () returned 0x5 [0161.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0161.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 Thread: id = 2810 os_tid = 0x1d64 [0158.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf")) returned 0x20 [0161.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0161.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.932] GetLastError () returned 0x5 [0161.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0161.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 2811 os_tid = 0x1d68 [0158.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf")) returned 0x20 [0159.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0159.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.024] GetLastError () returned 0x5 [0159.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0159.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 2812 os_tid = 0x1d6c [0158.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf")) returned 0x20 [0159.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0159.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.026] GetLastError () returned 0x5 [0159.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0159.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 2813 os_tid = 0x1d70 [0158.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat")) returned 0x20 [0158.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0158.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.383] GetLastError () returned 0x5 [0158.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0158.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 2814 os_tid = 0x1d74 [0158.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs")) returned 0x20 [0162.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0162.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.757] GetLastError () returned 0x5 [0162.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0162.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 2815 os_tid = 0x1d78 [0158.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht")) returned 0x20 [0162.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0162.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.977] GetLastError () returned 0x5 [0162.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0162.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 2816 os_tid = 0x1d7c [0158.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze")) returned 0x20 [0162.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0162.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.974] GetLastError () returned 0x5 [0162.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0162.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 2817 os_tid = 0x1d80 [0158.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan")) returned 0x20 [0163.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0163.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.007] GetLastError () returned 0x5 [0163.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0163.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 2818 os_tid = 0x1d84 [0158.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu")) returned 0x20 [0162.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0162.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.982] GetLastError () returned 0x5 [0162.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0162.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 2819 os_tid = 0x1d88 [0158.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp")) returned 0x20 [0163.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0163.005] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.005] GetLastError () returned 0x5 [0163.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0163.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 2820 os_tid = 0x1d8c [0158.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq")) returned 0x20 [0163.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0163.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.003] GetLastError () returned 0x5 [0163.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0163.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 2821 os_tid = 0x1d90 [0158.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra")) returned 0x20 [0163.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0163.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.002] GetLastError () returned 0x5 [0163.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0163.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 2822 os_tid = 0x1d94 [0158.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv")) returned 0x20 [0163.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0163.000] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.000] GetLastError () returned 0x5 [0163.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0163.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 2823 os_tid = 0x1d98 [0158.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun")) returned 0x20 [0162.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0162.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.998] GetLastError () returned 0x5 [0162.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0162.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 2824 os_tid = 0x1d9c [0158.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita")) returned 0x20 [0162.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0162.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.980] GetLastError () returned 0x5 [0162.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0162.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 2825 os_tid = 0x1da0 [0158.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn")) returned 0x20 [0162.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0162.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.979] GetLastError () returned 0x5 [0162.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0162.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 2826 os_tid = 0x1da4 [0158.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor")) returned 0x20 [0162.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0162.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.996] GetLastError () returned 0x5 [0162.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0162.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 2827 os_tid = 0x1da8 [0158.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld")) returned 0x20 [0162.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0162.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.983] GetLastError () returned 0x5 [0162.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0162.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 2828 os_tid = 0x1dac [0158.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor")) returned 0x20 [0163.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0163.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.009] GetLastError () returned 0x5 [0163.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0163.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 2829 os_tid = 0x1db0 [0158.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ac28 [0158.393] wcscpy (in: _Dest=0x3f1ac28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0158.393] wcscat (in: _Dest=0x3f1ac28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0158.393] wcscat (in: _Dest=0x3f1ac28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*" [0158.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0158.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0162.554] wcscmp (_String1=".", _String2=".") returned 0 [0162.554] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.554] wcscmp (_String1="..", _String2=".") returned 1 [0162.554] wcscmp (_String1="..", _String2="..") returned 0 [0162.554] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b31f300, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b31f300, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0162.554] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2=".") returned 1 [0162.554] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2="..") returned 1 [0162.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35aed8 [0162.554] wcscpy (in: _Dest=0x35aed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0162.554] wcscat (in: _Dest=0x35aed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0162.554] wcscat (in: _Dest=0x35aed8, _Source="SendToOneNote-PipelineConfig.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" [0163.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35aed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0163.671] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4b5100, ftCreationTime.dwHighDateTime=0x1c9d897, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c4b5100, ftLastWriteTime.dwHighDateTime=0x1c9d897, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0163.671] wcscmp (_String1="SendToOneNote.gpd", _String2=".") returned 1 [0163.671] wcscmp (_String1="SendToOneNote.gpd", _String2="..") returned 1 [0163.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6818538 [0163.671] wcscpy (in: _Dest=0x6818538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0163.671] wcscat (in: _Dest=0x6818538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0163.671] wcscat (in: _Dest=0x6818538, _Source="SendToOneNote.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" [0163.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0163.672] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12acbb00, ftCreationTime.dwHighDateTime=0x1c8e2bf, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12acbb00, ftLastWriteTime.dwHighDateTime=0x1c8e2bf, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0163.672] wcscmp (_String1="SendToOneNote.ini", _String2=".") returned 1 [0163.672] wcscmp (_String1="SendToOneNote.ini", _String2="..") returned 1 [0163.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6818cf0 [0163.672] wcscpy (in: _Dest=0x6818cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0163.672] wcscat (in: _Dest=0x6818cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0163.672] wcscat (in: _Dest=0x6818cf0, _Source="SendToOneNote.ini" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" [0163.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6818cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0163.673] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x16f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0163.673] wcscmp (_String1="SendToOneNOteFilter.dll", _String2=".") returned 1 [0163.673] wcscmp (_String1="SendToOneNOteFilter.dll", _String2="..") returned 1 [0163.673] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aecb200, ftCreationTime.dwHighDateTime=0x1c8ee63, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8aecb200, ftLastWriteTime.dwHighDateTime=0x1c8ee63, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0163.673] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2=".") returned 1 [0163.673] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2="..") returned 1 [0163.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfce8 [0163.674] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0163.674] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0163.674] wcscat (in: _Dest=0x69bfce8, _Source="SendtoOneNoteFilter.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" [0163.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0163.675] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf54b700, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x819f8370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf54b700, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~3.GPD")) returned 1 [0163.675] wcscmp (_String1="SendToOneNoteNames.gpd", _String2=".") returned 1 [0163.675] wcscmp (_String1="SendToOneNoteNames.gpd", _String2="..") returned 1 [0163.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0dc8 [0163.675] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0163.675] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0163.675] wcscat (in: _Dest=0x69c0dc8, _Source="SendToOneNoteNames.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" [0163.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0163.676] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 1 [0163.676] wcscmp (_String1="SendToOneNoteUI.dll", _String2=".") returned 1 [0163.677] wcscmp (_String1="SendToOneNoteUI.dll", _String2="..") returned 1 [0163.677] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 0 [0163.677] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0163.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0163.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0163.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 Thread: id = 2830 os_tid = 0x1db4 [0158.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml")) returned 0x20 [0162.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0162.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.222] GetLastError () returned 0x5 [0162.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0162.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e09b30) returned 1 Thread: id = 2831 os_tid = 0x1db8 [0158.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl")) returned 0x20 [0162.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0162.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.256] GetLastError () returned 0x5 [0162.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0162.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 2832 os_tid = 0x1dbc [0158.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm")) returned 0x20 [0162.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0162.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.258] GetLastError () returned 0x5 [0162.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0162.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e62f8) returned 1 Thread: id = 2833 os_tid = 0x1dc0 [0158.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs")) returned 0x20 [0162.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0162.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.260] GetLastError () returned 0x5 [0162.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0162.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5728) returned 1 Thread: id = 2834 os_tid = 0x1dc4 [0158.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat")) returned 0x20 [0162.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0162.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.204] GetLastError () returned 0x5 [0162.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0162.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 Thread: id = 2835 os_tid = 0x1dc8 [0159.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest")) returned 0x20 [0162.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0162.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.225] GetLastError () returned 0x5 [0162.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0162.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 2836 os_tid = 0x1dd0 [0159.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036d70 [0159.029] wcscpy (in: _Dest=0x3036d70, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0159.030] wcscat (in: _Dest=0x3036d70, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0159.030] wcscat (in: _Dest=0x3036d70, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*" [0159.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0159.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80938 [0160.089] wcscmp (_String1=".", _String2=".") returned 0 [0160.089] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.089] wcscmp (_String1="..", _String2=".") returned 1 [0160.089] wcscmp (_String1="..", _String2="..") returned 0 [0160.089] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26edca8f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x432ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0160.089] wcscmp (_String1="widevinecdm.dll", _String2=".") returned 1 [0160.089] wcscmp (_String1="widevinecdm.dll", _String2="..") returned 1 [0160.089] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26ef2a28, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0160.089] wcscmp (_String1="widevinecdm.dll.sig", _String2=".") returned 1 [0160.089] wcscmp (_String1="widevinecdm.dll.sig", _String2="..") returned 1 [0160.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea72d8 [0160.090] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0160.090] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0160.090] wcscat (in: _Dest=0x3ea72d8, _Source="widevinecdm.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" [0172.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig")) returned 0x20 [0172.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0172.540] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.544] GetLastError () returned 0x5 [0172.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0172.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 [0172.544] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd413b84, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x35b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0172.544] wcscmp (_String1="widevinecdmadapter.dll", _String2=".") returned 1 [0172.544] wcscmp (_String1="widevinecdmadapter.dll", _String2="..") returned 1 [0172.544] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0172.544] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2=".") returned 1 [0172.544] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2="..") returned 1 [0172.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15a70 [0172.544] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0172.544] wcscat (in: _Dest=0x3e15a70, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0172.544] wcscat (in: _Dest=0x3e15a70, _Source="widevinecdmadapter.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" [0172.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig")) returned 0x20 [0172.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0172.545] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.545] GetLastError () returned 0x5 [0172.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0172.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 [0172.545] FindNextFileW (in: hFindFile=0x3e80938, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0172.545] FindClose (in: hFindFile=0x3e80938 | out: hFindFile=0x3e80938) returned 1 [0172.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0172.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 [0172.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 Thread: id = 2837 os_tid = 0x1dd4 [0159.033] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0159.034] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.034] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.034] GetLastError () returned 0x5 [0159.034] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 2838 os_tid = 0x1dd8 [0159.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg")) returned 0x20 [0159.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.036] GetLastError () returned 0x5 [0159.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2eb8) returned 1 Thread: id = 2839 os_tid = 0x1ddc [0159.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg")) returned 0x20 [0159.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.038] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.039] GetLastError () returned 0x5 [0159.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c38d0) returned 1 Thread: id = 2840 os_tid = 0x1de0 [0159.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg")) returned 0x20 [0159.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.041] GetLastError () returned 0x5 [0159.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c28c8) returned 1 Thread: id = 2841 os_tid = 0x1de4 [0159.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg")) returned 0x20 [0159.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.043] GetLastError () returned 0x5 [0159.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0159.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3838) returned 1 Thread: id = 2842 os_tid = 0x1de8 [0159.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 0x20 [0159.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0159.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.061] GetLastError () returned 0x5 [0159.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0159.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 Thread: id = 2843 os_tid = 0x1dec [0159.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 0x20 [0160.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0160.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.963] GetLastError () returned 0x5 [0160.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0160.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 2844 os_tid = 0x1df0 [0159.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 0x20 [0160.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0160.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.965] GetLastError () returned 0x5 [0160.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0160.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d928) returned 1 Thread: id = 2845 os_tid = 0x1df4 [0159.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 0x20 [0160.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0160.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.966] GetLastError () returned 0x5 [0160.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0160.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 2846 os_tid = 0x1df8 [0159.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 0x20 [0160.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0160.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.970] GetLastError () returned 0x5 [0160.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0160.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 2847 os_tid = 0x1dfc [0159.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 0x20 [0160.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0160.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.961] GetLastError () returned 0x5 [0160.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0160.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 2848 os_tid = 0x1e00 [0159.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 0x20 [0160.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0160.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.968] GetLastError () returned 0x5 [0160.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0160.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 2849 os_tid = 0x1e04 [0159.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 0x20 [0159.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.090] GetLastError () returned 0x5 [0159.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1548) returned 1 Thread: id = 2850 os_tid = 0x1e08 [0159.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 0x20 [0160.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.925] GetLastError () returned 0x5 [0160.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 2851 os_tid = 0x1e0c [0159.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 0x20 [0160.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.928] GetLastError () returned 0x5 [0160.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2852 os_tid = 0x1e10 [0159.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 0x20 [0160.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.141] GetLastError () returned 0x5 [0160.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 2853 os_tid = 0x1e14 [0159.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 0x20 [0160.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.923] GetLastError () returned 0x5 [0160.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 2854 os_tid = 0x1e18 [0159.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 0x20 [0160.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.927] GetLastError () returned 0x5 [0160.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 Thread: id = 2855 os_tid = 0x1e1c [0159.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 0x20 [0160.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.941] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.941] GetLastError () returned 0x5 [0160.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1828) returned 1 Thread: id = 2856 os_tid = 0x1e20 [0159.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 0x20 [0160.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.944] GetLastError () returned 0x5 [0160.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0160.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 2857 os_tid = 0x1e24 [0159.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 0x20 [0160.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.946] GetLastError () returned 0x5 [0160.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0160.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 2858 os_tid = 0x1e28 [0159.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 0x20 [0160.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.162] GetLastError () returned 0x5 [0160.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 2859 os_tid = 0x1e2c [0159.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 0x20 [0160.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.939] GetLastError () returned 0x5 [0160.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0160.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 2860 os_tid = 0x1e30 [0159.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 0x20 [0160.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.942] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.943] GetLastError () returned 0x5 [0160.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 Thread: id = 2861 os_tid = 0x1e34 [0159.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 0x20 [0159.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.137] GetLastError () returned 0x5 [0159.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1c78) returned 1 Thread: id = 2862 os_tid = 0x1e38 [0159.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 0x20 [0159.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.157] GetLastError () returned 0x5 [0159.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0159.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 2863 os_tid = 0x1e3c [0159.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 0x20 [0159.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.170] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.177] GetLastError () returned 0x5 [0159.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0159.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 2864 os_tid = 0x1e40 [0159.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 0x20 [0159.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.198] GetLastError () returned 0x5 [0159.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2865 os_tid = 0x1e44 [0159.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 0x20 [0159.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.211] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.218] GetLastError () returned 0x5 [0159.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0159.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 2866 os_tid = 0x1e48 [0159.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 0x20 [0159.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.230] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.237] GetLastError () returned 0x5 [0159.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 2867 os_tid = 0x1e4c [0159.243] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0159.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0159.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.244] GetLastError () returned 0x5 [0159.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0159.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 2868 os_tid = 0x1e50 [0159.246] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0159.247] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0159.247] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.247] GetLastError () returned 0x5 [0159.247] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0159.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 2869 os_tid = 0x1e54 [0159.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 0x20 [0159.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.249] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.249] GetLastError () returned 0x5 [0159.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 2870 os_tid = 0x1e58 [0159.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 0x20 [0159.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.252] GetLastError () returned 0x5 [0159.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0159.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 2871 os_tid = 0x1e5c [0159.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 0x20 [0159.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.254] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.254] GetLastError () returned 0x5 [0159.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 2872 os_tid = 0x1e60 [0159.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 0x20 [0159.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.257] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.257] GetLastError () returned 0x5 [0159.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0328) returned 1 Thread: id = 2873 os_tid = 0x1e64 [0159.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 0x20 [0159.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.259] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.259] GetLastError () returned 0x5 [0159.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0159.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 2874 os_tid = 0x1e68 [0159.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 0x20 [0159.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.261] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.262] GetLastError () returned 0x5 [0159.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0159.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2875 os_tid = 0x1e6c [0159.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 0x20 [0159.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.264] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.264] GetLastError () returned 0x5 [0159.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0159.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0260) returned 1 Thread: id = 2876 os_tid = 0x1e70 [0159.265] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0159.269] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0159.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.280] GetLastError () returned 0x5 [0159.280] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0159.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 Thread: id = 2877 os_tid = 0x1e74 [0159.286] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0159.290] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0159.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.301] GetLastError () returned 0x5 [0159.301] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0159.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 2878 os_tid = 0x1e78 [0159.307] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0159.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0159.315] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.322] GetLastError () returned 0x5 [0159.322] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0159.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 2879 os_tid = 0x1e7c [0159.328] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0159.331] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0159.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.341] GetLastError () returned 0x5 [0159.341] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0159.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 2880 os_tid = 0x1e80 [0159.347] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0159.351] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0159.355] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.362] GetLastError () returned 0x5 [0159.362] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0159.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dd90) returned 1 Thread: id = 2881 os_tid = 0x1e84 [0159.367] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0159.371] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0159.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.382] GetLastError () returned 0x5 [0159.382] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0159.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 2882 os_tid = 0x1e88 [0159.388] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0159.391] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0159.395] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.402] GetLastError () returned 0x5 [0159.402] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0159.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 2883 os_tid = 0x1e8c [0159.410] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0159.410] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.411] GetLastError () returned 0x5 [0159.411] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0159.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 2884 os_tid = 0x1e90 [0159.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 0x20 [0159.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.413] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.413] GetLastError () returned 0x5 [0159.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0159.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2fe8) returned 1 Thread: id = 2885 os_tid = 0x1e94 [0159.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 0x20 [0159.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.416] GetLastError () returned 0x5 [0159.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0159.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819838) returned 1 Thread: id = 2886 os_tid = 0x1e98 [0159.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 0x20 [0159.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0159.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.418] GetLastError () returned 0x5 [0159.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0159.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dbc8) returned 1 Thread: id = 2887 os_tid = 0x1e9c [0159.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 0x20 [0159.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0159.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.421] GetLastError () returned 0x5 [0159.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0159.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 2888 os_tid = 0x1ea0 [0159.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 0x20 [0159.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0159.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.423] GetLastError () returned 0x5 [0159.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0159.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 2889 os_tid = 0x1ea4 [0159.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 0x20 [0161.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0161.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.063] GetLastError () returned 0x5 [0161.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0161.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 Thread: id = 2890 os_tid = 0x1ea8 [0159.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 0x20 [0161.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0161.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.541] GetLastError () returned 0x5 [0161.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0161.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 2891 os_tid = 0x1eac [0159.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 0x20 [0161.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0161.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.544] GetLastError () returned 0x5 [0161.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0161.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 2892 os_tid = 0x1eb0 [0159.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 0x20 [0161.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0161.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.549] GetLastError () returned 0x5 [0161.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0161.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 2893 os_tid = 0x1eb4 [0159.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 0x20 [0161.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0161.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.539] GetLastError () returned 0x5 [0161.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0161.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2894 os_tid = 0x1eb8 [0159.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 0x20 [0161.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0161.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.542] GetLastError () returned 0x5 [0161.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0161.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 Thread: id = 2895 os_tid = 0x1ebc [0159.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf")) returned 0x20 [0159.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0159.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.429] GetLastError () returned 0x5 [0159.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0159.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 2896 os_tid = 0x1ec0 [0159.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf")) returned 0x20 [0159.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0159.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.431] GetLastError () returned 0x5 [0159.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0159.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 2897 os_tid = 0x1ec4 [0159.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf")) returned 0x20 [0159.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0159.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.434] GetLastError () returned 0x5 [0159.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0159.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 2898 os_tid = 0x1ec8 [0159.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf")) returned 0x20 [0162.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0162.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.462] GetLastError () returned 0x5 [0162.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0162.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 2899 os_tid = 0x1ecc [0159.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf")) returned 0x20 [0162.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0162.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.368] GetLastError () returned 0x5 [0162.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0162.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 2900 os_tid = 0x1ed0 [0159.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf")) returned 0x20 [0162.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0162.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.370] GetLastError () returned 0x5 [0162.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0162.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 2901 os_tid = 0x1ed4 [0159.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf")) returned 0x20 [0162.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0162.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.446] GetLastError () returned 0x5 [0162.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0162.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 2902 os_tid = 0x1ed8 [0159.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif")) returned 0x20 [0162.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0162.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.447] GetLastError () returned 0x5 [0162.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0162.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27cf0) returned 1 Thread: id = 2903 os_tid = 0x1edc [0159.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg")) returned 0x20 [0162.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0162.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.449] GetLastError () returned 0x5 [0162.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0162.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27d78) returned 1 Thread: id = 2904 os_tid = 0x1ee0 [0159.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf")) returned 0x20 [0162.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0162.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.450] GetLastError () returned 0x5 [0162.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0162.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27e00) returned 1 Thread: id = 2905 os_tid = 0x1ee4 [0159.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf")) returned 0x20 [0162.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0162.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.452] GetLastError () returned 0x5 [0162.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0162.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a570) returned 1 Thread: id = 2906 os_tid = 0x1ee8 [0159.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf")) returned 0x20 [0162.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0162.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.453] GetLastError () returned 0x5 [0162.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0162.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099ad0) returned 1 Thread: id = 2907 os_tid = 0x1eec [0159.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf")) returned 0x20 [0162.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0162.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.455] GetLastError () returned 0x5 [0162.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0162.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 2908 os_tid = 0x1ef0 [0159.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf")) returned 0x20 [0162.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0162.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.456] GetLastError () returned 0x5 [0162.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0162.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099c68) returned 1 Thread: id = 2909 os_tid = 0x1ef4 [0159.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf")) returned 0x20 [0162.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0162.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.458] GetLastError () returned 0x5 [0162.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0162.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099e00) returned 1 Thread: id = 2910 os_tid = 0x1ef8 [0159.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf")) returned 0x20 [0162.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0162.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.459] GetLastError () returned 0x5 [0162.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0162.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 2911 os_tid = 0x1efc [0159.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf")) returned 0x20 [0162.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0162.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.460] GetLastError () returned 0x5 [0162.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0162.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 2912 os_tid = 0x1f00 [0159.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf")) returned 0x20 [0162.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0162.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.463] GetLastError () returned 0x5 [0162.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0162.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 2913 os_tid = 0x1f04 [0159.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf")) returned 0x20 [0162.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0162.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.465] GetLastError () returned 0x5 [0162.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0162.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 2914 os_tid = 0x1f08 [0159.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf")) returned 0x20 [0159.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0159.566] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.572] GetLastError () returned 0x5 [0159.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819968) returned 1 Thread: id = 2915 os_tid = 0x1f0c [0159.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 0x20 [0160.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0160.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.887] GetLastError () returned 0x5 [0160.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0160.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 2916 os_tid = 0x1f10 [0159.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 0x20 [0160.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0160.889] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.889] GetLastError () returned 0x5 [0160.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0160.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 2917 os_tid = 0x1f14 [0159.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 0x20 [0160.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0160.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.891] GetLastError () returned 0x5 [0160.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0160.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 Thread: id = 2918 os_tid = 0x1f18 [0159.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 0x20 [0160.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0160.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.893] GetLastError () returned 0x5 [0160.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0160.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 2919 os_tid = 0x1f1c [0159.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 0x20 [0160.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0160.894] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.894] GetLastError () returned 0x5 [0160.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0160.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 2920 os_tid = 0x1f20 [0159.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 0x20 [0160.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0160.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.896] GetLastError () returned 0x5 [0160.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0160.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 2921 os_tid = 0x1f24 [0159.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 0x20 [0160.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0160.898] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.898] GetLastError () returned 0x5 [0160.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0160.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 2922 os_tid = 0x1f28 [0159.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 0x20 [0160.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0160.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.899] GetLastError () returned 0x5 [0160.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0160.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 2923 os_tid = 0x1f2c [0159.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 0x20 [0160.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0160.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.901] GetLastError () returned 0x5 [0160.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0160.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e57f8) returned 1 Thread: id = 2924 os_tid = 0x1f30 [0159.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 0x20 [0160.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0160.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.902] GetLastError () returned 0x5 [0160.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0160.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 Thread: id = 2925 os_tid = 0x1f34 [0159.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 0x20 [0160.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0160.904] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.904] GetLastError () returned 0x5 [0160.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0160.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e58d0) returned 1 Thread: id = 2926 os_tid = 0x1f38 [0159.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 0x20 [0160.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0160.911] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.911] GetLastError () returned 0x5 [0160.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0160.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5b58) returned 1 Thread: id = 2927 os_tid = 0x1f3c [0159.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 0x20 [0160.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0160.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.913] GetLastError () returned 0x5 [0160.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0160.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5648) returned 1 Thread: id = 2928 os_tid = 0x1f40 [0159.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 0x20 [0160.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0160.914] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.914] GetLastError () returned 0x5 [0160.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0160.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6800) returned 1 Thread: id = 2929 os_tid = 0x1f44 [0159.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 0x20 [0160.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0160.916] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.916] GetLastError () returned 0x5 [0160.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0160.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 2930 os_tid = 0x1f48 [0159.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 0x20 [0160.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0160.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.918] GetLastError () returned 0x5 [0160.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0160.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 2931 os_tid = 0x1f4c [0159.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 0x20 [0160.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0160.919] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.920] GetLastError () returned 0x5 [0160.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0160.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 Thread: id = 2932 os_tid = 0x1f50 [0159.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 0x20 [0160.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0160.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.921] GetLastError () returned 0x5 [0160.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0160.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 Thread: id = 2933 os_tid = 0x1f54 [0159.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 0x20 [0160.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0160.123] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.123] GetLastError () returned 0x5 [0160.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0160.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 2934 os_tid = 0x1f58 [0159.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 0x20 [0160.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0160.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.125] GetLastError () returned 0x5 [0160.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0160.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 2935 os_tid = 0x1f5c [0160.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 0x20 [0160.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0160.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.127] GetLastError () returned 0x5 [0160.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0160.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011770) returned 1 Thread: id = 2936 os_tid = 0x1f68 [0160.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf")) returned 0x20 [0160.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0160.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.130] GetLastError () returned 0x5 [0160.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0160.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819a00) returned 1 Thread: id = 2937 os_tid = 0x1f6c [0160.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf")) returned 0x20 [0161.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0161.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.600] GetLastError () returned 0x5 [0161.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0161.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819968) returned 1 Thread: id = 2938 os_tid = 0x1f70 [0160.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf")) returned 0x20 [0161.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0161.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.602] GetLastError () returned 0x5 [0161.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0161.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819838) returned 1 Thread: id = 2939 os_tid = 0x1f74 [0160.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf")) returned 0x20 [0161.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0161.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.603] GetLastError () returned 0x5 [0161.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0161.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a8) returned 1 Thread: id = 2940 os_tid = 0x1f78 [0160.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf")) returned 0x20 [0161.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0161.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.604] GetLastError () returned 0x5 [0161.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0161.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819410) returned 1 Thread: id = 2941 os_tid = 0x1f7c [0160.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf")) returned 0x20 [0160.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0160.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.954] GetLastError () returned 0x5 [0160.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0160.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819378) returned 1 Thread: id = 2942 os_tid = 0x1f80 [0160.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf")) returned 0x20 [0160.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0160.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.956] GetLastError () returned 0x5 [0160.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0160.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68192e0) returned 1 Thread: id = 2943 os_tid = 0x1f84 [0160.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 0x20 [0161.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.606] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.606] GetLastError () returned 0x5 [0161.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1770) returned 1 Thread: id = 2944 os_tid = 0x1f88 [0160.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 0x20 [0161.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.728] GetLastError () returned 0x5 [0161.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 2945 os_tid = 0x1f8c [0160.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 0x20 [0161.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.730] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.730] GetLastError () returned 0x5 [0161.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2946 os_tid = 0x1f90 [0160.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 0x20 [0161.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.732] GetLastError () returned 0x5 [0161.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 2947 os_tid = 0x1f94 [0160.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 0x20 [0161.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.076] GetLastError () returned 0x5 [0161.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 2948 os_tid = 0x1f98 [0160.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 0x20 [0161.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.726] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.727] GetLastError () returned 0x5 [0161.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0260) returned 1 Thread: id = 2949 os_tid = 0x1f9c [0160.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 0x20 [0161.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.607] GetLastError () returned 0x5 [0161.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1d30) returned 1 Thread: id = 2950 os_tid = 0x1fa0 [0160.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 0x20 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.741] GetLastError () returned 0x5 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 2951 os_tid = 0x1fa4 [0160.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 0x20 [0161.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.742] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.743] GetLastError () returned 0x5 [0161.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 2952 os_tid = 0x1fa8 [0160.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 0x20 [0161.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.744] GetLastError () returned 0x5 [0161.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 2953 os_tid = 0x1fac [0160.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 0x20 [0161.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.106] GetLastError () returned 0x5 [0161.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2954 os_tid = 0x1fb0 [0160.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 0x20 [0161.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.739] GetLastError () returned 0x5 [0161.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0328) returned 1 Thread: id = 2955 os_tid = 0x1fb4 [0160.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 0x20 [0160.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.152] GetLastError () returned 0x5 [0160.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 Thread: id = 2956 os_tid = 0x1fb8 [0160.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 0x20 [0160.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.154] GetLastError () returned 0x5 [0160.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 2957 os_tid = 0x1fbc [0160.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 0x20 [0160.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.157] GetLastError () returned 0x5 [0160.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 2958 os_tid = 0x1fc0 [0160.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 0x20 [0160.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.159] GetLastError () returned 0x5 [0160.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 2959 os_tid = 0x1fc4 [0160.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 0x20 [0160.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.164] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.164] GetLastError () returned 0x5 [0160.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 2960 os_tid = 0x1fc8 [0160.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 0x20 [0160.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.166] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.166] GetLastError () returned 0x5 [0160.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 Thread: id = 2961 os_tid = 0x1fcc [0160.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 0x20 [0160.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0160.168] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.168] GetLastError () returned 0x5 [0160.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0160.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2d88) returned 1 Thread: id = 2962 os_tid = 0x1fd0 [0160.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 0x20 [0160.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0160.171] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.171] GetLastError () returned 0x5 [0160.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0160.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819248) returned 1 Thread: id = 2963 os_tid = 0x1fd4 [0160.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29800 [0160.172] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0160.172] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\" [0160.172] wcscat (in: _Dest=0x3f29800, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0160.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0160.173] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0160.173] wcscmp (_String1=".", _String2=".") returned 0 [0160.173] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.173] wcscmp (_String1="..", _String2=".") returned 1 [0160.173] wcscmp (_String1="..", _String2="..") returned 0 [0160.173] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.173] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0160.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0160.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 [0160.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 Thread: id = 2964 os_tid = 0x1fd8 [0160.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f291e0 [0160.175] wcscpy (in: _Dest=0x3f291e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0160.175] wcscat (in: _Dest=0x3f291e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\" [0160.175] wcscat (in: _Dest=0x3f291e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0160.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0160.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0160.175] wcscmp (_String1=".", _String2=".") returned 0 [0160.176] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.176] wcscmp (_String1="..", _String2=".") returned 1 [0160.176] wcscmp (_String1="..", _String2="..") returned 0 [0160.176] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.176] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0160.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0160.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 [0160.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 2965 os_tid = 0x1fdc [0160.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29950 [0160.177] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0160.177] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\" [0160.177] wcscat (in: _Dest=0x3f29950, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*" [0160.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0160.178] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0160.178] wcscmp (_String1=".", _String2=".") returned 0 [0160.178] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.178] wcscmp (_String1="..", _String2=".") returned 1 [0160.178] wcscmp (_String1="..", _String2="..") returned 0 [0160.178] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.178] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0160.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0160.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 [0160.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 2966 os_tid = 0x1fe0 [0160.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d538 [0160.180] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0160.180] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0160.180] wcscat (in: _Dest=0x3e5d538, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*" [0160.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0160.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0162.404] wcscmp (_String1=".", _String2=".") returned 0 [0162.404] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.404] wcscmp (_String1="..", _String2=".") returned 1 [0162.404] wcscmp (_String1="..", _String2="..") returned 0 [0162.404] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1 [0162.404] wcscmp (_String1="InfoPathOMFormServicesV12", _String2=".") returned 1 [0162.404] wcscmp (_String1="InfoPathOMFormServicesV12", _String2="..") returned 1 [0162.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3011fe0 [0162.404] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0162.404] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0162.404] wcscat (in: _Dest=0x3011fe0, _Source="InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0163.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0163.284] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0163.284] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0163.284] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0163.284] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0163.284] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0163.284] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0163.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9988 [0163.285] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0163.285] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0163.285] wcscat (in: _Dest=0x2c9988, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" [0163.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0163.286] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0163.286] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eab0) returned 1 Thread: id = 2967 os_tid = 0x1fe4 [0160.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6819248 [0160.183] wcscpy (in: _Dest=0x6819248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0160.183] wcscat (in: _Dest=0x6819248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0160.183] wcscat (in: _Dest=0x6819248, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*" [0160.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0160.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0161.135] wcscmp (_String1=".", _String2=".") returned 0 [0161.135] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.135] wcscmp (_String1="..", _String2=".") returned 1 [0161.135] wcscmp (_String1="..", _String2="..") returned 0 [0161.135] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0161.135] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0161.135] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0161.135] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0161.135] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0161.135] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0161.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036b00 [0161.136] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0161.136] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0161.136] wcscat (in: _Dest=0x3036b00, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" [0161.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0161.284] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0161.284] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0161.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0161.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819248) returned 1 [0161.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 Thread: id = 2968 os_tid = 0x1fe8 [0160.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 0x20 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0161.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.746] GetLastError () returned 0x5 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0161.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2969 os_tid = 0x1fec [0160.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx")) returned 0x20 [0160.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0160.191] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.198] GetLastError () returned 0x5 [0160.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0160.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 2970 os_tid = 0x1ff0 [0160.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx")) returned 0x20 [0160.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0160.212] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.219] GetLastError () returned 0x5 [0160.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0160.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 2971 os_tid = 0x1ff4 [0160.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json")) returned 0x20 [0160.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0160.232] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.239] GetLastError () returned 0x5 [0160.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0160.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0198) returned 1 Thread: id = 2972 os_tid = 0x1ff8 [0160.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx")) returned 0x20 [0160.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0160.255] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.262] GetLastError () returned 0x5 [0160.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0160.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 2973 os_tid = 0x1ffc [0160.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx")) returned 0x20 [0160.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0160.273] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.280] GetLastError () returned 0x5 [0160.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0160.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 2974 os_tid = 0xacc [0160.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f470 [0160.287] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0160.287] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0160.287] wcscat (in: _Dest=0x3e0f470, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*" [0160.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0160.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0163.453] wcscmp (_String1=".", _String2=".") returned 0 [0163.453] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.453] wcscmp (_String1="..", _String2=".") returned 1 [0163.453] wcscmp (_String1="..", _String2="..") returned 0 [0163.453] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0163.453] wcscmp (_String1="accessibility.CAT", _String2=".") returned 1 [0163.453] wcscmp (_String1="accessibility.CAT", _String2="..") returned 1 [0163.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0163.453] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0163.453] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0163.453] wcscat (in: _Dest=0x2c75f8, _Source="accessibility.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" [0172.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat")) returned 0x20 [0172.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0172.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.163] GetLastError () returned 0x5 [0172.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0172.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 [0172.163] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0172.163] wcscmp (_String1="Acroform.CAT", _String2=".") returned 1 [0172.163] wcscmp (_String1="Acroform.CAT", _String2="..") returned 1 [0172.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0172.163] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.163] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.163] wcscat (in: _Dest=0x66dd248, _Source="Acroform.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" [0172.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat")) returned 0x20 [0172.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0172.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.192] GetLastError () returned 0x5 [0172.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0172.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.192] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0172.192] wcscmp (_String1="AdobeCollabSync.CAT", _String2=".") returned 1 [0172.192] wcscmp (_String1="AdobeCollabSync.CAT", _String2="..") returned 1 [0172.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0172.192] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.192] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.192] wcscat (in: _Dest=0x2c7198, _Source="AdobeCollabSync.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" [0172.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat")) returned 0x20 [0172.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0172.193] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.193] GetLastError () returned 0x5 [0172.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0172.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 [0172.193] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0172.193] wcscmp (_String1="Annots.CAT", _String2=".") returned 1 [0172.193] wcscmp (_String1="Annots.CAT", _String2="..") returned 1 [0172.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd248 [0172.193] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.194] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.194] wcscat (in: _Dest=0x66dd248, _Source="Annots.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" [0172.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat")) returned 0x20 [0172.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0172.194] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.194] GetLastError () returned 0x5 [0172.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0172.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.195] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0172.195] wcscmp (_String1="BRdlang32.CAT", _String2=".") returned 1 [0172.195] wcscmp (_String1="BRdlang32.CAT", _String2="..") returned 1 [0172.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69585d0 [0172.195] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.195] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.195] wcscat (in: _Dest=0x69585d0, _Source="BRdlang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" [0172.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat")) returned 0x20 [0172.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0172.196] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.212] GetLastError () returned 0x5 [0172.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0172.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 [0172.212] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0172.212] wcscmp (_String1="Checkers.CAT", _String2=".") returned 1 [0172.212] wcscmp (_String1="Checkers.CAT", _String2="..") returned 1 [0172.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0172.213] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.213] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.213] wcscat (in: _Dest=0x66dd248, _Source="Checkers.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" [0172.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat")) returned 0x20 [0172.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0172.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.214] GetLastError () returned 0x5 [0172.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0172.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.214] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0172.214] wcscmp (_String1="DigSig.CAT", _String2=".") returned 1 [0172.214] wcscmp (_String1="DigSig.CAT", _String2="..") returned 1 [0172.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd248 [0172.214] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.214] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.214] wcscat (in: _Dest=0x66dd248, _Source="DigSig.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" [0172.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat")) returned 0x20 [0172.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0172.280] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.280] GetLastError () returned 0x5 [0172.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0172.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.281] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0172.281] wcscmp (_String1="DVA.CAT", _String2=".") returned 1 [0172.281] wcscmp (_String1="DVA.CAT", _String2="..") returned 1 [0172.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0172.281] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.281] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.281] wcscat (in: _Dest=0x682c568, _Source="DVA.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" [0172.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat")) returned 0x20 [0172.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0172.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.282] GetLastError () returned 0x5 [0172.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0172.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.537] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0172.537] wcscmp (_String1="eBook.CAT", _String2=".") returned 1 [0172.537] wcscmp (_String1="eBook.CAT", _String2="..") returned 1 [0172.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac678 [0172.537] wcscpy (in: _Dest=0x68ac678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.537] wcscat (in: _Dest=0x68ac678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.537] wcscat (in: _Dest=0x68ac678, _Source="eBook.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" [0172.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0172.889] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0172.889] wcscmp (_String1="EScript.CAT", _String2=".") returned 1 [0172.889] wcscmp (_String1="EScript.CAT", _String2="..") returned 1 [0172.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc8b8 [0172.889] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.889] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.889] wcscat (in: _Dest=0x66dc8b8, _Source="EScript.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" [0172.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0172.890] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0172.890] wcscmp (_String1="IA32.CAT", _String2=".") returned 1 [0172.890] wcscmp (_String1="IA32.CAT", _String2="..") returned 1 [0172.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0172.890] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.890] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.890] wcscat (in: _Dest=0x3f26fa8, _Source="IA32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" [0172.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0172.892] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0172.892] wcscmp (_String1="makeaccessible.CAT", _String2=".") returned 1 [0172.892] wcscmp (_String1="makeaccessible.CAT", _String2="..") returned 1 [0172.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e110 [0172.892] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.892] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.892] wcscat (in: _Dest=0x3e0e110, _Source="makeaccessible.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" [0172.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0172.893] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0172.893] wcscmp (_String1="Multimedia.CAT", _String2=".") returned 1 [0172.893] wcscmp (_String1="Multimedia.CAT", _String2="..") returned 1 [0172.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2700 [0172.893] wcscpy (in: _Dest=0x69c2700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.893] wcscat (in: _Dest=0x69c2700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.893] wcscat (in: _Dest=0x69c2700, _Source="Multimedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" [0172.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0172.895] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0172.895] wcscmp (_String1="pddom.CAT", _String2=".") returned 1 [0172.895] wcscmp (_String1="pddom.CAT", _String2="..") returned 1 [0172.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0172.895] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.895] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.895] wcscat (in: _Dest=0x66dc828, _Source="pddom.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" [0172.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0172.896] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0172.896] wcscmp (_String1="PPKLite.CAT", _String2=".") returned 1 [0172.896] wcscmp (_String1="PPKLite.CAT", _String2="..") returned 1 [0172.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd368 [0172.896] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.896] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.896] wcscat (in: _Dest=0x66dd368, _Source="PPKLite.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" [0172.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0172.897] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0172.897] wcscmp (_String1="RdLang32.CAT", _String2=".") returned 1 [0172.897] wcscmp (_String1="RdLang32.CAT", _String2="..") returned 1 [0172.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db8f8 [0172.898] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.898] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.898] wcscat (in: _Dest=0x66db8f8, _Source="RdLang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" [0172.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0172.899] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0172.899] wcscmp (_String1="ReadOutLoud.CAT", _String2=".") returned 1 [0172.899] wcscmp (_String1="ReadOutLoud.CAT", _String2="..") returned 1 [0172.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c3a00 [0172.899] wcscpy (in: _Dest=0x69c3a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.899] wcscat (in: _Dest=0x69c3a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.899] wcscat (in: _Dest=0x69c3a00, _Source="ReadOutLoud.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" [0172.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0172.901] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0172.901] wcscmp (_String1="reflow.CAT", _String2=".") returned 1 [0172.901] wcscmp (_String1="reflow.CAT", _String2="..") returned 1 [0172.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd008 [0172.901] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.901] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.901] wcscat (in: _Dest=0x66dd008, _Source="reflow.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" [0172.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0172.902] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0172.902] wcscmp (_String1="SaveAsRTF.CAT", _String2=".") returned 1 [0172.902] wcscmp (_String1="SaveAsRTF.CAT", _String2="..") returned 1 [0172.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2b28 [0172.902] wcscpy (in: _Dest=0x69c2b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.902] wcscat (in: _Dest=0x69c2b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.902] wcscat (in: _Dest=0x69c2b28, _Source="SaveAsRTF.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" [0172.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0172.903] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0172.903] wcscmp (_String1="Search.CAT", _String2=".") returned 1 [0172.904] wcscmp (_String1="Search.CAT", _String2="..") returned 1 [0172.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0172.904] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.904] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.904] wcscat (in: _Dest=0x66dc948, _Source="Search.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" [0172.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0172.905] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0172.905] wcscmp (_String1="SendMail.CAT", _String2=".") returned 1 [0172.905] wcscmp (_String1="SendMail.CAT", _String2="..") returned 1 [0172.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0172.906] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.906] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.906] wcscat (in: _Dest=0x66dcd38, _Source="SendMail.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" [0172.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0172.907] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.907] wcscmp (_String1="Services", _String2=".") returned 1 [0172.907] wcscmp (_String1="Services", _String2="..") returned 1 [0172.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f272d8 [0172.907] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.907] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.907] wcscat (in: _Dest=0x3f272d8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0172.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0172.909] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0172.909] wcscmp (_String1="Spelling.CAT", _String2=".") returned 1 [0172.909] wcscmp (_String1="Spelling.CAT", _String2="..") returned 1 [0172.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc678 [0172.909] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.909] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.910] wcscat (in: _Dest=0x66dc678, _Source="Spelling.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" [0172.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0172.911] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0172.911] wcscmp (_String1="updater.CAT", _String2=".") returned 1 [0172.911] wcscmp (_String1="updater.CAT", _String2="..") returned 1 [0172.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcdc8 [0172.911] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.911] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.911] wcscat (in: _Dest=0x66dcdc8, _Source="updater.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" [0172.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0172.912] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0172.912] wcscmp (_String1="WebLink.CAT", _String2=".") returned 1 [0172.912] wcscmp (_String1="WebLink.CAT", _String2="..") returned 1 [0172.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac288 [0172.912] wcscpy (in: _Dest=0x68ac288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0172.913] wcscat (in: _Dest=0x68ac288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0172.913] wcscat (in: _Dest=0x68ac288, _Source="WebLink.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" [0172.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0172.914] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0172.914] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0172.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0172.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 [0172.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 Thread: id = 2975 os_tid = 0xb18 [0160.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e11070 [0160.290] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0160.290] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0160.290] wcscat (in: _Dest=0x3e11070, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*" [0160.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0160.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0166.490] wcscmp (_String1=".", _String2=".") returned 0 [0166.490] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.490] wcscmp (_String1="..", _String2=".") returned 1 [0166.490] wcscmp (_String1="..", _String2="..") returned 0 [0166.490] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0166.490] wcscmp (_String1="accessibility.CZE", _String2=".") returned 1 [0166.491] wcscmp (_String1="accessibility.CZE", _String2="..") returned 1 [0166.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1228 [0166.491] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.491] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.491] wcscat (in: _Dest=0x69c1228, _Source="accessibility.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" [0166.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0166.745] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0166.745] wcscmp (_String1="Acroform.CZE", _String2=".") returned 1 [0166.745] wcscmp (_String1="Acroform.CZE", _String2="..") returned 1 [0166.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e378 [0166.745] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.745] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.745] wcscat (in: _Dest=0x674e378, _Source="Acroform.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" [0166.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0166.746] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0166.746] wcscmp (_String1="AdobeCollabSync.CZE", _String2=".") returned 1 [0166.746] wcscmp (_String1="AdobeCollabSync.CZE", _String2="..") returned 1 [0166.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c15e8 [0166.746] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.746] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.746] wcscat (in: _Dest=0x69c15e8, _Source="AdobeCollabSync.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" [0166.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0166.748] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0166.748] wcscmp (_String1="Annots.CZE", _String2=".") returned 1 [0166.748] wcscmp (_String1="Annots.CZE", _String2="..") returned 1 [0166.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674ce18 [0166.748] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.748] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.748] wcscat (in: _Dest=0x674ce18, _Source="Annots.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" [0166.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0166.749] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0166.749] wcscmp (_String1="BRdlang32.CZE", _String2=".") returned 1 [0166.749] wcscmp (_String1="BRdlang32.CZE", _String2="..") returned 1 [0166.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0166.749] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.749] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.749] wcscat (in: _Dest=0x69589f8, _Source="BRdlang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" [0166.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0166.750] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0166.750] wcscmp (_String1="Checkers.CZE", _String2=".") returned 1 [0166.750] wcscmp (_String1="Checkers.CZE", _String2="..") returned 1 [0166.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e2e8 [0166.750] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.750] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.750] wcscat (in: _Dest=0x674e2e8, _Source="Checkers.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" [0166.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0166.751] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0166.751] wcscmp (_String1="DigSig.CZE", _String2=".") returned 1 [0166.751] wcscmp (_String1="DigSig.CZE", _String2="..") returned 1 [0166.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dcb8 [0166.752] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.752] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.752] wcscat (in: _Dest=0x674dcb8, _Source="DigSig.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" [0166.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0166.753] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0166.753] wcscmp (_String1="DVA.CZE", _String2=".") returned 1 [0166.753] wcscmp (_String1="DVA.CZE", _String2="..") returned 1 [0166.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26e98 [0166.753] wcscpy (in: _Dest=0x3f26e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.753] wcscat (in: _Dest=0x3f26e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.753] wcscat (in: _Dest=0x3f26e98, _Source="DVA.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" [0166.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0166.754] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0166.754] wcscmp (_String1="eBook.CZE", _String2=".") returned 1 [0166.754] wcscmp (_String1="eBook.CZE", _String2="..") returned 1 [0166.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674def8 [0166.754] wcscpy (in: _Dest=0x674def8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.754] wcscat (in: _Dest=0x674def8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.754] wcscat (in: _Dest=0x674def8, _Source="eBook.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" [0166.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674def8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0166.755] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0166.755] wcscmp (_String1="EScript.CZE", _String2=".") returned 1 [0166.756] wcscmp (_String1="EScript.CZE", _String2="..") returned 1 [0166.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674de68 [0166.756] wcscpy (in: _Dest=0x674de68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.756] wcscat (in: _Dest=0x674de68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.756] wcscat (in: _Dest=0x674de68, _Source="EScript.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" [0166.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0166.757] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0166.757] wcscmp (_String1="IA32.CZE", _String2=".") returned 1 [0166.757] wcscmp (_String1="IA32.CZE", _String2="..") returned 1 [0166.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27140 [0166.757] wcscpy (in: _Dest=0x3f27140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.757] wcscat (in: _Dest=0x3f27140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.757] wcscat (in: _Dest=0x3f27140, _Source="IA32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" [0166.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0166.758] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0166.758] wcscmp (_String1="makeaccessible.CZE", _String2=".") returned 1 [0166.759] wcscmp (_String1="makeaccessible.CZE", _String2="..") returned 1 [0166.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0a08 [0166.759] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.759] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.759] wcscat (in: _Dest=0x69c0a08, _Source="makeaccessible.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" [0166.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0166.760] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0166.760] wcscmp (_String1="Multimedia.CZE", _String2=".") returned 1 [0166.760] wcscmp (_String1="Multimedia.CZE", _String2="..") returned 1 [0166.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0166.760] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.760] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.760] wcscat (in: _Dest=0x6957f48, _Source="Multimedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" [0166.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0166.761] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0166.761] wcscmp (_String1="pddom.CZE", _String2=".") returned 1 [0166.761] wcscmp (_String1="pddom.CZE", _String2="..") returned 1 [0166.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674df88 [0166.761] wcscpy (in: _Dest=0x674df88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.761] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.761] wcscat (in: _Dest=0x674df88, _Source="pddom.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" [0166.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0166.762] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0166.762] wcscmp (_String1="PPKLite.CZE", _String2=".") returned 1 [0166.762] wcscmp (_String1="PPKLite.CZE", _String2="..") returned 1 [0166.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674dc28 [0166.762] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.762] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.762] wcscat (in: _Dest=0x674dc28, _Source="PPKLite.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" [0166.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0166.763] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0e71a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0166.763] wcscmp (_String1="RdLang32.CZE", _String2=".") returned 1 [0166.763] wcscmp (_String1="RdLang32.CZE", _String2="..") returned 1 [0166.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e018 [0166.763] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.763] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.763] wcscat (in: _Dest=0x674e018, _Source="RdLang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" [0166.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0166.764] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0166.764] wcscmp (_String1="ReadOutLoud.CZE", _String2=".") returned 1 [0166.764] wcscmp (_String1="ReadOutLoud.CZE", _String2="..") returned 1 [0166.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958408 [0166.764] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.764] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.765] wcscat (in: _Dest=0x6958408, _Source="ReadOutLoud.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" [0166.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0166.765] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0166.765] wcscmp (_String1="reflow.CZE", _String2=".") returned 1 [0166.765] wcscmp (_String1="reflow.CZE", _String2="..") returned 1 [0166.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e138 [0166.766] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.766] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.766] wcscat (in: _Dest=0x674e138, _Source="reflow.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" [0166.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0166.767] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0166.767] wcscmp (_String1="SaveAsRTF.CZE", _String2=".") returned 1 [0166.767] wcscmp (_String1="SaveAsRTF.CZE", _String2="..") returned 1 [0166.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957fe0 [0166.767] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.767] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.767] wcscat (in: _Dest=0x6957fe0, _Source="SaveAsRTF.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" [0166.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0166.768] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0166.768] wcscmp (_String1="Search.CZE", _String2=".") returned 1 [0166.768] wcscmp (_String1="Search.CZE", _String2="..") returned 1 [0166.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674ddd8 [0166.768] wcscpy (in: _Dest=0x674ddd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.768] wcscat (in: _Dest=0x674ddd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.768] wcscat (in: _Dest=0x674ddd8, _Source="Search.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" [0166.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ddd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0166.769] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0166.769] wcscmp (_String1="SendMail.CZE", _String2=".") returned 1 [0166.769] wcscmp (_String1="SendMail.CZE", _String2="..") returned 1 [0166.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d058 [0166.769] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.769] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.769] wcscat (in: _Dest=0x674d058, _Source="SendMail.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" [0166.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0166.770] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.770] wcscmp (_String1="Services", _String2=".") returned 1 [0166.770] wcscmp (_String1="Services", _String2="..") returned 1 [0166.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0166.770] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.770] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.770] wcscat (in: _Dest=0x3f274f8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0166.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0166.771] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0166.771] wcscmp (_String1="Spelling.CZE", _String2=".") returned 1 [0166.771] wcscmp (_String1="Spelling.CZE", _String2="..") returned 1 [0166.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d838 [0166.772] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.772] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.772] wcscat (in: _Dest=0x674d838, _Source="Spelling.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" [0166.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0166.773] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0166.773] wcscmp (_String1="updater.CZE", _String2=".") returned 1 [0166.773] wcscmp (_String1="updater.CZE", _String2="..") returned 1 [0166.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d958 [0166.773] wcscpy (in: _Dest=0x674d958, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.773] wcscat (in: _Dest=0x674d958, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.773] wcscat (in: _Dest=0x674d958, _Source="updater.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" [0166.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0166.774] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0166.774] wcscmp (_String1="WebLink.CZE", _String2=".") returned 1 [0166.774] wcscmp (_String1="WebLink.CZE", _String2="..") returned 1 [0166.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d8c8 [0166.774] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0166.774] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0166.774] wcscat (in: _Dest=0x674d8c8, _Source="WebLink.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" [0166.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0166.775] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0166.775] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0166.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0166.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 [0166.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 Thread: id = 2976 os_tid = 0xa7c [0160.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f370 [0160.291] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0160.291] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0160.291] wcscat (in: _Dest=0x3e0f370, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*" [0160.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0160.291] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0166.255] wcscmp (_String1=".", _String2=".") returned 0 [0166.255] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.255] wcscmp (_String1="..", _String2=".") returned 1 [0166.255] wcscmp (_String1="..", _String2="..") returned 0 [0166.255] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0166.255] wcscmp (_String1="accessibility.DAN", _String2=".") returned 1 [0166.255] wcscmp (_String1="accessibility.DAN", _String2="..") returned 1 [0166.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c12c8 [0166.255] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0166.255] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0166.256] wcscat (in: _Dest=0x69c12c8, _Source="accessibility.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" [0172.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan")) returned 0x20 [0172.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0172.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.694] GetLastError () returned 0x5 [0172.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0172.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 [0172.694] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0172.694] wcscmp (_String1="Acroform.DAN", _String2=".") returned 1 [0172.694] wcscmp (_String1="Acroform.DAN", _String2="..") returned 1 [0172.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0172.694] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0172.694] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0172.694] wcscat (in: _Dest=0x66dc558, _Source="Acroform.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" [0172.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan")) returned 0x20 [0172.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0172.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.695] GetLastError () returned 0x5 [0172.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0172.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0172.695] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0172.695] wcscmp (_String1="AdobeCollabSync.DAN", _String2=".") returned 1 [0172.695] wcscmp (_String1="AdobeCollabSync.DAN", _String2="..") returned 1 [0172.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c12c8 [0172.695] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0172.695] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0172.695] wcscat (in: _Dest=0x69c12c8, _Source="AdobeCollabSync.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" [0172.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan")) returned 0x20 [0172.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0172.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.695] GetLastError () returned 0x5 [0172.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0172.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 [0172.696] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0172.696] wcscmp (_String1="Annots.DAN", _String2=".") returned 1 [0172.696] wcscmp (_String1="Annots.DAN", _String2="..") returned 1 [0172.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0172.696] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0172.696] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0172.696] wcscat (in: _Dest=0x66dc558, _Source="Annots.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" [0172.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan")) returned 0x20 [0172.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0172.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.697] GetLastError () returned 0x5 [0172.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0172.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0172.697] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0172.697] wcscmp (_String1="BRdlang32.DAN", _String2=".") returned 1 [0172.697] wcscmp (_String1="BRdlang32.DAN", _String2="..") returned 1 [0172.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6819248 [0172.697] wcscpy (in: _Dest=0x6819248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0172.697] wcscat (in: _Dest=0x6819248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0172.697] wcscat (in: _Dest=0x6819248, _Source="BRdlang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" [0172.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan")) returned 0x20 [0172.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0172.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.697] GetLastError () returned 0x5 [0172.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0172.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819248) returned 1 [0172.698] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0172.698] wcscmp (_String1="Checkers.DAN", _String2=".") returned 1 [0172.698] wcscmp (_String1="Checkers.DAN", _String2="..") returned 1 [0172.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0172.698] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0172.698] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0172.698] wcscat (in: _Dest=0x66dc558, _Source="Checkers.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" [0172.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan")) returned 0x20 [0173.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0173.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.614] GetLastError () returned 0x5 [0173.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0173.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 [0173.614] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0173.614] wcscmp (_String1="DigSig.DAN", _String2=".") returned 1 [0173.614] wcscmp (_String1="DigSig.DAN", _String2="..") returned 1 [0173.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0173.615] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0173.615] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0173.615] wcscat (in: _Dest=0x66dc558, _Source="DigSig.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" [0176.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0176.161] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0176.161] wcscmp (_String1="DVA.DAN", _String2=".") returned 1 [0176.161] wcscmp (_String1="DVA.DAN", _String2="..") returned 1 [0176.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef048 [0176.161] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.161] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.161] wcscat (in: _Dest=0x66ef048, _Source="DVA.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" [0176.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0176.162] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0176.162] wcscmp (_String1="eBook.DAN", _String2=".") returned 1 [0176.162] wcscmp (_String1="eBook.DAN", _String2="..") returned 1 [0176.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674da78 [0176.162] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.162] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.162] wcscat (in: _Dest=0x674da78, _Source="eBook.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" [0176.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0176.163] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0176.163] wcscmp (_String1="EScript.DAN", _String2=".") returned 1 [0176.164] wcscmp (_String1="EScript.DAN", _String2="..") returned 1 [0176.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d9e8 [0176.164] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.164] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.164] wcscat (in: _Dest=0x674d9e8, _Source="EScript.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" [0176.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0176.165] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0176.165] wcscmp (_String1="IA32.DAN", _String2=".") returned 1 [0176.165] wcscmp (_String1="IA32.DAN", _String2="..") returned 1 [0176.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efbf8 [0176.165] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.165] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.165] wcscat (in: _Dest=0x66efbf8, _Source="IA32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" [0176.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0176.166] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0176.166] wcscmp (_String1="makeaccessible.DAN", _String2=".") returned 1 [0176.166] wcscmp (_String1="makeaccessible.DAN", _String2="..") returned 1 [0176.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0176.166] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.166] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.166] wcscat (in: _Dest=0x69c1188, _Source="makeaccessible.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" [0176.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0176.167] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0176.167] wcscmp (_String1="Multimedia.DAN", _String2=".") returned 1 [0176.167] wcscmp (_String1="Multimedia.DAN", _String2="..") returned 1 [0176.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a00 [0176.168] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.168] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.168] wcscat (in: _Dest=0x6959a00, _Source="Multimedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" [0176.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0176.168] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0176.168] wcscmp (_String1="pddom.DAN", _String2=".") returned 1 [0176.169] wcscmp (_String1="pddom.DAN", _String2="..") returned 1 [0176.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cf38 [0176.169] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.169] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.169] wcscat (in: _Dest=0x674cf38, _Source="pddom.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" [0176.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0176.170] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0176.170] wcscmp (_String1="PPKLITE.DAN", _String2=".") returned 1 [0176.170] wcscmp (_String1="PPKLITE.DAN", _String2="..") returned 1 [0176.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d4d8 [0176.170] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.170] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.170] wcscat (in: _Dest=0x674d4d8, _Source="PPKLITE.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" [0176.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0176.171] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0176.171] wcscmp (_String1="RdLang32.DAN", _String2=".") returned 1 [0176.171] wcscmp (_String1="RdLang32.DAN", _String2="..") returned 1 [0176.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e018 [0176.171] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.171] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.171] wcscat (in: _Dest=0x674e018, _Source="RdLang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" [0176.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0176.172] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0176.172] wcscmp (_String1="ReadOutLoud.DAN", _String2=".") returned 1 [0176.172] wcscmp (_String1="ReadOutLoud.DAN", _String2="..") returned 1 [0176.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959248 [0176.172] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.172] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.172] wcscat (in: _Dest=0x6959248, _Source="ReadOutLoud.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" [0176.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0176.173] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0176.173] wcscmp (_String1="reflow.DAN", _String2=".") returned 1 [0176.174] wcscmp (_String1="reflow.DAN", _String2="..") returned 1 [0176.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dc28 [0176.174] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.174] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.174] wcscat (in: _Dest=0x674dc28, _Source="reflow.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" [0176.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0176.175] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0176.175] wcscmp (_String1="SaveAsRTF.DAN", _String2=".") returned 1 [0176.175] wcscmp (_String1="SaveAsRTF.DAN", _String2="..") returned 1 [0176.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958078 [0176.175] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.175] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.175] wcscat (in: _Dest=0x6958078, _Source="SaveAsRTF.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" [0176.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0176.176] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0176.176] wcscmp (_String1="Search.DAN", _String2=".") returned 1 [0176.176] wcscmp (_String1="Search.DAN", _String2="..") returned 1 [0176.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d8c8 [0176.176] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.176] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.176] wcscat (in: _Dest=0x674d8c8, _Source="Search.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" [0176.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0176.178] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0176.178] wcscmp (_String1="SendMail.DAN", _String2=".") returned 1 [0176.178] wcscmp (_String1="SendMail.DAN", _String2="..") returned 1 [0176.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d838 [0176.178] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.178] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.178] wcscat (in: _Dest=0x674d838, _Source="SendMail.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" [0176.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0176.179] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0176.179] wcscmp (_String1="Services", _String2=".") returned 1 [0176.179] wcscmp (_String1="Services", _String2="..") returned 1 [0176.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eefc0 [0176.179] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.179] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.179] wcscat (in: _Dest=0x66eefc0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0176.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0176.180] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0176.180] wcscmp (_String1="Spelling.DAN", _String2=".") returned 1 [0176.180] wcscmp (_String1="Spelling.DAN", _String2="..") returned 1 [0176.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d058 [0176.180] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.180] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.180] wcscat (in: _Dest=0x674d058, _Source="Spelling.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" [0176.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0176.181] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0176.181] wcscmp (_String1="updater.DAN", _String2=".") returned 1 [0176.181] wcscmp (_String1="updater.DAN", _String2="..") returned 1 [0176.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e138 [0176.182] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.182] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.182] wcscat (in: _Dest=0x674e138, _Source="updater.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" [0176.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0176.183] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0176.183] wcscmp (_String1="Weblink.DAN", _String2=".") returned 1 [0176.183] wcscmp (_String1="Weblink.DAN", _String2="..") returned 1 [0176.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674df88 [0176.183] wcscpy (in: _Dest=0x674df88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0176.183] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0176.183] wcscat (in: _Dest=0x674df88, _Source="Weblink.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" [0176.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0176.184] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0176.184] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0176.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0176.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 [0176.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 Thread: id = 2977 os_tid = 0x64 [0160.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e102f0 [0160.292] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0160.292] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0160.292] wcscat (in: _Dest=0x3e102f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*" [0160.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0160.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0165.516] wcscmp (_String1=".", _String2=".") returned 0 [0165.516] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.516] wcscmp (_String1="..", _String2=".") returned 1 [0165.516] wcscmp (_String1="..", _String2="..") returned 0 [0165.516] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1 [0165.516] wcscmp (_String1="accessibility.DEU", _String2=".") returned 1 [0165.516] wcscmp (_String1="accessibility.DEU", _String2="..") returned 1 [0165.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e390 [0165.516] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0165.517] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0165.517] wcscat (in: _Dest=0x3e0e390, _Source="accessibility.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" [0172.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu")) returned 0x20 [0172.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0172.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.772] GetLastError () returned 0x5 [0172.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0172.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 [0172.772] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0172.773] wcscmp (_String1="Acroform.DEU", _String2=".") returned 1 [0172.773] wcscmp (_String1="Acroform.DEU", _String2="..") returned 1 [0172.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd128 [0172.773] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.773] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.773] wcscat (in: _Dest=0x66dd128, _Source="Acroform.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" [0172.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu")) returned 0x20 [0172.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0172.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.773] GetLastError () returned 0x5 [0172.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0172.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.774] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1 [0172.774] wcscmp (_String1="AdobeCollabSync.DEU", _String2=".") returned 1 [0172.774] wcscmp (_String1="AdobeCollabSync.DEU", _String2="..") returned 1 [0172.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e390 [0172.774] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.774] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.774] wcscat (in: _Dest=0x3e0e390, _Source="AdobeCollabSync.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" [0172.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu")) returned 0x20 [0172.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0172.775] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.775] GetLastError () returned 0x5 [0172.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0172.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 [0172.775] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0172.775] wcscmp (_String1="Annots.DEU", _String2=".") returned 1 [0172.775] wcscmp (_String1="Annots.DEU", _String2="..") returned 1 [0172.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd128 [0172.775] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.775] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.775] wcscat (in: _Dest=0x66dd128, _Source="Annots.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" [0172.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu")) returned 0x20 [0172.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0172.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.776] GetLastError () returned 0x5 [0172.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0172.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.776] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1 [0172.776] wcscmp (_String1="BRdlang32.DEU", _String2=".") returned 1 [0172.776] wcscmp (_String1="BRdlang32.DEU", _String2="..") returned 1 [0172.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2370 [0172.776] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.776] wcscat (in: _Dest=0x69c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.777] wcscat (in: _Dest=0x69c2370, _Source="BRdlang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" [0172.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu")) returned 0x20 [0172.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0172.777] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.777] GetLastError () returned 0x5 [0172.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0172.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 [0172.778] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0172.778] wcscmp (_String1="Checkers.DEU", _String2=".") returned 1 [0172.778] wcscmp (_String1="Checkers.DEU", _String2="..") returned 1 [0172.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd128 [0172.778] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.778] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.778] wcscat (in: _Dest=0x66dd128, _Source="Checkers.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" [0172.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu")) returned 0x20 [0172.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0172.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.779] GetLastError () returned 0x5 [0172.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0172.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.779] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1 [0172.779] wcscmp (_String1="DigSig.DEU", _String2=".") returned 1 [0172.779] wcscmp (_String1="DigSig.DEU", _String2="..") returned 1 [0172.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd128 [0172.779] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0172.779] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0172.779] wcscat (in: _Dest=0x66dd128, _Source="DigSig.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" [0172.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu")) returned 0x20 [0173.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0173.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.590] GetLastError () returned 0x5 [0173.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0173.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0173.590] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1 [0173.590] wcscmp (_String1="DVA.DEU", _String2=".") returned 1 [0173.590] wcscmp (_String1="DVA.DEU", _String2="..") returned 1 [0173.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee740 [0173.590] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0173.590] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0173.590] wcscat (in: _Dest=0x66ee740, _Source="DVA.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" [0176.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0176.186] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1 [0176.186] wcscmp (_String1="eBook.DEU", _String2=".") returned 1 [0176.186] wcscmp (_String1="eBook.DEU", _String2="..") returned 1 [0176.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674de68 [0176.186] wcscpy (in: _Dest=0x674de68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.186] wcscat (in: _Dest=0x674de68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.186] wcscat (in: _Dest=0x674de68, _Source="eBook.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" [0176.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0176.187] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1 [0176.187] wcscmp (_String1="Escript.deu", _String2=".") returned 1 [0176.187] wcscmp (_String1="Escript.deu", _String2="..") returned 1 [0176.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674def8 [0176.187] wcscpy (in: _Dest=0x674def8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.187] wcscat (in: _Dest=0x674def8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.188] wcscat (in: _Dest=0x674def8, _Source="Escript.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" [0176.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674def8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0176.188] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1 [0176.188] wcscmp (_String1="IA32.DEU", _String2=".") returned 1 [0176.189] wcscmp (_String1="IA32.DEU", _String2="..") returned 1 [0176.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66effb0 [0176.189] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.189] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.189] wcscat (in: _Dest=0x66effb0, _Source="IA32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" [0176.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0176.189] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="MAKEAC~1.DEU")) returned 1 [0176.189] wcscmp (_String1="makeaccessible.DEU", _String2=".") returned 1 [0176.190] wcscmp (_String1="makeaccessible.DEU", _String2="..") returned 1 [0176.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c01e8 [0176.190] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.190] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.190] wcscat (in: _Dest=0x69c01e8, _Source="makeaccessible.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" [0176.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0176.191] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="MULTIM~1.DEU")) returned 1 [0176.191] wcscmp (_String1="Multimedia.DEU", _String2=".") returned 1 [0176.191] wcscmp (_String1="Multimedia.DEU", _String2="..") returned 1 [0176.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958830 [0176.191] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.191] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.191] wcscat (in: _Dest=0x6958830, _Source="Multimedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" [0176.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0176.192] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1 [0176.192] wcscmp (_String1="pddom.DEU", _String2=".") returned 1 [0176.192] wcscmp (_String1="pddom.DEU", _String2="..") returned 1 [0176.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dcb8 [0176.192] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.192] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.192] wcscat (in: _Dest=0x674dcb8, _Source="pddom.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" [0176.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0176.193] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1 [0176.193] wcscmp (_String1="PPKLITE.DEU", _String2=".") returned 1 [0176.193] wcscmp (_String1="PPKLITE.DEU", _String2="..") returned 1 [0176.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e2e8 [0176.193] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.193] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.193] wcscat (in: _Dest=0x674e2e8, _Source="PPKLITE.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" [0176.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0176.194] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb645b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1 [0176.194] wcscmp (_String1="RdLang32.DEU", _String2=".") returned 1 [0176.194] wcscmp (_String1="RdLang32.DEU", _String2="..") returned 1 [0176.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ce18 [0176.194] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.194] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.194] wcscat (in: _Dest=0x674ce18, _Source="RdLang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" [0176.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0176.195] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="READOU~1.DEU")) returned 1 [0176.195] wcscmp (_String1="ReadOutLoud.DEU", _String2=".") returned 1 [0176.195] wcscmp (_String1="ReadOutLoud.DEU", _String2="..") returned 1 [0176.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959540 [0176.195] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.195] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.195] wcscat (in: _Dest=0x6959540, _Source="ReadOutLoud.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" [0176.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0176.196] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1 [0176.196] wcscmp (_String1="reflow.DEU", _String2=".") returned 1 [0176.196] wcscmp (_String1="reflow.DEU", _String2="..") returned 1 [0176.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e378 [0176.197] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.197] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.197] wcscat (in: _Dest=0x674e378, _Source="reflow.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" [0176.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0176.197] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="SAVEAS~1.DEU")) returned 1 [0176.197] wcscmp (_String1="SaveAsRTF.DEU", _String2=".") returned 1 [0176.197] wcscmp (_String1="SaveAsRTF.DEU", _String2="..") returned 1 [0176.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69594a8 [0176.198] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.198] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.198] wcscat (in: _Dest=0x69594a8, _Source="SaveAsRTF.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" [0176.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0176.199] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1 [0176.199] wcscmp (_String1="Search.DEU", _String2=".") returned 1 [0176.199] wcscmp (_String1="Search.DEU", _String2="..") returned 1 [0176.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e888 [0176.199] wcscpy (in: _Dest=0x674e888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.199] wcscat (in: _Dest=0x674e888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.199] wcscat (in: _Dest=0x674e888, _Source="Search.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" [0176.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0176.200] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1 [0176.200] wcscmp (_String1="SendMail.deu", _String2=".") returned 1 [0176.200] wcscmp (_String1="SendMail.deu", _String2="..") returned 1 [0176.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d7a8 [0176.200] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.200] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.200] wcscat (in: _Dest=0x674d7a8, _Source="SendMail.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" [0176.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0176.201] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0176.201] wcscmp (_String1="Services", _String2=".") returned 1 [0176.201] wcscmp (_String1="Services", _String2="..") returned 1 [0176.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0148 [0176.201] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.201] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.201] wcscat (in: _Dest=0x66f0148, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0176.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0176.202] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1 [0176.202] wcscmp (_String1="Spelling.DEU", _String2=".") returned 1 [0176.202] wcscmp (_String1="Spelling.DEU", _String2="..") returned 1 [0176.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ccf8 [0176.202] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.202] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.202] wcscat (in: _Dest=0x674ccf8, _Source="Spelling.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" [0176.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0176.203] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1 [0176.203] wcscmp (_String1="updater.DEU", _String2=".") returned 1 [0176.203] wcscmp (_String1="updater.DEU", _String2="..") returned 1 [0176.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d718 [0176.204] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.204] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.204] wcscat (in: _Dest=0x674d718, _Source="updater.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" [0176.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0176.205] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1 [0176.205] wcscmp (_String1="Weblink.DEU", _String2=".") returned 1 [0176.205] wcscmp (_String1="Weblink.DEU", _String2="..") returned 1 [0176.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d208 [0176.205] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0176.205] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0176.205] wcscat (in: _Dest=0x674d208, _Source="Weblink.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" [0176.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0176.206] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0 [0176.206] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0176.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0176.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 [0176.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 Thread: id = 2978 os_tid = 0xb1c [0160.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f7f0 [0160.293] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0160.293] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0160.293] wcscat (in: _Dest=0x3e0f7f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*" [0160.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0160.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0165.568] wcscmp (_String1=".", _String2=".") returned 0 [0165.568] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.569] wcscmp (_String1="..", _String2=".") returned 1 [0165.569] wcscmp (_String1="..", _String2="..") returned 0 [0165.569] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="ACCESS~1.ESP")) returned 1 [0165.569] wcscmp (_String1="accessibility.ESP", _String2=".") returned 1 [0165.569] wcscmp (_String1="accessibility.ESP", _String2="..") returned 1 [0165.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e430 [0165.569] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0165.569] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0165.569] wcscat (in: _Dest=0x3e0e430, _Source="accessibility.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" [0170.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0170.148] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1 [0170.148] wcscmp (_String1="Acroform.ESP", _String2=".") returned 1 [0170.148] wcscmp (_String1="Acroform.ESP", _String2="..") returned 1 [0170.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac5e8 [0170.148] wcscpy (in: _Dest=0x68ac5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.148] wcscat (in: _Dest=0x68ac5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.148] wcscat (in: _Dest=0x68ac5e8, _Source="Acroform.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" [0170.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0170.150] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="ADOBEC~1.ESP")) returned 1 [0170.150] wcscmp (_String1="AdobeCollabSync.ESP", _String2=".") returned 1 [0170.150] wcscmp (_String1="AdobeCollabSync.ESP", _String2="..") returned 1 [0170.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0148 [0170.150] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.150] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.150] wcscat (in: _Dest=0x69c0148, _Source="AdobeCollabSync.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" [0170.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0170.151] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1 [0170.151] wcscmp (_String1="Annots.ESP", _String2=".") returned 1 [0170.151] wcscmp (_String1="Annots.ESP", _String2="..") returned 1 [0170.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac438 [0170.151] wcscpy (in: _Dest=0x68ac438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.151] wcscat (in: _Dest=0x68ac438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.151] wcscat (in: _Dest=0x68ac438, _Source="Annots.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" [0170.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0170.153] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="BRDLAN~1.ESP")) returned 1 [0170.153] wcscmp (_String1="BRdlang32.ESP", _String2=".") returned 1 [0170.153] wcscmp (_String1="BRdlang32.ESP", _String2="..") returned 1 [0170.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30648 [0170.153] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.153] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.153] wcscat (in: _Dest=0x3e30648, _Source="BRdlang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" [0170.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0170.154] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1 [0170.154] wcscmp (_String1="Checkers.ESP", _String2=".") returned 1 [0170.154] wcscmp (_String1="Checkers.ESP", _String2="..") returned 1 [0170.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac318 [0170.154] wcscpy (in: _Dest=0x68ac318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.154] wcscat (in: _Dest=0x68ac318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.155] wcscat (in: _Dest=0x68ac318, _Source="Checkers.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" [0170.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0170.158] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1 [0170.158] wcscmp (_String1="DigSig.ESP", _String2=".") returned 1 [0170.158] wcscmp (_String1="DigSig.ESP", _String2="..") returned 1 [0170.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac3a8 [0170.158] wcscpy (in: _Dest=0x68ac3a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.159] wcscat (in: _Dest=0x68ac3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.159] wcscat (in: _Dest=0x68ac3a8, _Source="DigSig.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" [0170.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0170.160] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1 [0170.160] wcscmp (_String1="DVA.ESP", _String2=".") returned 1 [0170.160] wcscmp (_String1="DVA.ESP", _String2="..") returned 1 [0170.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c128 [0170.160] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.160] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.160] wcscat (in: _Dest=0x682c128, _Source="DVA.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" [0170.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0170.162] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1 [0170.162] wcscmp (_String1="eBook.ESP", _String2=".") returned 1 [0170.162] wcscmp (_String1="eBook.ESP", _String2="..") returned 1 [0170.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac4c8 [0170.162] wcscpy (in: _Dest=0x68ac4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.162] wcscat (in: _Dest=0x68ac4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.162] wcscat (in: _Dest=0x68ac4c8, _Source="eBook.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" [0170.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0170.164] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1 [0170.164] wcscmp (_String1="EScript.ESP", _String2=".") returned 1 [0170.164] wcscmp (_String1="EScript.ESP", _String2="..") returned 1 [0170.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac558 [0170.164] wcscpy (in: _Dest=0x68ac558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.164] wcscat (in: _Dest=0x68ac558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.164] wcscat (in: _Dest=0x68ac558, _Source="EScript.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" [0170.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0170.166] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1 [0170.166] wcscmp (_String1="IA32.ESP", _String2=".") returned 1 [0170.166] wcscmp (_String1="IA32.ESP", _String2="..") returned 1 [0170.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0170.166] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.166] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.166] wcscat (in: _Dest=0x682c348, _Source="IA32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" [0170.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0170.168] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="MAKEAC~1.ESP")) returned 1 [0170.168] wcscmp (_String1="makeaccessible.ESP", _String2=".") returned 1 [0170.168] wcscmp (_String1="makeaccessible.ESP", _String2="..") returned 1 [0170.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0968 [0170.168] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.168] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.168] wcscat (in: _Dest=0x69c0968, _Source="makeaccessible.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" [0170.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0170.169] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="MULTIM~1.ESP")) returned 1 [0170.169] wcscmp (_String1="Multimedia.ESP", _String2=".") returned 1 [0170.170] wcscmp (_String1="Multimedia.ESP", _String2="..") returned 1 [0170.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e305b0 [0170.170] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.170] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.170] wcscat (in: _Dest=0x3e305b0, _Source="Multimedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" [0170.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0170.171] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1 [0170.171] wcscmp (_String1="pddom.ESP", _String2=".") returned 1 [0170.171] wcscmp (_String1="pddom.ESP", _String2="..") returned 1 [0170.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac708 [0170.172] wcscpy (in: _Dest=0x68ac708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.172] wcscat (in: _Dest=0x68ac708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.172] wcscat (in: _Dest=0x68ac708, _Source="pddom.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" [0170.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0170.173] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1 [0170.173] wcscmp (_String1="PPKLITE.ESP", _String2=".") returned 1 [0170.173] wcscmp (_String1="PPKLITE.ESP", _String2="..") returned 1 [0170.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac798 [0170.173] wcscpy (in: _Dest=0x68ac798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.173] wcscat (in: _Dest=0x68ac798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.173] wcscat (in: _Dest=0x68ac798, _Source="PPKLITE.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" [0170.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0170.175] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1 [0170.175] wcscmp (_String1="RdLang32.ESP", _String2=".") returned 1 [0170.175] wcscmp (_String1="RdLang32.ESP", _String2="..") returned 1 [0170.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac828 [0170.175] wcscpy (in: _Dest=0x68ac828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.175] wcscat (in: _Dest=0x68ac828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.175] wcscat (in: _Dest=0x68ac828, _Source="RdLang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" [0170.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0170.178] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="READOU~1.ESP")) returned 1 [0170.178] wcscmp (_String1="ReadOutLoud.ESP", _String2=".") returned 1 [0170.178] wcscmp (_String1="ReadOutLoud.ESP", _String2="..") returned 1 [0170.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31a78 [0170.178] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.178] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.178] wcscat (in: _Dest=0x3e31a78, _Source="ReadOutLoud.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" [0170.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0170.179] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1 [0170.179] wcscmp (_String1="reflow.ESP", _String2=".") returned 1 [0170.179] wcscmp (_String1="reflow.ESP", _String2="..") returned 1 [0170.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac9d8 [0170.180] wcscpy (in: _Dest=0x68ac9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.180] wcscat (in: _Dest=0x68ac9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.180] wcscat (in: _Dest=0x68ac9d8, _Source="reflow.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" [0170.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0170.181] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="SAVEAS~1.ESP")) returned 1 [0170.181] wcscmp (_String1="SaveAsRTF.ESP", _String2=".") returned 1 [0170.181] wcscmp (_String1="SaveAsRTF.ESP", _String2="..") returned 1 [0170.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30810 [0170.182] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.182] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.182] wcscat (in: _Dest=0x3e30810, _Source="SaveAsRTF.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" [0170.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0170.183] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1 [0170.183] wcscmp (_String1="Search.ESP", _String2=".") returned 1 [0170.183] wcscmp (_String1="Search.ESP", _String2="..") returned 1 [0170.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac948 [0170.183] wcscpy (in: _Dest=0x68ac948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.183] wcscat (in: _Dest=0x68ac948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.183] wcscat (in: _Dest=0x68ac948, _Source="Search.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" [0170.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0170.185] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1 [0170.185] wcscmp (_String1="SendMail.ESP", _String2=".") returned 1 [0170.185] wcscmp (_String1="SendMail.ESP", _String2="..") returned 1 [0170.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac8b8 [0170.185] wcscpy (in: _Dest=0x68ac8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.185] wcscat (in: _Dest=0x68ac8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.185] wcscat (in: _Dest=0x68ac8b8, _Source="SendMail.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" [0170.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0170.186] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0170.187] wcscmp (_String1="Services", _String2=".") returned 1 [0170.187] wcscmp (_String1="Services", _String2="..") returned 1 [0170.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0170.187] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.187] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.187] wcscat (in: _Dest=0x682d1a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0170.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0170.188] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1 [0170.188] wcscmp (_String1="Spelling.ESP", _String2=".") returned 1 [0170.188] wcscmp (_String1="Spelling.ESP", _String2="..") returned 1 [0170.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68abce8 [0170.188] wcscpy (in: _Dest=0x68abce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.189] wcscat (in: _Dest=0x68abce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.189] wcscat (in: _Dest=0x68abce8, _Source="Spelling.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" [0170.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0170.190] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1 [0170.190] wcscmp (_String1="updater.ESP", _String2=".") returned 1 [0170.190] wcscmp (_String1="updater.ESP", _String2="..") returned 1 [0170.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68abd78 [0170.190] wcscpy (in: _Dest=0x68abd78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.190] wcscat (in: _Dest=0x68abd78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.190] wcscat (in: _Dest=0x68abd78, _Source="updater.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" [0170.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0170.341] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1 [0170.341] wcscmp (_String1="Weblink.ESP", _String2=".") returned 1 [0170.341] wcscmp (_String1="Weblink.ESP", _String2="..") returned 1 [0170.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68acf78 [0170.341] wcscpy (in: _Dest=0x68acf78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.341] wcscat (in: _Dest=0x68acf78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.341] wcscat (in: _Dest=0x68acf78, _Source="Weblink.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" [0172.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp")) returned 0x20 [0173.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0173.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.706] GetLastError () returned 0x5 [0173.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0173.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acf78) returned 1 [0173.706] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0 [0173.706] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0173.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0173.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 [0173.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 Thread: id = 2979 os_tid = 0xb5c [0160.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f2f0 [0160.293] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0160.293] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0160.293] wcscat (in: _Dest=0x3e0f2f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*" [0160.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0160.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0165.565] wcscmp (_String1=".", _String2=".") returned 0 [0165.565] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.565] wcscmp (_String1="..", _String2=".") returned 1 [0165.565] wcscmp (_String1="..", _String2="..") returned 0 [0165.565] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="ACCESS~1.EUQ")) returned 1 [0165.565] wcscmp (_String1="accessibility.EUQ", _String2=".") returned 1 [0165.565] wcscmp (_String1="accessibility.EUQ", _String2="..") returned 1 [0165.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0da30 [0165.566] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0165.566] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0165.566] wcscat (in: _Dest=0x3e0da30, _Source="accessibility.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" [0171.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq")) returned 0x20 [0171.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0171.785] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.785] GetLastError () returned 0x5 [0171.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0171.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 [0171.786] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1 [0171.786] wcscmp (_String1="Acroform.EUQ", _String2=".") returned 1 [0171.786] wcscmp (_String1="Acroform.EUQ", _String2="..") returned 1 [0171.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0171.786] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.786] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.786] wcscat (in: _Dest=0x66dc9d8, _Source="Acroform.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" [0171.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq")) returned 0x20 [0171.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0171.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.809] GetLastError () returned 0x5 [0171.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0171.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.809] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="ADOBEC~1.EUQ")) returned 1 [0171.809] wcscmp (_String1="AdobeCollabSync.EUQ", _String2=".") returned 1 [0171.809] wcscmp (_String1="AdobeCollabSync.EUQ", _String2="..") returned 1 [0171.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d5d0 [0171.809] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.809] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.809] wcscat (in: _Dest=0x3e0d5d0, _Source="AdobeCollabSync.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" [0171.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq")) returned 0x20 [0171.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0171.810] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.810] GetLastError () returned 0x5 [0171.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0171.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0171.810] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1 [0171.810] wcscmp (_String1="Annots.EUQ", _String2=".") returned 1 [0171.810] wcscmp (_String1="Annots.EUQ", _String2="..") returned 1 [0171.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0171.810] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.811] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.811] wcscat (in: _Dest=0x66dc9d8, _Source="Annots.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" [0171.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq")) returned 0x20 [0171.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0171.850] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.850] GetLastError () returned 0x5 [0171.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0171.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.850] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="BRDLAN~1.EUQ")) returned 1 [0171.850] wcscmp (_String1="BRdlang32.EUQ", _String2=".") returned 1 [0171.851] wcscmp (_String1="BRdlang32.EUQ", _String2="..") returned 1 [0171.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.851] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.851] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.851] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" [0171.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq")) returned 0x20 [0171.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0171.851] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.851] GetLastError () returned 0x5 [0171.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0171.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.852] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1 [0171.852] wcscmp (_String1="Checkers.EUQ", _String2=".") returned 1 [0171.852] wcscmp (_String1="Checkers.EUQ", _String2="..") returned 1 [0171.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0171.852] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.852] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.852] wcscat (in: _Dest=0x66dc9d8, _Source="Checkers.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" [0171.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq")) returned 0x20 [0171.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0171.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.853] GetLastError () returned 0x5 [0171.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0171.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.853] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1 [0171.853] wcscmp (_String1="DigSig.EUQ", _String2=".") returned 1 [0171.853] wcscmp (_String1="DigSig.EUQ", _String2="..") returned 1 [0171.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0171.853] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.853] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.853] wcscat (in: _Dest=0x66dc9d8, _Source="DigSig.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" [0171.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq")) returned 0x20 [0171.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0171.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.854] GetLastError () returned 0x5 [0171.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0171.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.854] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1 [0171.854] wcscmp (_String1="DVA.EUQ", _String2=".") returned 1 [0171.854] wcscmp (_String1="DVA.EUQ", _String2="..") returned 1 [0171.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682dbb8 [0171.854] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.854] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.854] wcscat (in: _Dest=0x682dbb8, _Source="DVA.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" [0171.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq")) returned 0x20 [0171.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0171.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.855] GetLastError () returned 0x5 [0171.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0171.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 [0171.855] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1 [0171.855] wcscmp (_String1="eBook.EUQ", _String2=".") returned 1 [0171.855] wcscmp (_String1="eBook.EUQ", _String2="..") returned 1 [0171.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0171.855] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.855] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.855] wcscat (in: _Dest=0x66dc9d8, _Source="eBook.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" [0171.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq")) returned 0x20 [0171.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0171.856] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.856] GetLastError () returned 0x5 [0171.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0171.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.856] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1 [0171.856] wcscmp (_String1="EScript.EUQ", _String2=".") returned 1 [0171.856] wcscmp (_String1="EScript.EUQ", _String2="..") returned 1 [0171.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0171.856] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.856] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.856] wcscat (in: _Dest=0x66dc9d8, _Source="EScript.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" [0171.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq")) returned 0x20 [0171.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0171.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.888] GetLastError () returned 0x5 [0171.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0171.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.888] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1 [0171.888] wcscmp (_String1="IA32.EUQ", _String2=".") returned 1 [0171.888] wcscmp (_String1="IA32.EUQ", _String2="..") returned 1 [0171.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0171.889] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.889] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.889] wcscat (in: _Dest=0x682c9a8, _Source="IA32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" [0171.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq")) returned 0x20 [0171.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0171.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.946] GetLastError () returned 0x5 [0171.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0171.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0171.946] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="MAKEAC~1.EUQ")) returned 1 [0171.946] wcscmp (_String1="makeaccessible.EUQ", _String2=".") returned 1 [0171.946] wcscmp (_String1="makeaccessible.EUQ", _String2="..") returned 1 [0171.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0171.946] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.946] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.946] wcscat (in: _Dest=0x3e0d210, _Source="makeaccessible.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" [0171.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq")) returned 0x20 [0171.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0171.947] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.947] GetLastError () returned 0x5 [0171.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0171.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.947] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="MULTIM~1.EUQ")) returned 1 [0171.947] wcscmp (_String1="Multimedia.EUQ", _String2=".") returned 1 [0171.947] wcscmp (_String1="Multimedia.EUQ", _String2="..") returned 1 [0171.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0171.947] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.947] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.947] wcscat (in: _Dest=0x6958370, _Source="Multimedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" [0171.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq")) returned 0x20 [0171.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0171.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.948] GetLastError () returned 0x5 [0171.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0171.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.948] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1 [0171.948] wcscmp (_String1="pddom.EUQ", _String2=".") returned 1 [0171.948] wcscmp (_String1="pddom.EUQ", _String2="..") returned 1 [0171.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0171.948] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.948] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.948] wcscat (in: _Dest=0x66dd2d8, _Source="pddom.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" [0171.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq")) returned 0x20 [0171.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0171.969] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.969] GetLastError () returned 0x5 [0171.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0171.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.969] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1 [0171.969] wcscmp (_String1="PPKLite.EUQ", _String2=".") returned 1 [0171.969] wcscmp (_String1="PPKLite.EUQ", _String2="..") returned 1 [0171.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0171.969] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.969] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.969] wcscat (in: _Dest=0x66dd2d8, _Source="PPKLite.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" [0171.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq")) returned 0x20 [0171.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0171.970] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.970] GetLastError () returned 0x5 [0171.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0171.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.970] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1 [0171.970] wcscmp (_String1="RdLang32.EUQ", _String2=".") returned 1 [0171.970] wcscmp (_String1="RdLang32.EUQ", _String2="..") returned 1 [0171.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.970] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.970] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.970] wcscat (in: _Dest=0x66dd2d8, _Source="RdLang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" [0171.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq")) returned 0x20 [0171.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0171.971] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.971] GetLastError () returned 0x5 [0171.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0171.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.971] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="READOU~1.EUQ")) returned 1 [0171.971] wcscmp (_String1="ReadOutLoud.EUQ", _String2=".") returned 1 [0171.971] wcscmp (_String1="ReadOutLoud.EUQ", _String2="..") returned 1 [0171.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69589f8 [0171.971] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.971] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.971] wcscat (in: _Dest=0x69589f8, _Source="ReadOutLoud.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" [0171.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq")) returned 0x20 [0171.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0171.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.972] GetLastError () returned 0x5 [0171.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0171.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0171.972] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1 [0171.972] wcscmp (_String1="reflow.EUQ", _String2=".") returned 1 [0171.972] wcscmp (_String1="reflow.EUQ", _String2="..") returned 1 [0171.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.972] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.972] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.972] wcscat (in: _Dest=0x66dd2d8, _Source="reflow.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" [0171.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq")) returned 0x20 [0171.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0171.973] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.973] GetLastError () returned 0x5 [0171.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0171.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.973] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="SAVEAS~1.EUQ")) returned 1 [0171.973] wcscmp (_String1="SaveAsRTF.EUQ", _String2=".") returned 1 [0171.973] wcscmp (_String1="SaveAsRTF.EUQ", _String2="..") returned 1 [0171.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0171.973] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.973] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.973] wcscat (in: _Dest=0x69589f8, _Source="SaveAsRTF.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" [0171.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq")) returned 0x20 [0171.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0171.973] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.974] GetLastError () returned 0x5 [0171.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0171.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0171.974] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1 [0171.974] wcscmp (_String1="Search.EUQ", _String2=".") returned 1 [0171.974] wcscmp (_String1="Search.EUQ", _String2="..") returned 1 [0171.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.974] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.974] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.974] wcscat (in: _Dest=0x66dd2d8, _Source="Search.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" [0171.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq")) returned 0x20 [0171.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0171.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.974] GetLastError () returned 0x5 [0171.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0171.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.975] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1 [0171.975] wcscmp (_String1="SendMail.EUQ", _String2=".") returned 1 [0171.975] wcscmp (_String1="SendMail.EUQ", _String2="..") returned 1 [0171.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.975] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.975] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.975] wcscat (in: _Dest=0x66dd2d8, _Source="SendMail.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" [0171.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq")) returned 0x20 [0171.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0171.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.976] GetLastError () returned 0x5 [0171.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0171.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.976] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.976] wcscmp (_String1="Services", _String2=".") returned 1 [0171.976] wcscmp (_String1="Services", _String2="..") returned 1 [0171.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0171.976] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0171.976] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0171.976] wcscat (in: _Dest=0x682c9a8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0171.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.976] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0171.976] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0171.976] wcscat (in: _Dest=0x66dd2d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*" [0171.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0171.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0172.068] wcscmp (_String1=".", _String2=".") returned 0 [0172.068] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.068] wcscmp (_String1="..", _String2=".") returned 1 [0172.068] wcscmp (_String1="..", _String2="..") returned 0 [0172.068] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0172.068] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0172.068] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0172.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0172.068] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0172.068] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0172.068] wcscat (in: _Dest=0x697ea08, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" [0172.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx")) returned 0x20 [0172.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.069] GetLastError () returned 0x5 [0172.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0172.069] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.069] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.069] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0172.070] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0172.070] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0172.070] wcscat (in: _Dest=0x697ea08, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" [0172.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx")) returned 0x20 [0172.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.070] GetLastError () returned 0x5 [0172.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.071] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0172.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0172.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0172.071] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1 [0172.071] wcscmp (_String1="Spelling.EUQ", _String2=".") returned 1 [0172.071] wcscmp (_String1="Spelling.EUQ", _String2="..") returned 1 [0172.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0172.071] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0172.071] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0172.071] wcscat (in: _Dest=0x66dd2d8, _Source="Spelling.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" [0172.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq")) returned 0x20 [0172.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0172.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.072] GetLastError () returned 0x5 [0172.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0172.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.072] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1 [0172.072] wcscmp (_String1="updater.EUQ", _String2=".") returned 1 [0172.072] wcscmp (_String1="updater.EUQ", _String2="..") returned 1 [0172.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0172.072] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0172.073] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0172.073] wcscat (in: _Dest=0x66dd2d8, _Source="updater.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" [0172.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq")) returned 0x20 [0172.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0172.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.073] GetLastError () returned 0x5 [0172.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0172.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.073] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1 [0172.074] wcscmp (_String1="WebLink.EUQ", _String2=".") returned 1 [0172.074] wcscmp (_String1="WebLink.EUQ", _String2="..") returned 1 [0172.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0172.074] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0172.074] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0172.074] wcscat (in: _Dest=0x66dd2d8, _Source="WebLink.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" [0172.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq")) returned 0x20 [0172.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0172.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.074] GetLastError () returned 0x5 [0172.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0172.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.075] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0 [0172.075] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0172.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0172.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 [0172.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 2980 os_tid = 0xb24 [0160.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e100f0 [0160.294] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0160.294] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0160.294] wcscat (in: _Dest=0x3e100f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*" [0160.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0160.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24a0 [0165.567] wcscmp (_String1=".", _String2=".") returned 0 [0165.567] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.567] wcscmp (_String1="..", _String2=".") returned 1 [0165.567] wcscmp (_String1="..", _String2="..") returned 0 [0165.567] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="ACCESS~1.SUO")) returned 1 [0165.567] wcscmp (_String1="accessibility.SUO", _String2=".") returned 1 [0165.567] wcscmp (_String1="accessibility.SUO", _String2="..") returned 1 [0165.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d5d0 [0165.567] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0165.567] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0165.567] wcscat (in: _Dest=0x3e0d5d0, _Source="accessibility.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" [0171.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo")) returned 0x20 [0171.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0171.798] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.798] GetLastError () returned 0x5 [0171.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0171.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0171.799] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1 [0171.799] wcscmp (_String1="Acroform.SUO", _String2=".") returned 1 [0171.799] wcscmp (_String1="Acroform.SUO", _String2="..") returned 1 [0171.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd368 [0171.799] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.799] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.799] wcscat (in: _Dest=0x66dd368, _Source="Acroform.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" [0171.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo")) returned 0x20 [0171.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0171.833] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.833] GetLastError () returned 0x5 [0171.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0171.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 [0171.834] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="ADOBEC~1.SUO")) returned 1 [0171.834] wcscmp (_String1="AdobeCollabSync.SUO", _String2=".") returned 1 [0171.834] wcscmp (_String1="AdobeCollabSync.SUO", _String2="..") returned 1 [0171.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d210 [0171.834] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.834] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.834] wcscat (in: _Dest=0x3e0d210, _Source="AdobeCollabSync.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" [0171.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo")) returned 0x20 [0171.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0171.872] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.872] GetLastError () returned 0x5 [0171.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0171.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.873] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1 [0171.873] wcscmp (_String1="Annots.SUO", _String2=".") returned 1 [0171.873] wcscmp (_String1="Annots.SUO", _String2="..") returned 1 [0171.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc828 [0171.873] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.873] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.873] wcscat (in: _Dest=0x66dc828, _Source="Annots.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" [0171.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo")) returned 0x20 [0171.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0171.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.873] GetLastError () returned 0x5 [0171.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0171.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.874] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="BRDLAN~1.SUO")) returned 1 [0171.874] wcscmp (_String1="BRdlang32.SUO", _String2=".") returned 1 [0171.874] wcscmp (_String1="BRdlang32.SUO", _String2="..") returned 1 [0171.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.874] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.874] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.874] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" [0171.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 0x20 [0171.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0171.874] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.875] GetLastError () returned 0x5 [0171.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0171.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.875] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1 [0171.875] wcscmp (_String1="Checkers.SUO", _String2=".") returned 1 [0171.875] wcscmp (_String1="Checkers.SUO", _String2="..") returned 1 [0171.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0171.875] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.875] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.875] wcscat (in: _Dest=0x66dc828, _Source="Checkers.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" [0171.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo")) returned 0x20 [0171.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0171.876] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.876] GetLastError () returned 0x5 [0171.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0171.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.876] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1 [0171.876] wcscmp (_String1="DigSig.SUO", _String2=".") returned 1 [0171.876] wcscmp (_String1="DigSig.SUO", _String2="..") returned 1 [0171.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc828 [0171.876] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.876] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.876] wcscat (in: _Dest=0x66dc828, _Source="DigSig.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" [0171.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo")) returned 0x20 [0171.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0171.877] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.877] GetLastError () returned 0x5 [0171.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0171.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.877] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1 [0171.877] wcscmp (_String1="DVA.SUO", _String2=".") returned 1 [0171.877] wcscmp (_String1="DVA.SUO", _String2="..") returned 1 [0171.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bce8 [0171.877] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.877] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.877] wcscat (in: _Dest=0x682bce8, _Source="DVA.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" [0171.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 0x20 [0171.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0171.878] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.878] GetLastError () returned 0x5 [0171.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0171.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.878] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1 [0171.878] wcscmp (_String1="eBook.SUO", _String2=".") returned 1 [0171.878] wcscmp (_String1="eBook.SUO", _String2="..") returned 1 [0171.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0171.878] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.878] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.878] wcscat (in: _Dest=0x66dc828, _Source="eBook.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" [0171.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo")) returned 0x20 [0171.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0171.879] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.879] GetLastError () returned 0x5 [0171.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0171.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.879] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1 [0171.879] wcscmp (_String1="EScript.SUO", _String2=".") returned 1 [0171.879] wcscmp (_String1="EScript.SUO", _String2="..") returned 1 [0171.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc828 [0171.879] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.879] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.879] wcscat (in: _Dest=0x66dc828, _Source="EScript.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" [0171.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo")) returned 0x20 [0171.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0171.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.880] GetLastError () returned 0x5 [0171.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0171.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.880] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1 [0171.880] wcscmp (_String1="IA32.SUO", _String2=".") returned 1 [0171.880] wcscmp (_String1="IA32.SUO", _String2="..") returned 1 [0171.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0171.880] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.880] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.880] wcscat (in: _Dest=0x682bce8, _Source="IA32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" [0171.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo")) returned 0x20 [0171.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0171.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.907] GetLastError () returned 0x5 [0171.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0171.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.908] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="MAKEAC~1.SUO")) returned 1 [0171.908] wcscmp (_String1="makeaccessible.SUO", _String2=".") returned 1 [0171.908] wcscmp (_String1="makeaccessible.SUO", _String2="..") returned 1 [0171.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0171.908] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.908] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.908] wcscat (in: _Dest=0x3e0d210, _Source="makeaccessible.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" [0171.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo")) returned 0x20 [0171.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0171.908] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.908] GetLastError () returned 0x5 [0171.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0171.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.909] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2a2600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="MULTIM~1.SUO")) returned 1 [0171.909] wcscmp (_String1="Multimedia.SUO", _String2=".") returned 1 [0171.909] wcscmp (_String1="Multimedia.SUO", _String2="..") returned 1 [0171.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0171.909] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.909] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.909] wcscat (in: _Dest=0x6958370, _Source="Multimedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" [0171.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 0x20 [0171.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0171.909] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.909] GetLastError () returned 0x5 [0171.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0171.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.910] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1 [0171.910] wcscmp (_String1="pddom.SUO", _String2=".") returned 1 [0171.910] wcscmp (_String1="pddom.SUO", _String2="..") returned 1 [0171.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0171.910] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.910] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.910] wcscat (in: _Dest=0x66dc9d8, _Source="pddom.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" [0171.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 0x20 [0171.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0171.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.913] GetLastError () returned 0x5 [0171.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0171.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.913] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1 [0171.913] wcscmp (_String1="PPKLITE.SUO", _String2=".") returned 1 [0171.913] wcscmp (_String1="PPKLITE.SUO", _String2="..") returned 1 [0171.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0171.913] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.913] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.913] wcscat (in: _Dest=0x66dc9d8, _Source="PPKLITE.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" [0171.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 0x20 [0171.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0171.914] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.914] GetLastError () returned 0x5 [0171.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0171.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.914] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1 [0171.914] wcscmp (_String1="RdLang32.SUO", _String2=".") returned 1 [0171.914] wcscmp (_String1="RdLang32.SUO", _String2="..") returned 1 [0171.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0171.914] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.914] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.914] wcscat (in: _Dest=0x66dc9d8, _Source="RdLang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" [0171.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo")) returned 0x20 [0171.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0171.915] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.915] GetLastError () returned 0x5 [0171.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0171.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.915] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="READOU~1.SUO")) returned 1 [0171.915] wcscmp (_String1="ReadOutLoud.SUO", _String2=".") returned 1 [0171.915] wcscmp (_String1="ReadOutLoud.SUO", _String2="..") returned 1 [0171.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0171.915] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.915] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.915] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" [0171.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo")) returned 0x20 [0171.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0171.916] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.916] GetLastError () returned 0x5 [0171.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0171.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.916] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1 [0171.916] wcscmp (_String1="reflow.SUO", _String2=".") returned 1 [0171.916] wcscmp (_String1="reflow.SUO", _String2="..") returned 1 [0171.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0171.916] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.916] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.916] wcscat (in: _Dest=0x66dc9d8, _Source="reflow.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" [0171.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo")) returned 0x20 [0171.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0171.917] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.917] GetLastError () returned 0x5 [0171.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0171.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.917] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="SAVEAS~1.SUO")) returned 1 [0171.917] wcscmp (_String1="SaveAsRTF.SUO", _String2=".") returned 1 [0171.917] wcscmp (_String1="SaveAsRTF.SUO", _String2="..") returned 1 [0171.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.917] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.917] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.917] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" [0171.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo")) returned 0x20 [0171.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0171.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.918] GetLastError () returned 0x5 [0171.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0171.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.918] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1 [0171.918] wcscmp (_String1="Search.SUO", _String2=".") returned 1 [0171.918] wcscmp (_String1="Search.SUO", _String2="..") returned 1 [0171.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0171.918] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.918] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.918] wcscat (in: _Dest=0x66dc9d8, _Source="Search.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" [0171.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo")) returned 0x20 [0171.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0171.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.919] GetLastError () returned 0x5 [0171.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0171.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.919] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1 [0171.919] wcscmp (_String1="SendMail.SUO", _String2=".") returned 1 [0171.919] wcscmp (_String1="SendMail.SUO", _String2="..") returned 1 [0171.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0171.919] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.919] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.919] wcscat (in: _Dest=0x66dc9d8, _Source="SendMail.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" [0171.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo")) returned 0x20 [0171.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0171.919] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.920] GetLastError () returned 0x5 [0171.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0171.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.920] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.920] wcscmp (_String1="Services", _String2=".") returned 1 [0171.920] wcscmp (_String1="Services", _String2="..") returned 1 [0171.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0171.920] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.920] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.920] wcscat (in: _Dest=0x682bce8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0171.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0171.920] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0171.920] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0171.920] wcscat (in: _Dest=0x66dc9d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*" [0171.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0171.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0171.921] wcscmp (_String1=".", _String2=".") returned 0 [0171.921] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.921] wcscmp (_String1="..", _String2=".") returned 1 [0171.921] wcscmp (_String1="..", _String2="..") returned 0 [0171.921] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.921] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.921] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dce8 [0171.921] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0171.921] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0171.921] wcscat (in: _Dest=0x697dce8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" [0171.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx")) returned 0x20 [0171.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.951] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.951] GetLastError () returned 0x5 [0171.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0171.951] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.951] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.951] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dce8 [0171.951] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0171.951] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0171.951] wcscat (in: _Dest=0x697dce8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" [0171.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx")) returned 0x20 [0171.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.982] GetLastError () returned 0x5 [0171.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0171.983] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0171.983] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0171.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0171.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.983] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1 [0171.983] wcscmp (_String1="Spelling.SUO", _String2=".") returned 1 [0171.983] wcscmp (_String1="Spelling.SUO", _String2="..") returned 1 [0171.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0171.983] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.983] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.983] wcscat (in: _Dest=0x66dc9d8, _Source="Spelling.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" [0171.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 0x20 [0171.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0171.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.984] GetLastError () returned 0x5 [0171.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0171.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0171.984] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1 [0171.984] wcscmp (_String1="updater.SUO", _String2=".") returned 1 [0171.984] wcscmp (_String1="updater.SUO", _String2="..") returned 1 [0171.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0171.984] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0171.984] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0171.984] wcscat (in: _Dest=0x66dc9d8, _Source="updater.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" [0171.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 0x20 [0172.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0172.080] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.080] GetLastError () returned 0x5 [0172.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0172.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.080] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1 [0172.080] wcscmp (_String1="Weblink.SUO", _String2=".") returned 1 [0172.080] wcscmp (_String1="Weblink.SUO", _String2="..") returned 1 [0172.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.080] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0172.080] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0172.080] wcscat (in: _Dest=0x66dc9d8, _Source="Weblink.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" [0172.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo")) returned 0x20 [0172.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0172.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.081] GetLastError () returned 0x5 [0172.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0172.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.081] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0 [0172.081] FindClose (in: hFindFile=0x66d24a0 | out: hFindFile=0x66d24a0) returned 1 [0172.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0172.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 [0172.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 Thread: id = 2981 os_tid = 0xebc [0160.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10f70 [0160.295] wcscpy (in: _Dest=0x3e10f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0160.295] wcscat (in: _Dest=0x3e10f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0160.295] wcscat (in: _Dest=0x3e10f70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*" [0160.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0160.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0165.564] wcscmp (_String1=".", _String2=".") returned 0 [0165.564] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.564] wcscmp (_String1="..", _String2=".") returned 1 [0165.564] wcscmp (_String1="..", _String2="..") returned 0 [0165.564] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1 [0165.565] wcscmp (_String1="accessibility.FRA", _String2=".") returned 1 [0165.565] wcscmp (_String1="accessibility.FRA", _String2="..") returned 1 [0165.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d170 [0165.565] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0165.565] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0165.565] wcscat (in: _Dest=0x3e0d170, _Source="accessibility.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" [0166.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0166.685] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0166.685] wcscmp (_String1="Acroform.FRA", _String2=".") returned 1 [0166.685] wcscmp (_String1="Acroform.FRA", _String2="..") returned 1 [0166.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e528 [0166.685] wcscpy (in: _Dest=0x674e528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.685] wcscat (in: _Dest=0x674e528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.685] wcscat (in: _Dest=0x674e528, _Source="Acroform.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" [0166.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0166.687] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1 [0166.687] wcscmp (_String1="AdobeCollabSync.FRA", _String2=".") returned 1 [0166.687] wcscmp (_String1="AdobeCollabSync.FRA", _String2="..") returned 1 [0166.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0166.687] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.687] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.687] wcscat (in: _Dest=0x69c03c8, _Source="AdobeCollabSync.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" [0166.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0166.688] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0166.688] wcscmp (_String1="Annots.FRA", _String2=".") returned 1 [0166.688] wcscmp (_String1="Annots.FRA", _String2="..") returned 1 [0166.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cab8 [0166.688] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.688] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.688] wcscat (in: _Dest=0x674cab8, _Source="Annots.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" [0166.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0166.689] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1 [0166.689] wcscmp (_String1="BRdlang32.FRA", _String2=".") returned 1 [0166.689] wcscmp (_String1="BRdlang32.FRA", _String2="..") returned 1 [0166.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958668 [0166.690] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.690] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.690] wcscat (in: _Dest=0x6958668, _Source="BRdlang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" [0166.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0166.691] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0166.691] wcscmp (_String1="Checkers.FRA", _String2=".") returned 1 [0166.691] wcscmp (_String1="Checkers.FRA", _String2="..") returned 1 [0166.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d718 [0166.691] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.691] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.691] wcscat (in: _Dest=0x674d718, _Source="Checkers.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" [0166.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0166.692] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0166.692] wcscmp (_String1="DigSig.FRA", _String2=".") returned 1 [0166.692] wcscmp (_String1="DigSig.FRA", _String2="..") returned 1 [0166.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674db08 [0166.692] wcscpy (in: _Dest=0x674db08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.692] wcscat (in: _Dest=0x674db08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.693] wcscat (in: _Dest=0x674db08, _Source="DigSig.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" [0166.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0166.694] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0166.694] wcscmp (_String1="DVA.FRA", _String2=".") returned 1 [0166.694] wcscmp (_String1="DVA.FRA", _String2="..") returned 1 [0166.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26508 [0166.694] wcscpy (in: _Dest=0x3f26508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.694] wcscat (in: _Dest=0x3f26508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.694] wcscat (in: _Dest=0x3f26508, _Source="DVA.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" [0166.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0166.695] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0166.695] wcscmp (_String1="eBook.FRA", _String2=".") returned 1 [0166.695] wcscmp (_String1="eBook.FRA", _String2="..") returned 1 [0166.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e0a8 [0166.695] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.695] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.695] wcscat (in: _Dest=0x674e0a8, _Source="eBook.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" [0166.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0166.697] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0166.697] wcscmp (_String1="EScript.fra", _String2=".") returned 1 [0166.697] wcscmp (_String1="EScript.fra", _String2="..") returned 1 [0166.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e498 [0166.697] wcscpy (in: _Dest=0x674e498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.697] wcscat (in: _Dest=0x674e498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.697] wcscat (in: _Dest=0x674e498, _Source="EScript.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" [0166.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0166.698] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0166.698] wcscmp (_String1="IA32.FRA", _String2=".") returned 1 [0166.698] wcscmp (_String1="IA32.FRA", _String2="..") returned 1 [0166.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f266a0 [0166.698] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.698] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.698] wcscat (in: _Dest=0x3f266a0, _Source="IA32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" [0166.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0166.699] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="MAKEAC~1.FRA")) returned 1 [0166.699] wcscmp (_String1="makeaccessible.FRA", _String2=".") returned 1 [0166.699] wcscmp (_String1="makeaccessible.FRA", _String2="..") returned 1 [0166.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0166.699] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.700] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.700] wcscat (in: _Dest=0x69c1188, _Source="makeaccessible.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" [0166.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0166.701] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="MULTIM~1.FRA")) returned 1 [0166.701] wcscmp (_String1="Multimedia.FRA", _String2=".") returned 1 [0166.701] wcscmp (_String1="Multimedia.FRA", _String2="..") returned 1 [0166.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0166.701] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.701] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.701] wcscat (in: _Dest=0x6958370, _Source="Multimedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" [0166.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0166.702] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0166.702] wcscmp (_String1="pddom.FRA", _String2=".") returned 1 [0166.702] wcscmp (_String1="pddom.FRA", _String2="..") returned 1 [0166.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cb48 [0166.702] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.702] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.702] wcscat (in: _Dest=0x674cb48, _Source="pddom.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" [0166.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0166.703] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0166.703] wcscmp (_String1="PPKLITE.FRA", _String2=".") returned 1 [0166.703] wcscmp (_String1="PPKLITE.FRA", _String2="..") returned 1 [0166.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d0e8 [0166.704] wcscpy (in: _Dest=0x674d0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.704] wcscat (in: _Dest=0x674d0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.704] wcscat (in: _Dest=0x674d0e8, _Source="PPKLITE.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" [0166.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0166.705] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0166.705] wcscmp (_String1="RdLang32.FRA", _String2=".") returned 1 [0166.705] wcscmp (_String1="RdLang32.FRA", _String2="..") returned 1 [0166.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d178 [0166.705] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.705] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.705] wcscat (in: _Dest=0x674d178, _Source="RdLang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" [0166.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0166.706] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="READOU~1.FRA")) returned 1 [0166.706] wcscmp (_String1="ReadOutLoud.FRA", _String2=".") returned 1 [0166.706] wcscmp (_String1="ReadOutLoud.FRA", _String2="..") returned 1 [0166.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959378 [0166.706] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.706] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.706] wcscat (in: _Dest=0x6959378, _Source="ReadOutLoud.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" [0166.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0166.707] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0166.707] wcscmp (_String1="reflow.FRA", _String2=".") returned 1 [0166.708] wcscmp (_String1="reflow.FRA", _String2="..") returned 1 [0166.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d208 [0166.708] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.708] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.708] wcscat (in: _Dest=0x674d208, _Source="reflow.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" [0166.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0166.709] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="SAVEAS~1.FRA")) returned 1 [0166.709] wcscmp (_String1="SaveAsRTF.FRA", _String2=".") returned 1 [0166.709] wcscmp (_String1="SaveAsRTF.FRA", _String2="..") returned 1 [0166.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69592e0 [0166.709] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.709] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.709] wcscat (in: _Dest=0x69592e0, _Source="SaveAsRTF.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" [0166.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0166.710] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0166.710] wcscmp (_String1="Search.FRA", _String2=".") returned 1 [0166.710] wcscmp (_String1="Search.FRA", _String2="..") returned 1 [0166.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d298 [0166.710] wcscpy (in: _Dest=0x674d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.710] wcscat (in: _Dest=0x674d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.710] wcscat (in: _Dest=0x674d298, _Source="Search.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" [0166.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0166.711] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0166.711] wcscmp (_String1="SendMail.fra", _String2=".") returned 1 [0166.711] wcscmp (_String1="SendMail.fra", _String2="..") returned 1 [0166.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cea8 [0166.712] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.712] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.712] wcscat (in: _Dest=0x674cea8, _Source="SendMail.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" [0166.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0166.713] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.713] wcscmp (_String1="Services", _String2=".") returned 1 [0166.713] wcscmp (_String1="Services", _String2="..") returned 1 [0166.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f272d8 [0166.713] wcscpy (in: _Dest=0x3f272d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.713] wcscat (in: _Dest=0x3f272d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.713] wcscat (in: _Dest=0x3f272d8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0166.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f272d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0166.714] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0166.714] wcscmp (_String1="Spelling.FRA", _String2=".") returned 1 [0166.714] wcscmp (_String1="Spelling.FRA", _String2="..") returned 1 [0166.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cc68 [0166.714] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.714] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.714] wcscat (in: _Dest=0x674cc68, _Source="Spelling.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" [0166.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0166.715] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0166.715] wcscmp (_String1="updater.FRA", _String2=".") returned 1 [0166.715] wcscmp (_String1="updater.FRA", _String2="..") returned 1 [0166.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d688 [0166.716] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.716] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.716] wcscat (in: _Dest=0x674d688, _Source="updater.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" [0166.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0166.717] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0166.717] wcscmp (_String1="Weblink.FRA", _String2=".") returned 1 [0166.717] wcscmp (_String1="Weblink.FRA", _String2="..") returned 1 [0166.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d328 [0166.717] wcscpy (in: _Dest=0x674d328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0166.717] wcscat (in: _Dest=0x674d328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0166.717] wcscat (in: _Dest=0x674d328, _Source="Weblink.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" [0166.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0166.718] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0166.718] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0166.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0166.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10f70) returned 1 [0166.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 Thread: id = 2982 os_tid = 0x10c8 [0160.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f9f0 [0160.296] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0160.296] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0160.296] wcscat (in: _Dest=0x3e0f9f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*" [0160.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0160.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0165.566] wcscmp (_String1=".", _String2=".") returned 0 [0165.566] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.566] wcscmp (_String1="..", _String2=".") returned 1 [0165.566] wcscmp (_String1="..", _String2="..") returned 0 [0165.566] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="ACCESS~1.HRV")) returned 1 [0165.566] wcscmp (_String1="Accessibility.HRV", _String2=".") returned 1 [0165.566] wcscmp (_String1="Accessibility.HRV", _String2="..") returned 1 [0165.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d8f0 [0165.566] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0165.566] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0165.566] wcscat (in: _Dest=0x3e0d8f0, _Source="Accessibility.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" [0171.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv")) returned 0x20 [0171.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0171.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.778] GetLastError () returned 0x5 [0171.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0171.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 [0171.779] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0171.779] wcscmp (_String1="Acroform.HRV", _String2=".") returned 1 [0171.779] wcscmp (_String1="Acroform.HRV", _String2="..") returned 1 [0171.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.779] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.779] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.779] wcscat (in: _Dest=0x66dd2d8, _Source="Acroform.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" [0171.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv")) returned 0x20 [0171.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0171.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.779] GetLastError () returned 0x5 [0171.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0171.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.780] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="ADOBEC~1.HRV")) returned 1 [0171.780] wcscmp (_String1="AdobeCollabSync.HRV", _String2=".") returned 1 [0171.780] wcscmp (_String1="AdobeCollabSync.HRV", _String2="..") returned 1 [0171.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0171.780] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.780] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.780] wcscat (in: _Dest=0x3e0d8f0, _Source="AdobeCollabSync.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" [0171.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv")) returned 0x20 [0171.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0171.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.780] GetLastError () returned 0x5 [0171.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0171.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 [0171.781] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0171.781] wcscmp (_String1="Annots.HRV", _String2=".") returned 1 [0171.781] wcscmp (_String1="Annots.HRV", _String2="..") returned 1 [0171.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.781] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.781] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.781] wcscat (in: _Dest=0x66dd2d8, _Source="Annots.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" [0171.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv")) returned 0x20 [0171.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0171.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.782] GetLastError () returned 0x5 [0171.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0171.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.782] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="BRDLAN~1.HRV")) returned 1 [0171.782] wcscmp (_String1="BRdlang32.HRV", _String2=".") returned 1 [0171.782] wcscmp (_String1="BRdlang32.HRV", _String2="..") returned 1 [0171.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0171.782] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.782] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.782] wcscat (in: _Dest=0x69589f8, _Source="BRdlang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" [0171.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv")) returned 0x20 [0171.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0171.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.783] GetLastError () returned 0x5 [0171.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0171.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0171.783] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0171.783] wcscmp (_String1="Checkers.HRV", _String2=".") returned 1 [0171.783] wcscmp (_String1="Checkers.HRV", _String2="..") returned 1 [0171.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.783] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.783] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.783] wcscat (in: _Dest=0x66dd2d8, _Source="Checkers.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" [0171.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv")) returned 0x20 [0171.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0171.783] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.783] GetLastError () returned 0x5 [0171.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0171.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.784] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0171.784] wcscmp (_String1="DigSig.HRV", _String2=".") returned 1 [0171.784] wcscmp (_String1="DigSig.HRV", _String2="..") returned 1 [0171.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.784] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.784] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.784] wcscat (in: _Dest=0x66dd2d8, _Source="DigSig.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" [0171.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv")) returned 0x20 [0171.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0171.800] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.800] GetLastError () returned 0x5 [0171.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0171.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.800] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0171.800] wcscmp (_String1="DVA.HRV", _String2=".") returned 1 [0171.800] wcscmp (_String1="DVA.HRV", _String2="..") returned 1 [0171.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0171.800] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.801] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.801] wcscat (in: _Dest=0x682c568, _Source="DVA.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" [0171.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv")) returned 0x20 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0171.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.801] GetLastError () returned 0x5 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0171.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0171.801] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0171.801] wcscmp (_String1="eBook.HRV", _String2=".") returned 1 [0171.801] wcscmp (_String1="eBook.HRV", _String2="..") returned 1 [0171.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0171.802] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.802] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.802] wcscat (in: _Dest=0x66dd2d8, _Source="eBook.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" [0171.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv")) returned 0x20 [0171.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0171.802] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.802] GetLastError () returned 0x5 [0171.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0171.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.802] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0171.802] wcscmp (_String1="EScript.HRV", _String2=".") returned 1 [0171.802] wcscmp (_String1="EScript.HRV", _String2="..") returned 1 [0171.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0171.802] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.802] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.803] wcscat (in: _Dest=0x66dd2d8, _Source="EScript.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" [0171.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv")) returned 0x20 [0171.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0171.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.803] GetLastError () returned 0x5 [0171.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0171.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.803] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0171.803] wcscmp (_String1="IA32.HRV", _String2=".") returned 1 [0171.803] wcscmp (_String1="IA32.HRV", _String2="..") returned 1 [0171.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0171.803] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.803] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.804] wcscat (in: _Dest=0x682c568, _Source="IA32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" [0171.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv")) returned 0x20 [0171.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0171.804] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.804] GetLastError () returned 0x5 [0171.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0171.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0171.804] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="MAKEAC~1.HRV")) returned 1 [0171.804] wcscmp (_String1="MakeAccessible.HRV", _String2=".") returned 1 [0171.804] wcscmp (_String1="MakeAccessible.HRV", _String2="..") returned 1 [0171.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d5d0 [0171.804] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.805] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.805] wcscat (in: _Dest=0x3e0d5d0, _Source="MakeAccessible.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" [0171.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv")) returned 0x20 [0171.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0171.805] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.805] GetLastError () returned 0x5 [0171.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0171.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0171.805] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="MULTIM~1.HRV")) returned 1 [0171.805] wcscmp (_String1="Multimedia.HRV", _String2=".") returned 1 [0171.805] wcscmp (_String1="Multimedia.HRV", _String2="..") returned 1 [0171.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0171.806] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.806] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.806] wcscat (in: _Dest=0x6958370, _Source="Multimedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" [0171.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv")) returned 0x20 [0171.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0171.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.806] GetLastError () returned 0x5 [0171.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0171.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.806] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0171.806] wcscmp (_String1="PDDom.HRV", _String2=".") returned 1 [0171.806] wcscmp (_String1="PDDom.HRV", _String2="..") returned 1 [0171.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0171.806] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.806] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.807] wcscat (in: _Dest=0x66dd2d8, _Source="PDDom.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" [0171.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv")) returned 0x20 [0171.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0171.807] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.807] GetLastError () returned 0x5 [0171.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0171.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.807] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0171.807] wcscmp (_String1="PPKLITE.HRV", _String2=".") returned 1 [0171.807] wcscmp (_String1="PPKLITE.HRV", _String2="..") returned 1 [0171.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0171.807] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.807] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.808] wcscat (in: _Dest=0x66dd2d8, _Source="PPKLITE.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" [0171.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv")) returned 0x20 [0171.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0171.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.835] GetLastError () returned 0x5 [0171.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0171.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.835] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0171.835] wcscmp (_String1="RdLang32.HRV", _String2=".") returned 1 [0171.835] wcscmp (_String1="RdLang32.HRV", _String2="..") returned 1 [0171.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.835] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.835] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.835] wcscat (in: _Dest=0x66dd2d8, _Source="RdLang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" [0171.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv")) returned 0x20 [0171.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0171.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.836] GetLastError () returned 0x5 [0171.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0171.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.836] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="READOU~1.HRV")) returned 1 [0171.836] wcscmp (_String1="ReadOutLoud.HRV", _String2=".") returned 1 [0171.836] wcscmp (_String1="ReadOutLoud.HRV", _String2="..") returned 1 [0171.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0171.836] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.836] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.836] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" [0171.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv")) returned 0x20 [0171.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0171.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.837] GetLastError () returned 0x5 [0171.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0171.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.837] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0171.837] wcscmp (_String1="Reflow.HRV", _String2=".") returned 1 [0171.837] wcscmp (_String1="Reflow.HRV", _String2="..") returned 1 [0171.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.837] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.837] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.837] wcscat (in: _Dest=0x66dd2d8, _Source="Reflow.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" [0171.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv")) returned 0x20 [0171.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0171.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.838] GetLastError () returned 0x5 [0171.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0171.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.838] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="SAVEAS~1.HRV")) returned 1 [0171.838] wcscmp (_String1="SaveAsRTF.HRV", _String2=".") returned 1 [0171.838] wcscmp (_String1="SaveAsRTF.HRV", _String2="..") returned 1 [0171.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.838] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.838] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.838] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" [0171.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv")) returned 0x20 [0171.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0171.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.839] GetLastError () returned 0x5 [0171.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0171.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.839] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0171.839] wcscmp (_String1="Search.HRV", _String2=".") returned 1 [0171.839] wcscmp (_String1="Search.HRV", _String2="..") returned 1 [0171.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.839] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.839] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.839] wcscat (in: _Dest=0x66dd2d8, _Source="Search.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" [0171.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv")) returned 0x20 [0171.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0171.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.846] GetLastError () returned 0x5 [0171.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0171.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.847] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0171.847] wcscmp (_String1="SendMail.HRV", _String2=".") returned 1 [0171.847] wcscmp (_String1="SendMail.HRV", _String2="..") returned 1 [0171.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.847] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.847] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.847] wcscat (in: _Dest=0x66dd2d8, _Source="SendMail.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" [0171.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv")) returned 0x20 [0171.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0171.847] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.848] GetLastError () returned 0x5 [0171.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0171.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.848] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.848] wcscmp (_String1="Services", _String2=".") returned 1 [0171.848] wcscmp (_String1="Services", _String2="..") returned 1 [0171.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0171.848] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.848] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.848] wcscat (in: _Dest=0x682c9a8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0171.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.848] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0171.848] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0171.848] wcscat (in: _Dest=0x66dd2d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*" [0171.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0171.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0171.849] wcscmp (_String1=".", _String2=".") returned 0 [0171.849] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.849] wcscmp (_String1="..", _String2=".") returned 1 [0171.849] wcscmp (_String1="..", _String2="..") returned 0 [0171.849] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.849] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.849] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d490 [0171.849] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0171.849] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0171.849] wcscat (in: _Dest=0x3e5d490, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" [0171.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx")) returned 0x20 [0171.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.882] GetLastError () returned 0x5 [0171.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 [0171.882] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.882] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.882] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d490 [0171.882] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0171.882] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0171.882] wcscat (in: _Dest=0x3e5d490, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" [0171.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx")) returned 0x20 [0171.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.883] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.883] GetLastError () returned 0x5 [0171.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 [0171.883] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0171.883] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0171.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0171.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0171.884] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0171.884] wcscmp (_String1="Spelling.HRV", _String2=".") returned 1 [0171.884] wcscmp (_String1="Spelling.HRV", _String2="..") returned 1 [0171.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.884] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.884] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.884] wcscat (in: _Dest=0x66dd2d8, _Source="Spelling.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" [0171.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv")) returned 0x20 [0171.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0171.884] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.884] GetLastError () returned 0x5 [0171.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0171.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.885] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0171.885] wcscmp (_String1="Updater.HRV", _String2=".") returned 1 [0171.885] wcscmp (_String1="Updater.HRV", _String2="..") returned 1 [0171.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0171.885] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.885] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.885] wcscat (in: _Dest=0x66dd2d8, _Source="Updater.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" [0171.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv")) returned 0x20 [0171.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0171.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.885] GetLastError () returned 0x5 [0171.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0171.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.885] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0171.885] wcscmp (_String1="Weblink.HRV", _String2=".") returned 1 [0171.886] wcscmp (_String1="Weblink.HRV", _String2="..") returned 1 [0171.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0171.886] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0171.886] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0171.886] wcscat (in: _Dest=0x66dd2d8, _Source="Weblink.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" [0171.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv")) returned 0x20 [0171.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0171.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.886] GetLastError () returned 0x5 [0171.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0171.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.886] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0171.886] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0171.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0171.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 [0171.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 Thread: id = 2983 os_tid = 0xeb8 [0160.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f870 [0160.296] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0160.296] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0160.296] wcscat (in: _Dest=0x3e0f870, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*" [0160.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0160.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0165.563] wcscmp (_String1=".", _String2=".") returned 0 [0165.563] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.564] wcscmp (_String1="..", _String2=".") returned 1 [0165.564] wcscmp (_String1="..", _String2="..") returned 0 [0165.564] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="ACCESS~1.HUN")) returned 1 [0165.564] wcscmp (_String1="accessibility.HUN", _String2=".") returned 1 [0165.564] wcscmp (_String1="accessibility.HUN", _String2="..") returned 1 [0165.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0165.564] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0165.564] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0165.564] wcscat (in: _Dest=0x3e0e930, _Source="accessibility.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" [0166.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0166.779] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0166.779] wcscmp (_String1="Acroform.HUN", _String2=".") returned 1 [0166.779] wcscmp (_String1="Acroform.HUN", _String2="..") returned 1 [0166.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d568 [0166.779] wcscpy (in: _Dest=0x674d568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.779] wcscat (in: _Dest=0x674d568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.779] wcscat (in: _Dest=0x674d568, _Source="Acroform.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" [0166.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0166.780] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="ADOBEC~1.HUN")) returned 1 [0166.780] wcscmp (_String1="AdobeCollabSync.HUN", _String2=".") returned 1 [0166.780] wcscmp (_String1="AdobeCollabSync.HUN", _String2="..") returned 1 [0166.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0788 [0166.781] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.781] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.781] wcscat (in: _Dest=0x69c0788, _Source="AdobeCollabSync.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" [0166.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0166.781] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0166.781] wcscmp (_String1="Annots.HUN", _String2=".") returned 1 [0166.782] wcscmp (_String1="Annots.HUN", _String2="..") returned 1 [0166.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d5f8 [0166.782] wcscpy (in: _Dest=0x674d5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.782] wcscat (in: _Dest=0x674d5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.782] wcscat (in: _Dest=0x674d5f8, _Source="Annots.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" [0166.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0166.783] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="BRDLAN~1.HUN")) returned 1 [0166.783] wcscmp (_String1="BRdlang32.HUN", _String2=".") returned 1 [0166.783] wcscmp (_String1="BRdlang32.HUN", _String2="..") returned 1 [0166.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958c58 [0166.783] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.783] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.783] wcscat (in: _Dest=0x6958c58, _Source="BRdlang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" [0166.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388 [0166.784] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0166.784] wcscmp (_String1="Checkers.HUN", _String2=".") returned 1 [0166.784] wcscmp (_String1="Checkers.HUN", _String2="..") returned 1 [0166.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674db98 [0166.784] wcscpy (in: _Dest=0x674db98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.784] wcscat (in: _Dest=0x674db98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.784] wcscat (in: _Dest=0x674db98, _Source="Checkers.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" [0166.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0166.785] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0166.785] wcscmp (_String1="DigSig.HUN", _String2=".") returned 1 [0166.785] wcscmp (_String1="DigSig.HUN", _String2="..") returned 1 [0166.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e5b8 [0166.785] wcscpy (in: _Dest=0x674e5b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.785] wcscat (in: _Dest=0x674e5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.785] wcscat (in: _Dest=0x674e5b8, _Source="DigSig.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" [0166.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0166.787] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0166.787] wcscmp (_String1="DVA.HUN", _String2=".") returned 1 [0166.787] wcscmp (_String1="DVA.HUN", _String2="..") returned 1 [0166.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f268c0 [0166.787] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.787] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.787] wcscat (in: _Dest=0x3f268c0, _Source="DVA.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" [0166.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0166.788] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0166.788] wcscmp (_String1="eBook.HUN", _String2=".") returned 1 [0166.788] wcscmp (_String1="eBook.HUN", _String2="..") returned 1 [0166.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e258 [0166.788] wcscpy (in: _Dest=0x674e258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.788] wcscat (in: _Dest=0x674e258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.788] wcscat (in: _Dest=0x674e258, _Source="eBook.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" [0166.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0166.789] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0166.789] wcscmp (_String1="EScript.HUN", _String2=".") returned 1 [0166.789] wcscmp (_String1="EScript.HUN", _String2="..") returned 1 [0166.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e1c8 [0166.789] wcscpy (in: _Dest=0x674e1c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.789] wcscat (in: _Dest=0x674e1c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.789] wcscat (in: _Dest=0x674e1c8, _Source="EScript.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" [0166.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0166.790] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0166.791] wcscmp (_String1="IA32.HUN", _String2=".") returned 1 [0166.791] wcscmp (_String1="IA32.HUN", _String2="..") returned 1 [0166.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27608 [0166.791] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.791] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.791] wcscat (in: _Dest=0x3f27608, _Source="IA32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" [0166.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0166.792] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="MAKEAC~1.HUN")) returned 1 [0166.792] wcscmp (_String1="makeaccessible.HUN", _String2=".") returned 1 [0166.792] wcscmp (_String1="makeaccessible.HUN", _String2="..") returned 1 [0166.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1408 [0166.792] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.792] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.792] wcscat (in: _Dest=0x69c1408, _Source="makeaccessible.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" [0166.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0166.793] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="MULTIM~1.HUN")) returned 1 [0166.793] wcscmp (_String1="Multimedia.HUN", _String2=".") returned 1 [0166.793] wcscmp (_String1="Multimedia.HUN", _String2="..") returned 1 [0166.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69588c8 [0166.793] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.793] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.793] wcscat (in: _Dest=0x69588c8, _Source="Multimedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" [0166.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0166.795] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0166.795] wcscmp (_String1="pddom.HUN", _String2=".") returned 1 [0166.795] wcscmp (_String1="pddom.HUN", _String2="..") returned 1 [0166.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e408 [0166.795] wcscpy (in: _Dest=0x674e408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.795] wcscat (in: _Dest=0x674e408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.795] wcscat (in: _Dest=0x674e408, _Source="pddom.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" [0166.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0166.796] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0166.796] wcscmp (_String1="PPKLite.HUN", _String2=".") returned 1 [0166.796] wcscmp (_String1="PPKLite.HUN", _String2="..") returned 1 [0166.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d448 [0166.796] wcscpy (in: _Dest=0x674d448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.796] wcscat (in: _Dest=0x674d448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.796] wcscat (in: _Dest=0x674d448, _Source="PPKLite.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" [0166.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0166.798] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0166.798] wcscmp (_String1="RdLang32.HUN", _String2=".") returned 1 [0166.798] wcscmp (_String1="RdLang32.HUN", _String2="..") returned 1 [0166.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e6d8 [0166.798] wcscpy (in: _Dest=0x674e6d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.798] wcscat (in: _Dest=0x674e6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.798] wcscat (in: _Dest=0x674e6d8, _Source="RdLang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" [0166.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0166.799] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="READOU~1.HUN")) returned 1 [0166.799] wcscmp (_String1="ReadOutLoud.HUN", _String2=".") returned 1 [0166.799] wcscmp (_String1="ReadOutLoud.HUN", _String2="..") returned 1 [0166.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69585d0 [0166.800] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.800] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.800] wcscat (in: _Dest=0x69585d0, _Source="ReadOutLoud.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" [0166.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0166.801] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0166.801] wcscmp (_String1="reflow.HUN", _String2=".") returned 1 [0166.801] wcscmp (_String1="reflow.HUN", _String2="..") returned 1 [0166.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e768 [0166.801] wcscpy (in: _Dest=0x674e768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.801] wcscat (in: _Dest=0x674e768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.801] wcscat (in: _Dest=0x674e768, _Source="reflow.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" [0166.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0166.802] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="SAVEAS~1.HUN")) returned 1 [0166.802] wcscmp (_String1="SaveAsRTF.HUN", _String2=".") returned 1 [0166.802] wcscmp (_String1="SaveAsRTF.HUN", _String2="..") returned 1 [0166.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69584a0 [0166.802] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.802] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.802] wcscat (in: _Dest=0x69584a0, _Source="SaveAsRTF.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" [0166.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0166.803] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0166.803] wcscmp (_String1="Search.HUN", _String2=".") returned 1 [0166.803] wcscmp (_String1="Search.HUN", _String2="..") returned 1 [0166.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e7f8 [0166.803] wcscpy (in: _Dest=0x674e7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.803] wcscat (in: _Dest=0x674e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.803] wcscat (in: _Dest=0x674e7f8, _Source="Search.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" [0166.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0166.804] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0166.804] wcscmp (_String1="SendMail.HUN", _String2=".") returned 1 [0166.804] wcscmp (_String1="SendMail.HUN", _String2="..") returned 1 [0166.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e888 [0166.804] wcscpy (in: _Dest=0x674e888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.804] wcscat (in: _Dest=0x674e888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.804] wcscat (in: _Dest=0x674e888, _Source="SendMail.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" [0166.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0166.806] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.806] wcscmp (_String1="Services", _String2=".") returned 1 [0166.806] wcscmp (_String1="Services", _String2="..") returned 1 [0166.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0166.806] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.806] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.806] wcscat (in: _Dest=0x3f260c8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0166.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0166.807] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0166.807] wcscmp (_String1="Spelling.HUN", _String2=".") returned 1 [0166.807] wcscmp (_String1="Spelling.HUN", _String2="..") returned 1 [0166.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e918 [0166.807] wcscpy (in: _Dest=0x674e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.807] wcscat (in: _Dest=0x674e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.807] wcscat (in: _Dest=0x674e918, _Source="Spelling.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" [0166.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0166.808] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0166.808] wcscmp (_String1="updater.HUN", _String2=".") returned 1 [0166.808] wcscmp (_String1="updater.HUN", _String2="..") returned 1 [0166.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e9a8 [0166.808] wcscpy (in: _Dest=0x674e9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.808] wcscat (in: _Dest=0x674e9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.809] wcscat (in: _Dest=0x674e9a8, _Source="updater.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" [0166.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0166.809] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0166.810] wcscmp (_String1="WebLink.HUN", _String2=".") returned 1 [0166.810] wcscmp (_String1="WebLink.HUN", _String2="..") returned 1 [0166.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x356370 [0166.810] wcscpy (in: _Dest=0x356370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0166.810] wcscat (in: _Dest=0x356370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0166.810] wcscat (in: _Dest=0x356370, _Source="WebLink.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" [0166.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x356370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0166.811] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0166.811] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0166.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0166.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 [0166.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 Thread: id = 2984 os_tid = 0x1564 [0160.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0fbf0 [0160.297] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0160.297] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0160.297] wcscat (in: _Dest=0x3e0fbf0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*" [0160.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0160.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0165.561] wcscmp (_String1=".", _String2=".") returned 0 [0165.561] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.561] wcscmp (_String1="..", _String2=".") returned 1 [0165.561] wcscmp (_String1="..", _String2="..") returned 0 [0165.561] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="ACCESS~1.ITA")) returned 1 [0165.561] wcscmp (_String1="accessibility.ITA", _String2=".") returned 1 [0165.561] wcscmp (_String1="accessibility.ITA", _String2="..") returned 1 [0165.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e250 [0165.561] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0165.561] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0165.561] wcscat (in: _Dest=0x3e0e250, _Source="accessibility.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" [0171.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita")) returned 0x20 [0171.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0171.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.762] GetLastError () returned 0x5 [0171.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0171.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 [0171.762] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0171.762] wcscmp (_String1="Acroform.ITA", _String2=".") returned 1 [0171.762] wcscmp (_String1="Acroform.ITA", _String2="..") returned 1 [0171.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0171.762] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.762] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.762] wcscat (in: _Dest=0x66db7d8, _Source="Acroform.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" [0171.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita")) returned 0x20 [0171.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0171.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.773] GetLastError () returned 0x5 [0171.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0171.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.773] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="ADOBEC~1.ITA")) returned 1 [0171.773] wcscmp (_String1="AdobeCollabSync.ITA", _String2=".") returned 1 [0171.773] wcscmp (_String1="AdobeCollabSync.ITA", _String2="..") returned 1 [0171.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e250 [0171.773] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.773] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.773] wcscat (in: _Dest=0x3e0e250, _Source="AdobeCollabSync.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" [0171.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita")) returned 0x20 [0171.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0171.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.774] GetLastError () returned 0x5 [0171.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0171.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 [0171.774] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0171.774] wcscmp (_String1="Annots.ITA", _String2=".") returned 1 [0171.774] wcscmp (_String1="Annots.ITA", _String2="..") returned 1 [0171.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.775] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.775] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.775] wcscat (in: _Dest=0x66db7d8, _Source="Annots.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" [0171.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita")) returned 0x20 [0171.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0171.787] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.787] GetLastError () returned 0x5 [0171.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0171.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.787] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="BRDLAN~1.ITA")) returned 1 [0171.787] wcscmp (_String1="BRdlang32.ITA", _String2=".") returned 1 [0171.787] wcscmp (_String1="BRdlang32.ITA", _String2="..") returned 1 [0171.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0171.787] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.788] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.788] wcscat (in: _Dest=0x69589f8, _Source="BRdlang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" [0171.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita")) returned 0x20 [0171.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0171.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.788] GetLastError () returned 0x5 [0171.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0171.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0171.788] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0171.788] wcscmp (_String1="Checkers.ITA", _String2=".") returned 1 [0171.788] wcscmp (_String1="Checkers.ITA", _String2="..") returned 1 [0171.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0171.788] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.788] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.788] wcscat (in: _Dest=0x66db7d8, _Source="Checkers.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" [0171.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita")) returned 0x20 [0171.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0171.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.789] GetLastError () returned 0x5 [0171.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0171.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.789] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0171.789] wcscmp (_String1="DigSig.ITA", _String2=".") returned 1 [0171.789] wcscmp (_String1="DigSig.ITA", _String2="..") returned 1 [0171.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.789] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.789] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.790] wcscat (in: _Dest=0x66db7d8, _Source="DigSig.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" [0171.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita")) returned 0x20 [0171.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0171.790] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.790] GetLastError () returned 0x5 [0171.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0171.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.790] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0171.790] wcscmp (_String1="DVA.ITA", _String2=".") returned 1 [0171.790] wcscmp (_String1="DVA.ITA", _String2="..") returned 1 [0171.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bce8 [0171.790] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.791] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.791] wcscat (in: _Dest=0x682bce8, _Source="DVA.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" [0171.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita")) returned 0x20 [0171.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0171.791] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.791] GetLastError () returned 0x5 [0171.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0171.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.791] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0171.791] wcscmp (_String1="eBook.ITA", _String2=".") returned 1 [0171.791] wcscmp (_String1="eBook.ITA", _String2="..") returned 1 [0171.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0171.792] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.792] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.792] wcscat (in: _Dest=0x66db7d8, _Source="eBook.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" [0171.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita")) returned 0x20 [0171.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0171.792] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.792] GetLastError () returned 0x5 [0171.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0171.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.792] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0171.792] wcscmp (_String1="EScript.ITA", _String2=".") returned 1 [0171.792] wcscmp (_String1="EScript.ITA", _String2="..") returned 1 [0171.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0171.793] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.793] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.793] wcscat (in: _Dest=0x66db7d8, _Source="EScript.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" [0171.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita")) returned 0x20 [0171.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0171.793] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.794] GetLastError () returned 0x5 [0171.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0171.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.794] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0171.794] wcscmp (_String1="IA32.ITA", _String2=".") returned 1 [0171.794] wcscmp (_String1="IA32.ITA", _String2="..") returned 1 [0171.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0171.794] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.794] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.794] wcscat (in: _Dest=0x682bce8, _Source="IA32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" [0171.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita")) returned 0x20 [0171.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0171.812] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.812] GetLastError () returned 0x5 [0171.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0171.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.812] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="MAKEAC~1.ITA")) returned 1 [0171.812] wcscmp (_String1="makeaccessible.ITA", _String2=".") returned 1 [0171.812] wcscmp (_String1="makeaccessible.ITA", _String2="..") returned 1 [0171.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d5d0 [0171.812] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.812] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.812] wcscat (in: _Dest=0x3e0d5d0, _Source="makeaccessible.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" [0171.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita")) returned 0x20 [0171.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0171.813] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.813] GetLastError () returned 0x5 [0171.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0171.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0171.813] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="MULTIM~1.ITA")) returned 1 [0171.813] wcscmp (_String1="Multimedia.ITA", _String2=".") returned 1 [0171.813] wcscmp (_String1="Multimedia.ITA", _String2="..") returned 1 [0171.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0171.813] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.813] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.813] wcscat (in: _Dest=0x6958370, _Source="Multimedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" [0171.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita")) returned 0x20 [0171.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0171.814] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.814] GetLastError () returned 0x5 [0171.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0171.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.814] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0171.814] wcscmp (_String1="pddom.ITA", _String2=".") returned 1 [0171.814] wcscmp (_String1="pddom.ITA", _String2="..") returned 1 [0171.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0171.814] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.814] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.815] wcscat (in: _Dest=0x66dc828, _Source="pddom.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" [0171.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita")) returned 0x20 [0171.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0171.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.815] GetLastError () returned 0x5 [0171.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0171.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.815] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0171.815] wcscmp (_String1="PPKLITE.ITA", _String2=".") returned 1 [0171.815] wcscmp (_String1="PPKLITE.ITA", _String2="..") returned 1 [0171.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc828 [0171.815] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.815] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.815] wcscat (in: _Dest=0x66dc828, _Source="PPKLITE.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" [0171.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita")) returned 0x20 [0171.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0171.816] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.816] GetLastError () returned 0x5 [0171.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0171.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.816] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0171.816] wcscmp (_String1="RdLang32.ITA", _String2=".") returned 1 [0171.816] wcscmp (_String1="RdLang32.ITA", _String2="..") returned 1 [0171.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0171.816] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.816] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.816] wcscat (in: _Dest=0x66dc828, _Source="RdLang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" [0171.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita")) returned 0x20 [0171.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0171.817] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.817] GetLastError () returned 0x5 [0171.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0171.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.817] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="READOU~1.ITA")) returned 1 [0171.817] wcscmp (_String1="ReadOutLoud.ITA", _String2=".") returned 1 [0171.817] wcscmp (_String1="ReadOutLoud.ITA", _String2="..") returned 1 [0171.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0171.817] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.817] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.817] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" [0171.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita")) returned 0x20 [0171.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0171.818] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.818] GetLastError () returned 0x5 [0171.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0171.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.818] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0171.818] wcscmp (_String1="reflow.ITA", _String2=".") returned 1 [0171.818] wcscmp (_String1="reflow.ITA", _String2="..") returned 1 [0171.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc828 [0171.818] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.818] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.818] wcscat (in: _Dest=0x66dc828, _Source="reflow.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" [0171.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita")) returned 0x20 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0171.819] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.819] GetLastError () returned 0x5 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0171.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.819] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="SAVEAS~1.ITA")) returned 1 [0171.819] wcscmp (_String1="SaveAsRTF.ITA", _String2=".") returned 1 [0171.819] wcscmp (_String1="SaveAsRTF.ITA", _String2="..") returned 1 [0171.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.819] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.819] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.820] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" [0171.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita")) returned 0x20 [0171.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0171.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.820] GetLastError () returned 0x5 [0171.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0171.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.820] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0171.820] wcscmp (_String1="Search.ITA", _String2=".") returned 1 [0171.820] wcscmp (_String1="Search.ITA", _String2="..") returned 1 [0171.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc828 [0171.820] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.820] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.820] wcscat (in: _Dest=0x66dc828, _Source="Search.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" [0171.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita")) returned 0x20 [0171.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0171.821] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.821] GetLastError () returned 0x5 [0171.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0171.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.821] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0171.821] wcscmp (_String1="SendMail.ITA", _String2=".") returned 1 [0171.821] wcscmp (_String1="SendMail.ITA", _String2="..") returned 1 [0171.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0171.821] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.822] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.822] wcscat (in: _Dest=0x66dc828, _Source="SendMail.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" [0171.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita")) returned 0x20 [0171.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0171.822] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.822] GetLastError () returned 0x5 [0171.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0171.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.822] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.822] wcscmp (_String1="Services", _String2=".") returned 1 [0171.822] wcscmp (_String1="Services", _String2="..") returned 1 [0171.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bce8 [0171.822] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.823] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.823] wcscat (in: _Dest=0x682bce8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0171.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc828 [0171.823] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0171.823] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0171.823] wcscat (in: _Dest=0x66dc828, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*" [0171.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0171.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0171.823] wcscmp (_String1=".", _String2=".") returned 0 [0171.823] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.823] wcscmp (_String1="..", _String2=".") returned 1 [0171.823] wcscmp (_String1="..", _String2="..") returned 0 [0171.823] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.823] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.823] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d1f0 [0171.823] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0171.823] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0171.824] wcscat (in: _Dest=0x3e5d1f0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" [0171.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx")) returned 0x20 [0171.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.857] GetLastError () returned 0x5 [0171.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 [0171.858] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.858] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.858] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d1f0 [0171.858] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0171.858] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0171.858] wcscat (in: _Dest=0x3e5d1f0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" [0171.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx")) returned 0x20 [0171.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.858] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.858] GetLastError () returned 0x5 [0171.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 [0171.858] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0171.859] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0171.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0171.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.859] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0171.859] wcscmp (_String1="Spelling.ITA", _String2=".") returned 1 [0171.859] wcscmp (_String1="Spelling.ITA", _String2="..") returned 1 [0171.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0171.859] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.859] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.859] wcscat (in: _Dest=0x66dc828, _Source="Spelling.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" [0171.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita")) returned 0x20 [0171.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0171.860] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.860] GetLastError () returned 0x5 [0171.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0171.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.860] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0171.860] wcscmp (_String1="updater.ITA", _String2=".") returned 1 [0171.860] wcscmp (_String1="updater.ITA", _String2="..") returned 1 [0171.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc828 [0171.860] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.860] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.860] wcscat (in: _Dest=0x66dc828, _Source="updater.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" [0171.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita")) returned 0x20 [0171.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0171.861] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.861] GetLastError () returned 0x5 [0171.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0171.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.861] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0171.861] wcscmp (_String1="Weblink.ITA", _String2=".") returned 1 [0171.861] wcscmp (_String1="Weblink.ITA", _String2="..") returned 1 [0171.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc828 [0171.861] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0171.861] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0171.861] wcscat (in: _Dest=0x66dc828, _Source="Weblink.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" [0171.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita")) returned 0x20 [0171.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0171.862] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.862] GetLastError () returned 0x5 [0171.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0171.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 [0171.862] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0171.862] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0171.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0171.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 [0171.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 Thread: id = 2985 os_tid = 0x1624 [0160.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e10bf0 [0160.298] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0160.298] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0160.298] wcscat (in: _Dest=0x3e10bf0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*" [0160.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0160.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0165.560] wcscmp (_String1=".", _String2=".") returned 0 [0165.560] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.560] wcscmp (_String1="..", _String2=".") returned 1 [0165.560] wcscmp (_String1="..", _String2="..") returned 0 [0165.560] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.JPN", cAlternateFileName="ACCESS~1.JPN")) returned 1 [0165.560] wcscmp (_String1="accessibility.JPN", _String2=".") returned 1 [0165.560] wcscmp (_String1="accessibility.JPN", _String2="..") returned 1 [0165.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e750 [0165.560] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0165.560] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0165.560] wcscat (in: _Dest=0x3e0e750, _Source="accessibility.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" [0167.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0167.484] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.JPN", cAlternateFileName="")) returned 1 [0167.484] wcscmp (_String1="Acroform.JPN", _String2=".") returned 1 [0167.484] wcscmp (_String1="Acroform.JPN", _String2="..") returned 1 [0167.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355050 [0167.485] wcscpy (in: _Dest=0x355050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.485] wcscat (in: _Dest=0x355050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.485] wcscat (in: _Dest=0x355050, _Source="Acroform.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" [0167.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0167.486] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.JPN", cAlternateFileName="ADOBEC~1.JPN")) returned 1 [0167.486] wcscmp (_String1="AdobeCollabSync.JPN", _String2=".") returned 1 [0167.486] wcscmp (_String1="AdobeCollabSync.JPN", _String2="..") returned 1 [0167.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0167.487] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.487] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.487] wcscat (in: _Dest=0x3e0ed90, _Source="AdobeCollabSync.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" [0167.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0167.488] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.JPN", cAlternateFileName="")) returned 1 [0167.488] wcscmp (_String1="Annots.JPN", _String2=".") returned 1 [0167.488] wcscmp (_String1="Annots.JPN", _String2="..") returned 1 [0167.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354f30 [0167.488] wcscpy (in: _Dest=0x354f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.489] wcscat (in: _Dest=0x354f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.489] wcscat (in: _Dest=0x354f30, _Source="Annots.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" [0167.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0167.490] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.JPN", cAlternateFileName="BRDLAN~1.JPN")) returned 1 [0167.490] wcscmp (_String1="BRdlang32.JPN", _String2=".") returned 1 [0167.490] wcscmp (_String1="BRdlang32.JPN", _String2="..") returned 1 [0167.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69598d0 [0167.490] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.490] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.490] wcscat (in: _Dest=0x69598d0, _Source="BRdlang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" [0167.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0167.492] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.JPN", cAlternateFileName="")) returned 1 [0167.492] wcscmp (_String1="Checkers.JPN", _String2=".") returned 1 [0167.492] wcscmp (_String1="Checkers.JPN", _String2="..") returned 1 [0167.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354ab0 [0167.492] wcscpy (in: _Dest=0x354ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.492] wcscat (in: _Dest=0x354ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.492] wcscat (in: _Dest=0x354ab0, _Source="Checkers.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" [0167.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0167.493] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.JPN", cAlternateFileName="")) returned 1 [0167.494] wcscmp (_String1="DigSig.JPN", _String2=".") returned 1 [0167.494] wcscmp (_String1="DigSig.JPN", _String2="..") returned 1 [0167.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354fc0 [0167.494] wcscpy (in: _Dest=0x354fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.494] wcscat (in: _Dest=0x354fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.494] wcscat (in: _Dest=0x354fc0, _Source="DigSig.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" [0167.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x354fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0167.495] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.JPN", cAlternateFileName="")) returned 1 [0167.495] wcscmp (_String1="DVA.JPN", _String2=".") returned 1 [0167.495] wcscmp (_String1="DVA.JPN", _String2="..") returned 1 [0167.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f25ea8 [0167.495] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.495] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.495] wcscat (in: _Dest=0x3f25ea8, _Source="DVA.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" [0167.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0167.497] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.JPN", cAlternateFileName="")) returned 1 [0167.497] wcscmp (_String1="eBook.JPN", _String2=".") returned 1 [0167.497] wcscmp (_String1="eBook.JPN", _String2="..") returned 1 [0167.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3550e0 [0167.497] wcscpy (in: _Dest=0x3550e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.497] wcscat (in: _Dest=0x3550e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.497] wcscat (in: _Dest=0x3550e0, _Source="eBook.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" [0167.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3550e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0167.498] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.JPN", cAlternateFileName="")) returned 1 [0167.498] wcscmp (_String1="EScript.JPN", _String2=".") returned 1 [0167.498] wcscmp (_String1="EScript.JPN", _String2="..") returned 1 [0167.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355200 [0167.498] wcscpy (in: _Dest=0x355200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.498] wcscat (in: _Dest=0x355200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.498] wcscat (in: _Dest=0x355200, _Source="EScript.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" [0167.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x355200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0167.500] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.JPN", cAlternateFileName="")) returned 1 [0167.500] wcscmp (_String1="IA32.JPN", _String2=".") returned 1 [0167.500] wcscmp (_String1="IA32.JPN", _String2="..") returned 1 [0167.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26c78 [0167.500] wcscpy (in: _Dest=0x3f26c78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.500] wcscat (in: _Dest=0x3f26c78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.500] wcscat (in: _Dest=0x3f26c78, _Source="IA32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" [0167.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0167.501] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.JPN", cAlternateFileName="MAKEAC~1.JPN")) returned 1 [0167.501] wcscmp (_String1="makeaccessible.JPN", _String2=".") returned 1 [0167.501] wcscmp (_String1="makeaccessible.JPN", _String2="..") returned 1 [0167.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d170 [0167.502] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.502] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.502] wcscat (in: _Dest=0x3e0d170, _Source="makeaccessible.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" [0167.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0167.503] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.JPN", cAlternateFileName="MULTIM~1.JPN")) returned 1 [0167.503] wcscmp (_String1="Multimedia.JPN", _String2=".") returned 1 [0167.503] wcscmp (_String1="Multimedia.JPN", _String2="..") returned 1 [0167.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959838 [0167.503] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.503] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.503] wcscat (in: _Dest=0x6959838, _Source="Multimedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" [0167.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0167.505] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.JPN", cAlternateFileName="")) returned 1 [0167.505] wcscmp (_String1="pddom.JPN", _String2=".") returned 1 [0167.505] wcscmp (_String1="pddom.JPN", _String2="..") returned 1 [0167.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2258 [0167.505] wcscpy (in: _Dest=0x3df2258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.505] wcscat (in: _Dest=0x3df2258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.505] wcscat (in: _Dest=0x3df2258, _Source="pddom.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" [0167.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0167.506] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.JPN", cAlternateFileName="")) returned 1 [0167.506] wcscmp (_String1="PPKLite.JPN", _String2=".") returned 1 [0167.507] wcscmp (_String1="PPKLite.JPN", _String2="..") returned 1 [0167.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df3068 [0167.507] wcscpy (in: _Dest=0x3df3068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.507] wcscat (in: _Dest=0x3df3068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.507] wcscat (in: _Dest=0x3df3068, _Source="PPKLite.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" [0167.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df3068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0167.508] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.JPN", cAlternateFileName="")) returned 1 [0167.508] wcscmp (_String1="RdLang32.JPN", _String2=".") returned 1 [0167.508] wcscmp (_String1="RdLang32.JPN", _String2="..") returned 1 [0167.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1dd8 [0167.508] wcscpy (in: _Dest=0x3df1dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.508] wcscat (in: _Dest=0x3df1dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.509] wcscat (in: _Dest=0x3df1dd8, _Source="RdLang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" [0167.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df1dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0167.510] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.JPN", cAlternateFileName="READOU~1.JPN")) returned 1 [0167.510] wcscmp (_String1="ReadOutLoud.JPN", _String2=".") returned 1 [0167.510] wcscmp (_String1="ReadOutLoud.JPN", _String2="..") returned 1 [0167.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958538 [0167.510] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.510] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.510] wcscat (in: _Dest=0x6958538, _Source="ReadOutLoud.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" [0167.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0167.511] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.JPN", cAlternateFileName="")) returned 1 [0167.511] wcscmp (_String1="reflow.JPN", _String2=".") returned 1 [0167.511] wcscmp (_String1="reflow.JPN", _String2="..") returned 1 [0167.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df29a8 [0167.512] wcscpy (in: _Dest=0x3df29a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.512] wcscat (in: _Dest=0x3df29a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.512] wcscat (in: _Dest=0x3df29a8, _Source="reflow.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" [0167.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df29a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0167.513] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.JPN", cAlternateFileName="SAVEAS~1.JPN")) returned 1 [0167.513] wcscmp (_String1="SaveAsRTF.JPN", _String2=".") returned 1 [0167.513] wcscmp (_String1="SaveAsRTF.JPN", _String2="..") returned 1 [0167.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69595d8 [0167.513] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.513] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.513] wcscat (in: _Dest=0x69595d8, _Source="SaveAsRTF.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" [0167.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0167.514] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.JPN", cAlternateFileName="")) returned 1 [0167.514] wcscmp (_String1="Search.JPN", _String2=".") returned 1 [0167.514] wcscmp (_String1="Search.JPN", _String2="..") returned 1 [0167.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2498 [0167.514] wcscpy (in: _Dest=0x3df2498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.514] wcscat (in: _Dest=0x3df2498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.514] wcscat (in: _Dest=0x3df2498, _Source="Search.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" [0167.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df2498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0167.516] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.JPN", cAlternateFileName="")) returned 1 [0167.516] wcscmp (_String1="SendMail.JPN", _String2=".") returned 1 [0167.516] wcscmp (_String1="SendMail.JPN", _String2="..") returned 1 [0167.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df22e8 [0167.516] wcscpy (in: _Dest=0x3df22e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.516] wcscat (in: _Dest=0x3df22e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.516] wcscat (in: _Dest=0x3df22e8, _Source="SendMail.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" [0167.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3df22e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0167.517] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0167.517] wcscmp (_String1="Services", _String2=".") returned 1 [0167.517] wcscmp (_String1="Services", _String2="..") returned 1 [0167.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0167.517] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.517] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.517] wcscat (in: _Dest=0x3f26948, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0167.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0167.519] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.JPN", cAlternateFileName="")) returned 1 [0167.519] wcscmp (_String1="Spelling.JPN", _String2=".") returned 1 [0167.519] wcscmp (_String1="Spelling.JPN", _String2="..") returned 1 [0167.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68abce8 [0167.519] wcscpy (in: _Dest=0x68abce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.519] wcscat (in: _Dest=0x68abce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.519] wcscat (in: _Dest=0x68abce8, _Source="Spelling.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" [0167.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0167.520] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.JPN", cAlternateFileName="")) returned 1 [0167.520] wcscmp (_String1="updater.JPN", _String2=".") returned 1 [0167.520] wcscmp (_String1="updater.JPN", _String2="..") returned 1 [0167.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68abd78 [0167.520] wcscpy (in: _Dest=0x68abd78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.520] wcscat (in: _Dest=0x68abd78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.520] wcscat (in: _Dest=0x68abd78, _Source="updater.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" [0167.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0167.874] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 1 [0167.874] wcscmp (_String1="Weblink.JPN", _String2=".") returned 1 [0167.874] wcscmp (_String1="Weblink.JPN", _String2="..") returned 1 [0167.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac288 [0167.874] wcscpy (in: _Dest=0x68ac288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0167.874] wcscat (in: _Dest=0x68ac288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0167.874] wcscat (in: _Dest=0x68ac288, _Source="Weblink.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" [0172.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn")) returned 0x20 [0172.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0172.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.798] GetLastError () returned 0x5 [0172.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0172.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac288) returned 1 [0172.799] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 0 [0172.799] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0172.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0172.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 [0172.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 Thread: id = 2986 os_tid = 0x8dc [0160.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674ad38 [0160.298] wcscpy (in: _Dest=0x674ad38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0160.298] wcscat (in: _Dest=0x674ad38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0160.298] wcscat (in: _Dest=0x674ad38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*" [0160.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0160.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0165.559] wcscmp (_String1=".", _String2=".") returned 0 [0165.559] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="..", _String2=".") returned 1 [0165.559] wcscmp (_String1="..", _String2="..") returned 0 [0165.559] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda65a860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.KOR", cAlternateFileName="ACCESS~1.KOR")) returned 1 [0165.559] wcscmp (_String1="accessibility.KOR", _String2=".") returned 1 [0165.559] wcscmp (_String1="accessibility.KOR", _String2="..") returned 1 [0165.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dc10 [0165.560] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0165.560] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0165.560] wcscat (in: _Dest=0x3e0dc10, _Source="accessibility.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" [0168.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0168.227] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.KOR", cAlternateFileName="")) returned 1 [0168.227] wcscmp (_String1="Acroform.KOR", _String2=".") returned 1 [0168.227] wcscmp (_String1="Acroform.KOR", _String2="..") returned 1 [0168.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d4d8 [0168.228] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.228] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.228] wcscat (in: _Dest=0x674d4d8, _Source="Acroform.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" [0168.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0168.229] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.KOR", cAlternateFileName="ADOBEC~1.KOR")) returned 1 [0168.229] wcscmp (_String1="AdobeCollabSync.KOR", _String2=".") returned 1 [0168.229] wcscmp (_String1="AdobeCollabSync.KOR", _String2="..") returned 1 [0168.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0148 [0168.229] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.229] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.229] wcscat (in: _Dest=0x69c0148, _Source="AdobeCollabSync.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" [0168.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0168.231] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.KOR", cAlternateFileName="")) returned 1 [0168.231] wcscmp (_String1="Annots.KOR", _String2=".") returned 1 [0168.231] wcscmp (_String1="Annots.KOR", _String2="..") returned 1 [0168.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d9e8 [0168.231] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.231] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.231] wcscat (in: _Dest=0x674d9e8, _Source="Annots.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" [0168.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0168.232] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.KOR", cAlternateFileName="BRDLAN~1.KOR")) returned 1 [0168.232] wcscmp (_String1="BRdlang32.KOR", _String2=".") returned 1 [0168.232] wcscmp (_String1="BRdlang32.KOR", _String2="..") returned 1 [0168.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30648 [0168.233] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.233] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.233] wcscat (in: _Dest=0x3e30648, _Source="BRdlang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" [0168.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0168.234] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.KOR", cAlternateFileName="")) returned 1 [0168.234] wcscmp (_String1="Checkers.KOR", _String2=".") returned 1 [0168.234] wcscmp (_String1="Checkers.KOR", _String2="..") returned 1 [0168.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674da78 [0168.234] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.234] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.234] wcscat (in: _Dest=0x674da78, _Source="Checkers.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" [0168.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0168.236] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.KOR", cAlternateFileName="")) returned 1 [0168.236] wcscmp (_String1="DigSig.KOR", _String2=".") returned 1 [0168.236] wcscmp (_String1="DigSig.KOR", _String2="..") returned 1 [0168.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cbd8 [0168.236] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.236] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.236] wcscat (in: _Dest=0x674cbd8, _Source="DigSig.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" [0168.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0168.237] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.KOR", cAlternateFileName="")) returned 1 [0168.237] wcscmp (_String1="DVA.KOR", _String2=".") returned 1 [0168.237] wcscmp (_String1="DVA.KOR", _String2="..") returned 1 [0168.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d1a0 [0168.237] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.237] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.237] wcscat (in: _Dest=0x682d1a0, _Source="DVA.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" [0168.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0168.239] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.KOR", cAlternateFileName="")) returned 1 [0168.239] wcscmp (_String1="eBook.KOR", _String2=".") returned 1 [0168.239] wcscmp (_String1="eBook.KOR", _String2="..") returned 1 [0168.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cf38 [0168.239] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.239] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.239] wcscat (in: _Dest=0x674cf38, _Source="eBook.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" [0168.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0168.241] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.KOR", cAlternateFileName="")) returned 1 [0168.241] wcscmp (_String1="EScript.KOR", _String2=".") returned 1 [0168.241] wcscmp (_String1="EScript.KOR", _String2="..") returned 1 [0168.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac318 [0168.241] wcscpy (in: _Dest=0x68ac318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.241] wcscat (in: _Dest=0x68ac318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.241] wcscat (in: _Dest=0x68ac318, _Source="EScript.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" [0168.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0168.242] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.KOR", cAlternateFileName="")) returned 1 [0168.242] wcscmp (_String1="IA32.KOR", _String2=".") returned 1 [0168.242] wcscmp (_String1="IA32.KOR", _String2="..") returned 1 [0168.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c348 [0168.243] wcscpy (in: _Dest=0x682c348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.243] wcscat (in: _Dest=0x682c348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.243] wcscat (in: _Dest=0x682c348, _Source="IA32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" [0168.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0168.244] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.KOR", cAlternateFileName="MAKEAC~1.KOR")) returned 1 [0168.244] wcscmp (_String1="makeaccessible.KOR", _String2=".") returned 1 [0168.244] wcscmp (_String1="makeaccessible.KOR", _String2="..") returned 1 [0168.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0968 [0168.244] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.244] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.244] wcscat (in: _Dest=0x69c0968, _Source="makeaccessible.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" [0168.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0168.245] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.KOR", cAlternateFileName="MULTIM~1.KOR")) returned 1 [0168.246] wcscmp (_String1="Multimedia.KOR", _String2=".") returned 1 [0168.246] wcscmp (_String1="Multimedia.KOR", _String2="..") returned 1 [0168.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e305b0 [0168.246] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.246] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.246] wcscat (in: _Dest=0x3e305b0, _Source="Multimedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" [0168.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0168.247] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.KOR", cAlternateFileName="")) returned 1 [0168.247] wcscmp (_String1="pddom.KOR", _String2=".") returned 1 [0168.247] wcscmp (_String1="pddom.KOR", _String2="..") returned 1 [0168.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac3a8 [0168.247] wcscpy (in: _Dest=0x68ac3a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.247] wcscat (in: _Dest=0x68ac3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.247] wcscat (in: _Dest=0x68ac3a8, _Source="pddom.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" [0168.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0168.248] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.KOR", cAlternateFileName="")) returned 1 [0168.249] wcscmp (_String1="PPKLITE.KOR", _String2=".") returned 1 [0168.249] wcscmp (_String1="PPKLITE.KOR", _String2="..") returned 1 [0168.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac438 [0168.249] wcscpy (in: _Dest=0x68ac438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.249] wcscat (in: _Dest=0x68ac438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.249] wcscat (in: _Dest=0x68ac438, _Source="PPKLITE.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" [0168.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0168.250] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba70200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.KOR", cAlternateFileName="")) returned 1 [0168.250] wcscmp (_String1="RdLang32.KOR", _String2=".") returned 1 [0168.250] wcscmp (_String1="RdLang32.KOR", _String2="..") returned 1 [0168.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac4c8 [0168.250] wcscpy (in: _Dest=0x68ac4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.250] wcscat (in: _Dest=0x68ac4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.250] wcscat (in: _Dest=0x68ac4c8, _Source="RdLang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" [0168.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0168.252] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.KOR", cAlternateFileName="READOU~1.KOR")) returned 1 [0168.252] wcscmp (_String1="ReadOutLoud.KOR", _String2=".") returned 1 [0168.252] wcscmp (_String1="ReadOutLoud.KOR", _String2="..") returned 1 [0168.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e31a78 [0168.252] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.252] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.252] wcscat (in: _Dest=0x3e31a78, _Source="ReadOutLoud.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" [0168.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0168.253] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.KOR", cAlternateFileName="")) returned 1 [0168.253] wcscmp (_String1="reflow.KOR", _String2=".") returned 1 [0168.253] wcscmp (_String1="reflow.KOR", _String2="..") returned 1 [0168.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac558 [0168.253] wcscpy (in: _Dest=0x68ac558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.253] wcscat (in: _Dest=0x68ac558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.253] wcscat (in: _Dest=0x68ac558, _Source="reflow.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" [0168.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0168.255] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.KOR", cAlternateFileName="SAVEAS~1.KOR")) returned 1 [0168.255] wcscmp (_String1="SaveAsRTF.KOR", _String2=".") returned 1 [0168.255] wcscmp (_String1="SaveAsRTF.KOR", _String2="..") returned 1 [0168.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30810 [0168.255] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.255] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.255] wcscat (in: _Dest=0x3e30810, _Source="SaveAsRTF.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" [0168.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0168.257] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.KOR", cAlternateFileName="")) returned 1 [0168.257] wcscmp (_String1="Search.KOR", _String2=".") returned 1 [0168.257] wcscmp (_String1="Search.KOR", _String2="..") returned 1 [0168.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac5e8 [0168.257] wcscpy (in: _Dest=0x68ac5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.257] wcscat (in: _Dest=0x68ac5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.257] wcscat (in: _Dest=0x68ac5e8, _Source="Search.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" [0168.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0168.258] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.KOR", cAlternateFileName="")) returned 1 [0168.258] wcscmp (_String1="SendMail.KOR", _String2=".") returned 1 [0168.258] wcscmp (_String1="SendMail.KOR", _String2="..") returned 1 [0168.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac678 [0168.258] wcscpy (in: _Dest=0x68ac678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.258] wcscat (in: _Dest=0x68ac678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.258] wcscat (in: _Dest=0x68ac678, _Source="SendMail.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" [0168.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0168.260] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0168.260] wcscmp (_String1="Services", _String2=".") returned 1 [0168.260] wcscmp (_String1="Services", _String2="..") returned 1 [0168.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0168.260] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.260] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.260] wcscat (in: _Dest=0x682cab8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0168.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0168.262] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.KOR", cAlternateFileName="")) returned 1 [0168.262] wcscmp (_String1="Spelling.KOR", _String2=".") returned 1 [0168.262] wcscmp (_String1="Spelling.KOR", _String2="..") returned 1 [0168.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac708 [0168.262] wcscpy (in: _Dest=0x68ac708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.262] wcscat (in: _Dest=0x68ac708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.262] wcscat (in: _Dest=0x68ac708, _Source="Spelling.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" [0168.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0168.263] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.KOR", cAlternateFileName="")) returned 1 [0168.263] wcscmp (_String1="updater.KOR", _String2=".") returned 1 [0168.263] wcscmp (_String1="updater.KOR", _String2="..") returned 1 [0168.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac798 [0168.263] wcscpy (in: _Dest=0x68ac798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.263] wcscat (in: _Dest=0x68ac798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.263] wcscat (in: _Dest=0x68ac798, _Source="updater.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" [0168.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0168.265] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 1 [0168.265] wcscmp (_String1="Weblink.KOR", _String2=".") returned 1 [0168.265] wcscmp (_String1="Weblink.KOR", _String2="..") returned 1 [0168.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac828 [0168.265] wcscpy (in: _Dest=0x68ac828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0168.265] wcscat (in: _Dest=0x68ac828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0168.265] wcscat (in: _Dest=0x68ac828, _Source="Weblink.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" [0168.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0168.266] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 0 [0168.266] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0168.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0168.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ad38) returned 1 [0168.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 Thread: id = 2987 os_tid = 0x1020 [0160.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674ab38 [0160.299] wcscpy (in: _Dest=0x674ab38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0160.299] wcscat (in: _Dest=0x674ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0160.299] wcscat (in: _Dest=0x674ab38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*" [0160.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0160.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0165.558] wcscmp (_String1=".", _String2=".") returned 0 [0165.558] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.558] wcscmp (_String1="..", _String2=".") returned 1 [0165.558] wcscmp (_String1="..", _String2="..") returned 0 [0165.558] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NOR", cAlternateFileName="ACCESS~1.NOR")) returned 1 [0165.558] wcscmp (_String1="accessibility.NOR", _String2=".") returned 1 [0165.558] wcscmp (_String1="accessibility.NOR", _String2="..") returned 1 [0165.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e110 [0165.559] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0165.559] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0165.559] wcscat (in: _Dest=0x3e0e110, _Source="accessibility.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" [0172.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor")) returned 0x20 [0172.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0172.794] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.794] GetLastError () returned 0x5 [0172.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0172.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 [0172.795] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NOR", cAlternateFileName="")) returned 1 [0172.795] wcscmp (_String1="Acroform.NOR", _String2=".") returned 1 [0172.795] wcscmp (_String1="Acroform.NOR", _String2="..") returned 1 [0172.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x355290 [0172.795] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0172.795] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0172.795] wcscat (in: _Dest=0x355290, _Source="Acroform.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" [0172.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor")) returned 0x20 [0173.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0173.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.605] GetLastError () returned 0x5 [0173.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0173.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 [0173.605] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NOR", cAlternateFileName="ADOBEC~1.NOR")) returned 1 [0173.606] wcscmp (_String1="AdobeCollabSync.NOR", _String2=".") returned 1 [0173.606] wcscmp (_String1="AdobeCollabSync.NOR", _String2="..") returned 1 [0173.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c05a8 [0173.606] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0173.606] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0173.606] wcscat (in: _Dest=0x69c05a8, _Source="AdobeCollabSync.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" [0174.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0174.300] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NOR", cAlternateFileName="")) returned 1 [0174.300] wcscmp (_String1="Annots.NOR", _String2=".") returned 1 [0174.300] wcscmp (_String1="Annots.NOR", _String2="..") returned 1 [0174.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dd48 [0174.301] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.301] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.301] wcscat (in: _Dest=0x674dd48, _Source="Annots.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" [0174.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0174.302] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NOR", cAlternateFileName="BRDLAN~1.NOR")) returned 1 [0174.302] wcscmp (_String1="BRdlang32.NOR", _String2=".") returned 1 [0174.302] wcscmp (_String1="BRdlang32.NOR", _String2="..") returned 1 [0174.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69592e0 [0174.302] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.302] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.302] wcscat (in: _Dest=0x69592e0, _Source="BRdlang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" [0174.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0174.303] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NOR", cAlternateFileName="")) returned 1 [0174.303] wcscmp (_String1="Checkers.NOR", _String2=".") returned 1 [0174.303] wcscmp (_String1="Checkers.NOR", _String2="..") returned 1 [0174.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cea8 [0174.304] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.304] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.304] wcscat (in: _Dest=0x674cea8, _Source="Checkers.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" [0174.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0174.305] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NOR", cAlternateFileName="")) returned 1 [0174.305] wcscmp (_String1="DigSig.NOR", _String2=".") returned 1 [0174.305] wcscmp (_String1="DigSig.NOR", _String2="..") returned 1 [0174.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d688 [0174.305] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.305] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.305] wcscat (in: _Dest=0x674d688, _Source="DigSig.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" [0174.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0174.306] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NOR", cAlternateFileName="")) returned 1 [0174.306] wcscmp (_String1="DVA.NOR", _String2=".") returned 1 [0174.306] wcscmp (_String1="DVA.NOR", _String2="..") returned 1 [0174.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66f0258 [0174.307] wcscpy (in: _Dest=0x66f0258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.307] wcscat (in: _Dest=0x66f0258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.307] wcscat (in: _Dest=0x66f0258, _Source="DVA.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" [0174.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0174.308] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NOR", cAlternateFileName="")) returned 1 [0174.308] wcscmp (_String1="eBook.NOR", _String2=".") returned 1 [0174.308] wcscmp (_String1="eBook.NOR", _String2="..") returned 1 [0174.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d3b8 [0174.308] wcscpy (in: _Dest=0x674d3b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.308] wcscat (in: _Dest=0x674d3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.308] wcscat (in: _Dest=0x674d3b8, _Source="eBook.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" [0174.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0174.310] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NOR", cAlternateFileName="")) returned 1 [0174.310] wcscmp (_String1="EScript.NOR", _String2=".") returned 1 [0174.310] wcscmp (_String1="EScript.NOR", _String2="..") returned 1 [0174.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cc68 [0174.310] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.310] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.310] wcscat (in: _Dest=0x674cc68, _Source="EScript.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" [0174.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0174.311] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NOR", cAlternateFileName="")) returned 1 [0174.311] wcscmp (_String1="IA32.NOR", _String2=".") returned 1 [0174.311] wcscmp (_String1="IA32.NOR", _String2="..") returned 1 [0174.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efc80 [0174.311] wcscpy (in: _Dest=0x66efc80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.311] wcscat (in: _Dest=0x66efc80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.311] wcscat (in: _Dest=0x66efc80, _Source="IA32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" [0174.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efc80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0174.313] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NOR", cAlternateFileName="MAKEAC~1.NOR")) returned 1 [0174.313] wcscmp (_String1="makeaccessible.NOR", _String2=".") returned 1 [0174.313] wcscmp (_String1="makeaccessible.NOR", _String2="..") returned 1 [0174.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c06e8 [0174.313] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.313] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.313] wcscat (in: _Dest=0x69c06e8, _Source="makeaccessible.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" [0174.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0174.314] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NOR", cAlternateFileName="MULTIM~1.NOR")) returned 1 [0174.314] wcscmp (_String1="Multimedia.NOR", _String2=".") returned 1 [0174.314] wcscmp (_String1="Multimedia.NOR", _String2="..") returned 1 [0174.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959378 [0174.314] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.314] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.314] wcscat (in: _Dest=0x6959378, _Source="Multimedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" [0174.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0174.316] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NOR", cAlternateFileName="")) returned 1 [0174.316] wcscmp (_String1="pddom.NOR", _String2=".") returned 1 [0174.316] wcscmp (_String1="pddom.NOR", _String2="..") returned 1 [0174.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d0e8 [0174.316] wcscpy (in: _Dest=0x674d0e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.316] wcscat (in: _Dest=0x674d0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.316] wcscat (in: _Dest=0x674d0e8, _Source="pddom.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" [0174.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0174.317] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NOR", cAlternateFileName="")) returned 1 [0174.317] wcscmp (_String1="PPKLITE.NOR", _String2=".") returned 1 [0174.317] wcscmp (_String1="PPKLITE.NOR", _String2="..") returned 1 [0174.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cb48 [0174.317] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.317] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.317] wcscat (in: _Dest=0x674cb48, _Source="PPKLITE.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" [0174.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0174.319] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbbc6e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NOR", cAlternateFileName="")) returned 1 [0174.319] wcscmp (_String1="RdLang32.NOR", _String2=".") returned 1 [0174.319] wcscmp (_String1="RdLang32.NOR", _String2="..") returned 1 [0174.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e498 [0174.319] wcscpy (in: _Dest=0x674e498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.319] wcscat (in: _Dest=0x674e498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.319] wcscat (in: _Dest=0x674e498, _Source="RdLang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" [0174.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0174.320] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NOR", cAlternateFileName="READOU~1.NOR")) returned 1 [0174.320] wcscmp (_String1="ReadOutLoud.NOR", _String2=".") returned 1 [0174.320] wcscmp (_String1="ReadOutLoud.NOR", _String2="..") returned 1 [0174.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69581a8 [0174.320] wcscpy (in: _Dest=0x69581a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.320] wcscat (in: _Dest=0x69581a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.320] wcscat (in: _Dest=0x69581a8, _Source="ReadOutLoud.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" [0174.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0174.322] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NOR", cAlternateFileName="")) returned 1 [0174.322] wcscmp (_String1="reflow.NOR", _String2=".") returned 1 [0174.322] wcscmp (_String1="reflow.NOR", _String2="..") returned 1 [0174.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674db08 [0174.322] wcscpy (in: _Dest=0x674db08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.322] wcscat (in: _Dest=0x674db08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.322] wcscat (in: _Dest=0x674db08, _Source="reflow.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" [0174.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0174.323] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NOR", cAlternateFileName="SAVEAS~1.NOR")) returned 1 [0174.323] wcscmp (_String1="SaveAsRTF.NOR", _String2=".") returned 1 [0174.323] wcscmp (_String1="SaveAsRTF.NOR", _String2="..") returned 1 [0174.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0174.323] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.323] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.323] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" [0174.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0174.325] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NOR", cAlternateFileName="")) returned 1 [0174.325] wcscmp (_String1="Search.NOR", _String2=".") returned 1 [0174.325] wcscmp (_String1="Search.NOR", _String2="..") returned 1 [0174.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e528 [0174.325] wcscpy (in: _Dest=0x674e528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.325] wcscat (in: _Dest=0x674e528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.325] wcscat (in: _Dest=0x674e528, _Source="Search.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" [0174.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0174.326] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NOR", cAlternateFileName="")) returned 1 [0174.326] wcscmp (_String1="SendMail.NOR", _String2=".") returned 1 [0174.326] wcscmp (_String1="SendMail.NOR", _String2="..") returned 1 [0174.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cab8 [0174.326] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.326] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.326] wcscat (in: _Dest=0x674cab8, _Source="SendMail.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" [0174.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0174.328] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0174.328] wcscmp (_String1="Services", _String2=".") returned 1 [0174.328] wcscmp (_String1="Services", _String2="..") returned 1 [0174.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eff28 [0174.328] wcscpy (in: _Dest=0x66eff28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.328] wcscat (in: _Dest=0x66eff28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.328] wcscat (in: _Dest=0x66eff28, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0174.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66eff28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0174.329] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NOR", cAlternateFileName="")) returned 1 [0174.329] wcscmp (_String1="Spelling.NOR", _String2=".") returned 1 [0174.329] wcscmp (_String1="Spelling.NOR", _String2="..") returned 1 [0174.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d298 [0174.329] wcscpy (in: _Dest=0x674d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.329] wcscat (in: _Dest=0x674d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.329] wcscat (in: _Dest=0x674d298, _Source="Spelling.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" [0174.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0174.331] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NOR", cAlternateFileName="")) returned 1 [0174.331] wcscmp (_String1="updater.NOR", _String2=".") returned 1 [0174.331] wcscmp (_String1="updater.NOR", _String2="..") returned 1 [0174.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d328 [0174.331] wcscpy (in: _Dest=0x674d328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.331] wcscat (in: _Dest=0x674d328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.331] wcscat (in: _Dest=0x674d328, _Source="updater.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" [0174.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0174.332] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 1 [0174.332] wcscmp (_String1="Weblink.NOR", _String2=".") returned 1 [0174.332] wcscmp (_String1="Weblink.NOR", _String2="..") returned 1 [0174.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e0a8 [0174.332] wcscpy (in: _Dest=0x674e0a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0174.332] wcscat (in: _Dest=0x674e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0174.332] wcscat (in: _Dest=0x674e0a8, _Source="Weblink.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" [0174.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0174.334] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 0 [0174.334] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0174.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0174.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 [0174.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 Thread: id = 2988 os_tid = 0x1024 [0160.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674acb8 [0160.300] wcscpy (in: _Dest=0x674acb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0160.300] wcscat (in: _Dest=0x674acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0160.300] wcscat (in: _Dest=0x674acb8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*" [0160.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0160.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0165.521] wcscmp (_String1=".", _String2=".") returned 0 [0165.521] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.521] wcscmp (_String1="..", _String2=".") returned 1 [0165.521] wcscmp (_String1="..", _String2="..") returned 0 [0165.521] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NLD", cAlternateFileName="ACCESS~1.NLD")) returned 1 [0165.521] wcscmp (_String1="accessibility.NLD", _String2=".") returned 1 [0165.521] wcscmp (_String1="accessibility.NLD", _String2="..") returned 1 [0165.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e7f0 [0165.522] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0165.522] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0165.522] wcscat (in: _Dest=0x3e0e7f0, _Source="accessibility.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" [0172.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld")) returned 0x20 [0172.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0172.792] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.793] GetLastError () returned 0x5 [0172.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0172.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 [0172.793] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NLD", cAlternateFileName="")) returned 1 [0172.793] wcscmp (_String1="Acroform.NLD", _String2=".") returned 1 [0172.793] wcscmp (_String1="Acroform.NLD", _String2="..") returned 1 [0172.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3555f0 [0172.793] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0172.793] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0172.793] wcscat (in: _Dest=0x3555f0, _Source="Acroform.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" [0172.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld")) returned 0x20 [0173.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0173.604] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.604] GetLastError () returned 0x5 [0173.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0173.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 [0173.604] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NLD", cAlternateFileName="ADOBEC~1.NLD")) returned 1 [0173.604] wcscmp (_String1="AdobeCollabSync.NLD", _String2=".") returned 1 [0173.604] wcscmp (_String1="AdobeCollabSync.NLD", _String2="..") returned 1 [0173.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0648 [0173.604] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0173.604] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0173.605] wcscat (in: _Dest=0x69c0648, _Source="AdobeCollabSync.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" [0177.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0177.585] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NLD", cAlternateFileName="")) returned 1 [0177.585] wcscmp (_String1="Annots.NLD", _String2=".") returned 1 [0177.585] wcscmp (_String1="Annots.NLD", _String2="..") returned 1 [0177.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db628 [0177.585] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.585] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.585] wcscat (in: _Dest=0x66db628, _Source="Annots.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" [0177.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0177.586] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NLD", cAlternateFileName="BRDLAN~1.NLD")) returned 1 [0177.586] wcscmp (_String1="BRdlang32.NLD", _String2=".") returned 1 [0177.586] wcscmp (_String1="BRdlang32.NLD", _String2="..") returned 1 [0177.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958078 [0177.587] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.587] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.587] wcscat (in: _Dest=0x6958078, _Source="BRdlang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" [0177.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0177.588] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NLD", cAlternateFileName="")) returned 1 [0177.588] wcscmp (_String1="Checkers.NLD", _String2=".") returned 1 [0177.588] wcscmp (_String1="Checkers.NLD", _String2="..") returned 1 [0177.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd128 [0177.588] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.588] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.588] wcscat (in: _Dest=0x66dd128, _Source="Checkers.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" [0177.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0177.590] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NLD", cAlternateFileName="")) returned 1 [0177.590] wcscmp (_String1="DigSig.NLD", _String2=".") returned 1 [0177.590] wcscmp (_String1="DigSig.NLD", _String2="..") returned 1 [0177.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbc58 [0177.590] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.590] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.590] wcscat (in: _Dest=0x66dbc58, _Source="DigSig.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" [0177.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0177.591] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NLD", cAlternateFileName="")) returned 1 [0177.591] wcscmp (_String1="DVA.NLD", _String2=".") returned 1 [0177.591] wcscmp (_String1="DVA.NLD", _String2="..") returned 1 [0177.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee5a8 [0177.591] wcscpy (in: _Dest=0x66ee5a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.591] wcscat (in: _Dest=0x66ee5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.591] wcscat (in: _Dest=0x66ee5a8, _Source="DVA.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" [0177.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0177.593] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NLD", cAlternateFileName="")) returned 1 [0177.593] wcscmp (_String1="eBook.NLD", _String2=".") returned 1 [0177.593] wcscmp (_String1="eBook.NLD", _String2="..") returned 1 [0177.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcb88 [0177.593] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.593] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.593] wcscat (in: _Dest=0x66dcb88, _Source="eBook.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" [0177.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0177.594] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NLD", cAlternateFileName="")) returned 1 [0177.594] wcscmp (_String1="EScript.NLD", _String2=".") returned 1 [0177.594] wcscmp (_String1="EScript.NLD", _String2="..") returned 1 [0177.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc438 [0177.594] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.594] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.594] wcscat (in: _Dest=0x66dc438, _Source="EScript.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" [0177.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0177.596] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NLD", cAlternateFileName="")) returned 1 [0177.596] wcscmp (_String1="IA32.NLD", _String2=".") returned 1 [0177.596] wcscmp (_String1="IA32.NLD", _String2="..") returned 1 [0177.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ef950 [0177.596] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.596] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.596] wcscat (in: _Dest=0x66ef950, _Source="IA32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" [0177.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0177.598] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NLD", cAlternateFileName="MAKEAC~1.NLD")) returned 1 [0177.598] wcscmp (_String1="makeaccessible.NLD", _String2=".") returned 1 [0177.598] wcscmp (_String1="makeaccessible.NLD", _String2="..") returned 1 [0177.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0177.598] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.598] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.598] wcscat (in: _Dest=0x69c1188, _Source="makeaccessible.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" [0177.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0177.599] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NLD", cAlternateFileName="MULTIM~1.NLD")) returned 1 [0177.599] wcscmp (_String1="Multimedia.NLD", _String2=".") returned 1 [0177.599] wcscmp (_String1="Multimedia.NLD", _String2="..") returned 1 [0177.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959a00 [0177.600] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.600] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.600] wcscat (in: _Dest=0x6959a00, _Source="Multimedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" [0177.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0177.601] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NLD", cAlternateFileName="")) returned 1 [0177.601] wcscmp (_String1="pddom.NLD", _String2=".") returned 1 [0177.601] wcscmp (_String1="pddom.NLD", _String2="..") returned 1 [0177.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbce8 [0177.601] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.601] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.601] wcscat (in: _Dest=0x66dbce8, _Source="pddom.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" [0177.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0177.602] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NLD", cAlternateFileName="")) returned 1 [0177.603] wcscmp (_String1="PPKLITE.NLD", _String2=".") returned 1 [0177.603] wcscmp (_String1="PPKLITE.NLD", _String2="..") returned 1 [0177.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db988 [0177.603] wcscpy (in: _Dest=0x66db988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.603] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.603] wcscat (in: _Dest=0x66db988, _Source="PPKLITE.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" [0177.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0177.609] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NLD", cAlternateFileName="")) returned 1 [0177.609] wcscmp (_String1="RdLang32.NLD", _String2=".") returned 1 [0177.609] wcscmp (_String1="RdLang32.NLD", _String2="..") returned 1 [0177.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcdc8 [0177.610] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.610] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.610] wcscat (in: _Dest=0x66dcdc8, _Source="RdLang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" [0177.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0177.612] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NLD", cAlternateFileName="READOU~1.NLD")) returned 1 [0177.612] wcscmp (_String1="ReadOutLoud.NLD", _String2=".") returned 1 [0177.612] wcscmp (_String1="ReadOutLoud.NLD", _String2="..") returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958668 [0177.612] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.612] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.612] wcscat (in: _Dest=0x6958668, _Source="ReadOutLoud.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" [0177.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0177.613] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NLD", cAlternateFileName="")) returned 1 [0177.613] wcscmp (_String1="reflow.NLD", _String2=".") returned 1 [0177.613] wcscmp (_String1="reflow.NLD", _String2="..") returned 1 [0177.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc678 [0177.613] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.613] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.613] wcscat (in: _Dest=0x66dc678, _Source="reflow.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" [0177.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0177.614] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NLD", cAlternateFileName="SAVEAS~1.NLD")) returned 1 [0177.614] wcscmp (_String1="SaveAsRTF.NLD", _String2=".") returned 1 [0177.614] wcscmp (_String1="SaveAsRTF.NLD", _String2="..") returned 1 [0177.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69585d0 [0177.615] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.615] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.615] wcscat (in: _Dest=0x69585d0, _Source="SaveAsRTF.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" [0177.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390 [0177.619] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NLD", cAlternateFileName="")) returned 1 [0177.619] wcscmp (_String1="Search.NLD", _String2=".") returned 1 [0177.620] wcscmp (_String1="Search.NLD", _String2="..") returned 1 [0177.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcd38 [0177.620] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.620] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.620] wcscat (in: _Dest=0x66dcd38, _Source="Search.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" [0177.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0177.621] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NLD", cAlternateFileName="")) returned 1 [0177.621] wcscmp (_String1="SendMail.NLD", _String2=".") returned 1 [0177.621] wcscmp (_String1="SendMail.NLD", _String2="..") returned 1 [0177.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc948 [0177.621] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.621] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.621] wcscat (in: _Dest=0x66dc948, _Source="SendMail.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" [0177.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0177.622] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0177.622] wcscmp (_String1="Services", _String2=".") returned 1 [0177.622] wcscmp (_String1="Services", _String2="..") returned 1 [0177.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee630 [0177.622] wcscpy (in: _Dest=0x66ee630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.622] wcscat (in: _Dest=0x66ee630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.622] wcscat (in: _Dest=0x66ee630, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0177.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0177.624] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NLD", cAlternateFileName="")) returned 1 [0177.624] wcscmp (_String1="Spelling.NLD", _String2=".") returned 1 [0177.624] wcscmp (_String1="Spelling.NLD", _String2="..") returned 1 [0177.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd008 [0177.624] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.624] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.624] wcscat (in: _Dest=0x66dd008, _Source="Spelling.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" [0177.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0177.625] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NLD", cAlternateFileName="")) returned 1 [0177.625] wcscmp (_String1="updater.NLD", _String2=".") returned 1 [0177.625] wcscmp (_String1="updater.NLD", _String2="..") returned 1 [0177.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db8f8 [0177.625] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.625] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.625] wcscat (in: _Dest=0x66db8f8, _Source="updater.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" [0177.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0177.984] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 1 [0177.984] wcscmp (_String1="Weblink.NLD", _String2=".") returned 1 [0177.984] wcscmp (_String1="Weblink.NLD", _String2="..") returned 1 [0177.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc5e8 [0177.984] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0177.984] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0177.984] wcscat (in: _Dest=0x66dc5e8, _Source="Weblink.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" [0180.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0180.611] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 0 [0180.611] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0180.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0180.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674acb8) returned 1 [0180.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 Thread: id = 2989 os_tid = 0xb94 [0160.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b1b8 [0160.301] wcscpy (in: _Dest=0x674b1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0160.301] wcscat (in: _Dest=0x674b1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0160.301] wcscat (in: _Dest=0x674b1b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*" [0160.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0160.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0165.520] wcscmp (_String1=".", _String2=".") returned 0 [0165.520] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.520] wcscmp (_String1="..", _String2=".") returned 1 [0165.520] wcscmp (_String1="..", _String2="..") returned 0 [0165.520] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.POL", cAlternateFileName="ACCESS~1.POL")) returned 1 [0165.521] wcscmp (_String1="accessibility.POL", _String2=".") returned 1 [0165.521] wcscmp (_String1="accessibility.POL", _String2="..") returned 1 [0165.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0f0b0 [0165.521] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0165.521] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0165.521] wcscat (in: _Dest=0x3e0f0b0, _Source="accessibility.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" [0172.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol")) returned 0x20 [0172.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0172.791] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.791] GetLastError () returned 0x5 [0172.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0172.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 [0172.791] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.POL", cAlternateFileName="")) returned 1 [0172.791] wcscmp (_String1="Acroform.POL", _String2=".") returned 1 [0172.791] wcscmp (_String1="Acroform.POL", _String2="..") returned 1 [0172.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3557a0 [0172.791] wcscpy (in: _Dest=0x3557a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0172.791] wcscat (in: _Dest=0x3557a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0172.791] wcscat (in: _Dest=0x3557a0, _Source="Acroform.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" [0172.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol")) returned 0x20 [0173.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0173.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.594] GetLastError () returned 0x5 [0173.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0173.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 [0173.594] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.POL", cAlternateFileName="ADOBEC~1.POL")) returned 1 [0173.594] wcscmp (_String1="AdobeCollabSync.POL", _String2=".") returned 1 [0173.594] wcscmp (_String1="AdobeCollabSync.POL", _String2="..") returned 1 [0173.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c14a8 [0173.594] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0173.594] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0173.594] wcscat (in: _Dest=0x69c14a8, _Source="AdobeCollabSync.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" [0177.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0177.547] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.POL", cAlternateFileName="")) returned 1 [0177.547] wcscmp (_String1="Annots.POL", _String2=".") returned 1 [0177.547] wcscmp (_String1="Annots.POL", _String2="..") returned 1 [0177.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc5e8 [0177.547] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.547] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.547] wcscat (in: _Dest=0x66dc5e8, _Source="Annots.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" [0177.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0177.549] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.POL", cAlternateFileName="BRDLAN~1.POL")) returned 1 [0177.549] wcscmp (_String1="BRdlang32.POL", _String2=".") returned 1 [0177.549] wcscmp (_String1="BRdlang32.POL", _String2="..") returned 1 [0177.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958830 [0177.549] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.549] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.549] wcscat (in: _Dest=0x6958830, _Source="BRdlang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" [0177.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0177.550] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.POL", cAlternateFileName="")) returned 1 [0177.550] wcscmp (_String1="Checkers.POL", _String2=".") returned 1 [0177.550] wcscmp (_String1="Checkers.POL", _String2="..") returned 1 [0177.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db868 [0177.550] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.550] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.550] wcscat (in: _Dest=0x66db868, _Source="Checkers.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" [0177.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0177.552] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.POL", cAlternateFileName="")) returned 1 [0177.552] wcscmp (_String1="DigSig.POL", _String2=".") returned 1 [0177.552] wcscmp (_String1="DigSig.POL", _String2="..") returned 1 [0177.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc558 [0177.552] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.552] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.552] wcscat (in: _Dest=0x66dc558, _Source="DigSig.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" [0177.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0177.553] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.POL", cAlternateFileName="")) returned 1 [0177.553] wcscmp (_String1="DVA.POL", _String2=".") returned 1 [0177.553] wcscmp (_String1="DVA.POL", _String2="..") returned 1 [0177.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef2f0 [0177.554] wcscpy (in: _Dest=0x66ef2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.554] wcscat (in: _Dest=0x66ef2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.554] wcscat (in: _Dest=0x66ef2f0, _Source="DVA.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" [0177.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0177.555] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.POL", cAlternateFileName="")) returned 1 [0177.555] wcscmp (_String1="eBook.POL", _String2=".") returned 1 [0177.555] wcscmp (_String1="eBook.POL", _String2="..") returned 1 [0177.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc288 [0177.555] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.555] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.555] wcscat (in: _Dest=0x66dc288, _Source="eBook.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" [0177.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0177.557] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.POL", cAlternateFileName="")) returned 1 [0177.557] wcscmp (_String1="EScript.POL", _String2=".") returned 1 [0177.557] wcscmp (_String1="EScript.POL", _String2="..") returned 1 [0177.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcaf8 [0177.557] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.557] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.557] wcscat (in: _Dest=0x66dcaf8, _Source="EScript.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" [0177.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0177.558] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.POL", cAlternateFileName="")) returned 1 [0177.559] wcscmp (_String1="IA32.POL", _String2=".") returned 1 [0177.559] wcscmp (_String1="IA32.POL", _String2="..") returned 1 [0177.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0177.559] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.559] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.559] wcscat (in: _Dest=0x66f00c0, _Source="IA32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" [0177.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0177.560] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.POL", cAlternateFileName="MAKEAC~1.POL")) returned 1 [0177.560] wcscmp (_String1="makeaccessible.POL", _String2=".") returned 1 [0177.560] wcscmp (_String1="makeaccessible.POL", _String2="..") returned 1 [0177.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c01e8 [0177.560] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.560] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.560] wcscat (in: _Dest=0x69c01e8, _Source="makeaccessible.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" [0177.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0177.562] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.POL", cAlternateFileName="MULTIM~1.POL")) returned 1 [0177.562] wcscmp (_String1="Multimedia.POL", _String2=".") returned 1 [0177.562] wcscmp (_String1="Multimedia.POL", _String2="..") returned 1 [0177.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959540 [0177.562] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.562] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.562] wcscat (in: _Dest=0x6959540, _Source="Multimedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" [0177.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0177.563] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.POL", cAlternateFileName="")) returned 1 [0177.563] wcscmp (_String1="pddom.POL", _String2=".") returned 1 [0177.563] wcscmp (_String1="pddom.POL", _String2="..") returned 1 [0177.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0177.563] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.563] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.564] wcscat (in: _Dest=0x66dc9d8, _Source="pddom.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" [0177.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0177.565] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.POL", cAlternateFileName="")) returned 1 [0177.565] wcscmp (_String1="PPKLite.POL", _String2=".") returned 1 [0177.565] wcscmp (_String1="PPKLite.POL", _String2="..") returned 1 [0177.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0177.565] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.565] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.565] wcscat (in: _Dest=0x66dd2d8, _Source="PPKLite.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" [0177.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0177.567] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.POL", cAlternateFileName="")) returned 1 [0177.567] wcscmp (_String1="RdLang32.POL", _String2=".") returned 1 [0177.567] wcscmp (_String1="RdLang32.POL", _String2="..") returned 1 [0177.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd098 [0177.567] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.567] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.567] wcscat (in: _Dest=0x66dd098, _Source="RdLang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" [0177.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0177.568] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.POL", cAlternateFileName="READOU~1.POL")) returned 1 [0177.568] wcscmp (_String1="ReadOutLoud.POL", _String2=".") returned 1 [0177.568] wcscmp (_String1="ReadOutLoud.POL", _String2="..") returned 1 [0177.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69594a8 [0177.568] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.568] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.568] wcscat (in: _Dest=0x69594a8, _Source="ReadOutLoud.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" [0177.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0177.570] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.POL", cAlternateFileName="")) returned 1 [0177.570] wcscmp (_String1="reflow.POL", _String2=".") returned 1 [0177.570] wcscmp (_String1="reflow.POL", _String2="..") returned 1 [0177.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc708 [0177.570] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.570] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.570] wcscat (in: _Dest=0x66dc708, _Source="reflow.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" [0177.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0177.571] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.POL", cAlternateFileName="SAVEAS~1.POL")) returned 1 [0177.571] wcscmp (_String1="SaveAsRTF.POL", _String2=".") returned 1 [0177.572] wcscmp (_String1="SaveAsRTF.POL", _String2="..") returned 1 [0177.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959248 [0177.572] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.572] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.572] wcscat (in: _Dest=0x6959248, _Source="SaveAsRTF.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" [0177.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0177.573] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.POL", cAlternateFileName="")) returned 1 [0177.573] wcscmp (_String1="Search.POL", _String2=".") returned 1 [0177.573] wcscmp (_String1="Search.POL", _String2="..") returned 1 [0177.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0177.573] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.573] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.573] wcscat (in: _Dest=0x66db598, _Source="Search.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" [0177.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0177.575] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.POL", cAlternateFileName="")) returned 1 [0177.575] wcscmp (_String1="SendMail.POL", _String2=".") returned 1 [0177.575] wcscmp (_String1="SendMail.POL", _String2="..") returned 1 [0177.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0177.575] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.575] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.575] wcscat (in: _Dest=0x66dd1b8, _Source="SendMail.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" [0177.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0177.576] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0177.576] wcscmp (_String1="Services", _String2=".") returned 1 [0177.576] wcscmp (_String1="Services", _String2="..") returned 1 [0177.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0177.576] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.576] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.576] wcscat (in: _Dest=0x66ee520, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0177.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0177.578] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.POL", cAlternateFileName="")) returned 1 [0177.578] wcscmp (_String1="Spelling.POL", _String2=".") returned 1 [0177.578] wcscmp (_String1="Spelling.POL", _String2="..") returned 1 [0177.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dce58 [0177.578] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.578] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.578] wcscat (in: _Dest=0x66dce58, _Source="Spelling.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" [0177.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0177.579] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.POL", cAlternateFileName="")) returned 1 [0177.579] wcscmp (_String1="updater.POL", _String2=".") returned 1 [0177.579] wcscmp (_String1="updater.POL", _String2="..") returned 1 [0177.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbfb8 [0177.579] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.579] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.579] wcscat (in: _Dest=0x66dbfb8, _Source="updater.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" [0177.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0177.581] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 1 [0177.581] wcscmp (_String1="WebLink.POL", _String2=".") returned 1 [0177.581] wcscmp (_String1="WebLink.POL", _String2="..") returned 1 [0177.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcca8 [0177.581] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0177.581] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0177.581] wcscat (in: _Dest=0x66dcca8, _Source="WebLink.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" [0177.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0177.582] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 0 [0177.582] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0177.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0177.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b1b8) returned 1 [0177.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 Thread: id = 2990 os_tid = 0x73c [0160.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674bbb8 [0160.301] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0160.301] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0160.301] wcscat (in: _Dest=0x674bbb8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*" [0160.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0160.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0165.571] wcscmp (_String1=".", _String2=".") returned 0 [0165.571] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.571] wcscmp (_String1="..", _String2=".") returned 1 [0165.571] wcscmp (_String1="..", _String2="..") returned 0 [0165.571] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.PTB", cAlternateFileName="ACCESS~1.PTB")) returned 1 [0165.571] wcscmp (_String1="accessibility.PTB", _String2=".") returned 1 [0165.571] wcscmp (_String1="accessibility.PTB", _String2="..") returned 1 [0165.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0eb10 [0165.572] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0165.572] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0165.572] wcscat (in: _Dest=0x3e0eb10, _Source="accessibility.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" [0172.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb")) returned 0x20 [0172.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0172.090] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.090] GetLastError () returned 0x5 [0172.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0172.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 [0172.090] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.PTB", cAlternateFileName="")) returned 1 [0172.090] wcscmp (_String1="Acroform.PTB", _String2=".") returned 1 [0172.090] wcscmp (_String1="Acroform.PTB", _String2="..") returned 1 [0172.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.090] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.090] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.090] wcscat (in: _Dest=0x66dc9d8, _Source="Acroform.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" [0172.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb")) returned 0x20 [0172.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0172.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.096] GetLastError () returned 0x5 [0172.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0172.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.096] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.PTB", cAlternateFileName="ADOBEC~1.PTB")) returned 1 [0172.096] wcscmp (_String1="AdobeCollabSync.PTB", _String2=".") returned 1 [0172.096] wcscmp (_String1="AdobeCollabSync.PTB", _String2="..") returned 1 [0172.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0172.097] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.097] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.097] wcscat (in: _Dest=0x3e0de90, _Source="AdobeCollabSync.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" [0172.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb")) returned 0x20 [0172.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0172.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.097] GetLastError () returned 0x5 [0172.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0172.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0172.097] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.PTB", cAlternateFileName="")) returned 1 [0172.097] wcscmp (_String1="Annots.PTB", _String2=".") returned 1 [0172.098] wcscmp (_String1="Annots.PTB", _String2="..") returned 1 [0172.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.098] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.098] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.098] wcscat (in: _Dest=0x66dc9d8, _Source="Annots.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" [0172.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb")) returned 0x20 [0172.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0172.098] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.098] GetLastError () returned 0x5 [0172.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0172.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.098] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.PTB", cAlternateFileName="BRDLAN~1.PTB")) returned 1 [0172.098] wcscmp (_String1="BRdlang32.PTB", _String2=".") returned 1 [0172.099] wcscmp (_String1="BRdlang32.PTB", _String2="..") returned 1 [0172.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0172.099] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.099] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.099] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" [0172.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb")) returned 0x20 [0172.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0172.114] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.114] GetLastError () returned 0x5 [0172.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0172.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.114] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.PTB", cAlternateFileName="")) returned 1 [0172.114] wcscmp (_String1="Checkers.PTB", _String2=".") returned 1 [0172.114] wcscmp (_String1="Checkers.PTB", _String2="..") returned 1 [0172.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.114] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.114] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.115] wcscat (in: _Dest=0x66db7d8, _Source="Checkers.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" [0172.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb")) returned 0x20 [0172.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0172.115] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.115] GetLastError () returned 0x5 [0172.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0172.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.115] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.PTB", cAlternateFileName="")) returned 1 [0172.115] wcscmp (_String1="DigSig.PTB", _String2=".") returned 1 [0172.115] wcscmp (_String1="DigSig.PTB", _String2="..") returned 1 [0172.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0172.115] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.115] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.116] wcscat (in: _Dest=0x66db7d8, _Source="DigSig.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" [0172.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb")) returned 0x20 [0172.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0172.138] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.138] GetLastError () returned 0x5 [0172.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0172.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.139] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.PTB", cAlternateFileName="")) returned 1 [0172.139] wcscmp (_String1="DVA.PTB", _String2=".") returned 1 [0172.139] wcscmp (_String1="DVA.PTB", _String2="..") returned 1 [0172.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cab8 [0172.139] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.139] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.139] wcscat (in: _Dest=0x682cab8, _Source="DVA.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" [0172.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb")) returned 0x20 [0172.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0172.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.140] GetLastError () returned 0x5 [0172.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0172.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 [0172.140] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.PTB", cAlternateFileName="")) returned 1 [0172.140] wcscmp (_String1="eBook.PTB", _String2=".") returned 1 [0172.140] wcscmp (_String1="eBook.PTB", _String2="..") returned 1 [0172.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0172.140] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.140] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.140] wcscat (in: _Dest=0x66db7d8, _Source="eBook.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" [0172.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb")) returned 0x20 [0172.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0172.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.141] GetLastError () returned 0x5 [0172.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0172.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.141] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.PTB", cAlternateFileName="")) returned 1 [0172.141] wcscmp (_String1="EScript.PTB", _String2=".") returned 1 [0172.141] wcscmp (_String1="EScript.PTB", _String2="..") returned 1 [0172.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.142] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.142] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.142] wcscat (in: _Dest=0x66db7d8, _Source="EScript.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" [0172.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb")) returned 0x20 [0172.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0172.142] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.143] GetLastError () returned 0x5 [0172.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0172.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.143] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.PTB", cAlternateFileName="")) returned 1 [0172.143] wcscmp (_String1="IA32.PTB", _String2=".") returned 1 [0172.143] wcscmp (_String1="IA32.PTB", _String2="..") returned 1 [0172.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0172.143] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.143] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.143] wcscat (in: _Dest=0x682cab8, _Source="IA32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" [0172.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb")) returned 0x20 [0172.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0172.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.144] GetLastError () returned 0x5 [0172.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0172.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 [0172.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.PTB", cAlternateFileName="MAKEAC~1.PTB")) returned 1 [0172.144] wcscmp (_String1="makeaccessible.PTB", _String2=".") returned 1 [0172.145] wcscmp (_String1="makeaccessible.PTB", _String2="..") returned 1 [0172.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0172.145] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.145] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.145] wcscat (in: _Dest=0x3e0de90, _Source="makeaccessible.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" [0172.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb")) returned 0x20 [0172.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0172.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.146] GetLastError () returned 0x5 [0172.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0172.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0172.146] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.PTB", cAlternateFileName="MULTIM~1.PTB")) returned 1 [0172.146] wcscmp (_String1="Multimedia.PTB", _String2=".") returned 1 [0172.146] wcscmp (_String1="Multimedia.PTB", _String2="..") returned 1 [0172.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0172.146] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.146] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.146] wcscat (in: _Dest=0x69589f8, _Source="Multimedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" [0172.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb")) returned 0x20 [0172.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0172.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.147] GetLastError () returned 0x5 [0172.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0172.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.147] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.PTB", cAlternateFileName="")) returned 1 [0172.147] wcscmp (_String1="pddom.PTB", _String2=".") returned 1 [0172.147] wcscmp (_String1="pddom.PTB", _String2="..") returned 1 [0172.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db7d8 [0172.147] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.147] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.147] wcscat (in: _Dest=0x66db7d8, _Source="pddom.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" [0172.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb")) returned 0x20 [0172.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0172.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.148] GetLastError () returned 0x5 [0172.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0172.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.148] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.PTB", cAlternateFileName="")) returned 1 [0172.149] wcscmp (_String1="PPKLITE.PTB", _String2=".") returned 1 [0172.149] wcscmp (_String1="PPKLITE.PTB", _String2="..") returned 1 [0172.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.149] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.149] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.149] wcscat (in: _Dest=0x66db7d8, _Source="PPKLITE.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" [0172.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb")) returned 0x20 [0172.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0172.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.149] GetLastError () returned 0x5 [0172.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0172.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.150] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6de100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x150600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.PTB", cAlternateFileName="")) returned 1 [0172.150] wcscmp (_String1="RdLang32.PTB", _String2=".") returned 1 [0172.150] wcscmp (_String1="RdLang32.PTB", _String2="..") returned 1 [0172.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.150] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.150] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.150] wcscat (in: _Dest=0x66db7d8, _Source="RdLang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" [0172.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb")) returned 0x20 [0172.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0172.151] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.151] GetLastError () returned 0x5 [0172.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0172.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.151] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.PTB", cAlternateFileName="READOU~1.PTB")) returned 1 [0172.151] wcscmp (_String1="ReadOutLoud.PTB", _String2=".") returned 1 [0172.151] wcscmp (_String1="ReadOutLoud.PTB", _String2="..") returned 1 [0172.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69589f8 [0172.151] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.151] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.151] wcscat (in: _Dest=0x69589f8, _Source="ReadOutLoud.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" [0172.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb")) returned 0x20 [0172.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0172.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.152] GetLastError () returned 0x5 [0172.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0172.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.152] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.PTB", cAlternateFileName="")) returned 1 [0172.152] wcscmp (_String1="reflow.PTB", _String2=".") returned 1 [0172.152] wcscmp (_String1="reflow.PTB", _String2="..") returned 1 [0172.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0172.152] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.152] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.153] wcscat (in: _Dest=0x66db7d8, _Source="reflow.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" [0172.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb")) returned 0x20 [0172.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0172.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.153] GetLastError () returned 0x5 [0172.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0172.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.154] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.PTB", cAlternateFileName="SAVEAS~1.PTB")) returned 1 [0172.154] wcscmp (_String1="SaveAsRTF.PTB", _String2=".") returned 1 [0172.154] wcscmp (_String1="SaveAsRTF.PTB", _String2="..") returned 1 [0172.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0172.154] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.154] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.154] wcscat (in: _Dest=0x69589f8, _Source="SaveAsRTF.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" [0172.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb")) returned 0x20 [0172.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0172.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.154] GetLastError () returned 0x5 [0172.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0172.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.155] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.PTB", cAlternateFileName="")) returned 1 [0172.155] wcscmp (_String1="Search.PTB", _String2=".") returned 1 [0172.155] wcscmp (_String1="Search.PTB", _String2="..") returned 1 [0172.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0172.155] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.155] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.155] wcscat (in: _Dest=0x66db7d8, _Source="Search.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" [0172.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb")) returned 0x20 [0172.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0172.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.156] GetLastError () returned 0x5 [0172.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0172.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.156] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.PTB", cAlternateFileName="")) returned 1 [0172.156] wcscmp (_String1="SendMail.PTB", _String2=".") returned 1 [0172.156] wcscmp (_String1="SendMail.PTB", _String2="..") returned 1 [0172.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.156] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.156] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.156] wcscat (in: _Dest=0x66db7d8, _Source="SendMail.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" [0172.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb")) returned 0x20 [0172.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0172.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.157] GetLastError () returned 0x5 [0172.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0172.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.157] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.157] wcscmp (_String1="Services", _String2=".") returned 1 [0172.157] wcscmp (_String1="Services", _String2="..") returned 1 [0172.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cab8 [0172.157] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.157] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.157] wcscat (in: _Dest=0x682cab8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0172.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0172.158] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0172.158] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0172.158] wcscat (in: _Dest=0x66db7d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*" [0172.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0172.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0172.182] wcscmp (_String1=".", _String2=".") returned 0 [0172.182] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.182] wcscmp (_String1="..", _String2=".") returned 1 [0172.182] wcscmp (_String1="..", _String2="..") returned 0 [0172.182] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0172.182] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0172.182] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0172.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0172.182] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0172.182] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0172.182] wcscat (in: _Dest=0x697e228, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" [0172.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx")) returned 0x20 [0172.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.247] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.247] GetLastError () returned 0x5 [0172.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0172.247] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.247] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.247] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0172.248] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0172.248] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0172.248] wcscat (in: _Dest=0x697e228, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" [0172.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx")) returned 0x20 [0172.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.326] GetLastError () returned 0x5 [0172.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0172.326] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.326] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0172.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0172.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 [0172.327] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.PTB", cAlternateFileName="")) returned 1 [0172.327] wcscmp (_String1="Spelling.PTB", _String2=".") returned 1 [0172.327] wcscmp (_String1="Spelling.PTB", _String2="..") returned 1 [0172.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.327] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.327] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.327] wcscat (in: _Dest=0x66db7d8, _Source="Spelling.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" [0172.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb")) returned 0x20 [0172.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0172.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.328] GetLastError () returned 0x5 [0172.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0172.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.328] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.PTB", cAlternateFileName="")) returned 1 [0172.328] wcscmp (_String1="updater.PTB", _String2=".") returned 1 [0172.328] wcscmp (_String1="updater.PTB", _String2="..") returned 1 [0172.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.328] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.328] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.328] wcscat (in: _Dest=0x66db7d8, _Source="updater.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" [0172.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb")) returned 0x20 [0172.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0172.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.329] GetLastError () returned 0x5 [0172.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0172.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.329] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 1 [0172.330] wcscmp (_String1="Weblink.PTB", _String2=".") returned 1 [0172.330] wcscmp (_String1="Weblink.PTB", _String2="..") returned 1 [0172.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.330] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0172.330] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0172.330] wcscat (in: _Dest=0x66db7d8, _Source="Weblink.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" [0172.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb")) returned 0x20 [0172.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0172.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.949] GetLastError () returned 0x5 [0172.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0172.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.950] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 0 [0172.950] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0172.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0172.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 [0172.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 Thread: id = 2991 os_tid = 0xdb0 [0160.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674b6b8 [0160.303] wcscpy (in: _Dest=0x674b6b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0160.303] wcscat (in: _Dest=0x674b6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0160.303] wcscat (in: _Dest=0x674b6b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*" [0160.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c26e0 [0160.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0165.572] wcscmp (_String1=".", _String2=".") returned 0 [0165.572] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.572] wcscmp (_String1="..", _String2=".") returned 1 [0165.572] wcscmp (_String1="..", _String2="..") returned 0 [0165.572] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUM", cAlternateFileName="ACCESS~1.RUM")) returned 1 [0165.572] wcscmp (_String1="Accessibility.RUM", _String2=".") returned 1 [0165.572] wcscmp (_String1="Accessibility.RUM", _String2="..") returned 1 [0165.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0de90 [0165.572] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0165.573] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0165.573] wcscat (in: _Dest=0x3e0de90, _Source="Accessibility.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" [0172.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum")) returned 0x20 [0172.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0172.094] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.095] GetLastError () returned 0x5 [0172.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0172.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0172.095] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUM", cAlternateFileName="")) returned 1 [0172.095] wcscmp (_String1="Acroform.RUM", _String2=".") returned 1 [0172.095] wcscmp (_String1="Acroform.RUM", _String2="..") returned 1 [0172.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.095] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.095] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.095] wcscat (in: _Dest=0x66db7d8, _Source="Acroform.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" [0172.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum")) returned 0x20 [0172.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0172.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.110] GetLastError () returned 0x5 [0172.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0172.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.111] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUM", cAlternateFileName="ADOBEC~1.RUM")) returned 1 [0172.111] wcscmp (_String1="AdobeCollabSync.RUM", _String2=".") returned 1 [0172.111] wcscmp (_String1="AdobeCollabSync.RUM", _String2="..") returned 1 [0172.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0172.111] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.111] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.111] wcscat (in: _Dest=0x3e0ecf0, _Source="AdobeCollabSync.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" [0172.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum")) returned 0x20 [0172.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0172.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.111] GetLastError () returned 0x5 [0172.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0172.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0172.112] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUM", cAlternateFileName="")) returned 1 [0172.112] wcscmp (_String1="Annots.RUM", _String2=".") returned 1 [0172.112] wcscmp (_String1="Annots.RUM", _String2="..") returned 1 [0172.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0172.112] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.112] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.112] wcscat (in: _Dest=0x66db7d8, _Source="Annots.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" [0172.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum")) returned 0x20 [0172.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0172.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.112] GetLastError () returned 0x5 [0172.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0172.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.113] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUM", cAlternateFileName="BRDLAN~1.RUM")) returned 1 [0172.113] wcscmp (_String1="BRdlang32.RUM", _String2=".") returned 1 [0172.113] wcscmp (_String1="BRdlang32.RUM", _String2="..") returned 1 [0172.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0172.113] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.113] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.113] wcscat (in: _Dest=0x69589f8, _Source="BRdlang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" [0172.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum")) returned 0x20 [0172.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0172.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.136] GetLastError () returned 0x5 [0172.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0172.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.136] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUM", cAlternateFileName="")) returned 1 [0172.136] wcscmp (_String1="Checkers.RUM", _String2=".") returned 1 [0172.136] wcscmp (_String1="Checkers.RUM", _String2="..") returned 1 [0172.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.136] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.136] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.136] wcscat (in: _Dest=0x66dc9d8, _Source="Checkers.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" [0172.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum")) returned 0x20 [0172.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0172.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.137] GetLastError () returned 0x5 [0172.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0172.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.137] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUM", cAlternateFileName="")) returned 1 [0172.137] wcscmp (_String1="DigSig.RUM", _String2=".") returned 1 [0172.137] wcscmp (_String1="DigSig.RUM", _String2="..") returned 1 [0172.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.137] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.137] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.137] wcscat (in: _Dest=0x66dc9d8, _Source="DigSig.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" [0172.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum")) returned 0x20 [0172.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0172.171] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.171] GetLastError () returned 0x5 [0172.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0172.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.172] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUM", cAlternateFileName="")) returned 1 [0172.172] wcscmp (_String1="DVA.RUM", _String2=".") returned 1 [0172.172] wcscmp (_String1="DVA.RUM", _String2="..") returned 1 [0172.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0172.172] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.172] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.172] wcscat (in: _Dest=0x682c568, _Source="DVA.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" [0172.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum")) returned 0x20 [0172.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0172.173] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.173] GetLastError () returned 0x5 [0172.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0172.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.173] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUM", cAlternateFileName="")) returned 1 [0172.173] wcscmp (_String1="eBook.RUM", _String2=".") returned 1 [0172.173] wcscmp (_String1="eBook.RUM", _String2="..") returned 1 [0172.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0172.173] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.173] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.173] wcscat (in: _Dest=0x66dc9d8, _Source="eBook.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" [0172.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum")) returned 0x20 [0172.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0172.174] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.174] GetLastError () returned 0x5 [0172.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0172.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.174] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUM", cAlternateFileName="")) returned 1 [0172.174] wcscmp (_String1="EScript.RUM", _String2=".") returned 1 [0172.175] wcscmp (_String1="EScript.RUM", _String2="..") returned 1 [0172.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.175] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.175] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.175] wcscat (in: _Dest=0x66dc9d8, _Source="EScript.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" [0172.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum")) returned 0x20 [0172.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0172.175] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.175] GetLastError () returned 0x5 [0172.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0172.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.176] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUM", cAlternateFileName="")) returned 1 [0172.176] wcscmp (_String1="IA32.RUM", _String2=".") returned 1 [0172.176] wcscmp (_String1="IA32.RUM", _String2="..") returned 1 [0172.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0172.176] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.176] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.176] wcscat (in: _Dest=0x682c568, _Source="IA32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" [0172.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum")) returned 0x20 [0172.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0172.177] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.177] GetLastError () returned 0x5 [0172.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0172.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.177] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUM", cAlternateFileName="MAKEAC~1.RUM")) returned 1 [0172.177] wcscmp (_String1="MakeAccessible.RUM", _String2=".") returned 1 [0172.177] wcscmp (_String1="MakeAccessible.RUM", _String2="..") returned 1 [0172.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0172.177] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.177] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.177] wcscat (in: _Dest=0x2c7198, _Source="MakeAccessible.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" [0172.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum")) returned 0x20 [0172.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0172.178] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.178] GetLastError () returned 0x5 [0172.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0172.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 [0172.178] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUM", cAlternateFileName="MULTIM~1.RUM")) returned 1 [0172.179] wcscmp (_String1="Multimedia.RUM", _String2=".") returned 1 [0172.179] wcscmp (_String1="Multimedia.RUM", _String2="..") returned 1 [0172.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0172.179] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.179] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.179] wcscat (in: _Dest=0x6958370, _Source="Multimedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" [0172.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum")) returned 0x20 [0172.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0172.179] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.180] GetLastError () returned 0x5 [0172.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0172.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.180] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUM", cAlternateFileName="")) returned 1 [0172.180] wcscmp (_String1="PDDom.RUM", _String2=".") returned 1 [0172.180] wcscmp (_String1="PDDom.RUM", _String2="..") returned 1 [0172.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0172.180] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.180] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.180] wcscat (in: _Dest=0x66dc9d8, _Source="PDDom.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" [0172.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum")) returned 0x20 [0172.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0172.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.245] GetLastError () returned 0x5 [0172.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0172.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.245] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUM", cAlternateFileName="")) returned 1 [0172.245] wcscmp (_String1="PPKLITE.RUM", _String2=".") returned 1 [0172.245] wcscmp (_String1="PPKLITE.RUM", _String2="..") returned 1 [0172.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.245] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.245] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.245] wcscat (in: _Dest=0x66dc9d8, _Source="PPKLITE.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" [0172.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum")) returned 0x20 [0172.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0172.306] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.306] GetLastError () returned 0x5 [0172.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0172.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.306] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd09aee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUM", cAlternateFileName="")) returned 1 [0172.306] wcscmp (_String1="RdLang32.RUM", _String2=".") returned 1 [0172.306] wcscmp (_String1="RdLang32.RUM", _String2="..") returned 1 [0172.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.306] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.306] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.306] wcscat (in: _Dest=0x66dc9d8, _Source="RdLang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" [0172.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum")) returned 0x20 [0172.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0172.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.307] GetLastError () returned 0x5 [0172.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0172.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.307] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUM", cAlternateFileName="READOU~1.RUM")) returned 1 [0172.308] wcscmp (_String1="ReadOutLoud.RUM", _String2=".") returned 1 [0172.308] wcscmp (_String1="ReadOutLoud.RUM", _String2="..") returned 1 [0172.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69589f8 [0172.308] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.308] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.308] wcscat (in: _Dest=0x69589f8, _Source="ReadOutLoud.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" [0172.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum")) returned 0x20 [0172.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0172.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.308] GetLastError () returned 0x5 [0172.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0172.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.309] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUM", cAlternateFileName="")) returned 1 [0172.309] wcscmp (_String1="Reflow.RUM", _String2=".") returned 1 [0172.309] wcscmp (_String1="Reflow.RUM", _String2="..") returned 1 [0172.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.309] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.309] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.309] wcscat (in: _Dest=0x66dc9d8, _Source="Reflow.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" [0172.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum")) returned 0x20 [0172.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0172.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.310] GetLastError () returned 0x5 [0172.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0172.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.310] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUM", cAlternateFileName="SAVEAS~1.RUM")) returned 1 [0172.310] wcscmp (_String1="SaveAsRTF.RUM", _String2=".") returned 1 [0172.310] wcscmp (_String1="SaveAsRTF.RUM", _String2="..") returned 1 [0172.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0172.310] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.310] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.310] wcscat (in: _Dest=0x69589f8, _Source="SaveAsRTF.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" [0172.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum")) returned 0x20 [0172.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0172.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.311] GetLastError () returned 0x5 [0172.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0172.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.311] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUM", cAlternateFileName="")) returned 1 [0172.311] wcscmp (_String1="Search.RUM", _String2=".") returned 1 [0172.312] wcscmp (_String1="Search.RUM", _String2="..") returned 1 [0172.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.312] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.312] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.312] wcscat (in: _Dest=0x66dc9d8, _Source="Search.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" [0172.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum")) returned 0x20 [0172.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0172.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.313] GetLastError () returned 0x5 [0172.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0172.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.313] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUM", cAlternateFileName="")) returned 1 [0172.314] wcscmp (_String1="SendMail.RUM", _String2=".") returned 1 [0172.314] wcscmp (_String1="SendMail.RUM", _String2="..") returned 1 [0172.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.314] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.314] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.314] wcscat (in: _Dest=0x66dc9d8, _Source="SendMail.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" [0172.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum")) returned 0x20 [0172.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0172.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.314] GetLastError () returned 0x5 [0172.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0172.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.315] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.315] wcscmp (_String1="Services", _String2=".") returned 1 [0172.315] wcscmp (_String1="Services", _String2="..") returned 1 [0172.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c9a8 [0172.315] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.315] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.315] wcscat (in: _Dest=0x682c9a8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0172.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.315] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0172.315] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0172.315] wcscat (in: _Dest=0x66dc9d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*" [0172.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0172.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0172.316] wcscmp (_String1=".", _String2=".") returned 0 [0172.316] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.316] wcscmp (_String1="..", _String2=".") returned 1 [0172.316] wcscmp (_String1="..", _String2="..") returned 0 [0172.316] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x93a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0172.316] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0172.316] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0172.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0172.316] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0172.316] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0172.316] wcscat (in: _Dest=0x697ea08, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" [0172.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx")) returned 0x20 [0172.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.317] GetLastError () returned 0x5 [0172.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0172.317] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.317] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.317] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0172.317] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0172.317] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0172.317] wcscat (in: _Dest=0x697ea08, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" [0172.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx")) returned 0x20 [0172.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.318] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.318] GetLastError () returned 0x5 [0172.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0172.318] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.319] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0172.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0172.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0172.319] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUM", cAlternateFileName="")) returned 1 [0172.319] wcscmp (_String1="Spelling.RUM", _String2=".") returned 1 [0172.319] wcscmp (_String1="Spelling.RUM", _String2="..") returned 1 [0172.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.319] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.319] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.319] wcscat (in: _Dest=0x66dc9d8, _Source="Spelling.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" [0172.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum")) returned 0x20 [0172.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0172.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.320] GetLastError () returned 0x5 [0172.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0172.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.320] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUM", cAlternateFileName="")) returned 1 [0172.320] wcscmp (_String1="Updater.RUM", _String2=".") returned 1 [0172.320] wcscmp (_String1="Updater.RUM", _String2="..") returned 1 [0172.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.320] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.321] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.321] wcscat (in: _Dest=0x66dc9d8, _Source="Updater.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" [0172.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum")) returned 0x20 [0172.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0172.321] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.321] GetLastError () returned 0x5 [0172.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0172.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.322] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 1 [0172.322] wcscmp (_String1="Weblink.RUM", _String2=".") returned 1 [0172.322] wcscmp (_String1="Weblink.RUM", _String2="..") returned 1 [0172.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.322] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0172.322] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0172.322] wcscat (in: _Dest=0x66dc9d8, _Source="Weblink.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" [0172.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum")) returned 0x20 [0172.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0172.322] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.323] GetLastError () returned 0x5 [0172.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0172.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.323] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 0 [0172.323] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0172.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26e0) returned 1 [0172.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b6b8) returned 1 [0172.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 Thread: id = 2992 os_tid = 0xdb8 [0160.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674af38 [0160.303] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0160.303] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0160.303] wcscat (in: _Dest=0x674af38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*" [0160.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0160.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0165.570] wcscmp (_String1=".", _String2=".") returned 0 [0165.570] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.570] wcscmp (_String1="..", _String2=".") returned 1 [0165.570] wcscmp (_String1="..", _String2="..") returned 0 [0165.570] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUS", cAlternateFileName="ACCESS~1.RUS")) returned 1 [0165.570] wcscmp (_String1="Accessibility.RUS", _String2=".") returned 1 [0165.570] wcscmp (_String1="Accessibility.RUS", _String2="..") returned 1 [0165.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ecf0 [0165.571] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0165.571] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0165.571] wcscat (in: _Dest=0x3e0ecf0, _Source="Accessibility.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" [0172.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus")) returned 0x20 [0172.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0172.091] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.091] GetLastError () returned 0x5 [0172.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0172.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0172.092] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUS", cAlternateFileName="")) returned 1 [0172.092] wcscmp (_String1="Acroform.RUS", _String2=".") returned 1 [0172.092] wcscmp (_String1="Acroform.RUS", _String2="..") returned 1 [0172.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0172.092] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.092] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.092] wcscat (in: _Dest=0x66dd2d8, _Source="Acroform.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" [0172.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus")) returned 0x20 [0172.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0172.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.100] GetLastError () returned 0x5 [0172.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0172.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.100] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUS", cAlternateFileName="ADOBEC~1.RUS")) returned 1 [0172.100] wcscmp (_String1="AdobeCollabSync.RUS", _String2=".") returned 1 [0172.100] wcscmp (_String1="AdobeCollabSync.RUS", _String2="..") returned 1 [0172.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0172.100] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.100] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.100] wcscat (in: _Dest=0x3e0de90, _Source="AdobeCollabSync.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" [0172.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus")) returned 0x20 [0172.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0172.117] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.117] GetLastError () returned 0x5 [0172.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0172.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0172.117] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUS", cAlternateFileName="")) returned 1 [0172.117] wcscmp (_String1="Annots.RUS", _String2=".") returned 1 [0172.117] wcscmp (_String1="Annots.RUS", _String2="..") returned 1 [0172.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.117] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.117] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.117] wcscat (in: _Dest=0x66dc9d8, _Source="Annots.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" [0172.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus")) returned 0x20 [0172.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0172.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.118] GetLastError () returned 0x5 [0172.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0172.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.118] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUS", cAlternateFileName="BRDLAN~1.RUS")) returned 1 [0172.118] wcscmp (_String1="BRdlang32.RUS", _String2=".") returned 1 [0172.118] wcscmp (_String1="BRdlang32.RUS", _String2="..") returned 1 [0172.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0172.118] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.118] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.118] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" [0172.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus")) returned 0x20 [0172.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0172.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.119] GetLastError () returned 0x5 [0172.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0172.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.119] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUS", cAlternateFileName="")) returned 1 [0172.119] wcscmp (_String1="Checkers.RUS", _String2=".") returned 1 [0172.119] wcscmp (_String1="Checkers.RUS", _String2="..") returned 1 [0172.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc9d8 [0172.120] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.120] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.120] wcscat (in: _Dest=0x66dc9d8, _Source="Checkers.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" [0172.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus")) returned 0x20 [0172.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0172.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.120] GetLastError () returned 0x5 [0172.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0172.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.120] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUS", cAlternateFileName="")) returned 1 [0172.120] wcscmp (_String1="DigSig.RUS", _String2=".") returned 1 [0172.120] wcscmp (_String1="DigSig.RUS", _String2="..") returned 1 [0172.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0172.121] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.121] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.121] wcscat (in: _Dest=0x66dc9d8, _Source="DigSig.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" [0172.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus")) returned 0x20 [0172.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0172.121] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.121] GetLastError () returned 0x5 [0172.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0172.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.121] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUS", cAlternateFileName="")) returned 1 [0172.121] wcscmp (_String1="DVA.RUS", _String2=".") returned 1 [0172.121] wcscmp (_String1="DVA.RUS", _String2="..") returned 1 [0172.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0172.122] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.122] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.122] wcscat (in: _Dest=0x682c568, _Source="DVA.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" [0172.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus")) returned 0x20 [0172.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0172.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.122] GetLastError () returned 0x5 [0172.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0172.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.122] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUS", cAlternateFileName="")) returned 1 [0172.122] wcscmp (_String1="eBook.RUS", _String2=".") returned 1 [0172.123] wcscmp (_String1="eBook.RUS", _String2="..") returned 1 [0172.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc9d8 [0172.123] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.123] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.123] wcscat (in: _Dest=0x66dc9d8, _Source="eBook.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" [0172.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus")) returned 0x20 [0172.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0172.123] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.123] GetLastError () returned 0x5 [0172.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0172.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.124] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUS", cAlternateFileName="")) returned 1 [0172.124] wcscmp (_String1="EScript.RUS", _String2=".") returned 1 [0172.124] wcscmp (_String1="EScript.RUS", _String2="..") returned 1 [0172.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.124] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.124] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.124] wcscat (in: _Dest=0x66dc9d8, _Source="EScript.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" [0172.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus")) returned 0x20 [0172.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0172.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.125] GetLastError () returned 0x5 [0172.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0172.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 [0172.125] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUS", cAlternateFileName="")) returned 1 [0172.125] wcscmp (_String1="IA32.RUS", _String2=".") returned 1 [0172.125] wcscmp (_String1="IA32.RUS", _String2="..") returned 1 [0172.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0172.125] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.125] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.126] wcscat (in: _Dest=0x682c568, _Source="IA32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" [0172.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus")) returned 0x20 [0172.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0172.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.159] GetLastError () returned 0x5 [0172.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0172.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.159] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUS", cAlternateFileName="MAKEAC~1.RUS")) returned 1 [0172.159] wcscmp (_String1="MakeAccessible.RUS", _String2=".") returned 1 [0172.159] wcscmp (_String1="MakeAccessible.RUS", _String2="..") returned 1 [0172.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0172.159] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.159] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.159] wcscat (in: _Dest=0x3e0de90, _Source="MakeAccessible.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" [0172.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus")) returned 0x20 [0172.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0172.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.160] GetLastError () returned 0x5 [0172.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0172.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 [0172.160] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUS", cAlternateFileName="MULTIM~1.RUS")) returned 1 [0172.160] wcscmp (_String1="Multimedia.RUS", _String2=".") returned 1 [0172.160] wcscmp (_String1="Multimedia.RUS", _String2="..") returned 1 [0172.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0172.160] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.160] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.160] wcscat (in: _Dest=0x69589f8, _Source="Multimedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" [0172.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus")) returned 0x20 [0172.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0172.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.161] GetLastError () returned 0x5 [0172.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0172.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.161] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUS", cAlternateFileName="")) returned 1 [0172.161] wcscmp (_String1="PDDom.RUS", _String2=".") returned 1 [0172.161] wcscmp (_String1="PDDom.RUS", _String2="..") returned 1 [0172.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0172.162] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.162] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.162] wcscat (in: _Dest=0x66dc8b8, _Source="PDDom.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" [0172.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus")) returned 0x20 [0172.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0172.183] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.183] GetLastError () returned 0x5 [0172.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0172.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 [0172.184] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUS", cAlternateFileName="")) returned 1 [0172.184] wcscmp (_String1="PPKLITE.RUS", _String2=".") returned 1 [0172.184] wcscmp (_String1="PPKLITE.RUS", _String2="..") returned 1 [0172.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc8b8 [0172.184] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.184] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.184] wcscat (in: _Dest=0x66dc8b8, _Source="PPKLITE.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" [0172.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus")) returned 0x20 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0172.185] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.185] GetLastError () returned 0x5 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0172.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 [0172.186] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd074d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUS", cAlternateFileName="")) returned 1 [0172.186] wcscmp (_String1="RdLang32.RUS", _String2=".") returned 1 [0172.186] wcscmp (_String1="RdLang32.RUS", _String2="..") returned 1 [0172.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc8b8 [0172.186] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.186] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.186] wcscat (in: _Dest=0x66dc8b8, _Source="RdLang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" [0172.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus")) returned 0x20 [0172.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0172.186] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.187] GetLastError () returned 0x5 [0172.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0172.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 [0172.187] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUS", cAlternateFileName="READOU~1.RUS")) returned 1 [0172.187] wcscmp (_String1="ReadOutLoud.RUS", _String2=".") returned 1 [0172.187] wcscmp (_String1="ReadOutLoud.RUS", _String2="..") returned 1 [0172.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0172.187] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.187] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.187] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" [0172.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus")) returned 0x20 [0172.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0172.249] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.249] GetLastError () returned 0x5 [0172.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0172.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.250] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUS", cAlternateFileName="")) returned 1 [0172.250] wcscmp (_String1="Reflow.RUS", _String2=".") returned 1 [0172.250] wcscmp (_String1="Reflow.RUS", _String2="..") returned 1 [0172.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0172.250] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.250] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.250] wcscat (in: _Dest=0x66dd2d8, _Source="Reflow.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" [0172.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus")) returned 0x20 [0172.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0172.251] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.251] GetLastError () returned 0x5 [0172.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0172.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.251] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUS", cAlternateFileName="SAVEAS~1.RUS")) returned 1 [0172.251] wcscmp (_String1="SaveAsRTF.RUS", _String2=".") returned 1 [0172.251] wcscmp (_String1="SaveAsRTF.RUS", _String2="..") returned 1 [0172.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0172.251] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.251] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.251] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" [0172.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus")) returned 0x20 [0172.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0172.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.253] GetLastError () returned 0x5 [0172.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0172.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.535] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUS", cAlternateFileName="")) returned 1 [0172.535] wcscmp (_String1="Search.RUS", _String2=".") returned 1 [0172.535] wcscmp (_String1="Search.RUS", _String2="..") returned 1 [0172.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68ac168 [0172.535] wcscpy (in: _Dest=0x68ac168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.535] wcscat (in: _Dest=0x68ac168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.535] wcscat (in: _Dest=0x68ac168, _Source="Search.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" [0172.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0172.933] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUS", cAlternateFileName="")) returned 1 [0172.933] wcscmp (_String1="SendMail.RUS", _String2=".") returned 1 [0172.933] wcscmp (_String1="SendMail.RUS", _String2="..") returned 1 [0172.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ccf8 [0172.933] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.933] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.933] wcscat (in: _Dest=0x674ccf8, _Source="SendMail.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" [0172.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0172.934] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.935] wcscmp (_String1="Services", _String2=".") returned 1 [0172.935] wcscmp (_String1="Services", _String2="..") returned 1 [0172.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26a58 [0172.935] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.936] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.936] wcscat (in: _Dest=0x3f26a58, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0172.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0172.937] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUS", cAlternateFileName="")) returned 1 [0172.937] wcscmp (_String1="Spelling.RUS", _String2=".") returned 1 [0172.937] wcscmp (_String1="Spelling.RUS", _String2="..") returned 1 [0172.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674dd48 [0172.937] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.937] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.937] wcscat (in: _Dest=0x674dd48, _Source="Spelling.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" [0172.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0172.938] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUS", cAlternateFileName="")) returned 1 [0172.939] wcscmp (_String1="Updater.RUS", _String2=".") returned 1 [0172.939] wcscmp (_String1="Updater.RUS", _String2="..") returned 1 [0172.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cea8 [0172.939] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.939] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.939] wcscat (in: _Dest=0x674cea8, _Source="Updater.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" [0172.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0172.940] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 1 [0172.940] wcscmp (_String1="Weblink.RUS", _String2=".") returned 1 [0172.940] wcscmp (_String1="Weblink.RUS", _String2="..") returned 1 [0172.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d688 [0172.940] wcscpy (in: _Dest=0x674d688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.940] wcscat (in: _Dest=0x674d688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.940] wcscat (in: _Dest=0x674d688, _Source="Weblink.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" [0172.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0172.941] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 0 [0172.942] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0172.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0172.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 [0172.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 Thread: id = 2993 os_tid = 0xdc8 [0160.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c6b8 [0160.304] wcscpy (in: _Dest=0x674c6b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0160.304] wcscat (in: _Dest=0x674c6b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0160.304] wcscat (in: _Dest=0x674c6b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*" [0160.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3a20 [0160.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d20a0 [0165.569] wcscmp (_String1=".", _String2=".") returned 0 [0165.569] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.569] wcscmp (_String1="..", _String2=".") returned 1 [0165.569] wcscmp (_String1="..", _String2="..") returned 0 [0165.569] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SKY", cAlternateFileName="ACCESS~1.SKY")) returned 1 [0165.570] wcscmp (_String1="accessibility.SKY", _String2=".") returned 1 [0165.570] wcscmp (_String1="accessibility.SKY", _String2="..") returned 1 [0165.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d2b0 [0165.570] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0165.570] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0165.570] wcscat (in: _Dest=0x3e0d2b0, _Source="accessibility.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" [0172.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky")) returned 0x20 [0172.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0172.088] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.088] GetLastError () returned 0x5 [0172.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0172.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 [0172.088] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SKY", cAlternateFileName="")) returned 1 [0172.088] wcscmp (_String1="Acroform.SKY", _String2=".") returned 1 [0172.088] wcscmp (_String1="Acroform.SKY", _String2="..") returned 1 [0172.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.088] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.088] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.088] wcscat (in: _Dest=0x66db7d8, _Source="Acroform.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" [0172.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky")) returned 0x20 [0172.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0172.093] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.093] GetLastError () returned 0x5 [0172.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0172.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.093] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SKY", cAlternateFileName="ADOBEC~1.SKY")) returned 1 [0172.093] wcscmp (_String1="AdobeCollabSync.SKY", _String2=".") returned 1 [0172.093] wcscmp (_String1="AdobeCollabSync.SKY", _String2="..") returned 1 [0172.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0172.093] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.093] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.093] wcscat (in: _Dest=0x3e0ecf0, _Source="AdobeCollabSync.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" [0172.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky")) returned 0x20 [0172.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0172.101] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.101] GetLastError () returned 0x5 [0172.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0172.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 [0172.102] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SKY", cAlternateFileName="")) returned 1 [0172.102] wcscmp (_String1="Annots.SKY", _String2=".") returned 1 [0172.102] wcscmp (_String1="Annots.SKY", _String2="..") returned 1 [0172.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0172.102] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.102] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.102] wcscat (in: _Dest=0x66dd2d8, _Source="Annots.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" [0172.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky")) returned 0x20 [0172.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0172.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.130] GetLastError () returned 0x5 [0172.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0172.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.130] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SKY", cAlternateFileName="BRDLAN~1.SKY")) returned 1 [0172.130] wcscmp (_String1="BRdlang32.SKY", _String2=".") returned 1 [0172.130] wcscmp (_String1="BRdlang32.SKY", _String2="..") returned 1 [0172.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0172.130] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.130] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.130] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" [0172.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky")) returned 0x20 [0172.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0172.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.131] GetLastError () returned 0x5 [0172.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0172.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0172.131] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SKY", cAlternateFileName="")) returned 1 [0172.132] wcscmp (_String1="Checkers.SKY", _String2=".") returned 1 [0172.132] wcscmp (_String1="Checkers.SKY", _String2="..") returned 1 [0172.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0172.132] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.132] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.132] wcscat (in: _Dest=0x66dd2d8, _Source="Checkers.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" [0172.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky")) returned 0x20 [0172.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0172.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.133] GetLastError () returned 0x5 [0172.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0172.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.133] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SKY", cAlternateFileName="")) returned 1 [0172.133] wcscmp (_String1="DigSig.SKY", _String2=".") returned 1 [0172.133] wcscmp (_String1="DigSig.SKY", _String2="..") returned 1 [0172.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0172.133] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.133] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.133] wcscat (in: _Dest=0x66dd2d8, _Source="DigSig.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" [0172.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky")) returned 0x20 [0172.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0172.168] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.168] GetLastError () returned 0x5 [0172.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0172.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.168] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SKY", cAlternateFileName="")) returned 1 [0172.169] wcscmp (_String1="DVA.SKY", _String2=".") returned 1 [0172.169] wcscmp (_String1="DVA.SKY", _String2="..") returned 1 [0172.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0172.169] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.169] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.169] wcscat (in: _Dest=0x682c568, _Source="DVA.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" [0172.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky")) returned 0x20 [0172.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0172.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.169] GetLastError () returned 0x5 [0172.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0172.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.170] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SKY", cAlternateFileName="")) returned 1 [0172.170] wcscmp (_String1="eBook.SKY", _String2=".") returned 1 [0172.170] wcscmp (_String1="eBook.SKY", _String2="..") returned 1 [0172.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0172.170] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.170] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.170] wcscat (in: _Dest=0x66dd2d8, _Source="eBook.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" [0172.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky")) returned 0x20 [0172.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0172.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.223] GetLastError () returned 0x5 [0172.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0172.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.224] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SKY", cAlternateFileName="")) returned 1 [0172.224] wcscmp (_String1="EScript.SKY", _String2=".") returned 1 [0172.224] wcscmp (_String1="EScript.SKY", _String2="..") returned 1 [0172.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0172.224] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.224] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.224] wcscat (in: _Dest=0x66dd2d8, _Source="EScript.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" [0172.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky")) returned 0x20 [0172.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0172.225] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.225] GetLastError () returned 0x5 [0172.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0172.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0172.225] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SKY", cAlternateFileName="")) returned 1 [0172.225] wcscmp (_String1="IA32.SKY", _String2=".") returned 1 [0172.225] wcscmp (_String1="IA32.SKY", _String2="..") returned 1 [0172.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0172.225] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.225] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.225] wcscat (in: _Dest=0x682c568, _Source="IA32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" [0172.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky")) returned 0x20 [0172.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0172.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.226] GetLastError () returned 0x5 [0172.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0172.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.226] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SKY", cAlternateFileName="MAKEAC~1.SKY")) returned 1 [0172.227] wcscmp (_String1="makeaccessible.SKY", _String2=".") returned 1 [0172.227] wcscmp (_String1="makeaccessible.SKY", _String2="..") returned 1 [0172.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7198 [0172.227] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.227] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.227] wcscat (in: _Dest=0x2c7198, _Source="makeaccessible.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" [0172.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky")) returned 0x20 [0172.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0172.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.301] GetLastError () returned 0x5 [0172.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0172.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 [0172.301] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SKY", cAlternateFileName="MULTIM~1.SKY")) returned 1 [0172.301] wcscmp (_String1="Multimedia.SKY", _String2=".") returned 1 [0172.301] wcscmp (_String1="Multimedia.SKY", _String2="..") returned 1 [0172.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0172.302] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.302] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.302] wcscat (in: _Dest=0x69589f8, _Source="Multimedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" [0172.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky")) returned 0x20 [0172.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0172.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.302] GetLastError () returned 0x5 [0172.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0172.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 [0172.303] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SKY", cAlternateFileName="")) returned 1 [0172.303] wcscmp (_String1="pddom.SKY", _String2=".") returned 1 [0172.303] wcscmp (_String1="pddom.SKY", _String2="..") returned 1 [0172.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd248 [0172.303] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.303] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.303] wcscat (in: _Dest=0x66dd248, _Source="pddom.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" [0172.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky")) returned 0x20 [0172.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0172.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.304] GetLastError () returned 0x5 [0172.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0172.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.304] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.SKY", cAlternateFileName="")) returned 1 [0172.304] wcscmp (_String1="PPKLite.SKY", _String2=".") returned 1 [0172.304] wcscmp (_String1="PPKLite.SKY", _String2="..") returned 1 [0172.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd248 [0172.304] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.304] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.304] wcscat (in: _Dest=0x66dd248, _Source="PPKLite.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" [0172.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky")) returned 0x20 [0172.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0172.331] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.331] GetLastError () returned 0x5 [0172.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0172.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0172.331] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SKY", cAlternateFileName="")) returned 1 [0172.331] wcscmp (_String1="RdLang32.SKY", _String2=".") returned 1 [0172.331] wcscmp (_String1="RdLang32.SKY", _String2="..") returned 1 [0172.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0172.331] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.331] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.331] wcscat (in: _Dest=0x66dd248, _Source="RdLang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" [0172.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0172.843] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SKY", cAlternateFileName="READOU~1.SKY")) returned 1 [0172.843] wcscmp (_String1="ReadOutLoud.SKY", _String2=".") returned 1 [0172.843] wcscmp (_String1="ReadOutLoud.SKY", _String2="..") returned 1 [0172.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c2370 [0172.843] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.843] wcscat (in: _Dest=0x69c2370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.843] wcscat (in: _Dest=0x69c2370, _Source="ReadOutLoud.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" [0172.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0172.845] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SKY", cAlternateFileName="")) returned 1 [0172.845] wcscmp (_String1="reflow.SKY", _String2=".") returned 1 [0172.845] wcscmp (_String1="reflow.SKY", _String2="..") returned 1 [0172.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcee8 [0172.845] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.845] wcscat (in: _Dest=0x66dcee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.845] wcscat (in: _Dest=0x66dcee8, _Source="reflow.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" [0172.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0172.846] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SKY", cAlternateFileName="SAVEAS~1.SKY")) returned 1 [0172.846] wcscmp (_String1="SaveAsRTF.SKY", _String2=".") returned 1 [0172.846] wcscmp (_String1="SaveAsRTF.SKY", _String2="..") returned 1 [0172.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c3118 [0172.846] wcscpy (in: _Dest=0x69c3118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.846] wcscat (in: _Dest=0x69c3118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.847] wcscat (in: _Dest=0x69c3118, _Source="SaveAsRTF.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" [0172.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0172.848] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SKY", cAlternateFileName="")) returned 1 [0172.848] wcscmp (_String1="Search.SKY", _String2=".") returned 1 [0172.848] wcscmp (_String1="Search.SKY", _String2="..") returned 1 [0172.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbd78 [0172.848] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.848] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.848] wcscat (in: _Dest=0x66dbd78, _Source="Search.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" [0172.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0172.850] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SKY", cAlternateFileName="")) returned 1 [0172.850] wcscmp (_String1="SendMail.SKY", _String2=".") returned 1 [0172.850] wcscmp (_String1="SendMail.SKY", _String2="..") returned 1 [0172.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0172.850] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.850] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.850] wcscat (in: _Dest=0x66dc288, _Source="SendMail.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" [0172.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0172.852] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.852] wcscmp (_String1="Services", _String2=".") returned 1 [0172.852] wcscmp (_String1="Services", _String2="..") returned 1 [0172.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26948 [0172.852] wcscpy (in: _Dest=0x3f26948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.852] wcscat (in: _Dest=0x3f26948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.852] wcscat (in: _Dest=0x3f26948, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0172.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0172.854] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SKY", cAlternateFileName="")) returned 1 [0172.854] wcscmp (_String1="Spelling.SKY", _String2=".") returned 1 [0172.854] wcscmp (_String1="Spelling.SKY", _String2="..") returned 1 [0172.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0172.854] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.854] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.854] wcscat (in: _Dest=0x66dcaf8, _Source="Spelling.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" [0172.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0172.855] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SKY", cAlternateFileName="")) returned 1 [0172.855] wcscmp (_String1="updater.SKY", _String2=".") returned 1 [0172.855] wcscmp (_String1="updater.SKY", _String2="..") returned 1 [0172.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc9d8 [0172.855] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.855] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.855] wcscat (in: _Dest=0x66dc9d8, _Source="updater.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" [0172.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0172.856] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 1 [0172.857] wcscmp (_String1="WebLink.SKY", _String2=".") returned 1 [0172.857] wcscmp (_String1="WebLink.SKY", _String2="..") returned 1 [0172.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd2d8 [0172.857] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.857] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.857] wcscat (in: _Dest=0x66dd2d8, _Source="WebLink.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" [0172.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0172.858] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 0 [0172.858] FindClose (in: hFindFile=0x66d20a0 | out: hFindFile=0x66d20a0) returned 1 [0172.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a20) returned 1 [0172.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c6b8) returned 1 [0172.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 2994 os_tid = 0x7e0 [0160.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c738 [0160.305] wcscpy (in: _Dest=0x674c738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0160.305] wcscat (in: _Dest=0x674c738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0160.305] wcscat (in: _Dest=0x674c738, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*" [0160.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0160.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0165.519] wcscmp (_String1=".", _String2=".") returned 0 [0165.519] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.520] wcscmp (_String1="..", _String2=".") returned 1 [0165.520] wcscmp (_String1="..", _String2="..") returned 0 [0165.520] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.SLV", cAlternateFileName="ACCESS~1.SLV")) returned 1 [0165.520] wcscmp (_String1="Accessibility.SLV", _String2=".") returned 1 [0165.520] wcscmp (_String1="Accessibility.SLV", _String2="..") returned 1 [0165.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dfd0 [0165.520] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0165.520] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0165.520] wcscat (in: _Dest=0x3e0dfd0, _Source="Accessibility.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" [0172.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv")) returned 0x20 [0172.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0172.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.789] GetLastError () returned 0x5 [0172.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0172.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 [0172.789] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SLV", cAlternateFileName="")) returned 1 [0172.789] wcscmp (_String1="Acroform.SLV", _String2=".") returned 1 [0172.789] wcscmp (_String1="Acroform.SLV", _String2="..") returned 1 [0172.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x354c60 [0172.790] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0172.790] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0172.790] wcscat (in: _Dest=0x354c60, _Source="Acroform.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" [0172.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv")) returned 0x20 [0173.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0173.592] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.593] GetLastError () returned 0x5 [0173.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0173.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 [0173.593] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SLV", cAlternateFileName="ADOBEC~1.SLV")) returned 1 [0173.593] wcscmp (_String1="AdobeCollabSync.SLV", _String2=".") returned 1 [0173.593] wcscmp (_String1="AdobeCollabSync.SLV", _String2="..") returned 1 [0173.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1368 [0173.593] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0173.593] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0173.593] wcscat (in: _Dest=0x69c1368, _Source="AdobeCollabSync.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" [0180.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0180.540] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SLV", cAlternateFileName="")) returned 1 [0180.541] wcscmp (_String1="Annots.SLV", _String2=".") returned 1 [0180.541] wcscmp (_String1="Annots.SLV", _String2="..") returned 1 [0180.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cbd8 [0180.541] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.541] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.541] wcscat (in: _Dest=0x674cbd8, _Source="Annots.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" [0180.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0180.542] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SLV", cAlternateFileName="BRDLAN~1.SLV")) returned 1 [0180.542] wcscmp (_String1="BRdlang32.SLV", _String2=".") returned 1 [0180.542] wcscmp (_String1="BRdlang32.SLV", _String2="..") returned 1 [0180.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69592e0 [0180.542] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.542] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.542] wcscat (in: _Dest=0x69592e0, _Source="BRdlang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" [0180.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0180.544] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SLV", cAlternateFileName="")) returned 1 [0180.544] wcscmp (_String1="Checkers.SLV", _String2=".") returned 1 [0180.544] wcscmp (_String1="Checkers.SLV", _String2="..") returned 1 [0180.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e9a8 [0180.544] wcscpy (in: _Dest=0x674e9a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.544] wcscat (in: _Dest=0x674e9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.544] wcscat (in: _Dest=0x674e9a8, _Source="Checkers.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" [0180.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0180.545] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SLV", cAlternateFileName="")) returned 1 [0180.545] wcscmp (_String1="DigSig.SLV", _String2=".") returned 1 [0180.546] wcscmp (_String1="DigSig.SLV", _String2="..") returned 1 [0180.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e918 [0180.546] wcscpy (in: _Dest=0x674e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.546] wcscat (in: _Dest=0x674e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.546] wcscat (in: _Dest=0x674e918, _Source="DigSig.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" [0180.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0180.547] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SLV", cAlternateFileName="")) returned 1 [0180.547] wcscmp (_String1="DVA.SLV", _String2=".") returned 1 [0180.547] wcscmp (_String1="DVA.SLV", _String2="..") returned 1 [0180.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66f0148 [0180.547] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.547] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.547] wcscat (in: _Dest=0x66f0148, _Source="DVA.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" [0180.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0180.549] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SLV", cAlternateFileName="")) returned 1 [0180.549] wcscmp (_String1="eBook.SLV", _String2=".") returned 1 [0180.549] wcscmp (_String1="eBook.SLV", _String2="..") returned 1 [0180.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cea8 [0180.549] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.549] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.549] wcscat (in: _Dest=0x674cea8, _Source="eBook.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" [0180.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0180.550] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SLV", cAlternateFileName="")) returned 1 [0180.550] wcscmp (_String1="EScript.SLV", _String2=".") returned 1 [0180.550] wcscmp (_String1="EScript.SLV", _String2="..") returned 1 [0180.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e528 [0180.550] wcscpy (in: _Dest=0x674e528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.550] wcscat (in: _Dest=0x674e528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.550] wcscat (in: _Dest=0x674e528, _Source="EScript.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" [0180.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0180.552] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SLV", cAlternateFileName="")) returned 1 [0180.552] wcscmp (_String1="IA32.SLV", _String2=".") returned 1 [0180.552] wcscmp (_String1="IA32.SLV", _String2="..") returned 1 [0180.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cf80 [0180.552] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.552] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.552] wcscat (in: _Dest=0x682cf80, _Source="IA32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" [0180.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0180.553] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.SLV", cAlternateFileName="MAKEAC~1.SLV")) returned 1 [0180.553] wcscmp (_String1="MakeAccessible.SLV", _String2=".") returned 1 [0180.553] wcscmp (_String1="MakeAccessible.SLV", _String2="..") returned 1 [0180.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0648 [0180.553] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.553] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.553] wcscat (in: _Dest=0x69c0648, _Source="MakeAccessible.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" [0180.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0180.559] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SLV", cAlternateFileName="MULTIM~1.SLV")) returned 1 [0180.559] wcscmp (_String1="Multimedia.SLV", _String2=".") returned 1 [0180.559] wcscmp (_String1="Multimedia.SLV", _String2="..") returned 1 [0180.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0180.560] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.560] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.560] wcscat (in: _Dest=0x69589f8, _Source="Multimedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" [0180.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0180.577] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.SLV", cAlternateFileName="")) returned 1 [0180.577] wcscmp (_String1="PDDom.SLV", _String2=".") returned 1 [0180.577] wcscmp (_String1="PDDom.SLV", _String2="..") returned 1 [0180.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dcb8 [0180.577] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.577] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.577] wcscat (in: _Dest=0x674dcb8, _Source="PDDom.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" [0180.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0180.581] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SLV", cAlternateFileName="")) returned 1 [0180.581] wcscmp (_String1="PPKLITE.SLV", _String2=".") returned 1 [0180.581] wcscmp (_String1="PPKLITE.SLV", _String2="..") returned 1 [0180.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674e2e8 [0180.581] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.581] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.581] wcscat (in: _Dest=0x674e2e8, _Source="PPKLITE.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" [0180.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0180.589] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x146000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SLV", cAlternateFileName="")) returned 1 [0180.589] wcscmp (_String1="RdLang32.SLV", _String2=".") returned 1 [0180.589] wcscmp (_String1="RdLang32.SLV", _String2="..") returned 1 [0180.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ce18 [0180.589] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.589] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.589] wcscat (in: _Dest=0x674ce18, _Source="RdLang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" [0180.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0180.592] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SLV", cAlternateFileName="READOU~1.SLV")) returned 1 [0180.592] wcscmp (_String1="ReadOutLoud.SLV", _String2=".") returned 1 [0180.592] wcscmp (_String1="ReadOutLoud.SLV", _String2="..") returned 1 [0180.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957e18 [0180.592] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.592] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.592] wcscat (in: _Dest=0x6957e18, _Source="ReadOutLoud.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" [0180.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0180.594] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.SLV", cAlternateFileName="")) returned 1 [0180.594] wcscmp (_String1="Reflow.SLV", _String2=".") returned 1 [0180.594] wcscmp (_String1="Reflow.SLV", _String2="..") returned 1 [0180.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e378 [0180.594] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.594] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.594] wcscat (in: _Dest=0x674e378, _Source="Reflow.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" [0180.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0180.595] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SLV", cAlternateFileName="SAVEAS~1.SLV")) returned 1 [0180.595] wcscmp (_String1="SaveAsRTF.SLV", _String2=".") returned 1 [0180.595] wcscmp (_String1="SaveAsRTF.SLV", _String2="..") returned 1 [0180.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0180.595] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.595] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.595] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" [0180.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0180.596] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SLV", cAlternateFileName="")) returned 1 [0180.596] wcscmp (_String1="Search.SLV", _String2=".") returned 1 [0180.596] wcscmp (_String1="Search.SLV", _String2="..") returned 1 [0180.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e888 [0180.596] wcscpy (in: _Dest=0x674e888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.596] wcscat (in: _Dest=0x674e888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.596] wcscat (in: _Dest=0x674e888, _Source="Search.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" [0180.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0180.597] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SLV", cAlternateFileName="")) returned 1 [0180.597] wcscmp (_String1="SendMail.SLV", _String2=".") returned 1 [0180.597] wcscmp (_String1="SendMail.SLV", _String2="..") returned 1 [0180.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674d7a8 [0180.598] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.598] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.598] wcscat (in: _Dest=0x674d7a8, _Source="SendMail.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" [0180.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0180.599] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0180.599] wcscmp (_String1="Services", _String2=".") returned 1 [0180.599] wcscmp (_String1="Services", _String2="..") returned 1 [0180.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d1a0 [0180.599] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.599] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.599] wcscat (in: _Dest=0x682d1a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0180.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0180.600] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SLV", cAlternateFileName="")) returned 1 [0180.600] wcscmp (_String1="Spelling.SLV", _String2=".") returned 1 [0180.600] wcscmp (_String1="Spelling.SLV", _String2="..") returned 1 [0180.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674ccf8 [0180.600] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.600] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.600] wcscat (in: _Dest=0x674ccf8, _Source="Spelling.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" [0180.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0180.601] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.SLV", cAlternateFileName="")) returned 1 [0180.601] wcscmp (_String1="Updater.SLV", _String2=".") returned 1 [0180.601] wcscmp (_String1="Updater.SLV", _String2="..") returned 1 [0180.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d718 [0180.601] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.601] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.601] wcscat (in: _Dest=0x674d718, _Source="Updater.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" [0180.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0180.602] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 1 [0180.602] wcscmp (_String1="Weblink.SLV", _String2=".") returned 1 [0180.602] wcscmp (_String1="Weblink.SLV", _String2="..") returned 1 [0180.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674d208 [0180.602] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0180.602] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0180.602] wcscat (in: _Dest=0x674d208, _Source="Weblink.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" [0180.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0180.603] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 0 [0180.603] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0180.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0180.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c738) returned 1 [0180.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 Thread: id = 2995 os_tid = 0xaa4 [0160.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c7b8 [0160.306] wcscpy (in: _Dest=0x674c7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0160.306] wcscat (in: _Dest=0x674c7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0160.306] wcscat (in: _Dest=0x674c7b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*" [0160.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0160.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0165.519] wcscmp (_String1=".", _String2=".") returned 0 [0165.519] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.519] wcscmp (_String1="..", _String2=".") returned 1 [0165.519] wcscmp (_String1="..", _String2="..") returned 0 [0165.519] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SVE", cAlternateFileName="ACCESS~1.SVE")) returned 1 [0165.519] wcscmp (_String1="accessibility.SVE", _String2=".") returned 1 [0165.519] wcscmp (_String1="accessibility.SVE", _String2="..") returned 1 [0165.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0f010 [0165.519] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0165.519] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0165.519] wcscat (in: _Dest=0x3e0f010, _Source="accessibility.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" [0166.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0166.581] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SVE", cAlternateFileName="")) returned 1 [0166.581] wcscmp (_String1="Acroform.SVE", _String2=".") returned 1 [0166.581] wcscmp (_String1="Acroform.SVE", _String2="..") returned 1 [0166.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0166.581] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.581] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.581] wcscat (in: _Dest=0x66dcd38, _Source="Acroform.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" [0166.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0166.582] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SVE", cAlternateFileName="ADOBEC~1.SVE")) returned 1 [0166.582] wcscmp (_String1="AdobeCollabSync.SVE", _String2=".") returned 1 [0166.582] wcscmp (_String1="AdobeCollabSync.SVE", _String2="..") returned 1 [0166.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0aa8 [0166.582] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.582] wcscat (in: _Dest=0x69c0aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.582] wcscat (in: _Dest=0x69c0aa8, _Source="AdobeCollabSync.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" [0166.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0166.583] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SVE", cAlternateFileName="")) returned 1 [0166.583] wcscmp (_String1="Annots.SVE", _String2=".") returned 1 [0166.583] wcscmp (_String1="Annots.SVE", _String2="..") returned 1 [0166.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc948 [0166.584] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.584] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.584] wcscat (in: _Dest=0x66dc948, _Source="Annots.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" [0166.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0166.584] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SVE", cAlternateFileName="BRDLAN~1.SVE")) returned 1 [0166.585] wcscmp (_String1="BRdlang32.SVE", _String2=".") returned 1 [0166.585] wcscmp (_String1="BRdlang32.SVE", _String2="..") returned 1 [0166.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959968 [0166.585] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.585] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.585] wcscat (in: _Dest=0x6959968, _Source="BRdlang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" [0166.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0166.586] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SVE", cAlternateFileName="")) returned 1 [0166.586] wcscmp (_String1="Checkers.SVE", _String2=".") returned 1 [0166.586] wcscmp (_String1="Checkers.SVE", _String2="..") returned 1 [0166.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd008 [0166.586] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.586] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.586] wcscat (in: _Dest=0x66dd008, _Source="Checkers.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" [0166.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0166.587] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SVE", cAlternateFileName="")) returned 1 [0166.587] wcscmp (_String1="DigSig.SVE", _String2=".") returned 1 [0166.587] wcscmp (_String1="DigSig.SVE", _String2="..") returned 1 [0166.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db8f8 [0166.587] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.587] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.587] wcscat (in: _Dest=0x66db8f8, _Source="DigSig.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" [0166.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0166.588] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SVE", cAlternateFileName="")) returned 1 [0166.588] wcscmp (_String1="DVA.SVE", _String2=".") returned 1 [0166.588] wcscmp (_String1="DVA.SVE", _String2="..") returned 1 [0166.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c4e0 [0166.588] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.588] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.588] wcscat (in: _Dest=0x682c4e0, _Source="DVA.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" [0166.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0166.589] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SVE", cAlternateFileName="")) returned 1 [0166.590] wcscmp (_String1="eBook.SVE", _String2=".") returned 1 [0166.590] wcscmp (_String1="eBook.SVE", _String2="..") returned 1 [0166.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd248 [0166.590] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.590] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.590] wcscat (in: _Dest=0x66dd248, _Source="eBook.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" [0166.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0166.591] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SVE", cAlternateFileName="")) returned 1 [0166.591] wcscmp (_String1="EScript.SVE", _String2=".") returned 1 [0166.591] wcscmp (_String1="EScript.SVE", _String2="..") returned 1 [0166.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc828 [0166.591] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.591] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.591] wcscat (in: _Dest=0x66dc828, _Source="EScript.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" [0166.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0166.592] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SVE", cAlternateFileName="")) returned 1 [0166.592] wcscmp (_String1="IA32.SVE", _String2=".") returned 1 [0166.592] wcscmp (_String1="IA32.SVE", _String2="..") returned 1 [0166.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0166.592] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.592] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.592] wcscat (in: _Dest=0x3f26d00, _Source="IA32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" [0166.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0166.593] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SVE", cAlternateFileName="MAKEAC~1.SVE")) returned 1 [0166.593] wcscmp (_String1="makeaccessible.SVE", _String2=".") returned 1 [0166.593] wcscmp (_String1="makeaccessible.SVE", _String2="..") returned 1 [0166.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c00a8 [0166.593] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.593] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.593] wcscat (in: _Dest=0x69c00a8, _Source="makeaccessible.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" [0166.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0166.594] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SVE", cAlternateFileName="MULTIM~1.SVE")) returned 1 [0166.595] wcscmp (_String1="Multimedia.SVE", _String2=".") returned 1 [0166.595] wcscmp (_String1="Multimedia.SVE", _String2="..") returned 1 [0166.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958d88 [0166.595] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.595] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.595] wcscat (in: _Dest=0x6958d88, _Source="Multimedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" [0166.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0166.596] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SVE", cAlternateFileName="")) returned 1 [0166.596] wcscmp (_String1="pddom.SVE", _String2=".") returned 1 [0166.596] wcscmp (_String1="pddom.SVE", _String2="..") returned 1 [0166.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0166.596] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.596] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.596] wcscat (in: _Dest=0x66dd2d8, _Source="pddom.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" [0166.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c [0166.597] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SVE", cAlternateFileName="")) returned 1 [0166.597] wcscmp (_String1="PPKLITE.SVE", _String2=".") returned 1 [0166.597] wcscmp (_String1="PPKLITE.SVE", _String2="..") returned 1 [0166.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd368 [0166.597] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.597] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.597] wcscat (in: _Dest=0x66dd368, _Source="PPKLITE.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" [0166.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0166.598] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x141800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SVE", cAlternateFileName="")) returned 1 [0166.598] wcscmp (_String1="RdLang32.SVE", _String2=".") returned 1 [0166.598] wcscmp (_String1="RdLang32.SVE", _String2="..") returned 1 [0166.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcca8 [0166.598] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.598] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.598] wcscat (in: _Dest=0x66dcca8, _Source="RdLang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" [0166.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0166.599] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SVE", cAlternateFileName="READOU~1.SVE")) returned 1 [0166.599] wcscmp (_String1="ReadOutLoud.SVE", _String2=".") returned 1 [0166.599] wcscmp (_String1="ReadOutLoud.SVE", _String2="..") returned 1 [0166.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958eb8 [0166.599] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.600] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.600] wcscat (in: _Dest=0x6958eb8, _Source="ReadOutLoud.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" [0166.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0166.600] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SVE", cAlternateFileName="")) returned 1 [0166.600] wcscmp (_String1="reflow.SVE", _String2=".") returned 1 [0166.600] wcscmp (_String1="reflow.SVE", _String2="..") returned 1 [0166.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0166.601] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.601] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.601] wcscat (in: _Dest=0x66dc8b8, _Source="reflow.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" [0166.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0166.602] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SVE", cAlternateFileName="SAVEAS~1.SVE")) returned 1 [0166.602] wcscmp (_String1="SaveAsRTF.SVE", _String2=".") returned 1 [0166.602] wcscmp (_String1="SaveAsRTF.SVE", _String2="..") returned 1 [0166.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958a90 [0166.602] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.602] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.602] wcscat (in: _Dest=0x6958a90, _Source="SaveAsRTF.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" [0166.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0166.603] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SVE", cAlternateFileName="")) returned 1 [0166.603] wcscmp (_String1="Search.SVE", _String2=".") returned 1 [0166.603] wcscmp (_String1="Search.SVE", _String2="..") returned 1 [0166.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc9d8 [0166.603] wcscpy (in: _Dest=0x66dc9d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.603] wcscat (in: _Dest=0x66dc9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.603] wcscat (in: _Dest=0x66dc9d8, _Source="Search.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" [0166.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0166.604] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SVE", cAlternateFileName="")) returned 1 [0166.604] wcscmp (_String1="SendMail.SVE", _String2=".") returned 1 [0166.604] wcscmp (_String1="SendMail.SVE", _String2="..") returned 1 [0166.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0166.604] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.604] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.604] wcscat (in: _Dest=0x66db7d8, _Source="SendMail.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" [0166.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0166.605] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.605] wcscmp (_String1="Services", _String2=".") returned 1 [0166.605] wcscmp (_String1="Services", _String2="..") returned 1 [0166.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26fa8 [0166.605] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.605] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.606] wcscat (in: _Dest=0x3f26fa8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0166.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0166.606] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SVE", cAlternateFileName="")) returned 1 [0166.607] wcscmp (_String1="Spelling.SVE", _String2=".") returned 1 [0166.607] wcscmp (_String1="Spelling.SVE", _String2="..") returned 1 [0166.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcdc8 [0166.607] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.607] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.607] wcscat (in: _Dest=0x66dcdc8, _Source="Spelling.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" [0166.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0166.608] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SVE", cAlternateFileName="")) returned 1 [0166.608] wcscmp (_String1="updater.SVE", _String2=".") returned 1 [0166.608] wcscmp (_String1="updater.SVE", _String2="..") returned 1 [0166.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc678 [0166.608] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.608] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.608] wcscat (in: _Dest=0x66dc678, _Source="updater.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" [0166.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0166.609] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 1 [0166.609] wcscmp (_String1="Weblink.SVE", _String2=".") returned 1 [0166.609] wcscmp (_String1="Weblink.SVE", _String2="..") returned 1 [0166.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x674cfc8 [0166.609] wcscpy (in: _Dest=0x674cfc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0166.609] wcscat (in: _Dest=0x674cfc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0166.609] wcscat (in: _Dest=0x674cfc8, _Source="Weblink.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" [0166.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0166.610] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 0 [0166.610] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0166.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0166.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c7b8) returned 1 [0166.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 Thread: id = 2996 os_tid = 0x644 [0160.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c838 [0160.306] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0160.306] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0160.306] wcscat (in: _Dest=0x674c838, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*" [0160.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0160.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0165.518] wcscmp (_String1=".", _String2=".") returned 0 [0165.518] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.518] wcscmp (_String1="..", _String2=".") returned 1 [0165.518] wcscmp (_String1="..", _String2="..") returned 0 [0165.518] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.TUR", cAlternateFileName="ACCESS~1.TUR")) returned 1 [0165.518] wcscmp (_String1="Accessibility.TUR", _String2=".") returned 1 [0165.518] wcscmp (_String1="Accessibility.TUR", _String2="..") returned 1 [0165.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ef70 [0165.518] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0165.518] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0165.518] wcscat (in: _Dest=0x3e0ef70, _Source="Accessibility.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" [0171.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0171.741] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.TUR", cAlternateFileName="")) returned 1 [0171.741] wcscmp (_String1="Acroform.TUR", _String2=".") returned 1 [0171.741] wcscmp (_String1="Acroform.TUR", _String2="..") returned 1 [0171.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0171.741] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.741] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.741] wcscat (in: _Dest=0x66dbfb8, _Source="Acroform.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" [0171.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0171.742] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.TUR", cAlternateFileName="ADOBEC~1.TUR")) returned 1 [0171.742] wcscmp (_String1="AdobeCollabSync.TUR", _String2=".") returned 1 [0171.742] wcscmp (_String1="AdobeCollabSync.TUR", _String2="..") returned 1 [0171.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0171.742] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.742] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.742] wcscat (in: _Dest=0x69c03c8, _Source="AdobeCollabSync.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" [0171.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0171.743] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.TUR", cAlternateFileName="")) returned 1 [0171.743] wcscmp (_String1="Annots.TUR", _String2=".") returned 1 [0171.743] wcscmp (_String1="Annots.TUR", _String2="..") returned 1 [0171.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dce58 [0171.743] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.744] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.744] wcscat (in: _Dest=0x66dce58, _Source="Annots.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" [0171.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0171.744] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.TUR", cAlternateFileName="BRDLAN~1.TUR")) returned 1 [0171.745] wcscmp (_String1="BRdlang32.TUR", _String2=".") returned 1 [0171.745] wcscmp (_String1="BRdlang32.TUR", _String2="..") returned 1 [0171.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958668 [0171.745] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.745] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.745] wcscat (in: _Dest=0x6958668, _Source="BRdlang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" [0171.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0171.746] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.TUR", cAlternateFileName="")) returned 1 [0171.746] wcscmp (_String1="Checkers.TUR", _String2=".") returned 1 [0171.746] wcscmp (_String1="Checkers.TUR", _String2="..") returned 1 [0171.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0171.746] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.746] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.746] wcscat (in: _Dest=0x66dd1b8, _Source="Checkers.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" [0171.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0171.747] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.TUR", cAlternateFileName="")) returned 1 [0171.747] wcscmp (_String1="DigSig.TUR", _String2=".") returned 1 [0171.747] wcscmp (_String1="DigSig.TUR", _String2="..") returned 1 [0171.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd098 [0171.747] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.747] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.747] wcscat (in: _Dest=0x66dd098, _Source="DigSig.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" [0171.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0171.748] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.TUR", cAlternateFileName="")) returned 1 [0171.748] wcscmp (_String1="DVA.TUR", _String2=".") returned 1 [0171.748] wcscmp (_String1="DVA.TUR", _String2="..") returned 1 [0171.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c2c0 [0171.748] wcscpy (in: _Dest=0x682c2c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.748] wcscat (in: _Dest=0x682c2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.749] wcscat (in: _Dest=0x682c2c0, _Source="DVA.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" [0171.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0171.749] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.TUR", cAlternateFileName="")) returned 1 [0171.749] wcscmp (_String1="eBook.TUR", _String2=".") returned 1 [0171.750] wcscmp (_String1="eBook.TUR", _String2="..") returned 1 [0171.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db598 [0171.750] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.750] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.750] wcscat (in: _Dest=0x66db598, _Source="eBook.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" [0171.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0171.752] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.TUR", cAlternateFileName="")) returned 1 [0171.752] wcscmp (_String1="EScript.TUR", _String2=".") returned 1 [0171.752] wcscmp (_String1="EScript.TUR", _String2="..") returned 1 [0171.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbc58 [0171.752] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.752] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.752] wcscat (in: _Dest=0x66dbc58, _Source="EScript.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" [0171.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0171.753] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.TUR", cAlternateFileName="")) returned 1 [0171.753] wcscmp (_String1="IA32.TUR", _String2=".") returned 1 [0171.753] wcscmp (_String1="IA32.TUR", _String2="..") returned 1 [0171.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0171.753] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.753] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.753] wcscat (in: _Dest=0x682c788, _Source="IA32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" [0171.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0171.754] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.TUR", cAlternateFileName="MAKEAC~1.TUR")) returned 1 [0171.754] wcscmp (_String1="MakeAccessible.TUR", _String2=".") returned 1 [0171.754] wcscmp (_String1="MakeAccessible.TUR", _String2="..") returned 1 [0171.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0171.754] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.754] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.754] wcscat (in: _Dest=0x69c1188, _Source="MakeAccessible.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" [0171.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0171.755] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.TUR", cAlternateFileName="MULTIM~1.TUR")) returned 1 [0171.755] wcscmp (_String1="Multimedia.TUR", _String2=".") returned 1 [0171.755] wcscmp (_String1="Multimedia.TUR", _String2="..") returned 1 [0171.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69592e0 [0171.756] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.756] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.756] wcscat (in: _Dest=0x69592e0, _Source="Multimedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" [0171.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0171.757] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.TUR", cAlternateFileName="")) returned 1 [0171.757] wcscmp (_String1="PDDom.TUR", _String2=".") returned 1 [0171.757] wcscmp (_String1="PDDom.TUR", _String2="..") returned 1 [0171.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc708 [0171.757] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.757] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.757] wcscat (in: _Dest=0x66dc708, _Source="PDDom.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" [0171.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0171.758] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.TUR", cAlternateFileName="")) returned 1 [0171.759] wcscmp (_String1="PPKLITE.TUR", _String2=".") returned 1 [0171.759] wcscmp (_String1="PPKLITE.TUR", _String2="..") returned 1 [0171.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcca8 [0171.759] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.759] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.759] wcscat (in: _Dest=0x66dcca8, _Source="PPKLITE.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" [0171.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0171.760] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd028ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.TUR", cAlternateFileName="")) returned 1 [0171.760] wcscmp (_String1="RdLang32.TUR", _String2=".") returned 1 [0171.760] wcscmp (_String1="RdLang32.TUR", _String2="..") returned 1 [0171.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd2d8 [0171.760] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.760] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.760] wcscat (in: _Dest=0x66dd2d8, _Source="RdLang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" [0171.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur")) returned 0x20 [0171.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0171.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.763] GetLastError () returned 0x5 [0171.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0171.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.764] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.TUR", cAlternateFileName="READOU~1.TUR")) returned 1 [0171.764] wcscmp (_String1="ReadOutLoud.TUR", _String2=".") returned 1 [0171.764] wcscmp (_String1="ReadOutLoud.TUR", _String2="..") returned 1 [0171.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0171.764] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.764] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.764] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" [0171.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur")) returned 0x20 [0171.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0171.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.765] GetLastError () returned 0x5 [0171.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0171.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.765] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.TUR", cAlternateFileName="")) returned 1 [0171.765] wcscmp (_String1="Reflow.TUR", _String2=".") returned 1 [0171.765] wcscmp (_String1="Reflow.TUR", _String2="..") returned 1 [0171.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0171.765] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.765] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.765] wcscat (in: _Dest=0x66dd2d8, _Source="Reflow.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" [0171.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur")) returned 0x20 [0171.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0171.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.776] GetLastError () returned 0x5 [0171.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0171.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0171.776] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.TUR", cAlternateFileName="SAVEAS~1.TUR")) returned 1 [0171.776] wcscmp (_String1="SaveAsRTF.TUR", _String2=".") returned 1 [0171.776] wcscmp (_String1="SaveAsRTF.TUR", _String2="..") returned 1 [0171.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.776] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.776] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.777] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" [0171.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur")) returned 0x20 [0171.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0171.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.795] GetLastError () returned 0x5 [0171.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0171.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.796] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.TUR", cAlternateFileName="")) returned 1 [0171.796] wcscmp (_String1="Search.TUR", _String2=".") returned 1 [0171.796] wcscmp (_String1="Search.TUR", _String2="..") returned 1 [0171.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.796] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.796] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.796] wcscat (in: _Dest=0x66db7d8, _Source="Search.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" [0171.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur")) returned 0x20 [0171.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0171.825] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.825] GetLastError () returned 0x5 [0171.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0171.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.825] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.TUR", cAlternateFileName="")) returned 1 [0171.825] wcscmp (_String1="SendMail.TUR", _String2=".") returned 1 [0171.825] wcscmp (_String1="SendMail.TUR", _String2="..") returned 1 [0171.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0171.825] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.825] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.825] wcscat (in: _Dest=0x66db7d8, _Source="SendMail.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" [0171.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur")) returned 0x20 [0171.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0171.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.826] GetLastError () returned 0x5 [0171.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0171.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.826] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.826] wcscmp (_String1="Services", _String2=".") returned 1 [0171.826] wcscmp (_String1="Services", _String2="..") returned 1 [0171.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0171.826] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.826] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.826] wcscat (in: _Dest=0x682c568, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0171.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.826] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0171.826] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0171.826] wcscat (in: _Dest=0x66db7d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*" [0171.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0171.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0171.864] wcscmp (_String1=".", _String2=".") returned 0 [0171.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.864] wcscmp (_String1="..", _String2=".") returned 1 [0171.864] wcscmp (_String1="..", _String2="..") returned 0 [0171.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9270, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.864] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.864] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d1f0 [0171.864] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0171.864] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0171.864] wcscat (in: _Dest=0x3e5d1f0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" [0171.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx")) returned 0x20 [0171.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.889] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.890] GetLastError () returned 0x5 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 [0171.890] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.890] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.890] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d1f0 [0171.890] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0171.890] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0171.890] wcscat (in: _Dest=0x3e5d1f0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" [0171.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx")) returned 0x20 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.891] GetLastError () returned 0x5 [0171.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 [0171.891] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0171.891] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0171.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0171.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0171.891] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.TUR", cAlternateFileName="")) returned 1 [0171.891] wcscmp (_String1="Spelling.TUR", _String2=".") returned 1 [0171.891] wcscmp (_String1="Spelling.TUR", _String2="..") returned 1 [0171.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0171.891] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.891] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.891] wcscat (in: _Dest=0x66db7d8, _Source="Spelling.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" [0171.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur")) returned 0x20 [0171.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0171.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.922] GetLastError () returned 0x5 [0171.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0171.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.922] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.TUR", cAlternateFileName="")) returned 1 [0171.922] wcscmp (_String1="Updater.TUR", _String2=".") returned 1 [0171.923] wcscmp (_String1="Updater.TUR", _String2="..") returned 1 [0171.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0171.923] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.923] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.923] wcscat (in: _Dest=0x66db7d8, _Source="Updater.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" [0171.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur")) returned 0x20 [0171.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0171.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.953] GetLastError () returned 0x5 [0171.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0171.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.953] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 1 [0171.953] wcscmp (_String1="Weblink.TUR", _String2=".") returned 1 [0171.953] wcscmp (_String1="Weblink.TUR", _String2="..") returned 1 [0171.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0171.953] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0171.953] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0171.953] wcscat (in: _Dest=0x66db7d8, _Source="Weblink.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" [0171.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur")) returned 0x20 [0171.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0171.954] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.954] GetLastError () returned 0x5 [0171.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0171.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.954] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 0 [0171.954] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0171.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0171.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 Thread: id = 2997 os_tid = 0x3c8 [0160.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c8b8 [0160.307] wcscpy (in: _Dest=0x674c8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0160.307] wcscat (in: _Dest=0x674c8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0160.307] wcscat (in: _Dest=0x674c8b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*" [0160.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0160.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0165.517] wcscmp (_String1=".", _String2=".") returned 0 [0165.517] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.517] wcscmp (_String1="..", _String2=".") returned 1 [0165.517] wcscmp (_String1="..", _String2="..") returned 0 [0165.517] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="ACCESS~1.UKR")) returned 1 [0165.517] wcscmp (_String1="Accessibility.UKR", _String2=".") returned 1 [0165.517] wcscmp (_String1="Accessibility.UKR", _String2="..") returned 1 [0165.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ebb0 [0165.517] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0165.517] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0165.517] wcscat (in: _Dest=0x3e0ebb0, _Source="Accessibility.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" [0172.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr")) returned 0x20 [0172.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0172.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.781] GetLastError () returned 0x5 [0172.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0172.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 [0172.782] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1 [0172.782] wcscmp (_String1="Acroform.UKR", _String2=".") returned 1 [0172.782] wcscmp (_String1="Acroform.UKR", _String2="..") returned 1 [0172.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0172.782] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0172.782] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0172.782] wcscat (in: _Dest=0x66db628, _Source="Acroform.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" [0172.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr")) returned 0x20 [0173.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0173.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.591] GetLastError () returned 0x5 [0173.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0173.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 [0173.591] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="ADOBEC~1.UKR")) returned 1 [0173.591] wcscmp (_String1="AdobeCollabSync.UKR", _String2=".") returned 1 [0173.592] wcscmp (_String1="AdobeCollabSync.UKR", _String2="..") returned 1 [0173.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c12c8 [0173.592] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0173.592] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0173.592] wcscat (in: _Dest=0x69c12c8, _Source="AdobeCollabSync.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" [0178.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0178.810] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1 [0178.810] wcscmp (_String1="Annots.UKR", _String2=".") returned 1 [0178.810] wcscmp (_String1="Annots.UKR", _String2="..") returned 1 [0178.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0178.810] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.811] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.811] wcscat (in: _Dest=0x66dc8b8, _Source="Annots.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" [0178.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0178.811] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="BRDLAN~1.UKR")) returned 1 [0178.811] wcscmp (_String1="BRdlang32.UKR", _String2=".") returned 1 [0178.811] wcscmp (_String1="BRdlang32.UKR", _String2="..") returned 1 [0178.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69594a8 [0178.812] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.812] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.812] wcscat (in: _Dest=0x69594a8, _Source="BRdlang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" [0178.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0178.813] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1 [0178.813] wcscmp (_String1="Checkers.UKR", _String2=".") returned 1 [0178.813] wcscmp (_String1="Checkers.UKR", _String2="..") returned 1 [0178.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc828 [0178.813] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.813] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.813] wcscat (in: _Dest=0x66dc828, _Source="Checkers.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" [0178.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0178.814] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1 [0178.814] wcscmp (_String1="DigSig.UKR", _String2=".") returned 1 [0178.814] wcscmp (_String1="DigSig.UKR", _String2="..") returned 1 [0178.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db8f8 [0178.814] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.814] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.814] wcscat (in: _Dest=0x66db8f8, _Source="DigSig.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" [0178.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0178.815] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1 [0178.815] wcscmp (_String1="DVA.UKR", _String2=".") returned 1 [0178.815] wcscmp (_String1="DVA.UKR", _String2="..") returned 1 [0178.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef950 [0178.815] wcscpy (in: _Dest=0x66ef950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.815] wcscat (in: _Dest=0x66ef950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.815] wcscat (in: _Dest=0x66ef950, _Source="DVA.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" [0178.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0178.816] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1 [0178.816] wcscmp (_String1="eBook.UKR", _String2=".") returned 1 [0178.816] wcscmp (_String1="eBook.UKR", _String2="..") returned 1 [0178.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd2d8 [0178.816] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.816] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.816] wcscat (in: _Dest=0x66dd2d8, _Source="eBook.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" [0178.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0178.817] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1 [0178.817] wcscmp (_String1="EScript.UKR", _String2=".") returned 1 [0178.817] wcscmp (_String1="EScript.UKR", _String2="..") returned 1 [0178.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd098 [0178.817] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.817] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.817] wcscat (in: _Dest=0x66dd098, _Source="EScript.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" [0178.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0178.818] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1 [0178.818] wcscmp (_String1="IA32.UKR", _String2=".") returned 1 [0178.818] wcscmp (_String1="IA32.UKR", _String2="..") returned 1 [0178.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f00c0 [0178.819] wcscpy (in: _Dest=0x66f00c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.819] wcscat (in: _Dest=0x66f00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.819] wcscat (in: _Dest=0x66f00c0, _Source="IA32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" [0178.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0178.820] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="MAKEAC~1.UKR")) returned 1 [0178.820] wcscmp (_String1="MakeAccessible.UKR", _String2=".") returned 1 [0178.820] wcscmp (_String1="MakeAccessible.UKR", _String2="..") returned 1 [0178.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0178.820] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.820] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.820] wcscat (in: _Dest=0x69c1188, _Source="MakeAccessible.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" [0178.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0178.821] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="MULTIM~1.UKR")) returned 1 [0178.821] wcscmp (_String1="Multimedia.UKR", _String2=".") returned 1 [0178.821] wcscmp (_String1="Multimedia.UKR", _String2="..") returned 1 [0178.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6959248 [0178.821] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.821] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.821] wcscat (in: _Dest=0x6959248, _Source="Multimedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" [0178.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0178.822] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1 [0178.822] wcscmp (_String1="PDDom.UKR", _String2=".") returned 1 [0178.822] wcscmp (_String1="PDDom.UKR", _String2="..") returned 1 [0178.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc708 [0178.822] wcscpy (in: _Dest=0x66dc708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.822] wcscat (in: _Dest=0x66dc708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.822] wcscat (in: _Dest=0x66dc708, _Source="PDDom.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" [0178.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0178.823] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1 [0178.823] wcscmp (_String1="PPKLITE.UKR", _String2=".") returned 1 [0178.823] wcscmp (_String1="PPKLITE.UKR", _String2="..") returned 1 [0178.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db598 [0178.823] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.824] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.824] wcscat (in: _Dest=0x66db598, _Source="PPKLITE.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" [0178.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0178.825] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1 [0178.825] wcscmp (_String1="RdLang32.UKR", _String2=".") returned 1 [0178.825] wcscmp (_String1="RdLang32.UKR", _String2="..") returned 1 [0178.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0178.825] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.825] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.825] wcscat (in: _Dest=0x66dd1b8, _Source="RdLang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" [0178.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0178.826] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="READOU~1.UKR")) returned 1 [0178.826] wcscmp (_String1="ReadOutLoud.UKR", _String2=".") returned 1 [0178.826] wcscmp (_String1="ReadOutLoud.UKR", _String2="..") returned 1 [0178.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959540 [0178.826] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.826] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.826] wcscat (in: _Dest=0x6959540, _Source="ReadOutLoud.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" [0178.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0178.827] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1 [0178.827] wcscmp (_String1="Reflow.UKR", _String2=".") returned 1 [0178.827] wcscmp (_String1="Reflow.UKR", _String2="..") returned 1 [0178.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dce58 [0178.827] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.827] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.827] wcscat (in: _Dest=0x66dce58, _Source="Reflow.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" [0178.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0178.828] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="SAVEAS~1.UKR")) returned 1 [0178.828] wcscmp (_String1="SaveAsRTF.UKR", _String2=".") returned 1 [0178.828] wcscmp (_String1="SaveAsRTF.UKR", _String2="..") returned 1 [0178.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959378 [0178.829] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.829] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.829] wcscat (in: _Dest=0x6959378, _Source="SaveAsRTF.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" [0178.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0178.830] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1 [0178.830] wcscmp (_String1="Search.UKR", _String2=".") returned 1 [0178.830] wcscmp (_String1="Search.UKR", _String2="..") returned 1 [0178.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbfb8 [0178.830] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.830] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.830] wcscat (in: _Dest=0x66dbfb8, _Source="Search.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" [0178.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0178.831] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1 [0178.831] wcscmp (_String1="SendMail.UKR", _String2=".") returned 1 [0178.831] wcscmp (_String1="SendMail.UKR", _String2="..") returned 1 [0178.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcca8 [0178.831] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.831] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.831] wcscat (in: _Dest=0x66dcca8, _Source="SendMail.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" [0178.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0178.832] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0178.832] wcscmp (_String1="Services", _String2=".") returned 1 [0178.832] wcscmp (_String1="Services", _String2="..") returned 1 [0178.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efd08 [0178.833] wcscpy (in: _Dest=0x66efd08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.833] wcscat (in: _Dest=0x66efd08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.833] wcscat (in: _Dest=0x66efd08, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0178.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66efd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0178.834] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1 [0178.834] wcscmp (_String1="Spelling.UKR", _String2=".") returned 1 [0178.834] wcscmp (_String1="Spelling.UKR", _String2="..") returned 1 [0178.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0178.834] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.834] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.834] wcscat (in: _Dest=0x66dcaf8, _Source="Spelling.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" [0178.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0178.835] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1 [0178.835] wcscmp (_String1="Updater.UKR", _String2=".") returned 1 [0178.835] wcscmp (_String1="Updater.UKR", _String2="..") returned 1 [0178.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd368 [0178.835] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.835] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.835] wcscat (in: _Dest=0x66dd368, _Source="Updater.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" [0178.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0178.836] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1 [0178.836] wcscmp (_String1="Weblink.UKR", _String2=".") returned 1 [0178.836] wcscmp (_String1="Weblink.UKR", _String2="..") returned 1 [0178.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcb88 [0178.836] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0178.836] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0178.836] wcscat (in: _Dest=0x66dcb88, _Source="Weblink.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" [0178.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0178.837] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0 [0178.837] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0178.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0178.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c8b8) returned 1 [0178.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 Thread: id = 2998 os_tid = 0x163c [0160.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c938 [0160.308] wcscpy (in: _Dest=0x674c938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0160.308] wcscat (in: _Dest=0x674c938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0160.308] wcscat (in: _Dest=0x674c938, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*" [0160.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0160.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0166.256] wcscmp (_String1=".", _String2=".") returned 0 [0166.256] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.256] wcscmp (_String1="..", _String2=".") returned 1 [0166.256] wcscmp (_String1="..", _String2="..") returned 0 [0166.256] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="ACCESS~1.CHS")) returned 1 [0166.256] wcscmp (_String1="accessibility.CHS", _String2=".") returned 1 [0166.256] wcscmp (_String1="accessibility.CHS", _String2="..") returned 1 [0166.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69bfd88 [0166.256] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0166.256] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0166.257] wcscat (in: _Dest=0x69bfd88, _Source="accessibility.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" [0167.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0167.835] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1 [0167.835] wcscmp (_String1="Acroform.CHS", _String2=".") returned 1 [0167.835] wcscmp (_String1="Acroform.CHS", _String2="..") returned 1 [0167.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0167.835] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.835] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.835] wcscat (in: _Dest=0x66dc288, _Source="Acroform.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" [0167.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0167.837] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="ADOBEC~1.CHS")) returned 1 [0167.837] wcscmp (_String1="AdobeCollabSync.CHS", _String2=".") returned 1 [0167.837] wcscmp (_String1="AdobeCollabSync.CHS", _String2="..") returned 1 [0167.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0167.837] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.837] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.837] wcscat (in: _Dest=0x3e0e750, _Source="AdobeCollabSync.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" [0167.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0167.839] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1 [0167.839] wcscmp (_String1="Annots.CHS", _String2=".") returned 1 [0167.839] wcscmp (_String1="Annots.CHS", _String2="..") returned 1 [0167.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc3a8 [0167.839] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.839] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.839] wcscat (in: _Dest=0x66dc3a8, _Source="Annots.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" [0167.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0167.840] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="BRDLAN~1.CHS")) returned 1 [0167.840] wcscmp (_String1="BRdlang32.CHS", _String2=".") returned 1 [0167.840] wcscmp (_String1="BRdlang32.CHS", _String2="..") returned 1 [0167.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2798 [0167.840] wcscpy (in: _Dest=0x69c2798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.841] wcscat (in: _Dest=0x69c2798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.841] wcscat (in: _Dest=0x69c2798, _Source="BRdlang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" [0167.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0167.842] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1 [0167.842] wcscmp (_String1="Checkers.CHS", _String2=".") returned 1 [0167.842] wcscmp (_String1="Checkers.CHS", _String2="..") returned 1 [0167.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcc18 [0167.842] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.842] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.842] wcscat (in: _Dest=0x66dcc18, _Source="Checkers.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" [0167.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0167.844] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1 [0167.844] wcscmp (_String1="DigSig.CHS", _String2=".") returned 1 [0167.844] wcscmp (_String1="DigSig.CHS", _String2="..") returned 1 [0167.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc798 [0167.844] wcscpy (in: _Dest=0x66dc798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.844] wcscat (in: _Dest=0x66dc798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.844] wcscat (in: _Dest=0x66dc798, _Source="DigSig.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" [0167.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0167.845] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1 [0167.845] wcscmp (_String1="DVA.CHS", _String2=".") returned 1 [0167.845] wcscmp (_String1="DVA.CHS", _String2="..") returned 1 [0167.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c018 [0167.845] wcscpy (in: _Dest=0x682c018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.845] wcscat (in: _Dest=0x682c018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.845] wcscat (in: _Dest=0x682c018, _Source="DVA.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" [0167.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0167.846] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1 [0167.847] wcscmp (_String1="eBook.CHS", _String2=".") returned 1 [0167.847] wcscmp (_String1="eBook.CHS", _String2="..") returned 1 [0167.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dca68 [0167.847] wcscpy (in: _Dest=0x66dca68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.847] wcscat (in: _Dest=0x66dca68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.847] wcscat (in: _Dest=0x66dca68, _Source="eBook.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" [0167.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0167.848] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1 [0167.848] wcscmp (_String1="EScript.CHS", _String2=".") returned 1 [0167.848] wcscmp (_String1="EScript.CHS", _String2="..") returned 1 [0167.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc1f8 [0167.848] wcscpy (in: _Dest=0x66dc1f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.848] wcscat (in: _Dest=0x66dc1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.848] wcscat (in: _Dest=0x66dc1f8, _Source="EScript.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" [0167.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0167.849] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1 [0167.849] wcscmp (_String1="IA32.CHS", _String2=".") returned 1 [0167.849] wcscmp (_String1="IA32.CHS", _String2="..") returned 1 [0167.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bf08 [0167.850] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.850] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.850] wcscat (in: _Dest=0x682bf08, _Source="IA32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" [0167.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0167.851] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="MAKEAC~1.CHS")) returned 1 [0167.851] wcscmp (_String1="makeaccessible.CHS", _String2=".") returned 1 [0167.851] wcscmp (_String1="makeaccessible.CHS", _String2="..") returned 1 [0167.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e4d0 [0167.851] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.851] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.851] wcscat (in: _Dest=0x3e0e4d0, _Source="makeaccessible.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" [0167.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0167.853] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9942f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="MULTIM~1.CHS")) returned 1 [0167.853] wcscmp (_String1="Multimedia.CHS", _String2=".") returned 1 [0167.853] wcscmp (_String1="Multimedia.CHS", _String2="..") returned 1 [0167.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2408 [0167.853] wcscpy (in: _Dest=0x69c2408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.853] wcscat (in: _Dest=0x69c2408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.853] wcscat (in: _Dest=0x69c2408, _Source="Multimedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" [0167.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0167.854] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1 [0167.854] wcscmp (_String1="pddom.CHS", _String2=".") returned 1 [0167.854] wcscmp (_String1="pddom.CHS", _String2="..") returned 1 [0167.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbbc8 [0167.854] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.855] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.855] wcscat (in: _Dest=0x66dbbc8, _Source="pddom.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" [0167.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0167.856] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1 [0167.856] wcscmp (_String1="PPKLITE.CHS", _String2=".") returned 1 [0167.856] wcscmp (_String1="PPKLITE.CHS", _String2="..") returned 1 [0167.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68abe08 [0167.856] wcscpy (in: _Dest=0x68abe08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.856] wcscat (in: _Dest=0x68abe08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.856] wcscat (in: _Dest=0x68abe08, _Source="PPKLITE.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" [0167.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0167.857] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1 [0167.857] wcscmp (_String1="RdLang32.CHS", _String2=".") returned 1 [0167.857] wcscmp (_String1="RdLang32.CHS", _String2="..") returned 1 [0167.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68abe98 [0167.858] wcscpy (in: _Dest=0x68abe98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.858] wcscat (in: _Dest=0x68abe98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.858] wcscat (in: _Dest=0x68abe98, _Source="RdLang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" [0167.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0167.859] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="READOU~1.CHS")) returned 1 [0167.859] wcscmp (_String1="ReadOutLoud.CHS", _String2=".") returned 1 [0167.859] wcscmp (_String1="ReadOutLoud.CHS", _String2="..") returned 1 [0167.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c1eb0 [0167.859] wcscpy (in: _Dest=0x69c1eb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.859] wcscat (in: _Dest=0x69c1eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.859] wcscat (in: _Dest=0x69c1eb0, _Source="ReadOutLoud.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" [0167.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0167.861] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1 [0167.861] wcscmp (_String1="reflow.CHS", _String2=".") returned 1 [0167.861] wcscmp (_String1="reflow.CHS", _String2="..") returned 1 [0167.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68abf28 [0167.861] wcscpy (in: _Dest=0x68abf28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.861] wcscat (in: _Dest=0x68abf28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.861] wcscat (in: _Dest=0x68abf28, _Source="reflow.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" [0167.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abf28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0167.862] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="SAVEAS~1.CHS")) returned 1 [0167.862] wcscmp (_String1="SaveAsRTF.CHS", _String2=".") returned 1 [0167.862] wcscmp (_String1="SaveAsRTF.CHS", _String2="..") returned 1 [0167.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c22d8 [0167.862] wcscpy (in: _Dest=0x69c22d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.862] wcscat (in: _Dest=0x69c22d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.862] wcscat (in: _Dest=0x69c22d8, _Source="SaveAsRTF.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" [0167.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c22d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0167.864] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1 [0167.864] wcscmp (_String1="Search.CHS", _String2=".") returned 1 [0167.864] wcscmp (_String1="Search.CHS", _String2="..") returned 1 [0167.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68abfb8 [0167.864] wcscpy (in: _Dest=0x68abfb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.864] wcscat (in: _Dest=0x68abfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.864] wcscat (in: _Dest=0x68abfb8, _Source="Search.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" [0167.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0167.865] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1 [0167.865] wcscmp (_String1="SendMail.CHS", _String2=".") returned 1 [0167.866] wcscmp (_String1="SendMail.CHS", _String2="..") returned 1 [0167.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac048 [0167.866] wcscpy (in: _Dest=0x68ac048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.866] wcscat (in: _Dest=0x68ac048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.866] wcscat (in: _Dest=0x68ac048, _Source="SendMail.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" [0167.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0167.867] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0167.867] wcscmp (_String1="Services", _String2=".") returned 1 [0167.868] wcscmp (_String1="Services", _String2="..") returned 1 [0167.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682bd70 [0167.868] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.868] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.868] wcscat (in: _Dest=0x682bd70, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0167.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0167.869] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1 [0167.869] wcscmp (_String1="Spelling.CHS", _String2=".") returned 1 [0167.869] wcscmp (_String1="Spelling.CHS", _String2="..") returned 1 [0167.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x68ac0d8 [0167.869] wcscpy (in: _Dest=0x68ac0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.869] wcscat (in: _Dest=0x68ac0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.869] wcscat (in: _Dest=0x68ac0d8, _Source="Spelling.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" [0167.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0167.871] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1 [0167.871] wcscmp (_String1="updater.CHS", _String2=".") returned 1 [0167.871] wcscmp (_String1="updater.CHS", _String2="..") returned 1 [0167.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac168 [0167.871] wcscpy (in: _Dest=0x68ac168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.871] wcscat (in: _Dest=0x68ac168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.871] wcscat (in: _Dest=0x68ac168, _Source="updater.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" [0167.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0167.872] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1 [0167.872] wcscmp (_String1="Weblink.CHS", _String2=".") returned 1 [0167.872] wcscmp (_String1="Weblink.CHS", _String2="..") returned 1 [0167.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x68ac1f8 [0167.872] wcscpy (in: _Dest=0x68ac1f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0167.873] wcscat (in: _Dest=0x68ac1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0167.873] wcscat (in: _Dest=0x68ac1f8, _Source="Weblink.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" [0167.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0168.342] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0 [0168.919] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0169.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0169.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c938) returned 1 [0169.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 Thread: id = 2999 os_tid = 0x1028 [0160.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c9b8 [0160.313] wcscpy (in: _Dest=0x674c9b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0160.313] wcscat (in: _Dest=0x674c9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0160.313] wcscat (in: _Dest=0x674c9b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*" [0160.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0160.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2320 [0165.568] wcscmp (_String1=".", _String2=".") returned 0 [0165.568] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.568] wcscmp (_String1="..", _String2=".") returned 1 [0165.568] wcscmp (_String1="..", _String2="..") returned 0 [0165.568] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="ACCESS~1.CHT")) returned 1 [0165.568] wcscmp (_String1="accessibility.CHT", _String2=".") returned 1 [0165.568] wcscmp (_String1="accessibility.CHT", _String2="..") returned 1 [0165.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d210 [0165.568] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0165.568] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0165.568] wcscat (in: _Dest=0x3e0d210, _Source="accessibility.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" [0171.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht")) returned 0x20 [0171.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0171.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.828] GetLastError () returned 0x5 [0171.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0171.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.828] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1 [0171.828] wcscmp (_String1="Acroform.CHT", _String2=".") returned 1 [0171.828] wcscmp (_String1="Acroform.CHT", _String2="..") returned 1 [0171.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0171.828] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.828] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.828] wcscat (in: _Dest=0x66dd248, _Source="Acroform.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" [0171.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht")) returned 0x20 [0171.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0171.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.829] GetLastError () returned 0x5 [0171.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0171.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.829] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="ADOBEC~1.CHT")) returned 1 [0171.829] wcscmp (_String1="AdobeCollabSync.CHT", _String2=".") returned 1 [0171.829] wcscmp (_String1="AdobeCollabSync.CHT", _String2="..") returned 1 [0171.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d210 [0171.829] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.829] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.829] wcscat (in: _Dest=0x3e0d210, _Source="AdobeCollabSync.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" [0171.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht")) returned 0x20 [0171.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0171.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.830] GetLastError () returned 0x5 [0171.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0171.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.830] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1 [0171.830] wcscmp (_String1="Annots.CHT", _String2=".") returned 1 [0171.830] wcscmp (_String1="Annots.CHT", _String2="..") returned 1 [0171.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd248 [0171.830] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.830] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.830] wcscat (in: _Dest=0x66dd248, _Source="Annots.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" [0171.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht")) returned 0x20 [0171.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0171.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.831] GetLastError () returned 0x5 [0171.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0171.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.831] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="BRDLAN~1.CHT")) returned 1 [0171.831] wcscmp (_String1="BRdlang32.CHT", _String2=".") returned 1 [0171.831] wcscmp (_String1="BRdlang32.CHT", _String2="..") returned 1 [0171.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.831] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.831] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.831] wcscat (in: _Dest=0x6958370, _Source="BRdlang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" [0171.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht")) returned 0x20 [0171.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0171.832] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.832] GetLastError () returned 0x5 [0171.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0171.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.832] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1 [0171.832] wcscmp (_String1="Checkers.CHT", _String2=".") returned 1 [0171.832] wcscmp (_String1="Checkers.CHT", _String2="..") returned 1 [0171.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0171.832] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.832] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.832] wcscat (in: _Dest=0x66dd248, _Source="Checkers.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" [0171.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht")) returned 0x20 [0171.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0171.868] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.868] GetLastError () returned 0x5 [0171.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0171.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.869] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1 [0171.869] wcscmp (_String1="DigSig.CHT", _String2=".") returned 1 [0171.869] wcscmp (_String1="DigSig.CHT", _String2="..") returned 1 [0171.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd248 [0171.869] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.869] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.869] wcscat (in: _Dest=0x66dd248, _Source="DigSig.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" [0171.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht")) returned 0x20 [0171.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0171.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.896] GetLastError () returned 0x5 [0171.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0171.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.896] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1 [0171.896] wcscmp (_String1="DVA.CHT", _String2=".") returned 1 [0171.896] wcscmp (_String1="DVA.CHT", _String2="..") returned 1 [0171.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f260c8 [0171.896] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.896] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.896] wcscat (in: _Dest=0x3f260c8, _Source="DVA.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" [0171.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht")) returned 0x20 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0171.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.897] GetLastError () returned 0x5 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0171.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0171.897] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1 [0171.897] wcscmp (_String1="eBook.CHT", _String2=".") returned 1 [0171.897] wcscmp (_String1="eBook.CHT", _String2="..") returned 1 [0171.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd248 [0171.897] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.897] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.897] wcscat (in: _Dest=0x66dd248, _Source="eBook.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" [0171.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht")) returned 0x20 [0171.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0171.898] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.898] GetLastError () returned 0x5 [0171.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0171.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.898] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1 [0171.898] wcscmp (_String1="EScript.CHT", _String2=".") returned 1 [0171.898] wcscmp (_String1="EScript.CHT", _String2="..") returned 1 [0171.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd248 [0171.898] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.898] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.898] wcscat (in: _Dest=0x66dd248, _Source="EScript.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" [0171.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht")) returned 0x20 [0171.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0171.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.899] GetLastError () returned 0x5 [0171.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0171.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.899] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1 [0171.899] wcscmp (_String1="IA32.CHT", _String2=".") returned 1 [0171.899] wcscmp (_String1="IA32.CHT", _String2="..") returned 1 [0171.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f260c8 [0171.899] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.899] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.899] wcscat (in: _Dest=0x3f260c8, _Source="IA32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" [0171.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht")) returned 0x20 [0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0171.900] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.900] GetLastError () returned 0x5 [0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0171.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0171.900] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="MAKEAC~1.CHT")) returned 1 [0171.900] wcscmp (_String1="makeaccessible.CHT", _String2=".") returned 1 [0171.900] wcscmp (_String1="makeaccessible.CHT", _String2="..") returned 1 [0171.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0171.900] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.900] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.900] wcscat (in: _Dest=0x3e0d210, _Source="makeaccessible.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" [0171.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht")) returned 0x20 [0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0171.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.901] GetLastError () returned 0x5 [0171.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0171.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 [0171.901] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="MULTIM~1.CHT")) returned 1 [0171.901] wcscmp (_String1="Multimedia.CHT", _String2=".") returned 1 [0171.901] wcscmp (_String1="Multimedia.CHT", _String2="..") returned 1 [0171.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958370 [0171.901] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.901] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.901] wcscat (in: _Dest=0x6958370, _Source="Multimedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" [0171.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht")) returned 0x20 [0171.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0171.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.902] GetLastError () returned 0x5 [0171.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0171.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.902] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1 [0171.902] wcscmp (_String1="pddom.CHT", _String2=".") returned 1 [0171.902] wcscmp (_String1="pddom.CHT", _String2="..") returned 1 [0171.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd248 [0171.902] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.902] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.902] wcscat (in: _Dest=0x66dd248, _Source="pddom.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" [0171.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht")) returned 0x20 [0171.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0171.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.903] GetLastError () returned 0x5 [0171.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0171.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.903] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1 [0171.903] wcscmp (_String1="PPKLITE.CHT", _String2=".") returned 1 [0171.903] wcscmp (_String1="PPKLITE.CHT", _String2="..") returned 1 [0171.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dd248 [0171.903] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.903] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.903] wcscat (in: _Dest=0x66dd248, _Source="PPKLITE.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" [0171.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht")) returned 0x20 [0171.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0171.903] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.904] GetLastError () returned 0x5 [0171.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0171.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.904] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1 [0171.904] wcscmp (_String1="RdLang32.CHT", _String2=".") returned 1 [0171.904] wcscmp (_String1="RdLang32.CHT", _String2="..") returned 1 [0171.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd248 [0171.904] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.904] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.904] wcscat (in: _Dest=0x66dd248, _Source="RdLang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" [0171.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht")) returned 0x20 [0171.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0171.904] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.904] GetLastError () returned 0x5 [0171.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0171.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.905] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="READOU~1.CHT")) returned 1 [0171.905] wcscmp (_String1="ReadOutLoud.CHT", _String2=".") returned 1 [0171.905] wcscmp (_String1="ReadOutLoud.CHT", _String2="..") returned 1 [0171.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6958370 [0171.905] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.905] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.905] wcscat (in: _Dest=0x6958370, _Source="ReadOutLoud.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" [0171.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht")) returned 0x20 [0171.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0171.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.906] GetLastError () returned 0x5 [0171.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0171.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.906] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1 [0171.906] wcscmp (_String1="reflow.CHT", _String2=".") returned 1 [0171.906] wcscmp (_String1="reflow.CHT", _String2="..") returned 1 [0171.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd248 [0171.906] wcscpy (in: _Dest=0x66dd248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.906] wcscat (in: _Dest=0x66dd248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.906] wcscat (in: _Dest=0x66dd248, _Source="reflow.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" [0171.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht")) returned 0x20 [0171.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0171.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.949] GetLastError () returned 0x5 [0171.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0171.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 [0171.950] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="SAVEAS~1.CHT")) returned 1 [0171.950] wcscmp (_String1="SaveAsRTF.CHT", _String2=".") returned 1 [0171.950] wcscmp (_String1="SaveAsRTF.CHT", _String2="..") returned 1 [0171.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0171.950] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.950] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.950] wcscat (in: _Dest=0x6958370, _Source="SaveAsRTF.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" [0171.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht")) returned 0x20 [0171.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0171.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.978] GetLastError () returned 0x5 [0171.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0171.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 [0171.978] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1 [0171.978] wcscmp (_String1="Search.CHT", _String2=".") returned 1 [0171.978] wcscmp (_String1="Search.CHT", _String2="..") returned 1 [0171.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.978] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.978] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.978] wcscat (in: _Dest=0x66db7d8, _Source="Search.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" [0171.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht")) returned 0x20 [0171.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0171.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.979] GetLastError () returned 0x5 [0171.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0171.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.979] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1 [0171.979] wcscmp (_String1="SendMail.CHT", _String2=".") returned 1 [0171.979] wcscmp (_String1="SendMail.CHT", _String2="..") returned 1 [0171.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0171.979] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.979] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.979] wcscat (in: _Dest=0x66db7d8, _Source="SendMail.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" [0171.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht")) returned 0x20 [0171.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0171.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.980] GetLastError () returned 0x5 [0171.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0171.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0171.980] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0171.980] wcscmp (_String1="Services", _String2=".") returned 1 [0171.980] wcscmp (_String1="Services", _String2="..") returned 1 [0171.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c568 [0171.980] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0171.980] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0171.980] wcscat (in: _Dest=0x682c568, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0171.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db7d8 [0171.980] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0171.980] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0171.980] wcscat (in: _Dest=0x66db7d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*" [0171.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0171.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0171.981] wcscmp (_String1=".", _String2=".") returned 0 [0171.981] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.981] wcscmp (_String1="..", _String2=".") returned 1 [0171.981] wcscmp (_String1="..", _String2="..") returned 0 [0171.981] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.981] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.981] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0171.981] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0171.981] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0171.981] wcscat (in: _Dest=0x697e228, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" [0171.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx")) returned 0x20 [0172.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.076] GetLastError () returned 0x5 [0172.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0172.076] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.076] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.076] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0172.076] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0172.077] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0172.077] wcscat (in: _Dest=0x697e228, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" [0172.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx")) returned 0x20 [0172.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.077] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.077] GetLastError () returned 0x5 [0172.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0172.078] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.078] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0172.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0172.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 [0172.078] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1 [0172.078] wcscmp (_String1="Spelling.CHT", _String2=".") returned 1 [0172.078] wcscmp (_String1="Spelling.CHT", _String2="..") returned 1 [0172.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db7d8 [0172.078] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0172.078] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0172.078] wcscat (in: _Dest=0x66db7d8, _Source="Spelling.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" [0172.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht")) returned 0x20 [0172.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0172.084] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.084] GetLastError () returned 0x5 [0172.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0172.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.084] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1 [0172.084] wcscmp (_String1="updater.CHT", _String2=".") returned 1 [0172.084] wcscmp (_String1="updater.CHT", _String2="..") returned 1 [0172.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.084] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0172.084] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0172.084] wcscat (in: _Dest=0x66db7d8, _Source="updater.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" [0172.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht")) returned 0x20 [0172.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0172.085] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.085] GetLastError () returned 0x5 [0172.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0172.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.085] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1 [0172.085] wcscmp (_String1="Weblink.CHT", _String2=".") returned 1 [0172.085] wcscmp (_String1="Weblink.CHT", _String2="..") returned 1 [0172.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db7d8 [0172.085] wcscpy (in: _Dest=0x66db7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0172.085] wcscat (in: _Dest=0x66db7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0172.085] wcscat (in: _Dest=0x66db7d8, _Source="Weblink.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" [0172.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht")) returned 0x20 [0172.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0172.086] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.086] GetLastError () returned 0x5 [0172.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0172.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 [0172.086] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0 [0172.086] FindClose (in: hFindFile=0x66d2320 | out: hFindFile=0x66d2320) returned 1 [0172.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0172.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c9b8) returned 1 [0172.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 3000 os_tid = 0x1648 [0160.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b928 [0160.314] wcscpy (in: _Dest=0x35b928, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0160.314] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0160.314] wcscat (in: _Dest=0x35b928, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*" [0160.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0160.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0162.473] wcscmp (_String1=".", _String2=".") returned 0 [0162.473] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.473] wcscmp (_String1="..", _String2=".") returned 1 [0162.473] wcscmp (_String1="..", _String2="..") returned 0 [0162.473] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKSCS.txt", cAlternateFileName="")) returned 1 [0162.473] wcscmp (_String1="HKSCS.txt", _String2=".") returned 1 [0162.473] wcscmp (_String1="HKSCS.txt", _String2="..") returned 1 [0162.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332268 [0162.474] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0162.474] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0162.474] wcscat (in: _Dest=0x332268, _Source="HKSCS.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" [0163.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0163.296] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Japanese83pv.txt", cAlternateFileName="JAPANE~1.TXT")) returned 1 [0163.296] wcscmp (_String1="Japanese83pv.txt", _String2=".") returned 1 [0163.296] wcscmp (_String1="Japanese83pv.txt", _String2="..") returned 1 [0163.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f458 [0163.296] wcscpy (in: _Dest=0x682f458, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0163.296] wcscat (in: _Dest=0x682f458, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0163.297] wcscat (in: _Dest=0x682f458, _Source="Japanese83pv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" [0163.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0163.298] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0208.txt", cAlternateFileName="")) returned 1 [0163.298] wcscmp (_String1="JISX0208.txt", _String2=".") returned 1 [0163.298] wcscmp (_String1="JISX0208.txt", _String2="..") returned 1 [0163.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0163.298] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0163.298] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0163.298] wcscat (in: _Dest=0x333168, _Source="JISX0208.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" [0163.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0163.299] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0213.txt", cAlternateFileName="")) returned 1 [0163.299] wcscmp (_String1="JISX0213.txt", _String2=".") returned 1 [0163.299] wcscmp (_String1="JISX0213.txt", _String2="..") returned 1 [0163.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332e68 [0163.299] wcscpy (in: _Dest=0x332e68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0163.299] wcscat (in: _Dest=0x332e68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0163.299] wcscat (in: _Dest=0x332e68, _Source="JISX0213.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" [0163.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0163.300] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0163.300] wcscmp (_String1="symbol.txt", _String2=".") returned 1 [0163.300] wcscmp (_String1="symbol.txt", _String2="..") returned 1 [0163.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3338e8 [0163.300] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0163.301] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0163.301] wcscat (in: _Dest=0x3338e8, _Source="symbol.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" [0163.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0163.302] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0163.302] wcscmp (_String1="zdingbat.txt", _String2=".") returned 1 [0163.302] wcscmp (_String1="zdingbat.txt", _String2="..") returned 1 [0163.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0163.302] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0163.302] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0163.302] wcscat (in: _Dest=0x3339a8, _Source="zdingbat.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" [0163.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0163.303] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0163.303] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0163.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0163.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0163.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 3001 os_tid = 0x102c [0160.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697dce8 [0160.315] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0160.315] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0160.315] wcscat (in: _Dest=0x697dce8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*" [0160.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0160.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0162.753] wcscmp (_String1=".", _String2=".") returned 0 [0162.753] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.753] wcscmp (_String1="..", _String2=".") returned 1 [0162.753] wcscmp (_String1="..", _String2="..") returned 0 [0162.753] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0162.753] wcscmp (_String1="ARABIC.TXT", _String2=".") returned 1 [0162.753] wcscmp (_String1="ARABIC.TXT", _String2="..") returned 1 [0162.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7ef8 [0162.753] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0162.753] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0162.753] wcscat (in: _Dest=0x2ff7ef8, _Source="ARABIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" [0163.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0163.806] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0163.806] wcscmp (_String1="CENTEURO.TXT", _String2=".") returned 1 [0163.806] wcscmp (_String1="CENTEURO.TXT", _String2="..") returned 1 [0163.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333b28 [0163.806] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.806] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.806] wcscat (in: _Dest=0x333b28, _Source="CENTEURO.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" [0163.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0163.807] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0163.807] wcscmp (_String1="CHINSIMP.TXT", _String2=".") returned 1 [0163.807] wcscmp (_String1="CHINSIMP.TXT", _String2="..") returned 1 [0163.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333be8 [0163.807] wcscpy (in: _Dest=0x333be8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.807] wcscat (in: _Dest=0x333be8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.808] wcscat (in: _Dest=0x333be8, _Source="CHINSIMP.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" [0163.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0163.808] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0163.809] wcscmp (_String1="CHINTRAD.TXT", _String2=".") returned 1 [0163.809] wcscmp (_String1="CHINTRAD.TXT", _String2="..") returned 1 [0163.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333ca8 [0163.809] wcscpy (in: _Dest=0x333ca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.809] wcscat (in: _Dest=0x333ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.809] wcscat (in: _Dest=0x333ca8, _Source="CHINTRAD.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" [0163.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0163.810] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0163.810] wcscmp (_String1="CORPCHAR.TXT", _String2=".") returned 1 [0163.810] wcscmp (_String1="CORPCHAR.TXT", _String2="..") returned 1 [0163.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0163.810] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.810] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.810] wcscat (in: _Dest=0x333d68, _Source="CORPCHAR.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" [0163.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0163.811] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0163.811] wcscmp (_String1="CROATIAN.TXT", _String2=".") returned 1 [0163.811] wcscmp (_String1="CROATIAN.TXT", _String2="..") returned 1 [0163.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0163.811] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.811] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.811] wcscat (in: _Dest=0x333e28, _Source="CROATIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" [0163.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0163.812] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0163.812] wcscmp (_String1="CYRILLIC.TXT", _String2=".") returned 1 [0163.812] wcscmp (_String1="CYRILLIC.TXT", _String2="..") returned 1 [0163.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333ee8 [0163.813] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.813] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.813] wcscat (in: _Dest=0x333ee8, _Source="CYRILLIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" [0163.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0163.814] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0163.814] wcscmp (_String1="FARSI.TXT", _String2=".") returned 1 [0163.814] wcscmp (_String1="FARSI.TXT", _String2="..") returned 1 [0163.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee18e0 [0163.814] wcscpy (in: _Dest=0x3ee18e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.814] wcscat (in: _Dest=0x3ee18e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.814] wcscat (in: _Dest=0x3ee18e0, _Source="FARSI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" [0163.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee18e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0163.815] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0163.815] wcscmp (_String1="GREEK.TXT", _String2=".") returned 1 [0163.815] wcscmp (_String1="GREEK.TXT", _String2="..") returned 1 [0163.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1b08 [0163.815] wcscpy (in: _Dest=0x3ee1b08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.815] wcscat (in: _Dest=0x3ee1b08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.815] wcscat (in: _Dest=0x3ee1b08, _Source="GREEK.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" [0163.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0163.816] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0163.816] wcscmp (_String1="HEBREW.TXT", _String2=".") returned 1 [0163.816] wcscmp (_String1="HEBREW.TXT", _String2="..") returned 1 [0163.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2010 [0163.816] wcscpy (in: _Dest=0x3ee2010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.816] wcscat (in: _Dest=0x3ee2010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.816] wcscat (in: _Dest=0x3ee2010, _Source="HEBREW.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" [0163.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0163.817] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0163.817] wcscmp (_String1="ICELAND.TXT", _String2=".") returned 1 [0163.817] wcscmp (_String1="ICELAND.TXT", _String2="..") returned 1 [0163.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333fa8 [0163.818] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.818] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.818] wcscat (in: _Dest=0x333fa8, _Source="ICELAND.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" [0163.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0163.819] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0163.819] wcscmp (_String1="JAPANESE.TXT", _String2=".") returned 1 [0163.819] wcscmp (_String1="JAPANESE.TXT", _String2="..") returned 1 [0163.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0163.819] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.819] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.819] wcscat (in: _Dest=0x334068, _Source="JAPANESE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" [0163.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0163.820] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0163.820] wcscmp (_String1="KOREAN.TXT", _String2=".") returned 1 [0163.820] wcscmp (_String1="KOREAN.TXT", _String2="..") returned 1 [0163.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee20c8 [0163.820] wcscpy (in: _Dest=0x3ee20c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.820] wcscat (in: _Dest=0x3ee20c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.820] wcscat (in: _Dest=0x3ee20c8, _Source="KOREAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" [0163.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee20c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0163.821] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0163.821] wcscmp (_String1="ROMAN.TXT", _String2=".") returned 1 [0163.822] wcscmp (_String1="ROMAN.TXT", _String2="..") returned 1 [0163.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2180 [0163.822] wcscpy (in: _Dest=0x3ee2180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.822] wcscat (in: _Dest=0x3ee2180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.822] wcscat (in: _Dest=0x3ee2180, _Source="ROMAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" [0163.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0163.823] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0163.823] wcscmp (_String1="ROMANIAN.TXT", _String2=".") returned 1 [0163.823] wcscmp (_String1="ROMANIAN.TXT", _String2="..") returned 1 [0163.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf088 [0163.823] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.823] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.823] wcscat (in: _Dest=0x3daf088, _Source="ROMANIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" [0163.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0163.824] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0163.824] wcscmp (_String1="SYMBOL.TXT", _String2=".") returned 1 [0163.824] wcscmp (_String1="SYMBOL.TXT", _String2="..") returned 1 [0163.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2238 [0163.824] wcscpy (in: _Dest=0x3ee2238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.824] wcscat (in: _Dest=0x3ee2238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.824] wcscat (in: _Dest=0x3ee2238, _Source="SYMBOL.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" [0163.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320 [0163.825] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0163.825] wcscmp (_String1="THAI.TXT", _String2=".") returned 1 [0163.825] wcscmp (_String1="THAI.TXT", _String2="..") returned 1 [0163.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee22f0 [0163.825] wcscpy (in: _Dest=0x3ee22f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.825] wcscat (in: _Dest=0x3ee22f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.825] wcscat (in: _Dest=0x3ee22f0, _Source="THAI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" [0163.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee22f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344 [0163.826] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0163.827] wcscmp (_String1="TURKISH.TXT", _String2=".") returned 1 [0163.827] wcscmp (_String1="TURKISH.TXT", _String2="..") returned 1 [0163.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf148 [0163.827] wcscpy (in: _Dest=0x3daf148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.827] wcscat (in: _Dest=0x3daf148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.827] wcscat (in: _Dest=0x3daf148, _Source="TURKISH.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" [0163.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0163.828] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0163.828] wcscmp (_String1="UKRAINE.TXT", _String2=".") returned 1 [0163.828] wcscmp (_String1="UKRAINE.TXT", _String2="..") returned 1 [0163.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf208 [0163.828] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0163.828] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0163.828] wcscat (in: _Dest=0x3daf208, _Source="UKRAINE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" [0163.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0163.829] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0163.829] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0163.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0163.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0163.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 3002 os_tid = 0x1030 [0160.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e0d8 [0160.316] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0160.316] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0160.316] wcscat (in: _Dest=0x697e0d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*" [0160.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0160.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0162.754] wcscmp (_String1=".", _String2=".") returned 0 [0162.754] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.754] wcscmp (_String1="..", _String2=".") returned 1 [0162.754] wcscmp (_String1="..", _String2="..") returned 0 [0162.754] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0162.754] wcscmp (_String1="CP1250.TXT", _String2=".") returned 1 [0162.754] wcscmp (_String1="CP1250.TXT", _String2="..") returned 1 [0162.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1ea0 [0162.754] wcscpy (in: _Dest=0x3ee1ea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0162.754] wcscat (in: _Dest=0x3ee1ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0162.754] wcscat (in: _Dest=0x3ee1ea0, _Source="CP1250.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" [0166.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0166.721] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0166.722] wcscmp (_String1="CP1251.TXT", _String2=".") returned 1 [0166.722] wcscmp (_String1="CP1251.TXT", _String2="..") returned 1 [0166.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6f28 [0166.722] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.722] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.722] wcscat (in: _Dest=0x2ff6f28, _Source="CP1251.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" [0166.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0166.723] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0166.723] wcscmp (_String1="CP1252.TXT", _String2=".") returned 1 [0166.723] wcscmp (_String1="CP1252.TXT", _String2="..") returned 1 [0166.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6180 [0166.723] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.723] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.723] wcscat (in: _Dest=0x2ff6180, _Source="CP1252.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" [0166.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0166.724] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0166.724] wcscmp (_String1="CP1253.TXT", _String2=".") returned 1 [0166.724] wcscmp (_String1="CP1253.TXT", _String2="..") returned 1 [0166.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7ef8 [0166.724] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.724] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.724] wcscat (in: _Dest=0x2ff7ef8, _Source="CP1253.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" [0166.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0166.726] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0166.726] wcscmp (_String1="CP1254.TXT", _String2=".") returned 1 [0166.726] wcscmp (_String1="CP1254.TXT", _String2="..") returned 1 [0166.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6c48 [0166.726] wcscpy (in: _Dest=0x2ff6c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.726] wcscat (in: _Dest=0x2ff6c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.726] wcscat (in: _Dest=0x2ff6c48, _Source="CP1254.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" [0166.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0166.727] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0166.727] wcscmp (_String1="CP1255.TXT", _String2=".") returned 1 [0166.727] wcscmp (_String1="CP1255.TXT", _String2="..") returned 1 [0166.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7b60 [0166.727] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.727] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.727] wcscat (in: _Dest=0x2ff7b60, _Source="CP1255.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" [0166.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0166.728] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0166.728] wcscmp (_String1="CP1256.TXT", _String2=".") returned 1 [0166.728] wcscmp (_String1="CP1256.TXT", _String2="..") returned 1 [0166.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0166.728] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.728] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.728] wcscat (in: _Dest=0x2ff63a8, _Source="CP1256.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" [0166.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14 [0166.729] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0166.729] wcscmp (_String1="CP1257.TXT", _String2=".") returned 1 [0166.729] wcscmp (_String1="CP1257.TXT", _String2="..") returned 1 [0166.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff77c8 [0166.730] wcscpy (in: _Dest=0x2ff77c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.730] wcscat (in: _Dest=0x2ff77c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.730] wcscat (in: _Dest=0x2ff77c8, _Source="CP1257.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" [0166.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff77c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0166.731] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0166.731] wcscmp (_String1="CP1258.TXT", _String2=".") returned 1 [0166.731] wcscmp (_String1="CP1258.TXT", _String2="..") returned 1 [0166.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7098 [0166.731] wcscpy (in: _Dest=0x2ff7098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.731] wcscat (in: _Dest=0x2ff7098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.731] wcscat (in: _Dest=0x2ff7098, _Source="CP1258.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" [0166.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c [0166.732] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0166.732] wcscmp (_String1="CP874.TXT", _String2=".") returned 1 [0166.732] wcscmp (_String1="CP874.TXT", _String2="..") returned 1 [0166.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6fe0 [0166.732] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.732] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.732] wcscat (in: _Dest=0x2ff6fe0, _Source="CP874.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" [0166.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0166.733] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0166.733] wcscmp (_String1="CP932.TXT", _String2=".") returned 1 [0166.733] wcscmp (_String1="CP932.TXT", _String2="..") returned 1 [0166.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0166.734] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.734] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.734] wcscat (in: _Dest=0x2ff7c18, _Source="CP932.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" [0166.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0166.737] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0166.737] wcscmp (_String1="CP936.TXT", _String2=".") returned 1 [0166.738] wcscmp (_String1="CP936.TXT", _String2="..") returned 1 [0166.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0166.738] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.738] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.738] wcscat (in: _Dest=0x2ff6740, _Source="CP936.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" [0166.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0166.739] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0166.739] wcscmp (_String1="CP949.TXT", _String2=".") returned 1 [0166.739] wcscmp (_String1="CP949.TXT", _String2="..") returned 1 [0166.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0166.739] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.739] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.739] wcscat (in: _Dest=0x2ff7e40, _Source="CP949.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" [0166.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0166.740] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0166.740] wcscmp (_String1="CP950.TXT", _String2=".") returned 1 [0166.740] wcscmp (_String1="CP950.TXT", _String2="..") returned 1 [0166.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0166.740] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0166.740] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0166.740] wcscat (in: _Dest=0x2ff6b90, _Source="CP950.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" [0166.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0166.741] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0166.741] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0166.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0166.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 [0166.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dd90) returned 1 Thread: id = 3003 os_tid = 0x1038 [0160.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 0x20 [0164.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.298] GetLastError () returned 0x5 [0164.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 3004 os_tid = 0x103c [0160.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 0x20 [0162.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.280] GetLastError () returned 0x5 [0164.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 3005 os_tid = 0x1040 [0160.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 0x20 [0162.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.443] GetLastError () returned 0x5 [0163.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 3006 os_tid = 0x104c [0160.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 0x20 [0164.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.314] GetLastError () returned 0x5 [0164.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 3007 os_tid = 0x105c [0160.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 0x20 [0164.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.300] GetLastError () returned 0x5 [0164.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 Thread: id = 3008 os_tid = 0x1060 [0160.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 0x20 [0164.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.297] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.297] GetLastError () returned 0x5 [0164.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df00d0) returned 1 Thread: id = 3009 os_tid = 0x1064 [0160.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 0x20 [0164.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.322] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.322] GetLastError () returned 0x5 [0164.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0164.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1bc0) returned 1 Thread: id = 3010 os_tid = 0x1068 [0160.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 0x20 [0162.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.286] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.287] GetLastError () returned 0x5 [0164.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0164.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 3011 os_tid = 0x106c [0160.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 0x20 [0162.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.444] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.445] GetLastError () returned 0x5 [0163.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 Thread: id = 3012 os_tid = 0x1070 [0160.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 0x20 [0164.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.338] GetLastError () returned 0x5 [0164.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0164.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1c78) returned 1 Thread: id = 3013 os_tid = 0x1074 [0160.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 0x20 [0164.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.324] GetLastError () returned 0x5 [0164.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0164.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1548) returned 1 Thread: id = 3014 os_tid = 0x1078 [0160.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 0x20 [0164.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.320] GetLastError () returned 0x5 [0164.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0164.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0008) returned 1 Thread: id = 3015 os_tid = 0x107c [0160.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 0x20 [0160.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.327] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.327] GetLastError () returned 0x5 [0160.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0160.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 3016 os_tid = 0x1080 [0160.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 0x20 [0160.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.329] GetLastError () returned 0x5 [0160.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0160.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee13d8) returned 1 Thread: id = 3017 os_tid = 0x1084 [0160.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 0x20 [0160.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.332] GetLastError () returned 0x5 [0160.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0160.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deff40) returned 1 Thread: id = 3018 os_tid = 0x1088 [0160.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 0x20 [0160.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0160.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.334] GetLastError () returned 0x5 [0160.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0160.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b28) returned 1 Thread: id = 3019 os_tid = 0x108c [0160.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 0x20 [0160.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0160.336] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.336] GetLastError () returned 0x5 [0160.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0160.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 3020 os_tid = 0x25c [0160.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3edbe78 [0160.339] wcscpy (in: _Dest=0x3edbe78, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0160.339] wcscat (in: _Dest=0x3edbe78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0160.339] wcscat (in: _Dest=0x3edbe78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0160.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0160.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80878 [0160.340] wcscmp (_String1=".", _String2=".") returned 0 [0160.340] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.340] wcscmp (_String1="..", _String2=".") returned 1 [0160.340] wcscmp (_String1="..", _String2="..") returned 0 [0160.340] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0160.340] wcscmp (_String1="Accessories", _String2=".") returned 1 [0160.340] wcscmp (_String1="Accessories", _String2="..") returned 1 [0160.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957d80 [0160.340] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0160.340] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0160.340] wcscat (in: _Dest=0x6957d80, _Source="Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0161.242] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0161.242] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0161.242] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0161.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e8b8 [0161.242] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.242] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.242] wcscat (in: _Dest=0x697e8b8, _Source="Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0161.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0161.247] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0161.247] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0161.247] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0161.247] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.248] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0161.248] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0161.248] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0161.248] wcscmp (_String1="Games", _String2=".") returned 1 [0161.248] wcscmp (_String1="Games", _String2="..") returned 1 [0161.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26838 [0161.248] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.248] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.248] wcscat (in: _Dest=0x3f26838, _Source="Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0161.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0161.249] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0161.249] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0161.249] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0161.249] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0161.250] wcscmp (_String1="Java", _String2=".") returned 1 [0161.250] wcscmp (_String1="Java", _String2="..") returned 1 [0161.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27828 [0161.250] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.250] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.250] wcscat (in: _Dest=0x3f27828, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0161.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f27828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0161.251] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0161.251] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0161.251] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0161.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68191b0 [0161.251] wcscpy (in: _Dest=0x68191b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.251] wcscat (in: _Dest=0x68191b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.252] wcscat (in: _Dest=0x68191b0, _Source="Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0161.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68191b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0161.254] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0161.254] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0161.254] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0161.254] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0161.254] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0161.254] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0161.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dfd0 [0161.254] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.254] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.254] wcscat (in: _Dest=0x3e0dfd0, _Source="Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0161.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0161.256] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0161.256] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0161.256] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0161.256] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0161.256] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0161.256] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0161.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbce8 [0161.256] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.256] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.256] wcscat (in: _Dest=0x66dbce8, _Source="SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0161.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0161.257] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0161.257] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0161.258] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0161.258] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0161.258] wcscmp (_String1="Startup", _String2=".") returned 1 [0161.258] wcscmp (_String1="Startup", _String2="..") returned 1 [0161.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66db988 [0161.258] wcscpy (in: _Dest=0x66db988, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.258] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.258] wcscat (in: _Dest=0x66db988, _Source="Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0161.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0161.259] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0161.259] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0161.259] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0161.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db868 [0161.259] wcscpy (in: _Dest=0x66db868, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0161.259] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0161.259] wcscat (in: _Dest=0x66db868, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0161.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0161.261] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0161.261] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0161.261] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0161.261] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0161.261] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0161.261] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0161.261] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0161.261] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0161.261] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0161.261] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0161.261] FindNextFileW (in: hFindFile=0x3e80878, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0161.261] FindClose (in: hFindFile=0x3e80878 | out: hFindFile=0x3e80878) returned 1 [0161.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0161.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 [0161.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674abb8) returned 1 Thread: id = 3021 os_tid = 0x1090 [0160.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edbdf8 [0160.341] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0160.341] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\" [0160.341] wcscat (in: _Dest=0x3edbdf8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0160.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0160.341] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0160.342] wcscmp (_String1=".", _String2=".") returned 0 [0160.342] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.342] wcscmp (_String1="..", _String2=".") returned 1 [0160.342] wcscmp (_String1="..", _String2="..") returned 0 [0160.342] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.342] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0160.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0160.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 [0160.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 Thread: id = 3022 os_tid = 0x1094 [0160.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d07e0 [0160.348] wcscpy (in: _Dest=0x66d07e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0160.348] wcscat (in: _Dest=0x66d07e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\" [0160.348] wcscat (in: _Dest=0x66d07e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0160.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0160.348] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0160.348] wcscmp (_String1=".", _String2=".") returned 0 [0160.348] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.349] wcscmp (_String1="..", _String2=".") returned 1 [0160.349] wcscmp (_String1="..", _String2="..") returned 0 [0160.349] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.349] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0160.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0160.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0160.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 Thread: id = 3023 os_tid = 0x1098 [0160.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d838 [0160.351] wcscpy (in: _Dest=0x674d838, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0160.351] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\" [0160.351] wcscat (in: _Dest=0x674d838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*" [0160.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0160.351] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0163.228] wcscmp (_String1=".", _String2=".") returned 0 [0163.228] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.228] wcscmp (_String1="..", _String2=".") returned 1 [0163.228] wcscmp (_String1="..", _String2="..") returned 0 [0163.228] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0163.228] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0163.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0163.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 [0163.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59730) returned 1 Thread: id = 3024 os_tid = 0x109c [0160.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0161.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0161.609] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.477] GetLastError () returned 0x5 [0162.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0162.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 3025 os_tid = 0x10e4 [0160.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0162.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0162.936] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.936] GetLastError () returned 0x5 [0162.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0162.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 3026 os_tid = 0x67c [0160.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0162.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0162.937] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.938] GetLastError () returned 0x5 [0162.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0162.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 Thread: id = 3027 os_tid = 0x10e8 [0160.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0162.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.939] GetLastError () returned 0x5 [0162.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 3028 os_tid = 0xf5c [0160.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0162.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0162.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.941] GetLastError () returned 0x5 [0162.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0162.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 Thread: id = 3029 os_tid = 0x10ec [0160.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0162.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.942] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.942] GetLastError () returned 0x5 [0162.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edae78) returned 1 Thread: id = 3030 os_tid = 0x10f0 [0160.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0162.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0162.476] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.476] GetLastError () returned 0x5 [0162.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0162.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 3031 os_tid = 0x598 [0160.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0162.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.944] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.945] GetLastError () returned 0x5 [0162.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0162.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 3032 os_tid = 0x81c [0160.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0160.358] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0160.358] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0160.358] wcscat (in: _Dest=0x3d8ccf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*" [0160.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0160.358] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80838 [0160.359] wcscmp (_String1=".", _String2=".") returned 0 [0160.359] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.359] wcscmp (_String1="..", _String2=".") returned 1 [0160.359] wcscmp (_String1="..", _String2="..") returned 0 [0160.359] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0160.359] wcscmp (_String1="10.0", _String2=".") returned 1 [0160.359] wcscmp (_String1="10.0", _String2="..") returned 1 [0160.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29950 [0160.359] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0160.359] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0160.359] wcscat (in: _Dest=0x3f29950, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0161.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0161.334] FindNextFileW (in: hFindFile=0x3e80838, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0161.334] FindClose (in: hFindFile=0x3e80838 | out: hFindFile=0x3e80838) returned 1 [0161.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0161.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0161.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 3033 os_tid = 0xa20 [0160.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e960 [0160.360] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0160.360] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0160.360] wcscat (in: _Dest=0x3d8e960, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*" [0160.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0160.360] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80cf8 [0160.360] wcscmp (_String1=".", _String2=".") returned 0 [0160.360] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.360] wcscmp (_String1="..", _String2=".") returned 1 [0160.360] wcscmp (_String1="..", _String2="..") returned 0 [0160.360] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd6965b70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0160.361] wcscmp (_String1="ACECache11.lst", _String2=".") returned 1 [0160.361] wcscmp (_String1="ACECache11.lst", _String2="..") returned 1 [0160.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3edbdf8 [0160.361] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0160.361] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0160.361] wcscat (in: _Dest=0x3edbdf8, _Source="ACECache11.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" [0161.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0161.337] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0161.337] wcscmp (_String1="Profiles", _String2=".") returned 1 [0161.337] wcscmp (_String1="Profiles", _String2="..") returned 1 [0161.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f293a0 [0161.338] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0161.338] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0161.338] wcscat (in: _Dest=0x3f293a0, _Source="Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0161.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0161.339] FindNextFileW (in: hFindFile=0x3e80cf8, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0161.339] FindClose (in: hFindFile=0x3e80cf8 | out: hFindFile=0x3e80cf8) returned 1 [0161.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0161.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 [0161.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 Thread: id = 3034 os_tid = 0x20c [0160.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt")) returned 0x20 [0160.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0160.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.577] GetLastError () returned 0x5 [0160.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0160.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 3035 os_tid = 0xee8 [0160.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt")) returned 0x20 [0160.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0160.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.585] GetLastError () returned 0x5 [0160.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0160.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 3036 os_tid = 0xe6c [0160.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt")) returned 0x20 [0160.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0160.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.587] GetLastError () returned 0x5 [0160.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0160.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 3037 os_tid = 0x10d0 [0160.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt")) returned 0x20 [0161.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0161.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.679] GetLastError () returned 0x5 [0161.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0161.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 3038 os_tid = 0xa8c [0160.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt")) returned 0x20 [0161.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0161.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.681] GetLastError () returned 0x5 [0161.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0161.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 3039 os_tid = 0xa50 [0160.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt")) returned 0x20 [0161.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0161.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.682] GetLastError () returned 0x5 [0161.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0161.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 3040 os_tid = 0xe68 [0160.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt")) returned 0x20 [0161.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0161.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.684] GetLastError () returned 0x5 [0161.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0161.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 3041 os_tid = 0xf60 [0160.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt")) returned 0x20 [0161.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0161.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.686] GetLastError () returned 0x5 [0161.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0161.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 3042 os_tid = 0x10d4 [0160.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt")) returned 0x20 [0161.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0161.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.687] GetLastError () returned 0x5 [0161.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0161.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 3043 os_tid = 0x6f0 [0160.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt")) returned 0x20 [0161.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0161.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.689] GetLastError () returned 0x5 [0161.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0161.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 3044 os_tid = 0xf64 [0160.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt")) returned 0x20 [0161.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0161.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.691] GetLastError () returned 0x5 [0161.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0161.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 Thread: id = 3045 os_tid = 0x1144 [0160.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt")) returned 0x20 [0161.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0161.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.692] GetLastError () returned 0x5 [0161.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0161.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 3046 os_tid = 0x11c [0160.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt")) returned 0x20 [0161.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0161.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.694] GetLastError () returned 0x5 [0161.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0161.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 3047 os_tid = 0xf68 [0160.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt")) returned 0x20 [0161.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0161.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.051] GetLastError () returned 0x5 [0161.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0161.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 Thread: id = 3048 os_tid = 0xef4 [0160.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt")) returned 0x20 [0161.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0161.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.053] GetLastError () returned 0x5 [0161.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0161.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 3049 os_tid = 0xf6c [0160.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e810 [0160.606] wcscpy (in: _Dest=0x697e810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0160.606] wcscat (in: _Dest=0x697e810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\" [0160.606] wcscat (in: _Dest=0x697e810, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*" [0160.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b81b8 [0160.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0160.607] wcscmp (_String1=".", _String2=".") returned 0 [0160.607] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.607] wcscmp (_String1="..", _String2=".") returned 1 [0160.607] wcscmp (_String1="..", _String2="..") returned 0 [0160.607] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0160.607] wcscmp (_String1="11.00", _String2=".") returned 1 [0160.607] wcscmp (_String1="11.00", _String2="..") returned 1 [0160.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c4d8 [0160.607] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0160.607] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\" [0160.607] wcscat (in: _Dest=0x35c4d8, _Source="11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea36a0 [0172.552] wcscpy (in: _Dest=0x3ea36a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.552] wcscat (in: _Dest=0x3ea36a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0172.552] wcscat (in: _Dest=0x3ea36a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*" [0172.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979f50 [0172.552] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0172.637] wcscmp (_String1=".", _String2=".") returned 0 [0172.637] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.649] wcscmp (_String1="..", _String2=".") returned 1 [0172.649] wcscmp (_String1="..", _String2="..") returned 0 [0172.649] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3982c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0172.649] wcscmp (_String1="ara131.lex", _String2=".") returned 1 [0172.649] wcscmp (_String1="ara131.lex", _String2="..") returned 1 [0172.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df03f0 [0172.649] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.649] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0172.649] wcscat (in: _Dest=0x3df03f0, _Source="ara131.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" [0172.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex")) returned 0x20 [0172.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0172.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.683] GetLastError () returned 0x5 [0172.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0172.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.683] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0172.683] wcscmp (_String1="ara32.clx", _String2=".") returned 1 [0172.683] wcscmp (_String1="ara32.clx", _String2="..") returned 1 [0172.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0172.683] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.683] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0172.683] wcscat (in: _Dest=0x3336a8, _Source="ara32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" [0172.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx")) returned 0x20 [0172.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0172.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.684] GetLastError () returned 0x5 [0172.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0172.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 [0172.684] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0172.684] wcscmp (_String1="araphon.env", _String2=".") returned 1 [0172.684] wcscmp (_String1="araphon.env", _String2="..") returned 1 [0172.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df03f0 [0172.684] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.684] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0172.684] wcscat (in: _Dest=0x3df03f0, _Source="araphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" [0172.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env")) returned 0x20 [0172.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0172.685] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.685] GetLastError () returned 0x5 [0172.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0172.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.685] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0172.685] wcscmp (_String1="brt.fca", _String2=".") returned 1 [0172.685] wcscmp (_String1="brt.fca", _String2="..") returned 1 [0172.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0172.685] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0172.685] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0172.685] wcscat (in: _Dest=0x3336a8, _Source="brt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" [0172.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca")) returned 0x20 [0173.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0173.608] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.608] GetLastError () returned 0x5 [0173.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0173.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 [0173.608] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0173.608] wcscmp (_String1="brt.hyp", _String2=".") returned 1 [0173.608] wcscmp (_String1="brt.hyp", _String2="..") returned 1 [0173.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0173.608] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.608] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.608] wcscat (in: _Dest=0x3336a8, _Source="brt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" [0173.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0173.944] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0173.944] wcscmp (_String1="brt04.hsp", _String2=".") returned 1 [0173.944] wcscmp (_String1="brt04.hsp", _String2="..") returned 1 [0173.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf088 [0173.944] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.944] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.944] wcscat (in: _Dest=0x3daf088, _Source="brt04.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" [0173.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0173.945] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0173.945] wcscmp (_String1="brt32.clx", _String2=".") returned 1 [0173.945] wcscmp (_String1="brt32.clx", _String2="..") returned 1 [0173.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf208 [0173.945] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.945] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.946] wcscat (in: _Dest=0x3daf208, _Source="brt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" [0173.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0173.947] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0173.947] wcscmp (_String1="brt55.ths", _String2=".") returned 1 [0173.947] wcscmp (_String1="brt55.ths", _String2="..") returned 1 [0173.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf448 [0173.947] wcscpy (in: _Dest=0x3daf448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.947] wcscat (in: _Dest=0x3daf448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.947] wcscat (in: _Dest=0x3daf448, _Source="brt55.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" [0173.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0173.949] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0173.949] wcscmp (_String1="brz.fca", _String2=".") returned 1 [0173.949] wcscmp (_String1="brz.fca", _String2="..") returned 1 [0173.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf508 [0173.949] wcscpy (in: _Dest=0x3daf508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.949] wcscat (in: _Dest=0x3daf508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.949] wcscat (in: _Dest=0x3daf508, _Source="brz.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" [0173.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0173.950] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0173.950] wcscmp (_String1="brz.hyp", _String2=".") returned 1 [0173.950] wcscmp (_String1="brz.hyp", _String2="..") returned 1 [0173.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf5c8 [0173.951] wcscpy (in: _Dest=0x3daf5c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.951] wcscat (in: _Dest=0x3daf5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.951] wcscat (in: _Dest=0x3daf5c8, _Source="brz.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" [0173.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0173.952] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0173.952] wcscmp (_String1="brz32.clx", _String2=".") returned 1 [0173.952] wcscmp (_String1="brz32.clx", _String2="..") returned 1 [0173.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf688 [0173.952] wcscpy (in: _Dest=0x3daf688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.952] wcscat (in: _Dest=0x3daf688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.952] wcscat (in: _Dest=0x3daf688, _Source="brz32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" [0173.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0173.954] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0173.954] wcscmp (_String1="brz40.hsp", _String2=".") returned 1 [0173.954] wcscmp (_String1="brz40.hsp", _String2="..") returned 1 [0173.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf748 [0173.954] wcscpy (in: _Dest=0x3daf748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.954] wcscat (in: _Dest=0x3daf748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.954] wcscat (in: _Dest=0x3daf748, _Source="brz40.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" [0173.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0173.955] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0173.955] wcscmp (_String1="bul.hyp", _String2=".") returned 1 [0173.955] wcscmp (_String1="bul.hyp", _String2="..") returned 1 [0173.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf808 [0173.955] wcscpy (in: _Dest=0x3daf808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.956] wcscat (in: _Dest=0x3daf808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.956] wcscat (in: _Dest=0x3daf808, _Source="bul.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" [0173.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0173.957] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0173.957] wcscmp (_String1="bul120.lex", _String2=".") returned 1 [0173.957] wcscmp (_String1="bul120.lex", _String2="..") returned 1 [0173.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0173.957] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.957] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.957] wcscat (in: _Dest=0x682fa98, _Source="bul120.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" [0173.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0173.958] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0173.958] wcscmp (_String1="bul32.clx", _String2=".") returned 1 [0173.958] wcscmp (_String1="bul32.clx", _String2="..") returned 1 [0173.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf8c8 [0173.959] wcscpy (in: _Dest=0x3daf8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.959] wcscat (in: _Dest=0x3daf8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.959] wcscat (in: _Dest=0x3daf8c8, _Source="bul32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" [0173.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0173.960] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0173.960] wcscmp (_String1="bulphon.env", _String2=".") returned 1 [0173.960] wcscmp (_String1="bulphon.env", _String2="..") returned 1 [0173.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f9d0 [0173.960] wcscpy (in: _Dest=0x682f9d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.960] wcscat (in: _Dest=0x682f9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.960] wcscat (in: _Dest=0x682f9d0, _Source="bulphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" [0173.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0173.962] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0173.962] wcscmp (_String1="can.fca", _String2=".") returned 1 [0173.962] wcscmp (_String1="can.fca", _String2="..") returned 1 [0173.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf988 [0173.962] wcscpy (in: _Dest=0x3daf988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.962] wcscat (in: _Dest=0x3daf988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.962] wcscat (in: _Dest=0x3daf988, _Source="can.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" [0173.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0173.963] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0173.963] wcscmp (_String1="can.hyp", _String2=".") returned 1 [0173.963] wcscmp (_String1="can.hyp", _String2="..") returned 1 [0173.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafa48 [0173.963] wcscpy (in: _Dest=0x3dafa48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.963] wcscat (in: _Dest=0x3dafa48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.963] wcscat (in: _Dest=0x3dafa48, _Source="can.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" [0173.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0173.965] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0173.965] wcscmp (_String1="can03.ths", _String2=".") returned 1 [0173.965] wcscmp (_String1="can03.ths", _String2="..") returned 1 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafb08 [0173.965] wcscpy (in: _Dest=0x3dafb08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.965] wcscat (in: _Dest=0x3dafb08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.965] wcscat (in: _Dest=0x3dafb08, _Source="can03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" [0173.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0173.966] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0173.966] wcscmp (_String1="can129.hsp", _String2=".") returned 1 [0173.966] wcscmp (_String1="can129.hsp", _String2="..") returned 1 [0173.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f2c8 [0173.967] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.967] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.967] wcscat (in: _Dest=0x682f2c8, _Source="can129.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" [0173.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0173.968] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0173.968] wcscmp (_String1="can32.clx", _String2=".") returned 1 [0173.968] wcscmp (_String1="can32.clx", _String2="..") returned 1 [0173.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafbc8 [0173.968] wcscpy (in: _Dest=0x3dafbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.968] wcscat (in: _Dest=0x3dafbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.968] wcscat (in: _Dest=0x3dafbc8, _Source="can32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" [0173.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0173.970] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0173.970] wcscmp (_String1="cfr.fca", _String2=".") returned 1 [0173.970] wcscmp (_String1="cfr.fca", _String2="..") returned 1 [0173.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafc88 [0173.970] wcscpy (in: _Dest=0x3dafc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.970] wcscat (in: _Dest=0x3dafc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.970] wcscat (in: _Dest=0x3dafc88, _Source="cfr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" [0173.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0173.971] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0173.971] wcscmp (_String1="cfr.hyp", _String2=".") returned 1 [0173.971] wcscmp (_String1="cfr.hyp", _String2="..") returned 1 [0173.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafd48 [0173.972] wcscpy (in: _Dest=0x3dafd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.972] wcscat (in: _Dest=0x3dafd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.972] wcscat (in: _Dest=0x3dafd48, _Source="cfr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" [0173.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0173.973] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0173.973] wcscmp (_String1="cfr32.clx", _String2=".") returned 1 [0173.973] wcscmp (_String1="cfr32.clx", _String2="..") returned 1 [0173.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafe08 [0173.973] wcscpy (in: _Dest=0x3dafe08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.973] wcscat (in: _Dest=0x3dafe08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.973] wcscat (in: _Dest=0x3dafe08, _Source="cfr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" [0173.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0173.975] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0173.975] wcscmp (_String1="cfr68.hsp", _String2=".") returned 1 [0173.975] wcscmp (_String1="cfr68.hsp", _String2="..") returned 1 [0173.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafec8 [0173.975] wcscpy (in: _Dest=0x3dafec8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.975] wcscat (in: _Dest=0x3dafec8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.975] wcscat (in: _Dest=0x3dafec8, _Source="cfr68.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" [0173.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0173.977] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0173.977] wcscmp (_String1="cfr95.ths", _String2=".") returned 1 [0173.977] wcscmp (_String1="cfr95.ths", _String2="..") returned 1 [0173.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daff88 [0173.977] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.977] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.977] wcscat (in: _Dest=0x3daff88, _Source="cfr95.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" [0173.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0173.978] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0173.978] wcscmp (_String1="ctl.fca", _String2=".") returned 1 [0173.978] wcscmp (_String1="ctl.fca", _String2="..") returned 1 [0173.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0048 [0173.978] wcscpy (in: _Dest=0x3db0048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.978] wcscat (in: _Dest=0x3db0048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.978] wcscat (in: _Dest=0x3db0048, _Source="ctl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" [0173.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0173.980] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0173.980] wcscmp (_String1="ctl.hyp", _String2=".") returned 1 [0173.980] wcscmp (_String1="ctl.hyp", _String2="..") returned 1 [0173.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0108 [0173.980] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.980] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.980] wcscat (in: _Dest=0x3db0108, _Source="ctl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" [0173.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0174.287] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0174.287] wcscmp (_String1="ctl28.hsp", _String2=".") returned 1 [0174.287] wcscmp (_String1="ctl28.hsp", _String2="..") returned 1 [0174.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf8c8 [0174.287] wcscpy (in: _Dest=0x3daf8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.288] wcscat (in: _Dest=0x3daf8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.288] wcscat (in: _Dest=0x3daf8c8, _Source="ctl28.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" [0174.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0174.289] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0174.289] wcscmp (_String1="ctl32.clx", _String2=".") returned 1 [0174.289] wcscmp (_String1="ctl32.clx", _String2="..") returned 1 [0174.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf988 [0174.289] wcscpy (in: _Dest=0x3daf988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.289] wcscat (in: _Dest=0x3daf988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.289] wcscat (in: _Dest=0x3daf988, _Source="ctl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" [0174.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0174.290] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0174.290] wcscmp (_String1="cze.fca", _String2=".") returned 1 [0174.290] wcscmp (_String1="cze.fca", _String2="..") returned 1 [0174.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafa48 [0174.291] wcscpy (in: _Dest=0x3dafa48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.291] wcscat (in: _Dest=0x3dafa48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.291] wcscat (in: _Dest=0x3dafa48, _Source="cze.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" [0174.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0174.292] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0174.292] wcscmp (_String1="cze.hyp", _String2=".") returned 1 [0174.292] wcscmp (_String1="cze.hyp", _String2="..") returned 1 [0174.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafbc8 [0174.292] wcscpy (in: _Dest=0x3dafbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.292] wcscat (in: _Dest=0x3dafbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.292] wcscat (in: _Dest=0x3dafbc8, _Source="cze.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" [0174.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0174.293] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0174.294] wcscmp (_String1="cze108.hsp", _String2=".") returned 1 [0174.294] wcscmp (_String1="cze108.hsp", _String2="..") returned 1 [0174.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0174.294] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.294] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.294] wcscat (in: _Dest=0x682fa98, _Source="cze108.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" [0174.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0174.295] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0174.295] wcscmp (_String1="cze32.clx", _String2=".") returned 1 [0174.295] wcscmp (_String1="cze32.clx", _String2="..") returned 1 [0174.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafc88 [0174.295] wcscpy (in: _Dest=0x3dafc88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.295] wcscat (in: _Dest=0x3dafc88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.295] wcscat (in: _Dest=0x3dafc88, _Source="cze32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" [0174.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0174.296] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0174.296] wcscmp (_String1="dan.hyp", _String2=".") returned 1 [0174.297] wcscmp (_String1="dan.hyp", _String2="..") returned 1 [0174.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafd48 [0174.297] wcscpy (in: _Dest=0x3dafd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.297] wcscat (in: _Dest=0x3dafd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.297] wcscat (in: _Dest=0x3dafd48, _Source="dan.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" [0174.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0174.298] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0174.300] wcscmp (_String1="dan32.clx", _String2=".") returned 1 [0174.300] wcscmp (_String1="dan32.clx", _String2="..") returned 1 [0174.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafe08 [0174.300] wcscpy (in: _Dest=0x3dafe08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.300] wcscat (in: _Dest=0x3dafe08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.300] wcscat (in: _Dest=0x3dafe08, _Source="dan32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" [0178.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0178.855] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0178.855] wcscmp (_String1="dan45.lex", _String2=".") returned 1 [0178.855] wcscmp (_String1="dan45.lex", _String2="..") returned 1 [0178.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf8c8 [0178.856] wcscpy (in: _Dest=0x3daf8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.856] wcscat (in: _Dest=0x3daf8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.856] wcscat (in: _Dest=0x3daf8c8, _Source="dan45.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" [0178.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0178.857] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0178.857] wcscmp (_String1="dan94.ths", _String2=".") returned 1 [0178.857] wcscmp (_String1="dan94.ths", _String2="..") returned 1 [0178.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0108 [0178.857] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.857] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.857] wcscat (in: _Dest=0x3db0108, _Source="dan94.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" [0178.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0178.858] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0178.858] wcscmp (_String1="danphon.env", _String2=".") returned 1 [0178.858] wcscmp (_String1="danphon.env", _String2="..") returned 1 [0178.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f6b0 [0178.858] wcscpy (in: _Dest=0x682f6b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.858] wcscat (in: _Dest=0x682f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.858] wcscat (in: _Dest=0x682f6b0, _Source="danphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" [0178.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0178.860] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0178.860] wcscmp (_String1="dut.fca", _String2=".") returned 1 [0178.860] wcscmp (_String1="dut.fca", _String2="..") returned 1 [0178.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf208 [0178.860] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.860] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.860] wcscat (in: _Dest=0x3daf208, _Source="dut.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" [0178.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0178.861] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0178.861] wcscmp (_String1="dut.hyp", _String2=".") returned 1 [0178.861] wcscmp (_String1="dut.hyp", _String2="..") returned 1 [0178.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafec8 [0178.861] wcscpy (in: _Dest=0x3dafec8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.861] wcscat (in: _Dest=0x3dafec8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.861] wcscat (in: _Dest=0x3dafec8, _Source="dut.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" [0178.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0178.863] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0178.863] wcscmp (_String1="dut102.hsp", _String2=".") returned 1 [0178.863] wcscmp (_String1="dut102.hsp", _String2="..") returned 1 [0178.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e328 [0178.863] wcscpy (in: _Dest=0x682e328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.863] wcscat (in: _Dest=0x682e328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.863] wcscat (in: _Dest=0x682e328, _Source="dut102.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" [0178.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0178.865] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0178.866] wcscmp (_String1="dut32.clx", _String2=".") returned 1 [0178.866] wcscmp (_String1="dut32.clx", _String2="..") returned 1 [0178.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daff88 [0178.866] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.866] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.866] wcscat (in: _Dest=0x3daff88, _Source="dut32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" [0178.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0178.867] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0178.867] wcscmp (_String1="dut57.ths", _String2=".") returned 1 [0178.867] wcscmp (_String1="dut57.ths", _String2="..") returned 1 [0178.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0048 [0178.868] wcscpy (in: _Dest=0x3db0048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.868] wcscat (in: _Dest=0x3db0048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.868] wcscat (in: _Dest=0x3db0048, _Source="dut57.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" [0178.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0178.869] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0178.869] wcscmp (_String1="eng.hyp", _String2=".") returned 1 [0178.869] wcscmp (_String1="eng.hyp", _String2="..") returned 1 [0178.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafb08 [0178.869] wcscpy (in: _Dest=0x3dafb08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.869] wcscat (in: _Dest=0x3dafb08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.869] wcscat (in: _Dest=0x3dafb08, _Source="eng.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" [0178.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0178.871] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0178.871] wcscmp (_String1="eng32.clx", _String2=".") returned 1 [0178.871] wcscmp (_String1="eng32.clx", _String2="..") returned 1 [0178.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf688 [0178.871] wcscpy (in: _Dest=0x3daf688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.871] wcscat (in: _Dest=0x3daf688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.871] wcscat (in: _Dest=0x3daf688, _Source="eng32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" [0178.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0178.872] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0178.872] wcscmp (_String1="engphon.env", _String2=".") returned 1 [0178.873] wcscmp (_String1="engphon.env", _String2="..") returned 1 [0178.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f138 [0178.873] wcscpy (in: _Dest=0x682f138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.873] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.873] wcscat (in: _Dest=0x682f138, _Source="engphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" [0178.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0178.874] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0178.874] wcscmp (_String1="est.hyp", _String2=".") returned 1 [0178.874] wcscmp (_String1="est.hyp", _String2="..") returned 1 [0178.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf5c8 [0178.874] wcscpy (in: _Dest=0x3daf5c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.874] wcscat (in: _Dest=0x3daf5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.874] wcscat (in: _Dest=0x3daf5c8, _Source="est.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" [0178.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0178.875] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0178.875] wcscmp (_String1="est133.lex", _String2=".") returned 1 [0178.875] wcscmp (_String1="est133.lex", _String2="..") returned 1 [0178.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f200 [0178.875] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.875] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.875] wcscat (in: _Dest=0x682f200, _Source="est133.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" [0178.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0178.876] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0178.876] wcscmp (_String1="est32.clx", _String2=".") returned 1 [0178.876] wcscmp (_String1="est32.clx", _String2="..") returned 1 [0178.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf508 [0178.876] wcscpy (in: _Dest=0x3daf508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.876] wcscat (in: _Dest=0x3daf508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.876] wcscat (in: _Dest=0x3daf508, _Source="est32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" [0178.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0178.877] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0178.877] wcscmp (_String1="estphon.env", _String2=".") returned 1 [0178.877] wcscmp (_String1="estphon.env", _String2="..") returned 1 [0178.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682ec88 [0178.877] wcscpy (in: _Dest=0x682ec88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.878] wcscat (in: _Dest=0x682ec88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.878] wcscat (in: _Dest=0x682ec88, _Source="estphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" [0178.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0178.879] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0178.879] wcscmp (_String1="fin.hyp", _String2=".") returned 1 [0178.879] wcscmp (_String1="fin.hyp", _String2="..") returned 1 [0178.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf448 [0178.879] wcscpy (in: _Dest=0x3daf448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.879] wcscat (in: _Dest=0x3daf448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.879] wcscat (in: _Dest=0x3daf448, _Source="fin.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" [0178.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0178.880] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0178.880] wcscmp (_String1="fin32.clx", _String2=".") returned 1 [0178.880] wcscmp (_String1="fin32.clx", _String2="..") returned 1 [0178.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf748 [0178.880] wcscpy (in: _Dest=0x3daf748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.880] wcscat (in: _Dest=0x3daf748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.880] wcscat (in: _Dest=0x3daf748, _Source="fin32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" [0178.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0178.881] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0178.881] wcscmp (_String1="fin49.lex", _String2=".") returned 1 [0178.881] wcscmp (_String1="fin49.lex", _String2="..") returned 1 [0178.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf808 [0178.881] wcscpy (in: _Dest=0x3daf808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.881] wcscat (in: _Dest=0x3daf808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.881] wcscat (in: _Dest=0x3daf808, _Source="fin49.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" [0178.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0178.882] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0178.882] wcscmp (_String1="finphon.env", _String2=".") returned 1 [0178.882] wcscmp (_String1="finphon.env", _String2="..") returned 1 [0178.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682e580 [0178.882] wcscpy (in: _Dest=0x682e580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.882] wcscat (in: _Dest=0x682e580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.882] wcscat (in: _Dest=0x682e580, _Source="finphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" [0178.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0178.883] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0178.883] wcscmp (_String1="frn.fca", _String2=".") returned 1 [0178.883] wcscmp (_String1="frn.fca", _String2="..") returned 1 [0178.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf088 [0178.884] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.884] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.884] wcscat (in: _Dest=0x3daf088, _Source="frn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" [0178.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0178.885] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0178.885] wcscmp (_String1="frn.hyp", _String2=".") returned 1 [0178.885] wcscmp (_String1="frn.hyp", _String2="..") returned 1 [0178.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db01c8 [0178.885] wcscpy (in: _Dest=0x3db01c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.885] wcscat (in: _Dest=0x3db01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.885] wcscat (in: _Dest=0x3db01c8, _Source="frn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" [0178.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db01c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0178.886] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0178.886] wcscmp (_String1="frn21.hsp", _String2=".") returned 1 [0178.886] wcscmp (_String1="frn21.hsp", _String2="..") returned 1 [0178.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0288 [0178.886] wcscpy (in: _Dest=0x3db0288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.886] wcscat (in: _Dest=0x3db0288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.886] wcscat (in: _Dest=0x3db0288, _Source="frn21.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" [0178.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0178.887] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0178.887] wcscmp (_String1="frn32.clx", _String2=".") returned 1 [0178.887] wcscmp (_String1="frn32.clx", _String2="..") returned 1 [0178.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0348 [0178.887] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.887] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.887] wcscat (in: _Dest=0x3db0348, _Source="frn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" [0178.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0178.888] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0178.888] wcscmp (_String1="frn93.ths", _String2=".") returned 1 [0178.888] wcscmp (_String1="frn93.ths", _String2="..") returned 1 [0178.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0408 [0178.888] wcscpy (in: _Dest=0x3db0408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.888] wcscat (in: _Dest=0x3db0408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.888] wcscat (in: _Dest=0x3db0408, _Source="frn93.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" [0178.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0178.889] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0178.890] wcscmp (_String1="gre.fca", _String2=".") returned 1 [0178.890] wcscmp (_String1="gre.fca", _String2="..") returned 1 [0178.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db04c8 [0178.890] wcscpy (in: _Dest=0x3db04c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.890] wcscat (in: _Dest=0x3db04c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.890] wcscat (in: _Dest=0x3db04c8, _Source="gre.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" [0178.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db04c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0178.891] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0178.891] wcscmp (_String1="gre.hyp", _String2=".") returned 1 [0178.891] wcscmp (_String1="gre.hyp", _String2="..") returned 1 [0178.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0588 [0178.891] wcscpy (in: _Dest=0x3db0588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.891] wcscat (in: _Dest=0x3db0588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.891] wcscat (in: _Dest=0x3db0588, _Source="gre.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" [0178.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0178.892] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0178.892] wcscmp (_String1="gre110.hsp", _String2=".") returned 1 [0178.892] wcscmp (_String1="gre110.hsp", _String2="..") returned 1 [0178.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682efa8 [0178.892] wcscpy (in: _Dest=0x682efa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.892] wcscat (in: _Dest=0x682efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.892] wcscat (in: _Dest=0x682efa8, _Source="gre110.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" [0178.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0178.893] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0178.893] wcscmp (_String1="gre32.clx", _String2=".") returned 1 [0178.893] wcscmp (_String1="gre32.clx", _String2="..") returned 1 [0178.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0648 [0178.893] wcscpy (in: _Dest=0x3db0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.893] wcscat (in: _Dest=0x3db0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.893] wcscat (in: _Dest=0x3db0648, _Source="gre32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" [0178.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0178.894] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0178.894] wcscmp (_String1="grm.fca", _String2=".") returned 1 [0178.894] wcscmp (_String1="grm.fca", _String2="..") returned 1 [0178.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0708 [0178.894] wcscpy (in: _Dest=0x3db0708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.894] wcscat (in: _Dest=0x3db0708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.894] wcscat (in: _Dest=0x3db0708, _Source="grm.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" [0178.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0179.211] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0179.211] wcscmp (_String1="grm.hyp", _String2=".") returned 1 [0179.211] wcscmp (_String1="grm.hyp", _String2="..") returned 1 [0179.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0588 [0179.211] wcscpy (in: _Dest=0x3db0588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.211] wcscat (in: _Dest=0x3db0588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.211] wcscat (in: _Dest=0x3db0588, _Source="grm.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" [0179.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0179.212] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0179.212] wcscmp (_String1="grm104.hsp", _String2=".") returned 1 [0179.212] wcscmp (_String1="grm104.hsp", _String2="..") returned 1 [0179.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e580 [0179.212] wcscpy (in: _Dest=0x682e580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.212] wcscat (in: _Dest=0x682e580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.212] wcscat (in: _Dest=0x682e580, _Source="grm104.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" [0179.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0179.213] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0179.213] wcscmp (_String1="grm32.clx", _String2=".") returned 1 [0179.213] wcscmp (_String1="grm32.clx", _String2="..") returned 1 [0179.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0648 [0179.214] wcscpy (in: _Dest=0x3db0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.214] wcscat (in: _Dest=0x3db0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.214] wcscat (in: _Dest=0x3db0648, _Source="grm32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" [0179.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0179.215] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0179.215] wcscmp (_String1="grm92.ths", _String2=".") returned 1 [0179.215] wcscmp (_String1="grm92.ths", _String2="..") returned 1 [0179.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf748 [0179.215] wcscpy (in: _Dest=0x3daf748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.215] wcscat (in: _Dest=0x3daf748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.215] wcscat (in: _Dest=0x3daf748, _Source="grm92.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" [0179.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0179.216] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0179.216] wcscmp (_String1="heb.fca", _String2=".") returned 1 [0179.216] wcscmp (_String1="heb.fca", _String2="..") returned 1 [0179.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf808 [0179.216] wcscpy (in: _Dest=0x3daf808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.216] wcscat (in: _Dest=0x3daf808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.216] wcscat (in: _Dest=0x3daf808, _Source="heb.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" [0179.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0179.217] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0179.217] wcscmp (_String1="heb.hyp", _String2=".") returned 1 [0179.217] wcscmp (_String1="heb.hyp", _String2="..") returned 1 [0179.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf088 [0179.217] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.217] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.217] wcscat (in: _Dest=0x3daf088, _Source="heb.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" [0179.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0179.218] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0180.904] wcscmp (_String1="heb134.hsp", _String2=".") returned 1 [0180.904] wcscmp (_String1="heb134.hsp", _String2="..") returned 1 [0180.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e580 [0180.904] wcscpy (in: _Dest=0x682e580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.904] wcscat (in: _Dest=0x682e580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.904] wcscat (in: _Dest=0x682e580, _Source="heb134.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" [0182.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0182.166] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0182.166] wcscmp (_String1="heb32.clx", _String2=".") returned 1 [0182.166] wcscmp (_String1="heb32.clx", _String2="..") returned 1 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0708 [0182.166] wcscpy (in: _Dest=0x3db0708, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.166] wcscat (in: _Dest=0x3db0708, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.166] wcscat (in: _Dest=0x3db0708, _Source="heb32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" [0182.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0182.168] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0182.168] wcscmp (_String1="hrv.hyp", _String2=".") returned 1 [0182.168] wcscmp (_String1="hrv.hyp", _String2="..") returned 1 [0182.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf748 [0182.168] wcscpy (in: _Dest=0x3daf748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.168] wcscat (in: _Dest=0x3daf748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.168] wcscat (in: _Dest=0x3daf748, _Source="hrv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" [0182.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0182.169] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0182.169] wcscmp (_String1="hrv132.lex", _String2=".") returned 1 [0182.169] wcscmp (_String1="hrv132.lex", _String2="..") returned 1 [0182.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e648 [0182.170] wcscpy (in: _Dest=0x682e648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.170] wcscat (in: _Dest=0x682e648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.170] wcscat (in: _Dest=0x682e648, _Source="hrv132.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" [0182.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0182.171] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0182.171] wcscmp (_String1="hrv32.clx", _String2=".") returned 1 [0182.171] wcscmp (_String1="hrv32.clx", _String2="..") returned 1 [0182.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0648 [0182.171] wcscpy (in: _Dest=0x3db0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.171] wcscat (in: _Dest=0x3db0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.171] wcscat (in: _Dest=0x3db0648, _Source="hrv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" [0182.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0182.172] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0182.172] wcscmp (_String1="hrvphon.env", _String2=".") returned 1 [0182.172] wcscmp (_String1="hrvphon.env", _String2="..") returned 1 [0182.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f070 [0182.173] wcscpy (in: _Dest=0x682f070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.173] wcscat (in: _Dest=0x682f070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.173] wcscat (in: _Dest=0x682f070, _Source="hrvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" [0182.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0182.174] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0182.174] wcscmp (_String1="hun.fca", _String2=".") returned 1 [0182.174] wcscmp (_String1="hun.fca", _String2="..") returned 1 [0182.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf808 [0182.174] wcscpy (in: _Dest=0x3daf808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.174] wcscat (in: _Dest=0x3daf808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.174] wcscat (in: _Dest=0x3daf808, _Source="hun.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" [0182.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0182.175] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0182.175] wcscmp (_String1="hun.hyp", _String2=".") returned 1 [0182.175] wcscmp (_String1="hun.hyp", _String2="..") returned 1 [0182.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf088 [0182.175] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.175] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.175] wcscat (in: _Dest=0x3daf088, _Source="hun.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" [0182.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0182.177] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0182.177] wcscmp (_String1="hun109.hsp", _String2=".") returned 1 [0182.177] wcscmp (_String1="hun109.hsp", _String2="..") returned 1 [0182.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e260 [0182.177] wcscpy (in: _Dest=0x682e260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.177] wcscat (in: _Dest=0x682e260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.177] wcscat (in: _Dest=0x682e260, _Source="hun109.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" [0182.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0182.182] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0182.182] wcscmp (_String1="hun32.clx", _String2=".") returned 1 [0182.182] wcscmp (_String1="hun32.clx", _String2="..") returned 1 [0182.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0588 [0182.182] wcscpy (in: _Dest=0x3db0588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.182] wcscat (in: _Dest=0x3db0588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.182] wcscat (in: _Dest=0x3db0588, _Source="hun32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" [0182.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0182.184] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0182.184] wcscmp (_String1="itl.fca", _String2=".") returned 1 [0182.184] wcscmp (_String1="itl.fca", _String2="..") returned 1 [0182.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0348 [0182.184] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.184] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.184] wcscat (in: _Dest=0x3db0348, _Source="itl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" [0182.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0182.185] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0182.185] wcscmp (_String1="itl.hyp", _String2=".") returned 1 [0182.185] wcscmp (_String1="itl.hyp", _String2="..") returned 1 [0182.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0408 [0182.185] wcscpy (in: _Dest=0x3db0408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.185] wcscat (in: _Dest=0x3db0408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.185] wcscat (in: _Dest=0x3db0408, _Source="itl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" [0182.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0182.187] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0182.187] wcscmp (_String1="itl26.hsp", _String2=".") returned 1 [0182.187] wcscmp (_String1="itl26.hsp", _String2="..") returned 1 [0182.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf508 [0182.187] wcscpy (in: _Dest=0x3daf508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.187] wcscat (in: _Dest=0x3daf508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.187] wcscat (in: _Dest=0x3daf508, _Source="itl26.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" [0182.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0182.188] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0182.188] wcscmp (_String1="itl32.clx", _String2=".") returned 1 [0182.188] wcscmp (_String1="itl32.clx", _String2="..") returned 1 [0182.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf5c8 [0182.189] wcscpy (in: _Dest=0x3daf5c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.189] wcscat (in: _Dest=0x3daf5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.189] wcscat (in: _Dest=0x3daf5c8, _Source="itl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" [0182.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0182.190] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0182.190] wcscmp (_String1="itl61.ths", _String2=".") returned 1 [0182.190] wcscmp (_String1="itl61.ths", _String2="..") returned 1 [0182.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf448 [0182.190] wcscpy (in: _Dest=0x3daf448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.190] wcscat (in: _Dest=0x3daf448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.190] wcscat (in: _Dest=0x3daf448, _Source="itl61.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" [0182.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0182.192] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0182.192] wcscmp (_String1="lav.hyp", _String2=".") returned 1 [0182.192] wcscmp (_String1="lav.hyp", _String2="..") returned 1 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db04c8 [0182.192] wcscpy (in: _Dest=0x3db04c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.192] wcscat (in: _Dest=0x3db04c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.192] wcscat (in: _Dest=0x3db04c8, _Source="lav.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" [0182.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db04c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0182.193] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0182.193] wcscmp (_String1="lav135.lex", _String2=".") returned 1 [0182.193] wcscmp (_String1="lav135.lex", _String2="..") returned 1 [0182.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f778 [0182.193] wcscpy (in: _Dest=0x682f778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.193] wcscat (in: _Dest=0x682f778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.193] wcscat (in: _Dest=0x682f778, _Source="lav135.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" [0182.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0182.195] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0182.195] wcscmp (_String1="lav32.clx", _String2=".") returned 1 [0182.195] wcscmp (_String1="lav32.clx", _String2="..") returned 1 [0182.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf688 [0182.195] wcscpy (in: _Dest=0x3daf688, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.195] wcscat (in: _Dest=0x3daf688, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.195] wcscat (in: _Dest=0x3daf688, _Source="lav32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" [0182.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0182.196] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0182.196] wcscmp (_String1="lavphon.env", _String2=".") returned 1 [0182.196] wcscmp (_String1="lavphon.env", _String2="..") returned 1 [0182.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f6b0 [0182.196] wcscpy (in: _Dest=0x682f6b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.196] wcscat (in: _Dest=0x682f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.196] wcscat (in: _Dest=0x682f6b0, _Source="lavphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" [0182.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0182.197] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0182.197] wcscmp (_String1="lit.hyp", _String2=".") returned 1 [0182.197] wcscmp (_String1="lit.hyp", _String2="..") returned 1 [0182.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafb08 [0182.197] wcscpy (in: _Dest=0x3dafb08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.198] wcscat (in: _Dest=0x3dafb08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.198] wcscat (in: _Dest=0x3dafb08, _Source="lit.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" [0182.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0182.199] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0182.199] wcscmp (_String1="lit136.lex", _String2=".") returned 1 [0182.199] wcscmp (_String1="lit136.lex", _String2="..") returned 1 [0182.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f2c8 [0182.199] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.199] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.199] wcscat (in: _Dest=0x682f2c8, _Source="lit136.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" [0182.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0182.200] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0182.200] wcscmp (_String1="lit32.clx", _String2=".") returned 1 [0182.200] wcscmp (_String1="lit32.clx", _String2="..") returned 1 [0182.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0048 [0182.200] wcscpy (in: _Dest=0x3db0048, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.200] wcscat (in: _Dest=0x3db0048, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.201] wcscat (in: _Dest=0x3db0048, _Source="lit32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" [0182.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0182.202] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0182.202] wcscmp (_String1="litphon.env", _String2=".") returned 1 [0182.202] wcscmp (_String1="litphon.env", _String2="..") returned 1 [0182.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682ed50 [0182.202] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.202] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.202] wcscat (in: _Dest=0x682ed50, _Source="litphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" [0182.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ed50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0182.203] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0182.203] wcscmp (_String1="nrw.fca", _String2=".") returned 1 [0182.203] wcscmp (_String1="nrw.fca", _String2="..") returned 1 [0182.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daff88 [0182.203] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.203] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.203] wcscat (in: _Dest=0x3daff88, _Source="nrw.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" [0182.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0182.205] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0182.205] wcscmp (_String1="nrw.hyp", _String2=".") returned 1 [0182.205] wcscmp (_String1="nrw.hyp", _String2="..") returned 1 [0182.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafec8 [0182.205] wcscpy (in: _Dest=0x3dafec8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.205] wcscat (in: _Dest=0x3dafec8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.205] wcscat (in: _Dest=0x3dafec8, _Source="nrw.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" [0182.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0182.206] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0182.206] wcscmp (_String1="nrw32.clx", _String2=".") returned 1 [0182.206] wcscmp (_String1="nrw32.clx", _String2="..") returned 1 [0182.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf208 [0182.206] wcscpy (in: _Dest=0x3daf208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.206] wcscat (in: _Dest=0x3daf208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.206] wcscat (in: _Dest=0x3daf208, _Source="nrw32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" [0182.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0182.207] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0182.207] wcscmp (_String1="nrw38.hsp", _String2=".") returned 1 [0182.207] wcscmp (_String1="nrw38.hsp", _String2="..") returned 1 [0182.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db0108 [0182.207] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.207] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.207] wcscat (in: _Dest=0x3db0108, _Source="nrw38.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" [0182.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0182.208] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0182.208] wcscmp (_String1="nrw56.ths", _String2=".") returned 1 [0182.208] wcscmp (_String1="nrw56.ths", _String2="..") returned 1 [0182.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf8c8 [0182.208] wcscpy (in: _Dest=0x3daf8c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.208] wcscat (in: _Dest=0x3daf8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.208] wcscat (in: _Dest=0x3daf8c8, _Source="nrw56.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" [0182.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0182.726] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0182.726] wcscmp (_String1="nyn.fca", _String2=".") returned 1 [0182.726] wcscmp (_String1="nyn.fca", _String2="..") returned 1 [0182.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf388 [0182.726] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0182.726] wcscat (in: _Dest=0x3daf388, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0182.726] wcscat (in: _Dest=0x3daf388, _Source="nyn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" [0184.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0184.559] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0184.559] wcscmp (_String1="nyn.hyp", _String2=".") returned 1 [0184.559] wcscmp (_String1="nyn.hyp", _String2="..") returned 1 [0184.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0184.559] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.559] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.559] wcscat (in: _Dest=0x3333a8, _Source="nyn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" [0184.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0184.561] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0184.561] wcscmp (_String1="nyn16.clx", _String2=".") returned 1 [0184.561] wcscmp (_String1="nyn16.clx", _String2="..") returned 1 [0184.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3321a8 [0184.561] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.561] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.561] wcscat (in: _Dest=0x3321a8, _Source="nyn16.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" [0184.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0184.562] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0184.562] wcscmp (_String1="nyn47.hsp", _String2=".") returned 1 [0184.562] wcscmp (_String1="nyn47.hsp", _String2="..") returned 1 [0184.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0184.562] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.562] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.562] wcscat (in: _Dest=0x333468, _Source="nyn47.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" [0184.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0184.563] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0184.563] wcscmp (_String1="pol.fca", _String2=".") returned 1 [0184.564] wcscmp (_String1="pol.fca", _String2="..") returned 1 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3339a8 [0184.564] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.564] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.564] wcscat (in: _Dest=0x3339a8, _Source="pol.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" [0184.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0184.565] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0184.565] wcscmp (_String1="pol.hyp", _String2=".") returned 1 [0184.565] wcscmp (_String1="pol.hyp", _String2="..") returned 1 [0184.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0184.565] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.565] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.565] wcscat (in: _Dest=0x3336a8, _Source="pol.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" [0184.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0184.566] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0184.566] wcscmp (_String1="pol103.hsp", _String2=".") returned 1 [0184.566] wcscmp (_String1="pol103.hsp", _String2="..") returned 1 [0184.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e710 [0184.566] wcscpy (in: _Dest=0x682e710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0184.566] wcscat (in: _Dest=0x682e710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0184.567] wcscat (in: _Dest=0x682e710, _Source="pol103.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" [0184.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0184.568] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0185.279] wcscmp (_String1="pol32.clx", _String2=".") returned 1 [0185.279] wcscmp (_String1="pol32.clx", _String2="..") returned 1 [0185.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0185.279] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0185.279] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0185.279] wcscat (in: _Dest=0x333528, _Source="pol32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" [0186.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0186.446] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0186.446] wcscmp (_String1="prt.fca", _String2=".") returned 1 [0186.446] wcscmp (_String1="prt.fca", _String2="..") returned 1 [0186.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0108 [0186.446] wcscpy (in: _Dest=0x3db0108, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.447] wcscat (in: _Dest=0x3db0108, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.447] wcscat (in: _Dest=0x3db0108, _Source="prt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" [0186.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0186.448] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0186.448] wcscmp (_String1="prt.hyp", _String2=".") returned 1 [0186.448] wcscmp (_String1="prt.hyp", _String2="..") returned 1 [0186.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3db0348 [0186.448] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.448] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.448] wcscat (in: _Dest=0x3db0348, _Source="prt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" [0186.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0186.449] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0186.449] wcscmp (_String1="prt32.clx", _String2=".") returned 1 [0186.449] wcscmp (_String1="prt32.clx", _String2="..") returned 1 [0186.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3daf2c8 [0186.510] wcscpy (in: _Dest=0x3daf2c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.510] wcscat (in: _Dest=0x3daf2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.511] wcscat (in: _Dest=0x3daf2c8, _Source="prt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" [0186.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0186.513] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0186.513] wcscmp (_String1="prt39.hsp", _String2=".") returned 1 [0186.513] wcscmp (_String1="prt39.hsp", _String2="..") returned 1 [0186.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332da8 [0186.513] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.513] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.513] wcscat (in: _Dest=0x332da8, _Source="prt39.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" [0186.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0186.514] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0186.514] wcscmp (_String1="rum.hyp", _String2=".") returned 1 [0186.514] wcscmp (_String1="rum.hyp", _String2="..") returned 1 [0186.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332f28 [0186.514] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.515] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.515] wcscat (in: _Dest=0x332f28, _Source="rum.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" [0186.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0186.516] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0186.516] wcscmp (_String1="rum124.lex", _String2=".") returned 1 [0186.516] wcscmp (_String1="rum124.lex", _String2="..") returned 1 [0186.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f9d0 [0186.516] wcscpy (in: _Dest=0x682f9d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.516] wcscat (in: _Dest=0x682f9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.516] wcscat (in: _Dest=0x682f9d0, _Source="rum124.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" [0186.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0186.517] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0186.518] wcscmp (_String1="rum32.clx", _String2=".") returned 1 [0186.518] wcscmp (_String1="rum32.clx", _String2="..") returned 1 [0186.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0186.518] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.518] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.518] wcscat (in: _Dest=0x3338e8, _Source="rum32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" [0186.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0186.519] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0186.519] wcscmp (_String1="rumphon.env", _String2=".") returned 1 [0186.519] wcscmp (_String1="rumphon.env", _String2="..") returned 1 [0186.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f840 [0186.519] wcscpy (in: _Dest=0x682f840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.519] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.519] wcscat (in: _Dest=0x682f840, _Source="rumphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" [0186.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0186.520] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0186.521] wcscmp (_String1="rus.fca", _String2=".") returned 1 [0186.521] wcscmp (_String1="rus.fca", _String2="..") returned 1 [0186.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333a68 [0186.521] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.521] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.521] wcscat (in: _Dest=0x333a68, _Source="rus.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" [0186.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0186.522] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0186.522] wcscmp (_String1="rus.hyp", _String2=".") returned 1 [0186.522] wcscmp (_String1="rus.hyp", _String2="..") returned 1 [0186.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0186.522] wcscpy (in: _Dest=0x332ce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.522] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.522] wcscat (in: _Dest=0x332ce8, _Source="rus.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" [0186.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0186.524] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0186.524] wcscmp (_String1="rus101.hsp", _String2=".") returned 1 [0186.524] wcscmp (_String1="rus101.hsp", _String2="..") returned 1 [0186.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e260 [0186.524] wcscpy (in: _Dest=0x682e260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.524] wcscat (in: _Dest=0x682e260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.524] wcscat (in: _Dest=0x682e260, _Source="rus101.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" [0186.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0186.525] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0186.525] wcscmp (_String1="rus32.clx", _String2=".") returned 1 [0186.525] wcscmp (_String1="rus32.clx", _String2="..") returned 1 [0186.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332e68 [0186.525] wcscpy (in: _Dest=0x332e68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.525] wcscat (in: _Dest=0x332e68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.525] wcscat (in: _Dest=0x332e68, _Source="rus32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" [0186.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0186.526] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0186.527] wcscmp (_String1="sgr.fca", _String2=".") returned 1 [0186.527] wcscmp (_String1="sgr.fca", _String2="..") returned 1 [0186.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0186.527] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.527] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.527] wcscat (in: _Dest=0x334068, _Source="sgr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" [0186.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0186.528] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0186.528] wcscmp (_String1="sgr.hyp", _String2=".") returned 1 [0186.528] wcscmp (_String1="sgr.hyp", _String2="..") returned 1 [0186.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0186.528] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.528] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.528] wcscat (in: _Dest=0x333fa8, _Source="sgr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" [0186.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0186.529] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0061c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0186.529] wcscmp (_String1="sgr105.hsp", _String2=".") returned 1 [0186.529] wcscmp (_String1="sgr105.hsp", _String2="..") returned 1 [0186.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ddb0 [0186.529] wcscpy (in: _Dest=0x682ddb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.530] wcscat (in: _Dest=0x682ddb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.530] wcscat (in: _Dest=0x682ddb0, _Source="sgr105.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" [0186.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ddb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0186.531] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0186.531] wcscmp (_String1="sgr32.clx", _String2=".") returned 1 [0186.531] wcscmp (_String1="sgr32.clx", _String2="..") returned 1 [0186.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333ee8 [0186.531] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.531] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.531] wcscat (in: _Dest=0x333ee8, _Source="sgr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" [0186.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0186.532] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0186.532] wcscmp (_String1="sgr96.ths", _String2=".") returned 1 [0186.532] wcscmp (_String1="sgr96.ths", _String2="..") returned 1 [0186.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333e28 [0186.532] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.532] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.532] wcscat (in: _Dest=0x333e28, _Source="sgr96.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" [0186.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0186.533] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0186.533] wcscmp (_String1="slo.fca", _String2=".") returned 1 [0186.533] wcscmp (_String1="slo.fca", _String2="..") returned 1 [0186.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0186.534] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.534] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.534] wcscat (in: _Dest=0x333d68, _Source="slo.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" [0186.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0186.535] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0186.535] wcscmp (_String1="slo.hyp", _String2=".") returned 1 [0186.535] wcscmp (_String1="slo.hyp", _String2="..") returned 1 [0186.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333ca8 [0186.535] wcscpy (in: _Dest=0x333ca8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.535] wcscat (in: _Dest=0x333ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.535] wcscat (in: _Dest=0x333ca8, _Source="slo.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" [0186.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0186.536] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0186.536] wcscmp (_String1="slo113.hsp", _String2=".") returned 1 [0186.536] wcscmp (_String1="slo113.hsp", _String2="..") returned 1 [0186.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0186.536] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.537] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.537] wcscat (in: _Dest=0x682fa98, _Source="slo113.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" [0186.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0186.538] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0186.538] wcscmp (_String1="slo32.clx", _String2=".") returned 1 [0186.538] wcscmp (_String1="slo32.clx", _String2="..") returned 1 [0186.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333be8 [0186.538] wcscpy (in: _Dest=0x333be8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.538] wcscat (in: _Dest=0x333be8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.538] wcscat (in: _Dest=0x333be8, _Source="slo32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" [0186.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0186.539] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0186.539] wcscmp (_String1="slv.hyp", _String2=".") returned 1 [0186.540] wcscmp (_String1="slv.hyp", _String2="..") returned 1 [0186.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333b28 [0186.540] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.540] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.540] wcscat (in: _Dest=0x333b28, _Source="slv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" [0186.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0186.541] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0186.541] wcscmp (_String1="slv137.lex", _String2=".") returned 1 [0186.541] wcscmp (_String1="slv137.lex", _String2="..") returned 1 [0186.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f520 [0186.541] wcscpy (in: _Dest=0x682f520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.541] wcscat (in: _Dest=0x682f520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.541] wcscat (in: _Dest=0x682f520, _Source="slv137.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" [0186.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0186.543] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0186.543] wcscmp (_String1="slv32.clx", _String2=".") returned 1 [0186.543] wcscmp (_String1="slv32.clx", _String2="..") returned 1 [0186.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0186.543] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0186.543] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0186.543] wcscat (in: _Dest=0x3329e8, _Source="slv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" [0186.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0188.468] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0188.468] wcscmp (_String1="slvphon.env", _String2=".") returned 1 [0188.468] wcscmp (_String1="slvphon.env", _String2="..") returned 1 [0188.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682de78 [0188.468] wcscpy (in: _Dest=0x682de78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.468] wcscat (in: _Dest=0x682de78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.468] wcscat (in: _Dest=0x682de78, _Source="slvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" [0188.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0188.640] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0188.640] wcscmp (_String1="spn.fca", _String2=".") returned 1 [0188.640] wcscmp (_String1="spn.fca", _String2="..") returned 1 [0188.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0188.641] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.641] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.641] wcscat (in: _Dest=0x332da8, _Source="spn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" [0188.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0188.642] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0188.642] wcscmp (_String1="spn.hyp", _String2=".") returned 1 [0188.642] wcscmp (_String1="spn.hyp", _String2="..") returned 1 [0188.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333528 [0188.642] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.642] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.642] wcscat (in: _Dest=0x333528, _Source="spn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" [0188.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0188.643] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0188.643] wcscmp (_String1="spn24.hsp", _String2=".") returned 1 [0188.643] wcscmp (_String1="spn24.hsp", _String2="..") returned 1 [0188.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0188.643] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.643] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.643] wcscat (in: _Dest=0x333168, _Source="spn24.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" [0188.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0188.645] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0188.645] wcscmp (_String1="spn32.clx", _String2=".") returned 1 [0188.645] wcscmp (_String1="spn32.clx", _String2="..") returned 1 [0188.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3321a8 [0188.645] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.645] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.645] wcscat (in: _Dest=0x3321a8, _Source="spn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" [0188.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0188.646] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdada4bc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0188.646] wcscmp (_String1="spn62.ths", _String2=".") returned 1 [0188.646] wcscmp (_String1="spn62.ths", _String2="..") returned 1 [0188.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0188.646] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.647] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.647] wcscat (in: _Dest=0x3339a8, _Source="spn62.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" [0188.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0188.648] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0188.648] wcscmp (_String1="swd.fca", _String2=".") returned 1 [0188.648] wcscmp (_String1="swd.fca", _String2="..") returned 1 [0188.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0188.648] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.648] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.648] wcscat (in: _Dest=0x3336a8, _Source="swd.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" [0188.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0188.649] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0188.649] wcscmp (_String1="swd.hyp", _String2=".") returned 1 [0188.649] wcscmp (_String1="swd.hyp", _String2="..") returned 1 [0188.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0188.649] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.649] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.650] wcscat (in: _Dest=0x3333a8, _Source="swd.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" [0188.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274 [0188.651] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0188.651] wcscmp (_String1="swd32.clx", _String2=".") returned 1 [0188.651] wcscmp (_String1="swd32.clx", _String2="..") returned 1 [0188.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333468 [0188.651] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.651] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.651] wcscat (in: _Dest=0x333468, _Source="swd32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" [0188.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0188.652] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0188.652] wcscmp (_String1="swd43.hsp", _String2=".") returned 1 [0188.652] wcscmp (_String1="swd43.hsp", _String2="..") returned 1 [0188.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0188.652] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.652] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.652] wcscat (in: _Dest=0x3330a8, _Source="swd43.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" [0188.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0188.653] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0188.653] wcscmp (_String1="swd58.ths", _String2=".") returned 1 [0188.653] wcscmp (_String1="swd58.ths", _String2="..") returned 1 [0188.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0188.653] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0188.654] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0188.654] wcscat (in: _Dest=0x332268, _Source="swd58.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" [0188.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0188.655] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0189.733] wcscmp (_String1="tur.fca", _String2=".") returned 1 [0189.733] wcscmp (_String1="tur.fca", _String2="..") returned 1 [0189.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675aab8 [0189.733] wcscpy (in: _Dest=0x675aab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0189.733] wcscat (in: _Dest=0x675aab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0189.733] wcscat (in: _Dest=0x675aab8, _Source="tur.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" [0190.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0190.129] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0190.129] wcscmp (_String1="tur.hyp", _String2=".") returned 1 [0190.129] wcscmp (_String1="tur.hyp", _String2="..") returned 1 [0190.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675ab78 [0190.130] wcscpy (in: _Dest=0x675ab78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.130] wcscat (in: _Dest=0x675ab78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.130] wcscat (in: _Dest=0x675ab78, _Source="tur.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" [0190.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675ab78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0190.131] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0190.131] wcscmp (_String1="tur111.hsp", _String2=".") returned 1 [0190.131] wcscmp (_String1="tur111.hsp", _String2="..") returned 1 [0190.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ec88 [0190.131] wcscpy (in: _Dest=0x682ec88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.131] wcscat (in: _Dest=0x682ec88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.131] wcscat (in: _Dest=0x682ec88, _Source="tur111.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" [0190.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0190.132] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0190.132] wcscmp (_String1="tur32.clx", _String2=".") returned 1 [0190.132] wcscmp (_String1="tur32.clx", _String2="..") returned 1 [0190.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675ac38 [0190.132] wcscpy (in: _Dest=0x675ac38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.132] wcscat (in: _Dest=0x675ac38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.132] wcscat (in: _Dest=0x675ac38, _Source="tur32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" [0190.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675ac38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0190.133] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0190.133] wcscmp (_String1="usa.fca", _String2=".") returned 1 [0190.134] wcscmp (_String1="usa.fca", _String2="..") returned 1 [0190.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675acf8 [0190.134] wcscpy (in: _Dest=0x675acf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.134] wcscat (in: _Dest=0x675acf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.134] wcscat (in: _Dest=0x675acf8, _Source="usa.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" [0190.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675acf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0190.135] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0190.135] wcscmp (_String1="usa03.hsp", _String2=".") returned 1 [0190.135] wcscmp (_String1="usa03.hsp", _String2="..") returned 1 [0190.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675adb8 [0190.135] wcscpy (in: _Dest=0x675adb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.135] wcscat (in: _Dest=0x675adb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.135] wcscat (in: _Dest=0x675adb8, _Source="usa03.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" [0190.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675adb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0190.136] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0190.136] wcscmp (_String1="usa03.ths", _String2=".") returned 1 [0190.136] wcscmp (_String1="usa03.ths", _String2="..") returned 1 [0190.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675ae78 [0190.136] wcscpy (in: _Dest=0x675ae78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.136] wcscat (in: _Dest=0x675ae78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.136] wcscat (in: _Dest=0x675ae78, _Source="usa03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" [0190.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675ae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0190.138] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0190.138] wcscmp (_String1="usa37.hyp", _String2=".") returned 1 [0190.138] wcscmp (_String1="usa37.hyp", _String2="..") returned 1 [0190.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675af38 [0190.138] wcscpy (in: _Dest=0x675af38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0190.138] wcscat (in: _Dest=0x675af38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0190.138] wcscat (in: _Dest=0x675af38, _Source="usa37.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" [0190.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0190.139] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 0 [0190.773] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0192.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979f50) returned 1 [0192.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 [0192.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 [0192.167] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0192.167] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0192.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b8) returned 1 [0192.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e810) returned 1 [0192.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c08c8) returned 1 Thread: id = 3050 os_tid = 0xf70 [0160.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0160.608] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0160.608] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0160.608] wcscat (in: _Dest=0x66db628, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*" [0160.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0160.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0162.099] wcscmp (_String1=".", _String2=".") returned 0 [0162.100] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.100] wcscmp (_String1="..", _String2=".") returned 1 [0162.100] wcscmp (_String1="..", _String2="..") returned 0 [0162.100] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0162.100] wcscmp (_String1="Built-In Building Blocks.dotx", _String2=".") returned 1 [0162.100] wcscmp (_String1="Built-In Building Blocks.dotx", _String2="..") returned 1 [0162.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f778 [0162.100] wcscpy (in: _Dest=0x682f778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0162.100] wcscat (in: _Dest=0x682f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0162.100] wcscat (in: _Dest=0x682f778, _Source="Built-In Building Blocks.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" [0172.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx")) returned 0x20 [0172.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0172.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.538] GetLastError () returned 0x5 [0172.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f778) returned 1 [0172.538] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0172.538] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3557a0) returned 1 Thread: id = 3051 os_tid = 0xf54 [0160.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx")) returned 0x20 [0166.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.225] GetLastError () returned 0x5 [0166.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1eb0) returned 1 Thread: id = 3052 os_tid = 0x85c [0160.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx")) returned 0x20 [0166.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.226] GetLastError () returned 0x5 [0166.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 3053 os_tid = 0xd5c [0160.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx")) returned 0x20 [0166.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.229] GetLastError () returned 0x5 [0166.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 3054 os_tid = 0xfb8 [0160.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx")) returned 0x20 [0166.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.230] GetLastError () returned 0x5 [0166.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e528) returned 1 Thread: id = 3055 os_tid = 0x61c [0160.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx")) returned 0x20 [0166.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0166.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.232] GetLastError () returned 0x5 [0166.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0166.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 3056 os_tid = 0xae4 [0160.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx")) returned 0x20 [0166.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0166.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.234] GetLastError () returned 0x5 [0166.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0166.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 Thread: id = 3057 os_tid = 0x358 [0160.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx")) returned 0x20 [0166.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0166.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.235] GetLastError () returned 0x5 [0166.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0166.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 3058 os_tid = 0xafc [0160.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx")) returned 0x20 [0166.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0166.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.204] GetLastError () returned 0x5 [0166.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0166.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 3059 os_tid = 0x33c [0160.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx")) returned 0x20 [0166.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0166.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.205] GetLastError () returned 0x5 [0166.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0166.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 3060 os_tid = 0x3f4 [0160.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx")) returned 0x20 [0166.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0166.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.207] GetLastError () returned 0x5 [0166.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0166.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 Thread: id = 3061 os_tid = 0xc0 [0160.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx")) returned 0x20 [0166.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0166.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.209] GetLastError () returned 0x5 [0166.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0166.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 3062 os_tid = 0xb0 [0160.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx")) returned 0x20 [0166.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0166.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.210] GetLastError () returned 0x5 [0166.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0166.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 3063 os_tid = 0x82c [0160.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx")) returned 0x20 [0166.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0166.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.212] GetLastError () returned 0x5 [0166.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0166.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 3064 os_tid = 0x83c [0160.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx")) returned 0x20 [0166.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.214] GetLastError () returned 0x5 [0166.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e498) returned 1 Thread: id = 3065 os_tid = 0x87c [0160.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx")) returned 0x20 [0166.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.216] GetLastError () returned 0x5 [0166.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0166.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 Thread: id = 3066 os_tid = 0x15fc [0160.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx")) returned 0x20 [0166.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.217] GetLastError () returned 0x5 [0166.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0166.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 3067 os_tid = 0x980 [0160.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx")) returned 0x20 [0166.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0166.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.219] GetLastError () returned 0x5 [0166.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0166.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 3068 os_tid = 0x990 [0160.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx")) returned 0x20 [0166.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.221] GetLastError () returned 0x5 [0166.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0166.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db08) returned 1 Thread: id = 3069 os_tid = 0x9a0 [0160.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx")) returned 0x20 [0166.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.223] GetLastError () returned 0x5 [0166.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0166.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 3070 os_tid = 0x1610 [0160.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx")) returned 0x20 [0165.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0165.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.490] GetLastError () returned 0x5 [0165.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0165.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 3071 os_tid = 0x9b0 [0160.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20 [0160.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0160.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.619] GetLastError () returned 0x5 [0160.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0160.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 3072 os_tid = 0x1618 [0160.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20 [0160.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0160.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.621] GetLastError () returned 0x5 [0160.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0160.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 3073 os_tid = 0x115c [0160.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20 [0164.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0165.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.957] GetLastError () returned 0x5 [0166.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0166.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 3074 os_tid = 0x16fc [0160.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20 [0165.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0166.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.955] GetLastError () returned 0x5 [0166.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0166.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 3075 os_tid = 0x1700 [0160.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20 [0170.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0170.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.495] GetLastError () returned 0x5 [0170.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0170.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 3076 os_tid = 0x1704 [0160.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20 [0170.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0170.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.497] GetLastError () returned 0x5 [0170.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0170.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 3077 os_tid = 0xe4c [0160.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20 [0170.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0170.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.499] GetLastError () returned 0x5 [0170.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0170.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 3078 os_tid = 0x1708 [0160.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20 [0170.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0170.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.501] GetLastError () returned 0x5 [0170.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0170.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 3079 os_tid = 0x170c [0160.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20 [0166.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0167.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.780] GetLastError () returned 0x5 [0167.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0167.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 3080 os_tid = 0x1710 [0160.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20 [0167.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0168.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.838] GetLastError () returned 0x5 [0169.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0170.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 3081 os_tid = 0x1714 [0160.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20 [0167.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0168.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.240] GetLastError () returned 0x5 [0170.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0170.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 3082 os_tid = 0x1170 [0160.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0167.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.780] GetLastError () returned 0x5 [0167.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0167.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 3083 os_tid = 0x1718 [0160.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20 [0168.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0169.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.238] GetLastError () returned 0x5 [0170.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0170.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 3084 os_tid = 0x171c [0160.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0167.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.780] GetLastError () returned 0x5 [0167.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0167.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 3085 os_tid = 0x7b0 [0160.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20 [0168.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0169.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.461] GetLastError () returned 0x5 [0170.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0170.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 3086 os_tid = 0x1174 [0160.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0167.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.780] GetLastError () returned 0x5 [0167.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0168.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 3087 os_tid = 0x1184 [0160.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20 [0169.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0170.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.466] GetLastError () returned 0x5 [0170.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0170.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 3088 os_tid = 0x114c [0160.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20 [0166.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0166.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.901] GetLastError () returned 0x5 [0166.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0166.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 3089 os_tid = 0x1664 [0160.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20 [0166.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0167.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.578] GetLastError () returned 0x5 [0168.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0168.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 3090 os_tid = 0x11e4 [0160.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20 [0166.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0167.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.781] GetLastError () returned 0x5 [0167.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0167.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 3091 os_tid = 0x11f0 [0160.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20 [0170.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0170.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.464] GetLastError () returned 0x5 [0170.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0170.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 3092 os_tid = 0x17cc [0160.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0167.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.309] GetLastError () returned 0x5 [0169.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0169.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 3093 os_tid = 0x17d0 [0160.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20 [0166.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0166.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.500] GetLastError () returned 0x5 [0166.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0166.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 3094 os_tid = 0x17d4 [0160.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20 [0170.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0170.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.493] GetLastError () returned 0x5 [0170.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0170.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 3095 os_tid = 0x10b8 [0160.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20 [0169.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0170.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.469] GetLastError () returned 0x5 [0170.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0170.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 3096 os_tid = 0x1140 [0161.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0167.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.912] GetLastError () returned 0x5 [0168.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0169.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 3097 os_tid = 0x1180 [0161.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 0x20 [0165.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.422] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.422] GetLastError () returned 0x5 [0165.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0165.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1a50) returned 1 Thread: id = 3098 os_tid = 0x1188 [0161.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 0x20 [0165.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.424] GetLastError () returned 0x5 [0165.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0165.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 3099 os_tid = 0x118c [0161.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 0x20 [0164.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.507] GetLastError () returned 0x5 [0165.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0165.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee13d8) returned 1 Thread: id = 3100 os_tid = 0x1190 [0161.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 0x20 [0165.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.426] GetLastError () returned 0x5 [0165.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0165.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1320) returned 1 Thread: id = 3101 os_tid = 0x1194 [0161.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 0x20 [0166.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0166.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.132] GetLastError () returned 0x5 [0166.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0166.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1f58) returned 1 Thread: id = 3102 os_tid = 0x1198 [0161.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 0x20 [0166.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.120] GetLastError () returned 0x5 [0166.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deff40) returned 1 Thread: id = 3103 os_tid = 0x119c [0161.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd1b8 [0161.078] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0161.078] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0161.078] wcscat (in: _Dest=0x66dd1b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*" [0161.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0161.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0161.733] wcscmp (_String1=".", _String2=".") returned 0 [0161.733] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.733] wcscmp (_String1="..", _String2=".") returned 1 [0161.734] wcscmp (_String1="..", _String2="..") returned 0 [0161.734] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0161.734] wcscmp (_String1="COUGH.WAV", _String2=".") returned 1 [0161.734] wcscmp (_String1="COUGH.WAV", _String2="..") returned 1 [0161.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfce8 [0161.734] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0161.734] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0161.734] wcscat (in: _Dest=0x69bfce8, _Source="COUGH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" [0163.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010 [0163.316] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0163.316] wcscmp (_String1="GIGGLE.WAV", _String2=".") returned 1 [0163.316] wcscmp (_String1="GIGGLE.WAV", _String2="..") returned 1 [0163.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0163.316] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.316] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.316] wcscat (in: _Dest=0x3e0ed90, _Source="GIGGLE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" [0163.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0163.317] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0163.317] wcscmp (_String1="HICCUP.WAV", _String2=".") returned 1 [0163.318] wcscmp (_String1="HICCUP.WAV", _String2="..") returned 1 [0163.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d850 [0163.318] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.318] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.318] wcscat (in: _Dest=0x3e0d850, _Source="HICCUP.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" [0163.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0163.319] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0163.319] wcscmp (_String1="MMHMM.WAV", _String2=".") returned 1 [0163.319] wcscmp (_String1="MMHMM.WAV", _String2="..") returned 1 [0163.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0163.319] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.319] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.319] wcscat (in: _Dest=0x3e0eed0, _Source="MMHMM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" [0163.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0163.321] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0163.321] wcscmp (_String1="SNEEZE.WAV", _String2=".") returned 1 [0163.321] wcscmp (_String1="SNEEZE.WAV", _String2="..") returned 1 [0163.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e4d0 [0163.321] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.321] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.321] wcscat (in: _Dest=0x3e0e4d0, _Source="SNEEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" [0163.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0163.322] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0163.322] wcscmp (_String1="THROAT.WAV", _String2=".") returned 1 [0163.322] wcscmp (_String1="THROAT.WAV", _String2="..") returned 1 [0163.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e2f0 [0163.322] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.322] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.322] wcscat (in: _Dest=0x3e0e2f0, _Source="THROAT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" [0163.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb0 [0163.323] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1 [0163.323] wcscmp (_String1="Whistling.wav", _String2=".") returned 1 [0163.323] wcscmp (_String1="Whistling.wav", _String2="..") returned 1 [0163.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5be40 [0163.324] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0163.324] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0163.324] wcscat (in: _Dest=0x3e5be40, _Source="Whistling.wav" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" [0163.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0163.325] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0 [0163.325] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0163.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0163.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 [0163.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 3104 os_tid = 0x11a0 [0161.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbbc8 [0161.082] wcscpy (in: _Dest=0x66dbbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0161.082] wcscat (in: _Dest=0x66dbbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0161.082] wcscat (in: _Dest=0x66dbbc8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*" [0161.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0161.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0161.734] wcscmp (_String1=".", _String2=".") returned 0 [0161.734] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.734] wcscmp (_String1="..", _String2=".") returned 1 [0161.734] wcscmp (_String1="..", _String2="..") returned 0 [0161.734] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0161.734] wcscmp (_String1="ALARM.WAV", _String2=".") returned 1 [0161.735] wcscmp (_String1="ALARM.WAV", _String2="..") returned 1 [0161.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1688 [0161.735] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0161.735] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0161.735] wcscat (in: _Dest=0x69c1688, _Source="ALARM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" [0163.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0163.680] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0163.680] wcscmp (_String1="BUZZ.WAV", _String2=".") returned 1 [0163.680] wcscmp (_String1="BUZZ.WAV", _String2="..") returned 1 [0163.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c05a8 [0163.680] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.681] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.681] wcscat (in: _Dest=0x69c05a8, _Source="BUZZ.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" [0163.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0163.682] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0163.682] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0163.682] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0163.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0b48 [0163.682] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.682] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.682] wcscat (in: _Dest=0x69c0b48, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" [0163.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0163.683] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0163.683] wcscmp (_String1="RADAR.WAV", _String2=".") returned 1 [0163.683] wcscmp (_String1="RADAR.WAV", _String2="..") returned 1 [0163.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfe28 [0163.683] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.683] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.683] wcscat (in: _Dest=0x69bfe28, _Source="RADAR.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" [0163.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0163.684] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0163.684] wcscmp (_String1="TOOT.WAV", _String2=".") returned 1 [0163.684] wcscmp (_String1="TOOT.WAV", _String2="..") returned 1 [0163.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0648 [0163.684] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.684] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.684] wcscat (in: _Dest=0x69c0648, _Source="TOOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" [0163.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0163.685] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0163.685] wcscmp (_String1="VIBE.WAV", _String2=".") returned 1 [0163.685] wcscmp (_String1="VIBE.WAV", _String2="..") returned 1 [0163.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0468 [0163.685] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.685] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.686] wcscat (in: _Dest=0x69c0468, _Source="VIBE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" [0163.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0163.686] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0163.686] wcscmp (_String1="WARN.WAV", _String2=".") returned 1 [0163.686] wcscmp (_String1="WARN.WAV", _String2="..") returned 1 [0163.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1548 [0163.687] wcscpy (in: _Dest=0x69c1548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0163.687] wcscat (in: _Dest=0x69c1548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0163.687] wcscat (in: _Dest=0x69c1548, _Source="WARN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" [0163.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0163.688] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0163.688] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0163.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0163.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 [0163.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 3105 os_tid = 0x11a4 [0161.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcd38 [0161.089] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0161.089] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0161.089] wcscat (in: _Dest=0x66dcd38, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*" [0161.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0161.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0161.735] wcscmp (_String1=".", _String2=".") returned 0 [0161.735] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.735] wcscmp (_String1="..", _String2=".") returned 1 [0161.735] wcscmp (_String1="..", _String2="..") returned 0 [0161.735] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ebb4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0161.736] wcscmp (_String1="CAN.WAV", _String2=".") returned 1 [0161.736] wcscmp (_String1="CAN.WAV", _String2="..") returned 1 [0161.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959248 [0161.736] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0161.736] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0161.736] wcscat (in: _Dest=0x6959248, _Source="CAN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" [0163.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0163.774] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0163.774] wcscmp (_String1="COUPLER.WAV", _String2=".") returned 1 [0163.774] wcscmp (_String1="COUPLER.WAV", _String2="..") returned 1 [0163.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c03c8 [0163.774] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.774] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.774] wcscat (in: _Dest=0x69c03c8, _Source="COUPLER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" [0163.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0163.775] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0163.775] wcscmp (_String1="HORN.WAV", _String2=".") returned 1 [0163.775] wcscmp (_String1="HORN.WAV", _String2="..") returned 1 [0163.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c00a8 [0163.775] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.775] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.775] wcscat (in: _Dest=0x69c00a8, _Source="HORN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" [0163.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0163.777] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0163.777] wcscmp (_String1="SHOT.WAV", _String2=".") returned 1 [0163.777] wcscmp (_String1="SHOT.WAV", _String2="..") returned 1 [0163.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0aa8 [0163.777] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.777] wcscat (in: _Dest=0x69c0aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.777] wcscat (in: _Dest=0x69c0aa8, _Source="SHOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" [0163.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0163.778] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0163.778] wcscmp (_String1="SHOVEL.WAV", _String2=".") returned 1 [0163.778] wcscmp (_String1="SHOVEL.WAV", _String2="..") returned 1 [0163.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0163.778] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.778] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.778] wcscat (in: _Dest=0x69c1228, _Source="SHOVEL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" [0163.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0163.779] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0163.779] wcscmp (_String1="SPLASH.WAV", _String2=".") returned 1 [0163.779] wcscmp (_String1="SPLASH.WAV", _String2="..") returned 1 [0163.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c15e8 [0163.779] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.779] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.780] wcscat (in: _Dest=0x69c15e8, _Source="SPLASH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" [0163.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0163.781] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0163.781] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0163.781] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0163.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0163.781] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0163.781] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0163.781] wcscat (in: _Dest=0x69c1188, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" [0163.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0163.782] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0163.782] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0163.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0163.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 [0163.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 3106 os_tid = 0x1670 [0161.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27030 [0161.099] wcscpy (in: _Dest=0x3f27030, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0161.099] wcscat (in: _Dest=0x3f27030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\" [0161.099] wcscat (in: _Dest=0x3f27030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*" [0161.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0161.100] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0161.736] wcscmp (_String1=".", _String2=".") returned 0 [0161.737] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.737] wcscmp (_String1="..", _String2=".") returned 1 [0161.737] wcscmp (_String1="..", _String2="..") returned 0 [0161.737] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.737] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0161.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0161.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 [0161.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 Thread: id = 3107 os_tid = 0x1674 [0161.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe66c8 [0161.101] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0161.101] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0161.101] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*" [0161.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0161.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0163.174] wcscmp (_String1=".", _String2=".") returned 0 [0163.174] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.433] wcscmp (_String1="..", _String2=".") returned 1 [0164.433] wcscmp (_String1="..", _String2="..") returned 0 [0164.433] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0164.433] wcscmp (_String1="Abidjan", _String2=".") returned 1 [0164.433] wcscmp (_String1="Abidjan", _String2="..") returned 1 [0164.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0164.433] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0164.433] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0164.433] wcscat (in: _Dest=0x3f293a0, _Source="Abidjan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" [0166.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1368 [0166.057] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0166.057] wcscmp (_String1="Accra", _String2=".") returned 1 [0166.057] wcscmp (_String1="Accra", _String2="..") returned 1 [0166.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e960 [0166.058] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.058] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.058] wcscat (in: _Dest=0x3d8e960, _Source="Accra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" [0166.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0166.059] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="ADDIS_~1")) returned 1 [0166.059] wcscmp (_String1="Addis_Ababa", _String2=".") returned 1 [0166.059] wcscmp (_String1="Addis_Ababa", _String2="..") returned 1 [0166.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d03a8 [0166.059] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.059] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.059] wcscat (in: _Dest=0x66d03a8, _Source="Addis_Ababa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" [0166.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d03a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0166.060] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0166.060] wcscmp (_String1="Algiers", _String2=".") returned 1 [0166.060] wcscmp (_String1="Algiers", _String2="..") returned 1 [0166.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29250 [0166.061] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.061] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.061] wcscat (in: _Dest=0x3f29250, _Source="Algiers" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" [0166.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0166.062] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0166.062] wcscmp (_String1="Asmara", _String2=".") returned 1 [0166.062] wcscmp (_String1="Asmara", _String2="..") returned 1 [0166.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0166.062] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.062] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.062] wcscat (in: _Dest=0x3d8e278, _Source="Asmara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" [0166.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0166.063] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0166.063] wcscmp (_String1="Bamako", _String2=".") returned 1 [0166.063] wcscmp (_String1="Bamako", _String2="..") returned 1 [0166.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0166.064] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.064] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.064] wcscat (in: _Dest=0x3d8e2e0, _Source="Bamako" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" [0166.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0166.065] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0166.065] wcscmp (_String1="Bangui", _String2=".") returned 1 [0166.065] wcscmp (_String1="Bangui", _String2="..") returned 1 [0166.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0166.065] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.065] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.066] wcscat (in: _Dest=0x3d8be50, _Source="Bangui" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" [0166.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0166.067] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0166.067] wcscmp (_String1="Banjul", _String2=".") returned 1 [0166.067] wcscmp (_String1="Banjul", _String2="..") returned 1 [0166.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0166.067] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.067] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.067] wcscat (in: _Dest=0x3d8bf20, _Source="Banjul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" [0166.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0166.068] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0166.068] wcscmp (_String1="Bissau", _String2=".") returned 1 [0166.068] wcscmp (_String1="Bissau", _String2="..") returned 1 [0166.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0166.068] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.069] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.069] wcscat (in: _Dest=0x3d8d4a8, _Source="Bissau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" [0166.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0166.070] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0166.070] wcscmp (_String1="Blantyre", _String2=".") returned 1 [0166.070] wcscmp (_String1="Blantyre", _String2="..") returned 1 [0166.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29c60 [0166.070] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.070] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.070] wcscat (in: _Dest=0x3f29c60, _Source="Blantyre" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" [0166.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0166.071] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="BRAZZA~1")) returned 1 [0166.072] wcscmp (_String1="Brazzaville", _String2=".") returned 1 [0166.072] wcscmp (_String1="Brazzaville", _String2="..") returned 1 [0166.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0060 [0166.072] wcscpy (in: _Dest=0x66d0060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.072] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.072] wcscat (in: _Dest=0x66d0060, _Source="Brazzaville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" [0166.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0166.073] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="BUJUMB~1")) returned 1 [0166.073] wcscmp (_String1="Bujumbura", _String2=".") returned 1 [0166.073] wcscmp (_String1="Bujumbura", _String2="..") returned 1 [0166.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29e20 [0166.073] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.073] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.073] wcscat (in: _Dest=0x3f29e20, _Source="Bujumbura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" [0166.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0166.074] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0166.075] wcscmp (_String1="Cairo", _String2=".") returned 1 [0166.075] wcscmp (_String1="Cairo", _String2="..") returned 1 [0166.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bb10 [0166.075] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.075] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.075] wcscat (in: _Dest=0x3d8bb10, _Source="Cairo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" [0166.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0166.076] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="CASABL~1")) returned 1 [0166.076] wcscmp (_String1="Casablanca", _String2=".") returned 1 [0166.076] wcscmp (_String1="Casablanca", _String2="..") returned 1 [0166.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29100 [0166.076] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.076] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.076] wcscat (in: _Dest=0x3f29100, _Source="Casablanca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" [0166.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0166.077] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0166.077] wcscmp (_String1="Ceuta", _String2=".") returned 1 [0166.078] wcscmp (_String1="Ceuta", _String2="..") returned 1 [0166.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dd98 [0166.078] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.078] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.078] wcscat (in: _Dest=0x3d8dd98, _Source="Ceuta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" [0166.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0166.079] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0166.079] wcscmp (_String1="Conakry", _String2=".") returned 1 [0166.079] wcscmp (_String1="Conakry", _String2="..") returned 1 [0166.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29640 [0166.079] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.079] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.079] wcscat (in: _Dest=0x3f29640, _Source="Conakry" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" [0166.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0166.081] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0166.081] wcscmp (_String1="Dakar", _String2=".") returned 1 [0166.081] wcscmp (_String1="Dakar", _String2="..") returned 1 [0166.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de00 [0166.081] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.081] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.081] wcscat (in: _Dest=0x3d8de00, _Source="Dakar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" [0166.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0166.082] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="DAR_ES~1")) returned 1 [0166.082] wcscmp (_String1="Dar_es_Salaam", _String2=".") returned 1 [0166.082] wcscmp (_String1="Dar_es_Salaam", _String2="..") returned 1 [0166.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d06f0 [0166.082] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.082] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.082] wcscat (in: _Dest=0x66d06f0, _Source="Dar_es_Salaam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" [0166.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d06f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0166.083] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0166.083] wcscmp (_String1="Djibouti", _String2=".") returned 1 [0166.083] wcscmp (_String1="Djibouti", _String2="..") returned 1 [0166.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b740 [0166.084] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.084] wcscat (in: _Dest=0x3e0b740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.084] wcscat (in: _Dest=0x3e0b740, _Source="Djibouti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" [0166.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0166.085] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0166.085] wcscmp (_String1="Douala", _String2=".") returned 1 [0166.085] wcscmp (_String1="Douala", _String2="..") returned 1 [0166.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e348 [0166.085] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.085] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.085] wcscat (in: _Dest=0x3d8e348, _Source="Douala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" [0166.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0166.086] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0166.086] wcscmp (_String1="El_Aaiun", _String2=".") returned 1 [0166.086] wcscmp (_String1="El_Aaiun", _String2="..") returned 1 [0166.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0ae80 [0166.087] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.087] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.087] wcscat (in: _Dest=0x3e0ae80, _Source="El_Aaiun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" [0166.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0166.088] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0166.088] wcscmp (_String1="Freetown", _String2=".") returned 1 [0166.088] wcscmp (_String1="Freetown", _String2="..") returned 1 [0166.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b3c0 [0166.088] wcscpy (in: _Dest=0x3e0b3c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.088] wcscat (in: _Dest=0x3e0b3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.088] wcscat (in: _Dest=0x3e0b3c0, _Source="Freetown" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" [0166.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0166.089] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0166.089] wcscmp (_String1="Gaborone", _String2=".") returned 1 [0166.089] wcscmp (_String1="Gaborone", _String2="..") returned 1 [0166.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b6d0 [0166.090] wcscpy (in: _Dest=0x3e0b6d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.090] wcscat (in: _Dest=0x3e0b6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.090] wcscat (in: _Dest=0x3e0b6d0, _Source="Gaborone" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" [0166.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0166.091] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0166.091] wcscmp (_String1="Harare", _String2=".") returned 1 [0166.091] wcscmp (_String1="Harare", _String2="..") returned 1 [0166.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0166.091] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.091] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.091] wcscat (in: _Dest=0x3d8e7c0, _Source="Harare" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" [0166.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0166.092] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="JOHANN~1")) returned 1 [0166.092] wcscmp (_String1="Johannesburg", _String2=".") returned 1 [0166.092] wcscmp (_String1="Johannesburg", _String2="..") returned 1 [0166.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0ee8 [0166.092] wcscpy (in: _Dest=0x66d0ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.092] wcscat (in: _Dest=0x66d0ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.092] wcscat (in: _Dest=0x66d0ee8, _Source="Johannesburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" [0166.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0166.093] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0166.093] wcscmp (_String1="Juba", _String2=".") returned 1 [0166.093] wcscmp (_String1="Juba", _String2="..") returned 1 [0166.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ba40 [0166.094] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.094] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.094] wcscat (in: _Dest=0x3d8ba40, _Source="Juba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" [0166.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0166.860] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0166.860] wcscmp (_String1="Kampala", _String2=".") returned 1 [0166.860] wcscmp (_String1="Kampala", _String2="..") returned 1 [0166.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x66e56b8 [0166.860] wcscpy (in: _Dest=0x66e56b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0166.860] wcscat (in: _Dest=0x66e56b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0166.860] wcscat (in: _Dest=0x66e56b8, _Source="Kampala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" [0169.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e56b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0169.583] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0169.583] wcscmp (_String1="Khartoum", _String2=".") returned 1 [0169.583] wcscmp (_String1="Khartoum", _String2="..") returned 1 [0169.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29aa0 [0169.584] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.584] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.584] wcscat (in: _Dest=0x3f29aa0, _Source="Khartoum" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" [0169.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0169.585] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0169.585] wcscmp (_String1="Kigali", _String2=".") returned 1 [0169.585] wcscmp (_String1="Kigali", _String2="..") returned 1 [0169.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0169.585] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.585] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.585] wcscat (in: _Dest=0x3d8be50, _Source="Kigali" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" [0169.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0169.586] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0169.586] wcscmp (_String1="Kinshasa", _String2=".") returned 1 [0169.586] wcscmp (_String1="Kinshasa", _String2="..") returned 1 [0169.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29bf0 [0169.586] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.586] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.586] wcscat (in: _Dest=0x3f29bf0, _Source="Kinshasa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" [0169.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0169.587] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0169.587] wcscmp (_String1="Lagos", _String2=".") returned 1 [0169.587] wcscmp (_String1="Lagos", _String2="..") returned 1 [0169.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e3b0 [0169.587] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.587] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.587] wcscat (in: _Dest=0x3d8e3b0, _Source="Lagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" [0169.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0169.588] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="LIBREV~1")) returned 1 [0169.588] wcscmp (_String1="Libreville", _String2=".") returned 1 [0169.588] wcscmp (_String1="Libreville", _String2="..") returned 1 [0169.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f296b0 [0169.588] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.588] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.589] wcscat (in: _Dest=0x3f296b0, _Source="Libreville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" [0169.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0169.589] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0169.589] wcscmp (_String1="Lome", _String2=".") returned 1 [0169.589] wcscmp (_String1="Lome", _String2="..") returned 1 [0169.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d2a0 [0169.590] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.590] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.590] wcscat (in: _Dest=0x3d8d2a0, _Source="Lome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" [0169.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0169.591] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0169.591] wcscmp (_String1="Luanda", _String2=".") returned 1 [0169.591] wcscmp (_String1="Luanda", _String2="..") returned 1 [0169.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0169.591] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.591] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.591] wcscat (in: _Dest=0x3d8e7c0, _Source="Luanda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" [0169.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0169.592] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="LUBUMB~1")) returned 1 [0169.592] wcscmp (_String1="Lubumbashi", _String2=".") returned 1 [0169.592] wcscmp (_String1="Lubumbashi", _String2="..") returned 1 [0169.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29b10 [0169.592] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.592] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.592] wcscat (in: _Dest=0x3f29b10, _Source="Lubumbashi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" [0169.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0169.595] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0169.595] wcscmp (_String1="Lusaka", _String2=".") returned 1 [0169.595] wcscmp (_String1="Lusaka", _String2="..") returned 1 [0169.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e140 [0169.595] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.595] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.595] wcscat (in: _Dest=0x3d8e140, _Source="Lusaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" [0169.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0169.596] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0169.596] wcscmp (_String1="Malabo", _String2=".") returned 1 [0169.596] wcscmp (_String1="Malabo", _String2="..") returned 1 [0169.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0169.596] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.596] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.596] wcscat (in: _Dest=0x3d8e2e0, _Source="Malabo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" [0169.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0169.597] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0169.597] wcscmp (_String1="Maputo", _String2=".") returned 1 [0169.597] wcscmp (_String1="Maputo", _String2="..") returned 1 [0169.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d3d8 [0169.597] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.598] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.598] wcscat (in: _Dest=0x3d8d3d8, _Source="Maputo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" [0169.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0169.599] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0169.599] wcscmp (_String1="Maseru", _String2=".") returned 1 [0169.599] wcscmp (_String1="Maseru", _String2="..") returned 1 [0169.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ba40 [0169.599] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.599] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.599] wcscat (in: _Dest=0x3d8ba40, _Source="Maseru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" [0169.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0169.600] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0169.600] wcscmp (_String1="Mbabane", _String2=".") returned 1 [0169.600] wcscmp (_String1="Mbabane", _String2="..") returned 1 [0169.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f298e0 [0169.601] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.601] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.601] wcscat (in: _Dest=0x3f298e0, _Source="Mbabane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" [0169.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0169.602] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="MOGADI~1")) returned 1 [0169.602] wcscmp (_String1="Mogadishu", _String2=".") returned 1 [0169.602] wcscmp (_String1="Mogadishu", _String2="..") returned 1 [0169.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f299c0 [0169.602] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.602] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.602] wcscat (in: _Dest=0x3f299c0, _Source="Mogadishu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" [0169.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0169.604] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0169.604] wcscmp (_String1="Monrovia", _String2=".") returned 1 [0169.604] wcscmp (_String1="Monrovia", _String2="..") returned 1 [0169.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29090 [0169.604] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.604] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.604] wcscat (in: _Dest=0x3f29090, _Source="Monrovia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" [0169.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0169.605] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0169.605] wcscmp (_String1="Nairobi", _String2=".") returned 1 [0169.605] wcscmp (_String1="Nairobi", _String2="..") returned 1 [0169.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29cd0 [0169.605] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.605] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.605] wcscat (in: _Dest=0x3f29cd0, _Source="Nairobi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" [0169.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0169.607] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0169.607] wcscmp (_String1="Ndjamena", _String2=".") returned 1 [0169.607] wcscmp (_String1="Ndjamena", _String2="..") returned 1 [0169.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29a30 [0169.607] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.607] wcscat (in: _Dest=0x3f29a30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.607] wcscat (in: _Dest=0x3f29a30, _Source="Ndjamena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" [0169.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0169.609] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0169.609] wcscmp (_String1="Niamey", _String2=".") returned 1 [0169.609] wcscmp (_String1="Niamey", _String2="..") returned 1 [0169.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e960 [0169.609] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.609] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.609] wcscat (in: _Dest=0x3d8e960, _Source="Niamey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" [0169.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0169.610] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="NOUAKC~1")) returned 1 [0169.610] wcscmp (_String1="Nouakchott", _String2=".") returned 1 [0169.610] wcscmp (_String1="Nouakchott", _String2="..") returned 1 [0169.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f28ed0 [0169.611] wcscpy (in: _Dest=0x3f28ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.611] wcscat (in: _Dest=0x3f28ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.611] wcscat (in: _Dest=0x3f28ed0, _Source="Nouakchott" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" [0169.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f28ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0169.613] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="OUAGAD~1")) returned 1 [0169.613] wcscmp (_String1="Ouagadougou", _String2=".") returned 1 [0169.613] wcscmp (_String1="Ouagadougou", _String2="..") returned 1 [0169.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d06f0 [0169.613] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.613] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.613] wcscat (in: _Dest=0x66d06f0, _Source="Ouagadougou" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" [0169.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d06f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0169.615] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="PORTO-~1")) returned 1 [0169.615] wcscmp (_String1="Porto-Novo", _String2=".") returned 1 [0169.615] wcscmp (_String1="Porto-Novo", _String2="..") returned 1 [0169.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29b80 [0169.615] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.615] wcscat (in: _Dest=0x3f29b80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.615] wcscat (in: _Dest=0x3f29b80, _Source="Porto-Novo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" [0169.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0169.616] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0169.616] wcscmp (_String1="Sao_Tome", _String2=".") returned 1 [0169.616] wcscmp (_String1="Sao_Tome", _String2="..") returned 1 [0169.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29790 [0169.616] wcscpy (in: _Dest=0x3f29790, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.616] wcscat (in: _Dest=0x3f29790, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.616] wcscat (in: _Dest=0x3f29790, _Source="Sao_Tome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" [0169.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0169.617] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0169.617] wcscmp (_String1="Tripoli", _String2=".") returned 1 [0169.617] wcscmp (_String1="Tripoli", _String2="..") returned 1 [0169.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29800 [0169.617] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.617] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.617] wcscat (in: _Dest=0x3f29800, _Source="Tripoli" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" [0169.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0169.618] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0169.618] wcscmp (_String1="Tunis", _String2=".") returned 1 [0169.618] wcscmp (_String1="Tunis", _String2="..") returned 1 [0169.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de68 [0169.619] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.619] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.619] wcscat (in: _Dest=0x3d8de68, _Source="Tunis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" [0169.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0169.620] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0169.620] wcscmp (_String1="Windhoek", _String2=".") returned 1 [0169.620] wcscmp (_String1="Windhoek", _String2="..") returned 1 [0169.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29640 [0169.620] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.620] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.620] wcscat (in: _Dest=0x3f29640, _Source="Windhoek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" [0169.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0169.621] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0169.621] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0169.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0169.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0169.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3c08) returned 1 Thread: id = 3108 os_tid = 0x11ac [0161.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0161.104] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0161.104] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0161.104] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*" [0161.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0161.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0164.210] wcscmp (_String1=".", _String2=".") returned 0 [0164.210] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.446] wcscmp (_String1="..", _String2=".") returned 1 [0166.446] wcscmp (_String1="..", _String2="..") returned 0 [0166.446] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0166.446] wcscmp (_String1="Adak", _String2=".") returned 1 [0166.446] wcscmp (_String1="Adak", _String2="..") returned 1 [0166.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0166.446] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0166.446] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0166.446] wcscat (in: _Dest=0x3d8e140, _Source="Adak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" [0169.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0169.056] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="ANCHOR~1")) returned 1 [0169.056] wcscmp (_String1="Anchorage", _String2=".") returned 1 [0169.056] wcscmp (_String1="Anchorage", _String2="..") returned 1 [0169.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f235a0 [0169.056] wcscpy (in: _Dest=0x3f235a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.056] wcscat (in: _Dest=0x3f235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.056] wcscat (in: _Dest=0x3f235a0, _Source="Anchorage" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" [0169.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0169.057] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0169.057] wcscmp (_String1="Anguilla", _String2=".") returned 1 [0169.058] wcscmp (_String1="Anguilla", _String2="..") returned 1 [0169.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23df0 [0169.058] wcscpy (in: _Dest=0x3f23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.058] wcscat (in: _Dest=0x3f23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.058] wcscat (in: _Dest=0x3f23df0, _Source="Anguilla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" [0169.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0169.059] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0169.059] wcscmp (_String1="Antigua", _String2=".") returned 1 [0169.059] wcscmp (_String1="Antigua", _String2="..") returned 1 [0169.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23b50 [0169.059] wcscpy (in: _Dest=0x3f23b50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.059] wcscat (in: _Dest=0x3f23b50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.059] wcscat (in: _Dest=0x3f23b50, _Source="Antigua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" [0169.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0169.060] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="ARAGUA~1")) returned 1 [0169.060] wcscmp (_String1="Araguaina", _String2=".") returned 1 [0169.060] wcscmp (_String1="Araguaina", _String2="..") returned 1 [0169.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23300 [0169.060] wcscpy (in: _Dest=0x3f23300, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.060] wcscat (in: _Dest=0x3f23300, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.060] wcscat (in: _Dest=0x3f23300, _Source="Araguaina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" [0169.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0169.061] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="ARGENT~1")) returned 1 [0169.061] wcscmp (_String1="Argentina", _String2=".") returned 1 [0169.061] wcscmp (_String1="Argentina", _String2="..") returned 1 [0169.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23d10 [0169.061] wcscpy (in: _Dest=0x3f23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.061] wcscat (in: _Dest=0x3f23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.062] wcscat (in: _Dest=0x3f23d10, _Source="Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0169.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0169.063] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0169.063] wcscmp (_String1="Aruba", _String2=".") returned 1 [0169.063] wcscmp (_String1="Aruba", _String2="..") returned 1 [0169.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e7c0 [0169.063] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.063] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.063] wcscat (in: _Dest=0x3d8e7c0, _Source="Aruba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" [0169.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0169.064] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0169.064] wcscmp (_String1="Asuncion", _String2=".") returned 1 [0169.064] wcscmp (_String1="Asuncion", _String2="..") returned 1 [0169.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23920 [0169.064] wcscpy (in: _Dest=0x3f23920, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.064] wcscat (in: _Dest=0x3f23920, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.064] wcscat (in: _Dest=0x3f23920, _Source="Asuncion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" [0169.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0169.065] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0169.065] wcscmp (_String1="Atikokan", _String2=".") returned 1 [0169.065] wcscmp (_String1="Atikokan", _String2="..") returned 1 [0169.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23d80 [0169.065] wcscpy (in: _Dest=0x3f23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.065] wcscat (in: _Dest=0x3f23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.065] wcscat (in: _Dest=0x3f23d80, _Source="Atikokan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" [0169.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0169.067] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0169.067] wcscmp (_String1="Bahia", _String2=".") returned 1 [0169.067] wcscmp (_String1="Bahia", _String2="..") returned 1 [0169.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d2a0 [0169.067] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.067] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.067] wcscat (in: _Dest=0x3d8d2a0, _Source="Bahia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" [0169.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0169.068] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="BAHIA_~1")) returned 1 [0169.068] wcscmp (_String1="Bahia_Banderas", _String2=".") returned 1 [0169.068] wcscmp (_String1="Bahia_Banderas", _String2="..") returned 1 [0169.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674bcb8 [0169.068] wcscpy (in: _Dest=0x674bcb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.068] wcscat (in: _Dest=0x674bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.068] wcscat (in: _Dest=0x674bcb8, _Source="Bahia_Banderas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" [0169.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0169.069] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0169.069] wcscmp (_String1="Barbados", _String2=".") returned 1 [0169.069] wcscmp (_String1="Barbados", _String2="..") returned 1 [0169.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23bc0 [0169.069] wcscpy (in: _Dest=0x3f23bc0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.069] wcscat (in: _Dest=0x3f23bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.069] wcscat (in: _Dest=0x3f23bc0, _Source="Barbados" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" [0169.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0169.071] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0169.071] wcscmp (_String1="Belem", _String2=".") returned 1 [0169.071] wcscmp (_String1="Belem", _String2="..") returned 1 [0169.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e3b0 [0169.071] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.071] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.071] wcscat (in: _Dest=0x3d8e3b0, _Source="Belem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" [0169.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0169.072] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0169.072] wcscmp (_String1="Belize", _String2=".") returned 1 [0169.072] wcscmp (_String1="Belize", _String2="..") returned 1 [0169.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23c30 [0169.072] wcscpy (in: _Dest=0x3f23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.072] wcscat (in: _Dest=0x3f23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.072] wcscat (in: _Dest=0x3f23c30, _Source="Belize" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" [0169.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0169.073] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="BLANC-~1")) returned 1 [0169.073] wcscmp (_String1="Blanc-Sablon", _String2=".") returned 1 [0169.073] wcscmp (_String1="Blanc-Sablon", _String2="..") returned 1 [0169.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ae80 [0169.073] wcscpy (in: _Dest=0x3f1ae80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.074] wcscat (in: _Dest=0x3f1ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.074] wcscat (in: _Dest=0x3f1ae80, _Source="Blanc-Sablon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" [0169.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0169.075] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="BOA_VI~1")) returned 1 [0169.075] wcscmp (_String1="Boa_Vista", _String2=".") returned 1 [0169.075] wcscmp (_String1="Boa_Vista", _String2="..") returned 1 [0169.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23a00 [0169.075] wcscpy (in: _Dest=0x3f23a00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.075] wcscat (in: _Dest=0x3f23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.075] wcscat (in: _Dest=0x3f23a00, _Source="Boa_Vista" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" [0169.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0169.076] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0169.076] wcscmp (_String1="Bogota", _String2=".") returned 1 [0169.076] wcscmp (_String1="Bogota", _String2="..") returned 1 [0169.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23840 [0169.076] wcscpy (in: _Dest=0x3f23840, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.076] wcscat (in: _Dest=0x3f23840, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.076] wcscat (in: _Dest=0x3f23840, _Source="Bogota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" [0169.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0169.082] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0169.082] wcscmp (_String1="Boise", _String2=".") returned 1 [0169.082] wcscmp (_String1="Boise", _String2="..") returned 1 [0169.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0169.082] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.082] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.082] wcscat (in: _Dest=0x3d8be50, _Source="Boise" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" [0169.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0169.083] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="CAMBRI~1")) returned 1 [0169.083] wcscmp (_String1="Cambridge_Bay", _String2=".") returned 1 [0169.083] wcscmp (_String1="Cambridge_Bay", _String2="..") returned 1 [0169.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1afe8 [0169.083] wcscpy (in: _Dest=0x3f1afe8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.083] wcscat (in: _Dest=0x3f1afe8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.083] wcscat (in: _Dest=0x3f1afe8, _Source="Cambridge_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" [0169.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1afe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0169.084] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="CAMPO_~1")) returned 1 [0169.084] wcscmp (_String1="Campo_Grande", _String2=".") returned 1 [0169.084] wcscmp (_String1="Campo_Grande", _String2="..") returned 1 [0169.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b588 [0169.084] wcscpy (in: _Dest=0x3f1b588, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.084] wcscat (in: _Dest=0x3f1b588, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.084] wcscat (in: _Dest=0x3f1b588, _Source="Campo_Grande" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" [0169.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0169.085] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0169.086] wcscmp (_String1="Cancun", _String2=".") returned 1 [0169.086] wcscmp (_String1="Cancun", _String2="..") returned 1 [0169.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f233e0 [0169.086] wcscpy (in: _Dest=0x3f233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.086] wcscat (in: _Dest=0x3f233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.086] wcscat (in: _Dest=0x3f233e0, _Source="Cancun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" [0169.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0169.087] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0169.087] wcscmp (_String1="Caracas", _String2=".") returned 1 [0169.087] wcscmp (_String1="Caracas", _String2="..") returned 1 [0169.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23530 [0169.087] wcscpy (in: _Dest=0x3f23530, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.087] wcscat (in: _Dest=0x3f23530, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.087] wcscat (in: _Dest=0x3f23530, _Source="Caracas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" [0169.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0169.088] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0169.088] wcscmp (_String1="Cayenne", _String2=".") returned 1 [0169.088] wcscmp (_String1="Cayenne", _String2="..") returned 1 [0169.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f234c0 [0169.088] wcscpy (in: _Dest=0x3f234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.088] wcscat (in: _Dest=0x3f234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.088] wcscat (in: _Dest=0x3f234c0, _Source="Cayenne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" [0169.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0169.089] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0169.089] wcscmp (_String1="Cayman", _String2=".") returned 1 [0169.089] wcscmp (_String1="Cayman", _String2="..") returned 1 [0169.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23ae0 [0169.089] wcscpy (in: _Dest=0x3f23ae0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.089] wcscat (in: _Dest=0x3f23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.089] wcscat (in: _Dest=0x3f23ae0, _Source="Cayman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" [0169.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0169.090] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0169.090] wcscmp (_String1="Chicago", _String2=".") returned 1 [0169.090] wcscmp (_String1="Chicago", _String2="..") returned 1 [0169.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23760 [0169.091] wcscpy (in: _Dest=0x3f23760, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.091] wcscat (in: _Dest=0x3f23760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.091] wcscat (in: _Dest=0x3f23760, _Source="Chicago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" [0169.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0169.092] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="CHIHUA~1")) returned 1 [0169.092] wcscmp (_String1="Chihuahua", _String2=".") returned 1 [0169.092] wcscmp (_String1="Chihuahua", _String2="..") returned 1 [0169.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0169.092] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.092] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.092] wcscat (in: _Dest=0x3f23680, _Source="Chihuahua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" [0169.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0169.096] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="COSTA_~1")) returned 1 [0169.096] wcscmp (_String1="Costa_Rica", _String2=".") returned 1 [0169.096] wcscmp (_String1="Costa_Rica", _String2="..") returned 1 [0169.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1ab38 [0169.096] wcscpy (in: _Dest=0x3f1ab38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.096] wcscat (in: _Dest=0x3f1ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.096] wcscat (in: _Dest=0x3f1ab38, _Source="Costa_Rica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" [0169.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0169.097] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0169.097] wcscmp (_String1="Creston", _String2=".") returned 1 [0169.097] wcscmp (_String1="Creston", _String2="..") returned 1 [0169.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23290 [0169.097] wcscpy (in: _Dest=0x3f23290, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.098] wcscat (in: _Dest=0x3f23290, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.098] wcscat (in: _Dest=0x3f23290, _Source="Creston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" [0169.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0169.099] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0169.099] wcscmp (_String1="Cuiaba", _String2=".") returned 1 [0169.099] wcscmp (_String1="Cuiaba", _String2="..") returned 1 [0169.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f22ea0 [0169.099] wcscpy (in: _Dest=0x3f22ea0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.099] wcscat (in: _Dest=0x3f22ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.099] wcscat (in: _Dest=0x3f22ea0, _Source="Cuiaba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" [0169.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0169.100] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0169.100] wcscmp (_String1="Curacao", _String2=".") returned 1 [0169.100] wcscmp (_String1="Curacao", _String2="..") returned 1 [0169.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f22f10 [0169.100] wcscpy (in: _Dest=0x3f22f10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.100] wcscat (in: _Dest=0x3f22f10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.100] wcscat (in: _Dest=0x3f22f10, _Source="Curacao" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" [0169.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0169.102] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="DANMAR~1")) returned 1 [0169.102] wcscmp (_String1="Danmarkshavn", _String2=".") returned 1 [0169.102] wcscmp (_String1="Danmarkshavn", _String2="..") returned 1 [0169.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1af70 [0169.103] wcscpy (in: _Dest=0x3f1af70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.103] wcscat (in: _Dest=0x3f1af70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.103] wcscat (in: _Dest=0x3f1af70, _Source="Danmarkshavn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" [0169.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1af70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0169.104] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0169.104] wcscmp (_String1="Dawson", _String2=".") returned 1 [0169.104] wcscmp (_String1="Dawson", _String2="..") returned 1 [0169.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f22ff0 [0169.104] wcscpy (in: _Dest=0x3f22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.104] wcscat (in: _Dest=0x3f22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.104] wcscat (in: _Dest=0x3f22ff0, _Source="Dawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" [0169.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0169.693] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="DAWSON~1")) returned 1 [0169.693] wcscmp (_String1="Dawson_Creek", _String2=".") returned 1 [0169.693] wcscmp (_String1="Dawson_Creek", _String2="..") returned 1 [0169.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d03a8 [0169.693] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0169.693] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0169.693] wcscat (in: _Dest=0x66d03a8, _Source="Dawson_Creek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" [0171.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson_creek")) returned 0x20 [0171.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek", dwFileAttributes=0x20) returned 0 [0171.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson_creek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.865] GetLastError () returned 0x5 [0171.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek", dwFileAttributes=0x20) returned 0 [0171.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0171.865] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0171.865] wcscmp (_String1="Denver", _String2=".") returned 1 [0171.865] wcscmp (_String1="Denver", _String2="..") returned 1 [0171.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23680 [0171.866] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.866] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.866] wcscat (in: _Dest=0x3f23680, _Source="Denver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" [0171.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\denver")) returned 0x20 [0171.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver", dwFileAttributes=0x20) returned 0 [0171.866] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\denver"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.866] GetLastError () returned 0x5 [0171.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver", dwFileAttributes=0x20) returned 0 [0171.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.866] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0171.866] wcscmp (_String1="Detroit", _String2=".") returned 1 [0171.866] wcscmp (_String1="Detroit", _String2="..") returned 1 [0171.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.867] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.867] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.867] wcscat (in: _Dest=0x3f23680, _Source="Detroit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" [0171.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\detroit")) returned 0x20 [0171.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit", dwFileAttributes=0x20) returned 0 [0171.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\detroit"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.867] GetLastError () returned 0x5 [0171.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit", dwFileAttributes=0x20) returned 0 [0171.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.867] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0171.924] wcscmp (_String1="Dominica", _String2=".") returned 1 [0171.924] wcscmp (_String1="Dominica", _String2="..") returned 1 [0171.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23680 [0171.924] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.924] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.924] wcscat (in: _Dest=0x3f23680, _Source="Dominica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" [0171.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica")) returned 0x20 [0171.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0171.925] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.925] GetLastError () returned 0x5 [0171.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0171.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.925] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0171.925] wcscmp (_String1="Edmonton", _String2=".") returned 1 [0171.925] wcscmp (_String1="Edmonton", _String2="..") returned 1 [0171.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23680 [0171.925] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.925] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.925] wcscat (in: _Dest=0x3f23680, _Source="Edmonton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" [0171.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton")) returned 0x20 [0171.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0171.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.926] GetLastError () returned 0x5 [0171.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0171.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.926] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0171.926] wcscmp (_String1="Eirunepe", _String2=".") returned 1 [0171.926] wcscmp (_String1="Eirunepe", _String2="..") returned 1 [0171.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23680 [0171.926] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.926] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.926] wcscat (in: _Dest=0x3f23680, _Source="Eirunepe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" [0171.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe")) returned 0x20 [0171.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0171.927] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.927] GetLastError () returned 0x5 [0171.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0171.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.927] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="EL_SAL~1")) returned 1 [0171.927] wcscmp (_String1="El_Salvador", _String2=".") returned 1 [0171.927] wcscmp (_String1="El_Salvador", _String2="..") returned 1 [0171.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d940 [0171.927] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.927] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.927] wcscat (in: _Dest=0x3f1d940, _Source="El_Salvador" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" [0171.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador")) returned 0x20 [0171.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0171.928] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.928] GetLastError () returned 0x5 [0171.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0171.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0171.928] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="FORTAL~1")) returned 1 [0171.928] wcscmp (_String1="Fortaleza", _String2=".") returned 1 [0171.928] wcscmp (_String1="Fortaleza", _String2="..") returned 1 [0171.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0171.928] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.928] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.928] wcscat (in: _Dest=0x3f23680, _Source="Fortaleza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" [0171.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza")) returned 0x20 [0171.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0171.929] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.929] GetLastError () returned 0x5 [0171.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0171.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.929] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="GLACE_~1")) returned 1 [0171.929] wcscmp (_String1="Glace_Bay", _String2=".") returned 1 [0171.929] wcscmp (_String1="Glace_Bay", _String2="..") returned 1 [0171.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0171.929] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.929] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.929] wcscat (in: _Dest=0x3f23680, _Source="Glace_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" [0171.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay")) returned 0x20 [0171.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0171.930] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.930] GetLastError () returned 0x5 [0171.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0171.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.930] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0171.930] wcscmp (_String1="Godthab", _String2=".") returned 1 [0171.930] wcscmp (_String1="Godthab", _String2="..") returned 1 [0171.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.930] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.930] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.931] wcscat (in: _Dest=0x3f23680, _Source="Godthab" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" [0171.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab")) returned 0x20 [0171.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0171.931] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.931] GetLastError () returned 0x5 [0171.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0171.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.931] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="GOOSE_~1")) returned 1 [0171.931] wcscmp (_String1="Goose_Bay", _String2=".") returned 1 [0171.931] wcscmp (_String1="Goose_Bay", _String2="..") returned 1 [0171.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0171.931] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.932] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.932] wcscat (in: _Dest=0x3f23680, _Source="Goose_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" [0171.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay")) returned 0x20 [0171.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0171.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.932] GetLastError () returned 0x5 [0171.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0171.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.932] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="GRAND_~1")) returned 1 [0171.932] wcscmp (_String1="Grand_Turk", _String2=".") returned 1 [0171.932] wcscmp (_String1="Grand_Turk", _String2="..") returned 1 [0171.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d940 [0171.933] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.933] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.933] wcscat (in: _Dest=0x3f1d940, _Source="Grand_Turk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" [0171.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk")) returned 0x20 [0171.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0171.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.933] GetLastError () returned 0x5 [0171.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0171.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0171.933] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0171.933] wcscmp (_String1="Grenada", _String2=".") returned 1 [0171.934] wcscmp (_String1="Grenada", _String2="..") returned 1 [0171.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.934] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.934] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.934] wcscat (in: _Dest=0x3f23680, _Source="Grenada" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" [0171.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada")) returned 0x20 [0171.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0171.934] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.934] GetLastError () returned 0x5 [0171.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0171.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.934] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="GUADEL~1")) returned 1 [0171.934] wcscmp (_String1="Guadeloupe", _String2=".") returned 1 [0171.935] wcscmp (_String1="Guadeloupe", _String2="..") returned 1 [0171.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d940 [0171.935] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.935] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.935] wcscat (in: _Dest=0x3f1d940, _Source="Guadeloupe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" [0171.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe")) returned 0x20 [0171.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0171.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.935] GetLastError () returned 0x5 [0171.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0171.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0171.935] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guatemala", cAlternateFileName="GUATEM~1")) returned 1 [0171.935] wcscmp (_String1="Guatemala", _String2=".") returned 1 [0171.935] wcscmp (_String1="Guatemala", _String2="..") returned 1 [0171.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0171.936] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.936] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.936] wcscat (in: _Dest=0x3f23680, _Source="Guatemala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" [0171.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala")) returned 0x20 [0171.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0171.936] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.936] GetLastError () returned 0x5 [0171.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0171.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.936] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guayaquil", cAlternateFileName="GUAYAQ~1")) returned 1 [0171.936] wcscmp (_String1="Guayaquil", _String2=".") returned 1 [0171.937] wcscmp (_String1="Guayaquil", _String2="..") returned 1 [0171.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0171.937] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.937] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.937] wcscat (in: _Dest=0x3f23680, _Source="Guayaquil" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" [0171.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil")) returned 0x20 [0171.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0171.937] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.938] GetLastError () returned 0x5 [0171.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0171.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.938] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guyana", cAlternateFileName="")) returned 1 [0171.938] wcscmp (_String1="Guyana", _String2=".") returned 1 [0171.938] wcscmp (_String1="Guyana", _String2="..") returned 1 [0171.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23680 [0171.938] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.938] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.938] wcscat (in: _Dest=0x3f23680, _Source="Guyana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" [0171.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana")) returned 0x20 [0171.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0171.938] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.939] GetLastError () returned 0x5 [0171.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0171.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.939] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="Halifax", cAlternateFileName="")) returned 1 [0171.939] wcscmp (_String1="Halifax", _String2=".") returned 1 [0171.939] wcscmp (_String1="Halifax", _String2="..") returned 1 [0171.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.939] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.939] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.939] wcscat (in: _Dest=0x3f23680, _Source="Halifax" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" [0171.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax")) returned 0x20 [0171.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0171.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.940] GetLastError () returned 0x5 [0171.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0171.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.940] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Havana", cAlternateFileName="")) returned 1 [0171.940] wcscmp (_String1="Havana", _String2=".") returned 1 [0171.940] wcscmp (_String1="Havana", _String2="..") returned 1 [0171.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23680 [0171.940] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.940] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.940] wcscat (in: _Dest=0x3f23680, _Source="Havana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" [0171.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana")) returned 0x20 [0171.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0171.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.941] GetLastError () returned 0x5 [0171.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0171.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.941] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hermosillo", cAlternateFileName="HERMOS~1")) returned 1 [0171.941] wcscmp (_String1="Hermosillo", _String2=".") returned 1 [0171.941] wcscmp (_String1="Hermosillo", _String2="..") returned 1 [0171.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d940 [0171.941] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.941] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.941] wcscat (in: _Dest=0x3f1d940, _Source="Hermosillo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" [0171.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo")) returned 0x20 [0171.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0171.941] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.941] GetLastError () returned 0x5 [0171.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0171.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0171.942] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indiana", cAlternateFileName="")) returned 1 [0171.942] wcscmp (_String1="Indiana", _String2=".") returned 1 [0171.942] wcscmp (_String1="Indiana", _String2="..") returned 1 [0171.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.942] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.942] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.942] wcscat (in: _Dest=0x3f23680, _Source="Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f234c0 [0171.942] wcscpy (in: _Dest=0x3f234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.942] wcscat (in: _Dest=0x3f234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.942] wcscat (in: _Dest=0x3f234c0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*" [0171.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0171.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0171.957] wcscmp (_String1=".", _String2=".") returned 0 [0171.957] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.957] wcscmp (_String1="..", _String2=".") returned 1 [0171.957] wcscmp (_String1="..", _String2="..") returned 0 [0171.957] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="INDIAN~1")) returned 1 [0171.957] wcscmp (_String1="Indianapolis", _String2=".") returned 1 [0171.957] wcscmp (_String1="Indianapolis", _String2="..") returned 1 [0171.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c9a8 [0171.957] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.957] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.957] wcscat (in: _Dest=0x682c9a8, _Source="Indianapolis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" [0171.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis")) returned 0x20 [0171.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0171.958] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.958] GetLastError () returned 0x5 [0171.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0171.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0171.958] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Knox", cAlternateFileName="")) returned 1 [0171.958] wcscmp (_String1="Knox", _String2=".") returned 1 [0171.958] wcscmp (_String1="Knox", _String2="..") returned 1 [0171.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1b060 [0171.958] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.958] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.958] wcscat (in: _Dest=0x3f1b060, _Source="Knox" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" [0171.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox")) returned 0x20 [0171.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0171.959] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.959] GetLastError () returned 0x5 [0171.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0171.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0171.959] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marengo", cAlternateFileName="")) returned 1 [0171.959] wcscmp (_String1="Marengo", _String2=".") returned 1 [0171.959] wcscmp (_String1="Marengo", _String2="..") returned 1 [0171.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c838 [0171.959] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.959] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.959] wcscat (in: _Dest=0x674c838, _Source="Marengo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" [0171.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo")) returned 0x20 [0171.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0171.960] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.960] GetLastError () returned 0x5 [0171.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0171.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.960] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Petersburg", cAlternateFileName="PETERS~1")) returned 1 [0171.960] wcscmp (_String1="Petersburg", _String2=".") returned 1 [0171.960] wcscmp (_String1="Petersburg", _String2="..") returned 1 [0171.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c9a8 [0171.960] wcscpy (in: _Dest=0x682c9a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.960] wcscat (in: _Dest=0x682c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.960] wcscat (in: _Dest=0x682c9a8, _Source="Petersburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" [0171.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg")) returned 0x20 [0171.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0171.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.961] GetLastError () returned 0x5 [0171.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0171.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 [0171.961] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tell_City", cAlternateFileName="TELL_C~1")) returned 1 [0171.961] wcscmp (_String1="Tell_City", _String2=".") returned 1 [0171.961] wcscmp (_String1="Tell_City", _String2="..") returned 1 [0171.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.961] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.961] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.961] wcscat (in: _Dest=0x674c838, _Source="Tell_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" [0171.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city")) returned 0x20 [0171.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0171.962] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.962] GetLastError () returned 0x5 [0171.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0171.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.962] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vevay", cAlternateFileName="")) returned 1 [0171.962] wcscmp (_String1="Vevay", _String2=".") returned 1 [0171.962] wcscmp (_String1="Vevay", _String2="..") returned 1 [0171.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b060 [0171.962] wcscpy (in: _Dest=0x3f1b060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.962] wcscat (in: _Dest=0x3f1b060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.962] wcscat (in: _Dest=0x3f1b060, _Source="Vevay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" [0171.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay")) returned 0x20 [0171.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0171.963] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.963] GetLastError () returned 0x5 [0171.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0171.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0171.963] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vincennes", cAlternateFileName="VINCEN~1")) returned 1 [0171.963] wcscmp (_String1="Vincennes", _String2=".") returned 1 [0171.963] wcscmp (_String1="Vincennes", _String2="..") returned 1 [0171.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.963] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.963] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.963] wcscat (in: _Dest=0x674c838, _Source="Vincennes" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" [0171.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes")) returned 0x20 [0171.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0171.963] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.964] GetLastError () returned 0x5 [0171.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0171.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.964] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 1 [0171.964] wcscmp (_String1="Winamac", _String2=".") returned 1 [0171.964] wcscmp (_String1="Winamac", _String2="..") returned 1 [0171.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c838 [0171.964] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0171.964] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0171.964] wcscat (in: _Dest=0x674c838, _Source="Winamac" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" [0171.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac")) returned 0x20 [0171.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0171.964] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.965] GetLastError () returned 0x5 [0171.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0171.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.965] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 0 [0171.965] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0171.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0171.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f234c0) returned 1 [0171.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.965] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1 [0171.965] wcscmp (_String1="Inuvik", _String2=".") returned 1 [0171.965] wcscmp (_String1="Inuvik", _String2="..") returned 1 [0171.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23680 [0171.965] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.965] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.965] wcscat (in: _Dest=0x3f23680, _Source="Inuvik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" [0171.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik")) returned 0x20 [0171.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0171.966] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.966] GetLastError () returned 0x5 [0171.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0171.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.966] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iqaluit", cAlternateFileName="")) returned 1 [0171.966] wcscmp (_String1="Iqaluit", _String2=".") returned 1 [0171.966] wcscmp (_String1="Iqaluit", _String2="..") returned 1 [0171.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.966] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.966] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.966] wcscat (in: _Dest=0x3f23680, _Source="Iqaluit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" [0171.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit")) returned 0x20 [0171.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0171.967] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.967] GetLastError () returned 0x5 [0171.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0171.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.967] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jamaica", cAlternateFileName="")) returned 1 [0171.967] wcscmp (_String1="Jamaica", _String2=".") returned 1 [0171.967] wcscmp (_String1="Jamaica", _String2="..") returned 1 [0171.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23680 [0171.967] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.967] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.967] wcscat (in: _Dest=0x3f23680, _Source="Jamaica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" [0171.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica")) returned 0x20 [0171.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0171.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.968] GetLastError () returned 0x5 [0171.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0171.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 [0171.968] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juneau", cAlternateFileName="")) returned 1 [0171.968] wcscmp (_String1="Juneau", _String2=".") returned 1 [0171.968] wcscmp (_String1="Juneau", _String2="..") returned 1 [0171.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23680 [0171.968] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0171.968] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0171.968] wcscat (in: _Dest=0x3f23680, _Source="Juneau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" [0172.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0172.865] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kentucky", cAlternateFileName="")) returned 1 [0172.865] wcscmp (_String1="Kentucky", _String2=".") returned 1 [0172.866] wcscmp (_String1="Kentucky", _String2="..") returned 1 [0172.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0172.866] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.866] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.866] wcscat (in: _Dest=0x3f29020, _Source="Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0172.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0172.867] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1 [0172.867] wcscmp (_String1="La_Paz", _String2=".") returned 1 [0172.867] wcscmp (_String1="La_Paz", _String2="..") returned 1 [0172.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0172.867] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.867] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.867] wcscat (in: _Dest=0x3f29b10, _Source="La_Paz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" [0172.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0172.869] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lima", cAlternateFileName="")) returned 1 [0172.869] wcscmp (_String1="Lima", _String2=".") returned 1 [0172.869] wcscmp (_String1="Lima", _String2="..") returned 1 [0172.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0172.869] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.869] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.869] wcscat (in: _Dest=0x3d8ccf0, _Source="Lima" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" [0172.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0172.870] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Los_Angeles", cAlternateFileName="LOS_AN~1")) returned 1 [0172.870] wcscmp (_String1="Los_Angeles", _String2=".") returned 1 [0172.870] wcscmp (_String1="Los_Angeles", _String2="..") returned 1 [0172.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1abb0 [0172.870] wcscpy (in: _Dest=0x3f1abb0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.870] wcscat (in: _Dest=0x3f1abb0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.870] wcscat (in: _Dest=0x3f1abb0, _Source="Los_Angeles" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" [0172.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1abb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0172.871] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maceio", cAlternateFileName="")) returned 1 [0172.871] wcscmp (_String1="Maceio", _String2=".") returned 1 [0172.872] wcscmp (_String1="Maceio", _String2="..") returned 1 [0172.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29d40 [0172.872] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.872] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.872] wcscat (in: _Dest=0x3f29d40, _Source="Maceio" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" [0172.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0172.873] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managua", cAlternateFileName="")) returned 1 [0172.873] wcscmp (_String1="Managua", _String2=".") returned 1 [0172.873] wcscmp (_String1="Managua", _String2="..") returned 1 [0172.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29410 [0172.874] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.874] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.874] wcscat (in: _Dest=0x3f29410, _Source="Managua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" [0172.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0172.875] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manaus", cAlternateFileName="")) returned 1 [0172.875] wcscmp (_String1="Manaus", _String2=".") returned 1 [0172.875] wcscmp (_String1="Manaus", _String2="..") returned 1 [0172.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f294f0 [0172.875] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.875] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.875] wcscat (in: _Dest=0x3f294f0, _Source="Manaus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" [0172.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0172.876] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Martinique", cAlternateFileName="MARTIN~1")) returned 1 [0172.876] wcscmp (_String1="Martinique", _String2=".") returned 1 [0172.876] wcscmp (_String1="Martinique", _String2="..") returned 1 [0172.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b510 [0172.876] wcscpy (in: _Dest=0x3f1b510, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.876] wcscat (in: _Dest=0x3f1b510, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.876] wcscat (in: _Dest=0x3f1b510, _Source="Martinique" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" [0172.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0172.878] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Matamoros", cAlternateFileName="MATAMO~1")) returned 1 [0172.878] wcscmp (_String1="Matamoros", _String2=".") returned 1 [0172.878] wcscmp (_String1="Matamoros", _String2="..") returned 1 [0172.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29e20 [0172.878] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.878] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.878] wcscat (in: _Dest=0x3f29e20, _Source="Matamoros" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" [0172.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0172.879] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mazatlan", cAlternateFileName="")) returned 1 [0172.879] wcscmp (_String1="Mazatlan", _String2=".") returned 1 [0172.879] wcscmp (_String1="Mazatlan", _String2="..") returned 1 [0172.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29100 [0172.879] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.879] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.879] wcscat (in: _Dest=0x3f29100, _Source="Mazatlan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" [0172.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0172.881] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menominee", cAlternateFileName="MENOMI~1")) returned 1 [0172.881] wcscmp (_String1="Menominee", _String2=".") returned 1 [0172.881] wcscmp (_String1="Menominee", _String2="..") returned 1 [0172.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29250 [0172.881] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.881] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.881] wcscat (in: _Dest=0x3f29250, _Source="Menominee" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" [0172.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0172.882] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Merida", cAlternateFileName="")) returned 1 [0172.882] wcscmp (_String1="Merida", _String2=".") returned 1 [0172.882] wcscmp (_String1="Merida", _String2="..") returned 1 [0172.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29c60 [0172.882] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.882] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.882] wcscat (in: _Dest=0x3f29c60, _Source="Merida" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" [0172.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0172.883] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metlakatla", cAlternateFileName="METLAK~1")) returned 1 [0172.883] wcscmp (_String1="Metlakatla", _String2=".") returned 1 [0172.883] wcscmp (_String1="Metlakatla", _String2="..") returned 1 [0172.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b150 [0172.884] wcscpy (in: _Dest=0x3f1b150, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.884] wcscat (in: _Dest=0x3f1b150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.884] wcscat (in: _Dest=0x3f1b150, _Source="Metlakatla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" [0172.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0172.885] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mexico_City", cAlternateFileName="MEXICO~1")) returned 1 [0172.885] wcscmp (_String1="Mexico_City", _String2=".") returned 1 [0172.885] wcscmp (_String1="Mexico_City", _String2="..") returned 1 [0172.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b240 [0172.885] wcscpy (in: _Dest=0x3f1b240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.885] wcscat (in: _Dest=0x3f1b240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.885] wcscat (in: _Dest=0x3f1b240, _Source="Mexico_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" [0172.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0172.886] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Miquelon", cAlternateFileName="")) returned 1 [0174.499] wcscmp (_String1="Miquelon", _String2=".") returned 1 [0174.499] wcscmp (_String1="Miquelon", _String2="..") returned 1 [0174.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f299c0 [0174.499] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.499] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.499] wcscat (in: _Dest=0x3f299c0, _Source="Miquelon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" [0176.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0176.211] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moncton", cAlternateFileName="")) returned 1 [0176.211] wcscmp (_String1="Moncton", _String2=".") returned 1 [0176.211] wcscmp (_String1="Moncton", _String2="..") returned 1 [0176.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29bf0 [0176.211] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.211] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.211] wcscat (in: _Dest=0x3f29bf0, _Source="Moncton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" [0176.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0176.212] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monterrey", cAlternateFileName="MONTER~1")) returned 1 [0176.213] wcscmp (_String1="Monterrey", _String2=".") returned 1 [0176.213] wcscmp (_String1="Monterrey", _String2="..") returned 1 [0176.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29020 [0176.213] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.213] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.213] wcscat (in: _Dest=0x3f29020, _Source="Monterrey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" [0176.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0176.214] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montevideo", cAlternateFileName="MONTEV~1")) returned 1 [0176.214] wcscmp (_String1="Montevideo", _String2=".") returned 1 [0176.214] wcscmp (_String1="Montevideo", _String2="..") returned 1 [0176.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d1c0 [0176.214] wcscpy (in: _Dest=0x3f1d1c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.214] wcscat (in: _Dest=0x3f1d1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.214] wcscat (in: _Dest=0x3f1d1c0, _Source="Montevideo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" [0176.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0176.215] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montreal", cAlternateFileName="")) returned 1 [0176.215] wcscmp (_String1="Montreal", _String2=".") returned 1 [0176.215] wcscmp (_String1="Montreal", _String2="..") returned 1 [0176.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f296b0 [0176.215] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.215] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.215] wcscat (in: _Dest=0x3f296b0, _Source="Montreal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" [0176.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0176.216] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montserrat", cAlternateFileName="MONTSE~1")) returned 1 [0176.216] wcscmp (_String1="Montserrat", _String2=".") returned 1 [0176.216] wcscmp (_String1="Montserrat", _String2="..") returned 1 [0176.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d0d0 [0176.216] wcscpy (in: _Dest=0x3f1d0d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.216] wcscat (in: _Dest=0x3f1d0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.217] wcscat (in: _Dest=0x3f1d0d0, _Source="Montserrat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" [0176.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0176.217] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nassau", cAlternateFileName="")) returned 1 [0176.218] wcscmp (_String1="Nassau", _String2=".") returned 1 [0176.218] wcscmp (_String1="Nassau", _String2="..") returned 1 [0176.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0176.218] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.218] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.218] wcscat (in: _Dest=0x3f293a0, _Source="Nassau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" [0176.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0176.219] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_York", cAlternateFileName="")) returned 1 [0176.219] wcscmp (_String1="New_York", _String2=".") returned 1 [0176.219] wcscmp (_String1="New_York", _String2="..") returned 1 [0176.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29cd0 [0176.219] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.219] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.219] wcscat (in: _Dest=0x3f29cd0, _Source="New_York" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" [0176.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0176.220] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nipigon", cAlternateFileName="")) returned 1 [0176.220] wcscmp (_String1="Nipigon", _String2=".") returned 1 [0176.220] wcscmp (_String1="Nipigon", _String2="..") returned 1 [0176.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29090 [0176.220] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.220] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.220] wcscat (in: _Dest=0x3f29090, _Source="Nipigon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" [0176.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0176.221] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nome", cAlternateFileName="")) returned 1 [0176.221] wcscmp (_String1="Nome", _String2=".") returned 1 [0176.221] wcscmp (_String1="Nome", _String2="..") returned 1 [0176.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3eef268 [0176.221] wcscpy (in: _Dest=0x3eef268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.221] wcscat (in: _Dest=0x3eef268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.221] wcscat (in: _Dest=0x3eef268, _Source="Nome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" [0176.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eef268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0176.222] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noronha", cAlternateFileName="")) returned 1 [0176.222] wcscmp (_String1="Noronha", _String2=".") returned 1 [0176.222] wcscmp (_String1="Noronha", _String2="..") returned 1 [0176.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29d40 [0176.222] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.222] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.222] wcscat (in: _Dest=0x3f29d40, _Source="Noronha" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" [0176.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0176.223] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="North_Dakota", cAlternateFileName="NORTH_~1")) returned 1 [0176.223] wcscmp (_String1="North_Dakota", _String2=".") returned 1 [0176.223] wcscmp (_String1="North_Dakota", _String2="..") returned 1 [0176.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d6e8 [0176.223] wcscpy (in: _Dest=0x3f1d6e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.223] wcscat (in: _Dest=0x3f1d6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.224] wcscat (in: _Dest=0x3f1d6e8, _Source="North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0176.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f1d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0176.225] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1 [0176.225] wcscmp (_String1="Ojinaga", _String2=".") returned 1 [0176.225] wcscmp (_String1="Ojinaga", _String2="..") returned 1 [0176.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29410 [0176.225] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.225] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.225] wcscat (in: _Dest=0x3f29410, _Source="Ojinaga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" [0176.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0176.226] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panama", cAlternateFileName="")) returned 1 [0176.226] wcscmp (_String1="Panama", _String2=".") returned 1 [0176.226] wcscmp (_String1="Panama", _String2="..") returned 1 [0176.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29e20 [0176.226] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.226] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.226] wcscat (in: _Dest=0x3f29e20, _Source="Panama" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" [0176.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0176.227] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pangnirtung", cAlternateFileName="PANGNI~1")) returned 1 [0176.227] wcscmp (_String1="Pangnirtung", _String2=".") returned 1 [0176.227] wcscmp (_String1="Pangnirtung", _String2="..") returned 1 [0176.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d7d8 [0176.227] wcscpy (in: _Dest=0x3f1d7d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.227] wcscat (in: _Dest=0x3f1d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.227] wcscat (in: _Dest=0x3f1d7d8, _Source="Pangnirtung" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" [0176.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0176.228] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paramaribo", cAlternateFileName="PARAMA~1")) returned 1 [0176.228] wcscmp (_String1="Paramaribo", _String2=".") returned 1 [0176.228] wcscmp (_String1="Paramaribo", _String2="..") returned 1 [0176.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d850 [0176.228] wcscpy (in: _Dest=0x3f1d850, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.228] wcscat (in: _Dest=0x3f1d850, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.228] wcscat (in: _Dest=0x3f1d850, _Source="Paramaribo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" [0176.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0176.229] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phoenix", cAlternateFileName="")) returned 1 [0176.229] wcscmp (_String1="Phoenix", _String2=".") returned 1 [0176.229] wcscmp (_String1="Phoenix", _String2="..") returned 1 [0176.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29100 [0176.230] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.230] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.230] wcscat (in: _Dest=0x3f29100, _Source="Phoenix" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" [0176.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0176.231] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port-au-Prince", cAlternateFileName="PORT-A~1")) returned 1 [0176.231] wcscmp (_String1="Port-au-Prince", _String2=".") returned 1 [0176.231] wcscmp (_String1="Port-au-Prince", _String2="..") returned 1 [0176.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e102f0 [0176.231] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.231] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.231] wcscat (in: _Dest=0x3e102f0, _Source="Port-au-Prince" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" [0176.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0176.232] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto_Velho", cAlternateFileName="PORTO_~1")) returned 1 [0176.232] wcscmp (_String1="Porto_Velho", _String2=".") returned 1 [0176.232] wcscmp (_String1="Porto_Velho", _String2="..") returned 1 [0176.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d8c8 [0176.232] wcscpy (in: _Dest=0x3f1d8c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.232] wcscat (in: _Dest=0x3f1d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.232] wcscat (in: _Dest=0x3f1d8c8, _Source="Porto_Velho" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" [0176.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0176.233] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_of_Spain", cAlternateFileName="PORT_O~1")) returned 1 [0176.233] wcscmp (_String1="Port_of_Spain", _String2=".") returned 1 [0176.233] wcscmp (_String1="Port_of_Spain", _String2="..") returned 1 [0176.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0176.233] wcscpy (in: _Dest=0x3f1d238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.233] wcscat (in: _Dest=0x3f1d238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.233] wcscat (in: _Dest=0x3f1d238, _Source="Port_of_Spain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" [0176.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0176.234] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Puerto_Rico", cAlternateFileName="PUERTO~1")) returned 1 [0176.234] wcscmp (_String1="Puerto_Rico", _String2=".") returned 1 [0176.234] wcscmp (_String1="Puerto_Rico", _String2="..") returned 1 [0176.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d508 [0176.234] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.234] wcscat (in: _Dest=0x3f1d508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.234] wcscat (in: _Dest=0x3f1d508, _Source="Puerto_Rico" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" [0176.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0176.235] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rainy_River", cAlternateFileName="RAINY_~1")) returned 1 [0176.236] wcscmp (_String1="Rainy_River", _String2=".") returned 1 [0176.236] wcscmp (_String1="Rainy_River", _String2="..") returned 1 [0176.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1cf68 [0176.236] wcscpy (in: _Dest=0x3f1cf68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.236] wcscat (in: _Dest=0x3f1cf68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.236] wcscat (in: _Dest=0x3f1cf68, _Source="Rainy_River" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" [0176.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0176.237] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rankin_Inlet", cAlternateFileName="RANKIN~1")) returned 1 [0176.237] wcscmp (_String1="Rankin_Inlet", _String2=".") returned 1 [0176.237] wcscmp (_String1="Rankin_Inlet", _String2="..") returned 1 [0176.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d940 [0176.237] wcscpy (in: _Dest=0x3f1d940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.237] wcscat (in: _Dest=0x3f1d940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.237] wcscat (in: _Dest=0x3f1d940, _Source="Rankin_Inlet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" [0176.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0176.239] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recife", cAlternateFileName="")) returned 1 [0176.239] wcscmp (_String1="Recife", _String2=".") returned 1 [0176.239] wcscmp (_String1="Recife", _String2="..") returned 1 [0176.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b10 [0176.239] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.239] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.239] wcscat (in: _Dest=0x3f29b10, _Source="Recife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" [0176.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0176.240] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Regina", cAlternateFileName="")) returned 1 [0176.240] wcscmp (_String1="Regina", _String2=".") returned 1 [0176.240] wcscmp (_String1="Regina", _String2="..") returned 1 [0176.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f294f0 [0176.240] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.241] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.241] wcscat (in: _Dest=0x3f294f0, _Source="Regina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" [0176.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0176.242] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resolute", cAlternateFileName="")) returned 1 [0176.242] wcscmp (_String1="Resolute", _String2=".") returned 1 [0176.242] wcscmp (_String1="Resolute", _String2="..") returned 1 [0176.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29250 [0176.242] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.242] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.242] wcscat (in: _Dest=0x3f29250, _Source="Resolute" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" [0176.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0176.243] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="RIO_BR~1")) returned 1 [0176.243] wcscmp (_String1="Rio_Branco", _String2=".") returned 1 [0176.244] wcscmp (_String1="Rio_Branco", _String2="..") returned 1 [0176.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d2b0 [0176.244] wcscpy (in: _Dest=0x3f1d2b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.244] wcscat (in: _Dest=0x3f1d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.244] wcscat (in: _Dest=0x3f1d2b0, _Source="Rio_Branco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" [0176.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0176.245] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1 [0176.245] wcscmp (_String1="Santarem", _String2=".") returned 1 [0176.245] wcscmp (_String1="Santarem", _String2="..") returned 1 [0176.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29c60 [0176.245] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.245] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.245] wcscat (in: _Dest=0x3f29c60, _Source="Santarem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" [0176.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0176.246] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santa_Isabel", cAlternateFileName="SANTA_~1")) returned 1 [0176.246] wcscmp (_String1="Santa_Isabel", _String2=".") returned 1 [0176.246] wcscmp (_String1="Santa_Isabel", _String2="..") returned 1 [0176.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1ce78 [0176.246] wcscpy (in: _Dest=0x3f1ce78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.247] wcscat (in: _Dest=0x3f1ce78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.247] wcscat (in: _Dest=0x3f1ce78, _Source="Santa_Isabel" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" [0176.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1ce78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0176.248] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santiago", cAlternateFileName="")) returned 1 [0176.248] wcscmp (_String1="Santiago", _String2=".") returned 1 [0176.248] wcscmp (_String1="Santiago", _String2="..") returned 1 [0176.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f298e0 [0176.248] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.248] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.248] wcscat (in: _Dest=0x3f298e0, _Source="Santiago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" [0176.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0176.528] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santo_Domingo", cAlternateFileName="SANTO_~1")) returned 1 [0176.528] wcscmp (_String1="Santo_Domingo", _String2=".") returned 1 [0176.528] wcscmp (_String1="Santo_Domingo", _String2="..") returned 1 [0176.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0176.528] wcscpy (in: _Dest=0x3f1daa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0176.528] wcscat (in: _Dest=0x3f1daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0176.528] wcscat (in: _Dest=0x3f1daa8, _Source="Santo_Domingo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" [0179.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0179.399] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Paulo", cAlternateFileName="SAO_PA~1")) returned 1 [0179.399] wcscmp (_String1="Sao_Paulo", _String2=".") returned 1 [0179.399] wcscmp (_String1="Sao_Paulo", _String2="..") returned 1 [0179.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29250 [0179.400] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.400] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.400] wcscat (in: _Dest=0x3f29250, _Source="Sao_Paulo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" [0179.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0179.401] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scoresbysund", cAlternateFileName="SCORES~1")) returned 1 [0179.401] wcscmp (_String1="Scoresbysund", _String2=".") returned 1 [0179.401] wcscmp (_String1="Scoresbysund", _String2="..") returned 1 [0179.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f1d2b0 [0179.401] wcscpy (in: _Dest=0x3f1d2b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.401] wcscat (in: _Dest=0x3f1d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.401] wcscat (in: _Dest=0x3f1d2b0, _Source="Scoresbysund" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" [0179.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0179.402] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sitka", cAlternateFileName="")) returned 1 [0179.402] wcscmp (_String1="Sitka", _String2=".") returned 1 [0179.402] wcscmp (_String1="Sitka", _String2="..") returned 1 [0179.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0179.402] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.402] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.402] wcscat (in: _Dest=0x3d8be50, _Source="Sitka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" [0179.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0179.403] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Johns", cAlternateFileName="")) returned 1 [0179.403] wcscmp (_String1="St_Johns", _String2=".") returned 1 [0179.403] wcscmp (_String1="St_Johns", _String2="..") returned 1 [0179.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f294f0 [0179.403] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.403] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.403] wcscat (in: _Dest=0x3f294f0, _Source="St_Johns" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" [0179.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0179.405] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Kitts", cAlternateFileName="")) returned 1 [0179.406] wcscmp (_String1="St_Kitts", _String2=".") returned 1 [0179.406] wcscmp (_String1="St_Kitts", _String2="..") returned 1 [0179.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29b10 [0179.406] wcscpy (in: _Dest=0x3f29b10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.406] wcscat (in: _Dest=0x3f29b10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.406] wcscat (in: _Dest=0x3f29b10, _Source="St_Kitts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" [0179.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0179.407] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Lucia", cAlternateFileName="")) returned 1 [0179.407] wcscmp (_String1="St_Lucia", _String2=".") returned 1 [0179.407] wcscmp (_String1="St_Lucia", _String2="..") returned 1 [0179.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29100 [0179.407] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.407] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.407] wcscat (in: _Dest=0x3f29100, _Source="St_Lucia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" [0179.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0179.408] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Thomas", cAlternateFileName="ST_THO~1")) returned 1 [0179.408] wcscmp (_String1="St_Thomas", _String2=".") returned 1 [0179.408] wcscmp (_String1="St_Thomas", _String2="..") returned 1 [0179.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29d40 [0179.408] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.408] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.408] wcscat (in: _Dest=0x3f29d40, _Source="St_Thomas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" [0179.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0179.409] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="ST_VIN~1")) returned 1 [0179.409] wcscmp (_String1="St_Vincent", _String2=".") returned 1 [0179.409] wcscmp (_String1="St_Vincent", _String2="..") returned 1 [0179.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d0d0 [0179.409] wcscpy (in: _Dest=0x3f1d0d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.409] wcscat (in: _Dest=0x3f1d0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.409] wcscat (in: _Dest=0x3f1d0d0, _Source="St_Vincent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" [0179.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0179.410] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swift_Current", cAlternateFileName="SWIFT_~1")) returned 1 [0179.410] wcscmp (_String1="Swift_Current", _String2=".") returned 1 [0179.410] wcscmp (_String1="Swift_Current", _String2="..") returned 1 [0179.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d1c0 [0179.410] wcscpy (in: _Dest=0x3f1d1c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.410] wcscat (in: _Dest=0x3f1d1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.410] wcscat (in: _Dest=0x3f1d1c0, _Source="Swift_Current" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" [0179.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0179.411] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tegucigalpa", cAlternateFileName="TEGUCI~1")) returned 1 [0179.411] wcscmp (_String1="Tegucigalpa", _String2=".") returned 1 [0179.411] wcscmp (_String1="Tegucigalpa", _String2="..") returned 1 [0179.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d850 [0179.411] wcscpy (in: _Dest=0x3f1d850, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.412] wcscat (in: _Dest=0x3f1d850, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.412] wcscat (in: _Dest=0x3f1d850, _Source="Tegucigalpa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" [0179.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0179.413] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thule", cAlternateFileName="")) returned 1 [0179.413] wcscmp (_String1="Thule", _String2=".") returned 1 [0179.413] wcscmp (_String1="Thule", _String2="..") returned 1 [0179.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e3b0 [0179.413] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.413] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.413] wcscat (in: _Dest=0x3d8e3b0, _Source="Thule" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" [0179.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0179.414] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thunder_Bay", cAlternateFileName="THUNDE~1")) returned 1 [0179.414] wcscmp (_String1="Thunder_Bay", _String2=".") returned 1 [0179.414] wcscmp (_String1="Thunder_Bay", _String2="..") returned 1 [0179.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d8c8 [0179.414] wcscpy (in: _Dest=0x3f1d8c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.414] wcscat (in: _Dest=0x3f1d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.414] wcscat (in: _Dest=0x3f1d8c8, _Source="Thunder_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" [0179.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0179.415] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tijuana", cAlternateFileName="")) returned 1 [0179.415] wcscmp (_String1="Tijuana", _String2=".") returned 1 [0179.415] wcscmp (_String1="Tijuana", _String2="..") returned 1 [0179.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f296b0 [0179.415] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.415] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.415] wcscat (in: _Dest=0x3f296b0, _Source="Tijuana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" [0179.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0179.416] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toronto", cAlternateFileName="")) returned 1 [0179.417] wcscmp (_String1="Toronto", _String2=".") returned 1 [0179.417] wcscmp (_String1="Toronto", _String2="..") returned 1 [0179.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f298e0 [0179.417] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.417] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.417] wcscat (in: _Dest=0x3f298e0, _Source="Toronto" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" [0179.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0179.418] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tortola", cAlternateFileName="")) returned 1 [0179.418] wcscmp (_String1="Tortola", _String2=".") returned 1 [0179.418] wcscmp (_String1="Tortola", _String2="..") returned 1 [0179.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29cd0 [0179.418] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.418] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.418] wcscat (in: _Dest=0x3f29cd0, _Source="Tortola" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" [0179.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0179.419] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vancouver", cAlternateFileName="VANCOU~1")) returned 1 [0179.419] wcscmp (_String1="Vancouver", _String2=".") returned 1 [0179.419] wcscmp (_String1="Vancouver", _String2="..") returned 1 [0179.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0179.419] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.419] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.419] wcscat (in: _Dest=0x3f29090, _Source="Vancouver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" [0179.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0179.424] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whitehorse", cAlternateFileName="WHITEH~1")) returned 1 [0179.424] wcscmp (_String1="Whitehorse", _String2=".") returned 1 [0179.424] wcscmp (_String1="Whitehorse", _String2="..") returned 1 [0179.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d238 [0179.424] wcscpy (in: _Dest=0x3f1d238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.424] wcscat (in: _Dest=0x3f1d238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.424] wcscat (in: _Dest=0x3f1d238, _Source="Whitehorse" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" [0179.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0179.425] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winnipeg", cAlternateFileName="")) returned 1 [0179.425] wcscmp (_String1="Winnipeg", _String2=".") returned 1 [0179.425] wcscmp (_String1="Winnipeg", _String2="..") returned 1 [0179.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29410 [0179.425] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.425] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.425] wcscat (in: _Dest=0x3f29410, _Source="Winnipeg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" [0179.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0179.427] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutat", cAlternateFileName="")) returned 1 [0179.427] wcscmp (_String1="Yakutat", _String2=".") returned 1 [0179.427] wcscmp (_String1="Yakutat", _String2="..") returned 1 [0179.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29790 [0179.427] wcscpy (in: _Dest=0x3f29790, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.427] wcscat (in: _Dest=0x3f29790, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.427] wcscat (in: _Dest=0x3f29790, _Source="Yakutat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" [0179.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0179.428] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 1 [0179.428] wcscmp (_String1="Yellowknife", _String2=".") returned 1 [0179.429] wcscmp (_String1="Yellowknife", _String2="..") returned 1 [0179.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d508 [0179.429] wcscpy (in: _Dest=0x3f1d508, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0179.429] wcscat (in: _Dest=0x3f1d508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0179.429] wcscat (in: _Dest=0x3f1d508, _Source="Yellowknife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" [0179.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0179.430] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 0 [0179.430] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0179.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0179.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0179.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 3109 os_tid = 0x11b0 [0161.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bb78 [0161.110] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0161.110] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0161.110] wcscat (in: _Dest=0x3d8bb78, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*" [0161.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0161.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0163.388] wcscmp (_String1=".", _String2=".") returned 0 [0163.388] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.388] wcscmp (_String1="..", _String2=".") returned 1 [0163.388] wcscmp (_String1="..", _String2="..") returned 0 [0163.388] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1 [0163.388] wcscmp (_String1="Casey", _String2=".") returned 1 [0163.388] wcscmp (_String1="Casey", _String2="..") returned 1 [0163.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29170 [0163.388] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0163.388] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0163.388] wcscat (in: _Dest=0x3f29170, _Source="Casey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" [0169.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0169.638] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Davis", cAlternateFileName="")) returned 1 [0169.638] wcscmp (_String1="Davis", _String2=".") returned 1 [0169.638] wcscmp (_String1="Davis", _String2="..") returned 1 [0169.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29870 [0169.638] wcscpy (in: _Dest=0x3f29870, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.638] wcscat (in: _Dest=0x3f29870, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.638] wcscat (in: _Dest=0x3f29870, _Source="Davis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" [0169.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0169.640] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="DUMONT~1")) returned 1 [0169.640] wcscmp (_String1="DumontDUrville", _String2=".") returned 1 [0169.640] wcscmp (_String1="DumontDUrville", _String2="..") returned 1 [0169.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674bcb8 [0169.640] wcscpy (in: _Dest=0x674bcb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.640] wcscat (in: _Dest=0x674bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.640] wcscat (in: _Dest=0x674bcb8, _Source="DumontDUrville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" [0169.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0169.641] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="MACQUA~1")) returned 1 [0169.641] wcscmp (_String1="Macquarie", _String2=".") returned 1 [0169.641] wcscmp (_String1="Macquarie", _String2="..") returned 1 [0169.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0e70 [0169.641] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.641] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.641] wcscat (in: _Dest=0x66d0e70, _Source="Macquarie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" [0169.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0169.642] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mawson", cAlternateFileName="")) returned 1 [0169.642] wcscmp (_String1="Mawson", _String2=".") returned 1 [0169.642] wcscmp (_String1="Mawson", _String2="..") returned 1 [0169.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29100 [0169.642] wcscpy (in: _Dest=0x3f29100, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.642] wcscat (in: _Dest=0x3f29100, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.642] wcscat (in: _Dest=0x3f29100, _Source="Mawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" [0169.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0169.643] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="McMurdo", cAlternateFileName="")) returned 1 [0169.643] wcscmp (_String1="McMurdo", _String2=".") returned 1 [0169.643] wcscmp (_String1="McMurdo", _String2="..") returned 1 [0169.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0060 [0169.643] wcscpy (in: _Dest=0x66d0060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.644] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.644] wcscat (in: _Dest=0x66d0060, _Source="McMurdo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" [0169.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0169.645] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palmer", cAlternateFileName="")) returned 1 [0169.645] wcscmp (_String1="Palmer", _String2=".") returned 1 [0169.645] wcscmp (_String1="Palmer", _String2="..") returned 1 [0169.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29e20 [0169.645] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.645] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.645] wcscat (in: _Dest=0x3f29e20, _Source="Palmer" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" [0169.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0169.646] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rothera", cAlternateFileName="")) returned 1 [0169.646] wcscmp (_String1="Rothera", _String2=".") returned 1 [0169.646] wcscmp (_String1="Rothera", _String2="..") returned 1 [0169.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0ee8 [0169.646] wcscpy (in: _Dest=0x66d0ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.646] wcscat (in: _Dest=0x66d0ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.646] wcscat (in: _Dest=0x66d0ee8, _Source="Rothera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" [0169.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0169.647] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Syowa", cAlternateFileName="")) returned 1 [0169.647] wcscmp (_String1="Syowa", _String2=".") returned 1 [0169.647] wcscmp (_String1="Syowa", _String2="..") returned 1 [0169.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29c60 [0169.647] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.647] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.647] wcscat (in: _Dest=0x3f29c60, _Source="Syowa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" [0169.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0169.648] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 1 [0169.648] wcscmp (_String1="Vostok", _String2=".") returned 1 [0169.648] wcscmp (_String1="Vostok", _String2="..") returned 1 [0169.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29250 [0169.648] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.648] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.648] wcscat (in: _Dest=0x3f29250, _Source="Vostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" [0169.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0169.649] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 0 [0169.649] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0169.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0169.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 [0169.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 3110 os_tid = 0x930 [0161.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0161.111] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0161.111] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0161.111] wcscat (in: _Dest=0x2fe6cc8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*" [0161.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9e98 [0161.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0163.397] wcscmp (_String1=".", _String2=".") returned 0 [0163.397] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.399] wcscmp (_String1="..", _String2=".") returned 1 [0165.399] wcscmp (_String1="..", _String2="..") returned 0 [0165.399] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aden", cAlternateFileName="")) returned 1 [0165.399] wcscmp (_String1="Aden", _String2=".") returned 1 [0165.399] wcscmp (_String1="Aden", _String2="..") returned 1 [0165.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0165.399] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0165.399] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0165.399] wcscat (in: _Dest=0x2fe6f08, _Source="Aden" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" [0172.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden")) returned 0x20 [0172.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0172.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.757] GetLastError () returned 0x5 [0172.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0172.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0172.757] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Almaty", cAlternateFileName="")) returned 1 [0172.757] wcscmp (_String1="Almaty", _String2=".") returned 1 [0172.757] wcscmp (_String1="Almaty", _String2="..") returned 1 [0172.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.758] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.758] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.758] wcscat (in: _Dest=0x3d8ea30, _Source="Almaty" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" [0172.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty")) returned 0x20 [0172.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0172.758] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.758] GetLastError () returned 0x5 [0172.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0172.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.759] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amman", cAlternateFileName="")) returned 1 [0172.759] wcscmp (_String1="Amman", _String2=".") returned 1 [0172.759] wcscmp (_String1="Amman", _String2="..") returned 1 [0172.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ea30 [0172.759] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.759] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.759] wcscat (in: _Dest=0x3d8ea30, _Source="Amman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" [0172.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman")) returned 0x20 [0172.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0172.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.760] GetLastError () returned 0x5 [0172.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0172.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.760] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anadyr", cAlternateFileName="")) returned 1 [0172.760] wcscmp (_String1="Anadyr", _String2=".") returned 1 [0172.760] wcscmp (_String1="Anadyr", _String2="..") returned 1 [0172.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.760] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.760] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.760] wcscat (in: _Dest=0x3d8ea30, _Source="Anadyr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" [0172.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr")) returned 0x20 [0173.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0173.567] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.567] GetLastError () returned 0x5 [0173.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0173.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0173.567] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtau", cAlternateFileName="")) returned 1 [0173.568] wcscmp (_String1="Aqtau", _String2=".") returned 1 [0173.568] wcscmp (_String1="Aqtau", _String2="..") returned 1 [0173.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ea30 [0173.568] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.568] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.568] wcscat (in: _Dest=0x3d8ea30, _Source="Aqtau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" [0173.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0173.570] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtobe", cAlternateFileName="")) returned 1 [0173.570] wcscmp (_String1="Aqtobe", _String2=".") returned 1 [0173.570] wcscmp (_String1="Aqtobe", _String2="..") returned 1 [0173.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e7c0 [0173.570] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.570] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.570] wcscat (in: _Dest=0x3d8e7c0, _Source="Aqtobe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" [0173.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0173.571] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ashgabat", cAlternateFileName="")) returned 1 [0173.571] wcscmp (_String1="Ashgabat", _String2=".") returned 1 [0173.571] wcscmp (_String1="Ashgabat", _String2="..") returned 1 [0173.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e140 [0173.571] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.571] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.571] wcscat (in: _Dest=0x3d8e140, _Source="Ashgabat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" [0173.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0173.572] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baghdad", cAlternateFileName="")) returned 1 [0173.572] wcscmp (_String1="Baghdad", _String2=".") returned 1 [0173.572] wcscmp (_String1="Baghdad", _String2="..") returned 1 [0173.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d3d8 [0173.572] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.572] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.572] wcscat (in: _Dest=0x3d8d3d8, _Source="Baghdad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" [0173.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0173.573] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1 [0173.573] wcscmp (_String1="Bahrain", _String2=".") returned 1 [0173.573] wcscmp (_String1="Bahrain", _String2="..") returned 1 [0173.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e960 [0173.573] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.573] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.573] wcscat (in: _Dest=0x3d8e960, _Source="Bahrain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" [0173.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0173.574] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1 [0173.574] wcscmp (_String1="Baku", _String2=".") returned 1 [0173.574] wcscmp (_String1="Baku", _String2="..") returned 1 [0173.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c68 [0173.575] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.575] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.575] wcscat (in: _Dest=0x2fe6c68, _Source="Baku" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" [0173.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0173.576] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangkok", cAlternateFileName="")) returned 1 [0173.576] wcscmp (_String1="Bangkok", _String2=".") returned 1 [0173.576] wcscmp (_String1="Bangkok", _String2="..") returned 1 [0173.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de68 [0173.576] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.576] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.576] wcscat (in: _Dest=0x3d8de68, _Source="Bangkok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" [0173.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0173.578] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beirut", cAlternateFileName="")) returned 1 [0173.578] wcscmp (_String1="Beirut", _String2=".") returned 1 [0173.578] wcscmp (_String1="Beirut", _String2="..") returned 1 [0173.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e550 [0173.578] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.578] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.578] wcscat (in: _Dest=0x3d8e550, _Source="Beirut" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" [0173.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0173.579] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bishkek", cAlternateFileName="")) returned 1 [0173.579] wcscmp (_String1="Bishkek", _String2=".") returned 1 [0173.579] wcscmp (_String1="Bishkek", _String2="..") returned 1 [0173.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8c740 [0173.579] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.579] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.579] wcscat (in: _Dest=0x3d8c740, _Source="Bishkek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" [0173.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0173.580] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brunei", cAlternateFileName="")) returned 1 [0173.580] wcscmp (_String1="Brunei", _String2=".") returned 1 [0173.580] wcscmp (_String1="Brunei", _String2="..") returned 1 [0173.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bb78 [0173.580] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.580] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.580] wcscat (in: _Dest=0x3d8bb78, _Source="Brunei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" [0173.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0173.582] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Choibalsan", cAlternateFileName="CHOIBA~1")) returned 1 [0173.582] wcscmp (_String1="Choibalsan", _String2=".") returned 1 [0173.582] wcscmp (_String1="Choibalsan", _String2="..") returned 1 [0173.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29bf0 [0173.582] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.582] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.582] wcscat (in: _Dest=0x3f29bf0, _Source="Choibalsan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" [0173.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0173.583] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chongqing", cAlternateFileName="CHONGQ~1")) returned 1 [0173.583] wcscmp (_String1="Chongqing", _String2=".") returned 1 [0173.583] wcscmp (_String1="Chongqing", _String2="..") returned 1 [0173.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f296b0 [0173.583] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.583] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.583] wcscat (in: _Dest=0x3f296b0, _Source="Chongqing" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" [0173.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0173.584] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Colombo", cAlternateFileName="")) returned 1 [0173.584] wcscmp (_String1="Colombo", _String2=".") returned 1 [0173.584] wcscmp (_String1="Colombo", _String2="..") returned 1 [0173.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dbf8 [0173.584] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.584] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.584] wcscat (in: _Dest=0x3d8dbf8, _Source="Colombo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" [0173.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0173.586] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Damascus", cAlternateFileName="")) returned 1 [0173.586] wcscmp (_String1="Damascus", _String2=".") returned 1 [0173.586] wcscmp (_String1="Damascus", _String2="..") returned 1 [0173.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8de00 [0173.586] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.586] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.586] wcscat (in: _Dest=0x3d8de00, _Source="Damascus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" [0173.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0173.981] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dhaka", cAlternateFileName="")) returned 1 [0173.981] wcscmp (_String1="Dhaka", _String2=".") returned 1 [0173.981] wcscmp (_String1="Dhaka", _String2="..") returned 1 [0173.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e7c0 [0173.981] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0173.981] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0173.981] wcscat (in: _Dest=0x3d8e7c0, _Source="Dhaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" [0179.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0179.245] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dili", cAlternateFileName="")) returned 1 [0179.246] wcscmp (_String1="Dili", _String2=".") returned 1 [0179.246] wcscmp (_String1="Dili", _String2="..") returned 1 [0179.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6de8 [0179.246] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.246] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.246] wcscat (in: _Dest=0x2fe6de8, _Source="Dili" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" [0179.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0179.247] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dubai", cAlternateFileName="")) returned 1 [0179.247] wcscmp (_String1="Dubai", _String2=".") returned 1 [0179.247] wcscmp (_String1="Dubai", _String2="..") returned 1 [0179.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e278 [0179.247] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.247] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.247] wcscat (in: _Dest=0x3d8e278, _Source="Dubai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" [0179.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0179.248] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dushanbe", cAlternateFileName="")) returned 1 [0179.248] wcscmp (_String1="Dushanbe", _String2=".") returned 1 [0179.248] wcscmp (_String1="Dushanbe", _String2="..") returned 1 [0179.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8de68 [0179.248] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.248] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.248] wcscat (in: _Dest=0x3d8de68, _Source="Dushanbe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" [0179.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0179.249] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaza", cAlternateFileName="")) returned 1 [0179.249] wcscmp (_String1="Gaza", _String2=".") returned 1 [0179.249] wcscmp (_String1="Gaza", _String2="..") returned 1 [0179.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ae8 [0179.250] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.250] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.250] wcscat (in: _Dest=0x2fe6ae8, _Source="Gaza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" [0179.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0179.251] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harbin", cAlternateFileName="")) returned 1 [0179.251] wcscmp (_String1="Harbin", _String2=".") returned 1 [0179.251] wcscmp (_String1="Harbin", _String2="..") returned 1 [0179.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e960 [0179.251] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.251] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.251] wcscat (in: _Dest=0x3d8e960, _Source="Harbin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" [0179.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0179.252] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hebron", cAlternateFileName="")) returned 1 [0179.252] wcscmp (_String1="Hebron", _String2=".") returned 1 [0179.252] wcscmp (_String1="Hebron", _String2="..") returned 1 [0179.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d3d8 [0179.252] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.252] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.252] wcscat (in: _Dest=0x3d8d3d8, _Source="Hebron" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" [0179.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0179.253] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hong_Kong", cAlternateFileName="HONG_K~1")) returned 1 [0179.253] wcscmp (_String1="Hong_Kong", _String2=".") returned 1 [0179.253] wcscmp (_String1="Hong_Kong", _String2="..") returned 1 [0179.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29e20 [0179.253] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.253] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.253] wcscat (in: _Dest=0x3f29e20, _Source="Hong_Kong" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" [0179.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0179.254] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hovd", cAlternateFileName="")) returned 1 [0179.255] wcscmp (_String1="Hovd", _String2=".") returned 1 [0179.255] wcscmp (_String1="Hovd", _String2="..") returned 1 [0179.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0179.255] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.255] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.255] wcscat (in: _Dest=0x2fe1328, _Source="Hovd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" [0179.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0179.256] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho_Chi_Minh", cAlternateFileName="HO_CHI~1")) returned 1 [0179.256] wcscmp (_String1="Ho_Chi_Minh", _String2=".") returned 1 [0179.256] wcscmp (_String1="Ho_Chi_Minh", _String2="..") returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f293a0 [0179.256] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.256] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.256] wcscat (in: _Dest=0x3f293a0, _Source="Ho_Chi_Minh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" [0179.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0179.258] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Irkutsk", cAlternateFileName="")) returned 1 [0179.258] wcscmp (_String1="Irkutsk", _String2=".") returned 1 [0179.258] wcscmp (_String1="Irkutsk", _String2="..") returned 1 [0179.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dbf8 [0179.258] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.258] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.258] wcscat (in: _Dest=0x3d8dbf8, _Source="Irkutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" [0179.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0179.259] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jakarta", cAlternateFileName="")) returned 1 [0179.260] wcscmp (_String1="Jakarta", _String2=".") returned 1 [0179.260] wcscmp (_String1="Jakarta", _String2="..") returned 1 [0179.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de00 [0179.260] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.260] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.260] wcscat (in: _Dest=0x3d8de00, _Source="Jakarta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" [0179.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0179.261] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jayapura", cAlternateFileName="")) returned 1 [0179.261] wcscmp (_String1="Jayapura", _String2=".") returned 1 [0179.261] wcscmp (_String1="Jayapura", _String2="..") returned 1 [0179.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ccf0 [0179.261] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.261] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.261] wcscat (in: _Dest=0x3d8ccf0, _Source="Jayapura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" [0179.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0179.262] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jerusalem", cAlternateFileName="JERUSA~1")) returned 1 [0179.262] wcscmp (_String1="Jerusalem", _String2=".") returned 1 [0179.262] wcscmp (_String1="Jerusalem", _String2="..") returned 1 [0179.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0179.263] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.263] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.263] wcscat (in: _Dest=0x3f29020, _Source="Jerusalem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" [0179.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0179.264] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kabul", cAlternateFileName="")) returned 1 [0179.264] wcscmp (_String1="Kabul", _String2=".") returned 1 [0179.264] wcscmp (_String1="Kabul", _String2="..") returned 1 [0179.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bb78 [0179.264] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.264] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.264] wcscat (in: _Dest=0x3d8bb78, _Source="Kabul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" [0179.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0179.265] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kamchatka", cAlternateFileName="KAMCHA~1")) returned 1 [0179.265] wcscmp (_String1="Kamchatka", _String2=".") returned 1 [0179.265] wcscmp (_String1="Kamchatka", _String2="..") returned 1 [0179.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29c60 [0179.265] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.266] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.266] wcscat (in: _Dest=0x3f29c60, _Source="Kamchatka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" [0179.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0179.266] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Karachi", cAlternateFileName="")) returned 1 [0179.267] wcscmp (_String1="Karachi", _String2=".") returned 1 [0179.267] wcscmp (_String1="Karachi", _String2="..") returned 1 [0179.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0179.267] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.267] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.267] wcscat (in: _Dest=0x3d8e140, _Source="Karachi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" [0179.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0179.268] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kashgar", cAlternateFileName="")) returned 1 [0179.268] wcscmp (_String1="Kashgar", _String2=".") returned 1 [0179.268] wcscmp (_String1="Kashgar", _String2="..") returned 1 [0179.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ba40 [0179.268] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0179.268] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0179.268] wcscat (in: _Dest=0x3d8ba40, _Source="Kashgar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" [0179.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0179.269] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kathmandu", cAlternateFileName="KATHMA~1")) returned 1 [0181.679] wcscmp (_String1="Kathmandu", _String2=".") returned 1 [0181.679] wcscmp (_String1="Kathmandu", _String2="..") returned 1 [0181.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29bf0 [0181.679] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0181.679] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0181.679] wcscat (in: _Dest=0x3f29bf0, _Source="Kathmandu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" [0182.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0182.931] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khandyga", cAlternateFileName="")) returned 1 [0182.931] wcscmp (_String1="Khandyga", _String2=".") returned 1 [0182.931] wcscmp (_String1="Khandyga", _String2="..") returned 1 [0182.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0182.931] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.931] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.931] wcscat (in: _Dest=0x3d8e2e0, _Source="Khandyga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" [0182.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0182.932] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kolkata", cAlternateFileName="")) returned 1 [0182.932] wcscmp (_String1="Kolkata", _String2=".") returned 1 [0182.932] wcscmp (_String1="Kolkata", _String2="..") returned 1 [0182.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e7c0 [0182.933] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.933] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.933] wcscat (in: _Dest=0x3d8e7c0, _Source="Kolkata" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" [0182.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0182.934] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Krasnoyarsk", cAlternateFileName="KRASNO~1")) returned 1 [0182.934] wcscmp (_String1="Krasnoyarsk", _String2=".") returned 1 [0182.934] wcscmp (_String1="Krasnoyarsk", _String2="..") returned 1 [0182.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29b80 [0182.934] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.934] wcscat (in: _Dest=0x3f29b80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.934] wcscat (in: _Dest=0x3f29b80, _Source="Krasnoyarsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" [0182.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0182.935] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuala_Lumpur", cAlternateFileName="KUALA_~1")) returned 1 [0182.935] wcscmp (_String1="Kuala_Lumpur", _String2=".") returned 1 [0182.935] wcscmp (_String1="Kuala_Lumpur", _String2="..") returned 1 [0182.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29640 [0182.935] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.935] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.935] wcscat (in: _Dest=0x3f29640, _Source="Kuala_Lumpur" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" [0182.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0182.936] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuching", cAlternateFileName="")) returned 1 [0182.936] wcscmp (_String1="Kuching", _String2=".") returned 1 [0182.936] wcscmp (_String1="Kuching", _String2="..") returned 1 [0182.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d8b8 [0182.936] wcscpy (in: _Dest=0x3d8d8b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.936] wcscat (in: _Dest=0x3d8d8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.936] wcscat (in: _Dest=0x3d8d8b8, _Source="Kuching" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" [0182.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0182.937] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuwait", cAlternateFileName="")) returned 1 [0182.937] wcscmp (_String1="Kuwait", _String2=".") returned 1 [0182.937] wcscmp (_String1="Kuwait", _String2="..") returned 1 [0182.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e550 [0182.937] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.937] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.937] wcscat (in: _Dest=0x3d8e550, _Source="Kuwait" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" [0182.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0182.938] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macau", cAlternateFileName="")) returned 1 [0182.939] wcscmp (_String1="Macau", _String2=".") returned 1 [0182.939] wcscmp (_String1="Macau", _String2="..") returned 1 [0182.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8c740 [0182.939] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.939] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.939] wcscat (in: _Dest=0x3d8c740, _Source="Macau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" [0182.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0182.940] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magadan", cAlternateFileName="")) returned 1 [0182.940] wcscmp (_String1="Magadan", _String2=".") returned 1 [0182.940] wcscmp (_String1="Magadan", _String2="..") returned 1 [0182.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e960 [0182.940] wcscpy (in: _Dest=0x3d8e960, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.941] wcscat (in: _Dest=0x3d8e960, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.941] wcscat (in: _Dest=0x3d8e960, _Source="Magadan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" [0182.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0182.960] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Makassar", cAlternateFileName="")) returned 1 [0182.960] wcscmp (_String1="Makassar", _String2=".") returned 1 [0182.960] wcscmp (_String1="Makassar", _String2="..") returned 1 [0182.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d3d8 [0182.960] wcscpy (in: _Dest=0x3d8d3d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.961] wcscat (in: _Dest=0x3d8d3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.961] wcscat (in: _Dest=0x3d8d3d8, _Source="Makassar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" [0182.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0182.963] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manila", cAlternateFileName="")) returned 1 [0182.963] wcscmp (_String1="Manila", _String2=".") returned 1 [0182.963] wcscmp (_String1="Manila", _String2="..") returned 1 [0182.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8dbf8 [0182.963] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.963] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.968] wcscat (in: _Dest=0x3d8dbf8, _Source="Manila" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" [0182.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0182.969] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Muscat", cAlternateFileName="")) returned 1 [0182.969] wcscmp (_String1="Muscat", _String2=".") returned 1 [0182.969] wcscmp (_String1="Muscat", _String2="..") returned 1 [0182.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8de00 [0182.969] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.969] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.969] wcscat (in: _Dest=0x3d8de00, _Source="Muscat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" [0182.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0182.970] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1 [0182.970] wcscmp (_String1="Nicosia", _String2=".") returned 1 [0182.970] wcscmp (_String1="Nicosia", _String2="..") returned 1 [0182.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0182.970] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.970] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.970] wcscat (in: _Dest=0x3d8ccf0, _Source="Nicosia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" [0182.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0182.972] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="NOVOKU~1")) returned 1 [0182.972] wcscmp (_String1="Novokuznetsk", _String2=".") returned 1 [0182.972] wcscmp (_String1="Novokuznetsk", _String2="..") returned 1 [0182.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f299c0 [0182.972] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.972] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.972] wcscat (in: _Dest=0x3f299c0, _Source="Novokuznetsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" [0182.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0182.973] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novosibirsk", cAlternateFileName="NOVOSI~1")) returned 1 [0182.973] wcscmp (_String1="Novosibirsk", _String2=".") returned 1 [0182.973] wcscmp (_String1="Novosibirsk", _String2="..") returned 1 [0182.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29a30 [0182.973] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.973] wcscat (in: _Dest=0x3f29a30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.973] wcscat (in: _Dest=0x3f29a30, _Source="Novosibirsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" [0182.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0182.974] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Omsk", cAlternateFileName="")) returned 1 [0182.974] wcscmp (_String1="Omsk", _String2=".") returned 1 [0182.975] wcscmp (_String1="Omsk", _String2="..") returned 1 [0182.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6de8 [0182.975] wcscpy (in: _Dest=0x2fe6de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.975] wcscat (in: _Dest=0x2fe6de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.975] wcscat (in: _Dest=0x2fe6de8, _Source="Omsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" [0182.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0182.976] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oral", cAlternateFileName="")) returned 1 [0182.976] wcscmp (_String1="Oral", _String2=".") returned 1 [0182.976] wcscmp (_String1="Oral", _String2="..") returned 1 [0182.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0182.976] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.976] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.976] wcscat (in: _Dest=0x2fe1328, _Source="Oral" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" [0182.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0182.977] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phnom_Penh", cAlternateFileName="PHNOM_~1")) returned 1 [0182.977] wcscmp (_String1="Phnom_Penh", _String2=".") returned 1 [0182.977] wcscmp (_String1="Phnom_Penh", _String2="..") returned 1 [0182.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f28ed0 [0182.977] wcscpy (in: _Dest=0x3f28ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.977] wcscat (in: _Dest=0x3f28ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.977] wcscat (in: _Dest=0x3f28ed0, _Source="Phnom_Penh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" [0182.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f28ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0182.978] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pontianak", cAlternateFileName="PONTIA~1")) returned 1 [0182.978] wcscmp (_String1="Pontianak", _String2=".") returned 1 [0182.978] wcscmp (_String1="Pontianak", _String2="..") returned 1 [0182.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29330 [0182.978] wcscpy (in: _Dest=0x3f29330, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.978] wcscat (in: _Dest=0x3f29330, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.978] wcscat (in: _Dest=0x3f29330, _Source="Pontianak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" [0182.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0182.979] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyongyang", cAlternateFileName="PYONGY~1")) returned 1 [0182.979] wcscmp (_String1="Pyongyang", _String2=".") returned 1 [0182.979] wcscmp (_String1="Pyongyang", _String2="..") returned 1 [0182.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29560 [0182.979] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.979] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.979] wcscat (in: _Dest=0x3f29560, _Source="Pyongyang" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" [0182.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0182.980] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qatar", cAlternateFileName="")) returned 1 [0182.981] wcscmp (_String1="Qatar", _String2=".") returned 1 [0182.981] wcscmp (_String1="Qatar", _String2="..") returned 1 [0182.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bb78 [0182.981] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.981] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.981] wcscat (in: _Dest=0x3d8bb78, _Source="Qatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" [0182.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0182.982] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qyzylorda", cAlternateFileName="QYZYLO~1")) returned 1 [0182.982] wcscmp (_String1="Qyzylorda", _String2=".") returned 1 [0182.982] wcscmp (_String1="Qyzylorda", _String2="..") returned 1 [0182.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29e20 [0182.982] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.982] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.982] wcscat (in: _Dest=0x3f29e20, _Source="Qyzylorda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" [0182.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0182.983] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rangoon", cAlternateFileName="")) returned 1 [0182.983] wcscmp (_String1="Rangoon", _String2=".") returned 1 [0182.983] wcscmp (_String1="Rangoon", _String2="..") returned 1 [0182.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0182.983] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.984] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.984] wcscat (in: _Dest=0x3d8e140, _Source="Rangoon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" [0182.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0182.985] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh", cAlternateFileName="")) returned 1 [0182.985] wcscmp (_String1="Riyadh", _String2=".") returned 1 [0182.985] wcscmp (_String1="Riyadh", _String2="..") returned 1 [0182.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ba40 [0182.985] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.985] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.985] wcscat (in: _Dest=0x3d8ba40, _Source="Riyadh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" [0182.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0182.986] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh87", cAlternateFileName="")) returned 1 [0182.986] wcscmp (_String1="Riyadh87", _String2=".") returned 1 [0182.986] wcscmp (_String1="Riyadh87", _String2="..") returned 1 [0182.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0182.986] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.986] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.986] wcscat (in: _Dest=0x3d8e278, _Source="Riyadh87" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" [0182.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0182.987] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh88", cAlternateFileName="")) returned 1 [0182.987] wcscmp (_String1="Riyadh88", _String2=".") returned 1 [0182.987] wcscmp (_String1="Riyadh88", _String2="..") returned 1 [0182.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8de68 [0182.987] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.987] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.987] wcscat (in: _Dest=0x3d8de68, _Source="Riyadh88" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" [0182.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0182.991] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh89", cAlternateFileName="")) returned 1 [0182.991] wcscmp (_String1="Riyadh89", _String2=".") returned 1 [0182.991] wcscmp (_String1="Riyadh89", _String2="..") returned 1 [0182.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0182.991] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.991] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.991] wcscat (in: _Dest=0x3d8ea30, _Source="Riyadh89" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" [0182.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0182.993] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sakhalin", cAlternateFileName="")) returned 1 [0182.993] wcscmp (_String1="Sakhalin", _String2=".") returned 1 [0182.993] wcscmp (_String1="Sakhalin", _String2="..") returned 1 [0182.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d510 [0182.993] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.993] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.993] wcscat (in: _Dest=0x3d8d510, _Source="Sakhalin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" [0182.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0182.994] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samarkand", cAlternateFileName="SAMARK~1")) returned 1 [0182.994] wcscmp (_String1="Samarkand", _String2=".") returned 1 [0182.994] wcscmp (_String1="Samarkand", _String2="..") returned 1 [0182.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0182.994] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.994] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.994] wcscat (in: _Dest=0x3f293a0, _Source="Samarkand" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" [0182.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0182.995] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seoul", cAlternateFileName="")) returned 1 [0182.995] wcscmp (_String1="Seoul", _String2=".") returned 1 [0182.995] wcscmp (_String1="Seoul", _String2="..") returned 1 [0182.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bf20 [0182.995] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.995] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.995] wcscat (in: _Dest=0x3d8bf20, _Source="Seoul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" [0182.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0182.996] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shanghai", cAlternateFileName="")) returned 1 [0182.996] wcscmp (_String1="Shanghai", _String2=".") returned 1 [0182.996] wcscmp (_String1="Shanghai", _String2="..") returned 1 [0182.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0182.996] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.996] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.996] wcscat (in: _Dest=0x3d8d4a8, _Source="Shanghai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" [0182.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0182.997] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Singapore", cAlternateFileName="SINGAP~1")) returned 1 [0182.997] wcscmp (_String1="Singapore", _String2=".") returned 1 [0182.997] wcscmp (_String1="Singapore", _String2="..") returned 1 [0182.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0182.997] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.997] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.997] wcscat (in: _Dest=0x3f29020, _Source="Singapore" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" [0182.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0182.999] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taipei", cAlternateFileName="")) returned 1 [0182.999] wcscmp (_String1="Taipei", _String2=".") returned 1 [0182.999] wcscmp (_String1="Taipei", _String2="..") returned 1 [0182.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bb10 [0182.999] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0182.999] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0182.999] wcscat (in: _Dest=0x3d8bb10, _Source="Taipei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" [0182.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0183.000] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tashkent", cAlternateFileName="")) returned 1 [0183.000] wcscmp (_String1="Tashkent", _String2=".") returned 1 [0183.000] wcscmp (_String1="Tashkent", _String2="..") returned 1 [0183.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8dd98 [0183.000] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.000] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.000] wcscat (in: _Dest=0x3d8dd98, _Source="Tashkent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" [0183.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0183.386] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tbilisi", cAlternateFileName="")) returned 1 [0183.386] wcscmp (_String1="Tbilisi", _String2=".") returned 1 [0183.386] wcscmp (_String1="Tbilisi", _String2="..") returned 1 [0183.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e348 [0183.386] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0183.386] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0183.387] wcscat (in: _Dest=0x3d8e348, _Source="Tbilisi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" [0191.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0191.587] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tehran", cAlternateFileName="")) returned 1 [0191.588] wcscmp (_String1="Tehran", _String2=".") returned 1 [0191.588] wcscmp (_String1="Tehran", _String2="..") returned 1 [0191.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d4a8 [0191.588] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.588] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.588] wcscat (in: _Dest=0x3d8d4a8, _Source="Tehran" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" [0191.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0191.589] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thimphu", cAlternateFileName="")) returned 1 [0191.589] wcscmp (_String1="Thimphu", _String2=".") returned 1 [0191.589] wcscmp (_String1="Thimphu", _String2="..") returned 1 [0191.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8bf20 [0191.589] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.589] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.589] wcscat (in: _Dest=0x3d8bf20, _Source="Thimphu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" [0191.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0191.591] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tokyo", cAlternateFileName="")) returned 1 [0191.591] wcscmp (_String1="Tokyo", _String2=".") returned 1 [0191.591] wcscmp (_String1="Tokyo", _String2="..") returned 1 [0191.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8ccf0 [0191.591] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.591] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.591] wcscat (in: _Dest=0x3d8ccf0, _Source="Tokyo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" [0191.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0191.593] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulaanbaatar", cAlternateFileName="ULAANB~1")) returned 1 [0191.593] wcscmp (_String1="Ulaanbaatar", _String2=".") returned 1 [0191.593] wcscmp (_String1="Ulaanbaatar", _String2="..") returned 1 [0191.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29950 [0191.593] wcscpy (in: _Dest=0x3f29950, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.593] wcscat (in: _Dest=0x3f29950, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.593] wcscat (in: _Dest=0x3f29950, _Source="Ulaanbaatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" [0191.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0191.594] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urumqi", cAlternateFileName="")) returned 1 [0191.594] wcscmp (_String1="Urumqi", _String2=".") returned 1 [0191.594] wcscmp (_String1="Urumqi", _String2="..") returned 1 [0191.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8bde8 [0191.594] wcscpy (in: _Dest=0x3d8bde8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.594] wcscat (in: _Dest=0x3d8bde8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.594] wcscat (in: _Dest=0x3d8bde8, _Source="Urumqi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" [0191.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0191.596] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ust-Nera", cAlternateFileName="")) returned 1 [0191.596] wcscmp (_String1="Ust-Nera", _String2=".") returned 1 [0191.596] wcscmp (_String1="Ust-Nera", _String2="..") returned 1 [0191.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d030 [0191.596] wcscpy (in: _Dest=0x3d8d030, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.596] wcscat (in: _Dest=0x3d8d030, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.596] wcscat (in: _Dest=0x3d8d030, _Source="Ust-Nera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" [0191.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0191.598] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vientiane", cAlternateFileName="VIENTI~1")) returned 1 [0191.598] wcscmp (_String1="Vientiane", _String2=".") returned 1 [0191.598] wcscmp (_String1="Vientiane", _String2="..") returned 1 [0191.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0191.598] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.598] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.598] wcscat (in: _Dest=0x3f29020, _Source="Vientiane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" [0191.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0191.599] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vladivostok", cAlternateFileName="VLADIV~1")) returned 1 [0191.599] wcscmp (_String1="Vladivostok", _String2=".") returned 1 [0191.599] wcscmp (_String1="Vladivostok", _String2="..") returned 1 [0191.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29e20 [0191.600] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.600] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.600] wcscat (in: _Dest=0x3f29e20, _Source="Vladivostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" [0191.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0191.601] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutsk", cAlternateFileName="")) returned 1 [0191.601] wcscmp (_String1="Yakutsk", _String2=".") returned 1 [0191.601] wcscmp (_String1="Yakutsk", _String2="..") returned 1 [0191.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e828 [0191.601] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.601] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.601] wcscat (in: _Dest=0x3d8e828, _Source="Yakutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" [0191.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0191.603] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yekaterinburg", cAlternateFileName="YEKATE~1")) returned 1 [0191.603] wcscmp (_String1="Yekaterinburg", _String2=".") returned 1 [0191.603] wcscmp (_String1="Yekaterinburg", _String2="..") returned 1 [0191.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1d5f8 [0191.603] wcscpy (in: _Dest=0x3f1d5f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.603] wcscat (in: _Dest=0x3f1d5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.603] wcscat (in: _Dest=0x3f1d5f8, _Source="Yekaterinburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" [0191.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0191.604] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 1 [0191.604] wcscmp (_String1="Yerevan", _String2=".") returned 1 [0191.604] wcscmp (_String1="Yerevan", _String2="..") returned 1 [0191.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8de68 [0191.605] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0191.605] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0191.605] wcscat (in: _Dest=0x3d8de68, _Source="Yerevan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" [0191.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0191.606] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 0 [0191.606] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0191.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9e98) returned 1 [0191.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0191.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7c80) returned 1 Thread: id = 3111 os_tid = 0x11b4 [0161.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e828 [0161.111] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0161.111] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0161.111] wcscat (in: _Dest=0x3d8e828, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*" [0161.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bad08 [0161.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0163.398] wcscmp (_String1=".", _String2=".") returned 0 [0163.398] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.398] wcscmp (_String1="..", _String2=".") returned 1 [0163.398] wcscmp (_String1="..", _String2="..") returned 0 [0163.398] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Azores", cAlternateFileName="")) returned 1 [0163.398] wcscmp (_String1="Azores", _String2=".") returned 1 [0163.398] wcscmp (_String1="Azores", _String2="..") returned 1 [0163.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29c60 [0163.398] wcscpy (in: _Dest=0x3f29c60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.398] wcscat (in: _Dest=0x3f29c60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.398] wcscat (in: _Dest=0x3f29c60, _Source="Azores" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" [0163.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0163.833] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bermuda", cAlternateFileName="")) returned 1 [0163.833] wcscmp (_String1="Bermuda", _String2=".") returned 1 [0163.833] wcscmp (_String1="Bermuda", _String2="..") returned 1 [0163.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29250 [0163.833] wcscpy (in: _Dest=0x3f29250, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.833] wcscat (in: _Dest=0x3f29250, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.833] wcscat (in: _Dest=0x3f29250, _Source="Bermuda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" [0163.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0163.834] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Canary", cAlternateFileName="")) returned 1 [0163.834] wcscmp (_String1="Canary", _String2=".") returned 1 [0163.834] wcscmp (_String1="Canary", _String2="..") returned 1 [0163.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29090 [0163.834] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.834] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.834] wcscat (in: _Dest=0x3f29090, _Source="Canary" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" [0163.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0163.835] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cape_Verde", cAlternateFileName="CAPE_V~1")) returned 1 [0163.836] wcscmp (_String1="Cape_Verde", _String2=".") returned 1 [0163.836] wcscmp (_String1="Cape_Verde", _String2="..") returned 1 [0163.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1b498 [0163.836] wcscpy (in: _Dest=0x3f1b498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.836] wcscat (in: _Dest=0x3f1b498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.836] wcscat (in: _Dest=0x3f1b498, _Source="Cape_Verde" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" [0163.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0163.837] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faroe", cAlternateFileName="")) returned 1 [0163.837] wcscmp (_String1="Faroe", _String2=".") returned 1 [0163.837] wcscmp (_String1="Faroe", _String2="..") returned 1 [0163.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f298e0 [0163.837] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.837] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.837] wcscat (in: _Dest=0x3f298e0, _Source="Faroe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" [0163.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0163.838] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madeira", cAlternateFileName="")) returned 1 [0163.839] wcscmp (_String1="Madeira", _String2=".") returned 1 [0163.839] wcscmp (_String1="Madeira", _String2="..") returned 1 [0163.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f299c0 [0163.839] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.839] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.839] wcscat (in: _Dest=0x3f299c0, _Source="Madeira" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" [0163.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0163.840] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reykjavik", cAlternateFileName="REYKJA~1")) returned 1 [0163.840] wcscmp (_String1="Reykjavik", _String2=".") returned 1 [0163.840] wcscmp (_String1="Reykjavik", _String2="..") returned 1 [0163.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1b3a8 [0163.840] wcscpy (in: _Dest=0x3f1b3a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.840] wcscat (in: _Dest=0x3f1b3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.840] wcscat (in: _Dest=0x3f1b3a8, _Source="Reykjavik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" [0163.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1b3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0163.841] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="South_Georgia", cAlternateFileName="SOUTH_~1")) returned 1 [0163.841] wcscmp (_String1="South_Georgia", _String2=".") returned 1 [0163.842] wcscmp (_String1="South_Georgia", _String2="..") returned 1 [0163.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3edbff8 [0163.842] wcscpy (in: _Dest=0x3edbff8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.842] wcscat (in: _Dest=0x3edbff8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.842] wcscat (in: _Dest=0x3edbff8, _Source="South_Georgia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" [0163.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0163.843] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stanley", cAlternateFileName="")) returned 1 [0163.843] wcscmp (_String1="Stanley", _String2=".") returned 1 [0163.843] wcscmp (_String1="Stanley", _String2="..") returned 1 [0163.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f296b0 [0163.843] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.843] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.843] wcscat (in: _Dest=0x3f296b0, _Source="Stanley" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" [0163.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0163.844] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 1 [0163.844] wcscmp (_String1="St_Helena", _String2=".") returned 1 [0163.844] wcscmp (_String1="St_Helena", _String2="..") returned 1 [0163.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1a958 [0163.844] wcscpy (in: _Dest=0x3f1a958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0163.844] wcscat (in: _Dest=0x3f1a958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0163.844] wcscat (in: _Dest=0x3f1a958, _Source="St_Helena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" [0163.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f1a958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0163.846] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 0 [0163.846] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0163.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bad08) returned 1 [0163.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0163.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 3112 os_tid = 0x11b8 [0161.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8d2a0 [0161.112] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0161.112] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0161.112] wcscat (in: _Dest=0x3d8d2a0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*" [0161.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0161.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0163.398] wcscmp (_String1=".", _String2=".") returned 0 [0163.398] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.398] wcscmp (_String1="..", _String2=".") returned 1 [0163.398] wcscmp (_String1="..", _String2="..") returned 0 [0163.399] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adelaide", cAlternateFileName="")) returned 1 [0163.399] wcscmp (_String1="Adelaide", _String2=".") returned 1 [0163.399] wcscmp (_String1="Adelaide", _String2="..") returned 1 [0163.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3014fe0 [0163.399] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0163.399] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0163.399] wcscat (in: _Dest=0x3014fe0, _Source="Adelaide" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" [0166.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3014fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0166.551] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brisbane", cAlternateFileName="")) returned 1 [0166.551] wcscmp (_String1="Brisbane", _String2=".") returned 1 [0166.551] wcscmp (_String1="Brisbane", _String2="..") returned 1 [0166.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0a38 [0166.551] wcscpy (in: _Dest=0x66d0a38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.551] wcscat (in: _Dest=0x66d0a38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.551] wcscat (in: _Dest=0x66d0a38, _Source="Brisbane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" [0166.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0166.552] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Broken_Hill", cAlternateFileName="BROKEN~1")) returned 1 [0166.552] wcscmp (_String1="Broken_Hill", _String2=".") returned 1 [0166.552] wcscmp (_String1="Broken_Hill", _String2="..") returned 1 [0166.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d03a8 [0166.552] wcscpy (in: _Dest=0x66d03a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.552] wcscat (in: _Dest=0x66d03a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.552] wcscat (in: _Dest=0x66d03a8, _Source="Broken_Hill" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" [0166.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d03a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0166.554] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currie", cAlternateFileName="")) returned 1 [0166.554] wcscmp (_String1="Currie", _String2=".") returned 1 [0166.554] wcscmp (_String1="Currie", _String2="..") returned 1 [0166.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5568 [0166.554] wcscpy (in: _Dest=0x66e5568, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.554] wcscat (in: _Dest=0x66e5568, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.554] wcscat (in: _Dest=0x66e5568, _Source="Currie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" [0166.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0166.555] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Darwin", cAlternateFileName="")) returned 1 [0166.555] wcscmp (_String1="Darwin", _String2=".") returned 1 [0166.555] wcscmp (_String1="Darwin", _String2="..") returned 1 [0166.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5f08 [0166.555] wcscpy (in: _Dest=0x66e5f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.556] wcscat (in: _Dest=0x66e5f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.556] wcscat (in: _Dest=0x66e5f08, _Source="Darwin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" [0166.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0166.557] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eucla", cAlternateFileName="")) returned 1 [0166.557] wcscmp (_String1="Eucla", _String2=".") returned 1 [0166.557] wcscmp (_String1="Eucla", _String2="..") returned 1 [0166.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5728 [0166.557] wcscpy (in: _Dest=0x66e5728, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.557] wcscat (in: _Dest=0x66e5728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.557] wcscat (in: _Dest=0x66e5728, _Source="Eucla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" [0166.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0166.558] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hobart", cAlternateFileName="")) returned 1 [0166.558] wcscmp (_String1="Hobart", _String2=".") returned 1 [0166.558] wcscmp (_String1="Hobart", _String2="..") returned 1 [0166.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e62f8 [0166.558] wcscpy (in: _Dest=0x66e62f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.558] wcscat (in: _Dest=0x66e62f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.559] wcscat (in: _Dest=0x66e62f8, _Source="Hobart" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" [0166.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e62f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0166.560] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lindeman", cAlternateFileName="")) returned 1 [0166.560] wcscmp (_String1="Lindeman", _String2=".") returned 1 [0166.560] wcscmp (_String1="Lindeman", _String2="..") returned 1 [0166.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0b28 [0166.560] wcscpy (in: _Dest=0x66d0b28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.560] wcscat (in: _Dest=0x66d0b28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.560] wcscat (in: _Dest=0x66d0b28, _Source="Lindeman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" [0166.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0166.561] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lord_Howe", cAlternateFileName="LORD_H~1")) returned 1 [0166.561] wcscmp (_String1="Lord_Howe", _String2=".") returned 1 [0166.561] wcscmp (_String1="Lord_Howe", _String2="..") returned 1 [0166.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0420 [0166.561] wcscpy (in: _Dest=0x66d0420, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.561] wcscat (in: _Dest=0x66d0420, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.562] wcscat (in: _Dest=0x66d0420, _Source="Lord_Howe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" [0166.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0166.563] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Melbourne", cAlternateFileName="MELBOU~1")) returned 1 [0166.563] wcscmp (_String1="Melbourne", _String2=".") returned 1 [0166.563] wcscmp (_String1="Melbourne", _String2="..") returned 1 [0166.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0498 [0166.563] wcscpy (in: _Dest=0x66d0498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.563] wcscat (in: _Dest=0x66d0498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.563] wcscat (in: _Dest=0x66d0498, _Source="Melbourne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" [0166.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0166.564] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perth", cAlternateFileName="")) returned 1 [0166.564] wcscmp (_String1="Perth", _String2=".") returned 1 [0166.564] wcscmp (_String1="Perth", _String2="..") returned 1 [0166.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x66e5c68 [0166.564] wcscpy (in: _Dest=0x66e5c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.564] wcscat (in: _Dest=0x66e5c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.564] wcscat (in: _Dest=0x66e5c68, _Source="Perth" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" [0166.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0166.565] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 1 [0166.565] wcscmp (_String1="Sydney", _String2=".") returned 1 [0166.565] wcscmp (_String1="Sydney", _String2="..") returned 1 [0166.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x66e5db8 [0166.565] wcscpy (in: _Dest=0x66e5db8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0166.565] wcscat (in: _Dest=0x66e5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0166.565] wcscat (in: _Dest=0x66e5db8, _Source="Sydney" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" [0166.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66e5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0166.566] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 0 [0166.566] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0166.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0166.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 [0166.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 3113 os_tid = 0x11bc [0161.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet")) returned 0x20 [0162.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0162.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.855] GetLastError () returned 0x5 [0162.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0162.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7808) returned 1 Thread: id = 3114 os_tid = 0x11c0 [0161.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt")) returned 0x20 [0162.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0162.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.857] GetLastError () returned 0x5 [0162.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0162.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 3115 os_tid = 0x11c4 [0161.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet")) returned 0x20 [0162.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0162.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.859] GetLastError () returned 0x5 [0162.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0162.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7650) returned 1 Thread: id = 3116 os_tid = 0x11e8 [0161.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est")) returned 0x20 [0162.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0162.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.861] GetLastError () returned 0x5 [0162.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0162.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7de0) returned 1 Thread: id = 3117 os_tid = 0x1208 [0161.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt")) returned 0x20 [0162.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0162.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.863] GetLastError () returned 0x5 [0162.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0162.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 3118 os_tid = 0x133c [0161.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3ef7288 [0161.116] wcscpy (in: _Dest=0x3ef7288, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0161.116] wcscat (in: _Dest=0x3ef7288, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0161.116] wcscat (in: _Dest=0x3ef7288, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*" [0161.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6979f50 [0161.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0163.400] wcscmp (_String1=".", _String2=".") returned 0 [0163.400] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.400] wcscmp (_String1="..", _String2=".") returned 1 [0163.400] wcscmp (_String1="..", _String2="..") returned 0 [0163.400] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0163.400] wcscmp (_String1="GMT", _String2=".") returned 1 [0163.400] wcscmp (_String1="GMT", _String2="..") returned 1 [0163.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe65a8 [0163.400] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0163.400] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0163.400] wcscat (in: _Dest=0x2fe65a8, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" [0168.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0168.301] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="GMT_1~1")) returned 1 [0168.301] wcscmp (_String1="GMT+1", _String2=".") returned 1 [0168.301] wcscmp (_String1="GMT+1", _String2="..") returned 1 [0168.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0168.301] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.301] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.301] wcscat (in: _Dest=0x2fe6c08, _Source="GMT+1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" [0168.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0168.302] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+10", cAlternateFileName="GMT_10~1")) returned 1 [0168.302] wcscmp (_String1="GMT+10", _String2=".") returned 1 [0168.305] wcscmp (_String1="GMT+10", _String2="..") returned 1 [0168.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e7c0 [0168.305] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.305] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.305] wcscat (in: _Dest=0x3d8e7c0, _Source="GMT+10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" [0168.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0168.306] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+11", cAlternateFileName="GMT_11~1")) returned 1 [0168.306] wcscmp (_String1="GMT+11", _String2=".") returned 1 [0168.306] wcscmp (_String1="GMT+11", _String2="..") returned 1 [0168.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e348 [0168.306] wcscpy (in: _Dest=0x3d8e348, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.306] wcscat (in: _Dest=0x3d8e348, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.306] wcscat (in: _Dest=0x3d8e348, _Source="GMT+11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" [0168.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0168.308] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+12", cAlternateFileName="GMT_12~1")) returned 1 [0168.308] wcscmp (_String1="GMT+12", _String2=".") returned 1 [0168.308] wcscmp (_String1="GMT+12", _String2="..") returned 1 [0168.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8de00 [0168.308] wcscpy (in: _Dest=0x3d8de00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.308] wcscat (in: _Dest=0x3d8de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.308] wcscat (in: _Dest=0x3d8de00, _Source="GMT+12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" [0168.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0168.309] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+2", cAlternateFileName="GMT_2~1")) returned 1 [0168.309] wcscmp (_String1="GMT+2", _String2=".") returned 1 [0168.309] wcscmp (_String1="GMT+2", _String2="..") returned 1 [0168.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0168.310] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.310] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.310] wcscat (in: _Dest=0x2fe6728, _Source="GMT+2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" [0168.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0168.311] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+3", cAlternateFileName="GMT_3~1")) returned 1 [0168.311] wcscmp (_String1="GMT+3", _String2=".") returned 1 [0168.311] wcscmp (_String1="GMT+3", _String2="..") returned 1 [0168.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0168.311] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.311] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.311] wcscat (in: _Dest=0x2fe6d28, _Source="GMT+3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" [0168.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0168.312] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+4", cAlternateFileName="GMT_4~1")) returned 1 [0168.312] wcscmp (_String1="GMT+4", _String2=".") returned 1 [0168.312] wcscmp (_String1="GMT+4", _String2="..") returned 1 [0168.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1ce8 [0168.312] wcscpy (in: _Dest=0x2fe1ce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.313] wcscat (in: _Dest=0x2fe1ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.313] wcscat (in: _Dest=0x2fe1ce8, _Source="GMT+4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" [0168.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0168.314] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+5", cAlternateFileName="GMT_5~1")) returned 1 [0168.314] wcscmp (_String1="GMT+5", _String2=".") returned 1 [0168.314] wcscmp (_String1="GMT+5", _String2="..") returned 1 [0168.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6668 [0168.314] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.314] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.314] wcscat (in: _Dest=0x2fe6668, _Source="GMT+5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" [0168.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0168.315] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+6", cAlternateFileName="GMT_6~1")) returned 1 [0168.315] wcscmp (_String1="GMT+6", _String2=".") returned 1 [0168.315] wcscmp (_String1="GMT+6", _String2="..") returned 1 [0168.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0168.316] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.316] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.316] wcscat (in: _Dest=0x2fe6ba8, _Source="GMT+6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" [0168.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0168.317] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+7", cAlternateFileName="GMT_7~1")) returned 1 [0168.317] wcscmp (_String1="GMT+7", _String2=".") returned 1 [0168.317] wcscmp (_String1="GMT+7", _String2="..") returned 1 [0168.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe3ae8 [0168.317] wcscpy (in: _Dest=0x2fe3ae8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.317] wcscat (in: _Dest=0x2fe3ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.317] wcscat (in: _Dest=0x2fe3ae8, _Source="GMT+7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" [0168.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe3ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0168.319] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+8", cAlternateFileName="GMT_8~1")) returned 1 [0168.319] wcscmp (_String1="GMT+8", _String2=".") returned 1 [0168.319] wcscmp (_String1="GMT+8", _String2="..") returned 1 [0168.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6e48 [0168.319] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.319] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.319] wcscat (in: _Dest=0x2fe6e48, _Source="GMT+8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" [0168.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0168.320] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+9", cAlternateFileName="GMT_9~1")) returned 1 [0168.320] wcscmp (_String1="GMT+9", _String2=".") returned 1 [0168.320] wcscmp (_String1="GMT+9", _String2="..") returned 1 [0168.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6548 [0168.320] wcscpy (in: _Dest=0x2fe6548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.321] wcscat (in: _Dest=0x2fe6548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.321] wcscat (in: _Dest=0x2fe6548, _Source="GMT+9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" [0168.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0168.322] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-1", cAlternateFileName="")) returned 1 [0168.322] wcscmp (_String1="GMT-1", _String2=".") returned 1 [0168.322] wcscmp (_String1="GMT-1", _String2="..") returned 1 [0168.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a88 [0168.322] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.322] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.322] wcscat (in: _Dest=0x2fe6a88, _Source="GMT-1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" [0168.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0168.323] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-10", cAlternateFileName="")) returned 1 [0168.323] wcscmp (_String1="GMT-10", _String2=".") returned 1 [0168.323] wcscmp (_String1="GMT-10", _String2="..") returned 1 [0168.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8dd98 [0168.323] wcscpy (in: _Dest=0x3d8dd98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.324] wcscat (in: _Dest=0x3d8dd98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.324] wcscat (in: _Dest=0x3d8dd98, _Source="GMT-10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" [0168.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0168.325] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-11", cAlternateFileName="")) returned 1 [0168.325] wcscmp (_String1="GMT-11", _String2=".") returned 1 [0168.325] wcscmp (_String1="GMT-11", _String2="..") returned 1 [0168.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bb10 [0168.325] wcscpy (in: _Dest=0x3d8bb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.325] wcscat (in: _Dest=0x3d8bb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.325] wcscat (in: _Dest=0x3d8bb10, _Source="GMT-11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" [0168.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0168.326] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-12", cAlternateFileName="")) returned 1 [0168.326] wcscmp (_String1="GMT-12", _String2=".") returned 1 [0168.326] wcscmp (_String1="GMT-12", _String2="..") returned 1 [0168.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8d4a8 [0168.327] wcscpy (in: _Dest=0x3d8d4a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.327] wcscat (in: _Dest=0x3d8d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.327] wcscat (in: _Dest=0x3d8d4a8, _Source="GMT-12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" [0168.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0168.328] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-13", cAlternateFileName="")) returned 1 [0168.328] wcscmp (_String1="GMT-13", _String2=".") returned 1 [0168.328] wcscmp (_String1="GMT-13", _String2="..") returned 1 [0168.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8bf20 [0168.328] wcscpy (in: _Dest=0x3d8bf20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.328] wcscat (in: _Dest=0x3d8bf20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.328] wcscat (in: _Dest=0x3d8bf20, _Source="GMT-13" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" [0168.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0168.329] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-14", cAlternateFileName="")) returned 1 [0168.329] wcscmp (_String1="GMT-14", _String2=".") returned 1 [0168.330] wcscmp (_String1="GMT-14", _String2="..") returned 1 [0168.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d8e278 [0168.330] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.330] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.330] wcscat (in: _Dest=0x3d8e278, _Source="GMT-14" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" [0168.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0168.331] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-2", cAlternateFileName="")) returned 1 [0168.331] wcscmp (_String1="GMT-2", _String2=".") returned 1 [0168.331] wcscmp (_String1="GMT-2", _String2="..") returned 1 [0168.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0168.331] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.331] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.331] wcscat (in: _Dest=0x2fe6d88, _Source="GMT-2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" [0168.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0168.332] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-3", cAlternateFileName="")) returned 1 [0168.332] wcscmp (_String1="GMT-3", _String2=".") returned 1 [0168.333] wcscmp (_String1="GMT-3", _String2="..") returned 1 [0168.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6968 [0168.333] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.333] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.333] wcscat (in: _Dest=0x2fe6968, _Source="GMT-3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" [0168.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0168.334] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-4", cAlternateFileName="")) returned 1 [0168.334] wcscmp (_String1="GMT-4", _String2=".") returned 1 [0168.334] wcscmp (_String1="GMT-4", _String2="..") returned 1 [0168.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5648 [0168.335] wcscpy (in: _Dest=0x2fe5648, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.335] wcscat (in: _Dest=0x2fe5648, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.335] wcscat (in: _Dest=0x2fe5648, _Source="GMT-4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" [0168.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0168.336] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-5", cAlternateFileName="")) returned 1 [0168.336] wcscmp (_String1="GMT-5", _String2=".") returned 1 [0168.336] wcscmp (_String1="GMT-5", _String2="..") returned 1 [0168.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0168.336] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.336] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.336] wcscat (in: _Dest=0x2fe6fc8, _Source="GMT-5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" [0168.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0168.337] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-6", cAlternateFileName="")) returned 1 [0168.338] wcscmp (_String1="GMT-6", _String2=".") returned 1 [0168.338] wcscmp (_String1="GMT-6", _String2="..") returned 1 [0168.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f68 [0168.338] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.338] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.338] wcscat (in: _Dest=0x2fe6f68, _Source="GMT-6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" [0168.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0168.339] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-7", cAlternateFileName="")) returned 1 [0168.339] wcscmp (_String1="GMT-7", _String2=".") returned 1 [0168.339] wcscmp (_String1="GMT-7", _String2="..") returned 1 [0168.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0168.339] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.339] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.339] wcscat (in: _Dest=0x2fe6488, _Source="GMT-7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" [0168.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0168.341] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-8", cAlternateFileName="")) returned 1 [0168.341] wcscmp (_String1="GMT-8", _String2=".") returned 1 [0168.341] wcscmp (_String1="GMT-8", _String2="..") returned 1 [0168.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe67e8 [0168.341] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.341] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.341] wcscat (in: _Dest=0x2fe67e8, _Source="GMT-8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" [0168.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0168.805] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-9", cAlternateFileName="")) returned 1 [0168.805] wcscmp (_String1="GMT-9", _String2=".") returned 1 [0168.805] wcscmp (_String1="GMT-9", _String2="..") returned 1 [0168.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0168.805] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0168.805] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0168.805] wcscat (in: _Dest=0x2fe6c08, _Source="GMT-9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" [0172.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-9")) returned 0x20 [0172.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9", dwFileAttributes=0x20) returned 0 [0172.548] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.548] GetLastError () returned 0x5 [0172.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9", dwFileAttributes=0x20) returned 0 [0172.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0172.548] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCT", cAlternateFileName="")) returned 1 [0172.548] wcscmp (_String1="UCT", _String2=".") returned 1 [0172.548] wcscmp (_String1="UCT", _String2="..") returned 1 [0172.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0172.548] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0172.548] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0172.548] wcscat (in: _Dest=0x2fe6c08, _Source="UCT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" [0172.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\uct")) returned 0x20 [0172.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT", dwFileAttributes=0x20) returned 0 [0172.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\uct"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.549] GetLastError () returned 0x5 [0172.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT", dwFileAttributes=0x20) returned 0 [0172.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0172.549] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 1 [0172.549] wcscmp (_String1="UTC", _String2=".") returned 1 [0172.549] wcscmp (_String1="UTC", _String2="..") returned 1 [0172.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0172.549] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0172.549] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0172.549] wcscat (in: _Dest=0x2fe6c08, _Source="UTC" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" [0172.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\utc")) returned 0x20 [0172.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC", dwFileAttributes=0x20) returned 0 [0172.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\utc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.550] GetLastError () returned 0x5 [0172.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC", dwFileAttributes=0x20) returned 0 [0172.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0172.550] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x6979f50 | out: lpFindFileData=0x6979f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 0 [0172.550] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0172.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6979f50) returned 1 [0172.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7288) returned 1 [0172.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef75a0) returned 1 Thread: id = 3119 os_tid = 0x17ac [0161.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe69c8 [0161.116] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0161.116] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0161.117] wcscat (in: _Dest=0x2fe69c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*" [0161.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0161.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0163.385] wcscmp (_String1=".", _String2=".") returned 0 [0163.385] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.200] wcscmp (_String1="..", _String2=".") returned 1 [0164.200] wcscmp (_String1="..", _String2="..") returned 0 [0164.200] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="AMSTER~1")) returned 1 [0164.200] wcscmp (_String1="Amsterdam", _String2=".") returned 1 [0164.201] wcscmp (_String1="Amsterdam", _String2="..") returned 1 [0164.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0164.201] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0164.201] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0164.201] wcscat (in: _Dest=0x3f29020, _Source="Amsterdam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" [0172.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam")) returned 0x20 [0172.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0172.714] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.714] GetLastError () returned 0x5 [0172.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0172.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.714] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1 [0172.714] wcscmp (_String1="Andorra", _String2=".") returned 1 [0172.714] wcscmp (_String1="Andorra", _String2="..") returned 1 [0172.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29020 [0172.714] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.714] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.715] wcscat (in: _Dest=0x3f29020, _Source="Andorra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" [0172.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra")) returned 0x20 [0172.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0172.715] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.715] GetLastError () returned 0x5 [0172.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0172.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.715] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Athens", cAlternateFileName="")) returned 1 [0172.715] wcscmp (_String1="Athens", _String2=".") returned 1 [0172.715] wcscmp (_String1="Athens", _String2="..") returned 1 [0172.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.716] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.716] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.716] wcscat (in: _Dest=0x3d8ea30, _Source="Athens" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" [0172.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\athens")) returned 0x20 [0172.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens", dwFileAttributes=0x20) returned 0 [0172.716] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\athens"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.716] GetLastError () returned 0x5 [0172.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens", dwFileAttributes=0x20) returned 0 [0172.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.716] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belgrade", cAlternateFileName="")) returned 1 [0172.716] wcscmp (_String1="Belgrade", _String2=".") returned 1 [0172.717] wcscmp (_String1="Belgrade", _String2="..") returned 1 [0172.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.717] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.717] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.717] wcscat (in: _Dest=0x3f29020, _Source="Belgrade" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" [0172.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\belgrade")) returned 0x20 [0172.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade", dwFileAttributes=0x20) returned 0 [0172.718] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\belgrade"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.718] GetLastError () returned 0x5 [0172.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade", dwFileAttributes=0x20) returned 0 [0172.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.719] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1 [0172.719] wcscmp (_String1="Berlin", _String2=".") returned 1 [0172.719] wcscmp (_String1="Berlin", _String2="..") returned 1 [0172.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.719] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.719] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.719] wcscat (in: _Dest=0x3d8ea30, _Source="Berlin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" [0172.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\berlin")) returned 0x20 [0172.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin", dwFileAttributes=0x20) returned 0 [0172.719] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\berlin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.719] GetLastError () returned 0x5 [0172.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin", dwFileAttributes=0x20) returned 0 [0172.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.720] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brussels", cAlternateFileName="")) returned 1 [0172.720] wcscmp (_String1="Brussels", _String2=".") returned 1 [0172.720] wcscmp (_String1="Brussels", _String2="..") returned 1 [0172.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.720] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.720] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.720] wcscat (in: _Dest=0x3f29020, _Source="Brussels" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" [0172.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\brussels")) returned 0x20 [0172.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels", dwFileAttributes=0x20) returned 0 [0172.720] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\brussels"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.721] GetLastError () returned 0x5 [0172.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels", dwFileAttributes=0x20) returned 0 [0172.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.721] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bucharest", cAlternateFileName="BUCHAR~1")) returned 1 [0172.721] wcscmp (_String1="Bucharest", _String2=".") returned 1 [0172.721] wcscmp (_String1="Bucharest", _String2="..") returned 1 [0172.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0172.721] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.721] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.721] wcscat (in: _Dest=0x3f29020, _Source="Bucharest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" [0172.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\bucharest")) returned 0x20 [0172.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest", dwFileAttributes=0x20) returned 0 [0172.721] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\bucharest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.722] GetLastError () returned 0x5 [0172.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest", dwFileAttributes=0x20) returned 0 [0172.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.722] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Budapest", cAlternateFileName="")) returned 1 [0172.722] wcscmp (_String1="Budapest", _String2=".") returned 1 [0172.722] wcscmp (_String1="Budapest", _String2="..") returned 1 [0172.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.722] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.722] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.722] wcscat (in: _Dest=0x3f29020, _Source="Budapest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" [0172.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\budapest")) returned 0x20 [0172.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest", dwFileAttributes=0x20) returned 0 [0172.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\budapest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.723] GetLastError () returned 0x5 [0172.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest", dwFileAttributes=0x20) returned 0 [0172.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.723] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chisinau", cAlternateFileName="")) returned 1 [0172.723] wcscmp (_String1="Chisinau", _String2=".") returned 1 [0172.723] wcscmp (_String1="Chisinau", _String2="..") returned 1 [0172.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.723] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.723] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.723] wcscat (in: _Dest=0x3f29020, _Source="Chisinau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" [0172.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\chisinau")) returned 0x20 [0172.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau", dwFileAttributes=0x20) returned 0 [0172.724] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\chisinau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.724] GetLastError () returned 0x5 [0172.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau", dwFileAttributes=0x20) returned 0 [0172.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.724] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Copenhagen", cAlternateFileName="COPENH~1")) returned 1 [0172.724] wcscmp (_String1="Copenhagen", _String2=".") returned 1 [0172.724] wcscmp (_String1="Copenhagen", _String2="..") returned 1 [0172.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29020 [0172.724] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.724] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.724] wcscat (in: _Dest=0x3f29020, _Source="Copenhagen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" [0172.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\copenhagen")) returned 0x20 [0172.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen", dwFileAttributes=0x20) returned 0 [0172.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\copenhagen"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.725] GetLastError () returned 0x5 [0172.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen", dwFileAttributes=0x20) returned 0 [0172.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.725] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dublin", cAlternateFileName="")) returned 1 [0172.725] wcscmp (_String1="Dublin", _String2=".") returned 1 [0172.725] wcscmp (_String1="Dublin", _String2="..") returned 1 [0172.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.725] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.725] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.725] wcscat (in: _Dest=0x3d8ea30, _Source="Dublin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" [0172.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\dublin")) returned 0x20 [0172.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin", dwFileAttributes=0x20) returned 0 [0172.726] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\dublin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.726] GetLastError () returned 0x5 [0172.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin", dwFileAttributes=0x20) returned 0 [0172.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.726] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gibraltar", cAlternateFileName="GIBRAL~1")) returned 1 [0172.726] wcscmp (_String1="Gibraltar", _String2=".") returned 1 [0172.726] wcscmp (_String1="Gibraltar", _String2="..") returned 1 [0172.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29020 [0172.726] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.726] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.726] wcscat (in: _Dest=0x3f29020, _Source="Gibraltar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" [0172.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\gibraltar")) returned 0x20 [0172.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar", dwFileAttributes=0x20) returned 0 [0172.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\gibraltar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.727] GetLastError () returned 0x5 [0172.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar", dwFileAttributes=0x20) returned 0 [0172.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.727] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Helsinki", cAlternateFileName="")) returned 1 [0172.727] wcscmp (_String1="Helsinki", _String2=".") returned 1 [0172.727] wcscmp (_String1="Helsinki", _String2="..") returned 1 [0172.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.727] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.727] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.727] wcscat (in: _Dest=0x3f29020, _Source="Helsinki" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" [0172.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\helsinki")) returned 0x20 [0172.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki", dwFileAttributes=0x20) returned 0 [0172.728] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\helsinki"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.728] GetLastError () returned 0x5 [0172.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki", dwFileAttributes=0x20) returned 0 [0172.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.728] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Istanbul", cAlternateFileName="")) returned 1 [0172.728] wcscmp (_String1="Istanbul", _String2=".") returned 1 [0172.728] wcscmp (_String1="Istanbul", _String2="..") returned 1 [0172.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29020 [0172.728] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.728] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.728] wcscat (in: _Dest=0x3f29020, _Source="Istanbul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" [0172.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\istanbul")) returned 0x20 [0172.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul", dwFileAttributes=0x20) returned 0 [0172.729] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\istanbul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.729] GetLastError () returned 0x5 [0172.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul", dwFileAttributes=0x20) returned 0 [0172.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.729] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaliningrad", cAlternateFileName="KALINI~1")) returned 1 [0172.729] wcscmp (_String1="Kaliningrad", _String2=".") returned 1 [0172.729] wcscmp (_String1="Kaliningrad", _String2="..") returned 1 [0172.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3014fe0 [0172.729] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.729] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.730] wcscat (in: _Dest=0x3014fe0, _Source="Kaliningrad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" [0172.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kaliningrad")) returned 0x20 [0172.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad", dwFileAttributes=0x20) returned 0 [0172.730] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kaliningrad"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.730] GetLastError () returned 0x5 [0172.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad", dwFileAttributes=0x20) returned 0 [0172.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.730] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1 [0172.730] wcscmp (_String1="Kiev", _String2=".") returned 1 [0172.730] wcscmp (_String1="Kiev", _String2="..") returned 1 [0172.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.731] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.731] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.731] wcscat (in: _Dest=0x3d8ea30, _Source="Kiev" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" [0172.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kiev")) returned 0x20 [0172.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev", dwFileAttributes=0x20) returned 0 [0172.731] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kiev"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.731] GetLastError () returned 0x5 [0172.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev", dwFileAttributes=0x20) returned 0 [0172.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.731] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisbon", cAlternateFileName="")) returned 1 [0172.731] wcscmp (_String1="Lisbon", _String2=".") returned 1 [0172.732] wcscmp (_String1="Lisbon", _String2="..") returned 1 [0172.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.732] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.732] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.732] wcscat (in: _Dest=0x3d8ea30, _Source="Lisbon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" [0172.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\lisbon")) returned 0x20 [0172.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon", dwFileAttributes=0x20) returned 0 [0172.732] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\lisbon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.732] GetLastError () returned 0x5 [0172.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon", dwFileAttributes=0x20) returned 0 [0172.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.732] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="London", cAlternateFileName="")) returned 1 [0172.733] wcscmp (_String1="London", _String2=".") returned 1 [0172.733] wcscmp (_String1="London", _String2="..") returned 1 [0172.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.733] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.734] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.734] wcscat (in: _Dest=0x3d8ea30, _Source="London" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" [0172.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\london")) returned 0x20 [0172.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London", dwFileAttributes=0x20) returned 0 [0172.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\london"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.734] GetLastError () returned 0x5 [0172.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London", dwFileAttributes=0x20) returned 0 [0172.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.735] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luxembourg", cAlternateFileName="LUXEMB~1")) returned 1 [0172.735] wcscmp (_String1="Luxembourg", _String2=".") returned 1 [0172.735] wcscmp (_String1="Luxembourg", _String2="..") returned 1 [0172.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29020 [0172.735] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.735] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.735] wcscat (in: _Dest=0x3f29020, _Source="Luxembourg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" [0172.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\luxembourg")) returned 0x20 [0172.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg", dwFileAttributes=0x20) returned 0 [0172.735] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\luxembourg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.735] GetLastError () returned 0x5 [0172.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg", dwFileAttributes=0x20) returned 0 [0172.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.736] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madrid", cAlternateFileName="")) returned 1 [0172.736] wcscmp (_String1="Madrid", _String2=".") returned 1 [0172.736] wcscmp (_String1="Madrid", _String2="..") returned 1 [0172.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.736] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.736] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.736] wcscat (in: _Dest=0x3d8ea30, _Source="Madrid" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" [0172.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\madrid")) returned 0x20 [0172.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid", dwFileAttributes=0x20) returned 0 [0172.736] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\madrid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.737] GetLastError () returned 0x5 [0172.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid", dwFileAttributes=0x20) returned 0 [0172.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.737] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malta", cAlternateFileName="")) returned 1 [0172.737] wcscmp (_String1="Malta", _String2=".") returned 1 [0172.737] wcscmp (_String1="Malta", _String2="..") returned 1 [0172.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ea30 [0172.737] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.737] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.737] wcscat (in: _Dest=0x3d8ea30, _Source="Malta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" [0172.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\malta")) returned 0x20 [0172.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta", dwFileAttributes=0x20) returned 0 [0172.737] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\malta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.738] GetLastError () returned 0x5 [0172.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta", dwFileAttributes=0x20) returned 0 [0172.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.738] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Minsk", cAlternateFileName="")) returned 1 [0172.738] wcscmp (_String1="Minsk", _String2=".") returned 1 [0172.738] wcscmp (_String1="Minsk", _String2="..") returned 1 [0172.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ea30 [0172.738] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.738] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.738] wcscat (in: _Dest=0x3d8ea30, _Source="Minsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" [0172.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\minsk")) returned 0x20 [0172.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk", dwFileAttributes=0x20) returned 0 [0172.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\minsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.739] GetLastError () returned 0x5 [0172.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk", dwFileAttributes=0x20) returned 0 [0172.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.739] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monaco", cAlternateFileName="")) returned 1 [0172.739] wcscmp (_String1="Monaco", _String2=".") returned 1 [0172.739] wcscmp (_String1="Monaco", _String2="..") returned 1 [0172.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.739] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.739] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.739] wcscat (in: _Dest=0x3d8ea30, _Source="Monaco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" [0172.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\monaco")) returned 0x20 [0172.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco", dwFileAttributes=0x20) returned 0 [0172.739] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\monaco"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.740] GetLastError () returned 0x5 [0172.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco", dwFileAttributes=0x20) returned 0 [0172.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.740] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moscow", cAlternateFileName="")) returned 1 [0172.740] wcscmp (_String1="Moscow", _String2=".") returned 1 [0172.740] wcscmp (_String1="Moscow", _String2="..") returned 1 [0172.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.740] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.740] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.740] wcscat (in: _Dest=0x3d8ea30, _Source="Moscow" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" [0172.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\moscow")) returned 0x20 [0172.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow", dwFileAttributes=0x20) returned 0 [0172.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\moscow"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.741] GetLastError () returned 0x5 [0172.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow", dwFileAttributes=0x20) returned 0 [0172.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.741] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oslo", cAlternateFileName="")) returned 1 [0172.741] wcscmp (_String1="Oslo", _String2=".") returned 1 [0172.741] wcscmp (_String1="Oslo", _String2="..") returned 1 [0172.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.741] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.741] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.741] wcscat (in: _Dest=0x3d8ea30, _Source="Oslo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" [0172.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\oslo")) returned 0x20 [0172.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo", dwFileAttributes=0x20) returned 0 [0172.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\oslo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.742] GetLastError () returned 0x5 [0172.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo", dwFileAttributes=0x20) returned 0 [0172.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.742] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paris", cAlternateFileName="")) returned 1 [0172.742] wcscmp (_String1="Paris", _String2=".") returned 1 [0172.742] wcscmp (_String1="Paris", _String2="..") returned 1 [0172.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ea30 [0172.742] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.742] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.742] wcscat (in: _Dest=0x3d8ea30, _Source="Paris" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" [0172.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\paris")) returned 0x20 [0172.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris", dwFileAttributes=0x20) returned 0 [0172.742] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\paris"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.743] GetLastError () returned 0x5 [0172.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris", dwFileAttributes=0x20) returned 0 [0172.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prague", cAlternateFileName="")) returned 1 [0172.743] wcscmp (_String1="Prague", _String2=".") returned 1 [0172.743] wcscmp (_String1="Prague", _String2="..") returned 1 [0172.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.743] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.743] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.743] wcscat (in: _Dest=0x3d8ea30, _Source="Prague" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" [0172.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\prague")) returned 0x20 [0172.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague", dwFileAttributes=0x20) returned 0 [0172.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\prague"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.744] GetLastError () returned 0x5 [0172.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague", dwFileAttributes=0x20) returned 0 [0172.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riga", cAlternateFileName="")) returned 1 [0172.744] wcscmp (_String1="Riga", _String2=".") returned 1 [0172.744] wcscmp (_String1="Riga", _String2="..") returned 1 [0172.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.744] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.744] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.744] wcscat (in: _Dest=0x3d8ea30, _Source="Riga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" [0172.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\riga")) returned 0x20 [0172.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga", dwFileAttributes=0x20) returned 0 [0172.745] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\riga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.745] GetLastError () returned 0x5 [0172.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga", dwFileAttributes=0x20) returned 0 [0172.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rome", cAlternateFileName="")) returned 1 [0172.745] wcscmp (_String1="Rome", _String2=".") returned 1 [0172.745] wcscmp (_String1="Rome", _String2="..") returned 1 [0172.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8ea30 [0172.745] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.745] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.745] wcscat (in: _Dest=0x3d8ea30, _Source="Rome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" [0172.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\rome")) returned 0x20 [0172.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome", dwFileAttributes=0x20) returned 0 [0172.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\rome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.746] GetLastError () returned 0x5 [0172.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome", dwFileAttributes=0x20) returned 0 [0172.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samara", cAlternateFileName="")) returned 1 [0172.746] wcscmp (_String1="Samara", _String2=".") returned 1 [0172.746] wcscmp (_String1="Samara", _String2="..") returned 1 [0172.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0172.746] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.746] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.746] wcscat (in: _Dest=0x3d8ea30, _Source="Samara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" [0172.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\samara")) returned 0x20 [0172.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara", dwFileAttributes=0x20) returned 0 [0172.747] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\samara"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.747] GetLastError () returned 0x5 [0172.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara", dwFileAttributes=0x20) returned 0 [0172.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simferopol", cAlternateFileName="SIMFER~1")) returned 1 [0172.747] wcscmp (_String1="Simferopol", _String2=".") returned 1 [0172.747] wcscmp (_String1="Simferopol", _String2="..") returned 1 [0172.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29020 [0172.747] wcscpy (in: _Dest=0x3f29020, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0172.747] wcscat (in: _Dest=0x3f29020, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0172.747] wcscat (in: _Dest=0x3f29020, _Source="Simferopol" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" [0172.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\simferopol")) returned 0x20 [0172.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol", dwFileAttributes=0x20) returned 0 [0172.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\simferopol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.748] GetLastError () returned 0x5 [0172.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol", dwFileAttributes=0x20) returned 0 [0172.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sofia", cAlternateFileName="")) returned 1 [0172.748] wcscmp (_String1="Sofia", _String2=".") returned 1 [0173.234] wcscmp (_String1="Sofia", _String2="..") returned 1 [0173.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e7c0 [0173.235] wcscpy (in: _Dest=0x3d8e7c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.235] wcscat (in: _Dest=0x3d8e7c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.235] wcscat (in: _Dest=0x3d8e7c0, _Source="Sofia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" [0173.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0173.236] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stockholm", cAlternateFileName="STOCKH~1")) returned 1 [0173.236] wcscmp (_String1="Stockholm", _String2=".") returned 1 [0173.236] wcscmp (_String1="Stockholm", _String2="..") returned 1 [0173.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f296b0 [0173.236] wcscpy (in: _Dest=0x3f296b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.236] wcscat (in: _Dest=0x3f296b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.236] wcscat (in: _Dest=0x3f296b0, _Source="Stockholm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" [0173.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f296b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0173.237] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tallinn", cAlternateFileName="")) returned 1 [0173.237] wcscmp (_String1="Tallinn", _String2=".") returned 1 [0173.237] wcscmp (_String1="Tallinn", _String2="..") returned 1 [0173.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29bf0 [0173.237] wcscpy (in: _Dest=0x3f29bf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.237] wcscat (in: _Dest=0x3f29bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.238] wcscat (in: _Dest=0x3f29bf0, _Source="Tallinn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" [0173.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0173.239] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tirane", cAlternateFileName="")) returned 1 [0173.239] wcscmp (_String1="Tirane", _String2=".") returned 1 [0173.239] wcscmp (_String1="Tirane", _String2="..") returned 1 [0173.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d2a0 [0173.239] wcscpy (in: _Dest=0x3d8d2a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.239] wcscat (in: _Dest=0x3d8d2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.239] wcscat (in: _Dest=0x3d8d2a0, _Source="Tirane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" [0173.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0173.240] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uzhgorod", cAlternateFileName="")) returned 1 [0173.240] wcscmp (_String1="Uzhgorod", _String2=".") returned 1 [0173.240] wcscmp (_String1="Uzhgorod", _String2="..") returned 1 [0173.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29aa0 [0173.240] wcscpy (in: _Dest=0x3f29aa0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.240] wcscat (in: _Dest=0x3f29aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.240] wcscat (in: _Dest=0x3f29aa0, _Source="Uzhgorod" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" [0173.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0173.241] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1 [0173.241] wcscmp (_String1="Vaduz", _String2=".") returned 1 [0173.241] wcscmp (_String1="Vaduz", _String2="..") returned 1 [0173.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e3b0 [0173.241] wcscpy (in: _Dest=0x3d8e3b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.241] wcscat (in: _Dest=0x3d8e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.241] wcscat (in: _Dest=0x3d8e3b0, _Source="Vaduz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" [0173.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0173.242] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vienna", cAlternateFileName="")) returned 1 [0173.242] wcscmp (_String1="Vienna", _String2=".") returned 1 [0173.242] wcscmp (_String1="Vienna", _String2="..") returned 1 [0173.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8be50 [0173.242] wcscpy (in: _Dest=0x3d8be50, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.242] wcscat (in: _Dest=0x3d8be50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.243] wcscat (in: _Dest=0x3d8be50, _Source="Vienna" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" [0173.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0173.243] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vilnius", cAlternateFileName="")) returned 1 [0173.243] wcscmp (_String1="Vilnius", _String2=".") returned 1 [0173.243] wcscmp (_String1="Vilnius", _String2="..") returned 1 [0173.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f298e0 [0173.244] wcscpy (in: _Dest=0x3f298e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.244] wcscat (in: _Dest=0x3f298e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.244] wcscat (in: _Dest=0x3f298e0, _Source="Vilnius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" [0173.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f298e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0173.245] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Volgograd", cAlternateFileName="VOLGOG~1")) returned 1 [0173.245] wcscmp (_String1="Volgograd", _String2=".") returned 1 [0173.245] wcscmp (_String1="Volgograd", _String2="..") returned 1 [0173.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f299c0 [0173.245] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.245] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.245] wcscat (in: _Dest=0x3f299c0, _Source="Volgograd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" [0173.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0173.245] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warsaw", cAlternateFileName="")) returned 1 [0173.246] wcscmp (_String1="Warsaw", _String2=".") returned 1 [0173.246] wcscmp (_String1="Warsaw", _String2="..") returned 1 [0173.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ba40 [0173.246] wcscpy (in: _Dest=0x3d8ba40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.246] wcscat (in: _Dest=0x3d8ba40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.246] wcscat (in: _Dest=0x3d8ba40, _Source="Warsaw" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" [0173.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0173.247] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zaporozhye", cAlternateFileName="ZAPORO~1")) returned 1 [0173.247] wcscmp (_String1="Zaporozhye", _String2=".") returned 1 [0173.247] wcscmp (_String1="Zaporozhye", _String2="..") returned 1 [0173.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0173.247] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.247] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.247] wcscat (in: _Dest=0x3f29090, _Source="Zaporozhye" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" [0173.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0173.248] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 1 [0173.248] wcscmp (_String1="Zurich", _String2=".") returned 1 [0173.248] wcscmp (_String1="Zurich", _String2="..") returned 1 [0173.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e2e0 [0173.248] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0173.248] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0173.248] wcscat (in: _Dest=0x3d8e2e0, _Source="Zurich" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" [0173.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0173.249] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 0 [0173.249] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0173.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0173.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 [0173.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 3120 os_tid = 0x142c [0161.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt")) returned 0x20 [0162.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0162.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.867] GetLastError () returned 0x5 [0162.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0162.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef73e8) returned 1 Thread: id = 3121 os_tid = 0xe04 [0161.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst")) returned 0x20 [0162.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0162.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.869] GetLastError () returned 0x5 [0162.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0162.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7cd8) returned 1 Thread: id = 3122 os_tid = 0x1430 [0161.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ae8 [0161.118] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0161.118] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0161.118] wcscat (in: _Dest=0x2fe6ae8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*" [0161.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c368 [0161.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0163.401] wcscmp (_String1=".", _String2=".") returned 0 [0163.401] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.401] wcscmp (_String1="..", _String2=".") returned 1 [0163.401] wcscmp (_String1="..", _String2="..") returned 0 [0163.401] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="ANTANA~1")) returned 1 [0163.401] wcscmp (_String1="Antananarivo", _String2=".") returned 1 [0163.401] wcscmp (_String1="Antananarivo", _String2="..") returned 1 [0163.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014ef0 [0163.401] wcscpy (in: _Dest=0x3014ef0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0163.401] wcscat (in: _Dest=0x3014ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0163.401] wcscat (in: _Dest=0x3014ef0, _Source="Antananarivo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" [0172.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo")) returned 0x20 [0173.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0173.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.617] GetLastError () returned 0x5 [0173.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0173.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014ef0) returned 1 [0173.617] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chagos", cAlternateFileName="")) returned 1 [0173.617] wcscmp (_String1="Chagos", _String2=".") returned 1 [0173.617] wcscmp (_String1="Chagos", _String2="..") returned 1 [0173.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e278 [0173.617] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0173.617] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0173.617] wcscat (in: _Dest=0x3d8e278, _Source="Chagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" [0178.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0178.794] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Christmas", cAlternateFileName="CHRIST~1")) returned 1 [0178.794] wcscmp (_String1="Christmas", _String2=".") returned 1 [0178.794] wcscmp (_String1="Christmas", _String2="..") returned 1 [0178.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29e20 [0178.794] wcscpy (in: _Dest=0x3f29e20, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.794] wcscat (in: _Dest=0x3f29e20, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.794] wcscat (in: _Dest=0x3f29e20, _Source="Christmas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" [0178.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0178.795] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1 [0178.795] wcscmp (_String1="Cocos", _String2=".") returned 1 [0178.795] wcscmp (_String1="Cocos", _String2="..") returned 1 [0178.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d8b8 [0178.795] wcscpy (in: _Dest=0x3d8d8b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.795] wcscat (in: _Dest=0x3d8d8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.795] wcscat (in: _Dest=0x3d8d8b8, _Source="Cocos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" [0178.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0178.796] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comoro", cAlternateFileName="")) returned 1 [0178.796] wcscmp (_String1="Comoro", _String2=".") returned 1 [0178.796] wcscmp (_String1="Comoro", _String2="..") returned 1 [0178.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c740 [0178.796] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.796] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.796] wcscat (in: _Dest=0x3d8c740, _Source="Comoro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" [0178.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0178.799] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerguelen", cAlternateFileName="KERGUE~1")) returned 1 [0178.799] wcscmp (_String1="Kerguelen", _String2=".") returned 1 [0178.799] wcscmp (_String1="Kerguelen", _String2="..") returned 1 [0178.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f299c0 [0178.799] wcscpy (in: _Dest=0x3f299c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.799] wcscat (in: _Dest=0x3f299c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.799] wcscat (in: _Dest=0x3f299c0, _Source="Kerguelen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" [0178.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f299c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0178.800] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mahe", cAlternateFileName="")) returned 1 [0178.800] wcscmp (_String1="Mahe", _String2=".") returned 1 [0178.800] wcscmp (_String1="Mahe", _String2="..") returned 1 [0178.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d8e550 [0178.800] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.801] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.801] wcscat (in: _Dest=0x3d8e550, _Source="Mahe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" [0178.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0178.801] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maldives", cAlternateFileName="")) returned 1 [0178.802] wcscmp (_String1="Maldives", _String2=".") returned 1 [0178.802] wcscmp (_String1="Maldives", _String2="..") returned 1 [0178.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29a30 [0178.802] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.802] wcscat (in: _Dest=0x3f29a30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.802] wcscat (in: _Dest=0x3f29a30, _Source="Maldives" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" [0178.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0178.803] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mauritius", cAlternateFileName="MAURIT~1")) returned 1 [0178.803] wcscmp (_String1="Mauritius", _String2=".") returned 1 [0178.803] wcscmp (_String1="Mauritius", _String2="..") returned 1 [0178.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f28ed0 [0178.803] wcscpy (in: _Dest=0x3f28ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.803] wcscat (in: _Dest=0x3f28ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.803] wcscat (in: _Dest=0x3f28ed0, _Source="Mauritius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" [0178.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f28ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0178.804] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mayotte", cAlternateFileName="")) returned 1 [0178.804] wcscmp (_String1="Mayotte", _String2=".") returned 1 [0178.804] wcscmp (_String1="Mayotte", _String2="..") returned 1 [0178.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29640 [0178.804] wcscpy (in: _Dest=0x3f29640, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.804] wcscat (in: _Dest=0x3f29640, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.804] wcscat (in: _Dest=0x3f29640, _Source="Mayotte" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" [0178.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0178.805] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1 [0178.805] wcscmp (_String1="Reunion", _String2=".") returned 1 [0178.805] wcscmp (_String1="Reunion", _String2="..") returned 1 [0178.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29b80 [0178.805] wcscpy (in: _Dest=0x3f29b80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0178.805] wcscat (in: _Dest=0x3f29b80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0178.805] wcscat (in: _Dest=0x3f29b80, _Source="Reunion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" [0178.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0178.806] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 0 [0178.806] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0178.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c368) returned 1 [0178.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0178.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 3123 os_tid = 0x264 [0161.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met")) returned 0x20 [0162.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0162.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.873] GetLastError () returned 0x5 [0162.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0162.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7ff0) returned 1 Thread: id = 3124 os_tid = 0x1434 [0161.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst")) returned 0x20 [0162.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0162.809] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.809] GetLastError () returned 0x5 [0162.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0162.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef7548) returned 1 Thread: id = 3125 os_tid = 0x17c0 [0161.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt")) returned 0x20 [0162.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0162.811] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.811] GetLastError () returned 0x5 [0162.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0162.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 3126 os_tid = 0x1438 [0161.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0161.120] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0161.120] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0161.120] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*" [0161.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0161.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0163.386] wcscmp (_String1=".", _String2=".") returned 0 [0163.386] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.201] wcscmp (_String1="..", _String2=".") returned 1 [0164.201] wcscmp (_String1="..", _String2="..") returned 0 [0164.201] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1 [0164.201] wcscmp (_String1="Apia", _String2=".") returned 1 [0164.201] wcscmp (_String1="Apia", _String2="..") returned 1 [0164.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e828 [0164.202] wcscpy (in: _Dest=0x3d8e828, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0164.202] wcscat (in: _Dest=0x3d8e828, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0164.202] wcscat (in: _Dest=0x3d8e828, _Source="Apia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" [0169.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0169.653] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="Auckland", cAlternateFileName="")) returned 1 [0169.653] wcscmp (_String1="Auckland", _String2=".") returned 1 [0169.653] wcscmp (_String1="Auckland", _String2="..") returned 1 [0169.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f293a0 [0169.653] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.653] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.653] wcscat (in: _Dest=0x3f293a0, _Source="Auckland" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" [0169.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0169.654] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chatham", cAlternateFileName="")) returned 1 [0169.654] wcscmp (_String1="Chatham", _String2=".") returned 1 [0169.655] wcscmp (_String1="Chatham", _String2="..") returned 1 [0169.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29d40 [0169.655] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.655] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.655] wcscat (in: _Dest=0x3f29d40, _Source="Chatham" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" [0169.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0169.656] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chuuk", cAlternateFileName="")) returned 1 [0169.656] wcscmp (_String1="Chuuk", _String2=".") returned 1 [0169.656] wcscmp (_String1="Chuuk", _String2="..") returned 1 [0169.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ea30 [0169.656] wcscpy (in: _Dest=0x3d8ea30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.656] wcscat (in: _Dest=0x3d8ea30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.656] wcscat (in: _Dest=0x3d8ea30, _Source="Chuuk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" [0169.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ea30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0169.657] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Easter", cAlternateFileName="")) returned 1 [0169.657] wcscmp (_String1="Easter", _String2=".") returned 1 [0169.657] wcscmp (_String1="Easter", _String2="..") returned 1 [0169.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f294f0 [0169.657] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.657] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.657] wcscat (in: _Dest=0x3f294f0, _Source="Easter" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" [0169.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0169.658] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Efate", cAlternateFileName="")) returned 1 [0169.658] wcscmp (_String1="Efate", _String2=".") returned 1 [0169.658] wcscmp (_String1="Efate", _String2="..") returned 1 [0169.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bb78 [0169.659] wcscpy (in: _Dest=0x3d8bb78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.659] wcscat (in: _Dest=0x3d8bb78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.659] wcscat (in: _Dest=0x3d8bb78, _Source="Efate" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" [0169.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8bb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0169.660] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="ENDERB~1")) returned 1 [0169.660] wcscmp (_String1="Enderbury", _String2=".") returned 1 [0169.660] wcscmp (_String1="Enderbury", _String2="..") returned 1 [0169.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29410 [0169.660] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.660] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.660] wcscat (in: _Dest=0x3f29410, _Source="Enderbury" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" [0169.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0169.662] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1 [0169.662] wcscmp (_String1="Fakaofo", _String2=".") returned 1 [0169.662] wcscmp (_String1="Fakaofo", _String2="..") returned 1 [0169.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b6d0 [0169.662] wcscpy (in: _Dest=0x3e0b6d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.662] wcscat (in: _Dest=0x3e0b6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.662] wcscat (in: _Dest=0x3e0b6d0, _Source="Fakaofo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" [0169.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0169.663] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fiji", cAlternateFileName="")) returned 1 [0169.663] wcscmp (_String1="Fiji", _String2=".") returned 1 [0169.663] wcscmp (_String1="Fiji", _String2="..") returned 1 [0169.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dbf8 [0169.663] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.663] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.663] wcscat (in: _Dest=0x3d8dbf8, _Source="Fiji" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" [0169.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0169.664] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Funafuti", cAlternateFileName="")) returned 1 [0169.664] wcscmp (_String1="Funafuti", _String2=".") returned 1 [0169.664] wcscmp (_String1="Funafuti", _String2="..") returned 1 [0169.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b3c0 [0169.664] wcscpy (in: _Dest=0x3e0b3c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.664] wcscat (in: _Dest=0x3e0b3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.664] wcscat (in: _Dest=0x3e0b3c0, _Source="Funafuti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" [0169.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0169.665] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Galapagos", cAlternateFileName="GALAPA~1")) returned 1 [0169.665] wcscmp (_String1="Galapagos", _String2=".") returned 1 [0169.665] wcscmp (_String1="Galapagos", _String2="..") returned 1 [0169.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae80 [0169.665] wcscpy (in: _Dest=0x3e0ae80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.665] wcscat (in: _Dest=0x3e0ae80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.665] wcscat (in: _Dest=0x3e0ae80, _Source="Galapagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" [0169.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0169.666] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gambier", cAlternateFileName="")) returned 1 [0169.666] wcscmp (_String1="Gambier", _String2=".") returned 1 [0169.666] wcscmp (_String1="Gambier", _String2="..") returned 1 [0169.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e0b740 [0169.666] wcscpy (in: _Dest=0x3e0b740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.666] wcscat (in: _Dest=0x3e0b740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.666] wcscat (in: _Dest=0x3e0b740, _Source="Gambier" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" [0169.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0169.667] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadalcanal", cAlternateFileName="GUADAL~1")) returned 1 [0169.668] wcscmp (_String1="Guadalcanal", _String2=".") returned 1 [0169.668] wcscmp (_String1="Guadalcanal", _String2="..") returned 1 [0169.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d0858 [0169.668] wcscpy (in: _Dest=0x66d0858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.668] wcscat (in: _Dest=0x66d0858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.668] wcscat (in: _Dest=0x66d0858, _Source="Guadalcanal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" [0169.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0169.669] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guam", cAlternateFileName="")) returned 1 [0169.669] wcscmp (_String1="Guam", _String2=".") returned 1 [0169.669] wcscmp (_String1="Guam", _String2="..") returned 1 [0169.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0169.669] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.669] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.669] wcscat (in: _Dest=0x3d8ccf0, _Source="Guam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" [0169.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0169.670] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Honolulu", cAlternateFileName="")) returned 1 [0169.670] wcscmp (_String1="Honolulu", _String2=".") returned 1 [0169.670] wcscmp (_String1="Honolulu", _String2="..") returned 1 [0169.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b4a0 [0169.670] wcscpy (in: _Dest=0x3e0b4a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.670] wcscat (in: _Dest=0x3e0b4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.670] wcscat (in: _Dest=0x3e0b4a0, _Source="Honolulu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" [0169.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0169.671] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johnston", cAlternateFileName="")) returned 1 [0169.671] wcscmp (_String1="Johnston", _String2=".") returned 1 [0169.671] wcscmp (_String1="Johnston", _String2="..") returned 1 [0169.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e0b200 [0169.671] wcscpy (in: _Dest=0x3e0b200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.671] wcscat (in: _Dest=0x3e0b200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.671] wcscat (in: _Dest=0x3e0b200, _Source="Johnston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" [0169.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0169.672] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiritimati", cAlternateFileName="KIRITI~1")) returned 1 [0169.672] wcscmp (_String1="Kiritimati", _String2=".") returned 1 [0169.672] wcscmp (_String1="Kiritimati", _String2="..") returned 1 [0169.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0a38 [0169.673] wcscpy (in: _Dest=0x66d0a38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.673] wcscat (in: _Dest=0x66d0a38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.673] wcscat (in: _Dest=0x66d0a38, _Source="Kiritimati" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" [0169.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0169.674] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kosrae", cAlternateFileName="")) returned 1 [0169.674] wcscmp (_String1="Kosrae", _String2=".") returned 1 [0169.674] wcscmp (_String1="Kosrae", _String2="..") returned 1 [0169.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b820 [0169.674] wcscpy (in: _Dest=0x3e0b820, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.674] wcscat (in: _Dest=0x3e0b820, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.674] wcscat (in: _Dest=0x3e0b820, _Source="Kosrae" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" [0169.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0169.675] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kwajalein", cAlternateFileName="KWAJAL~1")) returned 1 [0169.676] wcscmp (_String1="Kwajalein", _String2=".") returned 1 [0169.676] wcscmp (_String1="Kwajalein", _String2="..") returned 1 [0169.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0b580 [0169.676] wcscpy (in: _Dest=0x3e0b580, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.676] wcscat (in: _Dest=0x3e0b580, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.676] wcscat (in: _Dest=0x3e0b580, _Source="Kwajalein" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" [0169.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0169.677] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Majuro", cAlternateFileName="")) returned 1 [0169.677] wcscmp (_String1="Majuro", _String2=".") returned 1 [0169.677] wcscmp (_String1="Majuro", _String2="..") returned 1 [0169.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e0b7b0 [0169.677] wcscpy (in: _Dest=0x3e0b7b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.677] wcscat (in: _Dest=0x3e0b7b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.677] wcscat (in: _Dest=0x3e0b7b0, _Source="Majuro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" [0169.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0b7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0169.678] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquesas", cAlternateFileName="MARQUE~1")) returned 1 [0169.678] wcscmp (_String1="Marquesas", _String2=".") returned 1 [0169.678] wcscmp (_String1="Marquesas", _String2="..") returned 1 [0169.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e0ae10 [0169.678] wcscpy (in: _Dest=0x3e0ae10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.678] wcscat (in: _Dest=0x3e0ae10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.678] wcscat (in: _Dest=0x3e0ae10, _Source="Marquesas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" [0169.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ae10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0169.679] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Midway", cAlternateFileName="")) returned 1 [0169.679] wcscmp (_String1="Midway", _String2=".") returned 1 [0169.679] wcscmp (_String1="Midway", _String2="..") returned 1 [0169.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f22f10 [0169.679] wcscpy (in: _Dest=0x3f22f10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.679] wcscat (in: _Dest=0x3f22f10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.679] wcscat (in: _Dest=0x3f22f10, _Source="Midway" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" [0169.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0169.681] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nauru", cAlternateFileName="")) returned 1 [0169.681] wcscmp (_String1="Nauru", _String2=".") returned 1 [0169.681] wcscmp (_String1="Nauru", _String2="..") returned 1 [0169.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d510 [0169.681] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.681] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.681] wcscat (in: _Dest=0x3d8d510, _Source="Nauru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" [0169.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0169.682] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niue", cAlternateFileName="")) returned 1 [0169.682] wcscmp (_String1="Niue", _String2=".") returned 1 [0169.682] wcscmp (_String1="Niue", _String2="..") returned 1 [0169.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e550 [0169.682] wcscpy (in: _Dest=0x3d8e550, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.682] wcscat (in: _Dest=0x3d8e550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.682] wcscat (in: _Dest=0x3d8e550, _Source="Niue" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" [0169.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0169.683] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Norfolk", cAlternateFileName="")) returned 1 [0169.683] wcscmp (_String1="Norfolk", _String2=".") returned 1 [0169.683] wcscmp (_String1="Norfolk", _String2="..") returned 1 [0169.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f22ea0 [0169.683] wcscpy (in: _Dest=0x3f22ea0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.683] wcscat (in: _Dest=0x3f22ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.683] wcscat (in: _Dest=0x3f22ea0, _Source="Norfolk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" [0169.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0169.684] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noumea", cAlternateFileName="")) returned 1 [0169.684] wcscmp (_String1="Noumea", _String2=".") returned 1 [0169.684] wcscmp (_String1="Noumea", _String2="..") returned 1 [0169.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f23290 [0169.684] wcscpy (in: _Dest=0x3f23290, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.684] wcscat (in: _Dest=0x3f23290, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.684] wcscat (in: _Dest=0x3f23290, _Source="Noumea" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" [0169.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0169.685] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pago_Pago", cAlternateFileName="PAGO_P~1")) returned 1 [0169.685] wcscmp (_String1="Pago_Pago", _String2=".") returned 1 [0169.686] wcscmp (_String1="Pago_Pago", _String2="..") returned 1 [0169.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f23680 [0169.686] wcscpy (in: _Dest=0x3f23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.686] wcscat (in: _Dest=0x3f23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.686] wcscat (in: _Dest=0x3f23680, _Source="Pago_Pago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" [0169.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0169.687] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palau", cAlternateFileName="")) returned 1 [0169.687] wcscmp (_String1="Palau", _String2=".") returned 1 [0169.687] wcscmp (_String1="Palau", _String2="..") returned 1 [0169.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8c740 [0169.687] wcscpy (in: _Dest=0x3d8c740, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.687] wcscat (in: _Dest=0x3d8c740, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.687] wcscat (in: _Dest=0x3d8c740, _Source="Palau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" [0169.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8c740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0169.688] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitcairn", cAlternateFileName="")) returned 1 [0169.688] wcscmp (_String1="Pitcairn", _String2=".") returned 1 [0169.688] wcscmp (_String1="Pitcairn", _String2="..") returned 1 [0169.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f23760 [0169.688] wcscpy (in: _Dest=0x3f23760, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.688] wcscat (in: _Dest=0x3f23760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.688] wcscat (in: _Dest=0x3f23760, _Source="Pitcairn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" [0169.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0169.689] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pohnpei", cAlternateFileName="")) returned 1 [0169.689] wcscmp (_String1="Pohnpei", _String2=".") returned 1 [0169.689] wcscmp (_String1="Pohnpei", _String2="..") returned 1 [0169.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f23ae0 [0169.689] wcscpy (in: _Dest=0x3f23ae0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.689] wcscat (in: _Dest=0x3f23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.689] wcscat (in: _Dest=0x3f23ae0, _Source="Pohnpei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" [0169.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0169.690] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_Moresby", cAlternateFileName="PORT_M~1")) returned 1 [0169.690] wcscmp (_String1="Port_Moresby", _String2=".") returned 1 [0169.690] wcscmp (_String1="Port_Moresby", _String2="..") returned 1 [0169.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0498 [0169.690] wcscpy (in: _Dest=0x66d0498, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.691] wcscat (in: _Dest=0x66d0498, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.691] wcscat (in: _Dest=0x66d0498, _Source="Port_Moresby" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" [0169.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66d0498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0169.692] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rarotonga", cAlternateFileName="RAROTO~1")) returned 1 [0169.692] wcscmp (_String1="Rarotonga", _String2=".") returned 1 [0169.692] wcscmp (_String1="Rarotonga", _String2="..") returned 1 [0169.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f234c0 [0169.692] wcscpy (in: _Dest=0x3f234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0169.692] wcscat (in: _Dest=0x3f234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0169.692] wcscat (in: _Dest=0x3f234c0, _Source="Rarotonga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" [0169.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0170.192] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saipan", cAlternateFileName="")) returned 1 [0170.192] wcscmp (_String1="Saipan", _String2=".") returned 1 [0170.192] wcscmp (_String1="Saipan", _String2="..") returned 1 [0170.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0170.192] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0170.192] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0170.192] wcscat (in: _Dest=0x3f293a0, _Source="Saipan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" [0172.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan")) returned 0x20 [0172.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0172.681] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.681] GetLastError () returned 0x5 [0172.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0172.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 [0172.682] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1 [0172.682] wcscmp (_String1="Tahiti", _String2=".") returned 1 [0172.682] wcscmp (_String1="Tahiti", _String2="..") returned 1 [0172.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0172.682] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0172.682] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0172.682] wcscat (in: _Dest=0x3f293a0, _Source="Tahiti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" [0172.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti")) returned 0x20 [0173.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0173.598] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.598] GetLastError () returned 0x5 [0173.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0173.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 [0173.599] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tarawa", cAlternateFileName="")) returned 1 [0173.599] wcscmp (_String1="Tarawa", _String2=".") returned 1 [0173.599] wcscmp (_String1="Tarawa", _String2="..") returned 1 [0173.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f293a0 [0173.599] wcscpy (in: _Dest=0x3f293a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.599] wcscat (in: _Dest=0x3f293a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.599] wcscat (in: _Dest=0x3f293a0, _Source="Tarawa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" [0173.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f293a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0173.936] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tongatapu", cAlternateFileName="TONGAT~1")) returned 1 [0173.936] wcscmp (_String1="Tongatapu", _String2=".") returned 1 [0173.936] wcscmp (_String1="Tongatapu", _String2="..") returned 1 [0173.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29090 [0173.936] wcscpy (in: _Dest=0x3f29090, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.936] wcscat (in: _Dest=0x3f29090, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.936] wcscat (in: _Dest=0x3f29090, _Source="Tongatapu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" [0173.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0173.937] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wake", cAlternateFileName="")) returned 1 [0173.938] wcscmp (_String1="Wake", _String2=".") returned 1 [0173.938] wcscmp (_String1="Wake", _String2="..") returned 1 [0173.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0173.938] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.938] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.938] wcscat (in: _Dest=0x3d8e140, _Source="Wake" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" [0173.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0173.939] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 1 [0173.939] wcscmp (_String1="Wallis", _String2=".") returned 1 [0173.939] wcscmp (_String1="Wallis", _String2="..") returned 1 [0173.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3f29cd0 [0173.939] wcscpy (in: _Dest=0x3f29cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.939] wcscat (in: _Dest=0x3f29cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.939] wcscat (in: _Dest=0x3f29cd0, _Source="Wallis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" [0173.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0173.941] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0 [0173.941] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0173.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0173.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0173.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 3127 os_tid = 0x143c [0161.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt")) returned 0x20 [0162.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0162.816] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.816] GetLastError () returned 0x5 [0162.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0162.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1ce8) returned 1 Thread: id = 3128 os_tid = 0x1440 [0161.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0161.121] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0161.121] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0161.121] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*" [0161.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0161.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0163.387] wcscmp (_String1=".", _String2=".") returned 0 [0163.387] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.387] wcscmp (_String1="..", _String2=".") returned 1 [0163.387] wcscmp (_String1="..", _String2="..") returned 0 [0163.387] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1 [0163.387] wcscmp (_String1="AST4", _String2=".") returned 1 [0163.387] wcscmp (_String1="AST4", _String2="..") returned 1 [0163.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e2e0 [0163.387] wcscpy (in: _Dest=0x3d8e2e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.387] wcscat (in: _Dest=0x3d8e2e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.387] wcscat (in: _Dest=0x3d8e2e0, _Source="AST4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" [0163.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0163.746] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4ADT", cAlternateFileName="")) returned 1 [0163.746] wcscmp (_String1="AST4ADT", _String2=".") returned 1 [0163.746] wcscmp (_String1="AST4ADT", _String2="..") returned 1 [0163.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29560 [0163.746] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.746] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.747] wcscat (in: _Dest=0x3f29560, _Source="AST4ADT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" [0163.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0163.748] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6", cAlternateFileName="")) returned 1 [0163.748] wcscmp (_String1="CST6", _String2=".") returned 1 [0163.748] wcscmp (_String1="CST6", _String2="..") returned 1 [0163.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e278 [0163.748] wcscpy (in: _Dest=0x3d8e278, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.748] wcscat (in: _Dest=0x3d8e278, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.748] wcscat (in: _Dest=0x3d8e278, _Source="CST6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" [0163.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0163.749] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0163.749] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0163.749] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0163.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f294f0 [0163.749] wcscpy (in: _Dest=0x3f294f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.749] wcscat (in: _Dest=0x3f294f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.749] wcscat (in: _Dest=0x3f294f0, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" [0163.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f294f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0163.750] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5", cAlternateFileName="")) returned 1 [0163.750] wcscmp (_String1="EST5", _String2=".") returned 1 [0163.750] wcscmp (_String1="EST5", _String2="..") returned 1 [0163.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8ccf0 [0163.750] wcscpy (in: _Dest=0x3d8ccf0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.750] wcscat (in: _Dest=0x3d8ccf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.750] wcscat (in: _Dest=0x3d8ccf0, _Source="EST5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" [0163.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8ccf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0163.751] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0163.751] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0163.752] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0163.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29800 [0163.752] wcscpy (in: _Dest=0x3f29800, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.752] wcscat (in: _Dest=0x3f29800, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.752] wcscat (in: _Dest=0x3f29800, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" [0163.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0163.753] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST10", cAlternateFileName="")) returned 1 [0163.753] wcscmp (_String1="HST10", _String2=".") returned 1 [0163.753] wcscmp (_String1="HST10", _String2="..") returned 1 [0163.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8de68 [0163.753] wcscpy (in: _Dest=0x3d8de68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.753] wcscat (in: _Dest=0x3d8de68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.753] wcscat (in: _Dest=0x3d8de68, _Source="HST10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" [0163.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0163.754] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7", cAlternateFileName="")) returned 1 [0163.754] wcscmp (_String1="MST7", _String2=".") returned 1 [0163.754] wcscmp (_String1="MST7", _String2="..") returned 1 [0163.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8dbf8 [0163.755] wcscpy (in: _Dest=0x3d8dbf8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.755] wcscat (in: _Dest=0x3d8dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.755] wcscat (in: _Dest=0x3d8dbf8, _Source="MST7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" [0163.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0163.756] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0163.756] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0163.756] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0163.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29790 [0163.756] wcscpy (in: _Dest=0x3f29790, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.756] wcscat (in: _Dest=0x3f29790, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.756] wcscat (in: _Dest=0x3f29790, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" [0163.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0163.757] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1 [0163.757] wcscmp (_String1="PST8", _String2=".") returned 1 [0163.757] wcscmp (_String1="PST8", _String2="..") returned 1 [0163.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8e140 [0163.757] wcscpy (in: _Dest=0x3d8e140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.757] wcscat (in: _Dest=0x3d8e140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.757] wcscat (in: _Dest=0x3d8e140, _Source="PST8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" [0163.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8e140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54 [0163.759] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0163.759] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0163.759] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0163.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29d40 [0163.759] wcscpy (in: _Dest=0x3f29d40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.759] wcscat (in: _Dest=0x3f29d40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.759] wcscat (in: _Dest=0x3f29d40, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" [0163.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0163.760] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9", cAlternateFileName="")) returned 1 [0163.760] wcscmp (_String1="YST9", _String2=".") returned 1 [0163.760] wcscmp (_String1="YST9", _String2="..") returned 1 [0163.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d510 [0163.760] wcscpy (in: _Dest=0x3d8d510, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.760] wcscat (in: _Dest=0x3d8d510, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.760] wcscat (in: _Dest=0x3d8d510, _Source="YST9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" [0163.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d8d510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0163.761] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 1 [0163.761] wcscmp (_String1="YST9YDT", _String2=".") returned 1 [0163.761] wcscmp (_String1="YST9YDT", _String2="..") returned 1 [0163.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3f29410 [0163.761] wcscpy (in: _Dest=0x3f29410, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0163.761] wcscat (in: _Dest=0x3f29410, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0163.761] wcscat (in: _Dest=0x3f29410, _Source="YST9YDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" [0163.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f29410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0163.762] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 0 [0163.762] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0163.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0163.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0163.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 3129 os_tid = 0x23c [0161.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet")) returned 0x20 [0162.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0162.801] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.801] GetLastError () returned 0x5 [0162.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0162.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef72e0) returned 1 Thread: id = 3130 os_tid = 0x3dc [0161.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings")) returned 0x20 [0162.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0162.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.803] GetLastError () returned 0x5 [0162.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0162.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f292c0) returned 1 Thread: id = 3131 os_tid = 0x1444 [0161.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0161.137] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0161.138] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\" [0161.138] wcscat (in: _Dest=0x3df0648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*" [0161.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0161.138] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0161.138] wcscmp (_String1=".", _String2=".") returned 0 [0161.138] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.138] wcscmp (_String1="..", _String2=".") returned 1 [0161.138] wcscmp (_String1="..", _String2="..") returned 0 [0161.138] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.138] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0161.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0161.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 [0161.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df04b8) returned 1 Thread: id = 3132 os_tid = 0x1448 [0161.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df04b8 [0161.140] wcscpy (in: _Dest=0x3df04b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0161.140] wcscat (in: _Dest=0x3df04b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\" [0161.140] wcscat (in: _Dest=0x3df04b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*" [0161.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0161.140] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0161.141] wcscmp (_String1=".", _String2=".") returned 0 [0161.141] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.141] wcscmp (_String1="..", _String2=".") returned 1 [0161.141] wcscmp (_String1="..", _String2="..") returned 0 [0161.141] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.141] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0161.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0161.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df04b8) returned 1 [0161.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0198) returned 1 Thread: id = 3133 os_tid = 0x144c [0161.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0198 [0161.146] wcscpy (in: _Dest=0x3df0198, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0161.146] wcscat (in: _Dest=0x3df0198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\" [0161.146] wcscat (in: _Dest=0x3df0198, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*" [0161.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0161.146] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0161.147] wcscmp (_String1=".", _String2=".") returned 0 [0161.147] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.147] wcscmp (_String1="..", _String2=".") returned 1 [0161.147] wcscmp (_String1="..", _String2="..") returned 0 [0161.147] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.147] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0161.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0161.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0198) returned 1 [0161.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 Thread: id = 3134 os_tid = 0x8d0 [0161.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defe78 [0161.149] wcscpy (in: _Dest=0x3defe78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0161.149] wcscat (in: _Dest=0x3defe78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\" [0161.149] wcscat (in: _Dest=0x3defe78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*" [0161.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0161.149] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.599] wcscmp (_String1=".", _String2=".") returned 0 [0167.599] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.599] wcscmp (_String1="..", _String2=".") returned 1 [0167.599] wcscmp (_String1="..", _String2="..") returned 0 [0167.600] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.600] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0167.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defe78) returned 1 [0167.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0580) returned 1 Thread: id = 3135 os_tid = 0x1450 [0161.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0198 [0161.150] wcscpy (in: _Dest=0x3df0198, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0161.150] wcscat (in: _Dest=0x3df0198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\" [0161.150] wcscat (in: _Dest=0x3df0198, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*" [0161.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cd08 [0161.150] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*", lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.601] wcscmp (_String1=".", _String2=".") returned 0 [0167.601] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.601] wcscmp (_String1="..", _String2=".") returned 1 [0167.601] wcscmp (_String1="..", _String2="..") returned 0 [0167.601] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.601] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cd08) returned 1 [0167.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0198) returned 1 [0167.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def068) returned 1 Thread: id = 3136 os_tid = 0x1454 [0161.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df04b8 [0161.152] wcscpy (in: _Dest=0x3df04b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0161.152] wcscat (in: _Dest=0x3df04b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\" [0161.152] wcscat (in: _Dest=0x3df04b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*" [0161.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a688 [0161.152] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*", lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.375] wcscmp (_String1=".", _String2=".") returned 0 [0168.376] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.376] wcscmp (_String1="..", _String2=".") returned 1 [0168.376] wcscmp (_String1="..", _String2="..") returned 0 [0168.376] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.376] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a688) returned 1 [0168.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df04b8) returned 1 [0168.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def2c0) returned 1 Thread: id = 3137 os_tid = 0x1258 [0161.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0648 [0161.169] wcscpy (in: _Dest=0x3df0648, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0161.169] wcscat (in: _Dest=0x3df0648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\" [0161.169] wcscat (in: _Dest=0x3df0648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*" [0161.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c838 [0161.169] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*", lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.614] wcscmp (_String1=".", _String2=".") returned 0 [0167.614] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.614] wcscmp (_String1="..", _String2=".") returned 1 [0167.614] wcscmp (_String1="..", _String2="..") returned 0 [0167.614] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.614] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c838) returned 1 [0167.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0648) returned 1 [0167.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defce8) returned 1 Thread: id = 3138 os_tid = 0x1458 [0161.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0710 [0161.171] wcscpy (in: _Dest=0x3df0710, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0161.171] wcscat (in: _Dest=0x3df0710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\" [0161.171] wcscat (in: _Dest=0x3df0710, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*" [0161.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c100 [0161.171] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*", lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.615] wcscmp (_String1=".", _String2=".") returned 0 [0167.615] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.615] wcscmp (_String1="..", _String2=".") returned 1 [0167.615] wcscmp (_String1="..", _String2="..") returned 0 [0167.615] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.616] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c100) returned 1 [0167.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0710) returned 1 [0167.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def5e0) returned 1 Thread: id = 3139 os_tid = 0x145c [0161.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df08a0 [0161.172] wcscpy (in: _Dest=0x3df08a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0161.172] wcscat (in: _Dest=0x3df08a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\" [0161.172] wcscat (in: _Dest=0x3df08a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*" [0161.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d910 [0161.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*", lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.617] wcscmp (_String1=".", _String2=".") returned 0 [0167.617] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.617] wcscmp (_String1="..", _String2=".") returned 1 [0167.617] wcscmp (_String1="..", _String2="..") returned 0 [0167.617] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.618] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d910) returned 1 [0167.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df08a0) returned 1 [0167.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defa90) returned 1 Thread: id = 3140 os_tid = 0x1460 [0161.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df07d8 [0161.175] wcscpy (in: _Dest=0x3df07d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0161.175] wcscat (in: _Dest=0x3df07d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\" [0161.175] wcscat (in: _Dest=0x3df07d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*" [0161.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0161.175] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.619] wcscmp (_String1=".", _String2=".") returned 0 [0167.619] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.619] wcscmp (_String1="..", _String2=".") returned 1 [0167.619] wcscmp (_String1="..", _String2="..") returned 0 [0167.619] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.619] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0167.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df07d8) returned 1 [0167.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def900) returned 1 Thread: id = 3141 os_tid = 0x974 [0161.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0a30 [0161.176] wcscpy (in: _Dest=0x3df0a30, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0161.176] wcscat (in: _Dest=0x3df0a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\" [0161.176] wcscat (in: _Dest=0x3df0a30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*" [0161.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0161.177] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0166.882] wcscmp (_String1=".", _String2=".") returned 0 [0166.882] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.882] wcscmp (_String1="..", _String2=".") returned 1 [0166.882] wcscmp (_String1="..", _String2="..") returned 0 [0166.882] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.882] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0166.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0166.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0a30) returned 1 [0166.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dce8) returned 1 Thread: id = 3142 os_tid = 0xfc4 [0161.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e7d8 [0161.178] wcscpy (in: _Dest=0x682e7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0161.178] wcscat (in: _Dest=0x682e7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\" [0161.178] wcscat (in: _Dest=0x682e7d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*" [0161.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a8f0 [0161.178] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.372] wcscmp (_String1=".", _String2=".") returned 0 [0168.372] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.372] wcscmp (_String1="..", _String2=".") returned 1 [0168.372] wcscmp (_String1="..", _String2="..") returned 0 [0168.372] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.372] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a8f0) returned 1 [0168.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e7d8) returned 1 [0168.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ddb0) returned 1 Thread: id = 3143 os_tid = 0xb98 [0161.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e8a0 [0161.179] wcscpy (in: _Dest=0x682e8a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0161.179] wcscat (in: _Dest=0x682e8a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\" [0161.179] wcscat (in: _Dest=0x682e8a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*" [0161.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b290 [0161.179] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*", lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0165.415] wcscmp (_String1=".", _String2=".") returned 0 [0165.415] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.415] wcscmp (_String1="..", _String2=".") returned 1 [0165.415] wcscmp (_String1="..", _String2="..") returned 0 [0165.415] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x697b290 | out: lpFindFileData=0x697b290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0165.415] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0165.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b290) returned 1 [0165.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e8a0) returned 1 [0165.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 Thread: id = 3144 os_tid = 0xe18 [0161.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e968 [0161.180] wcscpy (in: _Dest=0x682e968, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0161.180] wcscat (in: _Dest=0x682e968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\" [0161.180] wcscat (in: _Dest=0x682e968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*" [0161.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697be98 [0161.180] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*", lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.602] wcscmp (_String1=".", _String2=".") returned 0 [0167.602] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.602] wcscmp (_String1="..", _String2=".") returned 1 [0167.602] wcscmp (_String1="..", _String2="..") returned 0 [0167.602] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.602] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697be98) returned 1 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e968) returned 1 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682df40) returned 1 Thread: id = 3145 os_tid = 0x14ec [0161.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ea30 [0161.181] wcscpy (in: _Dest=0x682ea30, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0161.181] wcscat (in: _Dest=0x682ea30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\" [0161.181] wcscat (in: _Dest=0x682ea30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*" [0161.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b9c8 [0161.181] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.604] wcscmp (_String1=".", _String2=".") returned 0 [0167.604] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.604] wcscmp (_String1="..", _String2=".") returned 1 [0167.604] wcscmp (_String1="..", _String2="..") returned 0 [0167.604] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.604] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b9c8) returned 1 [0167.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ea30) returned 1 [0167.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e008) returned 1 Thread: id = 3146 os_tid = 0x9f0 [0161.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682eaf8 [0161.181] wcscpy (in: _Dest=0x682eaf8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0161.181] wcscat (in: _Dest=0x682eaf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\" [0161.181] wcscat (in: _Dest=0x682eaf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*" [0161.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0161.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.605] wcscmp (_String1=".", _String2=".") returned 0 [0167.605] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.605] wcscmp (_String1="..", _String2=".") returned 1 [0167.605] wcscmp (_String1="..", _String2="..") returned 0 [0167.606] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.606] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0167.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682eaf8) returned 1 [0167.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e0d0) returned 1 Thread: id = 3147 os_tid = 0x1780 [0161.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ebc0 [0161.182] wcscpy (in: _Dest=0x682ebc0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0161.182] wcscat (in: _Dest=0x682ebc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\" [0161.182] wcscat (in: _Dest=0x682ebc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*" [0161.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0161.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.607] wcscmp (_String1=".", _String2=".") returned 0 [0167.607] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.607] wcscmp (_String1="..", _String2=".") returned 1 [0167.607] wcscmp (_String1="..", _String2="..") returned 0 [0167.607] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.607] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0167.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ebc0) returned 1 [0167.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e198) returned 1 Thread: id = 3148 os_tid = 0x1790 [0161.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ec88 [0161.183] wcscpy (in: _Dest=0x682ec88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0161.183] wcscat (in: _Dest=0x682ec88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\" [0161.183] wcscat (in: _Dest=0x682ec88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*" [0161.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0161.183] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.612] wcscmp (_String1=".", _String2=".") returned 0 [0167.612] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.613] wcscmp (_String1="..", _String2=".") returned 1 [0167.613] wcscmp (_String1="..", _String2="..") returned 0 [0167.613] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.613] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0167.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ec88) returned 1 [0167.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e260) returned 1 Thread: id = 3149 os_tid = 0x17b4 [0161.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ed50 [0161.184] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0161.184] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\" [0161.184] wcscat (in: _Dest=0x682ed50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*" [0161.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0161.184] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0165.412] wcscmp (_String1=".", _String2=".") returned 0 [0165.412] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.413] wcscmp (_String1="..", _String2=".") returned 1 [0165.413] wcscmp (_String1="..", _String2="..") returned 0 [0165.413] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0165.413] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0165.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0165.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 [0165.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e328) returned 1 Thread: id = 3150 os_tid = 0x5f8 [0161.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ee18 [0161.184] wcscpy (in: _Dest=0x682ee18, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0161.185] wcscat (in: _Dest=0x682ee18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\" [0161.185] wcscat (in: _Dest=0x682ee18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*" [0161.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0161.185] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.608] wcscmp (_String1=".", _String2=".") returned 0 [0167.608] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.608] wcscmp (_String1="..", _String2=".") returned 1 [0167.608] wcscmp (_String1="..", _String2="..") returned 0 [0167.608] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.608] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0167.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ee18) returned 1 [0167.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e3f0) returned 1 Thread: id = 3151 os_tid = 0x1574 [0161.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682eee0 [0161.185] wcscpy (in: _Dest=0x682eee0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0161.185] wcscat (in: _Dest=0x682eee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\" [0161.185] wcscat (in: _Dest=0x682eee0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*" [0161.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0161.185] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.610] wcscmp (_String1=".", _String2=".") returned 0 [0167.610] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.610] wcscmp (_String1="..", _String2=".") returned 1 [0167.610] wcscmp (_String1="..", _String2="..") returned 0 [0167.610] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.610] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0167.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682eee0) returned 1 [0167.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e4b8) returned 1 Thread: id = 3152 os_tid = 0x1578 [0161.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682efa8 [0161.186] wcscpy (in: _Dest=0x682efa8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0161.186] wcscat (in: _Dest=0x682efa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\" [0161.186] wcscat (in: _Dest=0x682efa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*" [0161.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0161.186] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.611] wcscmp (_String1=".", _String2=".") returned 0 [0167.611] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.611] wcscmp (_String1="..", _String2=".") returned 1 [0167.611] wcscmp (_String1="..", _String2="..") returned 0 [0167.611] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.611] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0167.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682efa8) returned 1 [0167.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e580) returned 1 Thread: id = 3153 os_tid = 0x860 [0161.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f070 [0161.188] wcscpy (in: _Dest=0x682f070, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0161.188] wcscat (in: _Dest=0x682f070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\" [0161.188] wcscat (in: _Dest=0x682f070, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*" [0161.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0161.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0167.917] wcscmp (_String1=".", _String2=".") returned 0 [0167.917] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.917] wcscmp (_String1="..", _String2=".") returned 1 [0167.917] wcscmp (_String1="..", _String2="..") returned 0 [0167.917] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.917] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0167.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0167.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f070) returned 1 [0167.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 Thread: id = 3154 os_tid = 0x157c [0161.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0328 [0161.753] wcscpy (in: _Dest=0x3df0328, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0161.753] wcscat (in: _Dest=0x3df0328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\" [0161.753] wcscat (in: _Dest=0x3df0328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*" [0161.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0161.753] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.374] wcscmp (_String1=".", _String2=".") returned 0 [0168.374] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.374] wcscmp (_String1="..", _String2=".") returned 1 [0168.374] wcscmp (_String1="..", _String2="..") returned 0 [0168.374] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.374] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0168.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0328) returned 1 [0168.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e710) returned 1 Thread: id = 3155 os_tid = 0x1580 [0161.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7150 [0161.753] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.753] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.754] wcscat (in: _Dest=0x2ff7150, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0161.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0161.754] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0161.754] wcscmp (_String1=".", _String2=".") returned 0 [0161.754] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.754] wcscmp (_String1="..", _String2=".") returned 1 [0161.754] wcscmp (_String1="..", _String2="..") returned 0 [0161.754] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0161.754] wcscmp (_String1="background.png", _String2=".") returned 1 [0161.754] wcscmp (_String1="background.png", _String2="..") returned 1 [0161.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036210 [0161.754] wcscpy (in: _Dest=0x3036210, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0161.754] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0161.754] wcscat (in: _Dest=0x3036210, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0172.268] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0172.268] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0172.269] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.269] GetLastError () returned 0x5 [0172.269] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0172.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 [0172.269] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0172.269] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0172.269] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0172.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036210 [0172.269] wcscpy (in: _Dest=0x3036210, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0172.269] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0172.269] wcscat (in: _Dest=0x3036210, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0172.270] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0172.270] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0172.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.270] GetLastError () returned 0x5 [0172.270] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0172.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 [0172.271] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0172.271] wcscmp (_String1="device.png", _String2=".") returned 1 [0172.271] wcscmp (_String1="device.png", _String2="..") returned 1 [0172.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ed50 [0172.271] wcscpy (in: _Dest=0x682ed50, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0172.271] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0172.271] wcscat (in: _Dest=0x682ed50, _Source="device.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0172.271] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0172.271] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0172.271] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.272] GetLastError () returned 0x5 [0172.272] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0172.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 [0172.272] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0172.272] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0172.272] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0172.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682ed50 [0172.272] wcscpy (in: _Dest=0x682ed50, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0172.272] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0172.272] wcscat (in: _Dest=0x682ed50, _Source="overlay.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0172.272] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0172.273] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0172.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.273] GetLastError () returned 0x5 [0172.273] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0172.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 [0172.273] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0172.273] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0172.273] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0172.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036210 [0172.273] wcscpy (in: _Dest=0x3036210, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0172.274] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0172.274] wcscat (in: _Dest=0x3036210, _Source="superbar.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0172.274] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0172.274] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0172.274] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.274] GetLastError () returned 0x5 [0172.274] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0172.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 [0172.275] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0172.275] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0172.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0172.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0172.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 3156 os_tid = 0x12dc [0161.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0161.755] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0161.755] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0161.755] wcscat (in: _Dest=0x2ff6f28, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0161.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0161.755] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0161.755] wcscmp (_String1=".", _String2=".") returned 0 [0161.755] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.755] wcscmp (_String1="..", _String2=".") returned 1 [0161.755] wcscmp (_String1="..", _String2="..") returned 0 [0161.756] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0161.756] wcscmp (_String1="background.png", _String2=".") returned 1 [0161.756] wcscmp (_String1="background.png", _String2="..") returned 1 [0161.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036ca0 [0161.756] wcscpy (in: _Dest=0x3036ca0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0161.756] wcscat (in: _Dest=0x3036ca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0161.756] wcscat (in: _Dest=0x3036ca0, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0166.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0166.614] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0166.614] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0166.614] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0166.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x30352a0 [0166.614] wcscpy (in: _Dest=0x30352a0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0166.614] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0166.614] wcscat (in: _Dest=0x30352a0, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0166.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0166.615] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0166.615] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0166.615] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0166.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036b00 [0166.615] wcscpy (in: _Dest=0x3036b00, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0166.615] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0166.615] wcscat (in: _Dest=0x3036b00, _Source="watermark.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0166.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0166.616] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0166.616] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0166.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0166.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 [0166.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 3157 os_tid = 0x12e8 [0161.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 0x20 [0161.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.757] GetLastError () returned 0x5 [0161.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 3158 os_tid = 0x1584 [0161.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 0x20 [0161.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.769] GetLastError () returned 0x5 [0161.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68192e0) returned 1 Thread: id = 3159 os_tid = 0x1588 [0161.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 0x20 [0161.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.771] GetLastError () returned 0x5 [0161.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c25d0) returned 1 Thread: id = 3160 os_tid = 0x158c [0161.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 0x20 [0161.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.773] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.773] GetLastError () returned 0x5 [0161.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819378) returned 1 Thread: id = 3161 os_tid = 0x1590 [0161.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 0x20 [0161.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.774] GetLastError () returned 0x5 [0161.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0161.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2830) returned 1 Thread: id = 3162 os_tid = 0x1594 [0161.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 0x20 [0161.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.776] GetLastError () returned 0x5 [0161.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0161.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819a00) returned 1 Thread: id = 3163 os_tid = 0x738 [0161.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif")) returned 0x20 [0161.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0161.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.778] GetLastError () returned 0x5 [0161.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0161.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 Thread: id = 3164 os_tid = 0x1598 [0161.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif")) returned 0x20 [0162.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0162.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.889] GetLastError () returned 0x5 [0162.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0162.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 3165 os_tid = 0x159c [0161.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif")) returned 0x20 [0163.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0163.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.179] GetLastError () returned 0x5 [0163.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0163.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 3166 os_tid = 0x15a0 [0161.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif")) returned 0x20 [0163.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0163.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.184] GetLastError () returned 0x5 [0163.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0163.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 3167 os_tid = 0x15a4 [0161.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif")) returned 0x20 [0163.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0163.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.186] GetLastError () returned 0x5 [0163.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0163.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 3168 os_tid = 0x12ec [0161.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif")) returned 0x20 [0163.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0163.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.188] GetLastError () returned 0x5 [0163.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0163.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 3169 os_tid = 0x15a8 [0161.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif")) returned 0x20 [0163.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0163.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.200] GetLastError () returned 0x5 [0163.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0163.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 3170 os_tid = 0x15ac [0161.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif")) returned 0x20 [0163.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0163.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.190] GetLastError () returned 0x5 [0163.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0163.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 3171 os_tid = 0xe34 [0161.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif")) returned 0x20 [0162.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0162.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.579] GetLastError () returned 0x5 [0162.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0162.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 3172 os_tid = 0xeb4 [0161.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif")) returned 0x20 [0163.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0163.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.177] GetLastError () returned 0x5 [0163.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0163.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcee8) returned 1 Thread: id = 3173 os_tid = 0x12f0 [0161.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif")) returned 0x20 [0163.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0163.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.192] GetLastError () returned 0x5 [0163.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0163.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 3174 os_tid = 0x15b0 [0161.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif")) returned 0x20 [0163.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0163.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.194] GetLastError () returned 0x5 [0163.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0163.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 3175 os_tid = 0x12f4 [0161.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif")) returned 0x20 [0163.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0163.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.196] GetLastError () returned 0x5 [0163.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0163.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 3176 os_tid = 0xa34 [0161.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif")) returned 0x20 [0163.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0163.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.198] GetLastError () returned 0x5 [0163.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0163.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc1f8) returned 1 Thread: id = 3177 os_tid = 0xb7c [0161.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6180 [0161.793] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0161.793] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0161.793] wcscat (in: _Dest=0x2ff6180, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*" [0161.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0161.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0162.891] wcscmp (_String1=".", _String2=".") returned 0 [0162.891] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.891] wcscmp (_String1="..", _String2=".") returned 1 [0162.891] wcscmp (_String1="..", _String2="..") returned 0 [0162.891] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0162.891] wcscmp (_String1="SignedComponents.cer", _String2=".") returned 1 [0162.891] wcscmp (_String1="SignedComponents.cer", _String2="..") returned 1 [0162.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9448 [0162.891] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0162.891] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0162.891] wcscat (in: _Dest=0x2c9448, _Source="SignedComponents.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" [0165.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0165.263] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0165.263] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0165.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0165.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0165.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1268) returned 1 Thread: id = 3178 os_tid = 0xeb0 [0161.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0161.794] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0161.794] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0161.794] wcscat (in: _Dest=0x3330a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*" [0161.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0161.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0162.416] wcscmp (_String1=".", _String2=".") returned 0 [0162.416] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.416] wcscmp (_String1="..", _String2=".") returned 1 [0162.416] wcscmp (_String1="..", _String2="..") returned 0 [0162.416] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0162.416] wcscmp (_String1="SignedManagedObjects.cer", _String2=".") returned 1 [0162.416] wcscmp (_String1="SignedManagedObjects.cer", _String2="..") returned 1 [0162.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea81d8 [0162.416] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0162.416] wcscat (in: _Dest=0x3ea81d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0162.416] wcscat (in: _Dest=0x3ea81d8, _Source="SignedManagedObjects.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" [0165.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea81d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0165.283] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0165.283] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0165.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0165.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 [0165.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 3179 os_tid = 0x6d0 [0161.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0161.795] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0161.795] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0161.795] wcscat (in: _Dest=0x35c378, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*" [0161.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0161.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0162.581] wcscmp (_String1=".", _String2=".") returned 0 [0162.581] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.581] wcscmp (_String1="..", _String2=".") returned 1 [0162.581] wcscmp (_String1="..", _String2="..") returned 0 [0162.581] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1 [0162.581] wcscmp (_String1="Management.cer", _String2=".") returned 1 [0162.581] wcscmp (_String1="Management.cer", _String2="..") returned 1 [0162.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036b00 [0162.581] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0162.581] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0162.582] wcscat (in: _Dest=0x3036b00, _Source="Management.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" [0163.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0163.766] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0163.766] wcscmp (_String1="RELAY.CER", _String2=".") returned 1 [0163.766] wcscmp (_String1="RELAY.CER", _String2="..") returned 1 [0163.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333a68 [0163.766] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0163.766] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0163.767] wcscat (in: _Dest=0x333a68, _Source="RELAY.CER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" [0163.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0163.768] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0163.768] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0163.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0163.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0163.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 3180 os_tid = 0x4e4 [0161.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819a00 [0161.795] wcscpy (in: _Dest=0x6819a00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.795] wcscat (in: _Dest=0x6819a00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0161.795] wcscat (in: _Dest=0x6819a00, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0161.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0161.795] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0161.796] wcscmp (_String1=".", _String2=".") returned 0 [0161.796] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.796] wcscmp (_String1="..", _String2=".") returned 1 [0161.796] wcscmp (_String1="..", _String2="..") returned 0 [0161.796] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0161.796] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0161.796] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0161.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0161.796] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0161.796] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0161.796] wcscat (in: _Dest=0x35b7c8, _Source="Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0170.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0170.820] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0170.820] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0170.820] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0170.820] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0170.820] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0170.820] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0170.820] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0170.820] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0170.820] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0170.820] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0170.820] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0170.820] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0170.821] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0170.821] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0170.821] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0170.821] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0170.821] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0170.821] wcscmp (_String1="System Tools", _String2=".") returned 1 [0170.821] wcscmp (_String1="System Tools", _String2="..") returned 1 [0170.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2d00 [0170.822] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0170.822] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0170.822] wcscat (in: _Dest=0x3ea2d00, _Source="System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0170.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0170.823] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0170.823] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0170.823] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0170.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ca10 [0170.823] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0170.823] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0170.823] wcscat (in: _Dest=0x3e5ca10, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0170.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0170.824] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0170.824] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0170.824] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0170.824] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0170.824] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0170.824] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0170.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2688 [0170.824] wcscpy (in: _Dest=0x3ee2688, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0170.824] wcscat (in: _Dest=0x3ee2688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0170.824] wcscat (in: _Dest=0x3ee2688, _Source="Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0170.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee2688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0170.826] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0170.826] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0170.826] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0170.826] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0170.826] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0170.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0170.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819a00) returned 1 [0170.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 3181 os_tid = 0x15b4 [0161.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697ea08 [0161.797] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0161.797] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0161.797] wcscat (in: _Dest=0x697ea08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0161.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0161.797] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0161.799] wcscmp (_String1=".", _String2=".") returned 0 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.799] wcscmp (_String1="..", _String2=".") returned 1 [0161.799] wcscmp (_String1="..", _String2="..") returned 0 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0161.799] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0161.799] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0161.799] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0161.799] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0161.799] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0161.799] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.799] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0161.799] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0161.799] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0161.800] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0161.800] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0161.800] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0161.800] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0161.800] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0161.800] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0161.800] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0161.801] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0161.801] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0161.801] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0161.801] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0161.801] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0161.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0161.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0161.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 Thread: id = 3182 os_tid = 0xfec [0161.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d7a8 [0161.804] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0161.804] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0161.804] wcscat (in: _Dest=0x674d7a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0161.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0161.804] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0161.804] wcscmp (_String1=".", _String2=".") returned 0 [0161.804] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.804] wcscmp (_String1="..", _String2=".") returned 1 [0161.804] wcscmp (_String1="..", _String2="..") returned 0 [0161.804] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.804] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0161.804] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0161.804] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0161.804] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0161.804] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0161.804] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0161.804] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0161.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0161.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 [0161.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 3183 os_tid = 0xc14 [0161.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0161.806] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0161.806] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0161.806] wcscat (in: _Dest=0x3f26838, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0161.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0161.806] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0161.808] wcscmp (_String1=".", _String2=".") returned 0 [0161.808] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.808] wcscmp (_String1="..", _String2=".") returned 1 [0161.808] wcscmp (_String1="..", _String2="..") returned 0 [0161.808] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0161.808] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0161.808] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0161.808] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0161.808] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0161.808] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0161.808] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0161.808] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0161.808] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0161.808] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0161.808] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0161.809] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0161.809] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0161.809] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0161.809] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0161.809] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0161.809] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0161.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0161.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 [0161.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 3184 os_tid = 0xb40 [0161.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6819378 [0161.816] wcscpy (in: _Dest=0x6819378, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0161.816] wcscat (in: _Dest=0x6819378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0161.816] wcscat (in: _Dest=0x6819378, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0161.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0161.816] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0161.816] wcscmp (_String1=".", _String2=".") returned 0 [0161.816] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.816] wcscmp (_String1="..", _String2=".") returned 1 [0161.816] wcscmp (_String1="..", _String2="..") returned 0 [0161.816] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0161.816] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0161.816] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0161.816] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0161.817] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0161.817] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0161.817] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0161.817] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0161.817] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0161.817] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0161.817] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0161.817] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0161.817] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0161.817] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0161.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0161.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819378) returned 1 [0161.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68191b0) returned 1 Thread: id = 3185 os_tid = 0xcd4 [0161.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0dc8 [0161.819] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0161.819] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0161.819] wcscat (in: _Dest=0x69c0dc8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0161.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0161.819] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0161.819] wcscmp (_String1=".", _String2=".") returned 0 [0161.819] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.819] wcscmp (_String1="..", _String2=".") returned 1 [0161.819] wcscmp (_String1="..", _String2="..") returned 0 [0161.819] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0161.819] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0161.820] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0161.820] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0161.820] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0161.820] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0161.820] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0161.820] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0161.820] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0161.820] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0161.820] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0161.820] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0161.820] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0161.820] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0161.820] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0161.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3012a00 [0161.820] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0161.820] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0161.820] wcscat (in: _Dest=0x3012a00, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0163.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0163.328] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0163.329] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0163.329] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0163.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0163.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 [0163.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 3186 os_tid = 0x888 [0161.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x68191b0 [0161.821] wcscpy (in: _Dest=0x68191b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0161.821] wcscat (in: _Dest=0x68191b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0161.821] wcscat (in: _Dest=0x68191b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0161.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0161.821] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0161.823] wcscmp (_String1=".", _String2=".") returned 0 [0161.823] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.823] wcscmp (_String1="..", _String2=".") returned 1 [0161.823] wcscmp (_String1="..", _String2="..") returned 0 [0161.824] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0161.824] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0161.824] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0161.824] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0161.824] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0161.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0161.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68191b0) returned 1 [0161.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 3187 os_tid = 0x8d8 [0161.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbce8 [0161.827] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0161.827] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0161.827] wcscat (in: _Dest=0x66dbce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0161.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0161.827] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0161.827] wcscmp (_String1=".", _String2=".") returned 0 [0161.827] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.827] wcscmp (_String1="..", _String2=".") returned 1 [0161.827] wcscmp (_String1="..", _String2="..") returned 0 [0161.827] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.827] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0161.827] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0161.827] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0161.827] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0161.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0161.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 [0161.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 3188 os_tid = 0x8d4 [0161.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68191b0 [0161.845] wcscpy (in: _Dest=0x68191b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0161.845] wcscat (in: _Dest=0x68191b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0161.845] wcscat (in: _Dest=0x68191b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0161.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0161.845] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0161.846] wcscmp (_String1=".", _String2=".") returned 0 [0161.846] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.846] wcscmp (_String1="..", _String2=".") returned 1 [0161.846] wcscmp (_String1="..", _String2="..") returned 0 [0161.846] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.846] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0161.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0161.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68191b0) returned 1 [0161.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 3189 os_tid = 0x8a0 [0161.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 0x20 [0162.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.895] GetLastError () returned 0x5 [0162.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0162.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 3190 os_tid = 0xe54 [0161.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 0x20 [0162.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0162.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.897] GetLastError () returned 0x5 [0162.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0162.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 3191 os_tid = 0x8e0 [0161.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 0x20 [0162.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.424] GetLastError () returned 0x5 [0162.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 3192 os_tid = 0xe50 [0161.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 0x20 [0162.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.427] GetLastError () returned 0x5 [0162.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0162.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 3193 os_tid = 0xde4 [0161.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db868 [0161.851] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0161.851] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0161.851] wcscat (in: _Dest=0x66db868, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*" [0161.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0161.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0162.428] wcscmp (_String1=".", _String2=".") returned 0 [0162.428] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.923] wcscmp (_String1="..", _String2=".") returned 1 [0162.923] wcscmp (_String1="..", _String2="..") returned 0 [0162.923] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0162.923] wcscmp (_String1="Flash.CAT", _String2=".") returned 1 [0162.923] wcscmp (_String1="Flash.CAT", _String2="..") returned 1 [0162.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e890 [0162.923] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0162.923] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0162.923] wcscat (in: _Dest=0x3e0e890, _Source="Flash.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" [0166.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0166.821] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0166.821] wcscmp (_String1="Flash.CHS", _String2=".") returned 1 [0166.821] wcscmp (_String1="Flash.CHS", _String2="..") returned 1 [0166.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0328 [0166.822] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.822] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.822] wcscat (in: _Dest=0x69c0328, _Source="Flash.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" [0166.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0166.823] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0166.823] wcscmp (_String1="Flash.CHT", _String2=".") returned 1 [0166.823] wcscmp (_String1="Flash.CHT", _String2="..") returned 1 [0166.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1548 [0166.823] wcscpy (in: _Dest=0x69c1548, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.823] wcscat (in: _Dest=0x69c1548, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.823] wcscat (in: _Dest=0x69c1548, _Source="Flash.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" [0166.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0166.824] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0166.824] wcscmp (_String1="Flash.DAN", _String2=".") returned 1 [0166.824] wcscmp (_String1="Flash.DAN", _String2="..") returned 1 [0166.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0468 [0166.824] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.824] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.824] wcscat (in: _Dest=0x69c0468, _Source="Flash.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" [0166.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0166.826] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0166.826] wcscmp (_String1="Flash.DEU", _String2=".") returned 1 [0166.826] wcscmp (_String1="Flash.DEU", _String2="..") returned 1 [0166.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfe28 [0166.826] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.826] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.826] wcscat (in: _Dest=0x69bfe28, _Source="Flash.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" [0166.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0166.827] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0166.827] wcscmp (_String1="Flash.ESP", _String2=".") returned 1 [0166.827] wcscmp (_String1="Flash.ESP", _String2="..") returned 1 [0166.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0b48 [0166.827] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.827] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.827] wcscat (in: _Dest=0x69c0b48, _Source="Flash.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" [0166.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0166.828] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0166.828] wcscmp (_String1="Flash.EUQ", _String2=".") returned 1 [0166.828] wcscmp (_String1="Flash.EUQ", _String2="..") returned 1 [0166.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c05a8 [0166.828] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.828] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.828] wcscat (in: _Dest=0x69c05a8, _Source="Flash.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" [0166.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0166.830] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0166.830] wcscmp (_String1="Flash.FRA", _String2=".") returned 1 [0166.830] wcscmp (_String1="Flash.FRA", _String2="..") returned 1 [0166.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0648 [0166.830] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.830] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.830] wcscat (in: _Dest=0x69c0648, _Source="Flash.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" [0166.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0166.831] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0166.831] wcscmp (_String1="Flash.ITA", _String2=".") returned 1 [0166.831] wcscmp (_String1="Flash.ITA", _String2="..") returned 1 [0166.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0e68 [0166.831] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.831] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.831] wcscat (in: _Dest=0x69c0e68, _Source="Flash.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" [0166.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0166.832] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0166.832] wcscmp (_String1="Flash.JPN", _String2=".") returned 1 [0166.832] wcscmp (_String1="Flash.JPN", _String2="..") returned 1 [0166.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c14a8 [0166.832] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.832] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.832] wcscat (in: _Dest=0x69c14a8, _Source="Flash.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" [0166.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0166.833] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0166.833] wcscmp (_String1="Flash.KOR", _String2=".") returned 1 [0166.833] wcscmp (_String1="Flash.KOR", _String2="..") returned 1 [0166.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c06e8 [0166.833] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.833] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.833] wcscat (in: _Dest=0x69c06e8, _Source="Flash.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" [0166.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0166.834] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda27c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0166.834] wcscmp (_String1="Flash.mpp", _String2=".") returned 1 [0166.834] wcscmp (_String1="Flash.mpp", _String2="..") returned 1 [0166.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bff68 [0166.835] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.835] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.835] wcscat (in: _Dest=0x69bff68, _Source="Flash.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" [0166.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0166.836] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0166.836] wcscmp (_String1="Flash.NLD", _String2=".") returned 1 [0166.836] wcscmp (_String1="Flash.NLD", _String2="..") returned 1 [0166.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1368 [0166.836] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.836] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.836] wcscat (in: _Dest=0x69c1368, _Source="Flash.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" [0166.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0166.837] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0166.837] wcscmp (_String1="Flash.NOR", _String2=".") returned 1 [0166.837] wcscmp (_String1="Flash.NOR", _String2="..") returned 1 [0166.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0fa8 [0166.837] wcscpy (in: _Dest=0x69c0fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.837] wcscat (in: _Dest=0x69c0fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.837] wcscat (in: _Dest=0x69c0fa8, _Source="Flash.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" [0166.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0166.838] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0166.838] wcscmp (_String1="Flash.PTB", _String2=".") returned 1 [0166.838] wcscmp (_String1="Flash.PTB", _String2="..") returned 1 [0166.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0dc8 [0166.838] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.838] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.838] wcscat (in: _Dest=0x69c0dc8, _Source="Flash.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" [0166.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0166.839] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0166.839] wcscmp (_String1="Flash.SUO", _String2=".") returned 1 [0166.839] wcscmp (_String1="Flash.SUO", _String2="..") returned 1 [0166.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfce8 [0166.840] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.840] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.840] wcscat (in: _Dest=0x69bfce8, _Source="Flash.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" [0166.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0166.841] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0166.841] wcscmp (_String1="Flash.SVE", _String2=".") returned 1 [0166.841] wcscmp (_String1="Flash.SVE", _String2="..") returned 1 [0166.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c01e8 [0166.841] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.841] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.841] wcscat (in: _Dest=0x69c01e8, _Source="Flash.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" [0166.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0166.842] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0166.842] wcscmp (_String1="Mcimpp.CAT", _String2=".") returned 1 [0166.842] wcscmp (_String1="Mcimpp.CAT", _String2="..") returned 1 [0166.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dd90 [0166.842] wcscpy (in: _Dest=0x697dd90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.842] wcscat (in: _Dest=0x697dd90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.842] wcscat (in: _Dest=0x697dd90, _Source="Mcimpp.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" [0166.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0166.843] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0166.843] wcscmp (_String1="MCIMPP.CHS", _String2=".") returned 1 [0166.843] wcscmp (_String1="MCIMPP.CHS", _String2="..") returned 1 [0166.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e0d8 [0166.843] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.843] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.843] wcscat (in: _Dest=0x697e0d8, _Source="MCIMPP.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" [0166.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0166.844] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0166.844] wcscmp (_String1="MCIMPP.CHT", _String2=".") returned 1 [0166.844] wcscmp (_String1="MCIMPP.CHT", _String2="..") returned 1 [0166.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697de38 [0166.845] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.845] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.845] wcscat (in: _Dest=0x697de38, _Source="MCIMPP.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" [0166.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0166.846] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0166.846] wcscmp (_String1="Mcimpp.DAN", _String2=".") returned 1 [0166.846] wcscmp (_String1="Mcimpp.DAN", _String2="..") returned 1 [0166.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e960 [0166.846] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.846] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.846] wcscat (in: _Dest=0x697e960, _Source="Mcimpp.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" [0166.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0166.847] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0166.847] wcscmp (_String1="Mcimpp.DEU", _String2=".") returned 1 [0166.847] wcscmp (_String1="Mcimpp.DEU", _String2="..") returned 1 [0166.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697df88 [0166.847] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.847] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.847] wcscat (in: _Dest=0x697df88, _Source="Mcimpp.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" [0166.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0166.848] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0166.848] wcscmp (_String1="Mcimpp.ESP", _String2=".") returned 1 [0166.848] wcscmp (_String1="Mcimpp.ESP", _String2="..") returned 1 [0166.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e570 [0166.848] wcscpy (in: _Dest=0x697e570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.848] wcscat (in: _Dest=0x697e570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.849] wcscat (in: _Dest=0x697e570, _Source="Mcimpp.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" [0166.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0166.849] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0166.849] wcscmp (_String1="Mcimpp.EUQ", _String2=".") returned 1 [0166.849] wcscmp (_String1="Mcimpp.EUQ", _String2="..") returned 1 [0166.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0166.850] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.850] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.850] wcscat (in: _Dest=0x697dee0, _Source="Mcimpp.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" [0166.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0166.851] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0166.851] wcscmp (_String1="Mcimpp.FRA", _String2=".") returned 1 [0166.851] wcscmp (_String1="Mcimpp.FRA", _String2="..") returned 1 [0166.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e4c8 [0166.851] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.851] wcscat (in: _Dest=0x697e4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.851] wcscat (in: _Dest=0x697e4c8, _Source="Mcimpp.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" [0166.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0166.852] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0166.852] wcscmp (_String1="Mcimpp.ITA", _String2=".") returned 1 [0166.852] wcscmp (_String1="Mcimpp.ITA", _String2="..") returned 1 [0166.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e6c0 [0166.852] wcscpy (in: _Dest=0x697e6c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.852] wcscat (in: _Dest=0x697e6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.852] wcscat (in: _Dest=0x697e6c0, _Source="Mcimpp.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" [0166.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0166.853] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0166.853] wcscmp (_String1="Mcimpp.JPN", _String2=".") returned 1 [0166.853] wcscmp (_String1="Mcimpp.JPN", _String2="..") returned 1 [0166.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e618 [0166.853] wcscpy (in: _Dest=0x697e618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.853] wcscat (in: _Dest=0x697e618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.853] wcscat (in: _Dest=0x697e618, _Source="Mcimpp.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" [0166.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0166.854] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0166.855] wcscmp (_String1="Mcimpp.KOR", _String2=".") returned 1 [0166.855] wcscmp (_String1="Mcimpp.KOR", _String2="..") returned 1 [0166.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e420 [0166.855] wcscpy (in: _Dest=0x697e420, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.855] wcscat (in: _Dest=0x697e420, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.855] wcscat (in: _Dest=0x697e420, _Source="Mcimpp.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" [0166.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0166.856] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0166.856] wcscmp (_String1="MCIMPP.mpp", _String2=".") returned 1 [0166.856] wcscmp (_String1="MCIMPP.mpp", _String2="..") returned 1 [0166.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e378 [0166.856] wcscpy (in: _Dest=0x697e378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.856] wcscat (in: _Dest=0x697e378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.856] wcscat (in: _Dest=0x697e378, _Source="MCIMPP.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" [0166.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0166.857] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0166.857] wcscmp (_String1="Mcimpp.NLD", _String2=".") returned 1 [0166.857] wcscmp (_String1="Mcimpp.NLD", _String2="..") returned 1 [0166.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697eb58 [0166.857] wcscpy (in: _Dest=0x697eb58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.857] wcscat (in: _Dest=0x697eb58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.857] wcscat (in: _Dest=0x697eb58, _Source="Mcimpp.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" [0166.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697eb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0166.858] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0166.858] wcscmp (_String1="Mcimpp.NOR", _String2=".") returned 1 [0166.858] wcscmp (_String1="Mcimpp.NOR", _String2="..") returned 1 [0166.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697ec00 [0166.859] wcscpy (in: _Dest=0x697ec00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0166.859] wcscat (in: _Dest=0x697ec00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0166.859] wcscat (in: _Dest=0x697ec00, _Source="Mcimpp.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" [0166.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ec00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0167.521] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0167.521] wcscmp (_String1="MCIMPP.PTB", _String2=".") returned 1 [0167.521] wcscmp (_String1="MCIMPP.PTB", _String2="..") returned 1 [0167.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cff8 [0167.521] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0167.521] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0167.521] wcscat (in: _Dest=0x3e5cff8, _Source="MCIMPP.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" [0168.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0168.271] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0168.271] wcscmp (_String1="Mcimpp.SUO", _String2=".") returned 1 [0168.271] wcscmp (_String1="Mcimpp.SUO", _String2="..") returned 1 [0168.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5be40 [0168.271] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0168.271] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0168.271] wcscat (in: _Dest=0x3e5be40, _Source="Mcimpp.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" [0168.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0168.272] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0168.272] wcscmp (_String1="MCIMPP.SVE", _String2=".") returned 1 [0168.272] wcscmp (_String1="MCIMPP.SVE", _String2="..") returned 1 [0168.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c968 [0168.272] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0168.272] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0168.272] wcscat (in: _Dest=0x3e5c968, _Source="MCIMPP.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" [0168.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0168.274] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0168.975] wcscmp (_String1="QuickTime.CAT", _String2=".") returned 1 [0168.975] wcscmp (_String1="QuickTime.CAT", _String2="..") returned 1 [0168.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e030 [0168.976] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0168.976] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0168.976] wcscat (in: _Dest=0x697e030, _Source="QuickTime.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" [0172.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat")) returned 0x20 [0173.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0173.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.837] GetLastError () returned 0x5 [0173.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0173.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 [0173.838] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0173.838] wcscmp (_String1="QuickTime.CHS", _String2=".") returned 1 [0173.838] wcscmp (_String1="QuickTime.CHS", _String2="..") returned 1 [0173.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e030 [0173.838] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0173.838] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0173.838] wcscat (in: _Dest=0x697e030, _Source="QuickTime.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" [0175.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0175.443] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0175.443] wcscmp (_String1="QuickTime.CHT", _String2=".") returned 1 [0175.443] wcscmp (_String1="QuickTime.CHT", _String2="..") returned 1 [0175.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cb60 [0175.443] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.443] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.443] wcscat (in: _Dest=0x3e5cb60, _Source="QuickTime.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" [0175.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0175.444] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0175.445] wcscmp (_String1="QuickTime.DAN", _String2=".") returned 1 [0175.445] wcscmp (_String1="QuickTime.DAN", _String2="..") returned 1 [0175.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c968 [0175.445] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.445] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.445] wcscat (in: _Dest=0x3e5c968, _Source="QuickTime.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" [0175.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0175.446] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0175.446] wcscmp (_String1="QuickTime.DEU", _String2=".") returned 1 [0175.446] wcscmp (_String1="QuickTime.DEU", _String2="..") returned 1 [0175.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d7d8 [0175.446] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.446] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.446] wcscat (in: _Dest=0x3e5d7d8, _Source="QuickTime.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" [0175.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0175.447] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0175.448] wcscmp (_String1="QuickTime.ESP", _String2=".") returned 1 [0175.448] wcscmp (_String1="QuickTime.ESP", _String2="..") returned 1 [0175.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d298 [0175.448] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.448] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.448] wcscat (in: _Dest=0x3e5d298, _Source="QuickTime.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" [0175.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0175.449] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0175.449] wcscmp (_String1="QuickTime.EUQ", _String2=".") returned 1 [0175.449] wcscmp (_String1="QuickTime.EUQ", _String2="..") returned 1 [0175.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c818 [0175.449] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.449] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.449] wcscat (in: _Dest=0x3e5c818, _Source="QuickTime.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" [0175.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0175.450] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0175.450] wcscmp (_String1="QuickTime.FRA", _String2=".") returned 1 [0175.450] wcscmp (_String1="QuickTime.FRA", _String2="..") returned 1 [0175.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5bd98 [0175.451] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.451] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.451] wcscat (in: _Dest=0x3e5bd98, _Source="QuickTime.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" [0175.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0175.452] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0175.452] wcscmp (_String1="QuickTime.ITA", _String2=".") returned 1 [0175.452] wcscmp (_String1="QuickTime.ITA", _String2="..") returned 1 [0175.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d1f0 [0175.452] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.452] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.452] wcscat (in: _Dest=0x3e5d1f0, _Source="QuickTime.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" [0175.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0175.453] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0175.453] wcscmp (_String1="QuickTime.JPN", _String2=".") returned 1 [0175.453] wcscmp (_String1="QuickTime.JPN", _String2="..") returned 1 [0175.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d490 [0175.453] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.454] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.454] wcscat (in: _Dest=0x3e5d490, _Source="QuickTime.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" [0175.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0175.455] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0175.455] wcscmp (_String1="QuickTime.KOR", _String2=".") returned 1 [0175.455] wcscmp (_String1="QuickTime.KOR", _String2="..") returned 1 [0175.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d5e0 [0175.455] wcscpy (in: _Dest=0x3e5d5e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.455] wcscat (in: _Dest=0x3e5d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.455] wcscat (in: _Dest=0x3e5d5e0, _Source="QuickTime.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" [0175.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0175.456] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0175.456] wcscmp (_String1="QuickTime.mpp", _String2=".") returned 1 [0175.457] wcscmp (_String1="QuickTime.mpp", _String2="..") returned 1 [0175.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cf50 [0175.457] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.457] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.457] wcscat (in: _Dest=0x3e5cf50, _Source="QuickTime.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" [0175.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0175.458] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0175.458] wcscmp (_String1="QuickTime.NLD", _String2=".") returned 1 [0175.458] wcscmp (_String1="QuickTime.NLD", _String2="..") returned 1 [0175.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cc08 [0175.458] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.458] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.458] wcscat (in: _Dest=0x3e5cc08, _Source="QuickTime.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" [0175.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0175.459] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0175.459] wcscmp (_String1="QuickTime.NOR", _String2=".") returned 1 [0175.459] wcscmp (_String1="QuickTime.NOR", _String2="..") returned 1 [0175.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5dbc8 [0175.459] wcscpy (in: _Dest=0x3e5dbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.459] wcscat (in: _Dest=0x3e5dbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.460] wcscat (in: _Dest=0x3e5dbc8, _Source="QuickTime.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" [0175.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0175.461] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0175.461] wcscmp (_String1="QuickTime.PTB", _String2=".") returned 1 [0175.461] wcscmp (_String1="QuickTime.PTB", _String2="..") returned 1 [0175.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cea8 [0175.461] wcscpy (in: _Dest=0x3e5cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.461] wcscat (in: _Dest=0x3e5cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.461] wcscat (in: _Dest=0x3e5cea8, _Source="QuickTime.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" [0175.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0175.462] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0175.462] wcscmp (_String1="QuickTime.SUO", _String2=".") returned 1 [0175.462] wcscmp (_String1="QuickTime.SUO", _String2="..") returned 1 [0175.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d928 [0175.462] wcscpy (in: _Dest=0x3e5d928, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.462] wcscat (in: _Dest=0x3e5d928, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.462] wcscat (in: _Dest=0x3e5d928, _Source="QuickTime.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" [0175.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0175.464] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0175.464] wcscmp (_String1="QuickTime.SVE", _String2=".") returned 1 [0175.464] wcscmp (_String1="QuickTime.SVE", _String2="..") returned 1 [0175.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5bee8 [0175.464] wcscpy (in: _Dest=0x3e5bee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.464] wcscat (in: _Dest=0x3e5bee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.464] wcscat (in: _Dest=0x3e5bee8, _Source="QuickTime.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" [0175.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5bee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0175.465] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0175.465] wcscmp (_String1="WindowsMedia.CAT", _String2=".") returned 1 [0175.465] wcscmp (_String1="WindowsMedia.CAT", _String2="..") returned 1 [0175.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3c20 [0175.466] wcscpy (in: _Dest=0x3ea3c20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.466] wcscat (in: _Dest=0x3ea3c20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.466] wcscat (in: _Dest=0x3ea3c20, _Source="WindowsMedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" [0175.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0175.467] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0175.467] wcscmp (_String1="WindowsMedia.CHS", _String2=".") returned 1 [0175.467] wcscmp (_String1="WindowsMedia.CHS", _String2="..") returned 1 [0175.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3cd0 [0175.467] wcscpy (in: _Dest=0x3ea3cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.467] wcscat (in: _Dest=0x3ea3cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.467] wcscat (in: _Dest=0x3ea3cd0, _Source="WindowsMedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" [0175.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0175.468] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0175.468] wcscmp (_String1="WindowsMedia.CHT", _String2=".") returned 1 [0175.468] wcscmp (_String1="WindowsMedia.CHT", _String2="..") returned 1 [0175.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3800 [0175.469] wcscpy (in: _Dest=0x3ea3800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.469] wcscat (in: _Dest=0x3ea3800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.469] wcscat (in: _Dest=0x3ea3800, _Source="WindowsMedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" [0175.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0175.470] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0175.470] wcscmp (_String1="WindowsMedia.DAN", _String2=".") returned 1 [0175.470] wcscmp (_String1="WindowsMedia.DAN", _String2="..") returned 1 [0175.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea33e0 [0175.470] wcscpy (in: _Dest=0x3ea33e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.470] wcscat (in: _Dest=0x3ea33e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.470] wcscat (in: _Dest=0x3ea33e0, _Source="WindowsMedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" [0175.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea33e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0175.471] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0175.471] wcscmp (_String1="WindowsMedia.DEU", _String2=".") returned 1 [0175.471] wcscmp (_String1="WindowsMedia.DEU", _String2="..") returned 1 [0175.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2150 [0175.471] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.471] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.472] wcscat (in: _Dest=0x3ea2150, _Source="WindowsMedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" [0175.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0175.473] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0175.473] wcscmp (_String1="WindowsMedia.ESP", _String2=".") returned 1 [0175.473] wcscmp (_String1="WindowsMedia.ESP", _String2="..") returned 1 [0175.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2e60 [0175.473] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.473] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.473] wcscat (in: _Dest=0x3ea2e60, _Source="WindowsMedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" [0175.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0175.474] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0175.474] wcscmp (_String1="WindowsMedia.EUQ", _String2=".") returned 1 [0175.474] wcscmp (_String1="WindowsMedia.EUQ", _String2="..") returned 1 [0175.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea26d0 [0175.475] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.475] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.475] wcscat (in: _Dest=0x3ea26d0, _Source="WindowsMedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" [0175.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0175.476] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0175.476] wcscmp (_String1="WindowsMedia.FRA", _String2=".") returned 1 [0175.476] wcscmp (_String1="WindowsMedia.FRA", _String2="..") returned 1 [0175.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3120 [0175.476] wcscpy (in: _Dest=0x3ea3120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.476] wcscat (in: _Dest=0x3ea3120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.477] wcscat (in: _Dest=0x3ea3120, _Source="WindowsMedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" [0175.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0175.478] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0175.478] wcscmp (_String1="WindowsMedia.ITA", _String2=".") returned 1 [0175.478] wcscmp (_String1="WindowsMedia.ITA", _String2="..") returned 1 [0175.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea31d0 [0175.478] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.478] wcscat (in: _Dest=0x3ea31d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.478] wcscat (in: _Dest=0x3ea31d0, _Source="WindowsMedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" [0175.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea31d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0175.479] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0175.479] wcscmp (_String1="WindowsMedia.JPN", _String2=".") returned 1 [0175.479] wcscmp (_String1="WindowsMedia.JPN", _String2="..") returned 1 [0175.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2410 [0175.479] wcscpy (in: _Dest=0x3ea2410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.479] wcscat (in: _Dest=0x3ea2410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.479] wcscat (in: _Dest=0x3ea2410, _Source="WindowsMedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" [0175.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0175.810] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0175.810] wcscmp (_String1="WindowsMedia.KOR", _String2=".") returned 1 [0175.810] wcscmp (_String1="WindowsMedia.KOR", _String2="..") returned 1 [0175.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3ac0 [0175.811] wcscpy (in: _Dest=0x3ea3ac0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0175.811] wcscat (in: _Dest=0x3ea3ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0175.811] wcscat (in: _Dest=0x3ea3ac0, _Source="WindowsMedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" [0177.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0177.535] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0177.535] wcscmp (_String1="WindowsMedia.mpp", _String2=".") returned 1 [0177.535] wcscmp (_String1="WindowsMedia.mpp", _String2="..") returned 1 [0177.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2d00 [0177.536] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.536] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.536] wcscat (in: _Dest=0x3ea2d00, _Source="WindowsMedia.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" [0177.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0177.537] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0177.537] wcscmp (_String1="WindowsMedia.NLD", _String2=".") returned 1 [0177.537] wcscmp (_String1="WindowsMedia.NLD", _String2="..") returned 1 [0177.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3120 [0177.537] wcscpy (in: _Dest=0x3ea3120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.537] wcscat (in: _Dest=0x3ea3120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.537] wcscat (in: _Dest=0x3ea3120, _Source="WindowsMedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" [0177.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0177.538] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0177.538] wcscmp (_String1="WindowsMedia.NOR", _String2=".") returned 1 [0177.539] wcscmp (_String1="WindowsMedia.NOR", _String2="..") returned 1 [0177.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea26d0 [0177.539] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.539] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.539] wcscat (in: _Dest=0x3ea26d0, _Source="WindowsMedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" [0177.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0177.540] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0177.540] wcscmp (_String1="WindowsMedia.PTB", _String2=".") returned 1 [0177.540] wcscmp (_String1="WindowsMedia.PTB", _String2="..") returned 1 [0177.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2e60 [0177.540] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.540] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.540] wcscat (in: _Dest=0x3ea2e60, _Source="WindowsMedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" [0177.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0177.541] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0177.541] wcscmp (_String1="WindowsMedia.SUO", _String2=".") returned 1 [0177.541] wcscmp (_String1="WindowsMedia.SUO", _String2="..") returned 1 [0177.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2150 [0177.542] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.542] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.542] wcscat (in: _Dest=0x3ea2150, _Source="WindowsMedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" [0177.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0177.543] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0177.543] wcscmp (_String1="WindowsMedia.SVE", _String2=".") returned 1 [0177.543] wcscmp (_String1="WindowsMedia.SVE", _String2="..") returned 1 [0177.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea33e0 [0177.543] wcscpy (in: _Dest=0x3ea33e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0177.543] wcscat (in: _Dest=0x3ea33e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0177.543] wcscat (in: _Dest=0x3ea33e0, _Source="WindowsMedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" [0177.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea33e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0177.545] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0177.545] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0177.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0177.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 [0177.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 3194 os_tid = 0x944 [0161.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68191b0 [0161.859] wcscpy (in: _Dest=0x68191b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0161.859] wcscat (in: _Dest=0x68191b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0161.859] wcscat (in: _Dest=0x68191b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*" [0161.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0161.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0162.898] wcscmp (_String1=".", _String2=".") returned 0 [0162.898] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.898] wcscmp (_String1="..", _String2=".") returned 1 [0162.899] wcscmp (_String1="..", _String2="..") returned 0 [0162.899] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0162.899] wcscmp (_String1="Flash.CZE", _String2=".") returned 1 [0162.899] wcscmp (_String1="Flash.CZE", _String2="..") returned 1 [0162.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d298 [0162.899] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0162.899] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0162.899] wcscat (in: _Dest=0x3e5d298, _Source="Flash.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" [0165.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0165.266] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0165.266] wcscmp (_String1="Mcimpp.CZE", _String2=".") returned 1 [0165.266] wcscmp (_String1="Mcimpp.CZE", _String2="..") returned 1 [0165.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea31d0 [0165.266] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0165.266] wcscat (in: _Dest=0x3ea31d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0165.266] wcscat (in: _Dest=0x3ea31d0, _Source="Mcimpp.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" [0165.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea31d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4 [0165.269] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0165.269] wcscmp (_String1="QuickTime.CZE", _String2=".") returned 1 [0165.269] wcscmp (_String1="QuickTime.CZE", _String2="..") returned 1 [0165.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2d00 [0165.269] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0165.269] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0165.269] wcscat (in: _Dest=0x3ea2d00, _Source="QuickTime.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" [0165.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0165.270] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0165.270] wcscmp (_String1="WindowsMedia.CZE", _String2=".") returned 1 [0165.270] wcscmp (_String1="WindowsMedia.CZE", _String2="..") returned 1 [0165.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1268 [0165.271] wcscpy (in: _Dest=0x3ee1268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0165.271] wcscat (in: _Dest=0x3ee1268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0165.271] wcscat (in: _Dest=0x3ee1268, _Source="WindowsMedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" [0165.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0165.272] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0165.272] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0165.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0165.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68191b0) returned 1 [0165.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819118) returned 1 Thread: id = 3195 os_tid = 0xde0 [0161.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819378 [0161.860] wcscpy (in: _Dest=0x6819378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0161.860] wcscat (in: _Dest=0x6819378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0161.860] wcscat (in: _Dest=0x6819378, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*" [0161.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0161.860] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0162.899] wcscmp (_String1=".", _String2=".") returned 0 [0162.899] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.900] wcscmp (_String1="..", _String2=".") returned 1 [0162.900] wcscmp (_String1="..", _String2="..") returned 0 [0162.900] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0162.900] wcscmp (_String1="Flash.HRV", _String2=".") returned 1 [0162.900] wcscmp (_String1="Flash.HRV", _String2="..") returned 1 [0162.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cff8 [0162.900] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0162.900] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0162.900] wcscat (in: _Dest=0x3e5cff8, _Source="Flash.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" [0166.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0166.815] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0166.815] wcscmp (_String1="MCIMPP.HRV", _String2=".") returned 1 [0166.815] wcscmp (_String1="MCIMPP.HRV", _String2="..") returned 1 [0166.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea26d0 [0166.815] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0166.815] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0166.815] wcscat (in: _Dest=0x3ea26d0, _Source="MCIMPP.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" [0166.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0166.816] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0166.816] wcscmp (_String1="QuickTime.HRV", _String2=".") returned 1 [0166.816] wcscmp (_String1="QuickTime.HRV", _String2="..") returned 1 [0166.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3120 [0166.816] wcscpy (in: _Dest=0x3ea3120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0166.816] wcscat (in: _Dest=0x3ea3120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0166.816] wcscat (in: _Dest=0x3ea3120, _Source="QuickTime.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" [0166.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0166.817] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0166.818] wcscmp (_String1="WindowsMedia.HRV", _String2=".") returned 1 [0166.818] wcscmp (_String1="WindowsMedia.HRV", _String2="..") returned 1 [0166.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff67f8 [0166.818] wcscpy (in: _Dest=0x2ff67f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0166.818] wcscat (in: _Dest=0x2ff67f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0166.818] wcscat (in: _Dest=0x2ff67f8, _Source="WindowsMedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" [0166.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2ff67f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0166.819] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0166.819] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0166.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0166.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819378) returned 1 [0166.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819080) returned 1 Thread: id = 3196 os_tid = 0x904 [0161.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68192e0 [0161.861] wcscpy (in: _Dest=0x68192e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0161.861] wcscat (in: _Dest=0x68192e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0161.862] wcscat (in: _Dest=0x68192e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*" [0161.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0161.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0162.900] wcscmp (_String1=".", _String2=".") returned 0 [0162.901] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.901] wcscmp (_String1="..", _String2=".") returned 1 [0162.901] wcscmp (_String1="..", _String2="..") returned 0 [0162.901] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0162.901] wcscmp (_String1="Flash.HUN", _String2=".") returned 1 [0162.901] wcscmp (_String1="Flash.HUN", _String2="..") returned 1 [0162.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5dbc8 [0162.901] wcscpy (in: _Dest=0x3e5dbc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0162.901] wcscat (in: _Dest=0x3e5dbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0162.901] wcscat (in: _Dest=0x3e5dbc8, _Source="Flash.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" [0169.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5dbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0169.632] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0169.632] wcscmp (_String1="Mcimpp.HUN", _String2=".") returned 1 [0169.632] wcscmp (_String1="Mcimpp.HUN", _String2="..") returned 1 [0169.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0169.633] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0169.633] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0169.633] wcscat (in: _Dest=0x35c428, _Source="Mcimpp.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" [0169.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0169.634] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0169.634] wcscmp (_String1="QuickTime.HUN", _String2=".") returned 1 [0169.634] wcscmp (_String1="QuickTime.HUN", _String2="..") returned 1 [0169.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0169.634] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0169.634] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0169.634] wcscat (in: _Dest=0x35c588, _Source="QuickTime.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" [0169.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0169.635] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0169.635] wcscmp (_String1="WindowsMedia.HUN", _String2=".") returned 1 [0169.635] wcscmp (_String1="WindowsMedia.HUN", _String2="..") returned 1 [0169.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2740 [0169.635] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0169.635] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0169.635] wcscat (in: _Dest=0x3ee2740, _Source="WindowsMedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" [0169.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0169.636] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0169.636] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0169.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0169.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68192e0) returned 1 [0169.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818fe8) returned 1 Thread: id = 3197 os_tid = 0xba4 [0161.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819410 [0161.863] wcscpy (in: _Dest=0x6819410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0161.863] wcscat (in: _Dest=0x6819410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0161.863] wcscat (in: _Dest=0x6819410, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*" [0161.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0161.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0162.902] wcscmp (_String1=".", _String2=".") returned 0 [0162.902] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.902] wcscmp (_String1="..", _String2=".") returned 1 [0162.902] wcscmp (_String1="..", _String2="..") returned 0 [0162.902] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0162.902] wcscmp (_String1="Flash.POL", _String2=".") returned 1 [0162.902] wcscmp (_String1="Flash.POL", _String2="..") returned 1 [0162.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d7d8 [0162.902] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0162.902] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0162.902] wcscat (in: _Dest=0x3e5d7d8, _Source="Flash.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" [0163.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0163.912] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0163.912] wcscmp (_String1="Mcimpp.POL", _String2=".") returned 1 [0163.912] wcscmp (_String1="Mcimpp.POL", _String2="..") returned 1 [0163.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c6e8 [0163.913] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0163.913] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0163.913] wcscat (in: _Dest=0x35c6e8, _Source="Mcimpp.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" [0163.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0163.914] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0163.914] wcscmp (_String1="QuickTime.POL", _String2=".") returned 1 [0163.914] wcscmp (_String1="QuickTime.POL", _String2="..") returned 1 [0163.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0163.914] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0163.914] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0163.914] wcscat (in: _Dest=0x35c378, _Source="QuickTime.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" [0163.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0163.917] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0163.917] wcscmp (_String1="WindowsMedia.POL", _String2=".") returned 1 [0163.917] wcscmp (_String1="WindowsMedia.POL", _String2="..") returned 1 [0163.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee23a8 [0163.917] wcscpy (in: _Dest=0x3ee23a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0163.917] wcscat (in: _Dest=0x3ee23a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0163.917] wcscat (in: _Dest=0x3ee23a8, _Source="WindowsMedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" [0163.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee23a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0163.919] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0163.919] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0163.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0163.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819410) returned 1 [0163.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f50) returned 1 Thread: id = 3198 os_tid = 0x984 [0161.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68194a8 [0161.864] wcscpy (in: _Dest=0x68194a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0161.864] wcscat (in: _Dest=0x68194a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0161.864] wcscat (in: _Dest=0x68194a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*" [0161.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0161.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0162.903] wcscmp (_String1=".", _String2=".") returned 0 [0162.903] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.903] wcscmp (_String1="..", _String2=".") returned 1 [0162.903] wcscmp (_String1="..", _String2="..") returned 0 [0162.903] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0162.903] wcscmp (_String1="Flash.RUM", _String2=".") returned 1 [0162.903] wcscmp (_String1="Flash.RUM", _String2="..") returned 1 [0162.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c818 [0162.903] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0162.903] wcscat (in: _Dest=0x3e5c818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0162.903] wcscat (in: _Dest=0x3e5c818, _Source="Flash.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" [0172.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum")) returned 0x20 [0172.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0172.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.608] GetLastError () returned 0x5 [0172.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0172.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 [0172.608] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0172.609] wcscmp (_String1="MCIMPP.RUM", _String2=".") returned 1 [0172.609] wcscmp (_String1="MCIMPP.RUM", _String2="..") returned 1 [0172.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3750 [0172.609] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0172.609] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0172.609] wcscat (in: _Dest=0x3ea3750, _Source="MCIMPP.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" [0172.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum")) returned 0x20 [0172.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0172.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.610] GetLastError () returned 0x5 [0172.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0172.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 [0172.610] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0172.610] wcscmp (_String1="QuickTime.RUM", _String2=".") returned 1 [0172.610] wcscmp (_String1="QuickTime.RUM", _String2="..") returned 1 [0172.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3750 [0172.610] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0172.610] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0172.610] wcscat (in: _Dest=0x3ea3750, _Source="QuickTime.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" [0172.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum")) returned 0x20 [0172.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0172.610] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.611] GetLastError () returned 0x5 [0172.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0172.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 [0172.611] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0172.611] wcscmp (_String1="WindowsMedia.RUM", _String2=".") returned 1 [0172.611] wcscmp (_String1="WindowsMedia.RUM", _String2="..") returned 1 [0172.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7150 [0172.611] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0172.611] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0172.611] wcscat (in: _Dest=0x2ff7150, _Source="WindowsMedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" [0172.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum")) returned 0x20 [0172.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0172.611] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.612] GetLastError () returned 0x5 [0172.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0172.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0172.612] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0172.612] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0172.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0172.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a8) returned 1 [0172.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818eb8) returned 1 Thread: id = 3199 os_tid = 0x9a4 [0161.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819838 [0161.865] wcscpy (in: _Dest=0x6819838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0161.865] wcscat (in: _Dest=0x6819838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0161.865] wcscat (in: _Dest=0x6819838, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*" [0161.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0161.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0162.904] wcscmp (_String1=".", _String2=".") returned 0 [0162.904] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.904] wcscmp (_String1="..", _String2=".") returned 1 [0162.904] wcscmp (_String1="..", _String2="..") returned 0 [0162.904] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0162.904] wcscmp (_String1="Flash.RUS", _String2=".") returned 1 [0162.904] wcscmp (_String1="Flash.RUS", _String2="..") returned 1 [0162.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d0a0 [0162.904] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0162.904] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0162.904] wcscat (in: _Dest=0x3e5d0a0, _Source="Flash.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" [0165.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0165.275] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0165.275] wcscmp (_String1="MCIMPP.RUS", _String2=".") returned 1 [0165.275] wcscmp (_String1="MCIMPP.RUS", _String2="..") returned 1 [0165.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2150 [0165.275] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0165.275] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0165.275] wcscat (in: _Dest=0x3ea2150, _Source="MCIMPP.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" [0165.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0165.276] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0165.276] wcscmp (_String1="QuickTime.RUS", _String2=".") returned 1 [0165.276] wcscmp (_String1="QuickTime.RUS", _String2="..") returned 1 [0165.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2e60 [0165.276] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0165.276] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0165.277] wcscat (in: _Dest=0x3ea2e60, _Source="QuickTime.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" [0165.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0165.278] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0165.278] wcscmp (_String1="WindowsMedia.RUS", _String2=".") returned 1 [0165.278] wcscmp (_String1="WindowsMedia.RUS", _String2="..") returned 1 [0165.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1600 [0165.278] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0165.278] wcscat (in: _Dest=0x3ee1600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0165.278] wcscat (in: _Dest=0x3ee1600, _Source="WindowsMedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" [0165.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0165.280] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0165.280] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0165.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0165.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819838) returned 1 [0165.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e20) returned 1 Thread: id = 3200 os_tid = 0x9b4 [0161.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 0x20 [0161.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0161.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.869] GetLastError () returned 0x5 [0161.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0161.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 3201 os_tid = 0x9d4 [0161.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6819968 [0161.871] wcscpy (in: _Dest=0x6819968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0161.871] wcscat (in: _Dest=0x6819968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0161.871] wcscat (in: _Dest=0x6819968, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*" [0161.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0161.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0162.905] wcscmp (_String1=".", _String2=".") returned 0 [0162.905] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.905] wcscmp (_String1="..", _String2=".") returned 1 [0162.905] wcscmp (_String1="..", _String2="..") returned 0 [0162.905] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0162.905] wcscmp (_String1="Flash.SKY", _String2=".") returned 1 [0162.905] wcscmp (_String1="Flash.SKY", _String2="..") returned 1 [0162.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5bd98 [0162.905] wcscpy (in: _Dest=0x3e5bd98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0162.905] wcscat (in: _Dest=0x3e5bd98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0162.905] wcscat (in: _Dest=0x3e5bd98, _Source="Flash.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" [0172.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky")) returned 0x20 [0172.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0172.632] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.633] GetLastError () returned 0x5 [0172.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0172.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 [0172.633] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0172.633] wcscmp (_String1="Mcimpp.SKY", _String2=".") returned 1 [0172.633] wcscmp (_String1="Mcimpp.SKY", _String2="..") returned 1 [0172.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3750 [0172.633] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0172.633] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0172.633] wcscat (in: _Dest=0x3ea3750, _Source="Mcimpp.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" [0172.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky")) returned 0x20 [0172.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0172.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.634] GetLastError () returned 0x5 [0172.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0172.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 [0172.634] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0172.634] wcscmp (_String1="QuickTime.SKY", _String2=".") returned 1 [0172.634] wcscmp (_String1="QuickTime.SKY", _String2="..") returned 1 [0172.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3750 [0172.634] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0172.634] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0172.634] wcscat (in: _Dest=0x3ea3750, _Source="QuickTime.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" [0172.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky")) returned 0x20 [0172.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0172.634] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.634] GetLastError () returned 0x5 [0172.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0172.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 [0172.635] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0172.635] wcscmp (_String1="WindowsMedia.SKY", _String2=".") returned 1 [0172.635] wcscmp (_String1="WindowsMedia.SKY", _String2="..") returned 1 [0172.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7150 [0172.635] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0172.635] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0172.635] wcscat (in: _Dest=0x2ff7150, _Source="WindowsMedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" [0172.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky")) returned 0x20 [0172.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0172.635] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.635] GetLastError () returned 0x5 [0172.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0172.636] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0 [0172.636] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819968) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819248) returned 1 Thread: id = 3202 os_tid = 0x9e4 [0161.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68189f8 [0161.872] wcscpy (in: _Dest=0x68189f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0161.872] wcscat (in: _Dest=0x68189f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0161.872] wcscat (in: _Dest=0x68189f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*" [0161.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0161.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0162.906] wcscmp (_String1=".", _String2=".") returned 0 [0162.906] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.906] wcscmp (_String1="..", _String2=".") returned 1 [0162.906] wcscmp (_String1="..", _String2="..") returned 0 [0162.906] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0162.906] wcscmp (_String1="Flash.SLV", _String2=".") returned 1 [0162.906] wcscmp (_String1="Flash.SLV", _String2="..") returned 1 [0162.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c968 [0162.906] wcscpy (in: _Dest=0x3e5c968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0162.906] wcscat (in: _Dest=0x3e5c968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0162.906] wcscat (in: _Dest=0x3e5c968, _Source="Flash.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" [0163.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0163.921] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0163.921] wcscmp (_String1="MCIMPP.SLV", _String2=".") returned 1 [0163.921] wcscmp (_String1="MCIMPP.SLV", _String2="..") returned 1 [0163.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0163.921] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0163.922] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0163.922] wcscat (in: _Dest=0x35b718, _Source="MCIMPP.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" [0163.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0163.923] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1 [0163.923] wcscmp (_String1="QuickTime.SLV", _String2=".") returned 1 [0163.923] wcscmp (_String1="QuickTime.SLV", _String2="..") returned 1 [0163.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b928 [0163.923] wcscpy (in: _Dest=0x35b928, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0163.923] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0163.923] wcscat (in: _Dest=0x35b928, _Source="QuickTime.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" [0163.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0163.925] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1 [0163.925] wcscmp (_String1="WindowsMedia.SLV", _String2=".") returned 1 [0163.925] wcscmp (_String1="WindowsMedia.SLV", _String2="..") returned 1 [0163.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2460 [0163.925] wcscpy (in: _Dest=0x3ee2460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0163.925] wcscat (in: _Dest=0x3ee2460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0163.925] wcscat (in: _Dest=0x3ee2460, _Source="WindowsMedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" [0163.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0163.926] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0 [0163.926] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0163.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0163.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68189f8) returned 1 [0163.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818d88) returned 1 Thread: id = 3203 os_tid = 0x9f4 [0161.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6818538 [0161.873] wcscpy (in: _Dest=0x6818538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0161.873] wcscat (in: _Dest=0x6818538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0161.873] wcscat (in: _Dest=0x6818538, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*" [0161.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0161.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0162.433] wcscmp (_String1=".", _String2=".") returned 0 [0162.433] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.433] wcscmp (_String1="..", _String2=".") returned 1 [0162.433] wcscmp (_String1="..", _String2="..") returned 0 [0162.433] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0162.433] wcscmp (_String1="Flash.TUR", _String2=".") returned 1 [0162.433] wcscmp (_String1="Flash.TUR", _String2="..") returned 1 [0162.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d9d0 [0162.433] wcscpy (in: _Dest=0x3e5d9d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0162.433] wcscat (in: _Dest=0x3e5d9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0162.433] wcscat (in: _Dest=0x3e5d9d0, _Source="Flash.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" [0163.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0163.290] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0163.290] wcscmp (_String1="MCIMPP.TUR", _String2=".") returned 1 [0163.290] wcscmp (_String1="MCIMPP.TUR", _String2="..") returned 1 [0163.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0163.290] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0163.290] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0163.290] wcscat (in: _Dest=0x35b718, _Source="MCIMPP.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" [0163.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0163.291] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1 [0163.291] wcscmp (_String1="QuickTime.TUR", _String2=".") returned 1 [0163.291] wcscmp (_String1="QuickTime.TUR", _String2="..") returned 1 [0163.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2150 [0163.292] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0163.292] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0163.292] wcscat (in: _Dest=0x3ea2150, _Source="QuickTime.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" [0163.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0163.293] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1 [0163.293] wcscmp (_String1="WindowsMedia.TUR", _String2=".") returned 1 [0163.293] wcscmp (_String1="WindowsMedia.TUR", _String2="..") returned 1 [0163.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1600 [0163.293] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0163.293] wcscat (in: _Dest=0x3ee1600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0163.293] wcscat (in: _Dest=0x3ee1600, _Source="WindowsMedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" [0163.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0163.294] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0 [0163.294] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0163.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0163.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818538) returned 1 [0163.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818cf0) returned 1 Thread: id = 3204 os_tid = 0xb34 [0161.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68185d0 [0161.874] wcscpy (in: _Dest=0x68185d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0161.875] wcscat (in: _Dest=0x68185d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0161.875] wcscat (in: _Dest=0x68185d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*" [0161.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0161.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0162.434] wcscmp (_String1=".", _String2=".") returned 0 [0162.434] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.434] wcscmp (_String1="..", _String2=".") returned 1 [0162.434] wcscmp (_String1="..", _String2="..") returned 0 [0162.434] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0162.434] wcscmp (_String1="Flash.UKR", _String2=".") returned 1 [0162.434] wcscmp (_String1="Flash.UKR", _String2="..") returned 1 [0162.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cab8 [0162.434] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0162.434] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0162.434] wcscat (in: _Dest=0x3e5cab8, _Source="Flash.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" [0163.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0163.734] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0163.734] wcscmp (_String1="MCIMPP.UKR", _String2=".") returned 1 [0163.734] wcscmp (_String1="MCIMPP.UKR", _String2="..") returned 1 [0163.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2150 [0163.735] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0163.735] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0163.735] wcscat (in: _Dest=0x3ea2150, _Source="MCIMPP.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" [0163.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0163.736] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1 [0163.736] wcscmp (_String1="QuickTime.UKR", _String2=".") returned 1 [0163.736] wcscmp (_String1="QuickTime.UKR", _String2="..") returned 1 [0163.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2d00 [0163.736] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0163.736] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0163.736] wcscat (in: _Dest=0x3ea2d00, _Source="QuickTime.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" [0163.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0163.737] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1 [0163.737] wcscmp (_String1="WindowsMedia.UKR", _String2=".") returned 1 [0163.737] wcscmp (_String1="WindowsMedia.UKR", _String2="..") returned 1 [0163.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1600 [0163.737] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0163.737] wcscat (in: _Dest=0x3ee1600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0163.737] wcscat (in: _Dest=0x3ee1600, _Source="WindowsMedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" [0163.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0163.739] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0 [0163.739] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0163.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0163.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68185d0) returned 1 [0163.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c58) returned 1 Thread: id = 3205 os_tid = 0xa24 [0161.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif")) returned 0x20 [0162.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0162.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.907] GetLastError () returned 0x5 [0162.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0162.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819708) returned 1 Thread: id = 3206 os_tid = 0x7b4 [0161.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif")) returned 0x20 [0163.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0163.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.391] GetLastError () returned 0x5 [0163.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0163.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818bc0) returned 1 Thread: id = 3207 os_tid = 0xa44 [0161.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif")) returned 0x20 [0163.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0163.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.392] GetLastError () returned 0x5 [0163.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0163.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818668) returned 1 Thread: id = 3208 os_tid = 0xa54 [0161.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif")) returned 0x20 [0163.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0163.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.394] GetLastError () returned 0x5 [0163.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0163.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818700) returned 1 Thread: id = 3209 os_tid = 0xa64 [0161.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif")) returned 0x20 [0163.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0163.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.395] GetLastError () returned 0x5 [0163.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0163.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818798) returned 1 Thread: id = 3210 os_tid = 0xa78 [0161.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif")) returned 0x20 [0162.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0162.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.826] GetLastError () returned 0x5 [0162.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0162.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818830) returned 1 Thread: id = 3211 os_tid = 0xad0 [0161.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif")) returned 0x20 [0163.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0163.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.389] GetLastError () returned 0x5 [0163.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0163.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68188c8) returned 1 Thread: id = 3212 os_tid = 0xbac [0161.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv")) returned 0x20 [0162.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0162.436] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.457] GetLastError () returned 0x5 [0164.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0164.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 3213 os_tid = 0xb28 [0161.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat")) returned 0x20 [0165.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0165.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.391] GetLastError () returned 0x5 [0165.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0165.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2410) returned 1 Thread: id = 3214 os_tid = 0xb2c [0161.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 0x20 [0161.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.890] GetLastError () returned 0x5 [0161.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee16b8) returned 1 Thread: id = 3215 os_tid = 0xb20 [0161.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 0x20 [0161.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.893] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.893] GetLastError () returned 0x5 [0161.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2f10) returned 1 Thread: id = 3216 os_tid = 0xac4 [0161.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 0x20 [0161.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.895] GetLastError () returned 0x5 [0161.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 3217 os_tid = 0xabc [0161.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 0x20 [0161.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.897] GetLastError () returned 0x5 [0161.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 3218 os_tid = 0xfac [0161.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 0x20 [0161.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.899] GetLastError () returned 0x5 [0161.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 3219 os_tid = 0x240 [0161.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 0x20 [0161.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.901] GetLastError () returned 0x5 [0161.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 3220 os_tid = 0x1014 [0161.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29170 [0161.903] wcscpy (in: _Dest=0x3f29170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0161.903] wcscat (in: _Dest=0x3f29170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0161.903] wcscat (in: _Dest=0x3f29170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*" [0161.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0161.903] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0161.905] wcscmp (_String1=".", _String2=".") returned 0 [0161.905] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.905] wcscmp (_String1="..", _String2=".") returned 1 [0161.905] wcscmp (_String1="..", _String2="..") returned 0 [0161.905] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x85d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0161.905] wcscmp (_String1="AdobeCMapFnt10.lst", _String2=".") returned 1 [0161.905] wcscmp (_String1="AdobeCMapFnt10.lst", _String2="..") returned 1 [0161.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68197a0 [0161.905] wcscpy (in: _Dest=0x68197a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0161.905] wcscat (in: _Dest=0x68197a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0161.905] wcscat (in: _Dest=0x68197a0, _Source="AdobeCMapFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" [0163.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68197a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0163.331] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0163.331] wcscmp (_String1="AdobeSysFnt10.lst", _String2=".") returned 1 [0163.331] wcscmp (_String1="AdobeSysFnt10.lst", _String2="..") returned 1 [0163.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0163.331] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0163.331] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0163.331] wcscat (in: _Dest=0x66dd1b8, _Source="AdobeSysFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" [0163.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0163.333] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0163.333] wcscmp (_String1="Cache", _String2=".") returned 1 [0163.333] wcscmp (_String1="Cache", _String2="..") returned 1 [0163.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0163.333] wcscpy (in: _Dest=0x30151c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0163.333] wcscat (in: _Dest=0x30151c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0163.333] wcscat (in: _Dest=0x30151c0, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0163.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30151c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0163.334] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcf4e950, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdcf4e950, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x929a5380, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0163.334] wcscmp (_String1="SharedDataEvents", _String2=".") returned 1 [0163.334] wcscmp (_String1="SharedDataEvents", _String2="..") returned 1 [0163.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbc58 [0163.334] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0163.334] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0163.334] wcscat (in: _Dest=0x66dbc58, _Source="SharedDataEvents" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" [0163.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0163.335] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0163.335] wcscmp (_String1="UserCache.bin", _String2=".") returned 1 [0163.335] wcscmp (_String1="UserCache.bin", _String2="..") returned 1 [0163.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0163.335] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0163.335] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0163.335] wcscat (in: _Dest=0x3f26e10, _Source="UserCache.bin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" [0163.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0163.336] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0163.336] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0163.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0163.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 [0163.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 3221 os_tid = 0x101c [0161.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 0x2020 [0161.906] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", dwFileAttributes=0x20) returned 1 [0165.103] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x202c [0165.103] GetFileSizeEx (in: hFile=0x202c, lpFileSize=0xf30fe6c | out: lpFileSize=0xf30fe6c*=1154) returned 1 [0165.103] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.103] ReadFile (in: hFile=0x202c, lpBuffer=0xf30fe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf30fe58, lpOverlapped=0x0 | out: lpBuffer=0xf30fe48*, lpNumberOfBytesRead=0xf30fe58*=0x4, lpOverlapped=0x0) returned 1 [0165.131] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0165.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0165.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0165.131] NtQuerySystemTime (in: CurrentTime=0xf30fde0 | out: CurrentTime=0xf30fde0*=132482710736364000) returned 0x0 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x295a62ad [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x640ad076 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x7291ea2d [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x7b58c266 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x4b2923af [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x1553e0d1 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x353a6a49 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x5abed2b5 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x5e974162 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x3349c4a4 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x6f128090 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x7c9bbdb2 [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x66f2e75c [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0xafced8c [0165.131] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x444642df [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x6369af26 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x540c364a [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x20cd30f5 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x2e80cc68 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x3d4f2b9a [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0xe04a90d [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x69a2a60d [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x63f0869f [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x2c2317c7 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x7bfb3f1f [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x2b521a4f [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x3b1fa63 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x6131a4f3 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x25d4b246 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x61e54801 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x5b02b811 [0165.132] RtlRandomEx (in: Seed=0xf30fdd8 | out: Seed=0xf30fdd8) returned 0x19480361 [0165.143] ReadFile (in: hFile=0x202c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x482, lpNumberOfBytesRead=0xf30fdd4, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0xf30fdd4*=0x482, lpOverlapped=0x0) returned 1 [0165.143] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.143] WriteFile (in: hFile=0x202c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0xf30fdd8, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xf30fdd8*=0x482, lpOverlapped=0x0) returned 1 [0167.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0167.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0167.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0167.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0167.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0167.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0167.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68222d0) returned 1 [0167.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19e70 [0167.904] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.904] WriteFile (in: hFile=0x202c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xf30fe60, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xf30fe60*=0x10e, lpOverlapped=0x0) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19bd0) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0168.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0168.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0168.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0168.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac8b8 [0168.345] wcscpy (in: _Dest=0x68ac8b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" [0168.345] wcscat (in: _Dest=0x68ac8b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.ac3a86" [0168.345] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.ac3a86", NtPathName=0xf30fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0508 [0168.349] FlushFileBuffers (hFile=0x202c) returned 1 [0169.246] CloseHandle (hObject=0x202c) returned 1 [0169.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cb40 [0169.262] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0169.262] wcscat (in: _Dest=0x682cb40, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\AC3A86-Readme.txt" [0169.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\ac3a86-readme.txt")) returned 0xffffffff [0169.262] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b20 [0169.276] WriteFile (in: hFile=0x1b20, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf30fdf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf30fdf4*=0x8b9, lpOverlapped=0x0) returned 1 [0169.279] CloseHandle (hObject=0x1b20) returned 1 [0169.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 [0169.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 3222 os_tid = 0x1394 [0161.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f1d5f8 [0161.907] wcscpy (in: _Dest=0x3f1d5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0161.907] wcscat (in: _Dest=0x3f1d5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0161.907] wcscat (in: _Dest=0x3f1d5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*" [0161.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0161.907] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0162.442] wcscmp (_String1=".", _String2=".") returned 0 [0162.442] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.442] wcscmp (_String1="..", _String2=".") returned 1 [0162.442] wcscmp (_String1="..", _String2="..") returned 0 [0162.442] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd6835070, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0162.442] wcscmp (_String1="wscRGB.icc", _String2=".") returned 1 [0162.442] wcscmp (_String1="wscRGB.icc", _String2="..") returned 1 [0162.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27be0 [0162.442] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0162.442] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0162.442] wcscat (in: _Dest=0x3f27be0, _Source="wscRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" [0163.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0163.929] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0163.929] wcscmp (_String1="wsRGB.icc", _String2=".") returned 1 [0163.929] wcscmp (_String1="wsRGB.icc", _String2="..") returned 1 [0163.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cbc8 [0163.930] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0163.930] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0163.930] wcscat (in: _Dest=0x682cbc8, _Source="wsRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" [0163.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0163.931] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0163.931] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0163.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0163.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0163.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 3223 os_tid = 0x13a4 [0161.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 0x20 [0163.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.409] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.409] GetLastError () returned 0x5 [0163.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1b08) returned 1 Thread: id = 3224 os_tid = 0x13a8 [0161.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 0x20 [0162.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0162.893] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.893] GetLastError () returned 0x5 [0162.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0162.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 3225 os_tid = 0x13ac [0161.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 0x20 [0163.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.410] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.410] GetLastError () returned 0x5 [0163.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0163.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 3226 os_tid = 0x13b0 [0161.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 0x20 [0163.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.407] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.407] GetLastError () returned 0x5 [0163.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 3227 os_tid = 0x13b4 [0161.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 0x20 [0163.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0163.413] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.413] GetLastError () returned 0x5 [0163.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0163.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 3228 os_tid = 0x13b8 [0161.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 0x20 [0163.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.412] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.412] GetLastError () returned 0x5 [0163.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 3229 os_tid = 0x13bc [0161.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl")) returned 0x20 [0164.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0164.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.208] GetLastError () returned 0x5 [0164.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0164.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 3230 os_tid = 0x13c0 [0161.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl")) returned 0x20 [0163.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0163.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.405] GetLastError () returned 0x5 [0163.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0163.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 Thread: id = 3231 os_tid = 0x13c4 [0161.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27828 [0161.919] wcscpy (in: _Dest=0x3f27828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0161.919] wcscat (in: _Dest=0x3f27828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0161.919] wcscat (in: _Dest=0x3f27828, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*" [0161.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0161.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0163.406] wcscmp (_String1=".", _String2=".") returned 0 [0163.406] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.406] wcscmp (_String1="..", _String2=".") returned 1 [0163.407] wcscmp (_String1="..", _String2="..") returned 0 [0163.407] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0163.407] wcscmp (_String1="AUTHOR.XSL", _String2=".") returned 1 [0163.407] wcscmp (_String1="AUTHOR.XSL", _String2="..") returned 1 [0163.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c3968 [0163.407] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0163.407] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0163.407] wcscat (in: _Dest=0x69c3968, _Source="AUTHOR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" [0172.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl")) returned 0x20 [0172.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0172.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.707] GetLastError () returned 0x5 [0172.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0172.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 [0172.707] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0172.707] wcscmp (_String1="TAG.XSL", _String2=".") returned 1 [0172.707] wcscmp (_String1="TAG.XSL", _String2="..") returned 1 [0172.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c3968 [0172.707] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0172.707] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0172.707] wcscat (in: _Dest=0x69c3968, _Source="TAG.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" [0172.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl")) returned 0x20 [0172.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0172.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.708] GetLastError () returned 0x5 [0172.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0172.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 [0172.708] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0172.708] wcscmp (_String1="TITLE.XSL", _String2=".") returned 1 [0172.708] wcscmp (_String1="TITLE.XSL", _String2="..") returned 1 [0172.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c3968 [0172.708] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0172.708] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0172.709] wcscat (in: _Dest=0x69c3968, _Source="TITLE.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" [0172.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl")) returned 0x20 [0173.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0173.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.618] GetLastError () returned 0x5 [0173.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0173.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 [0173.618] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0173.618] wcscmp (_String1="YEAR.XSL", _String2=".") returned 1 [0173.618] wcscmp (_String1="YEAR.XSL", _String2="..") returned 1 [0173.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c3968 [0173.618] wcscpy (in: _Dest=0x69c3968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0173.618] wcscat (in: _Dest=0x69c3968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0173.618] wcscat (in: _Dest=0x69c3968, _Source="YEAR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" [0179.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c3968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0179.356] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0179.356] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0179.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0179.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 [0179.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec90) returned 1 Thread: id = 3232 os_tid = 0x13c8 [0161.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26838 [0161.920] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0161.920] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0161.920] wcscat (in: _Dest=0x3f26838, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*" [0161.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0161.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0165.399] wcscmp (_String1=".", _String2=".") returned 0 [0165.400] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.400] wcscmp (_String1="..", _String2=".") returned 1 [0165.400] wcscmp (_String1="..", _String2="..") returned 0 [0165.400] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d3cd00, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d3cd00, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0165.400] wcscmp (_String1="APA.XSL", _String2=".") returned 1 [0165.400] wcscmp (_String1="APA.XSL", _String2="..") returned 1 [0165.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6818e20 [0165.400] wcscpy (in: _Dest=0x6818e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0165.400] wcscat (in: _Dest=0x6818e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0165.400] wcscat (in: _Dest=0x6818e20, _Source="APA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" [0172.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl")) returned 0x20 [0172.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0172.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.761] GetLastError () returned 0x5 [0172.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0172.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e20) returned 1 [0172.762] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9db1000, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9db1000, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0172.762] wcscmp (_String1="CHICAGO.XSL", _String2=".") returned 1 [0172.762] wcscmp (_String1="CHICAGO.XSL", _String2="..") returned 1 [0172.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c12c8 [0172.762] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0172.762] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0172.762] wcscat (in: _Dest=0x69c12c8, _Source="CHICAGO.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" [0172.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl")) returned 0x20 [0173.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0173.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.588] GetLastError () returned 0x5 [0173.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0173.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 [0173.588] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb12ae00, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb12ae00, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0173.588] wcscmp (_String1="GB.XSL", _String2=".") returned 1 [0173.588] wcscmp (_String1="GB.XSL", _String2="..") returned 1 [0173.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31a78 [0173.588] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.588] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.588] wcscat (in: _Dest=0x3e31a78, _Source="GB.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" [0173.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0173.919] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79820300, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79820300, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0173.919] wcscmp (_String1="GostName.XSL", _String2=".") returned 1 [0173.919] wcscmp (_String1="GostName.XSL", _String2="..") returned 1 [0173.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0c88 [0173.919] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.919] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.920] wcscat (in: _Dest=0x69c0c88, _Source="GostName.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" [0173.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0173.921] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c19900, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c19900, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0173.922] wcscmp (_String1="GostTitle.XSL", _String2=".") returned 1 [0173.922] wcscmp (_String1="GostTitle.XSL", _String2="..") returned 1 [0173.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0e68 [0173.922] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.922] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.922] wcscat (in: _Dest=0x69c0e68, _Source="GostTitle.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" [0173.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0173.924] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cbc00, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x910cbc00, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0173.924] wcscmp (_String1="ISO690.XSL", _String2=".") returned 1 [0173.924] wcscmp (_String1="ISO690.XSL", _String2="..") returned 1 [0173.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c01e8 [0173.924] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.924] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.924] wcscat (in: _Dest=0x69c01e8, _Source="ISO690.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" [0173.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0173.925] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcd0900, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcd0900, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0173.926] wcscmp (_String1="ISO690Nmerical.XSL", _String2=".") returned 1 [0173.926] wcscmp (_String1="ISO690Nmerical.XSL", _String2="..") returned 1 [0173.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea24c0 [0173.926] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.926] wcscat (in: _Dest=0x3ea24c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.926] wcscat (in: _Dest=0x3ea24c0, _Source="ISO690Nmerical.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" [0173.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0173.927] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3647800, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3647800, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0173.927] wcscmp (_String1="MLA.XSL", _String2=".") returned 1 [0173.927] wcscmp (_String1="MLA.XSL", _String2="..") returned 1 [0173.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69592e0 [0173.928] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.928] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.928] wcscat (in: _Dest=0x69592e0, _Source="MLA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" [0173.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0173.929] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eb1100, ftCreationTime.dwHighDateTime=0x1c6daa0, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4eb1100, ftLastWriteTime.dwHighDateTime=0x1c6daa0, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0173.929] wcscmp (_String1="SIST02.XSL", _String2=".") returned 1 [0173.929] wcscmp (_String1="SIST02.XSL", _String2="..") returned 1 [0173.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c06e8 [0173.929] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.929] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.929] wcscat (in: _Dest=0x69c06e8, _Source="SIST02.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" [0173.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0173.931] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0173.931] wcscmp (_String1="TURABIAN.XSL", _String2=".") returned 1 [0173.931] wcscmp (_String1="TURABIAN.XSL", _String2="..") returned 1 [0173.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0173.931] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0173.931] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0173.931] wcscat (in: _Dest=0x69c1188, _Source="TURABIAN.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" [0173.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0173.932] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0173.933] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0173.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0173.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 [0173.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 3233 os_tid = 0x13cc [0161.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20 [0166.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.781] GetLastError () returned 0x5 [0167.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0167.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 3234 os_tid = 0x13d0 [0161.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20 [0166.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.781] GetLastError () returned 0x5 [0167.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0167.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 3235 os_tid = 0x13d4 [0161.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20 [0166.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.782] GetLastError () returned 0x5 [0167.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0167.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 3236 os_tid = 0x13d8 [0161.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.782] GetLastError () returned 0x5 [0167.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0167.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 3237 os_tid = 0x13dc [0161.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20 [0170.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0170.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.490] GetLastError () returned 0x5 [0170.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0170.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 3238 os_tid = 0x13e0 [0161.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20 [0166.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.137] GetLastError () returned 0x5 [0168.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0168.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 3239 os_tid = 0x13e4 [0161.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20 [0166.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0167.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.781] GetLastError () returned 0x5 [0167.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0167.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 3240 os_tid = 0x13e8 [0161.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20 [0166.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0167.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.781] GetLastError () returned 0x5 [0167.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0167.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 3241 os_tid = 0x13ec [0161.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol")) returned 0x20 [0163.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0163.051] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.051] GetLastError () returned 0x5 [0163.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0163.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27a48) returned 1 Thread: id = 3242 os_tid = 0x13f0 [0161.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb")) returned 0x20 [0163.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0163.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.011] GetLastError () returned 0x5 [0163.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0163.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 3243 os_tid = 0x13f4 [0161.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum")) returned 0x20 [0163.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0163.053] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.054] GetLastError () returned 0x5 [0163.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0163.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 3244 os_tid = 0x13f8 [0161.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus")) returned 0x20 [0163.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0163.056] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.056] GetLastError () returned 0x5 [0163.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0163.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 3245 os_tid = 0x13fc [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky")) returned 0x20 [0162.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0162.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.492] GetLastError () returned 0x5 [0162.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0162.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 3246 os_tid = 0x1400 [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv")) returned 0x20 [0163.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0163.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.013] GetLastError () returned 0x5 [0163.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0163.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 3247 os_tid = 0x10d8 [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo")) returned 0x20 [0162.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0162.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.972] GetLastError () returned 0x5 [0162.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0162.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 3248 os_tid = 0xb64 [0161.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve")) returned 0x20 [0163.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0163.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.044] GetLastError () returned 0x5 [0163.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0163.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 3249 os_tid = 0xf3c [0161.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur")) returned 0x20 [0163.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0163.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.047] GetLastError () returned 0x5 [0163.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0163.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 3250 os_tid = 0xfc8 [0161.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr")) returned 0x20 [0163.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0163.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.049] GetLastError () returned 0x5 [0163.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0163.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 3251 os_tid = 0x6c0 [0161.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 0x20 [0162.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0162.914] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.915] GetLastError () returned 0x5 [0162.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0162.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 3252 os_tid = 0xba0 [0161.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 0x20 [0163.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0163.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.416] GetLastError () returned 0x5 [0163.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0163.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 Thread: id = 3253 os_tid = 0xb78 [0161.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 0x20 [0162.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0162.910] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.911] GetLastError () returned 0x5 [0162.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0162.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 3254 os_tid = 0xb9c [0161.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 0x20 [0163.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0163.415] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.415] GetLastError () returned 0x5 [0163.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0163.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 3255 os_tid = 0xb80 [0161.934] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions")) returned 0x2020 [0163.418] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions", dwFileAttributes=0x20) returned 1 [0164.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a60 [0164.230] GetFileSizeEx (in: hFile=0x1a60, lpFileSize=0xd97fbcc | out: lpFileSize=0xd97fbcc*=53) returned 1 [0164.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0164.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0164.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0164.230] NtQuerySystemTime (in: CurrentTime=0xd97fb40 | out: CurrentTime=0xd97fb40*=132482710727472000) returned 0x0 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5161c4d0 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x34b4c4a9 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0xf9056dc [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x37022f81 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x42ebbb3d [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x38efda54 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x479058a [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x6ec79250 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5dc0e5b4 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x3e3729fa [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5982b1f5 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x48e2ec7b [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x4cf613b2 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x63adf902 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x3a104879 [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5008d38b [0164.230] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x6ce7bb87 [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x1ccccab7 [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x202de09b [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x59c8cf86 [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x1ec423cb [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x3d0ca92e [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x440622ce [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5a0cda71 [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x3f335060 [0164.231] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x4bb828b9 [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x1869b9b5 [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x2e624a15 [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x5436c700 [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x33d45d23 [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x371b7d6b [0164.232] RtlRandomEx (in: Seed=0xd97fb38 | out: Seed=0xd97fb38) returned 0x661bbb4b [0164.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0164.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0164.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0164.243] ReadFile (in: hFile=0x1a60, lpBuffer=0x699dd28, nNumberOfBytesToRead=0x35, lpNumberOfBytesRead=0xd97fb34, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0xd97fb34*=0x35, lpOverlapped=0x0) returned 1 [0164.245] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.246] WriteFile (in: hFile=0x1a60, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xd97fb38, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xd97fb38*=0x35, lpOverlapped=0x0) returned 1 [0165.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0165.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0165.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0165.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0165.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0165.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0165.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe708) returned 1 [0165.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19f18 [0165.404] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.404] WriteFile (in: hFile=0x1a60, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xd97fbc0, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0xd97fbc0*=0x114, lpOverlapped=0x0) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0166.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0166.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1600 [0166.103] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" [0166.103] wcscat (in: _Dest=0x3ee1600, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.ac3a86" [0166.104] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.ac3a86", NtPathName=0xd97fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36110 [0166.107] FlushFileBuffers (hFile=0x1a60) returned 1 [0168.567] CloseHandle (hObject=0x1a60) returned 1 [0168.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea31d0 [0168.910] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0168.910] wcscat (in: _Dest=0x3ea31d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" [0168.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\ac3a86-readme.txt")) returned 0x2020 [0168.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 [0168.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 Thread: id = 3256 os_tid = 0x6b0 [0161.937] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic")) returned 0x2020 [0163.418] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic", dwFileAttributes=0x20) returned 1 [0164.251] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a5c [0164.251] GetFileSizeEx (in: hFile=0x1a5c, lpFileSize=0x1114fb6c | out: lpFileSize=0x1114fb6c*=2837) returned 1 [0164.251] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0xb11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.252] ReadFile (in: hFile=0x1a5c, lpBuffer=0x1114fb48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1114fb58, lpOverlapped=0x0 | out: lpBuffer=0x1114fb48*, lpNumberOfBytesRead=0x1114fb58*=0x4, lpOverlapped=0x0) returned 1 [0164.255] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0164.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0164.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0164.255] NtQuerySystemTime (in: CurrentTime=0x1114fae0 | out: CurrentTime=0x1114fae0*=132482710727784000) returned 0x0 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x30b2f594 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x164a3ef8 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x743a262f [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x771d7d19 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0xe6458fb [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x16cb9d67 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x24270688 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x7ee3e1be [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x4b6cd570 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x3cc634d9 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x6676a267 [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x55138edf [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x351c1a7f [0164.255] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x74e077d7 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x5a3132c5 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x55495beb [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x5e5f3db1 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x34c8ea65 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x5b117346 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x2d0d22b7 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x695ce40d [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x733093e0 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x17242e84 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x4d8275d4 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x6ccaa95c [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0xf53ed08 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0xf72b9c4 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0xcb24bb3 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x64d02c34 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x7987f689 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x25e26f54 [0164.256] RtlRandomEx (in: Seed=0x1114fad8 | out: Seed=0x1114fad8) returned 0x5297045b [0164.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0164.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0164.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0164.269] ReadFile (in: hFile=0x1a5c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0xb15, lpNumberOfBytesRead=0x1114fad4, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x1114fad4*=0xb15, lpOverlapped=0x0) returned 1 [0164.269] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.269] WriteFile (in: hFile=0x1a5c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0xb15, lpNumberOfBytesWritten=0x1114fad8, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x1114fad8*=0xb15, lpOverlapped=0x0) returned 1 [0164.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0164.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdb80) returned 1 [0164.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19e38 [0164.272] SetFilePointerEx (in: hFile=0x1a5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.272] WriteFile (in: hFile=0x1a5c, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x1114fb60, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x1114fb60*=0x114, lpOverlapped=0x0) returned 1 [0164.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e38) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0164.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2d00 [0164.282] wcscpy (in: _Dest=0x3ee2d00, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" [0164.282] wcscat (in: _Dest=0x3ee2d00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.ac3a86" [0164.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.ac3a86", NtPathName=0x1114fad8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36040 [0164.285] FlushFileBuffers (hFile=0x1a5c) returned 1 [0164.290] CloseHandle (hObject=0x1a5c) returned 1 [0164.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bbe8 [0164.291] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.291] wcscat (in: _Dest=0x35bbe8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" [0164.291] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\ac3a86-readme.txt")) returned 0xffffffff [0164.291] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a5c [0164.292] WriteFile (in: hFile=0x1a5c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1114faf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1114faf4*=0x8b9, lpOverlapped=0x0) returned 1 [0164.295] CloseHandle (hObject=0x1a5c) returned 1 [0164.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 [0164.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 3257 os_tid = 0xbd4 [0161.937] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs")) returned 0x2020 [0163.417] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs", dwFileAttributes=0x20) returned 1 [0164.211] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a64 [0164.211] GetFileSizeEx (in: hFile=0x1a64, lpFileSize=0x111dfe84 | out: lpFileSize=0x111dfe84*=18) returned 1 [0164.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0164.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0164.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0164.211] NtQuerySystemTime (in: CurrentTime=0x111dfdf8 | out: CurrentTime=0x111dfdf8*=132482710727316000) returned 0x0 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x67d9e449 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x171d6ccf [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x56357b79 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x6f6146b1 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x37ea6bce [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x136abb55 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x74be7905 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0xd78932 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x63540974 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x595d66d2 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x2226aa77 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x5a70e0af [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x36f4c65d [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x376ec4f3 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x2ed0ad3 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x19144ee5 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x2c88ee56 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x2b18a3c5 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x35f7b614 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x7b0310e6 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x3c9273a6 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x365bfbc7 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x3f817703 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x4b40710 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x3bf364a0 [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x7294eaab [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x3db3de0f [0164.212] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x53c25486 [0164.213] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0xe15025f [0164.213] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0xb895c9e [0164.213] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x207fe0e7 [0164.213] RtlRandomEx (in: Seed=0x111dfdf0 | out: Seed=0x111dfdf0) returned 0x472e4cfe [0164.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0164.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0164.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0164.224] ReadFile (in: hFile=0x1a64, lpBuffer=0x69a5538, nNumberOfBytesToRead=0x12, lpNumberOfBytesRead=0x111dfdec, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesRead=0x111dfdec*=0x12, lpOverlapped=0x0) returned 1 [0164.226] SetFilePointerEx (in: hFile=0x1a64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.226] WriteFile (in: hFile=0x1a64, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x111dfdf0, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x111dfdf0*=0x12, lpOverlapped=0x0) returned 1 [0165.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0165.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0165.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0165.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0165.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0165.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0165.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe3f0) returned 1 [0165.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f19bd0 [0165.402] SetFilePointerEx (in: hFile=0x1a64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.402] WriteFile (in: hFile=0x1a64, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x111dfe78, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x111dfe78*=0x114, lpOverlapped=0x0) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e38) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19bd0) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0166.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0166.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1600 [0166.098] wcscpy (in: _Dest=0x3ee1600, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" [0166.099] wcscat (in: _Dest=0x3ee1600, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.ac3a86" [0166.099] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.ac3a86", NtPathName=0x111dfdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36110 [0166.102] FlushFileBuffers (hFile=0x1a64) returned 1 [0169.247] CloseHandle (hObject=0x1a64) returned 1 [0169.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea38b0 [0169.270] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0169.270] wcscat (in: _Dest=0x3ea38b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" [0169.271] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\ac3a86-readme.txt")) returned 0x2020 [0169.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 [0169.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 Thread: id = 3258 os_tid = 0xbec [0161.938] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp")) returned 0x2020 [0162.913] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp", dwFileAttributes=0x20) returned 1 [0165.112] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf4 [0165.112] GetFileSizeEx (in: hFile=0x1bf4, lpFileSize=0x651f8a4 | out: lpFileSize=0x651f8a4*=1) returned 1 [0165.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0165.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0165.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0165.144] NtQuerySystemTime (in: CurrentTime=0x651f818 | out: CurrentTime=0x651f818*=132482710736520000) returned 0x0 [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0xea919cb [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x512c4fca [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x1866fcf1 [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x2843e58b [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x154dc37b [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x5323a4e4 [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x516f980b [0165.144] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x2c726a29 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x531e9e0 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x781c2f7b [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x17ef50e3 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x31928e85 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x28314814 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x479ff697 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x36acd078 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x191d2510 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x5fee5932 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x5ce2a9e6 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x63bf60a6 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x653a5f8a [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x2af333d1 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x56142bd6 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x2d40e951 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x4166ebcc [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x500fd711 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x132c0389 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x3af1a06d [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x1f5c43ad [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x601c07 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x5a5ff6a6 [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x226a65fe [0165.145] RtlRandomEx (in: Seed=0x651f810 | out: Seed=0x651f810) returned 0x68eca6e4 [0165.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0165.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69acd48 [0165.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0165.160] ReadFile (in: hFile=0x1bf4, lpBuffer=0x69acd48, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x651f80c, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesRead=0x651f80c*=0x1, lpOverlapped=0x0) returned 1 [0165.162] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.162] WriteFile (in: hFile=0x1bf4, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x651f810, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x651f810*=0x1, lpOverlapped=0x0) returned 1 [0165.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0165.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0165.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822318) returned 1 [0165.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f199d8 [0165.574] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.574] WriteFile (in: hFile=0x1bf4, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x651f898, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x651f898*=0x112, lpOverlapped=0x0) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0166.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0166.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1f58 [0166.343] wcscpy (in: _Dest=0x3ee1f58, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" [0166.343] wcscat (in: _Dest=0x3ee1f58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.ac3a86" [0166.343] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.ac3a86", NtPathName=0x651f810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36110 [0168.200] FlushFileBuffers (hFile=0x1bf4) returned 1 [0169.246] CloseHandle (hObject=0x1bf4) returned 1 [0169.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea38b0 [0169.256] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0169.256] wcscat (in: _Dest=0x3ea38b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" [0169.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\ac3a86-readme.txt")) returned 0x2020 [0169.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 [0169.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 Thread: id = 3259 os_tid = 0x15cc [0161.938] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js")) returned 0x2020 [0162.467] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x20) returned 1 [0164.846] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2114 [0164.847] GetFileSizeEx (in: hFile=0x2114, lpFileSize=0x1083fed4 | out: lpFileSize=0x1083fed4*=0) returned 1 [0164.847] FlushFileBuffers (hFile=0x2114) returned 1 [0165.501] CloseHandle (hObject=0x2114) returned 1 [0165.501] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x2020) returned 1 [0170.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 3260 os_tid = 0x15d0 [0161.939] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js")) returned 0x2020 [0162.467] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", dwFileAttributes=0x20) returned 1 [0165.441] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2118 [0165.441] GetFileSizeEx (in: hFile=0x2118, lpFileSize=0xe9dfe3c | out: lpFileSize=0xe9dfe3c*=10) returned 1 [0165.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0165.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0165.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0165.442] NtQuerySystemTime (in: CurrentTime=0xe9dfdb0 | out: CurrentTime=0xe9dfdb0*=132482710739484000) returned 0x0 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x391cb55e [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x5483f739 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x5a0a4526 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x793e0745 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x78100d8a [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x57b4d036 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x5c8cf866 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x13695dc0 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x4215e97a [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x2b47230b [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x1833337f [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x53ac629a [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x1de0efa4 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x662f2637 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x43b47d90 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x6b8b89a5 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x4bd60b54 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x708a18ee [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x30c5ab3f [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x6eab5fef [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x6433cb74 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x7470aa10 [0165.442] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x53e95065 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x4b51aa9d [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x4fde27a1 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x570b76d2 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x227d8e03 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x10e56f90 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x5bcd98ec [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x7ae65b0b [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x6835c150 [0165.443] RtlRandomEx (in: Seed=0xe9dfda8 | out: Seed=0xe9dfda8) returned 0x50b6e89a [0165.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0165.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0165.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0165.453] ReadFile (in: hFile=0x2118, lpBuffer=0x699dd28, nNumberOfBytesToRead=0xa, lpNumberOfBytesRead=0xe9dfda4, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0xe9dfda4*=0xa, lpOverlapped=0x0) returned 1 [0165.456] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.456] WriteFile (in: hFile=0x2118, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0xe9dfda8, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xe9dfda8*=0xa, lpOverlapped=0x0) returned 1 [0166.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0166.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0166.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0166.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0166.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0166.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0166.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8b0) returned 1 [0166.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19f18 [0166.175] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.175] WriteFile (in: hFile=0x2118, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xe9dfe30, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0xe9dfe30*=0x112, lpOverlapped=0x0) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0168.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0168.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0168.570] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" [0168.570] wcscat (in: _Dest=0x2ff63a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.ac3a86" [0168.570] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.ac3a86", NtPathName=0xe9dfda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0169.770] FlushFileBuffers (hFile=0x2118) returned 1 [0169.773] CloseHandle (hObject=0x2118) returned 1 [0169.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bd48 [0169.782] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0169.782] wcscat (in: _Dest=0x35bd48, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\AC3A86-Readme.txt" [0169.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\ac3a86-readme.txt")) returned 0xffffffff [0169.782] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2118 [0169.796] WriteFile (in: hFile=0x2118, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe9dfdc4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe9dfdc4*=0x8b9, lpOverlapped=0x0) returned 1 [0169.798] CloseHandle (hObject=0x2118) returned 1 [0169.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 [0169.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 Thread: id = 3261 os_tid = 0x15d4 [0161.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bcb8 [0161.940] wcscpy (in: _Dest=0x674bcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0161.940] wcscat (in: _Dest=0x674bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0161.940] wcscat (in: _Dest=0x674bcb8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*" [0161.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0161.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0162.469] wcscmp (_String1=".", _String2=".") returned 0 [0162.469] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.469] wcscmp (_String1="..", _String2=".") returned 1 [0162.469] wcscmp (_String1="..", _String2="..") returned 0 [0162.469] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0162.469] wcscmp (_String1="ACT3R.SAM", _String2=".") returned 1 [0162.469] wcscmp (_String1="ACT3R.SAM", _String2="..") returned 1 [0162.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674e2e8 [0162.469] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0162.469] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0162.469] wcscat (in: _Dest=0x674e2e8, _Source="ACT3R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" [0165.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0165.286] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0165.286] wcscmp (_String1="DELIMR.FAE", _String2=".") returned 1 [0165.286] wcscmp (_String1="DELIMR.FAE", _String2="..") returned 1 [0165.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db8f8 [0165.286] wcscpy (in: _Dest=0x66db8f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.286] wcscat (in: _Dest=0x66db8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.286] wcscat (in: _Dest=0x66db8f8, _Source="DELIMR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" [0165.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0165.288] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x8b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0165.288] wcscmp (_String1="LOCALDV.DLL", _String2=".") returned 1 [0165.288] wcscmp (_String1="LOCALDV.DLL", _String2="..") returned 1 [0165.288] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0165.288] wcscmp (_String1="ODBCR.SAM", _String2=".") returned 1 [0165.288] wcscmp (_String1="ODBCR.SAM", _String2="..") returned 1 [0165.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd008 [0165.288] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.289] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.289] wcscat (in: _Dest=0x66dd008, _Source="ODBCR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" [0165.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0 [0165.290] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0165.290] wcscmp (_String1="OLADDR.FAE", _String2=".") returned 1 [0165.290] wcscmp (_String1="OLADDR.FAE", _String2="..") returned 1 [0165.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db988 [0165.291] wcscpy (in: _Dest=0x66db988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.291] wcscat (in: _Dest=0x66db988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.291] wcscat (in: _Dest=0x66db988, _Source="OLADDR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" [0165.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0165.292] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0165.292] wcscmp (_String1="OLAPPTR.FAE", _String2=".") returned 1 [0165.293] wcscmp (_String1="OLAPPTR.FAE", _String2="..") returned 1 [0165.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbce8 [0165.293] wcscpy (in: _Dest=0x66dbce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.293] wcscat (in: _Dest=0x66dbce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.293] wcscat (in: _Dest=0x66dbce8, _Source="OLAPPTR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" [0165.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0165.294] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0165.294] wcscmp (_String1="OLJRNLR.FAE", _String2=".") returned 1 [0165.294] wcscmp (_String1="OLJRNLR.FAE", _String2="..") returned 1 [0165.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcaf8 [0165.295] wcscpy (in: _Dest=0x66dcaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.295] wcscat (in: _Dest=0x66dcaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.295] wcscat (in: _Dest=0x66dcaf8, _Source="OLJRNLR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" [0165.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0165.297] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0165.297] wcscmp (_String1="OLMAILR.FAE", _String2=".") returned 1 [0165.297] wcscmp (_String1="OLMAILR.FAE", _String2="..") returned 1 [0165.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcb88 [0165.297] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.297] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.297] wcscat (in: _Dest=0x66dcb88, _Source="OLMAILR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" [0165.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0165.299] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0165.299] wcscmp (_String1="OLNOTER.FAE", _String2=".") returned 1 [0165.299] wcscmp (_String1="OLNOTER.FAE", _String2="..") returned 1 [0165.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc438 [0165.300] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.300] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.300] wcscat (in: _Dest=0x66dc438, _Source="OLNOTER.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" [0165.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0165.306] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0165.306] wcscmp (_String1="OLR.SAM", _String2=".") returned 1 [0165.306] wcscmp (_String1="OLR.SAM", _String2="..") returned 1 [0165.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d88 [0165.306] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.306] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.306] wcscat (in: _Dest=0x3f26d88, _Source="OLR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" [0165.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0165.308] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0165.308] wcscmp (_String1="OLTASKR.FAE", _String2=".") returned 1 [0165.308] wcscmp (_String1="OLTASKR.FAE", _String2="..") returned 1 [0165.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcf78 [0165.308] wcscpy (in: _Dest=0x66dcf78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.308] wcscat (in: _Dest=0x66dcf78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.308] wcscat (in: _Dest=0x66dcf78, _Source="OLTASKR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" [0165.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0165.310] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0165.310] wcscmp (_String1="ORG97R.SAM", _String2=".") returned 1 [0165.310] wcscmp (_String1="ORG97R.SAM", _String2="..") returned 1 [0165.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66db748 [0165.310] wcscpy (in: _Dest=0x66db748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.310] wcscat (in: _Dest=0x66db748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.310] wcscat (in: _Dest=0x66db748, _Source="ORG97R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" [0165.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0165.312] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0165.312] wcscmp (_String1="PABR.SAM", _String2=".") returned 1 [0165.312] wcscmp (_String1="PABR.SAM", _String2="..") returned 1 [0165.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbaa8 [0165.312] wcscpy (in: _Dest=0x66dbaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0165.312] wcscat (in: _Dest=0x66dbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0165.312] wcscat (in: _Dest=0x66dbaa8, _Source="PABR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" [0165.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0165.313] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0165.313] wcscmp (_String1="TRANSMRR.DLL", _String2=".") returned 1 [0165.313] wcscmp (_String1="TRANSMRR.DLL", _String2="..") returned 1 [0165.313] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0165.314] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0165.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0165.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bcb8) returned 1 [0165.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 Thread: id = 3262 os_tid = 0x15d8 [0161.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam")) returned 0x20 [0161.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0161.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.946] GetLastError () returned 0x5 [0161.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0161.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e109f0) returned 1 Thread: id = 3263 os_tid = 0x15dc [0161.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae")) returned 0x20 [0162.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0162.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.930] GetLastError () returned 0x5 [0162.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0162.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a258) returned 1 Thread: id = 3264 os_tid = 0x15f4 [0161.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae")) returned 0x20 [0163.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0163.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.421] GetLastError () returned 0x5 [0163.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0163.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58eb0) returned 1 Thread: id = 3265 os_tid = 0xbe0 [0161.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam")) returned 0x20 [0163.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0163.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.422] GetLastError () returned 0x5 [0163.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0163.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 Thread: id = 3266 os_tid = 0xbe4 [0161.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam")) returned 0x20 [0163.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0163.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.424] GetLastError () returned 0x5 [0163.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0163.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f670) returned 1 Thread: id = 3267 os_tid = 0xbb4 [0161.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam")) returned 0x20 [0163.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0163.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.433] GetLastError () returned 0x5 [0163.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0163.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e106f0) returned 1 Thread: id = 3268 os_tid = 0xef8 [0161.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae")) returned 0x20 [0163.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0163.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.435] GetLastError () returned 0x5 [0163.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0163.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 3269 os_tid = 0xbc8 [0161.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae")) returned 0x20 [0162.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0162.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.921] GetLastError () returned 0x5 [0162.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0162.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d597b8) returned 1 Thread: id = 3270 os_tid = 0x7fc [0161.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae")) returned 0x20 [0163.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0163.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.425] GetLastError () returned 0x5 [0163.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0163.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 3271 os_tid = 0xda0 [0161.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae")) returned 0x20 [0163.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0163.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.426] GetLastError () returned 0x5 [0163.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0163.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 3272 os_tid = 0xd98 [0161.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae")) returned 0x20 [0163.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0163.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.428] GetLastError () returned 0x5 [0163.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0163.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 Thread: id = 3273 os_tid = 0xda4 [0161.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae")) returned 0x20 [0163.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0163.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.430] GetLastError () returned 0x5 [0163.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0163.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 3274 os_tid = 0xdbc [0161.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam")) returned 0x20 [0163.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0163.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.431] GetLastError () returned 0x5 [0163.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0163.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 3275 os_tid = 0x169c [0161.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam")) returned 0x20 [0163.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0163.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.419] GetLastError () returned 0x5 [0163.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0163.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 3276 os_tid = 0x16a0 [0161.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd")) returned 0x20 [0161.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0161.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.958] GetLastError () returned 0x5 [0161.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0161.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1490) returned 1 Thread: id = 3277 os_tid = 0x16a4 [0161.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd")) returned 0x20 [0161.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0161.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.960] GetLastError () returned 0x5 [0161.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0161.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 3278 os_tid = 0x16a8 [0161.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 0x20 [0163.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0163.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.437] GetLastError () returned 0x5 [0163.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0163.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 3279 os_tid = 0x16ac [0161.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e8b8 [0161.963] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0161.963] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\" [0161.963] wcscat (in: _Dest=0x697e8b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*" [0161.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0161.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0163.439] wcscmp (_String1=".", _String2=".") returned 0 [0163.439] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.439] wcscmp (_String1="..", _String2=".") returned 1 [0163.439] wcscmp (_String1="..", _String2="..") returned 0 [0163.439] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0163.439] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0163.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0163.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 [0163.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 3280 os_tid = 0x16b0 [0161.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 0x20 [0163.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0163.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.440] GetLastError () returned 0x5 [0163.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0163.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f390) returned 1 Thread: id = 3281 os_tid = 0x16b4 [0161.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 0x20 [0162.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0162.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.928] GetLastError () returned 0x5 [0162.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0162.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f458) returned 1 Thread: id = 3282 os_tid = 0x16b8 [0161.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 0x20 [0163.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0163.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.436] GetLastError () returned 0x5 [0163.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0163.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 3283 os_tid = 0x16bc [0161.965] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\7rbco6.avi")) returned 0x20 [0161.965] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi", dwFileAttributes=0x20) returned 1 [0161.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\7rbco6.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2034 [0161.966] GetFileSizeEx (in: hFile=0x2034, lpFileSize=0x1161f9d4 | out: lpFileSize=0x1161f9d4*=78736) returned 1 [0161.966] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0x1338c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.966] ReadFile (in: hFile=0x2034, lpBuffer=0x1161f9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1161f9c0, lpOverlapped=0x0 | out: lpBuffer=0x1161f9b0*, lpNumberOfBytesRead=0x1161f9c0*=0x4, lpOverlapped=0x0) returned 1 [0161.968] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0161.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0161.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0161.968] NtQuerySystemTime (in: CurrentTime=0x1161f948 | out: CurrentTime=0x1161f948*=132482710704852000) returned 0x0 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x3befd92b [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x50b8188e [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x71bbe482 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x43075d0f [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x73729dfd [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x4a464898 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x33606325 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x14f5218 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0xf3e518 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x15ca88e7 [0161.968] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x2471a510 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x47b55e86 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x5b8edeff [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x4808d164 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x4bc4ad20 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x59c0173c [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x37044190 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x7c042566 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x270a15c1 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0xbea562c [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x33f26fac [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x3c4658ed [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x399613a7 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x55447317 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x5542b450 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0xd4943e7 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x1200e5b3 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x69a8e836 [0161.969] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x642e4e98 [0161.970] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x5ba539d2 [0161.970] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x121fabe9 [0161.970] RtlRandomEx (in: Seed=0x1161f940 | out: Seed=0x1161f940) returned 0x72af87f4 [0161.982] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.982] ReadFile (in: hFile=0x2034, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0161.983] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e334e0 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0161.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0161.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0161.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0161.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0161.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e334e0) returned 1 [0161.984] WriteFile (in: hFile=0x2034, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0163.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0163.973] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.973] ReadFile (in: hFile=0x2034, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0163.973] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823ab8 [0163.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0163.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0163.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0163.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0163.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.974] WriteFile (in: hFile=0x2034, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0163.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0163.979] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0xf790, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.979] ReadFile (in: hFile=0x2034, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0163.980] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0xf790, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823ab8 [0163.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d00d8 [0163.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0163.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0163.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0163.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0163.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0163.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0163.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.981] WriteFile (in: hFile=0x2034, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1161f948, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x1161f948*=0x3c00, lpOverlapped=0x0) returned 1 [0163.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0163.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e828 [0163.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0163.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5d20 [0163.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0163.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0163.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0163.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x66ce5c0 [0163.989] SetFilePointerEx (in: hFile=0x2034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.989] WriteFile (in: hFile=0x2034, lpBuffer=0x66ce5c0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x1161f9c8, lpOverlapped=0x0 | out: lpBuffer=0x66ce5c0*, lpNumberOfBytesWritten=0x1161f9c8*=0x146, lpOverlapped=0x0) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce5c0) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0164.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1368 [0164.011] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi" [0164.011] wcscat (in: _Dest=0x69c1368, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi.ac3a86" [0164.011] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi.ac3a86", NtPathName=0x1161f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\7rbCo6.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee25d0 [0164.090] FlushFileBuffers (hFile=0x2034) returned 1 [0164.182] CloseHandle (hObject=0x2034) returned 1 [0164.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697dee0 [0164.184] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0164.184] wcscat (in: _Dest=0x697dee0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" [0164.184] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt")) returned 0x20 [0164.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 [0164.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a00) returned 1 Thread: id = 3284 os_tid = 0x16c0 [0161.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\bvviozkehpk7hdx9.swf")) returned 0x20 [0161.985] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf", dwFileAttributes=0x20) returned 1 [0161.985] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\bvviozkehpk7hdx9.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2038 [0161.986] GetFileSizeEx (in: hFile=0x2038, lpFileSize=0x11cbfc64 | out: lpFileSize=0x11cbfc64*=43632) returned 1 [0161.986] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0xaa6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.986] ReadFile (in: hFile=0x2038, lpBuffer=0x11cbfc40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11cbfc50, lpOverlapped=0x0 | out: lpBuffer=0x11cbfc40*, lpNumberOfBytesRead=0x11cbfc50*=0x4, lpOverlapped=0x0) returned 1 [0161.987] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0161.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0161.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0161.987] NtQuerySystemTime (in: CurrentTime=0x11cbfbd8 | out: CurrentTime=0x11cbfbd8*=132482710705164000) returned 0x0 [0161.987] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x61f0e3e9 [0161.987] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0xac6612 [0161.987] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x7f91f23d [0161.987] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x51998d94 [0161.987] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x8e5a185 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x26444634 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x1fd4ec98 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x6fb1ef9e [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x4bf6de85 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x7bcf768 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x753f5a4d [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x7bbcfdbf [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x59602676 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x418ba649 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x41112f77 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x63390722 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x6e68de2c [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x61bf5258 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x6935b0f0 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x7bae73e6 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x28a45a5f [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x441c197 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x77c25f82 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x18efbf0 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x4a9b7d59 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0xe23acec [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x1fed33f1 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x47e66b4c [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x73e0d27f [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x57e120ae [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x50496ad6 [0161.988] RtlRandomEx (in: Seed=0x11cbfbd0 | out: Seed=0x11cbfbd0) returned 0x2a1fd4dc [0161.996] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.996] ReadFile (in: hFile=0x2038, lpBuffer=0x698b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x11cbfbd8, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0x11cbfbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0161.996] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33180 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0161.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0161.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33180) returned 1 [0161.997] WriteFile (in: hFile=0x2038, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x11cbfbd8, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0x11cbfbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0163.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f980 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1f200 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d553a0 [0163.978] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.978] WriteFile (in: hFile=0x2038, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x11cbfc58, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x11cbfc58*=0x11a, lpOverlapped=0x0) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f200) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f980) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0164.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0164.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2518 [0164.006] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf" [0164.006] wcscat (in: _Dest=0x3ee2518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf.ac3a86" [0164.006] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf.ac3a86", NtPathName=0x11cbfbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\bVviOZkehpk7Hdx9.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35750 [0164.064] FlushFileBuffers (hFile=0x2038) returned 1 [0164.161] CloseHandle (hObject=0x2038) returned 1 [0164.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e6c0 [0164.162] wcscpy (in: _Dest=0x697e6c0, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0164.162] wcscat (in: _Dest=0x697e6c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" [0164.162] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt")) returned 0xffffffff [0164.162] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2038 [0164.163] WriteFile (in: hFile=0x2038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11cbfbec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x11cbfbec*=0x8b9, lpOverlapped=0x0) returned 1 [0164.165] CloseHandle (hObject=0x2038) returned 1 [0164.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e6c0) returned 1 [0164.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 Thread: id = 3285 os_tid = 0x16c4 [0161.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ghkyouh47j9xin.mkv")) returned 0x20 [0161.998] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv", dwFileAttributes=0x20) returned 1 [0161.998] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ghkyouh47j9xin.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x203c [0161.998] GetFileSizeEx (in: hFile=0x203c, lpFileSize=0x1214f95c | out: lpFileSize=0x1214f95c*=69818) returned 1 [0161.998] SetFilePointerEx (in: hFile=0x203c, liDistanceToMove=0x110b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.999] ReadFile (in: hFile=0x203c, lpBuffer=0x1214f938, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1214f948, lpOverlapped=0x0 | out: lpBuffer=0x1214f938*, lpNumberOfBytesRead=0x1214f948*=0x4, lpOverlapped=0x0) returned 1 [0162.019] SetFilePointerEx (in: hFile=0x203c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0162.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0162.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0162.019] NtQuerySystemTime (in: CurrentTime=0x1214f8d0 | out: CurrentTime=0x1214f8d0*=132482710705476000) returned 0x0 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x5551cba1 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x569992b5 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x3173c1e6 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x7537c907 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x6c17b13f [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x7b85bc97 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x1455488f [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x2eb98330 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x64eb213b [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x142683f1 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x177e020d [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x6ae66f8e [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x1e952efd [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x48379295 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x3ecc1b51 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x7789ffa0 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x36243c53 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x74bf2202 [0162.019] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x22ca0d32 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0xea347a8 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x7fbd1c09 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x30d8c9d2 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0xbf0133 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x6d3e9490 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x34e310cc [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x50d80162 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x208c3586 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0xdcb123b [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x4922bab5 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x7c0cc7e0 [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x686fd90e [0162.020] RtlRandomEx (in: Seed=0x1214f8c8 | out: Seed=0x1214f8c8) returned 0x5bb31261 [0162.028] SetFilePointerEx (in: hFile=0x203c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.028] ReadFile (in: hFile=0x203c, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1214f8d0, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x1214f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0162.028] SetFilePointerEx (in: hFile=0x203c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e332a0 [0162.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0162.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0162.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0162.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699a120 [0162.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0162.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e332a0) returned 1 [0162.029] WriteFile (in: hFile=0x203c, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1214f8d0, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0x1214f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0163.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fd80 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0163.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f3c0 [0163.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0163.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55028 [0163.987] SetFilePointerEx (in: hFile=0x203c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.987] WriteFile (in: hFile=0x203c, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x1214f950, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0x1214f950*=0x116, lpOverlapped=0x0) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f3c0) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fd80) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0164.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0164.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3960 [0164.008] wcscpy (in: _Dest=0x3ea3960, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv" [0164.008] wcscat (in: _Dest=0x3ea3960, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv.ac3a86" [0164.008] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv.ac3a86", NtPathName=0x1214f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\GHKyOUh47J9xIn.mkv.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f390 [0164.085] FlushFileBuffers (hFile=0x203c) returned 1 [0164.179] CloseHandle (hObject=0x203c) returned 1 [0164.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e4c8 [0164.181] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0164.181] wcscat (in: _Dest=0x697e4c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" [0164.181] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt")) returned 0x20 [0164.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 [0164.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 3286 os_tid = 0x16c8 [0162.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\xym2fame.avi")) returned 0x20 [0162.029] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi", dwFileAttributes=0x20) returned 1 [0162.030] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\xym2fame.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2040 [0162.030] GetFileSizeEx (in: hFile=0x2040, lpFileSize=0x1219f82c | out: lpFileSize=0x1219f82c*=61802) returned 1 [0162.030] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0xf166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.030] ReadFile (in: hFile=0x2040, lpBuffer=0x1219f808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1219f818, lpOverlapped=0x0 | out: lpBuffer=0x1219f808*, lpNumberOfBytesRead=0x1219f818*=0x4, lpOverlapped=0x0) returned 1 [0162.032] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0162.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0162.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0162.032] NtQuerySystemTime (in: CurrentTime=0x1219f7a0 | out: CurrentTime=0x1219f7a0*=132482710705632000) returned 0x0 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x20112e36 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x6be67f10 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x4aa78baa [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x1db0b236 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x2c386815 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x75be267a [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0xff451c9 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x525f723f [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x7cd63af7 [0162.032] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x2b5780a3 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x2a7d18c2 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x3d16ca43 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x1ea3d493 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x75418a2e [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x6777a98f [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x4dfc58c9 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x16203a67 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x24103369 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x66558946 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x65df596 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x2822bcb9 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x1f2fe68 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x25697d3a [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x4a8b78e [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x6ed9e413 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x2481153b [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x4dbbd986 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x7015970d [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x58181453 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x6933aefd [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x583ce147 [0162.033] RtlRandomEx (in: Seed=0x1219f798 | out: Seed=0x1219f798) returned 0x34cf7c7d [0162.041] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.041] ReadFile (in: hFile=0x2040, lpBuffer=0x699dd28, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1219f7a0, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0x1219f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0162.042] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e32d90 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0162.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0162.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0162.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0162.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d90) returned 1 [0162.042] WriteFile (in: hFile=0x2040, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1219f7a0, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0x1219f7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0163.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5ba0 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0163.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f60 [0163.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0163.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0163.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec710 [0163.992] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.993] WriteFile (in: hFile=0x2040, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x1219f820, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x1219f820*=0x10a, lpOverlapped=0x0) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0164.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dce8 [0164.048] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi" [0164.048] wcscat (in: _Dest=0x697dce8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi.ac3a86" [0164.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi.ac3a86", NtPathName=0x1219f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\xym2Fame.avi.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf2c8 [0164.068] FlushFileBuffers (hFile=0x2040) returned 1 [0164.169] CloseHandle (hObject=0x2040) returned 1 [0164.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e4c8 [0164.172] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0164.172] wcscat (in: _Dest=0x697e4c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" [0164.172] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt")) returned 0x20 [0164.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 [0164.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b28) returned 1 Thread: id = 3287 os_tid = 0x16cc [0162.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\zo53qlmwimmfhbv2hjg.swf")) returned 0x20 [0162.045] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf", dwFileAttributes=0x20) returned 1 [0162.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\zo53qlmwimmfhbv2hjg.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2044 [0162.045] GetFileSizeEx (in: hFile=0x2044, lpFileSize=0x11f4fa74 | out: lpFileSize=0x11f4fa74*=26648) returned 1 [0162.045] SetFilePointerEx (in: hFile=0x2044, liDistanceToMove=0x6814, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.045] ReadFile (in: hFile=0x2044, lpBuffer=0x11f4fa50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11f4fa60, lpOverlapped=0x0 | out: lpBuffer=0x11f4fa50*, lpNumberOfBytesRead=0x11f4fa60*=0x4, lpOverlapped=0x0) returned 1 [0162.047] SetFilePointerEx (in: hFile=0x2044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0162.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0162.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0162.047] NtQuerySystemTime (in: CurrentTime=0x11f4f9e8 | out: CurrentTime=0x11f4f9e8*=132482710705788000) returned 0x0 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x47202918 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x7bcc27b8 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x7f22a5d3 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x4719f1f2 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x2863ea5f [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x49693ef2 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x2c2bd379 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x703d5135 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x32adf293 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x3b190fea [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x202b0767 [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x168aface [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x417558e [0162.047] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x2b290742 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x6fc4f166 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x50cfe6d4 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x2fe1684b [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x1d0ff954 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x2b596dec [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x4c6aac61 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0xb1da4aa [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x7f244aff [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x4ba534c2 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0xd332033 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x3258fdd9 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x1a398ed5 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x5bcc6ca3 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x16816b91 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x65cf0d4d [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x71bd8889 [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x658853bf [0162.048] RtlRandomEx (in: Seed=0x11f4f9e0 | out: Seed=0x11f4f9e0) returned 0x5160fbb5 [0162.056] SetFilePointerEx (in: hFile=0x2044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.056] ReadFile (in: hFile=0x2044, lpBuffer=0x69a5538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x11f4f9e8, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesRead=0x11f4f9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0162.056] SetFilePointerEx (in: hFile=0x2044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e33498 [0162.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc10 [0162.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0162.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0162.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0162.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0162.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0162.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0162.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0162.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33498) returned 1 [0162.057] WriteFile (in: hFile=0x2044, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x11f4f9e8, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x11f4f9e8*=0x3c00, lpOverlapped=0x0) returned 1 [0163.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0163.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0163.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x6823ab8 [0163.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0163.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x6823440 [0163.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0163.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0163.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0163.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0163.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68225e8) returned 1 [0163.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55718 [0163.995] SetFilePointerEx (in: hFile=0x2044, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0163.995] WriteFile (in: hFile=0x2044, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x11f4fa68, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x11f4fa68*=0x120, lpOverlapped=0x0) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823440) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0164.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0164.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0164.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0164.052] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf" [0164.052] wcscat (in: _Dest=0x3daf388, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf.ac3a86") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf.ac3a86" [0164.052] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf.ac3a86", NtPathName=0x11f4f9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\ZO53QlmwImMFHBV2Hjg.swf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36040 [0164.067] FlushFileBuffers (hFile=0x2044) returned 1 [0164.167] CloseHandle (hObject=0x2044) returned 1 [0164.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e4c8 [0164.169] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\" [0164.170] wcscat (in: _Dest=0x697e4c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" [0164.170] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\7SlO_ulD3tk\\LFH f\\qwO2O\\SFs9MqIGv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\7slo_uld3tk\\lfh f\\qwo2o\\sfs9mqigv\\ac3a86-readme.txt")) returned 0x20 [0164.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 [0164.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2830) returned 1 Thread: id = 3288 os_tid = 0x16d0 [0162.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1490 [0162.057] wcscpy (in: _Dest=0x3ee1490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0162.058] wcscat (in: _Dest=0x3ee1490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0162.058] wcscat (in: _Dest=0x3ee1490, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*" [0162.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0162.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0162.932] wcscmp (_String1=".", _String2=".") returned 0 [0162.932] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.932] wcscmp (_String1="..", _String2=".") returned 1 [0162.932] wcscmp (_String1="..", _String2="..") returned 0 [0162.932] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1 [0162.932] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2=".") returned 1 [0162.932] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2="..") returned 1 [0162.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f96e8 [0162.932] wcscpy (in: _Dest=0x2f96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0162.932] wcscat (in: _Dest=0x2f96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0162.932] wcscat (in: _Dest=0x2f96e8, _Source="VeriSign_Class_3_Code_Signing_2001-4_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" [0170.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2f96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0170.292] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1 [0170.292] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2=".") returned 1 [0170.292] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2="..") returned 1 [0170.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e15a70 [0170.293] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0170.293] wcscat (in: _Dest=0x3e15a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0170.293] wcscat (in: _Dest=0x3e15a70, _Source="VeriSign_Class_3_Public_Primary_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" [0170.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0170.294] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1 [0170.294] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2=".") returned 1 [0170.294] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2="..") returned 1 [0170.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0170.294] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0170.294] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0170.294] wcscat (in: _Dest=0x3dadb30, _Source="VS_ComponentSigningIntermediate.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" [0170.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0170.296] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0 [0170.296] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0170.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0170.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1490) returned 1 [0170.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 3289 os_tid = 0x16d4 [0162.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2f10 [0162.061] wcscpy (in: _Dest=0x3ea2f10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0162.061] wcscat (in: _Dest=0x3ea2f10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0162.062] wcscat (in: _Dest=0x3ea2f10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*" [0162.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0162.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0164.364] wcscmp (_String1=".", _String2=".") returned 0 [0164.364] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.364] wcscmp (_String1="..", _String2=".") returned 1 [0164.364] wcscmp (_String1="..", _String2="..") returned 0 [0164.364] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59eb0000, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59eb0000, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0164.364] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0164.364] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0164.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0164.364] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0164.364] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0164.364] wcscat (in: _Dest=0x2c97c8, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" [0165.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0165.322] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50619800, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50619800, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0165.322] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0165.322] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0165.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56750 [0165.322] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.322] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.322] wcscat (in: _Dest=0x3d56750, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" [0165.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0165.323] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="CALEND~2.JPG")) returned 1 [0165.323] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2=".") returned 1 [0165.323] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2="..") returned 1 [0165.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9988 [0165.323] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.323] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.323] wcscat (in: _Dest=0x2c9988, _Source="CalendarViewButtonImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" [0165.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0165.325] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="GLOBEB~1.JPG")) returned 1 [0165.325] wcscmp (_String1="GlobeButtonImage.jpg", _String2=".") returned 1 [0165.325] wcscmp (_String1="GlobeButtonImage.jpg", _String2="..") returned 1 [0165.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35750 [0165.325] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.325] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.325] wcscat (in: _Dest=0x3e35750, _Source="GlobeButtonImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" [0165.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0165.326] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 1 [0165.326] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2=".") returned 1 [0165.326] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2="..") returned 1 [0165.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3012a00 [0165.326] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.327] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.327] wcscat (in: _Dest=0x3012a00, _Source="GlobeButtonImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" [0165.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0165.328] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 0 [0165.328] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0165.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0165.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2f10) returned 1 [0165.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 3290 os_tid = 0x16d8 [0162.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3120 [0162.064] wcscpy (in: _Dest=0x3ea3120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0162.064] wcscat (in: _Dest=0x3ea3120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0162.064] wcscat (in: _Dest=0x3ea3120, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*" [0162.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0162.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0165.410] wcscmp (_String1=".", _String2=".") returned 0 [0165.410] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.486] wcscmp (_String1="..", _String2=".") returned 1 [0166.486] wcscmp (_String1="..", _String2="..") returned 0 [0166.486] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf874c700, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf874c700, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1 [0166.486] wcscmp (_String1="AlertImage_Auto.jpg", _String2=".") returned 1 [0166.486] wcscmp (_String1="AlertImage_Auto.jpg", _String2="..") returned 1 [0166.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011fe0 [0166.486] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.486] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.486] wcscat (in: _Dest=0x3011fe0, _Source="AlertImage_Auto.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" [0166.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0166.645] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c5bf00, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c5bf00, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1 [0166.645] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2=".") returned 1 [0166.645] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2="..") returned 1 [0166.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9988 [0166.645] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.645] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.645] wcscat (in: _Dest=0x2c9988, _Source="AlertImage_AutoMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" [0166.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0166.646] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="AL8858~1.JPG")) returned 1 [0166.646] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2=".") returned 1 [0166.646] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2="..") returned 1 [0166.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c97c8 [0166.646] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.646] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.646] wcscat (in: _Dest=0x2c97c8, _Source="AlertImage_ContactHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" [0166.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0166.648] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1 [0166.648] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2=".") returned 1 [0166.648] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2="..") returned 1 [0166.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56e90 [0166.648] wcscpy (in: _Dest=0x3d56e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.648] wcscat (in: _Dest=0x3d56e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.648] wcscat (in: _Dest=0x3d56e90, _Source="AlertImage_ContactHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" [0166.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0166.649] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1 [0166.649] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2=".") returned 1 [0166.649] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2="..") returned 1 [0166.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9608 [0166.649] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.649] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.649] wcscat (in: _Dest=0x2c9608, _Source="AlertImage_ContactLow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" [0166.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0166.650] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1 [0166.650] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2=".") returned 1 [0166.650] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2="..") returned 1 [0166.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56cc0 [0166.650] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.650] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.651] wcscat (in: _Dest=0x3d56cc0, _Source="AlertImage_ContactLowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" [0166.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0166.651] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565adc00, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x565adc00, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="AL56B2~1.JPG")) returned 1 [0166.652] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2=".") returned 1 [0166.652] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2="..") returned 1 [0166.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c98a8 [0166.652] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.652] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.652] wcscat (in: _Dest=0x2c98a8, _Source="AlertImage_FileHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" [0166.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0166.653] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd08a6100, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd08a6100, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALE626~1.BMP")) returned 1 [0166.653] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2=".") returned 1 [0166.653] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2="..") returned 1 [0166.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56f78 [0166.653] wcscpy (in: _Dest=0x3d56f78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.653] wcscat (in: _Dest=0x3d56f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.653] wcscat (in: _Dest=0x3d56f78, _Source="AlertImage_FileHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" [0166.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0166.654] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1f9000, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1f9000, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1 [0166.654] wcscmp (_String1="AlertImage_FileOff.jpg", _String2=".") returned 1 [0166.654] wcscmp (_String1="AlertImage_FileOff.jpg", _String2="..") returned 1 [0166.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48580 [0166.654] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.654] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.654] wcscat (in: _Dest=0x3e48580, _Source="AlertImage_FileOff.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" [0166.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0166.655] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b16f00, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7b16f00, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1 [0166.655] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2=".") returned 1 [0166.655] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2="..") returned 1 [0166.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8568 [0166.655] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.655] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.655] wcscat (in: _Dest=0x2c8568, _Source="AlertImage_FileOffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" [0166.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0166.656] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ecd600, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ecd600, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1 [0166.656] wcscmp (_String1="AlertImage_High.jpg", _String2=".") returned 1 [0166.656] wcscmp (_String1="AlertImage_High.jpg", _String2="..") returned 1 [0166.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e489b8 [0166.656] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.657] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.657] wcscat (in: _Dest=0x3e489b8, _Source="AlertImage_High.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" [0166.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0166.657] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784c5400, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x784c5400, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALBBD8~1.BMP")) returned 1 [0166.658] wcscmp (_String1="AlertImage_HighMask.bmp", _String2=".") returned 1 [0166.658] wcscmp (_String1="AlertImage_HighMask.bmp", _String2="..") returned 1 [0166.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9528 [0166.658] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.658] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.658] wcscat (in: _Dest=0x2c9528, _Source="AlertImage_HighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" [0166.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0166.659] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851f8500, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851f8500, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1 [0166.659] wcscmp (_String1="AlertImage_Medium.jpg", _String2=".") returned 1 [0166.659] wcscmp (_String1="AlertImage_Medium.jpg", _String2="..") returned 1 [0166.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e5b58 [0166.659] wcscpy (in: _Dest=0x2e5b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.659] wcscat (in: _Dest=0x2e5b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.659] wcscat (in: _Dest=0x2e5b58, _Source="AlertImage_Medium.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" [0166.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e5b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0166.660] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68834d00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68834d00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="AL441A~1.BMP")) returned 1 [0166.660] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2=".") returned 1 [0166.660] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2="..") returned 1 [0166.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x6897ce8 [0166.660] wcscpy (in: _Dest=0x6897ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.660] wcscat (in: _Dest=0x6897ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.661] wcscat (in: _Dest=0x6897ce8, _Source="AlertImage_MediumMAsk.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" [0166.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6897ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0166.661] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd1f00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3cd1f00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1 [0166.662] wcscmp (_String1="AlertImage_Off.jpg", _String2=".") returned 1 [0166.662] wcscmp (_String1="AlertImage_Off.jpg", _String2="..") returned 1 [0166.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35750 [0166.662] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.662] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.662] wcscat (in: _Dest=0x3e35750, _Source="AlertImage_Off.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" [0166.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0166.663] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac46e00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbac46e00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1 [0166.663] wcscmp (_String1="AlertImage_OffMask.bmp", _String2=".") returned 1 [0166.663] wcscmp (_String1="AlertImage_OffMask.bmp", _String2="..") returned 1 [0166.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x2e58d0 [0166.663] wcscpy (in: _Dest=0x2e58d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.663] wcscat (in: _Dest=0x2e58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.663] wcscat (in: _Dest=0x2e58d0, _Source="AlertImage_OffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" [0166.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e58d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0166.664] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ec3100, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ec3100, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1 [0166.664] wcscmp (_String1="CommsIncomingImage.jpg", _String2=".") returned 1 [0166.664] wcscmp (_String1="CommsIncomingImage.jpg", _String2="..") returned 1 [0166.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x2e6650 [0166.664] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.664] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.664] wcscat (in: _Dest=0x2e6650, _Source="CommsIncomingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" [0166.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e6650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0166.666] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb24d1d00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb24d1d00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1 [0166.666] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2=".") returned 1 [0166.666] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2="..") returned 1 [0166.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x6897dc8 [0166.666] wcscpy (in: _Dest=0x6897dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.666] wcscat (in: _Dest=0x6897dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.666] wcscat (in: _Dest=0x6897dc8, _Source="CommsIncomingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" [0166.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6897dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0166.667] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1 [0166.667] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2=".") returned 1 [0166.667] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2="..") returned 1 [0166.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8a48 [0166.667] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.667] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.667] wcscat (in: _Dest=0x3ea8a48, _Source="CommsIncomingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" [0166.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0166.668] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1 [0166.668] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2=".") returned 1 [0166.668] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2="..") returned 1 [0166.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57060 [0166.668] wcscpy (in: _Dest=0x3d57060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.668] wcscat (in: _Dest=0x3d57060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.668] wcscat (in: _Dest=0x3d57060, _Source="CommsIncomingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" [0166.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0166.669] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17b6e00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17b6e00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1 [0166.669] wcscmp (_String1="CommsOutgoingImage.jpg", _String2=".") returned 1 [0166.669] wcscmp (_String1="CommsOutgoingImage.jpg", _String2="..") returned 1 [0166.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x2e57f8 [0166.669] wcscpy (in: _Dest=0x2e57f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.669] wcscat (in: _Dest=0x2e57f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.670] wcscat (in: _Dest=0x2e57f8, _Source="CommsOutgoingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" [0166.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e57f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0166.671] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212a7600, ftCreationTime.dwHighDateTime=0x1c9bd1a, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x212a7600, ftLastWriteTime.dwHighDateTime=0x1c9bd1a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1 [0166.671] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2=".") returned 1 [0166.671] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2="..") returned 1 [0166.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x6897ea8 [0166.671] wcscpy (in: _Dest=0x6897ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.671] wcscat (in: _Dest=0x6897ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.671] wcscat (in: _Dest=0x6897ea8, _Source="CommsOutgoingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" [0166.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6897ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0166.672] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1 [0166.672] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2=".") returned 1 [0166.672] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2="..") returned 1 [0166.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8b38 [0166.672] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.672] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.672] wcscat (in: _Dest=0x3ea8b38, _Source="CommsOutgoingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" [0166.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0166.673] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1 [0166.673] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2=".") returned 1 [0166.673] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2="..") returned 1 [0166.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57148 [0166.673] wcscpy (in: _Dest=0x3d57148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.673] wcscat (in: _Dest=0x3d57148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.673] wcscat (in: _Dest=0x3d57148, _Source="CommsOutgoingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" [0166.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0166.674] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0166.674] wcscmp (_String1="MessageBoxIconImages.jpg", _String2=".") returned 1 [0166.674] wcscmp (_String1="MessageBoxIconImages.jpg", _String2="..") returned 1 [0166.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x6897f88 [0166.675] wcscpy (in: _Dest=0x6897f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.675] wcscat (in: _Dest=0x6897f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.675] wcscat (in: _Dest=0x6897f88, _Source="MessageBoxIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" [0166.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6897f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0166.676] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0166.676] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2=".") returned 1 [0166.676] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2="..") returned 1 [0166.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57230 [0166.676] wcscpy (in: _Dest=0x3d57230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.676] wcscat (in: _Dest=0x3d57230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.676] wcscat (in: _Dest=0x3d57230, _Source="MessageBoxIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" [0166.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0166.677] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1483400, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1483400, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1 [0166.677] wcscmp (_String1="UnreadIcon.jpg", _String2=".") returned 1 [0166.677] wcscmp (_String1="UnreadIcon.jpg", _String2="..") returned 1 [0166.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f200 [0166.677] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.677] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.677] wcscat (in: _Dest=0x682f200, _Source="UnreadIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" [0166.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0166.678] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec4a100, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec4a100, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1 [0166.678] wcscmp (_String1="UnreadIconImages.jpg", _String2=".") returned 1 [0166.678] wcscmp (_String1="UnreadIconImages.jpg", _String2="..") returned 1 [0166.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e0bfb8 [0166.679] wcscpy (in: _Dest=0x3e0bfb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.679] wcscat (in: _Dest=0x3e0bfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.679] wcscat (in: _Dest=0x3e0bfb8, _Source="UnreadIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" [0166.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0bfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0166.680] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1 [0166.680] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2=".") returned 1 [0166.680] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2="..") returned 1 [0166.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x6898068 [0166.680] wcscpy (in: _Dest=0x6898068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0166.680] wcscat (in: _Dest=0x6898068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0166.680] wcscat (in: _Dest=0x6898068, _Source="UnreadIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" [0166.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6898068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0166.681] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0 [0166.681] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0166.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0166.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3120) returned 1 [0166.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 3291 os_tid = 0x16dc [0162.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea31d0 [0162.065] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0162.065] wcscat (in: _Dest=0x3ea31d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0162.065] wcscat (in: _Dest=0x3ea31d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*" [0162.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0162.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0163.448] wcscmp (_String1=".", _String2=".") returned 0 [0163.448] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.448] wcscmp (_String1="..", _String2=".") returned 1 [0163.448] wcscmp (_String1="..", _String2="..") returned 0 [0163.448] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77012130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0163.448] wcscmp (_String1="computericon.jpg", _String2=".") returned 1 [0163.448] wcscmp (_String1="computericon.jpg", _String2="..") returned 1 [0163.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x30352a0 [0163.449] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0163.449] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0163.449] wcscat (in: _Dest=0x30352a0, _Source="computericon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" [0165.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0165.215] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0165.216] wcscmp (_String1="computericonMask.bmp", _String2=".") returned 1 [0165.216] wcscmp (_String1="computericonMask.bmp", _String2="..") returned 1 [0165.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011fe0 [0165.216] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0165.216] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0165.216] wcscat (in: _Dest=0x3011fe0, _Source="computericonMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" [0165.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0165.217] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0 [0165.217] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 [0165.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e570) returned 1 Thread: id = 3292 os_tid = 0x16e0 [0162.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3280 [0162.065] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0162.065] wcscat (in: _Dest=0x3ea3280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0162.065] wcscat (in: _Dest=0x3ea3280, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*" [0162.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0162.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0164.348] wcscmp (_String1=".", _String2=".") returned 0 [0164.348] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.348] wcscmp (_String1="..", _String2=".") returned 1 [0164.348] wcscmp (_String1="..", _String2="..") returned 0 [0164.348] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45357600, ftCreationTime.dwHighDateTime=0x1ca05ed, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45357600, ftLastWriteTime.dwHighDateTime=0x1ca05ed, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0164.348] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0164.348] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0164.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56668 [0164.349] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0164.349] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0164.349] wcscat (in: _Dest=0x3d56668, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" [0172.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 0x20 [0173.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0173.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.652] GetLastError () returned 0x5 [0173.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0173.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 [0173.652] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0173.652] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0173.652] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0173.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8598 [0173.653] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0173.653] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0173.653] wcscat (in: _Dest=0x3ea8598, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" [0176.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0176.131] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 0 [0176.131] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0176.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0176.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3280) returned 1 [0176.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2780) returned 1 Thread: id = 3293 os_tid = 0x16e4 [0162.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee16b8 [0162.066] wcscpy (in: _Dest=0x3ee16b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0162.066] wcscat (in: _Dest=0x3ee16b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0162.066] wcscat (in: _Dest=0x3ee16b8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*" [0162.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0162.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0164.363] wcscmp (_String1=".", _String2=".") returned 0 [0164.363] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.363] wcscmp (_String1="..", _String2=".") returned 1 [0164.363] wcscmp (_String1="..", _String2="..") returned 0 [0164.363] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0164.363] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2=".") returned 1 [0164.363] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2="..") returned 1 [0164.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0164.363] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0164.363] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0164.364] wcscat (in: _Dest=0x3dadb30, _Source="WSSFilesToolHomePageBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" [0165.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0165.318] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 0 [0165.318] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0165.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0165.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee16b8) returned 1 [0165.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2200) returned 1 Thread: id = 3294 os_tid = 0x16e8 [0162.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f200 [0162.066] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0162.066] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0162.066] wcscat (in: _Dest=0x682f200, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*" [0162.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0162.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0165.409] wcscmp (_String1=".", _String2=".") returned 0 [0165.409] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.409] wcscmp (_String1="..", _String2=".") returned 1 [0165.409] wcscmp (_String1="..", _String2="..") returned 0 [0165.409] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85685310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1 [0165.409] wcscmp (_String1="ActiveTabImage.jpg", _String2=".") returned 1 [0165.409] wcscmp (_String1="ActiveTabImage.jpg", _String2="..") returned 1 [0165.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56af0 [0165.410] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0165.410] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0165.410] wcscat (in: _Dest=0x3d56af0, _Source="ActiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" [0166.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0166.570] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1 [0166.570] wcscmp (_String1="ActiveTabImageMask.bmp", _String2=".") returned 1 [0166.570] wcscmp (_String1="ActiveTabImageMask.bmp", _String2="..") returned 1 [0166.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8688 [0166.570] wcscpy (in: _Dest=0x3ea8688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.570] wcscat (in: _Dest=0x3ea8688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.570] wcscat (in: _Dest=0x3ea8688, _Source="ActiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" [0166.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0166.571] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1 [0166.571] wcscmp (_String1="BodyPaneBackground.jpg", _String2=".") returned 1 [0166.571] wcscmp (_String1="BodyPaneBackground.jpg", _String2="..") returned 1 [0166.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8778 [0166.572] wcscpy (in: _Dest=0x3ea8778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.572] wcscat (in: _Dest=0x3ea8778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.572] wcscat (in: _Dest=0x3ea8778, _Source="BodyPaneBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" [0166.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0166.573] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1 [0166.573] wcscmp (_String1="InactiveTabImage.jpg", _String2=".") returned 1 [0166.573] wcscmp (_String1="InactiveTabImage.jpg", _String2="..") returned 1 [0166.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56498 [0166.573] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.573] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.573] wcscat (in: _Dest=0x3d56498, _Source="InactiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" [0166.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0166.574] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1 [0166.574] wcscmp (_String1="InactiveTabImageMask.bmp", _String2=".") returned 1 [0166.574] wcscmp (_String1="InactiveTabImageMask.bmp", _String2="..") returned 1 [0166.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8868 [0166.574] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.574] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.574] wcscat (in: _Dest=0x3ea8868, _Source="InactiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" [0166.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0166.575] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1 [0166.575] wcscmp (_String1="MarkupIconImages.jpg", _String2=".") returned 1 [0166.575] wcscmp (_String1="MarkupIconImages.jpg", _String2="..") returned 1 [0166.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56bd8 [0166.575] wcscpy (in: _Dest=0x3d56bd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.575] wcscat (in: _Dest=0x3d56bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.575] wcscat (in: _Dest=0x3d56bd8, _Source="MarkupIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" [0166.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0166.576] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1 [0166.576] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2=".") returned 1 [0166.576] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2="..") returned 1 [0166.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8958 [0166.576] wcscpy (in: _Dest=0x3ea8958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0166.576] wcscat (in: _Dest=0x3ea8958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0166.576] wcscat (in: _Dest=0x3ea8958, _Source="MarkupIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" [0166.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0166.577] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 0 [0166.577] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0166.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0166.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 [0166.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 Thread: id = 3295 os_tid = 0x16ec [0162.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3330 [0162.072] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0162.072] wcscat (in: _Dest=0x3ea3330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0162.072] wcscat (in: _Dest=0x3ea3330, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*" [0162.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f137f0 [0162.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0166.489] wcscmp (_String1=".", _String2=".") returned 0 [0166.489] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.977] wcscmp (_String1="..", _String2=".") returned 1 [0167.977] wcscmp (_String1="..", _String2="..") returned 0 [0167.977] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0167.977] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0167.978] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0167.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e488e0 [0167.978] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0167.978] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0167.978] wcscat (in: _Dest=0x3e488e0, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" [0172.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 0x20 [0172.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0172.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.810] GetLastError () returned 0x5 [0172.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0172.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 [0172.810] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0172.810] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0172.810] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0172.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9608 [0172.810] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.811] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.811] wcscat (in: _Dest=0x2c9608, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" [0172.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 0x20 [0172.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0172.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.812] GetLastError () returned 0x5 [0172.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0172.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 [0172.812] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0172.812] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0172.813] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0172.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0172.813] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.813] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.813] wcscat (in: _Dest=0x3df03f0, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" [0172.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif")) returned 0x20 [0172.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.813] GetLastError () returned 0x5 [0172.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.814] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0172.814] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0172.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df03f0 [0172.814] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.814] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.814] wcscat (in: _Dest=0x3df03f0, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" [0172.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif")) returned 0x20 [0172.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0172.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.815] GetLastError () returned 0x5 [0172.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0172.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.815] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0172.815] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0172.815] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0172.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0172.815] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.815] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.815] wcscat (in: _Dest=0x3df03f0, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" [0172.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif")) returned 0x20 [0172.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0172.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.816] GetLastError () returned 0x5 [0172.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0172.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.816] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0172.817] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0172.817] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0172.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36d40 [0172.817] wcscpy (in: _Dest=0x3e36d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.817] wcscat (in: _Dest=0x3e36d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.817] wcscat (in: _Dest=0x3e36d40, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" [0172.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif")) returned 0x20 [0172.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0172.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.817] GetLastError () returned 0x5 [0172.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0172.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36d40) returned 1 [0172.818] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0172.818] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0172.818] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0172.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0172.818] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.818] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.818] wcscat (in: _Dest=0x3df03f0, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" [0172.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif")) returned 0x20 [0172.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0172.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.819] GetLastError () returned 0x5 [0172.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0172.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.819] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0172.819] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0172.819] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0172.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e488e0 [0172.819] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.819] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0172.819] wcscat (in: _Dest=0x3e488e0, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" [0172.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif")) returned 0x20 [0173.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0173.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.612] GetLastError () returned 0x5 [0173.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0173.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 [0173.612] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0173.612] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0173.612] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0173.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9608 [0173.612] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0173.612] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0173.612] wcscat (in: _Dest=0x2c9608, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" [0174.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0174.793] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0174.793] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0174.793] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0174.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e35750 [0174.793] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.793] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.793] wcscat (in: _Dest=0x3e35750, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" [0174.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0174.794] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0174.795] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0174.795] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0174.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682fb60 [0174.795] wcscpy (in: _Dest=0x682fb60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.795] wcscat (in: _Dest=0x682fb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.795] wcscat (in: _Dest=0x682fb60, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" [0174.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0174.796] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0174.796] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0174.796] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0174.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48a90 [0174.796] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.796] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.796] wcscat (in: _Dest=0x3e48a90, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" [0174.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0174.799] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0174.799] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0174.799] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0174.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36110 [0174.799] wcscpy (in: _Dest=0x3e36110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.799] wcscat (in: _Dest=0x3e36110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.799] wcscat (in: _Dest=0x3e36110, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" [0174.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0174.800] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0174.800] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0174.800] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0174.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35d00 [0174.800] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.800] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.800] wcscat (in: _Dest=0x3e35d00, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" [0174.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0174.802] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0174.802] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0174.802] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0174.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36d40 [0174.802] wcscpy (in: _Dest=0x3e36d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.802] wcscat (in: _Dest=0x3e36d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.802] wcscat (in: _Dest=0x3e36d40, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" [0174.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0174.803] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0174.803] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0174.803] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0174.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0174.803] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.803] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.804] wcscat (in: _Dest=0x3e48b68, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" [0174.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0174.805] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0174.805] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0174.805] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0174.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36e10 [0174.805] wcscpy (in: _Dest=0x3e36e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.805] wcscat (in: _Dest=0x3e36e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.805] wcscat (in: _Dest=0x3e36e10, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" [0174.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0174.806] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BU6EE2~1.GIF")) returned 1 [0174.806] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0174.806] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0174.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36ee0 [0174.806] wcscpy (in: _Dest=0x3e36ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.806] wcscat (in: _Dest=0x3e36ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.807] wcscat (in: _Dest=0x3e36ee0, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" [0174.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0174.808] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUC0CB~1.GIF")) returned 1 [0174.808] wcscmp (_String1="button_left_disable.gif", _String2=".") returned 1 [0174.808] wcscmp (_String1="button_left_disable.gif", _String2="..") returned 1 [0174.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c96e8 [0174.808] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.808] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.808] wcscat (in: _Dest=0x2c96e8, _Source="button_left_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" [0174.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0174.809] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0174.809] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0174.810] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0174.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e47578 [0174.810] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.810] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.810] wcscat (in: _Dest=0x3e47578, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" [0174.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0174.811] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUB371~1.GIF")) returned 1 [0174.811] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0174.811] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0174.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36fb0 [0174.811] wcscpy (in: _Dest=0x3e36fb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.811] wcscat (in: _Dest=0x3e36fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.811] wcscat (in: _Dest=0x3e36fb0, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" [0174.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0174.813] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0174.813] wcscmp (_String1="button_mid_disable.gif", _String2=".") returned 1 [0174.813] wcscmp (_String1="button_mid_disable.gif", _String2="..") returned 1 [0174.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0174.813] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.813] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.813] wcscat (in: _Dest=0x2c9a68, _Source="button_mid_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" [0174.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0174.817] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0174.817] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0174.817] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0174.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e489b8 [0174.817] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.817] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.817] wcscat (in: _Dest=0x3e489b8, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" [0174.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0174.818] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0174.818] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0174.818] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0174.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e37080 [0174.818] wcscpy (in: _Dest=0x3e37080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.818] wcscat (in: _Dest=0x3e37080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.818] wcscat (in: _Dest=0x3e37080, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" [0174.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0174.819] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1 [0174.820] wcscmp (_String1="button_right_disable.gif", _String2=".") returned 1 [0174.820] wcscmp (_String1="button_right_disable.gif", _String2="..") returned 1 [0174.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0174.820] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.820] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.820] wcscat (in: _Dest=0x2c9448, _Source="button_right_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" [0174.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0174.821] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0174.821] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0174.821] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0174.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48580 [0174.821] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.821] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.821] wcscat (in: _Dest=0x3e48580, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" [0174.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0174.822] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1 [0174.823] wcscmp (_String1="FieldTypePreview", _String2=".") returned 1 [0174.823] wcscmp (_String1="FieldTypePreview", _String2="..") returned 1 [0174.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e37150 [0174.823] wcscpy (in: _Dest=0x3e37150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.823] wcscat (in: _Dest=0x3e37150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.823] wcscat (in: _Dest=0x3e37150, _Source="FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0174.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e37150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0174.824] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0174.824] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0174.824] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0174.824] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0174.824] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0174.824] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0174.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0174.825] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.825] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.825] wcscat (in: _Dest=0x3e48658, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" [0174.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0174.829] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0174.829] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0174.829] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0174.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4250 [0174.829] wcscpy (in: _Dest=0x3ea4250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0174.829] wcscat (in: _Dest=0x3ea4250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0174.829] wcscat (in: _Dest=0x3ea4250, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" [0174.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0174.830] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1 [0175.394] wcscmp (_String1="FormsDoNotTrust.html", _String2=".") returned 1 [0175.394] wcscmp (_String1="FormsDoNotTrust.html", _String2="..") returned 1 [0175.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3011770 [0175.394] wcscpy (in: _Dest=0x3011770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0175.394] wcscat (in: _Dest=0x3011770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0175.394] wcscat (in: _Dest=0x3011770, _Source="FormsDoNotTrust.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" [0178.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0178.204] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0178.204] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0178.204] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0178.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48a90 [0178.204] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.204] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.204] wcscat (in: _Dest=0x3e48a90, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" [0178.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0178.205] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0178.205] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0178.205] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0178.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea53d0 [0178.205] wcscpy (in: _Dest=0x3ea53d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.205] wcscat (in: _Dest=0x3ea53d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.205] wcscat (in: _Dest=0x3ea53d0, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" [0178.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea53d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0178.207] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0178.207] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0178.207] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0178.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea54b0 [0178.207] wcscpy (in: _Dest=0x3ea54b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.207] wcscat (in: _Dest=0x3ea54b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.207] wcscat (in: _Dest=0x3ea54b0, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" [0178.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea54b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0178.208] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0178.208] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0178.209] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0178.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5590 [0178.209] wcscpy (in: _Dest=0x3ea5590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.209] wcscat (in: _Dest=0x3ea5590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.209] wcscat (in: _Dest=0x3ea5590, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" [0178.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0178.210] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0178.210] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0178.210] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0178.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5670 [0178.210] wcscpy (in: _Dest=0x3ea5670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.210] wcscat (in: _Dest=0x3ea5670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.210] wcscat (in: _Dest=0x3ea5670, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" [0178.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0178.212] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1 [0178.212] wcscmp (_String1="FormsTemplates", _String2=".") returned 1 [0178.212] wcscmp (_String1="FormsTemplates", _String2="..") returned 1 [0178.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036210 [0178.212] wcscpy (in: _Dest=0x3036210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.212] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.212] wcscat (in: _Dest=0x3036210, _Source="FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0178.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3036210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0178.213] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0178.213] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0178.213] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0178.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5750 [0178.213] wcscpy (in: _Dest=0x3ea5750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.213] wcscat (in: _Dest=0x3ea5750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.213] wcscat (in: _Dest=0x3ea5750, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" [0178.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0178.214] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0178.214] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0178.214] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d575d0 [0178.214] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.214] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.214] wcscat (in: _Dest=0x3d575d0, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" [0178.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d575d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0178.216] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0178.216] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0178.216] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8fe8 [0178.216] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.216] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.216] wcscat (in: _Dest=0x3ea8fe8, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" [0178.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0178.217] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0178.217] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0178.217] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0178.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac708 [0178.217] wcscpy (in: _Dest=0x68ac708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.217] wcscat (in: _Dest=0x68ac708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.217] wcscat (in: _Dest=0x68ac708, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" [0178.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0178.219] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0178.219] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0178.219] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0178.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac7e0 [0178.219] wcscpy (in: _Dest=0x68ac7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.219] wcscat (in: _Dest=0x68ac7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.219] wcscat (in: _Dest=0x68ac7e0, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" [0178.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0178.220] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0178.220] wcscmp (_String1="GrooveFormsMetaData.xml", _String2=".") returned 1 [0178.220] wcscmp (_String1="GrooveFormsMetaData.xml", _String2="..") returned 1 [0178.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5830 [0178.220] wcscpy (in: _Dest=0x3ea5830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.220] wcscat (in: _Dest=0x3ea5830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.220] wcscat (in: _Dest=0x3ea5830, _Source="GrooveFormsMetaData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" [0178.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0178.221] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0178.221] wcscmp (_String1="MENUS.JS", _String2=".") returned 1 [0178.221] wcscmp (_String1="MENUS.JS", _String2="..") returned 1 [0178.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332da8 [0178.221] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.222] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.222] wcscat (in: _Dest=0x332da8, _Source="MENUS.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" [0178.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0178.222] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1 [0178.222] wcscmp (_String1="menu_arrow.gif", _String2=".") returned 1 [0178.223] wcscmp (_String1="menu_arrow.gif", _String2="..") returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036d70 [0178.223] wcscpy (in: _Dest=0x3036d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.223] wcscat (in: _Dest=0x3036d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.223] wcscat (in: _Dest=0x3036d70, _Source="menu_arrow.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" [0178.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0178.224] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0178.224] wcscmp (_String1="SEARCH.GIF", _String2=".") returned 1 [0178.224] wcscmp (_String1="SEARCH.GIF", _String2="..") returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f5e8 [0178.224] wcscpy (in: _Dest=0x682f5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.224] wcscat (in: _Dest=0x682f5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.224] wcscat (in: _Dest=0x682f5e8, _Source="SEARCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" [0178.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0178.225] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0178.226] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0178.226] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0178.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682de78 [0178.226] wcscpy (in: _Dest=0x682de78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.226] wcscat (in: _Dest=0x682de78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.226] wcscat (in: _Dest=0x682de78, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" [0178.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0178.227] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0178.227] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0178.227] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0178.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3333a8 [0178.227] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.227] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.227] wcscat (in: _Dest=0x3333a8, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" [0178.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0178.229] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0178.229] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0178.229] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0178.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac8b8 [0178.229] wcscpy (in: _Dest=0x68ac8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.229] wcscat (in: _Dest=0x68ac8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.229] wcscat (in: _Dest=0x68ac8b8, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" [0178.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0178.230] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0178.230] wcscmp (_String1="validation.js", _String2=".") returned 1 [0178.230] wcscmp (_String1="validation.js", _String2="..") returned 1 [0178.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682e710 [0178.230] wcscpy (in: _Dest=0x682e710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.231] wcscat (in: _Dest=0x682e710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.231] wcscat (in: _Dest=0x682e710, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" [0178.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0178.232] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0178.232] wcscmp (_String1="VIEW.CSS", _String2=".") returned 1 [0178.232] wcscmp (_String1="VIEW.CSS", _String2="..") returned 1 [0178.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0178.232] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.232] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.232] wcscat (in: _Dest=0x333468, _Source="VIEW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" [0178.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0178.234] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0178.234] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0178.234] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0178.234] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0178.234] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0178.234] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0178.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3321a8 [0178.234] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.234] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.234] wcscat (in: _Dest=0x3321a8, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" [0178.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0178.235] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0178.236] wcscmp (_String1="VIEWBY.GIF", _String2=".") returned 1 [0178.236] wcscmp (_String1="VIEWBY.GIF", _String2="..") returned 1 [0178.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ddb0 [0178.236] wcscpy (in: _Dest=0x682ddb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.236] wcscat (in: _Dest=0x682ddb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.236] wcscat (in: _Dest=0x682ddb0, _Source="VIEWBY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" [0178.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ddb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0178.240] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1 [0178.240] wcscmp (_String1="viewDblClick.js", _String2=".") returned 1 [0178.240] wcscmp (_String1="viewDblClick.js", _String2="..") returned 1 [0178.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036b00 [0178.240] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.240] wcscat (in: _Dest=0x3036b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.240] wcscat (in: _Dest=0x3036b00, _Source="viewDblClick.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" [0178.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3036b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0178.242] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0178.242] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0178.242] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0178.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x68ac990 [0178.242] wcscpy (in: _Dest=0x68ac990, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.242] wcscat (in: _Dest=0x68ac990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.242] wcscat (in: _Dest=0x68ac990, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" [0178.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0178.637] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1 [0178.637] wcscmp (_String1="viewSelectionChanged.js", _String2=".") returned 1 [0178.637] wcscmp (_String1="viewSelectionChanged.js", _String2="..") returned 1 [0178.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5e50 [0178.637] wcscpy (in: _Dest=0x3ea5e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0178.637] wcscat (in: _Dest=0x3ea5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0178.637] wcscat (in: _Dest=0x3ea5e50, _Source="viewSelectionChanged.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" [0179.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0179.432] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0 [0179.857] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0183.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f137f0) returned 1 [0183.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3330) returned 1 [0183.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea22b0) returned 1 Thread: id = 3296 os_tid = 0x1750 [0162.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1d30 [0162.072] wcscpy (in: _Dest=0x3ee1d30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0162.072] wcscat (in: _Dest=0x3ee1d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0162.072] wcscat (in: _Dest=0x3ee1d30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*" [0162.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0162.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0166.489] wcscmp (_String1=".", _String2=".") returned 0 [0166.489] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.977] wcscmp (_String1="..", _String2=".") returned 1 [0167.977] wcscmp (_String1="..", _String2="..") returned 0 [0167.977] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0167.977] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0167.977] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0167.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333168 [0167.977] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0167.977] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0167.977] wcscat (in: _Dest=0x333168, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" [0172.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif")) returned 0x20 [0172.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0172.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.802] GetLastError () returned 0x5 [0172.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0172.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0172.802] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0172.802] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0172.802] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0172.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e04890 [0172.802] wcscpy (in: _Dest=0x3e04890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.802] wcscat (in: _Dest=0x3e04890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.802] wcscat (in: _Dest=0x3e04890, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" [0172.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 0x20 [0172.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0172.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.803] GetLastError () returned 0x5 [0172.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0172.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04890) returned 1 [0172.803] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0172.803] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0172.803] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0172.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9608 [0172.803] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.803] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.804] wcscat (in: _Dest=0x2c9608, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" [0172.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 0x20 [0172.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0172.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.804] GetLastError () returned 0x5 [0172.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0172.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 [0172.805] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0172.805] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0172.805] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0172.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36040 [0172.805] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.805] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.805] wcscat (in: _Dest=0x3e36040, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" [0172.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif")) returned 0x20 [0172.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.806] GetLastError () returned 0x5 [0172.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 [0172.806] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0172.806] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0172.806] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0172.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0172.806] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.806] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.806] wcscat (in: _Dest=0x3df03f0, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" [0172.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif")) returned 0x20 [0172.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0172.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.807] GetLastError () returned 0x5 [0172.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0172.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.807] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0172.807] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0172.807] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0172.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36040 [0172.807] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.807] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.807] wcscat (in: _Dest=0x3e36040, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" [0172.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif")) returned 0x20 [0172.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0172.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.808] GetLastError () returned 0x5 [0172.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0172.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 [0172.808] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0172.809] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0172.809] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0172.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36040 [0172.809] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.809] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0172.809] wcscat (in: _Dest=0x3e36040, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" [0172.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif")) returned 0x20 [0173.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0173.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.607] GetLastError () returned 0x5 [0173.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0173.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 [0173.607] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0173.607] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0173.607] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0173.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36040 [0173.607] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0173.607] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0173.607] wcscat (in: _Dest=0x3e36040, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" [0177.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0177.469] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0177.470] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0177.470] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0177.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x68abe98 [0177.470] wcscpy (in: _Dest=0x68abe98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.470] wcscat (in: _Dest=0x68abe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.470] wcscat (in: _Dest=0x68abe98, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" [0177.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0177.471] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0177.471] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0177.471] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0177.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d577a0 [0177.471] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.471] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.472] wcscat (in: _Dest=0x3d577a0, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" [0177.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0177.473] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0177.473] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0177.473] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0177.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d576b8 [0177.473] wcscpy (in: _Dest=0x3d576b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.473] wcscat (in: _Dest=0x3d576b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.473] wcscat (in: _Dest=0x3d576b8, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" [0177.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d576b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0177.474] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0177.474] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0177.474] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0177.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35750 [0177.474] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.474] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.474] wcscat (in: _Dest=0x3e35750, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" [0177.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0177.476] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0177.476] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0177.476] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0177.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36930 [0177.476] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.476] wcscat (in: _Dest=0x3e36930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.476] wcscat (in: _Dest=0x3e36930, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" [0177.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0177.478] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0177.478] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0177.478] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0177.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68abf70 [0177.478] wcscpy (in: _Dest=0x68abf70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.478] wcscat (in: _Dest=0x68abf70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.478] wcscat (in: _Dest=0x68abf70, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" [0177.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0177.479] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0177.479] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0177.479] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0177.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac048 [0177.479] wcscpy (in: _Dest=0x68ac048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.479] wcscat (in: _Dest=0x68ac048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.479] wcscat (in: _Dest=0x68ac048, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" [0177.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0177.480] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0177.480] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0177.480] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0177.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36790 [0177.480] wcscpy (in: _Dest=0x3e36790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.480] wcscat (in: _Dest=0x3e36790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.481] wcscat (in: _Dest=0x3e36790, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" [0177.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0177.482] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0177.482] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0177.482] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0177.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e37220 [0177.482] wcscpy (in: _Dest=0x3e37220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.482] wcscat (in: _Dest=0x3e37220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.482] wcscat (in: _Dest=0x3e37220, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" [0177.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0177.483] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0177.483] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0177.483] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0177.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68ac120 [0177.483] wcscpy (in: _Dest=0x68ac120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.483] wcscat (in: _Dest=0x68ac120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.483] wcscat (in: _Dest=0x68ac120, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" [0177.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0177.484] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0177.484] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0177.484] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0177.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac1f8 [0177.485] wcscpy (in: _Dest=0x68ac1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.485] wcscat (in: _Dest=0x68ac1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.485] wcscat (in: _Dest=0x68ac1f8, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" [0177.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0177.486] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0177.486] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0177.486] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0177.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e372f0 [0177.486] wcscpy (in: _Dest=0x3e372f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.486] wcscat (in: _Dest=0x3e372f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.486] wcscat (in: _Dest=0x3e372f0, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" [0177.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e372f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0177.487] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0177.487] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0177.487] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0177.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x68ac2d0 [0177.487] wcscpy (in: _Dest=0x68ac2d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.487] wcscat (in: _Dest=0x68ac2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.487] wcscat (in: _Dest=0x68ac2d0, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" [0177.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0177.488] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0177.489] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0177.489] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0177.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e373c0 [0177.489] wcscpy (in: _Dest=0x3e373c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.489] wcscat (in: _Dest=0x3e373c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.489] wcscat (in: _Dest=0x3e373c0, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" [0177.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e373c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0177.490] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0177.490] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0177.490] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0177.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68ac3a8 [0177.490] wcscpy (in: _Dest=0x68ac3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.490] wcscat (in: _Dest=0x68ac3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.490] wcscat (in: _Dest=0x68ac3a8, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" [0177.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0177.491] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0177.491] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0177.491] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0177.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e37490 [0177.491] wcscpy (in: _Dest=0x3e37490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.491] wcscat (in: _Dest=0x3e37490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.492] wcscat (in: _Dest=0x3e37490, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" [0177.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0177.493] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0177.493] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0177.493] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0177.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5210 [0177.493] wcscpy (in: _Dest=0x3ea5210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.493] wcscat (in: _Dest=0x3ea5210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.493] wcscat (in: _Dest=0x3ea5210, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" [0177.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0177.494] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0177.494] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0177.494] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0177.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f6b0 [0177.494] wcscpy (in: _Dest=0x682f6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.494] wcscat (in: _Dest=0x682f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.494] wcscat (in: _Dest=0x682f6b0, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" [0177.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0177.495] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0177.495] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0177.495] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0177.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682e328 [0177.496] wcscpy (in: _Dest=0x682e328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.496] wcscat (in: _Dest=0x682e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.496] wcscat (in: _Dest=0x682e328, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" [0177.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0177.497] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0177.497] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0177.497] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0177.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f138 [0177.497] wcscpy (in: _Dest=0x682f138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.497] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.497] wcscat (in: _Dest=0x682f138, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" [0177.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0177.498] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0177.498] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0177.498] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0177.498] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0177.498] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0177.498] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0177.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3daf8c8 [0177.498] wcscpy (in: _Dest=0x3daf8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.499] wcscat (in: _Dest=0x3daf8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.499] wcscat (in: _Dest=0x3daf8c8, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" [0177.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0177.500] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0177.500] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0177.500] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0177.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68ac480 [0177.500] wcscpy (in: _Dest=0x68ac480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0177.500] wcscat (in: _Dest=0x68ac480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0177.500] wcscat (in: _Dest=0x68ac480, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" [0177.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0177.501] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0178.136] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0178.136] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0178.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9448 [0178.136] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0178.136] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0178.136] wcscat (in: _Dest=0x2c9448, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" [0179.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0179.273] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0179.273] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0179.273] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0179.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e488e0 [0179.273] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.273] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.273] wcscat (in: _Dest=0x3e488e0, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" [0179.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e488e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0179.275] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0179.275] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0179.275] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0179.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4250 [0179.276] wcscpy (in: _Dest=0x3ea4250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.276] wcscat (in: _Dest=0x3ea4250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.276] wcscat (in: _Dest=0x3ea4250, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" [0179.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0179.277] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0179.277] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0179.277] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0179.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68abf70 [0179.277] wcscpy (in: _Dest=0x68abf70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.277] wcscat (in: _Dest=0x68abf70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.277] wcscat (in: _Dest=0x68abf70, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" [0179.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0179.281] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0179.281] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0179.281] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0179.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4bf0 [0179.281] wcscpy (in: _Dest=0x3ea4bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.282] wcscat (in: _Dest=0x3ea4bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.282] wcscat (in: _Dest=0x3ea4bf0, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" [0179.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0179.282] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0179.282] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0179.282] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0179.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4a30 [0179.283] wcscpy (in: _Dest=0x3ea4a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.283] wcscat (in: _Dest=0x3ea4a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.283] wcscat (in: _Dest=0x3ea4a30, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" [0179.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0179.284] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0179.284] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0179.284] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0179.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea54b0 [0179.284] wcscpy (in: _Dest=0x3ea54b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.284] wcscat (in: _Dest=0x3ea54b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.284] wcscat (in: _Dest=0x3ea54b0, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" [0179.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea54b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0179.285] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0179.285] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0179.285] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0179.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5210 [0179.285] wcscpy (in: _Dest=0x3ea5210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.285] wcscat (in: _Dest=0x3ea5210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.285] wcscat (in: _Dest=0x3ea5210, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" [0179.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0179.286] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0179.286] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0179.286] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0179.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56920 [0179.286] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.286] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.286] wcscat (in: _Dest=0x3d56920, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" [0179.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0179.287] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0179.287] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0179.287] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0179.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4cd0 [0179.287] wcscpy (in: _Dest=0x3ea4cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.287] wcscat (in: _Dest=0x3ea4cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.288] wcscat (in: _Dest=0x3ea4cd0, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" [0179.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0179.289] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0179.289] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0179.289] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0179.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ec88 [0179.289] wcscpy (in: _Dest=0x682ec88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.289] wcscat (in: _Dest=0x682ec88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.289] wcscat (in: _Dest=0x682ec88, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0179.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682ec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0179.290] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0179.290] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0179.290] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0179.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4950 [0179.290] wcscpy (in: _Dest=0x3ea4950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.290] wcscat (in: _Dest=0x3ea4950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.290] wcscat (in: _Dest=0x3ea4950, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" [0179.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0179.291] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0179.291] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0179.291] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0179.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56838 [0179.291] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.291] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.291] wcscat (in: _Dest=0x3d56838, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" [0179.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0179.292] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0179.292] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0179.292] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0179.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea72d8 [0179.293] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.293] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.293] wcscat (in: _Dest=0x3ea72d8, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" [0179.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0179.294] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0179.294] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0179.294] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0179.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68ac048 [0179.294] wcscpy (in: _Dest=0x68ac048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.294] wcscat (in: _Dest=0x68ac048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.294] wcscat (in: _Dest=0x68ac048, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" [0179.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0179.295] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0179.295] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0179.295] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0179.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5f30 [0179.295] wcscpy (in: _Dest=0x3ea5f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.295] wcscat (in: _Dest=0x3ea5f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.295] wcscat (in: _Dest=0x3ea5f30, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" [0179.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0179.296] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0179.296] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0179.296] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0179.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac120 [0179.296] wcscpy (in: _Dest=0x68ac120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.296] wcscat (in: _Dest=0x68ac120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.296] wcscat (in: _Dest=0x68ac120, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" [0179.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0179.297] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0179.297] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0179.297] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0179.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f200 [0179.297] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.297] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.297] wcscat (in: _Dest=0x682f200, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" [0179.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0179.298] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0179.298] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0179.298] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0179.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f138 [0179.299] wcscpy (in: _Dest=0x682f138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.299] wcscat (in: _Dest=0x682f138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.299] wcscat (in: _Dest=0x682f138, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" [0179.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0179.300] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0179.300] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0179.300] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0179.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac1f8 [0179.300] wcscpy (in: _Dest=0x68ac1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.300] wcscat (in: _Dest=0x68ac1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.300] wcscat (in: _Dest=0x68ac1f8, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" [0179.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0179.301] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0179.301] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0179.301] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0179.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac2d0 [0179.301] wcscpy (in: _Dest=0x68ac2d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.302] wcscat (in: _Dest=0x68ac2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.302] wcscat (in: _Dest=0x68ac2d0, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" [0179.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0179.303] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0179.303] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0179.303] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0179.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac3a8 [0179.303] wcscpy (in: _Dest=0x68ac3a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.303] wcscat (in: _Dest=0x68ac3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.303] wcscat (in: _Dest=0x68ac3a8, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" [0179.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0179.304] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0179.304] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0179.304] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0179.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68ac480 [0179.304] wcscpy (in: _Dest=0x68ac480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.304] wcscat (in: _Dest=0x68ac480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.304] wcscat (in: _Dest=0x68ac480, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" [0179.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0179.305] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0179.305] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0179.305] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0179.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682e328 [0179.306] wcscpy (in: _Dest=0x682e328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.306] wcscat (in: _Dest=0x682e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.306] wcscat (in: _Dest=0x682e328, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" [0179.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0179.307] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0179.307] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0179.307] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0179.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e373c0 [0179.307] wcscpy (in: _Dest=0x3e373c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.307] wcscat (in: _Dest=0x3e373c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.307] wcscat (in: _Dest=0x3e373c0, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" [0179.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e373c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0179.308] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0179.308] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0179.308] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0179.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e37490 [0179.308] wcscpy (in: _Dest=0x3e37490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.308] wcscat (in: _Dest=0x3e37490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.308] wcscat (in: _Dest=0x3e37490, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" [0179.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0179.309] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0179.309] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0179.309] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0179.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68acc18 [0179.309] wcscpy (in: _Dest=0x68acc18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.309] wcscat (in: _Dest=0x68acc18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.309] wcscat (in: _Dest=0x68acc18, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" [0179.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0179.311] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0179.311] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0179.311] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0179.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x68accf0 [0179.311] wcscpy (in: _Dest=0x68accf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.311] wcscat (in: _Dest=0x68accf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.311] wcscat (in: _Dest=0x68accf0, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" [0179.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68accf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0179.312] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0179.312] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0179.312] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0179.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea6010 [0179.312] wcscpy (in: _Dest=0x3ea6010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.312] wcscat (in: _Dest=0x3ea6010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.312] wcscat (in: _Dest=0x3ea6010, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" [0179.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea6010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0179.313] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0179.314] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0179.314] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0179.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea60f0 [0179.315] wcscpy (in: _Dest=0x3ea60f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0179.315] wcscat (in: _Dest=0x3ea60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0179.315] wcscat (in: _Dest=0x3ea60f0, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" [0180.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0180.505] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0180.505] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0180.505] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0180.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e37220 [0180.505] wcscpy (in: _Dest=0x3e37220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.505] wcscat (in: _Dest=0x3e37220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.505] wcscat (in: _Dest=0x3e37220, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" [0180.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0180.506] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0180.506] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0180.506] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0180.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e372f0 [0180.507] wcscpy (in: _Dest=0x3e372f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.507] wcscat (in: _Dest=0x3e372f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.507] wcscat (in: _Dest=0x3e372f0, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" [0180.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e372f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0180.508] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0180.508] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0180.508] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0180.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36930 [0180.508] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.508] wcscat (in: _Dest=0x3e36930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.508] wcscat (in: _Dest=0x3e36930, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" [0180.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0180.509] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0180.509] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0180.509] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0180.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48808 [0180.509] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.509] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.509] wcscat (in: _Dest=0x3e48808, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" [0180.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0180.510] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0180.510] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0180.510] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0180.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db01c8 [0180.510] wcscpy (in: _Dest=0x3db01c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.510] wcscat (in: _Dest=0x3db01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.510] wcscat (in: _Dest=0x3db01c8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" [0180.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db01c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0180.511] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0180.511] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0180.511] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0180.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682efa8 [0180.511] wcscpy (in: _Dest=0x682efa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.511] wcscat (in: _Dest=0x682efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.511] wcscat (in: _Dest=0x682efa8, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" [0180.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0180.512] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0180.512] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0180.512] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0180.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48730 [0180.513] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.513] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.513] wcscat (in: _Dest=0x3e48730, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" [0180.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0180.514] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0180.514] wcscmp (_String1="validation.js", _String2=".") returned 1 [0180.514] wcscmp (_String1="validation.js", _String2="..") returned 1 [0180.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36790 [0180.514] wcscpy (in: _Dest=0x3e36790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.514] wcscat (in: _Dest=0x3e36790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.514] wcscat (in: _Dest=0x3e36790, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" [0180.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0180.515] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0180.515] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0180.515] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0180.515] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0180.515] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0180.515] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0180.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3db0288 [0180.515] wcscpy (in: _Dest=0x3db0288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.515] wcscat (in: _Dest=0x3db0288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.515] wcscat (in: _Dest=0x3db0288, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" [0180.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0180.516] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0180.516] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0180.516] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0180.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea4b10 [0180.516] wcscpy (in: _Dest=0x3ea4b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0180.516] wcscat (in: _Dest=0x3ea4b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0180.516] wcscat (in: _Dest=0x3ea4b10, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" [0180.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0180.517] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0181.861] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0182.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0182.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1d30) returned 1 [0182.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea28e0) returned 1 Thread: id = 3297 os_tid = 0x1754 [0162.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1770 [0162.074] wcscpy (in: _Dest=0x3ee1770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0162.074] wcscat (in: _Dest=0x3ee1770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0162.074] wcscat (in: _Dest=0x3ee1770, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*" [0162.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0162.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0166.488] wcscmp (_String1=".", _String2=".") returned 0 [0166.488] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.976] wcscmp (_String1="..", _String2=".") returned 1 [0167.976] wcscmp (_String1="..", _String2="..") returned 0 [0167.976] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0167.976] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0167.976] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0167.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0167.976] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0167.976] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0167.976] wcscat (in: _Dest=0x3339a8, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" [0170.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0170.661] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0170.661] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0170.661] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0170.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48808 [0170.661] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.661] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.661] wcscat (in: _Dest=0x3e48808, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" [0170.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0170.662] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0170.662] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0170.662] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0170.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c98a8 [0170.662] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.662] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.662] wcscat (in: _Dest=0x2c98a8, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" [0170.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0170.663] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0170.663] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0170.663] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0170.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35f70 [0170.663] wcscpy (in: _Dest=0x3e35f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.663] wcscat (in: _Dest=0x3e35f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.663] wcscat (in: _Dest=0x3e35f70, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" [0170.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0170.665] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0170.665] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0170.665] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0170.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f200 [0170.665] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.665] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.665] wcscat (in: _Dest=0x682f200, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" [0170.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0170.666] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0170.666] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0170.666] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0170.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35b60 [0170.666] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.666] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.666] wcscat (in: _Dest=0x3e35b60, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" [0170.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0170.667] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0170.667] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0170.667] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0170.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e359c0 [0170.667] wcscpy (in: _Dest=0x3e359c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.667] wcscat (in: _Dest=0x3e359c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.668] wcscat (in: _Dest=0x3e359c0, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" [0170.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e359c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0170.669] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0170.669] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0170.669] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0170.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e366c0 [0170.669] wcscpy (in: _Dest=0x3e366c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.669] wcscat (in: _Dest=0x3e366c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.669] wcscat (in: _Dest=0x3e366c0, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" [0170.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e366c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0170.670] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0170.670] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0170.670] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0170.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3011188 [0170.670] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.670] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.670] wcscat (in: _Dest=0x3011188, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" [0170.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0170.672] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0170.672] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0170.672] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0170.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56e90 [0170.672] wcscpy (in: _Dest=0x3d56e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.672] wcscat (in: _Dest=0x3d56e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.672] wcscat (in: _Dest=0x3d56e90, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" [0170.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0170.673] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0170.673] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0170.673] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0170.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56cc0 [0170.673] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.673] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.673] wcscat (in: _Dest=0x3d56cc0, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" [0170.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0170.674] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0170.674] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0170.674] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0170.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36790 [0170.675] wcscpy (in: _Dest=0x3e36790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.675] wcscat (in: _Dest=0x3e36790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.675] wcscat (in: _Dest=0x3e36790, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" [0170.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0170.676] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0170.676] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0170.676] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0170.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36860 [0170.676] wcscpy (in: _Dest=0x3e36860, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.676] wcscat (in: _Dest=0x3e36860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.676] wcscat (in: _Dest=0x3e36860, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" [0170.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0170.677] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0170.677] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0170.677] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0170.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011fe0 [0170.677] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.677] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.677] wcscat (in: _Dest=0x3011fe0, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" [0170.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0170.678] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0170.678] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0170.678] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0170.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011770 [0170.678] wcscpy (in: _Dest=0x3011770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.678] wcscat (in: _Dest=0x3011770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.678] wcscat (in: _Dest=0x3011770, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" [0170.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0170.679] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0170.679] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0170.679] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0170.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36930 [0170.680] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.680] wcscat (in: _Dest=0x3e36930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.680] wcscat (in: _Dest=0x3e36930, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" [0170.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0170.680] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0170.681] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0170.681] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0170.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36a00 [0170.681] wcscpy (in: _Dest=0x3e36a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.681] wcscat (in: _Dest=0x3e36a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.681] wcscat (in: _Dest=0x3e36a00, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" [0170.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0170.682] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0170.682] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0170.682] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0170.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x30125c8 [0170.682] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.682] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.682] wcscat (in: _Dest=0x30125c8, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" [0170.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0170.683] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0170.683] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0170.683] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0170.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011d58 [0170.683] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.683] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.683] wcscat (in: _Dest=0x3011d58, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" [0170.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0170.685] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0170.685] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0170.685] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0170.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36ad0 [0170.685] wcscpy (in: _Dest=0x3e36ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.685] wcscat (in: _Dest=0x3e36ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.685] wcscat (in: _Dest=0x3e36ad0, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" [0170.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0170.686] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0170.686] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0170.686] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0170.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3012a00 [0170.686] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.686] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.686] wcscat (in: _Dest=0x3012a00, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" [0170.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0170.687] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0170.687] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0170.687] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0170.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36ba0 [0170.687] wcscpy (in: _Dest=0x3e36ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.687] wcscat (in: _Dest=0x3e36ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.687] wcscat (in: _Dest=0x3e36ba0, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" [0170.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0170.689] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0170.689] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0170.689] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0170.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e57f8 [0170.689] wcscpy (in: _Dest=0x2e57f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.689] wcscat (in: _Dest=0x2e57f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.689] wcscat (in: _Dest=0x2e57f8, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" [0170.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e57f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0170.690] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0170.691] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0170.691] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0170.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36c70 [0170.691] wcscpy (in: _Dest=0x3e36c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.691] wcscat (in: _Dest=0x3e36c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.691] wcscat (in: _Dest=0x3e36c70, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" [0170.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0170.692] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0170.692] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0170.692] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0170.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c97c8 [0170.692] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.692] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.692] wcscat (in: _Dest=0x2c97c8, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" [0170.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0170.693] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0170.693] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0170.693] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0170.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f840 [0170.694] wcscpy (in: _Dest=0x682f840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.694] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.694] wcscat (in: _Dest=0x682f840, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" [0170.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0170.695] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0170.695] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0170.695] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0170.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682fb60 [0170.695] wcscpy (in: _Dest=0x682fb60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.695] wcscat (in: _Dest=0x682fb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.695] wcscat (in: _Dest=0x682fb60, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" [0170.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0170.696] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0170.696] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0170.696] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0170.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0170.696] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.696] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.696] wcscat (in: _Dest=0x682fa98, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" [0170.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0170.697] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0170.697] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0170.697] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0170.697] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0170.698] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0170.698] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0170.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3daf388 [0170.698] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.698] wcscat (in: _Dest=0x3daf388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.698] wcscat (in: _Dest=0x3daf388, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" [0170.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0170.867] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0170.867] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0170.867] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0170.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e58d0 [0170.867] wcscpy (in: _Dest=0x2e58d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0170.867] wcscat (in: _Dest=0x2e58d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0170.868] wcscat (in: _Dest=0x2e58d0, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" [0172.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 0x20 [0173.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0173.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.274] GetLastError () returned 0x5 [0173.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0173.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e58d0) returned 1 [0173.275] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0174.078] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0174.078] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0174.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9528 [0174.078] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0174.078] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0174.078] wcscat (in: _Dest=0x2c9528, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" [0175.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0175.771] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0175.771] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0175.771] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0175.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30120b8 [0175.771] wcscpy (in: _Dest=0x30120b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.771] wcscat (in: _Dest=0x30120b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.772] wcscat (in: _Dest=0x30120b8, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" [0175.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30120b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0175.773] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0175.773] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0175.773] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0175.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c98a8 [0175.773] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.773] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.773] wcscat (in: _Dest=0x2c98a8, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" [0175.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0175.775] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0175.775] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0175.775] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0175.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30126a0 [0175.775] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.775] wcscat (in: _Dest=0x30126a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.775] wcscat (in: _Dest=0x30126a0, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" [0175.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30126a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0175.777] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0175.777] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0175.777] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0175.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0175.777] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.777] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.777] wcscat (in: _Dest=0x2c97c8, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" [0175.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0175.778] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0175.778] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0175.778] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0175.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4330 [0175.778] wcscpy (in: _Dest=0x3ea4330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.778] wcscat (in: _Dest=0x3ea4330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.778] wcscat (in: _Dest=0x3ea4330, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" [0175.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0175.779] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0175.779] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0175.779] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0175.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4410 [0175.780] wcscpy (in: _Dest=0x3ea4410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.780] wcscat (in: _Dest=0x3ea4410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.780] wcscat (in: _Dest=0x3ea4410, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" [0175.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0175.781] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0175.781] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0175.781] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0175.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea44f0 [0175.781] wcscpy (in: _Dest=0x3ea44f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.781] wcscat (in: _Dest=0x3ea44f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.781] wcscat (in: _Dest=0x3ea44f0, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" [0175.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea44f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0175.782] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0175.782] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0175.782] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0175.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56cc0 [0175.782] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.782] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.782] wcscat (in: _Dest=0x3d56cc0, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" [0175.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0175.783] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0175.784] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0175.784] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0175.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea45d0 [0175.784] wcscpy (in: _Dest=0x3ea45d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.784] wcscat (in: _Dest=0x3ea45d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.784] wcscat (in: _Dest=0x3ea45d0, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" [0175.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea45d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0175.785] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0175.785] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0175.785] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0175.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f908 [0175.785] wcscpy (in: _Dest=0x682f908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.785] wcscat (in: _Dest=0x682f908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.785] wcscat (in: _Dest=0x682f908, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0175.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682f908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0175.786] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0175.786] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0175.786] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0175.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea46b0 [0175.787] wcscpy (in: _Dest=0x3ea46b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.787] wcscat (in: _Dest=0x3ea46b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.787] wcscat (in: _Dest=0x3ea46b0, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" [0175.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea46b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0175.788] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0175.788] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0175.788] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0175.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56e90 [0175.788] wcscpy (in: _Dest=0x3d56e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.788] wcscat (in: _Dest=0x3d56e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.788] wcscat (in: _Dest=0x3d56e90, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" [0175.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0175.790] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0175.790] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0175.790] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0175.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea84a8 [0175.790] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.790] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.790] wcscat (in: _Dest=0x3ea84a8, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" [0175.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea84a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0175.791] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0175.791] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0175.791] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0175.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3012a00 [0175.791] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.791] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.791] wcscat (in: _Dest=0x3012a00, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" [0175.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0175.792] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0175.792] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0175.792] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0175.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4790 [0175.792] wcscpy (in: _Dest=0x3ea4790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.792] wcscat (in: _Dest=0x3ea4790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.793] wcscat (in: _Dest=0x3ea4790, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" [0175.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0175.794] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0175.794] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0175.794] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0175.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30125c8 [0175.794] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.794] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.794] wcscat (in: _Dest=0x30125c8, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" [0175.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0175.795] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0175.795] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0175.795] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0175.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f2c8 [0175.795] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.795] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.795] wcscat (in: _Dest=0x682f2c8, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" [0175.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0175.797] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0175.797] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0175.797] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0175.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682ed50 [0175.797] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.797] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.797] wcscat (in: _Dest=0x682ed50, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" [0175.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ed50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0175.800] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0175.800] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0175.800] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0175.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011188 [0175.800] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.800] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.800] wcscat (in: _Dest=0x3011188, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" [0175.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0175.801] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0175.801] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0175.801] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0175.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e04890 [0175.801] wcscpy (in: _Dest=0x3e04890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.801] wcscat (in: _Dest=0x3e04890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.801] wcscat (in: _Dest=0x3e04890, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" [0175.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e04890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0175.802] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0175.802] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0175.802] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0175.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48808 [0175.803] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.803] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.803] wcscat (in: _Dest=0x3e48808, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" [0175.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0175.804] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0175.804] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0175.804] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0175.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48220 [0175.804] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.804] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.804] wcscat (in: _Dest=0x3e48220, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" [0175.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0175.805] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0175.805] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0175.805] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0175.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f778 [0175.805] wcscpy (in: _Dest=0x682f778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.805] wcscat (in: _Dest=0x682f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.805] wcscat (in: _Dest=0x682f778, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" [0175.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0175.808] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0175.808] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0175.808] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0175.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36520 [0175.808] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.808] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.808] wcscat (in: _Dest=0x3e36520, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" [0175.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0175.809] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0175.809] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0175.809] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0175.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36ba0 [0175.809] wcscpy (in: _Dest=0x3e36ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0175.809] wcscat (in: _Dest=0x3e36ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0175.809] wcscat (in: _Dest=0x3e36ba0, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" [0175.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0176.249] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0176.249] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0176.249] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0176.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e0c090 [0176.249] wcscpy (in: _Dest=0x3e0c090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0176.249] wcscat (in: _Dest=0x3e0c090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0176.249] wcscat (in: _Dest=0x3e0c090, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" [0177.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0177.450] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0177.450] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0177.450] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0177.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0177.451] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.451] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.451] wcscat (in: _Dest=0x3e48658, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" [0177.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0177.452] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0177.452] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0177.452] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0177.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5130 [0177.452] wcscpy (in: _Dest=0x3ea5130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.452] wcscat (in: _Dest=0x3ea5130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.452] wcscat (in: _Dest=0x3ea5130, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" [0177.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0177.453] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0178.114] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0178.114] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0178.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68ac630 [0178.114] wcscpy (in: _Dest=0x68ac630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0178.114] wcscat (in: _Dest=0x68ac630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0178.114] wcscat (in: _Dest=0x68ac630, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" [0179.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ac630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0179.229] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0179.229] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0179.229] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0179.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4db0 [0179.229] wcscpy (in: _Dest=0x3ea4db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.229] wcscat (in: _Dest=0x3ea4db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.229] wcscat (in: _Dest=0x3ea4db0, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" [0179.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0179.230] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0179.231] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0179.231] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0179.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36930 [0179.231] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.231] wcscat (in: _Dest=0x3e36930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.231] wcscat (in: _Dest=0x3e36930, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" [0179.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0179.232] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0179.232] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0179.232] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0179.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36790 [0179.232] wcscpy (in: _Dest=0x3e36790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.232] wcscat (in: _Dest=0x3e36790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.232] wcscat (in: _Dest=0x3e36790, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" [0179.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0179.233] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0179.233] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0179.233] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0179.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e37220 [0179.233] wcscpy (in: _Dest=0x3e37220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.233] wcscat (in: _Dest=0x3e37220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.233] wcscat (in: _Dest=0x3e37220, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" [0179.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e37220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0179.234] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0179.234] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0179.234] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0179.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48808 [0179.234] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.234] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.234] wcscat (in: _Dest=0x3e48808, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" [0179.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0179.235] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0179.235] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0179.235] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0179.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48730 [0179.235] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.235] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.235] wcscat (in: _Dest=0x3e48730, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" [0179.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0179.236] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0179.236] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0179.236] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0179.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3db01c8 [0179.236] wcscpy (in: _Dest=0x3db01c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.236] wcscat (in: _Dest=0x3db01c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.237] wcscat (in: _Dest=0x3db01c8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" [0179.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db01c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0179.237] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0179.237] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0179.238] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0179.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682efa8 [0179.238] wcscpy (in: _Dest=0x682efa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.238] wcscat (in: _Dest=0x682efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.238] wcscat (in: _Dest=0x682efa8, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" [0179.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0179.239] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0179.239] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0179.239] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0179.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e484a8 [0179.239] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.239] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.239] wcscat (in: _Dest=0x3e484a8, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" [0179.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0179.240] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0179.240] wcscmp (_String1="validation.js", _String2=".") returned 1 [0179.240] wcscmp (_String1="validation.js", _String2="..") returned 1 [0179.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e372f0 [0179.240] wcscpy (in: _Dest=0x3e372f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.240] wcscat (in: _Dest=0x3e372f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.240] wcscat (in: _Dest=0x3e372f0, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" [0179.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e372f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0179.241] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0179.241] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0179.241] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0179.241] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0179.241] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0179.241] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0179.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3db0288 [0179.241] wcscpy (in: _Dest=0x3db0288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.241] wcscat (in: _Dest=0x3db0288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.241] wcscat (in: _Dest=0x3db0288, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" [0179.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0179.242] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0179.242] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0179.242] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0179.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea4b10 [0179.243] wcscpy (in: _Dest=0x3ea4b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.243] wcscat (in: _Dest=0x3ea4b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.243] wcscat (in: _Dest=0x3ea4b10, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" [0179.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0179.243] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0179.243] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0179.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0179.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1770) returned 1 [0179.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2570) returned 1 Thread: id = 3298 os_tid = 0x1758 [0162.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1828 [0162.074] wcscpy (in: _Dest=0x3ee1828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0162.074] wcscat (in: _Dest=0x3ee1828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0162.074] wcscat (in: _Dest=0x3ee1828, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*" [0162.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40060 [0162.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0165.408] wcscmp (_String1=".", _String2=".") returned 0 [0165.409] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.487] wcscmp (_String1="..", _String2=".") returned 1 [0166.487] wcscmp (_String1="..", _String2="..") returned 0 [0166.487] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0166.487] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0166.487] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0166.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3daf148 [0166.487] wcscpy (in: _Dest=0x3daf148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0166.487] wcscat (in: _Dest=0x3daf148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0166.487] wcscat (in: _Dest=0x3daf148, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" [0172.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif")) returned 0x20 [0172.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0172.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.699] GetLastError () returned 0x5 [0172.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0172.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf148) returned 1 [0172.700] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0172.700] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0172.700] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0172.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036d70 [0172.700] wcscpy (in: _Dest=0x3036d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.700] wcscat (in: _Dest=0x3036d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0172.700] wcscat (in: _Dest=0x3036d70, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" [0172.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif")) returned 0x20 [0172.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.700] GetLastError () returned 0x5 [0172.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0172.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 [0172.701] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0172.701] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0172.701] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0172.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3df03f0 [0172.701] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.701] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0172.701] wcscat (in: _Dest=0x3df03f0, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" [0172.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif")) returned 0x20 [0172.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0172.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.701] GetLastError () returned 0x5 [0172.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0172.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.702] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0172.702] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0172.702] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0172.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3df03f0 [0172.703] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.703] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0172.703] wcscat (in: _Dest=0x3df03f0, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" [0172.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif")) returned 0x20 [0172.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0172.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.703] GetLastError () returned 0x5 [0172.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0172.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.703] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0172.703] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0172.704] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0172.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3df03f0 [0172.704] wcscpy (in: _Dest=0x3df03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.704] wcscat (in: _Dest=0x3df03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0172.704] wcscat (in: _Dest=0x3df03f0, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" [0172.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif")) returned 0x20 [0172.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0172.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.704] GetLastError () returned 0x5 [0172.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0172.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df03f0) returned 1 [0172.704] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18a400, ftCreationTime.dwHighDateTime=0x1ca5e25, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd18a400, ftLastWriteTime.dwHighDateTime=0x1ca5e25, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0172.705] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0172.705] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0172.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3daf148 [0172.705] wcscpy (in: _Dest=0x3daf148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.705] wcscat (in: _Dest=0x3daf148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0172.705] wcscat (in: _Dest=0x3daf148, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" [0172.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js")) returned 0x20 [0173.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0173.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.615] GetLastError () returned 0x5 [0173.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0173.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf148) returned 1 [0173.616] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0173.616] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0173.616] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0173.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e488e0 [0173.616] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0173.616] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0173.616] wcscat (in: _Dest=0x3e488e0, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" [0178.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e488e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0178.596] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0178.596] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0178.596] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0178.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea54b0 [0178.596] wcscpy (in: _Dest=0x3ea54b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.596] wcscat (in: _Dest=0x3ea54b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.596] wcscat (in: _Dest=0x3ea54b0, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" [0178.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea54b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0178.597] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0178.597] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0178.597] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0178.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48a90 [0178.597] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.597] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.597] wcscat (in: _Dest=0x3e48a90, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" [0178.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0178.598] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~2.HTM")) returned 1 [0178.598] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0178.598] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0178.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea53d0 [0178.598] wcscpy (in: _Dest=0x3ea53d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.598] wcscat (in: _Dest=0x3ea53d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.598] wcscat (in: _Dest=0x3ea53d0, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" [0178.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea53d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0178.599] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff336900, ftCreationTime.dwHighDateTime=0x1c7d367, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff336900, ftLastWriteTime.dwHighDateTime=0x1c7d367, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0178.599] wcscmp (_String1="FormsFormTemplateRTL.html", _String2=".") returned 1 [0178.599] wcscmp (_String1="FormsFormTemplateRTL.html", _String2="..") returned 1 [0178.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57318 [0178.599] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.599] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.599] wcscat (in: _Dest=0x3d57318, _Source="FormsFormTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" [0178.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0178.600] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0178.601] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0178.601] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0178.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5910 [0178.601] wcscpy (in: _Dest=0x3ea5910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.601] wcscat (in: _Dest=0x3ea5910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.601] wcscat (in: _Dest=0x3ea5910, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" [0178.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0178.602] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0178.602] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0178.602] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0178.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea59f0 [0178.602] wcscpy (in: _Dest=0x3ea59f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.602] wcscat (in: _Dest=0x3ea59f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.602] wcscat (in: _Dest=0x3ea59f0, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" [0178.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea59f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0178.603] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~3.HTM")) returned 1 [0178.603] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0178.603] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0178.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57400 [0178.603] wcscpy (in: _Dest=0x3d57400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.603] wcscat (in: _Dest=0x3d57400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.603] wcscat (in: _Dest=0x3d57400, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" [0178.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0178.604] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b200, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2b200, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0178.604] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2=".") returned 1 [0178.604] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2="..") returned 1 [0178.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56af0 [0178.604] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.604] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.604] wcscat (in: _Dest=0x3d56af0, _Source="FormsPreviewTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" [0178.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0178.605] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~4.HTM")) returned 1 [0178.605] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0178.605] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0178.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5ad0 [0178.605] wcscpy (in: _Dest=0x3ea5ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.605] wcscat (in: _Dest=0x3ea5ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.605] wcscat (in: _Dest=0x3ea5ad0, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" [0178.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0178.606] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f632800, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f632800, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0178.606] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2=".") returned 1 [0178.606] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2="..") returned 1 [0178.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d577a0 [0178.607] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.607] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.607] wcscat (in: _Dest=0x3d577a0, _Source="FormsPrintTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" [0178.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0178.608] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46282200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46282200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0178.608] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0178.608] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0178.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d574e8 [0178.608] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.608] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.608] wcscat (in: _Dest=0x3d574e8, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" [0178.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0178.609] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0178.609] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0178.609] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0178.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8958 [0178.609] wcscpy (in: _Dest=0x3ea8958, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.609] wcscat (in: _Dest=0x3ea8958, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.609] wcscat (in: _Dest=0x3ea8958, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" [0178.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0178.610] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0178.610] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0178.610] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0178.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682e648 [0178.610] wcscpy (in: _Dest=0x682e648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.610] wcscat (in: _Dest=0x682e648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.610] wcscat (in: _Dest=0x682e648, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" [0178.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0178.611] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="INFOPA~1.JPG")) returned 1 [0178.611] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2=".") returned 1 [0178.611] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2="..") returned 1 [0178.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5bb0 [0178.611] wcscpy (in: _Dest=0x3ea5bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.611] wcscat (in: _Dest=0x3ea5bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.611] wcscat (in: _Dest=0x3ea5bb0, _Source="InfoPathWelcomeImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" [0178.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0178.612] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0178.612] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0178.612] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0178.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f070 [0178.612] wcscpy (in: _Dest=0x682f070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.612] wcscat (in: _Dest=0x682f070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.612] wcscat (in: _Dest=0x682f070, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" [0178.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0178.613] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0178.613] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0178.613] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0178.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48b68 [0178.613] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.613] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.613] wcscat (in: _Dest=0x3e48b68, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" [0178.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0178.614] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0178.614] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0178.614] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0178.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e47578 [0178.614] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.614] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.614] wcscat (in: _Dest=0x3e47578, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" [0178.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0178.615] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0178.615] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0178.616] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0178.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e489b8 [0178.616] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.616] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.616] wcscat (in: _Dest=0x3e489b8, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" [0178.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0178.617] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0178.617] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0178.617] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0178.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48580 [0178.617] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.617] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.617] wcscat (in: _Dest=0x3e48580, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" [0178.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0178.618] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0178.618] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0178.619] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0178.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e35d00 [0178.619] wcscpy (in: _Dest=0x3e35d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.619] wcscat (in: _Dest=0x3e35d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.619] wcscat (in: _Dest=0x3e35d00, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" [0178.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0178.620] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0178.620] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0178.620] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0178.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36c70 [0178.621] wcscpy (in: _Dest=0x3e36c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.621] wcscat (in: _Dest=0x3e36c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.621] wcscat (in: _Dest=0x3e36c70, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" [0178.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0178.622] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0178.622] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0178.622] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0178.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68abe98 [0178.622] wcscpy (in: _Dest=0x68abe98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.622] wcscat (in: _Dest=0x68abe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.622] wcscat (in: _Dest=0x68abe98, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" [0178.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68abe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0178.623] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0178.623] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0178.623] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0178.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5c90 [0178.623] wcscpy (in: _Dest=0x3ea5c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.623] wcscat (in: _Dest=0x3ea5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.623] wcscat (in: _Dest=0x3ea5c90, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" [0178.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0178.624] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0178.624] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0178.624] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0178.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68aca68 [0178.624] wcscpy (in: _Dest=0x68aca68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.624] wcscat (in: _Dest=0x68aca68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.624] wcscat (in: _Dest=0x68aca68, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" [0178.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0178.625] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0178.625] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0178.626] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0178.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5d70 [0178.626] wcscpy (in: _Dest=0x3ea5d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.626] wcscat (in: _Dest=0x3ea5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.626] wcscat (in: _Dest=0x3ea5d70, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" [0178.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0178.627] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0178.627] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0178.627] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0178.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36d40 [0178.627] wcscpy (in: _Dest=0x3e36d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.627] wcscat (in: _Dest=0x3e36d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.627] wcscat (in: _Dest=0x3e36d40, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" [0178.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0178.631] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0178.631] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0178.632] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0178.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36ee0 [0178.632] wcscpy (in: _Dest=0x3e36ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.632] wcscat (in: _Dest=0x3e36ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.632] wcscat (in: _Dest=0x3e36ee0, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" [0178.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0178.633] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0178.633] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0178.633] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0178.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0178.633] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.633] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.633] wcscat (in: _Dest=0x3339a8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" [0178.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0178.634] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca87b00, ftCreationTime.dwHighDateTime=0x1ca40ef, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca87b00, ftLastWriteTime.dwHighDateTime=0x1ca40ef, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0178.634] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0178.634] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0178.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e260 [0178.634] wcscpy (in: _Dest=0x682e260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.635] wcscat (in: _Dest=0x682e260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.635] wcscat (in: _Dest=0x682e260, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" [0178.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0178.635] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0178.636] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0178.636] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0178.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68acb40 [0178.636] wcscpy (in: _Dest=0x68acb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.636] wcscat (in: _Dest=0x68acb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.636] wcscat (in: _Dest=0x68acb40, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" [0178.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68acb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0178.895] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0178.895] wcscmp (_String1="validation.js", _String2=".") returned 1 [0178.895] wcscmp (_String1="validation.js", _String2="..") returned 1 [0178.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35750 [0178.895] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0178.895] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0178.895] wcscat (in: _Dest=0x3e35750, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" [0182.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0182.571] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x3d40060 | out: lpFindFileData=0x3d40060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 0 [0182.571] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0182.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0182.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1828) returned 1 [0182.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2360) returned 1 Thread: id = 3299 os_tid = 0xd94 [0162.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f6b0 [0162.076] wcscpy (in: _Dest=0x682f6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0162.076] wcscat (in: _Dest=0x682f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0162.076] wcscat (in: _Dest=0x682f6b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*" [0162.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41608 [0162.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0165.411] wcscmp (_String1=".", _String2=".") returned 0 [0165.411] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.488] wcscmp (_String1="..", _String2=".") returned 1 [0166.488] wcscmp (_String1="..", _String2="..") returned 0 [0166.488] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1 [0166.488] wcscmp (_String1="BriefcaseIcon.jpg", _String2=".") returned 1 [0166.488] wcscmp (_String1="BriefcaseIcon.jpg", _String2="..") returned 1 [0166.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56a08 [0166.488] wcscpy (in: _Dest=0x3d56a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0166.488] wcscat (in: _Dest=0x3d56a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0166.488] wcscat (in: _Dest=0x3d56a08, _Source="BriefcaseIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" [0172.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 0x20 [0173.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0173.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.656] GetLastError () returned 0x5 [0173.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0173.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a08) returned 1 [0173.656] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1 [0173.657] wcscmp (_String1="BriefcaseIconMask.bmp", _String2=".") returned 1 [0173.657] wcscmp (_String1="BriefcaseIconMask.bmp", _String2="..") returned 1 [0173.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea72d8 [0173.657] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0173.657] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0173.657] wcscat (in: _Dest=0x3ea72d8, _Source="BriefcaseIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" [0176.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0176.133] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1 [0176.134] wcscmp (_String1="CircleIcons.jpg", _String2=".") returned 1 [0176.134] wcscmp (_String1="CircleIcons.jpg", _String2="..") returned 1 [0176.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9528 [0176.134] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.134] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.134] wcscat (in: _Dest=0x2c9528, _Source="CircleIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" [0176.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0176.135] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1 [0176.135] wcscmp (_String1="CircleIconsMask.bmp", _String2=".") returned 1 [0176.135] wcscmp (_String1="CircleIconsMask.bmp", _String2="..") returned 1 [0176.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57230 [0176.135] wcscpy (in: _Dest=0x3d57230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.135] wcscat (in: _Dest=0x3d57230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.135] wcscat (in: _Dest=0x3d57230, _Source="CircleIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" [0176.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0176.136] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1 [0176.136] wcscmp (_String1="MeetingIcon.jpg", _String2=".") returned 1 [0176.136] wcscmp (_String1="MeetingIcon.jpg", _String2="..") returned 1 [0176.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4950 [0176.136] wcscpy (in: _Dest=0x3ea4950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.136] wcscat (in: _Dest=0x3ea4950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.136] wcscat (in: _Dest=0x3ea4950, _Source="MeetingIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" [0176.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0176.137] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1 [0176.137] wcscmp (_String1="MeetingIconMask.bmp", _String2=".") returned 1 [0176.138] wcscmp (_String1="MeetingIconMask.bmp", _String2="..") returned 1 [0176.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56f78 [0176.138] wcscpy (in: _Dest=0x3d56f78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.138] wcscat (in: _Dest=0x3d56f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.138] wcscat (in: _Dest=0x3d56f78, _Source="MeetingIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" [0176.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0176.139] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1 [0176.139] wcscmp (_String1="ProjectStatusIcons.jpg", _String2=".") returned 1 [0176.139] wcscmp (_String1="ProjectStatusIcons.jpg", _String2="..") returned 1 [0176.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8b38 [0176.139] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.139] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.139] wcscat (in: _Dest=0x3ea8b38, _Source="ProjectStatusIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" [0176.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0176.140] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1 [0176.140] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2=".") returned 1 [0176.140] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2="..") returned 1 [0176.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad560 [0176.140] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.140] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.140] wcscat (in: _Dest=0x3dad560, _Source="ProjectStatusIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" [0176.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0176.141] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1 [0176.141] wcscmp (_String1="ProjectTaskIcon.jpg", _String2=".") returned 1 [0176.141] wcscmp (_String1="ProjectTaskIcon.jpg", _String2="..") returned 1 [0176.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57148 [0176.141] wcscpy (in: _Dest=0x3d57148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.141] wcscat (in: _Dest=0x3d57148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.141] wcscat (in: _Dest=0x3d57148, _Source="ProjectTaskIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" [0176.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0176.142] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1 [0176.142] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2=".") returned 1 [0176.142] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2="..") returned 1 [0176.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8868 [0176.142] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.142] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.142] wcscat (in: _Dest=0x3ea8868, _Source="ProjectTaskIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" [0176.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0176.143] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1 [0176.143] wcscmp (_String1="ProjectTool", _String2=".") returned 1 [0176.143] wcscmp (_String1="ProjectTool", _String2="..") returned 1 [0176.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e483d0 [0176.144] wcscpy (in: _Dest=0x3e483d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.144] wcscat (in: _Dest=0x3e483d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.144] wcscat (in: _Dest=0x3e483d0, _Source="ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0176.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e483d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0176.145] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1 [0176.145] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2=".") returned 1 [0176.145] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2="..") returned 1 [0176.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadc28 [0176.145] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.145] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.145] wcscat (in: _Dest=0x3dadc28, _Source="ProjectToolsetIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" [0176.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0176.147] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1 [0176.147] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2=".") returned 1 [0176.147] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2="..") returned 1 [0176.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e15a70 [0176.147] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.147] wcscat (in: _Dest=0x3e15a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.147] wcscat (in: _Dest=0x3e15a70, _Source="ProjectToolsetIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" [0176.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0176.148] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1 [0176.148] wcscmp (_String1="SplashImage.jpg", _String2=".") returned 1 [0176.148] wcscmp (_String1="SplashImage.jpg", _String2="..") returned 1 [0176.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4a30 [0176.148] wcscpy (in: _Dest=0x3ea4a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.148] wcscat (in: _Dest=0x3ea4a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.148] wcscat (in: _Dest=0x3ea4a30, _Source="SplashImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" [0176.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0176.149] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0176.149] wcscmp (_String1="SplashImageMask.bmp", _String2=".") returned 1 [0176.149] wcscmp (_String1="SplashImageMask.bmp", _String2="..") returned 1 [0176.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57060 [0176.149] wcscpy (in: _Dest=0x3d57060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.149] wcscat (in: _Dest=0x3d57060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.150] wcscat (in: _Dest=0x3d57060, _Source="SplashImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" [0176.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0176.151] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0176.151] wcscmp (_String1="TABMASK.BMP", _String2=".") returned 1 [0176.151] wcscmp (_String1="TABMASK.BMP", _String2="..") returned 1 [0176.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e484a8 [0176.151] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.151] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.151] wcscat (in: _Dest=0x3e484a8, _Source="TABMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" [0176.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0176.152] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0176.152] wcscmp (_String1="TABOFF.JPG", _String2=".") returned 1 [0176.152] wcscmp (_String1="TABOFF.JPG", _String2="..") returned 1 [0176.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48730 [0176.152] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.152] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.152] wcscat (in: _Dest=0x3e48730, _Source="TABOFF.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" [0176.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0176.153] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0176.153] wcscmp (_String1="TABON.JPG", _String2=".") returned 1 [0176.153] wcscmp (_String1="TABON.JPG", _String2="..") returned 1 [0176.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e0c4c8 [0176.153] wcscpy (in: _Dest=0x3e0c4c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.153] wcscat (in: _Dest=0x3e0c4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.153] wcscat (in: _Dest=0x3e0c4c8, _Source="TABON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" [0176.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0c4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0176.154] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0176.154] wcscmp (_String1="WHITEBOX.JPG", _String2=".") returned 1 [0176.154] wcscmp (_String1="WHITEBOX.JPG", _String2="..") returned 1 [0176.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e0cab0 [0176.154] wcscpy (in: _Dest=0x3e0cab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.154] wcscat (in: _Dest=0x3e0cab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.154] wcscat (in: _Dest=0x3e0cab0, _Source="WHITEBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" [0176.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0cab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0176.155] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1 [0176.155] wcscmp (_String1="WhiteboxMask.bmp", _String2=".") returned 1 [0176.155] wcscmp (_String1="WhiteboxMask.bmp", _String2="..") returned 1 [0176.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4b10 [0176.155] wcscpy (in: _Dest=0x3ea4b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.155] wcscat (in: _Dest=0x3ea4b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.155] wcscat (in: _Dest=0x3ea4b10, _Source="WhiteboxMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" [0176.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0176.156] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1 [0176.156] wcscmp (_String1="ZoomIcons.jpg", _String2=".") returned 1 [0176.156] wcscmp (_String1="ZoomIcons.jpg", _String2="..") returned 1 [0176.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea4bf0 [0176.156] wcscpy (in: _Dest=0x3ea4bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.156] wcscat (in: _Dest=0x3ea4bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.156] wcscat (in: _Dest=0x3ea4bf0, _Source="ZoomIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" [0176.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0176.157] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1 [0176.157] wcscmp (_String1="ZoomIconsMask.bmp", _String2=".") returned 1 [0176.157] wcscmp (_String1="ZoomIconsMask.bmp", _String2="..") returned 1 [0176.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56a08 [0176.158] wcscpy (in: _Dest=0x3d56a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0176.158] wcscat (in: _Dest=0x3d56a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0176.158] wcscat (in: _Dest=0x3d56a08, _Source="ZoomIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" [0176.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0176.159] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3d41608 | out: lpFindFileData=0x3d41608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 0 [0176.159] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0176.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41608) returned 1 [0176.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f6b0) returned 1 [0176.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 3300 os_tid = 0xd8c [0162.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1de8 [0162.076] wcscpy (in: _Dest=0x3ee1de8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0162.076] wcscat (in: _Dest=0x3ee1de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0162.076] wcscat (in: _Dest=0x3ee1de8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*" [0162.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40c68 [0162.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0164.352] wcscmp (_String1=".", _String2=".") returned 0 [0164.352] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.352] wcscmp (_String1="..", _String2=".") returned 1 [0164.352] wcscmp (_String1="..", _String2="..") returned 0 [0164.352] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e2b700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e1f6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e2b700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1 [0164.352] wcscmp (_String1="IconImages.jpg", _String2=".") returned 1 [0164.352] wcscmp (_String1="IconImages.jpg", _String2="..") returned 1 [0164.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36040 [0164.352] wcscpy (in: _Dest=0x3e36040, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0164.352] wcscat (in: _Dest=0x3e36040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0164.352] wcscat (in: _Dest=0x3e36040, _Source="IconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" [0172.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 0x20 [0172.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0172.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.751] GetLastError () returned 0x5 [0172.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0172.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1 [0172.751] wcscmp (_String1="IconImagesMask.bmp", _String2=".") returned 1 [0172.751] wcscmp (_String1="IconImagesMask.bmp", _String2="..") returned 1 [0172.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e6650 [0172.751] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0172.751] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0172.751] wcscat (in: _Dest=0x2e6650, _Source="IconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" [0172.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 0x20 [0173.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0173.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.619] GetLastError () returned 0x5 [0173.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0173.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 [0173.619] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x3d40c68 | out: lpFindFileData=0x3d40c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 0 [0173.619] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0173.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c68) returned 1 [0173.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1de8) returned 1 [0173.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 Thread: id = 3301 os_tid = 0x175c [0162.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 0x20 [0163.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.454] GetLastError () returned 0x5 [0163.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee18e0) returned 1 Thread: id = 3302 os_tid = 0x1760 [0162.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 0x20 [0162.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0162.971] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.971] GetLastError () returned 0x5 [0162.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0162.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 3303 os_tid = 0x1764 [0162.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 0x20 [0162.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0162.969] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.969] GetLastError () returned 0x5 [0162.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0162.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3304 os_tid = 0x176c [0162.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 0x20 [0162.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.967] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.967] GetLastError () returned 0x5 [0162.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0162.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3305 os_tid = 0xcc0 [0162.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 0x20 [0163.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0163.457] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.457] GetLastError () returned 0x5 [0163.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0163.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 Thread: id = 3306 os_tid = 0xa88 [0162.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 0x20 [0163.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.456] GetLastError () returned 0x5 [0163.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f520) returned 1 Thread: id = 3307 os_tid = 0x884 [0162.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf")) returned 0x20 [0165.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0166.937] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.759] GetLastError () returned 0x5 [0167.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0167.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2798) returned 1 Thread: id = 3308 os_tid = 0x4c0 [0162.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf")) returned 0x20 [0166.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0166.954] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.101] GetLastError () returned 0x5 [0168.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0168.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfec8) returned 1 Thread: id = 3309 os_tid = 0xb48 [0162.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf")) returned 0x20 [0166.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0167.673] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.761] GetLastError () returned 0x5 [0167.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0168.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 3310 os_tid = 0xb70 [0162.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf")) returned 0x20 [0168.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.114] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.114] GetLastError () returned 0x5 [0168.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0be8) returned 1 Thread: id = 3311 os_tid = 0x508 [0162.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf")) returned 0x20 [0168.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.116] GetLastError () returned 0x5 [0168.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 3312 os_tid = 0xc58 [0162.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf")) returned 0x20 [0168.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0168.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.118] GetLastError () returned 0x5 [0168.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0168.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0508) returned 1 Thread: id = 3313 os_tid = 0x140 [0162.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf")) returned 0x20 [0168.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0168.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.120] GetLastError () returned 0x5 [0168.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0168.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 3314 os_tid = 0x11d4 [0162.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf")) returned 0x20 [0168.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.121] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.121] GetLastError () returned 0x5 [0168.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 3315 os_tid = 0x1294 [0162.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf")) returned 0x20 [0163.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0164.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.373] GetLastError () returned 0x5 [0164.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0164.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 3316 os_tid = 0x100c [0162.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf")) returned 0x20 [0167.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.092] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.092] GetLastError () returned 0x5 [0168.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 3317 os_tid = 0xb10 [0162.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf")) returned 0x20 [0165.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0166.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.110] GetLastError () returned 0x5 [0166.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0166.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 3318 os_tid = 0x1478 [0162.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf")) returned 0x20 [0168.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0168.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.122] GetLastError () returned 0x5 [0168.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0168.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 3319 os_tid = 0x147c [0162.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf")) returned 0x20 [0168.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.124] GetLastError () returned 0x5 [0168.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 3320 os_tid = 0x1480 [0162.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf")) returned 0x20 [0168.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.125] GetLastError () returned 0x5 [0168.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 3321 os_tid = 0x1484 [0162.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf")) returned 0x20 [0168.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0168.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.127] GetLastError () returned 0x5 [0168.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0168.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 3322 os_tid = 0x1488 [0162.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf")) returned 0x20 [0168.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0168.128] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.128] GetLastError () returned 0x5 [0168.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0168.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 3323 os_tid = 0x148c [0162.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf")) returned 0x20 [0167.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0167.746] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.094] GetLastError () returned 0x5 [0168.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0168.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 3324 os_tid = 0x1490 [0162.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf")) returned 0x20 [0168.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.096] GetLastError () returned 0x5 [0168.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 3325 os_tid = 0x1494 [0162.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf")) returned 0x20 [0168.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0168.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.099] GetLastError () returned 0x5 [0168.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0168.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 3326 os_tid = 0x1498 [0162.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf")) returned 0x20 [0168.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0168.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.130] GetLastError () returned 0x5 [0168.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0168.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3b8) returned 1 Thread: id = 3327 os_tid = 0x149c [0162.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf")) returned 0x20 [0168.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.103] GetLastError () returned 0x5 [0168.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 3328 os_tid = 0x474 [0162.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf")) returned 0x20 [0168.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.107] GetLastError () returned 0x5 [0168.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0168.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 3329 os_tid = 0x14a8 [0162.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf")) returned 0x20 [0168.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0168.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.109] GetLastError () returned 0x5 [0168.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0168.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 3330 os_tid = 0x14ac [0162.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf")) returned 0x20 [0168.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0168.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.111] GetLastError () returned 0x5 [0168.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0168.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 3331 os_tid = 0x14b0 [0162.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf")) returned 0x20 [0168.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.112] GetLastError () returned 0x5 [0168.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0168.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 3332 os_tid = 0xb30 [0162.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x66d0240 [0162.286] wcscpy (in: _Dest=0x66d0240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0162.286] wcscat (in: _Dest=0x66d0240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0162.286] wcscat (in: _Dest=0x66d0240, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*" [0162.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41d40 [0162.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0165.417] wcscmp (_String1=".", _String2=".") returned 0 [0165.417] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.417] wcscmp (_String1="..", _String2=".") returned 1 [0165.417] wcscmp (_String1="..", _String2="..") returned 0 [0165.417] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0165.417] wcscmp (_String1="SY______.PFM", _String2=".") returned 1 [0165.417] wcscmp (_String1="SY______.PFM", _String2="..") returned 1 [0165.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd128 [0165.417] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0165.417] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0165.417] wcscat (in: _Dest=0x66dd128, _Source="SY______.PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" [0172.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm")) returned 0x20 [0172.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0172.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.763] GetLastError () returned 0x5 [0172.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0172.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.763] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0172.763] wcscmp (_String1="zx______.pfm", _String2=".") returned 1 [0172.764] wcscmp (_String1="zx______.pfm", _String2="..") returned 1 [0172.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd128 [0172.764] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0172.764] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0172.764] wcscat (in: _Dest=0x66dd128, _Source="zx______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" [0172.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm")) returned 0x20 [0172.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0172.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.766] GetLastError () returned 0x5 [0172.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0172.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.766] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0172.766] wcscmp (_String1="zy______.pfm", _String2=".") returned 1 [0172.766] wcscmp (_String1="zy______.pfm", _String2="..") returned 1 [0172.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd128 [0172.766] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0172.766] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0172.766] wcscat (in: _Dest=0x66dd128, _Source="zy______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" [0172.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm")) returned 0x20 [0172.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0172.767] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.767] GetLastError () returned 0x5 [0172.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0172.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 [0172.767] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x3d41d40 | out: lpFindFileData=0x3d41d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0172.767] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0172.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d40) returned 1 [0172.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0172.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 Thread: id = 3333 os_tid = 0x434 [0162.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb")) returned 0x20 [0163.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0165.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.757] GetLastError () returned 0x5 [0167.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0168.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 3334 os_tid = 0x14d0 [0162.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb")) returned 0x20 [0167.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0167.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.763] GetLastError () returned 0x5 [0167.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0167.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 3335 os_tid = 0x308 [0162.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg")) returned 0x20 [0162.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0162.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.561] GetLastError () returned 0x5 [0162.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0162.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e5b8) returned 1 Thread: id = 3336 os_tid = 0x75c [0162.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg")) returned 0x20 [0162.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0162.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.566] GetLastError () returned 0x5 [0162.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0162.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db98) returned 1 Thread: id = 3337 os_tid = 0x7e8 [0162.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg")) returned 0x20 [0162.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0162.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.569] GetLastError () returned 0x5 [0162.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0162.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 3338 os_tid = 0xec8 [0162.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg")) returned 0x20 [0162.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0162.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.571] GetLastError () returned 0x5 [0162.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0162.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d5f8) returned 1 Thread: id = 3339 os_tid = 0x41c [0162.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg")) returned 0x20 [0164.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0165.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.508] GetLastError () returned 0x5 [0165.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0165.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 Thread: id = 3340 os_tid = 0xe74 [0162.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg")) returned 0x20 [0164.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0165.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.428] GetLastError () returned 0x5 [0165.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0165.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 3341 os_tid = 0xdcc [0162.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg")) returned 0x20 [0166.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0166.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.143] GetLastError () returned 0x5 [0166.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0166.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 3342 os_tid = 0xe84 [0162.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg")) returned 0x20 [0166.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0166.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.141] GetLastError () returned 0x5 [0166.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0166.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 3343 os_tid = 0xe98 [0162.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg")) returned 0x20 [0166.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0166.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.140] GetLastError () returned 0x5 [0166.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0166.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 Thread: id = 3344 os_tid = 0xea0 [0162.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg")) returned 0x20 [0163.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0163.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.203] GetLastError () returned 0x5 [0163.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0163.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 3345 os_tid = 0xdd4 [0162.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg")) returned 0x20 [0163.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0163.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.206] GetLastError () returned 0x5 [0163.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0163.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d958) returned 1 Thread: id = 3346 os_tid = 0xe58 [0162.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h")) returned 0x20 [0163.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0163.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.573] GetLastError () returned 0x5 [0163.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0163.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 3347 os_tid = 0xecc [0162.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h")) returned 0x20 [0164.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.380] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.380] GetLastError () returned 0x5 [0164.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 3348 os_tid = 0xee4 [0162.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2")) returned 0x20 [0164.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0164.382] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.382] GetLastError () returned 0x5 [0164.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0164.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 3349 os_tid = 0x410 [0162.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v")) returned 0x20 [0164.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.384] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.384] GetLastError () returned 0x5 [0164.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 3350 os_tid = 0xe44 [0162.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h")) returned 0x20 [0164.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.386] GetLastError () returned 0x5 [0164.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 3351 os_tid = 0x528 [0162.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v")) returned 0x20 [0164.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.388] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.388] GetLastError () returned 0x5 [0164.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 3352 os_tid = 0x580 [0162.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h")) returned 0x20 [0164.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.390] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.390] GetLastError () returned 0x5 [0164.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 3353 os_tid = 0x564 [0162.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2")) returned 0x20 [0164.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0164.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.392] GetLastError () returned 0x5 [0164.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0164.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 3354 os_tid = 0xe08 [0162.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c")) returned 0x20 [0164.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0164.393] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.393] GetLastError () returned 0x5 [0164.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0164.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 3355 os_tid = 0x518 [0162.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h")) returned 0x20 [0164.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.395] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.395] GetLastError () returned 0x5 [0164.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0164.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b2b8) returned 1 Thread: id = 3356 os_tid = 0x1004 [0162.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v")) returned 0x20 [0164.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.396] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.397] GetLastError () returned 0x5 [0164.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0164.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b8b8) returned 1 Thread: id = 3357 os_tid = 0x1034 [0162.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0")) returned 0x20 [0164.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0164.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.398] GetLastError () returned 0x5 [0164.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0164.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 3358 os_tid = 0x10a0 [0162.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1")) returned 0x20 [0164.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0164.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.400] GetLastError () returned 0x5 [0164.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0164.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 3359 os_tid = 0x10a4 [0162.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2")) returned 0x20 [0164.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0164.401] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.401] GetLastError () returned 0x5 [0164.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0164.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 3360 os_tid = 0x10a8 [0162.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3")) returned 0x20 [0164.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0164.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.403] GetLastError () returned 0x5 [0164.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0164.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 3361 os_tid = 0x10ac [0162.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4")) returned 0x20 [0164.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0164.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.405] GetLastError () returned 0x5 [0164.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0164.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 3362 os_tid = 0x10b0 [0162.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5")) returned 0x20 [0164.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0164.408] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.408] GetLastError () returned 0x5 [0164.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0164.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 3363 os_tid = 0x10b4 [0162.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc")) returned 0x20 [0164.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0164.412] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.412] GetLastError () returned 0x5 [0164.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0164.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 3364 os_tid = 0x10c0 [0162.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5")) returned 0x20 [0164.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0164.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.418] GetLastError () returned 0x5 [0164.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0164.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 3365 os_tid = 0x10c4 [0162.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid")) returned 0x20 [0164.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0164.420] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.420] GetLastError () returned 0x5 [0164.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0164.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de68) returned 1 Thread: id = 3366 os_tid = 0x1178 [0162.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host")) returned 0x20 [0164.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0164.422] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.422] GetLastError () returned 0x5 [0164.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0164.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674def8) returned 1 Thread: id = 3367 os_tid = 0x117c [0162.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac")) returned 0x20 [0164.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0164.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.424] GetLastError () returned 0x5 [0164.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0164.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 3368 os_tid = 0x1228 [0162.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2")) returned 0x20 [0164.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0164.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.426] GetLastError () returned 0x5 [0164.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0164.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 3369 os_tid = 0x1280 [0162.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0")) returned 0x20 [0164.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0164.427] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.428] GetLastError () returned 0x5 [0164.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0164.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 3370 os_tid = 0xaf4 [0162.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1")) returned 0x20 [0164.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0164.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.429] GetLastError () returned 0x5 [0164.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0164.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 3371 os_tid = 0x934 [0162.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2")) returned 0x20 [0164.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0164.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.431] GetLastError () returned 0x5 [0164.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0164.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 3372 os_tid = 0x1468 [0162.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3")) returned 0x20 [0163.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0163.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.501] GetLastError () returned 0x5 [0163.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0163.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f01d0) returned 1 Thread: id = 3373 os_tid = 0x146c [0162.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4")) returned 0x20 [0164.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0164.376] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.376] GetLastError () returned 0x5 [0164.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0164.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 Thread: id = 3374 os_tid = 0x1474 [0162.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5")) returned 0x20 [0164.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0164.410] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.410] GetLastError () returned 0x5 [0164.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0164.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 3375 os_tid = 0x14b4 [0162.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc")) returned 0x20 [0164.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0164.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.378] GetLastError () returned 0x5 [0164.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0164.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ddd8) returned 1 Thread: id = 3376 os_tid = 0x14b8 [0163.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc")) returned 0x20 [0164.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0164.415] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.415] GetLastError () returned 0x5 [0164.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0164.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 3377 os_tid = 0x14bc [0163.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674c3b8 [0163.237] wcscpy (in: _Dest=0x674c3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.237] wcscat (in: _Dest=0x674c3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.237] wcscat (in: _Dest=0x674c3b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*" [0163.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0163.237] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0163.574] wcscmp (_String1=".", _String2=".") returned 0 [0163.574] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.574] wcscmp (_String1="..", _String2=".") returned 1 [0163.574] wcscmp (_String1="..", _String2="..") returned 0 [0163.574] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0163.574] wcscmp (_String1="CertificateTransparency", _String2=".") returned 1 [0163.574] wcscmp (_String1="CertificateTransparency", _String2="..") returned 1 [0163.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697eab0 [0163.574] wcscpy (in: _Dest=0x697eab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.574] wcscat (in: _Dest=0x697eab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.574] wcscat (in: _Dest=0x697eab0, _Source="CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0165.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697eab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0165.224] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0165.225] wcscmp (_String1="Crashpad", _String2=".") returned 1 [0165.225] wcscmp (_String1="Crashpad", _String2="..") returned 1 [0165.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682cd60 [0165.225] wcscpy (in: _Dest=0x682cd60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.225] wcscat (in: _Dest=0x682cd60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.225] wcscat (in: _Dest=0x682cd60, _Source="Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0165.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x682cd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0165.226] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0165.226] wcscmp (_String1="Default", _String2=".") returned 1 [0165.226] wcscmp (_String1="Default", _String2="..") returned 1 [0165.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26a58 [0165.226] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.227] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.227] wcscat (in: _Dest=0x3f26a58, _Source="Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0165.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0165.228] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0165.228] wcscmp (_String1="EVWhitelist", _String2=".") returned 1 [0165.228] wcscmp (_String1="EVWhitelist", _String2="..") returned 1 [0165.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcc18 [0165.228] wcscpy (in: _Dest=0x66dcc18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.228] wcscat (in: _Dest=0x66dcc18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.228] wcscat (in: _Dest=0x66dcc18, _Source="EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0165.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dcc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0165.229] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0165.230] wcscmp (_String1="FileTypePolicies", _String2=".") returned 1 [0165.230] wcscmp (_String1="FileTypePolicies", _String2="..") returned 1 [0165.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x68184a0 [0165.230] wcscpy (in: _Dest=0x68184a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.230] wcscat (in: _Dest=0x68184a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.230] wcscat (in: _Dest=0x68184a0, _Source="FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0165.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68184a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0165.231] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3211530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3211530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3211530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0165.231] wcscmp (_String1="First Run", _String2=".") returned 1 [0165.231] wcscmp (_String1="First Run", _String2="..") returned 1 [0165.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dce58 [0165.231] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.231] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.232] wcscat (in: _Dest=0x66dce58, _Source="First Run" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" [0165.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0165.233] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8ac0f00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8ac0f00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1064b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0165.233] wcscmp (_String1="Local State", _String2=".") returned 1 [0165.233] wcscmp (_String1="Local State", _String2="..") returned 1 [0165.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbfb8 [0165.233] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.234] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.234] wcscat (in: _Dest=0x66dbfb8, _Source="Local State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0165.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0165.235] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0165.235] wcscmp (_String1="OriginTrials", _String2=".") returned 1 [0165.235] wcscmp (_String1="OriginTrials", _String2="..") returned 1 [0165.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc3a8 [0165.235] wcscpy (in: _Dest=0x66dc3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.235] wcscat (in: _Dest=0x66dc3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.235] wcscat (in: _Dest=0x66dc3a8, _Source="OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0165.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0165.237] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0165.237] wcscmp (_String1="PepperFlash", _String2=".") returned 1 [0165.237] wcscmp (_String1="PepperFlash", _String2="..") returned 1 [0165.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dbd78 [0165.237] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.237] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.237] wcscat (in: _Dest=0x66dbd78, _Source="PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0165.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0165.239] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0165.239] wcscmp (_String1="pnacl", _String2=".") returned 1 [0165.239] wcscmp (_String1="pnacl", _String2="..") returned 1 [0165.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25fb8 [0165.239] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.239] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.239] wcscat (in: _Dest=0x3f25fb8, _Source="pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0165.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0165.241] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0165.241] wcscmp (_String1="SSLErrorAssistant", _String2=".") returned 1 [0165.241] wcscmp (_String1="SSLErrorAssistant", _String2="..") returned 1 [0165.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1688 [0165.241] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.241] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.241] wcscat (in: _Dest=0x69c1688, _Source="SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0165.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c1688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0165.243] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwiftShader", cAlternateFileName="SWIFTS~1")) returned 1 [0165.243] wcscmp (_String1="SwiftShader", _String2=".") returned 1 [0165.243] wcscmp (_String1="SwiftShader", _String2="..") returned 1 [0165.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dc288 [0165.243] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.243] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.243] wcscat (in: _Dest=0x66dc288, _Source="SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0165.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308 [0165.244] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0165.244] wcscmp (_String1="SwReporter", _String2=".") returned 1 [0165.244] wcscmp (_String1="SwReporter", _String2="..") returned 1 [0165.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0165.245] wcscpy (in: _Dest=0x66db598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.245] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.245] wcscat (in: _Dest=0x66db598, _Source="SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0165.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0165.246] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0165.246] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0165.246] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0165.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x66dcee8 [0165.247] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0165.247] wcscat (in: _Dest=0x66dcee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0165.247] wcscat (in: _Dest=0x66dcee8, _Source="WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0165.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x66dcee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0165.248] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0165.248] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0165.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0165.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c3b8) returned 1 [0165.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 Thread: id = 3378 os_tid = 0x14c0 [0163.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 0x20 [0168.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.898] GetLastError () returned 0x5 [0168.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 3379 os_tid = 0x1350 [0163.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 0x20 [0169.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.192] GetLastError () returned 0x5 [0169.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 3380 os_tid = 0x14c4 [0163.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 0x20 [0169.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0169.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.191] GetLastError () returned 0x5 [0169.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0169.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d928) returned 1 Thread: id = 3381 os_tid = 0x14c8 [0163.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 0x20 [0169.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.189] GetLastError () returned 0x5 [0169.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 3382 os_tid = 0x14cc [0163.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 0x20 [0169.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0169.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.156] GetLastError () returned 0x5 [0169.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0169.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d148) returned 1 Thread: id = 3383 os_tid = 0x14d8 [0163.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 0x20 [0169.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0169.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.154] GetLastError () returned 0x5 [0169.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0169.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33e0) returned 1 Thread: id = 3384 os_tid = 0x10dc [0163.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 0x20 [0169.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.187] GetLastError () returned 0x5 [0169.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3490) returned 1 Thread: id = 3385 os_tid = 0x14dc [0163.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 0x20 [0169.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.207] GetLastError () returned 0x5 [0169.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 3386 os_tid = 0x14e0 [0163.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 0x20 [0169.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.205] GetLastError () returned 0x5 [0169.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3540) returned 1 Thread: id = 3387 os_tid = 0x14e8 [0163.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 0x20 [0169.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.185] GetLastError () returned 0x5 [0169.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7658) returned 1 Thread: id = 3388 os_tid = 0xec4 [0163.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 0x20 [0169.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.184] GetLastError () returned 0x5 [0169.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 3389 os_tid = 0x1200 [0163.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 0x20 [0169.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.203] GetLastError () returned 0x5 [0169.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 3390 os_tid = 0x1210 [0163.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 0x20 [0169.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0169.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.202] GetLastError () returned 0x5 [0169.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0169.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 3391 os_tid = 0x1214 [0163.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 0x20 [0169.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0169.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.200] GetLastError () returned 0x5 [0169.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0169.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea35f0) returned 1 Thread: id = 3392 os_tid = 0x1218 [0163.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg")) returned 0x20 [0169.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0169.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.218] GetLastError () returned 0x5 [0169.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0169.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 3393 os_tid = 0x121c [0163.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp")) returned 0x20 [0169.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0169.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.220] GetLastError () returned 0x5 [0169.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0169.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 Thread: id = 3394 os_tid = 0x1220 [0163.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 0x20 [0169.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0169.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.182] GetLastError () returned 0x5 [0169.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0169.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 3395 os_tid = 0x1284 [0163.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 0x20 [0169.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0169.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.216] GetLastError () returned 0x5 [0169.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0169.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea36a0) returned 1 Thread: id = 3396 os_tid = 0x1288 [0163.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 0x20 [0169.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0169.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.198] GetLastError () returned 0x5 [0169.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0169.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 3397 os_tid = 0x128c [0163.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 0x20 [0169.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0169.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.214] GetLastError () returned 0x5 [0169.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0169.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 Thread: id = 3398 os_tid = 0x1290 [0163.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 0x20 [0169.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.212] GetLastError () returned 0x5 [0169.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 3399 os_tid = 0x1298 [0163.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 0x20 [0169.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.196] GetLastError () returned 0x5 [0169.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 3400 os_tid = 0x129c [0163.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 0x20 [0169.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.194] GetLastError () returned 0x5 [0169.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 3401 os_tid = 0x12a0 [0163.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 0x20 [0169.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.163] GetLastError () returned 0x5 [0169.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 3402 os_tid = 0x12a4 [0163.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 0x20 [0169.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.162] GetLastError () returned 0x5 [0169.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 3403 os_tid = 0x12a8 [0163.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 0x20 [0169.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0169.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.159] GetLastError () returned 0x5 [0169.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0169.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3800) returned 1 Thread: id = 3404 os_tid = 0x12ac [0163.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 0x20 [0169.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0169.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.158] GetLastError () returned 0x5 [0169.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0169.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff72c0) returned 1 Thread: id = 3405 os_tid = 0x12b0 [0163.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg")) returned 0x20 [0166.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0166.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.137] GetLastError () returned 0x5 [0166.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0166.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 3406 os_tid = 0x12c8 [0163.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg")) returned 0x20 [0166.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0166.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.139] GetLastError () returned 0x5 [0166.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0166.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 3407 os_tid = 0x12d0 [0163.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20 [0170.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0170.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.245] GetLastError () returned 0x5 [0170.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0170.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 3408 os_tid = 0x12d4 [0163.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20 [0170.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0170.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.505] GetLastError () returned 0x5 [0170.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0170.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 3409 os_tid = 0x12d8 [0163.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20 [0168.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0168.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.208] GetLastError () returned 0x5 [0170.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0170.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 3410 os_tid = 0x1528 [0163.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20 [0168.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0168.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.209] GetLastError () returned 0x5 [0170.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0170.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 3411 os_tid = 0x111c [0163.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20 [0168.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0168.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.209] GetLastError () returned 0x5 [0170.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0170.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 3412 os_tid = 0x1158 [0163.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20 [0170.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0170.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.474] GetLastError () returned 0x5 [0170.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0170.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 3413 os_tid = 0xdac [0163.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20 [0168.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0168.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.210] GetLastError () returned 0x5 [0170.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0170.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 3414 os_tid = 0x1164 [0163.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20 [0168.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0168.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.210] GetLastError () returned 0x5 [0170.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0170.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 3415 os_tid = 0x15b8 [0163.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20 [0168.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0168.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.210] GetLastError () returned 0x5 [0170.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0170.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 3416 os_tid = 0x89c [0163.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20 [0168.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0168.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.211] GetLastError () returned 0x5 [0170.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0170.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 3417 os_tid = 0x116c [0163.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20 [0168.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0168.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.211] GetLastError () returned 0x5 [0170.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0170.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 3418 os_tid = 0x15bc [0163.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20 [0168.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0168.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.211] GetLastError () returned 0x5 [0170.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0170.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 3419 os_tid = 0x123c [0163.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20 [0168.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0168.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.211] GetLastError () returned 0x5 [0170.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0170.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 3420 os_tid = 0x1240 [0163.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20 [0168.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0168.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.212] GetLastError () returned 0x5 [0170.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0170.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 3421 os_tid = 0x1250 [0163.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20 [0168.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0168.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.212] GetLastError () returned 0x5 [0170.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0170.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 3422 os_tid = 0x1254 [0163.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20 [0168.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0168.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.212] GetLastError () returned 0x5 [0170.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0170.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 3423 os_tid = 0xd0c [0163.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20 [0168.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0168.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.213] GetLastError () returned 0x5 [0170.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0170.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 3424 os_tid = 0x17bc [0163.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20 [0170.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0170.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.468] GetLastError () returned 0x5 [0170.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0170.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 3425 os_tid = 0xdfc [0163.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20 [0170.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0170.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.475] GetLastError () returned 0x5 [0170.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0170.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 3426 os_tid = 0xa14 [0163.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20 [0168.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0168.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.213] GetLastError () returned 0x5 [0170.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0170.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 3427 os_tid = 0x174c [0163.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20 [0168.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0168.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.213] GetLastError () returned 0x5 [0170.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0170.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 3428 os_tid = 0x914 [0163.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20 [0170.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0170.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.484] GetLastError () returned 0x5 [0170.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0170.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 3429 os_tid = 0xbd8 [0163.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20 [0170.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0170.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.486] GetLastError () returned 0x5 [0170.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0170.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 3430 os_tid = 0xff8 [0163.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20 [0168.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0168.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.214] GetLastError () returned 0x5 [0170.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0170.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 3431 os_tid = 0x74c [0163.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20 [0170.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0170.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.488] GetLastError () returned 0x5 [0170.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0170.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 3432 os_tid = 0x12fc [0163.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20 [0168.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0168.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.214] GetLastError () returned 0x5 [0170.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0170.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27e00) returned 1 Thread: id = 3433 os_tid = 0x1300 [0163.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20 [0168.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0168.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.208] GetLastError () returned 0x5 [0170.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0170.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27d78) returned 1 Thread: id = 3434 os_tid = 0xb54 [0163.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20 [0170.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0170.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.471] GetLastError () returned 0x5 [0170.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0170.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27cf0) returned 1 Thread: id = 3435 os_tid = 0xb3c [0163.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c97c8 [0163.579] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0163.579] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0163.579] wcscat (in: _Dest=0x2c97c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*" [0163.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0163.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0163.581] wcscmp (_String1=".", _String2=".") returned 0 [0163.581] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.581] wcscmp (_String1="..", _String2=".") returned 1 [0163.581] wcscmp (_String1="..", _String2="..") returned 0 [0163.581] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0163.581] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0163.581] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0163.581] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0163.581] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0163.581] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0163.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec828 [0163.581] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0163.581] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0163.581] wcscat (in: _Dest=0x3dec828, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" [0163.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0163.850] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0163.850] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0163.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0163.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 [0163.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 3436 os_tid = 0x1314 [0163.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 0x20 [0163.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0163.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.582] GetLastError () returned 0x5 [0163.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0163.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 3437 os_tid = 0x1318 [0163.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur")) returned 0x20 [0163.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0163.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.584] GetLastError () returned 0x5 [0163.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0163.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d0) returned 1 Thread: id = 3438 os_tid = 0xe40 [0163.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur")) returned 0x20 [0163.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0163.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.585] GetLastError () returned 0x5 [0163.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0163.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 3439 os_tid = 0xe60 [0163.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur")) returned 0x20 [0163.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0163.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.587] GetLastError () returned 0x5 [0163.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0163.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 3440 os_tid = 0x1048 [0163.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur")) returned 0x20 [0163.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0163.588] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.589] GetLastError () returned 0x5 [0163.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0163.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1600) returned 1 Thread: id = 3441 os_tid = 0x8b0 [0163.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 0x20 [0163.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0163.596] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.601] GetLastError () returned 0x5 [0163.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0163.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 3442 os_tid = 0x1850 [0163.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 0x20 [0167.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0167.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.063] GetLastError () returned 0x5 [0167.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0167.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f458) returned 1 Thread: id = 3443 os_tid = 0xe94 [0163.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 0x20 [0167.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0167.061] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.061] GetLastError () returned 0x5 [0167.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0167.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 3444 os_tid = 0x8fc [0163.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 0x20 [0166.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0166.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.540] GetLastError () returned 0x5 [0166.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0166.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332e68) returned 1 Thread: id = 3445 os_tid = 0x18f8 [0163.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 0x20 [0167.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0167.059] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.059] GetLastError () returned 0x5 [0167.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0167.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 3446 os_tid = 0x18fc [0163.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 0x20 [0167.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0167.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.076] GetLastError () returned 0x5 [0167.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0167.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 3447 os_tid = 0x1900 [0163.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 0x20 [0163.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0163.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.609] GetLastError () returned 0x5 [0163.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0163.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c24a0) returned 1 Thread: id = 3448 os_tid = 0xb58 [0163.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 0x20 [0163.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0163.611] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.611] GetLastError () returned 0x5 [0163.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0163.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818cf0) returned 1 Thread: id = 3449 os_tid = 0x1904 [0163.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 0x20 [0163.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0163.612] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.613] GetLastError () returned 0x5 [0163.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0163.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2960) returned 1 Thread: id = 3450 os_tid = 0x1908 [0163.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 0x20 [0163.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0163.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.614] GetLastError () returned 0x5 [0163.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0163.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818538) returned 1 Thread: id = 3451 os_tid = 0x190c [0163.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam")) returned 0x20 [0164.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0164.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.448] GetLastError () returned 0x5 [0164.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0164.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b28) returned 1 Thread: id = 3452 os_tid = 0x1910 [0163.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav")) returned 0x20 [0163.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0163.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.628] GetLastError () returned 0x5 [0163.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0163.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 3453 os_tid = 0x1914 [0163.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav")) returned 0x20 [0167.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0167.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.385] GetLastError () returned 0x5 [0167.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0167.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 3454 os_tid = 0x1918 [0163.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav")) returned 0x20 [0167.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0167.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.643] GetLastError () returned 0x5 [0167.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0167.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 3455 os_tid = 0x1538 [0163.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav")) returned 0x20 [0167.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0167.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.646] GetLastError () returned 0x5 [0167.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0167.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 3456 os_tid = 0x191c [0163.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav")) returned 0x20 [0167.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0167.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.657] GetLastError () returned 0x5 [0167.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0167.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 3457 os_tid = 0x1920 [0163.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav")) returned 0x20 [0167.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0167.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.642] GetLastError () returned 0x5 [0167.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0167.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 Thread: id = 3458 os_tid = 0x1924 [0163.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 0x20 [0167.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0167.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.645] GetLastError () returned 0x5 [0167.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0167.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 3459 os_tid = 0x1928 [0163.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30125c8 [0163.636] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0163.636] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0163.636] wcscat (in: _Dest=0x30125c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0163.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0163.637] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0163.638] wcscmp (_String1=".", _String2=".") returned 0 [0163.638] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.639] wcscmp (_String1="..", _String2=".") returned 1 [0163.639] wcscmp (_String1="..", _String2="..") returned 0 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0163.639] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0163.639] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0163.639] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0163.639] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0163.639] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0163.639] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0163.639] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0163.639] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0163.639] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0163.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0163.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 [0163.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 3460 os_tid = 0x192c [0163.642] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 0x2020 [0165.430] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", dwFileAttributes=0x20) returned 1 [0169.707] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22a4 [0169.707] GetFileSizeEx (in: hFile=0x22a4, lpFileSize=0x95dfafc | out: lpFileSize=0x95dfafc*=34258) returned 1 [0169.707] SetFilePointerEx (in: hFile=0x22a4, liDistanceToMove=0x85ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.707] ReadFile (in: hFile=0x22a4, lpBuffer=0x95dfad8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95dfae8, lpOverlapped=0x0 | out: lpBuffer=0x95dfad8*, lpNumberOfBytesRead=0x95dfae8*=0x4, lpOverlapped=0x0) returned 1 [0169.710] SetFilePointerEx (in: hFile=0x22a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0169.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0169.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.710] NtQuerySystemTime (in: CurrentTime=0x95dfa70 | out: CurrentTime=0x95dfa70*=132482710782228000) returned 0x0 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x7fd91d15 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x75ee884d [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x61742ef8 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x589c6e44 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x3bd0cbd7 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x5704f0bb [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x5d6ec3f9 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x662ccfb7 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x3d6a0ea9 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x69fbe871 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x7704e8f5 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x288f24ae [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x22d63e1f [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x330f4c0c [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x525752a6 [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x7addb8dc [0169.710] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x70f31e97 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x4e81e77e [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x68ff6742 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x4b077ce9 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x72fdddba [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x507f747e [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x57390c77 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x7247ef26 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x7e1d6ca8 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x5d1bab65 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x544fab26 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x37f340e6 [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x52c53d7e [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x799c901c [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x187cfe3d [0169.711] RtlRandomEx (in: Seed=0x95dfa68 | out: Seed=0x95dfa68) returned 0x24d55dce [0169.720] SetFilePointerEx (in: hFile=0x22a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.720] ReadFile (in: hFile=0x22a4, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x95dfa70, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x95dfa70*=0x3c00, lpOverlapped=0x0) returned 1 [0169.723] SetFilePointerEx (in: hFile=0x22a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0169.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0169.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0169.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699a120 [0169.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0169.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0169.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.724] WriteFile (in: hFile=0x22a4, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x95dfa70, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0x95dfa70*=0x3c00, lpOverlapped=0x0) returned 1 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0169.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fb80 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0169.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f280 [0169.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0169.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55028 [0169.776] SetFilePointerEx (in: hFile=0x22a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.776] WriteFile (in: hFile=0x22a4, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x95dfaf0, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0x95dfaf0*=0x116, lpOverlapped=0x0) returned 1 [0169.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 [0169.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f280) returned 1 [0169.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0169.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fb80) returned 1 [0169.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0169.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0169.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0169.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0169.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0d170 [0169.789] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" [0169.789] wcscat (in: _Dest=0x3e0d170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.ac3a86" [0169.789] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.ac3a86", NtPathName=0x95dfa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff63a8 [0169.793] FlushFileBuffers (hFile=0x22a4) returned 1 [0169.803] CloseHandle (hObject=0x22a4) returned 1 [0169.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30e00 [0169.804] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0169.805] wcscat (in: _Dest=0x3e30e00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0169.805] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0x2020 [0169.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 [0169.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197a0) returned 1 Thread: id = 3461 os_tid = 0x1934 [0163.644] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 0x2020 [0168.071] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", dwFileAttributes=0x20) returned 1 [0169.709] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22a8 [0169.725] GetFileSizeEx (in: hFile=0x22a8, lpFileSize=0xb74f7cc | out: lpFileSize=0xb74f7cc*=138459) returned 1 [0169.725] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x21cd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.725] ReadFile (in: hFile=0x22a8, lpBuffer=0xb74f7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb74f7b8, lpOverlapped=0x0 | out: lpBuffer=0xb74f7a8*, lpNumberOfBytesRead=0xb74f7b8*=0x4, lpOverlapped=0x0) returned 1 [0169.727] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0169.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0169.728] NtQuerySystemTime (in: CurrentTime=0xb74f740 | out: CurrentTime=0xb74f740*=132482710782384000) returned 0x0 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x603fb4ba [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x137e7a3a [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x13fa2056 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x405dfce7 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x34d4a0e9 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x496062d9 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x76c0a91b [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x48c236ce [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x3a3a927b [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x5f487fa0 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x522c79e6 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x23da4549 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x60f8d82f [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x46085e55 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x681ca947 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x740df29c [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x41e4869a [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x71ac4e59 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x28d558a6 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x779ad2c [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x7aa7209c [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x39793757 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x643e897b [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x1209e384 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x31e1ebba [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x7964377c [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x62613666 [0169.728] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x490caf5a [0169.729] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x20ffc412 [0169.729] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x629ecae0 [0169.729] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x745127d3 [0169.729] RtlRandomEx (in: Seed=0xb74f738 | out: Seed=0xb74f738) returned 0x3c150071 [0169.736] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.736] ReadFile (in: hFile=0x22a8, lpBuffer=0x698b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.738] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0169.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0169.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0169.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0169.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0169.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.739] WriteFile (in: hFile=0x22a8, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0169.778] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.778] ReadFile (in: hFile=0x22a8, lpBuffer=0x698b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.780] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0169.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0169.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0169.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0169.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0169.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.781] WriteFile (in: hFile=0x22a8, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0169.784] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.784] ReadFile (in: hFile=0x22a8, lpBuffer=0x698b100, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.802] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4508 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0169.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0169.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0169.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0169.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4508) returned 1 [0169.802] WriteFile (in: hFile=0x22a8, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb74f740, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xb74f740*=0x3c00, lpOverlapped=0x0) returned 1 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0169.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0169.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199d8 [0169.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0169.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823c68) returned 1 [0169.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce3d8 [0169.807] SetFilePointerEx (in: hFile=0x22a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.808] WriteFile (in: hFile=0x22a8, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xb74f7c0, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0xb74f7c0*=0x154, lpOverlapped=0x0) returned 1 [0169.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0169.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0169.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0169.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0169.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0169.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0169.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0169.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0169.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d170 [0169.811] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" [0169.811] wcscat (in: _Dest=0x3e0d170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.ac3a86" [0169.811] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.ac3a86", NtPathName=0xb74f738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0169.814] FlushFileBuffers (hFile=0x22a8) returned 1 [0169.817] CloseHandle (hObject=0x22a8) returned 1 [0169.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68197a0 [0169.818] wcscpy (in: _Dest=0x68197a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0169.818] wcscat (in: _Dest=0x68197a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0169.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0x2020 [0169.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197a0) returned 1 [0169.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 3462 os_tid = 0x1938 [0163.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674bdb8 [0163.645] wcscpy (in: _Dest=0x674bdb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0163.645] wcscat (in: _Dest=0x674bdb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0163.645] wcscat (in: _Dest=0x674bdb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*" [0163.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0163.645] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0168.070] wcscmp (_String1=".", _String2=".") returned 0 [0168.070] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.070] wcscmp (_String1="..", _String2=".") returned 1 [0168.070] wcscmp (_String1="..", _String2="..") returned 0 [0168.070] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0168.070] wcscmp (_String1="AcroFnt10.lst", _String2=".") returned 1 [0168.070] wcscmp (_String1="AcroFnt10.lst", _String2="..") returned 1 [0168.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2240 [0168.070] wcscpy (in: _Dest=0x69c2240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0168.070] wcscat (in: _Dest=0x69c2240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0168.070] wcscat (in: _Dest=0x69c2240, _Source="AcroFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" [0172.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 0x2020 [0172.827] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", dwFileAttributes=0x20) returned 1 [0172.828] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19ac [0172.828] GetFileSizeEx (in: hFile=0x19ac, lpFileSize=0xb3ffc4c | out: lpFileSize=0xb3ffc4c*=52096) returned 1 [0172.828] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0xcb7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.828] ReadFile (in: hFile=0x19ac, lpBuffer=0xb3ffc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb3ffc38, lpOverlapped=0x0 | out: lpBuffer=0xb3ffc28*, lpNumberOfBytesRead=0xb3ffc38*=0x4, lpOverlapped=0x0) returned 1 [0173.333] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0173.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0173.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0173.333] NtQuerySystemTime (in: CurrentTime=0xb3ffbc0 | out: CurrentTime=0xb3ffbc0*=132482710818264000) returned 0x0 [0173.333] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x4a94f441 [0173.333] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0xb7372e4 [0173.333] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x6ea341fd [0173.333] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x418f907a [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x7f8d8e41 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x37fc0135 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x7cb11097 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x26c234f7 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x29bac683 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x61e9c32c [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x375e5ab3 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x7cb2b243 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x58a75c99 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x3e39ece [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x1a310f [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x6288029b [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x109f2b49 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x59884b68 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x287fa726 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x55875c7b [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x2038dbca [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0xcefa191 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x50304a7 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x5427f44c [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x7c7b7f11 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x5475cbfe [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x10b96f6a [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x39fed547 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x181a3829 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x6a22e381 [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0x648526fc [0173.334] RtlRandomEx (in: Seed=0xb3ffbb8 | out: Seed=0xb3ffbb8) returned 0xbdd259d [0173.345] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.345] ReadFile (in: hFile=0x19ac, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ffbc0, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xb3ffbc0*=0x3c00, lpOverlapped=0x0) returned 1 [0173.389] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fee10 [0173.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0858 [0173.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0173.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0173.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0173.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0173.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0173.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0173.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0173.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fee10) returned 1 [0173.390] WriteFile (in: hFile=0x19ac, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ffbc0, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xb3ffbc0*=0x3c00, lpOverlapped=0x0) returned 1 [0174.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0174.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0174.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0174.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0174.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0174.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0174.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0174.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0174.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0174.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b098) returned 1 [0174.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec2b0 [0174.402] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.402] WriteFile (in: hFile=0x19ac, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb3ffc40, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0xb3ffc40*=0x10c, lpOverlapped=0x0) returned 1 [0174.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0174.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0174.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0174.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0174.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0174.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5be40 [0174.405] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" [0174.405] wcscat (in: _Dest=0x3e5be40, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.ac3a86" [0174.405] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.ac3a86", NtPathName=0xb3ffbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2688 [0174.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 [0174.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a2018) returned 1 [0174.412] NtQueryInformationFile (in: FileHandle=0x19ac, IoStatusBlock=0xb3ffb90, FileInformation=0xb3ffb98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb3ffb90, FileInformation=0xb3ffb98) returned 0x0 [0174.412] NtSetInformationFile (FileHandle=0x19ac, IoStatusBlock=0xb3ffb90, FileInformation=0xb3ffb98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0174.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 [0174.413] FlushFileBuffers (hFile=0x19ac) returned 1 [0174.415] CloseHandle (hObject=0x19ac) returned 1 [0174.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0174.416] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0174.416] wcscat (in: _Dest=0x69c1188, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AC3A86-Readme.txt" [0174.416] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\ac3a86-readme.txt")) returned 0xffffffff [0174.417] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19ac [0174.417] WriteFile (in: hFile=0x19ac, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb3ffbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb3ffbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0174.419] CloseHandle (hObject=0x19ac) returned 1 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2240) returned 1 [0174.420] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0174.420] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bdb8) returned 1 [0174.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 Thread: id = 3463 os_tid = 0x193c [0163.646] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 0x2020 [0166.887] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", dwFileAttributes=0x20) returned 1 [0168.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb9c [0168.161] GetFileSizeEx (in: hFile=0xb9c, lpFileSize=0x450f824 | out: lpFileSize=0x450f824*=5120) returned 1 [0168.162] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.162] ReadFile (in: hFile=0xb9c, lpBuffer=0x450f800, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x450f810, lpOverlapped=0x0 | out: lpBuffer=0x450f800*, lpNumberOfBytesRead=0x450f810*=0x4, lpOverlapped=0x0) returned 1 [0168.165] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0168.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0168.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0168.165] NtQuerySystemTime (in: CurrentTime=0x450f798 | out: CurrentTime=0x450f798*=132482710766784000) returned 0x0 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x7ac6a9bb [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x5709cedc [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x41a1d845 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x30358f94 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x69eeeff9 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x6258253d [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x234f61a [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x6ed6f0d4 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x47add4ff [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x3dee3abf [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x79a6ab96 [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x5974dcc [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x344200af [0168.165] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x152a2c8a [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x645ddc87 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0xd3856e7 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x2388e1fc [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x7d27edff [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x26741bcd [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x47f27e49 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x1c3be755 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x35dc300c [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x6e363834 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x1484d3e3 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0xb8b3f1f [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x636ed5de [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x50f8c875 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x2240b184 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x46274ef2 [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x2d4c87e [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x38df6d8c [0168.166] RtlRandomEx (in: Seed=0x450f790 | out: Seed=0x450f790) returned 0x1726a390 [0168.176] ReadFile (in: hFile=0xb9c, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x450f78c, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x450f78c*=0x1400, lpOverlapped=0x0) returned 1 [0168.177] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.177] WriteFile (in: hFile=0xb9c, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x450f790, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0x450f790*=0x1400, lpOverlapped=0x0) returned 1 [0168.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0168.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0168.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0168.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0168.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0168.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0168.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0168.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19e38 [0168.181] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.181] WriteFile (in: hFile=0xb9c, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x450f818, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x450f818*=0x112, lpOverlapped=0x0) returned 1 [0168.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0168.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e00) returned 1 [0168.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0168.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e38) returned 1 [0168.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0168.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0168.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0168.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0168.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0148 [0168.183] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" [0168.183] wcscat (in: _Dest=0x69c0148, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.ac3a86" [0168.183] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.ac3a86", NtPathName=0x450f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7ef8 [0168.187] FlushFileBuffers (hFile=0xb9c) returned 1 [0169.245] CloseHandle (hObject=0xb9c) returned 1 [0169.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69c2370 [0169.294] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0169.294] wcscat (in: _Dest=0x69c2370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0169.294] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0xffffffff [0169.294] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b20 [0169.294] WriteFile (in: hFile=0x1b20, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x450f7ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x450f7ac*=0x8b9, lpOverlapped=0x0) returned 1 [0169.296] CloseHandle (hObject=0x1b20) returned 1 [0169.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 [0169.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 3464 os_tid = 0x1940 [0163.646] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 0x2020 [0167.745] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", dwFileAttributes=0x20) returned 1 [0169.741] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22b0 [0169.753] GetFileSizeEx (in: hFile=0x22b0, lpFileSize=0xb20fbbc | out: lpFileSize=0xb20fbbc*=77254) returned 1 [0169.753] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0x12dc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.753] ReadFile (in: hFile=0x22b0, lpBuffer=0xb20fb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb20fba8, lpOverlapped=0x0 | out: lpBuffer=0xb20fb98*, lpNumberOfBytesRead=0xb20fba8*=0x4, lpOverlapped=0x0) returned 1 [0169.755] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0169.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0169.755] NtQuerySystemTime (in: CurrentTime=0xb20fb30 | out: CurrentTime=0xb20fb30*=132482710782696000) returned 0x0 [0169.755] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x1f8a0807 [0169.755] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x3b8cd514 [0169.755] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x1b5d9f26 [0169.755] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x4890f106 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x5e3db1e2 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x5e132dbf [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x47361f76 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x54b2799a [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x50d964d7 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x62a6c848 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x2e21acdc [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0xf7e6ebc [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x201d6e80 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x55ed9e0e [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x7030521a [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x43b42b17 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x76f418fa [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x6624c94 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x49df84a2 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x45003eef [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x126fd0d0 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0xdcb0cfa [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x72c6f9d0 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x30068dc3 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x6e03923c [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x518d83c9 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x745bb18d [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x3b14991e [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x56f8719e [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x50a0c057 [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x535bf36e [0169.756] RtlRandomEx (in: Seed=0xb20fb28 | out: Seed=0xb20fb28) returned 0x28aa7fe6 [0169.765] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.765] ReadFile (in: hFile=0x22b0, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.765] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0169.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0169.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0169.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0169.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0169.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.766] WriteFile (in: hFile=0x22b0, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0169.783] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.783] ReadFile (in: hFile=0x22b0, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.800] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4508 [0169.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0169.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0169.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0169.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0169.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0169.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0169.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4508) returned 1 [0169.801] WriteFile (in: hFile=0x22b0, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0169.806] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.806] ReadFile (in: hFile=0x22b0, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.808] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823c68 [0169.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0169.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0169.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0169.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0169.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0169.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823c68) returned 1 [0169.809] WriteFile (in: hFile=0x22b0, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb20fb30, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xb20fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0169.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bde8 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0169.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0169.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823c68) returned 1 [0169.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x2fce88 [0169.816] SetFilePointerEx (in: hFile=0x22b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.816] WriteFile (in: hFile=0x22b0, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xb20fbb0, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0xb20fbb0*=0x14c, lpOverlapped=0x0) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0169.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0169.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x68197a0 [0169.820] wcscpy (in: _Dest=0x68197a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" [0169.820] wcscat (in: _Dest=0x68197a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.ac3a86" [0169.820] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.ac3a86", NtPathName=0xb20fb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2a40 [0169.823] FlushFileBuffers (hFile=0x22b0) returned 1 [0169.825] CloseHandle (hObject=0x22b0) returned 1 [0169.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x68197a0 [0169.825] wcscpy (in: _Dest=0x68197a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0169.825] wcscat (in: _Dest=0x68197a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" [0169.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\ac3a86-readme.txt")) returned 0x2020 [0169.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197a0) returned 1 [0169.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 3465 os_tid = 0x1944 [0163.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e648 [0163.646] wcscpy (in: _Dest=0x674e648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0163.646] wcscat (in: _Dest=0x674e648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0163.646] wcscat (in: _Dest=0x674e648, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*" [0163.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0163.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0165.430] wcscmp (_String1=".", _String2=".") returned 0 [0165.430] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.979] wcscmp (_String1="..", _String2=".") returned 1 [0167.979] wcscmp (_String1="..", _String2="..") returned 0 [0167.979] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0167.979] wcscmp (_String1="AMERITECH.NET.XML", _String2=".") returned 1 [0167.979] wcscmp (_String1="AMERITECH.NET.XML", _String2="..") returned 1 [0167.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3120 [0167.980] wcscpy (in: _Dest=0x3ea3120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0167.980] wcscat (in: _Dest=0x3ea3120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0167.980] wcscat (in: _Dest=0x3ea3120, _Source="AMERITECH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" [0168.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0168.766] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0168.766] wcscmp (_String1="BTINTERNET.NET.XML", _String2=".") returned 1 [0168.766] wcscmp (_String1="BTINTERNET.NET.XML", _String2="..") returned 1 [0168.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea26d0 [0168.766] wcscpy (in: _Dest=0x3ea26d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.767] wcscat (in: _Dest=0x3ea26d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.767] wcscat (in: _Dest=0x3ea26d0, _Source="BTINTERNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" [0168.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea26d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0168.768] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0168.768] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2=".") returned 1 [0168.768] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2="..") returned 1 [0168.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2e60 [0168.768] wcscpy (in: _Dest=0x3ea2e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.768] wcscat (in: _Dest=0x3ea2e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.768] wcscat (in: _Dest=0x3ea2e60, _Source="BTOPENWORLD.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" [0168.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0168.770] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x77d038d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0168.770] wcscmp (_String1="FLASH.NET.XML", _String2=".") returned 1 [0168.770] wcscmp (_String1="FLASH.NET.XML", _String2="..") returned 1 [0168.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d730 [0168.770] wcscpy (in: _Dest=0x3e5d730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.770] wcscat (in: _Dest=0x3e5d730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.770] wcscat (in: _Dest=0x3e5d730, _Source="FLASH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" [0168.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0168.771] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0168.771] wcscmp (_String1="NL.ROGERS.COM.XML", _String2=".") returned 1 [0168.772] wcscmp (_String1="NL.ROGERS.COM.XML", _String2="..") returned 1 [0168.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2150 [0168.772] wcscpy (in: _Dest=0x3ea2150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.772] wcscat (in: _Dest=0x3ea2150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.772] wcscat (in: _Dest=0x3ea2150, _Source="NL.ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" [0168.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0168.773] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0168.773] wcscmp (_String1="NVBELL.NET.XML", _String2=".") returned 1 [0168.773] wcscmp (_String1="NVBELL.NET.XML", _String2="..") returned 1 [0168.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d0a0 [0168.773] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.773] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.773] wcscat (in: _Dest=0x3e5d0a0, _Source="NVBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" [0168.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0168.775] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0168.775] wcscmp (_String1="PACBELL.NET.XML", _String2=".") returned 1 [0168.775] wcscmp (_String1="PACBELL.NET.XML", _String2="..") returned 1 [0168.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d298 [0168.775] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.775] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.775] wcscat (in: _Dest=0x3e5d298, _Source="PACBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" [0168.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0168.776] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0168.776] wcscmp (_String1="PRODIGY.NET.XML", _String2=".") returned 1 [0168.776] wcscmp (_String1="PRODIGY.NET.XML", _String2="..") returned 1 [0168.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cab8 [0168.777] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.777] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.777] wcscat (in: _Dest=0x3e5cab8, _Source="PRODIGY.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" [0168.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0168.778] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0168.778] wcscmp (_String1="ROGERS.COM.XML", _String2=".") returned 1 [0168.778] wcscmp (_String1="ROGERS.COM.XML", _String2="..") returned 1 [0168.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d9d0 [0168.778] wcscpy (in: _Dest=0x3e5d9d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.778] wcscat (in: _Dest=0x3e5d9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.778] wcscat (in: _Dest=0x3e5d9d0, _Source="ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" [0168.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0168.780] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0168.780] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2=".") returned 1 [0168.780] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2="..") returned 1 [0168.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2d00 [0168.780] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.780] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.780] wcscat (in: _Dest=0x3ea2d00, _Source="SBCGLOBAL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" [0168.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0168.781] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0168.781] wcscmp (_String1="SNET.NET.XML", _String2=".") returned 1 [0168.781] wcscmp (_String1="SNET.NET.XML", _String2="..") returned 1 [0168.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0dc10 [0168.781] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.781] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.782] wcscat (in: _Dest=0x3e0dc10, _Source="SNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" [0168.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0168.783] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0168.783] wcscmp (_String1="SWBELL.NET.XML", _String2=".") returned 1 [0168.783] wcscmp (_String1="SWBELL.NET.XML", _String2="..") returned 1 [0168.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d538 [0168.783] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.783] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.783] wcscat (in: _Dest=0x3e5d538, _Source="SWBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" [0168.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0168.784] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0168.784] wcscmp (_String1="TALK21.COM.XML", _String2=".") returned 1 [0168.784] wcscmp (_String1="TALK21.COM.XML", _String2="..") returned 1 [0168.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cb60 [0168.784] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.784] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.785] wcscat (in: _Dest=0x3e5cb60, _Source="TALK21.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" [0168.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0168.786] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0168.786] wcscmp (_String1="WANS.NET.XML", _String2=".") returned 1 [0168.786] wcscmp (_String1="WANS.NET.XML", _String2="..") returned 1 [0168.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0f010 [0168.786] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.786] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.787] wcscat (in: _Dest=0x3e0f010, _Source="WANS.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" [0168.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0168.788] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0168.788] wcscmp (_String1="YAHOO.CA.XML", _String2=".") returned 1 [0168.788] wcscmp (_String1="YAHOO.CA.XML", _String2="..") returned 1 [0168.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0eed0 [0168.788] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.788] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.788] wcscat (in: _Dest=0x3e0eed0, _Source="YAHOO.CA.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" [0168.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0168.790] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0168.790] wcscmp (_String1="YAHOO.CO.ID.XML", _String2=".") returned 1 [0168.790] wcscmp (_String1="YAHOO.CO.ID.XML", _String2="..") returned 1 [0168.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cd58 [0168.790] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.790] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.790] wcscat (in: _Dest=0x3e5cd58, _Source="YAHOO.CO.ID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" [0168.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0168.791] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0168.791] wcscmp (_String1="YAHOO.CO.IN.XML", _String2=".") returned 1 [0168.791] wcscmp (_String1="YAHOO.CO.IN.XML", _String2="..") returned 1 [0168.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ce00 [0168.791] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.791] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.791] wcscat (in: _Dest=0x3e5ce00, _Source="YAHOO.CO.IN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" [0168.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0168.793] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0168.793] wcscmp (_String1="YAHOO.CO.JP.XML", _String2=".") returned 1 [0168.793] wcscmp (_String1="YAHOO.CO.JP.XML", _String2="..") returned 1 [0168.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ccb0 [0168.793] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.793] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.793] wcscat (in: _Dest=0x3e5ccb0, _Source="YAHOO.CO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" [0168.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0168.794] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1 [0168.794] wcscmp (_String1="YAHOO.CO.KR.XML", _String2=".") returned 1 [0168.795] wcscmp (_String1="YAHOO.CO.KR.XML", _String2="..") returned 1 [0168.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ca10 [0168.795] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.795] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.795] wcscat (in: _Dest=0x3e5ca10, _Source="YAHOO.CO.KR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" [0168.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0168.796] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1 [0168.796] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2=".") returned 1 [0168.797] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2="..") returned 1 [0168.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d1f0 [0168.797] wcscpy (in: _Dest=0x3e5d1f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.797] wcscat (in: _Dest=0x3e5d1f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.797] wcscat (in: _Dest=0x3e5d1f0, _Source="YAHOO.CO.NZ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" [0168.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0168.798] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0168.798] wcscmp (_String1="YAHOO.CO.TH.XML", _String2=".") returned 1 [0168.798] wcscmp (_String1="YAHOO.CO.TH.XML", _String2="..") returned 1 [0168.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d490 [0168.799] wcscpy (in: _Dest=0x3e5d490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.799] wcscat (in: _Dest=0x3e5d490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.799] wcscat (in: _Dest=0x3e5d490, _Source="YAHOO.CO.TH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" [0168.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0168.800] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1 [0168.800] wcscmp (_String1="YAHOO.CO.UK.XML", _String2=".") returned 1 [0168.800] wcscmp (_String1="YAHOO.CO.UK.XML", _String2="..") returned 1 [0168.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cc08 [0168.800] wcscpy (in: _Dest=0x3e5cc08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.800] wcscat (in: _Dest=0x3e5cc08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.800] wcscat (in: _Dest=0x3e5cc08, _Source="YAHOO.CO.UK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" [0168.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0168.802] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1 [0168.802] wcscmp (_String1="YAHOO.COM.AR.XML", _String2=".") returned 1 [0168.802] wcscmp (_String1="YAHOO.COM.AR.XML", _String2="..") returned 1 [0168.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5cf50 [0168.802] wcscpy (in: _Dest=0x3e5cf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.802] wcscat (in: _Dest=0x3e5cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.802] wcscat (in: _Dest=0x3e5cf50, _Source="YAHOO.COM.AR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" [0168.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0168.803] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0168.803] wcscmp (_String1="YAHOO.COM.AU.XML", _String2=".") returned 1 [0168.804] wcscmp (_String1="YAHOO.COM.AU.XML", _String2="..") returned 1 [0168.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d5e0 [0168.804] wcscpy (in: _Dest=0x3e5d5e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0168.804] wcscat (in: _Dest=0x3e5d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0168.804] wcscat (in: _Dest=0x3e5d5e0, _Source="YAHOO.COM.AU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" [0168.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0169.105] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0169.105] wcscmp (_String1="YAHOO.COM.BR.XML", _String2=".") returned 1 [0169.105] wcscmp (_String1="YAHOO.COM.BR.XML", _String2="..") returned 1 [0169.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d0a0 [0169.105] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0169.105] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0169.105] wcscat (in: _Dest=0x3e5d0a0, _Source="YAHOO.COM.BR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" [0172.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml")) returned 0x20 [0172.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0172.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.833] GetLastError () returned 0x5 [0172.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0172.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 [0172.833] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0172.833] wcscmp (_String1="YAHOO.COM.CN.XML", _String2=".") returned 1 [0172.833] wcscmp (_String1="YAHOO.COM.CN.XML", _String2="..") returned 1 [0172.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d0a0 [0172.834] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0172.834] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0172.834] wcscat (in: _Dest=0x3e5d0a0, _Source="YAHOO.COM.CN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" [0172.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml")) returned 0x20 [0173.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x20) returned 0 [0173.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.709] GetLastError () returned 0x5 [0173.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x20) returned 0 [0173.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 [0173.709] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0173.709] wcscmp (_String1="YAHOO.COM.HK.XML", _String2=".") returned 1 [0173.709] wcscmp (_String1="YAHOO.COM.HK.XML", _String2="..") returned 1 [0173.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d0a0 [0173.709] wcscpy (in: _Dest=0x3e5d0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0173.709] wcscat (in: _Dest=0x3e5d0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0173.710] wcscat (in: _Dest=0x3e5d0a0, _Source="YAHOO.COM.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" [0180.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0180.644] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0180.644] wcscmp (_String1="YAHOO.COM.MX.XML", _String2=".") returned 1 [0180.644] wcscmp (_String1="YAHOO.COM.MX.XML", _String2="..") returned 1 [0180.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697dee0 [0180.644] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.644] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.644] wcscat (in: _Dest=0x697dee0, _Source="YAHOO.COM.MX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" [0180.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0180.645] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0180.645] wcscmp (_String1="YAHOO.COM.MY.XML", _String2=".") returned 1 [0180.645] wcscmp (_String1="YAHOO.COM.MY.XML", _String2="..") returned 1 [0180.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e570 [0180.645] wcscpy (in: _Dest=0x697e570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.645] wcscat (in: _Dest=0x697e570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.645] wcscat (in: _Dest=0x697e570, _Source="YAHOO.COM.MY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" [0180.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0180.646] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0180.646] wcscmp (_String1="YAHOO.COM.PH.XML", _String2=".") returned 1 [0180.646] wcscmp (_String1="YAHOO.COM.PH.XML", _String2="..") returned 1 [0180.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e618 [0180.646] wcscpy (in: _Dest=0x697e618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.646] wcscat (in: _Dest=0x697e618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.646] wcscat (in: _Dest=0x697e618, _Source="YAHOO.COM.PH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" [0180.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0180.647] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0180.647] wcscmp (_String1="YAHOO.COM.SG.XML", _String2=".") returned 1 [0180.647] wcscmp (_String1="YAHOO.COM.SG.XML", _String2="..") returned 1 [0180.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e960 [0180.647] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.647] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.647] wcscat (in: _Dest=0x697e960, _Source="YAHOO.COM.SG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" [0180.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0180.649] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0180.649] wcscmp (_String1="YAHOO.COM.TW.XML", _String2=".") returned 1 [0180.649] wcscmp (_String1="YAHOO.COM.TW.XML", _String2="..") returned 1 [0180.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e030 [0180.649] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.649] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.649] wcscat (in: _Dest=0x697e030, _Source="YAHOO.COM.TW.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" [0180.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0180.650] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0180.650] wcscmp (_String1="YAHOO.COM.VN.XML", _String2=".") returned 1 [0180.650] wcscmp (_String1="YAHOO.COM.VN.XML", _String2="..") returned 1 [0180.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697df88 [0180.650] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.650] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.650] wcscat (in: _Dest=0x697df88, _Source="YAHOO.COM.VN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" [0180.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0180.651] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0180.651] wcscmp (_String1="YAHOO.COM.XML", _String2=".") returned 1 [0180.651] wcscmp (_String1="YAHOO.COM.XML", _String2="..") returned 1 [0180.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e0d8 [0180.651] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.651] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.651] wcscat (in: _Dest=0x697e0d8, _Source="YAHOO.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" [0180.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0180.652] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0180.652] wcscmp (_String1="YAHOO.DE.XML", _String2=".") returned 1 [0180.652] wcscmp (_String1="YAHOO.DE.XML", _String2="..") returned 1 [0180.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c14a8 [0180.652] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.653] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.653] wcscat (in: _Dest=0x69c14a8, _Source="YAHOO.DE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" [0180.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0180.653] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0180.654] wcscmp (_String1="YAHOO.ES.XML", _String2=".") returned 1 [0180.654] wcscmp (_String1="YAHOO.ES.XML", _String2="..") returned 1 [0180.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c05a8 [0180.654] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.654] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.654] wcscat (in: _Dest=0x69c05a8, _Source="YAHOO.ES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" [0180.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0180.655] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0180.655] wcscmp (_String1="YAHOO.FR.XML", _String2=".") returned 1 [0180.655] wcscmp (_String1="YAHOO.FR.XML", _String2="..") returned 1 [0180.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bff68 [0180.655] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.655] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.655] wcscat (in: _Dest=0x69bff68, _Source="YAHOO.FR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" [0180.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0180.656] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0180.656] wcscmp (_String1="YAHOO.HK.XML", _String2=".") returned 1 [0180.656] wcscmp (_String1="YAHOO.HK.XML", _String2="..") returned 1 [0180.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0e68 [0180.656] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.656] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.656] wcscat (in: _Dest=0x69c0e68, _Source="YAHOO.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" [0180.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0180.657] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0180.657] wcscmp (_String1="YAHOO.IE.XML", _String2=".") returned 1 [0180.657] wcscmp (_String1="YAHOO.IE.XML", _String2="..") returned 1 [0180.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0c88 [0180.657] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.657] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.657] wcscat (in: _Dest=0x69c0c88, _Source="YAHOO.IE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" [0180.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0180.659] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0180.659] wcscmp (_String1="YAHOO.IT.XML", _String2=".") returned 1 [0180.659] wcscmp (_String1="YAHOO.IT.XML", _String2="..") returned 1 [0180.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c03c8 [0180.659] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.659] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.659] wcscat (in: _Dest=0x69c03c8, _Source="YAHOO.IT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" [0180.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0180.660] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0180.660] wcscmp (_String1="YAHOO.JP.XML", _String2=".") returned 1 [0180.660] wcscmp (_String1="YAHOO.JP.XML", _String2="..") returned 1 [0180.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0148 [0180.660] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.660] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.660] wcscat (in: _Dest=0x69c0148, _Source="YAHOO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" [0180.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0180.661] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0180.661] wcscmp (_String1="YAHOO.NO.XML", _String2=".") returned 1 [0180.661] wcscmp (_String1="YAHOO.NO.XML", _String2="..") returned 1 [0180.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0968 [0180.661] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.661] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.661] wcscat (in: _Dest=0x69c0968, _Source="YAHOO.NO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" [0180.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0180.662] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0180.662] wcscmp (_String1="YAHOO.PL.XML", _String2=".") returned 1 [0180.662] wcscmp (_String1="YAHOO.PL.XML", _String2="..") returned 1 [0180.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0b48 [0180.662] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.662] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.662] wcscat (in: _Dest=0x69c0b48, _Source="YAHOO.PL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" [0180.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0180.663] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0180.663] wcscmp (_String1="YAHOO.SE.XML", _String2=".") returned 1 [0180.663] wcscmp (_String1="YAHOO.SE.XML", _String2="..") returned 1 [0180.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfe28 [0180.664] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0180.664] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0180.664] wcscat (in: _Dest=0x69bfe28, _Source="YAHOO.SE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" [0180.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0180.665] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0 [0180.665] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0180.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0180.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e648) returned 1 [0180.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 3466 os_tid = 0x1948 [0163.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif")) returned 0x20 [0167.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0167.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.016] GetLastError () returned 0x5 [0167.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0167.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818960) returned 1 Thread: id = 3467 os_tid = 0x194c [0163.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif")) returned 0x20 [0167.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0167.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.008] GetLastError () returned 0x5 [0167.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0167.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819708) returned 1 Thread: id = 3468 os_tid = 0x1950 [0163.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif")) returned 0x20 [0167.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0167.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.017] GetLastError () returned 0x5 [0167.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0167.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818830) returned 1 Thread: id = 3469 os_tid = 0x1954 [0163.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif")) returned 0x20 [0166.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0166.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.905] GetLastError () returned 0x5 [0166.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0166.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a90) returned 1 Thread: id = 3470 os_tid = 0x1958 [0163.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif")) returned 0x20 [0166.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0166.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.972] GetLastError () returned 0x5 [0166.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0166.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819670) returned 1 Thread: id = 3471 os_tid = 0xbc0 [0163.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif")) returned 0x20 [0166.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0166.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.974] GetLastError () returned 0x5 [0166.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0166.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68195d8) returned 1 Thread: id = 3472 os_tid = 0x195c [0163.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif")) returned 0x20 [0166.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0166.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.976] GetLastError () returned 0x5 [0166.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0166.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819540) returned 1 Thread: id = 3473 os_tid = 0x1960 [0163.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif")) returned 0x20 [0166.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0166.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.977] GetLastError () returned 0x5 [0166.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0166.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817e18) returned 1 Thread: id = 3474 os_tid = 0x1964 [0163.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif")) returned 0x20 [0166.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0166.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.983] GetLastError () returned 0x5 [0166.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0166.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817f48) returned 1 Thread: id = 3475 os_tid = 0x1650 [0163.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif")) returned 0x20 [0166.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0166.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.988] GetLastError () returned 0x5 [0166.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0166.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 Thread: id = 3476 os_tid = 0x1548 [0163.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif")) returned 0x20 [0166.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0166.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.994] GetLastError () returned 0x5 [0166.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0166.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817d80) returned 1 Thread: id = 3477 os_tid = 0x1558 [0163.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif")) returned 0x20 [0166.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0166.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.996] GetLastError () returned 0x5 [0166.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0166.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817eb0) returned 1 Thread: id = 3478 os_tid = 0x1968 [0163.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif")) returned 0x20 [0166.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0166.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.998] GetLastError () returned 0x5 [0166.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0166.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817fe0) returned 1 Thread: id = 3479 os_tid = 0x196c [0163.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif")) returned 0x20 [0167.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0167.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.000] GetLastError () returned 0x5 [0167.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0167.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819a98) returned 1 Thread: id = 3480 os_tid = 0x1970 [0163.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif")) returned 0x20 [0167.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0167.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.002] GetLastError () returned 0x5 [0167.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0167.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819b30) returned 1 Thread: id = 3481 os_tid = 0x1974 [0163.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif")) returned 0x20 [0167.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0167.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.005] GetLastError () returned 0x5 [0167.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0167.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819bc8) returned 1 Thread: id = 3482 os_tid = 0x1978 [0163.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif")) returned 0x20 [0167.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0167.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.006] GetLastError () returned 0x5 [0167.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0167.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 3483 os_tid = 0x197c [0163.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif")) returned 0x20 [0167.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0167.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.018] GetLastError () returned 0x5 [0167.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0167.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 3484 os_tid = 0x1980 [0163.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif")) returned 0x20 [0167.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0167.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.019] GetLastError () returned 0x5 [0167.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0167.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959708) returned 1 Thread: id = 3485 os_tid = 0x1984 [0163.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif")) returned 0x20 [0167.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0167.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.021] GetLastError () returned 0x5 [0167.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0167.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959670) returned 1 Thread: id = 3486 os_tid = 0x1988 [0163.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif")) returned 0x20 [0167.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0167.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.023] GetLastError () returned 0x5 [0167.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0167.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69597a0) returned 1 Thread: id = 3487 os_tid = 0x198c [0163.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif")) returned 0x20 [0167.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0167.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.045] GetLastError () returned 0x5 [0167.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0167.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 Thread: id = 3488 os_tid = 0x1990 [0163.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif")) returned 0x20 [0167.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0167.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.047] GetLastError () returned 0x5 [0167.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0167.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 3489 os_tid = 0x1994 [0163.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif")) returned 0x20 [0167.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0167.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.052] GetLastError () returned 0x5 [0167.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0167.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 Thread: id = 3490 os_tid = 0x1998 [0163.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif")) returned 0x20 [0167.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0167.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.054] GetLastError () returned 0x5 [0167.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0167.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598d0) returned 1 Thread: id = 3491 os_tid = 0x199c [0163.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif")) returned 0x20 [0166.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0166.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.510] GetLastError () returned 0x5 [0166.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0166.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959968) returned 1 Thread: id = 3492 os_tid = 0x19a0 [0163.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif")) returned 0x20 [0166.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0166.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.970] GetLastError () returned 0x5 [0166.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0166.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a00) returned 1 Thread: id = 3493 os_tid = 0x19a4 [0163.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif")) returned 0x20 [0167.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0167.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.012] GetLastError () returned 0x5 [0167.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0167.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a98) returned 1 Thread: id = 3494 os_tid = 0x19a8 [0163.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif")) returned 0x20 [0167.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0167.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.014] GetLastError () returned 0x5 [0167.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0167.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959b30) returned 1 Thread: id = 3495 os_tid = 0x19ac [0164.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif")) returned 0x20 [0167.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0167.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.010] GetLastError () returned 0x5 [0167.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0167.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959bc8) returned 1 Thread: id = 3496 os_tid = 0x19b0 [0164.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 0x20 [0166.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0166.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.144] GetLastError () returned 0x5 [0166.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0166.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aed8) returned 1 Thread: id = 3497 os_tid = 0x19b4 [0164.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd")) returned 0x20 [0166.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0166.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.146] GetLastError () returned 0x5 [0166.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0166.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818538) returned 1 Thread: id = 3498 os_tid = 0x19b8 [0164.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini")) returned 0x20 [0166.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0166.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.160] GetLastError () returned 0x5 [0166.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0166.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818cf0) returned 1 Thread: id = 3499 os_tid = 0x19bc [0164.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd")) returned 0x20 [0165.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0165.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.432] GetLastError () returned 0x5 [0165.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0165.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 3500 os_tid = 0x19c0 [0164.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd")) returned 0x20 [0165.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0165.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.434] GetLastError () returned 0x5 [0165.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0165.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 3501 os_tid = 0x19c4 [0164.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav")) returned 0x20 [0164.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0164.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.492] GetLastError () returned 0x5 [0164.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0164.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 Thread: id = 3502 os_tid = 0x19c8 [0164.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav")) returned 0x20 [0166.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0166.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.259] GetLastError () returned 0x5 [0166.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0166.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 3503 os_tid = 0x19cc [0164.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav")) returned 0x20 [0166.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0166.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.261] GetLastError () returned 0x5 [0166.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0166.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 3504 os_tid = 0x19d0 [0164.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav")) returned 0x20 [0166.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0166.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.263] GetLastError () returned 0x5 [0166.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0166.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 3505 os_tid = 0x1540 [0164.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav")) returned 0x20 [0166.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0166.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.257] GetLastError () returned 0x5 [0166.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0166.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 3506 os_tid = 0x19d4 [0164.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav")) returned 0x20 [0166.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0166.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.265] GetLastError () returned 0x5 [0166.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0166.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 Thread: id = 3507 os_tid = 0x19d8 [0164.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav")) returned 0x20 [0166.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0166.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.277] GetLastError () returned 0x5 [0166.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0166.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1548) returned 1 Thread: id = 3508 os_tid = 0x2dc [0164.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml")) returned 0x20 [0167.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0167.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.570] GetLastError () returned 0x5 [0167.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0167.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1048) returned 1 Thread: id = 3509 os_tid = 0x19dc [0164.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak")) returned 0x20 [0164.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0164.515] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.523] GetLastError () returned 0x5 [0164.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0164.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68198d0) returned 1 Thread: id = 3510 os_tid = 0x230 [0164.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak")) returned 0x20 [0166.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0166.173] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.173] GetLastError () returned 0x5 [0166.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0166.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818798) returned 1 Thread: id = 3511 os_tid = 0x1e4 [0164.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak")) returned 0x20 [0166.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0166.284] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.284] GetLastError () returned 0x5 [0166.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0166.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818700) returned 1 Thread: id = 3512 os_tid = 0x480 [0164.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak")) returned 0x20 [0166.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0166.287] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.287] GetLastError () returned 0x5 [0166.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0166.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818668) returned 1 Thread: id = 3513 os_tid = 0x19e0 [0164.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak")) returned 0x20 [0166.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0166.289] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.289] GetLastError () returned 0x5 [0166.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0166.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818bc0) returned 1 Thread: id = 3514 os_tid = 0xefc [0164.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak")) returned 0x20 [0166.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0166.290] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.291] GetLastError () returned 0x5 [0166.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0166.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68188c8) returned 1 Thread: id = 3515 os_tid = 0x19e4 [0164.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak")) returned 0x20 [0166.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0166.292] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.292] GetLastError () returned 0x5 [0166.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0166.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 3516 os_tid = 0x19e8 [0164.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak")) returned 0x20 [0166.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0166.294] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.294] GetLastError () returned 0x5 [0166.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0166.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 3517 os_tid = 0x14c [0164.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak")) returned 0x20 [0166.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0166.295] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.296] GetLastError () returned 0x5 [0166.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0166.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 3518 os_tid = 0x19ec [0164.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak")) returned 0x20 [0166.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0166.297] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.297] GetLastError () returned 0x5 [0166.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0166.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 3519 os_tid = 0x19f0 [0164.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak")) returned 0x20 [0166.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0166.299] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.299] GetLastError () returned 0x5 [0166.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0166.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 3520 os_tid = 0x19f4 [0164.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak")) returned 0x20 [0166.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0166.301] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.301] GetLastError () returned 0x5 [0166.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0166.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 Thread: id = 3521 os_tid = 0x19f8 [0164.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak")) returned 0x20 [0166.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0166.302] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.302] GetLastError () returned 0x5 [0166.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0166.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 3522 os_tid = 0xa40 [0164.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak")) returned 0x20 [0166.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0166.304] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.304] GetLastError () returned 0x5 [0166.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0166.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 3523 os_tid = 0x19fc [0164.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak")) returned 0x20 [0166.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0166.306] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.306] GetLastError () returned 0x5 [0166.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0166.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 3524 os_tid = 0x1a00 [0164.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak")) returned 0x20 [0166.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0166.308] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.308] GetLastError () returned 0x5 [0166.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0166.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 3525 os_tid = 0x1a04 [0164.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak")) returned 0x20 [0166.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0166.309] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.310] GetLastError () returned 0x5 [0166.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0166.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 3526 os_tid = 0x1a08 [0164.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak")) returned 0x20 [0166.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0166.311] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.311] GetLastError () returned 0x5 [0166.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0166.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 3527 os_tid = 0x1a0c [0164.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak")) returned 0x20 [0166.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0166.313] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.313] GetLastError () returned 0x5 [0166.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0166.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 3528 os_tid = 0x1a10 [0164.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak")) returned 0x20 [0166.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0166.314] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.314] GetLastError () returned 0x5 [0166.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0166.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 3529 os_tid = 0x10e0 [0164.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak")) returned 0x20 [0166.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0166.315] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.315] GetLastError () returned 0x5 [0166.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0166.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 3530 os_tid = 0x1a14 [0164.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak")) returned 0x20 [0166.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0166.317] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.317] GetLastError () returned 0x5 [0166.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0166.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 3531 os_tid = 0x1a18 [0164.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak")) returned 0x20 [0166.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0166.318] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.318] GetLastError () returned 0x5 [0166.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0166.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 3532 os_tid = 0x1a1c [0164.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak")) returned 0x20 [0166.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0166.319] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.319] GetLastError () returned 0x5 [0166.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0166.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 3533 os_tid = 0x1a20 [0164.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak")) returned 0x20 [0166.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0166.321] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.321] GetLastError () returned 0x5 [0166.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0166.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 3534 os_tid = 0x1a24 [0164.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak")) returned 0x20 [0166.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0166.326] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.332] GetLastError () returned 0x5 [0166.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0166.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 Thread: id = 3535 os_tid = 0x1a28 [0164.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak")) returned 0x20 [0166.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0166.282] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.283] GetLastError () returned 0x5 [0166.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0166.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 Thread: id = 3536 os_tid = 0xa60 [0164.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr")) returned 0x20 [0164.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0164.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.556] GetLastError () returned 0x5 [0164.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0164.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 3537 os_tid = 0x1a2c [0164.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr")) returned 0x20 [0164.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0164.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.559] GetLastError () returned 0x5 [0164.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0164.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 3538 os_tid = 0x51c [0164.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr")) returned 0x20 [0164.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0164.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.561] GetLastError () returned 0x5 [0164.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0164.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 3539 os_tid = 0xd90 [0164.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr")) returned 0x20 [0164.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0164.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.563] GetLastError () returned 0x5 [0164.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0164.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1600) returned 1 Thread: id = 3540 os_tid = 0x88c [0164.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc")) returned 0x20 [0164.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0164.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.581] GetLastError () returned 0x5 [0164.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0164.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 3541 os_tid = 0x910 [0164.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc")) returned 0x20 [0164.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0164.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.603] GetLastError () returned 0x5 [0164.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0164.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 3542 os_tid = 0x920 [0164.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4")) returned 0x20 [0164.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0164.618] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.625] GetLastError () returned 0x5 [0164.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0164.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 3543 os_tid = 0x950 [0164.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt")) returned 0x20 [0164.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0164.639] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.647] GetLastError () returned 0x5 [0164.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0164.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 Thread: id = 3544 os_tid = 0xdf8 [0164.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6")) returned 0x20 [0164.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0164.660] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.668] GetLastError () returned 0x5 [0164.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0164.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 3545 os_tid = 0x960 [0164.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt")) returned 0x20 [0166.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0166.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.362] GetLastError () returned 0x5 [0166.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0166.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 3546 os_tid = 0xde8 [0164.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5")) returned 0x20 [0166.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0166.364] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.364] GetLastError () returned 0x5 [0166.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0166.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 3547 os_tid = 0xbf4 [0164.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt")) returned 0x20 [0166.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0166.374] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.374] GetLastError () returned 0x5 [0166.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0166.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 Thread: id = 3548 os_tid = 0x1160 [0164.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10")) returned 0x20 [0166.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0166.376] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.376] GetLastError () returned 0x5 [0166.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0166.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 3549 os_tid = 0x1168 [0164.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7")) returned 0x20 [0166.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0166.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.366] GetLastError () returned 0x5 [0166.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0166.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 3550 os_tid = 0x8ac [0164.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt")) returned 0x20 [0166.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0166.378] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.378] GetLastError () returned 0x5 [0166.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0166.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29790) returned 1 Thread: id = 3551 os_tid = 0x8bc [0164.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8")) returned 0x20 [0166.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0166.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.393] GetLastError () returned 0x5 [0166.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0166.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 3552 os_tid = 0x1aac [0164.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt")) returned 0x20 [0166.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0166.372] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.373] GetLastError () returned 0x5 [0166.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0166.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 Thread: id = 3553 os_tid = 0x1ab0 [0164.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9")) returned 0x20 [0166.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0166.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.358] GetLastError () returned 0x5 [0166.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0166.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 Thread: id = 3554 os_tid = 0x1720 [0164.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt")) returned 0x20 [0166.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0166.360] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.360] GetLastError () returned 0x5 [0166.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0166.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 3555 os_tid = 0x1724 [0164.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer")) returned 0x20 [0165.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0165.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.611] GetLastError () returned 0x5 [0165.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0165.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 3556 os_tid = 0x1ab4 [0164.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer")) returned 0x20 [0166.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0166.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.923] GetLastError () returned 0x5 [0166.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0166.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 3557 os_tid = 0x1ab8 [0164.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 0x20 [0164.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.688] GetLastError () returned 0x5 [0164.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0164.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2700) returned 1 Thread: id = 3558 os_tid = 0x1728 [0164.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 0x20 [0164.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.690] GetLastError () returned 0x5 [0164.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0164.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c58) returned 1 Thread: id = 3559 os_tid = 0x172c [0164.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav")) returned 0x20 [0164.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0164.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.711] GetLastError () returned 0x5 [0164.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0164.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 3560 os_tid = 0x1148 [0164.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav")) returned 0x20 [0166.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0166.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.405] GetLastError () returned 0x5 [0166.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0166.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 3561 os_tid = 0x1730 [0164.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav")) returned 0x20 [0166.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0166.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.407] GetLastError () returned 0x5 [0166.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0166.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 3562 os_tid = 0x1abc [0164.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav")) returned 0x20 [0166.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0166.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.408] GetLastError () returned 0x5 [0166.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0166.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 Thread: id = 3563 os_tid = 0x1ac0 [0164.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav")) returned 0x20 [0166.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0166.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.421] GetLastError () returned 0x5 [0166.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0166.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 3564 os_tid = 0x1734 [0164.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav")) returned 0x20 [0166.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0166.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.402] GetLastError () returned 0x5 [0166.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0166.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 3565 os_tid = 0x1738 [0164.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav")) returned 0x20 [0166.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0166.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.404] GetLastError () returned 0x5 [0166.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0166.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 3566 os_tid = 0x1ac4 [0164.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d08d0 [0164.724] wcscpy (in: _Dest=0x66d08d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0164.724] wcscat (in: _Dest=0x66d08d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0164.724] wcscat (in: _Dest=0x66d08d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*" [0164.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f154d0 [0164.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0165.494] wcscmp (_String1=".", _String2=".") returned 0 [0165.494] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.495] wcscmp (_String1="..", _String2=".") returned 1 [0165.495] wcscmp (_String1="..", _String2="..") returned 0 [0165.495] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b58100, ftCreationTime.dwHighDateTime=0x1ca114b, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b58100, ftLastWriteTime.dwHighDateTime=0x1ca114b, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0165.495] wcscmp (_String1="PGLBL001.XML", _String2=".") returned 1 [0165.495] wcscmp (_String1="PGLBL001.XML", _String2="..") returned 1 [0165.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cd88 [0165.495] wcscpy (in: _Dest=0x674cd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0165.495] wcscat (in: _Dest=0x674cd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0165.495] wcscat (in: _Dest=0x674cd88, _Source="PGLBL001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" [0172.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml")) returned 0x20 [0173.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0173.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.589] GetLastError () returned 0x5 [0173.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0173.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd88) returned 1 [0173.589] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70e7800, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf70e7800, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0173.589] wcscmp (_String1="PGLBL002.XML", _String2=".") returned 1 [0173.589] wcscmp (_String1="PGLBL002.XML", _String2="..") returned 1 [0173.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cd88 [0173.589] wcscpy (in: _Dest=0x674cd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0173.589] wcscat (in: _Dest=0x674cd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0173.589] wcscat (in: _Dest=0x674cd88, _Source="PGLBL002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" [0174.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0174.337] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0174.337] wcscmp (_String1="PGLBL010.XML", _String2=".") returned 1 [0174.337] wcscmp (_String1="PGLBL010.XML", _String2="..") returned 1 [0174.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d178 [0174.337] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.337] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.337] wcscat (in: _Dest=0x674d178, _Source="PGLBL010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" [0174.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0174.338] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0174.338] wcscmp (_String1="PGLBL011.XML", _String2=".") returned 1 [0174.339] wcscmp (_String1="PGLBL011.XML", _String2="..") returned 1 [0174.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d718 [0174.339] wcscpy (in: _Dest=0x674d718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.339] wcscat (in: _Dest=0x674d718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.339] wcscat (in: _Dest=0x674d718, _Source="PGLBL011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" [0174.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0174.340] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f0700, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x331f0700, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0174.340] wcscmp (_String1="PGLBL012.XML", _String2=".") returned 1 [0174.340] wcscmp (_String1="PGLBL012.XML", _String2="..") returned 1 [0174.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d208 [0174.340] wcscpy (in: _Dest=0x674d208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.340] wcscat (in: _Dest=0x674d208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.340] wcscat (in: _Dest=0x674d208, _Source="PGLBL012.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" [0174.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0174.342] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fce2100, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fce2100, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0174.342] wcscmp (_String1="PGLBL016.XML", _String2=".") returned 1 [0174.342] wcscmp (_String1="PGLBL016.XML", _String2="..") returned 1 [0174.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cbd8 [0174.342] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.342] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.342] wcscat (in: _Dest=0x674cbd8, _Source="PGLBL016.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" [0174.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0174.345] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0e8c00, ftCreationTime.dwHighDateTime=0x1c6c230, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff0e8c00, ftLastWriteTime.dwHighDateTime=0x1c6c230, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0174.345] wcscmp (_String1="PGLBL020.XML", _String2=".") returned 1 [0174.345] wcscmp (_String1="PGLBL020.XML", _String2="..") returned 1 [0174.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674da78 [0174.345] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.345] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.345] wcscat (in: _Dest=0x674da78, _Source="PGLBL020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" [0174.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0174.347] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a94100, ftCreationTime.dwHighDateTime=0x1ca1b8d, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a94100, ftLastWriteTime.dwHighDateTime=0x1ca1b8d, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0174.347] wcscmp (_String1="PGLBL022.XML", _String2=".") returned 1 [0174.347] wcscmp (_String1="PGLBL022.XML", _String2="..") returned 1 [0174.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d9e8 [0174.347] wcscpy (in: _Dest=0x674d9e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.347] wcscat (in: _Dest=0x674d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.347] wcscat (in: _Dest=0x674d9e8, _Source="PGLBL022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" [0174.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0174.348] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0174.348] wcscmp (_String1="PGLBL026.XML", _String2=".") returned 1 [0174.348] wcscmp (_String1="PGLBL026.XML", _String2="..") returned 1 [0174.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cf38 [0174.348] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.349] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.349] wcscat (in: _Dest=0x674cf38, _Source="PGLBL026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" [0174.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0174.350] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0174.350] wcscmp (_String1="PGLBL027.XML", _String2=".") returned 1 [0174.350] wcscmp (_String1="PGLBL027.XML", _String2="..") returned 1 [0174.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d4d8 [0174.350] wcscpy (in: _Dest=0x674d4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.350] wcscat (in: _Dest=0x674d4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.350] wcscat (in: _Dest=0x674d4d8, _Source="PGLBL027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" [0174.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0174.352] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e76800, ftCreationTime.dwHighDateTime=0x1c9e462, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98e76800, ftLastWriteTime.dwHighDateTime=0x1c9e462, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0174.352] wcscmp (_String1="PGLBL044.XML", _String2=".") returned 1 [0174.352] wcscmp (_String1="PGLBL044.XML", _String2="..") returned 1 [0174.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e018 [0174.352] wcscpy (in: _Dest=0x674e018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.352] wcscat (in: _Dest=0x674e018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.352] wcscat (in: _Dest=0x674e018, _Source="PGLBL044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" [0174.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0174.353] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaf8500, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadaf8500, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0174.353] wcscmp (_String1="PGLBL048.XML", _String2=".") returned 1 [0174.353] wcscmp (_String1="PGLBL048.XML", _String2="..") returned 1 [0174.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dc28 [0174.353] wcscpy (in: _Dest=0x674dc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.353] wcscat (in: _Dest=0x674dc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.353] wcscat (in: _Dest=0x674dc28, _Source="PGLBL048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" [0174.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0174.355] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87603d00, ftCreationTime.dwHighDateTime=0x1c9f669, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87603d00, ftLastWriteTime.dwHighDateTime=0x1c9f669, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0174.355] wcscmp (_String1="PGLBL054.XML", _String2=".") returned 1 [0174.355] wcscmp (_String1="PGLBL054.XML", _String2="..") returned 1 [0174.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d8c8 [0174.355] wcscpy (in: _Dest=0x674d8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.355] wcscat (in: _Dest=0x674d8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.355] wcscat (in: _Dest=0x674d8c8, _Source="PGLBL054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" [0174.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0174.357] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4017300, ftCreationTime.dwHighDateTime=0x1c6b721, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4017300, ftLastWriteTime.dwHighDateTime=0x1c6b721, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0174.357] wcscmp (_String1="PGLBL058.XML", _String2=".") returned 1 [0174.357] wcscmp (_String1="PGLBL058.XML", _String2="..") returned 1 [0174.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d838 [0174.358] wcscpy (in: _Dest=0x674d838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.358] wcscat (in: _Dest=0x674d838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.358] wcscat (in: _Dest=0x674d838, _Source="PGLBL058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" [0174.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0174.359] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcb000, ftCreationTime.dwHighDateTime=0x1c68f54, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcb000, ftLastWriteTime.dwHighDateTime=0x1c68f54, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0174.359] wcscmp (_String1="PGLBL065.XML", _String2=".") returned 1 [0174.359] wcscmp (_String1="PGLBL065.XML", _String2="..") returned 1 [0174.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d058 [0174.359] wcscpy (in: _Dest=0x674d058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.359] wcscat (in: _Dest=0x674d058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.359] wcscat (in: _Dest=0x674d058, _Source="PGLBL065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" [0174.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0174.361] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25625600, ftCreationTime.dwHighDateTime=0x1c69b23, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25625600, ftLastWriteTime.dwHighDateTime=0x1c69b23, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0174.361] wcscmp (_String1="PGLBL075.XML", _String2=".") returned 1 [0174.361] wcscmp (_String1="PGLBL075.XML", _String2="..") returned 1 [0174.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e138 [0174.361] wcscpy (in: _Dest=0x674e138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.361] wcscat (in: _Dest=0x674e138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.361] wcscat (in: _Dest=0x674e138, _Source="PGLBL075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" [0174.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0174.362] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9101f600, ftCreationTime.dwHighDateTime=0x1c6c59d, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9101f600, ftLastWriteTime.dwHighDateTime=0x1c6c59d, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0174.362] wcscmp (_String1="PGLBL077.XML", _String2=".") returned 1 [0174.362] wcscmp (_String1="PGLBL077.XML", _String2="..") returned 1 [0174.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674df88 [0174.362] wcscpy (in: _Dest=0x674df88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.362] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.362] wcscat (in: _Dest=0x674df88, _Source="PGLBL077.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" [0174.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0174.364] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b8100, ftCreationTime.dwHighDateTime=0x1c6bf3f, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c8b8100, ftLastWriteTime.dwHighDateTime=0x1c6bf3f, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0174.364] wcscmp (_String1="PGLBL078.XML", _String2=".") returned 1 [0174.364] wcscmp (_String1="PGLBL078.XML", _String2="..") returned 1 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674de68 [0174.364] wcscpy (in: _Dest=0x674de68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.364] wcscat (in: _Dest=0x674de68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.364] wcscat (in: _Dest=0x674de68, _Source="PGLBL078.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" [0174.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0174.365] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27334500, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb103d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27334500, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0174.365] wcscmp (_String1="PGLBL081.XML", _String2=".") returned 1 [0174.365] wcscmp (_String1="PGLBL081.XML", _String2="..") returned 1 [0174.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674def8 [0174.365] wcscpy (in: _Dest=0x674def8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.365] wcscat (in: _Dest=0x674def8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.366] wcscat (in: _Dest=0x674def8, _Source="PGLBL081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" [0174.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674def8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0174.367] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc685900, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc685900, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0174.367] wcscmp (_String1="PGLBL082.XML", _String2=".") returned 1 [0174.367] wcscmp (_String1="PGLBL082.XML", _String2="..") returned 1 [0174.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674dcb8 [0174.367] wcscpy (in: _Dest=0x674dcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.367] wcscat (in: _Dest=0x674dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.367] wcscat (in: _Dest=0x674dcb8, _Source="PGLBL082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" [0174.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0174.368] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64451000, ftCreationTime.dwHighDateTime=0x1ca264f, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64451000, ftLastWriteTime.dwHighDateTime=0x1ca264f, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0174.368] wcscmp (_String1="PGLBL083.XML", _String2=".") returned 1 [0174.368] wcscmp (_String1="PGLBL083.XML", _String2="..") returned 1 [0174.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e2e8 [0174.368] wcscpy (in: _Dest=0x674e2e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.369] wcscat (in: _Dest=0x674e2e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.369] wcscat (in: _Dest=0x674e2e8, _Source="PGLBL083.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" [0174.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0174.370] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e48ff00, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e48ff00, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0174.370] wcscmp (_String1="PGLBL086.XML", _String2=".") returned 1 [0174.370] wcscmp (_String1="PGLBL086.XML", _String2="..") returned 1 [0174.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674ce18 [0174.370] wcscpy (in: _Dest=0x674ce18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.370] wcscat (in: _Dest=0x674ce18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.370] wcscat (in: _Dest=0x674ce18, _Source="PGLBL086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" [0174.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0174.371] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e0b7800, ftCreationTime.dwHighDateTime=0x1c6bf44, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e0b7800, ftLastWriteTime.dwHighDateTime=0x1c6bf44, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0174.371] wcscmp (_String1="PGLBL087.XML", _String2=".") returned 1 [0174.371] wcscmp (_String1="PGLBL087.XML", _String2="..") returned 1 [0174.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e378 [0174.371] wcscpy (in: _Dest=0x674e378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.371] wcscat (in: _Dest=0x674e378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.372] wcscat (in: _Dest=0x674e378, _Source="PGLBL087.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" [0174.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0174.373] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0174.373] wcscmp (_String1="PGLBL089.XML", _String2=".") returned 1 [0174.373] wcscmp (_String1="PGLBL089.XML", _String2="..") returned 1 [0174.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e9a8 [0174.373] wcscpy (in: _Dest=0x674e9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.373] wcscat (in: _Dest=0x674e9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.373] wcscat (in: _Dest=0x674e9a8, _Source="PGLBL089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" [0174.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0174.374] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf912800, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf912800, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0174.374] wcscmp (_String1="PGLBL090.XML", _String2=".") returned 1 [0174.375] wcscmp (_String1="PGLBL090.XML", _String2="..") returned 1 [0174.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e918 [0174.375] wcscpy (in: _Dest=0x674e918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.375] wcscat (in: _Dest=0x674e918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.375] wcscat (in: _Dest=0x674e918, _Source="PGLBL090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" [0174.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0174.376] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59976f00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59976f00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0174.376] wcscmp (_String1="PGLBL092.XML", _String2=".") returned 1 [0174.376] wcscmp (_String1="PGLBL092.XML", _String2="..") returned 1 [0174.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e888 [0174.376] wcscpy (in: _Dest=0x674e888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.376] wcscat (in: _Dest=0x674e888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.376] wcscat (in: _Dest=0x674e888, _Source="PGLBL092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" [0174.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0174.658] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a2c900, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5a2c900, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0174.659] wcscmp (_String1="PGLBL093.XML", _String2=".") returned 1 [0174.659] wcscmp (_String1="PGLBL093.XML", _String2="..") returned 1 [0174.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d178 [0174.659] wcscpy (in: _Dest=0x674d178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.659] wcscat (in: _Dest=0x674d178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.659] wcscat (in: _Dest=0x674d178, _Source="PGLBL093.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" [0178.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0178.192] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e96300, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7e96300, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0178.192] wcscmp (_String1="PGLBL095.XML", _String2=".") returned 1 [0178.192] wcscmp (_String1="PGLBL095.XML", _String2="..") returned 1 [0178.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd128 [0178.192] wcscpy (in: _Dest=0x66dd128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.192] wcscat (in: _Dest=0x66dd128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.192] wcscat (in: _Dest=0x66dd128, _Source="PGLBL095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" [0178.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0178.194] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf107100, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf107100, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0178.194] wcscmp (_String1="PGLBL096.XML", _String2=".") returned 1 [0178.194] wcscmp (_String1="PGLBL096.XML", _String2="..") returned 1 [0178.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbc58 [0178.194] wcscpy (in: _Dest=0x66dbc58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.194] wcscat (in: _Dest=0x66dbc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.194] wcscat (in: _Dest=0x66dbc58, _Source="PGLBL096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" [0178.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0178.195] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4984100, ftCreationTime.dwHighDateTime=0x1c9ef7e, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4984100, ftLastWriteTime.dwHighDateTime=0x1c9ef7e, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0178.195] wcscmp (_String1="PGLBL097.XML", _String2=".") returned 1 [0178.195] wcscmp (_String1="PGLBL097.XML", _String2="..") returned 1 [0178.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dcb88 [0178.195] wcscpy (in: _Dest=0x66dcb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.195] wcscat (in: _Dest=0x66dcb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.195] wcscat (in: _Dest=0x66dcb88, _Source="PGLBL097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" [0178.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0178.197] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16a5500, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc16a5500, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0178.197] wcscmp (_String1="PGLBL102.XML", _String2=".") returned 1 [0178.197] wcscmp (_String1="PGLBL102.XML", _String2="..") returned 1 [0178.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dd368 [0178.197] wcscpy (in: _Dest=0x66dd368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.197] wcscat (in: _Dest=0x66dd368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.197] wcscat (in: _Dest=0x66dd368, _Source="PGLBL102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" [0178.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0178.198] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda375800, ftCreationTime.dwHighDateTime=0x1ca0f79, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda375800, ftLastWriteTime.dwHighDateTime=0x1ca0f79, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0178.198] wcscmp (_String1="PGLBL103.XML", _String2=".") returned 1 [0178.198] wcscmp (_String1="PGLBL103.XML", _String2="..") returned 1 [0178.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc828 [0178.198] wcscpy (in: _Dest=0x66dc828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.198] wcscat (in: _Dest=0x66dc828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.198] wcscat (in: _Dest=0x66dc828, _Source="PGLBL103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" [0178.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0178.199] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b52a500, ftCreationTime.dwHighDateTime=0x1ca1767, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b52a500, ftLastWriteTime.dwHighDateTime=0x1ca1767, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0178.199] wcscmp (_String1="PGLBL104.XML", _String2=".") returned 1 [0178.199] wcscmp (_String1="PGLBL104.XML", _String2="..") returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc8b8 [0178.200] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.200] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.200] wcscat (in: _Dest=0x66dc8b8, _Source="PGLBL104.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" [0178.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0178.201] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0178.203] wcscmp (_String1="PGLBL105.XML", _String2=".") returned 1 [0178.203] wcscmp (_String1="PGLBL105.XML", _String2="..") returned 1 [0178.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dbd78 [0178.203] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.203] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.203] wcscat (in: _Dest=0x66dbd78, _Source="PGLBL105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" [0179.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0179.433] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68305700, ftCreationTime.dwHighDateTime=0x1ca1ba6, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68305700, ftLastWriteTime.dwHighDateTime=0x1ca1ba6, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0179.433] wcscmp (_String1="PGLBL106.XML", _String2=".") returned 1 [0179.433] wcscmp (_String1="PGLBL106.XML", _String2="..") returned 1 [0179.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674da78 [0179.433] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.433] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.433] wcscat (in: _Dest=0x674da78, _Source="PGLBL106.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" [0179.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0179.434] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda566b00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda566b00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0179.434] wcscmp (_String1="PGLBL107.XML", _String2=".") returned 1 [0179.434] wcscmp (_String1="PGLBL107.XML", _String2="..") returned 1 [0179.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cc68 [0179.434] wcscpy (in: _Dest=0x674cc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.434] wcscat (in: _Dest=0x674cc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.435] wcscat (in: _Dest=0x674cc68, _Source="PGLBL107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" [0179.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0179.436] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0179.436] wcscmp (_String1="PGLBL108.XML", _String2=".") returned 1 [0179.436] wcscmp (_String1="PGLBL108.XML", _String2="..") returned 1 [0179.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674d0e8 [0179.436] wcscpy (in: _Dest=0x674d0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.436] wcscat (in: _Dest=0x674d0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.436] wcscat (in: _Dest=0x674d0e8, _Source="PGLBL108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" [0179.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0179.437] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03ff600, ftCreationTime.dwHighDateTime=0x1ca1525, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa03ff600, ftLastWriteTime.dwHighDateTime=0x1ca1525, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0179.437] wcscmp (_String1="PGLBL109.XML", _String2=".") returned 1 [0179.437] wcscmp (_String1="PGLBL109.XML", _String2="..") returned 1 [0179.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674cb48 [0179.437] wcscpy (in: _Dest=0x674cb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.437] wcscat (in: _Dest=0x674cb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.437] wcscat (in: _Dest=0x674cb48, _Source="PGLBL109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" [0179.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0179.438] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf970d200, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf970d200, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0179.438] wcscmp (_String1="PGLBL110.XML", _String2=".") returned 1 [0179.438] wcscmp (_String1="PGLBL110.XML", _String2="..") returned 1 [0179.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674e498 [0179.438] wcscpy (in: _Dest=0x674e498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.438] wcscat (in: _Dest=0x674e498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.438] wcscat (in: _Dest=0x674e498, _Source="PGLBL110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" [0179.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0179.439] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa1ff00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaa1ff00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0179.439] wcscmp (_String1="PGLBL111.XML", _String2=".") returned 1 [0179.439] wcscmp (_String1="PGLBL111.XML", _String2="..") returned 1 [0179.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674db08 [0179.439] wcscpy (in: _Dest=0x674db08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.439] wcscat (in: _Dest=0x674db08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.439] wcscat (in: _Dest=0x674db08, _Source="PGLBL111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" [0179.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674db08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0179.440] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35aee100, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35aee100, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0179.440] wcscmp (_String1="PGMN001.XML", _String2=".") returned 1 [0179.440] wcscmp (_String1="PGMN001.XML", _String2="..") returned 1 [0179.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66eefc0 [0179.440] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.440] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.440] wcscat (in: _Dest=0x66eefc0, _Source="PGMN001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" [0179.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0179.442] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd32c00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbd32c00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0179.442] wcscmp (_String1="PGMN002.XML", _String2=".") returned 1 [0179.442] wcscmp (_String1="PGMN002.XML", _String2="..") returned 1 [0179.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66ee520 [0179.442] wcscpy (in: _Dest=0x66ee520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.442] wcscat (in: _Dest=0x66ee520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.442] wcscat (in: _Dest=0x66ee520, _Source="PGMN002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" [0179.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0179.443] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0179.443] wcscmp (_String1="PGMN010.XML", _String2=".") returned 1 [0179.443] wcscmp (_String1="PGMN010.XML", _String2="..") returned 1 [0179.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f268c0 [0179.443] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.443] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.443] wcscat (in: _Dest=0x3f268c0, _Source="PGMN010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" [0179.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0179.444] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2f3500, ftCreationTime.dwHighDateTime=0x1ca1b9e, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a2f3500, ftLastWriteTime.dwHighDateTime=0x1ca1b9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0179.444] wcscmp (_String1="PGMN011.XML", _String2=".") returned 1 [0179.444] wcscmp (_String1="PGMN011.XML", _String2="..") returned 1 [0179.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25fb8 [0179.444] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.444] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.444] wcscat (in: _Dest=0x3f25fb8, _Source="PGMN011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" [0179.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0179.445] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9198b500, ftCreationTime.dwHighDateTime=0x1ca1b9d, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9198b500, ftLastWriteTime.dwHighDateTime=0x1ca1b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0179.445] wcscmp (_String1="PGMN020.XML", _String2=".") returned 1 [0179.445] wcscmp (_String1="PGMN020.XML", _String2="..") returned 1 [0179.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26d00 [0179.445] wcscpy (in: _Dest=0x3f26d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.445] wcscat (in: _Dest=0x3f26d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.445] wcscat (in: _Dest=0x3f26d00, _Source="PGMN020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" [0179.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0179.446] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace3e200, ftCreationTime.dwHighDateTime=0x1ca070f, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace3e200, ftLastWriteTime.dwHighDateTime=0x1ca070f, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0179.446] wcscmp (_String1="PGMN022.XML", _String2=".") returned 1 [0179.446] wcscmp (_String1="PGMN022.XML", _String2="..") returned 1 [0179.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26ae0 [0179.446] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.446] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.447] wcscat (in: _Dest=0x3f26ae0, _Source="PGMN022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" [0179.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0179.447] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0179.447] wcscmp (_String1="PGMN026.XML", _String2=".") returned 1 [0179.447] wcscmp (_String1="PGMN026.XML", _String2="..") returned 1 [0179.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f278b0 [0179.448] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.448] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.448] wcscat (in: _Dest=0x3f278b0, _Source="PGMN026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" [0179.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0179.449] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0179.449] wcscmp (_String1="PGMN027.XML", _String2=".") returned 1 [0179.449] wcscmp (_String1="PGMN027.XML", _String2="..") returned 1 [0179.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26f20 [0179.449] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.449] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.449] wcscat (in: _Dest=0x3f26f20, _Source="PGMN027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" [0179.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0179.450] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57d5100, ftCreationTime.dwHighDateTime=0x1c9e396, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf57d5100, ftLastWriteTime.dwHighDateTime=0x1c9e396, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0179.450] wcscmp (_String1="PGMN044.XML", _String2=".") returned 1 [0179.450] wcscmp (_String1="PGMN044.XML", _String2="..") returned 1 [0179.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26260 [0179.450] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.450] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.450] wcscat (in: _Dest=0x3f26260, _Source="PGMN044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" [0179.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0179.451] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd768ac00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd768ac00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0179.451] wcscmp (_String1="PGMN048.XML", _String2=".") returned 1 [0179.451] wcscmp (_String1="PGMN048.XML", _String2="..") returned 1 [0179.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f269d0 [0179.451] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.451] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.451] wcscat (in: _Dest=0x3f269d0, _Source="PGMN048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" [0179.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0179.452] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb648f00, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb648f00, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1 [0179.452] wcscmp (_String1="PGMN054.XML", _String2=".") returned 1 [0179.452] wcscmp (_String1="PGMN054.XML", _String2="..") returned 1 [0179.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f262e8 [0179.452] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.452] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.452] wcscat (in: _Dest=0x3f262e8, _Source="PGMN054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" [0179.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0179.453] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d28800, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5d28800, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1 [0179.453] wcscmp (_String1="PGMN058.XML", _String2=".") returned 1 [0179.453] wcscmp (_String1="PGMN058.XML", _String2="..") returned 1 [0179.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f279c0 [0179.453] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.453] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.453] wcscat (in: _Dest=0x3f279c0, _Source="PGMN058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" [0179.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0179.454] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1be4a00, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1be4a00, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x1326, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1 [0179.454] wcscmp (_String1="PGMN065.XML", _String2=".") returned 1 [0179.454] wcscmp (_String1="PGMN065.XML", _String2="..") returned 1 [0179.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27b58 [0179.454] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.454] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.454] wcscat (in: _Dest=0x3f27b58, _Source="PGMN065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" [0179.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0179.455] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd97300, ftCreationTime.dwHighDateTime=0x1c694d2, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cd97300, ftLastWriteTime.dwHighDateTime=0x1c694d2, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1 [0179.455] wcscmp (_String1="PGMN075.XML", _String2=".") returned 1 [0179.456] wcscmp (_String1="PGMN075.XML", _String2="..") returned 1 [0179.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27c68 [0179.456] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.456] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.456] wcscat (in: _Dest=0x3f27c68, _Source="PGMN075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" [0179.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0179.457] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd9b100, ftCreationTime.dwHighDateTime=0x1ca04b7, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bd9b100, ftLastWriteTime.dwHighDateTime=0x1ca04b7, nFileSizeHigh=0x0, nFileSizeLow=0x101198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1 [0179.457] wcscmp (_String1="PGMN081.XML", _String2=".") returned 1 [0179.457] wcscmp (_String1="PGMN081.XML", _String2="..") returned 1 [0179.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f270b8 [0179.457] wcscpy (in: _Dest=0x3f270b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.457] wcscat (in: _Dest=0x3f270b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.457] wcscat (in: _Dest=0x3f270b8, _Source="PGMN081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" [0179.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f270b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0179.458] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb372c00, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb372c00, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1 [0179.458] wcscmp (_String1="PGMN082.XML", _String2=".") returned 1 [0179.458] wcscmp (_String1="PGMN082.XML", _String2="..") returned 1 [0179.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27250 [0179.458] wcscpy (in: _Dest=0x3f27250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.458] wcscat (in: _Dest=0x3f27250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.458] wcscat (in: _Dest=0x3f27250, _Source="PGMN082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" [0179.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0179.459] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb55bf00, ftCreationTime.dwHighDateTime=0x1c6a693, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb55bf00, ftLastWriteTime.dwHighDateTime=0x1c6a693, nFileSizeHigh=0x0, nFileSizeLow=0x2d34, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1 [0179.459] wcscmp (_String1="PGMN086.XML", _String2=".") returned 1 [0179.459] wcscmp (_String1="PGMN086.XML", _String2="..") returned 1 [0179.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f271c8 [0179.459] wcscpy (in: _Dest=0x3f271c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.459] wcscat (in: _Dest=0x3f271c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.459] wcscat (in: _Dest=0x3f271c8, _Source="PGMN086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" [0179.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f271c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0179.461] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1 [0179.461] wcscmp (_String1="PGMN089.XML", _String2=".") returned 1 [0179.461] wcscmp (_String1="PGMN089.XML", _String2="..") returned 1 [0179.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26bf0 [0179.461] wcscpy (in: _Dest=0x3f26bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.461] wcscat (in: _Dest=0x3f26bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.461] wcscat (in: _Dest=0x3f26bf0, _Source="PGMN089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" [0179.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0179.462] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f92d00, ftCreationTime.dwHighDateTime=0x1c6b560, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14f92d00, ftLastWriteTime.dwHighDateTime=0x1c6b560, nFileSizeHigh=0x0, nFileSizeLow=0xa246, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1 [0179.462] wcscmp (_String1="PGMN090.XML", _String2=".") returned 1 [0179.462] wcscmp (_String1="PGMN090.XML", _String2="..") returned 1 [0179.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26150 [0179.462] wcscpy (in: _Dest=0x3f26150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.462] wcscat (in: _Dest=0x3f26150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.462] wcscat (in: _Dest=0x3f26150, _Source="PGMN090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" [0179.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0179.463] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90cd300, ftCreationTime.dwHighDateTime=0x1c679d5, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf90cd300, ftLastWriteTime.dwHighDateTime=0x1c679d5, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1 [0179.463] wcscmp (_String1="PGMN092.XML", _String2=".") returned 1 [0179.463] wcscmp (_String1="PGMN092.XML", _String2="..") returned 1 [0179.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26b68 [0179.464] wcscpy (in: _Dest=0x3f26b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.464] wcscat (in: _Dest=0x3f26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.464] wcscat (in: _Dest=0x3f26b68, _Source="PGMN092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" [0179.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0179.465] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebaca900, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebaca900, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x7aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1 [0179.465] wcscmp (_String1="PGMN095.XML", _String2=".") returned 1 [0179.465] wcscmp (_String1="PGMN095.XML", _String2="..") returned 1 [0179.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27938 [0179.465] wcscpy (in: _Dest=0x3f27938, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.465] wcscat (in: _Dest=0x3f27938, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.465] wcscat (in: _Dest=0x3f27938, _Source="PGMN095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" [0179.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0179.466] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a28a00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a28a00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1 [0179.466] wcscmp (_String1="PGMN096.XML", _String2=".") returned 1 [0179.466] wcscmp (_String1="PGMN096.XML", _String2="..") returned 1 [0179.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27718 [0179.467] wcscpy (in: _Dest=0x3f27718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.467] wcscat (in: _Dest=0x3f27718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.467] wcscat (in: _Dest=0x3f27718, _Source="PGMN096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" [0179.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0179.468] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74afb200, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74afb200, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1 [0179.468] wcscmp (_String1="PGMN097.XML", _String2=".") returned 1 [0179.468] wcscmp (_String1="PGMN097.XML", _String2="..") returned 1 [0179.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27690 [0179.468] wcscpy (in: _Dest=0x3f27690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.468] wcscat (in: _Dest=0x3f27690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.468] wcscat (in: _Dest=0x3f27690, _Source="PGMN097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" [0179.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0179.469] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c2eb600, ftCreationTime.dwHighDateTime=0x1c6c606, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c2eb600, ftLastWriteTime.dwHighDateTime=0x1c6c606, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1 [0179.469] wcscmp (_String1="PGMN102.XML", _String2=".") returned 1 [0179.469] wcscmp (_String1="PGMN102.XML", _String2="..") returned 1 [0179.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27470 [0179.469] wcscpy (in: _Dest=0x3f27470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.469] wcscat (in: _Dest=0x3f27470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.469] wcscat (in: _Dest=0x3f27470, _Source="PGMN102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" [0179.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0179.470] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9b0300, ftCreationTime.dwHighDateTime=0x1ca0f78, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea9b0300, ftLastWriteTime.dwHighDateTime=0x1ca0f78, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1 [0179.470] wcscmp (_String1="PGMN103.XML", _String2=".") returned 1 [0179.470] wcscmp (_String1="PGMN103.XML", _String2="..") returned 1 [0179.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f27580 [0179.470] wcscpy (in: _Dest=0x3f27580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.470] wcscat (in: _Dest=0x3f27580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.470] wcscat (in: _Dest=0x3f27580, _Source="PGMN103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" [0179.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0179.471] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1 [0179.471] wcscmp (_String1="PGMN105.XML", _String2=".") returned 1 [0179.471] wcscmp (_String1="PGMN105.XML", _String2="..") returned 1 [0179.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f277a0 [0179.471] wcscpy (in: _Dest=0x3f277a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.471] wcscat (in: _Dest=0x3f277a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.471] wcscat (in: _Dest=0x3f277a0, _Source="PGMN105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" [0179.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f277a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0179.472] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cebdc00, ftCreationTime.dwHighDateTime=0x1c9fa8b, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cebdc00, ftLastWriteTime.dwHighDateTime=0x1c9fa8b, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1 [0179.472] wcscmp (_String1="PGMN107.XML", _String2=".") returned 1 [0179.472] wcscmp (_String1="PGMN107.XML", _String2="..") returned 1 [0179.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f273e8 [0179.472] wcscpy (in: _Dest=0x3f273e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.473] wcscat (in: _Dest=0x3f273e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.473] wcscat (in: _Dest=0x3f273e8, _Source="PGMN107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" [0179.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f273e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0179.797] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1 [0180.213] wcscmp (_String1="PGMN108.XML", _String2=".") returned 1 [0180.214] wcscmp (_String1="PGMN108.XML", _String2="..") returned 1 [0180.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66efa60 [0180.214] wcscpy (in: _Dest=0x66efa60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0180.214] wcscat (in: _Dest=0x66efa60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0180.214] wcscat (in: _Dest=0x66efa60, _Source="PGMN108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" [0188.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0188.605] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c3a600, ftCreationTime.dwHighDateTime=0x1ca1526, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25c3a600, ftLastWriteTime.dwHighDateTime=0x1ca1526, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1 [0188.605] wcscmp (_String1="PGMN109.XML", _String2=".") returned 1 [0188.605] wcscmp (_String1="PGMN109.XML", _String2="..") returned 1 [0188.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f25ea8 [0188.605] wcscpy (in: _Dest=0x3f25ea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.605] wcscat (in: _Dest=0x3f25ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.605] wcscat (in: _Dest=0x3f25ea8, _Source="PGMN109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" [0188.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0188.606] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd045900, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd045900, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1 [0188.606] wcscmp (_String1="PGMN110.XML", _String2=".") returned 1 [0188.606] wcscmp (_String1="PGMN110.XML", _String2="..") returned 1 [0188.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f26e10 [0188.606] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.606] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.606] wcscat (in: _Dest=0x3f26e10, _Source="PGMN110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" [0188.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0188.607] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe358600, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe358600, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1 [0188.607] wcscmp (_String1="PGMN111.XML", _String2=".") returned 1 [0188.607] wcscmp (_String1="PGMN111.XML", _String2="..") returned 1 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f274f8 [0188.608] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.608] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.608] wcscat (in: _Dest=0x3f274f8, _Source="PGMN111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" [0188.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0188.609] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1 [0188.609] wcscmp (_String1="PG_INDEX.XML", _String2=".") returned 1 [0188.609] wcscmp (_String1="PG_INDEX.XML", _String2="..") returned 1 [0188.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc168 [0188.609] wcscpy (in: _Dest=0x66dc168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0188.609] wcscat (in: _Dest=0x66dc168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0188.609] wcscat (in: _Dest=0x66dc168, _Source="PG_INDEX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" [0188.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0188.610] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0 [0188.610] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0188.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f154d0) returned 1 [0188.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0188.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 3567 os_tid = 0x1ac8 [0164.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest")) returned 0x20 [0166.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0166.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.246] GetLastError () returned 0x5 [0166.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0166.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 3568 os_tid = 0xdf4 [0164.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml")) returned 0x20 [0166.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0166.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.430] GetLastError () returned 0x5 [0166.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0166.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 Thread: id = 3569 os_tid = 0xe2c [0164.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml")) returned 0x20 [0166.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0166.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.432] GetLastError () returned 0x5 [0166.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0166.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 3570 os_tid = 0xe0c [0164.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29560 [0164.730] wcscpy (in: _Dest=0x3f29560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0164.731] wcscat (in: _Dest=0x3f29560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0164.731] wcscat (in: _Dest=0x3f29560, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*" [0164.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0164.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0167.523] wcscmp (_String1=".", _String2=".") returned 0 [0167.523] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.523] wcscmp (_String1="..", _String2=".") returned 1 [0167.523] wcscmp (_String1="..", _String2="..") returned 0 [0167.523] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0167.523] wcscmp (_String1="1033", _String2=".") returned 1 [0167.523] wcscmp (_String1="1033", _String2="..") returned 1 [0167.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014fe0 [0167.523] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0167.523] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0167.523] wcscat (in: _Dest=0x3014fe0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0172.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0858 [0172.567] wcscpy (in: _Dest=0x66d0858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0172.567] wcscat (in: _Dest=0x66d0858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\" [0172.567] wcscat (in: _Dest=0x66d0858, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*" [0172.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0172.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0172.568] wcscmp (_String1=".", _String2=".") returned 0 [0172.568] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.569] wcscmp (_String1="..", _String2=".") returned 1 [0172.569] wcscmp (_String1="..", _String2="..") returned 0 [0172.569] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1 [0172.569] wcscmp (_String1="MSGR3EN.DLL", _String2=".") returned 1 [0172.569] wcscmp (_String1="MSGR3EN.DLL", _String2="..") returned 1 [0172.569] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 0 [0172.569] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0172.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0172.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0172.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.569] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0172.569] wcscmp (_String1="1036", _String2=".") returned 1 [0172.569] wcscmp (_String1="1036", _String2="..") returned 1 [0172.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014fe0 [0172.569] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.569] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.569] wcscat (in: _Dest=0x3014fe0, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0172.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0172.570] wcscpy (in: _Dest=0x3015058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0172.570] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\" [0172.570] wcscat (in: _Dest=0x3015058, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*" [0172.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0172.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0172.590] wcscmp (_String1=".", _String2=".") returned 0 [0172.590] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.590] wcscmp (_String1="..", _String2=".") returned 1 [0172.590] wcscmp (_String1="..", _String2="..") returned 0 [0172.590] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1 [0172.590] wcscmp (_String1="MSGR3FR.DLL", _String2=".") returned 1 [0172.590] wcscmp (_String1="MSGR3FR.DLL", _String2="..") returned 1 [0172.590] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 0 [0172.590] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0172.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0172.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0172.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.591] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0172.591] wcscmp (_String1="3082", _String2=".") returned 1 [0172.591] wcscmp (_String1="3082", _String2="..") returned 1 [0172.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3014fe0 [0172.591] wcscpy (in: _Dest=0x3014fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.591] wcscat (in: _Dest=0x3014fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.591] wcscat (in: _Dest=0x3014fe0, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0172.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0172.591] wcscpy (in: _Dest=0x3015058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0172.591] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\" [0172.591] wcscat (in: _Dest=0x3015058, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*" [0172.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0172.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0172.605] wcscmp (_String1=".", _String2=".") returned 0 [0172.605] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.605] wcscmp (_String1="..", _String2=".") returned 1 [0172.605] wcscmp (_String1="..", _String2="..") returned 0 [0172.605] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1 [0172.605] wcscmp (_String1="MSGR3ES.DLL", _String2=".") returned 1 [0172.605] wcscmp (_String1="MSGR3ES.DLL", _String2="..") returned 1 [0172.605] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 0 [0172.605] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0172.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0172.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0172.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0172.605] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe85f700, ftCreationTime.dwHighDateTime=0x1c4aa04, ftLastAccessTime.dwLowDateTime=0x515defd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe85f700, ftLastWriteTime.dwHighDateTime=0x1c4aa04, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1 [0172.605] wcscmp (_String1="MSGR3EN.LEX", _String2=".") returned 1 [0172.605] wcscmp (_String1="MSGR3EN.LEX", _String2="..") returned 1 [0172.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.605] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.605] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.605] wcscat (in: _Dest=0x3f274f8, _Source="MSGR3EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" [0172.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex")) returned 0x20 [0172.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0172.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.606] GetLastError () returned 0x5 [0172.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0172.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.606] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab100, ftCreationTime.dwHighDateTime=0x1c0458a, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x431ab100, ftLastWriteTime.dwHighDateTime=0x1c0458a, nFileSizeHigh=0x0, nFileSizeLow=0x4112e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.LEX", cAlternateFileName="")) returned 1 [0172.606] wcscmp (_String1="MSGR3ES.LEX", _String2=".") returned 1 [0172.606] wcscmp (_String1="MSGR3ES.LEX", _String2="..") returned 1 [0172.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.606] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.606] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.606] wcscat (in: _Dest=0x3f274f8, _Source="MSGR3ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" [0172.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex")) returned 0x20 [0172.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0172.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.627] GetLastError () returned 0x5 [0172.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0172.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.627] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a18ce00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xdca7b2b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9a18ce00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.LEX", cAlternateFileName="")) returned 1 [0172.628] wcscmp (_String1="MSGR3FR.LEX", _String2=".") returned 1 [0172.628] wcscmp (_String1="MSGR3FR.LEX", _String2="..") returned 1 [0172.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.628] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.628] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.628] wcscat (in: _Dest=0x3f274f8, _Source="MSGR3FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" [0172.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex")) returned 0x20 [0172.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0172.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.628] GetLastError () returned 0x5 [0172.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0172.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.629] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9554700, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd886d030, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa9554700, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0172.629] wcscmp (_String1="MSHY7EN.DLL", _String2=".") returned 1 [0172.629] wcscmp (_String1="MSHY7EN.DLL", _String2="..") returned 1 [0172.629] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafc200, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8893190, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7eafc200, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x74000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0172.629] wcscmp (_String1="MSHY7EN.LEX", _String2=".") returned 1 [0172.629] wcscmp (_String1="MSHY7EN.LEX", _String2="..") returned 1 [0172.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.629] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.629] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.629] wcscat (in: _Dest=0x3f274f8, _Source="MSHY7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" [0172.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex")) returned 0x20 [0172.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0172.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.630] GetLastError () returned 0x5 [0172.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0172.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.630] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96c2700, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf7691f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb96c2700, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0172.630] wcscmp (_String1="MSHY7ES.DLL", _String2=".") returned 1 [0172.630] wcscmp (_String1="MSHY7ES.DLL", _String2="..") returned 1 [0172.630] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82434900, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf78f350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x82434900, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0172.630] wcscmp (_String1="MSHY7ES.LEX", _String2=".") returned 1 [0172.630] wcscmp (_String1="MSHY7ES.LEX", _String2="..") returned 1 [0172.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.630] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.630] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.630] wcscat (in: _Dest=0x3f274f8, _Source="MSHY7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" [0172.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex")) returned 0x20 [0172.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0172.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.631] GetLastError () returned 0x5 [0172.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0172.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.631] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcb39990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0172.631] wcscmp (_String1="MSHY7FR.DLL", _String2=".") returned 1 [0172.631] wcscmp (_String1="MSHY7FR.DLL", _String2="..") returned 1 [0172.631] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe0ef00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcb5faf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7fe0ef00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x43c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0172.631] wcscmp (_String1="MSHY7FR.LEX", _String2=".") returned 1 [0172.631] wcscmp (_String1="MSHY7FR.LEX", _String2="..") returned 1 [0172.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.631] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.631] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.631] wcscat (in: _Dest=0x3f274f8, _Source="MSHY7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" [0172.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex")) returned 0x20 [0172.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0172.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.647] GetLastError () returned 0x5 [0172.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0172.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.647] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd899db30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.DLL", cAlternateFileName="")) returned 1 [0172.647] wcscmp (_String1="MSSP7EN.DLL", _String2=".") returned 1 [0172.647] wcscmp (_String1="MSSP7EN.DLL", _String2="..") returned 1 [0172.647] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacb4300, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8f44f70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaacb4300, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0172.647] wcscmp (_String1="MSSP7EN.dub", _String2=".") returned 1 [0172.647] wcscmp (_String1="MSSP7EN.dub", _String2="..") returned 1 [0172.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.647] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.647] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.647] wcscat (in: _Dest=0x3f274f8, _Source="MSSP7EN.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" [0172.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub")) returned 0x20 [0172.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0172.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.662] GetLastError () returned 0x5 [0172.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0172.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.662] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72857c00, ftCreationTime.dwHighDateTime=0x1cbae92, ftLastAccessTime.dwLowDateTime=0xd88b92f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x72857c00, ftLastWriteTime.dwHighDateTime=0x1cbae92, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0172.662] wcscmp (_String1="MSSP7EN.LEX", _String2=".") returned 1 [0172.662] wcscmp (_String1="MSSP7EN.LEX", _String2="..") returned 1 [0172.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.662] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.662] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.662] wcscat (in: _Dest=0x3f274f8, _Source="MSSP7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" [0172.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex")) returned 0x20 [0172.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0172.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.663] GetLastError () returned 0x5 [0172.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0172.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.665] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdf8bfe50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.DLL", cAlternateFileName="")) returned 1 [0172.665] wcscmp (_String1="MSSP7ES.DLL", _String2=".") returned 1 [0172.665] wcscmp (_String1="MSSP7ES.DLL", _String2="..") returned 1 [0172.665] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0172.665] wcscmp (_String1="MSSP7ES.dub", _String2=".") returned 1 [0172.665] wcscmp (_String1="MSSP7ES.dub", _String2="..") returned 1 [0172.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.665] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.665] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.665] wcscat (in: _Dest=0x3f274f8, _Source="MSSP7ES.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" [0172.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub")) returned 0x20 [0172.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0172.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.666] GetLastError () returned 0x5 [0172.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0172.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0172.666] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf7b54b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1e0400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0172.666] wcscmp (_String1="MSSP7ES.LEX", _String2=".") returned 1 [0172.666] wcscmp (_String1="MSSP7ES.LEX", _String2="..") returned 1 [0172.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0172.666] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0172.666] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0172.666] wcscat (in: _Dest=0x3f274f8, _Source="MSSP7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" [0172.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex")) returned 0x20 [0173.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0173.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.595] GetLastError () returned 0x5 [0173.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0173.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 [0173.596] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdccb6750, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.DLL", cAlternateFileName="")) returned 1 [0173.596] wcscmp (_String1="MSSP7FR.DLL", _String2=".") returned 1 [0173.596] wcscmp (_String1="MSSP7FR.DLL", _String2="..") returned 1 [0173.596] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdd094b10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0173.596] wcscmp (_String1="MSSP7FR.dub", _String2=".") returned 1 [0173.596] wcscmp (_String1="MSSP7FR.dub", _String2="..") returned 1 [0173.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f274f8 [0173.596] wcscpy (in: _Dest=0x3f274f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0173.596] wcscat (in: _Dest=0x3f274f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0173.596] wcscat (in: _Dest=0x3f274f8, _Source="MSSP7FR.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" [0182.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f274f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0182.155] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcbabdb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1b1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0182.155] wcscmp (_String1="MSSP7FR.LEX", _String2=".") returned 1 [0182.155] wcscmp (_String1="MSSP7FR.LEX", _String2="..") returned 1 [0182.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cab8 [0182.156] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0182.156] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0182.156] wcscat (in: _Dest=0x682cab8, _Source="MSSP7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" [0182.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0182.157] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec171f00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd8a82370, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xec171f00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.DLL", cAlternateFileName="")) returned 1 [0182.157] wcscmp (_String1="MSTH7EN.DLL", _String2=".") returned 1 [0182.157] wcscmp (_String1="MSTH7EN.DLL", _String2="..") returned 1 [0182.157] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e25d00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8a0ff50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x60e25d00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x40dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.LEX", cAlternateFileName="")) returned 1 [0182.157] wcscmp (_String1="MSTH7EN.LEX", _String2=".") returned 1 [0182.157] wcscmp (_String1="MSTH7EN.LEX", _String2="..") returned 1 [0182.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682be80 [0182.158] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0182.158] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0182.158] wcscat (in: _Dest=0x682be80, _Source="MSTH7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" [0182.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0182.159] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf9ca7f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.DLL", cAlternateFileName="")) returned 1 [0182.159] wcscmp (_String1="MSTH7ES.DLL", _String2=".") returned 1 [0182.159] wcscmp (_String1="MSTH7ES.DLL", _String2="..") returned 1 [0182.159] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693a9800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf932270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x693a9800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x5b3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.LEX", cAlternateFileName="")) returned 1 [0182.159] wcscmp (_String1="MSTH7ES.LEX", _String2=".") returned 1 [0182.159] wcscmp (_String1="MSTH7ES.LEX", _String2="..") returned 1 [0182.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d228 [0182.159] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0182.159] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0182.159] wcscat (in: _Dest=0x682d228, _Source="MSTH7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" [0182.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0182.160] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35f6600, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdce59670, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa35f6600, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.DLL", cAlternateFileName="")) returned 1 [0182.160] wcscmp (_String1="MSTH7FR.DLL", _String2=".") returned 1 [0182.160] wcscmp (_String1="MSTH7FR.DLL", _String2="..") returned 1 [0182.161] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 1 [0182.161] wcscmp (_String1="MSTH7FR.LEX", _String2=".") returned 1 [0182.161] wcscmp (_String1="MSTH7FR.LEX", _String2="..") returned 1 [0182.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c810 [0182.161] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0182.161] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0182.161] wcscat (in: _Dest=0x682c810, _Source="MSTH7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" [0182.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0182.162] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 0 [0182.162] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0182.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0182.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 [0182.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 3571 os_tid = 0x1acc [0164.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29a30 [0164.731] wcscpy (in: _Dest=0x3f29a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0164.731] wcscat (in: _Dest=0x3f29a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0164.731] wcscat (in: _Dest=0x3f29a30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*" [0164.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0164.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0167.672] wcscmp (_String1=".", _String2=".") returned 0 [0167.672] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.672] wcscmp (_String1="..", _String2=".") returned 1 [0167.672] wcscmp (_String1="..", _String2="..") returned 0 [0167.672] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0167.672] wcscmp (_String1="MSPUB10.BDR", _String2=".") returned 1 [0167.672] wcscmp (_String1="MSPUB10.BDR", _String2="..") returned 1 [0167.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f25fb8 [0167.672] wcscpy (in: _Dest=0x3f25fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0167.672] wcscat (in: _Dest=0x3f25fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0167.672] wcscat (in: _Dest=0x3f25fb8, _Source="MSPUB10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" [0168.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0168.275] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0168.275] wcscmp (_String1="MSPUB11.BDR", _String2=".") returned 1 [0168.275] wcscmp (_String1="MSPUB11.BDR", _String2="..") returned 1 [0168.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cb40 [0168.275] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.275] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.275] wcscat (in: _Dest=0x682cb40, _Source="MSPUB11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" [0168.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0168.277] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0168.277] wcscmp (_String1="MSPUB1A.BDR", _String2=".") returned 1 [0168.277] wcscmp (_String1="MSPUB1A.BDR", _String2="..") returned 1 [0168.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c788 [0168.277] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.277] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.277] wcscat (in: _Dest=0x682c788, _Source="MSPUB1A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" [0168.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0168.278] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0168.278] wcscmp (_String1="MSPUB1B.BDR", _String2=".") returned 1 [0168.278] wcscmp (_String1="MSPUB1B.BDR", _String2="..") returned 1 [0168.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c898 [0168.278] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.278] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.278] wcscat (in: _Dest=0x682c898, _Source="MSPUB1B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" [0168.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0168.280] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0168.280] wcscmp (_String1="MSPUB2A.BDR", _String2=".") returned 1 [0168.280] wcscmp (_String1="MSPUB2A.BDR", _String2="..") returned 1 [0168.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c920 [0168.280] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.280] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.280] wcscat (in: _Dest=0x682c920, _Source="MSPUB2A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" [0168.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0168.281] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0168.281] wcscmp (_String1="MSPUB2B.BDR", _String2=".") returned 1 [0168.282] wcscmp (_String1="MSPUB2B.BDR", _String2="..") returned 1 [0168.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d2b0 [0168.282] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.282] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.282] wcscat (in: _Dest=0x682d2b0, _Source="MSPUB2B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" [0168.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0168.283] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0168.283] wcscmp (_String1="MSPUB3A.BDR", _String2=".") returned 1 [0168.283] wcscmp (_String1="MSPUB3A.BDR", _String2="..") returned 1 [0168.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c810 [0168.283] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.283] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.283] wcscat (in: _Dest=0x682c810, _Source="MSPUB3A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" [0168.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0168.285] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0168.285] wcscmp (_String1="MSPUB3B.BDR", _String2=".") returned 1 [0168.285] wcscmp (_String1="MSPUB3B.BDR", _String2="..") returned 1 [0168.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ce70 [0168.285] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.285] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.285] wcscat (in: _Dest=0x682ce70, _Source="MSPUB3B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" [0168.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0168.286] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0168.286] wcscmp (_String1="MSPUB4.BDR", _String2=".") returned 1 [0168.286] wcscmp (_String1="MSPUB4.BDR", _String2="..") returned 1 [0168.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674ad38 [0168.286] wcscpy (in: _Dest=0x674ad38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.286] wcscat (in: _Dest=0x674ad38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.286] wcscat (in: _Dest=0x674ad38, _Source="MSPUB4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" [0168.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ad38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0168.287] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0168.287] wcscmp (_String1="MSPUB5A.BDR", _String2=".") returned 1 [0168.287] wcscmp (_String1="MSPUB5A.BDR", _String2="..") returned 1 [0168.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d118 [0168.287] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.287] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.287] wcscat (in: _Dest=0x682d118, _Source="MSPUB5A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" [0168.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0168.289] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0168.289] wcscmp (_String1="MSPUB5B.BDR", _String2=".") returned 1 [0168.289] wcscmp (_String1="MSPUB5B.BDR", _String2="..") returned 1 [0168.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c700 [0168.289] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.289] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.289] wcscat (in: _Dest=0x682c700, _Source="MSPUB5B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" [0168.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0168.290] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0168.290] wcscmp (_String1="MSPUB6.BDR", _String2=".") returned 1 [0168.290] wcscmp (_String1="MSPUB6.BDR", _String2="..") returned 1 [0168.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c338 [0168.290] wcscpy (in: _Dest=0x674c338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.290] wcscat (in: _Dest=0x674c338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.290] wcscat (in: _Dest=0x674c338, _Source="MSPUB6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" [0168.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0168.292] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0168.292] wcscmp (_String1="MSPUB7.BDR", _String2=".") returned 1 [0168.292] wcscmp (_String1="MSPUB7.BDR", _String2="..") returned 1 [0168.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674b038 [0168.292] wcscpy (in: _Dest=0x674b038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.292] wcscat (in: _Dest=0x674b038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.292] wcscat (in: _Dest=0x674b038, _Source="MSPUB7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" [0168.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674b038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0168.293] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0168.293] wcscmp (_String1="MSPUB8.BDR", _String2=".") returned 1 [0168.293] wcscmp (_String1="MSPUB8.BDR", _String2="..") returned 1 [0168.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c7b8 [0168.293] wcscpy (in: _Dest=0x674c7b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.293] wcscat (in: _Dest=0x674c7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.293] wcscat (in: _Dest=0x674c7b8, _Source="MSPUB8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" [0168.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674c7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0168.295] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0168.295] wcscmp (_String1="MSPUB9.BDR", _String2=".") returned 1 [0168.295] wcscmp (_String1="MSPUB9.BDR", _String2="..") returned 1 [0168.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674bcb8 [0168.295] wcscpy (in: _Dest=0x674bcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0168.295] wcscat (in: _Dest=0x674bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0168.295] wcscat (in: _Dest=0x674bcb8, _Source="MSPUB9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" [0168.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0168.296] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0168.296] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0168.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0168.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 [0168.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 3572 os_tid = 0xdd8 [0164.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3f29db0 [0164.732] wcscpy (in: _Dest=0x3f29db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0164.732] wcscat (in: _Dest=0x3f29db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0164.732] wcscat (in: _Dest=0x3f29db0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*" [0164.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12980 [0164.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25a0 [0167.978] wcscmp (_String1=".", _String2=".") returned 0 [0167.978] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.442] wcscmp (_String1="..", _String2=".") returned 1 [0168.442] wcscmp (_String1="..", _String2="..") returned 0 [0168.442] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0168.442] wcscmp (_String1="ACCSBAR.POC", _String2=".") returned 1 [0168.442] wcscmp (_String1="ACCSBAR.POC", _String2="..") returned 1 [0168.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cf80 [0168.443] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0168.443] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0168.443] wcscat (in: _Dest=0x682cf80, _Source="ACCSBAR.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" [0172.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc")) returned 0x20 [0173.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x20) returned 0 [0173.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.658] GetLastError () returned 0x5 [0173.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x20) returned 0 [0173.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 [0173.658] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0173.658] wcscmp (_String1="ACCTBOX.POC", _String2=".") returned 1 [0173.658] wcscmp (_String1="ACCTBOX.POC", _String2="..") returned 1 [0173.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cf80 [0173.658] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0173.658] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0173.658] wcscat (in: _Dest=0x682cf80, _Source="ACCTBOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" [0174.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cf80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0174.620] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0174.620] wcscmp (_String1="AD.DPV", _String2=".") returned 1 [0174.620] wcscmp (_String1="AD.DPV", _String2="..") returned 1 [0174.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674bdb8 [0174.620] wcscpy (in: _Dest=0x674bdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.620] wcscat (in: _Dest=0x674bdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.620] wcscat (in: _Dest=0x674bdb8, _Source="AD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" [0174.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0174.622] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f2f00, ftCreationTime.dwHighDateTime=0x1c91826, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f2f00, ftLastWriteTime.dwHighDateTime=0x1c91826, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0174.622] wcscmp (_String1="AD.XML", _String2=".") returned 1 [0174.622] wcscmp (_String1="AD.XML", _String2="..") returned 1 [0174.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x674ab38 [0174.622] wcscpy (in: _Dest=0x674ab38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.622] wcscat (in: _Dest=0x674ab38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.622] wcscat (in: _Dest=0x674ab38, _Source="AD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" [0174.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ab38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0174.623] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0174.624] wcscmp (_String1="AD98.POC", _String2=".") returned 1 [0174.624] wcscmp (_String1="AD98.POC", _String2="..") returned 1 [0174.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x674ae38 [0174.624] wcscpy (in: _Dest=0x674ae38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.624] wcscat (in: _Dest=0x674ae38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.624] wcscat (in: _Dest=0x674ae38, _Source="AD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" [0174.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ae38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0174.625] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76535cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0174.625] wcscmp (_String1="ADRESPEL.POC", _String2=".") returned 1 [0174.625] wcscmp (_String1="ADRESPEL.POC", _String2="..") returned 1 [0174.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef730 [0174.625] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.625] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.625] wcscat (in: _Dest=0x66ef730, _Source="ADRESPEL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" [0174.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0174.626] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0174.626] wcscmp (_String1="AIR98.POC", _String2=".") returned 1 [0174.626] wcscmp (_String1="AIR98.POC", _String2="..") returned 1 [0174.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674bbb8 [0174.627] wcscpy (in: _Dest=0x674bbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.627] wcscat (in: _Dest=0x674bbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.627] wcscat (in: _Dest=0x674bbb8, _Source="AIR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" [0174.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0174.628] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0174.628] wcscmp (_String1="AWARDHM.POC", _String2=".") returned 1 [0174.628] wcscmp (_String1="AWARDHM.POC", _String2="..") returned 1 [0174.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66f03f0 [0174.628] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.630] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.630] wcscat (in: _Dest=0x66f03f0, _Source="AWARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" [0174.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0174.631] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0174.631] wcscmp (_String1="BAN98.POC", _String2=".") returned 1 [0174.631] wcscmp (_String1="BAN98.POC", _String2="..") returned 1 [0174.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674af38 [0174.631] wcscpy (in: _Dest=0x674af38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.631] wcscat (in: _Dest=0x674af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.631] wcscat (in: _Dest=0x674af38, _Source="BAN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" [0174.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0174.633] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0174.633] wcscmp (_String1="BANNER.DPV", _String2=".") returned 1 [0174.633] wcscmp (_String1="BANNER.DPV", _String2="..") returned 1 [0174.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66f0148 [0174.633] wcscpy (in: _Dest=0x66f0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.633] wcscat (in: _Dest=0x66f0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.633] wcscat (in: _Dest=0x66f0148, _Source="BANNER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" [0174.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0174.634] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5075b00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5075b00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0174.635] wcscmp (_String1="BANNER.XML", _String2=".") returned 1 [0174.635] wcscmp (_String1="BANNER.XML", _String2="..") returned 1 [0174.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66effb0 [0174.635] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.635] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.635] wcscat (in: _Dest=0x66effb0, _Source="BANNER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" [0174.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0174.636] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0174.636] wcscmp (_String1="BDRTKFUL.POC", _String2=".") returned 1 [0174.636] wcscmp (_String1="BDRTKFUL.POC", _String2="..") returned 1 [0174.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee7c8 [0174.637] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.637] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.637] wcscat (in: _Dest=0x66ee7c8, _Source="BDRTKFUL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" [0174.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0174.638] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1 [0174.638] wcscmp (_String1="BIZCARD.DPV", _String2=".") returned 1 [0174.638] wcscmp (_String1="BIZCARD.DPV", _String2="..") returned 1 [0174.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efea0 [0174.638] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.638] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.638] wcscat (in: _Dest=0x66efea0, _Source="BIZCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" [0174.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0174.639] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02c200, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd02c200, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1 [0174.639] wcscmp (_String1="BIZCARD.XML", _String2=".") returned 1 [0174.639] wcscmp (_String1="BIZCARD.XML", _String2="..") returned 1 [0174.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee960 [0174.639] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.639] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.639] wcscat (in: _Dest=0x66ee960, _Source="BIZCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" [0174.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0174.641] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0c4700, ftCreationTime.dwHighDateTime=0x1c5eecc, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f0c4700, ftLastWriteTime.dwHighDateTime=0x1c5eecc, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1 [0174.641] wcscmp (_String1="BIZFORM.DPV", _String2=".") returned 1 [0174.641] wcscmp (_String1="BIZFORM.DPV", _String2="..") returned 1 [0174.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef9d8 [0174.641] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.641] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.641] wcscat (in: _Dest=0x66ef9d8, _Source="BIZFORM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" [0174.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0174.642] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceb4a500, ftCreationTime.dwHighDateTime=0x1ca5cbd, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xceb4a500, ftLastWriteTime.dwHighDateTime=0x1ca5cbd, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1 [0174.642] wcscmp (_String1="BIZFORM.XML", _String2=".") returned 1 [0174.642] wcscmp (_String1="BIZFORM.XML", _String2="..") returned 1 [0174.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef400 [0174.642] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.642] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.642] wcscat (in: _Dest=0x66ef400, _Source="BIZFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" [0174.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0174.644] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3378a00, ftCreationTime.dwHighDateTime=0x1c9c8e6, ftLastAccessTime.dwLowDateTime=0x76d185b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3378a00, ftLastWriteTime.dwHighDateTime=0x1c9c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1 [0174.644] wcscmp (_String1="BORDERBB.DPV", _String2=".") returned 1 [0174.644] wcscmp (_String1="BORDERBB.DPV", _String2="..") returned 1 [0174.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef378 [0174.644] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.644] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.644] wcscat (in: _Dest=0x66ef378, _Source="BORDERBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" [0174.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0174.645] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923ec00, ftCreationTime.dwHighDateTime=0x1c97a67, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd923ec00, ftLastWriteTime.dwHighDateTime=0x1c97a67, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1 [0174.645] wcscmp (_String1="BORDERBB.POC", _String2=".") returned 1 [0174.645] wcscmp (_String1="BORDERBB.POC", _String2="..") returned 1 [0174.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee9e8 [0174.645] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.645] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.645] wcscat (in: _Dest=0x66ee9e8, _Source="BORDERBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" [0174.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0174.648] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450d6300, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x450d6300, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1 [0174.648] wcscmp (_String1="BRCH98SP.POC", _String2=".") returned 1 [0174.648] wcscmp (_String1="BRCH98SP.POC", _String2="..") returned 1 [0174.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eee28 [0174.648] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.648] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.648] wcscat (in: _Dest=0x66eee28, _Source="BRCH98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" [0174.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0174.650] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc7f800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc7f800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1 [0174.650] wcscmp (_String1="BRCHUR11.POC", _String2=".") returned 1 [0174.650] wcscmp (_String1="BRCHUR11.POC", _String2="..") returned 1 [0174.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eea70 [0174.650] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.650] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.650] wcscat (in: _Dest=0x66eea70, _Source="BRCHUR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" [0174.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0174.651] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1 [0174.651] wcscmp (_String1="BRCHUR98.POC", _String2=".") returned 1 [0174.652] wcscmp (_String1="BRCHUR98.POC", _String2="..") returned 1 [0174.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eefc0 [0174.652] wcscpy (in: _Dest=0x66eefc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.652] wcscat (in: _Dest=0x66eefc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.652] wcscat (in: _Dest=0x66eefc0, _Source="BRCHUR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" [0174.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eefc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0174.653] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1333500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1333500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1 [0174.653] wcscmp (_String1="BROCHURE.DPV", _String2=".") returned 1 [0174.653] wcscmp (_String1="BROCHURE.DPV", _String2="..") returned 1 [0174.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efbf8 [0174.653] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.653] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.653] wcscat (in: _Dest=0x66efbf8, _Source="BROCHURE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" [0174.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0174.655] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad53ba00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad53ba00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1 [0174.655] wcscmp (_String1="BROCHURE.XML", _String2=".") returned 1 [0174.655] wcscmp (_String1="BROCHURE.XML", _String2="..") returned 1 [0174.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef1e0 [0174.655] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.655] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.655] wcscat (in: _Dest=0x66ef1e0, _Source="BROCHURE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" [0174.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0174.656] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1 [0174.656] wcscmp (_String1="BS2BARB.POC", _String2=".") returned 1 [0174.656] wcscmp (_String1="BS2BARB.POC", _String2="..") returned 1 [0174.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eeb80 [0174.656] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.656] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.656] wcscat (in: _Dest=0x66eeb80, _Source="BS2BARB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" [0174.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0174.920] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1 [0174.920] wcscmp (_String1="BS4BOXES.POC", _String2=".") returned 1 [0174.920] wcscmp (_String1="BS4BOXES.POC", _String2="..") returned 1 [0174.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef048 [0174.920] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.920] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.920] wcscat (in: _Dest=0x66ef048, _Source="BS4BOXES.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" [0175.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0175.754] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1 [0175.754] wcscmp (_String1="BS53BOXS.POC", _String2=".") returned 1 [0175.754] wcscmp (_String1="BS53BOXS.POC", _String2="..") returned 1 [0175.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26a58 [0175.754] wcscpy (in: _Dest=0x3f26a58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.754] wcscat (in: _Dest=0x3f26a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.754] wcscat (in: _Dest=0x3f26a58, _Source="BS53BOXS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" [0175.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0175.755] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1 [0175.755] wcscmp (_String1="BZCARD11.POC", _String2=".") returned 1 [0175.755] wcscmp (_String1="BZCARD11.POC", _String2="..") returned 1 [0175.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f25f30 [0175.755] wcscpy (in: _Dest=0x3f25f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.755] wcscat (in: _Dest=0x3f25f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.755] wcscat (in: _Dest=0x3f25f30, _Source="BZCARD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" [0175.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f25f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0175.757] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1 [0175.757] wcscmp (_String1="BZCARDHM.POC", _String2=".") returned 1 [0175.757] wcscmp (_String1="BZCARDHM.POC", _String2="..") returned 1 [0175.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26590 [0175.757] wcscpy (in: _Dest=0x3f26590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.757] wcscat (in: _Dest=0x3f26590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.757] wcscat (in: _Dest=0x3f26590, _Source="BZCARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" [0175.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0175.758] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1 [0175.758] wcscmp (_String1="BZCD98SP.POC", _String2=".") returned 1 [0175.758] wcscmp (_String1="BZCD98SP.POC", _String2="..") returned 1 [0175.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26838 [0175.758] wcscpy (in: _Dest=0x3f26838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.758] wcscat (in: _Dest=0x3f26838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.758] wcscat (in: _Dest=0x3f26838, _Source="BZCD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" [0175.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0175.760] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738b3e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738b3e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1 [0175.760] wcscmp (_String1="BZCRD98.POC", _String2=".") returned 1 [0175.760] wcscmp (_String1="BZCRD98.POC", _String2="..") returned 1 [0175.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f260c8 [0175.760] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.760] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.760] wcscat (in: _Dest=0x3f260c8, _Source="BZCRD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" [0175.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f260c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0175.761] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbedca00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbedca00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1 [0175.761] wcscmp (_String1="CALENDAR.DPV", _String2=".") returned 1 [0175.761] wcscmp (_String1="CALENDAR.DPV", _String2="..") returned 1 [0175.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26fa8 [0175.761] wcscpy (in: _Dest=0x3f26fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.761] wcscat (in: _Dest=0x3f26fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.761] wcscat (in: _Dest=0x3f26fa8, _Source="CALENDAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" [0175.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0175.762] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34656b00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34656b00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1 [0175.762] wcscmp (_String1="CALENDAR.XML", _String2=".") returned 1 [0175.763] wcscmp (_String1="CALENDAR.XML", _String2="..") returned 1 [0175.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26d88 [0175.763] wcscpy (in: _Dest=0x3f26d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.763] wcscat (in: _Dest=0x3f26d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.763] wcscat (in: _Dest=0x3f26d88, _Source="CALENDAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" [0175.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0175.764] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771ec500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x771ec500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1 [0175.764] wcscmp (_String1="CALHM.POC", _String2=".") returned 1 [0175.764] wcscmp (_String1="CALHM.POC", _String2="..") returned 1 [0175.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674bdb8 [0175.764] wcscpy (in: _Dest=0x674bdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.764] wcscat (in: _Dest=0x674bdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.764] wcscat (in: _Dest=0x674bdb8, _Source="CALHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" [0175.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674bdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0175.765] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e759200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76e490b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e759200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1 [0175.767] wcscmp (_String1="CALNDR98.POC", _String2=".") returned 1 [0175.767] wcscmp (_String1="CALNDR98.POC", _String2="..") returned 1 [0175.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f266a0 [0175.767] wcscpy (in: _Dest=0x3f266a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0175.767] wcscat (in: _Dest=0x3f266a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0175.767] wcscat (in: _Dest=0x3f266a0, _Source="CALNDR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" [0176.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f266a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0176.487] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2091900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2091900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1 [0176.487] wcscmp (_String1="CALSO11.POC", _String2=".") returned 1 [0176.487] wcscmp (_String1="CALSO11.POC", _String2="..") returned 1 [0176.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef048 [0176.488] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.488] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.488] wcscat (in: _Dest=0x66ef048, _Source="CALSO11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" [0176.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0176.489] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3ae00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc3ae00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1 [0176.489] wcscmp (_String1="CALSO98.POC", _String2=".") returned 1 [0176.489] wcscmp (_String1="CALSO98.POC", _String2="..") returned 1 [0176.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef730 [0176.489] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.489] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.489] wcscat (in: _Dest=0x66ef730, _Source="CALSO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" [0176.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0176.491] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0c2700, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba0c2700, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1 [0176.491] wcscmp (_String1="CATALOG.DPV", _String2=".") returned 1 [0176.491] wcscmp (_String1="CATALOG.DPV", _String2="..") returned 1 [0176.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef1e0 [0176.491] wcscpy (in: _Dest=0x66ef1e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.491] wcscat (in: _Dest=0x66ef1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.491] wcscat (in: _Dest=0x66ef1e0, _Source="CATALOG.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" [0176.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0176.492] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8c7900, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b8c7900, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1 [0176.493] wcscmp (_String1="CATALOG.XML", _String2=".") returned 1 [0176.493] wcscmp (_String1="CATALOG.XML", _String2="..") returned 1 [0176.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eea70 [0176.493] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.493] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.493] wcscat (in: _Dest=0x66eea70, _Source="CATALOG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" [0176.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0176.494] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1886200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1886200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1 [0176.494] wcscmp (_String1="CATWIZ.POC", _String2=".") returned 1 [0176.494] wcscmp (_String1="CATWIZ.POC", _String2="..") returned 1 [0176.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66eee28 [0176.494] wcscpy (in: _Dest=0x66eee28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.494] wcscat (in: _Dest=0x66eee28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.494] wcscat (in: _Dest=0x66eee28, _Source="CATWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" [0176.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eee28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0176.496] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1 [0176.496] wcscmp (_String1="CATWIZ11.POC", _String2=".") returned 1 [0176.496] wcscmp (_String1="CATWIZ11.POC", _String2="..") returned 1 [0176.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee9e8 [0176.496] wcscpy (in: _Dest=0x66ee9e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.496] wcscat (in: _Dest=0x66ee9e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.496] wcscat (in: _Dest=0x66ee9e8, _Source="CATWIZ11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" [0176.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0176.500] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e92000, ftCreationTime.dwHighDateTime=0x1c6528d, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e92000, ftLastWriteTime.dwHighDateTime=0x1c6528d, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1 [0176.500] wcscmp (_String1="CERT.DPV", _String2=".") returned 1 [0176.500] wcscmp (_String1="CERT.DPV", _String2="..") returned 1 [0176.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f7f0 [0176.500] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.500] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.500] wcscat (in: _Dest=0x3e0f7f0, _Source="CERT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" [0176.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0176.501] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46470e00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46470e00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.XML", cAlternateFileName="")) returned 1 [0176.501] wcscmp (_String1="CERT.XML", _String2=".") returned 1 [0176.501] wcscmp (_String1="CERT.XML", _String2="..") returned 1 [0176.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f470 [0176.502] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.502] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.502] wcscat (in: _Dest=0x3e0f470, _Source="CERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" [0176.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0176.503] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1 [0176.503] wcscmp (_String1="CERT98.POC", _String2=".") returned 1 [0176.503] wcscmp (_String1="CERT98.POC", _String2="..") returned 1 [0176.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ef378 [0176.503] wcscpy (in: _Dest=0x66ef378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.503] wcscat (in: _Dest=0x66ef378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.503] wcscat (in: _Dest=0x66ef378, _Source="CERT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" [0176.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0176.505] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1 [0176.505] wcscmp (_String1="CERT98SP.POC", _String2=".") returned 1 [0176.505] wcscmp (_String1="CERT98SP.POC", _String2="..") returned 1 [0176.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef400 [0176.505] wcscpy (in: _Dest=0x66ef400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.505] wcscat (in: _Dest=0x66ef400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.505] wcscat (in: _Dest=0x66ef400, _Source="CERT98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" [0176.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0176.508] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1 [0176.508] wcscmp (_String1="CHECKER.POC", _String2=".") returned 1 [0176.508] wcscmp (_String1="CHECKER.POC", _String2="..") returned 1 [0176.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef9d8 [0176.508] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.508] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.509] wcscat (in: _Dest=0x66ef9d8, _Source="CHECKER.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" [0176.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0176.510] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28637200, ftCreationTime.dwHighDateTime=0x1c9c765, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28637200, ftLastWriteTime.dwHighDateTime=0x1c9c765, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="CONTAC~1.DPV")) returned 1 [0176.510] wcscmp (_String1="CONTACTINFOBB.DPV", _String2=".") returned 1 [0176.510] wcscmp (_String1="CONTACTINFOBB.DPV", _String2="..") returned 1 [0176.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e918 [0176.510] wcscpy (in: _Dest=0x674e918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.510] wcscat (in: _Dest=0x674e918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.510] wcscat (in: _Dest=0x674e918, _Source="CONTACTINFOBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" [0176.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0176.511] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a82ab00, ftCreationTime.dwHighDateTime=0x1c9c379, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a82ab00, ftLastWriteTime.dwHighDateTime=0x1c9c379, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="CONTAC~1.POC")) returned 1 [0176.511] wcscmp (_String1="CONTACTINFOBB.POC", _String2=".") returned 1 [0176.511] wcscmp (_String1="CONTACTINFOBB.POC", _String2="..") returned 1 [0176.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674e9a8 [0176.512] wcscpy (in: _Dest=0x674e9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.512] wcscat (in: _Dest=0x674e9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.512] wcscat (in: _Dest=0x674e9a8, _Source="CONTACTINFOBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" [0176.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0176.513] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1 [0176.513] wcscmp (_String1="COUPON.POC", _String2=".") returned 1 [0176.513] wcscmp (_String1="COUPON.POC", _String2="..") returned 1 [0176.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x66ee960 [0176.513] wcscpy (in: _Dest=0x66ee960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.513] wcscat (in: _Dest=0x66ee960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.514] wcscat (in: _Dest=0x66ee960, _Source="COUPON.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" [0176.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0176.515] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25252000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25252000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1 [0176.515] wcscmp (_String1="DGACCBAR.DPV", _String2=".") returned 1 [0176.515] wcscmp (_String1="DGACCBAR.DPV", _String2="..") returned 1 [0176.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efea0 [0176.515] wcscpy (in: _Dest=0x66efea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.515] wcscat (in: _Dest=0x66efea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.515] wcscat (in: _Dest=0x66efea0, _Source="DGACCBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" [0176.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0176.517] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1 [0176.517] wcscmp (_String1="DGACCBAR.XML", _String2=".") returned 1 [0176.517] wcscmp (_String1="DGACCBAR.XML", _String2="..") returned 1 [0176.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee7c8 [0176.517] wcscpy (in: _Dest=0x66ee7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.517] wcscat (in: _Dest=0x66ee7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.517] wcscat (in: _Dest=0x66ee7c8, _Source="DGACCBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" [0176.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0176.518] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f3f300, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23f3f300, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1 [0176.518] wcscmp (_String1="DGACCBOX.DPV", _String2=".") returned 1 [0176.518] wcscmp (_String1="DGACCBOX.DPV", _String2="..") returned 1 [0176.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66f03f0 [0176.518] wcscpy (in: _Dest=0x66f03f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.519] wcscat (in: _Dest=0x66f03f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.519] wcscat (in: _Dest=0x66f03f0, _Source="DGACCBOX.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" [0176.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66f03f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0176.520] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b375400, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b375400, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1 [0176.520] wcscmp (_String1="DGACCBOX.XML", _String2=".") returned 1 [0176.520] wcscmp (_String1="DGACCBOX.XML", _String2="..") returned 1 [0176.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eeb80 [0176.520] wcscpy (in: _Dest=0x66eeb80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.520] wcscat (in: _Dest=0x66eeb80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.520] wcscat (in: _Dest=0x66eeb80, _Source="DGACCBOX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" [0176.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0176.522] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d61c100, ftCreationTime.dwHighDateTime=0x1c60006, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d61c100, ftLastWriteTime.dwHighDateTime=0x1c60006, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1 [0176.522] wcscmp (_String1="DGAD.DPV", _String2=".") returned 1 [0176.522] wcscmp (_String1="DGAD.DPV", _String2="..") returned 1 [0176.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10bf0 [0176.522] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.522] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.522] wcscat (in: _Dest=0x3e10bf0, _Source="DGAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" [0176.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0176.523] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38f8f00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa38f8f00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1 [0176.523] wcscmp (_String1="DGAD.XML", _String2=".") returned 1 [0176.523] wcscmp (_String1="DGAD.XML", _String2="..") returned 1 [0176.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e100f0 [0176.524] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.524] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.524] wcscat (in: _Dest=0x3e100f0, _Source="DGAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" [0176.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0176.525] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e64a900, ftCreationTime.dwHighDateTime=0x1c7e927, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e64a900, ftLastWriteTime.dwHighDateTime=0x1c7e927, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1 [0176.525] wcscmp (_String1="DGATNGET.DPV", _String2=".") returned 1 [0176.525] wcscmp (_String1="DGATNGET.DPV", _String2="..") returned 1 [0176.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eec08 [0176.525] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.525] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.525] wcscat (in: _Dest=0x66eec08, _Source="DGATNGET.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" [0176.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0176.527] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe7ca00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe7ca00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1 [0176.527] wcscmp (_String1="DGATNGET.XML", _String2=".") returned 1 [0176.527] wcscmp (_String1="DGATNGET.XML", _String2="..") returned 1 [0176.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef0d0 [0176.527] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.527] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.527] wcscat (in: _Dest=0x66ef0d0, _Source="DGATNGET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" [0176.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0176.836] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1 [0176.836] wcscmp (_String1="DGBARBLL.DPV", _String2=".") returned 1 [0176.836] wcscmp (_String1="DGBARBLL.DPV", _String2="..") returned 1 [0176.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d1a0 [0176.836] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0176.836] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0176.837] wcscat (in: _Dest=0x682d1a0, _Source="DGBARBLL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" [0177.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0177.454] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1 [0177.454] wcscmp (_String1="DGBARBLL.XML", _String2=".") returned 1 [0177.454] wcscmp (_String1="DGBARBLL.XML", _String2="..") returned 1 [0177.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee740 [0177.454] wcscpy (in: _Dest=0x66ee740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.454] wcscat (in: _Dest=0x66ee740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.454] wcscat (in: _Dest=0x66ee740, _Source="DGBARBLL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" [0177.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0177.455] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1 [0177.456] wcscmp (_String1="DGBORDER.DPV", _String2=".") returned 1 [0177.456] wcscmp (_String1="DGBORDER.DPV", _String2="..") returned 1 [0177.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efbf8 [0177.456] wcscpy (in: _Dest=0x66efbf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.456] wcscat (in: _Dest=0x66efbf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.456] wcscat (in: _Dest=0x66efbf8, _Source="DGBORDER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" [0177.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0177.457] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec72200, ftCreationTime.dwHighDateTime=0x1c9a1b2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ec72200, ftLastWriteTime.dwHighDateTime=0x1c9a1b2, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1 [0177.457] wcscmp (_String1="DGBORDER.XML", _String2=".") returned 1 [0177.457] wcscmp (_String1="DGBORDER.XML", _String2="..") returned 1 [0177.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66effb0 [0177.457] wcscpy (in: _Dest=0x66effb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.457] wcscat (in: _Dest=0x66effb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.457] wcscat (in: _Dest=0x66effb0, _Source="DGBORDER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" [0177.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66effb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0177.459] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1 [0177.459] wcscmp (_String1="DGBOXES.DPV", _String2=".") returned 1 [0177.459] wcscmp (_String1="DGBOXES.DPV", _String2="..") returned 1 [0177.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef730 [0177.459] wcscpy (in: _Dest=0x66ef730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.459] wcscat (in: _Dest=0x66ef730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.459] wcscat (in: _Dest=0x66ef730, _Source="DGBOXES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" [0177.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0177.460] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc752d500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc752d500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1 [0177.460] wcscmp (_String1="DGBOXES.XML", _String2=".") returned 1 [0177.460] wcscmp (_String1="DGBOXES.XML", _String2="..") returned 1 [0177.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef048 [0177.460] wcscpy (in: _Dest=0x66ef048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.460] wcscat (in: _Dest=0x66ef048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.460] wcscat (in: _Dest=0x66ef048, _Source="DGBOXES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" [0177.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0177.462] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ccc200, ftCreationTime.dwHighDateTime=0x1c685d3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9ccc200, ftLastWriteTime.dwHighDateTime=0x1c685d3, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1 [0177.462] wcscmp (_String1="DGCAL.DPV", _String2=".") returned 1 [0177.462] wcscmp (_String1="DGCAL.DPV", _String2="..") returned 1 [0177.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3edbdf8 [0177.462] wcscpy (in: _Dest=0x3edbdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.462] wcscat (in: _Dest=0x3edbdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.462] wcscat (in: _Dest=0x3edbdf8, _Source="DGCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" [0177.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edbdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0177.463] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0dc3d00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0dc3d00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1 [0177.463] wcscmp (_String1="DGCAL.XML", _String2=".") returned 1 [0177.463] wcscmp (_String1="DGCAL.XML", _String2="..") returned 1 [0177.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3eda378 [0177.463] wcscpy (in: _Dest=0x3eda378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.463] wcscat (in: _Dest=0x3eda378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.463] wcscat (in: _Dest=0x3eda378, _Source="DGCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" [0177.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3eda378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0177.464] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f8ebd00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f8ebd00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1 [0177.464] wcscmp (_String1="DGCHKBRD.DPV", _String2=".") returned 1 [0177.464] wcscmp (_String1="DGCHKBRD.DPV", _String2="..") returned 1 [0177.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66eeaf8 [0177.465] wcscpy (in: _Dest=0x66eeaf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.465] wcscat (in: _Dest=0x66eeaf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.465] wcscat (in: _Dest=0x66eeaf8, _Source="DGCHKBRD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" [0177.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eeaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0177.466] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1 [0177.466] wcscmp (_String1="DGCHKBRD.XML", _String2=".") returned 1 [0177.466] wcscmp (_String1="DGCHKBRD.XML", _String2="..") returned 1 [0177.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ee498 [0177.466] wcscpy (in: _Dest=0x66ee498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.466] wcscat (in: _Dest=0x66ee498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.466] wcscat (in: _Dest=0x66ee498, _Source="DGCHKBRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" [0177.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0177.467] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b3ce00, ftCreationTime.dwHighDateTime=0x1c9c4f3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9b3ce00, ftLastWriteTime.dwHighDateTime=0x1c9c4f3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1 [0177.467] wcscmp (_String1="DGCINFO.XML", _String2=".") returned 1 [0177.467] wcscmp (_String1="DGCINFO.XML", _String2="..") returned 1 [0177.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eed18 [0177.467] wcscpy (in: _Dest=0x66eed18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0177.467] wcscat (in: _Dest=0x66eed18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0177.467] wcscat (in: _Dest=0x66eed18, _Source="DGCINFO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" [0177.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eed18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0177.468] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffd000, ftCreationTime.dwHighDateTime=0x1c5e958, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99ffd000, ftLastWriteTime.dwHighDateTime=0x1c5e958, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1 [0178.913] wcscmp (_String1="DGCOUPON.DPV", _String2=".") returned 1 [0178.913] wcscmp (_String1="DGCOUPON.DPV", _String2="..") returned 1 [0178.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66efae8 [0178.913] wcscpy (in: _Dest=0x66efae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0178.913] wcscat (in: _Dest=0x66efae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0178.913] wcscat (in: _Dest=0x66efae8, _Source="DGCOUPON.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" [0181.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66efae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0181.773] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18cb300, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe18cb300, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1 [0181.773] wcscmp (_String1="DGCOUPON.XML", _String2=".") returned 1 [0181.773] wcscmp (_String1="DGCOUPON.XML", _String2="..") returned 1 [0181.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682be80 [0181.773] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.773] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.773] wcscat (in: _Dest=0x682be80, _Source="DGCOUPON.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" [0181.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0181.774] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1 [0181.774] wcscmp (_String1="DGDOTS.DPV", _String2=".") returned 1 [0181.774] wcscmp (_String1="DGDOTS.DPV", _String2="..") returned 1 [0181.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c5f0 [0181.774] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.774] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.774] wcscat (in: _Dest=0x682c5f0, _Source="DGDOTS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" [0181.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0181.776] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f092000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f092000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1 [0181.776] wcscmp (_String1="DGDOTS.XML", _String2=".") returned 1 [0181.776] wcscmp (_String1="DGDOTS.XML", _String2="..") returned 1 [0181.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d910 [0181.776] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.776] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.776] wcscat (in: _Dest=0x682d910, _Source="DGDOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" [0181.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0181.777] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd977c00, ftCreationTime.dwHighDateTime=0x1ca0949, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd977c00, ftLastWriteTime.dwHighDateTime=0x1ca0949, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGHEADING.XML", cAlternateFileName="DGHEAD~1.XML")) returned 1 [0181.777] wcscmp (_String1="DGHEADING.XML", _String2=".") returned 1 [0181.777] wcscmp (_String1="DGHEADING.XML", _String2="..") returned 1 [0181.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c1b0 [0181.777] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.777] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.777] wcscat (in: _Dest=0x682c1b0, _Source="DGHEADING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" [0181.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0181.779] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1 [0181.779] wcscmp (_String1="DGLINACC.DPV", _String2=".") returned 1 [0181.779] wcscmp (_String1="DGLINACC.DPV", _String2="..") returned 1 [0181.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c3d0 [0181.779] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.779] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.779] wcscat (in: _Dest=0x682c3d0, _Source="DGLINACC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" [0181.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0181.780] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37615b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37615b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1 [0181.780] wcscmp (_String1="DGLINACC.XML", _String2=".") returned 1 [0181.780] wcscmp (_String1="DGLINACC.XML", _String2="..") returned 1 [0181.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bdf8 [0181.780] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.780] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.780] wcscat (in: _Dest=0x682bdf8, _Source="DGLINACC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" [0181.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0181.781] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1 [0181.782] wcscmp (_String1="DGLOGO.DPV", _String2=".") returned 1 [0181.782] wcscmp (_String1="DGLOGO.DPV", _String2="..") returned 1 [0181.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c0a0 [0181.782] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.782] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.782] wcscat (in: _Dest=0x682c0a0, _Source="DGLOGO.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" [0181.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0181.783] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb99600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fb99600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1 [0181.783] wcscmp (_String1="DGLOGO.XML", _String2=".") returned 1 [0181.783] wcscmp (_String1="DGLOGO.XML", _String2="..") returned 1 [0181.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d338 [0181.783] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.783] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.783] wcscat (in: _Dest=0x682d338, _Source="DGLOGO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" [0181.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0181.784] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606a200, ftCreationTime.dwHighDateTime=0x1ca5800, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5606a200, ftLastWriteTime.dwHighDateTime=0x1ca5800, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1 [0181.784] wcscmp (_String1="DGMAIN.XML", _String2=".") returned 1 [0181.784] wcscmp (_String1="DGMAIN.XML", _String2="..") returned 1 [0181.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bf90 [0181.784] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.785] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.785] wcscat (in: _Dest=0x682bf90, _Source="DGMAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" [0181.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0181.786] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1 [0181.786] wcscmp (_String1="DGMARQ.DPV", _String2=".") returned 1 [0181.786] wcscmp (_String1="DGMARQ.DPV", _String2="..") returned 1 [0181.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d3c0 [0181.786] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.786] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.786] wcscat (in: _Dest=0x682d3c0, _Source="DGMARQ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" [0181.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0181.787] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f38df00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f38df00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1 [0181.787] wcscmp (_String1="DGMARQ.XML", _String2=".") returned 1 [0181.787] wcscmp (_String1="DGMARQ.XML", _String2="..") returned 1 [0181.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d448 [0181.787] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.787] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.788] wcscat (in: _Dest=0x682d448, _Source="DGMARQ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" [0181.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0181.789] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b500, ftCreationTime.dwHighDateTime=0x1c7e92d, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x335b500, ftLastWriteTime.dwHighDateTime=0x1c7e92d, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1 [0181.789] wcscmp (_String1="DGMASTHD.DPV", _String2=".") returned 1 [0181.789] wcscmp (_String1="DGMASTHD.DPV", _String2="..") returned 1 [0181.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d4d0 [0181.789] wcscpy (in: _Dest=0x682d4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.789] wcscat (in: _Dest=0x682d4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.789] wcscat (in: _Dest=0x682d4d0, _Source="DGMASTHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" [0181.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0181.790] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df85b00, ftCreationTime.dwHighDateTime=0x1c62793, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3df85b00, ftLastWriteTime.dwHighDateTime=0x1c62793, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1 [0181.790] wcscmp (_String1="DGNAVBAR.DPV", _String2=".") returned 1 [0181.791] wcscmp (_String1="DGNAVBAR.DPV", _String2="..") returned 1 [0181.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d558 [0181.791] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.791] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.791] wcscat (in: _Dest=0x682d558, _Source="DGNAVBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" [0181.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0181.792] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fe6600, ftCreationTime.dwHighDateTime=0x1c944f8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24fe6600, ftLastWriteTime.dwHighDateTime=0x1c944f8, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1 [0181.792] wcscmp (_String1="DGNAVBAR.XML", _String2=".") returned 1 [0181.792] wcscmp (_String1="DGNAVBAR.XML", _String2="..") returned 1 [0181.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d5e0 [0181.792] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.792] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.792] wcscat (in: _Dest=0x682d5e0, _Source="DGNAVBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" [0181.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0181.794] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c35500, ftCreationTime.dwHighDateTime=0x1c9a70e, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c35500, ftLastWriteTime.dwHighDateTime=0x1c9a70e, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1 [0181.794] wcscmp (_String1="DGPICCAP.DPV", _String2=".") returned 1 [0181.794] wcscmp (_String1="DGPICCAP.DPV", _String2="..") returned 1 [0181.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d668 [0181.794] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.794] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.794] wcscat (in: _Dest=0x682d668, _Source="DGPICCAP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" [0181.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0181.795] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbf3e00, ftCreationTime.dwHighDateTime=0x1c9a725, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cbf3e00, ftLastWriteTime.dwHighDateTime=0x1c9a725, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1 [0181.796] wcscmp (_String1="DGPICCAP.XML", _String2=".") returned 1 [0181.796] wcscmp (_String1="DGPICCAP.XML", _String2="..") returned 1 [0181.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d6f0 [0181.796] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.796] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.796] wcscat (in: _Dest=0x682d6f0, _Source="DGPICCAP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" [0181.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0181.799] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1e5a00, ftCreationTime.dwHighDateTime=0x1c7e47b, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1e5a00, ftLastWriteTime.dwHighDateTime=0x1c7e47b, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1 [0181.799] wcscmp (_String1="DGPQUOT.DPV", _String2=".") returned 1 [0181.799] wcscmp (_String1="DGPQUOT.DPV", _String2="..") returned 1 [0181.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d778 [0181.799] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.799] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.799] wcscat (in: _Dest=0x682d778, _Source="DGPQUOT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" [0181.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0181.800] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849e300, ftCreationTime.dwHighDateTime=0x1c97a6a, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7849e300, ftLastWriteTime.dwHighDateTime=0x1c97a6a, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1 [0181.800] wcscmp (_String1="DGPQUOT.XML", _String2=".") returned 1 [0181.800] wcscmp (_String1="DGPQUOT.XML", _String2="..") returned 1 [0181.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d800 [0181.800] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.800] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.800] wcscat (in: _Dest=0x682d800, _Source="DGPQUOT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" [0181.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0181.801] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09eb100, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb09eb100, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1 [0181.801] wcscmp (_String1="DGPUNCT.DPV", _String2=".") returned 1 [0181.801] wcscmp (_String1="DGPUNCT.DPV", _String2="..") returned 1 [0181.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d888 [0181.801] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.801] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.801] wcscat (in: _Dest=0x682d888, _Source="DGPUNCT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" [0181.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0181.802] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56edf00, ftCreationTime.dwHighDateTime=0x1c9c8c9, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe56edf00, ftLastWriteTime.dwHighDateTime=0x1c9c8c9, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1 [0181.802] wcscmp (_String1="DGPUNCT.XML", _String2=".") returned 1 [0181.802] wcscmp (_String1="DGPUNCT.XML", _String2="..") returned 1 [0181.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682da20 [0181.802] wcscpy (in: _Dest=0x682da20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.802] wcscat (in: _Dest=0x682da20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.803] wcscat (in: _Dest=0x682da20, _Source="DGPUNCT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" [0181.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682da20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0181.803] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb99ad500, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb99ad500, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1 [0181.803] wcscmp (_String1="DGREPFRM.DPV", _String2=".") returned 1 [0181.804] wcscmp (_String1="DGREPFRM.DPV", _String2="..") returned 1 [0181.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682daa8 [0181.804] wcscpy (in: _Dest=0x682daa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.804] wcscat (in: _Dest=0x682daa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.804] wcscat (in: _Dest=0x682daa8, _Source="DGREPFRM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" [0181.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682daa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0181.805] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c04d600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c04d600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1 [0181.805] wcscmp (_String1="DGREPFRM.XML", _String2=".") returned 1 [0181.805] wcscmp (_String1="DGREPFRM.XML", _String2="..") returned 1 [0181.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682dc40 [0181.805] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.805] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.805] wcscat (in: _Dest=0x682dc40, _Source="DGREPFRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" [0181.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0181.806] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a0aa00, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10a0aa00, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1 [0181.806] wcscmp (_String1="DGSIDEBR.DPV", _String2=".") returned 1 [0181.806] wcscmp (_String1="DGSIDEBR.DPV", _String2="..") returned 1 [0181.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c458 [0181.806] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.806] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.806] wcscat (in: _Dest=0x682c458, _Source="DGSIDEBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" [0181.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0181.808] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8806b600, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8806b600, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1 [0181.808] wcscmp (_String1="DGSIDEBR.XML", _String2=".") returned 1 [0181.808] wcscmp (_String1="DGSIDEBR.XML", _String2="..") returned 1 [0181.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c700 [0181.808] wcscpy (in: _Dest=0x682c700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.808] wcscat (in: _Dest=0x682c700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.808] wcscat (in: _Dest=0x682c700, _Source="DGSIDEBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" [0181.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0181.809] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d41b00, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5d41b00, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBRV.XML", cAlternateFileName="DGSIDE~1.XML")) returned 1 [0181.809] wcscmp (_String1="DGSIDEBRV.XML", _String2=".") returned 1 [0181.809] wcscmp (_String1="DGSIDEBRV.XML", _String2="..") returned 1 [0181.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682d118 [0181.809] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0181.809] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0181.810] wcscat (in: _Dest=0x682d118, _Source="DGSIDEBRV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" [0181.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0182.209] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c1700, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x930c1700, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1 [0182.209] wcscmp (_String1="DGSTORY.XML", _String2=".") returned 1 [0182.209] wcscmp (_String1="DGSTORY.XML", _String2="..") returned 1 [0182.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d2b0 [0182.209] wcscpy (in: _Dest=0x682d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0182.209] wcscat (in: _Dest=0x682d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0182.209] wcscat (in: _Dest=0x682d2b0, _Source="DGSTORY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" [0183.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0183.263] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b645200, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b645200, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORYVERT.XML", cAlternateFileName="DGSTOR~1.XML")) returned 1 [0183.263] wcscmp (_String1="DGSTORYVERT.XML", _String2=".") returned 1 [0183.263] wcscmp (_String1="DGSTORYVERT.XML", _String2="..") returned 1 [0183.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dd48 [0183.263] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.263] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.263] wcscat (in: _Dest=0x674dd48, _Source="DGSTORYVERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" [0183.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0183.264] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8d000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8d000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1 [0183.264] wcscmp (_String1="DGTEAR.DPV", _String2=".") returned 1 [0183.264] wcscmp (_String1="DGTEAR.DPV", _String2="..") returned 1 [0183.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d338 [0183.264] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.265] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.265] wcscat (in: _Dest=0x682d338, _Source="DGTEAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" [0183.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0183.266] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8442b700, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8442b700, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1 [0183.266] wcscmp (_String1="DGTOC.DPV", _String2=".") returned 1 [0183.266] wcscmp (_String1="DGTOC.DPV", _String2="..") returned 1 [0183.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10bf0 [0183.267] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.267] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.267] wcscat (in: _Dest=0x3e10bf0, _Source="DGTOC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" [0183.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0183.269] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ab2d00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2ab2d00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1 [0183.269] wcscmp (_String1="DGTOC.XML", _String2=".") returned 1 [0183.269] wcscmp (_String1="DGTOC.XML", _String2="..") returned 1 [0183.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0fbf0 [0183.269] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.269] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.269] wcscat (in: _Dest=0x3e0fbf0, _Source="DGTOC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" [0183.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0183.273] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d23b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d23b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1 [0183.273] wcscmp (_String1="DGWEBAD.XML", _String2=".") returned 1 [0183.273] wcscmp (_String1="DGWEBAD.XML", _String2="..") returned 1 [0183.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c0a0 [0183.273] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.273] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.273] wcscat (in: _Dest=0x682c0a0, _Source="DGWEBAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" [0183.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0183.274] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdfb500, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fdfb500, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1 [0183.274] wcscmp (_String1="DGWEBBTN.DPV", _String2=".") returned 1 [0183.274] wcscmp (_String1="DGWEBBTN.DPV", _String2="..") returned 1 [0183.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bdf8 [0183.274] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.274] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.274] wcscat (in: _Dest=0x682bdf8, _Source="DGWEBBTN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" [0183.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0183.275] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22a7600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb22a7600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1 [0183.275] wcscmp (_String1="DGWEBBTN.XML", _String2=".") returned 1 [0183.275] wcscmp (_String1="DGWEBBTN.XML", _String2="..") returned 1 [0183.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c3d0 [0183.275] wcscpy (in: _Dest=0x682c3d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.275] wcscat (in: _Dest=0x682c3d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.275] wcscat (in: _Dest=0x682c3d0, _Source="DGWEBBTN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" [0183.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0183.277] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0264e00, ftCreationTime.dwHighDateTime=0x1c685d2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0264e00, ftLastWriteTime.dwHighDateTime=0x1c685d2, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1 [0183.280] wcscmp (_String1="DGWEBCAL.DPV", _String2=".") returned 1 [0183.280] wcscmp (_String1="DGWEBCAL.DPV", _String2="..") returned 1 [0183.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c1b0 [0183.280] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.280] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.280] wcscat (in: _Dest=0x682c1b0, _Source="DGWEBCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" [0184.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0184.580] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8205700, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8205700, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1 [0184.580] wcscmp (_String1="DGWEBCAL.XML", _String2=".") returned 1 [0184.580] wcscmp (_String1="DGWEBCAL.XML", _String2="..") returned 1 [0184.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d1a0 [0184.580] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.580] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.580] wcscat (in: _Dest=0x682d1a0, _Source="DGWEBCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" [0184.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0184.581] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd84c9c00, ftCreationTime.dwHighDateTime=0x1c685d7, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd84c9c00, ftLastWriteTime.dwHighDateTime=0x1c685d7, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1 [0184.581] wcscmp (_String1="DGWEBHD.DPV", _String2=".") returned 1 [0184.581] wcscmp (_String1="DGWEBHD.DPV", _String2="..") returned 1 [0184.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d3c0 [0184.582] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.582] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.582] wcscat (in: _Dest=0x682d3c0, _Source="DGWEBHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" [0184.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0184.583] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf476500, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf476500, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1 [0184.583] wcscmp (_String1="DGWEBHD.XML", _String2=".") returned 1 [0184.583] wcscmp (_String1="DGWEBHD.XML", _String2="..") returned 1 [0184.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bdf8 [0184.583] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.583] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.583] wcscat (in: _Dest=0x682bdf8, _Source="DGWEBHD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" [0184.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0184.584] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c0a800, ftCreationTime.dwHighDateTime=0x1c615e0, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8c0a800, ftLastWriteTime.dwHighDateTime=0x1c615e0, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1 [0184.584] wcscmp (_String1="DGWEBPQT.DPV", _String2=".") returned 1 [0184.584] wcscmp (_String1="DGWEBPQT.DPV", _String2="..") returned 1 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682ce70 [0184.584] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.585] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.585] wcscat (in: _Dest=0x682ce70, _Source="DGWEBPQT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" [0184.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0184.586] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc79fa000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc79fa000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1 [0184.586] wcscmp (_String1="DGWEBPQT.XML", _String2=".") returned 1 [0184.586] wcscmp (_String1="DGWEBPQT.XML", _String2="..") returned 1 [0184.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d910 [0184.586] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.586] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.586] wcscat (in: _Dest=0x682d910, _Source="DGWEBPQT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" [0184.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0184.587] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5e2800, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc5e2800, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1 [0184.587] wcscmp (_String1="DGWEBREF.XML", _String2=".") returned 1 [0184.587] wcscmp (_String1="DGWEBREF.XML", _String2="..") returned 1 [0184.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c5f0 [0184.587] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.587] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.588] wcscat (in: _Dest=0x682c5f0, _Source="DGWEBREF.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" [0184.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0184.589] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ca9400, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9ca9400, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1 [0184.589] wcscmp (_String1="DGWEBSBR.DPV", _String2=".") returned 1 [0184.589] wcscmp (_String1="DGWEBSBR.DPV", _String2="..") returned 1 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f26ae0 [0184.589] wcscpy (in: _Dest=0x3f26ae0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.589] wcscat (in: _Dest=0x3f26ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.589] wcscat (in: _Dest=0x3f26ae0, _Source="DGWEBSBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" [0184.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0184.590] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdedf00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecdedf00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1 [0184.590] wcscmp (_String1="DGWEBSBR.XML", _String2=".") returned 1 [0184.590] wcscmp (_String1="DGWEBSBR.XML", _String2="..") returned 1 [0184.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f278b0 [0184.591] wcscpy (in: _Dest=0x3f278b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.591] wcscat (in: _Dest=0x3f278b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.591] wcscat (in: _Dest=0x3f278b0, _Source="DGWEBSBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" [0184.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f278b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0184.592] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc09bc00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc09bc00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1 [0184.592] wcscmp (_String1="DGZIP.DPV", _String2=".") returned 1 [0184.592] wcscmp (_String1="DGZIP.DPV", _String2="..") returned 1 [0184.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0184.592] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.592] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.592] wcscat (in: _Dest=0x3da4c70, _Source="DGZIP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" [0184.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0184.593] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc1f000, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdfc1f000, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1 [0184.593] wcscmp (_String1="DGZIPC.XML", _String2=".") returned 1 [0184.593] wcscmp (_String1="DGZIPC.XML", _String2="..") returned 1 [0184.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26f20 [0184.593] wcscpy (in: _Dest=0x3f26f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.593] wcscat (in: _Dest=0x3f26f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.594] wcscat (in: _Dest=0x3f26f20, _Source="DGZIPC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" [0184.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0184.595] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1 [0184.595] wcscmp (_String1="DOTS.POC", _String2=".") returned 1 [0184.595] wcscmp (_String1="DOTS.POC", _String2="..") returned 1 [0184.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da61f0 [0184.595] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.595] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.595] wcscat (in: _Dest=0x3da61f0, _Source="DOTS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" [0184.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0184.596] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d1600, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64d1600, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1 [0184.596] wcscmp (_String1="DVDHM.POC", _String2=".") returned 1 [0184.596] wcscmp (_String1="DVDHM.POC", _String2="..") returned 1 [0184.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6670 [0184.596] wcscpy (in: _Dest=0x3da6670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.596] wcscat (in: _Dest=0x3da6670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.596] wcscat (in: _Dest=0x3da6670, _Source="DVDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" [0184.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0184.597] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1 [0184.597] wcscmp (_String1="EMAIL.DPV", _String2=".") returned 1 [0184.598] wcscmp (_String1="EMAIL.DPV", _String2="..") returned 1 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4af0 [0184.598] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.598] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.598] wcscat (in: _Dest=0x3da4af0, _Source="EMAIL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" [0184.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0184.599] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6e1c00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6e1c00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1 [0184.599] wcscmp (_String1="EMAIL.XML", _String2=".") returned 1 [0184.599] wcscmp (_String1="EMAIL.XML", _String2="..") returned 1 [0184.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5b70 [0184.599] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.599] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.599] wcscat (in: _Dest=0x3da5b70, _Source="EMAIL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" [0184.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0184.600] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1 [0184.600] wcscmp (_String1="EMAIL11.POC", _String2=".") returned 1 [0184.600] wcscmp (_String1="EMAIL11.POC", _String2="..") returned 1 [0184.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f26260 [0184.601] wcscpy (in: _Dest=0x3f26260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.601] wcscat (in: _Dest=0x3f26260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.601] wcscat (in: _Dest=0x3f26260, _Source="EMAIL11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" [0184.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0184.602] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4302b400, ftCreationTime.dwHighDateTime=0x1c51435, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302b400, ftLastWriteTime.dwHighDateTime=0x1c51435, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1 [0184.602] wcscmp (_String1="EMAILMOD.POC", _String2=".") returned 1 [0184.602] wcscmp (_String1="EMAILMOD.POC", _String2="..") returned 1 [0184.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f269d0 [0184.602] wcscpy (in: _Dest=0x3f269d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.602] wcscat (in: _Dest=0x3f269d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.602] wcscat (in: _Dest=0x3f269d0, _Source="EMAILMOD.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" [0184.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f269d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0184.605] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1 [0184.606] wcscmp (_String1="ENV11.POC", _String2=".") returned 1 [0184.606] wcscmp (_String1="ENV11.POC", _String2="..") returned 1 [0184.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0184.606] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.606] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.606] wcscat (in: _Dest=0x3da5f70, _Source="ENV11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" [0184.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0184.607] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1 [0184.607] wcscmp (_String1="ENV98.POC", _String2=".") returned 1 [0184.607] wcscmp (_String1="ENV98.POC", _String2="..") returned 1 [0184.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6370 [0184.607] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.607] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.607] wcscat (in: _Dest=0x3da6370, _Source="ENV98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" [0184.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0184.609] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1 [0184.609] wcscmp (_String1="ENV98SP.POC", _String2=".") returned 1 [0184.609] wcscmp (_String1="ENV98SP.POC", _String2="..") returned 1 [0184.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f262e8 [0184.609] wcscpy (in: _Dest=0x3f262e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.609] wcscat (in: _Dest=0x3f262e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.609] wcscat (in: _Dest=0x3f262e8, _Source="ENV98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" [0184.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f262e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0184.610] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1 [0184.610] wcscmp (_String1="ENVELOPE.DPV", _String2=".") returned 1 [0184.610] wcscmp (_String1="ENVELOPE.DPV", _String2="..") returned 1 [0184.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f279c0 [0184.610] wcscpy (in: _Dest=0x3f279c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.610] wcscat (in: _Dest=0x3f279c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.610] wcscat (in: _Dest=0x3f279c0, _Source="ENVELOPE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" [0184.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f279c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0184.611] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3286200, ftCreationTime.dwHighDateTime=0x1c9d3fb, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3286200, ftLastWriteTime.dwHighDateTime=0x1c9d3fb, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1 [0184.611] wcscmp (_String1="ENVELOPE.XML", _String2=".") returned 1 [0184.611] wcscmp (_String1="ENVELOPE.XML", _String2="..") returned 1 [0184.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27b58 [0184.611] wcscpy (in: _Dest=0x3f27b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.611] wcscat (in: _Dest=0x3f27b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.612] wcscat (in: _Dest=0x3f27b58, _Source="ENVELOPE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" [0184.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0184.613] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1 [0184.613] wcscmp (_String1="ENVHM.POC", _String2=".") returned 1 [0184.613] wcscmp (_String1="ENVHM.POC", _String2="..") returned 1 [0184.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da64f0 [0184.613] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.613] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.613] wcscat (in: _Dest=0x3da64f0, _Source="ENVHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" [0184.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0184.614] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1 [0184.614] wcscmp (_String1="FEZIP.POC", _String2=".") returned 1 [0184.614] wcscmp (_String1="FEZIP.POC", _String2="..") returned 1 [0184.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6770 [0184.614] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.614] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.615] wcscat (in: _Dest=0x3da6770, _Source="FEZIP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" [0184.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0184.616] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36a0500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc36a0500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1 [0184.616] wcscmp (_String1="FLY98SP.POC", _String2=".") returned 1 [0184.616] wcscmp (_String1="FLY98SP.POC", _String2="..") returned 1 [0184.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f27c68 [0184.616] wcscpy (in: _Dest=0x3f27c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.616] wcscat (in: _Dest=0x3f27c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.616] wcscat (in: _Dest=0x3f27c68, _Source="FLY98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" [0184.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0184.617] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30b2c00, ftCreationTime.dwHighDateTime=0x1c8f1f7, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30b2c00, ftLastWriteTime.dwHighDateTime=0x1c8f1f7, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1 [0184.617] wcscmp (_String1="FLYER.DPV", _String2=".") returned 1 [0184.617] wcscmp (_String1="FLYER.DPV", _String2="..") returned 1 [0184.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5af0 [0184.617] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.617] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.617] wcscat (in: _Dest=0x3da5af0, _Source="FLYER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" [0184.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0185.011] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea57c00, ftCreationTime.dwHighDateTime=0x1ca57fe, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ea57c00, ftLastWriteTime.dwHighDateTime=0x1ca57fe, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1 [0185.011] wcscmp (_String1="FLYER.XML", _String2=".") returned 1 [0185.011] wcscmp (_String1="FLYER.XML", _String2="..") returned 1 [0185.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e100f0 [0185.011] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.011] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.011] wcscat (in: _Dest=0x3e100f0, _Source="FLYER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" [0186.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0186.352] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc5f00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x883993b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5cc5f00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1 [0186.352] wcscmp (_String1="FLYER11.POC", _String2=".") returned 1 [0186.352] wcscmp (_String1="FLYER11.POC", _String2="..") returned 1 [0186.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d228 [0186.352] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.352] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.352] wcscat (in: _Dest=0x682d228, _Source="FLYER11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" [0186.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0186.353] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2e94e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2e94e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1 [0186.353] wcscmp (_String1="FLYER98.POC", _String2=".") returned 1 [0186.353] wcscmp (_String1="FLYER98.POC", _String2="..") returned 1 [0186.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682dc40 [0186.353] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.353] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.353] wcscat (in: _Dest=0x682dc40, _Source="FLYER98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" [0186.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0186.354] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41a7b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41a7b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1 [0186.354] wcscmp (_String1="FLYERHM.POC", _String2=".") returned 1 [0186.354] wcscmp (_String1="FLYERHM.POC", _String2="..") returned 1 [0186.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682be80 [0186.354] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.354] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.354] wcscat (in: _Dest=0x682be80, _Source="FLYERHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" [0186.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0186.355] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5477300, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5477300, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1 [0186.355] wcscmp (_String1="FOLDPROJ.DPV", _String2=".") returned 1 [0186.355] wcscmp (_String1="FOLDPROJ.DPV", _String2="..") returned 1 [0186.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c810 [0186.355] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.355] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.355] wcscat (in: _Dest=0x682c810, _Source="FOLDPROJ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" [0186.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0186.356] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0800, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0800, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1 [0186.356] wcscmp (_String1="FOLDPROJ.XML", _String2=".") returned 1 [0186.356] wcscmp (_String1="FOLDPROJ.XML", _String2="..") returned 1 [0186.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d448 [0186.356] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.356] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.357] wcscat (in: _Dest=0x682d448, _Source="FOLDPROJ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" [0186.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0186.357] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1 [0186.357] wcscmp (_String1="FORM98.POC", _String2=".") returned 1 [0186.358] wcscmp (_String1="FORM98.POC", _String2="..") returned 1 [0186.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c1b0 [0186.358] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.358] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.358] wcscat (in: _Dest=0x682c1b0, _Source="FORM98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" [0186.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0186.359] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1 [0186.359] wcscmp (_String1="FORMCTL.POC", _String2=".") returned 1 [0186.359] wcscmp (_String1="FORMCTL.POC", _String2="..") returned 1 [0186.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cab8 [0186.359] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0186.359] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0186.359] wcscat (in: _Dest=0x682cab8, _Source="FORMCTL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" [0186.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0186.360] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77e80690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1 [0189.323] wcscmp (_String1="FS3BOX.POC", _String2=".") returned 1 [0189.323] wcscmp (_String1="FS3BOX.POC", _String2="..") returned 1 [0189.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f26e10 [0189.323] wcscpy (in: _Dest=0x3f26e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.323] wcscat (in: _Dest=0x3f26e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.323] wcscat (in: _Dest=0x3f26e10, _Source="FS3BOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" [0190.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f26e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0190.706] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1 [0190.706] wcscmp (_String1="GIFT.DPV", _String2=".") returned 1 [0190.706] wcscmp (_String1="GIFT.DPV", _String2="..") returned 1 [0190.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e100f0 [0190.706] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.706] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.706] wcscat (in: _Dest=0x3e100f0, _Source="GIFT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" [0190.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0190.707] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79899d00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79899d00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1 [0190.707] wcscmp (_String1="GIFT.XML", _String2=".") returned 1 [0190.707] wcscmp (_String1="GIFT.XML", _String2="..") returned 1 [0190.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0fbf0 [0190.708] wcscpy (in: _Dest=0x3e0fbf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.708] wcscat (in: _Dest=0x3e0fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.708] wcscat (in: _Dest=0x3e0fbf0, _Source="GIFT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" [0190.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0190.709] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0063d00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0063d00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1 [0190.709] wcscmp (_String1="GIFT98.POC", _String2=".") returned 1 [0190.709] wcscmp (_String1="GIFT98.POC", _String2="..") returned 1 [0190.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cab8 [0190.709] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.709] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.709] wcscat (in: _Dest=0x682cab8, _Source="GIFT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" [0190.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0190.711] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee545900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee545900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1 [0190.711] wcscmp (_String1="GREET11.POC", _String2=".") returned 1 [0190.711] wcscmp (_String1="GREET11.POC", _String2="..") returned 1 [0190.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c1b0 [0190.711] wcscpy (in: _Dest=0x682c1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.711] wcscat (in: _Dest=0x682c1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.711] wcscat (in: _Dest=0x682c1b0, _Source="GREET11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" [0190.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0190.712] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd560100, ftCreationTime.dwHighDateTime=0x1c5dc2c, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd560100, ftLastWriteTime.dwHighDateTime=0x1c5dc2c, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1 [0190.712] wcscmp (_String1="GREETING.DPV", _String2=".") returned 1 [0190.712] wcscmp (_String1="GREETING.DPV", _String2="..") returned 1 [0190.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d448 [0190.713] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.713] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.713] wcscat (in: _Dest=0x682d448, _Source="GREETING.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" [0190.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0190.714] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11cb700, ftCreationTime.dwHighDateTime=0x1ca57f8, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa11cb700, ftLastWriteTime.dwHighDateTime=0x1ca57f8, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1 [0190.714] wcscmp (_String1="GREETING.XML", _String2=".") returned 1 [0190.714] wcscmp (_String1="GREETING.XML", _String2="..") returned 1 [0190.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c810 [0190.714] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.714] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.714] wcscat (in: _Dest=0x682c810, _Source="GREETING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" [0190.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0190.716] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ffc3100, ftCreationTime.dwHighDateTime=0x1c97723, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ffc3100, ftLastWriteTime.dwHighDateTime=0x1c97723, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.DPV", cAlternateFileName="HEADIN~1.DPV")) returned 1 [0190.716] wcscmp (_String1="HEADINGBB.DPV", _String2=".") returned 1 [0190.716] wcscmp (_String1="HEADINGBB.DPV", _String2="..") returned 1 [0190.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682be80 [0190.716] wcscpy (in: _Dest=0x682be80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.716] wcscat (in: _Dest=0x682be80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.716] wcscat (in: _Dest=0x682be80, _Source="HEADINGBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" [0190.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682be80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0190.718] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c78100, ftCreationTime.dwHighDateTime=0x1c97a9d, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c78100, ftLastWriteTime.dwHighDateTime=0x1c97a9d, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.POC", cAlternateFileName="HEADIN~1.POC")) returned 1 [0190.718] wcscmp (_String1="HEADINGBB.POC", _String2=".") returned 1 [0190.718] wcscmp (_String1="HEADINGBB.POC", _String2="..") returned 1 [0190.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682dc40 [0190.718] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.718] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.718] wcscat (in: _Dest=0x682dc40, _Source="HEADINGBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" [0190.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0190.719] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9f8e00, ftCreationTime.dwHighDateTime=0x1c5dc20, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc9f8e00, ftLastWriteTime.dwHighDateTime=0x1c5dc20, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1 [0190.719] wcscmp (_String1="INVITE.DPV", _String2=".") returned 1 [0190.719] wcscmp (_String1="INVITE.DPV", _String2="..") returned 1 [0190.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d228 [0190.719] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.719] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.719] wcscat (in: _Dest=0x682d228, _Source="INVITE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" [0190.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0190.721] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f7ff00, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12f7ff00, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1 [0190.721] wcscmp (_String1="INVITE.XML", _String2=".") returned 1 [0190.721] wcscmp (_String1="INVITE.XML", _String2="..") returned 1 [0190.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d3c0 [0190.721] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.721] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.721] wcscat (in: _Dest=0x682d3c0, _Source="INVITE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" [0190.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0190.723] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddc100, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddc100, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1 [0190.723] wcscmp (_String1="INVITE11.POC", _String2=".") returned 1 [0190.723] wcscmp (_String1="INVITE11.POC", _String2="..") returned 1 [0190.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d1a0 [0190.723] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.723] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.723] wcscat (in: _Dest=0x682d1a0, _Source="INVITE11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" [0190.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0190.724] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e51900, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2e51900, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1 [0190.724] wcscmp (_String1="LABEL.DPV", _String2=".") returned 1 [0190.724] wcscmp (_String1="LABEL.DPV", _String2="..") returned 1 [0190.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f2f0 [0190.724] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.724] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.724] wcscat (in: _Dest=0x3e0f2f0, _Source="LABEL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" [0190.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0190.726] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f69100, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31f69100, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1 [0190.726] wcscmp (_String1="LABEL.XML", _String2=".") returned 1 [0190.726] wcscmp (_String1="LABEL.XML", _String2="..") returned 1 [0190.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e10670 [0190.726] wcscpy (in: _Dest=0x3e10670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.726] wcscat (in: _Dest=0x3e10670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.726] wcscat (in: _Dest=0x3e10670, _Source="LABEL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" [0190.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0190.727] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1 [0190.727] wcscmp (_String1="LABEL98.POC", _String2=".") returned 1 [0190.727] wcscmp (_String1="LABEL98.POC", _String2="..") returned 1 [0190.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bdf8 [0190.727] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.727] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.727] wcscat (in: _Dest=0x682bdf8, _Source="LABEL98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" [0190.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0190.729] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1 [0190.729] wcscmp (_String1="LABELHM.POC", _String2=".") returned 1 [0190.729] wcscmp (_String1="LABELHM.POC", _String2="..") returned 1 [0190.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682ce70 [0190.729] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.729] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.729] wcscat (in: _Dest=0x682ce70, _Source="LABELHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" [0190.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0190.730] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4164600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4164600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1 [0190.730] wcscmp (_String1="LETTHEAD.DPV", _String2=".") returned 1 [0190.730] wcscmp (_String1="LETTHEAD.DPV", _String2="..") returned 1 [0190.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d910 [0190.730] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.730] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.730] wcscat (in: _Dest=0x682d910, _Source="LETTHEAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" [0190.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0190.732] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf146bf00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf146bf00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1 [0190.732] wcscmp (_String1="LETTHEAD.XML", _String2=".") returned 1 [0190.732] wcscmp (_String1="LETTHEAD.XML", _String2="..") returned 1 [0190.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c5f0 [0190.732] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.732] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.732] wcscat (in: _Dest=0x682c5f0, _Source="LETTHEAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" [0190.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0190.733] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1 [0190.733] wcscmp (_String1="LINEACT.POC", _String2=".") returned 1 [0190.733] wcscmp (_String1="LINEACT.POC", _String2="..") returned 1 [0190.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c898 [0190.733] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.733] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.733] wcscat (in: _Dest=0x682c898, _Source="LINEACT.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" [0190.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0190.735] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1 [0190.735] wcscmp (_String1="LOGO98.POC", _String2=".") returned 1 [0190.735] wcscmp (_String1="LOGO98.POC", _String2="..") returned 1 [0190.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ca30 [0190.736] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.736] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.736] wcscat (in: _Dest=0x682ca30, _Source="LOGO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" [0190.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0190.738] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1 [0190.738] wcscmp (_String1="LTHD11.POC", _String2=".") returned 1 [0190.738] wcscmp (_String1="LTHD11.POC", _String2="..") returned 1 [0190.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c4e0 [0190.738] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.738] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.738] wcscat (in: _Dest=0x682c4e0, _Source="LTHD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" [0190.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0190.740] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1 [0190.740] wcscmp (_String1="LTHD98.POC", _String2=".") returned 1 [0190.740] wcscmp (_String1="LTHD98.POC", _String2="..") returned 1 [0190.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d090 [0190.740] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.740] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.740] wcscat (in: _Dest=0x682d090, _Source="LTHD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" [0190.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0190.741] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1 [0190.741] wcscmp (_String1="LTHD98SP.POC", _String2=".") returned 1 [0190.741] wcscmp (_String1="LTHD98SP.POC", _String2="..") returned 1 [0190.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cde8 [0190.741] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.741] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.741] wcscat (in: _Dest=0x682cde8, _Source="LTHD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" [0190.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0190.743] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1 [0190.743] wcscmp (_String1="LTHDHM.POC", _String2=".") returned 1 [0190.743] wcscmp (_String1="LTHDHM.POC", _String2="..") returned 1 [0190.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cc50 [0190.743] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.743] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.743] wcscat (in: _Dest=0x682cc50, _Source="LTHDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" [0190.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0191.010] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0bdf00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e0bdf00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1 [0191.010] wcscmp (_String1="MAIN.XML", _String2=".") returned 1 [0191.010] wcscmp (_String1="MAIN.XML", _String2="..") returned 1 [0191.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f4f0 [0191.010] wcscpy (in: _Dest=0x3e0f4f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.010] wcscat (in: _Dest=0x3e0f4f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.010] wcscat (in: _Dest=0x3e0f4f0, _Source="MAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" [0191.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0191.946] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1 [0191.946] wcscmp (_String1="MARQUEE.POC", _String2=".") returned 1 [0191.946] wcscmp (_String1="MARQUEE.POC", _String2="..") returned 1 [0191.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c920 [0191.946] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.947] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.947] wcscat (in: _Dest=0x682c920, _Source="MARQUEE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" [0191.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0191.947] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0ba200, ftCreationTime.dwHighDateTime=0x1c61dd8, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0ba200, ftLastWriteTime.dwHighDateTime=0x1c61dd8, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1 [0191.948] wcscmp (_String1="MENU.DPV", _String2=".") returned 1 [0191.948] wcscmp (_String1="MENU.DPV", _String2="..") returned 1 [0191.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0fb70 [0191.948] wcscpy (in: _Dest=0x3e0fb70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.948] wcscat (in: _Dest=0x3e0fb70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.948] wcscat (in: _Dest=0x3e0fb70, _Source="MENU.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" [0191.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0fb70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0191.950] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26641a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26641a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.XML", cAlternateFileName="")) returned 1 [0191.950] wcscmp (_String1="MENU.XML", _String2=".") returned 1 [0191.950] wcscmp (_String1="MENU.XML", _String2="..") returned 1 [0191.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10270 [0191.950] wcscpy (in: _Dest=0x3e10270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.950] wcscat (in: _Dest=0x3e10270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.950] wcscat (in: _Dest=0x3e10270, _Source="MENU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" [0191.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0191.951] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1672900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x7f3e2370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1672900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1 [0191.951] wcscmp (_String1="MENU98.POC", _String2=".") returned 1 [0191.951] wcscmp (_String1="MENU98.POC", _String2="..") returned 1 [0191.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c678 [0191.951] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.951] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.951] wcscat (in: _Dest=0x682c678, _Source="MENU98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" [0191.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0191.952] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c98300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1 [0191.952] wcscmp (_String1="MSTHED98.POC", _String2=".") returned 1 [0191.952] wcscmp (_String1="MSTHED98.POC", _String2="..") returned 1 [0191.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cbc8 [0191.952] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.952] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.952] wcscat (in: _Dest=0x682cbc8, _Source="MSTHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" [0191.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0191.953] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fab000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1 [0191.953] wcscmp (_String1="NAVBAR11.POC", _String2=".") returned 1 [0191.953] wcscmp (_String1="NAVBAR11.POC", _String2="..") returned 1 [0191.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cb40 [0191.954] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.954] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.954] wcscat (in: _Dest=0x682cb40, _Source="NAVBAR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" [0191.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0191.955] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1 [0191.955] wcscmp (_String1="NAVBARV.POC", _String2=".") returned 1 [0191.955] wcscmp (_String1="NAVBARV.POC", _String2="..") returned 1 [0191.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bd70 [0191.955] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.955] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.955] wcscat (in: _Dest=0x682bd70, _Source="NAVBARV.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" [0191.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0191.956] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1 [0191.956] wcscmp (_String1="NAVBRPH1.POC", _String2=".") returned 1 [0191.956] wcscmp (_String1="NAVBRPH1.POC", _String2="..") returned 1 [0191.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d008 [0191.956] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.956] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.957] wcscat (in: _Dest=0x682d008, _Source="NAVBRPH1.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" [0191.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0191.958] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1 [0191.958] wcscmp (_String1="NAVBRPH2.POC", _String2=".") returned 1 [0191.958] wcscmp (_String1="NAVBRPH2.POC", _String2="..") returned 1 [0191.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d558 [0191.958] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0191.958] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0191.958] wcscat (in: _Dest=0x682d558, _Source="NAVBRPH2.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" [0191.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0191.959] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7291600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7291600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1 [0195.169] wcscmp (_String1="NEWS.DPV", _String2=".") returned 1 [0195.169] wcscmp (_String1="NEWS.DPV", _String2="..") returned 1 [0195.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f9f0 [0195.170] wcscpy (in: _Dest=0x3e0f9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0195.170] wcscat (in: _Dest=0x3e0f9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0195.170] wcscat (in: _Dest=0x3e0f9f0, _Source="NEWS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" [0196.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0196.762] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8bec500, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8bec500, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1 [0196.762] wcscmp (_String1="NEWS.XML", _String2=".") returned 1 [0196.762] wcscmp (_String1="NEWS.XML", _String2="..") returned 1 [0196.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e100f0 [0196.762] wcscpy (in: _Dest=0x3e100f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.762] wcscat (in: _Dest=0x3e100f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.762] wcscat (in: _Dest=0x3e100f0, _Source="NEWS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" [0196.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e100f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0196.763] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52eb00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d52e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd52eb00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1 [0196.763] wcscmp (_String1="NEWS11.POC", _String2=".") returned 1 [0196.763] wcscmp (_String1="NEWS11.POC", _String2="..") returned 1 [0196.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bf08 [0196.763] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.763] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.763] wcscat (in: _Dest=0x682bf08, _Source="NEWS11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" [0196.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0196.764] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1ee200, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de59a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a1ee200, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1 [0196.764] wcscmp (_String1="NEWS98.POC", _String2=".") returned 1 [0196.764] wcscmp (_String1="NEWS98.POC", _String2="..") returned 1 [0196.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682dbb8 [0196.764] wcscpy (in: _Dest=0x682dbb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.764] wcscat (in: _Dest=0x682dbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.764] wcscat (in: _Dest=0x682dbb8, _Source="NEWS98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" [0196.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0196.765] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de7fbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1 [0196.765] wcscmp (_String1="NEWSHM.POC", _String2=".") returned 1 [0196.765] wcscmp (_String1="NEWSHM.POC", _String2="..") returned 1 [0196.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bce8 [0196.766] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.766] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.766] wcscat (in: _Dest=0x682bce8, _Source="NEWSHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" [0196.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0196.766] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1 [0196.767] wcscmp (_String1="ORIG98.POC", _String2=".") returned 1 [0196.767] wcscmp (_String1="ORIG98.POC", _String2="..") returned 1 [0196.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cab8 [0196.767] wcscpy (in: _Dest=0x682cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.767] wcscat (in: _Dest=0x682cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.767] wcscat (in: _Dest=0x682cab8, _Source="ORIG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" [0196.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0196.768] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31056900, ftCreationTime.dwHighDateTime=0x1c9a720, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31056900, ftLastWriteTime.dwHighDateTime=0x1c9a720, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1 [0196.768] wcscmp (_String1="PICCAP98.POC", _String2=".") returned 1 [0196.768] wcscmp (_String1="PICCAP98.POC", _String2="..") returned 1 [0196.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d118 [0196.768] wcscpy (in: _Dest=0x682d118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.768] wcscat (in: _Dest=0x682d118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.768] wcscat (in: _Dest=0x682d118, _Source="PICCAP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" [0196.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0196.769] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306fa900, ftCreationTime.dwHighDateTime=0x1c99074, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x306fa900, ftLastWriteTime.dwHighDateTime=0x1c99074, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICSTYLES.DPV", cAlternateFileName="PICSTY~1.DPV")) returned 1 [0196.769] wcscmp (_String1="PICSTYLES.DPV", _String2=".") returned 1 [0196.769] wcscmp (_String1="PICSTYLES.DPV", _String2="..") returned 1 [0196.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c458 [0196.769] wcscpy (in: _Dest=0x682c458, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.769] wcscat (in: _Dest=0x682c458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.769] wcscat (in: _Dest=0x682c458, _Source="PICSTYLES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" [0196.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0196.770] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1 [0196.770] wcscmp (_String1="PICTPH.POC", _String2=".") returned 1 [0196.770] wcscmp (_String1="PICTPH.POC", _String2="..") returned 1 [0196.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682cbc8 [0196.770] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.770] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.770] wcscat (in: _Dest=0x682cbc8, _Source="PICTPH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" [0196.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0196.771] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1 [0196.771] wcscmp (_String1="PNCTUATE.POC", _String2=".") returned 1 [0196.771] wcscmp (_String1="PNCTUATE.POC", _String2="..") returned 1 [0196.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cb40 [0196.771] wcscpy (in: _Dest=0x682cb40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.771] wcscat (in: _Dest=0x682cb40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.771] wcscat (in: _Dest=0x682cb40, _Source="PNCTUATE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" [0196.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0196.772] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1 [0196.772] wcscmp (_String1="POST98SP.POC", _String2=".") returned 1 [0196.772] wcscmp (_String1="POST98SP.POC", _String2="..") returned 1 [0196.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bd70 [0196.772] wcscpy (in: _Dest=0x682bd70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.773] wcscat (in: _Dest=0x682bd70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.773] wcscat (in: _Dest=0x682bd70, _Source="POST98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" [0196.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0196.773] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8994e00, ftCreationTime.dwHighDateTime=0x1c66496, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8994e00, ftLastWriteTime.dwHighDateTime=0x1c66496, nFileSizeHigh=0x0, nFileSizeLow=0xa194b, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.DPV", cAlternateFileName="")) returned 1 [0196.773] wcscmp (_String1="POSTCARD.DPV", _String2=".") returned 1 [0196.774] wcscmp (_String1="POSTCARD.DPV", _String2="..") returned 1 [0196.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d008 [0196.774] wcscpy (in: _Dest=0x682d008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.774] wcscat (in: _Dest=0x682d008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.774] wcscat (in: _Dest=0x682d008, _Source="POSTCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" [0196.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0196.775] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f138000, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f138000, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x9a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.XML", cAlternateFileName="")) returned 1 [0196.775] wcscmp (_String1="POSTCARD.XML", _String2=".") returned 1 [0196.775] wcscmp (_String1="POSTCARD.XML", _String2="..") returned 1 [0196.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d558 [0196.775] wcscpy (in: _Dest=0x682d558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.775] wcscat (in: _Dest=0x682d558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.775] wcscat (in: _Dest=0x682d558, _Source="POSTCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" [0196.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0196.776] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5014c300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5014c300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD11.POC", cAlternateFileName="")) returned 1 [0196.776] wcscmp (_String1="POSTCD11.POC", _String2=".") returned 1 [0196.776] wcscmp (_String1="POSTCD11.POC", _String2="..") returned 1 [0196.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cde8 [0196.776] wcscpy (in: _Dest=0x682cde8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.776] wcscat (in: _Dest=0x682cde8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.776] wcscat (in: _Dest=0x682cde8, _Source="POSTCD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" [0196.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cde8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0196.777] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xa84e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD98.POC", cAlternateFileName="")) returned 1 [0196.777] wcscmp (_String1="POSTCD98.POC", _String2=".") returned 1 [0196.777] wcscmp (_String1="POSTCD98.POC", _String2="..") returned 1 [0196.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cc50 [0196.777] wcscpy (in: _Dest=0x682cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.777] wcscat (in: _Dest=0x682cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.777] wcscat (in: _Dest=0x682cc50, _Source="POSTCD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" [0196.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0196.778] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xaf86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROG98.POC", cAlternateFileName="")) returned 1 [0196.778] wcscmp (_String1="PROG98.POC", _String2=".") returned 1 [0196.778] wcscmp (_String1="PROG98.POC", _String2="..") returned 1 [0196.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c678 [0196.778] wcscpy (in: _Dest=0x682c678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.778] wcscat (in: _Dest=0x682c678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.778] wcscat (in: _Dest=0x682c678, _Source="PROG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" [0196.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0196.779] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb678a000, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb678a000, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.DPV", cAlternateFileName="")) returned 1 [0196.779] wcscmp (_String1="PROGRAM.DPV", _String2=".") returned 1 [0196.779] wcscmp (_String1="PROGRAM.DPV", _String2="..") returned 1 [0196.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d448 [0196.779] wcscpy (in: _Dest=0x682d448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.779] wcscat (in: _Dest=0x682d448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.779] wcscat (in: _Dest=0x682d448, _Source="PROGRAM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" [0196.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0196.780] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4562ac00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4562ac00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x26c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.XML", cAlternateFileName="")) returned 1 [0196.780] wcscmp (_String1="PROGRAM.XML", _String2=".") returned 1 [0196.780] wcscmp (_String1="PROGRAM.XML", _String2="..") returned 1 [0196.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d3c0 [0196.780] wcscpy (in: _Dest=0x682d3c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.780] wcscat (in: _Dest=0x682d3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.780] wcscat (in: _Dest=0x682d3c0, _Source="PROGRAM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" [0196.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0196.781] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x934, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS10TARG.POC", cAlternateFileName="")) returned 1 [0196.781] wcscmp (_String1="PS10TARG.POC", _String2=".") returned 1 [0196.781] wcscmp (_String1="PS10TARG.POC", _String2="..") returned 1 [0196.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d1a0 [0196.781] wcscpy (in: _Dest=0x682d1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.781] wcscat (in: _Dest=0x682d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.781] wcscat (in: _Dest=0x682d1a0, _Source="PS10TARG.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" [0196.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0196.782] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS2SWOOS.POC", cAlternateFileName="")) returned 1 [0196.782] wcscmp (_String1="PS2SWOOS.POC", _String2=".") returned 1 [0196.782] wcscmp (_String1="PS2SWOOS.POC", _String2="..") returned 1 [0196.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682bdf8 [0196.783] wcscpy (in: _Dest=0x682bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.783] wcscat (in: _Dest=0x682bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.783] wcscat (in: _Dest=0x682bdf8, _Source="PS2SWOOS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" [0196.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0196.784] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS9CRNRH.POC", cAlternateFileName="")) returned 1 [0196.784] wcscmp (_String1="PS9CRNRH.POC", _String2=".") returned 1 [0196.784] wcscmp (_String1="PS9CRNRH.POC", _String2="..") returned 1 [0196.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682ce70 [0196.784] wcscpy (in: _Dest=0x682ce70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.784] wcscat (in: _Dest=0x682ce70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.784] wcscat (in: _Dest=0x682ce70, _Source="PS9CRNRH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" [0196.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ce70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0196.785] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1403e800, ftCreationTime.dwHighDateTime=0x1c97727, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1403e800, ftLastWriteTime.dwHighDateTime=0x1c97727, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.DPV", cAlternateFileName="PULLQU~1.DPV")) returned 1 [0196.785] wcscmp (_String1="PULLQUOTEBB.DPV", _String2=".") returned 1 [0196.785] wcscmp (_String1="PULLQUOTEBB.DPV", _String2="..") returned 1 [0196.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0196.785] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.785] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.785] wcscat (in: _Dest=0x66dc288, _Source="PULLQUOTEBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" [0196.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0196.786] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed371000, ftCreationTime.dwHighDateTime=0x1c97a9e, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed371000, ftLastWriteTime.dwHighDateTime=0x1c97a9e, nFileSizeHigh=0x0, nFileSizeLow=0x18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.POC", cAlternateFileName="PULLQU~1.POC")) returned 1 [0196.786] wcscmp (_String1="PULLQUOTEBB.POC", _String2=".") returned 1 [0196.786] wcscmp (_String1="PULLQUOTEBB.POC", _String2="..") returned 1 [0196.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbd78 [0196.786] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.786] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.786] wcscat (in: _Dest=0x66dbd78, _Source="PULLQUOTEBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" [0196.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0196.787] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acf5800, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5acf5800, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULQOT98.POC", cAlternateFileName="")) returned 1 [0196.787] wcscmp (_String1="PULQOT98.POC", _String2=".") returned 1 [0196.787] wcscmp (_String1="PULQOT98.POC", _String2="..") returned 1 [0196.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d910 [0196.787] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.787] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.787] wcscat (in: _Dest=0x682d910, _Source="PULQOT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" [0196.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0196.788] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17250f00, ftCreationTime.dwHighDateTime=0x1c8f1ad, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17250f00, ftLastWriteTime.dwHighDateTime=0x1c8f1ad, nFileSizeHigh=0x0, nFileSizeLow=0x8d1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.DPV", cAlternateFileName="")) returned 1 [0196.788] wcscmp (_String1="QP.DPV", _String2=".") returned 1 [0196.788] wcscmp (_String1="QP.DPV", _String2="..") returned 1 [0196.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f670 [0196.788] wcscpy (in: _Dest=0x3e0f670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.788] wcscat (in: _Dest=0x3e0f670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.788] wcscat (in: _Dest=0x3e0f670, _Source="QP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" [0196.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0196.789] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89ba00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c89ba00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x33e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.XML", cAlternateFileName="")) returned 1 [0196.789] wcscmp (_String1="QP.XML", _String2=".") returned 1 [0196.789] wcscmp (_String1="QP.XML", _String2="..") returned 1 [0196.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f870 [0196.790] wcscpy (in: _Dest=0x3e0f870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.790] wcscat (in: _Dest=0x3e0f870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.790] wcscat (in: _Dest=0x3e0f870, _Source="QP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" [0196.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0196.791] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c53900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60c53900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6f882, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUIKPUBS.POC", cAlternateFileName="")) returned 1 [0196.791] wcscmp (_String1="QUIKPUBS.POC", _String2=".") returned 1 [0196.791] wcscmp (_String1="QUIKPUBS.POC", _String2="..") returned 1 [0196.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c5f0 [0196.791] wcscpy (in: _Dest=0x682c5f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.791] wcscat (in: _Dest=0x682c5f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.791] wcscat (in: _Dest=0x682c5f0, _Source="QUIKPUBS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" [0196.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0196.792] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4d57e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPTWIZ.POC", cAlternateFileName="")) returned 1 [0196.792] wcscmp (_String1="REPTWIZ.POC", _String2=".") returned 1 [0196.792] wcscmp (_String1="REPTWIZ.POC", _String2="..") returned 1 [0196.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c898 [0196.792] wcscpy (in: _Dest=0x682c898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.792] wcscat (in: _Dest=0x682c898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.792] wcscat (in: _Dest=0x682c898, _Source="REPTWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" [0196.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0196.793] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RES98.POC", cAlternateFileName="")) returned 1 [0196.793] wcscmp (_String1="RES98.POC", _String2=".") returned 1 [0196.793] wcscmp (_String1="RES98.POC", _String2="..") returned 1 [0196.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e11070 [0196.793] wcscpy (in: _Dest=0x3e11070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.793] wcscat (in: _Dest=0x3e11070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.793] wcscat (in: _Dest=0x3e11070, _Source="RES98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" [0196.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e11070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0196.794] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1effa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESP98.POC", cAlternateFileName="")) returned 1 [0196.794] wcscmp (_String1="RESP98.POC", _String2=".") returned 1 [0196.794] wcscmp (_String1="RESP98.POC", _String2="..") returned 1 [0196.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682ca30 [0196.794] wcscpy (in: _Dest=0x682ca30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.794] wcscat (in: _Dest=0x682ca30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.794] wcscat (in: _Dest=0x682ca30, _Source="RESP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" [0196.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ca30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0196.795] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.DPV", cAlternateFileName="")) returned 1 [0196.795] wcscmp (_String1="RESUME.DPV", _String2=".") returned 1 [0196.795] wcscmp (_String1="RESUME.DPV", _String2="..") returned 1 [0196.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682c4e0 [0196.795] wcscpy (in: _Dest=0x682c4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.795] wcscat (in: _Dest=0x682c4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.795] wcscat (in: _Dest=0x682c4e0, _Source="RESUME.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" [0196.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0196.834] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e1f500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54e1f500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.XML", cAlternateFileName="")) returned 1 [0196.834] wcscmp (_String1="RESUME.XML", _String2=".") returned 1 [0196.834] wcscmp (_String1="RESUME.XML", _String2="..") returned 1 [0196.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d090 [0196.834] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.834] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.834] wcscat (in: _Dest=0x682d090, _Source="RESUME.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" [0196.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0196.836] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSPMECH.POC", cAlternateFileName="")) returned 1 [0196.836] wcscmp (_String1="RSPMECH.POC", _String2=".") returned 1 [0196.836] wcscmp (_String1="RSPMECH.POC", _String2="..") returned 1 [0196.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c810 [0196.836] wcscpy (in: _Dest=0x682c810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0196.836] wcscat (in: _Dest=0x682c810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0196.836] wcscat (in: _Dest=0x682c810, _Source="RSPMECH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" [0196.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0197.111] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDBAR98.POC", cAlternateFileName="")) returned 1 [0197.111] wcscmp (_String1="SIDBAR98.POC", _String2=".") returned 1 [0197.111] wcscmp (_String1="SIDBAR98.POC", _String2="..") returned 1 [0197.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cef8 [0197.111] wcscpy (in: _Dest=0x682cef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.111] wcscat (in: _Dest=0x682cef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.111] wcscat (in: _Dest=0x682cef8, _Source="SIDBAR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" [0200.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0200.464] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9201100, ftCreationTime.dwHighDateTime=0x1c9c774, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9201100, ftLastWriteTime.dwHighDateTime=0x1c9c774, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.DPV", cAlternateFileName="SIDEBA~1.DPV")) returned 1 [0200.466] wcscmp (_String1="SIDEBARBB.DPV", _String2=".") returned 1 [0200.466] wcscmp (_String1="SIDEBARBB.DPV", _String2="..") returned 1 [0200.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c788 [0200.466] wcscpy (in: _Dest=0x682c788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0200.466] wcscat (in: _Dest=0x682c788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0200.466] wcscat (in: _Dest=0x682c788, _Source="SIDEBARBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" [0201.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0201.475] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3938000, ftCreationTime.dwHighDateTime=0x1c98def, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3938000, ftLastWriteTime.dwHighDateTime=0x1c98def, nFileSizeHigh=0x0, nFileSizeLow=0xb08a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.POC", cAlternateFileName="SIDEBA~1.POC")) returned 1 [0201.475] wcscmp (_String1="SIDEBARBB.POC", _String2=".") returned 1 [0201.475] wcscmp (_String1="SIDEBARBB.POC", _String2="..") returned 1 [0201.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c0a0 [0201.475] wcscpy (in: _Dest=0x682c0a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.475] wcscat (in: _Dest=0x682c0a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.475] wcscat (in: _Dest=0x682c0a0, _Source="SIDEBARBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" [0201.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0201.476] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf953fd00, ftCreationTime.dwHighDateTime=0x1c9c772, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf953fd00, ftLastWriteTime.dwHighDateTime=0x1c9c772, nFileSizeHigh=0x0, nFileSizeLow=0x49e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.DPV", cAlternateFileName="SIDEBA~2.DPV")) returned 1 [0201.476] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2=".") returned 1 [0201.476] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2="..") returned 1 [0201.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0201.476] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.476] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.476] wcscat (in: _Dest=0x66dc288, _Source="SIDEBARVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" [0201.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0201.478] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963fb00, ftCreationTime.dwHighDateTime=0x1c98df1, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7963fb00, ftLastWriteTime.dwHighDateTime=0x1c98df1, nFileSizeHigh=0x0, nFileSizeLow=0xa71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.POC", cAlternateFileName="SIDEBA~2.POC")) returned 1 [0201.478] wcscmp (_String1="SIDEBARVERTBB.POC", _String2=".") returned 1 [0201.478] wcscmp (_String1="SIDEBARVERTBB.POC", _String2="..") returned 1 [0201.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0201.478] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.478] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.478] wcscat (in: _Dest=0x66dd1b8, _Source="SIDEBARVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" [0201.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0201.479] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacef3800, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacef3800, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x17e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.DPV", cAlternateFileName="")) returned 1 [0201.479] wcscmp (_String1="SIGN.DPV", _String2=".") returned 1 [0201.479] wcscmp (_String1="SIGN.DPV", _String2="..") returned 1 [0201.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f7f0 [0201.479] wcscpy (in: _Dest=0x3e0f7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.479] wcscat (in: _Dest=0x3e0f7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.480] wcscat (in: _Dest=0x3e0f7f0, _Source="SIGN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" [0201.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0201.481] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6c1d00, ftCreationTime.dwHighDateTime=0x1ca1b40, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6c1d00, ftLastWriteTime.dwHighDateTime=0x1ca1b40, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.XML", cAlternateFileName="")) returned 1 [0201.481] wcscmp (_String1="SIGN.XML", _String2=".") returned 1 [0201.481] wcscmp (_String1="SIGN.XML", _String2="..") returned 1 [0201.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e10bf0 [0201.481] wcscpy (in: _Dest=0x3e10bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.481] wcscat (in: _Dest=0x3e10bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.481] wcscat (in: _Dest=0x3e10bf0, _Source="SIGN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" [0201.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e10bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0201.482] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb82, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN98.POC", cAlternateFileName="")) returned 1 [0201.482] wcscmp (_String1="SIGN98.POC", _String2=".") returned 1 [0201.482] wcscmp (_String1="SIGN98.POC", _String2="..") returned 1 [0201.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bf90 [0201.483] wcscpy (in: _Dest=0x682bf90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.483] wcscat (in: _Dest=0x682bf90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.483] wcscat (in: _Dest=0x682bf90, _Source="SIGN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" [0201.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0201.484] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNHM.POC", cAlternateFileName="")) returned 1 [0201.484] wcscmp (_String1="SIGNHM.POC", _String2=".") returned 1 [0201.484] wcscmp (_String1="SIGNHM.POC", _String2="..") returned 1 [0201.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682d338 [0201.484] wcscpy (in: _Dest=0x682d338, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.484] wcscat (in: _Dest=0x682d338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.484] wcscat (in: _Dest=0x682d338, _Source="SIGNHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" [0201.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0201.485] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x760e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNIPE.POC", cAlternateFileName="")) returned 1 [0201.485] wcscmp (_String1="SNIPE.POC", _String2=".") returned 1 [0201.486] wcscmp (_String1="SNIPE.POC", _String2="..") returned 1 [0201.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f370 [0201.486] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.486] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.486] wcscat (in: _Dest=0x3e0f370, _Source="SNIPE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" [0201.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0201.487] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd44100, ftCreationTime.dwHighDateTime=0x1ca107b, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd44100, ftLastWriteTime.dwHighDateTime=0x1ca107b, nFileSizeHigh=0x0, nFileSizeLow=0x5f93b, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.DPV", cAlternateFileName="")) returned 1 [0201.487] wcscmp (_String1="STORYBB.DPV", _String2=".") returned 1 [0201.487] wcscmp (_String1="STORYBB.DPV", _String2="..") returned 1 [0201.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d888 [0201.487] wcscpy (in: _Dest=0x682d888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.487] wcscat (in: _Dest=0x682d888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.487] wcscat (in: _Dest=0x682d888, _Source="STORYBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" [0201.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0201.488] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71360a00, ftCreationTime.dwHighDateTime=0x1ca1077, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71360a00, ftLastWriteTime.dwHighDateTime=0x1ca1077, nFileSizeHigh=0x0, nFileSizeLow=0x7d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.POC", cAlternateFileName="")) returned 1 [0201.488] wcscmp (_String1="STORYBB.POC", _String2=".") returned 1 [0201.489] wcscmp (_String1="STORYBB.POC", _String2="..") returned 1 [0201.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d800 [0201.489] wcscpy (in: _Dest=0x682d800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.489] wcscat (in: _Dest=0x682d800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.489] wcscat (in: _Dest=0x682d800, _Source="STORYBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" [0201.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0201.490] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9746c800, ftCreationTime.dwHighDateTime=0x1c9c771, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9746c800, ftLastWriteTime.dwHighDateTime=0x1c9c771, nFileSizeHigh=0x0, nFileSizeLow=0x4c9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.DPV", cAlternateFileName="STORYV~1.DPV")) returned 1 [0201.490] wcscmp (_String1="STORYVERTBB.DPV", _String2=".") returned 1 [0201.490] wcscmp (_String1="STORYVERTBB.DPV", _String2="..") returned 1 [0201.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0201.490] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.490] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.490] wcscat (in: _Dest=0x66dd2d8, _Source="STORYVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" [0201.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0201.491] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e47ba00, ftCreationTime.dwHighDateTime=0x1c98df6, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e47ba00, ftLastWriteTime.dwHighDateTime=0x1c98df6, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.POC", cAlternateFileName="STORYV~1.POC")) returned 1 [0201.491] wcscmp (_String1="STORYVERTBB.POC", _String2=".") returned 1 [0201.492] wcscmp (_String1="STORYVERTBB.POC", _String2="..") returned 1 [0201.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66db598 [0201.492] wcscpy (in: _Dest=0x66db598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.492] wcscat (in: _Dest=0x66db598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.492] wcscat (in: _Dest=0x66db598, _Source="STORYVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" [0201.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0201.495] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRBRST.POC", cAlternateFileName="")) returned 1 [0201.495] wcscmp (_String1="STRBRST.POC", _String2=".") returned 1 [0201.495] wcscmp (_String1="STRBRST.POC", _String2="..") returned 1 [0201.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d778 [0201.495] wcscpy (in: _Dest=0x682d778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.495] wcscat (in: _Dest=0x682d778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.495] wcscat (in: _Dest=0x682d778, _Source="STRBRST.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" [0201.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0201.496] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEAROFF.POC", cAlternateFileName="")) returned 1 [0201.496] wcscmp (_String1="TEAROFF.POC", _String2=".") returned 1 [0201.496] wcscmp (_String1="TEAROFF.POC", _String2="..") returned 1 [0201.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d6f0 [0201.496] wcscpy (in: _Dest=0x682d6f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.497] wcscat (in: _Dest=0x682d6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.497] wcscat (in: _Dest=0x682d6f0, _Source="TEAROFF.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" [0201.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0201.498] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3065a00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3065a00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x40a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOC98.POC", cAlternateFileName="")) returned 1 [0201.498] wcscmp (_String1="TOC98.POC", _String2=".") returned 1 [0201.498] wcscmp (_String1="TOC98.POC", _String2="..") returned 1 [0201.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e0f470 [0201.498] wcscpy (in: _Dest=0x3e0f470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.498] wcscat (in: _Dest=0x3e0f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.498] wcscat (in: _Dest=0x3e0f470, _Source="TOC98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" [0201.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0201.499] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb568b400, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb568b400, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCOMP98.POC", cAlternateFileName="")) returned 1 [0201.500] wcscmp (_String1="WCOMP98.POC", _String2=".") returned 1 [0201.500] wcscmp (_String1="WCOMP98.POC", _String2="..") returned 1 [0201.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d668 [0201.500] wcscpy (in: _Dest=0x682d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.500] wcscat (in: _Dest=0x682d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.500] wcscat (in: _Dest=0x682d668, _Source="WCOMP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" [0201.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0201.501] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaddde00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaddde00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x166484, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEB11.POC", cAlternateFileName="")) returned 1 [0201.501] wcscmp (_String1="WEB11.POC", _String2=".") returned 1 [0201.501] wcscmp (_String1="WEB11.POC", _String2="..") returned 1 [0201.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e102f0 [0201.501] wcscpy (in: _Dest=0x3e102f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.501] wcscat (in: _Dest=0x3e102f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.501] wcscat (in: _Dest=0x3e102f0, _Source="WEB11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" [0201.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e102f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0201.502] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBCALSO.POC", cAlternateFileName="")) returned 1 [0201.503] wcscmp (_String1="WEBCALSO.POC", _String2=".") returned 1 [0201.503] wcscmp (_String1="WEBCALSO.POC", _String2="..") returned 1 [0201.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d5e0 [0201.503] wcscpy (in: _Dest=0x682d5e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.503] wcscat (in: _Dest=0x682d5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.503] wcscat (in: _Dest=0x682d5e0, _Source="WEBCALSO.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" [0201.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0201.504] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBEMAIL.POC", cAlternateFileName="")) returned 1 [0201.504] wcscmp (_String1="WEBEMAIL.POC", _String2=".") returned 1 [0201.504] wcscmp (_String1="WEBEMAIL.POC", _String2="..") returned 1 [0201.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682c568 [0201.504] wcscpy (in: _Dest=0x682c568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.504] wcscat (in: _Dest=0x682c568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.504] wcscat (in: _Dest=0x682c568, _Source="WEBEMAIL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" [0201.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0201.506] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x12a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHED98.POC", cAlternateFileName="")) returned 1 [0201.506] wcscmp (_String1="WEBHED98.POC", _String2=".") returned 1 [0201.506] wcscmp (_String1="WEBHED98.POC", _String2="..") returned 1 [0201.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d228 [0201.506] wcscpy (in: _Dest=0x682d228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.506] wcscat (in: _Dest=0x682d228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.506] wcscat (in: _Dest=0x682d228, _Source="WEBHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" [0201.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0201.508] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHOME.POC", cAlternateFileName="")) returned 1 [0201.508] wcscmp (_String1="WEBHOME.POC", _String2=".") returned 1 [0201.508] wcscmp (_String1="WEBHOME.POC", _String2="..") returned 1 [0201.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682c920 [0201.508] wcscpy (in: _Dest=0x682c920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.508] wcscat (in: _Dest=0x682c920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.508] wcscat (in: _Dest=0x682c920, _Source="WEBHOME.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" [0201.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0201.509] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBLINK.POC", cAlternateFileName="")) returned 1 [0201.509] wcscmp (_String1="WEBLINK.POC", _String2=".") returned 1 [0201.509] wcscmp (_String1="WEBLINK.POC", _String2="..") returned 1 [0201.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682dc40 [0201.509] wcscpy (in: _Dest=0x682dc40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.509] wcscat (in: _Dest=0x682dc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.509] wcscat (in: _Dest=0x682dc40, _Source="WEBLINK.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" [0201.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682dc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0201.510] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f50d00, ftCreationTime.dwHighDateTime=0x1c5d98b, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f50d00, ftLastWriteTime.dwHighDateTime=0x1c5d98b, nFileSizeHigh=0x0, nFileSizeLow=0xfeb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.DPV", cAlternateFileName="")) returned 1 [0201.511] wcscmp (_String1="WEBPAGE.DPV", _String2=".") returned 1 [0201.511] wcscmp (_String1="WEBPAGE.DPV", _String2="..") returned 1 [0201.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bf08 [0201.511] wcscpy (in: _Dest=0x682bf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.511] wcscat (in: _Dest=0x682bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.511] wcscat (in: _Dest=0x682bf08, _Source="WEBPAGE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" [0201.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0201.512] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72af5a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72af5a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.XML", cAlternateFileName="")) returned 1 [0201.512] wcscmp (_String1="WEBPAGE.XML", _String2=".") returned 1 [0201.512] wcscmp (_String1="WEBPAGE.XML", _String2="..") returned 1 [0201.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682db30 [0201.512] wcscpy (in: _Dest=0x682db30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.512] wcscat (in: _Dest=0x682db30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.512] wcscat (in: _Dest=0x682db30, _Source="WEBPAGE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" [0201.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0201.861] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xba14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.DPV", cAlternateFileName="")) returned 1 [0201.861] wcscmp (_String1="WITHCOMP.DPV", _String2=".") returned 1 [0201.861] wcscmp (_String1="WITHCOMP.DPV", _String2="..") returned 1 [0201.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682d090 [0201.861] wcscpy (in: _Dest=0x682d090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.861] wcscat (in: _Dest=0x682d090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.861] wcscat (in: _Dest=0x682d090, _Source="WITHCOMP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" [0201.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0201.961] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b079500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b079500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1716, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.XML", cAlternateFileName="")) returned 1 [0201.961] wcscmp (_String1="WITHCOMP.XML", _String2=".") returned 1 [0201.961] wcscmp (_String1="WITHCOMP.XML", _String2="..") returned 1 [0201.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x682cbc8 [0201.961] wcscpy (in: _Dest=0x682cbc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.961] wcscat (in: _Dest=0x682cbc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.961] wcscat (in: _Dest=0x682cbc8, _Source="WITHCOMP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" [0201.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682cbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0201.962] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb082bf00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb082bf00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x79e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.DPV", cAlternateFileName="")) returned 1 [0201.962] wcscmp (_String1="WORDREP.DPV", _String2=".") returned 1 [0201.962] wcscmp (_String1="WORDREP.DPV", _String2="..") returned 1 [0201.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682d910 [0201.962] wcscpy (in: _Dest=0x682d910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.962] wcscat (in: _Dest=0x682d910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.962] wcscat (in: _Dest=0x682d910, _Source="WORDREP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" [0201.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682d910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0201.964] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8490fd00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8490fd00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1854, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.XML", cAlternateFileName="")) returned 1 [0201.964] wcscmp (_String1="WORDREP.XML", _String2=".") returned 1 [0201.964] wcscmp (_String1="WORDREP.XML", _String2="..") returned 1 [0201.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f268c0 [0201.964] wcscpy (in: _Dest=0x3f268c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.964] wcscat (in: _Dest=0x3f268c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.964] wcscat (in: _Dest=0x3f268c0, _Source="WORDREP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" [0201.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f268c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0201.965] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPULQT98.POC", cAlternateFileName="")) returned 1 [0201.965] wcscmp (_String1="WPULQT98.POC", _String2=".") returned 1 [0201.965] wcscmp (_String1="WPULQT98.POC", _String2="..") returned 1 [0201.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27608 [0201.965] wcscpy (in: _Dest=0x3f27608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.965] wcscat (in: _Dest=0x3f27608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.965] wcscat (in: _Dest=0x3f27608, _Source="WPULQT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" [0201.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0201.966] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 1 [0201.966] wcscmp (_String1="WSIDBR98.POC", _String2=".") returned 1 [0201.966] wcscmp (_String1="WSIDBR98.POC", _String2="..") returned 1 [0201.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f27be0 [0201.966] wcscpy (in: _Dest=0x3f27be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.966] wcscat (in: _Dest=0x3f27be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.966] wcscat (in: _Dest=0x3f27be0, _Source="WSIDBR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" [0201.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f27be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0201.967] FindNextFileW (in: hFindFile=0x66d25a0, lpFindFileData=0x3f12980 | out: lpFindFileData=0x3f12980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 0 [0203.142] FindClose (in: hFindFile=0x66d25a0 | out: hFindFile=0x66d25a0) returned 1 [0204.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12980) returned 1 [0204.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29db0) returned 1 [0204.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29480) returned 1 Thread: id = 3573 os_tid = 0xe28 [0164.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0e70 [0164.733] wcscpy (in: _Dest=0x66d0e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0164.733] wcscat (in: _Dest=0x66d0e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0164.733] wcscat (in: _Dest=0x66d0e70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*" [0164.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0164.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0167.689] wcscmp (_String1=".", _String2=".") returned 0 [0167.689] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.690] wcscmp (_String1="..", _String2=".") returned 1 [0167.690] wcscmp (_String1="..", _String2="..") returned 0 [0167.690] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde45ee00, ftCreationTime.dwHighDateTime=0x1bf9825, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde45ee00, ftLastWriteTime.dwHighDateTime=0x1bf9825, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="MSNMON~1.IQY")) returned 1 [0167.690] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2=".") returned 1 [0167.690] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2="..") returned 1 [0167.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3def900 [0167.690] wcscpy (in: _Dest=0x3def900, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0167.690] wcscat (in: _Dest=0x3def900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0167.690] wcscat (in: _Dest=0x3def900, _Source="MSN MoneyCentral Investor Currency Rates.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" [0169.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3def900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0169.626] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd9ae00, ftCreationTime.dwHighDateTime=0x1c2d919, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fd9ae00, ftLastWriteTime.dwHighDateTime=0x1c2d919, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Major Indicies.iqy", cAlternateFileName="MSNMON~2.IQY")) returned 1 [0169.626] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2=".") returned 1 [0169.626] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2="..") returned 1 [0169.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f840 [0169.626] wcscpy (in: _Dest=0x682f840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0169.626] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0169.626] wcscat (in: _Dest=0x682f840, _Source="MSN MoneyCentral Investor Major Indicies.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" [0169.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0169.627] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 1 [0169.628] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2=".") returned 1 [0169.628] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2="..") returned 1 [0169.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f200 [0169.628] wcscpy (in: _Dest=0x682f200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0169.628] wcscat (in: _Dest=0x682f200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0169.628] wcscat (in: _Dest=0x682f200, _Source="MSN MoneyCentral Investor Stock Quotes.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" [0169.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0169.629] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 0 [0169.629] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0169.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0169.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0169.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 Thread: id = 3574 os_tid = 0x1788 [0164.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav")) returned 0x20 [0166.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0166.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.445] GetLastError () returned 0x5 [0166.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0166.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 Thread: id = 3575 os_tid = 0x17c8 [0164.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm")) returned 0x20 [0166.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0166.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.428] GetLastError () returned 0x5 [0166.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0166.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 Thread: id = 3576 os_tid = 0x1ad0 [0164.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid")) returned 0x20 [0164.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0164.734] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.735] GetLastError () returned 0x5 [0164.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0164.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 3577 os_tid = 0x1ad4 [0164.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt")) returned 0x20 [0164.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0164.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.751] GetLastError () returned 0x5 [0164.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0164.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 3578 os_tid = 0x1ad8 [0164.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt")) returned 0x20 [0166.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0166.248] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.248] GetLastError () returned 0x5 [0166.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0166.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 3579 os_tid = 0x1adc [0164.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 0x20 [0166.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0166.448] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.448] GetLastError () returned 0x5 [0166.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0166.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333be8) returned 1 Thread: id = 3580 os_tid = 0x1ae0 [0164.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt")) returned 0x20 [0166.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0166.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.450] GetLastError () returned 0x5 [0166.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0166.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ca8) returned 1 Thread: id = 3581 os_tid = 0x1ae4 [0164.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt")) returned 0x20 [0166.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0166.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.451] GetLastError () returned 0x5 [0166.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0166.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 3582 os_tid = 0x1ae8 [0164.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt")) returned 0x20 [0166.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0166.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.453] GetLastError () returned 0x5 [0166.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0166.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 3583 os_tid = 0x1aec [0164.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 0x20 [0166.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0166.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.454] GetLastError () returned 0x5 [0166.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0166.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 3584 os_tid = 0x1af8 [0164.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt")) returned 0x20 [0166.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0166.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.455] GetLastError () returned 0x5 [0166.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0166.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee18e0) returned 1 Thread: id = 3585 os_tid = 0x1afc [0164.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt")) returned 0x20 [0166.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0166.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.456] GetLastError () returned 0x5 [0166.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0166.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1b08) returned 1 Thread: id = 3586 os_tid = 0x1b00 [0164.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt")) returned 0x20 [0166.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0166.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.458] GetLastError () returned 0x5 [0166.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0166.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2010) returned 1 Thread: id = 3587 os_tid = 0x1b04 [0164.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt")) returned 0x20 [0166.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0166.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.459] GetLastError () returned 0x5 [0166.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0166.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 3588 os_tid = 0x1b08 [0164.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt")) returned 0x20 [0166.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0166.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.461] GetLastError () returned 0x5 [0166.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0166.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 3589 os_tid = 0x1b0c [0164.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt")) returned 0x20 [0166.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0166.462] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.462] GetLastError () returned 0x5 [0166.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0166.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee20c8) returned 1 Thread: id = 3590 os_tid = 0x11a8 [0164.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 0x20 [0166.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0166.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.464] GetLastError () returned 0x5 [0166.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0166.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2180) returned 1 Thread: id = 3591 os_tid = 0x1b10 [0164.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 0x20 [0166.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0166.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.465] GetLastError () returned 0x5 [0166.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0166.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 3592 os_tid = 0x1b14 [0164.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt")) returned 0x20 [0166.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0166.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.467] GetLastError () returned 0x5 [0166.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0166.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2238) returned 1 Thread: id = 3593 os_tid = 0x1b18 [0164.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt")) returned 0x20 [0166.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0166.468] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.468] GetLastError () returned 0x5 [0166.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0166.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee22f0) returned 1 Thread: id = 3594 os_tid = 0x1b1c [0164.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 0x20 [0166.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0166.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.481] GetLastError () returned 0x5 [0166.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0166.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf148) returned 1 Thread: id = 3595 os_tid = 0x1b20 [0164.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt")) returned 0x20 [0166.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0166.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.447] GetLastError () returned 0x5 [0166.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0166.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 3596 os_tid = 0x1b24 [0164.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\azores")) returned 0x20 [0164.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores", dwFileAttributes=0x20) returned 0 [0164.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\azores"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.785] GetLastError () returned 0x5 [0164.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores", dwFileAttributes=0x20) returned 0 [0164.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 3597 os_tid = 0x1b28 [0164.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\bermuda")) returned 0x20 [0164.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda", dwFileAttributes=0x20) returned 0 [0164.804] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\bermuda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.812] GetLastError () returned 0x5 [0164.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda", dwFileAttributes=0x20) returned 0 [0164.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 3598 os_tid = 0x1b2c [0164.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\canary")) returned 0x20 [0168.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary", dwFileAttributes=0x20) returned 0 [0168.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\canary"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.828] GetLastError () returned 0x5 [0168.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary", dwFileAttributes=0x20) returned 0 [0168.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 3599 os_tid = 0x1b30 [0164.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\cape_verde")) returned 0x20 [0167.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde", dwFileAttributes=0x20) returned 0 [0168.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\cape_verde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.106] GetLastError () returned 0x5 [0169.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde", dwFileAttributes=0x20) returned 0 [0169.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 Thread: id = 3600 os_tid = 0x1b38 [0164.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\faroe")) returned 0x20 [0168.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe", dwFileAttributes=0x20) returned 0 [0168.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\faroe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.831] GetLastError () returned 0x5 [0168.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe", dwFileAttributes=0x20) returned 0 [0168.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 3601 os_tid = 0x1428 [0164.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\madeira")) returned 0x20 [0168.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira", dwFileAttributes=0x20) returned 0 [0168.830] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\madeira"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.830] GetLastError () returned 0x5 [0168.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira", dwFileAttributes=0x20) returned 0 [0168.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 3602 os_tid = 0x1b40 [0164.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\reykjavik")) returned 0x20 [0169.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik", dwFileAttributes=0x20) returned 0 [0169.114] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\reykjavik"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.120] GetLastError () returned 0x5 [0169.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik", dwFileAttributes=0x20) returned 0 [0169.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 Thread: id = 3603 os_tid = 0x1b48 [0164.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\south_georgia")) returned 0x20 [0168.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia", dwFileAttributes=0x20) returned 0 [0168.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\south_georgia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.826] GetLastError () returned 0x5 [0168.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia", dwFileAttributes=0x20) returned 0 [0168.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbff8) returned 1 Thread: id = 3604 os_tid = 0x1b4c [0164.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\stanley")) returned 0x20 [0167.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley", dwFileAttributes=0x20) returned 0 [0167.923] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\stanley"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.107] GetLastError () returned 0x5 [0169.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley", dwFileAttributes=0x20) returned 0 [0169.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 3605 os_tid = 0x1b50 [0164.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\st_helena")) returned 0x20 [0169.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena", dwFileAttributes=0x20) returned 0 [0169.108] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\st_helena"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.108] GetLastError () returned 0x5 [0169.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena", dwFileAttributes=0x20) returned 0 [0169.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 Thread: id = 3606 os_tid = 0x1b54 [0164.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 0x20 [0165.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0166.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.008] GetLastError () returned 0x5 [0166.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0166.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 Thread: id = 3607 os_tid = 0x1b58 [0164.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn")) returned 0x20 [0167.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0167.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.583] GetLastError () returned 0x5 [0167.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0167.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 3608 os_tid = 0x1b5c [0164.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn")) returned 0x20 [0167.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0167.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.584] GetLastError () returned 0x5 [0167.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0167.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 3609 os_tid = 0x1b60 [0164.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll")) returned 0x20 [0167.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0167.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.597] GetLastError () returned 0x5 [0167.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0167.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68185d0) returned 1 Thread: id = 3610 os_tid = 0x3f0 [0164.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd")) returned 0x20 [0167.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0167.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.598] GetLastError () returned 0x5 [0167.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0167.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 3611 os_tid = 0x1b64 [0164.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs")) returned 0x20 [0167.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0167.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.592] GetLastError () returned 0x5 [0167.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0167.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 3612 os_tid = 0x1b68 [0164.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc")) returned 0x20 [0167.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.586] GetLastError () returned 0x5 [0167.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 Thread: id = 3613 os_tid = 0x1b6c [0164.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt")) returned 0x20 [0167.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0167.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.587] GetLastError () returned 0x5 [0167.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0167.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc1f8) returned 1 Thread: id = 3614 os_tid = 0x1b70 [0164.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk")) returned 0x20 [0167.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.589] GetLastError () returned 0x5 [0167.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 3615 os_tid = 0x1b74 [0164.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk")) returned 0x20 [0167.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.590] GetLastError () returned 0x5 [0167.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 3616 os_tid = 0x1b78 [0164.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs")) returned 0x20 [0167.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0167.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.593] GetLastError () returned 0x5 [0167.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda4f8) returned 1 Thread: id = 3617 os_tid = 0x1b7c [0164.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc")) returned 0x20 [0167.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.595] GetLastError () returned 0x5 [0167.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 3618 os_tid = 0x1b80 [0164.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt")) returned 0x20 [0167.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0167.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.572] GetLastError () returned 0x5 [0167.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0167.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 3619 os_tid = 0x1b84 [0164.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk")) returned 0x20 [0167.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.573] GetLastError () returned 0x5 [0167.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 3620 os_tid = 0x125c [0164.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk")) returned 0x20 [0167.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.575] GetLastError () returned 0x5 [0167.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0167.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 3621 os_tid = 0x1b88 [0164.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla")) returned 0x20 [0166.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0166.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.871] GetLastError () returned 0x5 [0166.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0166.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 3622 os_tid = 0x1b8c [0164.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl")) returned 0x20 [0167.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0167.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.562] GetLastError () returned 0x5 [0167.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0167.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 3623 os_tid = 0x1b94 [0164.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd")) returned 0x20 [0167.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0167.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.576] GetLastError () returned 0x5 [0167.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0167.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edae78) returned 1 Thread: id = 3624 os_tid = 0x1260 [0164.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css")) returned 0x20 [0167.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0167.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.578] GetLastError () returned 0x5 [0167.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 Thread: id = 3625 os_tid = 0x1264 [0164.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css")) returned 0x20 [0167.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0167.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.580] GetLastError () returned 0x5 [0167.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0167.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 Thread: id = 3626 os_tid = 0x1ba0 [0164.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd")) returned 0x20 [0167.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0167.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.581] GetLastError () returned 0x5 [0167.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0167.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda478) returned 1 Thread: id = 3627 os_tid = 0x1268 [0164.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl")) returned 0x20 [0167.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0167.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.565] GetLastError () returned 0x5 [0167.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0167.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edaff8) returned 1 Thread: id = 3628 os_tid = 0x126c [0164.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra")) returned 0x20 [0167.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0167.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.568] GetLastError () returned 0x5 [0167.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0167.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 3629 os_tid = 0x1ba4 [0164.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs")) returned 0x20 [0167.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0167.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.567] GetLastError () returned 0x5 [0167.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0167.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda178) returned 1 Thread: id = 3630 os_tid = 0x14f4 [0164.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc")) returned 0x20 [0167.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.560] GetLastError () returned 0x5 [0167.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0167.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 3631 os_tid = 0x1ba8 [0164.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol")) returned 0x20 [0166.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0166.504] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.504] GetLastError () returned 0x5 [0166.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0166.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 Thread: id = 3632 os_tid = 0x1bac [0164.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol")) returned 0x20 [0166.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0166.515] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.515] GetLastError () returned 0x5 [0166.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0166.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 3633 os_tid = 0x72c [0164.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol")) returned 0x20 [0166.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0166.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.517] GetLastError () returned 0x5 [0166.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0166.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 3634 os_tid = 0x14f8 [0164.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol")) returned 0x20 [0166.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0166.513] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.514] GetLastError () returned 0x5 [0166.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0166.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee23a8) returned 1 Thread: id = 3635 os_tid = 0x14fc [0164.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv")) returned 0x20 [0166.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0166.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.506] GetLastError () returned 0x5 [0166.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0166.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 3636 os_tid = 0x1270 [0164.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv")) returned 0x20 [0166.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0166.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.522] GetLastError () returned 0x5 [0166.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0166.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 3637 os_tid = 0x1500 [0164.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv")) returned 0x20 [0166.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0166.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.523] GetLastError () returned 0x5 [0166.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0166.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 3638 os_tid = 0xb60 [0164.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv")) returned 0x20 [0166.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0166.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.520] GetLastError () returned 0x5 [0166.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0166.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2460) returned 1 Thread: id = 3639 os_tid = 0x1bb0 [0164.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 0x2020 [0164.861] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", dwFileAttributes=0x20) returned 1 [0164.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x173c [0164.862] GetFileSizeEx (in: hFile=0x173c, lpFileSize=0x1087f88c | out: lpFileSize=0x1087f88c*=66208) returned 1 [0164.862] SetFilePointerEx (in: hFile=0x173c, liDistanceToMove=0x1029c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.862] ReadFile (in: hFile=0x173c, lpBuffer=0x1087f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1087f878, lpOverlapped=0x0 | out: lpBuffer=0x1087f868*, lpNumberOfBytesRead=0x1087f878*=0x4, lpOverlapped=0x0) returned 1 [0164.865] SetFilePointerEx (in: hFile=0x173c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0164.866] NtQuerySystemTime (in: CurrentTime=0x1087f800 | out: CurrentTime=0x1087f800*=132482710733868000) returned 0x0 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x38a14b1f [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x7b760bc6 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x1b76ad2c [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x600b5f13 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x79241bc6 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x5098bd14 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x21f49f64 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x5990a57a [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x51c1b10f [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x6eec8198 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x1e7b60ca [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x6adae739 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x51b32bc6 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x66c36b62 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x76dc625c [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0xc1e163f [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x21d8a8aa [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x5664e758 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x5dc5d91 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x142f365f [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x21261af8 [0164.866] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x1c560e4c [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x63ea3966 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0xedf0bff [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x291af0a [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x2cfcb6 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x524b32dd [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x69f61839 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x4e48ac55 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x34953254 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x7999bee1 [0164.867] RtlRandomEx (in: Seed=0x1087f7f8 | out: Seed=0x1087f7f8) returned 0x7cf1be1b [0164.878] SetFilePointerEx (in: hFile=0x173c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.878] ReadFile (in: hFile=0x173c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x1087f800, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x1087f800*=0x3c00, lpOverlapped=0x0) returned 1 [0164.879] SetFilePointerEx (in: hFile=0x173c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e4ed20 [0164.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0ab0 [0164.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0164.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0164.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0164.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0164.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0164.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7d0) returned 1 [0164.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0164.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0164.880] WriteFile (in: hFile=0x173c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1087f800, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x1087f800*=0x3c00, lpOverlapped=0x0) returned 1 [0167.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0167.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0167.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5f60 [0167.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0167.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5210 [0167.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0167.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0167.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0167.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0167.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822708) returned 1 [0167.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec828 [0167.695] SetFilePointerEx (in: hFile=0x173c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.695] WriteFile (in: hFile=0x173c, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x1087f880, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x1087f880*=0x106, lpOverlapped=0x0) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0169.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0169.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0169.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0169.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69c2370 [0169.299] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" [0169.299] wcscat (in: _Dest=0x69c2370, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.ac3a86" [0169.299] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.ac3a86", NtPathName=0x1087f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0169.828] FlushFileBuffers (hFile=0x173c) returned 1 [0169.829] CloseHandle (hObject=0x173c) returned 1 [0169.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c2370 [0169.831] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0169.831] wcscat (in: _Dest=0x69c2370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt" [0169.831] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\ac3a86-readme.txt")) returned 0x2020 [0169.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 [0169.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 3640 os_tid = 0x1504 [0164.884] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 0x2020 [0164.884] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", dwFileAttributes=0x20) returned 1 [0164.885] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1738 [0164.886] GetFileSizeEx (in: hFile=0x1738, lpFileSize=0xdeefa0c | out: lpFileSize=0xdeefa0c*=2676) returned 1 [0164.886] SetFilePointerEx (in: hFile=0x1738, liDistanceToMove=0xa70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.886] ReadFile (in: hFile=0x1738, lpBuffer=0xdeef9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdeef9f8, lpOverlapped=0x0 | out: lpBuffer=0xdeef9e8*, lpNumberOfBytesRead=0xdeef9f8*=0x4, lpOverlapped=0x0) returned 1 [0164.890] SetFilePointerEx (in: hFile=0x1738, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7d0 [0164.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0164.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0164.890] NtQuerySystemTime (in: CurrentTime=0xdeef980 | out: CurrentTime=0xdeef980*=132482710734180000) returned 0x0 [0164.890] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x3e365710 [0164.890] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x3700a1cc [0164.890] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x778f2628 [0164.890] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x1dafda51 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x335ee304 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x307e5d7f [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x41644877 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x1045d943 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0xb2f49bd [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x3ac1cd8 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x600cdb85 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x40618caa [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x70d85a3f [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x64c7a94e [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x789af426 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x669599f3 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x66380242 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x5866a0c8 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x4ae26384 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x1a3626a6 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x773d5769 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x50b9f479 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x3de5f893 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x7e288cb5 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x11a7d2a8 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x48c8b1a7 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x4b553ced [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x56c59206 [0164.891] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x71877fad [0164.892] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x187332ea [0164.892] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x5f74ba78 [0164.892] RtlRandomEx (in: Seed=0xdeef978 | out: Seed=0xdeef978) returned 0x5b16b90b [0164.924] ReadFile (in: hFile=0x1738, lpBuffer=0x697fce8, nNumberOfBytesToRead=0xa74, lpNumberOfBytesRead=0xdeef974, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0xdeef974*=0xa74, lpOverlapped=0x0) returned 1 [0164.924] SetFilePointerEx (in: hFile=0x1738, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.924] WriteFile (in: hFile=0x1738, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0xdeef978, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0xdeef978*=0xa74, lpOverlapped=0x0) returned 1 [0167.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0167.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0167.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0167.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0167.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0167.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0167.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0167.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0167.908] SetFilePointerEx (in: hFile=0x1738, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.908] WriteFile (in: hFile=0x1738, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xdeefa00, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0xdeefa00*=0x104, lpOverlapped=0x0) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0168.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0168.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0168.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30e00 [0168.365] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" [0168.365] wcscat (in: _Dest=0x3e30e00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.ac3a86" [0168.365] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.ac3a86", NtPathName=0xdeef978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d7d8 [0168.368] FlushFileBuffers (hFile=0x1738) returned 1 [0169.247] CloseHandle (hObject=0x1738) returned 1 [0169.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x69c2370 [0169.268] wcscpy (in: _Dest=0x69c2370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0169.268] wcscat (in: _Dest=0x69c2370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt" [0169.268] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\ac3a86-readme.txt")) returned 0xffffffff [0169.269] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x158c [0169.277] WriteFile (in: hFile=0x158c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdeef994, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdeef994*=0x8b9, lpOverlapped=0x0) returned 1 [0169.282] CloseHandle (hObject=0x158c) returned 1 [0169.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 [0169.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 3641 os_tid = 0xb4c [0164.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav")) returned 0x20 [0164.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0164.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.942] GetLastError () returned 0x5 [0164.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0164.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 3642 os_tid = 0x1518 [0164.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav")) returned 0x20 [0164.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0164.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.964] GetLastError () returned 0x5 [0164.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0164.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 Thread: id = 3643 os_tid = 0x151c [0164.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav")) returned 0x20 [0164.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0164.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.987] GetLastError () returned 0x5 [0164.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0164.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 Thread: id = 3644 os_tid = 0x1530 [0164.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav")) returned 0x20 [0167.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0167.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.701] GetLastError () returned 0x5 [0167.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0167.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1f8) returned 1 Thread: id = 3645 os_tid = 0x714 [0164.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav")) returned 0x20 [0167.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0167.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.699] GetLastError () returned 0x5 [0167.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0167.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 Thread: id = 3646 os_tid = 0x155c [0164.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav")) returned 0x20 [0167.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0167.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.710] GetLastError () returned 0x5 [0167.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0167.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 3647 os_tid = 0x1568 [0165.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav")) returned 0x20 [0167.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0167.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.698] GetLastError () returned 0x5 [0167.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0167.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb478) returned 1 Thread: id = 3648 os_tid = 0x1bb4 [0165.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav")) returned 0x20 [0167.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0167.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.711] GetLastError () returned 0x5 [0167.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0167.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 Thread: id = 3649 os_tid = 0x156c [0165.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav")) returned 0x20 [0167.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0167.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.713] GetLastError () returned 0x5 [0167.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0167.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 3650 os_tid = 0x1bb8 [0165.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav")) returned 0x20 [0167.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0167.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.725] GetLastError () returned 0x5 [0167.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0167.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 3651 os_tid = 0x1570 [0165.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav")) returned 0x20 [0167.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0167.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.112] GetLastError () returned 0x5 [0167.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0167.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 3652 os_tid = 0x1bc4 [0165.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav")) returned 0x20 [0167.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0167.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.702] GetLastError () returned 0x5 [0167.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0167.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda878) returned 1 Thread: id = 3653 os_tid = 0x1274 [0165.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav")) returned 0x20 [0167.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0167.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.703] GetLastError () returned 0x5 [0167.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0167.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5f8) returned 1 Thread: id = 3654 os_tid = 0x1278 [0165.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav")) returned 0x20 [0167.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0167.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.714] GetLastError () returned 0x5 [0167.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0167.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 Thread: id = 3655 os_tid = 0x12cc [0165.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav")) returned 0x20 [0167.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0167.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.696] GetLastError () returned 0x5 [0167.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0167.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 3656 os_tid = 0xdec [0165.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav")) returned 0x20 [0167.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0167.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.707] GetLastError () returned 0x5 [0167.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0167.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6f8) returned 1 Thread: id = 3657 os_tid = 0x1c20 [0165.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav")) returned 0x20 [0167.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0167.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.705] GetLastError () returned 0x5 [0167.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0167.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 3658 os_tid = 0x1c24 [0165.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav")) returned 0x20 [0167.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0167.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.706] GetLastError () returned 0x5 [0167.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0167.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 Thread: id = 3659 os_tid = 0x1c28 [0165.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav")) returned 0x20 [0167.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0167.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.709] GetLastError () returned 0x5 [0167.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0167.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c338) returned 1 Thread: id = 3660 os_tid = 0x1c2c [0165.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 0x20 [0167.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.092] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.917] GetLastError () returned 0x5 [0170.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0170.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1998) returned 1 Thread: id = 3661 os_tid = 0x1c30 [0165.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 0x20 [0170.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0170.919] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.919] GetLastError () returned 0x5 [0170.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0170.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3960) returned 1 Thread: id = 3662 os_tid = 0x1c34 [0165.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 0x20 [0170.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0170.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.916] GetLastError () returned 0x5 [0170.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0170.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee25d0) returned 1 Thread: id = 3663 os_tid = 0xe30 [0165.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 0x20 [0170.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0170.202] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.914] GetLastError () returned 0x5 [0170.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0170.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2518) returned 1 Thread: id = 3664 os_tid = 0x1c38 [0165.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 0x20 [0170.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0170.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.769] GetLastError () returned 0x5 [0170.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0170.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 Thread: id = 3665 os_tid = 0xf00 [0165.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 0x20 [0168.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0169.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.767] GetLastError () returned 0x5 [0170.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0170.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f390) returned 1 Thread: id = 3666 os_tid = 0x1c3c [0165.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 0x20 [0169.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0169.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.238] GetLastError () returned 0x5 [0169.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0169.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 Thread: id = 3667 os_tid = 0x704 [0165.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 0x20 [0169.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.236] GetLastError () returned 0x5 [0169.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 3668 os_tid = 0xbe8 [0165.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 0x20 [0169.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.234] GetLastError () returned 0x5 [0169.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee27f8) returned 1 Thread: id = 3669 os_tid = 0x1c40 [0165.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 0x20 [0169.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.232] GetLastError () returned 0x5 [0169.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 3670 os_tid = 0xbb0 [0165.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 0x20 [0169.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.230] GetLastError () returned 0x5 [0169.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0169.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 3671 os_tid = 0xc18 [0165.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 0x20 [0169.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0169.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.209] GetLastError () returned 0x5 [0169.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0169.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a10) returned 1 Thread: id = 3672 os_tid = 0x710 [0165.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 0x20 [0169.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0169.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.228] GetLastError () returned 0x5 [0169.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0169.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee28b0) returned 1 Thread: id = 3673 os_tid = 0x1c44 [0165.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 0x20 [0169.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.227] GetLastError () returned 0x5 [0169.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2968) returned 1 Thread: id = 3674 os_tid = 0x1c48 [0165.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 0x20 [0169.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.225] GetLastError () returned 0x5 [0169.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 Thread: id = 3675 os_tid = 0x124 [0165.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 0x20 [0169.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.223] GetLastError () returned 0x5 [0169.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3ac0) returned 1 Thread: id = 3676 os_tid = 0x1c4c [0165.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 0x20 [0169.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.152] GetLastError () returned 0x5 [0169.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2a20) returned 1 Thread: id = 3677 os_tid = 0x1c50 [0165.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 0x20 [0169.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.180] GetLastError () returned 0x5 [0169.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0169.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2ad8) returned 1 Thread: id = 3678 os_tid = 0xc20 [0165.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 0x20 [0169.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.178] GetLastError () returned 0x5 [0169.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf2c8) returned 1 Thread: id = 3679 os_tid = 0xc1c [0165.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 0x20 [0169.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0169.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.221] GetLastError () returned 0x5 [0169.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0169.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 3680 os_tid = 0xbcc [0165.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 0x20 [0167.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0167.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.899] GetLastError () returned 0x5 [0168.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0168.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 3681 os_tid = 0x1c54 [0165.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 0x20 [0169.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0169.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.176] GetLastError () returned 0x5 [0169.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0169.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b70) returned 1 Thread: id = 3682 os_tid = 0xef0 [0165.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 0x20 [0169.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.174] GetLastError () returned 0x5 [0169.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2b90) returned 1 Thread: id = 3683 os_tid = 0x1c58 [0165.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 0x20 [0169.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0169.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.172] GetLastError () returned 0x5 [0169.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0169.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3c20) returned 1 Thread: id = 3684 os_tid = 0x1c5c [0165.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 0x20 [0169.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.169] GetLastError () returned 0x5 [0169.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0169.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2c48) returned 1 Thread: id = 3685 os_tid = 0x1c60 [0165.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 0x20 [0169.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0169.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.167] GetLastError () returned 0x5 [0169.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0169.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 3686 os_tid = 0x1c64 [0165.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 0x20 [0169.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0169.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.165] GetLastError () returned 0x5 [0169.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0169.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 Thread: id = 3687 os_tid = 0x1c68 [0165.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 0x20 [0169.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0169.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.170] GetLastError () returned 0x5 [0169.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0169.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3cd0) returned 1 Thread: id = 3688 os_tid = 0x1c6c [0165.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg")) returned 0x20 [0169.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0169.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.211] GetLastError () returned 0x5 [0169.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0169.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818d88) returned 1 Thread: id = 3689 os_tid = 0x1c70 [0165.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 0x20 [0166.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0166.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.434] GetLastError () returned 0x5 [0166.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0166.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 3690 os_tid = 0x1c74 [0165.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 0x20 [0166.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0166.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.435] GetLastError () returned 0x5 [0166.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0166.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 3691 os_tid = 0x1c78 [0165.614] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl")) returned 0x2020 [0165.615] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", dwFileAttributes=0x20) returned 1 [0165.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b0c [0165.616] GetFileSizeEx (in: hFile=0x1b0c, lpFileSize=0x633fddc | out: lpFileSize=0x633fddc*=933) returned 1 [0165.616] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x3a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.616] ReadFile (in: hFile=0x1b0c, lpBuffer=0x633fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x633fdc8, lpOverlapped=0x0 | out: lpBuffer=0x633fdb8*, lpNumberOfBytesRead=0x633fdc8*=0x4, lpOverlapped=0x0) returned 1 [0165.867] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0165.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0165.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0165.867] NtQuerySystemTime (in: CurrentTime=0x633fd50 | out: CurrentTime=0x633fd50*=132482710743696000) returned 0x0 [0165.867] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x50140a93 [0165.867] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x61825e54 [0165.867] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x3d7c64cd [0165.867] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x48558f84 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x717d3a1a [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x3ee0eebe [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x7fa47040 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x51d23cd5 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x277e67b0 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x1de110e4 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x74ff88f7 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x22976841 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x418d9f12 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x4d09e6e7 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x10c9a746 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x63262aaf [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x7e16888a [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x142601b8 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x5ee2e086 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x22d2340c [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x5dee88e6 [0165.868] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x633eb48d [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x7c8b3409 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x7b2de9a6 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x30e60b2e [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x7c4e0a72 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x308de0d [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x68da7c25 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x10d5bbf6 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x1777f6cb [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x2dfc18b7 [0165.869] RtlRandomEx (in: Seed=0x633fd48 | out: Seed=0x633fd48) returned 0x211b67ad [0165.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0165.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69acd48 [0165.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0165.879] ReadFile (in: hFile=0x1b0c, lpBuffer=0x69acd48, nNumberOfBytesToRead=0x3a5, lpNumberOfBytesRead=0x633fd44, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesRead=0x633fd44*=0x3a5, lpOverlapped=0x0) returned 1 [0165.879] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.879] WriteFile (in: hFile=0x1b0c, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0x3a5, lpNumberOfBytesWritten=0x633fd48, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x633fd48*=0x3a5, lpOverlapped=0x0) returned 1 [0166.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0166.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0166.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0166.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0166.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0166.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0166.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4230) returned 1 [0166.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29790 [0166.502] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.502] WriteFile (in: hFile=0x1b0c, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x633fdd0, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0x633fdd0*=0x14a, lpOverlapped=0x0) returned 1 [0168.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0168.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 [0168.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0168.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29790) returned 1 [0168.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0168.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0168.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e15a70 [0168.188] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" [0168.189] wcscat (in: _Dest=0x3e15a70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.ac3a86" [0168.189] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.ac3a86", NtPathName=0x633fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debe50 [0168.192] FlushFileBuffers (hFile=0x1b0c) returned 1 [0169.245] CloseHandle (hObject=0x1b0c) returned 1 [0169.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0169.292] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0169.292] wcscat (in: _Dest=0x3daf388, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt" [0169.292] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\ac3a86-readme.txt")) returned 0x2020 [0169.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 [0169.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 Thread: id = 3692 os_tid = 0x994 [0165.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl")) returned 0x2020 [0165.619] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", dwFileAttributes=0x20) returned 1 [0165.621] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1324 [0165.621] GetFileSizeEx (in: hFile=0x1324, lpFileSize=0x5c6fb7c | out: lpFileSize=0x5c6fb7c*=37703) returned 1 [0165.621] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x9343, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.621] ReadFile (in: hFile=0x1324, lpBuffer=0x5c6fb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c6fb68, lpOverlapped=0x0 | out: lpBuffer=0x5c6fb58*, lpNumberOfBytesRead=0x5c6fb68*=0x4, lpOverlapped=0x0) returned 1 [0165.881] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0165.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0165.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0165.881] NtQuerySystemTime (in: CurrentTime=0x5c6faf0 | out: CurrentTime=0x5c6faf0*=132482710743852000) returned 0x0 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x40ce6050 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x766b6bdd [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x5dfd1f59 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x2bbf438 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x18c5e4cb [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x9dfba3 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x3b4e0079 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x750ff68 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x3a374bea [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x21a79e79 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x3f18905c [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x3a2cc033 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x2f70fa66 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0xeb89db6 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x36849ee4 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x2e8af7d9 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x253fde4d [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x5846b1ef [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0xc49a7c3 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x371acf2e [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x72ea068f [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x76f12f07 [0165.881] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x67e1b315 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x1e0abd11 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x56dc2ee6 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0xbc0d46b [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x4685f7c9 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0xee7d916 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x2c71103c [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x4a4be4 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x18ad64c0 [0165.882] RtlRandomEx (in: Seed=0x5c6fae8 | out: Seed=0x5c6fae8) returned 0x73b2bc35 [0165.891] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.891] ReadFile (in: hFile=0x1324, lpBuffer=0x69a5538, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5c6faf0, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesRead=0x5c6faf0*=0x3c00, lpOverlapped=0x0) returned 1 [0165.892] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd43e0 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d03a8 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0165.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0165.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0165.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0165.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0165.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd43e0) returned 1 [0165.892] WriteFile (in: hFile=0x1324, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5c6faf0, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x5c6faf0*=0x3c00, lpOverlapped=0x0) returned 1 [0165.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0165.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0165.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f28ed0 [0165.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0165.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3f29b80 [0165.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0165.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0165.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0165.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0165.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd43e0) returned 1 [0165.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x2fce88 [0165.895] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0165.895] WriteFile (in: hFile=0x1324, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x5c6fb70, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x5c6fb70*=0x14a, lpOverlapped=0x0) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ed0) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0168.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0168.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e15a70 [0168.194] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" [0168.194] wcscat (in: _Dest=0x3e15a70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.ac3a86" [0168.194] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.ac3a86", NtPathName=0x5c6fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0168.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debe50 [0168.198] FlushFileBuffers (hFile=0x1324) returned 1 [0169.246] CloseHandle (hObject=0x1324) returned 1 [0169.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0169.254] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0169.254] wcscat (in: _Dest=0x3daf388, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt" [0169.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\ac3a86-readme.txt")) returned 0xffffffff [0169.254] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x158c [0169.283] WriteFile (in: hFile=0x158c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5c6fb04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5c6fb04*=0x8b9, lpOverlapped=0x0) returned 1 [0169.288] CloseHandle (hObject=0x158c) returned 1 [0169.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 [0169.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 3693 os_tid = 0x1c7c [0165.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b5b8 [0165.624] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0165.624] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\" [0165.624] wcscat (in: _Dest=0x35b5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*" [0165.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0165.624] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0166.917] wcscmp (_String1=".", _String2=".") returned 0 [0166.917] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.917] wcscmp (_String1="..", _String2=".") returned 1 [0166.917] wcscmp (_String1="..", _String2="..") returned 0 [0166.917] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.917] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0166.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0166.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 [0166.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eab0) returned 1 Thread: id = 3694 os_tid = 0x1c80 [0165.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d7a8 [0165.629] wcscpy (in: _Dest=0x674d7a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0165.629] wcscat (in: _Dest=0x674d7a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0165.629] wcscat (in: _Dest=0x674d7a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*" [0165.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b028 [0165.629] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.627] wcscmp (_String1=".", _String2=".") returned 0 [0167.627] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.627] wcscmp (_String1="..", _String2=".") returned 1 [0167.627] wcscmp (_String1="..", _String2="..") returned 0 [0167.627] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5272e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0167.627] wcscmp (_String1="metadata", _String2=".") returned 1 [0167.627] wcscmp (_String1="metadata", _String2="..") returned 1 [0167.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d710 [0167.627] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0167.627] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0167.627] wcscat (in: _Dest=0x3e0d710, _Source="metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" [0172.568] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata")) returned 0x2020 [0172.572] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", dwFileAttributes=0x20) returned 1 [0172.573] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xed4 [0172.573] GetFileSizeEx (in: hFile=0xed4, lpFileSize=0x87ef7f4 | out: lpFileSize=0x87ef7f4*=114) returned 1 [0172.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0172.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0172.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0172.573] NtQuerySystemTime (in: CurrentTime=0x87ef768 | out: CurrentTime=0x87ef768*=132482710810776000) returned 0x0 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x494c0910 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0xa8a18e6 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x3465c705 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x74fc7086 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x43765548 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x72813882 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x70b0a07f [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x29cdd4a7 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x1b5c876b [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x754ae2bb [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x65ea41f5 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x55844b6a [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x208d342e [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x5a1f3b48 [0172.573] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x3702f32f [0172.577] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x6e026f13 [0172.577] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x2e04367b [0172.577] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x3f511080 [0172.577] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x789c46d6 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x3b6f76fc [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x36125483 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x39129b82 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0xa5f4026 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x80bff20 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x534ef349 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x7971d2aa [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x128342b6 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x5e08108c [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x57d1e764 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x1e27d72 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x227d7059 [0172.578] RtlRandomEx (in: Seed=0x87ef760 | out: Seed=0x87ef760) returned 0x4983e1c3 [0172.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0172.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0172.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0172.586] ReadFile (in: hFile=0xed4, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x72, lpNumberOfBytesRead=0x87ef75c, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x87ef75c*=0x72, lpOverlapped=0x0) returned 1 [0172.588] SetFilePointerEx (in: hFile=0xed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.588] WriteFile (in: hFile=0xed4, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x87ef760, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0x87ef760*=0x72, lpOverlapped=0x0) returned 1 [0172.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0172.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0172.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0172.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0172.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0172.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0172.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823290) returned 1 [0172.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef4948 [0172.603] SetFilePointerEx (in: hFile=0xed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.603] WriteFile (in: hFile=0xed4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x87ef7e8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x87ef7e8*=0x102, lpOverlapped=0x0) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0172.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0172.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c818 [0172.622] wcscpy (in: _Dest=0x3e5c818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" [0172.622] wcscat (in: _Dest=0x3e5c818, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.ac3a86" [0172.622] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.ac3a86", NtPathName=0x87ef760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0172.645] FlushFileBuffers (hFile=0xed4) returned 1 [0173.534] CloseHandle (hObject=0xed4) returned 1 [0173.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3b70 [0173.990] wcscpy (in: _Dest=0x3ea3b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0173.990] wcscat (in: _Dest=0x3ea3b70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt" [0173.990] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\ac3a86-readme.txt")) returned 0xffffffff [0173.990] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22f8 [0173.992] WriteFile (in: hFile=0x22f8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x87ef77c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x87ef77c*=0x8b9, lpOverlapped=0x0) returned 1 [0173.994] CloseHandle (hObject=0x22f8) returned 1 [0174.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b70) returned 1 [0174.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 [0174.016] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0174.016] wcscmp (_String1="reports", _String2=".") returned 1 [0174.017] wcscmp (_String1="reports", _String2="..") returned 1 [0174.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958668 [0174.017] wcscpy (in: _Dest=0x6958668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0174.017] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0174.017] wcscat (in: _Dest=0x6958668, _Source="reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0175.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0175.767] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0175.767] wcscmp (_String1="settings.dat", _String2=".") returned 1 [0175.767] wcscmp (_String1="settings.dat", _String2="..") returned 1 [0175.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e030 [0175.768] wcscpy (in: _Dest=0x697e030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0175.768] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0175.768] wcscat (in: _Dest=0x697e030, _Source="settings.dat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" [0175.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0175.769] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0175.769] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0175.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b028) returned 1 [0175.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 [0175.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 3695 os_tid = 0x9c4 [0165.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x674ccf8 [0165.630] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0165.630] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0165.630] wcscat (in: _Dest=0x674ccf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*" [0165.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d6a8 [0165.630] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0167.919] wcscmp (_String1=".", _String2=".") returned 0 [0167.919] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.822] wcscmp (_String1="..", _String2=".") returned 1 [0168.823] wcscmp (_String1="..", _String2="..") returned 0 [0168.823] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0168.824] wcscmp (_String1="Cache", _String2=".") returned 1 [0168.824] wcscmp (_String1="Cache", _String2="..") returned 1 [0168.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958a90 [0168.824] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0168.824] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0168.824] wcscat (in: _Dest=0x6958a90, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0170.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0170.828] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f39f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0170.828] wcscmp (_String1="Cookies", _String2=".") returned 1 [0170.828] wcscmp (_String1="Cookies", _String2="..") returned 1 [0170.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957d80 [0170.828] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.828] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.828] wcscat (in: _Dest=0x6957d80, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0170.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0170.829] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0170.829] wcscmp (_String1="Cookies-journal", _String2=".") returned 1 [0170.829] wcscmp (_String1="Cookies-journal", _String2="..") returned 1 [0170.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ccb0 [0170.829] wcscpy (in: _Dest=0x3e5ccb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.830] wcscat (in: _Dest=0x3e5ccb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.830] wcscat (in: _Dest=0x3e5ccb0, _Source="Cookies-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" [0170.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0170.830] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe654ffa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe654ffa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8a55840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0170.831] wcscmp (_String1="Current Session", _String2=".") returned 1 [0170.831] wcscmp (_String1="Current Session", _String2="..") returned 1 [0170.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ce00 [0170.831] wcscpy (in: _Dest=0x3e5ce00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.831] wcscat (in: _Dest=0x3e5ce00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.831] wcscat (in: _Dest=0x3e5ce00, _Source="Current Session" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" [0170.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ce00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0170.832] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0170.832] wcscmp (_String1="Current Tabs", _String2=".") returned 1 [0170.832] wcscmp (_String1="Current Tabs", _String2="..") returned 1 [0170.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0eed0 [0170.832] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.832] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.832] wcscat (in: _Dest=0x3e0eed0, _Source="Current Tabs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" [0170.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0170.833] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0170.833] wcscmp (_String1="data_reduction_proxy_leveldb", _String2=".") returned 1 [0170.833] wcscmp (_String1="data_reduction_proxy_leveldb", _String2="..") returned 1 [0170.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0170.833] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.834] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.834] wcscat (in: _Dest=0x3339a8, _Source="data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0170.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0170.835] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0170.835] wcscmp (_String1="Extension Rules", _String2=".") returned 1 [0170.835] wcscmp (_String1="Extension Rules", _String2="..") returned 1 [0170.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cd58 [0170.835] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.835] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.835] wcscat (in: _Dest=0x3e5cd58, _Source="Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0170.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0170.836] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0170.836] wcscmp (_String1="Extension State", _String2=".") returned 1 [0170.836] wcscmp (_String1="Extension State", _String2="..") returned 1 [0170.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5cb60 [0170.836] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.836] wcscat (in: _Dest=0x3e5cb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.836] wcscat (in: _Dest=0x3e5cb60, _Source="Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0170.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0170.837] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0170.837] wcscmp (_String1="Extensions", _String2=".") returned 1 [0170.837] wcscmp (_String1="Extensions", _String2="..") returned 1 [0170.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0170.837] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.837] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.838] wcscat (in: _Dest=0x3e0dc10, _Source="Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0170.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0170.838] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f2b540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f2b540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0170.838] wcscmp (_String1="Favicons", _String2=".") returned 1 [0170.838] wcscmp (_String1="Favicons", _String2="..") returned 1 [0170.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958408 [0170.839] wcscpy (in: _Dest=0x6958408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.839] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.839] wcscat (in: _Dest=0x6958408, _Source="Favicons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" [0170.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0170.839] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0170.839] wcscmp (_String1="Favicons-journal", _String2=".") returned 1 [0170.840] wcscmp (_String1="Favicons-journal", _String2="..") returned 1 [0170.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5d538 [0170.840] wcscpy (in: _Dest=0x3e5d538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.840] wcscat (in: _Dest=0x3e5d538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.840] wcscat (in: _Dest=0x3e5d538, _Source="Favicons-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" [0170.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0170.841] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0170.841] wcscmp (_String1="Google Profile.ico", _String2=".") returned 1 [0170.841] wcscmp (_String1="Google Profile.ico", _String2="..") returned 1 [0170.841] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cb27f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0170.841] wcscmp (_String1="History", _String2=".") returned 1 [0170.841] wcscmp (_String1="History", _String2="..") returned 1 [0170.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6957fe0 [0170.841] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.841] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.841] wcscat (in: _Dest=0x6957fe0, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" [0170.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0170.842] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ea9260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ea9260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7df, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0170.842] wcscmp (_String1="History Provider Cache", _String2=".") returned 1 [0170.842] wcscmp (_String1="History Provider Cache", _String2="..") returned 1 [0170.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1490 [0170.842] wcscpy (in: _Dest=0x3ee1490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.843] wcscat (in: _Dest=0x3ee1490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.843] wcscat (in: _Dest=0x3ee1490, _Source="History Provider Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" [0170.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0170.844] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cd8950, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0170.844] wcscmp (_String1="History-journal", _String2=".") returned 1 [0170.844] wcscmp (_String1="History-journal", _String2="..") returned 1 [0170.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5d9d0 [0170.844] wcscpy (in: _Dest=0x3e5d9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.844] wcscat (in: _Dest=0x3e5d9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.844] wcscat (in: _Dest=0x3e5d9d0, _Source="History-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" [0170.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0170.845] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~1")) returned 1 [0170.845] wcscmp (_String1="JumpListIcons", _String2=".") returned 1 [0170.845] wcscmp (_String1="JumpListIcons", _String2="..") returned 1 [0170.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5cab8 [0170.845] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.845] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.845] wcscat (in: _Dest=0x3e5cab8, _Source="JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0170.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0170.847] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0170.847] wcscmp (_String1="Local Extension Settings", _String2=".") returned 1 [0170.847] wcscmp (_String1="Local Extension Settings", _String2="..") returned 1 [0170.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2740 [0170.847] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.847] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.847] wcscat (in: _Dest=0x3ee2740, _Source="Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0170.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0170.849] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0170.849] wcscmp (_String1="Login Data", _String2=".") returned 1 [0170.849] wcscmp (_String1="Login Data", _String2="..") returned 1 [0170.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0f010 [0170.849] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.849] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.849] wcscat (in: _Dest=0x3e0f010, _Source="Login Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0170.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0170.850] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0170.850] wcscmp (_String1="Login Data-journal", _String2=".") returned 1 [0170.850] wcscmp (_String1="Login Data-journal", _String2="..") returned 1 [0170.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2a40 [0170.851] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.851] wcscat (in: _Dest=0x3ea2a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.851] wcscat (in: _Dest=0x3ea2a40, _Source="Login Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" [0170.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0170.852] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a0360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a0360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe583ccf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0170.852] wcscmp (_String1="Network Action Predictor", _String2=".") returned 1 [0170.852] wcscmp (_String1="Network Action Predictor", _String2="..") returned 1 [0170.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee27f8 [0170.852] wcscpy (in: _Dest=0x3ee27f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.852] wcscat (in: _Dest=0x3ee27f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.852] wcscat (in: _Dest=0x3ee27f8, _Source="Network Action Predictor" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" [0170.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee27f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0170.853] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a2a70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a2a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe586b320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0170.853] wcscmp (_String1="Network Action Predictor-journal", _String2=".") returned 1 [0170.854] wcscmp (_String1="Network Action Predictor-journal", _String2="..") returned 1 [0170.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f390 [0170.854] wcscpy (in: _Dest=0x682f390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.854] wcscat (in: _Dest=0x682f390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.854] wcscat (in: _Dest=0x682f390, _Source="Network Action Predictor-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" [0170.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0170.855] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0170.855] wcscmp (_String1="Network Persistent State", _String2=".") returned 1 [0170.855] wcscmp (_String1="Network Persistent State", _String2="..") returned 1 [0170.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee28b0 [0170.855] wcscpy (in: _Dest=0x3ee28b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.855] wcscat (in: _Dest=0x3ee28b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.855] wcscat (in: _Dest=0x3ee28b0, _Source="Network Persistent State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" [0170.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee28b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0170.856] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0170.856] wcscmp (_String1="Origin Bound Certs", _String2=".") returned 1 [0170.856] wcscmp (_String1="Origin Bound Certs", _String2="..") returned 1 [0170.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2db0 [0170.856] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.856] wcscat (in: _Dest=0x3ea2db0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.856] wcscat (in: _Dest=0x3ea2db0, _Source="Origin Bound Certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" [0170.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0170.858] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0170.858] wcscmp (_String1="Origin Bound Certs-journal", _String2=".") returned 1 [0170.858] wcscmp (_String1="Origin Bound Certs-journal", _String2="..") returned 1 [0170.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3321a8 [0170.858] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.858] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.858] wcscat (in: _Dest=0x3321a8, _Source="Origin Bound Certs-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" [0170.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0170.859] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8fac370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fac370, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fac370, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0170.859] wcscmp (_String1="Preferences", _String2=".") returned 1 [0170.859] wcscmp (_String1="Preferences", _String2="..") returned 1 [0170.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e930 [0170.859] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.860] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.860] wcscat (in: _Dest=0x3e0e930, _Source="Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" [0170.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0170.861] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4309900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0170.862] wcscmp (_String1="previews_opt_out.db", _String2=".") returned 1 [0170.862] wcscmp (_String1="previews_opt_out.db", _String2="..") returned 1 [0170.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea38b0 [0170.862] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.862] wcscat (in: _Dest=0x3ea38b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.862] wcscat (in: _Dest=0x3ea38b0, _Source="previews_opt_out.db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" [0170.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea38b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0170.863] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0170.863] wcscmp (_String1="previews_opt_out.db-journal", _String2=".") returned 1 [0170.863] wcscmp (_String1="previews_opt_out.db-journal", _String2="..") returned 1 [0170.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0170.863] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.863] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.863] wcscat (in: _Dest=0x333468, _Source="previews_opt_out.db-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" [0170.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0170.864] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31c5270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe31c5270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0170.864] wcscmp (_String1="README", _String2=".") returned 1 [0170.864] wcscmp (_String1="README", _String2="..") returned 1 [0170.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0170.865] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.865] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.865] wcscat (in: _Dest=0x6957f48, _Source="README" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" [0170.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0170.866] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8f13df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8f13df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f13df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7799, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0170.866] wcscmp (_String1="Secure Preferences", _String2=".") returned 1 [0170.866] wcscmp (_String1="Secure Preferences", _String2="..") returned 1 [0170.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2fc0 [0170.866] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.866] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.866] wcscat (in: _Dest=0x3ea2fc0, _Source="Secure Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" [0170.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0172.332] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe55ff140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe55ff140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5652160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0172.332] wcscmp (_String1="Shortcuts", _String2=".") returned 1 [0172.332] wcscmp (_String1="Shortcuts", _String2="..") returned 1 [0172.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7198 [0172.332] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.332] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.332] wcscat (in: _Dest=0x2c7198, _Source="Shortcuts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" [0172.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0172.918] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5601850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5601850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5682ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0172.918] wcscmp (_String1="Shortcuts-journal", _String2=".") returned 1 [0172.918] wcscmp (_String1="Shortcuts-journal", _String2="..") returned 1 [0172.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3750 [0172.919] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.919] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.919] wcscat (in: _Dest=0x3ea3750, _Source="Shortcuts-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" [0172.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0172.920] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd3130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0172.920] wcscmp (_String1="Top Sites", _String2=".") returned 1 [0172.920] wcscmp (_String1="Top Sites", _String2="..") returned 1 [0172.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e7f0 [0172.920] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.920] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.920] wcscat (in: _Dest=0x3e0e7f0, _Source="Top Sites" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" [0172.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0172.922] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0172.922] wcscmp (_String1="Top Sites-journal", _String2=".") returned 1 [0172.922] wcscmp (_String1="Top Sites-journal", _String2="..") returned 1 [0172.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3a10 [0172.922] wcscpy (in: _Dest=0x3ea3a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.922] wcscat (in: _Dest=0x3ea3a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.922] wcscat (in: _Dest=0x3ea3a10, _Source="Top Sites-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" [0172.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0172.923] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8e09450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8e09450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8e09450, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0172.923] wcscmp (_String1="TransportSecurity", _String2=".") returned 1 [0172.923] wcscmp (_String1="TransportSecurity", _String2="..") returned 1 [0172.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3540 [0172.923] wcscpy (in: _Dest=0x3ea3540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.923] wcscat (in: _Dest=0x3ea3540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.923] wcscat (in: _Dest=0x3ea3540, _Source="TransportSecurity" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" [0172.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0172.924] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41fef60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41fef60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0172.924] wcscmp (_String1="Visited Links", _String2=".") returned 1 [0172.924] wcscmp (_String1="Visited Links", _String2="..") returned 1 [0172.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e768 [0172.925] wcscpy (in: _Dest=0x697e768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.925] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.925] wcscat (in: _Dest=0x697e768, _Source="Visited Links" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" [0172.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0172.926] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0172.926] wcscmp (_String1="Web Applications", _String2=".") returned 1 [0172.926] wcscmp (_String1="Web Applications", _String2="..") returned 1 [0172.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e228 [0172.926] wcscpy (in: _Dest=0x697e228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.926] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.926] wcscat (in: _Dest=0x697e228, _Source="Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0172.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0172.927] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a99d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0172.927] wcscmp (_String1="Web Data", _String2=".") returned 1 [0172.927] wcscmp (_String1="Web Data", _String2="..") returned 1 [0172.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x69c2960 [0172.928] wcscpy (in: _Dest=0x69c2960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.928] wcscat (in: _Dest=0x69c2960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.928] wcscat (in: _Dest=0x69c2960, _Source="Web Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0172.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c2960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0172.929] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0172.929] wcscmp (_String1="Web Data-journal", _String2=".") returned 1 [0172.929] wcscmp (_String1="Web Data-journal", _String2="..") returned 1 [0172.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697ea08 [0172.929] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0172.929] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.929] wcscat (in: _Dest=0x697ea08, _Source="Web Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0172.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0172.930] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0172.930] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0172.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d6a8) returned 1 [0172.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 [0172.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 3696 os_tid = 0x1c84 [0165.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958240 [0165.631] wcscpy (in: _Dest=0x6958240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0165.631] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\" [0165.631] wcscat (in: _Dest=0x6958240, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*" [0165.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d440 [0165.631] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.630] wcscmp (_String1=".", _String2=".") returned 0 [0167.630] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.630] wcscmp (_String1="..", _String2=".") returned 1 [0167.630] wcscmp (_String1="..", _String2="..") returned 0 [0167.630] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.630] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d440) returned 1 [0167.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 [0167.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 3697 os_tid = 0x1c88 [0165.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e1b0 [0165.632] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0165.632] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\" [0165.632] wcscat (in: _Dest=0x3e0e1b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*" [0165.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697adc0 [0165.632] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.631] wcscmp (_String1=".", _String2=".") returned 0 [0167.631] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.631] wcscmp (_String1="..", _String2=".") returned 1 [0167.631] wcscmp (_String1="..", _String2="..") returned 0 [0167.631] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.631] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697adc0) returned 1 [0167.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 [0167.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68184a0) returned 1 Thread: id = 3698 os_tid = 0x1c8c [0165.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run")) returned 0x2020 [0167.641] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x20) returned 1 [0170.204] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2308 [0170.205] GetFileSizeEx (in: hFile=0x2308, lpFileSize=0x969fbb4 | out: lpFileSize=0x969fbb4*=0) returned 1 [0170.205] FlushFileBuffers (hFile=0x2308) returned 1 [0170.777] CloseHandle (hObject=0x2308) returned 1 [0170.777] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x2020) returned 1 [0170.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 3699 os_tid = 0x1c90 [0165.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state")) returned 0x2020 [0167.633] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", dwFileAttributes=0x20) returned 1 [0169.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22ac [0169.739] GetFileSizeEx (in: hFile=0x22ac, lpFileSize=0x82df8f4 | out: lpFileSize=0x82df8f4*=67147) returned 1 [0169.739] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x10647, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.739] ReadFile (in: hFile=0x22ac, lpBuffer=0x82df8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x82df8e0, lpOverlapped=0x0 | out: lpBuffer=0x82df8d0*, lpNumberOfBytesRead=0x82df8e0*=0x4, lpOverlapped=0x0) returned 1 [0169.742] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0169.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0169.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.742] NtQuerySystemTime (in: CurrentTime=0x82df868 | out: CurrentTime=0x82df868*=132482710782540000) returned 0x0 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x1998589e [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x484b6f41 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x5b158015 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0xfd33681 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x1265f70c [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x340ea457 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x49b687bb [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x19cf0e85 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x30414e4 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x76e5a6cd [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x5ff488db [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x5ccca2a5 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x6f280f82 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x4ec8d3d3 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x24030192 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x17738477 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x6c195531 [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x52f62a4d [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x428343ae [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x55d6cc0d [0169.742] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x362c1bcf [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x3b854aa2 [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x66af3b43 [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x21ee5be2 [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x6a26689f [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x36b66c2e [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x78447be3 [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x6484b38b [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x2540a80b [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x461526f2 [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x614f743f [0169.743] RtlRandomEx (in: Seed=0x82df860 | out: Seed=0x82df860) returned 0x54eb0496 [0169.750] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.750] ReadFile (in: hFile=0x22ac, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x82df868, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x82df868*=0x3c00, lpOverlapped=0x0) returned 1 [0169.751] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0169.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0b28 [0169.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0169.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0169.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0169.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0169.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0169.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0169.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0169.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0169.752] WriteFile (in: hFile=0x22ac, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x82df868, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x82df868*=0x3c00, lpOverlapped=0x0) returned 1 [0170.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0170.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0170.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5ba0 [0170.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0170.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5d20 [0170.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0170.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0170.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0170.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0170.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0170.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec828 [0170.603] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.603] WriteFile (in: hFile=0x22ac, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x82df8e8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x82df8e8*=0x108, lpOverlapped=0x0) returned 1 [0171.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0171.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0171.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0171.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c03c8 [0171.288] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0171.288] wcscat (in: _Dest=0x69c03c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.ac3a86" [0171.288] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.ac3a86", NtPathName=0x82df860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0171.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1998 [0171.291] FlushFileBuffers (hFile=0x22ac) returned 1 [0171.678] CloseHandle (hObject=0x22ac) returned 1 [0171.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c03c8 [0171.701] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0171.701] wcscat (in: _Dest=0x69c03c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\AC3A86-Readme.txt" [0171.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\ac3a86-readme.txt")) returned 0xffffffff [0171.701] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22ac [0171.702] WriteFile (in: hFile=0x22ac, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x82df87c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x82df87c*=0x8b9, lpOverlapped=0x0) returned 1 [0171.703] CloseHandle (hObject=0x22ac) returned 1 [0171.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 [0171.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 3700 os_tid = 0x1c94 [0165.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69582d8 [0165.633] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0165.633] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\" [0165.633] wcscat (in: _Dest=0x69582d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*" [0165.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697bc30 [0165.634] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.633] wcscmp (_String1=".", _String2=".") returned 0 [0167.633] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.633] wcscmp (_String1="..", _String2=".") returned 1 [0167.633] wcscmp (_String1="..", _String2="..") returned 0 [0167.633] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.634] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697bc30) returned 1 [0167.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 [0167.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 3701 os_tid = 0x1c98 [0165.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959248 [0165.634] wcscpy (in: _Dest=0x6959248, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0165.634] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\" [0165.634] wcscat (in: _Dest=0x6959248, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*" [0165.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0165.634] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0166.899] wcscmp (_String1=".", _String2=".") returned 0 [0166.899] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.899] wcscmp (_String1="..", _String2=".") returned 1 [0166.899] wcscmp (_String1="..", _String2="..") returned 0 [0166.899] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.899] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0166.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0166.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 [0166.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 3702 os_tid = 0x1c9c [0165.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x66ef9d8 [0165.635] wcscpy (in: _Dest=0x66ef9d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0165.635] wcscat (in: _Dest=0x66ef9d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\" [0165.635] wcscat (in: _Dest=0x66ef9d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*" [0165.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d402c8 [0165.635] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0167.625] wcscmp (_String1=".", _String2=".") returned 0 [0167.625] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.625] wcscmp (_String1="..", _String2=".") returned 1 [0167.625] wcscmp (_String1="..", _String2="..") returned 0 [0167.625] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x3d402c8 | out: lpFindFileData=0x3d402c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.625] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0167.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402c8) returned 1 [0167.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 [0167.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 3703 os_tid = 0x1ca0 [0165.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c10e8 [0165.635] wcscpy (in: _Dest=0x69c10e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0165.635] wcscat (in: _Dest=0x69c10e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\" [0165.636] wcscat (in: _Dest=0x69c10e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*" [0165.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41138 [0165.636] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.635] wcscmp (_String1=".", _String2=".") returned 0 [0167.635] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.635] wcscmp (_String1="..", _String2=".") returned 1 [0167.635] wcscmp (_String1="..", _String2="..") returned 0 [0167.635] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41138 | out: lpFindFileData=0x3d41138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.635] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41138) returned 1 [0167.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c10e8) returned 1 [0167.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 Thread: id = 3704 os_tid = 0x1ca4 [0165.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958f50 [0165.636] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0165.636] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\" [0165.636] wcscat (in: _Dest=0x6958f50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*" [0165.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40a00 [0165.636] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*", lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.637] wcscmp (_String1=".", _String2=".") returned 0 [0167.637] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.637] wcscmp (_String1="..", _String2=".") returned 1 [0167.637] wcscmp (_String1="..", _String2="..") returned 0 [0167.637] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d40a00 | out: lpFindFileData=0x3d40a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.637] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a00) returned 1 [0167.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 [0167.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 3705 os_tid = 0x15ec [0165.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x674cf38 [0165.640] wcscpy (in: _Dest=0x674cf38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0165.640] wcscat (in: _Dest=0x674cf38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\" [0165.640] wcscat (in: _Dest=0x674cf38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*" [0165.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41ad8 [0165.640] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.638] wcscmp (_String1=".", _String2=".") returned 0 [0167.638] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.638] wcscmp (_String1="..", _String2=".") returned 1 [0167.638] wcscmp (_String1="..", _String2="..") returned 0 [0167.638] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41ad8 | out: lpFindFileData=0x3d41ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.638] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ad8) returned 1 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 3706 os_tid = 0x15f0 [0165.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958cf0 [0165.641] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0165.641] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\" [0165.641] wcscat (in: _Dest=0x6958cf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*" [0165.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41870 [0165.641] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0167.640] wcscmp (_String1=".", _String2=".") returned 0 [0167.640] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.640] wcscmp (_String1="..", _String2=".") returned 1 [0167.640] wcscmp (_String1="..", _String2="..") returned 0 [0167.640] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.640] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0167.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41870) returned 1 [0167.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 [0167.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcee8) returned 1 Thread: id = 3707 os_tid = 0x1ca8 [0165.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll")) returned 0x20 [0165.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0165.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.657] GetLastError () returned 0x5 [0165.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0165.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0fa8) returned 1 Thread: id = 3708 os_tid = 0x1cac [0165.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam")) returned 0x20 [0165.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0165.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.677] GetLastError () returned 0x5 [0165.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0165.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 3709 os_tid = 0x7c8 [0165.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam")) returned 0x20 [0165.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0165.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.699] GetLastError () returned 0x5 [0165.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0165.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 3710 os_tid = 0x570 [0165.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam")) returned 0x20 [0165.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0165.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.723] GetLastError () returned 0x5 [0165.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0165.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c58) returned 1 Thread: id = 3711 os_tid = 0x1cb0 [0165.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer")) returned 0x20 [0167.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0167.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.670] GetLastError () returned 0x5 [0167.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0167.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 3712 os_tid = 0x1cb4 [0165.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze")) returned 0x20 [0165.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0165.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.733] GetLastError () returned 0x5 [0165.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0165.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 3713 os_tid = 0x1cb8 [0165.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze")) returned 0x20 [0165.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0165.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.736] GetLastError () returned 0x5 [0165.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0165.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 Thread: id = 3714 os_tid = 0x1cbc [0165.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze")) returned 0x20 [0165.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0165.738] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.738] GetLastError () returned 0x5 [0165.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0165.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 3715 os_tid = 0x1cc0 [0165.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze")) returned 0x20 [0165.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0165.740] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.740] GetLastError () returned 0x5 [0165.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0165.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1268) returned 1 Thread: id = 3716 os_tid = 0x15f8 [0165.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus")) returned 0x20 [0165.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0165.742] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.742] GetLastError () returned 0x5 [0165.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0165.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 3717 os_tid = 0x1cc4 [0165.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus")) returned 0x20 [0165.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0165.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.744] GetLastError () returned 0x5 [0165.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0165.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 3718 os_tid = 0xab8 [0165.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus")) returned 0x20 [0165.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0165.746] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.746] GetLastError () returned 0x5 [0165.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0165.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 3719 os_tid = 0xa90 [0165.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus")) returned 0x20 [0165.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0165.748] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.749] GetLastError () returned 0x5 [0165.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0165.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1600) returned 1 Thread: id = 3720 os_tid = 0x370 [0165.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer")) returned 0x20 [0166.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0166.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.922] GetLastError () returned 0x5 [0166.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0166.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea81d8) returned 1 Thread: id = 3721 os_tid = 0x15c [0165.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam")) returned 0x20 [0165.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0165.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.765] GetLastError () returned 0x5 [0165.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0165.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 3722 os_tid = 0x2a8 [0165.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae")) returned 0x20 [0165.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0165.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.785] GetLastError () returned 0x5 [0165.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0165.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 3723 os_tid = 0x2ac [0165.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam")) returned 0x20 [0165.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0165.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.809] GetLastError () returned 0x5 [0165.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0165.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 Thread: id = 3724 os_tid = 0x5f4 [0165.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae")) returned 0x20 [0172.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0172.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.420] GetLastError () returned 0x5 [0173.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0173.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 3725 os_tid = 0x3c4 [0165.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae")) returned 0x20 [0169.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0170.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.422] GetLastError () returned 0x5 [0173.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0173.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 3726 os_tid = 0x130 [0165.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae")) returned 0x20 [0168.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0168.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.383] GetLastError () returned 0x5 [0172.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0172.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 3727 os_tid = 0x650 [0165.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae")) returned 0x20 [0173.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0173.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.425] GetLastError () returned 0x5 [0173.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0173.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 3728 os_tid = 0x670 [0165.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae")) returned 0x20 [0173.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0173.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.423] GetLastError () returned 0x5 [0173.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0173.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 3729 os_tid = 0x1cc8 [0165.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam")) returned 0x20 [0173.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0173.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.099] GetLastError () returned 0x5 [0173.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0173.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 3730 os_tid = 0x7c4 [0165.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae")) returned 0x20 [0173.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0173.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.044] GetLastError () returned 0x5 [0173.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0173.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcf78) returned 1 Thread: id = 3731 os_tid = 0xbc4 [0165.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam")) returned 0x20 [0170.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0170.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.382] GetLastError () returned 0x5 [0172.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0173.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db748) returned 1 Thread: id = 3732 os_tid = 0x4b8 [0165.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam")) returned 0x20 [0173.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0173.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.001] GetLastError () returned 0x5 [0173.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0173.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbaa8) returned 1 Thread: id = 3733 os_tid = 0x1668 [0165.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 0x20 [0166.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0166.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.908] GetLastError () returned 0x5 [0166.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0166.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 3734 os_tid = 0x1ccc [0165.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 0x20 [0165.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.846] GetLastError () returned 0x5 [0165.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 3735 os_tid = 0x1cd0 [0165.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 0x20 [0165.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.898] GetLastError () returned 0x5 [0165.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0165.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 3736 os_tid = 0x1678 [0165.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 0x20 [0165.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0165.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.916] GetLastError () returned 0x5 [0165.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0165.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 3737 os_tid = 0x1cd4 [0165.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 0x20 [0165.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0165.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.955] GetLastError () returned 0x5 [0165.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0165.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 3738 os_tid = 0xa00 [0165.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 0x20 [0165.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.974] GetLastError () returned 0x5 [0165.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0165.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 3739 os_tid = 0x80c [0165.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682de78 [0165.979] wcscpy (in: _Dest=0x682de78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0165.979] wcscat (in: _Dest=0x682de78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\" [0165.979] wcscat (in: _Dest=0x682de78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*" [0165.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40798 [0165.979] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*", lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.377] wcscmp (_String1=".", _String2=".") returned 0 [0168.377] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.377] wcscmp (_String1="..", _String2=".") returned 1 [0168.377] wcscmp (_String1="..", _String2="..") returned 0 [0168.377] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40798 | out: lpFindFileData=0x3d40798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.378] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40798) returned 1 [0168.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 [0168.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f5e8) returned 1 Thread: id = 3740 os_tid = 0x1640 [0165.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e8a0 [0165.980] wcscpy (in: _Dest=0x682e8a0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0165.980] wcscat (in: _Dest=0x682e8a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\" [0165.980] wcscat (in: _Dest=0x682e8a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*" [0165.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40530 [0165.980] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*", lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.379] wcscmp (_String1=".", _String2=".") returned 0 [0168.379] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.379] wcscmp (_String1="..", _String2=".") returned 1 [0168.379] wcscmp (_String1="..", _String2="..") returned 0 [0168.379] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40530 | out: lpFindFileData=0x3d40530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.379] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40530) returned 1 [0168.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e8a0) returned 1 [0168.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 3741 os_tid = 0x1644 [0165.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e328 [0165.981] wcscpy (in: _Dest=0x682e328, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0165.981] wcscat (in: _Dest=0x682e328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\" [0165.981] wcscat (in: _Dest=0x682e328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*" [0165.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d40ed0 [0165.981] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.381] wcscmp (_String1=".", _String2=".") returned 0 [0168.381] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.381] wcscmp (_String1="..", _String2=".") returned 1 [0168.381] wcscmp (_String1="..", _String2="..") returned 0 [0168.381] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3d40ed0 | out: lpFindFileData=0x3d40ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.381] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ed0) returned 1 [0168.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e328) returned 1 [0168.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f520) returned 1 Thread: id = 3742 os_tid = 0x1654 [0165.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ed50 [0165.983] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0165.983] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\" [0165.983] wcscat (in: _Dest=0x682ed50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*" [0165.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0165.983] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.383] wcscmp (_String1=".", _String2=".") returned 0 [0168.383] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.383] wcscmp (_String1="..", _String2=".") returned 1 [0168.383] wcscmp (_String1="..", _String2="..") returned 0 [0168.383] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.383] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0168.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 [0168.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 3743 os_tid = 0xa74 [0165.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0968 [0165.983] wcscpy (in: _Dest=0x3df0968, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0165.984] wcscat (in: _Dest=0x3df0968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\" [0165.984] wcscat (in: _Dest=0x3df0968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*" [0165.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0165.984] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.384] wcscmp (_String1=".", _String2=".") returned 0 [0168.384] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.384] wcscmp (_String1="..", _String2=".") returned 1 [0168.385] wcscmp (_String1="..", _String2="..") returned 0 [0168.385] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.385] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0168.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0968) returned 1 [0168.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f908) returned 1 Thread: id = 3744 os_tid = 0x1cd8 [0165.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3defb58 [0165.984] wcscpy (in: _Dest=0x3defb58, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0165.984] wcscat (in: _Dest=0x3defb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\" [0165.984] wcscat (in: _Dest=0x3defb58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*" [0165.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0165.984] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.386] wcscmp (_String1=".", _String2=".") returned 0 [0168.386] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.386] wcscmp (_String1="..", _String2=".") returned 1 [0168.386] wcscmp (_String1="..", _String2="..") returned 0 [0168.386] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.386] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0168.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3defb58) returned 1 [0168.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f9d0) returned 1 Thread: id = 3745 os_tid = 0xa84 [0165.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3df0260 [0165.984] wcscpy (in: _Dest=0x3df0260, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0165.985] wcscat (in: _Dest=0x3df0260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\" [0165.985] wcscat (in: _Dest=0x3df0260, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*" [0165.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0165.985] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.388] wcscmp (_String1=".", _String2=".") returned 0 [0168.388] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.388] wcscmp (_String1="..", _String2=".") returned 1 [0168.388] wcscmp (_String1="..", _String2="..") returned 0 [0168.388] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.388] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0168.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0260) returned 1 [0168.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 3746 os_tid = 0xb08 [0165.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3def6a8 [0165.985] wcscpy (in: _Dest=0x3def6a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0165.985] wcscat (in: _Dest=0x3def6a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\" [0165.985] wcscat (in: _Dest=0x3def6a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*" [0165.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0165.985] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.390] wcscmp (_String1=".", _String2=".") returned 0 [0168.390] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.390] wcscmp (_String1="..", _String2=".") returned 1 [0168.390] wcscmp (_String1="..", _String2="..") returned 0 [0168.390] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.390] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0168.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def6a8) returned 1 [0168.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fb60) returned 1 Thread: id = 3747 os_tid = 0x1044 [0165.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3f23ea8 [0165.986] wcscpy (in: _Dest=0x3f23ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0165.986] wcscat (in: _Dest=0x3f23ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\" [0165.986] wcscat (in: _Dest=0x3f23ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*" [0165.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0165.986] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0167.913] wcscmp (_String1=".", _String2=".") returned 0 [0167.913] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.913] wcscmp (_String1="..", _String2=".") returned 1 [0167.913] wcscmp (_String1="..", _String2="..") returned 0 [0167.913] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.913] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0167.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0167.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ea8) returned 1 [0167.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df0008) returned 1 Thread: id = 3748 os_tid = 0x1658 [0165.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3f23f70 [0165.986] wcscpy (in: _Dest=0x3f23f70, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0165.986] wcscat (in: _Dest=0x3f23f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\" [0165.986] wcscat (in: _Dest=0x3f23f70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*" [0165.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0165.987] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0167.915] wcscmp (_String1=".", _String2=".") returned 0 [0167.915] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.915] wcscmp (_String1="..", _String2=".") returned 1 [0167.915] wcscmp (_String1="..", _String2="..") returned 0 [0167.915] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0167.915] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0167.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0167.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23f70) returned 1 [0167.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df00d0) returned 1 Thread: id = 3749 os_tid = 0x1cdc [0165.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 0x20 [0165.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0165.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.988] GetLastError () returned 0x5 [0165.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0165.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 Thread: id = 3750 os_tid = 0x1ce0 [0165.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 0x20 [0165.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0165.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.991] GetLastError () returned 0x5 [0165.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0165.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36110) returned 1 Thread: id = 3751 os_tid = 0x165c [0165.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 0x20 [0165.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0165.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.993] GetLastError () returned 0x5 [0165.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0165.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 3752 os_tid = 0x1ce4 [0166.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 0x20 [0166.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0166.019] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.019] GetLastError () returned 0x5 [0166.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0166.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011770) returned 1 Thread: id = 3753 os_tid = 0x1ce8 [0166.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 0x20 [0167.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0167.875] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.875] GetLastError () returned 0x5 [0167.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0167.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 3754 os_tid = 0x1cec [0166.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 0x20 [0167.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.876] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.877] GetLastError () returned 0x5 [0167.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 3755 os_tid = 0x1cf0 [0166.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 0x20 [0167.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0167.878] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.878] GetLastError () returned 0x5 [0167.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0167.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 3756 os_tid = 0x1cf4 [0166.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 0x20 [0167.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0167.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.880] GetLastError () returned 0x5 [0167.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0167.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 3757 os_tid = 0x1cf8 [0166.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 0x20 [0167.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.882] GetLastError () returned 0x5 [0167.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 3758 os_tid = 0x1cfc [0166.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20 [0167.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0167.883] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.884] GetLastError () returned 0x5 [0167.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0167.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 3759 os_tid = 0x1d00 [0166.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20 [0167.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0167.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.885] GetLastError () returned 0x5 [0167.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0167.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 3760 os_tid = 0x1d04 [0166.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20 [0167.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0167.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.887] GetLastError () returned 0x5 [0167.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0167.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 3761 os_tid = 0x1d08 [0166.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20 [0167.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0167.889] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.889] GetLastError () returned 0x5 [0167.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0167.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 3762 os_tid = 0x1d0c [0166.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20 [0167.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0167.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.890] GetLastError () returned 0x5 [0167.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0167.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 3763 os_tid = 0x1d10 [0166.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 0x20 [0167.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0167.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.892] GetLastError () returned 0x5 [0167.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0167.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 3764 os_tid = 0x1d14 [0166.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 0x20 [0167.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0167.894] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.894] GetLastError () returned 0x5 [0167.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0167.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 3765 os_tid = 0x1d18 [0166.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 0x20 [0167.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0167.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.896] GetLastError () returned 0x5 [0167.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0167.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 Thread: id = 3766 os_tid = 0x1d1c [0166.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 0x20 [0167.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0167.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.898] GetLastError () returned 0x5 [0167.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0167.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 3767 os_tid = 0x1d20 [0166.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 0x20 [0167.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0167.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.899] GetLastError () returned 0x5 [0167.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0167.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 Thread: id = 3768 os_tid = 0x1d24 [0166.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 0x20 [0167.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0167.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.525] GetLastError () returned 0x5 [0167.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0167.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 3769 os_tid = 0x1d28 [0166.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 0x20 [0166.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0166.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.528] GetLastError () returned 0x5 [0166.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0166.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 3770 os_tid = 0x1d34 [0166.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 0x20 [0166.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0166.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.530] GetLastError () returned 0x5 [0166.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0166.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 3771 os_tid = 0x1d38 [0166.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 0x20 [0167.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0167.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.526] GetLastError () returned 0x5 [0167.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0167.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 3772 os_tid = 0x300 [0166.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan")) returned 0x20 [0166.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0166.532] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.532] GetLastError () returned 0x5 [0166.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0166.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 3773 os_tid = 0x167c [0166.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra")) returned 0x20 [0166.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0166.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.534] GetLastError () returned 0x5 [0166.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0166.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 3774 os_tid = 0x1680 [0166.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa")) returned 0x20 [0166.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0166.535] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.535] GetLastError () returned 0x5 [0166.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0166.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 Thread: id = 3775 os_tid = 0x1684 [0166.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers")) returned 0x20 [0167.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0167.928] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.928] GetLastError () returned 0x5 [0167.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0167.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 3776 os_tid = 0x1744 [0166.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara")) returned 0x20 [0167.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0167.930] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.930] GetLastError () returned 0x5 [0167.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0167.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 3777 os_tid = 0x1748 [0166.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako")) returned 0x20 [0167.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0167.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.924] GetLastError () returned 0x5 [0167.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0167.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 3778 os_tid = 0x1768 [0166.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui")) returned 0x20 [0167.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0167.926] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.926] GetLastError () returned 0x5 [0167.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0167.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 3779 os_tid = 0x1770 [0166.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul")) returned 0x20 [0167.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0167.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.932] GetLastError () returned 0x5 [0167.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0167.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 3780 os_tid = 0x1774 [0166.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau")) returned 0x20 [0167.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0167.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.934] GetLastError () returned 0x5 [0167.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0167.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 3781 os_tid = 0x17c4 [0166.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre")) returned 0x20 [0167.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0167.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.935] GetLastError () returned 0x5 [0167.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0167.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 3782 os_tid = 0x17f8 [0166.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville")) returned 0x20 [0167.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0167.937] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.937] GetLastError () returned 0x5 [0167.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0167.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 Thread: id = 3783 os_tid = 0x5e8 [0166.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura")) returned 0x20 [0167.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0167.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.939] GetLastError () returned 0x5 [0167.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0167.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 3784 os_tid = 0x1d40 [0166.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo")) returned 0x20 [0167.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0167.941] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.941] GetLastError () returned 0x5 [0167.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0167.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 3785 os_tid = 0x4fc [0166.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca")) returned 0x20 [0167.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0167.942] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.942] GetLastError () returned 0x5 [0167.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0167.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 3786 os_tid = 0x1d44 [0166.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta")) returned 0x20 [0167.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0167.956] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.956] GetLastError () returned 0x5 [0167.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0167.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 Thread: id = 3787 os_tid = 0x1d48 [0166.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry")) returned 0x20 [0167.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0167.958] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.958] GetLastError () returned 0x5 [0167.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0167.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 Thread: id = 3788 os_tid = 0x40c [0166.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar")) returned 0x20 [0167.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0167.960] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.960] GetLastError () returned 0x5 [0167.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0167.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 3789 os_tid = 0x1d4c [0166.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam")) returned 0x20 [0167.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0167.963] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.963] GetLastError () returned 0x5 [0167.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0167.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 Thread: id = 3790 os_tid = 0x1d50 [0166.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti")) returned 0x20 [0167.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0167.964] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.964] GetLastError () returned 0x5 [0167.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0167.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 Thread: id = 3791 os_tid = 0x1d54 [0166.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala")) returned 0x20 [0167.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0167.966] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.966] GetLastError () returned 0x5 [0167.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0167.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 3792 os_tid = 0x1d5c [0166.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun")) returned 0x20 [0167.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0167.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.968] GetLastError () returned 0x5 [0167.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0167.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 3793 os_tid = 0x1d60 [0166.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown")) returned 0x20 [0167.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0167.969] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.969] GetLastError () returned 0x5 [0167.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0167.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b3c0) returned 1 Thread: id = 3794 os_tid = 0x1d64 [0166.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone")) returned 0x20 [0167.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0167.971] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.971] GetLastError () returned 0x5 [0167.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0167.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b6d0) returned 1 Thread: id = 3795 os_tid = 0x1d68 [0166.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare")) returned 0x20 [0167.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0167.973] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.973] GetLastError () returned 0x5 [0167.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0167.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 3796 os_tid = 0x1d6c [0166.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg")) returned 0x20 [0167.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0167.686] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.686] GetLastError () returned 0x5 [0167.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0167.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 Thread: id = 3797 os_tid = 0x1d70 [0167.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba")) returned 0x20 [0167.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0167.687] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.688] GetLastError () returned 0x5 [0167.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0167.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 3798 os_tid = 0x1c4 [0167.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide")) returned 0x20 [0167.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0167.091] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.098] GetLastError () returned 0x5 [0167.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0167.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 Thread: id = 3799 os_tid = 0x168c [0167.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane")) returned 0x20 [0168.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0168.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.396] GetLastError () returned 0x5 [0168.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0168.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 Thread: id = 3800 os_tid = 0x1db4 [0167.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill")) returned 0x20 [0168.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0168.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.397] GetLastError () returned 0x5 [0168.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0168.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 Thread: id = 3801 os_tid = 0x1db8 [0167.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie")) returned 0x20 [0168.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0168.399] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.399] GetLastError () returned 0x5 [0168.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0168.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5568) returned 1 Thread: id = 3802 os_tid = 0x1dbc [0167.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin")) returned 0x20 [0168.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0168.400] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.401] GetLastError () returned 0x5 [0168.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0168.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 Thread: id = 3803 os_tid = 0x1dc0 [0167.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla")) returned 0x20 [0168.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0168.402] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.402] GetLastError () returned 0x5 [0168.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0168.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5728) returned 1 Thread: id = 3804 os_tid = 0x1dc4 [0167.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart")) returned 0x20 [0168.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0168.404] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.404] GetLastError () returned 0x5 [0168.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0168.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e62f8) returned 1 Thread: id = 3805 os_tid = 0x1dc8 [0167.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman")) returned 0x20 [0168.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0168.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.406] GetLastError () returned 0x5 [0168.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0168.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 Thread: id = 3806 os_tid = 0x1dd4 [0167.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe")) returned 0x20 [0168.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0168.407] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.408] GetLastError () returned 0x5 [0168.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0168.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 Thread: id = 3807 os_tid = 0x1dd8 [0167.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne")) returned 0x20 [0168.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0168.409] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.409] GetLastError () returned 0x5 [0168.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0168.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 Thread: id = 3808 os_tid = 0x1ddc [0167.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth")) returned 0x20 [0168.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0168.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.422] GetLastError () returned 0x5 [0168.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0168.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c68) returned 1 Thread: id = 3809 os_tid = 0x1de0 [0167.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney")) returned 0x20 [0168.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0168.394] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.394] GetLastError () returned 0x5 [0168.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0168.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 Thread: id = 3810 os_tid = 0x1de4 [0167.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 0x20 [0167.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0167.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.156] GetLastError () returned 0x5 [0167.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0167.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 3811 os_tid = 0x1de8 [0167.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 0x20 [0167.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.175] GetLastError () returned 0x5 [0167.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0167.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8688) returned 1 Thread: id = 3812 os_tid = 0x1dec [0167.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 0x20 [0167.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0167.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.196] GetLastError () returned 0x5 [0167.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0167.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8778) returned 1 Thread: id = 3813 os_tid = 0x1df0 [0167.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 0x20 [0167.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0167.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.991] GetLastError () returned 0x5 [0167.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0167.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 3814 os_tid = 0x1df4 [0167.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 0x20 [0168.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.446] GetLastError () returned 0x5 [0168.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 3815 os_tid = 0x1df8 [0167.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 0x20 [0168.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.459] GetLastError () returned 0x5 [0168.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56bd8) returned 1 Thread: id = 3816 os_tid = 0x1dfc [0167.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 0x20 [0168.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.444] GetLastError () returned 0x5 [0168.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8958) returned 1 Thread: id = 3817 os_tid = 0x1e00 [0167.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve")) returned 0x20 [0167.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0167.992] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.992] GetLastError () returned 0x5 [0167.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0167.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 3818 os_tid = 0x1e04 [0167.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve")) returned 0x20 [0168.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0168.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.467] GetLastError () returned 0x5 [0168.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0168.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 3819 os_tid = 0x1e08 [0167.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve")) returned 0x20 [0168.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0168.469] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.469] GetLastError () returned 0x5 [0168.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0168.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 Thread: id = 3820 os_tid = 0x1e0c [0167.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve")) returned 0x20 [0168.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0168.470] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.471] GetLastError () returned 0x5 [0168.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0168.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 3821 os_tid = 0x1e10 [0167.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve")) returned 0x20 [0168.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0168.472] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.472] GetLastError () returned 0x5 [0168.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0168.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959968) returned 1 Thread: id = 3822 os_tid = 0x1e14 [0167.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve")) returned 0x20 [0168.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0168.474] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.474] GetLastError () returned 0x5 [0168.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0168.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 Thread: id = 3823 os_tid = 0x1e18 [0167.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve")) returned 0x20 [0168.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0168.476] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.476] GetLastError () returned 0x5 [0168.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0168.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 3824 os_tid = 0x11d8 [0167.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve")) returned 0x20 [0168.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0168.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.477] GetLastError () returned 0x5 [0168.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0168.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 3825 os_tid = 0x11e0 [0167.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve")) returned 0x20 [0168.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0168.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.479] GetLastError () returned 0x5 [0168.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0168.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 Thread: id = 3826 os_tid = 0x1e1c [0167.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve")) returned 0x20 [0168.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0168.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.481] GetLastError () returned 0x5 [0168.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0168.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 3827 os_tid = 0x1e20 [0167.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve")) returned 0x20 [0168.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0168.482] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.482] GetLastError () returned 0x5 [0168.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0168.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 3828 os_tid = 0x1e24 [0167.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve")) returned 0x20 [0168.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0168.483] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.484] GetLastError () returned 0x5 [0168.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0168.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 3829 os_tid = 0x1e28 [0167.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve")) returned 0x20 [0168.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0168.485] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.485] GetLastError () returned 0x5 [0168.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0168.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 3830 os_tid = 0x1e2c [0167.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve")) returned 0x20 [0168.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0168.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.502] GetLastError () returned 0x5 [0168.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0168.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 3831 os_tid = 0x1e30 [0167.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve")) returned 0x20 [0168.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0168.487] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.487] GetLastError () returned 0x5 [0168.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0168.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 3832 os_tid = 0x1e34 [0167.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve")) returned 0x20 [0168.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0168.503] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.504] GetLastError () returned 0x5 [0168.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0168.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 3833 os_tid = 0x1e38 [0167.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve")) returned 0x20 [0168.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0168.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.505] GetLastError () returned 0x5 [0168.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0168.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 3834 os_tid = 0x1e3c [0167.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve")) returned 0x20 [0168.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0168.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.507] GetLastError () returned 0x5 [0168.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0168.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 3835 os_tid = 0x1e40 [0167.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve")) returned 0x20 [0168.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0168.509] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.509] GetLastError () returned 0x5 [0168.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0168.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 3836 os_tid = 0x1e44 [0167.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve")) returned 0x20 [0168.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0168.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.489] GetLastError () returned 0x5 [0168.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0168.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 3837 os_tid = 0x524 [0167.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve")) returned 0x20 [0168.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0168.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.498] GetLastError () returned 0x5 [0168.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0168.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db7d8) returned 1 Thread: id = 3838 os_tid = 0x1e48 [0167.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dbd78 [0167.225] wcscpy (in: _Dest=0x66dbd78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0167.226] wcscat (in: _Dest=0x66dbd78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0167.226] wcscat (in: _Dest=0x66dbd78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*" [0167.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0167.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0168.510] wcscmp (_String1=".", _String2=".") returned 0 [0168.510] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.510] wcscmp (_String1="..", _String2=".") returned 1 [0168.510] wcscmp (_String1="..", _String2="..") returned 0 [0168.510] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0168.510] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0168.510] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0168.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d7d8 [0168.511] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0168.511] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0168.511] wcscat (in: _Dest=0x3e5d7d8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" [0172.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx")) returned 0x20 [0172.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.822] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.822] GetLastError () returned 0x5 [0172.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 [0172.822] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.822] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.822] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d7d8 [0172.822] wcscpy (in: _Dest=0x3e5d7d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0172.822] wcscat (in: _Dest=0x3e5d7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0172.822] wcscat (in: _Dest=0x3e5d7d8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" [0172.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx")) returned 0x20 [0172.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.823] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.823] GetLastError () returned 0x5 [0172.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 [0172.823] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.823] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0172.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0172.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 [0172.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 3839 os_tid = 0x1e4c [0167.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve")) returned 0x20 [0167.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0167.989] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.989] GetLastError () returned 0x5 [0167.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0167.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 3840 os_tid = 0x1e50 [0167.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve")) returned 0x20 [0168.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0168.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.465] GetLastError () returned 0x5 [0168.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0168.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 3841 os_tid = 0x1e54 [0167.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve")) returned 0x20 [0168.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0168.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.500] GetLastError () returned 0x5 [0168.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0168.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cfc8) returned 1 Thread: id = 3842 os_tid = 0x1010 [0167.227] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0167.228] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0167.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.228] GetLastError () returned 0x5 [0167.228] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0167.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 3843 os_tid = 0x1e58 [0167.230] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0167.230] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0167.230] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.230] GetLastError () returned 0x5 [0167.230] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0167.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 3844 os_tid = 0x1e5c [0167.232] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0167.232] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0167.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.233] GetLastError () returned 0x5 [0167.233] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0167.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 3845 os_tid = 0x1e60 [0167.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf")) returned 0x20 [0168.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0168.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.006] GetLastError () returned 0x5 [0168.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0168.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 3846 os_tid = 0x1e64 [0167.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf")) returned 0x20 [0168.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0168.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.008] GetLastError () returned 0x5 [0168.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0168.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 3847 os_tid = 0x1e68 [0167.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf")) returned 0x20 [0168.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0168.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.010] GetLastError () returned 0x5 [0168.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0168.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 3848 os_tid = 0x1e6c [0167.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf")) returned 0x20 [0168.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0168.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.011] GetLastError () returned 0x5 [0168.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0168.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 3849 os_tid = 0x1e70 [0167.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf")) returned 0x20 [0168.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0168.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.013] GetLastError () returned 0x5 [0168.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0168.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 3850 os_tid = 0x1e74 [0167.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf")) returned 0x20 [0168.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0168.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.015] GetLastError () returned 0x5 [0168.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0168.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 3851 os_tid = 0x1e78 [0167.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf")) returned 0x20 [0167.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0167.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.737] GetLastError () returned 0x5 [0167.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0167.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 3852 os_tid = 0x1e7c [0167.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf")) returned 0x20 [0167.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0167.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.739] GetLastError () returned 0x5 [0167.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0167.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 3853 os_tid = 0x1e80 [0167.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf")) returned 0x20 [0167.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0167.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.994] GetLastError () returned 0x5 [0167.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0167.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 3854 os_tid = 0x14a0 [0167.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf")) returned 0x20 [0167.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0167.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.996] GetLastError () returned 0x5 [0167.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0167.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 3855 os_tid = 0x1e84 [0167.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif")) returned 0x20 [0167.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0167.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.999] GetLastError () returned 0x5 [0167.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0167.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 3856 os_tid = 0x1e88 [0167.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf")) returned 0x20 [0168.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0168.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.000] GetLastError () returned 0x5 [0168.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0168.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 3857 os_tid = 0x1e8c [0167.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf")) returned 0x20 [0168.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0168.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.002] GetLastError () returned 0x5 [0168.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0168.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 3858 os_tid = 0x1e90 [0167.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf")) returned 0x20 [0168.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0168.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.003] GetLastError () returned 0x5 [0168.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0168.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 3859 os_tid = 0x1e94 [0167.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf")) returned 0x20 [0168.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0168.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.005] GetLastError () returned 0x5 [0168.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0168.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 3860 os_tid = 0x1e98 [0167.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20 [0170.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0170.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.510] GetLastError () returned 0x5 [0170.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27a48) returned 1 Thread: id = 3861 os_tid = 0x1e9c [0167.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20 [0170.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0170.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.512] GetLastError () returned 0x5 [0170.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 3862 os_tid = 0x1ea0 [0167.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20 [0170.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0170.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.503] GetLastError () returned 0x5 [0170.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0170.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 3863 os_tid = 0x1ea4 [0167.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20 [0170.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0170.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.507] GetLastError () returned 0x5 [0170.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0170.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 3864 os_tid = 0x1ea8 [0167.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20 [0170.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0170.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.243] GetLastError () returned 0x5 [0170.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0170.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 3865 os_tid = 0x1eac [0167.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20 [0170.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0170.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.509] GetLastError () returned 0x5 [0170.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 3866 os_tid = 0x1eb0 [0167.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 0x20 [0167.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0167.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.287] GetLastError () returned 0x5 [0167.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0167.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 3867 os_tid = 0x1eb4 [0167.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 0x20 [0168.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0168.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.638] GetLastError () returned 0x5 [0168.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0168.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 3868 os_tid = 0xb38 [0167.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 0x20 [0168.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0168.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.856] GetLastError () returned 0x5 [0168.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0168.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 3869 os_tid = 0x1eb8 [0167.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 0x20 [0168.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.858] GetLastError () returned 0x5 [0168.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56e90) returned 1 Thread: id = 3870 os_tid = 0x1ebc [0167.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 0x20 [0168.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0168.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.855] GetLastError () returned 0x5 [0168.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0168.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 3871 os_tid = 0x1ec0 [0167.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 0x20 [0168.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0168.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.854] GetLastError () returned 0x5 [0168.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0168.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 3872 os_tid = 0x1ec4 [0167.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 0x20 [0168.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0168.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.860] GetLastError () returned 0x5 [0168.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0168.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 3873 os_tid = 0x1ec8 [0167.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 0x20 [0168.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.861] GetLastError () returned 0x5 [0168.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f78) returned 1 Thread: id = 3874 os_tid = 0xe48 [0167.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 0x20 [0168.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0168.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.852] GetLastError () returned 0x5 [0168.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0168.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 3875 os_tid = 0x1ecc [0167.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 0x20 [0168.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0168.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.851] GetLastError () returned 0x5 [0168.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0168.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 3876 os_tid = 0x1ed0 [0167.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 0x20 [0168.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0168.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.849] GetLastError () returned 0x5 [0168.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0168.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 3877 os_tid = 0x1ed4 [0167.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 0x20 [0168.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.862] GetLastError () returned 0x5 [0168.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0168.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 3878 os_tid = 0x1ed8 [0167.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 0x20 [0168.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0168.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.864] GetLastError () returned 0x5 [0168.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0168.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5b58) returned 1 Thread: id = 3879 os_tid = 0xb14 [0167.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 0x20 [0168.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0168.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.848] GetLastError () returned 0x5 [0168.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0168.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897ce8) returned 1 Thread: id = 3880 os_tid = 0x1edc [0167.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 0x20 [0168.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0168.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.866] GetLastError () returned 0x5 [0168.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0168.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 3881 os_tid = 0x1ee0 [0167.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 0x20 [0168.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0168.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.847] GetLastError () returned 0x5 [0168.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0168.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e58d0) returned 1 Thread: id = 3882 os_tid = 0x1ee4 [0167.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 0x20 [0168.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0168.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.845] GetLastError () returned 0x5 [0168.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0168.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 Thread: id = 3883 os_tid = 0x1ee8 [0167.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 0x20 [0168.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.844] GetLastError () returned 0x5 [0168.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897dc8) returned 1 Thread: id = 3884 os_tid = 0x1eec [0167.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 0x20 [0168.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0168.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.842] GetLastError () returned 0x5 [0168.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0168.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 3885 os_tid = 0x1ef0 [0167.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 0x20 [0168.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0168.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.867] GetLastError () returned 0x5 [0168.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0168.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57060) returned 1 Thread: id = 3886 os_tid = 0x1ef4 [0167.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 0x20 [0168.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0168.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.869] GetLastError () returned 0x5 [0168.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0168.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e57f8) returned 1 Thread: id = 3887 os_tid = 0x1ef8 [0167.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 0x20 [0168.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.841] GetLastError () returned 0x5 [0168.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0168.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897ea8) returned 1 Thread: id = 3888 os_tid = 0x1efc [0167.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 0x20 [0168.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0168.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.839] GetLastError () returned 0x5 [0168.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0168.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 3889 os_tid = 0x1f00 [0167.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 0x20 [0168.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0168.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.871] GetLastError () returned 0x5 [0168.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0168.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57148) returned 1 Thread: id = 3890 os_tid = 0x1f04 [0167.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 0x20 [0168.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.838] GetLastError () returned 0x5 [0168.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897f88) returned 1 Thread: id = 3891 os_tid = 0x1f08 [0167.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 0x20 [0168.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.837] GetLastError () returned 0x5 [0168.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57230) returned 1 Thread: id = 3892 os_tid = 0x1f0c [0167.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 0x20 [0168.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0168.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.835] GetLastError () returned 0x5 [0168.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0168.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 3893 os_tid = 0x1f10 [0167.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 0x20 [0168.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.884] GetLastError () returned 0x5 [0168.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0168.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0bfb8) returned 1 Thread: id = 3894 os_tid = 0x10bc [0167.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 0x20 [0168.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.834] GetLastError () returned 0x5 [0168.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0168.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898068) returned 1 Thread: id = 3895 os_tid = 0x1f14 [0167.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra")) returned 0x20 [0167.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0167.309] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.314] GetLastError () returned 0x5 [0167.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0167.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 3896 os_tid = 0x1f18 [0167.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra")) returned 0x20 [0170.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0170.936] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.936] GetLastError () returned 0x5 [0170.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0170.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e528) returned 1 Thread: id = 3897 os_tid = 0x1f1c [0167.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra")) returned 0x20 [0170.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0170.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.927] GetLastError () returned 0x5 [0170.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0170.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 3898 os_tid = 0x1f20 [0167.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra")) returned 0x20 [0170.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0170.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.934] GetLastError () returned 0x5 [0170.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0170.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 3899 os_tid = 0x1f24 [0167.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra")) returned 0x20 [0170.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0170.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.928] GetLastError () returned 0x5 [0170.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0170.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 3900 os_tid = 0x127c [0167.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra")) returned 0x20 [0168.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0169.245] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.773] GetLastError () returned 0x5 [0170.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0170.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 3901 os_tid = 0x1f28 [0167.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra")) returned 0x20 [0170.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0170.937] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.937] GetLastError () returned 0x5 [0170.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0170.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db08) returned 1 Thread: id = 3902 os_tid = 0x131c [0167.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra")) returned 0x20 [0170.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0170.924] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.924] GetLastError () returned 0x5 [0170.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0170.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 3903 os_tid = 0xc30 [0167.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra")) returned 0x20 [0170.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0170.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.923] GetLastError () returned 0x5 [0170.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0170.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 Thread: id = 3904 os_tid = 0x1324 [0167.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra")) returned 0x20 [0170.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0170.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.939] GetLastError () returned 0x5 [0170.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0170.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e498) returned 1 Thread: id = 3905 os_tid = 0x1f2c [0167.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra")) returned 0x20 [0170.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0170.941] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.941] GetLastError () returned 0x5 [0170.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0170.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 3906 os_tid = 0x1f30 [0167.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra")) returned 0x20 [0170.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0170.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.921] GetLastError () returned 0x5 [0170.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0170.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 3907 os_tid = 0x1f34 [0167.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra")) returned 0x20 [0170.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0170.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.920] GetLastError () returned 0x5 [0170.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0170.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 3908 os_tid = 0x1f38 [0167.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra")) returned 0x20 [0170.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0170.942] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.942] GetLastError () returned 0x5 [0170.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0170.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 Thread: id = 3909 os_tid = 0x1f3c [0167.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra")) returned 0x20 [0170.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0170.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.944] GetLastError () returned 0x5 [0170.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0170.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d0e8) returned 1 Thread: id = 3910 os_tid = 0x1f40 [0167.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra")) returned 0x20 [0170.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0170.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.774] GetLastError () returned 0x5 [0170.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0170.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 3911 os_tid = 0x1f44 [0167.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra")) returned 0x20 [0170.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0170.932] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.932] GetLastError () returned 0x5 [0170.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0170.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 3912 os_tid = 0x1f48 [0167.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra")) returned 0x20 [0170.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0170.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.772] GetLastError () returned 0x5 [0170.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0170.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 3913 os_tid = 0x1f4c [0167.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra")) returned 0x20 [0170.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0170.926] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.926] GetLastError () returned 0x5 [0170.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0170.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 3914 os_tid = 0x1f50 [0167.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra")) returned 0x20 [0170.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0170.931] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.931] GetLastError () returned 0x5 [0170.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0170.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d298) returned 1 Thread: id = 3915 os_tid = 0x1f54 [0167.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra")) returned 0x20 [0170.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0170.949] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.949] GetLastError () returned 0x5 [0170.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0170.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 3916 os_tid = 0x1f58 [0167.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x354c60 [0167.334] wcscpy (in: _Dest=0x354c60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0167.334] wcscat (in: _Dest=0x354c60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0167.334] wcscat (in: _Dest=0x354c60, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*" [0167.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0167.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0170.945] wcscmp (_String1=".", _String2=".") returned 0 [0170.945] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.946] wcscmp (_String1="..", _String2=".") returned 1 [0170.946] wcscmp (_String1="..", _String2="..") returned 0 [0170.946] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0170.946] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0170.946] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0170.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d298 [0170.946] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0170.946] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0170.946] wcscat (in: _Dest=0x3e5d298, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" [0172.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx")) returned 0x20 [0172.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.783] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.783] GetLastError () returned 0x5 [0172.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 [0172.784] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.784] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.784] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5d298 [0172.784] wcscpy (in: _Dest=0x3e5d298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0172.784] wcscat (in: _Dest=0x3e5d298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0172.784] wcscat (in: _Dest=0x3e5d298, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" [0172.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx")) returned 0x20 [0172.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.785] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.785] GetLastError () returned 0x5 [0172.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 [0172.785] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.785] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0172.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0172.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354c60) returned 1 [0172.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 3917 os_tid = 0x1f5c [0167.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra")) returned 0x20 [0170.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0170.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.946] GetLastError () returned 0x5 [0170.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0170.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 3918 os_tid = 0x1f68 [0167.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra")) returned 0x20 [0170.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0170.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.948] GetLastError () returned 0x5 [0170.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0170.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 3919 os_tid = 0x1f6c [0167.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra")) returned 0x20 [0170.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0170.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.930] GetLastError () returned 0x5 [0170.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0170.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 Thread: id = 3920 os_tid = 0x1f70 [0167.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt")) returned 0x20 [0167.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0167.342] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.348] GetLastError () returned 0x5 [0167.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0167.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1ea0) returned 1 Thread: id = 3921 os_tid = 0x1f74 [0167.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt")) returned 0x20 [0167.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0167.358] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.364] GetLastError () returned 0x5 [0167.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0167.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 3922 os_tid = 0x1f78 [0167.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt")) returned 0x20 [0168.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0168.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.520] GetLastError () returned 0x5 [0168.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0168.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 3923 os_tid = 0x1f7c [0167.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt")) returned 0x20 [0168.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0168.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.076] GetLastError () returned 0x5 [0168.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0168.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 3924 os_tid = 0x1f80 [0167.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt")) returned 0x20 [0168.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0168.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.075] GetLastError () returned 0x5 [0168.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0168.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6c48) returned 1 Thread: id = 3925 os_tid = 0x1f84 [0167.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 0x20 [0168.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0168.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.073] GetLastError () returned 0x5 [0168.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0168.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 Thread: id = 3926 os_tid = 0x1f88 [0167.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt")) returned 0x20 [0168.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0168.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.546] GetLastError () returned 0x5 [0168.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0168.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 3927 os_tid = 0x1f8c [0167.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt")) returned 0x20 [0168.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0168.532] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.532] GetLastError () returned 0x5 [0168.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0168.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff77c8) returned 1 Thread: id = 3928 os_tid = 0x1f90 [0167.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt")) returned 0x20 [0168.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0168.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.531] GetLastError () returned 0x5 [0168.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0168.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7098) returned 1 Thread: id = 3929 os_tid = 0x1f94 [0167.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt")) returned 0x20 [0168.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0168.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.529] GetLastError () returned 0x5 [0168.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0168.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 3930 os_tid = 0x1f98 [0167.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt")) returned 0x20 [0168.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0168.527] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.527] GetLastError () returned 0x5 [0168.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0168.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 3931 os_tid = 0x1f9c [0167.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt")) returned 0x20 [0168.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0168.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.526] GetLastError () returned 0x5 [0168.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0168.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 3932 os_tid = 0x1fa0 [0167.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt")) returned 0x20 [0168.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0168.524] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.524] GetLastError () returned 0x5 [0168.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0168.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3933 os_tid = 0x1fa4 [0167.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 0x20 [0168.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0168.522] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.522] GetLastError () returned 0x5 [0168.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0168.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3934 os_tid = 0x1fa8 [0167.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze")) returned 0x20 [0169.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0169.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.892] GetLastError () returned 0x5 [0169.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0169.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 3935 os_tid = 0x1fac [0167.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze")) returned 0x20 [0169.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0169.877] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.877] GetLastError () returned 0x5 [0169.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0169.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 3936 os_tid = 0x1fb0 [0167.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze")) returned 0x20 [0169.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0169.893] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.893] GetLastError () returned 0x5 [0169.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0169.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 3937 os_tid = 0x1fb4 [0167.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze")) returned 0x20 [0169.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0169.878] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.879] GetLastError () returned 0x5 [0169.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0169.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 3938 os_tid = 0x1fb8 [0167.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze")) returned 0x20 [0169.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0169.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.895] GetLastError () returned 0x5 [0169.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0169.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 3939 os_tid = 0x1fbc [0167.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze")) returned 0x20 [0169.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0169.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.880] GetLastError () returned 0x5 [0169.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0169.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 3940 os_tid = 0x1fc0 [0167.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze")) returned 0x20 [0169.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0169.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.882] GetLastError () returned 0x5 [0169.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0169.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 3941 os_tid = 0x12b4 [0167.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze")) returned 0x20 [0169.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0169.884] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.884] GetLastError () returned 0x5 [0169.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0169.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 3942 os_tid = 0x12bc [0167.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze")) returned 0x20 [0169.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0169.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.886] GetLastError () returned 0x5 [0169.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0169.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674def8) returned 1 Thread: id = 3943 os_tid = 0x12c0 [0167.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze")) returned 0x20 [0169.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0169.888] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.888] GetLastError () returned 0x5 [0169.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0169.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de68) returned 1 Thread: id = 3944 os_tid = 0x12c4 [0167.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze")) returned 0x20 [0169.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0169.890] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.890] GetLastError () returned 0x5 [0169.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0169.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 3945 os_tid = 0x1fc4 [0167.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze")) returned 0x20 [0169.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0169.343] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.343] GetLastError () returned 0x5 [0169.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0169.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 Thread: id = 3946 os_tid = 0x1fc8 [0167.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze")) returned 0x20 [0169.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0169.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.897] GetLastError () returned 0x5 [0169.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0169.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 3947 os_tid = 0x1fcc [0167.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze")) returned 0x20 [0169.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0169.903] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.903] GetLastError () returned 0x5 [0169.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0169.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 3948 os_tid = 0x1fd0 [0167.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze")) returned 0x20 [0169.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0169.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.913] GetLastError () returned 0x5 [0169.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0169.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 3949 os_tid = 0x12e0 [0167.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze")) returned 0x20 [0169.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0169.915] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.915] GetLastError () returned 0x5 [0169.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0169.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 3950 os_tid = 0x12e4 [0167.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze")) returned 0x20 [0169.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0169.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.901] GetLastError () returned 0x5 [0169.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0169.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 3951 os_tid = 0x1354 [0167.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze")) returned 0x20 [0169.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0169.904] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.905] GetLastError () returned 0x5 [0169.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0169.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 3952 os_tid = 0x1374 [0167.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze")) returned 0x20 [0169.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0169.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.899] GetLastError () returned 0x5 [0169.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0169.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 3953 os_tid = 0x1398 [0167.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze")) returned 0x20 [0169.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0169.339] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.339] GetLastError () returned 0x5 [0169.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0169.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ddd8) returned 1 Thread: id = 3954 os_tid = 0x140c [0167.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze")) returned 0x20 [0169.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0169.906] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.906] GetLastError () returned 0x5 [0169.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0169.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 3955 os_tid = 0x1410 [0167.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3555f0 [0167.392] wcscpy (in: _Dest=0x3555f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0167.392] wcscat (in: _Dest=0x3555f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0167.392] wcscat (in: _Dest=0x3555f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*" [0167.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0167.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0169.908] wcscmp (_String1=".", _String2=".") returned 0 [0169.908] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.908] wcscmp (_String1="..", _String2=".") returned 1 [0169.908] wcscmp (_String1="..", _String2="..") returned 0 [0169.908] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0169.908] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0169.908] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0169.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0169.908] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0169.908] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0169.908] wcscat (in: _Dest=0x697ea08, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" [0171.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx")) returned 0x20 [0171.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.955] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.956] GetLastError () returned 0x5 [0171.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0171.956] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.956] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.956] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697ea08 [0171.956] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0171.956] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0171.956] wcscat (in: _Dest=0x697ea08, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" [0171.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx")) returned 0x20 [0172.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.064] GetLastError () returned 0x5 [0172.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 [0172.064] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.064] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0172.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0172.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3555f0) returned 1 [0172.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 3956 os_tid = 0x1414 [0167.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze")) returned 0x20 [0169.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0169.909] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.909] GetLastError () returned 0x5 [0169.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0169.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 3957 os_tid = 0x1418 [0167.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze")) returned 0x20 [0169.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0169.341] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.341] GetLastError () returned 0x5 [0169.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0169.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d958) returned 1 Thread: id = 3958 os_tid = 0x141c [0167.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze")) returned 0x20 [0169.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0169.911] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.911] GetLastError () returned 0x5 [0169.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0169.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 3959 os_tid = 0x1420 [0167.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun")) returned 0x20 [0169.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0169.847] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.847] GetLastError () returned 0x5 [0169.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0169.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 3960 os_tid = 0xb00 [0167.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun")) returned 0x20 [0169.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0169.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.848] GetLastError () returned 0x5 [0169.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0169.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d568) returned 1 Thread: id = 3961 os_tid = 0x5c8 [0167.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun")) returned 0x20 [0169.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0169.850] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.850] GetLastError () returned 0x5 [0169.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0169.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 Thread: id = 3962 os_tid = 0x14f0 [0167.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun")) returned 0x20 [0169.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0169.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.852] GetLastError () returned 0x5 [0169.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0169.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d5f8) returned 1 Thread: id = 3963 os_tid = 0xc4c [0167.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun")) returned 0x20 [0169.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0169.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.853] GetLastError () returned 0x5 [0169.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0169.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 3964 os_tid = 0xdc4 [0167.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun")) returned 0x20 [0169.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0169.854] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.854] GetLastError () returned 0x5 [0169.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0169.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db98) returned 1 Thread: id = 3965 os_tid = 0x6d4 [0167.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun")) returned 0x20 [0169.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0169.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.330] GetLastError () returned 0x5 [0169.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0169.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e5b8) returned 1 Thread: id = 3966 os_tid = 0x608 [0167.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun")) returned 0x20 [0169.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0169.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.333] GetLastError () returned 0x5 [0169.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0169.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 3967 os_tid = 0x1508 [0167.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun")) returned 0x20 [0169.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0169.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.841] GetLastError () returned 0x5 [0169.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0169.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e258) returned 1 Thread: id = 3968 os_tid = 0x150c [0167.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun")) returned 0x20 [0169.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0169.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.842] GetLastError () returned 0x5 [0169.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0169.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e1c8) returned 1 Thread: id = 3969 os_tid = 0x1510 [0167.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun")) returned 0x20 [0169.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0169.844] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.844] GetLastError () returned 0x5 [0169.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0169.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 3970 os_tid = 0x1514 [0167.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun")) returned 0x20 [0169.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0169.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.845] GetLastError () returned 0x5 [0169.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0169.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 3971 os_tid = 0x1018 [0167.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun")) returned 0x20 [0169.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0169.856] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.856] GetLastError () returned 0x5 [0169.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0169.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 3972 os_tid = 0x1520 [0167.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun")) returned 0x20 [0169.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0169.861] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.861] GetLastError () returned 0x5 [0169.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0169.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e408) returned 1 Thread: id = 3973 os_tid = 0x3e8 [0167.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun")) returned 0x20 [0169.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0169.863] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.863] GetLastError () returned 0x5 [0169.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0169.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d448) returned 1 Thread: id = 3974 os_tid = 0x1524 [0167.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun")) returned 0x20 [0169.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0169.865] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.865] GetLastError () returned 0x5 [0169.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0169.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e6d8) returned 1 Thread: id = 3975 os_tid = 0x1fd4 [0167.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun")) returned 0x20 [0169.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0169.859] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.859] GetLastError () returned 0x5 [0169.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0169.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 3976 os_tid = 0x152c [0167.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun")) returned 0x20 [0169.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0169.866] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.867] GetLastError () returned 0x5 [0169.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0169.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e768) returned 1 Thread: id = 3977 os_tid = 0x14d4 [0167.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun")) returned 0x20 [0169.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0169.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.857] GetLastError () returned 0x5 [0169.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0169.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 3978 os_tid = 0x1534 [0167.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun")) returned 0x20 [0169.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0169.868] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.868] GetLastError () returned 0x5 [0169.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0169.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e7f8) returned 1 Thread: id = 3979 os_tid = 0x14e4 [0167.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun")) returned 0x20 [0169.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0169.870] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.870] GetLastError () returned 0x5 [0169.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0169.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e888) returned 1 Thread: id = 3980 os_tid = 0x153c [0167.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355290 [0167.427] wcscpy (in: _Dest=0x355290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0167.427] wcscat (in: _Dest=0x355290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0167.427] wcscat (in: _Dest=0x355290, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*" [0167.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0167.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0169.872] wcscmp (_String1=".", _String2=".") returned 0 [0169.872] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.872] wcscmp (_String1="..", _String2=".") returned 1 [0169.872] wcscmp (_String1="..", _String2="..") returned 0 [0169.872] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0169.872] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0169.872] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0169.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dce8 [0169.872] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0169.872] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0169.872] wcscat (in: _Dest=0x697dce8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" [0171.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx")) returned 0x20 [0171.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.893] GetLastError () returned 0x5 [0171.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0171.893] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0171.893] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0171.893] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0171.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dce8 [0171.893] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0171.893] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0171.893] wcscat (in: _Dest=0x697dce8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" [0171.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx")) returned 0x20 [0171.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.893] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.894] GetLastError () returned 0x5 [0171.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 [0171.894] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0171.894] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0171.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0171.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355290) returned 1 [0171.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 3981 os_tid = 0x10f4 [0167.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun")) returned 0x20 [0169.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0169.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.873] GetLastError () returned 0x5 [0169.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0169.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e918) returned 1 Thread: id = 3982 os_tid = 0x1560 [0167.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun")) returned 0x20 [0169.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0169.874] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.874] GetLastError () returned 0x5 [0169.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0169.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e9a8) returned 1 Thread: id = 3983 os_tid = 0x10f8 [0167.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun")) returned 0x20 [0169.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0169.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.329] GetLastError () returned 0x5 [0169.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0169.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x356370) returned 1 Thread: id = 3984 os_tid = 0x10fc [0167.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv")) returned 0x20 [0167.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0167.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.431] GetLastError () returned 0x5 [0167.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0167.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 3985 os_tid = 0x1100 [0167.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv")) returned 0x20 [0167.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0167.433] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.433] GetLastError () returned 0x5 [0167.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0167.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 3986 os_tid = 0x1104 [0167.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv")) returned 0x20 [0167.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0167.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.435] GetLastError () returned 0x5 [0167.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0167.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3120) returned 1 Thread: id = 3987 os_tid = 0x7ec [0167.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv")) returned 0x20 [0167.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0167.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.438] GetLastError () returned 0x5 [0167.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0167.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff67f8) returned 1 Thread: id = 3988 os_tid = 0x1108 [0167.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0173.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.466] GetLastError () returned 0x5 [0173.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0173.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 3989 os_tid = 0xb74 [0167.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0173.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.466] GetLastError () returned 0x5 [0173.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0173.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 Thread: id = 3990 os_tid = 0xe64 [0167.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0173.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.466] GetLastError () returned 0x5 [0173.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0173.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1548) returned 1 Thread: id = 3991 os_tid = 0xb84 [0167.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0173.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.465] GetLastError () returned 0x5 [0173.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0173.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 Thread: id = 3992 os_tid = 0xb44 [0167.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0173.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.465] GetLastError () returned 0x5 [0173.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0173.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 3993 os_tid = 0x110c [0167.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp")) returned 0x20 [0173.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0173.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.465] GetLastError () returned 0x5 [0173.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0173.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 3994 os_tid = 0x1110 [0167.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq")) returned 0x20 [0173.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0173.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.465] GetLastError () returned 0x5 [0173.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0173.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 3995 os_tid = 0x1114 [0167.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra")) returned 0x20 [0173.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0173.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.464] GetLastError () returned 0x5 [0173.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0173.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 3996 os_tid = 0x1118 [0167.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita")) returned 0x20 [0173.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0173.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.464] GetLastError () returned 0x5 [0173.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0173.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 3997 os_tid = 0x1fd8 [0167.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn")) returned 0x20 [0172.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0172.501] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.486] GetLastError () returned 0x5 [0173.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0173.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 3998 os_tid = 0x1120 [0167.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor")) returned 0x20 [0173.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0173.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.839] GetLastError () returned 0x5 [0173.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0173.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 3999 os_tid = 0x1124 [0167.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp")) returned 0x20 [0170.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0170.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.705] GetLastError () returned 0x5 [0171.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0171.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 4000 os_tid = 0x1130 [0167.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld")) returned 0x20 [0173.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0173.488] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.488] GetLastError () returned 0x5 [0173.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0173.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 4001 os_tid = 0x1134 [0167.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor")) returned 0x20 [0173.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0173.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.466] GetLastError () returned 0x5 [0173.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0173.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0fa8) returned 1 Thread: id = 4002 os_tid = 0x1138 [0167.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb")) returned 0x20 [0173.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0173.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.467] GetLastError () returned 0x5 [0173.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0173.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 4003 os_tid = 0x113c [0167.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo")) returned 0x20 [0173.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0173.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.467] GetLastError () returned 0x5 [0173.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0173.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 4004 os_tid = 0x1150 [0167.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve")) returned 0x20 [0173.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0173.844] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.844] GetLastError () returned 0x5 [0173.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0173.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 4005 os_tid = 0x1154 [0167.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat")) returned 0x20 [0173.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0173.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.848] GetLastError () returned 0x5 [0173.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0173.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dd90) returned 1 Thread: id = 4006 os_tid = 0x1fdc [0167.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs")) returned 0x20 [0173.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0173.851] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.851] GetLastError () returned 0x5 [0173.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0173.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 4007 os_tid = 0x1fe4 [0167.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht")) returned 0x20 [0173.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0173.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.853] GetLastError () returned 0x5 [0173.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0173.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 4008 os_tid = 0x1fe8 [0167.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan")) returned 0x20 [0173.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0173.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.855] GetLastError () returned 0x5 [0173.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0173.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 4009 os_tid = 0x1fec [0167.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu")) returned 0x20 [0173.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0173.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.857] GetLastError () returned 0x5 [0173.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0173.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 4010 os_tid = 0x1ff0 [0167.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp")) returned 0x20 [0173.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0173.859] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.859] GetLastError () returned 0x5 [0173.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0173.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e570) returned 1 Thread: id = 4011 os_tid = 0x1ff4 [0167.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq")) returned 0x20 [0173.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0173.860] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.861] GetLastError () returned 0x5 [0173.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0173.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 4012 os_tid = 0x15c0 [0167.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra")) returned 0x20 [0173.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0173.862] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.862] GetLastError () returned 0x5 [0173.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0173.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 Thread: id = 4013 os_tid = 0x15e4 [0167.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita")) returned 0x20 [0173.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0173.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.841] GetLastError () returned 0x5 [0173.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0173.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e6c0) returned 1 Thread: id = 4014 os_tid = 0x15e8 [0167.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn")) returned 0x20 [0173.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0173.864] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.864] GetLastError () returned 0x5 [0173.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0173.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e618) returned 1 Thread: id = 4015 os_tid = 0x1600 [0167.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor")) returned 0x20 [0169.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0170.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.459] GetLastError () returned 0x5 [0173.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0173.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e420) returned 1 Thread: id = 4016 os_tid = 0x1604 [0167.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp")) returned 0x20 [0173.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0173.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.467] GetLastError () returned 0x5 [0173.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0173.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e378) returned 1 Thread: id = 4017 os_tid = 0x1608 [0167.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld")) returned 0x20 [0172.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0172.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.157] GetLastError () returned 0x5 [0173.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0173.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eb58) returned 1 Thread: id = 4018 os_tid = 0x160c [0167.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor")) returned 0x20 [0173.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0173.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.846] GetLastError () returned 0x5 [0173.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0173.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ec00) returned 1 Thread: id = 4019 os_tid = 0x161c [0167.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn")) returned 0x20 [0167.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0167.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.806] GetLastError () returned 0x5 [0167.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0167.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 4020 os_tid = 0x1620 [0167.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn")) returned 0x20 [0168.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0168.940] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.940] GetLastError () returned 0x5 [0168.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0168.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 4021 os_tid = 0xfc0 [0167.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn")) returned 0x20 [0169.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0169.364] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.364] GetLastError () returned 0x5 [0169.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0169.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 4022 os_tid = 0x1628 [0167.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn")) returned 0x20 [0169.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0169.361] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.362] GetLastError () returned 0x5 [0169.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0169.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354f30) returned 1 Thread: id = 4023 os_tid = 0x162c [0167.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn")) returned 0x20 [0169.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0169.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.386] GetLastError () returned 0x5 [0169.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0169.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598d0) returned 1 Thread: id = 4024 os_tid = 0x4f8 [0167.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn")) returned 0x20 [0169.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0169.384] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.384] GetLastError () returned 0x5 [0169.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0169.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354ab0) returned 1 Thread: id = 4025 os_tid = 0x1630 [0167.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn")) returned 0x20 [0169.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0169.359] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.360] GetLastError () returned 0x5 [0169.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0169.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354fc0) returned 1 Thread: id = 4026 os_tid = 0xdc0 [0167.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn")) returned 0x20 [0169.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0169.382] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.382] GetLastError () returned 0x5 [0169.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0169.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 4027 os_tid = 0x11f8 [0167.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn")) returned 0x20 [0169.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0169.380] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.380] GetLastError () returned 0x5 [0169.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0169.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3550e0) returned 1 Thread: id = 4028 os_tid = 0xa10 [0167.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn")) returned 0x20 [0169.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0169.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.378] GetLastError () returned 0x5 [0169.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0169.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355200) returned 1 Thread: id = 4029 os_tid = 0x1634 [0167.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn")) returned 0x20 [0169.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0169.357] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.357] GetLastError () returned 0x5 [0169.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0169.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 4030 os_tid = 0x1204 [0167.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn")) returned 0x20 [0169.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0169.376] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.376] GetLastError () returned 0x5 [0169.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0169.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 4031 os_tid = 0x120c [0167.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn")) returned 0x20 [0169.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0169.355] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.355] GetLastError () returned 0x5 [0169.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0169.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 Thread: id = 4032 os_tid = 0x1224 [0167.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn")) returned 0x20 [0169.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0169.353] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.353] GetLastError () returned 0x5 [0169.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0169.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2258) returned 1 Thread: id = 4033 os_tid = 0x1230 [0167.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn")) returned 0x20 [0169.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0169.351] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.351] GetLastError () returned 0x5 [0169.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0169.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3068) returned 1 Thread: id = 4034 os_tid = 0x1234 [0167.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn")) returned 0x20 [0169.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0169.349] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.349] GetLastError () returned 0x5 [0169.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0169.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1dd8) returned 1 Thread: id = 4035 os_tid = 0x1238 [0167.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn")) returned 0x20 [0169.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0169.347] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.347] GetLastError () returned 0x5 [0169.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0169.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 4036 os_tid = 0x1ff8 [0167.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn")) returned 0x20 [0169.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0169.374] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.374] GetLastError () returned 0x5 [0169.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0169.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df29a8) returned 1 Thread: id = 4037 os_tid = 0x1ffc [0167.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn")) returned 0x20 [0169.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0169.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.310] GetLastError () returned 0x5 [0169.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0169.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 Thread: id = 4038 os_tid = 0x1244 [0167.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn")) returned 0x20 [0169.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0169.371] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.371] GetLastError () returned 0x5 [0169.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0169.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2498) returned 1 Thread: id = 4039 os_tid = 0x1248 [0167.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn")) returned 0x20 [0169.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0169.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.369] GetLastError () returned 0x5 [0169.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0169.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df22e8) returned 1 Thread: id = 4040 os_tid = 0x124c [0167.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcee8 [0167.814] wcscpy (in: _Dest=0x66dcee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0167.814] wcscat (in: _Dest=0x66dcee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0167.814] wcscat (in: _Dest=0x66dcee8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*" [0167.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d41870 [0167.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0169.368] wcscmp (_String1=".", _String2=".") returned 0 [0169.368] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.368] wcscmp (_String1="..", _String2=".") returned 1 [0169.368] wcscmp (_String1="..", _String2="..") returned 0 [0169.368] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0169.368] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0169.368] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0169.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e768 [0169.368] wcscpy (in: _Dest=0x697e768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0169.368] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0169.368] wcscat (in: _Dest=0x697e768, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" [0172.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx")) returned 0x20 [0172.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.835] GetLastError () returned 0x5 [0172.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 [0172.835] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.835] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.835] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e768 [0172.835] wcscpy (in: _Dest=0x697e768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0172.835] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0172.835] wcscat (in: _Dest=0x697e768, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" [0172.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx")) returned 0x20 [0172.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.836] GetLastError () returned 0x5 [0172.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 [0172.836] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x3d41870 | out: lpFindFileData=0x3d41870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.836] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41870) returned 1 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcee8) returned 1 [0172.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 4041 os_tid = 0xd88 [0167.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn")) returned 0x20 [0169.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0169.366] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.366] GetLastError () returned 0x5 [0169.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0169.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abce8) returned 1 Thread: id = 4042 os_tid = 0x173c [0168.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn")) returned 0x20 [0169.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0169.345] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.345] GetLastError () returned 0x5 [0169.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0169.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd78) returned 1 Thread: id = 4043 os_tid = 0x178c [0168.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d06f0 [0168.204] wcscpy (in: _Dest=0x66d06f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0168.204] wcscat (in: _Dest=0x66d06f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0168.204] wcscat (in: _Dest=0x66d06f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*" [0168.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0168.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0168.205] wcscmp (_String1=".", _String2=".") returned 0 [0168.205] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.205] wcscmp (_String1="..", _String2=".") returned 1 [0168.205] wcscmp (_String1="..", _String2="..") returned 0 [0168.205] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1 [0168.205] wcscmp (_String1="SOLVSAMP.XLS", _String2=".") returned 1 [0168.205] wcscmp (_String1="SOLVSAMP.XLS", _String2="..") returned 1 [0168.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x682c128 [0168.205] wcscpy (in: _Dest=0x682c128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0168.206] wcscat (in: _Dest=0x682c128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0168.206] wcscat (in: _Dest=0x682c128, _Source="SOLVSAMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" [0169.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682c128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0169.581] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0 [0169.581] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0169.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0169.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0169.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 Thread: id = 4044 os_tid = 0x179c [0168.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf")) returned 0x20 [0168.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0168.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.207] GetLastError () returned 0x5 [0168.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0168.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 Thread: id = 4045 os_tid = 0x17a0 [0168.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 0x20 [0169.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0169.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.316] GetLastError () returned 0x5 [0169.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0169.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 4046 os_tid = 0x17a4 [0168.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml")) returned 0x20 [0168.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0168.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.928] GetLastError () returned 0x5 [0168.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0168.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 Thread: id = 4047 os_tid = 0x17b0 [0168.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng")) returned 0x20 [0169.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0169.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.318] GetLastError () returned 0x5 [0169.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0169.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 Thread: id = 4048 os_tid = 0xbbc [0168.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 0x20 [0168.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0168.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.933] GetLastError () returned 0x5 [0168.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0168.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 4049 os_tid = 0x784 [0168.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0060 [0168.211] wcscpy (in: _Dest=0x66d0060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0168.212] wcscat (in: _Dest=0x66d0060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\" [0168.212] wcscat (in: _Dest=0x66d0060, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*" [0168.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0168.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0168.930] wcscmp (_String1=".", _String2=".") returned 0 [0168.930] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.930] wcscmp (_String1="..", _String2=".") returned 1 [0168.930] wcscmp (_String1="..", _String2="..") returned 0 [0168.930] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0168.930] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0168.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0168.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0168.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3648c0) returned 1 Thread: id = 4050 os_tid = 0x640 [0168.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 0x20 [0168.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.213] GetLastError () returned 0x5 [0168.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0168.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 4051 os_tid = 0x4f0 [0168.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 0x20 [0168.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0168.215] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.215] GetLastError () returned 0x5 [0168.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0168.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 4052 os_tid = 0x8f0 [0168.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs")) returned 0x20 [0173.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0173.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.129] GetLastError () returned 0x5 [0173.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0173.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 4053 os_tid = 0x1740 [0168.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs")) returned 0x20 [0169.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0170.247] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.385] GetLastError () returned 0x5 [0172.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0172.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 4054 os_tid = 0x740 [0168.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs")) returned 0x20 [0173.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0173.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.103] GetLastError () returned 0x5 [0173.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0173.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 4055 os_tid = 0xe24 [0168.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs")) returned 0x20 [0173.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0173.077] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.077] GetLastError () returned 0x5 [0173.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0173.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc3a8) returned 1 Thread: id = 4056 os_tid = 0x9c0 [0168.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs")) returned 0x20 [0173.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0173.128] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.128] GetLastError () returned 0x5 [0173.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0173.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2798) returned 1 Thread: id = 4057 os_tid = 0x9d0 [0168.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs")) returned 0x20 [0173.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0173.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.126] GetLastError () returned 0x5 [0173.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0173.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcc18) returned 1 Thread: id = 4058 os_tid = 0x1778 [0168.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs")) returned 0x20 [0173.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0173.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.125] GetLastError () returned 0x5 [0173.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0173.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc798) returned 1 Thread: id = 4059 os_tid = 0x9e0 [0168.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs")) returned 0x20 [0173.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0173.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.122] GetLastError () returned 0x5 [0173.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0173.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 4060 os_tid = 0x1784 [0168.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs")) returned 0x20 [0173.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0173.121] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.121] GetLastError () returned 0x5 [0173.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0173.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dca68) returned 1 Thread: id = 4061 os_tid = 0xf50 [0168.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs")) returned 0x20 [0173.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0173.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.119] GetLastError () returned 0x5 [0173.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0173.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc1f8) returned 1 Thread: id = 4062 os_tid = 0xa70 [0168.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs")) returned 0x20 [0173.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0173.117] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.118] GetLastError () returned 0x5 [0173.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0173.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 4063 os_tid = 0x1794 [0168.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs")) returned 0x20 [0173.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0173.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.116] GetLastError () returned 0x5 [0173.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0173.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 4064 os_tid = 0x1798 [0168.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs")) returned 0x20 [0173.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0173.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.075] GetLastError () returned 0x5 [0173.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0173.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2408) returned 1 Thread: id = 4065 os_tid = 0x500 [0168.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs")) returned 0x20 [0173.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0173.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.073] GetLastError () returned 0x5 [0173.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0173.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbbc8) returned 1 Thread: id = 4066 os_tid = 0xbd0 [0168.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs")) returned 0x20 [0173.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0173.114] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.114] GetLastError () returned 0x5 [0173.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0173.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abe08) returned 1 Thread: id = 4067 os_tid = 0x17a8 [0168.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs")) returned 0x20 [0173.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0173.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.072] GetLastError () returned 0x5 [0173.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0173.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abe98) returned 1 Thread: id = 4068 os_tid = 0x220 [0168.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs")) returned 0x20 [0173.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0173.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.131] GetLastError () returned 0x5 [0173.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0173.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1eb0) returned 1 Thread: id = 4069 os_tid = 0x248 [0168.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs")) returned 0x20 [0173.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0173.101] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.101] GetLastError () returned 0x5 [0173.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0173.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abf28) returned 1 Thread: id = 4070 os_tid = 0x754 [0168.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs")) returned 0x20 [0173.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0173.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.134] GetLastError () returned 0x5 [0173.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0173.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c22d8) returned 1 Thread: id = 4071 os_tid = 0xe10 [0168.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs")) returned 0x20 [0173.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0173.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.113] GetLastError () returned 0x5 [0173.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0173.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abfb8) returned 1 Thread: id = 4072 os_tid = 0xba8 [0168.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs")) returned 0x20 [0173.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0173.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.111] GetLastError () returned 0x5 [0173.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0173.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac048) returned 1 Thread: id = 4073 os_tid = 0xc08 [0168.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674d3b8 [0168.224] wcscpy (in: _Dest=0x674d3b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0168.224] wcscat (in: _Dest=0x674d3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0168.224] wcscat (in: _Dest=0x674d3b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*" [0168.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0168.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0173.106] wcscmp (_String1=".", _String2=".") returned 0 [0173.106] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.106] wcscmp (_String1="..", _String2=".") returned 1 [0173.106] wcscmp (_String1="..", _String2="..") returned 0 [0173.106] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0173.106] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0173.106] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0173.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e8b8 [0173.106] wcscpy (in: _Dest=0x697e8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0173.106] wcscat (in: _Dest=0x697e8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0173.106] wcscat (in: _Dest=0x697e8b8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" [0173.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0173.107] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0173.107] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0173.107] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0173.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0173.108] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0173.108] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0173.108] wcscat (in: _Dest=0x697e2d0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" [0173.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0173.109] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0173.109] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0173.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0173.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3b8) returned 1 [0173.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 4074 os_tid = 0x17d8 [0168.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs")) returned 0x20 [0173.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0173.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.104] GetLastError () returned 0x5 [0173.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0173.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac0d8) returned 1 Thread: id = 4075 os_tid = 0x17dc [0168.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs")) returned 0x20 [0172.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0172.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.493] GetLastError () returned 0x5 [0172.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0172.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac168) returned 1 Thread: id = 4076 os_tid = 0x17e0 [0168.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs")) returned 0x20 [0173.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0173.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.132] GetLastError () returned 0x5 [0173.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0173.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac1f8) returned 1 Thread: id = 4077 os_tid = 0xddc [0168.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor")) returned 0x20 [0168.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0168.602] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.609] GetLastError () returned 0x5 [0168.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0168.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 4078 os_tid = 0x17e4 [0168.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor")) returned 0x20 [0169.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0169.942] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.943] GetLastError () returned 0x5 [0169.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0169.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 4079 os_tid = 0x6fc [0168.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor")) returned 0x20 [0169.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0169.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.972] GetLastError () returned 0x5 [0169.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0169.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 4080 os_tid = 0x17e8 [0168.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor")) returned 0x20 [0169.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0169.970] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.970] GetLastError () returned 0x5 [0169.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0169.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 4081 os_tid = 0x17ec [0168.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor")) returned 0x20 [0169.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0169.968] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.968] GetLastError () returned 0x5 [0169.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0169.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 4082 os_tid = 0x17f0 [0168.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor")) returned 0x20 [0169.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0169.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.974] GetLastError () returned 0x5 [0169.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0169.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 4083 os_tid = 0x17f4 [0168.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor")) returned 0x20 [0169.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0169.976] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.976] GetLastError () returned 0x5 [0169.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0169.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 4084 os_tid = 0x17fc [0168.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor")) returned 0x20 [0169.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0169.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.979] GetLastError () returned 0x5 [0169.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0169.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 4085 os_tid = 0x22c [0168.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor")) returned 0x20 [0169.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0169.965] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.966] GetLastError () returned 0x5 [0169.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0169.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 Thread: id = 4086 os_tid = 0xe20 [0168.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor")) returned 0x20 [0169.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0169.963] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.964] GetLastError () returned 0x5 [0169.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0169.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac318) returned 1 Thread: id = 4087 os_tid = 0x180 [0168.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor")) returned 0x20 [0169.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0169.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.981] GetLastError () returned 0x5 [0169.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0169.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 4088 os_tid = 0xfdc [0168.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor")) returned 0x20 [0169.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0169.961] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.961] GetLastError () returned 0x5 [0169.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0169.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 4089 os_tid = 0x10c [0168.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor")) returned 0x20 [0169.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0169.959] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.959] GetLastError () returned 0x5 [0169.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0169.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 4090 os_tid = 0xff0 [0168.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor")) returned 0x20 [0169.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0169.957] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.957] GetLastError () returned 0x5 [0169.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0169.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac3a8) returned 1 Thread: id = 4091 os_tid = 0xf88 [0168.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor")) returned 0x20 [0169.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0169.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.983] GetLastError () returned 0x5 [0169.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0169.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac438) returned 1 Thread: id = 4092 os_tid = 0x1310 [0168.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor")) returned 0x20 [0169.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0169.955] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.955] GetLastError () returned 0x5 [0169.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0169.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac4c8) returned 1 Thread: id = 4093 os_tid = 0x132c [0168.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor")) returned 0x20 [0169.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0169.953] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.953] GetLastError () returned 0x5 [0169.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0169.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 4094 os_tid = 0x1330 [0168.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor")) returned 0x20 [0169.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0169.950] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.951] GetLastError () returned 0x5 [0169.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0169.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac558) returned 1 Thread: id = 4095 os_tid = 0x1334 [0168.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor")) returned 0x20 [0169.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0169.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.948] GetLastError () returned 0x5 [0169.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0169.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 4096 os_tid = 0x1340 [0168.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor")) returned 0x20 [0169.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0169.985] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.985] GetLastError () returned 0x5 [0169.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0169.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac5e8) returned 1 Thread: id = 4097 os_tid = 0x1344 [0168.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor")) returned 0x20 [0169.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0169.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.987] GetLastError () returned 0x5 [0169.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0169.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac678) returned 1 Thread: id = 4098 os_tid = 0x1348 [0168.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc8b8 [0168.642] wcscpy (in: _Dest=0x66dc8b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0168.642] wcscat (in: _Dest=0x66dc8b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0168.642] wcscat (in: _Dest=0x66dc8b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*" [0168.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0168.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0169.989] wcscmp (_String1=".", _String2=".") returned 0 [0169.989] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.989] wcscmp (_String1="..", _String2=".") returned 1 [0169.989] wcscmp (_String1="..", _String2="..") returned 0 [0169.989] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0169.989] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0169.990] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0169.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0169.990] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0169.990] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0169.990] wcscat (in: _Dest=0x697e2d0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" [0171.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx")) returned 0x20 [0172.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.012] GetLastError () returned 0x5 [0172.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0172.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 [0172.012] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.012] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.012] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e2d0 [0172.012] wcscpy (in: _Dest=0x697e2d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0172.012] wcscat (in: _Dest=0x697e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0172.012] wcscat (in: _Dest=0x697e2d0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" [0172.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx")) returned 0x20 [0172.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.013] GetLastError () returned 0x5 [0172.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0172.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 [0172.013] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.013] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0172.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0172.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 [0172.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 4099 os_tid = 0x134c [0168.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor")) returned 0x20 [0169.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0169.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.946] GetLastError () returned 0x5 [0169.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0169.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac708) returned 1 Thread: id = 4100 os_tid = 0x1358 [0168.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor")) returned 0x20 [0169.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0169.944] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.945] GetLastError () returned 0x5 [0169.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0169.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac798) returned 1 Thread: id = 4101 os_tid = 0x135c [0168.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor")) returned 0x20 [0169.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0169.924] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.925] GetLastError () returned 0x5 [0169.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0169.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac828) returned 1 Thread: id = 4102 os_tid = 0x1360 [0168.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb")) returned 0x20 [0173.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0173.438] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.842] GetLastError () returned 0x5 [0173.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0173.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 4103 os_tid = 0x1364 [0168.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo")) returned 0x20 [0173.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0173.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.484] GetLastError () returned 0x5 [0173.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0173.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 4104 os_tid = 0x1368 [0168.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve")) returned 0x20 [0173.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0173.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.467] GetLastError () returned 0x5 [0173.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0173.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 4105 os_tid = 0x1370 [0168.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr")) returned 0x20 [0168.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0168.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.659] GetLastError () returned 0x5 [0168.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0168.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 4106 os_tid = 0x137c [0168.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr")) returned 0x20 [0168.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0168.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.679] GetLastError () returned 0x5 [0168.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0168.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 4107 os_tid = 0x1380 [0168.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr")) returned 0x20 [0168.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0168.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.701] GetLastError () returned 0x5 [0168.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0168.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 4108 os_tid = 0x1384 [0168.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr")) returned 0x20 [0169.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0169.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.388] GetLastError () returned 0x5 [0169.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0169.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 4109 os_tid = 0x1388 [0168.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr")) returned 0x20 [0169.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0169.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.391] GetLastError () returned 0x5 [0169.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0169.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 4110 os_tid = 0x138c [0168.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr")) returned 0x20 [0169.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0169.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.393] GetLastError () returned 0x5 [0169.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0169.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 4111 os_tid = 0x1058 [0168.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr")) returned 0x20 [0169.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0169.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.395] GetLastError () returned 0x5 [0169.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0169.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 4112 os_tid = 0x1464 [0168.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr")) returned 0x20 [0169.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0169.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.397] GetLastError () returned 0x5 [0169.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0169.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 4113 os_tid = 0x1470 [0168.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr")) returned 0x20 [0169.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0169.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.399] GetLastError () returned 0x5 [0169.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0169.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ad38) returned 1 Thread: id = 4114 os_tid = 0xb6c [0168.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr")) returned 0x20 [0169.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0169.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.400] GetLastError () returned 0x5 [0169.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0169.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 4115 os_tid = 0xdb4 [0168.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr")) returned 0x20 [0169.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0169.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.402] GetLastError () returned 0x5 [0169.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0169.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 4116 os_tid = 0x154 [0168.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr")) returned 0x20 [0169.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0169.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.404] GetLastError () returned 0x5 [0169.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0169.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c338) returned 1 Thread: id = 4117 os_tid = 0x444 [0168.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr")) returned 0x20 [0169.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0169.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.419] GetLastError () returned 0x5 [0169.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0169.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b038) returned 1 Thread: id = 4118 os_tid = 0xe3c [0168.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr")) returned 0x20 [0168.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0168.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.960] GetLastError () returned 0x5 [0168.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0168.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c7b8) returned 1 Thread: id = 4119 os_tid = 0xf04 [0168.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr")) returned 0x20 [0168.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0168.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.962] GetLastError () returned 0x5 [0168.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0168.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bcb8) returned 1 Thread: id = 4120 os_tid = 0x520 [0168.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt")) returned 0x20 [0168.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT", dwFileAttributes=0x20) returned 0 [0168.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.725] GetLastError () returned 0x5 [0168.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT", dwFileAttributes=0x20) returned 0 [0168.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 4121 os_tid = 0xf28 [0168.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+1")) returned 0x20 [0168.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1", dwFileAttributes=0x20) returned 0 [0168.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.727] GetLastError () returned 0x5 [0168.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1", dwFileAttributes=0x20) returned 0 [0168.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 4122 os_tid = 0x4bc [0168.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+10")) returned 0x20 [0168.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10", dwFileAttributes=0x20) returned 0 [0168.729] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.730] GetLastError () returned 0x5 [0168.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10", dwFileAttributes=0x20) returned 0 [0168.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 4123 os_tid = 0x5d8 [0168.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+11")) returned 0x20 [0170.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11", dwFileAttributes=0x20) returned 0 [0170.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+11"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.520] GetLastError () returned 0x5 [0170.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11", dwFileAttributes=0x20) returned 0 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 4124 os_tid = 0x5d4 [0168.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+12")) returned 0x20 [0170.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12", dwFileAttributes=0x20) returned 0 [0170.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+12"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.544] GetLastError () returned 0x5 [0170.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12", dwFileAttributes=0x20) returned 0 [0170.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 4125 os_tid = 0x1688 [0168.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+2")) returned 0x20 [0170.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2", dwFileAttributes=0x20) returned 0 [0170.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.546] GetLastError () returned 0x5 [0170.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2", dwFileAttributes=0x20) returned 0 [0170.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 4126 os_tid = 0x1690 [0168.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+3")) returned 0x20 [0170.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3", dwFileAttributes=0x20) returned 0 [0170.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.548] GetLastError () returned 0x5 [0170.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3", dwFileAttributes=0x20) returned 0 [0170.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 4127 os_tid = 0x1694 [0168.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+4")) returned 0x20 [0170.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4", dwFileAttributes=0x20) returned 0 [0170.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.550] GetLastError () returned 0x5 [0170.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4", dwFileAttributes=0x20) returned 0 [0170.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1ce8) returned 1 Thread: id = 4128 os_tid = 0x1698 [0168.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+5")) returned 0x20 [0170.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5", dwFileAttributes=0x20) returned 0 [0170.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.552] GetLastError () returned 0x5 [0170.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5", dwFileAttributes=0x20) returned 0 [0170.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 4129 os_tid = 0x11cc [0168.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+6")) returned 0x20 [0170.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6", dwFileAttributes=0x20) returned 0 [0170.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.554] GetLastError () returned 0x5 [0170.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6", dwFileAttributes=0x20) returned 0 [0170.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 Thread: id = 4130 os_tid = 0x11d0 [0168.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+7")) returned 0x20 [0170.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7", dwFileAttributes=0x20) returned 0 [0170.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.522] GetLastError () returned 0x5 [0170.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7", dwFileAttributes=0x20) returned 0 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3ae8) returned 1 Thread: id = 4131 os_tid = 0x11f4 [0168.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+8")) returned 0x20 [0170.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8", dwFileAttributes=0x20) returned 0 [0170.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.524] GetLastError () returned 0x5 [0170.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8", dwFileAttributes=0x20) returned 0 [0170.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 4132 os_tid = 0x1320 [0168.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+9")) returned 0x20 [0170.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9", dwFileAttributes=0x20) returned 0 [0170.526] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.526] GetLastError () returned 0x5 [0170.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9", dwFileAttributes=0x20) returned 0 [0170.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6548) returned 1 Thread: id = 4133 os_tid = 0xe70 [0168.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-1")) returned 0x20 [0170.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1", dwFileAttributes=0x20) returned 0 [0170.528] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.528] GetLastError () returned 0x5 [0170.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1", dwFileAttributes=0x20) returned 0 [0170.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 4134 os_tid = 0xe38 [0168.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-10")) returned 0x20 [0170.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10", dwFileAttributes=0x20) returned 0 [0170.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.530] GetLastError () returned 0x5 [0170.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10", dwFileAttributes=0x20) returned 0 [0170.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 Thread: id = 4135 os_tid = 0xeac [0168.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-11")) returned 0x20 [0170.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11", dwFileAttributes=0x20) returned 0 [0170.532] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-11"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.532] GetLastError () returned 0x5 [0170.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11", dwFileAttributes=0x20) returned 0 [0170.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 4136 os_tid = 0xe00 [0168.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-12")) returned 0x20 [0170.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12", dwFileAttributes=0x20) returned 0 [0170.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-12"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.534] GetLastError () returned 0x5 [0170.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12", dwFileAttributes=0x20) returned 0 [0170.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 4137 os_tid = 0xc48 [0168.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-13")) returned 0x20 [0170.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13", dwFileAttributes=0x20) returned 0 [0170.536] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-13"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.536] GetLastError () returned 0x5 [0170.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13", dwFileAttributes=0x20) returned 0 [0170.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 4138 os_tid = 0xb04 [0168.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-14")) returned 0x20 [0170.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14", dwFileAttributes=0x20) returned 0 [0170.538] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-14"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.538] GetLastError () returned 0x5 [0170.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14", dwFileAttributes=0x20) returned 0 [0170.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 4139 os_tid = 0x150 [0168.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-2")) returned 0x20 [0170.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2", dwFileAttributes=0x20) returned 0 [0170.540] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.540] GetLastError () returned 0x5 [0170.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2", dwFileAttributes=0x20) returned 0 [0170.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 4140 os_tid = 0xd9c [0168.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-3")) returned 0x20 [0170.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3", dwFileAttributes=0x20) returned 0 [0170.542] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.542] GetLastError () returned 0x5 [0170.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3", dwFileAttributes=0x20) returned 0 [0170.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 4141 os_tid = 0x7e4 [0168.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-4")) returned 0x20 [0170.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4", dwFileAttributes=0x20) returned 0 [0170.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.516] GetLastError () returned 0x5 [0170.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4", dwFileAttributes=0x20) returned 0 [0170.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5648) returned 1 Thread: id = 4142 os_tid = 0x11fc [0168.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-5")) returned 0x20 [0170.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5", dwFileAttributes=0x20) returned 0 [0170.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.255] GetLastError () returned 0x5 [0170.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5", dwFileAttributes=0x20) returned 0 [0170.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 4143 os_tid = 0xaf8 [0168.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-6")) returned 0x20 [0170.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6", dwFileAttributes=0x20) returned 0 [0170.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.559] GetLastError () returned 0x5 [0170.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6", dwFileAttributes=0x20) returned 0 [0170.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 4144 os_tid = 0xdd0 [0168.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-7")) returned 0x20 [0170.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7", dwFileAttributes=0x20) returned 0 [0170.556] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.557] GetLastError () returned 0x5 [0170.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7", dwFileAttributes=0x20) returned 0 [0170.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 4145 os_tid = 0x17b8 [0168.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-8")) returned 0x20 [0170.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8", dwFileAttributes=0x20) returned 0 [0170.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.518] GetLastError () returned 0x5 [0170.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8", dwFileAttributes=0x20) returned 0 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 4146 os_tid = 0xc24 [0168.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml")) returned 0x20 [0168.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x20) returned 0 [0168.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.983] GetLastError () returned 0x5 [0168.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x20) returned 0 [0168.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3120) returned 1 Thread: id = 4147 os_tid = 0xac0 [0168.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml")) returned 0x20 [0168.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x20) returned 0 [0168.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.984] GetLastError () returned 0x5 [0168.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x20) returned 0 [0168.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 4148 os_tid = 0x139c [0168.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml")) returned 0x20 [0168.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x20) returned 0 [0168.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.986] GetLastError () returned 0x5 [0168.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x20) returned 0 [0168.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 4149 os_tid = 0x13a0 [0168.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml")) returned 0x20 [0168.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x20) returned 0 [0168.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.988] GetLastError () returned 0x5 [0168.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x20) returned 0 [0168.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d730) returned 1 Thread: id = 4150 os_tid = 0x1408 [0168.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml")) returned 0x20 [0168.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0168.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.989] GetLastError () returned 0x5 [0168.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0168.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 4151 os_tid = 0x1424 [0168.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml")) returned 0x20 [0168.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0168.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.991] GetLastError () returned 0x5 [0168.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0168.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 4152 os_tid = 0xbf8 [0168.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml")) returned 0x20 [0170.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.571] GetLastError () returned 0x5 [0170.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 4153 os_tid = 0x668 [0168.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml")) returned 0x20 [0170.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x20) returned 0 [0170.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.574] GetLastError () returned 0x5 [0170.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x20) returned 0 [0170.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 4154 os_tid = 0xb88 [0168.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml")) returned 0x20 [0170.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0170.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.576] GetLastError () returned 0x5 [0170.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0170.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d0) returned 1 Thread: id = 4155 os_tid = 0x14a4 [0168.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml")) returned 0x20 [0170.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.578] GetLastError () returned 0x5 [0170.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 4156 os_tid = 0x1378 [0168.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml")) returned 0x20 [0170.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x20) returned 0 [0170.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.580] GetLastError () returned 0x5 [0170.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x20) returned 0 [0170.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 4157 os_tid = 0x64c [0168.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml")) returned 0x20 [0170.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.583] GetLastError () returned 0x5 [0170.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 4158 os_tid = 0x530 [0168.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml")) returned 0x20 [0170.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x20) returned 0 [0170.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.585] GetLastError () returned 0x5 [0170.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x20) returned 0 [0170.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 4159 os_tid = 0x1804 [0168.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml")) returned 0x20 [0170.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x20) returned 0 [0170.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.569] GetLastError () returned 0x5 [0170.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x20) returned 0 [0170.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 4160 os_tid = 0x1808 [0168.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml")) returned 0x20 [0170.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x20) returned 0 [0170.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.587] GetLastError () returned 0x5 [0170.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x20) returned 0 [0170.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 4161 os_tid = 0x180c [0169.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml")) returned 0x20 [0170.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x20) returned 0 [0170.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.589] GetLastError () returned 0x5 [0170.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x20) returned 0 [0170.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 4162 os_tid = 0x1810 [0169.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml")) returned 0x20 [0170.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x20) returned 0 [0170.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.591] GetLastError () returned 0x5 [0170.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x20) returned 0 [0170.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 4163 os_tid = 0x1814 [0169.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml")) returned 0x20 [0170.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x20) returned 0 [0170.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.596] GetLastError () returned 0x5 [0170.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x20) returned 0 [0170.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 4164 os_tid = 0x1818 [0169.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml")) returned 0x20 [0170.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x20) returned 0 [0170.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.598] GetLastError () returned 0x5 [0170.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x20) returned 0 [0170.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 4165 os_tid = 0x181c [0169.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml")) returned 0x20 [0170.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x20) returned 0 [0170.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.568] GetLastError () returned 0x5 [0170.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x20) returned 0 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 4166 os_tid = 0x1820 [0169.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml")) returned 0x20 [0170.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x20) returned 0 [0170.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.565] GetLastError () returned 0x5 [0170.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x20) returned 0 [0170.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 Thread: id = 4167 os_tid = 0x1824 [0169.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml")) returned 0x20 [0170.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x20) returned 0 [0170.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.263] GetLastError () returned 0x5 [0170.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x20) returned 0 [0170.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 4168 os_tid = 0x1828 [0169.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml")) returned 0x20 [0170.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x20) returned 0 [0170.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.561] GetLastError () returned 0x5 [0170.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x20) returned 0 [0170.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 4169 os_tid = 0x182c [0169.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml")) returned 0x20 [0170.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x20) returned 0 [0170.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.563] GetLastError () returned 0x5 [0170.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x20) returned 0 [0170.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5e0) returned 1 Thread: id = 4170 os_tid = 0x1830 [0169.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf")) returned 0x20 [0169.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0169.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.427] GetLastError () returned 0x5 [0169.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0169.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 4171 os_tid = 0x1834 [0169.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties")) returned 0x20 [0169.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0169.428] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.428] GetLastError () returned 0x5 [0169.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0169.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355050) returned 1 Thread: id = 4172 os_tid = 0x1838 [0169.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb")) returned 0x20 [0169.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0169.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.431] GetLastError () returned 0x5 [0169.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0169.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 4173 os_tid = 0x183c [0169.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg")) returned 0x20 [0169.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0169.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.433] GetLastError () returned 0x5 [0169.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0169.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 4174 os_tid = 0x1840 [0169.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg")) returned 0x20 [0169.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0169.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.435] GetLastError () returned 0x5 [0169.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0169.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac8b8) returned 1 Thread: id = 4175 os_tid = 0x1844 [0169.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg")) returned 0x20 [0169.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0169.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.477] GetLastError () returned 0x5 [0169.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0169.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac948) returned 1 Thread: id = 4176 os_tid = 0x1848 [0169.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg")) returned 0x20 [0169.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0169.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.480] GetLastError () returned 0x5 [0169.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0169.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac9d8) returned 1 Thread: id = 4177 os_tid = 0x184c [0169.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg")) returned 0x20 [0170.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0170.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.789] GetLastError () returned 0x5 [0170.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0170.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aca68) returned 1 Thread: id = 4178 os_tid = 0x1854 [0169.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg")) returned 0x20 [0170.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0170.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.788] GetLastError () returned 0x5 [0170.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0170.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acaf8) returned 1 Thread: id = 4179 os_tid = 0x1858 [0169.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg")) returned 0x20 [0170.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0170.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.967] GetLastError () returned 0x5 [0170.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0170.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 4180 os_tid = 0x185c [0169.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg")) returned 0x20 [0170.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0170.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.965] GetLastError () returned 0x5 [0170.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0170.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acb88) returned 1 Thread: id = 4181 os_tid = 0x1860 [0169.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg")) returned 0x20 [0170.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0170.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.964] GetLastError () returned 0x5 [0170.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0170.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acc18) returned 1 Thread: id = 4182 os_tid = 0x1864 [0169.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg")) returned 0x20 [0170.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0170.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.962] GetLastError () returned 0x5 [0170.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0170.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 4183 os_tid = 0x1868 [0169.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg")) returned 0x20 [0170.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0170.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.960] GetLastError () returned 0x5 [0170.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0170.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acca8) returned 1 Thread: id = 4184 os_tid = 0x186c [0169.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg")) returned 0x20 [0170.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0170.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.958] GetLastError () returned 0x5 [0170.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0170.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acd38) returned 1 Thread: id = 4185 os_tid = 0x1870 [0169.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg")) returned 0x20 [0170.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0170.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.957] GetLastError () returned 0x5 [0170.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0170.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acdc8) returned 1 Thread: id = 4186 os_tid = 0x1874 [0169.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg")) returned 0x20 [0170.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0170.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.791] GetLastError () returned 0x5 [0170.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0170.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ace58) returned 1 Thread: id = 4187 os_tid = 0x1878 [0169.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak")) returned 0x20 [0169.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0169.491] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.491] GetLastError () returned 0x5 [0169.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0169.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 4188 os_tid = 0x187c [0169.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage")) returned 0x20 [0169.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0169.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.494] GetLastError () returned 0x5 [0169.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0169.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f235a0) returned 1 Thread: id = 4189 os_tid = 0x1880 [0169.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla")) returned 0x20 [0169.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0169.499] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.499] GetLastError () returned 0x5 [0169.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0169.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23df0) returned 1 Thread: id = 4190 os_tid = 0x1884 [0169.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua")) returned 0x20 [0169.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0169.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.501] GetLastError () returned 0x5 [0169.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0169.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23b50) returned 1 Thread: id = 4191 os_tid = 0x1888 [0169.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina")) returned 0x20 [0169.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0169.505] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.505] GetLastError () returned 0x5 [0169.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0169.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23300) returned 1 Thread: id = 4192 os_tid = 0x188c [0169.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x66d00d8 [0169.506] wcscpy (in: _Dest=0x66d00d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0169.507] wcscat (in: _Dest=0x66d00d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0169.507] wcscat (in: _Dest=0x66d00d8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*" [0169.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0169.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0170.049] wcscmp (_String1=".", _String2=".") returned 0 [0170.049] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.049] wcscmp (_String1="..", _String2=".") returned 1 [0170.049] wcscmp (_String1="..", _String2="..") returned 0 [0170.049] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="BUENOS~1")) returned 1 [0170.049] wcscmp (_String1="Buenos_Aires", _String2=".") returned 1 [0170.049] wcscmp (_String1="Buenos_Aires", _String2="..") returned 1 [0170.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac678 [0170.050] wcscpy (in: _Dest=0x68ac678, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0170.050] wcscat (in: _Dest=0x68ac678, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0170.050] wcscat (in: _Dest=0x68ac678, _Source="Buenos_Aires" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" [0171.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires")) returned 0x20 [0171.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0171.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.986] GetLastError () returned 0x5 [0171.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0171.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac678) returned 1 [0171.986] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catamarca", cAlternateFileName="CATAMA~1")) returned 1 [0171.986] wcscmp (_String1="Catamarca", _String2=".") returned 1 [0171.986] wcscmp (_String1="Catamarca", _String2="..") returned 1 [0171.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682bce8 [0171.986] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.986] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.986] wcscat (in: _Dest=0x682bce8, _Source="Catamarca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" [0171.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca")) returned 0x20 [0171.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0171.987] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.987] GetLastError () returned 0x5 [0171.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0171.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.987] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cordoba", cAlternateFileName="")) returned 1 [0171.987] wcscmp (_String1="Cordoba", _String2=".") returned 1 [0171.987] wcscmp (_String1="Cordoba", _String2="..") returned 1 [0171.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.987] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.987] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.987] wcscat (in: _Dest=0x674c838, _Source="Cordoba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" [0171.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba")) returned 0x20 [0171.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0171.988] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.988] GetLastError () returned 0x5 [0171.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0171.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.988] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jujuy", cAlternateFileName="")) returned 1 [0171.988] wcscmp (_String1="Jujuy", _String2=".") returned 1 [0171.988] wcscmp (_String1="Jujuy", _String2="..") returned 1 [0171.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c838 [0171.989] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.989] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.989] wcscat (in: _Dest=0x674c838, _Source="Jujuy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" [0171.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy")) returned 0x20 [0171.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0171.989] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.989] GetLastError () returned 0x5 [0171.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.989] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Rioja", cAlternateFileName="")) returned 1 [0171.989] wcscmp (_String1="La_Rioja", _String2=".") returned 1 [0171.990] wcscmp (_String1="La_Rioja", _String2="..") returned 1 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bce8 [0171.990] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.990] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.990] wcscat (in: _Dest=0x682bce8, _Source="La_Rioja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" [0171.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja")) returned 0x20 [0171.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0171.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.990] GetLastError () returned 0x5 [0171.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0171.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.991] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mendoza", cAlternateFileName="")) returned 1 [0171.991] wcscmp (_String1="Mendoza", _String2=".") returned 1 [0171.991] wcscmp (_String1="Mendoza", _String2="..") returned 1 [0171.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.991] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.991] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.991] wcscat (in: _Dest=0x674c838, _Source="Mendoza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" [0171.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza")) returned 0x20 [0171.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0171.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.992] GetLastError () returned 0x5 [0171.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0171.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.992] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Gallegos", cAlternateFileName="RIO_GA~1")) returned 1 [0171.992] wcscmp (_String1="Rio_Gallegos", _String2=".") returned 1 [0171.992] wcscmp (_String1="Rio_Gallegos", _String2="..") returned 1 [0171.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x68ac678 [0171.992] wcscpy (in: _Dest=0x68ac678, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.992] wcscat (in: _Dest=0x68ac678, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.992] wcscat (in: _Dest=0x68ac678, _Source="Rio_Gallegos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" [0171.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos")) returned 0x20 [0171.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0171.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.993] GetLastError () returned 0x5 [0171.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0171.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac678) returned 1 [0171.993] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Salta", cAlternateFileName="")) returned 1 [0171.993] wcscmp (_String1="Salta", _String2=".") returned 1 [0171.993] wcscmp (_String1="Salta", _String2="..") returned 1 [0171.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x674c838 [0171.993] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.993] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.993] wcscat (in: _Dest=0x674c838, _Source="Salta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" [0171.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta")) returned 0x20 [0171.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0171.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.994] GetLastError () returned 0x5 [0171.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0171.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.994] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Juan", cAlternateFileName="")) returned 1 [0171.994] wcscmp (_String1="San_Juan", _String2=".") returned 1 [0171.994] wcscmp (_String1="San_Juan", _String2="..") returned 1 [0171.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bce8 [0171.994] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.994] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.994] wcscat (in: _Dest=0x682bce8, _Source="San_Juan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" [0171.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan")) returned 0x20 [0171.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0171.994] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.995] GetLastError () returned 0x5 [0171.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0171.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.995] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Luis", cAlternateFileName="")) returned 1 [0171.995] wcscmp (_String1="San_Luis", _String2=".") returned 1 [0171.995] wcscmp (_String1="San_Luis", _String2="..") returned 1 [0171.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x682bce8 [0171.995] wcscpy (in: _Dest=0x682bce8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.995] wcscat (in: _Dest=0x682bce8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.995] wcscat (in: _Dest=0x682bce8, _Source="San_Luis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" [0171.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis")) returned 0x20 [0171.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0171.995] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.996] GetLastError () returned 0x5 [0171.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0171.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 [0171.996] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tucuman", cAlternateFileName="")) returned 1 [0171.996] wcscmp (_String1="Tucuman", _String2=".") returned 1 [0171.996] wcscmp (_String1="Tucuman", _String2="..") returned 1 [0171.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.996] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.996] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.996] wcscat (in: _Dest=0x674c838, _Source="Tucuman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" [0171.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman")) returned 0x20 [0171.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0171.996] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.997] GetLastError () returned 0x5 [0171.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0171.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.997] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 1 [0171.997] wcscmp (_String1="Ushuaia", _String2=".") returned 1 [0171.997] wcscmp (_String1="Ushuaia", _String2="..") returned 1 [0171.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x674c838 [0171.997] wcscpy (in: _Dest=0x674c838, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0171.997] wcscat (in: _Dest=0x674c838, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0171.997] wcscat (in: _Dest=0x674c838, _Source="Ushuaia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" [0171.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia")) returned 0x20 [0171.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0171.997] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.997] GetLastError () returned 0x5 [0171.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0171.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c838) returned 1 [0171.998] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 0 [0171.998] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0171.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0171.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0171.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d10) returned 1 Thread: id = 4193 os_tid = 0x1890 [0169.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba")) returned 0x20 [0169.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0169.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.510] GetLastError () returned 0x5 [0169.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0169.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 4194 os_tid = 0x1894 [0169.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion")) returned 0x20 [0169.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0169.511] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.511] GetLastError () returned 0x5 [0169.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0169.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23920) returned 1 Thread: id = 4195 os_tid = 0x1898 [0169.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan")) returned 0x20 [0169.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0169.513] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.513] GetLastError () returned 0x5 [0169.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0169.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23d80) returned 1 Thread: id = 4196 os_tid = 0x189c [0169.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia")) returned 0x20 [0169.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0169.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.526] GetLastError () returned 0x5 [0169.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0169.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 Thread: id = 4197 os_tid = 0x18a0 [0169.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas")) returned 0x20 [0169.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0169.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.529] GetLastError () returned 0x5 [0169.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0169.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bcb8) returned 1 Thread: id = 4198 os_tid = 0x18a4 [0169.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados")) returned 0x20 [0169.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0169.531] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.531] GetLastError () returned 0x5 [0169.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0169.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23bc0) returned 1 Thread: id = 4199 os_tid = 0x18a8 [0169.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem")) returned 0x20 [0169.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0169.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.533] GetLastError () returned 0x5 [0169.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0169.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 4200 os_tid = 0x18ac [0169.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize")) returned 0x20 [0169.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0169.536] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.536] GetLastError () returned 0x5 [0169.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0169.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c30) returned 1 Thread: id = 4201 os_tid = 0x18b0 [0169.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon")) returned 0x20 [0169.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0169.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.539] GetLastError () returned 0x5 [0169.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0169.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 Thread: id = 4202 os_tid = 0x18b4 [0169.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista")) returned 0x20 [0169.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0169.541] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.541] GetLastError () returned 0x5 [0169.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0169.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a00) returned 1 Thread: id = 4203 os_tid = 0x18b8 [0169.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota")) returned 0x20 [0169.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0169.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.544] GetLastError () returned 0x5 [0169.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0169.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23840) returned 1 Thread: id = 4204 os_tid = 0x18bc [0169.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise")) returned 0x20 [0169.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0169.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.547] GetLastError () returned 0x5 [0169.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0169.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 4205 os_tid = 0x18c0 [0169.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay")) returned 0x20 [0169.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0169.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.549] GetLastError () returned 0x5 [0169.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0169.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 Thread: id = 4206 os_tid = 0x18c4 [0169.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande")) returned 0x20 [0169.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0169.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.552] GetLastError () returned 0x5 [0169.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0169.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 Thread: id = 4207 os_tid = 0x18c8 [0169.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun")) returned 0x20 [0169.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0169.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.554] GetLastError () returned 0x5 [0169.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0169.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f233e0) returned 1 Thread: id = 4208 os_tid = 0x18cc [0169.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas")) returned 0x20 [0169.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0169.557] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.557] GetLastError () returned 0x5 [0169.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0169.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23530) returned 1 Thread: id = 4209 os_tid = 0x18d0 [0169.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne")) returned 0x20 [0169.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0169.559] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.559] GetLastError () returned 0x5 [0169.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0169.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f234c0) returned 1 Thread: id = 4210 os_tid = 0x18d4 [0169.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayman")) returned 0x20 [0169.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman", dwFileAttributes=0x20) returned 0 [0169.561] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.561] GetLastError () returned 0x5 [0169.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman", dwFileAttributes=0x20) returned 0 [0169.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ae0) returned 1 Thread: id = 4211 os_tid = 0x18d8 [0169.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chicago")) returned 0x20 [0169.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago", dwFileAttributes=0x20) returned 0 [0169.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chicago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.564] GetLastError () returned 0x5 [0169.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago", dwFileAttributes=0x20) returned 0 [0169.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23760) returned 1 Thread: id = 4212 os_tid = 0x18dc [0169.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chihuahua")) returned 0x20 [0169.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua", dwFileAttributes=0x20) returned 0 [0169.566] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chihuahua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.566] GetLastError () returned 0x5 [0169.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua", dwFileAttributes=0x20) returned 0 [0169.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 Thread: id = 4213 os_tid = 0x18e0 [0169.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\costa_rica")) returned 0x20 [0169.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica", dwFileAttributes=0x20) returned 0 [0169.570] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\costa_rica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.570] GetLastError () returned 0x5 [0169.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica", dwFileAttributes=0x20) returned 0 [0169.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 Thread: id = 4214 os_tid = 0x18e4 [0169.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\creston")) returned 0x20 [0169.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston", dwFileAttributes=0x20) returned 0 [0169.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\creston"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.573] GetLastError () returned 0x5 [0169.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston", dwFileAttributes=0x20) returned 0 [0169.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23290) returned 1 Thread: id = 4215 os_tid = 0x18e8 [0169.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cuiaba")) returned 0x20 [0169.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba", dwFileAttributes=0x20) returned 0 [0169.575] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cuiaba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.575] GetLastError () returned 0x5 [0169.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba", dwFileAttributes=0x20) returned 0 [0169.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ea0) returned 1 Thread: id = 4216 os_tid = 0x18ec [0169.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\curacao")) returned 0x20 [0169.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao", dwFileAttributes=0x20) returned 0 [0169.577] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\curacao"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.578] GetLastError () returned 0x5 [0169.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao", dwFileAttributes=0x20) returned 0 [0169.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22f10) returned 1 Thread: id = 4217 os_tid = 0x18f0 [0169.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\danmarkshavn")) returned 0x20 [0169.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn", dwFileAttributes=0x20) returned 0 [0169.579] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\danmarkshavn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.579] GetLastError () returned 0x5 [0169.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn", dwFileAttributes=0x20) returned 0 [0169.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 4218 os_tid = 0x18f4 [0170.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson")) returned 0x20 [0170.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson", dwFileAttributes=0x20) returned 0 [0170.052] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.052] GetLastError () returned 0x5 [0170.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson", dwFileAttributes=0x20) returned 0 [0170.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ff0) returned 1 Thread: id = 4219 os_tid = 0x1080 [0170.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls")) returned 0x20 [0170.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0170.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.055] GetLastError () returned 0x5 [0170.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0170.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 4220 os_tid = 0x1084 [0170.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala")) returned 0x20 [0170.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0170.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.059] GetLastError () returned 0x5 [0170.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0170.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e56b8) returned 1 Thread: id = 4221 os_tid = 0x1088 [0170.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum")) returned 0x20 [0173.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0173.180] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.180] GetLastError () returned 0x5 [0173.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0173.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 Thread: id = 4222 os_tid = 0x108c [0170.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali")) returned 0x20 [0173.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0173.181] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.181] GetLastError () returned 0x5 [0173.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0173.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 4223 os_tid = 0x25c [0170.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa")) returned 0x20 [0173.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0173.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.183] GetLastError () returned 0x5 [0173.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0173.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 4224 os_tid = 0x1090 [0170.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos")) returned 0x20 [0173.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0173.184] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.184] GetLastError () returned 0x5 [0173.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0173.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 4225 os_tid = 0x1094 [0170.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville")) returned 0x20 [0173.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0173.186] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.186] GetLastError () returned 0x5 [0173.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0173.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 4226 os_tid = 0x109c [0170.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome")) returned 0x20 [0173.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0173.188] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.188] GetLastError () returned 0x5 [0173.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0173.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 Thread: id = 4227 os_tid = 0x10f0 [0170.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda")) returned 0x20 [0173.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0173.189] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.189] GetLastError () returned 0x5 [0173.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0173.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 4228 os_tid = 0x81c [0170.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi")) returned 0x20 [0172.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0172.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.525] GetLastError () returned 0x5 [0172.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0172.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 Thread: id = 4229 os_tid = 0xa20 [0170.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka")) returned 0x20 [0171.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0171.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.454] GetLastError () returned 0x5 [0173.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0173.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 4230 os_tid = 0x20c [0170.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo")) returned 0x20 [0173.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0173.172] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.172] GetLastError () returned 0x5 [0173.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0173.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 4231 os_tid = 0xee8 [0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo")) returned 0x20 [0173.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0173.169] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.170] GetLastError () returned 0x5 [0173.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0173.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 4232 os_tid = 0xe6c [0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru")) returned 0x20 [0173.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0173.178] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.178] GetLastError () returned 0x5 [0173.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0173.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 4233 os_tid = 0x10d0 [0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane")) returned 0x20 [0173.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0173.176] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.177] GetLastError () returned 0x5 [0173.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 4234 os_tid = 0xa8c [0170.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu")) returned 0x20 [0173.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0173.175] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.175] GetLastError () returned 0x5 [0173.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0173.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 4235 os_tid = 0xa50 [0170.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia")) returned 0x20 [0173.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0173.173] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.173] GetLastError () returned 0x5 [0173.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0173.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 4236 os_tid = 0xe68 [0170.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi")) returned 0x20 [0173.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0173.168] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.168] GetLastError () returned 0x5 [0173.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0173.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 4237 os_tid = 0xf60 [0170.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena")) returned 0x20 [0173.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0173.166] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.166] GetLastError () returned 0x5 [0173.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0173.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 Thread: id = 4238 os_tid = 0x10d4 [0170.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey")) returned 0x20 [0173.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0173.165] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.165] GetLastError () returned 0x5 [0173.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0173.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 4239 os_tid = 0x6f0 [0170.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott")) returned 0x20 [0173.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0173.163] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.163] GetLastError () returned 0x5 [0173.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0173.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ed0) returned 1 Thread: id = 4240 os_tid = 0xf64 [0170.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou")) returned 0x20 [0173.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0173.162] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.162] GetLastError () returned 0x5 [0173.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0173.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 Thread: id = 4241 os_tid = 0x1144 [0170.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo")) returned 0x20 [0173.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0173.159] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.159] GetLastError () returned 0x5 [0173.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0173.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 Thread: id = 4242 os_tid = 0x11c [0170.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome")) returned 0x20 [0173.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0173.142] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.142] GetLastError () returned 0x5 [0173.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0173.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29790) returned 1 Thread: id = 4243 os_tid = 0xf68 [0170.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli")) returned 0x20 [0173.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0173.140] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.140] GetLastError () returned 0x5 [0173.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0173.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29800) returned 1 Thread: id = 4244 os_tid = 0xef4 [0170.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis")) returned 0x20 [0173.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0173.138] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.138] GetLastError () returned 0x5 [0173.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0173.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 4245 os_tid = 0x9b0 [0170.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek")) returned 0x20 [0173.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0173.160] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.160] GetLastError () returned 0x5 [0173.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0173.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 Thread: id = 4246 os_tid = 0x1618 [0170.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy")) returned 0x20 [0170.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0170.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.084] GetLastError () returned 0x5 [0170.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0170.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3def900) returned 1 Thread: id = 4247 os_tid = 0x1670 [0170.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy")) returned 0x20 [0170.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0170.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.087] GetLastError () returned 0x5 [0170.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0170.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 4248 os_tid = 0x1444 [0170.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy")) returned 0x20 [0170.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0170.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.098] GetLastError () returned 0x5 [0170.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0170.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 4249 os_tid = 0x1448 [0170.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun")) returned 0x20 [0170.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0170.101] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.101] GetLastError () returned 0x5 [0170.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0170.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dbc8) returned 1 Thread: id = 4250 os_tid = 0x144c [0170.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun")) returned 0x20 [0170.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0170.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.103] GetLastError () returned 0x5 [0170.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0170.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 4251 os_tid = 0x12e8 [0170.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun")) returned 0x20 [0170.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0170.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.105] GetLastError () returned 0x5 [0170.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0170.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 4252 os_tid = 0x1584 [0170.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun")) returned 0x20 [0170.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0170.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.108] GetLastError () returned 0x5 [0170.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0170.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 4253 os_tid = 0x1588 [0170.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey")) returned 0x20 [0170.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0170.112] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.112] GetLastError () returned 0x5 [0170.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0170.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29170) returned 1 Thread: id = 4254 os_tid = 0x158c [0170.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis")) returned 0x20 [0170.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0170.115] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.115] GetLastError () returned 0x5 [0170.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0170.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29870) returned 1 Thread: id = 4255 os_tid = 0x1590 [0170.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville")) returned 0x20 [0170.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0170.611] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.611] GetLastError () returned 0x5 [0170.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0170.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bcb8) returned 1 Thread: id = 4256 os_tid = 0x1594 [0170.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie")) returned 0x20 [0170.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0170.613] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.613] GetLastError () returned 0x5 [0170.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0170.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 Thread: id = 4257 os_tid = 0x738 [0170.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson")) returned 0x20 [0170.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0170.615] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.615] GetLastError () returned 0x5 [0170.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0170.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 4258 os_tid = 0xe34 [0170.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo")) returned 0x20 [0170.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0170.617] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.617] GetLastError () returned 0x5 [0170.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0170.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 Thread: id = 4259 os_tid = 0x15b4 [0170.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer")) returned 0x20 [0170.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0170.618] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.619] GetLastError () returned 0x5 [0170.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0170.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 4260 os_tid = 0xfec [0170.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera")) returned 0x20 [0170.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0170.620] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.621] GetLastError () returned 0x5 [0170.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0170.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 Thread: id = 4261 os_tid = 0xc14 [0170.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa")) returned 0x20 [0170.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0170.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.274] GetLastError () returned 0x5 [0170.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0170.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 4262 os_tid = 0xb40 [0170.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok")) returned 0x20 [0170.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0170.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.276] GetLastError () returned 0x5 [0170.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0170.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 4263 os_tid = 0x888 [0170.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia")) returned 0x20 [0170.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0170.129] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.130] GetLastError () returned 0x5 [0170.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0170.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 Thread: id = 4264 os_tid = 0x8d8 [0170.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland")) returned 0x20 [0170.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0170.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.132] GetLastError () returned 0x5 [0170.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0170.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 4265 os_tid = 0x8d4 [0170.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham")) returned 0x20 [0172.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0172.431] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.431] GetLastError () returned 0x5 [0172.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0172.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 Thread: id = 4266 os_tid = 0x8e0 [0170.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk")) returned 0x20 [0172.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0172.433] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.433] GetLastError () returned 0x5 [0172.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0172.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 4267 os_tid = 0xe50 [0170.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter")) returned 0x20 [0172.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0172.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.387] GetLastError () returned 0x5 [0172.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0172.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 4268 os_tid = 0x9b4 [0170.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate")) returned 0x20 [0172.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0172.398] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.398] GetLastError () returned 0x5 [0172.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0172.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 4269 os_tid = 0xb2c [0170.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury")) returned 0x20 [0172.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0172.429] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.429] GetLastError () returned 0x5 [0172.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0172.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 4270 os_tid = 0xb20 [0170.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo")) returned 0x20 [0172.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0172.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.397] GetLastError () returned 0x5 [0172.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0172.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b6d0) returned 1 Thread: id = 4271 os_tid = 0xac4 [0170.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji")) returned 0x20 [0172.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0172.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.395] GetLastError () returned 0x5 [0172.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0172.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 4272 os_tid = 0xabc [0170.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti")) returned 0x20 [0172.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0172.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.393] GetLastError () returned 0x5 [0172.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0172.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b3c0) returned 1 Thread: id = 4273 os_tid = 0xfac [0170.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos")) returned 0x20 [0172.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0172.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.427] GetLastError () returned 0x5 [0172.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0172.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae80) returned 1 Thread: id = 4274 os_tid = 0x240 [0170.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier")) returned 0x20 [0172.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0172.426] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.426] GetLastError () returned 0x5 [0172.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0172.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b740) returned 1 Thread: id = 4275 os_tid = 0x13fc [0170.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal")) returned 0x20 [0172.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0172.424] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.424] GetLastError () returned 0x5 [0172.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0172.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 Thread: id = 4276 os_tid = 0x15d8 [0170.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam")) returned 0x20 [0172.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0172.422] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.422] GetLastError () returned 0x5 [0172.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0172.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 4277 os_tid = 0x16a0 [0170.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu")) returned 0x20 [0172.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0172.391] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.392] GetLastError () returned 0x5 [0172.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0172.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b4a0) returned 1 Thread: id = 4278 os_tid = 0x16a4 [0170.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston")) returned 0x20 [0172.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0172.390] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.390] GetLastError () returned 0x5 [0172.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0172.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b200) returned 1 Thread: id = 4279 os_tid = 0x308 [0170.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati")) returned 0x20 [0172.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0172.420] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.420] GetLastError () returned 0x5 [0172.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0172.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 Thread: id = 4280 os_tid = 0x75c [0170.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae")) returned 0x20 [0172.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0172.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.418] GetLastError () returned 0x5 [0172.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0172.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b820) returned 1 Thread: id = 4281 os_tid = 0x7e8 [0170.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein")) returned 0x20 [0172.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0172.416] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.417] GetLastError () returned 0x5 [0172.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0172.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b580) returned 1 Thread: id = 4282 os_tid = 0xec8 [0170.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro")) returned 0x20 [0172.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0172.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.415] GetLastError () returned 0x5 [0172.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0172.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b7b0) returned 1 Thread: id = 4283 os_tid = 0xf4c [0170.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas")) returned 0x20 [0172.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0172.413] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.413] GetLastError () returned 0x5 [0172.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0172.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ae10) returned 1 Thread: id = 4284 os_tid = 0x2004 [0170.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway")) returned 0x20 [0172.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0172.411] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.411] GetLastError () returned 0x5 [0172.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0172.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22f10) returned 1 Thread: id = 4285 os_tid = 0x2008 [0170.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru")) returned 0x20 [0172.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0172.409] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.410] GetLastError () returned 0x5 [0172.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0172.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 Thread: id = 4286 os_tid = 0x200c [0170.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue")) returned 0x20 [0172.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0172.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.408] GetLastError () returned 0x5 [0172.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0172.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 4287 os_tid = 0x2010 [0170.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk")) returned 0x20 [0172.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0172.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.407] GetLastError () returned 0x5 [0172.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0172.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ea0) returned 1 Thread: id = 4288 os_tid = 0x2014 [0170.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea")) returned 0x20 [0172.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0172.388] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.388] GetLastError () returned 0x5 [0172.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0172.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23290) returned 1 Thread: id = 4289 os_tid = 0x2018 [0170.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago")) returned 0x20 [0171.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0171.707] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.707] GetLastError () returned 0x5 [0171.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0171.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 Thread: id = 4290 os_tid = 0x201c [0170.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau")) returned 0x20 [0172.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0172.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.405] GetLastError () returned 0x5 [0172.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0172.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 4291 os_tid = 0x2020 [0170.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn")) returned 0x20 [0172.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0172.403] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.403] GetLastError () returned 0x5 [0172.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0172.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23760) returned 1 Thread: id = 4292 os_tid = 0x2024 [0170.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei")) returned 0x20 [0172.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0172.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.402] GetLastError () returned 0x5 [0172.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0172.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ae0) returned 1 Thread: id = 4293 os_tid = 0x2028 [0170.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby")) returned 0x20 [0172.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0172.400] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.400] GetLastError () returned 0x5 [0172.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0172.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 Thread: id = 4294 os_tid = 0x202c [0170.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga")) returned 0x20 [0170.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0170.955] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.955] GetLastError () returned 0x5 [0170.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0170.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f234c0) returned 1 Thread: id = 4296 os_tid = 0x2038 [0170.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp")) returned 0x20 [0173.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0173.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.700] GetLastError () returned 0x5 [0173.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0173.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 4297 os_tid = 0x203c [0170.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp")) returned 0x20 [0173.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0173.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.372] GetLastError () returned 0x5 [0173.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0173.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac5e8) returned 1 Thread: id = 4298 os_tid = 0x2040 [0170.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp")) returned 0x20 [0173.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0173.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.702] GetLastError () returned 0x5 [0173.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0173.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 4299 os_tid = 0x2044 [0170.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp")) returned 0x20 [0173.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0173.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.698] GetLastError () returned 0x5 [0173.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0173.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac438) returned 1 Thread: id = 4300 os_tid = 0x2048 [0170.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp")) returned 0x20 [0173.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0173.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.681] GetLastError () returned 0x5 [0173.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0173.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 4301 os_tid = 0x204c [0170.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp")) returned 0x20 [0173.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0173.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.687] GetLastError () returned 0x5 [0173.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0173.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac318) returned 1 Thread: id = 4302 os_tid = 0x2050 [0170.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp")) returned 0x20 [0173.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0173.679] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.679] GetLastError () returned 0x5 [0173.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0173.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac3a8) returned 1 Thread: id = 4303 os_tid = 0x2054 [0170.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp")) returned 0x20 [0173.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0173.685] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.685] GetLastError () returned 0x5 [0173.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0173.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 4304 os_tid = 0x2058 [0170.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp")) returned 0x20 [0173.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0173.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.677] GetLastError () returned 0x5 [0173.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0173.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac4c8) returned 1 Thread: id = 4305 os_tid = 0x205c [0170.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp")) returned 0x20 [0173.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0173.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.696] GetLastError () returned 0x5 [0173.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0173.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac558) returned 1 Thread: id = 4306 os_tid = 0x2060 [0170.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp")) returned 0x20 [0173.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0173.675] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.675] GetLastError () returned 0x5 [0173.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0173.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 4307 os_tid = 0x2064 [0170.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp")) returned 0x20 [0173.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0173.672] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.673] GetLastError () returned 0x5 [0173.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0173.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 4308 os_tid = 0x2068 [0170.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp")) returned 0x20 [0173.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0173.670] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.670] GetLastError () returned 0x5 [0173.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0173.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 4309 os_tid = 0x206c [0170.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp")) returned 0x20 [0173.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0173.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.694] GetLastError () returned 0x5 [0173.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0173.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac708) returned 1 Thread: id = 4310 os_tid = 0x2070 [0170.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp")) returned 0x20 [0173.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0173.667] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.667] GetLastError () returned 0x5 [0173.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0173.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac798) returned 1 Thread: id = 4311 os_tid = 0x2074 [0170.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp")) returned 0x20 [0173.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0173.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.665] GetLastError () returned 0x5 [0173.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0173.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac828) returned 1 Thread: id = 4312 os_tid = 0x2078 [0170.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp")) returned 0x20 [0173.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0173.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.444] GetLastError () returned 0x5 [0173.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0173.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 4313 os_tid = 0x207c [0170.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp")) returned 0x20 [0173.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0173.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.704] GetLastError () returned 0x5 [0173.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0173.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac9d8) returned 1 Thread: id = 4314 os_tid = 0x2080 [0170.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp")) returned 0x20 [0172.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0172.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.095] GetLastError () returned 0x5 [0173.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0173.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 4315 os_tid = 0x2084 [0170.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp")) returned 0x20 [0173.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0173.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.692] GetLastError () returned 0x5 [0173.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0173.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac948) returned 1 Thread: id = 4316 os_tid = 0x2088 [0170.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp")) returned 0x20 [0173.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0173.689] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.690] GetLastError () returned 0x5 [0173.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0173.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac8b8) returned 1 Thread: id = 4317 os_tid = 0x208c [0170.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x68acee8 [0170.290] wcscpy (in: _Dest=0x68acee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0170.290] wcscat (in: _Dest=0x68acee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0170.290] wcscat (in: _Dest=0x68acee8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*" [0170.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0170.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0173.663] wcscmp (_String1=".", _String2=".") returned 0 [0173.663] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.663] wcscmp (_String1="..", _String2=".") returned 1 [0173.663] wcscmp (_String1="..", _String2="..") returned 0 [0173.663] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0173.663] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0173.663] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0173.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ca10 [0173.663] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0173.663] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0173.663] wcscat (in: _Dest=0x3e5ca10, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" [0176.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0176.794] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0176.794] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0176.794] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0176.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0176.794] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0176.794] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0176.794] wcscat (in: _Dest=0x697e228, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" [0176.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0176.796] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0176.796] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0176.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0176.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acee8) returned 1 [0176.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 4318 os_tid = 0x2090 [0170.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp")) returned 0x20 [0173.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0173.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.683] GetLastError () returned 0x5 [0173.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0173.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abce8) returned 1 Thread: id = 4319 os_tid = 0x2094 [0170.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp")) returned 0x20 [0173.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0173.661] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.661] GetLastError () returned 0x5 [0173.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0173.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abd78) returned 1 Thread: id = 4321 os_tid = 0x209c [0170.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer")) returned 0x20 [0173.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0173.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.153] GetLastError () returned 0x5 [0173.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0173.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 Thread: id = 4322 os_tid = 0x20a0 [0170.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer")) returned 0x20 [0172.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0172.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.521] GetLastError () returned 0x5 [0172.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0172.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 Thread: id = 4323 os_tid = 0x20a4 [0170.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer")) returned 0x20 [0171.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0171.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.156] GetLastError () returned 0x5 [0173.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0173.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 4324 os_tid = 0x20a8 [0170.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 0x20 [0170.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0170.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.647] GetLastError () returned 0x5 [0170.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0170.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 4325 os_tid = 0x20ac [0170.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 0x20 [0172.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0172.490] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.096] GetLastError () returned 0x5 [0173.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0173.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0bfb8) returned 1 Thread: id = 4326 os_tid = 0x20b0 [0170.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 0x20 [0173.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0173.436] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.436] GetLastError () returned 0x5 [0173.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0173.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c828) returned 1 Thread: id = 4327 os_tid = 0x20b4 [0170.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 0x20 [0173.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0173.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.820] GetLastError () returned 0x5 [0173.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0173.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c090) returned 1 Thread: id = 4328 os_tid = 0x20b8 [0170.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 0x20 [0173.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0173.822] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.822] GetLastError () returned 0x5 [0173.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0173.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0cab0) returned 1 Thread: id = 4329 os_tid = 0x20bc [0170.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 0x20 [0173.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0173.823] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.824] GetLastError () returned 0x5 [0173.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0173.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c4c8) returned 1 Thread: id = 4330 os_tid = 0x20c0 [0170.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 0x20 [0173.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0173.825] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.826] GetLastError () returned 0x5 [0173.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0173.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 4331 os_tid = 0x20c4 [0170.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 0x20 [0173.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0173.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.828] GetLastError () returned 0x5 [0173.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0173.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 4332 os_tid = 0x20c8 [0170.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 0x20 [0173.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0173.814] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.814] GetLastError () returned 0x5 [0173.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0173.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 4333 os_tid = 0x20cc [0170.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 0x20 [0173.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0173.812] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.813] GetLastError () returned 0x5 [0173.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0173.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 4334 os_tid = 0x20d0 [0170.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 0x20 [0173.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0173.810] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.810] GetLastError () returned 0x5 [0173.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0173.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 Thread: id = 4335 os_tid = 0x20d4 [0170.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 0x20 [0173.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0173.808] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.808] GetLastError () returned 0x5 [0173.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0173.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57148) returned 1 Thread: id = 4336 os_tid = 0x20d8 [0170.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 0x20 [0173.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0173.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.806] GetLastError () returned 0x5 [0173.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0173.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 4337 os_tid = 0x20dc [0170.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 0x20 [0173.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0173.804] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.804] GetLastError () returned 0x5 [0173.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0173.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 4338 os_tid = 0x20e0 [0170.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 0x20 [0173.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0173.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.830] GetLastError () returned 0x5 [0173.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0173.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 4339 os_tid = 0x20e4 [0170.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 0x20 [0173.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0173.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.831] GetLastError () returned 0x5 [0173.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0173.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 4340 os_tid = 0x20e8 [0170.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 0x20 [0173.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0173.802] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.802] GetLastError () returned 0x5 [0173.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0173.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57060) returned 1 Thread: id = 4341 os_tid = 0x20ec [0170.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 0x20 [0173.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0173.833] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.833] GetLastError () returned 0x5 [0173.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0173.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 4342 os_tid = 0x20f0 [0170.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 0x20 [0173.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0173.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.835] GetLastError () returned 0x5 [0173.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0173.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 4343 os_tid = 0x20f4 [0170.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 0x20 [0173.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0173.816] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.816] GetLastError () returned 0x5 [0173.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0173.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f78) returned 1 Thread: id = 4344 os_tid = 0x20f8 [0170.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 0x20 [0173.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0173.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.447] GetLastError () returned 0x5 [0173.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0173.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 4345 os_tid = 0x20fc [0170.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 0x20 [0173.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0173.445] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.446] GetLastError () returned 0x5 [0173.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0173.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 4346 os_tid = 0x2100 [0170.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 0x20 [0173.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0173.818] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.818] GetLastError () returned 0x5 [0173.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0173.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36110) returned 1 Thread: id = 4359 os_tid = 0x211c [0170.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif")) returned 0x20 [0170.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0170.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.808] GetLastError () returned 0x5 [0170.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0170.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 4360 os_tid = 0x2120 [0170.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 0x20 [0174.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.986] GetLastError () returned 0x5 [0174.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 4361 os_tid = 0x2124 [0170.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 0x20 [0174.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0174.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.984] GetLastError () returned 0x5 [0174.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0174.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 4362 os_tid = 0x2128 [0170.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif")) returned 0x20 [0174.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0174.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.980] GetLastError () returned 0x5 [0174.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0174.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35f70) returned 1 Thread: id = 4363 os_tid = 0x212c [0170.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif")) returned 0x20 [0175.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0175.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.002] GetLastError () returned 0x5 [0175.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0175.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 4364 os_tid = 0x2130 [0170.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif")) returned 0x20 [0174.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0174.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.996] GetLastError () returned 0x5 [0174.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0174.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 4365 os_tid = 0x2134 [0170.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif")) returned 0x20 [0174.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0174.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.998] GetLastError () returned 0x5 [0174.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0174.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e359c0) returned 1 Thread: id = 4366 os_tid = 0x2138 [0170.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif")) returned 0x20 [0174.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0174.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.978] GetLastError () returned 0x5 [0174.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0174.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e366c0) returned 1 Thread: id = 4367 os_tid = 0x213c [0170.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif")) returned 0x20 [0174.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0174.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.961] GetLastError () returned 0x5 [0174.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0174.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 4368 os_tid = 0x2140 [0170.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif")) returned 0x20 [0174.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0174.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.963] GetLastError () returned 0x5 [0174.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0174.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56e90) returned 1 Thread: id = 4369 os_tid = 0x2144 [0170.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif")) returned 0x20 [0174.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0174.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.965] GetLastError () returned 0x5 [0174.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0174.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 4370 os_tid = 0x2148 [0170.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif")) returned 0x20 [0174.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0174.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.966] GetLastError () returned 0x5 [0174.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0174.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36790) returned 1 Thread: id = 4371 os_tid = 0x214c [0170.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif")) returned 0x20 [0174.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0174.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.988] GetLastError () returned 0x5 [0174.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0174.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36860) returned 1 Thread: id = 4372 os_tid = 0x2150 [0170.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif")) returned 0x20 [0174.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0174.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.989] GetLastError () returned 0x5 [0174.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0174.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 4373 os_tid = 0x2154 [0170.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif")) returned 0x20 [0174.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0174.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.991] GetLastError () returned 0x5 [0174.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0174.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011770) returned 1 Thread: id = 4374 os_tid = 0x2158 [0170.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif")) returned 0x20 [0174.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0174.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.968] GetLastError () returned 0x5 [0174.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0174.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 Thread: id = 4375 os_tid = 0x215c [0170.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif")) returned 0x20 [0174.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0174.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.970] GetLastError () returned 0x5 [0174.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0174.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36a00) returned 1 Thread: id = 4376 os_tid = 0x2160 [0170.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif")) returned 0x20 [0174.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0174.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.971] GetLastError () returned 0x5 [0174.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0174.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 4377 os_tid = 0x2164 [0170.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif")) returned 0x20 [0174.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0174.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.993] GetLastError () returned 0x5 [0174.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0174.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 Thread: id = 4378 os_tid = 0x2168 [0170.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif")) returned 0x20 [0174.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0174.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.975] GetLastError () returned 0x5 [0174.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0174.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ad0) returned 1 Thread: id = 4379 os_tid = 0x216c [0170.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif")) returned 0x20 [0174.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0174.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.976] GetLastError () returned 0x5 [0174.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0174.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 4380 os_tid = 0x2170 [0170.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif")) returned 0x20 [0174.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0174.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.994] GetLastError () returned 0x5 [0174.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0174.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ba0) returned 1 Thread: id = 4381 os_tid = 0x2174 [0170.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif")) returned 0x20 [0174.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0174.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.973] GetLastError () returned 0x5 [0174.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0174.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e57f8) returned 1 Thread: id = 4382 os_tid = 0x2178 [0170.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif")) returned 0x20 [0174.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0174.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.982] GetLastError () returned 0x5 [0174.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0174.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36c70) returned 1 Thread: id = 4383 os_tid = 0x217c [0170.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif")) returned 0x20 [0174.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0174.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.959] GetLastError () returned 0x5 [0174.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0174.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 4384 os_tid = 0x2180 [0170.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif")) returned 0x20 [0174.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0175.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.000] GetLastError () returned 0x5 [0175.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0175.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 4385 os_tid = 0x2184 [0170.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif")) returned 0x20 [0174.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0174.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.686] GetLastError () returned 0x5 [0174.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0174.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fb60) returned 1 Thread: id = 4386 os_tid = 0x2188 [0170.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif")) returned 0x20 [0173.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0173.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.273] GetLastError () returned 0x5 [0173.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0173.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 4387 os_tid = 0x218c [0171.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js")) returned 0x20 [0174.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0174.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.688] GetLastError () returned 0x5 [0174.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0174.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 Thread: id = 4388 os_tid = 0x2190 [0171.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1998 [0171.714] wcscpy (in: _Dest=0x3ee1998, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0171.714] wcscat (in: _Dest=0x3ee1998, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0171.714] wcscat (in: _Dest=0x3ee1998, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0171.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0171.714] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0171.714] wcscmp (_String1=".", _String2=".") returned 0 [0171.714] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.714] wcscmp (_String1="..", _String2=".") returned 1 [0171.714] wcscmp (_String1="..", _String2="..") returned 0 [0171.714] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0171.714] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0171.714] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0171.714] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0171.714] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0171.714] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0171.714] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0171.715] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0171.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0171.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1998) returned 1 [0171.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 4389 os_tid = 0x2194 [0171.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0171.716] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0171.716] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0171.716] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0171.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0171.716] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0171.716] wcscmp (_String1=".", _String2=".") returned 0 [0171.716] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.716] wcscmp (_String1="..", _String2=".") returned 1 [0171.716] wcscmp (_String1="..", _String2="..") returned 0 [0171.716] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0171.717] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0171.717] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0171.717] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0171.717] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0171.717] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0171.717] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0171.717] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0171.717] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0171.717] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0171.717] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0171.717] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0171.717] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0171.717] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0171.718] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0171.718] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0171.718] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0171.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0171.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0171.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 4390 os_tid = 0x2198 [0171.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2d00 [0171.720] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0171.720] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0171.720] wcscat (in: _Dest=0x3ea2d00, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0171.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0171.720] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0171.720] wcscmp (_String1=".", _String2=".") returned 0 [0171.720] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.720] wcscmp (_String1="..", _String2=".") returned 1 [0171.720] wcscmp (_String1="..", _String2="..") returned 0 [0171.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0171.721] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0171.721] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0171.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0171.721] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0171.721] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0171.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0171.721] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0171.721] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0171.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0171.721] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0171.721] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0171.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0171.721] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0171.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0171.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 [0171.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 4391 os_tid = 0x219c [0171.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0171.723] wcscpy (in: _Dest=0x332da8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0171.723] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0171.723] wcscat (in: _Dest=0x332da8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0171.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0171.723] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0171.723] wcscmp (_String1=".", _String2=".") returned 0 [0171.723] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.723] wcscmp (_String1="..", _String2=".") returned 1 [0171.723] wcscmp (_String1="..", _String2="..") returned 0 [0171.723] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0171.723] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0171.723] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0171.723] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0171.723] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0171.723] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0171.723] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0171.723] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0171.724] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0171.724] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0171.724] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0171.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0171.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 [0171.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 Thread: id = 4392 os_tid = 0x21a0 [0171.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x6959378 [0171.725] wcscpy (in: _Dest=0x6959378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0171.725] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0171.725] wcscat (in: _Dest=0x6959378, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*" [0171.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0171.725] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0173.144] wcscmp (_String1=".", _String2=".") returned 0 [0173.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.144] wcscmp (_String1="..", _String2=".") returned 1 [0173.144] wcscmp (_String1="..", _String2="..") returned 0 [0173.144] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0173.144] wcscmp (_String1="data_0", _String2=".") returned 1 [0173.144] wcscmp (_String1="data_0", _String2="..") returned 1 [0173.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bfd88 [0173.144] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0173.144] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0173.144] wcscat (in: _Dest=0x69bfd88, _Source="data_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0173.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0173.145] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0173.145] wcscmp (_String1="data_1", _String2=".") returned 1 [0173.145] wcscmp (_String1="data_1", _String2="..") returned 1 [0173.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c15e8 [0173.145] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0173.145] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0173.146] wcscat (in: _Dest=0x69c15e8, _Source="data_1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0173.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0173.147] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0173.147] wcscmp (_String1="data_2", _String2=".") returned 1 [0173.147] wcscmp (_String1="data_2", _String2="..") returned 1 [0173.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c1228 [0173.147] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0173.147] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0173.147] wcscat (in: _Dest=0x69c1228, _Source="data_2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0173.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0173.148] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0173.148] wcscmp (_String1="data_3", _String2=".") returned 1 [0173.148] wcscmp (_String1="data_3", _String2="..") returned 1 [0173.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69c0788 [0173.148] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0173.148] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0173.148] wcscat (in: _Dest=0x69c0788, _Source="data_3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0173.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0173.150] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0173.150] wcscmp (_String1="index", _String2=".") returned 1 [0173.150] wcscmp (_String1="index", _String2="..") returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0173.150] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0173.150] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0173.150] wcscat (in: _Dest=0x69c1408, _Source="index" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0173.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0173.151] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0173.151] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0173.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0173.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 [0173.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 4393 os_tid = 0x21a4 [0171.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020 [0173.211] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", dwFileAttributes=0x20) returned 1 [0175.560] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd48 [0185.822] GetFileSizeEx (in: hFile=0xd48, lpFileSize=0xb28f9c4 | out: lpFileSize=0xb28f9c4*=7168) returned 1 [0185.822] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x1bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.822] ReadFile (in: hFile=0xd48, lpBuffer=0xb28f9a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb28f9b0, lpOverlapped=0x0 | out: lpBuffer=0xb28f9a0*, lpNumberOfBytesRead=0xb28f9b0*=0x4, lpOverlapped=0x0) returned 1 [0186.137] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0186.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0186.137] NtQuerySystemTime (in: CurrentTime=0xb28f938 | out: CurrentTime=0xb28f938*=132482710946184000) returned 0x0 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x44200d3b [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x669123f9 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x58a8e2ce [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x4cdd5621 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x5bcbe8f1 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x6d110230 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x4fb18c23 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x41bc1f00 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x5cf8f9a0 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x65842542 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x40c1028e [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x7a6a1f19 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x1cec7d96 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x451aa1fc [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x4dac065e [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x21a7cee0 [0186.137] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x56a6a650 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x986c9d0 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x5415ee7d [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x7fe2db3f [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x491ed30e [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x3dbbc6f2 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x27ba31be [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x20c9544 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x28d3e829 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x17ecee11 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x5f1ed2d9 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x1d0b982b [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x4e427540 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x47a6f8d8 [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x769ee4dd [0186.138] RtlRandomEx (in: Seed=0xb28f930 | out: Seed=0xb28f930) returned 0x5bd528bd [0186.148] ReadFile (in: hFile=0xd48, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x1c00, lpNumberOfBytesRead=0xb28f92c, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xb28f92c*=0x1c00, lpOverlapped=0x0) returned 1 [0186.155] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.155] WriteFile (in: hFile=0xd48, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0xb28f930, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0xb28f930*=0x1c00, lpOverlapped=0x0) returned 1 [0186.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0186.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0186.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0186.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0186.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0186.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0186.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aea0) returned 1 [0186.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d4a8e8 [0186.413] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.413] WriteFile (in: hFile=0xd48, lpBuffer=0x68ae840*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb28f9b8, lpOverlapped=0x0 | out: lpBuffer=0x68ae840*, lpNumberOfBytesWritten=0xb28f9b8*=0x100, lpOverlapped=0x0) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae840) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0186.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0186.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e960 [0186.463] wcscpy (in: _Dest=0x697e960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0186.463] wcscat (in: _Dest=0x697e960, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.ac3a86" [0186.463] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.ac3a86", NtPathName=0xb28f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3dafd48 [0186.479] FlushFileBuffers (hFile=0xd48) returned 1 [0186.482] CloseHandle (hObject=0xd48) returned 1 [0186.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3330 [0186.483] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.483] wcscat (in: _Dest=0x3ea3330, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0186.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0186.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3330) returned 1 [0186.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 4394 os_tid = 0x21a8 [0171.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal")) returned 0x2020 [0173.211] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x20) returned 1 [0175.355] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf4 [0175.355] GetFileSizeEx (in: hFile=0x1bf4, lpFileSize=0x7edfbe4 | out: lpFileSize=0x7edfbe4*=0) returned 1 [0175.355] FlushFileBuffers (hFile=0x1bf4) returned 1 [0175.841] CloseHandle (hObject=0x1bf4) returned 1 [0175.841] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x2020) returned 1 [0175.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ccb0) returned 1 Thread: id = 4395 os_tid = 0x21ac [0171.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 0x2020 [0173.212] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", dwFileAttributes=0x20) returned 1 [0175.332] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x202c [0175.333] GetFileSizeEx (in: hFile=0x202c, lpFileSize=0xb08fdd4 | out: lpFileSize=0xb08fdd4*=489) returned 1 [0175.333] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x1e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.333] ReadFile (in: hFile=0x202c, lpBuffer=0xb08fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb08fdc0, lpOverlapped=0x0 | out: lpBuffer=0xb08fdb0*, lpNumberOfBytesRead=0xb08fdc0*=0x4, lpOverlapped=0x0) returned 1 [0175.335] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0175.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0175.335] NtQuerySystemTime (in: CurrentTime=0xb08fd48 | out: CurrentTime=0xb08fd48*=132482710838232000) returned 0x0 [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x239a1730 [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x26cc43e2 [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x136f359 [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x5484879a [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x1c12aed6 [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x7ff7140f [0175.335] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x50303872 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x1098847d [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x7d07750e [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x75718a85 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x41f65c57 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x17fd522f [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x2e1cfadb [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x41b1d4e9 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x5beaad18 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x6a2059f1 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x51814a1a [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x157bf7be [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x37544b9b [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x5afbe3c0 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x628b1b9f [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x9b9acc3 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x118a77e [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x506fad5d [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x4a6bc291 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0xeae76e4 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x16ccb4b9 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x5c9c07b4 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x67a26b9e [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x13dbfe2a [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x6acc01c9 [0175.336] RtlRandomEx (in: Seed=0xb08fd40 | out: Seed=0xb08fd40) returned 0x19f13aff [0175.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0175.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0175.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0175.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bbd8 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0175.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0175.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0175.349] ReadFile (in: hFile=0x202c, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x1e9, lpNumberOfBytesRead=0xb08fd3c, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xb08fd3c*=0x1e9, lpOverlapped=0x0) returned 1 [0175.349] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.349] WriteFile (in: hFile=0x202c, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x1e9, lpNumberOfBytesWritten=0xb08fd40, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0xb08fd40*=0x1e9, lpOverlapped=0x0) returned 1 [0175.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0175.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bbd8) returned 1 [0175.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19dc8 [0175.643] SetFilePointerEx (in: hFile=0x202c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.643] WriteFile (in: hFile=0x202c, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xb08fdc8, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0xb08fdc8*=0x110, lpOverlapped=0x0) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0176.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0176.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2518 [0176.964] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" [0176.964] wcscat (in: _Dest=0x3ee2518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.ac3a86" [0176.964] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.ac3a86", NtPathName=0xb08fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36a00 [0182.683] FlushFileBuffers (hFile=0x202c) returned 1 [0182.684] CloseHandle (hObject=0x202c) returned 1 [0182.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2db0 [0182.687] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.687] wcscat (in: _Dest=0x3ea2db0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 [0182.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ce00) returned 1 Thread: id = 4396 os_tid = 0x21b0 [0171.729] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 0x2020 [0173.212] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", dwFileAttributes=0x20) returned 1 [0175.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a50 [0175.317] GetFileSizeEx (in: hFile=0x1a50, lpFileSize=0xb50fd24 | out: lpFileSize=0xb50fd24*=294) returned 1 [0175.317] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x122, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.317] ReadFile (in: hFile=0x1a50, lpBuffer=0xb50fd00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb50fd10, lpOverlapped=0x0 | out: lpBuffer=0xb50fd00*, lpNumberOfBytesRead=0xb50fd10*=0x4, lpOverlapped=0x0) returned 1 [0175.319] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0175.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0175.320] NtQuerySystemTime (in: CurrentTime=0xb50fc98 | out: CurrentTime=0xb50fc98*=132482710838076000) returned 0x0 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x8a8a58d [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x5b540bd5 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x5fa2b553 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x2833a644 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x3e8f0aee [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x6d75756f [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x6e7d8fa7 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x21e9b1ee [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x2d33123b [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x2c0a70dc [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x4706c984 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x47f3abfb [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x670457b6 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x615e7271 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x20905d5b [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x5c85cf0 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x309fa8bb [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x39f4c201 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x4f2ff2b6 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x1e0782a7 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x2c2235f3 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x76ecf37c [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x6d521b62 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x4df475ce [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x1e694169 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x9ed81fa [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x107b25a [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0xba05c41 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x4dbdbde6 [0175.320] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x1fcd50e9 [0175.321] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x617f0758 [0175.321] RtlRandomEx (in: Seed=0xb50fc90 | out: Seed=0xb50fc90) returned 0x64c55052 [0175.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0175.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0175.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bb48 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0175.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670e6c0 [0175.330] ReadFile (in: hFile=0x1a50, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x126, lpNumberOfBytesRead=0xb50fc8c, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xb50fc8c*=0x126, lpOverlapped=0x0) returned 1 [0175.330] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.330] WriteFile (in: hFile=0x1a50, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0xb50fc90, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0xb50fc90*=0x126, lpOverlapped=0x0) returned 1 [0175.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0175.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0175.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0175.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0175.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0175.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bb48) returned 1 [0175.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5900 [0175.640] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.640] WriteFile (in: hFile=0x1a50, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xb50fd18, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xb50fd18*=0x10a, lpOverlapped=0x0) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0175.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0175.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2a40 [0175.983] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" [0175.983] wcscat (in: _Dest=0x3ea2a40, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.ac3a86" [0175.983] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.ac3a86", NtPathName=0xb50fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0175.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f520 [0182.660] FlushFileBuffers (hFile=0x1a50) returned 1 [0182.665] CloseHandle (hObject=0x1a50) returned 1 [0182.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2a40 [0182.667] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.667] wcscat (in: _Dest=0x3ea2a40, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 [0182.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 4397 os_tid = 0x21b4 [0171.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f908 [0171.730] wcscpy (in: _Dest=0x682f908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0171.730] wcscat (in: _Dest=0x682f908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0171.730] wcscat (in: _Dest=0x682f908, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*" [0171.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0171.730] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0173.649] wcscmp (_String1=".", _String2=".") returned 0 [0173.650] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.650] wcscmp (_String1="..", _String2=".") returned 1 [0173.650] wcscmp (_String1="..", _String2="..") returned 0 [0173.650] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0173.650] wcscmp (_String1="000003.log", _String2=".") returned 1 [0173.650] wcscmp (_String1="000003.log", _String2="..") returned 1 [0173.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e6650 [0173.650] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0173.650] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0173.650] wcscat (in: _Dest=0x2e6650, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" [0175.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2e6650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0175.429] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe382ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0175.429] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0175.429] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0175.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e359c0 [0175.429] wcscpy (in: _Dest=0x3e359c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0175.429] wcscat (in: _Dest=0x3e359c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0175.429] wcscat (in: _Dest=0x3e359c0, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" [0175.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e359c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0175.431] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe34e4f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0175.431] wcscmp (_String1="LOCK", _String2=".") returned 1 [0175.431] wcscmp (_String1="LOCK", _String2="..") returned 1 [0175.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35b60 [0175.431] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0175.431] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0175.431] wcscat (in: _Dest=0x3e35b60, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" [0175.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0175.432] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0175.432] wcscmp (_String1="LOG", _String2=".") returned 1 [0175.432] wcscmp (_String1="LOG", _String2="..") returned 1 [0175.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f840 [0175.433] wcscpy (in: _Dest=0x682f840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0175.433] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0175.433] wcscat (in: _Dest=0x682f840, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" [0175.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0175.434] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0175.434] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0175.434] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0175.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9988 [0175.434] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0175.434] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0175.434] wcscat (in: _Dest=0x2c9988, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" [0175.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0175.435] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0175.436] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0175.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0175.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f908) returned 1 [0175.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 4398 os_tid = 0x21b8 [0171.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2d00 [0171.731] wcscpy (in: _Dest=0x3ea2d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0171.731] wcscat (in: _Dest=0x3ea2d00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0171.731] wcscat (in: _Dest=0x3ea2d00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*" [0171.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0171.731] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0173.639] wcscmp (_String1=".", _String2=".") returned 0 [0173.639] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.639] wcscmp (_String1="..", _String2=".") returned 1 [0173.639] wcscmp (_String1="..", _String2="..") returned 0 [0173.639] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5030430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0173.639] wcscmp (_String1="000003.log", _String2=".") returned 1 [0173.639] wcscmp (_String1="000003.log", _String2="..") returned 1 [0173.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf148 [0173.639] wcscpy (in: _Dest=0x3daf148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0173.639] wcscat (in: _Dest=0x3daf148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0173.639] wcscat (in: _Dest=0x3daf148, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" [0177.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0177.525] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f98e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f98e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4fbb130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0177.525] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0177.525] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0177.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2740 [0177.525] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0177.525] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0177.525] wcscat (in: _Dest=0x3ee2740, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" [0177.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0177.527] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f96740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0177.527] wcscmp (_String1="LOCK", _String2=".") returned 1 [0177.527] wcscmp (_String1="LOCK", _String2="..") returned 1 [0177.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3280 [0177.527] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0177.527] wcscat (in: _Dest=0x3ea3280, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0177.527] wcscat (in: _Dest=0x3ea3280, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" [0177.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0177.528] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0177.528] wcscmp (_String1="LOG", _String2=".") returned 1 [0177.528] wcscmp (_String1="LOG", _String2="..") returned 1 [0177.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2410 [0177.528] wcscpy (in: _Dest=0x3ea2410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0177.528] wcscat (in: _Dest=0x3ea2410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0177.528] wcscat (in: _Dest=0x3ea2410, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" [0177.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0177.530] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0177.530] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0177.530] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0177.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e8a0 [0177.530] wcscpy (in: _Dest=0x682e8a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0177.530] wcscat (in: _Dest=0x682e8a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0177.530] wcscat (in: _Dest=0x682e8a0, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" [0177.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0177.531] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0177.531] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0177.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0177.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 [0177.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 4399 os_tid = 0x21bc [0171.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3960 [0171.732] wcscpy (in: _Dest=0x3ea3960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0171.732] wcscat (in: _Dest=0x3ea3960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0171.732] wcscat (in: _Dest=0x3ea3960, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*" [0171.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0171.732] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0173.640] wcscmp (_String1=".", _String2=".") returned 0 [0173.640] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.640] wcscmp (_String1="..", _String2=".") returned 1 [0173.640] wcscmp (_String1="..", _String2="..") returned 0 [0173.640] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5c17230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0173.640] wcscmp (_String1="000003.log", _String2=".") returned 1 [0173.640] wcscmp (_String1="000003.log", _String2="..") returned 1 [0173.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf2c8 [0173.640] wcscpy (in: _Dest=0x3daf2c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0173.640] wcscat (in: _Dest=0x3daf2c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0173.640] wcscat (in: _Dest=0x3daf2c8, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" [0174.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0174.609] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a9a470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0174.609] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0174.609] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0174.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1de8 [0174.609] wcscpy (in: _Dest=0x3ee1de8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0174.609] wcscat (in: _Dest=0x3ee1de8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0174.609] wcscat (in: _Dest=0x3ee1de8, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" [0174.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0174.611] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0174.611] wcscmp (_String1="LOCK", _String2=".") returned 1 [0174.611] wcscmp (_String1="LOCK", _String2="..") returned 1 [0174.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea24c0 [0174.611] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0174.611] wcscat (in: _Dest=0x3ea24c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0174.611] wcscat (in: _Dest=0x3ea24c0, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" [0174.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0174.612] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0174.612] wcscmp (_String1="LOG", _String2=".") returned 1 [0174.612] wcscmp (_String1="LOG", _String2="..") returned 1 [0174.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3b70 [0174.613] wcscpy (in: _Dest=0x3ea3b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0174.613] wcscat (in: _Dest=0x3ea3b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0174.613] wcscat (in: _Dest=0x3ea3b70, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" [0174.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0174.614] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0174.614] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0174.614] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0174.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f9d0 [0174.614] wcscpy (in: _Dest=0x682f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0174.614] wcscat (in: _Dest=0x682f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0174.614] wcscat (in: _Dest=0x682f9d0, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" [0174.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0174.615] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0174.615] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0174.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0174.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3960) returned 1 [0174.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 4400 os_tid = 0x21c0 [0171.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x69bff68 [0171.733] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0171.733] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0171.733] wcscat (in: _Dest=0x69bff68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*" [0171.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0171.733] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0173.646] wcscmp (_String1=".", _String2=".") returned 0 [0173.646] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.646] wcscmp (_String1="..", _String2=".") returned 1 [0173.646] wcscmp (_String1="..", _String2="..") returned 0 [0173.646] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0173.646] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2=".") returned 1 [0173.646] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2="..") returned 1 [0173.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0173.646] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0173.646] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0173.646] wcscat (in: _Dest=0x2c8568, _Source="aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0176.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0176.472] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0176.472] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0176.472] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0176.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9608 [0176.472] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.472] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.472] wcscat (in: _Dest=0x2c9608, _Source="aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0176.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0176.473] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0176.473] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2=".") returned 1 [0176.473] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2="..") returned 1 [0176.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c96e8 [0176.474] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.474] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.474] wcscat (in: _Dest=0x2c96e8, _Source="apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0176.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0176.475] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0176.475] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2=".") returned 1 [0176.475] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2="..") returned 1 [0176.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9a68 [0176.475] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.475] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.475] wcscat (in: _Dest=0x2c9a68, _Source="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0176.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0176.476] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0176.477] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0176.477] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0176.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9448 [0176.477] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.477] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.477] wcscat (in: _Dest=0x2c9448, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0176.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0176.479] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0176.479] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2=".") returned 1 [0176.479] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2="..") returned 1 [0176.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4250 [0176.479] wcscpy (in: _Dest=0x3ea4250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.479] wcscat (in: _Dest=0x3ea4250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.479] wcscat (in: _Dest=0x3ea4250, _Source="nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0176.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea4250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0176.480] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0176.480] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2=".") returned 1 [0176.480] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2="..") returned 1 [0176.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4db0 [0176.481] wcscpy (in: _Dest=0x3ea4db0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.481] wcscat (in: _Dest=0x3ea4db0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.481] wcscat (in: _Dest=0x3ea4db0, _Source="pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0176.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea4db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0176.482] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0176.482] wcscmp (_String1="Temp", _String2=".") returned 1 [0176.482] wcscmp (_String1="Temp", _String2="..") returned 1 [0176.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e228 [0176.482] wcscpy (in: _Dest=0x697e228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0176.482] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0176.482] wcscat (in: _Dest=0x697e228, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp" [0176.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 [0176.483] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0176.483] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0176.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0176.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 [0176.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 4401 os_tid = 0x21c4 [0171.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 0x2020 [0173.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", dwFileAttributes=0x20) returned 1 [0175.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb9c [0175.301] GetFileSizeEx (in: hFile=0xb9c, lpFileSize=0x888fb74 | out: lpFileSize=0x888fb74*=20480) returned 1 [0175.301] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.301] ReadFile (in: hFile=0xb9c, lpBuffer=0x888fb50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x888fb60, lpOverlapped=0x0 | out: lpBuffer=0x888fb50*, lpNumberOfBytesRead=0x888fb60*=0x4, lpOverlapped=0x0) returned 1 [0175.304] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0175.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0175.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.304] NtQuerySystemTime (in: CurrentTime=0x888fae8 | out: CurrentTime=0x888fae8*=132482710837920000) returned 0x0 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x651c75f3 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x5787f7aa [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x23b99bd0 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x34a3171a [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x425ea028 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x69554ce0 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x7a69401a [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x64245bd8 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x719f7435 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x2730f128 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x688127c1 [0175.304] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x35d96f59 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x7cf30b1e [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0xdfa2bf7 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x4b7acf1a [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x587095c3 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x5546aef7 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0xdcf564f [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x6e162965 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x4877919a [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x28c859a8 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x6609d606 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x70dde813 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x6bdb08a3 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x3ee629ee [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x6bc53589 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x4549f166 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x41635072 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x164161a0 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x319589c3 [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x1065ae5e [0175.305] RtlRandomEx (in: Seed=0x888fae0 | out: Seed=0x888fae0) returned 0x56e9d46f [0175.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0175.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0175.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0175.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0175.314] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.314] ReadFile (in: hFile=0xb9c, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x888fae8, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0x888fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0175.315] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bb48 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0175.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69bbd68 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0175.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bb48) returned 1 [0175.316] WriteFile (in: hFile=0xb9c, lpBuffer=0x69bbd68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x888fae8, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesWritten=0x888fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0176.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0176.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0176.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef46c8 [0176.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0176.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ef48f8 [0176.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0176.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0176.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0176.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0176.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68233b0) returned 1 [0176.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec710 [0176.258] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.258] WriteFile (in: hFile=0xb9c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x888fb68, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x888fb68*=0x102, lpOverlapped=0x0) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0177.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0177.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e228 [0177.355] wcscpy (in: _Dest=0x697e228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" [0177.355] wcscat (in: _Dest=0x697e228, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.ac3a86" [0177.355] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.ac3a86", NtPathName=0x888fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0177.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf988 [0182.688] FlushFileBuffers (hFile=0xb9c) returned 1 [0182.690] CloseHandle (hObject=0xb9c) returned 1 [0182.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2fc0 [0182.701] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.701] wcscat (in: _Dest=0x3ea2fc0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 [0182.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 4402 os_tid = 0x21c8 [0171.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal")) returned 0x2020 [0173.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x20) returned 1 [0175.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a64 [0175.298] GetFileSizeEx (in: hFile=0x1a64, lpFileSize=0xb61f864 | out: lpFileSize=0xb61f864*=0) returned 1 [0175.299] FlushFileBuffers (hFile=0x1a64) returned 1 [0175.840] CloseHandle (hObject=0x1a64) returned 1 [0175.840] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x2020) returned 1 [0175.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d538) returned 1 Thread: id = 4403 os_tid = 0x21cc [0171.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 0x2020 [0172.541] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", dwFileAttributes=0x20) returned 1 [0172.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x204c [0172.542] GetFileSizeEx (in: hFile=0x204c, lpFileSize=0x9a0fe9c | out: lpFileSize=0x9a0fe9c*=102400) returned 1 [0172.542] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x18ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.542] ReadFile (in: hFile=0x204c, lpBuffer=0x9a0fe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a0fe88, lpOverlapped=0x0 | out: lpBuffer=0x9a0fe78*, lpNumberOfBytesRead=0x9a0fe88*=0x4, lpOverlapped=0x0) returned 1 [0172.554] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0172.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0172.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0172.554] NtQuerySystemTime (in: CurrentTime=0x9a0fe10 | out: CurrentTime=0x9a0fe10*=132482710810620000) returned 0x0 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x1c9a39e0 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x2c12b595 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x2b39dbf8 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x46584660 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x94ca487 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x75ff2fbe [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x25ef6b82 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x1045eaa6 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x25fb92ec [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x93f8a05 [0172.554] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x5f2604a5 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x34235121 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x17c18b6d [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x63e7d726 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x5c69003a [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x2f2ee890 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x552a709a [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x2e33aad3 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x588d3b9f [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x40bc0e8d [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x739a550f [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x5fa97dd2 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x6baa77dc [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x27063f12 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x65e5d834 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x5229a203 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x65f87e7b [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x47f62ff5 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x1c042a13 [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x1a5db1eb [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x3d54f81c [0172.555] RtlRandomEx (in: Seed=0x9a0fe08 | out: Seed=0x9a0fe08) returned 0x72187f9 [0172.565] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.565] ReadFile (in: hFile=0x204c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0172.574] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823290 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823290) returned 1 [0172.574] WriteFile (in: hFile=0x204c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0173.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0173.627] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.627] ReadFile (in: hFile=0x204c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0173.629] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d1ac8 [0173.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014ef0 [0173.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0173.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0173.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0173.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0173.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0173.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0173.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014ef0) returned 1 [0173.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1ac8) returned 1 [0173.630] WriteFile (in: hFile=0x204c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0174.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0174.386] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.386] ReadFile (in: hFile=0x204c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0174.390] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff1b8 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0174.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0174.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0174.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0174.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0174.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff1b8) returned 1 [0174.391] WriteFile (in: hFile=0x204c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a0fe10, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x9a0fe10*=0x3c00, lpOverlapped=0x0) returned 1 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0174.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8e140 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0174.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4cb8 [0174.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6899ee0 [0174.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b240 [0174.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0174.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0174.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef11d0 [0174.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0174.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0174.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0174.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0174.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899ee0) returned 1 [0174.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x2fce88 [0174.932] SetFilePointerEx (in: hFile=0x204c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.932] WriteFile (in: hFile=0x204c, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x9a0fe90, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x9a0fe90*=0x140, lpOverlapped=0x0) returned 1 [0174.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0174.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0174.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0174.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0174.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 [0174.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0174.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0174.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0174.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cb60 [0174.937] wcscpy (in: _Dest=0x3e5cb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" [0174.937] wcscat (in: _Dest=0x3e5cb60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.ac3a86" [0174.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.ac3a86", NtPathName=0x9a0fe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0175.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 [0175.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689d050) returned 1 [0175.354] NtQueryInformationFile (in: FileHandle=0x204c, IoStatusBlock=0x9a0fde0, FileInformation=0x9a0fde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a0fde0, FileInformation=0x9a0fde8) returned 0x0 [0175.354] NtSetInformationFile (FileHandle=0x204c, IoStatusBlock=0x9a0fde0, FileInformation=0x9a0fde8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0175.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 [0175.358] FlushFileBuffers (hFile=0x204c) returned 1 [0175.841] CloseHandle (hObject=0x204c) returned 1 [0175.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea31d0 [0175.854] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0175.854] wcscat (in: _Dest=0x3ea31d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0175.854] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0xffffffff [0176.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2290 [0186.740] WriteFile (in: hFile=0x2290, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9a0fe24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9a0fe24*=0x8b9, lpOverlapped=0x0) returned 1 [0186.742] CloseHandle (hObject=0x2290) returned 1 [0186.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 [0186.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 4404 os_tid = 0x21d0 [0171.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 0x2020 [0173.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", dwFileAttributes=0x20) returned 1 [0175.175] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21cc [0175.191] GetFileSizeEx (in: hFile=0x21cc, lpFileSize=0xb8df76c | out: lpFileSize=0xb8df76c*=2015) returned 1 [0175.191] SetFilePointerEx (in: hFile=0x21cc, liDistanceToMove=0x7db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.191] ReadFile (in: hFile=0x21cc, lpBuffer=0xb8df748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb8df758, lpOverlapped=0x0 | out: lpBuffer=0xb8df748*, lpNumberOfBytesRead=0xb8df758*=0x4, lpOverlapped=0x0) returned 1 [0175.193] SetFilePointerEx (in: hFile=0x21cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0175.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0175.193] NtQuerySystemTime (in: CurrentTime=0xb8df6e0 | out: CurrentTime=0xb8df6e0*=132482710836828000) returned 0x0 [0175.193] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0xbe68458 [0175.193] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x61c3f3c6 [0175.193] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x136acf14 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x23314c72 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x26eb3423 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x305da59a [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x76bee34 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x7e3cad83 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x7ceb8ddb [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x6e96b3a5 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x59c58dd2 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x348edcff [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x1468ef5c [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x5e58a55a [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x39675e1a [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x1ddd14d4 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x33b27fdc [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x1815fa4 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x4b47b5fe [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x6a01efac [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x6c1500bd [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x5a476732 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x5a351de6 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x196a5ae9 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x9812a66 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x40ba4bd0 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x55e90517 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x7fc2b743 [0175.194] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x17a50f94 [0175.195] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x796d01c2 [0175.195] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x4ac3cb4c [0175.195] RtlRandomEx (in: Seed=0xb8df6d8 | out: Seed=0xb8df6d8) returned 0x4cfb73d [0175.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0175.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0175.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a288 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6996518 [0175.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0175.204] ReadFile (in: hFile=0x21cc, lpBuffer=0x6996518, nNumberOfBytesToRead=0x7df, lpNumberOfBytesRead=0xb8df6d4, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesRead=0xb8df6d4*=0x7df, lpOverlapped=0x0) returned 1 [0175.205] SetFilePointerEx (in: hFile=0x21cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.205] WriteFile (in: hFile=0x21cc, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x7df, lpNumberOfBytesWritten=0xb8df6d8, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0xb8df6d8*=0x7df, lpOverlapped=0x0) returned 1 [0175.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0175.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0175.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0175.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0175.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0175.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a288) returned 1 [0175.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x689a288 [0175.816] SetFilePointerEx (in: hFile=0x21cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.816] WriteFile (in: hFile=0x21cc, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb8df760, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0xb8df760*=0x11e, lpOverlapped=0x0) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a288) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0176.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0176.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682fa98 [0176.935] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" [0176.935] wcscat (in: _Dest=0x682fa98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.ac3a86" [0176.936] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.ac3a86", NtPathName=0xb8df6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x68abce8 [0182.664] FlushFileBuffers (hFile=0x21cc) returned 1 [0182.671] CloseHandle (hObject=0x21cc) returned 1 [0182.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2a40 [0182.672] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.672] wcscat (in: _Dest=0x3ea2a40, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.672] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 [0182.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1490) returned 1 Thread: id = 4405 os_tid = 0x21d4 [0171.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal")) returned 0x2020 [0173.223] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x20) returned 1 [0175.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1158 [0175.298] GetFileSizeEx (in: hFile=0x1158, lpFileSize=0x9b4fcbc | out: lpFileSize=0x9b4fcbc*=0) returned 1 [0175.298] FlushFileBuffers (hFile=0x1158) returned 1 [0175.840] CloseHandle (hObject=0x1158) returned 1 [0175.840] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x2020) returned 1 [0175.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9d0) returned 1 Thread: id = 4406 os_tid = 0x21d8 [0171.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e5ca10 [0171.736] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0171.736] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0171.736] wcscat (in: _Dest=0x3e5ca10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*" [0171.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0171.736] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0173.228] wcscmp (_String1=".", _String2=".") returned 0 [0173.228] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.228] wcscmp (_String1="..", _String2=".") returned 1 [0173.228] wcscmp (_String1="..", _String2="..") returned 0 [0173.228] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726ce90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726ce90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA7.tmp", cAlternateFileName="")) returned 1 [0173.228] wcscmp (_String1="BBA7.tmp", _String2=".") returned 1 [0173.228] wcscmp (_String1="BBA7.tmp", _String2="..") returned 1 [0173.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2740 [0173.228] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0173.228] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0173.228] wcscat (in: _Dest=0x3ee2740, _Source="BBA7.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" [0173.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0173.229] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 1 [0173.229] wcscmp (_String1="BBA8.tmp", _String2=".") returned 1 [0173.229] wcscmp (_String1="BBA8.tmp", _String2="..") returned 1 [0173.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2688 [0173.229] wcscpy (in: _Dest=0x3ee2688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0173.229] wcscat (in: _Dest=0x3ee2688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0173.229] wcscat (in: _Dest=0x3ee2688, _Source="BBA8.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" [0173.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0173.230] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 0 [0173.230] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0173.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0173.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 [0173.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 4407 os_tid = 0x21dc [0171.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0171.736] wcscpy (in: _Dest=0x332da8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0171.736] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0171.736] wcscat (in: _Dest=0x332da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*" [0171.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0171.737] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0173.191] wcscmp (_String1=".", _String2=".") returned 0 [0173.191] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.191] wcscmp (_String1="..", _String2=".") returned 1 [0173.191] wcscmp (_String1="..", _String2="..") returned 0 [0173.191] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0173.191] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0173.191] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0173.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e15a70 [0173.192] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0173.192] wcscat (in: _Dest=0x3e15a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0173.192] wcscat (in: _Dest=0x3e15a70, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0173.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0173.193] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0 [0173.193] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0173.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0173.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 [0173.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 4408 os_tid = 0x21e0 [0171.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020 [0173.223] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", dwFileAttributes=0x20) returned 1 [0175.279] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe3c [0175.280] GetFileSizeEx (in: hFile=0xe3c, lpFileSize=0x953fa84 | out: lpFileSize=0x953fa84*=18432) returned 1 [0175.280] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x47fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.280] ReadFile (in: hFile=0xe3c, lpBuffer=0x953fa60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x953fa70, lpOverlapped=0x0 | out: lpBuffer=0x953fa60*, lpNumberOfBytesRead=0x953fa70*=0x4, lpOverlapped=0x0) returned 1 [0175.282] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0175.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0175.282] NtQuerySystemTime (in: CurrentTime=0x953f9f8 | out: CurrentTime=0x953f9f8*=132482710837764000) returned 0x0 [0175.282] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x584f58bb [0175.282] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x1a49fc37 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x7660b7dc [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x37443cb4 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x27b4b91c [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x6e410225 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0xf055d16 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x6d959f25 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x2c5e4ef6 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x626e6f42 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x52b0d347 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x2a735ab8 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x524351f2 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x7a41a24c [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x2839c745 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x4c885fe8 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x1a85ee66 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0xd1b7ef7 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x11027dc [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x3b2be5f6 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x1a75b038 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x77c9e37a [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x3a2cb143 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x659834a7 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x45a339da [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x655a836 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x5b14be59 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x7e3d6942 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x1181bd57 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x5268b797 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0xa3bd972 [0175.283] RtlRandomEx (in: Seed=0x953f9f0 | out: Seed=0x953f9f0) returned 0x6797c2e5 [0175.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4538 [0175.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0175.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0175.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0175.294] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.294] ReadFile (in: hFile=0xe3c, lpBuffer=0x69a9140, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x953f9f8, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesRead=0x953f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0175.295] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bb48 [0175.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0175.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b4558 [0175.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0175.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0175.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0175.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bb48) returned 1 [0175.296] WriteFile (in: hFile=0xe3c, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x953f9f8, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0x953f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ab0 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5210 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3deca58 [0175.825] SetFilePointerEx (in: hFile=0xe3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.825] WriteFile (in: hFile=0xe3c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x953fa78, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x953fa78*=0x106, lpOverlapped=0x0) returned 1 [0176.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0176.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0176.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0176.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0176.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0176.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0176.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0176.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0176.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea2780 [0176.941] wcscpy (in: _Dest=0x3ea2780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0176.941] wcscat (in: _Dest=0x3ea2780, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.ac3a86" [0176.941] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.ac3a86", NtPathName=0x953f9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3dafd48 [0182.694] FlushFileBuffers (hFile=0xe3c) returned 1 [0182.698] CloseHandle (hObject=0xe3c) returned 1 [0182.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2fc0 [0182.700] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.700] wcscat (in: _Dest=0x3ea2fc0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 [0182.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 4409 os_tid = 0x21e4 [0171.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal")) returned 0x2020 [0173.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x20) returned 1 [0175.170] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1690 [0175.171] GetFileSizeEx (in: hFile=0x1690, lpFileSize=0xbb9fdd4 | out: lpFileSize=0xbb9fdd4*=0) returned 1 [0175.171] FlushFileBuffers (hFile=0x1690) returned 1 [0175.839] CloseHandle (hObject=0x1690) returned 1 [0175.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x2020) returned 1 [0175.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 Thread: id = 4410 os_tid = 0x21e8 [0171.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 0x2020 [0173.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", dwFileAttributes=0x20) returned 1 [0175.131] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21e8 [0175.131] GetFileSizeEx (in: hFile=0x21e8, lpFileSize=0xa1afcb4 | out: lpFileSize=0xa1afcb4*=15360) returned 1 [0175.131] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x3bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.131] ReadFile (in: hFile=0x21e8, lpBuffer=0xa1afc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1afca0, lpOverlapped=0x0 | out: lpBuffer=0xa1afc90*, lpNumberOfBytesRead=0xa1afca0*=0x4, lpOverlapped=0x0) returned 1 [0175.134] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0175.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0175.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0175.135] NtQuerySystemTime (in: CurrentTime=0xa1afc28 | out: CurrentTime=0xa1afc28*=132482710836204000) returned 0x0 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x3fdaa39a [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x611bdd45 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x3aea75f1 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x667488d7 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x32249c55 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x2298e69c [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x32b60e86 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x443b7cf5 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x30754d42 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x44af96df [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x40038cf [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x63ffb49f [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0xd8fa34d [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x6c1be5df [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x650ca419 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x1e561706 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x716c5110 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x29c7fcb8 [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x13ce011f [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x149476ea [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x1d3d89db [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x47cab5be [0175.135] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x79a37cd8 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0xfbf837a [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x4f53ac1c [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x7858a46 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x79b2df09 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x6febed32 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x47483f37 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x725cd857 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x3d81d339 [0175.136] RtlRandomEx (in: Seed=0xa1afc20 | out: Seed=0xa1afc20) returned 0x6ab04db9 [0175.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0175.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0175.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0175.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0175.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0175.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0175.165] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.165] ReadFile (in: hFile=0x21e8, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1afc28, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xa1afc28*=0x3c00, lpOverlapped=0x0) returned 1 [0175.606] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a048 [0175.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0240 [0175.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0175.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0175.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0175.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0175.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0175.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a048) returned 1 [0175.607] WriteFile (in: hFile=0x21e8, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1afc28, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0xa1afc28*=0x3c00, lpOverlapped=0x0) returned 1 [0176.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0176.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0176.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x68233b0 [0176.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0176.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x68221f8 [0176.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0176.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0176.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0176.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0176.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68224c8) returned 1 [0176.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3dd8cb8 [0176.259] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.259] WriteFile (in: hFile=0x21e8, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xa1afca8, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0xa1afca8*=0x122, lpOverlapped=0x0) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221f8) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68233b0) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0178.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0178.415] wcscpy (in: _Dest=0x682e7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" [0178.415] wcscat (in: _Dest=0x682e7d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.ac3a86" [0178.415] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.ac3a86", NtPathName=0xa1afc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0178.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea52f0 [0183.566] FlushFileBuffers (hFile=0x21e8) returned 1 [0184.378] CloseHandle (hObject=0x21e8) returned 1 [0184.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3330 [0184.379] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0184.379] wcscat (in: _Dest=0x3ea3330, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0184.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0184.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3330) returned 1 [0184.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee27f8) returned 1 Thread: id = 4411 os_tid = 0x21ec [0171.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal")) returned 0x2020 [0173.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x20) returned 1 [0175.129] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2424 [0175.129] GetFileSizeEx (in: hFile=0x2424, lpFileSize=0xbc5fbc4 | out: lpFileSize=0xbc5fbc4*=0) returned 1 [0175.129] FlushFileBuffers (hFile=0x2424) returned 1 [0175.839] CloseHandle (hObject=0x2424) returned 1 [0175.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x2020) returned 1 [0175.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f390) returned 1 Thread: id = 4412 os_tid = 0x21f0 [0171.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 0x2020 [0173.224] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", dwFileAttributes=0x20) returned 1 [0175.261] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2314 [0175.263] GetFileSizeEx (in: hFile=0x2314, lpFileSize=0xb81ff34 | out: lpFileSize=0xb81ff34*=40) returned 1 [0175.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0175.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0175.263] NtQuerySystemTime (in: CurrentTime=0xb81fea8 | out: CurrentTime=0xb81fea8*=132482710837608000) returned 0x0 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x67bd0f8f [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x3ae67c4 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x576956ff [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x44f1cfc [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x778d8f62 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x64997dde [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x6f173de5 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x41425f45 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x7712af30 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x2c9d3fa [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x4527ed84 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x7d36cd2c [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0xfa09e35 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x5fb4c7e8 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x1fae990e [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x4271169a [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x185d472 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x4019085c [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x651ff3a6 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x6378d001 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x2cdf25b9 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x3e70eb78 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x45b93cc3 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x795bb0e8 [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x3082780c [0175.264] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x10de0a88 [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x6dc077e5 [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x4f297d32 [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x315d6fe5 [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x420e7355 [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x5e62b6cb [0175.265] RtlRandomEx (in: Seed=0xb81fea0 | out: Seed=0xb81fea0) returned 0x180beacf [0175.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0175.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0175.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0175.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0175.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0175.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b8c0 [0175.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0175.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0175.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0175.275] ReadFile (in: hFile=0x2314, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0xb81fe9c, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0xb81fe9c*=0x28, lpOverlapped=0x0) returned 1 [0175.278] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.278] WriteFile (in: hFile=0x2314, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0xb81fea0, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0xb81fea0*=0x28, lpOverlapped=0x0) returned 1 [0175.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0175.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0175.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0175.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0175.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0175.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b8c0) returned 1 [0175.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x689b8c0 [0175.611] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.611] WriteFile (in: hFile=0x2314, lpBuffer=0x3dd8cb8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb81ff28, lpOverlapped=0x0 | out: lpBuffer=0x3dd8cb8*, lpNumberOfBytesWritten=0xb81ff28*=0x122, lpOverlapped=0x0) returned 1 [0175.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0175.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899dc0) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b8c0) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0175.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0175.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f390 [0175.950] wcscpy (in: _Dest=0x682f390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" [0175.950] wcscat (in: _Dest=0x682f390, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.ac3a86" [0175.950] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.ac3a86", NtPathName=0xb81fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0175.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4870 [0182.648] FlushFileBuffers (hFile=0x2314) returned 1 [0182.652] CloseHandle (hObject=0x2314) returned 1 [0182.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2360 [0182.653] wcscpy (in: _Dest=0x3ea2360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.653] wcscat (in: _Dest=0x3ea2360, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.653] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2360) returned 1 [0182.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee28b0) returned 1 Thread: id = 4413 os_tid = 0x21f4 [0171.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 0x2020 [0173.224] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", dwFileAttributes=0x20) returned 1 [0175.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21ec [0175.247] GetFileSizeEx (in: hFile=0x21ec, lpFileSize=0xbb3fcfc | out: lpFileSize=0xbb3fcfc*=5120) returned 1 [0175.247] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.247] ReadFile (in: hFile=0x21ec, lpBuffer=0xbb3fcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbb3fce8, lpOverlapped=0x0 | out: lpBuffer=0xbb3fcd8*, lpNumberOfBytesRead=0xbb3fce8*=0x4, lpOverlapped=0x0) returned 1 [0175.250] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0175.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0175.250] NtQuerySystemTime (in: CurrentTime=0xbb3fc70 | out: CurrentTime=0xbb3fc70*=132482710837452000) returned 0x0 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x2a4765b [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x4ff55086 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x21695230 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x6de9d6ee [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x72e6ab1a [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x468e864 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x1eb30960 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x3c5e6066 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x28bb5815 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x8dc96db [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x5d0f2570 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x1530d260 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x78054c87 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x736d3d20 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x22d3ce44 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x36e93796 [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x7655e00e [0175.250] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x38609d8a [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x5a97e1c9 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x658096a [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x39fb999d [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x3e42e19 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x2beffce4 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x20afae53 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x540c68e6 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x7704c6b [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x7f9a88b2 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x2abf92b4 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0xf6f4c4e [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x6251b373 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x7e87af15 [0175.251] RtlRandomEx (in: Seed=0xbb3fc68 | out: Seed=0xbb3fc68) returned 0x2356e0fb [0175.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0175.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0175.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bc20 [0175.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0175.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0175.260] ReadFile (in: hFile=0x21ec, lpBuffer=0x69b0950, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0xbb3fc64, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xbb3fc64*=0x1400, lpOverlapped=0x0) returned 1 [0175.261] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.261] WriteFile (in: hFile=0x21ec, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0xbb3fc68, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0xbb3fc68*=0x1400, lpOverlapped=0x0) returned 1 [0175.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4830 [0175.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0175.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f8c0 [0175.823] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.823] WriteFile (in: hFile=0x21ec, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xbb3fcf0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xbb3fcf0*=0x116, lpOverlapped=0x0) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fc80) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f8c0) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0176.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0176.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3dafc88 [0176.938] wcscpy (in: _Dest=0x3dafc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" [0176.938] wcscat (in: _Dest=0x3dafc88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.ac3a86" [0176.939] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.ac3a86", NtPathName=0xbb3fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e366c0 [0182.674] FlushFileBuffers (hFile=0x21ec) returned 1 [0182.677] CloseHandle (hObject=0x21ec) returned 1 [0182.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea38b0 [0182.679] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.679] wcscat (in: _Dest=0x3ea38b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 [0182.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 Thread: id = 4414 os_tid = 0x21f8 [0171.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal")) returned 0x2020 [0173.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x20) returned 1 [0175.246] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21dc [0175.246] GetFileSizeEx (in: hFile=0x21dc, lpFileSize=0xafef87c | out: lpFileSize=0xafef87c*=0) returned 1 [0175.246] FlushFileBuffers (hFile=0x21dc) returned 1 [0175.840] CloseHandle (hObject=0x21dc) returned 1 [0175.840] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x2020) returned 1 [0175.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 4415 os_tid = 0x21fc [0171.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 0x2020 [0173.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", dwFileAttributes=0x20) returned 1 [0175.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d8 [0175.226] GetFileSizeEx (in: hFile=0x21d8, lpFileSize=0xbe9fe54 | out: lpFileSize=0xbe9fe54*=6741) returned 1 [0175.226] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x1a51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.226] ReadFile (in: hFile=0x21d8, lpBuffer=0xbe9fe30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbe9fe40, lpOverlapped=0x0 | out: lpBuffer=0xbe9fe30*, lpNumberOfBytesRead=0xbe9fe40*=0x4, lpOverlapped=0x0) returned 1 [0175.228] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0175.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0175.228] NtQuerySystemTime (in: CurrentTime=0xbe9fdc8 | out: CurrentTime=0xbe9fdc8*=132482710837140000) returned 0x0 [0175.228] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x326ff60b [0175.228] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x6889fbb [0175.228] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x607d645c [0175.228] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x301c06f3 [0175.228] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x6a2ca245 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x3e3bb461 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x14c62297 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x8c858b3 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x3062443c [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x372ef13e [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x2788daca [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x38af331c [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x73bbbe0f [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x64e7463b [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x6e6bdae5 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x2df63eb7 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0xa46bbe7 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x691c3689 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x20cd068e [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x180097f5 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x4640ed86 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x6cca5ba9 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x3d36dadb [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x3fda6b30 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x2ba7640c [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x7f78d2f6 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x659b4abe [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x17c09119 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x6e3af6e5 [0175.229] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x2913501 [0175.230] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x744014f5 [0175.230] RtlRandomEx (in: Seed=0xbe9fdc0 | out: Seed=0xbe9fdc0) returned 0x36859b5e [0175.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0175.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0175.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bc20 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0175.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0175.240] ReadFile (in: hFile=0x21d8, lpBuffer=0x69b0950, nNumberOfBytesToRead=0x1a55, lpNumberOfBytesRead=0xbe9fdbc, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xbe9fdbc*=0x1a55, lpOverlapped=0x0) returned 1 [0175.241] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.241] WriteFile (in: hFile=0x21d8, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0x1a55, lpNumberOfBytesWritten=0xbe9fdc0, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0xbe9fdc0*=0x1a55, lpOverlapped=0x0) returned 1 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5900 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bc20 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5f60 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0175.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec710 [0175.244] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.244] WriteFile (in: hFile=0x21d8, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xbe9fe48, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xbe9fe48*=0x108, lpOverlapped=0x0) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0175.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0175.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3960 [0175.245] wcscpy (in: _Dest=0x3ea3960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" [0175.245] wcscat (in: _Dest=0x3ea3960, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.ac3a86" [0175.246] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.ac3a86", NtPathName=0xbe9fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0175.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f200 [0181.258] FlushFileBuffers (hFile=0x21d8) returned 1 [0181.455] CloseHandle (hObject=0x21d8) returned 1 [0182.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2360 [0182.610] wcscpy (in: _Dest=0x3ea2360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.610] wcscat (in: _Dest=0x3ea2360, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.610] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2360) returned 1 [0182.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 4416 os_tid = 0x2200 [0171.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 0x2020 [0173.226] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", dwFileAttributes=0x20) returned 1 [0175.207] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d4 [0175.208] GetFileSizeEx (in: hFile=0x21d4, lpFileSize=0xbd4f7a4 | out: lpFileSize=0xbd4f7a4*=16384) returned 1 [0175.208] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x3ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.208] ReadFile (in: hFile=0x21d4, lpBuffer=0xbd4f780, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd4f790, lpOverlapped=0x0 | out: lpBuffer=0xbd4f780*, lpNumberOfBytesRead=0xbd4f790*=0x4, lpOverlapped=0x0) returned 1 [0175.211] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0175.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.211] NtQuerySystemTime (in: CurrentTime=0xbd4f718 | out: CurrentTime=0xbd4f718*=132482710836984000) returned 0x0 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6e626a8b [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6488c12d [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6d352619 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x3ea935c1 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x55fc7099 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x7420b2f6 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x43904f5d [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x7578c995 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x98c00a3 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x1d33bb14 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x33a5bde9 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x66b4e007 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x40810ee7 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6d60e447 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x26d31d75 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x44ea2cb8 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x68314ad2 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6333ff76 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x14111264 [0175.211] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x60dd09ea [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x64970fbf [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x12bf7a18 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x7afe43cd [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x1a1f8e64 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x3dbcb3fb [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x354afbc6 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x3c6a9b9a [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x19173385 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x6ea0eeec [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x74ef5dd6 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x34b4e7a7 [0175.212] RtlRandomEx (in: Seed=0xbd4f710 | out: Seed=0xbd4f710) returned 0x2c88bcf1 [0175.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0175.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0175.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0175.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699a120 [0175.222] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.222] ReadFile (in: hFile=0x21d4, lpBuffer=0x699a120, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd4f718, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesRead=0xbd4f718*=0x3c00, lpOverlapped=0x0) returned 1 [0175.223] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689bc20 [0175.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0175.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69acd48 [0175.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0175.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0175.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0175.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0175.224] WriteFile (in: hFile=0x21d4, lpBuffer=0x69acd48*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd4f718, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesWritten=0xbd4f718*=0x3c00, lpOverlapped=0x0) returned 1 [0175.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0175.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0175.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f100 [0175.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0175.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1fa40 [0175.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0175.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4830 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a0d8) returned 1 [0175.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54dd8 [0175.818] SetFilePointerEx (in: hFile=0x21d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.818] WriteFile (in: hFile=0x21d4, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xbd4f798, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xbd4f798*=0x118, lpOverlapped=0x0) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa40) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f100) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0176.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0176.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3dafa48 [0176.937] wcscpy (in: _Dest=0x3dafa48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" [0176.937] wcscat (in: _Dest=0x3dafa48, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.ac3a86" [0176.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.ac3a86", NtPathName=0xbd4f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x68abdc0 [0182.670] FlushFileBuffers (hFile=0x21d4) returned 1 [0182.675] CloseHandle (hObject=0x21d4) returned 1 [0182.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2a40 [0182.676] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.676] wcscat (in: _Dest=0x3ea2a40, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 [0182.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 Thread: id = 4417 os_tid = 0x2204 [0171.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal")) returned 0x2020 [0173.226] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x20) returned 1 [0175.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d0 [0175.207] GetFileSizeEx (in: hFile=0x21d0, lpFileSize=0xbd9fef4 | out: lpFileSize=0xbd9fef4*=0) returned 1 [0175.207] FlushFileBuffers (hFile=0x21d0) returned 1 [0175.840] CloseHandle (hObject=0x21d0) returned 1 [0175.840] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x2020) returned 1 [0175.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 4418 os_tid = 0x2208 [0171.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 0x2020 [0173.195] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README", dwFileAttributes=0x20) returned 1 [0173.195] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21c4 [0173.195] GetFileSizeEx (in: hFile=0x21c4, lpFileSize=0xbeffa8c | out: lpFileSize=0xbeffa8c*=180) returned 1 [0173.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0173.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0173.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0173.195] NtQuerySystemTime (in: CurrentTime=0xbeffa00 | out: CurrentTime=0xbeffa00*=132482710816860000) returned 0x0 [0173.195] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2698385f [0173.195] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x346ab267 [0173.195] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x285d514 [0173.195] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0xc4cd6bb [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x132e197d [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x25c9ac05 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2e896a11 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x43d4305e [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2eb3a59d [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x454d7d16 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x5a204a4a [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x424a3f96 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x483756c5 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2e6a6614 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2ac3bd75 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x3a568a8b [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x38855bea [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x6f32fa50 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2aacd3b4 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x6c1de5c0 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x54643216 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x59e0af62 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x56c7872e [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x5daa8f1d [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x7b50a6a [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x4611ce89 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x2869d348 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0xd169d5b [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x41213237 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x29003166 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x4ce70676 [0173.196] RtlRandomEx (in: Seed=0xbeff9f8 | out: Seed=0xbeff9f8) returned 0x115aab2d [0173.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0173.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0173.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0173.208] ReadFile (in: hFile=0x21c4, lpBuffer=0x69838f0, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0xbeff9f4, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xbeff9f4*=0xb4, lpOverlapped=0x0) returned 1 [0173.210] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.210] WriteFile (in: hFile=0x21c4, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0xbeff9f8, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xbeff9f8*=0xb4, lpOverlapped=0x0) returned 1 [0174.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0174.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0174.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0174.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0174.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0174.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0174.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822798) returned 1 [0174.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b528 [0174.036] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.036] WriteFile (in: hFile=0x21c4, lpBuffer=0x2f96e8*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xbeffa80, lpOverlapped=0x0 | out: lpBuffer=0x2f96e8*, lpNumberOfBytesWritten=0xbeffa80*=0xfe, lpOverlapped=0x0) returned 1 [0174.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0174.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0174.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0174.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0174.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0174.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0174.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0174.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0174.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5be40 [0174.426] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" [0174.426] wcscat (in: _Dest=0x3e5be40, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.ac3a86" [0174.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.ac3a86", NtPathName=0xbeff9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2688 [0186.749] FlushFileBuffers (hFile=0x21c4) returned 1 [0188.899] CloseHandle (hObject=0x21c4) returned 1 [0188.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3540 [0188.919] wcscpy (in: _Dest=0x3ea3540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0188.919] wcscat (in: _Dest=0x3ea3540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0188.919] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0188.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3540) returned 1 [0188.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 4419 os_tid = 0x220c [0172.513] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 0x2020 [0173.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", dwFileAttributes=0x20) returned 1 [0175.173] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21c8 [0175.173] GetFileSizeEx (in: hFile=0x21c8, lpFileSize=0x973f8b4 | out: lpFileSize=0x973f8b4*=30617) returned 1 [0175.173] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x7795, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.173] ReadFile (in: hFile=0x21c8, lpBuffer=0x973f890, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x973f8a0, lpOverlapped=0x0 | out: lpBuffer=0x973f890*, lpNumberOfBytesRead=0x973f8a0*=0x4, lpOverlapped=0x0) returned 1 [0175.176] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0175.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0175.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.176] NtQuerySystemTime (in: CurrentTime=0x973f828 | out: CurrentTime=0x973f828*=132482710836672000) returned 0x0 [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x677205ac [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x7545444e [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x7017a95f [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x230ab135 [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x6c4f32b1 [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x41ae00aa [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x446c5187 [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x5320a05e [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x415d388f [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x12f181d [0175.176] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x76bb61e7 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x2a9b1320 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x2b7d351b [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x759da419 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x2a07ee7 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x26fabe33 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x533dbaaf [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x64f527e0 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x6a99643e [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x5558bcea [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x14a2a859 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x50b71385 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x7e31c96d [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x25a8df6a [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x4bce6097 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x6c4438e7 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x74e44e4d [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x55b36a67 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x3770064c [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x5dc45f62 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0x3c84d255 [0175.177] RtlRandomEx (in: Seed=0x973f820 | out: Seed=0x973f820) returned 0xa64c49d [0175.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0175.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0175.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0175.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0175.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0175.188] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.188] ReadFile (in: hFile=0x21c8, lpBuffer=0x698ed08, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x973f828, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesRead=0x973f828*=0x3c00, lpOverlapped=0x0) returned 1 [0175.189] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a288 [0175.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0175.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0175.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0175.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6992910 [0175.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0175.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0175.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0175.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0175.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a288) returned 1 [0175.190] WriteFile (in: hFile=0x21c8, lpBuffer=0x6992910*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x973f828, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesWritten=0x973f828*=0x3c00, lpOverlapped=0x0) returned 1 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0175.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1fb00 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0175.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3f1f380 [0175.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0175.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0175.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0175.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d553a0 [0175.816] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.816] WriteFile (in: hFile=0x21c8, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x973f8a8, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0x973f8a8*=0x116, lpOverlapped=0x0) returned 1 [0176.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0176.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f380) returned 1 [0176.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0176.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fb00) returned 1 [0176.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0176.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0176.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0176.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0176.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3daf388 [0176.962] wcscpy (in: _Dest=0x3daf388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" [0176.962] wcscat (in: _Dest=0x3daf388, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.ac3a86" [0176.962] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.ac3a86", NtPathName=0x973f820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e36ad0 [0182.692] FlushFileBuffers (hFile=0x21c8) returned 1 [0182.695] CloseHandle (hObject=0x21c8) returned 1 [0182.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2780 [0182.696] wcscpy (in: _Dest=0x3ea2780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.696] wcscat (in: _Dest=0x3ea2780, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2780) returned 1 [0182.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 4420 os_tid = 0x2214 [0172.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur")) returned 0x20 [0172.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0172.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.514] GetLastError () returned 0x5 [0172.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0172.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 4421 os_tid = 0x2218 [0172.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur")) returned 0x20 [0173.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0173.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.766] GetLastError () returned 0x5 [0173.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0173.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 4422 os_tid = 0x221c [0172.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur")) returned 0x20 [0173.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0173.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.768] GetLastError () returned 0x5 [0173.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0173.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 4423 os_tid = 0x2220 [0172.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur")) returned 0x20 [0173.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0173.770] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.770] GetLastError () returned 0x5 [0173.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0173.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 4424 os_tid = 0x2224 [0172.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur")) returned 0x20 [0173.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0173.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.772] GetLastError () returned 0x5 [0173.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0173.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 4425 os_tid = 0x2228 [0172.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur")) returned 0x20 [0173.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0173.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.774] GetLastError () returned 0x5 [0173.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0173.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 4426 os_tid = 0x222c [0172.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur")) returned 0x20 [0173.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0173.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.795] GetLastError () returned 0x5 [0173.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0173.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 4427 os_tid = 0x2230 [0172.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur")) returned 0x20 [0173.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0173.798] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.799] GetLastError () returned 0x5 [0173.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0173.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 4428 os_tid = 0x2234 [0172.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur")) returned 0x20 [0173.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0173.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.776] GetLastError () returned 0x5 [0173.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0173.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 4429 os_tid = 0x2238 [0172.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur")) returned 0x20 [0173.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0173.432] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.432] GetLastError () returned 0x5 [0173.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0173.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 4430 os_tid = 0x223c [0172.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur")) returned 0x20 [0173.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0173.760] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.760] GetLastError () returned 0x5 [0173.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0173.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 4431 os_tid = 0x2240 [0172.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur")) returned 0x20 [0173.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0173.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.778] GetLastError () returned 0x5 [0173.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0173.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 4432 os_tid = 0x2244 [0172.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur")) returned 0x20 [0173.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0173.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.780] GetLastError () returned 0x5 [0173.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0173.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 4433 os_tid = 0x2248 [0172.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur")) returned 0x20 [0173.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0173.793] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.793] GetLastError () returned 0x5 [0173.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0173.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 4434 os_tid = 0x224c [0172.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur")) returned 0x20 [0173.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0173.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.764] GetLastError () returned 0x5 [0173.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0173.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 4435 os_tid = 0x2250 [0173.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky")) returned 0x20 [0173.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0173.254] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.254] GetLastError () returned 0x5 [0173.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0173.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd248) returned 1 Thread: id = 4436 os_tid = 0x2254 [0173.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky")) returned 0x20 [0173.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0173.257] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.257] GetLastError () returned 0x5 [0173.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0173.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2370) returned 1 Thread: id = 4437 os_tid = 0x2258 [0173.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky")) returned 0x20 [0173.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0173.258] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.258] GetLastError () returned 0x5 [0173.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0173.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcee8) returned 1 Thread: id = 4438 os_tid = 0x225c [0173.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky")) returned 0x20 [0173.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0173.260] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.260] GetLastError () returned 0x5 [0173.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0173.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3118) returned 1 Thread: id = 4439 os_tid = 0x2260 [0173.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky")) returned 0x20 [0173.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0173.261] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.261] GetLastError () returned 0x5 [0173.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0173.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 4440 os_tid = 0x2264 [0173.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky")) returned 0x20 [0173.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0173.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.275] GetLastError () returned 0x5 [0173.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0173.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 4441 os_tid = 0x2268 [0173.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0173.277] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0173.277] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0173.277] wcscat (in: _Dest=0x66dc288, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*" [0173.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0173.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0174.429] wcscmp (_String1=".", _String2=".") returned 0 [0174.429] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.429] wcscmp (_String1="..", _String2=".") returned 1 [0174.429] wcscmp (_String1="..", _String2="..") returned 0 [0174.429] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0174.429] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0174.429] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0174.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cff8 [0174.429] wcscpy (in: _Dest=0x3e5cff8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0174.429] wcscat (in: _Dest=0x3e5cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0174.429] wcscat (in: _Dest=0x3e5cff8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" [0176.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0176.208] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0176.208] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0176.208] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0176.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0176.208] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0176.208] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0176.208] wcscat (in: _Dest=0x697e228, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" [0176.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0176.209] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0176.209] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0176.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0176.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 [0176.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 4442 os_tid = 0x226c [0173.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky")) returned 0x20 [0174.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0174.043] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.043] GetLastError () returned 0x5 [0174.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0174.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 4443 os_tid = 0x2270 [0173.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky")) returned 0x20 [0174.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0174.041] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.042] GetLastError () returned 0x5 [0174.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0174.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 4444 os_tid = 0x2274 [0173.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky")) returned 0x20 [0174.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0174.040] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.040] GetLastError () returned 0x5 [0174.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0174.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 4445 os_tid = 0x2278 [0173.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau")) returned 0x20 [0174.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0174.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.522] GetLastError () returned 0x5 [0174.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0174.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23680) returned 1 Thread: id = 4446 os_tid = 0x227c [0173.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x66d0240 [0173.280] wcscpy (in: _Dest=0x66d0240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0173.280] wcscat (in: _Dest=0x66d0240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0173.280] wcscat (in: _Dest=0x66d0240, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*" [0173.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d6a8 [0173.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0174.509] wcscmp (_String1=".", _String2=".") returned 0 [0174.509] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.509] wcscmp (_String1="..", _String2=".") returned 1 [0174.509] wcscmp (_String1="..", _String2="..") returned 0 [0174.509] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="LOUISV~1")) returned 1 [0174.509] wcscmp (_String1="Louisville", _String2=".") returned 1 [0174.509] wcscmp (_String1="Louisville", _String2="..") returned 1 [0174.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ef0d0 [0174.509] wcscpy (in: _Dest=0x66ef0d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0174.509] wcscat (in: _Dest=0x66ef0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0174.509] wcscat (in: _Dest=0x66ef0d0, _Source="Louisville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" [0175.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ef0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0175.425] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 1 [0175.425] wcscmp (_String1="Monticello", _String2=".") returned 1 [0175.425] wcscmp (_String1="Monticello", _String2="..") returned 1 [0175.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eec08 [0175.425] wcscpy (in: _Dest=0x66eec08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0175.425] wcscat (in: _Dest=0x66eec08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0175.425] wcscat (in: _Dest=0x66eec08, _Source="Monticello" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" [0175.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0175.426] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 0 [0175.427] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0175.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d6a8) returned 1 [0175.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0175.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 4447 os_tid = 0x2280 [0173.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz")) returned 0x20 [0174.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0174.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.507] GetLastError () returned 0x5 [0174.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0174.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 Thread: id = 4448 os_tid = 0x2284 [0173.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima")) returned 0x20 [0174.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0174.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.500] GetLastError () returned 0x5 [0174.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0174.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 4449 os_tid = 0x2288 [0173.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles")) returned 0x20 [0174.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0174.135] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.136] GetLastError () returned 0x5 [0174.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0174.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 Thread: id = 4450 os_tid = 0x228c [0173.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio")) returned 0x20 [0174.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0174.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.520] GetLastError () returned 0x5 [0174.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0174.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 Thread: id = 4451 os_tid = 0x2290 [0173.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua")) returned 0x20 [0174.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0174.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.518] GetLastError () returned 0x5 [0174.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0174.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 4452 os_tid = 0x2294 [0173.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus")) returned 0x20 [0174.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0174.505] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.506] GetLastError () returned 0x5 [0174.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0174.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 4453 os_tid = 0x2298 [0173.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique")) returned 0x20 [0174.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0174.517] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.517] GetLastError () returned 0x5 [0174.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0174.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 Thread: id = 4454 os_tid = 0x229c [0173.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros")) returned 0x20 [0174.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0174.515] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.515] GetLastError () returned 0x5 [0174.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0174.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 4455 os_tid = 0x22a0 [0173.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan")) returned 0x20 [0174.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0174.513] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.514] GetLastError () returned 0x5 [0174.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0174.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 4456 os_tid = 0x22a4 [0173.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee")) returned 0x20 [0174.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0174.504] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.504] GetLastError () returned 0x5 [0174.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0174.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 4457 os_tid = 0x22a8 [0173.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida")) returned 0x20 [0174.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0174.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.502] GetLastError () returned 0x5 [0174.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0174.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 4458 os_tid = 0x22ac [0173.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla")) returned 0x20 [0174.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0174.512] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.512] GetLastError () returned 0x5 [0174.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0174.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 Thread: id = 4459 os_tid = 0x22b0 [0173.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city")) returned 0x20 [0174.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0174.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.510] GetLastError () returned 0x5 [0174.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0174.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 Thread: id = 4460 os_tid = 0x22b4 [0173.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat")) returned 0x20 [0173.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0173.289] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.290] GetLastError () returned 0x5 [0173.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0173.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac678) returned 1 Thread: id = 4461 os_tid = 0x22b8 [0173.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat")) returned 0x20 [0173.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0173.292] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.292] GetLastError () returned 0x5 [0173.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0173.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 4462 os_tid = 0x22bc [0173.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat")) returned 0x20 [0173.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0173.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.300] GetLastError () returned 0x5 [0173.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0173.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 4463 os_tid = 0x22c0 [0173.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat")) returned 0x20 [0173.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0173.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.304] GetLastError () returned 0x5 [0173.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0173.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 4464 os_tid = 0x22c4 [0173.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat")) returned 0x20 [0173.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0173.306] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.306] GetLastError () returned 0x5 [0173.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0173.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2700) returned 1 Thread: id = 4465 os_tid = 0x22c8 [0173.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat")) returned 0x20 [0173.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0173.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.308] GetLastError () returned 0x5 [0173.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0173.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 4466 os_tid = 0x22cc [0173.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat")) returned 0x20 [0173.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0173.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.310] GetLastError () returned 0x5 [0173.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0173.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 4467 os_tid = 0x22d0 [0173.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat")) returned 0x20 [0173.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0173.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.312] GetLastError () returned 0x5 [0173.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0173.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 4468 os_tid = 0x22d4 [0173.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat")) returned 0x20 [0173.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0173.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.315] GetLastError () returned 0x5 [0173.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0173.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a00) returned 1 Thread: id = 4469 os_tid = 0x22d8 [0173.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat")) returned 0x20 [0173.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0173.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.318] GetLastError () returned 0x5 [0173.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0173.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 Thread: id = 4470 os_tid = 0x22dc [0173.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat")) returned 0x20 [0173.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0173.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.319] GetLastError () returned 0x5 [0173.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0173.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b28) returned 1 Thread: id = 4471 os_tid = 0x22e0 [0173.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat")) returned 0x20 [0173.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0173.322] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.322] GetLastError () returned 0x5 [0173.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0173.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 4472 os_tid = 0x22e4 [0173.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat")) returned 0x20 [0173.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0173.324] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.324] GetLastError () returned 0x5 [0173.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0173.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 4473 os_tid = 0x22e8 [0173.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dcd38 [0173.326] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0173.326] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0173.326] wcscat (in: _Dest=0x66dcd38, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*" [0173.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0173.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0173.327] wcscmp (_String1=".", _String2=".") returned 0 [0173.327] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.327] wcscmp (_String1="..", _String2=".") returned 1 [0173.327] wcscmp (_String1="..", _String2="..") returned 0 [0173.327] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0173.327] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0173.327] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0173.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cab8 [0173.327] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0173.327] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0173.327] wcscat (in: _Dest=0x3e5cab8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" [0173.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0173.329] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0173.329] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0173.329] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0173.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5ca10 [0173.329] wcscpy (in: _Dest=0x3e5ca10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0173.329] wcscat (in: _Dest=0x3e5ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0173.330] wcscat (in: _Dest=0x3e5ca10, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" [0173.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0173.331] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0173.331] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0173.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0173.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 [0173.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 4474 os_tid = 0x22ec [0173.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat")) returned 0x20 [0173.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0173.346] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.347] GetLastError () returned 0x5 [0173.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0173.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 4475 os_tid = 0x22f0 [0173.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat")) returned 0x20 [0173.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0173.349] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.349] GetLastError () returned 0x5 [0173.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0173.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 4476 os_tid = 0x22f4 [0173.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat")) returned 0x20 [0173.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0173.352] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.352] GetLastError () returned 0x5 [0173.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0173.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac288) returned 1 Thread: id = 4477 os_tid = 0x22f8 [0173.354] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 0x2020 [0174.542] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", dwFileAttributes=0x20) returned 1 [0174.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2224 [0174.736] GetFileSizeEx (in: hFile=0x2224, lpFileSize=0xbcdfe9c | out: lpFileSize=0xbcdfe9c*=12288) returned 1 [0174.736] SetFilePointerEx (in: hFile=0x2224, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.736] ReadFile (in: hFile=0x2224, lpBuffer=0xbcdfe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcdfe88, lpOverlapped=0x0 | out: lpBuffer=0xbcdfe78*, lpNumberOfBytesRead=0xbcdfe88*=0x4, lpOverlapped=0x0) returned 1 [0174.739] SetFilePointerEx (in: hFile=0x2224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0174.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0174.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0174.740] NtQuerySystemTime (in: CurrentTime=0xbcdfe10 | out: CurrentTime=0xbcdfe10*=132482710832304000) returned 0x0 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x207fd608 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x399203a6 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x54871b0f [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x722632e [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x50190453 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x3d83ae6 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0xfb7a7dc [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x734668a5 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x69f8948 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x5df26153 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x5b4c4bf7 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x3fc71946 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x50af4fd7 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x29cab192 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x46467c7b [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x6685f26a [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x2472e496 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x67441045 [0174.740] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x3c9bbc6 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x7f950686 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x757a1b9d [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x46401647 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x71359059 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x3c008b8b [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x61e381fb [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0xe8018aa [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x61a71291 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x741ca465 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x1bf40a4a [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x65163249 [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x13d10cff [0174.741] RtlRandomEx (in: Seed=0xbcdfe08 | out: Seed=0xbcdfe08) returned 0x1b4d15d3 [0174.752] ReadFile (in: hFile=0x2224, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0xbcdfe04, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xbcdfe04*=0x3000, lpOverlapped=0x0) returned 1 [0174.753] SetFilePointerEx (in: hFile=0x2224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.753] WriteFile (in: hFile=0x2224, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0xbcdfe08, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xbcdfe08*=0x3000, lpOverlapped=0x0) returned 1 [0175.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0175.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0175.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0175.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0175.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0175.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0175.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe900) returned 1 [0175.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0175.813] SetFilePointerEx (in: hFile=0x2224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.814] WriteFile (in: hFile=0x2224, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xbcdfe90, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xbcdfe90*=0x104, lpOverlapped=0x0) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0176.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0176.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0176.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e180 [0176.934] wcscpy (in: _Dest=0x697e180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" [0176.934] wcscat (in: _Dest=0x697e180, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.ac3a86" [0176.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.ac3a86", NtPathName=0xbcdfe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3dafbc8 [0182.652] FlushFileBuffers (hFile=0x2224) returned 1 [0182.655] CloseHandle (hObject=0x2224) returned 1 [0182.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2360 [0182.656] wcscpy (in: _Dest=0x3ea2360, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0182.656] wcscat (in: _Dest=0x3ea2360, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0182.656] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0182.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2360) returned 1 [0182.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 4478 os_tid = 0x22fc [0173.355] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal")) returned 0x2020 [0175.359] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x20) returned 1 [0184.416] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23e8 [0184.416] GetFileSizeEx (in: hFile=0x23e8, lpFileSize=0xbadfd9c | out: lpFileSize=0xbadfd9c*=0) returned 1 [0184.416] FlushFileBuffers (hFile=0x23e8) returned 1 [0185.562] CloseHandle (hObject=0x23e8) returned 1 [0185.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x2020) returned 1 [0186.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 Thread: id = 4479 os_tid = 0x2300 [0173.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 0x2020 [0178.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", dwFileAttributes=0x20) returned 1 [0183.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd0 [0183.723] GetFileSizeEx (in: hFile=0x1cd0, lpFileSize=0xc02fef4 | out: lpFileSize=0xc02fef4*=20480) returned 1 [0183.723] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.723] ReadFile (in: hFile=0x1cd0, lpBuffer=0xc02fed0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc02fee0, lpOverlapped=0x0 | out: lpBuffer=0xc02fed0*, lpNumberOfBytesRead=0xc02fee0*=0x4, lpOverlapped=0x0) returned 1 [0183.737] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0183.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0183.737] NtQuerySystemTime (in: CurrentTime=0xc02fe68 | out: CurrentTime=0xc02fe68*=132482710922160000) returned 0x0 [0183.737] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x1e66f863 [0183.737] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x7b6ae1dd [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x74cbf805 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x3649cc7f [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x5b48b8e1 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x49eea003 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x544b867f [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x3add4640 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x2caa1b6c [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x1139daa7 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x2fd6e256 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x74ab91d [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x1c16ce7a [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x6a8608b9 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x645c8568 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x269ea125 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x105caf80 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x2873feaf [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x11636a71 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x5c710f3b [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x76a438f2 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x51a30f2d [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x2bdc1bf2 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x1909c260 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x45dc2141 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x68450a94 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x69bd0caa [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x6695dc28 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x40851944 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x297a06b6 [0183.738] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0xbf6794d [0183.739] RtlRandomEx (in: Seed=0xc02fe60 | out: Seed=0xc02fe60) returned 0x354df05c [0183.748] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.748] ReadFile (in: hFile=0x1cd0, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc02fe68, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0xc02fe68*=0x3c00, lpOverlapped=0x0) returned 1 [0183.763] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6899e50 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d058 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0183.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0183.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0183.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0183.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e50) returned 1 [0183.764] WriteFile (in: hFile=0x1cd0, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc02fe68, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0xc02fe68*=0x3c00, lpOverlapped=0x0) returned 1 [0184.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0184.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0184.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0184.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0184.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0184.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0184.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0184.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb930 [0184.193] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.193] WriteFile (in: hFile=0x1cd0, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xc02fee8, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0xc02fee8*=0x104, lpOverlapped=0x0) returned 1 [0184.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0184.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0184.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e228 [0184.197] wcscpy (in: _Dest=0x697e228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" [0184.197] wcscat (in: _Dest=0x697e228, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.ac3a86" [0184.197] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.ac3a86", NtPathName=0xc02fe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332da8 [0185.657] FlushFileBuffers (hFile=0x1cd0) returned 1 [0185.660] CloseHandle (hObject=0x1cd0) returned 1 [0185.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea24c0 [0185.892] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0185.892] wcscat (in: _Dest=0x3ea24c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0185.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0185.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 [0185.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 4480 os_tid = 0x2304 [0173.357] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal")) returned 0x2020 [0178.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x20) returned 1 [0185.141] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f4 [0185.141] GetFileSizeEx (in: hFile=0x21f4, lpFileSize=0xaa5fedc | out: lpFileSize=0xaa5fedc*=0) returned 1 [0185.141] FlushFileBuffers (hFile=0x21f4) returned 1 [0185.562] CloseHandle (hObject=0x21f4) returned 1 [0185.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x2020) returned 1 [0188.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a10) returned 1 Thread: id = 4481 os_tid = 0x2308 [0173.358] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 0x2020 [0177.356] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", dwFileAttributes=0x20) returned 1 [0186.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef4 [0186.722] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0xbbefa44 | out: lpFileSize=0xbbefa44*=632) returned 1 [0186.722] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x274, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.722] ReadFile (in: hFile=0xef4, lpBuffer=0xbbefa20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbefa30, lpOverlapped=0x0 | out: lpBuffer=0xbbefa20*, lpNumberOfBytesRead=0xbbefa30*=0x4, lpOverlapped=0x0) returned 1 [0186.725] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0186.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0186.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0186.726] NtQuerySystemTime (in: CurrentTime=0xbbef9b8 | out: CurrentTime=0xbbef9b8*=132482710951956000) returned 0x0 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x51869970 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x756d68e9 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x4d244ad4 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x15c2e8c2 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x34cc260f [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x332f91b [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x54cdd854 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x70a72c86 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x2c6f50b [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x4792b0d2 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x60b924e2 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x2354ca08 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x490a8048 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x6258ba2a [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0xaae99bb [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x744b5c0f [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x73531290 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x4ccaaf5b [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x30b31b43 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x5f6e1631 [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x4326c34f [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x300a83d [0186.726] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x5c471315 [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0xae0be6 [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0xe2f09c [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x6b085e95 [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x8d537fc [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x6e591f99 [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x6c8307ea [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x60c5d1ba [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x5ec757f9 [0186.727] RtlRandomEx (in: Seed=0xbbef9b0 | out: Seed=0xbbef9b0) returned 0x722a6eb3 [0186.737] ReadFile (in: hFile=0xef4, lpBuffer=0x699a120, nNumberOfBytesToRead=0x278, lpNumberOfBytesRead=0xbbef9ac, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesRead=0xbbef9ac*=0x278, lpOverlapped=0x0) returned 1 [0186.737] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.737] WriteFile (in: hFile=0xef4, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0xbbef9b0, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0xbbef9b0*=0x278, lpOverlapped=0x0) returned 1 [0188.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1b08 [0188.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0188.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0188.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0188.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0188.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0188.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68229d8) returned 1 [0188.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3f199d8 [0188.491] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.492] WriteFile (in: hFile=0xef4, lpBuffer=0x6755e60*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xbbefa38, lpOverlapped=0x0 | out: lpBuffer=0x6755e60*, lpNumberOfBytesWritten=0xbbefa38*=0x114, lpOverlapped=0x0) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0188.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0188.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2518 [0188.823] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" [0188.823] wcscat (in: _Dest=0x3ee2518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.ac3a86" [0188.823] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.ac3a86", NtPathName=0xbbef9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36ad0 [0188.833] FlushFileBuffers (hFile=0xef4) returned 1 [0188.899] CloseHandle (hObject=0xef4) returned 1 [0188.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3280 [0188.901] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0188.901] wcscat (in: _Dest=0x3ea3280, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0188.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0188.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3280) returned 1 [0188.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3540) returned 1 Thread: id = 4482 os_tid = 0x230c [0173.358] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 0x2020 [0178.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", dwFileAttributes=0x20) returned 1 [0183.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914 [0183.720] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0xc0af894 | out: lpFileSize=0xc0af894*=131072) returned 1 [0183.720] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.720] ReadFile (in: hFile=0x1914, lpBuffer=0xc0af870, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0af880, lpOverlapped=0x0 | out: lpBuffer=0xc0af870*, lpNumberOfBytesRead=0xc0af880*=0x4, lpOverlapped=0x0) returned 1 [0183.725] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0183.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0183.726] NtQuerySystemTime (in: CurrentTime=0xc0af808 | out: CurrentTime=0xc0af808*=132482710922004000) returned 0x0 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x55a4a195 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x76b573e7 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x737736f0 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x246be647 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x40eaba9d [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x2ecf9ece [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x70317bf9 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x5f2ed6ab [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x5847be10 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x49a10ee8 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x33fc03a6 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0xebd07c5 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x72014983 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x23c990c5 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x3345e0e8 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x5b40aea6 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x7fd2810 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x299038fa [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x22a76065 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x4eb4e7b0 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x5cc288c9 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x691e3fee [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x7e7082bc [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x527c1e28 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x3566d541 [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x60ca7dee [0183.726] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x3c615799 [0183.727] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0xb335fa7 [0183.727] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x22e415b1 [0183.727] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x17480e36 [0183.727] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x7732008e [0183.727] RtlRandomEx (in: Seed=0xc0af800 | out: Seed=0xc0af800) returned 0x4b3eab8d [0183.737] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.737] ReadFile (in: hFile=0x1914, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0183.760] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6899e50 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d058 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0183.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0183.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0183.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0183.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e50) returned 1 [0183.761] WriteFile (in: hFile=0x1914, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0184.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0184.188] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.189] ReadFile (in: hFile=0x1914, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0184.190] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d418 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0184.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.191] WriteFile (in: hFile=0x1914, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0184.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0184.210] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.210] ReadFile (in: hFile=0x1914, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0184.211] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d418 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0184.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0184.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0184.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0184.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.211] WriteFile (in: hFile=0x1914, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0af808, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xc0af808*=0x3c00, lpOverlapped=0x0) returned 1 [0184.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0184.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0184.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0184.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0184.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e80 [0184.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0184.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823878) returned 1 [0184.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x2fce88 [0184.884] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.884] WriteFile (in: hFile=0x1914, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xc0af888, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0xc0af888*=0x14c, lpOverlapped=0x0) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0185.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0185.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3330 [0185.383] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" [0185.383] wcscat (in: _Dest=0x3ea3330, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.ac3a86" [0185.383] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.ac3a86", NtPathName=0xc0af800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f840 [0186.422] FlushFileBuffers (hFile=0x1914) returned 1 [0186.423] CloseHandle (hObject=0x1914) returned 1 [0186.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3330 [0186.464] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.464] wcscat (in: _Dest=0x3ea3330, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0186.464] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0186.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3330) returned 1 [0186.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 Thread: id = 4483 os_tid = 0x2310 [0173.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3ac0 [0173.359] wcscpy (in: _Dest=0x3ea3ac0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0173.359] wcscat (in: _Dest=0x3ea3ac0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0173.359] wcscat (in: _Dest=0x3ea3ac0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*" [0173.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0173.359] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0174.454] wcscmp (_String1=".", _String2=".") returned 0 [0174.454] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.454] wcscmp (_String1="..", _String2=".") returned 1 [0174.454] wcscmp (_String1="..", _String2="..") returned 0 [0174.454] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0174.454] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0174.454] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0174.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0174.454] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0174.454] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0174.454] wcscat (in: _Dest=0x3dadb30, _Source="_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0175.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0175.747] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0175.748] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0175.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0175.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3ac0) returned 1 [0175.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 4484 os_tid = 0x2314 [0173.359] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020 [0178.522] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", dwFileAttributes=0x20) returned 1 [0182.817] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d0 [0185.825] GetFileSizeEx (in: hFile=0x16d0, lpFileSize=0xc4bfbbc | out: lpFileSize=0xc4bfbbc*=69632) returned 1 [0185.825] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.825] ReadFile (in: hFile=0x16d0, lpBuffer=0xc4bfb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc4bfba8, lpOverlapped=0x0 | out: lpBuffer=0xc4bfb98*, lpNumberOfBytesRead=0xc4bfba8*=0x4, lpOverlapped=0x0) returned 1 [0186.010] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0186.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0186.010] NtQuerySystemTime (in: CurrentTime=0xc4bfb30 | out: CurrentTime=0xc4bfb30*=132482710944936000) returned 0x0 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0xfef80f5 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x59138bc9 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x6d54609 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x29baf3f4 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x12a339f [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x8b92b04 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0xa5a7522 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x7a6f1b24 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x3e4e9f51 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x6430172a [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x5dc517e2 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x68e85aec [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x461317b5 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x12a85500 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x6338533 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x7a21fd6b [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x5e1c41c0 [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x49cc413a [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x1f91574f [0186.010] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x3ffc3243 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x6be4ac86 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0xc1c69c2 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0xc930a4b [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x4bc655fd [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x74addec3 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x4ad1b999 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x6a190b07 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x7ac4cca4 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x25eca771 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x4d177b76 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x7b356dc0 [0186.011] RtlRandomEx (in: Seed=0xc4bfb28 | out: Seed=0xc4bfb28) returned 0x8253970 [0186.037] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.037] ReadFile (in: hFile=0x16d0, lpBuffer=0x6730308, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc4bfb30, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0xc4bfb30*=0x3c00, lpOverlapped=0x0) returned 1 [0186.151] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a9d8 [0186.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d8c8 [0186.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0186.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0186.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0186.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0186.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0186.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0186.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0186.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a9d8) returned 1 [0186.153] WriteFile (in: hFile=0x16d0, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc4bfb30, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xc4bfb30*=0x3c00, lpOverlapped=0x0) returned 1 [0186.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0186.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0186.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ace0 [0186.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0186.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5a4c0 [0186.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0186.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0186.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0186.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67521b0 [0186.795] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.796] WriteFile (in: hFile=0x16d0, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xc4bfbb0, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0xc4bfbb0*=0x102, lpOverlapped=0x0) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0188.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0188.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e030 [0188.876] wcscpy (in: _Dest=0x697e030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0188.876] wcscat (in: _Dest=0x697e030, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.ac3a86" [0188.876] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.ac3a86", NtPathName=0xc4bfb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3daf088 [0188.879] FlushFileBuffers (hFile=0x16d0) returned 1 [0188.909] CloseHandle (hObject=0x16d0) returned 1 [0188.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3540 [0188.910] wcscpy (in: _Dest=0x3ea3540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0188.910] wcscat (in: _Dest=0x3ea3540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" [0188.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\ac3a86-readme.txt")) returned 0x2020 [0188.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3540) returned 1 [0188.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2960) returned 1 Thread: id = 4485 os_tid = 0x2318 [0173.360] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal")) returned 0x2020 [0178.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x20) returned 1 [0183.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb70 [0183.718] GetFileSizeEx (in: hFile=0xb70, lpFileSize=0xafaf94c | out: lpFileSize=0xafaf94c*=0) returned 1 [0183.718] FlushFileBuffers (hFile=0xb70) returned 1 [0185.085] CloseHandle (hObject=0xb70) returned 1 [0185.085] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x2020) returned 1 [0189.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 4486 os_tid = 0x231c [0173.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus")) returned 0x20 [0173.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0173.362] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.362] GetLastError () returned 0x5 [0173.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0173.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac168) returned 1 Thread: id = 4487 os_tid = 0x2320 [0173.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus")) returned 0x20 [0173.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0173.364] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.364] GetLastError () returned 0x5 [0173.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0173.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 Thread: id = 4488 os_tid = 0x2324 [0173.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674ccf8 [0173.366] wcscpy (in: _Dest=0x674ccf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0173.366] wcscat (in: _Dest=0x674ccf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0173.366] wcscat (in: _Dest=0x674ccf8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*" [0173.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0173.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0174.455] wcscmp (_String1=".", _String2=".") returned 0 [0174.455] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.455] wcscmp (_String1="..", _String2=".") returned 1 [0174.455] wcscmp (_String1="..", _String2="..") returned 0 [0174.455] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0174.455] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0174.455] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0174.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cab8 [0174.455] wcscpy (in: _Dest=0x3e5cab8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0174.455] wcscat (in: _Dest=0x3e5cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0174.455] wcscat (in: _Dest=0x3e5cab8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" [0175.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0175.750] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0175.750] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0175.750] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0175.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e228 [0175.750] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0175.750] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0175.750] wcscat (in: _Dest=0x697e228, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" [0175.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0175.751] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0175.751] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0175.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0175.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 [0175.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 4489 os_tid = 0x2328 [0173.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus")) returned 0x20 [0174.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0174.084] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.084] GetLastError () returned 0x5 [0174.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0174.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 4490 os_tid = 0x232c [0173.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus")) returned 0x20 [0174.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0174.082] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.083] GetLastError () returned 0x5 [0174.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0174.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 4491 os_tid = 0x2330 [0173.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus")) returned 0x20 [0174.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0174.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.081] GetLastError () returned 0x5 [0174.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0174.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 4492 os_tid = 0x2334 [0173.368] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol")) returned 0x2020 [0173.369] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", dwFileAttributes=0x20) returned 1 [0174.664] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1af8 [0174.664] GetFileSizeEx (in: hFile=0x1af8, lpFileSize=0xc82fddc | out: lpFileSize=0xc82fddc*=291) returned 1 [0174.664] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.664] ReadFile (in: hFile=0x1af8, lpBuffer=0xc82fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc82fdc8, lpOverlapped=0x0 | out: lpBuffer=0xc82fdb8*, lpNumberOfBytesRead=0xc82fdc8*=0x4, lpOverlapped=0x0) returned 1 [0174.666] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0174.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0174.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0174.666] NtQuerySystemTime (in: CurrentTime=0xc82fd50 | out: CurrentTime=0xc82fd50*=132482710831524000) returned 0x0 [0174.666] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x1b83eb93 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x1dfc8692 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x54cef49f [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x440cbb96 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x1047ea02 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x3d9fcacb [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x27cb6aa9 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x59055846 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x75e11ae2 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x4e280cde [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x5d730244 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x50634231 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x1394b6c6 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x3221683b [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x458ee2f8 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x537e8679 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0xf0b3f14 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x4186d327 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0xc90297f [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x6ab22d27 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x2ab1064e [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x51ca45b1 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x113fc8c7 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x10bd4995 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x64707693 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x66c331f5 [0174.667] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x972cc8a [0174.668] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x1fbbcc7c [0174.668] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x2569c26 [0174.668] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x3acbdb97 [0174.668] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0xa773a96 [0174.668] RtlRandomEx (in: Seed=0xc82fd48 | out: Seed=0xc82fd48) returned 0x211a8b36 [0174.678] ReadFile (in: hFile=0x1af8, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0xc82fd44, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xc82fd44*=0x123, lpOverlapped=0x0) returned 1 [0174.679] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.679] WriteFile (in: hFile=0x1af8, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0xc82fd48, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xc82fd48*=0x123, lpOverlapped=0x0) returned 1 [0174.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0174.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5ab0 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822240 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1b510 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0174.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5210 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0174.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0174.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0174.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0174.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822240) returned 1 [0174.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec710 [0174.943] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.943] WriteFile (in: hFile=0x1af8, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xc82fdd0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xc82fdd0*=0x10a, lpOverlapped=0x0) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0174.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0174.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8a48 [0174.949] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0174.949] wcscat (in: _Dest=0x3ea8a48, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.ac3a86" [0174.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.ac3a86", NtPathName=0xc82fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f9a00 [0174.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 [0174.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4b38) returned 1 [0174.953] NtQueryInformationFile (in: FileHandle=0x1af8, IoStatusBlock=0xc82fd20, FileInformation=0xc82fd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc82fd20, FileInformation=0xc82fd28) returned 0x0 [0174.954] NtSetInformationFile (FileHandle=0x1af8, IoStatusBlock=0xc82fd20, FileInformation=0xc82fd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0174.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 [0174.955] FlushFileBuffers (hFile=0x1af8) returned 1 [0175.841] CloseHandle (hObject=0x1af8) returned 1 [0175.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8a48 [0175.842] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0175.842] wcscat (in: _Dest=0x3ea8a48, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\AC3A86-Readme.txt" [0175.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\ac3a86-readme.txt")) returned 0xffffffff [0175.843] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1af8 [0175.843] WriteFile (in: hFile=0x1af8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc82fd64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc82fd64*=0x8b9, lpOverlapped=0x0) returned 1 [0175.845] CloseHandle (hObject=0x1af8) returned 1 [0175.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 [0175.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57230) returned 1 Thread: id = 4493 os_tid = 0x2338 [0173.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx")) returned 0x20 [0173.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.450] GetLastError () returned 0x5 [0173.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8b8) returned 1 Thread: id = 4494 os_tid = 0x233c [0173.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx")) returned 0x20 [0173.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.452] GetLastError () returned 0x5 [0173.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e2d0) returned 1 Thread: id = 4495 os_tid = 0x2340 [0173.455] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 0x2020 [0182.888] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", dwFileAttributes=0x20) returned 1 [0184.033] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2038 [0184.033] GetFileSizeEx (in: hFile=0x2038, lpFileSize=0x8eef804 | out: lpFileSize=0x8eef804*=45056) returned 1 [0184.033] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0xaffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.033] ReadFile (in: hFile=0x2038, lpBuffer=0x8eef7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eef7f0, lpOverlapped=0x0 | out: lpBuffer=0x8eef7e0*, lpNumberOfBytesRead=0x8eef7f0*=0x4, lpOverlapped=0x0) returned 1 [0184.035] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0184.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0184.035] NtQuerySystemTime (in: CurrentTime=0x8eef778 | out: CurrentTime=0x8eef778*=132482710925124000) returned 0x0 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4899bb43 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x338c6dda [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x256f7aa [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0xf63609 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x5d0b8d92 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x5202f8ec [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0xb31cae0 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x3afd6fdb [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4e7d081c [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x26d3641e [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x659494a7 [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x2099649f [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x76ce3daa [0184.035] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x429f31af [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4f6314c8 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4886785c [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x49b9ece3 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x23bcf6a6 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x1459516d [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4345a1a7 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x323f6636 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x9dc9bfb [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x11b84617 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x194f18dc [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x100c2859 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x379c6762 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x6f9eec33 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x4b6f18d9 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x76117729 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x50ed57c3 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x24209c02 [0184.036] RtlRandomEx (in: Seed=0x8eef770 | out: Seed=0x8eef770) returned 0x476be1d0 [0184.045] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.045] ReadFile (in: hFile=0x2038, lpBuffer=0x6730308, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eef778, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0x8eef778*=0x3c00, lpOverlapped=0x0) returned 1 [0184.439] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6060 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0184.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0184.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0184.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0184.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0184.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6060) returned 1 [0184.440] WriteFile (in: hFile=0x2038, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eef778, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0x8eef778*=0x3c00, lpOverlapped=0x0) returned 1 [0186.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0186.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0186.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5a6f0 [0186.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0186.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5aa88 [0186.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0186.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0186.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0186.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758588 [0186.031] SetFilePointerEx (in: hFile=0x2038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.031] WriteFile (in: hFile=0x2038, lpBuffer=0x6758588*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x8eef7f8, lpOverlapped=0x0 | out: lpBuffer=0x6758588*, lpNumberOfBytesWritten=0x8eef7f8*=0xfe, lpOverlapped=0x0) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758588) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0186.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0186.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea22b0 [0186.760] wcscpy (in: _Dest=0x3ea22b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0186.760] wcscat (in: _Dest=0x3ea22b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.ac3a86" [0186.760] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.ac3a86", NtPathName=0x8eef770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682de78 [0186.767] FlushFileBuffers (hFile=0x2038) returned 1 [0188.475] CloseHandle (hObject=0x2038) returned 1 [0188.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2688 [0188.783] wcscpy (in: _Dest=0x3ee2688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0188.783] wcscat (in: _Dest=0x3ee2688, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" [0188.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt")) returned 0xffffffff [0188.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd14 [0188.851] WriteFile (in: hFile=0xd14, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8eef78c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8eef78c*=0x8b9, lpOverlapped=0x0) returned 1 [0188.853] CloseHandle (hObject=0xd14) returned 1 [0188.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 [0188.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 4496 os_tid = 0x2344 [0173.456] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 0x2020 [0182.886] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", dwFileAttributes=0x20) returned 1 [0183.960] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x150c [0183.960] GetFileSizeEx (in: hFile=0x150c, lpFileSize=0x92dfaac | out: lpFileSize=0x92dfaac*=270336) returned 1 [0183.960] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x41ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.961] ReadFile (in: hFile=0x150c, lpBuffer=0x92dfa88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x92dfa98, lpOverlapped=0x0 | out: lpBuffer=0x92dfa88*, lpNumberOfBytesRead=0x92dfa98*=0x4, lpOverlapped=0x0) returned 1 [0183.962] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0183.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0183.963] NtQuerySystemTime (in: CurrentTime=0x92dfa20 | out: CurrentTime=0x92dfa20*=132482710924344000) returned 0x0 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x27d81770 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x7fed510e [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x6291057f [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x5b748e0c [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x2fcee76a [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x78be2c83 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x791da40d [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x193352f7 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0xf3d781c [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x1575cc87 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x7fb63826 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x10d703e6 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0xf9a0f0f [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x8664445 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x7f8afa32 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x470080f7 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x208b40b1 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x5aa2ee2b [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x4720be05 [0183.963] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x10b1b6e5 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0xd190996 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x4f4fd402 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x7645abe3 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x28c195bd [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x13b44d03 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x204740e2 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x83a682e [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x3916f5c9 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x1086de25 [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x707ad42d [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x175d148a [0183.964] RtlRandomEx (in: Seed=0x92dfa18 | out: Seed=0x92dfa18) returned 0x5e77c8b9 [0183.974] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.974] ReadFile (in: hFile=0x150c, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0184.429] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b050 [0184.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0184.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0184.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0184.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0184.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0184.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0184.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0184.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0184.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0184.430] WriteFile (in: hFile=0x150c, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0186.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0186.022] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.022] ReadFile (in: hFile=0x150c, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0186.022] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b710 [0186.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0186.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0186.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0186.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0186.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0186.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0186.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0186.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.023] WriteFile (in: hFile=0x150c, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0186.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0186.831] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.831] ReadFile (in: hFile=0x150c, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0186.832] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff3b0 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0186.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0186.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0186.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0186.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.833] WriteFile (in: hFile=0x150c, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x92dfa20, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x92dfa20*=0x3c00, lpOverlapped=0x0) returned 1 [0188.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0188.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8d4a8 [0188.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0188.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5dc38 [0188.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0188.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0188.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0188.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0188.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba28) returned 1 [0188.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x2fce88 [0188.511] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.512] WriteFile (in: hFile=0x150c, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x92dfaa0, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x92dfaa0*=0x13e, lpOverlapped=0x0) returned 1 [0188.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0188.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0188.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0188.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0188.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 [0188.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0188.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0188.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0188.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3a10 [0188.819] wcscpy (in: _Dest=0x3ea3a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0188.819] wcscat (in: _Dest=0x3ea3a10, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.ac3a86" [0188.819] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.ac3a86", NtPathName=0x92dfa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f5e8 [0188.872] FlushFileBuffers (hFile=0x150c) returned 1 [0188.902] CloseHandle (hObject=0x150c) returned 1 [0188.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2740 [0188.903] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0188.903] wcscat (in: _Dest=0x3ee2740, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" [0188.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt")) returned 0x2020 [0188.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 [0188.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 4497 os_tid = 0x2348 [0173.456] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 0x2020 [0182.887] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", dwFileAttributes=0x20) returned 1 [0183.994] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd4c [0183.994] GetFileSizeEx (in: hFile=0xd4c, lpFileSize=0xa11f87c | out: lpFileSize=0xa11f87c*=8192) returned 1 [0183.994] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.994] ReadFile (in: hFile=0xd4c, lpBuffer=0xa11f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa11f868, lpOverlapped=0x0 | out: lpBuffer=0xa11f858*, lpNumberOfBytesRead=0xa11f868*=0x4, lpOverlapped=0x0) returned 1 [0183.996] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0183.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0183.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0183.997] NtQuerySystemTime (in: CurrentTime=0xa11f7f0 | out: CurrentTime=0xa11f7f0*=132482710924812000) returned 0x0 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x79a9f70d [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x28d9208f [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x4e8e8121 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x572cbbff [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x6c5b7286 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x1936ea5 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x263c72a5 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x1d9d5487 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x26ab0bb4 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x2dae8f45 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x349b23cb [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x20eb7dfa [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x6dad8dc9 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x2d69dc5e [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x3834129e [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x6ab12af9 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0xd7e9be6 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x55e295cf [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x303de452 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x4bc30f7b [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x20024eb0 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x38704048 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x76c18889 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0xe855828 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x7b1cb1a3 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x5bd60427 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x63a23829 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x105c0565 [0183.997] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x563e4832 [0183.998] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0xc470078 [0183.998] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x22c74292 [0183.998] RtlRandomEx (in: Seed=0xa11f7e8 | out: Seed=0xa11f7e8) returned 0x13b025f5 [0184.006] ReadFile (in: hFile=0xd4c, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xa11f7e4, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0xa11f7e4*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.008] WriteFile (in: hFile=0xd4c, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xa11f7e8, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0xa11f7e8*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0184.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4268 [0184.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0184.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0184.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0184.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ef4268 [0184.011] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.011] WriteFile (in: hFile=0xd4c, lpBuffer=0x6818f78*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xa11f870, lpOverlapped=0x0 | out: lpBuffer=0x6818f78*, lpNumberOfBytesWritten=0xa11f870*=0xfe, lpOverlapped=0x0) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0184.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0184.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea22b0 [0184.016] wcscpy (in: _Dest=0x3ea22b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0184.016] wcscat (in: _Dest=0x3ea22b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.ac3a86" [0184.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.ac3a86", NtPathName=0xa11f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682de78 [0186.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 [0186.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a808) returned 1 [0186.753] NtQueryInformationFile (in: FileHandle=0xd4c, IoStatusBlock=0xa11f7c0, FileInformation=0xa11f7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa11f7c0, FileInformation=0xa11f7c8) returned 0x0 [0186.753] NtSetInformationFile (FileHandle=0xd4c, IoStatusBlock=0xa11f7c0, FileInformation=0xa11f7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0186.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea22b0) returned 1 [0186.754] FlushFileBuffers (hFile=0xd4c) returned 1 [0188.477] CloseHandle (hObject=0xd4c) returned 1 [0188.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee27f8 [0188.804] wcscpy (in: _Dest=0x3ee27f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0188.804] wcscat (in: _Dest=0x3ee27f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" [0188.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt")) returned 0x2020 [0188.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee27f8) returned 1 [0188.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 4498 os_tid = 0x234c [0173.456] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3")) returned 0x2020 [0182.887] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", dwFileAttributes=0x20) returned 1 [0184.013] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x128c [0184.014] GetFileSizeEx (in: hFile=0x128c, lpFileSize=0x9eaf924 | out: lpFileSize=0x9eaf924*=4202496) returned 1 [0184.017] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x401ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.017] ReadFile (in: hFile=0x128c, lpBuffer=0x9eaf900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9eaf910, lpOverlapped=0x0 | out: lpBuffer=0x9eaf900*, lpNumberOfBytesRead=0x9eaf910*=0x4, lpOverlapped=0x0) returned 1 [0184.018] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0184.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4588 [0184.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.019] NtQuerySystemTime (in: CurrentTime=0x9eaf898 | out: CurrentTime=0x9eaf898*=132482710924968000) returned 0x0 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x394576df [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x2916df0e [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x7e064365 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x4baf30ea [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0xc834a30 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x3452ae29 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x629eb8a8 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x100653e5 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x1d58008f [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x549df394 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x4344ba5 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x238aba56 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x31399bc [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x6191f248 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0xe54fc3e [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x13099165 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x11076865 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x2c48e913 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x62915727 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x15018797 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x40819922 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x49cc0792 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x7e38c2b9 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x699fc745 [0184.019] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x3ee5b3 [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x2b1f3a38 [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x466a7bdd [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x66695ba4 [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x6e1ad50a [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x775f2b33 [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x64811d30 [0184.020] RtlRandomEx (in: Seed=0x9eaf890 | out: Seed=0x9eaf890) returned 0x4a28024d [0184.028] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.028] ReadFile (in: hFile=0x128c, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0184.031] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0184.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4358 [0184.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0184.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.031] WriteFile (in: hFile=0x128c, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0184.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0184.503] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.504] ReadFile (in: hFile=0x128c, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0184.507] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b050 [0184.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc88 [0184.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0184.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0184.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0184.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0184.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0184.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0184.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0184.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0184.508] WriteFile (in: hFile=0x128c, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0190.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0190.759] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.759] ReadFile (in: hFile=0x128c, lpBuffer=0x6728af8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesRead=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0190.765] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fda60 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0190.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x672c700 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0190.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0190.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0190.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fda60) returned 1 [0190.767] WriteFile (in: hFile=0x128c, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9eaf898, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0x9eaf898*=0x3c00, lpOverlapped=0x0) returned 1 [0201.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0201.624] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.624] WriteFile (in: hFile=0x128c, lpBuffer=0x67786e8*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x9eaf918, lpOverlapped=0x0 | out: lpBuffer=0x67786e8*, lpNumberOfBytesWritten=0x9eaf918*=0x13e, lpOverlapped=0x0) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67786e8) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0203.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0203.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3750 [0203.353] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0203.353] wcscat (in: _Dest=0x3ea3750, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.ac3a86" [0203.353] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.ac3a86", NtPathName=0x9eaf890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f520 [0206.264] FlushFileBuffers (hFile=0x128c) returned 1 [0206.270] CloseHandle (hObject=0x128c) returned 1 [0206.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee23a8 [0206.627] wcscpy (in: _Dest=0x3ee23a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0206.627] wcscat (in: _Dest=0x3ee23a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" [0206.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt")) returned 0x2020 [0206.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee23a8) returned 1 [0206.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 Thread: id = 4499 os_tid = 0x2350 [0173.457] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 0x2020 [0182.887] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", dwFileAttributes=0x20) returned 1 [0183.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1504 [0183.977] GetFileSizeEx (in: hFile=0x1504, lpFileSize=0x8bafc64 | out: lpFileSize=0x8bafc64*=524656) returned 1 [0183.977] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x8016c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.977] ReadFile (in: hFile=0x1504, lpBuffer=0x8bafc40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8bafc50, lpOverlapped=0x0 | out: lpBuffer=0x8bafc40*, lpNumberOfBytesRead=0x8bafc50*=0x4, lpOverlapped=0x0) returned 1 [0183.979] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0183.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0183.979] NtQuerySystemTime (in: CurrentTime=0x8bafbd8 | out: CurrentTime=0x8bafbd8*=132482710924500000) returned 0x0 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x57fb823c [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x4e526488 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x1c3b552f [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x3368f5ba [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x11324125 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x79faeb66 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x13106591 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x1e468fb9 [0183.979] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x10dc8fa5 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x476629 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x367fbc02 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x4c978e2d [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x52ceee3c [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x597ba8c1 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x7cbefbb8 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x7db79e42 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x3efb131f [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x3a924cc2 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x6108574c [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x183d60d3 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x153eeb9e [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x778acff0 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x32afef6e [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x6c631794 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x3c405266 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x5dc626f [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x56846127 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x2360b942 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x3476d7f9 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x5edac7c9 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x42c745c0 [0183.980] RtlRandomEx (in: Seed=0x8bafbd0 | out: Seed=0x8bafbd0) returned 0x1258a78d [0183.989] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.989] ReadFile (in: hFile=0x1504, lpBuffer=0x67212e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0183.991] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6724ef0 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bc8 [0183.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0183.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0183.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0183.992] WriteFile (in: hFile=0x1504, lpBuffer=0x6724ef0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesWritten=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0184.501] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.501] ReadFile (in: hFile=0x1504, lpBuffer=0x67212e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.526] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822af8 [0184.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0184.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0184.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0184.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b4558 [0184.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0184.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0184.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0184.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822af8) returned 1 [0184.527] WriteFile (in: hFile=0x1504, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0185.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0185.568] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.568] ReadFile (in: hFile=0x1504, lpBuffer=0x67212e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0185.569] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b758 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0185.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0185.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0185.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0185.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b758) returned 1 [0185.570] WriteFile (in: hFile=0x1504, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bafbd8, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0x8bafbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0188.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0188.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0188.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0188.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3f221f8 [0188.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0188.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0188.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0188.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0188.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba28) returned 1 [0188.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x29fc20 [0188.509] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.509] WriteFile (in: hFile=0x1504, lpBuffer=0x29fc20*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x8bafc58, lpOverlapped=0x0 | out: lpBuffer=0x29fc20*, lpNumberOfBytesWritten=0x8bafc58*=0x13c, lpOverlapped=0x0) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f221f8) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f21fb8) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0188.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0188.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3280 [0188.817] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0188.817] wcscat (in: _Dest=0x3ea3280, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.ac3a86" [0188.817] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.ac3a86", NtPathName=0x8bafbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ec88 [0188.874] FlushFileBuffers (hFile=0x1504) returned 1 [0188.906] CloseHandle (hObject=0x1504) returned 1 [0188.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2740 [0188.908] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0188.908] wcscat (in: _Dest=0x3ee2740, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" [0188.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\ac3a86-readme.txt")) returned 0x2020 [0188.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 [0188.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 4500 os_tid = 0x2354 [0173.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17070 [0173.497] wcscpy (in: _Dest=0x3e17070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0173.497] wcscat (in: _Dest=0x3e17070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0173.497] wcscat (in: _Dest=0x3e17070, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0173.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0173.498] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0173.866] wcscmp (_String1=".", _String2=".") returned 0 [0173.866] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.866] wcscmp (_String1="..", _String2=".") returned 1 [0173.866] wcscmp (_String1="..", _String2="..") returned 0 [0173.867] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7d70bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0173.867] wcscmp (_String1="000003.log", _String2=".") returned 1 [0173.867] wcscmp (_String1="000003.log", _String2="..") returned 1 [0173.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec828 [0173.867] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0173.867] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0173.867] wcscat (in: _Dest=0x3dec828, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" [0174.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0174.835] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d4250, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0174.835] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0174.835] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0174.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec2b0 [0174.835] wcscpy (in: _Dest=0x3dec2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0174.835] wcscat (in: _Dest=0x3dec2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.835] wcscat (in: _Dest=0x3dec2b0, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" [0174.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0174.869] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0174.869] wcscmp (_String1="LOCK", _String2=".") returned 1 [0174.869] wcscmp (_String1="LOCK", _String2="..") returned 1 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f96e8 [0174.870] wcscpy (in: _Dest=0x2f96e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0174.870] wcscat (in: _Dest=0x2f96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.870] wcscat (in: _Dest=0x2f96e8, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" [0174.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2f96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0174.872] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0174.872] wcscmp (_String1="LOG", _String2=".") returned 1 [0174.872] wcscmp (_String1="LOG", _String2="..") returned 1 [0174.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2fafa8 [0174.872] wcscpy (in: _Dest=0x2fafa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0174.872] wcscat (in: _Dest=0x2fafa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.872] wcscat (in: _Dest=0x2fafa8, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" [0174.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fafa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0174.874] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0174.874] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0174.874] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0174.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55028 [0174.874] wcscpy (in: _Dest=0x3d55028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0174.874] wcscat (in: _Dest=0x3d55028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.874] wcscat (in: _Dest=0x3d55028, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" [0174.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0174.876] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0174.876] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0174.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0174.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17070) returned 1 [0174.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 Thread: id = 4501 os_tid = 0x2358 [0173.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp")) returned 0x2020 [0173.868] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x20) returned 1 [0174.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe80 [0174.682] GetFileSizeEx (in: hFile=0xe80, lpFileSize=0x450fd94 | out: lpFileSize=0x450fd94*=0) returned 1 [0174.682] FlushFileBuffers (hFile=0xe80) returned 1 [0174.957] CloseHandle (hObject=0xe80) returned 1 [0174.957] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x2020) returned 1 [0174.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 4502 os_tid = 0x235c [0173.501] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp")) returned 0x2020 [0173.869] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x20) returned 1 [0174.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0174.395] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0x7f6fa5c | out: lpFileSize=0x7f6fa5c*=0) returned 1 [0174.395] FlushFileBuffers (hFile=0x108c) returned 1 [0174.398] CloseHandle (hObject=0x108c) returned 1 [0174.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x2020) returned 1 [0174.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 Thread: id = 4503 os_tid = 0x2360 [0173.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\sofia")) returned 0x20 [0173.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia", dwFileAttributes=0x20) returned 0 [0173.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\sofia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.516] GetLastError () returned 0x5 [0173.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia", dwFileAttributes=0x20) returned 0 [0173.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 4504 os_tid = 0x2364 [0173.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\stockholm")) returned 0x20 [0173.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm", dwFileAttributes=0x20) returned 0 [0173.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\stockholm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.518] GetLastError () returned 0x5 [0173.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm", dwFileAttributes=0x20) returned 0 [0173.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 4505 os_tid = 0x2368 [0173.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tallinn")) returned 0x20 [0173.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn", dwFileAttributes=0x20) returned 0 [0173.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tallinn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.520] GetLastError () returned 0x5 [0173.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn", dwFileAttributes=0x20) returned 0 [0173.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 4506 os_tid = 0x236c [0173.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tirane")) returned 0x20 [0173.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane", dwFileAttributes=0x20) returned 0 [0173.523] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tirane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.524] GetLastError () returned 0x5 [0173.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane", dwFileAttributes=0x20) returned 0 [0173.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d2a0) returned 1 Thread: id = 4507 os_tid = 0x2370 [0173.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\uzhgorod")) returned 0x20 [0173.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod", dwFileAttributes=0x20) returned 0 [0173.526] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\uzhgorod"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.526] GetLastError () returned 0x5 [0173.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod", dwFileAttributes=0x20) returned 0 [0173.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29aa0) returned 1 Thread: id = 4508 os_tid = 0x2374 [0173.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vaduz")) returned 0x20 [0174.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz", dwFileAttributes=0x20) returned 0 [0174.141] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vaduz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.142] GetLastError () returned 0x5 [0174.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz", dwFileAttributes=0x20) returned 0 [0174.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 4509 os_tid = 0x2378 [0173.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vienna")) returned 0x20 [0174.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna", dwFileAttributes=0x20) returned 0 [0174.143] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vienna"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.143] GetLastError () returned 0x5 [0174.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna", dwFileAttributes=0x20) returned 0 [0174.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 4510 os_tid = 0x237c [0173.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius")) returned 0x20 [0174.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0174.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.144] GetLastError () returned 0x5 [0174.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0174.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 4511 os_tid = 0x2380 [0173.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd")) returned 0x20 [0174.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0174.151] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.152] GetLastError () returned 0x5 [0174.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0174.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 4512 os_tid = 0x2384 [0173.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\warsaw")) returned 0x20 [0174.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw", dwFileAttributes=0x20) returned 0 [0174.153] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\warsaw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.153] GetLastError () returned 0x5 [0174.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw", dwFileAttributes=0x20) returned 0 [0174.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 4513 os_tid = 0x2388 [0173.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zaporozhye")) returned 0x20 [0173.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye", dwFileAttributes=0x20) returned 0 [0173.885] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zaporozhye"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.886] GetLastError () returned 0x5 [0173.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye", dwFileAttributes=0x20) returned 0 [0173.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 4514 os_tid = 0x238c [0173.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zurich")) returned 0x20 [0173.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich", dwFileAttributes=0x20) returned 0 [0173.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zurich"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.888] GetLastError () returned 0x5 [0173.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich", dwFileAttributes=0x20) returned 0 [0173.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 4515 os_tid = 0x2390 [0173.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx")) returned 0x20 [0173.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.648] GetLastError () returned 0x5 [0173.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 4516 os_tid = 0x2394 [0173.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx")) returned 0x20 [0173.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.654] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.654] GetLastError () returned 0x5 [0173.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 4517 os_tid = 0x2398 [0173.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 0x20 [0173.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0173.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.890] GetLastError () returned 0x5 [0173.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0173.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 4518 os_tid = 0x239c [0173.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 0x20 [0173.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0173.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.893] GetLastError () returned 0x5 [0173.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0173.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 4519 os_tid = 0x23a0 [0173.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 0x20 [0176.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0176.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.045] GetLastError () returned 0x5 [0178.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0178.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea35f0) returned 1 Thread: id = 4520 os_tid = 0x23a4 [0173.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 0x20 [0177.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.043] GetLastError () returned 0x5 [0178.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1998) returned 1 Thread: id = 4521 os_tid = 0x23a8 [0173.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 0x20 [0175.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0176.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.695] GetLastError () returned 0x5 [0177.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0177.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3490) returned 1 Thread: id = 4522 os_tid = 0x23ac [0173.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 0x20 [0177.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0177.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.698] GetLastError () returned 0x5 [0177.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0177.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee25d0) returned 1 Thread: id = 4523 os_tid = 0x23b0 [0173.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 0x20 [0174.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.084] GetLastError () returned 0x5 [0176.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0176.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2518) returned 1 Thread: id = 4524 os_tid = 0x23b4 [0173.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 0x20 [0178.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.047] GetLastError () returned 0x5 [0178.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 4525 os_tid = 0x23b8 [0173.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau")) returned 0x20 [0173.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0173.899] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.899] GetLastError () returned 0x5 [0173.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0173.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 4526 os_tid = 0x23bc [0173.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe")) returned 0x20 [0173.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0173.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.902] GetLastError () returned 0x5 [0173.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0173.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 4527 os_tid = 0x23c0 [0173.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat")) returned 0x20 [0173.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0173.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.904] GetLastError () returned 0x5 [0173.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0173.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 4528 os_tid = 0x23c4 [0173.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad")) returned 0x20 [0175.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0175.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.498] GetLastError () returned 0x5 [0175.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0175.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 4529 os_tid = 0x23c8 [0173.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain")) returned 0x20 [0175.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0175.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.500] GetLastError () returned 0x5 [0175.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0175.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 4530 os_tid = 0x23cc [0173.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku")) returned 0x20 [0175.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0175.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.502] GetLastError () returned 0x5 [0175.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0175.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 4531 os_tid = 0x23d0 [0173.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok")) returned 0x20 [0175.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0175.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.503] GetLastError () returned 0x5 [0175.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0175.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 4532 os_tid = 0x23d4 [0173.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut")) returned 0x20 [0175.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0175.505] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.505] GetLastError () returned 0x5 [0175.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0175.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 4533 os_tid = 0x23d8 [0173.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek")) returned 0x20 [0175.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0175.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.507] GetLastError () returned 0x5 [0175.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0175.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 4534 os_tid = 0x23dc [0173.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei")) returned 0x20 [0174.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0174.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.940] GetLastError () returned 0x5 [0174.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0174.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 4535 os_tid = 0x23e0 [0173.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan")) returned 0x20 [0175.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0175.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.495] GetLastError () returned 0x5 [0175.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0175.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 4536 os_tid = 0x23e4 [0173.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing")) returned 0x20 [0175.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0175.127] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.127] GetLastError () returned 0x5 [0175.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0175.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 4537 os_tid = 0x23e8 [0173.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo")) returned 0x20 [0175.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0175.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.497] GetLastError () returned 0x5 [0175.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0175.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 4538 os_tid = 0x23ec [0174.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus")) returned 0x20 [0175.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0175.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.493] GetLastError () returned 0x5 [0175.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0175.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 4539 os_tid = 0x23f0 [0174.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl")) returned 0x20 [0174.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0174.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.165] GetLastError () returned 0x5 [0174.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0174.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 4540 os_tid = 0x23f4 [0174.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl")) returned 0x20 [0174.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0174.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.167] GetLastError () returned 0x5 [0174.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0174.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 4541 os_tid = 0x23f8 [0174.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl")) returned 0x20 [0174.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0174.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.168] GetLastError () returned 0x5 [0174.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0174.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 4542 os_tid = 0x23fc [0174.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl")) returned 0x20 [0174.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0174.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.170] GetLastError () returned 0x5 [0174.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0174.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 4543 os_tid = 0x2400 [0174.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20 [0174.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0174.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.548] GetLastError () returned 0x5 [0174.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0174.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 Thread: id = 4544 os_tid = 0x2404 [0174.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl")) returned 0x20 [0174.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0174.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.230] GetLastError () returned 0x5 [0174.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0174.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 4545 os_tid = 0x2408 [0174.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl")) returned 0x20 [0174.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0174.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.234] GetLastError () returned 0x5 [0174.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0174.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 4546 os_tid = 0x240c [0174.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl")) returned 0x20 [0174.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0174.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.228] GetLastError () returned 0x5 [0174.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0174.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 4547 os_tid = 0x2410 [0174.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa")) returned 0x20 [0174.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0174.752] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.755] GetLastError () returned 0x5 [0174.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0174.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 4548 os_tid = 0x2414 [0174.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu")) returned 0x20 [0174.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0174.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.543] GetLastError () returned 0x5 [0174.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0174.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 4549 os_tid = 0x2418 [0174.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake")) returned 0x20 [0174.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0174.546] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.546] GetLastError () returned 0x5 [0174.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0174.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 4550 os_tid = 0x241c [0174.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis")) returned 0x20 [0174.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0174.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.545] GetLastError () returned 0x5 [0174.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0174.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 4551 os_tid = 0x2420 [0174.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp")) returned 0x20 [0174.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0174.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.176] GetLastError () returned 0x5 [0174.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 4552 os_tid = 0x2424 [0174.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp")) returned 0x20 [0174.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0174.177] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.177] GetLastError () returned 0x5 [0174.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0174.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 4553 os_tid = 0x2428 [0174.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx")) returned 0x20 [0174.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0174.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.550] GetLastError () returned 0x5 [0174.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0174.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 4554 os_tid = 0x242c [0174.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths")) returned 0x20 [0174.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0174.239] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.239] GetLastError () returned 0x5 [0174.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0174.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf448) returned 1 Thread: id = 4555 os_tid = 0x2430 [0174.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca")) returned 0x20 [0174.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0174.240] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.240] GetLastError () returned 0x5 [0174.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0174.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf508) returned 1 Thread: id = 4556 os_tid = 0x2434 [0174.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp")) returned 0x20 [0174.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0174.241] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.241] GetLastError () returned 0x5 [0174.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0174.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf5c8) returned 1 Thread: id = 4557 os_tid = 0x2438 [0174.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx")) returned 0x20 [0174.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0174.242] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.242] GetLastError () returned 0x5 [0174.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0174.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf688) returned 1 Thread: id = 4558 os_tid = 0x243c [0174.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp")) returned 0x20 [0174.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0174.238] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.238] GetLastError () returned 0x5 [0174.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0174.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf748) returned 1 Thread: id = 4559 os_tid = 0x2440 [0174.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp")) returned 0x20 [0174.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0174.237] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.237] GetLastError () returned 0x5 [0174.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0174.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf808) returned 1 Thread: id = 4560 os_tid = 0x2444 [0174.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex")) returned 0x20 [0174.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0174.256] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.257] GetLastError () returned 0x5 [0174.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0174.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 4561 os_tid = 0x2448 [0174.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx")) returned 0x20 [0174.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0174.255] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.256] GetLastError () returned 0x5 [0174.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0174.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8c8) returned 1 Thread: id = 4562 os_tid = 0x244c [0174.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env")) returned 0x20 [0174.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0174.254] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.255] GetLastError () returned 0x5 [0174.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0174.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f9d0) returned 1 Thread: id = 4563 os_tid = 0x2450 [0174.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca")) returned 0x20 [0174.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0174.253] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.253] GetLastError () returned 0x5 [0174.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0174.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf988) returned 1 Thread: id = 4564 os_tid = 0x2454 [0174.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp")) returned 0x20 [0174.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0174.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.252] GetLastError () returned 0x5 [0174.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0174.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa48) returned 1 Thread: id = 4565 os_tid = 0x2458 [0174.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths")) returned 0x20 [0174.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0174.243] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.243] GetLastError () returned 0x5 [0174.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0174.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafb08) returned 1 Thread: id = 4566 os_tid = 0x245c [0174.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp")) returned 0x20 [0174.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0174.251] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.251] GetLastError () returned 0x5 [0174.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0174.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 4567 os_tid = 0x2460 [0174.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx")) returned 0x20 [0174.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0174.250] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.250] GetLastError () returned 0x5 [0174.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0174.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafbc8) returned 1 Thread: id = 4568 os_tid = 0x2464 [0174.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca")) returned 0x20 [0174.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0174.249] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.249] GetLastError () returned 0x5 [0174.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0174.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafc88) returned 1 Thread: id = 4569 os_tid = 0x2468 [0174.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp")) returned 0x20 [0174.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0174.248] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.248] GetLastError () returned 0x5 [0174.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0174.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafd48) returned 1 Thread: id = 4570 os_tid = 0x246c [0174.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx")) returned 0x20 [0174.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0174.247] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.247] GetLastError () returned 0x5 [0174.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0174.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe08) returned 1 Thread: id = 4571 os_tid = 0x2470 [0174.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp")) returned 0x20 [0174.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0174.246] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.246] GetLastError () returned 0x5 [0174.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0174.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafec8) returned 1 Thread: id = 4572 os_tid = 0x2474 [0174.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths")) returned 0x20 [0174.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0174.245] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.245] GetLastError () returned 0x5 [0174.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0174.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 4573 os_tid = 0x2478 [0174.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca")) returned 0x20 [0174.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0174.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.244] GetLastError () returned 0x5 [0174.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0174.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0048) returned 1 Thread: id = 4574 os_tid = 0x247c [0174.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp")) returned 0x20 [0174.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0174.552] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.552] GetLastError () returned 0x5 [0174.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0174.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 Thread: id = 4575 os_tid = 0x2480 [0174.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp")) returned 0x20 [0174.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0174.557] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.557] GetLastError () returned 0x5 [0174.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0174.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8c8) returned 1 Thread: id = 4576 os_tid = 0x2484 [0174.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx")) returned 0x20 [0174.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0174.559] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.559] GetLastError () returned 0x5 [0174.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0174.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf988) returned 1 Thread: id = 4577 os_tid = 0x2488 [0174.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca")) returned 0x20 [0175.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0175.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.988] GetLastError () returned 0x5 [0175.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0175.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafa48) returned 1 Thread: id = 4578 os_tid = 0x248c [0174.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp")) returned 0x20 [0176.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0176.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.315] GetLastError () returned 0x5 [0176.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0176.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafbc8) returned 1 Thread: id = 4579 os_tid = 0x2490 [0174.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp")) returned 0x20 [0176.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0176.316] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.316] GetLastError () returned 0x5 [0176.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0176.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 4580 os_tid = 0x2494 [0174.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx")) returned 0x20 [0175.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0175.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.987] GetLastError () returned 0x5 [0175.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0175.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafc88) returned 1 Thread: id = 4581 os_tid = 0x2498 [0174.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp")) returned 0x20 [0175.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0175.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.986] GetLastError () returned 0x5 [0175.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0175.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafd48) returned 1 Thread: id = 4582 os_tid = 0x249c [0174.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor")) returned 0x20 [0174.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0174.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.565] GetLastError () returned 0x5 [0174.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0174.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 4583 os_tid = 0x24a0 [0174.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor")) returned 0x20 [0174.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0174.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.567] GetLastError () returned 0x5 [0174.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0174.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 4584 os_tid = 0x24a4 [0174.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor")) returned 0x20 [0174.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0174.569] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.569] GetLastError () returned 0x5 [0174.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0174.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 4585 os_tid = 0x24a8 [0174.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor")) returned 0x20 [0178.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0178.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.280] GetLastError () returned 0x5 [0178.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0178.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 4586 os_tid = 0x24ac [0174.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor")) returned 0x20 [0178.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0178.278] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.278] GetLastError () returned 0x5 [0178.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0178.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 4587 os_tid = 0x24b0 [0174.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor")) returned 0x20 [0178.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0178.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.276] GetLastError () returned 0x5 [0178.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0178.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 4588 os_tid = 0x24b4 [0174.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor")) returned 0x20 [0175.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0175.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.307] GetLastError () returned 0x5 [0177.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0177.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3b8) returned 1 Thread: id = 4589 os_tid = 0x24b8 [0174.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor")) returned 0x20 [0178.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0178.266] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.266] GetLastError () returned 0x5 [0178.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0178.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 4590 os_tid = 0x24bc [0174.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor")) returned 0x20 [0178.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0178.264] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.264] GetLastError () returned 0x5 [0178.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0178.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efc80) returned 1 Thread: id = 4591 os_tid = 0x24c0 [0174.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor")) returned 0x20 [0178.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0178.262] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.263] GetLastError () returned 0x5 [0178.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0178.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 4592 os_tid = 0x24c4 [0174.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor")) returned 0x20 [0178.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0178.261] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.261] GetLastError () returned 0x5 [0178.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0178.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 4593 os_tid = 0x24c8 [0174.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor")) returned 0x20 [0178.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0178.259] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.259] GetLastError () returned 0x5 [0178.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0178.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d0e8) returned 1 Thread: id = 4594 os_tid = 0x24cc [0174.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor")) returned 0x20 [0178.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0178.257] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.257] GetLastError () returned 0x5 [0178.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0178.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 Thread: id = 4595 os_tid = 0x24d0 [0174.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor")) returned 0x20 [0178.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0178.248] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.248] GetLastError () returned 0x5 [0178.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0178.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e498) returned 1 Thread: id = 4596 os_tid = 0x24d4 [0174.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor")) returned 0x20 [0178.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0178.246] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.246] GetLastError () returned 0x5 [0178.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0178.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69581a8) returned 1 Thread: id = 4597 os_tid = 0x24d8 [0174.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor")) returned 0x20 [0177.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0177.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.991] GetLastError () returned 0x5 [0177.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0177.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db08) returned 1 Thread: id = 4598 os_tid = 0x24dc [0174.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor")) returned 0x20 [0178.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0178.273] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.273] GetLastError () returned 0x5 [0178.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0178.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 4599 os_tid = 0x24e0 [0174.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor")) returned 0x20 [0177.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0177.989] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.989] GetLastError () returned 0x5 [0177.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0177.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e528) returned 1 Thread: id = 4600 os_tid = 0x24e4 [0174.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor")) returned 0x20 [0178.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0178.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.271] GetLastError () returned 0x5 [0178.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0178.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 4601 os_tid = 0x24e8 [0174.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674dd48 [0174.578] wcscpy (in: _Dest=0x674dd48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0174.578] wcscat (in: _Dest=0x674dd48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0174.578] wcscat (in: _Dest=0x674dd48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*" [0174.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0174.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0177.988] wcscmp (_String1=".", _String2=".") returned 0 [0177.988] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.988] wcscmp (_String1="..", _String2=".") returned 1 [0177.988] wcscmp (_String1="..", _String2="..") returned 0 [0177.988] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0177.988] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0177.988] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0177.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e5cd58 [0177.988] wcscpy (in: _Dest=0x3e5cd58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0177.989] wcscat (in: _Dest=0x3e5cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0177.989] wcscat (in: _Dest=0x3e5cd58, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" [0179.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0179.219] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0179.219] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0179.219] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0179.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697df88 [0179.219] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0179.219] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0179.220] wcscat (in: _Dest=0x697df88, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" [0179.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0179.220] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0179.221] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0179.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0179.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 [0179.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eff28) returned 1 Thread: id = 4602 os_tid = 0x24ec [0174.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor")) returned 0x20 [0178.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0178.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.275] GetLastError () returned 0x5 [0178.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0178.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d298) returned 1 Thread: id = 4603 os_tid = 0x24f0 [0174.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor")) returned 0x20 [0178.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0178.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.268] GetLastError () returned 0x5 [0178.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0178.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 Thread: id = 4604 os_tid = 0x24f4 [0174.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor")) returned 0x20 [0178.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0178.269] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.269] GetLastError () returned 0x5 [0178.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0178.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 Thread: id = 4605 os_tid = 0x24f8 [0174.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml")) returned 0x20 [0174.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0174.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.580] GetLastError () returned 0x5 [0174.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0174.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd88) returned 1 Thread: id = 4606 os_tid = 0x24fc [0174.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml")) returned 0x20 [0174.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0174.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.582] GetLastError () returned 0x5 [0174.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0174.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 4607 os_tid = 0x2500 [0174.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml")) returned 0x20 [0175.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0175.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.652] GetLastError () returned 0x5 [0175.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0175.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 4608 os_tid = 0x2504 [0174.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml")) returned 0x20 [0175.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0175.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.651] GetLastError () returned 0x5 [0175.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0175.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 4609 os_tid = 0x2508 [0174.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml")) returned 0x20 [0175.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0175.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.648] GetLastError () returned 0x5 [0175.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0175.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 4610 os_tid = 0x250c [0174.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml")) returned 0x20 [0176.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0176.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.012] GetLastError () returned 0x5 [0176.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0176.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 4611 os_tid = 0x2510 [0174.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml")) returned 0x20 [0176.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0176.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.011] GetLastError () returned 0x5 [0176.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0176.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 4612 os_tid = 0x2514 [0174.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml")) returned 0x20 [0176.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0176.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.010] GetLastError () returned 0x5 [0176.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0176.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 Thread: id = 4613 os_tid = 0x2518 [0174.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml")) returned 0x20 [0176.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0176.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.008] GetLastError () returned 0x5 [0176.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0176.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 4614 os_tid = 0x251c [0174.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml")) returned 0x20 [0176.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0176.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.007] GetLastError () returned 0x5 [0176.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0176.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 4615 os_tid = 0x2520 [0174.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml")) returned 0x20 [0176.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0176.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.005] GetLastError () returned 0x5 [0176.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0176.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 4616 os_tid = 0x2524 [0174.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml")) returned 0x20 [0176.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0176.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.004] GetLastError () returned 0x5 [0176.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0176.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 4617 os_tid = 0x2528 [0174.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml")) returned 0x20 [0176.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0176.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.003] GetLastError () returned 0x5 [0176.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0176.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 4618 os_tid = 0x252c [0174.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml")) returned 0x20 [0176.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0176.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.002] GetLastError () returned 0x5 [0176.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0176.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 4619 os_tid = 0x2530 [0174.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml")) returned 0x20 [0176.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0176.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.001] GetLastError () returned 0x5 [0176.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0176.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 4620 os_tid = 0x2534 [0174.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml")) returned 0x20 [0175.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0175.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.999] GetLastError () returned 0x5 [0175.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0175.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 4621 os_tid = 0x2538 [0174.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml")) returned 0x20 [0175.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0175.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.998] GetLastError () returned 0x5 [0175.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0175.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de68) returned 1 Thread: id = 4622 os_tid = 0x253c [0174.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml")) returned 0x20 [0175.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0175.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.996] GetLastError () returned 0x5 [0175.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0175.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674def8) returned 1 Thread: id = 4623 os_tid = 0x2540 [0174.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml")) returned 0x20 [0175.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0175.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.995] GetLastError () returned 0x5 [0175.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0175.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 4624 os_tid = 0x2544 [0174.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml")) returned 0x20 [0175.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0175.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.994] GetLastError () returned 0x5 [0175.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0175.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 4625 os_tid = 0x2548 [0174.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml")) returned 0x20 [0175.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0175.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.993] GetLastError () returned 0x5 [0175.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0175.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 4626 os_tid = 0x254c [0174.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml")) returned 0x20 [0175.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0175.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.992] GetLastError () returned 0x5 [0175.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0175.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 4627 os_tid = 0x2550 [0174.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml")) returned 0x20 [0174.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0174.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.772] GetLastError () returned 0x5 [0174.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0174.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e9a8) returned 1 Thread: id = 4628 os_tid = 0x2554 [0174.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml")) returned 0x20 [0174.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0174.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.774] GetLastError () returned 0x5 [0174.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0174.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e918) returned 1 Thread: id = 4629 os_tid = 0x2558 [0174.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml")) returned 0x20 [0175.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0175.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.990] GetLastError () returned 0x5 [0175.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0175.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e888) returned 1 Thread: id = 4630 os_tid = 0x255c [0174.776] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 0x2020 [0175.654] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", dwFileAttributes=0x20) returned 1 [0175.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20ec [0175.654] GetFileSizeEx (in: hFile=0x20ec, lpFileSize=0x5dcfe94 | out: lpFileSize=0x5dcfe94*=1083) returned 1 [0175.655] SetFilePointerEx (in: hFile=0x20ec, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.655] ReadFile (in: hFile=0x20ec, lpBuffer=0x5dcfe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5dcfe80, lpOverlapped=0x0 | out: lpBuffer=0x5dcfe70*, lpNumberOfBytesRead=0x5dcfe80*=0x4, lpOverlapped=0x0) returned 1 [0175.657] SetFilePointerEx (in: hFile=0x20ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4588 [0175.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0175.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0175.658] NtQuerySystemTime (in: CurrentTime=0x5dcfe08 | out: CurrentTime=0x5dcfe08*=132482710841508000) returned 0x0 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x39c05c52 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x713243d7 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x5b83b4c9 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x6762965a [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x36946e99 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x4b980e56 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0xfdbd3c9 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x3a25eae8 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x3225929a [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x21521f95 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x5195a3ca [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x58da9fa3 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x5c99665d [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x776d8744 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x65ab54da [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x22c9944c [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x52786019 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x1ef94ffb [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x267bf1c0 [0175.658] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x3279ee5e [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x3d702af0 [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x22953c94 [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x69557b6b [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x7c0af3df [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x24dd8fdc [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x4dcf182f [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x48645332 [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x34f533dd [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x1774dc56 [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x5060886f [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x380efa31 [0175.659] RtlRandomEx (in: Seed=0x5dcfe00 | out: Seed=0x5dcfe00) returned 0x7d489464 [0175.669] ReadFile (in: hFile=0x20ec, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x43b, lpNumberOfBytesRead=0x5dcfdfc, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0x5dcfdfc*=0x43b, lpOverlapped=0x0) returned 1 [0175.669] SetFilePointerEx (in: hFile=0x20ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.669] WriteFile (in: hFile=0x20ec, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x43b, lpNumberOfBytesWritten=0x5dcfe00, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x5dcfe00*=0x43b, lpOverlapped=0x0) returned 1 [0176.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0176.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0176.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0176.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0176.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0176.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0176.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689af30) returned 1 [0176.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5f60 [0176.541] SetFilePointerEx (in: hFile=0x20ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.541] WriteFile (in: hFile=0x20ec, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x5dcfe88, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x5dcfe88*=0x106, lpOverlapped=0x0) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0176.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0176.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35f70 [0176.866] wcscpy (in: _Dest=0x3e35f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" [0176.866] wcscat (in: _Dest=0x3e35f70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.ac3a86" [0176.866] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.ac3a86", NtPathName=0x5dcfe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4e90 [0183.378] FlushFileBuffers (hFile=0x20ec) returned 1 [0183.400] CloseHandle (hObject=0x20ec) returned 1 [0183.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036b00 [0183.404] wcscpy (in: _Dest=0x3036b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0183.404] wcscat (in: _Dest=0x3036b00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" [0183.404] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\ac3a86-readme.txt")) returned 0x2020 [0183.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 [0183.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf2c8) returned 1 Thread: id = 4631 os_tid = 0x2560 [0174.781] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 0x2020 [0176.756] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", dwFileAttributes=0x20) returned 1 [0176.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d94 [0176.757] GetFileSizeEx (in: hFile=0x1d94, lpFileSize=0x474fa7c | out: lpFileSize=0x474fa7c*=16) returned 1 [0176.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0176.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0176.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0176.757] NtQuerySystemTime (in: CurrentTime=0x474f9f0 | out: CurrentTime=0x474f9f0*=132482710852272000) returned 0x0 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x7ab4d083 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x7fc54e7a [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x47b840f2 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x2c722993 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x61a98542 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x2fe6e10f [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x587423e3 [0176.757] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x57672bcf [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x10c5559b [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x3b51232e [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x451311d1 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x1d8073c8 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x707981f7 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0xf3bd6ba [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x7c03fc60 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x6f672280 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x15596ea5 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x391bd5fe [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x16cbd09b [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x7a13c599 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x315b33c3 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x276fabd3 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x226db156 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x328c41c7 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0xf7f07e6 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x30a56cdc [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x69117195 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x6ce70038 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x4767bb83 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x369f893a [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x6d921cc9 [0176.758] RtlRandomEx (in: Seed=0x474f9e8 | out: Seed=0x474f9e8) returned 0x4035de3a [0176.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0176.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69bbd68 [0176.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0176.768] ReadFile (in: hFile=0x1d94, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x474f9e4, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0x474f9e4*=0x10, lpOverlapped=0x0) returned 1 [0176.771] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.771] WriteFile (in: hFile=0x1d94, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x474f9e8, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x474f9e8*=0x10, lpOverlapped=0x0) returned 1 [0176.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0176.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0176.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0176.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0176.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0176.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0176.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821ee0) returned 1 [0176.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5a510 [0176.774] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.775] WriteFile (in: hFile=0x1d94, lpBuffer=0x2f96e8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x474fa70, lpOverlapped=0x0 | out: lpBuffer=0x2f96e8*, lpNumberOfBytesWritten=0x474fa70*=0x100, lpOverlapped=0x0) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0176.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0176.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0176.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0176.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682fb60 [0176.778] wcscpy (in: _Dest=0x682fb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" [0176.778] wcscat (in: _Dest=0x682fb60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.ac3a86" [0176.778] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.ac3a86", NtPathName=0x474f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea4cd0 [0178.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4cd0) returned 1 [0178.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819f10) returned 1 [0178.703] NtQueryInformationFile (in: FileHandle=0x1d94, IoStatusBlock=0x474f9c0, FileInformation=0x474f9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x474f9c0, FileInformation=0x474f9c8) returned 0x0 [0178.703] NtSetInformationFile (FileHandle=0x1d94, IoStatusBlock=0x474f9c0, FileInformation=0x474f9c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0182.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fb60) returned 1 [0182.427] FlushFileBuffers (hFile=0x1d94) returned 1 [0182.429] CloseHandle (hObject=0x1d94) returned 1 [0182.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36930 [0182.615] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0182.615] wcscat (in: _Dest=0x3e36930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" [0182.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\ac3a86-readme.txt")) returned 0x2020 [0182.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 [0182.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1de8) returned 1 Thread: id = 4632 os_tid = 0x2564 [0174.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock")) returned 0x2020 [0183.092] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x20) returned 1 [0183.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x574 [0183.568] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x7f7fa1c | out: lpFileSize=0x7f7fa1c*=0) returned 1 [0183.568] FlushFileBuffers (hFile=0x574) returned 1 [0185.088] CloseHandle (hObject=0x574) returned 1 [0185.088] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x2020) returned 1 [0185.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 Thread: id = 4633 os_tid = 0x2568 [0174.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 0x2020 [0175.621] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", dwFileAttributes=0x20) returned 1 [0175.621] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2428 [0175.622] GetFileSizeEx (in: hFile=0x2428, lpFileSize=0x638fd14 | out: lpFileSize=0x638fd14*=141) returned 1 [0175.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0175.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0175.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0175.622] NtQuerySystemTime (in: CurrentTime=0x638fc88 | out: CurrentTime=0x638fc88*=132482710841196000) returned 0x0 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x44e0afa3 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x14172abd [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x37c5007 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x1d90469e [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x6cdd324b [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x6d6ac665 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x2f4efdad [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x7a54b1b [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x17209f8c [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x6597c670 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x3f6dd91a [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x5555d434 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x29651d79 [0175.622] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x2f963d8d [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x40b0b31d [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x16d38ee5 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x60c0564c [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x25117b86 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x63c0de09 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x439de136 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x521ffadb [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x625cab1c [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x468f3fe0 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x3b116d61 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x27a1cdb2 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x47d579c1 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x4e7e0c9a [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x5cad819c [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x165efe77 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x54e44e97 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0xdd39267 [0175.623] RtlRandomEx (in: Seed=0x638fc80 | out: Seed=0x638fc80) returned 0x14ce7cb1 [0175.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0175.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0175.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0175.633] ReadFile (in: hFile=0x2428, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0x638fc7c, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0x638fc7c*=0x8d, lpOverlapped=0x0) returned 1 [0175.635] SetFilePointerEx (in: hFile=0x2428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.635] WriteFile (in: hFile=0x2428, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0x638fc80, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0x638fc80*=0x8d, lpOverlapped=0x0) returned 1 [0175.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0175.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0175.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0175.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0175.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0175.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0175.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a048) returned 1 [0175.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f22178 [0175.829] SetFilePointerEx (in: hFile=0x2428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.830] WriteFile (in: hFile=0x2428, lpBuffer=0x3e15a70*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x638fd08, lpOverlapped=0x0 | out: lpBuffer=0x3e15a70*, lpNumberOfBytesWritten=0x638fd08*=0xf8, lpOverlapped=0x0) returned 1 [0175.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 [0175.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22d38) returned 1 [0175.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0175.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22178) returned 1 [0175.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0175.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0175.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0175.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0175.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3339a8 [0175.832] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" [0175.832] wcscat (in: _Dest=0x3339a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.ac3a86" [0175.832] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.ac3a86", NtPathName=0x638fc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0175.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e483d0 [0175.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 [0175.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688c638) returned 1 [0175.846] NtQueryInformationFile (in: FileHandle=0x2428, IoStatusBlock=0x638fc58, FileInformation=0x638fc60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x638fc58, FileInformation=0x638fc60) returned 0x0 [0175.846] NtSetInformationFile (FileHandle=0x2428, IoStatusBlock=0x638fc58, FileInformation=0x638fc60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0175.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 [0175.848] FlushFileBuffers (hFile=0x2428) returned 1 [0175.851] CloseHandle (hObject=0x2428) returned 1 [0175.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36860 [0175.853] wcscpy (in: _Dest=0x3e36860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0175.853] wcscat (in: _Dest=0x3e36860, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" [0175.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\ac3a86-readme.txt")) returned 0xffffffff [0175.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e34 [0176.779] WriteFile (in: hFile=0x1e34, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x638fc9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x638fc9c*=0x8b9, lpOverlapped=0x0) returned 1 [0176.943] CloseHandle (hObject=0x1e34) returned 1 [0178.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36860) returned 1 [0178.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b70) returned 1 Thread: id = 4634 os_tid = 0x256c [0174.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 0x2020 [0178.703] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0184.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21e8 [0184.396] GetFileSizeEx (in: hFile=0x21e8, lpFileSize=0x479f9dc | out: lpFileSize=0x479f9dc*=41) returned 1 [0184.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0184.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0184.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0184.396] NtQuerySystemTime (in: CurrentTime=0x479f950 | out: CurrentTime=0x479f950*=132482710928712000) returned 0x0 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x1ac55c5d [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x1385b349 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x73a1a4c3 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x6d6e15ea [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x2954f297 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x3eef6efd [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x6699bdc [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x3ab72d29 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x538123a7 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x22fd8601 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x458e291f [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x61f2dc90 [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x5086e40a [0184.396] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x476fe3af [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x548346ff [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0xf053f65 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x4a40e51d [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x6eb03321 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x47c7dc31 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x9cc4796 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x1ba5f1f9 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x6185dede [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x46a46561 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x7cb6a812 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0xd0aba02 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x68c930b8 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x425e6308 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0xe84b525 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x75b5079a [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0xa7b64f5 [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x26b0276d [0184.397] RtlRandomEx (in: Seed=0x479f948 | out: Seed=0x479f948) returned 0x7b93d92d [0184.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0184.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0184.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0184.407] ReadFile (in: hFile=0x21e8, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0x479f944, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0x479f944*=0x29, lpOverlapped=0x0) returned 1 [0184.410] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.410] WriteFile (in: hFile=0x21e8, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x479f948, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0x479f948*=0x29, lpOverlapped=0x0) returned 1 [0184.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0184.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0184.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0184.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0184.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0184.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0184.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823758) returned 1 [0184.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19dc8 [0184.665] SetFilePointerEx (in: hFile=0x21e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.665] WriteFile (in: hFile=0x21e8, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x479f9d0, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x479f9d0*=0x110, lpOverlapped=0x0) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0185.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0185.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011d58 [0185.752] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" [0185.752] wcscat (in: _Dest=0x3011d58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.ac3a86" [0185.752] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.ac3a86", NtPathName=0x479f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8868 [0186.385] FlushFileBuffers (hFile=0x21e8) returned 1 [0186.389] CloseHandle (hObject=0x21e8) returned 1 [0186.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036210 [0186.451] wcscpy (in: _Dest=0x3036210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0186.451] wcscat (in: _Dest=0x3036210, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" [0186.451] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\ac3a86-readme.txt")) returned 0x2020 [0186.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 [0186.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f9d0) returned 1 Thread: id = 4635 os_tid = 0x2570 [0174.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc")) returned 0x20 [0175.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x20) returned 0 [0175.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.981] GetLastError () returned 0x5 [0175.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x20) returned 0 [0175.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 4636 os_tid = 0x2574 [0174.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv")) returned 0x20 [0175.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV", dwFileAttributes=0x20) returned 0 [0175.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.638] GetLastError () returned 0x5 [0175.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV", dwFileAttributes=0x20) returned 0 [0175.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bdb8) returned 1 Thread: id = 4637 os_tid = 0x2578 [0174.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml")) returned 0x20 [0175.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML", dwFileAttributes=0x20) returned 0 [0175.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.968] GetLastError () returned 0x5 [0175.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML", dwFileAttributes=0x20) returned 0 [0175.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 Thread: id = 4638 os_tid = 0x257c [0174.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc")) returned 0x20 [0175.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC", dwFileAttributes=0x20) returned 0 [0175.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.969] GetLastError () returned 0x5 [0175.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC", dwFileAttributes=0x20) returned 0 [0175.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ae38) returned 1 Thread: id = 4639 os_tid = 0x2580 [0174.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc")) returned 0x20 [0175.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x20) returned 0 [0175.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.971] GetLastError () returned 0x5 [0175.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x20) returned 0 [0175.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 4640 os_tid = 0x2584 [0174.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc")) returned 0x20 [0175.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x20) returned 0 [0175.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.973] GetLastError () returned 0x5 [0175.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x20) returned 0 [0175.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 Thread: id = 4641 os_tid = 0x2588 [0174.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc")) returned 0x20 [0175.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x20) returned 0 [0175.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.952] GetLastError () returned 0x5 [0175.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x20) returned 0 [0175.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 4642 os_tid = 0x258c [0174.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc")) returned 0x20 [0175.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x20) returned 0 [0175.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.974] GetLastError () returned 0x5 [0175.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x20) returned 0 [0175.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 Thread: id = 4643 os_tid = 0x2590 [0174.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv")) returned 0x20 [0175.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x20) returned 0 [0175.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.975] GetLastError () returned 0x5 [0175.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x20) returned 0 [0175.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 4644 os_tid = 0x2594 [0174.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml")) returned 0x20 [0175.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x20) returned 0 [0175.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.977] GetLastError () returned 0x5 [0175.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x20) returned 0 [0175.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 4645 os_tid = 0x2598 [0174.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc")) returned 0x20 [0175.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x20) returned 0 [0175.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.954] GetLastError () returned 0x5 [0175.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x20) returned 0 [0175.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 4646 os_tid = 0x259c [0174.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv")) returned 0x20 [0175.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x20) returned 0 [0175.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.955] GetLastError () returned 0x5 [0175.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x20) returned 0 [0175.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 4647 os_tid = 0x25a0 [0174.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml")) returned 0x20 [0175.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x20) returned 0 [0175.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.957] GetLastError () returned 0x5 [0175.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x20) returned 0 [0175.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 4648 os_tid = 0x25a4 [0174.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv")) returned 0x20 [0175.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x20) returned 0 [0175.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.958] GetLastError () returned 0x5 [0175.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x20) returned 0 [0175.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 Thread: id = 4649 os_tid = 0x25a8 [0174.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml")) returned 0x20 [0175.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x20) returned 0 [0175.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.959] GetLastError () returned 0x5 [0175.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x20) returned 0 [0175.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 4650 os_tid = 0x25ac [0174.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv")) returned 0x20 [0175.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x20) returned 0 [0175.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.961] GetLastError () returned 0x5 [0175.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x20) returned 0 [0175.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 4651 os_tid = 0x25b0 [0174.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc")) returned 0x20 [0175.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x20) returned 0 [0175.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.962] GetLastError () returned 0x5 [0175.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x20) returned 0 [0175.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 4652 os_tid = 0x25b4 [0174.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc")) returned 0x20 [0175.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x20) returned 0 [0175.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.964] GetLastError () returned 0x5 [0175.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x20) returned 0 [0175.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 4653 os_tid = 0x25b8 [0174.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc")) returned 0x20 [0175.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x20) returned 0 [0175.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.965] GetLastError () returned 0x5 [0175.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x20) returned 0 [0175.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 4654 os_tid = 0x25bc [0174.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc")) returned 0x20 [0175.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x20) returned 0 [0175.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.978] GetLastError () returned 0x5 [0175.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x20) returned 0 [0175.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 4655 os_tid = 0x25c0 [0174.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv")) returned 0x20 [0175.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x20) returned 0 [0175.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.980] GetLastError () returned 0x5 [0175.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x20) returned 0 [0175.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 4656 os_tid = 0x25c4 [0174.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml")) returned 0x20 [0175.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x20) returned 0 [0175.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.966] GetLastError () returned 0x5 [0175.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x20) returned 0 [0175.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 4657 os_tid = 0x25c8 [0175.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc")) returned 0x20 [0175.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x20) returned 0 [0175.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.951] GetLastError () returned 0x5 [0175.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x20) returned 0 [0175.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 4658 os_tid = 0x25cc [0175.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif")) returned 0x20 [0176.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0176.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.347] GetLastError () returned 0x5 [0176.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0176.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 4659 os_tid = 0x25d0 [0175.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif")) returned 0x20 [0176.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0176.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.345] GetLastError () returned 0x5 [0176.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0176.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 4660 os_tid = 0x25d4 [0175.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif")) returned 0x20 [0176.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0176.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.344] GetLastError () returned 0x5 [0176.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0176.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fb60) returned 1 Thread: id = 4661 os_tid = 0x25d8 [0175.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif")) returned 0x20 [0176.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0176.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.342] GetLastError () returned 0x5 [0176.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0176.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 4662 os_tid = 0x25dc [0175.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif")) returned 0x20 [0176.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0176.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.019] GetLastError () returned 0x5 [0176.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0176.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36110) returned 1 Thread: id = 4663 os_tid = 0x25e0 [0175.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif")) returned 0x20 [0176.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0176.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.018] GetLastError () returned 0x5 [0176.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0176.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 4664 os_tid = 0x25e4 [0175.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif")) returned 0x20 [0176.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0176.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.340] GetLastError () returned 0x5 [0176.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0176.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36d40) returned 1 Thread: id = 4665 os_tid = 0x25e8 [0175.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif")) returned 0x20 [0176.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0176.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.338] GetLastError () returned 0x5 [0176.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0176.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 4666 os_tid = 0x25ec [0175.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif")) returned 0x20 [0176.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0176.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.337] GetLastError () returned 0x5 [0176.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0176.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36e10) returned 1 Thread: id = 4667 os_tid = 0x25f0 [0175.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif")) returned 0x20 [0176.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0176.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.335] GetLastError () returned 0x5 [0176.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0176.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ee0) returned 1 Thread: id = 4668 os_tid = 0x25f4 [0175.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif")) returned 0x20 [0176.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0176.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.333] GetLastError () returned 0x5 [0176.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0176.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 4669 os_tid = 0x25f8 [0175.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif")) returned 0x20 [0176.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0176.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.332] GetLastError () returned 0x5 [0176.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0176.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 4670 os_tid = 0x25fc [0175.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif")) returned 0x20 [0176.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0176.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.330] GetLastError () returned 0x5 [0176.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0176.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36fb0) returned 1 Thread: id = 4671 os_tid = 0x2600 [0175.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif")) returned 0x20 [0176.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0176.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.328] GetLastError () returned 0x5 [0176.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0176.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 4672 os_tid = 0x2604 [0175.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif")) returned 0x20 [0176.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0176.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.327] GetLastError () returned 0x5 [0176.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0176.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 4673 os_tid = 0x2608 [0175.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif")) returned 0x20 [0176.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0176.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.325] GetLastError () returned 0x5 [0176.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0176.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37080) returned 1 Thread: id = 4674 os_tid = 0x260c [0175.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif")) returned 0x20 [0176.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0176.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.323] GetLastError () returned 0x5 [0176.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0176.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 4675 os_tid = 0x2610 [0175.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif")) returned 0x20 [0176.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0176.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.321] GetLastError () returned 0x5 [0176.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0176.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 4676 os_tid = 0x2614 [0175.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011d58 [0175.388] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0175.388] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0175.388] wcscat (in: _Dest=0x3011d58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*" [0175.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0175.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0176.586] wcscmp (_String1=".", _String2=".") returned 0 [0176.587] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.587] wcscmp (_String1="..", _String2=".") returned 1 [0176.587] wcscmp (_String1="..", _String2="..") returned 0 [0176.587] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1 [0176.587] wcscmp (_String1="Attachments.jpg", _String2=".") returned 1 [0176.587] wcscmp (_String1="Attachments.jpg", _String2="..") returned 1 [0176.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea72d8 [0176.587] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0176.587] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0176.587] wcscat (in: _Dest=0x3ea72d8, _Source="Attachments.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" [0177.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0177.145] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0177.145] wcscmp (_String1="BREAK.JPG", _String2=".") returned 1 [0177.145] wcscmp (_String1="BREAK.JPG", _String2="..") returned 1 [0177.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d574e8 [0177.146] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.146] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.146] wcscat (in: _Dest=0x3d574e8, _Source="BREAK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" [0177.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0177.147] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0177.147] wcscmp (_String1="BUTTON.JPG", _String2=".") returned 1 [0177.147] wcscmp (_String1="BUTTON.JPG", _String2="..") returned 1 [0177.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d575d0 [0177.147] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.147] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.148] wcscat (in: _Dest=0x3d575d0, _Source="BUTTON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" [0177.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d575d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0177.149] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0177.149] wcscmp (_String1="CHECKBOX.JPG", _String2=".") returned 1 [0177.149] wcscmp (_String1="CHECKBOX.JPG", _String2="..") returned 1 [0177.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d576b8 [0177.149] wcscpy (in: _Dest=0x3d576b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.149] wcscat (in: _Dest=0x3d576b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.149] wcscat (in: _Dest=0x3d576b8, _Source="CHECKBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" [0177.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d576b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0177.151] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0177.151] wcscmp (_String1="COMBOBOX.JPG", _String2=".") returned 1 [0177.151] wcscmp (_String1="COMBOBOX.JPG", _String2="..") returned 1 [0177.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d577a0 [0177.151] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.151] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.151] wcscat (in: _Dest=0x3d577a0, _Source="COMBOBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" [0177.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0177.153] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0177.153] wcscmp (_String1="CONTACT.JPG", _String2=".") returned 1 [0177.153] wcscmp (_String1="CONTACT.JPG", _String2="..") returned 1 [0177.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57888 [0177.153] wcscpy (in: _Dest=0x3d57888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.153] wcscat (in: _Dest=0x3d57888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.153] wcscat (in: _Dest=0x3d57888, _Source="CONTACT.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" [0177.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0177.154] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0177.154] wcscmp (_String1="CURRENCY.JPG", _String2=".") returned 1 [0177.154] wcscmp (_String1="CURRENCY.JPG", _String2="..") returned 1 [0177.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57970 [0177.155] wcscpy (in: _Dest=0x3d57970, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.155] wcscat (in: _Dest=0x3d57970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.155] wcscat (in: _Dest=0x3d57970, _Source="CURRENCY.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" [0177.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0177.156] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0177.156] wcscmp (_String1="DATE.JPG", _String2=".") returned 1 [0177.156] wcscmp (_String1="DATE.JPG", _String2="..") returned 1 [0177.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4f70 [0177.156] wcscpy (in: _Dest=0x3ea4f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.156] wcscat (in: _Dest=0x3ea4f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.156] wcscat (in: _Dest=0x3ea4f70, _Source="DATE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" [0177.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0177.158] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0177.158] wcscmp (_String1="DATETIME.JPG", _String2=".") returned 1 [0177.158] wcscmp (_String1="DATETIME.JPG", _String2="..") returned 1 [0177.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57a58 [0177.158] wcscpy (in: _Dest=0x3d57a58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.158] wcscat (in: _Dest=0x3d57a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.158] wcscat (in: _Dest=0x3d57a58, _Source="DATETIME.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" [0177.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0177.161] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1 [0177.161] wcscmp (_String1="DigitalInk.jpg", _String2=".") returned 1 [0177.161] wcscmp (_String1="DigitalInk.jpg", _String2="..") returned 1 [0177.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8598 [0177.161] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.161] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.161] wcscat (in: _Dest=0x3ea8598, _Source="DigitalInk.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" [0177.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0177.163] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1 [0177.163] wcscmp (_String1="EmbeddedView.jpg", _String2=".") returned 1 [0177.163] wcscmp (_String1="EmbeddedView.jpg", _String2="..") returned 1 [0177.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8778 [0177.163] wcscpy (in: _Dest=0x3ea8778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.163] wcscat (in: _Dest=0x3ea8778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.163] wcscat (in: _Dest=0x3ea8778, _Source="EmbeddedView.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" [0177.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0177.164] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0177.164] wcscmp (_String1="HEADING.JPG", _String2=".") returned 1 [0177.164] wcscmp (_String1="HEADING.JPG", _String2="..") returned 1 [0177.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57b40 [0177.164] wcscpy (in: _Dest=0x3d57b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.164] wcscat (in: _Dest=0x3d57b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.165] wcscat (in: _Dest=0x3d57b40, _Source="HEADING.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" [0177.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0177.166] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0177.166] wcscmp (_String1="IMAGE.JPG", _String2=".") returned 1 [0177.166] wcscmp (_String1="IMAGE.JPG", _String2="..") returned 1 [0177.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57c28 [0177.166] wcscpy (in: _Dest=0x3d57c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.166] wcscat (in: _Dest=0x3d57c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.166] wcscat (in: _Dest=0x3d57c28, _Source="IMAGE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" [0177.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0177.168] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0177.168] wcscmp (_String1="LINE.JPG", _String2=".") returned 1 [0177.168] wcscmp (_String1="LINE.JPG", _String2="..") returned 1 [0177.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5050 [0177.168] wcscpy (in: _Dest=0x3ea5050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.168] wcscat (in: _Dest=0x3ea5050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.168] wcscat (in: _Dest=0x3ea5050, _Source="LINE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" [0177.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0177.169] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0177.169] wcscmp (_String1="LISTBOX.JPG", _String2=".") returned 1 [0177.169] wcscmp (_String1="LISTBOX.JPG", _String2="..") returned 1 [0177.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57d10 [0177.170] wcscpy (in: _Dest=0x3d57d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.170] wcscat (in: _Dest=0x3d57d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.170] wcscat (in: _Dest=0x3d57d10, _Source="LISTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" [0177.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0177.171] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0177.171] wcscmp (_String1="NUMERIC.JPG", _String2=".") returned 1 [0177.171] wcscmp (_String1="NUMERIC.JPG", _String2="..") returned 1 [0177.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57df8 [0177.171] wcscpy (in: _Dest=0x3d57df8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.171] wcscat (in: _Dest=0x3d57df8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.171] wcscat (in: _Dest=0x3d57df8, _Source="NUMERIC.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" [0177.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0177.173] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0177.173] wcscmp (_String1="PASSWORD.JPG", _String2=".") returned 1 [0177.173] wcscmp (_String1="PASSWORD.JPG", _String2="..") returned 1 [0177.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57ee0 [0177.173] wcscpy (in: _Dest=0x3d57ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.173] wcscat (in: _Dest=0x3d57ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.173] wcscat (in: _Dest=0x3d57ee0, _Source="PASSWORD.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" [0177.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0177.174] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0177.174] wcscmp (_String1="RADIO.JPG", _String2=".") returned 1 [0177.174] wcscmp (_String1="RADIO.JPG", _String2="..") returned 1 [0177.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57fc8 [0177.175] wcscpy (in: _Dest=0x3d57fc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.175] wcscat (in: _Dest=0x3d57fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.175] wcscat (in: _Dest=0x3d57fc8, _Source="RADIO.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" [0177.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0177.176] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1 [0177.176] wcscmp (_String1="SectionHeading.jpg", _String2=".") returned 1 [0177.176] wcscmp (_String1="SectionHeading.jpg", _String2="..") returned 1 [0177.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dada38 [0177.176] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.176] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.176] wcscat (in: _Dest=0x3dada38, _Source="SectionHeading.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" [0177.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0177.177] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1 [0177.178] wcscmp (_String1="StaticText.jpg", _String2=".") returned 1 [0177.178] wcscmp (_String1="StaticText.jpg", _String2="..") returned 1 [0177.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8688 [0177.178] wcscpy (in: _Dest=0x3ea8688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.178] wcscat (in: _Dest=0x3ea8688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.178] wcscat (in: _Dest=0x3ea8688, _Source="StaticText.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" [0177.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0177.179] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0177.179] wcscmp (_String1="TEXTAREA.JPG", _String2=".") returned 1 [0177.179] wcscmp (_String1="TEXTAREA.JPG", _String2="..") returned 1 [0177.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d580b0 [0177.180] wcscpy (in: _Dest=0x3d580b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.180] wcscat (in: _Dest=0x3d580b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.180] wcscat (in: _Dest=0x3d580b0, _Source="TEXTAREA.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" [0177.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d580b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0177.181] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0177.181] wcscmp (_String1="TEXTBOX.JPG", _String2=".") returned 1 [0177.181] wcscmp (_String1="TEXTBOX.JPG", _String2="..") returned 1 [0177.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d58198 [0177.181] wcscpy (in: _Dest=0x3d58198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.181] wcscat (in: _Dest=0x3d58198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.181] wcscat (in: _Dest=0x3d58198, _Source="TEXTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" [0177.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0177.183] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0177.183] wcscmp (_String1="TEXTVIEW.JPG", _String2=".") returned 1 [0177.183] wcscmp (_String1="TEXTVIEW.JPG", _String2="..") returned 1 [0177.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d58280 [0177.183] wcscpy (in: _Dest=0x3d58280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.183] wcscat (in: _Dest=0x3d58280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.183] wcscat (in: _Dest=0x3d58280, _Source="TEXTVIEW.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" [0177.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d58280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0177.627] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1 [0177.627] wcscmp (_String1="UnformattedNumeric.jpg", _String2=".") returned 1 [0177.627] wcscmp (_String1="UnformattedNumeric.jpg", _String2="..") returned 1 [0177.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17070 [0177.627] wcscpy (in: _Dest=0x3e17070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0177.627] wcscat (in: _Dest=0x3e17070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0177.627] wcscat (in: _Dest=0x3e17070, _Source="UnformattedNumeric.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" [0179.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0179.939] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0 [0179.939] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0179.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0179.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 [0179.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37150) returned 1 Thread: id = 4677 os_tid = 0x2618 [0175.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 0x20 [0176.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0176.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.350] GetLastError () returned 0x5 [0176.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0176.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 4678 os_tid = 0x261c [0175.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 0x20 [0176.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0176.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.349] GetLastError () returned 0x5 [0176.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0176.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4250) returned 1 Thread: id = 4679 os_tid = 0x2620 [0175.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log")) returned 0x2020 [0176.352] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x20) returned 1 [0176.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1eb0 [0176.966] GetFileSizeEx (in: hFile=0x1eb0, lpFileSize=0xa78f7ec | out: lpFileSize=0xa78f7ec*=0) returned 1 [0176.966] FlushFileBuffers (hFile=0x1eb0) returned 1 [0177.700] CloseHandle (hObject=0x1eb0) returned 1 [0177.700] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x2020) returned 1 [0184.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 Thread: id = 4680 os_tid = 0x2624 [0175.393] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 0x2020 [0176.353] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", dwFileAttributes=0x20) returned 1 [0178.116] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb70 [0178.116] GetFileSizeEx (in: hFile=0xb70, lpFileSize=0xab2fedc | out: lpFileSize=0xab2fedc*=16) returned 1 [0178.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0178.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0178.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0178.117] NtQuerySystemTime (in: CurrentTime=0xab2fe50 | out: CurrentTime=0xab2fe50*=132482710865844000) returned 0x0 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x876fa02 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x28d139d9 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x2214a112 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x1b837e00 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x29b27507 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x1f8b25d5 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x318239d8 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x488afd1c [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x766c17c4 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x442d4606 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x2191d940 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x22782238 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x5bbfc345 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x44ffe5b5 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x286a16c9 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x10c123c0 [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x6cc54a9e [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x1cc6033b [0178.117] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x5a20c098 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x10237a75 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x229f1557 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x5f590098 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0xa096a4 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x6f13410c [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x7949f992 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x6181e9c5 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x2b7def33 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x34714326 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x7650edf1 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x3c4891cd [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x978ff27 [0178.118] RtlRandomEx (in: Seed=0xab2fe48 | out: Seed=0xab2fe48) returned 0x1c5308b5 [0178.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0178.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0178.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0178.130] ReadFile (in: hFile=0xb70, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xab2fe44, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0xab2fe44*=0x10, lpOverlapped=0x0) returned 1 [0178.132] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.132] WriteFile (in: hFile=0xb70, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xab2fe48, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0xab2fe48*=0x10, lpOverlapped=0x0) returned 1 [0178.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0178.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0178.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0178.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0178.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0178.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0178.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a1b0) returned 1 [0178.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3750 [0178.419] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.420] WriteFile (in: hFile=0xb70, lpBuffer=0x2fad98*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xab2fed0, lpOverlapped=0x0 | out: lpBuffer=0x2fad98*, lpNumberOfBytesWritten=0xab2fed0*=0x100, lpOverlapped=0x0) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0178.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0178.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3deca58 [0178.441] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" [0178.441] wcscat (in: _Dest=0x3deca58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.ac3a86" [0178.441] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.ac3a86", NtPathName=0xab2fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0178.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3dd8cb8 [0178.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0178.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681e638) returned 1 [0178.451] NtQueryInformationFile (in: FileHandle=0xb70, IoStatusBlock=0xab2fe20, FileInformation=0xab2fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab2fe20, FileInformation=0xab2fe28) returned 0x0 [0178.451] NtSetInformationFile (FileHandle=0xb70, IoStatusBlock=0xab2fe20, FileInformation=0xab2fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0178.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0178.453] FlushFileBuffers (hFile=0xb70) returned 1 [0178.466] CloseHandle (hObject=0xb70) returned 1 [0178.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d553a0 [0178.467] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0178.467] wcscat (in: _Dest=0x3d553a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" [0178.467] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ac3a86-readme.txt")) returned 0x2020 [0178.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0178.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 Thread: id = 4681 os_tid = 0x2628 [0175.395] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock")) returned 0x2020 [0176.021] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x20) returned 1 [0176.021] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1690 [0176.021] GetFileSizeEx (in: hFile=0x1690, lpFileSize=0xab7fe8c | out: lpFileSize=0xab7fe8c*=0) returned 1 [0176.021] FlushFileBuffers (hFile=0x1690) returned 1 [0176.023] CloseHandle (hObject=0x1690) returned 1 [0176.023] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x2020) returned 1 [0176.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 Thread: id = 4682 os_tid = 0x262c [0175.406] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 0x2020 [0176.076] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", dwFileAttributes=0x20) returned 1 [0176.593] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d0 [0176.593] GetFileSizeEx (in: hFile=0x21d0, lpFileSize=0xac6f9f4 | out: lpFileSize=0xac6f9f4*=183) returned 1 [0176.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0176.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0176.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0176.594] NtQuerySystemTime (in: CurrentTime=0xac6f968 | out: CurrentTime=0xac6f968*=132482710850712000) returned 0x0 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x295dcc50 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x77bba3b9 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x1f29322f [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x702387c6 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x8d7468c [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x7f27579c [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x5f19949b [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x1767a21e [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x7f2791a [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x71fb484 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x1a8820cd [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x6f24e6f4 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x35b757a7 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x7c706313 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x3579c4b6 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x4f1a7871 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0xc37aa3c [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x400c0957 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x1d917d03 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x2f67c28c [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x221bdf1a [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x1eb32838 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x59c881b4 [0176.594] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x593667ea [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x4b7aeee3 [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x2ab451e5 [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x2b46613a [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x7f2a5e5e [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x2cd768e5 [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x7ddcab71 [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0x2034db71 [0176.595] RtlRandomEx (in: Seed=0xac6f960 | out: Seed=0xac6f960) returned 0xff03ace [0176.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0176.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0176.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0176.608] ReadFile (in: hFile=0x21d0, lpBuffer=0x69874f8, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0xac6f95c, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xac6f95c*=0xb7, lpOverlapped=0x0) returned 1 [0176.611] SetFilePointerEx (in: hFile=0x21d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.611] WriteFile (in: hFile=0x21d0, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0xac6f960, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0xac6f960*=0xb7, lpOverlapped=0x0) returned 1 [0176.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0176.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0176.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0176.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0176.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0176.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0176.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689af30) returned 1 [0176.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e600 [0176.615] SetFilePointerEx (in: hFile=0x21d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.615] WriteFile (in: hFile=0x21d0, lpBuffer=0x3e17070*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xac6f9e8, lpOverlapped=0x0 | out: lpBuffer=0x3e17070*, lpNumberOfBytesWritten=0xac6f9e8*=0xf8, lpOverlapped=0x0) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17070) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e640) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e600) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0176.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0176.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec4e0 [0176.618] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" [0176.618] wcscat (in: _Dest=0x3dec4e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.ac3a86" [0176.618] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.ac3a86", NtPathName=0xac6f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0176.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55278 [0176.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0176.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688fc20) returned 1 [0176.619] NtQueryInformationFile (in: FileHandle=0x21d0, IoStatusBlock=0xac6f938, FileInformation=0xac6f940, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac6f938, FileInformation=0xac6f940) returned 0x0 [0176.619] NtSetInformationFile (FileHandle=0x21d0, IoStatusBlock=0xac6f938, FileInformation=0xac6f940, Length=0x28, FileInformationClass=0x4) returned 0x0 [0176.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0176.622] FlushFileBuffers (hFile=0x21d0) returned 1 [0176.624] CloseHandle (hObject=0x21d0) returned 1 [0176.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d55278 [0176.626] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0176.626] wcscat (in: _Dest=0x3d55278, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" [0176.626] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ac3a86-readme.txt")) returned 0xffffffff [0176.626] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21d0 [0176.627] WriteFile (in: hFile=0x21d0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xac6f97c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xac6f97c*=0x8b9, lpOverlapped=0x0) returned 1 [0178.711] CloseHandle (hObject=0x21d0) returned 1 [0182.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0182.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 Thread: id = 4683 os_tid = 0x2630 [0175.406] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 0x2020 [0176.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0176.025] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1690 [0176.025] GetFileSizeEx (in: hFile=0x1690, lpFileSize=0xabcf91c | out: lpFileSize=0xabcf91c*=41) returned 1 [0176.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0176.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0176.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0176.025] NtQuerySystemTime (in: CurrentTime=0xabcf890 | out: CurrentTime=0xabcf890*=132482710845252000) returned 0x0 [0176.025] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x4207b1e [0176.025] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x44e8c9e4 [0176.025] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x12380e88 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x6f153234 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x2644dac6 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x3b88dbf6 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x97b3b4f [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x2416078a [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x21c42caf [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x50338cd0 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x36b62b7a [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x7da7df92 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x437a7b84 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x97fd407 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x42e5bf51 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x72fd7027 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x4b49003e [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x8c1f67b [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x638f0fe9 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0xef2684a [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x5872766e [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x12b08aca [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x188a9d75 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x12c3fcdb [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0xa119123 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x40a0c641 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x74b5683b [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x72f4aa8d [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x6d3feda5 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x7673780a [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x17e976e3 [0176.026] RtlRandomEx (in: Seed=0xabcf888 | out: Seed=0xabcf888) returned 0x6d1514e5 [0176.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0176.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0176.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0176.034] ReadFile (in: hFile=0x1690, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xabcf884, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0xabcf884*=0x29, lpOverlapped=0x0) returned 1 [0176.036] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.036] WriteFile (in: hFile=0x1690, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xabcf888, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0xabcf888*=0x29, lpOverlapped=0x0) returned 1 [0177.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0177.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0177.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0177.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0177.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0177.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0177.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823050) returned 1 [0177.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19a48 [0177.826] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.827] WriteFile (in: hFile=0x1690, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xabcf910, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xabcf910*=0x110, lpOverlapped=0x0) returned 1 [0181.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0181.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19e70) returned 1 [0181.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0181.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0181.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0181.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0181.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0181.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0181.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54dd8 [0181.255] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" [0181.255] wcscat (in: _Dest=0x3d54dd8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.ac3a86" [0181.255] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.ac3a86", NtPathName=0xabcf888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0181.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x2fce88 [0182.794] FlushFileBuffers (hFile=0x1690) returned 1 [0182.929] CloseHandle (hObject=0x1690) returned 1 [0183.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54dd8 [0183.355] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0183.356] wcscat (in: _Dest=0x3d54dd8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" [0183.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ac3a86-readme.txt")) returned 0x2020 [0183.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0183.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 Thread: id = 4684 os_tid = 0x2634 [0175.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif")) returned 0x20 [0176.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0176.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.726] GetLastError () returned 0x5 [0176.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0176.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 4685 os_tid = 0x2638 [0175.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif")) returned 0x20 [0176.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0176.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.728] GetLastError () returned 0x5 [0176.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0176.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 4686 os_tid = 0x263c [0175.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif")) returned 0x20 [0176.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0176.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.729] GetLastError () returned 0x5 [0176.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0176.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 4687 os_tid = 0x2640 [0175.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif")) returned 0x20 [0176.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0176.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.731] GetLastError () returned 0x5 [0176.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0176.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 4688 os_tid = 0x2644 [0175.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif")) returned 0x20 [0176.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0176.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.421] GetLastError () returned 0x5 [0176.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0176.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 4689 os_tid = 0x2648 [0175.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif")) returned 0x20 [0176.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0176.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.714] GetLastError () returned 0x5 [0176.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0176.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 4690 os_tid = 0x264c [0175.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif")) returned 0x20 [0176.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0176.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.712] GetLastError () returned 0x5 [0176.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0176.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 4691 os_tid = 0x2650 [0175.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif")) returned 0x20 [0176.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0176.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.711] GetLastError () returned 0x5 [0176.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0176.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598d0) returned 1 Thread: id = 4692 os_tid = 0x2654 [0175.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif")) returned 0x20 [0176.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0176.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.708] GetLastError () returned 0x5 [0176.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0176.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 Thread: id = 4693 os_tid = 0x2658 [0175.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif")) returned 0x20 [0176.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0176.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.723] GetLastError () returned 0x5 [0176.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0176.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 4694 os_tid = 0x265c [0175.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif")) returned 0x20 [0176.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0176.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.706] GetLastError () returned 0x5 [0176.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0176.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 Thread: id = 4695 os_tid = 0x2660 [0175.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif")) returned 0x20 [0176.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0176.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.705] GetLastError () returned 0x5 [0176.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0176.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 4696 os_tid = 0x2664 [0175.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif")) returned 0x20 [0176.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0176.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.703] GetLastError () returned 0x5 [0176.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0176.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 4697 os_tid = 0x2668 [0175.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif")) returned 0x20 [0176.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0176.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.721] GetLastError () returned 0x5 [0176.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0176.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959968) returned 1 Thread: id = 4698 os_tid = 0x266c [0175.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif")) returned 0x20 [0176.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0176.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.701] GetLastError () returned 0x5 [0176.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0176.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 4699 os_tid = 0x2670 [0175.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif")) returned 0x20 [0176.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0176.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.700] GetLastError () returned 0x5 [0176.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0176.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 Thread: id = 4700 os_tid = 0x2674 [0175.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif")) returned 0x20 [0176.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0176.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.698] GetLastError () returned 0x5 [0176.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0176.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 4701 os_tid = 0x2678 [0175.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif")) returned 0x20 [0176.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0176.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.696] GetLastError () returned 0x5 [0176.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0176.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 4702 os_tid = 0x267c [0175.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif")) returned 0x20 [0176.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0176.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.694] GetLastError () returned 0x5 [0176.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0176.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 4703 os_tid = 0x2680 [0175.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif")) returned 0x20 [0176.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0176.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.719] GetLastError () returned 0x5 [0176.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0176.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69597a0) returned 1 Thread: id = 4704 os_tid = 0x2684 [0175.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif")) returned 0x20 [0176.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0176.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.693] GetLastError () returned 0x5 [0176.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0176.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959670) returned 1 Thread: id = 4705 os_tid = 0x2688 [0175.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif")) returned 0x20 [0176.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0176.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.718] GetLastError () returned 0x5 [0176.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0176.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959708) returned 1 Thread: id = 4706 os_tid = 0x268c [0175.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif")) returned 0x20 [0176.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0176.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.628] GetLastError () returned 0x5 [0176.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0176.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 4707 os_tid = 0x2690 [0175.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif")) returned 0x20 [0176.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0176.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.716] GetLastError () returned 0x5 [0176.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0176.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959b30) returned 1 Thread: id = 4708 os_tid = 0x2694 [0175.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif")) returned 0x20 [0176.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0176.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.691] GetLastError () returned 0x5 [0176.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0176.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a98) returned 1 Thread: id = 4709 os_tid = 0x2698 [0175.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville")) returned 0x20 [0175.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0175.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.678] GetLastError () returned 0x5 [0175.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0175.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 4710 os_tid = 0x269c [0175.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello")) returned 0x20 [0175.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0175.680] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.680] GetLastError () returned 0x5 [0175.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0175.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 4711 os_tid = 0x26a0 [0175.686] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log")) returned 0x2020 [0176.629] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x20) returned 1 [0176.630] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x4b0 [0176.630] GetFileSizeEx (in: hFile=0x4b0, lpFileSize=0x862fb64 | out: lpFileSize=0x862fb64*=0) returned 1 [0176.630] FlushFileBuffers (hFile=0x4b0) returned 1 [0176.975] CloseHandle (hObject=0x4b0) returned 1 [0176.976] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x2020) returned 1 [0181.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 Thread: id = 4712 os_tid = 0x26a4 [0175.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 0x2020 [0176.372] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", dwFileAttributes=0x20) returned 1 [0181.903] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd5c [0181.903] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x8c3fcf4 | out: lpFileSize=0x8c3fcf4*=16) returned 1 [0181.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0181.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0181.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48f8 [0181.903] NtQuerySystemTime (in: CurrentTime=0x8c3fc68 | out: CurrentTime=0x8c3fc68*=132482710903752000) returned 0x0 [0181.903] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x10d07fa1 [0181.903] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x275bf3c4 [0181.903] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x7162ce2e [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x69667465 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x6d169bed [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x60c3f731 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x109d5d04 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x48157801 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x4af4a297 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x32be0fb5 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x4081cbaa [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x22cc5b36 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x16fe4a32 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x7e113edb [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x10cf753 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x76e21a3 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x2445c7c7 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x273dd975 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x7cf089d [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x2123ab96 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x70eab86f [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x575fe183 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x44d01f4d [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x7804def4 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x2ac62729 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x70948e32 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x3da6b584 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x1a56a85c [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x22885f3 [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x51087c0f [0181.904] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x737164b8 [0181.905] RtlRandomEx (in: Seed=0x8c3fc60 | out: Seed=0x8c3fc60) returned 0x330e6e76 [0181.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0181.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69bbd68 [0181.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0181.914] ReadFile (in: hFile=0xd5c, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x8c3fc5c, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0x8c3fc5c*=0x10, lpOverlapped=0x0) returned 1 [0181.916] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.916] WriteFile (in: hFile=0xd5c, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x8c3fc60, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x8c3fc60*=0x10, lpOverlapped=0x0) returned 1 [0183.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0183.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0183.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0183.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0183.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0183.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0183.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b248) returned 1 [0183.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5a8a8 [0183.334] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.334] WriteFile (in: hFile=0xd5c, lpBuffer=0x3d45710*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x8c3fce8, lpOverlapped=0x0 | out: lpBuffer=0x3d45710*, lpNumberOfBytesWritten=0x8c3fce8*=0x100, lpOverlapped=0x0) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45710) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0183.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0183.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5830 [0183.380] wcscpy (in: _Dest=0x3ea5830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" [0183.380] wcscat (in: _Dest=0x3ea5830, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.ac3a86" [0183.381] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.ac3a86", NtPathName=0x8c3fc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dade18 [0183.711] FlushFileBuffers (hFile=0xd5c) returned 1 [0185.085] CloseHandle (hObject=0xd5c) returned 1 [0185.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d575d0 [0185.377] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0185.377] wcscat (in: _Dest=0x3d575d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" [0185.377] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\ac3a86-readme.txt")) returned 0x2020 [0185.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 [0185.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e359c0) returned 1 Thread: id = 4713 os_tid = 0x26a8 [0175.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock")) returned 0x2020 [0176.371] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x20) returned 1 [0181.900] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2038 [0181.901] GetFileSizeEx (in: hFile=0x2038, lpFileSize=0x8a5fde4 | out: lpFileSize=0x8a5fde4*=0) returned 1 [0181.901] FlushFileBuffers (hFile=0x2038) returned 1 [0182.290] CloseHandle (hObject=0x2038) returned 1 [0182.290] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x2020) returned 1 [0183.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 4714 os_tid = 0x26ac [0175.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 0x2020 [0176.371] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", dwFileAttributes=0x20) returned 1 [0181.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc8 [0181.883] GetFileSizeEx (in: hFile=0xfc8, lpFileSize=0x94cf794 | out: lpFileSize=0x94cf794*=154) returned 1 [0181.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0181.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0181.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0181.884] NtQuerySystemTime (in: CurrentTime=0x94cf708 | out: CurrentTime=0x94cf708*=132482710903596000) returned 0x0 [0181.884] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x34d1134e [0181.884] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x12d4752b [0181.884] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x47f2f5bd [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5469090a [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x729bd36 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x78cc736e [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x383377d3 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x797518d9 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x71252e27 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x6ea2e502 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x53debdbe [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x18f9ba04 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x2f9124ba [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5abeeb29 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x69bc25e5 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x57c1fbc4 [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x44d8a8e [0181.886] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x473ada04 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5300d06 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0xc8444dd [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5dda08a5 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5194b59c [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x6cea3c25 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0xf870c00 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x2a50841f [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x6a9c1af0 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x7dabf4c9 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x2296306 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x19d5eb7e [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x24a8bf08 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x13e3c07 [0181.887] RtlRandomEx (in: Seed=0x94cf700 | out: Seed=0x94cf700) returned 0x5c02b865 [0181.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0181.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0181.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0181.897] ReadFile (in: hFile=0xfc8, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x9a, lpNumberOfBytesRead=0x94cf6fc, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0x94cf6fc*=0x9a, lpOverlapped=0x0) returned 1 [0181.900] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.900] WriteFile (in: hFile=0xfc8, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x94cf700, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0x94cf700*=0x9a, lpOverlapped=0x0) returned 1 [0183.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0183.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0183.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a4c8) returned 1 [0183.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c4288 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0183.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x69c3e08 [0183.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0183.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0183.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a4c8) returned 1 [0183.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e18070 [0183.330] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.330] WriteFile (in: hFile=0xfc8, lpBuffer=0x3e18070*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x94cf788, lpOverlapped=0x0 | out: lpBuffer=0x3e18070*, lpNumberOfBytesWritten=0x94cf788*=0xf8, lpOverlapped=0x0) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18070) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3e08) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c4288) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0183.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0183.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x68ac708 [0183.363] wcscpy (in: _Dest=0x68ac708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" [0183.363] wcscat (in: _Dest=0x68ac708, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.ac3a86" [0183.364] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.ac3a86", NtPathName=0x94cf700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8fe8 [0183.715] FlushFileBuffers (hFile=0xfc8) returned 1 [0185.086] CloseHandle (hObject=0xfc8) returned 1 [0185.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d575d0 [0185.380] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0185.380] wcscat (in: _Dest=0x3d575d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" [0185.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\ac3a86-readme.txt")) returned 0x2020 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 4715 os_tid = 0x26b0 [0175.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 0x2020 [0176.631] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0176.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e38 [0176.634] GetFileSizeEx (in: hFile=0x1e38, lpFileSize=0x83ffd9c | out: lpFileSize=0x83ffd9c*=41) returned 1 [0176.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0176.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0176.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0176.634] NtQuerySystemTime (in: CurrentTime=0x83ffd10 | out: CurrentTime=0x83ffd10*=132482710851180000) returned 0x0 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x1a8cac7b [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x3597efcf [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x7f523da3 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x32a269dd [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x438b3ac0 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x503a12d0 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5f868025 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x4bd88c08 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x686be246 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x6a23f1cf [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5225eb77 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x55031744 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x750d29a9 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5f05f5e5 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5d816387 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5c601918 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x269f373a [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x7ff0e153 [0176.634] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x59f40861 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x6a2e1cf5 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x545c4bef [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5ab699a4 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x7b231ce4 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x2be18eff [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x34ddfb5d [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x7965c07 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x138d97cf [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x4f289dd2 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x65622265 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x5787c51a [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x739367b0 [0176.635] RtlRandomEx (in: Seed=0x83ffd08 | out: Seed=0x83ffd08) returned 0x145e5845 [0176.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0176.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0176.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0176.644] ReadFile (in: hFile=0x1e38, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0x83ffd04, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0x83ffd04*=0x29, lpOverlapped=0x0) returned 1 [0176.647] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.647] WriteFile (in: hFile=0x1e38, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x83ffd08, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0x83ffd08*=0x29, lpOverlapped=0x0) returned 1 [0176.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0176.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0176.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0176.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0176.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0176.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0176.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68227e0) returned 1 [0176.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19dc8 [0176.971] SetFilePointerEx (in: hFile=0x1e38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.971] WriteFile (in: hFile=0x1e38, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x83ffd90, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x83ffd90*=0x110, lpOverlapped=0x0) returned 1 [0178.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0178.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0178.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0178.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0178.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0178.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0178.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0178.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0178.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea72d8 [0178.412] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" [0178.412] wcscat (in: _Dest=0x3ea72d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.ac3a86" [0178.412] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.ac3a86", NtPathName=0x83ffd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0178.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f96e8 [0178.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0178.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681c808) returned 1 [0178.438] NtQueryInformationFile (in: FileHandle=0x1e38, IoStatusBlock=0x83ffce0, FileInformation=0x83ffce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x83ffce0, FileInformation=0x83ffce8) returned 0x0 [0178.438] NtSetInformationFile (FileHandle=0x1e38, IoStatusBlock=0x83ffce0, FileInformation=0x83ffce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0178.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 [0178.443] FlushFileBuffers (hFile=0x1e38) returned 1 [0178.455] CloseHandle (hObject=0x1e38) returned 1 [0178.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d574e8 [0178.456] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0178.456] wcscat (in: _Dest=0x3d574e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" [0178.456] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\ac3a86-readme.txt")) returned 0xffffffff [0178.456] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e38 [0178.458] WriteFile (in: hFile=0x1e38, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x83ffd24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x83ffd24*=0x8b9, lpOverlapped=0x0) returned 1 [0178.461] CloseHandle (hObject=0x1e38) returned 1 [0178.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 [0178.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 4716 os_tid = 0x26b4 [0175.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 0x20 [0175.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0175.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.693] GetLastError () returned 0x5 [0175.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0175.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 4717 os_tid = 0x26b8 [0175.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs")) returned 0x20 [0175.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0175.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.696] GetLastError () returned 0x5 [0175.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0175.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 4718 os_tid = 0x26bc [0175.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht")) returned 0x20 [0175.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0175.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.697] GetLastError () returned 0x5 [0175.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0175.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cb60) returned 1 Thread: id = 4719 os_tid = 0x26c0 [0175.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan")) returned 0x20 [0175.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0175.699] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.699] GetLastError () returned 0x5 [0175.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0175.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c968) returned 1 Thread: id = 4720 os_tid = 0x26c4 [0175.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu")) returned 0x20 [0175.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0175.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.701] GetLastError () returned 0x5 [0175.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0175.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d7d8) returned 1 Thread: id = 4721 os_tid = 0x26c8 [0175.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp")) returned 0x20 [0175.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0175.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.703] GetLastError () returned 0x5 [0175.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0175.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d298) returned 1 Thread: id = 4722 os_tid = 0x26cc [0175.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq")) returned 0x20 [0175.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0175.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.705] GetLastError () returned 0x5 [0175.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0175.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c818) returned 1 Thread: id = 4723 os_tid = 0x26d0 [0175.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra")) returned 0x20 [0175.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0175.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.707] GetLastError () returned 0x5 [0175.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0175.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bd98) returned 1 Thread: id = 4724 os_tid = 0x26d4 [0175.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita")) returned 0x20 [0175.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0175.709] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.709] GetLastError () returned 0x5 [0175.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0175.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d1f0) returned 1 Thread: id = 4725 os_tid = 0x26d8 [0175.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn")) returned 0x20 [0175.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0175.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.711] GetLastError () returned 0x5 [0175.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0175.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d490) returned 1 Thread: id = 4726 os_tid = 0x26dc [0175.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor")) returned 0x20 [0175.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0175.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.713] GetLastError () returned 0x5 [0175.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0175.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d5e0) returned 1 Thread: id = 4727 os_tid = 0x26e0 [0175.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp")) returned 0x20 [0175.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0175.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.715] GetLastError () returned 0x5 [0175.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0175.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cf50) returned 1 Thread: id = 4728 os_tid = 0x26e4 [0175.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld")) returned 0x20 [0175.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0175.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.719] GetLastError () returned 0x5 [0175.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0175.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cc08) returned 1 Thread: id = 4729 os_tid = 0x26e8 [0175.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor")) returned 0x20 [0175.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0175.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.722] GetLastError () returned 0x5 [0175.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0175.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5dbc8) returned 1 Thread: id = 4730 os_tid = 0x26ec [0175.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb")) returned 0x20 [0175.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0175.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.724] GetLastError () returned 0x5 [0175.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0175.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cea8) returned 1 Thread: id = 4731 os_tid = 0x26f0 [0175.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 0x20 [0175.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0175.726] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.726] GetLastError () returned 0x5 [0175.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0175.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d928) returned 1 Thread: id = 4732 os_tid = 0x26f4 [0175.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve")) returned 0x20 [0175.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0175.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.728] GetLastError () returned 0x5 [0175.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0175.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5bee8) returned 1 Thread: id = 4733 os_tid = 0x26f8 [0175.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat")) returned 0x20 [0175.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0175.730] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.730] GetLastError () returned 0x5 [0175.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0175.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3c20) returned 1 Thread: id = 4734 os_tid = 0x26fc [0175.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs")) returned 0x20 [0175.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0175.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.732] GetLastError () returned 0x5 [0175.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0175.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3cd0) returned 1 Thread: id = 4735 os_tid = 0x2700 [0175.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht")) returned 0x20 [0175.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0175.734] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.734] GetLastError () returned 0x5 [0175.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0175.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3800) returned 1 Thread: id = 4736 os_tid = 0x2704 [0175.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan")) returned 0x20 [0175.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0175.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.736] GetLastError () returned 0x5 [0175.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0175.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33e0) returned 1 Thread: id = 4737 os_tid = 0x2708 [0175.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu")) returned 0x20 [0175.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0175.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.738] GetLastError () returned 0x5 [0175.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0175.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 4738 os_tid = 0x270c [0175.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp")) returned 0x20 [0175.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0175.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.739] GetLastError () returned 0x5 [0175.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0175.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 4739 os_tid = 0x2710 [0175.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq")) returned 0x20 [0175.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0175.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.741] GetLastError () returned 0x5 [0175.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0175.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 4740 os_tid = 0x2714 [0175.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra")) returned 0x20 [0175.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0175.743] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.743] GetLastError () returned 0x5 [0175.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0175.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3120) returned 1 Thread: id = 4741 os_tid = 0x2718 [0175.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita")) returned 0x20 [0175.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0175.745] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.745] GetLastError () returned 0x5 [0175.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0175.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 Thread: id = 4742 os_tid = 0x271c [0176.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn")) returned 0x20 [0176.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0176.090] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.090] GetLastError () returned 0x5 [0176.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0176.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2410) returned 1 Thread: id = 4743 os_tid = 0x2720 [0176.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x327410 [0176.095] wcscpy (in: _Dest=0x327410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0176.095] wcscat (in: _Dest=0x327410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0176.096] wcscat (in: _Dest=0x327410, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*" [0176.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b028 [0176.096] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0186.738] wcscmp (_String1=".", _String2=".") returned 0 [0186.738] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.738] wcscmp (_String1="..", _String2=".") returned 1 [0186.739] wcscmp (_String1="..", _String2="..") returned 0 [0186.739] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe66468f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe66468f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6649000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0186.739] wcscmp (_String1="Google Docs.ico", _String2=".") returned 1 [0186.739] wcscmp (_String1="Google Docs.ico", _String2="..") returned 1 [0186.739] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6770690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0186.739] wcscmp (_String1="Google Docs.ico.md5", _String2=".") returned 1 [0186.739] wcscmp (_String1="Google Docs.ico.md5", _String2="..") returned 1 [0186.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x67552d0 [0186.739] wcscpy (in: _Dest=0x67552d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0186.739] wcscat (in: _Dest=0x67552d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0186.739] wcscat (in: _Dest=0x67552d0, _Source="Google Docs.ico.md5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" [0189.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67552d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0189.901] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x697b028 | out: lpFindFileData=0x697b028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6770690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0 [0189.901] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0189.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b028) returned 1 [0189.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x327410) returned 1 [0189.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 4744 os_tid = 0x2724 [0176.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx")) returned 0x20 [0176.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0176.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.097] GetLastError () returned 0x5 [0176.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0176.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cab8) returned 1 Thread: id = 4745 os_tid = 0x2728 [0176.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx")) returned 0x20 [0176.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0176.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.099] GetLastError () returned 0x5 [0176.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0176.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 4746 os_tid = 0x272c [0176.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc")) returned 0x20 [0176.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x20) returned 0 [0176.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.101] GetLastError () returned 0x5 [0176.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x20) returned 0 [0176.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 4747 os_tid = 0x2730 [0176.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc")) returned 0x20 [0180.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x20) returned 0 [0180.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.120] GetLastError () returned 0x5 [0180.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x20) returned 0 [0180.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 4748 os_tid = 0x2734 [0176.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc")) returned 0x20 [0176.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0176.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.668] GetLastError () returned 0x5 [0176.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0176.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 4749 os_tid = 0x2738 [0176.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc")) returned 0x20 [0176.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0176.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.666] GetLastError () returned 0x5 [0176.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0176.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26590) returned 1 Thread: id = 4750 os_tid = 0x273c [0176.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc")) returned 0x20 [0176.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0176.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.663] GetLastError () returned 0x5 [0176.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0176.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 4751 os_tid = 0x2740 [0176.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc")) returned 0x20 [0178.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x20) returned 0 [0178.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.574] GetLastError () returned 0x5 [0179.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x20) returned 0 [0179.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 4752 os_tid = 0x2744 [0176.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv")) returned 0x20 [0180.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x20) returned 0 [0180.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.123] GetLastError () returned 0x5 [0180.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x20) returned 0 [0180.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 4753 os_tid = 0x2748 [0176.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml")) returned 0x20 [0180.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x20) returned 0 [0180.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.124] GetLastError () returned 0x5 [0180.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x20) returned 0 [0180.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 4754 os_tid = 0x274c [0176.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc")) returned 0x20 [0179.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x20) returned 0 [0179.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.836] GetLastError () returned 0x5 [0179.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x20) returned 0 [0179.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bdb8) returned 1 Thread: id = 4755 os_tid = 0x2750 [0176.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c05a8 [0176.114] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0176.114] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0176.114] wcscat (in: _Dest=0x69c05a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*" [0176.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0176.114] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0176.114] wcscmp (_String1=".", _String2=".") returned 0 [0176.115] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.115] wcscmp (_String1="..", _String2=".") returned 1 [0176.115] wcscmp (_String1="..", _String2="..") returned 0 [0176.115] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 1 [0176.115] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2=".") returned 1 [0176.115] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2="..") returned 1 [0176.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8a48 [0176.115] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0176.115] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0176.115] wcscat (in: _Dest=0x3ea8a48, _Source="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" [0176.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0176.791] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 0 [0176.791] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0176.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0176.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 [0176.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 4756 os_tid = 0x2754 [0176.115] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 0x2020 [0176.116] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", dwFileAttributes=0x20) returned 1 [0176.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1158 [0176.916] GetFileSizeEx (in: hFile=0x1158, lpFileSize=0x8f9f8ac | out: lpFileSize=0x8f9f8ac*=40) returned 1 [0176.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0176.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0176.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0176.917] NtQuerySystemTime (in: CurrentTime=0x8f9f820 | out: CurrentTime=0x8f9f820*=132482710853988000) returned 0x0 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x1a4c7ceb [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x4fe85c23 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x59a1a4c5 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x5f49567c [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x1061ad5 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x49a88f59 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0xb62c0f6 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0xc6192e6 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x25e82948 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x48ce1daa [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x115dcae7 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x66ab641c [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x4bb9f992 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x589c7339 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x47bbc78a [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x7c365fa6 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x68f22635 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x5157066f [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x79628479 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x750b6eb5 [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x288a659c [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x4cd7eafe [0176.917] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x1182a8ea [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x2d0fc2bb [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x77fe0767 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x47e18bea [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x6591ca78 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x2e4f44c1 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x158e0030 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x72242945 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x50094710 [0176.918] RtlRandomEx (in: Seed=0x8f9f818 | out: Seed=0x8f9f818) returned 0x1bdf80f9 [0176.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0176.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69bbd68 [0176.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0176.928] ReadFile (in: hFile=0x1158, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x8f9f814, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0x8f9f814*=0x28, lpOverlapped=0x0) returned 1 [0176.930] SetFilePointerEx (in: hFile=0x1158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.930] WriteFile (in: hFile=0x1158, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x8f9f818, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x8f9f818*=0x28, lpOverlapped=0x0) returned 1 [0177.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0177.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0177.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0177.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0177.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0177.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0177.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fda60) returned 1 [0177.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5ab0 [0177.353] SetFilePointerEx (in: hFile=0x1158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.353] WriteFile (in: hFile=0x1158, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x8f9f8a0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x8f9f8a0*=0x10a, lpOverlapped=0x0) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0178.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0178.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea35f0 [0178.422] wcscpy (in: _Dest=0x3ea35f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" [0178.422] wcscat (in: _Dest=0x3ea35f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.ac3a86" [0178.422] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.ac3a86", NtPathName=0x8f9f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0178.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682e648 [0178.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 [0178.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681e638) returned 1 [0178.440] NtQueryInformationFile (in: FileHandle=0x1158, IoStatusBlock=0x8f9f7f0, FileInformation=0x8f9f7f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8f9f7f0, FileInformation=0x8f9f7f8) returned 0x0 [0178.440] NtSetInformationFile (FileHandle=0x1158, IoStatusBlock=0x8f9f7f0, FileInformation=0x8f9f7f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0178.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea35f0) returned 1 [0178.447] FlushFileBuffers (hFile=0x1158) returned 1 [0178.462] CloseHandle (hObject=0x1158) returned 1 [0178.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea35f0 [0178.464] wcscpy (in: _Dest=0x3ea35f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0178.464] wcscat (in: _Dest=0x3ea35f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt" [0178.464] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\ac3a86-readme.txt")) returned 0x2020 [0178.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea35f0) returned 1 [0178.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 4757 os_tid = 0x2758 [0176.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 0x20 [0176.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0176.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.117] GetLastError () returned 0x5 [0176.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0176.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 4758 os_tid = 0x275c [0176.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 0x20 [0179.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.539] GetLastError () returned 0x5 [0179.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30120b8) returned 1 Thread: id = 4759 os_tid = 0x2760 [0176.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 0x20 [0179.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.541] GetLastError () returned 0x5 [0179.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 4760 os_tid = 0x2764 [0176.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 0x20 [0179.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.542] GetLastError () returned 0x5 [0179.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 Thread: id = 4761 os_tid = 0x2768 [0176.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js")) returned 0x20 [0179.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.544] GetLastError () returned 0x5 [0179.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 4762 os_tid = 0x276c [0176.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 0x20 [0179.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0179.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.545] GetLastError () returned 0x5 [0179.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0179.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4330) returned 1 Thread: id = 4763 os_tid = 0x2770 [0176.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 0x20 [0179.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0179.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.546] GetLastError () returned 0x5 [0179.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0179.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4410) returned 1 Thread: id = 4764 os_tid = 0x2774 [0176.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 0x20 [0179.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0179.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.547] GetLastError () returned 0x5 [0179.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0179.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea44f0) returned 1 Thread: id = 4765 os_tid = 0x2778 [0176.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 0x20 [0179.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.549] GetLastError () returned 0x5 [0179.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 4766 os_tid = 0x277c [0176.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 0x20 [0179.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0179.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.550] GetLastError () returned 0x5 [0179.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0179.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea45d0) returned 1 Thread: id = 4767 os_tid = 0x2780 [0176.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36110 [0176.125] wcscpy (in: _Dest=0x3e36110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0176.125] wcscat (in: _Dest=0x3e36110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0176.125] wcscat (in: _Dest=0x3e36110, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*" [0176.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a1b8 [0176.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0181.262] wcscmp (_String1=".", _String2=".") returned 0 [0181.262] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.013] wcscmp (_String1="..", _String2=".") returned 1 [0182.013] wcscmp (_String1="..", _String2="..") returned 0 [0182.013] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0182.013] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0182.013] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0182.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c96e8 [0182.013] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0182.013] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0182.013] wcscat (in: _Dest=0x2c96e8, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" [0200.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0200.472] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0200.472] wcscmp (_String1="Americana", _String2=".") returned 1 [0200.472] wcscmp (_String1="Americana", _String2="..") returned 1 [0200.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0200.472] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.472] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.472] wcscat (in: _Dest=0x2c9a68, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0200.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0200.473] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0200.473] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0200.473] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0200.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56668 [0200.474] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.474] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.474] wcscat (in: _Dest=0x3d56668, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" [0200.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0200.475] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0200.475] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0200.475] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0200.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30126a0 [0200.475] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.475] wcscat (in: _Dest=0x30126a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.475] wcscat (in: _Dest=0x30126a0, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0200.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30126a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0200.476] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0200.476] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0200.476] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0200.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9528 [0200.476] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.476] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.476] wcscat (in: _Dest=0x2c9528, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" [0200.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0200.478] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0200.478] wcscmp (_String1="Biscay", _String2=".") returned 1 [0200.478] wcscmp (_String1="Biscay", _String2="..") returned 1 [0200.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30125c8 [0200.478] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.478] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.478] wcscat (in: _Dest=0x30125c8, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0200.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0200.479] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0200.479] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0200.479] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0200.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9608 [0200.480] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.480] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.480] wcscat (in: _Dest=0x2c9608, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" [0200.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0200.481] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0200.481] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0200.481] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0200.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8568 [0200.481] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.481] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.481] wcscat (in: _Dest=0x2c8568, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0200.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0200.482] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0200.482] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0200.482] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0200.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d577a0 [0200.483] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.483] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.483] wcscat (in: _Dest=0x3d577a0, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" [0200.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0200.484] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0200.484] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0200.484] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0200.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9448 [0200.484] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.484] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.484] wcscat (in: _Dest=0x2c9448, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0200.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0200.485] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0200.485] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0200.485] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0200.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d574e8 [0200.485] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.486] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.486] wcscat (in: _Dest=0x3d574e8, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" [0200.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0200.487] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0200.487] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0200.487] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0200.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0200.487] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.487] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.487] wcscat (in: _Dest=0x2c97c8, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" [0200.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0200.488] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0200.488] wcscmp (_String1="Country.css", _String2=".") returned 1 [0200.488] wcscmp (_String1="Country.css", _String2="..") returned 1 [0200.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c98a8 [0200.488] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.488] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.488] wcscat (in: _Dest=0x2c98a8, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" [0200.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0200.490] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0200.490] wcscmp (_String1="Desert", _String2=".") returned 1 [0200.490] wcscmp (_String1="Desert", _String2="..") returned 1 [0200.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011d58 [0200.490] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.490] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.490] wcscat (in: _Dest=0x3011d58, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0200.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3011d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0200.491] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0200.491] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0200.491] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0200.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9988 [0200.491] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.492] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.492] wcscat (in: _Dest=0x2c9988, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" [0200.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0200.493] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0200.493] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0200.493] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0200.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x678cab8 [0200.493] wcscpy (in: _Dest=0x678cab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.493] wcscat (in: _Dest=0x678cab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.493] wcscat (in: _Dest=0x678cab8, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" [0200.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0200.494] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0200.494] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0200.494] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0200.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x678cb98 [0200.495] wcscpy (in: _Dest=0x678cb98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.495] wcscat (in: _Dest=0x678cb98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.495] wcscat (in: _Dest=0x678cb98, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0200.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x678cb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0200.496] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0200.496] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0200.496] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0200.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56af0 [0200.496] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.496] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.496] wcscat (in: _Dest=0x3d56af0, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" [0200.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0200.497] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0200.497] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0200.497] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0200.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x678cc78 [0200.498] wcscpy (in: _Dest=0x678cc78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.498] wcscat (in: _Dest=0x678cc78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.498] wcscat (in: _Dest=0x678cc78, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" [0200.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678cc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0200.501] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0200.501] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0200.501] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0200.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57400 [0200.506] wcscpy (in: _Dest=0x3d57400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.507] wcscat (in: _Dest=0x3d57400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.507] wcscat (in: _Dest=0x3d57400, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" [0200.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0200.509] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0200.509] wcscmp (_String1="Lime", _String2=".") returned 1 [0200.509] wcscmp (_String1="Lime", _String2="..") returned 1 [0200.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35b60 [0200.509] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.509] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.509] wcscat (in: _Dest=0x3e35b60, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0200.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0200.510] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0200.510] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0200.511] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0200.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30120b8 [0200.511] wcscpy (in: _Dest=0x30120b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.511] wcscat (in: _Dest=0x30120b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.511] wcscat (in: _Dest=0x30120b8, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" [0200.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30120b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0200.512] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0200.512] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0200.512] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0200.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x678cd58 [0200.512] wcscpy (in: _Dest=0x678cd58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.512] wcscat (in: _Dest=0x678cd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.512] wcscat (in: _Dest=0x678cd58, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" [0200.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678cd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0200.514] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0200.514] wcscmp (_String1="Oasis", _String2=".") returned 1 [0200.514] wcscmp (_String1="Oasis", _String2="..") returned 1 [0200.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3011188 [0200.514] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.514] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.514] wcscat (in: _Dest=0x3011188, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0200.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0200.515] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0200.515] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0200.515] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0200.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x678ce38 [0200.515] wcscpy (in: _Dest=0x678ce38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.515] wcscat (in: _Dest=0x678ce38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.516] wcscat (in: _Dest=0x678ce38, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" [0200.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678ce38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0200.517] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0200.517] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0200.517] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0200.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56cc0 [0200.517] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.517] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.517] wcscat (in: _Dest=0x3d56cc0, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" [0200.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0200.518] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x902a69f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0200.518] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0200.518] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0200.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x678cf18 [0200.518] wcscpy (in: _Dest=0x678cf18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.518] wcscat (in: _Dest=0x678cf18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.518] wcscat (in: _Dest=0x678cf18, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" [0200.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678cf18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0200.932] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0200.932] wcscmp (_String1="Slate", _String2=".") returned 1 [0200.933] wcscmp (_String1="Slate", _String2="..") returned 1 [0200.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e489b8 [0200.933] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.933] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.933] wcscat (in: _Dest=0x3e489b8, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0201.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0201.327] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0201.327] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0201.327] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0201.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0201.327] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.327] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.327] wcscat (in: _Dest=0x2c9a68, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" [0201.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0201.329] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0201.329] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0201.329] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0201.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56750 [0201.329] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.329] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.329] wcscat (in: _Dest=0x3d56750, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" [0201.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0201.330] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0201.330] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0201.330] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0201.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3012a00 [0201.330] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.330] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.330] wcscat (in: _Dest=0x3012a00, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0201.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3012a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0201.332] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0201.332] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0201.332] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0201.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c96e8 [0201.332] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.332] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.332] wcscat (in: _Dest=0x2c96e8, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" [0201.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0201.333] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0201.333] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0201.333] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0201.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x678d1b8 [0201.333] wcscpy (in: _Dest=0x678d1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.333] wcscat (in: _Dest=0x678d1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.333] wcscat (in: _Dest=0x678d1b8, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0201.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x678d1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0201.335] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0201.335] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0201.335] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0201.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56498 [0201.335] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.335] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.335] wcscat (in: _Dest=0x3d56498, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" [0201.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0201.336] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0201.906] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0201.906] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0201.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e488e0 [0201.906] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.906] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.906] wcscat (in: _Dest=0x3e488e0, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" [0201.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e488e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0201.943] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0201.943] wcscmp (_String1="STS2", _String2=".") returned 1 [0201.943] wcscmp (_String1="STS2", _String2="..") returned 1 [0201.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e359c0 [0201.943] wcscpy (in: _Dest=0x3e359c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.943] wcscat (in: _Dest=0x3e359c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.943] wcscat (in: _Dest=0x3e359c0, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0201.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e359c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0201.944] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0201.944] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0201.944] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0201.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48220 [0201.944] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.944] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.944] wcscat (in: _Dest=0x3e48220, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" [0201.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e48220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0201.945] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0201.945] wcscmp (_String1="Swirl", _String2=".") returned 1 [0201.945] wcscmp (_String1="Swirl", _String2="..") returned 1 [0201.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48730 [0201.946] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.946] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.946] wcscat (in: _Dest=0x3e48730, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0201.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0201.947] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0201.947] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0201.947] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0201.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x678d378 [0201.947] wcscpy (in: _Dest=0x678d378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.947] wcscat (in: _Dest=0x678d378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.947] wcscat (in: _Dest=0x678d378, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" [0201.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x678d378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0201.950] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0201.950] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0201.950] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0201.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e47578 [0201.950] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.950] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.950] wcscat (in: _Dest=0x3e47578, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" [0201.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0201.951] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0201.951] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0201.951] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0201.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56920 [0201.951] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.951] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.951] wcscat (in: _Dest=0x3d56920, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" [0201.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0201.952] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0201.952] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0201.952] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0201.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57318 [0201.952] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.952] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.952] wcscat (in: _Dest=0x3d57318, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" [0201.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0201.954] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x697a1b8 | out: lpFindFileData=0x697a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0202.137] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0206.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a1b8) returned 1 [0206.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36110) returned 1 [0206.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f908) returned 1 Thread: id = 4768 os_tid = 0x2784 [0176.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm")) returned 0x20 [0179.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0179.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.525] GetLastError () returned 0x5 [0179.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0179.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea46b0) returned 1 Thread: id = 4769 os_tid = 0x2788 [0176.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 0x20 [0179.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0179.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.538] GetLastError () returned 0x5 [0179.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0179.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56e90) returned 1 Thread: id = 4770 os_tid = 0x278c [0176.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0179.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0179.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.537] GetLastError () returned 0x5 [0179.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0179.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 Thread: id = 4771 os_tid = 0x2790 [0176.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 0x20 [0179.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0179.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.535] GetLastError () returned 0x5 [0179.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0179.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 4772 os_tid = 0x2794 [0176.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 0x20 [0179.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.534] GetLastError () returned 0x5 [0179.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0179.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4790) returned 1 Thread: id = 4773 os_tid = 0x2798 [0176.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 0x20 [0179.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0179.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.524] GetLastError () returned 0x5 [0179.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0179.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 4774 os_tid = 0x279c [0176.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js")) returned 0x20 [0178.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0178.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.964] GetLastError () returned 0x5 [0178.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0178.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 4775 os_tid = 0x27a0 [0176.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif")) returned 0x20 [0178.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0178.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.962] GetLastError () returned 0x5 [0178.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0178.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 Thread: id = 4776 os_tid = 0x27a4 [0176.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif")) returned 0x20 [0179.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0179.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.557] GetLastError () returned 0x5 [0179.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0179.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 4777 os_tid = 0x27a8 [0176.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js")) returned 0x20 [0179.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0179.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.533] GetLastError () returned 0x5 [0179.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0179.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04890) returned 1 Thread: id = 4778 os_tid = 0x27ac [0176.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif")) returned 0x20 [0177.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0177.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.963] GetLastError () returned 0x5 [0178.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0178.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 4779 os_tid = 0x27b0 [0176.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif")) returned 0x20 [0179.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0179.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.531] GetLastError () returned 0x5 [0179.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0179.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 4780 os_tid = 0x27b4 [0176.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif")) returned 0x20 [0179.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0179.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.556] GetLastError () returned 0x5 [0179.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0179.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f778) returned 1 Thread: id = 4781 os_tid = 0x27b8 [0176.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif")) returned 0x20 [0179.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0179.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.530] GetLastError () returned 0x5 [0179.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0179.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 4782 os_tid = 0x27bc [0176.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif")) returned 0x20 [0179.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0179.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.529] GetLastError () returned 0x5 [0179.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0179.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ba0) returned 1 Thread: id = 4783 os_tid = 0x27c0 [0176.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 0x20 [0176.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0176.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.378] GetLastError () returned 0x5 [0176.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0176.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 4784 os_tid = 0x27c4 [0176.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 0x20 [0176.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0176.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.380] GetLastError () returned 0x5 [0176.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0176.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 4785 os_tid = 0x27c8 [0176.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 0x20 [0176.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0176.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.382] GetLastError () returned 0x5 [0176.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0176.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 4786 os_tid = 0x27cc [0176.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 0x20 [0176.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0176.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.384] GetLastError () returned 0x5 [0176.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0176.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57230) returned 1 Thread: id = 4787 os_tid = 0x27d0 [0176.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 0x20 [0178.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0178.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.641] GetLastError () returned 0x5 [0178.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0178.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4950) returned 1 Thread: id = 4788 os_tid = 0x27d4 [0176.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 0x20 [0178.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0178.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.899] GetLastError () returned 0x5 [0178.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0178.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f78) returned 1 Thread: id = 4789 os_tid = 0x27d8 [0176.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 0x20 [0178.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0178.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.638] GetLastError () returned 0x5 [0178.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0178.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 4790 os_tid = 0x27dc [0176.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 0x20 [0177.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0177.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.639] GetLastError () returned 0x5 [0178.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0178.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 4791 os_tid = 0x27e0 [0176.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 0x20 [0178.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0178.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.906] GetLastError () returned 0x5 [0178.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0178.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57148) returned 1 Thread: id = 4792 os_tid = 0x27e4 [0176.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 0x20 [0178.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0178.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.905] GetLastError () returned 0x5 [0178.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0178.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 4793 os_tid = 0x27e8 [0176.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9528 [0176.390] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0176.390] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0176.390] wcscat (in: _Dest=0x2c9528, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*" [0176.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0176.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0178.904] wcscmp (_String1=".", _String2=".") returned 0 [0178.904] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.904] wcscmp (_String1="..", _String2=".") returned 1 [0178.904] wcscmp (_String1="..", _String2="..") returned 0 [0178.904] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1 [0178.904] wcscmp (_String1="Project Report Type", _String2=".") returned 1 [0178.904] wcscmp (_String1="Project Report Type", _String2="..") returned 1 [0178.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15a70 [0178.904] wcscpy (in: _Dest=0x3e15a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0178.904] wcscat (in: _Dest=0x3e15a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0178.904] wcscat (in: _Dest=0x3e15a70, _Source="Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0182.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0182.574] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0 [0182.574] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0182.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0182.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 [0182.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e483d0) returned 1 Thread: id = 4794 os_tid = 0x27ec [0176.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 0x20 [0178.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0178.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.903] GetLastError () returned 0x5 [0178.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 4795 os_tid = 0x27f0 [0176.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 0x20 [0178.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.902] GetLastError () returned 0x5 [0178.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 Thread: id = 4796 os_tid = 0x27f4 [0176.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 0x20 [0178.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0178.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.902] GetLastError () returned 0x5 [0178.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0178.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a30) returned 1 Thread: id = 4797 os_tid = 0x27f8 [0176.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 0x20 [0178.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0178.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.901] GetLastError () returned 0x5 [0178.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0178.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57060) returned 1 Thread: id = 4798 os_tid = 0x27fc [0176.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp")) returned 0x20 [0178.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0178.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.896] GetLastError () returned 0x5 [0178.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0178.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 4799 os_tid = 0x107c [0176.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg")) returned 0x20 [0178.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0178.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.897] GetLastError () returned 0x5 [0178.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0178.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 4800 os_tid = 0xac8 [0176.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg")) returned 0x20 [0178.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0178.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.897] GetLastError () returned 0x5 [0178.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0178.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c4c8) returned 1 Thread: id = 4801 os_tid = 0x14c0 [0176.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg")) returned 0x20 [0178.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0178.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.898] GetLastError () returned 0x5 [0178.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0178.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0cab0) returned 1 Thread: id = 4802 os_tid = 0x1350 [0176.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 0x20 [0178.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0178.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.908] GetLastError () returned 0x5 [0178.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0178.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4b10) returned 1 Thread: id = 4803 os_tid = 0x14c4 [0176.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 0x20 [0178.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0178.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.907] GetLastError () returned 0x5 [0178.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0178.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4bf0) returned 1 Thread: id = 4804 os_tid = 0x14c8 [0176.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 0x20 [0178.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0178.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.900] GetLastError () returned 0x5 [0178.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0178.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a08) returned 1 Thread: id = 4805 os_tid = 0x14cc [0176.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan")) returned 0x20 [0176.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0176.395] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.396] GetLastError () returned 0x5 [0176.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0176.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 4806 os_tid = 0x14d8 [0176.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan")) returned 0x20 [0176.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0176.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.398] GetLastError () returned 0x5 [0176.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0176.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 4807 os_tid = 0x10dc [0176.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan")) returned 0x20 [0176.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0176.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.400] GetLastError () returned 0x5 [0176.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0176.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 4808 os_tid = 0x14dc [0176.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan")) returned 0x20 [0177.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0177.365] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.365] GetLastError () returned 0x5 [0177.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0177.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9e8) returned 1 Thread: id = 4809 os_tid = 0x14e0 [0176.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan")) returned 0x20 [0177.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0177.366] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.367] GetLastError () returned 0x5 [0177.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0177.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 4810 os_tid = 0x14e8 [0176.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan")) returned 0x20 [0176.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0176.997] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.998] GetLastError () returned 0x5 [0176.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0176.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 4811 os_tid = 0xec4 [0176.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan")) returned 0x20 [0176.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0176.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.996] GetLastError () returned 0x5 [0176.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0176.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a00) returned 1 Thread: id = 4812 os_tid = 0x10cc [0176.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan")) returned 0x20 [0176.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0176.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.993] GetLastError () returned 0x5 [0176.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0176.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf38) returned 1 Thread: id = 4813 os_tid = 0x1200 [0176.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan")) returned 0x20 [0177.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0177.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.383] GetLastError () returned 0x5 [0177.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0177.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 4814 os_tid = 0x1210 [0176.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan")) returned 0x20 [0177.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0177.381] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.382] GetLastError () returned 0x5 [0177.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0177.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 4815 os_tid = 0x1214 [0176.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan")) returned 0x20 [0177.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0177.380] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.380] GetLastError () returned 0x5 [0177.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0177.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 4816 os_tid = 0x1218 [0176.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan")) returned 0x20 [0177.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0177.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.378] GetLastError () returned 0x5 [0177.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0177.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 4817 os_tid = 0x8cc [0176.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan")) returned 0x20 [0177.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0177.377] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.377] GetLastError () returned 0x5 [0177.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0177.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 4818 os_tid = 0x121c [0176.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan")) returned 0x20 [0177.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0177.375] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.375] GetLastError () returned 0x5 [0177.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0177.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 4819 os_tid = 0x1220 [0176.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan")) returned 0x20 [0177.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0177.374] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.374] GetLastError () returned 0x5 [0177.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0177.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 4820 os_tid = 0x1284 [0176.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674da78 [0176.410] wcscpy (in: _Dest=0x674da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0176.410] wcscat (in: _Dest=0x674da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0176.410] wcscat (in: _Dest=0x674da78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*" [0176.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d6a8 [0176.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0177.373] wcscmp (_String1=".", _String2=".") returned 0 [0177.373] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.373] wcscmp (_String1="..", _String2=".") returned 1 [0177.373] wcscmp (_String1="..", _String2="..") returned 0 [0177.373] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0177.373] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0177.373] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0177.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e618 [0177.373] wcscpy (in: _Dest=0x697e618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0177.373] wcscat (in: _Dest=0x697e618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0177.373] wcscat (in: _Dest=0x697e618, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" [0179.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0179.396] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0179.396] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0179.396] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0179.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697de38 [0179.396] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0179.396] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0179.396] wcscat (in: _Dest=0x697de38, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" [0179.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0179.398] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0179.398] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0179.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d6a8) returned 1 [0179.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 [0179.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 4821 os_tid = 0x1288 [0176.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan")) returned 0x20 [0177.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0177.371] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.371] GetLastError () returned 0x5 [0177.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0177.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 4822 os_tid = 0x128c [0176.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan")) returned 0x20 [0177.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0177.370] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.370] GetLastError () returned 0x5 [0177.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0177.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 4823 os_tid = 0x1290 [0176.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan")) returned 0x20 [0177.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0177.368] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.368] GetLastError () returned 0x5 [0177.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0177.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 4824 os_tid = 0x1298 [0176.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu")) returned 0x20 [0177.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0177.385] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.385] GetLastError () returned 0x5 [0177.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0177.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 4825 os_tid = 0x129c [0176.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu")) returned 0x20 [0177.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0177.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.006] GetLastError () returned 0x5 [0177.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0177.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de68) returned 1 Thread: id = 4826 os_tid = 0x12a0 [0176.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu")) returned 0x20 [0177.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0177.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.005] GetLastError () returned 0x5 [0177.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0177.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674def8) returned 1 Thread: id = 4827 os_tid = 0x12a4 [0176.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu")) returned 0x20 [0177.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0177.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.003] GetLastError () returned 0x5 [0177.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0177.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 4828 os_tid = 0x12a8 [0176.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu")) returned 0x20 [0177.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0177.406] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.406] GetLastError () returned 0x5 [0177.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0177.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 4829 os_tid = 0x12ac [0176.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu")) returned 0x20 [0177.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0177.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.405] GetLastError () returned 0x5 [0177.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0177.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 4830 os_tid = 0x12b0 [0176.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu")) returned 0x20 [0177.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0177.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.403] GetLastError () returned 0x5 [0177.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0177.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 4831 os_tid = 0x12c8 [0176.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu")) returned 0x20 [0177.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0177.401] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.402] GetLastError () returned 0x5 [0177.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0177.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 4832 os_tid = 0x12d0 [0176.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu")) returned 0x20 [0177.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0177.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.400] GetLastError () returned 0x5 [0177.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0177.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 4833 os_tid = 0x12d4 [0176.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu")) returned 0x20 [0177.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0177.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.398] GetLastError () returned 0x5 [0177.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0177.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 4834 os_tid = 0x12d8 [0176.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu")) returned 0x20 [0177.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0177.397] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.397] GetLastError () returned 0x5 [0177.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0177.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 4835 os_tid = 0x1528 [0176.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu")) returned 0x20 [0177.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0177.395] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.395] GetLastError () returned 0x5 [0177.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0177.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 4836 os_tid = 0x111c [0176.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu")) returned 0x20 [0177.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0177.394] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.394] GetLastError () returned 0x5 [0177.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0177.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e888) returned 1 Thread: id = 4837 os_tid = 0x1158 [0176.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu")) returned 0x20 [0177.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0177.392] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.392] GetLastError () returned 0x5 [0177.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0177.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 Thread: id = 4838 os_tid = 0xdac [0176.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cbd8 [0176.427] wcscpy (in: _Dest=0x674cbd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0176.427] wcscat (in: _Dest=0x674cbd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0176.427] wcscat (in: _Dest=0x674cbd8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*" [0176.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0176.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0177.391] wcscmp (_String1=".", _String2=".") returned 0 [0177.391] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.391] wcscmp (_String1="..", _String2=".") returned 1 [0177.391] wcscmp (_String1="..", _String2="..") returned 0 [0177.391] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0177.391] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0177.391] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0177.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e4c8 [0177.391] wcscpy (in: _Dest=0x697e4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0177.391] wcscat (in: _Dest=0x697e4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0177.391] wcscat (in: _Dest=0x697e4c8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" [0180.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0180.535] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0180.535] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0180.536] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0180.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697de38 [0180.536] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0180.536] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0180.536] wcscat (in: _Dest=0x697de38, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" [0180.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0180.537] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0180.537] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0180.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0180.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 [0180.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 4839 os_tid = 0x1164 [0176.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu")) returned 0x20 [0177.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0177.390] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.390] GetLastError () returned 0x5 [0177.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0177.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 Thread: id = 4840 os_tid = 0x15b8 [0176.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu")) returned 0x20 [0177.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0177.388] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.388] GetLastError () returned 0x5 [0177.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0177.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 4841 os_tid = 0x89c [0176.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu")) returned 0x20 [0177.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0177.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.387] GetLastError () returned 0x5 [0177.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0177.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 4842 os_tid = 0x116c [0176.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx")) returned 0x20 [0176.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0176.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.429] GetLastError () returned 0x5 [0176.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0176.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cff8) returned 1 Thread: id = 4843 os_tid = 0x15bc [0176.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx")) returned 0x20 [0176.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0176.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.432] GetLastError () returned 0x5 [0176.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0176.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 4844 os_tid = 0x123c [0176.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon")) returned 0x20 [0176.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0176.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.434] GetLastError () returned 0x5 [0176.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0176.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 4845 os_tid = 0x1240 [0176.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton")) returned 0x20 [0176.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0176.436] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.436] GetLastError () returned 0x5 [0176.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0176.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 4846 os_tid = 0x1250 [0176.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey")) returned 0x20 [0178.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0178.992] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.992] GetLastError () returned 0x5 [0178.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0178.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 4847 os_tid = 0x1254 [0176.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo")) returned 0x20 [0178.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0178.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.993] GetLastError () returned 0x5 [0178.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0178.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 Thread: id = 4848 os_tid = 0xd0c [0176.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal")) returned 0x20 [0178.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0178.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.978] GetLastError () returned 0x5 [0178.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0178.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 4849 os_tid = 0x17bc [0176.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat")) returned 0x20 [0178.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0178.994] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.994] GetLastError () returned 0x5 [0178.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0178.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 Thread: id = 4850 os_tid = 0xdfc [0176.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau")) returned 0x20 [0178.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0178.995] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.995] GetLastError () returned 0x5 [0178.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0178.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 4851 os_tid = 0xa14 [0176.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york")) returned 0x20 [0178.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0178.975] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.975] GetLastError () returned 0x5 [0178.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0178.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 4852 os_tid = 0x174c [0176.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon")) returned 0x20 [0178.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0178.974] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.974] GetLastError () returned 0x5 [0178.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0178.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 4853 os_tid = 0x914 [0176.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome")) returned 0x20 [0178.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0178.979] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.979] GetLastError () returned 0x5 [0178.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0178.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eef268) returned 1 Thread: id = 4854 os_tid = 0xbd8 [0176.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha")) returned 0x20 [0178.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0178.980] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.980] GetLastError () returned 0x5 [0178.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0178.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 Thread: id = 4855 os_tid = 0xff8 [0176.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e0f370 [0176.452] wcscpy (in: _Dest=0x3e0f370, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0176.452] wcscat (in: _Dest=0x3e0f370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0176.452] wcscat (in: _Dest=0x3e0f370, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*" [0176.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c5d0 [0176.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0178.991] wcscmp (_String1=".", _String2=".") returned 0 [0178.991] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.991] wcscmp (_String1="..", _String2=".") returned 1 [0178.991] wcscmp (_String1="..", _String2="..") returned 0 [0178.991] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1 [0178.991] wcscmp (_String1="Beulah", _String2=".") returned 1 [0178.992] wcscmp (_String1="Beulah", _String2="..") returned 1 [0178.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66ee850 [0178.992] wcscpy (in: _Dest=0x66ee850, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0178.992] wcscat (in: _Dest=0x66ee850, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0178.992] wcscat (in: _Dest=0x66ee850, _Source="Beulah" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" [0180.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66ee850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0180.518] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1 [0180.518] wcscmp (_String1="Center", _String2=".") returned 1 [0180.518] wcscmp (_String1="Center", _String2="..") returned 1 [0180.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66eea70 [0180.518] wcscpy (in: _Dest=0x66eea70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0180.518] wcscat (in: _Dest=0x66eea70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0180.518] wcscat (in: _Dest=0x66eea70, _Source="Center" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" [0180.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66eea70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0180.519] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 1 [0180.519] wcscmp (_String1="New_Salem", _String2=".") returned 1 [0180.520] wcscmp (_String1="New_Salem", _String2="..") returned 1 [0180.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x66dc438 [0180.520] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0180.520] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0180.520] wcscat (in: _Dest=0x66dc438, _Source="New_Salem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" [0180.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0180.521] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 0 [0180.521] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0180.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c5d0) returned 1 [0180.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 [0180.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 Thread: id = 4856 os_tid = 0x74c [0176.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga")) returned 0x20 [0178.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0178.967] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.967] GetLastError () returned 0x5 [0178.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0178.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 4857 os_tid = 0x12fc [0176.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama")) returned 0x20 [0178.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0178.719] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.720] GetLastError () returned 0x5 [0178.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0178.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 4858 os_tid = 0x1300 [0176.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung")) returned 0x20 [0178.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0178.985] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.985] GetLastError () returned 0x5 [0178.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0178.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 Thread: id = 4859 os_tid = 0xb54 [0176.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo")) returned 0x20 [0178.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0178.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.991] GetLastError () returned 0x5 [0178.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0178.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 Thread: id = 4860 os_tid = 0xb3c [0176.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix")) returned 0x20 [0178.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0178.981] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.981] GetLastError () returned 0x5 [0178.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0178.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 4861 os_tid = 0x1314 [0176.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince")) returned 0x20 [0178.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0178.989] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.990] GetLastError () returned 0x5 [0178.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0178.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 4862 os_tid = 0x1318 [0176.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho")) returned 0x20 [0178.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0178.989] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.989] GetLastError () returned 0x5 [0178.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0178.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 Thread: id = 4863 os_tid = 0xe40 [0176.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain")) returned 0x20 [0178.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0178.988] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.988] GetLastError () returned 0x5 [0178.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0178.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 Thread: id = 4864 os_tid = 0xe60 [0176.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico")) returned 0x20 [0178.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0178.987] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.987] GetLastError () returned 0x5 [0178.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0178.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 Thread: id = 4865 os_tid = 0x1544 [0176.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river")) returned 0x20 [0178.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0178.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.986] GetLastError () returned 0x5 [0178.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0178.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 4866 os_tid = 0x1048 [0176.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet")) returned 0x20 [0178.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0178.717] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.717] GetLastError () returned 0x5 [0178.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0178.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 Thread: id = 4867 os_tid = 0x154c [0176.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife")) returned 0x20 [0178.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0178.982] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.982] GetLastError () returned 0x5 [0178.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0178.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 Thread: id = 4868 os_tid = 0x1550 [0176.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina")) returned 0x20 [0178.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0178.983] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.983] GetLastError () returned 0x5 [0178.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0178.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 4869 os_tid = 0x1554 [0176.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute")) returned 0x20 [0178.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0178.984] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.984] GetLastError () returned 0x5 [0178.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0178.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 4870 os_tid = 0x8b0 [0176.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco")) returned 0x20 [0178.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0178.995] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.995] GetLastError () returned 0x5 [0178.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0178.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 Thread: id = 4871 os_tid = 0x1850 [0176.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem")) returned 0x20 [0178.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0178.985] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.985] GetLastError () returned 0x5 [0178.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0178.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 4872 os_tid = 0xe94 [0176.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel")) returned 0x20 [0177.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0178.135] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.718] GetLastError () returned 0x5 [0178.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0178.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 Thread: id = 4873 os_tid = 0x8fc [0176.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago")) returned 0x20 [0178.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0178.976] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.977] GetLastError () returned 0x5 [0178.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0178.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 4874 os_tid = 0x18f8 [0176.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d57230 [0176.738] wcscpy (in: _Dest=0x3d57230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0176.738] wcscat (in: _Dest=0x3d57230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0176.738] wcscat (in: _Dest=0x3d57230, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*" [0176.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0176.738] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0177.869] wcscmp (_String1=".", _String2=".") returned 0 [0177.869] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.869] wcscmp (_String1="..", _String2=".") returned 1 [0177.869] wcscmp (_String1="..", _String2="..") returned 0 [0177.869] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0177.869] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0177.869] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0177.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8c28 [0177.869] wcscpy (in: _Dest=0x3ea8c28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0177.869] wcscat (in: _Dest=0x3ea8c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0177.869] wcscat (in: _Dest=0x3ea8c28, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0179.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0179.941] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0179.941] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0179.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0179.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57230) returned 1 [0179.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 4875 os_tid = 0x18fc [0176.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56668 [0176.741] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0176.741] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0176.741] wcscat (in: _Dest=0x3d56668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*" [0176.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0176.741] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0178.051] wcscmp (_String1=".", _String2=".") returned 0 [0178.051] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.051] wcscmp (_String1="..", _String2=".") returned 1 [0178.051] wcscmp (_String1="..", _String2="..") returned 0 [0178.051] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.0.0.6_0", cAlternateFileName="000~1.6_0")) returned 1 [0178.051] wcscmp (_String1="0.0.0.6_0", _String2=".") returned 1 [0178.051] wcscmp (_String1="0.0.0.6_0", _String2="..") returned 1 [0178.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadd20 [0178.051] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0178.051] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0178.051] wcscat (in: _Dest=0x3dadd20, _Source="0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0179.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0179.953] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0179.953] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0179.953] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0179.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8598 [0179.954] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0179.954] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0179.954] wcscat (in: _Dest=0x3ea8598, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0179.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0179.955] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0179.955] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0179.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0179.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 [0179.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 4876 os_tid = 0x1900 [0176.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56bd8 [0176.742] wcscpy (in: _Dest=0x3d56bd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0176.742] wcscat (in: _Dest=0x3d56bd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0176.742] wcscat (in: _Dest=0x3d56bd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*" [0176.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0176.742] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0178.050] wcscmp (_String1=".", _String2=".") returned 0 [0178.050] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.050] wcscmp (_String1="..", _String2=".") returned 1 [0178.050] wcscmp (_String1="..", _String2="..") returned 0 [0178.050] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0178.050] wcscmp (_String1="14.1_0", _String2=".") returned 1 [0178.050] wcscmp (_String1="14.1_0", _String2="..") returned 1 [0178.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8e08 [0178.050] wcscpy (in: _Dest=0x3ea8e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0178.050] wcscat (in: _Dest=0x3ea8e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0178.050] wcscat (in: _Dest=0x3ea8e08, _Source="14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0179.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0179.223] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 1 [0179.223] wcscmp (_String1="6.2_0", _String2=".") returned 1 [0179.223] wcscmp (_String1="6.2_0", _String2="..") returned 1 [0179.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8868 [0179.223] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0179.223] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0179.223] wcscat (in: _Dest=0x3ea8868, _Source="6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0179.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0179.224] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 0 [0179.224] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0179.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0179.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56bd8) returned 1 [0179.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 4877 os_tid = 0xb58 [0176.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56750 [0176.742] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0176.742] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0176.742] wcscat (in: _Dest=0x3d56750, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*" [0176.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0176.743] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0178.049] wcscmp (_String1=".", _String2=".") returned 0 [0178.049] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.049] wcscmp (_String1="..", _String2=".") returned 1 [0178.049] wcscmp (_String1="..", _String2="..") returned 0 [0178.049] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.5_0", cAlternateFileName="4279B3~1.5_0")) returned 1 [0178.049] wcscmp (_String1="4.2.5_0", _String2=".") returned 1 [0178.049] wcscmp (_String1="4.2.5_0", _String2="..") returned 1 [0178.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8d18 [0178.049] wcscpy (in: _Dest=0x3ea8d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0178.049] wcscat (in: _Dest=0x3ea8d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0178.050] wcscat (in: _Dest=0x3ea8d18, _Source="4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0180.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0180.613] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1 [0180.613] wcscmp (_String1="4.2.8_0", _String2=".") returned 1 [0180.613] wcscmp (_String1="4.2.8_0", _String2="..") returned 1 [0180.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8868 [0180.613] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0180.613] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0180.613] wcscat (in: _Dest=0x3ea8868, _Source="4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0180.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0180.614] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 0 [0180.614] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0180.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0180.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 [0180.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 4878 os_tid = 0x1904 [0176.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56498 [0176.743] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0176.743] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0176.743] wcscat (in: _Dest=0x3d56498, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0176.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0176.743] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0177.705] wcscmp (_String1=".", _String2=".") returned 0 [0177.705] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.705] wcscmp (_String1="..", _String2=".") returned 1 [0177.705] wcscmp (_String1="..", _String2="..") returned 0 [0177.705] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0177.705] wcscmp (_String1="1.4_0", _String2=".") returned 1 [0177.705] wcscmp (_String1="1.4_0", _String2="..") returned 1 [0177.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea81d8 [0177.706] wcscpy (in: _Dest=0x3ea81d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0177.706] wcscat (in: _Dest=0x3ea81d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0177.706] wcscat (in: _Dest=0x3ea81d8, _Source="1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0177.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea81d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0177.975] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0 [0177.975] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0177.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0177.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0177.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 4879 os_tid = 0x1908 [0176.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56920 [0176.744] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0176.744] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0176.744] wcscat (in: _Dest=0x3d56920, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*" [0176.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0176.744] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0178.091] wcscmp (_String1=".", _String2=".") returned 0 [0178.091] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.091] wcscmp (_String1="..", _String2=".") returned 1 [0178.091] wcscmp (_String1="..", _String2="..") returned 0 [0178.091] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1 [0178.091] wcscmp (_String1="1.0.0.2_0", _String2=".") returned 1 [0178.091] wcscmp (_String1="1.0.0.2_0", _String2="..") returned 1 [0178.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dade18 [0178.091] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0178.092] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0178.092] wcscat (in: _Dest=0x3dade18, _Source="1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0179.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0179.270] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0 [0179.270] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0179.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0179.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 [0179.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4250) returned 1 Thread: id = 4880 os_tid = 0x190c [0176.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56838 [0176.745] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0176.745] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0176.745] wcscat (in: _Dest=0x3d56838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*" [0176.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0176.745] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0178.052] wcscmp (_String1=".", _String2=".") returned 0 [0178.052] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.052] wcscmp (_String1="..", _String2=".") returned 1 [0178.052] wcscmp (_String1="..", _String2="..") returned 0 [0178.052] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7_0", cAlternateFileName="")) returned 1 [0178.052] wcscmp (_String1="7_0", _String2=".") returned 1 [0178.052] wcscmp (_String1="7_0", _String2="..") returned 1 [0178.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56498 [0178.052] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0178.052] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0178.052] wcscat (in: _Dest=0x3d56498, _Source="7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0179.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0179.226] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0179.226] wcscmp (_String1="8.1_0", _String2=".") returned 1 [0179.226] wcscmp (_String1="8.1_0", _String2="..") returned 1 [0179.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8b38 [0179.226] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0179.226] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0179.226] wcscat (in: _Dest=0x3ea8b38, _Source="8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0179.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0179.227] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0 [0179.227] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0179.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0179.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 [0179.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4db0) returned 1 Thread: id = 4881 os_tid = 0x1910 [0176.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc")) returned 0x20 [0176.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0176.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.746] GetLastError () returned 0x5 [0176.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0176.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 4882 os_tid = 0x1914 [0176.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc")) returned 0x20 [0176.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0176.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.748] GetLastError () returned 0x5 [0176.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0176.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 4883 os_tid = 0x1918 [0176.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc")) returned 0x20 [0176.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x20) returned 0 [0176.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.750] GetLastError () returned 0x5 [0176.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x20) returned 0 [0176.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 4884 os_tid = 0xa30 [0176.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv")) returned 0x20 [0180.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x20) returned 0 [0180.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.116] GetLastError () returned 0x5 [0180.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x20) returned 0 [0180.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 4885 os_tid = 0x1538 [0176.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml")) returned 0x20 [0178.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x20) returned 0 [0178.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.046] GetLastError () returned 0x5 [0180.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x20) returned 0 [0180.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 4886 os_tid = 0x191c [0176.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc")) returned 0x20 [0180.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0180.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.104] GetLastError () returned 0x5 [0180.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0180.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 4887 os_tid = 0x1920 [0176.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc")) returned 0x20 [0180.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0180.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.106] GetLastError () returned 0x5 [0180.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0180.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 4888 os_tid = 0x1924 [0176.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv")) returned 0x20 [0180.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0180.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.107] GetLastError () returned 0x5 [0180.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0180.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 4889 os_tid = 0x1928 [0176.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml")) returned 0x20 [0180.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0180.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.109] GetLastError () returned 0x5 [0180.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0180.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 4890 os_tid = 0x192c [0176.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc")) returned 0x20 [0180.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0180.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.110] GetLastError () returned 0x5 [0180.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0180.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 4891 os_tid = 0x1934 [0176.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc")) returned 0x20 [0180.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0180.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.112] GetLastError () returned 0x5 [0180.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0180.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 4892 os_tid = 0x193c [0176.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc")) returned 0x20 [0180.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x20) returned 0 [0180.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.113] GetLastError () returned 0x5 [0180.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x20) returned 0 [0180.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 Thread: id = 4893 os_tid = 0x1940 [0176.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv")) returned 0x20 [0180.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x20) returned 0 [0180.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.119] GetLastError () returned 0x5 [0180.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x20) returned 0 [0180.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e918) returned 1 Thread: id = 4894 os_tid = 0x1948 [0176.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc")) returned 0x20 [0180.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x20) returned 0 [0180.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.122] GetLastError () returned 0x5 [0180.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x20) returned 0 [0180.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e9a8) returned 1 Thread: id = 4895 os_tid = 0x194c [0176.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc")) returned 0x20 [0180.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0180.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.114] GetLastError () returned 0x5 [0180.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0180.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 4896 os_tid = 0x1950 [0176.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv")) returned 0x20 [0180.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x20) returned 0 [0180.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.079] GetLastError () returned 0x5 [0180.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x20) returned 0 [0180.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 4897 os_tid = 0x1954 [0176.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml")) returned 0x20 [0180.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x20) returned 0 [0180.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.080] GetLastError () returned 0x5 [0180.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x20) returned 0 [0180.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 4898 os_tid = 0x1958 [0176.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv")) returned 0x20 [0180.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x20) returned 0 [0180.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.096] GetLastError () returned 0x5 [0180.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x20) returned 0 [0180.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 4899 os_tid = 0xbc0 [0176.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml")) returned 0x20 [0180.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x20) returned 0 [0180.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.099] GetLastError () returned 0x5 [0180.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x20) returned 0 [0180.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 4900 os_tid = 0x1a30 [0176.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv")) returned 0x20 [0180.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0180.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.098] GetLastError () returned 0x5 [0180.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0180.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 4901 os_tid = 0x195c [0176.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml")) returned 0x20 [0180.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0180.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.101] GetLastError () returned 0x5 [0180.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0180.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 4902 os_tid = 0x1a34 [0176.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv")) returned 0x20 [0180.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0180.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.103] GetLastError () returned 0x5 [0180.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0180.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 4903 os_tid = 0x1960 [0177.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml")) returned 0x20 [0180.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0180.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.072] GetLastError () returned 0x5 [0180.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0180.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 4904 os_tid = 0x1a38 [0177.031] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp")) returned 0x2020 [0177.419] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", dwFileAttributes=0x20) returned 1 [0182.814] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23ec [0182.814] GetFileSizeEx (in: hFile=0x23ec, lpFileSize=0x5d2fbfc | out: lpFileSize=0x5d2fbfc*=105456) returned 1 [0182.814] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x19bec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.814] ReadFile (in: hFile=0x23ec, lpBuffer=0x5d2fbd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d2fbe8, lpOverlapped=0x0 | out: lpBuffer=0x5d2fbd8*, lpNumberOfBytesRead=0x5d2fbe8*=0x4, lpOverlapped=0x0) returned 1 [0182.946] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0182.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0182.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0182.946] NtQuerySystemTime (in: CurrentTime=0x5d2fb70 | out: CurrentTime=0x5d2fb70*=132482710914204000) returned 0x0 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x1b16410 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x2e38385b [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x50f1da0c [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x54d42fd1 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x1ce985a5 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x19fe1f7 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x413e6502 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x2c6653eb [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x79d4437b [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x54ef7579 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x6fdbfa8 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x5e79612f [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x21ddd5be [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x5c6a2053 [0182.946] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x1c0cb4f4 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x656b590 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x1c9463d6 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x662a31fb [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x3b498b8d [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x6a9a1af0 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x44391c3a [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x58c64ee9 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x20c8ff30 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x12f7db29 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x934ec08 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x6b7d4fc5 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x1e4e9708 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x453236f9 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0xa9f1ea6 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x6b0a1cc9 [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x6635234a [0182.947] RtlRandomEx (in: Seed=0x5d2fb68 | out: Seed=0x5d2fb68) returned 0x26646611 [0182.959] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.959] ReadFile (in: hFile=0x23ec, lpBuffer=0x69b4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesRead=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0182.962] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b440 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0182.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0182.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0182.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0182.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0182.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b440) returned 1 [0182.962] WriteFile (in: hFile=0x23ec, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0184.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0184.184] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.184] ReadFile (in: hFile=0x23ec, lpBuffer=0x69b4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesRead=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0184.185] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d418 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0184.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0184.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.186] WriteFile (in: hFile=0x23ec, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0184.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0184.205] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.205] ReadFile (in: hFile=0x23ec, lpBuffer=0x69b4558, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesRead=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0184.206] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a120 [0184.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d418 [0184.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0184.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.207] WriteFile (in: hFile=0x23ec, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d2fb70, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x5d2fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0184.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0184.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8ccf0 [0184.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0184.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d8d030 [0184.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0184.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0184.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0184.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a000) returned 1 [0184.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x182) returned 0x3074d00 [0184.518] SetFilePointerEx (in: hFile=0x23ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.518] WriteFile (in: hFile=0x23ec, lpBuffer=0x3074d00*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x5d2fbf0, lpOverlapped=0x0 | out: lpBuffer=0x3074d00*, lpNumberOfBytesWritten=0x5d2fbf0*=0x182, lpOverlapped=0x0) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3074d00) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0185.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae1f8 [0185.369] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" [0185.369] wcscat (in: _Dest=0x3dae1f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.ac3a86" [0185.369] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.ac3a86", NtPathName=0x5d2fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd140 [0185.664] FlushFileBuffers (hFile=0x23ec) returned 1 [0185.751] CloseHandle (hObject=0x23ec) returned 1 [0185.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332da8 [0185.875] wcscpy (in: _Dest=0x332da8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0185.875] wcscat (in: _Dest=0x332da8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\AC3A86-Readme.txt" [0185.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\ac3a86-readme.txt")) returned 0xffffffff [0185.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2134 [0185.903] WriteFile (in: hFile=0x2134, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5d2fb84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5d2fb84*=0x8b9, lpOverlapped=0x0) returned 1 [0186.427] CloseHandle (hObject=0x2134) returned 1 [0186.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 [0186.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 4905 os_tid = 0x1a3c [0177.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx")) returned 0x20 [0177.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0177.033] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.033] GetLastError () returned 0x5 [0177.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0177.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ca10) returned 1 Thread: id = 4906 os_tid = 0x1a40 [0177.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx")) returned 0x20 [0177.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0177.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.035] GetLastError () returned 0x5 [0177.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0177.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 4907 os_tid = 0x1a44 [0177.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 0x20 [0177.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0177.037] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.037] GetLastError () returned 0x5 [0177.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0177.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 Thread: id = 4908 os_tid = 0x1a48 [0177.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 0x20 [0177.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0177.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.042] GetLastError () returned 0x5 [0177.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0177.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 4909 os_tid = 0x1a4c [0177.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 0x20 [0177.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0177.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.044] GetLastError () returned 0x5 [0177.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0177.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 4910 os_tid = 0x448 [0177.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 0x20 [0178.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0178.140] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.141] GetLastError () returned 0x5 [0178.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0178.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 4911 os_tid = 0x1964 [0177.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 0x20 [0178.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.553] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.553] GetLastError () returned 0x5 [0178.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 4912 os_tid = 0x1a50 [0177.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 0x20 [0178.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0178.551] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.551] GetLastError () returned 0x5 [0178.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0178.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36d40) returned 1 Thread: id = 4913 os_tid = 0x1a54 [0177.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 0x20 [0178.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0178.564] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.564] GetLastError () returned 0x5 [0178.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0178.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 4914 os_tid = 0x1a58 [0177.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 0x20 [0178.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0178.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.550] GetLastError () returned 0x5 [0178.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0178.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8958) returned 1 Thread: id = 4915 os_tid = 0x1a5c [0177.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 0x20 [0178.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0178.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.563] GetLastError () returned 0x5 [0178.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0178.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36e10) returned 1 Thread: id = 4916 os_tid = 0x1a60 [0177.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 0x20 [0178.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0178.562] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.562] GetLastError () returned 0x5 [0178.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0178.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 4917 os_tid = 0x1650 [0177.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 0x20 [0178.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0178.549] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.549] GetLastError () returned 0x5 [0178.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0178.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ee0) returned 1 Thread: id = 4918 os_tid = 0x1548 [0177.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 0x20 [0178.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0178.547] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.548] GetLastError () returned 0x5 [0178.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0178.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 4919 os_tid = 0x940 [0177.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 0x20 [0178.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0178.546] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.546] GetLastError () returned 0x5 [0178.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0178.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36fb0) returned 1 Thread: id = 4920 os_tid = 0x1558 [0177.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 0x20 [0178.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0178.545] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.545] GetLastError () returned 0x5 [0178.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0178.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 4921 os_tid = 0x1968 [0177.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 0x20 [0178.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0178.544] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.544] GetLastError () returned 0x5 [0178.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0178.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37080) returned 1 Thread: id = 4922 os_tid = 0x1a64 [0177.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 0x20 [0178.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0178.542] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.543] GetLastError () returned 0x5 [0178.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0178.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c828) returned 1 Thread: id = 4923 os_tid = 0x196c [0177.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 0x20 [0178.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0178.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.561] GetLastError () returned 0x5 [0178.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0178.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 4924 os_tid = 0x1a68 [0177.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 0x20 [0178.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0178.559] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.559] GetLastError () returned 0x5 [0178.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0178.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0bfb8) returned 1 Thread: id = 4925 os_tid = 0x1970 [0177.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 0x20 [0178.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.558] GetLastError () returned 0x5 [0178.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 4926 os_tid = 0x1a6c [0177.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 0x20 [0178.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0178.557] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.557] GetLastError () returned 0x5 [0178.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0178.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e57f8) returned 1 Thread: id = 4927 os_tid = 0x1a70 [0177.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 0x20 [0178.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.556] GetLastError () returned 0x5 [0178.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0178.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57400) returned 1 Thread: id = 4928 os_tid = 0x1a74 [0177.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 0x20 [0178.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0178.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.541] GetLastError () returned 0x5 [0178.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0178.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5b58) returned 1 Thread: id = 4929 os_tid = 0x1a78 [0177.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 0x20 [0178.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0178.554] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.554] GetLastError () returned 0x5 [0178.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0178.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36c70) returned 1 Thread: id = 4930 os_tid = 0x1a7c [0177.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 0x20 [0178.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0178.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.403] GetLastError () returned 0x5 [0178.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0178.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e58d0) returned 1 Thread: id = 4931 os_tid = 0x1a80 [0177.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 0x20 [0178.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0178.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.540] GetLastError () returned 0x5 [0178.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0178.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddcbb0) returned 1 Thread: id = 4932 os_tid = 0x1a84 [0177.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 0x20 [0177.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0177.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.429] GetLastError () returned 0x5 [0177.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0177.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 4933 os_tid = 0x1974 [0177.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg")) returned 0x20 [0177.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0177.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.431] GetLastError () returned 0x5 [0177.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0177.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 4934 os_tid = 0x1a88 [0177.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg")) returned 0x20 [0177.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0177.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.433] GetLastError () returned 0x5 [0177.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0177.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 Thread: id = 4935 os_tid = 0x1978 [0177.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg")) returned 0x20 [0177.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0177.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.435] GetLastError () returned 0x5 [0177.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0177.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d576b8) returned 1 Thread: id = 4936 os_tid = 0x1a8c [0177.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg")) returned 0x20 [0177.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0177.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.437] GetLastError () returned 0x5 [0177.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0177.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 4937 os_tid = 0x1a90 [0177.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg")) returned 0x20 [0179.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0179.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.887] GetLastError () returned 0x5 [0179.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0179.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57888) returned 1 Thread: id = 4938 os_tid = 0x1a94 [0177.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg")) returned 0x20 [0178.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0178.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.882] GetLastError () returned 0x5 [0179.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0179.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57970) returned 1 Thread: id = 4939 os_tid = 0x197c [0177.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg")) returned 0x20 [0179.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0179.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.884] GetLastError () returned 0x5 [0179.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0179.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4f70) returned 1 Thread: id = 4940 os_tid = 0x1a98 [0177.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg")) returned 0x20 [0179.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0179.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.888] GetLastError () returned 0x5 [0179.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0179.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57a58) returned 1 Thread: id = 4941 os_tid = 0x1980 [0177.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 0x20 [0179.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0179.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.853] GetLastError () returned 0x5 [0179.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0179.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 4942 os_tid = 0x1984 [0177.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 0x20 [0179.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0179.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.851] GetLastError () returned 0x5 [0179.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0179.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8778) returned 1 Thread: id = 4943 os_tid = 0x1a9c [0177.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg")) returned 0x20 [0179.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0179.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.850] GetLastError () returned 0x5 [0179.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0179.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57b40) returned 1 Thread: id = 4944 os_tid = 0x1aa0 [0177.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg")) returned 0x20 [0179.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0179.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.849] GetLastError () returned 0x5 [0179.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0179.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57c28) returned 1 Thread: id = 4945 os_tid = 0x1aa4 [0177.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg")) returned 0x20 [0179.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0179.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.847] GetLastError () returned 0x5 [0179.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0179.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5050) returned 1 Thread: id = 4946 os_tid = 0x1aa8 [0177.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg")) returned 0x20 [0179.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0179.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.889] GetLastError () returned 0x5 [0179.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0179.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57d10) returned 1 Thread: id = 4947 os_tid = 0x1988 [0177.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg")) returned 0x20 [0179.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0179.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.890] GetLastError () returned 0x5 [0179.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0179.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57df8) returned 1 Thread: id = 4948 os_tid = 0x198c [0177.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg")) returned 0x20 [0179.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0179.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.892] GetLastError () returned 0x5 [0179.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0179.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57ee0) returned 1 Thread: id = 4949 os_tid = 0x1990 [0177.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg")) returned 0x20 [0179.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0179.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.845] GetLastError () returned 0x5 [0179.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0179.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57fc8) returned 1 Thread: id = 4950 os_tid = 0x1994 [0177.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 0x20 [0179.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0179.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.842] GetLastError () returned 0x5 [0179.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0179.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 4951 os_tid = 0x1998 [0177.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 0x20 [0179.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0179.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.561] GetLastError () returned 0x5 [0179.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0179.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8688) returned 1 Thread: id = 4952 os_tid = 0x199c [0177.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg")) returned 0x20 [0179.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0179.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.893] GetLastError () returned 0x5 [0179.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0179.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d580b0) returned 1 Thread: id = 4953 os_tid = 0x19a0 [0177.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg")) returned 0x20 [0179.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0179.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.709] GetLastError () returned 0x5 [0179.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0179.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58198) returned 1 Thread: id = 4954 os_tid = 0x19a4 [0177.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg")) returned 0x20 [0179.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0179.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.885] GetLastError () returned 0x5 [0179.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0179.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58280) returned 1 Thread: id = 4955 os_tid = 0x19a8 [0177.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif")) returned 0x20 [0179.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0179.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.554] GetLastError () returned 0x5 [0179.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0179.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0c090) returned 1 Thread: id = 4956 os_tid = 0x19ac [0177.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif")) returned 0x20 [0179.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0179.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.553] GetLastError () returned 0x5 [0179.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0179.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 Thread: id = 4957 os_tid = 0x19b0 [0177.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif")) returned 0x20 [0179.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0179.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.551] GetLastError () returned 0x5 [0179.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0179.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5130) returned 1 Thread: id = 4958 os_tid = 0x19b4 [0177.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv")) returned 0x20 [0180.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0180.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.117] GetLastError () returned 0x5 [0180.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0180.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 4959 os_tid = 0x19b8 [0177.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml")) returned 0x20 [0180.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0180.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.074] GetLastError () returned 0x5 [0180.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0180.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 4960 os_tid = 0x19bc [0177.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv")) returned 0x20 [0180.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0180.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.075] GetLastError () returned 0x5 [0180.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0180.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 4961 os_tid = 0x19c0 [0177.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml")) returned 0x20 [0180.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0180.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.126] GetLastError () returned 0x5 [0180.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0180.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 4962 os_tid = 0x19c4 [0177.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv")) returned 0x20 [0179.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0179.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.858] GetLastError () returned 0x5 [0179.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0179.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 4963 os_tid = 0x19c8 [0177.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml")) returned 0x20 [0180.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0180.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.076] GetLastError () returned 0x5 [0180.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0180.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 4964 os_tid = 0x19cc [0177.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv")) returned 0x20 [0179.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0179.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.860] GetLastError () returned 0x5 [0179.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0179.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 4965 os_tid = 0x19d0 [0177.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml")) returned 0x20 [0179.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0179.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.862] GetLastError () returned 0x5 [0179.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0179.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 4966 os_tid = 0x1540 [0177.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv")) returned 0x20 [0180.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0180.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.049] GetLastError () returned 0x5 [0180.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0180.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 4967 os_tid = 0x19d4 [0177.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml")) returned 0x20 [0180.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0180.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.077] GetLastError () returned 0x5 [0180.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0180.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 4968 os_tid = 0x19d8 [0177.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml")) returned 0x20 [0180.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0180.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.070] GetLastError () returned 0x5 [0180.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0180.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 4969 os_tid = 0x2dc [0177.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif")) returned 0x20 [0178.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0178.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.530] GetLastError () returned 0x5 [0178.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0178.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 Thread: id = 4970 os_tid = 0x19dc [0177.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif")) returned 0x20 [0178.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0178.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.529] GetLastError () returned 0x5 [0178.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0178.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abe98) returned 1 Thread: id = 4971 os_tid = 0x230 [0177.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif")) returned 0x20 [0178.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0178.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.527] GetLastError () returned 0x5 [0178.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0178.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 4972 os_tid = 0x1e4 [0177.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif")) returned 0x20 [0178.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0178.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.749] GetLastError () returned 0x5 [0178.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0178.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d576b8) returned 1 Thread: id = 4973 os_tid = 0x480 [0177.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif")) returned 0x20 [0178.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0178.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.748] GetLastError () returned 0x5 [0178.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0178.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 4974 os_tid = 0x19e0 [0177.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif")) returned 0x20 [0178.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0178.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.747] GetLastError () returned 0x5 [0178.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0178.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 Thread: id = 4975 os_tid = 0xefc [0177.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif")) returned 0x20 [0178.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0178.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.745] GetLastError () returned 0x5 [0178.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0178.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abf70) returned 1 Thread: id = 4976 os_tid = 0x19e4 [0177.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif")) returned 0x20 [0178.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0178.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.744] GetLastError () returned 0x5 [0178.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0178.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac048) returned 1 Thread: id = 4977 os_tid = 0x19e8 [0177.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif")) returned 0x20 [0178.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0178.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.743] GetLastError () returned 0x5 [0178.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0178.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36790) returned 1 Thread: id = 4978 os_tid = 0x14c [0177.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif")) returned 0x20 [0178.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0178.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.742] GetLastError () returned 0x5 [0178.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0178.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37220) returned 1 Thread: id = 4979 os_tid = 0x1af0 [0177.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif")) returned 0x20 [0178.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0178.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.741] GetLastError () returned 0x5 [0178.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0178.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac120) returned 1 Thread: id = 4980 os_tid = 0x1af4 [0177.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif")) returned 0x20 [0178.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0178.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.739] GetLastError () returned 0x5 [0178.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0178.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac1f8) returned 1 Thread: id = 4981 os_tid = 0x19ec [0177.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif")) returned 0x20 [0178.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0178.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.738] GetLastError () returned 0x5 [0178.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0178.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e372f0) returned 1 Thread: id = 4982 os_tid = 0x19f0 [0177.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif")) returned 0x20 [0178.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0178.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.737] GetLastError () returned 0x5 [0178.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0178.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac2d0) returned 1 Thread: id = 4983 os_tid = 0x19f4 [0177.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif")) returned 0x20 [0178.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0178.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.732] GetLastError () returned 0x5 [0178.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0178.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e373c0) returned 1 Thread: id = 4984 os_tid = 0x19f8 [0177.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif")) returned 0x20 [0178.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0178.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.731] GetLastError () returned 0x5 [0178.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0178.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac3a8) returned 1 Thread: id = 4985 os_tid = 0xa40 [0177.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif")) returned 0x20 [0178.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0178.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.730] GetLastError () returned 0x5 [0178.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0178.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37490) returned 1 Thread: id = 4986 os_tid = 0x19fc [0177.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif")) returned 0x20 [0178.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0178.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.728] GetLastError () returned 0x5 [0178.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0178.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5210) returned 1 Thread: id = 4987 os_tid = 0x1a00 [0177.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif")) returned 0x20 [0178.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0178.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.727] GetLastError () returned 0x5 [0178.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0178.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f6b0) returned 1 Thread: id = 4988 os_tid = 0x1a04 [0177.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif")) returned 0x20 [0178.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0178.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.726] GetLastError () returned 0x5 [0178.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0178.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e328) returned 1 Thread: id = 4989 os_tid = 0x1a08 [0177.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif")) returned 0x20 [0178.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0178.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.724] GetLastError () returned 0x5 [0178.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0178.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 4990 os_tid = 0x1a0c [0177.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js")) returned 0x20 [0178.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0178.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.723] GetLastError () returned 0x5 [0178.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0178.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8c8) returned 1 Thread: id = 4991 os_tid = 0x1a10 [0177.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 0x20 [0178.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0178.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.721] GetLastError () returned 0x5 [0178.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0178.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac480) returned 1 Thread: id = 4992 os_tid = 0x10e0 [0177.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x66f0038 [0177.846] wcscpy (in: _Dest=0x66f0038, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0177.846] wcscat (in: _Dest=0x66f0038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0177.846] wcscat (in: _Dest=0x66f0038, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*" [0177.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1138 [0177.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef00 [0178.524] wcscmp (_String1=".", _String2=".") returned 0 [0178.524] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.607] wcscmp (_String1="..", _String2=".") returned 1 [0179.607] wcscmp (_String1="..", _String2="..") returned 0 [0179.607] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a32b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a32b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_M.VST", cAlternateFileName="")) returned 1 [0179.607] wcscmp (_String1="ACTDIR_M.VST", _String2=".") returned 1 [0179.607] wcscmp (_String1="ACTDIR_M.VST", _String2="..") returned 1 [0179.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c06e8 [0179.607] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.607] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.607] wcscat (in: _Dest=0x69c06e8, _Source="ACTDIR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" [0179.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0179.756] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb636b200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb636b200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1 [0179.756] wcscmp (_String1="ACTDIR_U.VST", _String2=".") returned 1 [0179.756] wcscmp (_String1="ACTDIR_U.VST", _String2="..") returned 1 [0179.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dcb0 [0179.756] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.756] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.756] wcscat (in: _Dest=0x3e0dcb0, _Source="ACTDIR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" [0179.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0179.758] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748df600, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x748df600, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_M.VSS", cAlternateFileName="")) returned 1 [0179.758] wcscmp (_String1="ADO_M.VSS", _String2=".") returned 1 [0179.758] wcscmp (_String1="ADO_M.VSS", _String2="..") returned 1 [0179.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30d68 [0179.758] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.758] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.758] wcscat (in: _Dest=0x3e30d68, _Source="ADO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" [0179.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0179.759] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a032000, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a032000, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_U.VSS", cAlternateFileName="")) returned 1 [0179.760] wcscmp (_String1="ADO_U.VSS", _String2=".") returned 1 [0179.760] wcscmp (_String1="ADO_U.VSS", _String2="..") returned 1 [0179.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30810 [0179.760] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.760] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.760] wcscat (in: _Dest=0x3e30810, _Source="ADO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" [0179.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0179.762] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912a2e00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x912a2e00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_M.VSS", cAlternateFileName="")) returned 1 [0179.762] wcscmp (_String1="ADS_M.VSS", _String2=".") returned 1 [0179.762] wcscmp (_String1="ADS_M.VSS", _String2="..") returned 1 [0179.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30648 [0179.762] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.762] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.762] wcscat (in: _Dest=0x3e30648, _Source="ADS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" [0179.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0179.763] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98513c00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98513c00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_U.VSS", cAlternateFileName="")) returned 1 [0179.763] wcscmp (_String1="ADS_U.VSS", _String2=".") returned 1 [0179.763] wcscmp (_String1="ADS_U.VSS", _String2="..") returned 1 [0179.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31a78 [0179.763] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.763] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.763] wcscat (in: _Dest=0x3e31a78, _Source="ADS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" [0179.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0179.765] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e471d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e471d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_M.VSS", cAlternateFileName="")) returned 1 [0179.765] wcscmp (_String1="ALARM_M.VSS", _String2=".") returned 1 [0179.765] wcscmp (_String1="ALARM_M.VSS", _String2="..") returned 1 [0179.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0179.765] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.765] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.765] wcscat (in: _Dest=0x3e0dc10, _Source="ALARM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" [0179.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0179.767] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56e2b00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa56e2b00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_U.VSS", cAlternateFileName="")) returned 1 [0179.767] wcscmp (_String1="ALARM_U.VSS", _String2=".") returned 1 [0179.767] wcscmp (_String1="ALARM_U.VSS", _String2="..") returned 1 [0179.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d710 [0179.767] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.767] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.767] wcscat (in: _Dest=0x3e0d710, _Source="ALARM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" [0179.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0179.769] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef79300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaef79300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x2c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_M.VSS", cAlternateFileName="")) returned 1 [0179.769] wcscmp (_String1="ANNOT_M.VSS", _String2=".") returned 1 [0179.769] wcscmp (_String1="ANNOT_M.VSS", _String2="..") returned 1 [0179.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e430 [0179.769] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.769] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.769] wcscat (in: _Dest=0x3e0e430, _Source="ANNOT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" [0179.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0179.771] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74fce00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb74fce00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_U.VSS", cAlternateFileName="")) returned 1 [0179.771] wcscmp (_String1="ANNOT_U.VSS", _String2=".") returned 1 [0179.771] wcscmp (_String1="ANNOT_U.VSS", _String2="..") returned 1 [0179.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e890 [0179.771] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.771] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.771] wcscat (in: _Dest=0x3e0e890, _Source="ANNOT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" [0179.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0179.772] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59dea00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59dea00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_M.VSS", cAlternateFileName="")) returned 1 [0179.773] wcscmp (_String1="APPL_M.VSS", _String2=".") returned 1 [0179.773] wcscmp (_String1="APPL_M.VSS", _String2="..") returned 1 [0179.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e110 [0179.773] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.773] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.773] wcscat (in: _Dest=0x3e0e110, _Source="APPL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" [0179.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0179.774] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51d3300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd51d3300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_U.VSS", cAlternateFileName="")) returned 1 [0179.774] wcscmp (_String1="APPL_U.VSS", _String2=".") returned 1 [0179.774] wcscmp (_String1="APPL_U.VSS", _String2="..") returned 1 [0179.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e4d0 [0179.774] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.774] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.774] wcscat (in: _Dest=0x3e0e4d0, _Source="APPL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" [0179.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0179.776] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd77f8d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd77f8d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_M.VSS", cAlternateFileName="")) returned 1 [0179.776] wcscmp (_String1="ARROWS_M.VSS", _String2=".") returned 1 [0179.776] wcscmp (_String1="ARROWS_M.VSS", _String2="..") returned 1 [0179.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0179.776] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.776] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.776] wcscat (in: _Dest=0x3e0e750, _Source="ARROWS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" [0179.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0179.777] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b0ba00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8b0ba00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_U.VSS", cAlternateFileName="")) returned 1 [0179.778] wcscmp (_String1="ARROWS_U.VSS", _String2=".") returned 1 [0179.778] wcscmp (_String1="ARROWS_U.VSS", _String2="..") returned 1 [0179.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e6b0 [0179.778] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.778] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.778] wcscat (in: _Dest=0x3e0e6b0, _Source="ARROWS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" [0179.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0179.779] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT.XLS", cAlternateFileName="")) returned 1 [0179.779] wcscmp (_String1="ASTMGT.XLS", _String2=".") returned 1 [0179.779] wcscmp (_String1="ASTMGT.XLS", _String2="..") returned 1 [0179.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0f0b0 [0179.779] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.779] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.779] wcscat (in: _Dest=0x3e0f0b0, _Source="ASTMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" [0179.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0179.781] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c0b200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5c0b200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x120000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_M.VST", cAlternateFileName="")) returned 1 [0179.781] wcscmp (_String1="ASTMGT_M.VST", _String2=".") returned 1 [0179.781] wcscmp (_String1="ASTMGT_M.VST", _String2="..") returned 1 [0179.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dfd0 [0179.781] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.781] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.781] wcscat (in: _Dest=0x3e0dfd0, _Source="ASTMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" [0179.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0179.782] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb061d00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb061d00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x11c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_U.VST", cAlternateFileName="")) returned 1 [0179.783] wcscmp (_String1="ASTMGT_U.VST", _String2=".") returned 1 [0179.783] wcscmp (_String1="ASTMGT_U.VST", _String2="..") returned 1 [0179.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0179.783] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.783] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.783] wcscat (in: _Dest=0x3e0ebb0, _Source="ASTMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" [0179.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0179.784] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2200, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe23a2200, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VSS", cAlternateFileName="")) returned 1 [0179.784] wcscmp (_String1="AUDIT_M.VSS", _String2=".") returned 1 [0179.784] wcscmp (_String1="AUDIT_M.VSS", _String2="..") returned 1 [0179.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0179.785] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.785] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.785] wcscat (in: _Dest=0x3e0e390, _Source="AUDIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" [0179.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0179.786] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9498200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9498200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VST", cAlternateFileName="")) returned 1 [0179.786] wcscmp (_String1="AUDIT_M.VST", _String2=".") returned 1 [0179.786] wcscmp (_String1="AUDIT_M.VST", _String2="..") returned 1 [0179.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ef70 [0179.786] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.786] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.786] wcscat (in: _Dest=0x3e0ef70, _Source="AUDIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" [0179.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0179.788] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf4b700, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecf4b700, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VSS", cAlternateFileName="")) returned 1 [0179.788] wcscmp (_String1="AUDIT_U.VSS", _String2=".") returned 1 [0179.788] wcscmp (_String1="AUDIT_U.VSS", _String2="..") returned 1 [0179.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0179.788] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.788] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.788] wcscat (in: _Dest=0x3e0de90, _Source="AUDIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" [0179.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0179.789] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdd0900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdd0900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VST", cAlternateFileName="")) returned 1 [0179.790] wcscmp (_String1="AUDIT_U.VST", _String2=".") returned 1 [0179.790] wcscmp (_String1="AUDIT_U.VST", _String2="..") returned 1 [0179.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ecf0 [0179.790] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.790] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.790] wcscat (in: _Dest=0x3e0ecf0, _Source="AUDIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" [0179.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0179.791] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fde4600, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fde4600, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VSS", cAlternateFileName="")) returned 1 [0179.791] wcscmp (_String1="BASFLO_M.VSS", _String2=".") returned 1 [0179.791] wcscmp (_String1="BASFLO_M.VSS", _String2="..") returned 1 [0179.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eb10 [0179.791] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.791] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.791] wcscat (in: _Dest=0x3e0eb10, _Source="BASFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" [0179.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0179.793] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b6c500, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99b6c500, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VST", cAlternateFileName="")) returned 1 [0179.793] wcscmp (_String1="BASFLO_M.VST", _String2=".") returned 1 [0179.793] wcscmp (_String1="BASFLO_M.VST", _String2="..") returned 1 [0179.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0179.793] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.793] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.793] wcscat (in: _Dest=0x3e0d2b0, _Source="BASFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" [0179.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0179.795] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a01e00, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a01e00, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VSS", cAlternateFileName="")) returned 1 [0179.795] wcscmp (_String1="BASFLO_U.VSS", _String2=".") returned 1 [0179.795] wcscmp (_String1="BASFLO_U.VSS", _String2="..") returned 1 [0179.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d210 [0179.795] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.795] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.795] wcscat (in: _Dest=0x3e0d210, _Source="BASFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" [0179.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0179.999] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3873a600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3873a600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VST", cAlternateFileName="")) returned 1 [0179.999] wcscmp (_String1="BASFLO_U.VST", _String2=".") returned 1 [0179.999] wcscmp (_String1="BASFLO_U.VST", _String2="..") returned 1 [0179.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c06e8 [0179.999] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0179.999] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0179.999] wcscat (in: _Dest=0x69c06e8, _Source="BASFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" [0181.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0181.740] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0709000, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0709000, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_M.VST", cAlternateFileName="")) returned 1 [0181.740] wcscmp (_String1="BASICD_M.VST", _String2=".") returned 1 [0181.740] wcscmp (_String1="BASICD_M.VST", _String2="..") returned 1 [0181.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfe28 [0181.740] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.740] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.740] wcscat (in: _Dest=0x69bfe28, _Source="BASICD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" [0181.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0181.741] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d2ea00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2d2ea00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_U.VST", cAlternateFileName="")) returned 1 [0181.741] wcscmp (_String1="BASICD_U.VST", _String2=".") returned 1 [0181.741] wcscmp (_String1="BASICD_U.VST", _String2="..") returned 1 [0181.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0b48 [0181.741] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.741] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.742] wcscat (in: _Dest=0x69c0b48, _Source="BASICD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" [0181.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0181.743] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda52d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfda52d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_M.VSS", cAlternateFileName="")) returned 1 [0181.743] wcscmp (_String1="BASIC_M.VSS", _String2=".") returned 1 [0181.743] wcscmp (_String1="BASIC_M.VSS", _String2="..") returned 1 [0181.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0968 [0181.743] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.743] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.743] wcscat (in: _Dest=0x69c0968, _Source="BASIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" [0181.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0181.744] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b0e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39b0e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_U.VSS", cAlternateFileName="")) returned 1 [0181.744] wcscmp (_String1="BASIC_U.VSS", _String2=".") returned 1 [0181.744] wcscmp (_String1="BASIC_U.VSS", _String2="..") returned 1 [0181.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0148 [0181.744] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.744] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.744] wcscat (in: _Dest=0x69c0148, _Source="BASIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" [0181.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0181.745] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x33400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_M.VSS", cAlternateFileName="")) returned 1 [0181.745] wcscmp (_String1="BCKGRN_M.VSS", _String2=".") returned 1 [0181.745] wcscmp (_String1="BCKGRN_M.VSS", _String2="..") returned 1 [0181.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0181.746] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.746] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.746] wcscat (in: _Dest=0x69c03c8, _Source="BCKGRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" [0181.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0181.747] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x30600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_U.VSS", cAlternateFileName="")) returned 1 [0181.747] wcscmp (_String1="BCKGRN_U.VSS", _String2=".") returned 1 [0181.747] wcscmp (_String1="BCKGRN_U.VSS", _String2="..") returned 1 [0181.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0c88 [0181.747] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.747] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.747] wcscat (in: _Dest=0x69c0c88, _Source="BCKGRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" [0181.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0181.748] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23cacd00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23cacd00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_M.VSS", cAlternateFileName="")) returned 1 [0181.748] wcscmp (_String1="BLDCOR_M.VSS", _String2=".") returned 1 [0181.748] wcscmp (_String1="BLDCOR_M.VSS", _String2="..") returned 1 [0181.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0e68 [0181.749] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.749] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.749] wcscat (in: _Dest=0x69c0e68, _Source="BLDCOR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" [0181.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0181.750] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x393ff700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x393ff700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x4fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_U.VSS", cAlternateFileName="")) returned 1 [0181.750] wcscmp (_String1="BLDCOR_U.VSS", _String2=".") returned 1 [0181.750] wcscmp (_String1="BLDCOR_U.VSS", _String2="..") returned 1 [0181.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bff68 [0181.750] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0181.750] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0181.750] wcscat (in: _Dest=0x69bff68, _Source="BLDCOR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" [0181.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0181.751] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f378100, ftCreationTime.dwHighDateTime=0x1c33fd1, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f378100, ftLastWriteTime.dwHighDateTime=0x1c33fd1, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1 [0183.115] wcscmp (_String1="BLDGPLAN.DWG", _String2=".") returned 1 [0183.115] wcscmp (_String1="BLDGPLAN.DWG", _String2="..") returned 1 [0183.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0c88 [0183.115] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0183.115] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0183.115] wcscat (in: _Dest=0x69c0c88, _Source="BLDGPLAN.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" [0185.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0185.951] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1 [0185.951] wcscmp (_String1="BLDGPLAN.JPG", _String2=".") returned 1 [0185.951] wcscmp (_String1="BLDGPLAN.JPG", _String2="..") returned 1 [0185.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e7f0 [0185.951] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.951] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.951] wcscat (in: _Dest=0x3e0e7f0, _Source="BLDGPLAN.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" [0185.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0185.952] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17fa9200, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17fa9200, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_M.VSD", cAlternateFileName="")) returned 1 [0185.952] wcscmp (_String1="BLNKDG_M.VSD", _String2=".") returned 1 [0185.952] wcscmp (_String1="BLNKDG_M.VSD", _String2="..") returned 1 [0185.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0185.953] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.953] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.953] wcscat (in: _Dest=0x3e0d2b0, _Source="BLNKDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" [0185.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0185.954] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395b7e00, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x395b7e00, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_U.VSD", cAlternateFileName="")) returned 1 [0185.954] wcscmp (_String1="BLNKDG_U.VSD", _String2=".") returned 1 [0185.954] wcscmp (_String1="BLNKDG_U.VSD", _String2="..") returned 1 [0185.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ef70 [0185.954] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.954] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.954] wcscat (in: _Dest=0x3e0ef70, _Source="BLNKDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" [0185.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0185.955] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40670500, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x40670500, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_M.VSS", cAlternateFileName="")) returned 1 [0185.955] wcscmp (_String1="BLOCK3_M.VSS", _String2=".") returned 1 [0185.956] wcscmp (_String1="BLOCK3_M.VSS", _String2="..") returned 1 [0185.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e390 [0185.956] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.956] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.956] wcscat (in: _Dest=0x3e0e390, _Source="BLOCK3_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" [0185.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0185.957] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51177b00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51177b00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_U.VSS", cAlternateFileName="")) returned 1 [0185.957] wcscmp (_String1="BLOCK3_U.VSS", _String2=".") returned 1 [0185.957] wcscmp (_String1="BLOCK3_U.VSS", _String2="..") returned 1 [0185.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0185.957] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.957] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.957] wcscat (in: _Dest=0x3e0ebb0, _Source="BLOCK3_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" [0185.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0185.958] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596fb600, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x596fb600, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VSS", cAlternateFileName="")) returned 1 [0185.958] wcscmp (_String1="BLOCKP_M.VSS", _String2=".") returned 1 [0185.958] wcscmp (_String1="BLOCKP_M.VSS", _String2="..") returned 1 [0185.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f0b0 [0185.958] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.958] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.958] wcscat (in: _Dest=0x3e0f0b0, _Source="BLOCKP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" [0185.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0185.960] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6667100, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6667100, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VST", cAlternateFileName="")) returned 1 [0185.960] wcscmp (_String1="BLOCKP_M.VST", _String2=".") returned 1 [0185.960] wcscmp (_String1="BLOCKP_M.VST", _String2="..") returned 1 [0185.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e4d0 [0185.960] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.960] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.960] wcscat (in: _Dest=0x3e0e4d0, _Source="BLOCKP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" [0185.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0185.962] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f91e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62f91e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VSS", cAlternateFileName="")) returned 1 [0185.962] wcscmp (_String1="BLOCKP_U.VSS", _String2=".") returned 1 [0185.962] wcscmp (_String1="BLOCKP_U.VSS", _String2="..") returned 1 [0185.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0185.962] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.962] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.962] wcscat (in: _Dest=0x3e0e110, _Source="BLOCKP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" [0185.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0185.963] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c8cb00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8c8cb00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VST", cAlternateFileName="")) returned 1 [0185.963] wcscmp (_String1="BLOCKP_U.VST", _String2=".") returned 1 [0185.963] wcscmp (_String1="BLOCKP_U.VST", _String2="..") returned 1 [0185.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e890 [0185.963] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.964] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.964] wcscat (in: _Dest=0x3e0e890, _Source="BLOCKP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" [0185.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0185.965] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72bf500, ftCreationTime.dwHighDateTime=0x1c63651, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb72bf500, ftLastWriteTime.dwHighDateTime=0x1c63651, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1 [0185.965] wcscmp (_String1="BLOCKS.DWG", _String2=".") returned 1 [0185.965] wcscmp (_String1="BLOCKS.DWG", _String2="..") returned 1 [0185.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dcb0 [0185.965] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.965] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.965] wcscat (in: _Dest=0x3e0dcb0, _Source="BLOCKS.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" [0185.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0185.966] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b515900, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b515900, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VSS", cAlternateFileName="")) returned 1 [0185.966] wcscmp (_String1="BLOCK_M.VSS", _String2=".") returned 1 [0185.966] wcscmp (_String1="BLOCK_M.VSS", _String2="..") returned 1 [0185.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0185.966] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.967] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.967] wcscat (in: _Dest=0x3e0d210, _Source="BLOCK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" [0185.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0185.968] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5c5200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc5c5200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VST", cAlternateFileName="")) returned 1 [0185.968] wcscmp (_String1="BLOCK_M.VST", _String2=".") returned 1 [0185.968] wcscmp (_String1="BLOCK_M.VST", _String2="..") returned 1 [0185.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ecf0 [0185.968] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.968] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.968] wcscat (in: _Dest=0x3e0ecf0, _Source="BLOCK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" [0185.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0185.970] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a99400, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73a99400, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VSS", cAlternateFileName="")) returned 1 [0185.970] wcscmp (_String1="BLOCK_U.VSS", _String2=".") returned 1 [0185.970] wcscmp (_String1="BLOCK_U.VSS", _String2="..") returned 1 [0185.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eb10 [0185.970] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.970] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.970] wcscat (in: _Dest=0x3e0eb10, _Source="BLOCK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" [0185.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0185.971] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfefd900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfefd900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VST", cAlternateFileName="")) returned 1 [0185.971] wcscmp (_String1="BLOCK_U.VST", _String2=".") returned 1 [0185.971] wcscmp (_String1="BLOCK_U.VST", _String2="..") returned 1 [0185.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0185.971] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.971] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.971] wcscat (in: _Dest=0x3e0dc10, _Source="BLOCK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" [0185.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0185.973] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_M.VSS", cAlternateFileName="")) returned 1 [0185.973] wcscmp (_String1="BORDRS_M.VSS", _String2=".") returned 1 [0185.973] wcscmp (_String1="BORDRS_M.VSS", _String2="..") returned 1 [0185.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d710 [0185.973] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.973] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.973] wcscat (in: _Dest=0x3e0d710, _Source="BORDRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" [0185.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0185.974] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_U.VSS", cAlternateFileName="")) returned 1 [0185.974] wcscmp (_String1="BORDRS_U.VSS", _String2=".") returned 1 [0185.974] wcscmp (_String1="BORDRS_U.VSS", _String2="..") returned 1 [0185.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e430 [0185.974] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.975] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.975] wcscat (in: _Dest=0x3e0e430, _Source="BORDRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" [0185.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0185.976] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4426600, ftCreationTime.dwHighDateTime=0x1ca4e99, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4426600, ftLastWriteTime.dwHighDateTime=0x1ca4e99, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_M.VSS", cAlternateFileName="")) returned 1 [0185.976] wcscmp (_String1="BPMNA_M.VSS", _String2=".") returned 1 [0185.976] wcscmp (_String1="BPMNA_M.VSS", _String2="..") returned 1 [0185.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e750 [0185.976] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.976] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.976] wcscat (in: _Dest=0x3e0e750, _Source="BPMNA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" [0185.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0185.977] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eac0300, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1eac0300, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_U.VSS", cAlternateFileName="")) returned 1 [0185.977] wcscmp (_String1="BPMNA_U.VSS", _String2=".") returned 1 [0185.978] wcscmp (_String1="BPMNA_U.VSS", _String2="..") returned 1 [0185.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e6b0 [0185.978] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.978] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.978] wcscat (in: _Dest=0x3e0e6b0, _Source="BPMNA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" [0185.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0185.979] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e94700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4e94700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_M.VSS", cAlternateFileName="")) returned 1 [0185.979] wcscmp (_String1="BPMNC_M.VSS", _String2=".") returned 1 [0185.979] wcscmp (_String1="BPMNC_M.VSS", _String2="..") returned 1 [0185.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dfd0 [0185.979] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.979] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.979] wcscat (in: _Dest=0x3e0dfd0, _Source="BPMNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" [0185.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0185.981] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9adfb00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9adfb00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_U.VSS", cAlternateFileName="")) returned 1 [0185.981] wcscmp (_String1="BPMNC_U.VSS", _String2=".") returned 1 [0185.981] wcscmp (_String1="BPMNC_U.VSS", _String2="..") returned 1 [0185.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0185.981] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.981] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.981] wcscat (in: _Dest=0x3e0de90, _Source="BPMNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" [0185.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0185.998] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52957300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52957300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_M.VSS", cAlternateFileName="")) returned 1 [0185.998] wcscmp (_String1="BPMNE_M.VSS", _String2=".") returned 1 [0185.998] wcscmp (_String1="BPMNE_M.VSS", _String2="..") returned 1 [0185.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eed0 [0185.998] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.998] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.998] wcscat (in: _Dest=0x3e0eed0, _Source="BPMNE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" [0185.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0186.000] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcde300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8bcde300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_U.VSS", cAlternateFileName="")) returned 1 [0186.000] wcscmp (_String1="BPMNE_U.VSS", _String2=".") returned 1 [0186.000] wcscmp (_String1="BPMNE_U.VSS", _String2="..") returned 1 [0186.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e930 [0186.000] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.000] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.000] wcscat (in: _Dest=0x3e0e930, _Source="BPMNE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" [0186.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0186.001] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34212d00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34212d00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_M.VSS", cAlternateFileName="")) returned 1 [0186.001] wcscmp (_String1="BPMNG_M.VSS", _String2=".") returned 1 [0186.001] wcscmp (_String1="BPMNG_M.VSS", _String2="..") returned 1 [0186.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d5d0 [0186.001] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.001] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.001] wcscat (in: _Dest=0x3e0d5d0, _Source="BPMNG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" [0186.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0186.544] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400cef00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x400cef00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_U.VSS", cAlternateFileName="")) returned 1 [0186.544] wcscmp (_String1="BPMNG_U.VSS", _String2=".") returned 1 [0186.544] wcscmp (_String1="BPMNG_U.VSS", _String2="..") returned 1 [0186.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e430 [0186.545] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.545] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.545] wcscat (in: _Dest=0x3e0e430, _Source="BPMNG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" [0188.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0188.660] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4d6000, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b4d6000, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0x4d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VSS", cAlternateFileName="")) returned 1 [0188.660] wcscmp (_String1="BPMN_M.VSS", _String2=".") returned 1 [0188.660] wcscmp (_String1="BPMN_M.VSS", _String2="..") returned 1 [0188.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0d710 [0188.660] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.660] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.660] wcscat (in: _Dest=0x3e0d710, _Source="BPMN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" [0188.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0188.661] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed291300, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed291300, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VST", cAlternateFileName="")) returned 1 [0188.661] wcscmp (_String1="BPMN_M.VST", _String2=".") returned 1 [0188.661] wcscmp (_String1="BPMN_M.VST", _String2="..") returned 1 [0188.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0dc10 [0188.661] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.661] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.661] wcscat (in: _Dest=0x3e0dc10, _Source="BPMN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" [0188.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0188.662] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51f6600, ftCreationTime.dwHighDateTime=0x1ca5d6e, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb51f6600, ftLastWriteTime.dwHighDateTime=0x1ca5d6e, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VSS", cAlternateFileName="")) returned 1 [0188.662] wcscmp (_String1="BPMN_U.VSS", _String2=".") returned 1 [0188.662] wcscmp (_String1="BPMN_U.VSS", _String2="..") returned 1 [0188.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0eb10 [0188.662] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.662] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.663] wcscat (in: _Dest=0x3e0eb10, _Source="BPMN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" [0188.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0188.664] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26b97200, ftCreationTime.dwHighDateTime=0x1ca4e9d, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26b97200, ftLastWriteTime.dwHighDateTime=0x1ca4e9d, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VST", cAlternateFileName="")) returned 1 [0188.664] wcscmp (_String1="BPMN_U.VST", _String2=".") returned 1 [0188.664] wcscmp (_String1="BPMN_U.VST", _String2="..") returned 1 [0188.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0ecf0 [0188.664] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.664] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.664] wcscat (in: _Dest=0x3e0ecf0, _Source="BPMN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" [0188.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0188.665] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce8fbb00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce8fbb00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_M.VSS", cAlternateFileName="")) returned 1 [0188.665] wcscmp (_String1="BPRES_M.VSS", _String2=".") returned 1 [0188.665] wcscmp (_String1="BPRES_M.VSS", _String2="..") returned 1 [0188.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d210 [0188.665] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.665] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.665] wcscat (in: _Dest=0x3e0d210, _Source="BPRES_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" [0188.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0188.666] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4859c00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4859c00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_U.VSS", cAlternateFileName="")) returned 1 [0188.666] wcscmp (_String1="BPRES_U.VSS", _String2=".") returned 1 [0188.666] wcscmp (_String1="BPRES_U.VSS", _String2="..") returned 1 [0188.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dcb0 [0188.667] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.667] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.667] wcscat (in: _Dest=0x3e0dcb0, _Source="BPRES_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" [0188.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0188.668] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94726300, ftCreationTime.dwHighDateTime=0x1c33005, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94726300, ftLastWriteTime.dwHighDateTime=0x1c33005, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1 [0188.668] wcscmp (_String1="BRAINSTM.XML", _String2=".") returned 1 [0188.668] wcscmp (_String1="BRAINSTM.XML", _String2="..") returned 1 [0188.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e890 [0188.668] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.668] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.668] wcscat (in: _Dest=0x3e0e890, _Source="BRAINSTM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" [0188.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0188.669] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e7f600, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6e7f600, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1 [0188.669] wcscmp (_String1="BSTORM_M.VSS", _String2=".") returned 1 [0188.669] wcscmp (_String1="BSTORM_M.VSS", _String2="..") returned 1 [0188.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0188.669] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.669] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.669] wcscat (in: _Dest=0x3e0e110, _Source="BSTORM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" [0188.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0188.670] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ecd900, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23ecd900, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VST", cAlternateFileName="")) returned 1 [0188.670] wcscmp (_String1="BSTORM_M.VST", _String2=".") returned 1 [0188.670] wcscmp (_String1="BSTORM_M.VST", _String2="..") returned 1 [0188.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e4d0 [0188.670] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.670] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.670] wcscat (in: _Dest=0x3e0e4d0, _Source="BSTORM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" [0188.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0188.671] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd94a5000, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd94a5000, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VSS", cAlternateFileName="")) returned 1 [0188.675] wcscmp (_String1="BSTORM_U.VSS", _String2=".") returned 1 [0188.675] wcscmp (_String1="BSTORM_U.VSS", _String2="..") returned 1 [0188.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f0b0 [0188.675] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.675] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.675] wcscat (in: _Dest=0x3e0f0b0, _Source="BSTORM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" [0188.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0188.676] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b18d00, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28b18d00, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VST", cAlternateFileName="")) returned 1 [0188.676] wcscmp (_String1="BSTORM_U.VST", _String2=".") returned 1 [0188.676] wcscmp (_String1="BSTORM_U.VST", _String2="..") returned 1 [0188.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0188.676] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.676] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.676] wcscat (in: _Dest=0x3e0ebb0, _Source="BSTORM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" [0188.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0188.677] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d3b800, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d3b800, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_M.VSS", cAlternateFileName="")) returned 1 [0188.677] wcscmp (_String1="BTHKT_M.VSS", _String2=".") returned 1 [0188.677] wcscmp (_String1="BTHKT_M.VSS", _String2="..") returned 1 [0188.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0188.678] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.678] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.678] wcscat (in: _Dest=0x3e0e390, _Source="BTHKT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" [0188.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0188.679] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2bf300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb2bf300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_U.VSS", cAlternateFileName="")) returned 1 [0188.679] wcscmp (_String1="BTHKT_U.VSS", _String2=".") returned 1 [0188.679] wcscmp (_String1="BTHKT_U.VSS", _String2="..") returned 1 [0188.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ef70 [0188.679] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.679] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.679] wcscat (in: _Dest=0x3e0ef70, _Source="BTHKT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" [0188.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0188.680] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf717b500, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf717b500, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_M.VSS", cAlternateFileName="")) returned 1 [0188.680] wcscmp (_String1="CABNT_M.VSS", _String2=".") returned 1 [0188.680] wcscmp (_String1="CABNT_M.VSS", _String2="..") returned 1 [0188.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d2b0 [0188.680] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.680] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.680] wcscat (in: _Dest=0x3e0d2b0, _Source="CABNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" [0188.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0188.681] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d24a00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d24a00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_U.VSS", cAlternateFileName="")) returned 1 [0188.681] wcscmp (_String1="CABNT_U.VSS", _String2=".") returned 1 [0188.681] wcscmp (_String1="CABNT_U.VSS", _String2="..") returned 1 [0188.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e7f0 [0188.681] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.681] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.681] wcscat (in: _Dest=0x3e0e7f0, _Source="CABNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" [0188.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0188.682] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dedcb00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2dedcb00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VSS", cAlternateFileName="")) returned 1 [0188.682] wcscmp (_String1="CALNDR_M.VSS", _String2=".") returned 1 [0188.682] wcscmp (_String1="CALNDR_M.VSS", _String2="..") returned 1 [0188.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0da30 [0188.682] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.682] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.683] wcscat (in: _Dest=0x3e0da30, _Source="CALNDR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" [0188.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0188.683] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaa6e00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeaaa6e00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VST", cAlternateFileName="")) returned 1 [0188.683] wcscmp (_String1="CALNDR_M.VST", _String2=".") returned 1 [0188.684] wcscmp (_String1="CALNDR_M.VST", _String2="..") returned 1 [0188.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0188.684] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.684] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.684] wcscat (in: _Dest=0x3e0d8f0, _Source="CALNDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" [0188.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0188.685] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54136b00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54136b00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VSS", cAlternateFileName="")) returned 1 [0188.685] wcscmp (_String1="CALNDR_U.VSS", _String2=".") returned 1 [0188.685] wcscmp (_String1="CALNDR_U.VSS", _String2="..") returned 1 [0188.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e250 [0188.685] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.685] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.685] wcscat (in: _Dest=0x3e0e250, _Source="CALNDR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" [0188.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0188.686] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee3df500, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee3df500, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VST", cAlternateFileName="")) returned 1 [0188.686] wcscmp (_String1="CALNDR_U.VST", _String2=".") returned 1 [0188.686] wcscmp (_String1="CALNDR_U.VST", _String2="..") returned 1 [0188.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d170 [0188.687] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.687] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.687] wcscat (in: _Dest=0x3e0d170, _Source="CALNDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" [0188.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0188.688] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b3a7900, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5b3a7900, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_M.VSS", cAlternateFileName="")) returned 1 [0188.688] wcscmp (_String1="CALOUT_M.VSS", _String2=".") returned 1 [0188.688] wcscmp (_String1="CALOUT_M.VSS", _String2="..") returned 1 [0188.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0188.688] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.688] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.688] wcscat (in: _Dest=0x3e0ed90, _Source="CALOUT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" [0188.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0188.689] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62618700, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62618700, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_U.VSS", cAlternateFileName="")) returned 1 [0188.689] wcscmp (_String1="CALOUT_U.VSS", _String2=".") returned 1 [0188.689] wcscmp (_String1="CALOUT_U.VSS", _String2="..") returned 1 [0188.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0db70 [0188.689] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.689] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.689] wcscat (in: _Dest=0x3e0db70, _Source="CALOUT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" [0188.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0188.691] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c3e100, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64c3e100, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VSS", cAlternateFileName="")) returned 1 [0188.691] wcscmp (_String1="CAUSEF_M.VSS", _String2=".") returned 1 [0188.691] wcscmp (_String1="CAUSEF_M.VSS", _String2="..") returned 1 [0188.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d850 [0188.691] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.691] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.691] wcscat (in: _Dest=0x3e0d850, _Source="CAUSEF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" [0188.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0188.692] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454dc500, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x454dc500, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VST", cAlternateFileName="")) returned 1 [0188.692] wcscmp (_String1="CAUSEF_M.VST", _String2=".") returned 1 [0188.692] wcscmp (_String1="CAUSEF_M.VST", _String2="..") returned 1 [0188.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e2f0 [0188.692] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.692] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.692] wcscat (in: _Dest=0x3e0e2f0, _Source="CAUSEF_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" [0188.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0188.693] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68576800, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68576800, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VSS", cAlternateFileName="")) returned 1 [0188.693] wcscmp (_String1="CAUSEF_U.VSS", _String2=".") returned 1 [0188.693] wcscmp (_String1="CAUSEF_U.VSS", _String2="..") returned 1 [0188.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e1b0 [0188.694] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.694] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.694] wcscat (in: _Dest=0x3e0e1b0, _Source="CAUSEF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" [0188.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0188.695] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b43a600, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b43a600, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VST", cAlternateFileName="")) returned 1 [0188.695] wcscmp (_String1="CAUSEF_U.VST", _String2=".") returned 1 [0188.695] wcscmp (_String1="CAUSEF_U.VST", _String2="..") returned 1 [0188.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0c88 [0188.695] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.695] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.695] wcscat (in: _Dest=0x69c0c88, _Source="CAUSEF_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" [0188.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0188.696] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeee6b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfeee6b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_M.VST", cAlternateFileName="")) returned 1 [0188.696] wcscmp (_String1="CEILPL_M.VST", _String2=".") returned 1 [0188.696] wcscmp (_String1="CEILPL_M.VST", _String2="..") returned 1 [0188.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfe28 [0188.696] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.696] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.696] wcscat (in: _Dest=0x69bfe28, _Source="CEILPL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" [0188.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0188.697] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877d300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x877d300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_U.VST", cAlternateFileName="")) returned 1 [0188.697] wcscmp (_String1="CEILPL_U.VST", _String2=".") returned 1 [0188.697] wcscmp (_String1="CEILPL_U.VST", _String2="..") returned 1 [0188.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0b48 [0188.698] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0188.698] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0188.698] wcscat (in: _Dest=0x69c0b48, _Source="CEILPL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" [0188.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0189.318] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802eec00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x802eec00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VSS", cAlternateFileName="")) returned 1 [0189.319] wcscmp (_String1="CHART_M.VSS", _String2=".") returned 1 [0189.319] wcscmp (_String1="CHART_M.VSS", _String2="..") returned 1 [0189.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dc10 [0189.319] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0189.319] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0189.319] wcscat (in: _Dest=0x3e0dc10, _Source="CHART_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" [0192.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0192.010] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b5a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0b5a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VST", cAlternateFileName="")) returned 1 [0192.010] wcscmp (_String1="CHART_M.VST", _String2=".") returned 1 [0192.010] wcscmp (_String1="CHART_M.VST", _String2="..") returned 1 [0192.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0ecf0 [0192.010] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.010] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.010] wcscat (in: _Dest=0x3e0ecf0, _Source="CHART_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" [0192.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0192.011] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99379d00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99379d00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VSS", cAlternateFileName="")) returned 1 [0192.011] wcscmp (_String1="CHART_U.VSS", _String2=".") returned 1 [0192.011] wcscmp (_String1="CHART_U.VSS", _String2="..") returned 1 [0192.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0eb10 [0192.011] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.011] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.011] wcscat (in: _Dest=0x3e0eb10, _Source="CHART_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" [0192.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0192.012] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9ee100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VST", cAlternateFileName="")) returned 1 [0192.012] wcscmp (_String1="CHART_U.VST", _String2=".") returned 1 [0192.012] wcscmp (_String1="CHART_U.VST", _String2="..") returned 1 [0192.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e110 [0192.012] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.012] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.012] wcscat (in: _Dest=0x3e0e110, _Source="CHART_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" [0192.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0192.013] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d7e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f2d7e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VSS", cAlternateFileName="")) returned 1 [0192.013] wcscmp (_String1="COMOLE_M.VSS", _String2=".") returned 1 [0192.013] wcscmp (_String1="COMOLE_M.VSS", _String2="..") returned 1 [0192.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d710 [0192.013] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.013] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.013] wcscat (in: _Dest=0x3e0d710, _Source="COMOLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" [0192.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0192.014] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13326800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13326800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VST", cAlternateFileName="")) returned 1 [0192.014] wcscmp (_String1="COMOLE_M.VST", _String2=".") returned 1 [0192.014] wcscmp (_String1="COMOLE_M.VST", _String2="..") returned 1 [0192.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e430 [0192.014] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.014] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.015] wcscat (in: _Dest=0x3e0e430, _Source="COMOLE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" [0192.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0192.015] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f23200, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa3f23200, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VSS", cAlternateFileName="")) returned 1 [0192.015] wcscmp (_String1="COMOLE_U.VSS", _String2=".") returned 1 [0192.015] wcscmp (_String1="COMOLE_U.VSS", _String2="..") returned 1 [0192.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e6b0 [0192.016] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.016] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.016] wcscat (in: _Dest=0x3e0e6b0, _Source="COMOLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" [0192.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0192.017] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594c200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1594c200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VST", cAlternateFileName="")) returned 1 [0192.017] wcscmp (_String1="COMOLE_U.VST", _String2=".") returned 1 [0192.017] wcscmp (_String1="COMOLE_U.VST", _String2="..") returned 1 [0192.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dfd0 [0192.017] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.017] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.017] wcscat (in: _Dest=0x3e0dfd0, _Source="COMOLE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" [0192.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0192.018] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_M.VSS", cAlternateFileName="")) returned 1 [0192.018] wcscmp (_String1="COMPLN_M.VSS", _String2=".") returned 1 [0192.018] wcscmp (_String1="COMPLN_M.VSS", _String2="..") returned 1 [0192.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0192.018] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.018] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.018] wcscat (in: _Dest=0x3e0de90, _Source="COMPLN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" [0192.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0192.019] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_U.VSS", cAlternateFileName="")) returned 1 [0192.019] wcscmp (_String1="COMPLN_U.VSS", _String2=".") returned 1 [0192.019] wcscmp (_String1="COMPLN_U.VSS", _String2="..") returned 1 [0192.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eed0 [0192.019] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.019] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.019] wcscat (in: _Dest=0x3e0eed0, _Source="COMPLN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" [0192.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0192.020] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2404e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4824f50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2404e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_M.VSS", cAlternateFileName="")) returned 1 [0192.020] wcscmp (_String1="COMPS_M.VSS", _String2=".") returned 1 [0192.020] wcscmp (_String1="COMPS_M.VSS", _String2="..") returned 1 [0192.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e930 [0192.021] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.021] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.021] wcscat (in: _Dest=0x3e0e930, _Source="COMPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" [0192.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0192.022] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbc9b600, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbbc9b600, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_U.VSS", cAlternateFileName="")) returned 1 [0192.022] wcscmp (_String1="COMPS_U.VSS", _String2=".") returned 1 [0192.022] wcscmp (_String1="COMPS_U.VSS", _String2="..") returned 1 [0192.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0f010 [0192.022] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.022] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.022] wcscat (in: _Dest=0x3e0f010, _Source="COMPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" [0192.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0192.023] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a597600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a597600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_M.VST", cAlternateFileName="")) returned 1 [0192.023] wcscmp (_String1="CONLOG_M.VST", _String2=".") returned 1 [0192.023] wcscmp (_String1="CONLOG_M.VST", _String2="..") returned 1 [0192.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0192.023] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.023] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.023] wcscat (in: _Dest=0x69c1408, _Source="CONLOG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" [0192.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0192.026] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1e2a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f1e2a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_U.VST", cAlternateFileName="")) returned 1 [0192.026] wcscmp (_String1="CONLOG_U.VST", _String2=".") returned 1 [0192.026] wcscmp (_String1="CONLOG_U.VST", _String2="..") returned 1 [0192.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c15e8 [0192.026] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.026] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.026] wcscat (in: _Dest=0x69c15e8, _Source="CONLOG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" [0192.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0192.028] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e6a500, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8e6a500, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_M.VSS", cAlternateFileName="")) returned 1 [0192.028] wcscmp (_String1="CONNEC_M.VSS", _String2=".") returned 1 [0192.028] wcscmp (_String1="CONNEC_M.VSS", _String2="..") returned 1 [0192.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0192.028] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.028] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.028] wcscat (in: _Dest=0x69c1228, _Source="CONNEC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" [0192.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0192.029] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd865ee00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd865ee00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_U.VSS", cAlternateFileName="")) returned 1 [0192.029] wcscmp (_String1="CONNEC_U.VSS", _String2=".") returned 1 [0192.029] wcscmp (_String1="CONNEC_U.VSS", _String2="..") returned 1 [0192.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfd88 [0192.029] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.029] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.029] wcscat (in: _Dest=0x69bfd88, _Source="CONNEC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" [0192.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0192.030] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ad700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0ad700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x89200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_M.VSS", cAlternateFileName="")) returned 1 [0192.034] wcscmp (_String1="CUBICL_M.VSS", _String2=".") returned 1 [0192.034] wcscmp (_String1="CUBICL_M.VSS", _String2="..") returned 1 [0192.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0148 [0192.034] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.034] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.034] wcscat (in: _Dest=0x69c0148, _Source="CUBICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" [0192.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0192.035] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427e9300, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x427e9300, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_U.VSS", cAlternateFileName="")) returned 1 [0192.035] wcscmp (_String1="CUBICL_U.VSS", _String2=".") returned 1 [0192.035] wcscmp (_String1="CUBICL_U.VSS", _String2="..") returned 1 [0192.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c06e8 [0192.035] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.035] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.035] wcscat (in: _Dest=0x69c06e8, _Source="CUBICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" [0192.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0192.036] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47434700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4897370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47434700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VSS", cAlternateFileName="")) returned 1 [0192.036] wcscmp (_String1="DATFLO_M.VSS", _String2=".") returned 1 [0192.036] wcscmp (_String1="DATFLO_M.VSS", _String2="..") returned 1 [0192.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0968 [0192.036] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.036] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.036] wcscat (in: _Dest=0x69c0968, _Source="DATFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" [0192.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0192.038] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21808400, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21808400, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VST", cAlternateFileName="")) returned 1 [0192.038] wcscmp (_String1="DATFLO_M.VST", _String2=".") returned 1 [0192.038] wcscmp (_String1="DATFLO_M.VST", _String2="..") returned 1 [0192.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0e68 [0192.038] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.038] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.038] wcscat (in: _Dest=0x69c0e68, _Source="DATFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" [0192.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0192.039] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d392800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d392800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VSS", cAlternateFileName="")) returned 1 [0192.039] wcscmp (_String1="DATFLO_U.VSS", _String2=".") returned 1 [0192.039] wcscmp (_String1="DATFLO_U.VSS", _String2="..") returned 1 [0192.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bff68 [0192.039] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.039] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.039] wcscat (in: _Dest=0x69bff68, _Source="DATFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" [0192.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0192.040] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25140b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25140b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VST", cAlternateFileName="")) returned 1 [0192.040] wcscmp (_String1="DATFLO_U.VST", _String2=".") returned 1 [0192.040] wcscmp (_String1="DATFLO_U.VST", _String2="..") returned 1 [0192.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0192.040] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.040] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.040] wcscat (in: _Dest=0x69c03c8, _Source="DATFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" [0192.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0192.043] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26453800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26453800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_M.VST", cAlternateFileName="")) returned 1 [0192.043] wcscmp (_String1="DATMOD_M.VST", _String2=".") returned 1 [0192.043] wcscmp (_String1="DATMOD_M.VST", _String2="..") returned 1 [0192.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c12c8 [0192.043] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.043] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.043] wcscat (in: _Dest=0x69c12c8, _Source="DATMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" [0192.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0192.045] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a79200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28a79200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_U.VST", cAlternateFileName="")) returned 1 [0192.045] wcscmp (_String1="DATMOD_U.VST", _String2=".") returned 1 [0192.045] wcscmp (_String1="DATMOD_U.VST", _String2="..") returned 1 [0192.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c01e8 [0192.045] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.045] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.045] wcscat (in: _Dest=0x69c01e8, _Source="DATMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" [0192.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0192.046] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b09ec00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b09ec00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_M.VST", cAlternateFileName="")) returned 1 [0192.046] wcscmp (_String1="DBMODL_M.VST", _String2=".") returned 1 [0192.046] wcscmp (_String1="DBMODL_M.VST", _String2="..") returned 1 [0192.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0192.046] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.046] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.046] wcscat (in: _Dest=0x69c1188, _Source="DBMODL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" [0192.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0192.047] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9d7300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e9d7300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_U.VST", cAlternateFileName="")) returned 1 [0192.048] wcscmp (_String1="DBMODL_U.VST", _String2=".") returned 1 [0192.048] wcscmp (_String1="DBMODL_U.VST", _String2="..") returned 1 [0192.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0648 [0192.048] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.048] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.048] wcscat (in: _Dest=0x69c0648, _Source="DBMODL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" [0192.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0192.049] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532f0900, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4a603f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x532f0900, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_M.VSS", cAlternateFileName="")) returned 1 [0192.049] wcscmp (_String1="DGICON_M.VSS", _String2=".") returned 1 [0192.049] wcscmp (_String1="DGICON_M.VSS", _String2="..") returned 1 [0192.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c05a8 [0192.049] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.049] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.049] wcscat (in: _Dest=0x69c05a8, _Source="DGICON_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" [0192.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0192.050] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f3bd00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57f3bd00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_U.VSS", cAlternateFileName="")) returned 1 [0192.050] wcscmp (_String1="DGICON_U.VSS", _String2=".") returned 1 [0192.050] wcscmp (_String1="DGICON_U.VSS", _String2="..") returned 1 [0192.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c14a8 [0192.050] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.050] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.050] wcscat (in: _Dest=0x69c14a8, _Source="DGICON_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" [0192.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0192.051] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67730600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67730600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMARC_U.VSS", cAlternateFileName="")) returned 1 [0192.051] wcscmp (_String1="DIMARC_U.VSS", _String2=".") returned 1 [0192.051] wcscmp (_String1="DIMARC_U.VSS", _String2="..") returned 1 [0192.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1368 [0192.052] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.052] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.052] wcscat (in: _Dest=0x69c1368, _Source="DIMARC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" [0192.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0192.054] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78237c00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78237c00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_M.VSS", cAlternateFileName="")) returned 1 [0192.054] wcscmp (_String1="DIMENG_M.VSS", _String2=".") returned 1 [0192.054] wcscmp (_String1="DIMENG_M.VSS", _String2="..") returned 1 [0192.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0468 [0192.054] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.054] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.054] wcscat (in: _Dest=0x69c0468, _Source="DIMENG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" [0192.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0192.819] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a2c500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87a2c500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_U.VSS", cAlternateFileName="")) returned 1 [0192.819] wcscmp (_String1="DIMENG_U.VSS", _String2=".") returned 1 [0192.819] wcscmp (_String1="DIMENG_U.VSS", _String2="..") returned 1 [0192.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dc10 [0192.819] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0192.819] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0192.819] wcscat (in: _Dest=0x3e0dc10, _Source="DIMENG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" [0196.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0196.307] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d98a600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d98a600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_M.VSS", cAlternateFileName="")) returned 1 [0196.307] wcscmp (_String1="DRAWTL_M.VSS", _String2=".") returned 1 [0196.307] wcscmp (_String1="DRAWTL_M.VSS", _String2="..") returned 1 [0196.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1368 [0196.307] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.307] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.307] wcscat (in: _Dest=0x69c1368, _Source="DRAWTL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" [0196.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0196.308] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f0e100, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95f0e100, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_U.VSS", cAlternateFileName="")) returned 1 [0196.308] wcscmp (_String1="DRAWTL_U.VSS", _String2=".") returned 1 [0196.308] wcscmp (_String1="DRAWTL_U.VSS", _String2="..") returned 1 [0196.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c08c8 [0196.308] wcscpy (in: _Dest=0x69c08c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.308] wcscat (in: _Dest=0x69c08c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.308] wcscat (in: _Dest=0x69c08c8, _Source="DRAWTL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" [0196.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c08c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0196.309] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98533b00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98533b00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VSS", cAlternateFileName="")) returned 1 [0196.309] wcscmp (_String1="DRILLD_M.VSS", _String2=".") returned 1 [0196.309] wcscmp (_String1="DRILLD_M.VSS", _String2="..") returned 1 [0196.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfe28 [0196.309] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.309] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.310] wcscat (in: _Dest=0x69bfe28, _Source="DRILLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" [0196.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0196.310] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33622700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33622700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VST", cAlternateFileName="")) returned 1 [0196.310] wcscmp (_String1="DRILLD_M.VST", _String2=".") returned 1 [0196.311] wcscmp (_String1="DRILLD_M.VST", _String2="..") returned 1 [0196.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0b48 [0196.311] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.311] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.311] wcscat (in: _Dest=0x69c0b48, _Source="DRILLD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" [0196.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0196.312] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab59500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ab59500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VSS", cAlternateFileName="")) returned 1 [0196.312] wcscmp (_String1="DRILLD_U.VSS", _String2=".") returned 1 [0196.312] wcscmp (_String1="DRILLD_U.VSS", _String2="..") returned 1 [0196.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0c88 [0196.312] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.312] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.312] wcscat (in: _Dest=0x69c0c88, _Source="DRILLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" [0196.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0196.313] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3826db00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3826db00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VST", cAlternateFileName="")) returned 1 [0196.313] wcscmp (_String1="DRILLD_U.VST", _String2=".") returned 1 [0196.313] wcscmp (_String1="DRILLD_U.VST", _String2="..") returned 1 [0196.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1548 [0196.313] wcscpy (in: _Dest=0x69c1548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.313] wcscat (in: _Dest=0x69c1548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.313] wcscat (in: _Dest=0x69c1548, _Source="DRILLD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" [0196.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0196.314] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac973800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac973800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VSS", cAlternateFileName="")) returned 1 [0196.314] wcscmp (_String1="DTLNET_M.VSS", _String2=".") returned 1 [0196.314] wcscmp (_String1="DTLNET_M.VSS", _String2="..") returned 1 [0196.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0328 [0196.314] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.314] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.314] wcscat (in: _Dest=0x69c0328, _Source="DTLNET_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" [0196.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0196.315] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a087e00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a087e00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VST", cAlternateFileName="")) returned 1 [0196.315] wcscmp (_String1="DTLNET_M.VST", _String2=".") returned 1 [0196.315] wcscmp (_String1="DTLNET_M.VST", _String2="..") returned 1 [0196.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0fa8 [0196.315] wcscpy (in: _Dest=0x69c0fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.315] wcscat (in: _Dest=0x69c0fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.315] wcscat (in: _Dest=0x69c0fa8, _Source="DTLNET_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" [0196.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0196.316] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd47ae00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd47ae00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x63600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VSS", cAlternateFileName="")) returned 1 [0196.316] wcscmp (_String1="DTLNET_U.VSS", _String2=".") returned 1 [0196.316] wcscmp (_String1="DTLNET_U.VSS", _String2="..") returned 1 [0196.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0dc8 [0196.316] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.316] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.316] wcscat (in: _Dest=0x69c0dc8, _Source="DTLNET_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" [0196.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0196.318] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5391e600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5391e600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VST", cAlternateFileName="")) returned 1 [0196.318] wcscmp (_String1="DTLNET_U.VST", _String2=".") returned 1 [0196.318] wcscmp (_String1="DTLNET_U.VST", _String2="..") returned 1 [0196.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfce8 [0196.318] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.318] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.318] wcscat (in: _Dest=0x69bfce8, _Source="DTLNET_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" [0196.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0196.319] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfaa0800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfaa0800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_M.VSS", cAlternateFileName="")) returned 1 [0196.319] wcscmp (_String1="DVCALL_M.VSS", _String2=".") returned 1 [0196.319] wcscmp (_String1="DVCALL_M.VSS", _String2="..") returned 1 [0196.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0a08 [0196.319] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.319] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.319] wcscat (in: _Dest=0x69c0a08, _Source="DVCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" [0196.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0196.320] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46ebc00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46ebc00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_U.VSS", cAlternateFileName="")) returned 1 [0196.320] wcscmp (_String1="DVCALL_U.VSS", _String2=".") returned 1 [0196.321] wcscmp (_String1="DVCALL_U.VSS", _String2="..") returned 1 [0196.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c00a8 [0196.321] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.321] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.321] wcscat (in: _Dest=0x69c00a8, _Source="DVCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" [0196.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0196.322] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xf699f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_M.VTX", cAlternateFileName="")) returned 1 [0196.322] wcscmp (_String1="DWGCNV_M.VTX", _String2=".") returned 1 [0196.322] wcscmp (_String1="DWGCNV_M.VTX", _String2="..") returned 1 [0196.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0aa8 [0196.322] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.322] wcscat (in: _Dest=0x69c0aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.322] wcscat (in: _Dest=0x69c0aa8, _Source="DWGCNV_M.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" [0196.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0196.323] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xef20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_U.VTX", cAlternateFileName="")) returned 1 [0196.323] wcscmp (_String1="DWGCNV_U.VTX", _String2=".") returned 1 [0196.323] wcscmp (_String1="DWGCNV_U.VTX", _String2="..") returned 1 [0196.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0508 [0196.323] wcscpy (in: _Dest=0x69c0508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.323] wcscat (in: _Dest=0x69c0508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.323] wcscat (in: _Dest=0x69c0508, _Source="DWGCNV_U.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" [0196.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0196.324] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3e600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9e3e600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VSS", cAlternateFileName="")) returned 1 [0196.324] wcscmp (_String1="EECHIP_M.VSS", _String2=".") returned 1 [0196.324] wcscmp (_String1="EECHIP_M.VSS", _String2="..") returned 1 [0196.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0be8 [0196.324] wcscpy (in: _Dest=0x69c0be8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.324] wcscat (in: _Dest=0x69c0be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.324] wcscat (in: _Dest=0x69c0be8, _Source="EECHIP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" [0196.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0196.325] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58569a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58569a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VST", cAlternateFileName="")) returned 1 [0196.325] wcscmp (_String1="EECHIP_M.VST", _String2=".") returned 1 [0196.325] wcscmp (_String1="EECHIP_M.VST", _String2="..") returned 1 [0196.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfec8 [0196.325] wcscpy (in: _Dest=0x69bfec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.325] wcscat (in: _Dest=0x69bfec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.325] wcscat (in: _Dest=0x69bfec8, _Source="EECHIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" [0196.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0196.326] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb6a00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1bb6a00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VSS", cAlternateFileName="")) returned 1 [0196.326] wcscmp (_String1="EECHIP_U.VSS", _String2=".") returned 1 [0196.326] wcscmp (_String1="EECHIP_U.VSS", _String2="..") returned 1 [0196.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1688 [0196.327] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.327] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.327] wcscat (in: _Dest=0x69c1688, _Source="EECHIP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" [0196.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0196.328] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e4c7b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e4c7b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VST", cAlternateFileName="")) returned 1 [0196.328] wcscmp (_String1="EECHIP_U.VST", _String2=".") returned 1 [0196.328] wcscmp (_String1="EECHIP_U.VST", _String2="..") returned 1 [0196.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c10e8 [0196.328] wcscpy (in: _Dest=0x69c10e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.328] wcscat (in: _Dest=0x69c10e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.328] wcscat (in: _Dest=0x69c10e8, _Source="EECHIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" [0196.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c10e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0196.329] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13a500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa13a500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x26000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_M.VSS", cAlternateFileName="")) returned 1 [0196.329] wcscmp (_String1="EECOMP_M.VSS", _String2=".") returned 1 [0196.329] wcscmp (_String1="EECOMP_M.VSS", _String2="..") returned 1 [0196.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1048 [0196.329] wcscpy (in: _Dest=0x69c1048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.329] wcscat (in: _Dest=0x69c1048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.329] wcscat (in: _Dest=0x69c1048, _Source="EECOMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" [0196.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0196.330] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d0d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39d0d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_U.VSS", cAlternateFileName="")) returned 1 [0196.334] wcscmp (_String1="EECOMP_U.VSS", _String2=".") returned 1 [0196.334] wcscmp (_String1="EECOMP_U.VSS", _String2="..") returned 1 [0196.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0f08 [0196.334] wcscpy (in: _Dest=0x69c0f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.334] wcscat (in: _Dest=0x69c0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.334] wcscat (in: _Dest=0x69c0f08, _Source="EECOMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" [0196.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0196.335] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11eb2900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11eb2900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_M.VSS", cAlternateFileName="")) returned 1 [0196.335] wcscmp (_String1="EEFUND_M.VSS", _String2=".") returned 1 [0196.335] wcscmp (_String1="EEFUND_M.VSS", _String2="..") returned 1 [0196.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0828 [0196.335] wcscpy (in: _Dest=0x69c0828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.335] wcscat (in: _Dest=0x69c0828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.335] wcscat (in: _Dest=0x69c0828, _Source="EEFUND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" [0196.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0196.336] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20394500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20394500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_U.VSS", cAlternateFileName="")) returned 1 [0196.336] wcscmp (_String1="EEFUND_U.VSS", _String2=".") returned 1 [0196.336] wcscmp (_String1="EEFUND_U.VSS", _String2="..") returned 1 [0196.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0288 [0196.336] wcscpy (in: _Dest=0x69c0288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.336] wcscat (in: _Dest=0x69c0288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.336] wcscat (in: _Dest=0x69c0288, _Source="EEFUND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" [0196.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0196.337] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64425c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64425c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_M.VST", cAlternateFileName="")) returned 1 [0196.337] wcscmp (_String1="EEGENR_M.VST", _String2=".") returned 1 [0196.337] wcscmp (_String1="EEGENR_M.VST", _String2="..") returned 1 [0196.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0008 [0196.337] wcscpy (in: _Dest=0x69c0008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.338] wcscat (in: _Dest=0x69c0008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.338] wcscat (in: _Dest=0x69c0008, _Source="EEGENR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" [0196.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0196.338] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a383d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6a383d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_U.VST", cAlternateFileName="")) returned 1 [0196.338] wcscmp (_String1="EEGENR_U.VST", _String2=".") returned 1 [0196.338] wcscmp (_String1="EEGENR_U.VST", _String2="..") returned 1 [0196.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0d28 [0196.339] wcscpy (in: _Dest=0x69c0d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.339] wcscat (in: _Dest=0x69c0d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.339] wcscat (in: _Dest=0x69c0d28, _Source="EEGENR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" [0196.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0196.339] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715f4b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x715f4b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_M.VST", cAlternateFileName="")) returned 1 [0196.340] wcscmp (_String1="EEICS_M.VST", _String2=".") returned 1 [0196.340] wcscmp (_String1="EEICS_M.VST", _String2="..") returned 1 [0196.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1728 [0196.340] wcscpy (in: _Dest=0x69c1728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.340] wcscat (in: _Dest=0x69c1728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.340] wcscat (in: _Dest=0x69c1728, _Source="EEICS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" [0196.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0196.341] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77552c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77552c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_U.VST", cAlternateFileName="")) returned 1 [0196.341] wcscmp (_String1="EEICS_U.VST", _String2=".") returned 1 [0196.341] wcscmp (_String1="EEICS_U.VST", _String2="..") returned 1 [0196.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c17c8 [0196.341] wcscpy (in: _Dest=0x69c17c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.341] wcscat (in: _Dest=0x69c17c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.341] wcscat (in: _Dest=0x69c17c8, _Source="EEICS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" [0196.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c17c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0196.342] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fdf900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24fdf900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_M.VSS", cAlternateFileName="")) returned 1 [0196.342] wcscmp (_String1="EEMAIN_M.VSS", _String2=".") returned 1 [0196.342] wcscmp (_String1="EEMAIN_M.VSS", _String2="..") returned 1 [0196.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1868 [0196.342] wcscpy (in: _Dest=0x69c1868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.342] wcscat (in: _Dest=0x69c1868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.342] wcscat (in: _Dest=0x69c1868, _Source="EEMAIN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" [0196.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0196.343] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c2ad00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c2ad00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_U.VSS", cAlternateFileName="")) returned 1 [0196.343] wcscmp (_String1="EEMAIN_U.VSS", _String2=".") returned 1 [0196.343] wcscmp (_String1="EEMAIN_U.VSS", _String2="..") returned 1 [0196.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1908 [0196.343] wcscpy (in: _Dest=0x69c1908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.343] wcscat (in: _Dest=0x69c1908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.343] wcscat (in: _Dest=0x69c1908, _Source="EEMAIN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" [0196.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0196.344] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ae6f00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35ae6f00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_M.VSS", cAlternateFileName="")) returned 1 [0196.344] wcscmp (_String1="EEMAPS_M.VSS", _String2=".") returned 1 [0196.344] wcscmp (_String1="EEMAPS_M.VSS", _String2="..") returned 1 [0196.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c19a8 [0196.344] wcscpy (in: _Dest=0x69c19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.344] wcscat (in: _Dest=0x69c19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.344] wcscat (in: _Dest=0x69c19a8, _Source="EEMAPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" [0196.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0196.345] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419a3100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419a3100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_U.VSS", cAlternateFileName="")) returned 1 [0196.345] wcscmp (_String1="EEMAPS_U.VSS", _String2=".") returned 1 [0196.345] wcscmp (_String1="EEMAPS_U.VSS", _String2="..") returned 1 [0196.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1a48 [0196.345] wcscpy (in: _Dest=0x69c1a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.346] wcscat (in: _Dest=0x69c1a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.346] wcscat (in: _Dest=0x69c1a48, _Source="EEMAPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" [0196.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0196.347] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47901200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47901200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_M.VSS", cAlternateFileName="")) returned 1 [0196.347] wcscmp (_String1="EEMECH_M.VSS", _String2=".") returned 1 [0196.347] wcscmp (_String1="EEMECH_M.VSS", _String2="..") returned 1 [0196.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1ae8 [0196.347] wcscpy (in: _Dest=0x69c1ae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.347] wcscat (in: _Dest=0x69c1ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.347] wcscat (in: _Dest=0x69c1ae8, _Source="EEMECH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" [0196.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0196.837] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c54c600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c54c600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x14800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_U.VSS", cAlternateFileName="")) returned 1 [0196.837] wcscmp (_String1="EEMECH_U.VSS", _String2=".") returned 1 [0196.837] wcscmp (_String1="EEMECH_U.VSS", _String2="..") returned 1 [0196.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c08c8 [0196.837] wcscpy (in: _Dest=0x69c08c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0196.837] wcscat (in: _Dest=0x69c08c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0196.837] wcscat (in: _Dest=0x69c08c8, _Source="EEMECH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" [0201.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c08c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0201.777] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54ad0100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bb7050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54ad0100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_M.VSS", cAlternateFileName="")) returned 1 [0201.777] wcscmp (_String1="EEPATH_M.VSS", _String2=".") returned 1 [0201.777] wcscmp (_String1="EEPATH_M.VSS", _String2="..") returned 1 [0201.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e750 [0201.777] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.777] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.777] wcscat (in: _Dest=0x3e0e750, _Source="EEPATH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" [0201.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0201.778] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d053c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5d053c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_U.VSS", cAlternateFileName="")) returned 1 [0201.778] wcscmp (_String1="EEPATH_U.VSS", _String2=".") returned 1 [0201.778] wcscmp (_String1="EEPATH_U.VSS", _String2="..") returned 1 [0201.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d5d0 [0201.778] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.778] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.778] wcscat (in: _Dest=0x3e0d5d0, _Source="EEPATH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" [0201.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0201.779] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fb1d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62fb1d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_M.VSS", cAlternateFileName="")) returned 1 [0201.780] wcscmp (_String1="EEQUAL_M.VSS", _String2=".") returned 1 [0201.780] wcscmp (_String1="EEQUAL_M.VSS", _String2="..") returned 1 [0201.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dc10 [0201.780] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.780] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.780] wcscat (in: _Dest=0x3e0dc10, _Source="EEQUAL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" [0201.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0201.781] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f0fe00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f0fe00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_U.VSS", cAlternateFileName="")) returned 1 [0201.781] wcscmp (_String1="EEQUAL_U.VSS", _String2=".") returned 1 [0201.781] wcscmp (_String1="EEQUAL_U.VSS", _String2="..") returned 1 [0201.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e930 [0201.781] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.781] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.781] wcscat (in: _Dest=0x3e0e930, _Source="EEQUAL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" [0201.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0201.782] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ab9300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73ab9300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_M.VSS", cAlternateFileName="")) returned 1 [0201.782] wcscmp (_String1="EESEMI_M.VSS", _String2=".") returned 1 [0201.782] wcscmp (_String1="EESEMI_M.VSS", _String2="..") returned 1 [0201.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e6b0 [0201.783] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.783] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.783] wcscat (in: _Dest=0x3e0e6b0, _Source="EESEMI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" [0201.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0201.784] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e662800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e662800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_U.VSS", cAlternateFileName="")) returned 1 [0201.784] wcscmp (_String1="EESEMI_U.VSS", _String2=".") returned 1 [0201.784] wcscmp (_String1="EESEMI_U.VSS", _String2="..") returned 1 [0201.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d710 [0201.784] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.784] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.784] wcscat (in: _Dest=0x3e0d710, _Source="EESEMI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" [0201.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0201.785] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9178f800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9178f800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x4b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_M.VSS", cAlternateFileName="")) returned 1 [0201.785] wcscmp (_String1="EESWCH_M.VSS", _String2=".") returned 1 [0201.785] wcscmp (_String1="EESWCH_M.VSS", _String2="..") returned 1 [0201.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f010 [0201.785] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.785] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.785] wcscat (in: _Dest=0x3e0f010, _Source="EESWCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" [0201.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0201.786] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48bc800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa48bc800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x48600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_U.VSS", cAlternateFileName="")) returned 1 [0201.786] wcscmp (_String1="EESWCH_U.VSS", _String2=".") returned 1 [0201.786] wcscmp (_String1="EESWCH_U.VSS", _String2="..") returned 1 [0201.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eed0 [0201.786] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.786] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.786] wcscat (in: _Dest=0x3e0eed0, _Source="EESWCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" [0201.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0201.788] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fad6700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fad6700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_M.VST", cAlternateFileName="")) returned 1 [0201.788] wcscmp (_String1="EESYS_M.VST", _String2=".") returned 1 [0201.788] wcscmp (_String1="EESYS_M.VST", _String2="..") returned 1 [0201.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0de90 [0201.788] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.788] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.788] wcscat (in: _Dest=0x3e0de90, _Source="EESYS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" [0201.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0201.789] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8805a200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_U.VST", cAlternateFileName="")) returned 1 [0201.789] wcscmp (_String1="EESYS_U.VST", _String2=".") returned 1 [0201.789] wcscmp (_String1="EESYS_U.VST", _String2="..") returned 1 [0201.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0dfd0 [0201.789] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.789] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.789] wcscat (in: _Dest=0x3e0dfd0, _Source="EESYS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" [0201.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0201.790] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb2d600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xabb2d600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_M.VSS", cAlternateFileName="")) returned 1 [0201.790] wcscmp (_String1="EETCOM_M.VSS", _String2=".") returned 1 [0201.790] wcscmp (_String1="EETCOM_M.VSS", _String2="..") returned 1 [0201.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e430 [0201.790] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.791] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.791] wcscat (in: _Dest=0x3e0e430, _Source="EETCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" [0201.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0201.792] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d9e400, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2d9e400, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_U.VSS", cAlternateFileName="")) returned 1 [0201.792] wcscmp (_String1="EETCOM_U.VSS", _String2=".") returned 1 [0201.792] wcscmp (_String1="EETCOM_U.VSS", _String2="..") returned 1 [0201.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0201.792] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.792] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.792] wcscat (in: _Dest=0x3e0e110, _Source="EETCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" [0201.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0201.793] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc634c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbc634c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_M.VSS", cAlternateFileName="")) returned 1 [0201.793] wcscmp (_String1="EETERM_M.VSS", _String2=".") returned 1 [0201.793] wcscmp (_String1="EETERM_M.VSS", _String2="..") returned 1 [0201.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eb10 [0201.793] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.793] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.793] wcscat (in: _Dest=0x3e0eb10, _Source="EETERM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" [0201.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0201.794] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71de100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc71de100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_U.VSS", cAlternateFileName="")) returned 1 [0201.795] wcscmp (_String1="EETERM_U.VSS", _String2=".") returned 1 [0201.795] wcscmp (_String1="EETERM_U.VSS", _String2="..") returned 1 [0201.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0201.795] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.795] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.795] wcscat (in: _Dest=0x3e0ecf0, _Source="EETERM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" [0201.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0201.796] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd13c200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd13c200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_M.VSS", cAlternateFileName="")) returned 1 [0201.796] wcscmp (_String1="EETRAN_M.VSS", _String2=".") returned 1 [0201.796] wcscmp (_String1="EETRAN_M.VSS", _String2="..") returned 1 [0201.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d210 [0201.796] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.796] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.796] wcscat (in: _Dest=0x3e0d210, _Source="EETRAN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" [0201.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0201.799] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd309a300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd309a300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_U.VSS", cAlternateFileName="")) returned 1 [0201.799] wcscmp (_String1="EETRAN_U.VSS", _String2=".") returned 1 [0201.799] wcscmp (_String1="EETRAN_U.VSS", _String2="..") returned 1 [0201.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dcb0 [0201.799] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.799] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.799] wcscat (in: _Dest=0x3e0dcb0, _Source="EETRAN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" [0201.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0201.800] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc930b00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc930b00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_M.VSS", cAlternateFileName="")) returned 1 [0201.801] wcscmp (_String1="EEVHF_M.VSS", _String2=".") returned 1 [0201.801] wcscmp (_String1="EEVHF_M.VSS", _String2="..") returned 1 [0201.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e890 [0201.801] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.801] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.801] wcscat (in: _Dest=0x3e0e890, _Source="EEVHF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" [0201.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0201.802] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c7300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe61c7300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_U.VSS", cAlternateFileName="")) returned 1 [0201.802] wcscmp (_String1="EEVHF_U.VSS", _String2=".") returned 1 [0201.802] wcscmp (_String1="EEVHF_U.VSS", _String2="..") returned 1 [0201.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e390 [0201.802] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.802] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.802] wcscat (in: _Dest=0x3e0e390, _Source="EEVHF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" [0201.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0201.803] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2083500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2083500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VSS", cAlternateFileName="")) returned 1 [0201.803] wcscmp (_String1="ELETEL_M.VSS", _String2=".") returned 1 [0201.803] wcscmp (_String1="ELETEL_M.VSS", _String2="..") returned 1 [0201.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ef70 [0201.804] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.804] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.804] wcscat (in: _Dest=0x3e0ef70, _Source="ELETEL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" [0201.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0201.805] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905ddd00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x905ddd00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VST", cAlternateFileName="")) returned 1 [0201.805] wcscmp (_String1="ELETEL_M.VST", _String2=".") returned 1 [0201.805] wcscmp (_String1="ELETEL_M.VST", _String2="..") returned 1 [0201.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0201.805] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.805] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.805] wcscat (in: _Dest=0x3e0d2b0, _Source="ELETEL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" [0201.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108 [0201.806] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf3f700, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfdf3f700, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VSS", cAlternateFileName="")) returned 1 [0201.807] wcscmp (_String1="ELETEL_U.VSS", _String2=".") returned 1 [0201.807] wcscmp (_String1="ELETEL_U.VSS", _String2="..") returned 1 [0201.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e7f0 [0201.807] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0201.807] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0201.807] wcscat (in: _Dest=0x3e0e7f0, _Source="ELETEL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" [0201.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0201.808] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e74500, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99e74500, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VST", cAlternateFileName="")) returned 1 [0202.043] wcscmp (_String1="ELETEL_U.VST", _String2=".") returned 1 [0202.043] wcscmp (_String1="ELETEL_U.VST", _String2="..") returned 1 [0202.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0da30 [0202.043] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.043] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.043] wcscat (in: _Dest=0x3e0da30, _Source="ELETEL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" [0202.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0202.044] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dfb900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9dfb900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_M.VSS", cAlternateFileName="")) returned 1 [0202.044] wcscmp (_String1="EMBELL_M.VSS", _String2=".") returned 1 [0202.044] wcscmp (_String1="EMBELL_M.VSS", _String2="..") returned 1 [0202.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0202.044] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.044] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.044] wcscat (in: _Dest=0x3e0d8f0, _Source="EMBELL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" [0202.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0202.045] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15cb7b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15cb7b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x54c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_U.VSS", cAlternateFileName="")) returned 1 [0202.045] wcscmp (_String1="EMBELL_U.VSS", _String2=".") returned 1 [0202.045] wcscmp (_String1="EMBELL_U.VSS", _String2="..") returned 1 [0202.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0202.045] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.045] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.045] wcscat (in: _Dest=0x3e0ed90, _Source="EMBELL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" [0202.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0202.046] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b40a500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b40a500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x6d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VSS", cAlternateFileName="")) returned 1 [0202.046] wcscmp (_String1="ENTAPP_M.VSS", _String2=".") returned 1 [0202.046] wcscmp (_String1="ENTAPP_M.VSS", _String2="..") returned 1 [0202.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0db70 [0202.046] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.046] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.046] wcscat (in: _Dest=0x3e0db70, _Source="ENTAPP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" [0202.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0202.047] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7acc00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d7acc00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VST", cAlternateFileName="")) returned 1 [0202.048] wcscmp (_String1="ENTAPP_M.VST", _String2=".") returned 1 [0202.048] wcscmp (_String1="ENTAPP_M.VST", _String2="..") returned 1 [0202.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d850 [0202.048] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.048] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.048] wcscat (in: _Dest=0x3e0d850, _Source="ENTAPP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" [0202.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0202.049] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f84a200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f84a200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x69c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VSS", cAlternateFileName="")) returned 1 [0202.049] wcscmp (_String1="ENTAPP_U.VSS", _String2=".") returned 1 [0202.049] wcscmp (_String1="ENTAPP_U.VSS", _String2="..") returned 1 [0202.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f0b0 [0202.049] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.049] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.049] wcscat (in: _Dest=0x3e0f0b0, _Source="ENTAPP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" [0202.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0202.050] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fdd2600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9fdd2600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VST", cAlternateFileName="")) returned 1 [0202.050] wcscmp (_String1="ENTAPP_U.VST", _String2=".") returned 1 [0202.050] wcscmp (_String1="ENTAPP_U.VST", _String2="..") returned 1 [0202.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0202.050] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.050] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.050] wcscat (in: _Dest=0x3e0ebb0, _Source="ENTAPP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" [0202.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0202.051] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43182900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43182900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_M.VSS", cAlternateFileName="")) returned 1 [0202.051] wcscmp (_String1="ENTITY_M.VSS", _String2=".") returned 1 [0202.051] wcscmp (_String1="ENTITY_M.VSS", _String2="..") returned 1 [0202.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e250 [0202.051] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.051] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.051] wcscat (in: _Dest=0x3e0e250, _Source="ENTITY_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" [0202.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0202.052] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46abb000, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46abb000, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_U.VSS", cAlternateFileName="")) returned 1 [0202.052] wcscmp (_String1="ENTITY_U.VSS", _String2=".") returned 1 [0202.052] wcscmp (_String1="ENTITY_U.VSS", _String2="..") returned 1 [0202.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d170 [0202.052] wcscpy (in: _Dest=0x3e0d170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.052] wcscat (in: _Dest=0x3e0d170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.052] wcscat (in: _Dest=0x3e0d170, _Source="ENTITY_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" [0202.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0202.053] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x490e0a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x490e0a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VSS", cAlternateFileName="")) returned 1 [0202.053] wcscmp (_String1="EPC_M.VSS", _String2=".") returned 1 [0202.053] wcscmp (_String1="EPC_M.VSS", _String2="..") returned 1 [0202.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32068 [0202.054] wcscpy (in: _Dest=0x3e32068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.054] wcscat (in: _Dest=0x3e32068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.054] wcscat (in: _Dest=0x3e32068, _Source="EPC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" [0202.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0202.055] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa370ad00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa370ad00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VST", cAlternateFileName="")) returned 1 [0202.055] wcscmp (_String1="EPC_M.VST", _String2=".") returned 1 [0202.055] wcscmp (_String1="EPC_M.VST", _String2="..") returned 1 [0202.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31060 [0202.055] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.055] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.055] wcscat (in: _Dest=0x3e31060, _Source="EPC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" [0202.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0202.056] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca19100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca19100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VSS", cAlternateFileName="")) returned 1 [0202.056] wcscmp (_String1="EPC_U.VSS", _String2=".") returned 1 [0202.056] wcscmp (_String1="EPC_U.VSS", _String2="..") returned 1 [0202.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31650 [0202.056] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.056] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.056] wcscat (in: _Dest=0x3e31650, _Source="EPC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" [0202.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0202.057] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d30700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d30700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VST", cAlternateFileName="")) returned 1 [0202.057] wcscmp (_String1="EPC_U.VST", _String2=".") returned 1 [0202.057] wcscmp (_String1="EPC_U.VST", _String2="..") returned 1 [0202.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30cd0 [0202.057] wcscpy (in: _Dest=0x3e30cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.057] wcscat (in: _Dest=0x3e30cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.057] wcscat (in: _Dest=0x3e30cd0, _Source="EPC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" [0202.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0202.058] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e833400, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e833400, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_M.VSS", cAlternateFileName="")) returned 1 [0202.058] wcscmp (_String1="EXCOBJ_M.VSS", _String2=".") returned 1 [0202.058] wcscmp (_String1="EXCOBJ_M.VSS", _String2="..") returned 1 [0202.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e2f0 [0202.059] wcscpy (in: _Dest=0x3e0e2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.059] wcscat (in: _Dest=0x3e0e2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.059] wcscat (in: _Dest=0x3e0e2f0, _Source="EXCOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" [0202.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0202.060] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33aa00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f33aa00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_U.VSS", cAlternateFileName="")) returned 1 [0202.060] wcscmp (_String1="EXCOBJ_U.VSS", _String2=".") returned 1 [0202.060] wcscmp (_String1="EXCOBJ_U.VSS", _String2="..") returned 1 [0202.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e1b0 [0202.060] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.060] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.060] wcscat (in: _Dest=0x3e0e1b0, _Source="EXCOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" [0202.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0202.078] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82467a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82467a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_M.VSS", cAlternateFileName="")) returned 1 [0202.078] wcscmp (_String1="FASTN1_M.VSS", _String2=".") returned 1 [0202.078] wcscmp (_String1="FASTN1_M.VSS", _String2="..") returned 1 [0202.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e4d0 [0202.078] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.078] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.078] wcscat (in: _Dest=0x3e0e4d0, _Source="FASTN1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" [0202.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0202.080] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94281d00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94281d00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x3ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_U.VSS", cAlternateFileName="")) returned 1 [0202.080] wcscmp (_String1="FASTN1_U.VSS", _String2=".") returned 1 [0202.080] wcscmp (_String1="FASTN1_U.VSS", _String2="..") returned 1 [0202.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0202.080] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.080] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.080] wcscat (in: _Dest=0x69c1228, _Source="FASTN1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" [0202.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0202.081] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2763900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2763900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_M.VSS", cAlternateFileName="")) returned 1 [0202.081] wcscmp (_String1="FASTN2_M.VSS", _String2=".") returned 1 [0202.081] wcscmp (_String1="FASTN2_M.VSS", _String2="..") returned 1 [0202.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0468 [0202.081] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.081] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.081] wcscat (in: _Dest=0x69c0468, _Source="FASTN2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" [0202.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0202.082] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf932800, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf932800, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_U.VSS", cAlternateFileName="")) returned 1 [0202.082] wcscmp (_String1="FASTN2_U.VSS", _String2=".") returned 1 [0202.082] wcscmp (_String1="FASTN2_U.VSS", _String2="..") returned 1 [0202.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c05a8 [0202.082] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.082] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.082] wcscat (in: _Dest=0x69c05a8, _Source="FASTN2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" [0202.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0202.083] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f58200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1f58200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VSS", cAlternateFileName="")) returned 1 [0202.083] wcscmp (_String1="FAULT_M.VSS", _String2=".") returned 1 [0202.083] wcscmp (_String1="FAULT_M.VSS", _String2="..") returned 1 [0202.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0648 [0202.083] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.083] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.083] wcscat (in: _Dest=0x69c0648, _Source="FAULT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" [0202.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0202.085] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8356100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa8356100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VST", cAlternateFileName="")) returned 1 [0202.085] wcscmp (_String1="FAULT_M.VST", _String2=".") returned 1 [0202.085] wcscmp (_String1="FAULT_M.VST", _String2="..") returned 1 [0202.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1188 [0202.085] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.085] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.085] wcscat (in: _Dest=0x69c1188, _Source="FAULT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" [0202.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0202.086] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5890900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5890900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VSS", cAlternateFileName="")) returned 1 [0202.086] wcscmp (_String1="FAULT_U.VSS", _String2=".") returned 1 [0202.086] wcscmp (_String1="FAULT_U.VSS", _String2="..") returned 1 [0202.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c01e8 [0202.086] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.086] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.086] wcscat (in: _Dest=0x69c01e8, _Source="FAULT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" [0202.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0202.087] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa97bb00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa97bb00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VST", cAlternateFileName="")) returned 1 [0202.087] wcscmp (_String1="FAULT_U.VST", _String2=".") returned 1 [0202.087] wcscmp (_String1="FAULT_U.VST", _String2="..") returned 1 [0202.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c12c8 [0202.087] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.087] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.087] wcscat (in: _Dest=0x69c12c8, _Source="FAULT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" [0202.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0202.088] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d72500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3d72500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_M.VSS", cAlternateFileName="")) returned 1 [0202.088] wcscmp (_String1="FLOSHP_M.VSS", _String2=".") returned 1 [0202.088] wcscmp (_String1="FLOSHP_M.VSS", _String2="..") returned 1 [0202.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0202.088] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.088] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.088] wcscat (in: _Dest=0x69c03c8, _Source="FLOSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" [0202.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0202.089] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2254100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2254100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_U.VSS", cAlternateFileName="")) returned 1 [0202.089] wcscmp (_String1="FLOSHP_U.VSS", _String2=".") returned 1 [0202.089] wcscmp (_String1="FLOSHP_U.VSS", _String2="..") returned 1 [0202.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bff68 [0202.089] wcscpy (in: _Dest=0x69bff68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.090] wcscat (in: _Dest=0x69bff68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.090] wcscat (in: _Dest=0x69bff68, _Source="FLOSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" [0202.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0202.091] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5525000, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5525000, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_M.VST", cAlternateFileName="")) returned 1 [0202.091] wcscmp (_String1="FLRPLN_M.VST", _String2=".") returned 1 [0202.091] wcscmp (_String1="FLRPLN_M.VST", _String2="..") returned 1 [0202.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0e68 [0202.091] wcscpy (in: _Dest=0x69c0e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.091] wcscat (in: _Dest=0x69c0e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.091] wcscat (in: _Dest=0x69c0e68, _Source="FLRPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" [0202.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0202.092] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc13e1200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc13e1200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_U.VST", cAlternateFileName="")) returned 1 [0202.092] wcscmp (_String1="FLRPLN_U.VST", _String2=".") returned 1 [0202.092] wcscmp (_String1="FLRPLN_U.VST", _String2="..") returned 1 [0202.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0968 [0202.092] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.092] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.092] wcscat (in: _Dest=0x69c0968, _Source="FLRPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" [0202.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0202.093] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9964d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9964d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_M.VST", cAlternateFileName="")) returned 1 [0202.093] wcscmp (_String1="FPALL_M.VST", _String2=".") returned 1 [0202.093] wcscmp (_String1="FPALL_M.VST", _String2="..") returned 1 [0202.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c06e8 [0202.093] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.093] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.093] wcscat (in: _Dest=0x69c06e8, _Source="FPALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" [0202.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0202.094] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bd5b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0bd5b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_U.VST", cAlternateFileName="")) returned 1 [0202.095] wcscmp (_String1="FPALL_U.VST", _String2=".") returned 1 [0202.095] wcscmp (_String1="FPALL_U.VST", _String2="..") returned 1 [0202.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0148 [0202.095] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.095] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.095] wcscat (in: _Dest=0x69c0148, _Source="FPALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" [0202.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0202.175] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a6b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe79a6b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_M.VSS", cAlternateFileName="")) returned 1 [0202.175] wcscmp (_String1="FPASSM_M.VSS", _String2=".") returned 1 [0202.175] wcscmp (_String1="FPASSM_M.VSS", _String2="..") returned 1 [0202.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c15e8 [0202.175] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.175] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.175] wcscat (in: _Dest=0x69c15e8, _Source="FPASSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" [0202.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0202.176] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84ae100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf84ae100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x40200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_U.VSS", cAlternateFileName="")) returned 1 [0202.176] wcscmp (_String1="FPASSM_U.VSS", _String2=".") returned 1 [0202.176] wcscmp (_String1="FPASSM_U.VSS", _String2="..") returned 1 [0202.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0202.176] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.176] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.176] wcscat (in: _Dest=0x69c1408, _Source="FPASSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" [0202.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0202.177] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef13800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef13800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_M.VSS", cAlternateFileName="")) returned 1 [0202.177] wcscmp (_String1="FPEQP_M.VSS", _String2=".") returned 1 [0202.177] wcscmp (_String1="FPEQP_M.VSS", _String2="..") returned 1 [0202.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c14a8 [0202.177] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.177] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.177] wcscat (in: _Dest=0x69c14a8, _Source="FPEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" [0202.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0202.178] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22040800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22040800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x45e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_U.VSS", cAlternateFileName="")) returned 1 [0202.178] wcscmp (_String1="FPEQP_U.VSS", _String2=".") returned 1 [0202.178] wcscmp (_String1="FPEQP_U.VSS", _String2="..") returned 1 [0202.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69bfd88 [0202.178] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.178] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.179] wcscat (in: _Dest=0x69bfd88, _Source="FPEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" [0202.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0202.179] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e5ab00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33e5ab00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x3a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_M.VSS", cAlternateFileName="")) returned 1 [0202.180] wcscmp (_String1="FPVALV_M.VSS", _String2=".") returned 1 [0202.180] wcscmp (_String1="FPVALV_M.VSS", _String2="..") returned 1 [0202.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1b88 [0202.180] wcscpy (in: _Dest=0x69c1b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.180] wcscat (in: _Dest=0x69c1b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.180] wcscat (in: _Dest=0x69c1b88, _Source="FPVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" [0202.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0202.181] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4364f400, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4364f400, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_U.VSS", cAlternateFileName="")) returned 1 [0204.188] wcscmp (_String1="FPVALV_U.VSS", _String2=".") returned 1 [0204.188] wcscmp (_String1="FPVALV_U.VSS", _String2="..") returned 1 [0204.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1c28 [0204.188] wcscpy (in: _Dest=0x69c1c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.188] wcscat (in: _Dest=0x69c1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.188] wcscat (in: _Dest=0x69c1c28, _Source="FPVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" [0204.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0204.192] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbd2f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bbd2f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_M.VSS", cAlternateFileName="")) returned 1 [0204.192] wcscmp (_String1="FREEQP_M.VSS", _String2=".") returned 1 [0204.192] wcscmp (_String1="FREEQP_M.VSS", _String2="..") returned 1 [0204.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0204.192] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.192] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.192] wcscat (in: _Dest=0x2c7198, _Source="FREEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" [0204.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0204.194] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e43d00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52e43d00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_U.VSS", cAlternateFileName="")) returned 1 [0204.194] wcscmp (_String1="FREEQP_U.VSS", _String2=".") returned 1 [0204.194] wcscmp (_String1="FREEQP_U.VSS", _String2="..") returned 1 [0204.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c75f8 [0204.194] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.194] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.194] wcscat (in: _Dest=0x2c75f8, _Source="FREEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" [0204.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0204.196] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60012c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60012c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_M.VSS", cAlternateFileName="")) returned 1 [0204.196] wcscmp (_String1="FURN_M.VSS", _String2=".") returned 1 [0204.196] wcscmp (_String1="FURN_M.VSS", _String2="..") returned 1 [0204.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7238 [0204.196] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.196] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.196] wcscat (in: _Dest=0x2c7238, _Source="FURN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" [0204.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0204.197] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1e1b00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d1e1b00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_U.VSS", cAlternateFileName="")) returned 1 [0204.197] wcscmp (_String1="FURN_U.VSS", _String2=".") returned 1 [0204.197] wcscmp (_String1="FURN_U.VSS", _String2="..") returned 1 [0204.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6e78 [0204.197] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.197] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.197] wcscat (in: _Dest=0x2c6e78, _Source="FURN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" [0204.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0204.198] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f807500, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f807500, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_M.VSS", cAlternateFileName="")) returned 1 [0204.198] wcscmp (_String1="GANESA_M.VSS", _String2=".") returned 1 [0204.198] wcscmp (_String1="GANESA_M.VSS", _String2="..") returned 1 [0204.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0204.198] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.198] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.198] wcscat (in: _Dest=0x2c7698, _Source="GANESA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" [0204.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0204.199] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b1a200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70b1a200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_U.VSS", cAlternateFileName="")) returned 1 [0204.199] wcscmp (_String1="GANESA_U.VSS", _String2=".") returned 1 [0204.199] wcscmp (_String1="GANESA_U.VSS", _String2="..") returned 1 [0204.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0204.199] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.199] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.199] wcscat (in: _Dest=0x2c7558, _Source="GANESA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" [0204.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0204.200] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6c3700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b6c3700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VSS", cAlternateFileName="")) returned 1 [0204.200] wcscmp (_String1="GANTT_M.VSS", _String2=".") returned 1 [0204.200] wcscmp (_String1="GANTT_M.VSS", _String2="..") returned 1 [0204.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7738 [0204.200] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.200] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.200] wcscat (in: _Dest=0x2c7738, _Source="GANTT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" [0204.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0204.202] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5820f00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5820f00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VST", cAlternateFileName="")) returned 1 [0204.202] wcscmp (_String1="GANTT_M.VST", _String2=".") returned 1 [0204.202] wcscmp (_String1="GANTT_M.VST", _String2="..") returned 1 [0204.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7378 [0204.202] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.202] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.202] wcscat (in: _Dest=0x2c7378, _Source="GANTT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" [0204.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0204.203] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f59f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84f59f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VSS", cAlternateFileName="")) returned 1 [0204.203] wcscmp (_String1="GANTT_U.VSS", _String2=".") returned 1 [0204.203] wcscmp (_String1="GANTT_U.VSS", _String2="..") returned 1 [0204.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c6fb8 [0204.203] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.203] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.203] wcscat (in: _Dest=0x2c6fb8, _Source="GANTT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" [0204.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0204.204] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda46c300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda46c300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VST", cAlternateFileName="")) returned 1 [0204.204] wcscmp (_String1="GANTT_U.VST", _String2=".") returned 1 [0204.204] wcscmp (_String1="GANTT_U.VST", _String2="..") returned 1 [0204.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c72d8 [0204.204] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.204] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.204] wcscat (in: _Dest=0x2c72d8, _Source="GANTT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" [0204.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0204.205] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aeb8000, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8aeb8000, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_M.VSS", cAlternateFileName="")) returned 1 [0204.205] wcscmp (_String1="GARDEN_M.VSS", _String2=".") returned 1 [0204.205] wcscmp (_String1="GARDEN_M.VSS", _String2="..") returned 1 [0204.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dce8 [0204.205] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.205] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.205] wcscat (in: _Dest=0x697dce8, _Source="GARDEN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" [0204.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0204.206] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e16100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90e16100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_U.VSS", cAlternateFileName="")) returned 1 [0204.206] wcscmp (_String1="GARDEN_U.VSS", _String2=".") returned 1 [0204.206] wcscmp (_String1="GARDEN_U.VSS", _String2="..") returned 1 [0204.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dd88 [0204.206] wcscpy (in: _Dest=0x697dd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.206] wcscat (in: _Dest=0x697dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.206] wcscat (in: _Dest=0x697dd88, _Source="GARDEN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" [0204.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0204.207] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99399c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99399c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_M.VSS", cAlternateFileName="")) returned 1 [0204.207] wcscmp (_String1="GDT_M.VSS", _String2=".") returned 1 [0204.207] wcscmp (_String1="GDT_M.VSS", _String2="..") returned 1 [0204.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e32198 [0204.207] wcscpy (in: _Dest=0x3e32198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.207] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.207] wcscat (in: _Dest=0x3e32198, _Source="GDT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" [0204.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0204.208] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa191d700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa191d700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_U.VSS", cAlternateFileName="")) returned 1 [0204.208] wcscmp (_String1="GDT_U.VSS", _String2=".") returned 1 [0204.208] wcscmp (_String1="GDT_U.VSS", _String2="..") returned 1 [0204.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31520 [0204.208] wcscpy (in: _Dest=0x3e31520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.208] wcscat (in: _Dest=0x3e31520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.208] wcscat (in: _Dest=0x3e31520, _Source="GDT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" [0204.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0204.209] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c60c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9c60c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_M.VST", cAlternateFileName="")) returned 1 [0204.209] wcscmp (_String1="HOMPLN_M.VST", _String2=".") returned 1 [0204.209] wcscmp (_String1="HOMPLN_M.VST", _String2="..") returned 1 [0204.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697de28 [0204.209] wcscpy (in: _Dest=0x697de28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.210] wcscat (in: _Dest=0x697de28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.210] wcscat (in: _Dest=0x697de28, _Source="HOMPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" [0204.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0204.210] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8142800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8142800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_U.VST", cAlternateFileName="")) returned 1 [0204.211] wcscmp (_String1="HOMPLN_U.VST", _String2=".") returned 1 [0204.211] wcscmp (_String1="HOMPLN_U.VST", _String2="..") returned 1 [0204.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dec8 [0204.211] wcscpy (in: _Dest=0x697dec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.211] wcscat (in: _Dest=0x697dec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.211] wcscat (in: _Dest=0x697dec8, _Source="HOMPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" [0204.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0204.212] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaec600, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaeaec600, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_M.VSS", cAlternateFileName="")) returned 1 [0204.212] wcscmp (_String1="HVACCE_M.VSS", _String2=".") returned 1 [0204.212] wcscmp (_String1="HVACCE_M.VSS", _String2="..") returned 1 [0204.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697df68 [0204.213] wcscpy (in: _Dest=0x697df68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.213] wcscat (in: _Dest=0x697df68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.213] wcscat (in: _Dest=0x697df68, _Source="HVACCE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" [0204.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0204.214] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2e0f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe2e0f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_U.VSS", cAlternateFileName="")) returned 1 [0204.214] wcscmp (_String1="HVACCE_U.VSS", _String2=".") returned 1 [0204.214] wcscmp (_String1="HVACCE_U.VSS", _String2="..") returned 1 [0204.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e008 [0204.215] wcscpy (in: _Dest=0x697e008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.215] wcscat (in: _Dest=0x697e008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.215] wcscat (in: _Dest=0x697e008, _Source="HVACCE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" [0204.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0204.216] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca19d100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca19d100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_M.VSS", cAlternateFileName="")) returned 1 [0204.216] wcscmp (_String1="HVACC_M.VSS", _String2=".") returned 1 [0204.216] wcscmp (_String1="HVACC_M.VSS", _String2="..") returned 1 [0204.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e0a8 [0204.216] wcscpy (in: _Dest=0x697e0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.216] wcscat (in: _Dest=0x697e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.216] wcscat (in: _Dest=0x697e0a8, _Source="HVACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" [0204.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0204.217] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6059300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6059300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_U.VSS", cAlternateFileName="")) returned 1 [0204.217] wcscmp (_String1="HVACC_U.VSS", _String2=".") returned 1 [0204.217] wcscmp (_String1="HVACC_U.VSS", _String2="..") returned 1 [0204.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e148 [0204.217] wcscpy (in: _Dest=0x697e148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.217] wcscat (in: _Dest=0x697e148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.217] wcscat (in: _Dest=0x697e148, _Source="HVACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" [0204.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0204.218] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3228200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3228200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_M.VSS", cAlternateFileName="")) returned 1 [0204.218] wcscmp (_String1="HVACD_M.VSS", _String2=".") returned 1 [0204.218] wcscmp (_String1="HVACD_M.VSS", _String2="..") returned 1 [0204.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e1e8 [0204.218] wcscpy (in: _Dest=0x697e1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.218] wcscat (in: _Dest=0x697e1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.218] wcscat (in: _Dest=0x697e1e8, _Source="HVACD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" [0204.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0204.219] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03f7100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf03f7100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_U.VSS", cAlternateFileName="")) returned 1 [0204.219] wcscmp (_String1="HVACD_U.VSS", _String2=".") returned 1 [0204.219] wcscmp (_String1="HVACD_U.VSS", _String2="..") returned 1 [0204.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e288 [0204.219] wcscpy (in: _Dest=0x697e288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.219] wcscat (in: _Dest=0x697e288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.219] wcscat (in: _Dest=0x697e288, _Source="HVACD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" [0204.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0204.220] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2b3300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc2b3300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_M.VSS", cAlternateFileName="")) returned 1 [0204.220] wcscmp (_String1="HVACEQ_M.VSS", _String2=".") returned 1 [0204.220] wcscmp (_String1="HVACEQ_M.VSS", _String2="..") returned 1 [0204.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e328 [0204.220] wcscpy (in: _Dest=0x697e328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.220] wcscat (in: _Dest=0x697e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.220] wcscat (in: _Dest=0x697e328, _Source="HVACEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" [0204.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0204.221] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4836e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4836e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_U.VSS", cAlternateFileName="")) returned 1 [0204.221] wcscmp (_String1="HVACEQ_U.VSS", _String2=".") returned 1 [0204.221] wcscmp (_String1="HVACEQ_U.VSS", _String2="..") returned 1 [0204.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e3c8 [0204.221] wcscpy (in: _Dest=0x697e3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.221] wcscat (in: _Dest=0x697e3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.221] wcscat (in: _Dest=0x697e3c8, _Source="HVACEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" [0204.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0204.222] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19d9000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19d9000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_M.VST", cAlternateFileName="")) returned 1 [0204.222] wcscmp (_String1="HVAC_M.VST", _String2=".") returned 1 [0204.222] wcscmp (_String1="HVAC_M.VST", _String2="..") returned 1 [0204.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697e468 [0204.222] wcscpy (in: _Dest=0x697e468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.222] wcscat (in: _Dest=0x697e468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.222] wcscat (in: _Dest=0x697e468, _Source="HVAC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" [0204.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0204.223] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26f800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb26f800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_U.VST", cAlternateFileName="")) returned 1 [0204.223] wcscmp (_String1="HVAC_U.VST", _String2=".") returned 1 [0204.223] wcscmp (_String1="HVAC_U.VST", _String2="..") returned 1 [0204.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697e508 [0204.223] wcscpy (in: _Dest=0x697e508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.223] wcscat (in: _Dest=0x697e508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.223] wcscat (in: _Dest=0x697e508, _Source="HVAC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" [0204.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0204.224] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816f500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x816f500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VSS", cAlternateFileName="")) returned 1 [0204.224] wcscmp (_String1="IDEF0_M.VSS", _String2=".") returned 1 [0204.224] wcscmp (_String1="IDEF0_M.VSS", _String2="..") returned 1 [0204.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e5a8 [0204.224] wcscpy (in: _Dest=0x697e5a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.224] wcscat (in: _Dest=0x697e5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.224] wcscat (in: _Dest=0x697e5a8, _Source="IDEF0_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" [0204.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0204.225] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd895200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd895200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VST", cAlternateFileName="")) returned 1 [0204.225] wcscmp (_String1="IDEF0_M.VST", _String2=".") returned 1 [0204.225] wcscmp (_String1="IDEF0_M.VST", _String2="..") returned 1 [0204.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e648 [0204.225] wcscpy (in: _Dest=0x697e648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.226] wcscat (in: _Dest=0x697e648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.226] wcscat (in: _Dest=0x697e648, _Source="IDEF0_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" [0204.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0204.226] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbaa7c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VSS", cAlternateFileName="")) returned 1 [0204.226] wcscmp (_String1="IDEF0_U.VSS", _String2=".") returned 1 [0204.226] wcscmp (_String1="IDEF0_U.VSS", _String2="..") returned 1 [0204.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e6e8 [0204.227] wcscpy (in: _Dest=0x697e6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.227] wcscat (in: _Dest=0x697e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.227] wcscat (in: _Dest=0x697e6e8, _Source="IDEF0_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" [0204.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0204.228] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebac00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebac00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VST", cAlternateFileName="")) returned 1 [0204.228] wcscmp (_String1="IDEF0_U.VST", _String2=".") returned 1 [0204.228] wcscmp (_String1="IDEF0_U.VST", _String2="..") returned 1 [0204.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e788 [0204.228] wcscpy (in: _Dest=0x697e788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.228] wcscat (in: _Dest=0x697e788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.228] wcscat (in: _Dest=0x697e788, _Source="IDEF0_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" [0204.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0204.419] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106f3000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x106f3000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_M.VSS", cAlternateFileName="")) returned 1 [0204.419] wcscmp (_String1="INTANN_M.VSS", _String2=".") returned 1 [0204.419] wcscmp (_String1="INTANN_M.VSS", _String2="..") returned 1 [0204.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1a48 [0204.419] wcscpy (in: _Dest=0x69c1a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.419] wcscat (in: _Dest=0x69c1a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.419] wcscat (in: _Dest=0x69c1a48, _Source="INTANN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" [0205.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0205.439] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16651100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16651100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_U.VSS", cAlternateFileName="")) returned 1 [0205.439] wcscmp (_String1="INTANN_U.VSS", _String2=".") returned 1 [0205.439] wcscmp (_String1="INTANN_U.VSS", _String2="..") returned 1 [0205.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e828 [0205.440] wcscpy (in: _Dest=0x697e828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.440] wcscat (in: _Dest=0x697e828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.440] wcscat (in: _Dest=0x697e828, _Source="INTANN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" [0205.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0205.441] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f89800, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19f89800, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_M.VSS", cAlternateFileName="")) returned 1 [0205.441] wcscmp (_String1="IRRIG_M.VSS", _String2=".") returned 1 [0205.441] wcscmp (_String1="IRRIG_M.VSS", _String2="..") returned 1 [0205.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e8c8 [0205.441] wcscpy (in: _Dest=0x697e8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.441] wcscat (in: _Dest=0x697e8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.441] wcscat (in: _Dest=0x697e8c8, _Source="IRRIG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" [0205.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0205.442] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebd4c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ebd4c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_U.VSS", cAlternateFileName="")) returned 1 [0207.099] wcscmp (_String1="IRRIG_U.VSS", _String2=".") returned 1 [0207.099] wcscmp (_String1="IRRIG_U.VSS", _String2="..") returned 1 [0207.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0fa8 [0207.099] wcscpy (in: _Dest=0x69c0fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.099] wcscat (in: _Dest=0x69c0fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.099] wcscat (in: _Dest=0x69c0fa8, _Source="IRRIG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" [0207.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0207.100] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2977e100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2977e100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x67600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VSS", cAlternateFileName="")) returned 1 [0207.100] wcscmp (_String1="ITIL_M.VSS", _String2=".") returned 1 [0207.100] wcscmp (_String1="ITIL_M.VSS", _String2="..") returned 1 [0207.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0dc8 [0207.100] wcscpy (in: _Dest=0x69c0dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.100] wcscat (in: _Dest=0x69c0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.101] wcscat (in: _Dest=0x69c0dc8, _Source="ITIL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" [0207.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0207.101] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafa93a00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xafa93a00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VST", cAlternateFileName="")) returned 1 [0207.102] wcscmp (_String1="ITIL_M.VST", _String2=".") returned 1 [0207.102] wcscmp (_String1="ITIL_M.VST", _String2="..") returned 1 [0207.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69bfce8 [0207.102] wcscpy (in: _Dest=0x69bfce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.102] wcscat (in: _Dest=0x69bfce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.102] wcscat (in: _Dest=0x69bfce8, _Source="ITIL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" [0207.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0207.103] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34327600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34327600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x65c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VSS", cAlternateFileName="")) returned 1 [0207.103] wcscmp (_String1="ITIL_U.VSS", _String2=".") returned 1 [0207.103] wcscmp (_String1="ITIL_U.VSS", _String2="..") returned 1 [0207.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0aa8 [0207.103] wcscpy (in: _Dest=0x69c0aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.103] wcscat (in: _Dest=0x69c0aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.103] wcscat (in: _Dest=0x69c0aa8, _Source="ITIL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" [0207.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0207.104] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cd6c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4cd6c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VST", cAlternateFileName="")) returned 1 [0207.104] wcscmp (_String1="ITIL_U.VST", _String2=".") returned 1 [0207.104] wcscmp (_String1="ITIL_U.VST", _String2="..") returned 1 [0207.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0508 [0207.104] wcscpy (in: _Dest=0x69c0508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.104] wcscat (in: _Dest=0x69c0508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.104] wcscat (in: _Dest=0x69c0508, _Source="ITIL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" [0207.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0207.105] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c5fd00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37c5fd00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_M.VSS", cAlternateFileName="")) returned 1 [0207.105] wcscmp (_String1="LANGLV_M.VSS", _String2=".") returned 1 [0207.105] wcscmp (_String1="LANGLV_M.VSS", _String2="..") returned 1 [0207.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0be8 [0207.105] wcscpy (in: _Dest=0x69c0be8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.105] wcscat (in: _Dest=0x69c0be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.105] wcscat (in: _Dest=0x69c0be8, _Source="LANGLV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" [0207.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0207.106] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b598400, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b598400, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_U.VSS", cAlternateFileName="")) returned 1 [0207.106] wcscmp (_String1="LANGLV_U.VSS", _String2=".") returned 1 [0207.106] wcscmp (_String1="LANGLV_U.VSS", _String2="..") returned 1 [0207.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfec8 [0207.106] wcscpy (in: _Dest=0x69bfec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.106] wcscat (in: _Dest=0x69bfec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.106] wcscat (in: _Dest=0x69bfec8, _Source="LANGLV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" [0207.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0207.107] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124e0600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x124e0600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_M.VST", cAlternateFileName="")) returned 1 [0207.107] wcscmp (_String1="LDAPDR_M.VST", _String2=".") returned 1 [0207.107] wcscmp (_String1="LDAPDR_M.VST", _String2="..") returned 1 [0207.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1688 [0207.108] wcscpy (in: _Dest=0x69c1688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.108] wcscat (in: _Dest=0x69c1688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.108] wcscat (in: _Dest=0x69c1688, _Source="LDAPDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" [0207.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0207.108] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e18d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15e18d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_U.VST", cAlternateFileName="")) returned 1 [0207.108] wcscmp (_String1="LDAPDR_U.VST", _String2=".") returned 1 [0207.108] wcscmp (_String1="LDAPDR_U.VST", _String2="..") returned 1 [0207.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c10e8 [0207.109] wcscpy (in: _Dest=0x69c10e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.109] wcscat (in: _Dest=0x69c10e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.109] wcscat (in: _Dest=0x69c10e8, _Source="LDAPDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" [0207.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c10e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0207.110] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48767300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48767300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_M.VSS", cAlternateFileName="")) returned 1 [0207.110] wcscmp (_String1="LDAPOB_M.VSS", _String2=".") returned 1 [0207.110] wcscmp (_String1="LDAPOB_M.VSS", _String2="..") returned 1 [0207.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1048 [0207.110] wcscpy (in: _Dest=0x69c1048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.110] wcscat (in: _Dest=0x69c1048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.110] wcscat (in: _Dest=0x69c1048, _Source="LDAPOB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" [0207.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0207.114] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c48f00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56c48f00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_U.VSS", cAlternateFileName="")) returned 1 [0207.114] wcscmp (_String1="LDAPOB_U.VSS", _String2=".") returned 1 [0207.114] wcscmp (_String1="LDAPOB_U.VSS", _String2="..") returned 1 [0207.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfe28 [0207.114] wcscpy (in: _Dest=0x69bfe28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.114] wcscat (in: _Dest=0x69bfe28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.114] wcscat (in: _Dest=0x69bfe28, _Source="LDAPOB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" [0207.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfe28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0207.116] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x968b1300, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x968b1300, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_M.VSS", cAlternateFileName="")) returned 1 [0207.116] wcscmp (_String1="LEGEND_M.VSS", _String2=".") returned 1 [0207.116] wcscmp (_String1="LEGEND_M.VSS", _String2="..") returned 1 [0207.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0a08 [0207.116] wcscpy (in: _Dest=0x69c0a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.116] wcscat (in: _Dest=0x69c0a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.116] wcscat (in: _Dest=0x69c0a08, _Source="LEGEND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" [0207.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0207.117] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b4fc700, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b4fc700, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_U.VSS", cAlternateFileName="")) returned 1 [0207.117] wcscmp (_String1="LEGEND_U.VSS", _String2=".") returned 1 [0207.117] wcscmp (_String1="LEGEND_U.VSS", _String2="..") returned 1 [0207.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c00a8 [0207.117] wcscpy (in: _Dest=0x69c00a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.117] wcscat (in: _Dest=0x69c00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.117] wcscat (in: _Dest=0x69c00a8, _Source="LEGEND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" [0207.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0207.118] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b05100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62b05100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_M.VSS", cAlternateFileName="")) returned 1 [0207.118] wcscmp (_String1="LGND_M.VSS", _String2=".") returned 1 [0207.118] wcscmp (_String1="LGND_M.VSS", _String2="..") returned 1 [0207.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0d28 [0207.118] wcscpy (in: _Dest=0x69c0d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.118] wcscat (in: _Dest=0x69c0d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.118] wcscat (in: _Dest=0x69c0d28, _Source="LGND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" [0207.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0207.119] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a63200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68a63200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x37600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_U.VSS", cAlternateFileName="")) returned 1 [0207.119] wcscmp (_String1="LGND_U.VSS", _String2=".") returned 1 [0207.119] wcscmp (_String1="LGND_U.VSS", _String2="..") returned 1 [0207.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c1728 [0207.119] wcscpy (in: _Dest=0x69c1728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.119] wcscat (in: _Dest=0x69c1728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.119] wcscat (in: _Dest=0x69c1728, _Source="LGND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" [0207.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0207.120] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6ae600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d6ae600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_M.VSS", cAlternateFileName="")) returned 1 [0207.120] wcscmp (_String1="LINPAT_M.VSS", _String2=".") returned 1 [0207.120] wcscmp (_String1="LINPAT_M.VSS", _String2="..") returned 1 [0207.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c17c8 [0207.120] wcscpy (in: _Dest=0x69c17c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.120] wcscat (in: _Dest=0x69c17c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.121] wcscat (in: _Dest=0x69c17c8, _Source="LINPAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" [0207.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c17c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0207.122] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722f9a00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x722f9a00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_U.VSS", cAlternateFileName="")) returned 1 [0207.122] wcscmp (_String1="LINPAT_U.VSS", _String2=".") returned 1 [0207.122] wcscmp (_String1="LINPAT_U.VSS", _String2="..") returned 1 [0207.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1868 [0207.122] wcscpy (in: _Dest=0x69c1868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.122] wcscat (in: _Dest=0x69c1868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.122] wcscat (in: _Dest=0x69c1868, _Source="LINPAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" [0207.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0207.123] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda8cb00, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdda8cb00, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_M.VSS", cAlternateFileName="")) returned 1 [0207.123] wcscmp (_String1="LNDMRK_M.VSS", _String2=".") returned 1 [0207.123] wcscmp (_String1="LNDMRK_M.VSS", _String2="..") returned 1 [0207.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1908 [0207.123] wcscpy (in: _Dest=0x69c1908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.123] wcscat (in: _Dest=0x69c1908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.123] wcscat (in: _Dest=0x69c1908, _Source="LNDMRK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" [0207.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0207.124] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded9f800, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xded9f800, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe0800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_U.VSS", cAlternateFileName="")) returned 1 [0207.124] wcscmp (_String1="LNDMRK_U.VSS", _String2=".") returned 1 [0207.124] wcscmp (_String1="LNDMRK_U.VSS", _String2="..") returned 1 [0207.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0b48 [0207.124] wcscpy (in: _Dest=0x69c0b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.124] wcscat (in: _Dest=0x69c0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.124] wcscat (in: _Dest=0x69c0b48, _Source="LNDMRK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" [0207.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0207.125] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a071e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a071e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_M.VSS", cAlternateFileName="")) returned 1 [0207.125] wcscmp (_String1="LOGIC_M.VSS", _String2=".") returned 1 [0207.125] wcscmp (_String1="LOGIC_M.VSS", _String2="..") returned 1 [0207.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0c88 [0207.125] wcscpy (in: _Dest=0x69c0c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.125] wcscat (in: _Dest=0x69c0c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.125] wcscat (in: _Dest=0x69c0c88, _Source="LOGIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" [0207.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0207.126] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93908600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x93908600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_U.VSS", cAlternateFileName="")) returned 1 [0207.126] wcscmp (_String1="LOGIC_U.VSS", _String2=".") returned 1 [0207.126] wcscmp (_String1="LOGIC_U.VSS", _String2="..") returned 1 [0207.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c1ae8 [0207.127] wcscpy (in: _Dest=0x69c1ae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.127] wcscat (in: _Dest=0x69c1ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.127] wcscat (in: _Dest=0x69c1ae8, _Source="LOGIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" [0207.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0207.128] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d19ee00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d19ee00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VSS", cAlternateFileName="")) returned 1 [0207.128] wcscmp (_String1="MAP3D_M.VSS", _String2=".") returned 1 [0207.128] wcscmp (_String1="MAP3D_M.VSS", _String2="..") returned 1 [0207.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0788 [0207.128] wcscpy (in: _Dest=0x69c0788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.128] wcscat (in: _Dest=0x69c0788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.128] wcscat (in: _Dest=0x69c0788, _Source="MAP3D_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" [0207.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0207.129] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19751400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19751400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VST", cAlternateFileName="")) returned 1 [0207.129] wcscmp (_String1="MAP3D_M.VST", _String2=".") returned 1 [0207.129] wcscmp (_String1="MAP3D_M.VST", _String2="..") returned 1 [0207.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697ebe8 [0207.129] wcscpy (in: _Dest=0x697ebe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.129] wcscat (in: _Dest=0x697ebe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.129] wcscat (in: _Dest=0x697ebe8, _Source="MAP3D_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" [0207.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ebe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0207.130] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa905b000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa905b000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VSS", cAlternateFileName="")) returned 1 [0207.130] wcscmp (_String1="MAP3D_U.VSS", _String2=".") returned 1 [0207.130] wcscmp (_String1="MAP3D_U.VSS", _String2="..") returned 1 [0207.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697ec88 [0207.131] wcscpy (in: _Dest=0x697ec88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.131] wcscat (in: _Dest=0x697ec88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.131] wcscat (in: _Dest=0x697ec88, _Source="MAP3D_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" [0207.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0207.132] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d089b00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d089b00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VST", cAlternateFileName="")) returned 1 [0207.132] wcscmp (_String1="MAP3D_U.VST", _String2=".") returned 1 [0207.132] wcscmp (_String1="MAP3D_U.VST", _String2="..") returned 1 [0207.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697ed28 [0207.132] wcscpy (in: _Dest=0x697ed28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.132] wcscat (in: _Dest=0x697ed28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.132] wcscat (in: _Dest=0x697ed28, _Source="MAP3D_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" [0207.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ed28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0207.133] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22fe7c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22fe7c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_M.VST", cAlternateFileName="")) returned 1 [0207.133] wcscmp (_String1="MAP_M.VST", _String2=".") returned 1 [0207.133] wcscmp (_String1="MAP_M.VST", _String2="..") returned 1 [0207.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c5c8 [0207.133] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.133] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.134] wcscat (in: _Dest=0x32c5c8, _Source="MAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" [0207.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0207.134] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f45d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28f45d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_U.VST", cAlternateFileName="")) returned 1 [0207.134] wcscmp (_String1="MAP_U.VST", _String2=".") returned 1 [0207.135] wcscmp (_String1="MAP_U.VST", _String2="..") returned 1 [0207.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d370 [0207.135] wcscpy (in: _Dest=0x32d370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.135] wcscat (in: _Dest=0x32d370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.135] wcscat (in: _Dest=0x32d370, _Source="MAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" [0207.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0207.136] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad60000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ad60000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_M.VST", cAlternateFileName="")) returned 1 [0207.136] wcscmp (_String1="MEALL_M.VST", _String2=".") returned 1 [0207.136] wcscmp (_String1="MEALL_M.VST", _String2="..") returned 1 [0207.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697edc8 [0207.136] wcscpy (in: _Dest=0x697edc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.136] wcscat (in: _Dest=0x697edc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.136] wcscat (in: _Dest=0x697edc8, _Source="MEALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" [0207.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697edc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0207.237] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f6800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x445f6800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_U.VST", cAlternateFileName="")) returned 1 [0207.237] wcscmp (_String1="MEALL_U.VST", _String2=".") returned 1 [0207.237] wcscmp (_String1="MEALL_U.VST", _String2="..") returned 1 [0207.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x69c0328 [0207.237] wcscpy (in: _Dest=0x69c0328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.237] wcscat (in: _Dest=0x69c0328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.237] wcscat (in: _Dest=0x69c0328, _Source="MEALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" [0207.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0207.287] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb9100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefb9100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_M.VSS", cAlternateFileName="")) returned 1 [0207.288] wcscmp (_String1="MEMOBJ_M.VSS", _String2=".") returned 1 [0207.288] wcscmp (_String1="MEMOBJ_M.VSS", _String2="..") returned 1 [0207.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697ee68 [0207.288] wcscpy (in: _Dest=0x697ee68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.288] wcscat (in: _Dest=0x697ee68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.288] wcscat (in: _Dest=0x697ee68, _Source="MEMOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" [0207.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ee68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0207.289] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c04500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3c04500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_U.VSS", cAlternateFileName="")) returned 1 [0207.289] wcscmp (_String1="MEMOBJ_U.VSS", _String2=".") returned 1 [0207.289] wcscmp (_String1="MEMOBJ_U.VSS", _String2="..") returned 1 [0207.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697ef08 [0207.289] wcscpy (in: _Dest=0x697ef08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.289] wcscat (in: _Dest=0x697ef08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.289] wcscat (in: _Dest=0x697ef08, _Source="MEMOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" [0207.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697ef08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0207.290] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb753cc00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb753cc00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_M.VSS", cAlternateFileName="")) returned 1 [0207.291] wcscmp (_String1="METRO_M.VSS", _String2=".") returned 1 [0207.291] wcscmp (_String1="METRO_M.VSS", _String2="..") returned 1 [0207.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697efa8 [0207.291] wcscpy (in: _Dest=0x697efa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.291] wcscat (in: _Dest=0x697efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.291] wcscat (in: _Dest=0x697efa8, _Source="METRO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" [0207.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0207.292] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b62600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9b62600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_U.VSS", cAlternateFileName="")) returned 1 [0207.292] wcscmp (_String1="METRO_U.VSS", _String2=".") returned 1 [0207.292] wcscmp (_String1="METRO_U.VSS", _String2="..") returned 1 [0207.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697f048 [0207.292] wcscpy (in: _Dest=0x697f048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.292] wcscat (in: _Dest=0x697f048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.292] wcscat (in: _Dest=0x697f048, _Source="METRO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" [0207.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0207.293] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca669c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca669c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VSS", cAlternateFileName="")) returned 1 [0207.293] wcscmp (_String1="MRKTDG_M.VSS", _String2=".") returned 1 [0207.293] wcscmp (_String1="MRKTDG_M.VSS", _String2="..") returned 1 [0207.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f0e8 [0207.293] wcscpy (in: _Dest=0x697f0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.293] wcscat (in: _Dest=0x697f0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.293] wcscat (in: _Dest=0x697f0e8, _Source="MRKTDG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" [0207.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0207.294] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a554900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a554900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VST", cAlternateFileName="")) returned 1 [0208.655] wcscmp (_String1="MRKTDG_M.VST", _String2=".") returned 1 [0208.655] wcscmp (_String1="MRKTDG_M.VST", _String2="..") returned 1 [0208.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0f08 [0208.655] wcscpy (in: _Dest=0x69c0f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0208.655] wcscat (in: _Dest=0x69c0f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0208.655] wcscat (in: _Dest=0x69c0f08, _Source="MRKTDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" [0215.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0215.116] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd796c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd796c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x5c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VSS", cAlternateFileName="")) returned 1 [0215.116] wcscmp (_String1="MRKTDG_U.VSS", _String2=".") returned 1 [0215.116] wcscmp (_String1="MRKTDG_U.VSS", _String2="..") returned 1 [0215.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1368 [0215.116] wcscpy (in: _Dest=0x69c1368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.116] wcscat (in: _Dest=0x69c1368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.116] wcscat (in: _Dest=0x69c1368, _Source="MRKTDG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" [0215.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0215.117] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f19fd00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f19fd00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VST", cAlternateFileName="")) returned 1 [0215.117] wcscmp (_String1="MRKTDG_U.VST", _String2=".") returned 1 [0215.117] wcscmp (_String1="MRKTDG_U.VST", _String2="..") returned 1 [0215.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f188 [0215.118] wcscpy (in: _Dest=0x697f188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.118] wcscat (in: _Dest=0x697f188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.118] wcscat (in: _Dest=0x697f188, _Source="MRKTDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" [0215.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0215.120] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d1a700, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5d1a700, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_M.VSS", cAlternateFileName="")) returned 1 [0215.120] wcscmp (_String1="NETLOC_M.VSS", _String2=".") returned 1 [0215.120] wcscmp (_String1="NETLOC_M.VSS", _String2="..") returned 1 [0215.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f228 [0215.120] wcscpy (in: _Dest=0x697f228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.120] wcscat (in: _Dest=0x697f228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.120] wcscat (in: _Dest=0x697f228, _Source="NETLOC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" [0215.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0215.121] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee29e200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee29e200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_U.VSS", cAlternateFileName="")) returned 1 [0215.121] wcscmp (_String1="NETLOC_U.VSS", _String2=".") returned 1 [0215.121] wcscmp (_String1="NETLOC_U.VSS", _String2="..") returned 1 [0215.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f2c8 [0215.121] wcscpy (in: _Dest=0x697f2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.121] wcscat (in: _Dest=0x697f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.121] wcscat (in: _Dest=0x697f2c8, _Source="NETLOC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" [0215.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0215.123] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08c3c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf08c3c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_M.VSS", cAlternateFileName="")) returned 1 [0215.123] wcscmp (_String1="NETRM_M.VSS", _String2=".") returned 1 [0215.123] wcscmp (_String1="NETRM_M.VSS", _String2="..") returned 1 [0215.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697f368 [0215.123] wcscpy (in: _Dest=0x697f368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.123] wcscat (in: _Dest=0x697f368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.123] wcscat (in: _Dest=0x697f368, _Source="NETRM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" [0215.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0215.124] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41fc300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf41fc300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_U.VSS", cAlternateFileName="")) returned 1 [0215.124] wcscmp (_String1="NETRM_U.VSS", _String2=".") returned 1 [0215.124] wcscmp (_String1="NETRM_U.VSS", _String2="..") returned 1 [0215.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697f408 [0215.124] wcscpy (in: _Dest=0x697f408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.124] wcscat (in: _Dest=0x697f408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.124] wcscat (in: _Dest=0x697f408, _Source="NETRM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" [0215.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0215.126] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d03900, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d03900, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_M.VSS", cAlternateFileName="")) returned 1 [0215.126] wcscmp (_String1="NETSYM_M.VSS", _String2=".") returned 1 [0215.126] wcscmp (_String1="NETSYM_M.VSS", _String2="..") returned 1 [0215.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f4a8 [0215.126] wcscpy (in: _Dest=0x697f4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.126] wcscat (in: _Dest=0x697f4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.126] wcscat (in: _Dest=0x697f4a8, _Source="NETSYM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" [0215.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0215.127] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b1dc00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16b1dc00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_U.VSS", cAlternateFileName="")) returned 1 [0215.127] wcscmp (_String1="NETSYM_U.VSS", _String2=".") returned 1 [0215.127] wcscmp (_String1="NETSYM_U.VSS", _String2="..") returned 1 [0215.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f548 [0215.127] wcscpy (in: _Dest=0x697f548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.127] wcscat (in: _Dest=0x697f548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.127] wcscat (in: _Dest=0x697f548, _Source="NETSYM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" [0215.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0215.129] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53deb100, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53deb100, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_M.VST", cAlternateFileName="")) returned 1 [0215.129] wcscmp (_String1="NETW_M.VST", _String2=".") returned 1 [0215.129] wcscmp (_String1="NETW_M.VST", _String2="..") returned 1 [0215.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697f5e8 [0215.129] wcscpy (in: _Dest=0x697f5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.129] wcscat (in: _Dest=0x697f5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.129] wcscat (in: _Dest=0x697f5e8, _Source="NETW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" [0215.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0215.130] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57723800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57723800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_U.VST", cAlternateFileName="")) returned 1 [0215.130] wcscmp (_String1="NETW_U.VST", _String2=".") returned 1 [0215.130] wcscmp (_String1="NETW_U.VST", _String2="..") returned 1 [0215.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697f688 [0215.131] wcscpy (in: _Dest=0x697f688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.131] wcscat (in: _Dest=0x697f688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.131] wcscat (in: _Dest=0x697f688, _Source="NETW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" [0215.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0215.132] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b769000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b769000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_M.VSS", cAlternateFileName="")) returned 1 [0215.132] wcscmp (_String1="OBJREL_M.VSS", _String2=".") returned 1 [0215.132] wcscmp (_String1="OBJREL_M.VSS", _String2="..") returned 1 [0215.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f728 [0215.132] wcscpy (in: _Dest=0x697f728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.132] wcscat (in: _Dest=0x697f728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.132] wcscat (in: _Dest=0x697f728, _Source="OBJREL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" [0215.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0215.133] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203b4400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x203b4400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_U.VSS", cAlternateFileName="")) returned 1 [0215.133] wcscmp (_String1="OBJREL_U.VSS", _String2=".") returned 1 [0215.134] wcscmp (_String1="OBJREL_U.VSS", _String2="..") returned 1 [0215.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f7c8 [0215.134] wcscpy (in: _Dest=0x697f7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.134] wcscat (in: _Dest=0x697f7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.134] wcscat (in: _Dest=0x697f7c8, _Source="OBJREL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" [0215.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0215.135] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26312500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26312500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_M.VSS", cAlternateFileName="")) returned 1 [0215.136] wcscmp (_String1="OFFACC_M.VSS", _String2=".") returned 1 [0215.136] wcscmp (_String1="OFFACC_M.VSS", _String2="..") returned 1 [0215.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f868 [0215.136] wcscpy (in: _Dest=0x697f868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.136] wcscat (in: _Dest=0x697f868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.136] wcscat (in: _Dest=0x697f868, _Source="OFFACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" [0215.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0215.137] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c270600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c270600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_U.VSS", cAlternateFileName="")) returned 1 [0215.137] wcscmp (_String1="OFFACC_U.VSS", _String2=".") returned 1 [0215.137] wcscmp (_String1="OFFACC_U.VSS", _String2="..") returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f908 [0215.137] wcscpy (in: _Dest=0x697f908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.137] wcscat (in: _Dest=0x697f908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.137] wcscat (in: _Dest=0x697f908, _Source="OFFACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" [0215.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0215.139] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3943f500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3943f500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x32600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_M.VSS", cAlternateFileName="")) returned 1 [0215.139] wcscmp (_String1="OFFEQP_M.VSS", _String2=".") returned 1 [0215.139] wcscmp (_String1="OFFEQP_M.VSS", _String2="..") returned 1 [0215.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697f9a8 [0215.139] wcscpy (in: _Dest=0x697f9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.139] wcscat (in: _Dest=0x697f9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.139] wcscat (in: _Dest=0x697f9a8, _Source="OFFEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" [0215.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697f9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0215.140] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4660e400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4660e400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_U.VSS", cAlternateFileName="")) returned 1 [0215.140] wcscmp (_String1="OFFEQP_U.VSS", _String2=".") returned 1 [0215.140] wcscmp (_String1="OFFEQP_U.VSS", _String2="..") returned 1 [0215.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697fa48 [0215.140] wcscpy (in: _Dest=0x697fa48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.140] wcscat (in: _Dest=0x697fa48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.140] wcscat (in: _Dest=0x697fa48, _Source="OFFEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" [0215.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697fa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0215.142] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x609ac200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x609ac200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x77000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_M.VSS", cAlternateFileName="")) returned 1 [0215.142] wcscmp (_String1="OFFFRN_M.VSS", _String2=".") returned 1 [0215.142] wcscmp (_String1="OFFFRN_M.VSS", _String2="..") returned 1 [0215.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697fae8 [0215.142] wcscpy (in: _Dest=0x697fae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.142] wcscat (in: _Dest=0x697fae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.142] wcscat (in: _Dest=0x697fae8, _Source="OFFFRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" [0215.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697fae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0215.143] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad4a000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ad4a000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_U.VSS", cAlternateFileName="")) returned 1 [0215.143] wcscmp (_String1="OFFFRN_U.VSS", _String2=".") returned 1 [0215.143] wcscmp (_String1="OFFFRN_U.VSS", _String2="..") returned 1 [0215.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697fb88 [0215.143] wcscpy (in: _Dest=0x697fb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.144] wcscat (in: _Dest=0x697fb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.144] wcscat (in: _Dest=0x697fb88, _Source="OFFFRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" [0215.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697fb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0215.145] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60fba000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60fba000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_M.VST", cAlternateFileName="")) returned 1 [0215.145] wcscmp (_String1="OFFLYT_M.VST", _String2=".") returned 1 [0215.145] wcscmp (_String1="OFFLYT_M.VST", _String2="..") returned 1 [0215.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697fc28 [0215.145] wcscpy (in: _Dest=0x697fc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.145] wcscat (in: _Dest=0x697fc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.145] wcscat (in: _Dest=0x697fc28, _Source="OFFLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" [0215.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697fc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0215.147] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6953db00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6953db00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_U.VST", cAlternateFileName="")) returned 1 [0215.147] wcscmp (_String1="OFFLYT_U.VST", _String2=".") returned 1 [0215.147] wcscmp (_String1="OFFLYT_U.VST", _String2="..") returned 1 [0215.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68adce8 [0215.147] wcscpy (in: _Dest=0x68adce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.147] wcscat (in: _Dest=0x68adce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.147] wcscat (in: _Dest=0x68adce8, _Source="OFFLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" [0215.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68adce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0215.148] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c06200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86c06200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VSS", cAlternateFileName="")) returned 1 [0215.148] wcscmp (_String1="ORGCH_M.VSS", _String2=".") returned 1 [0215.148] wcscmp (_String1="ORGCH_M.VSS", _String2="..") returned 1 [0215.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68add88 [0215.148] wcscpy (in: _Dest=0x68add88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.148] wcscat (in: _Dest=0x68add88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.149] wcscat (in: _Dest=0x68add88, _Source="ORGCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" [0215.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68add88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0215.150] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce76200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ce76200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VST", cAlternateFileName="")) returned 1 [0215.150] wcscmp (_String1="ORGCH_M.VST", _String2=".") returned 1 [0215.150] wcscmp (_String1="ORGCH_M.VST", _String2="..") returned 1 [0215.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68ade28 [0215.150] wcscpy (in: _Dest=0x68ade28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.150] wcscat (in: _Dest=0x68ade28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.150] wcscat (in: _Dest=0x68ade28, _Source="ORGCH_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" [0215.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ade28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0215.151] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ac2400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92ac2400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VSS", cAlternateFileName="")) returned 1 [0215.151] wcscmp (_String1="ORGCH_U.VSS", _String2=".") returned 1 [0215.151] wcscmp (_String1="ORGCH_U.VSS", _String2="..") returned 1 [0215.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68adec8 [0215.151] wcscpy (in: _Dest=0x68adec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.151] wcscat (in: _Dest=0x68adec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.151] wcscat (in: _Dest=0x68adec8, _Source="ORGCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" [0215.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68adec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0215.153] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ae900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x707ae900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VST", cAlternateFileName="")) returned 1 [0215.153] wcscmp (_String1="ORGCH_U.VST", _String2=".") returned 1 [0215.153] wcscmp (_String1="ORGCH_U.VST", _String2="..") returned 1 [0215.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68adf68 [0215.153] wcscpy (in: _Dest=0x68adf68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.153] wcscat (in: _Dest=0x68adf68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.153] wcscat (in: _Dest=0x68adf68, _Source="ORGCH_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" [0215.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68adf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0215.477] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0x1345, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.TXT", cAlternateFileName="")) returned 1 [0215.477] wcscmp (_String1="ORGDATA.TXT", _String2=".") returned 1 [0215.477] wcscmp (_String1="ORGDATA.TXT", _String2="..") returned 1 [0215.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0e4d0 [0215.477] wcscpy (in: _Dest=0x3e0e4d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.477] wcscat (in: _Dest=0x3e0e4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.477] wcscat (in: _Dest=0x3e0e4d0, _Source="ORGDATA.TXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" [0215.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0215.752] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c890500, ftCreationTime.dwHighDateTime=0x1c6653c, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c890500, ftLastWriteTime.dwHighDateTime=0x1c6653c, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.XLS", cAlternateFileName="")) returned 1 [0215.753] wcscmp (_String1="ORGDATA.XLS", _String2=".") returned 1 [0215.753] wcscmp (_String1="ORGDATA.XLS", _String2="..") returned 1 [0215.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68ae328 [0215.753] wcscpy (in: _Dest=0x68ae328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.753] wcscat (in: _Dest=0x68ae328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.753] wcscat (in: _Dest=0x68ae328, _Source="ORGDATA.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" [0215.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0215.754] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740e7000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x740e7000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_M.VST", cAlternateFileName="")) returned 1 [0215.754] wcscmp (_String1="ORGWIZ_M.VST", _String2=".") returned 1 [0215.754] wcscmp (_String1="ORGWIZ_M.VST", _String2="..") returned 1 [0215.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae3c8 [0215.754] wcscpy (in: _Dest=0x68ae3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.754] wcscat (in: _Dest=0x68ae3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.754] wcscat (in: _Dest=0x68ae3c8, _Source="ORGWIZ_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" [0215.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0215.755] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670ca00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7670ca00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_U.VST", cAlternateFileName="")) returned 1 [0215.755] wcscmp (_String1="ORGWIZ_U.VST", _String2=".") returned 1 [0215.755] wcscmp (_String1="ORGWIZ_U.VST", _String2="..") returned 1 [0215.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae468 [0215.755] wcscpy (in: _Dest=0x68ae468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.755] wcscat (in: _Dest=0x68ae468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.755] wcscat (in: _Dest=0x68ae468, _Source="ORGWIZ_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" [0215.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0215.771] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc51900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bc51900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_M.VST", cAlternateFileName="")) returned 1 [0215.771] wcscmp (_String1="PBASLN_M.VST", _String2=".") returned 1 [0215.771] wcscmp (_String1="PBASLN_M.VST", _String2="..") returned 1 [0215.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae508 [0215.772] wcscpy (in: _Dest=0x68ae508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.772] wcscat (in: _Dest=0x68ae508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.772] wcscat (in: _Dest=0x68ae508, _Source="PBASLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" [0215.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398 [0215.773] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ec2700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52ec2700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_U.VST", cAlternateFileName="")) returned 1 [0215.773] wcscmp (_String1="PBASLN_U.VST", _String2=".") returned 1 [0215.773] wcscmp (_String1="PBASLN_U.VST", _String2="..") returned 1 [0215.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae5a8 [0215.773] wcscpy (in: _Dest=0x68ae5a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.773] wcscat (in: _Dest=0x68ae5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.773] wcscat (in: _Dest=0x68ae5a8, _Source="PBASLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" [0215.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0215.774] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e8100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x554e8100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_M.VST", cAlternateFileName="")) returned 1 [0215.774] wcscmp (_String1="PBLANK_M.VST", _String2=".") returned 1 [0215.774] wcscmp (_String1="PBLANK_M.VST", _String2="..") returned 1 [0215.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae648 [0215.774] wcscpy (in: _Dest=0x68ae648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.774] wcscat (in: _Dest=0x68ae648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.774] wcscat (in: _Dest=0x68ae648, _Source="PBLANK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" [0215.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0215.775] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e20800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58e20800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_U.VST", cAlternateFileName="")) returned 1 [0215.775] wcscmp (_String1="PBLANK_U.VST", _String2=".") returned 1 [0215.775] wcscmp (_String1="PBLANK_U.VST", _String2="..") returned 1 [0215.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae6e8 [0215.775] wcscpy (in: _Dest=0x68ae6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.775] wcscat (in: _Dest=0x68ae6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.775] wcscat (in: _Dest=0x68ae6e8, _Source="PBLANK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" [0215.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0215.776] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed7e900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ed7e900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_M.VST", cAlternateFileName="")) returned 1 [0215.776] wcscmp (_String1="PCRTSK_M.VST", _String2=".") returned 1 [0215.776] wcscmp (_String1="PCRTSK_M.VST", _String2="..") returned 1 [0215.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae788 [0215.776] wcscpy (in: _Dest=0x68ae788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0215.776] wcscat (in: _Dest=0x68ae788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0215.776] wcscat (in: _Dest=0x68ae788, _Source="PCRTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" [0215.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c [0215.777] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fef700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65fef700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_U.VST", cAlternateFileName="")) returned 1 [0217.549] wcscmp (_String1="PCRTSK_U.VST", _String2=".") returned 1 [0217.549] wcscmp (_String1="PCRTSK_U.VST", _String2="..") returned 1 [0217.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6e78 [0217.550] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0217.550] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0217.550] wcscat (in: _Dest=0x2c6e78, _Source="PCRTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" [0218.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0218.872] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d260500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d260500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_M.VST", cAlternateFileName="")) returned 1 [0218.872] wcscmp (_String1="PCSHFL_M.VST", _String2=".") returned 1 [0218.872] wcscmp (_String1="PCSHFL_M.VST", _String2="..") returned 1 [0218.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0218.872] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.872] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.872] wcscat (in: _Dest=0x2c7698, _Source="PCSHFL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" [0218.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0218.873] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731be600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x731be600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_U.VST", cAlternateFileName="")) returned 1 [0218.873] wcscmp (_String1="PCSHFL_U.VST", _String2=".") returned 1 [0218.874] wcscmp (_String1="PCSHFL_U.VST", _String2="..") returned 1 [0218.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0218.874] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.874] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.874] wcscat (in: _Dest=0x2c7558, _Source="PCSHFL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" [0218.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c [0218.875] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a20500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98a20500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_M.VSS", cAlternateFileName="")) returned 1 [0218.875] wcscmp (_String1="PEANNT_M.VSS", _String2=".") returned 1 [0218.875] wcscmp (_String1="PEANNT_M.VSS", _String2="..") returned 1 [0218.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7738 [0218.875] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.875] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.875] wcscat (in: _Dest=0x2c7738, _Source="PEANNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" [0218.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0218.877] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97e600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e97e600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_U.VSS", cAlternateFileName="")) returned 1 [0218.877] wcscmp (_String1="PEANNT_U.VSS", _String2=".") returned 1 [0218.877] wcscmp (_String1="PEANNT_U.VSS", _String2="..") returned 1 [0218.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0218.877] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.877] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.877] wcscat (in: _Dest=0x2c7378, _Source="PEANNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" [0218.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0218.878] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb932a200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb932a200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_M.VST", cAlternateFileName="")) returned 1 [0218.878] wcscmp (_String1="PEDG_M.VST", _String2=".") returned 1 [0218.878] wcscmp (_String1="PEDG_M.VST", _String2="..") returned 1 [0218.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6fb8 [0218.878] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.878] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.878] wcscat (in: _Dest=0x2c6fb8, _Source="PEDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" [0218.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0218.880] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51e6400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc51e6400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_U.VST", cAlternateFileName="")) returned 1 [0218.880] wcscmp (_String1="PEDG_U.VST", _String2=".") returned 1 [0218.880] wcscmp (_String1="PEDG_U.VST", _String2="..") returned 1 [0218.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c72d8 [0218.880] wcscpy (in: _Dest=0x2c72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.880] wcscat (in: _Dest=0x2c72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.880] wcscat (in: _Dest=0x2c72d8, _Source="PEDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" [0218.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0218.881] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1aab600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1aab600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_M.VSS", cAlternateFileName="")) returned 1 [0218.881] wcscmp (_String1="PEEQP_M.VSS", _String2=".") returned 1 [0218.881] wcscmp (_String1="PEEQP_M.VSS", _String2="..") returned 1 [0218.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c75f8 [0218.881] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.881] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.881] wcscat (in: _Dest=0x2c75f8, _Source="PEEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" [0218.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0218.883] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc25b2c00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc25b2c00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_U.VSS", cAlternateFileName="")) returned 1 [0218.883] wcscmp (_String1="PEEQP_U.VSS", _String2=".") returned 1 [0218.883] wcscmp (_String1="PEEQP_U.VSS", _String2="..") returned 1 [0218.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7238 [0218.883] wcscpy (in: _Dest=0x2c7238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.883] wcscat (in: _Dest=0x2c7238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.883] wcscat (in: _Dest=0x2c7238, _Source="PEEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" [0218.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0218.884] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce46ee00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce46ee00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_M.VSS", cAlternateFileName="")) returned 1 [0218.884] wcscmp (_String1="PEHEAT_M.VSS", _String2=".") returned 1 [0218.884] wcscmp (_String1="PEHEAT_M.VSS", _String2="..") returned 1 [0218.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0218.884] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.884] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.884] wcscat (in: _Dest=0x2c7198, _Source="PEHEAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" [0218.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0218.886] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9018300, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9018300, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_U.VSS", cAlternateFileName="")) returned 1 [0218.886] wcscmp (_String1="PEHEAT_U.VSS", _String2=".") returned 1 [0218.886] wcscmp (_String1="PEHEAT_U.VSS", _String2="..") returned 1 [0218.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae288 [0218.887] wcscpy (in: _Dest=0x68ae288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.887] wcscat (in: _Dest=0x68ae288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.887] wcscat (in: _Dest=0x68ae288, _Source="PEHEAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" [0218.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0218.888] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59dbb00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf59dbb00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_M.VSS", cAlternateFileName="")) returned 1 [0218.888] wcscmp (_String1="PEINST_M.VSS", _String2=".") returned 1 [0218.888] wcscmp (_String1="PEINST_M.VSS", _String2="..") returned 1 [0218.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae1e8 [0218.888] wcscpy (in: _Dest=0x68ae1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.888] wcscat (in: _Dest=0x68ae1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.888] wcscat (in: _Dest=0x68ae1e8, _Source="PEINST_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" [0218.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0218.890] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1239f300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1239f300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_U.VSS", cAlternateFileName="")) returned 1 [0218.890] wcscmp (_String1="PEINST_U.VSS", _String2=".") returned 1 [0218.890] wcscmp (_String1="PEINST_U.VSS", _String2="..") returned 1 [0218.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae148 [0218.890] wcscpy (in: _Dest=0x68ae148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.890] wcscat (in: _Dest=0x68ae148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.890] wcscat (in: _Dest=0x68ae148, _Source="PEINST_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" [0218.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0218.891] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c4d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x149c4d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VSS", cAlternateFileName="")) returned 1 [0218.891] wcscmp (_String1="PEPIPE_M.VSS", _String2=".") returned 1 [0218.891] wcscmp (_String1="PEPIPE_M.VSS", _String2="..") returned 1 [0218.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae0a8 [0218.892] wcscpy (in: _Dest=0x68ae0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.892] wcscat (in: _Dest=0x68ae0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.892] wcscat (in: _Dest=0x68ae0a8, _Source="PEPIPE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" [0218.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0218.893] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd8f900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfd8f900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VST", cAlternateFileName="")) returned 1 [0218.893] wcscmp (_String1="PEPIPE_M.VST", _String2=".") returned 1 [0218.893] wcscmp (_String1="PEPIPE_M.VST", _String2="..") returned 1 [0218.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae008 [0218.893] wcscpy (in: _Dest=0x68ae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.893] wcscat (in: _Dest=0x68ae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.893] wcscat (in: _Dest=0x68ae008, _Source="PEPIPE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" [0218.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0218.895] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182fd400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x182fd400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VSS", cAlternateFileName="")) returned 1 [0218.895] wcscmp (_String1="PEPIPE_U.VSS", _String2=".") returned 1 [0218.895] wcscmp (_String1="PEPIPE_U.VSS", _String2="..") returned 1 [0218.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae828 [0218.895] wcscpy (in: _Dest=0x68ae828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.895] wcscat (in: _Dest=0x68ae828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.895] wcscat (in: _Dest=0x68ae828, _Source="PEPIPE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" [0218.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0218.897] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda938e00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda938e00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VST", cAlternateFileName="")) returned 1 [0218.897] wcscmp (_String1="PEPIPE_U.VST", _String2=".") returned 1 [0218.897] wcscmp (_String1="PEPIPE_U.VST", _String2="..") returned 1 [0218.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae8c8 [0218.897] wcscpy (in: _Dest=0x68ae8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.897] wcscat (in: _Dest=0x68ae8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.897] wcscat (in: _Dest=0x68ae8c8, _Source="PEPIPE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" [0218.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0218.898] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ea6900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22ea6900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_M.VSS", cAlternateFileName="")) returned 1 [0218.898] wcscmp (_String1="PEPUMP_M.VSS", _String2=".") returned 1 [0218.898] wcscmp (_String1="PEPUMP_M.VSS", _String2="..") returned 1 [0218.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae968 [0218.898] wcscpy (in: _Dest=0x68ae968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.898] wcscat (in: _Dest=0x68ae968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.898] wcscat (in: _Dest=0x68ae968, _Source="PEPUMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" [0218.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0218.900] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da4fe00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2da4fe00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_U.VSS", cAlternateFileName="")) returned 1 [0218.900] wcscmp (_String1="PEPUMP_U.VSS", _String2=".") returned 1 [0218.900] wcscmp (_String1="PEPUMP_U.VSS", _String2="..") returned 1 [0218.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aea08 [0218.900] wcscpy (in: _Dest=0x68aea08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.900] wcscat (in: _Dest=0x68aea08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.900] wcscat (in: _Dest=0x68aea08, _Source="PEPUMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" [0218.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0218.901] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dedc00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47dedc00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x89c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_M.VSS", cAlternateFileName="")) returned 1 [0218.901] wcscmp (_String1="PERIPH_M.VSS", _String2=".") returned 1 [0218.901] wcscmp (_String1="PERIPH_M.VSS", _String2="..") returned 1 [0218.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aeaa8 [0218.901] wcscpy (in: _Dest=0x68aeaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.901] wcscat (in: _Dest=0x68aeaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.902] wcscat (in: _Dest=0x68aeaa8, _Source="PERIPH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" [0218.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aeaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0218.903] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6349e700, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6349e700, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x87c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_U.VSS", cAlternateFileName="")) returned 1 [0218.903] wcscmp (_String1="PERIPH_U.VSS", _String2=".") returned 1 [0218.903] wcscmp (_String1="PERIPH_U.VSS", _String2="..") returned 1 [0218.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aeb48 [0218.903] wcscpy (in: _Dest=0x68aeb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.903] wcscat (in: _Dest=0x68aeb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.903] wcscat (in: _Dest=0x68aeb48, _Source="PERIPH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" [0218.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aeb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0218.907] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ac4100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65ac4100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VSS", cAlternateFileName="")) returned 1 [0218.907] wcscmp (_String1="PERT_M.VSS", _String2=".") returned 1 [0218.907] wcscmp (_String1="PERT_M.VSS", _String2="..") returned 1 [0218.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68aebe8 [0218.907] wcscpy (in: _Dest=0x68aebe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.907] wcscat (in: _Dest=0x68aebe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.908] wcscat (in: _Dest=0x68aebe8, _Source="PERT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" [0218.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aebe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0218.909] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf5e800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcf5e800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VST", cAlternateFileName="")) returned 1 [0218.909] wcscmp (_String1="PERT_M.VST", _String2=".") returned 1 [0218.909] wcscmp (_String1="PERT_M.VST", _String2="..") returned 1 [0218.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68aec88 [0218.910] wcscpy (in: _Dest=0x68aec88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.910] wcscat (in: _Dest=0x68aec88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.910] wcscat (in: _Dest=0x68aec88, _Source="PERT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" [0218.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0218.911] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680e9b00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x680e9b00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VSS", cAlternateFileName="")) returned 1 [0218.911] wcscmp (_String1="PERT_U.VSS", _String2=".") returned 1 [0218.911] wcscmp (_String1="PERT_U.VSS", _String2="..") returned 1 [0218.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68aed28 [0218.911] wcscpy (in: _Dest=0x68aed28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.911] wcscat (in: _Dest=0x68aed28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.911] wcscat (in: _Dest=0x68aed28, _Source="PERT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" [0218.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aed28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0218.913] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf584200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf584200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VST", cAlternateFileName="")) returned 1 [0218.913] wcscmp (_String1="PERT_U.VST", _String2=".") returned 1 [0218.913] wcscmp (_String1="PERT_U.VST", _String2="..") returned 1 [0218.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68aedc8 [0218.913] wcscpy (in: _Dest=0x68aedc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.913] wcscat (in: _Dest=0x68aedc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.913] wcscat (in: _Dest=0x68aedc8, _Source="PERT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" [0218.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aedc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0219.098] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778de400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x778de400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x32800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_M.VSS", cAlternateFileName="")) returned 1 [0219.098] wcscmp (_String1="PEVALV_M.VSS", _String2=".") returned 1 [0219.098] wcscmp (_String1="PEVALV_M.VSS", _String2="..") returned 1 [0219.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aee68 [0219.099] wcscpy (in: _Dest=0x68aee68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.099] wcscat (in: _Dest=0x68aee68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.099] wcscat (in: _Dest=0x68aee68, _Source="PEVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" [0219.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aee68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0219.219] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870d2d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x870d2d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_U.VSS", cAlternateFileName="")) returned 1 [0219.219] wcscmp (_String1="PEVALV_U.VSS", _String2=".") returned 1 [0219.219] wcscmp (_String1="PEVALV_U.VSS", _String2="..") returned 1 [0219.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aef08 [0219.220] wcscpy (in: _Dest=0x68aef08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.220] wcscat (in: _Dest=0x68aef08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.220] wcscat (in: _Dest=0x68aef08, _Source="PEVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" [0219.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aef08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0219.221] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90969500, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90969500, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_M.VSS", cAlternateFileName="")) returned 1 [0219.221] wcscmp (_String1="PEVESS_M.VSS", _String2=".") returned 1 [0219.221] wcscmp (_String1="PEVESS_M.VSS", _String2="..") returned 1 [0219.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68aefa8 [0219.222] wcscpy (in: _Dest=0x68aefa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.222] wcscat (in: _Dest=0x68aefa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.222] wcscat (in: _Dest=0x68aefa8, _Source="PEVESS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" [0219.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68aefa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0219.223] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1ffd00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a1ffd00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_U.VSS", cAlternateFileName="")) returned 1 [0219.223] wcscmp (_String1="PEVESS_U.VSS", _String2=".") returned 1 [0219.223] wcscmp (_String1="PEVESS_U.VSS", _String2="..") returned 1 [0219.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af048 [0219.223] wcscpy (in: _Dest=0x68af048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.223] wcscat (in: _Dest=0x68af048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.223] wcscat (in: _Dest=0x68af048, _Source="PEVESS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" [0219.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0219.224] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad07300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaad07300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_M.VSS", cAlternateFileName="")) returned 1 [0219.224] wcscmp (_String1="PIPE1_M.VSS", _String2=".") returned 1 [0219.224] wcscmp (_String1="PIPE1_M.VSS", _String2="..") returned 1 [0219.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af0e8 [0219.225] wcscpy (in: _Dest=0x68af0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.225] wcscat (in: _Dest=0x68af0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.225] wcscat (in: _Dest=0x68af0e8, _Source="PIPE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" [0219.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0219.226] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb80e900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbb80e900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_U.VSS", cAlternateFileName="")) returned 1 [0219.226] wcscmp (_String1="PIPE1_U.VSS", _String2=".") returned 1 [0219.226] wcscmp (_String1="PIPE1_U.VSS", _String2="..") returned 1 [0219.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af188 [0219.226] wcscpy (in: _Dest=0x68af188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.226] wcscat (in: _Dest=0x68af188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.226] wcscat (in: _Dest=0x68af188, _Source="PIPE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" [0219.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0219.227] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76cab00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc76cab00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_M.VSS", cAlternateFileName="")) returned 1 [0219.227] wcscmp (_String1="PIPE2_M.VSS", _String2=".") returned 1 [0219.228] wcscmp (_String1="PIPE2_M.VSS", _String2="..") returned 1 [0219.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af228 [0219.228] wcscpy (in: _Dest=0x68af228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.228] wcscat (in: _Dest=0x68af228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.228] wcscat (in: _Dest=0x68af228, _Source="PIPE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" [0219.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0219.229] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2274000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2274000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_U.VSS", cAlternateFileName="")) returned 1 [0219.229] wcscmp (_String1="PIPE2_U.VSS", _String2=".") returned 1 [0219.229] wcscmp (_String1="PIPE2_U.VSS", _String2="..") returned 1 [0219.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af2c8 [0219.229] wcscpy (in: _Dest=0x68af2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.229] wcscat (in: _Dest=0x68af2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.229] wcscat (in: _Dest=0x68af2c8, _Source="PIPE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" [0219.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0219.230] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde130200, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51d08b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde130200, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x56600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_M.VSS", cAlternateFileName="")) returned 1 [0219.230] wcscmp (_String1="PLANT_M.VSS", _String2=".") returned 1 [0219.230] wcscmp (_String1="PLANT_M.VSS", _String2="..") returned 1 [0219.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af368 [0219.230] wcscpy (in: _Dest=0x68af368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.230] wcscat (in: _Dest=0x68af368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.231] wcscat (in: _Dest=0x68af368, _Source="PLANT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" [0219.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0219.232] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9fec400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9fec400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_U.VSS", cAlternateFileName="")) returned 1 [0219.233] wcscmp (_String1="PLANT_U.VSS", _String2=".") returned 1 [0219.233] wcscmp (_String1="PLANT_U.VSS", _String2="..") returned 1 [0219.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af408 [0219.234] wcscpy (in: _Dest=0x68af408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.234] wcscat (in: _Dest=0x68af408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.234] wcscat (in: _Dest=0x68af408, _Source="PLANT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" [0219.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0219.235] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb440400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb440400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_M.VST", cAlternateFileName="")) returned 1 [0219.235] wcscmp (_String1="PLMPIP_M.VST", _String2=".") returned 1 [0219.235] wcscmp (_String1="PLMPIP_M.VST", _String2="..") returned 1 [0219.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af4a8 [0219.235] wcscpy (in: _Dest=0x68af4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.235] wcscat (in: _Dest=0x68af4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.235] wcscat (in: _Dest=0x68af4a8, _Source="PLMPIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" [0219.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0219.236] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5fe9900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5fe9900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_U.VST", cAlternateFileName="")) returned 1 [0219.236] wcscmp (_String1="PLMPIP_U.VST", _String2=".") returned 1 [0219.236] wcscmp (_String1="PLMPIP_U.VST", _String2="..") returned 1 [0219.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af548 [0219.236] wcscpy (in: _Dest=0x68af548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.236] wcscat (in: _Dest=0x68af548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.236] wcscat (in: _Dest=0x68af548, _Source="PLMPIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" [0219.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0219.238] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b8800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31b8800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_M.VST", cAlternateFileName="")) returned 1 [0219.238] wcscmp (_String1="PLTLYT_M.VST", _String2=".") returned 1 [0219.238] wcscmp (_String1="PLTLYT_M.VST", _String2="..") returned 1 [0219.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af5e8 [0219.238] wcscpy (in: _Dest=0x68af5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.238] wcscat (in: _Dest=0x68af5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.238] wcscat (in: _Dest=0x68af5e8, _Source="PLTLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" [0219.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0219.239] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10387700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10387700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_U.VST", cAlternateFileName="")) returned 1 [0219.239] wcscmp (_String1="PLTLYT_U.VST", _String2=".") returned 1 [0219.239] wcscmp (_String1="PLTLYT_U.VST", _String2="..") returned 1 [0219.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af688 [0219.239] wcscpy (in: _Dest=0x68af688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.239] wcscat (in: _Dest=0x68af688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.239] wcscat (in: _Dest=0x68af688, _Source="PLTLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" [0219.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0219.241] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3882c00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3882c00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_M.VSS", cAlternateFileName="")) returned 1 [0219.241] wcscmp (_String1="PLUMB_M.VSS", _String2=".") returned 1 [0219.241] wcscmp (_String1="PLUMB_M.VSS", _String2="..") returned 1 [0219.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af728 [0219.241] wcscpy (in: _Dest=0x68af728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.241] wcscat (in: _Dest=0x68af728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.241] wcscat (in: _Dest=0x68af728, _Source="PLUMB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" [0219.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0219.242] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe42c100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe42c100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_U.VSS", cAlternateFileName="")) returned 1 [0219.242] wcscmp (_String1="PLUMB_U.VSS", _String2=".") returned 1 [0219.242] wcscmp (_String1="PLUMB_U.VSS", _String2="..") returned 1 [0219.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68af7c8 [0219.242] wcscpy (in: _Dest=0x68af7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.242] wcscat (in: _Dest=0x68af7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.242] wcscat (in: _Dest=0x68af7c8, _Source="PLUMB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" [0219.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0219.243] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f92900, ftCreationTime.dwHighDateTime=0x1c982e4, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f92900, ftLastWriteTime.dwHighDateTime=0x1c982e4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP.XLS", cAlternateFileName="")) returned 1 [0219.243] wcscmp (_String1="PRCIMP.XLS", _String2=".") returned 1 [0219.243] wcscmp (_String1="PRCIMP.XLS", _String2="..") returned 1 [0219.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68af868 [0219.244] wcscpy (in: _Dest=0x68af868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.244] wcscat (in: _Dest=0x68af868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.244] wcscat (in: _Dest=0x68af868, _Source="PRCIMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" [0219.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0219.245] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d38200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe8d38200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x81a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_M.VST", cAlternateFileName="")) returned 1 [0219.245] wcscmp (_String1="PRCIMP_M.VST", _String2=".") returned 1 [0219.245] wcscmp (_String1="PRCIMP_M.VST", _String2="..") returned 1 [0219.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af908 [0219.245] wcscpy (in: _Dest=0x68af908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.245] wcscat (in: _Dest=0x68af908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.245] wcscat (in: _Dest=0x68af908, _Source="PRCIMP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" [0219.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0219.247] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4a1a00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4a1a00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_U.VST", cAlternateFileName="")) returned 1 [0219.247] wcscmp (_String1="PRCIMP_U.VST", _String2=".") returned 1 [0219.247] wcscmp (_String1="PRCIMP_U.VST", _String2="..") returned 1 [0219.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68af9a8 [0219.247] wcscpy (in: _Dest=0x68af9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.247] wcscat (in: _Dest=0x68af9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.247] wcscat (in: _Dest=0x68af9a8, _Source="PRCIMP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" [0219.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68af9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0219.248] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT.XLS", cAlternateFileName="")) returned 1 [0219.248] wcscmp (_String1="PRJMGT.XLS", _String2=".") returned 1 [0219.248] wcscmp (_String1="PRJMGT.XLS", _String2="..") returned 1 [0219.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68afa48 [0219.248] wcscpy (in: _Dest=0x68afa48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.248] wcscat (in: _Dest=0x68afa48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.248] wcscat (in: _Dest=0x68afa48, _Source="PRJMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" [0219.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68afa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0219.249] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe48ac00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe48ac00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_M.VST", cAlternateFileName="")) returned 1 [0219.249] wcscmp (_String1="PRJMGT_M.VST", _String2=".") returned 1 [0219.249] wcscmp (_String1="PRJMGT_M.VST", _String2="..") returned 1 [0219.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68afae8 [0219.249] wcscpy (in: _Dest=0x68afae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.250] wcscat (in: _Dest=0x68afae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.250] wcscat (in: _Dest=0x68afae8, _Source="PRJMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" [0219.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68afae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0219.251] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38e1700, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf38e1700, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_U.VST", cAlternateFileName="")) returned 1 [0219.251] wcscmp (_String1="PRJMGT_U.VST", _String2=".") returned 1 [0219.251] wcscmp (_String1="PRJMGT_U.VST", _String2="..") returned 1 [0219.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68afb88 [0219.251] wcscpy (in: _Dest=0x68afb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.251] wcscat (in: _Dest=0x68afb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.251] wcscat (in: _Dest=0x68afb88, _Source="PRJMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" [0219.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68afb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0219.252] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5fb000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5fb000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_M.VSS", cAlternateFileName="")) returned 1 [0219.252] wcscmp (_String1="PRKRD_M.VSS", _String2=".") returned 1 [0219.252] wcscmp (_String1="PRKRD_M.VSS", _String2="..") returned 1 [0219.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x68afc28 [0219.252] wcscpy (in: _Dest=0x68afc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.253] wcscat (in: _Dest=0x68afc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.253] wcscat (in: _Dest=0x68afc28, _Source="PRKRD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" [0219.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68afc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0219.254] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1286be00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1286be00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_U.VSS", cAlternateFileName="")) returned 1 [0219.254] wcscmp (_String1="PRKRD_U.VSS", _String2=".") returned 1 [0219.254] wcscmp (_String1="PRKRD_U.VSS", _String2="..") returned 1 [0219.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d5d0 [0219.254] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.254] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.254] wcscat (in: _Dest=0x3e0d5d0, _Source="PRKRD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" [0219.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0219.344] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL.XLS", cAlternateFileName="")) returned 1 [0219.344] wcscmp (_String1="PROJTL.XLS", _String2=".") returned 1 [0219.345] wcscmp (_String1="PROJTL.XLS", _String2="..") returned 1 [0219.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e750 [0219.345] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.345] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.345] wcscat (in: _Dest=0x3e0e750, _Source="PROJTL.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" [0219.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0219.458] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa346e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa346e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_M.VST", cAlternateFileName="")) returned 1 [0219.458] wcscmp (_String1="PROJTL_M.VST", _String2=".") returned 1 [0219.458] wcscmp (_String1="PROJTL_M.VST", _String2="..") returned 1 [0219.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e430 [0219.458] wcscpy (in: _Dest=0x3e0e430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.458] wcscat (in: _Dest=0x3e0e430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.459] wcscat (in: _Dest=0x3e0e430, _Source="PROJTL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" [0219.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0219.460] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e8d00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e8d00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_U.VST", cAlternateFileName="")) returned 1 [0219.460] wcscmp (_String1="PROJTL_U.VST", _String2=".") returned 1 [0219.460] wcscmp (_String1="PROJTL_U.VST", _String2="..") returned 1 [0219.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0219.460] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.460] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.460] wcscat (in: _Dest=0x3e0de90, _Source="PROJTL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" [0219.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0219.461] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875fe300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x875fe300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_M.VST", cAlternateFileName="")) returned 1 [0219.461] wcscmp (_String1="PRSAVL_M.VST", _String2=".") returned 1 [0219.461] wcscmp (_String1="PRSAVL_M.VST", _String2="..") returned 1 [0219.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e390 [0219.461] wcscpy (in: _Dest=0x3e0e390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.461] wcscat (in: _Dest=0x3e0e390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.461] wcscat (in: _Dest=0x3e0e390, _Source="PRSAVL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" [0219.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0219.462] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb81e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8fb81e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_U.VST", cAlternateFileName="")) returned 1 [0219.462] wcscmp (_String1="PRSAVL_U.VST", _String2=".") returned 1 [0219.462] wcscmp (_String1="PRSAVL_U.VST", _String2="..") returned 1 [0219.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e890 [0219.463] wcscpy (in: _Dest=0x3e0e890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.463] wcscat (in: _Dest=0x3e0e890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.463] wcscat (in: _Dest=0x3e0e890, _Source="PRSAVL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" [0219.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0219.464] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95adff00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95adff00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x51400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_M.VST", cAlternateFileName="")) returned 1 [0219.464] wcscmp (_String1="PRSSTS_M.VST", _String2=".") returned 1 [0219.464] wcscmp (_String1="PRSSTS_M.VST", _String2="..") returned 1 [0219.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dcb0 [0219.464] wcscpy (in: _Dest=0x3e0dcb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.464] wcscat (in: _Dest=0x3e0dcb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.464] wcscat (in: _Dest=0x3e0dcb0, _Source="PRSSTS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" [0219.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0219.465] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba3e000, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ba3e000, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_U.VST", cAlternateFileName="")) returned 1 [0219.465] wcscmp (_String1="PRSSTS_U.VST", _String2=".") returned 1 [0219.465] wcscmp (_String1="PRSSTS_U.VST", _String2="..") returned 1 [0219.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d210 [0219.465] wcscpy (in: _Dest=0x3e0d210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.465] wcscat (in: _Dest=0x3e0d210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.465] wcscat (in: _Dest=0x3e0d210, _Source="PRSSTS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" [0219.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0219.466] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee61100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ee61100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_M.VST", cAlternateFileName="")) returned 1 [0219.466] wcscmp (_String1="PSTRCT_M.VST", _String2=".") returned 1 [0219.466] wcscmp (_String1="PSTRCT_M.VST", _String2="..") returned 1 [0219.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ecf0 [0219.467] wcscpy (in: _Dest=0x3e0ecf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.467] wcscat (in: _Dest=0x3e0ecf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.467] wcscat (in: _Dest=0x3e0ecf0, _Source="PSTRCT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" [0219.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ecf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0219.468] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62799800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62799800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_U.VST", cAlternateFileName="")) returned 1 [0219.468] wcscmp (_String1="PSTRCT_U.VST", _String2=".") returned 1 [0219.468] wcscmp (_String1="PSTRCT_U.VST", _String2="..") returned 1 [0219.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eb10 [0219.468] wcscpy (in: _Dest=0x3e0eb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.468] wcscat (in: _Dest=0x3e0eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.468] wcscat (in: _Dest=0x3e0eb10, _Source="PSTRCT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" [0219.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0219.469] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161a4500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x161a4500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_M.VSS", cAlternateFileName="")) returned 1 [0219.469] wcscmp (_String1="PTSCLD_M.VSS", _String2=".") returned 1 [0219.469] wcscmp (_String1="PTSCLD_M.VSS", _String2="..") returned 1 [0219.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e110 [0219.469] wcscpy (in: _Dest=0x3e0e110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.469] wcscat (in: _Dest=0x3e0e110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.469] wcscat (in: _Dest=0x3e0e110, _Source="PTSCLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" [0219.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0219.470] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187c9f00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x187c9f00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_U.VSS", cAlternateFileName="")) returned 1 [0219.471] wcscmp (_String1="PTSCLD_U.VSS", _String2=".") returned 1 [0219.471] wcscmp (_String1="PTSCLD_U.VSS", _String2="..") returned 1 [0219.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dfd0 [0219.471] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.471] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.471] wcscat (in: _Dest=0x3e0dfd0, _Source="PTSCLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" [0219.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0219.472] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f22f600, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f22f600, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_M.VSS", cAlternateFileName="")) returned 1 [0219.472] wcscmp (_String1="PTSINT_M.VSS", _String2=".") returned 1 [0219.472] wcscmp (_String1="PTSINT_M.VSS", _String2="..") returned 1 [0219.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0eed0 [0219.472] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.472] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.472] wcscat (in: _Dest=0x3e0eed0, _Source="PTSINT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" [0219.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0219.473] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c94d00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c94d00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x56e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_U.VSS", cAlternateFileName="")) returned 1 [0219.473] wcscmp (_String1="PTSINT_U.VSS", _String2=".") returned 1 [0219.473] wcscmp (_String1="PTSINT_U.VSS", _String2="..") returned 1 [0219.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e7f0 [0219.474] wcscpy (in: _Dest=0x3e0e7f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.474] wcscat (in: _Dest=0x3e0e7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.474] wcscat (in: _Dest=0x3e0e7f0, _Source="PTSINT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" [0219.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0219.478] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911c700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7911c700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_M.VST", cAlternateFileName="")) returned 1 [0219.478] wcscmp (_String1="PTSKST_M.VST", _String2=".") returned 1 [0219.478] wcscmp (_String1="PTSKST_M.VST", _String2="..") returned 1 [0219.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d2b0 [0219.478] wcscpy (in: _Dest=0x3e0d2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.478] wcscat (in: _Dest=0x3e0d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.478] wcscat (in: _Dest=0x3e0d2b0, _Source="PTSKST_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" [0219.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0219.480] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038d500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8038d500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_U.VST", cAlternateFileName="")) returned 1 [0219.480] wcscmp (_String1="PTSKST_U.VST", _String2=".") returned 1 [0219.480] wcscmp (_String1="PTSKST_U.VST", _String2="..") returned 1 [0219.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ef70 [0219.480] wcscpy (in: _Dest=0x3e0ef70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.480] wcscat (in: _Dest=0x3e0ef70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.480] wcscat (in: _Dest=0x3e0ef70, _Source="PTSKST_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" [0219.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ef70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0219.484] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf05b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4cf05b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_M.VSS", cAlternateFileName="")) returned 1 [0219.484] wcscmp (_String1="PTUSCL_M.VSS", _String2=".") returned 1 [0219.484] wcscmp (_String1="PTUSCL_M.VSS", _String2="..") returned 1 [0219.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f010 [0219.484] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.484] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.484] wcscat (in: _Dest=0x3e0f010, _Source="PTUSCL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" [0219.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0219.485] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54176900, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54176900, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_U.VSS", cAlternateFileName="")) returned 1 [0219.485] wcscmp (_String1="PTUSCL_U.VSS", _String2=".") returned 1 [0219.485] wcscmp (_String1="PTUSCL_U.VSS", _String2="..") returned 1 [0219.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d710 [0219.485] wcscpy (in: _Dest=0x3e0d710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.485] wcscat (in: _Dest=0x3e0d710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.486] wcscat (in: _Dest=0x3e0d710, _Source="PTUSCL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" [0219.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0219.487] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745b3b00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x745b3b00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_M.VST", cAlternateFileName="")) returned 1 [0219.487] wcscmp (_String1="RACK_M.VST", _String2=".") returned 1 [0219.487] wcscmp (_String1="RACK_M.VST", _String2="..") returned 1 [0219.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e6b0 [0219.487] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.487] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.487] wcscat (in: _Dest=0x3e0e6b0, _Source="RACK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" [0219.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0219.488] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791fef00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x791fef00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_U.VST", cAlternateFileName="")) returned 1 [0219.489] wcscmp (_String1="RACK_U.VST", _String2=".") returned 1 [0219.489] wcscmp (_String1="RACK_U.VST", _String2="..") returned 1 [0219.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e930 [0219.489] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.489] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.489] wcscat (in: _Dest=0x3e0e930, _Source="RACK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" [0219.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0219.490] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698c9300, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x698c9300, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x54a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_M.VSS", cAlternateFileName="")) returned 1 [0219.492] wcscmp (_String1="RCKEQP_M.VSS", _String2=".") returned 1 [0219.492] wcscmp (_String1="RCKEQP_M.VSS", _String2="..") returned 1 [0219.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dc10 [0219.493] wcscpy (in: _Dest=0x3e0dc10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.493] wcscat (in: _Dest=0x3e0dc10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.493] wcscat (in: _Dest=0x3e0dc10, _Source="RCKEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" [0219.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0219.493] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8032ea00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8032ea00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x53600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_U.VSS", cAlternateFileName="")) returned 1 [0219.493] wcscmp (_String1="RCKEQP_U.VSS", _String2=".") returned 1 [0219.493] wcscmp (_String1="RCKEQP_U.VSS", _String2="..") returned 1 [0219.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e250 [0219.494] wcscpy (in: _Dest=0x3e0e250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.494] wcscat (in: _Dest=0x3e0e250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.494] wcscat (in: _Dest=0x3e0e250, _Source="RCKEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" [0219.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0219.495] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993b9b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x993b9b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_M.VSS", cAlternateFileName="")) returned 1 [0219.495] wcscmp (_String1="RCKSVR_M.VSS", _String2=".") returned 1 [0219.495] wcscmp (_String1="RCKSVR_M.VSS", _String2="..") returned 1 [0219.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ebb0 [0219.495] wcscpy (in: _Dest=0x3e0ebb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.495] wcscat (in: _Dest=0x3e0ebb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.495] wcscat (in: _Dest=0x3e0ebb0, _Source="RCKSVR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" [0219.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0219.496] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7090000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb7090000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_U.VSS", cAlternateFileName="")) returned 1 [0219.496] wcscmp (_String1="RCKSVR_U.VSS", _String2=".") returned 1 [0219.496] wcscmp (_String1="RCKSVR_U.VSS", _String2="..") returned 1 [0219.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0f0b0 [0219.496] wcscpy (in: _Dest=0x3e0f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.496] wcscat (in: _Dest=0x3e0f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.496] wcscat (in: _Dest=0x3e0f0b0, _Source="RCKSVR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" [0219.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0219.497] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfee100, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcfee100, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_M.VSS", cAlternateFileName="")) returned 1 [0219.497] wcscmp (_String1="RECRT_M.VSS", _String2=".") returned 1 [0219.497] wcscmp (_String1="RECRT_M.VSS", _String2="..") returned 1 [0219.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0d850 [0219.497] wcscpy (in: _Dest=0x3e0d850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.497] wcscat (in: _Dest=0x3e0d850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.497] wcscat (in: _Dest=0x3e0d850, _Source="RECRT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" [0219.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0219.498] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc425ef00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc425ef00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_U.VSS", cAlternateFileName="")) returned 1 [0219.498] wcscmp (_String1="RECRT_U.VSS", _String2=".") returned 1 [0219.498] wcscmp (_String1="RECRT_U.VSS", _String2="..") returned 1 [0219.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0db70 [0219.498] wcscpy (in: _Dest=0x3e0db70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.499] wcscat (in: _Dest=0x3e0db70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.499] wcscat (in: _Dest=0x3e0db70, _Source="RECRT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" [0219.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0db70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0219.500] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4cfd00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb4cfd00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_M.VSS", cAlternateFileName="")) returned 1 [0219.500] wcscmp (_String1="RECSHP_M.VSS", _String2=".") returned 1 [0219.500] wcscmp (_String1="RECSHP_M.VSS", _String2="..") returned 1 [0219.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0ed90 [0219.500] wcscpy (in: _Dest=0x3e0ed90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.500] wcscat (in: _Dest=0x3e0ed90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.500] wcscat (in: _Dest=0x3e0ed90, _Source="RECSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" [0219.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0219.570] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd142de00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd142de00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x42200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_U.VSS", cAlternateFileName="")) returned 1 [0219.570] wcscmp (_String1="RECSHP_U.VSS", _String2=".") returned 1 [0219.570] wcscmp (_String1="RECSHP_U.VSS", _String2="..") returned 1 [0219.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d8f0 [0219.570] wcscpy (in: _Dest=0x3e0d8f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.570] wcscat (in: _Dest=0x3e0d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.570] wcscat (in: _Dest=0x3e0d8f0, _Source="RECSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" [0219.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0219.631] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd738bf00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd738bf00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_M.VSS", cAlternateFileName="")) returned 1 [0219.631] wcscmp (_String1="REGSTR_M.VSS", _String2=".") returned 1 [0219.631] wcscmp (_String1="REGSTR_M.VSS", _String2="..") returned 1 [0219.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0da30 [0219.632] wcscpy (in: _Dest=0x3e0da30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.632] wcscat (in: _Dest=0x3e0da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.632] wcscat (in: _Dest=0x3e0da30, _Source="REGSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" [0219.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0da30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0219.633] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2ea000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd2ea000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_U.VSS", cAlternateFileName="")) returned 1 [0219.633] wcscmp (_String1="REGSTR_U.VSS", _String2=".") returned 1 [0219.633] wcscmp (_String1="REGSTR_U.VSS", _String2="..") returned 1 [0219.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e1b0 [0219.633] wcscpy (in: _Dest=0x3e0e1b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.633] wcscat (in: _Dest=0x3e0e1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.633] wcscat (in: _Dest=0x3e0e1b0, _Source="REGSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" [0219.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0219.634] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f35400, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1f35400, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_M.VSS", cAlternateFileName="")) returned 1 [0219.635] wcscmp (_String1="ROAD_M.VSS", _String2=".") returned 1 [0219.635] wcscmp (_String1="ROAD_M.VSS", _String2="..") returned 1 [0219.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c08c8 [0219.635] wcscpy (in: _Dest=0x69c08c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.635] wcscat (in: _Dest=0x69c08c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.635] wcscat (in: _Dest=0x69c08c8, _Source="ROAD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" [0219.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c08c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0219.636] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e93500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7e93500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_U.VSS", cAlternateFileName="")) returned 1 [0219.636] wcscmp (_String1="ROAD_U.VSS", _String2=".") returned 1 [0219.636] wcscmp (_String1="ROAD_U.VSS", _String2="..") returned 1 [0219.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c05a8 [0219.636] wcscpy (in: _Dest=0x69c05a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.636] wcscat (in: _Dest=0x69c05a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.636] wcscat (in: _Dest=0x69c05a8, _Source="ROAD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" [0219.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c05a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0219.637] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6db400, ftCreationTime.dwHighDateTime=0x1c67041, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc6db400, ftLastWriteTime.dwHighDateTime=0x1c67041, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM.XLS", cAlternateFileName="")) returned 1 [0219.637] wcscmp (_String1="SALSUM.XLS", _String2=".") returned 1 [0219.637] wcscmp (_String1="SALSUM.XLS", _String2="..") returned 1 [0219.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x69c0468 [0219.638] wcscpy (in: _Dest=0x69c0468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.638] wcscat (in: _Dest=0x69c0468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.638] wcscat (in: _Dest=0x69c0468, _Source="SALSUM.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" [0219.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0219.639] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa99800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1fa99800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_M.VST", cAlternateFileName="")) returned 1 [0219.639] wcscmp (_String1="SALSUM_M.VST", _String2=".") returned 1 [0219.639] wcscmp (_String1="SALSUM_M.VST", _String2="..") returned 1 [0219.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1c28 [0219.639] wcscpy (in: _Dest=0x69c1c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.639] wcscat (in: _Dest=0x69c1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.639] wcscat (in: _Dest=0x69c1c28, _Source="SALSUM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" [0219.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0219.640] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ef0300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ef0300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_U.VST", cAlternateFileName="")) returned 1 [0219.640] wcscmp (_String1="SALSUM_U.VST", _String2=".") returned 1 [0219.640] wcscmp (_String1="SALSUM_U.VST", _String2="..") returned 1 [0219.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c12c8 [0219.640] wcscpy (in: _Dest=0x69c12c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.640] wcscat (in: _Dest=0x69c12c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.640] wcscat (in: _Dest=0x69c12c8, _Source="SALSUM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" [0219.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c12c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0219.641] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eba100, ftCreationTime.dwHighDateTime=0x1ca48e3, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39eba100, ftLastWriteTime.dwHighDateTime=0x1ca48e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_M.VSS", cAlternateFileName="")) returned 1 [0219.641] wcscmp (_String1="SDCALL_M.VSS", _String2=".") returned 1 [0219.641] wcscmp (_String1="SDCALL_M.VSS", _String2="..") returned 1 [0219.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c01e8 [0219.641] wcscpy (in: _Dest=0x69c01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.641] wcscat (in: _Dest=0x69c01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.641] wcscat (in: _Dest=0x69c01e8, _Source="SDCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" [0219.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0219.642] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8270a00, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8270a00, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_U.VSS", cAlternateFileName="")) returned 1 [0219.642] wcscmp (_String1="SDCALL_U.VSS", _String2=".") returned 1 [0219.643] wcscmp (_String1="SDCALL_U.VSS", _String2="..") returned 1 [0219.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1188 [0219.643] wcscpy (in: _Dest=0x69c1188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.643] wcscat (in: _Dest=0x69c1188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.643] wcscat (in: _Dest=0x69c1188, _Source="SDCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" [0219.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0219.644] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb874a100, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb874a100, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_M.VSS", cAlternateFileName="")) returned 1 [0219.644] wcscmp (_String1="SDCONT_M.VSS", _String2=".") returned 1 [0219.644] wcscmp (_String1="SDCONT_M.VSS", _String2="..") returned 1 [0219.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0648 [0219.644] wcscpy (in: _Dest=0x69c0648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.644] wcscat (in: _Dest=0x69c0648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.644] wcscat (in: _Dest=0x69c0648, _Source="SDCONT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" [0219.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0219.645] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22dc800, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe22dc800, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x37e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_U.VSS", cAlternateFileName="")) returned 1 [0219.645] wcscmp (_String1="SDCONT_U.VSS", _String2=".") returned 1 [0219.645] wcscmp (_String1="SDCONT_U.VSS", _String2="..") returned 1 [0219.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1228 [0219.645] wcscpy (in: _Dest=0x69c1228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.645] wcscat (in: _Dest=0x69c1228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.645] wcscat (in: _Dest=0x69c1228, _Source="SDCONT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" [0219.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0219.646] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefd9000, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefd9000, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VSS", cAlternateFileName="")) returned 1 [0219.646] wcscmp (_String1="SDL_M.VSS", _String2=".") returned 1 [0219.646] wcscmp (_String1="SDL_M.VSS", _String2="..") returned 1 [0219.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958e20 [0219.647] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.647] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.647] wcscat (in: _Dest=0x6958e20, _Source="SDL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" [0219.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0219.648] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bc2700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95bc2700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VST", cAlternateFileName="")) returned 1 [0219.648] wcscmp (_String1="SDL_M.VST", _String2=".") returned 1 [0219.648] wcscmp (_String1="SDL_M.VST", _String2="..") returned 1 [0219.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958d88 [0219.648] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.648] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.648] wcscat (in: _Dest=0x6958d88, _Source="SDL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" [0219.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0219.649] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6249e00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb6249e00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VSS", cAlternateFileName="")) returned 1 [0219.649] wcscmp (_String1="SDL_U.VSS", _String2=".") returned 1 [0219.649] wcscmp (_String1="SDL_U.VSS", _String2="..") returned 1 [0219.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958cf0 [0219.649] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.649] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.649] wcscat (in: _Dest=0x6958cf0, _Source="SDL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" [0219.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0219.650] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981e8100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x981e8100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VST", cAlternateFileName="")) returned 1 [0219.650] wcscmp (_String1="SDL_U.VST", _String2=".") returned 1 [0219.650] wcscmp (_String1="SDL_U.VST", _String2="..") returned 1 [0219.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6958c58 [0219.650] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.650] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.650] wcscat (in: _Dest=0x6958c58, _Source="SDL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" [0219.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0219.651] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d91600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2d91600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_M.VST", cAlternateFileName="")) returned 1 [0219.651] wcscmp (_String1="SECACC_M.VST", _String2=".") returned 1 [0219.651] wcscmp (_String1="SECACC_M.VST", _String2="..") returned 1 [0219.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1b88 [0219.651] wcscpy (in: _Dest=0x69c1b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.651] wcscat (in: _Dest=0x69c1b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.651] wcscat (in: _Dest=0x69c1b88, _Source="SECACC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" [0219.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0219.652] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab315100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab315100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_U.VST", cAlternateFileName="")) returned 1 [0219.652] wcscmp (_String1="SECACC_U.VST", _String2=".") returned 1 [0219.652] wcscmp (_String1="SECACC_U.VST", _String2="..") returned 1 [0219.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69bfd88 [0219.652] wcscpy (in: _Dest=0x69bfd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.653] wcscat (in: _Dest=0x69bfd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.653] wcscat (in: _Dest=0x69bfd88, _Source="SECACC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" [0219.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69bfd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0219.654] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcccaf500, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcccaf500, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_M.VSS", cAlternateFileName="")) returned 1 [0219.654] wcscmp (_String1="SERVER_M.VSS", _String2=".") returned 1 [0219.654] wcscmp (_String1="SERVER_M.VSS", _String2="..") returned 1 [0219.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c14a8 [0219.654] wcscpy (in: _Dest=0x69c14a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.654] wcscat (in: _Dest=0x69c14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.654] wcscat (in: _Dest=0x69c14a8, _Source="SERVER_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" [0219.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0219.655] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3714c00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3714c00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_U.VSS", cAlternateFileName="")) returned 1 [0219.655] wcscmp (_String1="SERVER_U.VSS", _String2=".") returned 1 [0219.655] wcscmp (_String1="SERVER_U.VSS", _String2="..") returned 1 [0219.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c1408 [0219.655] wcscpy (in: _Dest=0x69c1408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.655] wcscat (in: _Dest=0x69c1408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.655] wcscat (in: _Dest=0x69c1408, _Source="SERVER_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" [0219.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0219.656] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b54900, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7b54900, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_M.VSS", cAlternateFileName="")) returned 1 [0219.656] wcscmp (_String1="SHPMCH_M.VSS", _String2=".") returned 1 [0219.656] wcscmp (_String1="SHPMCH_M.VSS", _String2="..") returned 1 [0219.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c15e8 [0219.657] wcscpy (in: _Dest=0x69c15e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.657] wcscat (in: _Dest=0x69c15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.657] wcscat (in: _Dest=0x69c15e8, _Source="SHPMCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" [0219.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0219.658] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf94600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf94600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_U.VSS", cAlternateFileName="")) returned 1 [0219.658] wcscmp (_String1="SHPMCH_U.VSS", _String2=".") returned 1 [0219.658] wcscmp (_String1="SHPMCH_U.VSS", _String2="..") returned 1 [0219.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0148 [0219.658] wcscpy (in: _Dest=0x69c0148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.658] wcscat (in: _Dest=0x69c0148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.658] wcscat (in: _Dest=0x69c0148, _Source="SHPMCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" [0219.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0219.659] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b788f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b788f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_M.VSS", cAlternateFileName="")) returned 1 [0219.659] wcscmp (_String1="SHPREC_M.VSS", _String2=".") returned 1 [0219.660] wcscmp (_String1="SHPREC_M.VSS", _String2="..") returned 1 [0219.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c06e8 [0219.660] wcscpy (in: _Dest=0x69c06e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.660] wcscat (in: _Dest=0x69c06e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.660] wcscat (in: _Dest=0x69c06e8, _Source="SHPREC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" [0219.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c06e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0219.661] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28957e00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28957e00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_U.VSS", cAlternateFileName="")) returned 1 [0219.661] wcscmp (_String1="SHPREC_U.VSS", _String2=".") returned 1 [0219.661] wcscmp (_String1="SHPREC_U.VSS", _String2="..") returned 1 [0219.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c0968 [0219.661] wcscpy (in: _Dest=0x69c0968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.661] wcscat (in: _Dest=0x69c0968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.661] wcscat (in: _Dest=0x69c0968, _Source="SHPREC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" [0219.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c0968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0219.662] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419e2f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419e2f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_M.VSS", cAlternateFileName="")) returned 1 [0219.662] wcscmp (_String1="SHPSTR_M.VSS", _String2=".") returned 1 [0219.662] wcscmp (_String1="SHPSTR_M.VSS", _String2="..") returned 1 [0219.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x69c03c8 [0219.662] wcscpy (in: _Dest=0x69c03c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.662] wcscat (in: _Dest=0x69c03c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.662] wcscat (in: _Dest=0x69c03c8, _Source="SHPSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" [0219.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69c03c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0219.663] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58448600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58448600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_U.VSS", cAlternateFileName="")) returned 1 [0219.663] wcscmp (_String1="SHPSTR_U.VSS", _String2=".") returned 1 [0219.663] wcscmp (_String1="SHPSTR_U.VSS", _String2="..") returned 1 [0219.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dce8 [0219.663] wcscpy (in: _Dest=0x697dce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.663] wcscat (in: _Dest=0x697dce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.663] wcscat (in: _Dest=0x697dce8, _Source="SHPSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" [0219.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0219.664] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64304800, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64304800, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_M.VSS", cAlternateFileName="")) returned 1 [0219.664] wcscmp (_String1="SITACC_M.VSS", _String2=".") returned 1 [0219.664] wcscmp (_String1="SITACC_M.VSS", _String2="..") returned 1 [0219.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dd88 [0219.664] wcscpy (in: _Dest=0x697dd88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.664] wcscat (in: _Dest=0x697dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.665] wcscat (in: _Dest=0x697dd88, _Source="SITACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" [0219.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0219.666] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeadd00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eeadd00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_U.VSS", cAlternateFileName="")) returned 1 [0219.669] wcscmp (_String1="SITACC_U.VSS", _String2=".") returned 1 [0219.669] wcscmp (_String1="SITACC_U.VSS", _String2="..") returned 1 [0219.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e6e8 [0219.669] wcscpy (in: _Dest=0x697e6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.669] wcscat (in: _Dest=0x697e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.669] wcscat (in: _Dest=0x697e6e8, _Source="SITACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" [0219.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0 [0219.817] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ebe600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5ebe600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_M.VST", cAlternateFileName="")) returned 1 [0219.817] wcscmp (_String1="SITPLN_M.VST", _String2=".") returned 1 [0219.817] wcscmp (_String1="SITPLN_M.VST", _String2="..") returned 1 [0219.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697de28 [0219.817] wcscpy (in: _Dest=0x697de28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.818] wcscat (in: _Dest=0x697de28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.818] wcscat (in: _Dest=0x697de28, _Source="SITPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" [0219.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0219.819] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d7a800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1d7a800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_U.VST", cAlternateFileName="")) returned 1 [0219.819] wcscmp (_String1="SITPLN_U.VST", _String2=".") returned 1 [0219.819] wcscmp (_String1="SITPLN_U.VST", _String2="..") returned 1 [0219.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697dec8 [0219.819] wcscpy (in: _Dest=0x697dec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.819] wcscat (in: _Dest=0x697dec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.819] wcscat (in: _Dest=0x697dec8, _Source="SITPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" [0219.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1350 [0219.820] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89ff00, ftCreationTime.dwHighDateTime=0x1ca6c62, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe89ff00, ftLastWriteTime.dwHighDateTime=0x1ca6c62, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_M.VST", cAlternateFileName="")) returned 1 [0219.820] wcscmp (_String1="SIXSIG_M.VST", _String2=".") returned 1 [0219.820] wcscmp (_String1="SIXSIG_M.VST", _String2="..") returned 1 [0219.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697df68 [0219.820] wcscpy (in: _Dest=0x697df68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.820] wcscat (in: _Dest=0x697df68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.820] wcscat (in: _Dest=0x697df68, _Source="SIXSIG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" [0219.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098 [0219.821] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbda00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fbda00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_U.VST", cAlternateFileName="")) returned 1 [0219.821] wcscmp (_String1="SIXSIG_U.VST", _String2=".") returned 1 [0219.822] wcscmp (_String1="SIXSIG_U.VST", _String2="..") returned 1 [0219.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e148 [0219.822] wcscpy (in: _Dest=0x697e148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.822] wcscat (in: _Dest=0x697e148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.822] wcscat (in: _Dest=0x697e148, _Source="SIXSIG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" [0219.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0219.823] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8feb600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8feb600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_M.VST", cAlternateFileName="")) returned 1 [0219.823] wcscmp (_String1="SPCPLN_M.VST", _String2=".") returned 1 [0219.823] wcscmp (_String1="SPCPLN_M.VST", _String2="..") returned 1 [0219.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e288 [0219.823] wcscpy (in: _Dest=0x697e288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.823] wcscat (in: _Dest=0x697e288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.823] wcscat (in: _Dest=0x697e288, _Source="SPCPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" [0219.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0219.824] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd025c400, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd025c400, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_U.VST", cAlternateFileName="")) returned 1 [0219.824] wcscmp (_String1="SPCPLN_U.VST", _String2=".") returned 1 [0219.824] wcscmp (_String1="SPCPLN_U.VST", _String2="..") returned 1 [0219.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x697e328 [0219.824] wcscpy (in: _Dest=0x697e328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.824] wcscat (in: _Dest=0x697e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.824] wcscat (in: _Dest=0x697e328, _Source="SPCPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" [0219.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0219.825] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832eda00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x832eda00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_M.VSS", cAlternateFileName="")) returned 1 [0219.825] wcscmp (_String1="SPRBR_M.VSS", _String2=".") returned 1 [0219.825] wcscmp (_String1="SPRBR_M.VSS", _String2="..") returned 1 [0219.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e468 [0219.826] wcscpy (in: _Dest=0x697e468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.826] wcscat (in: _Dest=0x697e468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.826] wcscat (in: _Dest=0x697e468, _Source="SPRBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" [0219.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0219.827] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9641aa00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9641aa00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_U.VSS", cAlternateFileName="")) returned 1 [0219.827] wcscmp (_String1="SPRBR_U.VSS", _String2=".") returned 1 [0219.827] wcscmp (_String1="SPRBR_U.VSS", _String2="..") returned 1 [0219.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x697e1e8 [0219.827] wcscpy (in: _Dest=0x697e1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.827] wcscat (in: _Dest=0x697e1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.827] wcscat (in: _Dest=0x697e1e8, _Source="SPRBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" [0219.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1354 [0219.828] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_M.VSS", cAlternateFileName="")) returned 1 [0219.828] wcscmp (_String1="SPWA_M.VSS", _String2=".") returned 1 [0219.828] wcscmp (_String1="SPWA_M.VSS", _String2="..") returned 1 [0219.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x697e3c8 [0219.828] wcscpy (in: _Dest=0x697e3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.828] wcscat (in: _Dest=0x697e3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.828] wcscat (in: _Dest=0x697e3c8, _Source="SPWA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" [0219.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0219.830] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_U.VSS", cAlternateFileName="")) returned 1 [0219.830] wcscmp (_String1="SPWA_U.VSS", _String2=".") returned 1 [0219.830] wcscmp (_String1="SPWA_U.VSS", _String2="..") returned 1 [0219.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9ace8 [0219.830] wcscpy (in: _Dest=0x6a9ace8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.830] wcscat (in: _Dest=0x6a9ace8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.831] wcscat (in: _Dest=0x6a9ace8, _Source="SPWA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" [0219.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9ace8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0219.832] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_M.VSS", cAlternateFileName="")) returned 1 [0219.832] wcscmp (_String1="SPWC_M.VSS", _String2=".") returned 1 [0219.832] wcscmp (_String1="SPWC_M.VSS", _String2="..") returned 1 [0219.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9ad88 [0219.832] wcscpy (in: _Dest=0x6a9ad88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.832] wcscat (in: _Dest=0x6a9ad88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.832] wcscat (in: _Dest=0x6a9ad88, _Source="SPWC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" [0219.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9ad88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0219.833] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_U.VSS", cAlternateFileName="")) returned 1 [0219.833] wcscmp (_String1="SPWC_U.VSS", _String2=".") returned 1 [0219.833] wcscmp (_String1="SPWC_U.VSS", _String2="..") returned 1 [0219.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9ae28 [0219.833] wcscpy (in: _Dest=0x6a9ae28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.833] wcscat (in: _Dest=0x6a9ae28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.833] wcscat (in: _Dest=0x6a9ae28, _Source="SPWC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" [0219.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9ae28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0219.834] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_M.VSS", cAlternateFileName="")) returned 1 [0219.834] wcscmp (_String1="SPWT_M.VSS", _String2=".") returned 1 [0219.834] wcscmp (_String1="SPWT_M.VSS", _String2="..") returned 1 [0219.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9aec8 [0219.834] wcscpy (in: _Dest=0x6a9aec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.834] wcscat (in: _Dest=0x6a9aec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.834] wcscat (in: _Dest=0x6a9aec8, _Source="SPWT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" [0219.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9aec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0219.836] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_U.VSS", cAlternateFileName="")) returned 1 [0219.836] wcscmp (_String1="SPWT_U.VSS", _String2=".") returned 1 [0219.836] wcscmp (_String1="SPWT_U.VSS", _String2="..") returned 1 [0219.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9af68 [0219.836] wcscpy (in: _Dest=0x6a9af68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.836] wcscat (in: _Dest=0x6a9af68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.836] wcscat (in: _Dest=0x6a9af68, _Source="SPWT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" [0219.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9af68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0219.837] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e9fc00, ftCreationTime.dwHighDateTime=0x1ca6c70, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70e9fc00, ftLastWriteTime.dwHighDateTime=0x1ca6c70, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_M.VST", cAlternateFileName="")) returned 1 [0219.837] wcscmp (_String1="SPW_M.VST", _String2=".") returned 1 [0219.837] wcscmp (_String1="SPW_M.VST", _String2="..") returned 1 [0219.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959a00 [0219.837] wcscpy (in: _Dest=0x6959a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.837] wcscat (in: _Dest=0x6959a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.837] wcscat (in: _Dest=0x6959a00, _Source="SPW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" [0219.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0219.838] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_U.VST", cAlternateFileName="")) returned 1 [0219.838] wcscmp (_String1="SPW_U.VST", _String2=".") returned 1 [0219.838] wcscmp (_String1="SPW_U.VST", _String2="..") returned 1 [0219.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x6959a98 [0219.838] wcscpy (in: _Dest=0x6959a98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.838] wcscat (in: _Dest=0x6959a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.838] wcscat (in: _Dest=0x6959a98, _Source="SPW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" [0219.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0219.839] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ac600, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c9ac600, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_M.VSS", cAlternateFileName="")) returned 1 [0219.839] wcscmp (_String1="SSFLOW_M.VSS", _String2=".") returned 1 [0219.839] wcscmp (_String1="SSFLOW_M.VSS", _String2="..") returned 1 [0219.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b008 [0219.839] wcscpy (in: _Dest=0x6a9b008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.839] wcscat (in: _Dest=0x6a9b008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.840] wcscat (in: _Dest=0x6a9b008, _Source="SSFLOW_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" [0219.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0 [0219.841] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e70b00, ftCreationTime.dwHighDateTime=0x1ca48eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3e70b00, ftLastWriteTime.dwHighDateTime=0x1ca48eb, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_U.VSS", cAlternateFileName="")) returned 1 [0219.841] wcscmp (_String1="SSFLOW_U.VSS", _String2=".") returned 1 [0219.841] wcscmp (_String1="SSFLOW_U.VSS", _String2="..") returned 1 [0219.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b0a8 [0219.841] wcscpy (in: _Dest=0x6a9b0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.841] wcscat (in: _Dest=0x6a9b0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.841] wcscat (in: _Dest=0x6a9b0a8, _Source="SSFLOW_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" [0219.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0219.842] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf68700, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cf68700, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_M.VSS", cAlternateFileName="")) returned 1 [0219.842] wcscmp (_String1="SSHOQ_M.VSS", _String2=".") returned 1 [0219.842] wcscmp (_String1="SSHOQ_M.VSS", _String2="..") returned 1 [0219.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9b148 [0219.842] wcscpy (in: _Dest=0x6a9b148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.842] wcscat (in: _Dest=0x6a9b148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.842] wcscat (in: _Dest=0x6a9b148, _Source="SSHOQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" [0219.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0219.843] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba42100, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ba42100, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_U.VSS", cAlternateFileName="")) returned 1 [0219.843] wcscmp (_String1="SSHOQ_U.VSS", _String2=".") returned 1 [0219.843] wcscmp (_String1="SSHOQ_U.VSS", _String2="..") returned 1 [0219.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9b1e8 [0219.843] wcscpy (in: _Dest=0x6a9b1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.843] wcscat (in: _Dest=0x6a9b1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.844] wcscat (in: _Dest=0x6a9b1e8, _Source="SSHOQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" [0219.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0219.845] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73fc5c00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73fc5c00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_M.VSS", cAlternateFileName="")) returned 1 [0219.845] wcscmp (_String1="SYMBOL_M.VSS", _String2=".") returned 1 [0219.845] wcscmp (_String1="SYMBOL_M.VSS", _String2="..") returned 1 [0219.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b288 [0219.845] wcscpy (in: _Dest=0x6a9b288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.845] wcscat (in: _Dest=0x6a9b288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.845] wcscat (in: _Dest=0x6a9b288, _Source="SYMBOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" [0219.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0219.846] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d85c400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7d85c400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_U.VSS", cAlternateFileName="")) returned 1 [0219.846] wcscmp (_String1="SYMBOL_U.VSS", _String2=".") returned 1 [0219.846] wcscmp (_String1="SYMBOL_U.VSS", _String2="..") returned 1 [0219.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b328 [0219.846] wcscpy (in: _Dest=0x6a9b328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.846] wcscat (in: _Dest=0x6a9b328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.846] wcscat (in: _Dest=0x6a9b328, _Source="SYMBOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" [0219.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0219.847] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f139a00, ftCreationTime.dwHighDateTime=0x1c33be1, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f139a00, ftLastWriteTime.dwHighDateTime=0x1c33be1, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELINE.MPP", cAlternateFileName="")) returned 1 [0219.847] wcscmp (_String1="TIMELINE.MPP", _String2=".") returned 1 [0219.847] wcscmp (_String1="TIMELINE.MPP", _String2="..") returned 1 [0219.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b3c8 [0219.848] wcscpy (in: _Dest=0x6a9b3c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.848] wcscat (in: _Dest=0x6a9b3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.848] wcscat (in: _Dest=0x6a9b3c8, _Source="TIMELINE.MPP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" [0219.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0219.849] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1490a00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa1490a00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x99e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VSS", cAlternateFileName="")) returned 1 [0219.849] wcscmp (_String1="TIMELN_M.VSS", _String2=".") returned 1 [0219.849] wcscmp (_String1="TIMELN_M.VSS", _String2="..") returned 1 [0219.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b468 [0219.849] wcscpy (in: _Dest=0x6a9b468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.849] wcscat (in: _Dest=0x6a9b468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.849] wcscat (in: _Dest=0x6a9b468, _Source="TIMELN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" [0219.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0219.850] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae05900, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdae05900, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VST", cAlternateFileName="")) returned 1 [0219.850] wcscmp (_String1="TIMELN_M.VST", _String2=".") returned 1 [0219.850] wcscmp (_String1="TIMELN_M.VST", _String2="..") returned 1 [0219.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b508 [0219.850] wcscpy (in: _Dest=0x6a9b508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.850] wcscat (in: _Dest=0x6a9b508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.850] wcscat (in: _Dest=0x6a9b508, _Source="TIMELN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" [0219.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0219.852] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc178c900, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc178c900, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x98800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VSS", cAlternateFileName="")) returned 1 [0219.852] wcscmp (_String1="TIMELN_U.VSS", _String2=".") returned 1 [0219.852] wcscmp (_String1="TIMELN_U.VSS", _String2="..") returned 1 [0219.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b5a8 [0219.852] wcscpy (in: _Dest=0x6a9b5a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.852] wcscat (in: _Dest=0x6a9b5a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.852] wcscat (in: _Dest=0x6a9b5a8, _Source="TIMELN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" [0219.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0219.853] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde73e000, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde73e000, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VST", cAlternateFileName="")) returned 1 [0219.853] wcscmp (_String1="TIMELN_U.VST", _String2=".") returned 1 [0219.853] wcscmp (_String1="TIMELN_U.VST", _String2="..") returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b648 [0219.853] wcscpy (in: _Dest=0x6a9b648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.853] wcscat (in: _Dest=0x6a9b648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.853] wcscat (in: _Dest=0x6a9b648, _Source="TIMELN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" [0219.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0219.912] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc335e00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc335e00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_M.VSS", cAlternateFileName="")) returned 1 [0219.913] wcscmp (_String1="TITLE_M.VSS", _String2=".") returned 1 [0219.913] wcscmp (_String1="TITLE_M.VSS", _String2="..") returned 1 [0219.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9b6e8 [0219.913] wcscpy (in: _Dest=0x6a9b6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.913] wcscat (in: _Dest=0x6a9b6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.913] wcscat (in: _Dest=0x6a9b6e8, _Source="TITLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" [0220.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0220.028] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5bcc600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5bcc600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_U.VSS", cAlternateFileName="")) returned 1 [0220.028] wcscmp (_String1="TITLE_U.VSS", _String2=".") returned 1 [0220.028] wcscmp (_String1="TITLE_U.VSS", _String2="..") returned 1 [0220.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9b788 [0220.028] wcscpy (in: _Dest=0x6a9b788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.028] wcscat (in: _Dest=0x6a9b788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.028] wcscat (in: _Dest=0x6a9b788, _Source="TITLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" [0220.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0220.030] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d9b500, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d9b500, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x30800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VSS", cAlternateFileName="")) returned 1 [0220.030] wcscmp (_String1="TQM_M.VSS", _String2=".") returned 1 [0220.030] wcscmp (_String1="TQM_M.VSS", _String2="..") returned 1 [0220.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bea8 [0220.030] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.030] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.030] wcscat (in: _Dest=0x32bea8, _Source="TQM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" [0220.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0220.031] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2076700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2076700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VST", cAlternateFileName="")) returned 1 [0220.031] wcscmp (_String1="TQM_M.VST", _String2=".") returned 1 [0220.031] wcscmp (_String1="TQM_M.VST", _String2="..") returned 1 [0220.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32b820 [0220.032] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.032] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.032] wcscat (in: _Dest=0x32b820, _Source="TQM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" [0220.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0220.034] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff6a400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeff6a400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VSS", cAlternateFileName="")) returned 1 [0220.034] wcscmp (_String1="TQM_U.VSS", _String2=".") returned 1 [0220.034] wcscmp (_String1="TQM_U.VSS", _String2="..") returned 1 [0220.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d538 [0220.034] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.034] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.034] wcscat (in: _Dest=0x32d538, _Source="TQM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" [0220.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0220.036] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59aee00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe59aee00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VST", cAlternateFileName="")) returned 1 [0220.036] wcscmp (_String1="TQM_U.VST", _String2=".") returned 1 [0220.036] wcscmp (_String1="TQM_U.VST", _String2="..") returned 1 [0220.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d240 [0220.036] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.036] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.036] wcscat (in: _Dest=0x32d240, _Source="TQM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" [0220.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0220.037] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe26600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfbe26600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x44200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_M.VSS", cAlternateFileName="")) returned 1 [0220.040] wcscmp (_String1="TRANSP_M.VSS", _String2=".") returned 1 [0220.040] wcscmp (_String1="TRANSP_M.VSS", _String2="..") returned 1 [0220.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b828 [0220.040] wcscpy (in: _Dest=0x6a9b828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.040] wcscat (in: _Dest=0x6a9b828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.040] wcscat (in: _Dest=0x6a9b828, _Source="TRANSP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" [0220.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0220.041] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3097400, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3097400, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x27200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_U.VSS", cAlternateFileName="")) returned 1 [0220.041] wcscmp (_String1="TRANSP_U.VSS", _String2=".") returned 1 [0220.041] wcscmp (_String1="TRANSP_U.VSS", _String2="..") returned 1 [0220.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b8c8 [0220.041] wcscpy (in: _Dest=0x6a9b8c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.041] wcscat (in: _Dest=0x6a9b8c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.041] wcscat (in: _Dest=0x6a9b8c8, _Source="TRANSP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" [0220.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0220.043] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ff5500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8ff5500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_M.VSS", cAlternateFileName="")) returned 1 [0220.043] wcscmp (_String1="UMLACT_M.VSS", _String2=".") returned 1 [0220.043] wcscmp (_String1="UMLACT_M.VSS", _String2="..") returned 1 [0220.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9b968 [0220.043] wcscpy (in: _Dest=0x6a9b968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.043] wcscat (in: _Dest=0x6a9b968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.043] wcscat (in: _Dest=0x6a9b968, _Source="UMLACT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" [0220.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9b968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0220.044] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef53600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef53600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_U.VSS", cAlternateFileName="")) returned 1 [0220.044] wcscmp (_String1="UMLACT_U.VSS", _String2=".") returned 1 [0220.044] wcscmp (_String1="UMLACT_U.VSS", _String2="..") returned 1 [0220.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9ba08 [0220.044] wcscpy (in: _Dest=0x6a9ba08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.044] wcscat (in: _Dest=0x6a9ba08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.045] wcscat (in: _Dest=0x6a9ba08, _Source="UMLACT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" [0220.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9ba08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0220.046] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b9ea00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b9ea00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_M.VSS", cAlternateFileName="")) returned 1 [0220.046] wcscmp (_String1="UMLCOL_M.VSS", _String2=".") returned 1 [0220.046] wcscmp (_String1="UMLCOL_M.VSS", _String2="..") returned 1 [0220.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9baa8 [0220.046] wcscpy (in: _Dest=0x6a9baa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.046] wcscat (in: _Dest=0x6a9baa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.046] wcscat (in: _Dest=0x6a9baa8, _Source="UMLCOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" [0220.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9baa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0220.047] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19afcb00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19afcb00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_U.VSS", cAlternateFileName="")) returned 1 [0220.047] wcscmp (_String1="UMLCOL_U.VSS", _String2=".") returned 1 [0220.048] wcscmp (_String1="UMLCOL_U.VSS", _String2="..") returned 1 [0220.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bb48 [0220.048] wcscpy (in: _Dest=0x6a9bb48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.048] wcscat (in: _Dest=0x6a9bb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.048] wcscat (in: _Dest=0x6a9bb48, _Source="UMLCOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" [0220.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0220.056] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e747f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e747f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_M.VSS", cAlternateFileName="")) returned 1 [0220.056] wcscmp (_String1="UMLCOM_M.VSS", _String2=".") returned 1 [0220.056] wcscmp (_String1="UMLCOM_M.VSS", _String2="..") returned 1 [0220.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bbe8 [0220.056] wcscpy (in: _Dest=0x6a9bbe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.056] wcscat (in: _Dest=0x6a9bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.056] wcscat (in: _Dest=0x6a9bbe8, _Source="UMLCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" [0220.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0220.058] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23393300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23393300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_U.VSS", cAlternateFileName="")) returned 1 [0220.058] wcscmp (_String1="UMLCOM_U.VSS", _String2=".") returned 1 [0220.058] wcscmp (_String1="UMLCOM_U.VSS", _String2="..") returned 1 [0220.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bc88 [0220.058] wcscpy (in: _Dest=0x6a9bc88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.058] wcscat (in: _Dest=0x6a9bc88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.058] wcscat (in: _Dest=0x6a9bc88, _Source="UMLCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" [0220.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0220.059] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b916e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b916e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_M.VSS", cAlternateFileName="")) returned 1 [0220.059] wcscmp (_String1="UMLDEP_M.VSS", _String2=".") returned 1 [0220.059] wcscmp (_String1="UMLDEP_M.VSS", _String2="..") returned 1 [0220.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bd28 [0220.059] wcscpy (in: _Dest=0x6a9bd28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.060] wcscat (in: _Dest=0x6a9bd28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.060] wcscat (in: _Dest=0x6a9bd28, _Source="UMLDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" [0220.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bd28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0220.061] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31874f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31874f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_U.VSS", cAlternateFileName="")) returned 1 [0220.061] wcscmp (_String1="UMLDEP_U.VSS", _String2=".") returned 1 [0220.061] wcscmp (_String1="UMLDEP_U.VSS", _String2="..") returned 1 [0220.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bdc8 [0220.061] wcscpy (in: _Dest=0x6a9bdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.061] wcscat (in: _Dest=0x6a9bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.061] wcscat (in: _Dest=0x6a9bdc8, _Source="UMLDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" [0220.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0220.062] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37686d00, ftCreationTime.dwHighDateTime=0x1c68be5, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37686d00, ftLastWriteTime.dwHighDateTime=0x1c68be5, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_M.VSD", cAlternateFileName="")) returned 1 [0220.062] wcscmp (_String1="UMLDG_M.VSD", _String2=".") returned 1 [0220.062] wcscmp (_String1="UMLDG_M.VSD", _String2="..") returned 1 [0220.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9be68 [0220.063] wcscpy (in: _Dest=0x6a9be68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.063] wcscat (in: _Dest=0x6a9be68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.063] wcscat (in: _Dest=0x6a9be68, _Source="UMLDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" [0220.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9be68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0220.142] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8a4500, ftCreationTime.dwHighDateTime=0x1c67518, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfd8a4500, ftLastWriteTime.dwHighDateTime=0x1c67518, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_U.VSD", cAlternateFileName="")) returned 1 [0220.142] wcscmp (_String1="UMLDG_U.VSD", _String2=".") returned 1 [0220.142] wcscmp (_String1="UMLDG_U.VSD", _String2="..") returned 1 [0220.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a9bf08 [0220.142] wcscpy (in: _Dest=0x6a9bf08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.142] wcscat (in: _Dest=0x6a9bf08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.142] wcscat (in: _Dest=0x6a9bf08, _Source="UMLDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" [0220.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0220.144] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc1fc00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecc1fc00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_M.VST", cAlternateFileName="")) returned 1 [0220.144] wcscmp (_String1="UMLMOD_M.VST", _String2=".") returned 1 [0220.144] wcscmp (_String1="UMLMOD_M.VST", _String2="..") returned 1 [0220.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9bfa8 [0220.144] wcscpy (in: _Dest=0x6a9bfa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.144] wcscat (in: _Dest=0x6a9bfa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.144] wcscat (in: _Dest=0x6a9bfa8, _Source="UMLMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" [0220.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9bfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0220.146] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b7dd00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2b7dd00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_U.VST", cAlternateFileName="")) returned 1 [0220.146] wcscmp (_String1="UMLMOD_U.VST", _String2=".") returned 1 [0220.146] wcscmp (_String1="UMLMOD_U.VST", _String2="..") returned 1 [0220.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c048 [0220.146] wcscpy (in: _Dest=0x6a9c048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.146] wcscat (in: _Dest=0x6a9c048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.146] wcscat (in: _Dest=0x6a9c048, _Source="UMLMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" [0220.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0220.147] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39df8a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39df8a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_M.VSS", cAlternateFileName="")) returned 1 [0220.147] wcscmp (_String1="UMLSEQ_M.VSS", _String2=".") returned 1 [0220.147] wcscmp (_String1="UMLSEQ_M.VSS", _String2="..") returned 1 [0220.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c0e8 [0220.147] wcscpy (in: _Dest=0x6a9c0e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.147] wcscat (in: _Dest=0x6a9c0e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.147] wcscat (in: _Dest=0x6a9c0e8, _Source="UMLSEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" [0220.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0220.148] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4237c500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4237c500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_U.VSS", cAlternateFileName="")) returned 1 [0220.148] wcscmp (_String1="UMLSEQ_U.VSS", _String2=".") returned 1 [0220.148] wcscmp (_String1="UMLSEQ_U.VSS", _String2="..") returned 1 [0220.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c188 [0220.149] wcscpy (in: _Dest=0x6a9c188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.149] wcscat (in: _Dest=0x6a9c188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.149] wcscat (in: _Dest=0x6a9c188, _Source="UMLSEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" [0220.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0220.150] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482da600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x482da600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_M.VSS", cAlternateFileName="")) returned 1 [0220.150] wcscmp (_String1="UMLSTA_M.VSS", _String2=".") returned 1 [0220.150] wcscmp (_String1="UMLSTA_M.VSS", _String2="..") returned 1 [0220.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c228 [0220.150] wcscpy (in: _Dest=0x6a9c228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.150] wcscat (in: _Dest=0x6a9c228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.150] wcscat (in: _Dest=0x6a9c228, _Source="UMLSTA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" [0220.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0220.152] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e238700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e238700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_U.VSS", cAlternateFileName="")) returned 1 [0220.152] wcscmp (_String1="UMLSTA_U.VSS", _String2=".") returned 1 [0220.152] wcscmp (_String1="UMLSTA_U.VSS", _String2="..") returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c2c8 [0220.152] wcscpy (in: _Dest=0x6a9c2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.152] wcscat (in: _Dest=0x6a9c2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.152] wcscat (in: _Dest=0x6a9c2c8, _Source="UMLSTA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" [0220.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0220.153] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60052a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60052a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_M.VSS", cAlternateFileName="")) returned 1 [0220.153] wcscmp (_String1="UMLSTR_M.VSS", _String2=".") returned 1 [0220.153] wcscmp (_String1="UMLSTR_M.VSS", _String2="..") returned 1 [0220.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c368 [0220.153] wcscpy (in: _Dest=0x6a9c368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.153] wcscat (in: _Dest=0x6a9c368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.153] wcscat (in: _Dest=0x6a9c368, _Source="UMLSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" [0220.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0220.155] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e6cd00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71e6cd00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_U.VSS", cAlternateFileName="")) returned 1 [0220.155] wcscmp (_String1="UMLSTR_U.VSS", _String2=".") returned 1 [0220.155] wcscmp (_String1="UMLSTR_U.VSS", _String2="..") returned 1 [0220.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c408 [0220.155] wcscpy (in: _Dest=0x6a9c408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.155] wcscat (in: _Dest=0x6a9c408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.155] wcscat (in: _Dest=0x6a9c408, _Source="UMLSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" [0220.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0220.157] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76ab8100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76ab8100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_M.VSS", cAlternateFileName="")) returned 1 [0220.157] wcscmp (_String1="UMLUSE_M.VSS", _String2=".") returned 1 [0220.157] wcscmp (_String1="UMLUSE_M.VSS", _String2="..") returned 1 [0220.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c4a8 [0220.157] wcscpy (in: _Dest=0x6a9c4a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.157] wcscat (in: _Dest=0x6a9c4a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.157] wcscat (in: _Dest=0x6a9c4a8, _Source="UMLUSE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" [0220.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0220.159] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca16200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ca16200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_U.VSS", cAlternateFileName="")) returned 1 [0220.159] wcscmp (_String1="UMLUSE_U.VSS", _String2=".") returned 1 [0220.159] wcscmp (_String1="UMLUSE_U.VSS", _String2="..") returned 1 [0220.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c548 [0220.159] wcscpy (in: _Dest=0x6a9c548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.159] wcscat (in: _Dest=0x6a9c548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.159] wcscat (in: _Dest=0x6a9c548, _Source="UMLUSE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" [0220.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0220.160] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89be5100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89be5100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_M.VSS", cAlternateFileName="")) returned 1 [0220.161] wcscmp (_String1="VALVE1_M.VSS", _String2=".") returned 1 [0220.161] wcscmp (_String1="VALVE1_M.VSS", _String2="..") returned 1 [0220.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c5e8 [0220.161] wcscpy (in: _Dest=0x6a9c5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.161] wcscat (in: _Dest=0x6a9c5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.161] wcscat (in: _Dest=0x6a9c5e8, _Source="VALVE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" [0220.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0220.162] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95aa1300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95aa1300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x20e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_U.VSS", cAlternateFileName="")) returned 1 [0220.162] wcscmp (_String1="VALVE1_U.VSS", _String2=".") returned 1 [0220.162] wcscmp (_String1="VALVE1_U.VSS", _String2="..") returned 1 [0220.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c688 [0220.162] wcscpy (in: _Dest=0x6a9c688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.162] wcscat (in: _Dest=0x6a9c688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.162] wcscat (in: _Dest=0x6a9c688, _Source="VALVE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" [0220.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0220.164] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd12100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9cd12100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_M.VSS", cAlternateFileName="")) returned 1 [0220.164] wcscmp (_String1="VALVE2_M.VSS", _String2=".") returned 1 [0220.164] wcscmp (_String1="VALVE2_M.VSS", _String2="..") returned 1 [0220.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c728 [0220.164] wcscpy (in: _Dest=0x6a9c728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.164] wcscat (in: _Dest=0x6a9c728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.164] wcscat (in: _Dest=0x6a9c728, _Source="VALVE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" [0220.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0220.165] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c70200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2c70200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_U.VSS", cAlternateFileName="")) returned 1 [0220.165] wcscmp (_String1="VALVE2_U.VSS", _String2=".") returned 1 [0220.165] wcscmp (_String1="VALVE2_U.VSS", _String2="..") returned 1 [0220.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c7c8 [0220.165] wcscpy (in: _Dest=0x6a9c7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.166] wcscat (in: _Dest=0x6a9c7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.166] wcscat (in: _Dest=0x6a9c7c8, _Source="VALVE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" [0220.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0220.167] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1151e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1151e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_M.VSS", cAlternateFileName="")) returned 1 [0220.167] wcscmp (_String1="VEHICL_M.VSS", _String2=".") returned 1 [0220.167] wcscmp (_String1="VEHICL_M.VSS", _String2="..") returned 1 [0220.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c868 [0220.167] wcscpy (in: _Dest=0x6a9c868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.167] wcscat (in: _Dest=0x6a9c868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.167] wcscat (in: _Dest=0x6a9c868, _Source="VEHICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" [0220.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0220.169] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd00e000, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd00e000, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x3fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_U.VSS", cAlternateFileName="")) returned 1 [0220.169] wcscmp (_String1="VEHICL_U.VSS", _String2=".") returned 1 [0220.169] wcscmp (_String1="VEHICL_U.VSS", _String2="..") returned 1 [0220.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c908 [0220.169] wcscpy (in: _Dest=0x6a9c908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.169] wcscat (in: _Dest=0x6a9c908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.169] wcscat (in: _Dest=0x6a9c908, _Source="VEHICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" [0220.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0220.170] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc427ee00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc427ee00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_M.VSS", cAlternateFileName="")) returned 1 [0220.170] wcscmp (_String1="VIDSUR_M.VSS", _String2=".") returned 1 [0220.170] wcscmp (_String1="VIDSUR_M.VSS", _String2="..") returned 1 [0220.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9c9a8 [0220.170] wcscpy (in: _Dest=0x6a9c9a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.170] wcscat (in: _Dest=0x6a9c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.170] wcscat (in: _Dest=0x6a9c9a8, _Source="VIDSUR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" [0220.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9c9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0220.172] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc802900, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc802900, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_U.VSS", cAlternateFileName="")) returned 1 [0220.172] wcscmp (_String1="VIDSUR_U.VSS", _String2=".") returned 1 [0220.172] wcscmp (_String1="VIDSUR_U.VSS", _String2="..") returned 1 [0220.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9ca48 [0220.172] wcscpy (in: _Dest=0x6a9ca48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.172] wcscat (in: _Dest=0x6a9ca48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.172] wcscat (in: _Dest=0x6a9ca48, _Source="VIDSUR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" [0220.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9ca48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0220.174] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a73700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3a73700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VSS", cAlternateFileName="")) returned 1 [0220.174] wcscmp (_String1="VSM_M.VSS", _String2=".") returned 1 [0220.174] wcscmp (_String1="VSM_M.VSS", _String2="..") returned 1 [0220.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d5d0 [0220.174] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.174] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.174] wcscat (in: _Dest=0x32d5d0, _Source="VSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" [0220.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0220.175] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51a3700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf51a3700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VST", cAlternateFileName="")) returned 1 [0220.175] wcscmp (_String1="VSM_M.VST", _String2=".") returned 1 [0220.175] wcscmp (_String1="VSM_M.VST", _String2="..") returned 1 [0220.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bd78 [0220.176] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.176] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.176] wcscat (in: _Dest=0x32bd78, _Source="VSM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" [0220.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0220.177] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff7200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdbff7200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VSS", cAlternateFileName="")) returned 1 [0220.177] wcscmp (_String1="VSM_U.VSS", _String2=".") returned 1 [0220.177] wcscmp (_String1="VSM_U.VSS", _String2="..") returned 1 [0220.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bce0 [0220.177] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.177] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.177] wcscat (in: _Dest=0x32bce0, _Source="VSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" [0220.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0220.179] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c9100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf77c9100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VST", cAlternateFileName="")) returned 1 [0220.179] wcscmp (_String1="VSM_U.VST", _String2=".") returned 1 [0220.179] wcscmp (_String1="VSM_U.VST", _String2="..") returned 1 [0220.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d408 [0220.179] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.179] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.179] wcscat (in: _Dest=0x32d408, _Source="VSM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" [0220.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0220.365] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1537e200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1537e200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_M.VSS", cAlternateFileName="")) returned 1 [0220.457] wcscmp (_String1="WADOWI_M.VSS", _String2=".") returned 1 [0220.457] wcscmp (_String1="WADOWI_M.VSS", _String2="..") returned 1 [0220.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9cae8 [0220.457] wcscpy (in: _Dest=0x6a9cae8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.457] wcscat (in: _Dest=0x6a9cae8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.457] wcscat (in: _Dest=0x6a9cae8, _Source="WADOWI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" [0220.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9cae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8 [0220.477] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e705200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e705200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_U.VSS", cAlternateFileName="")) returned 1 [0220.477] wcscmp (_String1="WADOWI_U.VSS", _String2=".") returned 1 [0220.477] wcscmp (_String1="WADOWI_U.VSS", _String2="..") returned 1 [0220.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a9cb88 [0220.477] wcscpy (in: _Dest=0x6a9cb88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.477] wcscat (in: _Dest=0x6a9cb88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.478] wcscat (in: _Dest=0x6a9cb88, _Source="WADOWI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" [0220.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9cb88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0220.479] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7ed800, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe7ed800, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0xdae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_M.VSS", cAlternateFileName="")) returned 1 [0220.479] wcscmp (_String1="WALL_M.VSS", _String2=".") returned 1 [0220.479] wcscmp (_String1="WALL_M.VSS", _String2="..") returned 1 [0220.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a9cc28 [0220.479] wcscpy (in: _Dest=0x6a9cc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.479] wcscat (in: _Dest=0x6a9cc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.480] wcscat (in: _Dest=0x6a9cc28, _Source="WALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" [0220.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a9cc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0220.481] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cabbb00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cabbb00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0xd9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_U.VSS", cAlternateFileName="")) returned 1 [0220.481] wcscmp (_String1="WALL_U.VSS", _String2=".") returned 1 [0220.481] wcscmp (_String1="WALL_U.VSS", _String2="..") returned 1 [0220.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a94ce8 [0220.481] wcscpy (in: _Dest=0x6a94ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.481] wcscat (in: _Dest=0x6a94ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.481] wcscat (in: _Dest=0x6a94ce8, _Source="WALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" [0220.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0220.483] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b595500, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b595500, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VSS", cAlternateFileName="")) returned 1 [0220.483] wcscmp (_String1="WEBMAP_M.VSS", _String2=".") returned 1 [0220.483] wcscmp (_String1="WEBMAP_M.VSS", _String2="..") returned 1 [0220.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a94d88 [0220.483] wcscpy (in: _Dest=0x6a94d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.483] wcscat (in: _Dest=0x6a94d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.483] wcscat (in: _Dest=0x6a94d88, _Source="WEBMAP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" [0220.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0220.485] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc414500, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5a979d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc414500, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x18800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VST", cAlternateFileName="")) returned 1 [0220.485] wcscmp (_String1="WEBMAP_M.VST", _String2=".") returned 1 [0220.485] wcscmp (_String1="WEBMAP_M.VST", _String2="..") returned 1 [0220.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a94e28 [0220.485] wcscpy (in: _Dest=0x6a94e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.485] wcscat (in: _Dest=0x6a94e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.485] wcscat (in: _Dest=0x6a94e28, _Source="WEBMAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" [0220.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0220.486] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d5c200, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5ae3c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb8d5c200, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x189200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VSS", cAlternateFileName="")) returned 1 [0220.486] wcscmp (_String1="WEBMAP_U.VSS", _String2=".") returned 1 [0220.486] wcscmp (_String1="WEBMAP_U.VSS", _String2="..") returned 1 [0220.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a94ec8 [0220.486] wcscpy (in: _Dest=0x6a94ec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.487] wcscat (in: _Dest=0x6a94ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.487] wcscat (in: _Dest=0x6a94ec8, _Source="WEBMAP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" [0220.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0220.488] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105f900, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x105f900, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VST", cAlternateFileName="")) returned 1 [0220.488] wcscmp (_String1="WEBMAP_U.VST", _String2=".") returned 1 [0220.488] wcscmp (_String1="WEBMAP_U.VST", _String2="..") returned 1 [0220.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a94f68 [0220.488] wcscpy (in: _Dest=0x6a94f68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.488] wcscat (in: _Dest=0x6a94f68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.488] wcscat (in: _Dest=0x6a94f68, _Source="WEBMAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" [0220.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0220.490] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecba300, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecba300, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VSS", cAlternateFileName="")) returned 1 [0220.490] wcscmp (_String1="WEBSIT_M.VSS", _String2=".") returned 1 [0220.490] wcscmp (_String1="WEBSIT_M.VSS", _String2="..") returned 1 [0220.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95008 [0220.490] wcscpy (in: _Dest=0x6a95008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.490] wcscat (in: _Dest=0x6a95008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.490] wcscat (in: _Dest=0x6a95008, _Source="WEBSIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" [0220.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0220.492] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4998000, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4998000, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VST", cAlternateFileName="")) returned 1 [0220.492] wcscmp (_String1="WEBSIT_M.VST", _String2=".") returned 1 [0220.492] wcscmp (_String1="WEBSIT_M.VST", _String2="..") returned 1 [0220.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a950a8 [0220.492] wcscpy (in: _Dest=0x6a950a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.492] wcscat (in: _Dest=0x6a950a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.492] wcscat (in: _Dest=0x6a950a8, _Source="WEBSIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" [0220.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a950a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0220.493] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3905700, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3905700, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VSS", cAlternateFileName="")) returned 1 [0220.494] wcscmp (_String1="WEBSIT_U.VSS", _String2=".") returned 1 [0220.494] wcscmp (_String1="WEBSIT_U.VSS", _String2="..") returned 1 [0220.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95148 [0220.494] wcscpy (in: _Dest=0x6a95148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.494] wcscat (in: _Dest=0x6a95148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.494] wcscat (in: _Dest=0x6a95148, _Source="WEBSIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" [0220.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0220.495] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e3400, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95e3400, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VST", cAlternateFileName="")) returned 1 [0220.495] wcscmp (_String1="WEBSIT_U.VST", _String2=".") returned 1 [0220.495] wcscmp (_String1="WEBSIT_U.VST", _String2="..") returned 1 [0220.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a951e8 [0220.495] wcscpy (in: _Dest=0x6a951e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.496] wcscat (in: _Dest=0x6a951e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.496] wcscat (in: _Dest=0x6a951e8, _Source="WEBSIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" [0220.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a951e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0220.497] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8550b00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8550b00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_M.VSS", cAlternateFileName="")) returned 1 [0220.497] wcscmp (_String1="WELD_M.VSS", _String2=".") returned 1 [0220.497] wcscmp (_String1="WELD_M.VSS", _String2="..") returned 1 [0220.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a95288 [0220.497] wcscpy (in: _Dest=0x6a95288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.497] wcscat (in: _Dest=0x6a95288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.497] wcscat (in: _Dest=0x6a95288, _Source="WELD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" [0220.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0220.499] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19bf00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd19bf00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_U.VSS", cAlternateFileName="")) returned 1 [0220.499] wcscmp (_String1="WELD_U.VSS", _String2=".") returned 1 [0220.499] wcscmp (_String1="WELD_U.VSS", _String2="..") returned 1 [0220.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x6a95328 [0220.499] wcscpy (in: _Dest=0x6a95328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.499] wcscat (in: _Dest=0x6a95328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.499] wcscat (in: _Dest=0x6a95328, _Source="WELD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" [0220.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0220.501] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad4600, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0ad4600, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_M.VSS", cAlternateFileName="")) returned 1 [0220.501] wcscmp (_String1="WFCICN_M.VSS", _String2=".") returned 1 [0220.501] wcscmp (_String1="WFCICN_M.VSS", _String2="..") returned 1 [0220.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a953c8 [0220.501] wcscpy (in: _Dest=0x6a953c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.501] wcscat (in: _Dest=0x6a953c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.501] wcscat (in: _Dest=0x6a953c8, _Source="WFCICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" [0220.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a953c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0220.503] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd440cd00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd440cd00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_U.VSS", cAlternateFileName="")) returned 1 [0220.503] wcscmp (_String1="WFCICN_U.VSS", _String2=".") returned 1 [0220.503] wcscmp (_String1="WFCICN_U.VSS", _String2="..") returned 1 [0220.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95468 [0220.503] wcscpy (in: _Dest=0x6a95468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.503] wcscat (in: _Dest=0x6a95468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.503] wcscat (in: _Dest=0x6a95468, _Source="WFCICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" [0220.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0220.505] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec185100, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec185100, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_M.VSS", cAlternateFileName="")) returned 1 [0220.505] wcscmp (_String1="WFCRS_M.VSS", _String2=".") returned 1 [0220.505] wcscmp (_String1="WFCRS_M.VSS", _String2="..") returned 1 [0220.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95508 [0220.505] wcscpy (in: _Dest=0x6a95508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.505] wcscat (in: _Dest=0x6a95508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.505] wcscat (in: _Dest=0x6a95508, _Source="WFCRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" [0220.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0220.506] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3efd500, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3efd500, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x77e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_U.VSS", cAlternateFileName="")) returned 1 [0220.506] wcscmp (_String1="WFCRS_U.VSS", _String2=".") returned 1 [0220.506] wcscmp (_String1="WFCRS_U.VSS", _String2="..") returned 1 [0220.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a955a8 [0220.507] wcscpy (in: _Dest=0x6a955a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.507] wcscat (in: _Dest=0x6a955a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.507] wcscat (in: _Dest=0x6a955a8, _Source="WFCRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" [0220.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a955a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0220.508] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96949100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96949100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_M.VSS", cAlternateFileName="")) returned 1 [0220.508] wcscmp (_String1="WFCTRL_M.VSS", _String2=".") returned 1 [0220.508] wcscmp (_String1="WFCTRL_M.VSS", _String2="..") returned 1 [0220.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95648 [0220.508] wcscpy (in: _Dest=0x6a95648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.508] wcscat (in: _Dest=0x6a95648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.508] wcscat (in: _Dest=0x6a95648, _Source="WFCTRL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" [0220.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0220.509] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeccc00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eeccc00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_U.VSS", cAlternateFileName="")) returned 1 [0220.510] wcscmp (_String1="WFCTRL_U.VSS", _String2=".") returned 1 [0220.510] wcscmp (_String1="WFCTRL_U.VSS", _String2="..") returned 1 [0220.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a956e8 [0220.510] wcscpy (in: _Dest=0x6a956e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.510] wcscat (in: _Dest=0x6a956e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.510] wcscat (in: _Dest=0x6a956e8, _Source="WFCTRL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" [0220.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a956e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0220.511] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516c4200, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5ba2370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x516c4200, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x217a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_M.VSS", cAlternateFileName="")) returned 1 [0220.511] wcscmp (_String1="WFDEP_M.VSS", _String2=".") returned 1 [0220.511] wcscmp (_String1="WFDEP_M.VSS", _String2="..") returned 1 [0220.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95788 [0220.512] wcscpy (in: _Dest=0x6a95788, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.512] wcscat (in: _Dest=0x6a95788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.512] wcscat (in: _Dest=0x6a95788, _Source="WFDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" [0220.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0220.574] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837da400, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5bc84d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x837da400, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x215e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_U.VSS", cAlternateFileName="")) returned 1 [0220.574] wcscmp (_String1="WFDEP_U.VSS", _String2=".") returned 1 [0220.574] wcscmp (_String1="WFDEP_U.VSS", _String2="..") returned 1 [0220.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95828 [0220.574] wcscpy (in: _Dest=0x6a95828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.574] wcscat (in: _Dest=0x6a95828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.574] wcscat (in: _Dest=0x6a95828, _Source="WFDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" [0220.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0220.722] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_M.VST", cAlternateFileName="")) returned 1 [0220.722] wcscmp (_String1="WFDGM_M.VST", _String2=".") returned 1 [0220.722] wcscmp (_String1="WFDGM_M.VST", _String2="..") returned 1 [0220.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a958c8 [0220.722] wcscpy (in: _Dest=0x6a958c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.723] wcscat (in: _Dest=0x6a958c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.723] wcscat (in: _Dest=0x6a958c8, _Source="WFDGM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" [0220.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a958c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0220.725] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_U.VST", cAlternateFileName="")) returned 1 [0220.725] wcscmp (_String1="WFDGM_U.VST", _String2=".") returned 1 [0220.725] wcscmp (_String1="WFDGM_U.VST", _String2="..") returned 1 [0220.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95968 [0220.725] wcscpy (in: _Dest=0x6a95968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.725] wcscat (in: _Dest=0x6a95968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.725] wcscat (in: _Dest=0x6a95968, _Source="WFDGM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" [0220.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0220.727] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_M.VSS", cAlternateFileName="")) returned 1 [0220.727] wcscmp (_String1="WFDLGS_M.VSS", _String2=".") returned 1 [0220.727] wcscmp (_String1="WFDLGS_M.VSS", _String2="..") returned 1 [0220.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95a08 [0220.727] wcscpy (in: _Dest=0x6a95a08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.727] wcscat (in: _Dest=0x6a95a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.727] wcscat (in: _Dest=0x6a95a08, _Source="WFDLGS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" [0220.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0220.729] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a76100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa9a76100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_U.VSS", cAlternateFileName="")) returned 1 [0220.729] wcscmp (_String1="WFDLGS_U.VSS", _String2=".") returned 1 [0220.729] wcscmp (_String1="WFDLGS_U.VSS", _String2="..") returned 1 [0220.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95aa8 [0220.729] wcscpy (in: _Dest=0x6a95aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.729] wcscat (in: _Dest=0x6a95aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.729] wcscat (in: _Dest=0x6a95aa8, _Source="WFDLGS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" [0220.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0220.730] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14b0900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c60a50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa14b0900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_M.VSS", cAlternateFileName="")) returned 1 [0220.730] wcscmp (_String1="WFOBJ_M.VSS", _String2=".") returned 1 [0220.730] wcscmp (_String1="WFOBJ_M.VSS", _String2="..") returned 1 [0220.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95b48 [0220.731] wcscpy (in: _Dest=0x6a95b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.731] wcscat (in: _Dest=0x6a95b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.731] wcscat (in: _Dest=0x6a95b48, _Source="WFOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" [0220.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0220.732] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45dd900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c86bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb45dd900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xb9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_U.VSS", cAlternateFileName="")) returned 1 [0220.732] wcscmp (_String1="WFOBJ_U.VSS", _String2=".") returned 1 [0220.732] wcscmp (_String1="WFOBJ_U.VSS", _String2="..") returned 1 [0220.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a95be8 [0220.732] wcscpy (in: _Dest=0x6a95be8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.732] wcscat (in: _Dest=0x6a95be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.732] wcscat (in: _Dest=0x6a95be8, _Source="WFOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" [0220.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0220.734] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50e4f00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50e4f00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_M.VSS", cAlternateFileName="")) returned 1 [0220.734] wcscmp (_String1="WFSTEP_M.VSS", _String2=".") returned 1 [0220.734] wcscmp (_String1="WFSTEP_M.VSS", _String2="..") returned 1 [0220.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95c88 [0220.734] wcscpy (in: _Dest=0x6a95c88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.734] wcscat (in: _Dest=0x6a95c88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.734] wcscat (in: _Dest=0x6a95c88, _Source="WFSTEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" [0220.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0220.736] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d9800, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d9800, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_U.VSS", cAlternateFileName="")) returned 1 [0220.736] wcscmp (_String1="WFSTEP_U.VSS", _String2=".") returned 1 [0220.736] wcscmp (_String1="WFSTEP_U.VSS", _String2="..") returned 1 [0220.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95d28 [0220.736] wcscpy (in: _Dest=0x6a95d28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.736] wcscat (in: _Dest=0x6a95d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.736] wcscat (in: _Dest=0x6a95d28, _Source="WFSTEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" [0220.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0220.737] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3ae800, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xad3ae800, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_M.VSS", cAlternateFileName="")) returned 1 [0220.738] wcscmp (_String1="WFTLBR_M.VSS", _String2=".") returned 1 [0220.738] wcscmp (_String1="WFTLBR_M.VSS", _String2="..") returned 1 [0220.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95dc8 [0220.738] wcscpy (in: _Dest=0x6a95dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.738] wcscat (in: _Dest=0x6a95dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.738] wcscat (in: _Dest=0x6a95dc8, _Source="WFTLBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" [0220.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0220.739] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ff9c00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1ff9c00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_U.VSS", cAlternateFileName="")) returned 1 [0220.739] wcscmp (_String1="WFTLBR_U.VSS", _String2=".") returned 1 [0220.739] wcscmp (_String1="WFTLBR_U.VSS", _String2="..") returned 1 [0220.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95e68 [0220.740] wcscpy (in: _Dest=0x6a95e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.740] wcscat (in: _Dest=0x6a95e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.740] wcscat (in: _Dest=0x6a95e68, _Source="WFTLBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" [0220.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0220.741] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe66f3b00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe66f3b00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_M.VSS", cAlternateFileName="")) returned 1 [0220.741] wcscmp (_String1="WFWICN_M.VSS", _String2=".") returned 1 [0220.741] wcscmp (_String1="WFWICN_M.VSS", _String2="..") returned 1 [0220.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95f08 [0220.741] wcscpy (in: _Dest=0x6a95f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.741] wcscat (in: _Dest=0x6a95f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.741] wcscat (in: _Dest=0x6a95f08, _Source="WFWICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" [0220.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0220.742] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb33ef00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb33ef00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_U.VSS", cAlternateFileName="")) returned 1 [0220.742] wcscmp (_String1="WFWICN_U.VSS", _String2=".") returned 1 [0220.742] wcscmp (_String1="WFWICN_U.VSS", _String2="..") returned 1 [0220.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a95fa8 [0220.742] wcscpy (in: _Dest=0x6a95fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.742] wcscat (in: _Dest=0x6a95fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.743] wcscat (in: _Dest=0x6a95fa8, _Source="WFWICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" [0220.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a95fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0220.744] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56dcd00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56dcd00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0xa2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VSS", cAlternateFileName="")) returned 1 [0220.744] wcscmp (_String1="WRKFLO_M.VSS", _String2=".") returned 1 [0220.744] wcscmp (_String1="WRKFLO_M.VSS", _String2="..") returned 1 [0220.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a96048 [0220.744] wcscpy (in: _Dest=0x6a96048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.744] wcscat (in: _Dest=0x6a96048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.744] wcscat (in: _Dest=0x6a96048, _Source="WRKFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" [0220.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0220.746] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18dd7d00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x18dd7d00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VST", cAlternateFileName="")) returned 1 [0220.746] wcscmp (_String1="WRKFLO_M.VST", _String2=".") returned 1 [0220.746] wcscmp (_String1="WRKFLO_M.VST", _String2="..") returned 1 [0220.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a960e8 [0220.746] wcscpy (in: _Dest=0x6a960e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.746] wcscat (in: _Dest=0x6a960e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.746] wcscat (in: _Dest=0x6a960e8, _Source="WRKFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" [0220.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a960e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0220.747] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e767e00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e767e00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0x9b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VSS", cAlternateFileName="")) returned 1 [0220.747] wcscmp (_String1="WRKFLO_U.VSS", _String2=".") returned 1 [0220.747] wcscmp (_String1="WRKFLO_U.VSS", _String2="..") returned 1 [0220.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a96188 [0220.747] wcscpy (in: _Dest=0x6a96188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.747] wcscat (in: _Dest=0x6a96188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.748] wcscat (in: _Dest=0x6a96188, _Source="WRKFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" [0220.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0220.749] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed35e00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ed35e00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VST", cAlternateFileName="")) returned 1 [0220.749] wcscmp (_String1="WRKFLO_U.VST", _String2=".") returned 1 [0220.749] wcscmp (_String1="WRKFLO_U.VST", _String2="..") returned 1 [0220.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a96228 [0220.749] wcscpy (in: _Dest=0x6a96228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.749] wcscat (in: _Dest=0x6a96228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.749] wcscat (in: _Dest=0x6a96228, _Source="WRKFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" [0220.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0220.751] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f28e100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f28e100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x74400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_M.VST", cAlternateFileName="")) returned 1 [0220.751] wcscmp (_String1="WSSISS_M.VST", _String2=".") returned 1 [0220.751] wcscmp (_String1="WSSISS_M.VST", _String2="..") returned 1 [0220.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a962c8 [0220.751] wcscpy (in: _Dest=0x6a962c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.751] wcscat (in: _Dest=0x6a962c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.751] wcscat (in: _Dest=0x6a962c8, _Source="WSSISS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" [0220.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a962c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0220.753] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d0a600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26d0a600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x72a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_U.VST", cAlternateFileName="")) returned 1 [0220.753] wcscmp (_String1="WSSISS_U.VST", _String2=".") returned 1 [0220.753] wcscmp (_String1="WSSISS_U.VST", _String2="..") returned 1 [0220.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a96368 [0220.753] wcscpy (in: _Dest=0x6a96368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.753] wcscat (in: _Dest=0x6a96368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.753] wcscat (in: _Dest=0x6a96368, _Source="WSSISS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" [0220.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0220.755] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436cde00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x436cde00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_M.VST", cAlternateFileName="")) returned 1 [0220.755] wcscmp (_String1="WSSTSK_M.VST", _String2=".") returned 1 [0220.755] wcscmp (_String1="WSSTSK_M.VST", _String2="..") returned 1 [0220.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a96408 [0220.755] wcscpy (in: _Dest=0x6a96408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.755] wcscat (in: _Dest=0x6a96408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.755] wcscat (in: _Dest=0x6a96408, _Source="WSSTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" [0220.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0220.756] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e37600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39e37600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_U.VST", cAlternateFileName="")) returned 1 [0220.756] wcscmp (_String1="WSSTSK_U.VST", _String2=".") returned 1 [0220.756] wcscmp (_String1="WSSTSK_U.VST", _String2="..") returned 1 [0220.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x6a964a8 [0220.756] wcscpy (in: _Dest=0x6a964a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.757] wcscat (in: _Dest=0x6a964a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.757] wcscat (in: _Dest=0x6a964a8, _Source="WSSTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" [0220.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a964a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0220.758] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d3ec00, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2d3ec00, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VSS", cAlternateFileName="")) returned 1 [0220.758] wcscmp (_String1="XFUNC_M.VSS", _String2=".") returned 1 [0220.758] wcscmp (_String1="XFUNC_M.VSS", _String2="..") returned 1 [0220.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a96548 [0220.758] wcscpy (in: _Dest=0x6a96548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.758] wcscat (in: _Dest=0x6a96548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.758] wcscat (in: _Dest=0x6a96548, _Source="XFUNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" [0220.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0220.760] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83139600, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83139600, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VST", cAlternateFileName="")) returned 1 [0220.760] wcscmp (_String1="XFUNC_M.VST", _String2=".") returned 1 [0220.760] wcscmp (_String1="XFUNC_M.VST", _String2="..") returned 1 [0220.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a965e8 [0220.760] wcscpy (in: _Dest=0x6a965e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.760] wcscat (in: _Dest=0x6a965e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.760] wcscat (in: _Dest=0x6a965e8, _Source="XFUNC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" [0220.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a965e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0220.951] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9aa0200, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9aa0200, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VSS", cAlternateFileName="")) returned 1 [0220.951] wcscmp (_String1="XFUNC_U.VSS", _String2=".") returned 1 [0220.951] wcscmp (_String1="XFUNC_U.VSS", _String2="..") returned 1 [0220.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a96688 [0220.952] wcscpy (in: _Dest=0x6a96688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.952] wcscat (in: _Dest=0x6a96688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.952] wcscat (in: _Dest=0x6a96688, _Source="XFUNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" [0221.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0221.009] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 1 [0221.009] wcscmp (_String1="XFUNC_U.VST", _String2=".") returned 1 [0221.009] wcscmp (_String1="XFUNC_U.VST", _String2="..") returned 1 [0221.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x6a96728 [0221.009] wcscpy (in: _Dest=0x6a96728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.009] wcscat (in: _Dest=0x6a96728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.009] wcscat (in: _Dest=0x6a96728, _Source="XFUNC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" [0221.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a96728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0221.011] FindNextFileW (in: hFindFile=0x3f1ef00, lpFindFileData=0x66c1138 | out: lpFindFileData=0x66c1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 0 [0221.011] FindClose (in: hFindFile=0x3f1ef00 | out: hFindFile=0x3f1ef00) returned 1 [0221.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1138) returned 1 [0221.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 [0221.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 4993 os_tid = 0x1a14 [0177.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest")) returned 0x20 [0177.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest", dwFileAttributes=0x20) returned 0 [0177.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.851] GetLastError () returned 0x5 [0177.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest", dwFileAttributes=0x20) returned 0 [0177.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 4994 os_tid = 0x1a18 [0177.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc")) returned 0x20 [0177.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc", dwFileAttributes=0x20) returned 0 [0177.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.852] GetLastError () returned 0x5 [0177.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc", dwFileAttributes=0x20) returned 0 [0177.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 4995 os_tid = 0x1a1c [0177.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest")) returned 0x20 [0180.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest", dwFileAttributes=0x20) returned 0 [0180.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.232] GetLastError () returned 0x5 [0180.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest", dwFileAttributes=0x20) returned 0 [0180.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 4996 os_tid = 0x1a20 [0177.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv")) returned 0x20 [0180.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv", dwFileAttributes=0x20) returned 0 [0180.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.243] GetLastError () returned 0x5 [0180.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv", dwFileAttributes=0x20) returned 0 [0180.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 Thread: id = 4997 os_tid = 0x1b34 [0177.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml")) returned 0x20 [0179.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML", dwFileAttributes=0x20) returned 0 [0179.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.923] GetLastError () returned 0x5 [0179.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML", dwFileAttributes=0x20) returned 0 [0179.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 Thread: id = 4998 os_tid = 0x1a24 [0177.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml")) returned 0x20 [0180.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML", dwFileAttributes=0x20) returned 0 [0180.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.241] GetLastError () returned 0x5 [0180.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML", dwFileAttributes=0x20) returned 0 [0180.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 Thread: id = 4999 os_tid = 0x1a28 [0177.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml")) returned 0x20 [0180.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML", dwFileAttributes=0x20) returned 0 [0180.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.239] GetLastError () returned 0x5 [0180.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML", dwFileAttributes=0x20) returned 0 [0180.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 Thread: id = 5000 os_tid = 0x1b3c [0177.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f1da30 [0177.858] wcscpy (in: _Dest=0x3f1da30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" [0177.858] wcscat (in: _Dest=0x3f1da30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\" [0177.858] wcscat (in: _Dest=0x3f1da30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*" [0177.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0177.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0180.237] wcscmp (_String1=".", _String2=".") returned 0 [0180.237] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.237] wcscmp (_String1="..", _String2=".") returned 1 [0180.238] wcscmp (_String1="..", _String2="..") returned 0 [0180.238] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.238] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0180.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0180.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0180.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 5001 os_tid = 0xa60 [0177.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl")) returned 0x20 [0180.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0180.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.236] GetLastError () returned 0x5 [0180.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0180.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 Thread: id = 5002 os_tid = 0x1b44 [0177.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp")) returned 0x20 [0180.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0180.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.234] GetLastError () returned 0x5 [0180.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0180.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 Thread: id = 5003 os_tid = 0x1a2c [0177.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 0x2020 [0179.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", dwFileAttributes=0x20) returned 1 [0183.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2108 [0183.819] GetFileSizeEx (in: hFile=0x2108, lpFileSize=0xcf3fb5c | out: lpFileSize=0xcf3fb5c*=380) returned 1 [0183.819] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.819] ReadFile (in: hFile=0x2108, lpBuffer=0xcf3fb38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcf3fb48, lpOverlapped=0x0 | out: lpBuffer=0xcf3fb38*, lpNumberOfBytesRead=0xcf3fb48*=0x4, lpOverlapped=0x0) returned 1 [0183.821] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0183.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0183.821] NtQuerySystemTime (in: CurrentTime=0xcf3fad0 | out: CurrentTime=0xcf3fad0*=132482710922940000) returned 0x0 [0183.821] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x4bbdf506 [0183.821] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x14e2ffe5 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0xced91 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x5b422481 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0xaa374ac [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x65e388ab [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x12a1ad5 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x59abdaa [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x5c8c8956 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x17d80f32 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x62c21c65 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x31de0e5f [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x37a2439 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x4e076fc0 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x3dada5b6 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x2ba761ff [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x76e33b56 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x68db8905 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x171131e1 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x7317f3c0 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x2149ee7c [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x518dc9a [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x6d7dae20 [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x525f39be [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0xb268edc [0183.822] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x2a9296df [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x7e855c6d [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x60210500 [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x83a7149 [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x55aaa79f [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x220cf854 [0183.823] RtlRandomEx (in: Seed=0xcf3fac8 | out: Seed=0xcf3fac8) returned 0x5c0a1225 [0183.832] ReadFile (in: hFile=0x2108, lpBuffer=0x69acd48, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0xcf3fac4, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesRead=0xcf3fac4*=0x17c, lpOverlapped=0x0) returned 1 [0183.832] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.832] WriteFile (in: hFile=0x2108, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0xcf3fac8, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xcf3fac8*=0x17c, lpOverlapped=0x0) returned 1 [0184.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0184.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0184.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0184.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0184.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0184.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0184.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a288) returned 1 [0184.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3ef5ba0 [0184.426] SetFilePointerEx (in: hFile=0x2108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.426] WriteFile (in: hFile=0x2108, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xcf3fb50, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0xcf3fb50*=0x106, lpOverlapped=0x0) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0185.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0185.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0185.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e359c0 [0185.407] wcscpy (in: _Dest=0x3e359c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" [0185.407] wcscat (in: _Dest=0x3e359c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.ac3a86" [0185.407] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.ac3a86", NtPathName=0xcf3fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5830 [0186.706] FlushFileBuffers (hFile=0x2108) returned 1 [0188.474] CloseHandle (hObject=0x2108) returned 1 [0188.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36520 [0188.775] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0188.775] wcscat (in: _Dest=0x3e36520, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" [0188.775] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\ac3a86-readme.txt")) returned 0xffffffff [0188.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd14 [0188.856] WriteFile (in: hFile=0xd14, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcf3fae4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcf3fae4*=0x8b9, lpOverlapped=0x0) returned 1 [0188.862] CloseHandle (hObject=0xd14) returned 1 [0188.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 [0188.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf148) returned 1 Thread: id = 5004 os_tid = 0x51c [0177.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 0x2020 [0178.996] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", dwFileAttributes=0x20) returned 1 [0182.799] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22ac [0182.799] GetFileSizeEx (in: hFile=0x22ac, lpFileSize=0xd09fdd4 | out: lpFileSize=0xd09fdd4*=16) returned 1 [0182.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0182.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0182.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0182.799] NtQuerySystemTime (in: CurrentTime=0xd09fd48 | out: CurrentTime=0xd09fd48*=132482710912800000) returned 0x0 [0182.799] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x663a33c1 [0182.799] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x526b7c41 [0182.799] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x55ad18ae [0182.799] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x110e8ecb [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x4127d6f9 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x50438481 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x75c44070 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x70d8078 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x7f10b1f6 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x6afb4b4 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x388be590 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x6206eac3 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x2cec7375 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x200b5333 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x178d2919 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x51214095 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x58131bfe [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x629db9c [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x48d8ab24 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x4cf9f57b [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x4d4cdc2e [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x1a9f8008 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0xe5a009c [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x7bcce2be [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x6b32e238 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x18a77e6b [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x494ca440 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x6c22912e [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x2674f21e [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x29e8c990 [0182.800] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x1e9376d5 [0182.801] RtlRandomEx (in: Seed=0xd09fd40 | out: Seed=0xd09fd40) returned 0x3e6d2a2b [0182.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0182.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0182.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0182.809] ReadFile (in: hFile=0x22ac, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xd09fd3c, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xd09fd3c*=0x10, lpOverlapped=0x0) returned 1 [0182.811] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.811] WriteFile (in: hFile=0x22ac, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xd09fd40, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0xd09fd40*=0x10, lpOverlapped=0x0) returned 1 [0183.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0183.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0183.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0183.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0183.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0183.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0183.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823368) returned 1 [0183.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4bf0 [0183.587] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.587] WriteFile (in: hFile=0x22ac, lpBuffer=0x3d45710*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd09fdc8, lpOverlapped=0x0 | out: lpBuffer=0x3d45710*, lpNumberOfBytesWritten=0xd09fdc8*=0x100, lpOverlapped=0x0) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45710) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0184.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa60) returned 1 [0184.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f5e8 [0184.381] wcscpy (in: _Dest=0x682f5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" [0184.382] wcscat (in: _Dest=0x682f5e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.ac3a86" [0184.382] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.ac3a86", NtPathName=0xd09fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5590 [0186.711] FlushFileBuffers (hFile=0x22ac) returned 1 [0188.510] CloseHandle (hObject=0x22ac) returned 1 [0188.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e35750 [0188.810] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0188.810] wcscat (in: _Dest=0x3e35750, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" [0188.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\ac3a86-readme.txt")) returned 0x2020 [0188.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 [0188.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 5005 os_tid = 0xd90 [0177.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock")) returned 0x2020 [0178.997] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x20) returned 1 [0183.749] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f0 [0183.750] GetFileSizeEx (in: hFile=0x21f0, lpFileSize=0xccef8fc | out: lpFileSize=0xccef8fc*=0) returned 1 [0183.750] FlushFileBuffers (hFile=0x21f0) returned 1 [0185.087] CloseHandle (hObject=0x21f0) returned 1 [0185.087] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x2020) returned 1 [0186.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3280) returned 1 Thread: id = 5006 os_tid = 0x88c [0177.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 0x2020 [0179.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", dwFileAttributes=0x20) returned 1 [0183.834] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2104 [0183.834] GetFileSizeEx (in: hFile=0x2104, lpFileSize=0xca2fb44 | out: lpFileSize=0xca2fb44*=141) returned 1 [0183.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0183.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0183.835] NtQuerySystemTime (in: CurrentTime=0xca2fab8 | out: CurrentTime=0xca2fab8*=132482710923096000) returned 0x0 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x619f5040 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x3b6737a7 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x25764fd4 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x2953c6a7 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x186a4ea2 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x7069cec0 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x722e52d8 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x4288ee8e [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0xa48ee3e [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x69f76474 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x188f7634 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x61a917af [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x78194aaf [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x70332ea2 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x60204668 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x7a003689 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x77971e00 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x6d91f70e [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x12b3dfe5 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x1a01fe6f [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x2d733f80 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x1ed24ad1 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x42d1b083 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x3893d901 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x2f19e9bd [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x7be8d47d [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0xe41b2ff [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x221c5568 [0183.835] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x168113f5 [0183.836] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x77616853 [0183.836] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x5ceefff4 [0183.836] RtlRandomEx (in: Seed=0xca2fab0 | out: Seed=0xca2fab0) returned 0x4de588bd [0183.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0183.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0183.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0183.846] ReadFile (in: hFile=0x2104, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0xca2faac, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0xca2faac*=0x8d, lpOverlapped=0x0) returned 1 [0183.849] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.849] WriteFile (in: hFile=0x2104, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0xca2fab0, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xca2fab0*=0x8d, lpOverlapped=0x0) returned 1 [0184.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0184.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0184.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0184.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0184.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0184.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0184.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b170) returned 1 [0184.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3f1e6e0 [0184.427] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.427] WriteFile (in: hFile=0x2104, lpBuffer=0x3e18170*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xca2fb38, lpOverlapped=0x0 | out: lpBuffer=0x3e18170*, lpNumberOfBytesWritten=0xca2fb38*=0xf8, lpOverlapped=0x0) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18170) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e6c0) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1e6e0) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0185.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0185.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0185.409] wcscpy (in: _Dest=0x333168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" [0185.409] wcscat (in: _Dest=0x333168, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.ac3a86" [0185.409] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.ac3a86", NtPathName=0xca2fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48808 [0186.701] FlushFileBuffers (hFile=0x2104) returned 1 [0188.474] CloseHandle (hObject=0x2104) returned 1 [0188.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36e10 [0188.778] wcscpy (in: _Dest=0x3e36e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0188.778] wcscat (in: _Dest=0x3e36e10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" [0188.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\ac3a86-readme.txt")) returned 0x2020 [0188.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36e10) returned 1 [0188.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2410) returned 1 Thread: id = 5007 os_tid = 0x910 [0177.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 0x2020 [0178.997] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0183.751] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1324 [0183.751] GetFileSizeEx (in: hFile=0x1324, lpFileSize=0xd04fb5c | out: lpFileSize=0xd04fb5c*=41) returned 1 [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0183.751] NtQuerySystemTime (in: CurrentTime=0xd04fad0 | out: CurrentTime=0xd04fad0*=132482710922316000) returned 0x0 [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x7f174b91 [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x43aaffe8 [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x18af638c [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x23f1898e [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x181c0800 [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x3fd80b26 [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x4b1b3daa [0183.751] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x4cf0d28c [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0xaf3b4f9 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x6f4be204 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x21292a18 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x1b26a9dd [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x45d56da4 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x6e3b1bcf [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x7bd3d1e4 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x5b772a68 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x2c570427 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x58d9bd25 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x3749f44a [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x3275e55f [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x3bd2668b [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x73f8fd69 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x2ef570e4 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x2d051374 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x7999322f [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x29362b3 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x17c7ee6a [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x45e9b018 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x4d29c174 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x4d6e20b5 [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x7ea0ec3b [0183.752] RtlRandomEx (in: Seed=0xd04fac8 | out: Seed=0xd04fac8) returned 0x19ca1a82 [0183.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0183.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0183.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699a120 [0183.815] ReadFile (in: hFile=0x1324, lpBuffer=0x699dd28, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xd04fac4, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0xd04fac4*=0x29, lpOverlapped=0x0) returned 1 [0183.817] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.817] WriteFile (in: hFile=0x1324, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xd04fac8, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0xd04fac8*=0x29, lpOverlapped=0x0) returned 1 [0184.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0184.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0184.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0184.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0184.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0184.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0184.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e50) returned 1 [0184.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19a48 [0184.424] SetFilePointerEx (in: hFile=0x1324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.425] WriteFile (in: hFile=0x1324, lpBuffer=0x30bba48*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xd04fb50, lpOverlapped=0x0 | out: lpBuffer=0x30bba48*, lpNumberOfBytesWritten=0xd04fb50*=0x110, lpOverlapped=0x0) returned 1 [0185.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0185.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0185.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48730 [0185.404] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" [0185.404] wcscat (in: _Dest=0x3e48730, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.ac3a86" [0185.404] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.ac3a86", NtPathName=0xd04fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8fe8 [0186.703] FlushFileBuffers (hFile=0x1324) returned 1 [0188.474] CloseHandle (hObject=0x1324) returned 1 [0188.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e35f70 [0188.779] wcscpy (in: _Dest=0x3e35f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0188.779] wcscat (in: _Dest=0x3e35f70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" [0188.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\ac3a86-readme.txt")) returned 0x2020 [0188.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35f70) returned 1 [0188.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e8a0) returned 1 Thread: id = 5008 os_tid = 0x920 [0177.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor")) returned 0x20 [0177.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0177.875] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.876] GetLastError () returned 0x5 [0177.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0177.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3ac0) returned 1 Thread: id = 5009 os_tid = 0x950 [0177.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp")) returned 0x20 [0177.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0177.877] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.877] GetLastError () returned 0x5 [0177.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0177.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d00) returned 1 Thread: id = 5010 os_tid = 0xdf8 [0177.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld")) returned 0x20 [0177.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0177.879] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.879] GetLastError () returned 0x5 [0177.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0177.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3120) returned 1 Thread: id = 5011 os_tid = 0x960 [0177.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor")) returned 0x20 [0177.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0177.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.880] GetLastError () returned 0x5 [0177.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0177.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea26d0) returned 1 Thread: id = 5012 os_tid = 0xde8 [0177.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb")) returned 0x20 [0177.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0177.882] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.882] GetLastError () returned 0x5 [0177.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0177.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2e60) returned 1 Thread: id = 5013 os_tid = 0xbf4 [0177.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo")) returned 0x20 [0177.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0177.884] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.884] GetLastError () returned 0x5 [0177.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0177.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2150) returned 1 Thread: id = 5014 os_tid = 0x1160 [0177.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve")) returned 0x20 [0177.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0177.885] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.885] GetLastError () returned 0x5 [0177.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0177.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33e0) returned 1 Thread: id = 5015 os_tid = 0x1168 [0177.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol")) returned 0x20 [0177.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0177.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.892] GetLastError () returned 0x5 [0177.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0177.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 5016 os_tid = 0x8ac [0177.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol")) returned 0x20 [0177.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0177.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.896] GetLastError () returned 0x5 [0177.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0177.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 5017 os_tid = 0x8bc [0177.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol")) returned 0x20 [0177.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0177.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.897] GetLastError () returned 0x5 [0177.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0177.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 5018 os_tid = 0x1aac [0177.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol")) returned 0x20 [0177.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0177.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.899] GetLastError () returned 0x5 [0177.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0177.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 5019 os_tid = 0x1ab0 [0177.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol")) returned 0x20 [0177.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0177.900] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.900] GetLastError () returned 0x5 [0177.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0177.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 5020 os_tid = 0x1720 [0177.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol")) returned 0x20 [0177.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0177.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.902] GetLastError () returned 0x5 [0177.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0177.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 5021 os_tid = 0x1724 [0177.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol")) returned 0x20 [0177.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0177.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.908] GetLastError () returned 0x5 [0177.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0177.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 5022 os_tid = 0x1ab4 [0177.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol")) returned 0x20 [0178.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0178.751] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.751] GetLastError () returned 0x5 [0178.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0178.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 5023 os_tid = 0x1b90 [0177.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol")) returned 0x20 [0178.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0178.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.752] GetLastError () returned 0x5 [0178.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0178.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 5024 os_tid = 0x1ab8 [0177.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol")) returned 0x20 [0178.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0178.539] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.539] GetLastError () returned 0x5 [0178.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0178.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 5025 os_tid = 0x1728 [0177.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol")) returned 0x20 [0178.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0178.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.538] GetLastError () returned 0x5 [0178.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0178.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 5026 os_tid = 0x1b98 [0177.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol")) returned 0x20 [0178.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0178.536] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.536] GetLastError () returned 0x5 [0178.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0178.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc9d8) returned 1 Thread: id = 5027 os_tid = 0x1b9c [0177.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol")) returned 0x20 [0178.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0178.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.766] GetLastError () returned 0x5 [0178.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0178.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 5028 os_tid = 0x172c [0177.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol")) returned 0x20 [0178.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0178.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.764] GetLastError () returned 0x5 [0178.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0178.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 5029 os_tid = 0x1148 [0177.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol")) returned 0x20 [0178.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0178.763] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.763] GetLastError () returned 0x5 [0178.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0178.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 5030 os_tid = 0x1730 [0177.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol")) returned 0x20 [0178.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0178.761] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.761] GetLastError () returned 0x5 [0178.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0178.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 5031 os_tid = 0x1abc [0177.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol")) returned 0x20 [0178.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0178.760] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.760] GetLastError () returned 0x5 [0178.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0178.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 5032 os_tid = 0x1ac0 [0177.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol")) returned 0x20 [0178.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0178.758] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.759] GetLastError () returned 0x5 [0178.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0178.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 5033 os_tid = 0x1734 [0177.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol")) returned 0x20 [0178.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0178.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.757] GetLastError () returned 0x5 [0178.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0178.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 5034 os_tid = 0x1738 [0177.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc288 [0177.922] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0177.922] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0177.923] wcscat (in: _Dest=0x66dc288, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*" [0177.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0177.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0178.757] wcscmp (_String1=".", _String2=".") returned 0 [0178.757] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.757] wcscmp (_String1="..", _String2=".") returned 1 [0178.757] wcscmp (_String1="..", _String2="..") returned 0 [0178.757] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x94c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0178.757] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0178.757] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0178.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e030 [0178.757] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0178.757] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0178.757] wcscat (in: _Dest=0x697e030, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" [0179.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0179.391] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0179.391] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0179.391] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0179.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e960 [0179.391] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0179.391] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0179.391] wcscat (in: _Dest=0x697e960, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" [0179.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0179.393] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0179.393] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0179.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0179.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 [0179.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 5035 os_tid = 0x1ac8 [0177.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol")) returned 0x20 [0178.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0178.755] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.756] GetLastError () returned 0x5 [0178.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0178.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 5036 os_tid = 0xdf4 [0177.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol")) returned 0x20 [0178.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0178.754] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.754] GetLastError () returned 0x5 [0178.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0178.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 5037 os_tid = 0xe2c [0177.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol")) returned 0x20 [0178.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0178.753] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.753] GetLastError () returned 0x5 [0178.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0178.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 5038 os_tid = 0x1acc [0177.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld")) returned 0x20 [0177.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0177.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.925] GetLastError () returned 0x5 [0177.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0177.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 5039 os_tid = 0xff4 [0177.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld")) returned 0x20 [0177.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0177.926] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.927] GetLastError () returned 0x5 [0177.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0177.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 5040 os_tid = 0xe28 [0177.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld")) returned 0x20 [0177.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0177.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.928] GetLastError () returned 0x5 [0177.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0177.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 5041 os_tid = 0x1788 [0177.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld")) returned 0x20 [0177.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0177.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.930] GetLastError () returned 0x5 [0177.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0177.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 Thread: id = 5042 os_tid = 0x17c8 [0177.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld")) returned 0x20 [0177.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0177.931] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.931] GetLastError () returned 0x5 [0177.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0177.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 5043 os_tid = 0x1ad0 [0177.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld")) returned 0x20 [0177.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0177.933] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.933] GetLastError () returned 0x5 [0177.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0177.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 5044 os_tid = 0x1ad4 [0177.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld")) returned 0x20 [0177.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0177.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.934] GetLastError () returned 0x5 [0177.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0177.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 5045 os_tid = 0x1ad8 [0177.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld")) returned 0x20 [0177.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0177.936] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.936] GetLastError () returned 0x5 [0177.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0177.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 5046 os_tid = 0x1adc [0177.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld")) returned 0x20 [0178.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0178.770] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.770] GetLastError () returned 0x5 [0178.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0178.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 5047 os_tid = 0x1ae0 [0177.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld")) returned 0x20 [0178.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0178.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.768] GetLastError () returned 0x5 [0178.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0178.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 5048 os_tid = 0x1ae4 [0177.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld")) returned 0x20 [0179.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0179.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.012] GetLastError () returned 0x5 [0179.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0179.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a00) returned 1 Thread: id = 5049 os_tid = 0x1ae8 [0177.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld")) returned 0x20 [0179.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0179.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.011] GetLastError () returned 0x5 [0179.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0179.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 5050 os_tid = 0x1aec [0177.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld")) returned 0x20 [0179.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0179.010] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.011] GetLastError () returned 0x5 [0179.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0179.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 5051 os_tid = 0x1af8 [0177.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld")) returned 0x20 [0179.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0179.010] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.010] GetLastError () returned 0x5 [0179.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0179.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcdc8) returned 1 Thread: id = 5052 os_tid = 0x1afc [0177.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld")) returned 0x20 [0179.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0179.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.009] GetLastError () returned 0x5 [0179.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0179.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 5053 os_tid = 0x1bbc [0177.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld")) returned 0x20 [0179.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0179.008] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.008] GetLastError () returned 0x5 [0179.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0179.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc678) returned 1 Thread: id = 5054 os_tid = 0x1bc0 [0177.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld")) returned 0x20 [0179.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0179.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.007] GetLastError () returned 0x5 [0179.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0179.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 5055 os_tid = 0x1b00 [0177.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld")) returned 0x20 [0179.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0179.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.007] GetLastError () returned 0x5 [0179.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0179.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcd38) returned 1 Thread: id = 5056 os_tid = 0x1bc8 [0177.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld")) returned 0x20 [0179.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0179.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.006] GetLastError () returned 0x5 [0179.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0179.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc948) returned 1 Thread: id = 5057 os_tid = 0x1bcc [0177.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dc438 [0177.942] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0177.942] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0177.942] wcscat (in: _Dest=0x66dc438, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*" [0177.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0177.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0179.005] wcscmp (_String1=".", _String2=".") returned 0 [0179.005] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.005] wcscmp (_String1="..", _String2=".") returned 1 [0179.005] wcscmp (_String1="..", _String2="..") returned 0 [0179.005] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x924e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0179.005] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0179.005] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0179.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697dee0 [0179.005] wcscpy (in: _Dest=0x697dee0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0179.005] wcscat (in: _Dest=0x697dee0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0179.005] wcscat (in: _Dest=0x697dee0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" [0180.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697dee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0180.335] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0180.335] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0180.335] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0180.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697de38 [0180.336] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0180.336] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0180.336] wcscat (in: _Dest=0x697de38, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" [0180.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0180.337] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0180.337] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0180.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0180.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 [0180.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 5058 os_tid = 0x1b04 [0177.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld")) returned 0x20 [0179.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0179.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.003] GetLastError () returned 0x5 [0179.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0179.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd008) returned 1 Thread: id = 5059 os_tid = 0x1b08 [0178.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld")) returned 0x20 [0178.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0178.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.769] GetLastError () returned 0x5 [0178.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0178.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 5060 os_tid = 0x1b0c [0178.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj")) returned 0x20 [0178.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0178.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.144] GetLastError () returned 0x5 [0178.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0178.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 5061 os_tid = 0x1bd0 [0178.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj")) returned 0x20 [0178.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0178.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.146] GetLastError () returned 0x5 [0178.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0178.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 5062 os_tid = 0x1bd4 [0178.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid")) returned 0x20 [0178.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0178.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.148] GetLastError () returned 0x5 [0178.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0178.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 5063 os_tid = 0x1bd8 [0178.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host")) returned 0x20 [0178.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0178.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.150] GetLastError () returned 0x5 [0178.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0178.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 5064 os_tid = 0x1bdc [0178.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac")) returned 0x20 [0178.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0178.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.154] GetLastError () returned 0x5 [0178.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0178.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 5065 os_tid = 0x1be0 [0178.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2")) returned 0x20 [0178.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0178.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.156] GetLastError () returned 0x5 [0178.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0178.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 Thread: id = 5066 os_tid = 0x1be4 [0178.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0")) returned 0x20 [0178.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0178.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.159] GetLastError () returned 0x5 [0178.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0178.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 5067 os_tid = 0x1be8 [0178.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1")) returned 0x20 [0178.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0178.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.161] GetLastError () returned 0x5 [0178.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0178.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 5068 os_tid = 0x11a8 [0178.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2")) returned 0x20 [0178.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0178.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.163] GetLastError () returned 0x5 [0178.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0178.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 5069 os_tid = 0x1bec [0178.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid")) returned 0x20 [0180.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0180.167] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.168] GetLastError () returned 0x5 [0180.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0180.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 5070 os_tid = 0x1bf0 [0178.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host")) returned 0x20 [0180.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0180.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.176] GetLastError () returned 0x5 [0180.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0180.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 5071 os_tid = 0x1bf4 [0178.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac")) returned 0x20 [0180.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0180.178] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.178] GetLastError () returned 0x5 [0180.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0180.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 5072 os_tid = 0x1bf8 [0178.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc")) returned 0x20 [0180.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0180.179] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.179] GetLastError () returned 0x5 [0180.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0180.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 5073 os_tid = 0x1bfc [0178.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc")) returned 0x20 [0180.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0180.180] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.181] GetLastError () returned 0x5 [0180.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0180.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 5074 os_tid = 0x1c00 [0178.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2")) returned 0x20 [0180.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0180.186] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.186] GetLastError () returned 0x5 [0180.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0180.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 5075 os_tid = 0x1c04 [0178.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h")) returned 0x20 [0180.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0180.184] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.185] GetLastError () returned 0x5 [0180.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0180.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 Thread: id = 5076 os_tid = 0x1c08 [0178.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2")) returned 0x20 [0180.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0180.183] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.183] GetLastError () returned 0x5 [0180.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0180.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b1b8) returned 1 Thread: id = 5077 os_tid = 0x1c0c [0178.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c")) returned 0x20 [0180.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0180.182] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.182] GetLastError () returned 0x5 [0180.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0180.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 Thread: id = 5078 os_tid = 0x1c10 [0178.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v")) returned 0x20 [0180.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0180.190] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.190] GetLastError () returned 0x5 [0180.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0180.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 Thread: id = 5079 os_tid = 0x1c14 [0178.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h")) returned 0x20 [0180.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0180.188] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.189] GetLastError () returned 0x5 [0180.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0180.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 Thread: id = 5080 os_tid = 0x1c18 [0178.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v")) returned 0x20 [0180.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0180.187] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.187] GetLastError () returned 0x5 [0180.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0180.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ae38) returned 1 Thread: id = 5081 os_tid = 0x1c1c [0178.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8ef8 [0178.178] wcscpy (in: _Dest=0x3ea8ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0178.179] wcscat (in: _Dest=0x3ea8ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0178.179] wcscat (in: _Dest=0x3ea8ef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*" [0178.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0178.179] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0179.844] wcscmp (_String1=".", _String2=".") returned 0 [0179.844] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.844] wcscmp (_String1="..", _String2=".") returned 1 [0179.844] wcscmp (_String1="..", _String2="..") returned 0 [0179.844] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe561c600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0179.844] wcscmp (_String1="128.png", _String2=".") returned 1 [0179.844] wcscmp (_String1="128.png", _String2="..") returned 1 [0179.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e16970 [0179.844] wcscpy (in: _Dest=0x3e16970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0179.844] wcscat (in: _Dest=0x3e16970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0179.844] wcscat (in: _Dest=0x3e16970, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0180.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e16970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0180.523] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5935d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5935d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0180.523] wcscmp (_String1="contentscript_bin_prod.js", _String2=".") returned 1 [0180.523] wcscmp (_String1="contentscript_bin_prod.js", _String2="..") returned 1 [0180.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d553a0 [0180.524] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.524] wcscat (in: _Dest=0x3d553a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.524] wcscat (in: _Dest=0x3d553a0, _Source="contentscript_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" [0180.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d553a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0180.525] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe593d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe593d280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0180.525] wcscmp (_String1="dasherSettingSchema.json", _String2=".") returned 1 [0180.525] wcscmp (_String1="dasherSettingSchema.json", _String2="..") returned 1 [0180.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d55968 [0180.525] wcscpy (in: _Dest=0x3d55968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.525] wcscat (in: _Dest=0x3d55968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.525] wcscat (in: _Dest=0x3d55968, _Source="dasherSettingSchema.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" [0180.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0180.526] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe59420a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59420a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0180.526] wcscmp (_String1="eventpage_bin_prod.js", _String2=".") returned 1 [0180.526] wcscmp (_String1="eventpage_bin_prod.js", _String2="..") returned 1 [0180.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec2b0 [0180.526] wcscpy (in: _Dest=0x3dec2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.526] wcscat (in: _Dest=0x3dec2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.526] wcscat (in: _Dest=0x3dec2b0, _Source="eventpage_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" [0180.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0180.527] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59495d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c67b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0180.527] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0180.527] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0180.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2fad98 [0180.527] wcscpy (in: _Dest=0x2fad98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.527] wcscat (in: _Dest=0x2fad98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.528] wcscat (in: _Dest=0x2fad98, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" [0180.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fad98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0180.529] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe594e3f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe594e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0180.529] wcscmp (_String1="page_embed_script.js", _String2=".") returned 1 [0180.529] wcscmp (_String1="page_embed_script.js", _String2="..") returned 1 [0180.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0180.529] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.529] wcscat (in: _Dest=0x3deca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.529] wcscat (in: _Dest=0x3deca58, _Source="page_embed_script.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" [0180.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3deca58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0180.530] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0180.530] wcscmp (_String1="_locales", _String2=".") returned 1 [0180.530] wcscmp (_String1="_locales", _String2="..") returned 1 [0180.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17070 [0180.530] wcscpy (in: _Dest=0x3e17070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.530] wcscat (in: _Dest=0x3e17070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.530] wcscat (in: _Dest=0x3e17070, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0 [0180.531] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0180.531] wcscmp (_String1="_metadata", _String2=".") returned 1 [0180.531] wcscmp (_String1="_metadata", _String2="..") returned 1 [0180.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15770 [0180.531] wcscpy (in: _Dest=0x3e15770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0180.531] wcscat (in: _Dest=0x3e15770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0180.531] wcscat (in: _Dest=0x3e15770, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0180.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0180.532] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0180.532] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0180.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0180.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8ef8) returned 1 [0180.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea81d8) returned 1 Thread: id = 5082 os_tid = 0x1b10 [0178.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h")) returned 0x20 [0179.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0179.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.855] GetLastError () returned 0x5 [0179.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0179.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ab38) returned 1 Thread: id = 5083 os_tid = 0x1b14 [0178.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2")) returned 0x20 [0180.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0180.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.191] GetLastError () returned 0x5 [0180.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0180.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 5084 os_tid = 0x1b18 [0178.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v")) returned 0x20 [0179.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0179.856] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.856] GetLastError () returned 0x5 [0179.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0179.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c6b8) returned 1 Thread: id = 5085 os_tid = 0x1b1c [0178.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml")) returned 0x20 [0178.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0178.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.572] GetLastError () returned 0x5 [0178.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0178.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 5086 os_tid = 0x1b20 [0178.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml")) returned 0x20 [0178.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0178.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.575] GetLastError () returned 0x5 [0178.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0178.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd128) returned 1 Thread: id = 5087 os_tid = 0x1b24 [0178.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml")) returned 0x20 [0178.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0178.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.576] GetLastError () returned 0x5 [0178.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0178.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbc58) returned 1 Thread: id = 5088 os_tid = 0x1b28 [0178.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml")) returned 0x20 [0178.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0178.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.578] GetLastError () returned 0x5 [0178.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0178.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 5089 os_tid = 0x1b2c [0178.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml")) returned 0x20 [0178.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0178.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.580] GetLastError () returned 0x5 [0178.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0178.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 5090 os_tid = 0x1b30 [0178.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml")) returned 0x20 [0178.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0178.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.775] GetLastError () returned 0x5 [0178.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0178.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 5091 os_tid = 0x1b38 [0178.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml")) returned 0x20 [0178.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0178.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.776] GetLastError () returned 0x5 [0178.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0178.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 5092 os_tid = 0x1428 [0178.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 0x20 [0178.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0178.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.583] GetLastError () returned 0x5 [0178.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0178.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011770) returned 1 Thread: id = 5093 os_tid = 0xb0c [0178.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 0x20 [0178.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0178.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.584] GetLastError () returned 0x5 [0178.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0178.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 5094 os_tid = 0x1b40 [0178.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js")) returned 0x20 [0178.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0178.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.586] GetLastError () returned 0x5 [0178.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0178.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea53d0) returned 1 Thread: id = 5095 os_tid = 0x1b48 [0178.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 0x20 [0178.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0178.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.587] GetLastError () returned 0x5 [0178.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0178.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea54b0) returned 1 Thread: id = 5096 os_tid = 0x1b4c [0178.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 0x20 [0183.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0183.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.396] GetLastError () returned 0x5 [0183.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0183.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5590) returned 1 Thread: id = 5097 os_tid = 0x1b50 [0178.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 0x20 [0183.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0183.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.054] GetLastError () returned 0x5 [0183.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0183.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5670) returned 1 Thread: id = 5098 os_tid = 0x1b54 [0178.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3e36e10 [0178.590] wcscpy (in: _Dest=0x3e36e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0178.590] wcscat (in: _Dest=0x3e36e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0178.590] wcscat (in: _Dest=0x3e36e10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*" [0178.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0178.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0183.471] wcscmp (_String1=".", _String2=".") returned 0 [0183.471] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.471] wcscmp (_String1="..", _String2=".") returned 1 [0183.471] wcscmp (_String1="..", _String2="..") returned 0 [0183.471] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1 [0183.471] wcscmp (_String1="Customer Support.fdt", _String2=".") returned 1 [0183.471] wcscmp (_String1="Customer Support.fdt", _String2="..") returned 1 [0183.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadc28 [0183.472] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0183.472] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0183.472] wcscat (in: _Dest=0x3dadc28, _Source="Customer Support.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" [0186.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0186.378] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1 [0186.379] wcscmp (_String1="Hardware Tracker.fdt", _String2=".") returned 1 [0186.379] wcscmp (_String1="Hardware Tracker.fdt", _String2="..") returned 1 [0186.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae1f8 [0186.379] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.379] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.379] wcscat (in: _Dest=0x3dae1f8, _Source="Hardware Tracker.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" [0186.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0186.380] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1 [0186.380] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2=".") returned 1 [0186.380] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2="..") returned 1 [0186.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bc998 [0186.380] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.380] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.380] wcscat (in: _Dest=0x30bc998, _Source="Hiring Requisition - Customized.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" [0186.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30bc998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0186.381] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1 [0186.381] wcscmp (_String1="Hiring Requisition.fdt", _String2=".") returned 1 [0186.381] wcscmp (_String1="Hiring Requisition.fdt", _String2="..") returned 1 [0186.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae008 [0186.381] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.381] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.381] wcscat (in: _Dest=0x3dae008, _Source="Hiring Requisition.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" [0186.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0186.382] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0186.382] wcscmp (_String1="POLICIES.FDT", _String2=".") returned 1 [0186.382] wcscmp (_String1="POLICIES.FDT", _String2="..") returned 1 [0186.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56af0 [0186.382] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.382] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.382] wcscat (in: _Dest=0x3d56af0, _Source="POLICIES.FDT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" [0186.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0186.437] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820aa150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1 [0186.437] wcscmp (_String1="Process Library.fdt", _String2=".") returned 1 [0186.437] wcscmp (_String1="Process Library.fdt", _String2="..") returned 1 [0186.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dade18 [0186.438] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.438] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.438] wcscat (in: _Dest=0x3dade18, _Source="Process Library.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" [0186.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0186.439] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1 [0186.439] wcscmp (_String1="Status Report.fdt", _String2=".") returned 1 [0186.439] wcscmp (_String1="Status Report.fdt", _String2="..") returned 1 [0186.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8fe8 [0186.439] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.439] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.439] wcscat (in: _Dest=0x3ea8fe8, _Source="Status Report.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" [0186.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0186.440] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1 [0186.440] wcscmp (_String1="Track Issues.fdt", _String2=".") returned 1 [0186.440] wcscmp (_String1="Track Issues.fdt", _String2="..") returned 1 [0186.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8868 [0186.440] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0186.440] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0186.440] wcscat (in: _Dest=0x3ea8868, _Source="Track Issues.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" [0186.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0186.442] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0 [0186.442] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0186.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0186.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36e10) returned 1 [0186.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 Thread: id = 5099 os_tid = 0x1b58 [0178.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm")) returned 0x20 [0181.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0182.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.775] GetLastError () returned 0x5 [0182.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0182.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5750) returned 1 Thread: id = 5100 os_tid = 0x1b5c [0178.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 0x20 [0183.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0183.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.412] GetLastError () returned 0x5 [0183.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0183.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 Thread: id = 5101 os_tid = 0x1b60 [0178.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0183.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0183.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.051] GetLastError () returned 0x5 [0183.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0183.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 5102 os_tid = 0x3f0 [0178.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 0x20 [0183.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0183.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.049] GetLastError () returned 0x5 [0183.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0183.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac708) returned 1 Thread: id = 5103 os_tid = 0x1b64 [0178.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 0x20 [0183.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0183.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.048] GetLastError () returned 0x5 [0183.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0183.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac7e0) returned 1 Thread: id = 5104 os_tid = 0x1b68 [0178.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 0x20 [0183.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0183.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.047] GetLastError () returned 0x5 [0183.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0183.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5830) returned 1 Thread: id = 5105 os_tid = 0x1b6c [0178.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js")) returned 0x20 [0183.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0183.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.420] GetLastError () returned 0x5 [0183.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0183.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 5106 os_tid = 0x1b70 [0178.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif")) returned 0x20 [0183.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0183.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.410] GetLastError () returned 0x5 [0183.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0183.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 Thread: id = 5107 os_tid = 0x1b74 [0178.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif")) returned 0x20 [0183.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0183.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.422] GetLastError () returned 0x5 [0183.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0183.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f5e8) returned 1 Thread: id = 5108 os_tid = 0x1b78 [0178.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif")) returned 0x20 [0183.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0183.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.423] GetLastError () returned 0x5 [0183.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0183.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 Thread: id = 5109 os_tid = 0x1b7c [0178.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js")) returned 0x20 [0183.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0183.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.408] GetLastError () returned 0x5 [0183.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0183.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 5110 os_tid = 0x1b80 [0178.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js")) returned 0x20 [0183.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0183.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.415] GetLastError () returned 0x5 [0183.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0183.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac8b8) returned 1 Thread: id = 5111 os_tid = 0x1b84 [0178.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js")) returned 0x20 [0183.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0183.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.413] GetLastError () returned 0x5 [0183.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0183.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e710) returned 1 Thread: id = 5112 os_tid = 0x125c [0178.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css")) returned 0x20 [0183.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0183.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.004] GetLastError () returned 0x5 [0183.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0183.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 5113 os_tid = 0x1b88 [0178.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js")) returned 0x20 [0181.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0182.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.387] GetLastError () returned 0x5 [0183.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0183.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 5114 os_tid = 0x1b8c [0178.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif")) returned 0x20 [0183.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0183.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.398] GetLastError () returned 0x5 [0183.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0183.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ddb0) returned 1 Thread: id = 5115 os_tid = 0x1b94 [0178.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js")) returned 0x20 [0183.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0183.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.391] GetLastError () returned 0x5 [0183.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0183.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036b00) returned 1 Thread: id = 5116 os_tid = 0x1260 [0178.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 0x20 [0183.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0183.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.392] GetLastError () returned 0x5 [0183.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0183.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac990) returned 1 Thread: id = 5117 os_tid = 0x1264 [0178.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 0x20 [0178.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0178.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.780] GetLastError () returned 0x5 [0178.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0178.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 Thread: id = 5118 os_tid = 0x1ba0 [0178.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 0x20 [0178.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0178.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.782] GetLastError () returned 0x5 [0178.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0178.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea54b0) returned 1 Thread: id = 5119 os_tid = 0x1268 [0178.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 0x20 [0180.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0180.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.158] GetLastError () returned 0x5 [0180.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0180.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 5120 os_tid = 0x126c [0178.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 0x20 [0180.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0180.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.159] GetLastError () returned 0x5 [0180.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0180.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea53d0) returned 1 Thread: id = 5121 os_tid = 0x1ba4 [0178.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 0x20 [0180.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.156] GetLastError () returned 0x5 [0180.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 5122 os_tid = 0x14f4 [0178.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 0x20 [0180.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0180.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.161] GetLastError () returned 0x5 [0180.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0180.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5910) returned 1 Thread: id = 5123 os_tid = 0x1ba8 [0178.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 0x20 [0180.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0180.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.155] GetLastError () returned 0x5 [0180.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0180.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea59f0) returned 1 Thread: id = 5124 os_tid = 0x1bac [0178.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 0x20 [0180.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0180.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.154] GetLastError () returned 0x5 [0180.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0180.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57400) returned 1 Thread: id = 5125 os_tid = 0x72c [0178.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 0x20 [0180.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.152] GetLastError () returned 0x5 [0180.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 5126 os_tid = 0x14f8 [0178.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 0x20 [0180.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0180.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.151] GetLastError () returned 0x5 [0180.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0180.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5ad0) returned 1 Thread: id = 5127 os_tid = 0x14fc [0178.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 0x20 [0180.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.150] GetLastError () returned 0x5 [0180.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0180.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 5128 os_tid = 0x1270 [0178.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 0x20 [0180.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0180.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.148] GetLastError () returned 0x5 [0180.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0180.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 5129 os_tid = 0x1500 [0178.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0180.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0180.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.147] GetLastError () returned 0x5 [0180.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0180.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8958) returned 1 Thread: id = 5130 os_tid = 0xb60 [0178.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js")) returned 0x20 [0180.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0180.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.145] GetLastError () returned 0x5 [0180.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0180.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 Thread: id = 5131 os_tid = 0x1bb0 [0178.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 0x20 [0180.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0180.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.144] GetLastError () returned 0x5 [0180.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0180.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5bb0) returned 1 Thread: id = 5132 os_tid = 0x1504 [0178.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif")) returned 0x20 [0180.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0180.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.142] GetLastError () returned 0x5 [0180.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0180.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f070) returned 1 Thread: id = 5133 os_tid = 0xb4c [0178.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif")) returned 0x20 [0180.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0180.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.141] GetLastError () returned 0x5 [0180.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0180.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 5134 os_tid = 0x1518 [0178.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js")) returned 0x20 [0180.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0180.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.140] GetLastError () returned 0x5 [0180.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0180.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 5135 os_tid = 0x151c [0178.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif")) returned 0x20 [0180.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0180.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.138] GetLastError () returned 0x5 [0180.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0180.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 5136 os_tid = 0x1530 [0178.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif")) returned 0x20 [0180.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0180.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.137] GetLastError () returned 0x5 [0180.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0180.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 Thread: id = 5137 os_tid = 0x714 [0178.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif")) returned 0x20 [0180.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0180.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.136] GetLastError () returned 0x5 [0180.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0180.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35d00) returned 1 Thread: id = 5138 os_tid = 0x155c [0178.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif")) returned 0x20 [0180.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0180.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.134] GetLastError () returned 0x5 [0180.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0180.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36c70) returned 1 Thread: id = 5139 os_tid = 0x1568 [0178.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif")) returned 0x20 [0180.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0180.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.133] GetLastError () returned 0x5 [0180.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0180.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abe98) returned 1 Thread: id = 5140 os_tid = 0x1bb4 [0178.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif")) returned 0x20 [0180.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.162] GetLastError () returned 0x5 [0180.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5c90) returned 1 Thread: id = 5141 os_tid = 0x156c [0178.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif")) returned 0x20 [0180.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0180.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.164] GetLastError () returned 0x5 [0180.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0180.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aca68) returned 1 Thread: id = 5142 os_tid = 0x1bb8 [0178.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif")) returned 0x20 [0180.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.165] GetLastError () returned 0x5 [0180.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5d70) returned 1 Thread: id = 5143 os_tid = 0x1570 [0178.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif")) returned 0x20 [0179.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0179.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.841] GetLastError () returned 0x5 [0179.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0179.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36d40) returned 1 Thread: id = 5144 os_tid = 0x1bc4 [0178.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif")) returned 0x20 [0180.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.127] GetLastError () returned 0x5 [0180.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ee0) returned 1 Thread: id = 5145 os_tid = 0x1274 [0178.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif")) returned 0x20 [0180.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0180.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.131] GetLastError () returned 0x5 [0180.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0180.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5146 os_tid = 0x1278 [0178.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js")) returned 0x20 [0180.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0180.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.130] GetLastError () returned 0x5 [0180.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0180.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e260) returned 1 Thread: id = 5147 os_tid = 0x12cc [0179.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js")) returned 0x20 [0180.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0180.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.128] GetLastError () returned 0x5 [0180.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0180.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acb40) returned 1 Thread: id = 5148 os_tid = 0xdec [0179.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos")) returned 0x20 [0179.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0179.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.029] GetLastError () returned 0x5 [0179.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0179.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 5149 os_tid = 0x1c20 [0179.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas")) returned 0x20 [0179.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0179.030] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.030] GetLastError () returned 0x5 [0179.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0179.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 5150 os_tid = 0x1c24 [0179.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos")) returned 0x20 [0181.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0181.919] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.294] GetLastError () returned 0x5 [0182.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0182.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d8b8) returned 1 Thread: id = 5151 os_tid = 0x1c28 [0179.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro")) returned 0x20 [0180.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0180.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.920] GetLastError () returned 0x5 [0181.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0181.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 5152 os_tid = 0x1c2c [0179.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen")) returned 0x20 [0181.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0181.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.292] GetLastError () returned 0x5 [0182.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0182.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 5153 os_tid = 0x1c30 [0179.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe")) returned 0x20 [0182.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0182.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.255] GetLastError () returned 0x5 [0182.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 5154 os_tid = 0x1c34 [0179.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives")) returned 0x20 [0182.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0182.254] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.254] GetLastError () returned 0x5 [0182.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0182.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 Thread: id = 5155 os_tid = 0xe30 [0179.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius")) returned 0x20 [0182.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0182.252] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.252] GetLastError () returned 0x5 [0182.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0182.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ed0) returned 1 Thread: id = 5156 os_tid = 0x1c38 [0179.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte")) returned 0x20 [0182.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0182.295] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.295] GetLastError () returned 0x5 [0182.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0182.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 Thread: id = 5157 os_tid = 0xf00 [0179.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion")) returned 0x20 [0182.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0182.297] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.297] GetLastError () returned 0x5 [0182.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 Thread: id = 5158 os_tid = 0x1c3c [0179.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr")) returned 0x20 [0179.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0179.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.039] GetLastError () returned 0x5 [0179.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0179.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 5159 os_tid = 0x704 [0179.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr")) returned 0x20 [0179.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0179.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.044] GetLastError () returned 0x5 [0179.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0179.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 5160 os_tid = 0xbe8 [0179.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr")) returned 0x20 [0179.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0179.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.045] GetLastError () returned 0x5 [0179.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0179.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 5161 os_tid = 0x1c40 [0179.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr")) returned 0x20 [0179.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0179.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.047] GetLastError () returned 0x5 [0179.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0179.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 5162 os_tid = 0xbb0 [0179.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr")) returned 0x20 [0179.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0179.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.049] GetLastError () returned 0x5 [0179.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0179.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 5163 os_tid = 0xc18 [0179.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr")) returned 0x20 [0179.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0179.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.050] GetLastError () returned 0x5 [0179.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0179.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 5164 os_tid = 0x710 [0179.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr")) returned 0x20 [0179.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0179.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.070] GetLastError () returned 0x5 [0179.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0179.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 5165 os_tid = 0x1c44 [0179.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr")) returned 0x20 [0179.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0179.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.584] GetLastError () returned 0x5 [0179.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0179.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 5166 os_tid = 0x1c48 [0179.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr")) returned 0x20 [0179.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0179.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.585] GetLastError () returned 0x5 [0179.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0179.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 5167 os_tid = 0x124 [0179.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr")) returned 0x20 [0179.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0179.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.127] GetLastError () returned 0x5 [0179.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0179.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 5168 os_tid = 0x1c4c [0179.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr")) returned 0x20 [0179.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0179.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.126] GetLastError () returned 0x5 [0179.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0179.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 5169 os_tid = 0x1c50 [0179.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr")) returned 0x20 [0179.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0179.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.125] GetLastError () returned 0x5 [0179.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0179.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 5170 os_tid = 0xc20 [0179.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr")) returned 0x20 [0179.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0179.138] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.138] GetLastError () returned 0x5 [0179.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0179.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 5171 os_tid = 0xc1c [0179.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr")) returned 0x20 [0179.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0179.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.137] GetLastError () returned 0x5 [0179.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0179.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 5172 os_tid = 0xbcc [0179.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr")) returned 0x20 [0179.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0179.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.136] GetLastError () returned 0x5 [0179.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0179.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 5173 os_tid = 0x1c54 [0179.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr")) returned 0x20 [0179.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0179.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.135] GetLastError () returned 0x5 [0179.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0179.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 5174 os_tid = 0xef0 [0179.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr")) returned 0x20 [0179.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0179.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.135] GetLastError () returned 0x5 [0179.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0179.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 5175 os_tid = 0x1c58 [0179.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr")) returned 0x20 [0179.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0179.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.134] GetLastError () returned 0x5 [0179.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0179.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 5176 os_tid = 0x1c5c [0179.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr")) returned 0x20 [0179.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0179.133] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.133] GetLastError () returned 0x5 [0179.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0179.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 5177 os_tid = 0x1c60 [0179.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x66dd2d8 [0179.085] wcscpy (in: _Dest=0x66dd2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0179.085] wcscat (in: _Dest=0x66dd2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0179.085] wcscat (in: _Dest=0x66dd2d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*" [0179.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0179.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0179.132] wcscmp (_String1=".", _String2=".") returned 0 [0179.132] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.132] wcscmp (_String1="..", _String2=".") returned 1 [0179.132] wcscmp (_String1="..", _String2="..") returned 0 [0179.132] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0179.132] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0179.132] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0179.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e570 [0179.132] wcscpy (in: _Dest=0x697e570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0179.132] wcscat (in: _Dest=0x697e570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0179.132] wcscat (in: _Dest=0x697e570, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" [0179.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0179.714] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0179.714] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0179.714] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0179.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697de38 [0179.714] wcscpy (in: _Dest=0x697de38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0179.714] wcscat (in: _Dest=0x697de38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0179.715] wcscat (in: _Dest=0x697de38, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" [0179.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697de38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0179.716] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0179.716] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0179.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0179.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 [0179.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd08) returned 1 Thread: id = 5178 os_tid = 0x1c64 [0179.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr")) returned 0x20 [0179.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0179.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.131] GetLastError () returned 0x5 [0179.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0179.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 5179 os_tid = 0x1c68 [0179.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr")) returned 0x20 [0179.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0179.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.131] GetLastError () returned 0x5 [0179.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0179.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 5180 os_tid = 0x1c6c [0179.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr")) returned 0x20 [0179.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0179.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.130] GetLastError () returned 0x5 [0179.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0179.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 5181 os_tid = 0x1c70 [0179.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif")) returned 0x20 [0180.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0180.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.714] GetLastError () returned 0x5 [0180.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0180.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 5182 os_tid = 0x1c74 [0179.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif")) returned 0x20 [0184.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0184.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.319] GetLastError () returned 0x5 [0184.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0184.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69581a8) returned 1 Thread: id = 5183 os_tid = 0x1c78 [0179.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif")) returned 0x20 [0184.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0184.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.318] GetLastError () returned 0x5 [0184.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0184.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958830) returned 1 Thread: id = 5184 os_tid = 0x994 [0179.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif")) returned 0x20 [0184.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0184.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.332] GetLastError () returned 0x5 [0184.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0184.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 5185 os_tid = 0x1c7c [0179.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif")) returned 0x20 [0180.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0180.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.709] GetLastError () returned 0x5 [0180.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0180.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 5186 os_tid = 0x1c84 [0179.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif")) returned 0x20 [0184.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0184.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.312] GetLastError () returned 0x5 [0184.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0184.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 5187 os_tid = 0x1c88 [0179.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif")) returned 0x20 [0184.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0184.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.313] GetLastError () returned 0x5 [0184.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0184.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959968) returned 1 Thread: id = 5188 os_tid = 0x1c8c [0179.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif")) returned 0x20 [0184.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0184.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.315] GetLastError () returned 0x5 [0184.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0184.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69597a0) returned 1 Thread: id = 5189 os_tid = 0x1c90 [0179.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif")) returned 0x20 [0184.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0184.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.316] GetLastError () returned 0x5 [0184.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0184.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959708) returned 1 Thread: id = 5190 os_tid = 0x1c94 [0179.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx")) returned 0x20 [0179.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0179.090] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.090] GetLastError () returned 0x5 [0179.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0179.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe08) returned 1 Thread: id = 5191 os_tid = 0x1c98 [0179.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex")) returned 0x20 [0179.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0179.093] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.093] GetLastError () returned 0x5 [0179.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0179.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8c8) returned 1 Thread: id = 5192 os_tid = 0x1c9c [0179.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths")) returned 0x20 [0179.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0179.094] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.095] GetLastError () returned 0x5 [0179.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0179.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 Thread: id = 5193 os_tid = 0x1ca0 [0179.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env")) returned 0x20 [0179.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0179.095] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.096] GetLastError () returned 0x5 [0179.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0179.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f6b0) returned 1 Thread: id = 5194 os_tid = 0x1d2c [0179.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca")) returned 0x20 [0179.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0179.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.097] GetLastError () returned 0x5 [0179.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0179.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 5195 os_tid = 0x1d30 [0179.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp")) returned 0x20 [0179.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0179.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.098] GetLastError () returned 0x5 [0179.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0179.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafec8) returned 1 Thread: id = 5196 os_tid = 0x1ca4 [0179.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp")) returned 0x20 [0179.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0179.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.099] GetLastError () returned 0x5 [0179.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0179.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e328) returned 1 Thread: id = 5197 os_tid = 0x15ec [0179.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx")) returned 0x20 [0179.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0179.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.100] GetLastError () returned 0x5 [0179.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0179.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 5198 os_tid = 0x15f0 [0179.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths")) returned 0x20 [0179.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0179.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.106] GetLastError () returned 0x5 [0179.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0179.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0048) returned 1 Thread: id = 5199 os_tid = 0x1ca8 [0179.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp")) returned 0x20 [0179.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0179.107] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.107] GetLastError () returned 0x5 [0179.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0179.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafb08) returned 1 Thread: id = 5200 os_tid = 0x1cac [0179.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx")) returned 0x20 [0179.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0179.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.108] GetLastError () returned 0x5 [0179.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0179.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf688) returned 1 Thread: id = 5201 os_tid = 0x7c8 [0179.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env")) returned 0x20 [0179.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0179.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.112] GetLastError () returned 0x5 [0179.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0179.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 5202 os_tid = 0x570 [0179.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp")) returned 0x20 [0179.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0179.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.144] GetLastError () returned 0x5 [0179.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0179.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf5c8) returned 1 Thread: id = 5203 os_tid = 0x1cb0 [0179.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex")) returned 0x20 [0179.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0179.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.145] GetLastError () returned 0x5 [0179.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0179.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 5204 os_tid = 0x1cb4 [0179.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx")) returned 0x20 [0179.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0179.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.146] GetLastError () returned 0x5 [0179.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0179.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf508) returned 1 Thread: id = 5205 os_tid = 0x1cb8 [0179.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env")) returned 0x20 [0179.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0179.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.147] GetLastError () returned 0x5 [0179.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0179.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ec88) returned 1 Thread: id = 5206 os_tid = 0x1cbc [0179.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp")) returned 0x20 [0179.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0179.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.143] GetLastError () returned 0x5 [0179.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0179.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf448) returned 1 Thread: id = 5207 os_tid = 0x1d3c [0179.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx")) returned 0x20 [0179.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0179.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.156] GetLastError () returned 0x5 [0179.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0179.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf748) returned 1 Thread: id = 5208 os_tid = 0x1cc0 [0179.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex")) returned 0x20 [0179.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0179.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.155] GetLastError () returned 0x5 [0179.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0179.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf808) returned 1 Thread: id = 5209 os_tid = 0x15f8 [0179.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env")) returned 0x20 [0179.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0179.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.154] GetLastError () returned 0x5 [0179.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0179.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e580) returned 1 Thread: id = 5210 os_tid = 0x1cc4 [0179.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca")) returned 0x20 [0179.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0179.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.153] GetLastError () returned 0x5 [0179.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0179.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 5211 os_tid = 0xab8 [0179.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp")) returned 0x20 [0179.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0179.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.152] GetLastError () returned 0x5 [0179.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0179.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db01c8) returned 1 Thread: id = 5212 os_tid = 0xa90 [0179.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp")) returned 0x20 [0179.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0179.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.150] GetLastError () returned 0x5 [0179.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0179.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0288) returned 1 Thread: id = 5213 os_tid = 0x370 [0179.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx")) returned 0x20 [0179.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0179.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.149] GetLastError () returned 0x5 [0179.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0179.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0348) returned 1 Thread: id = 5214 os_tid = 0x15c [0179.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths")) returned 0x20 [0179.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0179.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.149] GetLastError () returned 0x5 [0179.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0179.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0408) returned 1 Thread: id = 5215 os_tid = 0x2a8 [0179.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca")) returned 0x20 [0179.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0179.142] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.143] GetLastError () returned 0x5 [0179.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0179.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db04c8) returned 1 Thread: id = 5216 os_tid = 0x2ac [0179.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp")) returned 0x20 [0179.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0179.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.157] GetLastError () returned 0x5 [0179.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0179.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0588) returned 1 Thread: id = 5217 os_tid = 0x130 [0179.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp")) returned 0x20 [0179.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0179.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.148] GetLastError () returned 0x5 [0179.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0179.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682efa8) returned 1 Thread: id = 5218 os_tid = 0x1d74 [0179.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx")) returned 0x20 [0179.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0179.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.156] GetLastError () returned 0x5 [0179.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0179.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0648) returned 1 Thread: id = 5219 os_tid = 0x1d78 [0179.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca")) returned 0x20 [0180.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0180.915] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.915] GetLastError () returned 0x5 [0180.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0180.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0708) returned 1 Thread: id = 5220 os_tid = 0x1d7c [0179.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp")) returned 0x20 [0180.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0180.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.905] GetLastError () returned 0x5 [0180.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0180.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0588) returned 1 Thread: id = 5221 os_tid = 0x1d80 [0179.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp")) returned 0x20 [0180.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0180.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.448] GetLastError () returned 0x5 [0180.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0180.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e580) returned 1 Thread: id = 5222 os_tid = 0x1d84 [0179.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx")) returned 0x20 [0180.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0180.911] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.912] GetLastError () returned 0x5 [0180.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0180.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0648) returned 1 Thread: id = 5223 os_tid = 0x1d88 [0179.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths")) returned 0x20 [0180.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0180.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.913] GetLastError () returned 0x5 [0180.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0180.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf748) returned 1 Thread: id = 5224 os_tid = 0x1d8c [0179.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca")) returned 0x20 [0180.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0180.909] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.909] GetLastError () returned 0x5 [0180.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0180.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf808) returned 1 Thread: id = 5225 os_tid = 0x1d90 [0179.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp")) returned 0x20 [0180.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0180.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.907] GetLastError () returned 0x5 [0180.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0180.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 5226 os_tid = 0x1d94 [0179.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx")) returned 0x20 [0179.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.589] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.589] GetLastError () returned 0x5 [0179.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5cd58) returned 1 Thread: id = 5227 os_tid = 0x1668 [0179.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx")) returned 0x20 [0179.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.590] GetLastError () returned 0x5 [0179.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 5228 os_tid = 0x1d98 [0179.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8688 [0179.591] wcscpy (in: _Dest=0x3ea8688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0179.591] wcscat (in: _Dest=0x3ea8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0179.591] wcscat (in: _Dest=0x3ea8688, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*" [0179.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0179.592] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0179.872] wcscmp (_String1=".", _String2=".") returned 0 [0179.872] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.872] wcscmp (_String1="..", _String2=".") returned 1 [0179.872] wcscmp (_String1="..", _String2="..") returned 0 [0179.872] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c6ad30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0179.872] wcscmp (_String1="128.png", _String2=".") returned 1 [0179.872] wcscmp (_String1="128.png", _String2="..") returned 1 [0179.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e16870 [0179.872] wcscpy (in: _Dest=0x3e16870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0179.872] wcscat (in: _Dest=0x3e16870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0179.872] wcscat (in: _Dest=0x3e16870, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0182.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e16870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0182.564] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c63800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e4bc80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fd74a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0182.564] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0182.564] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0182.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fafa8 [0182.564] wcscpy (in: _Dest=0x2fafa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.564] wcscat (in: _Dest=0x2fafa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.564] wcscat (in: _Dest=0x2fafa8, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" [0182.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fafa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0182.565] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0182.565] wcscmp (_String1="_locales", _String2=".") returned 1 [0182.565] wcscmp (_String1="_locales", _String2="..") returned 1 [0182.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15770 [0182.565] wcscpy (in: _Dest=0x3e15770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.565] wcscat (in: _Dest=0x3e15770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.565] wcscat (in: _Dest=0x3e15770, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0182.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0182.566] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0182.566] wcscmp (_String1="_metadata", _String2=".") returned 1 [0182.566] wcscmp (_String1="_metadata", _String2="..") returned 1 [0182.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17870 [0182.566] wcscpy (in: _Dest=0x3e17870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.566] wcscat (in: _Dest=0x3e17870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.566] wcscat (in: _Dest=0x3e17870, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0182.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0182.568] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0182.568] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0182.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0182.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8688) returned 1 [0182.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8e08) returned 1 Thread: id = 5229 os_tid = 0x1d9c [0179.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea84a8 [0179.595] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0179.595] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0179.595] wcscat (in: _Dest=0x3ea84a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*" [0179.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0179.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0179.864] wcscmp (_String1=".", _String2=".") returned 0 [0179.864] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.864] wcscmp (_String1="..", _String2=".") returned 1 [0179.864] wcscmp (_String1="..", _String2="..") returned 0 [0179.864] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0179.864] wcscmp (_String1="128.png", _String2=".") returned 1 [0179.864] wcscmp (_String1="128.png", _String2="..") returned 1 [0179.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e15870 [0179.864] wcscpy (in: _Dest=0x3e15870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0179.864] wcscat (in: _Dest=0x3e15870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0179.864] wcscat (in: _Dest=0x3e15870, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0180.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0180.607] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0180.607] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0180.607] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0180.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f96e8 [0180.607] wcscpy (in: _Dest=0x2f96e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0180.607] wcscat (in: _Dest=0x2f96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0180.607] wcscat (in: _Dest=0x2f96e8, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" [0180.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2f96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0180.608] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0180.608] wcscmp (_String1="_locales", _String2=".") returned 1 [0180.608] wcscmp (_String1="_locales", _String2="..") returned 1 [0180.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e15470 [0180.608] wcscpy (in: _Dest=0x3e15470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0180.608] wcscat (in: _Dest=0x3e15470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0180.608] wcscat (in: _Dest=0x3e15470, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0180.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0180.609] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0180.609] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0180.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0180.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 [0180.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 5230 os_tid = 0x1ccc [0179.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x379a40 [0179.596] wcscpy (in: _Dest=0x379a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0179.596] wcscat (in: _Dest=0x379a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0179.596] wcscat (in: _Dest=0x379a40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*" [0179.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0179.596] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0179.870] wcscmp (_String1=".", _String2=".") returned 0 [0179.870] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.870] wcscmp (_String1="..", _String2=".") returned 1 [0179.870] wcscmp (_String1="..", _String2="..") returned 0 [0179.870] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x170c, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0179.870] wcscmp (_String1="128.png", _String2=".") returned 1 [0179.870] wcscmp (_String1="128.png", _String2="..") returned 1 [0179.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dada38 [0179.870] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0179.870] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0179.870] wcscat (in: _Dest=0x3dada38, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0180.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0180.669] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bf9290, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0180.669] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0180.669] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0180.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f9a00 [0180.669] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0180.669] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0180.669] wcscat (in: _Dest=0x2f9a00, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" [0180.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2f9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0180.670] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0180.670] wcscmp (_String1="_locales", _String2=".") returned 1 [0180.671] wcscmp (_String1="_locales", _String2="..") returned 1 [0180.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadf10 [0180.671] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0180.671] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0180.671] wcscat (in: _Dest=0x3dadf10, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0180.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0180.672] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0180.672] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0180.672] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0180.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae008 [0180.672] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0180.672] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0180.672] wcscat (in: _Dest=0x3dae008, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0180.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0180.674] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0180.674] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0180.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0180.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x379a40) returned 1 [0180.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 5231 os_tid = 0x1da0 [0179.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x379950 [0179.597] wcscpy (in: _Dest=0x379950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0179.597] wcscat (in: _Dest=0x379950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0179.597] wcscat (in: _Dest=0x379950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*" [0179.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0179.597] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0180.847] wcscmp (_String1=".", _String2=".") returned 0 [0180.847] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.847] wcscmp (_String1="..", _String2=".") returned 1 [0180.847] wcscmp (_String1="..", _String2="..") returned 0 [0180.847] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6870c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.847] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.847] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e15670 [0180.847] wcscpy (in: _Dest=0x3e15670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0180.847] wcscat (in: _Dest=0x3e15670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0180.847] wcscat (in: _Dest=0x3e15670, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0181.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0181.762] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe686be00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b484c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.762] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.762] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3edc410 [0181.762] wcscpy (in: _Dest=0x3edc410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.762] wcscat (in: _Dest=0x3edc410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.762] wcscat (in: _Dest=0x3edc410, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" [0181.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edc410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0181.764] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.764] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.764] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17570 [0181.764] wcscpy (in: _Dest=0x3e17570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.764] wcscat (in: _Dest=0x3e17570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.764] wcscat (in: _Dest=0x3e17570, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0181.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0181.766] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0181.766] wcscmp (_String1="_metadata", _String2=".") returned 1 [0181.766] wcscmp (_String1="_metadata", _String2="..") returned 1 [0181.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17670 [0181.766] wcscpy (in: _Dest=0x3e17670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.766] wcscat (in: _Dest=0x3e17670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.766] wcscat (in: _Dest=0x3e17670, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0181.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0181.767] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0181.768] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0181.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0181.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x379950) returned 1 [0181.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 5232 os_tid = 0x1da4 [0179.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif")) returned 0x20 [0180.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0180.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.449] GetLastError () returned 0x5 [0180.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0180.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac630) returned 1 Thread: id = 5233 os_tid = 0x1da8 [0179.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif")) returned 0x20 [0180.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.201] GetLastError () returned 0x5 [0180.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0180.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4db0) returned 1 Thread: id = 5234 os_tid = 0x1dac [0179.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif")) returned 0x20 [0180.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0180.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.200] GetLastError () returned 0x5 [0180.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0180.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 Thread: id = 5235 os_tid = 0x1db0 [0179.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif")) returned 0x20 [0180.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0180.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.197] GetLastError () returned 0x5 [0180.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0180.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36790) returned 1 Thread: id = 5236 os_tid = 0x1cd0 [0179.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif")) returned 0x20 [0180.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.466] GetLastError () returned 0x5 [0180.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0180.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37220) returned 1 Thread: id = 5237 os_tid = 0x1678 [0179.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif")) returned 0x20 [0180.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0180.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.464] GetLastError () returned 0x5 [0180.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0180.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 5238 os_tid = 0x1cd4 [0179.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif")) returned 0x20 [0180.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0180.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.462] GetLastError () returned 0x5 [0180.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0180.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 5239 os_tid = 0xa00 [0179.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif")) returned 0x20 [0180.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0180.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.460] GetLastError () returned 0x5 [0180.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0180.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db01c8) returned 1 Thread: id = 5240 os_tid = 0x80c [0179.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js")) returned 0x20 [0180.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0180.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.459] GetLastError () returned 0x5 [0180.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0180.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682efa8) returned 1 Thread: id = 5241 os_tid = 0x1640 [0179.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js")) returned 0x20 [0180.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0180.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.457] GetLastError () returned 0x5 [0180.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0180.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 5242 os_tid = 0x1dd0 [0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js")) returned 0x20 [0180.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js", dwFileAttributes=0x20) returned 0 [0180.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.455] GetLastError () returned 0x5 [0180.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js", dwFileAttributes=0x20) returned 0 [0180.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e372f0) returned 1 Thread: id = 5243 os_tid = 0x1644 [0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js")) returned 0x20 [0180.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0180.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.453] GetLastError () returned 0x5 [0180.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0180.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0288) returned 1 Thread: id = 5244 os_tid = 0x1654 [0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg")) returned 0x20 [0180.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0180.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.451] GetLastError () returned 0x5 [0180.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0180.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4b10) returned 1 Thread: id = 5245 os_tid = 0xa74 [0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka")) returned 0x20 [0181.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0181.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.706] GetLastError () returned 0x5 [0181.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0181.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 5246 os_tid = 0x1cd8 [0179.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili")) returned 0x20 [0181.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0181.682] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.682] GetLastError () returned 0x5 [0181.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0181.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 5247 os_tid = 0xa84 [0179.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai")) returned 0x20 [0181.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0181.684] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.684] GetLastError () returned 0x5 [0181.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0181.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 5248 os_tid = 0xb08 [0179.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe")) returned 0x20 [0181.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0181.680] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.680] GetLastError () returned 0x5 [0181.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0181.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 5249 os_tid = 0x1044 [0179.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza")) returned 0x20 [0180.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0180.711] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.711] GetLastError () returned 0x5 [0180.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0180.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 Thread: id = 5250 os_tid = 0x1658 [0179.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin")) returned 0x20 [0181.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0181.704] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.704] GetLastError () returned 0x5 [0181.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0181.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 5251 os_tid = 0x1cdc [0179.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron")) returned 0x20 [0181.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0181.703] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.703] GetLastError () returned 0x5 [0181.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0181.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 5252 os_tid = 0x1ce0 [0179.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong")) returned 0x20 [0181.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0181.701] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.701] GetLastError () returned 0x5 [0181.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0181.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 5253 os_tid = 0x165c [0179.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd")) returned 0x20 [0181.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0181.700] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.700] GetLastError () returned 0x5 [0181.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0181.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 5254 os_tid = 0x1ce4 [0179.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh")) returned 0x20 [0181.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0181.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.698] GetLastError () returned 0x5 [0181.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0181.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 5255 os_tid = 0x1ce8 [0179.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk")) returned 0x20 [0181.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0181.697] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.697] GetLastError () returned 0x5 [0181.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0181.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 5256 os_tid = 0x1cec [0179.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta")) returned 0x20 [0181.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0181.695] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.695] GetLastError () returned 0x5 [0181.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0181.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 5257 os_tid = 0x1cf0 [0179.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura")) returned 0x20 [0181.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0181.693] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.694] GetLastError () returned 0x5 [0181.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0181.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 5258 os_tid = 0x1cf4 [0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem")) returned 0x20 [0181.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0181.692] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.692] GetLastError () returned 0x5 [0181.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0181.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 5259 os_tid = 0x1cf8 [0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul")) returned 0x20 [0181.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0181.690] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.691] GetLastError () returned 0x5 [0181.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0181.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 5260 os_tid = 0x1cfc [0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka")) returned 0x20 [0181.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0181.689] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.689] GetLastError () returned 0x5 [0181.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0181.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29c60) returned 1 Thread: id = 5261 os_tid = 0x1d00 [0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi")) returned 0x20 [0181.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0181.687] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.687] GetLastError () returned 0x5 [0181.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0181.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 5262 os_tid = 0x1d04 [0179.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar")) returned 0x20 [0181.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0181.685] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.685] GetLastError () returned 0x5 [0181.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0181.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 5263 os_tid = 0x1d08 [0179.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0179.609] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0179.609] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0179.609] wcscat (in: _Dest=0x3dadc28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*" [0179.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0179.609] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0181.711] wcscmp (_String1=".", _String2=".") returned 0 [0181.711] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.711] wcscmp (_String1="..", _String2=".") returned 1 [0181.711] wcscmp (_String1="..", _String2="..") returned 0 [0181.711] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce09b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1 [0181.711] wcscmp (_String1="craw_background.js", _String2=".") returned 1 [0181.711] wcscmp (_String1="craw_background.js", _String2="..") returned 1 [0181.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec710 [0181.711] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.711] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.712] wcscat (in: _Dest=0x3dec710, _Source="craw_background.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" [0182.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0182.913] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e38d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1 [0182.914] wcscmp (_String1="craw_window.js", _String2=".") returned 1 [0182.914] wcscmp (_String1="craw_window.js", _String2="..") returned 1 [0182.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec080 [0182.914] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.914] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.914] wcscat (in: _Dest=0x3dec080, _Source="craw_window.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" [0182.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0182.915] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0182.915] wcscmp (_String1="css", _String2=".") returned 1 [0182.915] wcscmp (_String1="css", _String2="..") returned 1 [0182.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e17a70 [0182.915] wcscpy (in: _Dest=0x3e17a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.915] wcscat (in: _Dest=0x3e17a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.915] wcscat (in: _Dest=0x3e17a70, _Source="css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0182.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0182.916] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1 [0182.916] wcscmp (_String1="html", _String2=".") returned 1 [0182.916] wcscmp (_String1="html", _String2="..") returned 1 [0182.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17b70 [0182.916] wcscpy (in: _Dest=0x3e17b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.916] wcscat (in: _Dest=0x3e17b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.916] wcscat (in: _Dest=0x3e17b70, _Source="html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0182.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0182.917] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0182.917] wcscmp (_String1="images", _String2=".") returned 1 [0182.917] wcscmp (_String1="images", _String2="..") returned 1 [0182.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17c70 [0182.918] wcscpy (in: _Dest=0x3e17c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.918] wcscat (in: _Dest=0x3e17c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.918] wcscat (in: _Dest=0x3e17c70, _Source="images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0182.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0182.919] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f4cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe540a970, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0182.919] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0182.919] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0182.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec198 [0182.919] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.919] wcscat (in: _Dest=0x3dec198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.919] wcscat (in: _Dest=0x3dec198, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" [0182.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dec198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0182.920] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0182.920] wcscmp (_String1="_locales", _String2=".") returned 1 [0182.920] wcscmp (_String1="_locales", _String2="..") returned 1 [0182.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3edc728 [0182.920] wcscpy (in: _Dest=0x3edc728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.920] wcscat (in: _Dest=0x3edc728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.920] wcscat (in: _Dest=0x3edc728, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0182.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0182.921] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0182.921] wcscmp (_String1="_metadata", _String2=".") returned 1 [0182.921] wcscmp (_String1="_metadata", _String2="..") returned 1 [0182.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3edc830 [0182.921] wcscpy (in: _Dest=0x3edc830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0182.921] wcscat (in: _Dest=0x3edc830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0182.921] wcscat (in: _Dest=0x3edc830, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0182.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0182.923] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0182.923] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0182.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0182.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 [0182.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 5264 os_tid = 0x1d0c [0179.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 0x20 [0179.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0179.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.614] GetLastError () returned 0x5 [0179.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0179.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 5265 os_tid = 0x1d10 [0179.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 0x20 [0179.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.616] GetLastError () returned 0x5 [0179.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0179.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 Thread: id = 5266 os_tid = 0x1d14 [0179.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 0x20 [0179.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.618] GetLastError () returned 0x5 [0179.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0179.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4250) returned 1 Thread: id = 5267 os_tid = 0x1d18 [0179.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 0x20 [0179.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.619] GetLastError () returned 0x5 [0179.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0179.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abf70) returned 1 Thread: id = 5268 os_tid = 0x1d1c [0179.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js")) returned 0x20 [0179.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.621] GetLastError () returned 0x5 [0179.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0179.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4bf0) returned 1 Thread: id = 5269 os_tid = 0x1d20 [0179.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 0x20 [0182.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0182.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.362] GetLastError () returned 0x5 [0182.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0182.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a30) returned 1 Thread: id = 5270 os_tid = 0x1d24 [0179.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 0x20 [0182.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0182.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.282] GetLastError () returned 0x5 [0182.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0182.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea54b0) returned 1 Thread: id = 5271 os_tid = 0x1d28 [0179.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 0x20 [0182.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0182.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.354] GetLastError () returned 0x5 [0182.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0182.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5210) returned 1 Thread: id = 5272 os_tid = 0x1d34 [0179.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 0x20 [0182.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0182.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.382] GetLastError () returned 0x5 [0182.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0182.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 5273 os_tid = 0x1d38 [0179.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 0x20 [0182.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0182.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.381] GetLastError () returned 0x5 [0182.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0182.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4cd0) returned 1 Thread: id = 5274 os_tid = 0x300 [0179.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36520 [0179.625] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0179.625] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0179.625] wcscat (in: _Dest=0x3e36520, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*" [0179.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0179.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0182.789] wcscmp (_String1=".", _String2=".") returned 0 [0182.789] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.124] wcscmp (_String1="..", _String2=".") returned 1 [0183.124] wcscmp (_String1="..", _String2="..") returned 0 [0183.124] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0183.124] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0183.124] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0183.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5670 [0183.124] wcscpy (in: _Dest=0x3ea5670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0183.124] wcscat (in: _Dest=0x3ea5670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0183.125] wcscat (in: _Dest=0x3ea5670, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" [0185.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0185.502] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0185.503] wcscmp (_String1="Americana", _String2=".") returned 1 [0185.503] wcscmp (_String1="Americana", _String2="..") returned 1 [0185.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5e50 [0185.503] wcscpy (in: _Dest=0x3ea5e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.503] wcscat (in: _Dest=0x3ea5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.503] wcscat (in: _Dest=0x3ea5e50, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0185.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0185.504] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0185.504] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0185.504] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0185.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d575d0 [0185.504] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.504] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.504] wcscat (in: _Dest=0x3d575d0, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" [0185.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d575d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0185.506] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0185.506] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0185.506] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0185.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e484a8 [0185.506] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.506] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.506] wcscat (in: _Dest=0x3e484a8, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0185.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e484a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0185.507] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0185.507] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0185.507] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0185.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4e90 [0185.507] wcscpy (in: _Dest=0x3ea4e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.507] wcscat (in: _Dest=0x3ea4e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.507] wcscat (in: _Dest=0x3ea4e90, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" [0185.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0185.509] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0185.509] wcscmp (_String1="Biscay", _String2=".") returned 1 [0185.509] wcscmp (_String1="Biscay", _String2="..") returned 1 [0185.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0185.509] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.509] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.509] wcscat (in: _Dest=0x3e48a90, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0185.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e48a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0185.510] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0185.510] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0185.510] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0185.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5750 [0185.510] wcscpy (in: _Dest=0x3ea5750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.511] wcscat (in: _Dest=0x3ea5750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.511] wcscat (in: _Dest=0x3ea5750, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" [0185.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0185.512] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0185.512] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0185.512] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0185.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea52f0 [0185.512] wcscpy (in: _Dest=0x3ea52f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.512] wcscat (in: _Dest=0x3ea52f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.512] wcscat (in: _Dest=0x3ea52f0, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0185.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea52f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0185.513] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0185.513] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0185.513] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0185.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56920 [0185.514] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.514] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.514] wcscat (in: _Dest=0x3d56920, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" [0185.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0185.515] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0185.515] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0185.515] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0185.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea4870 [0185.515] wcscpy (in: _Dest=0x3ea4870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.515] wcscat (in: _Dest=0x3ea4870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.515] wcscat (in: _Dest=0x3ea4870, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0185.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea4870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0185.516] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0185.517] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0185.517] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0185.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56838 [0185.517] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.517] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.517] wcscat (in: _Dest=0x3d56838, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" [0185.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0185.518] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0185.518] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0185.518] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0185.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4b10 [0185.518] wcscpy (in: _Dest=0x3ea4b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.518] wcscat (in: _Dest=0x3ea4b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.518] wcscat (in: _Dest=0x3ea4b10, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" [0185.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0185.520] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0185.520] wcscmp (_String1="Country.css", _String2=".") returned 1 [0185.520] wcscmp (_String1="Country.css", _String2="..") returned 1 [0185.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea60f0 [0185.520] wcscpy (in: _Dest=0x3ea60f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.520] wcscat (in: _Dest=0x3ea60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.520] wcscat (in: _Dest=0x3ea60f0, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" [0185.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0185.521] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0185.521] wcscmp (_String1="Desert", _String2=".") returned 1 [0185.521] wcscmp (_String1="Desert", _String2="..") returned 1 [0185.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48b68 [0185.521] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.521] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.521] wcscat (in: _Dest=0x3e48b68, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0185.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e48b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0185.523] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0185.523] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0185.523] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0185.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea6010 [0185.523] wcscpy (in: _Dest=0x3ea6010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.523] wcscat (in: _Dest=0x3ea6010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.523] wcscat (in: _Dest=0x3ea6010, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" [0185.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea6010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0185.524] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8771a030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0185.524] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0185.524] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0185.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4cd0 [0185.524] wcscpy (in: _Dest=0x3ea4cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.524] wcscat (in: _Dest=0x3ea4cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.524] wcscat (in: _Dest=0x3ea4cd0, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" [0185.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0185.526] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0185.526] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0185.526] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0185.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea4950 [0185.526] wcscpy (in: _Dest=0x3ea4950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.526] wcscat (in: _Dest=0x3ea4950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.526] wcscat (in: _Dest=0x3ea4950, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0185.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea4950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0185.528] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0185.528] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0185.528] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0185.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56cc0 [0185.528] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.528] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.528] wcscat (in: _Dest=0x3d56cc0, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" [0185.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0185.529] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0185.530] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0185.530] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0185.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5f30 [0185.530] wcscpy (in: _Dest=0x3ea5f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.530] wcscat (in: _Dest=0x3ea5f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.530] wcscat (in: _Dest=0x3ea5f30, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" [0185.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0185.531] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0185.531] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0185.531] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0185.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56498 [0185.531] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.531] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.531] wcscat (in: _Dest=0x3d56498, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" [0185.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0185.533] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0185.533] wcscmp (_String1="Lime", _String2=".") returned 1 [0185.533] wcscmp (_String1="Lime", _String2="..") returned 1 [0185.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e35b60 [0185.533] wcscpy (in: _Dest=0x3e35b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.533] wcscat (in: _Dest=0x3e35b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.533] wcscat (in: _Dest=0x3e35b60, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0185.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e35b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0185.534] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0185.534] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0185.534] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0185.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e47578 [0185.534] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.534] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.534] wcscat (in: _Dest=0x3e47578, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" [0185.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e47578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0185.536] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0185.536] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0185.536] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0185.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea4a30 [0185.536] wcscpy (in: _Dest=0x3ea4a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.536] wcscat (in: _Dest=0x3ea4a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.536] wcscat (in: _Dest=0x3ea4a30, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" [0185.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea4a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0185.537] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0185.537] wcscmp (_String1="Oasis", _String2=".") returned 1 [0185.537] wcscmp (_String1="Oasis", _String2="..") returned 1 [0185.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e489b8 [0185.537] wcscpy (in: _Dest=0x3e489b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.537] wcscat (in: _Dest=0x3e489b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.538] wcscat (in: _Dest=0x3e489b8, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0185.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e489b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0185.540] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0185.540] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0185.540] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0185.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5210 [0185.540] wcscpy (in: _Dest=0x3ea5210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.540] wcscat (in: _Dest=0x3ea5210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.540] wcscat (in: _Dest=0x3ea5210, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" [0185.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0185.541] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0185.541] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0185.541] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0185.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56750 [0185.541] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.541] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.541] wcscat (in: _Dest=0x3d56750, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" [0185.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0185.811] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0185.811] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0185.811] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0185.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5d70 [0185.811] wcscpy (in: _Dest=0x3ea5d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0185.811] wcscat (in: _Dest=0x3ea5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0185.811] wcscat (in: _Dest=0x3ea5d70, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" [0188.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0188.614] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0188.614] wcscmp (_String1="Slate", _String2=".") returned 1 [0188.614] wcscmp (_String1="Slate", _String2="..") returned 1 [0188.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e48730 [0188.614] wcscpy (in: _Dest=0x3e48730, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.614] wcscat (in: _Dest=0x3e48730, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.614] wcscat (in: _Dest=0x3e48730, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0188.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e48730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0188.615] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0188.615] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0188.615] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0188.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5590 [0188.615] wcscpy (in: _Dest=0x3ea5590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.616] wcscat (in: _Dest=0x3ea5590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.616] wcscat (in: _Dest=0x3ea5590, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" [0188.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0188.617] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0188.617] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0188.617] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0188.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56838 [0188.617] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.617] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.617] wcscat (in: _Dest=0x3d56838, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" [0188.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0188.619] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0188.619] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0188.619] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0188.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48808 [0188.619] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.619] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.619] wcscat (in: _Dest=0x3e48808, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0188.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e48808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0188.620] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0188.620] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0188.620] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0188.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x3ea5c90 [0188.620] wcscpy (in: _Dest=0x3ea5c90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.620] wcscat (in: _Dest=0x3ea5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.620] wcscat (in: _Dest=0x3ea5c90, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" [0188.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0188.621] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0188.621] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0188.621] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0188.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5830 [0188.622] wcscpy (in: _Dest=0x3ea5830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.622] wcscat (in: _Dest=0x3ea5830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.622] wcscat (in: _Dest=0x3ea5830, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0188.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea5830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0188.623] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0188.623] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0188.623] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0188.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d577a0 [0188.623] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.623] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.623] wcscat (in: _Dest=0x3d577a0, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" [0188.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0188.624] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0188.624] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0188.624] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0188.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3011d58 [0188.624] wcscpy (in: _Dest=0x3011d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.624] wcscat (in: _Dest=0x3011d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.624] wcscat (in: _Dest=0x3011d58, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" [0188.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0188.625] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0188.625] wcscmp (_String1="STS2", _String2=".") returned 1 [0188.625] wcscmp (_String1="STS2", _String2="..") returned 1 [0188.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3e359c0 [0188.625] wcscpy (in: _Dest=0x3e359c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.625] wcscat (in: _Dest=0x3e359c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.625] wcscat (in: _Dest=0x3e359c0, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0188.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e359c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0188.627] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0188.627] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0188.627] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0188.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3011188 [0188.627] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.627] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.627] wcscat (in: _Dest=0x3011188, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" [0188.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0188.628] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0188.628] wcscmp (_String1="Swirl", _String2=".") returned 1 [0188.628] wcscmp (_String1="Swirl", _String2="..") returned 1 [0188.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x30126a0 [0188.628] wcscpy (in: _Dest=0x30126a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.628] wcscat (in: _Dest=0x30126a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.628] wcscat (in: _Dest=0x30126a0, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0188.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30126a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0188.629] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0188.629] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0188.629] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0188.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x3ea5910 [0188.629] wcscpy (in: _Dest=0x3ea5910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.629] wcscat (in: _Dest=0x3ea5910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.629] wcscat (in: _Dest=0x3ea5910, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" [0188.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea5910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0188.630] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0188.630] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0188.630] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0188.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x30120b8 [0188.630] wcscpy (in: _Dest=0x30120b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.631] wcscat (in: _Dest=0x30120b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.631] wcscat (in: _Dest=0x30120b8, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" [0188.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30120b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0188.632] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0188.632] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0188.632] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0188.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d574e8 [0188.632] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.632] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.632] wcscat (in: _Dest=0x3d574e8, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" [0188.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0188.633] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0188.633] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0188.633] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0188.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56668 [0188.633] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.633] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0188.633] wcscat (in: _Dest=0x3d56668, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" [0188.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0188.634] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0188.634] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0188.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0188.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 [0188.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ec88) returned 1 Thread: id = 5275 os_tid = 0x167c [0179.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm")) returned 0x20 [0182.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0182.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.378] GetLastError () returned 0x5 [0182.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0182.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4950) returned 1 Thread: id = 5276 os_tid = 0x1680 [0179.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 0x20 [0182.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0182.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.376] GetLastError () returned 0x5 [0182.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0182.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 5277 os_tid = 0x1684 [0179.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0182.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0182.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.375] GetLastError () returned 0x5 [0182.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0182.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 5278 os_tid = 0x1744 [0179.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 0x20 [0182.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0182.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.373] GetLastError () returned 0x5 [0182.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0182.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac048) returned 1 Thread: id = 5279 os_tid = 0x1748 [0179.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 0x20 [0182.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0182.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.372] GetLastError () returned 0x5 [0182.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0182.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5f30) returned 1 Thread: id = 5280 os_tid = 0x1768 [0179.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 0x20 [0182.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0182.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.367] GetLastError () returned 0x5 [0182.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0182.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac120) returned 1 Thread: id = 5281 os_tid = 0x1770 [0179.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js")) returned 0x20 [0182.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0182.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.365] GetLastError () returned 0x5 [0182.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0182.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f200) returned 1 Thread: id = 5282 os_tid = 0x1774 [0179.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif")) returned 0x20 [0182.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0182.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.358] GetLastError () returned 0x5 [0182.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0182.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f138) returned 1 Thread: id = 5283 os_tid = 0x17c4 [0179.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif")) returned 0x20 [0182.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0182.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.364] GetLastError () returned 0x5 [0182.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0182.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac1f8) returned 1 Thread: id = 5284 os_tid = 0x17f8 [0179.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js")) returned 0x20 [0180.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0180.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.927] GetLastError () returned 0x5 [0181.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0181.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac2d0) returned 1 Thread: id = 5285 os_tid = 0x5e8 [0179.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif")) returned 0x20 [0182.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0182.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.363] GetLastError () returned 0x5 [0182.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0182.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac3a8) returned 1 Thread: id = 5286 os_tid = 0x1d40 [0179.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif")) returned 0x20 [0182.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0182.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.391] GetLastError () returned 0x5 [0182.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0182.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac480) returned 1 Thread: id = 5287 os_tid = 0x4fc [0179.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif")) returned 0x20 [0182.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0182.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.359] GetLastError () returned 0x5 [0182.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0182.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e328) returned 1 Thread: id = 5288 os_tid = 0x1d44 [0179.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif")) returned 0x20 [0182.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0182.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.390] GetLastError () returned 0x5 [0182.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0182.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e373c0) returned 1 Thread: id = 5289 os_tid = 0x1d48 [0179.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif")) returned 0x20 [0182.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0182.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.388] GetLastError () returned 0x5 [0182.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0182.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37490) returned 1 Thread: id = 5290 os_tid = 0x40c [0179.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif")) returned 0x20 [0182.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0182.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.386] GetLastError () returned 0x5 [0182.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0182.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acc18) returned 1 Thread: id = 5291 os_tid = 0x1d4c [0179.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif")) returned 0x20 [0182.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0182.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.385] GetLastError () returned 0x5 [0182.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0182.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68accf0) returned 1 Thread: id = 5292 os_tid = 0x1d50 [0179.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif")) returned 0x20 [0182.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0182.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.384] GetLastError () returned 0x5 [0182.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0182.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6010) returned 1 Thread: id = 5293 os_tid = 0x1d54 [0179.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20 [0182.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0182.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.008] GetLastError () returned 0x5 [0182.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0182.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 5294 os_tid = 0x1d5c [0179.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20 [0181.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0181.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.937] GetLastError () returned 0x5 [0181.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0181.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eff28) returned 1 Thread: id = 5295 os_tid = 0x1d60 [0179.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20 [0181.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0181.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.946] GetLastError () returned 0x5 [0181.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0181.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 5296 os_tid = 0x1d64 [0179.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20 [0181.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0181.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.944] GetLastError () returned 0x5 [0181.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0181.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 5297 os_tid = 0x1d68 [0179.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20 [0181.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0181.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.943] GetLastError () returned 0x5 [0181.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0181.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 5298 os_tid = 0x1d6c [0179.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20 [0181.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0181.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.952] GetLastError () returned 0x5 [0181.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0181.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 5299 os_tid = 0x1d70 [0179.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20 [0181.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0181.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.942] GetLastError () returned 0x5 [0181.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0181.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 5300 os_tid = 0x1c4 [0179.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20 [0181.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0181.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.941] GetLastError () returned 0x5 [0181.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0181.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efc80) returned 1 Thread: id = 5301 os_tid = 0x168c [0179.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20 [0181.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0181.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.939] GetLastError () returned 0x5 [0181.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0181.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 5302 os_tid = 0x1db4 [0179.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20 [0181.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0181.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.938] GetLastError () returned 0x5 [0181.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0181.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 5303 os_tid = 0x1db8 [0179.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20 [0181.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0181.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.935] GetLastError () returned 0x5 [0181.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0181.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 5304 os_tid = 0x1dbc [0179.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20 [0181.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0181.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.951] GetLastError () returned 0x5 [0181.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0181.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 5305 os_tid = 0x1dc0 [0179.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20 [0181.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0181.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.949] GetLastError () returned 0x5 [0181.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0181.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 5306 os_tid = 0x1dc4 [0179.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20 [0181.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0181.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.964] GetLastError () returned 0x5 [0181.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0181.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f01d0) returned 1 Thread: id = 5307 os_tid = 0x1dc8 [0179.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20 [0182.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0182.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.006] GetLastError () returned 0x5 [0182.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0182.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 5308 os_tid = 0x1dd4 [0179.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20 [0181.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0181.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.962] GetLastError () returned 0x5 [0181.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0181.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 5309 os_tid = 0x1dd8 [0179.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20 [0182.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0182.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.005] GetLastError () returned 0x5 [0182.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0182.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26590) returned 1 Thread: id = 5310 os_tid = 0x1ddc [0179.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20 [0181.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0181.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.961] GetLastError () returned 0x5 [0181.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0181.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 5311 os_tid = 0x1de0 [0179.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20 [0182.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0182.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.003] GetLastError () returned 0x5 [0182.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0182.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 5312 os_tid = 0x1de4 [0179.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20 [0181.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0181.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.960] GetLastError () returned 0x5 [0181.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0181.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 5313 os_tid = 0x1de8 [0179.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20 [0181.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0181.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.958] GetLastError () returned 0x5 [0181.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0181.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 5314 os_tid = 0x1dec [0179.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20 [0182.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0182.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.002] GetLastError () returned 0x5 [0182.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0182.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27a48) returned 1 Thread: id = 5315 os_tid = 0x1df0 [0179.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20 [0182.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0182.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.000] GetLastError () returned 0x5 [0182.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0182.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 5316 os_tid = 0x1df4 [0179.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20 [0181.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0181.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.957] GetLastError () returned 0x5 [0181.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0181.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 5317 os_tid = 0x1df8 [0179.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20 [0181.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0181.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.956] GetLastError () returned 0x5 [0181.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0181.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 5318 os_tid = 0x1dfc [0179.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20 [0181.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0181.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.999] GetLastError () returned 0x5 [0181.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0181.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 5319 os_tid = 0x1e00 [0179.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20 [0181.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0181.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.997] GetLastError () returned 0x5 [0181.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0181.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 5320 os_tid = 0x1e04 [0179.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20 [0181.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0181.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.955] GetLastError () returned 0x5 [0181.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0181.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 5321 os_tid = 0x1e08 [0179.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20 [0181.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0181.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.996] GetLastError () returned 0x5 [0181.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0181.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27cf0) returned 1 Thread: id = 5322 os_tid = 0x1e0c [0179.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20 [0181.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0181.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.953] GetLastError () returned 0x5 [0181.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0181.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 5323 os_tid = 0x1e10 [0179.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20 [0181.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0181.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.948] GetLastError () returned 0x5 [0181.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0181.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27d78) returned 1 Thread: id = 5324 os_tid = 0x1e14 [0179.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20 [0181.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0181.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.947] GetLastError () returned 0x5 [0181.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0181.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27e00) returned 1 Thread: id = 5325 os_tid = 0x1e18 [0179.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl")) returned 0x20 [0179.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0179.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.647] GetLastError () returned 0x5 [0179.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0179.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3968) returned 1 Thread: id = 5326 os_tid = 0x11d8 [0179.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk")) returned 0x20 [0180.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0180.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.244] GetLastError () returned 0x5 [0181.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0181.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 5327 os_tid = 0x11e0 [0179.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk")) returned 0x20 [0180.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0180.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.120] GetLastError () returned 0x5 [0182.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec90) returned 1 Thread: id = 5328 os_tid = 0x1e1c [0179.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll")) returned 0x20 [0180.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0180.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.463] GetLastError () returned 0x5 [0182.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959540) returned 1 Thread: id = 5329 os_tid = 0x1e20 [0179.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll")) returned 0x20 [0180.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0180.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.124] GetLastError () returned 0x5 [0182.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959378) returned 1 Thread: id = 5330 os_tid = 0x1e24 [0179.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn")) returned 0x20 [0179.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0180.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.879] GetLastError () returned 0x5 [0181.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0182.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 5331 os_tid = 0x1e28 [0179.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs")) returned 0x20 [0182.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0182.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.413] GetLastError () returned 0x5 [0182.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0182.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 Thread: id = 5332 os_tid = 0x1e2c [0179.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f260c8 [0179.653] wcscpy (in: _Dest=0x3f260c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0179.653] wcscat (in: _Dest=0x3f260c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0179.653] wcscat (in: _Dest=0x3f260c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*" [0179.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0179.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0182.820] wcscmp (_String1=".", _String2=".") returned 0 [0182.820] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.820] wcscmp (_String1="..", _String2=".") returned 1 [0182.820] wcscmp (_String1="..", _String2="..") returned 0 [0182.820] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0182.820] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0182.820] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0182.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3e0f010 [0182.821] wcscpy (in: _Dest=0x3e0f010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0182.821] wcscat (in: _Dest=0x3e0f010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0182.821] wcscat (in: _Dest=0x3e0f010, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" [0186.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0f010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0186.361] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0186.361] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0186.361] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0186.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0e930 [0186.361] wcscpy (in: _Dest=0x3e0e930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.361] wcscat (in: _Dest=0x3e0e930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.361] wcscat (in: _Dest=0x3e0e930, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" [0186.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0186.362] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0186.362] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0186.362] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0186.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0eed0 [0186.362] wcscpy (in: _Dest=0x3e0eed0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.362] wcscat (in: _Dest=0x3e0eed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.362] wcscat (in: _Dest=0x3e0eed0, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" [0186.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0eed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0186.363] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0186.363] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0186.363] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0186.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0de90 [0186.363] wcscpy (in: _Dest=0x3e0de90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.364] wcscat (in: _Dest=0x3e0de90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.364] wcscat (in: _Dest=0x3e0de90, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" [0186.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0de90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0186.365] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0186.365] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0186.365] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0186.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x697e228 [0186.365] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.365] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.365] wcscat (in: _Dest=0x697e228, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" [0186.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0186.366] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0186.366] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0186.366] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0186.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0dfd0 [0186.366] wcscpy (in: _Dest=0x3e0dfd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.366] wcscat (in: _Dest=0x3e0dfd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.366] wcscat (in: _Dest=0x3e0dfd0, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" [0186.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0dfd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0186.367] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0186.367] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0186.367] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0186.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e180 [0186.367] wcscpy (in: _Dest=0x697e180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.367] wcscat (in: _Dest=0x697e180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.367] wcscat (in: _Dest=0x697e180, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" [0186.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0186.368] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0186.368] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0186.368] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0186.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e0d8 [0186.368] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.368] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.368] wcscat (in: _Dest=0x697e0d8, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" [0186.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0186.369] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0186.369] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0186.369] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0186.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3e0e6b0 [0186.370] wcscpy (in: _Dest=0x3e0e6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.370] wcscat (in: _Dest=0x3e0e6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.370] wcscat (in: _Dest=0x3e0e6b0, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" [0186.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e0e6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0186.370] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0186.371] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0186.371] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0186.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697df88 [0186.371] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.371] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.371] wcscat (in: _Dest=0x697df88, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" [0186.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0186.371] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0186.372] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0186.372] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0186.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3ea3280 [0186.372] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.372] wcscat (in: _Dest=0x3ea3280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.372] wcscat (in: _Dest=0x3ea3280, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" [0186.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0186.373] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0186.373] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0186.373] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0186.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e030 [0186.373] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.373] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.373] wcscat (in: _Dest=0x697e030, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" [0186.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0186.374] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0186.374] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0186.374] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0186.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3e0e750 [0186.374] wcscpy (in: _Dest=0x3e0e750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0186.374] wcscat (in: _Dest=0x3e0e750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0186.374] wcscat (in: _Dest=0x3e0e750, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e0e750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0186.375] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 0 [0186.375] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0186.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0186.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 [0186.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 5333 os_tid = 0x1e30 [0179.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc")) returned 0x20 [0181.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0181.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.246] GetLastError () returned 0x5 [0181.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0181.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 5334 os_tid = 0x1e34 [0179.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt")) returned 0x20 [0182.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.486] GetLastError () returned 0x5 [0182.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 5335 os_tid = 0x1e38 [0179.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk")) returned 0x20 [0182.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.484] GetLastError () returned 0x5 [0182.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 5336 os_tid = 0x1e3c [0179.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk")) returned 0x20 [0182.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.482] GetLastError () returned 0x5 [0182.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 5337 os_tid = 0x122c [0179.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl")) returned 0x20 [0182.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0182.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.522] GetLastError () returned 0x5 [0182.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0182.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 5338 os_tid = 0x1e40 [0179.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd")) returned 0x20 [0182.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0182.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.516] GetLastError () returned 0x5 [0182.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0182.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 5339 os_tid = 0x1e44 [0179.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd")) returned 0x20 [0182.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0182.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.520] GetLastError () returned 0x5 [0182.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0182.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 5340 os_tid = 0x524 [0179.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs")) returned 0x20 [0182.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0182.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.519] GetLastError () returned 0x5 [0182.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0182.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 5341 os_tid = 0x1e48 [0179.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs")) returned 0x20 [0182.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0182.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.481] GetLastError () returned 0x5 [0182.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0182.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d298) returned 1 Thread: id = 5342 os_tid = 0x1e4c [0179.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc")) returned 0x20 [0182.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.476] GetLastError () returned 0x5 [0182.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959248) returned 1 Thread: id = 5343 os_tid = 0x1e50 [0179.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt")) returned 0x20 [0182.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.474] GetLastError () returned 0x5 [0182.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69594a8) returned 1 Thread: id = 5344 os_tid = 0x1e54 [0179.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk")) returned 0x20 [0182.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.473] GetLastError () returned 0x5 [0182.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 5345 os_tid = 0x1010 [0179.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk")) returned 0x20 [0182.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.471] GetLastError () returned 0x5 [0182.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 5346 os_tid = 0x1e58 [0179.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc")) returned 0x20 [0182.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.479] GetLastError () returned 0x5 [0182.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0a8) returned 1 Thread: id = 5347 os_tid = 0x1e5c [0179.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt")) returned 0x20 [0182.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.478] GetLastError () returned 0x5 [0182.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 5348 os_tid = 0x1e60 [0179.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk")) returned 0x20 [0182.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.470] GetLastError () returned 0x5 [0182.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d688) returned 1 Thread: id = 5349 os_tid = 0x1e64 [0179.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk")) returned 0x20 [0182.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.468] GetLastError () returned 0x5 [0182.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d328) returned 1 Thread: id = 5350 os_tid = 0x1e68 [0179.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd")) returned 0x20 [0182.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0182.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.514] GetLastError () returned 0x5 [0182.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0182.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 5351 os_tid = 0x1e6c [0179.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd")) returned 0x20 [0182.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0182.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.517] GetLastError () returned 0x5 [0182.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0182.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 5352 os_tid = 0x1e70 [0179.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx")) returned 0x20 [0179.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.663] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.663] GetLastError () returned 0x5 [0179.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 5353 os_tid = 0x1e74 [0179.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx")) returned 0x20 [0179.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.664] GetLastError () returned 0x5 [0179.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 5354 os_tid = 0x1e78 [0179.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx")) returned 0x20 [0179.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.666] GetLastError () returned 0x5 [0179.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e618) returned 1 Thread: id = 5355 os_tid = 0x1e7c [0179.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx")) returned 0x20 [0179.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.667] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.668] GetLastError () returned 0x5 [0179.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 5356 os_tid = 0x1e80 [0179.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo")) returned 0x20 [0184.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0184.730] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.730] GetLastError () returned 0x5 [0184.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0184.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 Thread: id = 5357 os_tid = 0x14a0 [0179.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo")) returned 0x20 [0184.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0184.731] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.731] GetLastError () returned 0x5 [0184.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0184.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29250) returned 1 Thread: id = 5358 os_tid = 0x1e84 [0179.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund")) returned 0x20 [0184.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0184.733] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.733] GetLastError () returned 0x5 [0184.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0184.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 Thread: id = 5359 os_tid = 0x1e88 [0179.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka")) returned 0x20 [0180.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0181.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.722] GetLastError () returned 0x5 [0184.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0184.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8be50) returned 1 Thread: id = 5360 os_tid = 0x1e8c [0179.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns")) returned 0x20 [0184.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0184.739] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.739] GetLastError () returned 0x5 [0184.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0184.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f294f0) returned 1 Thread: id = 5361 os_tid = 0x1e90 [0179.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts")) returned 0x20 [0184.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0184.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.741] GetLastError () returned 0x5 [0184.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0184.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b10) returned 1 Thread: id = 5362 os_tid = 0x1e94 [0179.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia")) returned 0x20 [0184.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0184.742] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.742] GetLastError () returned 0x5 [0184.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0184.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29100) returned 1 Thread: id = 5363 os_tid = 0x1e98 [0179.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas")) returned 0x20 [0184.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0184.728] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.728] GetLastError () returned 0x5 [0184.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0184.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29d40) returned 1 Thread: id = 5364 os_tid = 0x1e9c [0179.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent")) returned 0x20 [0184.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0184.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.727] GetLastError () returned 0x5 [0184.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0184.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 Thread: id = 5365 os_tid = 0x1ea0 [0179.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current")) returned 0x20 [0184.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0184.724] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.724] GetLastError () returned 0x5 [0184.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0184.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 Thread: id = 5366 os_tid = 0x1ea4 [0179.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa")) returned 0x20 [0184.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0184.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.659] GetLastError () returned 0x5 [0184.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0184.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 Thread: id = 5367 os_tid = 0x1ea8 [0179.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule")) returned 0x20 [0184.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0184.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.744] GetLastError () returned 0x5 [0184.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0184.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e3b0) returned 1 Thread: id = 5368 os_tid = 0x1eac [0179.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay")) returned 0x20 [0184.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0184.753] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.753] GetLastError () returned 0x5 [0184.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0184.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 Thread: id = 5369 os_tid = 0x1eb0 [0179.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana")) returned 0x20 [0184.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0184.745] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.745] GetLastError () returned 0x5 [0184.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0184.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f296b0) returned 1 Thread: id = 5370 os_tid = 0x1eb4 [0179.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto")) returned 0x20 [0184.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0184.747] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.747] GetLastError () returned 0x5 [0184.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0184.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f298e0) returned 1 Thread: id = 5371 os_tid = 0xb38 [0179.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola")) returned 0x20 [0184.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0184.436] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.436] GetLastError () returned 0x5 [0184.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0184.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29cd0) returned 1 Thread: id = 5372 os_tid = 0x1eb8 [0179.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver")) returned 0x20 [0184.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0184.737] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.737] GetLastError () returned 0x5 [0184.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0184.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29090) returned 1 Thread: id = 5373 os_tid = 0x1ebc [0179.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse")) returned 0x20 [0182.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0182.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.302] GetLastError () returned 0x5 [0184.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0184.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 Thread: id = 5374 os_tid = 0x1ec0 [0179.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg")) returned 0x20 [0184.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0184.735] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.736] GetLastError () returned 0x5 [0184.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0184.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29410) returned 1 Thread: id = 5375 os_tid = 0x1ec4 [0179.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat")) returned 0x20 [0184.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0184.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.734] GetLastError () returned 0x5 [0184.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0184.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29790) returned 1 Thread: id = 5376 os_tid = 0x1ec8 [0179.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife")) returned 0x20 [0183.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0184.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.725] GetLastError () returned 0x5 [0184.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0184.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 Thread: id = 5377 os_tid = 0xe48 [0179.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js")) returned 0x20 [0183.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0183.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.394] GetLastError () returned 0x5 [0183.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0183.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5e50) returned 1 Thread: id = 5378 os_tid = 0x1ecc [0179.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml")) returned 0x20 [0182.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0182.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.323] GetLastError () returned 0x5 [0182.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0182.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 5379 os_tid = 0x1ed0 [0179.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml")) returned 0x20 [0180.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0181.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.298] GetLastError () returned 0x5 [0182.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0182.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674da78) returned 1 Thread: id = 5380 os_tid = 0x1ed4 [0179.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml")) returned 0x20 [0182.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0182.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.261] GetLastError () returned 0x5 [0182.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0182.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc68) returned 1 Thread: id = 5381 os_tid = 0x1ed8 [0179.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml")) returned 0x20 [0182.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0182.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.259] GetLastError () returned 0x5 [0182.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0182.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d0e8) returned 1 Thread: id = 5382 os_tid = 0xb14 [0179.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml")) returned 0x20 [0182.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0182.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.257] GetLastError () returned 0x5 [0182.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0182.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb48) returned 1 Thread: id = 5383 os_tid = 0x1edc [0179.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml")) returned 0x20 [0182.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0182.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.322] GetLastError () returned 0x5 [0182.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0182.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e498) returned 1 Thread: id = 5384 os_tid = 0x1ee0 [0179.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml")) returned 0x20 [0182.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0182.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.302] GetLastError () returned 0x5 [0182.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0182.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674db08) returned 1 Thread: id = 5385 os_tid = 0x1ee4 [0179.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml")) returned 0x20 [0182.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0182.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.321] GetLastError () returned 0x5 [0182.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0182.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 5386 os_tid = 0x1ee8 [0179.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml")) returned 0x20 [0182.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0182.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.319] GetLastError () returned 0x5 [0182.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0182.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 5387 os_tid = 0x1eec [0179.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml")) returned 0x20 [0182.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0182.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.318] GetLastError () returned 0x5 [0182.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0182.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 5388 os_tid = 0x1ef0 [0179.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml")) returned 0x20 [0182.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0182.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.316] GetLastError () returned 0x5 [0182.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0182.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 5389 os_tid = 0x1ef4 [0179.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml")) returned 0x20 [0182.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0182.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.315] GetLastError () returned 0x5 [0182.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0182.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 5390 os_tid = 0x136c [0179.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml")) returned 0x20 [0182.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0182.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.314] GetLastError () returned 0x5 [0182.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0182.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 5391 os_tid = 0x1ef8 [0179.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml")) returned 0x20 [0182.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0182.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.312] GetLastError () returned 0x5 [0182.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0182.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 5392 os_tid = 0x1efc [0179.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml")) returned 0x20 [0182.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0182.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.310] GetLastError () returned 0x5 [0182.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0182.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 5393 os_tid = 0x1f00 [0179.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml")) returned 0x20 [0182.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0182.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.309] GetLastError () returned 0x5 [0182.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0182.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 5394 os_tid = 0x1f04 [0179.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml")) returned 0x20 [0182.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0182.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.308] GetLastError () returned 0x5 [0182.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0182.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 5395 os_tid = 0x1f08 [0179.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml")) returned 0x20 [0182.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0182.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.306] GetLastError () returned 0x5 [0182.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0182.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 5396 os_tid = 0x1f0c [0179.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml")) returned 0x20 [0182.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0182.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.305] GetLastError () returned 0x5 [0182.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0182.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 5397 os_tid = 0x1f10 [0179.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml")) returned 0x20 [0182.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0182.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.303] GetLastError () returned 0x5 [0182.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0182.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 5398 os_tid = 0x10bc [0179.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml")) returned 0x20 [0182.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0182.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.300] GetLastError () returned 0x5 [0182.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0182.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 5399 os_tid = 0x1f14 [0179.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml")) returned 0x20 [0182.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0182.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.280] GetLastError () returned 0x5 [0182.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0182.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 5400 os_tid = 0x1f18 [0179.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml")) returned 0x20 [0182.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0182.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.279] GetLastError () returned 0x5 [0182.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0182.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 5401 os_tid = 0x1f1c [0179.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml")) returned 0x20 [0182.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0182.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.277] GetLastError () returned 0x5 [0182.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0182.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 5402 os_tid = 0x1f20 [0179.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml")) returned 0x20 [0182.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0182.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.275] GetLastError () returned 0x5 [0182.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0182.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 5403 os_tid = 0x1f24 [0179.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml")) returned 0x20 [0182.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0182.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.274] GetLastError () returned 0x5 [0182.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0182.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 5404 os_tid = 0x127c [0179.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml")) returned 0x20 [0182.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0182.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.272] GetLastError () returned 0x5 [0182.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0182.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 5405 os_tid = 0x1f28 [0179.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml")) returned 0x20 [0182.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0182.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.271] GetLastError () returned 0x5 [0182.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0182.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 5406 os_tid = 0x131c [0179.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml")) returned 0x20 [0182.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0182.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.269] GetLastError () returned 0x5 [0182.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0182.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 5407 os_tid = 0xc30 [0179.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml")) returned 0x20 [0182.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0182.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.267] GetLastError () returned 0x5 [0182.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0182.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 5408 os_tid = 0x1324 [0179.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml")) returned 0x20 [0182.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0182.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.265] GetLastError () returned 0x5 [0182.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0182.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 5409 os_tid = 0x1f2c [0179.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml")) returned 0x20 [0182.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0182.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.264] GetLastError () returned 0x5 [0182.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0182.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 5410 os_tid = 0x1f30 [0179.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml")) returned 0x20 [0182.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0182.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.262] GetLastError () returned 0x5 [0182.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0182.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f277a0) returned 1 Thread: id = 5411 os_tid = 0x1f34 [0179.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml")) returned 0x20 [0181.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0181.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.923] GetLastError () returned 0x5 [0181.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0181.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f273e8) returned 1 Thread: id = 5412 os_tid = 0x1f38 [0179.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx")) returned 0x20 [0179.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.898] GetLastError () returned 0x5 [0179.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0179.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e570) returned 1 Thread: id = 5413 os_tid = 0x1f3c [0179.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx")) returned 0x20 [0179.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.899] GetLastError () returned 0x5 [0179.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0179.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 5414 os_tid = 0x1f40 [0179.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 0x20 [0179.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0179.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.901] GetLastError () returned 0x5 [0179.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0179.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac558) returned 1 Thread: id = 5415 os_tid = 0x1f44 [0179.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 0x20 [0179.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0179.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.902] GetLastError () returned 0x5 [0179.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0179.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58198) returned 1 Thread: id = 5416 os_tid = 0x1f48 [0179.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 0x20 [0179.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0179.907] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.907] GetLastError () returned 0x5 [0179.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0179.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ba0) returned 1 Thread: id = 5417 os_tid = 0x1f4c [0179.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 0x20 [0179.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0179.909] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.909] GetLastError () returned 0x5 [0179.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0179.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abf70) returned 1 Thread: id = 5418 os_tid = 0x1f50 [0179.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 0x20 [0182.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0182.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.326] GetLastError () returned 0x5 [0182.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0182.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36860) returned 1 Thread: id = 5419 os_tid = 0x1f54 [0179.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 0x20 [0182.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0182.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.328] GetLastError () returned 0x5 [0182.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0182.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acdc8) returned 1 Thread: id = 5420 os_tid = 0x1f58 [0179.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 0x20 [0182.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0182.338] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.338] GetLastError () returned 0x5 [0182.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0182.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acea0) returned 1 Thread: id = 5421 os_tid = 0x1f5c [0179.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 0x20 [0182.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0182.336] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.336] GetLastError () returned 0x5 [0182.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0182.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36fb0) returned 1 Thread: id = 5422 os_tid = 0x1f68 [0179.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 0x20 [0182.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0182.335] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.335] GetLastError () returned 0x5 [0182.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0182.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acf78) returned 1 Thread: id = 5423 os_tid = 0x1f6c [0179.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 0x20 [0180.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0182.325] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.325] GetLastError () returned 0x5 [0182.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0182.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37080) returned 1 Thread: id = 5424 os_tid = 0x1f70 [0179.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 0x20 [0181.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0181.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.926] GetLastError () returned 0x5 [0181.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0181.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad050) returned 1 Thread: id = 5425 os_tid = 0x1f74 [0179.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 0x20 [0182.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0182.350] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.350] GetLastError () returned 0x5 [0182.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0182.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36040) returned 1 Thread: id = 5426 os_tid = 0x1f78 [0179.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 0x20 [0182.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0182.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.334] GetLastError () returned 0x5 [0182.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0182.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad128) returned 1 Thread: id = 5427 os_tid = 0x1f7c [0179.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 0x20 [0182.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0182.348] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.348] GetLastError () returned 0x5 [0182.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0182.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad200) returned 1 Thread: id = 5428 os_tid = 0x1f80 [0179.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 0x20 [0182.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0182.346] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.346] GetLastError () returned 0x5 [0182.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0182.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 5429 os_tid = 0x1f84 [0179.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 0x20 [0182.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0182.345] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.345] GetLastError () returned 0x5 [0182.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0182.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad2d8) returned 1 Thread: id = 5430 os_tid = 0x1f88 [0179.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 0x20 [0182.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0182.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.332] GetLastError () returned 0x5 [0182.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0182.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036ca0) returned 1 Thread: id = 5431 os_tid = 0x1f8c [0179.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 0x20 [0182.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0182.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.331] GetLastError () returned 0x5 [0182.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0182.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad3b0) returned 1 Thread: id = 5432 os_tid = 0x1f90 [0179.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 0x20 [0182.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0182.343] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.343] GetLastError () returned 0x5 [0182.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0182.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad488) returned 1 Thread: id = 5433 os_tid = 0x1f94 [0179.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 0x20 [0182.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0182.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.329] GetLastError () returned 0x5 [0182.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0182.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad560) returned 1 Thread: id = 5434 os_tid = 0x1f98 [0179.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 0x20 [0182.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0182.339] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.339] GetLastError () returned 0x5 [0182.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0182.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 5435 os_tid = 0x1f9c [0179.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst")) returned 0x20 [0179.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0179.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.926] GetLastError () returned 0x5 [0179.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0179.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 5436 os_tid = 0x1fa0 [0179.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst")) returned 0x20 [0183.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0183.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.189] GetLastError () returned 0x5 [0183.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0183.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 5437 os_tid = 0x1fa4 [0179.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss")) returned 0x20 [0183.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0183.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.187] GetLastError () returned 0x5 [0183.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0183.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 5438 os_tid = 0x1fa8 [0179.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss")) returned 0x20 [0183.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0183.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.186] GetLastError () returned 0x5 [0183.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0183.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 5439 os_tid = 0x1fac [0179.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss")) returned 0x20 [0183.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0183.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.178] GetLastError () returned 0x5 [0183.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0183.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 5440 os_tid = 0x1fb0 [0179.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss")) returned 0x20 [0183.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0183.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.172] GetLastError () returned 0x5 [0183.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0183.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 5441 os_tid = 0x1fb4 [0179.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss")) returned 0x20 [0183.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0183.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.173] GetLastError () returned 0x5 [0183.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0183.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 5442 os_tid = 0x1fb8 [0179.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss")) returned 0x20 [0183.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0183.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.171] GetLastError () returned 0x5 [0183.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0183.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 5443 os_tid = 0x1fbc [0179.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss")) returned 0x20 [0183.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0183.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.169] GetLastError () returned 0x5 [0183.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0183.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 5444 os_tid = 0x1fc0 [0179.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss")) returned 0x20 [0183.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0183.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.190] GetLastError () returned 0x5 [0183.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0183.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 5445 os_tid = 0x12b4 [0179.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss")) returned 0x20 [0183.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0183.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.191] GetLastError () returned 0x5 [0183.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0183.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 5446 os_tid = 0x1fe0 [0179.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss")) returned 0x20 [0183.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0183.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.193] GetLastError () returned 0x5 [0183.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0183.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 5447 os_tid = 0x12bc [0179.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss")) returned 0x20 [0183.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0183.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.168] GetLastError () returned 0x5 [0183.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0183.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 5448 os_tid = 0x12c0 [0179.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss")) returned 0x20 [0183.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0183.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.167] GetLastError () returned 0x5 [0183.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0183.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 5449 os_tid = 0x12c4 [0179.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls")) returned 0x20 [0183.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0183.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.194] GetLastError () returned 0x5 [0183.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0183.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 5450 os_tid = 0x1fc4 [0179.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst")) returned 0x20 [0183.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0183.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.166] GetLastError () returned 0x5 [0183.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0183.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 5451 os_tid = 0x1fc8 [0179.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst")) returned 0x20 [0183.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0183.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.195] GetLastError () returned 0x5 [0183.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0183.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 5452 os_tid = 0x1fcc [0179.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss")) returned 0x20 [0183.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0183.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.197] GetLastError () returned 0x5 [0183.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0183.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 5453 os_tid = 0x15e0 [0179.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst")) returned 0x20 [0183.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0183.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.198] GetLastError () returned 0x5 [0183.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0183.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 5454 os_tid = 0x1fd0 [0179.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss")) returned 0x20 [0183.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0183.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.116] GetLastError () returned 0x5 [0183.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0183.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 5455 os_tid = 0x12e0 [0179.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst")) returned 0x20 [0183.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0183.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.176] GetLastError () returned 0x5 [0183.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0183.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 5456 os_tid = 0x12e4 [0179.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss")) returned 0x20 [0183.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0183.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.175] GetLastError () returned 0x5 [0183.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0183.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 5457 os_tid = 0x1354 [0179.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst")) returned 0x20 [0183.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0183.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.199] GetLastError () returned 0x5 [0183.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0183.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 5458 os_tid = 0x1374 [0180.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss")) returned 0x20 [0183.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0183.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.184] GetLastError () returned 0x5 [0183.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0183.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 5459 os_tid = 0x1398 [0180.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 0x20 [0180.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0180.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.250] GetLastError () returned 0x5 [0180.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0180.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17070) returned 1 Thread: id = 5460 os_tid = 0x140c [0180.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8958 [0180.252] wcscpy (in: _Dest=0x3ea8958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0180.252] wcscat (in: _Dest=0x3ea8958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0180.252] wcscat (in: _Dest=0x3ea8958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*" [0180.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0798 [0180.252] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0183.212] wcscmp (_String1=".", _String2=".") returned 0 [0183.212] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.212] wcscmp (_String1="..", _String2=".") returned 1 [0183.212] wcscmp (_String1="..", _String2="..") returned 0 [0183.212] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fca670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0183.212] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0183.212] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0183.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3edce60 [0183.212] wcscpy (in: _Dest=0x3edce60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0183.212] wcscat (in: _Dest=0x3edce60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0183.212] wcscat (in: _Dest=0x3edce60, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0196.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edce60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0196.980] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fcf490, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0196.980] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0196.980] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0196.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x67531f0 [0196.980] wcscpy (in: _Dest=0x67531f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.980] wcscat (in: _Dest=0x67531f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.981] wcscat (in: _Dest=0x67531f0, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0196.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67531f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0196.982] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fd42b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fd90d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0196.982] wcscmp (_String1="main.html", _String2=".") returned 1 [0196.982] wcscmp (_String1="main.html", _String2="..") returned 1 [0196.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18270 [0196.982] wcscpy (in: _Dest=0x3e18270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.982] wcscat (in: _Dest=0x3e18270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.982] wcscat (in: _Dest=0x3e18270, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" [0196.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e18270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0196.984] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fdb7e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fddef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0196.984] wcscmp (_String1="main.js", _String2=".") returned 1 [0196.984] wcscmp (_String1="main.js", _String2="..") returned 1 [0196.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e17770 [0196.984] wcscpy (in: _Dest=0x3e17770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.984] wcscat (in: _Dest=0x3e17770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.984] wcscat (in: _Dest=0x3e17770, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" [0196.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0196.985] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fe2d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe615d3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0196.985] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0196.985] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0196.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753610 [0196.985] wcscpy (in: _Dest=0x6753610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.985] wcscat (in: _Dest=0x6753610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.985] wcscat (in: _Dest=0x6753610, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" [0196.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6753610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0196.986] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0196.986] wcscmp (_String1="_locales", _String2=".") returned 1 [0196.986] wcscmp (_String1="_locales", _String2="..") returned 1 [0196.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17670 [0196.986] wcscpy (in: _Dest=0x3e17670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.986] wcscat (in: _Dest=0x3e17670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.986] wcscat (in: _Dest=0x3e17670, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0196.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0196.987] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0196.987] wcscmp (_String1="_metadata", _String2=".") returned 1 [0196.987] wcscmp (_String1="_metadata", _String2="..") returned 1 [0196.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15770 [0196.987] wcscpy (in: _Dest=0x3e15770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0196.987] wcscat (in: _Dest=0x3e15770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0196.987] wcscat (in: _Dest=0x3e15770, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0196.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0196.988] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c0798 | out: lpFindFileData=0x66c0798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0196.988] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0196.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0798) returned 1 [0196.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8958) returned 1 [0196.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8c28) returned 1 Thread: id = 5461 os_tid = 0x1410 [0180.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf")) returned 0x20 [0180.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0180.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.267] GetLastError () returned 0x5 [0180.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0180.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 5462 os_tid = 0x1414 [0180.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf")) returned 0x20 [0180.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0180.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.284] GetLastError () returned 0x5 [0180.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0180.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 5463 os_tid = 0x1418 [0180.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf")) returned 0x20 [0180.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0180.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.304] GetLastError () returned 0x5 [0180.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0180.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd08) returned 1 Thread: id = 5464 os_tid = 0x141c [0180.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad560 [0180.308] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0180.308] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0180.308] wcscat (in: _Dest=0x3dad560, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*" [0180.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2948 [0180.308] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*", lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0183.163] wcscmp (_String1=".", _String2=".") returned 0 [0183.163] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.163] wcscmp (_String1="..", _String2=".") returned 1 [0183.163] wcscmp (_String1="..", _String2="..") returned 0 [0183.163] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0183.163] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0183.163] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0183.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x300da60 [0183.164] wcscpy (in: _Dest=0x300da60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0183.164] wcscat (in: _Dest=0x300da60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0183.164] wcscat (in: _Dest=0x300da60, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0189.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x300da60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40 [0189.922] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0189.922] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0189.923] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0189.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6750f18 [0189.923] wcscpy (in: _Dest=0x6750f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0189.923] wcscat (in: _Dest=0x6750f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0189.923] wcscat (in: _Dest=0x6750f18, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0189.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0189.926] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0189.926] wcscmp (_String1="main.html", _String2=".") returned 1 [0189.926] wcscmp (_String1="main.html", _String2="..") returned 1 [0189.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae528 [0189.926] wcscpy (in: _Dest=0x68ae528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0189.926] wcscat (in: _Dest=0x68ae528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0189.926] wcscat (in: _Dest=0x68ae528, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" [0189.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0189.927] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0189.927] wcscmp (_String1="main.js", _String2=".") returned 1 [0189.927] wcscmp (_String1="main.js", _String2="..") returned 1 [0189.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae840 [0189.927] wcscpy (in: _Dest=0x68ae840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0189.927] wcscat (in: _Dest=0x68ae840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0189.927] wcscat (in: _Dest=0x68ae840, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" [0189.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0189.928] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0189.928] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0189.928] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0189.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675e610 [0189.928] wcscpy (in: _Dest=0x675e610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0189.928] wcscat (in: _Dest=0x675e610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0189.928] wcscat (in: _Dest=0x675e610, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" [0189.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675e610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0189.929] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0189.929] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0189.929] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0189.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68ae948 [0189.930] wcscpy (in: _Dest=0x68ae948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0189.930] wcscat (in: _Dest=0x68ae948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0189.930] wcscat (in: _Dest=0x68ae948, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0189.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0189.931] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66c2948 | out: lpFindFileData=0x66c2948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0189.931] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0189.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 [0189.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 [0189.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 5465 os_tid = 0x11ec [0180.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8778 [0180.309] wcscpy (in: _Dest=0x3ea8778, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0180.309] wcscat (in: _Dest=0x3ea8778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0180.309] wcscat (in: _Dest=0x3ea8778, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*" [0180.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c02c8 [0180.309] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0183.160] wcscmp (_String1=".", _String2=".") returned 0 [0183.161] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.161] wcscmp (_String1="..", _String2=".") returned 1 [0183.161] wcscmp (_String1="..", _String2="..") returned 0 [0183.161] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe644d300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0183.161] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0183.161] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0183.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3edcd58 [0183.161] wcscpy (in: _Dest=0x3edcd58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0183.161] wcscat (in: _Dest=0x3edcd58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0183.161] wcscat (in: _Dest=0x3edcd58, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0190.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edcd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0190.683] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6454830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0190.683] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0190.683] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0190.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc938 [0190.683] wcscpy (in: _Dest=0x3edc938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.683] wcscat (in: _Dest=0x3edc938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.683] wcscat (in: _Dest=0x3edc938, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0190.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edc938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0190.685] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6459650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe645bd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0190.685] wcscmp (_String1="main.html", _String2=".") returned 1 [0190.685] wcscmp (_String1="main.html", _String2="..") returned 1 [0190.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17c70 [0190.685] wcscpy (in: _Dest=0x3e17c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.685] wcscat (in: _Dest=0x3e17c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.685] wcscat (in: _Dest=0x3e17c70, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" [0190.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0190.686] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6460b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6460b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0190.686] wcscmp (_String1="main.js", _String2=".") returned 1 [0190.686] wcscmp (_String1="main.js", _String2="..") returned 1 [0190.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3e17570 [0190.687] wcscpy (in: _Dest=0x3e17570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.687] wcscat (in: _Dest=0x3e17570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.687] wcscat (in: _Dest=0x3e17570, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" [0190.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0190.688] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64659a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e0050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0190.688] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0190.688] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0190.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3edcf68 [0190.689] wcscpy (in: _Dest=0x3edcf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.689] wcscat (in: _Dest=0x3edcf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.689] wcscat (in: _Dest=0x3edcf68, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" [0190.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3edcf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0190.690] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0190.690] wcscmp (_String1="_locales", _String2=".") returned 1 [0190.690] wcscmp (_String1="_locales", _String2="..") returned 1 [0190.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17770 [0190.690] wcscpy (in: _Dest=0x3e17770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.690] wcscat (in: _Dest=0x3e17770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.690] wcscat (in: _Dest=0x3e17770, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0190.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0190.692] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0190.692] wcscmp (_String1="_metadata", _String2=".") returned 1 [0190.692] wcscmp (_String1="_metadata", _String2="..") returned 1 [0190.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18270 [0190.692] wcscpy (in: _Dest=0x3e18270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0190.692] wcscat (in: _Dest=0x3e18270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0190.692] wcscat (in: _Dest=0x3e18270, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0190.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0190.694] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c02c8 | out: lpFindFileData=0x66c02c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0190.694] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0190.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c02c8) returned 1 [0190.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8778) returned 1 [0190.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 5466 os_tid = 0x1420 [0180.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h")) returned 0x20 [0180.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0180.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.310] GetLastError () returned 0x5 [0180.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0180.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 5467 os_tid = 0xb00 [0180.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v")) returned 0x20 [0180.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0180.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.311] GetLastError () returned 0x5 [0180.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0180.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 5468 os_tid = 0x5c8 [0180.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h")) returned 0x20 [0184.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0184.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.700] GetLastError () returned 0x5 [0184.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0184.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda378) returned 1 Thread: id = 5469 os_tid = 0x14f0 [0180.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v")) returned 0x20 [0184.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0184.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.701] GetLastError () returned 0x5 [0184.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0184.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbdf8) returned 1 Thread: id = 5470 os_tid = 0xc4c [0180.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h")) returned 0x20 [0184.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0184.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.703] GetLastError () returned 0x5 [0184.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0184.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 Thread: id = 5471 os_tid = 0xdc4 [0180.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v")) returned 0x20 [0184.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0184.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.715] GetLastError () returned 0x5 [0184.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0184.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 Thread: id = 5472 os_tid = 0x6d4 [0180.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h")) returned 0x20 [0184.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0184.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.698] GetLastError () returned 0x5 [0184.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0184.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbef8) returned 1 Thread: id = 5473 os_tid = 0x1638 [0180.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v")) returned 0x20 [0184.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0184.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.697] GetLastError () returned 0x5 [0184.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0184.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbff8) returned 1 Thread: id = 5474 os_tid = 0x608 [0180.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h")) returned 0x20 [0184.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0184.716] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.717] GetLastError () returned 0x5 [0184.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0184.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 Thread: id = 5475 os_tid = 0x1508 [0180.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v")) returned 0x20 [0184.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0184.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.718] GetLastError () returned 0x5 [0184.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0184.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6f8) returned 1 Thread: id = 5476 os_tid = 0x150c [0180.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h")) returned 0x20 [0184.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0184.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.680] GetLastError () returned 0x5 [0184.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0184.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5f8) returned 1 Thread: id = 5477 os_tid = 0x1510 [0180.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2")) returned 0x20 [0184.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0184.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.695] GetLastError () returned 0x5 [0184.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0184.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 5478 os_tid = 0x1514 [0180.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v")) returned 0x20 [0184.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0184.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.694] GetLastError () returned 0x5 [0184.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0184.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda878) returned 1 Thread: id = 5479 os_tid = 0x1018 [0180.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h")) returned 0x20 [0184.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0184.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.720] GetLastError () returned 0x5 [0184.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0184.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1f8) returned 1 Thread: id = 5480 os_tid = 0x1520 [0180.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v")) returned 0x20 [0184.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0184.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.721] GetLastError () returned 0x5 [0184.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0184.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 Thread: id = 5481 os_tid = 0x3e8 [0180.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h")) returned 0x20 [0184.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0184.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.692] GetLastError () returned 0x5 [0184.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0184.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb478) returned 1 Thread: id = 5482 os_tid = 0x1524 [0180.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v")) returned 0x20 [0184.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0184.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.690] GetLastError () returned 0x5 [0184.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0184.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe78) returned 1 Thread: id = 5483 os_tid = 0x1fd4 [0180.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h")) returned 0x20 [0184.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0184.689] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.689] GetLastError () returned 0x5 [0184.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0184.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda4f8) returned 1 Thread: id = 5484 os_tid = 0x152c [0180.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2")) returned 0x20 [0184.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0184.687] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.687] GetLastError () returned 0x5 [0184.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0184.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 5485 os_tid = 0xb18 [0180.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c")) returned 0x20 [0184.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0184.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.686] GetLastError () returned 0x5 [0184.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0184.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 5486 os_tid = 0x14d4 [0180.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v")) returned 0x20 [0184.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0184.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.684] GetLastError () returned 0x5 [0184.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0184.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda478) returned 1 Thread: id = 5487 os_tid = 0x1534 [0180.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h")) returned 0x20 [0184.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0184.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.681] GetLastError () returned 0x5 [0184.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0184.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbbf8) returned 1 Thread: id = 5488 os_tid = 0x14e4 [0180.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v")) returned 0x20 [0184.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0184.656] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.656] GetLastError () returned 0x5 [0184.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0184.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f8) returned 1 Thread: id = 5489 os_tid = 0x153c [0180.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h")) returned 0x20 [0184.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0184.433] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.433] GetLastError () returned 0x5 [0184.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0184.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28fb0) returned 1 Thread: id = 5490 os_tid = 0x10f4 [0180.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h")) returned 0x20 [0183.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0184.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.678] GetLastError () returned 0x5 [0184.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0184.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edae78) returned 1 Thread: id = 5491 os_tid = 0x1560 [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v")) returned 0x20 [0181.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0182.352] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.682] GetLastError () returned 0x5 [0184.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0184.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eda178) returned 1 Thread: id = 5492 os_tid = 0x10f8 [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h")) returned 0x20 [0184.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0184.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.713] GetLastError () returned 0x5 [0184.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0184.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edaff8) returned 1 Thread: id = 5493 os_tid = 0x10fc [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v")) returned 0x20 [0184.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0184.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.711] GetLastError () returned 0x5 [0184.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0184.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edac78) returned 1 Thread: id = 5494 os_tid = 0x1100 [0180.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h")) returned 0x20 [0184.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0184.709] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.709] GetLastError () returned 0x5 [0184.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0184.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 5495 os_tid = 0xb5c [0180.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v")) returned 0x20 [0184.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0184.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.708] GetLastError () returned 0x5 [0184.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0184.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 5496 os_tid = 0x1104 [0180.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h")) returned 0x20 [0184.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0184.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.706] GetLastError () returned 0x5 [0184.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0184.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 5497 os_tid = 0x7ec [0180.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v")) returned 0x20 [0184.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0184.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.705] GetLastError () returned 0x5 [0184.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0184.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 5498 os_tid = 0xb24 [0180.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx")) returned 0x20 [0180.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0180.487] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.487] GetLastError () returned 0x5 [0180.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0180.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 5499 os_tid = 0xebc [0180.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx")) returned 0x20 [0180.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0180.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.489] GetLastError () returned 0x5 [0180.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0180.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 5500 os_tid = 0x1124 [0180.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20 [0181.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0181.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.965] GetLastError () returned 0x5 [0181.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0181.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 5501 os_tid = 0x161c [0180.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20 [0181.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0181.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.966] GetLastError () returned 0x5 [0181.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0181.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 5502 os_tid = 0x1620 [0180.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20 [0181.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0181.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.967] GetLastError () returned 0x5 [0181.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0181.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 5503 os_tid = 0xfc0 [0180.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20 [0181.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0181.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.969] GetLastError () returned 0x5 [0181.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0181.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd08) returned 1 Thread: id = 5504 os_tid = 0x1628 [0180.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20 [0181.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0181.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.986] GetLastError () returned 0x5 [0181.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0181.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 5505 os_tid = 0x162c [0180.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20 [0181.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0181.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.970] GetLastError () returned 0x5 [0181.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0181.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 5506 os_tid = 0x4f8 [0180.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20 [0181.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0181.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.971] GetLastError () returned 0x5 [0181.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0181.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 5507 os_tid = 0x1630 [0180.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20 [0181.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0181.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.973] GetLastError () returned 0x5 [0181.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0181.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 5508 os_tid = 0xdc0 [0180.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20 [0181.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0181.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.974] GetLastError () returned 0x5 [0181.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0181.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb778) returned 1 Thread: id = 5509 os_tid = 0x11f8 [0180.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20 [0181.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0181.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.975] GetLastError () returned 0x5 [0181.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0181.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 5510 os_tid = 0x12f8 [0180.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20 [0181.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0181.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.976] GetLastError () returned 0x5 [0181.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0181.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 Thread: id = 5511 os_tid = 0x10c8 [0180.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20 [0181.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0181.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.978] GetLastError () returned 0x5 [0181.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0181.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 5512 os_tid = 0xeb8 [0180.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20 [0181.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0181.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.979] GetLastError () returned 0x5 [0181.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0181.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 Thread: id = 5513 os_tid = 0x1564 [0180.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20 [0181.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0181.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.980] GetLastError () returned 0x5 [0181.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0181.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 5514 os_tid = 0xa10 [0180.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20 [0181.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0181.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.982] GetLastError () returned 0x5 [0181.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0181.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 5515 os_tid = 0x1634 [0180.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20 [0181.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0181.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.987] GetLastError () returned 0x5 [0181.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0181.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 5516 os_tid = 0x1624 [0180.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20 [0181.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0181.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.988] GetLastError () returned 0x5 [0181.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0181.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 5517 os_tid = 0x8dc [0180.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20 [0181.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0181.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.983] GetLastError () returned 0x5 [0181.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0181.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 5518 os_tid = 0x5ec [0180.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20 [0181.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0181.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.989] GetLastError () returned 0x5 [0181.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0181.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 5519 os_tid = 0x1304 [0180.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20 [0181.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0181.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.984] GetLastError () returned 0x5 [0181.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0181.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 5520 os_tid = 0x8c0 [0180.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20 [0181.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0181.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.991] GetLastError () returned 0x5 [0181.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0181.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 5521 os_tid = 0xa04 [0180.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20 [0182.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0182.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.010] GetLastError () returned 0x5 [0182.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0182.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 5522 os_tid = 0x1308 [0180.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20 [0181.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0181.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.992] GetLastError () returned 0x5 [0181.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0181.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 5523 os_tid = 0x130c [0180.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20 [0181.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0181.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.993] GetLastError () returned 0x5 [0181.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0181.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 5524 os_tid = 0x1204 [0180.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20 [0181.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0181.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.995] GetLastError () returned 0x5 [0181.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0181.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 5525 os_tid = 0x1328 [0180.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20 [0182.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0182.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.012] GetLastError () returned 0x5 [0182.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0182.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 5526 os_tid = 0x120c [0180.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20 [0181.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0181.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.934] GetLastError () returned 0x5 [0181.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0181.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 5527 os_tid = 0x1224 [0180.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20 [0181.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0181.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.460] GetLastError () returned 0x5 [0181.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0181.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 5528 os_tid = 0x1230 [0180.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif")) returned 0x20 [0182.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0182.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.392] GetLastError () returned 0x5 [0182.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0182.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea60f0) returned 1 Thread: id = 5529 os_tid = 0x1234 [0180.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif")) returned 0x20 [0182.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0182.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.394] GetLastError () returned 0x5 [0182.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0182.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37220) returned 1 Thread: id = 5530 os_tid = 0x1238 [0180.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif")) returned 0x20 [0182.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0182.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.395] GetLastError () returned 0x5 [0182.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0182.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e372f0) returned 1 Thread: id = 5531 os_tid = 0x1ff8 [0180.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif")) returned 0x20 [0182.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0182.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.397] GetLastError () returned 0x5 [0182.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0182.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 Thread: id = 5532 os_tid = 0x1ffc [0180.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif")) returned 0x20 [0182.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0182.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.352] GetLastError () returned 0x5 [0182.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0182.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 5533 os_tid = 0x1244 [0180.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif")) returned 0x20 [0182.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0182.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.398] GetLastError () returned 0x5 [0182.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0182.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db01c8) returned 1 Thread: id = 5534 os_tid = 0x1248 [0180.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js")) returned 0x20 [0182.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0182.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.400] GetLastError () returned 0x5 [0182.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0182.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682efa8) returned 1 Thread: id = 5535 os_tid = 0x124c [0180.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js")) returned 0x20 [0182.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0182.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.356] GetLastError () returned 0x5 [0182.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0182.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 5536 os_tid = 0xd88 [0180.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js")) returned 0x20 [0181.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0181.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.932] GetLastError () returned 0x5 [0181.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0181.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36790) returned 1 Thread: id = 5537 os_tid = 0x173c [0180.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js")) returned 0x20 [0182.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0182.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.403] GetLastError () returned 0x5 [0182.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0182.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0288) returned 1 Thread: id = 5538 os_tid = 0x178c [0180.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 0x20 [0182.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0182.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.402] GetLastError () returned 0x5 [0182.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0182.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4b10) returned 1 Thread: id = 5539 os_tid = 0x179c [0180.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah")) returned 0x20 [0184.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0184.750] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.750] GetLastError () returned 0x5 [0184.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0184.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 5540 os_tid = 0x17a0 [0180.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center")) returned 0x20 [0184.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0184.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.751] GetLastError () returned 0x5 [0184.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0184.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 5541 os_tid = 0x17a4 [0180.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem")) returned 0x20 [0184.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0184.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.748] GetLastError () returned 0x5 [0184.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0184.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 5542 os_tid = 0x17b0 [0180.948] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 0x2020 [0180.952] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", dwFileAttributes=0x20) returned 1 [0183.851] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x131c [0183.851] GetFileSizeEx (in: hFile=0x131c, lpFileSize=0x964fe34 | out: lpFileSize=0x964fe34*=4984) returned 1 [0183.851] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x1374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.851] ReadFile (in: hFile=0x131c, lpBuffer=0x964fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x964fe20, lpOverlapped=0x0 | out: lpBuffer=0x964fe10*, lpNumberOfBytesRead=0x964fe20*=0x4, lpOverlapped=0x0) returned 1 [0183.854] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0183.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0183.854] NtQuerySystemTime (in: CurrentTime=0x964fda8 | out: CurrentTime=0x964fda8*=132482710923252000) returned 0x0 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x7b5d4648 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x5d3650b7 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x4f4a5f65 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x2ea273ee [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x5708304 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x32ce59de [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x73b5df0e [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x733a7864 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x32cd395f [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x354e2225 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x14d703f4 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x8e1b899 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x80a01a7 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x2a0de7d [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x7e62fd0e [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x7ebc49f5 [0183.854] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x66c5a897 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x560063af [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x416973c1 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x59474947 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x7f6169d3 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x66496ffc [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x2a473c73 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x3e6a7527 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x1c83c2fd [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x2601d900 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x6aa3e8ab [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x2cbcb2c9 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x621ec83c [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x5ca33d4b [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0xc70a20 [0183.855] RtlRandomEx (in: Seed=0x964fda0 | out: Seed=0x964fda0) returned 0x4a305923 [0183.865] ReadFile (in: hFile=0x131c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0x964fd9c, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x964fd9c*=0x1378, lpOverlapped=0x0) returned 1 [0183.866] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.866] WriteFile (in: hFile=0x131c, lpBuffer=0x69838f0*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x964fda0, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesWritten=0x964fda0*=0x1378, lpOverlapped=0x0) returned 1 [0183.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899f70) returned 1 [0183.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4498 [0183.868] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.868] WriteFile (in: hFile=0x131c, lpBuffer=0x6818e70*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x964fe28, lpOverlapped=0x0 | out: lpBuffer=0x6818e70*, lpNumberOfBytesWritten=0x964fe28*=0x100, lpOverlapped=0x0) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e70) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0185.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0185.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6818e70 [0185.670] wcscpy (in: _Dest=0x6818e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0185.670] wcscat (in: _Dest=0x6818e70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.ac3a86" [0185.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.ac3a86", NtPathName=0x964fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67552d0 [0186.642] FlushFileBuffers (hFile=0x131c) returned 1 [0188.473] CloseHandle (hObject=0x131c) returned 1 [0188.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcdf8 [0188.806] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0188.806] wcscat (in: _Dest=0x30bcdf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0188.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0x2020 [0188.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0188.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16970) returned 1 Thread: id = 5543 os_tid = 0xbbc [0180.959] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 0x2020 [0182.285] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", dwFileAttributes=0x20) returned 1 [0183.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2100 [0183.870] GetFileSizeEx (in: hFile=0x2100, lpFileSize=0x9a9f824 | out: lpFileSize=0x9a9f824*=4355) returned 1 [0183.870] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x10ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.870] ReadFile (in: hFile=0x2100, lpBuffer=0x9a9f800, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a9f810, lpOverlapped=0x0 | out: lpBuffer=0x9a9f800*, lpNumberOfBytesRead=0x9a9f810*=0x4, lpOverlapped=0x0) returned 1 [0183.873] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0183.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0183.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0183.873] NtQuerySystemTime (in: CurrentTime=0x9a9f798 | out: CurrentTime=0x9a9f798*=132482710923564000) returned 0x0 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2cf370f [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2b1b0a0f [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x4d5dbd8b [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2b25414d [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x6265d519 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x47742da7 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x19f32d79 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x603d20f7 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x641892e1 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0xda195f3 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x7a3da63e [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2405d3a7 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x4bbca0b8 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x6530d503 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x29ca58ef [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x1e7bf5b7 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x16c2cc78 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x6eebf255 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x1e16c97b [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x67aa4f56 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x11dda425 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x52be15fd [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x115d19e5 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0xc9aef8d [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2ce6cd3e [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x11b2cb65 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x6cf062da [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x1e2145c8 [0183.874] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x2eb9b0d [0183.875] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x50b05af9 [0183.875] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x57c59161 [0183.875] RtlRandomEx (in: Seed=0x9a9f790 | out: Seed=0x9a9f790) returned 0x79d4c9fb [0183.884] ReadFile (in: hFile=0x2100, lpBuffer=0x6992910, nNumberOfBytesToRead=0x1103, lpNumberOfBytesRead=0x9a9f78c, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x9a9f78c*=0x1103, lpOverlapped=0x0) returned 1 [0183.885] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.886] WriteFile (in: hFile=0x2100, lpBuffer=0x69838f0*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0x9a9f790, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesWritten=0x9a9f790*=0x1103, lpOverlapped=0x0) returned 1 [0184.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0184.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0184.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0184.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0184.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0184.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0184.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899f70) returned 1 [0184.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6899f70 [0184.481] SetFilePointerEx (in: hFile=0x2100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.482] WriteFile (in: hFile=0x2100, lpBuffer=0x3d40408*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x9a9f818, lpOverlapped=0x0 | out: lpBuffer=0x3d40408*, lpNumberOfBytesWritten=0x9a9f818*=0x124, lpOverlapped=0x0) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40408) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b170) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899f70) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0185.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0185.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40408 [0185.642] wcscpy (in: _Dest=0x3d40408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" [0185.643] wcscat (in: _Dest=0x3d40408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.ac3a86" [0185.643] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.ac3a86", NtPathName=0x9a9f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x2fce88 [0186.399] FlushFileBuffers (hFile=0x2100) returned 1 [0186.405] CloseHandle (hObject=0x2100) returned 1 [0186.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6750ce8 [0186.454] wcscpy (in: _Dest=0x6750ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.454] wcscat (in: _Dest=0x6750ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0186.454] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0xffffffff [0186.454] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd48 [0186.488] WriteFile (in: hFile=0xd48, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9a9f7ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9a9f7ac*=0x8b9, lpOverlapped=0x0) returned 1 [0186.490] CloseHandle (hObject=0xd48) returned 1 [0186.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0186.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 Thread: id = 5544 os_tid = 0x784 [0180.960] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 0x2020 [0182.417] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", dwFileAttributes=0x20) returned 1 [0183.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20fc [0183.888] GetFileSizeEx (in: hFile=0x20fc, lpFileSize=0x917fe34 | out: lpFileSize=0x917fe34*=854) returned 1 [0183.888] SetFilePointerEx (in: hFile=0x20fc, liDistanceToMove=0x352, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.888] ReadFile (in: hFile=0x20fc, lpBuffer=0x917fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x917fe20, lpOverlapped=0x0 | out: lpBuffer=0x917fe10*, lpNumberOfBytesRead=0x917fe20*=0x4, lpOverlapped=0x0) returned 1 [0183.891] SetFilePointerEx (in: hFile=0x20fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0183.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0183.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0183.891] NtQuerySystemTime (in: CurrentTime=0x917fda8 | out: CurrentTime=0x917fda8*=132482710923720000) returned 0x0 [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x1229641c [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3e9997d2 [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x4fbff024 [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3bb3ae58 [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x7649e8cb [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3a642a62 [0183.891] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x437a348f [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x6c223c12 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x28d8db8f [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x621f704a [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x12deb8a5 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3fd6775f [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x470283cf [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x6be408a0 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3dbb0c66 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0xf7e9a53 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x7c85b070 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x36066ba9 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x66aa89a2 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x53999a36 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x1c854832 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x53f13c4c [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0xf68abf3 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x5daee55c [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x4ed61ffd [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x238f4298 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x6f09cc0c [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x4a776b27 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x57190c60 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x7afad0e1 [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x3635734d [0183.892] RtlRandomEx (in: Seed=0x917fda0 | out: Seed=0x917fda0) returned 0x61e1b4ff [0183.902] ReadFile (in: hFile=0x20fc, lpBuffer=0x698b100, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0x917fd9c, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0x917fd9c*=0x356, lpOverlapped=0x0) returned 1 [0183.902] SetFilePointerEx (in: hFile=0x20fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.902] WriteFile (in: hFile=0x20fc, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x356, lpNumberOfBytesWritten=0x917fda0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0x917fda0*=0x356, lpOverlapped=0x0) returned 1 [0184.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0184.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0184.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0184.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0184.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0184.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0184.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bb48) returned 1 [0184.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x689bb48 [0184.498] SetFilePointerEx (in: hFile=0x20fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.498] WriteFile (in: hFile=0x20fc, lpBuffer=0x3d40540*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x917fe28, lpOverlapped=0x0 | out: lpBuffer=0x3d40540*, lpNumberOfBytesWritten=0x917fe28*=0x122, lpOverlapped=0x0) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40540) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a288) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bb48) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0185.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0185.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40540 [0185.644] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" [0185.644] wcscat (in: _Dest=0x3d40540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.ac3a86" [0185.644] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.ac3a86", NtPathName=0x917fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x29fc20 [0186.402] FlushFileBuffers (hFile=0x20fc) returned 1 [0186.409] CloseHandle (hObject=0x20fc) returned 1 [0186.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6752098 [0186.457] wcscpy (in: _Dest=0x6752098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.457] wcscat (in: _Dest=0x6752098, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0186.457] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0x2020 [0186.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752098) returned 1 [0186.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 Thread: id = 5545 os_tid = 0x640 [0180.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 0x2020 [0182.417] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", dwFileAttributes=0x20) returned 1 [0183.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f8 [0183.903] GetFileSizeEx (in: hFile=0x20f8, lpFileSize=0x65dfdc4 | out: lpFileSize=0x65dfdc4*=23404) returned 1 [0183.903] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x5b68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.903] ReadFile (in: hFile=0x20f8, lpBuffer=0x65dfda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x65dfdb0, lpOverlapped=0x0 | out: lpBuffer=0x65dfda0*, lpNumberOfBytesRead=0x65dfdb0*=0x4, lpOverlapped=0x0) returned 1 [0183.906] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0183.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0183.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.906] NtQuerySystemTime (in: CurrentTime=0x65dfd38 | out: CurrentTime=0x65dfd38*=132482710923876000) returned 0x0 [0183.906] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x3955715a [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x20c08fb0 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x789b775e [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x3b17d3bf [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x3f8af9b1 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x5536bd0d [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x691925eb [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x1d1b27d8 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x2fe55a81 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x226b4ce [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x58531c4d [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x28ab7858 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x7b9162e [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x59170957 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x623c00f6 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x2ecda16d [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x77727d75 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x664d9f50 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0xfc5bef0 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x4e8acc15 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x48025251 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x115a4d59 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x668b8941 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x35c437d7 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x1504cb6 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x216e6b65 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x12ac25a0 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x587e2e51 [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x1dce69d [0183.907] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x1db78e9b [0183.908] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0x22f03336 [0183.908] RtlRandomEx (in: Seed=0x65dfd30 | out: Seed=0x65dfd30) returned 0xd6023fb [0183.919] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.919] ReadFile (in: hFile=0x20f8, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x65dfd38, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0x65dfd38*=0x3c00, lpOverlapped=0x0) returned 1 [0183.920] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b050 [0183.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0183.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0183.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0183.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0183.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0183.921] WriteFile (in: hFile=0x20f8, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x65dfd38, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0x65dfd38*=0x3c00, lpOverlapped=0x0) returned 1 [0184.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0184.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0184.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066d40 [0184.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0184.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067280 [0184.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0184.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0184.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0184.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0184.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0184.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d555f0 [0184.500] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.500] WriteFile (in: hFile=0x20f8, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x65dfdb8, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0x65dfdb8*=0x11c, lpOverlapped=0x0) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067280) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0185.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0185.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d555f0 [0185.646] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" [0185.646] wcscat (in: _Dest=0x3d555f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.ac3a86" [0185.646] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.ac3a86", NtPathName=0x65dfd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3e80fa0 [0186.404] FlushFileBuffers (hFile=0x20f8) returned 1 [0186.414] CloseHandle (hObject=0x20f8) returned 1 [0186.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x67522c8 [0186.460] wcscpy (in: _Dest=0x67522c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.460] wcscat (in: _Dest=0x67522c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0186.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0x2020 [0186.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0186.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 Thread: id = 5546 os_tid = 0x4f0 [0180.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 0x2020 [0182.418] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0183.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f4 [0183.923] GetFileSizeEx (in: hFile=0x20f4, lpFileSize=0x93dfa94 | out: lpFileSize=0x93dfa94*=1457) returned 1 [0183.923] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x5ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.923] ReadFile (in: hFile=0x20f4, lpBuffer=0x93dfa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x93dfa80, lpOverlapped=0x0 | out: lpBuffer=0x93dfa70*, lpNumberOfBytesRead=0x93dfa80*=0x4, lpOverlapped=0x0) returned 1 [0183.926] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef50c8 [0183.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0183.926] NtQuerySystemTime (in: CurrentTime=0x93dfa08 | out: CurrentTime=0x93dfa08*=132482710924032000) returned 0x0 [0183.926] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x20bbb5b0 [0183.926] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0xb1c65f3 [0183.926] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x4ff334d9 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x669cb579 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x31c324fa [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x541bc6e5 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x79a3af [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x1cccd288 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x6917f8d9 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x5abb6d9b [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x672af0b3 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x10b51bc1 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x21e79482 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x4bdc8140 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x7fb2a35f [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x74f1bfee [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x6aec9886 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x314fa6dc [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x6979749f [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x489f308b [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x592694ad [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x21dfa2ab [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x410f16f0 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x6fd63607 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x4c4c08da [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x7c62b799 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x6bfc2a10 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x4fa77775 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x4d7aa8a7 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x5f574e23 [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x69b3df3e [0183.927] RtlRandomEx (in: Seed=0x93dfa00 | out: Seed=0x93dfa00) returned 0x3f83cc13 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0183.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0183.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0183.938] ReadFile (in: hFile=0x20f4, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0x5b1, lpNumberOfBytesRead=0x93df9fc, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0x93df9fc*=0x5b1, lpOverlapped=0x0) returned 1 [0183.938] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.939] WriteFile (in: hFile=0x20f4, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x93dfa00, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0x93dfa00*=0x5b1, lpOverlapped=0x0) returned 1 [0183.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0183.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0183.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0183.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0183.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0183.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0183.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0183.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0183.942] SetFilePointerEx (in: hFile=0x20f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.942] WriteFile (in: hFile=0x20f4, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x93dfa88, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0x93dfa88*=0x10c, lpOverlapped=0x0) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0185.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0185.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bb818 [0185.669] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" [0185.669] wcscat (in: _Dest=0x30bb818, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.ac3a86" [0185.669] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.ac3a86", NtPathName=0x93dfa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d408e8 [0186.474] FlushFileBuffers (hFile=0x20f4) returned 1 [0186.477] CloseHandle (hObject=0x20f4) returned 1 [0186.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbd90 [0186.481] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.481] wcscat (in: _Dest=0x30bbd90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0186.481] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0x2020 [0186.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0186.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 Thread: id = 5547 os_tid = 0x1740 [0180.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 0x2020 [0182.418] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", dwFileAttributes=0x20) returned 1 [0183.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f0 [0183.940] GetFileSizeEx (in: hFile=0x20f0, lpFileSize=0x5bbf864 | out: lpFileSize=0x5bbf864*=224) returned 1 [0183.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0183.944] NtQuerySystemTime (in: CurrentTime=0x5bbf7d8 | out: CurrentTime=0x5bbf7d8*=132482710924188000) returned 0x0 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x47a68f7f [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x2a7ee939 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x38fcd8b9 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x492fd64f [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x507de627 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x685a9af7 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x514dea6c [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x61b69a17 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x3d40272 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x11cd9cc8 [0183.944] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x64ce95f3 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x1b1ea9cf [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x1b1689d7 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x60e64876 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0xc56b0a0 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x2b04c798 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x5020f33e [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x2f5a41a7 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x8bba665 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x5b93e2b4 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x62ce4ca8 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x53710ea2 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x2650c183 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x461a2517 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x32c59ed1 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x421d0500 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x7526cc56 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x74b20f28 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x47f92d16 [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x439a76fb [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x6ef639cb [0183.945] RtlRandomEx (in: Seed=0x5bbf7d0 | out: Seed=0x5bbf7d0) returned 0x15919e0a [0183.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0183.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0183.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0183.956] ReadFile (in: hFile=0x20f0, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x5bbf7cc, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0x5bbf7cc*=0xe0, lpOverlapped=0x0) returned 1 [0183.958] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.958] WriteFile (in: hFile=0x20f0, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5bbf7d0, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0x5bbf7d0*=0xe0, lpOverlapped=0x0) returned 1 [0184.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0184.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0184.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0184.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0184.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0184.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0184.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0184.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067100 [0184.428] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.429] WriteFile (in: hFile=0x20f0, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x5bbf858, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x5bbf858*=0x11a, lpOverlapped=0x0) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066a80) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067100) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0185.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0185.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54dd8 [0185.412] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" [0185.412] wcscat (in: _Dest=0x3d54dd8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.ac3a86" [0185.412] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.ac3a86", NtPathName=0x5bbf7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x130) returned 0x3d402d0 [0186.401] FlushFileBuffers (hFile=0x20f0) returned 1 [0186.410] CloseHandle (hObject=0x20f0) returned 1 [0186.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x67521b0 [0186.459] wcscpy (in: _Dest=0x67521b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.459] wcscat (in: _Dest=0x67521b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" [0186.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ac3a86-readme.txt")) returned 0x2020 [0186.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0186.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 Thread: id = 5548 os_tid = 0xdb0 [0180.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e16270 [0180.963] wcscpy (in: _Dest=0x3e16270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0180.963] wcscat (in: _Dest=0x3e16270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0180.963] wcscat (in: _Dest=0x3e16270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*" [0180.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0180.963] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0182.812] wcscmp (_String1=".", _String2=".") returned 0 [0182.812] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.158] wcscmp (_String1="..", _String2=".") returned 1 [0183.158] wcscmp (_String1="..", _String2="..") returned 0 [0183.158] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0183.158] wcscmp (_String1="af", _String2=".") returned 1 [0183.158] wcscmp (_String1="af", _String2="..") returned 1 [0183.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcc50 [0183.158] wcscpy (in: _Dest=0x3edcc50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0183.158] wcscat (in: _Dest=0x3edcc50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0183.158] wcscat (in: _Dest=0x3edcc50, _Source="af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0184.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0184.214] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0184.214] wcscmp (_String1="am", _String2=".") returned 1 [0184.214] wcscmp (_String1="am", _String2="..") returned 1 [0184.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6818f78 [0184.214] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.214] wcscat (in: _Dest=0x6818f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.214] wcscat (in: _Dest=0x6818f78, _Source="am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0184.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0184.215] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0184.215] wcscmp (_String1="ar", _String2=".") returned 1 [0184.215] wcscmp (_String1="ar", _String2="..") returned 1 [0184.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6819080 [0184.215] wcscpy (in: _Dest=0x6819080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.215] wcscat (in: _Dest=0x6819080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.215] wcscat (in: _Dest=0x6819080, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0184.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0184.216] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0184.216] wcscmp (_String1="az", _String2=".") returned 1 [0184.216] wcscmp (_String1="az", _String2="..") returned 1 [0184.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6819188 [0184.216] wcscpy (in: _Dest=0x6819188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.216] wcscat (in: _Dest=0x6819188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.216] wcscat (in: _Dest=0x6819188, _Source="az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0184.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0184.217] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0184.217] wcscmp (_String1="bg", _String2=".") returned 1 [0184.217] wcscmp (_String1="bg", _String2="..") returned 1 [0184.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6819290 [0184.217] wcscpy (in: _Dest=0x6819290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.217] wcscat (in: _Dest=0x6819290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.217] wcscat (in: _Dest=0x6819290, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0184.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0184.218] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0184.218] wcscmp (_String1="bn", _String2=".") returned 1 [0184.218] wcscmp (_String1="bn", _String2="..") returned 1 [0184.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6819398 [0184.218] wcscpy (in: _Dest=0x6819398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.219] wcscat (in: _Dest=0x6819398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.219] wcscat (in: _Dest=0x6819398, _Source="bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0184.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0184.220] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0184.220] wcscmp (_String1="ca", _String2=".") returned 1 [0184.220] wcscmp (_String1="ca", _String2="..") returned 1 [0184.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68194a0 [0184.220] wcscpy (in: _Dest=0x68194a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.220] wcscat (in: _Dest=0x68194a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.220] wcscat (in: _Dest=0x68194a0, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0184.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68194a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0184.221] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0184.221] wcscmp (_String1="cs", _String2=".") returned 1 [0184.221] wcscmp (_String1="cs", _String2="..") returned 1 [0184.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68195a8 [0184.221] wcscpy (in: _Dest=0x68195a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.221] wcscat (in: _Dest=0x68195a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.221] wcscat (in: _Dest=0x68195a8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0184.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68195a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0184.222] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0184.222] wcscmp (_String1="da", _String2=".") returned 1 [0184.222] wcscmp (_String1="da", _String2="..") returned 1 [0184.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68196b0 [0184.222] wcscpy (in: _Dest=0x68196b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.222] wcscat (in: _Dest=0x68196b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.222] wcscat (in: _Dest=0x68196b0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0184.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68196b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0184.223] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0184.223] wcscmp (_String1="de", _String2=".") returned 1 [0184.223] wcscmp (_String1="de", _String2="..") returned 1 [0184.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68197b8 [0184.223] wcscpy (in: _Dest=0x68197b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.223] wcscat (in: _Dest=0x68197b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.223] wcscat (in: _Dest=0x68197b8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0184.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68197b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0184.224] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0184.224] wcscmp (_String1="el", _String2=".") returned 1 [0184.224] wcscmp (_String1="el", _String2="..") returned 1 [0184.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68198c0 [0184.224] wcscpy (in: _Dest=0x68198c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.224] wcscat (in: _Dest=0x68198c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.224] wcscat (in: _Dest=0x68198c0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0184.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68198c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0184.225] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0184.225] wcscmp (_String1="en_GB", _String2=".") returned 1 [0184.225] wcscmp (_String1="en_GB", _String2="..") returned 1 [0184.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68199c8 [0184.225] wcscpy (in: _Dest=0x68199c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.226] wcscat (in: _Dest=0x68199c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.226] wcscat (in: _Dest=0x68199c8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0184.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68199c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0184.227] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0184.227] wcscmp (_String1="en_US", _String2=".") returned 1 [0184.227] wcscmp (_String1="en_US", _String2="..") returned 1 [0184.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6819ad0 [0184.227] wcscpy (in: _Dest=0x6819ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.227] wcscat (in: _Dest=0x6819ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.227] wcscat (in: _Dest=0x6819ad0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0184.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6819ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0184.228] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0184.228] wcscmp (_String1="es", _String2=".") returned 1 [0184.228] wcscmp (_String1="es", _String2="..") returned 1 [0184.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abce8 [0184.228] wcscpy (in: _Dest=0x68abce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.228] wcscat (in: _Dest=0x68abce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.228] wcscat (in: _Dest=0x68abce8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0184.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0184.229] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0184.229] wcscmp (_String1="es_419", _String2=".") returned 1 [0184.229] wcscmp (_String1="es_419", _String2="..") returned 1 [0184.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb930 [0184.229] wcscpy (in: _Dest=0x30bb930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.230] wcscat (in: _Dest=0x30bb930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.230] wcscat (in: _Dest=0x30bb930, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0184.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bb930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0184.231] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0184.231] wcscmp (_String1="et", _String2=".") returned 1 [0184.231] wcscmp (_String1="et", _String2="..") returned 1 [0184.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abdf0 [0184.231] wcscpy (in: _Dest=0x68abdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.231] wcscat (in: _Dest=0x68abdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.231] wcscat (in: _Dest=0x68abdf0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0184.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0184.232] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0184.232] wcscmp (_String1="eu", _String2=".") returned 1 [0184.232] wcscmp (_String1="eu", _String2="..") returned 1 [0184.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abef8 [0184.232] wcscpy (in: _Dest=0x68abef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.232] wcscat (in: _Dest=0x68abef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.232] wcscat (in: _Dest=0x68abef8, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0184.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0184.233] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0184.233] wcscmp (_String1="fa", _String2=".") returned 1 [0184.233] wcscmp (_String1="fa", _String2="..") returned 1 [0184.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac000 [0184.233] wcscpy (in: _Dest=0x68ac000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.233] wcscat (in: _Dest=0x68ac000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.233] wcscat (in: _Dest=0x68ac000, _Source="fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0184.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0184.235] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0184.235] wcscmp (_String1="fi", _String2=".") returned 1 [0184.235] wcscmp (_String1="fi", _String2="..") returned 1 [0184.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac108 [0184.235] wcscpy (in: _Dest=0x68ac108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.235] wcscat (in: _Dest=0x68ac108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.235] wcscat (in: _Dest=0x68ac108, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0184.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0184.236] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0184.236] wcscmp (_String1="fil", _String2=".") returned 1 [0184.236] wcscmp (_String1="fil", _String2="..") returned 1 [0184.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68ac210 [0184.236] wcscpy (in: _Dest=0x68ac210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.236] wcscat (in: _Dest=0x68ac210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.236] wcscat (in: _Dest=0x68ac210, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0184.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0184.237] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0184.237] wcscmp (_String1="fr", _String2=".") returned 1 [0184.237] wcscmp (_String1="fr", _String2="..") returned 1 [0184.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac318 [0184.237] wcscpy (in: _Dest=0x68ac318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.237] wcscat (in: _Dest=0x68ac318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.237] wcscat (in: _Dest=0x68ac318, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0184.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0184.238] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0184.238] wcscmp (_String1="fr_CA", _String2=".") returned 1 [0184.238] wcscmp (_String1="fr_CA", _String2="..") returned 1 [0184.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ac420 [0184.238] wcscpy (in: _Dest=0x68ac420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.238] wcscat (in: _Dest=0x68ac420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.238] wcscat (in: _Dest=0x68ac420, _Source="fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0184.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0184.239] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0184.239] wcscmp (_String1="gl", _String2=".") returned 1 [0184.239] wcscmp (_String1="gl", _String2="..") returned 1 [0184.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac528 [0184.239] wcscpy (in: _Dest=0x68ac528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.239] wcscat (in: _Dest=0x68ac528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.239] wcscat (in: _Dest=0x68ac528, _Source="gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0184.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0184.240] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0184.240] wcscmp (_String1="gu", _String2=".") returned 1 [0184.240] wcscmp (_String1="gu", _String2="..") returned 1 [0184.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac630 [0184.240] wcscpy (in: _Dest=0x68ac630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.240] wcscat (in: _Dest=0x68ac630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.240] wcscat (in: _Dest=0x68ac630, _Source="gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0184.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0184.241] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0184.241] wcscmp (_String1="hi", _String2=".") returned 1 [0184.241] wcscmp (_String1="hi", _String2="..") returned 1 [0184.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac738 [0184.242] wcscpy (in: _Dest=0x68ac738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.242] wcscat (in: _Dest=0x68ac738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.242] wcscat (in: _Dest=0x68ac738, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0184.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0184.243] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0184.243] wcscmp (_String1="hr", _String2=".") returned 1 [0184.243] wcscmp (_String1="hr", _String2="..") returned 1 [0184.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac840 [0184.243] wcscpy (in: _Dest=0x68ac840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.243] wcscat (in: _Dest=0x68ac840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.243] wcscat (in: _Dest=0x68ac840, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0184.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0184.244] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0184.244] wcscmp (_String1="hu", _String2=".") returned 1 [0184.244] wcscmp (_String1="hu", _String2="..") returned 1 [0184.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac948 [0184.245] wcscpy (in: _Dest=0x68ac948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.245] wcscat (in: _Dest=0x68ac948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.245] wcscat (in: _Dest=0x68ac948, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0184.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0184.246] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0184.246] wcscmp (_String1="hy", _String2=".") returned 1 [0184.246] wcscmp (_String1="hy", _String2="..") returned 1 [0184.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aca50 [0184.246] wcscpy (in: _Dest=0x68aca50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.246] wcscat (in: _Dest=0x68aca50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.246] wcscat (in: _Dest=0x68aca50, _Source="hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0184.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aca50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0184.247] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0184.247] wcscmp (_String1="id", _String2=".") returned 1 [0184.247] wcscmp (_String1="id", _String2="..") returned 1 [0184.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acb58 [0184.247] wcscpy (in: _Dest=0x68acb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.247] wcscat (in: _Dest=0x68acb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.247] wcscat (in: _Dest=0x68acb58, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0184.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0184.248] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0184.248] wcscmp (_String1="is", _String2=".") returned 1 [0184.248] wcscmp (_String1="is", _String2="..") returned 1 [0184.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acc60 [0184.248] wcscpy (in: _Dest=0x68acc60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.248] wcscat (in: _Dest=0x68acc60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.248] wcscat (in: _Dest=0x68acc60, _Source="is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0184.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0184.249] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0184.249] wcscmp (_String1="it", _String2=".") returned 1 [0184.249] wcscmp (_String1="it", _String2="..") returned 1 [0184.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acd68 [0184.249] wcscpy (in: _Dest=0x68acd68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.249] wcscat (in: _Dest=0x68acd68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.249] wcscat (in: _Dest=0x68acd68, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0184.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0184.619] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0184.619] wcscmp (_String1="iw", _String2=".") returned 1 [0184.619] wcscmp (_String1="iw", _String2="..") returned 1 [0184.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45500 [0184.619] wcscpy (in: _Dest=0x3d45500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.619] wcscat (in: _Dest=0x3d45500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.619] wcscat (in: _Dest=0x3d45500, _Source="iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0189.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0189.913] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0189.913] wcscmp (_String1="ja", _String2=".") returned 1 [0189.913] wcscmp (_String1="ja", _String2="..") returned 1 [0189.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcc50 [0189.913] wcscpy (in: _Dest=0x3edcc50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.913] wcscat (in: _Dest=0x3edcc50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.913] wcscat (in: _Dest=0x3edcc50, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0189.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0189.914] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0189.914] wcscmp (_String1="ka", _String2=".") returned 1 [0189.914] wcscmp (_String1="ka", _String2="..") returned 1 [0189.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc620 [0189.914] wcscpy (in: _Dest=0x3edc620, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.914] wcscat (in: _Dest=0x3edc620, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.914] wcscat (in: _Dest=0x3edc620, _Source="ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0189.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0189.915] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0189.915] wcscmp (_String1="km", _String2=".") returned 1 [0189.915] wcscmp (_String1="km", _String2="..") returned 1 [0189.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6817df0 [0189.915] wcscpy (in: _Dest=0x6817df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.915] wcscat (in: _Dest=0x6817df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.915] wcscat (in: _Dest=0x6817df0, _Source="km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0189.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6817df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0189.917] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0189.917] wcscmp (_String1="kn", _String2=".") returned 1 [0189.917] wcscmp (_String1="kn", _String2="..") returned 1 [0189.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6818840 [0189.917] wcscpy (in: _Dest=0x6818840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.917] wcscat (in: _Dest=0x6818840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.917] wcscat (in: _Dest=0x6818840, _Source="kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0189.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0189.918] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0189.918] wcscmp (_String1="ko", _String2=".") returned 1 [0189.918] wcscmp (_String1="ko", _String2="..") returned 1 [0189.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6818948 [0189.918] wcscpy (in: _Dest=0x6818948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.918] wcscat (in: _Dest=0x6818948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.918] wcscat (in: _Dest=0x6818948, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0189.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0189.919] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0189.919] wcscmp (_String1="lo", _String2=".") returned 1 [0189.919] wcscmp (_String1="lo", _String2="..") returned 1 [0189.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6818f78 [0189.919] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.919] wcscat (in: _Dest=0x6818f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.919] wcscat (in: _Dest=0x6818f78, _Source="lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0189.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0189.920] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0189.922] wcscmp (_String1="lt", _String2=".") returned 1 [0189.922] wcscmp (_String1="lt", _String2="..") returned 1 [0189.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae420 [0189.922] wcscpy (in: _Dest=0x68ae420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0189.922] wcscat (in: _Dest=0x68ae420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0189.922] wcscat (in: _Dest=0x68ae420, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0191.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0191.965] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0191.965] wcscmp (_String1="lv", _String2=".") returned 1 [0191.965] wcscmp (_String1="lv", _String2="..") returned 1 [0191.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcb48 [0191.965] wcscpy (in: _Dest=0x3edcb48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.965] wcscat (in: _Dest=0x3edcb48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.965] wcscat (in: _Dest=0x3edcb48, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0191.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0191.970] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0191.970] wcscmp (_String1="ml", _String2=".") returned 1 [0191.970] wcscmp (_String1="ml", _String2="..") returned 1 [0191.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc518 [0191.970] wcscpy (in: _Dest=0x3edc518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.970] wcscat (in: _Dest=0x3edc518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.970] wcscat (in: _Dest=0x3edc518, _Source="ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0191.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0191.971] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0191.971] wcscmp (_String1="mn", _String2=".") returned 1 [0191.971] wcscmp (_String1="mn", _String2="..") returned 1 [0191.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc830 [0191.971] wcscpy (in: _Dest=0x3edc830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.971] wcscat (in: _Dest=0x3edc830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.971] wcscat (in: _Dest=0x3edc830, _Source="mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0191.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0191.972] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0191.972] wcscmp (_String1="mr", _String2=".") returned 1 [0191.972] wcscmp (_String1="mr", _String2="..") returned 1 [0191.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae738 [0191.973] wcscpy (in: _Dest=0x68ae738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.973] wcscat (in: _Dest=0x68ae738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.973] wcscat (in: _Dest=0x68ae738, _Source="mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0191.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0191.974] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0191.974] wcscmp (_String1="ms", _String2=".") returned 1 [0191.974] wcscmp (_String1="ms", _String2="..") returned 1 [0191.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aeb58 [0191.974] wcscpy (in: _Dest=0x68aeb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.974] wcscat (in: _Dest=0x68aeb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.974] wcscat (in: _Dest=0x68aeb58, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0191.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aeb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0191.975] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0191.975] wcscmp (_String1="ne", _String2=".") returned 1 [0191.975] wcscmp (_String1="ne", _String2="..") returned 1 [0191.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aea50 [0191.975] wcscpy (in: _Dest=0x68aea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.975] wcscat (in: _Dest=0x68aea50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.975] wcscat (in: _Dest=0x68aea50, _Source="ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0191.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aea50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0191.976] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0191.976] wcscmp (_String1="nl", _String2=".") returned 1 [0191.976] wcscmp (_String1="nl", _String2="..") returned 1 [0191.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae318 [0191.976] wcscpy (in: _Dest=0x68ae318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.976] wcscat (in: _Dest=0x68ae318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.976] wcscat (in: _Dest=0x68ae318, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0191.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0191.977] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0191.977] wcscmp (_String1="no", _String2=".") returned 1 [0191.977] wcscmp (_String1="no", _String2="..") returned 1 [0191.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae210 [0191.977] wcscpy (in: _Dest=0x68ae210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.977] wcscat (in: _Dest=0x68ae210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.977] wcscat (in: _Dest=0x68ae210, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0191.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0191.978] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0191.978] wcscmp (_String1="pl", _String2=".") returned 1 [0191.978] wcscmp (_String1="pl", _String2="..") returned 1 [0191.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae108 [0191.978] wcscpy (in: _Dest=0x68ae108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.978] wcscat (in: _Dest=0x68ae108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.978] wcscat (in: _Dest=0x68ae108, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0191.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0191.979] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0191.979] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0191.979] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0191.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae000 [0191.980] wcscpy (in: _Dest=0x68ae000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.980] wcscat (in: _Dest=0x68ae000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.980] wcscat (in: _Dest=0x68ae000, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0191.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0191.981] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0191.981] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0191.981] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0191.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68adef8 [0191.981] wcscpy (in: _Dest=0x68adef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.981] wcscat (in: _Dest=0x68adef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.981] wcscat (in: _Dest=0x68adef8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0191.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68adef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0191.982] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0191.982] wcscmp (_String1="ro", _String2=".") returned 1 [0191.982] wcscmp (_String1="ro", _String2="..") returned 1 [0191.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68addf0 [0191.982] wcscpy (in: _Dest=0x68addf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.982] wcscat (in: _Dest=0x68addf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.982] wcscat (in: _Dest=0x68addf0, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0191.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68addf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0191.983] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0191.983] wcscmp (_String1="ru", _String2=".") returned 1 [0191.983] wcscmp (_String1="ru", _String2="..") returned 1 [0191.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68adce8 [0191.983] wcscpy (in: _Dest=0x68adce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.983] wcscat (in: _Dest=0x68adce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.983] wcscat (in: _Dest=0x68adce8, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0191.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68adce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0191.984] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0191.984] wcscmp (_String1="si", _String2=".") returned 1 [0191.984] wcscmp (_String1="si", _String2="..") returned 1 [0191.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae948 [0191.985] wcscpy (in: _Dest=0x68ae948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.985] wcscat (in: _Dest=0x68ae948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.985] wcscat (in: _Dest=0x68ae948, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0191.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0191.986] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0191.986] wcscmp (_String1="sk", _String2=".") returned 1 [0191.986] wcscmp (_String1="sk", _String2="..") returned 1 [0191.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aed68 [0191.986] wcscpy (in: _Dest=0x68aed68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.986] wcscat (in: _Dest=0x68aed68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.987] wcscat (in: _Dest=0x68aed68, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0191.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aed68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0191.988] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0191.988] wcscmp (_String1="sl", _String2=".") returned 1 [0191.988] wcscmp (_String1="sl", _String2="..") returned 1 [0191.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aef78 [0191.988] wcscpy (in: _Dest=0x68aef78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.988] wcscat (in: _Dest=0x68aef78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.988] wcscat (in: _Dest=0x68aef78, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0191.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aef78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0191.989] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0191.989] wcscmp (_String1="sr", _String2=".") returned 1 [0191.989] wcscmp (_String1="sr", _String2="..") returned 1 [0191.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af5a8 [0191.989] wcscpy (in: _Dest=0x68af5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.989] wcscat (in: _Dest=0x68af5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.989] wcscat (in: _Dest=0x68af5a8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0191.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0191.990] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0191.990] wcscmp (_String1="sv", _String2=".") returned 1 [0191.990] wcscmp (_String1="sv", _String2="..") returned 1 [0191.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af7b8 [0191.990] wcscpy (in: _Dest=0x68af7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.990] wcscat (in: _Dest=0x68af7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.990] wcscat (in: _Dest=0x68af7b8, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0191.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0191.991] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0191.991] wcscmp (_String1="sw", _String2=".") returned 1 [0191.991] wcscmp (_String1="sw", _String2="..") returned 1 [0191.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af9c8 [0191.991] wcscpy (in: _Dest=0x68af9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.991] wcscat (in: _Dest=0x68af9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.991] wcscat (in: _Dest=0x68af9c8, _Source="sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0191.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0191.992] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0191.992] wcscmp (_String1="ta", _String2=".") returned 1 [0191.993] wcscmp (_String1="ta", _String2="..") returned 1 [0191.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af188 [0191.993] wcscpy (in: _Dest=0x68af188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.993] wcscat (in: _Dest=0x68af188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.993] wcscat (in: _Dest=0x68af188, _Source="ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0191.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0191.994] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0191.994] wcscmp (_String1="te", _String2=".") returned 1 [0191.994] wcscmp (_String1="te", _String2="..") returned 1 [0191.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af290 [0191.994] wcscpy (in: _Dest=0x68af290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.994] wcscat (in: _Dest=0x68af290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.994] wcscat (in: _Dest=0x68af290, _Source="te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0191.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0191.995] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0191.995] wcscmp (_String1="th", _String2=".") returned 1 [0191.995] wcscmp (_String1="th", _String2="..") returned 1 [0191.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af398 [0191.995] wcscpy (in: _Dest=0x68af398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.995] wcscat (in: _Dest=0x68af398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.995] wcscat (in: _Dest=0x68af398, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0191.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0191.996] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0191.996] wcscmp (_String1="tr", _String2=".") returned 1 [0191.996] wcscmp (_String1="tr", _String2="..") returned 1 [0191.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af4a0 [0191.996] wcscpy (in: _Dest=0x68af4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.996] wcscat (in: _Dest=0x68af4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.996] wcscat (in: _Dest=0x68af4a0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0191.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0191.997] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0191.997] wcscmp (_String1="uk", _String2=".") returned 1 [0191.997] wcscmp (_String1="uk", _String2="..") returned 1 [0191.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af6b0 [0191.997] wcscpy (in: _Dest=0x68af6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.997] wcscat (in: _Dest=0x68af6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.997] wcscat (in: _Dest=0x68af6b0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0191.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0191.998] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0191.998] wcscmp (_String1="ur", _String2=".") returned 1 [0191.998] wcscmp (_String1="ur", _String2="..") returned 1 [0191.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af8c0 [0191.998] wcscpy (in: _Dest=0x68af8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0191.999] wcscat (in: _Dest=0x68af8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0191.999] wcscat (in: _Dest=0x68af8c0, _Source="ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0191.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0192.000] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0192.000] wcscmp (_String1="vi", _String2=".") returned 1 [0192.000] wcscmp (_String1="vi", _String2="..") returned 1 [0192.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aec60 [0192.000] wcscpy (in: _Dest=0x68aec60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0192.000] wcscat (in: _Dest=0x68aec60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0192.000] wcscat (in: _Dest=0x68aec60, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0192.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aec60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0 [0192.001] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0192.001] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0192.001] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0192.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68aee70 [0192.001] wcscpy (in: _Dest=0x68aee70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0192.001] wcscat (in: _Dest=0x68aee70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0192.001] wcscat (in: _Dest=0x68aee70, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0192.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aee70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0192.002] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0192.002] wcscmp (_String1="zh_HK", _String2=".") returned 1 [0192.002] wcscmp (_String1="zh_HK", _String2="..") returned 1 [0192.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68af080 [0192.002] wcscpy (in: _Dest=0x68af080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0192.002] wcscat (in: _Dest=0x68af080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0192.002] wcscat (in: _Dest=0x68af080, _Source="zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0192.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68af080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0192.003] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0192.003] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0192.003] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0192.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68afad0 [0192.003] wcscpy (in: _Dest=0x68afad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0192.003] wcscat (in: _Dest=0x68afad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0192.003] wcscat (in: _Dest=0x68afad0, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0192.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68afad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0192.004] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0192.004] wcscmp (_String1="zu", _String2=".") returned 1 [0192.004] wcscmp (_String1="zu", _String2="..") returned 1 [0192.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f24b08 [0192.005] wcscpy (in: _Dest=0x3f24b08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0192.005] wcscat (in: _Dest=0x3f24b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0192.005] wcscat (in: _Dest=0x3f24b08, _Source="zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0192.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f24b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0192.006] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0 [0192.006] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0192.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0192.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16270) returned 1 [0192.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17070) returned 1 Thread: id = 5549 os_tid = 0x17dc [0180.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc200 [0180.963] wcscpy (in: _Dest=0x3edc200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0180.963] wcscat (in: _Dest=0x3edc200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0180.963] wcscat (in: _Dest=0x3edc200, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*" [0180.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0180.964] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0182.019] wcscmp (_String1=".", _String2=".") returned 0 [0182.019] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.019] wcscmp (_String1="..", _String2=".") returned 1 [0182.019] wcscmp (_String1="..", _String2="..") returned 0 [0182.019] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5cd5910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0182.019] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0182.019] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0182.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55718 [0182.019] wcscpy (in: _Dest=0x3d55718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0182.019] wcscat (in: _Dest=0x3d55718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0182.019] wcscat (in: _Dest=0x3d55718, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" [0182.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0182.179] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0182.179] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0182.179] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0182.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8cb8 [0182.180] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0182.180] wcscat (in: _Dest=0x3dd8cb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0182.180] wcscat (in: _Dest=0x3dd8cb8, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" [0182.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dd8cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0182.181] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0182.181] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0182.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0182.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc200) returned 1 [0182.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15770) returned 1 Thread: id = 5550 os_tid = 0xe5c [0180.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx")) returned 0x20 [0180.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0180.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.978] GetLastError () returned 0x5 [0180.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0180.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e4c8) returned 1 Thread: id = 5551 os_tid = 0xddc [0180.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx")) returned 0x20 [0180.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0180.989] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.995] GetLastError () returned 0x5 [0180.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0180.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de38) returned 1 Thread: id = 5552 os_tid = 0x17e4 [0181.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv")) returned 0x20 [0181.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0181.008] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.015] GetLastError () returned 0x5 [0181.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0181.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 5553 os_tid = 0x6fc [0181.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv")) returned 0x20 [0181.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0181.029] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.036] GetLastError () returned 0x5 [0181.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0181.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbd8) returned 1 Thread: id = 5554 os_tid = 0x17e8 [0181.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv")) returned 0x20 [0181.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0181.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.151] GetLastError () returned 0x5 [0181.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0181.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 5555 os_tid = 0x17ec [0181.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv")) returned 0x20 [0181.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0181.166] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.173] GetLastError () returned 0x5 [0181.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0181.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e9a8) returned 1 Thread: id = 5556 os_tid = 0x17f0 [0181.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv")) returned 0x20 [0181.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0181.186] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.194] GetLastError () returned 0x5 [0181.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0181.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e918) returned 1 Thread: id = 5557 os_tid = 0x17f4 [0181.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv")) returned 0x20 [0181.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0181.208] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.215] GetLastError () returned 0x5 [0181.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0181.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 5558 os_tid = 0x17fc [0181.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv")) returned 0x20 [0181.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0181.227] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.234] GetLastError () returned 0x5 [0181.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0181.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 Thread: id = 5559 os_tid = 0x22c [0181.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv")) returned 0x20 [0182.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0182.404] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.404] GetLastError () returned 0x5 [0182.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0182.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e528) returned 1 Thread: id = 5560 os_tid = 0xe20 [0181.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv")) returned 0x20 [0182.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0182.438] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.438] GetLastError () returned 0x5 [0182.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0182.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 5561 os_tid = 0x180 [0181.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv")) returned 0x20 [0182.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0182.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.039] GetLastError () returned 0x5 [0182.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0182.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 5562 os_tid = 0xfdc [0181.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv")) returned 0x20 [0182.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0182.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.450] GetLastError () returned 0x5 [0182.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0182.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 5563 os_tid = 0x10c [0181.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv")) returned 0x20 [0182.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0182.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.451] GetLastError () returned 0x5 [0182.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0182.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dcb8) returned 1 Thread: id = 5564 os_tid = 0xff0 [0181.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv")) returned 0x20 [0182.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0182.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.453] GetLastError () returned 0x5 [0182.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0182.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e2e8) returned 1 Thread: id = 5565 os_tid = 0xf88 [0181.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv")) returned 0x20 [0182.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0182.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.454] GetLastError () returned 0x5 [0182.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0182.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce18) returned 1 Thread: id = 5566 os_tid = 0x1310 [0181.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv")) returned 0x20 [0182.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0182.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.456] GetLastError () returned 0x5 [0182.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0182.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 5567 os_tid = 0x132c [0181.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv")) returned 0x20 [0182.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0182.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.435] GetLastError () returned 0x5 [0182.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0182.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e378) returned 1 Thread: id = 5568 os_tid = 0x1330 [0181.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv")) returned 0x20 [0182.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0182.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.440] GetLastError () returned 0x5 [0182.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0182.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 5569 os_tid = 0x1334 [0181.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv")) returned 0x20 [0182.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0182.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.441] GetLastError () returned 0x5 [0182.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0182.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e888) returned 1 Thread: id = 5570 os_tid = 0x1340 [0181.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv")) returned 0x20 [0182.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0182.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.443] GetLastError () returned 0x5 [0182.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0182.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d7a8) returned 1 Thread: id = 5571 os_tid = 0x1344 [0181.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x674cea8 [0181.267] wcscpy (in: _Dest=0x674cea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0181.267] wcscat (in: _Dest=0x674cea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0181.267] wcscat (in: _Dest=0x674cea8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*" [0181.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0181.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0182.444] wcscmp (_String1=".", _String2=".") returned 0 [0182.444] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.444] wcscmp (_String1="..", _String2=".") returned 1 [0182.444] wcscmp (_String1="..", _String2="..") returned 0 [0182.444] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9103, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0182.444] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0182.444] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0182.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e0d8 [0182.444] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0182.444] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0182.444] wcscat (in: _Dest=0x697e0d8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" [0184.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0184.569] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0184.569] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0184.569] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0184.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e180 [0184.569] wcscpy (in: _Dest=0x697e180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0184.569] wcscat (in: _Dest=0x697e180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0184.569] wcscat (in: _Dest=0x697e180, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" [0184.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x697e180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0184.570] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0184.570] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0184.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0184.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cea8) returned 1 [0184.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 5572 os_tid = 0x1348 [0181.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv")) returned 0x20 [0182.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0182.445] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.445] GetLastError () returned 0x5 [0182.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0182.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccf8) returned 1 Thread: id = 5573 os_tid = 0x134c [0181.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv")) returned 0x20 [0182.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0182.446] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.447] GetLastError () returned 0x5 [0182.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0182.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d718) returned 1 Thread: id = 5574 os_tid = 0x1358 [0181.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv")) returned 0x20 [0182.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0182.448] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.448] GetLastError () returned 0x5 [0182.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0182.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d208) returned 1 Thread: id = 5575 os_tid = 0x135c [0181.269] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png")) returned 0x2020 [0182.894] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png", dwFileAttributes=0x20) returned 1 [0184.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0184.046] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0xc6bfaa4 | out: lpFileSize=0xc6bfaa4*=7547) returned 1 [0184.046] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x1d77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.046] ReadFile (in: hFile=0x1448, lpBuffer=0xc6bfa80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc6bfa90, lpOverlapped=0x0 | out: lpBuffer=0xc6bfa80*, lpNumberOfBytesRead=0xc6bfa90*=0x4, lpOverlapped=0x0) returned 1 [0184.049] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0184.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.049] NtQuerySystemTime (in: CurrentTime=0xc6bfa18 | out: CurrentTime=0xc6bfa18*=132482710925280000) returned 0x0 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x4522f5a2 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x358aa613 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x416db2a7 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x42235d8a [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x38a47064 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x671ee228 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x6fcff5b1 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x22637874 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0xd6a5ea5 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x32304077 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x6fa12a00 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x42acf56d [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x1c6450c2 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x796651e4 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x50e1b995 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x2a0b74b7 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x2301f752 [0184.049] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x5629e8db [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0xfdb7b25 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x74d1e10b [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x301e431b [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x69ebde48 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x41684dac [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x59836c06 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x5f25297f [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x6128ee87 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x6f9033da [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x59a0d70f [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x68cf32e8 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x69d78fb1 [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x2f71242b [0184.050] RtlRandomEx (in: Seed=0xc6bfa10 | out: Seed=0xc6bfa10) returned 0x75300b72 [0184.058] ReadFile (in: hFile=0x1448, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x1d7b, lpNumberOfBytesRead=0xc6bfa0c, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xc6bfa0c*=0x1d7b, lpOverlapped=0x0) returned 1 [0184.085] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.085] WriteFile (in: hFile=0x1448, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x1d7b, lpNumberOfBytesWritten=0xc6bfa10, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xc6bfa10*=0x1d7b, lpOverlapped=0x0) returned 1 [0184.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0184.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0184.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef41c8 [0184.088] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.088] WriteFile (in: hFile=0x1448, lpBuffer=0x6818f78*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xc6bfa98, lpOverlapped=0x0 | out: lpBuffer=0x6818f78*, lpNumberOfBytesWritten=0xc6bfa98*=0x100, lpOverlapped=0x0) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0184.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6818f78 [0184.091] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0184.091] wcscat (in: _Dest=0x6818f78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.ac3a86" [0184.091] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.ac3a86", NtPathName=0xc6bfa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54dd8 [0184.095] FlushFileBuffers (hFile=0x1448) returned 1 [0185.087] CloseHandle (hObject=0x1448) returned 1 [0185.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6750ab8 [0185.392] wcscpy (in: _Dest=0x6750ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0185.392] wcscat (in: _Dest=0x6750ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt" [0185.392] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\ac3a86-readme.txt")) returned 0xffffffff [0185.392] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cd0 [0185.904] WriteFile (in: hFile=0x1cd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc6bfa2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc6bfa2c*=0x8b9, lpOverlapped=0x0) returned 1 [0186.431] CloseHandle (hObject=0x1cd0) returned 1 [0186.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0186.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15870) returned 1 Thread: id = 5576 os_tid = 0x1370 [0181.270] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json")) returned 0x2020 [0183.129] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0183.569] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ccc [0183.569] GetFileSizeEx (in: hFile=0x1ccc, lpFileSize=0x95bfb1c | out: lpFileSize=0x95bfb1c*=981) returned 1 [0183.569] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.570] ReadFile (in: hFile=0x1ccc, lpBuffer=0x95bfaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95bfb08, lpOverlapped=0x0 | out: lpBuffer=0x95bfaf8*, lpNumberOfBytesRead=0x95bfb08*=0x4, lpOverlapped=0x0) returned 1 [0183.572] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0183.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0183.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0183.573] NtQuerySystemTime (in: CurrentTime=0x95bfa90 | out: CurrentTime=0x95bfa90*=132482710920444000) returned 0x0 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x6dcae6ad [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0xde73ba3 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x1d0a34b6 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x7e1e57aa [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x4ea807db [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x1a0a4feb [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x77949a25 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x2a32476e [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x1d2bb2c [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x257061f7 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x26c979e5 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x699ce596 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x166cbd13 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x60ce1937 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x32389e44 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x24407cef [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x1685a928 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x7d90fab3 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x6f7ee0b0 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x18d179dd [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x41456e36 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x6186f6a3 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x75484af3 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x2f803e15 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x1b67e6e5 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x28cd3b07 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x89b9e1 [0183.573] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0xc2417ff [0183.574] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x4d419684 [0183.574] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x5e191c60 [0183.574] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x5bdce4c [0183.574] RtlRandomEx (in: Seed=0x95bfa88 | out: Seed=0x95bfa88) returned 0x6850dc33 [0183.584] ReadFile (in: hFile=0x1ccc, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x95bfa84, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0x95bfa84*=0x3d5, lpOverlapped=0x0) returned 1 [0183.584] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.584] WriteFile (in: hFile=0x1ccc, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0x3d5, lpNumberOfBytesWritten=0x95bfa88, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x95bfa88*=0x3d5, lpOverlapped=0x0) returned 1 [0184.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0184.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0184.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0184.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0184.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0184.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0184.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ca8) returned 1 [0184.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0184.479] SetFilePointerEx (in: hFile=0x1ccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.480] WriteFile (in: hFile=0x1ccc, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x95bfb10, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0x95bfb10*=0x10c, lpOverlapped=0x0) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0185.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0185.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0185.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0185.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0185.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0185.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bbc78 [0185.640] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" [0185.640] wcscat (in: _Dest=0x30bbc78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.ac3a86" [0185.640] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.ac3a86", NtPathName=0x95bfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40678 [0185.900] FlushFileBuffers (hFile=0x1ccc) returned 1 [0186.021] CloseHandle (hObject=0x1ccc) returned 1 [0186.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbb60 [0186.393] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0186.393] wcscat (in: _Dest=0x30bbb60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt" [0186.393] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\ac3a86-readme.txt")) returned 0x2020 [0186.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0186.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 Thread: id = 5577 os_tid = 0x137c [0181.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e15970 [0181.270] wcscpy (in: _Dest=0x3e15970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0181.270] wcscat (in: _Dest=0x3e15970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0181.270] wcscat (in: _Dest=0x3e15970, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*" [0181.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0181.270] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0183.128] wcscmp (_String1=".", _String2=".") returned 0 [0183.129] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.129] wcscmp (_String1="..", _String2=".") returned 1 [0183.129] wcscmp (_String1="..", _String2="..") returned 0 [0183.129] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.129] wcscmp (_String1="ar", _String2=".") returned 1 [0183.129] wcscmp (_String1="ar", _String2="..") returned 1 [0183.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcb48 [0183.129] wcscpy (in: _Dest=0x3edcb48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.129] wcscat (in: _Dest=0x3edcb48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.129] wcscat (in: _Dest=0x3edcb48, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0183.279] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0183.279] wcscmp (_String1="bg", _String2=".") returned 1 [0183.279] wcscmp (_String1="bg", _String2="..") returned 1 [0183.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcf68 [0183.279] wcscpy (in: _Dest=0x3edcf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.279] wcscat (in: _Dest=0x3edcf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.279] wcscat (in: _Dest=0x3edcf68, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0183.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0183.281] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0183.281] wcscmp (_String1="ca", _String2=".") returned 1 [0183.281] wcscmp (_String1="ca", _String2="..") returned 1 [0183.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44060 [0183.281] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.281] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.281] wcscat (in: _Dest=0x3d44060, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0183.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0183.282] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0183.282] wcscmp (_String1="cs", _String2=".") returned 1 [0183.282] wcscmp (_String1="cs", _String2="..") returned 1 [0183.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44168 [0183.282] wcscpy (in: _Dest=0x3d44168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.282] wcscat (in: _Dest=0x3d44168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.282] wcscat (in: _Dest=0x3d44168, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0183.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0183.285] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0183.285] wcscmp (_String1="da", _String2=".") returned 1 [0183.285] wcscmp (_String1="da", _String2="..") returned 1 [0183.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44270 [0183.285] wcscpy (in: _Dest=0x3d44270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.285] wcscat (in: _Dest=0x3d44270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.285] wcscat (in: _Dest=0x3d44270, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0183.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0183.286] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0183.286] wcscmp (_String1="de", _String2=".") returned 1 [0183.287] wcscmp (_String1="de", _String2="..") returned 1 [0183.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44378 [0183.287] wcscpy (in: _Dest=0x3d44378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.287] wcscat (in: _Dest=0x3d44378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.287] wcscat (in: _Dest=0x3d44378, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0183.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0183.288] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0183.288] wcscmp (_String1="el", _String2=".") returned 1 [0183.288] wcscmp (_String1="el", _String2="..") returned 1 [0183.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44480 [0183.288] wcscpy (in: _Dest=0x3d44480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.288] wcscat (in: _Dest=0x3d44480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.288] wcscat (in: _Dest=0x3d44480, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0183.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0183.289] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0183.289] wcscmp (_String1="en_GB", _String2=".") returned 1 [0183.289] wcscmp (_String1="en_GB", _String2="..") returned 1 [0183.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44588 [0183.289] wcscpy (in: _Dest=0x3d44588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.289] wcscat (in: _Dest=0x3d44588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.289] wcscat (in: _Dest=0x3d44588, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0183.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0183.290] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0183.290] wcscmp (_String1="en_US", _String2=".") returned 1 [0183.290] wcscmp (_String1="en_US", _String2="..") returned 1 [0183.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44690 [0183.290] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.290] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.290] wcscat (in: _Dest=0x3d44690, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0183.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0183.291] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0183.291] wcscmp (_String1="es", _String2=".") returned 1 [0183.291] wcscmp (_String1="es", _String2="..") returned 1 [0183.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44798 [0183.291] wcscpy (in: _Dest=0x3d44798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.291] wcscat (in: _Dest=0x3d44798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.291] wcscat (in: _Dest=0x3d44798, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0183.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0183.293] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0183.293] wcscmp (_String1="es_419", _String2=".") returned 1 [0183.293] wcscmp (_String1="es_419", _String2="..") returned 1 [0183.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300dfd8 [0183.293] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.293] wcscat (in: _Dest=0x300dfd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.293] wcscat (in: _Dest=0x300dfd8, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0183.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x300dfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0183.300] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0183.300] wcscmp (_String1="et", _String2=".") returned 1 [0183.300] wcscmp (_String1="et", _String2="..") returned 1 [0183.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d448a0 [0183.300] wcscpy (in: _Dest=0x3d448a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.300] wcscat (in: _Dest=0x3d448a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.300] wcscat (in: _Dest=0x3d448a0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0183.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0183.304] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0183.304] wcscmp (_String1="eu", _String2=".") returned 1 [0183.304] wcscmp (_String1="eu", _String2="..") returned 1 [0183.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d449a8 [0183.304] wcscpy (in: _Dest=0x3d449a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.304] wcscat (in: _Dest=0x3d449a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.304] wcscat (in: _Dest=0x3d449a8, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0183.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d449a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0183.308] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0183.308] wcscmp (_String1="fi", _String2=".") returned 1 [0183.308] wcscmp (_String1="fi", _String2="..") returned 1 [0183.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44ab0 [0183.308] wcscpy (in: _Dest=0x3d44ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.308] wcscat (in: _Dest=0x3d44ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.309] wcscat (in: _Dest=0x3d44ab0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0183.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0183.310] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0183.310] wcscmp (_String1="fil", _String2=".") returned 1 [0183.310] wcscmp (_String1="fil", _String2="..") returned 1 [0183.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d44bb8 [0183.310] wcscpy (in: _Dest=0x3d44bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.310] wcscat (in: _Dest=0x3d44bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.310] wcscat (in: _Dest=0x3d44bb8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0183.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0183.311] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0183.311] wcscmp (_String1="fr", _String2=".") returned 1 [0183.311] wcscmp (_String1="fr", _String2="..") returned 1 [0183.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44cc0 [0183.311] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.311] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.311] wcscat (in: _Dest=0x3d44cc0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0183.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0183.313] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0183.313] wcscmp (_String1="he", _String2=".") returned 1 [0183.313] wcscmp (_String1="he", _String2="..") returned 1 [0183.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44dc8 [0183.313] wcscpy (in: _Dest=0x3d44dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.313] wcscat (in: _Dest=0x3d44dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.313] wcscat (in: _Dest=0x3d44dc8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0183.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0183.314] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0183.314] wcscmp (_String1="hi", _String2=".") returned 1 [0183.314] wcscmp (_String1="hi", _String2="..") returned 1 [0183.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44ed0 [0183.314] wcscpy (in: _Dest=0x3d44ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.314] wcscat (in: _Dest=0x3d44ed0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.314] wcscat (in: _Dest=0x3d44ed0, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0183.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0183.315] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0183.315] wcscmp (_String1="hr", _String2=".") returned 1 [0183.315] wcscmp (_String1="hr", _String2="..") returned 1 [0183.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44fd8 [0183.316] wcscpy (in: _Dest=0x3d44fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.316] wcscat (in: _Dest=0x3d44fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.316] wcscat (in: _Dest=0x3d44fd8, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0183.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0183.317] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0183.317] wcscmp (_String1="hu", _String2=".") returned 1 [0183.317] wcscmp (_String1="hu", _String2="..") returned 1 [0183.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d450e0 [0183.317] wcscpy (in: _Dest=0x3d450e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.317] wcscat (in: _Dest=0x3d450e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.317] wcscat (in: _Dest=0x3d450e0, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0183.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d450e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0183.318] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0183.318] wcscmp (_String1="id", _String2=".") returned 1 [0183.318] wcscmp (_String1="id", _String2="..") returned 1 [0183.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d451e8 [0183.318] wcscpy (in: _Dest=0x3d451e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.318] wcscat (in: _Dest=0x3d451e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.318] wcscat (in: _Dest=0x3d451e8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0183.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d451e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580 [0183.320] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0183.320] wcscmp (_String1="it", _String2=".") returned 1 [0183.320] wcscmp (_String1="it", _String2="..") returned 1 [0183.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d452f0 [0183.320] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.320] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.320] wcscat (in: _Dest=0x3d452f0, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0183.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0183.321] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0183.321] wcscmp (_String1="ja", _String2=".") returned 1 [0183.321] wcscmp (_String1="ja", _String2="..") returned 1 [0183.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d453f8 [0183.321] wcscpy (in: _Dest=0x3d453f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.321] wcscat (in: _Dest=0x3d453f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.322] wcscat (in: _Dest=0x3d453f8, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0183.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d453f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc [0183.323] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0183.323] wcscmp (_String1="ko", _String2=".") returned 1 [0183.323] wcscmp (_String1="ko", _String2="..") returned 1 [0183.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45500 [0183.323] wcscpy (in: _Dest=0x3d45500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.323] wcscat (in: _Dest=0x3d45500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.323] wcscat (in: _Dest=0x3d45500, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0183.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0183.324] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0183.324] wcscmp (_String1="lt", _String2=".") returned 1 [0183.324] wcscmp (_String1="lt", _String2="..") returned 1 [0183.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45608 [0183.324] wcscpy (in: _Dest=0x3d45608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.324] wcscat (in: _Dest=0x3d45608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.324] wcscat (in: _Dest=0x3d45608, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0183.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0183.339] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0183.339] wcscmp (_String1="lv", _String2=".") returned 1 [0183.339] wcscmp (_String1="lv", _String2="..") returned 1 [0183.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45818 [0183.359] wcscpy (in: _Dest=0x3d45818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.359] wcscat (in: _Dest=0x3d45818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.359] wcscat (in: _Dest=0x3d45818, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0183.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0184.250] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0184.250] wcscmp (_String1="ms", _String2=".") returned 1 [0184.250] wcscmp (_String1="ms", _String2="..") returned 1 [0184.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ace70 [0184.250] wcscpy (in: _Dest=0x68ace70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0184.250] wcscat (in: _Dest=0x68ace70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0184.250] wcscat (in: _Dest=0x68ace70, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0185.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ace70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0185.460] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0185.460] wcscmp (_String1="nl", _String2=".") returned 1 [0185.460] wcscmp (_String1="nl", _String2="..") returned 1 [0185.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752ed8 [0185.460] wcscpy (in: _Dest=0x6752ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.460] wcscat (in: _Dest=0x6752ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.460] wcscat (in: _Dest=0x6752ed8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0185.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0185.462] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0185.462] wcscmp (_String1="no", _String2=".") returned 1 [0185.462] wcscmp (_String1="no", _String2="..") returned 1 [0185.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752fe0 [0185.462] wcscpy (in: _Dest=0x6752fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.462] wcscat (in: _Dest=0x6752fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.462] wcscat (in: _Dest=0x6752fe0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0185.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0185.464] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0185.464] wcscmp (_String1="pl", _String2=".") returned 1 [0185.464] wcscmp (_String1="pl", _String2="..") returned 1 [0185.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x67530e8 [0185.464] wcscpy (in: _Dest=0x67530e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.464] wcscat (in: _Dest=0x67530e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.464] wcscat (in: _Dest=0x67530e8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0185.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67530e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0185.466] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0185.466] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0185.466] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0185.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x67531f0 [0185.466] wcscpy (in: _Dest=0x67531f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.466] wcscat (in: _Dest=0x67531f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.466] wcscat (in: _Dest=0x67531f0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0185.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67531f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0185.468] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0185.468] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0185.468] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0185.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x67532f8 [0185.468] wcscpy (in: _Dest=0x67532f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.468] wcscat (in: _Dest=0x67532f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.468] wcscat (in: _Dest=0x67532f8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0185.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67532f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0185.470] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0185.470] wcscmp (_String1="ro", _String2=".") returned 1 [0185.479] wcscmp (_String1="ro", _String2="..") returned 1 [0185.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753400 [0185.479] wcscpy (in: _Dest=0x6753400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.479] wcscat (in: _Dest=0x6753400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.479] wcscat (in: _Dest=0x6753400, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0185.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0185.480] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0185.480] wcscmp (_String1="ru", _String2=".") returned 1 [0185.480] wcscmp (_String1="ru", _String2="..") returned 1 [0185.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753508 [0185.480] wcscpy (in: _Dest=0x6753508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.480] wcscat (in: _Dest=0x6753508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.480] wcscat (in: _Dest=0x6753508, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0185.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0185.482] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0185.482] wcscmp (_String1="sk", _String2=".") returned 1 [0185.482] wcscmp (_String1="sk", _String2="..") returned 1 [0185.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753610 [0185.482] wcscpy (in: _Dest=0x6753610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.482] wcscat (in: _Dest=0x6753610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.482] wcscat (in: _Dest=0x6753610, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0185.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0185.483] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0185.483] wcscmp (_String1="sl", _String2=".") returned 1 [0185.483] wcscmp (_String1="sl", _String2="..") returned 1 [0185.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753718 [0185.484] wcscpy (in: _Dest=0x6753718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.484] wcscat (in: _Dest=0x6753718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.484] wcscat (in: _Dest=0x6753718, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0185.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0185.485] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0185.485] wcscmp (_String1="sr", _String2=".") returned 1 [0185.485] wcscmp (_String1="sr", _String2="..") returned 1 [0185.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753820 [0185.486] wcscpy (in: _Dest=0x6753820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.486] wcscat (in: _Dest=0x6753820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.486] wcscat (in: _Dest=0x6753820, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0185.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0185.487] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0185.487] wcscmp (_String1="sv", _String2=".") returned 1 [0185.487] wcscmp (_String1="sv", _String2="..") returned 1 [0185.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753928 [0185.488] wcscpy (in: _Dest=0x6753928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.488] wcscat (in: _Dest=0x6753928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.488] wcscat (in: _Dest=0x6753928, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0185.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0185.489] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0185.489] wcscmp (_String1="th", _String2=".") returned 1 [0185.489] wcscmp (_String1="th", _String2="..") returned 1 [0185.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753a30 [0185.489] wcscpy (in: _Dest=0x6753a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.489] wcscat (in: _Dest=0x6753a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.489] wcscat (in: _Dest=0x6753a30, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0185.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0185.491] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0185.491] wcscmp (_String1="tr", _String2=".") returned 1 [0185.491] wcscmp (_String1="tr", _String2="..") returned 1 [0185.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753b38 [0185.491] wcscpy (in: _Dest=0x6753b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.491] wcscat (in: _Dest=0x6753b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.491] wcscat (in: _Dest=0x6753b38, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0185.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0185.493] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0185.493] wcscmp (_String1="uk", _String2=".") returned 1 [0185.493] wcscmp (_String1="uk", _String2="..") returned 1 [0185.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753c40 [0185.493] wcscpy (in: _Dest=0x6753c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.493] wcscat (in: _Dest=0x6753c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.493] wcscat (in: _Dest=0x6753c40, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0185.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0185.494] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0185.494] wcscmp (_String1="vi", _String2=".") returned 1 [0185.494] wcscmp (_String1="vi", _String2="..") returned 1 [0185.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6753d48 [0185.495] wcscpy (in: _Dest=0x6753d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.495] wcscat (in: _Dest=0x6753d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.495] wcscat (in: _Dest=0x6753d48, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0185.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0185.497] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0185.497] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0185.497] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0185.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6753e50 [0185.497] wcscpy (in: _Dest=0x6753e50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.497] wcscat (in: _Dest=0x6753e50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.497] wcscat (in: _Dest=0x6753e50, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0185.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0185.498] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0185.498] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0185.498] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0185.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6753f58 [0185.498] wcscpy (in: _Dest=0x6753f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.498] wcscat (in: _Dest=0x6753f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.498] wcscat (in: _Dest=0x6753f58, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0185.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0185.500] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0185.500] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0185.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0185.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15970) returned 1 [0185.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15470) returned 1 Thread: id = 5578 os_tid = 0x1380 [0181.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld")) returned 0x20 [0181.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0181.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.272] GetLastError () returned 0x5 [0181.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0181.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 5579 os_tid = 0x1384 [0181.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae100 [0181.273] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0181.273] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0181.273] wcscat (in: _Dest=0x3dae100, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*" [0181.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0181.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0182.895] wcscmp (_String1=".", _String2=".") returned 0 [0182.895] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.895] wcscmp (_String1="..", _String2=".") returned 1 [0182.895] wcscmp (_String1="..", _String2="..") returned 0 [0182.895] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5091eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0182.895] wcscmp (_String1="128.png", _String2=".") returned 1 [0182.895] wcscmp (_String1="128.png", _String2="..") returned 1 [0182.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17970 [0182.895] wcscpy (in: _Dest=0x3e17970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0182.895] wcscat (in: _Dest=0x3e17970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0182.895] wcscat (in: _Dest=0x3e17970, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0189.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0189.905] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5088270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0189.905] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0189.905] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0189.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67522c8 [0189.906] wcscpy (in: _Dest=0x67522c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0189.906] wcscat (in: _Dest=0x67522c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0189.906] wcscat (in: _Dest=0x67522c8, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" [0189.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67522c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0189.907] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0189.907] wcscmp (_String1="_locales", _String2=".") returned 1 [0189.907] wcscmp (_String1="_locales", _String2="..") returned 1 [0189.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3ee8708 [0189.907] wcscpy (in: _Dest=0x3ee8708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0189.907] wcscat (in: _Dest=0x3ee8708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0189.907] wcscat (in: _Dest=0x3ee8708, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0189.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0189.909] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0189.909] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0189.909] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0189.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3ee8508 [0189.909] wcscpy (in: _Dest=0x3ee8508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0189.909] wcscat (in: _Dest=0x3ee8508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0189.909] wcscat (in: _Dest=0x3ee8508, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0189.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0189.910] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0189.910] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0189.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0189.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 [0189.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8d18) returned 1 Thread: id = 5580 os_tid = 0x1388 [0181.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae1f8 [0181.274] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0181.274] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0181.274] wcscat (in: _Dest=0x3dae1f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*" [0181.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0181.274] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0183.157] wcscmp (_String1=".", _String2=".") returned 0 [0183.157] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.157] wcscmp (_String1="..", _String2=".") returned 1 [0183.157] wcscmp (_String1="..", _String2="..") returned 0 [0183.157] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b998b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0183.157] wcscmp (_String1="128.png", _String2=".") returned 1 [0183.157] wcscmp (_String1="128.png", _String2="..") returned 1 [0183.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17f70 [0183.157] wcscpy (in: _Dest=0x3e17f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0183.157] wcscat (in: _Dest=0x3e17f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0183.157] wcscat (in: _Dest=0x3e17f70, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0184.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e17f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0184.963] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b83920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833f8d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8520820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0184.963] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0184.963] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0184.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc420 [0184.963] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0184.963] wcscat (in: _Dest=0x30bc420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0184.963] wcscat (in: _Dest=0x30bc420, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" [0184.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30bc420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0184.966] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0184.966] wcscmp (_String1="_locales", _String2=".") returned 1 [0184.966] wcscmp (_String1="_locales", _String2="..") returned 1 [0184.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17670 [0184.966] wcscpy (in: _Dest=0x3e17670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0184.966] wcscat (in: _Dest=0x3e17670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0184.966] wcscat (in: _Dest=0x3e17670, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0184.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0184.967] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0184.967] wcscmp (_String1="_metadata", _String2=".") returned 1 [0184.967] wcscmp (_String1="_metadata", _String2="..") returned 1 [0184.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc308 [0184.967] wcscpy (in: _Dest=0x3edc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0184.967] wcscat (in: _Dest=0x3edc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0184.967] wcscat (in: _Dest=0x3edc308, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0184.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0184.968] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0184.968] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 5581 os_tid = 0x138c [0181.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one")) returned 0x20 [0181.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0181.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.275] GetLastError () returned 0x5 [0181.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0181.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 5582 os_tid = 0x1058 [0181.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta")) returned 0x20 [0182.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0182.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.488] GetLastError () returned 0x5 [0182.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0182.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 5583 os_tid = 0x1464 [0181.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css")) returned 0x20 [0182.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0182.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.489] GetLastError () returned 0x5 [0182.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0182.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674acb8) returned 1 Thread: id = 5584 os_tid = 0x1470 [0181.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl")) returned 0x20 [0182.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0182.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.524] GetLastError () returned 0x5 [0182.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0182.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c738) returned 1 Thread: id = 5585 os_tid = 0xb6c [0181.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll")) returned 0x20 [0182.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.491] GetLastError () returned 0x5 [0182.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 5586 os_tid = 0xdb4 [0181.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll")) returned 0x20 [0182.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.493] GetLastError () returned 0x5 [0182.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0182.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a00) returned 1 Thread: id = 5587 os_tid = 0x154 [0181.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd")) returned 0x20 [0182.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0182.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.526] GetLastError () returned 0x5 [0182.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0182.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ae38) returned 1 Thread: id = 5588 os_tid = 0x444 [0181.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs")) returned 0x20 [0182.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0182.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.495] GetLastError () returned 0x5 [0182.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0182.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 5589 os_tid = 0xe3c [0181.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc")) returned 0x20 [0182.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.497] GetLastError () returned 0x5 [0182.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 5590 os_tid = 0xf04 [0181.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt")) returned 0x20 [0182.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.499] GetLastError () returned 0x5 [0182.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 5591 os_tid = 0x520 [0181.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk")) returned 0x20 [0182.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.500] GetLastError () returned 0x5 [0182.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69588c8) returned 1 Thread: id = 5592 os_tid = 0xf28 [0181.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk")) returned 0x20 [0182.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.502] GetLastError () returned 0x5 [0182.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 5593 os_tid = 0x4bc [0181.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs")) returned 0x20 [0182.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0182.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.504] GetLastError () returned 0x5 [0182.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0182.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 5594 os_tid = 0x5d8 [0181.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc")) returned 0x20 [0182.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.506] GetLastError () returned 0x5 [0182.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 5595 os_tid = 0x5d4 [0181.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt")) returned 0x20 [0182.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.508] GetLastError () returned 0x5 [0182.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 5596 os_tid = 0x1688 [0181.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk")) returned 0x20 [0182.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.509] GetLastError () returned 0x5 [0182.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 5597 os_tid = 0x1690 [0181.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk")) returned 0x20 [0182.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.511] GetLastError () returned 0x5 [0182.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e138) returned 1 Thread: id = 5598 os_tid = 0x1694 [0181.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl")) returned 0x20 [0182.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0182.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.513] GetLastError () returned 0x5 [0182.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0182.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 Thread: id = 5599 os_tid = 0x1698 [0181.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs")) returned 0x20 [0182.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0182.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.528] GetLastError () returned 0x5 [0182.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0182.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b1b8) returned 1 Thread: id = 5600 os_tid = 0x11cc [0181.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc")) returned 0x20 [0182.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.529] GetLastError () returned 0x5 [0182.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 5601 os_tid = 0x11d0 [0181.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt")) returned 0x20 [0182.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.531] GetLastError () returned 0x5 [0182.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 5602 os_tid = 0x11f4 [0181.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk")) returned 0x20 [0182.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.127] GetLastError () returned 0x5 [0182.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 5603 os_tid = 0x1320 [0181.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk")) returned 0x20 [0182.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.462] GetLastError () returned 0x5 [0182.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 5604 os_tid = 0xe70 [0181.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml")) returned 0x20 [0181.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x20) returned 0 [0181.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.306] GetLastError () returned 0x5 [0181.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x20) returned 0 [0181.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d0a0) returned 1 Thread: id = 5605 os_tid = 0xe38 [0181.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml")) returned 0x20 [0181.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x20) returned 0 [0181.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.325] GetLastError () returned 0x5 [0181.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x20) returned 0 [0181.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dee0) returned 1 Thread: id = 5606 os_tid = 0xeac [0181.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml")) returned 0x20 [0181.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x20) returned 0 [0181.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.344] GetLastError () returned 0x5 [0181.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x20) returned 0 [0181.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e570) returned 1 Thread: id = 5607 os_tid = 0xe00 [0181.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml")) returned 0x20 [0181.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x20) returned 0 [0181.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.364] GetLastError () returned 0x5 [0181.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x20) returned 0 [0181.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e618) returned 1 Thread: id = 5608 os_tid = 0xc48 [0181.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml")) returned 0x20 [0181.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x20) returned 0 [0181.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.385] GetLastError () returned 0x5 [0181.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x20) returned 0 [0181.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 5609 os_tid = 0xb04 [0181.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml")) returned 0x20 [0181.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0181.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.405] GetLastError () returned 0x5 [0181.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0181.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 5610 os_tid = 0x150 [0181.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml")) returned 0x20 [0181.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0181.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.426] GetLastError () returned 0x5 [0181.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0181.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 5611 os_tid = 0xd9c [0181.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml")) returned 0x20 [0181.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0181.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.445] GetLastError () returned 0x5 [0181.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0181.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 5612 os_tid = 0x7e4 [0181.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml")) returned 0x20 [0181.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0181.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.472] GetLastError () returned 0x5 [0181.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0181.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 5613 os_tid = 0x11fc [0181.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml")) returned 0x20 [0181.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0181.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.493] GetLastError () returned 0x5 [0181.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0181.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 5614 os_tid = 0xaf8 [0181.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml")) returned 0x20 [0181.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0181.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.514] GetLastError () returned 0x5 [0181.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0181.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 5615 os_tid = 0xdd0 [0181.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml")) returned 0x20 [0181.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0181.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.536] GetLastError () returned 0x5 [0181.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0181.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 5616 os_tid = 0x17b8 [0181.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml")) returned 0x20 [0181.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0181.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.557] GetLastError () returned 0x5 [0181.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0181.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 5617 os_tid = 0xc24 [0181.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml")) returned 0x20 [0181.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0181.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.578] GetLastError () returned 0x5 [0181.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0181.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 5618 os_tid = 0xac0 [0181.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml")) returned 0x20 [0181.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0181.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.599] GetLastError () returned 0x5 [0181.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0181.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 5619 os_tid = 0x139c [0181.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml")) returned 0x20 [0181.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0181.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.618] GetLastError () returned 0x5 [0181.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0181.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 5620 os_tid = 0x13a0 [0181.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml")) returned 0x20 [0181.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0181.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.639] GetLastError () returned 0x5 [0181.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0181.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 5621 os_tid = 0x1408 [0181.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml")) returned 0x20 [0181.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0181.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.659] GetLastError () returned 0x5 [0181.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0181.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 5622 os_tid = 0x1424 [0181.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png")) returned 0x2020 [0182.897] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png", dwFileAttributes=0x20) returned 1 [0184.086] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x169c [0184.095] GetFileSizeEx (in: hFile=0x169c, lpFileSize=0xb9bff5c | out: lpFileSize=0xb9bff5c*=5900) returned 1 [0184.095] SetFilePointerEx (in: hFile=0x169c, liDistanceToMove=0x1708, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.096] ReadFile (in: hFile=0x169c, lpBuffer=0xb9bff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb9bff48, lpOverlapped=0x0 | out: lpBuffer=0xb9bff38*, lpNumberOfBytesRead=0xb9bff48*=0x4, lpOverlapped=0x0) returned 1 [0184.098] SetFilePointerEx (in: hFile=0x169c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0184.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0184.098] NtQuerySystemTime (in: CurrentTime=0xb9bfed0 | out: CurrentTime=0xb9bfed0*=132482710925748000) returned 0x0 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x1b4ef61d [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x2be5cd56 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x4fa4d03a [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x5b26c06c [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x2e4e0a8b [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x6d38b944 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3ff25251 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0xbc89106 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3f23a214 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x1700bad8 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x7fa9b001 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x12087ce5 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x4352e688 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x57e0f75a [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x2a43ff6 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0xed7e543 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x5ea269fd [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x27dc5a60 [0184.098] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x790453c2 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3bca7f20 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3b282e6e [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x6b0889a8 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x7a9fccf1 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x6e115faa [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3536ec91 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x50738077 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x522e9b63 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x1e1f8136 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x3d541cf6 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x6025fe60 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x2e12d5e8 [0184.099] RtlRandomEx (in: Seed=0xb9bfec8 | out: Seed=0xb9bfec8) returned 0x64f504d7 [0184.106] ReadFile (in: hFile=0x169c, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x170c, lpNumberOfBytesRead=0xb9bfec4, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xb9bfec4*=0x170c, lpOverlapped=0x0) returned 1 [0184.119] SetFilePointerEx (in: hFile=0x169c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.119] WriteFile (in: hFile=0x169c, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x170c, lpNumberOfBytesWritten=0xb9bfec8, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xb9bfec8*=0x170c, lpOverlapped=0x0) returned 1 [0184.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0184.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4808 [0184.121] SetFilePointerEx (in: hFile=0x169c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.121] WriteFile (in: hFile=0x169c, lpBuffer=0x6818f78*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb9bff50, lpOverlapped=0x0 | out: lpBuffer=0x6818f78*, lpNumberOfBytesWritten=0xb9bff50*=0x100, lpOverlapped=0x0) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6818f78 [0184.123] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0184.123] wcscat (in: _Dest=0x6818f78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.ac3a86" [0184.123] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.ac3a86", NtPathName=0xb9bfec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d54dd8 [0184.126] FlushFileBuffers (hFile=0x169c) returned 1 [0185.088] CloseHandle (hObject=0x169c) returned 1 [0185.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750bd0 [0185.395] wcscpy (in: _Dest=0x6750bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0185.395] wcscat (in: _Dest=0x6750bd0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt" [0185.395] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\ac3a86-readme.txt")) returned 0xffffffff [0185.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21f0 [0185.906] WriteFile (in: hFile=0x21f0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb9bfee4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb9bfee4*=0x8b9, lpOverlapped=0x0) returned 1 [0186.437] CloseHandle (hObject=0x21f0) returned 1 [0188.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0188.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 5623 os_tid = 0xbf8 [0181.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json")) returned 0x2020 [0183.131] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0184.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d78 [0184.128] GetFileSizeEx (in: hFile=0x1d78, lpFileSize=0x1046fddc | out: lpFileSize=0x1046fddc*=755) returned 1 [0184.128] SetFilePointerEx (in: hFile=0x1d78, liDistanceToMove=0x2ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.128] ReadFile (in: hFile=0x1d78, lpBuffer=0x1046fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1046fdc8, lpOverlapped=0x0 | out: lpBuffer=0x1046fdb8*, lpNumberOfBytesRead=0x1046fdc8*=0x4, lpOverlapped=0x0) returned 1 [0184.130] SetFilePointerEx (in: hFile=0x1d78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0184.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.131] NtQuerySystemTime (in: CurrentTime=0x1046fd50 | out: CurrentTime=0x1046fd50*=132482710926060000) returned 0x0 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x1c7692a7 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x6897d227 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x4a54bc76 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x493e2ced [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x11c7def8 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0xc20bf51 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x29a11a57 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x7e980cd3 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x3e6b30ba [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x257fa9bf [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x480231f8 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x34c2674b [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x1ffaf65c [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x799fd0bc [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x45559cf7 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x2373ba49 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x4fd6be10 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x34ebc8c6 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x5f8e19a7 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x7132dedc [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x405aad47 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x410b1223 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x6639997e [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x103fb6cd [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x133e8a10 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x5b8d8bf7 [0184.131] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x5e47723 [0184.132] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x3e8341f7 [0184.132] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x2fcae18 [0184.132] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x1746781f [0184.132] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x5f09e4bd [0184.132] RtlRandomEx (in: Seed=0x1046fd48 | out: Seed=0x1046fd48) returned 0x315647c9 [0184.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0184.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0184.140] ReadFile (in: hFile=0x1d78, lpBuffer=0x6733f10, nNumberOfBytesToRead=0x2f3, lpNumberOfBytesRead=0x1046fd44, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0x1046fd44*=0x2f3, lpOverlapped=0x0) returned 1 [0184.140] SetFilePointerEx (in: hFile=0x1d78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.140] WriteFile (in: hFile=0x1d78, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x2f3, lpNumberOfBytesWritten=0x1046fd48, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0x1046fd48*=0x2f3, lpOverlapped=0x0) returned 1 [0184.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0184.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a000) returned 1 [0184.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a20 [0184.515] SetFilePointerEx (in: hFile=0x1d78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.515] WriteFile (in: hFile=0x1d78, lpBuffer=0x30bbd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1046fdd0, lpOverlapped=0x0 | out: lpBuffer=0x30bbd90*, lpNumberOfBytesWritten=0x1046fdd0*=0x10c, lpOverlapped=0x0) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0185.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0185.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0185.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bbd90 [0185.648] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" [0185.648] wcscat (in: _Dest=0x30bbd90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.ac3a86" [0185.648] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.ac3a86", NtPathName=0x1046fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0185.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67551a8 [0186.467] FlushFileBuffers (hFile=0x1d78) returned 1 [0186.469] CloseHandle (hObject=0x1d78) returned 1 [0186.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb818 [0186.477] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0186.477] wcscat (in: _Dest=0x30bb818, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt" [0186.477] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\ac3a86-readme.txt")) returned 0x2020 [0188.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0188.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 Thread: id = 5624 os_tid = 0x668 [0181.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e15370 [0181.666] wcscpy (in: _Dest=0x3e15370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0181.667] wcscat (in: _Dest=0x3e15370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0181.667] wcscat (in: _Dest=0x3e15370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*" [0181.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0181.667] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0184.373] wcscmp (_String1=".", _String2=".") returned 0 [0184.373] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.374] wcscmp (_String1="..", _String2=".") returned 1 [0184.374] wcscmp (_String1="..", _String2="..") returned 0 [0184.374] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0184.374] wcscmp (_String1="ar", _String2=".") returned 1 [0184.374] wcscmp (_String1="ar", _String2="..") returned 1 [0184.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18070 [0184.374] wcscpy (in: _Dest=0x3e18070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0184.374] wcscat (in: _Dest=0x3e18070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0184.374] wcscat (in: _Dest=0x3e18070, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0185.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0185.197] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0185.197] wcscmp (_String1="bg", _String2=".") returned 1 [0185.198] wcscmp (_String1="bg", _String2="..") returned 1 [0185.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17470 [0185.198] wcscpy (in: _Dest=0x3e17470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.198] wcscat (in: _Dest=0x3e17470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.198] wcscat (in: _Dest=0x3e17470, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0185.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0185.199] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0185.199] wcscmp (_String1="ca", _String2=".") returned 1 [0185.199] wcscmp (_String1="ca", _String2="..") returned 1 [0185.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18270 [0185.199] wcscpy (in: _Dest=0x3e18270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.200] wcscat (in: _Dest=0x3e18270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.200] wcscat (in: _Dest=0x3e18270, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0185.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0185.201] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0185.201] wcscmp (_String1="cs", _String2=".") returned 1 [0185.201] wcscmp (_String1="cs", _String2="..") returned 1 [0185.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18370 [0185.201] wcscpy (in: _Dest=0x3e18370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.201] wcscat (in: _Dest=0x3e18370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.201] wcscat (in: _Dest=0x3e18370, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0185.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0185.203] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0185.203] wcscmp (_String1="da", _String2=".") returned 1 [0185.203] wcscmp (_String1="da", _String2="..") returned 1 [0185.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18470 [0185.203] wcscpy (in: _Dest=0x3e18470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.203] wcscat (in: _Dest=0x3e18470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.203] wcscat (in: _Dest=0x3e18470, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0185.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c [0185.204] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0185.204] wcscmp (_String1="de", _String2=".") returned 1 [0185.204] wcscmp (_String1="de", _String2="..") returned 1 [0185.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18570 [0185.204] wcscpy (in: _Dest=0x3e18570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.205] wcscat (in: _Dest=0x3e18570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.205] wcscat (in: _Dest=0x3e18570, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0185.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0185.206] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0185.206] wcscmp (_String1="el", _String2=".") returned 1 [0185.206] wcscmp (_String1="el", _String2="..") returned 1 [0185.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18670 [0185.206] wcscpy (in: _Dest=0x3e18670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.206] wcscat (in: _Dest=0x3e18670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.206] wcscat (in: _Dest=0x3e18670, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0185.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0185.207] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0185.208] wcscmp (_String1="en", _String2=".") returned 1 [0185.208] wcscmp (_String1="en", _String2="..") returned 1 [0185.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18770 [0185.208] wcscpy (in: _Dest=0x3e18770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.208] wcscat (in: _Dest=0x3e18770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.208] wcscat (in: _Dest=0x3e18770, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0185.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0185.209] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0185.209] wcscmp (_String1="es", _String2=".") returned 1 [0185.209] wcscmp (_String1="es", _String2="..") returned 1 [0185.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18870 [0185.210] wcscpy (in: _Dest=0x3e18870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.210] wcscat (in: _Dest=0x3e18870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.210] wcscat (in: _Dest=0x3e18870, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0185.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0185.211] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0185.211] wcscmp (_String1="fi", _String2=".") returned 1 [0185.211] wcscmp (_String1="fi", _String2="..") returned 1 [0185.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18970 [0185.211] wcscpy (in: _Dest=0x3e18970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.211] wcscat (in: _Dest=0x3e18970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.211] wcscat (in: _Dest=0x3e18970, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0185.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0185.213] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0185.213] wcscmp (_String1="fil", _String2=".") returned 1 [0185.213] wcscmp (_String1="fil", _String2="..") returned 1 [0185.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e18a70 [0185.213] wcscpy (in: _Dest=0x3e18a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.213] wcscat (in: _Dest=0x3e18a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.213] wcscat (in: _Dest=0x3e18a70, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0185.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0185.214] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0185.215] wcscmp (_String1="fr", _String2=".") returned 1 [0185.215] wcscmp (_String1="fr", _String2="..") returned 1 [0185.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18b70 [0185.215] wcscpy (in: _Dest=0x3e18b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.215] wcscat (in: _Dest=0x3e18b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.215] wcscat (in: _Dest=0x3e18b70, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0185.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0185.216] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0185.216] wcscmp (_String1="hi", _String2=".") returned 1 [0185.216] wcscmp (_String1="hi", _String2="..") returned 1 [0185.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18c70 [0185.217] wcscpy (in: _Dest=0x3e18c70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.217] wcscat (in: _Dest=0x3e18c70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.217] wcscat (in: _Dest=0x3e18c70, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0185.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0185.218] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0185.218] wcscmp (_String1="hr", _String2=".") returned 1 [0185.218] wcscmp (_String1="hr", _String2="..") returned 1 [0185.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18d70 [0185.218] wcscpy (in: _Dest=0x3e18d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.218] wcscat (in: _Dest=0x3e18d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.218] wcscat (in: _Dest=0x3e18d70, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0185.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0185.220] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0185.220] wcscmp (_String1="hu", _String2=".") returned 1 [0185.220] wcscmp (_String1="hu", _String2="..") returned 1 [0185.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18e70 [0185.220] wcscpy (in: _Dest=0x3e18e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.220] wcscat (in: _Dest=0x3e18e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.220] wcscat (in: _Dest=0x3e18e70, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0185.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0185.221] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0185.221] wcscmp (_String1="id", _String2=".") returned 1 [0185.222] wcscmp (_String1="id", _String2="..") returned 1 [0185.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18f70 [0185.222] wcscpy (in: _Dest=0x3e18f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.222] wcscat (in: _Dest=0x3e18f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.222] wcscat (in: _Dest=0x3e18f70, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0185.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0185.223] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0185.223] wcscmp (_String1="it", _String2=".") returned 1 [0185.223] wcscmp (_String1="it", _String2="..") returned 1 [0185.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3d9bb00 [0185.223] wcscpy (in: _Dest=0x3d9bb00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.224] wcscat (in: _Dest=0x3d9bb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.224] wcscat (in: _Dest=0x3d9bb00, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0185.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d9bb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0185.225] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0185.225] wcscmp (_String1="ja", _String2=".") returned 1 [0185.225] wcscmp (_String1="ja", _String2="..") returned 1 [0185.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x2f7ac8 [0185.225] wcscpy (in: _Dest=0x2f7ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.225] wcscat (in: _Dest=0x2f7ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.225] wcscat (in: _Dest=0x2f7ac8, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0185.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x2f7ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0185.227] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0185.227] wcscmp (_String1="ko", _String2=".") returned 1 [0185.227] wcscmp (_String1="ko", _String2="..") returned 1 [0185.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee7d08 [0185.227] wcscpy (in: _Dest=0x3ee7d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.227] wcscat (in: _Dest=0x3ee7d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.227] wcscat (in: _Dest=0x3ee7d08, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0185.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee7d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0185.228] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0185.228] wcscmp (_String1="lt", _String2=".") returned 1 [0185.228] wcscmp (_String1="lt", _String2="..") returned 1 [0185.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee7e08 [0185.229] wcscpy (in: _Dest=0x3ee7e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.229] wcscat (in: _Dest=0x3ee7e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.229] wcscat (in: _Dest=0x3ee7e08, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0185.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee7e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0185.230] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0185.230] wcscmp (_String1="lv", _String2=".") returned 1 [0185.230] wcscmp (_String1="lv", _String2="..") returned 1 [0185.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee7f08 [0185.230] wcscpy (in: _Dest=0x3ee7f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.230] wcscat (in: _Dest=0x3ee7f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.230] wcscat (in: _Dest=0x3ee7f08, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0185.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee7f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0185.231] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0185.232] wcscmp (_String1="nl", _String2=".") returned 1 [0185.232] wcscmp (_String1="nl", _String2="..") returned 1 [0185.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8008 [0185.232] wcscpy (in: _Dest=0x3ee8008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.232] wcscat (in: _Dest=0x3ee8008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.232] wcscat (in: _Dest=0x3ee8008, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0185.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0185.233] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0185.233] wcscmp (_String1="no", _String2=".") returned 1 [0185.233] wcscmp (_String1="no", _String2="..") returned 1 [0185.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8108 [0185.233] wcscpy (in: _Dest=0x3ee8108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.233] wcscat (in: _Dest=0x3ee8108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.233] wcscat (in: _Dest=0x3ee8108, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0185.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0185.234] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0185.235] wcscmp (_String1="pl", _String2=".") returned 1 [0185.235] wcscmp (_String1="pl", _String2="..") returned 1 [0185.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8208 [0185.235] wcscpy (in: _Dest=0x3ee8208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.235] wcscat (in: _Dest=0x3ee8208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.235] wcscat (in: _Dest=0x3ee8208, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0185.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328 [0185.543] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0185.543] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0185.543] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0185.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6754060 [0185.543] wcscpy (in: _Dest=0x6754060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.543] wcscat (in: _Dest=0x6754060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.543] wcscat (in: _Dest=0x6754060, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0186.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0186.294] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0186.294] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0186.294] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0186.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d448a0 [0186.294] wcscpy (in: _Dest=0x3d448a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.294] wcscat (in: _Dest=0x3d448a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.294] wcscat (in: _Dest=0x3d448a0, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0186.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0186.295] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0186.295] wcscmp (_String1="ro", _String2=".") returned 1 [0186.295] wcscmp (_String1="ro", _String2="..") returned 1 [0186.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17a70 [0186.295] wcscpy (in: _Dest=0x3e17a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.296] wcscat (in: _Dest=0x3e17a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.296] wcscat (in: _Dest=0x3e17a70, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0186.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0186.296] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0186.296] wcscmp (_String1="ru", _String2=".") returned 1 [0186.296] wcscmp (_String1="ru", _String2="..") returned 1 [0186.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17d70 [0186.297] wcscpy (in: _Dest=0x3e17d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.297] wcscat (in: _Dest=0x3e17d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.297] wcscat (in: _Dest=0x3e17d70, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0186.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e17d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0186.298] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0186.298] wcscmp (_String1="se", _String2=".") returned 1 [0186.298] wcscmp (_String1="se", _String2="..") returned 1 [0186.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15470 [0186.298] wcscpy (in: _Dest=0x3e15470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.298] wcscat (in: _Dest=0x3e15470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.298] wcscat (in: _Dest=0x3e15470, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0186.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0186.299] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0186.299] wcscmp (_String1="sk", _String2=".") returned 1 [0186.299] wcscmp (_String1="sk", _String2="..") returned 1 [0186.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15970 [0186.299] wcscpy (in: _Dest=0x3e15970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.299] wcscat (in: _Dest=0x3e15970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.299] wcscat (in: _Dest=0x3e15970, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0186.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e15970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0186.300] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0186.300] wcscmp (_String1="sl", _String2=".") returned 1 [0186.300] wcscmp (_String1="sl", _String2="..") returned 1 [0186.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e18170 [0186.300] wcscpy (in: _Dest=0x3e18170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.300] wcscat (in: _Dest=0x3e18170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.300] wcscat (in: _Dest=0x3e18170, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0186.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3e18170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0186.301] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0186.301] wcscmp (_String1="sr", _String2=".") returned 1 [0186.301] wcscmp (_String1="sr", _String2="..") returned 1 [0186.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8308 [0186.301] wcscpy (in: _Dest=0x3ee8308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.301] wcscat (in: _Dest=0x3ee8308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.301] wcscat (in: _Dest=0x3ee8308, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0186.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0186.302] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0186.302] wcscmp (_String1="th", _String2=".") returned 1 [0186.302] wcscmp (_String1="th", _String2="..") returned 1 [0186.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8408 [0186.302] wcscpy (in: _Dest=0x3ee8408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.303] wcscat (in: _Dest=0x3ee8408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.303] wcscat (in: _Dest=0x3ee8408, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0186.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0186.304] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0186.304] wcscmp (_String1="tr", _String2=".") returned 1 [0186.304] wcscmp (_String1="tr", _String2="..") returned 1 [0186.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8508 [0186.304] wcscpy (in: _Dest=0x3ee8508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.304] wcscat (in: _Dest=0x3ee8508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.304] wcscat (in: _Dest=0x3ee8508, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0186.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0186.305] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0186.305] wcscmp (_String1="uk", _String2=".") returned 1 [0186.305] wcscmp (_String1="uk", _String2="..") returned 1 [0186.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8608 [0186.305] wcscpy (in: _Dest=0x3ee8608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.305] wcscat (in: _Dest=0x3ee8608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.305] wcscat (in: _Dest=0x3ee8608, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0186.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0186.306] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0186.306] wcscmp (_String1="vi", _String2=".") returned 1 [0186.306] wcscmp (_String1="vi", _String2="..") returned 1 [0186.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3ee8708 [0186.306] wcscpy (in: _Dest=0x3ee8708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.306] wcscat (in: _Dest=0x3ee8708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.306] wcscat (in: _Dest=0x3ee8708, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0186.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee8708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0186.307] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0186.307] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0186.307] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0186.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d449a8 [0186.307] wcscpy (in: _Dest=0x3d449a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.307] wcscat (in: _Dest=0x3d449a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.307] wcscat (in: _Dest=0x3d449a8, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0186.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d449a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0186.308] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0186.308] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0186.308] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0186.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d44270 [0186.308] wcscpy (in: _Dest=0x3d44270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0186.308] wcscat (in: _Dest=0x3d44270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0186.309] wcscat (in: _Dest=0x3d44270, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0186.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0186.309] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0188.484] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0188.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0188.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15370) returned 1 [0188.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 5625 os_tid = 0xb88 [0181.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3e17470 [0181.668] wcscpy (in: _Dest=0x3e17470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0181.668] wcscat (in: _Dest=0x3e17470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0181.668] wcscat (in: _Dest=0x3e17470, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*" [0181.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0181.668] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0183.130] wcscmp (_String1=".", _String2=".") returned 0 [0183.130] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.130] wcscmp (_String1="..", _String2=".") returned 1 [0183.130] wcscmp (_String1="..", _String2="..") returned 0 [0183.130] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0183.130] wcscmp (_String1="_locales", _String2=".") returned 1 [0183.130] wcscmp (_String1="_locales", _String2="..") returned 1 [0183.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec5f8 [0183.131] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0183.131] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0183.131] wcscat (in: _Dest=0x3dec5f8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0184.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0184.959] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0184.959] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0184.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0184.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17470) returned 1 [0184.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 5626 os_tid = 0x14a4 [0181.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif")) returned 0x20 [0184.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0184.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.321] GetLastError () returned 0x5 [0184.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0184.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959b30) returned 1 Thread: id = 5627 os_tid = 0x1378 [0181.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif")) returned 0x20 [0183.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0183.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.500] GetLastError () returned 0x5 [0183.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0183.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598d0) returned 1 Thread: id = 5628 os_tid = 0x64c [0181.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif")) returned 0x20 [0183.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0183.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.502] GetLastError () returned 0x5 [0183.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0183.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959838) returned 1 Thread: id = 5629 os_tid = 0xaa4 [0181.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif")) returned 0x20 [0184.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0184.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.304] GetLastError () returned 0x5 [0184.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0184.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69595d8) returned 1 Thread: id = 5630 os_tid = 0x644 [0181.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif")) returned 0x20 [0184.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0184.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.305] GetLastError () returned 0x5 [0184.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0184.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 5631 os_tid = 0x163c [0181.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif")) returned 0x20 [0184.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0184.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.307] GetLastError () returned 0x5 [0184.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0184.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 5632 os_tid = 0x1028 [0181.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif")) returned 0x20 [0184.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0184.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.309] GetLastError () returned 0x5 [0184.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0184.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 5633 os_tid = 0x1648 [0181.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif")) returned 0x20 [0184.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0184.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.310] GetLastError () returned 0x5 [0184.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0184.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 Thread: id = 5634 os_tid = 0x102c [0181.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif")) returned 0x20 [0184.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0184.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.324] GetLastError () returned 0x5 [0184.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0184.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 5635 os_tid = 0x1030 [0181.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif")) returned 0x20 [0184.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0184.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.333] GetLastError () returned 0x5 [0184.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0184.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 5636 os_tid = 0x1038 [0181.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif")) returned 0x20 [0184.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0184.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.335] GetLastError () returned 0x5 [0184.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0184.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 5637 os_tid = 0x103c [0181.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif")) returned 0x20 [0184.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0184.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.336] GetLastError () returned 0x5 [0184.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0184.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959670) returned 1 Thread: id = 5638 os_tid = 0x1040 [0181.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif")) returned 0x20 [0184.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0184.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.326] GetLastError () returned 0x5 [0184.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0184.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959a98) returned 1 Thread: id = 5639 os_tid = 0x104c [0181.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif")) returned 0x20 [0184.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0184.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.327] GetLastError () returned 0x5 [0184.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0184.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 5640 os_tid = 0x105c [0181.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif")) returned 0x20 [0184.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0184.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.329] GetLastError () returned 0x5 [0184.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0184.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959bc8) returned 1 Thread: id = 5641 os_tid = 0x1060 [0181.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif")) returned 0x20 [0184.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0184.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.338] GetLastError () returned 0x5 [0184.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0184.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 5642 os_tid = 0x1064 [0181.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif")) returned 0x20 [0184.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0184.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.330] GetLastError () returned 0x5 [0184.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0184.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 5643 os_tid = 0x1068 [0181.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif")) returned 0x20 [0184.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0184.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.339] GetLastError () returned 0x5 [0184.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0184.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958fe8) returned 1 Thread: id = 5644 os_tid = 0x106c [0181.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif")) returned 0x20 [0184.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0184.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.341] GetLastError () returned 0x5 [0184.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0184.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958b28) returned 1 Thread: id = 5645 os_tid = 0x1070 [0181.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif")) returned 0x20 [0184.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0184.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.342] GetLastError () returned 0x5 [0184.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0184.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958bc0) returned 1 Thread: id = 5646 os_tid = 0x1074 [0181.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif")) returned 0x20 [0184.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0184.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.344] GetLastError () returned 0x5 [0184.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0184.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959410) returned 1 Thread: id = 5647 os_tid = 0x1078 [0181.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif")) returned 0x20 [0184.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0184.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.345] GetLastError () returned 0x5 [0184.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0184.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69591b0) returned 1 Thread: id = 5648 os_tid = 0x530 [0181.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif")) returned 0x20 [0184.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0184.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.347] GetLastError () returned 0x5 [0184.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0184.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959118) returned 1 Thread: id = 5649 os_tid = 0x1804 [0181.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif")) returned 0x20 [0184.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0184.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.348] GetLastError () returned 0x5 [0184.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0184.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 5650 os_tid = 0x1808 [0181.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif")) returned 0x20 [0184.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0184.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.350] GetLastError () returned 0x5 [0184.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0184.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 5651 os_tid = 0x180c [0181.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif")) returned 0x20 [0184.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0184.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.351] GetLastError () returned 0x5 [0184.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0184.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 Thread: id = 5652 os_tid = 0x1810 [0181.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif")) returned 0x20 [0183.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0183.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.496] GetLastError () returned 0x5 [0183.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0183.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958960) returned 1 Thread: id = 5653 os_tid = 0x1814 [0182.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif")) returned 0x20 [0184.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0184.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.322] GetLastError () returned 0x5 [0184.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0184.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 5654 os_tid = 0x1818 [0182.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst")) returned 0x20 [0183.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0183.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.183] GetLastError () returned 0x5 [0183.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0183.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 5655 os_tid = 0x181c [0182.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst")) returned 0x20 [0183.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0183.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.205] GetLastError () returned 0x5 [0183.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0183.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 5656 os_tid = 0x1098 [0182.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst")) returned 0x20 [0183.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0183.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.203] GetLastError () returned 0x5 [0183.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0183.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 5657 os_tid = 0x1820 [0182.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss")) returned 0x20 [0183.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0183.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.182] GetLastError () returned 0x5 [0183.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0183.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 5658 os_tid = 0x10e4 [0182.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss")) returned 0x20 [0183.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0183.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.201] GetLastError () returned 0x5 [0183.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0183.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 5659 os_tid = 0x67c [0182.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss")) returned 0x20 [0183.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0183.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.164] GetLastError () returned 0x5 [0183.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0183.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 5660 os_tid = 0x10e8 [0182.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss")) returned 0x20 [0182.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0182.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.967] GetLastError () returned 0x5 [0182.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0182.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 5661 os_tid = 0xf5c [0182.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss")) returned 0x20 [0183.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0183.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.180] GetLastError () returned 0x5 [0183.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0183.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 5662 os_tid = 0x10ec [0182.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss")) returned 0x20 [0183.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0183.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.179] GetLastError () returned 0x5 [0183.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0183.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 5663 os_tid = 0x1824 [0182.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20 [0184.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0184.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.662] GetLastError () returned 0x5 [0184.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0184.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 5664 os_tid = 0x598 [0182.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20 [0184.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0184.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.467] GetLastError () returned 0x5 [0184.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0184.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 5665 os_tid = 0x1828 [0182.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20 [0184.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0184.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.757] GetLastError () returned 0x5 [0184.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0184.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 5666 os_tid = 0x182c [0182.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20 [0184.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0184.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.791] GetLastError () returned 0x5 [0184.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0184.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 5667 os_tid = 0x1830 [0182.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20 [0184.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0184.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.789] GetLastError () returned 0x5 [0184.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0184.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 5668 os_tid = 0x1834 [0182.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20 [0184.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0184.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.755] GetLastError () returned 0x5 [0184.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0184.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 5669 os_tid = 0x1838 [0182.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 0x2020 [0183.153] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0184.143] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20b8 [0184.143] GetFileSizeEx (in: hFile=0x20b8, lpFileSize=0xa15f7e4 | out: lpFileSize=0xa15f7e4*=6159) returned 1 [0184.154] SetFilePointerEx (in: hFile=0x20b8, liDistanceToMove=0x180b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.154] ReadFile (in: hFile=0x20b8, lpBuffer=0xa15f7c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa15f7d0, lpOverlapped=0x0 | out: lpBuffer=0xa15f7c0*, lpNumberOfBytesRead=0xa15f7d0*=0x4, lpOverlapped=0x0) returned 1 [0184.160] SetFilePointerEx (in: hFile=0x20b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0184.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0184.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.160] NtQuerySystemTime (in: CurrentTime=0xa15f758 | out: CurrentTime=0xa15f758*=132482710926372000) returned 0x0 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x7625df8d [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x6c425b0 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x2496541a [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x1c011b8c [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x46de968a [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x6355963 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x4dfd183a [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x5a50d8ca [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x7c4541da [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x66bdfa5a [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x7eef39b [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x4a3bc213 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0xeaf8de5 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x1806f120 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0xf85c9a5 [0184.160] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x53f5dda2 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x5a2e2255 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x10dad896 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x54fa21fe [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x34a9a14b [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x757c6db1 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x21da92c5 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x62df9c67 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x497684e5 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x3bacaa27 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x4a5ecc99 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x2600901e [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x2a2d733e [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x58f2b2b5 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x460abf6d [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x3ca02b95 [0184.161] RtlRandomEx (in: Seed=0xa15f750 | out: Seed=0xa15f750) returned 0x7697b99e [0184.168] ReadFile (in: hFile=0x20b8, lpBuffer=0x673b720, nNumberOfBytesToRead=0x180f, lpNumberOfBytesRead=0xa15f74c, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xa15f74c*=0x180f, lpOverlapped=0x0) returned 1 [0184.170] SetFilePointerEx (in: hFile=0x20b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.170] WriteFile (in: hFile=0x20b8, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0xa15f750, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xa15f750*=0x180f, lpOverlapped=0x0) returned 1 [0184.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f70 [0184.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3a70 [0184.172] SetFilePointerEx (in: hFile=0x20b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.172] WriteFile (in: hFile=0x20b8, lpBuffer=0x6818f78*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xa15f7d8, lpOverlapped=0x0 | out: lpBuffer=0x6818f78*, lpNumberOfBytesWritten=0xa15f7d8*=0x100, lpOverlapped=0x0) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0184.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6818f78 [0184.174] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0184.174] wcscat (in: _Dest=0x6818f78, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.ac3a86" [0184.174] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.ac3a86", NtPathName=0xa15f750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54dd8 [0184.176] FlushFileBuffers (hFile=0x20b8) returned 1 [0185.088] CloseHandle (hObject=0x20b8) returned 1 [0185.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6750ce8 [0185.399] wcscpy (in: _Dest=0x6750ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0185.399] wcscat (in: _Dest=0x6750ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt" [0185.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\ac3a86-readme.txt")) returned 0x2020 [0186.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0186.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15670) returned 1 Thread: id = 5670 os_tid = 0x183c [0182.036] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 0x2020 [0183.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0183.591] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef0 [0183.591] GetFileSizeEx (in: hFile=0xef0, lpFileSize=0x9d0f7fc | out: lpFileSize=0x9d0f7fc*=784) returned 1 [0183.591] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x30c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.591] ReadFile (in: hFile=0xef0, lpBuffer=0x9d0f7d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d0f7e8, lpOverlapped=0x0 | out: lpBuffer=0x9d0f7d8*, lpNumberOfBytesRead=0x9d0f7e8*=0x4, lpOverlapped=0x0) returned 1 [0183.594] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48f8 [0183.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0183.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.594] NtQuerySystemTime (in: CurrentTime=0x9d0f770 | out: CurrentTime=0x9d0f770*=132482710920756000) returned 0x0 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x4d7ee8d [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x782f7252 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0xda1d39e [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x46df3f66 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x53440c2f [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x713063da [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x150913 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x717e9e65 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x14b608e5 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x2fca229c [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x914a306 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x7ddd0efa [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x3ec5012a [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x2ca4c54d [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x1573b80b [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x10d37c66 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x65162f6c [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x30e590aa [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x12028883 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x3d1481ee [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x5a5d4fe0 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x36634604 [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x2bce5f1c [0183.594] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x52acf369 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x3815a9c5 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x1cf53f83 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x46c25a32 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x119f0467 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0xe7a0fe2 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x14605765 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0x71557dc2 [0183.595] RtlRandomEx (in: Seed=0x9d0f768 | out: Seed=0x9d0f768) returned 0xfa8528b [0183.603] ReadFile (in: hFile=0xef0, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x9d0f764, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0x9d0f764*=0x310, lpOverlapped=0x0) returned 1 [0183.603] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.604] WriteFile (in: hFile=0xef0, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x9d0f768, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0x9d0f768*=0x310, lpOverlapped=0x0) returned 1 [0183.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0183.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43f8 [0183.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0183.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0183.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0183.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0183.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823368) returned 1 [0183.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0183.607] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.607] WriteFile (in: hFile=0xef0, lpBuffer=0x6817ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d0f7f0, lpOverlapped=0x0 | out: lpBuffer=0x6817ce8*, lpNumberOfBytesWritten=0x9d0f7f0*=0x10c, lpOverlapped=0x0) returned 1 [0183.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 [0183.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0183.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0183.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0183.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0183.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0183.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0183.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0183.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6817ce8 [0183.609] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" [0183.609] wcscat (in: _Dest=0x6817ce8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.ac3a86" [0183.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.ac3a86", NtPathName=0x9d0f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40198 [0183.612] FlushFileBuffers (hFile=0xef0) returned 1 [0185.086] CloseHandle (hObject=0xef0) returned 1 [0185.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bd258 [0185.385] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0185.385] wcscat (in: _Dest=0x30bd258, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt" [0185.385] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\ac3a86-readme.txt")) returned 0xffffffff [0185.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2134 [0185.667] WriteFile (in: hFile=0x2134, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9d0f784, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9d0f784*=0x8b9, lpOverlapped=0x0) returned 1 [0185.895] CloseHandle (hObject=0x2134) returned 1 [0185.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0185.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc410) returned 1 Thread: id = 5671 os_tid = 0x1840 [0182.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17770 [0182.037] wcscpy (in: _Dest=0x3e17770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0182.037] wcscat (in: _Dest=0x3e17770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0182.037] wcscat (in: _Dest=0x3e17770, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*" [0182.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0182.037] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0184.383] wcscmp (_String1=".", _String2=".") returned 0 [0184.383] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.383] wcscmp (_String1="..", _String2=".") returned 1 [0184.383] wcscmp (_String1="..", _String2="..") returned 0 [0184.383] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0184.383] wcscmp (_String1="ar", _String2=".") returned 1 [0184.383] wcscmp (_String1="ar", _String2="..") returned 1 [0184.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45710 [0184.383] wcscpy (in: _Dest=0x3d45710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0184.384] wcscat (in: _Dest=0x3d45710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0184.384] wcscat (in: _Dest=0x3d45710, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0188.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0188.432] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0188.432] wcscmp (_String1="bg", _String2=".") returned 1 [0188.432] wcscmp (_String1="bg", _String2="..") returned 1 [0188.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edcf68 [0188.432] wcscpy (in: _Dest=0x3edcf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.432] wcscat (in: _Dest=0x3edcf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.432] wcscat (in: _Dest=0x3edcf68, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0188.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edcf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0188.433] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0188.433] wcscmp (_String1="ca", _String2=".") returned 1 [0188.433] wcscmp (_String1="ca", _String2="..") returned 1 [0188.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25558 [0188.433] wcscpy (in: _Dest=0x3f25558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.433] wcscat (in: _Dest=0x3f25558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.433] wcscat (in: _Dest=0x3f25558, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0188.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0188.434] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0188.434] wcscmp (_String1="cs", _String2=".") returned 1 [0188.434] wcscmp (_String1="cs", _String2="..") returned 1 [0188.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25450 [0188.434] wcscpy (in: _Dest=0x3f25450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.434] wcscat (in: _Dest=0x3f25450, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.434] wcscat (in: _Dest=0x3f25450, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0188.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0188.435] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0188.435] wcscmp (_String1="da", _String2=".") returned 1 [0188.435] wcscmp (_String1="da", _String2="..") returned 1 [0188.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25348 [0188.436] wcscpy (in: _Dest=0x3f25348, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.436] wcscat (in: _Dest=0x3f25348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.436] wcscat (in: _Dest=0x3f25348, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0188.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0188.437] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0188.437] wcscmp (_String1="de", _String2=".") returned 1 [0188.437] wcscmp (_String1="de", _String2="..") returned 1 [0188.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25c90 [0188.437] wcscpy (in: _Dest=0x3f25c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.437] wcscat (in: _Dest=0x3f25c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.437] wcscat (in: _Dest=0x3f25c90, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0188.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0188.439] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0188.439] wcscmp (_String1="el", _String2=".") returned 1 [0188.439] wcscmp (_String1="el", _String2="..") returned 1 [0188.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f23ea8 [0188.439] wcscpy (in: _Dest=0x3f23ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.439] wcscat (in: _Dest=0x3f23ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.439] wcscat (in: _Dest=0x3f23ea8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0188.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0188.440] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0188.440] wcscmp (_String1="en", _String2=".") returned 1 [0188.440] wcscmp (_String1="en", _String2="..") returned 1 [0188.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25b88 [0188.440] wcscpy (in: _Dest=0x3f25b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.440] wcscat (in: _Dest=0x3f25b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.440] wcscat (in: _Dest=0x3f25b88, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0188.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0188.441] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0188.441] wcscmp (_String1="es", _String2=".") returned 1 [0188.441] wcscmp (_String1="es", _String2="..") returned 1 [0188.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25a80 [0188.441] wcscpy (in: _Dest=0x3f25a80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.441] wcscat (in: _Dest=0x3f25a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.441] wcscat (in: _Dest=0x3f25a80, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0188.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0188.442] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0188.442] wcscmp (_String1="fi", _String2=".") returned 1 [0188.442] wcscmp (_String1="fi", _String2="..") returned 1 [0188.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25978 [0188.442] wcscpy (in: _Dest=0x3f25978, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.442] wcscat (in: _Dest=0x3f25978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.443] wcscat (in: _Dest=0x3f25978, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0188.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0188.443] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0188.444] wcscmp (_String1="fil", _String2=".") returned 1 [0188.444] wcscmp (_String1="fil", _String2="..") returned 1 [0188.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f25870 [0188.444] wcscpy (in: _Dest=0x3f25870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.444] wcscat (in: _Dest=0x3f25870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.444] wcscat (in: _Dest=0x3f25870, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0188.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0188.445] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0188.445] wcscmp (_String1="fr", _String2=".") returned 1 [0188.445] wcscmp (_String1="fr", _String2="..") returned 1 [0188.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25768 [0188.445] wcscpy (in: _Dest=0x3f25768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.445] wcscat (in: _Dest=0x3f25768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.445] wcscat (in: _Dest=0x3f25768, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0188.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0188.446] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0188.446] wcscmp (_String1="hi", _String2=".") returned 1 [0188.446] wcscmp (_String1="hi", _String2="..") returned 1 [0188.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25660 [0188.446] wcscpy (in: _Dest=0x3f25660, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.446] wcscat (in: _Dest=0x3f25660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.446] wcscat (in: _Dest=0x3f25660, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0188.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0188.447] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0188.447] wcscmp (_String1="hr", _String2=".") returned 1 [0188.447] wcscmp (_String1="hr", _String2="..") returned 1 [0188.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f24b08 [0188.447] wcscpy (in: _Dest=0x3f24b08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.447] wcscat (in: _Dest=0x3f24b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.448] wcscat (in: _Dest=0x3f24b08, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0188.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f24b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0188.449] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0188.449] wcscmp (_String1="hu", _String2=".") returned 1 [0188.449] wcscmp (_String1="hu", _String2="..") returned 1 [0188.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45b30 [0188.449] wcscpy (in: _Dest=0x3d45b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.449] wcscat (in: _Dest=0x3d45b30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.449] wcscat (in: _Dest=0x3d45b30, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0188.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0188.450] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0188.450] wcscmp (_String1="id", _String2=".") returned 1 [0188.450] wcscmp (_String1="id", _String2="..") returned 1 [0188.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44060 [0188.450] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.450] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.450] wcscat (in: _Dest=0x3d44060, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0188.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0188.451] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0188.451] wcscmp (_String1="it", _String2=".") returned 1 [0188.451] wcscmp (_String1="it", _String2="..") returned 1 [0188.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45c38 [0188.451] wcscpy (in: _Dest=0x3d45c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.451] wcscat (in: _Dest=0x3d45c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.451] wcscat (in: _Dest=0x3d45c38, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0188.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0188.452] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0188.452] wcscmp (_String1="ja", _String2=".") returned 1 [0188.452] wcscmp (_String1="ja", _String2="..") returned 1 [0188.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44168 [0188.452] wcscpy (in: _Dest=0x3d44168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.452] wcscat (in: _Dest=0x3d44168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.452] wcscat (in: _Dest=0x3d44168, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0188.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0188.453] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0188.453] wcscmp (_String1="ko", _String2=".") returned 1 [0188.453] wcscmp (_String1="ko", _String2="..") returned 1 [0188.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45d40 [0188.453] wcscpy (in: _Dest=0x3d45d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.453] wcscat (in: _Dest=0x3d45d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.453] wcscat (in: _Dest=0x3d45d40, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0188.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0188.454] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0188.454] wcscmp (_String1="lt", _String2=".") returned 1 [0188.454] wcscmp (_String1="lt", _String2="..") returned 1 [0188.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45e48 [0188.455] wcscpy (in: _Dest=0x3d45e48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.455] wcscat (in: _Dest=0x3d45e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.455] wcscat (in: _Dest=0x3d45e48, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0188.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0188.456] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0188.456] wcscmp (_String1="lv", _String2=".") returned 1 [0188.456] wcscmp (_String1="lv", _String2="..") returned 1 [0188.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44378 [0188.456] wcscpy (in: _Dest=0x3d44378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.456] wcscat (in: _Dest=0x3d44378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.456] wcscat (in: _Dest=0x3d44378, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0188.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0188.457] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0188.457] wcscmp (_String1="nl", _String2=".") returned 1 [0188.457] wcscmp (_String1="nl", _String2="..") returned 1 [0188.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44480 [0188.457] wcscpy (in: _Dest=0x3d44480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.457] wcscat (in: _Dest=0x3d44480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.457] wcscat (in: _Dest=0x3d44480, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0188.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0188.458] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0188.459] wcscmp (_String1="no", _String2=".") returned 1 [0188.459] wcscmp (_String1="no", _String2="..") returned 1 [0188.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44588 [0188.459] wcscpy (in: _Dest=0x3d44588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.459] wcscat (in: _Dest=0x3d44588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.459] wcscat (in: _Dest=0x3d44588, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0188.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0188.460] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0188.460] wcscmp (_String1="pl", _String2=".") returned 1 [0188.460] wcscmp (_String1="pl", _String2="..") returned 1 [0188.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44690 [0188.460] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.460] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.460] wcscat (in: _Dest=0x3d44690, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0188.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0188.461] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0188.461] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0188.461] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0188.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44798 [0188.461] wcscpy (in: _Dest=0x3d44798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.461] wcscat (in: _Dest=0x3d44798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.461] wcscat (in: _Dest=0x3d44798, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0188.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0188.463] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0188.463] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0188.463] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0188.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae840 [0188.463] wcscpy (in: _Dest=0x68ae840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.463] wcscat (in: _Dest=0x68ae840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.463] wcscat (in: _Dest=0x68ae840, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0188.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0188.464] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0188.464] wcscmp (_String1="ro", _String2=".") returned 1 [0188.464] wcscmp (_String1="ro", _String2="..") returned 1 [0188.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae528 [0188.465] wcscpy (in: _Dest=0x68ae528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.465] wcscat (in: _Dest=0x68ae528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.465] wcscat (in: _Dest=0x68ae528, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0188.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0188.466] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0188.466] wcscmp (_String1="ru", _String2=".") returned 1 [0188.466] wcscmp (_String1="ru", _String2="..") returned 1 [0188.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae420 [0188.466] wcscpy (in: _Dest=0x68ae420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.466] wcscat (in: _Dest=0x68ae420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.466] wcscat (in: _Dest=0x68ae420, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0188.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0188.699] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0188.699] wcscmp (_String1="se", _String2=".") returned 1 [0188.699] wcscmp (_String1="se", _String2="..") returned 1 [0188.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d450e0 [0188.699] wcscpy (in: _Dest=0x3d450e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0188.699] wcscat (in: _Dest=0x3d450e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0188.699] wcscat (in: _Dest=0x3d450e0, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0189.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d450e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0189.949] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0189.949] wcscmp (_String1="sk", _String2=".") returned 1 [0189.949] wcscmp (_String1="sk", _String2="..") returned 1 [0189.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45920 [0189.949] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.949] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.949] wcscat (in: _Dest=0x3d45920, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0189.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0189.951] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0189.951] wcscmp (_String1="sl", _String2=".") returned 1 [0189.951] wcscmp (_String1="sl", _String2="..") returned 1 [0189.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d452f0 [0189.951] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.951] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.951] wcscat (in: _Dest=0x3d452f0, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0189.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0189.952] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0189.952] wcscmp (_String1="sr", _String2=".") returned 1 [0189.952] wcscmp (_String1="sr", _String2="..") returned 1 [0189.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d453f8 [0189.952] wcscpy (in: _Dest=0x3d453f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.952] wcscat (in: _Dest=0x3d453f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.952] wcscat (in: _Dest=0x3d453f8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0189.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d453f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0189.954] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0189.954] wcscmp (_String1="th", _String2=".") returned 1 [0189.954] wcscmp (_String1="th", _String2="..") returned 1 [0189.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d451e8 [0189.955] wcscpy (in: _Dest=0x3d451e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.955] wcscat (in: _Dest=0x3d451e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.955] wcscat (in: _Dest=0x3d451e8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0189.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d451e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0189.956] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0189.956] wcscmp (_String1="tr", _String2=".") returned 1 [0189.956] wcscmp (_String1="tr", _String2="..") returned 1 [0189.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d449a8 [0189.956] wcscpy (in: _Dest=0x3d449a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.957] wcscat (in: _Dest=0x3d449a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.957] wcscat (in: _Dest=0x3d449a8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0189.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d449a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0189.958] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0189.958] wcscmp (_String1="uk", _String2=".") returned 1 [0189.958] wcscmp (_String1="uk", _String2="..") returned 1 [0189.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d448a0 [0189.958] wcscpy (in: _Dest=0x3d448a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.958] wcscat (in: _Dest=0x3d448a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.958] wcscat (in: _Dest=0x3d448a0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0189.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0189.960] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0189.960] wcscmp (_String1="vi", _String2=".") returned 1 [0189.960] wcscmp (_String1="vi", _String2="..") returned 1 [0189.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44270 [0189.960] wcscpy (in: _Dest=0x3d44270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.960] wcscat (in: _Dest=0x3d44270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.960] wcscat (in: _Dest=0x3d44270, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0189.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0189.962] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0189.962] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0189.962] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0189.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68aea50 [0189.962] wcscpy (in: _Dest=0x68aea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.962] wcscat (in: _Dest=0x68aea50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.962] wcscat (in: _Dest=0x68aea50, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0189.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aea50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0189.964] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0189.964] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0189.964] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0189.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68aeb58 [0189.964] wcscpy (in: _Dest=0x68aeb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0189.964] wcscat (in: _Dest=0x68aeb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0189.964] wcscat (in: _Dest=0x68aeb58, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0189.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aeb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0189.965] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0189.966] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0189.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0189.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17770) returned 1 [0189.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17570) returned 1 Thread: id = 5672 os_tid = 0x1844 [0182.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc308 [0182.043] wcscpy (in: _Dest=0x3edc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0182.043] wcscat (in: _Dest=0x3edc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0182.043] wcscat (in: _Dest=0x3edc308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*" [0182.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0182.043] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0183.136] wcscmp (_String1=".", _String2=".") returned 0 [0183.136] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.136] wcscmp (_String1="..", _String2=".") returned 1 [0183.136] wcscmp (_String1="..", _String2="..") returned 0 [0183.136] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0183.136] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0183.136] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0183.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0183.136] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0183.136] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0183.136] wcscat (in: _Dest=0x3d40060, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" [0184.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0184.961] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0184.961] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0184.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0184.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc308) returned 1 [0184.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17670) returned 1 Thread: id = 5673 os_tid = 0x1848 [0182.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv")) returned 0x20 [0182.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0182.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.044] GetLastError () returned 0x5 [0182.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0182.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efae8) returned 1 Thread: id = 5674 os_tid = 0x184c [0182.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml")) returned 0x20 [0182.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0182.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.046] GetLastError () returned 0x5 [0182.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0182.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 5675 os_tid = 0x1854 [0182.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv")) returned 0x20 [0182.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0182.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.830] GetLastError () returned 0x5 [0182.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0182.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 5676 os_tid = 0x1858 [0182.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml")) returned 0x20 [0182.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0182.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.832] GetLastError () returned 0x5 [0182.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0182.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 5677 os_tid = 0x185c [0182.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml")) returned 0x20 [0182.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0182.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.833] GetLastError () returned 0x5 [0182.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0182.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 5678 os_tid = 0x1860 [0182.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv")) returned 0x20 [0182.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0182.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.834] GetLastError () returned 0x5 [0182.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0182.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 5679 os_tid = 0x1864 [0182.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml")) returned 0x20 [0182.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0182.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.835] GetLastError () returned 0x5 [0182.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0182.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 5680 os_tid = 0x1868 [0182.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv")) returned 0x20 [0182.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0182.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.837] GetLastError () returned 0x5 [0182.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0182.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 5681 os_tid = 0x186c [0182.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml")) returned 0x20 [0182.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0182.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.838] GetLastError () returned 0x5 [0182.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0182.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 5682 os_tid = 0xf70 [0182.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml")) returned 0x20 [0182.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0182.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.839] GetLastError () returned 0x5 [0182.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0182.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 5683 os_tid = 0xf54 [0182.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv")) returned 0x20 [0182.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0182.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.841] GetLastError () returned 0x5 [0182.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0182.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 5684 os_tid = 0x85c [0182.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml")) returned 0x20 [0182.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0182.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.842] GetLastError () returned 0x5 [0182.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0182.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 5685 os_tid = 0xd5c [0182.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv")) returned 0x20 [0182.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0182.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.843] GetLastError () returned 0x5 [0182.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0182.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 5686 os_tid = 0xfb8 [0182.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv")) returned 0x20 [0182.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0182.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.845] GetLastError () returned 0x5 [0182.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0182.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 5687 os_tid = 0x61c [0182.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml")) returned 0x20 [0182.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0182.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.846] GetLastError () returned 0x5 [0182.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0182.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 5688 os_tid = 0xae4 [0182.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv")) returned 0x20 [0182.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0182.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.847] GetLastError () returned 0x5 [0182.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0182.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 5689 os_tid = 0x358 [0182.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml")) returned 0x20 [0182.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0182.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.848] GetLastError () returned 0x5 [0182.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0182.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 5690 os_tid = 0xafc [0182.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv")) returned 0x20 [0182.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0182.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.850] GetLastError () returned 0x5 [0182.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0182.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 5691 os_tid = 0x33c [0182.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml")) returned 0x20 [0182.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0182.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.851] GetLastError () returned 0x5 [0182.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0182.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 5692 os_tid = 0x3f4 [0182.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv")) returned 0x20 [0182.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0182.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.853] GetLastError () returned 0x5 [0182.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0182.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 5693 os_tid = 0xc0 [0182.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml")) returned 0x20 [0182.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0182.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.855] GetLastError () returned 0x5 [0182.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0182.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 5694 os_tid = 0xb0 [0182.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv")) returned 0x20 [0182.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0182.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.858] GetLastError () returned 0x5 [0182.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0182.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 5695 os_tid = 0x82c [0182.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml")) returned 0x20 [0182.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0182.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.860] GetLastError () returned 0x5 [0182.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0182.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 5696 os_tid = 0x83c [0182.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv")) returned 0x20 [0182.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0182.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.540] GetLastError () returned 0x5 [0182.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0182.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 5697 os_tid = 0x87c [0182.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml")) returned 0x20 [0182.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0182.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.542] GetLastError () returned 0x5 [0182.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0182.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 5698 os_tid = 0x15fc [0182.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml")) returned 0x20 [0182.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0182.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.544] GetLastError () returned 0x5 [0182.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0182.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 5699 os_tid = 0x980 [0182.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub")) returned 0x20 [0185.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0185.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.567] GetLastError () returned 0x5 [0185.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0185.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 5700 os_tid = 0x990 [0182.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex")) returned 0x20 [0184.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0184.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.280] GetLastError () returned 0x5 [0185.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0185.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 5701 os_tid = 0x9a0 [0182.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex")) returned 0x20 [0185.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0185.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.565] GetLastError () returned 0x5 [0185.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0185.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 5702 os_tid = 0x1610 [0182.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex")) returned 0x20 [0185.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0185.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.815] GetLastError () returned 0x5 [0185.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0185.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 5703 os_tid = 0x1870 [0182.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex")) returned 0x20 [0185.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0185.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.563] GetLastError () returned 0x5 [0185.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0185.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 5704 os_tid = 0x1874 [0182.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp")) returned 0x20 [0182.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0182.549] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.549] GetLastError () returned 0x5 [0182.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0182.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e580) returned 1 Thread: id = 5705 os_tid = 0x115c [0182.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx")) returned 0x20 [0182.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0182.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.551] GetLastError () returned 0x5 [0182.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0182.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0708) returned 1 Thread: id = 5706 os_tid = 0x16fc [0182.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp")) returned 0x20 [0186.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0186.600] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.600] GetLastError () returned 0x5 [0186.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0186.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf748) returned 1 Thread: id = 5707 os_tid = 0x1700 [0182.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex")) returned 0x20 [0186.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0186.598] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.598] GetLastError () returned 0x5 [0186.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0186.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 Thread: id = 5708 os_tid = 0x1704 [0182.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx")) returned 0x20 [0186.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0186.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.597] GetLastError () returned 0x5 [0186.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0186.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0648) returned 1 Thread: id = 5709 os_tid = 0xe4c [0182.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env")) returned 0x20 [0186.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0186.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.595] GetLastError () returned 0x5 [0186.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0186.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f070) returned 1 Thread: id = 5710 os_tid = 0x1708 [0182.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca")) returned 0x20 [0186.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0186.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.594] GetLastError () returned 0x5 [0186.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0186.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf808) returned 1 Thread: id = 5711 os_tid = 0x170c [0182.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp")) returned 0x20 [0186.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0186.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.576] GetLastError () returned 0x5 [0186.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0186.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 5712 os_tid = 0x1710 [0182.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp")) returned 0x20 [0186.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0186.008] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.008] GetLastError () returned 0x5 [0186.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0186.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e260) returned 1 Thread: id = 5713 os_tid = 0x1714 [0182.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0182.898] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0185.836] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeec [0185.836] GetFileSizeEx (in: hFile=0xeec, lpFileSize=0x816f9ac | out: lpFileSize=0x816f9ac*=2803) returned 1 [0185.836] SetFilePointerEx (in: hFile=0xeec, liDistanceToMove=0xaef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.836] ReadFile (in: hFile=0xeec, lpBuffer=0x816f988, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x816f998, lpOverlapped=0x0 | out: lpBuffer=0x816f988*, lpNumberOfBytesRead=0x816f998*=0x4, lpOverlapped=0x0) returned 1 [0186.037] SetFilePointerEx (in: hFile=0xeec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0186.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0186.038] NtQuerySystemTime (in: CurrentTime=0x816f920 | out: CurrentTime=0x816f920*=132482710945092000) returned 0x0 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x10e23fad [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x31b68b57 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x7969593a [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6144ca01 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x55f6572a [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x1b0fae36 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x7c5016ed [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6ab8a16f [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6682921e [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x5e299c2a [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x45a3c35e [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x43215e5e [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x555c39cc [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x317ad929 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x1bc33bea [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x8c582fd [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x59349897 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x143d5336 [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x1060a22d [0186.038] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x4596a06 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x5d243d4 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6d00895d [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x2c31d847 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6e4f60d5 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x5e1ddc5a [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x41673930 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x39f1bf77 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x447705 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x430451c [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x1472b1b6 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x7a444264 [0186.039] RtlRandomEx (in: Seed=0x816f918 | out: Seed=0x816f918) returned 0x6dad8a95 [0186.050] ReadFile (in: hFile=0xeec, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0xaf3, lpNumberOfBytesRead=0x816f914, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0x816f914*=0xaf3, lpOverlapped=0x0) returned 1 [0186.050] SetFilePointerEx (in: hFile=0xeec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.050] WriteFile (in: hFile=0xeec, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0x816f918, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0x816f918*=0xaf3, lpOverlapped=0x0) returned 1 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0186.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0186.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0186.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0186.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066d40 [0186.776] SetFilePointerEx (in: hFile=0xeec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.776] WriteFile (in: hFile=0xeec, lpBuffer=0x6755e60*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x816f9a0, lpOverlapped=0x0 | out: lpBuffer=0x6755e60*, lpNumberOfBytesWritten=0x816f9a0*=0x11a, lpOverlapped=0x0) returned 1 [0186.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0186.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0186.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0186.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d408e8 [0186.778] wcscpy (in: _Dest=0x3d408e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" [0186.778] wcscat (in: _Dest=0x3d408e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.ac3a86" [0186.778] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.ac3a86", NtPathName=0x816f918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce5c0 [0186.782] FlushFileBuffers (hFile=0xeec) returned 1 [0188.475] CloseHandle (hObject=0xeec) returned 1 [0188.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x675a678 [0188.785] wcscpy (in: _Dest=0x675a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0188.785] wcscat (in: _Dest=0x675a678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt" [0188.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ac3a86-readme.txt")) returned 0x2020 [0188.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a678) returned 1 [0188.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 Thread: id = 5714 os_tid = 0x1170 [0182.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 0x2020 [0182.898] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0185.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc [0185.842] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0x64cfb14 | out: lpFileSize=0x64cfb14*=17492) returned 1 [0185.842] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x4450, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.842] ReadFile (in: hFile=0xefc, lpBuffer=0x64cfaf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x64cfb00, lpOverlapped=0x0 | out: lpBuffer=0x64cfaf0*, lpNumberOfBytesRead=0x64cfb00*=0x4, lpOverlapped=0x0) returned 1 [0186.050] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0186.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0186.051] NtQuerySystemTime (in: CurrentTime=0x64cfa88 | out: CurrentTime=0x64cfa88*=132482710945248000) returned 0x0 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0xbd72925 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x330f8928 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x3a4d4519 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x5b852557 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x2b47a1a5 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x1dcae6d2 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x673354aa [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x621cc9f8 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x72e265e0 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x67bbc4fb [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x4fa369a5 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x795a2bd9 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x52602f7d [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x48d182fc [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x1784d6f1 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x2126afe5 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x50178597 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x5b81a71d [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x4f1cb5d0 [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x647ecabf [0186.051] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x32b0e0a9 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x7f755ac3 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x27087ccf [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x6d61f5e2 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0xe976f54 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x72704081 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x20562004 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x544f637 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x495c8135 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x13db9be6 [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x353ca8ee [0186.052] RtlRandomEx (in: Seed=0x64cfa80 | out: Seed=0x64cfa80) returned 0x55cbadb [0186.124] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.124] ReadFile (in: hFile=0xefc, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x64cfa88, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0x64cfa88*=0x3c00, lpOverlapped=0x0) returned 1 [0186.153] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a9d8 [0186.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d8c8 [0186.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0186.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0186.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0186.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0186.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0186.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0186.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a9d8) returned 1 [0186.154] WriteFile (in: hFile=0xefc, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x64cfa88, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0x64cfa88*=0x3c00, lpOverlapped=0x0) returned 1 [0186.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0186.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0186.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66d5fd0 [0186.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0186.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x66d6138 [0186.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0186.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0186.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0186.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 [0186.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d59a0) returned 1 [0186.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d555f0 [0186.412] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.412] WriteFile (in: hFile=0xefc, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x64cfb08, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0x64cfb08*=0x11e, lpOverlapped=0x0) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6138) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5fd0) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0186.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0186.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x29fc20 [0186.461] wcscpy (in: _Dest=0x29fc20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" [0186.461] wcscat (in: _Dest=0x29fc20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.ac3a86" [0186.461] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0x64cfa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce5c0 [0186.493] FlushFileBuffers (hFile=0xefc) returned 1 [0186.495] CloseHandle (hObject=0xefc) returned 1 [0186.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d555f0 [0186.496] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0186.496] wcscat (in: _Dest=0x3d555f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt" [0186.496] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0186.496] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xefc [0186.503] WriteFile (in: hFile=0xefc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x64cfa9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x64cfa9c*=0x8b9, lpOverlapped=0x0) returned 1 [0186.506] CloseHandle (hObject=0xefc) returned 1 [0186.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0186.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 Thread: id = 5715 os_tid = 0x1718 [0182.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx")) returned 0x20 [0186.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0186.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.579] GetLastError () returned 0x5 [0186.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0186.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0588) returned 1 Thread: id = 5716 os_tid = 0x171c [0182.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca")) returned 0x20 [0186.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0186.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.006] GetLastError () returned 0x5 [0186.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0186.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0348) returned 1 Thread: id = 5717 os_tid = 0x7b0 [0182.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp")) returned 0x20 [0186.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0186.574] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.574] GetLastError () returned 0x5 [0186.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0186.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0408) returned 1 Thread: id = 5718 os_tid = 0x1174 [0182.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp")) returned 0x20 [0186.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0186.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.573] GetLastError () returned 0x5 [0186.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0186.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf508) returned 1 Thread: id = 5719 os_tid = 0x1184 [0182.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx")) returned 0x20 [0186.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0186.571] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.571] GetLastError () returned 0x5 [0186.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0186.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf5c8) returned 1 Thread: id = 5720 os_tid = 0x114c [0182.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths")) returned 0x20 [0186.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0186.569] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.570] GetLastError () returned 0x5 [0186.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0186.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf448) returned 1 Thread: id = 5721 os_tid = 0x1664 [0182.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp")) returned 0x20 [0186.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0186.577] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.577] GetLastError () returned 0x5 [0186.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0186.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db04c8) returned 1 Thread: id = 5722 os_tid = 0x11e4 [0182.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex")) returned 0x20 [0186.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0186.566] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.567] GetLastError () returned 0x5 [0186.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0186.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f778) returned 1 Thread: id = 5723 os_tid = 0x11f0 [0182.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx")) returned 0x20 [0186.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0186.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.565] GetLastError () returned 0x5 [0186.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0186.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf688) returned 1 Thread: id = 5724 os_tid = 0x17cc [0182.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env")) returned 0x20 [0186.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0186.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.563] GetLastError () returned 0x5 [0186.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0186.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f6b0) returned 1 Thread: id = 5725 os_tid = 0x17d0 [0182.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp")) returned 0x20 [0186.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0186.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.561] GetLastError () returned 0x5 [0186.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0186.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafb08) returned 1 Thread: id = 5726 os_tid = 0x17d4 [0182.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex")) returned 0x20 [0186.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0186.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.560] GetLastError () returned 0x5 [0186.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0186.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 5727 os_tid = 0x10b8 [0182.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx")) returned 0x20 [0186.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0186.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.558] GetLastError () returned 0x5 [0186.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0186.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0048) returned 1 Thread: id = 5728 os_tid = 0x1140 [0182.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env")) returned 0x20 [0186.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0186.557] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.557] GetLastError () returned 0x5 [0186.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0186.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 Thread: id = 5729 os_tid = 0x1180 [0182.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca")) returned 0x20 [0186.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0186.555] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.555] GetLastError () returned 0x5 [0186.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0186.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 5730 os_tid = 0x1188 [0182.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp")) returned 0x20 [0186.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0186.553] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.553] GetLastError () returned 0x5 [0186.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0186.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafec8) returned 1 Thread: id = 5731 os_tid = 0x118c [0182.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx")) returned 0x20 [0186.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0186.551] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.551] GetLastError () returned 0x5 [0186.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0186.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf208) returned 1 Thread: id = 5732 os_tid = 0x1190 [0182.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp")) returned 0x20 [0186.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0186.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.156] GetLastError () returned 0x5 [0186.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0186.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 Thread: id = 5733 os_tid = 0x1194 [0182.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths")) returned 0x20 [0186.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0186.592] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.593] GetLastError () returned 0x5 [0186.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0186.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8c8) returned 1 Thread: id = 5734 os_tid = 0x1198 [0182.864] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 0x2020 [0183.613] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0183.614] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f4 [0183.614] GetFileSizeEx (in: hFile=0x21f4, lpFileSize=0x80afd54 | out: lpFileSize=0x80afd54*=6707) returned 1 [0183.614] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x1a2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.614] ReadFile (in: hFile=0x21f4, lpBuffer=0x80afd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x80afd40, lpOverlapped=0x0 | out: lpBuffer=0x80afd30*, lpNumberOfBytesRead=0x80afd40*=0x4, lpOverlapped=0x0) returned 1 [0183.616] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0183.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0183.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0183.617] NtQuerySystemTime (in: CurrentTime=0x80afcc8 | out: CurrentTime=0x80afcc8*=132482710920912000) returned 0x0 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x40cfd816 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x28fba243 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x22e18ce0 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x1625eac7 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x14357ea5 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x7a526194 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x1d52958b [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x71b4698 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0xca9f5ef [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x4d38bf83 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x156b86f2 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x7747b558 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0xa98fa60 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x144987b3 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x4d6746aa [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x29143354 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x4ba9753e [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x5dae62d6 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x7a6ca33d [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x1173c540 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x4b34c9f5 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x12b1c3a6 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x7bc2e30c [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x2537246a [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x3dfa016a [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x1c66b850 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x7db21c0e [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x6c5ab46a [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x76dfadc6 [0183.617] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x619e22d3 [0183.618] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x143d1827 [0183.618] RtlRandomEx (in: Seed=0x80afcc0 | out: Seed=0x80afcc0) returned 0x103b38a5 [0183.626] ReadFile (in: hFile=0x21f4, lpBuffer=0x69874f8, nNumberOfBytesToRead=0x1a33, lpNumberOfBytesRead=0x80afcbc, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0x80afcbc*=0x1a33, lpOverlapped=0x0) returned 1 [0183.628] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.628] WriteFile (in: hFile=0x21f4, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0x80afcc0, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0x80afcc0*=0x1a33, lpOverlapped=0x0) returned 1 [0183.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0183.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0183.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0183.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0183.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0183.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0183.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823368) returned 1 [0183.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef3ca0 [0183.631] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.631] WriteFile (in: hFile=0x21f4, lpBuffer=0x3d45a28*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x80afd48, lpOverlapped=0x0 | out: lpBuffer=0x3d45a28*, lpNumberOfBytesWritten=0x80afd48*=0x100, lpOverlapped=0x0) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a28) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0183.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0183.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6817ce8 [0183.633] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0183.633] wcscat (in: _Dest=0x6817ce8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.ac3a86" [0183.633] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.ac3a86", NtPathName=0x80afcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d55028 [0183.636] FlushFileBuffers (hFile=0x21f4) returned 1 [0185.087] CloseHandle (hObject=0x21f4) returned 1 [0185.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bd370 [0185.387] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0185.387] wcscat (in: _Dest=0x30bd370, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt" [0185.387] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\ac3a86-readme.txt")) returned 0xffffffff [0185.387] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cd0 [0185.666] WriteFile (in: hFile=0x1cd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x80afcdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x80afcdc*=0x8b9, lpOverlapped=0x0) returned 1 [0185.903] CloseHandle (hObject=0x1cd0) returned 1 [0186.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0186.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16870) returned 1 Thread: id = 5735 os_tid = 0x119c [0182.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 0x2020 [0183.137] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0184.141] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20d0 [0184.141] GetFileSizeEx (in: hFile=0x20d0, lpFileSize=0x848f97c | out: lpFileSize=0x848f97c*=1004) returned 1 [0184.141] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x3e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.141] ReadFile (in: hFile=0x20d0, lpBuffer=0x848f958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x848f968, lpOverlapped=0x0 | out: lpBuffer=0x848f958*, lpNumberOfBytesRead=0x848f968*=0x4, lpOverlapped=0x0) returned 1 [0184.144] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0184.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0184.144] NtQuerySystemTime (in: CurrentTime=0x848f8f0 | out: CurrentTime=0x848f8f0*=132482710926216000) returned 0x0 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x73f28447 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0xa6c543c [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x77a805a7 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x162f99f5 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0xdfd517b [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x6fd87c49 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x10a35f99 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0xec501ca [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x59879ea7 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x4c12a876 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x52fd7995 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0xba99ec5 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x4462138a [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x7aab4327 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x6489cff0 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x7e34ee28 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x710da051 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x479d3a14 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x6688f49e [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x1ec4c862 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x432c85d8 [0184.144] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x387b7914 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x18b66a54 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x3015f66f [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x74474057 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x132a31f1 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x11ce02df [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0xf2521c [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x47cc5a63 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x15ef9f4d [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x143ede48 [0184.145] RtlRandomEx (in: Seed=0x848f8e8 | out: Seed=0x848f8e8) returned 0x76f1ea51 [0184.152] ReadFile (in: hFile=0x20d0, lpBuffer=0x673b720, nNumberOfBytesToRead=0x3ec, lpNumberOfBytesRead=0x848f8e4, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0x848f8e4*=0x3ec, lpOverlapped=0x0) returned 1 [0184.152] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.152] WriteFile (in: hFile=0x20d0, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0x848f8e8, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x848f8e8*=0x3ec, lpOverlapped=0x0) returned 1 [0184.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0184.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0184.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0184.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0184.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0184.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0184.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0184.155] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.155] WriteFile (in: hFile=0x20d0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x848f970, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x848f970*=0x10c, lpOverlapped=0x0) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0184.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0184.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec828 [0184.156] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" [0184.157] wcscat (in: _Dest=0x3dec828, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.ac3a86" [0184.157] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.ac3a86", NtPathName=0x848f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d402d0 [0185.754] FlushFileBuffers (hFile=0x20d0) returned 1 [0185.814] CloseHandle (hObject=0x20d0) returned 1 [0185.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x30bb4d0 [0185.878] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0185.878] wcscat (in: _Dest=0x30bb4d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt" [0185.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\ac3a86-readme.txt")) returned 0x2020 [0185.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0185.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 Thread: id = 5736 os_tid = 0x11a0 [0182.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc200 [0182.870] wcscpy (in: _Dest=0x3edc200, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0182.870] wcscat (in: _Dest=0x3edc200, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0182.870] wcscat (in: _Dest=0x3edc200, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*" [0182.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697ab58 [0182.870] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0183.627] wcscmp (_String1=".", _String2=".") returned 0 [0183.627] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.627] wcscmp (_String1="..", _String2=".") returned 1 [0183.629] wcscmp (_String1="..", _String2="..") returned 0 [0183.629] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.629] wcscmp (_String1="ar", _String2=".") returned 1 [0183.629] wcscmp (_String1="ar", _String2="..") returned 1 [0183.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d45920 [0183.630] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0183.630] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0183.636] wcscat (in: _Dest=0x3d45920, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0184.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0184.972] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0184.972] wcscmp (_String1="bg", _String2=".") returned 1 [0184.972] wcscmp (_String1="bg", _String2="..") returned 1 [0184.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6898d68 [0184.972] wcscpy (in: _Dest=0x6898d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.972] wcscat (in: _Dest=0x6898d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.972] wcscat (in: _Dest=0x6898d68, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0184.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6898d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0184.973] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0184.973] wcscmp (_String1="ca", _String2=".") returned 1 [0184.973] wcscmp (_String1="ca", _String2="..") returned 1 [0184.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6898e70 [0184.973] wcscpy (in: _Dest=0x6898e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.973] wcscat (in: _Dest=0x6898e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.973] wcscat (in: _Dest=0x6898e70, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0184.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6898e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0184.974] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0184.974] wcscmp (_String1="cs", _String2=".") returned 1 [0184.974] wcscmp (_String1="cs", _String2="..") returned 1 [0184.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6898f78 [0184.974] wcscpy (in: _Dest=0x6898f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.974] wcscat (in: _Dest=0x6898f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.974] wcscat (in: _Dest=0x6898f78, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0184.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6898f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0184.975] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0184.975] wcscmp (_String1="da", _String2=".") returned 1 [0184.975] wcscmp (_String1="da", _String2="..") returned 1 [0184.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6899080 [0184.976] wcscpy (in: _Dest=0x6899080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.976] wcscat (in: _Dest=0x6899080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.976] wcscat (in: _Dest=0x6899080, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0184.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6899080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0184.977] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0184.977] wcscmp (_String1="de", _String2=".") returned 1 [0184.977] wcscmp (_String1="de", _String2="..") returned 1 [0184.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6899188 [0184.977] wcscpy (in: _Dest=0x6899188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.977] wcscat (in: _Dest=0x6899188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.977] wcscat (in: _Dest=0x6899188, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0184.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6899188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0184.978] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0184.978] wcscmp (_String1="el", _String2=".") returned 1 [0184.978] wcscmp (_String1="el", _String2="..") returned 1 [0184.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6899290 [0184.978] wcscpy (in: _Dest=0x6899290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.978] wcscat (in: _Dest=0x6899290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.978] wcscat (in: _Dest=0x6899290, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0184.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6899290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0184.980] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0184.980] wcscmp (_String1="en_GB", _String2=".") returned 1 [0184.980] wcscmp (_String1="en_GB", _String2="..") returned 1 [0184.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc538 [0184.980] wcscpy (in: _Dest=0x30bc538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.980] wcscat (in: _Dest=0x30bc538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.980] wcscat (in: _Dest=0x30bc538, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0184.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0184.981] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0184.981] wcscmp (_String1="en_US", _String2=".") returned 1 [0184.981] wcscmp (_String1="en_US", _String2="..") returned 1 [0184.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc650 [0184.981] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.981] wcscat (in: _Dest=0x30bc650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.981] wcscat (in: _Dest=0x30bc650, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0184.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0184.982] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0184.982] wcscmp (_String1="es", _String2=".") returned 1 [0184.982] wcscmp (_String1="es", _String2="..") returned 1 [0184.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6899398 [0184.982] wcscpy (in: _Dest=0x6899398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.982] wcscat (in: _Dest=0x6899398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.982] wcscat (in: _Dest=0x6899398, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0184.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6899398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0184.983] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0184.983] wcscmp (_String1="es_419", _String2=".") returned 1 [0184.984] wcscmp (_String1="es_419", _String2="..") returned 1 [0184.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc768 [0184.984] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.984] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.984] wcscat (in: _Dest=0x30bc768, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0184.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0184.985] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0184.985] wcscmp (_String1="et", _String2=".") returned 1 [0184.985] wcscmp (_String1="et", _String2="..") returned 1 [0184.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68994a0 [0184.985] wcscpy (in: _Dest=0x68994a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.985] wcscat (in: _Dest=0x68994a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.985] wcscat (in: _Dest=0x68994a0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0184.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68994a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0184.986] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0184.986] wcscmp (_String1="eu", _String2=".") returned 1 [0184.986] wcscmp (_String1="eu", _String2="..") returned 1 [0184.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68995a8 [0184.986] wcscpy (in: _Dest=0x68995a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.986] wcscat (in: _Dest=0x68995a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.986] wcscat (in: _Dest=0x68995a8, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0184.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68995a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0184.987] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0184.987] wcscmp (_String1="fi", _String2=".") returned 1 [0184.987] wcscmp (_String1="fi", _String2="..") returned 1 [0184.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68996b0 [0184.987] wcscpy (in: _Dest=0x68996b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.987] wcscat (in: _Dest=0x68996b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.987] wcscat (in: _Dest=0x68996b0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0184.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68996b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0184.989] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0184.989] wcscmp (_String1="fil", _String2=".") returned 1 [0184.989] wcscmp (_String1="fil", _String2="..") returned 1 [0184.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68997b8 [0184.989] wcscpy (in: _Dest=0x68997b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.989] wcscat (in: _Dest=0x68997b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.989] wcscat (in: _Dest=0x68997b8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0184.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68997b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0 [0184.990] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0184.990] wcscmp (_String1="fr", _String2=".") returned 1 [0184.990] wcscmp (_String1="fr", _String2="..") returned 1 [0184.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68998c0 [0184.990] wcscpy (in: _Dest=0x68998c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.990] wcscat (in: _Dest=0x68998c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.990] wcscat (in: _Dest=0x68998c0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0184.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68998c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0184.991] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0184.991] wcscmp (_String1="he", _String2=".") returned 1 [0184.991] wcscmp (_String1="he", _String2="..") returned 1 [0184.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68999c8 [0184.991] wcscpy (in: _Dest=0x68999c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.991] wcscat (in: _Dest=0x68999c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.991] wcscat (in: _Dest=0x68999c8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0184.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68999c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0184.992] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0184.992] wcscmp (_String1="hi", _String2=".") returned 1 [0184.992] wcscmp (_String1="hi", _String2="..") returned 1 [0184.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6899ad0 [0184.992] wcscpy (in: _Dest=0x6899ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.992] wcscat (in: _Dest=0x6899ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.993] wcscat (in: _Dest=0x6899ad0, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0184.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6899ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0184.994] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0184.994] wcscmp (_String1="hr", _String2=".") returned 1 [0184.994] wcscmp (_String1="hr", _String2="..") returned 1 [0184.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6818c60 [0184.994] wcscpy (in: _Dest=0x6818c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.994] wcscat (in: _Dest=0x6818c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.994] wcscat (in: _Dest=0x6818c60, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0184.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0184.995] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0184.995] wcscmp (_String1="hu", _String2=".") returned 1 [0184.995] wcscmp (_String1="hu", _String2="..") returned 1 [0184.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f23ea8 [0184.995] wcscpy (in: _Dest=0x3f23ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.995] wcscat (in: _Dest=0x3f23ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.995] wcscat (in: _Dest=0x3f23ea8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0184.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0184.996] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0184.996] wcscmp (_String1="id", _String2=".") returned 1 [0184.996] wcscmp (_String1="id", _String2="..") returned 1 [0184.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f23fb0 [0184.996] wcscpy (in: _Dest=0x3f23fb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.996] wcscat (in: _Dest=0x3f23fb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.996] wcscat (in: _Dest=0x3f23fb0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0184.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0184.997] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0184.997] wcscmp (_String1="it", _String2=".") returned 1 [0184.997] wcscmp (_String1="it", _String2="..") returned 1 [0184.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f240b8 [0184.997] wcscpy (in: _Dest=0x3f240b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.997] wcscat (in: _Dest=0x3f240b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.997] wcscat (in: _Dest=0x3f240b8, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0184.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f240b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0184.998] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0184.998] wcscmp (_String1="ja", _String2=".") returned 1 [0184.998] wcscmp (_String1="ja", _String2="..") returned 1 [0184.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f241c0 [0184.999] wcscpy (in: _Dest=0x3f241c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0184.999] wcscat (in: _Dest=0x3f241c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0184.999] wcscat (in: _Dest=0x3f241c0, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0184.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0185.000] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0185.000] wcscmp (_String1="ko", _String2=".") returned 1 [0185.000] wcscmp (_String1="ko", _String2="..") returned 1 [0185.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f242c8 [0185.000] wcscpy (in: _Dest=0x3f242c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.000] wcscat (in: _Dest=0x3f242c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.000] wcscat (in: _Dest=0x3f242c8, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0185.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f242c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0185.001] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0185.001] wcscmp (_String1="lt", _String2=".") returned 1 [0185.001] wcscmp (_String1="lt", _String2="..") returned 1 [0185.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f243d0 [0185.001] wcscpy (in: _Dest=0x3f243d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.001] wcscat (in: _Dest=0x3f243d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.001] wcscat (in: _Dest=0x3f243d0, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0185.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f243d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0185.002] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0185.002] wcscmp (_String1="lv", _String2=".") returned 1 [0185.002] wcscmp (_String1="lv", _String2="..") returned 1 [0185.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f244d8 [0185.002] wcscpy (in: _Dest=0x3f244d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.002] wcscat (in: _Dest=0x3f244d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.002] wcscat (in: _Dest=0x3f244d8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0185.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f244d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0185.003] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0185.004] wcscmp (_String1="ms", _String2=".") returned 1 [0185.004] wcscmp (_String1="ms", _String2="..") returned 1 [0185.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f245e0 [0185.004] wcscpy (in: _Dest=0x3f245e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.004] wcscat (in: _Dest=0x3f245e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.004] wcscat (in: _Dest=0x3f245e0, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0185.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f245e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0185.005] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0185.005] wcscmp (_String1="nl", _String2=".") returned 1 [0185.005] wcscmp (_String1="nl", _String2="..") returned 1 [0185.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f246e8 [0185.005] wcscpy (in: _Dest=0x3f246e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.005] wcscat (in: _Dest=0x3f246e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.005] wcscat (in: _Dest=0x3f246e8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0185.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f246e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0185.006] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0185.006] wcscmp (_String1="no", _String2=".") returned 1 [0185.006] wcscmp (_String1="no", _String2="..") returned 1 [0185.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f247f0 [0185.006] wcscpy (in: _Dest=0x3f247f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.006] wcscat (in: _Dest=0x3f247f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.006] wcscat (in: _Dest=0x3f247f0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0185.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f247f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0185.007] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0185.007] wcscmp (_String1="pl", _String2=".") returned 1 [0185.007] wcscmp (_String1="pl", _String2="..") returned 1 [0185.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f248f8 [0185.007] wcscpy (in: _Dest=0x3f248f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.007] wcscat (in: _Dest=0x3f248f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.008] wcscat (in: _Dest=0x3f248f8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0185.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f248f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0185.009] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0185.009] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0185.009] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0185.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc880 [0185.009] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.009] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.009] wcscat (in: _Dest=0x30bc880, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0185.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0185.010] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0185.010] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0185.010] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0185.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc998 [0185.010] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.010] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.010] wcscat (in: _Dest=0x30bc998, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0185.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0185.236] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0185.236] wcscmp (_String1="ro", _String2=".") returned 1 [0185.236] wcscmp (_String1="ro", _String2="..") returned 1 [0185.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68ae630 [0185.236] wcscpy (in: _Dest=0x68ae630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.236] wcscat (in: _Dest=0x68ae630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.236] wcscat (in: _Dest=0x68ae630, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0194.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0194.916] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0194.916] wcscmp (_String1="ru", _String2=".") returned 1 [0194.916] wcscmp (_String1="ru", _String2="..") returned 1 [0194.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6758480 [0194.917] wcscpy (in: _Dest=0x6758480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.917] wcscat (in: _Dest=0x6758480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.917] wcscat (in: _Dest=0x6758480, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0194.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0194.918] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0194.918] wcscmp (_String1="sk", _String2=".") returned 1 [0194.918] wcscmp (_String1="sk", _String2="..") returned 1 [0194.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x67572f8 [0194.918] wcscpy (in: _Dest=0x67572f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.918] wcscat (in: _Dest=0x67572f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.918] wcscat (in: _Dest=0x67572f8, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0194.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67572f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0194.919] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0194.919] wcscmp (_String1="sl", _String2=".") returned 1 [0194.919] wcscmp (_String1="sl", _String2="..") returned 1 [0194.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6758270 [0194.919] wcscpy (in: _Dest=0x6758270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.919] wcscat (in: _Dest=0x6758270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.919] wcscat (in: _Dest=0x6758270, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0194.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0194.920] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0194.920] wcscmp (_String1="sr", _String2=".") returned 1 [0194.920] wcscmp (_String1="sr", _String2="..") returned 1 [0194.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6758378 [0194.920] wcscpy (in: _Dest=0x6758378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.920] wcscat (in: _Dest=0x6758378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.920] wcscat (in: _Dest=0x6758378, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0194.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0194.921] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0194.921] wcscmp (_String1="sv", _String2=".") returned 1 [0194.921] wcscmp (_String1="sv", _String2="..") returned 1 [0194.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6757508 [0194.922] wcscpy (in: _Dest=0x6757508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.922] wcscat (in: _Dest=0x6757508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.922] wcscat (in: _Dest=0x6757508, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0194.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0194.923] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0194.923] wcscmp (_String1="th", _String2=".") returned 1 [0194.923] wcscmp (_String1="th", _String2="..") returned 1 [0194.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6757610 [0194.923] wcscpy (in: _Dest=0x6757610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.923] wcscat (in: _Dest=0x6757610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.923] wcscat (in: _Dest=0x6757610, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0194.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0194.924] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0194.924] wcscmp (_String1="tr", _String2=".") returned 1 [0194.924] wcscmp (_String1="tr", _String2="..") returned 1 [0194.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6757718 [0194.924] wcscpy (in: _Dest=0x6757718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.924] wcscat (in: _Dest=0x6757718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.924] wcscat (in: _Dest=0x6757718, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0194.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0194.927] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0194.927] wcscmp (_String1="uk", _String2=".") returned 1 [0194.927] wcscmp (_String1="uk", _String2="..") returned 1 [0194.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6757820 [0194.927] wcscpy (in: _Dest=0x6757820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.927] wcscat (in: _Dest=0x6757820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.927] wcscat (in: _Dest=0x6757820, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0194.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0194.928] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0194.928] wcscmp (_String1="vi", _String2=".") returned 1 [0194.928] wcscmp (_String1="vi", _String2="..") returned 1 [0194.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x6757928 [0194.928] wcscpy (in: _Dest=0x6757928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.929] wcscat (in: _Dest=0x6757928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.929] wcscat (in: _Dest=0x6757928, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0194.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0194.930] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0194.930] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0194.930] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752728 [0194.930] wcscpy (in: _Dest=0x6752728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.930] wcscat (in: _Dest=0x6752728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.930] wcscat (in: _Dest=0x6752728, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0194.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0194.932] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0194.932] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0194.932] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0194.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752840 [0194.932] wcscpy (in: _Dest=0x6752840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0194.932] wcscat (in: _Dest=0x6752840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0194.932] wcscat (in: _Dest=0x6752840, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0194.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0194.933] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x697ab58 | out: lpFindFileData=0x697ab58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0194.933] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0194.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ab58) returned 1 [0194.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc200) returned 1 [0194.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15770) returned 1 Thread: id = 5737 os_tid = 0x11a4 [0182.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3edc518 [0182.871] wcscpy (in: _Dest=0x3edc518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0182.871] wcscat (in: _Dest=0x3edc518, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0182.871] wcscat (in: _Dest=0x3edc518, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*" [0182.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b760 [0182.871] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0183.605] wcscmp (_String1=".", _String2=".") returned 0 [0183.606] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.606] wcscmp (_String1="..", _String2=".") returned 1 [0183.613] wcscmp (_String1="..", _String2="..") returned 0 [0183.613] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0183.613] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0183.613] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0183.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40198 [0183.613] wcscpy (in: _Dest=0x3d40198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0183.613] wcscat (in: _Dest=0x3d40198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0183.613] wcscat (in: _Dest=0x3d40198, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" [0191.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0191.960] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x697b760 | out: lpFindFileData=0x697b760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0191.960] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0191.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b760) returned 1 [0191.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc518) returned 1 [0191.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17870) returned 1 Thread: id = 5738 os_tid = 0x1878 [0182.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js")) returned 0x20 [0182.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0182.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.872] GetLastError () returned 0x5 [0182.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0182.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 5739 os_tid = 0x1674 [0182.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc620 [0182.874] wcscpy (in: _Dest=0x3edc620, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0182.874] wcscat (in: _Dest=0x3edc620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0182.874] wcscat (in: _Dest=0x3edc620, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*" [0182.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c5d0 [0182.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0182.874] wcscmp (_String1=".", _String2=".") returned 0 [0182.874] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.874] wcscmp (_String1="..", _String2=".") returned 1 [0182.874] wcscmp (_String1="..", _String2="..") returned 0 [0182.874] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0182.874] wcscmp (_String1="Basic", _String2=".") returned 1 [0182.874] wcscmp (_String1="Basic", _String2="..") returned 1 [0182.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3debe50 [0182.874] wcscpy (in: _Dest=0x3debe50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0182.874] wcscat (in: _Dest=0x3debe50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0182.875] wcscat (in: _Dest=0x3debe50, _Source="Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0188.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3debe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0188.602] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0188.602] wcscmp (_String1="Fancy", _String2=".") returned 1 [0188.602] wcscmp (_String1="Fancy", _String2="..") returned 1 [0188.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752610 [0188.602] wcscpy (in: _Dest=0x6752610, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0188.602] wcscat (in: _Dest=0x6752610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0188.602] wcscat (in: _Dest=0x6752610, _Source="Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0188.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0188.603] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0188.603] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0188.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c5d0) returned 1 [0188.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc620) returned 1 [0188.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15a70) returned 1 Thread: id = 5740 os_tid = 0x11b0 [0182.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20 [0184.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0184.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.817] GetLastError () returned 0x5 [0184.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0184.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 5741 os_tid = 0x11b4 [0182.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20 [0184.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0184.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.787] GetLastError () returned 0x5 [0184.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0184.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 5742 os_tid = 0x11b8 [0182.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20 [0184.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0184.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.815] GetLastError () returned 0x5 [0184.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0184.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 5743 os_tid = 0x11bc [0182.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20 [0184.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0184.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.785] GetLastError () returned 0x5 [0184.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0184.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 5744 os_tid = 0x11c0 [0182.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20 [0184.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0184.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.783] GetLastError () returned 0x5 [0184.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0184.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 5745 os_tid = 0x11c4 [0182.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20 [0184.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0184.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.814] GetLastError () returned 0x5 [0184.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0184.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 5746 os_tid = 0x11e8 [0182.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20 [0184.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0184.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.781] GetLastError () returned 0x5 [0184.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0184.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 5747 os_tid = 0x1208 [0182.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20 [0184.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0184.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.779] GetLastError () returned 0x5 [0184.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0184.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 5748 os_tid = 0x133c [0182.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20 [0184.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0184.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.777] GetLastError () returned 0x5 [0184.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0184.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 5749 os_tid = 0x142c [0182.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20 [0184.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0184.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.775] GetLastError () returned 0x5 [0184.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0184.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 5750 os_tid = 0xe04 [0182.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20 [0184.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0184.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.812] GetLastError () returned 0x5 [0184.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0184.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 5751 os_tid = 0x264 [0182.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20 [0184.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0184.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.773] GetLastError () returned 0x5 [0184.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0184.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 5752 os_tid = 0x1434 [0182.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20 [0184.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0184.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.772] GetLastError () returned 0x5 [0184.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0184.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 5753 os_tid = 0x17c0 [0182.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20 [0184.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0184.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.770] GetLastError () returned 0x5 [0184.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0184.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 5754 os_tid = 0x143c [0182.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20 [0184.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0184.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.810] GetLastError () returned 0x5 [0184.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0184.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 5755 os_tid = 0x1440 [0182.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20 [0184.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0184.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.808] GetLastError () returned 0x5 [0184.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0184.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 5756 os_tid = 0x23c [0182.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20 [0184.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0184.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.769] GetLastError () returned 0x5 [0184.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0184.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 5757 os_tid = 0x3dc [0182.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20 [0184.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0184.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.807] GetLastError () returned 0x5 [0184.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0184.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 5758 os_tid = 0x187c [0182.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20 [0184.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0184.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.767] GetLastError () returned 0x5 [0184.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0184.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 5759 os_tid = 0x1880 [0182.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20 [0184.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0184.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.805] GetLastError () returned 0x5 [0184.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0184.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 5760 os_tid = 0x1884 [0182.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20 [0184.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0184.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.803] GetLastError () returned 0x5 [0184.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0184.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 5761 os_tid = 0x8d0 [0182.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20 [0184.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0184.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.802] GetLastError () returned 0x5 [0184.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0184.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 5762 os_tid = 0x1450 [0182.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20 [0184.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0184.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.765] GetLastError () returned 0x5 [0184.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0184.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 5763 os_tid = 0x1454 [0182.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20 [0184.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0184.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.800] GetLastError () returned 0x5 [0184.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0184.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 5764 os_tid = 0x1258 [0182.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20 [0184.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0184.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.763] GetLastError () returned 0x5 [0184.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0184.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 5765 os_tid = 0x1458 [0182.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20 [0184.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0184.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.762] GetLastError () returned 0x5 [0184.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0184.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 5766 os_tid = 0x145c [0182.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20 [0184.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0184.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.798] GetLastError () returned 0x5 [0184.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0184.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 5767 os_tid = 0x1460 [0182.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20 [0184.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0184.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.760] GetLastError () returned 0x5 [0184.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0184.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 5768 os_tid = 0x974 [0182.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20 [0184.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0184.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.758] GetLastError () returned 0x5 [0184.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0184.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 5769 os_tid = 0xfc4 [0182.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20 [0184.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0184.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.796] GetLastError () returned 0x5 [0184.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0184.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 5770 os_tid = 0xb98 [0183.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20 [0184.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0184.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.794] GetLastError () returned 0x5 [0184.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0184.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 5771 os_tid = 0xe18 [0183.118] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 0x2020 [0183.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", dwFileAttributes=0x20) returned 1 [0185.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb0 [0185.849] GetFileSizeEx (in: hFile=0x1cb0, lpFileSize=0x8d2f794 | out: lpFileSize=0x8d2f794*=207406) returned 1 [0185.849] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x32a2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.849] ReadFile (in: hFile=0x1cb0, lpBuffer=0x8d2f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d2f780, lpOverlapped=0x0 | out: lpBuffer=0x8d2f770*, lpNumberOfBytesRead=0x8d2f780*=0x4, lpOverlapped=0x0) returned 1 [0185.925] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0185.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0185.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0185.925] NtQuerySystemTime (in: CurrentTime=0x8d2f708 | out: CurrentTime=0x8d2f708*=132482710944000000) returned 0x0 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x522fc0da [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x1f7adc5d [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x13945eb1 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x7166e172 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x521ca62a [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x41e1fc55 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x71a18aa7 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x7b702fa4 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x38b912c2 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x7b2fa169 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x311aa006 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x7f04a5e6 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x509cc535 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x60268cd5 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x577ee9ff [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x60c396c0 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x3efbc9a [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x2adf1b28 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x870dee8 [0185.925] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x4fa2f736 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0xa2c93ad [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x3281a4fe [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x4f830b80 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x21f15346 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x1fa99b1d [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x3d4a18bc [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x6273cca8 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x68105372 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x255338f7 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x3cbcef41 [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x7b6ab6ed [0185.926] RtlRandomEx (in: Seed=0x8d2f700 | out: Seed=0x8d2f700) returned 0x48858420 [0185.936] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.936] ReadFile (in: hFile=0x1cb0, lpBuffer=0x6737b18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.149] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a9d8 [0186.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d8c8 [0186.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0186.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0186.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0186.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0186.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0186.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a9d8) returned 1 [0186.150] WriteFile (in: hFile=0x1cb0, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0186.785] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x1a400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.785] ReadFile (in: hFile=0x1cb0, lpBuffer=0x6737b18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.786] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x1a400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b710 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0186.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0186.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0186.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0186.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.787] WriteFile (in: hFile=0x1cb0, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0186.841] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x2ee2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.841] ReadFile (in: hFile=0x1cb0, lpBuffer=0x6737b18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.842] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x2ee2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff3b0 [0186.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0186.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0186.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0186.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0186.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0186.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0186.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.843] WriteFile (in: hFile=0x1cb0, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d2f708, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x8d2f708*=0x3c00, lpOverlapped=0x0) returned 1 [0186.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0186.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0186.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0186.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3067080 [0186.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0186.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0186.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0186.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcd898 [0186.853] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.853] WriteFile (in: hFile=0x1cb0, lpBuffer=0x3dcd898*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x8d2f788, lpOverlapped=0x0 | out: lpBuffer=0x3dcd898*, lpNumberOfBytesWritten=0x8d2f788*=0x156, lpOverlapped=0x0) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d40) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0186.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0186.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6755e60 [0186.855] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" [0186.855] wcscat (in: _Dest=0x6755e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.ac3a86" [0186.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.ac3a86", NtPathName=0x8d2f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x2fce88 [0186.860] FlushFileBuffers (hFile=0x1cb0) returned 1 [0188.476] CloseHandle (hObject=0x1cb0) returned 1 [0188.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc650 [0188.794] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0188.794] wcscat (in: _Dest=0x30bc650, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" [0188.794] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ac3a86-readme.txt")) returned 0xffffffff [0188.794] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd14 [0188.845] WriteFile (in: hFile=0xd14, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d2f71c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d2f71c*=0x8b9, lpOverlapped=0x0) returned 1 [0188.847] CloseHandle (hObject=0xd14) returned 1 [0188.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0188.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 5772 os_tid = 0x14ec [0183.120] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 0x2020 [0183.120] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", dwFileAttributes=0x20) returned 1 [0185.839] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e20 [0185.839] GetFileSizeEx (in: hFile=0x1e20, lpFileSize=0x475fa8c | out: lpFileSize=0x475fa8c*=241753) returned 1 [0185.839] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x3b055, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.839] ReadFile (in: hFile=0x1e20, lpBuffer=0x475fa68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x475fa78, lpOverlapped=0x0 | out: lpBuffer=0x475fa68*, lpNumberOfBytesRead=0x475fa78*=0x4, lpOverlapped=0x0) returned 1 [0185.985] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0185.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0185.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0185.985] NtQuerySystemTime (in: CurrentTime=0x475fa00 | out: CurrentTime=0x475fa00*=132482710944624000) returned 0x0 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x7517c54 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x5725d0fa [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x48dd9d98 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x3d404941 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x1f6ee5c [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x6a2dea7c [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x259a4aa1 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x5683f704 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x7592da16 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0xfb0a265 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x1da9467c [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x9bf9dfc [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x527f2308 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x7f83ef5f [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x5050d77f [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x5d061050 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x63563c9e [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x8cde562 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x234347a4 [0185.985] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x606aeb09 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x1ea1ade5 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x668a9dec [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0xe59dc65 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x62036036 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x2ca9aa12 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x1e74abef [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x11ac5586 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x4ddc08fd [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x6302df90 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x74f6a223 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x30ca4283 [0185.986] RtlRandomEx (in: Seed=0x475f9f8 | out: Seed=0x475f9f8) returned 0x5011321 [0185.997] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.997] ReadFile (in: hFile=0x1e20, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.150] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689a9d8 [0186.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d8c8 [0186.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0186.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0186.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6742f30 [0186.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0186.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0186.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0186.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0186.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a9d8) returned 1 [0186.151] WriteFile (in: hFile=0x1e20, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0186.790] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.790] ReadFile (in: hFile=0x1e20, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.791] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b710 [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0186.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0186.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6742f30 [0186.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0186.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ace0 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0186.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b710) returned 1 [0186.792] WriteFile (in: hFile=0x1e20, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0186.845] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x37459, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.845] ReadFile (in: hFile=0x1e20, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.846] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x37459, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff3b0 [0186.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0186.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0186.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6742f30 [0186.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a650 [0186.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0186.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.847] WriteFile (in: hFile=0x1e20, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x475fa00, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0x475fa00*=0x3c00, lpOverlapped=0x0) returned 1 [0186.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8bf20 [0186.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3f19dc8 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0186.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0186.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x2fce88 [0186.864] SetFilePointerEx (in: hFile=0x1e20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.864] WriteFile (in: hFile=0x1e20, lpBuffer=0x2fce88*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x475fa80, lpOverlapped=0x0 | out: lpBuffer=0x2fce88*, lpNumberOfBytesWritten=0x475fa80*=0x14e, lpOverlapped=0x0) returned 1 [0186.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0186.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19dc8) returned 1 [0186.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0186.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f199d8) returned 1 [0186.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 [0186.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0186.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0186.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0186.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755e60 [0186.866] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" [0186.866] wcscat (in: _Dest=0x6755e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.ac3a86" [0186.866] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.ac3a86", NtPathName=0x475f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d40540 [0186.870] FlushFileBuffers (hFile=0x1e20) returned 1 [0188.477] CloseHandle (hObject=0x1e20) returned 1 [0188.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bcce0 [0188.796] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0188.796] wcscat (in: _Dest=0x30bcce0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" [0188.797] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ac3a86-readme.txt")) returned 0x2020 [0188.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0188.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 Thread: id = 5773 os_tid = 0x9f0 [0183.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e17d70 [0183.120] wcscpy (in: _Dest=0x3e17d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0183.120] wcscat (in: _Dest=0x3e17d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0183.120] wcscat (in: _Dest=0x3e17d70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*" [0183.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0183.121] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0185.420] wcscmp (_String1=".", _String2=".") returned 0 [0185.421] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.421] wcscmp (_String1="..", _String2=".") returned 1 [0185.421] wcscmp (_String1="..", _String2="..") returned 0 [0185.421] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa1ddb600, ftLastWriteTime.dwHighDateTime=0x1cec368, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0185.421] wcscmp (_String1="craw_window.css", _String2=".") returned 1 [0185.421] wcscmp (_String1="craw_window.css", _String2="..") returned 1 [0185.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x674f1a8 [0185.421] wcscpy (in: _Dest=0x674f1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0185.421] wcscat (in: _Dest=0x674f1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0185.421] wcscat (in: _Dest=0x674f1a8, _Source="craw_window.css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" [0185.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0185.774] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa1ddb600, ftLastWriteTime.dwHighDateTime=0x1cec368, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0 [0185.774] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0185.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0185.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17d70) returned 1 [0185.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17a70) returned 1 Thread: id = 5774 os_tid = 0x1780 [0183.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17e70 [0183.121] wcscpy (in: _Dest=0x3e17e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0183.121] wcscat (in: _Dest=0x3e17e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0183.121] wcscat (in: _Dest=0x3e17e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*" [0183.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0183.122] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0185.817] wcscmp (_String1=".", _String2=".") returned 0 [0185.817] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.817] wcscmp (_String1="..", _String2=".") returned 1 [0185.818] wcscmp (_String1="..", _String2="..") returned 0 [0185.818] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0185.818] wcscmp (_String1="craw_window.html", _String2=".") returned 1 [0185.818] wcscmp (_String1="craw_window.html", _String2="..") returned 1 [0185.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755c10 [0185.818] wcscpy (in: _Dest=0x6755c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0185.818] wcscat (in: _Dest=0x6755c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0185.818] wcscat (in: _Dest=0x6755c10, _Source="craw_window.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" [0188.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0188.674] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0 [0188.674] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0188.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0188.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17e70) returned 1 [0188.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17b70) returned 1 Thread: id = 5775 os_tid = 0x1790 [0183.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3edc938 [0183.122] wcscpy (in: _Dest=0x3edc938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0183.122] wcscat (in: _Dest=0x3edc938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0183.122] wcscat (in: _Dest=0x3edc938, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*" [0183.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0183.123] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0186.717] wcscmp (_String1=".", _String2=".") returned 0 [0186.717] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.717] wcscmp (_String1="..", _String2=".") returned 1 [0186.717] wcscmp (_String1="..", _String2="..") returned 0 [0186.717] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0186.717] wcscmp (_String1="flapper.gif", _String2=".") returned 1 [0186.717] wcscmp (_String1="flapper.gif", _String2="..") returned 1 [0186.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6752098 [0186.717] wcscpy (in: _Dest=0x6752098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0186.717] wcscat (in: _Dest=0x6752098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0186.718] wcscat (in: _Dest=0x6752098, _Source="flapper.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" [0190.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6752098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0190.664] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0190.664] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0190.664] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0190.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67647a0 [0190.664] wcscpy (in: _Dest=0x67647a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.664] wcscat (in: _Dest=0x67647a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.664] wcscat (in: _Dest=0x67647a0, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" [0190.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67647a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0190.666] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0190.666] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0190.666] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0190.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x675e958 [0190.666] wcscpy (in: _Dest=0x675e958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.666] wcscat (in: _Dest=0x675e958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.666] wcscat (in: _Dest=0x675e958, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" [0190.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675e958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0190.668] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e83100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e84870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0190.668] wcscmp (_String1="topbar_floating_button.png", _String2=".") returned 1 [0190.668] wcscmp (_String1="topbar_floating_button.png", _String2="..") returned 1 [0190.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d40540 [0190.668] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.668] wcscat (in: _Dest=0x3d40540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.668] wcscat (in: _Dest=0x3d40540, _Source="topbar_floating_button.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" [0190.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0190.671] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e83100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f2a8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0190.671] wcscmp (_String1="topbar_floating_button_close.png", _String2=".") returned 1 [0190.671] wcscmp (_String1="topbar_floating_button_close.png", _String2="..") returned 1 [0190.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x2fce88 [0190.671] wcscpy (in: _Dest=0x2fce88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.671] wcscat (in: _Dest=0x2fce88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.671] wcscat (in: _Dest=0x2fce88, _Source="topbar_floating_button_close.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" [0190.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x2fce88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0190.673] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f2fea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f31de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0190.673] wcscmp (_String1="topbar_floating_button_hover.png", _String2=".") returned 1 [0190.673] wcscmp (_String1="topbar_floating_button_hover.png", _String2="..") returned 1 [0190.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x29fc20 [0190.673] wcscpy (in: _Dest=0x29fc20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.673] wcscat (in: _Dest=0x29fc20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.673] wcscat (in: _Dest=0x29fc20, _Source="topbar_floating_button_hover.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" [0190.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x29fc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0190.674] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f34cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f39310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0190.674] wcscmp (_String1="topbar_floating_button_maximize.png", _String2=".") returned 1 [0190.674] wcscmp (_String1="topbar_floating_button_maximize.png", _String2="..") returned 1 [0190.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e80fa0 [0190.674] wcscpy (in: _Dest=0x3e80fa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.674] wcscat (in: _Dest=0x3e80fa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.674] wcscat (in: _Dest=0x3e80fa0, _Source="topbar_floating_button_maximize.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" [0190.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e80fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0190.676] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f3c1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f3e130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0190.676] wcscmp (_String1="topbar_floating_button_pressed.png", _String2=".") returned 1 [0190.676] wcscmp (_String1="topbar_floating_button_pressed.png", _String2="..") returned 1 [0190.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x330b20 [0190.676] wcscpy (in: _Dest=0x330b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0190.676] wcscat (in: _Dest=0x330b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0190.676] wcscat (in: _Dest=0x330b20, _Source="topbar_floating_button_pressed.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" [0190.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x330b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0190.678] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f3c1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f3e130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0190.678] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0190.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0190.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc938) returned 1 [0190.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17c70) returned 1 Thread: id = 5776 os_tid = 0x17b4 [0183.123] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 0x2020 [0186.161] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0189.331] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13a8 [0189.332] GetFileSizeEx (in: hFile=0x13a8, lpFileSize=0x414fefc | out: lpFileSize=0x414fefc*=1322) returned 1 [0189.332] SetFilePointerEx (in: hFile=0x13a8, liDistanceToMove=0x526, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.332] ReadFile (in: hFile=0x13a8, lpBuffer=0x414fed8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x414fee8, lpOverlapped=0x0 | out: lpBuffer=0x414fed8*, lpNumberOfBytesRead=0x414fee8*=0x4, lpOverlapped=0x0) returned 1 [0189.334] SetFilePointerEx (in: hFile=0x13a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0189.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0189.335] NtQuerySystemTime (in: CurrentTime=0x414fe70 | out: CurrentTime=0x414fe70*=132482710978164000) returned 0x0 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x584a6224 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x41e24ee7 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x732e6f22 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x1f0169ce [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x59785dff [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x5b07927f [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x7d2e9762 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x5fe265e6 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x292a4334 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x6e74ca7e [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x59e0ae39 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x14b2f01 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x725c6a79 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x59fa201 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0xc1feed7 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x56620c17 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x3fb9309c [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x165c3cb4 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x1a7da693 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x5136a61b [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x57f4b0a4 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x3de66390 [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x1cc3430f [0189.335] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x3bd9c76f [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x6ff6d26e [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x25bc28d [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x626be0fe [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x1891cdec [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x2384c6c3 [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x1ab8cf71 [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x7f523f3e [0189.336] RtlRandomEx (in: Seed=0x414fe68 | out: Seed=0x414fe68) returned 0x66fdcbd3 [0189.345] ReadFile (in: hFile=0x13a8, lpBuffer=0x699a120, nNumberOfBytesToRead=0x52a, lpNumberOfBytesRead=0x414fe64, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesRead=0x414fe64*=0x52a, lpOverlapped=0x0) returned 1 [0189.345] SetFilePointerEx (in: hFile=0x13a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.345] WriteFile (in: hFile=0x13a8, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x414fe68, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0x414fe68*=0x52a, lpOverlapped=0x0) returned 1 [0191.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0191.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0191.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0191.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0191.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0191.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0191.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b008) returned 1 [0191.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x689b008 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d850 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0191.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3b10 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0191.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0191.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0191.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b008) returned 1 [0191.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6766e00 [0191.205] SetFilePointerEx (in: hFile=0x13a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.205] WriteFile (in: hFile=0x13a8, lpBuffer=0x6766e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x414fef0, lpOverlapped=0x0 | out: lpBuffer=0x6766e00*, lpNumberOfBytesWritten=0x414fef0*=0x10c, lpOverlapped=0x0) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0192.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x67653f8 [0192.631] wcscpy (in: _Dest=0x67653f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" [0192.631] wcscat (in: _Dest=0x67653f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.ac3a86" [0192.631] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.ac3a86", NtPathName=0x414fe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40678 [0192.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0192.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688bfc0) returned 1 [0192.638] NtQueryInformationFile (in: FileHandle=0x13a8, IoStatusBlock=0x414fe40, FileInformation=0x414fe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x414fe40, FileInformation=0x414fe48) returned 0x0 [0192.638] NtSetInformationFile (FileHandle=0x13a8, IoStatusBlock=0x414fe40, FileInformation=0x414fe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67653f8) returned 1 [0192.640] FlushFileBuffers (hFile=0x13a8) returned 1 [0196.569] CloseHandle (hObject=0x13a8) returned 1 [0199.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x69c26c0 [0199.633] wcscpy (in: _Dest=0x69c26c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0199.633] wcscat (in: _Dest=0x69c26c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" [0199.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ac3a86-readme.txt")) returned 0x2020 [0199.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c26c0) returned 1 [0199.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 Thread: id = 5777 os_tid = 0x5f8 [0183.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3edca40 [0183.123] wcscpy (in: _Dest=0x3edca40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0183.123] wcscat (in: _Dest=0x3edca40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0183.123] wcscat (in: _Dest=0x3edca40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*" [0183.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0183.123] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0186.602] wcscmp (_String1=".", _String2=".") returned 0 [0186.602] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.602] wcscmp (_String1="..", _String2=".") returned 1 [0186.602] wcscmp (_String1="..", _String2="..") returned 0 [0186.602] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0186.602] wcscmp (_String1="bg", _String2=".") returned 1 [0186.602] wcscmp (_String1="bg", _String2="..") returned 1 [0186.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6750ab8 [0186.603] wcscpy (in: _Dest=0x6750ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0186.603] wcscat (in: _Dest=0x6750ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0186.603] wcscat (in: _Dest=0x6750ab8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0189.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6750ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0189.280] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0189.280] wcscmp (_String1="ca", _String2=".") returned 1 [0189.280] wcscmp (_String1="ca", _String2="..") returned 1 [0189.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec080 [0189.280] wcscpy (in: _Dest=0x3dec080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.280] wcscat (in: _Dest=0x3dec080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.280] wcscat (in: _Dest=0x3dec080, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0189.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0189.281] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0189.281] wcscmp (_String1="cs", _String2=".") returned 1 [0189.281] wcscmp (_String1="cs", _String2="..") returned 1 [0189.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec710 [0189.281] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.281] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.281] wcscat (in: _Dest=0x3dec710, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0189.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0189.282] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0189.282] wcscmp (_String1="da", _String2=".") returned 1 [0189.282] wcscmp (_String1="da", _String2="..") returned 1 [0189.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec5f8 [0189.282] wcscpy (in: _Dest=0x3dec5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.282] wcscat (in: _Dest=0x3dec5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.282] wcscat (in: _Dest=0x3dec5f8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0189.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0189.283] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0189.283] wcscmp (_String1="de", _String2=".") returned 1 [0189.283] wcscmp (_String1="de", _String2="..") returned 1 [0189.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0189.283] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.283] wcscat (in: _Dest=0x3deca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.283] wcscat (in: _Dest=0x3deca58, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0189.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3deca58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0189.284] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0189.284] wcscmp (_String1="el", _String2=".") returned 1 [0189.284] wcscmp (_String1="el", _String2="..") returned 1 [0189.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec2b0 [0189.284] wcscpy (in: _Dest=0x3dec2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.284] wcscat (in: _Dest=0x3dec2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.285] wcscat (in: _Dest=0x3dec2b0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0189.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0189.285] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0189.286] wcscmp (_String1="en", _String2=".") returned 1 [0189.286] wcscmp (_String1="en", _String2="..") returned 1 [0189.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec828 [0189.286] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.286] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.286] wcscat (in: _Dest=0x3dec828, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0189.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3dec828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0189.287] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0189.287] wcscmp (_String1="en_GB", _String2=".") returned 1 [0189.287] wcscmp (_String1="en_GB", _String2="..") returned 1 [0189.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300dfd8 [0189.287] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.288] wcscat (in: _Dest=0x300dfd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.288] wcscat (in: _Dest=0x300dfd8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0189.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x300dfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0189.289] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0189.289] wcscmp (_String1="es", _String2=".") returned 1 [0189.289] wcscmp (_String1="es", _String2="..") returned 1 [0189.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c1ce8 [0189.289] wcscpy (in: _Dest=0x69c1ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.289] wcscat (in: _Dest=0x69c1ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.289] wcscat (in: _Dest=0x69c1ce8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0189.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c1ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0189.290] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0189.290] wcscmp (_String1="es_419", _String2=".") returned 1 [0189.290] wcscmp (_String1="es_419", _String2="..") returned 1 [0189.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x69c1e00 [0189.290] wcscpy (in: _Dest=0x69c1e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.290] wcscat (in: _Dest=0x69c1e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.290] wcscat (in: _Dest=0x69c1e00, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0189.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c1e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0189.291] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0189.291] wcscmp (_String1="et", _String2=".") returned 1 [0189.291] wcscmp (_String1="et", _String2="..") returned 1 [0189.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c1f18 [0189.291] wcscpy (in: _Dest=0x69c1f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.291] wcscat (in: _Dest=0x69c1f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.291] wcscat (in: _Dest=0x69c1f18, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0189.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c1f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0189.292] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0189.292] wcscmp (_String1="fi", _String2=".") returned 1 [0189.292] wcscmp (_String1="fi", _String2="..") returned 1 [0189.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2030 [0189.292] wcscpy (in: _Dest=0x69c2030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.292] wcscat (in: _Dest=0x69c2030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.292] wcscat (in: _Dest=0x69c2030, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0189.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0189.293] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0189.293] wcscmp (_String1="fil", _String2=".") returned 1 [0189.293] wcscmp (_String1="fil", _String2="..") returned 1 [0189.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x69c2148 [0189.293] wcscpy (in: _Dest=0x69c2148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.293] wcscat (in: _Dest=0x69c2148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.293] wcscat (in: _Dest=0x69c2148, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0189.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0189.294] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0189.294] wcscmp (_String1="fr", _String2=".") returned 1 [0189.294] wcscmp (_String1="fr", _String2="..") returned 1 [0189.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2260 [0189.294] wcscpy (in: _Dest=0x69c2260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.294] wcscat (in: _Dest=0x69c2260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.294] wcscat (in: _Dest=0x69c2260, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0189.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0189.295] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0189.295] wcscmp (_String1="hi", _String2=".") returned 1 [0189.295] wcscmp (_String1="hi", _String2="..") returned 1 [0189.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2378 [0189.296] wcscpy (in: _Dest=0x69c2378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.296] wcscat (in: _Dest=0x69c2378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.296] wcscat (in: _Dest=0x69c2378, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0189.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0189.296] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0189.296] wcscmp (_String1="hr", _String2=".") returned 1 [0189.296] wcscmp (_String1="hr", _String2="..") returned 1 [0189.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2490 [0189.297] wcscpy (in: _Dest=0x69c2490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.297] wcscat (in: _Dest=0x69c2490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.297] wcscat (in: _Dest=0x69c2490, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0189.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0189.298] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0189.298] wcscmp (_String1="hu", _String2=".") returned 1 [0189.298] wcscmp (_String1="hu", _String2="..") returned 1 [0189.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c25a8 [0189.298] wcscpy (in: _Dest=0x69c25a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.298] wcscat (in: _Dest=0x69c25a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.298] wcscat (in: _Dest=0x69c25a8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0189.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c25a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0189.299] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0189.299] wcscmp (_String1="id", _String2=".") returned 1 [0189.299] wcscmp (_String1="id", _String2="..") returned 1 [0189.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c26c0 [0189.299] wcscpy (in: _Dest=0x69c26c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.299] wcscat (in: _Dest=0x69c26c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.299] wcscat (in: _Dest=0x69c26c0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0189.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c26c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0189.300] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0189.300] wcscmp (_String1="it", _String2=".") returned 1 [0189.300] wcscmp (_String1="it", _String2="..") returned 1 [0189.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c27d8 [0189.300] wcscpy (in: _Dest=0x69c27d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.300] wcscat (in: _Dest=0x69c27d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.300] wcscat (in: _Dest=0x69c27d8, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0189.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c27d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0189.301] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0189.301] wcscmp (_String1="ja", _String2=".") returned 1 [0189.301] wcscmp (_String1="ja", _String2="..") returned 1 [0189.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c28f0 [0189.301] wcscpy (in: _Dest=0x69c28f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.301] wcscat (in: _Dest=0x69c28f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.301] wcscat (in: _Dest=0x69c28f0, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0189.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c28f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0189.302] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0189.303] wcscmp (_String1="ko", _String2=".") returned 1 [0189.303] wcscmp (_String1="ko", _String2="..") returned 1 [0189.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2a08 [0189.303] wcscpy (in: _Dest=0x69c2a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.303] wcscat (in: _Dest=0x69c2a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.303] wcscat (in: _Dest=0x69c2a08, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0189.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588 [0189.305] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0189.305] wcscmp (_String1="lt", _String2=".") returned 1 [0189.305] wcscmp (_String1="lt", _String2="..") returned 1 [0189.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2b20 [0189.305] wcscpy (in: _Dest=0x69c2b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.305] wcscat (in: _Dest=0x69c2b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.305] wcscat (in: _Dest=0x69c2b20, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0189.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0189.306] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0189.306] wcscmp (_String1="lv", _String2=".") returned 1 [0189.306] wcscmp (_String1="lv", _String2="..") returned 1 [0189.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2c38 [0189.306] wcscpy (in: _Dest=0x69c2c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.306] wcscat (in: _Dest=0x69c2c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.306] wcscat (in: _Dest=0x69c2c38, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0189.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0189.308] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0189.308] wcscmp (_String1="nb", _String2=".") returned 1 [0189.308] wcscmp (_String1="nb", _String2="..") returned 1 [0189.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2d50 [0189.308] wcscpy (in: _Dest=0x69c2d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.308] wcscat (in: _Dest=0x69c2d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.308] wcscat (in: _Dest=0x69c2d50, _Source="nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0189.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0189.309] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0189.309] wcscmp (_String1="nl", _String2=".") returned 1 [0189.309] wcscmp (_String1="nl", _String2="..") returned 1 [0189.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2e68 [0189.310] wcscpy (in: _Dest=0x69c2e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.310] wcscat (in: _Dest=0x69c2e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.310] wcscat (in: _Dest=0x69c2e68, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0189.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0189.311] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0189.311] wcscmp (_String1="pl", _String2=".") returned 1 [0189.311] wcscmp (_String1="pl", _String2="..") returned 1 [0189.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c2f80 [0189.311] wcscpy (in: _Dest=0x69c2f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.311] wcscat (in: _Dest=0x69c2f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.311] wcscat (in: _Dest=0x69c2f80, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0189.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0189.313] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0189.313] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0189.313] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0189.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x69c3098 [0189.313] wcscpy (in: _Dest=0x69c3098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.313] wcscat (in: _Dest=0x69c3098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.313] wcscat (in: _Dest=0x69c3098, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0189.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c3098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0189.314] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0189.314] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0189.314] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0189.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x69c31b0 [0189.314] wcscpy (in: _Dest=0x69c31b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.314] wcscat (in: _Dest=0x69c31b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.314] wcscat (in: _Dest=0x69c31b0, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0189.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c31b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0189.316] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0189.316] wcscmp (_String1="ro", _String2=".") returned 1 [0189.316] wcscmp (_String1="ro", _String2="..") returned 1 [0189.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c32c8 [0189.316] wcscpy (in: _Dest=0x69c32c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.316] wcscat (in: _Dest=0x69c32c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.316] wcscat (in: _Dest=0x69c32c8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0189.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c32c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0189.317] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0189.317] wcscmp (_String1="ru", _String2=".") returned 1 [0189.317] wcscmp (_String1="ru", _String2="..") returned 1 [0189.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x69c33e0 [0189.317] wcscpy (in: _Dest=0x69c33e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0189.317] wcscat (in: _Dest=0x69c33e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0189.317] wcscat (in: _Dest=0x69c33e0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0189.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c33e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0190.252] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0190.252] wcscmp (_String1="sk", _String2=".") returned 1 [0190.252] wcscmp (_String1="sk", _String2="..") returned 1 [0190.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0190.253] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.253] wcscat (in: _Dest=0x3deca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.253] wcscat (in: _Dest=0x3deca58, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0191.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3deca58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0191.628] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0191.628] wcscmp (_String1="sl", _String2=".") returned 1 [0191.628] wcscmp (_String1="sl", _String2="..") returned 1 [0191.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bba48 [0191.628] wcscpy (in: _Dest=0x30bba48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.628] wcscat (in: _Dest=0x30bba48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.628] wcscat (in: _Dest=0x30bba48, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0191.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bba48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0191.629] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0191.629] wcscmp (_String1="sr", _String2=".") returned 1 [0191.629] wcscmp (_String1="sr", _String2="..") returned 1 [0191.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd028 [0191.630] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.630] wcscat (in: _Dest=0x30bd028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.630] wcscat (in: _Dest=0x30bd028, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0191.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bd028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0191.631] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0191.631] wcscmp (_String1="sv", _String2=".") returned 1 [0191.631] wcscmp (_String1="sv", _String2="..") returned 1 [0191.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbfc0 [0191.631] wcscpy (in: _Dest=0x30bbfc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.631] wcscat (in: _Dest=0x30bbfc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.631] wcscat (in: _Dest=0x30bbfc0, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0191.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bbfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0191.633] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0191.633] wcscmp (_String1="th", _String2=".") returned 1 [0191.633] wcscmp (_String1="th", _String2="..") returned 1 [0191.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbea8 [0191.633] wcscpy (in: _Dest=0x30bbea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.633] wcscat (in: _Dest=0x30bbea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.633] wcscat (in: _Dest=0x30bbea8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0191.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bbea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0191.635] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0191.635] wcscmp (_String1="tr", _String2=".") returned 1 [0191.635] wcscmp (_String1="tr", _String2="..") returned 1 [0191.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6767030 [0191.635] wcscpy (in: _Dest=0x6767030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.635] wcscat (in: _Dest=0x6767030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.635] wcscat (in: _Dest=0x6767030, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0191.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6767030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0191.636] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0191.636] wcscmp (_String1="uk", _String2=".") returned 1 [0191.636] wcscmp (_String1="uk", _String2="..") returned 1 [0191.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6767148 [0191.636] wcscpy (in: _Dest=0x6767148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.636] wcscat (in: _Dest=0x6767148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.636] wcscat (in: _Dest=0x6767148, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0191.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6767148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0191.639] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0191.639] wcscmp (_String1="vi", _String2=".") returned 1 [0191.639] wcscmp (_String1="vi", _String2="..") returned 1 [0191.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6767260 [0191.639] wcscpy (in: _Dest=0x6767260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0191.639] wcscat (in: _Dest=0x6767260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0191.639] wcscat (in: _Dest=0x6767260, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0191.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6767260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0191.641] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0192.169] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0192.169] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0192.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6767b20 [0192.169] wcscpy (in: _Dest=0x6767b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0192.169] wcscat (in: _Dest=0x6767b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0192.169] wcscat (in: _Dest=0x6767b20, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0194.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6767b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0194.896] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0194.896] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0194.896] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0194.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6751f80 [0194.896] wcscpy (in: _Dest=0x6751f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0194.896] wcscat (in: _Dest=0x6751f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0194.897] wcscat (in: _Dest=0x6751f80, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0194.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0194.898] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0196.469] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0200.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0200.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edca40) returned 1 [0200.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc728) returned 1 Thread: id = 5778 os_tid = 0x1574 [0183.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec4e0 [0183.124] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0183.124] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0183.124] wcscat (in: _Dest=0x3dec4e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*" [0183.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0183.124] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0186.158] wcscmp (_String1=".", _String2=".") returned 0 [0186.158] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.158] wcscmp (_String1="..", _String2=".") returned 1 [0186.158] wcscmp (_String1="..", _String2="..") returned 0 [0186.158] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f596b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f5b5f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x107d6c00, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0186.158] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0186.158] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0186.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d402d0 [0186.158] wcscpy (in: _Dest=0x3d402d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0186.158] wcscat (in: _Dest=0x3d402d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0186.158] wcscat (in: _Dest=0x3d402d0, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" [0189.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d402d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0189.941] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f596b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f5b5f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x107d6c00, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0189.941] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0189.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0189.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0189.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc830) returned 1 Thread: id = 5779 os_tid = 0x1578 [0183.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu")) returned 0x20 [0184.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0184.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.828] GetLastError () returned 0x5 [0184.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0184.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29bf0) returned 1 Thread: id = 5780 os_tid = 0x860 [0183.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga")) returned 0x20 [0184.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0184.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.829] GetLastError () returned 0x5 [0184.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0184.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e2e0) returned 1 Thread: id = 5781 os_tid = 0x157c [0183.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata")) returned 0x20 [0184.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0184.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.831] GetLastError () returned 0x5 [0184.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0184.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e7c0) returned 1 Thread: id = 5782 os_tid = 0x1580 [0183.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk")) returned 0x20 [0184.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0184.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.832] GetLastError () returned 0x5 [0184.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0184.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29b80) returned 1 Thread: id = 5783 os_tid = 0x12dc [0183.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur")) returned 0x20 [0184.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0184.834] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.834] GetLastError () returned 0x5 [0184.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0184.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29640) returned 1 Thread: id = 5784 os_tid = 0x1888 [0183.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching")) returned 0x20 [0184.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0184.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.835] GetLastError () returned 0x5 [0184.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0184.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d8b8) returned 1 Thread: id = 5785 os_tid = 0x188c [0183.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait")) returned 0x20 [0184.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0184.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.837] GetLastError () returned 0x5 [0184.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0184.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e550) returned 1 Thread: id = 5786 os_tid = 0x1890 [0183.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau")) returned 0x20 [0184.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0184.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.839] GetLastError () returned 0x5 [0184.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0184.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8c740) returned 1 Thread: id = 5787 os_tid = 0x1894 [0183.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan")) returned 0x20 [0184.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0184.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.840] GetLastError () returned 0x5 [0184.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0184.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e960) returned 1 Thread: id = 5788 os_tid = 0x1898 [0183.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar")) returned 0x20 [0184.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0184.842] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.842] GetLastError () returned 0x5 [0184.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0184.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d3d8) returned 1 Thread: id = 5789 os_tid = 0x189c [0183.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila")) returned 0x20 [0184.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0184.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.843] GetLastError () returned 0x5 [0184.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0184.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dbf8) returned 1 Thread: id = 5790 os_tid = 0x18a0 [0183.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat")) returned 0x20 [0184.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0184.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.845] GetLastError () returned 0x5 [0184.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0184.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de00) returned 1 Thread: id = 5791 os_tid = 0x1598 [0183.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia")) returned 0x20 [0184.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0184.475] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.475] GetLastError () returned 0x5 [0184.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0184.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 5792 os_tid = 0x159c [0183.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk")) returned 0x20 [0184.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0184.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.826] GetLastError () returned 0x5 [0184.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0184.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f299c0) returned 1 Thread: id = 5793 os_tid = 0x15a0 [0183.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk")) returned 0x20 [0184.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0184.825] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.825] GetLastError () returned 0x5 [0184.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0184.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29a30) returned 1 Thread: id = 5794 os_tid = 0x15a4 [0183.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk")) returned 0x20 [0184.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0184.846] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.846] GetLastError () returned 0x5 [0184.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0184.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 Thread: id = 5795 os_tid = 0x12ec [0183.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral")) returned 0x20 [0184.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0184.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.848] GetLastError () returned 0x5 [0184.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0184.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 5796 os_tid = 0x15a8 [0183.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh")) returned 0x20 [0184.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0184.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.849] GetLastError () returned 0x5 [0184.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0184.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ed0) returned 1 Thread: id = 5797 os_tid = 0x15ac [0183.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak")) returned 0x20 [0184.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0184.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.851] GetLastError () returned 0x5 [0184.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0184.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29330) returned 1 Thread: id = 5798 os_tid = 0x18a4 [0183.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang")) returned 0x20 [0184.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0184.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.852] GetLastError () returned 0x5 [0184.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0184.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29560) returned 1 Thread: id = 5799 os_tid = 0xeb4 [0183.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar")) returned 0x20 [0184.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0184.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.854] GetLastError () returned 0x5 [0184.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0184.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb78) returned 1 Thread: id = 5800 os_tid = 0x12f0 [0183.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda")) returned 0x20 [0184.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0184.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.855] GetLastError () returned 0x5 [0184.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0184.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 5801 os_tid = 0x15b0 [0183.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon")) returned 0x20 [0184.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0184.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.857] GetLastError () returned 0x5 [0184.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0184.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e140) returned 1 Thread: id = 5802 os_tid = 0x12f4 [0183.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh")) returned 0x20 [0184.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0184.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.858] GetLastError () returned 0x5 [0184.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0184.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ba40) returned 1 Thread: id = 5803 os_tid = 0xa34 [0183.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87")) returned 0x20 [0184.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0184.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.860] GetLastError () returned 0x5 [0184.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0184.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e278) returned 1 Thread: id = 5804 os_tid = 0xb7c [0183.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88")) returned 0x20 [0184.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0184.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.861] GetLastError () returned 0x5 [0184.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0184.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 5805 os_tid = 0xeb0 [0183.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89")) returned 0x20 [0184.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0184.823] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.823] GetLastError () returned 0x5 [0184.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0184.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ea30) returned 1 Thread: id = 5806 os_tid = 0x6d0 [0183.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin")) returned 0x20 [0184.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0184.822] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.822] GetLastError () returned 0x5 [0184.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0184.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d510) returned 1 Thread: id = 5807 os_tid = 0x4e4 [0183.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand")) returned 0x20 [0184.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0184.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.863] GetLastError () returned 0x5 [0184.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0184.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f293a0) returned 1 Thread: id = 5808 os_tid = 0x18a8 [0183.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul")) returned 0x20 [0184.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0184.864] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.865] GetLastError () returned 0x5 [0184.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0184.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 5809 os_tid = 0x18ac [0183.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai")) returned 0x20 [0184.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0184.866] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.866] GetLastError () returned 0x5 [0184.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0184.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 5810 os_tid = 0x18b0 [0183.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore")) returned 0x20 [0184.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0184.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.868] GetLastError () returned 0x5 [0184.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0184.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 5811 os_tid = 0x18b4 [0183.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei")) returned 0x20 [0184.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0184.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.819] GetLastError () returned 0x5 [0184.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0184.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bb10) returned 1 Thread: id = 5812 os_tid = 0xcd4 [0183.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent")) returned 0x20 [0184.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0184.820] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.820] GetLastError () returned 0x5 [0184.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0184.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8dd98) returned 1 Thread: id = 5813 os_tid = 0x18b8 [0183.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs")) returned 0x20 [0183.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.643] GetLastError () returned 0x5 [0183.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 5814 os_tid = 0x18bc [0183.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc")) returned 0x20 [0183.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.645] GetLastError () returned 0x5 [0183.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d838) returned 1 Thread: id = 5815 os_tid = 0x18c0 [0183.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt")) returned 0x20 [0183.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.652] GetLastError () returned 0x5 [0183.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc28) returned 1 Thread: id = 5816 os_tid = 0x8a0 [0183.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk")) returned 0x20 [0183.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.655] GetLastError () returned 0x5 [0183.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d8c8) returned 1 Thread: id = 5817 os_tid = 0xe54 [0183.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk")) returned 0x20 [0183.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.656] GetLastError () returned 0x5 [0183.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d058) returned 1 Thread: id = 5818 os_tid = 0x18c4 [0183.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs")) returned 0x20 [0183.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0183.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.658] GetLastError () returned 0x5 [0183.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0183.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 5819 os_tid = 0x18c8 [0183.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg")) returned 0x20 [0184.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0184.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.666] GetLastError () returned 0x5 [0184.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0184.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 Thread: id = 5820 os_tid = 0x944 [0183.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc")) returned 0x20 [0184.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.889] GetLastError () returned 0x5 [0184.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 5821 os_tid = 0xde0 [0183.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt")) returned 0x20 [0184.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.891] GetLastError () returned 0x5 [0184.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 5822 os_tid = 0x904 [0183.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk")) returned 0x20 [0184.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.892] GetLastError () returned 0x5 [0184.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 5823 os_tid = 0xba4 [0183.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk")) returned 0x20 [0184.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.894] GetLastError () returned 0x5 [0184.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 5824 os_tid = 0x984 [0183.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm")) returned 0x20 [0184.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0184.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.896] GetLastError () returned 0x5 [0184.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0184.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 5825 os_tid = 0x9a4 [0183.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs")) returned 0x20 [0184.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0184.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.898] GetLastError () returned 0x5 [0184.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0184.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 5826 os_tid = 0x18cc [0183.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc")) returned 0x20 [0184.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.899] GetLastError () returned 0x5 [0184.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 5827 os_tid = 0x9d4 [0183.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt")) returned 0x20 [0184.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.901] GetLastError () returned 0x5 [0184.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 5828 os_tid = 0x9e4 [0183.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk")) returned 0x20 [0184.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.903] GetLastError () returned 0x5 [0184.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e018) returned 1 Thread: id = 5829 os_tid = 0x9f4 [0183.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk")) returned 0x20 [0184.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.905] GetLastError () returned 0x5 [0184.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d4d8) returned 1 Thread: id = 5830 os_tid = 0xb34 [0183.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css")) returned 0x20 [0184.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0184.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.906] GetLastError () returned 0x5 [0184.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0184.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 5831 os_tid = 0xa24 [0183.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd")) returned 0x20 [0184.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0184.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.908] GetLastError () returned 0x5 [0184.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0184.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 5832 os_tid = 0x7b4 [0183.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd")) returned 0x20 [0184.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0184.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.910] GetLastError () returned 0x5 [0184.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0184.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 5833 os_tid = 0xa44 [0183.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd")) returned 0x20 [0184.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0184.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.911] GetLastError () returned 0x5 [0184.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0184.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 5834 os_tid = 0xa54 [0183.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml")) returned 0x20 [0184.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0184.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.913] GetLastError () returned 0x5 [0184.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0184.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 5835 os_tid = 0xa64 [0183.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml")) returned 0x20 [0184.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", dwFileAttributes=0x20) returned 0 [0184.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.915] GetLastError () returned 0x5 [0184.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", dwFileAttributes=0x20) returned 0 [0184.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 5836 os_tid = 0xa78 [0183.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs")) returned 0x20 [0184.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", dwFileAttributes=0x20) returned 0 [0184.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.916] GetLastError () returned 0x5 [0184.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", dwFileAttributes=0x20) returned 0 [0184.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 Thread: id = 5837 os_tid = 0xad0 [0183.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc")) returned 0x20 [0184.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.918] GetLastError () returned 0x5 [0184.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 5838 os_tid = 0xbac [0183.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt")) returned 0x20 [0184.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.920] GetLastError () returned 0x5 [0184.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 5839 os_tid = 0xb28 [0183.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk")) returned 0x20 [0184.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.525] GetLastError () returned 0x5 [0184.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 5840 os_tid = 0x18d0 [0183.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk")) returned 0x20 [0184.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.887] GetLastError () returned 0x5 [0184.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 5841 os_tid = 0x18d4 [0183.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml")) returned 0x20 [0184.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0184.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.668] GetLastError () returned 0x5 [0184.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0184.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 5842 os_tid = 0x18d8 [0183.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml")) returned 0x20 [0184.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0184.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.871] GetLastError () returned 0x5 [0184.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0184.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd48) returned 1 Thread: id = 5843 os_tid = 0x18dc [0183.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv")) returned 0x20 [0184.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0184.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.873] GetLastError () returned 0x5 [0184.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0184.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 5844 os_tid = 0x18e0 [0183.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv")) returned 0x20 [0184.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0184.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.875] GetLastError () returned 0x5 [0184.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0184.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 5845 os_tid = 0x18e4 [0183.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml")) returned 0x20 [0184.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0184.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.876] GetLastError () returned 0x5 [0184.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0184.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 5846 os_tid = 0x1014 [0183.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml")) returned 0x20 [0184.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0184.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.878] GetLastError () returned 0x5 [0184.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0184.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 5847 os_tid = 0x101c [0183.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv")) returned 0x20 [0184.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0184.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.484] GetLastError () returned 0x5 [0184.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0184.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 5848 os_tid = 0x1394 [0183.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml")) returned 0x20 [0184.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0184.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.869] GetLastError () returned 0x5 [0184.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0184.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 5849 os_tid = 0x13a4 [0183.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45a28 [0183.686] wcscpy (in: _Dest=0x3d45a28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.686] wcscat (in: _Dest=0x3d45a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0183.686] wcscat (in: _Dest=0x3d45a28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*" [0183.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f137f0 [0183.686] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*", lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0183.686] wcscmp (_String1=".", _String2=".") returned 0 [0183.686] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.686] wcscmp (_String1="..", _String2=".") returned 1 [0183.686] wcscmp (_String1="..", _String2="..") returned 0 [0183.686] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.686] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.686] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55028 [0183.687] wcscpy (in: _Dest=0x3d55028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.687] wcscat (in: _Dest=0x3d55028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0183.687] wcscat (in: _Dest=0x3d55028, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" [0191.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0191.963] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3f137f0 | out: lpFindFileData=0x3f137f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.963] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0191.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f137f0) returned 1 [0191.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a28) returned 1 [0191.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcb48) returned 1 Thread: id = 5850 os_tid = 0x13a8 [0183.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45b30 [0183.687] wcscpy (in: _Dest=0x3d45b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0183.687] wcscat (in: _Dest=0x3d45b30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0183.687] wcscat (in: _Dest=0x3d45b30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*" [0183.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0183.687] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0185.103] wcscmp (_String1=".", _String2=".") returned 0 [0185.103] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.103] wcscmp (_String1="..", _String2=".") returned 1 [0185.103] wcscmp (_String1="..", _String2="..") returned 0 [0185.103] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.103] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.103] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55840 [0185.104] wcscpy (in: _Dest=0x3d55840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0185.104] wcscat (in: _Dest=0x3d55840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0185.104] wcscat (in: _Dest=0x3d55840, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" [0188.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0188.429] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.429] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0188.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0188.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b30) returned 1 [0188.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcf68) returned 1 Thread: id = 5851 os_tid = 0x13ac [0183.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45c38 [0183.688] wcscpy (in: _Dest=0x3d45c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0183.688] wcscat (in: _Dest=0x3d45c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0183.688] wcscat (in: _Dest=0x3d45c38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*" [0183.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0183.688] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0185.102] wcscmp (_String1=".", _String2=".") returned 0 [0185.102] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.102] wcscmp (_String1="..", _String2=".") returned 1 [0185.102] wcscmp (_String1="..", _String2="..") returned 0 [0185.102] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.103] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.103] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54a60 [0185.103] wcscpy (in: _Dest=0x3d54a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0185.103] wcscat (in: _Dest=0x3d54a60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0185.103] wcscat (in: _Dest=0x3d54a60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" [0188.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d54a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0188.427] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.427] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0188.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0188.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c38) returned 1 [0188.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 5852 os_tid = 0x13b0 [0183.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45d40 [0183.689] wcscpy (in: _Dest=0x3d45d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0183.689] wcscat (in: _Dest=0x3d45d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0183.689] wcscat (in: _Dest=0x3d45d40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*" [0183.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0183.690] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0185.101] wcscmp (_String1=".", _String2=".") returned 0 [0185.101] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.101] wcscmp (_String1="..", _String2=".") returned 1 [0185.101] wcscmp (_String1="..", _String2="..") returned 0 [0185.101] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.102] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.102] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54810 [0185.102] wcscpy (in: _Dest=0x3d54810, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0185.102] wcscat (in: _Dest=0x3d54810, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0185.102] wcscat (in: _Dest=0x3d54810, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" [0188.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d54810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0188.425] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.426] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0188.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0188.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d40) returned 1 [0188.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44168) returned 1 Thread: id = 5853 os_tid = 0x13b4 [0183.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45e48 [0183.690] wcscpy (in: _Dest=0x3d45e48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0183.691] wcscat (in: _Dest=0x3d45e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0183.691] wcscat (in: _Dest=0x3d45e48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*" [0183.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0183.691] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0185.340] wcscmp (_String1=".", _String2=".") returned 0 [0185.340] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.340] wcscmp (_String1="..", _String2=".") returned 1 [0185.341] wcscmp (_String1="..", _String2="..") returned 0 [0185.341] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.341] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.341] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674f080 [0185.341] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0185.341] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0185.341] wcscat (in: _Dest=0x674f080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" [0185.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0185.769] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.769] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0185.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0185.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e48) returned 1 [0185.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44270) returned 1 Thread: id = 5854 os_tid = 0x13b8 [0183.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ce8 [0183.692] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0183.692] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0183.692] wcscat (in: _Dest=0x6817ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*" [0183.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12be8 [0183.692] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*", lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0185.339] wcscmp (_String1=".", _String2=".") returned 0 [0185.339] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.340] wcscmp (_String1="..", _String2=".") returned 1 [0185.340] wcscmp (_String1="..", _String2="..") returned 0 [0185.340] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.340] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.340] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674ef58 [0185.340] wcscpy (in: _Dest=0x674ef58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0185.340] wcscat (in: _Dest=0x674ef58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0185.340] wcscat (in: _Dest=0x674ef58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" [0185.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ef58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0185.767] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.767] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0185.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12be8) returned 1 [0185.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 [0185.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44378) returned 1 Thread: id = 5855 os_tid = 0x13bc [0183.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817df0 [0183.693] wcscpy (in: _Dest=0x6817df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0183.693] wcscat (in: _Dest=0x6817df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0183.693] wcscat (in: _Dest=0x6817df0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*" [0183.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0183.693] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0185.339] wcscmp (_String1=".", _String2=".") returned 0 [0185.339] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.339] wcscmp (_String1="..", _String2=".") returned 1 [0185.339] wcscmp (_String1="..", _String2="..") returned 0 [0185.339] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.339] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.339] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674ee30 [0185.339] wcscpy (in: _Dest=0x674ee30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0185.339] wcscat (in: _Dest=0x674ee30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0185.339] wcscat (in: _Dest=0x674ee30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" [0185.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700 [0185.764] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.764] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0185.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0185.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817df0) returned 1 [0185.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44480) returned 1 Thread: id = 5856 os_tid = 0x13c0 [0183.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb4d0 [0183.694] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0183.694] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0183.694] wcscat (in: _Dest=0x30bb4d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*" [0183.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0183.694] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0185.337] wcscmp (_String1=".", _String2=".") returned 0 [0185.337] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.337] wcscmp (_String1="..", _String2=".") returned 1 [0185.337] wcscmp (_String1="..", _String2="..") returned 0 [0185.337] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.337] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.337] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674ed08 [0185.337] wcscpy (in: _Dest=0x674ed08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0185.337] wcscat (in: _Dest=0x674ed08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0185.338] wcscat (in: _Dest=0x674ed08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" [0185.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ed08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0185.762] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.762] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0185.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0185.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0185.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44588) returned 1 Thread: id = 5857 os_tid = 0x13cc [0183.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bb5e8 [0183.697] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0183.697] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0183.697] wcscat (in: _Dest=0x30bb5e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*" [0183.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0183.697] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0185.336] wcscmp (_String1=".", _String2=".") returned 0 [0185.336] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.336] wcscmp (_String1="..", _String2=".") returned 1 [0185.336] wcscmp (_String1="..", _String2="..") returned 0 [0185.336] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.336] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.336] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674ebe0 [0185.336] wcscpy (in: _Dest=0x674ebe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0185.336] wcscat (in: _Dest=0x674ebe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0185.336] wcscat (in: _Dest=0x674ebe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" [0185.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ebe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0185.758] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.758] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0185.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0185.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0185.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 5858 os_tid = 0x13d0 [0183.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ef8 [0183.698] wcscpy (in: _Dest=0x6817ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0183.698] wcscat (in: _Dest=0x6817ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0183.698] wcscat (in: _Dest=0x6817ef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*" [0183.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0183.698] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0185.335] wcscmp (_String1=".", _String2=".") returned 0 [0185.335] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.335] wcscmp (_String1="..", _String2=".") returned 1 [0185.335] wcscmp (_String1="..", _String2="..") returned 0 [0185.335] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.335] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.335] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674eab8 [0185.335] wcscpy (in: _Dest=0x674eab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0185.335] wcscat (in: _Dest=0x674eab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0185.336] wcscat (in: _Dest=0x674eab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" [0185.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674eab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0185.755] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.756] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0185.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0185.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ef8) returned 1 [0185.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44798) returned 1 Thread: id = 5859 os_tid = 0x13d4 [0183.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bb700 [0183.698] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0183.698] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0183.699] wcscat (in: _Dest=0x30bb700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*" [0183.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0183.699] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0185.331] wcscmp (_String1=".", _String2=".") returned 0 [0185.331] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.331] wcscmp (_String1="..", _String2=".") returned 1 [0185.331] wcscmp (_String1="..", _String2="..") returned 0 [0185.331] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.331] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.331] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x330cd0 [0185.332] wcscpy (in: _Dest=0x330cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0185.332] wcscat (in: _Dest=0x330cd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0185.332] wcscat (in: _Dest=0x330cd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" [0185.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x330cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0185.737] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.738] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0185.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0185.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0185.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 Thread: id = 5860 os_tid = 0x13d8 [0183.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818000 [0183.699] wcscpy (in: _Dest=0x6818000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0183.699] wcscat (in: _Dest=0x6818000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0183.699] wcscat (in: _Dest=0x6818000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*" [0183.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0183.699] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0185.330] wcscmp (_String1=".", _String2=".") returned 0 [0185.330] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.330] wcscmp (_String1="..", _String2=".") returned 1 [0185.330] wcscmp (_String1="..", _String2="..") returned 0 [0185.330] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.330] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.330] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x331860 [0185.331] wcscpy (in: _Dest=0x331860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0185.331] wcscat (in: _Dest=0x331860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0185.331] wcscat (in: _Dest=0x331860, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" [0186.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x331860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0186.292] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.292] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0186.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0186.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818000) returned 1 [0186.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448a0) returned 1 Thread: id = 5861 os_tid = 0x13dc [0183.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818108 [0183.700] wcscpy (in: _Dest=0x6818108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0183.700] wcscat (in: _Dest=0x6818108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0183.700] wcscat (in: _Dest=0x6818108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*" [0183.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0183.700] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0185.328] wcscmp (_String1=".", _String2=".") returned 0 [0185.328] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.328] wcscmp (_String1="..", _String2=".") returned 1 [0185.328] wcscmp (_String1="..", _String2="..") returned 0 [0185.328] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.328] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.328] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3040a68 [0185.328] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0185.328] wcscat (in: _Dest=0x3040a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0185.328] wcscat (in: _Dest=0x3040a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" [0186.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3040a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0186.290] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.290] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0186.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0186.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818108) returned 1 [0186.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449a8) returned 1 Thread: id = 5862 os_tid = 0x13e0 [0183.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818210 [0183.700] wcscpy (in: _Dest=0x6818210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0183.700] wcscat (in: _Dest=0x6818210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0183.700] wcscat (in: _Dest=0x6818210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*" [0183.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0183.700] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0185.327] wcscmp (_String1=".", _String2=".") returned 0 [0185.327] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.327] wcscmp (_String1="..", _String2=".") returned 1 [0185.327] wcscmp (_String1="..", _String2="..") returned 0 [0185.327] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.327] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.327] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3042500 [0185.327] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0185.327] wcscat (in: _Dest=0x3042500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0185.327] wcscat (in: _Dest=0x3042500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" [0188.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3042500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0188.576] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.576] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0188.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0188.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818210) returned 1 [0188.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ab0) returned 1 Thread: id = 5863 os_tid = 0x13e4 [0183.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6818318 [0183.701] wcscpy (in: _Dest=0x6818318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0183.701] wcscat (in: _Dest=0x6818318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0183.701] wcscat (in: _Dest=0x6818318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*" [0183.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0183.701] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0185.324] wcscmp (_String1=".", _String2=".") returned 0 [0185.324] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.324] wcscmp (_String1="..", _String2=".") returned 1 [0185.324] wcscmp (_String1="..", _String2="..") returned 0 [0185.324] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.324] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.325] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3041720 [0185.326] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0185.326] wcscat (in: _Dest=0x3041720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0185.326] wcscat (in: _Dest=0x3041720, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" [0188.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3041720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0188.574] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.574] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0188.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0188.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818318) returned 1 [0188.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44bb8) returned 1 Thread: id = 5864 os_tid = 0x13e8 [0183.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818420 [0183.701] wcscpy (in: _Dest=0x6818420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0183.702] wcscat (in: _Dest=0x6818420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0183.702] wcscat (in: _Dest=0x6818420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*" [0183.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0183.702] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0185.323] wcscmp (_String1=".", _String2=".") returned 0 [0185.323] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.323] wcscmp (_String1="..", _String2=".") returned 1 [0185.323] wcscmp (_String1="..", _String2="..") returned 0 [0185.323] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.324] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.324] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3041e10 [0185.324] wcscpy (in: _Dest=0x3041e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0185.324] wcscat (in: _Dest=0x3041e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0185.324] wcscat (in: _Dest=0x3041e10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" [0188.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3041e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0188.572] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.572] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0188.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0188.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818420) returned 1 [0188.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 5865 os_tid = 0x13ec [0183.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818528 [0183.702] wcscpy (in: _Dest=0x6818528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0183.702] wcscat (in: _Dest=0x6818528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0183.702] wcscat (in: _Dest=0x6818528, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*" [0183.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0183.702] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0185.320] wcscmp (_String1=".", _String2=".") returned 0 [0185.320] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.320] wcscmp (_String1="..", _String2=".") returned 1 [0185.320] wcscmp (_String1="..", _String2="..") returned 0 [0185.320] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.320] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.320] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x30413a8 [0185.320] wcscpy (in: _Dest=0x30413a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0185.320] wcscat (in: _Dest=0x30413a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0185.320] wcscat (in: _Dest=0x30413a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" [0188.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30413a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0188.570] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.570] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0188.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0188.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818528) returned 1 [0188.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44dc8) returned 1 Thread: id = 5866 os_tid = 0x13f0 [0183.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818630 [0183.703] wcscpy (in: _Dest=0x6818630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0183.703] wcscat (in: _Dest=0x6818630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0183.703] wcscat (in: _Dest=0x6818630, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*" [0183.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0183.703] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0185.319] wcscmp (_String1=".", _String2=".") returned 0 [0185.319] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.319] wcscmp (_String1="..", _String2=".") returned 1 [0185.319] wcscmp (_String1="..", _String2="..") returned 0 [0185.319] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.319] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.319] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d562a8 [0185.319] wcscpy (in: _Dest=0x3d562a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0185.319] wcscat (in: _Dest=0x3d562a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0185.319] wcscat (in: _Dest=0x3d562a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" [0188.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d562a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0188.568] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.568] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0188.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0188.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818630) returned 1 [0188.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ed0) returned 1 Thread: id = 5867 os_tid = 0x13f4 [0183.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818738 [0183.704] wcscpy (in: _Dest=0x6818738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0183.704] wcscat (in: _Dest=0x6818738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0183.704] wcscat (in: _Dest=0x6818738, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*" [0183.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0183.704] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0185.318] wcscmp (_String1=".", _String2=".") returned 0 [0185.318] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.318] wcscmp (_String1="..", _String2=".") returned 1 [0185.318] wcscmp (_String1="..", _String2="..") returned 0 [0185.318] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.318] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.318] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56180 [0185.318] wcscpy (in: _Dest=0x3d56180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0185.318] wcscat (in: _Dest=0x3d56180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0185.318] wcscat (in: _Dest=0x3d56180, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" [0188.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c [0188.565] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.566] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0188.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0188.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818738) returned 1 [0188.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44fd8) returned 1 Thread: id = 5868 os_tid = 0x13f8 [0183.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818840 [0183.704] wcscpy (in: _Dest=0x6818840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0183.704] wcscat (in: _Dest=0x6818840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0183.704] wcscat (in: _Dest=0x6818840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*" [0183.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f124b0 [0183.704] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*", lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0185.317] wcscmp (_String1=".", _String2=".") returned 0 [0185.317] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.317] wcscmp (_String1="..", _String2=".") returned 1 [0185.317] wcscmp (_String1="..", _String2="..") returned 0 [0185.317] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.317] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.317] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56058 [0185.317] wcscpy (in: _Dest=0x3d56058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0185.317] wcscat (in: _Dest=0x3d56058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0185.318] wcscat (in: _Dest=0x3d56058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" [0188.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0188.638] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.638] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0188.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f124b0) returned 1 [0188.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818840) returned 1 [0188.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450e0) returned 1 Thread: id = 5869 os_tid = 0x18e8 [0183.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818948 [0183.705] wcscpy (in: _Dest=0x6818948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0183.705] wcscat (in: _Dest=0x6818948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0183.705] wcscat (in: _Dest=0x6818948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*" [0183.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0183.705] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0185.316] wcscmp (_String1=".", _String2=".") returned 0 [0185.316] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.316] wcscmp (_String1="..", _String2=".") returned 1 [0185.316] wcscmp (_String1="..", _String2="..") returned 0 [0185.316] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.316] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.316] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55f30 [0185.316] wcscpy (in: _Dest=0x3d55f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0185.316] wcscat (in: _Dest=0x3d55f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0185.317] wcscat (in: _Dest=0x3d55f30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" [0188.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0188.636] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.636] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0188.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0188.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818948) returned 1 [0188.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451e8) returned 1 Thread: id = 5870 os_tid = 0x1400 [0183.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818a50 [0183.705] wcscpy (in: _Dest=0x6818a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0183.706] wcscat (in: _Dest=0x6818a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0183.706] wcscat (in: _Dest=0x6818a50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*" [0183.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13f28 [0183.706] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*", lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0185.298] wcscmp (_String1=".", _String2=".") returned 0 [0185.298] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.298] wcscmp (_String1="..", _String2=".") returned 1 [0185.298] wcscmp (_String1="..", _String2="..") returned 0 [0185.298] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.298] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.298] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55e08 [0185.314] wcscpy (in: _Dest=0x3d55e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0185.315] wcscat (in: _Dest=0x3d55e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0185.315] wcscat (in: _Dest=0x3d55e08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" [0189.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0189.937] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3f13f28 | out: lpFindFileData=0x3f13f28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.937] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0189.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13f28) returned 1 [0189.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a50) returned 1 [0189.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 5871 os_tid = 0x10d8 [0183.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818b58 [0183.706] wcscpy (in: _Dest=0x6818b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0183.706] wcscat (in: _Dest=0x6818b58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0183.706] wcscat (in: _Dest=0x6818b58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*" [0183.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0183.706] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0185.297] wcscmp (_String1=".", _String2=".") returned 0 [0185.297] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.297] wcscmp (_String1="..", _String2=".") returned 1 [0185.297] wcscmp (_String1="..", _String2="..") returned 0 [0185.297] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.297] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.297] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55ce0 [0185.297] wcscpy (in: _Dest=0x3d55ce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0185.297] wcscat (in: _Dest=0x3d55ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0185.297] wcscat (in: _Dest=0x3d55ce0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" [0189.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0189.934] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.934] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0189.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0189.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b58) returned 1 [0189.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d453f8) returned 1 Thread: id = 5872 os_tid = 0xb64 [0183.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818c60 [0183.706] wcscpy (in: _Dest=0x6818c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0183.707] wcscat (in: _Dest=0x6818c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0183.707] wcscat (in: _Dest=0x6818c60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*" [0183.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0183.707] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0184.496] wcscmp (_String1=".", _String2=".") returned 0 [0184.497] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.497] wcscmp (_String1="..", _String2=".") returned 1 [0184.497] wcscmp (_String1="..", _String2="..") returned 0 [0184.497] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.497] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.497] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55278 [0184.497] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0184.497] wcscat (in: _Dest=0x3d55278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0184.497] wcscat (in: _Dest=0x3d55278, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" [0184.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0184.604] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.604] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0184.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0184.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c60) returned 1 [0184.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45500) returned 1 Thread: id = 5873 os_tid = 0xf3c [0183.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818d68 [0183.707] wcscpy (in: _Dest=0x6818d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0183.707] wcscat (in: _Dest=0x6818d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0183.707] wcscat (in: _Dest=0x6818d68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*" [0183.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb7b8 [0183.707] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*", lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0185.293] wcscmp (_String1=".", _String2=".") returned 0 [0185.293] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.294] wcscmp (_String1="..", _String2=".") returned 1 [0185.294] wcscmp (_String1="..", _String2="..") returned 0 [0185.294] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.294] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.294] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55a90 [0185.294] wcscpy (in: _Dest=0x3d55a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0185.294] wcscat (in: _Dest=0x3d55a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0185.294] wcscat (in: _Dest=0x3d55a90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" [0195.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0195.553] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66cb7b8 | out: lpFindFileData=0x66cb7b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.553] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0195.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb7b8) returned 1 [0195.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818d68) returned 1 [0195.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45608) returned 1 Thread: id = 5874 os_tid = 0xfc8 [0184.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68acf78 [0184.528] wcscpy (in: _Dest=0x68acf78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0184.529] wcscat (in: _Dest=0x68acf78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0184.529] wcscat (in: _Dest=0x68acf78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*" [0184.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0184.529] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0185.295] wcscmp (_String1=".", _String2=".") returned 0 [0185.295] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.295] wcscmp (_String1="..", _String2=".") returned 1 [0185.296] wcscmp (_String1="..", _String2="..") returned 0 [0185.296] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.296] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.296] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55bb8 [0185.296] wcscpy (in: _Dest=0x3d55bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0185.296] wcscat (in: _Dest=0x3d55bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0185.296] wcscat (in: _Dest=0x3d55bb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" [0192.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0192.008] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.008] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0192.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0192.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acf78) returned 1 [0192.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45818) returned 1 Thread: id = 5875 os_tid = 0x6c0 [0184.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad080 [0184.530] wcscpy (in: _Dest=0x68ad080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0184.530] wcscat (in: _Dest=0x68ad080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0184.530] wcscat (in: _Dest=0x68ad080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*" [0184.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0184.530] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0184.530] wcscmp (_String1=".", _String2=".") returned 0 [0184.530] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.531] wcscmp (_String1="..", _String2=".") returned 1 [0184.531] wcscmp (_String1="..", _String2="..") returned 0 [0184.531] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.531] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.531] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d554c8 [0184.531] wcscpy (in: _Dest=0x3d554c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0184.531] wcscat (in: _Dest=0x3d554c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0184.531] wcscat (in: _Dest=0x3d554c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" [0189.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d554c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0189.903] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.903] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0189.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0189.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad080) returned 1 [0189.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcc50) returned 1 Thread: id = 5876 os_tid = 0xba0 [0184.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad188 [0184.532] wcscpy (in: _Dest=0x68ad188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0184.532] wcscat (in: _Dest=0x68ad188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0184.532] wcscat (in: _Dest=0x68ad188, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*" [0184.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0184.532] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0184.532] wcscmp (_String1=".", _String2=".") returned 0 [0184.532] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.533] wcscmp (_String1="..", _String2=".") returned 1 [0184.533] wcscmp (_String1="..", _String2="..") returned 0 [0184.533] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.533] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.533] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54b88 [0184.533] wcscpy (in: _Dest=0x3d54b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0184.533] wcscat (in: _Dest=0x3d54b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0184.533] wcscat (in: _Dest=0x3d54b88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" [0188.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d54b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0188.600] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.600] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0188.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0188.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad188) returned 1 [0188.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 Thread: id = 5877 os_tid = 0xb78 [0184.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad290 [0184.533] wcscpy (in: _Dest=0x68ad290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0184.533] wcscat (in: _Dest=0x68ad290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0184.533] wcscat (in: _Dest=0x68ad290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*" [0184.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0184.534] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0186.162] wcscmp (_String1=".", _String2=".") returned 0 [0186.162] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.162] wcscmp (_String1="..", _String2=".") returned 1 [0186.162] wcscmp (_String1="..", _String2="..") returned 0 [0186.162] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.162] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.162] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755d38 [0186.162] wcscpy (in: _Dest=0x6755d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0186.162] wcscat (in: _Dest=0x6755d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0186.162] wcscat (in: _Dest=0x6755d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" [0189.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0189.944] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.944] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0189.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0189.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad290) returned 1 [0189.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819080) returned 1 Thread: id = 5878 os_tid = 0xb9c [0184.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad398 [0184.535] wcscpy (in: _Dest=0x68ad398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0184.535] wcscat (in: _Dest=0x68ad398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0184.535] wcscat (in: _Dest=0x68ad398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*" [0184.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0184.535] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2c20 [0189.747] wcscmp (_String1=".", _String2=".") returned 0 [0189.747] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.747] wcscmp (_String1="..", _String2=".") returned 1 [0189.747] wcscmp (_String1="..", _String2="..") returned 0 [0189.747] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.747] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.747] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3dafd40 [0189.748] wcscpy (in: _Dest=0x3dafd40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0189.748] wcscat (in: _Dest=0x3dafd40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0189.748] wcscat (in: _Dest=0x3dafd40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" [0190.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0190.149] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.149] FindClose (in: hFindFile=0x66d2c20 | out: hFindFile=0x66d2c20) returned 1 [0190.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0190.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad398) returned 1 [0190.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819188) returned 1 Thread: id = 5879 os_tid = 0xb80 [0184.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad4a0 [0184.536] wcscpy (in: _Dest=0x68ad4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0184.536] wcscat (in: _Dest=0x68ad4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0184.536] wcscat (in: _Dest=0x68ad4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*" [0184.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0184.536] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2c60 [0189.748] wcscmp (_String1=".", _String2=".") returned 0 [0189.748] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.748] wcscmp (_String1="..", _String2=".") returned 1 [0189.748] wcscmp (_String1="..", _String2="..") returned 0 [0189.748] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.748] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.748] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3dafe68 [0189.748] wcscpy (in: _Dest=0x3dafe68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0189.748] wcscat (in: _Dest=0x3dafe68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0189.748] wcscat (in: _Dest=0x3dafe68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" [0190.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0190.152] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.152] FindClose (in: hFindFile=0x66d2c60 | out: hFindFile=0x66d2c60) returned 1 [0190.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0190.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad4a0) returned 1 [0190.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819290) returned 1 Thread: id = 5880 os_tid = 0x6b0 [0184.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad5a8 [0184.537] wcscpy (in: _Dest=0x68ad5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0184.537] wcscat (in: _Dest=0x68ad5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0184.537] wcscat (in: _Dest=0x68ad5a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*" [0184.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0184.537] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ca0 [0189.749] wcscmp (_String1=".", _String2=".") returned 0 [0189.749] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.749] wcscmp (_String1="..", _String2=".") returned 1 [0189.749] wcscmp (_String1="..", _String2="..") returned 0 [0189.749] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.749] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.749] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daff90 [0189.749] wcscpy (in: _Dest=0x3daff90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0189.749] wcscat (in: _Dest=0x3daff90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0189.749] wcscat (in: _Dest=0x3daff90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" [0190.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daff90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0190.154] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.154] FindClose (in: hFindFile=0x66d2ca0 | out: hFindFile=0x66d2ca0) returned 1 [0190.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0190.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad5a8) returned 1 [0190.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819398) returned 1 Thread: id = 5881 os_tid = 0xbd4 [0184.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad6b0 [0184.538] wcscpy (in: _Dest=0x68ad6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0184.538] wcscat (in: _Dest=0x68ad6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0184.538] wcscat (in: _Dest=0x68ad6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*" [0184.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0184.538] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ce0 [0189.749] wcscmp (_String1=".", _String2=".") returned 0 [0189.749] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.749] wcscmp (_String1="..", _String2=".") returned 1 [0189.749] wcscmp (_String1="..", _String2="..") returned 0 [0189.749] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.749] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.749] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db00b8 [0189.749] wcscpy (in: _Dest=0x3db00b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0189.750] wcscat (in: _Dest=0x3db00b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0189.750] wcscat (in: _Dest=0x3db00b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" [0190.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db00b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0190.156] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.156] FindClose (in: hFindFile=0x66d2ce0 | out: hFindFile=0x66d2ce0) returned 1 [0190.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0190.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad6b0) returned 1 [0190.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a0) returned 1 Thread: id = 5882 os_tid = 0xbec [0184.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad7b8 [0184.541] wcscpy (in: _Dest=0x68ad7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0184.541] wcscat (in: _Dest=0x68ad7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0184.541] wcscat (in: _Dest=0x68ad7b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*" [0184.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0184.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d20 [0189.750] wcscmp (_String1=".", _String2=".") returned 0 [0189.750] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.750] wcscmp (_String1="..", _String2=".") returned 1 [0189.750] wcscmp (_String1="..", _String2="..") returned 0 [0189.750] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.750] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.750] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db01e0 [0189.750] wcscpy (in: _Dest=0x3db01e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0189.750] wcscat (in: _Dest=0x3db01e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0189.750] wcscat (in: _Dest=0x3db01e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" [0190.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db01e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0190.159] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.159] FindClose (in: hFindFile=0x66d2d20 | out: hFindFile=0x66d2d20) returned 1 [0190.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0190.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad7b8) returned 1 [0190.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68195a8) returned 1 Thread: id = 5883 os_tid = 0x15cc [0184.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad8c0 [0184.542] wcscpy (in: _Dest=0x68ad8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0184.542] wcscat (in: _Dest=0x68ad8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0184.542] wcscat (in: _Dest=0x68ad8c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*" [0184.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0184.542] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d60 [0189.750] wcscmp (_String1=".", _String2=".") returned 0 [0189.751] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.751] wcscmp (_String1="..", _String2=".") returned 1 [0189.751] wcscmp (_String1="..", _String2="..") returned 0 [0189.751] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.751] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.751] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db0308 [0189.751] wcscpy (in: _Dest=0x3db0308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0189.751] wcscat (in: _Dest=0x3db0308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0189.751] wcscat (in: _Dest=0x3db0308, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" [0190.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0190.162] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.162] FindClose (in: hFindFile=0x66d2d60 | out: hFindFile=0x66d2d60) returned 1 [0190.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0190.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad8c0) returned 1 [0190.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68196b0) returned 1 Thread: id = 5884 os_tid = 0x15d0 [0184.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad9c8 [0184.543] wcscpy (in: _Dest=0x68ad9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0184.543] wcscat (in: _Dest=0x68ad9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0184.543] wcscat (in: _Dest=0x68ad9c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*" [0184.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0184.543] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ba0 [0189.744] wcscmp (_String1=".", _String2=".") returned 0 [0189.744] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.744] wcscmp (_String1="..", _String2=".") returned 1 [0189.744] wcscmp (_String1="..", _String2="..") returned 0 [0189.745] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.745] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.745] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3dafaf0 [0189.745] wcscpy (in: _Dest=0x3dafaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0189.745] wcscat (in: _Dest=0x3dafaf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0189.745] wcscat (in: _Dest=0x3dafaf0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" [0190.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0190.144] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.144] FindClose (in: hFindFile=0x66d2ba0 | out: hFindFile=0x66d2ba0) returned 1 [0190.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0190.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad9c8) returned 1 [0190.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197b8) returned 1 Thread: id = 5885 os_tid = 0x15d4 [0184.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68adad0 [0184.543] wcscpy (in: _Dest=0x68adad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0184.543] wcscat (in: _Dest=0x68adad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0184.543] wcscat (in: _Dest=0x68adad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*" [0184.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0184.544] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e60 [0190.303] wcscmp (_String1=".", _String2=".") returned 0 [0190.303] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.303] wcscmp (_String1="..", _String2=".") returned 1 [0190.303] wcscmp (_String1="..", _String2="..") returned 0 [0190.303] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.303] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.303] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763080 [0190.303] wcscpy (in: _Dest=0x6763080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0190.303] wcscat (in: _Dest=0x6763080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0190.303] wcscat (in: _Dest=0x6763080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" [0191.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0191.328] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.328] FindClose (in: hFindFile=0x66d2e60 | out: hFindFile=0x66d2e60) returned 1 [0191.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0191.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adad0) returned 1 [0191.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68198c0) returned 1 Thread: id = 5886 os_tid = 0x18ec [0184.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bbea8 [0184.544] wcscpy (in: _Dest=0x30bbea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0184.544] wcscat (in: _Dest=0x30bbea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0184.544] wcscat (in: _Dest=0x30bbea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*" [0184.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0184.544] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e20 [0190.304] wcscmp (_String1=".", _String2=".") returned 0 [0190.304] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.304] wcscmp (_String1="..", _String2=".") returned 1 [0190.304] wcscmp (_String1="..", _String2="..") returned 0 [0190.304] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.304] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.304] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67631a8 [0190.304] wcscpy (in: _Dest=0x67631a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0190.304] wcscat (in: _Dest=0x67631a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0190.305] wcscat (in: _Dest=0x67631a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" [0191.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67631a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0191.330] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.331] FindClose (in: hFindFile=0x66d2e20 | out: hFindFile=0x66d2e20) returned 1 [0191.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0191.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 [0191.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68199c8) returned 1 Thread: id = 5887 os_tid = 0x15dc [0184.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bbfc0 [0184.545] wcscpy (in: _Dest=0x30bbfc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0184.545] wcscat (in: _Dest=0x30bbfc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0184.545] wcscat (in: _Dest=0x30bbfc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*" [0184.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0184.545] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2de0 [0190.305] wcscmp (_String1=".", _String2=".") returned 0 [0190.305] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.305] wcscmp (_String1="..", _String2=".") returned 1 [0190.305] wcscmp (_String1="..", _String2="..") returned 0 [0190.305] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.305] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.305] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67632d0 [0190.305] wcscpy (in: _Dest=0x67632d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0190.305] wcscat (in: _Dest=0x67632d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0190.306] wcscat (in: _Dest=0x67632d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" [0191.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67632d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0191.332] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.332] FindClose (in: hFindFile=0x66d2de0 | out: hFindFile=0x66d2de0) returned 1 [0191.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0191.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0191.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819ad0) returned 1 Thread: id = 5888 os_tid = 0x15f4 [0184.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6897ce8 [0184.545] wcscpy (in: _Dest=0x6897ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0184.546] wcscat (in: _Dest=0x6897ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0184.546] wcscat (in: _Dest=0x6897ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*" [0184.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0184.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2da0 [0190.306] wcscmp (_String1=".", _String2=".") returned 0 [0190.306] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.306] wcscmp (_String1="..", _String2=".") returned 1 [0190.306] wcscmp (_String1="..", _String2="..") returned 0 [0190.306] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.306] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.306] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67633f8 [0190.306] wcscpy (in: _Dest=0x67633f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0190.306] wcscat (in: _Dest=0x67633f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0190.307] wcscat (in: _Dest=0x67633f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" [0191.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67633f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0191.334] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.334] FindClose (in: hFindFile=0x66d2da0 | out: hFindFile=0x66d2da0) returned 1 [0191.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0191.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897ce8) returned 1 [0191.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abce8) returned 1 Thread: id = 5889 os_tid = 0xbe0 [0184.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bc0d8 [0184.546] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0184.546] wcscat (in: _Dest=0x30bc0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0184.546] wcscat (in: _Dest=0x30bc0d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*" [0184.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0184.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d60 [0190.307] wcscmp (_String1=".", _String2=".") returned 0 [0190.307] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.307] wcscmp (_String1="..", _String2=".") returned 1 [0190.307] wcscmp (_String1="..", _String2="..") returned 0 [0190.307] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.307] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.307] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6763520 [0190.307] wcscpy (in: _Dest=0x6763520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0190.307] wcscat (in: _Dest=0x6763520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0190.307] wcscat (in: _Dest=0x6763520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" [0191.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0191.336] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.336] FindClose (in: hFindFile=0x66d2d60 | out: hFindFile=0x66d2d60) returned 1 [0191.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0191.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0191.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 Thread: id = 5890 os_tid = 0xbe4 [0184.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6897df0 [0184.547] wcscpy (in: _Dest=0x6897df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0184.547] wcscat (in: _Dest=0x6897df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0184.547] wcscat (in: _Dest=0x6897df0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*" [0184.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0184.547] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d20 [0190.308] wcscmp (_String1=".", _String2=".") returned 0 [0190.308] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.308] wcscmp (_String1="..", _String2=".") returned 1 [0190.308] wcscmp (_String1="..", _String2="..") returned 0 [0190.308] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.308] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.308] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763648 [0190.308] wcscpy (in: _Dest=0x6763648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0190.308] wcscat (in: _Dest=0x6763648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0190.308] wcscat (in: _Dest=0x6763648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" [0191.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0191.338] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.338] FindClose (in: hFindFile=0x66d2d20 | out: hFindFile=0x66d2d20) returned 1 [0191.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0191.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897df0) returned 1 [0191.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abdf0) returned 1 Thread: id = 5891 os_tid = 0xbb4 [0184.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6897ef8 [0184.547] wcscpy (in: _Dest=0x6897ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0184.547] wcscat (in: _Dest=0x6897ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0184.547] wcscat (in: _Dest=0x6897ef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*" [0184.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb550 [0184.548] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ce0 [0190.309] wcscmp (_String1=".", _String2=".") returned 0 [0190.309] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.309] wcscmp (_String1="..", _String2=".") returned 1 [0190.309] wcscmp (_String1="..", _String2="..") returned 0 [0190.309] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.309] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.309] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763770 [0190.309] wcscpy (in: _Dest=0x6763770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0190.309] wcscat (in: _Dest=0x6763770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0190.309] wcscat (in: _Dest=0x6763770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" [0191.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0191.340] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.340] FindClose (in: hFindFile=0x66d2ce0 | out: hFindFile=0x66d2ce0) returned 1 [0191.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb550) returned 1 [0191.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897ef8) returned 1 [0191.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abef8) returned 1 Thread: id = 5892 os_tid = 0xef8 [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898000 [0184.549] wcscpy (in: _Dest=0x6898000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0184.549] wcscat (in: _Dest=0x6898000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0184.549] wcscat (in: _Dest=0x6898000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*" [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0184.550] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ca0 [0190.310] wcscmp (_String1=".", _String2=".") returned 0 [0190.310] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.310] wcscmp (_String1="..", _String2=".") returned 1 [0190.310] wcscmp (_String1="..", _String2="..") returned 0 [0190.310] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.310] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.310] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763898 [0190.310] wcscpy (in: _Dest=0x6763898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0190.310] wcscat (in: _Dest=0x6763898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0190.310] wcscat (in: _Dest=0x6763898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" [0191.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0191.342] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.342] FindClose (in: hFindFile=0x66d2ca0 | out: hFindFile=0x66d2ca0) returned 1 [0191.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0191.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898000) returned 1 [0191.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac000) returned 1 Thread: id = 5893 os_tid = 0xbc8 [0184.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898108 [0184.550] wcscpy (in: _Dest=0x6898108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0184.550] wcscat (in: _Dest=0x6898108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0184.550] wcscat (in: _Dest=0x6898108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*" [0184.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0184.550] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0189.329] wcscmp (_String1=".", _String2=".") returned 0 [0189.329] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.330] wcscmp (_String1="..", _String2=".") returned 1 [0189.330] wcscmp (_String1="..", _String2="..") returned 0 [0189.330] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.330] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.330] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55278 [0189.330] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0189.330] wcscat (in: _Dest=0x3d55278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0189.330] wcscat (in: _Dest=0x3d55278, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" [0191.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0191.611] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.611] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0191.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0191.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898108) returned 1 [0191.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac108) returned 1 Thread: id = 5894 os_tid = 0x7fc [0184.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6898210 [0184.550] wcscpy (in: _Dest=0x6898210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0184.551] wcscat (in: _Dest=0x6898210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0184.551] wcscat (in: _Dest=0x6898210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*" [0184.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0184.551] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e60 [0189.755] wcscmp (_String1=".", _String2=".") returned 0 [0189.755] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.755] wcscmp (_String1="..", _String2=".") returned 1 [0189.755] wcscmp (_String1="..", _String2="..") returned 0 [0189.755] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.755] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.755] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3db07a8 [0189.755] wcscpy (in: _Dest=0x3db07a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0189.755] wcscat (in: _Dest=0x3db07a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0189.755] wcscat (in: _Dest=0x3db07a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" [0190.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db07a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0190.172] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.172] FindClose (in: hFindFile=0x66d2e60 | out: hFindFile=0x66d2e60) returned 1 [0190.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0190.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898210) returned 1 [0190.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac210) returned 1 Thread: id = 5895 os_tid = 0xda0 [0184.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898318 [0184.551] wcscpy (in: _Dest=0x6898318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0184.551] wcscat (in: _Dest=0x6898318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0184.551] wcscat (in: _Dest=0x6898318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*" [0184.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1ad8 [0184.551] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e20 [0189.754] wcscmp (_String1=".", _String2=".") returned 0 [0189.754] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.754] wcscmp (_String1="..", _String2=".") returned 1 [0189.754] wcscmp (_String1="..", _String2="..") returned 0 [0189.754] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.754] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.754] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db0680 [0189.754] wcscpy (in: _Dest=0x3db0680, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0189.754] wcscat (in: _Dest=0x3db0680, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0189.754] wcscat (in: _Dest=0x3db0680, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" [0190.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0190.170] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c1ad8 | out: lpFindFileData=0x66c1ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.170] FindClose (in: hFindFile=0x66d2e20 | out: hFindFile=0x66d2e20) returned 1 [0190.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ad8) returned 1 [0190.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898318) returned 1 [0190.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac318) returned 1 Thread: id = 5896 os_tid = 0xd98 [0184.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bc1f0 [0184.552] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0184.552] wcscat (in: _Dest=0x30bc1f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0184.552] wcscat (in: _Dest=0x30bc1f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*" [0184.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1608 [0184.552] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2de0 [0189.753] wcscmp (_String1=".", _String2=".") returned 0 [0189.753] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.753] wcscmp (_String1="..", _String2=".") returned 1 [0189.753] wcscmp (_String1="..", _String2="..") returned 0 [0189.753] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.753] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.753] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3db0558 [0189.753] wcscpy (in: _Dest=0x3db0558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0189.753] wcscat (in: _Dest=0x3db0558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0189.753] wcscat (in: _Dest=0x3db0558, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" [0190.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0190.167] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c1608 | out: lpFindFileData=0x66c1608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.167] FindClose (in: hFindFile=0x66d2de0 | out: hFindFile=0x66d2de0) returned 1 [0190.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1608) returned 1 [0190.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0190.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac420) returned 1 Thread: id = 5897 os_tid = 0xda4 [0184.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898420 [0184.553] wcscpy (in: _Dest=0x6898420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0184.553] wcscat (in: _Dest=0x6898420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0184.553] wcscat (in: _Dest=0x6898420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*" [0184.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c37b8 [0184.553] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2be0 [0189.746] wcscmp (_String1=".", _String2=".") returned 0 [0189.746] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.747] wcscmp (_String1="..", _String2=".") returned 1 [0189.747] wcscmp (_String1="..", _String2="..") returned 0 [0189.747] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.747] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.747] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3dafc18 [0189.747] wcscpy (in: _Dest=0x3dafc18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0189.747] wcscat (in: _Dest=0x3dafc18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0189.747] wcscat (in: _Dest=0x3dafc18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" [0190.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dafc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0190.146] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66c37b8 | out: lpFindFileData=0x66c37b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.146] FindClose (in: hFindFile=0x66d2be0 | out: hFindFile=0x66d2be0) returned 1 [0190.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37b8) returned 1 [0190.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898420) returned 1 [0190.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac528) returned 1 Thread: id = 5898 os_tid = 0xdbc [0184.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898528 [0184.553] wcscpy (in: _Dest=0x6898528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0184.554] wcscat (in: _Dest=0x6898528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0184.554] wcscat (in: _Dest=0x6898528, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*" [0184.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3a20 [0184.554] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2820 [0190.295] wcscmp (_String1=".", _String2=".") returned 0 [0190.295] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.295] wcscmp (_String1="..", _String2=".") returned 1 [0190.295] wcscmp (_String1="..", _String2="..") returned 0 [0190.295] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.295] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.296] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db0e98 [0190.296] wcscpy (in: _Dest=0x3db0e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0190.296] wcscat (in: _Dest=0x3db0e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0190.297] wcscat (in: _Dest=0x3db0e98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" [0201.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0201.296] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66c3a20 | out: lpFindFileData=0x66c3a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.296] FindClose (in: hFindFile=0x66d2820 | out: hFindFile=0x66d2820) returned 1 [0201.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a20) returned 1 [0201.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898528) returned 1 [0201.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac630) returned 1 Thread: id = 5899 os_tid = 0x169c [0184.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898630 [0184.554] wcscpy (in: _Dest=0x6898630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0184.554] wcscat (in: _Dest=0x6898630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0184.554] wcscat (in: _Dest=0x6898630, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*" [0184.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c13a0 [0184.554] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2fa0 [0190.298] wcscmp (_String1=".", _String2=".") returned 0 [0190.298] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.298] wcscmp (_String1="..", _String2=".") returned 1 [0190.298] wcscmp (_String1="..", _String2="..") returned 0 [0190.298] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.298] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.298] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6762ab8 [0190.298] wcscpy (in: _Dest=0x6762ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0190.298] wcscat (in: _Dest=0x6762ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0190.298] wcscat (in: _Dest=0x6762ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" [0201.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6762ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0201.299] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x66c13a0 | out: lpFindFileData=0x66c13a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.299] FindClose (in: hFindFile=0x66d2fa0 | out: hFindFile=0x66d2fa0) returned 1 [0201.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c13a0) returned 1 [0201.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898630) returned 1 [0201.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac738) returned 1 Thread: id = 5900 os_tid = 0x18f0 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898738 [0184.555] wcscpy (in: _Dest=0x6898738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0184.555] wcscat (in: _Dest=0x6898738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0184.555] wcscat (in: _Dest=0x6898738, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*" [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c26e0 [0184.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f60 [0190.299] wcscmp (_String1=".", _String2=".") returned 0 [0190.299] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.299] wcscmp (_String1="..", _String2=".") returned 1 [0190.299] wcscmp (_String1="..", _String2="..") returned 0 [0190.299] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.299] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.299] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6762be0 [0190.299] wcscpy (in: _Dest=0x6762be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0190.299] wcscat (in: _Dest=0x6762be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0190.299] wcscat (in: _Dest=0x6762be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" [0195.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6762be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0195.564] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66c26e0 | out: lpFindFileData=0x66c26e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.564] FindClose (in: hFindFile=0x66d2f60 | out: hFindFile=0x66d2f60) returned 1 [0195.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26e0) returned 1 [0195.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898738) returned 1 [0195.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac840) returned 1 Thread: id = 5901 os_tid = 0x18f4 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898840 [0184.555] wcscpy (in: _Dest=0x6898840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0184.555] wcscat (in: _Dest=0x6898840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0184.555] wcscat (in: _Dest=0x6898840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*" [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3080 [0184.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f20 [0190.300] wcscmp (_String1=".", _String2=".") returned 0 [0190.300] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.300] wcscmp (_String1="..", _String2=".") returned 1 [0190.300] wcscmp (_String1="..", _String2="..") returned 0 [0190.300] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.300] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.300] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6762d08 [0190.300] wcscpy (in: _Dest=0x6762d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0190.300] wcscat (in: _Dest=0x6762d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0190.300] wcscat (in: _Dest=0x6762d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" [0191.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6762d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0191.322] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66c3080 | out: lpFindFileData=0x66c3080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.322] FindClose (in: hFindFile=0x66d2f20 | out: hFindFile=0x66d2f20) returned 1 [0191.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3080) returned 1 [0191.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898840) returned 1 [0191.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac948) returned 1 Thread: id = 5902 os_tid = 0x16a8 [0184.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898948 [0184.556] wcscpy (in: _Dest=0x6898948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0184.556] wcscat (in: _Dest=0x6898948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0184.556] wcscat (in: _Dest=0x6898948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*" [0184.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3c88 [0184.556] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ee0 [0190.301] wcscmp (_String1=".", _String2=".") returned 0 [0190.301] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.301] wcscmp (_String1="..", _String2=".") returned 1 [0190.301] wcscmp (_String1="..", _String2="..") returned 0 [0190.301] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.301] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.301] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6762e30 [0190.301] wcscpy (in: _Dest=0x6762e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0190.301] wcscat (in: _Dest=0x6762e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0190.301] wcscat (in: _Dest=0x6762e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" [0191.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6762e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0191.324] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c3c88 | out: lpFindFileData=0x66c3c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.324] FindClose (in: hFindFile=0x66d2ee0 | out: hFindFile=0x66d2ee0) returned 1 [0191.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c88) returned 1 [0191.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898948) returned 1 [0191.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aca50) returned 1 Thread: id = 5903 os_tid = 0x16ac [0184.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898a50 [0184.556] wcscpy (in: _Dest=0x6898a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0184.557] wcscat (in: _Dest=0x6898a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0184.557] wcscat (in: _Dest=0x6898a50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*" [0184.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2e18 [0184.557] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ea0 [0190.302] wcscmp (_String1=".", _String2=".") returned 0 [0190.302] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.302] wcscmp (_String1="..", _String2=".") returned 1 [0190.302] wcscmp (_String1="..", _String2="..") returned 0 [0190.302] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.302] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.302] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6762f58 [0190.302] wcscpy (in: _Dest=0x6762f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0190.302] wcscat (in: _Dest=0x6762f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0190.302] wcscat (in: _Dest=0x6762f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" [0191.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6762f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0191.326] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c2e18 | out: lpFindFileData=0x66c2e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.326] FindClose (in: hFindFile=0x66d2ea0 | out: hFindFile=0x66d2ea0) returned 1 [0191.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e18) returned 1 [0191.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898a50) returned 1 [0191.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acb58) returned 1 Thread: id = 5904 os_tid = 0x16b0 [0184.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898b58 [0184.557] wcscpy (in: _Dest=0x6898b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0184.557] wcscat (in: _Dest=0x6898b58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0184.557] wcscat (in: _Dest=0x6898b58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*" [0184.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0a00 [0184.557] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0189.330] wcscmp (_String1=".", _String2=".") returned 0 [0189.330] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.330] wcscmp (_String1="..", _String2=".") returned 1 [0189.330] wcscmp (_String1="..", _String2="..") returned 0 [0189.330] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.330] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.330] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55718 [0189.331] wcscpy (in: _Dest=0x3d55718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0189.331] wcscat (in: _Dest=0x3d55718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0189.331] wcscat (in: _Dest=0x3d55718, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" [0191.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0191.614] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c0a00 | out: lpFindFileData=0x66c0a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.614] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0191.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a00) returned 1 [0191.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898b58) returned 1 [0191.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acc60) returned 1 Thread: id = 5905 os_tid = 0x16b4 [0184.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6898c60 [0184.928] wcscpy (in: _Dest=0x6898c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0184.928] wcscat (in: _Dest=0x6898c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0184.928] wcscat (in: _Dest=0x6898c60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*" [0184.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0184.928] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2da0 [0189.752] wcscmp (_String1=".", _String2=".") returned 0 [0189.752] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.752] wcscmp (_String1="..", _String2=".") returned 1 [0189.752] wcscmp (_String1="..", _String2="..") returned 0 [0189.752] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.752] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.752] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3db0430 [0189.753] wcscpy (in: _Dest=0x3db0430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0189.753] wcscat (in: _Dest=0x3db0430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0189.753] wcscat (in: _Dest=0x3db0430, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" [0190.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0190.164] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.164] FindClose (in: hFindFile=0x66d2da0 | out: hFindFile=0x66d2da0) returned 1 [0190.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0190.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898c60) returned 1 [0190.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acd68) returned 1 Thread: id = 5907 os_tid = 0x16bc [0184.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca")) returned 0x20 [0186.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0186.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.585] GetLastError () returned 0x5 [0186.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0186.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf388) returned 1 Thread: id = 5908 os_tid = 0x16c0 [0184.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp")) returned 0x20 [0186.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0186.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.583] GetLastError () returned 0x5 [0186.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0186.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 5909 os_tid = 0x16c4 [0184.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx")) returned 0x20 [0186.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0186.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.591] GetLastError () returned 0x5 [0186.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0186.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 5910 os_tid = 0x16c8 [0184.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp")) returned 0x20 [0186.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0186.582] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.582] GetLastError () returned 0x5 [0186.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0186.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 5911 os_tid = 0x16cc [0184.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca")) returned 0x20 [0186.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0186.589] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.589] GetLastError () returned 0x5 [0186.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0186.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5912 os_tid = 0x16d0 [0184.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp")) returned 0x20 [0186.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0186.587] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.587] GetLastError () returned 0x5 [0186.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0186.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 5913 os_tid = 0x16d4 [0184.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp")) returned 0x20 [0186.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0186.580] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.580] GetLastError () returned 0x5 [0186.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0186.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e710) returned 1 Thread: id = 5914 os_tid = 0x16d8 [0184.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx")) returned 0x20 [0184.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0184.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.931] GetLastError () returned 0x5 [0184.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0184.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 5915 os_tid = 0x16dc [0184.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx")) returned 0x20 [0184.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0184.932] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.932] GetLastError () returned 0x5 [0184.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0184.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e180) returned 1 Thread: id = 5916 os_tid = 0x16e4 [0184.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif")) returned 0x20 [0184.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0184.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.934] GetLastError () returned 0x5 [0184.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0184.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 5917 os_tid = 0x16e8 [0184.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif")) returned 0x20 [0184.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0184.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.935] GetLastError () returned 0x5 [0184.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0184.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 Thread: id = 5918 os_tid = 0x175c [0184.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif")) returned 0x20 [0184.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0184.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.937] GetLastError () returned 0x5 [0184.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0184.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 5919 os_tid = 0x1760 [0184.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif")) returned 0x20 [0184.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0184.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.939] GetLastError () returned 0x5 [0184.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0184.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 5920 os_tid = 0x1764 [0184.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv")) returned 0x20 [0184.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0184.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.940] GetLastError () returned 0x5 [0184.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0184.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 5921 os_tid = 0x176c [0184.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml")) returned 0x20 [0190.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0190.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.366] GetLastError () returned 0x5 [0190.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0190.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 5922 os_tid = 0xcc0 [0184.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv")) returned 0x20 [0190.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0190.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.367] GetLastError () returned 0x5 [0190.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0190.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 5923 os_tid = 0xa88 [0184.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml")) returned 0x20 [0190.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0190.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.351] GetLastError () returned 0x5 [0190.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0190.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 5924 os_tid = 0x884 [0184.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv")) returned 0x20 [0190.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0190.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.349] GetLastError () returned 0x5 [0190.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0190.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 5925 os_tid = 0x4c0 [0184.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml")) returned 0x20 [0190.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0190.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.347] GetLastError () returned 0x5 [0190.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0190.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 5926 os_tid = 0xb48 [0184.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml")) returned 0x20 [0190.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0190.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.346] GetLastError () returned 0x5 [0190.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0190.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 5927 os_tid = 0xb70 [0184.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv")) returned 0x20 [0190.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0190.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.344] GetLastError () returned 0x5 [0190.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0190.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 5928 os_tid = 0x508 [0184.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml")) returned 0x20 [0190.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0190.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.342] GetLastError () returned 0x5 [0190.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0190.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 5929 os_tid = 0xc58 [0184.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv")) returned 0x20 [0190.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0190.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.340] GetLastError () returned 0x5 [0190.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0190.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 5930 os_tid = 0x140 [0184.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml")) returned 0x20 [0190.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0190.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.338] GetLastError () returned 0x5 [0190.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0190.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 5931 os_tid = 0x11d4 [0184.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc")) returned 0x20 [0190.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0190.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.336] GetLastError () returned 0x5 [0190.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0190.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 5932 os_tid = 0x1294 [0184.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc")) returned 0x20 [0190.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0190.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.334] GetLastError () returned 0x5 [0190.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0190.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6670) returned 1 Thread: id = 5933 os_tid = 0x100c [0184.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv")) returned 0x20 [0190.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0190.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.362] GetLastError () returned 0x5 [0190.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0190.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 5934 os_tid = 0xb10 [0184.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml")) returned 0x20 [0190.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0190.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.360] GetLastError () returned 0x5 [0190.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0190.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 5935 os_tid = 0x1478 [0184.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc")) returned 0x20 [0190.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0190.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.332] GetLastError () returned 0x5 [0190.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0190.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 5936 os_tid = 0x147c [0184.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc")) returned 0x20 [0190.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0190.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.330] GetLastError () returned 0x5 [0190.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0190.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 5937 os_tid = 0x1480 [0184.950] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0184.951] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0186.182] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd0 [0186.182] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0xdaefac4 | out: lpFileSize=0xdaefac4*=281) returned 1 [0186.182] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.182] ReadFile (in: hFile=0xdd0, lpBuffer=0xdaefaa0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdaefab0, lpOverlapped=0x0 | out: lpBuffer=0xdaefaa0*, lpNumberOfBytesRead=0xdaefab0*=0x4, lpOverlapped=0x0) returned 1 [0186.184] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0186.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0186.184] NtQuerySystemTime (in: CurrentTime=0xdaefa38 | out: CurrentTime=0xdaefa38*=132482710946652000) returned 0x0 [0186.184] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0xc45c94c [0186.184] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x76428089 [0186.184] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x321740a2 [0186.184] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x3fd88098 [0186.184] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x442bca2a [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x2c2ab28b [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x7dae80a7 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x749e5ec1 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x58948bec [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x77cde7cd [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x1cf72c29 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x24a3631a [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x6119fa0 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x5b1d80fb [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x5ec97140 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x62faf97a [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x42ac9ab1 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x3d40f2f7 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x4fdd1f48 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x829b8c1 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x7db41fa8 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x77a8ea70 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x2119acdc [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x741b76a1 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x2b6f6b9d [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x720ca0c8 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x60ec973b [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x752f4cb9 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x34e88062 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x28cc02b7 [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x47dd51bc [0186.185] RtlRandomEx (in: Seed=0xdaefa30 | out: Seed=0xdaefa30) returned 0x7a5d7458 [0186.196] ReadFile (in: hFile=0xdd0, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xdaefa2c, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xdaefa2c*=0x119, lpOverlapped=0x0) returned 1 [0186.196] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.196] WriteFile (in: hFile=0xdd0, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xdaefa30, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xdaefa30*=0x119, lpOverlapped=0x0) returned 1 [0186.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0186.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0186.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0186.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0186.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0186.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0186.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a2d0) returned 1 [0186.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0186.800] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.800] WriteFile (in: hFile=0xdd0, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdaefab8, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0xdaefab8*=0x10c, lpOverlapped=0x0) returned 1 [0186.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0186.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0186.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d408e8 [0186.803] wcscpy (in: _Dest=0x3d408e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" [0186.803] wcscat (in: _Dest=0x3d408e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.ac3a86" [0186.803] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0xdaefa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x29fc20 [0188.834] FlushFileBuffers (hFile=0xdd0) returned 1 [0188.905] CloseHandle (hObject=0xdd0) returned 1 [0188.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6755e60 [0188.906] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0188.906] wcscat (in: _Dest=0x6755e60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\AC3A86-Readme.txt" [0188.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0188.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2298 [0188.951] WriteFile (in: hFile=0x2298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdaefa4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdaefa4c*=0x8b9, lpOverlapped=0x0) returned 1 [0188.953] CloseHandle (hObject=0x2298) returned 1 [0188.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0188.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 Thread: id = 5938 os_tid = 0x1484 [0184.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc")) returned 0x20 [0190.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0190.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.358] GetLastError () returned 0x5 [0190.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0190.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 5939 os_tid = 0x1488 [0184.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc")) returned 0x20 [0190.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0190.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.356] GetLastError () returned 0x5 [0190.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0190.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 5940 os_tid = 0x148c [0184.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc")) returned 0x20 [0190.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0190.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.354] GetLastError () returned 0x5 [0190.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0190.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 5941 os_tid = 0x1490 [0184.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv")) returned 0x20 [0190.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0190.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.328] GetLastError () returned 0x5 [0190.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0190.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 5942 os_tid = 0x1494 [0184.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml")) returned 0x20 [0190.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0190.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.326] GetLastError () returned 0x5 [0190.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0190.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 5943 os_tid = 0x1498 [0184.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc")) returned 0x20 [0190.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0190.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.276] GetLastError () returned 0x5 [0190.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0190.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 5944 os_tid = 0x149c [0184.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc")) returned 0x20 [0190.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0190.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.324] GetLastError () returned 0x5 [0190.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0190.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 5945 os_tid = 0x474 [0184.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc")) returned 0x20 [0190.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0190.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.353] GetLastError () returned 0x5 [0190.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0190.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 5946 os_tid = 0x14a8 [0185.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv")) returned 0x20 [0190.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0190.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.364] GetLastError () returned 0x5 [0190.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0190.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 5947 os_tid = 0x14ac [0185.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20 [0185.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0185.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.584] GetLastError () returned 0x5 [0185.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0185.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 5948 os_tid = 0x14b0 [0185.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20 [0185.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0185.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.359] GetLastError () returned 0x5 [0185.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0185.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 5949 os_tid = 0xb30 [0185.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20 [0185.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0185.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.362] GetLastError () returned 0x5 [0185.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0185.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 5950 os_tid = 0x434 [0185.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcab0 [0185.137] wcscpy (in: _Dest=0x30bcab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0185.137] wcscat (in: _Dest=0x30bcab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\" [0185.137] wcscat (in: _Dest=0x30bcab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*" [0185.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0185.137] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0187.021] wcscmp (_String1=".", _String2=".") returned 0 [0187.021] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.021] wcscmp (_String1="..", _String2=".") returned 1 [0187.021] wcscmp (_String1="..", _String2="..") returned 0 [0187.021] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.021] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0187.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0187.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 [0187.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 Thread: id = 5951 os_tid = 0x14d0 [0185.137] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0185.827] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0188.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f4 [0188.366] GetFileSizeEx (in: hFile=0x21f4, lpFileSize=0x842f7c4 | out: lpFileSize=0x842f7c4*=9862) returned 1 [0188.366] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x2682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.367] ReadFile (in: hFile=0x21f4, lpBuffer=0x842f7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x842f7b0, lpOverlapped=0x0 | out: lpBuffer=0x842f7a0*, lpNumberOfBytesRead=0x842f7b0*=0x4, lpOverlapped=0x0) returned 1 [0188.368] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0188.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0188.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0188.369] NtQuerySystemTime (in: CurrentTime=0x842f738 | out: CurrentTime=0x842f738*=132482710968492000) returned 0x0 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x4358d7ec [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x72e70164 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x7c223e75 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x6c5dc7ae [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x70575cff [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x73c32997 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x4008b3af [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x608ab603 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x5c120a79 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x6197bbdf [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x2a8234ad [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0xb036e1a [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x13e0c88c [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0xf9b7284 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x7f635d6c [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x60d24e6e [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x284afee2 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x169f9648 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x68c76eb0 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x6f23d12b [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x4d68a40b [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x6ef79d40 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0xfbaa109 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x3ab2c5dd [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x4ac20c15 [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x10e4207f [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x27646b3a [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x2b05f22c [0188.369] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x50839a53 [0188.370] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x39c241ee [0188.370] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x1e78cc09 [0188.370] RtlRandomEx (in: Seed=0x842f730 | out: Seed=0x842f730) returned 0x45979b78 [0188.378] ReadFile (in: hFile=0x21f4, lpBuffer=0x6730308, nNumberOfBytesToRead=0x2686, lpNumberOfBytesRead=0x842f72c, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0x842f72c*=0x2686, lpOverlapped=0x0) returned 1 [0188.379] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.379] WriteFile (in: hFile=0x21f4, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x2686, lpNumberOfBytesWritten=0x842f730, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0x842f730*=0x2686, lpOverlapped=0x0) returned 1 [0188.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0188.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a650 [0188.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0188.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0188.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0188.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0188.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822870) returned 1 [0188.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x6822870 [0188.887] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.888] WriteFile (in: hFile=0x21f4, lpBuffer=0x6755e60*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x842f7b8, lpOverlapped=0x0 | out: lpBuffer=0x6755e60*, lpNumberOfBytesWritten=0x842f7b8*=0x11e, lpOverlapped=0x0) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823b48) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822870) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0188.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0188.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0188.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0188.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x29fc20 [0188.890] wcscpy (in: _Dest=0x29fc20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" [0188.890] wcscat (in: _Dest=0x29fc20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.ac3a86" [0188.890] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0x842f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce468 [0188.898] FlushFileBuffers (hFile=0x21f4) returned 1 [0188.912] CloseHandle (hObject=0x21f4) returned 1 [0188.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x675a678 [0188.913] wcscpy (in: _Dest=0x675a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0188.913] wcscat (in: _Dest=0x675a678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\AC3A86-Readme.txt" [0188.913] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0188.913] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21f4 [0188.914] WriteFile (in: hFile=0x21f4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x842f74c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x842f74c*=0x8b9, lpOverlapped=0x0) returned 1 [0188.916] CloseHandle (hObject=0x21f4) returned 1 [0188.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a678) returned 1 [0188.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 5952 os_tid = 0x1080 [0185.138] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 0x2020 [0185.609] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", dwFileAttributes=0x20) returned 1 [0186.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f8 [0186.198] GetFileSizeEx (in: hFile=0x11f8, lpFileSize=0x63efefc | out: lpFileSize=0x63efefc*=3406) returned 1 [0186.198] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0xd4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.198] ReadFile (in: hFile=0x11f8, lpBuffer=0x63efed8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63efee8, lpOverlapped=0x0 | out: lpBuffer=0x63efed8*, lpNumberOfBytesRead=0x63efee8*=0x4, lpOverlapped=0x0) returned 1 [0186.200] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0186.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.201] NtQuerySystemTime (in: CurrentTime=0x63efe70 | out: CurrentTime=0x63efe70*=132482710946808000) returned 0x0 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0xf6012c5 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x1e2bbeb2 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x6f15be47 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x48210682 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x7bf45c43 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x553bbab [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x3df98875 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x2929cba4 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x2f52f611 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x47018b4 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x201ccdbd [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x62e6a298 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x4f9aba88 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x16753aee [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x7a1969a4 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x2353039c [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x716c2460 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x69e27abc [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x61e68162 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x1c508073 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x161f83d3 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x302a05c1 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x28fd91d6 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x7808e27f [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x611304c2 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x3da82a09 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x3890c354 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x767e7276 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x6159361c [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x429bec7 [0186.201] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x6d49e598 [0186.202] RtlRandomEx (in: Seed=0x63efe68 | out: Seed=0x63efe68) returned 0x64ff71f7 [0186.210] ReadFile (in: hFile=0x11f8, lpBuffer=0x698b100, nNumberOfBytesToRead=0xd4e, lpNumberOfBytesRead=0x63efe64, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0x63efe64*=0xd4e, lpOverlapped=0x0) returned 1 [0186.210] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.210] WriteFile (in: hFile=0x11f8, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0x63efe68, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0x63efe68*=0xd4e, lpOverlapped=0x0) returned 1 [0186.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0186.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0186.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66feaf8) returned 1 [0186.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5a4e8 [0186.807] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.807] WriteFile (in: hFile=0x11f8, lpBuffer=0x6758588*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x63efef0, lpOverlapped=0x0 | out: lpBuffer=0x6758588*, lpNumberOfBytesWritten=0x63efef0*=0x100, lpOverlapped=0x0) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758588) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0186.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0186.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67522c8 [0186.813] wcscpy (in: _Dest=0x67522c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0186.813] wcscat (in: _Dest=0x67522c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.ac3a86" [0186.813] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.ac3a86", NtPathName=0x63efe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6755e60 [0186.817] FlushFileBuffers (hFile=0x11f8) returned 1 [0188.475] CloseHandle (hObject=0x11f8) returned 1 [0188.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bb818 [0188.788] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0188.788] wcscat (in: _Dest=0x30bb818, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt" [0188.788] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\ac3a86-readme.txt")) returned 0xffffffff [0188.788] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd14 [0188.839] WriteFile (in: hFile=0xd14, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x63efe84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x63efe84*=0x8b9, lpOverlapped=0x0) returned 1 [0188.842] CloseHandle (hObject=0xd14) returned 1 [0188.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0188.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17f70) returned 1 Thread: id = 5953 os_tid = 0x1084 [0185.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 0x2020 [0185.610] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.200] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x236c [0186.211] GetFileSizeEx (in: hFile=0x236c, lpFileSize=0x81ffa74 | out: lpFileSize=0x81ffa74*=728) returned 1 [0186.211] SetFilePointerEx (in: hFile=0x236c, liDistanceToMove=0x2d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.211] ReadFile (in: hFile=0x236c, lpBuffer=0x81ffa50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81ffa60, lpOverlapped=0x0 | out: lpBuffer=0x81ffa50*, lpNumberOfBytesRead=0x81ffa60*=0x4, lpOverlapped=0x0) returned 1 [0186.213] SetFilePointerEx (in: hFile=0x236c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0186.213] NtQuerySystemTime (in: CurrentTime=0x81ff9e8 | out: CurrentTime=0x81ff9e8*=132482710946964000) returned 0x0 [0186.213] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x7b3f2c84 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x6a36922a [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x6bb4335 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x6102100a [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x508e766c [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x316eea5d [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x56bf25e2 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x447a14b1 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x72c228e5 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x33a827bc [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x3e640bc1 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x668f55d3 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0xa3d3937 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x71c8baea [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x448935d8 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x3924bcef [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x656dd182 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0xb03226d [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x39fc50c4 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x47b1f9e4 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x852c84b [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x2a35af8 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x18e5bff4 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x6c14d5f3 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x186ff167 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x2f6a8b48 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x39c79418 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x4fd52c74 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x6609fc57 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x49a552ae [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x66570f4 [0186.214] RtlRandomEx (in: Seed=0x81ff9e0 | out: Seed=0x81ff9e0) returned 0x1862f8dc [0186.222] ReadFile (in: hFile=0x236c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x81ff9dc, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0x81ff9dc*=0x2d8, lpOverlapped=0x0) returned 1 [0186.222] SetFilePointerEx (in: hFile=0x236c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.222] WriteFile (in: hFile=0x236c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x81ff9e0, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0x81ff9e0*=0x2d8, lpOverlapped=0x0) returned 1 [0186.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a650 [0186.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0186.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0186.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5210 [0186.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0186.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0186.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff3b0) returned 1 [0186.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x67522c8 [0186.821] SetFilePointerEx (in: hFile=0x236c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.821] WriteFile (in: hFile=0x236c, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81ffa68, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0x81ffa68*=0x10c, lpOverlapped=0x0) returned 1 [0186.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0186.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0186.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0186.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0186.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0186.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0186.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0186.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0186.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67522c8 [0186.823] wcscpy (in: _Dest=0x67522c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" [0186.823] wcscat (in: _Dest=0x67522c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.ac3a86" [0186.823] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.ac3a86", NtPathName=0x81ff9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40540 [0186.826] FlushFileBuffers (hFile=0x236c) returned 1 [0188.476] CloseHandle (hObject=0x236c) returned 1 [0188.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bc768 [0188.791] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0188.791] wcscat (in: _Dest=0x30bc768, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt" [0188.791] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\ac3a86-readme.txt")) returned 0x2020 [0188.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0188.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 Thread: id = 5954 os_tid = 0x41c [0185.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f24a00 [0185.148] wcscpy (in: _Dest=0x3f24a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.148] wcscat (in: _Dest=0x3f24a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.148] wcscat (in: _Dest=0x3f24a00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*" [0185.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0185.148] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d20a0 [0185.427] wcscmp (_String1=".", _String2=".") returned 0 [0185.427] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.428] wcscmp (_String1="..", _String2=".") returned 1 [0185.428] wcscmp (_String1="..", _String2="..") returned 0 [0185.428] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0185.428] wcscmp (_String1="ar", _String2=".") returned 1 [0185.428] wcscmp (_String1="ar", _String2="..") returned 1 [0185.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae738 [0185.428] wcscpy (in: _Dest=0x68ae738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.428] wcscat (in: _Dest=0x68ae738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.428] wcscat (in: _Dest=0x68ae738, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0185.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ae738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0185.776] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0185.776] wcscmp (_String1="bg", _String2=".") returned 1 [0185.777] wcscmp (_String1="bg", _String2="..") returned 1 [0185.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3edc308 [0185.777] wcscpy (in: _Dest=0x3edc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.777] wcscat (in: _Dest=0x3edc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.777] wcscat (in: _Dest=0x3edc308, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0185.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0185.778] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0185.778] wcscmp (_String1="ca", _String2=".") returned 1 [0185.778] wcscmp (_String1="ca", _String2="..") returned 1 [0185.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67571f0 [0185.778] wcscpy (in: _Dest=0x67571f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.778] wcscat (in: _Dest=0x67571f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.778] wcscat (in: _Dest=0x67571f0, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0185.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67571f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0185.780] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0185.780] wcscmp (_String1="cs", _String2=".") returned 1 [0185.780] wcscmp (_String1="cs", _String2="..") returned 1 [0185.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67572f8 [0185.780] wcscpy (in: _Dest=0x67572f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.780] wcscat (in: _Dest=0x67572f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.780] wcscat (in: _Dest=0x67572f8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0185.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67572f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0185.781] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0185.781] wcscmp (_String1="da", _String2=".") returned 1 [0185.781] wcscmp (_String1="da", _String2="..") returned 1 [0185.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757400 [0185.781] wcscpy (in: _Dest=0x6757400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.781] wcscat (in: _Dest=0x6757400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.781] wcscat (in: _Dest=0x6757400, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0185.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0185.782] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0185.782] wcscmp (_String1="de", _String2=".") returned 1 [0185.782] wcscmp (_String1="de", _String2="..") returned 1 [0185.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757508 [0185.783] wcscpy (in: _Dest=0x6757508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.783] wcscat (in: _Dest=0x6757508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.783] wcscat (in: _Dest=0x6757508, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0185.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0185.784] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0185.784] wcscmp (_String1="el", _String2=".") returned 1 [0185.784] wcscmp (_String1="el", _String2="..") returned 1 [0185.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757610 [0185.784] wcscpy (in: _Dest=0x6757610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.784] wcscat (in: _Dest=0x6757610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.784] wcscat (in: _Dest=0x6757610, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0185.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0185.786] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0185.786] wcscmp (_String1="en", _String2=".") returned 1 [0185.786] wcscmp (_String1="en", _String2="..") returned 1 [0185.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757718 [0185.786] wcscpy (in: _Dest=0x6757718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.786] wcscat (in: _Dest=0x6757718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.786] wcscat (in: _Dest=0x6757718, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0185.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0185.787] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0185.787] wcscmp (_String1="es", _String2=".") returned 1 [0185.787] wcscmp (_String1="es", _String2="..") returned 1 [0185.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757820 [0185.787] wcscpy (in: _Dest=0x6757820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.787] wcscat (in: _Dest=0x6757820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.787] wcscat (in: _Dest=0x6757820, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0185.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0185.789] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0185.789] wcscmp (_String1="fi", _String2=".") returned 1 [0185.789] wcscmp (_String1="fi", _String2="..") returned 1 [0185.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757928 [0185.789] wcscpy (in: _Dest=0x6757928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.789] wcscat (in: _Dest=0x6757928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.789] wcscat (in: _Dest=0x6757928, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0185.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0185.792] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0185.792] wcscmp (_String1="fil", _String2=".") returned 1 [0185.792] wcscmp (_String1="fil", _String2="..") returned 1 [0185.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6757a30 [0185.792] wcscpy (in: _Dest=0x6757a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.792] wcscat (in: _Dest=0x6757a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.792] wcscat (in: _Dest=0x6757a30, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0185.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0185.794] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0185.794] wcscmp (_String1="fr", _String2=".") returned 1 [0185.794] wcscmp (_String1="fr", _String2="..") returned 1 [0185.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757b38 [0185.794] wcscpy (in: _Dest=0x6757b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.794] wcscat (in: _Dest=0x6757b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.794] wcscat (in: _Dest=0x6757b38, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0185.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0185.795] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0185.795] wcscmp (_String1="he", _String2=".") returned 1 [0185.795] wcscmp (_String1="he", _String2="..") returned 1 [0185.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757c40 [0185.795] wcscpy (in: _Dest=0x6757c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.795] wcscat (in: _Dest=0x6757c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.795] wcscat (in: _Dest=0x6757c40, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0185.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0185.797] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0185.797] wcscmp (_String1="hi", _String2=".") returned 1 [0185.797] wcscmp (_String1="hi", _String2="..") returned 1 [0185.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757d48 [0185.798] wcscpy (in: _Dest=0x6757d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.798] wcscat (in: _Dest=0x6757d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.798] wcscat (in: _Dest=0x6757d48, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0185.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0185.799] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0185.799] wcscmp (_String1="hr", _String2=".") returned 1 [0185.799] wcscmp (_String1="hr", _String2="..") returned 1 [0185.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757e50 [0185.799] wcscpy (in: _Dest=0x6757e50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.799] wcscat (in: _Dest=0x6757e50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.800] wcscat (in: _Dest=0x6757e50, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0185.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0185.801] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0185.801] wcscmp (_String1="hu", _String2=".") returned 1 [0185.801] wcscmp (_String1="hu", _String2="..") returned 1 [0185.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757f58 [0185.801] wcscpy (in: _Dest=0x6757f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.801] wcscat (in: _Dest=0x6757f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.801] wcscat (in: _Dest=0x6757f58, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0185.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0185.802] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0185.802] wcscmp (_String1="id", _String2=".") returned 1 [0185.802] wcscmp (_String1="id", _String2="..") returned 1 [0185.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758060 [0185.803] wcscpy (in: _Dest=0x6758060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.803] wcscat (in: _Dest=0x6758060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.803] wcscat (in: _Dest=0x6758060, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0185.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0185.804] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0185.804] wcscmp (_String1="it", _String2=".") returned 1 [0185.804] wcscmp (_String1="it", _String2="..") returned 1 [0185.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758168 [0185.804] wcscpy (in: _Dest=0x6758168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.804] wcscat (in: _Dest=0x6758168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.804] wcscat (in: _Dest=0x6758168, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0185.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0185.806] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0185.807] wcscmp (_String1="ja", _String2=".") returned 1 [0185.807] wcscmp (_String1="ja", _String2="..") returned 1 [0185.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758270 [0185.807] wcscpy (in: _Dest=0x6758270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.807] wcscat (in: _Dest=0x6758270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.807] wcscat (in: _Dest=0x6758270, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0185.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0185.808] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0185.808] wcscmp (_String1="ko", _String2=".") returned 1 [0185.808] wcscmp (_String1="ko", _String2="..") returned 1 [0185.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758378 [0185.808] wcscpy (in: _Dest=0x6758378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.808] wcscat (in: _Dest=0x6758378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.808] wcscat (in: _Dest=0x6758378, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0185.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498 [0185.810] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0185.810] wcscmp (_String1="lt", _String2=".") returned 1 [0185.810] wcscmp (_String1="lt", _String2="..") returned 1 [0185.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758480 [0185.810] wcscpy (in: _Dest=0x6758480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0185.810] wcscat (in: _Dest=0x6758480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0185.810] wcscat (in: _Dest=0x6758480, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0185.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0186.003] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0186.003] wcscmp (_String1="lv", _String2=".") returned 1 [0186.003] wcscmp (_String1="lv", _String2="..") returned 1 [0186.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3edc410 [0186.003] wcscpy (in: _Dest=0x3edc410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0186.003] wcscat (in: _Dest=0x3edc410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0186.003] wcscat (in: _Dest=0x3edc410, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0188.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0188.578] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0188.578] wcscmp (_String1="nl", _String2=".") returned 1 [0188.578] wcscmp (_String1="nl", _String2="..") returned 1 [0188.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44ab0 [0188.578] wcscpy (in: _Dest=0x3d44ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.578] wcscat (in: _Dest=0x3d44ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.578] wcscat (in: _Dest=0x3d44ab0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0188.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0188.579] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0188.579] wcscmp (_String1="no", _String2=".") returned 1 [0188.579] wcscmp (_String1="no", _String2="..") returned 1 [0188.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44bb8 [0188.579] wcscpy (in: _Dest=0x3d44bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.579] wcscat (in: _Dest=0x3d44bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.580] wcscat (in: _Dest=0x3d44bb8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0188.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0188.581] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0188.581] wcscmp (_String1="pl", _String2=".") returned 1 [0188.581] wcscmp (_String1="pl", _String2="..") returned 1 [0188.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44cc0 [0188.581] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.581] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.581] wcscat (in: _Dest=0x3d44cc0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0188.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0188.582] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0188.582] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0188.582] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0188.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750ce8 [0188.582] wcscpy (in: _Dest=0x6750ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.582] wcscat (in: _Dest=0x6750ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.582] wcscat (in: _Dest=0x6750ce8, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0188.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6750ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0188.583] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0188.583] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0188.583] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0188.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67523e0 [0188.583] wcscpy (in: _Dest=0x67523e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.583] wcscat (in: _Dest=0x67523e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.583] wcscat (in: _Dest=0x67523e0, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0188.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67523e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0188.584] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0188.584] wcscmp (_String1="ro", _String2=".") returned 1 [0188.584] wcscmp (_String1="ro", _String2="..") returned 1 [0188.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44dc8 [0188.585] wcscpy (in: _Dest=0x3d44dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.585] wcscat (in: _Dest=0x3d44dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.585] wcscat (in: _Dest=0x3d44dc8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0188.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0188.586] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0188.586] wcscmp (_String1="ru", _String2=".") returned 1 [0188.586] wcscmp (_String1="ru", _String2="..") returned 1 [0188.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44ed0 [0188.586] wcscpy (in: _Dest=0x3d44ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.586] wcscat (in: _Dest=0x3d44ed0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.586] wcscat (in: _Dest=0x3d44ed0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0188.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0188.587] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0188.587] wcscmp (_String1="sk", _String2=".") returned 1 [0188.587] wcscmp (_String1="sk", _String2="..") returned 1 [0188.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44fd8 [0188.587] wcscpy (in: _Dest=0x3d44fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.587] wcscat (in: _Dest=0x3d44fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.587] wcscat (in: _Dest=0x3d44fd8, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0188.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324 [0188.588] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0188.588] wcscmp (_String1="sl", _String2=".") returned 1 [0188.588] wcscmp (_String1="sl", _String2="..") returned 1 [0188.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818210 [0188.588] wcscpy (in: _Dest=0x6818210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.588] wcscat (in: _Dest=0x6818210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.588] wcscat (in: _Dest=0x6818210, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0188.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0188.589] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0188.589] wcscmp (_String1="sr", _String2=".") returned 1 [0188.589] wcscmp (_String1="sr", _String2="..") returned 1 [0188.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818318 [0188.589] wcscpy (in: _Dest=0x6818318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.589] wcscat (in: _Dest=0x6818318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.589] wcscat (in: _Dest=0x6818318, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0188.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0188.591] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0188.591] wcscmp (_String1="sv", _String2=".") returned 1 [0188.591] wcscmp (_String1="sv", _String2="..") returned 1 [0188.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818420 [0188.591] wcscpy (in: _Dest=0x6818420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.591] wcscat (in: _Dest=0x6818420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.591] wcscat (in: _Dest=0x6818420, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0188.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0188.592] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0188.592] wcscmp (_String1="th", _String2=".") returned 1 [0188.592] wcscmp (_String1="th", _String2="..") returned 1 [0188.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818528 [0188.592] wcscpy (in: _Dest=0x6818528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.592] wcscat (in: _Dest=0x6818528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.592] wcscat (in: _Dest=0x6818528, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0188.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0188.593] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0188.593] wcscmp (_String1="tr", _String2=".") returned 1 [0188.593] wcscmp (_String1="tr", _String2="..") returned 1 [0188.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818630 [0188.594] wcscpy (in: _Dest=0x6818630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.594] wcscat (in: _Dest=0x6818630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.594] wcscat (in: _Dest=0x6818630, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0188.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0188.595] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0188.595] wcscmp (_String1="uk", _String2=".") returned 1 [0188.595] wcscmp (_String1="uk", _String2="..") returned 1 [0188.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818738 [0188.595] wcscpy (in: _Dest=0x6818738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.595] wcscat (in: _Dest=0x6818738, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.595] wcscat (in: _Dest=0x6818738, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0188.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c [0188.596] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0188.596] wcscmp (_String1="vi", _String2=".") returned 1 [0188.596] wcscmp (_String1="vi", _String2="..") returned 1 [0188.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ef8 [0188.596] wcscpy (in: _Dest=0x6817ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.596] wcscat (in: _Dest=0x6817ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.596] wcscat (in: _Dest=0x6817ef8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0188.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6817ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0188.597] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0188.597] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0188.597] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0188.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67524f8 [0188.597] wcscpy (in: _Dest=0x67524f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0188.597] wcscat (in: _Dest=0x67524f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0188.597] wcscat (in: _Dest=0x67524f8, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0188.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67524f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0188.598] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0189.324] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0189.324] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0189.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x69c34f8 [0189.324] wcscpy (in: _Dest=0x69c34f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0189.324] wcscat (in: _Dest=0x69c34f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0189.324] wcscat (in: _Dest=0x69c34f8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0195.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c34f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0195.555] FindNextFileW (in: hFindFile=0x66d20a0, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0195.555] FindClose (in: hFindFile=0x66d20a0 | out: hFindFile=0x66d20a0) returned 1 [0195.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0195.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24a00) returned 1 [0195.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17670) returned 1 Thread: id = 5955 os_tid = 0xe74 [0185.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f24b08 [0185.149] wcscpy (in: _Dest=0x3f24b08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0185.149] wcscat (in: _Dest=0x3f24b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0185.149] wcscat (in: _Dest=0x3f24b08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*" [0185.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0185.149] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0185.418] wcscmp (_String1=".", _String2=".") returned 0 [0185.418] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.418] wcscmp (_String1="..", _String2=".") returned 1 [0185.418] wcscmp (_String1="..", _String2="..") returned 0 [0185.418] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0185.418] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0185.418] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0185.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d407b0 [0185.418] wcscpy (in: _Dest=0x3d407b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0185.418] wcscat (in: _Dest=0x3d407b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0185.418] wcscat (in: _Dest=0x3d407b0, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" [0185.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d407b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0185.772] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0185.772] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0185.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0185.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24b08) returned 1 [0185.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc308) returned 1 Thread: id = 5956 os_tid = 0xdcc [0185.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f24c10 [0185.150] wcscpy (in: _Dest=0x3f24c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0185.150] wcscat (in: _Dest=0x3f24c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0185.150] wcscat (in: _Dest=0x3f24c10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*" [0185.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0185.150] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0185.611] wcscmp (_String1=".", _String2=".") returned 0 [0185.611] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.611] wcscmp (_String1="..", _String2=".") returned 1 [0185.611] wcscmp (_String1="..", _String2="..") returned 0 [0185.611] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.611] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.611] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674f770 [0185.611] wcscpy (in: _Dest=0x674f770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0185.611] wcscat (in: _Dest=0x674f770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0185.611] wcscat (in: _Dest=0x674f770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" [0189.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0189.946] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.946] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0189.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0189.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24c10) returned 1 [0189.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 5957 os_tid = 0xe84 [0185.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f24d18 [0185.151] wcscpy (in: _Dest=0x3f24d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0185.151] wcscat (in: _Dest=0x3f24d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0185.152] wcscat (in: _Dest=0x3f24d18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*" [0185.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bad08 [0185.152] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0185.612] wcscmp (_String1=".", _String2=".") returned 0 [0185.612] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.612] wcscmp (_String1="..", _String2=".") returned 1 [0185.612] wcscmp (_String1="..", _String2="..") returned 0 [0185.612] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.612] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.613] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674f898 [0185.613] wcscpy (in: _Dest=0x674f898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0185.613] wcscat (in: _Dest=0x674f898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0185.613] wcscat (in: _Dest=0x674f898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" [0189.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0 [0189.268] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.268] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0189.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bad08) returned 1 [0189.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24d18) returned 1 [0189.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898d68) returned 1 Thread: id = 5958 os_tid = 0xe98 [0185.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f24e20 [0185.153] wcscpy (in: _Dest=0x3f24e20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0185.153] wcscat (in: _Dest=0x3f24e20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0185.153] wcscat (in: _Dest=0x3f24e20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*" [0185.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0185.153] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0185.613] wcscmp (_String1=".", _String2=".") returned 0 [0185.613] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.613] wcscmp (_String1="..", _String2=".") returned 1 [0185.613] wcscmp (_String1="..", _String2="..") returned 0 [0185.613] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.613] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.613] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674f9c0 [0185.613] wcscpy (in: _Dest=0x674f9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0185.614] wcscat (in: _Dest=0x674f9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0185.614] wcscat (in: _Dest=0x674f9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" [0189.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0189.271] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.271] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0189.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0189.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24e20) returned 1 [0189.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898e70) returned 1 Thread: id = 5959 os_tid = 0xea0 [0185.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f24f28 [0185.154] wcscpy (in: _Dest=0x3f24f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0185.154] wcscat (in: _Dest=0x3f24f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0185.154] wcscat (in: _Dest=0x3f24f28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*" [0185.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0185.154] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0185.614] wcscmp (_String1=".", _String2=".") returned 0 [0185.614] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.614] wcscmp (_String1="..", _String2=".") returned 1 [0185.614] wcscmp (_String1="..", _String2="..") returned 0 [0185.614] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.614] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.614] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674fae8 [0185.614] wcscpy (in: _Dest=0x674fae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0185.614] wcscat (in: _Dest=0x674fae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0185.614] wcscat (in: _Dest=0x674fae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" [0189.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0189.272] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.272] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0189.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0189.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24f28) returned 1 [0189.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6898f78) returned 1 Thread: id = 5960 os_tid = 0xdd4 [0185.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25030 [0185.155] wcscpy (in: _Dest=0x3f25030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0185.155] wcscat (in: _Dest=0x3f25030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0185.155] wcscat (in: _Dest=0x3f25030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*" [0185.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0185.155] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0185.615] wcscmp (_String1=".", _String2=".") returned 0 [0185.615] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.615] wcscmp (_String1="..", _String2=".") returned 1 [0185.615] wcscmp (_String1="..", _String2="..") returned 0 [0185.615] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.615] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.615] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674fc10 [0185.615] wcscpy (in: _Dest=0x674fc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0185.615] wcscat (in: _Dest=0x674fc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0185.615] wcscat (in: _Dest=0x674fc10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" [0189.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0189.274] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.274] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0189.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0189.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25030) returned 1 [0189.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899080) returned 1 Thread: id = 5961 os_tid = 0xe58 [0185.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25138 [0185.156] wcscpy (in: _Dest=0x3f25138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0185.156] wcscat (in: _Dest=0x3f25138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0185.156] wcscat (in: _Dest=0x3f25138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*" [0185.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0185.156] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0185.616] wcscmp (_String1=".", _String2=".") returned 0 [0185.616] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.616] wcscmp (_String1="..", _String2=".") returned 1 [0185.616] wcscmp (_String1="..", _String2="..") returned 0 [0185.616] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.616] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.616] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674fd38 [0185.616] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0185.616] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0185.616] wcscat (in: _Dest=0x674fd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" [0189.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0189.276] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.276] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0189.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0189.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25138) returned 1 [0189.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899188) returned 1 Thread: id = 5962 os_tid = 0xecc [0185.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25240 [0185.158] wcscpy (in: _Dest=0x3f25240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0185.158] wcscat (in: _Dest=0x3f25240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0185.158] wcscat (in: _Dest=0x3f25240, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*" [0185.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0185.158] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0185.617] wcscmp (_String1=".", _String2=".") returned 0 [0185.617] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.617] wcscmp (_String1="..", _String2=".") returned 1 [0185.617] wcscmp (_String1="..", _String2="..") returned 0 [0185.617] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.617] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.617] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674fe60 [0185.617] wcscpy (in: _Dest=0x674fe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0185.617] wcscat (in: _Dest=0x674fe60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0185.617] wcscat (in: _Dest=0x674fe60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" [0189.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0189.278] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.278] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0189.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0189.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25240) returned 1 [0189.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899290) returned 1 Thread: id = 5963 os_tid = 0xee4 [0185.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcbc8 [0185.159] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0185.159] wcscat (in: _Dest=0x30bcbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0185.159] wcscat (in: _Dest=0x30bcbc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*" [0185.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0185.160] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0185.618] wcscmp (_String1=".", _String2=".") returned 0 [0185.618] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.618] wcscmp (_String1="..", _String2=".") returned 1 [0185.618] wcscmp (_String1="..", _String2="..") returned 0 [0185.618] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.618] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.618] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674ff88 [0185.618] wcscpy (in: _Dest=0x674ff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0185.618] wcscat (in: _Dest=0x674ff88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0185.618] wcscat (in: _Dest=0x674ff88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" [0188.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0188.656] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.656] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0188.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0188.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0188.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 Thread: id = 5964 os_tid = 0x410 [0185.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcce0 [0185.161] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0185.161] wcscat (in: _Dest=0x30bcce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0185.161] wcscat (in: _Dest=0x30bcce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*" [0185.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0185.161] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0185.619] wcscmp (_String1=".", _String2=".") returned 0 [0185.619] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.619] wcscmp (_String1="..", _String2=".") returned 1 [0185.619] wcscmp (_String1="..", _String2="..") returned 0 [0185.619] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.619] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.619] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67500b0 [0185.619] wcscpy (in: _Dest=0x67500b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0185.619] wcscat (in: _Dest=0x67500b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0185.619] wcscat (in: _Dest=0x67500b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" [0188.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67500b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0188.658] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.658] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0188.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0188.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0188.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 Thread: id = 5965 os_tid = 0xe44 [0185.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25348 [0185.162] wcscpy (in: _Dest=0x3f25348, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0185.162] wcscat (in: _Dest=0x3f25348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0185.162] wcscat (in: _Dest=0x3f25348, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*" [0185.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0185.162] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0185.620] wcscmp (_String1=".", _String2=".") returned 0 [0185.620] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.620] wcscmp (_String1="..", _String2=".") returned 1 [0185.620] wcscmp (_String1="..", _String2="..") returned 0 [0185.620] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.620] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.620] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67501d8 [0185.620] wcscpy (in: _Dest=0x67501d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0185.620] wcscat (in: _Dest=0x67501d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0185.620] wcscat (in: _Dest=0x67501d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" [0188.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67501d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0188.418] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.418] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0188.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0188.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25348) returned 1 [0188.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899398) returned 1 Thread: id = 5966 os_tid = 0x528 [0185.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcdf8 [0185.165] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0185.165] wcscat (in: _Dest=0x30bcdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0185.165] wcscat (in: _Dest=0x30bcdf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*" [0185.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0185.165] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0185.621] wcscmp (_String1=".", _String2=".") returned 0 [0185.621] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.621] wcscmp (_String1="..", _String2=".") returned 1 [0185.621] wcscmp (_String1="..", _String2="..") returned 0 [0185.621] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.621] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.621] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6750300 [0185.621] wcscpy (in: _Dest=0x6750300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0185.621] wcscat (in: _Dest=0x6750300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0185.621] wcscat (in: _Dest=0x6750300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" [0188.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0188.420] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.420] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0188.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0188.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0188.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 Thread: id = 5967 os_tid = 0x580 [0185.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25450 [0185.166] wcscpy (in: _Dest=0x3f25450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0185.166] wcscat (in: _Dest=0x3f25450, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0185.166] wcscat (in: _Dest=0x3f25450, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*" [0185.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0185.166] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0185.621] wcscmp (_String1=".", _String2=".") returned 0 [0185.621] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.621] wcscmp (_String1="..", _String2=".") returned 1 [0185.622] wcscmp (_String1="..", _String2="..") returned 0 [0185.622] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.622] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.622] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6750428 [0185.622] wcscpy (in: _Dest=0x6750428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0185.622] wcscat (in: _Dest=0x6750428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0185.622] wcscat (in: _Dest=0x6750428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" [0188.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0188.422] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.422] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0188.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0188.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25450) returned 1 [0188.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68994a0) returned 1 Thread: id = 5968 os_tid = 0x564 [0185.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25558 [0185.167] wcscpy (in: _Dest=0x3f25558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0185.167] wcscat (in: _Dest=0x3f25558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0185.167] wcscat (in: _Dest=0x3f25558, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*" [0185.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0185.167] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0185.622] wcscmp (_String1=".", _String2=".") returned 0 [0185.622] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.622] wcscmp (_String1="..", _String2=".") returned 1 [0185.622] wcscmp (_String1="..", _String2="..") returned 0 [0185.622] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.622] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.622] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6750550 [0185.623] wcscpy (in: _Dest=0x6750550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0185.623] wcscat (in: _Dest=0x6750550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0185.623] wcscat (in: _Dest=0x6750550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" [0188.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0188.424] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.424] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0188.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0188.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25558) returned 1 [0188.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68995a8) returned 1 Thread: id = 5969 os_tid = 0xe08 [0185.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25660 [0185.169] wcscpy (in: _Dest=0x3f25660, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0185.169] wcscat (in: _Dest=0x3f25660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0185.169] wcscat (in: _Dest=0x3f25660, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*" [0185.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0185.169] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0185.623] wcscmp (_String1=".", _String2=".") returned 0 [0185.623] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.623] wcscmp (_String1="..", _String2=".") returned 1 [0185.623] wcscmp (_String1="..", _String2="..") returned 0 [0185.623] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.623] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.623] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6750678 [0185.623] wcscpy (in: _Dest=0x6750678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0185.623] wcscat (in: _Dest=0x6750678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0185.623] wcscat (in: _Dest=0x6750678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" [0186.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0186.310] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.310] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0186.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0186.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25660) returned 1 [0186.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68996b0) returned 1 Thread: id = 5970 os_tid = 0x518 [0185.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcf10 [0185.170] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0185.170] wcscat (in: _Dest=0x30bcf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0185.170] wcscat (in: _Dest=0x30bcf10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*" [0185.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0185.170] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0185.624] wcscmp (_String1=".", _String2=".") returned 0 [0185.624] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.624] wcscmp (_String1="..", _String2=".") returned 1 [0185.624] wcscmp (_String1="..", _String2="..") returned 0 [0185.624] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.624] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.624] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67507a0 [0185.624] wcscpy (in: _Dest=0x67507a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0185.624] wcscat (in: _Dest=0x67507a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0185.624] wcscat (in: _Dest=0x67507a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" [0186.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67507a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0186.312] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.313] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0186.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0186.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0186.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68997b8) returned 1 Thread: id = 5971 os_tid = 0x1004 [0185.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25768 [0185.171] wcscpy (in: _Dest=0x3f25768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0185.171] wcscat (in: _Dest=0x3f25768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0185.171] wcscat (in: _Dest=0x3f25768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*" [0185.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0185.171] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0185.625] wcscmp (_String1=".", _String2=".") returned 0 [0185.625] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.625] wcscmp (_String1="..", _String2=".") returned 1 [0185.625] wcscmp (_String1="..", _String2="..") returned 0 [0185.625] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.625] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.625] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67508c8 [0185.625] wcscpy (in: _Dest=0x67508c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0185.625] wcscat (in: _Dest=0x67508c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0185.625] wcscat (in: _Dest=0x67508c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" [0186.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67508c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0186.314] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.314] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0186.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0186.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25768) returned 1 [0186.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68998c0) returned 1 Thread: id = 5972 os_tid = 0x1034 [0185.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25870 [0185.172] wcscpy (in: _Dest=0x3f25870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0185.172] wcscat (in: _Dest=0x3f25870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0185.172] wcscat (in: _Dest=0x3f25870, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*" [0185.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0185.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0185.626] wcscmp (_String1=".", _String2=".") returned 0 [0185.627] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.627] wcscmp (_String1="..", _String2=".") returned 1 [0185.627] wcscmp (_String1="..", _String2="..") returned 0 [0185.627] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.627] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.627] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6754ab8 [0185.627] wcscpy (in: _Dest=0x6754ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0185.627] wcscat (in: _Dest=0x6754ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0185.627] wcscat (in: _Dest=0x6754ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" [0186.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0186.316] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.316] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0186.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0186.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25870) returned 1 [0186.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68999c8) returned 1 Thread: id = 5973 os_tid = 0x10a0 [0185.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25978 [0185.177] wcscpy (in: _Dest=0x3f25978, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0185.177] wcscat (in: _Dest=0x3f25978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0185.177] wcscat (in: _Dest=0x3f25978, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*" [0185.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0185.177] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0185.627] wcscmp (_String1=".", _String2=".") returned 0 [0185.627] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.627] wcscmp (_String1="..", _String2=".") returned 1 [0185.628] wcscmp (_String1="..", _String2="..") returned 0 [0185.628] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.628] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.628] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6754be0 [0185.628] wcscpy (in: _Dest=0x6754be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0185.628] wcscat (in: _Dest=0x6754be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0185.628] wcscat (in: _Dest=0x6754be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" [0186.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0186.318] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.318] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0186.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0186.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25978) returned 1 [0186.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899ad0) returned 1 Thread: id = 5974 os_tid = 0x10a4 [0185.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25a80 [0185.178] wcscpy (in: _Dest=0x3f25a80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0185.178] wcscat (in: _Dest=0x3f25a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0185.178] wcscat (in: _Dest=0x3f25a80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*" [0185.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0060 [0185.178] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0185.628] wcscmp (_String1=".", _String2=".") returned 0 [0185.628] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.628] wcscmp (_String1="..", _String2=".") returned 1 [0185.628] wcscmp (_String1="..", _String2="..") returned 0 [0185.628] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.628] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.628] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6754d08 [0185.629] wcscpy (in: _Dest=0x6754d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0185.629] wcscat (in: _Dest=0x6754d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0185.629] wcscat (in: _Dest=0x6754d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" [0186.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0186.320] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.320] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0186.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0060) returned 1 [0186.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25a80) returned 1 [0186.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c60) returned 1 Thread: id = 5975 os_tid = 0x10a8 [0185.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25b88 [0185.179] wcscpy (in: _Dest=0x3f25b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0185.179] wcscat (in: _Dest=0x3f25b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0185.179] wcscat (in: _Dest=0x3f25b88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*" [0185.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0185.179] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0185.629] wcscmp (_String1=".", _String2=".") returned 0 [0185.629] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.629] wcscmp (_String1="..", _String2=".") returned 1 [0185.629] wcscmp (_String1="..", _String2="..") returned 0 [0185.629] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.629] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.629] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6754e30 [0185.629] wcscpy (in: _Dest=0x6754e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0185.629] wcscat (in: _Dest=0x6754e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0185.630] wcscat (in: _Dest=0x6754e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" [0186.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0186.322] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.322] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0186.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0186.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25b88) returned 1 [0186.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ea8) returned 1 Thread: id = 5976 os_tid = 0x10ac [0185.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25c90 [0185.180] wcscpy (in: _Dest=0x3f25c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0185.180] wcscat (in: _Dest=0x3f25c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0185.180] wcscat (in: _Dest=0x3f25c90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*" [0185.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0185.180] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0185.630] wcscmp (_String1=".", _String2=".") returned 0 [0185.630] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.630] wcscmp (_String1="..", _String2=".") returned 1 [0185.630] wcscmp (_String1="..", _String2="..") returned 0 [0185.630] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.630] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.630] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6754f58 [0185.630] wcscpy (in: _Dest=0x6754f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0185.630] wcscat (in: _Dest=0x6754f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0185.630] wcscat (in: _Dest=0x6754f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" [0186.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0186.323] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.324] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0186.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0186.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25c90) returned 1 [0186.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23fb0) returned 1 Thread: id = 5977 os_tid = 0x10b0 [0185.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68adce8 [0185.181] wcscpy (in: _Dest=0x68adce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0185.182] wcscat (in: _Dest=0x68adce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0185.182] wcscat (in: _Dest=0x68adce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*" [0185.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0185.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0185.631] wcscmp (_String1=".", _String2=".") returned 0 [0185.631] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.631] wcscmp (_String1="..", _String2=".") returned 1 [0185.631] wcscmp (_String1="..", _String2="..") returned 0 [0185.631] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.631] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.631] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755080 [0185.631] wcscpy (in: _Dest=0x6755080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0185.631] wcscat (in: _Dest=0x6755080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0185.631] wcscat (in: _Dest=0x6755080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" [0186.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0186.325] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.325] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0186.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0186.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adce8) returned 1 [0186.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f240b8) returned 1 Thread: id = 5978 os_tid = 0x10b4 [0185.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68addf0 [0185.183] wcscpy (in: _Dest=0x68addf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0185.183] wcscat (in: _Dest=0x68addf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0185.183] wcscat (in: _Dest=0x68addf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*" [0185.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0185.183] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0185.671] wcscmp (_String1=".", _String2=".") returned 0 [0185.671] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.671] wcscmp (_String1="..", _String2=".") returned 1 [0185.671] wcscmp (_String1="..", _String2="..") returned 0 [0185.671] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.671] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.671] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67553f8 [0185.671] wcscpy (in: _Dest=0x67553f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0185.672] wcscat (in: _Dest=0x67553f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0185.672] wcscat (in: _Dest=0x67553f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" [0186.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67553f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0186.327] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.327] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0186.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0186.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68addf0) returned 1 [0186.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f241c0) returned 1 Thread: id = 5979 os_tid = 0x10c0 [0185.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68adef8 [0185.184] wcscpy (in: _Dest=0x68adef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0185.184] wcscat (in: _Dest=0x68adef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0185.184] wcscat (in: _Dest=0x68adef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*" [0185.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0185.184] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0185.672] wcscmp (_String1=".", _String2=".") returned 0 [0185.672] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.672] wcscmp (_String1="..", _String2=".") returned 1 [0185.672] wcscmp (_String1="..", _String2="..") returned 0 [0185.672] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.672] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.672] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755520 [0185.672] wcscpy (in: _Dest=0x6755520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0185.672] wcscat (in: _Dest=0x6755520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0185.672] wcscat (in: _Dest=0x6755520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" [0186.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0186.329] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.329] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0186.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0186.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adef8) returned 1 [0186.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f242c8) returned 1 Thread: id = 5980 os_tid = 0x10c4 [0185.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae000 [0185.185] wcscpy (in: _Dest=0x68ae000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0185.185] wcscat (in: _Dest=0x68ae000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0185.185] wcscat (in: _Dest=0x68ae000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*" [0185.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0185.185] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0185.673] wcscmp (_String1=".", _String2=".") returned 0 [0185.673] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.673] wcscmp (_String1="..", _String2=".") returned 1 [0185.673] wcscmp (_String1="..", _String2="..") returned 0 [0185.673] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.673] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.673] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755648 [0185.673] wcscpy (in: _Dest=0x6755648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0185.673] wcscat (in: _Dest=0x6755648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0185.673] wcscat (in: _Dest=0x6755648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" [0186.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0186.331] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.331] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0186.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0186.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae000) returned 1 [0186.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f243d0) returned 1 Thread: id = 5981 os_tid = 0x1178 [0185.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae108 [0185.186] wcscpy (in: _Dest=0x68ae108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0185.186] wcscat (in: _Dest=0x68ae108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0185.186] wcscat (in: _Dest=0x68ae108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*" [0185.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0185.186] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0185.674] wcscmp (_String1=".", _String2=".") returned 0 [0185.674] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.674] wcscmp (_String1="..", _String2=".") returned 1 [0185.674] wcscmp (_String1="..", _String2="..") returned 0 [0185.674] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.674] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.674] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755770 [0185.674] wcscpy (in: _Dest=0x6755770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0185.674] wcscat (in: _Dest=0x6755770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0185.674] wcscat (in: _Dest=0x6755770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" [0186.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0186.333] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.333] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0186.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0186.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae108) returned 1 [0186.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f244d8) returned 1 Thread: id = 5982 os_tid = 0x117c [0185.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae210 [0185.187] wcscpy (in: _Dest=0x68ae210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0185.187] wcscat (in: _Dest=0x68ae210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0185.187] wcscat (in: _Dest=0x68ae210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*" [0185.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0185.187] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2220 [0185.675] wcscmp (_String1=".", _String2=".") returned 0 [0185.675] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.675] wcscmp (_String1="..", _String2=".") returned 1 [0185.675] wcscmp (_String1="..", _String2="..") returned 0 [0185.675] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.675] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.675] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755898 [0185.675] wcscpy (in: _Dest=0x6755898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0185.675] wcscat (in: _Dest=0x6755898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0185.675] wcscat (in: _Dest=0x6755898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" [0186.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0186.334] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.334] FindClose (in: hFindFile=0x66d2220 | out: hFindFile=0x66d2220) returned 1 [0186.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0186.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae210) returned 1 [0186.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f245e0) returned 1 Thread: id = 5983 os_tid = 0x1228 [0185.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae318 [0185.189] wcscpy (in: _Dest=0x68ae318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0185.189] wcscat (in: _Dest=0x68ae318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0185.189] wcscat (in: _Dest=0x68ae318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*" [0185.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0185.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2120 [0185.675] wcscmp (_String1=".", _String2=".") returned 0 [0185.675] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.676] wcscmp (_String1="..", _String2=".") returned 1 [0185.676] wcscmp (_String1="..", _String2="..") returned 0 [0185.676] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.676] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.676] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67559c0 [0185.676] wcscpy (in: _Dest=0x67559c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0185.676] wcscat (in: _Dest=0x67559c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0185.676] wcscat (in: _Dest=0x67559c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" [0186.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67559c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0186.336] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.336] FindClose (in: hFindFile=0x66d2120 | out: hFindFile=0x66d2120) returned 1 [0186.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0186.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae318) returned 1 [0186.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f246e8) returned 1 Thread: id = 5984 os_tid = 0x1280 [0185.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae420 [0185.192] wcscpy (in: _Dest=0x68ae420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0185.192] wcscat (in: _Dest=0x68ae420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0185.192] wcscat (in: _Dest=0x68ae420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*" [0185.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0185.192] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2260 [0185.676] wcscmp (_String1=".", _String2=".") returned 0 [0185.676] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.676] wcscmp (_String1="..", _String2=".") returned 1 [0185.676] wcscmp (_String1="..", _String2="..") returned 0 [0185.676] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.677] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.677] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755ae8 [0185.677] wcscpy (in: _Dest=0x6755ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0185.677] wcscat (in: _Dest=0x6755ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0185.677] wcscat (in: _Dest=0x6755ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" [0186.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0186.338] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.338] FindClose (in: hFindFile=0x66d2260 | out: hFindFile=0x66d2260) returned 1 [0186.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0186.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae420) returned 1 [0186.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f247f0) returned 1 Thread: id = 5985 os_tid = 0xaf4 [0185.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ae528 [0185.193] wcscpy (in: _Dest=0x68ae528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0185.193] wcscat (in: _Dest=0x68ae528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0185.193] wcscat (in: _Dest=0x68ae528, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*" [0185.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0185.194] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0185.436] wcscmp (_String1=".", _String2=".") returned 0 [0185.436] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.436] wcscmp (_String1="..", _String2=".") returned 1 [0185.436] wcscmp (_String1="..", _String2="..") returned 0 [0185.436] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.436] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.436] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x674f2d0 [0185.437] wcscpy (in: _Dest=0x674f2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0185.437] wcscat (in: _Dest=0x674f2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0185.437] wcscat (in: _Dest=0x674f2d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" [0186.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0186.344] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.344] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0186.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0186.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae528) returned 1 [0186.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f248f8) returned 1 Thread: id = 5986 os_tid = 0x934 [0185.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd028 [0185.195] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0185.195] wcscat (in: _Dest=0x30bd028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0185.195] wcscat (in: _Dest=0x30bd028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*" [0185.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0185.195] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2320 [0185.437] wcscmp (_String1=".", _String2=".") returned 0 [0185.437] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.437] wcscmp (_String1="..", _String2=".") returned 1 [0185.437] wcscmp (_String1="..", _String2="..") returned 0 [0185.437] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.437] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.437] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674f3f8 [0185.438] wcscpy (in: _Dest=0x674f3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0185.438] wcscat (in: _Dest=0x674f3f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0185.438] wcscat (in: _Dest=0x674f3f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" [0186.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0186.346] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.346] FindClose (in: hFindFile=0x66d2320 | out: hFindFile=0x66d2320) returned 1 [0186.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0186.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0186.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 Thread: id = 5987 os_tid = 0x1468 [0185.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbb60 [0185.438] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0185.438] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0185.438] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*" [0185.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0185.438] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24a0 [0185.439] wcscmp (_String1=".", _String2=".") returned 0 [0185.439] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.439] wcscmp (_String1="..", _String2=".") returned 1 [0185.439] wcscmp (_String1="..", _String2="..") returned 0 [0185.439] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.439] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.439] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674f520 [0185.439] wcscpy (in: _Dest=0x674f520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0185.439] wcscat (in: _Dest=0x674f520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0185.439] wcscat (in: _Dest=0x674f520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" [0186.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0186.348] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.348] FindClose (in: hFindFile=0x66d24a0 | out: hFindFile=0x66d24a0) returned 1 [0186.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0186.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0186.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 Thread: id = 5988 os_tid = 0x146c [0185.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae840 [0185.440] wcscpy (in: _Dest=0x68ae840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0185.440] wcscat (in: _Dest=0x68ae840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0185.440] wcscat (in: _Dest=0x68ae840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*" [0185.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0185.440] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0185.441] wcscmp (_String1=".", _String2=".") returned 0 [0185.441] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.441] wcscmp (_String1="..", _String2=".") returned 1 [0185.441] wcscmp (_String1="..", _String2="..") returned 0 [0185.441] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.441] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.441] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x674f648 [0185.441] wcscpy (in: _Dest=0x674f648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0185.441] wcscat (in: _Dest=0x674f648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0185.441] wcscat (in: _Dest=0x674f648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" [0186.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0186.350] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.350] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0186.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0186.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae840) returned 1 [0186.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18070) returned 1 Thread: id = 5989 os_tid = 0x1474 [0185.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ae948 [0185.442] wcscpy (in: _Dest=0x68ae948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0185.442] wcscat (in: _Dest=0x68ae948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0185.442] wcscat (in: _Dest=0x68ae948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*" [0185.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0185.442] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0188.728] wcscmp (_String1=".", _String2=".") returned 0 [0188.728] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.728] wcscmp (_String1="..", _String2=".") returned 1 [0188.728] wcscmp (_String1="..", _String2="..") returned 0 [0188.728] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.728] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.728] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759648 [0188.728] wcscpy (in: _Dest=0x6759648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0188.728] wcscat (in: _Dest=0x6759648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0188.729] wcscat (in: _Dest=0x6759648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" [0189.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0189.848] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.848] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0189.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0189.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae948) returned 1 [0189.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17470) returned 1 Thread: id = 5990 os_tid = 0x14b4 [0185.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aea50 [0185.443] wcscpy (in: _Dest=0x68aea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0185.443] wcscat (in: _Dest=0x68aea50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0185.443] wcscat (in: _Dest=0x68aea50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*" [0185.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0185.443] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0188.495] wcscmp (_String1=".", _String2=".") returned 0 [0188.495] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.495] wcscmp (_String1="..", _String2=".") returned 1 [0188.495] wcscmp (_String1="..", _String2="..") returned 0 [0188.495] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.495] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.495] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6755f88 [0188.496] wcscpy (in: _Dest=0x6755f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0188.496] wcscat (in: _Dest=0x6755f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0188.496] wcscat (in: _Dest=0x6755f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" [0189.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0189.939] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.939] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0189.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0189.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea50) returned 1 [0189.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18270) returned 1 Thread: id = 5991 os_tid = 0x14b8 [0185.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aeb58 [0185.443] wcscpy (in: _Dest=0x68aeb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0185.443] wcscat (in: _Dest=0x68aeb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0185.444] wcscat (in: _Dest=0x68aeb58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*" [0185.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0185.444] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24e0 [0188.726] wcscmp (_String1=".", _String2=".") returned 0 [0188.726] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.726] wcscmp (_String1="..", _String2=".") returned 1 [0188.726] wcscmp (_String1="..", _String2="..") returned 0 [0188.726] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.726] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.726] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67593f8 [0188.726] wcscpy (in: _Dest=0x67593f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0188.726] wcscat (in: _Dest=0x67593f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0188.726] wcscat (in: _Dest=0x67593f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" [0189.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67593f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0189.844] FindNextFileW (in: hFindFile=0x66d24e0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.844] FindClose (in: hFindFile=0x66d24e0 | out: hFindFile=0x66d24e0) returned 1 [0189.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0189.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aeb58) returned 1 [0189.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18370) returned 1 Thread: id = 5992 os_tid = 0x14bc [0185.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aec60 [0185.444] wcscpy (in: _Dest=0x68aec60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0185.444] wcscat (in: _Dest=0x68aec60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0185.444] wcscat (in: _Dest=0x68aec60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*" [0185.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0185.444] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0188.717] wcscmp (_String1=".", _String2=".") returned 0 [0188.717] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.717] wcscmp (_String1="..", _String2=".") returned 1 [0188.717] wcscmp (_String1="..", _String2="..") returned 0 [0188.717] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.717] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.717] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67568c8 [0188.717] wcscpy (in: _Dest=0x67568c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0188.717] wcscat (in: _Dest=0x67568c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0188.717] wcscat (in: _Dest=0x67568c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" [0189.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67568c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0189.817] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.817] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0189.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0189.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aec60) returned 1 [0189.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18470) returned 1 Thread: id = 5993 os_tid = 0x81c [0185.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aed68 [0185.445] wcscpy (in: _Dest=0x68aed68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0185.445] wcscat (in: _Dest=0x68aed68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0185.445] wcscat (in: _Dest=0x68aed68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*" [0185.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0185.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2060 [0188.725] wcscmp (_String1=".", _String2=".") returned 0 [0188.725] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.725] wcscmp (_String1="..", _String2=".") returned 1 [0188.725] wcscmp (_String1="..", _String2="..") returned 0 [0188.725] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.725] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.725] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67592d0 [0188.725] wcscpy (in: _Dest=0x67592d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0188.726] wcscat (in: _Dest=0x67592d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0188.726] wcscat (in: _Dest=0x67592d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" [0189.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67592d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0189.842] FindNextFileW (in: hFindFile=0x66d2060, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.842] FindClose (in: hFindFile=0x66d2060 | out: hFindFile=0x66d2060) returned 1 [0189.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0189.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aed68) returned 1 [0189.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18570) returned 1 Thread: id = 5994 os_tid = 0x1618 [0185.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aee70 [0185.445] wcscpy (in: _Dest=0x68aee70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0185.446] wcscat (in: _Dest=0x68aee70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0185.446] wcscat (in: _Dest=0x68aee70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*" [0185.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a420 [0185.446] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*", lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0188.716] wcscmp (_String1=".", _String2=".") returned 0 [0188.716] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.716] wcscmp (_String1="..", _String2=".") returned 1 [0188.716] wcscmp (_String1="..", _String2="..") returned 0 [0188.716] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.716] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.716] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67567a0 [0188.716] wcscpy (in: _Dest=0x67567a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0188.716] wcscat (in: _Dest=0x67567a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0188.716] wcscat (in: _Dest=0x67567a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" [0189.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67567a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0189.815] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x697a420 | out: lpFindFileData=0x697a420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.815] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0189.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a420) returned 1 [0189.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aee70) returned 1 [0189.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18670) returned 1 Thread: id = 5995 os_tid = 0x1670 [0185.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aef78 [0185.446] wcscpy (in: _Dest=0x68aef78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0185.446] wcscat (in: _Dest=0x68aef78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0185.446] wcscat (in: _Dest=0x68aef78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*" [0185.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d6a8 [0185.446] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*", lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2220 [0188.725] wcscmp (_String1=".", _String2=".") returned 0 [0188.725] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.725] wcscmp (_String1="..", _String2=".") returned 1 [0188.725] wcscmp (_String1="..", _String2="..") returned 0 [0188.725] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.725] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.725] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67591a8 [0188.725] wcscpy (in: _Dest=0x67591a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0188.725] wcscat (in: _Dest=0x67591a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0188.725] wcscat (in: _Dest=0x67591a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" [0189.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67591a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0189.840] FindNextFileW (in: hFindFile=0x66d2220, lpFindFileData=0x697d6a8 | out: lpFindFileData=0x697d6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.840] FindClose (in: hFindFile=0x66d2220 | out: hFindFile=0x66d2220) returned 1 [0189.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d6a8) returned 1 [0189.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aef78) returned 1 [0189.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18770) returned 1 Thread: id = 5996 os_tid = 0x1444 [0185.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af080 [0185.448] wcscpy (in: _Dest=0x68af080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0185.449] wcscat (in: _Dest=0x68af080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0185.449] wcscat (in: _Dest=0x68af080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*" [0185.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c368 [0185.449] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*", lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0188.715] wcscmp (_String1=".", _String2=".") returned 0 [0188.715] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.715] wcscmp (_String1="..", _String2=".") returned 1 [0188.715] wcscmp (_String1="..", _String2="..") returned 0 [0188.716] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.716] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.716] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6756678 [0188.716] wcscpy (in: _Dest=0x6756678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0188.716] wcscat (in: _Dest=0x6756678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0188.716] wcscat (in: _Dest=0x6756678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" [0189.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6756678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0189.813] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x697c368 | out: lpFindFileData=0x697c368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.813] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0189.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c368) returned 1 [0189.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af080) returned 1 [0189.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18870) returned 1 Thread: id = 5997 os_tid = 0x1448 [0185.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af188 [0185.449] wcscpy (in: _Dest=0x68af188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0185.449] wcscat (in: _Dest=0x68af188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0185.449] wcscat (in: _Dest=0x68af188, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*" [0185.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cf70 [0185.449] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*", lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d24a0 [0188.721] wcscmp (_String1=".", _String2=".") returned 0 [0188.721] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.721] wcscmp (_String1="..", _String2=".") returned 1 [0188.721] wcscmp (_String1="..", _String2="..") returned 0 [0188.721] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.721] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.721] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6758be0 [0188.721] wcscpy (in: _Dest=0x6758be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0188.722] wcscat (in: _Dest=0x6758be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0188.722] wcscat (in: _Dest=0x6758be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" [0189.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0189.829] FindNextFileW (in: hFindFile=0x66d24a0, lpFindFileData=0x697cf70 | out: lpFindFileData=0x697cf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.829] FindClose (in: hFindFile=0x66d24a0 | out: hFindFile=0x66d24a0) returned 1 [0189.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cf70) returned 1 [0189.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af188) returned 1 [0189.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18970) returned 1 Thread: id = 5998 os_tid = 0x144c [0185.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68af290 [0185.450] wcscpy (in: _Dest=0x68af290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0185.450] wcscat (in: _Dest=0x68af290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0185.450] wcscat (in: _Dest=0x68af290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*" [0185.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a688 [0185.450] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*", lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23a0 [0188.720] wcscmp (_String1=".", _String2=".") returned 0 [0188.720] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.720] wcscmp (_String1="..", _String2=".") returned 1 [0188.721] wcscmp (_String1="..", _String2="..") returned 0 [0188.721] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.721] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.721] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758ab8 [0188.721] wcscpy (in: _Dest=0x6758ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0188.721] wcscat (in: _Dest=0x6758ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0188.721] wcscat (in: _Dest=0x6758ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" [0189.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0189.827] FindNextFileW (in: hFindFile=0x66d23a0, lpFindFileData=0x697a688 | out: lpFindFileData=0x697a688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.827] FindClose (in: hFindFile=0x66d23a0 | out: hFindFile=0x66d23a0) returned 1 [0189.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a688) returned 1 [0189.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af290) returned 1 [0189.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18a70) returned 1 Thread: id = 5999 os_tid = 0x12e8 [0185.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af398 [0185.451] wcscpy (in: _Dest=0x68af398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0185.451] wcscat (in: _Dest=0x68af398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0185.451] wcscat (in: _Dest=0x68af398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*" [0185.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697a8f0 [0185.451] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*", lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0188.720] wcscmp (_String1=".", _String2=".") returned 0 [0188.720] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.720] wcscmp (_String1="..", _String2=".") returned 1 [0188.720] wcscmp (_String1="..", _String2="..") returned 0 [0188.720] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.720] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.720] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d54dd8 [0188.720] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0188.720] wcscat (in: _Dest=0x3d54dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0188.720] wcscat (in: _Dest=0x3d54dd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" [0189.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d54dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0189.825] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x697a8f0 | out: lpFindFileData=0x697a8f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.825] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0189.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697a8f0) returned 1 [0189.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af398) returned 1 [0189.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18b70) returned 1 Thread: id = 6000 os_tid = 0x1584 [0185.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af4a0 [0185.451] wcscpy (in: _Dest=0x68af4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0185.451] wcscat (in: _Dest=0x68af4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0185.451] wcscat (in: _Dest=0x68af4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*" [0185.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697caa0 [0185.451] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*", lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0188.719] wcscmp (_String1=".", _String2=".") returned 0 [0188.719] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.719] wcscmp (_String1="..", _String2=".") returned 1 [0188.719] wcscmp (_String1="..", _String2="..") returned 0 [0188.719] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.719] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.719] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d553a0 [0188.719] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0188.719] wcscat (in: _Dest=0x3d553a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0188.719] wcscat (in: _Dest=0x3d553a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" [0189.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d553a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0189.823] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x697caa0 | out: lpFindFileData=0x697caa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.823] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0189.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697caa0) returned 1 [0189.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af4a0) returned 1 [0189.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18c70) returned 1 Thread: id = 6001 os_tid = 0x1588 [0185.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af5a8 [0185.452] wcscpy (in: _Dest=0x68af5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0185.452] wcscat (in: _Dest=0x68af5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0185.452] wcscat (in: _Dest=0x68af5a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*" [0185.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697bc30 [0185.452] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*", lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2120 [0188.724] wcscmp (_String1=".", _String2=".") returned 0 [0188.724] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.724] wcscmp (_String1="..", _String2=".") returned 1 [0188.724] wcscmp (_String1="..", _String2="..") returned 0 [0188.724] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.724] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.724] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759080 [0188.724] wcscpy (in: _Dest=0x6759080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0188.724] wcscat (in: _Dest=0x6759080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0188.724] wcscat (in: _Dest=0x6759080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" [0189.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0189.838] FindNextFileW (in: hFindFile=0x66d2120, lpFindFileData=0x697bc30 | out: lpFindFileData=0x697bc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.838] FindClose (in: hFindFile=0x66d2120 | out: hFindFile=0x66d2120) returned 1 [0189.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697bc30) returned 1 [0189.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af5a8) returned 1 [0189.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18d70) returned 1 Thread: id = 6002 os_tid = 0x158c [0185.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af6b0 [0185.453] wcscpy (in: _Dest=0x68af6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0185.453] wcscat (in: _Dest=0x68af6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0185.453] wcscat (in: _Dest=0x68af6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*" [0185.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697adc0 [0185.453] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*", lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0188.718] wcscmp (_String1=".", _String2=".") returned 0 [0188.718] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.718] wcscmp (_String1="..", _String2=".") returned 1 [0188.718] wcscmp (_String1="..", _String2="..") returned 0 [0188.718] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.718] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.718] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d555f0 [0188.718] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0188.718] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0188.718] wcscat (in: _Dest=0x3d555f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" [0189.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8 [0189.821] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x697adc0 | out: lpFindFileData=0x697adc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.821] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0189.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697adc0) returned 1 [0189.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af6b0) returned 1 [0189.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e70) returned 1 Thread: id = 6003 os_tid = 0x1590 [0185.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af7b8 [0185.453] wcscpy (in: _Dest=0x68af7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0185.453] wcscat (in: _Dest=0x68af7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0185.453] wcscat (in: _Dest=0x68af7b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*" [0185.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d440 [0185.453] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*", lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2260 [0188.723] wcscmp (_String1=".", _String2=".") returned 0 [0188.723] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.723] wcscmp (_String1="..", _String2=".") returned 1 [0188.723] wcscmp (_String1="..", _String2="..") returned 0 [0188.723] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.723] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.723] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6758f58 [0188.724] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0188.724] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0188.724] wcscat (in: _Dest=0x6758f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" [0189.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0189.836] FindNextFileW (in: hFindFile=0x66d2260, lpFindFileData=0x697d440 | out: lpFindFileData=0x697d440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.836] FindClose (in: hFindFile=0x66d2260 | out: hFindFile=0x66d2260) returned 1 [0189.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d440) returned 1 [0189.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af7b8) returned 1 [0189.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f70) returned 1 Thread: id = 6004 os_tid = 0x1594 [0185.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af8c0 [0185.454] wcscpy (in: _Dest=0x68af8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0185.454] wcscat (in: _Dest=0x68af8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0185.454] wcscat (in: _Dest=0x68af8c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*" [0185.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d1d8 [0185.454] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*", lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0188.717] wcscmp (_String1=".", _String2=".") returned 0 [0188.717] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.718] wcscmp (_String1="..", _String2=".") returned 1 [0188.718] wcscmp (_String1="..", _String2="..") returned 0 [0188.718] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.718] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.718] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55968 [0188.718] wcscpy (in: _Dest=0x3d55968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0188.718] wcscat (in: _Dest=0x3d55968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0188.718] wcscat (in: _Dest=0x3d55968, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" [0189.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0189.819] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x697d1d8 | out: lpFindFileData=0x697d1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.819] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0189.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d1d8) returned 1 [0189.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af8c0) returned 1 [0189.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9bb00) returned 1 Thread: id = 6005 os_tid = 0x738 [0185.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68af9c8 [0185.455] wcscpy (in: _Dest=0x68af9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0185.455] wcscat (in: _Dest=0x68af9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0185.455] wcscat (in: _Dest=0x68af9c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*" [0185.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697d910 [0185.455] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*", lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2520 [0188.722] wcscmp (_String1=".", _String2=".") returned 0 [0188.722] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.723] wcscmp (_String1="..", _String2=".") returned 1 [0188.723] wcscmp (_String1="..", _String2="..") returned 0 [0188.723] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.723] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.723] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6758e30 [0188.723] wcscpy (in: _Dest=0x6758e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0188.723] wcscat (in: _Dest=0x6758e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0188.723] wcscat (in: _Dest=0x6758e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" [0189.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0189.834] FindNextFileW (in: hFindFile=0x66d2520, lpFindFileData=0x697d910 | out: lpFindFileData=0x697d910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.834] FindClose (in: hFindFile=0x66d2520 | out: hFindFile=0x66d2520) returned 1 [0189.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697d910) returned 1 [0189.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af9c8) returned 1 [0189.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f7ac8) returned 1 Thread: id = 6006 os_tid = 0xe34 [0185.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68afad0 [0185.455] wcscpy (in: _Dest=0x68afad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0185.455] wcscat (in: _Dest=0x68afad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0185.455] wcscat (in: _Dest=0x68afad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*" [0185.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c100 [0185.455] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*", lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0188.715] wcscmp (_String1=".", _String2=".") returned 0 [0188.715] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.715] wcscmp (_String1="..", _String2=".") returned 1 [0188.715] wcscmp (_String1="..", _String2="..") returned 0 [0188.715] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.715] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.715] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6756550 [0188.715] wcscpy (in: _Dest=0x6756550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0188.715] wcscat (in: _Dest=0x6756550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0188.715] wcscat (in: _Dest=0x6756550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" [0189.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6756550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0189.811] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x697c100 | out: lpFindFileData=0x697c100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.811] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0189.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c100) returned 1 [0189.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68afad0) returned 1 [0189.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee7d08) returned 1 Thread: id = 6007 os_tid = 0x15b4 [0185.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752ab8 [0185.456] wcscpy (in: _Dest=0x6752ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0185.456] wcscat (in: _Dest=0x6752ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0185.456] wcscat (in: _Dest=0x6752ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*" [0185.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c838 [0185.456] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*", lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0188.714] wcscmp (_String1=".", _String2=".") returned 0 [0188.714] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.714] wcscmp (_String1="..", _String2=".") returned 1 [0188.714] wcscmp (_String1="..", _String2="..") returned 0 [0188.714] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.714] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.714] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6756428 [0188.714] wcscpy (in: _Dest=0x6756428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0188.714] wcscat (in: _Dest=0x6756428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0188.714] wcscat (in: _Dest=0x6756428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" [0189.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6756428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388 [0189.809] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x697c838 | out: lpFindFileData=0x697c838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.809] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0189.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c838) returned 1 [0189.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752ab8) returned 1 [0189.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee7e08) returned 1 Thread: id = 6008 os_tid = 0xfec [0185.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752bc0 [0185.456] wcscpy (in: _Dest=0x6752bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0185.457] wcscat (in: _Dest=0x6752bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0185.457] wcscat (in: _Dest=0x6752bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*" [0185.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b9c8 [0185.457] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*", lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0188.713] wcscmp (_String1=".", _String2=".") returned 0 [0188.713] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.713] wcscmp (_String1="..", _String2=".") returned 1 [0188.713] wcscmp (_String1="..", _String2="..") returned 0 [0188.713] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.713] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.713] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6756300 [0188.714] wcscpy (in: _Dest=0x6756300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0188.714] wcscat (in: _Dest=0x6756300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0188.714] wcscat (in: _Dest=0x6756300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" [0189.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6756300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0189.807] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x697b9c8 | out: lpFindFileData=0x697b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.807] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0189.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b9c8) returned 1 [0189.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752bc0) returned 1 [0189.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee7f08) returned 1 Thread: id = 6009 os_tid = 0xc14 [0185.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752cc8 [0185.457] wcscpy (in: _Dest=0x6752cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0185.457] wcscat (in: _Dest=0x6752cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0185.457] wcscat (in: _Dest=0x6752cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*" [0185.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697be98 [0185.457] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*", lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0188.704] wcscmp (_String1=".", _String2=".") returned 0 [0188.704] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.704] wcscmp (_String1="..", _String2=".") returned 1 [0188.704] wcscmp (_String1="..", _String2="..") returned 0 [0188.704] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.705] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.705] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67560b0 [0188.705] wcscpy (in: _Dest=0x67560b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0188.705] wcscat (in: _Dest=0x67560b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0188.705] wcscat (in: _Dest=0x67560b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" [0190.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67560b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0190.698] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x697be98 | out: lpFindFileData=0x697be98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.698] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0190.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697be98) returned 1 [0190.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752cc8) returned 1 [0190.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8008) returned 1 Thread: id = 6010 os_tid = 0xb40 [0185.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6752dd0 [0185.458] wcscpy (in: _Dest=0x6752dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0185.458] wcscat (in: _Dest=0x6752dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0185.458] wcscat (in: _Dest=0x6752dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*" [0185.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697cd08 [0185.458] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*", lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2320 [0188.722] wcscmp (_String1=".", _String2=".") returned 0 [0188.722] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.722] wcscmp (_String1="..", _String2=".") returned 1 [0188.722] wcscmp (_String1="..", _String2="..") returned 0 [0188.722] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.722] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.722] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6758d08 [0188.722] wcscpy (in: _Dest=0x6758d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0188.722] wcscat (in: _Dest=0x6758d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0188.722] wcscat (in: _Dest=0x6758d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" [0189.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0189.831] FindNextFileW (in: hFindFile=0x66d2320, lpFindFileData=0x697cd08 | out: lpFindFileData=0x697cd08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.831] FindClose (in: hFindFile=0x66d2320 | out: hFindFile=0x66d2320) returned 1 [0189.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697cd08) returned 1 [0189.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752dd0) returned 1 [0189.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8108) returned 1 Thread: id = 6011 os_tid = 0x888 [0185.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6754168 [0185.680] wcscpy (in: _Dest=0x6754168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0185.680] wcscat (in: _Dest=0x6754168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0185.680] wcscat (in: _Dest=0x6754168, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*" [0185.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0185.680] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22e0 [0188.726] wcscmp (_String1=".", _String2=".") returned 0 [0188.727] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.727] wcscmp (_String1="..", _String2=".") returned 1 [0188.727] wcscmp (_String1="..", _String2="..") returned 0 [0188.727] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.727] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.727] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759520 [0188.727] wcscpy (in: _Dest=0x6759520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0188.727] wcscat (in: _Dest=0x6759520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0188.727] wcscat (in: _Dest=0x6759520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" [0189.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0189.846] FindNextFileW (in: hFindFile=0x66d22e0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.846] FindClose (in: hFindFile=0x66d22e0 | out: hFindFile=0x66d22e0) returned 1 [0189.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0189.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754168) returned 1 [0189.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8208) returned 1 Thread: id = 6012 os_tid = 0x8d8 [0185.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754270 [0185.687] wcscpy (in: _Dest=0x6754270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0185.687] wcscat (in: _Dest=0x6754270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0185.687] wcscat (in: _Dest=0x6754270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*" [0185.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697b4f8 [0185.687] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*", lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0189.700] wcscmp (_String1=".", _String2=".") returned 0 [0189.700] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.701] wcscmp (_String1="..", _String2=".") returned 1 [0189.701] wcscmp (_String1="..", _String2="..") returned 0 [0189.701] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4166210, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.701] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.701] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958628 [0189.701] wcscpy (in: _Dest=0x6958628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0189.701] wcscat (in: _Dest=0x6958628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0189.701] wcscat (in: _Dest=0x6958628, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" [0189.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0190.000] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x697b4f8 | out: lpFindFileData=0x697b4f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4166210, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.000] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0190.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697b4f8) returned 1 [0190.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754270) returned 1 [0190.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ace70) returned 1 Thread: id = 6013 os_tid = 0x8d4 [0185.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754378 [0185.688] wcscpy (in: _Dest=0x6754378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0185.688] wcscat (in: _Dest=0x6754378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0185.688] wcscat (in: _Dest=0x6754378, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*" [0185.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12e50 [0185.688] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*", lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d28e0 [0188.972] wcscmp (_String1=".", _String2=".") returned 0 [0188.972] FindNextFileW (in: hFindFile=0x66d28e0, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.972] wcscmp (_String1="..", _String2=".") returned 1 [0188.977] wcscmp (_String1="..", _String2="..") returned 0 [0188.977] FindNextFileW (in: hFindFile=0x66d28e0, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.983] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.983] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x330cd0 [0188.983] wcscpy (in: _Dest=0x330cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0188.983] wcscat (in: _Dest=0x330cd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0188.983] wcscat (in: _Dest=0x330cd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" [0189.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x330cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480 [0189.887] FindNextFileW (in: hFindFile=0x66d28e0, lpFindFileData=0x3f12e50 | out: lpFindFileData=0x3f12e50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.887] FindClose (in: hFindFile=0x66d28e0 | out: hFindFile=0x66d28e0) returned 1 [0189.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12e50) returned 1 [0189.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754378) returned 1 [0189.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752ed8) returned 1 Thread: id = 6014 os_tid = 0x8e0 [0185.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754480 [0185.689] wcscpy (in: _Dest=0x6754480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0185.689] wcscat (in: _Dest=0x6754480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0185.689] wcscat (in: _Dest=0x6754480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*" [0185.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea498 [0185.689] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*", lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2920 [0188.984] wcscmp (_String1=".", _String2=".") returned 0 [0188.984] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.984] wcscmp (_String1="..", _String2=".") returned 1 [0188.984] wcscmp (_String1="..", _String2="..") returned 0 [0188.984] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.984] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.984] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x331860 [0188.984] wcscpy (in: _Dest=0x331860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0188.984] wcscat (in: _Dest=0x331860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0188.984] wcscat (in: _Dest=0x331860, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" [0189.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x331860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0189.889] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.889] FindClose (in: hFindFile=0x66d2920 | out: hFindFile=0x66d2920) returned 1 [0189.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0189.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754480) returned 1 [0189.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752fe0) returned 1 Thread: id = 6015 os_tid = 0xe50 [0185.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754588 [0185.690] wcscpy (in: _Dest=0x6754588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0185.690] wcscat (in: _Dest=0x6754588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0185.690] wcscat (in: _Dest=0x6754588, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*" [0185.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea700 [0185.691] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*", lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0189.691] wcscmp (_String1=".", _String2=".") returned 0 [0189.691] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.691] wcscmp (_String1="..", _String2=".") returned 1 [0189.691] wcscmp (_String1="..", _String2="..") returned 0 [0189.691] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b1d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.691] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.691] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674f1a8 [0189.691] wcscpy (in: _Dest=0x674f1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0189.691] wcscat (in: _Dest=0x674f1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0189.691] wcscat (in: _Dest=0x674f1a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" [0191.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0191.617] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b1d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.617] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0191.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea700) returned 1 [0191.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754588) returned 1 [0191.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67530e8) returned 1 Thread: id = 6016 os_tid = 0x9b4 [0185.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bd140 [0185.692] wcscpy (in: _Dest=0x30bd140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0185.692] wcscat (in: _Dest=0x30bd140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0185.692] wcscat (in: _Dest=0x30bd140, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*" [0185.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea968 [0185.692] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0189.702] wcscmp (_String1=".", _String2=".") returned 0 [0189.702] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.702] wcscmp (_String1="..", _String2=".") returned 1 [0189.702] wcscmp (_String1="..", _String2="..") returned 0 [0189.702] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42248f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.702] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.702] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6958878 [0189.702] wcscpy (in: _Dest=0x6958878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0189.702] wcscat (in: _Dest=0x6958878, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0189.702] wcscat (in: _Dest=0x6958878, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" [0190.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0190.019] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42248f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.019] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0190.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea968) returned 1 [0190.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0190.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67531f0) returned 1 Thread: id = 6017 os_tid = 0xb2c [0185.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bba48 [0185.694] wcscpy (in: _Dest=0x30bba48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0185.694] wcscat (in: _Dest=0x30bba48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0185.694] wcscat (in: _Dest=0x30bba48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*" [0185.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eabd0 [0185.694] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0189.692] wcscmp (_String1=".", _String2=".") returned 0 [0189.692] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.692] wcscmp (_String1="..", _String2=".") returned 1 [0189.692] wcscmp (_String1="..", _String2="..") returned 0 [0189.692] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.692] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.692] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674ed08 [0189.692] wcscpy (in: _Dest=0x674ed08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0189.692] wcscat (in: _Dest=0x674ed08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0189.692] wcscat (in: _Dest=0x674ed08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" [0191.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ed08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0191.619] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.619] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0191.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabd0) returned 1 [0191.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0191.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67532f8) returned 1 Thread: id = 6018 os_tid = 0xb20 [0185.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754690 [0185.695] wcscpy (in: _Dest=0x6754690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0185.695] wcscat (in: _Dest=0x6754690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0185.695] wcscat (in: _Dest=0x6754690, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*" [0185.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eae38 [0185.696] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*", lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0189.693] wcscmp (_String1=".", _String2=".") returned 0 [0189.693] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.693] wcscmp (_String1="..", _String2=".") returned 1 [0189.693] wcscmp (_String1="..", _String2="..") returned 0 [0189.693] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.693] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.693] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755e60 [0189.693] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0189.693] wcscat (in: _Dest=0x6755e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0189.693] wcscat (in: _Dest=0x6755e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" [0189.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0189.968] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.969] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0189.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae38) returned 1 [0189.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754690) returned 1 [0189.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753400) returned 1 Thread: id = 6019 os_tid = 0xac4 [0185.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754798 [0185.698] wcscpy (in: _Dest=0x6754798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0185.698] wcscat (in: _Dest=0x6754798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0185.698] wcscat (in: _Dest=0x6754798, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*" [0185.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb0a0 [0185.698] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*", lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0189.693] wcscmp (_String1=".", _String2=".") returned 0 [0189.693] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.693] wcscmp (_String1="..", _String2=".") returned 1 [0189.694] wcscmp (_String1="..", _String2="..") returned 0 [0189.694] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.694] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.694] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3040a68 [0189.694] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0189.694] wcscat (in: _Dest=0x3040a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0189.694] wcscat (in: _Dest=0x3040a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" [0189.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3040a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0189.972] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.972] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0189.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0189.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754798) returned 1 [0189.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753508) returned 1 Thread: id = 6020 os_tid = 0xabc [0185.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67548a0 [0185.699] wcscpy (in: _Dest=0x67548a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0185.699] wcscat (in: _Dest=0x67548a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0185.699] wcscat (in: _Dest=0x67548a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*" [0185.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb308 [0185.699] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*", lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0189.694] wcscmp (_String1=".", _String2=".") returned 0 [0189.694] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.694] wcscmp (_String1="..", _String2=".") returned 1 [0189.694] wcscmp (_String1="..", _String2="..") returned 0 [0189.694] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.694] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.694] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6957ce8 [0189.694] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0189.694] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0189.695] wcscat (in: _Dest=0x6957ce8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" [0189.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0189.975] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.975] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0189.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb308) returned 1 [0189.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67548a0) returned 1 [0189.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753610) returned 1 Thread: id = 6021 os_tid = 0xfac [0185.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756ab8 [0185.700] wcscpy (in: _Dest=0x6756ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0185.700] wcscat (in: _Dest=0x6756ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0185.700] wcscat (in: _Dest=0x6756ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*" [0185.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb570 [0185.700] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*", lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0189.695] wcscmp (_String1=".", _String2=".") returned 0 [0189.695] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.695] wcscmp (_String1="..", _String2=".") returned 1 [0189.695] wcscmp (_String1="..", _String2="..") returned 0 [0189.695] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.695] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.695] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6957e10 [0189.695] wcscpy (in: _Dest=0x6957e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0189.695] wcscat (in: _Dest=0x6957e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0189.695] wcscat (in: _Dest=0x6957e10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" [0189.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0189.978] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.978] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0189.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb570) returned 1 [0189.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756ab8) returned 1 [0189.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753718) returned 1 Thread: id = 6022 os_tid = 0x240 [0185.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756bc0 [0185.704] wcscpy (in: _Dest=0x6756bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0185.704] wcscat (in: _Dest=0x6756bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0185.704] wcscat (in: _Dest=0x6756bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*" [0185.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb7d8 [0185.704] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*", lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0189.696] wcscmp (_String1=".", _String2=".") returned 0 [0189.696] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.696] wcscmp (_String1="..", _String2=".") returned 1 [0189.696] wcscmp (_String1="..", _String2="..") returned 0 [0189.696] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.696] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.696] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6957f38 [0189.696] wcscpy (in: _Dest=0x6957f38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0189.696] wcscat (in: _Dest=0x6957f38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0189.696] wcscat (in: _Dest=0x6957f38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" [0189.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0189.981] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.981] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0189.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7d8) returned 1 [0189.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756bc0) returned 1 [0189.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753820) returned 1 Thread: id = 6023 os_tid = 0x13fc [0185.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756cc8 [0185.705] wcscpy (in: _Dest=0x6756cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0185.705] wcscat (in: _Dest=0x6756cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0185.705] wcscat (in: _Dest=0x6756cc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*" [0185.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eba40 [0185.705] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*", lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0189.700] wcscmp (_String1=".", _String2=".") returned 0 [0189.700] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.700] wcscmp (_String1="..", _String2=".") returned 1 [0189.700] wcscmp (_String1="..", _String2="..") returned 0 [0189.700] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.700] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.700] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958500 [0189.700] wcscpy (in: _Dest=0x6958500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0189.700] wcscat (in: _Dest=0x6958500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0189.700] wcscat (in: _Dest=0x6958500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" [0189.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0189.997] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.997] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0189.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba40) returned 1 [0189.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756cc8) returned 1 [0189.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753928) returned 1 Thread: id = 6024 os_tid = 0x15d8 [0185.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756dd0 [0185.706] wcscpy (in: _Dest=0x6756dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0185.706] wcscat (in: _Dest=0x6756dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0185.706] wcscat (in: _Dest=0x6756dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*" [0185.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebca8 [0185.707] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*", lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0189.699] wcscmp (_String1=".", _String2=".") returned 0 [0189.699] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.699] wcscmp (_String1="..", _String2=".") returned 1 [0189.699] wcscmp (_String1="..", _String2="..") returned 0 [0189.699] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.699] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.699] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69583d8 [0189.699] wcscpy (in: _Dest=0x69583d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0189.699] wcscat (in: _Dest=0x69583d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0189.699] wcscat (in: _Dest=0x69583d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" [0189.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69583d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0189.993] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.993] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0189.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebca8) returned 1 [0189.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756dd0) returned 1 [0189.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753a30) returned 1 Thread: id = 6025 os_tid = 0x16a0 [0185.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756ed8 [0185.708] wcscpy (in: _Dest=0x6756ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0185.708] wcscat (in: _Dest=0x6756ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0185.708] wcscat (in: _Dest=0x6756ed8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*" [0185.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebf10 [0185.708] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*", lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0189.698] wcscmp (_String1=".", _String2=".") returned 0 [0189.698] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.698] wcscmp (_String1="..", _String2=".") returned 1 [0189.698] wcscmp (_String1="..", _String2="..") returned 0 [0189.698] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ed1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.698] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.699] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69582b0 [0189.699] wcscpy (in: _Dest=0x69582b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0189.699] wcscat (in: _Dest=0x69582b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0189.699] wcscat (in: _Dest=0x69582b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" [0189.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0189.990] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ed1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.990] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0189.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf10) returned 1 [0189.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756ed8) returned 1 [0189.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753b38) returned 1 Thread: id = 6026 os_tid = 0x16a4 [0185.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756fe0 [0185.711] wcscpy (in: _Dest=0x6756fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0185.711] wcscat (in: _Dest=0x6756fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0185.711] wcscat (in: _Dest=0x6756fe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*" [0185.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec178 [0185.711] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*", lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0189.697] wcscmp (_String1=".", _String2=".") returned 0 [0189.697] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.697] wcscmp (_String1="..", _String2=".") returned 1 [0189.697] wcscmp (_String1="..", _String2="..") returned 0 [0189.697] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.698] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.698] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958188 [0189.698] wcscpy (in: _Dest=0x6958188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0189.698] wcscat (in: _Dest=0x6958188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0189.698] wcscat (in: _Dest=0x6958188, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" [0189.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0189.987] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.987] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0189.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec178) returned 1 [0189.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756fe0) returned 1 [0189.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753c40) returned 1 Thread: id = 6027 os_tid = 0x308 [0185.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67570e8 [0185.712] wcscpy (in: _Dest=0x67570e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0185.712] wcscat (in: _Dest=0x67570e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0185.712] wcscat (in: _Dest=0x67570e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*" [0185.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec3e0 [0185.712] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*", lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0189.696] wcscmp (_String1=".", _String2=".") returned 0 [0189.696] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.697] wcscmp (_String1="..", _String2=".") returned 1 [0189.697] wcscmp (_String1="..", _String2="..") returned 0 [0189.697] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.697] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.697] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958060 [0189.697] wcscpy (in: _Dest=0x6958060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0189.697] wcscat (in: _Dest=0x6958060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0189.697] wcscat (in: _Dest=0x6958060, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" [0189.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0189.984] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.984] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0189.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3e0) returned 1 [0189.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67570e8) returned 1 [0189.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753d48) returned 1 Thread: id = 6028 os_tid = 0x75c [0185.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750e00 [0185.713] wcscpy (in: _Dest=0x6750e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0185.713] wcscat (in: _Dest=0x6750e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0185.713] wcscat (in: _Dest=0x6750e00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*" [0185.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec648 [0185.713] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0189.701] wcscmp (_String1=".", _String2=".") returned 0 [0189.701] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.701] wcscmp (_String1="..", _String2=".") returned 1 [0189.701] wcscmp (_String1="..", _String2="..") returned 0 [0189.701] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.701] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.701] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6958750 [0189.701] wcscpy (in: _Dest=0x6958750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0189.701] wcscat (in: _Dest=0x6958750, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0189.701] wcscat (in: _Dest=0x6958750, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" [0190.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0190.002] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.002] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec648) returned 1 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753e50) returned 1 Thread: id = 6029 os_tid = 0x7e8 [0185.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750f18 [0185.714] wcscpy (in: _Dest=0x6750f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0185.714] wcscat (in: _Dest=0x6750f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0185.714] wcscat (in: _Dest=0x6750f18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*" [0185.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec8b0 [0185.714] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d28a0 [0188.967] wcscmp (_String1=".", _String2=".") returned 0 [0188.967] FindNextFileW (in: hFindFile=0x66d28a0, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.967] wcscmp (_String1="..", _String2=".") returned 1 [0188.967] wcscmp (_String1="..", _String2="..") returned 0 [0188.967] FindNextFileW (in: hFindFile=0x66d28a0, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.967] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.967] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674ef58 [0188.967] wcscpy (in: _Dest=0x674ef58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0188.967] wcscat (in: _Dest=0x674ef58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0188.967] wcscat (in: _Dest=0x674ef58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" [0189.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ef58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330 [0189.883] FindNextFileW (in: hFindFile=0x66d28a0, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.884] FindClose (in: hFindFile=0x66d28a0 | out: hFindFile=0x66d28a0) returned 1 [0189.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0189.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750f18) returned 1 [0189.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753f58) returned 1 Thread: id = 6030 os_tid = 0xec8 [0185.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 0x20 [0185.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0185.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.715] GetLastError () returned 0x5 [0185.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0185.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5670) returned 1 Thread: id = 6031 os_tid = 0xf4c [0185.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea5670 [0185.717] wcscpy (in: _Dest=0x3ea5670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0185.717] wcscat (in: _Dest=0x3ea5670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0185.717] wcscat (in: _Dest=0x3ea5670, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*" [0185.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecb18 [0185.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0188.705] wcscmp (_String1=".", _String2=".") returned 0 [0188.705] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.705] wcscmp (_String1="..", _String2=".") returned 1 [0188.705] wcscmp (_String1="..", _String2="..") returned 0 [0188.705] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0188.705] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0188.705] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0188.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dada38 [0188.705] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0188.705] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0188.705] wcscat (in: _Dest=0x3dada38, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" [0190.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0190.701] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0190.701] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0190.701] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0190.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8598 [0190.701] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0190.701] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0190.701] wcscat (in: _Dest=0x3ea8598, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" [0190.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0190.702] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0190.702] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0190.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb18) returned 1 [0190.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5670) returned 1 [0190.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5e50) returned 1 Thread: id = 6032 os_tid = 0x2004 [0185.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 0x20 [0188.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0188.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.752] GetLastError () returned 0x5 [0188.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0188.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 Thread: id = 6033 os_tid = 0x2008 [0185.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea54b0 [0185.719] wcscpy (in: _Dest=0x3ea54b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0185.719] wcscat (in: _Dest=0x3ea54b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0185.719] wcscat (in: _Dest=0x3ea54b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*" [0185.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecd80 [0185.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d27e0 [0188.751] wcscmp (_String1=".", _String2=".") returned 0 [0188.751] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.751] wcscmp (_String1="..", _String2=".") returned 1 [0188.751] wcscmp (_String1="..", _String2="..") returned 0 [0188.751] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0188.751] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0188.751] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0188.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8e08 [0188.752] wcscpy (in: _Dest=0x3ea8e08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0188.752] wcscat (in: _Dest=0x3ea8e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0188.752] wcscat (in: _Dest=0x3ea8e08, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0195.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0195.558] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.558] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.558] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8d18 [0195.558] wcscpy (in: _Dest=0x3ea8d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0195.558] wcscat (in: _Dest=0x3ea8d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0195.558] wcscat (in: _Dest=0x3ea8d18, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" [0195.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0195.559] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.559] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.560] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea84a8 [0195.560] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0195.560] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0195.560] wcscat (in: _Dest=0x3ea84a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0195.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea84a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0195.561] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.561] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.561] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8778 [0195.561] wcscpy (in: _Dest=0x3ea8778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0195.561] wcscat (in: _Dest=0x3ea8778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0195.561] wcscat (in: _Dest=0x3ea8778, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0195.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0195.562] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66ecd80 | out: lpFindFileData=0x66ecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.562] FindClose (in: hFindFile=0x66d27e0 | out: hFindFile=0x66d27e0) returned 1 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd80) returned 1 [0195.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea54b0) returned 1 [0195.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 Thread: id = 6034 os_tid = 0x200c [0185.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 0x20 [0188.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0188.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.750] GetLastError () returned 0x5 [0188.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0188.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4e90) returned 1 Thread: id = 6035 os_tid = 0x2010 [0185.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e48580 [0185.721] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0185.721] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0185.721] wcscat (in: _Dest=0x3e48580, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*" [0185.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecfe8 [0185.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2720 [0188.743] wcscmp (_String1=".", _String2=".") returned 0 [0188.743] FindNextFileW (in: hFindFile=0x66d2720, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.743] wcscmp (_String1="..", _String2=".") returned 1 [0188.743] wcscmp (_String1="..", _String2="..") returned 0 [0188.744] FindNextFileW (in: hFindFile=0x66d2720, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0188.744] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0188.744] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0188.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8a48 [0188.744] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0188.744] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0188.744] wcscat (in: _Dest=0x3ea8a48, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0189.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0189.876] FindNextFileW (in: hFindFile=0x66d2720, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0189.876] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0189.876] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0189.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8fe8 [0189.876] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0189.876] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0189.876] wcscat (in: _Dest=0x3ea8fe8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" [0189.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0189.877] FindNextFileW (in: hFindFile=0x66d2720, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0189.877] FindClose (in: hFindFile=0x66d2720 | out: hFindFile=0x66d2720) returned 1 [0189.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfe8) returned 1 [0189.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 [0189.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 Thread: id = 6036 os_tid = 0x2014 [0185.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 0x20 [0188.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0188.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.749] GetLastError () returned 0x5 [0188.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0188.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5750) returned 1 Thread: id = 6037 os_tid = 0x2018 [0185.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57318 [0185.722] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0185.722] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0185.722] wcscat (in: _Dest=0x3d57318, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*" [0185.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed250 [0185.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d27a0 [0188.748] wcscmp (_String1=".", _String2=".") returned 0 [0188.748] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.748] wcscmp (_String1="..", _String2=".") returned 1 [0188.748] wcscmp (_String1="..", _String2="..") returned 0 [0188.748] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0188.748] wcscmp (_String1="background.gif", _String2=".") returned 1 [0188.748] wcscmp (_String1="background.gif", _String2="..") returned 1 [0188.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15370 [0188.748] wcscpy (in: _Dest=0x3e15370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0188.748] wcscat (in: _Dest=0x3e15370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0188.748] wcscat (in: _Dest=0x3e15370, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" [0189.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0189.879] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0189.879] wcscmp (_String1="button.gif", _String2=".") returned 1 [0189.879] wcscmp (_String1="button.gif", _String2="..") returned 1 [0189.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae008 [0189.879] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0189.879] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0189.879] wcscat (in: _Dest=0x3dae008, _Source="button.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" [0189.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0189.880] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0189.880] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0189.880] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0189.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dade18 [0189.880] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0189.880] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0189.880] wcscat (in: _Dest=0x3dade18, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" [0189.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0189.881] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0189.881] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0189.881] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0189.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0189.882] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0189.882] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0189.882] wcscat (in: _Dest=0x3dae1f8, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" [0189.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a0 [0189.885] FindNextFileW (in: hFindFile=0x66d27a0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0189.885] FindClose (in: hFindFile=0x66d27a0 | out: hFindFile=0x66d27a0) returned 1 [0189.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed250) returned 1 [0189.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 [0189.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea52f0) returned 1 Thread: id = 6038 os_tid = 0x201c [0185.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 0x20 [0188.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0188.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.747] GetLastError () returned 0x5 [0188.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0188.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 6039 os_tid = 0x2020 [0185.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d57400 [0185.724] wcscpy (in: _Dest=0x3d57400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0185.724] wcscat (in: _Dest=0x3d57400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0185.724] wcscat (in: _Dest=0x3d57400, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*" [0185.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed4b8 [0185.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2760 [0188.746] wcscmp (_String1=".", _String2=".") returned 0 [0188.746] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.746] wcscmp (_String1="..", _String2=".") returned 1 [0188.746] wcscmp (_String1="..", _String2="..") returned 0 [0188.746] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0188.746] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0188.746] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0188.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadf10 [0188.746] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0188.746] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0188.746] wcscat (in: _Dest=0x3dadf10, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" [0191.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0191.622] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.622] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.622] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad560 [0191.622] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0191.622] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0191.622] wcscat (in: _Dest=0x3dad560, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0191.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0191.623] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0191.623] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0191.623] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0191.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae100 [0191.624] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0191.624] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0191.624] wcscat (in: _Dest=0x3dae100, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0191.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0191.625] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0191.625] FindClose (in: hFindFile=0x66d2760 | out: hFindFile=0x66d2760) returned 1 [0191.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed4b8) returned 1 [0191.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57400) returned 1 [0191.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4870) returned 1 Thread: id = 6040 os_tid = 0x2024 [0185.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 0x20 [0188.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0188.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.497] GetLastError () returned 0x5 [0188.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0188.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 6041 os_tid = 0x2028 [0185.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 0x20 [0188.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0188.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.744] GetLastError () returned 0x5 [0188.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0188.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4b10) returned 1 Thread: id = 6042 os_tid = 0x202c [0185.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 0x20 [0188.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0188.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.711] GetLastError () returned 0x5 [0188.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0188.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea60f0) returned 1 Thread: id = 6043 os_tid = 0x20a0 [0185.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e488e0 [0185.726] wcscpy (in: _Dest=0x3e488e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0185.726] wcscat (in: _Dest=0x3e488e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0185.726] wcscat (in: _Dest=0x3e488e0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*" [0185.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed720 [0185.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2860 [0188.761] wcscmp (_String1=".", _String2=".") returned 0 [0188.761] FindNextFileW (in: hFindFile=0x66d2860, lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.761] wcscmp (_String1="..", _String2=".") returned 1 [0188.761] wcscmp (_String1="..", _String2="..") returned 0 [0188.761] FindNextFileW (in: hFindFile=0x66d2860, lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0188.761] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0188.761] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0188.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8688 [0188.761] wcscpy (in: _Dest=0x3ea8688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0188.761] wcscat (in: _Dest=0x3ea8688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0188.761] wcscat (in: _Dest=0x3ea8688, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" [0201.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0201.423] FindNextFileW (in: hFindFile=0x66d2860, lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.423] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.423] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8fe8 [0201.423] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0201.423] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0201.423] wcscat (in: _Dest=0x3ea8fe8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" [0201.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0201.425] FindNextFileW (in: hFindFile=0x66d2860, lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.425] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.425] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8a48 [0201.425] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0201.425] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0201.425] wcscat (in: _Dest=0x3ea8a48, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" [0201.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0201.426] FindNextFileW (in: hFindFile=0x66d2860, lpFindFileData=0x66ed720 | out: lpFindFileData=0x66ed720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.426] FindClose (in: hFindFile=0x66d2860 | out: hFindFile=0x66d2860) returned 1 [0201.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed720) returned 1 [0201.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 [0201.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 Thread: id = 6044 os_tid = 0x20a8 [0185.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 0x20 [0188.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0188.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.760] GetLastError () returned 0x5 [0188.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0188.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6010) returned 1 Thread: id = 6045 os_tid = 0x211c [0185.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 0x20 [0188.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0188.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.758] GetLastError () returned 0x5 [0188.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0188.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4cd0) returned 1 Thread: id = 6046 os_tid = 0x2190 [0185.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x3ea4db0 [0185.728] wcscpy (in: _Dest=0x3ea4db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0185.728] wcscat (in: _Dest=0x3ea4db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0185.729] wcscat (in: _Dest=0x3ea4db0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*" [0185.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed988 [0185.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0188.710] wcscmp (_String1=".", _String2=".") returned 0 [0188.710] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.710] wcscmp (_String1="..", _String2=".") returned 1 [0188.711] wcscmp (_String1="..", _String2="..") returned 0 [0188.711] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0188.711] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0188.711] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0188.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8b38 [0188.711] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0188.711] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0188.711] wcscat (in: _Dest=0x3ea8b38, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" [0190.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0190.200] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0190.200] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0190.200] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0190.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadd20 [0190.200] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0190.200] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0190.200] wcscat (in: _Dest=0x3dadd20, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0190.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0190.202] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0190.202] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0190.202] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0190.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8d18 [0190.202] wcscpy (in: _Dest=0x3ea8d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0190.202] wcscat (in: _Dest=0x3ea8d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0190.202] wcscat (in: _Dest=0x3ea8d18, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0190.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0190.203] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0190.203] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0190.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed988) returned 1 [0190.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4db0) returned 1 [0190.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4950) returned 1 Thread: id = 6047 os_tid = 0x2194 [0185.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 0x20 [0188.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0188.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.757] GetLastError () returned 0x5 [0188.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0188.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 6048 os_tid = 0x2198 [0185.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 0x20 [0188.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0188.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.756] GetLastError () returned 0x5 [0188.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0188.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5f30) returned 1 Thread: id = 6049 os_tid = 0x219c [0185.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 0x20 [0188.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0188.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.709] GetLastError () returned 0x5 [0188.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0188.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 6050 os_tid = 0x2214 [0185.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48658 [0185.731] wcscpy (in: _Dest=0x3e48658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0185.731] wcscat (in: _Dest=0x3e48658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0185.731] wcscat (in: _Dest=0x3e48658, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*" [0185.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66edbf0 [0185.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0188.709] wcscmp (_String1=".", _String2=".") returned 0 [0188.709] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.709] wcscmp (_String1="..", _String2=".") returned 1 [0188.709] wcscmp (_String1="..", _String2="..") returned 0 [0188.709] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0188.709] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0188.709] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0188.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56750 [0188.709] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0188.709] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0188.709] wcscat (in: _Dest=0x3d56750, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" [0189.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0189.798] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0189.798] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0189.798] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0189.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56cc0 [0189.799] wcscpy (in: _Dest=0x3d56cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0189.799] wcscat (in: _Dest=0x3d56cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0189.799] wcscat (in: _Dest=0x3d56cc0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" [0189.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0189.800] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0189.800] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0189.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edbf0) returned 1 [0189.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48658) returned 1 [0189.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 6051 os_tid = 0x9c4 [0185.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 0x20 [0188.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0188.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.755] GetLastError () returned 0x5 [0188.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0188.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 6052 os_tid = 0xacc [0185.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 0x20 [0188.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0188.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.707] GetLastError () returned 0x5 [0188.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0188.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a30) returned 1 Thread: id = 6053 os_tid = 0xdb8 [0185.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48220 [0185.734] wcscpy (in: _Dest=0x3e48220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0185.734] wcscat (in: _Dest=0x3e48220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0185.734] wcscat (in: _Dest=0x3e48220, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*" [0185.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ede58 [0185.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2820 [0188.754] wcscmp (_String1=".", _String2=".") returned 0 [0188.754] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.754] wcscmp (_String1="..", _String2=".") returned 1 [0188.754] wcscmp (_String1="..", _String2="..") returned 0 [0188.754] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0188.754] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0188.754] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0188.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d575d0 [0188.754] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0188.755] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0188.755] wcscat (in: _Dest=0x3d575d0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" [0190.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d575d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0190.207] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0190.207] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0190.207] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0190.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8868 [0190.207] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0190.207] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0190.207] wcscat (in: _Dest=0x3ea8868, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0190.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0190.208] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0190.208] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0190.208] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0190.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56920 [0190.209] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0190.209] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0190.209] wcscat (in: _Dest=0x3d56920, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" [0190.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0190.210] FindNextFileW (in: hFindFile=0x66d2820, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0190.210] FindClose (in: hFindFile=0x66d2820 | out: hFindFile=0x66d2820) returned 1 [0190.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ede58) returned 1 [0190.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 [0190.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 6054 os_tid = 0xdc8 [0185.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 0x20 [0188.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0188.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.753] GetLastError () returned 0x5 [0188.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0188.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5210) returned 1 Thread: id = 6055 os_tid = 0x1d58 [0185.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 0x20 [0188.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0188.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.706] GetLastError () returned 0x5 [0188.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0188.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 6056 os_tid = 0x73c [0185.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0185.865] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0188.379] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2464 [0188.379] GetFileSizeEx (in: hFile=0x2464, lpFileSize=0xb1efe9c | out: lpFileSize=0xb1efe9c*=259) returned 1 [0188.379] SetFilePointerEx (in: hFile=0x2464, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.379] ReadFile (in: hFile=0x2464, lpBuffer=0xb1efe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1efe88, lpOverlapped=0x0 | out: lpBuffer=0xb1efe78*, lpNumberOfBytesRead=0xb1efe88*=0x4, lpOverlapped=0x0) returned 1 [0188.381] SetFilePointerEx (in: hFile=0x2464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0188.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0188.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0188.381] NtQuerySystemTime (in: CurrentTime=0xb1efe10 | out: CurrentTime=0xb1efe10*=132482710968648000) returned 0x0 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x21eeb90f [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0xc1a94a1 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0xcb7c234 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x79185524 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x7b75dd80 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x4507fe7 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x6a52b2f8 [0188.381] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x4ecd7278 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x40bcf333 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x763162df [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x2802b4ac [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x1c681bc5 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x43c0d122 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x786fa2ab [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x345b236b [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x78376981 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x158c66b [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x67c20c3d [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x563ebac9 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x2f8e60bc [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x72b6e624 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x1c73f4b5 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x2726ff22 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x5ab6ef73 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x2b195dae [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x5c346aa8 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x1f2329a1 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x469c5199 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x5485cf22 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0xcee3462 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x612941e4 [0188.382] RtlRandomEx (in: Seed=0xb1efe08 | out: Seed=0xb1efe08) returned 0x57a72e7f [0188.390] ReadFile (in: hFile=0x2464, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xb1efe04, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0xb1efe04*=0x103, lpOverlapped=0x0) returned 1 [0188.390] SetFilePointerEx (in: hFile=0x2464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.390] WriteFile (in: hFile=0x2464, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xb1efe08, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0xb1efe08*=0x103, lpOverlapped=0x0) returned 1 [0188.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0188.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0188.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0188.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0188.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0188.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0188.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68236c8) returned 1 [0188.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0188.881] SetFilePointerEx (in: hFile=0x2464, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.881] WriteFile (in: hFile=0x2464, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1efe90, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0xb1efe90*=0x10c, lpOverlapped=0x0) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0188.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0188.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d408e8 [0188.883] wcscpy (in: _Dest=0x3d408e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" [0188.883] wcscat (in: _Dest=0x3d408e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.ac3a86" [0188.883] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0xb1efe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce5c0 [0188.974] FlushFileBuffers (hFile=0x2464) returned 1 [0188.977] CloseHandle (hObject=0x2464) returned 1 [0188.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d408e8 [0188.978] wcscpy (in: _Dest=0x3d408e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0188.978] wcscat (in: _Dest=0x3d408e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\AC3A86-Readme.txt" [0188.978] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0188.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2464 [0188.980] WriteFile (in: hFile=0x2464, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb1efe24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb1efe24*=0x8b9, lpOverlapped=0x0) returned 1 [0188.982] CloseHandle (hObject=0x2464) returned 1 [0188.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408e8) returned 1 [0188.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 Thread: id = 6057 os_tid = 0x4b8 [0185.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0185.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.526] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcac [0189.527] GetFileSizeEx (in: hFile=0xcac, lpFileSize=0xb11fe4c | out: lpFileSize=0xb11fe4c*=259) returned 1 [0189.527] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.527] ReadFile (in: hFile=0xcac, lpBuffer=0xb11fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb11fe38, lpOverlapped=0x0 | out: lpBuffer=0xb11fe28*, lpNumberOfBytesRead=0xb11fe38*=0x4, lpOverlapped=0x0) returned 1 [0189.528] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0189.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0189.529] NtQuerySystemTime (in: CurrentTime=0xb11fdc0 | out: CurrentTime=0xb11fdc0*=132482710980036000) returned 0x0 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6d758847 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6a7dd301 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x41afccde [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x235605d5 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6139a226 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x551c4be4 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x402a9b0 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x1a13192f [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x7d4bac6a [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x184f94c [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x1da9a7e8 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6c400610 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x59996964 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x57343a3 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x409de1d4 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x5622ddbb [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x18dac8c6 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x2692b69a [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x11e31a77 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x503f755d [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x130c8aeb [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0xa0924b0 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x65f2e48a [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x2340b51e [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6c1d2c2d [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x8b9c57 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x31bf5adb [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x68e5802f [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x6c4b882f [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x5bb44454 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x15263674 [0189.529] RtlRandomEx (in: Seed=0xb11fdb8 | out: Seed=0xb11fdb8) returned 0x2aa83a72 [0189.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0189.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6868160 [0189.539] ReadFile (in: hFile=0xcac, lpBuffer=0x6864558, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xb11fdb4, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesRead=0xb11fdb4*=0x103, lpOverlapped=0x0) returned 1 [0189.539] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.539] WriteFile (in: hFile=0xcac, lpBuffer=0x6868160*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xb11fdb8, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesWritten=0xb11fdb8*=0x103, lpOverlapped=0x0) returned 1 [0190.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0190.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ca8) returned 1 [0190.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b40 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ca8 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cfe0 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0190.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0190.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0190.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0190.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ca8) returned 1 [0190.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec5f8 [0190.319] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.319] WriteFile (in: hFile=0xcac, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb11fe40, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xb11fe40*=0x10c, lpOverlapped=0x0) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0192.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0192.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40dc8 [0192.241] wcscpy (in: _Dest=0x3d40dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" [0192.241] wcscat (in: _Dest=0x3d40dc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.ac3a86" [0192.242] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xb11fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3000ba0 [0192.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3000ba0) returned 1 [0192.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dbc8) returned 1 [0192.317] NtQueryInformationFile (in: FileHandle=0xcac, IoStatusBlock=0xb11fd90, FileInformation=0xb11fd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb11fd90, FileInformation=0xb11fd98) returned 0x0 [0192.317] NtSetInformationFile (FileHandle=0xcac, IoStatusBlock=0xb11fd90, FileInformation=0xb11fd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40dc8) returned 1 [0192.369] FlushFileBuffers (hFile=0xcac) returned 1 [0192.377] CloseHandle (hObject=0xcac) returned 1 [0192.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e428 [0192.471] wcscpy (in: _Dest=0x674e428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0192.471] wcscat (in: _Dest=0x674e428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\AC3A86-Readme.txt" [0192.471] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0192.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.568] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb11fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb11fdd4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.570] CloseHandle (hObject=0x2304) returned 1 [0192.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e428) returned 1 [0192.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eab8) returned 1 Thread: id = 6058 os_tid = 0x7c4 [0185.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0185.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0189.540] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc [0189.541] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0x7edfee4 | out: lpFileSize=0x7edfee4*=249) returned 1 [0189.541] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.541] ReadFile (in: hFile=0x15cc, lpBuffer=0x7edfec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7edfed0, lpOverlapped=0x0 | out: lpBuffer=0x7edfec0*, lpNumberOfBytesRead=0x7edfed0*=0x4, lpOverlapped=0x0) returned 1 [0189.542] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0189.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0189.543] NtQuerySystemTime (in: CurrentTime=0x7edfe58 | out: CurrentTime=0x7edfe58*=132482710980192000) returned 0x0 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x2a19ae94 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0xcf13d0a [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x49af28ea [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x591a1033 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x7d90b64f [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x207acbe9 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x1a4d2ebb [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0xb21a845 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x5323ccbc [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x43e15b81 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0xe7a642e [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x20982d73 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x718c6891 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x693e5228 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x260c3bb9 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x47d1d4ef [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x4b5b6b62 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0xd0c6230 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x3d3c7af0 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x12f68c2f [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x6937d3eb [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x2473c1a4 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x26357e9e [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x339272d5 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x5fb3ecc2 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x20752e83 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x705e730 [0189.543] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x6749360d [0189.544] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x1de53e4d [0189.544] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x62720de1 [0189.544] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x3cda32cb [0189.544] RtlRandomEx (in: Seed=0x7edfe50 | out: Seed=0x7edfe50) returned 0x731714a7 [0189.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x686bd68 [0189.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69c5ce8 [0189.565] ReadFile (in: hFile=0x15cc, lpBuffer=0x686bd68, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x7edfe4c, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesRead=0x7edfe4c*=0xf9, lpOverlapped=0x0) returned 1 [0189.566] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.566] WriteFile (in: hFile=0x15cc, lpBuffer=0x69c5ce8*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x7edfe50, lpOverlapped=0x0 | out: lpBuffer=0x69c5ce8*, lpNumberOfBytesWritten=0x7edfe50*=0xf9, lpOverlapped=0x0) returned 1 [0190.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0190.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0190.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5ce8) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ea0) returned 1 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ea0 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d490 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c30 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ea0) returned 1 [0190.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec710 [0190.321] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.321] WriteFile (in: hFile=0x15cc, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7edfed8, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x7edfed8*=0x10c, lpOverlapped=0x0) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0191.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0191.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0191.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0191.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40060 [0191.725] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" [0191.725] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.ac3a86" [0191.725] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.ac3a86", NtPathName=0x7edfe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3e63ff0 [0192.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63ff0) returned 1 [0192.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68972b8) returned 1 [0192.359] NtQueryInformationFile (in: FileHandle=0x15cc, IoStatusBlock=0x7edfe28, FileInformation=0x7edfe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7edfe28, FileInformation=0x7edfe30) returned 0x0 [0192.359] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x7edfe28, FileInformation=0x7edfe30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0192.461] FlushFileBuffers (hFile=0x15cc) returned 1 [0192.470] CloseHandle (hObject=0x15cc) returned 1 [0192.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d412a8 [0192.510] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0192.510] wcscat (in: _Dest=0x3d412a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\AC3A86-Readme.txt" [0192.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\ac3a86-readme.txt")) returned 0xffffffff [0192.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2324 [0192.518] WriteFile (in: hFile=0x2324, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7edfe6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7edfe6c*=0x8b9, lpOverlapped=0x0) returned 1 [0192.587] CloseHandle (hObject=0x2324) returned 1 [0192.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0192.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ebe0) returned 1 Thread: id = 6059 os_tid = 0x500 [0185.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0186.604] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0186.604] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2294 [0186.605] GetFileSizeEx (in: hFile=0x2294, lpFileSize=0xb82f784 | out: lpFileSize=0xb82f784*=249) returned 1 [0186.605] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.605] ReadFile (in: hFile=0x2294, lpBuffer=0xb82f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb82f770, lpOverlapped=0x0 | out: lpBuffer=0xb82f760*, lpNumberOfBytesRead=0xb82f770*=0x4, lpOverlapped=0x0) returned 1 [0186.607] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0186.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0186.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0186.607] NtQuerySystemTime (in: CurrentTime=0xb82f6f8 | out: CurrentTime=0xb82f6f8*=132482710950864000) returned 0x0 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x7597c576 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x1d0824d3 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x78421964 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x2955c5e2 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0xe135e7d [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x7ec0fe8 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x52b386a5 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x11c75287 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x44d577e2 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0xbf9e912 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x558ede6a [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x2b366da1 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x47541af1 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x6875def [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0xa2b4829 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x50cddb04 [0186.607] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x5e2d3484 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x286d9c7e [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x42cbc6be [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x6ffb3718 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x5dd74a52 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x534c4197 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x2ddadf02 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x49cb7833 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x31367bfa [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x5ff546f4 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x374fb675 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x7904371d [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x4ff5b6d3 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x17f815da [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x6c4251f3 [0186.608] RtlRandomEx (in: Seed=0xb82f6f0 | out: Seed=0xb82f6f0) returned 0x90242f8 [0186.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0186.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0186.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673b720 [0186.619] ReadFile (in: hFile=0x2294, lpBuffer=0x670aab8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xb82f6ec, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xb82f6ec*=0xf9, lpOverlapped=0x0) returned 1 [0186.619] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.619] WriteFile (in: hFile=0x2294, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xb82f6f0, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0xb82f6f0*=0xf9, lpOverlapped=0x0) returned 1 [0188.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0188.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0188.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0188.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0188.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0188.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 [0188.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a798) returned 1 [0188.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a20 [0188.505] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.505] WriteFile (in: hFile=0x2294, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb82f778, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0xb82f778*=0x10c, lpOverlapped=0x0) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0188.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0188.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40408 [0188.776] wcscpy (in: _Dest=0x3d40408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" [0188.776] wcscat (in: _Dest=0x3d40408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.ac3a86" [0188.776] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0xb82f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x330b20 [0188.933] FlushFileBuffers (hFile=0x2294) returned 1 [0188.946] CloseHandle (hObject=0x2294) returned 1 [0188.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40540 [0188.948] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0188.948] wcscat (in: _Dest=0x3d40540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0188.948] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0188.949] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2298 [0188.959] WriteFile (in: hFile=0x2298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb82f70c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb82f70c*=0x8b9, lpOverlapped=0x0) returned 1 [0188.961] CloseHandle (hObject=0x2298) returned 1 [0188.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40540) returned 1 [0188.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ed08) returned 1 Thread: id = 6060 os_tid = 0x17a8 [0185.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0185.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0189.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc74 [0189.568] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0xb64fb2c | out: lpFileSize=0xb64fb2c*=329) returned 1 [0189.568] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.568] ReadFile (in: hFile=0xc74, lpBuffer=0xb64fb08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb64fb18, lpOverlapped=0x0 | out: lpBuffer=0xb64fb08*, lpNumberOfBytesRead=0xb64fb18*=0x4, lpOverlapped=0x0) returned 1 [0189.569] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0189.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0189.570] NtQuerySystemTime (in: CurrentTime=0xb64faa0 | out: CurrentTime=0xb64faa0*=132482710980504000) returned 0x0 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x693499d5 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x72b47223 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x3a2790a8 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x7f69027d [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x274f7b07 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x180ea154 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x28ac7261 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x4a0d29f8 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x288b4010 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x94b255c [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x3a87e2c5 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x70b901f4 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x77e5292e [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x6771ff06 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0xd5331cf [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x549bc1a4 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x7a40c726 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x3520127e [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x675a7ff0 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x6fdc6236 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x5f0f6b35 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x64a6786b [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x6e8cda71 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x39fc1149 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x632cab13 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x5c0bebdd [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x6dbf860 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x38df65e9 [0189.570] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x7ce9fcaf [0189.571] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x827fd05 [0189.571] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x5207215c [0189.571] RtlRandomEx (in: Seed=0xb64fa98 | out: Seed=0xb64fa98) returned 0x227f4d9a [0189.579] ReadFile (in: hFile=0xc74, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0xb64fa94, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xb64fa94*=0x149, lpOverlapped=0x0) returned 1 [0189.579] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.579] WriteFile (in: hFile=0xc74, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0xb64fa98, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xb64fa98*=0x149, lpOverlapped=0x0) returned 1 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68237e8) returned 1 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b10 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68237e8 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1db20 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5690 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0190.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0190.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0190.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68237e8) returned 1 [0190.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec080 [0190.323] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.323] WriteFile (in: hFile=0xc74, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb64fb20, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xb64fb20*=0x10c, lpOverlapped=0x0) returned 1 [0191.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0191.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0191.726] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" [0191.726] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.ac3a86" [0191.726] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0xb64fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x324ea8 [0192.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x324ea8) returned 1 [0192.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68922f0) returned 1 [0192.360] NtQueryInformationFile (in: FileHandle=0xc74, IoStatusBlock=0xb64fa70, FileInformation=0xb64fa78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb64fa70, FileInformation=0xb64fa78) returned 0x0 [0192.360] NtSetInformationFile (FileHandle=0xc74, IoStatusBlock=0xb64fa70, FileInformation=0xb64fa78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0192.465] FlushFileBuffers (hFile=0xc74) returned 1 [0192.468] CloseHandle (hObject=0xc74) returned 1 [0192.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676abe0 [0192.508] wcscpy (in: _Dest=0x676abe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0192.508] wcscat (in: _Dest=0x676abe0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\AC3A86-Readme.txt" [0192.508] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0192.508] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22b8 [0192.517] WriteFile (in: hFile=0x22b8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb64fab4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb64fab4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.544] CloseHandle (hObject=0x22b8) returned 1 [0192.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676abe0) returned 1 [0192.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ee30) returned 1 Thread: id = 6061 os_tid = 0xe24 [0185.911] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0186.622] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0186.622] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2328 [0186.622] GetFileSizeEx (in: hFile=0x2328, lpFileSize=0xb50f94c | out: lpFileSize=0xb50f94c*=256) returned 1 [0186.622] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.622] ReadFile (in: hFile=0x2328, lpBuffer=0xb50f928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb50f938, lpOverlapped=0x0 | out: lpBuffer=0xb50f928*, lpNumberOfBytesRead=0xb50f938*=0x4, lpOverlapped=0x0) returned 1 [0186.624] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0186.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0186.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0186.625] NtQuerySystemTime (in: CurrentTime=0xb50f8c0 | out: CurrentTime=0xb50f8c0*=132482710951020000) returned 0x0 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x2d84b94 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x744de577 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x2c6fa2d4 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x64e0ad1f [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x726dd1be [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x56ab382b [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x17373adb [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x3b541d67 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x12c2c683 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x2a2d0b19 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x1c652b82 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x2b1bf367 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x762c4a6b [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x46a8993d [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x32fb67d2 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x3c620058 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x73e815e4 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x51fa8e30 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x59ae75ab [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x714a5fd4 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0xb5a36ab [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x1a8f0995 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x66dcc5f2 [0186.625] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x473ea0fc [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x555d092a [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x2317d86a [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x13681507 [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x856f92b [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x6fd0b8ac [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x62c3712 [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x4fa94c3 [0186.626] RtlRandomEx (in: Seed=0xb50f8b8 | out: Seed=0xb50f8b8) returned 0x17d2c30a [0186.635] ReadFile (in: hFile=0x2328, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xb50f8b4, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xb50f8b4*=0x100, lpOverlapped=0x0) returned 1 [0186.635] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.635] WriteFile (in: hFile=0x2328, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb50f8b8, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0xb50f8b8*=0x100, lpOverlapped=0x0) returned 1 [0188.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0188.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0188.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0188.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0188.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0188.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0188.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba28) returned 1 [0188.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0188.507] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.507] WriteFile (in: hFile=0x2328, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb50f940, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0xb50f940*=0x10c, lpOverlapped=0x0) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0188.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0188.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0188.805] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" [0188.805] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.ac3a86" [0188.805] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0xb50f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e4d458 [0188.929] FlushFileBuffers (hFile=0x2328) returned 1 [0188.944] CloseHandle (hObject=0x2328) returned 1 [0188.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x675a7a0 [0188.946] wcscpy (in: _Dest=0x675a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0188.946] wcscat (in: _Dest=0x675a7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\AC3A86-Readme.txt" [0188.946] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0188.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2298 [0188.963] WriteFile (in: hFile=0x2298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb50f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb50f8d4*=0x8b9, lpOverlapped=0x0) returned 1 [0188.964] CloseHandle (hObject=0x2298) returned 1 [0188.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a7a0) returned 1 [0188.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ef58) returned 1 Thread: id = 6062 os_tid = 0x1798 [0185.911] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0185.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0189.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb4 [0189.581] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x658fa0c | out: lpFileSize=0x658fa0c*=243) returned 1 [0189.581] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.582] ReadFile (in: hFile=0xcb4, lpBuffer=0x658f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x658f9f8, lpOverlapped=0x0 | out: lpBuffer=0x658f9e8*, lpNumberOfBytesRead=0x658f9f8*=0x4, lpOverlapped=0x0) returned 1 [0189.583] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0189.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0189.583] NtQuerySystemTime (in: CurrentTime=0x658f980 | out: CurrentTime=0x658f980*=132482710980660000) returned 0x0 [0189.583] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x2cdcacc1 [0189.583] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x12ec516f [0189.583] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x583f4e61 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x11897c73 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x786f8e5f [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x3ccd6bd3 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x10267f34 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x6da9ef6e [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x68608bf5 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x352a8c9f [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x58b75f4a [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x6d68338f [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x61a3981e [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x4824e0ad [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x3de2e039 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x774669fa [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x4888903 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x74e61ed2 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x8925338 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x62b06c66 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x7bfbe155 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x12fddc8c [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x195be63 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x5eb609e4 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x21b7fd5c [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x4724d52e [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x5754abc5 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x6305e4f2 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x3a7d84b4 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x3f396c5 [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x777f0f3a [0189.584] RtlRandomEx (in: Seed=0x658f978 | out: Seed=0x658f978) returned 0x21102f47 [0189.593] ReadFile (in: hFile=0xcb4, lpBuffer=0x69d1100, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x658f974, lpOverlapped=0x0 | out: lpBuffer=0x69d1100*, lpNumberOfBytesRead=0x658f974*=0xf3, lpOverlapped=0x0) returned 1 [0189.593] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.593] WriteFile (in: hFile=0xcb4, lpBuffer=0x69d4d08*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x658f978, lpOverlapped=0x0 | out: lpBuffer=0x69d4d08*, lpNumberOfBytesWritten=0x658f978*=0xf3, lpOverlapped=0x0) returned 1 [0191.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0191.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0191.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0191.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d4d08) returned 1 [0191.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d1100) returned 1 [0191.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0191.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823290) returned 1 [0191.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3540 [0191.504] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.504] WriteFile (in: hFile=0xcb4, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x658fa00, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0x658fa00*=0x10c, lpOverlapped=0x0) returned 1 [0195.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0195.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0195.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0195.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0195.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0195.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0195.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0195.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0195.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0195.148] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" [0195.148] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.ac3a86" [0195.148] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x658f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769268 [0197.766] FlushFileBuffers (hFile=0xcb4) returned 1 [0197.771] CloseHandle (hObject=0xcb4) returned 1 [0197.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6768be0 [0197.869] wcscpy (in: _Dest=0x6768be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0197.869] wcscat (in: _Dest=0x6768be0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\AC3A86-Readme.txt" [0197.869] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0197.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.303] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x658f994, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x658f994*=0x8b9, lpOverlapped=0x0) returned 1 [0198.305] CloseHandle (hObject=0x1988) returned 1 [0198.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768be0) returned 1 [0198.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 Thread: id = 6063 os_tid = 0x1cc8 [0185.912] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 0x2020 [0185.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0189.594] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1094 [0189.595] GetFileSizeEx (in: hFile=0x1094, lpFileSize=0xb75fbac | out: lpFileSize=0xb75fbac*=10089) returned 1 [0189.595] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x2765, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.595] ReadFile (in: hFile=0x1094, lpBuffer=0xb75fb88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb75fb98, lpOverlapped=0x0 | out: lpBuffer=0xb75fb88*, lpNumberOfBytesRead=0xb75fb98*=0x4, lpOverlapped=0x0) returned 1 [0189.597] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0189.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0189.597] NtQuerySystemTime (in: CurrentTime=0xb75fb20 | out: CurrentTime=0xb75fb20*=132482710980816000) returned 0x0 [0189.597] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x5375c73e [0189.597] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x3e082363 [0189.597] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x44aa7453 [0189.597] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x4b8c7ce5 [0189.597] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x4ad55a [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x4284d82 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x66f81ee7 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x6c46c899 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x20d455d6 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x236d82c5 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x593156f1 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0xf98608a [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x32dfffa6 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x38d49143 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x122912db [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x546a8372 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x8c07eed [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x65b625d2 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x228117e8 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x16161ab0 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x2be3ba [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x7c991599 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x1fb7aa76 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x3c37cc60 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x13ca20bd [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x19195830 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x1bc9b277 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x38a86d75 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x15211862 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x474aa8b1 [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x587bda2b [0189.598] RtlRandomEx (in: Seed=0xb75fb18 | out: Seed=0xb75fb18) returned 0x1312dd30 [0189.606] ReadFile (in: hFile=0x1094, lpBuffer=0x69d8910, nNumberOfBytesToRead=0x2769, lpNumberOfBytesRead=0xb75fb14, lpOverlapped=0x0 | out: lpBuffer=0x69d8910*, lpNumberOfBytesRead=0xb75fb14*=0x2769, lpOverlapped=0x0) returned 1 [0189.607] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.607] WriteFile (in: hFile=0x1094, lpBuffer=0x69dc518*, nNumberOfBytesToWrite=0x2769, lpNumberOfBytesWritten=0xb75fb18, lpOverlapped=0x0 | out: lpBuffer=0x69dc518*, lpNumberOfBytesWritten=0xb75fb18*=0x2769, lpOverlapped=0x0) returned 1 [0191.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0191.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0191.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0191.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69dc518) returned 1 [0191.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d8910) returned 1 [0191.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0191.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823998) returned 1 [0191.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x6823998 [0191.508] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.508] WriteFile (in: hFile=0x1094, lpBuffer=0x67648c8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb75fba0, lpOverlapped=0x0 | out: lpBuffer=0x67648c8*, lpNumberOfBytesWritten=0xb75fba0*=0x11e, lpOverlapped=0x0) returned 1 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823830) returned 1 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823998) returned 1 [0192.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0192.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0192.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0192.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0192.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e4d458 [0192.236] wcscpy (in: _Dest=0x3e4d458, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" [0192.236] wcscat (in: _Dest=0x3e4d458, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.ac3a86" [0192.236] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0xb75fb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x34cc08 [0192.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34cc08) returned 1 [0192.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6896a18) returned 1 [0192.315] NtQueryInformationFile (in: FileHandle=0x1094, IoStatusBlock=0xb75faf0, FileInformation=0xb75faf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb75faf0, FileInformation=0xb75faf8) returned 0x0 [0192.315] NtSetInformationFile (FileHandle=0x1094, IoStatusBlock=0xb75faf0, FileInformation=0xb75faf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d458) returned 1 [0192.364] FlushFileBuffers (hFile=0x1094) returned 1 [0192.366] CloseHandle (hObject=0x1094) returned 1 [0192.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67648c8 [0192.469] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0192.469] wcscat (in: _Dest=0x67648c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\AC3A86-Readme.txt" [0192.469] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0192.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.563] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb75fb34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb75fb34*=0x8b9, lpOverlapped=0x0) returned 1 [0192.564] CloseHandle (hObject=0x2304) returned 1 [0192.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 [0192.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407b0) returned 1 Thread: id = 6064 os_tid = 0xbc4 [0185.913] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 0x2020 [0185.913] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", dwFileAttributes=0x20) returned 1 [0189.608] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf38 [0189.609] GetFileSizeEx (in: hFile=0xf38, lpFileSize=0x342f9cc | out: lpFileSize=0x342f9cc*=1741) returned 1 [0189.609] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x6c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.609] ReadFile (in: hFile=0xf38, lpBuffer=0x342f9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x342f9b8, lpOverlapped=0x0 | out: lpBuffer=0x342f9a8*, lpNumberOfBytesRead=0x342f9b8*=0x4, lpOverlapped=0x0) returned 1 [0189.611] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0189.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0189.612] NtQuerySystemTime (in: CurrentTime=0x342f940 | out: CurrentTime=0x342f940*=132482710980816000) returned 0x0 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x514d389 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x4eac5fa6 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x7dda4992 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x51af1f45 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x1a312718 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0xa9dd2e8 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x369eae14 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x5571fd64 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0xdbefb5d [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x6fbef1b6 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x369eae14 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x3ff3318 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x1d0c8c1f [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x995e6b2 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x48149e84 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x4bdd3b67 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x563fc54f [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x1a1ca89c [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x484a27b8 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x473f124d [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x96fa8 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x1ec39178 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x19195830 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x20d42215 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x40e72b72 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x61daf1d0 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x75160c21 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x773e0496 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x602fe2b [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x48fa1e16 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x1ec39178 [0189.612] RtlRandomEx (in: Seed=0x342f938 | out: Seed=0x342f938) returned 0x53f05ea4 [0189.620] ReadFile (in: hFile=0xf38, lpBuffer=0x69e0120, nNumberOfBytesToRead=0x6cd, lpNumberOfBytesRead=0x342f934, lpOverlapped=0x0 | out: lpBuffer=0x69e0120*, lpNumberOfBytesRead=0x342f934*=0x6cd, lpOverlapped=0x0) returned 1 [0189.620] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.620] WriteFile (in: hFile=0xf38, lpBuffer=0x69e3d28*, nNumberOfBytesToWrite=0x6cd, lpNumberOfBytesWritten=0x342f938, lpOverlapped=0x0 | out: lpBuffer=0x69e3d28*, lpNumberOfBytesWritten=0x342f938*=0x6cd, lpOverlapped=0x0) returned 1 [0189.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0189.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0189.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e3d28) returned 1 [0189.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e0120) returned 1 [0189.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0189.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68228b8) returned 1 [0189.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3f19a48 [0189.623] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.623] WriteFile (in: hFile=0xf38, lpBuffer=0x69c3610*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x342f9c0, lpOverlapped=0x0 | out: lpBuffer=0x69c3610*, lpNumberOfBytesWritten=0x342f9c0*=0x110, lpOverlapped=0x0) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3610) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19a48) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0189.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0189.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6755e60 [0189.625] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" [0189.625] wcscat (in: _Dest=0x6755e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.ac3a86" [0189.625] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.ac3a86", NtPathName=0x342f938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x2fce88 [0189.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 [0189.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67032e8) returned 1 [0189.632] NtQueryInformationFile (in: FileHandle=0xf38, IoStatusBlock=0x342f910, FileInformation=0x342f918, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x342f910, FileInformation=0x342f918) returned 0x0 [0189.632] NtSetInformationFile (FileHandle=0xf38, IoStatusBlock=0x342f910, FileInformation=0x342f918, Length=0x28, FileInformationClass=0x4) returned 0x0 [0189.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0189.634] FlushFileBuffers (hFile=0xf38) returned 1 [0189.635] CloseHandle (hObject=0xf38) returned 1 [0189.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6755e60 [0189.637] wcscpy (in: _Dest=0x6755e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0189.637] wcscat (in: _Dest=0x6755e60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\AC3A86-Readme.txt" [0189.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ac3a86-readme.txt")) returned 0xffffffff [0189.637] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf38 [0189.638] WriteFile (in: hFile=0xf38, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x342f954, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x342f954*=0x8b9, lpOverlapped=0x0) returned 1 [0189.639] CloseHandle (hObject=0xf38) returned 1 [0189.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 [0189.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f1a8) returned 1 Thread: id = 6065 os_tid = 0x740 [0185.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd258 [0185.913] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0185.913] wcscat (in: _Dest=0x30bd258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0185.913] wcscat (in: _Dest=0x30bd258, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*" [0185.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0185.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0185.914] wcscmp (_String1=".", _String2=".") returned 0 [0185.914] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.914] wcscmp (_String1="..", _String2=".") returned 1 [0185.914] wcscmp (_String1="..", _String2="..") returned 0 [0185.914] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.914] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.914] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67551a8 [0185.914] wcscpy (in: _Dest=0x67551a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0185.914] wcscat (in: _Dest=0x67551a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0185.914] wcscat (in: _Dest=0x67551a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" [0191.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67551a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0191.355] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.355] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0191.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0191.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0191.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae738) returned 1 Thread: id = 6066 os_tid = 0x248 [0185.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb4d0 [0185.915] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0185.915] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0185.915] wcscat (in: _Dest=0x30bb4d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*" [0185.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0185.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0192.107] wcscmp (_String1=".", _String2=".") returned 0 [0192.107] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.107] wcscmp (_String1="..", _String2=".") returned 1 [0192.107] wcscmp (_String1="..", _String2="..") returned 0 [0192.107] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.107] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.107] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6764e30 [0192.107] wcscpy (in: _Dest=0x6764e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0192.107] wcscat (in: _Dest=0x6764e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0192.107] wcscat (in: _Dest=0x6764e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" [0194.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0194.829] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.829] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0194.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0194.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0194.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc308) returned 1 Thread: id = 6067 os_tid = 0xc08 [0185.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbc78 [0185.919] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0185.919] wcscat (in: _Dest=0x30bbc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0185.919] wcscat (in: _Dest=0x30bbc78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*" [0185.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ee0c0 [0185.919] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0190.815] wcscmp (_String1=".", _String2=".") returned 0 [0190.815] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.815] wcscmp (_String1="..", _String2=".") returned 1 [0190.815] wcscmp (_String1="..", _String2="..") returned 0 [0190.815] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.815] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.815] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6764ab8 [0190.815] wcscpy (in: _Dest=0x6764ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0190.815] wcscat (in: _Dest=0x6764ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0190.815] wcscat (in: _Dest=0x6764ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" [0194.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0194.941] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.941] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0194.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee0c0) returned 1 [0194.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0194.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67571f0) returned 1 Thread: id = 6068 os_tid = 0x17d8 [0185.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb5e8 [0185.920] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0185.920] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0185.920] wcscat (in: _Dest=0x30bb5e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*" [0185.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f130b8 [0185.920] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0192.149] wcscmp (_String1=".", _String2=".") returned 0 [0192.149] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.149] wcscmp (_String1="..", _String2=".") returned 1 [0192.149] wcscmp (_String1="..", _String2="..") returned 0 [0192.149] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.149] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.149] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674ce30 [0192.150] wcscpy (in: _Dest=0x674ce30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0192.150] wcscat (in: _Dest=0x674ce30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0192.150] wcscat (in: _Dest=0x674ce30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" [0194.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ce30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0194.860] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3f130b8 | out: lpFindFileData=0x3f130b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.860] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f130b8) returned 1 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0194.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67572f8) returned 1 Thread: id = 6069 os_tid = 0x2080 [0185.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc308 [0185.921] wcscpy (in: _Dest=0x30bc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0185.921] wcscat (in: _Dest=0x30bc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0185.921] wcscat (in: _Dest=0x30bc308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*" [0185.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12be8 [0185.921] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0191.763] wcscmp (_String1=".", _String2=".") returned 0 [0191.763] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.763] wcscmp (_String1="..", _String2=".") returned 1 [0191.763] wcscmp (_String1="..", _String2="..") returned 0 [0191.763] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.764] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.764] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6765c10 [0191.764] wcscpy (in: _Dest=0x6765c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0191.764] wcscat (in: _Dest=0x6765c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0191.764] wcscat (in: _Dest=0x6765c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" [0192.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0192.777] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x3f12be8 | out: lpFindFileData=0x3f12be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.777] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0192.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12be8) returned 1 [0192.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0192.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757400) returned 1 Thread: id = 6070 os_tid = 0x20ac [0185.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb700 [0185.921] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0185.921] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0185.921] wcscat (in: _Dest=0x30bb700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*" [0185.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14190 [0185.922] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0192.115] wcscmp (_String1=".", _String2=".") returned 0 [0192.115] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.116] wcscmp (_String1="..", _String2=".") returned 1 [0192.116] wcscmp (_String1="..", _String2="..") returned 0 [0192.116] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.116] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.116] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674cab8 [0192.116] wcscpy (in: _Dest=0x674cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0192.116] wcscat (in: _Dest=0x674cab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0192.116] wcscat (in: _Dest=0x674cab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" [0194.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0194.855] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3f14190 | out: lpFindFileData=0x3f14190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.855] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0194.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14190) returned 1 [0194.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0194.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757508) returned 1 Thread: id = 6071 os_tid = 0x1784 [0185.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751030 [0185.922] wcscpy (in: _Dest=0x6751030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0185.922] wcscat (in: _Dest=0x6751030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0185.922] wcscat (in: _Dest=0x6751030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*" [0185.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f12718 [0185.922] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30672c0 [0192.115] wcscmp (_String1=".", _String2=".") returned 0 [0192.115] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.115] wcscmp (_String1="..", _String2=".") returned 1 [0192.115] wcscmp (_String1="..", _String2="..") returned 0 [0192.115] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.115] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.115] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67668c8 [0192.115] wcscpy (in: _Dest=0x67668c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0192.115] wcscat (in: _Dest=0x67668c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0192.115] wcscat (in: _Dest=0x67668c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" [0194.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67668c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0194.853] FindNextFileW (in: hFindFile=0x30672c0, lpFindFileData=0x3f12718 | out: lpFindFileData=0x3f12718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.853] FindClose (in: hFindFile=0x30672c0 | out: hFindFile=0x30672c0) returned 1 [0194.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f12718) returned 1 [0194.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0194.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757610) returned 1 Thread: id = 6072 os_tid = 0xf50 [0185.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751148 [0185.923] wcscpy (in: _Dest=0x6751148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0185.923] wcscat (in: _Dest=0x6751148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0185.923] wcscat (in: _Dest=0x6751148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*" [0185.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14660 [0185.923] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d00 [0192.114] wcscmp (_String1=".", _String2=".") returned 0 [0192.114] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.114] wcscmp (_String1="..", _String2=".") returned 1 [0192.114] wcscmp (_String1="..", _String2="..") returned 0 [0192.114] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.114] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.114] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67667a0 [0192.114] wcscpy (in: _Dest=0x67667a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0192.115] wcscat (in: _Dest=0x67667a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0192.115] wcscat (in: _Dest=0x67667a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" [0194.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67667a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0194.851] FindNextFileW (in: hFindFile=0x3066d00, lpFindFileData=0x3f14660 | out: lpFindFileData=0x3f14660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.851] FindClose (in: hFindFile=0x3066d00 | out: hFindFile=0x3066d00) returned 1 [0194.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14660) returned 1 [0194.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0194.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757718) returned 1 Thread: id = 6073 os_tid = 0xa70 [0185.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751260 [0185.924] wcscpy (in: _Dest=0x6751260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0185.924] wcscat (in: _Dest=0x6751260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0185.924] wcscat (in: _Dest=0x6751260, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*" [0185.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13cc0 [0185.924] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067280 [0192.113] wcscmp (_String1=".", _String2=".") returned 0 [0192.113] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.113] wcscmp (_String1="..", _String2=".") returned 1 [0192.113] wcscmp (_String1="..", _String2="..") returned 0 [0192.113] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.113] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.113] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6766678 [0192.113] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0192.114] wcscat (in: _Dest=0x6766678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0192.114] wcscat (in: _Dest=0x6766678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" [0194.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0194.849] FindNextFileW (in: hFindFile=0x3067280, lpFindFileData=0x3f13cc0 | out: lpFindFileData=0x3f13cc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.849] FindClose (in: hFindFile=0x3067280 | out: hFindFile=0x3067280) returned 1 [0194.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13cc0) returned 1 [0194.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0194.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757820) returned 1 Thread: id = 6074 os_tid = 0x1794 [0185.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751378 [0185.940] wcscpy (in: _Dest=0x6751378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0185.940] wcscat (in: _Dest=0x6751378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0185.941] wcscat (in: _Dest=0x6751378, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*" [0185.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13a58 [0185.941] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067200 [0192.113] wcscmp (_String1=".", _String2=".") returned 0 [0192.113] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.113] wcscmp (_String1="..", _String2=".") returned 1 [0192.113] wcscmp (_String1="..", _String2="..") returned 0 [0192.113] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.113] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.113] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6766550 [0192.113] wcscpy (in: _Dest=0x6766550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0192.113] wcscat (in: _Dest=0x6766550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0192.113] wcscat (in: _Dest=0x6766550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" [0194.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0194.847] FindNextFileW (in: hFindFile=0x3067200, lpFindFileData=0x3f13a58 | out: lpFindFileData=0x3f13a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.847] FindClose (in: hFindFile=0x3067200 | out: hFindFile=0x3067200) returned 1 [0194.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13a58) returned 1 [0194.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0194.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757928) returned 1 Thread: id = 6075 os_tid = 0xbd0 [0185.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6751490 [0185.942] wcscpy (in: _Dest=0x6751490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0185.942] wcscat (in: _Dest=0x6751490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0185.942] wcscat (in: _Dest=0x6751490, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*" [0185.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1488 [0185.942] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0192.112] wcscmp (_String1=".", _String2=".") returned 0 [0192.112] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.112] wcscmp (_String1="..", _String2=".") returned 1 [0192.112] wcscmp (_String1="..", _String2="..") returned 0 [0192.112] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.112] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.112] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6766428 [0192.112] wcscpy (in: _Dest=0x6766428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0192.112] wcscat (in: _Dest=0x6766428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0192.112] wcscat (in: _Dest=0x6766428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" [0194.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0194.845] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.845] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0194.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1488) returned 1 [0194.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0194.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757a30) returned 1 Thread: id = 6076 os_tid = 0xe10 [0185.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67515a8 [0185.943] wcscpy (in: _Dest=0x67515a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0185.943] wcscat (in: _Dest=0x67515a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0185.943] wcscat (in: _Dest=0x67515a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*" [0185.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e16f0 [0185.943] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0192.111] wcscmp (_String1=".", _String2=".") returned 0 [0192.111] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.111] wcscmp (_String1="..", _String2=".") returned 1 [0192.111] wcscmp (_String1="..", _String2="..") returned 0 [0192.111] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.111] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.111] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6766300 [0192.112] wcscpy (in: _Dest=0x6766300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0192.112] wcscat (in: _Dest=0x6766300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0192.112] wcscat (in: _Dest=0x6766300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" [0194.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6766300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0194.843] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.843] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0194.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e16f0) returned 1 [0194.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0194.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757b38) returned 1 Thread: id = 6077 os_tid = 0xba8 [0185.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67516c0 [0185.943] wcscpy (in: _Dest=0x67516c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0185.944] wcscat (in: _Dest=0x67516c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0185.944] wcscat (in: _Dest=0x67516c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*" [0185.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1958 [0185.944] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0192.111] wcscmp (_String1=".", _String2=".") returned 0 [0192.111] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.111] wcscmp (_String1="..", _String2=".") returned 1 [0192.111] wcscmp (_String1="..", _String2="..") returned 0 [0192.111] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.111] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.111] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67661d8 [0192.111] wcscpy (in: _Dest=0x67661d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0192.111] wcscat (in: _Dest=0x67661d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0192.111] wcscat (in: _Dest=0x67661d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" [0194.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67661d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0194.841] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.841] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0194.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1958) returned 1 [0194.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0194.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757c40) returned 1 Thread: id = 6078 os_tid = 0x8f0 [0185.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67517d8 [0185.944] wcscpy (in: _Dest=0x67517d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0185.944] wcscat (in: _Dest=0x67517d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0185.944] wcscat (in: _Dest=0x67517d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*" [0185.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1bc0 [0185.944] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0192.110] wcscmp (_String1=".", _String2=".") returned 0 [0192.110] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.110] wcscmp (_String1="..", _String2=".") returned 1 [0192.110] wcscmp (_String1="..", _String2="..") returned 0 [0192.110] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.110] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.110] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67660b0 [0192.110] wcscpy (in: _Dest=0x67660b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0192.110] wcscat (in: _Dest=0x67660b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0192.110] wcscat (in: _Dest=0x67660b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" [0194.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67660b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0194.839] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.839] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0194.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1bc0) returned 1 [0194.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0194.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757d48) returned 1 Thread: id = 6079 os_tid = 0x9c0 [0185.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67518f0 [0185.945] wcscpy (in: _Dest=0x67518f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0185.945] wcscat (in: _Dest=0x67518f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0185.945] wcscat (in: _Dest=0x67518f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*" [0185.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1e28 [0185.945] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0192.109] wcscmp (_String1=".", _String2=".") returned 0 [0192.109] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.110] wcscmp (_String1="..", _String2=".") returned 1 [0192.110] wcscmp (_String1="..", _String2="..") returned 0 [0192.110] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.110] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.110] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6765f88 [0192.110] wcscpy (in: _Dest=0x6765f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0192.110] wcscat (in: _Dest=0x6765f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0192.110] wcscat (in: _Dest=0x6765f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" [0194.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0194.837] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.837] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0194.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1e28) returned 1 [0194.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0194.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757e50) returned 1 Thread: id = 6080 os_tid = 0x9d0 [0185.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751a08 [0185.945] wcscpy (in: _Dest=0x6751a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0185.945] wcscat (in: _Dest=0x6751a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0185.945] wcscat (in: _Dest=0x6751a08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*" [0185.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2090 [0185.945] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0192.109] wcscmp (_String1=".", _String2=".") returned 0 [0192.109] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.109] wcscmp (_String1="..", _String2=".") returned 1 [0192.109] wcscmp (_String1="..", _String2="..") returned 0 [0192.109] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.109] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.109] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6765e60 [0192.109] wcscpy (in: _Dest=0x6765e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0192.109] wcscat (in: _Dest=0x6765e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0192.109] wcscat (in: _Dest=0x6765e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" [0194.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0194.835] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.835] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0194.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2090) returned 1 [0194.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0194.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757f58) returned 1 Thread: id = 6081 os_tid = 0x1778 [0185.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751b20 [0185.946] wcscpy (in: _Dest=0x6751b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0185.946] wcscat (in: _Dest=0x6751b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0185.946] wcscat (in: _Dest=0x6751b20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*" [0185.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e22f8 [0185.946] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0192.108] wcscmp (_String1=".", _String2=".") returned 0 [0192.108] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.108] wcscmp (_String1="..", _String2=".") returned 1 [0192.108] wcscmp (_String1="..", _String2="..") returned 0 [0192.108] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.108] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.108] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67651a8 [0192.109] wcscpy (in: _Dest=0x67651a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0192.109] wcscat (in: _Dest=0x67651a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0192.109] wcscat (in: _Dest=0x67651a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" [0194.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67651a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0194.833] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.833] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0194.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e22f8) returned 1 [0194.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0194.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758060) returned 1 Thread: id = 6082 os_tid = 0x9e0 [0185.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751c38 [0185.947] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0185.947] wcscat (in: _Dest=0x6751c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0185.947] wcscat (in: _Dest=0x6751c38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*" [0185.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2560 [0185.947] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0192.108] wcscmp (_String1=".", _String2=".") returned 0 [0192.108] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.108] wcscmp (_String1="..", _String2=".") returned 1 [0192.108] wcscmp (_String1="..", _String2="..") returned 0 [0192.108] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.108] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.108] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6765080 [0192.108] wcscpy (in: _Dest=0x6765080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0192.108] wcscat (in: _Dest=0x6765080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0192.108] wcscat (in: _Dest=0x6765080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" [0194.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0194.831] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.831] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0194.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2560) returned 1 [0194.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0194.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758168) returned 1 Thread: id = 6083 os_tid = 0x220 [0185.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751d50 [0185.947] wcscpy (in: _Dest=0x6751d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0185.947] wcscat (in: _Dest=0x6751d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0185.947] wcscat (in: _Dest=0x6751d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*" [0185.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e27c8 [0185.947] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0192.117] wcscmp (_String1=".", _String2=".") returned 0 [0192.117] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.117] wcscmp (_String1="..", _String2=".") returned 1 [0192.117] wcscmp (_String1="..", _String2="..") returned 0 [0192.117] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.118] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.118] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674cd08 [0192.118] wcscpy (in: _Dest=0x674cd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0192.118] wcscat (in: _Dest=0x674cd08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0192.118] wcscat (in: _Dest=0x674cd08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" [0194.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0194.858] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.858] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0194.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e27c8) returned 1 [0194.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0194.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758270) returned 1 Thread: id = 6084 os_tid = 0x754 [0185.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751e68 [0185.949] wcscpy (in: _Dest=0x6751e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0185.949] wcscat (in: _Dest=0x6751e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0185.950] wcscat (in: _Dest=0x6751e68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*" [0185.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2a30 [0185.950] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0192.116] wcscmp (_String1=".", _String2=".") returned 0 [0192.116] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.116] wcscmp (_String1="..", _String2=".") returned 1 [0192.116] wcscmp (_String1="..", _String2="..") returned 0 [0192.116] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.116] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.116] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674cbe0 [0192.117] wcscpy (in: _Dest=0x674cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0192.117] wcscat (in: _Dest=0x674cbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0192.117] wcscat (in: _Dest=0x674cbe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" [0194.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0194.856] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.856] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0194.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2a30) returned 1 [0194.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0194.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758378) returned 1 Thread: id = 6085 os_tid = 0x17e0 [0186.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751f80 [0186.223] wcscpy (in: _Dest=0x6751f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0186.223] wcscat (in: _Dest=0x6751f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0186.223] wcscat (in: _Dest=0x6751f80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*" [0186.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2c98 [0186.223] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ee0 [0192.164] wcscmp (_String1=".", _String2=".") returned 0 [0192.164] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.164] wcscmp (_String1="..", _String2=".") returned 1 [0192.164] wcscmp (_String1="..", _String2="..") returned 0 [0192.164] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.164] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.164] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674e1d8 [0192.165] wcscpy (in: _Dest=0x674e1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0192.165] wcscat (in: _Dest=0x674e1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0192.165] wcscat (in: _Dest=0x674e1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" [0194.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0194.894] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.894] FindClose (in: hFindFile=0x66d2ee0 | out: hFindFile=0x66d2ee0) returned 1 [0194.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2c98) returned 1 [0194.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 [0194.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758480) returned 1 Thread: id = 6086 os_tid = 0x11c [0186.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg")) returned 0x20 [0186.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0186.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.224] GetLastError () returned 0x5 [0186.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0186.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 6087 os_tid = 0xf68 [0186.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg")) returned 0x20 [0186.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0186.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.225] GetLastError () returned 0x5 [0186.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0186.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 6088 os_tid = 0xef4 [0186.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd")) returned 0x20 [0186.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0186.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.227] GetLastError () returned 0x5 [0186.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0186.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 6089 os_tid = 0x209c [0186.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd")) returned 0x20 [0186.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0186.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.228] GetLastError () returned 0x5 [0186.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0186.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 6090 os_tid = 0x21a0 [0186.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss")) returned 0x20 [0186.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0186.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.230] GetLastError () returned 0x5 [0186.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0186.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 6091 os_tid = 0x1608 [0186.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss")) returned 0x20 [0186.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0186.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.231] GetLastError () returned 0x5 [0186.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0186.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 6092 os_tid = 0xe68 [0186.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss")) returned 0x20 [0186.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0186.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.233] GetLastError () returned 0x5 [0186.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0186.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 6093 os_tid = 0xf60 [0186.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst")) returned 0x20 [0186.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0186.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.234] GetLastError () returned 0x5 [0186.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0186.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 6094 os_tid = 0x10d4 [0186.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss")) returned 0x20 [0186.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0186.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.238] GetLastError () returned 0x5 [0186.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0186.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 6095 os_tid = 0x6f0 [0186.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst")) returned 0x20 [0186.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0186.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.239] GetLastError () returned 0x5 [0186.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0186.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 6096 os_tid = 0xf64 [0186.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg")) returned 0x20 [0186.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0186.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.241] GetLastError () returned 0x5 [0186.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0186.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 6097 os_tid = 0x1144 [0186.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss")) returned 0x20 [0186.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0186.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.243] GetLastError () returned 0x5 [0186.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0186.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 6098 os_tid = 0x9b0 [0186.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst")) returned 0x20 [0186.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0186.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.245] GetLastError () returned 0x5 [0186.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0186.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 6099 os_tid = 0x20a4 [0186.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss")) returned 0x20 [0186.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0186.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.247] GetLastError () returned 0x5 [0186.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0186.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 6100 os_tid = 0x1088 [0186.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst")) returned 0x20 [0186.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0186.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.248] GetLastError () returned 0x5 [0186.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0186.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 6101 os_tid = 0x108c [0186.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss")) returned 0x20 [0186.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0186.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.250] GetLastError () returned 0x5 [0186.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0186.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 6102 os_tid = 0x25c [0186.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss")) returned 0x20 [0186.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0186.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.251] GetLastError () returned 0x5 [0186.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0186.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 6103 os_tid = 0x20c [0186.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss")) returned 0x20 [0186.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0186.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.253] GetLastError () returned 0x5 [0186.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0186.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 6104 os_tid = 0xee8 [0186.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss")) returned 0x20 [0186.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0186.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.254] GetLastError () returned 0x5 [0186.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0186.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 6105 os_tid = 0xe6c [0186.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss")) returned 0x20 [0186.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0186.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.255] GetLastError () returned 0x5 [0186.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0186.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 6106 os_tid = 0x10d0 [0186.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss")) returned 0x20 [0186.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0186.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.269] GetLastError () returned 0x5 [0186.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0186.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 6107 os_tid = 0xa8c [0186.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss")) returned 0x20 [0186.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0186.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.287] GetLastError () returned 0x5 [0186.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0186.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 6108 os_tid = 0xa50 [0186.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss")) returned 0x20 [0186.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0186.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.289] GetLastError () returned 0x5 [0186.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0186.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 6109 os_tid = 0x1090 [0187.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss")) returned 0x20 [0187.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0187.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.023] GetLastError () returned 0x5 [0187.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0187.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 Thread: id = 6110 os_tid = 0x1094 [0187.024] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json")) returned 0x2020 [0187.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0187.025] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2290 [0187.025] GetFileSizeEx (in: hFile=0x2290, lpFileSize=0x7f8feec | out: lpFileSize=0x7f8feec*=243) returned 1 [0187.025] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.025] ReadFile (in: hFile=0x2290, lpBuffer=0x7f8fec8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f8fed8, lpOverlapped=0x0 | out: lpBuffer=0x7f8fec8*, lpNumberOfBytesRead=0x7f8fed8*=0x4, lpOverlapped=0x0) returned 1 [0187.027] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0187.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0187.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0187.028] NtQuerySystemTime (in: CurrentTime=0x7f8fe60 | out: CurrentTime=0x7f8fe60*=132482710955076000) returned 0x0 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x90e9cc9 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x5cb56111 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x49ebf6df [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x55fbd034 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x46721db4 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x1861d7d1 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x1f38896e [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x4fdea04f [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x72223b4d [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x3b901386 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x30e2c42d [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x1b57114a [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x7c161ac7 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x1b3005dc [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x6c5e996c [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x411bf98b [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x786cf224 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x10aa86e9 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x55fbac20 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x3f420f5a [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x3af075aa [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x2c5b2037 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x15a7ce79 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x8268fad [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x558c51d9 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x7197087d [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x7c4a032a [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x6d54fde8 [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x2f60881e [0187.028] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x77af90f5 [0187.029] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0xd5aeb67 [0187.029] RtlRandomEx (in: Seed=0x7f8fe58 | out: Seed=0x7f8fe58) returned 0x1d36fcb1 [0187.037] ReadFile (in: hFile=0x2290, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x7f8fe54, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0x7f8fe54*=0xf3, lpOverlapped=0x0) returned 1 [0187.037] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.037] WriteFile (in: hFile=0x2290, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x7f8fe58, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0x7f8fe58*=0xf3, lpOverlapped=0x0) returned 1 [0188.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0188.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0188.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0188.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0188.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0188.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0188.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a2d0) returned 1 [0188.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0188.512] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.512] WriteFile (in: hFile=0x2290, lpBuffer=0x30bcab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f8fee0, lpOverlapped=0x0 | out: lpBuffer=0x30bcab0*, lpNumberOfBytesWritten=0x7f8fee0*=0x10c, lpOverlapped=0x0) returned 1 [0188.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 [0188.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0188.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0188.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0188.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0188.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0188.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0188.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0188.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0188.821] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" [0188.821] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.ac3a86" [0188.821] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.ac3a86", NtPathName=0x7f8fe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x2fce88 [0188.925] FlushFileBuffers (hFile=0x2290) returned 1 [0188.941] CloseHandle (hObject=0x2290) returned 1 [0188.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x675a678 [0188.942] wcscpy (in: _Dest=0x675a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0188.942] wcscat (in: _Dest=0x675a678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\AC3A86-Readme.txt" [0188.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\ac3a86-readme.txt")) returned 0xffffffff [0188.942] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2294 [0188.968] WriteFile (in: hFile=0x2294, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f8fe74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7f8fe74*=0x8b9, lpOverlapped=0x0) returned 1 [0188.970] CloseHandle (hObject=0x2294) returned 1 [0188.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a678) returned 1 [0188.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 Thread: id = 6111 os_tid = 0x109c [0187.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0187.039] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0187.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2298 [0187.040] GetFileSizeEx (in: hFile=0x2298, lpFileSize=0x828f99c | out: lpFileSize=0x828f99c*=251) returned 1 [0187.040] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.040] ReadFile (in: hFile=0x2298, lpBuffer=0x828f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x828f988, lpOverlapped=0x0 | out: lpBuffer=0x828f978*, lpNumberOfBytesRead=0x828f988*=0x4, lpOverlapped=0x0) returned 1 [0187.042] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0187.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0187.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0187.042] NtQuerySystemTime (in: CurrentTime=0x828f910 | out: CurrentTime=0x828f910*=132482710955232000) returned 0x0 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x30789eb6 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2ce87d67 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x1372bcd1 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x7f53c138 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2fcf4ba6 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x6f8e1264 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x62f6a45 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x5e589b1a [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x7d98ae01 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2954bf81 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2eda21b1 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x351095c5 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x6167f578 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x1a7c431e [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x7994f8a5 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2c1b958 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x22ae8543 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x5402835f [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x4e065603 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x5f004d6b [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2927ffa9 [0187.042] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x31bbb9b1 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x36166ea [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x73868418 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x21fa3755 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x784ba21c [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x5611a861 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x68615556 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x6833d387 [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x81b7aac [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x753c3e7d [0187.043] RtlRandomEx (in: Seed=0x828f908 | out: Seed=0x828f908) returned 0x2f5d5d90 [0187.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0187.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0187.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0187.475] ReadFile (in: hFile=0x2298, lpBuffer=0x6737b18, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x828f904, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0x828f904*=0xfb, lpOverlapped=0x0) returned 1 [0187.475] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.475] WriteFile (in: hFile=0x2298, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x828f908, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x828f908*=0xfb, lpOverlapped=0x0) returned 1 [0188.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0188.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0188.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0188.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0188.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0188.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0188.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba70) returned 1 [0188.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0188.500] SetFilePointerEx (in: hFile=0x2298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.500] WriteFile (in: hFile=0x2298, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x828f990, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0x828f990*=0x10c, lpOverlapped=0x0) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0188.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0188.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0188.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0188.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40540 [0188.770] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" [0188.770] wcscat (in: _Dest=0x3d40540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.ac3a86" [0188.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0x828f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3e80fa0 [0188.936] FlushFileBuffers (hFile=0x2298) returned 1 [0188.949] CloseHandle (hObject=0x2298) returned 1 [0188.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x675a8c8 [0188.950] wcscpy (in: _Dest=0x675a8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0188.950] wcscat (in: _Dest=0x675a8c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\AC3A86-Readme.txt" [0188.950] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0188.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2298 [0188.955] WriteFile (in: hFile=0x2298, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x828f924, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x828f924*=0x8b9, lpOverlapped=0x0) returned 1 [0188.958] CloseHandle (hObject=0x2298) returned 1 [0188.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a8c8) returned 1 [0188.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331860) returned 1 Thread: id = 6112 os_tid = 0x10f0 [0187.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6758588 [0187.480] wcscpy (in: _Dest=0x6758588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0187.480] wcscat (in: _Dest=0x6758588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0187.480] wcscat (in: _Dest=0x6758588, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*" [0187.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0187.480] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21a0 [0188.729] wcscmp (_String1=".", _String2=".") returned 0 [0188.729] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.729] wcscmp (_String1="..", _String2=".") returned 1 [0188.729] wcscmp (_String1="..", _String2="..") returned 0 [0188.729] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.729] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.729] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6759770 [0188.729] wcscpy (in: _Dest=0x6759770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0188.729] wcscat (in: _Dest=0x6759770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0188.729] wcscat (in: _Dest=0x6759770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" [0189.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0189.850] FindNextFileW (in: hFindFile=0x66d21a0, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.850] FindClose (in: hFindFile=0x66d21a0 | out: hFindFile=0x66d21a0) returned 1 [0189.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0189.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758588) returned 1 [0189.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754060) returned 1 Thread: id = 6113 os_tid = 0x21dc [0187.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6758690 [0187.481] wcscpy (in: _Dest=0x6758690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0187.481] wcscat (in: _Dest=0x6758690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0187.481] wcscat (in: _Dest=0x6758690, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*" [0187.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0187.481] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2460 [0188.734] wcscmp (_String1=".", _String2=".") returned 0 [0188.734] FindNextFileW (in: hFindFile=0x66d2460, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.734] wcscmp (_String1="..", _String2=".") returned 1 [0188.734] wcscmp (_String1="..", _String2="..") returned 0 [0188.735] FindNextFileW (in: hFindFile=0x66d2460, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.735] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.735] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6759f88 [0188.735] wcscpy (in: _Dest=0x6759f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0188.735] wcscat (in: _Dest=0x6759f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0188.735] wcscat (in: _Dest=0x6759f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" [0189.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0189.865] FindNextFileW (in: hFindFile=0x66d2460, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.865] FindClose (in: hFindFile=0x66d2460 | out: hFindFile=0x66d2460) returned 1 [0189.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0189.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758690) returned 1 [0189.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448a0) returned 1 Thread: id = 6114 os_tid = 0x21d8 [0187.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6758798 [0187.481] wcscpy (in: _Dest=0x6758798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0187.481] wcscat (in: _Dest=0x6758798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0187.481] wcscat (in: _Dest=0x6758798, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*" [0187.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2f00 [0187.481] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*", lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2360 [0188.729] wcscmp (_String1=".", _String2=".") returned 0 [0188.729] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.729] wcscmp (_String1="..", _String2=".") returned 1 [0188.730] wcscmp (_String1="..", _String2="..") returned 0 [0188.730] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.730] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.730] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759898 [0188.730] wcscpy (in: _Dest=0x6759898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0188.730] wcscat (in: _Dest=0x6759898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0188.730] wcscat (in: _Dest=0x6759898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" [0189.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0189.852] FindNextFileW (in: hFindFile=0x66d2360, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.852] FindClose (in: hFindFile=0x66d2360 | out: hFindFile=0x66d2360) returned 1 [0189.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2f00) returned 1 [0189.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758798) returned 1 [0189.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17a70) returned 1 Thread: id = 6115 os_tid = 0x17ac [0187.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x67588a0 [0187.482] wcscpy (in: _Dest=0x67588a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0187.482] wcscat (in: _Dest=0x67588a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0187.482] wcscat (in: _Dest=0x67588a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*" [0187.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3168 [0187.482] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*", lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d22a0 [0188.730] wcscmp (_String1=".", _String2=".") returned 0 [0188.730] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.730] wcscmp (_String1="..", _String2=".") returned 1 [0188.730] wcscmp (_String1="..", _String2="..") returned 0 [0188.730] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.730] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.730] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67599c0 [0188.730] wcscpy (in: _Dest=0x67599c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0188.730] wcscat (in: _Dest=0x67599c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0188.730] wcscat (in: _Dest=0x67599c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" [0189.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67599c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0189.854] FindNextFileW (in: hFindFile=0x66d22a0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.854] FindClose (in: hFindFile=0x66d22a0 | out: hFindFile=0x66d22a0) returned 1 [0189.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3168) returned 1 [0189.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67588a0) returned 1 [0189.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17d70) returned 1 Thread: id = 6116 os_tid = 0x2250 [0187.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f248f8 [0187.483] wcscpy (in: _Dest=0x3f248f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0187.483] wcscat (in: _Dest=0x3f248f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0187.483] wcscat (in: _Dest=0x3f248f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*" [0187.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e33d0 [0187.483] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*", lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d21e0 [0188.731] wcscmp (_String1=".", _String2=".") returned 0 [0188.731] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.731] wcscmp (_String1="..", _String2=".") returned 1 [0188.731] wcscmp (_String1="..", _String2="..") returned 0 [0188.731] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.731] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.731] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759ae8 [0188.731] wcscpy (in: _Dest=0x6759ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0188.731] wcscat (in: _Dest=0x6759ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0188.731] wcscat (in: _Dest=0x6759ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" [0189.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0189.856] FindNextFileW (in: hFindFile=0x66d21e0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.856] FindClose (in: hFindFile=0x66d21e0 | out: hFindFile=0x66d21e0) returned 1 [0189.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e33d0) returned 1 [0189.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f248f8) returned 1 [0189.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15470) returned 1 Thread: id = 6117 os_tid = 0x2254 [0187.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f247f0 [0187.483] wcscpy (in: _Dest=0x3f247f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0187.483] wcscat (in: _Dest=0x3f247f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0187.483] wcscat (in: _Dest=0x3f247f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*" [0187.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3638 [0187.484] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*", lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d25e0 [0188.735] wcscmp (_String1=".", _String2=".") returned 0 [0188.735] FindNextFileW (in: hFindFile=0x66d25e0, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.735] wcscmp (_String1="..", _String2=".") returned 1 [0188.735] wcscmp (_String1="..", _String2="..") returned 0 [0188.735] FindNextFileW (in: hFindFile=0x66d25e0, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.736] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.736] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x675a0b0 [0188.736] wcscpy (in: _Dest=0x675a0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0188.736] wcscat (in: _Dest=0x675a0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0188.736] wcscat (in: _Dest=0x675a0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" [0189.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0189.866] FindNextFileW (in: hFindFile=0x66d25e0, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.867] FindClose (in: hFindFile=0x66d25e0 | out: hFindFile=0x66d25e0) returned 1 [0189.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3638) returned 1 [0189.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f247f0) returned 1 [0189.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15970) returned 1 Thread: id = 6118 os_tid = 0x2258 [0187.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f246e8 [0187.484] wcscpy (in: _Dest=0x3f246e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0187.484] wcscat (in: _Dest=0x3f246e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0187.484] wcscat (in: _Dest=0x3f246e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*" [0187.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e38a0 [0187.484] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*", lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2160 [0188.732] wcscmp (_String1=".", _String2=".") returned 0 [0188.732] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.732] wcscmp (_String1="..", _String2=".") returned 1 [0188.732] wcscmp (_String1="..", _String2="..") returned 0 [0188.732] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.732] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.732] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759c10 [0188.732] wcscpy (in: _Dest=0x6759c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0188.732] wcscat (in: _Dest=0x6759c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0188.732] wcscat (in: _Dest=0x6759c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" [0189.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc [0189.858] FindNextFileW (in: hFindFile=0x66d2160, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.858] FindClose (in: hFindFile=0x66d2160 | out: hFindFile=0x66d2160) returned 1 [0189.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e38a0) returned 1 [0189.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f246e8) returned 1 [0189.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18170) returned 1 Thread: id = 6119 os_tid = 0x225c [0187.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f245e0 [0187.485] wcscpy (in: _Dest=0x3f245e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0187.485] wcscat (in: _Dest=0x3f245e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0187.485] wcscat (in: _Dest=0x3f245e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*" [0187.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3b08 [0187.485] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*", lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2620 [0188.736] wcscmp (_String1=".", _String2=".") returned 0 [0188.736] FindNextFileW (in: hFindFile=0x66d2620, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.736] wcscmp (_String1="..", _String2=".") returned 1 [0188.736] wcscmp (_String1="..", _String2="..") returned 0 [0188.736] FindNextFileW (in: hFindFile=0x66d2620, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.736] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.737] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x675a1d8 [0188.737] wcscpy (in: _Dest=0x675a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0188.737] wcscat (in: _Dest=0x675a1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0188.737] wcscat (in: _Dest=0x675a1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" [0189.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0189.868] FindNextFileW (in: hFindFile=0x66d2620, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.868] FindClose (in: hFindFile=0x66d2620 | out: hFindFile=0x66d2620) returned 1 [0189.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3b08) returned 1 [0189.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f245e0) returned 1 [0189.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8308) returned 1 Thread: id = 6120 os_tid = 0x2260 [0187.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f244d8 [0187.485] wcscpy (in: _Dest=0x3f244d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0187.485] wcscat (in: _Dest=0x3f244d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0187.485] wcscat (in: _Dest=0x3f244d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*" [0187.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3d70 [0187.485] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*", lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d20e0 [0188.733] wcscmp (_String1=".", _String2=".") returned 0 [0188.733] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.733] wcscmp (_String1="..", _String2=".") returned 1 [0188.733] wcscmp (_String1="..", _String2="..") returned 0 [0188.733] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.733] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.733] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759d38 [0188.733] wcscpy (in: _Dest=0x6759d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0188.733] wcscat (in: _Dest=0x6759d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0188.733] wcscat (in: _Dest=0x6759d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" [0189.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0189.860] FindNextFileW (in: hFindFile=0x66d20e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.861] FindClose (in: hFindFile=0x66d20e0 | out: hFindFile=0x66d20e0) returned 1 [0189.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3d70) returned 1 [0189.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f244d8) returned 1 [0189.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8408) returned 1 Thread: id = 6121 os_tid = 0x2188 [0187.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f243d0 [0187.486] wcscpy (in: _Dest=0x3f243d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0187.486] wcscat (in: _Dest=0x3f243d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0187.486] wcscat (in: _Dest=0x3f243d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*" [0187.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3fd8 [0187.486] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*", lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2660 [0188.737] wcscmp (_String1=".", _String2=".") returned 0 [0188.737] FindNextFileW (in: hFindFile=0x66d2660, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.737] wcscmp (_String1="..", _String2=".") returned 1 [0188.737] wcscmp (_String1="..", _String2="..") returned 0 [0188.737] FindNextFileW (in: hFindFile=0x66d2660, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.737] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.737] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x675a300 [0188.738] wcscpy (in: _Dest=0x675a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0188.738] wcscat (in: _Dest=0x675a300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0188.738] wcscat (in: _Dest=0x675a300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" [0189.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0189.870] FindNextFileW (in: hFindFile=0x66d2660, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.870] FindClose (in: hFindFile=0x66d2660 | out: hFindFile=0x66d2660) returned 1 [0189.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3fd8) returned 1 [0189.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f243d0) returned 1 [0189.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8508) returned 1 Thread: id = 6122 os_tid = 0x2264 [0187.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f242c8 [0187.486] wcscpy (in: _Dest=0x3f242c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0187.487] wcscat (in: _Dest=0x3f242c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0187.487] wcscat (in: _Dest=0x3f242c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*" [0187.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4240 [0187.487] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*", lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2420 [0188.733] wcscmp (_String1=".", _String2=".") returned 0 [0188.733] FindNextFileW (in: hFindFile=0x66d2420, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.734] wcscmp (_String1="..", _String2=".") returned 1 [0188.734] wcscmp (_String1="..", _String2="..") returned 0 [0188.734] FindNextFileW (in: hFindFile=0x66d2420, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.734] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.734] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6759e60 [0188.734] wcscpy (in: _Dest=0x6759e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0188.734] wcscat (in: _Dest=0x6759e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0188.734] wcscat (in: _Dest=0x6759e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" [0189.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0189.862] FindNextFileW (in: hFindFile=0x66d2420, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.863] FindClose (in: hFindFile=0x66d2420 | out: hFindFile=0x66d2420) returned 1 [0189.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4240) returned 1 [0189.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f242c8) returned 1 [0189.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8608) returned 1 Thread: id = 6123 os_tid = 0x22b4 [0187.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f241c0 [0187.487] wcscpy (in: _Dest=0x3f241c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0187.487] wcscat (in: _Dest=0x3f241c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0187.487] wcscat (in: _Dest=0x3f241c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*" [0187.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e44a8 [0187.487] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*", lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d26a0 [0188.738] wcscmp (_String1=".", _String2=".") returned 0 [0188.738] FindNextFileW (in: hFindFile=0x66d26a0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.738] wcscmp (_String1="..", _String2=".") returned 1 [0188.738] wcscmp (_String1="..", _String2="..") returned 0 [0188.738] FindNextFileW (in: hFindFile=0x66d26a0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.738] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.738] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x675a428 [0188.739] wcscpy (in: _Dest=0x675a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0188.739] wcscat (in: _Dest=0x675a428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0188.739] wcscat (in: _Dest=0x675a428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" [0189.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0189.872] FindNextFileW (in: hFindFile=0x66d26a0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.872] FindClose (in: hFindFile=0x66d26a0 | out: hFindFile=0x66d26a0) returned 1 [0189.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e44a8) returned 1 [0189.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f241c0) returned 1 [0189.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8708) returned 1 Thread: id = 6124 os_tid = 0x22b8 [0187.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f240b8 [0187.488] wcscpy (in: _Dest=0x3f240b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0187.488] wcscat (in: _Dest=0x3f240b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0187.488] wcscat (in: _Dest=0x3f240b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*" [0187.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4710 [0187.488] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*", lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d26e0 [0188.739] wcscmp (_String1=".", _String2=".") returned 0 [0188.739] FindNextFileW (in: hFindFile=0x66d26e0, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.739] wcscmp (_String1="..", _String2=".") returned 1 [0188.739] wcscmp (_String1="..", _String2="..") returned 0 [0188.739] FindNextFileW (in: hFindFile=0x66d26e0, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.739] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.740] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x675a550 [0188.740] wcscpy (in: _Dest=0x675a550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0188.740] wcscat (in: _Dest=0x675a550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0188.740] wcscat (in: _Dest=0x675a550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" [0189.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0189.874] FindNextFileW (in: hFindFile=0x66d26e0, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.874] FindClose (in: hFindFile=0x66d26e0 | out: hFindFile=0x66d26e0) returned 1 [0189.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4710) returned 1 [0189.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f240b8) returned 1 [0189.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449a8) returned 1 Thread: id = 6125 os_tid = 0x22bc [0187.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f23fb0 [0187.488] wcscpy (in: _Dest=0x3f23fb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0187.488] wcscat (in: _Dest=0x3f23fb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0187.488] wcscat (in: _Dest=0x3f23fb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*" [0187.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4978 [0187.488] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*", lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0188.713] wcscmp (_String1=".", _String2=".") returned 0 [0188.713] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.713] wcscmp (_String1="..", _String2=".") returned 1 [0188.713] wcscmp (_String1="..", _String2="..") returned 0 [0188.713] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.713] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.713] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67561d8 [0188.713] wcscpy (in: _Dest=0x67561d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0188.713] wcscat (in: _Dest=0x67561d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0188.713] wcscat (in: _Dest=0x67561d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" [0189.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67561d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0189.802] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.802] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0189.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4978) returned 1 [0189.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23fb0) returned 1 [0189.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44270) returned 1 Thread: id = 6126 os_tid = 0x22c0 [0187.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0187.489] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.348] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b48 [0189.348] GetFileSizeEx (in: hFile=0x1b48, lpFileSize=0x86dfc1c | out: lpFileSize=0x86dfc1c*=257) returned 1 [0189.348] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.348] ReadFile (in: hFile=0x1b48, lpBuffer=0x86dfbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x86dfc08, lpOverlapped=0x0 | out: lpBuffer=0x86dfbf8*, lpNumberOfBytesRead=0x86dfc08*=0x4, lpOverlapped=0x0) returned 1 [0189.350] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0189.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0189.350] NtQuerySystemTime (in: CurrentTime=0x86dfb90 | out: CurrentTime=0x86dfb90*=132482710978320000) returned 0x0 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x4b89f8cb [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x4cbcd804 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x6dfadc4e [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x515515ce [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x5e16737c [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x6c3d9aea [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x248e81f8 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x18129ab2 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x25c134a4 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x1e95c1e0 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x20a533f8 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x11230063 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x6b854ad [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x73a0e4a7 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x610c8c16 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x7df81535 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x57738487 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x569deaa4 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x3863319b [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x653aee69 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x184ee7d [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x358963c9 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x3fb00535 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x3462584f [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x4886a3eb [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x3e7f3108 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x684841c9 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x4d51c285 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x56acd764 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x7cffd7e3 [0189.351] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x57eebdde [0189.352] RtlRandomEx (in: Seed=0x86dfb88 | out: Seed=0x86dfb88) returned 0x5d8accb6 [0189.361] ReadFile (in: hFile=0x1b48, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x86dfb84, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0x86dfb84*=0x101, lpOverlapped=0x0) returned 1 [0189.361] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.361] WriteFile (in: hFile=0x1b48, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x86dfb88, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0x86dfb88*=0x101, lpOverlapped=0x0) returned 1 [0191.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0191.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0191.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0191.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0191.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0191.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0191.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823098) returned 1 [0191.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823098 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d7d8 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0191.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5600 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0191.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0191.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0191.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823098) returned 1 [0191.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c3b88 [0191.152] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.152] WriteFile (in: hFile=0x1b48, lpBuffer=0x69c3b88*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x86dfc10, lpOverlapped=0x0 | out: lpBuffer=0x69c3b88*, lpNumberOfBytesWritten=0x86dfc10*=0x10c, lpOverlapped=0x0) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3b88) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0192.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0192.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d419f8 [0192.271] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" [0192.271] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.ac3a86" [0192.271] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0x86dfb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768c00 [0192.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768c00) returned 1 [0192.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6892740) returned 1 [0192.338] NtQueryInformationFile (in: FileHandle=0x1b48, IoStatusBlock=0x86dfb60, FileInformation=0x86dfb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x86dfb60, FileInformation=0x86dfb68) returned 0x0 [0192.338] NtSetInformationFile (FileHandle=0x1b48, IoStatusBlock=0x86dfb60, FileInformation=0x86dfb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419f8) returned 1 [0192.409] FlushFileBuffers (hFile=0x1b48) returned 1 [0192.427] CloseHandle (hObject=0x1b48) returned 1 [0192.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41c68 [0192.491] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0192.491] wcscat (in: _Dest=0x3d41c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\AC3A86-Readme.txt" [0192.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0192.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x644 [0192.514] WriteFile (in: hFile=0x644, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x86dfba4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x86dfba4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.533] CloseHandle (hObject=0x644) returned 1 [0192.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0192.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750678) returned 1 Thread: id = 6127 os_tid = 0x22c4 [0187.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0187.489] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.363] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2324 [0189.364] GetFileSizeEx (in: hFile=0x2324, lpFileSize=0xdc6f994 | out: lpFileSize=0xdc6f994*=260) returned 1 [0189.364] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.364] ReadFile (in: hFile=0x2324, lpBuffer=0xdc6f970, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdc6f980, lpOverlapped=0x0 | out: lpBuffer=0xdc6f970*, lpNumberOfBytesRead=0xdc6f980*=0x4, lpOverlapped=0x0) returned 1 [0189.366] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0189.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0189.366] NtQuerySystemTime (in: CurrentTime=0xdc6f908 | out: CurrentTime=0xdc6f908*=132482710978476000) returned 0x0 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x333696af [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x57bda1ba [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x320185b4 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x534b596b [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x4239d8fe [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x26618a0d [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x405c8503 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x46ab30ef [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x579eff24 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0xc00b442 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x5b7a3513 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x75808331 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x6be8bdaf [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x2852eeda [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x2e33bfb5 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x3f069584 [0189.366] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x44553fab [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x3c56fb9a [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x1040525f [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x60540f2e [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x6a12316f [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0xfc5ab8f [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x1fdcfc67 [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x75185c6a [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x856b9e2 [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x50cb942f [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0xc378d56 [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x49ed3c4a [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x28f0b4ba [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x3cf6c641 [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x5b917674 [0189.367] RtlRandomEx (in: Seed=0xdc6f900 | out: Seed=0xdc6f900) returned 0x1f134aaa [0189.377] ReadFile (in: hFile=0x2324, lpBuffer=0x69a9140, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xdc6f8fc, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesRead=0xdc6f8fc*=0x104, lpOverlapped=0x0) returned 1 [0189.377] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.377] WriteFile (in: hFile=0x2324, lpBuffer=0x69acd48*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xdc6f900, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesWritten=0xdc6f900*=0x104, lpOverlapped=0x0) returned 1 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822b88) returned 1 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5390 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822b88 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1dc88 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0191.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53c0 [0191.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0191.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0191.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0191.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0191.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822b88) returned 1 [0191.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e3e0 [0191.143] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.143] WriteFile (in: hFile=0x2324, lpBuffer=0x675e3e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdc6f988, lpOverlapped=0x0 | out: lpBuffer=0x675e3e0*, lpNumberOfBytesWritten=0xdc6f988*=0x10c, lpOverlapped=0x0) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0192.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41650 [0192.264] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" [0192.264] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.ac3a86" [0192.264] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0xdc6f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x30af718 [0192.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30af718) returned 1 [0192.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897930) returned 1 [0192.334] NtQueryInformationFile (in: FileHandle=0x2324, IoStatusBlock=0xdc6f8d8, FileInformation=0xdc6f8e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdc6f8d8, FileInformation=0xdc6f8e0) returned 0x0 [0192.334] NtSetInformationFile (FileHandle=0x2324, IoStatusBlock=0xdc6f8d8, FileInformation=0xdc6f8e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0192.396] FlushFileBuffers (hFile=0x2324) returned 1 [0192.414] CloseHandle (hObject=0x2324) returned 1 [0192.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0192.487] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0192.487] wcscat (in: _Dest=0x3d40678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\AC3A86-Readme.txt" [0192.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0192.487] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f84 [0192.513] WriteFile (in: hFile=0x1f84, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdc6f91c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdc6f91c*=0x8b9, lpOverlapped=0x0) returned 1 [0192.527] CloseHandle (hObject=0x1f84) returned 1 [0192.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0192.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67507a0) returned 1 Thread: id = 6128 os_tid = 0x22c8 [0187.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 0x2020 [0187.490] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0195.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x222c [0195.125] GetFileSizeEx (in: hFile=0x222c, lpFileSize=0xd82fc54 | out: lpFileSize=0xd82fc54*=252) returned 1 [0195.125] SetFilePointerEx (in: hFile=0x222c, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.125] ReadFile (in: hFile=0x222c, lpBuffer=0xd82fc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd82fc40, lpOverlapped=0x0 | out: lpBuffer=0xd82fc30*, lpNumberOfBytesRead=0xd82fc40*=0x4, lpOverlapped=0x0) returned 1 [0195.127] SetFilePointerEx (in: hFile=0x222c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0195.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0195.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0195.128] NtQuerySystemTime (in: CurrentTime=0xd82fbc8 | out: CurrentTime=0xd82fbc8*=132482711036040000) returned 0x0 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x6d3a7d43 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x7452c387 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x12a78d47 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x16db16a1 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x796d2536 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x73348406 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0xd8dcdb3 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x1c8a1e64 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x261411d6 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x3547b0c8 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x31ca7156 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x51e330fe [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x4b8f09 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x18b0a524 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x7b9ffada [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x27785aaa [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x31669734 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x61322ce [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x5296beb2 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x6175561f [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x5e804a6e [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x2b74ebbb [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x4fcec5cf [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x3ac3a73a [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x7e49dcb7 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x3106581d [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x784361b7 [0195.128] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x6f53b42 [0195.129] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x64a3294d [0195.129] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x6a6c4435 [0195.129] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x664eb747 [0195.129] RtlRandomEx (in: Seed=0xd82fbc0 | out: Seed=0xd82fbc0) returned 0x43946338 [0195.137] ReadFile (in: hFile=0x222c, lpBuffer=0x130a58b0, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xd82fbbc, lpOverlapped=0x0 | out: lpBuffer=0x130a58b0*, lpNumberOfBytesRead=0xd82fbbc*=0xfc, lpOverlapped=0x0) returned 1 [0195.137] SetFilePointerEx (in: hFile=0x222c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.137] WriteFile (in: hFile=0x222c, lpBuffer=0x130a94b8*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xd82fbc0, lpOverlapped=0x0 | out: lpBuffer=0x130a94b8*, lpNumberOfBytesWritten=0xd82fbc0*=0xfc, lpOverlapped=0x0) returned 1 [0197.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0197.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0197.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0197.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a94b8) returned 1 [0197.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a58b0) returned 1 [0198.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28d30) returned 1 [0198.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823170) returned 1 [0198.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0198.312] SetFilePointerEx (in: hFile=0x222c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.312] WriteFile (in: hFile=0x222c, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd82fc48, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xd82fc48*=0x10c, lpOverlapped=0x0) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0200.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0200.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41518 [0200.199] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" [0200.199] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.ac3a86" [0200.199] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xd82fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6778830 [0200.213] FlushFileBuffers (hFile=0x222c) returned 1 [0200.221] CloseHandle (hObject=0x222c) returned 1 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41518 [0200.223] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0200.223] wcscat (in: _Dest=0x3d41518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\AC3A86-Readme.txt" [0200.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0200.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x222c [0200.224] WriteFile (in: hFile=0x222c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd82fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd82fbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0200.226] CloseHandle (hObject=0x222c) returned 1 [0200.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0200.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67508c8) returned 1 Thread: id = 6129 os_tid = 0x22cc [0187.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 0x2020 [0187.490] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0189.378] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2304 [0189.379] GetFileSizeEx (in: hFile=0x2304, lpFileSize=0xd88f91c | out: lpFileSize=0xd88f91c*=278) returned 1 [0189.379] SetFilePointerEx (in: hFile=0x2304, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.379] ReadFile (in: hFile=0x2304, lpBuffer=0xd88f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd88f908, lpOverlapped=0x0 | out: lpBuffer=0xd88f8f8*, lpNumberOfBytesRead=0xd88f908*=0x4, lpOverlapped=0x0) returned 1 [0189.381] SetFilePointerEx (in: hFile=0x2304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0189.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0189.381] NtQuerySystemTime (in: CurrentTime=0xd88f890 | out: CurrentTime=0xd88f890*=132482710978632000) returned 0x0 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x36bfe268 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x2a2b346a [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x155efc79 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x65e242af [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x1088c66d [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x726ba710 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x7b734767 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x90682d6 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x23278143 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x50ea75fc [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x6a633b27 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x5eae5a8e [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x3bc9c2d8 [0189.381] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x56483924 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x567311e4 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x3a16ee7a [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x7d9c453 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x7f68eec [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x12901689 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x304c8173 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x718dba3c [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x3db0d0e3 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x72b031ec [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x3dc9ed02 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x2c60796a [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x68bd57b8 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x63ab1b40 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x31de6a1f [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x62a9ec90 [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x5e10c9fe [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x20c363ed [0189.382] RtlRandomEx (in: Seed=0xd88f888 | out: Seed=0xd88f888) returned 0x24746781 [0189.392] ReadFile (in: hFile=0x2304, lpBuffer=0x69b0950, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xd88f884, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xd88f884*=0x116, lpOverlapped=0x0) returned 1 [0189.392] SetFilePointerEx (in: hFile=0x2304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.392] WriteFile (in: hFile=0x2304, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xd88f888, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0xd88f888*=0x116, lpOverlapped=0x0) returned 1 [0191.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822c60) returned 1 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53f0 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822c60 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d9b8 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5420 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a20 [0191.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0191.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0191.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0191.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822c60) returned 1 [0191.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c32c8 [0191.145] SetFilePointerEx (in: hFile=0x2304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.145] WriteFile (in: hFile=0x2304, lpBuffer=0x69c32c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd88f910, lpOverlapped=0x0 | out: lpBuffer=0x69c32c8*, lpNumberOfBytesWritten=0xd88f910*=0x10c, lpOverlapped=0x0) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32c8) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aec0) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0192.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41788 [0192.266] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" [0192.266] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.ac3a86" [0192.266] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xd88f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768ab8 [0192.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768ab8) returned 1 [0192.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6893430) returned 1 [0192.335] NtQueryInformationFile (in: FileHandle=0x2304, IoStatusBlock=0xd88f860, FileInformation=0xd88f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd88f860, FileInformation=0xd88f868) returned 0x0 [0192.335] NtSetInformationFile (FileHandle=0x2304, IoStatusBlock=0xd88f860, FileInformation=0xd88f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41788) returned 1 [0192.400] FlushFileBuffers (hFile=0x2304) returned 1 [0192.418] CloseHandle (hObject=0x2304) returned 1 [0192.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41ed8 [0192.488] wcscpy (in: _Dest=0x3d41ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0192.488] wcscat (in: _Dest=0x3d41ed8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\AC3A86-Readme.txt" [0192.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0192.488] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1154 [0192.514] WriteFile (in: hFile=0x1154, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd88f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd88f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.531] CloseHandle (hObject=0x1154) returned 1 [0192.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ed8) returned 1 [0192.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754ab8) returned 1 Thread: id = 6130 os_tid = 0x22d0 [0187.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 0x2020 [0187.491] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb78 [0194.655] GetFileSizeEx (in: hFile=0xb78, lpFileSize=0xdbcfcfc | out: lpFileSize=0xdbcfcfc*=345) returned 1 [0194.655] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.655] ReadFile (in: hFile=0xb78, lpBuffer=0xdbcfcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdbcfce8, lpOverlapped=0x0 | out: lpBuffer=0xdbcfcd8*, lpNumberOfBytesRead=0xdbcfce8*=0x4, lpOverlapped=0x0) returned 1 [0194.656] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0194.656] NtQuerySystemTime (in: CurrentTime=0xdbcfc70 | out: CurrentTime=0xdbcfc70*=132482711031360000) returned 0x0 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x75b1491c [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x63d9caab [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x3ac0354f [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x2439a8e0 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x7e07fd66 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x73500bd8 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x67451dc8 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x17766de7 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x34930b90 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x602975b7 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x1b6b501d [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x1a66bfd7 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x574cea4f [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x5c978629 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x24c682a2 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x569a2f53 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x34930b90 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x3066c1b5 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x571fbd37 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x4932f21a [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x1a10051b [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0xe871b49 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x5d17af3f [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x5b437c8c [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x441834f1 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x61894b83 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0xe26795f [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x2fc5d0ca [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x811e78f [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x39a522dc [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x1508da93 [0194.657] RtlRandomEx (in: Seed=0xdbcfc68 | out: Seed=0xdbcfc68) returned 0x2d8335bb [0194.665] ReadFile (in: hFile=0xb78, lpBuffer=0x1305a498, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0xdbcfc64, lpOverlapped=0x0 | out: lpBuffer=0x1305a498*, lpNumberOfBytesRead=0xdbcfc64*=0x159, lpOverlapped=0x0) returned 1 [0194.666] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.666] WriteFile (in: hFile=0xb78, lpBuffer=0x1305e0a0*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0xdbcfc68, lpOverlapped=0x0 | out: lpBuffer=0x1305e0a0*, lpNumberOfBytesWritten=0xdbcfc68*=0x159, lpOverlapped=0x0) returned 1 [0197.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0197.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1305e0a0) returned 1 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1305a498) returned 1 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28808) returned 1 [0197.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4500) returned 1 [0197.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86228 [0197.362] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.362] WriteFile (in: hFile=0xb78, lpBuffer=0x69c3a70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdbcfcf0, lpOverlapped=0x0 | out: lpBuffer=0x69c3a70*, lpNumberOfBytesWritten=0xdbcfcf0*=0x10c, lpOverlapped=0x0) returned 1 [0197.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a70) returned 1 [0197.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86258) returned 1 [0197.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0197.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86228) returned 1 [0197.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0197.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0197.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0197.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0197.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67746c0 [0197.652] wcscpy (in: _Dest=0x67746c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" [0197.652] wcscat (in: _Dest=0x67746c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.ac3a86" [0197.652] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xdbcfc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769f38 [0198.016] FlushFileBuffers (hFile=0xb78) returned 1 [0198.025] CloseHandle (hObject=0xb78) returned 1 [0198.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6774450 [0198.135] wcscpy (in: _Dest=0x6774450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0198.135] wcscat (in: _Dest=0x6774450, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\AC3A86-Readme.txt" [0198.135] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0198.136] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12c4 [0199.119] WriteFile (in: hFile=0x12c4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdbcfc84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdbcfc84*=0x8b9, lpOverlapped=0x0) returned 1 [0199.968] CloseHandle (hObject=0x12c4) returned 1 [0199.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774450) returned 1 [0199.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754be0) returned 1 Thread: id = 6131 os_tid = 0x22d4 [0187.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0187.492] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.394] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe10 [0189.395] GetFileSizeEx (in: hFile=0xe10, lpFileSize=0xcaff8bc | out: lpFileSize=0xcaff8bc*=263) returned 1 [0189.395] SetFilePointerEx (in: hFile=0xe10, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.395] ReadFile (in: hFile=0xe10, lpBuffer=0xcaff898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcaff8a8, lpOverlapped=0x0 | out: lpBuffer=0xcaff898*, lpNumberOfBytesRead=0xcaff8a8*=0x4, lpOverlapped=0x0) returned 1 [0189.397] SetFilePointerEx (in: hFile=0xe10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0189.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0189.397] NtQuerySystemTime (in: CurrentTime=0xcaff830 | out: CurrentTime=0xcaff830*=132482710978788000) returned 0x0 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x657d2bf5 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0xff53659 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x26ff33ce [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x5fe0577c [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0xab885e7 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x370a0eb5 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x505d6f7 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4214d58a [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x778bcd80 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x7d98b8d2 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x27f3531e [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x45f480f4 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x3534b818 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4eb11f3c [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4339870b [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4a2851d2 [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x6f9c7d1b [0189.397] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x14ceee92 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x70a9f32a [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x6eebfb2f [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x37aced2c [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x24892021 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4eef32b3 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x197e37d9 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x7be49914 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x1717c641 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x225e474b [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x2aaa2473 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x30870c05 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4ef8a7d8 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x71928268 [0189.398] RtlRandomEx (in: Seed=0xcaff828 | out: Seed=0xcaff828) returned 0x4880f7b6 [0189.407] ReadFile (in: hFile=0xe10, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xcaff824, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0xcaff824*=0x107, lpOverlapped=0x0) returned 1 [0189.407] SetFilePointerEx (in: hFile=0xe10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.408] WriteFile (in: hFile=0xe10, lpBuffer=0x69bbd68*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xcaff828, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesWritten=0xcaff828*=0x107, lpOverlapped=0x0) returned 1 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0191.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0191.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821ee0) returned 1 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6821ee0 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d148 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6050 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0191.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821ee0) returned 1 [0191.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6766ab8 [0191.178] SetFilePointerEx (in: hFile=0xe10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.178] WriteFile (in: hFile=0xe10, lpBuffer=0x6766ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcaff8b0, lpOverlapped=0x0 | out: lpBuffer=0x6766ab8*, lpNumberOfBytesWritten=0xcaff8b0*=0x10c, lpOverlapped=0x0) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0192.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0192.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x676abf0 [0192.289] wcscpy (in: _Dest=0x676abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" [0192.289] wcscat (in: _Dest=0x676abf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.ac3a86" [0192.289] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xcaff828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67693b0 [0192.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67693b0) returned 1 [0192.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688f5a8) returned 1 [0192.350] NtQueryInformationFile (in: FileHandle=0xe10, IoStatusBlock=0xcaff800, FileInformation=0xcaff808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcaff800, FileInformation=0xcaff808) returned 0x0 [0192.350] NtSetInformationFile (FileHandle=0xe10, IoStatusBlock=0xcaff800, FileInformation=0xcaff808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676abf0) returned 1 [0192.442] FlushFileBuffers (hFile=0xe10) returned 1 [0192.454] CloseHandle (hObject=0xe10) returned 1 [0192.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d413e0 [0192.501] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0192.501] wcscat (in: _Dest=0x3d413e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\AC3A86-Readme.txt" [0192.501] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0192.501] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c10 [0192.515] WriteFile (in: hFile=0x1c10, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcaff844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcaff844*=0x8b9, lpOverlapped=0x0) returned 1 [0192.536] CloseHandle (hObject=0x1c10) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754d08) returned 1 Thread: id = 6132 os_tid = 0x22d8 [0187.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 0x2020 [0187.492] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0194.765] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2174 [0194.765] GetFileSizeEx (in: hFile=0x2174, lpFileSize=0xc02ff34 | out: lpFileSize=0xc02ff34*=264) returned 1 [0194.765] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.765] ReadFile (in: hFile=0x2174, lpBuffer=0xc02ff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc02ff20, lpOverlapped=0x0 | out: lpBuffer=0xc02ff10*, lpNumberOfBytesRead=0xc02ff20*=0x4, lpOverlapped=0x0) returned 1 [0194.771] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304238 [0194.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0194.772] NtQuerySystemTime (in: CurrentTime=0xc02fea8 | out: CurrentTime=0xc02fea8*=132482711032452000) returned 0x0 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x77810a0c [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x4377552 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x63568073 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x42400379 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1e0bbd24 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x6a388496 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x174cd3a2 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x590469c7 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x261411d6 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1e9b9c0a [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x7097033b [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x77b7c6d5 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1375eabc [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x21b57e89 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1fdfffcb [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x46333fb [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x2458b080 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x38bf7bfe [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1c0c6312 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x44fa2eb1 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x72638c43 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1d358164 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x4d90d602 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x7a80149f [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x2dace96d [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x1ece7ad4 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x21b57e89 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x6498686e [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x38925098 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x62c69e35 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x7aaff121 [0194.772] RtlRandomEx (in: Seed=0xc02fea0 | out: Seed=0xc02fea0) returned 0x2668b748 [0194.781] ReadFile (in: hFile=0x2174, lpBuffer=0x1309e0a0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xc02fe9c, lpOverlapped=0x0 | out: lpBuffer=0x1309e0a0*, lpNumberOfBytesRead=0xc02fe9c*=0x108, lpOverlapped=0x0) returned 1 [0194.781] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.781] WriteFile (in: hFile=0x2174, lpBuffer=0x130a1ca8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xc02fea0, lpOverlapped=0x0 | out: lpBuffer=0x130a1ca8*, lpNumberOfBytesWritten=0xc02fea0*=0x108, lpOverlapped=0x0) returned 1 [0197.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0197.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0197.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0197.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a1ca8) returned 1 [0197.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1309e0a0) returned 1 [0197.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28c40) returned 1 [0197.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4398) returned 1 [0197.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86588 [0197.404] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.404] WriteFile (in: hFile=0x2174, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc02ff28, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0xc02ff28*=0x10c, lpOverlapped=0x0) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a865b8) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86588) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0197.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0197.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a85ce8 [0197.674] wcscpy (in: _Dest=0x6a85ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" [0197.674] wcscat (in: _Dest=0x6a85ce8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.ac3a86" [0197.674] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xc02fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769788 [0198.029] FlushFileBuffers (hFile=0x2174) returned 1 [0198.035] CloseHandle (hObject=0x2174) returned 1 [0198.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6773e38 [0198.185] wcscpy (in: _Dest=0x6773e38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0198.185] wcscat (in: _Dest=0x6773e38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\AC3A86-Readme.txt" [0198.185] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0198.185] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.189] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc02febc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc02febc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.199] CloseHandle (hObject=0x237c) returned 1 [0198.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773e38) returned 1 [0198.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754e30) returned 1 Thread: id = 6133 os_tid = 0x22dc [0187.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 0x2020 [0187.493] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.410] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2300 [0189.410] GetFileSizeEx (in: hFile=0x2300, lpFileSize=0x8d6f87c | out: lpFileSize=0x8d6f87c*=261) returned 1 [0189.410] SetFilePointerEx (in: hFile=0x2300, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.410] ReadFile (in: hFile=0x2300, lpBuffer=0x8d6f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d6f868, lpOverlapped=0x0 | out: lpBuffer=0x8d6f858*, lpNumberOfBytesRead=0x8d6f868*=0x4, lpOverlapped=0x0) returned 1 [0189.412] SetFilePointerEx (in: hFile=0x2300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0189.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0189.412] NtQuerySystemTime (in: CurrentTime=0x8d6f7f0 | out: CurrentTime=0x8d6f7f0*=132482710978944000) returned 0x0 [0189.412] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x68072a12 [0189.412] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x4c6af4a8 [0189.412] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x1e090d4e [0189.412] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x61db3c53 [0189.412] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x75d4c647 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x36a60f29 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x5b6414a4 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x4cf01b2a [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x3c976bfa [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x3e093143 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x54aaa0a3 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x22afd4c5 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x71ef38af [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x291143cb [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x1082c1b4 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x2173e435 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x75c199ac [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x973397d [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x128a5e3c [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x2fa4acfd [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x53af76a8 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x53e1f69e [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x561d6064 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x4746442c [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x7de4ca80 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x13c63b61 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x46f3b065 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x5d32e87b [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x56ce6119 [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x7e9e76b [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x8f6504a [0189.413] RtlRandomEx (in: Seed=0x8d6f7e8 | out: Seed=0x8d6f7e8) returned 0x6237daf2 [0189.423] ReadFile (in: hFile=0x2300, lpBuffer=0x682fce8, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0x8d6f7e4, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesRead=0x8d6f7e4*=0x105, lpOverlapped=0x0) returned 1 [0189.423] SetFilePointerEx (in: hFile=0x2300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.423] WriteFile (in: hFile=0x2300, lpBuffer=0x68338f0*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x8d6f7e8, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesWritten=0x8d6f7e8*=0x105, lpOverlapped=0x0) returned 1 [0191.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822000) returned 1 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52d0 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822000 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d670 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0191.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0191.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5270 [0191.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0191.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0191.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0191.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0191.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822000) returned 1 [0191.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c3a70 [0191.165] SetFilePointerEx (in: hFile=0x2300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.165] WriteFile (in: hFile=0x2300, lpBuffer=0x69c3a70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d6f870, lpOverlapped=0x0 | out: lpBuffer=0x69c3a70*, lpNumberOfBytesWritten=0x8d6f870*=0x10c, lpOverlapped=0x0) returned 1 [0192.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a70) returned 1 [0192.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0192.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0192.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0192.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0192.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0192.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0192.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0192.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41b30 [0192.273] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" [0192.273] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.ac3a86" [0192.273] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0x8d6f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768d48 [0192.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768d48) returned 1 [0192.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688c860) returned 1 [0192.339] NtQueryInformationFile (in: FileHandle=0x2300, IoStatusBlock=0x8d6f7c0, FileInformation=0x8d6f7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8d6f7c0, FileInformation=0x8d6f7c8) returned 0x0 [0192.339] NtSetInformationFile (FileHandle=0x2300, IoStatusBlock=0x8d6f7c0, FileInformation=0x8d6f7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b30) returned 1 [0192.416] FlushFileBuffers (hFile=0x2300) returned 1 [0192.431] CloseHandle (hObject=0x2300) returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41b30 [0192.492] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0192.492] wcscat (in: _Dest=0x3d41b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\AC3A86-Readme.txt" [0192.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0192.493] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.574] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d6f804, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d6f804*=0x8b9, lpOverlapped=0x0) returned 1 [0192.576] CloseHandle (hObject=0x2304) returned 1 [0192.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b30) returned 1 [0192.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754f58) returned 1 Thread: id = 6134 os_tid = 0x22e0 [0187.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0187.494] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0194.693] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2180 [0194.694] GetFileSizeEx (in: hFile=0x2180, lpFileSize=0x8fbf8b4 | out: lpFileSize=0x8fbf8b4*=258) returned 1 [0194.694] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.694] ReadFile (in: hFile=0x2180, lpBuffer=0x8fbf890, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fbf8a0, lpOverlapped=0x0 | out: lpBuffer=0x8fbf890*, lpNumberOfBytesRead=0x8fbf8a0*=0x4, lpOverlapped=0x0) returned 1 [0194.695] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0194.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0194.696] NtQuerySystemTime (in: CurrentTime=0x8fbf828 | out: CurrentTime=0x8fbf828*=132482711031672000) returned 0x0 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x6cbcfd3f [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x642c6cd6 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x466e9eae [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x13393f0d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x247a6d9d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x3fa0e4e [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x33e58ab0 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x7007045d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x6471634c [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x26786a76 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x1d8b32e4 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x2a8a77ba [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x3c1c8802 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x513056f3 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0xa1aa6c1 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x1c87fb7d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x4e966179 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x48b4154b [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x23ceda3 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x13200f09 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x2c5bd50d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x492d693 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x7e7050f5 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x5f22202 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x4187ec3f [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x4ca31cae [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x2e231d87 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x6c366bb7 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x49d79613 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x388999a5 [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x105fc76d [0194.696] RtlRandomEx (in: Seed=0x8fbf820 | out: Seed=0x8fbf820) returned 0x3d15b8d8 [0194.704] ReadFile (in: hFile=0x2180, lpBuffer=0x13070cc8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x8fbf81c, lpOverlapped=0x0 | out: lpBuffer=0x13070cc8*, lpNumberOfBytesRead=0x8fbf81c*=0x102, lpOverlapped=0x0) returned 1 [0194.704] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.704] WriteFile (in: hFile=0x2180, lpBuffer=0x130748d0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x8fbf820, lpOverlapped=0x0 | out: lpBuffer=0x130748d0*, lpNumberOfBytesWritten=0x8fbf820*=0x102, lpOverlapped=0x0) returned 1 [0197.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0197.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0197.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0197.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130748d0) returned 1 [0197.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13070cc8) returned 1 [0197.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28970) returned 1 [0197.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4230) returned 1 [0197.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86348 [0197.371] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.371] WriteFile (in: hFile=0x2180, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8fbf8a8, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x8fbf8a8*=0x10c, lpOverlapped=0x0) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86378) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86348) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0197.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0197.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6774930 [0197.658] wcscpy (in: _Dest=0x6774930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" [0197.658] wcscat (in: _Dest=0x6774930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.ac3a86" [0197.658] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0x8fbf820, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769a18 [0198.022] FlushFileBuffers (hFile=0x2180) returned 1 [0198.032] CloseHandle (hObject=0x2180) returned 1 [0198.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67740a8 [0198.162] wcscpy (in: _Dest=0x67740a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0198.162] wcscat (in: _Dest=0x67740a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\AC3A86-Readme.txt" [0198.162] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0198.163] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cd4 [0198.188] WriteFile (in: hFile=0x1cd4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8fbf83c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8fbf83c*=0x8b9, lpOverlapped=0x0) returned 1 [0198.194] CloseHandle (hObject=0x1cd4) returned 1 [0198.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67740a8) returned 1 [0198.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755080) returned 1 Thread: id = 6135 os_tid = 0x22e4 [0187.497] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0187.559] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.425] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d18 [0189.425] GetFileSizeEx (in: hFile=0x1d18, lpFileSize=0x84df8fc | out: lpFileSize=0x84df8fc*=293) returned 1 [0189.425] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.426] ReadFile (in: hFile=0x1d18, lpBuffer=0x84df8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84df8e8, lpOverlapped=0x0 | out: lpBuffer=0x84df8d8*, lpNumberOfBytesRead=0x84df8e8*=0x4, lpOverlapped=0x0) returned 1 [0189.428] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0189.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0189.428] NtQuerySystemTime (in: CurrentTime=0x84df870 | out: CurrentTime=0x84df870*=132482710979100000) returned 0x0 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x60c22d7f [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x1c0fd2ef [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x3fc24cdc [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0xc4569ae [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x764ee4f2 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x1a9ee5a7 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x586a4c36 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x98e2ffe [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x406fabf [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0xa31b956 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x56174f67 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x51e68f43 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x3c695940 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x40ff681c [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x6e32af2 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x7e5c898e [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x829ef8a [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x128102a [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x40cd31a1 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x69a2a966 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0xfa309e5 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x55c7aee4 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x18cc7ada [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x11684461 [0189.428] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x1b11159b [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x56d20f2f [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x6f4ff93d [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x55f287a4 [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x52f76ea7 [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x37c2ba89 [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x33685666 [0189.429] RtlRandomEx (in: Seed=0x84df868 | out: Seed=0x84df868) returned 0x55132eb8 [0189.437] ReadFile (in: hFile=0x1d18, lpBuffer=0x68374f8, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0x84df864, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesRead=0x84df864*=0x125, lpOverlapped=0x0) returned 1 [0189.437] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.437] WriteFile (in: hFile=0x1d18, lpBuffer=0x683b100*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x84df868, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesWritten=0x84df868*=0x125, lpOverlapped=0x0) returned 1 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0191.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0191.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0191.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0191.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0191.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822ee8 [0191.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d760 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0191.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ea0 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0191.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0191.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0191.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ee8) returned 1 [0191.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c3958 [0191.167] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.167] WriteFile (in: hFile=0x1d18, lpBuffer=0x69c3958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x84df8f0, lpOverlapped=0x0 | out: lpBuffer=0x69c3958*, lpNumberOfBytesWritten=0x84df8f0*=0x10c, lpOverlapped=0x0) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3958) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0192.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0192.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41c68 [0192.275] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" [0192.275] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.ac3a86" [0192.276] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x84df868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768e90 [0192.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768e90) returned 1 [0192.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6895488) returned 1 [0192.340] NtQueryInformationFile (in: FileHandle=0x1d18, IoStatusBlock=0x84df840, FileInformation=0x84df848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x84df840, FileInformation=0x84df848) returned 0x0 [0192.341] NtSetInformationFile (FileHandle=0x1d18, IoStatusBlock=0x84df840, FileInformation=0x84df848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0192.421] FlushFileBuffers (hFile=0x1d18) returned 1 [0192.436] CloseHandle (hObject=0x1d18) returned 1 [0192.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d419f8 [0192.494] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0192.494] wcscat (in: _Dest=0x3d419f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\AC3A86-Readme.txt" [0192.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0192.494] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.580] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x84df884, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x84df884*=0x8b9, lpOverlapped=0x0) returned 1 [0192.582] CloseHandle (hObject=0x2304) returned 1 [0192.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419f8) returned 1 [0192.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67553f8) returned 1 Thread: id = 6136 os_tid = 0x22e8 [0187.570] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0187.572] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0194.705] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd4 [0194.705] GetFileSizeEx (in: hFile=0x1cd4, lpFileSize=0x8e7fd54 | out: lpFileSize=0x8e7fd54*=281) returned 1 [0194.705] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.705] ReadFile (in: hFile=0x1cd4, lpBuffer=0x8e7fd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e7fd40, lpOverlapped=0x0 | out: lpBuffer=0x8e7fd30*, lpNumberOfBytesRead=0x8e7fd40*=0x4, lpOverlapped=0x0) returned 1 [0194.707] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0194.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0194.707] NtQuerySystemTime (in: CurrentTime=0x8e7fcc8 | out: CurrentTime=0x8e7fcc8*=132482711031828000) returned 0x0 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x114b5423 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x43636779 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x4cc63897 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x11e25c4a [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0xcef831 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x5e85300 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x2d55fe55 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x1f81b12a [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x5ab63146 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x4d87ff6e [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x796d2536 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x4187ec3f [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x765361e6 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x24175189 [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x6471634c [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x49cef9ca [0194.707] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x6c6cf6d4 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x397a9683 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x1f3088cb [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x497aabf [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x41d77fa8 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x48b4154b [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x3ff0ec5a [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x3eaf7a0 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x1f81b12a [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x2adfa3da [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x30f5af92 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x2c8224e9 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x3d73ada0 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x49bb1059 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x142c4d58 [0194.708] RtlRandomEx (in: Seed=0x8e7fcc0 | out: Seed=0x8e7fcc0) returned 0x4302b938 [0194.716] ReadFile (in: hFile=0x1cd4, lpBuffer=0x130784d8, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0x8e7fcbc, lpOverlapped=0x0 | out: lpBuffer=0x130784d8*, lpNumberOfBytesRead=0x8e7fcbc*=0x119, lpOverlapped=0x0) returned 1 [0194.716] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.716] WriteFile (in: hFile=0x1cd4, lpBuffer=0x1307c0e0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x8e7fcc0, lpOverlapped=0x0 | out: lpBuffer=0x1307c0e0*, lpNumberOfBytesWritten=0x8e7fcc0*=0x119, lpOverlapped=0x0) returned 1 [0197.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0197.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0197.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0197.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1307c0e0) returned 1 [0197.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130784d8) returned 1 [0197.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f289e8) returned 1 [0197.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd3e88) returned 1 [0197.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a863a8 [0197.373] SetFilePointerEx (in: hFile=0x1cd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.373] WriteFile (in: hFile=0x1cd4, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e7fd48, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x8e7fd48*=0x10c, lpOverlapped=0x0) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a863d8) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a863a8) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0197.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0197.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3dd8cb8 [0197.661] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" [0197.661] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.ac3a86" [0197.662] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0x8e7fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67698d0 [0198.026] FlushFileBuffers (hFile=0x1cd4) returned 1 [0198.033] CloseHandle (hObject=0x1cd4) returned 1 [0198.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6773f70 [0198.183] wcscpy (in: _Dest=0x6773f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0198.183] wcscat (in: _Dest=0x6773f70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\AC3A86-Readme.txt" [0198.183] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0198.184] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2180 [0198.189] WriteFile (in: hFile=0x2180, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e7fcdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e7fcdc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.196] CloseHandle (hObject=0x2180) returned 1 [0198.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773f70) returned 1 [0198.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755520) returned 1 Thread: id = 6137 os_tid = 0x22ec [0187.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0187.575] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0189.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c10 [0189.440] GetFileSizeEx (in: hFile=0x1c10, lpFileSize=0x8dbfd94 | out: lpFileSize=0x8dbfd94*=285) returned 1 [0189.440] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.440] ReadFile (in: hFile=0x1c10, lpBuffer=0x8dbfd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8dbfd80, lpOverlapped=0x0 | out: lpBuffer=0x8dbfd70*, lpNumberOfBytesRead=0x8dbfd80*=0x4, lpOverlapped=0x0) returned 1 [0189.442] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0189.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aad8 [0189.443] NtQuerySystemTime (in: CurrentTime=0x8dbfd08 | out: CurrentTime=0x8dbfd08*=132482710979256000) returned 0x0 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x3d5a6827 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x127419ed [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x50ca63e8 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x2c4725b3 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x76b47926 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x266bd5f3 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x498afd49 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x51c4f968 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x6b2edccf [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x1e9aff16 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x7549ef01 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x62be4fc [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x54009fe6 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x18d55dc2 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0xa0bbaf8 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x419f5c6c [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x77f5b3af [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x2dd98a0 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x515a0e2d [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x231e9186 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x4c6b4483 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x4006734b [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x56c8c364 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x478e9e71 [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x2b4300ee [0189.443] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0xdb0fd52 [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x36d8a5f5 [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x3d786c7d [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x18fa12ba [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x3e956ea9 [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x33d62d17 [0189.444] RtlRandomEx (in: Seed=0x8dbfd00 | out: Seed=0x8dbfd00) returned 0x4a5889f7 [0189.455] ReadFile (in: hFile=0x1c10, lpBuffer=0x683ed08, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0x8dbfcfc, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesRead=0x8dbfcfc*=0x11d, lpOverlapped=0x0) returned 1 [0189.455] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.455] WriteFile (in: hFile=0x1c10, lpBuffer=0x6842910*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x8dbfd00, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesWritten=0x8dbfd00*=0x11d, lpOverlapped=0x0) returned 1 [0191.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0191.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0191.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0191.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0191.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0191.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0191.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68239e0) returned 1 [0191.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e10 [0191.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68239e0 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d6e8 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0191.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e40 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0191.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0191.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0191.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68239e0) returned 1 [0191.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c3840 [0191.169] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.169] WriteFile (in: hFile=0x1c10, lpBuffer=0x69c3840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8dbfd88, lpOverlapped=0x0 | out: lpBuffer=0x69c3840*, lpNumberOfBytesWritten=0x8dbfd88*=0x10c, lpOverlapped=0x0) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3840) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0192.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0192.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41da0 [0192.278] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" [0192.278] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.ac3a86" [0192.278] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0x8dbfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768fd8 [0192.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768fd8) returned 1 [0192.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688e240) returned 1 [0192.343] NtQueryInformationFile (in: FileHandle=0x1c10, IoStatusBlock=0x8dbfcd8, FileInformation=0x8dbfce0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8dbfcd8, FileInformation=0x8dbfce0) returned 0x0 [0192.343] NtSetInformationFile (FileHandle=0x1c10, IoStatusBlock=0x8dbfcd8, FileInformation=0x8dbfce0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41da0) returned 1 [0192.425] FlushFileBuffers (hFile=0x1c10) returned 1 [0192.440] CloseHandle (hObject=0x1c10) returned 1 [0192.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d418c0 [0192.495] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0192.495] wcscat (in: _Dest=0x3d418c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\AC3A86-Readme.txt" [0192.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0192.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.577] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8dbfd1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8dbfd1c*=0x8b9, lpOverlapped=0x0) returned 1 [0192.579] CloseHandle (hObject=0x2304) returned 1 [0192.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418c0) returned 1 [0192.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755648) returned 1 Thread: id = 6138 os_tid = 0x22f0 [0187.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 0x2020 [0187.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0194.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf2c [0194.717] GetFileSizeEx (in: hFile=0xf2c, lpFileSize=0xd58fbac | out: lpFileSize=0xd58fbac*=258) returned 1 [0194.717] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.717] ReadFile (in: hFile=0xf2c, lpBuffer=0xd58fb88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd58fb98, lpOverlapped=0x0 | out: lpBuffer=0xd58fb88*, lpNumberOfBytesRead=0xd58fb98*=0x4, lpOverlapped=0x0) returned 1 [0194.719] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0194.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0194.719] NtQuerySystemTime (in: CurrentTime=0xd58fb20 | out: CurrentTime=0xd58fb20*=132482711031984000) returned 0x0 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x1c87fb7d [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x4ff41dc3 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x5bac3340 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x1d0aa8a4 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x1e3695e4 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x44fa2eb1 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x5fa48564 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x4e966179 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x71728c51 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x2df219d6 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x39eb65ce [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x57774a5a [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x48e18acb [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x76f2393f [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x3eaf7a0 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x48e18acb [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x2df219d6 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x7fc407b0 [0194.719] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x54bd9542 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x2df31231 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x45fd89e9 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x45fe6f97 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0xfbe0bea [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x5c991e5c [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0xf4ad579 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x7e7050f5 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x5ab63146 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x765361e6 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x599cc563 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0x45d110ac [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0xeb9a779 [0194.720] RtlRandomEx (in: Seed=0xd58fb18 | out: Seed=0xd58fb18) returned 0xc38d77e [0194.730] ReadFile (in: hFile=0xf2c, lpBuffer=0x13080060, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xd58fb14, lpOverlapped=0x0 | out: lpBuffer=0x13080060*, lpNumberOfBytesRead=0xd58fb14*=0x102, lpOverlapped=0x0) returned 1 [0194.730] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.730] WriteFile (in: hFile=0xf2c, lpBuffer=0x13083c68*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xd58fb18, lpOverlapped=0x0 | out: lpBuffer=0x13083c68*, lpNumberOfBytesWritten=0xd58fb18*=0x102, lpOverlapped=0x0) returned 1 [0197.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0197.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0197.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0197.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13083c68) returned 1 [0197.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13080060) returned 1 [0197.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28a60) returned 1 [0197.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4278) returned 1 [0197.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86408 [0197.376] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.377] WriteFile (in: hFile=0xf2c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd58fba0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xd58fba0*=0x10c, lpOverlapped=0x0) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86438) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86408) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0197.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9170) returned 1 [0197.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x677aab8 [0198.316] wcscpy (in: _Dest=0x677aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" [0198.316] wcscat (in: _Dest=0x677aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.ac3a86" [0198.316] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0xd58fb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0198.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6778830 [0199.987] FlushFileBuffers (hFile=0xf2c) returned 1 [0200.215] CloseHandle (hObject=0xf2c) returned 1 [0200.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41518 [0200.216] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0200.216] wcscat (in: _Dest=0x3d41518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\AC3A86-Readme.txt" [0200.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0200.216] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf2c [0200.217] WriteFile (in: hFile=0xf2c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd58fb34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd58fb34*=0x8b9, lpOverlapped=0x0) returned 1 [0200.219] CloseHandle (hObject=0xf2c) returned 1 [0200.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0200.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755770) returned 1 Thread: id = 6139 os_tid = 0x22f4 [0187.644] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 0x2020 [0187.651] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0189.457] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1154 [0189.457] GetFileSizeEx (in: hFile=0x1154, lpFileSize=0x7fcfa64 | out: lpFileSize=0x7fcfa64*=254) returned 1 [0189.457] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.457] ReadFile (in: hFile=0x1154, lpBuffer=0x7fcfa40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fcfa50, lpOverlapped=0x0 | out: lpBuffer=0x7fcfa40*, lpNumberOfBytesRead=0x7fcfa50*=0x4, lpOverlapped=0x0) returned 1 [0189.459] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aad8 [0189.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0189.460] NtQuerySystemTime (in: CurrentTime=0x7fcf9d8 | out: CurrentTime=0x7fcf9d8*=132482710979412000) returned 0x0 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x8c92b71 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x74f2762f [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x2e54d295 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x5af0d41e [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x31e94b0d [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x47c1dbaf [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x6591832d [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x55e5f4f8 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x75344e66 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x1a2b842b [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x43beb2e0 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x2596e265 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x40267668 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0xc2a09f1 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x72843288 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x9112578 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x52e6ce58 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x5afd9516 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x559cd624 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x317ed7ca [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x4f83b400 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x7a993e16 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x6d1b2619 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x62ff5927 [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x3d6d10bb [0189.460] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x303b5de0 [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x4f98dd8e [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x2406f372 [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x284929ee [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x61377649 [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x354ccda9 [0189.461] RtlRandomEx (in: Seed=0x7fcf9d0 | out: Seed=0x7fcf9d0) returned 0x70a0b99 [0189.470] ReadFile (in: hFile=0x1154, lpBuffer=0x6846518, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x7fcf9cc, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesRead=0x7fcf9cc*=0xfe, lpOverlapped=0x0) returned 1 [0189.470] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.470] WriteFile (in: hFile=0x1154, lpBuffer=0x684a120*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x7fcf9d0, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesWritten=0x7fcf9d0*=0xfe, lpOverlapped=0x0) returned 1 [0191.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822870) returned 1 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5fc0 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6822870 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d058 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ff0 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0191.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0191.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0191.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822870) returned 1 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bd140 [0191.176] SetFilePointerEx (in: hFile=0x1154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.176] WriteFile (in: hFile=0x1154, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7fcfa58, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0x7fcfa58*=0x10c, lpOverlapped=0x0) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aad8) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0192.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x676aab8 [0192.287] wcscpy (in: _Dest=0x676aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" [0192.287] wcscat (in: _Dest=0x676aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.ac3a86" [0192.288] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.ac3a86", NtPathName=0x7fcf9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769268 [0192.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769268) returned 1 [0192.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6889050) returned 1 [0192.349] NtQueryInformationFile (in: FileHandle=0x1154, IoStatusBlock=0x7fcf9a8, FileInformation=0x7fcf9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7fcf9a8, FileInformation=0x7fcf9b0) returned 0x0 [0192.349] NtSetInformationFile (FileHandle=0x1154, IoStatusBlock=0x7fcf9a8, FileInformation=0x7fcf9b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676aab8) returned 1 [0192.438] FlushFileBuffers (hFile=0x1154) returned 1 [0192.450] CloseHandle (hObject=0x1154) returned 1 [0192.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41518 [0192.500] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0192.500] wcscat (in: _Dest=0x3d41518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\AC3A86-Readme.txt" [0192.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ac3a86-readme.txt")) returned 0xffffffff [0192.500] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d18 [0192.516] WriteFile (in: hFile=0x1d18, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7fcf9ec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7fcf9ec*=0x8b9, lpOverlapped=0x0) returned 1 [0192.538] CloseHandle (hObject=0x1d18) returned 1 [0192.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0192.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755898) returned 1 Thread: id = 6140 os_tid = 0x231c [0188.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 0x2020 [0188.339] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.753] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22bc [0194.753] GetFileSizeEx (in: hFile=0x22bc, lpFileSize=0x920fa8c | out: lpFileSize=0x920fa8c*=242) returned 1 [0194.753] SetFilePointerEx (in: hFile=0x22bc, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.753] ReadFile (in: hFile=0x22bc, lpBuffer=0x920fa68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x920fa78, lpOverlapped=0x0 | out: lpBuffer=0x920fa68*, lpNumberOfBytesRead=0x920fa78*=0x4, lpOverlapped=0x0) returned 1 [0194.755] SetFilePointerEx (in: hFile=0x22bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9198 [0194.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9080 [0194.755] NtQuerySystemTime (in: CurrentTime=0x920fa00 | out: CurrentTime=0x920fa00*=132482711032296000) returned 0x0 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x151404b9 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6498686e [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x1db60ba4 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x4804cd79 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x7d5890d4 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6f39a937 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x3547b0c8 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6ebbc1a2 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x7b469f37 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x723ce6b7 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x5508cdd4 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x5d76249 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x1f248523 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x36cc6250 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0xb4320d5 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x4ff49c34 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6d48a7f9 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6f87d2e0 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x7007045d [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x48ef0c1 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x4ef45420 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6267b50 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x27e6e896 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x6ebdb7b4 [0194.755] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x5d263837 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0xaab8114 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x458d88b4 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x28732bf4 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x42400379 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x662ff0b7 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0xbd0f395 [0194.756] RtlRandomEx (in: Seed=0x920f9f8 | out: Seed=0x920f9f8) returned 0x577fc138 [0194.763] ReadFile (in: hFile=0x22bc, lpBuffer=0x13096890, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0x920f9f4, lpOverlapped=0x0 | out: lpBuffer=0x13096890*, lpNumberOfBytesRead=0x920f9f4*=0xf2, lpOverlapped=0x0) returned 1 [0194.763] SetFilePointerEx (in: hFile=0x22bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.763] WriteFile (in: hFile=0x22bc, lpBuffer=0x1309a498*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x920f9f8, lpOverlapped=0x0 | out: lpBuffer=0x1309a498*, lpNumberOfBytesWritten=0x920f9f8*=0xf2, lpOverlapped=0x0) returned 1 [0197.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0197.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0197.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0197.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1309a498) returned 1 [0197.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13096890) returned 1 [0197.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28bc8) returned 1 [0197.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4308) returned 1 [0197.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86528 [0197.403] SetFilePointerEx (in: hFile=0x22bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.403] WriteFile (in: hFile=0x22bc, lpBuffer=0x675cbd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x920fa80, lpOverlapped=0x0 | out: lpBuffer=0x675cbd0*, lpNumberOfBytesWritten=0x920fa80*=0x10c, lpOverlapped=0x0) returned 1 [0197.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0197.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86558) returned 1 [0197.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0197.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86528) returned 1 [0197.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0197.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9198) returned 1 [0197.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0197.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040f8) returned 1 [0197.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6780ab8 [0198.317] wcscpy (in: _Dest=0x6780ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" [0198.317] wcscat (in: _Dest=0x6780ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.ac3a86" [0198.318] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0x920f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0198.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67785a0 [0199.906] FlushFileBuffers (hFile=0x22bc) returned 1 [0199.909] CloseHandle (hObject=0x22bc) returned 1 [0199.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a867e0 [0199.910] wcscpy (in: _Dest=0x6a867e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0199.910] wcscat (in: _Dest=0x6a867e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\AC3A86-Readme.txt" [0199.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0199.910] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22bc [0199.911] WriteFile (in: hFile=0x22bc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x920fa14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x920fa14*=0x8b9, lpOverlapped=0x0) returned 1 [0199.913] CloseHandle (hObject=0x22bc) returned 1 [0199.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a867e0) returned 1 [0199.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67559c0) returned 1 Thread: id = 6141 os_tid = 0x2320 [0188.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json")) returned 0x2020 [0188.340] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0189.485] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x644 [0189.486] GetFileSizeEx (in: hFile=0x644, lpFileSize=0x871fcac | out: lpFileSize=0x871fcac*=218) returned 1 [0189.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0189.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0189.486] NtQuerySystemTime (in: CurrentTime=0x871fc20 | out: CurrentTime=0x871fc20*=132482710979568000) returned 0x0 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x17f4c18c [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x732b1ab6 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x2bc57d88 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x87af8e1 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x2d885ef1 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0xbe58375 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x42527c87 [0189.486] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x1b6a1732 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x4344f0be [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x2a9a37fa [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x66ee94ed [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x1d7e53b6 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x144ee21a [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x27cd5597 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x738e909 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x70659f7f [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x409989da [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x45c64c5b [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x3b7fa740 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x4aaff9ed [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x375da95d [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x50a4bfcb [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x541751f2 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x4e89f0c1 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x32c3c298 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x4569843 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x3a25d65 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x492a3ef5 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x37825e55 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x35b45c9f [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0x3258ccc8 [0189.487] RtlRandomEx (in: Seed=0x871fc18 | out: Seed=0x871fc18) returned 0xff6c30 [0189.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0189.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0189.495] ReadFile (in: hFile=0x644, lpBuffer=0x684dd28, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x871fc14, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesRead=0x871fc14*=0xda, lpOverlapped=0x0) returned 1 [0189.498] SetFilePointerEx (in: hFile=0x644, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.498] WriteFile (in: hFile=0x644, lpBuffer=0x6851930*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x871fc18, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesWritten=0x871fc18*=0xda, lpOverlapped=0x0) returned 1 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0191.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0191.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0191.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0191.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0191.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823b48) returned 1 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6823b48 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d418 [0191.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0191.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0191.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d80 [0191.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0191.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0191.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0191.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0191.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823b48) returned 1 [0191.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bcf10 [0191.171] SetFilePointerEx (in: hFile=0x644, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.171] WriteFile (in: hFile=0x644, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x871fca0, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0x871fca0*=0x10c, lpOverlapped=0x0) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0192.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3dd8cb8 [0192.284] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" [0192.284] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.ac3a86" [0192.284] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0x871fc18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769120 [0192.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769120) returned 1 [0192.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68967f0) returned 1 [0192.348] NtQueryInformationFile (in: FileHandle=0x644, IoStatusBlock=0x871fbf0, FileInformation=0x871fbf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x871fbf0, FileInformation=0x871fbf8) returned 0x0 [0192.348] NtSetInformationFile (FileHandle=0x644, IoStatusBlock=0x871fbf0, FileInformation=0x871fbf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0192.433] FlushFileBuffers (hFile=0x644) returned 1 [0192.448] CloseHandle (hObject=0x644) returned 1 [0192.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41650 [0192.498] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0192.498] wcscat (in: _Dest=0x3d41650, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\AC3A86-Readme.txt" [0192.498] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0192.498] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x126c [0192.515] WriteFile (in: hFile=0x126c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x871fc34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x871fc34*=0x8b9, lpOverlapped=0x0) returned 1 [0192.534] CloseHandle (hObject=0x126c) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755ae8) returned 1 Thread: id = 6142 os_tid = 0x203c [0188.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 0x2020 [0188.340] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.730] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x217c [0194.731] GetFileSizeEx (in: hFile=0x217c, lpFileSize=0x8e1fd3c | out: lpFileSize=0x8e1fd3c*=257) returned 1 [0194.731] SetFilePointerEx (in: hFile=0x217c, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.731] ReadFile (in: hFile=0x217c, lpBuffer=0x8e1fd18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e1fd28, lpOverlapped=0x0 | out: lpBuffer=0x8e1fd18*, lpNumberOfBytesRead=0x8e1fd28*=0x4, lpOverlapped=0x0) returned 1 [0194.732] SetFilePointerEx (in: hFile=0x217c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd8fe0 [0194.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9210 [0194.732] NtQuerySystemTime (in: CurrentTime=0x8e1fcb0 | out: CurrentTime=0x8e1fcb0*=132482711032140000) returned 0x0 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x360400a [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x3a8eec89 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x6ceb2685 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x6d7871cb [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x750022fd [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x5afac3fa [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0xbdbdce4 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x36894396 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x1c1a4e78 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0xb3d5961 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x22f7f945 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x39e8695e [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x551cc64d [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x24394aa [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x652ddac0 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x417d73d5 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x2668b748 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x66e9c73b [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x4839c3d1 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x1de0e464 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x5f3f108a [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0xf4ad579 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x141c271c [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x73f21ffe [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x3d73ada0 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x60243d73 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x75402437 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x48813c07 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x74744cad [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x60ef04bb [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x75616a85 [0194.733] RtlRandomEx (in: Seed=0x8e1fca8 | out: Seed=0x8e1fca8) returned 0x6f644ab4 [0194.741] ReadFile (in: hFile=0x217c, lpBuffer=0x13087870, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x8e1fca4, lpOverlapped=0x0 | out: lpBuffer=0x13087870*, lpNumberOfBytesRead=0x8e1fca4*=0x101, lpOverlapped=0x0) returned 1 [0194.741] SetFilePointerEx (in: hFile=0x217c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.741] WriteFile (in: hFile=0x217c, lpBuffer=0x1308b478*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x8e1fca8, lpOverlapped=0x0 | out: lpBuffer=0x1308b478*, lpNumberOfBytesWritten=0x8e1fca8*=0x101, lpOverlapped=0x0) returned 1 [0197.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0197.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0197.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0197.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1308b478) returned 1 [0197.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13087870) returned 1 [0197.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ad8) returned 1 [0197.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd43e0) returned 1 [0197.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86468 [0197.379] SetFilePointerEx (in: hFile=0x217c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.379] WriteFile (in: hFile=0x217c, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e1fd30, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x8e1fd30*=0x10c, lpOverlapped=0x0) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86498) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86468) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8fe0) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd90a8) returned 1 [0197.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8fb8) returned 1 [0197.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x677cab8 [0198.316] wcscpy (in: _Dest=0x677cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" [0198.316] wcscat (in: _Dest=0x677cab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.ac3a86" [0198.316] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x8e1fca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0198.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67786e8 [0199.923] FlushFileBuffers (hFile=0x217c) returned 1 [0199.926] CloseHandle (hObject=0x217c) returned 1 [0199.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a866a8 [0199.927] wcscpy (in: _Dest=0x6a866a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0199.927] wcscat (in: _Dest=0x6a866a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\AC3A86-Readme.txt" [0199.927] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0199.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x217c [0199.928] WriteFile (in: hFile=0x217c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e1fcc4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e1fcc4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.930] CloseHandle (hObject=0x217c) returned 1 [0199.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a866a8) returned 1 [0199.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f2d0) returned 1 Thread: id = 6143 os_tid = 0x5f4 [0188.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0188.341] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0189.499] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x126c [0189.499] GetFileSizeEx (in: hFile=0x126c, lpFileSize=0x90bf91c | out: lpFileSize=0x90bf91c*=246) returned 1 [0189.500] SetFilePointerEx (in: hFile=0x126c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.500] ReadFile (in: hFile=0x126c, lpBuffer=0x90bf8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90bf908, lpOverlapped=0x0 | out: lpBuffer=0x90bf8f8*, lpNumberOfBytesRead=0x90bf908*=0x4, lpOverlapped=0x0) returned 1 [0189.502] SetFilePointerEx (in: hFile=0x126c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0189.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0189.502] NtQuerySystemTime (in: CurrentTime=0x90bf890 | out: CurrentTime=0x90bf890*=132482710979724000) returned 0x0 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x5a7f0a64 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x5bc4c68b [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x4527125e [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x445c8238 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x41e29f6e [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x6a320e9a [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x7b64f485 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x24c45482 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x13a0a806 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x78453dbf [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x2adb0d02 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x6e3c510c [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x4c6952cb [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x62cb8022 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x4b2cda52 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x6d0d280e [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x44fc8569 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x746e4093 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x1709b50e [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x4a6b6c8 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x6e0a6463 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x1eb42f55 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x2bd32e24 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x6e0aadc2 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x250b4cd0 [0189.502] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x3b2d464 [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x56333e3c [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x7abcff6f [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x39517c8e [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x7d2e0365 [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x100d5d96 [0189.503] RtlRandomEx (in: Seed=0x90bf888 | out: Seed=0x90bf888) returned 0x7dfc2eaf [0189.510] ReadFile (in: hFile=0x126c, lpBuffer=0x6855538, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x90bf884, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesRead=0x90bf884*=0xf6, lpOverlapped=0x0) returned 1 [0189.510] SetFilePointerEx (in: hFile=0x126c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.510] WriteFile (in: hFile=0x126c, lpBuffer=0x6859140*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x90bf888, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesWritten=0x90bf888*=0xf6, lpOverlapped=0x0) returned 1 [0191.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68236c8) returned 1 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5db0 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68236c8 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ce78 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f90 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0191.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0191.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0191.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0191.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68236c8) returned 1 [0191.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bc1f0 [0191.174] SetFilePointerEx (in: hFile=0x126c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.174] WriteFile (in: hFile=0x126c, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x90bf910, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0x90bf910*=0x10c, lpOverlapped=0x0) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0192.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0192.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d41ed8 [0192.283] wcscpy (in: _Dest=0x3d41ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" [0192.283] wcscat (in: _Dest=0x3d41ed8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.ac3a86" [0192.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0x90bf888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce310 [0192.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0192.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a808) returned 1 [0192.344] NtQueryInformationFile (in: FileHandle=0x126c, IoStatusBlock=0x90bf860, FileInformation=0x90bf868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x90bf860, FileInformation=0x90bf868) returned 0x0 [0192.344] NtSetInformationFile (FileHandle=0x126c, IoStatusBlock=0x90bf860, FileInformation=0x90bf868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ed8) returned 1 [0192.429] FlushFileBuffers (hFile=0x126c) returned 1 [0192.444] CloseHandle (hObject=0x126c) returned 1 [0192.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41788 [0192.497] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0192.497] wcscat (in: _Dest=0x3d41788, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0192.497] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0192.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.583] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x90bf8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x90bf8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.585] CloseHandle (hObject=0x2304) returned 1 [0192.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41788) returned 1 [0192.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f3f8) returned 1 Thread: id = 6144 os_tid = 0x3c4 [0188.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0188.341] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0194.741] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2240 [0194.742] GetFileSizeEx (in: hFile=0x2240, lpFileSize=0x8b4fe4c | out: lpFileSize=0x8b4fe4c*=264) returned 1 [0194.742] SetFilePointerEx (in: hFile=0x2240, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.742] ReadFile (in: hFile=0x2240, lpBuffer=0x8b4fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b4fe38, lpOverlapped=0x0 | out: lpBuffer=0x8b4fe28*, lpNumberOfBytesRead=0x8b4fe38*=0x4, lpOverlapped=0x0) returned 1 [0194.743] SetFilePointerEx (in: hFile=0x2240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9210 [0194.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9198 [0194.744] NtQuerySystemTime (in: CurrentTime=0x8b4fdc0 | out: CurrentTime=0x8b4fdc0*=132482711032140000) returned 0x0 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1d605a24 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x2995e4b9 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1cdfcfe4 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x433b7f0f [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x61f35e19 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1d605a24 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x11551104 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x63568073 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1561c58e [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x871d2c6 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x16db16a1 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x75616a85 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x56307fce [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x4ff49c34 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1cdfcfe4 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1375eabc [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x44e8b84b [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x73eed5e [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0xa9078e5 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x6c95e15 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1c1a4e78 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x2a593f30 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x213d1a1d [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x6cbcfd3f [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x50e43032 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x577fc138 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x5aac71c6 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x6c87184b [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x1e616ea4 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x2b4edf48 [0194.744] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x11551104 [0194.745] RtlRandomEx (in: Seed=0x8b4fdb8 | out: Seed=0x8b4fdb8) returned 0x27a30a74 [0194.752] ReadFile (in: hFile=0x2240, lpBuffer=0x1308f080, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x8b4fdb4, lpOverlapped=0x0 | out: lpBuffer=0x1308f080*, lpNumberOfBytesRead=0x8b4fdb4*=0x108, lpOverlapped=0x0) returned 1 [0194.752] SetFilePointerEx (in: hFile=0x2240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.752] WriteFile (in: hFile=0x2240, lpBuffer=0x13092c88*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8b4fdb8, lpOverlapped=0x0 | out: lpBuffer=0x13092c88*, lpNumberOfBytesWritten=0x8b4fdb8*=0x108, lpOverlapped=0x0) returned 1 [0197.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0197.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0197.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0197.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13092c88) returned 1 [0197.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1308f080) returned 1 [0197.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28b50) returned 1 [0197.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd42c0) returned 1 [0197.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a864c8 [0197.382] SetFilePointerEx (in: hFile=0x2240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.382] WriteFile (in: hFile=0x2240, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8b4fe40, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x8b4fe40*=0x10c, lpOverlapped=0x0) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a864f8) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a864c8) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9210) returned 1 [0197.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8f40) returned 1 [0197.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd90f8) returned 1 [0197.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x677eab8 [0198.317] wcscpy (in: _Dest=0x677eab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" [0198.317] wcscat (in: _Dest=0x677eab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.ac3a86" [0198.317] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x8b4fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0198.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce310 [0199.916] FlushFileBuffers (hFile=0x2240) returned 1 [0199.918] CloseHandle (hObject=0x2240) returned 1 [0199.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6a867e0 [0199.931] wcscpy (in: _Dest=0x6a867e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0199.931] wcscat (in: _Dest=0x6a867e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0199.931] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0199.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x217c [0199.932] WriteFile (in: hFile=0x217c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8b4fdd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8b4fdd4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.934] CloseHandle (hObject=0x217c) returned 1 [0199.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a867e0) returned 1 [0199.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f520) returned 1 Thread: id = 6145 os_tid = 0x650 [0188.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json")) returned 0x2020 [0188.341] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0189.513] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x168c [0189.513] GetFileSizeEx (in: hFile=0x168c, lpFileSize=0x937fd4c | out: lpFileSize=0x937fd4c*=312) returned 1 [0189.513] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.513] ReadFile (in: hFile=0x168c, lpBuffer=0x937fd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x937fd38, lpOverlapped=0x0 | out: lpBuffer=0x937fd28*, lpNumberOfBytesRead=0x937fd38*=0x4, lpOverlapped=0x0) returned 1 [0189.515] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0189.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0189.515] NtQuerySystemTime (in: CurrentTime=0x937fcc0 | out: CurrentTime=0x937fcc0*=132482710979880000) returned 0x0 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x2444b764 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x62771318 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x140ce6c0 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x4dbc6ab6 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x733f06eb [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x7f8be474 [0189.515] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x378c3b64 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x29f2990a [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x3ba300d5 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x51063d3b [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x5d76dd14 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x107b14e [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x54ebee01 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0xfb006e1 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x6694b906 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x1da3ad27 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x428dd377 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0xc204bf5 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x5cee5510 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x63789ccd [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x554724a4 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x231144af [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x199e38e5 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x1698fb6c [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x24ccde5 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x135ec6c6 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x7af8f12f [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x10b95d65 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x30ade03e [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x3c2adc21 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x6b26c135 [0189.516] RtlRandomEx (in: Seed=0x937fcb8 | out: Seed=0x937fcb8) returned 0x54f17324 [0189.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0189.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6860950 [0189.525] ReadFile (in: hFile=0x168c, lpBuffer=0x685cd48, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0x937fcb4, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesRead=0x937fcb4*=0x138, lpOverlapped=0x0) returned 1 [0189.525] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.525] WriteFile (in: hFile=0x168c, lpBuffer=0x6860950*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x937fcb8, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesWritten=0x937fcb8*=0x138, lpOverlapped=0x0) returned 1 [0191.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0191.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0191.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0191.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0191.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0191.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0191.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68233f8) returned 1 [0191.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60e0 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x68233f8 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d940 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0191.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0191.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0191.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0191.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68233f8) returned 1 [0191.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6766ce8 [0191.181] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.181] WriteFile (in: hFile=0x168c, lpBuffer=0x6766ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x937fd40, lpOverlapped=0x0 | out: lpBuffer=0x6766ce8*, lpNumberOfBytesWritten=0x937fd40*=0x10c, lpOverlapped=0x0) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60e0) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67648c8 [0192.293] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" [0192.293] wcscat (in: _Dest=0x67648c8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.ac3a86" [0192.293] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0x937fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x66d3048 [0192.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d3048) returned 1 [0192.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6890b38) returned 1 [0192.354] NtQueryInformationFile (in: FileHandle=0x168c, IoStatusBlock=0x937fc90, FileInformation=0x937fc98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x937fc90, FileInformation=0x937fc98) returned 0x0 [0192.354] NtSetInformationFile (FileHandle=0x168c, IoStatusBlock=0x937fc90, FileInformation=0x937fc98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 [0192.452] FlushFileBuffers (hFile=0x168c) returned 1 [0192.467] CloseHandle (hObject=0x168c) returned 1 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6764f58 [0192.504] wcscpy (in: _Dest=0x6764f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0192.504] wcscat (in: _Dest=0x6764f58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\AC3A86-Readme.txt" [0192.504] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0192.504] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b48 [0192.517] WriteFile (in: hFile=0x1b48, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x937fcd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x937fcd4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.543] CloseHandle (hObject=0x1b48) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764f58) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f648) returned 1 Thread: id = 6146 os_tid = 0x670 [0188.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml")) returned 0x20 [0190.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0190.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.369] GetLastError () returned 0x5 [0190.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0190.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 6147 os_tid = 0x20b0 [0188.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc")) returned 0x20 [0190.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0190.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.371] GetLastError () returned 0x5 [0190.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0190.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 6148 os_tid = 0x2238 [0188.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc")) returned 0x20 [0190.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0190.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.373] GetLastError () returned 0x5 [0190.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0190.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 6149 os_tid = 0x2078 [0188.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc")) returned 0x20 [0190.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0190.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.375] GetLastError () returned 0x5 [0190.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0190.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 6150 os_tid = 0x20f8 [0188.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv")) returned 0x20 [0190.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0190.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.377] GetLastError () returned 0x5 [0190.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0190.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 6151 os_tid = 0x20fc [0188.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml")) returned 0x20 [0190.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0190.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.378] GetLastError () returned 0x5 [0190.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0190.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 6152 os_tid = 0x2338 [0188.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc")) returned 0x20 [0190.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0190.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.380] GetLastError () returned 0x5 [0190.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0190.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 6153 os_tid = 0x233c [0188.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc")) returned 0x20 [0189.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0189.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.685] GetLastError () returned 0x5 [0189.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0189.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 6154 os_tid = 0x1108 [0188.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif")) returned 0x20 [0188.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0188.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.987] GetLastError () returned 0x5 [0188.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0188.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 6155 os_tid = 0xb74 [0188.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif")) returned 0x20 [0188.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0188.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.989] GetLastError () returned 0x5 [0188.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0188.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 6156 os_tid = 0xe64 [0188.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif")) returned 0x20 [0188.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0188.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.991] GetLastError () returned 0x5 [0188.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0188.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 6157 os_tid = 0xb84 [0188.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif")) returned 0x20 [0188.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0188.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.993] GetLastError () returned 0x5 [0188.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0188.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 6158 os_tid = 0xb44 [0188.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif")) returned 0x20 [0188.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0188.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.994] GetLastError () returned 0x5 [0188.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0188.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 6159 os_tid = 0x110c [0188.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif")) returned 0x20 [0188.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0188.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.996] GetLastError () returned 0x5 [0188.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0188.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 6160 os_tid = 0x1110 [0188.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif")) returned 0x20 [0188.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0188.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.997] GetLastError () returned 0x5 [0188.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0188.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e180) returned 1 Thread: id = 6161 os_tid = 0x1114 [0188.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif")) returned 0x20 [0188.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0188.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.999] GetLastError () returned 0x5 [0188.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0188.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 6162 os_tid = 0x1134 [0188.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif")) returned 0x20 [0189.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0189.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.001] GetLastError () returned 0x5 [0189.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0189.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 6163 os_tid = 0x1138 [0188.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif")) returned 0x20 [0189.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0189.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.002] GetLastError () returned 0x5 [0189.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0189.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 6164 os_tid = 0x113c [0188.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif")) returned 0x20 [0188.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0188.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.528] GetLastError () returned 0x5 [0188.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0188.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3280) returned 1 Thread: id = 6165 os_tid = 0x1600 [0188.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif")) returned 0x20 [0188.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0188.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.530] GetLastError () returned 0x5 [0188.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0188.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 6166 os_tid = 0x1604 [0188.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3e0d5d0 [0188.359] wcscpy (in: _Dest=0x3e0d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0188.359] wcscat (in: _Dest=0x3e0d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0188.359] wcscat (in: _Dest=0x3e0d5d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*" [0188.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4be0 [0188.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0189.703] wcscmp (_String1=".", _String2=".") returned 0 [0189.703] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.802] wcscmp (_String1="..", _String2=".") returned 1 [0190.803] wcscmp (_String1="..", _String2="..") returned 0 [0190.803] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0190.803] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0190.803] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0190.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3540 [0190.803] wcscpy (in: _Dest=0x3ea3540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0190.803] wcscat (in: _Dest=0x3ea3540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0190.803] wcscat (in: _Dest=0x3ea3540, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" [0191.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0191.647] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0191.647] wcscmp (_String1="Americana", _String2=".") returned 1 [0191.648] wcscmp (_String1="Americana", _String2="..") returned 1 [0191.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea3280 [0191.648] wcscpy (in: _Dest=0x3ea3280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.648] wcscat (in: _Dest=0x3ea3280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.648] wcscat (in: _Dest=0x3ea3280, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0191.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea3280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0191.649] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0191.649] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0191.649] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0191.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2740 [0191.649] wcscpy (in: _Dest=0x3ee2740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.649] wcscat (in: _Dest=0x3ee2740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.649] wcscat (in: _Dest=0x3ee2740, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" [0191.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0191.651] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0191.651] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0191.651] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0191.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea3a10 [0191.651] wcscpy (in: _Dest=0x3ea3a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.651] wcscat (in: _Dest=0x3ea3a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.651] wcscat (in: _Dest=0x3ea3a10, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0191.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea3a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0191.653] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0191.653] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0191.653] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0191.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee27f8 [0191.653] wcscpy (in: _Dest=0x3ee27f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.653] wcscat (in: _Dest=0x3ee27f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.653] wcscat (in: _Dest=0x3ee27f8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" [0191.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee27f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0191.654] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0191.654] wcscmp (_String1="Beige.css", _String2=".") returned 1 [0191.654] wcscmp (_String1="Beige.css", _String2="..") returned 1 [0191.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea2410 [0191.655] wcscpy (in: _Dest=0x3ea2410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.655] wcscat (in: _Dest=0x3ea2410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.655] wcscat (in: _Dest=0x3ea2410, _Source="Beige.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" [0191.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0191.656] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0191.656] wcscmp (_String1="Biscay", _String2=".") returned 1 [0191.656] wcscmp (_String1="Biscay", _String2="..") returned 1 [0191.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697ea08 [0191.656] wcscpy (in: _Dest=0x697ea08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.656] wcscat (in: _Dest=0x697ea08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.656] wcscat (in: _Dest=0x697ea08, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0191.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697ea08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0191.658] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0191.658] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0191.658] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0191.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea22b0 [0191.658] wcscpy (in: _Dest=0x3ea22b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.658] wcscat (in: _Dest=0x3ea22b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.658] wcscat (in: _Dest=0x3ea22b0, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" [0191.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea22b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0191.659] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0191.659] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0191.659] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0191.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2688 [0191.660] wcscpy (in: _Dest=0x3ee2688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.660] wcscat (in: _Dest=0x3ee2688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.660] wcscat (in: _Dest=0x3ee2688, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0191.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee2688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0191.661] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0191.661] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0191.661] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0191.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675aff8 [0191.661] wcscpy (in: _Dest=0x675aff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.661] wcscat (in: _Dest=0x675aff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.661] wcscat (in: _Dest=0x675aff8, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" [0191.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675aff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0191.663] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0191.663] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0191.663] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0191.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2518 [0191.663] wcscpy (in: _Dest=0x3ee2518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.663] wcscat (in: _Dest=0x3ee2518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.663] wcscat (in: _Dest=0x3ee2518, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0191.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee2518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0191.665] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0191.665] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0191.665] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0191.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675b0b8 [0191.665] wcscpy (in: _Dest=0x675b0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.665] wcscat (in: _Dest=0x675b0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.665] wcscat (in: _Dest=0x675b0b8, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" [0191.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0191.666] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0191.666] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0191.666] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0191.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea31d0 [0191.667] wcscpy (in: _Dest=0x3ea31d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.667] wcscat (in: _Dest=0x3ea31d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.667] wcscat (in: _Dest=0x3ea31d0, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" [0191.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea31d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0191.668] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0191.668] wcscmp (_String1="Desert", _String2=".") returned 1 [0191.668] wcscmp (_String1="Desert", _String2="..") returned 1 [0191.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697df88 [0191.668] wcscpy (in: _Dest=0x697df88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.668] wcscat (in: _Dest=0x697df88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.668] wcscat (in: _Dest=0x697df88, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0191.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0191.670] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0191.670] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0191.670] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0191.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3750 [0191.670] wcscpy (in: _Dest=0x3ea3750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.670] wcscat (in: _Dest=0x3ea3750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.670] wcscat (in: _Dest=0x3ea3750, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" [0191.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0191.672] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="DISCUS~1.CSS")) returned 1 [0191.672] wcscmp (_String1="Discussion.css", _String2=".") returned 1 [0191.672] wcscmp (_String1="Discussion.css", _String2="..") returned 1 [0191.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1490 [0191.672] wcscpy (in: _Dest=0x3ee1490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.672] wcscat (in: _Dest=0x3ee1490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.672] wcscat (in: _Dest=0x3ee1490, _Source="Discussion.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" [0191.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0191.673] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0191.673] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0191.673] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0191.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea3330 [0191.673] wcscpy (in: _Dest=0x3ea3330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.673] wcscat (in: _Dest=0x3ea3330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.673] wcscat (in: _Dest=0x3ea3330, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" [0191.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea3330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0191.675] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0191.675] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0191.675] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0191.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3ea24c0 [0191.675] wcscpy (in: _Dest=0x3ea24c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.675] wcscat (in: _Dest=0x3ea24c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.675] wcscat (in: _Dest=0x3ea24c0, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0191.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ea24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0191.676] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0191.676] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0191.676] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0191.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee28b0 [0191.677] wcscpy (in: _Dest=0x3ee28b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.677] wcscat (in: _Dest=0x3ee28b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.677] wcscat (in: _Dest=0x3ee28b0, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" [0191.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee28b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0191.678] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0191.678] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0191.678] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0191.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee1de8 [0191.678] wcscpy (in: _Dest=0x3ee1de8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.678] wcscat (in: _Dest=0x3ee1de8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.678] wcscat (in: _Dest=0x3ee1de8, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" [0191.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0191.680] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0191.680] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0191.680] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0191.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x675b178 [0191.680] wcscpy (in: _Dest=0x675b178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.680] wcscat (in: _Dest=0x675b178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.680] wcscat (in: _Dest=0x675b178, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" [0191.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0191.681] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0191.681] wcscmp (_String1="Lime", _String2=".") returned 1 [0191.681] wcscmp (_String1="Lime", _String2="..") returned 1 [0191.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e0d8 [0191.681] wcscpy (in: _Dest=0x697e0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.682] wcscat (in: _Dest=0x697e0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.682] wcscat (in: _Dest=0x697e0d8, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0191.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0191.683] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0191.683] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0191.683] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0191.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2fc0 [0191.683] wcscpy (in: _Dest=0x3ea2fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0191.683] wcscat (in: _Dest=0x3ea2fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0191.683] wcscat (in: _Dest=0x3ea2fc0, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" [0191.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0192.056] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0192.056] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0192.056] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0192.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2a40 [0192.056] wcscpy (in: _Dest=0x3ea2a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0192.056] wcscat (in: _Dest=0x3ea2a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0192.056] wcscat (in: _Dest=0x3ea2a40, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" [0195.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea2a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0195.541] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0195.541] wcscmp (_String1="Oasis", _String2=".") returned 1 [0195.541] wcscmp (_String1="Oasis", _String2="..") returned 1 [0195.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e030 [0195.541] wcscpy (in: _Dest=0x697e030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.541] wcscat (in: _Dest=0x697e030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.541] wcscat (in: _Dest=0x697e030, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0195.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0195.542] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0195.542] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0195.542] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0195.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c4d8 [0195.542] wcscpy (in: _Dest=0x35c4d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.542] wcscat (in: _Dest=0x35c4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.542] wcscat (in: _Dest=0x35c4d8, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" [0195.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0195.543] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0195.543] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0195.543] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0195.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee25d0 [0195.544] wcscpy (in: _Dest=0x3ee25d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.544] wcscat (in: _Dest=0x3ee25d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.544] wcscat (in: _Dest=0x3ee25d0, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" [0195.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee25d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0195.545] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0195.545] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0195.545] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0195.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee2968 [0195.545] wcscpy (in: _Dest=0x3ee2968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.545] wcscat (in: _Dest=0x3ee2968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.545] wcscat (in: _Dest=0x3ee2968, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" [0195.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0195.546] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0195.546] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0195.546] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0195.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2ad8 [0195.546] wcscpy (in: _Dest=0x3ee2ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.546] wcscat (in: _Dest=0x3ee2ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.546] wcscat (in: _Dest=0x3ee2ad8, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" [0195.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0195.547] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe371600, ftCreationTime.dwHighDateTime=0x1ca2bd5, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe371600, ftLastWriteTime.dwHighDateTime=0x1ca2bd5, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0195.547] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0195.547] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0195.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0195.547] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.547] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.547] wcscat (in: _Dest=0x3338e8, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" [0195.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0195.548] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0195.548] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0195.548] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0195.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2b90 [0195.549] wcscpy (in: _Dest=0x3ee2b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.549] wcscat (in: _Dest=0x3ee2b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.549] wcscat (in: _Dest=0x3ee2b90, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" [0195.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0195.549] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf614c600, ftCreationTime.dwHighDateTime=0x1ca2bd7, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf614c600, ftLastWriteTime.dwHighDateTime=0x1ca2bd7, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0195.550] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0195.550] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0195.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675b238 [0195.550] wcscpy (in: _Dest=0x675b238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.550] wcscat (in: _Dest=0x675b238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.550] wcscat (in: _Dest=0x675b238, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" [0195.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0195.551] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0195.551] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0195.551] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0195.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x675b2f8 [0195.551] wcscpy (in: _Dest=0x675b2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0195.551] wcscat (in: _Dest=0x675b2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0195.551] wcscat (in: _Dest=0x675b2f8, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" [0195.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0195.552] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0196.800] wcscmp (_String1="Slate", _String2=".") returned 1 [0196.801] wcscmp (_String1="Slate", _String2="..") returned 1 [0196.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e768 [0196.801] wcscpy (in: _Dest=0x697e768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0196.801] wcscat (in: _Dest=0x697e768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0196.801] wcscat (in: _Dest=0x697e768, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0197.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0197.024] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0197.024] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0197.024] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0197.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0197.024] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.024] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.024] wcscat (in: _Dest=0x35b7c8, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" [0197.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0197.025] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0197.025] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0197.025] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0197.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee2c48 [0197.025] wcscpy (in: _Dest=0x3ee2c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.025] wcscat (in: _Dest=0x3ee2c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.025] wcscat (in: _Dest=0x3ee2c48, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" [0197.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0197.026] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0197.026] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0197.026] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0197.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b878 [0197.026] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.026] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.026] wcscat (in: _Dest=0x35b878, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0197.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0197.027] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0197.027] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0197.027] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0197.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee2a20 [0197.027] wcscpy (in: _Dest=0x3ee2a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.027] wcscat (in: _Dest=0x3ee2a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.027] wcscat (in: _Dest=0x3ee2a20, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" [0197.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0197.028] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="SOLUTI~1")) returned 1 [0197.028] wcscmp (_String1="Solutions", _String2=".") returned 1 [0197.028] wcscmp (_String1="Solutions", _String2="..") returned 1 [0197.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0197.028] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.028] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.028] wcscat (in: _Dest=0x35c588, _Source="Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0197.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0197.029] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="SOLUTI~1.CSS")) returned 1 [0197.029] wcscmp (_String1="Solutions.css", _String2=".") returned 1 [0197.029] wcscmp (_String1="Solutions.css", _String2="..") returned 1 [0197.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee1f58 [0197.029] wcscpy (in: _Dest=0x3ee1f58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.029] wcscat (in: _Dest=0x3ee1f58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.029] wcscat (in: _Dest=0x3ee1f58, _Source="Solutions.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" [0197.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee1f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0197.030] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="SOLUTI~2.CSS")) returned 1 [0197.030] wcscmp (_String1="Solutions_Doc.css", _String2=".") returned 1 [0197.030] wcscmp (_String1="Solutions_Doc.css", _String2="..") returned 1 [0197.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333468 [0197.030] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.031] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.031] wcscat (in: _Dest=0x333468, _Source="Solutions_Doc.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" [0197.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0197.032] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="SOLUTI~3.CSS")) returned 1 [0197.032] wcscmp (_String1="Solutions_Generic.css", _String2=".") returned 1 [0197.032] wcscmp (_String1="Solutions_Generic.css", _String2="..") returned 1 [0197.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f5e8 [0197.032] wcscpy (in: _Dest=0x682f5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.032] wcscat (in: _Dest=0x682f5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.032] wcscat (in: _Dest=0x682f5e8, _Source="Solutions_Generic.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" [0197.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0197.033] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="SOLUTI~4.CSS")) returned 1 [0197.033] wcscmp (_String1="Solutions_Person.css", _String2=".") returned 1 [0197.033] wcscmp (_String1="Solutions_Person.css", _String2="..") returned 1 [0197.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682e8a0 [0197.033] wcscpy (in: _Dest=0x682e8a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.033] wcscat (in: _Dest=0x682e8a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.033] wcscat (in: _Dest=0x682e8a0, _Source="Solutions_Person.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" [0197.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0197.034] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="SOB0ED~1.CSS")) returned 1 [0197.034] wcscmp (_String1="Solutions_Response.css", _String2=".") returned 1 [0197.034] wcscmp (_String1="Solutions_Response.css", _String2="..") returned 1 [0197.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682e648 [0197.034] wcscpy (in: _Dest=0x682e648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.034] wcscat (in: _Dest=0x682e648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.034] wcscat (in: _Dest=0x682e648, _Source="Solutions_Response.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" [0197.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0197.035] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0197.035] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0197.035] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0197.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1ea0 [0197.035] wcscpy (in: _Dest=0x3ee1ea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.035] wcscat (in: _Dest=0x3ee1ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.035] wcscat (in: _Dest=0x3ee1ea0, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0197.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3ee1ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0197.036] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0197.036] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0197.036] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0197.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3330a8 [0197.036] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.036] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.036] wcscat (in: _Dest=0x3330a8, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" [0197.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0197.037] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0197.037] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0197.037] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0197.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0197.037] wcscpy (in: _Dest=0x35c428, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.037] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.037] wcscat (in: _Dest=0x35c428, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" [0197.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0197.038] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0197.038] wcscmp (_String1="STS2", _String2=".") returned 1 [0197.038] wcscmp (_String1="STS2", _String2="..") returned 1 [0197.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x697e960 [0197.038] wcscpy (in: _Dest=0x697e960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.038] wcscat (in: _Dest=0x697e960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.038] wcscat (in: _Dest=0x697e960, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0197.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0197.039] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0197.039] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0197.039] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0197.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bd48 [0197.039] wcscpy (in: _Dest=0x35bd48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.039] wcscat (in: _Dest=0x35bd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.039] wcscat (in: _Dest=0x35bd48, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" [0197.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35bd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394 [0197.040] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0197.040] wcscmp (_String1="Swirl", _String2=".") returned 1 [0197.040] wcscmp (_String1="Swirl", _String2="..") returned 1 [0197.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x697e228 [0197.040] wcscpy (in: _Dest=0x697e228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.040] wcscat (in: _Dest=0x697e228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.040] wcscat (in: _Dest=0x697e228, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0197.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x697e228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0197.041] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0197.041] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0197.041] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0197.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b5b8 [0197.041] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.041] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.041] wcscat (in: _Dest=0x35b5b8, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" [0197.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0197.044] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0197.044] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0197.044] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0197.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c218 [0197.044] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.044] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.044] wcscat (in: _Dest=0x35c218, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" [0197.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0197.045] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0197.045] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0197.045] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0197.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3321a8 [0197.045] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.045] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.045] wcscat (in: _Dest=0x3321a8, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" [0197.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070 [0197.046] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0197.046] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0197.046] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0197.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee2460 [0197.046] wcscpy (in: _Dest=0x3ee2460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0197.047] wcscat (in: _Dest=0x3ee2460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0197.047] wcscat (in: _Dest=0x3ee2460, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" [0197.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee2460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0197.048] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0197.211] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0201.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4be0) returned 1 [0201.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 [0201.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 6167 os_tid = 0x1364 [0188.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt")) returned 0x20 [0188.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt", dwFileAttributes=0x20) returned 0 [0188.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.361] GetLastError () returned 0x5 [0188.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt", dwFileAttributes=0x20) returned 0 [0188.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 6168 os_tid = 0x1368 [0188.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt")) returned 0x20 [0188.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt", dwFileAttributes=0x20) returned 0 [0188.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.363] GetLastError () returned 0x5 [0188.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt", dwFileAttributes=0x20) returned 0 [0188.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 6169 os_tid = 0xa20 [0188.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt")) returned 0x20 [0189.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt", dwFileAttributes=0x20) returned 0 [0189.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.704] GetLastError () returned 0x5 [0189.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt", dwFileAttributes=0x20) returned 0 [0189.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 Thread: id = 6170 os_tid = 0x1fd8 [0188.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt")) returned 0x20 [0189.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt", dwFileAttributes=0x20) returned 0 [0189.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.009] GetLastError () returned 0x5 [0189.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt", dwFileAttributes=0x20) returned 0 [0189.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 6171 os_tid = 0x1130 [0188.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt")) returned 0x20 [0189.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT", dwFileAttributes=0x20) returned 0 [0189.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.006] GetLastError () returned 0x5 [0189.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT", dwFileAttributes=0x20) returned 0 [0189.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 6172 os_tid = 0x2360 [0188.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt")) returned 0x20 [0189.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt", dwFileAttributes=0x20) returned 0 [0189.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.005] GetLastError () returned 0x5 [0189.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt", dwFileAttributes=0x20) returned 0 [0189.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 6173 os_tid = 0x2364 [0188.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt")) returned 0x20 [0189.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0189.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.709] GetLastError () returned 0x5 [0189.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0189.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 6174 os_tid = 0x2368 [0188.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt")) returned 0x20 [0189.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt", dwFileAttributes=0x20) returned 0 [0189.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.705] GetLastError () returned 0x5 [0189.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt", dwFileAttributes=0x20) returned 0 [0189.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 6175 os_tid = 0x236c [0188.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx")) returned 0x20 [0188.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0188.404] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.404] GetLastError () returned 0x5 [0188.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0188.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6176 os_tid = 0x2370 [0188.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca")) returned 0x20 [0188.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0188.406] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.406] GetLastError () returned 0x5 [0188.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0188.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0108) returned 1 Thread: id = 6177 os_tid = 0x12b8 [0188.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp")) returned 0x20 [0188.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0188.407] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.407] GetLastError () returned 0x5 [0188.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0188.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0348) returned 1 Thread: id = 6178 os_tid = 0x2390 [0188.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx")) returned 0x20 [0188.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0188.409] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.409] GetLastError () returned 0x5 [0188.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0188.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf2c8) returned 1 Thread: id = 6179 os_tid = 0x2394 [0188.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp")) returned 0x20 [0188.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0188.410] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.410] GetLastError () returned 0x5 [0188.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0188.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 6180 os_tid = 0x2398 [0188.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp")) returned 0x20 [0195.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0196.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.209] GetLastError () returned 0x5 [0197.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0197.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 6181 os_tid = 0x239c [0188.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex")) returned 0x20 [0195.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0196.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.209] GetLastError () returned 0x5 [0197.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0197.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f9d0) returned 1 Thread: id = 6182 os_tid = 0x23b8 [0188.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx")) returned 0x20 [0191.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0191.777] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.960] GetLastError () returned 0x5 [0192.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0192.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 6183 os_tid = 0x23bc [0188.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env")) returned 0x20 [0199.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0199.081] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.081] GetLastError () returned 0x5 [0199.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0199.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 6184 os_tid = 0x23c0 [0188.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca")) returned 0x20 [0195.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.209] GetLastError () returned 0x5 [0197.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0197.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 6185 os_tid = 0x2388 [0188.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp")) returned 0x20 [0195.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.208] GetLastError () returned 0x5 [0197.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0197.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 Thread: id = 6186 os_tid = 0x238c [0188.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp")) returned 0x20 [0199.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0199.083] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.083] GetLastError () returned 0x5 [0199.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0199.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e260) returned 1 Thread: id = 6187 os_tid = 0xb1c [0188.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx")) returned 0x20 [0195.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.208] GetLastError () returned 0x5 [0197.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0197.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332e68) returned 1 Thread: id = 6188 os_tid = 0x1118 [0188.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca")) returned 0x20 [0199.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0199.084] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.085] GetLastError () returned 0x5 [0199.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0199.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 6189 os_tid = 0x1120 [0188.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp")) returned 0x20 [0199.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0199.086] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.086] GetLastError () returned 0x5 [0199.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0199.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6190 os_tid = 0x1150 [0188.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp")) returned 0x20 [0196.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0196.896] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.721] GetLastError () returned 0x5 [0197.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0197.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ddb0) returned 1 Thread: id = 6191 os_tid = 0x1154 [0188.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx")) returned 0x20 [0191.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0191.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.718] GetLastError () returned 0x5 [0196.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0196.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 6192 os_tid = 0x1fdc [0188.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths")) returned 0x20 [0195.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0196.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.518] GetLastError () returned 0x5 [0196.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0196.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 6193 os_tid = 0x1fe4 [0188.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca")) returned 0x20 [0195.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.208] GetLastError () returned 0x5 [0197.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0197.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 6194 os_tid = 0x1fe8 [0188.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp")) returned 0x20 [0195.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.208] GetLastError () returned 0x5 [0197.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0197.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ca8) returned 1 Thread: id = 6195 os_tid = 0x1fec [0188.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp")) returned 0x20 [0195.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0196.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.208] GetLastError () returned 0x5 [0197.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0197.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 6196 os_tid = 0x1ff0 [0188.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx")) returned 0x20 [0195.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0196.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.207] GetLastError () returned 0x5 [0197.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0197.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333be8) returned 1 Thread: id = 6197 os_tid = 0x1ff4 [0188.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp")) returned 0x20 [0195.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0196.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.207] GetLastError () returned 0x5 [0197.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0197.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 6198 os_tid = 0x15c0 [0188.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex")) returned 0x20 [0195.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0196.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.207] GetLastError () returned 0x5 [0197.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0197.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f520) returned 1 Thread: id = 6199 os_tid = 0x15e4 [0188.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx")) returned 0x20 [0195.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0196.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.209] GetLastError () returned 0x5 [0197.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0199.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 6200 os_tid = 0x160c [0188.532] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0188.532] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0194.640] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ed4 [0194.640] GetFileSizeEx (in: hFile=0x1ed4, lpFileSize=0x5bffb0c | out: lpFileSize=0x5bffb0c*=259) returned 1 [0194.640] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.640] ReadFile (in: hFile=0x1ed4, lpBuffer=0x5bffae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5bffaf8, lpOverlapped=0x0 | out: lpBuffer=0x5bffae8*, lpNumberOfBytesRead=0x5bffaf8*=0x4, lpOverlapped=0x0) returned 1 [0194.642] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0194.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43348 [0194.642] NtQuerySystemTime (in: CurrentTime=0x5bffa80 | out: CurrentTime=0x5bffa80*=132482711031204000) returned 0x0 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x208e53f6 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x27bef11f [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x7b8acd93 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x5b469e82 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x5473d0a0 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x1b736ca3 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x2b1cbd71 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x74d9f4c2 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x3379b621 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x66359525 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x59dc3f5c [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x4a204630 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x560a16b [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x6b664c30 [0194.642] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x227cd1d1 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x573f8bcf [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x33e58ab0 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x4a255f86 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x2e838b3f [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x59ac4582 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x418d1a07 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x25f990d7 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x743d905f [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x6db65d8 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x7a0889f9 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x23702e86 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x48acca0f [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x201f4bf8 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x59fae5ed [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x31e31c93 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x5a6af9e5 [0194.643] RtlRandomEx (in: Seed=0x5bffa78 | out: Seed=0x5bffa78) returned 0x765c441c [0194.653] ReadFile (in: hFile=0x1ed4, lpBuffer=0x13052c88, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x5bffa74, lpOverlapped=0x0 | out: lpBuffer=0x13052c88*, lpNumberOfBytesRead=0x5bffa74*=0x103, lpOverlapped=0x0) returned 1 [0194.653] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.653] WriteFile (in: hFile=0x1ed4, lpBuffer=0x13056890*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x5bffa78, lpOverlapped=0x0 | out: lpBuffer=0x13056890*, lpNumberOfBytesWritten=0x5bffa78*=0x103, lpOverlapped=0x0) returned 1 [0197.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0197.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0197.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0197.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13056890) returned 1 [0197.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13052c88) returned 1 [0197.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28790) returned 1 [0197.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0197.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a861c8 [0197.359] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.359] WriteFile (in: hFile=0x1ed4, lpBuffer=0x69c3b88*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5bffb00, lpOverlapped=0x0 | out: lpBuffer=0x69c3b88*, lpNumberOfBytesWritten=0x5bffb00*=0x10c, lpOverlapped=0x0) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3b88) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a861f8) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a861c8) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0197.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0197.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6774318 [0197.642] wcscpy (in: _Dest=0x6774318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" [0197.643] wcscat (in: _Dest=0x6774318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.ac3a86" [0197.643] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0x5bffa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769b60 [0198.005] FlushFileBuffers (hFile=0x1ed4) returned 1 [0198.015] CloseHandle (hObject=0x1ed4) returned 1 [0198.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6774588 [0198.130] wcscpy (in: _Dest=0x6774588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0198.130] wcscat (in: _Dest=0x6774588, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\AC3A86-Readme.txt" [0198.130] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0198.130] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1030 [0199.116] WriteFile (in: hFile=0x1030, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5bffa94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5bffa94*=0x8b9, lpOverlapped=0x0) returned 1 [0199.953] CloseHandle (hObject=0x1030) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774588) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67501d8) returned 1 Thread: id = 6201 os_tid = 0x1360 [0188.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0188.533] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0189.622] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22b8 [0189.629] GetFileSizeEx (in: hFile=0x22b8, lpFileSize=0x471f8f4 | out: lpFileSize=0x471f8f4*=259) returned 1 [0189.629] SetFilePointerEx (in: hFile=0x22b8, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.629] ReadFile (in: hFile=0x22b8, lpBuffer=0x471f8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x471f8e0, lpOverlapped=0x0 | out: lpBuffer=0x471f8d0*, lpNumberOfBytesRead=0x471f8e0*=0x4, lpOverlapped=0x0) returned 1 [0189.643] SetFilePointerEx (in: hFile=0x22b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0189.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0189.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0189.643] NtQuerySystemTime (in: CurrentTime=0x471f868 | out: CurrentTime=0x471f868*=132482710981284000) returned 0x0 [0189.643] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x678269b1 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x3ccf4a92 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x394f22be [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x563fc54f [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x2a71d27b [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x1910ed9f [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x2338b8fa [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x3ff3318 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x30e427a2 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x185995b9 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x54461024 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x541b3764 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x6f842029 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x4413a0fb [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x235a8905 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x627b54eb [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x2e665d8d [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x536fd464 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x5842bbd9 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x751e2591 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x2a71d27b [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0xcbca727 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x7554f994 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x249300e8 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0xc7b26e3 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x398e6ae5 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x57334dae [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x20d455d6 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x28b5bcd2 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x42764081 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x3c37cc60 [0189.644] RtlRandomEx (in: Seed=0x471f860 | out: Seed=0x471f860) returned 0x76943a6 [0189.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0189.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69e0120 [0189.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69e3d28 [0189.652] ReadFile (in: hFile=0x22b8, lpBuffer=0x69e0120, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x471f85c, lpOverlapped=0x0 | out: lpBuffer=0x69e0120*, lpNumberOfBytesRead=0x471f85c*=0x103, lpOverlapped=0x0) returned 1 [0189.652] SetFilePointerEx (in: hFile=0x22b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.652] WriteFile (in: hFile=0x22b8, lpBuffer=0x69e3d28*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x471f860, lpOverlapped=0x0 | out: lpBuffer=0x69e3d28*, lpNumberOfBytesWritten=0x471f860*=0x103, lpOverlapped=0x0) returned 1 [0191.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0191.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0191.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0191.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e3d28) returned 1 [0191.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e0120) returned 1 [0191.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0191.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e412b8) returned 1 [0191.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5450 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e412b8 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d08d0 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0191.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5480 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0191.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0191.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0191.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e412b8) returned 1 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x69c31b0 [0191.149] SetFilePointerEx (in: hFile=0x22b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.149] WriteFile (in: hFile=0x22b8, lpBuffer=0x69c31b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x471f8e8, lpOverlapped=0x0 | out: lpBuffer=0x69c31b0*, lpNumberOfBytesWritten=0x471f8e8*=0x10c, lpOverlapped=0x0) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b0) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0192.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0192.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d418c0 [0192.268] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" [0192.269] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.ac3a86" [0192.269] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0x471f860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce060 [0192.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce060) returned 1 [0192.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688bfc0) returned 1 [0192.337] NtQueryInformationFile (in: FileHandle=0x22b8, IoStatusBlock=0x471f838, FileInformation=0x471f840, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x471f838, FileInformation=0x471f840) returned 0x0 [0192.337] NtSetInformationFile (FileHandle=0x22b8, IoStatusBlock=0x471f838, FileInformation=0x471f840, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418c0) returned 1 [0192.405] FlushFileBuffers (hFile=0x22b8) returned 1 [0192.423] CloseHandle (hObject=0x22b8) returned 1 [0192.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d41da0 [0192.490] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0192.490] wcscat (in: _Dest=0x3d41da0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\AC3A86-Readme.txt" [0192.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0192.490] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe10 [0192.513] WriteFile (in: hFile=0xe10, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x471f87c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x471f87c*=0x8b9, lpOverlapped=0x0) returned 1 [0192.529] CloseHandle (hObject=0xe10) returned 1 [0192.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41da0) returned 1 [0192.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750300) returned 1 Thread: id = 6202 os_tid = 0xd8c [0188.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 0x2020 [0188.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0194.666] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fcc [0194.666] GetFileSizeEx (in: hFile=0x1fcc, lpFileSize=0x835fb6c | out: lpFileSize=0x835fb6c*=251) returned 1 [0194.666] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.667] ReadFile (in: hFile=0x1fcc, lpBuffer=0x835fb48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x835fb58, lpOverlapped=0x0 | out: lpBuffer=0x835fb48*, lpNumberOfBytesRead=0x835fb58*=0x4, lpOverlapped=0x0) returned 1 [0194.672] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0194.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0194.673] NtQuerySystemTime (in: CurrentTime=0x835fae0 | out: CurrentTime=0x835fae0*=132482711031516000) returned 0x0 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x6056a4cc [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x7c467a69 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x6c6cf930 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x281c84e4 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x49bb1059 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x4cb279f3 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x15413ddf [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x1196ec04 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x14e28f91 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x60b6bb56 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x6533222 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x3341819d [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x2382b94f [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x37050894 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x6e703151 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x430b6450 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x6bf03b07 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x12745db6 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x2ba46f06 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x74e058a9 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x35afb6f0 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0xa3dea [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x5e7c402d [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x691bd936 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x1112876f [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x5d882b29 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x60c2209b [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x438ffd8f [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x4fee901a [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x495f484d [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x1c0ab9e9 [0194.673] RtlRandomEx (in: Seed=0x835fad8 | out: Seed=0x835fad8) returned 0x5e2ebcb0 [0194.681] ReadFile (in: hFile=0x1fcc, lpBuffer=0x13061ca8, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x835fad4, lpOverlapped=0x0 | out: lpBuffer=0x13061ca8*, lpNumberOfBytesRead=0x835fad4*=0xfb, lpOverlapped=0x0) returned 1 [0194.681] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.681] WriteFile (in: hFile=0x1fcc, lpBuffer=0x130658b0*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x835fad8, lpOverlapped=0x0 | out: lpBuffer=0x130658b0*, lpNumberOfBytesWritten=0x835fad8*=0xfb, lpOverlapped=0x0) returned 1 [0197.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0197.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130658b0) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13061ca8) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28880) returned 1 [0197.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4350) returned 1 [0197.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86288 [0197.365] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.366] WriteFile (in: hFile=0x1fcc, lpBuffer=0x69c3958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x835fb60, lpOverlapped=0x0 | out: lpBuffer=0x69c3958*, lpNumberOfBytesWritten=0x835fb60*=0x10c, lpOverlapped=0x0) returned 1 [0197.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3958) returned 1 [0197.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a862b8) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86288) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0197.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0197.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6774588 [0197.646] wcscpy (in: _Dest=0x6774588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" [0197.646] wcscat (in: _Dest=0x6774588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.ac3a86" [0197.646] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0x835fad8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x676a080 [0198.014] FlushFileBuffers (hFile=0x1fcc) returned 1 [0198.025] CloseHandle (hObject=0x1fcc) returned 1 [0198.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6774318 [0198.159] wcscpy (in: _Dest=0x6774318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0198.159] wcscat (in: _Dest=0x6774318, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\AC3A86-Readme.txt" [0198.159] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0198.159] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210c [0199.118] WriteFile (in: hFile=0x210c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x835faf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x835faf4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.965] CloseHandle (hObject=0x210c) returned 1 [0199.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774318) returned 1 [0199.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750428) returned 1 Thread: id = 6203 os_tid = 0x2038 [0188.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 0x2020 [0188.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0194.682] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x237c [0194.682] GetFileSizeEx (in: hFile=0x237c, lpFileSize=0x7f2f88c | out: lpFileSize=0x7f2f88c*=243) returned 1 [0194.682] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.682] ReadFile (in: hFile=0x237c, lpBuffer=0x7f2f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f2f878, lpOverlapped=0x0 | out: lpBuffer=0x7f2f868*, lpNumberOfBytesRead=0x7f2f878*=0x4, lpOverlapped=0x0) returned 1 [0194.684] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431b8 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fd8 [0194.684] NtQuerySystemTime (in: CurrentTime=0x7f2f800 | out: CurrentTime=0x7f2f800*=132482711031672000) returned 0x0 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x87a1ebe [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x57b74a4d [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x442b7e74 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x6da8971f [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x6924b46c [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x1f34a63d [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x13506f [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x3e15828d [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x6a0ad05a [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x14b7714 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x2af2bf0c [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x76634228 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x5943fa17 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x7d934f26 [0194.684] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x50a112d7 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x27bef11f [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x4ed77263 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0xa1a1e6e [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x69332e37 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x4f726f85 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x14f99b9f [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x21a56554 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x3f268259 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x386afe47 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x6730e93 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x2400d8e6 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x114b5423 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x364c46c8 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x5ea4be97 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x50d8d977 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x1e8c4764 [0194.685] RtlRandomEx (in: Seed=0x7f2f7f8 | out: Seed=0x7f2f7f8) returned 0x68b1a05b [0194.693] ReadFile (in: hFile=0x237c, lpBuffer=0x130694b8, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x7f2f7f4, lpOverlapped=0x0 | out: lpBuffer=0x130694b8*, lpNumberOfBytesRead=0x7f2f7f4*=0xf3, lpOverlapped=0x0) returned 1 [0194.693] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.693] WriteFile (in: hFile=0x237c, lpBuffer=0x1306d0c0*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x7f2f7f8, lpOverlapped=0x0 | out: lpBuffer=0x1306d0c0*, lpNumberOfBytesWritten=0x7f2f7f8*=0xf3, lpOverlapped=0x0) returned 1 [0197.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0197.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1306d0c0) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130694b8) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f288f8) returned 1 [0197.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4110) returned 1 [0197.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a862e8 [0197.368] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.368] WriteFile (in: hFile=0x237c, lpBuffer=0x69c3840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f2f880, lpOverlapped=0x0 | out: lpBuffer=0x69c3840*, lpNumberOfBytesWritten=0x7f2f880*=0x10c, lpOverlapped=0x0) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3840) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86318) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a862e8) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0197.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0197.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67747f8 [0197.655] wcscpy (in: _Dest=0x67747f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" [0197.655] wcscat (in: _Dest=0x67747f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.ac3a86" [0197.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.ac3a86", NtPathName=0x7f2f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769ca8 [0198.019] FlushFileBuffers (hFile=0x237c) returned 1 [0198.028] CloseHandle (hObject=0x237c) returned 1 [0198.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67741e0 [0198.161] wcscpy (in: _Dest=0x67741e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0198.161] wcscat (in: _Dest=0x67741e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\AC3A86-Readme.txt" [0198.161] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ac3a86-readme.txt")) returned 0xffffffff [0198.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2174 [0198.188] WriteFile (in: hFile=0x2174, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f2f814, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7f2f814*=0x8b9, lpOverlapped=0x0) returned 1 [0198.192] CloseHandle (hObject=0x2174) returned 1 [0198.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67741e0) returned 1 [0198.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750550) returned 1 Thread: id = 6204 os_tid = 0x2040 [0188.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0188.535] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0189.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2114 [0189.654] GetFileSizeEx (in: hFile=0x2114, lpFileSize=0x7e5fc14 | out: lpFileSize=0x7e5fc14*=259) returned 1 [0189.655] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.655] ReadFile (in: hFile=0x2114, lpBuffer=0x7e5fbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e5fc00, lpOverlapped=0x0 | out: lpBuffer=0x7e5fbf0*, lpNumberOfBytesRead=0x7e5fc00*=0x4, lpOverlapped=0x0) returned 1 [0189.656] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0189.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0189.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0189.657] NtQuerySystemTime (in: CurrentTime=0x7e5fb88 | out: CurrentTime=0x7e5fb88*=132482710981284000) returned 0x0 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x6d1e1cf3 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x7dfeb038 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x2b45e2de [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x34d5a8fb [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x21bb536d [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0xc7b26e3 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x2fe75ee8 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x5c8e188c [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x4a684edb [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x2de125df [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x5e69e22d [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0xbd17362 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x67406bbc [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x6ac934c9 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x2936287b [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x6532097d [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x1abc3f04 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x4bdd3b67 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x4ed8efa9 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x13fb05e4 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x420e5b42 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x4b4eca75 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x1dea50d0 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x3475c37f [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x4413a0fb [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x73fc7ba1 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x503d18a2 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x45595a12 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x44732561 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x5c8e4b87 [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x13ca20bd [0189.657] RtlRandomEx (in: Seed=0x7e5fb80 | out: Seed=0x7e5fb80) returned 0x765a655d [0189.666] ReadFile (in: hFile=0x2114, lpBuffer=0x69e7930, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x7e5fb7c, lpOverlapped=0x0 | out: lpBuffer=0x69e7930*, lpNumberOfBytesRead=0x7e5fb7c*=0x103, lpOverlapped=0x0) returned 1 [0189.666] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.666] WriteFile (in: hFile=0x2114, lpBuffer=0x69eb538*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x7e5fb80, lpOverlapped=0x0 | out: lpBuffer=0x69eb538*, lpNumberOfBytesWritten=0x7e5fb80*=0x103, lpOverlapped=0x0) returned 1 [0191.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0191.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0191.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0191.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69eb538) returned 1 [0191.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e7930) returned 1 [0191.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0f60) returned 1 [0191.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41198) returned 1 [0191.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0191.502] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.502] WriteFile (in: hFile=0x2114, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e5fc08, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0x7e5fc08*=0x10c, lpOverlapped=0x0) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0195.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0195.146] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" [0195.146] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.ac3a86" [0195.147] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x7e5fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67693b0 [0197.759] FlushFileBuffers (hFile=0x2114) returned 1 [0197.767] CloseHandle (hObject=0x2114) returned 1 [0197.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6768ab8 [0197.860] wcscpy (in: _Dest=0x6768ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0197.861] wcscat (in: _Dest=0x6768ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\AC3A86-Readme.txt" [0197.861] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0197.861] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.300] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7e5fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7e5fb9c*=0x8b9, lpOverlapped=0x0) returned 1 [0198.302] CloseHandle (hObject=0x1988) returned 1 [0198.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768ab8) returned 1 [0198.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 Thread: id = 6205 os_tid = 0x2044 [0188.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0188.535] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0189.667] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f84 [0189.668] GetFileSizeEx (in: hFile=0x1f84, lpFileSize=0x5d4f80c | out: lpFileSize=0x5d4f80c*=265) returned 1 [0189.668] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.668] ReadFile (in: hFile=0x1f84, lpBuffer=0x5d4f7e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d4f7f8, lpOverlapped=0x0 | out: lpBuffer=0x5d4f7e8*, lpNumberOfBytesRead=0x5d4f7f8*=0x4, lpOverlapped=0x0) returned 1 [0189.669] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0189.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0189.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0189.670] NtQuerySystemTime (in: CurrentTime=0x5d4f780 | out: CurrentTime=0x5d4f780*=132482710981440000) returned 0x0 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x45160373 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x462b560f [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x66894da7 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x76570c1a [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x31039cb0 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x25264e30 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x4a8f56a7 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x2de125df [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x47af91a [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x2f5a7bef [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x529c3e64 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x28b5bcd2 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x4fb840ce [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x263e9e58 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x37a22ae8 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x3b18bca9 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x420a582 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x4d8fb192 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x24177e61 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x13540730 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x61e4c29b [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x4ed8efa9 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x23dff4ec [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x2c03d1e4 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x28d7c254 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x29dcc188 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x2dbbf71b [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x48452202 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x650b713c [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x4b4eca75 [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x634e805e [0189.670] RtlRandomEx (in: Seed=0x5d4f778 | out: Seed=0x5d4f778) returned 0x76570c1a [0189.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0189.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69ef140 [0189.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69f2d48 [0189.680] ReadFile (in: hFile=0x1f84, lpBuffer=0x69ef140, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x5d4f774, lpOverlapped=0x0 | out: lpBuffer=0x69ef140*, lpNumberOfBytesRead=0x5d4f774*=0x109, lpOverlapped=0x0) returned 1 [0189.680] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.680] WriteFile (in: hFile=0x1f84, lpBuffer=0x69f2d48*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x5d4f778, lpOverlapped=0x0 | out: lpBuffer=0x69f2d48*, lpNumberOfBytesWritten=0x5d4f778*=0x109, lpOverlapped=0x0) returned 1 [0191.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a48 [0191.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0191.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0191.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f2d48) returned 1 [0191.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69ef140) returned 1 [0191.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0191.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a08) returned 1 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e41a08 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0240 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0191.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60b0 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0191.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0191.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0191.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a08) returned 1 [0191.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6766bd0 [0191.179] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.180] WriteFile (in: hFile=0x1f84, lpBuffer=0x6766bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5d4f800, lpOverlapped=0x0 | out: lpBuffer=0x6766bd0*, lpNumberOfBytesWritten=0x5d4f800*=0x10c, lpOverlapped=0x0) returned 1 [0192.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bd0) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60b0) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0192.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x676ad28 [0192.292] wcscpy (in: _Dest=0x676ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" [0192.292] wcscat (in: _Dest=0x676ad28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.ac3a86" [0192.292] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0x5d4f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67694f8 [0192.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67694f8) returned 1 [0192.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688fc20) returned 1 [0192.352] NtQueryInformationFile (in: FileHandle=0x1f84, IoStatusBlock=0x5d4f750, FileInformation=0x5d4f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d4f750, FileInformation=0x5d4f758) returned 0x0 [0192.353] NtSetInformationFile (FileHandle=0x1f84, IoStatusBlock=0x5d4f750, FileInformation=0x5d4f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ad28) returned 1 [0192.446] FlushFileBuffers (hFile=0x1f84) returned 1 [0192.459] CloseHandle (hObject=0x1f84) returned 1 [0192.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67652d0 [0192.503] wcscpy (in: _Dest=0x67652d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0192.503] wcscat (in: _Dest=0x67652d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\AC3A86-Readme.txt" [0192.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0192.503] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2300 [0192.516] WriteFile (in: hFile=0x2300, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5d4f794, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5d4f794*=0x8b9, lpOverlapped=0x0) returned 1 [0192.540] CloseHandle (hObject=0x2300) returned 1 [0192.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67652d0) returned 1 [0192.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 Thread: id = 6206 os_tid = 0x2048 [0188.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0188.536] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0191.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x938 [0191.477] GetFileSizeEx (in: hFile=0x938, lpFileSize=0x876f81c | out: lpFileSize=0x876f81c*=319) returned 1 [0191.477] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.477] ReadFile (in: hFile=0x938, lpBuffer=0x876f7f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x876f808, lpOverlapped=0x0 | out: lpBuffer=0x876f7f8*, lpNumberOfBytesRead=0x876f808*=0x4, lpOverlapped=0x0) returned 1 [0191.481] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0191.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa60 [0191.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0191.481] NtQuerySystemTime (in: CurrentTime=0x876f790 | out: CurrentTime=0x876f790*=132482710999536000) returned 0x0 [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x65e19e55 [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x7dc75c25 [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x7215247c [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x6532097d [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x380e6813 [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x5344fba4 [0191.481] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x4fb840ce [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x10dc906 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x391cac5b [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x49b378be [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x2dbbf71b [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x62c2320c [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x13540730 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0xc6c01ef [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x615144c4 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x48c89fd7 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x50b0c4af [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x5e620dfc [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x73f9caf3 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x586fba9d [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x31159a45 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x7a218833 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x53f05ea4 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x10f3f2ac [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x48c89fd7 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x5d4b0e19 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0xbd17362 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x5e64897b [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x222310b0 [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x6f71fb1b [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x3050a40e [0191.482] RtlRandomEx (in: Seed=0x876f788 | out: Seed=0x876f788) returned 0x393706a4 [0191.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0191.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673b720 [0191.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6737b18 [0191.501] ReadFile (in: hFile=0x938, lpBuffer=0x673b720, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x876f784, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0x876f784*=0x13f, lpOverlapped=0x0) returned 1 [0191.501] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.501] WriteFile (in: hFile=0x938, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x876f788, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0x876f788*=0x13f, lpOverlapped=0x0) returned 1 [0195.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0195.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0195.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0195.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0195.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0195.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0195.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41390) returned 1 [0195.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0195.145] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.145] WriteFile (in: hFile=0x938, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x876f810, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x876f810*=0x10c, lpOverlapped=0x0) returned 1 [0195.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0195.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa60) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0195.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0195.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0195.822] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" [0195.822] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.ac3a86" [0195.822] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x876f788, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769120 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769120) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891c78) returned 1 [0195.976] NtQueryInformationFile (in: FileHandle=0x938, IoStatusBlock=0x876f760, FileInformation=0x876f768, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x876f760, FileInformation=0x876f768) returned 0x0 [0195.976] NtSetInformationFile (FileHandle=0x938, IoStatusBlock=0x876f760, FileInformation=0x876f768, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0196.293] FlushFileBuffers (hFile=0x938) returned 1 [0196.823] CloseHandle (hObject=0x938) returned 1 [0197.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ea8060 [0198.343] wcscpy (in: _Dest=0x12ea8060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0198.343] wcscat (in: _Dest=0x12ea8060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\AC3A86-Readme.txt" [0198.343] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0198.343] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.135] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x876f7a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x876f7a4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.137] CloseHandle (hObject=0xac4) returned 1 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea8060) returned 1 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 Thread: id = 6207 os_tid = 0x204c [0188.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f9a00 [0188.536] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0188.536] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0188.536] wcscat (in: _Dest=0x2f9a00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*" [0188.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f159a0 [0188.536] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0189.712] wcscmp (_String1=".", _String2=".") returned 0 [0189.712] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.712] wcscmp (_String1="..", _String2=".") returned 1 [0189.712] wcscmp (_String1="..", _String2="..") returned 0 [0189.712] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.713] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.713] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69589a0 [0189.713] wcscpy (in: _Dest=0x69589a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0189.713] wcscat (in: _Dest=0x69589a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0189.713] wcscat (in: _Dest=0x69589a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" [0190.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0190.024] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x3f159a0 | out: lpFindFileData=0x3f159a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.025] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f159a0) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 [0190.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45710) returned 1 Thread: id = 6208 os_tid = 0x2050 [0188.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2fad98 [0188.537] wcscpy (in: _Dest=0x2fad98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0188.537] wcscat (in: _Dest=0x2fad98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0188.537] wcscat (in: _Dest=0x2fad98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*" [0188.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11d78 [0188.537] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0189.713] wcscmp (_String1=".", _String2=".") returned 0 [0189.713] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.713] wcscmp (_String1="..", _String2=".") returned 1 [0189.713] wcscmp (_String1="..", _String2="..") returned 0 [0189.713] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.713] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.713] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958ac8 [0189.713] wcscpy (in: _Dest=0x6958ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0189.713] wcscat (in: _Dest=0x6958ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0189.713] wcscat (in: _Dest=0x6958ac8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" [0190.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0190.028] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x3f11d78 | out: lpFindFileData=0x3f11d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.028] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0190.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11d78) returned 1 [0190.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 [0190.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcf68) returned 1 Thread: id = 6209 os_tid = 0x2054 [0188.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f96e8 [0188.538] wcscpy (in: _Dest=0x2f96e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0188.538] wcscat (in: _Dest=0x2f96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0188.538] wcscat (in: _Dest=0x2f96e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*" [0188.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f143f8 [0188.538] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0189.714] wcscmp (_String1=".", _String2=".") returned 0 [0189.714] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.714] wcscmp (_String1="..", _String2=".") returned 1 [0189.714] wcscmp (_String1="..", _String2="..") returned 0 [0189.714] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.714] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.714] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958bf0 [0189.714] wcscpy (in: _Dest=0x6958bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0189.714] wcscat (in: _Dest=0x6958bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0189.714] wcscat (in: _Dest=0x6958bf0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" [0190.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0190.031] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x3f143f8 | out: lpFindFileData=0x3f143f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.031] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0190.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f143f8) returned 1 [0190.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0190.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25558) returned 1 Thread: id = 6210 os_tid = 0x2058 [0188.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2fafa8 [0188.539] wcscpy (in: _Dest=0x2fafa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0188.539] wcscat (in: _Dest=0x2fafa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0188.539] wcscat (in: _Dest=0x2fafa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*" [0188.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f148c8 [0188.539] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0189.715] wcscmp (_String1=".", _String2=".") returned 0 [0189.715] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.715] wcscmp (_String1="..", _String2=".") returned 1 [0189.715] wcscmp (_String1="..", _String2="..") returned 0 [0189.715] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.715] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.715] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958d18 [0189.715] wcscpy (in: _Dest=0x6958d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0189.715] wcscat (in: _Dest=0x6958d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0189.715] wcscat (in: _Dest=0x6958d18, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" [0190.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0190.033] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x3f148c8 | out: lpFindFileData=0x3f148c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.034] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0190.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f148c8) returned 1 [0190.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 [0190.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25450) returned 1 Thread: id = 6211 os_tid = 0x205c [0188.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae318 [0188.540] wcscpy (in: _Dest=0x68ae318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0188.540] wcscat (in: _Dest=0x68ae318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0188.540] wcscat (in: _Dest=0x68ae318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*" [0188.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15268 [0188.540] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0189.715] wcscmp (_String1=".", _String2=".") returned 0 [0189.715] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.716] wcscmp (_String1="..", _String2=".") returned 1 [0189.716] wcscmp (_String1="..", _String2="..") returned 0 [0189.716] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.716] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.716] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958e40 [0189.716] wcscpy (in: _Dest=0x6958e40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0189.716] wcscat (in: _Dest=0x6958e40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0189.716] wcscat (in: _Dest=0x6958e40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" [0190.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0190.036] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x3f15268 | out: lpFindFileData=0x3f15268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.037] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15268) returned 1 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae318) returned 1 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25348) returned 1 Thread: id = 6212 os_tid = 0x2060 [0188.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae210 [0188.541] wcscpy (in: _Dest=0x68ae210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0188.541] wcscat (in: _Dest=0x68ae210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0188.541] wcscat (in: _Dest=0x68ae210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*" [0188.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4e48 [0188.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0189.716] wcscmp (_String1=".", _String2=".") returned 0 [0189.716] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.716] wcscmp (_String1="..", _String2=".") returned 1 [0189.716] wcscmp (_String1="..", _String2="..") returned 0 [0189.716] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.716] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.716] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6958f68 [0189.717] wcscpy (in: _Dest=0x6958f68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0189.717] wcscat (in: _Dest=0x6958f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0189.717] wcscat (in: _Dest=0x6958f68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" [0190.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20 [0190.039] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.039] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0190.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4e48) returned 1 [0190.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae210) returned 1 [0190.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25c90) returned 1 Thread: id = 6213 os_tid = 0x2064 [0188.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae108 [0188.542] wcscpy (in: _Dest=0x68ae108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0188.542] wcscat (in: _Dest=0x68ae108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0188.542] wcscat (in: _Dest=0x68ae108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*" [0188.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e50b0 [0188.542] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0189.717] wcscmp (_String1=".", _String2=".") returned 0 [0189.717] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.717] wcscmp (_String1="..", _String2=".") returned 1 [0189.717] wcscmp (_String1="..", _String2="..") returned 0 [0189.717] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.717] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.717] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6959090 [0189.717] wcscpy (in: _Dest=0x6959090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0189.717] wcscat (in: _Dest=0x6959090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0189.717] wcscat (in: _Dest=0x6959090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" [0190.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c [0190.042] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.042] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0190.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e50b0) returned 1 [0190.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae108) returned 1 [0190.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ea8) returned 1 Thread: id = 6214 os_tid = 0x2068 [0188.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae000 [0188.543] wcscpy (in: _Dest=0x68ae000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0188.543] wcscat (in: _Dest=0x68ae000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0188.543] wcscat (in: _Dest=0x68ae000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*" [0188.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0188.543] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0189.718] wcscmp (_String1=".", _String2=".") returned 0 [0189.718] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.718] wcscmp (_String1="..", _String2=".") returned 1 [0189.718] wcscmp (_String1="..", _String2="..") returned 0 [0189.718] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.718] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.718] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69591b8 [0189.718] wcscpy (in: _Dest=0x69591b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0189.718] wcscat (in: _Dest=0x69591b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0189.718] wcscat (in: _Dest=0x69591b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" [0190.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69591b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0190.045] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.045] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0190.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0190.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae000) returned 1 [0190.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25b88) returned 1 Thread: id = 6215 os_tid = 0x206c [0188.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68adef8 [0188.546] wcscpy (in: _Dest=0x68adef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0188.546] wcscat (in: _Dest=0x68adef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0188.546] wcscat (in: _Dest=0x68adef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*" [0188.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334db0 [0188.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0189.718] wcscmp (_String1=".", _String2=".") returned 0 [0189.718] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.718] wcscmp (_String1="..", _String2=".") returned 1 [0189.718] wcscmp (_String1="..", _String2="..") returned 0 [0189.718] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.719] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.719] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69592e0 [0189.719] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0189.719] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0189.719] wcscat (in: _Dest=0x69592e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" [0190.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18 [0190.048] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x334db0 | out: lpFindFileData=0x334db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.048] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0190.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334db0) returned 1 [0190.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adef8) returned 1 [0190.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25a80) returned 1 Thread: id = 6216 os_tid = 0x2070 [0188.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68addf0 [0188.547] wcscpy (in: _Dest=0x68addf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0188.547] wcscat (in: _Dest=0x68addf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0188.547] wcscat (in: _Dest=0x68addf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*" [0188.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0188.547] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0189.719] wcscmp (_String1=".", _String2=".") returned 0 [0189.719] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.719] wcscmp (_String1="..", _String2=".") returned 1 [0189.719] wcscmp (_String1="..", _String2="..") returned 0 [0189.719] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.719] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.719] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6959408 [0189.719] wcscpy (in: _Dest=0x6959408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0189.719] wcscat (in: _Dest=0x6959408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0189.720] wcscat (in: _Dest=0x6959408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" [0190.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0190.088] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.088] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0190.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0190.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68addf0) returned 1 [0190.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25978) returned 1 Thread: id = 6217 os_tid = 0x2074 [0188.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68adce8 [0188.548] wcscpy (in: _Dest=0x68adce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0188.548] wcscat (in: _Dest=0x68adce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0188.548] wcscat (in: _Dest=0x68adce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*" [0188.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0188.548] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0189.720] wcscmp (_String1=".", _String2=".") returned 0 [0189.720] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.720] wcscmp (_String1="..", _String2=".") returned 1 [0189.720] wcscmp (_String1="..", _String2="..") returned 0 [0189.720] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.720] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.720] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6959530 [0189.720] wcscpy (in: _Dest=0x6959530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0189.720] wcscat (in: _Dest=0x6959530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0189.720] wcscat (in: _Dest=0x6959530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" [0190.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0190.090] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.091] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0190.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0190.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adce8) returned 1 [0190.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25870) returned 1 Thread: id = 6218 os_tid = 0x207c [0188.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68995a8 [0188.549] wcscpy (in: _Dest=0x68995a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0188.549] wcscat (in: _Dest=0x68995a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0188.549] wcscat (in: _Dest=0x68995a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*" [0188.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0188.549] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0189.721] wcscmp (_String1=".", _String2=".") returned 0 [0189.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.721] wcscmp (_String1="..", _String2=".") returned 1 [0189.721] wcscmp (_String1="..", _String2="..") returned 0 [0189.721] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.721] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.721] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6959658 [0189.721] wcscpy (in: _Dest=0x6959658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0189.721] wcscat (in: _Dest=0x6959658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0189.721] wcscat (in: _Dest=0x6959658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" [0190.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0190.093] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.093] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0190.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0190.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68995a8) returned 1 [0190.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25768) returned 1 Thread: id = 6219 os_tid = 0x2084 [0188.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68994a0 [0188.550] wcscpy (in: _Dest=0x68994a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0188.550] wcscat (in: _Dest=0x68994a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0188.550] wcscat (in: _Dest=0x68994a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*" [0188.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0188.550] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0189.721] wcscmp (_String1=".", _String2=".") returned 0 [0189.721] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.721] wcscmp (_String1="..", _String2=".") returned 1 [0189.721] wcscmp (_String1="..", _String2="..") returned 0 [0189.721] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.721] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.722] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6959780 [0189.722] wcscpy (in: _Dest=0x6959780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0189.722] wcscat (in: _Dest=0x6959780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0189.722] wcscat (in: _Dest=0x6959780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" [0190.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0190.096] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.096] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0190.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0190.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68994a0) returned 1 [0190.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25660) returned 1 Thread: id = 6220 os_tid = 0x2088 [0188.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6899398 [0188.550] wcscpy (in: _Dest=0x6899398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0188.551] wcscat (in: _Dest=0x6899398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0188.551] wcscat (in: _Dest=0x6899398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*" [0188.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0188.551] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0189.722] wcscmp (_String1=".", _String2=".") returned 0 [0189.722] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.722] wcscmp (_String1="..", _String2=".") returned 1 [0189.722] wcscmp (_String1="..", _String2="..") returned 0 [0189.722] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.722] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.722] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69598a8 [0189.722] wcscpy (in: _Dest=0x69598a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0189.722] wcscat (in: _Dest=0x69598a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0189.722] wcscat (in: _Dest=0x69598a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" [0190.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0190.099] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.099] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0190.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0190.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899398) returned 1 [0190.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24b08) returned 1 Thread: id = 6221 os_tid = 0x2090 [0188.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6899ad0 [0188.552] wcscpy (in: _Dest=0x6899ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0188.552] wcscat (in: _Dest=0x6899ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0188.552] wcscat (in: _Dest=0x6899ad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*" [0188.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0188.552] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0189.723] wcscmp (_String1=".", _String2=".") returned 0 [0189.723] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.723] wcscmp (_String1="..", _String2=".") returned 1 [0189.723] wcscmp (_String1="..", _String2="..") returned 0 [0189.723] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.723] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.723] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x69599d0 [0189.723] wcscpy (in: _Dest=0x69599d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0189.723] wcscat (in: _Dest=0x69599d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0189.723] wcscat (in: _Dest=0x69599d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" [0190.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69599d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0190.101] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.102] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0190.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0190.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899ad0) returned 1 [0190.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b30) returned 1 Thread: id = 6222 os_tid = 0x2094 [0188.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68999c8 [0188.552] wcscpy (in: _Dest=0x68999c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0188.552] wcscat (in: _Dest=0x68999c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0188.553] wcscat (in: _Dest=0x68999c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*" [0188.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0188.553] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0189.724] wcscmp (_String1=".", _String2=".") returned 0 [0189.724] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.724] wcscmp (_String1="..", _String2=".") returned 1 [0189.724] wcscmp (_String1="..", _String2="..") returned 0 [0189.724] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.724] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.724] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6959af8 [0189.724] wcscpy (in: _Dest=0x6959af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0189.724] wcscat (in: _Dest=0x6959af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0189.724] wcscat (in: _Dest=0x6959af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" [0190.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0190.104] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.104] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0190.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0190.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68999c8) returned 1 [0190.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 6223 os_tid = 0x20b4 [0188.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68998c0 [0188.553] wcscpy (in: _Dest=0x68998c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0188.553] wcscat (in: _Dest=0x68998c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0188.553] wcscat (in: _Dest=0x68998c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*" [0188.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0188.554] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0189.724] wcscmp (_String1=".", _String2=".") returned 0 [0189.724] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.724] wcscmp (_String1="..", _String2=".") returned 1 [0189.724] wcscmp (_String1="..", _String2="..") returned 0 [0189.724] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.724] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.724] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf088 [0189.725] wcscpy (in: _Dest=0x3daf088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0189.725] wcscat (in: _Dest=0x3daf088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0189.725] wcscat (in: _Dest=0x3daf088, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" [0190.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0190.107] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.107] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0190.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0190.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68998c0) returned 1 [0190.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c38) returned 1 Thread: id = 6224 os_tid = 0x20b8 [0188.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68997b8 [0188.554] wcscpy (in: _Dest=0x68997b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0188.554] wcscat (in: _Dest=0x68997b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0188.554] wcscat (in: _Dest=0x68997b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*" [0188.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0188.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0189.725] wcscmp (_String1=".", _String2=".") returned 0 [0189.725] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.725] wcscmp (_String1="..", _String2=".") returned 1 [0189.725] wcscmp (_String1="..", _String2="..") returned 0 [0189.725] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.725] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.725] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf1b0 [0189.725] wcscpy (in: _Dest=0x3daf1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0189.725] wcscat (in: _Dest=0x3daf1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0189.725] wcscat (in: _Dest=0x3daf1b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" [0190.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0190.110] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.110] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0190.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0190.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68997b8) returned 1 [0190.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44168) returned 1 Thread: id = 6225 os_tid = 0x20bc [0188.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68996b0 [0188.555] wcscpy (in: _Dest=0x68996b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0188.555] wcscat (in: _Dest=0x68996b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0188.555] wcscat (in: _Dest=0x68996b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*" [0188.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0188.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0189.726] wcscmp (_String1=".", _String2=".") returned 0 [0189.726] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.726] wcscmp (_String1="..", _String2=".") returned 1 [0189.726] wcscmp (_String1="..", _String2="..") returned 0 [0189.726] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.726] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.726] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf2d8 [0189.726] wcscpy (in: _Dest=0x3daf2d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0189.726] wcscat (in: _Dest=0x3daf2d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0189.726] wcscat (in: _Dest=0x3daf2d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" [0190.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0190.112] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.112] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68996b0) returned 1 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d40) returned 1 Thread: id = 6226 os_tid = 0x20c0 [0188.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818e70 [0188.556] wcscpy (in: _Dest=0x6818e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0188.556] wcscat (in: _Dest=0x6818e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0188.556] wcscat (in: _Dest=0x6818e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*" [0188.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0188.556] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0189.726] wcscmp (_String1=".", _String2=".") returned 0 [0189.726] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.726] wcscmp (_String1="..", _String2=".") returned 1 [0189.727] wcscmp (_String1="..", _String2="..") returned 0 [0189.727] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.727] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.727] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf400 [0189.727] wcscpy (in: _Dest=0x3daf400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0189.727] wcscat (in: _Dest=0x3daf400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0189.727] wcscat (in: _Dest=0x3daf400, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" [0190.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0190.115] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.115] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0190.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0190.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e70) returned 1 [0190.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e48) returned 1 Thread: id = 6227 os_tid = 0x20c4 [0188.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818c60 [0188.557] wcscpy (in: _Dest=0x6818c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0188.557] wcscat (in: _Dest=0x6818c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0188.557] wcscat (in: _Dest=0x6818c60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*" [0188.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334410 [0188.557] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a60 [0189.727] wcscmp (_String1=".", _String2=".") returned 0 [0189.727] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.727] wcscmp (_String1="..", _String2=".") returned 1 [0189.727] wcscmp (_String1="..", _String2="..") returned 0 [0189.727] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.727] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.727] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf528 [0189.728] wcscpy (in: _Dest=0x3daf528, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0189.728] wcscat (in: _Dest=0x3daf528, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0189.728] wcscat (in: _Dest=0x3daf528, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" [0190.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0190.118] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x334410 | out: lpFindFileData=0x334410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.118] FindClose (in: hFindFile=0x66d2a60 | out: hFindFile=0x66d2a60) returned 1 [0190.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334410) returned 1 [0190.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c60) returned 1 [0190.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44378) returned 1 Thread: id = 6228 os_tid = 0x20c8 [0188.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818000 [0188.558] wcscpy (in: _Dest=0x6818000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0188.558] wcscat (in: _Dest=0x6818000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0188.558] wcscat (in: _Dest=0x6818000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*" [0188.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2bb0 [0188.558] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2aa0 [0189.728] wcscmp (_String1=".", _String2=".") returned 0 [0189.728] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.728] wcscmp (_String1="..", _String2=".") returned 1 [0189.728] wcscmp (_String1="..", _String2="..") returned 0 [0189.728] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.728] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.728] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf650 [0189.728] wcscpy (in: _Dest=0x3daf650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0189.728] wcscat (in: _Dest=0x3daf650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0189.728] wcscat (in: _Dest=0x3daf650, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" [0190.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0190.121] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c2bb0 | out: lpFindFileData=0x66c2bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.121] FindClose (in: hFindFile=0x66d2aa0 | out: hFindFile=0x66d2aa0) returned 1 [0190.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bb0) returned 1 [0190.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818000) returned 1 [0190.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44480) returned 1 Thread: id = 6229 os_tid = 0x20cc [0188.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818108 [0188.559] wcscpy (in: _Dest=0x6818108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0188.559] wcscat (in: _Dest=0x6818108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0188.559] wcscat (in: _Dest=0x6818108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*" [0188.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0c68 [0188.559] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ae0 [0189.729] wcscmp (_String1=".", _String2=".") returned 0 [0189.729] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.729] wcscmp (_String1="..", _String2=".") returned 1 [0189.729] wcscmp (_String1="..", _String2="..") returned 0 [0189.729] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.729] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.729] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf778 [0189.729] wcscpy (in: _Dest=0x3daf778, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0189.729] wcscat (in: _Dest=0x3daf778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0189.729] wcscat (in: _Dest=0x3daf778, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" [0190.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0190.123] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c0c68 | out: lpFindFileData=0x66c0c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.123] FindClose (in: hFindFile=0x66d2ae0 | out: hFindFile=0x66d2ae0) returned 1 [0190.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c68) returned 1 [0190.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818108) returned 1 [0190.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44588) returned 1 Thread: id = 6230 os_tid = 0x20d0 [0188.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ce8 [0188.560] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0188.560] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0188.560] wcscat (in: _Dest=0x6817ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*" [0188.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0ed0 [0188.560] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b20 [0189.729] wcscmp (_String1=".", _String2=".") returned 0 [0189.729] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.729] wcscmp (_String1="..", _String2=".") returned 1 [0189.730] wcscmp (_String1="..", _String2="..") returned 0 [0189.730] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.730] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.730] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3daf8a0 [0189.730] wcscpy (in: _Dest=0x3daf8a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0189.730] wcscat (in: _Dest=0x3daf8a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0189.730] wcscat (in: _Dest=0x3daf8a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" [0190.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0190.126] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66c0ed0 | out: lpFindFileData=0x66c0ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.126] FindClose (in: hFindFile=0x66d2b20 | out: hFindFile=0x66d2b20) returned 1 [0190.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0ed0) returned 1 [0190.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 [0190.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 6231 os_tid = 0x20d4 [0188.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750bd0 [0188.561] wcscpy (in: _Dest=0x6750bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0188.561] wcscat (in: _Dest=0x6750bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0188.561] wcscat (in: _Dest=0x6750bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*" [0188.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1fa8 [0188.561] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b60 [0189.730] wcscmp (_String1=".", _String2=".") returned 0 [0189.730] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.730] wcscmp (_String1="..", _String2=".") returned 1 [0189.730] wcscmp (_String1="..", _String2="..") returned 0 [0189.730] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.730] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.730] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3daf9c8 [0189.730] wcscpy (in: _Dest=0x3daf9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0189.730] wcscat (in: _Dest=0x3daf9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0189.731] wcscat (in: _Dest=0x3daf9c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" [0190.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3daf9c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0190.139] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c1fa8 | out: lpFindFileData=0x66c1fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.139] FindClose (in: hFindFile=0x66d2b60 | out: hFindFile=0x66d2b60) returned 1 [0190.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fa8) returned 1 [0190.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0190.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44798) returned 1 Thread: id = 6232 os_tid = 0x20d8 [0188.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67522c8 [0188.562] wcscpy (in: _Dest=0x67522c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0188.562] wcscat (in: _Dest=0x67522c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0188.562] wcscat (in: _Dest=0x67522c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*" [0188.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c3550 [0188.562] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2960 [0189.020] wcscmp (_String1=".", _String2=".") returned 0 [0189.020] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.020] wcscmp (_String1="..", _String2=".") returned 1 [0189.020] wcscmp (_String1="..", _String2="..") returned 0 [0189.020] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.020] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.020] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x675a678 [0189.020] wcscpy (in: _Dest=0x675a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0189.020] wcscat (in: _Dest=0x675a678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0189.020] wcscat (in: _Dest=0x675a678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" [0189.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0189.891] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c3550 | out: lpFindFileData=0x66c3550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.891] FindClose (in: hFindFile=0x66d2960 | out: hFindFile=0x66d2960) returned 1 [0189.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3550) returned 1 [0189.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0189.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae840) returned 1 Thread: id = 6233 os_tid = 0x20dc [0188.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817df0 [0188.563] wcscpy (in: _Dest=0x6817df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0188.563] wcscat (in: _Dest=0x6817df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0188.563] wcscat (in: _Dest=0x6817df0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*" [0188.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0060 [0188.563] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29a0 [0189.021] wcscmp (_String1=".", _String2=".") returned 0 [0189.021] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.021] wcscmp (_String1="..", _String2=".") returned 1 [0189.021] wcscmp (_String1="..", _String2="..") returned 0 [0189.021] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.021] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.021] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a7a0 [0189.021] wcscpy (in: _Dest=0x675a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0189.021] wcscat (in: _Dest=0x675a7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0189.021] wcscat (in: _Dest=0x675a7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" [0189.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0189.893] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c0060 | out: lpFindFileData=0x66c0060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.894] FindClose (in: hFindFile=0x66d29a0 | out: hFindFile=0x66d29a0) returned 1 [0189.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0060) returned 1 [0189.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817df0) returned 1 [0189.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae528) returned 1 Thread: id = 6234 os_tid = 0x20e0 [0189.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d451e8 [0189.024] wcscpy (in: _Dest=0x3d451e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0189.024] wcscat (in: _Dest=0x3d451e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0189.024] wcscat (in: _Dest=0x3d451e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*" [0189.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0189.024] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0189.024] wcscmp (_String1=".", _String2=".") returned 0 [0189.024] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.025] wcscmp (_String1="..", _String2=".") returned 1 [0189.025] wcscmp (_String1="..", _String2="..") returned 0 [0189.025] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.025] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.025] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a8c8 [0189.025] wcscpy (in: _Dest=0x675a8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0189.025] wcscat (in: _Dest=0x675a8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0189.025] wcscat (in: _Dest=0x675a8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" [0189.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0189.895] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0189.896] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0189.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0189.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451e8) returned 1 [0189.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae420) returned 1 Thread: id = 6235 os_tid = 0x20e4 [0189.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0189.025] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.026] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d0 [0189.026] GetFileSizeEx (in: hFile=0x16d0, lpFileSize=0xb9bf7bc | out: lpFileSize=0xb9bf7bc*=263) returned 1 [0189.026] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.026] ReadFile (in: hFile=0x16d0, lpBuffer=0xb9bf798, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb9bf7a8, lpOverlapped=0x0 | out: lpBuffer=0xb9bf798*, lpNumberOfBytesRead=0xb9bf7a8*=0x4, lpOverlapped=0x0) returned 1 [0189.028] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0189.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0189.029] NtQuerySystemTime (in: CurrentTime=0xb9bf730 | out: CurrentTime=0xb9bf730*=132482710975044000) returned 0x0 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x2dcd68f6 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x180a88ac [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x584a8d89 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x47a7ec45 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x55904f3a [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x287dd55e [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x32966fbe [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6767d88c [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6aeb3aca [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x47c75756 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x5f915eb0 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x12a5cb70 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6f96dd95 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6b3eade7 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6711f279 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x1b14581a [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x19f9cc46 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x5285dd55 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x7997d449 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x2e5a368a [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x51a41fde [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x77edf8a8 [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x2f7b4aae [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x1888a2ea [0189.029] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x4cd4f137 [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x16812763 [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6bc1db04 [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x4db813b8 [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x41fd1681 [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x73fbdbad [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x6d665d2e [0189.030] RtlRandomEx (in: Seed=0xb9bf728 | out: Seed=0xb9bf728) returned 0x281f4144 [0189.038] ReadFile (in: hFile=0x16d0, lpBuffer=0x6730308, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xb9bf724, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0xb9bf724*=0x107, lpOverlapped=0x0) returned 1 [0189.038] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.038] WriteFile (in: hFile=0x16d0, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xb9bf728, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xb9bf728*=0x107, lpOverlapped=0x0) returned 1 [0191.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0191.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe798) returned 1 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cf0 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fe798 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d8c8 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ab0 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0191.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe798) returned 1 [0191.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6750ab8 [0191.133] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.133] WriteFile (in: hFile=0x16d0, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb9bf7b0, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0xb9bf7b0*=0x10c, lpOverlapped=0x0) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0192.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0192.248] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" [0192.248] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.ac3a86" [0192.248] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xb9bf728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x352258 [0192.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x352258) returned 1 [0192.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688fe48) returned 1 [0192.320] NtQueryInformationFile (in: FileHandle=0x16d0, IoStatusBlock=0xb9bf700, FileInformation=0xb9bf708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb9bf700, FileInformation=0xb9bf708) returned 0x0 [0192.320] NtSetInformationFile (FileHandle=0x16d0, IoStatusBlock=0xb9bf700, FileInformation=0xb9bf708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41038) returned 1 [0192.375] FlushFileBuffers (hFile=0x16d0) returned 1 [0192.389] CloseHandle (hObject=0x16d0) returned 1 [0192.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e678 [0192.479] wcscpy (in: _Dest=0x674e678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0192.479] wcscat (in: _Dest=0x674e678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\AC3A86-Readme.txt" [0192.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0192.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.571] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb9bf744, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb9bf744*=0x8b9, lpOverlapped=0x0) returned 1 [0192.573] CloseHandle (hObject=0x2304) returned 1 [0192.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e678) returned 1 [0192.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56180) returned 1 Thread: id = 6236 os_tid = 0x20e8 [0189.043] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0189.043] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.044] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1504 [0189.044] GetFileSizeEx (in: hFile=0x1504, lpFileSize=0x3fff7cc | out: lpFileSize=0x3fff7cc*=345) returned 1 [0189.044] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.044] ReadFile (in: hFile=0x1504, lpBuffer=0x3fff7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3fff7b8, lpOverlapped=0x0 | out: lpBuffer=0x3fff7a8*, lpNumberOfBytesRead=0x3fff7b8*=0x4, lpOverlapped=0x0) returned 1 [0189.046] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0189.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0189.046] NtQuerySystemTime (in: CurrentTime=0x3fff740 | out: CurrentTime=0x3fff740*=132482710975200000) returned 0x0 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x34ee4c60 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x77c511c4 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x1b3bde11 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x1d09b014 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x100e3493 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x3d814e5a [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x492eb9cb [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x27fd3285 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x38df383 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x3c04e4a3 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x5b17b9c7 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x42e3e6bc [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x9079e5f [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x156a813b [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x78047161 [0189.046] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x41c39ae9 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x4e60f793 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x3296f134 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x1a31e5e9 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x174050de [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x25e9c2b2 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x29a174af [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x2b43c3a0 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x7897cae4 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x1de2ff79 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x4a6fd238 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x9e78d1d [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x54a07532 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x79aa6df8 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x29914fc5 [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x1bd365fd [0189.047] RtlRandomEx (in: Seed=0x3fff738 | out: Seed=0x3fff738) returned 0x5157428e [0189.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0189.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6719ad8 [0189.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670e6c0 [0189.073] ReadFile (in: hFile=0x1504, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0x3fff734, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0x3fff734*=0x159, lpOverlapped=0x0) returned 1 [0189.073] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.073] WriteFile (in: hFile=0x1504, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x3fff738, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0x3fff738*=0x159, lpOverlapped=0x0) returned 1 [0191.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0191.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0191.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff098) returned 1 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66ff098 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1da30 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0191.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5960 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0191.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0191.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0191.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff098) returned 1 [0191.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6750e00 [0191.136] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.136] WriteFile (in: hFile=0x1504, lpBuffer=0x6750e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3fff7c0, lpOverlapped=0x0 | out: lpBuffer=0x6750e00*, lpNumberOfBytesWritten=0x3fff7c0*=0x10c, lpOverlapped=0x0) returned 1 [0191.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0191.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0191.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40c90 [0191.759] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" [0191.759] wcscat (in: _Dest=0x3d40c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.ac3a86" [0191.759] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0x3fff738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x34cc08 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34cc08) returned 1 [0192.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6896a18) returned 1 [0192.235] NtQueryInformationFile (in: FileHandle=0x1504, IoStatusBlock=0x3fff710, FileInformation=0x3fff718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3fff710, FileInformation=0x3fff718) returned 0x0 [0192.235] NtSetInformationFile (FileHandle=0x1504, IoStatusBlock=0x3fff710, FileInformation=0x3fff718, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c90) returned 1 [0192.312] FlushFileBuffers (hFile=0x1504) returned 1 [0192.315] CloseHandle (hObject=0x1504) returned 1 [0192.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e300 [0192.366] wcscpy (in: _Dest=0x674e300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0192.366] wcscat (in: _Dest=0x674e300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\AC3A86-Readme.txt" [0192.366] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0192.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.559] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3fff754, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x3fff754*=0x8b9, lpOverlapped=0x0) returned 1 [0192.561] CloseHandle (hObject=0x2304) returned 1 [0192.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e300) returned 1 [0192.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d562a8) returned 1 Thread: id = 6237 os_tid = 0x20ec [0189.074] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json")) returned 0x2020 [0189.075] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0189.075] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdd0 [0189.075] GetFileSizeEx (in: hFile=0xdd0, lpFileSize=0xc96fc4c | out: lpFileSize=0xc96fc4c*=278) returned 1 [0189.075] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.075] ReadFile (in: hFile=0xdd0, lpBuffer=0xc96fc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc96fc38, lpOverlapped=0x0 | out: lpBuffer=0xc96fc28*, lpNumberOfBytesRead=0xc96fc38*=0x4, lpOverlapped=0x0) returned 1 [0189.077] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0189.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0189.077] NtQuerySystemTime (in: CurrentTime=0xc96fbc0 | out: CurrentTime=0xc96fbc0*=132482710975512000) returned 0x0 [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5d7a5024 [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5e874de5 [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5d42faa9 [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x59f6d9a4 [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5c6b786f [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x75164e7f [0189.077] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x7bda6da3 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x7187e9 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x4004e08d [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x6c0873f4 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x75e1e462 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5ac8b8e7 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x46648b4c [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x4aa44a3c [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x7fa835d0 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x5a033921 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x1424bfeb [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x4f4263a8 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x758df348 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x7e82e99a [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x6bc1e6ab [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x593b7e25 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x446e7ac5 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x3c929f0c [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0xea476f3 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x19db75c6 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x60fe6924 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x4d6668a4 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x4f87126d [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x323361a9 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x73729ba0 [0189.078] RtlRandomEx (in: Seed=0xc96fbb8 | out: Seed=0xc96fbb8) returned 0x75519e57 [0189.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0189.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6724ef0 [0189.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6742f30 [0189.086] ReadFile (in: hFile=0xdd0, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xc96fbb4, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xc96fbb4*=0x116, lpOverlapped=0x0) returned 1 [0189.086] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.087] WriteFile (in: hFile=0xdd0, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xc96fbb8, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0xc96fbb8*=0x116, lpOverlapped=0x0) returned 1 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fec18) returned 1 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c00 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66fec18 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1daa8 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0191.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0191.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0191.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fec18) returned 1 [0191.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6750bd0 [0191.135] SetFilePointerEx (in: hFile=0xdd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.135] WriteFile (in: hFile=0xdd0, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc96fc40, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0xc96fc40*=0x10c, lpOverlapped=0x0) returned 1 [0192.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0192.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0192.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0192.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0192.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41170 [0192.251] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" [0192.251] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.ac3a86" [0192.251] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xc96fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x2d9a78 [0192.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9a78) returned 1 [0192.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a3b8) returned 1 [0192.325] NtQueryInformationFile (in: FileHandle=0xdd0, IoStatusBlock=0xc96fb90, FileInformation=0xc96fb98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc96fb90, FileInformation=0xc96fb98) returned 0x0 [0192.325] NtSetInformationFile (FileHandle=0xdd0, IoStatusBlock=0xc96fb90, FileInformation=0xc96fb98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41170) returned 1 [0192.380] FlushFileBuffers (hFile=0xdd0) returned 1 [0192.394] CloseHandle (hObject=0xdd0) returned 1 [0192.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e7a0 [0192.480] wcscpy (in: _Dest=0x674e7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0192.480] wcscat (in: _Dest=0x674e7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\AC3A86-Readme.txt" [0192.480] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0192.480] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15cc [0192.511] WriteFile (in: hFile=0x15cc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc96fbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc96fbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0192.520] CloseHandle (hObject=0x15cc) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e7a0) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 Thread: id = 6238 os_tid = 0x20f0 [0189.088] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0189.738] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.626] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f04 [0194.626] GetFileSizeEx (in: hFile=0x1f04, lpFileSize=0xb02fbb4 | out: lpFileSize=0xb02fbb4*=252) returned 1 [0194.626] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.626] ReadFile (in: hFile=0x1f04, lpBuffer=0xb02fb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb02fba0, lpOverlapped=0x0 | out: lpBuffer=0xb02fb90*, lpNumberOfBytesRead=0xb02fba0*=0x4, lpOverlapped=0x0) returned 1 [0194.628] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0194.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0194.628] NtQuerySystemTime (in: CurrentTime=0xb02fb28 | out: CurrentTime=0xb02fb28*=132482711031048000) returned 0x0 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x5bd0c7d2 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x77faadcb [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x618b04d3 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x5a22fab7 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x5cec0fe [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x4a99e2a2 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x21cba53 [0194.628] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x50c0b55a [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x1eb72024 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x7ea2697e [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x2f61f576 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x155442a1 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x7c84be61 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x7411a86c [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x3ac0354f [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x789334a4 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x225edfd7 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x5ac11f42 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x3dcca84f [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x126fa790 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x1e8c4764 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x77f0bf92 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x5b437c8c [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x714f027f [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x4da92f9c [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x72cea454 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x6ac2d9c0 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x7aafbfaf [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x67ff2dd6 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0xb26d418 [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x4da92f9c [0194.629] RtlRandomEx (in: Seed=0xb02fb20 | out: Seed=0xb02fb20) returned 0x6692526d [0194.638] ReadFile (in: hFile=0x1f04, lpBuffer=0x1304b478, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xb02fb1c, lpOverlapped=0x0 | out: lpBuffer=0x1304b478*, lpNumberOfBytesRead=0xb02fb1c*=0xfc, lpOverlapped=0x0) returned 1 [0194.638] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.639] WriteFile (in: hFile=0x1f04, lpBuffer=0x1304f080*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xb02fb20, lpOverlapped=0x0 | out: lpBuffer=0x1304f080*, lpNumberOfBytesWritten=0xb02fb20*=0xfc, lpOverlapped=0x0) returned 1 [0197.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0197.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0197.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0197.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1304f080) returned 1 [0197.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1304b478) returned 1 [0197.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28718) returned 1 [0197.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd38e8) returned 1 [0197.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86108 [0197.353] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.353] WriteFile (in: hFile=0x1f04, lpBuffer=0x69c32c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb02fba8, lpOverlapped=0x0 | out: lpBuffer=0x69c32c8*, lpNumberOfBytesWritten=0xb02fba8*=0x10c, lpOverlapped=0x0) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32c8) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86138) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86108) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0197.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0197.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6774450 [0197.643] wcscpy (in: _Dest=0x6774450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" [0197.643] wcscat (in: _Dest=0x6774450, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.ac3a86" [0197.644] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xb02fb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a1c8 [0198.010] FlushFileBuffers (hFile=0x1f04) returned 1 [0198.024] CloseHandle (hObject=0x1f04) returned 1 [0198.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a7a0 [0198.133] wcscpy (in: _Dest=0x676a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0198.133] wcscat (in: _Dest=0x676a7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\AC3A86-Readme.txt" [0198.133] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0198.133] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1608 [0199.117] WriteFile (in: hFile=0x1608, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb02fb3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb02fb3c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.962] CloseHandle (hObject=0x1608) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a7a0) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041e10) returned 1 Thread: id = 6239 os_tid = 0x20f4 [0189.095] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0189.095] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x150c [0189.096] GetFileSizeEx (in: hFile=0x150c, lpFileSize=0xc55f934 | out: lpFileSize=0xc55f934*=260) returned 1 [0189.096] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.096] ReadFile (in: hFile=0x150c, lpBuffer=0xc55f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc55f920, lpOverlapped=0x0 | out: lpBuffer=0xc55f910*, lpNumberOfBytesRead=0xc55f920*=0x4, lpOverlapped=0x0) returned 1 [0189.098] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0189.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0189.098] NtQuerySystemTime (in: CurrentTime=0xc55f8a8 | out: CurrentTime=0xc55f8a8*=132482710975824000) returned 0x0 [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0xcde0e9b [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x5a7c859c [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x403d507b [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x7bb3330f [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x700b14cb [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x236cae11 [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x4e92f9e0 [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x18144770 [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x32ab2d2f [0189.098] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0xb22d3f6 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x361df0cf [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x4bf9c682 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x39d1211d [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x594b76a4 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x32b95ace [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x2682146c [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x67f60cb1 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x28700a95 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x776acc10 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x409cb2f [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x8451200 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x6c3dda33 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x30327264 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x72044442 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x5991e51 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x4c77c87c [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x62a73fa [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x3057b1e1 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x71630a14 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x7d0f34a1 [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x4799c1ad [0189.099] RtlRandomEx (in: Seed=0xc55f8a0 | out: Seed=0xc55f8a0) returned 0x114483e3 [0189.108] ReadFile (in: hFile=0x150c, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xc55f89c, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0xc55f89c*=0x104, lpOverlapped=0x0) returned 1 [0189.108] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.108] WriteFile (in: hFile=0x150c, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xc55f8a0, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0xc55f8a0*=0x104, lpOverlapped=0x0) returned 1 [0189.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0189.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0189.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0189.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0189.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0189.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0189.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff440) returned 1 [0189.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0189.739] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.739] WriteFile (in: hFile=0x150c, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc55f928, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0xc55f928*=0x10c, lpOverlapped=0x0) returned 1 [0191.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0191.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0191.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40408 [0191.714] wcscpy (in: _Dest=0x3d40408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" [0191.714] wcscat (in: _Dest=0x3d40408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.ac3a86" [0191.714] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0xc55f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3e4d458 [0192.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d458) returned 1 [0192.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688ef30) returned 1 [0192.154] NtQueryInformationFile (in: FileHandle=0x150c, IoStatusBlock=0xc55f878, FileInformation=0xc55f880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc55f878, FileInformation=0xc55f880) returned 0x0 [0192.154] NtSetInformationFile (FileHandle=0x150c, IoStatusBlock=0xc55f878, FileInformation=0xc55f880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40408) returned 1 [0192.304] FlushFileBuffers (hFile=0x150c) returned 1 [0192.307] CloseHandle (hObject=0x150c) returned 1 [0192.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40c90 [0192.361] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0192.361] wcscat (in: _Dest=0x3d40c90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\AC3A86-Readme.txt" [0192.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0192.361] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.556] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc55f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc55f8bc*=0x8b9, lpOverlapped=0x0) returned 1 [0192.558] CloseHandle (hObject=0x2304) returned 1 [0192.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c90) returned 1 [0192.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 Thread: id = 6240 os_tid = 0x2100 [0189.111] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0189.112] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.112] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef4 [0189.112] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0xc18f8c4 | out: lpFileSize=0xc18f8c4*=257) returned 1 [0189.112] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.112] ReadFile (in: hFile=0xef4, lpBuffer=0xc18f8a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc18f8b0, lpOverlapped=0x0 | out: lpBuffer=0xc18f8a0*, lpNumberOfBytesRead=0xc18f8b0*=0x4, lpOverlapped=0x0) returned 1 [0189.114] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0189.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0189.114] NtQuerySystemTime (in: CurrentTime=0xc18f838 | out: CurrentTime=0xc18f838*=132482710975980000) returned 0x0 [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x1103d82f [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x5a21b264 [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x5359badf [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x38b1a82f [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x6da4744e [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x7fd8cb05 [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x33500d09 [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x7730618f [0189.114] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x7b4c6b40 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x10808bb5 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x6b5d303a [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x6aeaede1 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x2c86b48c [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x7bb05714 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x4ada9026 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x51978236 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x70c03f3c [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x645f151a [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x6880b40e [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x1d0cfba0 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x2f7f0a71 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x49f42b79 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x6f4babb1 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x388bdd19 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x759c744f [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x19d57deb [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x32570185 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x35bf1194 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x26f356b9 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x233e9abf [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x61f10e73 [0189.115] RtlRandomEx (in: Seed=0xc18f830 | out: Seed=0xc18f830) returned 0x3822c6e [0189.123] ReadFile (in: hFile=0xef4, lpBuffer=0x67212e8, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xc18f82c, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0xc18f82c*=0x101, lpOverlapped=0x0) returned 1 [0189.123] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.124] WriteFile (in: hFile=0xef4, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xc18f830, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xc18f830*=0x101, lpOverlapped=0x0) returned 1 [0189.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0189.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5a8 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5a8) returned 1 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe708) returned 1 [0189.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a20 [0189.740] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.740] WriteFile (in: hFile=0xef4, lpBuffer=0x69c3610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc18f8b8, lpOverlapped=0x0 | out: lpBuffer=0x69c3610*, lpNumberOfBytesWritten=0xc18f8b8*=0x10c, lpOverlapped=0x0) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3610) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5a8) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0191.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0191.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0191.718] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" [0191.718] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.ac3a86" [0191.718] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0xc18f830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x354340 [0192.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354340) returned 1 [0192.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6897708) returned 1 [0192.355] NtQueryInformationFile (in: FileHandle=0xef4, IoStatusBlock=0xc18f808, FileInformation=0xc18f810, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc18f808, FileInformation=0xc18f810) returned 0x0 [0192.356] NtSetInformationFile (FileHandle=0xef4, IoStatusBlock=0xc18f808, FileInformation=0xc18f810, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0192.456] FlushFileBuffers (hFile=0xef4) returned 1 [0192.467] CloseHandle (hObject=0xef4) returned 1 [0192.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676aab8 [0192.505] wcscpy (in: _Dest=0x676aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0192.505] wcscat (in: _Dest=0x676aab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\AC3A86-Readme.txt" [0192.505] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0192.506] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.518] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc18f84c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc18f84c*=0x8b9, lpOverlapped=0x0) returned 1 [0192.546] CloseHandle (hObject=0x2304) returned 1 [0192.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676aab8) returned 1 [0192.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 Thread: id = 6241 os_tid = 0x2218 [0189.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67521b0 [0189.125] wcscpy (in: _Dest=0x67521b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0189.125] wcscat (in: _Dest=0x67521b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0189.125] wcscat (in: _Dest=0x67521b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*" [0189.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0189.125] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0191.764] wcscmp (_String1=".", _String2=".") returned 0 [0191.764] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.764] wcscmp (_String1="..", _String2=".") returned 1 [0191.764] wcscmp (_String1="..", _String2="..") returned 0 [0191.764] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.764] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.765] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6765d38 [0191.765] wcscpy (in: _Dest=0x6765d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0191.765] wcscat (in: _Dest=0x6765d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0191.765] wcscat (in: _Dest=0x6765d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" [0192.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0192.780] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.780] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0192.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0192.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0192.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc410) returned 1 Thread: id = 6242 os_tid = 0x221c [0189.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752728 [0189.126] wcscpy (in: _Dest=0x6752728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0189.126] wcscat (in: _Dest=0x6752728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0189.126] wcscat (in: _Dest=0x6752728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*" [0189.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0189.126] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ea0 [0192.164] wcscmp (_String1=".", _String2=".") returned 0 [0192.164] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.164] wcscmp (_String1="..", _String2=".") returned 1 [0192.164] wcscmp (_String1="..", _String2="..") returned 0 [0192.164] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.164] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.164] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674e0b0 [0192.164] wcscpy (in: _Dest=0x674e0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0192.164] wcscat (in: _Dest=0x674e0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0192.164] wcscat (in: _Dest=0x674e0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" [0194.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0194.892] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.892] FindClose (in: hFindFile=0x66d2ea0 | out: hFindFile=0x66d2ea0) returned 1 [0194.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0194.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 [0194.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ab0) returned 1 Thread: id = 6243 os_tid = 0x2220 [0189.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752840 [0189.126] wcscpy (in: _Dest=0x6752840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0189.126] wcscat (in: _Dest=0x6752840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0189.126] wcscat (in: _Dest=0x6752840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*" [0189.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0189.126] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e60 [0192.163] wcscmp (_String1=".", _String2=".") returned 0 [0192.163] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.163] wcscmp (_String1="..", _String2=".") returned 1 [0192.163] wcscmp (_String1="..", _String2="..") returned 0 [0192.163] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.163] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.163] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674df88 [0192.163] wcscpy (in: _Dest=0x674df88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0192.163] wcscat (in: _Dest=0x674df88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0192.163] wcscat (in: _Dest=0x674df88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" [0194.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0194.890] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.890] FindClose (in: hFindFile=0x66d2e60 | out: hFindFile=0x66d2e60) returned 1 [0194.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0194.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0194.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44bb8) returned 1 Thread: id = 6244 os_tid = 0x2224 [0189.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752958 [0189.127] wcscpy (in: _Dest=0x6752958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0189.127] wcscat (in: _Dest=0x6752958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0189.127] wcscat (in: _Dest=0x6752958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*" [0189.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0189.127] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e20 [0192.162] wcscmp (_String1=".", _String2=".") returned 0 [0192.162] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.162] wcscmp (_String1="..", _String2=".") returned 1 [0192.162] wcscmp (_String1="..", _String2="..") returned 0 [0192.162] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.162] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.163] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674de60 [0192.163] wcscpy (in: _Dest=0x674de60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0192.163] wcscat (in: _Dest=0x674de60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0192.163] wcscat (in: _Dest=0x674de60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" [0194.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0194.888] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.888] FindClose (in: hFindFile=0x66d2e20 | out: hFindFile=0x66d2e20) returned 1 [0194.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0194.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0194.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 6245 os_tid = 0x2228 [0189.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcce0 [0189.127] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0189.127] wcscat (in: _Dest=0x30bcce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0189.127] wcscat (in: _Dest=0x30bcce0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*" [0189.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2210 [0189.127] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2de0 [0192.162] wcscmp (_String1=".", _String2=".") returned 0 [0192.162] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.162] wcscmp (_String1="..", _String2=".") returned 1 [0192.162] wcscmp (_String1="..", _String2="..") returned 0 [0192.162] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.162] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.162] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674dd38 [0192.162] wcscpy (in: _Dest=0x674dd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0192.162] wcscat (in: _Dest=0x674dd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0192.162] wcscat (in: _Dest=0x674dd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" [0194.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0194.886] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c2210 | out: lpFindFileData=0x66c2210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.887] FindClose (in: hFindFile=0x66d2de0 | out: hFindFile=0x66d2de0) returned 1 [0194.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2210) returned 1 [0194.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0194.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 Thread: id = 6246 os_tid = 0x222c [0189.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bc650 [0189.128] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0189.128] wcscat (in: _Dest=0x30bc650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0189.128] wcscat (in: _Dest=0x30bc650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*" [0189.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c32e8 [0189.128] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2da0 [0192.161] wcscmp (_String1=".", _String2=".") returned 0 [0192.161] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.161] wcscmp (_String1="..", _String2=".") returned 1 [0192.161] wcscmp (_String1="..", _String2="..") returned 0 [0192.161] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.161] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.161] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674dc10 [0192.161] wcscpy (in: _Dest=0x674dc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0192.161] wcscat (in: _Dest=0x674dc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0192.161] wcscat (in: _Dest=0x674dc10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" [0194.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0194.885] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c32e8 | out: lpFindFileData=0x66c32e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.885] FindClose (in: hFindFile=0x66d2da0 | out: hFindFile=0x66d2da0) returned 1 [0194.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32e8) returned 1 [0194.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0194.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 Thread: id = 6247 os_tid = 0x2230 [0189.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc420 [0189.128] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0189.128] wcscat (in: _Dest=0x30bc420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0189.128] wcscat (in: _Dest=0x30bc420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*" [0189.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c1d40 [0189.129] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d60 [0192.160] wcscmp (_String1=".", _String2=".") returned 0 [0192.160] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.161] wcscmp (_String1="..", _String2=".") returned 1 [0192.161] wcscmp (_String1="..", _String2="..") returned 0 [0192.161] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.161] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.161] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674dae8 [0192.161] wcscpy (in: _Dest=0x674dae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0192.161] wcscat (in: _Dest=0x674dae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0192.161] wcscat (in: _Dest=0x674dae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" [0194.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674dae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0194.882] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c1d40 | out: lpFindFileData=0x66c1d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.883] FindClose (in: hFindFile=0x66d2d60 | out: hFindFile=0x66d2d60) returned 1 [0194.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d40) returned 1 [0194.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0194.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44dc8) returned 1 Thread: id = 6248 os_tid = 0x2234 [0189.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc768 [0189.129] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0189.129] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0189.129] wcscat (in: _Dest=0x30bc768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*" [0189.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c2478 [0189.129] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d20 [0192.160] wcscmp (_String1=".", _String2=".") returned 0 [0192.160] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.160] wcscmp (_String1="..", _String2=".") returned 1 [0192.160] wcscmp (_String1="..", _String2="..") returned 0 [0192.160] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.160] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.160] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d9c0 [0192.160] wcscpy (in: _Dest=0x674d9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0192.160] wcscat (in: _Dest=0x674d9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0192.160] wcscat (in: _Dest=0x674d9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" [0194.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0194.880] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c2478 | out: lpFindFileData=0x66c2478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.880] FindClose (in: hFindFile=0x66d2d20 | out: hFindFile=0x66d2d20) returned 1 [0194.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2478) returned 1 [0194.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0194.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ed0) returned 1 Thread: id = 6249 os_tid = 0x223c [0189.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb818 [0189.129] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0189.129] wcscat (in: _Dest=0x30bb818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0189.130] wcscat (in: _Dest=0x30bb818, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*" [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c0530 [0189.130] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ce0 [0192.159] wcscmp (_String1=".", _String2=".") returned 0 [0192.159] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.159] wcscmp (_String1="..", _String2=".") returned 1 [0192.159] wcscmp (_String1="..", _String2="..") returned 0 [0192.159] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.159] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.159] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d898 [0192.159] wcscpy (in: _Dest=0x674d898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0192.159] wcscat (in: _Dest=0x674d898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0192.159] wcscat (in: _Dest=0x674d898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" [0194.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0194.878] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c0530 | out: lpFindFileData=0x66c0530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.878] FindClose (in: hFindFile=0x66d2ce0 | out: hFindFile=0x66d2ce0) returned 1 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0530) returned 1 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0194.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44fd8) returned 1 Thread: id = 6250 os_tid = 0x2240 [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcab0 [0189.130] wcscpy (in: _Dest=0x30bcab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0189.130] wcscat (in: _Dest=0x30bcab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0189.130] wcscat (in: _Dest=0x30bcab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*" [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f124b0 [0189.130] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ca0 [0192.158] wcscmp (_String1=".", _String2=".") returned 0 [0192.158] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.159] wcscmp (_String1="..", _String2=".") returned 1 [0192.159] wcscmp (_String1="..", _String2="..") returned 0 [0192.159] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.159] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.159] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d770 [0192.159] wcscpy (in: _Dest=0x674d770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0192.159] wcscat (in: _Dest=0x674d770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0192.159] wcscat (in: _Dest=0x674d770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" [0194.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0194.876] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x3f124b0 | out: lpFindFileData=0x3f124b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.876] FindClose (in: hFindFile=0x66d2ca0 | out: hFindFile=0x66d2ca0) returned 1 [0194.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f124b0) returned 1 [0194.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 [0194.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818210) returned 1 Thread: id = 6251 os_tid = 0x2244 [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcdf8 [0189.131] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0189.131] wcscat (in: _Dest=0x30bcdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0189.131] wcscat (in: _Dest=0x30bcdf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*" [0189.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f11fe0 [0189.131] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0192.158] wcscmp (_String1=".", _String2=".") returned 0 [0192.158] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.158] wcscmp (_String1="..", _String2=".") returned 1 [0192.158] wcscmp (_String1="..", _String2="..") returned 0 [0192.158] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.158] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.158] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d648 [0192.158] wcscpy (in: _Dest=0x674d648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0192.158] wcscat (in: _Dest=0x674d648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0192.158] wcscat (in: _Dest=0x674d648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" [0194.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0194.874] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x3f11fe0 | out: lpFindFileData=0x3f11fe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.874] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0194.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f11fe0) returned 1 [0194.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0194.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818318) returned 1 Thread: id = 6252 os_tid = 0x2248 [0189.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc538 [0189.131] wcscpy (in: _Dest=0x30bc538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0189.131] wcscat (in: _Dest=0x30bc538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0189.131] wcscat (in: _Dest=0x30bc538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*" [0189.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f154d0 [0189.131] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0192.157] wcscmp (_String1=".", _String2=".") returned 0 [0192.157] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.157] wcscmp (_String1="..", _String2=".") returned 1 [0192.157] wcscmp (_String1="..", _String2="..") returned 0 [0192.157] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.157] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.157] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d520 [0192.157] wcscpy (in: _Dest=0x674d520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0192.157] wcscat (in: _Dest=0x674d520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0192.157] wcscat (in: _Dest=0x674d520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" [0194.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0194.872] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x3f154d0 | out: lpFindFileData=0x3f154d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.872] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0194.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f154d0) returned 1 [0194.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0194.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818420) returned 1 Thread: id = 6253 os_tid = 0x224c [0189.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcbc8 [0189.132] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0189.132] wcscat (in: _Dest=0x30bcbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0189.132] wcscat (in: _Dest=0x30bcbc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*" [0189.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13588 [0189.132] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0192.156] wcscmp (_String1=".", _String2=".") returned 0 [0192.156] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.156] wcscmp (_String1="..", _String2=".") returned 1 [0192.156] wcscmp (_String1="..", _String2="..") returned 0 [0192.156] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.156] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.156] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d3f8 [0192.156] wcscpy (in: _Dest=0x674d3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0192.156] wcscat (in: _Dest=0x674d3f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0192.156] wcscat (in: _Dest=0x674d3f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" [0194.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0194.870] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3f13588 | out: lpFindFileData=0x3f13588*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.870] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0194.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13588) returned 1 [0194.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0194.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818528) returned 1 Thread: id = 6254 os_tid = 0x23f0 [0189.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbd90 [0189.132] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0189.132] wcscat (in: _Dest=0x30bbd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0189.132] wcscat (in: _Dest=0x30bbd90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*" [0189.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14b30 [0189.132] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0192.155] wcscmp (_String1=".", _String2=".") returned 0 [0192.155] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.155] wcscmp (_String1="..", _String2=".") returned 1 [0192.155] wcscmp (_String1="..", _String2="..") returned 0 [0192.155] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.155] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.155] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d2d0 [0192.156] wcscpy (in: _Dest=0x674d2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0192.156] wcscat (in: _Dest=0x674d2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0192.156] wcscat (in: _Dest=0x674d2d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" [0194.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0194.868] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3f14b30 | out: lpFindFileData=0x3f14b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.868] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0194.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14b30) returned 1 [0194.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0194.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818630) returned 1 Thread: id = 6255 os_tid = 0x23f4 [0189.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bbb60 [0189.132] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0189.133] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0189.133] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*" [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f13320 [0189.133] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0192.154] wcscmp (_String1=".", _String2=".") returned 0 [0192.154] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.154] wcscmp (_String1="..", _String2=".") returned 1 [0192.155] wcscmp (_String1="..", _String2="..") returned 0 [0192.155] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.155] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.155] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d1a8 [0192.155] wcscpy (in: _Dest=0x674d1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0192.155] wcscat (in: _Dest=0x674d1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0192.155] wcscat (in: _Dest=0x674d1a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" [0194.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0194.866] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3f13320 | out: lpFindFileData=0x3f13320*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.866] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0194.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13320) returned 1 [0194.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0194.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818738) returned 1 Thread: id = 6256 os_tid = 0x23f8 [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd370 [0189.133] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0189.133] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0189.133] wcscat (in: _Dest=0x30bd370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*" [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15738 [0189.133] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0192.152] wcscmp (_String1=".", _String2=".") returned 0 [0192.152] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.152] wcscmp (_String1="..", _String2=".") returned 1 [0192.152] wcscmp (_String1="..", _String2="..") returned 0 [0192.152] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.152] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.152] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674d080 [0192.152] wcscpy (in: _Dest=0x674d080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0192.152] wcscat (in: _Dest=0x674d080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0192.152] wcscat (in: _Dest=0x674d080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" [0194.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674d080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0194.864] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3f15738 | out: lpFindFileData=0x3f15738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.864] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0194.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15738) returned 1 [0194.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0194.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ef8) returned 1 Thread: id = 6257 os_tid = 0x23fc [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bc880 [0189.133] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0189.133] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0189.133] wcscat (in: _Dest=0x30bc880, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*" [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f14d98 [0189.134] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0192.151] wcscmp (_String1=".", _String2=".") returned 0 [0192.151] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.151] wcscmp (_String1="..", _String2=".") returned 1 [0192.151] wcscmp (_String1="..", _String2="..") returned 0 [0192.151] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0192.151] wcscmp (_String1="messages.json", _String2=".") returned 1 [0192.151] wcscmp (_String1="messages.json", _String2="..") returned 1 [0192.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674cf58 [0192.151] wcscpy (in: _Dest=0x674cf58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0192.151] wcscat (in: _Dest=0x674cf58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0192.151] wcscat (in: _Dest=0x674cf58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" [0194.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674cf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0194.862] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3f14d98 | out: lpFindFileData=0x3f14d98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.862] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0194.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f14d98) returned 1 [0194.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0194.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 Thread: id = 6258 os_tid = 0x226c [0189.137] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 0x2020 [0189.137] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", dwFileAttributes=0x20) returned 1 [0189.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd14 [0189.138] GetFileSizeEx (in: hFile=0xd14, lpFileSize=0xe77f834 | out: lpFileSize=0xe77f834*=259) returned 1 [0189.138] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.138] ReadFile (in: hFile=0xd14, lpBuffer=0xe77f810, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe77f820, lpOverlapped=0x0 | out: lpBuffer=0xe77f810*, lpNumberOfBytesRead=0xe77f820*=0x4, lpOverlapped=0x0) returned 1 [0189.140] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0189.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0189.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.140] NtQuerySystemTime (in: CurrentTime=0xe77f7a8 | out: CurrentTime=0xe77f7a8*=132482710976136000) returned 0x0 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x76dc3038 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x99e70be [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x10f2b60f [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x4f8dd2fb [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x58f5c524 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x59a12824 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x715083e1 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x378d1876 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x76ea66b8 [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x4d99e04a [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x4804773c [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x2efd253a [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x4d47d96d [0189.140] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x59209de4 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x23b0dc0a [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x15d752a4 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x5bc55119 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x7a337b3e [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x69e6edde [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x223373ff [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x58e0262e [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x66bc2f4f [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x4a427044 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x1f93e701 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x659f83ef [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x1854efb9 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x56f62d07 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x13033f34 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x1be8f9b9 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x50062564 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x316153 [0189.141] RtlRandomEx (in: Seed=0xe77f7a0 | out: Seed=0xe77f7a0) returned 0x660a093d [0189.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0189.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0189.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x670aab8 [0189.149] ReadFile (in: hFile=0xd14, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xe77f79c, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0xe77f79c*=0x103, lpOverlapped=0x0) returned 1 [0189.149] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.149] WriteFile (in: hFile=0xd14, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xe77f7a0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xe77f7a0*=0x103, lpOverlapped=0x0) returned 1 [0189.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca580 [0189.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca558 [0189.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca558) returned 1 [0189.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0189.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0189.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0189.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d60a8) returned 1 [0189.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0189.741] SetFilePointerEx (in: hFile=0xd14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.741] WriteFile (in: hFile=0xd14, lpBuffer=0x69c3728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe77f828, lpOverlapped=0x0 | out: lpBuffer=0x69c3728*, lpNumberOfBytesWritten=0xe77f828*=0x10c, lpOverlapped=0x0) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3728) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca558) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca580) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0191.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0191.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0191.719] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" [0191.719] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.ac3a86" [0191.719] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.ac3a86", NtPathName=0xe77f7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0191.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x323c88 [0192.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x323c88) returned 1 [0192.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688c1e8) returned 1 [0192.946] NtQueryInformationFile (in: FileHandle=0xd14, IoStatusBlock=0xe77f778, FileInformation=0xe77f780, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe77f778, FileInformation=0xe77f780) returned 0x0 [0192.946] NtSetInformationFile (FileHandle=0xd14, IoStatusBlock=0xe77f778, FileInformation=0xe77f780, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a20) returned 1 [0192.949] FlushFileBuffers (hFile=0xd14) returned 1 [0196.568] CloseHandle (hObject=0xd14) returned 1 [0197.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a0b0 [0197.577] wcscpy (in: _Dest=0x677a0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0197.577] wcscat (in: _Dest=0x677a0b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\AC3A86-Readme.txt" [0197.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ac3a86-readme.txt")) returned 0xffffffff [0197.577] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.225] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe77f7bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe77f7bc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.227] CloseHandle (hObject=0x237c) returned 1 [0198.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a0b0) returned 1 [0198.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54b88) returned 1 Thread: id = 6259 os_tid = 0x2270 [0189.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bd028 [0189.151] wcscpy (in: _Dest=0x30bd028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0189.152] wcscat (in: _Dest=0x30bd028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0189.152] wcscat (in: _Dest=0x30bd028, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*" [0189.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3f15000 [0189.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0190.885] wcscmp (_String1=".", _String2=".") returned 0 [0190.885] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.886] wcscmp (_String1="..", _String2=".") returned 1 [0190.886] wcscmp (_String1="..", _String2="..") returned 0 [0190.886] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0190.886] wcscmp (_String1="DEFAULT.XSL", _String2=".") returned 1 [0190.886] wcscmp (_String1="DEFAULT.XSL", _String2="..") returned 1 [0190.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6764e30 [0190.886] wcscpy (in: _Dest=0x6764e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0190.886] wcscat (in: _Dest=0x6764e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0190.886] wcscat (in: _Dest=0x6764e30, _Source="DEFAULT.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" [0191.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0191.585] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3f15000 | out: lpFindFileData=0x3f15000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0191.585] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0191.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f15000) returned 1 [0191.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0191.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 Thread: id = 6260 os_tid = 0x2274 [0189.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bcf10 [0189.153] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0189.153] wcscat (in: _Dest=0x30bcf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0189.153] wcscat (in: _Dest=0x30bcf10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*" [0189.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0189.153] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2920 [0190.669] wcscmp (_String1=".", _String2=".") returned 0 [0190.669] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.669] wcscmp (_String1="..", _String2=".") returned 1 [0190.669] wcscmp (_String1="..", _String2="..") returned 0 [0190.669] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1 [0190.669] wcscmp (_String1="Hierarchy.js", _String2=".") returned 1 [0190.669] wcscmp (_String1="Hierarchy.js", _String2="..") returned 1 [0190.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67648c8 [0190.669] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0190.669] wcscat (in: _Dest=0x67648c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0190.669] wcscat (in: _Dest=0x67648c8, _Source="Hierarchy.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" [0190.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67648c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0190.963] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1 [0190.963] wcscmp (_String1="Hierarchy.xsl", _String2=".") returned 1 [0190.963] wcscmp (_String1="Hierarchy.xsl", _String2="..") returned 1 [0190.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6764f58 [0190.963] wcscpy (in: _Dest=0x6764f58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0190.963] wcscat (in: _Dest=0x6764f58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0190.963] wcscat (in: _Dest=0x6764f58, _Source="Hierarchy.xsl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" [0190.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0190.964] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0190.965] wcscmp (_String1="MINUS.GIF", _String2=".") returned 1 [0190.965] wcscmp (_String1="MINUS.GIF", _String2="..") returned 1 [0190.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6765080 [0190.965] wcscpy (in: _Dest=0x6765080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0190.965] wcscat (in: _Dest=0x6765080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0190.965] wcscat (in: _Dest=0x6765080, _Source="MINUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" [0190.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0190.966] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0190.966] wcscmp (_String1="PLUS.GIF", _String2=".") returned 1 [0190.966] wcscmp (_String1="PLUS.GIF", _String2="..") returned 1 [0190.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x67651a8 [0190.966] wcscpy (in: _Dest=0x67651a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0190.966] wcscat (in: _Dest=0x67651a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0190.966] wcscat (in: _Dest=0x67651a8, _Source="PLUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" [0190.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67651a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0190.967] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0190.968] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0190.968] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0190.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67652d0 [0190.968] wcscpy (in: _Dest=0x67652d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0190.968] wcscat (in: _Dest=0x67652d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0190.968] wcscat (in: _Dest=0x67652d0, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" [0190.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67652d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0190.969] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0190.969] FindClose (in: hFindFile=0x66d2920 | out: hFindFile=0x66d2920) returned 1 [0190.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0190.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0190.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 Thread: id = 6261 os_tid = 0x2288 [0189.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml")) returned 0x20 [0189.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0189.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.155] GetLastError () returned 0x5 [0189.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0189.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 6262 os_tid = 0x2404 [0189.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml")) returned 0x20 [0189.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0189.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.156] GetLastError () returned 0x5 [0189.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0189.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 6263 os_tid = 0x2408 [0189.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml")) returned 0x20 [0189.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0189.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.158] GetLastError () returned 0x5 [0189.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0189.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 6264 os_tid = 0x240c [0189.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml")) returned 0x20 [0189.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0189.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.159] GetLastError () returned 0x5 [0189.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0189.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 6265 os_tid = 0x2328 [0189.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml")) returned 0x20 [0189.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0189.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.161] GetLastError () returned 0x5 [0189.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0189.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc168) returned 1 Thread: id = 6266 os_tid = 0x232c [0189.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 0x20 [0189.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0189.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.162] GetLastError () returned 0x5 [0189.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0189.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5d70) returned 1 Thread: id = 6267 os_tid = 0x2330 [0189.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e47578 [0189.164] wcscpy (in: _Dest=0x3e47578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0189.164] wcscat (in: _Dest=0x3e47578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0189.164] wcscat (in: _Dest=0x3e47578, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*" [0189.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x697c5d0 [0189.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0189.164] wcscmp (_String1=".", _String2=".") returned 0 [0189.164] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.164] wcscmp (_String1="..", _String2=".") returned 1 [0189.164] wcscmp (_String1="..", _String2="..") returned 0 [0189.164] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0189.164] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0189.164] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0189.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea72d8 [0189.164] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0189.164] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0189.165] wcscat (in: _Dest=0x3ea72d8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" [0189.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0189.898] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0189.898] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0189.898] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0189.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57318 [0189.898] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0189.898] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0189.898] wcscat (in: _Dest=0x3d57318, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" [0189.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0189.899] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x697c5d0 | out: lpFindFileData=0x697c5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0189.899] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0189.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697c5d0) returned 1 [0189.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 [0189.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 6268 os_tid = 0x2420 [0189.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 0x20 [0195.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0196.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.045] GetLastError () returned 0x5 [0199.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0199.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5590) returned 1 Thread: id = 6269 os_tid = 0x2424 [0189.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 0x20 [0195.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0196.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.564] GetLastError () returned 0x5 [0200.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 6270 os_tid = 0x2374 [0189.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x3ea5d70 [0189.179] wcscpy (in: _Dest=0x3ea5d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0189.179] wcscat (in: _Dest=0x3ea5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0189.179] wcscat (in: _Dest=0x3ea5d70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*" [0189.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4060 [0189.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0195.162] wcscmp (_String1=".", _String2=".") returned 0 [0195.162] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.162] wcscmp (_String1="..", _String2=".") returned 1 [0195.162] wcscmp (_String1="..", _String2="..") returned 0 [0195.162] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0195.162] wcscmp (_String1="background.gif", _String2=".") returned 1 [0195.162] wcscmp (_String1="background.gif", _String2="..") returned 1 [0195.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0195.162] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0195.162] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0195.162] wcscat (in: _Dest=0x3dae1f8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" [0195.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0195.621] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0195.621] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0195.621] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0195.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8a48 [0195.621] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0195.621] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0195.621] wcscat (in: _Dest=0x3ea8a48, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" [0195.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0195.622] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0195.622] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0195.622] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0195.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8fe8 [0195.622] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0195.623] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0195.623] wcscat (in: _Dest=0x3ea8fe8, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" [0195.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0195.624] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0195.624] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0195.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4060) returned 1 [0195.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5d70) returned 1 [0195.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 Thread: id = 6271 os_tid = 0x2378 [0189.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 0x20 [0195.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0196.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.625] GetLastError () returned 0x5 [0198.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0199.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5c90) returned 1 Thread: id = 6272 os_tid = 0x237c [0189.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56af0 [0189.180] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0189.180] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0189.180] wcscat (in: _Dest=0x3d56af0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*" [0189.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c42c8 [0189.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0195.032] wcscmp (_String1=".", _String2=".") returned 0 [0195.032] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.032] wcscmp (_String1="..", _String2=".") returned 1 [0195.032] wcscmp (_String1="..", _String2="..") returned 0 [0195.032] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0195.032] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0195.032] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0195.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dade18 [0195.033] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0195.033] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0195.033] wcscat (in: _Dest=0x3dade18, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0195.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0195.617] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.617] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.617] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae008 [0195.617] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0195.617] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0195.617] wcscat (in: _Dest=0x3dae008, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0195.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0195.618] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.618] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.618] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0195.618] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0195.618] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0195.618] wcscat (in: _Dest=0x3dadb30, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0195.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0195.619] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.619] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0195.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c42c8) returned 1 [0195.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 [0195.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5830) returned 1 Thread: id = 6273 os_tid = 0x2380 [0189.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 0x20 [0195.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0195.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.713] GetLastError () returned 0x5 [0196.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0196.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 6274 os_tid = 0x2384 [0189.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 0x20 [0195.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0196.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.624] GetLastError () returned 0x5 [0198.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0199.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 Thread: id = 6275 os_tid = 0x242c [0189.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3012a00 [0189.181] wcscpy (in: _Dest=0x3012a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0189.181] wcscat (in: _Dest=0x3012a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0189.181] wcscat (in: _Dest=0x3012a00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*" [0189.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4530 [0189.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f3c0 [0195.160] wcscmp (_String1=".", _String2=".") returned 0 [0195.161] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.161] wcscmp (_String1="..", _String2=".") returned 1 [0195.161] wcscmp (_String1="..", _String2="..") returned 0 [0195.161] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0195.161] wcscmp (_String1="background.gif", _String2=".") returned 1 [0195.161] wcscmp (_String1="background.gif", _String2="..") returned 1 [0195.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea72d8 [0195.161] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0195.161] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0195.161] wcscat (in: _Dest=0x3ea72d8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" [0201.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0201.304] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0201.304] wcscmp (_String1="header.gif", _String2=".") returned 1 [0201.304] wcscmp (_String1="header.gif", _String2="..") returned 1 [0201.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d57318 [0201.304] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0201.304] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0201.304] wcscat (in: _Dest=0x3d57318, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" [0201.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0201.306] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0201.306] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0201.306] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0201.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56920 [0201.306] wcscpy (in: _Dest=0x3d56920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0201.306] wcscat (in: _Dest=0x3d56920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0201.306] wcscat (in: _Dest=0x3d56920, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" [0201.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0201.307] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0201.307] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0201.307] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0201.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56838 [0201.307] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0201.307] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0201.307] wcscat (in: _Dest=0x3d56838, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" [0201.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0201.309] FindNextFileW (in: hFindFile=0x3f1f3c0, lpFindFileData=0x66c4530 | out: lpFindFileData=0x66c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0201.309] FindClose (in: hFindFile=0x3f1f3c0 | out: hFindFile=0x3f1f3c0) returned 1 [0201.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4530) returned 1 [0201.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 [0201.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e359c0) returned 1 Thread: id = 6276 os_tid = 0x2430 [0189.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 0x20 [0195.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0195.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.712] GetLastError () returned 0x5 [0196.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0196.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 6277 os_tid = 0x2434 [0189.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x30125c8 [0189.181] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0189.181] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0189.182] wcscat (in: _Dest=0x30125c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*" [0189.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4798 [0189.182] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2760 [0196.888] wcscmp (_String1=".", _String2=".") returned 0 [0196.888] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.889] wcscmp (_String1="..", _String2=".") returned 1 [0196.889] wcscmp (_String1="..", _String2="..") returned 0 [0196.889] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0196.889] wcscmp (_String1="background.gif", _String2=".") returned 1 [0196.889] wcscmp (_String1="background.gif", _String2="..") returned 1 [0196.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8b38 [0196.889] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0196.889] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0196.889] wcscat (in: _Dest=0x3ea8b38, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" [0199.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910 [0199.247] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0199.247] wcscmp (_String1="header.gif", _String2=".") returned 1 [0199.247] wcscmp (_String1="header.gif", _String2="..") returned 1 [0199.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d575d0 [0199.247] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0199.247] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0199.247] wcscat (in: _Dest=0x3d575d0, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" [0199.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d575d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0199.248] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0199.248] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0199.248] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0199.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8868 [0199.249] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0199.249] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0199.249] wcscat (in: _Dest=0x3ea8868, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" [0199.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0199.250] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0199.250] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0199.250] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0199.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d57318 [0199.250] wcscpy (in: _Dest=0x3d57318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0199.250] wcscat (in: _Dest=0x3d57318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0199.250] wcscat (in: _Dest=0x3d57318, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" [0199.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d57318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0199.251] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0199.251] FindClose (in: hFindFile=0x66d2760 | out: hFindFile=0x66d2760) returned 1 [0199.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4798) returned 1 [0199.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 [0199.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 Thread: id = 6278 os_tid = 0x2438 [0189.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 0x20 [0191.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0191.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.957] GetLastError () returned 0x5 [0192.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0192.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea5910) returned 1 Thread: id = 6279 os_tid = 0x243c [0189.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 0x20 [0195.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0196.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.204] GetLastError () returned 0x5 [0197.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0198.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30120b8) returned 1 Thread: id = 6280 os_tid = 0x2440 [0189.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 0x20 [0195.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0195.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.515] GetLastError () returned 0x5 [0196.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0196.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 6281 os_tid = 0x2444 [0189.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 0x20 [0196.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0196.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.427] GetLastError () returned 0x5 [0199.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0199.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 6282 os_tid = 0x2448 [0189.183] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0189.183] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.184] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb64 [0189.184] GetFileSizeEx (in: hFile=0xb64, lpFileSize=0xabdf87c | out: lpFileSize=0xabdf87c*=261) returned 1 [0189.184] SetFilePointerEx (in: hFile=0xb64, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.184] ReadFile (in: hFile=0xb64, lpBuffer=0xabdf858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabdf868, lpOverlapped=0x0 | out: lpBuffer=0xabdf858*, lpNumberOfBytesRead=0xabdf868*=0x4, lpOverlapped=0x0) returned 1 [0189.186] SetFilePointerEx (in: hFile=0xb64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0189.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0189.186] NtQuerySystemTime (in: CurrentTime=0xabdf7f0 | out: CurrentTime=0xabdf7f0*=132482710976604000) returned 0x0 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x6eaf4824 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x1cc93b78 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x3eb8232f [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x127b8d7c [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x4042dd95 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x79b36ff2 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x706d64b [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x4072c781 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x2ca4b22f [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x31e5112e [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x63728714 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x1f2804e [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x1e9923a5 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x13c863e4 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x15ca628e [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x1c7fb7a3 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x6853040d [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0xdc34619 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x1eeccaf0 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x442337c9 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x5e07dc09 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x56b902e2 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x786321da [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x7b7b45e2 [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x505b085a [0189.186] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x64a73af9 [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x53b859c2 [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x5ccb5d52 [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x58753ae4 [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x2d1e262a [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x3c9e74d1 [0189.187] RtlRandomEx (in: Seed=0xabdf7e8 | out: Seed=0xabdf7e8) returned 0x7c8727ed [0189.194] ReadFile (in: hFile=0xb64, lpBuffer=0x673b720, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0xabdf7e4, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xabdf7e4*=0x105, lpOverlapped=0x0) returned 1 [0189.194] SetFilePointerEx (in: hFile=0xb64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.195] WriteFile (in: hFile=0xb64, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xabdf7e8, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xabdf7e8*=0x105, lpOverlapped=0x0) returned 1 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d57f0) returned 1 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a50 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d57f0 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d508 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef59c0 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0191.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0191.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0191.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0191.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d57f0) returned 1 [0191.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e840 [0191.138] SetFilePointerEx (in: hFile=0xb64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.138] WriteFile (in: hFile=0xb64, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabdf870, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0xabdf870*=0x10c, lpOverlapped=0x0) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0192.254] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" [0192.254] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.ac3a86" [0192.254] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0xabdf7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x300b1e8 [0192.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300b1e8) returned 1 [0192.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688aa30) returned 1 [0192.329] NtQueryInformationFile (in: FileHandle=0xb64, IoStatusBlock=0xabdf7c0, FileInformation=0xabdf7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xabdf7c0, FileInformation=0xabdf7c8) returned 0x0 [0192.329] NtSetInformationFile (FileHandle=0xb64, IoStatusBlock=0xabdf7c0, FileInformation=0xabdf7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0192.383] FlushFileBuffers (hFile=0xb64) returned 1 [0192.398] CloseHandle (hObject=0xb64) returned 1 [0192.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e8c8 [0192.482] wcscpy (in: _Dest=0x674e8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0192.482] wcscat (in: _Dest=0x674e8c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\AC3A86-Readme.txt" [0192.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0192.482] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xef4 [0192.512] WriteFile (in: hFile=0xef4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xabdf804, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xabdf804*=0x8b9, lpOverlapped=0x0) returned 1 [0192.524] CloseHandle (hObject=0xef4) returned 1 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e8c8) returned 1 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55f30) returned 1 Thread: id = 6283 os_tid = 0x244c [0189.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0189.197] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f4 [0189.197] GetFileSizeEx (in: hFile=0x10f4, lpFileSize=0xec3feac | out: lpFileSize=0xec3feac*=264) returned 1 [0189.197] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.198] ReadFile (in: hFile=0x10f4, lpBuffer=0xec3fe88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xec3fe98, lpOverlapped=0x0 | out: lpBuffer=0xec3fe88*, lpNumberOfBytesRead=0xec3fe98*=0x4, lpOverlapped=0x0) returned 1 [0189.199] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2a8 [0189.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0189.200] NtQuerySystemTime (in: CurrentTime=0xec3fe20 | out: CurrentTime=0xec3fe20*=132482710976760000) returned 0x0 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x4227aadf [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x716220ae [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x4c66ec36 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x26b0bd46 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x7e482d99 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x37d52724 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x363f3380 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x67d8daaf [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x424b0e0c [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x5115ca2e [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x1ac69bb1 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x1a285196 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x2bd680fe [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0xecca431 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x40d8e007 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x45bf8528 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x7a4548b1 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x2a29b6cb [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x745e8d6b [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x101c01fc [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x1b074616 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x374db00 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x25ccff9b [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x10e9e60b [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x6b24bbc2 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x190709db [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x75f9f5bd [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x579606d8 [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x57a1687c [0189.200] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0xccf14b [0189.201] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x29c58e19 [0189.201] RtlRandomEx (in: Seed=0xec3fe18 | out: Seed=0xec3fe18) returned 0x2aeb5f93 [0189.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0189.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0189.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0189.209] ReadFile (in: hFile=0x10f4, lpBuffer=0x673f328, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xec3fe14, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0xec3fe14*=0x108, lpOverlapped=0x0) returned 1 [0189.209] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.209] WriteFile (in: hFile=0x10f4, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xec3fe18, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0xec3fe18*=0x108, lpOverlapped=0x0) returned 1 [0191.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0191.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6330) returned 1 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d6330 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d1c0 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0191.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0191.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0191.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0191.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6330) returned 1 [0191.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6752610 [0191.132] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.132] WriteFile (in: hFile=0x10f4, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec3fea0, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0xec3fea0*=0x10c, lpOverlapped=0x0) returned 1 [0192.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0192.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0192.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40f00 [0192.245] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" [0192.245] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.ac3a86" [0192.245] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xec3fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x34b980 [0192.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34b980) returned 1 [0192.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6893880) returned 1 [0192.319] NtQueryInformationFile (in: FileHandle=0x10f4, IoStatusBlock=0xec3fdf0, FileInformation=0xec3fdf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xec3fdf0, FileInformation=0xec3fdf8) returned 0x0 [0192.319] NtSetInformationFile (FileHandle=0x10f4, IoStatusBlock=0xec3fdf0, FileInformation=0xec3fdf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f00) returned 1 [0192.371] FlushFileBuffers (hFile=0x10f4) returned 1 [0192.385] CloseHandle (hObject=0x10f4) returned 1 [0192.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674e550 [0192.474] wcscpy (in: _Dest=0x674e550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0192.474] wcscat (in: _Dest=0x674e550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\AC3A86-Readme.txt" [0192.474] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0192.474] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2304 [0192.566] WriteFile (in: hFile=0x2304, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xec3fe34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xec3fe34*=0x8b9, lpOverlapped=0x0) returned 1 [0192.567] CloseHandle (hObject=0x2304) returned 1 [0192.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e550) returned 1 [0192.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56058) returned 1 Thread: id = 6284 os_tid = 0x2450 [0189.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env")) returned 0x20 [0195.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0196.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.209] GetLastError () returned 0x5 [0197.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0197.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 Thread: id = 6285 os_tid = 0x2454 [0189.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca")) returned 0x20 [0195.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0196.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.210] GetLastError () returned 0x5 [0197.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0197.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 6286 os_tid = 0x2458 [0189.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp")) returned 0x20 [0195.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0196.725] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.210] GetLastError () returned 0x5 [0197.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0197.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 6287 os_tid = 0x245c [0189.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp")) returned 0x20 [0195.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0196.725] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.210] GetLastError () returned 0x5 [0197.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0197.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 6288 os_tid = 0x2460 [0189.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx")) returned 0x20 [0195.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0196.720] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.720] GetLastError () returned 0x5 [0196.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0196.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 6289 os_tid = 0x2464 [0189.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths")) returned 0x20 [0195.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0196.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.719] GetLastError () returned 0x5 [0196.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0196.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 6290 os_tid = 0x2468 [0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca")) returned 0x20 [0195.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0196.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.070] GetLastError () returned 0x5 [0199.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0199.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6291 os_tid = 0x246c [0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp")) returned 0x20 [0195.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0196.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.206] GetLastError () returned 0x5 [0197.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0197.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6292 os_tid = 0x2470 [0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx")) returned 0x20 [0195.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0196.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.727] GetLastError () returned 0x5 [0196.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0196.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 6293 os_tid = 0x2474 [0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp")) returned 0x20 [0195.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0196.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.727] GetLastError () returned 0x5 [0196.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0196.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 6294 os_tid = 0x2478 [0189.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths")) returned 0x20 [0196.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0197.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.720] GetLastError () returned 0x5 [0197.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0199.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6295 os_tid = 0x1020 [0189.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0189.216] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0189.217] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce0 [0189.217] GetFileSizeEx (in: hFile=0xce0, lpFileSize=0xed1fc0c | out: lpFileSize=0xed1fc0c*=249) returned 1 [0189.217] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.217] ReadFile (in: hFile=0xce0, lpBuffer=0xed1fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xed1fbf8, lpOverlapped=0x0 | out: lpBuffer=0xed1fbe8*, lpNumberOfBytesRead=0xed1fbf8*=0x4, lpOverlapped=0x0) returned 1 [0189.218] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0189.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0189.219] NtQuerySystemTime (in: CurrentTime=0xed1fb80 | out: CurrentTime=0xed1fb80*=132482710976916000) returned 0x0 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x62d1cbda [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x35861398 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x5935fc0c [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x3242f915 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x6629676e [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x46c4ac27 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x3e6aaeac [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x32d4fb4c [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x24849bc3 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x47ab008e [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x25d9f405 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x170d866d [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x445cef01 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x7d90870a [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x77f8dbc7 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x797ea584 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x232a496a [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x51e4fa74 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x4bd04c8b [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x25baa888 [0189.219] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0xd3faa62 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x774a7c42 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x3cdbc909 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x197d1234 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x719b378 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x5e474491 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x56a6a6ff [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x408e77c [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x41c899c3 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x603f1b58 [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x762d251f [0189.220] RtlRandomEx (in: Seed=0xed1fb78 | out: Seed=0xed1fb78) returned 0x24b3b632 [0189.228] ReadFile (in: hFile=0xce0, lpBuffer=0x69838f0, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xed1fb74, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xed1fb74*=0xf9, lpOverlapped=0x0) returned 1 [0189.228] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.228] WriteFile (in: hFile=0xce0, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xed1fb78, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xed1fb78*=0xf9, lpOverlapped=0x0) returned 1 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1b08 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d59e8) returned 1 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5330 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d59e8 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1cf68 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0191.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0191.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5360 [0191.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0191.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0191.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0191.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0191.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d59e8) returned 1 [0191.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e4f8 [0191.141] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.141] WriteFile (in: hFile=0xce0, lpBuffer=0x675e4f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xed1fc00, lpOverlapped=0x0 | out: lpBuffer=0x675e4f8*, lpNumberOfBytesWritten=0xed1fc00*=0x10c, lpOverlapped=0x0) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab28) returned 1 [0192.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0192.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d41518 [0192.260] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" [0192.260] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.ac3a86" [0192.260] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0xed1fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce468 [0192.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce468) returned 1 [0192.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688f9f8) returned 1 [0192.332] NtQueryInformationFile (in: FileHandle=0xce0, IoStatusBlock=0xed1fb50, FileInformation=0xed1fb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xed1fb50, FileInformation=0xed1fb58) returned 0x0 [0192.333] NtSetInformationFile (FileHandle=0xce0, IoStatusBlock=0xed1fb50, FileInformation=0xed1fb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0192.392] FlushFileBuffers (hFile=0xce0) returned 1 [0192.407] CloseHandle (hObject=0xce0) returned 1 [0192.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40060 [0192.485] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0192.485] wcscat (in: _Dest=0x3d40060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0192.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0192.485] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168c [0192.512] WriteFile (in: hFile=0x168c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xed1fb94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xed1fb94*=0x8b9, lpOverlapped=0x0) returned 1 [0192.525] CloseHandle (hObject=0x168c) returned 1 [0192.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0192.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ff88) returned 1 Thread: id = 6296 os_tid = 0x1438 [0189.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0189.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0189.231] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15b4 [0189.231] GetFileSizeEx (in: hFile=0x15b4, lpFileSize=0x853fcdc | out: lpFileSize=0x853fcdc*=249) returned 1 [0189.231] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.231] ReadFile (in: hFile=0x15b4, lpBuffer=0x853fcb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x853fcc8, lpOverlapped=0x0 | out: lpBuffer=0x853fcb8*, lpNumberOfBytesRead=0x853fcc8*=0x4, lpOverlapped=0x0) returned 1 [0189.232] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0189.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0189.233] NtQuerySystemTime (in: CurrentTime=0x853fc50 | out: CurrentTime=0x853fc50*=132482710977072000) returned 0x0 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x118604de [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x4275c21c [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3e243a6b [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x5cf2fa47 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x5116b9f9 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3502b99 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x33cd4084 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3c714b56 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x311aab9b [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x32c09f67 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x2e1c9b2e [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x26218c70 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3bb4e5af [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x6f6339a4 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3ca1dd0d [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x182b8cb3 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x2caded42 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x5fe53004 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x30d36385 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x6ead0c08 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3affd225 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x63a6a81e [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x5eafebf5 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x48f4ece0 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3e5b263f [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x7412eea4 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x20d3da02 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x3a3446df [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x51af946a [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x7f051649 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x1b44fcf6 [0189.233] RtlRandomEx (in: Seed=0x853fc48 | out: Seed=0x853fc48) returned 0x7094a4c [0189.241] ReadFile (in: hFile=0x15b4, lpBuffer=0x698b100, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x853fc44, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0x853fc44*=0xf9, lpOverlapped=0x0) returned 1 [0189.242] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.242] WriteFile (in: hFile=0x15b4, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x853fc48, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0x853fc48*=0xf9, lpOverlapped=0x0) returned 1 [0191.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0191.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0191.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d63c0) returned 1 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d63c0 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d580 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5300 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f20 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1b08 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0191.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d63c0) returned 1 [0191.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e728 [0191.139] SetFilePointerEx (in: hFile=0x15b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.139] WriteFile (in: hFile=0x15b4, lpBuffer=0x675e728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x853fcd0, lpOverlapped=0x0 | out: lpBuffer=0x675e728*, lpNumberOfBytesWritten=0x853fcd0*=0x10c, lpOverlapped=0x0) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0192.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0192.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d413e0 [0192.256] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" [0192.256] wcscat (in: _Dest=0x3d413e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.ac3a86" [0192.256] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.ac3a86", NtPathName=0x853fc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce5c0 [0192.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce5c0) returned 1 [0192.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6890298) returned 1 [0192.331] NtQueryInformationFile (in: FileHandle=0x15b4, IoStatusBlock=0x853fc20, FileInformation=0x853fc28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x853fc20, FileInformation=0x853fc28) returned 0x0 [0192.331] NtSetInformationFile (FileHandle=0x15b4, IoStatusBlock=0x853fc20, FileInformation=0x853fc28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 [0192.387] FlushFileBuffers (hFile=0x15b4) returned 1 [0192.402] CloseHandle (hObject=0x15b4) returned 1 [0192.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40b58 [0192.484] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0192.484] wcscat (in: _Dest=0x3d40b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\AC3A86-Readme.txt" [0192.484] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\ac3a86-readme.txt")) returned 0xffffffff [0192.484] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc74 [0192.511] WriteFile (in: hFile=0xc74, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x853fc64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x853fc64*=0x8b9, lpOverlapped=0x0) returned 1 [0192.522] CloseHandle (hObject=0xc74) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67500b0) returned 1 Thread: id = 6297 os_tid = 0x13c8 [0189.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss")) returned 0x20 [0189.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0189.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.244] GetLastError () returned 0x5 [0189.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0189.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 6298 os_tid = 0xf20 [0189.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss")) returned 0x20 [0189.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0189.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.246] GetLastError () returned 0x5 [0189.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0189.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 6299 os_tid = 0xfb0 [0189.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst")) returned 0x20 [0189.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0189.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.247] GetLastError () returned 0x5 [0189.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0189.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 6300 os_tid = 0x3ec [0189.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss")) returned 0x20 [0190.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0191.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.689] GetLastError () returned 0x5 [0191.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0191.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 6301 os_tid = 0xfbc [0189.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst")) returned 0x20 [0191.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0191.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.691] GetLastError () returned 0x5 [0191.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0191.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 6302 os_tid = 0x2210 [0189.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss")) returned 0x20 [0192.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0192.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.100] GetLastError () returned 0x5 [0192.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0192.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 6303 os_tid = 0x24f8 [0189.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss")) returned 0x20 [0192.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0192.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.099] GetLastError () returned 0x5 [0192.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0192.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 6304 os_tid = 0x24fc [0189.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml")) returned 0x20 [0192.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0192.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.097] GetLastError () returned 0x5 [0192.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0192.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 6305 os_tid = 0x2500 [0189.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss")) returned 0x20 [0191.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0191.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.688] GetLastError () returned 0x5 [0191.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0191.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 6306 os_tid = 0x2504 [0189.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst")) returned 0x20 [0192.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0192.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.058] GetLastError () returned 0x5 [0192.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0192.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 6307 os_tid = 0x23a0 [0189.250] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 0x2020 [0189.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", dwFileAttributes=0x20) returned 1 [0189.251] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1704 [0189.251] GetFileSizeEx (in: hFile=0x1704, lpFileSize=0xf19fa54 | out: lpFileSize=0xf19fa54*=810) returned 1 [0189.251] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x326, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.251] ReadFile (in: hFile=0x1704, lpBuffer=0xf19fa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf19fa40, lpOverlapped=0x0 | out: lpBuffer=0xf19fa30*, lpNumberOfBytesRead=0xf19fa40*=0x4, lpOverlapped=0x0) returned 1 [0189.253] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0189.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0189.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0189.253] NtQuerySystemTime (in: CurrentTime=0xf19f9c8 | out: CurrentTime=0xf19f9c8*=132482710977384000) returned 0x0 [0189.253] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x346cb869 [0189.253] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x635d1043 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x68b6b1b1 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x4ac5192f [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x59e81ed [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x1adadd19 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0xb2e3a85 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x375fb90b [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x24180fb6 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x52dc1266 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x7dff9d20 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x2b5a9df3 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x1b0e8d2b [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x79d9d14f [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x3602d1bc [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x317731a8 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x2e73e6af [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x146a2dda [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x6419efb3 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x6720e340 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x171e16c5 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x4dc856af [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x4449803f [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x6d83bb18 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x41a79044 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x53e150c9 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x6d065464 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x3fa06d0f [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x338ffb20 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x581f8964 [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x1c9c73fe [0189.254] RtlRandomEx (in: Seed=0xf19f9c0 | out: Seed=0xf19f9c0) returned 0x5a88fc06 [0189.262] ReadFile (in: hFile=0x1704, lpBuffer=0x6992910, nNumberOfBytesToRead=0x32a, lpNumberOfBytesRead=0xf19f9bc, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0xf19f9bc*=0x32a, lpOverlapped=0x0) returned 1 [0189.262] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.262] WriteFile (in: hFile=0x1704, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0xf19f9c0, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xf19f9c0*=0x32a, lpOverlapped=0x0) returned 1 [0191.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0191.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0191.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b08) returned 1 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19f18 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x66d5b08 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1d238 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3f19888 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0191.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0191.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0191.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0191.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b08) returned 1 [0191.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x67653f8 [0191.203] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.203] WriteFile (in: hFile=0x1704, lpBuffer=0x67653f8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xf19fa48, lpOverlapped=0x0 | out: lpBuffer=0x67653f8*, lpNumberOfBytesWritten=0xf19fa48*=0x112, lpOverlapped=0x0) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67653f8) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19888) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f19f18) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0192.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0192.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0192.625] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" [0192.625] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.ac3a86" [0192.625] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.ac3a86", NtPathName=0xf19f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67694f8 [0192.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67694f8) returned 1 [0192.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688bfc0) returned 1 [0192.627] NtQueryInformationFile (in: FileHandle=0x1704, IoStatusBlock=0xf19f998, FileInformation=0xf19f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf19f998, FileInformation=0xf19f9a0) returned 0x0 [0192.627] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0xf19f998, FileInformation=0xf19f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0192.628] FlushFileBuffers (hFile=0x1704) returned 1 [0194.785] CloseHandle (hObject=0x1704) returned 1 [0197.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6779520 [0197.447] wcscpy (in: _Dest=0x6779520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0197.447] wcscat (in: _Dest=0x6779520, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\AC3A86-Readme.txt" [0197.447] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ac3a86-readme.txt")) returned 0xffffffff [0197.447] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0197.763] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf19f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf19f9dc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.273] CloseHandle (hObject=0x1988) returned 1 [0198.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779520) returned 1 [0198.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755c10) returned 1 Thread: id = 6308 os_tid = 0x23a4 [0189.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss")) returned 0x20 [0192.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0192.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.085] GetLastError () returned 0x5 [0192.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0192.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 6309 os_tid = 0x2268 [0189.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst")) returned 0x20 [0192.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0192.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.084] GetLastError () returned 0x5 [0192.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0192.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 6310 os_tid = 0x2508 [0189.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss")) returned 0x20 [0192.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.096] GetLastError () returned 0x5 [0192.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 6311 os_tid = 0x250c [0189.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss")) returned 0x20 [0192.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.095] GetLastError () returned 0x5 [0192.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 6312 os_tid = 0x2510 [0189.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss")) returned 0x20 [0192.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.094] GetLastError () returned 0x5 [0192.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 6313 os_tid = 0x2278 [0189.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss")) returned 0x20 [0192.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.092] GetLastError () returned 0x5 [0192.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 6314 os_tid = 0x227c [0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss")) returned 0x20 [0192.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0192.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.091] GetLastError () returned 0x5 [0192.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0192.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 6315 os_tid = 0x2280 [0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst")) returned 0x20 [0192.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0192.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.090] GetLastError () returned 0x5 [0192.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0192.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 6316 os_tid = 0x2284 [0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss")) returned 0x20 [0192.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0192.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.082] GetLastError () returned 0x5 [0192.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0192.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 6317 os_tid = 0x2514 [0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst")) returned 0x20 [0192.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0192.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.081] GetLastError () returned 0x5 [0192.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0192.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 6318 os_tid = 0x228c [0189.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss")) returned 0x20 [0192.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.089] GetLastError () returned 0x5 [0192.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0192.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 6319 os_tid = 0x2290 [0189.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss")) returned 0x20 [0192.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.087] GetLastError () returned 0x5 [0192.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0192.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 6320 os_tid = 0x2294 [0189.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss")) returned 0x20 [0192.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0192.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.086] GetLastError () returned 0x5 [0192.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0192.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 6321 os_tid = 0x2298 [0189.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst")) returned 0x20 [0192.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0192.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.079] GetLastError () returned 0x5 [0192.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0192.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 Thread: id = 6322 os_tid = 0x229c [0189.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss")) returned 0x20 [0192.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0192.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.060] GetLastError () returned 0x5 [0192.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0192.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 Thread: id = 6323 os_tid = 0x22a0 [0189.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst")) returned 0x20 [0192.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0192.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.059] GetLastError () returned 0x5 [0192.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0192.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 6324 os_tid = 0x22a4 [0189.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst")) returned 0x20 [0192.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0192.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.103] GetLastError () returned 0x5 [0192.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0192.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 6325 os_tid = 0x22a8 [0189.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst")) returned 0x20 [0192.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0192.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.101] GetLastError () returned 0x5 [0192.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0192.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 6326 os_tid = 0x22ac [0189.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0189.756] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0193.021] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0193.021] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0x459fa3c | out: lpFileSize=0x459fa3c*=319) returned 1 [0193.022] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.022] ReadFile (in: hFile=0x108c, lpBuffer=0x459fa18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x459fa28, lpOverlapped=0x0 | out: lpBuffer=0x459fa18*, lpNumberOfBytesRead=0x459fa28*=0x4, lpOverlapped=0x0) returned 1 [0193.023] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b230 [0193.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0193.024] NtQuerySystemTime (in: CurrentTime=0x459f9b0 | out: CurrentTime=0x459f9b0*=132482711014980000) returned 0x0 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x5ea6f40b [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7866e543 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x5ceac750 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x64a57c32 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7a3472e6 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x566ad058 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x6a9a0130 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x6d94403d [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7a13e379 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x106ff8ad [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x499c90c0 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7a5e3113 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x70a30625 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7ed7c04d [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x4db6bf19 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x7aac9c5 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x324c2fe4 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x340fe7f3 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x60461a0 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x38a60132 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x54ffc1ac [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x220e1c14 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x17860ce7 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x446afe4d [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0xe53cbed [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x5852cb03 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x50452788 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x51a232d4 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x6b80d858 [0193.024] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x61713442 [0193.025] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x4f8d576e [0193.025] RtlRandomEx (in: Seed=0x459f9a8 | out: Seed=0x459f9a8) returned 0x5b233828 [0193.032] ReadFile (in: hFile=0x108c, lpBuffer=0x69d8910, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x459f9a4, lpOverlapped=0x0 | out: lpBuffer=0x69d8910*, lpNumberOfBytesRead=0x459f9a4*=0x13f, lpOverlapped=0x0) returned 1 [0193.032] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.032] WriteFile (in: hFile=0x108c, lpBuffer=0x69dc518*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x459f9a8, lpOverlapped=0x0 | out: lpBuffer=0x69dc518*, lpNumberOfBytesWritten=0x459f9a8*=0x13f, lpOverlapped=0x0) returned 1 [0195.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3cf0 [0195.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0195.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0195.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69dc518) returned 1 [0195.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d8910) returned 1 [0195.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0195.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ab8) returned 1 [0195.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5fc0 [0195.655] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.655] WriteFile (in: hFile=0x108c, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x459fa30, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0x459fa30*=0x10c, lpOverlapped=0x0) returned 1 [0195.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0195.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0195.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0195.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0195.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0195.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0195.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0195.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0195.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d412a8 [0195.829] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" [0195.829] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.ac3a86" [0195.829] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x459f9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768fd8 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768fd8) returned 1 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6894570) returned 1 [0196.479] NtQueryInformationFile (in: FileHandle=0x108c, IoStatusBlock=0x459f980, FileInformation=0x459f988, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x459f980, FileInformation=0x459f988) returned 0x0 [0196.480] NtSetInformationFile (FileHandle=0x108c, IoStatusBlock=0x459f980, FileInformation=0x459f988, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0197.572] FlushFileBuffers (hFile=0x108c) returned 1 [0197.579] CloseHandle (hObject=0x108c) returned 1 [0197.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6772d28 [0197.817] wcscpy (in: _Dest=0x6772d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0197.818] wcscat (in: _Dest=0x6772d28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\AC3A86-Readme.txt" [0197.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0197.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.281] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x459f9c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x459f9c4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.282] CloseHandle (hObject=0x1988) returned 1 [0198.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772d28) returned 1 [0198.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f898) returned 1 Thread: id = 6327 os_tid = 0x22b0 [0189.757] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0189.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0193.033] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20dc [0193.033] GetFileSizeEx (in: hFile=0x20dc, lpFileSize=0x81af95c | out: lpFileSize=0x81af95c*=265) returned 1 [0193.033] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.033] ReadFile (in: hFile=0x20dc, lpBuffer=0x81af938, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81af948, lpOverlapped=0x0 | out: lpBuffer=0x81af938*, lpNumberOfBytesRead=0x81af948*=0x4, lpOverlapped=0x0) returned 1 [0193.035] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0193.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0193.035] NtQuerySystemTime (in: CurrentTime=0x81af8d0 | out: CurrentTime=0x81af8d0*=132482711015136000) returned 0x0 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2fa15245 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x6ae985c9 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x777dfc16 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x684feb86 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x7a836efb [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x54ffc1ac [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x63bbb0d [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x3e93afe2 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x821621 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x5dfa2e9f [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2f1e19a4 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x1a478f89 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2fa7b835 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x341682a2 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0xf11d46c [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x321987d3 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x4c327176 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2a617049 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2c5ebaa3 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x4291ada2 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x235f251e [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x14ce38af [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x2474056d [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x5ea6f40b [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x453ea38 [0193.035] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x1489911a [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x405fc5ac [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x1cddd6ce [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x7ed27051 [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x31f3dece [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x31ee0aa3 [0193.036] RtlRandomEx (in: Seed=0x81af8c8 | out: Seed=0x81af8c8) returned 0x4d4f1cd6 [0193.043] ReadFile (in: hFile=0x20dc, lpBuffer=0x69e0120, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x81af8c4, lpOverlapped=0x0 | out: lpBuffer=0x69e0120*, lpNumberOfBytesRead=0x81af8c4*=0x109, lpOverlapped=0x0) returned 1 [0193.043] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.043] WriteFile (in: hFile=0x20dc, lpBuffer=0x69e3d28*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x81af8c8, lpOverlapped=0x0 | out: lpBuffer=0x69e3d28*, lpNumberOfBytesWritten=0x81af8c8*=0x109, lpOverlapped=0x0) returned 1 [0195.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0195.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e3d28) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e0120) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821dc0) returned 1 [0195.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0195.657] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.657] WriteFile (in: hFile=0x20dc, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81af950, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0x81af950*=0x10c, lpOverlapped=0x0) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0195.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0195.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41788 [0195.832] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" [0195.832] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.ac3a86" [0195.832] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0x81af8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768e90 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768e90) returned 1 [0196.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6888e28) returned 1 [0196.481] NtQueryInformationFile (in: FileHandle=0x20dc, IoStatusBlock=0x81af8a0, FileInformation=0x81af8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x81af8a0, FileInformation=0x81af8a8) returned 0x0 [0196.481] NtSetInformationFile (FileHandle=0x20dc, IoStatusBlock=0x81af8a0, FileInformation=0x81af8a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41788) returned 1 [0197.574] FlushFileBuffers (hFile=0x20dc) returned 1 [0197.580] CloseHandle (hObject=0x20dc) returned 1 [0197.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a86570 [0197.822] wcscpy (in: _Dest=0x6a86570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0197.822] wcscat (in: _Dest=0x6a86570, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\AC3A86-Readme.txt" [0197.822] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0197.822] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.294] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81af8e4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x81af8e4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.296] CloseHandle (hObject=0x1988) returned 1 [0198.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86570) returned 1 [0198.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f9c0) returned 1 Thread: id = 6328 os_tid = 0x23a8 [0189.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 0x2020 [0189.758] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0193.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20d8 [0193.045] GetFileSizeEx (in: hFile=0x20d8, lpFileSize=0x664fa1c | out: lpFileSize=0x664fa1c*=259) returned 1 [0193.045] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.045] ReadFile (in: hFile=0x20d8, lpBuffer=0x664f9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x664fa08, lpOverlapped=0x0 | out: lpBuffer=0x664f9f8*, lpNumberOfBytesRead=0x664fa08*=0x4, lpOverlapped=0x0) returned 1 [0193.047] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0193.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0193.047] NtQuerySystemTime (in: CurrentTime=0x664f990 | out: CurrentTime=0x664f990*=132482711015292000) returned 0x0 [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x7937b85e [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x4a8f56a7 [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0xc6b0dba [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x106ff8ad [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x1a29c564 [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x794419a2 [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x5ffaa41c [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x51366528 [0193.047] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x7cda5540 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x29101eb8 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x6468b888 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0xe1f7abd [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x99cb1f7 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x60a66a22 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x31d078fd [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x377d6383 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x65bee525 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x5edd176b [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x657da7a5 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x1e55a810 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x4a2db981 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x493bc6e0 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x19db8da2 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x5d2a361b [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x51e8cd97 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x76da7171 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x2e900a5c [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x7a150916 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x61decbfb [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x54745a30 [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x406075be [0193.048] RtlRandomEx (in: Seed=0x664f988 | out: Seed=0x664f988) returned 0x48f76676 [0193.057] ReadFile (in: hFile=0x20d8, lpBuffer=0x69e7930, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x664f984, lpOverlapped=0x0 | out: lpBuffer=0x69e7930*, lpNumberOfBytesRead=0x664f984*=0x103, lpOverlapped=0x0) returned 1 [0193.057] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.057] WriteFile (in: hFile=0x20d8, lpBuffer=0x69eb538*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x664f988, lpOverlapped=0x0 | out: lpBuffer=0x69eb538*, lpNumberOfBytesWritten=0x664f988*=0x103, lpOverlapped=0x0) returned 1 [0195.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0195.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69eb538) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e7930) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823c68) returned 1 [0195.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e10 [0195.661] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.662] WriteFile (in: hFile=0x20d8, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x664fa10, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x664fa10*=0x10c, lpOverlapped=0x0) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0195.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d418c0 [0195.838] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" [0195.838] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.ac3a86" [0195.838] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x664f988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768c00 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768c00) returned 1 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688d9a0) returned 1 [0196.479] NtQueryInformationFile (in: FileHandle=0x20d8, IoStatusBlock=0x664f960, FileInformation=0x664f968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x664f960, FileInformation=0x664f968) returned 0x0 [0196.479] NtSetInformationFile (FileHandle=0x20d8, IoStatusBlock=0x664f960, FileInformation=0x664f968, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418c0) returned 1 [0197.565] FlushFileBuffers (hFile=0x20d8) returned 1 [0197.576] CloseHandle (hObject=0x20d8) returned 1 [0197.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a86438 [0197.820] wcscpy (in: _Dest=0x6a86438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0197.820] wcscat (in: _Dest=0x6a86438, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\AC3A86-Readme.txt" [0197.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0197.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.287] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x664f9a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x664f9a4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.293] CloseHandle (hObject=0x1988) returned 1 [0198.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86438) returned 1 [0198.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fae8) returned 1 Thread: id = 6329 os_tid = 0x23ac [0189.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 0x2020 [0189.758] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0193.057] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe20 [0193.057] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x7f8f7cc | out: lpFileSize=0x7f8f7cc*=243) returned 1 [0193.058] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.058] ReadFile (in: hFile=0xe20, lpBuffer=0x7f8f7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f8f7b8, lpOverlapped=0x0 | out: lpBuffer=0x7f8f7a8*, lpNumberOfBytesRead=0x7f8f7b8*=0x4, lpOverlapped=0x0) returned 1 [0193.059] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0193.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aec0 [0193.079] NtQuerySystemTime (in: CurrentTime=0x7f8f740 | out: CurrentTime=0x7f8f740*=132482711015604000) returned 0x0 [0193.079] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x235220cb [0193.079] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2a0c4672 [0193.079] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x6bde2502 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x5050bc70 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x537f86cf [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x3c083120 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x3da18b1a [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2ef340e4 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x4ec88d77 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x39df4545 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x199da1d7 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x4184c282 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2f9ea3e4 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x56e1b0a6 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x48c8f4a7 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x5a52bfd8 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2f73cb24 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x73a16434 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x75a396ef [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x6a855c26 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x3be97adf [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x6e4d20e1 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x1988d35f [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x22c55cb9 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x70f0c984 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x58208397 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x680fd9fc [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x32e56fb5 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x38ebeab5 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2e9d8f64 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x7b949792 [0193.080] RtlRandomEx (in: Seed=0x7f8f738 | out: Seed=0x7f8f738) returned 0x2cdef4b5 [0193.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69ef140 [0193.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69f2d48 [0193.089] ReadFile (in: hFile=0xe20, lpBuffer=0x69ef140, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x7f8f734, lpOverlapped=0x0 | out: lpBuffer=0x69ef140*, lpNumberOfBytesRead=0x7f8f734*=0xf3, lpOverlapped=0x0) returned 1 [0193.089] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.089] WriteFile (in: hFile=0xe20, lpBuffer=0x69f2d48*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x7f8f738, lpOverlapped=0x0 | out: lpBuffer=0x69f2d48*, lpNumberOfBytesWritten=0x7f8f738*=0xf3, lpOverlapped=0x0) returned 1 [0195.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0195.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0195.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0195.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f2d48) returned 1 [0195.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69ef140) returned 1 [0195.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0195.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68221b0) returned 1 [0195.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5db0 [0195.660] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.661] WriteFile (in: hFile=0xe20, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f8f7c0, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0x7f8f7c0*=0x10c, lpOverlapped=0x0) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0195.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0195.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d419f8 [0195.834] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" [0195.834] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.ac3a86" [0195.834] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x7f8f738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6768d48 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768d48) returned 1 [0196.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68974e0) returned 1 [0196.479] NtQueryInformationFile (in: FileHandle=0xe20, IoStatusBlock=0x7f8f710, FileInformation=0x7f8f718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f8f710, FileInformation=0x7f8f718) returned 0x0 [0196.479] NtSetInformationFile (FileHandle=0xe20, IoStatusBlock=0x7f8f710, FileInformation=0x7f8f718, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419f8) returned 1 [0197.569] FlushFileBuffers (hFile=0xe20) returned 1 [0197.579] CloseHandle (hObject=0xe20) returned 1 [0197.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a86300 [0197.819] wcscpy (in: _Dest=0x6a86300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0197.819] wcscat (in: _Dest=0x6a86300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\AC3A86-Readme.txt" [0197.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0197.819] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.284] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f8f754, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7f8f754*=0x8b9, lpOverlapped=0x0) returned 1 [0198.285] CloseHandle (hObject=0x1988) returned 1 [0198.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86300) returned 1 [0198.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fc10) returned 1 Thread: id = 6330 os_tid = 0x23b0 [0189.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 0x2020 [0189.759] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0193.089] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f90 [0193.090] GetFileSizeEx (in: hFile=0x1f90, lpFileSize=0x81efc54 | out: lpFileSize=0x81efc54*=256) returned 1 [0193.090] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.090] ReadFile (in: hFile=0x1f90, lpBuffer=0x81efc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81efc40, lpOverlapped=0x0 | out: lpBuffer=0x81efc30*, lpNumberOfBytesRead=0x81efc40*=0x4, lpOverlapped=0x0) returned 1 [0193.092] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aec0 [0193.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0193.092] NtQuerySystemTime (in: CurrentTime=0x81efbc8 | out: CurrentTime=0x81efbc8*=132482711015760000) returned 0x0 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x4c8f99fa [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6c2fb1f9 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6c063129 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x5346287a [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x5893e31b [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x250dd1e3 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0xa9511a0 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x7e1ba917 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6cd3ae6c [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x174c3895 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6a616590 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x5ca0cdbc [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x21cb9abe [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x76784df [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x316e7598 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x69b58de9 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6b4d285f [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x6fe67763 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x74622185 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x12bea55 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x380f2ae1 [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x7c77a0ca [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x199c7a1e [0193.092] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x414a9a94 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x61713442 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x37d63cf1 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x2fe23235 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0xeeefbea [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x113c0553 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x68c12152 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0x1b020657 [0193.093] RtlRandomEx (in: Seed=0x81efbc0 | out: Seed=0x81efbc0) returned 0xb41b80d [0193.101] ReadFile (in: hFile=0x1f90, lpBuffer=0x69f6950, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x81efbbc, lpOverlapped=0x0 | out: lpBuffer=0x69f6950*, lpNumberOfBytesRead=0x81efbbc*=0x100, lpOverlapped=0x0) returned 1 [0193.101] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.101] WriteFile (in: hFile=0x1f90, lpBuffer=0x69fa558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x81efbc0, lpOverlapped=0x0 | out: lpBuffer=0x69fa558*, lpNumberOfBytesWritten=0x81efbc0*=0x100, lpOverlapped=0x0) returned 1 [0195.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0195.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0195.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0195.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fa558) returned 1 [0195.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f6950) returned 1 [0195.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0195.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822948) returned 1 [0195.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52d0 [0195.668] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.668] WriteFile (in: hFile=0x1f90, lpBuffer=0x30bb700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81efc48, lpOverlapped=0x0 | out: lpBuffer=0x30bb700*, lpNumberOfBytesWritten=0x81efc48*=0x10c, lpOverlapped=0x0) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aec0) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0195.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0195.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d407b0 [0195.845] wcscpy (in: _Dest=0x3d407b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" [0195.845] wcscat (in: _Dest=0x3d407b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.ac3a86" [0195.845] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x81efbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769640 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769640) returned 1 [0196.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688a5e0) returned 1 [0196.478] NtQueryInformationFile (in: FileHandle=0x1f90, IoStatusBlock=0x81efb98, FileInformation=0x81efba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x81efb98, FileInformation=0x81efba0) returned 0x0 [0196.478] NtSetInformationFile (FileHandle=0x1f90, IoStatusBlock=0x81efb98, FileInformation=0x81efba0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407b0) returned 1 [0197.562] FlushFileBuffers (hFile=0x1f90) returned 1 [0197.570] CloseHandle (hObject=0x1f90) returned 1 [0197.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x67736e8 [0197.816] wcscpy (in: _Dest=0x67736e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0197.816] wcscat (in: _Dest=0x67736e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\AC3A86-Readme.txt" [0197.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0197.816] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.278] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81efbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x81efbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.280] CloseHandle (hObject=0x1988) returned 1 [0198.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67736e8) returned 1 [0198.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 Thread: id = 6331 os_tid = 0x23b4 [0189.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0189.759] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0199.147] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1344 [0199.148] GetFileSizeEx (in: hFile=0x1344, lpFileSize=0x815fc0c | out: lpFileSize=0x815fc0c*=329) returned 1 [0199.148] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.148] ReadFile (in: hFile=0x1344, lpBuffer=0x815fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x815fbf8, lpOverlapped=0x0 | out: lpBuffer=0x815fbe8*, lpNumberOfBytesRead=0x815fbf8*=0x4, lpOverlapped=0x0) returned 1 [0199.150] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c40 [0199.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0199.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0199.150] NtQuerySystemTime (in: CurrentTime=0x815fb80 | out: CurrentTime=0x815fb80*=132482711076288000) returned 0x0 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0xff9e963 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x43937211 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x241ba8c0 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x2a892384 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x45905af3 [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x30ceaaef [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x275d63da [0199.150] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x18c95f5d [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x33019757 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x38a1af0b [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x12503b66 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x651905f4 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x65635346 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x56926aa1 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x6bef1139 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0xe038e99 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x51b56994 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x70693bd1 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x547b34fa [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x69f56f6 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x452fb99c [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x5df0076d [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x1f364851 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x5a62d7b5 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x63c96add [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x32fac45d [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x69b48065 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x46eda0c5 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x3ff85f02 [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x73ab8dcb [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x2eb7f73e [0199.151] RtlRandomEx (in: Seed=0x815fb78 | out: Seed=0x815fb78) returned 0x208cc643 [0199.160] ReadFile (in: hFile=0x1344, lpBuffer=0x6922518, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0x815fb74, lpOverlapped=0x0 | out: lpBuffer=0x6922518*, lpNumberOfBytesRead=0x815fb74*=0x149, lpOverlapped=0x0) returned 1 [0199.160] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.160] WriteFile (in: hFile=0x1344, lpBuffer=0x6926120*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x815fb78, lpOverlapped=0x0 | out: lpBuffer=0x6926120*, lpNumberOfBytesWritten=0x815fb78*=0x149, lpOverlapped=0x0) returned 1 [0199.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0199.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e70 [0199.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0199.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6926120) returned 1 [0199.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6922518) returned 1 [0199.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0199.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68230e0) returned 1 [0199.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d80 [0199.678] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.678] WriteFile (in: hFile=0x1344, lpBuffer=0x6766e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x815fc00, lpOverlapped=0x0 | out: lpBuffer=0x6766e00*, lpNumberOfBytesWritten=0x815fc00*=0x10c, lpOverlapped=0x0) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0199.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0199.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d413e0 [0199.705] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" [0199.705] wcscat (in: _Dest=0x3d413e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.ac3a86" [0199.705] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x815fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6776c00 [0199.766] FlushFileBuffers (hFile=0x1344) returned 1 [0199.770] CloseHandle (hObject=0x1344) returned 1 [0199.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d41518 [0199.788] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0199.788] wcscat (in: _Dest=0x3d41518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\AC3A86-Readme.txt" [0199.788] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0199.788] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f7c [0199.801] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x815fb94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x815fb94*=0x8b9, lpOverlapped=0x0) returned 1 [0199.820] CloseHandle (hObject=0x1f7c) returned 1 [0199.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0199.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fe60) returned 1 Thread: id = 6332 os_tid = 0x2400 [0189.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x69c3840 [0189.760] wcscpy (in: _Dest=0x69c3840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0189.760] wcscat (in: _Dest=0x69c3840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0189.760] wcscat (in: _Dest=0x69c3840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*" [0189.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0189.760] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ea0 [0189.760] wcscmp (_String1=".", _String2=".") returned 0 [0189.760] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.760] wcscmp (_String1="..", _String2=".") returned 1 [0189.760] wcscmp (_String1="..", _String2="..") returned 0 [0189.760] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.760] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.760] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3db08d0 [0189.761] wcscpy (in: _Dest=0x3db08d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0189.761] wcscat (in: _Dest=0x3db08d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0189.761] wcscat (in: _Dest=0x3db08d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" [0190.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db08d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0190.186] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.186] FindClose (in: hFindFile=0x66d2ea0 | out: hFindFile=0x66d2ea0) returned 1 [0190.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0190.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3840) returned 1 [0190.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 Thread: id = 6333 os_tid = 0x2518 [0189.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x69c3958 [0189.764] wcscpy (in: _Dest=0x69c3958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0189.764] wcscat (in: _Dest=0x69c3958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0189.764] wcscat (in: _Dest=0x69c3958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*" [0189.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0189.764] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ee0 [0189.764] wcscmp (_String1=".", _String2=".") returned 0 [0189.764] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.764] wcscmp (_String1="..", _String2=".") returned 1 [0189.764] wcscmp (_String1="..", _String2="..") returned 0 [0189.764] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.764] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.764] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3db09f8 [0189.765] wcscpy (in: _Dest=0x3db09f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0189.765] wcscat (in: _Dest=0x3db09f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0189.765] wcscat (in: _Dest=0x3db09f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" [0190.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db09f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0190.189] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.189] FindClose (in: hFindFile=0x66d2ee0 | out: hFindFile=0x66d2ee0) returned 1 [0190.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0190.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3958) returned 1 [0190.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 Thread: id = 6334 os_tid = 0x251c [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x69c3a70 [0189.765] wcscpy (in: _Dest=0x69c3a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0189.765] wcscat (in: _Dest=0x69c3a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0189.765] wcscat (in: _Dest=0x69c3a70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*" [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0189.765] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f20 [0189.765] wcscmp (_String1=".", _String2=".") returned 0 [0189.765] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.766] wcscmp (_String1="..", _String2=".") returned 1 [0189.766] wcscmp (_String1="..", _String2="..") returned 0 [0189.766] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.766] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.766] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3db0b20 [0189.766] wcscpy (in: _Dest=0x3db0b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0189.766] wcscat (in: _Dest=0x3db0b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0189.766] wcscat (in: _Dest=0x3db0b20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" [0190.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0190.192] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.192] FindClose (in: hFindFile=0x66d2f20 | out: hFindFile=0x66d2f20) returned 1 [0190.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0190.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a70) returned 1 [0190.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 6335 os_tid = 0x23c4 [0189.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x69c3b88 [0189.766] wcscpy (in: _Dest=0x69c3b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0189.766] wcscat (in: _Dest=0x69c3b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0189.766] wcscat (in: _Dest=0x69c3b88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*" [0189.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0189.766] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f60 [0189.767] wcscmp (_String1=".", _String2=".") returned 0 [0189.767] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.767] wcscmp (_String1="..", _String2=".") returned 1 [0189.767] wcscmp (_String1="..", _String2="..") returned 0 [0189.767] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3db0c48 [0189.767] wcscpy (in: _Dest=0x3db0c48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0189.767] wcscat (in: _Dest=0x3db0c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0189.767] wcscat (in: _Dest=0x3db0c48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" [0190.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0190.195] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.195] FindClose (in: hFindFile=0x66d2f60 | out: hFindFile=0x66d2f60) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3b88) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 Thread: id = 6336 os_tid = 0x23c8 [0189.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675cab8 [0189.767] wcscpy (in: _Dest=0x675cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0189.767] wcscat (in: _Dest=0x675cab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0189.768] wcscat (in: _Dest=0x675cab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*" [0189.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0189.768] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2fa0 [0189.769] wcscmp (_String1=".", _String2=".") returned 0 [0189.769] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.769] wcscmp (_String1="..", _String2=".") returned 1 [0189.769] wcscmp (_String1="..", _String2="..") returned 0 [0189.769] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.769] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.769] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3db0d70 [0189.769] wcscpy (in: _Dest=0x3db0d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0189.769] wcscat (in: _Dest=0x3db0d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0189.769] wcscat (in: _Dest=0x3db0d70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" [0190.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3db0d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0190.198] FindNextFileW (in: hFindFile=0x66d2fa0, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.198] FindClose (in: hFindFile=0x66d2fa0 | out: hFindFile=0x66d2fa0) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cab8) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 Thread: id = 6337 os_tid = 0x23cc [0189.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675cbd0 [0189.770] wcscpy (in: _Dest=0x675cbd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0189.770] wcscat (in: _Dest=0x675cbd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0189.770] wcscat (in: _Dest=0x675cbd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*" [0189.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bad08 [0189.770] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2920 [0191.211] wcscmp (_String1=".", _String2=".") returned 0 [0191.211] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.211] wcscmp (_String1="..", _String2=".") returned 1 [0191.211] wcscmp (_String1="..", _String2="..") returned 0 [0191.211] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.211] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.211] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6765520 [0191.211] wcscpy (in: _Dest=0x6765520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0191.211] wcscat (in: _Dest=0x6765520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0191.211] wcscat (in: _Dest=0x6765520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" [0196.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0196.971] FindNextFileW (in: hFindFile=0x66d2920, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.971] FindClose (in: hFindFile=0x66d2920 | out: hFindFile=0x66d2920) returned 1 [0196.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bad08) returned 1 [0196.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0196.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 Thread: id = 6338 os_tid = 0x23d0 [0189.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675cce8 [0189.771] wcscpy (in: _Dest=0x675cce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0189.771] wcscat (in: _Dest=0x675cce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0189.771] wcscat (in: _Dest=0x675cce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*" [0189.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4a00 [0189.771] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x66c4a00 | out: lpFindFileData=0x66c4a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0196.873] wcscmp (_String1=".", _String2=".") returned 0 [0196.873] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66c4a00 | out: lpFindFileData=0x66c4a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.873] wcscmp (_String1="..", _String2=".") returned 1 [0196.873] wcscmp (_String1="..", _String2="..") returned 0 [0196.873] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66c4a00 | out: lpFindFileData=0x66c4a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.873] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.873] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6772550 [0196.873] wcscpy (in: _Dest=0x6772550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0196.873] wcscat (in: _Dest=0x6772550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0196.873] wcscat (in: _Dest=0x6772550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" [0201.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6772550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0201.224] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66c4a00 | out: lpFindFileData=0x66c4a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.224] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0201.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4a00) returned 1 [0201.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cce8) returned 1 [0201.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 Thread: id = 6339 os_tid = 0x23d4 [0189.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675ce00 [0189.772] wcscpy (in: _Dest=0x675ce00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0189.772] wcscat (in: _Dest=0x675ce00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0189.772] wcscat (in: _Dest=0x675ce00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*" [0189.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4c68 [0189.772] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x66c4c68 | out: lpFindFileData=0x66c4c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ca0 [0196.873] wcscmp (_String1=".", _String2=".") returned 0 [0196.873] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c4c68 | out: lpFindFileData=0x66c4c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.873] wcscmp (_String1="..", _String2=".") returned 1 [0196.873] wcscmp (_String1="..", _String2="..") returned 0 [0196.873] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c4c68 | out: lpFindFileData=0x66c4c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.873] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.873] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40408 [0196.874] wcscpy (in: _Dest=0x3d40408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0196.874] wcscat (in: _Dest=0x3d40408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0196.874] wcscat (in: _Dest=0x3d40408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" [0201.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0201.226] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66c4c68 | out: lpFindFileData=0x66c4c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.226] FindClose (in: hFindFile=0x66d2ca0 | out: hFindFile=0x66d2ca0) returned 1 [0201.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4c68) returned 1 [0201.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ce00) returned 1 [0201.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 Thread: id = 6340 os_tid = 0x23d8 [0189.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675cf18 [0189.772] wcscpy (in: _Dest=0x675cf18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0189.773] wcscat (in: _Dest=0x675cf18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0189.773] wcscat (in: _Dest=0x675cf18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*" [0189.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4ed0 [0189.773] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x66c4ed0 | out: lpFindFileData=0x66c4ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ce0 [0196.874] wcscmp (_String1=".", _String2=".") returned 0 [0196.874] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c4ed0 | out: lpFindFileData=0x66c4ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.874] wcscmp (_String1="..", _String2=".") returned 1 [0196.874] wcscmp (_String1="..", _String2="..") returned 0 [0196.874] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c4ed0 | out: lpFindFileData=0x66c4ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.874] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.874] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6772678 [0196.874] wcscpy (in: _Dest=0x6772678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0196.874] wcscat (in: _Dest=0x6772678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0196.874] wcscat (in: _Dest=0x6772678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" [0201.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6772678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0201.229] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66c4ed0 | out: lpFindFileData=0x66c4ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.229] FindClose (in: hFindFile=0x66d2ce0 | out: hFindFile=0x66d2ce0) returned 1 [0201.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4ed0) returned 1 [0201.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cf18) returned 1 [0201.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ce8) returned 1 Thread: id = 6341 os_tid = 0x23dc [0189.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x675d030 [0189.773] wcscpy (in: _Dest=0x675d030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0189.773] wcscat (in: _Dest=0x675d030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0189.773] wcscat (in: _Dest=0x675d030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*" [0189.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5138 [0189.774] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x66c5138 | out: lpFindFileData=0x66c5138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d20 [0196.875] wcscmp (_String1=".", _String2=".") returned 0 [0196.875] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c5138 | out: lpFindFileData=0x66c5138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.875] wcscmp (_String1="..", _String2=".") returned 1 [0196.875] wcscmp (_String1="..", _String2="..") returned 0 [0196.875] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c5138 | out: lpFindFileData=0x66c5138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.875] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.875] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40dc8 [0196.875] wcscpy (in: _Dest=0x3d40dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0196.875] wcscat (in: _Dest=0x3d40dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0196.875] wcscat (in: _Dest=0x3d40dc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" [0201.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0201.231] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66c5138 | out: lpFindFileData=0x66c5138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.231] FindClose (in: hFindFile=0x66d2d20 | out: hFindFile=0x66d2d20) returned 1 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5138) returned 1 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d030) returned 1 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e00) returned 1 Thread: id = 6342 os_tid = 0x23e0 [0189.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d148 [0189.774] wcscpy (in: _Dest=0x675d148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0189.774] wcscat (in: _Dest=0x675d148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0189.774] wcscat (in: _Dest=0x675d148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*" [0189.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c53a0 [0189.774] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x66c53a0 | out: lpFindFileData=0x66c53a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d60 [0196.875] wcscmp (_String1=".", _String2=".") returned 0 [0196.875] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c53a0 | out: lpFindFileData=0x66c53a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.875] wcscmp (_String1="..", _String2=".") returned 1 [0196.875] wcscmp (_String1="..", _String2="..") returned 0 [0196.875] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c53a0 | out: lpFindFileData=0x66c53a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.876] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.876] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67727a0 [0196.876] wcscpy (in: _Dest=0x67727a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0196.876] wcscat (in: _Dest=0x67727a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0196.876] wcscat (in: _Dest=0x67727a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" [0201.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67727a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0201.234] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66c53a0 | out: lpFindFileData=0x66c53a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.234] FindClose (in: hFindFile=0x66d2d60 | out: hFindFile=0x66d2d60) returned 1 [0201.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c53a0) returned 1 [0201.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d148) returned 1 [0201.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f18) returned 1 Thread: id = 6343 os_tid = 0x23e4 [0189.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d260 [0189.775] wcscpy (in: _Dest=0x675d260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0189.775] wcscat (in: _Dest=0x675d260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0189.775] wcscat (in: _Dest=0x675d260, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*" [0189.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5608 [0189.775] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2da0 [0196.876] wcscmp (_String1=".", _String2=".") returned 0 [0196.876] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.876] wcscmp (_String1="..", _String2=".") returned 1 [0196.876] wcscmp (_String1="..", _String2="..") returned 0 [0196.876] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.876] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.876] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67728c8 [0196.876] wcscpy (in: _Dest=0x67728c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0196.876] wcscat (in: _Dest=0x67728c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0196.876] wcscat (in: _Dest=0x67728c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" [0199.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67728c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0199.231] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.231] FindClose (in: hFindFile=0x66d2da0 | out: hFindFile=0x66d2da0) returned 1 [0199.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5608) returned 1 [0199.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d260) returned 1 [0199.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2030) returned 1 Thread: id = 6344 os_tid = 0x23e8 [0189.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x675d378 [0189.776] wcscpy (in: _Dest=0x675d378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0189.776] wcscat (in: _Dest=0x675d378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0189.776] wcscat (in: _Dest=0x675d378, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*" [0189.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5870 [0189.776] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2de0 [0196.877] wcscmp (_String1=".", _String2=".") returned 0 [0196.877] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.877] wcscmp (_String1="..", _String2=".") returned 1 [0196.877] wcscmp (_String1="..", _String2="..") returned 0 [0196.877] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.877] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.877] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774ab8 [0196.877] wcscpy (in: _Dest=0x6774ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0196.877] wcscat (in: _Dest=0x6774ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0196.877] wcscat (in: _Dest=0x6774ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" [0199.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6774ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0 [0199.233] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.233] FindClose (in: hFindFile=0x66d2de0 | out: hFindFile=0x66d2de0) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5870) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d378) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2148) returned 1 Thread: id = 6345 os_tid = 0xb50 [0189.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d490 [0189.777] wcscpy (in: _Dest=0x675d490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0189.777] wcscat (in: _Dest=0x675d490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0189.777] wcscat (in: _Dest=0x675d490, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*" [0189.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5ad8 [0189.777] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e20 [0196.877] wcscmp (_String1=".", _String2=".") returned 0 [0196.877] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.877] wcscmp (_String1="..", _String2=".") returned 1 [0196.877] wcscmp (_String1="..", _String2="..") returned 0 [0196.878] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.878] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.878] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6774be0 [0196.878] wcscpy (in: _Dest=0x6774be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0196.878] wcscat (in: _Dest=0x6774be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0196.878] wcscat (in: _Dest=0x6774be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" [0199.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6774be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0199.235] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.235] FindClose (in: hFindFile=0x66d2e20 | out: hFindFile=0x66d2e20) returned 1 [0199.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5ad8) returned 1 [0199.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d490) returned 1 [0199.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2260) returned 1 Thread: id = 6346 os_tid = 0x2310 [0189.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d5a8 [0189.778] wcscpy (in: _Dest=0x675d5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0189.778] wcscat (in: _Dest=0x675d5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0189.778] wcscat (in: _Dest=0x675d5a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*" [0189.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5d40 [0189.778] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e60 [0196.878] wcscmp (_String1=".", _String2=".") returned 0 [0196.878] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.878] wcscmp (_String1="..", _String2=".") returned 1 [0196.878] wcscmp (_String1="..", _String2="..") returned 0 [0196.878] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.878] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.878] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6774d08 [0196.878] wcscpy (in: _Dest=0x6774d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0196.878] wcscat (in: _Dest=0x6774d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0196.878] wcscat (in: _Dest=0x6774d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" [0199.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6774d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0199.237] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.237] FindClose (in: hFindFile=0x66d2e60 | out: hFindFile=0x66d2e60) returned 1 [0199.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5d40) returned 1 [0199.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d5a8) returned 1 [0199.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2378) returned 1 Thread: id = 6347 os_tid = 0x23ec [0189.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d6c0 [0189.779] wcscpy (in: _Dest=0x675d6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0189.779] wcscat (in: _Dest=0x675d6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0189.779] wcscat (in: _Dest=0x675d6c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*" [0189.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5fa8 [0189.779] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ea0 [0196.879] wcscmp (_String1=".", _String2=".") returned 0 [0196.879] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.879] wcscmp (_String1="..", _String2=".") returned 1 [0196.879] wcscmp (_String1="..", _String2="..") returned 0 [0196.879] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.879] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.879] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6774e30 [0196.879] wcscpy (in: _Dest=0x6774e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0196.879] wcscat (in: _Dest=0x6774e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0196.879] wcscat (in: _Dest=0x6774e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" [0199.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6774e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0199.239] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.239] FindClose (in: hFindFile=0x66d2ea0 | out: hFindFile=0x66d2ea0) returned 1 [0199.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5fa8) returned 1 [0199.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d6c0) returned 1 [0199.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2490) returned 1 Thread: id = 6348 os_tid = 0x2520 [0189.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d7d8 [0189.780] wcscpy (in: _Dest=0x675d7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0189.780] wcscat (in: _Dest=0x675d7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0189.780] wcscat (in: _Dest=0x675d7d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*" [0189.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6210 [0189.780] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ee0 [0196.879] wcscmp (_String1=".", _String2=".") returned 0 [0196.879] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.879] wcscmp (_String1="..", _String2=".") returned 1 [0196.879] wcscmp (_String1="..", _String2="..") returned 0 [0196.879] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.879] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.880] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6774f58 [0196.880] wcscpy (in: _Dest=0x6774f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0196.880] wcscat (in: _Dest=0x6774f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0196.880] wcscat (in: _Dest=0x6774f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" [0199.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6774f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0199.241] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.241] FindClose (in: hFindFile=0x66d2ee0 | out: hFindFile=0x66d2ee0) returned 1 [0199.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6210) returned 1 [0199.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d7d8) returned 1 [0199.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c25a8) returned 1 Thread: id = 6349 os_tid = 0x2324 [0189.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675d8f0 [0189.781] wcscpy (in: _Dest=0x675d8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0189.781] wcscat (in: _Dest=0x675d8f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0189.781] wcscat (in: _Dest=0x675d8f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*" [0189.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6478 [0189.781] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2960 [0196.880] wcscmp (_String1=".", _String2=".") returned 0 [0196.880] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.880] wcscmp (_String1="..", _String2=".") returned 1 [0196.880] wcscmp (_String1="..", _String2="..") returned 0 [0196.880] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.880] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.880] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6775080 [0196.881] wcscpy (in: _Dest=0x6775080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0196.881] wcscat (in: _Dest=0x6775080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0196.881] wcscat (in: _Dest=0x6775080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" [0199.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0199.243] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.243] FindClose (in: hFindFile=0x66d2960 | out: hFindFile=0x66d2960) returned 1 [0199.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6478) returned 1 [0199.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d8f0) returned 1 [0199.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c26c0) returned 1 Thread: id = 6350 os_tid = 0x2524 [0189.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675da08 [0189.782] wcscpy (in: _Dest=0x675da08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0189.782] wcscat (in: _Dest=0x675da08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0189.782] wcscat (in: _Dest=0x675da08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*" [0189.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c66e0 [0189.782] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x66c66e0 | out: lpFindFileData=0x66c66e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0196.861] wcscmp (_String1=".", _String2=".") returned 0 [0196.861] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c66e0 | out: lpFindFileData=0x66c66e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.861] wcscmp (_String1="..", _String2=".") returned 1 [0196.861] wcscmp (_String1="..", _String2="..") returned 0 [0196.861] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c66e0 | out: lpFindFileData=0x66c66e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.861] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.861] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6771648 [0196.862] wcscpy (in: _Dest=0x6771648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0196.862] wcscat (in: _Dest=0x6771648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0196.862] wcscat (in: _Dest=0x6771648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" [0201.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0201.809] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c66e0 | out: lpFindFileData=0x66c66e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.809] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0201.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c66e0) returned 1 [0201.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675da08) returned 1 [0201.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c27d8) returned 1 Thread: id = 6351 os_tid = 0x2528 [0189.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675db20 [0189.783] wcscpy (in: _Dest=0x675db20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0189.783] wcscat (in: _Dest=0x675db20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0189.783] wcscat (in: _Dest=0x675db20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*" [0189.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6948 [0189.783] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29a0 [0196.881] wcscmp (_String1=".", _String2=".") returned 0 [0196.881] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.881] wcscmp (_String1="..", _String2=".") returned 1 [0196.882] wcscmp (_String1="..", _String2="..") returned 0 [0196.882] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.882] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.882] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67751a8 [0196.882] wcscpy (in: _Dest=0x67751a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0196.882] wcscat (in: _Dest=0x67751a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0196.882] wcscat (in: _Dest=0x67751a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" [0199.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67751a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0199.245] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.245] FindClose (in: hFindFile=0x66d29a0 | out: hFindFile=0x66d29a0) returned 1 [0199.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6948) returned 1 [0199.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675db20) returned 1 [0199.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c28f0) returned 1 Thread: id = 6352 os_tid = 0x252c [0189.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675dc38 [0189.784] wcscpy (in: _Dest=0x675dc38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0189.784] wcscat (in: _Dest=0x675dc38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0189.784] wcscat (in: _Dest=0x675dc38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*" [0189.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6bb0 [0189.784] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0198.623] wcscmp (_String1=".", _String2=".") returned 0 [0198.623] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.623] wcscmp (_String1="..", _String2=".") returned 1 [0198.623] wcscmp (_String1="..", _String2="..") returned 0 [0198.623] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0198.623] wcscmp (_String1="messages.json", _String2=".") returned 1 [0198.623] wcscmp (_String1="messages.json", _String2="..") returned 1 [0198.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674fc10 [0198.624] wcscpy (in: _Dest=0x674fc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0198.624] wcscat (in: _Dest=0x674fc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0198.624] wcscat (in: _Dest=0x674fc10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" [0199.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0199.371] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.371] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0199.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6bb0) returned 1 [0199.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dc38) returned 1 [0199.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2a08) returned 1 Thread: id = 6353 os_tid = 0x2334 [0189.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675dd50 [0189.785] wcscpy (in: _Dest=0x675dd50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0189.785] wcscat (in: _Dest=0x675dd50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0189.785] wcscat (in: _Dest=0x675dd50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*" [0189.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6e18 [0189.785] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x66c6e18 | out: lpFindFileData=0x66c6e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0199.396] wcscmp (_String1=".", _String2=".") returned 0 [0199.396] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c6e18 | out: lpFindFileData=0x66c6e18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.396] wcscmp (_String1="..", _String2=".") returned 1 [0199.397] wcscmp (_String1="..", _String2="..") returned 0 [0199.397] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c6e18 | out: lpFindFileData=0x66c6e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674fae8 [0199.397] wcscpy (in: _Dest=0x674fae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0199.397] wcscat (in: _Dest=0x674fae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0199.397] wcscat (in: _Dest=0x674fae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" [0201.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0201.452] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x66c6e18 | out: lpFindFileData=0x66c6e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.452] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0201.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6e18) returned 1 [0201.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dd50) returned 1 [0201.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b20) returned 1 Thread: id = 6354 os_tid = 0x2410 [0189.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675de68 [0189.786] wcscpy (in: _Dest=0x675de68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0189.786] wcscat (in: _Dest=0x675de68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0189.786] wcscat (in: _Dest=0x675de68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*" [0189.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c7080 [0189.786] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x66c7080 | out: lpFindFileData=0x66c7080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0199.397] wcscmp (_String1=".", _String2=".") returned 0 [0199.397] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c7080 | out: lpFindFileData=0x66c7080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.397] wcscmp (_String1="..", _String2=".") returned 1 [0199.397] wcscmp (_String1="..", _String2="..") returned 0 [0199.397] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c7080 | out: lpFindFileData=0x66c7080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674f9c0 [0199.398] wcscpy (in: _Dest=0x674f9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0199.398] wcscat (in: _Dest=0x674f9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0199.398] wcscat (in: _Dest=0x674f9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" [0201.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110 [0201.455] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c7080 | out: lpFindFileData=0x66c7080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.455] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0201.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c7080) returned 1 [0201.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675de68) returned 1 [0201.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2c38) returned 1 Thread: id = 6355 os_tid = 0x2414 [0189.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675df80 [0189.787] wcscpy (in: _Dest=0x675df80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0189.787] wcscat (in: _Dest=0x675df80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0189.787] wcscat (in: _Dest=0x675df80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*" [0189.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c72e8 [0189.787] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x66c72e8 | out: lpFindFileData=0x66c72e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0199.398] wcscmp (_String1=".", _String2=".") returned 0 [0199.398] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c72e8 | out: lpFindFileData=0x66c72e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.398] wcscmp (_String1="..", _String2=".") returned 1 [0199.398] wcscmp (_String1="..", _String2="..") returned 0 [0199.398] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c72e8 | out: lpFindFileData=0x66c72e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.398] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.398] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674f080 [0199.398] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0199.398] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0199.398] wcscat (in: _Dest=0x674f080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" [0201.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74 [0201.458] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c72e8 | out: lpFindFileData=0x66c72e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.458] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0201.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c72e8) returned 1 [0201.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675df80) returned 1 [0201.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2d50) returned 1 Thread: id = 6356 os_tid = 0x2354 [0189.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675e098 [0189.788] wcscpy (in: _Dest=0x675e098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0189.788] wcscat (in: _Dest=0x675e098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0189.788] wcscat (in: _Dest=0x675e098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*" [0189.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c7550 [0189.788] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x66c7550 | out: lpFindFileData=0x66c7550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0199.398] wcscmp (_String1=".", _String2=".") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c7550 | out: lpFindFileData=0x66c7550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.399] wcscmp (_String1="..", _String2=".") returned 1 [0199.399] wcscmp (_String1="..", _String2="..") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c7550 | out: lpFindFileData=0x66c7550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.399] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.399] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674fd38 [0199.399] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0199.399] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0199.399] wcscat (in: _Dest=0x674fd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" [0201.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674fd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0201.461] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66c7550 | out: lpFindFileData=0x66c7550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.461] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c7550) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e098) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2e68) returned 1 Thread: id = 6357 os_tid = 0x2358 [0189.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675e1b0 [0189.789] wcscpy (in: _Dest=0x675e1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0189.789] wcscat (in: _Dest=0x675e1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0189.789] wcscat (in: _Dest=0x675e1b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*" [0189.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c77b8 [0189.789] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x66c77b8 | out: lpFindFileData=0x66c77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0199.399] wcscmp (_String1=".", _String2=".") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c77b8 | out: lpFindFileData=0x66c77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.399] wcscmp (_String1="..", _String2=".") returned 1 [0199.399] wcscmp (_String1="..", _String2="..") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c77b8 | out: lpFindFileData=0x66c77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.399] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.399] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6750550 [0199.399] wcscpy (in: _Dest=0x6750550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0199.399] wcscat (in: _Dest=0x6750550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0199.400] wcscat (in: _Dest=0x6750550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" [0201.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380 [0201.464] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c77b8 | out: lpFindFileData=0x66c77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.464] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c77b8) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e1b0) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2f80) returned 1 Thread: id = 6358 os_tid = 0x235c [0189.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e2c8 [0189.790] wcscpy (in: _Dest=0x675e2c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0189.790] wcscat (in: _Dest=0x675e2c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0189.790] wcscat (in: _Dest=0x675e2c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*" [0189.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c7a20 [0189.790] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x66c7a20 | out: lpFindFileData=0x66c7a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0199.400] wcscmp (_String1=".", _String2=".") returned 0 [0199.400] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c7a20 | out: lpFindFileData=0x66c7a20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.400] wcscmp (_String1="..", _String2=".") returned 1 [0199.400] wcscmp (_String1="..", _String2="..") returned 0 [0199.400] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c7a20 | out: lpFindFileData=0x66c7a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.400] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.400] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d407b0 [0199.400] wcscpy (in: _Dest=0x3d407b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0199.400] wcscat (in: _Dest=0x3d407b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0199.400] wcscat (in: _Dest=0x3d407b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" [0201.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d407b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15dc [0201.467] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66c7a20 | out: lpFindFileData=0x66c7a20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.467] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c7a20) returned 1 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e2c8) returned 1 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3098) returned 1 Thread: id = 6359 os_tid = 0x2418 [0189.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e3e0 [0189.791] wcscpy (in: _Dest=0x675e3e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0189.791] wcscat (in: _Dest=0x675e3e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0189.791] wcscat (in: _Dest=0x675e3e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*" [0189.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c7c88 [0189.791] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2c60 [0190.427] wcscmp (_String1=".", _String2=".") returned 0 [0190.427] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.428] wcscmp (_String1="..", _String2=".") returned 1 [0190.428] wcscmp (_String1="..", _String2="..") returned 0 [0190.428] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.428] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.428] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d408e8 [0190.428] wcscpy (in: _Dest=0x3d408e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0190.428] wcscat (in: _Dest=0x3d408e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0190.428] wcscat (in: _Dest=0x3d408e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" [0190.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d408e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0190.926] FindNextFileW (in: hFindFile=0x66d2c60, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.926] FindClose (in: hFindFile=0x66d2c60 | out: hFindFile=0x66d2c60) returned 1 [0190.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c7c88) returned 1 [0190.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0190.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b0) returned 1 Thread: id = 6360 os_tid = 0x241c [0189.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x675e4f8 [0189.795] wcscpy (in: _Dest=0x675e4f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0189.795] wcscat (in: _Dest=0x675e4f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0189.795] wcscat (in: _Dest=0x675e4f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*" [0189.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675eab8 [0189.796] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2c20 [0190.429] wcscmp (_String1=".", _String2=".") returned 0 [0190.429] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.429] wcscmp (_String1="..", _String2=".") returned 1 [0190.429] wcscmp (_String1="..", _String2="..") returned 0 [0190.429] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.429] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.429] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67639c0 [0190.429] wcscpy (in: _Dest=0x67639c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0190.429] wcscat (in: _Dest=0x67639c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0190.429] wcscat (in: _Dest=0x67639c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" [0190.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67639c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac [0190.928] FindNextFileW (in: hFindFile=0x66d2c20, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.928] FindClose (in: hFindFile=0x66d2c20 | out: hFindFile=0x66d2c20) returned 1 [0190.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675eab8) returned 1 [0190.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0190.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32c8) returned 1 Thread: id = 6361 os_tid = 0x2530 [0190.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0190.430] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0190.430] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0190.430] wcscat (in: _Dest=0x3dec4e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*" [0190.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ede58 [0190.430] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066a80 [0200.553] wcscmp (_String1=".", _String2=".") returned 0 [0200.553] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.554] wcscmp (_String1="..", _String2=".") returned 1 [0200.554] wcscmp (_String1="..", _String2="..") returned 0 [0200.554] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.554] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.554] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6765898 [0200.554] wcscpy (in: _Dest=0x6765898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0200.554] wcscat (in: _Dest=0x6765898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0200.554] wcscat (in: _Dest=0x6765898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" [0201.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0201.446] FindNextFileW (in: hFindFile=0x3066a80, lpFindFileData=0x66ede58 | out: lpFindFileData=0x66ede58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.446] FindClose (in: hFindFile=0x3066a80 | out: hFindFile=0x3066a80) returned 1 [0201.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ede58) returned 1 [0201.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0201.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c33e0) returned 1 Thread: id = 6362 os_tid = 0x2534 [0190.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0190.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0190.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.432] GetLastError () returned 0x5 [0190.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0190.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 6363 os_tid = 0x2428 [0190.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0190.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0190.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.809] GetLastError () returned 0x5 [0190.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0190.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 6364 os_tid = 0x2538 [0190.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0190.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0193.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x230c [0193.325] GetFileSizeEx (in: hFile=0x230c, lpFileSize=0x9b2f91c | out: lpFileSize=0x9b2f91c*=249) returned 1 [0193.325] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.325] ReadFile (in: hFile=0x230c, lpBuffer=0x9b2f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b2f908, lpOverlapped=0x0 | out: lpBuffer=0x9b2f8f8*, lpNumberOfBytesRead=0x9b2f908*=0x4, lpOverlapped=0x0) returned 1 [0193.327] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0193.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0193.327] NtQuerySystemTime (in: CurrentTime=0x9b2f890 | out: CurrentTime=0x9b2f890*=132482711018100000) returned 0x0 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x661c8535 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0xf9e396e [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x5d12ccb5 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x47bb8828 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x2bf00364 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x162421dd [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x648f914b [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x2e72a9b5 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x22c85590 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x4f3b1bff [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x5bd58c5f [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x1047bb2b [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x61044b01 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x4d89389c [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x4825e597 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x75cf0806 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x7c8dddf3 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x683b79cc [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x64cee53 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x2d1db7ac [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x41c17fdd [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x1ba19b6f [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x6350dd43 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x584a7959 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x1e09bace [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x4a7f301 [0193.327] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x32580dc3 [0193.328] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x402f210f [0193.328] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x7888bcbd [0193.328] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x44f8e0b5 [0193.328] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x706a8fc9 [0193.328] RtlRandomEx (in: Seed=0x9b2f888 | out: Seed=0x9b2f888) returned 0x6dd807ca [0193.335] ReadFile (in: hFile=0x230c, lpBuffer=0x6868160, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x9b2f884, lpOverlapped=0x0 | out: lpBuffer=0x6868160*, lpNumberOfBytesRead=0x9b2f884*=0xf9, lpOverlapped=0x0) returned 1 [0193.335] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.335] WriteFile (in: hFile=0x230c, lpBuffer=0x686bd68*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x9b2f888, lpOverlapped=0x0 | out: lpBuffer=0x686bd68*, lpNumberOfBytesWritten=0x9b2f888*=0xf9, lpOverlapped=0x0) returned 1 [0196.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4e0 [0196.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4b8 [0196.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0196.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x686bd68) returned 1 [0196.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6868160) returned 1 [0196.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0196.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd8b0) returned 1 [0196.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0196.434] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.434] WriteFile (in: hFile=0x230c, lpBuffer=0x67524f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9b2f910, lpOverlapped=0x0 | out: lpBuffer=0x67524f8*, lpNumberOfBytesWritten=0x9b2f910*=0x10c, lpOverlapped=0x0) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4e0) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca580) returned 1 [0197.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca558) returned 1 [0197.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41b30 [0197.525] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" [0197.525] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.ac3a86" [0197.525] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0x9b2f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6769640 [0197.893] FlushFileBuffers (hFile=0x230c) returned 1 [0197.903] CloseHandle (hObject=0x230c) returned 1 [0198.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a86918 [0198.051] wcscpy (in: _Dest=0x6a86918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0198.051] wcscat (in: _Dest=0x6a86918, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0198.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0198.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0199.106] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9b2f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9b2f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.153] CloseHandle (hObject=0x1848) returned 1 [0200.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86918) returned 1 [0200.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67561d8) returned 1 Thread: id = 6365 os_tid = 0x253c [0190.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json")) returned 0x2020 [0190.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0193.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2020 [0193.336] GetFileSizeEx (in: hFile=0x2020, lpFileSize=0x89df984 | out: lpFileSize=0x89df984*=238) returned 1 [0193.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0193.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0193.336] NtQuerySystemTime (in: CurrentTime=0x89df8f8 | out: CurrentTime=0x89df8f8*=132482711018100000) returned 0x0 [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x398ed7bf [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x4107a2b [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x212a85c7 [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x262c1dfd [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0xd0ee461 [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x4b064955 [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x61e303d4 [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x29333c8d [0193.336] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x496ef235 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0xea311f2 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0xa00f2be [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x767c36de [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x2c9b6664 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x593775a [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x2ab6d8d1 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x662ba69 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x2bf00364 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x22c85590 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x4507100 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x4bcf3f1 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x3e41997f [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x6d90ee1 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x58c4e94 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x72b56956 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x68af7064 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x3ceeb490 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x5c182ba2 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x6a845729 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0xc5a04c1 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x4f7e54ed [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x570c51b5 [0193.337] RtlRandomEx (in: Seed=0x89df8f0 | out: Seed=0x89df8f0) returned 0x573a2ec5 [0193.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6959ce8 [0193.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x695d8f0 [0193.346] ReadFile (in: hFile=0x2020, lpBuffer=0x6959ce8, nNumberOfBytesToRead=0xee, lpNumberOfBytesRead=0x89df8ec, lpOverlapped=0x0 | out: lpBuffer=0x6959ce8*, lpNumberOfBytesRead=0x89df8ec*=0xee, lpOverlapped=0x0) returned 1 [0193.348] SetFilePointerEx (in: hFile=0x2020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.348] WriteFile (in: hFile=0x2020, lpBuffer=0x695d8f0*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x89df8f0, lpOverlapped=0x0 | out: lpBuffer=0x695d8f0*, lpNumberOfBytesWritten=0x89df8f0*=0xee, lpOverlapped=0x0) returned 1 [0195.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9080 [0195.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x695d8f0) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959ce8) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff368) returned 1 [0195.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c30 [0195.707] SetFilePointerEx (in: hFile=0x2020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.707] WriteFile (in: hFile=0x2020, lpBuffer=0x69c3958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x89df978, lpOverlapped=0x0 | out: lpBuffer=0x69c3958*, lpNumberOfBytesWritten=0x89df978*=0x10c, lpOverlapped=0x0) returned 1 [0195.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3958) returned 1 [0195.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0195.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0195.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0195.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9080) returned 1 [0195.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0195.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5a8) returned 1 [0195.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0195.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23340 [0195.890] wcscpy (in: _Dest=0x3f23340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" [0195.890] wcscat (in: _Dest=0x3f23340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.ac3a86" [0195.890] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x89df8f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x354340 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x354340) returned 1 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6888138) returned 1 [0196.013] NtQueryInformationFile (in: FileHandle=0x2020, IoStatusBlock=0x89df8c8, FileInformation=0x89df8d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x89df8c8, FileInformation=0x89df8d0) returned 0x0 [0196.013] NtSetInformationFile (FileHandle=0x2020, IoStatusBlock=0x89df8c8, FileInformation=0x89df8d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23340) returned 1 [0196.166] FlushFileBuffers (hFile=0x2020) returned 1 [0196.806] CloseHandle (hObject=0x2020) returned 1 [0197.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e98060 [0198.339] wcscpy (in: _Dest=0x12e98060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0198.339] wcscat (in: _Dest=0x12e98060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\AC3A86-Readme.txt" [0198.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0198.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f7c [0199.828] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x89df90c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x89df90c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.830] CloseHandle (hObject=0x1f7c) returned 1 [0199.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e98060) returned 1 [0199.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756300) returned 1 Thread: id = 6366 os_tid = 0x2540 [0190.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json")) returned 0x2020 [0190.437] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0193.348] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14fc [0193.349] GetFileSizeEx (in: hFile=0x14fc, lpFileSize=0xae1fc54 | out: lpFileSize=0xae1fc54*=253) returned 1 [0193.349] SetFilePointerEx (in: hFile=0x14fc, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.349] ReadFile (in: hFile=0x14fc, lpBuffer=0xae1fc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae1fc40, lpOverlapped=0x0 | out: lpBuffer=0xae1fc30*, lpNumberOfBytesRead=0xae1fc40*=0x4, lpOverlapped=0x0) returned 1 [0193.350] SetFilePointerEx (in: hFile=0x14fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0193.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0193.351] NtQuerySystemTime (in: CurrentTime=0xae1fbc8 | out: CurrentTime=0xae1fbc8*=132482711018256000) returned 0x0 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x4b8a8d64 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x1c22795b [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x691fc2b5 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x2db2b9a4 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x2473f9ee [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x1a65bdd4 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x593775a [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x3a9c34b5 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x2bb82c13 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x591db20c [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0xe973ded [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x3bf01103 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x5af4d6bb [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x139a9c7a [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x1bc44efb [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x6a845729 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x4440b35b [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x5e7b2940 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x1ddfc98e [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x6fd0a4b5 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0xa00f2be [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x6d46fc60 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0xc5a04c1 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x2ba7231a [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x6c6b0f1d [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x4e568ee7 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x377f25c2 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x6fd86d02 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x3a40905d [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0x241150b4 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0xd0ee461 [0193.351] RtlRandomEx (in: Seed=0xae1fbc0 | out: Seed=0xae1fbc0) returned 0xc32721a [0193.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69614f8 [0193.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6965100 [0193.360] ReadFile (in: hFile=0x14fc, lpBuffer=0x69614f8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xae1fbbc, lpOverlapped=0x0 | out: lpBuffer=0x69614f8*, lpNumberOfBytesRead=0xae1fbbc*=0xfd, lpOverlapped=0x0) returned 1 [0193.360] SetFilePointerEx (in: hFile=0x14fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.360] WriteFile (in: hFile=0x14fc, lpBuffer=0x6965100*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xae1fbc0, lpOverlapped=0x0 | out: lpBuffer=0x6965100*, lpNumberOfBytesWritten=0xae1fbc0*=0xfd, lpOverlapped=0x0) returned 1 [0195.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0195.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0195.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0195.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6965100) returned 1 [0195.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69614f8) returned 1 [0195.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 [0195.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe168) returned 1 [0195.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5210 [0195.709] SetFilePointerEx (in: hFile=0x14fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.709] WriteFile (in: hFile=0x14fc, lpBuffer=0x69c3a70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae1fc48, lpOverlapped=0x0 | out: lpBuffer=0x69c3a70*, lpNumberOfBytesWritten=0xae1fc48*=0x10c, lpOverlapped=0x0) returned 1 [0195.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3a70) returned 1 [0195.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0195.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b30) returned 1 [0195.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca238) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23468 [0195.892] wcscpy (in: _Dest=0x3f23468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" [0195.892] wcscat (in: _Dest=0x3f23468, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.ac3a86" [0195.892] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0xae1fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x323c88 [0196.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x323c88) returned 1 [0196.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681f9a0) returned 1 [0196.015] NtQueryInformationFile (in: FileHandle=0x14fc, IoStatusBlock=0xae1fb98, FileInformation=0xae1fba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xae1fb98, FileInformation=0xae1fba0) returned 0x0 [0196.015] NtSetInformationFile (FileHandle=0x14fc, IoStatusBlock=0xae1fb98, FileInformation=0xae1fba0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23468) returned 1 [0196.169] FlushFileBuffers (hFile=0x14fc) returned 1 [0196.806] CloseHandle (hObject=0x14fc) returned 1 [0197.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a88ce8 [0198.324] wcscpy (in: _Dest=0x6a88ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0198.325] wcscat (in: _Dest=0x6a88ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\AC3A86-Readme.txt" [0198.325] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0198.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.190] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xae1fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xae1fbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0200.192] CloseHandle (hObject=0x1848) returned 1 [0200.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a88ce8) returned 1 [0200.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756428) returned 1 Thread: id = 6367 os_tid = 0x2544 [0190.438] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.811] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0194.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd2c [0194.492] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0xb70f7d4 | out: lpFileSize=0xb70f7d4*=256) returned 1 [0194.492] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.492] ReadFile (in: hFile=0xd2c, lpBuffer=0xb70f7b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb70f7c0, lpOverlapped=0x0 | out: lpBuffer=0xb70f7b0*, lpNumberOfBytesRead=0xb70f7c0*=0x4, lpOverlapped=0x0) returned 1 [0194.493] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0194.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0194.494] NtQuerySystemTime (in: CurrentTime=0xb70f748 | out: CurrentTime=0xb70f748*=132482711029644000) returned 0x0 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x42090eb7 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x7342f82f [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x4e6e1627 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x5e065a40 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x6735ef0f [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x1ac46fd4 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x7eb9b9a9 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x3f0226e3 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x696592df [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x499bd293 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x36dd0256 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x1a2a861a [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x1d1ab53a [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x3af69f9d [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x1fb834a4 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x661b5752 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x3988dbbb [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x67102f45 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x696592df [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x12fcf2d6 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x7ef1f27e [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x6564e2b2 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x654a8c65 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x2f088a67 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x16ad3d3a [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x200de624 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x58a8c0dc [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x4016fef7 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x5e065a40 [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x33aa504e [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x71b98ef [0194.494] RtlRandomEx (in: Seed=0xb70f740 | out: Seed=0xb70f740) returned 0x6e05bd11 [0194.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13000060 [0194.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13003c68 [0194.507] ReadFile (in: hFile=0xd2c, lpBuffer=0x13000060, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xb70f73c, lpOverlapped=0x0 | out: lpBuffer=0x13000060*, lpNumberOfBytesRead=0xb70f73c*=0x100, lpOverlapped=0x0) returned 1 [0194.507] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.507] WriteFile (in: hFile=0xd2c, lpBuffer=0x13003c68*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb70f740, lpOverlapped=0x0 | out: lpBuffer=0x13003c68*, lpNumberOfBytesWritten=0xb70f740*=0x100, lpOverlapped=0x0) returned 1 [0196.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0196.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0196.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0196.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13003c68) returned 1 [0196.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13000060) returned 1 [0196.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28268) returned 1 [0196.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60f10) returned 1 [0196.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e40 [0196.853] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.853] WriteFile (in: hFile=0xd2c, lpBuffer=0x6767f80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb70f7c8, lpOverlapped=0x0 | out: lpBuffer=0x6767f80*, lpNumberOfBytesWritten=0xb70f7c8*=0x10c, lpOverlapped=0x0) returned 1 [0199.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767f80) returned 1 [0199.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0199.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0199.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0199.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0199.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0199.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0199.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0199.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac2b0 [0199.674] wcscpy (in: _Dest=0x12eac2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" [0199.674] wcscat (in: _Dest=0x12eac2b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.ac3a86" [0199.674] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0xb70f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6778310 [0199.718] FlushFileBuffers (hFile=0xd2c) returned 1 [0199.730] CloseHandle (hObject=0xd2c) returned 1 [0199.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12eac2b0 [0199.763] wcscpy (in: _Dest=0x12eac2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0199.763] wcscat (in: _Dest=0x12eac2b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\AC3A86-Readme.txt" [0199.763] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0199.763] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12a0 [0199.780] WriteFile (in: hFile=0x12a0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb70f75c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb70f75c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.795] CloseHandle (hObject=0x12a0) returned 1 [0199.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac2b0) returned 1 [0199.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756550) returned 1 Thread: id = 6368 os_tid = 0x2548 [0190.438] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.439] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0193.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b4 [0193.440] GetFileSizeEx (in: hFile=0x19b4, lpFileSize=0xb5cfd5c | out: lpFileSize=0xb5cfd5c*=269) returned 1 [0193.441] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.441] ReadFile (in: hFile=0x19b4, lpBuffer=0xb5cfd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb5cfd48, lpOverlapped=0x0 | out: lpBuffer=0xb5cfd38*, lpNumberOfBytesRead=0xb5cfd48*=0x4, lpOverlapped=0x0) returned 1 [0193.442] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0193.443] NtQuerySystemTime (in: CurrentTime=0xb5cfcd0 | out: CurrentTime=0xb5cfcd0*=132482711019192000) returned 0x0 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x2b1ded3 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x3f00d452 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x6dbb3681 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x6d90ee1 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0xea311f2 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x79e5eede [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x603fc749 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x3409b6eb [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x292da1d4 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x47222426 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0xca0aff9 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x3938f349 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x7eab4cdb [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x35dbfdd6 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x56505267 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x5828ae7a [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x1dc0d4b4 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x2f4310c8 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x33736354 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x6c13ecf0 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x6fb2442a [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x5bfa30d [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x5190c468 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x735c4c8 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x2ac41624 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x6a58e8b4 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x79e5eede [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x752cb8b5 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x5c4b85eb [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x57a91744 [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x4539f6c [0193.443] RtlRandomEx (in: Seed=0xb5cfcc8 | out: Seed=0xb5cfcc8) returned 0x5606848d [0193.452] ReadFile (in: hFile=0x19b4, lpBuffer=0x6a23d28, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0xb5cfcc4, lpOverlapped=0x0 | out: lpBuffer=0x6a23d28*, lpNumberOfBytesRead=0xb5cfcc4*=0x10d, lpOverlapped=0x0) returned 1 [0193.452] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.452] WriteFile (in: hFile=0x19b4, lpBuffer=0x6a27930*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0xb5cfcc8, lpOverlapped=0x0 | out: lpBuffer=0x6a27930*, lpNumberOfBytesWritten=0xb5cfcc8*=0x10d, lpOverlapped=0x0) returned 1 [0195.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cb08 [0195.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cb30 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb30) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a27930) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a23d28) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe948) returned 1 [0195.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0195.718] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.718] WriteFile (in: hFile=0x19b4, lpBuffer=0x69c31b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5cfd50, lpOverlapped=0x0 | out: lpBuffer=0x69c31b0*, lpNumberOfBytesWritten=0xb5cfd50*=0x10c, lpOverlapped=0x0) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b0) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b48) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb30) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb08) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0195.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0195.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23590 [0195.897] wcscpy (in: _Dest=0x3f23590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" [0195.897] wcscat (in: _Dest=0x3f23590, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.ac3a86" [0195.897] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xb5cfcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x324ea8 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x324ea8) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681ce80) returned 1 [0196.016] NtQueryInformationFile (in: FileHandle=0x19b4, IoStatusBlock=0xb5cfca0, FileInformation=0xb5cfca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb5cfca0, FileInformation=0xb5cfca8) returned 0x0 [0196.016] NtSetInformationFile (FileHandle=0x19b4, IoStatusBlock=0xb5cfca0, FileInformation=0xb5cfca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23590) returned 1 [0196.171] FlushFileBuffers (hFile=0x19b4) returned 1 [0196.807] CloseHandle (hObject=0x19b4) returned 1 [0197.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a8ace8 [0198.325] wcscpy (in: _Dest=0x6a8ace8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0198.325] wcscat (in: _Dest=0x6a8ace8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\AC3A86-Readme.txt" [0198.325] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0198.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.195] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb5cfce4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb5cfce4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.197] CloseHandle (hObject=0x1848) returned 1 [0200.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a8ace8) returned 1 [0200.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756678) returned 1 Thread: id = 6369 os_tid = 0x254c [0190.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.440] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0193.453] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb30 [0193.453] GetFileSizeEx (in: hFile=0xb30, lpFileSize=0xafaf78c | out: lpFileSize=0xafaf78c*=332) returned 1 [0193.453] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.453] ReadFile (in: hFile=0xb30, lpBuffer=0xafaf768, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xafaf778, lpOverlapped=0x0 | out: lpBuffer=0xafaf768*, lpNumberOfBytesRead=0xafaf778*=0x4, lpOverlapped=0x0) returned 1 [0193.455] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0193.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0193.456] NtQuerySystemTime (in: CurrentTime=0xafaf700 | out: CurrentTime=0xafaf700*=132482711019348000) returned 0x0 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x42db02f9 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x591782c0 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x468a607e [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x6c22a556 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x3eb11cf8 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x669956d4 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x1a65bdd4 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0xca0aff9 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x49da8400 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x2c675765 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x1f6334cd [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x6d23ef5b [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x7e3829b2 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0xbf7c63c [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x2aeeeee4 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x756f7a38 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x7d5f29f2 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x6dd53416 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x3f26d3b0 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x188688d9 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x1089c285 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x720176e9 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0xe8cea95 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x5ef53b9e [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x41b42066 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0xa4536de [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x4872d57c [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0xc09c5ec [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x6dd53416 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x6e5a3479 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x25ea2827 [0193.456] RtlRandomEx (in: Seed=0xafaf6f8 | out: Seed=0xafaf6f8) returned 0x236580f2 [0193.464] ReadFile (in: hFile=0xb30, lpBuffer=0x6a2b538, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0xafaf6f4, lpOverlapped=0x0 | out: lpBuffer=0x6a2b538*, lpNumberOfBytesRead=0xafaf6f4*=0x14c, lpOverlapped=0x0) returned 1 [0193.465] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.465] WriteFile (in: hFile=0xb30, lpBuffer=0x6a2f140*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xafaf6f8, lpOverlapped=0x0 | out: lpBuffer=0x6a2f140*, lpNumberOfBytesWritten=0xafaf6f8*=0x14c, lpOverlapped=0x0) returned 1 [0195.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cb58 [0195.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cb80 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb80) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2f140) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2b538) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff4d0) returned 1 [0195.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3638 [0195.720] SetFilePointerEx (in: hFile=0xb30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.720] WriteFile (in: hFile=0xb30, lpBuffer=0x69c32c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xafaf780, lpOverlapped=0x0 | out: lpBuffer=0x69c32c8*, lpNumberOfBytesWritten=0xafaf780*=0x10c, lpOverlapped=0x0) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32c8) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3968) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb80) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3638) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cb58) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0195.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca800) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f236b8 [0195.900] wcscpy (in: _Dest=0x3f236b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" [0195.900] wcscat (in: _Dest=0x3f236b8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.ac3a86" [0195.900] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0xafaf6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e63ff0 [0196.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e63ff0) returned 1 [0196.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6820f30) returned 1 [0196.020] NtQueryInformationFile (in: FileHandle=0xb30, IoStatusBlock=0xafaf6d0, FileInformation=0xafaf6d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafaf6d0, FileInformation=0xafaf6d8) returned 0x0 [0196.020] NtSetInformationFile (FileHandle=0xb30, IoStatusBlock=0xafaf6d0, FileInformation=0xafaf6d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f236b8) returned 1 [0196.178] FlushFileBuffers (hFile=0xb30) returned 1 [0196.807] CloseHandle (hObject=0xb30) returned 1 [0197.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a8cce8 [0198.325] wcscpy (in: _Dest=0x6a8cce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0198.325] wcscat (in: _Dest=0x6a8cce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\AC3A86-Readme.txt" [0198.325] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0198.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x217c [0199.939] WriteFile (in: hFile=0x217c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xafaf714, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xafaf714*=0x8b9, lpOverlapped=0x0) returned 1 [0199.941] CloseHandle (hObject=0x217c) returned 1 [0199.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a8cce8) returned 1 [0199.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67567a0) returned 1 Thread: id = 6370 os_tid = 0x2550 [0190.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.441] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0193.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xae8 [0193.478] GetFileSizeEx (in: hFile=0xae8, lpFileSize=0x809fd54 | out: lpFileSize=0x809fd54*=236) returned 1 [0193.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0193.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0193.478] NtQuerySystemTime (in: CurrentTime=0x809fcc8 | out: CurrentTime=0x809fcc8*=132482711019504000) returned 0x0 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x50cd4a68 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x79fee499 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x79a18f16 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x5c4c4821 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x4e937809 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x6a58e8b4 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x46450677 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x7f99750d [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x6dc0bb3c [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x3b38986a [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x25d9850a [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x508b4ea9 [0193.478] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x34f0dfb3 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x58f65f [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x38e25c8f [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x68161300 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x674c6503 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x4c77369d [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x4d23bb23 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x2b09531 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x2596e80a [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x69dbba10 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x33b763f7 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x7caac898 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x2dceebb [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x47104526 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x72a3f026 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x5d1af85e [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x71958a09 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x30d50501 [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x7f24c10b [0193.479] RtlRandomEx (in: Seed=0x809fcc0 | out: Seed=0x809fcc0) returned 0x42ea1493 [0193.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a3a558 [0193.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a3e160 [0193.487] ReadFile (in: hFile=0xae8, lpBuffer=0x6a3a558, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x809fcbc, lpOverlapped=0x0 | out: lpBuffer=0x6a3a558*, lpNumberOfBytesRead=0x809fcbc*=0xec, lpOverlapped=0x0) returned 1 [0193.489] SetFilePointerEx (in: hFile=0xae8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.489] WriteFile (in: hFile=0xae8, lpBuffer=0x6a3e160*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x809fcc0, lpOverlapped=0x0 | out: lpBuffer=0x6a3e160*, lpNumberOfBytesWritten=0x809fcc0*=0xec, lpOverlapped=0x0) returned 1 [0195.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cbf8 [0195.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cc20 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc20) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3e160) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3a558) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fde98) returned 1 [0195.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acfc8 [0195.725] SetFilePointerEx (in: hFile=0xae8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.725] WriteFile (in: hFile=0xae8, lpBuffer=0x69c3610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x809fd48, lpOverlapped=0x0 | out: lpBuffer=0x69c3610*, lpNumberOfBytesWritten=0x809fd48*=0x10c, lpOverlapped=0x0) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3610) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acc98) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc20) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cbf8) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0195.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0195.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23908 [0195.906] wcscpy (in: _Dest=0x3f23908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" [0195.906] wcscat (in: _Dest=0x3f23908, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.ac3a86" [0195.906] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x809fcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x34cc08 [0196.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34cc08) returned 1 [0196.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6821158) returned 1 [0196.021] NtQueryInformationFile (in: FileHandle=0xae8, IoStatusBlock=0x809fc98, FileInformation=0x809fca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x809fc98, FileInformation=0x809fca0) returned 0x0 [0196.021] NtSetInformationFile (FileHandle=0xae8, IoStatusBlock=0x809fc98, FileInformation=0x809fca0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23908) returned 1 [0196.181] FlushFileBuffers (hFile=0xae8) returned 1 [0196.808] CloseHandle (hObject=0xae8) returned 1 [0197.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a90ce8 [0198.326] wcscpy (in: _Dest=0x6a90ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0198.326] wcscat (in: _Dest=0x6a90ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\AC3A86-Readme.txt" [0198.326] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0198.326] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x217c [0199.943] WriteFile (in: hFile=0x217c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x809fcdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x809fcdc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.944] CloseHandle (hObject=0x217c) returned 1 [0199.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a90ce8) returned 1 [0199.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67568c8) returned 1 Thread: id = 6371 os_tid = 0x2554 [0190.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.442] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0193.465] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1278 [0193.465] GetFileSizeEx (in: hFile=0x1278, lpFileSize=0x988fdd4 | out: lpFileSize=0x988fdd4*=256) returned 1 [0193.465] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.466] ReadFile (in: hFile=0x1278, lpBuffer=0x988fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x988fdc0, lpOverlapped=0x0 | out: lpBuffer=0x988fdb0*, lpNumberOfBytesRead=0x988fdc0*=0x4, lpOverlapped=0x0) returned 1 [0193.467] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0193.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0193.467] NtQuerySystemTime (in: CurrentTime=0x988fd48 | out: CurrentTime=0x988fd48*=132482711019504000) returned 0x0 [0193.467] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x53792b4e [0193.467] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x600c10ab [0193.467] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x36ec237d [0193.467] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x69f1b6f7 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x5c972852 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x6f263db5 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0xd012257 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x5bfa30d [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x42b81c8 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x258ce11e [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x413ae76d [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x190f5818 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x9140bf8 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x73a0eab9 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x71958a09 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x7e367135 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x3c5e82ca [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x22a6ae7a [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x5d1af85e [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x58c91249 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x1d5f0ea [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x3d497fb5 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x56505267 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x14bc9892 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x178bf64b [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x2a6e64a4 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x6ccd7647 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x7c5ad5b7 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x67ecfd01 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x177bf536 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0x782ff635 [0193.468] RtlRandomEx (in: Seed=0x988fd40 | out: Seed=0x988fd40) returned 0xdb230e [0193.477] ReadFile (in: hFile=0x1278, lpBuffer=0x6a32d48, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x988fd3c, lpOverlapped=0x0 | out: lpBuffer=0x6a32d48*, lpNumberOfBytesRead=0x988fd3c*=0x100, lpOverlapped=0x0) returned 1 [0193.477] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.477] WriteFile (in: hFile=0x1278, lpBuffer=0x6a36950*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x988fd40, lpOverlapped=0x0 | out: lpBuffer=0x6a36950*, lpNumberOfBytesWritten=0x988fd40*=0x100, lpOverlapped=0x0) returned 1 [0195.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cba8 [0195.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cbd0 [0195.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cbd0) returned 1 [0195.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a36950) returned 1 [0195.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a32d48) returned 1 [0195.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0195.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdb80) returned 1 [0195.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3a88 [0195.722] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.722] WriteFile (in: hFile=0x1278, lpBuffer=0x69c3728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x988fdc8, lpOverlapped=0x0 | out: lpBuffer=0x69c3728*, lpNumberOfBytesWritten=0x988fdc8*=0x10c, lpOverlapped=0x0) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3728) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b18) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cbd0) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3a88) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cba8) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7b0) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0195.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0195.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f237e0 [0195.903] wcscpy (in: _Dest=0x3f237e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" [0195.903] wcscat (in: _Dest=0x3f237e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.ac3a86" [0195.903] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0x988fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3000ba0 [0196.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3000ba0) returned 1 [0196.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6820468) returned 1 [0196.019] NtQueryInformationFile (in: FileHandle=0x1278, IoStatusBlock=0x988fd18, FileInformation=0x988fd20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x988fd18, FileInformation=0x988fd20) returned 0x0 [0196.019] NtSetInformationFile (FileHandle=0x1278, IoStatusBlock=0x988fd18, FileInformation=0x988fd20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f237e0) returned 1 [0196.176] FlushFileBuffers (hFile=0x1278) returned 1 [0196.807] CloseHandle (hObject=0x1278) returned 1 [0197.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a8ece8 [0198.326] wcscpy (in: _Dest=0x6a8ece8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0198.326] wcscat (in: _Dest=0x6a8ece8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\AC3A86-Readme.txt" [0198.326] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0198.326] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x217c [0199.935] WriteFile (in: hFile=0x217c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x988fd5c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x988fd5c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.937] CloseHandle (hObject=0x217c) returned 1 [0199.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a8ece8) returned 1 [0199.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 Thread: id = 6372 os_tid = 0x2558 [0190.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.443] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0193.489] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2200 [0193.490] GetFileSizeEx (in: hFile=0x2200, lpFileSize=0x85ffbb4 | out: lpFileSize=0x85ffbb4*=226) returned 1 [0193.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0193.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0193.490] NtQuerySystemTime (in: CurrentTime=0x85ffb28 | out: CurrentTime=0x85ffb28*=132482711019660000) returned 0x0 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x3cebce10 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2473f9ee [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x5b63af0a [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x5ef50f4f [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x679d8c3c [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2a0074f9 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x48049f36 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x50e5e3f4 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2b236497 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x56054847 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0xe8cea95 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2f4f0cae [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x52497c91 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x25d9850a [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x48049f36 [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0xde9fb9f [0193.490] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x56b4a50a [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x598daeb6 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x5d1702d4 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x177bf536 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x15eb95a4 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x6faccded [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2e2764e8 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x6faccded [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x255ad387 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x7d7d10f6 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x738aadcd [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x711be6c4 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x1871855d [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x6ca59610 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x7c131471 [0193.491] RtlRandomEx (in: Seed=0x85ffb20 | out: Seed=0x85ffb20) returned 0x2a6e64a4 [0193.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a41d68 [0193.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a45ce8 [0193.507] ReadFile (in: hFile=0x2200, lpBuffer=0x6a41d68, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x85ffb1c, lpOverlapped=0x0 | out: lpBuffer=0x6a41d68*, lpNumberOfBytesRead=0x85ffb1c*=0xe2, lpOverlapped=0x0) returned 1 [0193.510] SetFilePointerEx (in: hFile=0x2200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.510] WriteFile (in: hFile=0x2200, lpBuffer=0x6a45ce8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x85ffb20, lpOverlapped=0x0 | out: lpBuffer=0x6a45ce8*, lpNumberOfBytesWritten=0x85ffb20*=0xe2, lpOverlapped=0x0) returned 1 [0195.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cc48 [0195.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cc70 [0195.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc70) returned 1 [0195.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a45ce8) returned 1 [0195.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a41d68) returned 1 [0195.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0195.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe480) returned 1 [0195.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acb18 [0195.727] SetFilePointerEx (in: hFile=0x2200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.727] WriteFile (in: hFile=0x2200, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x85ffba8, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x85ffba8*=0x10c, lpOverlapped=0x0) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc70) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acb18) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc48) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0195.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0195.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23a30 [0195.908] wcscpy (in: _Dest=0x3f23a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" [0195.908] wcscat (in: _Dest=0x3f23a30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.ac3a86" [0195.908] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0x85ffb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x352258 [0196.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x352258) returned 1 [0196.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681dfc0) returned 1 [0196.023] NtQueryInformationFile (in: FileHandle=0x2200, IoStatusBlock=0x85ffaf8, FileInformation=0x85ffb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x85ffaf8, FileInformation=0x85ffb00) returned 0x0 [0196.023] NtSetInformationFile (FileHandle=0x2200, IoStatusBlock=0x85ffaf8, FileInformation=0x85ffb00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a30) returned 1 [0196.186] FlushFileBuffers (hFile=0x2200) returned 1 [0196.808] CloseHandle (hObject=0x2200) returned 1 [0197.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a92ce8 [0198.327] wcscpy (in: _Dest=0x6a92ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0198.327] wcscat (in: _Dest=0x6a92ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\AC3A86-Readme.txt" [0198.327] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0198.327] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.102] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x85ffb3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x85ffb3c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.104] CloseHandle (hObject=0xac4) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a92ce8) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 Thread: id = 6373 os_tid = 0x2568 [0190.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json")) returned 0x2020 [0190.444] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0193.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2334 [0193.510] GetFileSizeEx (in: hFile=0x2334, lpFileSize=0xb06f98c | out: lpFileSize=0xb06f98c*=289) returned 1 [0193.510] SetFilePointerEx (in: hFile=0x2334, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.511] ReadFile (in: hFile=0x2334, lpBuffer=0xb06f968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb06f978, lpOverlapped=0x0 | out: lpBuffer=0xb06f968*, lpNumberOfBytesRead=0xb06f978*=0x4, lpOverlapped=0x0) returned 1 [0193.512] SetFilePointerEx (in: hFile=0x2334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0193.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0193.513] NtQuerySystemTime (in: CurrentTime=0xb06f900 | out: CurrentTime=0xb06f900*=132482711019972000) returned 0x0 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x4ff4dd78 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x5a11e94f [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x72a3f026 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x608cd2ac [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x6ca59610 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x7a178147 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x2fb4952e [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x315635a3 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0xabd457d [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x7f99750d [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x415acd87 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x3cafdccd [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x791555f9 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x4142b87f [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x735c4c8 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x2b19c7a4 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0xb92697a [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x2a993d64 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x63c60d12 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x7e7d2987 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x7be5a351 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x496634b3 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x323aa6a0 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x2aad1038 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x3e2967c3 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0xea7637f [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x5f9f1d23 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x65e1e21e [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x767e089e [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x254d8281 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0xd46a4b6 [0193.513] RtlRandomEx (in: Seed=0xb06f8f8 | out: Seed=0xb06f8f8) returned 0x7daa5410 [0193.522] ReadFile (in: hFile=0x2334, lpBuffer=0x6a498f0, nNumberOfBytesToRead=0x121, lpNumberOfBytesRead=0xb06f8f4, lpOverlapped=0x0 | out: lpBuffer=0x6a498f0*, lpNumberOfBytesRead=0xb06f8f4*=0x121, lpOverlapped=0x0) returned 1 [0193.522] SetFilePointerEx (in: hFile=0x2334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.522] WriteFile (in: hFile=0x2334, lpBuffer=0x6a4d4f8*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0xb06f8f8, lpOverlapped=0x0 | out: lpBuffer=0x6a4d4f8*, lpNumberOfBytesWritten=0xb06f8f8*=0x121, lpOverlapped=0x0) returned 1 [0195.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cc98 [0195.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676ccc0 [0195.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ccc0) returned 1 [0195.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a4d4f8) returned 1 [0195.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a498f0) returned 1 [0195.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0195.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdc58) returned 1 [0195.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acdb8 [0195.729] SetFilePointerEx (in: hFile=0x2334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.729] WriteFile (in: hFile=0x2334, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb06f980, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0xb06f980*=0x10c, lpOverlapped=0x0) returned 1 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ccc0) returned 1 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0195.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cc98) returned 1 [0195.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0195.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0195.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0195.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23b58 [0195.910] wcscpy (in: _Dest=0x3f23b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" [0195.910] wcscat (in: _Dest=0x3f23b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.ac3a86" [0195.910] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xb06f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x34b980 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x34b980) returned 1 [0196.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681db70) returned 1 [0196.024] NtQueryInformationFile (in: FileHandle=0x2334, IoStatusBlock=0xb06f8d0, FileInformation=0xb06f8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb06f8d0, FileInformation=0xb06f8d8) returned 0x0 [0196.024] NtSetInformationFile (FileHandle=0x2334, IoStatusBlock=0xb06f8d0, FileInformation=0xb06f8d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23b58) returned 1 [0196.188] FlushFileBuffers (hFile=0x2334) returned 1 [0196.808] CloseHandle (hObject=0x2334) returned 1 [0197.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a94ce8 [0198.327] wcscpy (in: _Dest=0x6a94ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0198.327] wcscat (in: _Dest=0x6a94ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\AC3A86-Readme.txt" [0198.327] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0198.327] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.106] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb06f914, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb06f914*=0x8b9, lpOverlapped=0x0) returned 1 [0200.108] CloseHandle (hObject=0xac4) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a94ce8) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 Thread: id = 6374 os_tid = 0x2570 [0190.444] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.445] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x115c [0193.523] GetFileSizeEx (in: hFile=0x115c, lpFileSize=0x999faec | out: lpFileSize=0x999faec*=268) returned 1 [0193.523] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.523] ReadFile (in: hFile=0x115c, lpBuffer=0x999fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x999fad8, lpOverlapped=0x0 | out: lpBuffer=0x999fac8*, lpNumberOfBytesRead=0x999fad8*=0x4, lpOverlapped=0x0) returned 1 [0193.525] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0193.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0193.525] NtQuerySystemTime (in: CurrentTime=0x999fa60 | out: CurrentTime=0x999fa60*=132482711019972000) returned 0x0 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x3088b48 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x6f5c3349 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x3ca0e57f [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x5c5b7294 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x1b331434 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x468a607e [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x741a891a [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x6edc6128 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x5c8c3ba1 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x3acfb146 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x674c6503 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x825e43a [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x2275d3c5 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x12fdb103 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x2750152a [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x5948c1f4 [0193.525] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x694f06cc [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x46e12371 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x56225bdf [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x70791d07 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x1f2fe1af [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x367544c6 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x5d6588cf [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x11086af6 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x496634b3 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0xbd9f0dd [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x157dae [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x1871855d [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x65905fa8 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x29edda64 [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x157dae [0193.526] RtlRandomEx (in: Seed=0x999fa58 | out: Seed=0x999fa58) returned 0x4e937809 [0193.534] ReadFile (in: hFile=0x115c, lpBuffer=0x6a51100, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x999fa54, lpOverlapped=0x0 | out: lpBuffer=0x6a51100*, lpNumberOfBytesRead=0x999fa54*=0x10c, lpOverlapped=0x0) returned 1 [0193.534] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.534] WriteFile (in: hFile=0x115c, lpBuffer=0x6a54d08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x999fa58, lpOverlapped=0x0 | out: lpBuffer=0x6a54d08*, lpNumberOfBytesWritten=0x999fa58*=0x10c, lpOverlapped=0x0) returned 1 [0195.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cce8 [0195.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cd10 [0195.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd10) returned 1 [0195.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a54d08) returned 1 [0195.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a51100) returned 1 [0195.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 [0195.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff440) returned 1 [0195.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3246d0 [0195.733] SetFilePointerEx (in: hFile=0x115c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.733] WriteFile (in: hFile=0x115c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x999fae0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x999fae0*=0x10c, lpOverlapped=0x0) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ce8) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd10) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cce8) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0195.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0195.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23c80 [0195.912] wcscpy (in: _Dest=0x3f23c80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" [0195.912] wcscat (in: _Dest=0x3f23c80, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.ac3a86" [0195.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0x999fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x369a80 [0196.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x369a80) returned 1 [0196.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681b050) returned 1 [0196.026] NtQueryInformationFile (in: FileHandle=0x115c, IoStatusBlock=0x999fa30, FileInformation=0x999fa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x999fa30, FileInformation=0x999fa38) returned 0x0 [0196.026] NtSetInformationFile (FileHandle=0x115c, IoStatusBlock=0x999fa30, FileInformation=0x999fa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c80) returned 1 [0196.195] FlushFileBuffers (hFile=0x115c) returned 1 [0196.809] CloseHandle (hObject=0x115c) returned 1 [0197.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a98ce8 [0198.328] wcscpy (in: _Dest=0x6a98ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0198.328] wcscat (in: _Dest=0x6a98ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\AC3A86-Readme.txt" [0198.328] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0198.328] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.109] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x999fa74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x999fa74*=0x8b9, lpOverlapped=0x0) returned 1 [0200.111] CloseHandle (hObject=0xac4) returned 1 [0200.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a98ce8) returned 1 [0200.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 Thread: id = 6375 os_tid = 0x2574 [0190.445] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json")) returned 0x2020 [0190.445] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0193.534] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x220c [0193.535] GetFileSizeEx (in: hFile=0x220c, lpFileSize=0x9d8fe5c | out: lpFileSize=0x9d8fe5c*=234) returned 1 [0193.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0193.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0193.535] NtQuerySystemTime (in: CurrentTime=0x9d8fdd0 | out: CurrentTime=0x9d8fdd0*=132482711020128000) returned 0x0 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x2a061692 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x741a891a [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x73bf5201 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x37c4b12 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x16689418 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x3ca0e57f [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x37bca22d [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x73bf5201 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x655ab741 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x1f2fe1af [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x202c09f8 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x1105a5ab [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x13b71be5 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x46cff340 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x7c7ff430 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x31142f1d [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x4bc739da [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x1d2009a7 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x52c1ce9a [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x5f9f1d23 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0xea7637f [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x7899a5c6 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x38e25c8f [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x3ba27951 [0193.535] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x64bd0ff6 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x4ea22171 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x7c55fb60 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x4d687a75 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x79a18f16 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x6049cb78 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x1b331434 [0193.536] RtlRandomEx (in: Seed=0x9d8fdc8 | out: Seed=0x9d8fdc8) returned 0x2501ac50 [0193.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a58910 [0193.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a5c518 [0193.546] ReadFile (in: hFile=0x220c, lpBuffer=0x6a58910, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x9d8fdc4, lpOverlapped=0x0 | out: lpBuffer=0x6a58910*, lpNumberOfBytesRead=0x9d8fdc4*=0xea, lpOverlapped=0x0) returned 1 [0193.548] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.548] WriteFile (in: hFile=0x220c, lpBuffer=0x6a5c518*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x9d8fdc8, lpOverlapped=0x0 | out: lpBuffer=0x6a5c518*, lpNumberOfBytesWritten=0x9d8fdc8*=0xea, lpOverlapped=0x0) returned 1 [0195.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cd38 [0195.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cd60 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd60) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a5c518) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a58910) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0195.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff098) returned 1 [0195.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85d18 [0195.735] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.735] WriteFile (in: hFile=0x220c, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d8fe50, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x9d8fe50*=0x10c, lpOverlapped=0x0) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d48) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd60) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d18) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd38) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0195.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0195.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6772bf0 [0195.914] wcscpy (in: _Dest=0x6772bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" [0195.914] wcscat (in: _Dest=0x6772bf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.ac3a86" [0195.914] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0x9d8fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x300b1e8 [0196.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300b1e8) returned 1 [0196.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68208b8) returned 1 [0196.029] NtQueryInformationFile (in: FileHandle=0x220c, IoStatusBlock=0x9d8fda0, FileInformation=0x9d8fda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d8fda0, FileInformation=0x9d8fda8) returned 0x0 [0196.029] NtSetInformationFile (FileHandle=0x220c, IoStatusBlock=0x9d8fda0, FileInformation=0x9d8fda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772bf0) returned 1 [0196.201] FlushFileBuffers (hFile=0x220c) returned 1 [0196.809] CloseHandle (hObject=0x220c) returned 1 [0197.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6a9cce8 [0198.329] wcscpy (in: _Dest=0x6a9cce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0198.329] wcscat (in: _Dest=0x6a9cce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\AC3A86-Readme.txt" [0198.329] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0198.329] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.032] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9d8fde4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9d8fde4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.034] CloseHandle (hObject=0xac4) returned 1 [0200.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a9cce8) returned 1 [0200.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758ab8) returned 1 Thread: id = 6376 os_tid = 0x2578 [0190.446] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.446] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0193.549] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x670 [0193.549] GetFileSizeEx (in: hFile=0x670, lpFileSize=0xb84fd7c | out: lpFileSize=0xb84fd7c*=256) returned 1 [0193.549] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.549] ReadFile (in: hFile=0x670, lpBuffer=0xb84fd58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb84fd68, lpOverlapped=0x0 | out: lpBuffer=0xb84fd58*, lpNumberOfBytesRead=0xb84fd68*=0x4, lpOverlapped=0x0) returned 1 [0193.551] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0193.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0193.552] NtQuerySystemTime (in: CurrentTime=0xb84fcf0 | out: CurrentTime=0xb84fcf0*=132482711020284000) returned 0x0 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x4142b87f [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x60c86d48 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x178057d2 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x1f2d1a9 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x1d8ba52c [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x77515de4 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x56ad0331 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x6049cb78 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x16e6c65f [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x561e1999 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x1d82507d [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x530bafe2 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x72b23569 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x3ce74c4f [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x560e53a [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x7e23ce64 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x6a8ef456 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x1089c285 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x6f783e51 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x783b00d3 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x53257c7 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x39a0c421 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x5d6588cf [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x5bd945e5 [0193.552] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x217b7caa [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x46cff340 [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x7f03a47 [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x28940f8a [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x2fee4f34 [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x32f80edb [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x5abc9554 [0193.553] RtlRandomEx (in: Seed=0xb84fce8 | out: Seed=0xb84fce8) returned 0x67d5c645 [0193.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a60120 [0193.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a63d28 [0193.563] ReadFile (in: hFile=0x670, lpBuffer=0x6a60120, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xb84fce4, lpOverlapped=0x0 | out: lpBuffer=0x6a60120*, lpNumberOfBytesRead=0xb84fce4*=0x100, lpOverlapped=0x0) returned 1 [0193.563] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.564] WriteFile (in: hFile=0x670, lpBuffer=0x6a63d28*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb84fce8, lpOverlapped=0x0 | out: lpBuffer=0x6a63d28*, lpNumberOfBytesWritten=0xb84fce8*=0x100, lpOverlapped=0x0) returned 1 [0195.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cd88 [0195.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cdb0 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cdb0) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a63d28) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a60120) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fec18) returned 1 [0195.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85d78 [0195.737] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.737] WriteFile (in: hFile=0x670, lpBuffer=0x675e3e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb84fd70, lpOverlapped=0x0 | out: lpBuffer=0x675e3e0*, lpNumberOfBytesWritten=0xb84fd70*=0x10c, lpOverlapped=0x0) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85da8) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cdb0) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d78) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cd88) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0195.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0195.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774ab8 [0195.917] wcscpy (in: _Dest=0x6774ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" [0195.917] wcscat (in: _Dest=0x6774ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.ac3a86" [0195.917] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0xb84fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776ab8 [0196.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776ab8) returned 1 [0196.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681c190) returned 1 [0196.025] NtQueryInformationFile (in: FileHandle=0x670, IoStatusBlock=0xb84fcc0, FileInformation=0xb84fcc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb84fcc0, FileInformation=0xb84fcc8) returned 0x0 [0196.025] NtSetInformationFile (FileHandle=0x670, IoStatusBlock=0xb84fcc0, FileInformation=0xb84fcc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774ab8) returned 1 [0196.192] FlushFileBuffers (hFile=0x670) returned 1 [0196.809] CloseHandle (hObject=0x670) returned 1 [0197.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a96ce8 [0198.327] wcscpy (in: _Dest=0x6a96ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0198.327] wcscat (in: _Dest=0x6a96ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\AC3A86-Readme.txt" [0198.328] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0198.328] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.099] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb84fd04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb84fd04*=0x8b9, lpOverlapped=0x0) returned 1 [0200.101] CloseHandle (hObject=0xac4) returned 1 [0200.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a96ce8) returned 1 [0200.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758be0) returned 1 Thread: id = 6377 os_tid = 0x257c [0190.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.453] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0193.564] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf74 [0193.565] GetFileSizeEx (in: hFile=0xf74, lpFileSize=0x8f6fe8c | out: lpFileSize=0x8f6fe8c*=210) returned 1 [0193.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0193.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0193.565] NtQuerySystemTime (in: CurrentTime=0x8f6fe00 | out: CurrentTime=0x8f6fe00*=132482711020440000) returned 0x0 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x25513bcb [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x71e232f5 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x25513bcb [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0xd46a4b6 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x3cafdccd [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x74029b6 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x17674d06 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0xb581317 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x37dbc21b [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x3088b48 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x261e57b0 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x3ba27951 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x56d04b23 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x16689418 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x296d5024 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x14b03ce8 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x7dbf1a0f [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x783b00d3 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x14f3f0f0 [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x1c4765ab [0193.565] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x217af43c [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x5b08a095 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x299828e4 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x33b763f7 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x1f9e28af [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x118cd20f [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x6d9c2684 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x58ede27a [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x560e53a [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x11f111f7 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x7899a5c6 [0193.566] RtlRandomEx (in: Seed=0x8f6fdf8 | out: Seed=0x8f6fdf8) returned 0x1964b53d [0193.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a67930 [0193.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a6b538 [0193.576] ReadFile (in: hFile=0xf74, lpBuffer=0x6a67930, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x8f6fdf4, lpOverlapped=0x0 | out: lpBuffer=0x6a67930*, lpNumberOfBytesRead=0x8f6fdf4*=0xd2, lpOverlapped=0x0) returned 1 [0193.579] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.579] WriteFile (in: hFile=0xf74, lpBuffer=0x6a6b538*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x8f6fdf8, lpOverlapped=0x0 | out: lpBuffer=0x6a6b538*, lpNumberOfBytesWritten=0x8f6fdf8*=0xd2, lpOverlapped=0x0) returned 1 [0196.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0196.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a6b538) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a67930) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0196.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe798) returned 1 [0196.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0196.439] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.439] WriteFile (in: hFile=0xf74, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8f6fe80, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x8f6fe80*=0x10c, lpOverlapped=0x0) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0197.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0197.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779770 [0197.535] wcscpy (in: _Dest=0x6779770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" [0197.535] wcscat (in: _Dest=0x6779770, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.ac3a86" [0197.535] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0x8f6fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6778080 [0197.905] FlushFileBuffers (hFile=0xf74) returned 1 [0197.916] CloseHandle (hObject=0xf74) returned 1 [0198.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6768e30 [0198.079] wcscpy (in: _Dest=0x6768e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0198.079] wcscat (in: _Dest=0x6768e30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\AC3A86-Readme.txt" [0198.079] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0198.080] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x185c [0199.107] WriteFile (in: hFile=0x185c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8f6fe14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8f6fe14*=0x8b9, lpOverlapped=0x0) returned 1 [0200.268] CloseHandle (hObject=0x185c) returned 1 [0200.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768e30) returned 1 [0200.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758d08) returned 1 Thread: id = 6378 os_tid = 0x1938 [0190.454] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.454] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0193.579] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0193.580] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0x9c9fd5c | out: lpFileSize=0x9c9fd5c*=271) returned 1 [0193.580] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.580] ReadFile (in: hFile=0x1040, lpBuffer=0x9c9fd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c9fd48, lpOverlapped=0x0 | out: lpBuffer=0x9c9fd38*, lpNumberOfBytesRead=0x9c9fd48*=0x4, lpOverlapped=0x0) returned 1 [0193.582] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0193.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0193.582] NtQuerySystemTime (in: CurrentTime=0x9c9fcd0 | out: CurrentTime=0x9c9fcd0*=132482711020596000) returned 0x0 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0xf451d5b [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x36eb4176 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x3f461323 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0xbd9f0dd [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x381f1ef4 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x47222426 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x37c4b12 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x4e257b8e [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x7e7d2987 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0xc94afb3 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x7b06876e [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0xe58f051 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x6ab4e069 [0193.582] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x7e186a79 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x3db5fc8c [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x6edc6128 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x36192f9e [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x213e6e15 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x4d687a75 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x28902aa4 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x5c49b0dd [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x15d4fbd [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x29427764 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x4b4a1873 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x1cc20fc3 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x4d43dc99 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x3fdfdb0a [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x70791d07 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x1039fcbc [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x353efd1 [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x763315a [0193.583] RtlRandomEx (in: Seed=0x9c9fcc8 | out: Seed=0x9c9fcc8) returned 0x13b71be5 [0193.595] ReadFile (in: hFile=0x1040, lpBuffer=0x6a6f140, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x9c9fcc4, lpOverlapped=0x0 | out: lpBuffer=0x6a6f140*, lpNumberOfBytesRead=0x9c9fcc4*=0x10f, lpOverlapped=0x0) returned 1 [0193.595] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.595] WriteFile (in: hFile=0x1040, lpBuffer=0x6a72d48*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x9c9fcc8, lpOverlapped=0x0 | out: lpBuffer=0x6a72d48*, lpNumberOfBytesWritten=0x9c9fcc8*=0x10f, lpOverlapped=0x0) returned 1 [0195.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cdd8 [0195.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676ce00 [0195.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce00) returned 1 [0195.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a72d48) returned 1 [0195.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a6f140) returned 1 [0195.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0195.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdce8) returned 1 [0195.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85dd8 [0195.740] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.740] WriteFile (in: hFile=0x1040, lpBuffer=0x675e4f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c9fd50, lpOverlapped=0x0 | out: lpBuffer=0x675e4f8*, lpNumberOfBytesWritten=0x9c9fd50*=0x10c, lpOverlapped=0x0) returned 1 [0195.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0195.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e08) returned 1 [0195.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce00) returned 1 [0195.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85dd8) returned 1 [0195.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cdd8) returned 1 [0195.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0195.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0195.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0195.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774be0 [0195.920] wcscpy (in: _Dest=0x6774be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" [0195.920] wcscat (in: _Dest=0x6774be0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.ac3a86" [0195.920] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x9c9fcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776c00 [0196.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776c00) returned 1 [0196.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681e410) returned 1 [0196.027] NtQueryInformationFile (in: FileHandle=0x1040, IoStatusBlock=0x9c9fca0, FileInformation=0x9c9fca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c9fca0, FileInformation=0x9c9fca8) returned 0x0 [0196.027] NtSetInformationFile (FileHandle=0x1040, IoStatusBlock=0x9c9fca0, FileInformation=0x9c9fca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774be0) returned 1 [0196.198] FlushFileBuffers (hFile=0x1040) returned 1 [0196.809] CloseHandle (hObject=0x1040) returned 1 [0197.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6a9ace8 [0198.328] wcscpy (in: _Dest=0x6a9ace8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0198.328] wcscat (in: _Dest=0x6a9ace8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\AC3A86-Readme.txt" [0198.328] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0198.329] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.113] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9c9fce4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9c9fce4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.114] CloseHandle (hObject=0xac4) returned 1 [0200.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a9ace8) returned 1 [0200.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758e30) returned 1 Thread: id = 6379 os_tid = 0x2580 [0190.455] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json")) returned 0x2020 [0190.455] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0193.612] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x910 [0193.612] GetFileSizeEx (in: hFile=0x910, lpFileSize=0x9cefb24 | out: lpFileSize=0x9cefb24*=242) returned 1 [0193.613] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.613] ReadFile (in: hFile=0x910, lpBuffer=0x9cefb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cefb10, lpOverlapped=0x0 | out: lpBuffer=0x9cefb00*, lpNumberOfBytesRead=0x9cefb10*=0x4, lpOverlapped=0x0) returned 1 [0193.615] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0193.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0193.615] NtQuerySystemTime (in: CurrentTime=0x9cefa98 | out: CurrentTime=0x9cefa98*=132482711020908000) returned 0x0 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x44193ab3 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x4307ebda [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x5f36ce74 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0xc32721a [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x56b4a50a [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x29edda64 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x22488330 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x5de9a89b [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x49e33663 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x1e4cbf4 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x43cec36 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x655ab741 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x6e5971f4 [0193.615] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x142ee39a [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x148947f8 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x7fd4dbcd [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x43cec36 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x2b4f9360 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x2429907 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x53426036 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x1ebd7fcf [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x153dc54e [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x1c56d836 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x43c11847 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x19539ab6 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x2138dd0b [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x29343de3 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x2226373e [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x3c15425 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x626a26a7 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x299c4245 [0193.616] RtlRandomEx (in: Seed=0x9cefa90 | out: Seed=0x9cefa90) returned 0x42e17ba6 [0193.628] ReadFile (in: hFile=0x910, lpBuffer=0x6a7e160, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0x9cefa8c, lpOverlapped=0x0 | out: lpBuffer=0x6a7e160*, lpNumberOfBytesRead=0x9cefa8c*=0xf2, lpOverlapped=0x0) returned 1 [0193.628] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.628] WriteFile (in: hFile=0x910, lpBuffer=0x6a81d68*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x9cefa90, lpOverlapped=0x0 | out: lpBuffer=0x6a81d68*, lpNumberOfBytesWritten=0x9cefa90*=0xf2, lpOverlapped=0x0) returned 1 [0195.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676ce28 [0195.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676ce50 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce50) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a81d68) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a7e160) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1408) returned 1 [0195.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85e38 [0195.743] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.743] WriteFile (in: hFile=0x910, lpBuffer=0x675e728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cefb18, lpOverlapped=0x0 | out: lpBuffer=0x675e728*, lpNumberOfBytesWritten=0x9cefb18*=0x10c, lpOverlapped=0x0) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e68) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce50) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e38) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce28) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0195.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0195.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774d08 [0195.924] wcscpy (in: _Dest=0x6774d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" [0195.924] wcscat (in: _Dest=0x6774d08, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.ac3a86" [0195.924] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0x9cefa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776d48 [0196.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776d48) returned 1 [0196.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681f100) returned 1 [0196.030] NtQueryInformationFile (in: FileHandle=0x910, IoStatusBlock=0x9cefa68, FileInformation=0x9cefa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9cefa68, FileInformation=0x9cefa70) returned 0x0 [0196.030] NtSetInformationFile (FileHandle=0x910, IoStatusBlock=0x9cefa68, FileInformation=0x9cefa70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774d08) returned 1 [0196.203] FlushFileBuffers (hFile=0x910) returned 1 [0196.810] CloseHandle (hObject=0x910) returned 1 [0197.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e80060 [0198.334] wcscpy (in: _Dest=0x12e80060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0198.334] wcscat (in: _Dest=0x12e80060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\AC3A86-Readme.txt" [0198.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0198.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.027] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9cefaac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9cefaac*=0x8b9, lpOverlapped=0x0) returned 1 [0200.029] CloseHandle (hObject=0xac4) returned 1 [0200.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e80060) returned 1 [0200.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 Thread: id = 6380 os_tid = 0x2584 [0190.456] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json")) returned 0x2020 [0190.456] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.629] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc78 [0193.629] GetFileSizeEx (in: hFile=0xc78, lpFileSize=0x9a4fe0c | out: lpFileSize=0x9a4fe0c*=230) returned 1 [0193.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef35e8 [0193.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0193.629] NtQuerySystemTime (in: CurrentTime=0x9a4fd80 | out: CurrentTime=0x9a4fd80*=132482711021064000) returned 0x0 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0xdcfd294 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x561c5cef [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x4b054a6c [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x2275d3c5 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x14b3feed [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x1d5f0ea [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x72f96051 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x45a8ae43 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x5bec3a89 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x64477aa2 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x7b5ebb3f [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x34436c6b [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x32caa040 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x21f00bbe [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x390da03 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x1a53a5c8 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x3ce0e95b [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x4ea22171 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x4eab86f7 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x28c1ed24 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x4937e4cd [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x4a5cb0af [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x2c460b99 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x217b7caa [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x363b8888 [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x56225bdf [0193.630] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x10f6787d [0193.631] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x77e0487c [0193.631] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x6c2e62a7 [0193.631] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x766de2e5 [0193.631] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x3b5d5a3b [0193.631] RtlRandomEx (in: Seed=0x9a4fd78 | out: Seed=0x9a4fd78) returned 0x681dc150 [0193.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12e80060 [0193.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12e83c68 [0193.650] ReadFile (in: hFile=0xc78, lpBuffer=0x12e80060, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x9a4fd74, lpOverlapped=0x0 | out: lpBuffer=0x12e80060*, lpNumberOfBytesRead=0x9a4fd74*=0xe6, lpOverlapped=0x0) returned 1 [0193.653] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.653] WriteFile (in: hFile=0xc78, lpBuffer=0x12e83c68*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x9a4fd78, lpOverlapped=0x0 | out: lpBuffer=0x12e83c68*, lpNumberOfBytesWritten=0x9a4fd78*=0xe6, lpOverlapped=0x0) returned 1 [0195.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676ce78 [0195.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cea0 [0195.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cea0) returned 1 [0195.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e83c68) returned 1 [0195.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e80060) returned 1 [0195.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0195.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1258) returned 1 [0195.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85e98 [0195.745] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.745] WriteFile (in: hFile=0xc78, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9a4fe00, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0x9a4fe00*=0x10c, lpOverlapped=0x0) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ec8) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cea0) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e98) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ce78) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0195.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0195.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774e30 [0195.926] wcscpy (in: _Dest=0x6774e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" [0195.926] wcscat (in: _Dest=0x6774e30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.ac3a86" [0195.926] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0x9a4fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776e90 [0196.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776e90) returned 1 [0196.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aae68) returned 1 [0196.031] NtQueryInformationFile (in: FileHandle=0xc78, IoStatusBlock=0x9a4fd50, FileInformation=0x9a4fd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a4fd50, FileInformation=0x9a4fd58) returned 0x0 [0196.031] NtSetInformationFile (FileHandle=0xc78, IoStatusBlock=0x9a4fd50, FileInformation=0x9a4fd58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774e30) returned 1 [0196.206] FlushFileBuffers (hFile=0xc78) returned 1 [0196.810] CloseHandle (hObject=0xc78) returned 1 [0197.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e82060 [0198.334] wcscpy (in: _Dest=0x12e82060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0198.334] wcscat (in: _Dest=0x12e82060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\AC3A86-Readme.txt" [0198.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0198.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.036] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9a4fd94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9a4fd94*=0x8b9, lpOverlapped=0x0) returned 1 [0200.038] CloseHandle (hObject=0xac4) returned 1 [0200.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e82060) returned 1 [0200.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759080) returned 1 Thread: id = 6381 os_tid = 0x2588 [0190.457] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json")) returned 0x2020 [0190.457] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0193.668] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x664 [0193.668] GetFileSizeEx (in: hFile=0x664, lpFileSize=0x9adfd24 | out: lpFileSize=0x9adfd24*=215) returned 1 [0193.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0193.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0193.669] NtQuerySystemTime (in: CurrentTime=0x9adfc98 | out: CurrentTime=0x9adfc98*=132482711021532000) returned 0x0 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x2fa5610c [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x8a6b210 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x4189e5a6 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x1c3b8c1e [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x60e3d74b [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x367b943e [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x5e84efb0 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x3c6c4abc [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x46dcd63e [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x2c651eb1 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x5bb96915 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x6515a007 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x3c7ce622 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x1e5100ba [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x741e5d21 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x280508d1 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x2358d0a5 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x536fa795 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x57513d45 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x790e9a84 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x7fd4dbcd [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x76f09f1f [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x56fa1a48 [0193.669] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x2f8df146 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x3f37d157 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x4adc6d78 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x73cee0c9 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x137cd743 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x72701741 [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x256082bd [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x3ee56e4d [0193.670] RtlRandomEx (in: Seed=0x9adfc90 | out: Seed=0x9adfc90) returned 0x139aeb6 [0193.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12e8f080 [0193.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12e92c88 [0193.678] ReadFile (in: hFile=0x664, lpBuffer=0x12e8f080, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x9adfc8c, lpOverlapped=0x0 | out: lpBuffer=0x12e8f080*, lpNumberOfBytesRead=0x9adfc8c*=0xd7, lpOverlapped=0x0) returned 1 [0193.680] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.680] WriteFile (in: hFile=0x664, lpBuffer=0x12e92c88*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x9adfc90, lpOverlapped=0x0 | out: lpBuffer=0x12e92c88*, lpNumberOfBytesWritten=0x9adfc90*=0xd7, lpOverlapped=0x0) returned 1 [0195.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cec8 [0195.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cef0 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cef0) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e92c88) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e8f080) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0195.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1378) returned 1 [0195.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85ef8 [0195.748] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.749] WriteFile (in: hFile=0x664, lpBuffer=0x6766ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9adfd18, lpOverlapped=0x0 | out: lpBuffer=0x6766ce8*, lpNumberOfBytesWritten=0x9adfd18*=0x10c, lpOverlapped=0x0) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f28) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cef0) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ef8) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cec8) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0195.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0195.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0195.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6774f58 [0195.929] wcscpy (in: _Dest=0x6774f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" [0195.929] wcscat (in: _Dest=0x6774f58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.ac3a86" [0195.929] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.ac3a86", NtPathName=0x9adfc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776fd8 [0196.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776fd8) returned 1 [0196.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a60c8) returned 1 [0196.032] NtQueryInformationFile (in: FileHandle=0x664, IoStatusBlock=0x9adfc68, FileInformation=0x9adfc70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9adfc68, FileInformation=0x9adfc70) returned 0x0 [0196.032] NtSetInformationFile (FileHandle=0x664, IoStatusBlock=0x9adfc68, FileInformation=0x9adfc70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774f58) returned 1 [0196.209] FlushFileBuffers (hFile=0x664) returned 1 [0196.810] CloseHandle (hObject=0x664) returned 1 [0197.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e84060 [0198.335] wcscpy (in: _Dest=0x12e84060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0198.335] wcscat (in: _Dest=0x12e84060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\AC3A86-Readme.txt" [0198.335] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ac3a86-readme.txt")) returned 0xffffffff [0198.335] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.040] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9adfcac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9adfcac*=0x8b9, lpOverlapped=0x0) returned 1 [0200.041] CloseHandle (hObject=0xac4) returned 1 [0200.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e84060) returned 1 [0200.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67591a8) returned 1 Thread: id = 6382 os_tid = 0x258c [0190.458] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.458] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0193.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13bc [0193.693] GetFileSizeEx (in: hFile=0x13bc, lpFileSize=0x9b6f974 | out: lpFileSize=0x9b6f974*=239) returned 1 [0193.693] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.693] ReadFile (in: hFile=0x13bc, lpBuffer=0x9b6f950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b6f960, lpOverlapped=0x0 | out: lpBuffer=0x9b6f950*, lpNumberOfBytesRead=0x9b6f960*=0x4, lpOverlapped=0x0) returned 1 [0193.694] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0193.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0193.695] NtQuerySystemTime (in: CurrentTime=0x9b6f8e8 | out: CurrentTime=0x9b6f8e8*=132482711021688000) returned 0x0 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x20e61063 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x97cbd36 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x553ab1f6 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x963e215 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x3c804d49 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x58c844e2 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x622dbae9 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x72c12cf1 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x3efa9099 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x5e4df2ab [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x1feab2fe [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x5eaf7eb1 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x1df7c6c [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x203f5fab [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x1cf2a1d0 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x36d53d86 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x43d18f4e [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x4ad70f77 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x17ecc6e [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x2a4f6b8 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x3639df24 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x46a88fc0 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x3c804d49 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x2116b405 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x532a4d56 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x6d9e6bae [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x11d48385 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x58c844e2 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x6656a8a8 [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x5ca1c90f [0193.695] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x2fd2d8c9 [0193.696] RtlRandomEx (in: Seed=0x9b6f8e0 | out: Seed=0x9b6f8e0) returned 0x5d9d161e [0193.704] ReadFile (in: hFile=0x13bc, lpBuffer=0x12e9e0a0, nNumberOfBytesToRead=0xef, lpNumberOfBytesRead=0x9b6f8dc, lpOverlapped=0x0 | out: lpBuffer=0x12e9e0a0*, lpNumberOfBytesRead=0x9b6f8dc*=0xef, lpOverlapped=0x0) returned 1 [0193.704] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.704] WriteFile (in: hFile=0x13bc, lpBuffer=0x12ea1ca8*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0x9b6f8e0, lpOverlapped=0x0 | out: lpBuffer=0x12ea1ca8*, lpNumberOfBytesWritten=0x9b6f8e0*=0xef, lpOverlapped=0x0) returned 1 [0195.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cf68 [0195.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cf90 [0195.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf90) returned 1 [0195.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1ca8) returned 1 [0195.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e0a0) returned 1 [0195.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0195.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d17f8) returned 1 [0195.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85fb8 [0195.753] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.753] WriteFile (in: hFile=0x13bc, lpBuffer=0x6766ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9b6f968, lpOverlapped=0x0 | out: lpBuffer=0x6766ab8*, lpNumberOfBytesWritten=0x9b6f968*=0x10c, lpOverlapped=0x0) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fe8) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf90) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fb8) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf68) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0195.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0195.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67751a8 [0195.933] wcscpy (in: _Dest=0x67751a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" [0195.933] wcscat (in: _Dest=0x67751a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.ac3a86" [0195.933] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x9b6f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777268 [0196.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777268) returned 1 [0196.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a3380) returned 1 [0196.035] NtQueryInformationFile (in: FileHandle=0x13bc, IoStatusBlock=0x9b6f8b8, FileInformation=0x9b6f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b6f8b8, FileInformation=0x9b6f8c0) returned 0x0 [0196.035] NtSetInformationFile (FileHandle=0x13bc, IoStatusBlock=0x9b6f8b8, FileInformation=0x9b6f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67751a8) returned 1 [0196.214] FlushFileBuffers (hFile=0x13bc) returned 1 [0196.822] CloseHandle (hObject=0x13bc) returned 1 [0197.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e9c060 [0198.340] wcscpy (in: _Dest=0x12e9c060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0198.340] wcscat (in: _Dest=0x12e9c060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\AC3A86-Readme.txt" [0198.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0198.340] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.116] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9b6f8fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9b6f8fc*=0x8b9, lpOverlapped=0x0) returned 1 [0200.118] CloseHandle (hObject=0xac4) returned 1 [0200.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c060) returned 1 [0200.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67592d0) returned 1 Thread: id = 6383 os_tid = 0x2590 [0190.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json")) returned 0x2020 [0190.459] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0193.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd00 [0193.681] GetFileSizeEx (in: hFile=0xd00, lpFileSize=0x960f8cc | out: lpFileSize=0x960f8cc*=249) returned 1 [0193.681] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.681] ReadFile (in: hFile=0xd00, lpBuffer=0x960f8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x960f8b8, lpOverlapped=0x0 | out: lpBuffer=0x960f8a8*, lpNumberOfBytesRead=0x960f8b8*=0x4, lpOverlapped=0x0) returned 1 [0193.683] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0193.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0193.683] NtQuerySystemTime (in: CurrentTime=0x960f840 | out: CurrentTime=0x960f840*=132482711021532000) returned 0x0 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x2f7f2b27 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x1261d4f9 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x1f5a15b6 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x3efa9099 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x29c301a4 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x2863ce36 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x659224d0 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x41e093d8 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x6da62d9 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x1df7c6c [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x265f2ce5 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x290ef6ff [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x4664733d [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x7e1d54aa [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x2314cf85 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x25553bec [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x6f5e8dd7 [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0xe13479d [0193.683] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x2d1902d [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x3f37d157 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x60946615 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x469583b2 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x3b8b45b9 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x5539635f [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x351f063f [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x2ffadc70 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x7287feb1 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x49c6f646 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x3c7ce622 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x4de823e5 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x4062be83 [0193.684] RtlRandomEx (in: Seed=0x960f838 | out: Seed=0x960f838) returned 0x284162e4 [0193.692] ReadFile (in: hFile=0xd00, lpBuffer=0x12e96890, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x960f834, lpOverlapped=0x0 | out: lpBuffer=0x12e96890*, lpNumberOfBytesRead=0x960f834*=0xf9, lpOverlapped=0x0) returned 1 [0193.692] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.692] WriteFile (in: hFile=0xd00, lpBuffer=0x12e9a498*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x960f838, lpOverlapped=0x0 | out: lpBuffer=0x12e9a498*, lpNumberOfBytesWritten=0x960f838*=0xf9, lpOverlapped=0x0) returned 1 [0195.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cf18 [0195.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cf40 [0195.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf40) returned 1 [0195.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9a498) returned 1 [0195.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e96890) returned 1 [0195.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0195.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1f90) returned 1 [0195.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85f58 [0195.750] SetFilePointerEx (in: hFile=0xd00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.751] WriteFile (in: hFile=0xd00, lpBuffer=0x6766bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x960f8c0, lpOverlapped=0x0 | out: lpBuffer=0x6766bd0*, lpNumberOfBytesWritten=0x960f8c0*=0x10c, lpOverlapped=0x0) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bd0) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f88) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf40) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f58) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cf18) returned 1 [0195.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0195.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0195.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6775080 [0195.931] wcscpy (in: _Dest=0x6775080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" [0195.931] wcscat (in: _Dest=0x6775080, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.ac3a86" [0195.931] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x960f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777120 [0196.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777120) returned 1 [0196.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a7880) returned 1 [0196.033] NtQueryInformationFile (in: FileHandle=0xd00, IoStatusBlock=0x960f810, FileInformation=0x960f818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x960f810, FileInformation=0x960f818) returned 0x0 [0196.033] NtSetInformationFile (FileHandle=0xd00, IoStatusBlock=0x960f810, FileInformation=0x960f818, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775080) returned 1 [0196.211] FlushFileBuffers (hFile=0xd00) returned 1 [0196.810] CloseHandle (hObject=0xd00) returned 1 [0197.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e86060 [0198.335] wcscpy (in: _Dest=0x12e86060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0198.335] wcscat (in: _Dest=0x12e86060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\AC3A86-Readme.txt" [0198.335] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0198.335] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.048] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x960f854, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x960f854*=0x8b9, lpOverlapped=0x0) returned 1 [0200.068] CloseHandle (hObject=0xac4) returned 1 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e86060) returned 1 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67593f8) returned 1 Thread: id = 6384 os_tid = 0x2594 [0190.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json")) returned 0x2020 [0190.460] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2330 [0193.717] GetFileSizeEx (in: hFile=0x2330, lpFileSize=0x950f8dc | out: lpFileSize=0x950f8dc*=264) returned 1 [0193.717] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.717] ReadFile (in: hFile=0x2330, lpBuffer=0x950f8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x950f8c8, lpOverlapped=0x0 | out: lpBuffer=0x950f8b8*, lpNumberOfBytesRead=0x950f8c8*=0x4, lpOverlapped=0x0) returned 1 [0193.718] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0193.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0193.718] NtQuerySystemTime (in: CurrentTime=0x950f850 | out: CurrentTime=0x950f850*=132482711022000000) returned 0x0 [0193.718] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x5fadd6bc [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x2aad1038 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x296bd26e [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x1a82045 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x28ecc5e4 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0xd8024ef [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x40a184d8 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x7286aab9 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x6150764b [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0xcefe570 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x27ebb164 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x38e01b79 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x3f14ca83 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x1803cade [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x699a2255 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x615b710b [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x5539635f [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x1d1f2c63 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x4a20592 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0xe9e82d1 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x64ccc530 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x1f7030a [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x47114ae3 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0xc8bbc4 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x69ee9d34 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x5b782d34 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x29d5bbde [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x74a4a88a [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x284162e4 [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x7f94bbac [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x2713789b [0193.719] RtlRandomEx (in: Seed=0x950f848 | out: Seed=0x950f848) returned 0x5823f375 [0193.727] ReadFile (in: hFile=0x2330, lpBuffer=0x12ead0c0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x950f844, lpOverlapped=0x0 | out: lpBuffer=0x12ead0c0*, lpNumberOfBytesRead=0x950f844*=0x108, lpOverlapped=0x0) returned 1 [0193.727] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.727] WriteFile (in: hFile=0x2330, lpBuffer=0x12eb0cc8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x950f848, lpOverlapped=0x0 | out: lpBuffer=0x12eb0cc8*, lpNumberOfBytesWritten=0x950f848*=0x108, lpOverlapped=0x0) returned 1 [0196.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca210 [0196.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca670 [0196.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0196.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb0cc8) returned 1 [0196.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead0c0) returned 1 [0196.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0196.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d13c0) returned 1 [0196.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b10 [0196.436] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.436] WriteFile (in: hFile=0x2330, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x950f8d0, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0x950f8d0*=0x10c, lpOverlapped=0x0) returned 1 [0199.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0199.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0199.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca210) returned 1 [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0199.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0199.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f898 [0199.101] wcscpy (in: _Dest=0x674f898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" [0199.101] wcscat (in: _Dest=0x674f898, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.ac3a86" [0199.101] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x950f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x67781c8 [0203.398] FlushFileBuffers (hFile=0x2330) returned 1 [0204.027] CloseHandle (hObject=0x2330) returned 1 [0206.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67501d8 [0206.160] wcscpy (in: _Dest=0x67501d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0206.160] wcscat (in: _Dest=0x67501d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\AC3A86-Readme.txt" [0206.161] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0206.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0206.530] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x950f864, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x950f864*=0x8b9, lpOverlapped=0x0) returned 1 [0209.904] CloseHandle (hObject=0x1bf8) returned 1 [0210.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67501d8) returned 1 [0210.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759520) returned 1 Thread: id = 6385 os_tid = 0x2598 [0190.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json")) returned 0x2020 [0190.461] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0193.704] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1510 [0193.705] GetFileSizeEx (in: hFile=0x1510, lpFileSize=0x98dfd44 | out: lpFileSize=0x98dfd44*=292) returned 1 [0193.705] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.705] ReadFile (in: hFile=0x1510, lpBuffer=0x98dfd20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x98dfd30, lpOverlapped=0x0 | out: lpBuffer=0x98dfd20*, lpNumberOfBytesRead=0x98dfd30*=0x4, lpOverlapped=0x0) returned 1 [0193.707] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0193.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0193.707] NtQuerySystemTime (in: CurrentTime=0x98dfcb8 | out: CurrentTime=0x98dfcb8*=132482711021844000) returned 0x0 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x9057ec2 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x5066a6d3 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x205c7fdd [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x70b650ec [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x7c9fdca8 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x2a4f6b8 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x27920cf0 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x5f9e65dc [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x6af4719a [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x3e66ff1c [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x351f063f [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0xa7f8f54 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x382f9755 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x65c51d20 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x3334eeb [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x123ae6fb [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x477024d1 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x11fefad8 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x19501d63 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x4c254e0e [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x73d2c18 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x3e84acc9 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x162ec29a [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x63132efb [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x74eb8c29 [0193.707] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x6624ce9d [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x61debcb0 [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x2e6a4936 [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x3c86d9f1 [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x16a90378 [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x3c125c91 [0193.708] RtlRandomEx (in: Seed=0x98dfcb0 | out: Seed=0x98dfcb0) returned 0x5aa72556 [0193.715] ReadFile (in: hFile=0x1510, lpBuffer=0x12ea58b0, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0x98dfcac, lpOverlapped=0x0 | out: lpBuffer=0x12ea58b0*, lpNumberOfBytesRead=0x98dfcac*=0x124, lpOverlapped=0x0) returned 1 [0193.715] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.715] WriteFile (in: hFile=0x1510, lpBuffer=0x12ea94b8*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x98dfcb0, lpOverlapped=0x0 | out: lpBuffer=0x12ea94b8*, lpNumberOfBytesWritten=0x98dfcb0*=0x124, lpOverlapped=0x0) returned 1 [0195.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cfb8 [0195.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cfe0 [0195.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cfe0) returned 1 [0195.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea94b8) returned 1 [0195.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea58b0) returned 1 [0195.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0195.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0195.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86018 [0195.755] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.755] WriteFile (in: hFile=0x1510, lpBuffer=0x6770ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x98dfd38, lpOverlapped=0x0 | out: lpBuffer=0x6770ab8*, lpNumberOfBytesWritten=0x98dfd38*=0x10c, lpOverlapped=0x0) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770ab8) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86048) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cfe0) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86018) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cfb8) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0195.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0195.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67752d0 [0195.935] wcscpy (in: _Dest=0x67752d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" [0195.935] wcscat (in: _Dest=0x67752d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.ac3a86" [0195.935] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x98dfcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x67773b0 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67773b0) returned 1 [0196.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689f948) returned 1 [0196.036] NtQueryInformationFile (in: FileHandle=0x1510, IoStatusBlock=0x98dfc88, FileInformation=0x98dfc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x98dfc88, FileInformation=0x98dfc90) returned 0x0 [0196.036] NtSetInformationFile (FileHandle=0x1510, IoStatusBlock=0x98dfc88, FileInformation=0x98dfc90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67752d0) returned 1 [0196.246] FlushFileBuffers (hFile=0x1510) returned 1 [0196.811] CloseHandle (hObject=0x1510) returned 1 [0197.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x677a7a0 [0197.682] wcscpy (in: _Dest=0x677a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0197.682] wcscat (in: _Dest=0x677a7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\AC3A86-Readme.txt" [0197.682] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0197.682] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.245] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x98dfccc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x98dfccc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.251] CloseHandle (hObject=0x237c) returned 1 [0198.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a7a0) returned 1 [0198.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759648) returned 1 Thread: id = 6386 os_tid = 0x247c [0190.461] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.462] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0193.727] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc8 [0193.728] GetFileSizeEx (in: hFile=0x1cc8, lpFileSize=0xa2cfd94 | out: lpFileSize=0xa2cfd94*=222) returned 1 [0193.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0193.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0193.728] NtQuerySystemTime (in: CurrentTime=0xa2cfd08 | out: CurrentTime=0xa2cfd08*=132482711022000000) returned 0x0 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x72c12cf1 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x97cbd36 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x53257c7 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x1721dde2 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x6c42ded1 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x7cf9226a [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x14606b00 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x2857ae70 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x5d7732e4 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x230a2ec8 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x501233f0 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x8896865 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x7281c95d [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x14d86420 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x4d78e17d [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x7a1d6907 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x27068fac [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x3cc27be2 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x29d5bbde [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x948b5af [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x3c681529 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x43d18f4e [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x2a956668 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x29c3e3b9 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x3bd79b92 [0193.728] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0xe13479d [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x7281c95d [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x77f0825a [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x41eb27d3 [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x71e2cbfb [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x55dd7361 [0193.729] RtlRandomEx (in: Seed=0xa2cfd00 | out: Seed=0xa2cfd00) returned 0x8c8f581 [0193.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12eb48d0 [0193.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12eb84d8 [0193.737] ReadFile (in: hFile=0x1cc8, lpBuffer=0x12eb48d0, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xa2cfcfc, lpOverlapped=0x0 | out: lpBuffer=0x12eb48d0*, lpNumberOfBytesRead=0xa2cfcfc*=0xde, lpOverlapped=0x0) returned 1 [0193.738] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.739] WriteFile (in: hFile=0x1cc8, lpBuffer=0x12eb84d8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xa2cfd00, lpOverlapped=0x0 | out: lpBuffer=0x12eb84d8*, lpNumberOfBytesWritten=0xa2cfd00*=0xde, lpOverlapped=0x0) returned 1 [0195.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d008 [0195.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d030 [0195.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d030) returned 1 [0195.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb84d8) returned 1 [0195.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb48d0) returned 1 [0195.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0195.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1528) returned 1 [0195.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86078 [0195.758] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.758] WriteFile (in: hFile=0x1cc8, lpBuffer=0x6770bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa2cfd88, lpOverlapped=0x0 | out: lpBuffer=0x6770bd0*, lpNumberOfBytesWritten=0xa2cfd88*=0x10c, lpOverlapped=0x0) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770bd0) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860a8) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d030) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86078) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d008) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0195.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6772d28 [0195.938] wcscpy (in: _Dest=0x6772d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" [0195.938] wcscat (in: _Dest=0x6772d28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.ac3a86" [0195.938] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xa2cfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67774f8 [0197.795] FlushFileBuffers (hFile=0x1cc8) returned 1 [0197.801] CloseHandle (hObject=0x1cc8) returned 1 [0197.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6773478 [0197.904] wcscpy (in: _Dest=0x6773478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0197.904] wcscat (in: _Dest=0x6773478, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0197.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0197.904] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1820 [0199.102] WriteFile (in: hFile=0x1820, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa2cfd1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa2cfd1c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.864] CloseHandle (hObject=0x1820) returned 1 [0199.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773478) returned 1 [0199.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759770) returned 1 Thread: id = 6387 os_tid = 0x2480 [0190.463] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.463] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0193.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x232c [0193.739] GetFileSizeEx (in: hFile=0x232c, lpFileSize=0x5c3fd14 | out: lpFileSize=0x5c3fd14*=265) returned 1 [0193.739] SetFilePointerEx (in: hFile=0x232c, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.739] ReadFile (in: hFile=0x232c, lpBuffer=0x5c3fcf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c3fd00, lpOverlapped=0x0 | out: lpBuffer=0x5c3fcf0*, lpNumberOfBytesRead=0x5c3fd00*=0x4, lpOverlapped=0x0) returned 1 [0193.741] SetFilePointerEx (in: hFile=0x232c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4650 [0193.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0193.741] NtQuerySystemTime (in: CurrentTime=0x5c3fc88 | out: CurrentTime=0x5c3fc88*=132482711022156000) returned 0x0 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x5de6d3b3 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x2c9b9b7f [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x78acd9a [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x5ad799f [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0xef8ca22 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x132995bb [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x6cd656f5 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x18c8db54 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x1f7030a [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x1aabd999 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x6d9e6bae [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x37bb16de [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x3b43ec3e [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x2de3da64 [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x4686c2cb [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x3b43ec3e [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x3538b3fd [0193.741] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x316d86b6 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x45faa4b5 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x6001c926 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x206553cb [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x74f0d128 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x5d7732e4 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0xbac3af7 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x3bd13784 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x5ca1c90f [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x2857ae70 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x4005f58f [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x7db2e612 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x4075cfe3 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x46b57d89 [0193.742] RtlRandomEx (in: Seed=0x5c3fc80 | out: Seed=0x5c3fc80) returned 0x41eb27d3 [0193.751] ReadFile (in: hFile=0x232c, lpBuffer=0x12ebc0e0, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x5c3fc7c, lpOverlapped=0x0 | out: lpBuffer=0x12ebc0e0*, lpNumberOfBytesRead=0x5c3fc7c*=0x109, lpOverlapped=0x0) returned 1 [0193.751] SetFilePointerEx (in: hFile=0x232c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.751] WriteFile (in: hFile=0x232c, lpBuffer=0x12ec0060*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x5c3fc80, lpOverlapped=0x0 | out: lpBuffer=0x12ec0060*, lpNumberOfBytesWritten=0x5c3fc80*=0x109, lpOverlapped=0x0) returned 1 [0196.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0196.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0196.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0196.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec0060) returned 1 [0196.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ebc0e0) returned 1 [0196.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0196.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1d50) returned 1 [0196.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0196.444] SetFilePointerEx (in: hFile=0x232c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.444] WriteFile (in: hFile=0x232c, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c3fd08, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0x5c3fd08*=0x10c, lpOverlapped=0x0) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0197.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0197.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67799c0 [0197.543] wcscpy (in: _Dest=0x67799c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" [0197.543] wcscat (in: _Dest=0x67799c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.ac3a86" [0197.543] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0x5c3fc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777b60 [0197.918] FlushFileBuffers (hFile=0x232c) returned 1 [0197.928] CloseHandle (hObject=0x232c) returned 1 [0198.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6769080 [0198.083] wcscpy (in: _Dest=0x6769080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0198.083] wcscat (in: _Dest=0x6769080, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\AC3A86-Readme.txt" [0198.083] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0198.083] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1860 [0199.108] WriteFile (in: hFile=0x1860, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5c3fc9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5c3fc9c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.271] CloseHandle (hObject=0x1860) returned 1 [0200.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769080) returned 1 [0200.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759898) returned 1 Thread: id = 6388 os_tid = 0x2484 [0190.464] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json")) returned 0x2020 [0190.816] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0194.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c [0194.508] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0x919fa84 | out: lpFileSize=0x919fa84*=286) returned 1 [0194.508] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.508] ReadFile (in: hFile=0x160c, lpBuffer=0x919fa60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x919fa70, lpOverlapped=0x0 | out: lpBuffer=0x919fa60*, lpNumberOfBytesRead=0x919fa70*=0x4, lpOverlapped=0x0) returned 1 [0194.509] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0194.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0194.510] NtQuerySystemTime (in: CurrentTime=0x919f9f8 | out: CurrentTime=0x919f9f8*=132482711029800000) returned 0x0 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x778f218d [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x525b956a [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x7a09100a [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x638da736 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x20fb8729 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x26146124 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x5efae976 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x618a3e83 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x5ee80f31 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x1db33ef0 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x4bd68d4 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x741f41ab [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x70fa16b2 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x450c4c37 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x487d00ed [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x741f41ab [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x4d7896c9 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x503b831b [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x3be91ef4 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x21ff413e [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x12ddf8e4 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x648de742 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x112f7a74 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x1d190630 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x7f47a54f [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x3e571433 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x1f628324 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x530b3163 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x204293fd [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x33766030 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x7bdf7611 [0194.510] RtlRandomEx (in: Seed=0x919f9f0 | out: Seed=0x919f9f0) returned 0x4398b482 [0194.518] ReadFile (in: hFile=0x160c, lpBuffer=0x13007870, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0x919f9ec, lpOverlapped=0x0 | out: lpBuffer=0x13007870*, lpNumberOfBytesRead=0x919f9ec*=0x11e, lpOverlapped=0x0) returned 1 [0194.518] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.518] WriteFile (in: hFile=0x160c, lpBuffer=0x1300b478*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x919f9f0, lpOverlapped=0x0 | out: lpBuffer=0x1300b478*, lpNumberOfBytesWritten=0x919f9f0*=0x11e, lpOverlapped=0x0) returned 1 [0196.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0196.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0196.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0196.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300b478) returned 1 [0196.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13007870) returned 1 [0196.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f282e0) returned 1 [0196.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60ec8) returned 1 [0196.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d80 [0196.857] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.857] WriteFile (in: hFile=0x160c, lpBuffer=0x6766e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x919fa78, lpOverlapped=0x0 | out: lpBuffer=0x6766e00*, lpNumberOfBytesWritten=0x919fa78*=0x10c, lpOverlapped=0x0) returned 1 [0199.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0199.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0199.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0199.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0199.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0199.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0199.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0199.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0199.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac3d8 [0199.677] wcscpy (in: _Dest=0x12eac3d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" [0199.677] wcscat (in: _Dest=0x12eac3d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.ac3a86" [0199.677] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0x919f9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776ab8 [0199.723] FlushFileBuffers (hFile=0x160c) returned 1 [0199.739] CloseHandle (hObject=0x160c) returned 1 [0199.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12eac628 [0199.769] wcscpy (in: _Dest=0x12eac628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0199.769] wcscat (in: _Dest=0x12eac628, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\AC3A86-Readme.txt" [0199.770] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0199.770] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf4 [0199.786] WriteFile (in: hFile=0xdf4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x919fa0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x919fa0c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.800] CloseHandle (hObject=0xdf4) returned 1 [0199.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac628) returned 1 [0199.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67599c0) returned 1 Thread: id = 6389 os_tid = 0x2488 [0190.465] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json")) returned 0x2020 [0190.465] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0193.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd0 [0193.752] GetFileSizeEx (in: hFile=0x1cd0, lpFileSize=0x869fae4 | out: lpFileSize=0x869fae4*=210) returned 1 [0193.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3688 [0193.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0193.752] NtQuerySystemTime (in: CurrentTime=0x869fa58 | out: CurrentTime=0x869fa58*=132482711022312000) returned 0x0 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x45faa4b5 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x73bacc78 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x6fe0ba86 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x659bf710 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x5c4442b6 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x2de3da64 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x5709c086 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x420357f2 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x14606b00 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x38af8c56 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x6e6ad6c1 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x225d5336 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x2ed22ee0 [0193.752] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x9d94a5 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x6c42ded1 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x3a5349d7 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x3654699d [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x20caa6c5 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x6150764b [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x72dfd729 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x4fbbbc24 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x26be6fc9 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x5ced41e1 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x132e4f1c [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x5d0f10cf [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x5d5fcbf2 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x1e56bb56 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x4cf9adb8 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x586b0790 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x71e2cbfb [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x4a20592 [0193.753] RtlRandomEx (in: Seed=0x869fa50 | out: Seed=0x869fa50) returned 0x166b3402 [0193.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ec3c68 [0193.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ec7870 [0193.761] ReadFile (in: hFile=0x1cd0, lpBuffer=0x12ec3c68, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x869fa4c, lpOverlapped=0x0 | out: lpBuffer=0x12ec3c68*, lpNumberOfBytesRead=0x869fa4c*=0xd2, lpOverlapped=0x0) returned 1 [0193.763] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.763] WriteFile (in: hFile=0x1cd0, lpBuffer=0x12ec7870*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x869fa50, lpOverlapped=0x0 | out: lpBuffer=0x12ec7870*, lpNumberOfBytesWritten=0x869fa50*=0xd2, lpOverlapped=0x0) returned 1 [0196.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0196.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0196.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0196.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec7870) returned 1 [0196.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec3c68) returned 1 [0196.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0196.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1450) returned 1 [0196.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0196.441] SetFilePointerEx (in: hFile=0x1cd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.441] WriteFile (in: hFile=0x1cd0, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x869fad8, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0x869fad8*=0x10c, lpOverlapped=0x0) returned 1 [0197.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0197.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0197.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779898 [0197.538] wcscpy (in: _Dest=0x6779898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" [0197.538] wcscat (in: _Dest=0x6779898, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.ac3a86" [0197.538] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.ac3a86", NtPathName=0x869fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777f38 [0197.910] FlushFileBuffers (hFile=0x1cd0) returned 1 [0197.923] CloseHandle (hObject=0x1cd0) returned 1 [0198.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6768f58 [0198.081] wcscpy (in: _Dest=0x6768f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0198.081] wcscat (in: _Dest=0x6768f58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\AC3A86-Readme.txt" [0198.081] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\ac3a86-readme.txt")) returned 0xffffffff [0198.081] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1864 [0199.108] WriteFile (in: hFile=0x1864, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x869fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x869fa6c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.274] CloseHandle (hObject=0x1864) returned 1 [0200.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768f58) returned 1 [0200.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759ae8) returned 1 Thread: id = 6390 os_tid = 0x248c [0190.465] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json")) returned 0x2020 [0190.466] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.763] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1de4 [0193.764] GetFileSizeEx (in: hFile=0x1de4, lpFileSize=0xbaeff64 | out: lpFileSize=0xbaeff64*=234) returned 1 [0193.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f48 [0193.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0193.764] NtQuerySystemTime (in: CurrentTime=0xbaefed8 | out: CurrentTime=0xbaefed8*=132482711022468000) returned 0x0 [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x5002aecd [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x4c64ff13 [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0xf2ff2fd [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x78dacd0f [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x1125468a [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x411021fc [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x78acd9a [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x377401b6 [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x7e0da80d [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x783d8aee [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x2c9b9b7f [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x47114ae3 [0193.764] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x417f69e3 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x50b689e9 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x6624ce9d [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x650a8dc4 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x3916f69c [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0xcfd66f4 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x634c5502 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x19cd7295 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0xbac3af7 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x23d42b3c [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x385deeca [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x553ab1f6 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x6ea0e9f7 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x4f05daef [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x577fcd58 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x6bffe19e [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x4d8aed70 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x22b3cd63 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x7c62a8c3 [0193.765] RtlRandomEx (in: Seed=0xbaefed0 | out: Seed=0xbaefed0) returned 0x3a821b0 [0193.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ecb478 [0193.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ecf080 [0193.773] ReadFile (in: hFile=0x1de4, lpBuffer=0x12ecb478, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xbaefecc, lpOverlapped=0x0 | out: lpBuffer=0x12ecb478*, lpNumberOfBytesRead=0xbaefecc*=0xea, lpOverlapped=0x0) returned 1 [0193.775] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.775] WriteFile (in: hFile=0x1de4, lpBuffer=0x12ecf080*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xbaefed0, lpOverlapped=0x0 | out: lpBuffer=0x12ecf080*, lpNumberOfBytesWritten=0xbaefed0*=0xea, lpOverlapped=0x0) returned 1 [0196.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca260 [0196.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0196.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0196.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ecf080) returned 1 [0196.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ecb478) returned 1 [0196.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0196.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1888) returned 1 [0196.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5360 [0196.454] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.454] WriteFile (in: hFile=0x1de4, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbaeff58, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0xbaeff58*=0x10c, lpOverlapped=0x0) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0197.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0197.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779d38 [0197.550] wcscpy (in: _Dest=0x6779d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" [0197.550] wcscat (in: _Dest=0x6779d38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.ac3a86" [0197.550] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xbaefed0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777640 [0197.927] FlushFileBuffers (hFile=0x1de4) returned 1 [0197.932] CloseHandle (hObject=0x1de4) returned 1 [0198.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67692d0 [0198.087] wcscpy (in: _Dest=0x67692d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0198.087] wcscat (in: _Dest=0x67692d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\AC3A86-Readme.txt" [0198.087] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0198.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x186c [0199.109] WriteFile (in: hFile=0x186c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbaefeec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbaefeec*=0x8b9, lpOverlapped=0x0) returned 1 [0199.836] CloseHandle (hObject=0x186c) returned 1 [0199.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67692d0) returned 1 [0199.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759c10) returned 1 Thread: id = 6391 os_tid = 0x2490 [0190.470] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json")) returned 0x2020 [0190.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0193.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f0 [0193.775] GetFileSizeEx (in: hFile=0x21f0, lpFileSize=0xaaffb94 | out: lpFileSize=0xaaffb94*=324) returned 1 [0193.775] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.775] ReadFile (in: hFile=0x21f0, lpBuffer=0xaaffb70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaaffb80, lpOverlapped=0x0 | out: lpBuffer=0xaaffb70*, lpNumberOfBytesRead=0xaaffb80*=0x4, lpOverlapped=0x0) returned 1 [0193.777] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0193.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0193.777] NtQuerySystemTime (in: CurrentTime=0xaaffb08 | out: CurrentTime=0xaaffb08*=132482711022624000) returned 0x0 [0193.777] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x7b239105 [0193.777] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x5886bc46 [0193.784] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x48797797 [0193.784] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x441d5a86 [0193.784] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x35269640 [0193.784] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x639d8def [0193.784] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x58fa3e56 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x3470c436 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x7e0da80d [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x3a773f36 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x3a5349d7 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x42d5af39 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x4b610a0d [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x19d7e0f0 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x1bc76649 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0xf5b8ec9 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x407dba36 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x4005f58f [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0xbface9e [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x4fc58e61 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x7c9fdca8 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x654207ed [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x43496f3c [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x948b5af [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x5f28ae4b [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x516978ab [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x45c6e67e [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x55526eb8 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x25dd0036 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x68022298 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x44192311 [0193.785] RtlRandomEx (in: Seed=0xaaffb00 | out: Seed=0xaaffb00) returned 0x3dbfe839 [0193.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ed2c88 [0193.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ed6890 [0193.793] ReadFile (in: hFile=0x21f0, lpBuffer=0x12ed2c88, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0xaaffafc, lpOverlapped=0x0 | out: lpBuffer=0x12ed2c88*, lpNumberOfBytesRead=0xaaffafc*=0x144, lpOverlapped=0x0) returned 1 [0193.793] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.793] WriteFile (in: hFile=0x21f0, lpBuffer=0x12ed6890*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xaaffb00, lpOverlapped=0x0 | out: lpBuffer=0x12ed6890*, lpNumberOfBytesWritten=0xaaffb00*=0x144, lpOverlapped=0x0) returned 1 [0195.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d058 [0195.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d080 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d080) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ed6890) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ed2c88) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b58) returned 1 [0195.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a860d8 [0195.763] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.763] WriteFile (in: hFile=0x21f0, lpBuffer=0x6770ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaaffb88, lpOverlapped=0x0 | out: lpBuffer=0x6770ce8*, lpNumberOfBytesWritten=0xaaffb88*=0x10c, lpOverlapped=0x0) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770ce8) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86108) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d080) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860d8) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d058) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0195.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67753f8 [0195.941] wcscpy (in: _Dest=0x67753f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" [0195.941] wcscat (in: _Dest=0x67753f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.ac3a86" [0195.941] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xaaffb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777640 [0196.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777640) returned 1 [0196.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4070) returned 1 [0196.039] NtQueryInformationFile (in: FileHandle=0x21f0, IoStatusBlock=0xaaffad8, FileInformation=0xaaffae0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaaffad8, FileInformation=0xaaffae0) returned 0x0 [0196.040] NtSetInformationFile (FileHandle=0x21f0, IoStatusBlock=0xaaffad8, FileInformation=0xaaffae0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67753f8) returned 1 [0196.249] FlushFileBuffers (hFile=0x21f0) returned 1 [0196.811] CloseHandle (hObject=0x21f0) returned 1 [0197.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x677a8c8 [0197.684] wcscpy (in: _Dest=0x677a8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0197.684] wcscat (in: _Dest=0x677a8c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\AC3A86-Readme.txt" [0197.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0197.684] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.252] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaaffb1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xaaffb1c*=0x8b9, lpOverlapped=0x0) returned 1 [0198.254] CloseHandle (hObject=0x237c) returned 1 [0198.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a8c8) returned 1 [0198.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759d38) returned 1 Thread: id = 6392 os_tid = 0x2494 [0190.471] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json")) returned 0x2020 [0190.471] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0193.794] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2134 [0193.794] GetFileSizeEx (in: hFile=0x2134, lpFileSize=0xbbffa3c | out: lpFileSize=0xbbffa3c*=304) returned 1 [0193.794] SetFilePointerEx (in: hFile=0x2134, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.794] ReadFile (in: hFile=0x2134, lpBuffer=0xbbffa18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbffa28, lpOverlapped=0x0 | out: lpBuffer=0xbbffa18*, lpNumberOfBytesRead=0xbbffa28*=0x4, lpOverlapped=0x0) returned 1 [0193.796] SetFilePointerEx (in: hFile=0x2134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f38 [0193.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0193.796] NtQuerySystemTime (in: CurrentTime=0xbbff9b0 | out: CurrentTime=0xbbff9b0*=132482711022780000) returned 0x0 [0193.796] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x36ba9774 [0193.796] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x5d0f10cf [0193.796] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x26e15994 [0193.796] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x71969aea [0193.796] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x6c76579c [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x429c1543 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x286c3ba4 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x2795ffe4 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x23d48680 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x7741afa4 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x39bb5fcf [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x641bfce6 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0xc3b52eb [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x5eb858d8 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x15d1af1e [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x151b1feb [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x469583b2 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x64c86f1 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x7b15a3 [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x6e9b2b2c [0193.797] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x230a2ec8 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x31415374 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x74f0d128 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x14ce7a02 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x72dfd729 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x5709c086 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x783d8aee [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x428e8d9a [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x70d3432d [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0xc8bbc4 [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x6e89cacd [0193.798] RtlRandomEx (in: Seed=0xbbff9a8 | out: Seed=0xbbff9a8) returned 0x516978ab [0193.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12eda498 [0193.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ede0a0 [0193.810] ReadFile (in: hFile=0x2134, lpBuffer=0x12eda498, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0xbbff9a4, lpOverlapped=0x0 | out: lpBuffer=0x12eda498*, lpNumberOfBytesRead=0xbbff9a4*=0x130, lpOverlapped=0x0) returned 1 [0193.810] SetFilePointerEx (in: hFile=0x2134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.810] WriteFile (in: hFile=0x2134, lpBuffer=0x12ede0a0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0xbbff9a8, lpOverlapped=0x0 | out: lpBuffer=0x12ede0a0*, lpNumberOfBytesWritten=0xbbff9a8*=0x130, lpOverlapped=0x0) returned 1 [0196.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0196.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0196.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0196.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ede0a0) returned 1 [0196.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eda498) returned 1 [0196.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0196.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1eb8) returned 1 [0196.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5420 [0196.457] SetFilePointerEx (in: hFile=0x2134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.458] WriteFile (in: hFile=0x2134, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbffa30, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xbbffa30*=0x10c, lpOverlapped=0x0) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0197.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0197.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0197.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0197.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779f88 [0197.556] wcscpy (in: _Dest=0x6779f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" [0197.556] wcscat (in: _Dest=0x6779f88, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.ac3a86" [0197.556] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xbbff9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x67773b0 [0197.936] FlushFileBuffers (hFile=0x2134) returned 1 [0197.945] CloseHandle (hObject=0x2134) returned 1 [0198.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6769648 [0198.092] wcscpy (in: _Dest=0x6769648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0198.092] wcscat (in: _Dest=0x6769648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\AC3A86-Readme.txt" [0198.092] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0198.093] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc40 [0199.110] WriteFile (in: hFile=0xc40, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbbff9c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbbff9c4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.845] CloseHandle (hObject=0xc40) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769648) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759e60) returned 1 Thread: id = 6393 os_tid = 0x2498 [0190.472] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0190.472] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0193.810] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914 [0193.811] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0x9dcfdcc | out: lpFileSize=0x9dcfdcc*=223) returned 1 [0193.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0193.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0193.811] NtQuerySystemTime (in: CurrentTime=0x9dcfd40 | out: CurrentTime=0x9dcfd40*=132482711022936000) returned 0x0 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x4c6c25ff [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x6773c883 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x261a91b [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x39dbe67f [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x3691b40 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x7eec04e7 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x2e1092b2 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0xc3b4dd9 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x4ceb9637 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x58e33974 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x7728e7ee [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x77b761c4 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x6664b087 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x51068104 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x29099563 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x26e1ecbc [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x5de1f8a1 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x28168a24 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x7b14f586 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x469c239c [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x276e2f39 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x7837462a [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x4f23be70 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x69df7693 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x22b63999 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x26ea9ce4 [0193.811] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x62968eed [0193.812] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x6f7c9bd8 [0193.812] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x478ef5e [0193.812] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x5a2a225a [0193.812] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0xc23754f [0193.812] RtlRandomEx (in: Seed=0x9dcfd38 | out: Seed=0x9dcfd38) returned 0x56ada348 [0193.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ee1ca8 [0193.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ee58b0 [0193.822] ReadFile (in: hFile=0x1914, lpBuffer=0x12ee1ca8, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x9dcfd34, lpOverlapped=0x0 | out: lpBuffer=0x12ee1ca8*, lpNumberOfBytesRead=0x9dcfd34*=0xdf, lpOverlapped=0x0) returned 1 [0193.825] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.825] WriteFile (in: hFile=0x1914, lpBuffer=0x12ee58b0*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x9dcfd38, lpOverlapped=0x0 | out: lpBuffer=0x12ee58b0*, lpNumberOfBytesWritten=0x9dcfd38*=0xdf, lpOverlapped=0x0) returned 1 [0195.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d0a8 [0195.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d0d0 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d0d0) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ee58b0) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ee1ca8) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d19f0) returned 1 [0195.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86138 [0195.765] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.766] WriteFile (in: hFile=0x1914, lpBuffer=0x6770e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9dcfdc0, lpOverlapped=0x0 | out: lpBuffer=0x6770e00*, lpNumberOfBytesWritten=0x9dcfdc0*=0x10c, lpOverlapped=0x0) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770e00) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86168) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d0d0) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86138) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d0a8) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0195.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0195.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6772e60 [0195.943] wcscpy (in: _Dest=0x6772e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" [0195.944] wcscat (in: _Dest=0x6772e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.ac3a86" [0195.944] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x9dcfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777788 [0196.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777788) returned 1 [0196.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a7430) returned 1 [0196.038] NtQueryInformationFile (in: FileHandle=0x1914, IoStatusBlock=0x9dcfd10, FileInformation=0x9dcfd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dcfd10, FileInformation=0x9dcfd18) returned 0x0 [0196.038] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0x9dcfd10, FileInformation=0x9dcfd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772e60) returned 1 [0196.291] FlushFileBuffers (hFile=0x1914) returned 1 [0196.822] CloseHandle (hObject=0x1914) returned 1 [0197.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a861c8 [0197.746] wcscpy (in: _Dest=0x6a861c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0197.746] wcscat (in: _Dest=0x6a861c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0197.746] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0197.746] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.269] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9dcfd54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9dcfd54*=0x8b9, lpOverlapped=0x0) returned 1 [0198.271] CloseHandle (hObject=0x237c) returned 1 [0198.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a861c8) returned 1 [0198.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759f88) returned 1 Thread: id = 6394 os_tid = 0x249c [0190.473] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json")) returned 0x2020 [0190.473] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0193.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cec [0193.826] GetFileSizeEx (in: hFile=0x1cec, lpFileSize=0x800fe54 | out: lpFileSize=0x800fe54*=222) returned 1 [0193.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3908 [0193.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0193.827] NtQuerySystemTime (in: CurrentTime=0x800fdc8 | out: CurrentTime=0x800fdc8*=132482711023092000) returned 0x0 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x2304cc13 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x1671c8c9 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x1169f30c [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x336c1811 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3c6b3b8c [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x6cdd9c02 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3a4fbd4a [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x2881abb9 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3cc27be2 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x4a56cb92 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x7c5425b3 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x15d9a980 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x641e1aa5 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x1dac7966 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x6e6ad6c1 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x58e33974 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3436c8 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x1367a774 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x702115af [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x5479eeed [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x2df481d8 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3e2da163 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x6d55f3ae [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0xd38f20d [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x28f0cc96 [0193.827] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x1e53949 [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x62664e8a [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x297459d0 [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x4ea827aa [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x3a0ec988 [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0x5b743191 [0193.828] RtlRandomEx (in: Seed=0x800fdc0 | out: Seed=0x800fdc0) returned 0xca75bc2 [0193.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ee94b8 [0193.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12eed0c0 [0193.838] ReadFile (in: hFile=0x1cec, lpBuffer=0x12ee94b8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x800fdbc, lpOverlapped=0x0 | out: lpBuffer=0x12ee94b8*, lpNumberOfBytesRead=0x800fdbc*=0xde, lpOverlapped=0x0) returned 1 [0193.840] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.840] WriteFile (in: hFile=0x1cec, lpBuffer=0x12eed0c0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x800fdc0, lpOverlapped=0x0 | out: lpBuffer=0x12eed0c0*, lpNumberOfBytesWritten=0x800fdc0*=0xde, lpOverlapped=0x0) returned 1 [0196.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0196.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0196.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0196.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eed0c0) returned 1 [0196.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ee94b8) returned 1 [0196.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0196.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1d08) returned 1 [0196.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef59c0 [0196.447] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.447] WriteFile (in: hFile=0x1cec, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x800fe48, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0x800fe48*=0x10c, lpOverlapped=0x0) returned 1 [0197.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0197.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0197.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0197.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0197.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0197.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0197.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0197.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0197.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779ae8 [0197.546] wcscpy (in: _Dest=0x6779ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" [0197.546] wcscat (in: _Dest=0x6779ae8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.ac3a86" [0197.546] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0x800fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777a18 [0197.929] FlushFileBuffers (hFile=0x1cec) returned 1 [0197.938] CloseHandle (hObject=0x1cec) returned 1 [0198.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67693f8 [0198.088] wcscpy (in: _Dest=0x67693f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0198.088] wcscat (in: _Dest=0x67693f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\AC3A86-Readme.txt" [0198.089] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0198.089] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xde8 [0199.109] WriteFile (in: hFile=0xde8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x800fddc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x800fddc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.842] CloseHandle (hObject=0xde8) returned 1 [0199.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67693f8) returned 1 [0199.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a0b0) returned 1 Thread: id = 6395 os_tid = 0x24a0 [0190.474] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json")) returned 0x2020 [0190.474] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f8 [0193.842] GetFileSizeEx (in: hFile=0x20f8, lpFileSize=0x957fa04 | out: lpFileSize=0x957fa04*=295) returned 1 [0193.842] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.842] ReadFile (in: hFile=0x20f8, lpBuffer=0x957f9e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x957f9f0, lpOverlapped=0x0 | out: lpBuffer=0x957f9e0*, lpNumberOfBytesRead=0x957f9f0*=0x4, lpOverlapped=0x0) returned 1 [0193.844] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b88 [0193.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0193.844] NtQuerySystemTime (in: CurrentTime=0x957f978 | out: CurrentTime=0x957f978*=132482711023248000) returned 0x0 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x78943bf8 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x3e679dab [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x501233f0 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x5ce07c16 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x33c2abf7 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x77587a4d [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x3f535d06 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x67ca84a7 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x1f119d32 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x7fcf2fa [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x6af5d42b [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x4215591c [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x20f871d9 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x3ab6a0f8 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x59038f87 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x285d78a6 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0xa179f58 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x4baa78f3 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x2d633aef [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x65308644 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x27c0d8a4 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x4d0fdb1d [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x176f6fdb [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x5829c925 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x55b08202 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x371b2aa6 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x468ce8e9 [0193.845] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x1261d4f9 [0193.846] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x5a9cdd37 [0193.846] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x5118c6fd [0193.846] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x634a1db [0193.846] RtlRandomEx (in: Seed=0x957f970 | out: Seed=0x957f970) returned 0x4c4201ee [0193.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ef0cc8 [0193.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ef48d0 [0193.857] ReadFile (in: hFile=0x20f8, lpBuffer=0x12ef0cc8, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0x957f96c, lpOverlapped=0x0 | out: lpBuffer=0x12ef0cc8*, lpNumberOfBytesRead=0x957f96c*=0x127, lpOverlapped=0x0) returned 1 [0193.857] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.857] WriteFile (in: hFile=0x20f8, lpBuffer=0x12ef48d0*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x957f970, lpOverlapped=0x0 | out: lpBuffer=0x12ef48d0*, lpNumberOfBytesWritten=0x957f970*=0x127, lpOverlapped=0x0) returned 1 [0196.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0196.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef48d0) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef0cc8) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0196.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1690) returned 1 [0196.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5300 [0196.452] SetFilePointerEx (in: hFile=0x20f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.452] WriteFile (in: hFile=0x20f8, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x957f9f8, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0x957f9f8*=0x10c, lpOverlapped=0x0) returned 1 [0197.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0197.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0197.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0197.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779c10 [0197.548] wcscpy (in: _Dest=0x6779c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" [0197.548] wcscat (in: _Dest=0x6779c10, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.ac3a86" [0197.548] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0x957f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x67778d0 [0197.933] FlushFileBuffers (hFile=0x20f8) returned 1 [0197.943] CloseHandle (hObject=0x20f8) returned 1 [0198.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6769520 [0198.090] wcscpy (in: _Dest=0x6769520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0198.090] wcscat (in: _Dest=0x6769520, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\AC3A86-Readme.txt" [0198.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0198.091] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x161c [0199.109] WriteFile (in: hFile=0x161c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x957f98c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x957f98c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.839] CloseHandle (hObject=0x161c) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769520) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a1d8) returned 1 Thread: id = 6396 os_tid = 0x24a4 [0190.475] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json")) returned 0x2020 [0190.475] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f0 [0193.858] GetFileSizeEx (in: hFile=0x20f0, lpFileSize=0xb3dfa94 | out: lpFileSize=0xb3dfa94*=234) returned 1 [0193.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0193.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0193.858] NtQuerySystemTime (in: CurrentTime=0xb3dfa08 | out: CurrentTime=0xb3dfa08*=132482711023404000) returned 0x0 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x4a50c81 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0xab441ee [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x4adc6d78 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x50c2f23b [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x3d027444 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x9da36ac [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x7062e735 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x293d0a84 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x35efa24e [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x7ab714ae [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x1f680b51 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x1938113c [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x7996db93 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x2fa0df1d [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x25f4d254 [0193.858] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x48815c3c [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x57f066b5 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x35d3d2f3 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x1d1c188d [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x7ce818cf [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x18a5e299 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x782d35c4 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x20170010 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x235bdcfd [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x44d62d82 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x7ced8620 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x164cb67a [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x2e87fe7d [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x277a8a33 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x6775971b [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x5a7fbbc2 [0193.859] RtlRandomEx (in: Seed=0xb3dfa00 | out: Seed=0xb3dfa00) returned 0x6a5268c5 [0193.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12ef84d8 [0193.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12efc0e0 [0193.869] ReadFile (in: hFile=0x20f0, lpBuffer=0x12ef84d8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xb3df9fc, lpOverlapped=0x0 | out: lpBuffer=0x12ef84d8*, lpNumberOfBytesRead=0xb3df9fc*=0xea, lpOverlapped=0x0) returned 1 [0193.872] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.872] WriteFile (in: hFile=0x20f0, lpBuffer=0x12efc0e0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xb3dfa00, lpOverlapped=0x0 | out: lpBuffer=0x12efc0e0*, lpNumberOfBytesWritten=0xb3dfa00*=0xea, lpOverlapped=0x0) returned 1 [0195.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d0f8 [0195.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d120 [0195.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d120) returned 1 [0195.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efc0e0) returned 1 [0195.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef84d8) returned 1 [0195.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0195.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1b10) returned 1 [0195.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86198 [0195.771] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.771] WriteFile (in: hFile=0x20f0, lpBuffer=0x6770f18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb3dfa88, lpOverlapped=0x0 | out: lpBuffer=0x6770f18*, lpNumberOfBytesWritten=0xb3dfa88*=0x10c, lpOverlapped=0x0) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770f18) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a861c8) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d120) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86198) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d0f8) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0195.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0195.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0195.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6775520 [0195.946] wcscpy (in: _Dest=0x6775520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" [0195.946] wcscat (in: _Dest=0x6775520, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.ac3a86" [0195.946] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0xb3dfa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x67778d0 [0196.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67778d0) returned 1 [0196.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a37d0) returned 1 [0196.045] NtQueryInformationFile (in: FileHandle=0x20f0, IoStatusBlock=0xb3df9d8, FileInformation=0xb3df9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb3df9d8, FileInformation=0xb3df9e0) returned 0x0 [0196.045] NtSetInformationFile (FileHandle=0x20f0, IoStatusBlock=0xb3df9d8, FileInformation=0xb3df9e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775520) returned 1 [0196.251] FlushFileBuffers (hFile=0x20f0) returned 1 [0196.811] CloseHandle (hObject=0x20f0) returned 1 [0197.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6782ab8 [0198.318] wcscpy (in: _Dest=0x6782ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0198.318] wcscat (in: _Dest=0x6782ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\AC3A86-Readme.txt" [0198.318] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0198.318] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.156] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb3dfa1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb3dfa1c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.160] CloseHandle (hObject=0x1848) returned 1 [0200.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6782ab8) returned 1 [0200.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a300) returned 1 Thread: id = 6397 os_tid = 0x24a8 [0190.476] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json")) returned 0x2020 [0190.476] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0193.872] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc [0193.873] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0xc49f8bc | out: lpFileSize=0xc49f8bc*=232) returned 1 [0193.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3818 [0193.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0193.873] NtQuerySystemTime (in: CurrentTime=0xc49f830 | out: CurrentTime=0xc49f830*=132482711023560000) returned 0x0 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x5c4fe85e [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x1b1931ef [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x7ad002e0 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x2b670bb6 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x7036ea2e [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x4f8dedb6 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x72a52c07 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0xa864d74 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x2694eb64 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x7ed21713 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x3470c436 [0193.873] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0xf0978d6 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0xcd237eb [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x3e61fe9f [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x2b670bb6 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0xf3d7b8d [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x49d06296 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x788a7618 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x3a701af3 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x593c843 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x479a6528 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x715580b5 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x153a605c [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x5f208b76 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x740645d5 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x39624828 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x7724e2e9 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x62edeb3b [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x1c238878 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x4380f7b6 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x5806750 [0193.874] RtlRandomEx (in: Seed=0xc49f828 | out: Seed=0xc49f828) returned 0x634c5502 [0193.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f00060 [0193.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f03c68 [0193.890] ReadFile (in: hFile=0xefc, lpBuffer=0x12f00060, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xc49f824, lpOverlapped=0x0 | out: lpBuffer=0x12f00060*, lpNumberOfBytesRead=0xc49f824*=0xe8, lpOverlapped=0x0) returned 1 [0193.898] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.898] WriteFile (in: hFile=0xefc, lpBuffer=0x12f03c68*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xc49f828, lpOverlapped=0x0 | out: lpBuffer=0x12f03c68*, lpNumberOfBytesWritten=0xc49f828*=0xe8, lpOverlapped=0x0) returned 1 [0196.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0196.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0196.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0196.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f03c68) returned 1 [0196.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f00060) returned 1 [0196.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0196.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1f00) returned 1 [0196.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53c0 [0196.456] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.456] WriteFile (in: hFile=0xefc, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc49f8b0, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0xc49f8b0*=0x10c, lpOverlapped=0x0) returned 1 [0197.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0197.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0197.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779e60 [0197.553] wcscpy (in: _Dest=0x6779e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" [0197.553] wcscat (in: _Dest=0x6779e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.ac3a86" [0197.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xc49f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6777788 [0198.278] FlushFileBuffers (hFile=0xefc) returned 1 [0200.360] CloseHandle (hObject=0xefc) returned 1 [0202.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12eac060 [0202.288] wcscpy (in: _Dest=0x12eac060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0202.288] wcscat (in: _Dest=0x12eac060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\AC3A86-Readme.txt" [0202.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0202.288] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1198 [0203.403] WriteFile (in: hFile=0x1198, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc49f844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc49f844*=0x8b9, lpOverlapped=0x0) returned 1 [0204.701] CloseHandle (hObject=0x1198) returned 1 [0206.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac060) returned 1 [0206.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a428) returned 1 Thread: id = 6398 os_tid = 0x24ac [0190.477] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0190.477] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0193.898] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0193.899] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0x848fb6c | out: lpFileSize=0x848fb6c*=258) returned 1 [0193.899] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.899] ReadFile (in: hFile=0x1448, lpBuffer=0x848fb48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x848fb58, lpOverlapped=0x0 | out: lpBuffer=0x848fb48*, lpNumberOfBytesRead=0x848fb58*=0x4, lpOverlapped=0x0) returned 1 [0193.901] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0193.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0193.902] NtQuerySystemTime (in: CurrentTime=0x848fae0 | out: CurrentTime=0x848fae0*=132482711023716000) returned 0x0 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x71f7f330 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x30d137a8 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x114a15ed [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x2455c7cf [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x31c045e5 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x266a12a4 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x4df432a [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x40ee94ee [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x1b9beb0d [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x54c935d6 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x52912b36 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x4f59112d [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x643b203 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x27638643 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x52124c60 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x524af792 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x183a7cf2 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x2581c034 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x1f1fb0f7 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x6f2250b9 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x224bf588 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x5bde52d [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x38a75f5 [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x33a7c32d [0193.902] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x484182f8 [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x7b90a2eb [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x73648f5c [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x2f9652b2 [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x7682c549 [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x2ace2091 [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x7b0e8abe [0193.903] RtlRandomEx (in: Seed=0x848fad8 | out: Seed=0x848fad8) returned 0x61c3c41b [0193.913] ReadFile (in: hFile=0x1448, lpBuffer=0x12f07870, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x848fad4, lpOverlapped=0x0 | out: lpBuffer=0x12f07870*, lpNumberOfBytesRead=0x848fad4*=0x102, lpOverlapped=0x0) returned 1 [0193.913] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.913] WriteFile (in: hFile=0x1448, lpBuffer=0x12f0b478*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x848fad8, lpOverlapped=0x0 | out: lpBuffer=0x12f0b478*, lpNumberOfBytesWritten=0x848fad8*=0x102, lpOverlapped=0x0) returned 1 [0196.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0196.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca490 [0196.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca490) returned 1 [0196.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0b478) returned 1 [0196.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f07870) returned 1 [0196.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0196.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1cc0) returned 1 [0196.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a20 [0196.432] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.432] WriteFile (in: hFile=0x1448, lpBuffer=0x6751d50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x848fb60, lpOverlapped=0x0 | out: lpBuffer=0x6751d50*, lpNumberOfBytesWritten=0x848fb60*=0x10c, lpOverlapped=0x0) returned 1 [0200.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0200.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca490) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0200.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0200.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d412a8 [0200.366] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" [0200.366] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.ac3a86" [0200.366] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0x848fad8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6778830 [0204.458] FlushFileBuffers (hFile=0x1448) returned 1 [0204.491] CloseHandle (hObject=0x1448) returned 1 [0206.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678be38 [0206.186] wcscpy (in: _Dest=0x678be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0206.186] wcscat (in: _Dest=0x678be38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0206.186] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0206.186] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0208.426] WriteFile (in: hFile=0x1810, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x848faf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x848faf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.502] CloseHandle (hObject=0x1810) returned 1 [0210.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678be38) returned 1 [0210.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a550) returned 1 Thread: id = 6399 os_tid = 0x24b0 [0190.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0190.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0190.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.820] GetLastError () returned 0x5 [0190.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0190.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 6400 os_tid = 0x24b4 [0190.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0190.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0190.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.818] GetLastError () returned 0x5 [0190.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0190.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 6401 os_tid = 0x24b8 [0190.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0191.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0191.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.766] GetLastError () returned 0x5 [0191.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0191.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15370) returned 1 Thread: id = 6402 os_tid = 0x24bc [0190.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0191.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0191.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.768] GetLastError () returned 0x5 [0191.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0191.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 6403 os_tid = 0x24c0 [0190.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0192.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0192.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.165] GetLastError () returned 0x5 [0192.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0192.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 6404 os_tid = 0x24c4 [0190.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0191.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0191.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.770] GetLastError () returned 0x5 [0191.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0191.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 6405 os_tid = 0x24c8 [0190.481] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0190.481] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0193.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd48 [0193.914] GetFileSizeEx (in: hFile=0xd48, lpFileSize=0xa8dfa9c | out: lpFileSize=0xa8dfa9c*=267) returned 1 [0193.914] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.914] ReadFile (in: hFile=0xd48, lpBuffer=0xa8dfa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8dfa88, lpOverlapped=0x0 | out: lpBuffer=0xa8dfa78*, lpNumberOfBytesRead=0xa8dfa88*=0x4, lpOverlapped=0x0) returned 1 [0193.919] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4790 [0193.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3930 [0193.920] NtQuerySystemTime (in: CurrentTime=0xa8dfa10 | out: CurrentTime=0xa8dfa10*=132482711024028000) returned 0x0 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x39a17d8a [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x76083789 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0xc1d10bf [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x40ae82d9 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2a438be4 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x15bf6b34 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x6433396a [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x31f2cdde [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x498772b6 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x4fd48b2c [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x4c8ab036 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x1d537ec8 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x27404e64 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x5066a6d3 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x7b3d4e18 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2576ea2 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x76a80909 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2e3d5ca [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x55da385f [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2fd99105 [0193.920] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0xf1bfceb [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x4043b489 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x76b214c0 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x284d46cf [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x5e089ab8 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x3619bdcd [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x5bf1cde5 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2593d6e4 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x6cb9c1b8 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x2c711b81 [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x7604e6eb [0193.921] RtlRandomEx (in: Seed=0xa8dfa08 | out: Seed=0xa8dfa08) returned 0x5f870915 [0193.931] ReadFile (in: hFile=0xd48, lpBuffer=0x12f0f080, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0xa8dfa04, lpOverlapped=0x0 | out: lpBuffer=0x12f0f080*, lpNumberOfBytesRead=0xa8dfa04*=0x10b, lpOverlapped=0x0) returned 1 [0193.931] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.931] WriteFile (in: hFile=0xd48, lpBuffer=0x12f12c88*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0xa8dfa08, lpOverlapped=0x0 | out: lpBuffer=0x12f12c88*, lpNumberOfBytesWritten=0xa8dfa08*=0x10b, lpOverlapped=0x0) returned 1 [0196.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0196.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0196.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0196.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f12c88) returned 1 [0196.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0f080) returned 1 [0196.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 [0196.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d18d0) returned 1 [0196.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5600 [0196.460] SetFilePointerEx (in: hFile=0xd48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.460] WriteFile (in: hFile=0xd48, lpBuffer=0x6768958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa8dfa90, lpOverlapped=0x0 | out: lpBuffer=0x6768958*, lpNumberOfBytesWritten=0xa8dfa90*=0x10c, lpOverlapped=0x0) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768958) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0197.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0197.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x6773a90 [0197.560] wcscpy (in: _Dest=0x6773a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" [0197.560] wcscat (in: _Dest=0x6773a90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.ac3a86" [0197.560] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0xa8dfa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6777df0 [0197.942] FlushFileBuffers (hFile=0xd48) returned 1 [0197.947] CloseHandle (hObject=0xd48) returned 1 [0198.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a86b88 [0198.096] wcscpy (in: _Dest=0x6a86b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0198.096] wcscat (in: _Dest=0x6a86b88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0198.096] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0198.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb28 [0199.111] WriteFile (in: hFile=0xb28, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa8dfa24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa8dfa24*=0x8b9, lpOverlapped=0x0) returned 1 [0199.853] CloseHandle (hObject=0xb28) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86b88) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ef58) returned 1 Thread: id = 6406 os_tid = 0x24cc [0190.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0190.482] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd68 [0193.933] GetFileSizeEx (in: hFile=0xd68, lpFileSize=0xc78fa54 | out: lpFileSize=0xc78fa54*=242) returned 1 [0193.933] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.933] ReadFile (in: hFile=0xd68, lpBuffer=0xc78fa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc78fa40, lpOverlapped=0x0 | out: lpBuffer=0xc78fa30*, lpNumberOfBytesRead=0xc78fa40*=0x4, lpOverlapped=0x0) returned 1 [0193.935] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3930 [0193.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0193.936] NtQuerySystemTime (in: CurrentTime=0xc78f9c8 | out: CurrentTime=0xc78f9c8*=132482711024184000) returned 0x0 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x2e8fc09b [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x3d7a7cb6 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x276b2724 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x6b8ff59f [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x7465f641 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x3d025a4 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x237faf7d [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x59a57c56 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x27f46073 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x4ab1c0a2 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x325d41ab [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x75e2201b [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x46843536 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x2dcbddef [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x32f81990 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0xef8ca22 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x6d9a1e89 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x27c0d8a4 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x6822c472 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x34bd3c65 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x296d8412 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x7d9b1104 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x680548ec [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x5e344692 [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x14e297af [0193.936] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x43b8c0a3 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x6917f937 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x19b54276 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x9682195 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x3e0720e7 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x9a9a669 [0193.937] RtlRandomEx (in: Seed=0xc78f9c0 | out: Seed=0xc78f9c0) returned 0x417c13b [0193.946] ReadFile (in: hFile=0xd68, lpBuffer=0x12f16890, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xc78f9bc, lpOverlapped=0x0 | out: lpBuffer=0x12f16890*, lpNumberOfBytesRead=0xc78f9bc*=0xf2, lpOverlapped=0x0) returned 1 [0193.946] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.947] WriteFile (in: hFile=0xd68, lpBuffer=0x12f1a498*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xc78f9c0, lpOverlapped=0x0 | out: lpBuffer=0x12f1a498*, lpNumberOfBytesWritten=0xc78f9c0*=0xf2, lpOverlapped=0x0) returned 1 [0197.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0197.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0197.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0197.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1a498) returned 1 [0197.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f16890) returned 1 [0197.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0197.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1918) returned 1 [0197.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x300550 [0197.142] SetFilePointerEx (in: hFile=0xd68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.142] WriteFile (in: hFile=0xd68, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc78fa48, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0xc78fa48*=0x10c, lpOverlapped=0x0) returned 1 [0200.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0200.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0200.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0200.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41518 [0200.373] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" [0200.373] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.ac3a86" [0200.373] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xc78f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777120 [0204.449] FlushFileBuffers (hFile=0xd68) returned 1 [0204.468] CloseHandle (hObject=0xd68) returned 1 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f520 [0206.181] wcscpy (in: _Dest=0x674f520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0206.181] wcscat (in: _Dest=0x674f520, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\AC3A86-Readme.txt" [0206.181] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0206.181] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb78 [0208.425] WriteFile (in: hFile=0xb78, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc78f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc78f9dc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.499] CloseHandle (hObject=0xb78) returned 1 [0210.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f520) returned 1 [0210.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 Thread: id = 6407 os_tid = 0x24d0 [0190.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.484] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0193.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x116c [0193.948] GetFileSizeEx (in: hFile=0x116c, lpFileSize=0xc91f9d4 | out: lpFileSize=0xc91f9d4*=218) returned 1 [0193.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46f0 [0193.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0193.948] NtQuerySystemTime (in: CurrentTime=0xc91f948 | out: CurrentTime=0xc91f948*=132482711024184000) returned 0x0 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x7008373b [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x1c5079d7 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x370eaa75 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x97b6b9d [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x4c00a54b [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x61fb0773 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x3230a752 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x5eb858d8 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x2d8e2fb1 [0193.948] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x4a65ebc3 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x2568fe24 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x7d9b1104 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x67917608 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x37ae4124 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x51fa0ae6 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x5bc3d0b6 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0xe49a95f [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x321d952b [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x3a2955b2 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x2005ebd [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x16a8bc2f [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x6bbcca8e [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x5f8a9527 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x11ec3de6 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x4e117388 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x5e9e2136 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x44d56c03 [0193.949] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x263f39e4 [0193.950] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x3dcfcddc [0193.950] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0xb63fe91 [0193.950] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x1564c45e [0193.950] RtlRandomEx (in: Seed=0xc91f940 | out: Seed=0xc91f940) returned 0x9002876 [0193.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f1e0a0 [0193.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f21ca8 [0193.960] ReadFile (in: hFile=0x116c, lpBuffer=0x12f1e0a0, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xc91f93c, lpOverlapped=0x0 | out: lpBuffer=0x12f1e0a0*, lpNumberOfBytesRead=0xc91f93c*=0xda, lpOverlapped=0x0) returned 1 [0193.963] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.963] WriteFile (in: hFile=0x116c, lpBuffer=0x12f21ca8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xc91f940, lpOverlapped=0x0 | out: lpBuffer=0x12f21ca8*, lpNumberOfBytesWritten=0xc91f940*=0xda, lpOverlapped=0x0) returned 1 [0196.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0196.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f21ca8) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1e0a0) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0196.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d12e8) returned 1 [0196.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0196.437] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.437] WriteFile (in: hFile=0x116c, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc91f9c8, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xc91f9c8*=0x10c, lpOverlapped=0x0) returned 1 [0197.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0197.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0197.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0197.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0197.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0197.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0197.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0197.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0197.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6772e60 [0197.529] wcscpy (in: _Dest=0x6772e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" [0197.529] wcscat (in: _Dest=0x6772e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.ac3a86" [0197.529] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0xc91f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769120 [0197.896] FlushFileBuffers (hFile=0x116c) returned 1 [0197.906] CloseHandle (hObject=0x116c) returned 1 [0198.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779898 [0198.076] wcscpy (in: _Dest=0x6779898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0198.076] wcscat (in: _Dest=0x6779898, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\AC3A86-Readme.txt" [0198.076] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0198.076] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1850 [0199.107] WriteFile (in: hFile=0x1850, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc91f95c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc91f95c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.895] CloseHandle (hObject=0x1850) returned 1 [0199.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779898) returned 1 [0199.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x331860) returned 1 Thread: id = 6408 os_tid = 0x24d4 [0190.484] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0190.822] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0194.519] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fe8 [0194.519] GetFileSizeEx (in: hFile=0x1fe8, lpFileSize=0x8c3f8ec | out: lpFileSize=0x8c3f8ec*=223) returned 1 [0194.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0194.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0194.520] NtQuerySystemTime (in: CurrentTime=0x8c3f860 | out: CurrentTime=0x8c3f860*=132482711029956000) returned 0x0 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x2c647fb9 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x5ed9675b [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x1fe30d64 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x65c5d716 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0xa3dea [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x53ddfc5d [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x32dba011 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x7f47a54f [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x1ef9aa [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x72055be [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x2dac590 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0xd44792f [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x2de2a90d [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x29496707 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x3c354db7 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x633f9def [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x6ee850db [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x2e507edd [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x67d1b1ac [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x4aa96399 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x46d172b9 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x3d73685f [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0xd856597 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x4aa96399 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x1931f95d [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x22100f24 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x33d8d395 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x7827d9c9 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x3c42656 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x58fd9da3 [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x61ad3c5c [0194.520] RtlRandomEx (in: Seed=0x8c3f858 | out: Seed=0x8c3f858) returned 0x7455ad48 [0194.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1300f080 [0194.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13012c88 [0194.529] ReadFile (in: hFile=0x1fe8, lpBuffer=0x1300f080, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x8c3f854, lpOverlapped=0x0 | out: lpBuffer=0x1300f080*, lpNumberOfBytesRead=0x8c3f854*=0xdf, lpOverlapped=0x0) returned 1 [0194.531] SetFilePointerEx (in: hFile=0x1fe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.531] WriteFile (in: hFile=0x1fe8, lpBuffer=0x13012c88*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x8c3f858, lpOverlapped=0x0 | out: lpBuffer=0x13012c88*, lpNumberOfBytesWritten=0x8c3f858*=0xdf, lpOverlapped=0x0) returned 1 [0197.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1e28 [0197.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41f0 [0197.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0197.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13012c88) returned 1 [0197.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300f080) returned 1 [0197.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28358) returned 1 [0197.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60bf8) returned 1 [0197.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0197.310] SetFilePointerEx (in: hFile=0x1fe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.310] WriteFile (in: hFile=0x1fe8, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c3f8e0, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0x8c3f8e0*=0x10c, lpOverlapped=0x0) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0197.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0197.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x6772bf0 [0197.621] wcscpy (in: _Dest=0x6772bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" [0197.621] wcscat (in: _Dest=0x6772bf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.ac3a86" [0197.621] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x8c3f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x67786e8 [0197.979] FlushFileBuffers (hFile=0x1fe8) returned 1 [0197.986] CloseHandle (hObject=0x1fe8) returned 1 [0198.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67746c0 [0198.117] wcscpy (in: _Dest=0x67746c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0198.117] wcscat (in: _Dest=0x67746c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0198.117] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0198.117] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14b8 [0199.114] WriteFile (in: hFile=0x14b8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c3f874, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8c3f874*=0x8b9, lpOverlapped=0x0) returned 1 [0199.998] CloseHandle (hObject=0x14b8) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67746c0) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a678) returned 1 Thread: id = 6409 os_tid = 0x24d8 [0190.517] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.823] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0194.531] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fec [0194.532] GetFileSizeEx (in: hFile=0x1fec, lpFileSize=0xc42fd8c | out: lpFileSize=0xc42fd8c*=265) returned 1 [0194.532] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.532] ReadFile (in: hFile=0x1fec, lpBuffer=0xc42fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc42fd78, lpOverlapped=0x0 | out: lpBuffer=0xc42fd68*, lpNumberOfBytesRead=0xc42fd78*=0x4, lpOverlapped=0x0) returned 1 [0194.534] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0194.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0194.534] NtQuerySystemTime (in: CurrentTime=0xc42fd00 | out: CurrentTime=0xc42fd00*=132482711030112000) returned 0x0 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x34ea919a [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0xc52c167 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x7e62125c [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x1d1ab53a [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x55cd61ad [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x4a31f1b6 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x4a49b280 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x1a4ea4bd [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x1a64412e [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x7e62125c [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x3f05d137 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x2475d5b0 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x70b1356c [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x55cd61ad [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x18c66103 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x5a64c2b [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x4b12c737 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x63907a46 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x6e76dbb5 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x24f36a84 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x3f434e96 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x4c9e1ba3 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x36ad2258 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x18d6c140 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x1f8d5be4 [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x778f218d [0194.534] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x2143087c [0194.535] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x222e6684 [0194.535] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x1fc81159 [0194.535] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x6e05bd11 [0194.535] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x17efa3c9 [0194.535] RtlRandomEx (in: Seed=0xc42fcf8 | out: Seed=0xc42fcf8) returned 0x51194237 [0194.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13016890 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1301a498 [0194.543] ReadFile (in: hFile=0x1fec, lpBuffer=0x13016890, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xc42fcf4, lpOverlapped=0x0 | out: lpBuffer=0x13016890*, lpNumberOfBytesRead=0xc42fcf4*=0x109, lpOverlapped=0x0) returned 1 [0194.543] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.543] WriteFile (in: hFile=0x1fec, lpBuffer=0x1301a498*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xc42fcf8, lpOverlapped=0x0 | out: lpBuffer=0x1301a498*, lpNumberOfBytesWritten=0xc42fcf8*=0x109, lpOverlapped=0x0) returned 1 [0197.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ad8 [0197.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0197.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0197.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301a498) returned 1 [0197.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13016890) returned 1 [0197.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f283d0) returned 1 [0197.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60bb0) returned 1 [0197.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85ec8 [0197.313] SetFilePointerEx (in: hFile=0x1fec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.313] WriteFile (in: hFile=0x1fec, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc42fd80, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0xc42fd80*=0x10c, lpOverlapped=0x0) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ef8) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ec8) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0197.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0197.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6772ab8 [0197.623] wcscpy (in: _Dest=0x6772ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" [0197.623] wcscat (in: _Dest=0x6772ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.ac3a86" [0197.623] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xc42fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778830 [0197.982] FlushFileBuffers (hFile=0x1fec) returned 1 [0197.994] CloseHandle (hObject=0x1fec) returned 1 [0198.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769f88 [0198.118] wcscpy (in: _Dest=0x6769f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0198.118] wcscat (in: _Dest=0x6769f88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\AC3A86-Readme.txt" [0198.119] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0198.119] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1584 [0199.114] WriteFile (in: hFile=0x1584, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc42fd14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc42fd14*=0x8b9, lpOverlapped=0x0) returned 1 [0200.001] CloseHandle (hObject=0x1584) returned 1 [0200.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769f88) returned 1 [0200.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a7a0) returned 1 Thread: id = 6410 os_tid = 0x24dc [0190.518] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0190.824] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0194.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1af8 [0194.544] GetFileSizeEx (in: hFile=0x1af8, lpFileSize=0xca0f8bc | out: lpFileSize=0xca0f8bc*=286) returned 1 [0194.544] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.544] ReadFile (in: hFile=0x1af8, lpBuffer=0xca0f898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca0f8a8, lpOverlapped=0x0 | out: lpBuffer=0xca0f898*, lpNumberOfBytesRead=0xca0f8a8*=0x4, lpOverlapped=0x0) returned 1 [0194.546] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0194.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0194.546] NtQuerySystemTime (in: CurrentTime=0xca0f830 | out: CurrentTime=0xca0f830*=132482711030268000) returned 0x0 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x684f144c [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x53abd905 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x16ad3d3a [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x42b9c362 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x480f89b7 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x5550166a [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x21d1c13e [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x541c7fb7 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x5e6c44 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x657eaf23 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x60567a54 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x4412d369 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x420d2d8a [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x7eed9289 [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x3341819d [0194.546] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x5b12cc06 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x46101cd3 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x4c3957da [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x491be677 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x16dbac07 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x38adfddb [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x112f7a74 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x1b23e9e3 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x6928abe1 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x218513b8 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x3c64951e [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x444088dd [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x3f434e96 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x67d1b1ac [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x18ed4adb [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x342637a1 [0194.547] RtlRandomEx (in: Seed=0xca0f828 | out: Seed=0xca0f828) returned 0x23f7d265 [0194.555] ReadFile (in: hFile=0x1af8, lpBuffer=0x1301e0a0, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0xca0f824, lpOverlapped=0x0 | out: lpBuffer=0x1301e0a0*, lpNumberOfBytesRead=0xca0f824*=0x11e, lpOverlapped=0x0) returned 1 [0194.555] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.555] WriteFile (in: hFile=0x1af8, lpBuffer=0x13021ca8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xca0f828, lpOverlapped=0x0 | out: lpBuffer=0x13021ca8*, lpNumberOfBytesWritten=0xca0f828*=0x11e, lpOverlapped=0x0) returned 1 [0197.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0197.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1298 [0197.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0197.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13021ca8) returned 1 [0197.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301e0a0) returned 1 [0197.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28448) returned 1 [0197.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60a00) returned 1 [0197.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85f28 [0197.316] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.316] WriteFile (in: hFile=0x1af8, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca0f8b0, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0xca0f8b0*=0x10c, lpOverlapped=0x0) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f58) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f28) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0197.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0197.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773340 [0197.626] wcscpy (in: _Dest=0x6773340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" [0197.626] wcscat (in: _Dest=0x6773340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.ac3a86" [0197.626] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0xca0f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a830 [0197.985] FlushFileBuffers (hFile=0x1af8) returned 1 [0197.997] CloseHandle (hObject=0x1af8) returned 1 [0198.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a0b0 [0198.120] wcscpy (in: _Dest=0x676a0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0198.120] wcscat (in: _Dest=0x676a0b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\AC3A86-Readme.txt" [0198.120] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0198.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0199.115] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xca0f844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xca0f844*=0x8b9, lpOverlapped=0x0) returned 1 [0200.024] CloseHandle (hObject=0xac4) returned 1 [0200.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a0b0) returned 1 [0200.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a8c8) returned 1 Thread: id = 6411 os_tid = 0x24e0 [0190.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0195.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.158] GetLastError () returned 0x5 [0195.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0195.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 6412 os_tid = 0x24e4 [0190.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0196.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0196.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.887] GetLastError () returned 0x5 [0196.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0196.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 6413 os_tid = 0x24ec [0190.521] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5")) returned 0x2020 [0190.522] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", dwFileAttributes=0x20) returned 1 [0193.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1de0 [0193.964] GetFileSizeEx (in: hFile=0x1de0, lpFileSize=0xbcefabc | out: lpFileSize=0xbcefabc*=16) returned 1 [0193.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0193.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0193.965] NtQuerySystemTime (in: CurrentTime=0xbcefa30 | out: CurrentTime=0xbcefa30*=132482711024496000) returned 0x0 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x613df2c3 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x54251185 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x79eb82b6 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x37c5b325 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x5e934030 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x50d4af21 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x3fae56cf [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x64a49c36 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x58e1a9ea [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x105a8f5 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x4e117388 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x6dad4fd7 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x126743be [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0xf6d330e [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x58e1a9ea [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x4c341f8d [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x3f807455 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x70c8356f [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x5bf95679 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x56ebdc17 [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x1bedddf [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x1e3f9bed [0193.965] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x79eb82b6 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x11ec3de6 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x70268b36 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x6f3986fe [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x60530972 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x26fb7e7 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x502f2caa [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x52d1bc9b [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x271575a4 [0193.966] RtlRandomEx (in: Seed=0xbcefa28 | out: Seed=0xbcefa28) returned 0x54251185 [0193.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f258b0 [0193.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f294b8 [0193.976] ReadFile (in: hFile=0x1de0, lpBuffer=0x12f258b0, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xbcefa24, lpOverlapped=0x0 | out: lpBuffer=0x12f258b0*, lpNumberOfBytesRead=0xbcefa24*=0x10, lpOverlapped=0x0) returned 1 [0193.979] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.979] WriteFile (in: hFile=0x1de0, lpBuffer=0x12f294b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xbcefa28, lpOverlapped=0x0 | out: lpBuffer=0x12f294b8*, lpNumberOfBytesWritten=0xbcefa28*=0x10, lpOverlapped=0x0) returned 1 [0195.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d148 [0195.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d170 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d170) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f294b8) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f258b0) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1060) returned 1 [0195.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3f1f180 [0195.778] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.778] WriteFile (in: hFile=0x1de0, lpBuffer=0x3f230f0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xbcefab0, lpOverlapped=0x0 | out: lpBuffer=0x3f230f0*, lpNumberOfBytesWritten=0xbcefab0*=0x118, lpOverlapped=0x0) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f230f0) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ee80) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d170) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1f180) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d148) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0195.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0195.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6772f98 [0195.948] wcscpy (in: _Dest=0x6772f98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" [0195.948] wcscat (in: _Dest=0x6772f98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.ac3a86" [0195.948] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.ac3a86", NtPathName=0xbcefa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x6777a18 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777a18) returned 1 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a7aa8) returned 1 [0196.046] NtQueryInformationFile (in: FileHandle=0x1de0, IoStatusBlock=0xbcefa00, FileInformation=0xbcefa08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcefa00, FileInformation=0xbcefa08) returned 0x0 [0196.046] NtSetInformationFile (FileHandle=0x1de0, IoStatusBlock=0xbcefa00, FileInformation=0xbcefa08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772f98) returned 1 [0196.253] FlushFileBuffers (hFile=0x1de0) returned 1 [0196.811] CloseHandle (hObject=0x1de0) returned 1 [0197.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6784ab8 [0198.319] wcscpy (in: _Dest=0x6784ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0198.319] wcscat (in: _Dest=0x6784ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\AC3A86-Readme.txt" [0198.319] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ac3a86-readme.txt")) returned 0xffffffff [0198.319] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.170] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbcefa44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbcefa44*=0x8b9, lpOverlapped=0x0) returned 1 [0200.172] CloseHandle (hObject=0x1848) returned 1 [0200.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784ab8) returned 1 [0200.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67552d0) returned 1 Thread: id = 6414 os_tid = 0x24f0 [0190.525] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 0x2020 [0190.525] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", dwFileAttributes=0x20) returned 1 [0193.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c0 [0193.981] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0x623fb34 | out: lpFileSize=0x623fb34*=132) returned 1 [0193.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0d0 [0193.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0193.981] NtQuerySystemTime (in: CurrentTime=0x623faa8 | out: CurrentTime=0x623faa8*=132482711024652000) returned 0x0 [0193.981] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x20f80382 [0193.981] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x374c9172 [0193.981] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x630e36a0 [0193.981] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x3bc4371f [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x29a4ee00 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x1827eb69 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x5e9e2136 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x28291f4 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x6d70cee6 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x1d4a35e8 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x306f8f5a [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x5b9ae3b6 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x7f94bbac [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x3a40adbc [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x1d61a62b [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x578f16b9 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x14196722 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x7c2561b9 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0xb457590 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x12ca01e1 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x455f20b0 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x39e474d7 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x5f19d2d6 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x2efe5b41 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x5bf95679 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x6b64ca49 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x1285f51d [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0xf001d86 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x203c35d0 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x1f6c1d8e [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x279c105 [0193.982] RtlRandomEx (in: Seed=0x623faa0 | out: Seed=0x623faa0) returned 0x6c7e90b7 [0193.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f2d0c0 [0193.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f30cc8 [0193.993] ReadFile (in: hFile=0x8c0, lpBuffer=0x12f2d0c0, nNumberOfBytesToRead=0x84, lpNumberOfBytesRead=0x623fa9c, lpOverlapped=0x0 | out: lpBuffer=0x12f2d0c0*, lpNumberOfBytesRead=0x623fa9c*=0x84, lpOverlapped=0x0) returned 1 [0193.995] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.995] WriteFile (in: hFile=0x8c0, lpBuffer=0x12f30cc8*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x623faa0, lpOverlapped=0x0 | out: lpBuffer=0x12f30cc8*, lpNumberOfBytesWritten=0x623faa0*=0x84, lpOverlapped=0x0) returned 1 [0195.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d198 [0195.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d1c0 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d1c0) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f30cc8) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f2d0c0) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41780) returned 1 [0195.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a861f8 [0195.780] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.781] WriteFile (in: hFile=0x8c0, lpBuffer=0x6771030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x623fb28, lpOverlapped=0x0 | out: lpBuffer=0x6771030*, lpNumberOfBytesWritten=0x623fb28*=0x10c, lpOverlapped=0x0) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771030) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86228) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d1c0) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a861f8) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d198) returned 1 [0195.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0195.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0195.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0195.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67730d0 [0195.952] wcscpy (in: _Dest=0x67730d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" [0195.952] wcscat (in: _Dest=0x67730d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.ac3a86" [0195.952] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.ac3a86", NtPathName=0x623faa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777b60 [0196.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777b60) returned 1 [0196.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ab930) returned 1 [0196.049] NtQueryInformationFile (in: FileHandle=0x8c0, IoStatusBlock=0x623fa78, FileInformation=0x623fa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x623fa78, FileInformation=0x623fa80) returned 0x0 [0196.049] NtSetInformationFile (FileHandle=0x8c0, IoStatusBlock=0x623fa78, FileInformation=0x623fa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67730d0) returned 1 [0196.256] FlushFileBuffers (hFile=0x8c0) returned 1 [0196.812] CloseHandle (hObject=0x8c0) returned 1 [0197.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6786ab8 [0198.319] wcscpy (in: _Dest=0x6786ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0198.319] wcscat (in: _Dest=0x6786ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\AC3A86-Readme.txt" [0198.319] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ac3a86-readme.txt")) returned 0xffffffff [0198.319] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.162] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x623fabc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x623fabc*=0x8b9, lpOverlapped=0x0) returned 1 [0200.164] CloseHandle (hObject=0x1848) returned 1 [0200.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786ab8) returned 1 [0200.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 Thread: id = 6415 os_tid = 0x24f4 [0190.526] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png")) returned 0x2020 [0190.526] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png", dwFileAttributes=0x20) returned 1 [0193.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ddc [0193.997] GetFileSizeEx (in: hFile=0x1ddc, lpFileSize=0xa05fcb4 | out: lpFileSize=0xa05fcb4*=3479) returned 1 [0193.997] SetFilePointerEx (in: hFile=0x1ddc, liDistanceToMove=0xd93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.997] ReadFile (in: hFile=0x1ddc, lpBuffer=0xa05fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa05fca0, lpOverlapped=0x0 | out: lpBuffer=0xa05fc90*, lpNumberOfBytesRead=0xa05fca0*=0x4, lpOverlapped=0x0) returned 1 [0194.006] SetFilePointerEx (in: hFile=0x1ddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0194.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0194.006] NtQuerySystemTime (in: CurrentTime=0xa05fc28 | out: CurrentTime=0xa05fc28*=132482711024808000) returned 0x0 [0194.006] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x1564c45e [0194.006] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x322de758 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x26d6d515 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x7e25d488 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x447b818 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x636a8619 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x14196722 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x1636bf5d [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x2efe5b41 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x44e50444 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x2a910530 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x28fe6784 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x3d63a595 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x2c5e029 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x32b240bc [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x7ff85de8 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0xb63fe91 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x70268b36 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x1c9dc5b8 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x40220d43 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x2999f26c [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x2b18cd6a [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x118a1215 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x896562 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x15321fee [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x3632b0e9 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x45f21763 [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x6a8e339c [0194.007] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x6659df9 [0194.008] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x4be336bc [0194.008] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x4508e660 [0194.008] RtlRandomEx (in: Seed=0xa05fc20 | out: Seed=0xa05fc20) returned 0x6d70cee6 [0194.018] ReadFile (in: hFile=0x1ddc, lpBuffer=0x12f348d0, nNumberOfBytesToRead=0xd97, lpNumberOfBytesRead=0xa05fc1c, lpOverlapped=0x0 | out: lpBuffer=0x12f348d0*, lpNumberOfBytesRead=0xa05fc1c*=0xd97, lpOverlapped=0x0) returned 1 [0194.018] SetFilePointerEx (in: hFile=0x1ddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.018] WriteFile (in: hFile=0x1ddc, lpBuffer=0x12f384d8*, nNumberOfBytesToWrite=0xd97, lpNumberOfBytesWritten=0xa05fc20, lpOverlapped=0x0 | out: lpBuffer=0x12f384d8*, lpNumberOfBytesWritten=0xa05fc20*=0xd97, lpOverlapped=0x0) returned 1 [0195.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d1e8 [0195.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d210 [0195.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d210) returned 1 [0195.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f384d8) returned 1 [0195.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f348d0) returned 1 [0195.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 [0195.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e416f0) returned 1 [0195.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x676d210 [0195.782] SetFilePointerEx (in: hFile=0x1ddc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.783] WriteFile (in: hFile=0x1ddc, lpBuffer=0x6758060*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xa05fca8, lpOverlapped=0x0 | out: lpBuffer=0x6758060*, lpNumberOfBytesWritten=0xa05fca8*=0x100, lpOverlapped=0x0) returned 1 [0195.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758060) returned 1 [0195.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d238) returned 1 [0195.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d260) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d210) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d1e8) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0195.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0195.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6770f18 [0195.950] wcscpy (in: _Dest=0x6770f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0195.950] wcscat (in: _Dest=0x6770f18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.ac3a86" [0195.950] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.ac3a86", NtPathName=0xa05fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3f230f0 [0196.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f230f0) returned 1 [0196.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a96b0) returned 1 [0196.051] NtQueryInformationFile (in: FileHandle=0x1ddc, IoStatusBlock=0xa05fbf8, FileInformation=0xa05fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa05fbf8, FileInformation=0xa05fc00) returned 0x0 [0196.051] NtSetInformationFile (FileHandle=0x1ddc, IoStatusBlock=0xa05fbf8, FileInformation=0xa05fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770f18) returned 1 [0196.269] FlushFileBuffers (hFile=0x1ddc) returned 1 [0196.814] CloseHandle (hObject=0x1ddc) returned 1 [0197.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e840 [0197.692] wcscpy (in: _Dest=0x675e840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0197.692] wcscat (in: _Dest=0x675e840, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt" [0197.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\ac3a86-readme.txt")) returned 0xffffffff [0197.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf98 [0199.120] WriteFile (in: hFile=0xf98, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa05fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa05fc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.973] CloseHandle (hObject=0xf98) returned 1 [0199.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0199.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17970) returned 1 Thread: id = 6416 os_tid = 0x259c [0190.527] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json")) returned 0x2020 [0190.528] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0193.999] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dd8 [0194.000] GetFileSizeEx (in: hFile=0x1dd8, lpFileSize=0xcf4fd94 | out: lpFileSize=0xcf4fd94*=745) returned 1 [0194.000] SetFilePointerEx (in: hFile=0x1dd8, liDistanceToMove=0x2e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.000] ReadFile (in: hFile=0x1dd8, lpBuffer=0xcf4fd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcf4fd80, lpOverlapped=0x0 | out: lpBuffer=0xcf4fd70*, lpNumberOfBytesRead=0xcf4fd80*=0x4, lpOverlapped=0x0) returned 1 [0194.021] SetFilePointerEx (in: hFile=0x1dd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0194.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0194.022] NtQuerySystemTime (in: CurrentTime=0xcf4fd08 | out: CurrentTime=0xcf4fd08*=132482711024964000) returned 0x0 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1f4fb35a [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x8ff859d [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x3d63a595 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x104c9e5d [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x6135f882 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x32f81990 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x3294c3b7 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x72e9c692 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1cf8bc23 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x6e93c684 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0xe9735ac [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x6ac50266 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x2ce13bec [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x5485d256 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x4e163ce1 [0194.022] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x444aba47 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x156e106a [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x877eb35 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x4feec783 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x25e98864 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x2de45405 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x2d40bcd2 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1b40ff13 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x4d2daa8c [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1cb6e9b5 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1e1cb876 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x4fb6316a [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x25134ca4 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x6a8e339c [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x1532416b [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x78418e49 [0194.023] RtlRandomEx (in: Seed=0xcf4fd00 | out: Seed=0xcf4fd00) returned 0x5ba547e0 [0194.035] ReadFile (in: hFile=0x1dd8, lpBuffer=0x12f3c0e0, nNumberOfBytesToRead=0x2e9, lpNumberOfBytesRead=0xcf4fcfc, lpOverlapped=0x0 | out: lpBuffer=0x12f3c0e0*, lpNumberOfBytesRead=0xcf4fcfc*=0x2e9, lpOverlapped=0x0) returned 1 [0194.035] SetFilePointerEx (in: hFile=0x1dd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.036] WriteFile (in: hFile=0x1dd8, lpBuffer=0x12f40060*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0xcf4fd00, lpOverlapped=0x0 | out: lpBuffer=0x12f40060*, lpNumberOfBytesWritten=0xcf4fd00*=0x2e9, lpOverlapped=0x0) returned 1 [0195.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d288 [0195.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d2b0 [0195.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d2b0) returned 1 [0195.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f40060) returned 1 [0195.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f3c0e0) returned 1 [0195.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0195.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41978) returned 1 [0195.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86258 [0195.784] SetFilePointerEx (in: hFile=0x1dd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.784] WriteFile (in: hFile=0x1dd8, lpBuffer=0x6771148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf4fd88, lpOverlapped=0x0 | out: lpBuffer=0x6771148*, lpNumberOfBytesWritten=0xcf4fd88*=0x10c, lpOverlapped=0x0) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771148) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86288) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d2b0) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86258) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d288) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0195.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0195.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6771148 [0195.954] wcscpy (in: _Dest=0x6771148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" [0195.954] wcscat (in: _Dest=0x6771148, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.ac3a86" [0195.954] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.ac3a86", NtPathName=0xcf4fd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6773208 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773208) returned 1 [0196.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a0860) returned 1 [0196.274] NtQueryInformationFile (in: FileHandle=0x1dd8, IoStatusBlock=0xcf4fcd8, FileInformation=0xcf4fce0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcf4fcd8, FileInformation=0xcf4fce0) returned 0x0 [0196.274] NtSetInformationFile (FileHandle=0x1dd8, IoStatusBlock=0xcf4fcd8, FileInformation=0xcf4fce0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771148) returned 1 [0196.282] FlushFileBuffers (hFile=0x1dd8) returned 1 [0196.814] CloseHandle (hObject=0x1dd8) returned 1 [0197.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e728 [0197.698] wcscpy (in: _Dest=0x675e728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0197.698] wcscat (in: _Dest=0x675e728, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt" [0197.698] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\ac3a86-readme.txt")) returned 0x2020 [0199.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0199.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 Thread: id = 6417 os_tid = 0x25a0 [0190.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68ac210 [0190.529] wcscpy (in: _Dest=0x68ac210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.529] wcscat (in: _Dest=0x68ac210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.529] wcscat (in: _Dest=0x68ac210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*" [0190.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed988 [0190.529] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*", lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0190.825] wcscmp (_String1=".", _String2=".") returned 0 [0190.825] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.825] wcscmp (_String1="..", _String2=".") returned 1 [0190.825] wcscmp (_String1="..", _String2="..") returned 0 [0190.825] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0190.826] wcscmp (_String1="ar", _String2=".") returned 1 [0190.826] wcscmp (_String1="ar", _String2="..") returned 1 [0190.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6752cc8 [0190.826] wcscpy (in: _Dest=0x6752cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.826] wcscat (in: _Dest=0x6752cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.826] wcscat (in: _Dest=0x6752cc8, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0194.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0194.943] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0194.943] wcscmp (_String1="bg", _String2=".") returned 1 [0194.943] wcscmp (_String1="bg", _String2="..") returned 1 [0194.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67571f0 [0194.943] wcscpy (in: _Dest=0x67571f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.943] wcscat (in: _Dest=0x67571f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.944] wcscat (in: _Dest=0x67571f0, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0194.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67571f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0194.944] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0194.944] wcscmp (_String1="ca", _String2=".") returned 1 [0194.944] wcscmp (_String1="ca", _String2="..") returned 1 [0194.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757a30 [0194.945] wcscpy (in: _Dest=0x6757a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.945] wcscat (in: _Dest=0x6757a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.945] wcscat (in: _Dest=0x6757a30, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0194.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0194.946] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0194.946] wcscmp (_String1="cs", _String2=".") returned 1 [0194.946] wcscmp (_String1="cs", _String2="..") returned 1 [0194.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757b38 [0194.946] wcscpy (in: _Dest=0x6757b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.946] wcscat (in: _Dest=0x6757b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.946] wcscat (in: _Dest=0x6757b38, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0194.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360 [0194.947] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0194.947] wcscmp (_String1="da", _String2=".") returned 1 [0194.947] wcscmp (_String1="da", _String2="..") returned 1 [0194.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757c40 [0194.947] wcscpy (in: _Dest=0x6757c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.947] wcscat (in: _Dest=0x6757c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.947] wcscat (in: _Dest=0x6757c40, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0194.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0194.948] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0194.948] wcscmp (_String1="de", _String2=".") returned 1 [0194.948] wcscmp (_String1="de", _String2="..") returned 1 [0194.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757d48 [0194.948] wcscpy (in: _Dest=0x6757d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.948] wcscat (in: _Dest=0x6757d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.948] wcscat (in: _Dest=0x6757d48, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0194.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0194.949] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0194.949] wcscmp (_String1="el", _String2=".") returned 1 [0194.949] wcscmp (_String1="el", _String2="..") returned 1 [0194.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757e50 [0194.949] wcscpy (in: _Dest=0x6757e50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.949] wcscat (in: _Dest=0x6757e50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.949] wcscat (in: _Dest=0x6757e50, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0194.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370 [0194.950] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0194.950] wcscmp (_String1="en", _String2=".") returned 1 [0194.950] wcscmp (_String1="en", _String2="..") returned 1 [0194.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6757f58 [0194.951] wcscpy (in: _Dest=0x6757f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.951] wcscat (in: _Dest=0x6757f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.951] wcscat (in: _Dest=0x6757f58, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0194.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0194.952] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0194.952] wcscmp (_String1="es", _String2=".") returned 1 [0194.952] wcscmp (_String1="es", _String2="..") returned 1 [0194.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758060 [0194.952] wcscpy (in: _Dest=0x6758060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.952] wcscat (in: _Dest=0x6758060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.952] wcscat (in: _Dest=0x6758060, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0194.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0194.953] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0194.953] wcscmp (_String1="fi", _String2=".") returned 1 [0194.953] wcscmp (_String1="fi", _String2="..") returned 1 [0194.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758168 [0194.953] wcscpy (in: _Dest=0x6758168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.953] wcscat (in: _Dest=0x6758168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.953] wcscat (in: _Dest=0x6758168, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0194.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0194.954] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0194.954] wcscmp (_String1="fil", _String2=".") returned 1 [0194.954] wcscmp (_String1="fil", _String2="..") returned 1 [0194.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6757400 [0194.954] wcscpy (in: _Dest=0x6757400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.954] wcscat (in: _Dest=0x6757400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.954] wcscat (in: _Dest=0x6757400, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0194.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6757400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0194.955] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0194.955] wcscmp (_String1="fr", _String2=".") returned 1 [0194.955] wcscmp (_String1="fr", _String2="..") returned 1 [0194.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756cc8 [0194.955] wcscpy (in: _Dest=0x6756cc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.955] wcscat (in: _Dest=0x6756cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.955] wcscat (in: _Dest=0x6756cc8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0194.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0194.956] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0194.956] wcscmp (_String1="he", _String2=".") returned 1 [0194.956] wcscmp (_String1="he", _String2="..") returned 1 [0194.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756dd0 [0194.957] wcscpy (in: _Dest=0x6756dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.957] wcscat (in: _Dest=0x6756dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.957] wcscat (in: _Dest=0x6756dd0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0194.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0194.958] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0194.958] wcscmp (_String1="hi", _String2=".") returned 1 [0194.958] wcscmp (_String1="hi", _String2="..") returned 1 [0194.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756ed8 [0194.958] wcscpy (in: _Dest=0x6756ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.958] wcscat (in: _Dest=0x6756ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.958] wcscat (in: _Dest=0x6756ed8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0194.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348 [0194.959] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0194.959] wcscmp (_String1="hr", _String2=".") returned 1 [0194.959] wcscmp (_String1="hr", _String2="..") returned 1 [0194.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756fe0 [0194.959] wcscpy (in: _Dest=0x6756fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.959] wcscat (in: _Dest=0x6756fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.959] wcscat (in: _Dest=0x6756fe0, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0194.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0194.960] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0194.960] wcscmp (_String1="hu", _String2=".") returned 1 [0194.960] wcscmp (_String1="hu", _String2="..") returned 1 [0194.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67570e8 [0194.960] wcscpy (in: _Dest=0x67570e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.960] wcscat (in: _Dest=0x67570e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.960] wcscat (in: _Dest=0x67570e8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0194.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67570e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0194.961] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0194.961] wcscmp (_String1="id", _String2=".") returned 1 [0194.961] wcscmp (_String1="id", _String2="..") returned 1 [0194.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756bc0 [0194.961] wcscpy (in: _Dest=0x6756bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.962] wcscat (in: _Dest=0x6756bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.962] wcscat (in: _Dest=0x6756bc0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0194.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0194.962] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0194.962] wcscmp (_String1="it", _String2=".") returned 1 [0194.962] wcscmp (_String1="it", _String2="..") returned 1 [0194.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6756ab8 [0194.963] wcscpy (in: _Dest=0x6756ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.963] wcscat (in: _Dest=0x6756ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.963] wcscat (in: _Dest=0x6756ab8, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0194.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6756ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0194.964] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0194.964] wcscmp (_String1="ja", _String2=".") returned 1 [0194.964] wcscmp (_String1="ja", _String2="..") returned 1 [0194.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758690 [0194.964] wcscpy (in: _Dest=0x6758690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.964] wcscat (in: _Dest=0x6758690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.964] wcscat (in: _Dest=0x6758690, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0194.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0194.965] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0194.965] wcscmp (_String1="ko", _String2=".") returned 1 [0194.965] wcscmp (_String1="ko", _String2="..") returned 1 [0194.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67588a0 [0194.965] wcscpy (in: _Dest=0x67588a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.965] wcscat (in: _Dest=0x67588a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.965] wcscat (in: _Dest=0x67588a0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0194.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67588a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0194.966] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0194.966] wcscmp (_String1="lt", _String2=".") returned 1 [0194.966] wcscmp (_String1="lt", _String2="..") returned 1 [0194.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758798 [0194.966] wcscpy (in: _Dest=0x6758798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.966] wcscat (in: _Dest=0x6758798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.966] wcscat (in: _Dest=0x6758798, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0194.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0194.967] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0194.967] wcscmp (_String1="lv", _String2=".") returned 1 [0194.967] wcscmp (_String1="lv", _String2="..") returned 1 [0194.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6758588 [0194.967] wcscpy (in: _Dest=0x6758588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.968] wcscat (in: _Dest=0x6758588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.968] wcscat (in: _Dest=0x6758588, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0194.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0194.968] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0194.969] wcscmp (_String1="nl", _String2=".") returned 1 [0194.969] wcscmp (_String1="nl", _String2="..") returned 1 [0194.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753508 [0194.969] wcscpy (in: _Dest=0x6753508, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.969] wcscat (in: _Dest=0x6753508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.969] wcscat (in: _Dest=0x6753508, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0194.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0194.970] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0194.970] wcscmp (_String1="no", _String2=".") returned 1 [0194.970] wcscmp (_String1="no", _String2="..") returned 1 [0194.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754798 [0194.970] wcscpy (in: _Dest=0x6754798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.970] wcscat (in: _Dest=0x6754798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.970] wcscat (in: _Dest=0x6754798, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0194.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0194.971] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0194.971] wcscmp (_String1="pl", _String2=".") returned 1 [0194.971] wcscmp (_String1="pl", _String2="..") returned 1 [0194.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753400 [0194.971] wcscpy (in: _Dest=0x6753400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.971] wcscat (in: _Dest=0x6753400, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.971] wcscat (in: _Dest=0x6753400, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0194.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6753400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0194.972] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0194.972] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0194.972] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0194.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bbc78 [0194.972] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.972] wcscat (in: _Dest=0x30bbc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.972] wcscat (in: _Dest=0x30bbc78, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0194.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bbc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0194.973] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0194.973] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0194.973] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0194.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x30bcce0 [0194.973] wcscpy (in: _Dest=0x30bcce0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.973] wcscat (in: _Dest=0x30bcce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.973] wcscat (in: _Dest=0x30bcce0, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0194.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bcce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0194.974] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0194.974] wcscmp (_String1="ro", _String2=".") returned 1 [0194.974] wcscmp (_String1="ro", _String2="..") returned 1 [0194.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754690 [0194.974] wcscpy (in: _Dest=0x6754690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.975] wcscat (in: _Dest=0x6754690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.975] wcscat (in: _Dest=0x6754690, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0194.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0194.975] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0194.975] wcscmp (_String1="ru", _String2=".") returned 1 [0194.975] wcscmp (_String1="ru", _String2="..") returned 1 [0194.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6752fe0 [0194.976] wcscpy (in: _Dest=0x6752fe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.976] wcscat (in: _Dest=0x6752fe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.976] wcscat (in: _Dest=0x6752fe0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0194.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0194.977] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0194.977] wcscmp (_String1="sk", _String2=".") returned 1 [0194.977] wcscmp (_String1="sk", _String2="..") returned 1 [0194.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754480 [0194.977] wcscpy (in: _Dest=0x6754480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.977] wcscat (in: _Dest=0x6754480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.977] wcscat (in: _Dest=0x6754480, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0194.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0194.978] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0194.978] wcscmp (_String1="sl", _String2=".") returned 1 [0194.978] wcscmp (_String1="sl", _String2="..") returned 1 [0194.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6752ed8 [0194.978] wcscpy (in: _Dest=0x6752ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0194.978] wcscat (in: _Dest=0x6752ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0194.978] wcscat (in: _Dest=0x6752ed8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0194.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0196.348] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0196.348] wcscmp (_String1="sr", _String2=".") returned 1 [0196.348] wcscmp (_String1="sr", _String2="..") returned 1 [0196.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aea50 [0196.348] wcscpy (in: _Dest=0x68aea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.348] wcscat (in: _Dest=0x68aea50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.348] wcscat (in: _Dest=0x68aea50, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0196.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aea50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0196.929] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0196.929] wcscmp (_String1="sv", _String2=".") returned 1 [0196.929] wcscmp (_String1="sv", _String2="..") returned 1 [0196.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44fd8 [0196.930] wcscpy (in: _Dest=0x3d44fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.930] wcscat (in: _Dest=0x3d44fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.930] wcscat (in: _Dest=0x3d44fd8, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0196.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0196.931] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0196.931] wcscmp (_String1="th", _String2=".") returned 1 [0196.931] wcscmp (_String1="th", _String2="..") returned 1 [0196.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45818 [0196.931] wcscpy (in: _Dest=0x3d45818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.931] wcscat (in: _Dest=0x3d45818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.931] wcscat (in: _Dest=0x3d45818, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0196.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0196.932] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0196.932] wcscmp (_String1="tr", _String2=".") returned 1 [0196.932] wcscmp (_String1="tr", _String2="..") returned 1 [0196.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45a28 [0196.932] wcscpy (in: _Dest=0x3d45a28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.932] wcscat (in: _Dest=0x3d45a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.932] wcscat (in: _Dest=0x3d45a28, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0196.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0196.933] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0196.933] wcscmp (_String1="uk", _String2=".") returned 1 [0196.933] wcscmp (_String1="uk", _String2="..") returned 1 [0196.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44270 [0196.934] wcscpy (in: _Dest=0x3d44270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.934] wcscat (in: _Dest=0x3d44270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.934] wcscat (in: _Dest=0x3d44270, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0196.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0196.935] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0196.935] wcscmp (_String1="vi", _String2=".") returned 1 [0196.935] wcscmp (_String1="vi", _String2="..") returned 1 [0196.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d448a0 [0196.935] wcscpy (in: _Dest=0x3d448a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.935] wcscat (in: _Dest=0x3d448a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.935] wcscat (in: _Dest=0x3d448a0, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0196.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0196.936] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0196.936] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0196.936] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0196.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766bd0 [0196.936] wcscpy (in: _Dest=0x6766bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.936] wcscat (in: _Dest=0x6766bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.936] wcscat (in: _Dest=0x6766bd0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0196.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6766bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0196.937] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0196.937] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0196.937] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0196.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766ce8 [0196.937] wcscpy (in: _Dest=0x6766ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0196.937] wcscat (in: _Dest=0x6766ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0196.937] wcscat (in: _Dest=0x6766ce8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0196.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6766ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594 [0196.938] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ed988 | out: lpFindFileData=0x66ed988*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0196.939] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0196.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed988) returned 1 [0196.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac210) returned 1 [0196.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8708) returned 1 Thread: id = 6418 os_tid = 0x25a4 [0190.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x68ac318 [0190.532] wcscpy (in: _Dest=0x68ac318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0190.532] wcscat (in: _Dest=0x68ac318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0190.532] wcscat (in: _Dest=0x68ac318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*" [0190.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea968 [0190.533] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*", lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2be0 [0190.533] wcscmp (_String1=".", _String2=".") returned 0 [0190.533] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.533] wcscmp (_String1="..", _String2=".") returned 1 [0190.533] wcscmp (_String1="..", _String2="..") returned 0 [0190.533] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0190.534] wcscmp (_String1="_locales", _String2=".") returned 1 [0190.534] wcscmp (_String1="_locales", _String2="..") returned 1 [0190.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x675cab8 [0190.534] wcscpy (in: _Dest=0x675cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0190.534] wcscat (in: _Dest=0x675cab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0190.534] wcscat (in: _Dest=0x675cab8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0190.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x675cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0190.930] FindNextFileW (in: hFindFile=0x66d2be0, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0190.930] FindClose (in: hFindFile=0x66d2be0 | out: hFindFile=0x66d2be0) returned 1 [0190.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea968) returned 1 [0190.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac318) returned 1 [0190.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8508) returned 1 Thread: id = 6419 os_tid = 0x25a8 [0190.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ac420 [0190.534] wcscpy (in: _Dest=0x68ac420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0190.535] wcscat (in: _Dest=0x68ac420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0190.535] wcscat (in: _Dest=0x68ac420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*" [0190.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec648 [0190.535] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ba0 [0190.535] wcscmp (_String1=".", _String2=".") returned 0 [0190.535] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.535] wcscmp (_String1="..", _String2=".") returned 1 [0190.535] wcscmp (_String1="..", _String2="..") returned 0 [0190.535] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.535] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.535] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763ae8 [0190.536] wcscpy (in: _Dest=0x6763ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0190.536] wcscat (in: _Dest=0x6763ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0190.536] wcscat (in: _Dest=0x6763ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" [0190.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0190.932] FindNextFileW (in: hFindFile=0x66d2ba0, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.932] FindClose (in: hFindFile=0x66d2ba0 | out: hFindFile=0x66d2ba0) returned 1 [0190.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec648) returned 1 [0190.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac420) returned 1 [0190.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45500) returned 1 Thread: id = 6420 os_tid = 0x25ac [0190.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68acd68 [0190.536] wcscpy (in: _Dest=0x68acd68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0190.536] wcscat (in: _Dest=0x68acd68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0190.536] wcscat (in: _Dest=0x68acd68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*" [0190.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eba40 [0190.536] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2960 [0191.232] wcscmp (_String1=".", _String2=".") returned 0 [0191.232] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.232] wcscmp (_String1="..", _String2=".") returned 1 [0191.232] wcscmp (_String1="..", _String2="..") returned 0 [0191.232] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.232] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.232] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6765648 [0191.232] wcscpy (in: _Dest=0x6765648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0191.232] wcscat (in: _Dest=0x6765648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0191.233] wcscat (in: _Dest=0x6765648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" [0194.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0194.937] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.937] FindClose (in: hFindFile=0x66d2960 | out: hFindFile=0x66d2960) returned 1 [0194.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba40) returned 1 [0194.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acd68) returned 1 [0194.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcc50) returned 1 Thread: id = 6421 os_tid = 0x25b0 [0190.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad8c0 [0190.538] wcscpy (in: _Dest=0x68ad8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0190.538] wcscat (in: _Dest=0x68ad8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0190.538] wcscat (in: _Dest=0x68ad8c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*" [0190.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebca8 [0190.538] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29a0 [0191.233] wcscmp (_String1=".", _String2=".") returned 0 [0191.233] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.233] wcscmp (_String1="..", _String2=".") returned 1 [0191.233] wcscmp (_String1="..", _String2="..") returned 0 [0191.233] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.233] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.233] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6765770 [0191.233] wcscpy (in: _Dest=0x6765770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0191.233] wcscat (in: _Dest=0x6765770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0191.233] wcscat (in: _Dest=0x6765770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" [0194.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0194.939] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.939] FindClose (in: hFindFile=0x66d29a0 | out: hFindFile=0x66d29a0) returned 1 [0194.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebca8) returned 1 [0194.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad8c0) returned 1 [0194.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc620) returned 1 Thread: id = 6422 os_tid = 0x25b4 [0190.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad7b8 [0190.539] wcscpy (in: _Dest=0x68ad7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0190.539] wcscat (in: _Dest=0x68ad7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0190.539] wcscat (in: _Dest=0x68ad7b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*" [0190.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebf10 [0190.539] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0191.234] wcscmp (_String1=".", _String2=".") returned 0 [0191.234] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.234] wcscmp (_String1="..", _String2=".") returned 1 [0191.234] wcscmp (_String1="..", _String2="..") returned 0 [0191.234] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.234] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.234] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6765898 [0191.234] wcscpy (in: _Dest=0x6765898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0191.236] wcscat (in: _Dest=0x6765898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0191.236] wcscat (in: _Dest=0x6765898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" [0191.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0191.642] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.642] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0191.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf10) returned 1 [0191.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad7b8) returned 1 [0191.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817df0) returned 1 Thread: id = 6423 os_tid = 0x25b8 [0190.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad6b0 [0190.540] wcscpy (in: _Dest=0x68ad6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0190.540] wcscat (in: _Dest=0x68ad6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0190.540] wcscat (in: _Dest=0x68ad6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*" [0190.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec178 [0190.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0191.236] wcscmp (_String1=".", _String2=".") returned 0 [0191.236] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.236] wcscmp (_String1="..", _String2=".") returned 1 [0191.236] wcscmp (_String1="..", _String2="..") returned 0 [0191.237] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.237] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.237] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67659c0 [0191.237] wcscpy (in: _Dest=0x67659c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0191.237] wcscat (in: _Dest=0x67659c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0191.237] wcscat (in: _Dest=0x67659c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" [0191.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67659c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0191.645] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.645] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0191.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec178) returned 1 [0191.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad6b0) returned 1 [0191.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818840) returned 1 Thread: id = 6424 os_tid = 0x25bc [0190.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad5a8 [0190.542] wcscpy (in: _Dest=0x68ad5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0190.542] wcscat (in: _Dest=0x68ad5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0190.542] wcscat (in: _Dest=0x68ad5a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*" [0190.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec3e0 [0190.542] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0190.830] wcscmp (_String1=".", _String2=".") returned 0 [0190.830] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.830] wcscmp (_String1="..", _String2=".") returned 1 [0190.830] wcscmp (_String1="..", _String2="..") returned 0 [0190.831] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.831] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.831] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764be0 [0190.831] wcscpy (in: _Dest=0x6764be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0190.831] wcscat (in: _Dest=0x6764be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0190.831] wcscat (in: _Dest=0x6764be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" [0192.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0192.032] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.033] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0192.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3e0) returned 1 [0192.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad5a8) returned 1 [0192.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818948) returned 1 Thread: id = 6425 os_tid = 0x25c0 [0190.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ad4a0 [0190.543] wcscpy (in: _Dest=0x68ad4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0190.543] wcscat (in: _Dest=0x68ad4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0190.543] wcscat (in: _Dest=0x68ad4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*" [0190.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb7d8 [0190.543] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0190.831] wcscmp (_String1=".", _String2=".") returned 0 [0190.831] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.832] wcscmp (_String1="..", _String2=".") returned 1 [0190.832] wcscmp (_String1="..", _String2="..") returned 0 [0190.832] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57db270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.832] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.832] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764d08 [0190.832] wcscpy (in: _Dest=0x6764d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0190.832] wcscat (in: _Dest=0x6764d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0190.832] wcscat (in: _Dest=0x6764d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" [0191.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590 [0191.582] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57db270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.582] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0191.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7d8) returned 1 [0191.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad4a0) returned 1 [0191.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 Thread: id = 6426 os_tid = 0x25c4 [0190.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png")) returned 0x2020 [0190.548] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0194.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1eac [0194.037] GetFileSizeEx (in: hFile=0x1eac, lpFileSize=0xd37fa34 | out: lpFileSize=0xd37fa34*=3000) returned 1 [0194.037] SetFilePointerEx (in: hFile=0x1eac, liDistanceToMove=0xbb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.037] ReadFile (in: hFile=0x1eac, lpBuffer=0xd37fa10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd37fa20, lpOverlapped=0x0 | out: lpBuffer=0xd37fa10*, lpNumberOfBytesRead=0xd37fa20*=0x4, lpOverlapped=0x0) returned 1 [0194.040] SetFilePointerEx (in: hFile=0x1eac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0194.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0194.040] NtQuerySystemTime (in: CurrentTime=0xd37f9a8 | out: CurrentTime=0xd37f9a8*=132482711025120000) returned 0x0 [0194.040] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x2cab748c [0194.040] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x10811e6d [0194.040] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x6f777284 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x2c5e029 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x74839927 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x78c5bb8c [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x53706d69 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x30661c82 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x31caf5ec [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x4d3f70c2 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x255fccfa [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x69c63dde [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x48ca7517 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x7d81b58b [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x7990ae53 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x70c8356f [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x1c5979a0 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x3660279 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x26fb7e7 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x5b54b7bc [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x45eefe36 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x5ee651ff [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x7e42d84c [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x4e163ce1 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0xb888ca0 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x17fc4f91 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x20bd1171 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x6a7a552e [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x132cf426 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x59c588dd [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x84c3480 [0194.041] RtlRandomEx (in: Seed=0xd37f9a0 | out: Seed=0xd37f9a0) returned 0x35a4f703 [0194.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f43c68 [0194.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f47870 [0194.052] ReadFile (in: hFile=0x1eac, lpBuffer=0x12f43c68, nNumberOfBytesToRead=0xbb8, lpNumberOfBytesRead=0xd37f99c, lpOverlapped=0x0 | out: lpBuffer=0x12f43c68*, lpNumberOfBytesRead=0xd37f99c*=0xbb8, lpOverlapped=0x0) returned 1 [0194.052] SetFilePointerEx (in: hFile=0x1eac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.052] WriteFile (in: hFile=0x1eac, lpBuffer=0x12f47870*, nNumberOfBytesToWrite=0xbb8, lpNumberOfBytesWritten=0xd37f9a0, lpOverlapped=0x0 | out: lpBuffer=0x12f47870*, lpNumberOfBytesWritten=0xd37f9a0*=0xbb8, lpOverlapped=0x0) returned 1 [0196.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0196.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f47870) returned 1 [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f43c68) returned 1 [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40e80) returned 1 [0196.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5270 [0196.645] SetFilePointerEx (in: hFile=0x1eac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.645] WriteFile (in: hFile=0x1eac, lpBuffer=0x67681b0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xd37fa28, lpOverlapped=0x0 | out: lpBuffer=0x67681b0*, lpNumberOfBytesWritten=0xd37fa28*=0x10a, lpOverlapped=0x0) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67681b0) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0197.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0197.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x6775520 [0197.582] wcscpy (in: _Dest=0x6775520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0197.582] wcscat (in: _Dest=0x6775520, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.ac3a86" [0197.582] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.ac3a86", NtPathName=0xd37f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41788 [0199.977] FlushFileBuffers (hFile=0x1eac) returned 1 [0199.979] CloseHandle (hObject=0x1eac) returned 1 [0199.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x675e840 [0199.980] wcscpy (in: _Dest=0x675e840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0199.980] wcscat (in: _Dest=0x675e840, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" [0199.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt")) returned 0x2020 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0201.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 Thread: id = 6427 os_tid = 0x25c8 [0190.551] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png")) returned 0x2020 [0190.551] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0194.053] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e34 [0194.054] GetFileSizeEx (in: hFile=0x1e34, lpFileSize=0xdaffae4 | out: lpFileSize=0xdaffae4*=143) returned 1 [0194.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0194.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0194.054] NtQuerySystemTime (in: CurrentTime=0xdaffa58 | out: CurrentTime=0xdaffa58*=132482711025276000) returned 0x0 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x5af060c4 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x775ff1d0 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x24bd9b24 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x5dfd2776 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x413c18fe [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x140b147f [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x6f4a1752 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x3a66a186 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x5caedbc4 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x27e1015b [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x301c602d [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x32f50e13 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x4d4e28f6 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0xcdae441 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x877eb35 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x8f7d1c1 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x4c99c56b [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x5843ab6a [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x26bfc424 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x6055b952 [0194.054] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x1a4a7db3 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x795e39a9 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x4c65636b [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x67917608 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x1f4cca5a [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x44f7c147 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x77f3b291 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x10dd7181 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x47aa64ef [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x559468b6 [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x718a3cde [0194.055] RtlRandomEx (in: Seed=0xdaffa50 | out: Seed=0xdaffa50) returned 0x277663b [0194.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f4b478 [0194.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f4f080 [0194.125] ReadFile (in: hFile=0x1e34, lpBuffer=0x12f4b478, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0xdaffa4c, lpOverlapped=0x0 | out: lpBuffer=0x12f4b478*, lpNumberOfBytesRead=0xdaffa4c*=0x8f, lpOverlapped=0x0) returned 1 [0194.127] SetFilePointerEx (in: hFile=0x1e34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.127] WriteFile (in: hFile=0x1e34, lpBuffer=0x12f4f080*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xdaffa50, lpOverlapped=0x0 | out: lpBuffer=0x12f4f080*, lpNumberOfBytesWritten=0xdaffa50*=0x8f, lpOverlapped=0x0) returned 1 [0195.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d2d8 [0195.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d300 [0195.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d300) returned 1 [0195.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4f080) returned 1 [0195.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4b478) returned 1 [0195.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0195.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40fe8) returned 1 [0195.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x6a862b8 [0195.788] SetFilePointerEx (in: hFile=0x1e34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.789] WriteFile (in: hFile=0x1e34, lpBuffer=0x6771260*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xdaffad8, lpOverlapped=0x0 | out: lpBuffer=0x6771260*, lpNumberOfBytesWritten=0xdaffad8*=0x108, lpOverlapped=0x0) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771260) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a862e8) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d300) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a862b8) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d2d8) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0195.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0195.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6771260 [0195.958] wcscpy (in: _Dest=0x6771260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0195.958] wcscat (in: _Dest=0x6771260, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.ac3a86" [0195.958] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.ac3a86", NtPathName=0xdaffa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6773340 [0196.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773340) returned 1 [0196.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4d60) returned 1 [0196.119] NtQueryInformationFile (in: FileHandle=0x1e34, IoStatusBlock=0xdaffa28, FileInformation=0xdaffa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdaffa28, FileInformation=0xdaffa30) returned 0x0 [0196.119] NtSetInformationFile (FileHandle=0x1e34, IoStatusBlock=0xdaffa28, FileInformation=0xdaffa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771260) returned 1 [0196.273] FlushFileBuffers (hFile=0x1e34) returned 1 [0196.814] CloseHandle (hObject=0x1e34) returned 1 [0197.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x675cbd0 [0197.697] wcscpy (in: _Dest=0x675cbd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0197.697] wcscat (in: _Dest=0x675cbd0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" [0197.697] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt")) returned 0xffffffff [0198.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x239c [0201.136] WriteFile (in: hFile=0x239c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdaffa6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdaffa6c*=0x8b9, lpOverlapped=0x0) returned 1 [0205.968] CloseHandle (hObject=0x239c) returned 1 [0205.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0205.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750f18) returned 1 Thread: id = 6428 os_tid = 0x25cc [0190.552] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html")) returned 0x2020 [0190.552] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html", dwFileAttributes=0x20) returned 1 [0194.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19ec [0194.129] GetFileSizeEx (in: hFile=0x19ec, lpFileSize=0xdd7f7a4 | out: lpFileSize=0xdd7f7a4*=92) returned 1 [0194.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0194.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0194.129] NtQuerySystemTime (in: CurrentTime=0xdd7f718 | out: CurrentTime=0xdd7f718*=132482711026056000) returned 0x0 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x6b90096f [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x49be0ae8 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x2005ebd [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x10e3b944 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x6aab1736 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x73d3bddc [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x32b4c5cd [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x729de029 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x44b12b60 [0194.129] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x1bdb88d2 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x4ffcf8f9 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x17388ed3 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x40220d43 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x24e873e4 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x4b29da12 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x399c0a6c [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x5042678e [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x60367e36 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x1636bf5d [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x321d952b [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x768dda7e [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x7656dedf [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x63651ec6 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x5e05f4ea [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x46471aca [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x26c3292a [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x70b19236 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x4b3df243 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x6364fd9d [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x243d10e4 [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x2b8af2fa [0194.130] RtlRandomEx (in: Seed=0xdd7f710 | out: Seed=0xdd7f710) returned 0x2467e9a4 [0194.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f52c88 [0194.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f56890 [0194.140] ReadFile (in: hFile=0x19ec, lpBuffer=0x12f52c88, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0xdd7f70c, lpOverlapped=0x0 | out: lpBuffer=0x12f52c88*, lpNumberOfBytesRead=0xdd7f70c*=0x5c, lpOverlapped=0x0) returned 1 [0194.143] SetFilePointerEx (in: hFile=0x19ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.143] WriteFile (in: hFile=0x19ec, lpBuffer=0x12f56890*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xdd7f710, lpOverlapped=0x0 | out: lpBuffer=0x12f56890*, lpNumberOfBytesWritten=0xdd7f710*=0x5c, lpOverlapped=0x0) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d328 [0195.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d350 [0195.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d350) returned 1 [0195.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f56890) returned 1 [0195.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f52c88) returned 1 [0195.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014ef0) returned 1 [0195.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a08) returned 1 [0195.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d350 [0195.791] SetFilePointerEx (in: hFile=0x19ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.791] WriteFile (in: hFile=0x19ec, lpBuffer=0x6771378*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xdd7f798, lpOverlapped=0x0 | out: lpBuffer=0x6771378*, lpNumberOfBytesWritten=0xdd7f798*=0x104, lpOverlapped=0x0) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771378) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d378) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d3a0) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d350) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d328) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0195.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0195.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6771378 [0195.961] wcscpy (in: _Dest=0x6771378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" [0195.961] wcscat (in: _Dest=0x6771378, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.ac3a86" [0195.961] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.ac3a86", NtPathName=0xdd7f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6773478 [0196.288] FlushFileBuffers (hFile=0x19ec) returned 1 [0196.815] CloseHandle (hObject=0x19ec) returned 1 [0197.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x675e3e0 [0197.701] wcscpy (in: _Dest=0x675e3e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0197.701] wcscat (in: _Dest=0x675e3e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" [0197.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt")) returned 0xffffffff [0198.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cd4 [0200.799] WriteFile (in: hFile=0x1cd4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdd7f72c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdd7f72c*=0x8b9, lpOverlapped=0x0) returned 1 [0204.279] CloseHandle (hObject=0x1cd4) returned 1 [0215.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0215.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae528) returned 1 Thread: id = 6429 os_tid = 0x25d0 [0190.553] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js")) returned 0x2020 [0190.553] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js", dwFileAttributes=0x20) returned 1 [0194.143] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1688 [0194.144] GetFileSizeEx (in: hFile=0x1688, lpFileSize=0xdf3f84c | out: lpFileSize=0xdf3f84c*=79) returned 1 [0194.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0194.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0194.145] NtQuerySystemTime (in: CurrentTime=0xdf3f7c0 | out: CurrentTime=0xdf3f7c0*=132482711026212000) returned 0x0 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x7fbab524 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x757161b6 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x6f4b3dd6 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x70e63cd1 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x645ed883 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x5a41625d [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x627119f3 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x4ebf3af5 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x2cb5a6a8 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x282f5d11 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x61532996 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x2366d524 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x4b43b465 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x1cda25e [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x5b3a47ed [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x4d31725e [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x506e04af [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x1d301e33 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x158159f [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x218cfdb [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x337b613b [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x14bf4bdd [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x276963d [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x3c2b1fea [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x41b0548e [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x2a06a2d7 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x6bf7aed6 [0194.145] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x4990a286 [0194.146] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x6d84122e [0194.146] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0xa8caa37 [0194.146] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0xa9060fc [0194.146] RtlRandomEx (in: Seed=0xdf3f7b8 | out: Seed=0xdf3f7b8) returned 0x2c50337 [0194.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f5a498 [0194.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f5e0a0 [0194.156] ReadFile (in: hFile=0x1688, lpBuffer=0x12f5a498, nNumberOfBytesToRead=0x4f, lpNumberOfBytesRead=0xdf3f7b4, lpOverlapped=0x0 | out: lpBuffer=0x12f5a498*, lpNumberOfBytesRead=0xdf3f7b4*=0x4f, lpOverlapped=0x0) returned 1 [0194.159] SetFilePointerEx (in: hFile=0x1688, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.159] WriteFile (in: hFile=0x1688, lpBuffer=0x12f5e0a0*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xdf3f7b8, lpOverlapped=0x0 | out: lpBuffer=0x12f5e0a0*, lpNumberOfBytesWritten=0xdf3f7b8*=0x4f, lpOverlapped=0x0) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d3c8 [0195.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d3f0 [0195.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d3f0) returned 1 [0195.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5e0a0) returned 1 [0195.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5a498) returned 1 [0195.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0195.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41198) returned 1 [0195.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x676d3f0 [0195.792] SetFilePointerEx (in: hFile=0x1688, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.793] WriteFile (in: hFile=0x1688, lpBuffer=0x6757f58*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xdf3f840, lpOverlapped=0x0 | out: lpBuffer=0x6757f58*, lpNumberOfBytesWritten=0xdf3f840*=0x100, lpOverlapped=0x0) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757f58) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d418) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d440) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d3f0) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d3c8) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0195.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0195.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6771030 [0195.965] wcscpy (in: _Dest=0x6771030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" [0195.965] wcscat (in: _Dest=0x6771030, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.ac3a86" [0195.965] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.ac3a86", NtPathName=0xdf3f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6775648 [0196.286] FlushFileBuffers (hFile=0x1688) returned 1 [0196.815] CloseHandle (hObject=0x1688) returned 1 [0197.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x675e4f8 [0197.699] wcscpy (in: _Dest=0x675e4f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0197.699] wcscat (in: _Dest=0x675e4f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" [0197.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt")) returned 0xffffffff [0198.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2394 [0201.136] WriteFile (in: hFile=0x2394, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdf3f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdf3f7d4*=0x8b9, lpOverlapped=0x0) returned 1 [0206.865] CloseHandle (hObject=0x2394) returned 1 [0208.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0208.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae840) returned 1 Thread: id = 6430 os_tid = 0x25d4 [0190.554] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json")) returned 0x2020 [0190.554] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0194.159] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd0 [0194.160] GetFileSizeEx (in: hFile=0xfd0, lpFileSize=0xa99fa0c | out: lpFileSize=0xa99fa0c*=649) returned 1 [0194.160] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.160] ReadFile (in: hFile=0xfd0, lpBuffer=0xa99f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa99f9f8, lpOverlapped=0x0 | out: lpBuffer=0xa99f9e8*, lpNumberOfBytesRead=0xa99f9f8*=0x4, lpOverlapped=0x0) returned 1 [0194.163] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0194.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0194.163] NtQuerySystemTime (in: CurrentTime=0xa99f980 | out: CurrentTime=0xa99f980*=132482711026368000) returned 0x0 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x1b270749 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x3ae8ce35 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x66988f6 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x66e78381 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x100fa619 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x2f9e924b [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x3d5abef8 [0194.163] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x2b18cd6a [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x6895b4a8 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0xc945e77 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x716bea27 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x539acf9d [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x5f687eae [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x232b085a [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x71fdec55 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x4ea7d66e [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x56de494a [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x5a0771b2 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x1728062e [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x78418e49 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x189bf330 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x3420c478 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x73b4cfb6 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x2d40a6ca [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x54b400d3 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x2a348692 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x377cad91 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x14fa5ac4 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x7f89fd11 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x26d9b677 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x142e42e2 [0194.164] RtlRandomEx (in: Seed=0xa99f978 | out: Seed=0xa99f978) returned 0x43e8ce58 [0194.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f61ca8 [0194.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f658b0 [0194.175] ReadFile (in: hFile=0xfd0, lpBuffer=0x12f61ca8, nNumberOfBytesToRead=0x289, lpNumberOfBytesRead=0xa99f974, lpOverlapped=0x0 | out: lpBuffer=0x12f61ca8*, lpNumberOfBytesRead=0xa99f974*=0x289, lpOverlapped=0x0) returned 1 [0194.175] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.175] WriteFile (in: hFile=0xfd0, lpBuffer=0x12f658b0*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0xa99f978, lpOverlapped=0x0 | out: lpBuffer=0x12f658b0*, lpNumberOfBytesWritten=0xa99f978*=0x289, lpOverlapped=0x0) returned 1 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0196.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0196.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f658b0) returned 1 [0196.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f61ca8) returned 1 [0196.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0196.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e412b8) returned 1 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ff0 [0196.860] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.860] WriteFile (in: hFile=0xfd0, lpBuffer=0x6766ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa99fa00, lpOverlapped=0x0 | out: lpBuffer=0x6766ab8*, lpNumberOfBytesWritten=0xa99fa00*=0x10c, lpOverlapped=0x0) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0197.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0197.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x677a1d8 [0197.586] wcscpy (in: _Dest=0x677a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" [0197.586] wcscat (in: _Dest=0x677a1d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json.ac3a86" [0197.586] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json.ac3a86", NtPathName=0xa99f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d412a8 [0200.279] FlushFileBuffers (hFile=0xfd0) returned 1 [0200.280] CloseHandle (hObject=0xfd0) returned 1 [0200.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc1f0 [0200.281] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0200.281] wcscat (in: _Dest=0x30bc1f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" [0200.281] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\ac3a86-readme.txt")) returned 0x2020 [0204.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0204.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e610) returned 1 Thread: id = 6431 os_tid = 0x25d8 [0190.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ad398 [0190.555] wcscpy (in: _Dest=0x68ad398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0190.555] wcscat (in: _Dest=0x68ad398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\" [0190.555] wcscat (in: _Dest=0x68ad398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*" [0190.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb570 [0190.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*", lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b60 [0190.555] wcscmp (_String1=".", _String2=".") returned 0 [0190.555] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.555] wcscmp (_String1="..", _String2=".") returned 1 [0190.555] wcscmp (_String1="..", _String2="..") returned 0 [0190.555] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0190.555] FindClose (in: hFindFile=0x66d2b60 | out: hFindFile=0x66d2b60) returned 1 [0190.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb570) returned 1 [0190.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad398) returned 1 [0190.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae948) returned 1 Thread: id = 6432 os_tid = 0x25dc [0190.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0194.555] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ff4 [0194.556] GetFileSizeEx (in: hFile=0x1ff4, lpFileSize=0xb1efa94 | out: lpFileSize=0xb1efa94*=293) returned 1 [0194.556] SetFilePointerEx (in: hFile=0x1ff4, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.556] ReadFile (in: hFile=0x1ff4, lpBuffer=0xb1efa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1efa80, lpOverlapped=0x0 | out: lpBuffer=0xb1efa70*, lpNumberOfBytesRead=0xb1efa80*=0x4, lpOverlapped=0x0) returned 1 [0194.562] SetFilePointerEx (in: hFile=0x1ff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0194.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0194.562] NtQuerySystemTime (in: CurrentTime=0xb1efa08 | out: CurrentTime=0xb1efa08*=132482711030424000) returned 0x0 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x3f6658 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x2a70925d [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0xd32af91 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x27d3958c [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x18ada74b [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4dbac703 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4e1604b7 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x1e6bcd13 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4398b482 [0194.562] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x17798dca [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x24cc478 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4016fef7 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x3935f8f0 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0xd44792f [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x54b6bb50 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x67c94990 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x37451612 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x64142b3c [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x6b5cde3e [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x648de742 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4a29dc06 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x1800f7fb [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x503d8b5c [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x21a87353 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x78e04b69 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x343ceaac [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x7646a2f6 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x4bf48f0f [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x66e28276 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x638da736 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x6d696b0 [0194.563] RtlRandomEx (in: Seed=0xb1efa00 | out: Seed=0xb1efa00) returned 0x55870cd [0194.571] ReadFile (in: hFile=0x1ff4, lpBuffer=0x130258b0, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0xb1ef9fc, lpOverlapped=0x0 | out: lpBuffer=0x130258b0*, lpNumberOfBytesRead=0xb1ef9fc*=0x125, lpOverlapped=0x0) returned 1 [0194.571] SetFilePointerEx (in: hFile=0x1ff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.571] WriteFile (in: hFile=0x1ff4, lpBuffer=0x130294b8*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xb1efa00, lpOverlapped=0x0 | out: lpBuffer=0x130294b8*, lpNumberOfBytesWritten=0xb1efa00*=0x125, lpOverlapped=0x0) returned 1 [0197.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d18 [0197.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef38b8 [0197.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0197.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130294b8) returned 1 [0197.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130258b0) returned 1 [0197.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f284c0) returned 1 [0197.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e608e0) returned 1 [0197.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85f88 [0197.318] SetFilePointerEx (in: hFile=0x1ff4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.318] WriteFile (in: hFile=0x1ff4, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1efa88, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0xb1efa88*=0x10c, lpOverlapped=0x0) returned 1 [0197.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0197.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fb8) returned 1 [0197.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0197.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f88) returned 1 [0197.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0197.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0197.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0197.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0197.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773d00 [0197.629] wcscpy (in: _Dest=0x6773d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" [0197.629] wcscat (in: _Dest=0x6773d00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.ac3a86" [0197.629] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0xb1efa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a6e8 [0197.988] FlushFileBuffers (hFile=0x1ff4) returned 1 [0198.001] CloseHandle (hObject=0x1ff4) returned 1 [0198.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a1d8 [0198.122] wcscpy (in: _Dest=0x676a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0198.122] wcscat (in: _Dest=0x676a1d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\AC3A86-Readme.txt" [0198.122] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0198.122] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1028 [0199.115] WriteFile (in: hFile=0x1028, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb1efa1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb1efa1c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.021] CloseHandle (hObject=0x1028) returned 1 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a1d8) returned 1 [0200.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55ce0) returned 1 Thread: id = 6433 os_tid = 0x25e0 [0190.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.559] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0194.176] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dd4 [0194.177] GetFileSizeEx (in: hFile=0x1dd4, lpFileSize=0xe18f8d4 | out: lpFileSize=0xe18f8d4*=258) returned 1 [0194.177] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.177] ReadFile (in: hFile=0x1dd4, lpBuffer=0xe18f8b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe18f8c0, lpOverlapped=0x0 | out: lpBuffer=0xe18f8b0*, lpNumberOfBytesRead=0xe18f8c0*=0x4, lpOverlapped=0x0) returned 1 [0194.179] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b540 [0194.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0194.179] NtQuerySystemTime (in: CurrentTime=0xe18f848 | out: CurrentTime=0xe18f848*=132482711026524000) returned 0x0 [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x231123a4 [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x1724dc81 [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x5f43962a [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x56fb9569 [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x5f2f9084 [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x44cede8d [0194.179] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x8cb7e37 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x22e64ae4 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x22184e56 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0xb57f0e2 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x17eb72e5 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x4bafce21 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x1b0db64e [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x4aaf340d [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x67a7d9b6 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x193bcb8a [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x17417c9e [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x4bd0ffab [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x619a0dbe [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x2b7a0133 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x2cca5bf0 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x5e76d153 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x6b2dca04 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x10803ecc [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x7154c67f [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x6aa44ec2 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x21570e22 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x39f8f7f2 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x7832ebfc [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x49e1e26b [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x624f7e55 [0194.180] RtlRandomEx (in: Seed=0xe18f840 | out: Seed=0xe18f840) returned 0x80a0ac6 [0194.191] ReadFile (in: hFile=0x1dd4, lpBuffer=0x12f694b8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xe18f83c, lpOverlapped=0x0 | out: lpBuffer=0x12f694b8*, lpNumberOfBytesRead=0xe18f83c*=0x102, lpOverlapped=0x0) returned 1 [0194.191] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.191] WriteFile (in: hFile=0x1dd4, lpBuffer=0x12f6d0c0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xe18f840, lpOverlapped=0x0 | out: lpBuffer=0x12f6d0c0*, lpNumberOfBytesWritten=0xe18f840*=0x102, lpOverlapped=0x0) returned 1 [0195.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d468 [0195.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d490 [0195.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d490) returned 1 [0195.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f6d0c0) returned 1 [0195.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f694b8) returned 1 [0195.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0195.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40f10) returned 1 [0195.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86318 [0195.795] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.795] WriteFile (in: hFile=0x1dd4, lpBuffer=0x6771490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe18f8c8, lpOverlapped=0x0 | out: lpBuffer=0x6771490*, lpNumberOfBytesWritten=0xe18f8c8*=0x10c, lpOverlapped=0x0) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771490) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86348) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d490) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86318) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d468) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0195.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0195.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0195.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67735b0 [0195.967] wcscpy (in: _Dest=0x67735b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" [0195.967] wcscat (in: _Dest=0x67735b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.ac3a86" [0195.967] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xe18f840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777ca8 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777ca8) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8be78) returned 1 [0196.053] NtQueryInformationFile (in: FileHandle=0x1dd4, IoStatusBlock=0xe18f818, FileInformation=0xe18f820, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe18f818, FileInformation=0xe18f820) returned 0x0 [0196.053] NtSetInformationFile (FileHandle=0x1dd4, IoStatusBlock=0xe18f818, FileInformation=0xe18f820, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67735b0) returned 1 [0196.260] FlushFileBuffers (hFile=0x1dd4) returned 1 [0196.813] CloseHandle (hObject=0x1dd4) returned 1 [0197.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6788ab8 [0198.319] wcscpy (in: _Dest=0x6788ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0198.320] wcscat (in: _Dest=0x6788ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\AC3A86-Readme.txt" [0198.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0198.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.166] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe18f85c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe18f85c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.168] CloseHandle (hObject=0x1848) returned 1 [0200.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788ab8) returned 1 [0200.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55e08) returned 1 Thread: id = 6434 os_tid = 0x25e4 [0190.560] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json")) returned 0x2020 [0190.560] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0200.614] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d4 [0200.614] GetFileSizeEx (in: hFile=0x17d4, lpFileSize=0xd17ff44 | out: lpFileSize=0xd17ff44*=254) returned 1 [0200.614] SetFilePointerEx (in: hFile=0x17d4, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.614] ReadFile (in: hFile=0x17d4, lpBuffer=0xd17ff20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd17ff30, lpOverlapped=0x0 | out: lpBuffer=0xd17ff20*, lpNumberOfBytesRead=0xd17ff30*=0x4, lpOverlapped=0x0) returned 1 [0200.616] SetFilePointerEx (in: hFile=0x17d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1360 [0200.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0200.617] NtQuerySystemTime (in: CurrentTime=0xd17feb8 | out: CurrentTime=0xd17feb8*=132482711090952000) returned 0x0 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x7bb0b11 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x1bd99aa4 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x29fd55a9 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0xcdbdfca [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x78db0269 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x6808f340 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x60f4b363 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x200450c4 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x34ab1e0 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0xb6f12c0 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x5dec4278 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x6bed613d [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x29ec4092 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x42b0ba81 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x6cb83e8a [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x5cf4a333 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x59f74605 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x4f92e2a8 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x760e223e [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x658d1055 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x35c426a2 [0200.617] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x3107334b [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x1709a760 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x6b2006de [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x61523b00 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x7630a723 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x14ec3878 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x2ecb62c0 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0xd63757a [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x2837d9b6 [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x1177faef [0200.618] RtlRandomEx (in: Seed=0xd17feb0 | out: Seed=0xd17feb0) returned 0x3f7047c [0200.628] ReadFile (in: hFile=0x17d4, lpBuffer=0x12f43c68, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xd17feac, lpOverlapped=0x0 | out: lpBuffer=0x12f43c68*, lpNumberOfBytesRead=0xd17feac*=0xfe, lpOverlapped=0x0) returned 1 [0200.628] SetFilePointerEx (in: hFile=0x17d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.628] WriteFile (in: hFile=0x17d4, lpBuffer=0x12f47870*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xd17feb0, lpOverlapped=0x0 | out: lpBuffer=0x12f47870*, lpNumberOfBytesWritten=0xd17feb0*=0xfe, lpOverlapped=0x0) returned 1 [0203.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0203.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6d0 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f47870) returned 1 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f43c68) returned 1 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0203.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ed20) returned 1 [0203.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60b0 [0203.231] SetFilePointerEx (in: hFile=0x17d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.231] WriteFile (in: hFile=0x17d4, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd17ff38, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xd17ff38*=0x10c, lpOverlapped=0x0) returned 1 [0204.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0204.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0204.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0204.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60b0) returned 1 [0204.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0204.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0204.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0204.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0204.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6750428 [0204.606] wcscpy (in: _Dest=0x6750428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" [0204.606] wcscat (in: _Dest=0x6750428, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.ac3a86" [0204.606] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0xd17feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6778830 [0206.574] FlushFileBuffers (hFile=0x17d4) returned 1 [0206.588] CloseHandle (hObject=0x17d4) returned 1 [0209.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12eac9a0 [0209.045] wcscpy (in: _Dest=0x12eac9a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0209.045] wcscat (in: _Dest=0x12eac9a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\AC3A86-Readme.txt" [0209.045] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0209.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1144 [0209.346] WriteFile (in: hFile=0x1144, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd17fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd17fecc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.883] CloseHandle (hObject=0x1144) returned 1 [0209.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac9a0) returned 1 [0209.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755f88) returned 1 Thread: id = 6435 os_tid = 0x25e8 [0190.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 0x2020 [0190.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0194.191] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dd0 [0194.192] GetFileSizeEx (in: hFile=0x1dd0, lpFileSize=0x226fc6c | out: lpFileSize=0x226fc6c*=11770) returned 1 [0194.192] SetFilePointerEx (in: hFile=0x1dd0, liDistanceToMove=0x2df6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.193] ReadFile (in: hFile=0x1dd0, lpBuffer=0x226fc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x226fc58, lpOverlapped=0x0 | out: lpBuffer=0x226fc48*, lpNumberOfBytesRead=0x226fc58*=0x4, lpOverlapped=0x0) returned 1 [0194.201] SetFilePointerEx (in: hFile=0x1dd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0194.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c170 [0194.201] NtQuerySystemTime (in: CurrentTime=0x226fbe0 | out: CurrentTime=0x226fbe0*=132482711026836000) returned 0x0 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x5ebac306 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x62c3804c [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x2a7fe831 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x6bd2ca18 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x2568fe24 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x697d353d [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x2072b01c [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x445610fe [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x5e11954d [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x1e29423 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x11d536b7 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x2da38167 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x37c5b325 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x53a96f79 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x4cb6b878 [0194.201] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x71e96d42 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x626fd4f6 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x7c90e653 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x42efcacb [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0xc6b67fb [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x45d31c16 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x1b57280 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x78d04820 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x54dd79d8 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0xd4e3563 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x1a0ba9c1 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x5a7b7a0e [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x6dae54b6 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x55b22f4c [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x6bc792b7 [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x39cbb00c [0194.202] RtlRandomEx (in: Seed=0x226fbd8 | out: Seed=0x226fbd8) returned 0x264c7ea1 [0194.212] ReadFile (in: hFile=0x1dd0, lpBuffer=0x12f70cc8, nNumberOfBytesToRead=0x2dfa, lpNumberOfBytesRead=0x226fbd4, lpOverlapped=0x0 | out: lpBuffer=0x12f70cc8*, lpNumberOfBytesRead=0x226fbd4*=0x2dfa, lpOverlapped=0x0) returned 1 [0194.213] SetFilePointerEx (in: hFile=0x1dd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.213] WriteFile (in: hFile=0x1dd0, lpBuffer=0x12f748d0*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x226fbd8, lpOverlapped=0x0 | out: lpBuffer=0x12f748d0*, lpNumberOfBytesWritten=0x226fbd8*=0x2dfa, lpOverlapped=0x0) returned 1 [0197.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0197.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312dd8 [0197.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312dd8) returned 1 [0197.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f748d0) returned 1 [0197.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f70cc8) returned 1 [0197.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0197.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e416a8) returned 1 [0197.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e416a8 [0197.128] SetFilePointerEx (in: hFile=0x1dd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.128] WriteFile (in: hFile=0x1dd0, lpBuffer=0x6775520*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x226fc60, lpOverlapped=0x0 | out: lpBuffer=0x6775520*, lpNumberOfBytesWritten=0x226fc60*=0x11e, lpOverlapped=0x0) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775520) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1fd8) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312dd8) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e416a8) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0197.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0197.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777120 [0197.581] wcscpy (in: _Dest=0x6777120, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" [0197.581] wcscat (in: _Dest=0x6777120, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.ac3a86" [0197.581] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0x226fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e4d458 [0199.983] FlushFileBuffers (hFile=0x1dd0) returned 1 [0200.200] CloseHandle (hObject=0x1dd0) returned 1 [0200.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d413e0 [0200.206] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0200.206] wcscat (in: _Dest=0x3d413e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\AC3A86-Readme.txt" [0200.206] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0200.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dd0 [0200.206] WriteFile (in: hFile=0x1dd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x226fbf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x226fbf4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.208] CloseHandle (hObject=0x1dd0) returned 1 [0200.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 [0200.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402d0) returned 1 Thread: id = 6436 os_tid = 0x25ec [0190.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 0x2020 [0191.216] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0193.101] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f94 [0193.102] GetFileSizeEx (in: hFile=0x1f94, lpFileSize=0xcd1fdfc | out: lpFileSize=0xcd1fdfc*=237) returned 1 [0193.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0193.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab28 [0193.102] NtQuerySystemTime (in: CurrentTime=0xcd1fd70 | out: CurrentTime=0xcd1fd70*=132482711015760000) returned 0x0 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0xe8d1e04 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x70bf1029 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x1b82e2f3 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x5148591a [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x47d1d144 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x6ecd7513 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x35610ed8 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x492f2c01 [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x5f974c9c [0193.102] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x307bc3f4 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x77635bd3 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x19244627 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x7936324e [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x10cc0aaa [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x2d66a2cb [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x6897afe6 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x696c7f13 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x59fabcba [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x4cb19e0b [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x52dec9d [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x5aaee7a7 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x42db93e0 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x5f2fb436 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x32ea9ea2 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x730831d0 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x4cb19e0b [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x57acc43e [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x1f725370 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x10cc0aaa [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x3b731102 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x3111f6b3 [0193.103] RtlRandomEx (in: Seed=0xcd1fd68 | out: Seed=0xcd1fd68) returned 0x2abb1ff8 [0193.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69fe160 [0193.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a01d68 [0193.111] ReadFile (in: hFile=0x1f94, lpBuffer=0x69fe160, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0xcd1fd64, lpOverlapped=0x0 | out: lpBuffer=0x69fe160*, lpNumberOfBytesRead=0xcd1fd64*=0xed, lpOverlapped=0x0) returned 1 [0193.113] SetFilePointerEx (in: hFile=0x1f94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.113] WriteFile (in: hFile=0x1f94, lpBuffer=0x6a01d68*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0xcd1fd68, lpOverlapped=0x0 | out: lpBuffer=0x6a01d68*, lpNumberOfBytesWritten=0xcd1fd68*=0xed, lpOverlapped=0x0) returned 1 [0195.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0195.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a01d68) returned 1 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fe160) returned 1 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0195.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822360) returned 1 [0195.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0195.667] SetFilePointerEx (in: hFile=0x1f94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.667] WriteFile (in: hFile=0x1f94, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcd1fdf0, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0xcd1fdf0*=0x10c, lpOverlapped=0x0) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0195.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0195.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41b30 [0195.840] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" [0195.840] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.ac3a86" [0195.840] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xcd1fd68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6768ab8 [0195.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768ab8) returned 1 [0195.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6890070) returned 1 [0195.989] NtQueryInformationFile (in: FileHandle=0x1f94, IoStatusBlock=0xcd1fd40, FileInformation=0xcd1fd48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcd1fd40, FileInformation=0xcd1fd48) returned 0x0 [0195.989] NtSetInformationFile (FileHandle=0x1f94, IoStatusBlock=0xcd1fd40, FileInformation=0xcd1fd48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b30) returned 1 [0196.124] FlushFileBuffers (hFile=0x1f94) returned 1 [0196.816] CloseHandle (hObject=0x1f94) returned 1 [0197.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e9a060 [0198.340] wcscpy (in: _Dest=0x12e9a060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0198.340] wcscat (in: _Dest=0x12e9a060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\AC3A86-Readme.txt" [0198.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0198.340] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.096] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcd1fd84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcd1fd84*=0x8b9, lpOverlapped=0x0) returned 1 [0200.097] CloseHandle (hObject=0xac4) returned 1 [0200.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9a060) returned 1 [0200.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755d38) returned 1 Thread: id = 6437 os_tid = 0x25f0 [0190.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0190.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0194.214] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dcc [0194.215] GetFileSizeEx (in: hFile=0x1dcc, lpFileSize=0x88cfdac | out: lpFileSize=0x88cfdac*=278) returned 1 [0194.215] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.215] ReadFile (in: hFile=0x1dcc, lpBuffer=0x88cfd88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88cfd98, lpOverlapped=0x0 | out: lpBuffer=0x88cfd88*, lpNumberOfBytesRead=0x88cfd98*=0x4, lpOverlapped=0x0) returned 1 [0194.217] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c170 [0194.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0194.217] NtQuerySystemTime (in: CurrentTime=0x88cfd20 | out: CurrentTime=0x88cfd20*=132482711026992000) returned 0x0 [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x6c6d03e9 [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x4b23bd74 [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x1f1d66ae [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x27e5b2f2 [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x53d4924d [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x25cad3be [0194.217] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x51744589 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x330b1901 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0xbcebbb7 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x387349ce [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x353d509f [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x703aea29 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x28ea0c50 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x1d915b64 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x2b76cce4 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x47b80812 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x69383daa [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x6fdf55e6 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x1d4a35e8 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x6fad9ee3 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x41d92e0a [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x4f57d850 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x84e897a [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x18d1fe99 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x629a9ddb [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x7f6e6525 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0xd805cc5 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x16691dbc [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x11d943c5 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x27bc7ac3 [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x4e9f186c [0194.218] RtlRandomEx (in: Seed=0x88cfd18 | out: Seed=0x88cfd18) returned 0x2e62aac [0194.228] ReadFile (in: hFile=0x1dcc, lpBuffer=0x12f784d8, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x88cfd14, lpOverlapped=0x0 | out: lpBuffer=0x12f784d8*, lpNumberOfBytesRead=0x88cfd14*=0x116, lpOverlapped=0x0) returned 1 [0194.228] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.228] WriteFile (in: hFile=0x1dcc, lpBuffer=0x12f7c0e0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x88cfd18, lpOverlapped=0x0 | out: lpBuffer=0x12f7c0e0*, lpNumberOfBytesWritten=0x88cfd18*=0x116, lpOverlapped=0x0) returned 1 [0195.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d4b8 [0195.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d4e0 [0195.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d4e0) returned 1 [0195.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f7c0e0) returned 1 [0195.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f784d8) returned 1 [0195.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0195.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41030) returned 1 [0195.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86378 [0195.800] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.800] WriteFile (in: hFile=0x1dcc, lpBuffer=0x67715a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88cfda0, lpOverlapped=0x0 | out: lpBuffer=0x67715a8*, lpNumberOfBytesWritten=0x88cfda0*=0x10c, lpOverlapped=0x0) returned 1 [0195.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67715a8) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a863a8) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d4e0) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86378) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d4b8) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0195.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0195.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67736e8 [0195.969] wcscpy (in: _Dest=0x67736e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" [0195.969] wcscat (in: _Dest=0x67736e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.ac3a86" [0195.969] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0x88cfd18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777df0 [0197.812] FlushFileBuffers (hFile=0x1dcc) returned 1 [0197.816] CloseHandle (hObject=0x1dcc) returned 1 [0197.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6773a90 [0197.946] wcscpy (in: _Dest=0x6773a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0197.946] wcscat (in: _Dest=0x6773a90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\AC3A86-Readme.txt" [0197.946] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0197.947] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c00 [0199.102] WriteFile (in: hFile=0x1c00, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x88cfd34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x88cfd34*=0x8b9, lpOverlapped=0x0) returned 1 [0199.867] CloseHandle (hObject=0x1c00) returned 1 [0199.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773a90) returned 1 [0199.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f770) returned 1 Thread: id = 6438 os_tid = 0x25f4 [0190.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae948 [0190.564] wcscpy (in: _Dest=0x68ae948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0190.564] wcscat (in: _Dest=0x68ae948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0190.564] wcscat (in: _Dest=0x68ae948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*" [0190.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb570 [0190.564] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b60 [0190.565] wcscmp (_String1=".", _String2=".") returned 0 [0190.565] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.565] wcscmp (_String1="..", _String2=".") returned 1 [0190.565] wcscmp (_String1="..", _String2="..") returned 0 [0190.565] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.565] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.565] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763c10 [0190.565] wcscpy (in: _Dest=0x6763c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0190.565] wcscat (in: _Dest=0x6763c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0190.565] wcscat (in: _Dest=0x6763c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" [0190.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0190.935] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.935] FindClose (in: hFindFile=0x66d2b60 | out: hFindFile=0x66d2b60) returned 1 [0190.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb570) returned 1 [0190.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae948) returned 1 [0190.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450e0) returned 1 Thread: id = 6439 os_tid = 0x25f8 [0190.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68adce8 [0190.566] wcscpy (in: _Dest=0x68adce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0190.566] wcscat (in: _Dest=0x68adce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0190.566] wcscat (in: _Dest=0x68adce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*" [0190.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb308 [0190.566] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b20 [0190.566] wcscmp (_String1=".", _String2=".") returned 0 [0190.566] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.566] wcscmp (_String1="..", _String2=".") returned 1 [0190.567] wcscmp (_String1="..", _String2="..") returned 0 [0190.567] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.567] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.567] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763d38 [0190.567] wcscpy (in: _Dest=0x6763d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0190.567] wcscat (in: _Dest=0x6763d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0190.567] wcscat (in: _Dest=0x6763d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" [0190.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0190.937] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.937] FindClose (in: hFindFile=0x66d2b20 | out: hFindFile=0x66d2b20) returned 1 [0190.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb308) returned 1 [0190.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adce8) returned 1 [0190.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 6440 os_tid = 0x25fc [0190.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68addf0 [0190.567] wcscpy (in: _Dest=0x68addf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0190.567] wcscat (in: _Dest=0x68addf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0190.568] wcscat (in: _Dest=0x68addf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*" [0190.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb0a0 [0190.568] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ae0 [0190.568] wcscmp (_String1=".", _String2=".") returned 0 [0190.568] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.568] wcscmp (_String1="..", _String2=".") returned 1 [0190.568] wcscmp (_String1="..", _String2="..") returned 0 [0190.568] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.568] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.568] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763e60 [0190.568] wcscpy (in: _Dest=0x6763e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0190.568] wcscat (in: _Dest=0x6763e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0190.569] wcscat (in: _Dest=0x6763e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" [0190.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0190.940] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.940] FindClose (in: hFindFile=0x66d2ae0 | out: hFindFile=0x66d2ae0) returned 1 [0190.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0190.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68addf0) returned 1 [0190.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 6441 os_tid = 0x2600 [0190.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68adef8 [0190.569] wcscpy (in: _Dest=0x68adef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0190.569] wcscat (in: _Dest=0x68adef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0190.569] wcscat (in: _Dest=0x68adef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*" [0190.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eae38 [0190.569] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2aa0 [0190.570] wcscmp (_String1=".", _String2=".") returned 0 [0190.570] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.570] wcscmp (_String1="..", _String2=".") returned 1 [0190.570] wcscmp (_String1="..", _String2="..") returned 0 [0190.570] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.570] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.570] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6763f88 [0190.570] wcscpy (in: _Dest=0x6763f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0190.570] wcscat (in: _Dest=0x6763f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0190.570] wcscat (in: _Dest=0x6763f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" [0190.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6763f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0190.942] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.942] FindClose (in: hFindFile=0x66d2aa0 | out: hFindFile=0x66d2aa0) returned 1 [0190.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae38) returned 1 [0190.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adef8) returned 1 [0190.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d453f8) returned 1 Thread: id = 6442 os_tid = 0x2604 [0190.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae000 [0190.571] wcscpy (in: _Dest=0x68ae000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0190.571] wcscat (in: _Dest=0x68ae000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0190.571] wcscat (in: _Dest=0x68ae000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*" [0190.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea498 [0190.571] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a60 [0190.571] wcscmp (_String1=".", _String2=".") returned 0 [0190.571] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.571] wcscmp (_String1="..", _String2=".") returned 1 [0190.571] wcscmp (_String1="..", _String2="..") returned 0 [0190.571] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.571] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.572] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67640b0 [0190.572] wcscpy (in: _Dest=0x67640b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0190.572] wcscat (in: _Dest=0x67640b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0190.572] wcscat (in: _Dest=0x67640b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" [0190.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67640b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0190.945] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.945] FindClose (in: hFindFile=0x66d2a60 | out: hFindFile=0x66d2a60) returned 1 [0190.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0190.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae000) returned 1 [0190.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451e8) returned 1 Thread: id = 6443 os_tid = 0x2608 [0190.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae108 [0190.572] wcscpy (in: _Dest=0x68ae108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0190.572] wcscat (in: _Dest=0x68ae108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0190.572] wcscat (in: _Dest=0x68ae108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*" [0190.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed250 [0190.573] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0190.573] wcscmp (_String1=".", _String2=".") returned 0 [0190.573] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.573] wcscmp (_String1="..", _String2=".") returned 1 [0190.573] wcscmp (_String1="..", _String2="..") returned 0 [0190.573] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.573] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.573] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67641d8 [0190.573] wcscpy (in: _Dest=0x67641d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0190.573] wcscat (in: _Dest=0x67641d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0190.573] wcscat (in: _Dest=0x67641d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" [0190.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67641d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0190.948] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.948] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0190.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed250) returned 1 [0190.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae108) returned 1 [0190.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449a8) returned 1 Thread: id = 6444 os_tid = 0x260c [0190.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae210 [0190.574] wcscpy (in: _Dest=0x68ae210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0190.574] wcscat (in: _Dest=0x68ae210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0190.574] wcscat (in: _Dest=0x68ae210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*" [0190.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec8b0 [0190.574] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0190.574] wcscmp (_String1=".", _String2=".") returned 0 [0190.575] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.575] wcscmp (_String1="..", _String2=".") returned 1 [0190.575] wcscmp (_String1="..", _String2="..") returned 0 [0190.575] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.575] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.575] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764300 [0190.575] wcscpy (in: _Dest=0x6764300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0190.575] wcscat (in: _Dest=0x6764300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0190.575] wcscat (in: _Dest=0x6764300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" [0190.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0190.950] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.950] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0190.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0190.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae210) returned 1 [0190.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448a0) returned 1 Thread: id = 6445 os_tid = 0x2610 [0190.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae318 [0190.576] wcscpy (in: _Dest=0x68ae318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0190.576] wcscat (in: _Dest=0x68ae318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0190.576] wcscat (in: _Dest=0x68ae318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*" [0190.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecfe8 [0190.576] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0190.576] wcscmp (_String1=".", _String2=".") returned 0 [0190.576] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.576] wcscmp (_String1="..", _String2=".") returned 1 [0190.576] wcscmp (_String1="..", _String2="..") returned 0 [0190.576] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.576] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.576] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764428 [0190.576] wcscpy (in: _Dest=0x6764428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0190.577] wcscat (in: _Dest=0x6764428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0190.577] wcscat (in: _Dest=0x6764428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" [0190.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0190.952] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.952] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0190.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfe8) returned 1 [0190.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae318) returned 1 [0190.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44270) returned 1 Thread: id = 6446 os_tid = 0x2618 [0190.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x675e728 [0190.577] wcscpy (in: _Dest=0x675e728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0190.577] wcscat (in: _Dest=0x675e728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0190.577] wcscat (in: _Dest=0x675e728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*" [0190.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66edbf0 [0190.577] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29a0 [0190.578] wcscmp (_String1=".", _String2=".") returned 0 [0190.578] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.578] wcscmp (_String1="..", _String2=".") returned 1 [0190.578] wcscmp (_String1="..", _String2="..") returned 0 [0190.578] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.578] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.578] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6764550 [0190.578] wcscpy (in: _Dest=0x6764550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0190.578] wcscat (in: _Dest=0x6764550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0190.578] wcscat (in: _Dest=0x6764550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" [0190.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0190.955] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.955] FindClose (in: hFindFile=0x66d29a0 | out: hFindFile=0x66d29a0) returned 1 [0190.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edbf0) returned 1 [0190.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0190.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea50) returned 1 Thread: id = 6447 os_tid = 0x261c [0190.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x675e840 [0190.579] wcscpy (in: _Dest=0x675e840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0190.579] wcscat (in: _Dest=0x675e840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0190.579] wcscat (in: _Dest=0x675e840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*" [0190.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675ed20 [0190.579] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2960 [0190.580] wcscmp (_String1=".", _String2=".") returned 0 [0190.580] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.580] wcscmp (_String1="..", _String2=".") returned 1 [0190.580] wcscmp (_String1="..", _String2="..") returned 0 [0190.580] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.580] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.580] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6764678 [0190.580] wcscpy (in: _Dest=0x6764678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0190.580] wcscat (in: _Dest=0x6764678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0190.580] wcscat (in: _Dest=0x6764678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" [0190.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0190.958] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.958] FindClose (in: hFindFile=0x66d2960 | out: hFindFile=0x66d2960) returned 1 [0190.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed20) returned 1 [0190.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0190.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aeb58) returned 1 Thread: id = 6448 os_tid = 0x2624 [0190.581] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.581] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0194.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d38 [0194.230] GetFileSizeEx (in: hFile=0x1d38, lpFileSize=0xde2fdc4 | out: lpFileSize=0xde2fdc4*=281) returned 1 [0194.230] SetFilePointerEx (in: hFile=0x1d38, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.230] ReadFile (in: hFile=0x1d38, lpBuffer=0xde2fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xde2fdb0, lpOverlapped=0x0 | out: lpBuffer=0xde2fda0*, lpNumberOfBytesRead=0xde2fdb0*=0x4, lpOverlapped=0x0) returned 1 [0194.232] SetFilePointerEx (in: hFile=0x1d38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0194.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0194.233] NtQuerySystemTime (in: CurrentTime=0xde2fd38 | out: CurrentTime=0xde2fd38*=132482711027148000) returned 0x0 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x33d10fde [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x5596f610 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x5171eba6 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x19092e44 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x77acab23 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x5b1ca63b [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0xe40fa5e [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x320cefd4 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x78a4c1fe [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x727611 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x14d87437 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x67ce7a95 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x26b04fb3 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x3714898b [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x23516abb [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x140c2ca0 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x1e162936 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x7583e104 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x15dbf73d [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x5b4ce220 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x15898c4d [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x7c542256 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x1f67a4d0 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0xd7a7aa9 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x388173e0 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x510baf66 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x482b6e23 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x3eb93be7 [0194.233] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x16756d72 [0194.234] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x7d2efc63 [0194.234] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0x25b54fa [0194.234] RtlRandomEx (in: Seed=0xde2fd30 | out: Seed=0xde2fd30) returned 0xf034202 [0194.246] ReadFile (in: hFile=0x1d38, lpBuffer=0x12f80060, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xde2fd2c, lpOverlapped=0x0 | out: lpBuffer=0x12f80060*, lpNumberOfBytesRead=0xde2fd2c*=0x119, lpOverlapped=0x0) returned 1 [0194.246] SetFilePointerEx (in: hFile=0x1d38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.246] WriteFile (in: hFile=0x1d38, lpBuffer=0x12f83c68*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xde2fd30, lpOverlapped=0x0 | out: lpBuffer=0x12f83c68*, lpNumberOfBytesWritten=0xde2fd30*=0x119, lpOverlapped=0x0) returned 1 [0196.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0196.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0196.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0196.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f83c68) returned 1 [0196.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f80060) returned 1 [0196.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0196.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40d60) returned 1 [0196.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0196.443] SetFilePointerEx (in: hFile=0x1d38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.443] WriteFile (in: hFile=0x1d38, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde2fdb8, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0xde2fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0197.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0197.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0197.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0197.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0197.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0197.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0197.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0197.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0197.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773bc8 [0197.541] wcscpy (in: _Dest=0x6773bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" [0197.541] wcscat (in: _Dest=0x6773bc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.ac3a86" [0197.541] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xde2fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777ca8 [0197.920] FlushFileBuffers (hFile=0x1d38) returned 1 [0197.931] CloseHandle (hObject=0x1d38) returned 1 [0198.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67691a8 [0198.085] wcscpy (in: _Dest=0x67691a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0198.085] wcscat (in: _Dest=0x67691a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\AC3A86-Readme.txt" [0198.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0198.085] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1868 [0199.108] WriteFile (in: hFile=0x1868, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xde2fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xde2fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.833] CloseHandle (hObject=0x1868) returned 1 [0199.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67691a8) returned 1 [0199.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755e60) returned 1 Thread: id = 6449 os_tid = 0x2628 [0190.582] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0190.582] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0194.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d28 [0194.248] GetFileSizeEx (in: hFile=0x1d28, lpFileSize=0xcc9fe74 | out: lpFileSize=0xcc9fe74*=338) returned 1 [0194.248] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.248] ReadFile (in: hFile=0x1d28, lpBuffer=0xcc9fe50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcc9fe60, lpOverlapped=0x0 | out: lpBuffer=0xcc9fe50*, lpNumberOfBytesRead=0xcc9fe60*=0x4, lpOverlapped=0x0) returned 1 [0194.250] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0194.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0194.250] NtQuerySystemTime (in: CurrentTime=0xcc9fde8 | out: CurrentTime=0xcc9fde8*=132482711027304000) returned 0x0 [0194.250] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x73074423 [0194.250] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x4ab6691f [0194.250] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x6e5d9fc [0194.250] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x528d80e2 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x5d4964e7 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x56f768fe [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0xfcfb902 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x39126e71 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x342247a6 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x2492c264 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x6f9696b [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x1126e7be [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x2787d138 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x1383b7e8 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x585f8cca [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x7b979069 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x5feaab5d [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x1ce82f5e [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x44ea3b79 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x5c840b7 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x61f319cc [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x14981977 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x3115a736 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0xc7a3df1 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x269468bc [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x45fd6e0c [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x71a597b5 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x223ae7e4 [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x7978ac5f [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x71c55b9d [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x6c9e887c [0194.251] RtlRandomEx (in: Seed=0xcc9fde0 | out: Seed=0xcc9fde0) returned 0x2e01da12 [0194.261] ReadFile (in: hFile=0x1d28, lpBuffer=0x12f87870, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0xcc9fddc, lpOverlapped=0x0 | out: lpBuffer=0x12f87870*, lpNumberOfBytesRead=0xcc9fddc*=0x152, lpOverlapped=0x0) returned 1 [0194.262] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.262] WriteFile (in: hFile=0x1d28, lpBuffer=0x12f8b478*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xcc9fde0, lpOverlapped=0x0 | out: lpBuffer=0x12f8b478*, lpNumberOfBytesWritten=0xcc9fde0*=0x152, lpOverlapped=0x0) returned 1 [0197.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b3c0 [0197.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8b478) returned 1 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f87870) returned 1 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e419c0) returned 1 [0197.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85ce8 [0197.143] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.143] WriteFile (in: hFile=0x1d28, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc9fe68, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0xcc9fe68*=0x10c, lpOverlapped=0x0) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d18) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ce8) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0197.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0197.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67730d0 [0197.613] wcscpy (in: _Dest=0x67730d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" [0197.613] wcscat (in: _Dest=0x67730d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.ac3a86" [0197.613] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0xcc9fde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0197.971] FlushFileBuffers (hFile=0x1d28) returned 1 [0197.980] CloseHandle (hObject=0x1d28) returned 1 [0198.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769d38 [0198.113] wcscpy (in: _Dest=0x6769d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0198.113] wcscat (in: _Dest=0x6769d38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\AC3A86-Readme.txt" [0198.113] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0198.113] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164c [0199.114] WriteFile (in: hFile=0x164c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc9fdfc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcc9fdfc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.995] CloseHandle (hObject=0x164c) returned 1 [0199.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769d38) returned 1 [0199.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 Thread: id = 6450 os_tid = 0x2634 [0190.583] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0190.583] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0194.262] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d24 [0194.263] GetFileSizeEx (in: hFile=0x1d24, lpFileSize=0xe59f8cc | out: lpFileSize=0xe59f8cc*=274) returned 1 [0194.263] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.263] ReadFile (in: hFile=0x1d24, lpBuffer=0xe59f8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe59f8b8, lpOverlapped=0x0 | out: lpBuffer=0xe59f8a8*, lpNumberOfBytesRead=0xe59f8b8*=0x4, lpOverlapped=0x0) returned 1 [0194.265] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0194.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0194.265] NtQuerySystemTime (in: CurrentTime=0xe59f840 | out: CurrentTime=0xe59f840*=132482711027460000) returned 0x0 [0194.265] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x226c5dc [0194.265] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x1e013c93 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x22909964 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x5bd4270f [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x5946164b [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x15e6f10d [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x541baf9b [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x1fc9cfc6 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x5d78a9a4 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x4e25c5e5 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x43deaa79 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x3d2054d2 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x6618dae1 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x233bfc64 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x76c2dc81 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x5d653ca4 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x750f6e75 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x27f09324 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x43cf63d3 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x3ac08294 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x481fa4ab [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x1c532de2 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x46a5bd7 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x351dbba2 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x6cf24143 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0xe60f1f7 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x421c07e4 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x8c7d3e3 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x160da6d2 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x2a64ed67 [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x37db6c6e [0194.266] RtlRandomEx (in: Seed=0xe59f838 | out: Seed=0xe59f838) returned 0x1423066a [0194.276] ReadFile (in: hFile=0x1d24, lpBuffer=0x12f8f080, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0xe59f834, lpOverlapped=0x0 | out: lpBuffer=0x12f8f080*, lpNumberOfBytesRead=0xe59f834*=0x112, lpOverlapped=0x0) returned 1 [0194.276] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.276] WriteFile (in: hFile=0x1d24, lpBuffer=0x12f92c88*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xe59f838, lpOverlapped=0x0 | out: lpBuffer=0x12f92c88*, lpNumberOfBytesWritten=0xe59f838*=0x112, lpOverlapped=0x0) returned 1 [0197.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0197.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b230 [0197.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0197.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f92c88) returned 1 [0197.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8f080) returned 1 [0197.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0197.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41150) returned 1 [0197.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85da8 [0197.145] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.146] WriteFile (in: hFile=0x1d24, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe59f8c0, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0xe59f8c0*=0x10c, lpOverlapped=0x0) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85dd8) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85da8) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0197.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0197.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0197.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0197.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773958 [0197.605] wcscpy (in: _Dest=0x6773958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" [0197.605] wcscat (in: _Dest=0x6773958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.ac3a86" [0197.605] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0xe59f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776ab8 [0197.961] FlushFileBuffers (hFile=0x1d24) returned 1 [0197.972] CloseHandle (hObject=0x1d24) returned 1 [0198.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67699c0 [0198.105] wcscpy (in: _Dest=0x67699c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0198.105] wcscat (in: _Dest=0x67699c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\AC3A86-Readme.txt" [0198.105] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0198.105] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdec [0199.112] WriteFile (in: hFile=0xdec, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe59f854, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe59f854*=0x8b9, lpOverlapped=0x0) returned 1 [0199.862] CloseHandle (hObject=0xdec) returned 1 [0199.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67699c0) returned 1 [0199.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 6451 os_tid = 0x2638 [0190.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0190.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.277] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d20 [0194.278] GetFileSizeEx (in: hFile=0x1d20, lpFileSize=0xe24fa54 | out: lpFileSize=0xe24fa54*=268) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.278] ReadFile (in: hFile=0x1d20, lpBuffer=0xe24fa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe24fa40, lpOverlapped=0x0 | out: lpBuffer=0xe24fa30*, lpNumberOfBytesRead=0xe24fa40*=0x4, lpOverlapped=0x0) returned 1 [0194.280] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0194.280] NtQuerySystemTime (in: CurrentTime=0xe24f9c8 | out: CurrentTime=0xe24f9c8*=132482711027616000) returned 0x0 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x3a61ae9 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x4a80e67f [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x2fba1eaa [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x242c6183 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x70d6e778 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x86d6e88 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x15a3fd39 [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x1ea0d2fb [0194.280] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x30205e10 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x5594062f [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x37ef9dc7 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x7c9aa5f0 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x679b4dad [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x5764176f [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0xcf979e8 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x4884d69e [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0xedd0ff5 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x7cb43bc9 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x15aed73 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x225a71eb [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x3b6afae4 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x13a4a366 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x4467e99 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x65cfc5cb [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x74e12488 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x58b12a19 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x37f51ebd [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x3f404e81 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x33ba08f7 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x480c6d1e [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x5c5ed145 [0194.281] RtlRandomEx (in: Seed=0xe24f9c0 | out: Seed=0xe24f9c0) returned 0x1db9629d [0194.291] ReadFile (in: hFile=0x1d20, lpBuffer=0x12f96890, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xe24f9bc, lpOverlapped=0x0 | out: lpBuffer=0x12f96890*, lpNumberOfBytesRead=0xe24f9bc*=0x10c, lpOverlapped=0x0) returned 1 [0194.291] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.291] WriteFile (in: hFile=0x1d20, lpBuffer=0x12f9a498*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe24f9c0, lpOverlapped=0x0 | out: lpBuffer=0x12f9a498*, lpNumberOfBytesWritten=0xe24f9c0*=0x10c, lpOverlapped=0x0) returned 1 [0197.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0197.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0197.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0197.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9a498) returned 1 [0197.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f96890) returned 1 [0197.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc68c0) returned 1 [0197.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40f58) returned 1 [0197.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85d48 [0197.145] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.145] WriteFile (in: hFile=0x1d20, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe24fa48, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0xe24fa48*=0x10c, lpOverlapped=0x0) returned 1 [0197.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0197.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d78) returned 1 [0197.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d48) returned 1 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0197.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0197.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d407b0 [0197.602] wcscpy (in: _Dest=0x3d407b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" [0197.602] wcscat (in: _Dest=0x3d407b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.ac3a86" [0197.602] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xe24f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0197.959] FlushFileBuffers (hFile=0x1d20) returned 1 [0197.967] CloseHandle (hObject=0x1d20) returned 1 [0198.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769898 [0198.103] wcscpy (in: _Dest=0x6769898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0198.103] wcscat (in: _Dest=0x6769898, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\AC3A86-Readme.txt" [0198.103] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0198.103] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc48 [0199.113] WriteFile (in: hFile=0xc48, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe24f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe24f9dc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.989] CloseHandle (hObject=0xc48) returned 1 [0199.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769898) returned 1 [0199.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e10) returned 1 Thread: id = 6452 os_tid = 0x263c [0190.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0190.586] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.292] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d1c [0194.293] GetFileSizeEx (in: hFile=0x1d1c, lpFileSize=0xdfcf8f4 | out: lpFileSize=0xdfcf8f4*=287) returned 1 [0194.293] SetFilePointerEx (in: hFile=0x1d1c, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.293] ReadFile (in: hFile=0x1d1c, lpBuffer=0xdfcf8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdfcf8e0, lpOverlapped=0x0 | out: lpBuffer=0xdfcf8d0*, lpNumberOfBytesRead=0xdfcf8e0*=0x4, lpOverlapped=0x0) returned 1 [0194.295] SetFilePointerEx (in: hFile=0x1d1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0194.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0194.295] NtQuerySystemTime (in: CurrentTime=0xdfcf868 | out: CurrentTime=0xdfcf868*=132482711027772000) returned 0x0 [0194.295] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x62b9388f [0194.295] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x79649fd9 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x20e56a37 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x32bee6bc [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x2b4e05b3 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x21e53664 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x2767152d [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x727447f2 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x15548dd [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x31b53fc1 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x63ec2ffe [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x2827132a [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x3b53cb90 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x2fde87e1 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x7dd271cf [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0xd635fe0 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x4e74e80 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x5f29a220 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x25613e17 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x2265c0a4 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x730a44fc [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x1dceedef [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x694725fb [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x76c7cb6c [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x6394c742 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x5bb1c1f1 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0xead3d63 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x35fe1873 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x7812d1e8 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x16eb4a6b [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x218f84e4 [0194.296] RtlRandomEx (in: Seed=0xdfcf860 | out: Seed=0xdfcf860) returned 0x34bf5e08 [0194.306] ReadFile (in: hFile=0x1d1c, lpBuffer=0x12f9e0a0, nNumberOfBytesToRead=0x11f, lpNumberOfBytesRead=0xdfcf85c, lpOverlapped=0x0 | out: lpBuffer=0x12f9e0a0*, lpNumberOfBytesRead=0xdfcf85c*=0x11f, lpOverlapped=0x0) returned 1 [0194.307] SetFilePointerEx (in: hFile=0x1d1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.307] WriteFile (in: hFile=0x1d1c, lpBuffer=0x12fa1ca8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0xdfcf860, lpOverlapped=0x0 | out: lpBuffer=0x12fa1ca8*, lpNumberOfBytesWritten=0xdfcf860*=0x11f, lpOverlapped=0x0) returned 1 [0195.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d508 [0195.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d530 [0195.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d530) returned 1 [0195.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa1ca8) returned 1 [0195.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9e0a0) returned 1 [0195.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0195.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41810) returned 1 [0195.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a863d8 [0195.807] SetFilePointerEx (in: hFile=0x1d1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.808] WriteFile (in: hFile=0x1d1c, lpBuffer=0x67716c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdfcf8e8, lpOverlapped=0x0 | out: lpBuffer=0x67716c0*, lpNumberOfBytesWritten=0xdfcf8e8*=0x10c, lpOverlapped=0x0) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67716c0) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86408) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d530) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a863d8) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d508) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0195.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0195.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773820 [0195.971] wcscpy (in: _Dest=0x6773820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" [0195.971] wcscat (in: _Dest=0x6773820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.ac3a86" [0195.971] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xdfcf860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777f38 [0196.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777f38) returned 1 [0196.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8c718) returned 1 [0196.054] NtQueryInformationFile (in: FileHandle=0x1d1c, IoStatusBlock=0xdfcf838, FileInformation=0xdfcf840, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdfcf838, FileInformation=0xdfcf840) returned 0x0 [0196.054] NtSetInformationFile (FileHandle=0x1d1c, IoStatusBlock=0xdfcf838, FileInformation=0xdfcf840, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773820) returned 1 [0196.262] FlushFileBuffers (hFile=0x1d1c) returned 1 [0196.813] CloseHandle (hObject=0x1d1c) returned 1 [0197.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x678aab8 [0198.320] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0198.320] wcscat (in: _Dest=0x678aab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\AC3A86-Readme.txt" [0198.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0198.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.174] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdfcf87c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdfcf87c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.176] CloseHandle (hObject=0x1848) returned 1 [0200.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678aab8) returned 1 [0200.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f38) returned 1 Thread: id = 6453 os_tid = 0x2640 [0190.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0190.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.307] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b38 [0194.308] GetFileSizeEx (in: hFile=0x1b38, lpFileSize=0xa47fe5c | out: lpFileSize=0xa47fe5c*=279) returned 1 [0194.308] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.308] ReadFile (in: hFile=0x1b38, lpBuffer=0xa47fe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa47fe48, lpOverlapped=0x0 | out: lpBuffer=0xa47fe38*, lpNumberOfBytesRead=0xa47fe48*=0x4, lpOverlapped=0x0) returned 1 [0194.310] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0194.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0194.310] NtQuerySystemTime (in: CurrentTime=0xa47fdd0 | out: CurrentTime=0xa47fdd0*=132482711027928000) returned 0x0 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x3ae7e6fd [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x3cba2d6b [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x1e3a12e9 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x5aa8c6b1 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x2fc72b4d [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x19c55018 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x6f20539d [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x377509c2 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x3ea611af [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x52409be3 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x6bbe4dbc [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x348f5692 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x24e9d7c9 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x73d2f0af [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x25794be5 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x2b2e102e [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x25f3b21b [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x20220745 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x40394c80 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x5039994 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x12add2ea [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x18ff540f [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x38a024d4 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x7bf89eba [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x235a53d3 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x39e526c3 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x138a3e1c [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x7b62b297 [0194.311] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x385a5776 [0194.312] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x78ca166b [0194.312] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x4605135a [0194.312] RtlRandomEx (in: Seed=0xa47fdc8 | out: Seed=0xa47fdc8) returned 0x3d6ac0b [0194.322] ReadFile (in: hFile=0x1b38, lpBuffer=0x12fa58b0, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0xa47fdc4, lpOverlapped=0x0 | out: lpBuffer=0x12fa58b0*, lpNumberOfBytesRead=0xa47fdc4*=0x117, lpOverlapped=0x0) returned 1 [0194.322] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.322] WriteFile (in: hFile=0x1b38, lpBuffer=0x12fa94b8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0xa47fdc8, lpOverlapped=0x0 | out: lpBuffer=0x12fa94b8*, lpNumberOfBytesWritten=0xa47fdc8*=0x117, lpOverlapped=0x0) returned 1 [0197.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b438 [0197.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0197.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0197.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa94b8) returned 1 [0197.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa58b0) returned 1 [0197.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0197.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41540) returned 1 [0197.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3968 [0197.141] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.141] WriteFile (in: hFile=0x1b38, lpBuffer=0x6768840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa47fe50, lpOverlapped=0x0 | out: lpBuffer=0x6768840*, lpNumberOfBytesWritten=0xa47fe50*=0x10c, lpOverlapped=0x0) returned 1 [0197.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768840) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b48) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3968) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0197.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0197.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d418c0 [0197.598] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" [0197.598] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.ac3a86" [0197.598] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xa47fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776d48 [0197.954] FlushFileBuffers (hFile=0x1b38) returned 1 [0197.964] CloseHandle (hObject=0x1b38) returned 1 [0198.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769770 [0198.101] wcscpy (in: _Dest=0x6769770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0198.101] wcscat (in: _Dest=0x6769770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\AC3A86-Readme.txt" [0198.101] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0198.101] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd78 [0199.112] WriteFile (in: hFile=0xd78, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa47fde4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa47fde4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.859] CloseHandle (hObject=0xd78) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769770) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958060) returned 1 Thread: id = 6454 os_tid = 0x2644 [0190.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0190.588] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0194.323] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2318 [0194.323] GetFileSizeEx (in: hFile=0x2318, lpFileSize=0xe7fff24 | out: lpFileSize=0xe7fff24*=353) returned 1 [0194.324] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.324] ReadFile (in: hFile=0x2318, lpBuffer=0xe7fff00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe7fff10, lpOverlapped=0x0 | out: lpBuffer=0xe7fff00*, lpNumberOfBytesRead=0xe7fff10*=0x4, lpOverlapped=0x0) returned 1 [0194.331] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0194.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0194.331] NtQuerySystemTime (in: CurrentTime=0xe7ffe98 | out: CurrentTime=0xe7ffe98*=132482711028084000) returned 0x0 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x6964b4bd [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x4debe978 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x6dc66bb3 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x23e8a7b7 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x211bcd27 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x10c3d672 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x2c0b9301 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x2ff03bb3 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x3f2c9b8b [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0xefa05a8 [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x3030d79d [0194.331] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x726b99f1 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x4369e1e0 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x58ee3483 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x6590a87b [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x27893404 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x7474e087 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x428e1dfa [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x5dfe943b [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x16f8a29d [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x12a7f402 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x588e6358 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x26ebe537 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x5af659e9 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x48bcd22d [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x76339f95 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x1852c16d [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x7fb8b057 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x10d524e8 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x4f129976 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x1c90d6b3 [0194.332] RtlRandomEx (in: Seed=0xe7ffe90 | out: Seed=0xe7ffe90) returned 0x84eefcd [0194.342] ReadFile (in: hFile=0x2318, lpBuffer=0x12fad0c0, nNumberOfBytesToRead=0x161, lpNumberOfBytesRead=0xe7ffe8c, lpOverlapped=0x0 | out: lpBuffer=0x12fad0c0*, lpNumberOfBytesRead=0xe7ffe8c*=0x161, lpOverlapped=0x0) returned 1 [0194.342] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.343] WriteFile (in: hFile=0x2318, lpBuffer=0x12fb0cc8*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0xe7ffe90, lpOverlapped=0x0 | out: lpBuffer=0x12fb0cc8*, lpNumberOfBytesWritten=0xe7ffe90*=0x161, lpOverlapped=0x0) returned 1 [0197.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0197.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0197.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb0cc8) returned 1 [0197.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fad0c0) returned 1 [0197.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0197.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41270) returned 1 [0197.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3b18 [0197.140] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.140] WriteFile (in: hFile=0x2318, lpBuffer=0x6768728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe7fff18, lpOverlapped=0x0 | out: lpBuffer=0x6768728*, lpNumberOfBytesWritten=0xe7fff18*=0x10c, lpOverlapped=0x0) returned 1 [0197.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768728) returned 1 [0197.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3638) returned 1 [0197.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b18) returned 1 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0197.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0197.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67735b0 [0197.610] wcscpy (in: _Dest=0x67735b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" [0197.610] wcscat (in: _Dest=0x67735b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.ac3a86" [0197.610] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xe7ffe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778458 [0197.968] FlushFileBuffers (hFile=0x2318) returned 1 [0197.974] CloseHandle (hObject=0x2318) returned 1 [0198.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769ae8 [0198.110] wcscpy (in: _Dest=0x6769ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0198.110] wcscat (in: _Dest=0x6769ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\AC3A86-Readme.txt" [0198.110] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0198.110] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xefc [0200.368] WriteFile (in: hFile=0xefc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe7ffeac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe7ffeac*=0x8b9, lpOverlapped=0x0) returned 1 [0203.407] CloseHandle (hObject=0xefc) returned 1 [0206.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769ae8) returned 1 [0206.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958188) returned 1 Thread: id = 6455 os_tid = 0x2648 [0190.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0190.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.343] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef0 [0194.344] GetFileSizeEx (in: hFile=0xef0, lpFileSize=0xa51fc0c | out: lpFileSize=0xa51fc0c*=270) returned 1 [0194.344] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.344] ReadFile (in: hFile=0xef0, lpBuffer=0xa51fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa51fbf8, lpOverlapped=0x0 | out: lpBuffer=0xa51fbe8*, lpNumberOfBytesRead=0xa51fbf8*=0x4, lpOverlapped=0x0) returned 1 [0194.346] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0194.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0194.346] NtQuerySystemTime (in: CurrentTime=0xa51fb80 | out: CurrentTime=0xa51fb80*=132482711028240000) returned 0x0 [0194.346] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x7fb9f866 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x4a64c4e3 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x3e78385 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x3bddf50c [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0xb1540a9 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x44ea27c3 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x3e0c16b2 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x74cbde1 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x6f4cbe8c [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x2047a1c9 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x23266737 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x4980afc8 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x61b11fe4 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x17dbb1b7 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x5172b8f9 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x59416b6a [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x1407501f [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x1955fdbb [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x37f4289a [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x7a7831be [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x39667243 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x4a8b632c [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x77735d1a [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x2cf26037 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x1435c03c [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x513ff638 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x319746e5 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x2c9a99dc [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x76889d76 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x35d03a3 [0194.347] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x2733ff24 [0194.348] RtlRandomEx (in: Seed=0xa51fb78 | out: Seed=0xa51fb78) returned 0x6800e039 [0194.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fb48d0 [0194.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fb84d8 [0194.359] ReadFile (in: hFile=0xef0, lpBuffer=0x12fb48d0, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0xa51fb74, lpOverlapped=0x0 | out: lpBuffer=0x12fb48d0*, lpNumberOfBytesRead=0xa51fb74*=0x10e, lpOverlapped=0x0) returned 1 [0194.359] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.359] WriteFile (in: hFile=0xef0, lpBuffer=0x12fb84d8*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa51fb78, lpOverlapped=0x0 | out: lpBuffer=0x12fb84d8*, lpNumberOfBytesWritten=0xa51fb78*=0x10e, lpOverlapped=0x0) returned 1 [0197.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa60 [0197.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4218 [0197.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0197.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb84d8) returned 1 [0197.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb48d0) returned 1 [0197.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 [0197.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41b28) returned 1 [0197.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85e08 [0197.146] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.146] WriteFile (in: hFile=0xef0, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa51fc00, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xa51fc00*=0x10c, lpOverlapped=0x0) returned 1 [0197.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0197.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e38) returned 1 [0197.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0197.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e08) returned 1 [0197.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa60) returned 1 [0197.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0197.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0197.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0197.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773820 [0197.607] wcscpy (in: _Dest=0x6773820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" [0197.607] wcscat (in: _Dest=0x6773820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.ac3a86" [0197.607] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0xa51fb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778310 [0197.966] FlushFileBuffers (hFile=0xef0) returned 1 [0197.974] CloseHandle (hObject=0xef0) returned 1 [0198.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769c10 [0198.111] wcscpy (in: _Dest=0x6769c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0198.111] wcscat (in: _Dest=0x6769c10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\AC3A86-Readme.txt" [0198.111] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0198.111] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf7c [0200.361] WriteFile (in: hFile=0xf7c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa51fb94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa51fb94*=0x8b9, lpOverlapped=0x0) returned 1 [0203.435] CloseHandle (hObject=0xf7c) returned 1 [0206.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769c10) returned 1 [0206.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582b0) returned 1 Thread: id = 6456 os_tid = 0x264c [0190.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0190.593] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0194.360] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc8 [0194.361] GetFileSizeEx (in: hFile=0xfc8, lpFileSize=0xb80fd1c | out: lpFileSize=0xb80fd1c*=356) returned 1 [0194.361] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.361] ReadFile (in: hFile=0xfc8, lpBuffer=0xb80fcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb80fd08, lpOverlapped=0x0 | out: lpBuffer=0xb80fcf8*, lpNumberOfBytesRead=0xb80fd08*=0x4, lpOverlapped=0x0) returned 1 [0194.363] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0194.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0194.363] NtQuerySystemTime (in: CurrentTime=0xb80fc90 | out: CurrentTime=0xb80fc90*=132482711028396000) returned 0x0 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x68980a22 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x25a8a159 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x523aebbd [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x210efaa4 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x51036771 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x5ceb5e5e [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x274fbed0 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x20bae8df [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0xdd38972 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x530f7114 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x4430ecf4 [0194.363] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x6a732358 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x76cbf705 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x2b1137a1 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x3e580f36 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x305ec739 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x1120e650 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x7052a976 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x16f9c97d [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x74fb351 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x40def692 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x296c38ff [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x54f3a3a9 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x9a5d970 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x73aabedc [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x218bc1ae [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x677344f1 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x23fef453 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x5df69a00 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x3be2ae4a [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x45e5af75 [0194.364] RtlRandomEx (in: Seed=0xb80fc88 | out: Seed=0xb80fc88) returned 0x58698868 [0194.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fbc0e0 [0194.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fc0060 [0194.387] ReadFile (in: hFile=0xfc8, lpBuffer=0x12fbc0e0, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0xb80fc84, lpOverlapped=0x0 | out: lpBuffer=0x12fbc0e0*, lpNumberOfBytesRead=0xb80fc84*=0x164, lpOverlapped=0x0) returned 1 [0194.387] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.387] WriteFile (in: hFile=0xfc8, lpBuffer=0x12fc0060*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xb80fc88, lpOverlapped=0x0 | out: lpBuffer=0x12fc0060*, lpNumberOfBytesWritten=0xb80fc88*=0x164, lpOverlapped=0x0) returned 1 [0197.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0197.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4498 [0197.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0197.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc0060) returned 1 [0197.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fbc0e0) returned 1 [0197.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0197.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40fa0) returned 1 [0197.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85e68 [0197.192] SetFilePointerEx (in: hFile=0xfc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.192] WriteFile (in: hFile=0xfc8, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb80fd10, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xb80fd10*=0x10c, lpOverlapped=0x0) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e98) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e68) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0197.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0197.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0197.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0197.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6772f98 [0197.616] wcscpy (in: _Dest=0x6772f98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" [0197.616] wcscat (in: _Dest=0x6772f98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.ac3a86" [0197.616] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xb80fc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67785a0 [0197.973] FlushFileBuffers (hFile=0xfc8) returned 1 [0197.983] CloseHandle (hObject=0xfc8) returned 1 [0198.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6769e60 [0198.115] wcscpy (in: _Dest=0x6769e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0198.115] wcscat (in: _Dest=0x6769e60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\AC3A86-Readme.txt" [0198.115] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0198.115] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xabc [0199.113] WriteFile (in: hFile=0xabc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb80fca4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb80fca4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.992] CloseHandle (hObject=0xabc) returned 1 [0199.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769e60) returned 1 [0199.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69583d8) returned 1 Thread: id = 6457 os_tid = 0x2650 [0190.594] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0190.595] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0194.388] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e30 [0194.388] GetFileSizeEx (in: hFile=0x1e30, lpFileSize=0xc62fdbc | out: lpFileSize=0xc62fdbc*=253) returned 1 [0194.388] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.388] ReadFile (in: hFile=0x1e30, lpBuffer=0xc62fd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc62fda8, lpOverlapped=0x0 | out: lpBuffer=0xc62fd98*, lpNumberOfBytesRead=0xc62fda8*=0x4, lpOverlapped=0x0) returned 1 [0194.390] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c800 [0194.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0194.390] NtQuerySystemTime (in: CurrentTime=0xc62fd30 | out: CurrentTime=0xc62fd30*=132482711028708000) returned 0x0 [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x68f710b5 [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x14387b89 [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x77d1aecb [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x64199390 [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x5a24a77c [0194.390] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x7aa76a66 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x3d9b7ce5 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x612261cf [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x254f4951 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x208e7064 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x5c09cb5b [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x79a434e0 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x1341b56d [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x20e421e4 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x684e3a32 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x39b8c069 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x174ac9cc [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x5256b5e2 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x7e4cf40 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x4e1e1433 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x1e6c8295 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x1de22cb7 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x7dc7f7cf [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x7d43b859 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x7bb48bee [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x6104de1a [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x6ee1bc2e [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x21ba5da4 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x3a580338 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x35be36d4 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x603a8486 [0194.391] RtlRandomEx (in: Seed=0xc62fd28 | out: Seed=0xc62fd28) returned 0x6b5cdefe [0194.400] ReadFile (in: hFile=0x1e30, lpBuffer=0x12fc3c68, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xc62fd24, lpOverlapped=0x0 | out: lpBuffer=0x12fc3c68*, lpNumberOfBytesRead=0xc62fd24*=0xfd, lpOverlapped=0x0) returned 1 [0194.400] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.400] WriteFile (in: hFile=0x1e30, lpBuffer=0x12fc7870*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xc62fd28, lpOverlapped=0x0 | out: lpBuffer=0x12fc7870*, lpNumberOfBytesWritten=0xc62fd28*=0xfd, lpOverlapped=0x0) returned 1 [0195.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d558 [0195.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d580 [0195.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d580) returned 1 [0195.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc7870) returned 1 [0195.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc3c68) returned 1 [0195.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ea8) returned 1 [0195.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40ec8) returned 1 [0195.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86438 [0195.812] SetFilePointerEx (in: hFile=0x1e30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.812] WriteFile (in: hFile=0x1e30, lpBuffer=0x67717d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc62fdb0, lpOverlapped=0x0 | out: lpBuffer=0x67717d8*, lpNumberOfBytesWritten=0xc62fdb0*=0x10c, lpOverlapped=0x0) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67717d8) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86468) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d580) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86438) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d558) returned 1 [0195.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0195.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0195.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0195.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773958 [0195.974] wcscpy (in: _Dest=0x6773958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" [0195.974] wcscat (in: _Dest=0x6773958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.ac3a86" [0195.974] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0xc62fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778080 [0196.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778080) returned 1 [0196.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8cb68) returned 1 [0196.119] NtQueryInformationFile (in: FileHandle=0x1e30, IoStatusBlock=0xc62fd00, FileInformation=0xc62fd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc62fd00, FileInformation=0xc62fd08) returned 0x0 [0196.119] NtSetInformationFile (FileHandle=0x1e30, IoStatusBlock=0xc62fd00, FileInformation=0xc62fd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773958) returned 1 [0196.266] FlushFileBuffers (hFile=0x1e30) returned 1 [0196.813] CloseHandle (hObject=0x1e30) returned 1 [0197.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x678cab8 [0198.320] wcscpy (in: _Dest=0x678cab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0198.320] wcscat (in: _Dest=0x678cab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\AC3A86-Readme.txt" [0198.320] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0198.321] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.186] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc62fd44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc62fd44*=0x8b9, lpOverlapped=0x0) returned 1 [0200.188] CloseHandle (hObject=0x1848) returned 1 [0200.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cab8) returned 1 [0200.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958500) returned 1 Thread: id = 6458 os_tid = 0x2654 [0190.596] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json")) returned 0x2020 [0190.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0194.401] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd5c [0194.401] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0xae8fc4c | out: lpFileSize=0xae8fc4c*=254) returned 1 [0194.401] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.401] ReadFile (in: hFile=0xd5c, lpBuffer=0xae8fc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae8fc38, lpOverlapped=0x0 | out: lpBuffer=0xae8fc28*, lpNumberOfBytesRead=0xae8fc38*=0x4, lpOverlapped=0x0) returned 1 [0194.403] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0194.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0194.403] NtQuerySystemTime (in: CurrentTime=0xae8fbc0 | out: CurrentTime=0xae8fbc0*=132482711028864000) returned 0x0 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x313d0970 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x69f1d322 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x5cda66fc [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x3bed2793 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x5d212e45 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x737851d8 [0194.403] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x3e521b61 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x6de7dd6 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x57bd1c62 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x162a807 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x6c8ebe8a [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x40dcacdb [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0xd3d9d0b [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x5213dbf1 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x2da861e2 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x71b98ef [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x66a8e89d [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x64a92bb6 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x1f8eaa [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x141842b [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x177c5d93 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x1a301568 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x6f83ceed [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x7c656410 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x289e7e70 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x4cbf3520 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x1adeef37 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x672fa9ab [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x71f02b25 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x50a33b69 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0x1a8e4379 [0194.404] RtlRandomEx (in: Seed=0xae8fbb8 | out: Seed=0xae8fbb8) returned 0xd2f8ee0 [0194.413] ReadFile (in: hFile=0xd5c, lpBuffer=0x12fcb478, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xae8fbb4, lpOverlapped=0x0 | out: lpBuffer=0x12fcb478*, lpNumberOfBytesRead=0xae8fbb4*=0xfe, lpOverlapped=0x0) returned 1 [0194.413] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.413] WriteFile (in: hFile=0xd5c, lpBuffer=0x12fcf080*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xae8fbb8, lpOverlapped=0x0 | out: lpBuffer=0x12fcf080*, lpNumberOfBytesWritten=0xae8fbb8*=0xfe, lpOverlapped=0x0) returned 1 [0196.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0196.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0196.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0196.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fcf080) returned 1 [0196.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fcb478) returned 1 [0196.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f20) returned 1 [0196.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60b20) returned 1 [0196.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0196.439] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.439] WriteFile (in: hFile=0xd5c, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae8fc40, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0xae8fc40*=0x10c, lpOverlapped=0x0) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0197.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0197.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773478 [0197.533] wcscpy (in: _Dest=0x6773478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" [0197.533] wcscat (in: _Dest=0x6773478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.ac3a86" [0197.533] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.ac3a86", NtPathName=0xae8fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67774f8 [0197.899] FlushFileBuffers (hFile=0xd5c) returned 1 [0197.914] CloseHandle (hObject=0xd5c) returned 1 [0198.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779770 [0198.077] wcscpy (in: _Dest=0x6779770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0198.077] wcscat (in: _Dest=0x6779770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\AC3A86-Readme.txt" [0198.078] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\ac3a86-readme.txt")) returned 0xffffffff [0198.078] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1858 [0199.107] WriteFile (in: hFile=0x1858, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xae8fbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xae8fbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.262] CloseHandle (hObject=0x1858) returned 1 [0200.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779770) returned 1 [0200.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958628) returned 1 Thread: id = 6459 os_tid = 0x2658 [0190.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0190.597] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0194.413] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb70 [0194.414] GetFileSizeEx (in: hFile=0xb70, lpFileSize=0x5defa2c | out: lpFileSize=0x5defa2c*=273) returned 1 [0194.414] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.414] ReadFile (in: hFile=0xb70, lpBuffer=0x5defa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5defa18, lpOverlapped=0x0 | out: lpBuffer=0x5defa08*, lpNumberOfBytesRead=0x5defa18*=0x4, lpOverlapped=0x0) returned 1 [0194.415] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0194.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0194.416] NtQuerySystemTime (in: CurrentTime=0x5def9a0 | out: CurrentTime=0x5def9a0*=132482711028864000) returned 0x0 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x41fac609 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x7e0befdd [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0xc7fd97 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x5c5e1318 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x3b961464 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x72edc6a0 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0xf9658f [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x29ef22b7 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x6fee0dbc [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x2ff59db7 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x5b2b1365 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x1c0d6963 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x49481983 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x301ac4c [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x48946867 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x4a291dd9 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x9b555dd [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x28eca578 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x1ca6c2d [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x344642de [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x38ff5637 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x606cd80c [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x4a2e6616 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x40ed839f [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x22d1e90a [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0xe5fcb14 [0194.416] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0xcff2751 [0194.417] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x63e9bd69 [0194.417] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x3a9a88c6 [0194.417] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x1c0d6963 [0194.417] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x1f5c5d4e [0194.417] RtlRandomEx (in: Seed=0x5def998 | out: Seed=0x5def998) returned 0x40e66940 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fd2c88 [0194.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fd6890 [0194.426] ReadFile (in: hFile=0xb70, lpBuffer=0x12fd2c88, nNumberOfBytesToRead=0x111, lpNumberOfBytesRead=0x5def994, lpOverlapped=0x0 | out: lpBuffer=0x12fd2c88*, lpNumberOfBytesRead=0x5def994*=0x111, lpOverlapped=0x0) returned 1 [0194.426] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.426] WriteFile (in: hFile=0xb70, lpBuffer=0x12fd6890*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x5def998, lpOverlapped=0x0 | out: lpBuffer=0x12fd6890*, lpNumberOfBytesWritten=0x5def998*=0x111, lpOverlapped=0x0) returned 1 [0196.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0196.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0196.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0196.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fd6890) returned 1 [0196.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fd2c88) returned 1 [0196.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f98) returned 1 [0196.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60970) returned 1 [0196.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5480 [0196.459] SetFilePointerEx (in: hFile=0xb70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.459] WriteFile (in: hFile=0xb70, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5defa20, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0x5defa20*=0x10c, lpOverlapped=0x0) returned 1 [0197.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0197.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0197.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0197.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x6773208 [0197.558] wcscpy (in: _Dest=0x6773208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" [0197.558] wcscat (in: _Dest=0x6773208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.ac3a86" [0197.558] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0x5def998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6777268 [0197.939] FlushFileBuffers (hFile=0xb70) returned 1 [0197.947] CloseHandle (hObject=0xb70) returned 1 [0198.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a86a50 [0198.094] wcscpy (in: _Dest=0x6a86a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0198.094] wcscat (in: _Dest=0x6a86a50, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0198.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0198.094] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1874 [0199.110] WriteFile (in: hFile=0x1874, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5def9b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5def9b4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.847] CloseHandle (hObject=0x1874) returned 1 [0199.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86a50) returned 1 [0199.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958750) returned 1 Thread: id = 6460 os_tid = 0x265c [0190.598] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0194.426] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d04 [0194.427] GetFileSizeEx (in: hFile=0x1d04, lpFileSize=0xa5ef9d4 | out: lpFileSize=0xa5ef9d4*=246) returned 1 [0194.427] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.427] ReadFile (in: hFile=0x1d04, lpBuffer=0xa5ef9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa5ef9c0, lpOverlapped=0x0 | out: lpBuffer=0xa5ef9b0*, lpNumberOfBytesRead=0xa5ef9c0*=0x4, lpOverlapped=0x0) returned 1 [0194.429] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb30 [0194.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0194.429] NtQuerySystemTime (in: CurrentTime=0xa5ef948 | out: CurrentTime=0xa5ef948*=132482711029020000) returned 0x0 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x4ae49a3b [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x28bb730a [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x6b8f381c [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x5fc46499 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x11aaf4fc [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x239d39a0 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x6a9f8e57 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x23292228 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x2b951f28 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x30e61b03 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x4e6e1627 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x206397a4 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x6bcd606c [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x6fcc993a [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x25bf335b [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0xfd21987 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x7dd0e729 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x6d83997a [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x4a0fbe87 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x74608c95 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x4cbf3520 [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x3ba48cfa [0194.429] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x71027859 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x47d19cdd [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x5201e426 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x638c8056 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x7d1cf719 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x421595a6 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x633a3443 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x2164ac24 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x5cbdcf68 [0194.430] RtlRandomEx (in: Seed=0xa5ef940 | out: Seed=0xa5ef940) returned 0x7b1722d4 [0194.438] ReadFile (in: hFile=0x1d04, lpBuffer=0x12fda498, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0xa5ef93c, lpOverlapped=0x0 | out: lpBuffer=0x12fda498*, lpNumberOfBytesRead=0xa5ef93c*=0xf6, lpOverlapped=0x0) returned 1 [0194.438] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.438] WriteFile (in: hFile=0x1d04, lpBuffer=0x12fde0a0*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xa5ef940, lpOverlapped=0x0 | out: lpBuffer=0x12fde0a0*, lpNumberOfBytesWritten=0xa5ef940*=0xf6, lpOverlapped=0x0) returned 1 [0195.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d5a8 [0195.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676d5d0 [0195.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d5d0) returned 1 [0195.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fde0a0) returned 1 [0195.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fda498) returned 1 [0195.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28010) returned 1 [0195.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60e80) returned 1 [0195.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86498 [0195.816] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.816] WriteFile (in: hFile=0x1d04, lpBuffer=0x67718f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa5ef9c8, lpOverlapped=0x0 | out: lpBuffer=0x67718f0*, lpNumberOfBytesWritten=0xa5ef9c8*=0x10c, lpOverlapped=0x0) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67718f0) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a864c8) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d5d0) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86498) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676d5a8) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0195.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x6773a90 [0195.976] wcscpy (in: _Dest=0x6773a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" [0195.976] wcscat (in: _Dest=0x6773a90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.ac3a86" [0195.976] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xa5ef940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6769120 [0196.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769120) returned 1 [0196.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891c78) returned 1 [0196.122] NtQueryInformationFile (in: FileHandle=0x1d04, IoStatusBlock=0xa5ef918, FileInformation=0xa5ef920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa5ef918, FileInformation=0xa5ef920) returned 0x0 [0196.122] NtSetInformationFile (FileHandle=0x1d04, IoStatusBlock=0xa5ef918, FileInformation=0xa5ef920, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773a90) returned 1 [0196.271] FlushFileBuffers (hFile=0x1d04) returned 1 [0196.814] CloseHandle (hObject=0x1d04) returned 1 [0197.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a85e20 [0197.694] wcscpy (in: _Dest=0x6a85e20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0197.694] wcscat (in: _Dest=0x6a85e20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0197.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0197.694] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.256] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa5ef95c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa5ef95c*=0x8b9, lpOverlapped=0x0) returned 1 [0198.262] CloseHandle (hObject=0x237c) returned 1 [0198.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e20) returned 1 [0198.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958878) returned 1 Thread: id = 6461 os_tid = 0x2660 [0190.600] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0190.838] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0194.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ff8 [0194.572] GetFileSizeEx (in: hFile=0x1ff8, lpFileSize=0xa09ff34 | out: lpFileSize=0xa09ff34*=312) returned 1 [0194.572] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.573] ReadFile (in: hFile=0x1ff8, lpBuffer=0xa09ff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa09ff20, lpOverlapped=0x0 | out: lpBuffer=0xa09ff10*, lpNumberOfBytesRead=0xa09ff20*=0x4, lpOverlapped=0x0) returned 1 [0194.574] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0194.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0194.574] NtQuerySystemTime (in: CurrentTime=0xa09fea8 | out: CurrentTime=0xa09fea8*=132482711030580000) returned 0x0 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x736ff34f [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x4decdd46 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0xde46537 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x1de09425 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x38f9edde [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x5a22fab7 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x16dbac07 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x5cfa7c4f [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x2796bacd [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x5c6b9469 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x18bcca77 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x545eeb8 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x790d5dab [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0xcf66024 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x4b888372 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x1f37aa64 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x8235b04 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x559fbfc7 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x3ab251 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x59dc3f5c [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x3f50bc5a [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x470c0f78 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x1486b75c [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x53aeee44 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x5fc4b1d9 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x4a204630 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x1f0cd1a4 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x71c396be [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x126e94a [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x753f45a6 [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x36d9920e [0194.575] RtlRandomEx (in: Seed=0xa09fea0 | out: Seed=0xa09fea0) returned 0x211536d3 [0194.584] ReadFile (in: hFile=0x1ff8, lpBuffer=0x1302d0c0, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0xa09fe9c, lpOverlapped=0x0 | out: lpBuffer=0x1302d0c0*, lpNumberOfBytesRead=0xa09fe9c*=0x138, lpOverlapped=0x0) returned 1 [0194.584] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.584] WriteFile (in: hFile=0x1ff8, lpBuffer=0x13030cc8*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0xa09fea0, lpOverlapped=0x0 | out: lpBuffer=0x13030cc8*, lpNumberOfBytesWritten=0xa09fea0*=0x138, lpOverlapped=0x0) returned 1 [0197.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3778 [0197.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0197.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0197.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13030cc8) returned 1 [0197.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1302d0c0) returned 1 [0197.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28538) returned 1 [0197.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e609b8) returned 1 [0197.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a85fe8 [0197.321] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.321] WriteFile (in: hFile=0x1ff8, lpBuffer=0x69c34f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa09ff28, lpOverlapped=0x0 | out: lpBuffer=0x69c34f8*, lpNumberOfBytesWritten=0xa09ff28*=0x10c, lpOverlapped=0x0) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c34f8) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86018) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fe8) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0197.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0197.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773e38 [0197.631] wcscpy (in: _Dest=0x6773e38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" [0197.631] wcscat (in: _Dest=0x6773e38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.ac3a86" [0197.631] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xa09fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a5a0 [0197.992] FlushFileBuffers (hFile=0x1ff8) returned 1 [0198.003] CloseHandle (hObject=0x1ff8) returned 1 [0198.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a300 [0198.124] wcscpy (in: _Dest=0x676a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0198.124] wcscat (in: _Dest=0x676a300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\AC3A86-Readme.txt" [0198.124] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0198.125] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xec0 [0199.115] WriteFile (in: hFile=0xec0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa09febc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa09febc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.947] CloseHandle (hObject=0xec0) returned 1 [0199.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a300) returned 1 [0199.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589a0) returned 1 Thread: id = 6462 os_tid = 0x2664 [0190.600] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0190.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0194.584] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ffc [0194.585] GetFileSizeEx (in: hFile=0x1ffc, lpFileSize=0xe54fbcc | out: lpFileSize=0xe54fbcc*=292) returned 1 [0194.585] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.585] ReadFile (in: hFile=0x1ffc, lpBuffer=0xe54fba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe54fbb8, lpOverlapped=0x0 | out: lpBuffer=0xe54fba8*, lpNumberOfBytesRead=0xe54fbb8*=0x4, lpOverlapped=0x0) returned 1 [0194.587] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0194.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0194.587] NtQuerySystemTime (in: CurrentTime=0xe54fb40 | out: CurrentTime=0xe54fb40*=132482711030580000) returned 0x0 [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x49b6340b [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x56c2281b [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x24b3bac0 [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x6b43988f [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x73785f58 [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x412e1055 [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x7d0f69ac [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x5974078c [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x2e838b3f [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x4765e9ec [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x4ef042d6 [0194.587] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x3e3530a7 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x2d0558e3 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x13200f09 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x24a49ccf [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x7694f57d [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x6ee850db [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x33aa504e [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x1d247278 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x50d8d977 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x15413ddf [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x7ac483b9 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x8de0183 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x1db33ef0 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x1f406963 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x1445547c [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x3326d3aa [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x1445547c [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x6564e2b2 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x25227718 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x169a613 [0194.588] RtlRandomEx (in: Seed=0xe54fb38 | out: Seed=0xe54fb38) returned 0x490e874d [0194.596] ReadFile (in: hFile=0x1ffc, lpBuffer=0x130348d0, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0xe54fb34, lpOverlapped=0x0 | out: lpBuffer=0x130348d0*, lpNumberOfBytesRead=0xe54fb34*=0x124, lpOverlapped=0x0) returned 1 [0194.596] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.596] WriteFile (in: hFile=0x1ffc, lpBuffer=0x130384d8*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0xe54fb38, lpOverlapped=0x0 | out: lpBuffer=0x130384d8*, lpNumberOfBytesWritten=0xe54fb38*=0x124, lpOverlapped=0x0) returned 1 [0197.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a10 [0197.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1ba8 [0197.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0197.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130384d8) returned 1 [0197.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130348d0) returned 1 [0197.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f285b0) returned 1 [0197.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61348) returned 1 [0197.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a860a8 [0197.349] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.349] WriteFile (in: hFile=0x1ffc, lpBuffer=0x69c3728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe54fbc0, lpOverlapped=0x0 | out: lpBuffer=0x69c3728*, lpNumberOfBytesWritten=0xe54fbc0*=0x10c, lpOverlapped=0x0) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3728) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860d8) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860a8) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0197.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0197.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67740a8 [0197.636] wcscpy (in: _Dest=0x67740a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" [0197.636] wcscat (in: _Dest=0x67740a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.ac3a86" [0197.636] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0xe54fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769df0 [0198.000] FlushFileBuffers (hFile=0x1ffc) returned 1 [0198.012] CloseHandle (hObject=0x1ffc) returned 1 [0198.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a550 [0198.128] wcscpy (in: _Dest=0x676a550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0198.128] wcscat (in: _Dest=0x676a550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\AC3A86-Readme.txt" [0198.128] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0198.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe14 [0199.117] WriteFile (in: hFile=0xe14, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe54fb54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe54fb54*=0x8b9, lpOverlapped=0x0) returned 1 [0199.957] CloseHandle (hObject=0xe14) returned 1 [0199.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a550) returned 1 [0199.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958ac8) returned 1 Thread: id = 6463 os_tid = 0x2668 [0190.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0190.840] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0194.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2004 [0194.597] GetFileSizeEx (in: hFile=0x2004, lpFileSize=0x897fd84 | out: lpFileSize=0x897fd84*=254) returned 1 [0194.597] SetFilePointerEx (in: hFile=0x2004, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.597] ReadFile (in: hFile=0x2004, lpBuffer=0x897fd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x897fd70, lpOverlapped=0x0 | out: lpBuffer=0x897fd60*, lpNumberOfBytesRead=0x897fd70*=0x4, lpOverlapped=0x0) returned 1 [0194.599] SetFilePointerEx (in: hFile=0x2004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0194.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0194.599] NtQuerySystemTime (in: CurrentTime=0x897fcf8 | out: CurrentTime=0x897fcf8*=132482711030736000) returned 0x0 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x6f9055 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x34f11b92 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x28cdf0ab [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x1ee1f8e4 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x50c0b55a [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x1c511184 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x52733f64 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x513056f3 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x5ee80f31 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x17efa3c9 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x169a613 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x300ec6a9 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x49b6340b [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x45b26b7 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x7e4cb034 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x5e7c402d [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0xcf66024 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x2986bce9 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x4a99e2a2 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x3cf180f1 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x43eec77d [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x3cf180f1 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x645f2a83 [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x6063e48c [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0xc7009fd [0194.599] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x5f0e1e4 [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x43ca3c7a [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x7e6d461f [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x6171316a [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x3bc7bf26 [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x1ef607db [0194.600] RtlRandomEx (in: Seed=0x897fcf0 | out: Seed=0x897fcf0) returned 0x24479a80 [0194.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1303c0e0 [0194.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13040060 [0194.613] ReadFile (in: hFile=0x2004, lpBuffer=0x1303c0e0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x897fcec, lpOverlapped=0x0 | out: lpBuffer=0x1303c0e0*, lpNumberOfBytesRead=0x897fcec*=0xfe, lpOverlapped=0x0) returned 1 [0194.614] SetFilePointerEx (in: hFile=0x2004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.614] WriteFile (in: hFile=0x2004, lpBuffer=0x13040060*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x897fcf0, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesWritten=0x897fcf0*=0xfe, lpOverlapped=0x0) returned 1 [0197.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0197.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11d0 [0197.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0197.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13040060) returned 1 [0197.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1303c0e0) returned 1 [0197.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28628) returned 1 [0197.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e61390) returned 1 [0197.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86048 [0197.328] SetFilePointerEx (in: hFile=0x2004, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.329] WriteFile (in: hFile=0x2004, lpBuffer=0x69c3610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x897fd78, lpOverlapped=0x0 | out: lpBuffer=0x69c3610*, lpNumberOfBytesWritten=0x897fd78*=0x10c, lpOverlapped=0x0) returned 1 [0197.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3610) returned 1 [0197.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86078) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86048) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0197.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0197.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773f70 [0197.634] wcscpy (in: _Dest=0x6773f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" [0197.634] wcscat (in: _Dest=0x6773f70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.ac3a86" [0197.634] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0x897fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a458 [0197.996] FlushFileBuffers (hFile=0x2004) returned 1 [0198.008] CloseHandle (hObject=0x2004) returned 1 [0198.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a428 [0198.126] wcscpy (in: _Dest=0x676a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0198.126] wcscat (in: _Dest=0x676a428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\AC3A86-Readme.txt" [0198.126] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0198.126] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1068 [0199.116] WriteFile (in: hFile=0x1068, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x897fd0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x897fd0c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.950] CloseHandle (hObject=0x1068) returned 1 [0199.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a428) returned 1 [0199.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958bf0) returned 1 Thread: id = 6464 os_tid = 0x266c [0190.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json")) returned 0x2020 [0190.603] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0194.439] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d14 [0194.439] GetFileSizeEx (in: hFile=0x1d14, lpFileSize=0x94cfd7c | out: lpFileSize=0x94cfd7c*=249) returned 1 [0194.439] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.439] ReadFile (in: hFile=0x1d14, lpBuffer=0x94cfd58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94cfd68, lpOverlapped=0x0 | out: lpBuffer=0x94cfd58*, lpNumberOfBytesRead=0x94cfd68*=0x4, lpOverlapped=0x0) returned 1 [0194.441] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0194.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0194.441] NtQuerySystemTime (in: CurrentTime=0x94cfcf0 | out: CurrentTime=0x94cfcf0*=132482711029176000) returned 0x0 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x2038bee4 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x6c1aece9 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0xf3ef5 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x6b8f381c [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x70e96ca [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x678ed39c [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x6139dde4 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x41750242 [0194.441] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x56f53bdf [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0xf9658f [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x4b817043 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x12fcf2d6 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x1a8e4379 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x4e643cd5 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x12926000 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x6393a00e [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x119749dd [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x2143087c [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x18d6c140 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x530f4c20 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x134bb210 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x3259b4d0 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x3766dd54 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x4fc83635 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x62c1ca09 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x707bd854 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x41b89e50 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x15aa29c3 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x438b09f5 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x4ec8886 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0xa3ce318 [0194.442] RtlRandomEx (in: Seed=0x94cfce8 | out: Seed=0x94cfce8) returned 0x1329beee [0194.450] ReadFile (in: hFile=0x1d14, lpBuffer=0x12fe1ca8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x94cfce4, lpOverlapped=0x0 | out: lpBuffer=0x12fe1ca8*, lpNumberOfBytesRead=0x94cfce4*=0xf9, lpOverlapped=0x0) returned 1 [0194.450] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.450] WriteFile (in: hFile=0x1d14, lpBuffer=0x12fe58b0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x94cfce8, lpOverlapped=0x0 | out: lpBuffer=0x12fe58b0*, lpNumberOfBytesWritten=0x94cfce8*=0xf9, lpOverlapped=0x0) returned 1 [0196.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4e0 [0196.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4b8 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe58b0) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe1ca8) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28088) returned 1 [0196.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e610c0) returned 1 [0196.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.398] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.398] WriteFile (in: hFile=0x1d14, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94cfd70, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0x94cfd70*=0x10c, lpOverlapped=0x0) returned 1 [0196.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4e0) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0196.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.400] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" [0196.400] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.ac3a86" [0196.400] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x94cfce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.403] FlushFileBuffers (hFile=0x1d14) returned 1 [0196.824] CloseHandle (hObject=0x1d14) returned 1 [0197.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eaa060 [0198.343] wcscpy (in: _Dest=0x12eaa060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0198.343] wcscat (in: _Dest=0x12eaa060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\AC3A86-Readme.txt" [0198.343] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0198.343] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.143] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x94cfd04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x94cfd04*=0x8b9, lpOverlapped=0x0) returned 1 [0200.145] CloseHandle (hObject=0xac4) returned 1 [0200.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eaa060) returned 1 [0200.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d18) returned 1 Thread: id = 6465 os_tid = 0x2670 [0190.604] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.841] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0194.614] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f08 [0194.615] GetFileSizeEx (in: hFile=0x1f08, lpFileSize=0x932fd24 | out: lpFileSize=0x932fd24*=236) returned 1 [0194.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0194.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0194.615] NtQuerySystemTime (in: CurrentTime=0x932fc98 | out: CurrentTime=0x932fc98*=132482711030892000) returned 0x0 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x1871d078 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x273aadb [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x52733f64 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x53aeee44 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x7a347edb [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x52b37259 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x3d23e7a5 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x6ac2d9c0 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x298a5ed9 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x33f69ff0 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x15ff04da [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x3479008b [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x1f8d5be4 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x795c62fb [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x62fe8c84 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x7ea457f5 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x590f070b [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x189494d6 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x4f7df5f6 [0194.615] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x6d72d73f [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x66592dd1 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x331f7be6 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x1e9b9c0a [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x7fad670a [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x721087c [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x298a5ed9 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x7e4cb034 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x4781c2e8 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x1cd4973a [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x4e4c4f75 [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0x279c2a2d [0194.616] RtlRandomEx (in: Seed=0x932fc90 | out: Seed=0x932fc90) returned 0xa1aa6c1 [0194.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0194.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13043c68 [0194.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13047870 [0194.624] ReadFile (in: hFile=0x1f08, lpBuffer=0x13043c68, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x932fc8c, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesRead=0x932fc8c*=0xec, lpOverlapped=0x0) returned 1 [0194.626] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.626] WriteFile (in: hFile=0x1f08, lpBuffer=0x13047870*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x932fc90, lpOverlapped=0x0 | out: lpBuffer=0x13047870*, lpNumberOfBytesWritten=0x932fc90*=0xec, lpOverlapped=0x0) returned 1 [0197.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0197.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0197.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0197.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13047870) returned 1 [0197.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0197.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f286a0) returned 1 [0197.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60928) returned 1 [0197.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x6a86168 [0197.354] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.354] WriteFile (in: hFile=0x1f08, lpBuffer=0x69c31b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x932fd18, lpOverlapped=0x0 | out: lpBuffer=0x69c31b0*, lpNumberOfBytesWritten=0x932fd18*=0x10c, lpOverlapped=0x0) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b0) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86198) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86168) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0197.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0197.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67741e0 [0197.639] wcscpy (in: _Dest=0x67741e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" [0197.639] wcscat (in: _Dest=0x67741e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.ac3a86" [0197.639] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x932fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a310 [0198.003] FlushFileBuffers (hFile=0x1f08) returned 1 [0198.020] CloseHandle (hObject=0x1f08) returned 1 [0198.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676a678 [0198.132] wcscpy (in: _Dest=0x676a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0198.132] wcscat (in: _Dest=0x676a678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\AC3A86-Readme.txt" [0198.132] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0198.132] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x135c [0199.117] WriteFile (in: hFile=0x135c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x932fcac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x932fcac*=0x8b9, lpOverlapped=0x0) returned 1 [0199.960] CloseHandle (hObject=0x135c) returned 1 [0199.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a678) returned 1 [0199.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e40) returned 1 Thread: id = 6466 os_tid = 0x2674 [0190.605] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.842] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0198.945] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1808 [0198.945] GetFileSizeEx (in: hFile=0x1808, lpFileSize=0xe39f924 | out: lpFileSize=0xe39f924*=239) returned 1 [0198.946] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.946] ReadFile (in: hFile=0x1808, lpBuffer=0xe39f900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe39f910, lpOverlapped=0x0 | out: lpBuffer=0xe39f900*, lpNumberOfBytesRead=0xe39f910*=0x4, lpOverlapped=0x0) returned 1 [0198.947] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0198.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0198.948] NtQuerySystemTime (in: CurrentTime=0xe39f898 | out: CurrentTime=0xe39f898*=132482711074260000) returned 0x0 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x6adbde4f [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x689a38e7 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x47c6beb4 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x204d32c5 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x199cd879 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x32e12d10 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x1ca4863e [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0xb38acf [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x5608a31 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x6cc66593 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x4e612daf [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x72d88890 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x1151456a [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x3f6c664a [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x606d96cb [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x667f31d2 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x32fdd63e [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0xe90d9df [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x59bf9662 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x2d63bb6b [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x3056192a [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x30f029df [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x67f2a853 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x12dfa1d0 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x167a58e7 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x44766db [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x6f51744 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x76998175 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x106ab505 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x571f5e08 [0198.948] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0xab2dddc [0198.949] RtlRandomEx (in: Seed=0xe39f890 | out: Seed=0xe39f890) returned 0x384b6570 [0198.956] ReadFile (in: hFile=0x1808, lpBuffer=0x69a9140, nNumberOfBytesToRead=0xef, lpNumberOfBytesRead=0xe39f88c, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesRead=0xe39f88c*=0xef, lpOverlapped=0x0) returned 1 [0198.956] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.956] WriteFile (in: hFile=0x1808, lpBuffer=0x69acd48*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0xe39f890, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesWritten=0xe39f890*=0xef, lpOverlapped=0x0) returned 1 [0202.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0202.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0202.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0202.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0202.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0202.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0202.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0202.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0202.215] SetFilePointerEx (in: hFile=0x1808, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.215] WriteFile (in: hFile=0x1808, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe39f918, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0xe39f918*=0x10c, lpOverlapped=0x0) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0203.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0203.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8cb8 [0203.386] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" [0203.386] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.ac3a86" [0203.386] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0xe39f890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778080 [0206.331] FlushFileBuffers (hFile=0x1808) returned 1 [0206.352] CloseHandle (hObject=0x1808) returned 1 [0206.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6759648 [0206.648] wcscpy (in: _Dest=0x6759648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0206.648] wcscat (in: _Dest=0x6759648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\AC3A86-Readme.txt" [0206.648] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0208.414] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.719] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe39f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe39f8ac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.721] CloseHandle (hObject=0x230c) returned 1 [0210.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759648) returned 1 [0210.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f68) returned 1 Thread: id = 6467 os_tid = 0x2678 [0190.606] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.843] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0198.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f90 [0198.932] GetFileSizeEx (in: hFile=0x1f90, lpFileSize=0x9e1fde4 | out: lpFileSize=0x9e1fde4*=332) returned 1 [0198.933] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.933] ReadFile (in: hFile=0x1f90, lpBuffer=0x9e1fdc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e1fdd0, lpOverlapped=0x0 | out: lpBuffer=0x9e1fdc0*, lpNumberOfBytesRead=0x9e1fdd0*=0x4, lpOverlapped=0x0) returned 1 [0198.934] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0198.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0198.935] NtQuerySystemTime (in: CurrentTime=0x9e1fd58 | out: CurrentTime=0x9e1fd58*=132482711074104000) returned 0x0 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x7d2ac96a [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x7bed7e82 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x3f6b3a7f [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x8967d97 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x5e0a43a4 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x2c45cfb [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x38fb12c7 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x1a89f152 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x606ee646 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x6fda0e23 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x115f0ea0 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x5999ad2d [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x1875cbe [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x61aa1364 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x29fffc35 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x5946fa88 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x5a1c71f9 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x7e58adbd [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x41b3a56e [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x293a52da [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x2bc9a7e7 [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x6f53c25c [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0xf1d0e0f [0198.935] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x65a94ec6 [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x27fb377a [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x63473e2e [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x7c6e8f63 [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x10ee78d7 [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x474ed310 [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x702014b4 [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x2cf7dd9e [0198.936] RtlRandomEx (in: Seed=0x9e1fd50 | out: Seed=0x9e1fd50) returned 0x2611a846 [0198.944] ReadFile (in: hFile=0x1f90, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0x9e1fd4c, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0x9e1fd4c*=0x14c, lpOverlapped=0x0) returned 1 [0198.944] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.945] WriteFile (in: hFile=0x1f90, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x9e1fd50, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0x9e1fd50*=0x14c, lpOverlapped=0x0) returned 1 [0202.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0202.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0202.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0202.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0202.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0202.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0202.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3009c0) returned 1 [0202.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0202.213] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.213] WriteFile (in: hFile=0x1f90, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9e1fdd8, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x9e1fdd8*=0x10c, lpOverlapped=0x0) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0203.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0203.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0203.381] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" [0203.381] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.ac3a86" [0203.381] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x9e1fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777f38 [0206.335] FlushFileBuffers (hFile=0x1f90) returned 1 [0206.348] CloseHandle (hObject=0x1f90) returned 1 [0206.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6759d38 [0206.647] wcscpy (in: _Dest=0x6759d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0206.647] wcscat (in: _Dest=0x6759d38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\AC3A86-Readme.txt" [0206.647] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0208.413] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.714] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9e1fd6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9e1fd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.717] CloseHandle (hObject=0x230c) returned 1 [0210.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759d38) returned 1 [0210.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959090) returned 1 Thread: id = 6468 os_tid = 0x267c [0190.607] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 0x2020 [0190.844] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0198.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20d8 [0198.921] GetFileSizeEx (in: hFile=0x20d8, lpFileSize=0x8acf8e4 | out: lpFileSize=0x8acf8e4*=215) returned 1 [0198.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0198.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0198.921] NtQuerySystemTime (in: CurrentTime=0x8acf858 | out: CurrentTime=0x8acf858*=132482711073948000) returned 0x0 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x1b7ab810 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x615e5dfe [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x4ccc9ea0 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x39f948f [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x68a4d643 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x7004e6e3 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x5ef969f0 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x19c5b08d [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x169e0b3e [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x71c3f5db [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x433a32b4 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x1521cd11 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x4039eabc [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x1dbe8b0c [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x705a9863 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x1d7f09a1 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x7a2c9774 [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x2dd0e04c [0198.921] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x224d07fc [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x66337191 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x494d1a8e [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x1bde9ba8 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x9432af5 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x53627092 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x3874f2ba [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x6b3884c6 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x2a47b795 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x45bd04e2 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x16957007 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0xc5b7588 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x7105fb63 [0198.922] RtlRandomEx (in: Seed=0x8acf850 | out: Seed=0x8acf850) returned 0x4b0e7ef1 [0198.930] ReadFile (in: hFile=0x20d8, lpBuffer=0x699a120, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x8acf84c, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesRead=0x8acf84c*=0xd7, lpOverlapped=0x0) returned 1 [0198.931] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.931] WriteFile (in: hFile=0x20d8, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x8acf850, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0x8acf850*=0xd7, lpOverlapped=0x0) returned 1 [0202.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0202.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0202.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0202.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0202.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0202.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0202.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0202.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef59c0 [0202.208] SetFilePointerEx (in: hFile=0x20d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.208] WriteFile (in: hFile=0x20d8, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8acf8d8, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0x8acf8d8*=0x10c, lpOverlapped=0x0) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0203.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0203.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0203.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0203.379] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" [0203.379] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.ac3a86" [0203.379] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.ac3a86", NtPathName=0x8acf850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777ca8 [0206.326] FlushFileBuffers (hFile=0x20d8) returned 1 [0206.341] CloseHandle (hObject=0x20d8) returned 1 [0206.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674ed08 [0206.646] wcscpy (in: _Dest=0x674ed08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0206.646] wcscat (in: _Dest=0x674ed08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\AC3A86-Readme.txt" [0206.646] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ac3a86-readme.txt")) returned 0xffffffff [0206.646] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0210.508] WriteFile (in: hFile=0x1810, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8acf86c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8acf86c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.510] CloseHandle (hObject=0x1810) returned 1 [0210.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ed08) returned 1 [0210.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69591b8) returned 1 Thread: id = 6469 os_tid = 0x2680 [0190.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.845] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0198.803] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dcc [0198.804] GetFileSizeEx (in: hFile=0x1dcc, lpFileSize=0x8b0faec | out: lpFileSize=0x8b0faec*=269) returned 1 [0198.804] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.804] ReadFile (in: hFile=0x1dcc, lpBuffer=0x8b0fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b0fad8, lpOverlapped=0x0 | out: lpBuffer=0x8b0fac8*, lpNumberOfBytesRead=0x8b0fad8*=0x4, lpOverlapped=0x0) returned 1 [0198.806] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0198.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0198.806] NtQuerySystemTime (in: CurrentTime=0x8b0fa60 | out: CurrentTime=0x8b0fa60*=132482711072856000) returned 0x0 [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x4ac59bd1 [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x43b60d58 [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x62a6dc9c [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0xf1e2525 [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x3964d3aa [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x7b80e1bd [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0xa91153e [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x2219393d [0198.806] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x207d4a8e [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x71b15e63 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x3e1b0b07 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x59464022 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x2e412767 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x3472ea7e [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x8aac46a [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x3dbe3695 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x2b4245c3 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x5fb488e8 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x3b9f5505 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x5b2f3a65 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x21322ad6 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x4c6d7d2a [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x282824b7 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x723937da [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0xc1a3f22 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x27ec7586 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x1720a30c [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x9433550 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x7806d466 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x5dec05a9 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x6c9a95d3 [0198.807] RtlRandomEx (in: Seed=0x8b0fa58 | out: Seed=0x8b0fa58) returned 0x24bd192c [0198.816] ReadFile (in: hFile=0x1dcc, lpBuffer=0x6742f30, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0x8b0fa54, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesRead=0x8b0fa54*=0x10d, lpOverlapped=0x0) returned 1 [0198.817] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.817] WriteFile (in: hFile=0x1dcc, lpBuffer=0x673b720*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x8b0fa58, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesWritten=0x8b0fa58*=0x10d, lpOverlapped=0x0) returned 1 [0202.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc38 [0202.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0202.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0202.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0202.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0202.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0202.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60e80) returned 1 [0202.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5600 [0202.192] SetFilePointerEx (in: hFile=0x1dcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.192] WriteFile (in: hFile=0x1dcc, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8b0fae0, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0x8b0fae0*=0x10c, lpOverlapped=0x0) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0203.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0203.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41da0 [0203.354] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" [0203.354] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.ac3a86" [0203.354] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0x8b0fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67786e8 [0206.269] FlushFileBuffers (hFile=0x1dcc) returned 1 [0206.299] CloseHandle (hObject=0x1dcc) returned 1 [0206.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67508c8 [0206.633] wcscpy (in: _Dest=0x67508c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0206.633] wcscat (in: _Dest=0x67508c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\AC3A86-Readme.txt" [0206.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0206.634] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.625] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8b0fa74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8b0fa74*=0x8b9, lpOverlapped=0x0) returned 1 [0210.627] CloseHandle (hObject=0x230c) returned 1 [0210.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67508c8) returned 1 [0210.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69592e0) returned 1 Thread: id = 6470 os_tid = 0x2684 [0190.610] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.873] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0198.817] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc8 [0198.818] GetFileSizeEx (in: hFile=0x1cc8, lpFileSize=0xf15fedc | out: lpFileSize=0xf15fedc*=256) returned 1 [0198.818] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.818] ReadFile (in: hFile=0x1cc8, lpBuffer=0xf15feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf15fec8, lpOverlapped=0x0 | out: lpBuffer=0xf15feb8*, lpNumberOfBytesRead=0xf15fec8*=0x4, lpOverlapped=0x0) returned 1 [0198.819] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0198.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0198.820] NtQuerySystemTime (in: CurrentTime=0xf15fe50 | out: CurrentTime=0xf15fe50*=132482711073012000) returned 0x0 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x56f50d3c [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x2a2f66da [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x5f810a03 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x2a78fcb3 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x3b9f5505 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x31418be1 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x4b53500 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x5777765d [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x12fcdb16 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x97b1059 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x7130d423 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x470d1e79 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x6fe16327 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x715bace3 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x2cadde18 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0xd9452be [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x73a5a41a [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x2d7b47ee [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x690b029a [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x8054c04 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x77fa125f [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x50f02068 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x14ce7f14 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x6a7d3326 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x38fb12c7 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x46d3c9ba [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x48ed4b80 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x3ff85f02 [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x683be86f [0198.820] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x7c8a5e26 [0198.821] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x4674c121 [0198.821] RtlRandomEx (in: Seed=0xf15fe48 | out: Seed=0xf15fe48) returned 0x28a02941 [0198.828] ReadFile (in: hFile=0x1cc8, lpBuffer=0x6737b18, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xf15fe44, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesRead=0xf15fe44*=0x100, lpOverlapped=0x0) returned 1 [0198.828] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.828] WriteFile (in: hFile=0x1cc8, lpBuffer=0x6719ad8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xf15fe48, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesWritten=0xf15fe48*=0x100, lpOverlapped=0x0) returned 1 [0202.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0202.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0202.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0202.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0202.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0202.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0202.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301080) returned 1 [0202.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5690 [0202.194] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.194] WriteFile (in: hFile=0x1cc8, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf15fed0, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0xf15fed0*=0x10c, lpOverlapped=0x0) returned 1 [0203.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0203.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0203.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41c68 [0203.361] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" [0203.361] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.ac3a86" [0203.361] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0xf15fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777268 [0206.273] FlushFileBuffers (hFile=0x1cc8) returned 1 [0206.311] CloseHandle (hObject=0x1cc8) returned 1 [0206.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f2d0 [0206.636] wcscpy (in: _Dest=0x674f2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0206.636] wcscat (in: _Dest=0x674f2d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\AC3A86-Readme.txt" [0206.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0206.637] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.641] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf15fe64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf15fe64*=0x8b9, lpOverlapped=0x0) returned 1 [0210.643] CloseHandle (hObject=0x116c) returned 1 [0210.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f2d0) returned 1 [0210.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959408) returned 1 Thread: id = 6471 os_tid = 0x2688 [0190.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0190.874] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0198.829] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2118 [0198.829] GetFileSizeEx (in: hFile=0x2118, lpFileSize=0x9d4fb14 | out: lpFileSize=0x9d4fb14*=234) returned 1 [0198.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0198.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0198.830] NtQuerySystemTime (in: CurrentTime=0x9d4fa88 | out: CurrentTime=0x9d4fa88*=132482711073012000) returned 0x0 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x22eea8b7 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1919040a [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0xbca6b68 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1a5dfa5 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x6d11526d [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1a19cf9b [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1f3c2fa1 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x51bd0a6 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x60540f7 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x7231e8a3 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0xd9452be [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x10070da7 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x718685a3 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x75460013 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1e38d9cb [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x3331d28d [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x59bfc30a [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x240b5417 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x2fe4bcdb [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x1dc3c868 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x3d330f8a [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x2d2d6ae0 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x2dcb4719 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x75a79ee6 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x5999ad2d [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x3c16642a [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x2502bd31 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x7e58adbd [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x48491e4d [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x76584325 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x42dd7908 [0198.830] RtlRandomEx (in: Seed=0x9d4fa80 | out: Seed=0x9d4fa80) returned 0x65ceb24c [0198.839] ReadFile (in: hFile=0x2118, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x9d4fa7c, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0x9d4fa7c*=0xea, lpOverlapped=0x0) returned 1 [0198.840] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.840] WriteFile (in: hFile=0x2118, lpBuffer=0x12f70cc8*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x9d4fa80, lpOverlapped=0x0 | out: lpBuffer=0x12f70cc8*, lpNumberOfBytesWritten=0x9d4fa80*=0xea, lpOverlapped=0x0) returned 1 [0202.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0202.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0202.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0202.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f70cc8) returned 1 [0202.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0202.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0202.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011e8) returned 1 [0202.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0202.196] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.196] WriteFile (in: hFile=0x2118, lpBuffer=0x6752728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9d4fb08, lpOverlapped=0x0 | out: lpBuffer=0x6752728*, lpNumberOfBytesWritten=0x9d4fb08*=0x10c, lpOverlapped=0x0) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0203.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0203.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0203.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0203.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41170 [0203.364] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" [0203.364] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.ac3a86" [0203.364] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0x9d4fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67773b0 [0206.293] FlushFileBuffers (hFile=0x2118) returned 1 [0206.315] CloseHandle (hObject=0x2118) returned 1 [0206.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678b5b0 [0206.634] wcscpy (in: _Dest=0x678b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0206.635] wcscat (in: _Dest=0x678b5b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\AC3A86-Readme.txt" [0206.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0206.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.629] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9d4fa9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9d4fa9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.632] CloseHandle (hObject=0x230c) returned 1 [0210.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b5b0) returned 1 [0210.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959530) returned 1 Thread: id = 6472 os_tid = 0x268c [0190.612] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.875] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb4 [0198.842] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0xaa7fdd4 | out: lpFileSize=0xaa7fdd4*=268) returned 1 [0198.842] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.842] ReadFile (in: hFile=0xcb4, lpBuffer=0xaa7fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa7fdc0, lpOverlapped=0x0 | out: lpBuffer=0xaa7fdb0*, lpNumberOfBytesRead=0xaa7fdc0*=0x4, lpOverlapped=0x0) returned 1 [0198.843] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0198.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0198.844] NtQuerySystemTime (in: CurrentTime=0xaa7fd48 | out: CurrentTime=0xaa7fd48*=132482711073168000) returned 0x0 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x59b53f53 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x222706f6 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x7606a9c8 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x7f03e260 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x9c6ed44 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x4b0e7ef1 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x5f9ee68e [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x75460013 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x571eb54c [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x2bc47272 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x895197 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x47b4fffb [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x63fe304e [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x7606a9c8 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x1e567173 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x6b071363 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x606ee646 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x5557db65 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x5fd7405f [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x390f7d53 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x565acafd [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x6bd2317f [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x96429eb [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x480d33a7 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x3a926de5 [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x1097903e [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x7fd2929d [0198.844] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0xa590df0 [0198.845] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x656799d4 [0198.845] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x3331d28d [0198.845] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x33880fa3 [0198.845] RtlRandomEx (in: Seed=0xaa7fd40 | out: Seed=0xaa7fd40) returned 0x7c723398 [0198.853] ReadFile (in: hFile=0xcb4, lpBuffer=0x12f748d0, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xaa7fd3c, lpOverlapped=0x0 | out: lpBuffer=0x12f748d0*, lpNumberOfBytesRead=0xaa7fd3c*=0x10c, lpOverlapped=0x0) returned 1 [0198.853] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.853] WriteFile (in: hFile=0xcb4, lpBuffer=0x12f61ca8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa7fd40, lpOverlapped=0x0 | out: lpBuffer=0x12f61ca8*, lpNumberOfBytesWritten=0xaa7fd40*=0x10c, lpOverlapped=0x0) returned 1 [0202.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0202.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0202.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0202.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f61ca8) returned 1 [0202.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f748d0) returned 1 [0202.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0202.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301230) returned 1 [0202.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5db0 [0202.198] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.198] WriteFile (in: hFile=0xcb4, lpBuffer=0x6750e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa7fdc8, lpOverlapped=0x0 | out: lpBuffer=0x6750e00*, lpNumberOfBytesWritten=0xaa7fdc8*=0x10c, lpOverlapped=0x0) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0203.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0203.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0203.366] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" [0203.366] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.ac3a86" [0203.366] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xaa7fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67778d0 [0206.304] FlushFileBuffers (hFile=0xcb4) returned 1 [0206.319] CloseHandle (hObject=0xcb4) returned 1 [0206.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f770 [0206.638] wcscpy (in: _Dest=0x674f770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0206.638] wcscat (in: _Dest=0x674f770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\AC3A86-Readme.txt" [0206.638] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0206.638] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.636] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaa7fd5c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xaa7fd5c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.639] CloseHandle (hObject=0x116c) returned 1 [0210.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f770) returned 1 [0210.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959658) returned 1 Thread: id = 6473 os_tid = 0x2690 [0190.613] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json")) returned 0x2020 [0190.613] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe30 [0194.451] GetFileSizeEx (in: hFile=0xe30, lpFileSize=0x804f85c | out: lpFileSize=0x804f85c*=289) returned 1 [0194.451] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.451] ReadFile (in: hFile=0xe30, lpBuffer=0x804f838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x804f848, lpOverlapped=0x0 | out: lpBuffer=0x804f838*, lpNumberOfBytesRead=0x804f848*=0x4, lpOverlapped=0x0) returned 1 [0194.458] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0194.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0194.458] NtQuerySystemTime (in: CurrentTime=0x804f7d0 | out: CurrentTime=0x804f7d0*=132482711029332000) returned 0x0 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x70e96ca [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x4e96763 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x29496707 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x239d39a0 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x72f722be [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x56eb535 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x6fee0dbc [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x160f3c10 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x24db1bde [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x2aaea0db [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x29ee65ae [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x6cf2ecf [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x76ecc270 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x6fcc993a [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x628490b6 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x7eed9289 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x35fc18b7 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x7cf3b8be [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x21ff413e [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x40d5a964 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x16f0f1d0 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x2a36ecb5 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x6e76dbb5 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x3a7c7736 [0194.458] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x630eff20 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x19e373df [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x134bb210 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x5816e029 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x586e4e8 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x6740b313 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x5cfc1360 [0194.459] RtlRandomEx (in: Seed=0x804f7c8 | out: Seed=0x804f7c8) returned 0x1c83e773 [0194.467] ReadFile (in: hFile=0xe30, lpBuffer=0x12fe94b8, nNumberOfBytesToRead=0x121, lpNumberOfBytesRead=0x804f7c4, lpOverlapped=0x0 | out: lpBuffer=0x12fe94b8*, lpNumberOfBytesRead=0x804f7c4*=0x121, lpOverlapped=0x0) returned 1 [0194.467] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.467] WriteFile (in: hFile=0xe30, lpBuffer=0x12fed0c0*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x804f7c8, lpOverlapped=0x0 | out: lpBuffer=0x12fed0c0*, lpNumberOfBytesWritten=0x804f7c8*=0x121, lpOverlapped=0x0) returned 1 [0196.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0196.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0196.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0196.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fed0c0) returned 1 [0196.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe94b8) returned 1 [0196.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28100) returned 1 [0196.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60e38) returned 1 [0196.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0196.374] SetFilePointerEx (in: hFile=0xe30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.374] WriteFile (in: hFile=0xe30, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x804f850, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0x804f850*=0x10c, lpOverlapped=0x0) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0196.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.376] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" [0196.376] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.ac3a86" [0196.376] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0x804f7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.380] FlushFileBuffers (hFile=0xe30) returned 1 [0196.815] CloseHandle (hObject=0xe30) returned 1 [0197.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6a86ce8 [0198.324] wcscpy (in: _Dest=0x6a86ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0198.324] wcscat (in: _Dest=0x6a86ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\AC3A86-Readme.txt" [0198.324] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0198.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1848 [0200.178] WriteFile (in: hFile=0x1848, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x804f7e4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x804f7e4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.184] CloseHandle (hObject=0x1848) returned 1 [0200.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86ce8) returned 1 [0200.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959780) returned 1 Thread: id = 6474 os_tid = 0x2694 [0190.614] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0190.876] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2114 [0198.854] GetFileSizeEx (in: hFile=0x2114, lpFileSize=0xa56fd9c | out: lpFileSize=0xa56fd9c*=230) returned 1 [0198.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0198.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0198.854] NtQuerySystemTime (in: CurrentTime=0xa56fd10 | out: CurrentTime=0xa56fd10*=132482711073324000) returned 0x0 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x76584325 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0xdb527b1 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x709f31d0 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x18b5a7d6 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x7f09b504 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x70b049e3 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0xa75e2cd [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x7da686c4 [0198.854] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x382557ad [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x21531a64 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0xb922e66 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x5eb72ecd [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0xf42fb7e [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x77341620 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x1f1d8865 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x23c0c43b [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x26278f5e [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x315fbc52 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x4fec68a5 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x30b5640e [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x6f125dfb [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x4c84b289 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x2592a62f [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x4ecc0561 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x2fb8bc96 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x1dc3c868 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x6d82daba [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x139acdbe [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x3e4fbaea [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x2dcb4719 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0xb25d2a4 [0198.855] RtlRandomEx (in: Seed=0xa56fd08 | out: Seed=0xa56fd08) returned 0x76e91dc7 [0198.865] ReadFile (in: hFile=0x2114, lpBuffer=0x12f658b0, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xa56fd04, lpOverlapped=0x0 | out: lpBuffer=0x12f658b0*, lpNumberOfBytesRead=0xa56fd04*=0xe6, lpOverlapped=0x0) returned 1 [0198.867] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.867] WriteFile (in: hFile=0x2114, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xa56fd08, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0xa56fd08*=0xe6, lpOverlapped=0x0) returned 1 [0202.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0202.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0202.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0202.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0202.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f658b0) returned 1 [0202.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0202.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0202.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e10 [0202.200] SetFilePointerEx (in: hFile=0x2114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.200] WriteFile (in: hFile=0x2114, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa56fd90, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0xa56fd90*=0x10c, lpOverlapped=0x0) returned 1 [0203.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0203.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0203.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0203.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0203.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0203.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0203.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0203.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41650 [0203.369] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" [0203.369] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.ac3a86" [0203.369] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xa56fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777788 [0206.309] FlushFileBuffers (hFile=0x2114) returned 1 [0206.324] CloseHandle (hObject=0x2114) returned 1 [0206.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674ef58 [0206.640] wcscpy (in: _Dest=0x674ef58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0206.640] wcscat (in: _Dest=0x674ef58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\AC3A86-Readme.txt" [0206.640] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0206.640] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.646] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa56fd24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa56fd24*=0x8b9, lpOverlapped=0x0) returned 1 [0210.648] CloseHandle (hObject=0x116c) returned 1 [0210.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ef58) returned 1 [0210.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69598a8) returned 1 Thread: id = 6475 os_tid = 0x2698 [0190.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.877] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0198.957] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x180c [0198.957] GetFileSizeEx (in: hFile=0x180c, lpFileSize=0xa1ffc4c | out: lpFileSize=0xa1ffc4c*=226) returned 1 [0198.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0198.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0198.958] NtQuerySystemTime (in: CurrentTime=0xa1ffbc0 | out: CurrentTime=0xa1ffbc0*=132482711074416000) returned 0x0 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x22a4f2c2 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x5a0cdb5e [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x6dd0f442 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x49de281d [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x2c1c553c [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x3ec78db5 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x3bff443a [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x1066ee1b [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x38287148 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x4d54f101 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x228566f2 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x6f845ca3 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x66020185 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x466cf4c7 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x1e926006 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x7c4e86a7 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x7dd518fd [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x4eca3663 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x52ce7bfd [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x132f63aa [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x5f6269b9 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x42455e51 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x4e2eea0d [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x2934e579 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x1899cb02 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0xb1a3295 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x3f8f9795 [0198.958] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x220aa2ae [0198.959] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x33abbf44 [0198.959] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x30d64e9b [0198.959] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x728f5bb1 [0198.959] RtlRandomEx (in: Seed=0xa1ffbb8 | out: Seed=0xa1ffbb8) returned 0x1a47dd3c [0198.968] ReadFile (in: hFile=0x180c, lpBuffer=0x69b0950, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xa1ffbb4, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xa1ffbb4*=0xe2, lpOverlapped=0x0) returned 1 [0198.969] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.969] WriteFile (in: hFile=0x180c, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xa1ffbb8, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0xa1ffbb8*=0xe2, lpOverlapped=0x0) returned 1 [0202.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0202.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0202.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0202.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0202.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0202.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0202.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0202.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0202.217] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.217] WriteFile (in: hFile=0x180c, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa1ffc40, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xa1ffc40*=0x10c, lpOverlapped=0x0) returned 1 [0203.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0203.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0203.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678aab8 [0203.389] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" [0203.389] wcscat (in: _Dest=0x678aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.ac3a86" [0203.389] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xa1ffbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67774f8 [0206.340] FlushFileBuffers (hFile=0x180c) returned 1 [0206.354] CloseHandle (hObject=0x180c) returned 1 [0206.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac750 [0206.648] wcscpy (in: _Dest=0x12eac750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0206.648] wcscat (in: _Dest=0x12eac750, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\AC3A86-Readme.txt" [0206.648] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0208.414] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.723] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa1ffbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa1ffbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.725] CloseHandle (hObject=0x230c) returned 1 [0210.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac750) returned 1 [0210.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69599d0) returned 1 Thread: id = 6476 os_tid = 0x269c [0190.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json")) returned 0x2020 [0190.616] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0194.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc7c [0194.468] GetFileSizeEx (in: hFile=0xc7c, lpFileSize=0xab3fddc | out: lpFileSize=0xab3fddc*=242) returned 1 [0194.468] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.469] ReadFile (in: hFile=0xc7c, lpBuffer=0xab3fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab3fdc8, lpOverlapped=0x0 | out: lpBuffer=0xab3fdb8*, lpNumberOfBytesRead=0xab3fdc8*=0x4, lpOverlapped=0x0) returned 1 [0194.470] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0194.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0194.470] NtQuerySystemTime (in: CurrentTime=0xab3fd50 | out: CurrentTime=0xab3fd50*=132482711029488000) returned 0x0 [0194.470] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x2a36ecb5 [0194.470] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x3166447f [0194.470] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x8f20f76 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x358f7e44 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x5b5cf6dc [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0xf3ef5 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x43797fdc [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x34ec1da8 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x4375be4d [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x45fd0387 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x134456a6 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x24ad7aa1 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x4422703f [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x54435081 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x2531e815 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x627dae44 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x1e3022d8 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x7ef1f27e [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x27109305 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x6fb6f95e [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x24ad7aa1 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x206397a4 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x1376a43f [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x2522a3dc [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0xe1a1111 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x51361d39 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x293686c2 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x3c0293b7 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x2227e3e9 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x2139d364 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x7f9ebeb9 [0194.471] RtlRandomEx (in: Seed=0xab3fd48 | out: Seed=0xab3fd48) returned 0x7ad58d21 [0194.479] ReadFile (in: hFile=0xc7c, lpBuffer=0x12ff0cc8, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xab3fd44, lpOverlapped=0x0 | out: lpBuffer=0x12ff0cc8*, lpNumberOfBytesRead=0xab3fd44*=0xf2, lpOverlapped=0x0) returned 1 [0194.479] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.479] WriteFile (in: hFile=0xc7c, lpBuffer=0x12ff48d0*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xab3fd48, lpOverlapped=0x0 | out: lpBuffer=0x12ff48d0*, lpNumberOfBytesWritten=0xab3fd48*=0xf2, lpOverlapped=0x0) returned 1 [0195.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5d968 [0195.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0195.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0195.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff48d0) returned 1 [0195.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff0cc8) returned 1 [0195.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28178) returned 1 [0195.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e611e0) returned 1 [0195.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0195.826] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.826] WriteFile (in: hFile=0xc7c, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xab3fdd0, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0xab3fdd0*=0x10c, lpOverlapped=0x0) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0195.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0195.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6773bc8 [0195.980] wcscpy (in: _Dest=0x6773bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" [0195.980] wcscat (in: _Dest=0x6773bc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.ac3a86" [0195.980] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0xab3fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67781c8) returned 1 [0196.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8c940) returned 1 [0196.123] NtQueryInformationFile (in: FileHandle=0xc7c, IoStatusBlock=0xab3fd20, FileInformation=0xab3fd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab3fd20, FileInformation=0xab3fd28) returned 0x0 [0196.123] NtSetInformationFile (FileHandle=0xc7c, IoStatusBlock=0xab3fd20, FileInformation=0xab3fd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6773bc8) returned 1 [0196.276] FlushFileBuffers (hFile=0xc7c) returned 1 [0196.815] CloseHandle (hObject=0xc7c) returned 1 [0197.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ea4060 [0198.342] wcscpy (in: _Dest=0x12ea4060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0198.342] wcscat (in: _Dest=0x12ea4060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\AC3A86-Readme.txt" [0198.342] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0198.342] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.130] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xab3fd64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xab3fd64*=0x8b9, lpOverlapped=0x0) returned 1 [0200.132] CloseHandle (hObject=0xac4) returned 1 [0200.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea4060) returned 1 [0200.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959af8) returned 1 Thread: id = 6477 os_tid = 0x26b0 [0190.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.618] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0194.480] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xec4 [0194.480] GetFileSizeEx (in: hFile=0xec4, lpFileSize=0xaecff34 | out: lpFileSize=0xaecff34*=256) returned 1 [0194.480] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.480] ReadFile (in: hFile=0xec4, lpBuffer=0xaecff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaecff20, lpOverlapped=0x0 | out: lpBuffer=0xaecff10*, lpNumberOfBytesRead=0xaecff20*=0x4, lpOverlapped=0x0) returned 1 [0194.482] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0194.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0194.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0194.482] NtQuerySystemTime (in: CurrentTime=0xaecfea8 | out: CurrentTime=0xaecfea8*=132482711029644000) returned 0x0 [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x1dd1bd26 [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x51f9d0a3 [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x781aff09 [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x35941b4c [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x3eaa9ce0 [0194.482] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x3ba48cfa [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x423306a1 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x8235b04 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x22acc90 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x35e735d4 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x6d83997a [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x53b77fa4 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x1aadad55 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x7fd766c9 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x7e0befdd [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x4f7290b3 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x609d8c8f [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x23292228 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x4dc2b9c6 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x290291ec [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0xb51f2f3 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x435cce37 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x1deabd5e [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x38ff5637 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x6de34605 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x3b5197f5 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x40e66940 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0xe6a6730 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x3c6f5442 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x1ce20e43 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x3e2aea41 [0194.483] RtlRandomEx (in: Seed=0xaecfea0 | out: Seed=0xaecfea0) returned 0x6bcd606c [0194.491] ReadFile (in: hFile=0xec4, lpBuffer=0x12ff84d8, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xaecfe9c, lpOverlapped=0x0 | out: lpBuffer=0x12ff84d8*, lpNumberOfBytesRead=0xaecfe9c*=0x100, lpOverlapped=0x0) returned 1 [0194.491] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.491] WriteFile (in: hFile=0xec4, lpBuffer=0x12ffc0e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xaecfea0, lpOverlapped=0x0 | out: lpBuffer=0x12ffc0e0*, lpNumberOfBytesWritten=0xaecfea0*=0x100, lpOverlapped=0x0) returned 1 [0196.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6c8 [0196.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0196.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ffc0e0) returned 1 [0196.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff84d8) returned 1 [0196.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f281f0) returned 1 [0196.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60cd0) returned 1 [0196.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ea0 [0196.850] SetFilePointerEx (in: hFile=0xec4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.850] WriteFile (in: hFile=0xec4, lpBuffer=0x6768098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaecff28, lpOverlapped=0x0 | out: lpBuffer=0x6768098*, lpNumberOfBytesWritten=0xaecff28*=0x10c, lpOverlapped=0x0) returned 1 [0199.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768098) returned 1 [0199.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0199.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0199.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41788 [0199.668] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" [0199.668] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.ac3a86" [0199.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xaecfea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778458 [0199.713] FlushFileBuffers (hFile=0xec4) returned 1 [0199.720] CloseHandle (hObject=0xec4) returned 1 [0199.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac3d8 [0199.760] wcscpy (in: _Dest=0x12eac3d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0199.760] wcscat (in: _Dest=0x12eac3d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\AC3A86-Readme.txt" [0199.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0199.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1344 [0199.777] WriteFile (in: hFile=0x1344, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaecfebc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xaecfebc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.792] CloseHandle (hObject=0x1344) returned 1 [0199.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac3d8) returned 1 [0199.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf088) returned 1 Thread: id = 6478 os_tid = 0x26b4 [0190.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.877] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0198.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1810 [0198.970] GetFileSizeEx (in: hFile=0x1810, lpFileSize=0x643fdbc | out: lpFileSize=0x643fdbc*=271) returned 1 [0198.970] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.970] ReadFile (in: hFile=0x1810, lpBuffer=0x643fd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x643fda8, lpOverlapped=0x0 | out: lpBuffer=0x643fd98*, lpNumberOfBytesRead=0x643fda8*=0x4, lpOverlapped=0x0) returned 1 [0198.972] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0198.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0198.972] NtQuerySystemTime (in: CurrentTime=0x643fd30 | out: CurrentTime=0x643fd30*=132482711074572000) returned 0x0 [0198.972] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x246767fe [0198.972] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x2bc9a7e7 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x19f23ac9 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x63300960 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x30876cd3 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x365bd295 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x656b2b24 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x2b18931b [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x5dec8cf4 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x53dbe45b [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x7c752899 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0xa60ce87 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x6faf3563 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x33880fa3 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0xc004404 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x50bb18e2 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0xd9a57d7 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x23c0c43b [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x7c6eea8 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x5aebb451 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x5137eb22 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x47fa2754 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x6ff502b3 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x2cc8cbd0 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x73603d35 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x5a1875c9 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x2502bd31 [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x137f260f [0198.973] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x85b1af [0198.974] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x644d5e72 [0198.974] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x25ae3ebe [0198.974] RtlRandomEx (in: Seed=0x643fd28 | out: Seed=0x643fd28) returned 0x7db5a60c [0198.981] ReadFile (in: hFile=0x1810, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x643fd24, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0x643fd24*=0x10f, lpOverlapped=0x0) returned 1 [0198.982] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.982] WriteFile (in: hFile=0x1810, lpBuffer=0x69bbd68*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x643fd28, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesWritten=0x643fd28*=0x10f, lpOverlapped=0x0) returned 1 [0202.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0202.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0202.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0202.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0202.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0202.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0202.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33330) returned 1 [0202.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0202.219] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.219] WriteFile (in: hFile=0x1810, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x643fdb0, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0x643fdb0*=0x10c, lpOverlapped=0x0) returned 1 [0203.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0203.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0203.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0203.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0203.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0203.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0203.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0203.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0203.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678abf0 [0203.392] wcscpy (in: _Dest=0x678abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" [0203.392] wcscat (in: _Dest=0x678abf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.ac3a86" [0203.392] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x643fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784ab8 [0206.346] FlushFileBuffers (hFile=0x1810) returned 1 [0206.358] CloseHandle (hObject=0x1810) returned 1 [0209.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eadaf8 [0209.441] wcscpy (in: _Dest=0x12eadaf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0209.441] wcscat (in: _Dest=0x12eadaf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\AC3A86-Readme.txt" [0209.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0209.442] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.991] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x643fd44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x643fd44*=0x8b9, lpOverlapped=0x0) returned 1 [0210.017] CloseHandle (hObject=0x1bf8) returned 1 [0210.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eadaf8) returned 1 [0210.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf1b0) returned 1 Thread: id = 6479 os_tid = 0x26b8 [0190.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.879] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0198.982] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1978 [0198.983] GetFileSizeEx (in: hFile=0x1978, lpFileSize=0x7e9ff3c | out: lpFileSize=0x7e9ff3c*=256) returned 1 [0198.983] SetFilePointerEx (in: hFile=0x1978, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.983] ReadFile (in: hFile=0x1978, lpBuffer=0x7e9ff18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e9ff28, lpOverlapped=0x0 | out: lpBuffer=0x7e9ff18*, lpNumberOfBytesRead=0x7e9ff28*=0x4, lpOverlapped=0x0) returned 1 [0198.988] SetFilePointerEx (in: hFile=0x1978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0198.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0198.989] NtQuerySystemTime (in: CurrentTime=0x7e9feb0 | out: CurrentTime=0x7e9feb0*=132482711074728000) returned 0x0 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2673b5ef [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x7a5a2646 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2191bc32 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x69c622b [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x4b1490b4 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x1b6d5205 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x7d701121 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x3c3eeb6d [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x388dd311 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x655e168e [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x3c39d93 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x68e33564 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2eb7f73e [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x70baafe2 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x6b65bf82 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2e94d687 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x46343c63 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x4750f881 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x61b445a1 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2d8b3142 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x607288a [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x74a94c5d [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0xd7e6477 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x7f75689c [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x189efead [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2ca18e77 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x5fcb6327 [0198.989] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x2ccb82d0 [0198.990] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x8491b57 [0198.990] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0xd1cef64 [0198.990] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x6ee83c78 [0198.990] RtlRandomEx (in: Seed=0x7e9fea8 | out: Seed=0x7e9fea8) returned 0x7fc0b4b7 [0198.998] ReadFile (in: hFile=0x1978, lpBuffer=0x690bce8, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x7e9fea4, lpOverlapped=0x0 | out: lpBuffer=0x690bce8*, lpNumberOfBytesRead=0x7e9fea4*=0x100, lpOverlapped=0x0) returned 1 [0198.998] SetFilePointerEx (in: hFile=0x1978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.998] WriteFile (in: hFile=0x1978, lpBuffer=0x690f8f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7e9fea8, lpOverlapped=0x0 | out: lpBuffer=0x690f8f0*, lpNumberOfBytesWritten=0x7e9fea8*=0x100, lpOverlapped=0x0) returned 1 [0202.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0202.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0202.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0202.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690f8f0) returned 1 [0202.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690bce8) returned 1 [0202.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0202.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33210) returned 1 [0202.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0202.221] SetFilePointerEx (in: hFile=0x1978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.221] WriteFile (in: hFile=0x1978, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e9ff30, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0x7e9ff30*=0x10c, lpOverlapped=0x0) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0203.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0203.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678ad28 [0203.394] wcscpy (in: _Dest=0x678ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" [0203.394] wcscat (in: _Dest=0x678ad28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.ac3a86" [0203.394] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0x7e9fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784c00 [0206.350] FlushFileBuffers (hFile=0x1978) returned 1 [0206.362] CloseHandle (hObject=0x1978) returned 1 [0206.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac628 [0206.649] wcscpy (in: _Dest=0x12eac628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0206.649] wcscat (in: _Dest=0x12eac628, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\AC3A86-Readme.txt" [0206.649] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0208.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.727] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7e9fec4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7e9fec4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.736] CloseHandle (hObject=0x230c) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac628) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf2d8) returned 1 Thread: id = 6480 os_tid = 0x26bc [0190.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0190.879] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0198.998] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1814 [0198.999] GetFileSizeEx (in: hFile=0x1814, lpFileSize=0xb38fb54 | out: lpFileSize=0xb38fb54*=253) returned 1 [0198.999] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.999] ReadFile (in: hFile=0x1814, lpBuffer=0xb38fb30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb38fb40, lpOverlapped=0x0 | out: lpBuffer=0xb38fb30*, lpNumberOfBytesRead=0xb38fb40*=0x4, lpOverlapped=0x0) returned 1 [0199.001] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0199.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0199.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0199.001] NtQuerySystemTime (in: CurrentTime=0xb38fac8 | out: CurrentTime=0xb38fac8*=132482711074728000) returned 0x0 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x133275e1 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x178d441b [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x2644aad7 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x70857123 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x4bdd34f0 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x7c785308 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0xa142db [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x63c96add [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x114ef89b [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x4c368919 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x1053c0c4 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x5590f777 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x58c341db [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x6bd2317f [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x27043de8 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x37109d61 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x3988ea3f [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x4a1b0f6 [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x5df0076d [0199.001] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x293a572e [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x2cec2f29 [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x34ab1e0 [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x2dd65a9c [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x19e5de82 [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x6999a41a [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x13f72aba [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x32176fa3 [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x189efead [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x20d4eeea [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x129ec2bb [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x19f4d838 [0199.002] RtlRandomEx (in: Seed=0xb38fac0 | out: Seed=0xb38fac0) returned 0x19e62c6a [0199.010] ReadFile (in: hFile=0x1814, lpBuffer=0x69134f8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xb38fabc, lpOverlapped=0x0 | out: lpBuffer=0x69134f8*, lpNumberOfBytesRead=0xb38fabc*=0xfd, lpOverlapped=0x0) returned 1 [0199.010] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.010] WriteFile (in: hFile=0x1814, lpBuffer=0x6917100*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xb38fac0, lpOverlapped=0x0 | out: lpBuffer=0x6917100*, lpNumberOfBytesWritten=0xb38fac0*=0xfd, lpOverlapped=0x0) returned 1 [0202.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0202.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0202.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0202.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6917100) returned 1 [0202.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69134f8) returned 1 [0202.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 [0202.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32f88) returned 1 [0202.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0202.225] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.225] WriteFile (in: hFile=0x1814, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb38fb48, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0xb38fb48*=0x10c, lpOverlapped=0x0) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0203.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0203.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678ae60 [0203.397] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" [0203.397] wcscat (in: _Dest=0x678ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.ac3a86" [0203.397] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0xb38fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784d48 [0206.356] FlushFileBuffers (hFile=0x1814) returned 1 [0206.367] CloseHandle (hObject=0x1814) returned 1 [0206.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac2b0 [0206.650] wcscpy (in: _Dest=0x12eac2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0206.650] wcscat (in: _Dest=0x12eac2b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\AC3A86-Readme.txt" [0206.650] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0208.416] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.739] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb38fadc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb38fadc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.741] CloseHandle (hObject=0x230c) returned 1 [0210.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac2b0) returned 1 [0210.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf400) returned 1 Thread: id = 6481 os_tid = 0x26c0 [0190.622] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json")) returned 0x2020 [0190.880] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0199.010] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf8 [0199.011] GetFileSizeEx (in: hFile=0x1bf8, lpFileSize=0x47afd7c | out: lpFileSize=0x47afd7c*=238) returned 1 [0199.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0199.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0199.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0199.011] NtQuerySystemTime (in: CurrentTime=0x47afcf0 | out: CurrentTime=0x47afcf0*=132482711074884000) returned 0x0 [0199.011] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x293a572e [0199.011] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x4f3b80a3 [0199.011] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x75058860 [0199.011] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x79d0ae13 [0199.011] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x3833ceca [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x250cd4fd [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x210f52b3 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x3f8a2922 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x43b306f8 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x20c5cf1e [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x5d2176de [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0xd1cef64 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x41cc8166 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x2a892384 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x1fa7c3be [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x2d7a5fc7 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x44d21796 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x44bf7e03 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x7bce9959 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x44bf7e03 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x4f2bfca0 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x242a5bf7 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x585736a5 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x4d6543bf [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x317a19d9 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x5cd7c34 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x3d69824a [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x4b793770 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x651f7a0c [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x22ab013e [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x3e456106 [0199.012] RtlRandomEx (in: Seed=0x47afce8 | out: Seed=0x47afce8) returned 0x31bb34be [0199.020] ReadFile (in: hFile=0x1bf8, lpBuffer=0x691ad08, nNumberOfBytesToRead=0xee, lpNumberOfBytesRead=0x47afce4, lpOverlapped=0x0 | out: lpBuffer=0x691ad08*, lpNumberOfBytesRead=0x47afce4*=0xee, lpOverlapped=0x0) returned 1 [0199.021] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.022] WriteFile (in: hFile=0x1bf8, lpBuffer=0x691e910*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x47afce8, lpOverlapped=0x0 | out: lpBuffer=0x691e910*, lpNumberOfBytesWritten=0x47afce8*=0xee, lpOverlapped=0x0) returned 1 [0202.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0202.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0202.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0202.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691e910) returned 1 [0202.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691ad08) returned 1 [0202.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0202.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0202.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0202.228] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.228] WriteFile (in: hFile=0x1bf8, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x47afd70, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0x47afd70*=0x10c, lpOverlapped=0x0) returned 1 [0203.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0203.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0203.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0203.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0203.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0203.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0203.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0203.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0203.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678af98 [0203.400] wcscpy (in: _Dest=0x678af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" [0203.400] wcscat (in: _Dest=0x678af98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.ac3a86" [0203.400] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x47afce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784e90 [0206.360] FlushFileBuffers (hFile=0x1bf8) [0206.360] FlushFileBuffers (hFile=0x1bf8) returned 1 [0206.373] CloseHandle (hObject=0x1bf8) returned 1 [0206.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac3d8 [0206.652] wcscpy (in: _Dest=0x12eac3d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0206.652] wcscat (in: _Dest=0x12eac3d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\AC3A86-Readme.txt" [0206.652] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0208.417] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.743] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x47afd04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x47afd04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.745] CloseHandle (hObject=0x230c) returned 1 [0210.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac3d8) returned 1 [0210.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf528) returned 1 Thread: id = 6482 os_tid = 0x26c4 [0190.623] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json")) returned 0x2020 [0190.881] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22ac [0198.753] GetFileSizeEx (in: hFile=0x22ac, lpFileSize=0xb4bf954 | out: lpFileSize=0xb4bf954*=232) returned 1 [0198.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0198.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0198.753] NtQuerySystemTime (in: CurrentTime=0xb4bf8c8 | out: CurrentTime=0xb4bf8c8*=132482711072232000) returned 0x0 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x381b83e6 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x725cc163 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x3e1bafc4 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x77fa125f [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x7e841f3d [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x64fd0cbc [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x3dc33457 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x1b63baed [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x2504a0b [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x66351a7d [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x6b071363 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x6c4c102c [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x3326709 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x1ab5cd68 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x4ecc0561 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x2a4a85ea [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x3c3db70c [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x1ab5cd68 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x2a4174fb [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x351e3cb8 [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x4ccff75b [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x787da43d [0198.753] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x4efcd237 [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x1f378e70 [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x1cb50c0b [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x65390889 [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x4dc4a66d [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x167c5c1a [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x4ae8ed0a [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x40ea86bd [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x28d28bd4 [0198.754] RtlRandomEx (in: Seed=0xb4bf8c0 | out: Seed=0xb4bf8c0) returned 0x464a5028 [0198.762] ReadFile (in: hFile=0x22ac, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xb4bf8bc, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0xb4bf8bc*=0xe8, lpOverlapped=0x0) returned 1 [0198.764] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.764] WriteFile (in: hFile=0x22ac, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xb4bf8c0, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xb4bf8c0*=0xe8, lpOverlapped=0x0) returned 1 [0202.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0202.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3c8 [0202.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0202.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0202.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0202.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0202.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b680) returned 1 [0202.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0202.724] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.725] WriteFile (in: hFile=0x22ac, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb4bf948, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0xb4bf948*=0x10c, lpOverlapped=0x0) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0204.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b0d0 [0204.518] wcscpy (in: _Dest=0x678b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" [0204.518] wcscat (in: _Dest=0x678b0d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.ac3a86" [0204.518] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xb4bf8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0206.557] FlushFileBuffers (hFile=0x22ac) returned 1 [0206.564] CloseHandle (hObject=0x22ac) returned 1 [0209.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac060 [0209.003] wcscpy (in: _Dest=0x12eac060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0209.004] wcscat (in: _Dest=0x12eac060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\AC3A86-Readme.txt" [0209.004] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0209.004] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20d0 [0209.335] WriteFile (in: hFile=0x20d0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb4bf8dc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb4bf8dc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.878] CloseHandle (hObject=0x20d0) returned 1 [0209.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac060) returned 1 [0209.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf650) returned 1 Thread: id = 6483 os_tid = 0x26c8 [0190.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.882] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0198.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x211c [0198.765] GetFileSizeEx (in: hFile=0x211c, lpFileSize=0x660fadc | out: lpFileSize=0x660fadc*=210) returned 1 [0198.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0198.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0198.765] NtQuerySystemTime (in: CurrentTime=0x660fa50 | out: CurrentTime=0x660fa50*=132482711072388000) returned 0x0 [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x3a36d387 [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x113db38 [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0xc0d1acd [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x67c5ecb6 [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x5810470c [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0xbca6b68 [0198.765] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x5da3b608 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x113db38 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x220da3f3 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x4ae8ed0a [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x5a8e469f [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x3ff3a934 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x7976e3fa [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x71dc3723 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x470d1e79 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x7904f87f [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x46cdfda7 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x6fa0a77a [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x6d9db9ed [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x4432812e [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x289572ff [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x4e17fbdf [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x5da3b608 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x38e94553 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x74f48e56 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x7e841f3d [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x52c22ad2 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x7d2c6109 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x500350fa [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x3fb4b1b [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0x1d39d0e1 [0198.766] RtlRandomEx (in: Seed=0x660fa48 | out: Seed=0x660fa48) returned 0xfaa3bab [0198.774] ReadFile (in: hFile=0x211c, lpBuffer=0x67212e8, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x660fa44, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x660fa44*=0xd2, lpOverlapped=0x0) returned 1 [0198.776] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.776] WriteFile (in: hFile=0x211c, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x660fa48, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x660fa48*=0xd2, lpOverlapped=0x0) returned 1 [0202.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0202.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0202.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0202.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0202.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0202.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0202.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bbd8) returned 1 [0202.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0202.301] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.301] WriteFile (in: hFile=0x211c, lpBuffer=0x67524f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x660fad0, lpOverlapped=0x0 | out: lpBuffer=0x67524f8*, lpNumberOfBytesWritten=0x660fad0*=0x10c, lpOverlapped=0x0) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0204.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0204.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0204.490] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" [0204.490] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.ac3a86" [0204.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0x660fa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785120 [0206.549] FlushFileBuffers (hFile=0x211c) returned 1 [0206.555] CloseHandle (hObject=0x211c) returned 1 [0208.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x675a428 [0208.977] wcscpy (in: _Dest=0x675a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0208.977] wcscat (in: _Dest=0x675a428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\AC3A86-Readme.txt" [0208.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0208.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1280 [0209.324] WriteFile (in: hFile=0x1280, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x660fa64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x660fa64*=0x8b9, lpOverlapped=0x0) returned 1 [0209.875] CloseHandle (hObject=0x1280) returned 1 [0209.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a428) returned 1 [0209.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf778) returned 1 Thread: id = 6484 os_tid = 0x26cc [0190.625] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json")) returned 0x2020 [0190.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.776] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22b4 [0198.777] GetFileSizeEx (in: hFile=0x22b4, lpFileSize=0x8bffb3c | out: lpFileSize=0x8bffb3c*=264) returned 1 [0198.777] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.777] ReadFile (in: hFile=0x22b4, lpBuffer=0x8bffb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8bffb28, lpOverlapped=0x0 | out: lpBuffer=0x8bffb18*, lpNumberOfBytesRead=0x8bffb28*=0x4, lpOverlapped=0x0) returned 1 [0198.779] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0198.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0198.779] NtQuerySystemTime (in: CurrentTime=0x8bffab0 | out: CurrentTime=0x8bffab0*=132482711072544000) returned 0x0 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x17e9fdce [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x5e5a75df [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x6f516477 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x5e5a75df [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x134cbc95 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x723937da [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x72070fe3 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x744c1f9 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x48a9a3e [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x409fc993 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x75a79ee6 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x3d1dd38d [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x2d63bb6b [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x2e58fcf4 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x4a117754 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x6a7d3326 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x26b43920 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x6fe90868 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x4efcd237 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x6825203d [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x6170cbf8 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x1a39f975 [0198.779] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x4d2ade5f [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x4feb82e0 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x3acf53a0 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x454e5f66 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x760d774d [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x19f65734 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x68b24a28 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x3a36d387 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x2eea0c59 [0198.780] RtlRandomEx (in: Seed=0x8bffaa8 | out: Seed=0x8bffaa8) returned 0x4f1db868 [0198.788] ReadFile (in: hFile=0x22b4, lpBuffer=0x67122c8, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x8bffaa4, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesRead=0x8bffaa4*=0x108, lpOverlapped=0x0) returned 1 [0198.788] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.788] WriteFile (in: hFile=0x22b4, lpBuffer=0x6730308*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8bffaa8, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesWritten=0x8bffaa8*=0x108, lpOverlapped=0x0) returned 1 [0202.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0202.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0202.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0202.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0202.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0202.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0202.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a5e8) returned 1 [0202.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5480 [0202.188] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.188] WriteFile (in: hFile=0x22b4, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8bffb30, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0x8bffb30*=0x10c, lpOverlapped=0x0) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0203.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0203.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41b30 [0203.348] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" [0203.348] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.ac3a86" [0203.348] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x8bffaa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776ab8 [0206.256] FlushFileBuffers (hFile=0x22b4) returned 1 [0206.266] CloseHandle (hObject=0x22b4) returned 1 [0206.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6750428 [0206.625] wcscpy (in: _Dest=0x6750428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0206.625] wcscat (in: _Dest=0x6750428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\AC3A86-Readme.txt" [0206.625] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0206.625] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xde0 [0210.570] WriteFile (in: hFile=0xde0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8bffac4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8bffac4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.573] CloseHandle (hObject=0xde0) returned 1 [0210.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750428) returned 1 [0210.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf8a0) returned 1 Thread: id = 6485 os_tid = 0x26d0 [0190.626] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0198.789] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2324 [0198.789] GetFileSizeEx (in: hFile=0x2324, lpFileSize=0xa36fec4 | out: lpFileSize=0xa36fec4*=222) returned 1 [0198.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0198.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0198.790] NtQuerySystemTime (in: CurrentTime=0xa36fe38 | out: CurrentTime=0xa36fe38*=132482711072700000) returned 0x0 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x6ab43aa6 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x2504a0b [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x5b2f3a65 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x587f4567 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x6c4c102c [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x3730c1c3 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x64075dba [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x78dd7be [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x1f378e70 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x3326709 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x379aa198 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x55234230 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x16ade49d [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x587f4567 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x2468eeff [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x7231e8a3 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x3268e807 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x2bc47272 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x749faf3e [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x4cc5ad57 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x2c46ef56 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x73a5a41a [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x5d2176de [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x6000af79 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x7ce92fe5 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x5bc6620d [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x6c9a95d3 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x63032bb1 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0xf851087 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x2a389835 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x9ec5704 [0198.790] RtlRandomEx (in: Seed=0xa36fe30 | out: Seed=0xa36fe30) returned 0x647b7a67 [0198.800] ReadFile (in: hFile=0x2324, lpBuffer=0x6746b38, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xa36fe2c, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesRead=0xa36fe2c*=0xde, lpOverlapped=0x0) returned 1 [0198.802] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.802] WriteFile (in: hFile=0x2324, lpBuffer=0x6724ef0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xa36fe30, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesWritten=0xa36fe30*=0xde, lpOverlapped=0x0) returned 1 [0202.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0202.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0202.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0202.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0202.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0202.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0202.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b3f8) returned 1 [0202.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5270 [0202.190] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.190] WriteFile (in: hFile=0x2324, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa36feb8, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0xa36feb8*=0x10c, lpOverlapped=0x0) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0203.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0203.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d41788 [0203.351] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" [0203.351] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.ac3a86" [0203.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xa36fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6778310 [0206.259] FlushFileBuffers (hFile=0x2324) returned 1 [0206.270] CloseHandle (hObject=0x2324) returned 1 [0206.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678b820 [0206.632] wcscpy (in: _Dest=0x678b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0206.632] wcscat (in: _Dest=0x678b820, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0206.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0206.632] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0210.618] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa36fe4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa36fe4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.620] CloseHandle (hObject=0x230c) returned 1 [0210.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b820) returned 1 [0210.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf9c8) returned 1 Thread: id = 6486 os_tid = 0x26d4 [0190.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca")) returned 0x20 [0196.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0197.207] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.074] GetLastError () returned 0x5 [0199.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0199.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675aab8) returned 1 Thread: id = 6487 os_tid = 0x26d8 [0190.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp")) returned 0x20 [0197.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0197.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.728] GetLastError () returned 0x5 [0197.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0197.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ab78) returned 1 Thread: id = 6488 os_tid = 0x26dc [0190.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp")) returned 0x20 [0196.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0197.210] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.077] GetLastError () returned 0x5 [0199.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0199.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ec88) returned 1 Thread: id = 6489 os_tid = 0x26e0 [0190.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx")) returned 0x20 [0197.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0197.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.082] GetLastError () returned 0x5 [0199.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0199.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ac38) returned 1 Thread: id = 6490 os_tid = 0x26e4 [0190.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca")) returned 0x20 [0198.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0198.626] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0198.627] GetLastError () returned 0x5 [0198.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0198.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675acf8) returned 1 Thread: id = 6491 os_tid = 0x26e8 [0190.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp")) returned 0x20 [0199.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0199.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.073] GetLastError () returned 0x5 [0199.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0199.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675adb8) returned 1 Thread: id = 6492 os_tid = 0x26ec [0190.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths")) returned 0x20 [0199.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0199.075] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.075] GetLastError () returned 0x5 [0199.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0199.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ae78) returned 1 Thread: id = 6493 os_tid = 0x26f0 [0190.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp")) returned 0x20 [0199.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0199.078] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.078] GetLastError () returned 0x5 [0199.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0199.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675af38) returned 1 Thread: id = 6494 os_tid = 0x26f4 [0190.631] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 0x2020 [0191.217] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0193.114] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f98 [0193.114] GetFileSizeEx (in: hFile=0x1f98, lpFileSize=0x34bfa9c | out: lpFileSize=0x34bfa9c*=193) returned 1 [0193.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab28 [0193.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0193.114] NtQuerySystemTime (in: CurrentTime=0x34bfa10 | out: CurrentTime=0x34bfa10*=132482711015916000) returned 0x0 [0193.114] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x5f042e4a [0193.114] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x17e8c446 [0193.114] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x10409157 [0193.114] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x50c8a521 [0193.114] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x4853fdf3 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x74e585cb [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x75e60d5a [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x3f2cf48c [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x2abb6b86 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x67908ad2 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x35d30f5f [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x1b2b7308 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x6d50d912 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x226ba7f1 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x5f36213d [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x1b038add [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x7de2a96f [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x32ff69a4 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x55da335b [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x1f204f5b [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x32215724 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x24a405c1 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x1290dcd2 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x73ae02bb [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x65073dc8 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x260a5312 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x53e915a5 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x7a307636 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x64aa5296 [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x358dc45e [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x26f7e81e [0193.115] RtlRandomEx (in: Seed=0x34bfa08 | out: Seed=0x34bfa08) returned 0x5346287a [0193.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0193.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0193.123] ReadFile (in: hFile=0x1f98, lpBuffer=0x697fce8, nNumberOfBytesToRead=0xc1, lpNumberOfBytesRead=0x34bfa04, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x34bfa04*=0xc1, lpOverlapped=0x0) returned 1 [0193.125] SetFilePointerEx (in: hFile=0x1f98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.125] WriteFile (in: hFile=0x1f98, lpBuffer=0x69838f0*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x34bfa08, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesWritten=0x34bfa08*=0xc1, lpOverlapped=0x0) returned 1 [0195.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0195.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823830) returned 1 [0195.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0195.670] SetFilePointerEx (in: hFile=0x1f98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.670] WriteFile (in: hFile=0x1f98, lpBuffer=0x30bb5e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x34bfa90, lpOverlapped=0x0 | out: lpBuffer=0x30bb5e8*, lpNumberOfBytesWritten=0x34bfa90*=0x10c, lpOverlapped=0x0) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab28) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0195.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0195.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40c90 [0195.848] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" [0195.848] wcscat (in: _Dest=0x3d40c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.ac3a86" [0195.848] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x34bfa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769788 [0195.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769788) returned 1 [0195.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6891600) returned 1 [0195.991] NtQueryInformationFile (in: FileHandle=0x1f98, IoStatusBlock=0x34bf9e0, FileInformation=0x34bf9e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x34bf9e0, FileInformation=0x34bf9e8) returned 0x0 [0195.991] NtSetInformationFile (FileHandle=0x1f98, IoStatusBlock=0x34bf9e0, FileInformation=0x34bf9e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c90) returned 1 [0196.126] FlushFileBuffers (hFile=0x1f98) returned 1 [0196.802] CloseHandle (hObject=0x1f98) returned 1 [0197.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a300 [0197.673] wcscpy (in: _Dest=0x677a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0197.673] wcscat (in: _Dest=0x677a300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\AC3A86-Readme.txt" [0197.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0197.673] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.230] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x34bfa24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x34bfa24*=0x8b9, lpOverlapped=0x0) returned 1 [0198.232] CloseHandle (hObject=0x237c) returned 1 [0198.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a300) returned 1 [0198.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafaf0) returned 1 Thread: id = 6495 os_tid = 0x26f8 [0190.631] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 0x2020 [0191.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.125] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20e8 [0193.126] GetFileSizeEx (in: hFile=0x20e8, lpFileSize=0xb15fc1c | out: lpFileSize=0xb15fc1c*=172) returned 1 [0193.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0193.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0193.126] NtQuerySystemTime (in: CurrentTime=0xb15fb90 | out: CurrentTime=0xb15fb90*=132482711016072000) returned 0x0 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x7672efc6 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x3ef265b5 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x59cc03f9 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x984ec7c [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x260fa62e [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x4853fdf3 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x5c8e4b87 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x1de72c25 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x32ff69a4 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x2f48f264 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x7b7cfa5d [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x727d5a0f [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x1b82e2f3 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x1c95e78 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x2c5bb8ec [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x3f96b17e [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x23d44d7a [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x2e1d0524 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x5385d44f [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x5dc3ce8d [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0xe69e56f [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x62fd9a60 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x732faaa5 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x7ae293b6 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x26a836e3 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x553b26c6 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x630b0ba1 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x1d8df760 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x6a0a9234 [0193.126] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x3560b8cb [0193.127] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x35d42fc9 [0193.127] RtlRandomEx (in: Seed=0xb15fb88 | out: Seed=0xb15fb88) returned 0x2097122a [0193.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0193.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0193.135] ReadFile (in: hFile=0x20e8, lpBuffer=0x69874f8, nNumberOfBytesToRead=0xac, lpNumberOfBytesRead=0xb15fb84, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesRead=0xb15fb84*=0xac, lpOverlapped=0x0) returned 1 [0193.137] SetFilePointerEx (in: hFile=0x20e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.137] WriteFile (in: hFile=0x20e8, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0xb15fb88, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xb15fb88*=0xac, lpOverlapped=0x0) returned 1 [0195.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0195.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0195.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0195.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0195.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0195.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0195.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823518) returned 1 [0195.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5450 [0195.672] SetFilePointerEx (in: hFile=0x20e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.672] WriteFile (in: hFile=0x20e8, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb15fc10, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xb15fc10*=0x10c, lpOverlapped=0x0) returned 1 [0195.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0195.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0195.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0195.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41518 [0195.851] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" [0195.851] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.ac3a86" [0195.851] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.ac3a86", NtPathName=0xb15fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67698d0 [0195.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67698d0) returned 1 [0195.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68922f0) returned 1 [0195.993] NtQueryInformationFile (in: FileHandle=0x20e8, IoStatusBlock=0xb15fb60, FileInformation=0xb15fb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb15fb60, FileInformation=0xb15fb68) returned 0x0 [0195.993] NtSetInformationFile (FileHandle=0x20e8, IoStatusBlock=0xb15fb60, FileInformation=0xb15fb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0196.130] FlushFileBuffers (hFile=0x20e8) returned 1 [0196.803] CloseHandle (hObject=0x20e8) returned 1 [0197.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a428 [0197.677] wcscpy (in: _Dest=0x677a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0197.677] wcscat (in: _Dest=0x677a428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\AC3A86-Readme.txt" [0197.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ac3a86-readme.txt")) returned 0xffffffff [0197.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.234] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb15fba4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb15fba4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.236] CloseHandle (hObject=0x237c) returned 1 [0198.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a428) returned 1 [0198.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafc18) returned 1 Thread: id = 6496 os_tid = 0x26fc [0190.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 0x2020 [0191.224] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", dwFileAttributes=0x20) returned 1 [0193.137] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1094 [0193.138] GetFileSizeEx (in: hFile=0x1094, lpFileSize=0xee4f93c | out: lpFileSize=0xee4f93c*=167) returned 1 [0193.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0193.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0193.138] NtQuerySystemTime (in: CurrentTime=0xee4f8b0 | out: CurrentTime=0xee4f8b0*=132482711016228000) returned 0x0 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x41f5a335 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x5cba8600 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x44f8e0b5 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x5ca40546 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x11b7f641 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x1fb3b5f9 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x4afc69be [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x76a86351 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x1598c7c6 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x51e46366 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x2555a189 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x3714a39a [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x7f577df2 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x238cecc3 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x5261a9c [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x2beb23c7 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x760e4f0 [0193.138] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x165f105f [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x732faaa5 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x526db95 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x3bef2835 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x6a0a9234 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0xec14ff9 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x64a97fd [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x37eb6ca2 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x39b6ba43 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x3e06649c [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x51c1ca56 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x1fb3b5f9 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x9392e64 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x52de75b6 [0193.139] RtlRandomEx (in: Seed=0xee4f8a8 | out: Seed=0xee4f8a8) returned 0x51a73fcd [0193.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0193.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6992910 [0193.147] ReadFile (in: hFile=0x1094, lpBuffer=0x698ed08, nNumberOfBytesToRead=0xa7, lpNumberOfBytesRead=0xee4f8a4, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesRead=0xee4f8a4*=0xa7, lpOverlapped=0x0) returned 1 [0193.149] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.150] WriteFile (in: hFile=0x1094, lpBuffer=0x6992910*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0xee4f8a8, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesWritten=0xee4f8a8*=0xa7, lpOverlapped=0x0) returned 1 [0195.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0195.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0195.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0195.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0195.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0195.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0195.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822f78) returned 1 [0195.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53f0 [0195.674] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.674] WriteFile (in: hFile=0x1094, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee4f930, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xee4f930*=0x10c, lpOverlapped=0x0) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0195.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0195.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ace0) returned 1 [0195.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d413e0 [0195.854] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" [0195.854] wcscat (in: _Dest=0x3d413e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.ac3a86" [0195.854] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.ac3a86", NtPathName=0xee4f8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769a18 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769a18) returned 1 [0195.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688d100) returned 1 [0195.995] NtQueryInformationFile (in: FileHandle=0x1094, IoStatusBlock=0xee4f880, FileInformation=0xee4f888, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xee4f880, FileInformation=0xee4f888) returned 0x0 [0195.995] NtSetInformationFile (FileHandle=0x1094, IoStatusBlock=0xee4f880, FileInformation=0xee4f888, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 [0196.132] FlushFileBuffers (hFile=0x1094) returned 1 [0196.803] CloseHandle (hObject=0x1094) returned 1 [0197.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a550 [0197.678] wcscpy (in: _Dest=0x677a550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0197.678] wcscat (in: _Dest=0x677a550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\AC3A86-Readme.txt" [0197.678] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ac3a86-readme.txt")) returned 0xffffffff [0197.678] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.238] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xee4f8c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xee4f8c4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.240] CloseHandle (hObject=0x237c) returned 1 [0198.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a550) returned 1 [0198.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafd40) returned 1 Thread: id = 6497 os_tid = 0x2700 [0190.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 0x2020 [0191.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0193.150] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1504 [0193.150] GetFileSizeEx (in: hFile=0x1504, lpFileSize=0x863f874 | out: lpFileSize=0x863f874*=276) returned 1 [0193.150] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.151] ReadFile (in: hFile=0x1504, lpBuffer=0x863f850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x863f860, lpOverlapped=0x0 | out: lpBuffer=0x863f850*, lpNumberOfBytesRead=0x863f860*=0x4, lpOverlapped=0x0) returned 1 [0193.152] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b528 [0193.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0193.152] NtQuerySystemTime (in: CurrentTime=0x863f7e8 | out: CurrentTime=0x863f7e8*=132482711016228000) returned 0x0 [0193.152] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x5c19d4e3 [0193.152] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x618cff25 [0193.152] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x6b462b33 [0193.152] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x11725c58 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x492f2c01 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x6156e047 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x199c7a1e [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x7f789d83 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x5b75c7a3 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0xb1dbdf3 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x28290401 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x3a40905d [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x47dc976d [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x62f07c1 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x2ac8bdaf [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0xed6cde3 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x10e0421b [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x146e30cd [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x51b4be82 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x14bce388 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x69777bbf [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0xab80031 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x41c0ba00 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x37e8a4ac [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x74e585cb [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x2b25258d [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x2d1db7ac [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x7b41f3d4 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x164b84c8 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x3df1028c [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x5bd3ae52 [0193.153] RtlRandomEx (in: Seed=0x863f7e0 | out: Seed=0x863f7e0) returned 0x2108852a [0193.161] ReadFile (in: hFile=0x1504, lpBuffer=0x6996518, nNumberOfBytesToRead=0x114, lpNumberOfBytesRead=0x863f7dc, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesRead=0x863f7dc*=0x114, lpOverlapped=0x0) returned 1 [0193.161] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.161] WriteFile (in: hFile=0x1504, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x863f7e0, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0x863f7e0*=0x114, lpOverlapped=0x0) returned 1 [0195.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344440 [0195.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344670 [0195.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0195.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0195.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0195.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0195.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822af8) returned 1 [0195.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5330 [0195.678] SetFilePointerEx (in: hFile=0x1504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.678] WriteFile (in: hFile=0x1504, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x863f868, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0x863f868*=0x10c, lpOverlapped=0x0) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344440) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0195.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0195.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41c68 [0195.858] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" [0195.858] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.ac3a86" [0195.858] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x863f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769ca8 [0195.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769ca8) returned 1 [0195.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6892fe0) returned 1 [0195.997] NtQueryInformationFile (in: FileHandle=0x1504, IoStatusBlock=0x863f7b8, FileInformation=0x863f7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x863f7b8, FileInformation=0x863f7c0) returned 0x0 [0195.997] NtSetInformationFile (FileHandle=0x1504, IoStatusBlock=0x863f7b8, FileInformation=0x863f7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0196.140] FlushFileBuffers (hFile=0x1504) returned 1 [0196.803] CloseHandle (hObject=0x1504) returned 1 [0197.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e88060 [0198.335] wcscpy (in: _Dest=0x12e88060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0198.335] wcscat (in: _Dest=0x12e88060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\AC3A86-Readme.txt" [0198.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0198.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.044] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x863f7fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x863f7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0200.046] CloseHandle (hObject=0xac4) returned 1 [0200.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e88060) returned 1 [0200.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe68) returned 1 Thread: id = 6498 os_tid = 0x2704 [0190.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 0x2020 [0191.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", dwFileAttributes=0x20) returned 1 [0193.162] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x150c [0193.162] GetFileSizeEx (in: hFile=0x150c, lpFileSize=0xb90f794 | out: lpFileSize=0xb90f794*=331) returned 1 [0193.163] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x147, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.163] ReadFile (in: hFile=0x150c, lpBuffer=0xb90f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb90f780, lpOverlapped=0x0 | out: lpBuffer=0xb90f770*, lpNumberOfBytesRead=0xb90f780*=0x4, lpOverlapped=0x0) returned 1 [0193.164] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0193.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0193.164] NtQuerySystemTime (in: CurrentTime=0xb90f708 | out: CurrentTime=0xb90f708*=132482711016384000) returned 0x0 [0193.164] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x2e72b6a4 [0193.164] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x7e5bab21 [0193.164] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x5c119ce6 [0193.164] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x55da335b [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x10b17431 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x76a86351 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x7f697f01 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x49955c0d [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0xb43c15a [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x3bef2835 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x3f2cf48c [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x5fd75b53 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x5765f2d8 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x6eb0a9b0 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x6775d931 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0xc3b5104 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0xed6cde3 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x47fc1e35 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x2977831c [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x39b6ba43 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x45f58191 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x6072ebba [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x24160f1c [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x16f1e930 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x35610ed8 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x455d343d [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x6eb0a9b0 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0xb43c15a [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x555cdaca [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x141a6fe2 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x2df22c64 [0193.165] RtlRandomEx (in: Seed=0xb90f700 | out: Seed=0xb90f700) returned 0x455d343d [0193.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0193.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0193.174] ReadFile (in: hFile=0x150c, lpBuffer=0x699dd28, nNumberOfBytesToRead=0x14b, lpNumberOfBytesRead=0xb90f6fc, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0xb90f6fc*=0x14b, lpOverlapped=0x0) returned 1 [0193.174] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.174] WriteFile (in: hFile=0x150c, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0xb90f700, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0xb90f700*=0x14b, lpOverlapped=0x0) returned 1 [0195.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0195.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344468 [0195.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344468) returned 1 [0195.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0195.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0195.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0195.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822fc0) returned 1 [0195.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5390 [0195.677] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.677] WriteFile (in: hFile=0x150c, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb90f788, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0xb90f788*=0x10c, lpOverlapped=0x0) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344468) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2a8) returned 1 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0195.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41650 [0195.856] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" [0195.856] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.ac3a86" [0195.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.ac3a86", NtPathName=0xb90f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769b60 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769b60) returned 1 [0196.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6892db8) returned 1 [0196.003] NtQueryInformationFile (in: FileHandle=0x150c, IoStatusBlock=0xb90f6d8, FileInformation=0xb90f6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb90f6d8, FileInformation=0xb90f6e0) returned 0x0 [0196.003] NtSetInformationFile (FileHandle=0x150c, IoStatusBlock=0xb90f6d8, FileInformation=0xb90f6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0196.149] FlushFileBuffers (hFile=0x150c) returned 1 [0196.804] CloseHandle (hObject=0x150c) returned 1 [0197.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e8c060 [0198.336] wcscpy (in: _Dest=0x12e8c060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0198.336] wcscat (in: _Dest=0x12e8c060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\AC3A86-Readme.txt" [0198.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ac3a86-readme.txt")) returned 0xffffffff [0198.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.075] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb90f71c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb90f71c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.076] CloseHandle (hObject=0xac4) returned 1 [0200.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e8c060) returned 1 [0200.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff90) returned 1 Thread: id = 6499 os_tid = 0x2708 [0190.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 0x2020 [0191.226] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0193.175] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x228c [0193.175] GetFileSizeEx (in: hFile=0x228c, lpFileSize=0x8c7fedc | out: lpFileSize=0x8c7fedc*=207) returned 1 [0193.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0193.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0193.175] NtQuerySystemTime (in: CurrentTime=0x8c7fe50 | out: CurrentTime=0x8c7fe50*=132482711016540000) returned 0x0 [0193.175] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0xbd924ae [0193.175] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x49f621df [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x164b84c8 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x192f0086 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x201f2274 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x37eb6ca2 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x11a46ba4 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x26803300 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x35f2151f [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x503b59db [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0xab80031 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0xb1dbdf3 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x4e9ba3c0 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x6775d931 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x54a75f0a [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x4aff5bb5 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x260a5312 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x37941154 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x5f256513 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x5765f2d8 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x4662bfc0 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x4110af2f [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x12efb6ca [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x31d0a1ee [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x769e774a [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x19c03c36 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x6f4814ac [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x57acc43e [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x2dc753a4 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x6fb61331 [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x4afc69be [0193.176] RtlRandomEx (in: Seed=0x8c7fe48 | out: Seed=0x8c7fe48) returned 0x7126e705 [0193.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0193.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0193.184] ReadFile (in: hFile=0x228c, lpBuffer=0x69a5538, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0x8c7fe44, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesRead=0x8c7fe44*=0xcf, lpOverlapped=0x0) returned 1 [0193.186] SetFilePointerEx (in: hFile=0x228c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.186] WriteFile (in: hFile=0x228c, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x8c7fe48, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0x8c7fe48*=0xcf, lpOverlapped=0x0) returned 1 [0195.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0195.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3448c8 [0195.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0195.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0195.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0195.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0195.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68225e8) returned 1 [0195.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a50 [0195.683] SetFilePointerEx (in: hFile=0x228c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.683] WriteFile (in: hFile=0x228c, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c7fed0, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0x8c7fed0*=0x10c, lpOverlapped=0x0) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0195.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0195.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0195.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0195.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41da0 [0195.864] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" [0195.864] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.ac3a86" [0195.864] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0x8c7fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769f38 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769f38) returned 1 [0195.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688f5a8) returned 1 [0195.998] NtQueryInformationFile (in: FileHandle=0x228c, IoStatusBlock=0x8c7fe20, FileInformation=0x8c7fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8c7fe20, FileInformation=0x8c7fe28) returned 0x0 [0195.998] NtSetInformationFile (FileHandle=0x228c, IoStatusBlock=0x8c7fe20, FileInformation=0x8c7fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41da0) returned 1 [0196.139] FlushFileBuffers (hFile=0x228c) returned 1 [0196.803] CloseHandle (hObject=0x228c) returned 1 [0197.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a678 [0197.681] wcscpy (in: _Dest=0x677a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0197.681] wcscat (in: _Dest=0x677a678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\AC3A86-Readme.txt" [0197.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0197.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.242] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c7fe64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8c7fe64*=0x8b9, lpOverlapped=0x0) returned 1 [0198.244] CloseHandle (hObject=0x237c) returned 1 [0198.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a678) returned 1 [0198.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db00b8) returned 1 Thread: id = 6500 os_tid = 0x270c [0190.634] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 0x2020 [0191.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0193.187] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x247c [0193.187] GetFileSizeEx (in: hFile=0x247c, lpFileSize=0x8a5fc9c | out: lpFileSize=0x8a5fc9c*=173) returned 1 [0193.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0193.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0193.187] NtQuerySystemTime (in: CurrentTime=0x8a5fc10 | out: CurrentTime=0x8a5fc10*=132482711016696000) returned 0x0 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x45f58191 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x208c7ee8 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x1f725370 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x709e26b4 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x5e9acb6d [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x26803300 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x98e7e26 [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x3a0b8cff [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x2bd16f5d [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x5a86309d [0193.187] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x563cfeeb [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x208efed0 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x56048e0e [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x28db9c7f [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x538c7e12 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x2df22c64 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x6c049aff [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x36553c0e [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x6b53f0f8 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x39850a69 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x37e8a4ac [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0xb41b80d [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x66a60019 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x7b38a2c2 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x3b49ebd5 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x5ad4ec87 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x361f136f [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x261015e4 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x205c2a13 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x7126e705 [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x1857ac2c [0193.188] RtlRandomEx (in: Seed=0x8a5fc08 | out: Seed=0x8a5fc08) returned 0x423d834e [0193.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69acd48 [0193.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0193.196] ReadFile (in: hFile=0x247c, lpBuffer=0x69acd48, nNumberOfBytesToRead=0xad, lpNumberOfBytesRead=0x8a5fc04, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesRead=0x8a5fc04*=0xad, lpOverlapped=0x0) returned 1 [0193.198] SetFilePointerEx (in: hFile=0x247c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.198] WriteFile (in: hFile=0x247c, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x8a5fc08, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0x8a5fc08*=0xad, lpOverlapped=0x0) returned 1 [0195.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447d8 [0195.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447b0 [0195.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0195.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0195.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0195.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0195.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d64e0) returned 1 [0195.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0195.682] SetFilePointerEx (in: hFile=0x247c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.682] WriteFile (in: hFile=0x247c, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8a5fc90, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0x8a5fc90*=0x10c, lpOverlapped=0x0) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0195.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0195.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41ed8 [0195.861] wcscpy (in: _Dest=0x3d41ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" [0195.861] wcscat (in: _Dest=0x3d41ed8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.ac3a86" [0195.861] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x8a5fc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6769df0 [0196.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769df0) returned 1 [0196.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6888360) returned 1 [0196.007] NtQueryInformationFile (in: FileHandle=0x247c, IoStatusBlock=0x8a5fbe0, FileInformation=0x8a5fbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a5fbe0, FileInformation=0x8a5fbe8) returned 0x0 [0196.007] NtSetInformationFile (FileHandle=0x247c, IoStatusBlock=0x8a5fbe0, FileInformation=0x8a5fbe8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ed8) returned 1 [0196.153] FlushFileBuffers (hFile=0x247c) returned 1 [0196.805] CloseHandle (hObject=0x247c) returned 1 [0197.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e90060 [0198.337] wcscpy (in: _Dest=0x12e90060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0198.337] wcscat (in: _Dest=0x12e90060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\AC3A86-Readme.txt" [0198.337] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0198.338] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.078] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8a5fc24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8a5fc24*=0x8b9, lpOverlapped=0x0) returned 1 [0200.080] CloseHandle (hObject=0xac4) returned 1 [0200.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e90060) returned 1 [0200.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db01e0) returned 1 Thread: id = 6501 os_tid = 0x2710 [0190.634] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json")) returned 0x2020 [0191.228] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0193.199] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2478 [0193.199] GetFileSizeEx (in: hFile=0x2478, lpFileSize=0xe10fb8c | out: lpFileSize=0xe10fb8c*=172) returned 1 [0193.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0193.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0193.199] NtQuerySystemTime (in: CurrentTime=0xe10fb00 | out: CurrentTime=0xe10fb00*=132482711016696000) returned 0x0 [0193.199] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x5de8b5dd [0193.199] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x5badfe8 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x44ceb197 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x21c1fda6 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x175a09 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x5ad4ec87 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0xa2b24f6 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0xd0e843a [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x6da3999 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x28290401 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x3b49ebd5 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x6c2f78b [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x510240f4 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x7ab8a814 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x186f83d4 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x353c676e [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x4825e597 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x10b26060 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x6de7c86f [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0xd4b6c69 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x74a54459 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x3dcf9397 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x3d139ff [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x3610cfc7 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x98e7e26 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x6f3e97a7 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x7cfb43c2 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x4f5ee460 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x5bd3ae52 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x423d834e [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x1584bbf4 [0193.200] RtlRandomEx (in: Seed=0xe10faf8 | out: Seed=0xe10faf8) returned 0x34fa838e [0193.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b4558 [0193.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b8160 [0193.208] ReadFile (in: hFile=0x2478, lpBuffer=0x69b4558, nNumberOfBytesToRead=0xac, lpNumberOfBytesRead=0xe10faf4, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesRead=0xe10faf4*=0xac, lpOverlapped=0x0) returned 1 [0193.210] SetFilePointerEx (in: hFile=0x2478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.210] WriteFile (in: hFile=0x2478, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0xe10faf8, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0xe10faf8*=0xac, lpOverlapped=0x0) returned 1 [0195.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed208 [0195.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed258 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed258) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0195.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6138) returned 1 [0195.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cf0 [0195.688] SetFilePointerEx (in: hFile=0x2478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.688] WriteFile (in: hFile=0x2478, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe10fb80, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0xe10fb80*=0x10c, lpOverlapped=0x0) returned 1 [0195.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0195.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed258) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed208) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0195.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0195.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0195.871] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" [0195.871] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.ac3a86" [0195.871] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0xe10faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a1c8 [0196.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a1c8) returned 1 [0196.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68972b8) returned 1 [0196.002] NtQueryInformationFile (in: FileHandle=0x2478, IoStatusBlock=0xe10fad0, FileInformation=0xe10fad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe10fad0, FileInformation=0xe10fad8) returned 0x0 [0196.002] NtSetInformationFile (FileHandle=0x2478, IoStatusBlock=0xe10fad0, FileInformation=0xe10fad8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41038) returned 1 [0196.146] FlushFileBuffers (hFile=0x2478) returned 1 [0196.804] CloseHandle (hObject=0x2478) returned 1 [0197.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e8e060 [0198.337] wcscpy (in: _Dest=0x12e8e060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0198.337] wcscat (in: _Dest=0x12e8e060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\AC3A86-Readme.txt" [0198.337] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0198.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.082] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe10fb14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe10fb14*=0x8b9, lpOverlapped=0x0) returned 1 [0200.084] CloseHandle (hObject=0xac4) returned 1 [0200.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e8e060) returned 1 [0200.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0308) returned 1 Thread: id = 6502 os_tid = 0x2714 [0190.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 0x2020 [0191.229] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0193.210] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2474 [0193.211] GetFileSizeEx (in: hFile=0x2474, lpFileSize=0xcf0fec4 | out: lpFileSize=0xcf0fec4*=182) returned 1 [0193.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a628 [0193.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0193.211] NtQuerySystemTime (in: CurrentTime=0xcf0fe38 | out: CurrentTime=0xcf0fe38*=132482711016852000) returned 0x0 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2b0297c1 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x4e029935 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x53fb2116 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x53e915a5 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x459a07d1 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2cee8b9c [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2d9955f6 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x4b37f471 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x42706e39 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x66a60019 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x54cd6ac1 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2e72b6a4 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x37b183c4 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2d46c964 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2d71a224 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x11a46ba4 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x4b37f471 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x14fab3ae [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x4e029935 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x9247c7a [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x42706e39 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x3d139ff [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x6b3015cd [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x37b183c4 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x22187803 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x4ef5ebe9 [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x47dc976d [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x727d5a0f [0193.211] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x3610cfc7 [0193.212] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x6d55db1b [0193.212] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x3f0ffc50 [0193.212] RtlRandomEx (in: Seed=0xcf0fe30 | out: Seed=0xcf0fe30) returned 0x2d9c7ae4 [0193.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69bbd68 [0193.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x682fce8 [0193.220] ReadFile (in: hFile=0x2474, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0xb6, lpNumberOfBytesRead=0xcf0fe2c, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0xcf0fe2c*=0xb6, lpOverlapped=0x0) returned 1 [0193.222] SetFilePointerEx (in: hFile=0x2474, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.222] WriteFile (in: hFile=0x2474, lpBuffer=0x682fce8*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0xcf0fe30, lpOverlapped=0x0 | out: lpBuffer=0x682fce8*, lpNumberOfBytesWritten=0xcf0fe30*=0xb6, lpOverlapped=0x0) returned 1 [0195.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed2f8 [0195.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed230 [0195.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed230) returned 1 [0195.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fce8) returned 1 [0195.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0195.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5fd0) returned 1 [0195.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c00 [0195.687] SetFilePointerEx (in: hFile=0x2474, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.687] WriteFile (in: hFile=0x2474, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf0feb8, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0xcf0feb8*=0x10c, lpOverlapped=0x0) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed230) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed2f8) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0195.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0195.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41170 [0195.867] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" [0195.867] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.ac3a86" [0195.867] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xcf0fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a080 [0196.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a080) returned 1 [0196.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688fc20) returned 1 [0196.000] NtQueryInformationFile (in: FileHandle=0x2474, IoStatusBlock=0xcf0fe08, FileInformation=0xcf0fe10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcf0fe08, FileInformation=0xcf0fe10) returned 0x0 [0196.000] NtSetInformationFile (FileHandle=0x2474, IoStatusBlock=0xcf0fe08, FileInformation=0xcf0fe10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41170) returned 1 [0196.142] FlushFileBuffers (hFile=0x2474) returned 1 [0196.804] CloseHandle (hObject=0x2474) returned 1 [0197.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e8a060 [0198.336] wcscpy (in: _Dest=0x12e8a060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0198.336] wcscat (in: _Dest=0x12e8a060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\AC3A86-Readme.txt" [0198.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0198.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.071] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcf0fe4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcf0fe4c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.072] CloseHandle (hObject=0xac4) returned 1 [0200.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e8a060) returned 1 [0200.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0430) returned 1 Thread: id = 6503 os_tid = 0x2718 [0190.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 0x2020 [0191.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", dwFileAttributes=0x20) returned 1 [0193.222] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c8 [0193.223] GetFileSizeEx (in: hFile=0x19c8, lpFileSize=0x8f0ff5c | out: lpFileSize=0x8f0ff5c*=210) returned 1 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0193.223] NtQuerySystemTime (in: CurrentTime=0x8f0fed0 | out: CurrentTime=0x8f0fed0*=132482711017008000) returned 0x0 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x5105d6b5 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x4d96e6fe [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x51a73fcd [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x2d1bf0a4 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x3bfde502 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x7045dfff [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x54cd6ac1 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x54183fb8 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x74190e44 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x45b3e7e6 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x14bce388 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x4c613171 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x6a415fcc [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x6f3e97a7 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x23448f49 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x57891812 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x6da3999 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x49d5e4a8 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x23c65f9b [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x38cbfb1b [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x27679f1d [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x5b6f3f2e [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x2c30e9b1 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x1c1fbb20 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x72b56956 [0193.223] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x4a7f301 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x2d71a224 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x7caac898 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x54091435 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x13b25b05 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x3bfde502 [0193.224] RtlRandomEx (in: Seed=0x8f0fec8 | out: Seed=0x8f0fec8) returned 0x1e1c8ad6 [0193.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68338f0 [0193.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x68374f8 [0193.232] ReadFile (in: hFile=0x19c8, lpBuffer=0x68338f0, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x8f0fec4, lpOverlapped=0x0 | out: lpBuffer=0x68338f0*, lpNumberOfBytesRead=0x8f0fec4*=0xd2, lpOverlapped=0x0) returned 1 [0193.233] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.233] WriteFile (in: hFile=0x19c8, lpBuffer=0x68374f8*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x8f0fec8, lpOverlapped=0x0 | out: lpBuffer=0x68374f8*, lpNumberOfBytesWritten=0x8f0fec8*=0xd2, lpOverlapped=0x0) returned 1 [0195.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3016ac0 [0195.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3016b38 [0195.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016b38) returned 1 [0195.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68374f8) returned 1 [0195.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68338f0) returned 1 [0195.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0195.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6210) returned 1 [0195.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0195.690] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.690] WriteFile (in: hFile=0x19c8, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8f0ff50, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0x8f0ff50*=0x10c, lpOverlapped=0x0) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016b38) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016ac0) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0195.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0195.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40f00 [0195.875] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" [0195.875] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.ac3a86" [0195.875] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.ac3a86", NtPathName=0x8f0fec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x676a310 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a310) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68956b0) returned 1 [0196.006] NtQueryInformationFile (in: FileHandle=0x19c8, IoStatusBlock=0x8f0fea0, FileInformation=0x8f0fea8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8f0fea0, FileInformation=0x8f0fea8) returned 0x0 [0196.006] NtSetInformationFile (FileHandle=0x19c8, IoStatusBlock=0x8f0fea0, FileInformation=0x8f0fea8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f00) returned 1 [0196.151] FlushFileBuffers (hFile=0x19c8) returned 1 [0196.805] CloseHandle (hObject=0x19c8) returned 1 [0197.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a85f58 [0197.736] wcscpy (in: _Dest=0x6a85f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0197.736] wcscat (in: _Dest=0x6a85f58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\AC3A86-Readme.txt" [0197.736] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\ac3a86-readme.txt")) returned 0xffffffff [0197.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.263] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8f0fee4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8f0fee4*=0x8b9, lpOverlapped=0x0) returned 1 [0198.265] CloseHandle (hObject=0x237c) returned 1 [0198.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f58) returned 1 [0198.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0558) returned 1 Thread: id = 6504 os_tid = 0x271c [0190.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 0x2020 [0191.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.234] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21fc [0193.234] GetFileSizeEx (in: hFile=0x21fc, lpFileSize=0xd26fea4 | out: lpFileSize=0xd26fea4*=187) returned 1 [0193.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0193.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0193.234] NtQuerySystemTime (in: CurrentTime=0xd26fe18 | out: CurrentTime=0xd26fe18*=132482711017164000) returned 0x0 [0193.234] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x122d8e7b [0193.234] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x12f4d901 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x67ad19c6 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x79d1542b [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0xcdae96 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x53753901 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0xb63c1dd [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x324e6eb7 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x2d9955f6 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x6d55db1b [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x32fc5e38 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x3f887152 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x2c30e9b1 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x1857ac2c [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x49827ba1 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x722ffd71 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x6d22dc89 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x37374d9b [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x47110482 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x450f9d6 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x49d5e4a8 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0xace9b06 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x10e0421b [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x45b3e7e6 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x1796c7d4 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x648f914b [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x175c93fe [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x1d759967 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x4828bad8 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x23aa18ad [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x4bcc821 [0193.235] RtlRandomEx (in: Seed=0xd26fe10 | out: Seed=0xd26fe10) returned 0x61fe3cb3 [0193.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683b100 [0193.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x683ed08 [0193.244] ReadFile (in: hFile=0x21fc, lpBuffer=0x683b100, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xd26fe0c, lpOverlapped=0x0 | out: lpBuffer=0x683b100*, lpNumberOfBytesRead=0xd26fe0c*=0xbb, lpOverlapped=0x0) returned 1 [0193.246] SetFilePointerEx (in: hFile=0x21fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.246] WriteFile (in: hFile=0x21fc, lpBuffer=0x683ed08*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xd26fe10, lpOverlapped=0x0 | out: lpBuffer=0x683ed08*, lpNumberOfBytesWritten=0xd26fe10*=0xbb, lpOverlapped=0x0) returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1f8 [0195.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc270 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc270) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683ed08) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x683b100) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 [0195.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b98) returned 1 [0195.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5900 [0195.695] SetFilePointerEx (in: hFile=0x21fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.695] WriteFile (in: hFile=0x21fc, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd26fe98, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0xd26fe98*=0x10c, lpOverlapped=0x0) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc270) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1f8) returned 1 [0195.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0195.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0195.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0195.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40408 [0195.881] wcscpy (in: _Dest=0x3d40408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" [0195.881] wcscat (in: _Dest=0x3d40408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.ac3a86" [0195.881] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xd26fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a5a0 [0196.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a5a0) returned 1 [0196.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6892968) returned 1 [0196.010] NtQueryInformationFile (in: FileHandle=0x21fc, IoStatusBlock=0xd26fde8, FileInformation=0xd26fdf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd26fde8, FileInformation=0xd26fdf0) returned 0x0 [0196.010] NtSetInformationFile (FileHandle=0x21fc, IoStatusBlock=0xd26fde8, FileInformation=0xd26fdf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40408) returned 1 [0196.158] FlushFileBuffers (hFile=0x21fc) returned 1 [0196.806] CloseHandle (hObject=0x21fc) returned 1 [0197.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e94060 [0198.338] wcscpy (in: _Dest=0x12e94060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0198.338] wcscat (in: _Dest=0x12e94060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\AC3A86-Readme.txt" [0198.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0198.338] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.089] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd26fe2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd26fe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.090] CloseHandle (hObject=0xac4) returned 1 [0200.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e94060) returned 1 [0200.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0680) returned 1 Thread: id = 6505 os_tid = 0x2724 [0190.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 0x2020 [0191.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0193.246] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f8 [0193.246] GetFileSizeEx (in: hFile=0x21f8, lpFileSize=0x9c1f944 | out: lpFileSize=0x9c1f944*=199) returned 1 [0193.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0193.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0193.247] NtQuerySystemTime (in: CurrentTime=0x9c1f8b8 | out: CurrentTime=0x9c1f8b8*=132482711017320000) returned 0x0 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x24567a29 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x353c676e [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x408365aa [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x2e47dde4 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x585c4e73 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x2b976dec [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x264cafc7 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x3f330176 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x7bb143f3 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x3ad365a3 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x3e033390 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x11725c58 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x18dc4173 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x423db185 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x7e0a4394 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x21ee085f [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x37941154 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x1350876c [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x4d20c20a [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x2d7c37af [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x48f76193 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x7510f61e [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x76c2d9c6 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x49f621df [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x7eed4dcb [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x2ab9ed71 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x4af44173 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x790e7c38 [0193.247] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x57a98460 [0193.248] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x3c58ce37 [0193.248] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x5e9b2363 [0193.248] RtlRandomEx (in: Seed=0x9c1f8b0 | out: Seed=0x9c1f8b0) returned 0x6e3f87e9 [0193.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6842910 [0193.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6846518 [0193.256] ReadFile (in: hFile=0x21f8, lpBuffer=0x6842910, nNumberOfBytesToRead=0xc7, lpNumberOfBytesRead=0x9c1f8ac, lpOverlapped=0x0 | out: lpBuffer=0x6842910*, lpNumberOfBytesRead=0x9c1f8ac*=0xc7, lpOverlapped=0x0) returned 1 [0193.258] SetFilePointerEx (in: hFile=0x21f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.258] WriteFile (in: hFile=0x21f8, lpBuffer=0x6846518*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x9c1f8b0, lpOverlapped=0x0 | out: lpBuffer=0x6846518*, lpNumberOfBytesWritten=0x9c1f8b0*=0xc7, lpOverlapped=0x0) returned 1 [0195.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc248 [0195.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1d0 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6846518) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6842910) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5d48) returned 1 [0195.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b40 [0195.694] SetFilePointerEx (in: hFile=0x21f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.694] WriteFile (in: hFile=0x21f8, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c1f938, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0x9c1f938*=0x10c, lpOverlapped=0x0) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc248) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0195.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0195.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40dc8 [0195.877] wcscpy (in: _Dest=0x3d40dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" [0195.877] wcscat (in: _Dest=0x3d40dc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.ac3a86" [0195.877] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0x9c1f8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x676a458 [0196.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a458) returned 1 [0196.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6893ef8) returned 1 [0196.009] NtQueryInformationFile (in: FileHandle=0x21f8, IoStatusBlock=0x9c1f888, FileInformation=0x9c1f890, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c1f888, FileInformation=0x9c1f890) returned 0x0 [0196.009] NtSetInformationFile (FileHandle=0x21f8, IoStatusBlock=0x9c1f888, FileInformation=0x9c1f890, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40dc8) returned 1 [0196.156] FlushFileBuffers (hFile=0x21f8) returned 1 [0196.805] CloseHandle (hObject=0x21f8) returned 1 [0197.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x6a86090 [0197.739] wcscpy (in: _Dest=0x6a86090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0197.739] wcscat (in: _Dest=0x6a86090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\AC3A86-Readme.txt" [0197.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0197.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x237c [0198.266] WriteFile (in: hFile=0x237c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9c1f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9c1f8cc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.268] CloseHandle (hObject=0x237c) returned 1 [0198.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86090) returned 1 [0198.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db07a8) returned 1 Thread: id = 6506 os_tid = 0x2728 [0190.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0196.881] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0213.141] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2188 [0213.152] GetFileSizeEx (in: hFile=0x2188, lpFileSize=0x61ffebc | out: lpFileSize=0x61ffebc*=886) returned 1 [0213.152] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x372, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.152] ReadFile (in: hFile=0x2188, lpBuffer=0x61ffe98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x61ffea8, lpOverlapped=0x0 | out: lpBuffer=0x61ffe98*, lpNumberOfBytesRead=0x61ffea8*=0x4, lpOverlapped=0x0) returned 1 [0213.159] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea9c0 [0213.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea998 [0213.159] NtQuerySystemTime (in: CurrentTime=0x61ffe30 | out: CurrentTime=0x61ffe30*=132482711198748000) returned 0x0 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x75d0a51a [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x7fb85dc8 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x52ff35d1 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x54b5e2cc [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x342ec8b8 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x14c69b25 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x50a71fcf [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x4be5e335 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x71271e62 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x2f580b39 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0xa7f3dbf [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x2b11cee5 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x5b7f6439 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x584599f7 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x3faa4383 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x5647fa19 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0xbe3b51 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x2fc012b1 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x70dcf27c [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x69608517 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x6a1f8ee2 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x4ff0db10 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x6507323c [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x19823382 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x62674d95 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x63005ae2 [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x2c2d55bb [0213.159] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x6e5261cb [0213.160] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x5d1b98eb [0213.160] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x4e5d08dd [0213.160] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x1494b6db [0213.160] RtlRandomEx (in: Seed=0x61ffe28 | out: Seed=0x61ffe28) returned 0x89c0b6b [0213.168] ReadFile (in: hFile=0x2188, lpBuffer=0x1300f040, nNumberOfBytesToRead=0x376, lpNumberOfBytesRead=0x61ffe24, lpOverlapped=0x0 | out: lpBuffer=0x1300f040*, lpNumberOfBytesRead=0x61ffe24*=0x376, lpOverlapped=0x0) returned 1 [0213.168] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.168] WriteFile (in: hFile=0x2188, lpBuffer=0x13012c48*, nNumberOfBytesToWrite=0x376, lpNumberOfBytesWritten=0x61ffe28, lpOverlapped=0x0 | out: lpBuffer=0x13012c48*, lpNumberOfBytesWritten=0x61ffe28*=0x376, lpOverlapped=0x0) returned 1 [0215.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed3f0 [0215.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed418 [0215.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed418) returned 1 [0215.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13012c48) returned 1 [0215.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300f040) returned 1 [0215.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0215.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a090) returned 1 [0215.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5d58 [0215.908] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.908] WriteFile (in: hFile=0x2188, lpBuffer=0x675e2c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x61ffeb0, lpOverlapped=0x0 | out: lpBuffer=0x675e2c8*, lpNumberOfBytesWritten=0x61ffeb0*=0x10c, lpOverlapped=0x0) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e2c8) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5d88) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed418) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5d58) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed3f0) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea9c0) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea920) returned 1 [0216.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea948) returned 1 [0216.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678abf0 [0216.554] wcscpy (in: _Dest=0x678abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" [0216.554] wcscat (in: _Dest=0x678abf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.ac3a86" [0216.554] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x61ffe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce718 [0223.753] FlushFileBuffers (hFile=0x2188) returned 1 [0223.761] CloseHandle (hObject=0x2188) returned 1 [0224.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c930 [0224.597] wcscpy (in: _Dest=0x678c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0224.597] wcscat (in: _Dest=0x678c930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\AC3A86-Readme.txt" [0224.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0224.597] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.153] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x61ffe44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x61ffe44*=0x8b9, lpOverlapped=0x0) returned 1 [0225.155] CloseHandle (hObject=0x1038) returned 1 [0225.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c930) returned 1 [0225.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db08d0) returned 1 Thread: id = 6507 os_tid = 0x272c [0190.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0198.623] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0206.907] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0208.694] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0xd44f914 | out: lpFileSize=0xd44f914*=705) returned 1 [0208.694] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.694] ReadFile (in: hFile=0x1448, lpBuffer=0xd44f8f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd44f900, lpOverlapped=0x0 | out: lpBuffer=0xd44f8f0*, lpNumberOfBytesRead=0xd44f900*=0x4, lpOverlapped=0x0) returned 1 [0208.710] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadf8 [0208.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadd0 [0208.710] NtQuerySystemTime (in: CurrentTime=0xd44f888 | out: CurrentTime=0xd44f888*=132482711171760000) returned 0x0 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x3caee125 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x2b95455a [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x2e4b170e [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x77997f98 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x97644d [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x5f1ce402 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x24f7e0a8 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x1095e33d [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x7c5d3f43 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x26cc2bc0 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x200b8e00 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x24bb0324 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x71408a3 [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x4408135b [0208.710] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x5a0a54a7 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x71abdc9 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x3dfd94f7 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x77eeda9b [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x7caffde8 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x4d40c50b [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x4f1cc064 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x22c5cf60 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x68f1b698 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x33815171 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x2e4b170e [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x175329de [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x5905fb49 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x6823c162 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x7b00dc9a [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x7adf9318 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x3fa4fe48 [0208.711] RtlRandomEx (in: Seed=0xd44f880 | out: Seed=0xd44f880) returned 0x5dfef9ce [0208.719] ReadFile (in: hFile=0x1448, lpBuffer=0x6970518, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0xd44f87c, lpOverlapped=0x0 | out: lpBuffer=0x6970518*, lpNumberOfBytesRead=0xd44f87c*=0x2c1, lpOverlapped=0x0) returned 1 [0208.719] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.719] WriteFile (in: hFile=0x1448, lpBuffer=0x6974120*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0xd44f880, lpOverlapped=0x0 | out: lpBuffer=0x6974120*, lpNumberOfBytesWritten=0xd44f880*=0x2c1, lpOverlapped=0x0) returned 1 [0214.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf68 [0214.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf68) returned 1 [0214.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6974120) returned 1 [0214.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6970518) returned 1 [0214.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f40) returned 1 [0214.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0214.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0214.963] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.963] WriteFile (in: hFile=0x1448, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd44f908, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0xd44f908*=0x10c, lpOverlapped=0x0) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf68) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadf8) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead58) returned 1 [0216.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead80) returned 1 [0216.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d40b58 [0216.676] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" [0216.677] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.ac3a86" [0216.677] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0xd44f880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce060 [0223.939] FlushFileBuffers (hFile=0x1448) returned 1 [0224.008] CloseHandle (hObject=0x1448) returned 1 [0224.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675af98 [0224.466] wcscpy (in: _Dest=0x675af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0224.466] wcscat (in: _Dest=0x675af98, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\AC3A86-Readme.txt" [0224.466] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0224.466] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.947] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd44f89c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd44f89c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.949] CloseHandle (hObject=0x16d4) returned 1 [0224.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675af98) returned 1 [0224.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09f8) returned 1 Thread: id = 6508 os_tid = 0x2734 [0190.638] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0200.559] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0213.328] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb28 [0213.328] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0xcbbf9e4 | out: lpFileSize=0xcbbf9e4*=663) returned 1 [0213.329] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.329] ReadFile (in: hFile=0xb28, lpBuffer=0xcbbf9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcbbf9d0, lpOverlapped=0x0 | out: lpBuffer=0xcbbf9c0*, lpNumberOfBytesRead=0xcbbf9d0*=0x4, lpOverlapped=0x0) returned 1 [0213.597] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb8c0 [0213.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb938 [0213.597] NtQuerySystemTime (in: CurrentTime=0xcbbf958 | out: CurrentTime=0xcbbf958*=132482711203116000) returned 0x0 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x3b9d1a80 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x656fd9e2 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x65759e19 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x2443eff4 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x4766a885 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x62a2dba [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x6cfbf96f [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x6fe3e24b [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x589b12e6 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x30529154 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x1f223a8 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x60def7e9 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x2fe625c9 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x12914a5a [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x5ea20d28 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x33967f57 [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x4518ab8b [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x76e6db2b [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x61bf7bfc [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x12914a5a [0213.597] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x659ab2a2 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x592760be [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x43ec006 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x631e57fa [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x9a06a93 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x7eaaba03 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x4d61e373 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x4a27c645 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x10891130 [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x7eebc5ff [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x1cc290d [0213.598] RtlRandomEx (in: Seed=0xcbbf950 | out: Seed=0xcbbf950) returned 0x5cf97df3 [0213.606] ReadFile (in: hFile=0xb28, lpBuffer=0x1309a498, nNumberOfBytesToRead=0x297, lpNumberOfBytesRead=0xcbbf94c, lpOverlapped=0x0 | out: lpBuffer=0x1309a498*, lpNumberOfBytesRead=0xcbbf94c*=0x297, lpOverlapped=0x0) returned 1 [0213.606] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.606] WriteFile (in: hFile=0xb28, lpBuffer=0x1309e0a0*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0xcbbf950, lpOverlapped=0x0 | out: lpBuffer=0x1309e0a0*, lpNumberOfBytesWritten=0xcbbf950*=0x297, lpOverlapped=0x0) returned 1 [0217.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec310 [0217.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc70 [0217.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc70) returned 1 [0217.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1309e0a0) returned 1 [0217.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1309a498) returned 1 [0217.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0217.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b248) returned 1 [0217.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5480 [0217.219] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.219] WriteFile (in: hFile=0xb28, lpBuffer=0x675e1b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcbbf9d8, lpOverlapped=0x0 | out: lpBuffer=0x675e1b0*, lpNumberOfBytesWritten=0xcbbf9d8*=0x10c, lpOverlapped=0x0) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e1b0) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc70) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec310) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb8c0) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb960) returned 1 [0224.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb988) returned 1 [0224.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675ba90 [0224.434] wcscpy (in: _Dest=0x675ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" [0224.434] wcscat (in: _Dest=0x675ba90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.ac3a86" [0224.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0xcbbf950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cec78 [0224.793] FlushFileBuffers (hFile=0xb28) returned 1 [0224.802] CloseHandle (hObject=0xb28) returned 1 [0224.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675ba90 [0224.873] wcscpy (in: _Dest=0x675ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0224.873] wcscat (in: _Dest=0x675ba90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\AC3A86-Readme.txt" [0224.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0224.873] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xde8 [0224.889] WriteFile (in: hFile=0xde8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcbbf96c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcbbf96c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.897] CloseHandle (hObject=0xde8) returned 1 [0224.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ba90) returned 1 [0224.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0b20) returned 1 Thread: id = 6509 os_tid = 0x2738 [0190.638] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0200.558] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0213.171] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc18 [0213.182] GetFileSizeEx (in: hFile=0xc18, lpFileSize=0xf67f82c | out: lpFileSize=0xf67f82c*=642) returned 1 [0213.182] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.182] ReadFile (in: hFile=0xc18, lpBuffer=0xf67f808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf67f818, lpOverlapped=0x0 | out: lpBuffer=0xf67f808*, lpNumberOfBytesRead=0xf67f818*=0x4, lpOverlapped=0x0) returned 1 [0213.184] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8d0 [0213.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8a8 [0213.184] NtQuerySystemTime (in: CurrentTime=0xf67f7a0 | out: CurrentTime=0xf67f7a0*=132482711199060000) returned 0x0 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x39b406f8 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x763c70b9 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0xf344fe3 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x4b5c5f04 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x1076f2fc [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x14444a8 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0xbd2084f [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x1a321803 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x78e9de4a [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x77adf915 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x16248e5f [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0xb04387d [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0xcad3c57 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0xa780684 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x7dbafdd0 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x2616daec [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x60a81147 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x538c32d9 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x69c9dd62 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x740f3f30 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x1736a417 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x543fc32a [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x568b8b15 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x59012551 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x44febaef [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x38f06526 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x66c0b1be [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x1c10fa0e [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x6443470 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x5a415e09 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x312a6ea0 [0213.185] RtlRandomEx (in: Seed=0xf67f798 | out: Seed=0xf67f798) returned 0x7958c5b5 [0213.193] ReadFile (in: hFile=0xc18, lpBuffer=0x1301e060, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0xf67f794, lpOverlapped=0x0 | out: lpBuffer=0x1301e060*, lpNumberOfBytesRead=0xf67f794*=0x282, lpOverlapped=0x0) returned 1 [0213.193] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.193] WriteFile (in: hFile=0xc18, lpBuffer=0x13021c68*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0xf67f798, lpOverlapped=0x0 | out: lpBuffer=0x13021c68*, lpNumberOfBytesWritten=0xf67f798*=0x282, lpOverlapped=0x0) returned 1 [0217.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf40 [0217.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6d0 [0217.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6d0) returned 1 [0217.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13021c68) returned 1 [0217.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301e060) returned 1 [0217.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0217.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ac18) returned 1 [0217.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d80 [0217.117] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.117] WriteFile (in: hFile=0xc18, lpBuffer=0x675cf18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf67f820, lpOverlapped=0x0 | out: lpBuffer=0x675cf18*, lpNumberOfBytesWritten=0xf67f820*=0x10c, lpOverlapped=0x0) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cf18) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6d0) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf40) returned 1 [0224.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8d0) returned 1 [0224.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea830) returned 1 [0224.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea858) returned 1 [0224.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675bf70 [0224.409] wcscpy (in: _Dest=0x675bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" [0224.409] wcscat (in: _Dest=0x675bf70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.ac3a86" [0224.409] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0xf67f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf9e8 [0224.758] FlushFileBuffers (hFile=0xc18) returned 1 [0224.767] CloseHandle (hObject=0xc18) returned 1 [0224.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c0a8 [0224.839] wcscpy (in: _Dest=0x678c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0224.839] wcscat (in: _Dest=0x678c0a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\AC3A86-Readme.txt" [0224.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0224.839] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.380] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf67f7b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf67f7b4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.382] CloseHandle (hObject=0x1038) returned 1 [0225.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c0a8) returned 1 [0225.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0c48) returned 1 Thread: id = 6510 os_tid = 0x273c [0190.639] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0201.163] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0213.210] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1164 [0213.211] GetFileSizeEx (in: hFile=0x1164, lpFileSize=0x87cfe3c | out: lpFileSize=0x87cfe3c*=701) returned 1 [0213.211] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x2b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.211] ReadFile (in: hFile=0x1164, lpBuffer=0x87cfe18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x87cfe28, lpOverlapped=0x0 | out: lpBuffer=0x87cfe18*, lpNumberOfBytesRead=0x87cfe28*=0x4, lpOverlapped=0x0) returned 1 [0213.228] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7b8 [0213.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6f0 [0213.228] NtQuerySystemTime (in: CurrentTime=0x87cfdb0 | out: CurrentTime=0x87cfdb0*=132482711199372000) returned 0x0 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x4f9ca520 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x1bc4c440 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x4236d0fb [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x5bef2b08 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x21d1a1d3 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x14eb18b8 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0xfce6ed1 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x4fc8866 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x77029370 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x64cff897 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x4167128e [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x62fb563c [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x1a12c561 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x828ebc3 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x314f1283 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x42410145 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x6a3e6d7a [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x1ab470f [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x5bd384ab [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x7941a052 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x58bce9e4 [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x2aae1eee [0213.228] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x53ca66dc [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x4f18096c [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x5ea02be1 [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x259112e1 [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x31530f55 [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x3e351f6e [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x544d8d6f [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x1bc4c440 [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0x5bccabec [0213.229] RtlRandomEx (in: Seed=0x87cfda8 | out: Seed=0x87cfda8) returned 0xb9be91f [0213.237] ReadFile (in: hFile=0x1164, lpBuffer=0x13034890, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x87cfda4, lpOverlapped=0x0 | out: lpBuffer=0x13034890*, lpNumberOfBytesRead=0x87cfda4*=0x2bd, lpOverlapped=0x0) returned 1 [0213.237] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.237] WriteFile (in: hFile=0x1164, lpBuffer=0x13038498*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x87cfda8, lpOverlapped=0x0 | out: lpBuffer=0x13038498*, lpNumberOfBytesWritten=0x87cfda8*=0x2bd, lpOverlapped=0x0) returned 1 [0217.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed008 [0217.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf90 [0217.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf90) returned 1 [0217.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13038498) returned 1 [0217.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13034890) returned 1 [0217.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0217.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a168) returned 1 [0217.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5960 [0217.119] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.119] WriteFile (in: hFile=0x1164, lpBuffer=0x675ce00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x87cfe30, lpOverlapped=0x0 | out: lpBuffer=0x675ce00*, lpNumberOfBytesWritten=0x87cfe30*=0x10c, lpOverlapped=0x0) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ce00) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf90) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed008) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea7b8) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea718) returned 1 [0224.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6a0) returned 1 [0224.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c1e0 [0224.405] wcscpy (in: _Dest=0x675c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" [0224.406] wcscat (in: _Dest=0x675c1e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.ac3a86" [0224.406] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x87cfda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cfb40 [0224.756] FlushFileBuffers (hFile=0x1164) returned 1 [0224.763] CloseHandle (hObject=0x1164) returned 1 [0224.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678bf70 [0224.836] wcscpy (in: _Dest=0x678bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0224.836] wcscat (in: _Dest=0x678bf70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\AC3A86-Readme.txt" [0224.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0224.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.375] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x87cfdc4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x87cfdc4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.377] CloseHandle (hObject=0x1038) returned 1 [0225.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bf70) returned 1 [0225.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d70) returned 1 Thread: id = 6511 os_tid = 0x2750 [0190.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0196.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.716] GetLastError () returned 0x5 [0196.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 6512 os_tid = 0x2754 [0190.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0200.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.566] GetLastError () returned 0x5 [0200.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 6513 os_tid = 0x2758 [0190.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0195.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.102] GetLastError () returned 0x5 [0195.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0195.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8d18) returned 1 Thread: id = 6514 os_tid = 0x27c0 [0190.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif")) returned 0x20 [0196.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.889] GetLastError () returned 0x5 [0196.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0196.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 Thread: id = 6515 os_tid = 0x27c4 [0190.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0197.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.205] GetLastError () returned 0x5 [0197.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 6516 os_tid = 0x27c8 [0190.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0200.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.587] GetLastError () returned 0x5 [0200.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 6517 os_tid = 0x27cc [0190.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h")) returned 0x20 [0190.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0190.644] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.644] GetLastError () returned 0x5 [0190.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0190.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 6518 os_tid = 0x27d0 [0190.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v")) returned 0x20 [0190.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0190.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.646] GetLastError () returned 0x5 [0190.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0190.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 6519 os_tid = 0x27d8 [0190.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h")) returned 0x20 [0191.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0191.825] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.825] GetLastError () returned 0x5 [0191.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0191.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10270) returned 1 Thread: id = 6520 os_tid = 0x27dc [0190.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v")) returned 0x20 [0191.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0191.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.827] GetLastError () returned 0x5 [0191.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0191.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fb70) returned 1 Thread: id = 6521 os_tid = 0x14cc [0190.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h")) returned 0x20 [0191.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0191.805] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.805] GetLastError () returned 0x5 [0191.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0191.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 6522 os_tid = 0x14d8 [0190.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v")) returned 0x20 [0191.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0191.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.803] GetLastError () returned 0x5 [0191.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0191.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 6523 os_tid = 0x10dc [0190.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h")) returned 0x20 [0191.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0191.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.801] GetLastError () returned 0x5 [0191.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0191.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 6524 os_tid = 0x14dc [0190.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v")) returned 0x20 [0191.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0191.800] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.800] GetLastError () returned 0x5 [0191.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0191.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 6525 os_tid = 0x14e0 [0190.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h")) returned 0x20 [0191.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0191.821] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.822] GetLastError () returned 0x5 [0191.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0191.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 6526 os_tid = 0x14e8 [0190.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h")) returned 0x20 [0191.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0191.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.820] GetLastError () returned 0x5 [0191.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0191.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 6527 os_tid = 0xec4 [0190.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v")) returned 0x20 [0191.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0191.818] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.818] GetLastError () returned 0x5 [0191.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0191.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 6528 os_tid = 0x10cc [0190.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2")) returned 0x20 [0191.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0191.816] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.816] GetLastError () returned 0x5 [0191.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0191.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 6529 os_tid = 0x1200 [0190.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v")) returned 0x20 [0191.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0191.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.815] GetLastError () returned 0x5 [0191.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0191.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 6530 os_tid = 0x1210 [0190.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h")) returned 0x20 [0191.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0191.813] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.813] GetLastError () returned 0x5 [0191.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0191.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 6531 os_tid = 0x1214 [0190.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2")) returned 0x20 [0191.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0191.811] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.811] GetLastError () returned 0x5 [0191.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0191.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 6532 os_tid = 0x1218 [0190.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c")) returned 0x20 [0191.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0191.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.810] GetLastError () returned 0x5 [0191.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0191.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc168) returned 1 Thread: id = 6533 os_tid = 0x8cc [0190.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj")) returned 0x20 [0191.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0191.798] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.798] GetLastError () returned 0x5 [0191.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0191.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 6534 os_tid = 0x121c [0190.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj")) returned 0x20 [0191.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0191.808] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.808] GetLastError () returned 0x5 [0191.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0191.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 6535 os_tid = 0x1220 [0190.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc")) returned 0x20 [0191.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0191.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.795] GetLastError () returned 0x5 [0191.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0191.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 6536 os_tid = 0x1288 [0190.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5")) returned 0x20 [0191.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0191.794] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.794] GetLastError () returned 0x5 [0191.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0191.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 6537 os_tid = 0x128c [0190.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc")) returned 0x20 [0191.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0191.792] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.792] GetLastError () returned 0x5 [0191.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0191.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 6538 os_tid = 0x1290 [0190.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc")) returned 0x20 [0191.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0191.790] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.791] GetLastError () returned 0x5 [0191.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0191.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 6539 os_tid = 0x1298 [0190.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc")) returned 0x20 [0191.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0191.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.806] GetLastError () returned 0x5 [0191.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0191.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 6540 os_tid = 0x129c [0190.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc")) returned 0x20 [0191.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0191.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.789] GetLastError () returned 0x5 [0191.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0191.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 6541 os_tid = 0x12a0 [0190.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h")) returned 0x20 [0191.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.772] GetLastError () returned 0x5 [0191.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 6542 os_tid = 0x12a4 [0190.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v")) returned 0x20 [0191.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0191.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.828] GetLastError () returned 0x5 [0191.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0191.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 6543 os_tid = 0x12a8 [0190.887] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 0x2020 [0190.891] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", dwFileAttributes=0x20) returned 1 [0198.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x230c [0198.675] GetFileSizeEx (in: hFile=0x230c, lpFileSize=0xb55fbcc | out: lpFileSize=0xb55fbcc*=70364) returned 1 [0198.675] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x112d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.675] ReadFile (in: hFile=0x230c, lpBuffer=0xb55fba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb55fbb8, lpOverlapped=0x0 | out: lpBuffer=0xb55fba8*, lpNumberOfBytesRead=0xb55fbb8*=0x4, lpOverlapped=0x0) returned 1 [0198.677] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0198.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0198.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.678] NtQuerySystemTime (in: CurrentTime=0xb55fb40 | out: CurrentTime=0xb55fb40*=132482711071608000) returned 0x0 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x390434ca [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x10622e2c [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x7dcc6312 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x1f2cfc6a [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x2accb299 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x6725b64 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x72dd4ba3 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0xe10b990 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x21d1fd57 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x7f16fd6b [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x277fc42a [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x5918c0a9 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x18fe4717 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x45deb04e [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x849aba4 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x73bc198 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x3c5bbb30 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x5ed03651 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x1cd50ea0 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x1952a461 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0xda0e724 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x753bc268 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x3377a70e [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x728f0d0e [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x16b2dd87 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x44ddfa2 [0198.678] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x62940f51 [0198.679] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x6013bf6a [0198.679] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x666afaa [0198.679] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x45814578 [0198.679] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x3561b6da [0198.679] RtlRandomEx (in: Seed=0xb55fb38 | out: Seed=0xb55fb38) returned 0x584fbc01 [0198.687] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.687] ReadFile (in: hFile=0x230c, lpBuffer=0x12f1e0a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb55fb40, lpOverlapped=0x0 | out: lpBuffer=0x12f1e0a0*, lpNumberOfBytesRead=0xb55fb40*=0x3c00, lpOverlapped=0x0) returned 1 [0198.689] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x6899e98 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x66d0330 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0198.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f21ca8 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0198.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0198.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0198.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e98) returned 1 [0198.689] WriteFile (in: hFile=0x230c, lpBuffer=0x12f21ca8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb55fb40, lpOverlapped=0x0 | out: lpBuffer=0x12f21ca8*, lpNumberOfBytesWritten=0xb55fb40*=0x3c00, lpOverlapped=0x0) returned 1 [0202.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f21ca8) returned 1 [0202.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1e0a0) returned 1 [0202.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5d20 [0202.299] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.300] WriteFile (in: hFile=0x230c, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb55fbc0, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xb55fbc0*=0x108, lpOverlapped=0x0) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303fe0) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0204.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0204.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674f898 [0204.488] wcscpy (in: _Dest=0x674f898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" [0204.488] wcscat (in: _Dest=0x674f898, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.ac3a86" [0204.488] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.ac3a86", NtPathName=0xb55fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x6784fd8 [0210.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784fd8) returned 1 [0210.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a1778) returned 1 [0210.545] NtQueryInformationFile (in: FileHandle=0x230c, IoStatusBlock=0xb55fb10, FileInformation=0xb55fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb55fb10, FileInformation=0xb55fb18) returned 0x0 [0210.545] NtSetInformationFile (FileHandle=0x230c, IoStatusBlock=0xb55fb10, FileInformation=0xb55fb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f898) returned 1 [0210.569] FlushFileBuffers (hFile=0x230c) returned 1 [0210.583] CloseHandle (hObject=0x230c) returned 1 [0210.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674eab8 [0210.584] wcscpy (in: _Dest=0x674eab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.584] wcscat (in: _Dest=0x674eab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eab8) returned 1 [0210.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752098) returned 1 Thread: id = 6544 os_tid = 0x12ac [0190.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 0x2020 [0190.894] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", dwFileAttributes=0x20) returned 1 [0198.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x246c [0198.689] GetFileSizeEx (in: hFile=0x246c, lpFileSize=0xb51fd0c | out: lpFileSize=0xb51fd0c*=4361) returned 1 [0198.690] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x1105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.690] ReadFile (in: hFile=0x246c, lpBuffer=0xb51fce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb51fcf8, lpOverlapped=0x0 | out: lpBuffer=0xb51fce8*, lpNumberOfBytesRead=0xb51fcf8*=0x4, lpOverlapped=0x0) returned 1 [0198.695] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0198.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0198.695] NtQuerySystemTime (in: CurrentTime=0xb51fc80 | out: CurrentTime=0xb51fc80*=132482711071764000) returned 0x0 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x1c11661d [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x72879a23 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x3e9c8a42 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x46df3aac [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x12d3d1cb [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x31b02f48 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x39899fca [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x10c899a0 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0xc980f00 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0xc56c9bc [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x7277293d [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x6dd72764 [0198.695] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x3a0cbfda [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x41cc5463 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x62fbdb99 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x52991eb0 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x7564951c [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x6b4185ec [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0xfab706b [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x383070ee [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x2d1b3f7b [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x591bc082 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x27ceaf98 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x1ad7b810 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x619640c0 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x1d4ef1c2 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x5373888f [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x757527be [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x170915ed [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x53d79234 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0xde1a13 [0198.696] RtlRandomEx (in: Seed=0xb51fc78 | out: Seed=0xb51fc78) returned 0x46c1f29a [0198.704] ReadFile (in: hFile=0x246c, lpBuffer=0x12f07870, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0xb51fc74, lpOverlapped=0x0 | out: lpBuffer=0x12f07870*, lpNumberOfBytesRead=0xb51fc74*=0x1109, lpOverlapped=0x0) returned 1 [0198.704] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.704] WriteFile (in: hFile=0x246c, lpBuffer=0x12f0b478*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0xb51fc78, lpOverlapped=0x0 | out: lpBuffer=0x12f0b478*, lpNumberOfBytesWritten=0xb51fc78*=0x1109, lpOverlapped=0x0) returned 1 [0201.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0201.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0201.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0201.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0b478) returned 1 [0201.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f07870) returned 1 [0201.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0201.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e98) returned 1 [0201.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef53c0 [0201.985] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.985] WriteFile (in: hFile=0x246c, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xb51fd00, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0xb51fd00*=0x10a, lpOverlapped=0x0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0203.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0203.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac9a0 [0203.340] wcscpy (in: _Dest=0x12eac9a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" [0203.340] wcscat (in: _Dest=0x12eac9a0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.ac3a86" [0203.340] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.ac3a86", NtPathName=0xb51fc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x6776fd8 [0206.686] FlushFileBuffers (hFile=0x246c) returned 1 [0206.688] CloseHandle (hObject=0x246c) returned 1 [0209.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6779ae8 [0209.756] wcscpy (in: _Dest=0x6779ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0209.756] wcscat (in: _Dest=0x6779ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0209.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0xffffffff [0209.873] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc2c [0210.541] WriteFile (in: hFile=0xc2c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb51fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb51fc94*=0x8b9, lpOverlapped=0x0) returned 1 [0210.543] CloseHandle (hObject=0xc2c) returned 1 [0210.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779ae8) returned 1 [0210.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67647a0) returned 1 Thread: id = 6545 os_tid = 0x12b0 [0190.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 0x2020 [0190.895] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", dwFileAttributes=0x20) returned 1 [0198.705] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec [0198.705] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0x83ffdf4 | out: lpFileSize=0x83ffdf4*=556) returned 1 [0198.705] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.705] ReadFile (in: hFile=0x1bec, lpBuffer=0x83ffdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x83ffde0, lpOverlapped=0x0 | out: lpBuffer=0x83ffdd0*, lpNumberOfBytesRead=0x83ffde0*=0x4, lpOverlapped=0x0) returned 1 [0198.707] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0198.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0198.707] NtQuerySystemTime (in: CurrentTime=0x83ffd68 | out: CurrentTime=0x83ffd68*=132482711071920000) returned 0x0 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x6b1a8267 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x2166532a [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x27a1086e [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x590c90ad [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x518c2744 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x7d0c8ad5 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x3f212468 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x30e85201 [0198.707] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x61fd6613 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x3a606311 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x27141d58 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x229f7f3 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x74ef7a72 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x3d64c669 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x1cb5c7a [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x33e71fd1 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x36ad6802 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x6f828670 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x66e097f [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x30844903 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x73082463 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x236f7236 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x21e065aa [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x21e5d08a [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x5b98e5e [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x739f1969 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0xa4a8ef4 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x1e449948 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x4ccff75b [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x58429fc [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x555c2e04 [0198.708] RtlRandomEx (in: Seed=0x83ffd60 | out: Seed=0x83ffd60) returned 0x3855858 [0198.716] ReadFile (in: hFile=0x1bec, lpBuffer=0x12f3c0e0, nNumberOfBytesToRead=0x22c, lpNumberOfBytesRead=0x83ffd5c, lpOverlapped=0x0 | out: lpBuffer=0x12f3c0e0*, lpNumberOfBytesRead=0x83ffd5c*=0x22c, lpOverlapped=0x0) returned 1 [0198.716] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.716] WriteFile (in: hFile=0x1bec, lpBuffer=0x12f348d0*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x83ffd60, lpOverlapped=0x0 | out: lpBuffer=0x12f348d0*, lpNumberOfBytesWritten=0x83ffd60*=0x22c, lpOverlapped=0x0) returned 1 [0201.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0201.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0201.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0201.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f348d0) returned 1 [0201.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f3c0e0) returned 1 [0201.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0201.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aee8) returned 1 [0201.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef5420 [0201.987] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.987] WriteFile (in: hFile=0x1bec, lpBuffer=0x6751f80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x83ffde8, lpOverlapped=0x0 | out: lpBuffer=0x6751f80*, lpNumberOfBytesWritten=0x83ffde8*=0x108, lpOverlapped=0x0) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0203.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0203.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x12eac878 [0203.346] wcscpy (in: _Dest=0x12eac878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" [0203.346] wcscat (in: _Dest=0x12eac878, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.ac3a86" [0203.346] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.ac3a86", NtPathName=0x83ffd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x6776d48 [0210.799] FlushFileBuffers (hFile=0x1bec) returned 1 [0210.805] CloseHandle (hObject=0x1bec) returned 1 [0210.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3042500 [0210.807] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.807] wcscat (in: _Dest=0x3042500, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.807] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0210.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e958) returned 1 Thread: id = 6546 os_tid = 0x12c8 [0190.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 0x2020 [0190.896] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", dwFileAttributes=0x20) returned 1 [0198.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14cc [0198.717] GetFileSizeEx (in: hFile=0x14cc, lpFileSize=0xb68f88c | out: lpFileSize=0xb68f88c*=160) returned 1 [0198.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0198.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0198.717] NtQuerySystemTime (in: CurrentTime=0xb68f800 | out: CurrentTime=0xb68f800*=132482711071920000) returned 0x0 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x7073001b [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x3c4273d5 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x411fd6f3 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x6bc2e2a4 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x2a78fcb3 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x43a920e3 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x4488ea33 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x615c7516 [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x3f9105ca [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x54fa4b8f [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x6607cdbb [0198.717] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x34155ae9 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x7f03e260 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x338b217b [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x62a6dc9c [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x3d486d35 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x5cceba6e [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x567f9b5a [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x72a7369 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x74f48e56 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x7980a2be [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x777b68a1 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x6c2954a [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x37e3b28 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x50620383 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x7f3fa24 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x6037a516 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x409fc993 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x31dec838 [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x164e126b [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x10447cbe [0198.718] RtlRandomEx (in: Seed=0xb68f7f8 | out: Seed=0xb68f7f8) returned 0x37e3b28 [0198.726] ReadFile (in: hFile=0x14cc, lpBuffer=0x12f384d8, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xb68f7f4, lpOverlapped=0x0 | out: lpBuffer=0x12f384d8*, lpNumberOfBytesRead=0xb68f7f4*=0xa0, lpOverlapped=0x0) returned 1 [0198.728] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.728] WriteFile (in: hFile=0x14cc, lpBuffer=0x12f2d0c0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xb68f7f8, lpOverlapped=0x0 | out: lpBuffer=0x12f2d0c0*, lpNumberOfBytesWritten=0xb68f7f8*=0xa0, lpOverlapped=0x0) returned 1 [0202.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0202.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0202.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0202.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f2d0c0) returned 1 [0202.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f384d8) returned 1 [0202.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0202.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ac60) returned 1 [0202.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e62380 [0202.102] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.102] WriteFile (in: hFile=0x14cc, lpBuffer=0x3d41b30*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0xb68f880, lpOverlapped=0x0 | out: lpBuffer=0x3d41b30*, lpNumberOfBytesWritten=0xb68f880*=0x126, lpOverlapped=0x0) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b30) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62740) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62380) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0203.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0203.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6776e90 [0203.344] wcscpy (in: _Dest=0x6776e90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" [0203.344] wcscat (in: _Dest=0x6776e90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.ac3a86" [0203.344] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.ac3a86", NtPathName=0xb68f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dcd898 [0209.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd898) returned 1 [0209.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825050) returned 1 [0209.556] NtQueryInformationFile (in: FileHandle=0x14cc, IoStatusBlock=0xb68f7d0, FileInformation=0xb68f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb68f7d0, FileInformation=0xb68f7d8) returned 0x0 [0209.557] NtSetInformationFile (FileHandle=0x14cc, IoStatusBlock=0xb68f7d0, FileInformation=0xb68f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776e90) returned 1 [0209.895] FlushFileBuffers (hFile=0x14cc) returned 1 [0210.473] CloseHandle (hObject=0x14cc) returned 1 [0210.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3042500 [0210.482] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.482] wcscat (in: _Dest=0x3042500, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 [0210.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40540) returned 1 Thread: id = 6547 os_tid = 0x12d0 [0190.897] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 0x2020 [0190.897] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", dwFileAttributes=0x20) returned 1 [0198.728] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc2c [0198.729] GetFileSizeEx (in: hFile=0xc2c, lpFileSize=0xb79fee4 | out: lpFileSize=0xb79fee4*=252) returned 1 [0198.729] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.729] ReadFile (in: hFile=0xc2c, lpBuffer=0xb79fec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb79fed0, lpOverlapped=0x0 | out: lpBuffer=0xb79fec0*, lpNumberOfBytesRead=0xb79fed0*=0x4, lpOverlapped=0x0) returned 1 [0198.730] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0198.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0198.730] NtQuerySystemTime (in: CurrentTime=0xb79fe58 | out: CurrentTime=0xb79fe58*=132482711072076000) returned 0x0 [0198.730] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x34155ae9 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x70622a6d [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x567f9b5a [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x72a7369 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x1c2ed260 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x66dbf2f9 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x757a66bd [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x3855858 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x7e55ebcc [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x54158917 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x234ae741 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0xbf592bb [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0xcc7a5cf [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x7980a2be [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x16579a3e [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x1e449948 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x219d6864 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x6f828670 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x6e82b43a [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x360d8bf0 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x55234230 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x46cdfda7 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x1cb50c0b [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x1b0a78a9 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x4095ef8e [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x28d28bd4 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x7b4526f9 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x4753fb7e [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x787da43d [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x779bf08b [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x6bc2e2a4 [0198.731] RtlRandomEx (in: Seed=0xb79fe50 | out: Seed=0xb79fe50) returned 0x11ba14f2 [0198.740] ReadFile (in: hFile=0xc2c, lpBuffer=0x12f30cc8, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xb79fe4c, lpOverlapped=0x0 | out: lpBuffer=0x12f30cc8*, lpNumberOfBytesRead=0xb79fe4c*=0xfc, lpOverlapped=0x0) returned 1 [0198.740] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.740] WriteFile (in: hFile=0xc2c, lpBuffer=0x12f258b0*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xb79fe50, lpOverlapped=0x0 | out: lpBuffer=0x12f258b0*, lpNumberOfBytesWritten=0xb79fe50*=0xfc, lpOverlapped=0x0) returned 1 [0203.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f258b0) returned 1 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f30cc8) returned 1 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0203.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a630) returned 1 [0203.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4830 [0203.221] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.221] WriteFile (in: hFile=0xc2c, lpBuffer=0x6777120*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xb79fed8, lpOverlapped=0x0 | out: lpBuffer=0x6777120*, lpNumberOfBytesWritten=0xb79fed8*=0x132, lpOverlapped=0x0) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777120) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4938) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4830) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0206.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0206.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce310 [0206.037] wcscpy (in: _Dest=0x66ce310, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" [0206.037] wcscat (in: _Dest=0x66ce310, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.ac3a86" [0206.037] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.ac3a86", NtPathName=0xb79fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcdfa0 [0210.536] FlushFileBuffers (hFile=0xc2c) returned 1 [0210.537] CloseHandle (hObject=0xc2c) returned 1 [0210.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6766678 [0210.539] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.539] wcscat (in: _Dest=0x6766678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 [0210.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fce88) returned 1 Thread: id = 6548 os_tid = 0x12d4 [0190.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 0x2020 [0190.898] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", dwFileAttributes=0x20) returned 1 [0198.740] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b04 [0198.741] GetFileSizeEx (in: hFile=0x1b04, lpFileSize=0xce1f974 | out: lpFileSize=0xce1f974*=160) returned 1 [0198.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4cb8 [0198.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0198.741] NtQuerySystemTime (in: CurrentTime=0xce1f8e8 | out: CurrentTime=0xce1f8e8*=132482711072232000) returned 0x0 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x3e1f0022 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x6c2ad49c [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0xec65cea [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x8aa41e4 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x7b4526f9 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x51c85684 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x3eed83bb [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x7f84c36f [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x194383de [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x44253cf0 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x411fd6f3 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x6bc0da23 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x249abd47 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x67c5ecb6 [0198.741] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x7c1850dd [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x58429fc [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x21322ad6 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x469ad1ee [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x69252044 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x1ce91d4a [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x10447cbe [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x2d2f3a2 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x74c3d364 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x1dd7560b [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x504422eb [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x11ba14f2 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x6a9be22f [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x330c28dc [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0xb3822e1 [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x71ef4fed [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x6d9db9ed [0198.742] RtlRandomEx (in: Seed=0xce1f8e0 | out: Seed=0xce1f8e0) returned 0x106ab505 [0198.750] ReadFile (in: hFile=0x1b04, lpBuffer=0x12f294b8, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xce1f8dc, lpOverlapped=0x0 | out: lpBuffer=0x12f294b8*, lpNumberOfBytesRead=0xce1f8dc*=0xa0, lpOverlapped=0x0) returned 1 [0198.752] SetFilePointerEx (in: hFile=0x1b04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.752] WriteFile (in: hFile=0x1b04, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xce1f8e0, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xce1f8e0*=0xa0, lpOverlapped=0x0) returned 1 [0202.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0202.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca508 [0202.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0202.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0202.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f294b8) returned 1 [0202.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0202.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a7e0) returned 1 [0202.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x66d4990 [0202.725] SetFilePointerEx (in: hFile=0x1b04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.725] WriteFile (in: hFile=0x1b04, lpBuffer=0x6778830*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xce1f968, lpOverlapped=0x0 | out: lpBuffer=0x6778830*, lpNumberOfBytesWritten=0xce1f968*=0x132, lpOverlapped=0x0) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778830) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4a98) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d4990) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0204.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce5c0 [0204.602] wcscpy (in: _Dest=0x66ce5c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" [0204.602] wcscat (in: _Dest=0x66ce5c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.ac3a86" [0204.602] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.ac3a86", NtPathName=0xce1f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dce3d8 [0210.520] FlushFileBuffers (hFile=0x1b04) returned 1 [0210.523] CloseHandle (hObject=0x1b04) returned 1 [0210.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6766678 [0210.526] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.526] wcscat (in: _Dest=0x6766678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.526] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 [0210.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x29fc20) returned 1 Thread: id = 6549 os_tid = 0x12d8 [0190.899] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 0x2020 [0190.899] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", dwFileAttributes=0x20) returned 1 [0198.643] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd5c [0198.643] GetFileSizeEx (in: hFile=0xd5c, lpFileSize=0x972f98c | out: lpFileSize=0x972f98c*=166) returned 1 [0198.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0198.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304238 [0198.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3040f8 [0198.644] NtQuerySystemTime (in: CurrentTime=0x972f900 | out: CurrentTime=0x972f900*=132482711071140000) returned 0x0 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x7db44987 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x6033caeb [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x75a3f81e [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x15ef10d4 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x472963af [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x207ce2d9 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xc5ddeec [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xd770f97 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x10a1867 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x44e9f61f [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x6c6d1b6 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x5f2d38af [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x31c3a532 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xfdb5478 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x3a788d97 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x190d7011 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x71f114b7 [0198.644] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xb232e90 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xc4354d5 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x3d0e1e8e [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x7f991fe5 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0xc9edb24 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x5d258f1e [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x73dba6ba [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x771ae52b [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x441a9e28 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x3e0a0f95 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x313bd758 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x13a16e65 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x4c6ad6f0 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x182d1416 [0198.645] RtlRandomEx (in: Seed=0x972f8f8 | out: Seed=0x972f8f8) returned 0x676c6c42 [0198.655] ReadFile (in: hFile=0xd5c, lpBuffer=0x12f16890, nNumberOfBytesToRead=0xa6, lpNumberOfBytesRead=0x972f8f4, lpOverlapped=0x0 | out: lpBuffer=0x12f16890*, lpNumberOfBytesRead=0x972f8f4*=0xa6, lpOverlapped=0x0) returned 1 [0198.656] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.656] WriteFile (in: hFile=0xd5c, lpBuffer=0x12f1a498*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x972f8f8, lpOverlapped=0x0 | out: lpBuffer=0x12f1a498*, lpNumberOfBytesWritten=0x972f8f8*=0xa6, lpOverlapped=0x0) returned 1 [0201.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab28 [0201.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0201.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1a498) returned 1 [0201.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f16890) returned 1 [0201.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0201.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b7e8) returned 1 [0201.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6de8 [0201.991] SetFilePointerEx (in: hFile=0xd5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.991] WriteFile (in: hFile=0xd5c, lpBuffer=0x6776c00*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x972f980, lpOverlapped=0x0 | out: lpBuffer=0x6776c00*, lpNumberOfBytesWritten=0x972f980*=0x138, lpOverlapped=0x0) returned 1 [0204.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776c00) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6de8) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab28) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0204.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x66ce468 [0204.514] wcscpy (in: _Dest=0x66ce468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" [0204.514] wcscat (in: _Dest=0x66ce468, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.ac3a86" [0204.514] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.ac3a86", NtPathName=0x972f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x164) returned 0x3e631b0 [0210.527] FlushFileBuffers (hFile=0xd5c) returned 1 [0210.531] CloseHandle (hObject=0xd5c) returned 1 [0210.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6766678 [0210.533] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.533] wcscat (in: _Dest=0x6766678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 [0210.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fa0) returned 1 Thread: id = 6550 os_tid = 0x1528 [0190.900] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 0x2020 [0190.900] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", dwFileAttributes=0x20) returned 1 [0198.657] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x116c [0198.657] GetFileSizeEx (in: hFile=0x116c, lpFileSize=0xd61fc8c | out: lpFileSize=0xd61fc8c*=160) returned 1 [0198.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303f18 [0198.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3040f8 [0198.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0198.657] NtQuerySystemTime (in: CurrentTime=0xd61fc00 | out: CurrentTime=0xd61fc00*=132482711071296000) returned 0x0 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6418ed54 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x1848bb9 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x1ea63ca7 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x3cd69894 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6e65db10 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x18d83db [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x4cd49634 [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x63860b1d [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x3286465f [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x696d70bd [0198.657] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x3fe9ea70 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x1e0f1ef2 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x4a64c7a5 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x1fdfffcb [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x60c940b0 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x7b9d17c1 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x82c4c0f [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x4d2d1eff [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x201be2ad [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x81ed2e4 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x4edb00df [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x1970184f [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x3501d9bf [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x5d6c1e7b [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x50c6e65a [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x2952d434 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x31b18672 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6d1eb0c0 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0xd8901d3 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6bc0da23 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6ce2a6b4 [0198.658] RtlRandomEx (in: Seed=0xd61fbf8 | out: Seed=0xd61fbf8) returned 0x6c70ae3d [0198.667] ReadFile (in: hFile=0x116c, lpBuffer=0x12f00060, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xd61fbf4, lpOverlapped=0x0 | out: lpBuffer=0x12f00060*, lpNumberOfBytesRead=0xd61fbf4*=0xa0, lpOverlapped=0x0) returned 1 [0198.668] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.669] WriteFile (in: hFile=0x116c, lpBuffer=0x12f03c68*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xd61fbf8, lpOverlapped=0x0 | out: lpBuffer=0x12f03c68*, lpNumberOfBytesWritten=0xd61fbf8*=0xa0, lpOverlapped=0x0) returned 1 [0201.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0201.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f03c68) returned 1 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f00060) returned 1 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0201.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc20) returned 1 [0201.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0201.990] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.990] WriteFile (in: hFile=0x116c, lpBuffer=0x67785a0*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0xd61fc80, lpOverlapped=0x0 | out: lpBuffer=0x67785a0*, lpNumberOfBytesWritten=0xd61fc80*=0x136, lpOverlapped=0x0) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67785a0) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040f8) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304468) returned 1 [0204.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304170) returned 1 [0204.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x66ce060 [0204.512] wcscpy (in: _Dest=0x66ce060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" [0204.512] wcscat (in: _Dest=0x66ce060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.ac3a86" [0204.512] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.ac3a86", NtPathName=0xd61fbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x3e62bd0 [0210.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e62bd0) returned 1 [0210.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef4e58) returned 1 [0210.557] NtQueryInformationFile (in: FileHandle=0x116c, IoStatusBlock=0xd61fbd0, FileInformation=0xd61fbd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd61fbd0, FileInformation=0xd61fbd8) returned 0x0 [0210.558] NtSetInformationFile (FileHandle=0x116c, IoStatusBlock=0xd61fbd0, FileInformation=0xd61fbd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce060) returned 1 [0210.581] FlushFileBuffers (hFile=0x116c) returned 1 [0210.633] CloseHandle (hObject=0x116c) returned 1 [0210.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6959530 [0210.636] wcscpy (in: _Dest=0x6959530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0210.636] wcscat (in: _Dest=0x6959530, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" [0210.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ac3a86-readme.txt")) returned 0x2020 [0210.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959530) returned 1 [0210.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330b20) returned 1 Thread: id = 6551 os_tid = 0x111c [0190.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 0x2020 [0191.773] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0192.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f9c [0192.989] GetFileSizeEx (in: hFile=0x1f9c, lpFileSize=0xd5cfa14 | out: lpFileSize=0xd5cfa14*=3213) returned 1 [0192.989] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0xc89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.989] ReadFile (in: hFile=0x1f9c, lpBuffer=0xd5cf9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd5cfa00, lpOverlapped=0x0 | out: lpBuffer=0xd5cf9f0*, lpNumberOfBytesRead=0xd5cfa00*=0x4, lpOverlapped=0x0) returned 1 [0192.991] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0192.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0192.992] NtQuerySystemTime (in: CurrentTime=0xd5cf988 | out: CurrentTime=0xd5cf988*=132482711014668000) returned 0x0 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x19e2fa90 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x741180 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x26d879b5 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x3c9066c7 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x48d80b69 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x34980c9b [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x44c77104 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x79636672 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x65608c5c [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x2bd10bf7 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x476c8b7b [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x5842d6f0 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x77d6c4c3 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x405e0884 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x536fd464 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x285cacf8 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x1fbca07b [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x5f7cadd3 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x475c9cbe [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x72324e0a [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x25112724 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x25112724 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x29fa0d72 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x12e629fd [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x93e38eb [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x2067dcf4 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0xfccd8d9 [0192.992] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x3b111938 [0192.993] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x787682ff [0192.993] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x2aa437e7 [0192.993] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x79a7df34 [0192.993] RtlRandomEx (in: Seed=0xd5cf980 | out: Seed=0xd5cf980) returned 0x58cc39cb [0193.001] ReadFile (in: hFile=0x1f9c, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0xc8d, lpNumberOfBytesRead=0xd5cf97c, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xd5cf97c*=0xc8d, lpOverlapped=0x0) returned 1 [0193.001] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.001] WriteFile (in: hFile=0x1f9c, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0xd5cf980, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xd5cf980*=0xc8d, lpOverlapped=0x0) returned 1 [0196.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0196.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0196.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0196.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0196.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0196.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0196.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823560) returned 1 [0196.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef5f90 [0196.856] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.856] WriteFile (in: hFile=0x1f9c, lpBuffer=0x6767e68*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xd5cfa08, lpOverlapped=0x0 | out: lpBuffer=0x6767e68*, lpNumberOfBytesWritten=0xd5cfa08*=0x10a, lpOverlapped=0x0) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767e68) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0199.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0199.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x6767e68 [0199.680] wcscpy (in: _Dest=0x6767e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0199.681] wcscat (in: _Dest=0x6767e68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.ac3a86" [0199.681] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.ac3a86", NtPathName=0xd5cf980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac500 [0204.030] FlushFileBuffers (hFile=0x1f9c) returned 1 [0204.031] CloseHandle (hObject=0x1f9c) returned 1 [0206.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x675d5a8 [0206.162] wcscpy (in: _Dest=0x675d5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0206.162] wcscat (in: _Dest=0x675d5a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" [0206.162] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0207.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d5a8) returned 1 [0207.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcd58) returned 1 Thread: id = 6552 os_tid = 0x1158 [0190.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 0x2020 [0191.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0193.002] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b04 [0193.003] GetFileSizeEx (in: hFile=0x1b04, lpFileSize=0xcfcfd9c | out: lpFileSize=0xcfcfd9c*=143) returned 1 [0193.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0193.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b230 [0193.003] NtQuerySystemTime (in: CurrentTime=0xcfcfd10 | out: CurrentTime=0xcfcfd10*=132482711014824000) returned 0x0 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x32729a3 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0xfd1a858 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x90f66b1 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x45a85893 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x14ce38af [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x2f00ff65 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x60cf3257 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x157bc84e [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x4a2ce2e8 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x4b4ce2d7 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x60a66a22 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x58931782 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x14d47a48 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x29dbb735 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0xbf4f353 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x623a2df8 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x6421940b [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x8c3e0fd [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x3a7f62e5 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x44bcb719 [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x1d8b928b [0193.003] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x13b12283 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x2ee2abfd [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x27e43ab8 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x207908ae [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x48e9bbe4 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x26350c03 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x5f90c9b1 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x6b239b95 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x1d745cc [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x4ff6c133 [0193.004] RtlRandomEx (in: Seed=0xcfcfd08 | out: Seed=0xcfcfd08) returned 0x49c79feb [0193.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69d1100 [0193.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69d4d08 [0193.011] ReadFile (in: hFile=0x1b04, lpBuffer=0x69d1100, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0xcfcfd04, lpOverlapped=0x0 | out: lpBuffer=0x69d1100*, lpNumberOfBytesRead=0xcfcfd04*=0x8f, lpOverlapped=0x0) returned 1 [0193.013] SetFilePointerEx (in: hFile=0x1b04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.013] WriteFile (in: hFile=0x1b04, lpBuffer=0x69d4d08*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xcfcfd08, lpOverlapped=0x0 | out: lpBuffer=0x69d4d08*, lpNumberOfBytesWritten=0xcfcfd08*=0x8f, lpOverlapped=0x0) returned 1 [0195.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0195.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac18 [0195.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac18) returned 1 [0195.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d4d08) returned 1 [0195.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d1100) returned 1 [0195.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0195.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822750) returned 1 [0195.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3ef6020 [0195.156] SetFilePointerEx (in: hFile=0x1b04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.156] WriteFile (in: hFile=0x1b04, lpBuffer=0x30bcdf8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xcfcfd90, lpOverlapped=0x0 | out: lpBuffer=0x30bcdf8*, lpNumberOfBytesWritten=0xcfcfd90*=0x108, lpOverlapped=0x0) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac18) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0197.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0197.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcdf8 [0197.508] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0197.508] wcscat (in: _Dest=0x30bcdf8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.ac3a86" [0197.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.ac3a86", NtPathName=0xcfcfd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6779648 [0197.875] FlushFileBuffers (hFile=0x1b04) returned 1 [0197.885] CloseHandle (hObject=0x1b04) returned 1 [0198.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bcdf8 [0198.039] wcscpy (in: _Dest=0x30bcdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0198.040] wcscat (in: _Dest=0x30bcdf8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" [0198.040] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt")) returned 0xffffffff [0198.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1838 [0199.104] WriteFile (in: hFile=0x1838, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcfcfd24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcfcfd24*=0x8b9, lpOverlapped=0x0) returned 1 [0199.882] CloseHandle (hObject=0x1838) returned 1 [0207.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdf8) returned 1 [0207.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc938) returned 1 Thread: id = 6553 os_tid = 0x1164 [0190.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 0x2020 [0191.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0196.554] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef8 [0196.554] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0xd71f7ec | out: lpFileSize=0xd71f7ec*=92) returned 1 [0196.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0196.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0196.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca800 [0196.555] NtQuerySystemTime (in: CurrentTime=0xd71f760 | out: CurrentTime=0xd71f760*=132482711050392000) returned 0x0 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x46edb47b [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x33d168f5 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x7d537899 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x3e6239 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x632cb337 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x6692526d [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x31669734 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x6fa98d37 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x72d21578 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x60243d73 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x6267b50 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x5258f203 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0xb4320d5 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x16053fc9 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x1b25ec2 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x40f591ac [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x6a69d62a [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x1cb4f724 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x1d4012b3 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x1c0ed207 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x5aac71c6 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x735bef9a [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x6376172a [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x3dbeceee [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x257de9d0 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x3db08fb9 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x36a9150c [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x25a1161c [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x71f945d0 [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x638926df [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x58be7d3a [0196.555] RtlRandomEx (in: Seed=0xd71f758 | out: Seed=0xd71f758) returned 0x4e771cb7 [0196.563] ReadFile (in: hFile=0xef8, lpBuffer=0x12f0f080, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0xd71f754, lpOverlapped=0x0 | out: lpBuffer=0x12f0f080*, lpNumberOfBytesRead=0xd71f754*=0x5c, lpOverlapped=0x0) returned 1 [0196.566] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.566] WriteFile (in: hFile=0xef8, lpBuffer=0x12f12c88*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xd71f758, lpOverlapped=0x0 | out: lpBuffer=0x12f12c88*, lpNumberOfBytesWritten=0xd71f758*=0x5c, lpOverlapped=0x0) returned 1 [0200.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0200.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0200.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0200.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f12c88) returned 1 [0200.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0f080) returned 1 [0200.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 [0200.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823290) returned 1 [0200.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b50 [0200.367] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.368] WriteFile (in: hFile=0xef8, lpBuffer=0x6751d50*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xd71f7e0, lpOverlapped=0x0 | out: lpBuffer=0x6751d50*, lpNumberOfBytesWritten=0xd71f7e0*=0x104, lpOverlapped=0x0) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7b0) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0202.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0202.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6751d50 [0202.821] wcscpy (in: _Dest=0x6751d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" [0202.821] wcscat (in: _Dest=0x6751d50, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.ac3a86" [0202.821] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.ac3a86", NtPathName=0xd71f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x12eacac8 [0209.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacac8) returned 1 [0209.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x688dbc8) returned 1 [0209.160] NtQueryInformationFile (in: FileHandle=0xef8, IoStatusBlock=0xd71f730, FileInformation=0xd71f738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd71f730, FileInformation=0xd71f738) returned 0x0 [0209.161] NtSetInformationFile (FileHandle=0xef8, IoStatusBlock=0xd71f730, FileInformation=0xd71f738, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0209.371] FlushFileBuffers (hFile=0xef8) returned 1 [0209.378] CloseHandle (hObject=0xef8) returned 1 [0209.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bc420 [0209.643] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0209.643] wcscat (in: _Dest=0x30bc420, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" [0209.643] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0209.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0209.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17c70) returned 1 Thread: id = 6554 os_tid = 0x15b8 [0190.905] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 0x2020 [0191.775] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0196.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d0 [0196.635] GetFileSizeEx (in: hFile=0x21d0, lpFileSize=0xd33fc24 | out: lpFileSize=0xd33fc24*=91) returned 1 [0196.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5a8 [0196.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0196.636] NtQuerySystemTime (in: CurrentTime=0xd33fb98 | out: CurrentTime=0xd33fb98*=132482711051172000) returned 0x0 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x5fa10b60 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x6b0e53df [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x6d48a7f9 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x1c613ab7 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x29b429b5 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x56186d0 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x763f4fcd [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x60d9e1bb [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x29b429b5 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x590469c7 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0xacabb9a [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x2821049b [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x3db08fb9 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x3419bfff [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x62efd2bb [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x1886f258 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x33c93332 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x7cd9787 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x36030b5d [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x3fe02bac [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x418cd65b [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x7c791713 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x302184f0 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x5f9fa9f8 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x2dadacd8 [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x54acac9a [0196.636] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x3494f14 [0196.637] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x46ad32f6 [0196.637] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x28c81954 [0196.637] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x67ceb0ba [0196.637] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x717eaf29 [0196.637] RtlRandomEx (in: Seed=0xd33fb90 | out: Seed=0xd33fb90) returned 0x25bff188 [0196.648] ReadFile (in: hFile=0x21d0, lpBuffer=0x12f43c68, nNumberOfBytesToRead=0x5b, lpNumberOfBytesRead=0xd33fb8c, lpOverlapped=0x0 | out: lpBuffer=0x12f43c68*, lpNumberOfBytesRead=0xd33fb8c*=0x5b, lpOverlapped=0x0) returned 1 [0196.650] SetFilePointerEx (in: hFile=0x21d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.650] WriteFile (in: hFile=0x21d0, lpBuffer=0x12f47870*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0xd33fb90, lpOverlapped=0x0 | out: lpBuffer=0x12f47870*, lpNumberOfBytesWritten=0xd33fb90*=0x5b, lpOverlapped=0x0) returned 1 [0200.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0200.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0200.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0200.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f47870) returned 1 [0200.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f43c68) returned 1 [0200.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0200.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40e80) returned 1 [0200.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ef4060 [0200.372] SetFilePointerEx (in: hFile=0x21d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.372] WriteFile (in: hFile=0x21d0, lpBuffer=0x2fafa8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd33fc18, lpOverlapped=0x0 | out: lpBuffer=0x2fafa8*, lpNumberOfBytesWritten=0xd33fc18*=0x100, lpOverlapped=0x0) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5a8) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0202.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0202.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fafa8 [0202.285] wcscpy (in: _Dest=0x2fafa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" [0202.285] wcscat (in: _Dest=0x2fafa8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.ac3a86" [0202.285] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.ac3a86", NtPathName=0xd33fb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0202.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x12eac500 [0210.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac500) returned 1 [0210.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f2a778) returned 1 [0210.710] NtQueryInformationFile (in: FileHandle=0x21d0, IoStatusBlock=0xd33fb68, FileInformation=0xd33fb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd33fb68, FileInformation=0xd33fb70) returned 0x0 [0210.711] NtSetInformationFile (FileHandle=0x21d0, IoStatusBlock=0xd33fb68, FileInformation=0xd33fb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 [0210.712] FlushFileBuffers (hFile=0x21d0) returned 1 [0210.808] CloseHandle (hObject=0x21d0) returned 1 [0210.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x675e958 [0210.810] wcscpy (in: _Dest=0x675e958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0210.810] wcscat (in: _Dest=0x675e958, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" [0210.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0210.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e958) returned 1 [0210.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17570) returned 1 Thread: id = 6555 os_tid = 0x89c [0190.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 0x2020 [0191.519] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0192.645] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1614 [0192.645] GetFileSizeEx (in: hFile=0x1614, lpFileSize=0xd7cf994 | out: lpFileSize=0xd7cf994*=725) returned 1 [0192.645] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.645] ReadFile (in: hFile=0x1614, lpBuffer=0xd7cf970, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd7cf980, lpOverlapped=0x0 | out: lpBuffer=0xd7cf970*, lpNumberOfBytesRead=0xd7cf980*=0x4, lpOverlapped=0x0) returned 1 [0192.648] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0192.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0192.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0192.649] NtQuerySystemTime (in: CurrentTime=0xd7cf908 | out: CurrentTime=0xd7cf908*=132482711011236000) returned 0x0 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x3b8466d6 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x3fdac4a4 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x1f5743cc [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x6586511f [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x2b45e2de [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x118b0c8a [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x91d5dd1 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x1769de1d [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x708cb509 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x2f9580cc [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0xe587ade [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x584a0d1c [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x24179bc2 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x502ff48e [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x10f3f2ac [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x10798c0f [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x67bb3db5 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x2a267de9 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0xb230bba [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x44fef6f7 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x161b4512 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x4097b93b [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x26a6d36e [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x3d08efa8 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0xcbca727 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x17f66c84 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x3f4f5536 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x34f63a3 [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x627b54eb [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x6586511f [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x301f379f [0192.649] RtlRandomEx (in: Seed=0xd7cf900 | out: Seed=0xd7cf900) returned 0x637f9294 [0192.659] ReadFile (in: hFile=0x1614, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0xd7cf8fc, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xd7cf8fc*=0x2d5, lpOverlapped=0x0) returned 1 [0192.659] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.659] WriteFile (in: hFile=0x1614, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0xd7cf900, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0xd7cf900*=0x2d5, lpOverlapped=0x0) returned 1 [0192.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0192.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0192.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0192.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0192.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0192.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0192.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6180) returned 1 [0192.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0192.662] SetFilePointerEx (in: hFile=0x1614, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.663] WriteFile (in: hFile=0x1614, lpBuffer=0x6766e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd7cf988, lpOverlapped=0x0 | out: lpBuffer=0x6766e00*, lpNumberOfBytesWritten=0xd7cf988*=0x10c, lpOverlapped=0x0) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0192.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0192.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6766e00 [0192.664] wcscpy (in: _Dest=0x6766e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" [0192.664] wcscat (in: _Dest=0x6766e00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.ac3a86" [0192.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.ac3a86", NtPathName=0xd7cf900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40678 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6878e28) returned 1 [0192.666] NtQueryInformationFile (in: FileHandle=0x1614, IoStatusBlock=0xd7cf8d8, FileInformation=0xd7cf8e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd7cf8d8, FileInformation=0xd7cf8e0) returned 0x0 [0192.666] NtSetInformationFile (FileHandle=0x1614, IoStatusBlock=0xd7cf8d8, FileInformation=0xd7cf8e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0192.667] FlushFileBuffers (hFile=0x1614) returned 1 [0196.568] CloseHandle (hObject=0x1614) returned 1 [0199.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x69c28f0 [0199.632] wcscpy (in: _Dest=0x69c28f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0199.632] wcscat (in: _Dest=0x69c28f0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" [0199.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0202.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c28f0) returned 1 [0202.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcf68) returned 1 Thread: id = 6556 os_tid = 0x116c [0190.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3ee8008 [0190.907] wcscpy (in: _Dest=0x3ee8008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0190.907] wcscat (in: _Dest=0x3ee8008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0190.907] wcscat (in: _Dest=0x3ee8008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*" [0190.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecb18 [0190.907] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2760 [0191.777] wcscmp (_String1=".", _String2=".") returned 0 [0191.777] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.777] wcscmp (_String1="..", _String2=".") returned 1 [0191.778] wcscmp (_String1="..", _String2="..") returned 0 [0191.778] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0191.778] wcscmp (_String1="ar", _String2=".") returned 1 [0191.778] wcscmp (_String1="ar", _String2="..") returned 1 [0191.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6818840 [0191.778] wcscpy (in: _Dest=0x6818840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0191.778] wcscat (in: _Dest=0x6818840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0191.778] wcscat (in: _Dest=0x6818840, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0192.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6818840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0192.782] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0192.782] wcscmp (_String1="bg", _String2=".") returned 1 [0192.782] wcscmp (_String1="bg", _String2="..") returned 1 [0192.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3edc410 [0192.783] wcscpy (in: _Dest=0x3edc410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.783] wcscat (in: _Dest=0x3edc410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.783] wcscat (in: _Dest=0x3edc410, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0192.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3edc410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0192.784] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0192.784] wcscmp (_String1="ca", _String2=".") returned 1 [0192.784] wcscmp (_String1="ca", _String2="..") returned 1 [0192.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25b88 [0192.784] wcscpy (in: _Dest=0x3f25b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.784] wcscat (in: _Dest=0x3f25b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.784] wcscat (in: _Dest=0x3f25b88, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0192.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0192.786] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0192.786] wcscmp (_String1="cs", _String2=".") returned 1 [0192.786] wcscmp (_String1="cs", _String2="..") returned 1 [0192.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f23ea8 [0192.786] wcscpy (in: _Dest=0x3f23ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.786] wcscat (in: _Dest=0x3f23ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.786] wcscat (in: _Dest=0x3f23ea8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0192.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0192.787] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0192.787] wcscmp (_String1="da", _String2=".") returned 1 [0192.787] wcscmp (_String1="da", _String2="..") returned 1 [0192.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25c90 [0192.788] wcscpy (in: _Dest=0x3f25c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.788] wcscat (in: _Dest=0x3f25c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.788] wcscat (in: _Dest=0x3f25c90, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0192.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0192.789] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0192.789] wcscmp (_String1="de", _String2=".") returned 1 [0192.789] wcscmp (_String1="de", _String2="..") returned 1 [0192.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25348 [0192.789] wcscpy (in: _Dest=0x3f25348, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.789] wcscat (in: _Dest=0x3f25348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.789] wcscat (in: _Dest=0x3f25348, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0192.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0192.790] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0192.791] wcscmp (_String1="el", _String2=".") returned 1 [0192.791] wcscmp (_String1="el", _String2="..") returned 1 [0192.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25450 [0192.791] wcscpy (in: _Dest=0x3f25450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.791] wcscat (in: _Dest=0x3f25450, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.791] wcscat (in: _Dest=0x3f25450, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0192.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0192.792] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0192.792] wcscmp (_String1="en_GB", _String2=".") returned 1 [0192.792] wcscmp (_String1="en_GB", _String2="..") returned 1 [0192.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f25558 [0192.792] wcscpy (in: _Dest=0x3f25558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.792] wcscat (in: _Dest=0x3f25558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.792] wcscat (in: _Dest=0x3f25558, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0192.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0192.793] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0192.794] wcscmp (_String1="en_US", _String2=".") returned 1 [0192.794] wcscmp (_String1="en_US", _String2="..") returned 1 [0192.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3f24c10 [0192.794] wcscpy (in: _Dest=0x3f24c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.794] wcscat (in: _Dest=0x3f24c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.794] wcscat (in: _Dest=0x3f24c10, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0192.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f24c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0192.795] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0192.795] wcscmp (_String1="es", _String2=".") returned 1 [0192.795] wcscmp (_String1="es", _String2="..") returned 1 [0192.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f240b8 [0192.795] wcscpy (in: _Dest=0x3f240b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.795] wcscat (in: _Dest=0x3f240b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.795] wcscat (in: _Dest=0x3f240b8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0192.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f240b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0192.797] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0192.797] wcscmp (_String1="es_419", _String2=".") returned 1 [0192.797] wcscmp (_String1="es_419", _String2="..") returned 1 [0192.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67521b0 [0192.797] wcscpy (in: _Dest=0x67521b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.797] wcscat (in: _Dest=0x67521b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.798] wcscat (in: _Dest=0x67521b0, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0192.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67521b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0192.799] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0192.800] wcscmp (_String1="et", _String2=".") returned 1 [0192.800] wcscmp (_String1="et", _String2="..") returned 1 [0192.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f241c0 [0192.800] wcscpy (in: _Dest=0x3f241c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.800] wcscat (in: _Dest=0x3f241c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.800] wcscat (in: _Dest=0x3f241c0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0192.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f241c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0192.801] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0192.801] wcscmp (_String1="fi", _String2=".") returned 1 [0192.802] wcscmp (_String1="fi", _String2="..") returned 1 [0192.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f243d0 [0192.802] wcscpy (in: _Dest=0x3f243d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.802] wcscat (in: _Dest=0x3f243d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.802] wcscat (in: _Dest=0x3f243d0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0192.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f243d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0192.803] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0192.803] wcscmp (_String1="fil", _String2=".") returned 1 [0192.803] wcscmp (_String1="fil", _String2="..") returned 1 [0192.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3f245e0 [0192.803] wcscpy (in: _Dest=0x3f245e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.803] wcscat (in: _Dest=0x3f245e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.803] wcscat (in: _Dest=0x3f245e0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0192.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f245e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0192.805] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0192.805] wcscmp (_String1="fr", _String2=".") returned 1 [0192.805] wcscmp (_String1="fr", _String2="..") returned 1 [0192.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f247f0 [0192.805] wcscpy (in: _Dest=0x3f247f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.805] wcscat (in: _Dest=0x3f247f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.805] wcscat (in: _Dest=0x3f247f0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0192.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f247f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15cc [0192.807] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0192.807] wcscmp (_String1="he", _String2=".") returned 1 [0192.807] wcscmp (_String1="he", _String2="..") returned 1 [0192.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f242c8 [0192.807] wcscpy (in: _Dest=0x3f242c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.807] wcscat (in: _Dest=0x3f242c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.807] wcscat (in: _Dest=0x3f242c8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0192.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f242c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0192.808] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0192.808] wcscmp (_String1="hi", _String2=".") returned 1 [0192.809] wcscmp (_String1="hi", _String2="..") returned 1 [0192.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f244d8 [0192.809] wcscpy (in: _Dest=0x3f244d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.809] wcscat (in: _Dest=0x3f244d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.809] wcscat (in: _Dest=0x3f244d8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0192.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f244d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4 [0192.810] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0192.810] wcscmp (_String1="hu", _String2=".") returned 1 [0192.810] wcscmp (_String1="hu", _String2="..") returned 1 [0192.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f246e8 [0192.810] wcscpy (in: _Dest=0x3f246e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.810] wcscat (in: _Dest=0x3f246e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.810] wcscat (in: _Dest=0x3f246e8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0192.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f246e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0192.812] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0192.812] wcscmp (_String1="id", _String2=".") returned 1 [0192.812] wcscmp (_String1="id", _String2="..") returned 1 [0192.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f248f8 [0192.812] wcscpy (in: _Dest=0x3f248f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.812] wcscat (in: _Dest=0x3f248f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.812] wcscat (in: _Dest=0x3f248f8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0192.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f248f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0192.814] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0192.814] wcscmp (_String1="it", _String2=".") returned 1 [0192.814] wcscmp (_String1="it", _String2="..") returned 1 [0192.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f23fb0 [0192.814] wcscpy (in: _Dest=0x3f23fb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.814] wcscat (in: _Dest=0x3f23fb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.814] wcscat (in: _Dest=0x3f23fb0, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0192.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f23fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0192.815] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0192.815] wcscmp (_String1="ja", _String2=".") returned 1 [0192.815] wcscmp (_String1="ja", _String2="..") returned 1 [0192.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25240 [0192.816] wcscpy (in: _Dest=0x3f25240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.816] wcscat (in: _Dest=0x3f25240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.816] wcscat (in: _Dest=0x3f25240, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0192.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0192.817] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0192.817] wcscmp (_String1="ko", _String2=".") returned 1 [0192.817] wcscmp (_String1="ko", _String2="..") returned 1 [0192.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3f25138 [0192.817] wcscpy (in: _Dest=0x3f25138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0192.817] wcscat (in: _Dest=0x3f25138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0192.817] wcscat (in: _Dest=0x3f25138, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0192.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3f25138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0194.983] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0194.983] wcscmp (_String1="lt", _String2=".") returned 1 [0194.983] wcscmp (_String1="lt", _String2="..") returned 1 [0194.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6754378 [0194.983] wcscpy (in: _Dest=0x6754378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0194.983] wcscat (in: _Dest=0x6754378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0194.983] wcscat (in: _Dest=0x6754378, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0195.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0195.566] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0195.567] wcscmp (_String1="lv", _String2=".") returned 1 [0195.567] wcscmp (_String1="lv", _String2="..") returned 1 [0195.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac840 [0195.567] wcscpy (in: _Dest=0x68ac840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.567] wcscat (in: _Dest=0x68ac840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.567] wcscat (in: _Dest=0x68ac840, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0195.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0195.568] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0195.568] wcscmp (_String1="ms", _String2=".") returned 1 [0195.568] wcscmp (_String1="ms", _String2="..") returned 1 [0195.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ad8c0 [0195.568] wcscpy (in: _Dest=0x68ad8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.568] wcscat (in: _Dest=0x68ad8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.568] wcscat (in: _Dest=0x68ad8c0, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0195.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ad8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0195.569] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0195.569] wcscmp (_String1="nl", _String2=".") returned 1 [0195.569] wcscmp (_String1="nl", _String2="..") returned 1 [0195.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acd68 [0195.569] wcscpy (in: _Dest=0x68acd68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.569] wcscat (in: _Dest=0x68acd68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.569] wcscat (in: _Dest=0x68acd68, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0195.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0195.570] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0195.570] wcscmp (_String1="no", _String2=".") returned 1 [0195.570] wcscmp (_String1="no", _String2="..") returned 1 [0195.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ad5a8 [0195.570] wcscpy (in: _Dest=0x68ad5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.570] wcscat (in: _Dest=0x68ad5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.570] wcscat (in: _Dest=0x68ad5a8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0195.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ad5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0195.571] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0195.571] wcscmp (_String1="pl", _String2=".") returned 1 [0195.571] wcscmp (_String1="pl", _String2="..") returned 1 [0195.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acf78 [0195.572] wcscpy (in: _Dest=0x68acf78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.572] wcscat (in: _Dest=0x68acf78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.572] wcscat (in: _Dest=0x68acf78, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0195.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0195.573] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0195.573] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0195.573] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0195.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ad6b0 [0195.573] wcscpy (in: _Dest=0x68ad6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.573] wcscat (in: _Dest=0x68ad6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.573] wcscat (in: _Dest=0x68ad6b0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0195.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ad6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0195.574] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0195.574] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0195.574] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0195.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ad7b8 [0195.574] wcscpy (in: _Dest=0x68ad7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.574] wcscat (in: _Dest=0x68ad7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.574] wcscat (in: _Dest=0x68ad7b8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0195.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ad7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0195.575] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0195.575] wcscmp (_String1="ro", _String2=".") returned 1 [0195.575] wcscmp (_String1="ro", _String2="..") returned 1 [0195.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acc60 [0195.575] wcscpy (in: _Dest=0x68acc60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.575] wcscat (in: _Dest=0x68acc60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.575] wcscat (in: _Dest=0x68acc60, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0195.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0195.576] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0195.576] wcscmp (_String1="ru", _String2=".") returned 1 [0195.576] wcscmp (_String1="ru", _String2="..") returned 1 [0195.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac108 [0195.576] wcscpy (in: _Dest=0x68ac108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.577] wcscat (in: _Dest=0x68ac108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.577] wcscat (in: _Dest=0x68ac108, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0195.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0195.577] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0195.577] wcscmp (_String1="sk", _String2=".") returned 1 [0195.577] wcscmp (_String1="sk", _String2="..") returned 1 [0195.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ad4a0 [0195.578] wcscpy (in: _Dest=0x68ad4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.578] wcscat (in: _Dest=0x68ad4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.578] wcscat (in: _Dest=0x68ad4a0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0195.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ad4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0195.579] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0195.579] wcscmp (_String1="sl", _String2=".") returned 1 [0195.579] wcscmp (_String1="sl", _String2="..") returned 1 [0195.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68ac000 [0195.579] wcscpy (in: _Dest=0x68ac000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.579] wcscat (in: _Dest=0x68ac000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.579] wcscat (in: _Dest=0x68ac000, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0195.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0195.580] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0195.580] wcscmp (_String1="sr", _String2=".") returned 1 [0195.580] wcscmp (_String1="sr", _String2="..") returned 1 [0195.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abef8 [0195.581] wcscpy (in: _Dest=0x68abef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.581] wcscat (in: _Dest=0x68abef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.581] wcscat (in: _Dest=0x68abef8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0195.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0195.582] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0195.582] wcscmp (_String1="sv", _String2=".") returned 1 [0195.582] wcscmp (_String1="sv", _String2="..") returned 1 [0195.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abdf0 [0195.582] wcscpy (in: _Dest=0x68abdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.582] wcscat (in: _Dest=0x68abdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.582] wcscat (in: _Dest=0x68abdf0, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0195.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0195.583] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0195.583] wcscmp (_String1="th", _String2=".") returned 1 [0195.583] wcscmp (_String1="th", _String2="..") returned 1 [0195.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68abce8 [0195.583] wcscpy (in: _Dest=0x68abce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.583] wcscat (in: _Dest=0x68abce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.583] wcscat (in: _Dest=0x68abce8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0195.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68abce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0195.584] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0195.584] wcscmp (_String1="tr", _String2=".") returned 1 [0195.584] wcscmp (_String1="tr", _String2="..") returned 1 [0195.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68adad0 [0195.584] wcscpy (in: _Dest=0x68adad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.584] wcscat (in: _Dest=0x68adad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.584] wcscat (in: _Dest=0x68adad0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0195.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68adad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0195.585] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0195.586] wcscmp (_String1="uk", _String2=".") returned 1 [0195.586] wcscmp (_String1="uk", _String2="..") returned 1 [0195.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68acb58 [0195.586] wcscpy (in: _Dest=0x68acb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.586] wcscat (in: _Dest=0x68acb58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.586] wcscat (in: _Dest=0x68acb58, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0195.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68acb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0195.587] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0195.587] wcscmp (_String1="vi", _String2=".") returned 1 [0195.587] wcscmp (_String1="vi", _String2="..") returned 1 [0195.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aca50 [0195.587] wcscpy (in: _Dest=0x68aca50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.587] wcscat (in: _Dest=0x68aca50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.587] wcscat (in: _Dest=0x68aca50, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0195.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68aca50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0195.588] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0195.588] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0195.588] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0195.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ac948 [0195.588] wcscpy (in: _Dest=0x68ac948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.588] wcscat (in: _Dest=0x68ac948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.588] wcscat (in: _Dest=0x68ac948, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0195.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0195.589] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0195.589] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0195.589] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0195.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ac420 [0195.589] wcscpy (in: _Dest=0x68ac420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0195.589] wcscat (in: _Dest=0x68ac420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0195.589] wcscat (in: _Dest=0x68ac420, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0195.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0195.590] FindNextFileW (in: hFindFile=0x66d2760, lpFindFileData=0x66ecb18 | out: lpFindFileData=0x66ecb18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0195.590] FindClose (in: hFindFile=0x66d2760 | out: hFindFile=0x66d2760) returned 1 [0195.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb18) returned 1 [0195.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee8008) returned 1 [0195.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17770) returned 1 Thread: id = 6557 os_tid = 0x15bc [0190.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x67531f0 [0190.908] wcscpy (in: _Dest=0x67531f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0190.908] wcscat (in: _Dest=0x67531f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0190.908] wcscat (in: _Dest=0x67531f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*" [0190.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675ef88 [0190.908] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x675ef88 | out: lpFindFileData=0x675ef88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0191.516] wcscmp (_String1=".", _String2=".") returned 0 [0191.516] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x675ef88 | out: lpFindFileData=0x675ef88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.516] wcscmp (_String1="..", _String2=".") returned 1 [0191.516] wcscmp (_String1="..", _String2="..") returned 0 [0191.516] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x675ef88 | out: lpFindFileData=0x675ef88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe665c880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0191.516] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0191.516] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0191.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765ae8 [0191.517] wcscpy (in: _Dest=0x6765ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0191.517] wcscat (in: _Dest=0x6765ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0191.517] wcscat (in: _Dest=0x6765ae8, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" [0196.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6765ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0196.975] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x675ef88 | out: lpFindFileData=0x675ef88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0196.975] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0196.975] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0196.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41ed8 [0196.976] wcscpy (in: _Dest=0x3d41ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0196.976] wcscat (in: _Dest=0x3d41ed8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0196.976] wcscat (in: _Dest=0x3d41ed8, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" [0196.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d41ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0196.977] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x675ef88 | out: lpFindFileData=0x675ef88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0196.977] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0196.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ef88) returned 1 [0196.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67531f0) returned 1 [0196.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18270) returned 1 Thread: id = 6558 os_tid = 0x123c [0190.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json")) returned 0x2020 [0191.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x129c [0193.259] GetFileSizeEx (in: hFile=0x129c, lpFileSize=0x969f91c | out: lpFileSize=0x969f91c*=232) returned 1 [0193.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0193.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0193.259] NtQuerySystemTime (in: CurrentTime=0x969f890 | out: CurrentTime=0x969f890*=132482711017320000) returned 0x0 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x6f5a4525 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x1796c7d4 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x1584bbf4 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x41c0ba00 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x7bb143f3 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x65c2f93e [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x7f549d00 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x21abaa30 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x5614b0f7 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x78a02dc1 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x2532a642 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x32d163be [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x950fdca [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x54183fb8 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x30420eb1 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x4dd76e90 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x7189b937 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x2cc63f24 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x584e278e [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x5d22da45 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x4fd8c8b [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x229094ad [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x3ab1f654 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x1959b18e [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x4ac37775 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x4a8137bb [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x21abaa30 [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x71429c8d [0193.259] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x1d436911 [0193.260] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x612240fd [0193.260] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x510240f4 [0193.260] RtlRandomEx (in: Seed=0x969f888 | out: Seed=0x969f888) returned 0x139a9c7a [0193.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684a120 [0193.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x684dd28 [0193.267] ReadFile (in: hFile=0x129c, lpBuffer=0x684a120, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x969f884, lpOverlapped=0x0 | out: lpBuffer=0x684a120*, lpNumberOfBytesRead=0x969f884*=0xe8, lpOverlapped=0x0) returned 1 [0193.269] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.269] WriteFile (in: hFile=0x129c, lpBuffer=0x684dd28*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x969f888, lpOverlapped=0x0 | out: lpBuffer=0x684dd28*, lpNumberOfBytesWritten=0x969f888*=0xe8, lpOverlapped=0x0) returned 1 [0195.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc2e8 [0195.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684dd28) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x684a120) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0f60) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe7e0) returned 1 [0195.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5960 [0195.699] SetFilePointerEx (in: hFile=0x129c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.699] WriteFile (in: hFile=0x129c, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x969f910, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x969f910*=0x10c, lpOverlapped=0x0) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc2e8) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0195.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0195.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23218 [0195.886] wcscpy (in: _Dest=0x3f23218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" [0195.886] wcscat (in: _Dest=0x3f23218, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.ac3a86" [0195.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0x969f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3e4d458 [0196.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4d458) returned 1 [0196.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6889278) returned 1 [0196.012] NtQueryInformationFile (in: FileHandle=0x129c, IoStatusBlock=0x969f860, FileInformation=0x969f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x969f860, FileInformation=0x969f868) returned 0x0 [0196.012] NtSetInformationFile (FileHandle=0x129c, IoStatusBlock=0x969f860, FileInformation=0x969f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23218) returned 1 [0196.164] FlushFileBuffers (hFile=0x129c) returned 1 [0196.806] CloseHandle (hObject=0x129c) returned 1 [0197.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12e96060 [0198.339] wcscpy (in: _Dest=0x12e96060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0198.339] wcscat (in: _Dest=0x12e96060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\AC3A86-Readme.txt" [0198.339] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0198.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.092] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x969f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x969f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.094] CloseHandle (hObject=0xac4) returned 1 [0200.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e96060) returned 1 [0200.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67560b0) returned 1 Thread: id = 6559 os_tid = 0x1240 [0190.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0199.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.429] GetLastError () returned 0x5 [0199.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 6560 os_tid = 0x12fc [0190.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0199.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.426] GetLastError () returned 0x5 [0199.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 6561 os_tid = 0x1048 [0190.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc")) returned 0x20 [0190.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0190.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.911] GetLastError () returned 0x5 [0190.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0190.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 6562 os_tid = 0xe94 [0190.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv")) returned 0x20 [0190.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0190.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.913] GetLastError () returned 0x5 [0190.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0190.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 6563 os_tid = 0x1904 [0190.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml")) returned 0x20 [0190.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0190.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.915] GetLastError () returned 0x5 [0190.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0190.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 6564 os_tid = 0x1910 [0190.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc")) returned 0x20 [0190.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0190.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.917] GetLastError () returned 0x5 [0190.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0190.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 6565 os_tid = 0x1914 [0190.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc")) returned 0x20 [0195.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0195.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.104] GetLastError () returned 0x5 [0195.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0195.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 6566 os_tid = 0x1918 [0190.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv")) returned 0x20 [0195.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0195.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.196] GetLastError () returned 0x5 [0195.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0195.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 6567 os_tid = 0x1c80 [0190.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml")) returned 0x20 [0195.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0195.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.176] GetLastError () returned 0x5 [0195.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0195.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 6568 os_tid = 0x1a3c [0190.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv")) returned 0x20 [0195.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0195.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.175] GetLastError () returned 0x5 [0195.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0195.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 6569 os_tid = 0x1a40 [0190.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc")) returned 0x20 [0195.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0195.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.174] GetLastError () returned 0x5 [0195.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0195.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 6570 os_tid = 0x1a44 [0190.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv")) returned 0x20 [0195.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0195.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.170] GetLastError () returned 0x5 [0195.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0195.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 6571 os_tid = 0x1a48 [0190.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml")) returned 0x20 [0195.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0195.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.195] GetLastError () returned 0x5 [0195.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0195.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 6572 os_tid = 0x1a4c [0190.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc")) returned 0x20 [0195.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0195.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.193] GetLastError () returned 0x5 [0195.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0195.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 6573 os_tid = 0x448 [0190.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv")) returned 0x20 [0195.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0195.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.192] GetLastError () returned 0x5 [0195.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0195.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 Thread: id = 6574 os_tid = 0x1964 [0190.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml")) returned 0x20 [0195.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0195.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.190] GetLastError () returned 0x5 [0195.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0195.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 Thread: id = 6575 os_tid = 0x1a50 [0190.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc")) returned 0x20 [0195.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0195.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.189] GetLastError () returned 0x5 [0195.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0195.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 6576 os_tid = 0x1a54 [0190.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc")) returned 0x20 [0195.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0195.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.187] GetLastError () returned 0x5 [0195.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0195.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 6577 os_tid = 0x1a58 [0190.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv")) returned 0x20 [0195.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0195.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.186] GetLastError () returned 0x5 [0195.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0195.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 6578 os_tid = 0x1a5c [0190.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml")) returned 0x20 [0195.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0195.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.184] GetLastError () returned 0x5 [0195.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0195.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 6579 os_tid = 0x1a60 [0190.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc")) returned 0x20 [0195.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0195.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.183] GetLastError () returned 0x5 [0195.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0195.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 6580 os_tid = 0x1650 [0190.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc")) returned 0x20 [0195.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0195.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.181] GetLastError () returned 0x5 [0195.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0195.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 6581 os_tid = 0x1548 [0190.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc")) returned 0x20 [0195.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0195.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.179] GetLastError () returned 0x5 [0195.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0195.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 6582 os_tid = 0x940 [0190.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc")) returned 0x20 [0195.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0195.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.178] GetLastError () returned 0x5 [0195.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0195.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 6583 os_tid = 0x1558 [0190.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc")) returned 0x20 [0195.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0195.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.205] GetLastError () returned 0x5 [0195.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0195.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 6584 os_tid = 0x1968 [0191.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc")) returned 0x20 [0195.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0195.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.203] GetLastError () returned 0x5 [0195.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0195.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 6585 os_tid = 0x1a64 [0191.252] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0198.868] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0213.338] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf4 [0213.338] GetFileSizeEx (in: hFile=0xdf4, lpFileSize=0xda6fa2c | out: lpFileSize=0xda6fa2c*=661) returned 1 [0213.338] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.339] ReadFile (in: hFile=0xdf4, lpBuffer=0xda6fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xda6fa18, lpOverlapped=0x0 | out: lpBuffer=0xda6fa08*, lpNumberOfBytesRead=0xda6fa18*=0x4, lpOverlapped=0x0) returned 1 [0213.341] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea510 [0213.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb0c8 [0213.342] NtQuerySystemTime (in: CurrentTime=0xda6f9a0 | out: CurrentTime=0xda6f9a0*=132482711200620000) returned 0x0 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x68137244 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x6b551fdb [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x77029370 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x53ca66dc [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x11c572ce [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x24213694 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x41c2bf2b [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x709d9b0e [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x26b08ba1 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x516a5c5e [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x21e1dfd1 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x1e1e430d [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x58ca8396 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x52a4acec [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x4a66d4a9 [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x1b55456a [0213.342] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x423653fa [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x62d98c0d [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x36f32b18 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x17ebde69 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x681d65e2 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x4a201ee6 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x38aca605 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x26fcfb52 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x4534f70b [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0xbc28ee7 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x41ab9cc6 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x412f2811 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x3cd9f6c3 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x1af14c0d [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x3924da98 [0213.343] RtlRandomEx (in: Seed=0xda6f998 | out: Seed=0xda6f998) returned 0x6b56ebf1 [0213.353] ReadFile (in: hFile=0xdf4, lpBuffer=0x6a20120, nNumberOfBytesToRead=0x295, lpNumberOfBytesRead=0xda6f994, lpOverlapped=0x0 | out: lpBuffer=0x6a20120*, lpNumberOfBytesRead=0xda6f994*=0x295, lpOverlapped=0x0) returned 1 [0213.353] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.353] WriteFile (in: hFile=0xdf4, lpBuffer=0x6a23d28*, nNumberOfBytesToWrite=0x295, lpNumberOfBytesWritten=0xda6f998, lpOverlapped=0x0 | out: lpBuffer=0x6a23d28*, lpNumberOfBytesWritten=0xda6f998*=0x295, lpOverlapped=0x0) returned 1 [0216.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed5d0 [0216.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed5f8 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed5f8) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a23d28) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a20120) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0216.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a510) returned 1 [0216.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5f98 [0216.422] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.422] WriteFile (in: hFile=0xdf4, lpBuffer=0x675e958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xda6fa20, lpOverlapped=0x0 | out: lpBuffer=0x675e958*, lpNumberOfBytesWritten=0xda6fa20*=0x10c, lpOverlapped=0x0) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e958) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5fc8) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed5f8) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f98) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed5d0) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea510) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0f0) returned 1 [0216.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb118) returned 1 [0216.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x67778d0 [0216.585] wcscpy (in: _Dest=0x67778d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" [0216.585] wcscat (in: _Dest=0x67778d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.ac3a86" [0216.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0xda6f998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66cf080 [0223.805] FlushFileBuffers (hFile=0xdf4) returned 1 [0223.814] CloseHandle (hObject=0xdf4) returned 1 [0224.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x678b208 [0224.663] wcscpy (in: _Dest=0x678b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0224.663] wcscat (in: _Dest=0x678b208, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0224.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0224.663] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.219] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xda6f9b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xda6f9b4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.221] CloseHandle (hObject=0x1038) returned 1 [0225.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b208) returned 1 [0225.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408e8) returned 1 Thread: id = 6586 os_tid = 0x196c [0191.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0201.872] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0213.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1694 [0213.194] GetFileSizeEx (in: hFile=0x1694, lpFileSize=0xfeaf8bc | out: lpFileSize=0xfeaf8bc*=668) returned 1 [0213.195] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.195] ReadFile (in: hFile=0x1694, lpBuffer=0xfeaf898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfeaf8a8, lpOverlapped=0x0 | out: lpBuffer=0xfeaf898*, lpNumberOfBytesRead=0xfeaf8a8*=0x4, lpOverlapped=0x0) returned 1 [0213.197] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8a8 [0213.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7e0 [0213.197] NtQuerySystemTime (in: CurrentTime=0xfeaf830 | out: CurrentTime=0xfeaf830*=132482711199060000) returned 0x0 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x870b287 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x5e287622 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x5de58aec [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x293fe0ae [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0xb20abb1 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x25733f61 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x187929af [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x69f4b622 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x79c4d21 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0xe64255e [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x3deb6005 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x7fc1d301 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x66fc6378 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x6a3e6d7a [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x7e427a3a [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x34d8609c [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x190674f5 [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x7edce27a [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x34ed170c [0213.197] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x6a30383d [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x4d50d35d [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x6a878b34 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x5a4b8673 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x10f6c291 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x2ea1f6ed [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x40dcec89 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0xf36d62b [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x4d50d35d [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x52649b26 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x1f429ee9 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x2b3587f2 [0213.198] RtlRandomEx (in: Seed=0xfeaf828 | out: Seed=0xfeaf828) returned 0x7770bc21 [0213.206] ReadFile (in: hFile=0x1694, lpBuffer=0x13025870, nNumberOfBytesToRead=0x29c, lpNumberOfBytesRead=0xfeaf824, lpOverlapped=0x0 | out: lpBuffer=0x13025870*, lpNumberOfBytesRead=0xfeaf824*=0x29c, lpOverlapped=0x0) returned 1 [0213.206] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.206] WriteFile (in: hFile=0x1694, lpBuffer=0x13029478*, nNumberOfBytesToWrite=0x29c, lpNumberOfBytesWritten=0xfeaf828, lpOverlapped=0x0 | out: lpBuffer=0x13029478*, lpNumberOfBytesWritten=0xfeaf828*=0x29c, lpOverlapped=0x0) returned 1 [0215.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed440 [0215.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed468 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed468) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13029478) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13025870) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0215.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a120) returned 1 [0215.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5db8 [0215.912] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.912] WriteFile (in: hFile=0x1694, lpBuffer=0x675e3e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfeaf8b0, lpOverlapped=0x0 | out: lpBuffer=0x675e3e0*, lpNumberOfBytesWritten=0xfeaf8b0*=0x10c, lpOverlapped=0x0) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5de8) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed468) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5db8) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed440) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8a8) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea808) returned 1 [0216.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea790) returned 1 [0216.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678bbc8 [0216.557] wcscpy (in: _Dest=0x678bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" [0216.558] wcscat (in: _Dest=0x678bbc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.ac3a86" [0216.558] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xfeaf828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cef28 [0225.498] FlushFileBuffers (hFile=0x1694) returned 1 [0225.566] CloseHandle (hObject=0x1694) returned 1 [0225.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b478 [0225.571] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0225.572] wcscat (in: _Dest=0x678b478, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\AC3A86-Readme.txt" [0225.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0225.573] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1694 [0225.575] WriteFile (in: hFile=0x1694, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfeaf844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfeaf844*=0x8b9, lpOverlapped=0x0) returned 1 [0225.578] CloseHandle (hObject=0x1694) returned 1 [0225.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b478) returned 1 [0225.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67639c0) returned 1 Thread: id = 6587 os_tid = 0x1a68 [0191.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x6766f18 [0191.253] wcscpy (in: _Dest=0x6766f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0191.253] wcscat (in: _Dest=0x6766f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0191.253] wcscat (in: _Dest=0x6766f18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*" [0191.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca948 [0191.253] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*", lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0191.542] wcscmp (_String1=".", _String2=".") returned 0 [0191.542] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.543] wcscmp (_String1="..", _String2=".") returned 1 [0191.543] wcscmp (_String1="..", _String2="..") returned 0 [0191.543] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0191.543] wcscmp (_String1="ar", _String2=".") returned 1 [0191.543] wcscmp (_String1="ar", _String2="..") returned 1 [0191.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc0d8 [0191.543] wcscpy (in: _Dest=0x30bc0d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0191.543] wcscat (in: _Dest=0x30bc0d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0191.543] wcscat (in: _Dest=0x30bc0d8, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0198.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc0d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0198.565] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0198.565] wcscmp (_String1="bg", _String2=".") returned 1 [0198.565] wcscmp (_String1="bg", _String2="..") returned 1 [0198.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bcf10 [0198.565] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.565] wcscat (in: _Dest=0x30bcf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.566] wcscat (in: _Dest=0x30bcf10, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0198.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bcf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0198.571] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0198.571] wcscmp (_String1="ca", _String2=".") returned 1 [0198.571] wcscmp (_String1="ca", _String2="..") returned 1 [0198.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bd140 [0198.571] wcscpy (in: _Dest=0x30bd140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.571] wcscat (in: _Dest=0x30bd140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.571] wcscat (in: _Dest=0x30bd140, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0198.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bd140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0198.572] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0198.572] wcscmp (_String1="cs", _String2=".") returned 1 [0198.572] wcscmp (_String1="cs", _String2="..") returned 1 [0198.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc308 [0198.572] wcscpy (in: _Dest=0x30bc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.572] wcscat (in: _Dest=0x30bc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.572] wcscat (in: _Dest=0x30bc308, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0198.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0198.573] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0198.574] wcscmp (_String1="da", _String2=".") returned 1 [0198.574] wcscmp (_String1="da", _String2="..") returned 1 [0198.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc880 [0198.574] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.574] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.574] wcscat (in: _Dest=0x30bc880, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0198.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0198.575] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0198.575] wcscmp (_String1="de", _String2=".") returned 1 [0198.575] wcscmp (_String1="de", _String2="..") returned 1 [0198.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bbc78 [0198.575] wcscpy (in: _Dest=0x30bbc78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.575] wcscat (in: _Dest=0x30bbc78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.575] wcscat (in: _Dest=0x30bbc78, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0198.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bbc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0198.576] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0198.576] wcscmp (_String1="el", _String2=".") returned 1 [0198.576] wcscmp (_String1="el", _String2="..") returned 1 [0198.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bd370 [0198.576] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.576] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.576] wcscat (in: _Dest=0x30bd370, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0198.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bd370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0198.577] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0198.577] wcscmp (_String1="en", _String2=".") returned 1 [0198.577] wcscmp (_String1="en", _String2="..") returned 1 [0198.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc420 [0198.578] wcscpy (in: _Dest=0x30bc420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.578] wcscat (in: _Dest=0x30bc420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.578] wcscat (in: _Dest=0x30bc420, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0198.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0198.579] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0198.579] wcscmp (_String1="es", _String2=".") returned 1 [0198.579] wcscmp (_String1="es", _String2="..") returned 1 [0198.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc998 [0198.579] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.579] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.579] wcscat (in: _Dest=0x30bc998, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0198.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0198.580] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0198.580] wcscmp (_String1="fi", _String2=".") returned 1 [0198.580] wcscmp (_String1="fi", _String2="..") returned 1 [0198.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bd258 [0198.580] wcscpy (in: _Dest=0x30bd258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.580] wcscat (in: _Dest=0x30bd258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.580] wcscat (in: _Dest=0x30bd258, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0198.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bd258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0198.582] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0198.582] wcscmp (_String1="fil", _String2=".") returned 1 [0198.582] wcscmp (_String1="fil", _String2="..") returned 1 [0198.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x674f080 [0198.582] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.582] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.582] wcscat (in: _Dest=0x674f080, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0198.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674f080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0198.583] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0198.583] wcscmp (_String1="fr", _String2=".") returned 1 [0198.583] wcscmp (_String1="fr", _String2="..") returned 1 [0198.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bb930 [0198.583] wcscpy (in: _Dest=0x30bb930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.583] wcscat (in: _Dest=0x30bb930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.583] wcscat (in: _Dest=0x30bb930, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0198.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bb930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0198.584] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0198.584] wcscmp (_String1="he", _String2=".") returned 1 [0198.584] wcscmp (_String1="he", _String2="..") returned 1 [0198.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bcab0 [0198.585] wcscpy (in: _Dest=0x30bcab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.585] wcscat (in: _Dest=0x30bcab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.585] wcscat (in: _Dest=0x30bcab0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0198.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bcab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0198.586] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0198.586] wcscmp (_String1="hi", _String2=".") returned 1 [0198.586] wcscmp (_String1="hi", _String2="..") returned 1 [0198.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bb818 [0198.586] wcscpy (in: _Dest=0x30bb818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.586] wcscat (in: _Dest=0x30bb818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.586] wcscat (in: _Dest=0x30bb818, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0198.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bb818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0198.587] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0198.587] wcscmp (_String1="hr", _String2=".") returned 1 [0198.587] wcscmp (_String1="hr", _String2="..") returned 1 [0198.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc768 [0198.587] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.587] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.587] wcscat (in: _Dest=0x30bc768, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0198.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0198.588] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0198.588] wcscmp (_String1="hu", _String2=".") returned 1 [0198.588] wcscmp (_String1="hu", _String2="..") returned 1 [0198.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x30bc650 [0198.589] wcscpy (in: _Dest=0x30bc650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.589] wcscat (in: _Dest=0x30bc650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.589] wcscat (in: _Dest=0x30bc650, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0198.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x30bc650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0198.590] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0198.590] wcscmp (_String1="id", _String2=".") returned 1 [0198.590] wcscmp (_String1="id", _String2="..") returned 1 [0198.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751260 [0198.590] wcscpy (in: _Dest=0x6751260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.590] wcscat (in: _Dest=0x6751260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.590] wcscat (in: _Dest=0x6751260, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0198.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0198.591] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0198.591] wcscmp (_String1="it", _String2=".") returned 1 [0198.591] wcscmp (_String1="it", _String2="..") returned 1 [0198.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751378 [0198.591] wcscpy (in: _Dest=0x6751378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.591] wcscat (in: _Dest=0x6751378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.591] wcscat (in: _Dest=0x6751378, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0198.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0198.592] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0198.592] wcscmp (_String1="ja", _String2=".") returned 1 [0198.592] wcscmp (_String1="ja", _String2="..") returned 1 [0198.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751490 [0198.592] wcscpy (in: _Dest=0x6751490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.592] wcscat (in: _Dest=0x6751490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.592] wcscat (in: _Dest=0x6751490, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0198.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0198.593] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0198.593] wcscmp (_String1="ko", _String2=".") returned 1 [0198.594] wcscmp (_String1="ko", _String2="..") returned 1 [0198.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67515a8 [0198.594] wcscpy (in: _Dest=0x67515a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.594] wcscat (in: _Dest=0x67515a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.594] wcscat (in: _Dest=0x67515a8, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0198.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67515a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48 [0198.595] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0198.595] wcscmp (_String1="lt", _String2=".") returned 1 [0198.595] wcscmp (_String1="lt", _String2="..") returned 1 [0198.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67516c0 [0198.595] wcscpy (in: _Dest=0x67516c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.595] wcscat (in: _Dest=0x67516c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.595] wcscat (in: _Dest=0x67516c0, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0198.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67516c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0198.596] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0198.596] wcscmp (_String1="lv", _String2=".") returned 1 [0198.596] wcscmp (_String1="lv", _String2="..") returned 1 [0198.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67517d8 [0198.596] wcscpy (in: _Dest=0x67517d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.596] wcscat (in: _Dest=0x67517d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.596] wcscat (in: _Dest=0x67517d8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0198.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67517d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0198.597] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0198.597] wcscmp (_String1="nl", _String2=".") returned 1 [0198.597] wcscmp (_String1="nl", _String2="..") returned 1 [0198.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67518f0 [0198.597] wcscpy (in: _Dest=0x67518f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.598] wcscat (in: _Dest=0x67518f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.598] wcscat (in: _Dest=0x67518f0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0198.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67518f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0198.599] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0198.599] wcscmp (_String1="no", _String2=".") returned 1 [0198.599] wcscmp (_String1="no", _String2="..") returned 1 [0198.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751a08 [0198.599] wcscpy (in: _Dest=0x6751a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.599] wcscat (in: _Dest=0x6751a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.599] wcscat (in: _Dest=0x6751a08, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0198.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0198.600] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0198.600] wcscmp (_String1="pl", _String2=".") returned 1 [0198.600] wcscmp (_String1="pl", _String2="..") returned 1 [0198.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751b20 [0198.600] wcscpy (in: _Dest=0x6751b20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.600] wcscat (in: _Dest=0x6751b20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.600] wcscat (in: _Dest=0x6751b20, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0198.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0198.601] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0198.601] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0198.601] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0198.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674f9c0 [0198.602] wcscpy (in: _Dest=0x674f9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.602] wcscat (in: _Dest=0x674f9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.602] wcscat (in: _Dest=0x674f9c0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0198.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674f9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0198.603] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0198.603] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0198.603] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0198.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674fae8 [0198.603] wcscpy (in: _Dest=0x674fae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.603] wcscat (in: _Dest=0x674fae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.603] wcscat (in: _Dest=0x674fae8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0198.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x674fae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0198.604] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0198.604] wcscmp (_String1="ro", _String2=".") returned 1 [0198.604] wcscmp (_String1="ro", _String2="..") returned 1 [0198.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751c38 [0198.604] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0198.604] wcscat (in: _Dest=0x6751c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0198.604] wcscat (in: _Dest=0x6751c38, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0198.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0199.373] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0199.373] wcscmp (_String1="ru", _String2=".") returned 1 [0199.373] wcscmp (_String1="ru", _String2="..") returned 1 [0199.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x69c2a08 [0199.373] wcscpy (in: _Dest=0x69c2a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.373] wcscat (in: _Dest=0x69c2a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.373] wcscat (in: _Dest=0x69c2a08, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0201.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x69c2a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0201.278] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0201.278] wcscmp (_String1="sk", _String2=".") returned 1 [0201.278] wcscmp (_String1="sk", _String2="..") returned 1 [0201.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6752610 [0201.278] wcscpy (in: _Dest=0x6752610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.278] wcscat (in: _Dest=0x6752610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.278] wcscat (in: _Dest=0x6752610, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0201.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0201.279] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0201.279] wcscmp (_String1="sl", _String2=".") returned 1 [0201.279] wcscmp (_String1="sl", _String2="..") returned 1 [0201.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6750e00 [0201.279] wcscpy (in: _Dest=0x6750e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.279] wcscat (in: _Dest=0x6750e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.279] wcscat (in: _Dest=0x6750e00, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0201.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6750e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0201.281] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0201.281] wcscmp (_String1="sr", _String2=".") returned 1 [0201.281] wcscmp (_String1="sr", _String2="..") returned 1 [0201.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6752728 [0201.281] wcscpy (in: _Dest=0x6752728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.281] wcscat (in: _Dest=0x6752728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.281] wcscat (in: _Dest=0x6752728, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0201.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6752728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0201.282] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0201.282] wcscmp (_String1="sv", _String2=".") returned 1 [0201.282] wcscmp (_String1="sv", _String2="..") returned 1 [0201.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x6751a08 [0201.283] wcscpy (in: _Dest=0x6751a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.283] wcscat (in: _Dest=0x6751a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.283] wcscat (in: _Dest=0x6751a08, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0201.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6751a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0201.284] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0201.284] wcscmp (_String1="th", _String2=".") returned 1 [0201.284] wcscmp (_String1="th", _String2="..") returned 1 [0201.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67518f0 [0201.284] wcscpy (in: _Dest=0x67518f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.284] wcscat (in: _Dest=0x67518f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.284] wcscat (in: _Dest=0x67518f0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0201.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67518f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0201.286] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0201.286] wcscmp (_String1="tr", _String2=".") returned 1 [0201.286] wcscmp (_String1="tr", _String2="..") returned 1 [0201.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67517d8 [0201.286] wcscpy (in: _Dest=0x67517d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.286] wcscat (in: _Dest=0x67517d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.286] wcscat (in: _Dest=0x67517d8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0201.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67517d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0201.287] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0201.287] wcscmp (_String1="uk", _String2=".") returned 1 [0201.287] wcscmp (_String1="uk", _String2="..") returned 1 [0201.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67516c0 [0201.288] wcscpy (in: _Dest=0x67516c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.288] wcscat (in: _Dest=0x67516c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.288] wcscat (in: _Dest=0x67516c0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0201.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67516c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0201.289] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0201.289] wcscmp (_String1="vi", _String2=".") returned 1 [0201.289] wcscmp (_String1="vi", _String2="..") returned 1 [0201.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x67515a8 [0201.289] wcscpy (in: _Dest=0x67515a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.289] wcscat (in: _Dest=0x67515a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.289] wcscat (in: _Dest=0x67515a8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0201.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x67515a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0201.290] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0201.290] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0201.290] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0201.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759080 [0201.291] wcscpy (in: _Dest=0x6759080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.291] wcscat (in: _Dest=0x6759080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.291] wcscat (in: _Dest=0x6759080, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0201.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6759080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0201.292] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0201.292] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0201.292] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0201.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6758ab8 [0201.292] wcscpy (in: _Dest=0x6758ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.292] wcscat (in: _Dest=0x6758ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.292] wcscat (in: _Dest=0x6758ab8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0201.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6758ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0201.294] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x66ca948 | out: lpFindFileData=0x66ca948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0201.294] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0201.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca948) returned 1 [0201.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766f18) returned 1 [0201.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cab8) returned 1 Thread: id = 6588 os_tid = 0x1970 [0191.255] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 0x2020 [0191.256] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", dwFileAttributes=0x20) returned 1 [0193.270] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2348 [0193.270] GetFileSizeEx (in: hFile=0x2348, lpFileSize=0xdf7fe3c | out: lpFileSize=0xdf7fe3c*=362) returned 1 [0193.270] SetFilePointerEx (in: hFile=0x2348, liDistanceToMove=0x166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.270] ReadFile (in: hFile=0x2348, lpBuffer=0xdf7fe18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdf7fe28, lpOverlapped=0x0 | out: lpBuffer=0xdf7fe18*, lpNumberOfBytesRead=0xdf7fe28*=0x4, lpOverlapped=0x0) returned 1 [0193.272] SetFilePointerEx (in: hFile=0x2348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0193.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0193.272] NtQuerySystemTime (in: CurrentTime=0xdf7fdb0 | out: CurrentTime=0xdf7fdb0*=132482711017476000) returned 0x0 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x4a2b253b [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x4fd5f890 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x71429c8d [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x7535761f [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x73f4d44d [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x62f48598 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x6229d2b7 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x7c0d46d8 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x73f4d44d [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x4fae0e95 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x54d34e67 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x601c443b [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x38e5d856 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x7668603f [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x58c91249 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x6ef7e2e6 [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x65a3362c [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x4d44156f [0193.272] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x584e278e [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x5517cc76 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x5b7d97e4 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x71759e36 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x5a0f8f35 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x65f5d85 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x1959b18e [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x32920b88 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x1f6334cd [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x3e41997f [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x584a7959 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x3d791956 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x4fae0e95 [0193.273] RtlRandomEx (in: Seed=0xdf7fda8 | out: Seed=0xdf7fda8) returned 0x23473f4a [0193.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6851930 [0193.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6855538 [0193.300] ReadFile (in: hFile=0x2348, lpBuffer=0x6851930, nNumberOfBytesToRead=0x16a, lpNumberOfBytesRead=0xdf7fda4, lpOverlapped=0x0 | out: lpBuffer=0x6851930*, lpNumberOfBytesRead=0xdf7fda4*=0x16a, lpOverlapped=0x0) returned 1 [0193.300] SetFilePointerEx (in: hFile=0x2348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.300] WriteFile (in: hFile=0x2348, lpBuffer=0x6855538*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0xdf7fda8, lpOverlapped=0x0 | out: lpBuffer=0x6855538*, lpNumberOfBytesWritten=0xdf7fda8*=0x16a, lpOverlapped=0x0) returned 1 [0195.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0195.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0195.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0195.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6855538) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6851930) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66feb88) returned 1 [0195.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5690 [0195.702] SetFilePointerEx (in: hFile=0x2348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.702] WriteFile (in: hFile=0x2348, lpBuffer=0x69c3840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdf7fe30, lpOverlapped=0x0 | out: lpBuffer=0x69c3840*, lpNumberOfBytesWritten=0xdf7fe30*=0x10c, lpOverlapped=0x0) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3840) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0195.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0195.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8cb8 [0195.884] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" [0195.885] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.ac3a86" [0195.885] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.ac3a86", NtPathName=0xdf7fda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a6e8 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a6e8) returned 1 [0196.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6894e10) returned 1 [0196.011] NtQueryInformationFile (in: FileHandle=0x2348, IoStatusBlock=0xdf7fd80, FileInformation=0xdf7fd88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdf7fd80, FileInformation=0xdf7fd88) returned 0x0 [0196.011] NtSetInformationFile (FileHandle=0x2348, IoStatusBlock=0xdf7fd80, FileInformation=0xdf7fd88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0196.161] FlushFileBuffers (hFile=0x2348) returned 1 [0196.805] CloseHandle (hObject=0x2348) returned 1 [0197.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e92060 [0198.338] wcscpy (in: _Dest=0x12e92060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0198.338] wcscat (in: _Dest=0x12e92060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\AC3A86-Readme.txt" [0198.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ac3a86-readme.txt")) returned 0xffffffff [0198.338] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.086] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdf7fdc4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdf7fdc4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.087] CloseHandle (hObject=0xac4) returned 1 [0200.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e92060) returned 1 [0200.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763ae8) returned 1 Thread: id = 6589 os_tid = 0x1a6c [0191.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 0x2020 [0191.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0193.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2344 [0193.301] GetFileSizeEx (in: hFile=0x2344, lpFileSize=0xc86fa4c | out: lpFileSize=0xc86fa4c*=210) returned 1 [0193.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0193.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a650 [0193.302] NtQuerySystemTime (in: CurrentTime=0xc86f9c0 | out: CurrentTime=0xc86f9c0*=132482711017788000) returned 0x0 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x5eb145c2 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x4bcb19fb [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x5aaee7a7 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x4b8a8d64 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x1b163fc6 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x21ee085f [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x41dcb695 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x3f0ffc50 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x4d89389c [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x70e8fccb [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x1b5af74b [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x950fdca [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x3ab6cfb4 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x491ecd85 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x5b571936 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x838f4fc [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x3a45ad20 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x71bb302c [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x42986cd0 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x321eca2b [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x2c45b4e4 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x6bfec60a [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0xafc2109 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x32d163be [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x74ad9afc [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x398ed7bf [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x5b571936 [0193.302] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x1a062cbe [0193.303] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x795da517 [0193.303] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x190f2ed8 [0193.303] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x2ca93b45 [0193.303] RtlRandomEx (in: Seed=0xc86f9b8 | out: Seed=0xc86f9b8) returned 0x1a857d6 [0193.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6859140 [0193.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x685cd48 [0193.311] ReadFile (in: hFile=0x2344, lpBuffer=0x6859140, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xc86f9b4, lpOverlapped=0x0 | out: lpBuffer=0x6859140*, lpNumberOfBytesRead=0xc86f9b4*=0xd2, lpOverlapped=0x0) returned 1 [0193.313] SetFilePointerEx (in: hFile=0x2344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.313] WriteFile (in: hFile=0x2344, lpBuffer=0x685cd48*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xc86f9b8, lpOverlapped=0x0 | out: lpBuffer=0x685cd48*, lpNumberOfBytesWritten=0xc86f9b8*=0xd2, lpOverlapped=0x0) returned 1 [0196.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0196.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0196.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0196.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x685cd48) returned 1 [0196.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6859140) returned 1 [0196.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0196.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe0d8) returned 1 [0196.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.406] SetFilePointerEx (in: hFile=0x2344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.406] WriteFile (in: hFile=0x2344, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc86fa40, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xc86fa40*=0x10c, lpOverlapped=0x0) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0196.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0196.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.409] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" [0196.409] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.ac3a86" [0196.409] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.ac3a86", NtPathName=0xc86f9b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.412] FlushFileBuffers (hFile=0x2344) returned 1 [0196.823] CloseHandle (hObject=0x2344) returned 1 [0197.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ea2060 [0198.341] wcscpy (in: _Dest=0x12ea2060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0198.341] wcscat (in: _Dest=0x12ea2060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\AC3A86-Readme.txt" [0198.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ac3a86-readme.txt")) returned 0xffffffff [0198.342] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.126] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc86f9d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc86f9d4*=0x8b9, lpOverlapped=0x0) returned 1 [0200.128] CloseHandle (hObject=0xac4) returned 1 [0200.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2060) returned 1 [0200.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763c10) returned 1 Thread: id = 6590 os_tid = 0x1a70 [0191.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0191.258] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0193.313] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x246c [0193.314] GetFileSizeEx (in: hFile=0x246c, lpFileSize=0x342f994 | out: lpFileSize=0x342f994*=222) returned 1 [0193.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a650 [0193.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0193.314] NtQuerySystemTime (in: CurrentTime=0x342f908 | out: CurrentTime=0x342f908*=132482711017944000) returned 0x0 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x776a6414 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x7cafacac [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x6d0ce667 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x5a0f8f35 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x6072ebba [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x6719d37b [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x41dcb695 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x1f20ff2d [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x5c4d780 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x70b0ed79 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x4ef5ebe9 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x6de7c86f [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x62704f1a [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x60650230 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x4dd76e90 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x4a8137bb [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x2b442417 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x1d436911 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x11367deb [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x1fec923d [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x1a84f64b [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x631947b5 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x46ddff7c [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x2b90da64 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x1b5af74b [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x79d5c8b6 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x48d62aa2 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x7fd6c9af [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x30420eb1 [0193.314] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x738ca6dc [0193.315] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0x36d768bd [0193.315] RtlRandomEx (in: Seed=0x342f900 | out: Seed=0x342f900) returned 0xe9b6a8f [0193.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6860950 [0193.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6864558 [0193.322] ReadFile (in: hFile=0x246c, lpBuffer=0x6860950, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x342f8fc, lpOverlapped=0x0 | out: lpBuffer=0x6860950*, lpNumberOfBytesRead=0x342f8fc*=0xde, lpOverlapped=0x0) returned 1 [0193.324] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.324] WriteFile (in: hFile=0x246c, lpBuffer=0x6864558*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x342f900, lpOverlapped=0x0 | out: lpBuffer=0x6864558*, lpNumberOfBytesWritten=0x342f900*=0xde, lpOverlapped=0x0) returned 1 [0196.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0196.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca530 [0196.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca530) returned 1 [0196.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6864558) returned 1 [0196.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6860950) returned 1 [0196.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0196.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe2d0) returned 1 [0196.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0196.431] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.431] WriteFile (in: hFile=0x246c, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x342f988, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0x342f988*=0x10c, lpOverlapped=0x0) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca530) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0197.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0197.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40c90 [0197.521] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" [0197.521] wcscat (in: _Dest=0x3d40c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.ac3a86" [0197.521] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0x342f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6768c00 [0197.890] FlushFileBuffers (hFile=0x246c) returned 1 [0197.901] CloseHandle (hObject=0x246c) returned 1 [0198.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67799c0 [0198.049] wcscpy (in: _Dest=0x67799c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0198.049] wcscat (in: _Dest=0x67799c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\AC3A86-Readme.txt" [0198.049] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0198.050] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x184c [0199.106] WriteFile (in: hFile=0x184c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x342f91c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x342f91c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.892] CloseHandle (hObject=0x184c) returned 1 [0199.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67799c0) returned 1 [0199.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763d38) returned 1 Thread: id = 6591 os_tid = 0x1a74 [0191.258] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0191.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0193.361] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f0 [0193.362] GetFileSizeEx (in: hFile=0x14f0, lpFileSize=0xa11fe0c | out: lpFileSize=0xa11fe0c*=234) returned 1 [0193.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0193.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0193.362] NtQuerySystemTime (in: CurrentTime=0xa11fd80 | out: CurrentTime=0xa11fd80*=132482711018412000) returned 0x0 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x24b5a584 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2bc52aa4 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x6d46fc60 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x5e7b2940 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x4f7e54ed [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x34e75bfa [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x415db775 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x24d8a6d8 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x35dd0a63 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x1c22795b [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x51fea1fb [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x313e3050 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x3ffb0ebe [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x6589fbfa [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0xf6a6cec [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x66dff605 [0193.362] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x7cb2e11c [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x5632f7ff [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x55892d00 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2d61bc3f [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2c661e29 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2bc129d0 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x691e070e [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2cf117e4 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x65c2f93e [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x257734c0 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x1a70d0d6 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2b1ded3 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0xde9fb9f [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x2cc63f24 [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x503b59db [0193.363] RtlRandomEx (in: Seed=0xa11fd78 | out: Seed=0xa11fd78) returned 0x704f92ab [0193.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6968d08 [0193.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x696c910 [0193.372] ReadFile (in: hFile=0x14f0, lpBuffer=0x6968d08, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xa11fd74, lpOverlapped=0x0 | out: lpBuffer=0x6968d08*, lpNumberOfBytesRead=0xa11fd74*=0xea, lpOverlapped=0x0) returned 1 [0193.374] SetFilePointerEx (in: hFile=0x14f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.374] WriteFile (in: hFile=0x14f0, lpBuffer=0x696c910*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xa11fd78, lpOverlapped=0x0 | out: lpBuffer=0x696c910*, lpNumberOfBytesWritten=0xa11fd78*=0xea, lpOverlapped=0x0) returned 1 [0196.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0196.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0196.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0196.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x696c910) returned 1 [0196.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6968d08) returned 1 [0196.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0196.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe5e8) returned 1 [0196.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.363] SetFilePointerEx (in: hFile=0x14f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.363] WriteFile (in: hFile=0x14f0, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa11fe00, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xa11fe00*=0x10c, lpOverlapped=0x0) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0196.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.365] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" [0196.365] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.ac3a86" [0196.365] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xa11fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.368] FlushFileBuffers (hFile=0x14f0) returned 1 [0196.822] CloseHandle (hObject=0x14f0) returned 1 [0197.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12e9e060 [0198.340] wcscpy (in: _Dest=0x12e9e060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0198.341] wcscat (in: _Dest=0x12e9e060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\AC3A86-Readme.txt" [0198.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0198.341] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.123] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa11fd94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa11fd94*=0x8b9, lpOverlapped=0x0) returned 1 [0200.125] CloseHandle (hObject=0xac4) returned 1 [0200.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e060) returned 1 [0200.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763e60) returned 1 Thread: id = 6592 os_tid = 0x1a78 [0191.259] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0191.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.375] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1988 [0193.375] GetFileSizeEx (in: hFile=0x1988, lpFileSize=0xd08fa34 | out: lpFileSize=0xd08fa34*=295) returned 1 [0193.375] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.375] ReadFile (in: hFile=0x1988, lpBuffer=0xd08fa10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd08fa20, lpOverlapped=0x0 | out: lpBuffer=0xd08fa10*, lpNumberOfBytesRead=0xd08fa20*=0x4, lpOverlapped=0x0) returned 1 [0193.377] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2d8 [0193.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0193.377] NtQuerySystemTime (in: CurrentTime=0xd08f9a8 | out: CurrentTime=0xd08f9a8*=132482711018568000) returned 0x0 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x791281b3 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x691e070e [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x52b529b8 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x4beeee66 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x74d06ce9 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x4ac37775 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x2b846492 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x1ac8e691 [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x7461ccce [0193.377] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x1be380b9 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x68253ca3 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x1a67afae [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x7abd4338 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x7f24c10b [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x563477d6 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x662ba69 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x29333c8d [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x37716f47 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x5cd22ab6 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x86807f7 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x67691980 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x27f905ba [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x1bc44efb [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x324e54d7 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x18cb5385 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x9a09a1d [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x42ea1493 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x2d48d1ad [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x6b3a5c76 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x4b064955 [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0x23546afa [0193.378] RtlRandomEx (in: Seed=0xd08f9a0 | out: Seed=0xd08f9a0) returned 0xaaaf0f2 [0193.387] ReadFile (in: hFile=0x1988, lpBuffer=0x6970518, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0xd08f99c, lpOverlapped=0x0 | out: lpBuffer=0x6970518*, lpNumberOfBytesRead=0xd08f99c*=0x127, lpOverlapped=0x0) returned 1 [0193.387] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.388] WriteFile (in: hFile=0x1988, lpBuffer=0x6974120*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0xd08f9a0, lpOverlapped=0x0 | out: lpBuffer=0x6974120*, lpNumberOfBytesWritten=0xd08f9a0*=0x127, lpOverlapped=0x0) returned 1 [0196.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca530 [0196.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0196.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0196.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6974120) returned 1 [0196.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6970518) returned 1 [0196.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0196.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe870) returned 1 [0196.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.423] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.423] WriteFile (in: hFile=0x1988, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd08fa28, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xd08fa28*=0x10c, lpOverlapped=0x0) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca530) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0196.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0196.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.425] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" [0196.425] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.ac3a86" [0196.425] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xd08f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0197.588] FlushFileBuffers (hFile=0x1988) returned 1 [0197.592] CloseHandle (hObject=0x1988) returned 1 [0197.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779648 [0197.828] wcscpy (in: _Dest=0x6779648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0197.828] wcscat (in: _Dest=0x6779648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\AC3A86-Readme.txt" [0197.828] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0197.828] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0198.297] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd08f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd08f9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0198.299] CloseHandle (hObject=0x1988) returned 1 [0198.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779648) returned 1 [0198.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763f88) returned 1 Thread: id = 6593 os_tid = 0x1a7c [0191.260] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0191.260] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0193.388] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1594 [0193.388] GetFileSizeEx (in: hFile=0x1594, lpFileSize=0xde6f77c | out: lpFileSize=0xde6f77c*=324) returned 1 [0193.388] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.388] ReadFile (in: hFile=0x1594, lpBuffer=0xde6f758, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xde6f768, lpOverlapped=0x0 | out: lpBuffer=0xde6f758*, lpNumberOfBytesRead=0xde6f768*=0x4, lpOverlapped=0x0) returned 1 [0193.390] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0193.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca210 [0193.390] NtQuerySystemTime (in: CurrentTime=0xde6f6f0 | out: CurrentTime=0xde6f6f0*=132482711018724000) returned 0x0 [0193.390] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x441e71e2 [0193.390] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x767435d [0193.390] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x4d9a59bb [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x511f9937 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x62f680d2 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x1881e392 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x172b43c9 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x3c189c12 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x376b829b [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x4640902 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x2ae7edfd [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x138f4d32 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x49585751 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x1c2f0bcd [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x7782ed1f [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x11d58b95 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x3759956c [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x4c99ca38 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x2ae7edfd [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x419cf8d4 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x72a3f39d [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x2b6f7924 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x6643d3c3 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x368826b0 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x2c1adc24 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x307d98aa [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x60d1e0db [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x1f20ff2d [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x703adcdf [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x2e5f78e4 [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x3ba5db9a [0193.391] RtlRandomEx (in: Seed=0xde6f6e8 | out: Seed=0xde6f6e8) returned 0x691fc2b5 [0193.401] ReadFile (in: hFile=0x1594, lpBuffer=0x6a05ce8, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0xde6f6e4, lpOverlapped=0x0 | out: lpBuffer=0x6a05ce8*, lpNumberOfBytesRead=0xde6f6e4*=0x144, lpOverlapped=0x0) returned 1 [0193.401] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.401] WriteFile (in: hFile=0x1594, lpBuffer=0x6a098f0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xde6f6e8, lpOverlapped=0x0 | out: lpBuffer=0x6a098f0*, lpNumberOfBytesWritten=0xde6f6e8*=0x144, lpOverlapped=0x0) returned 1 [0195.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cab8 [0195.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x676cae0 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cae0) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a098f0) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a05ce8) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe288) returned 1 [0195.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ae0 [0195.713] SetFilePointerEx (in: hFile=0x1594, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.713] WriteFile (in: hFile=0x1594, lpBuffer=0x69c3b88*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde6f770, lpOverlapped=0x0 | out: lpBuffer=0x69c3b88*, lpNumberOfBytesWritten=0xde6f770*=0x10c, lpOverlapped=0x0) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3b88) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cae0) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676cab8) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca418) returned 1 [0195.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0195.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6772ab8 [0195.894] wcscpy (in: _Dest=0x6772ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" [0195.894] wcscat (in: _Dest=0x6772ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.ac3a86" [0195.894] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xde6f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x676a830 [0196.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a830) returned 1 [0196.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x681e638) returned 1 [0196.018] NtQueryInformationFile (in: FileHandle=0x1594, IoStatusBlock=0xde6f6c0, FileInformation=0xde6f6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xde6f6c0, FileInformation=0xde6f6c8) returned 0x0 [0196.018] NtSetInformationFile (FileHandle=0x1594, IoStatusBlock=0xde6f6c0, FileInformation=0xde6f6c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772ab8) returned 1 [0196.174] FlushFileBuffers (hFile=0x1594) returned 1 [0196.807] CloseHandle (hObject=0x1594) returned 1 [0197.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ea6060 [0198.342] wcscpy (in: _Dest=0x12ea6060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0198.342] wcscat (in: _Dest=0x12ea6060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\AC3A86-Readme.txt" [0198.342] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0198.342] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.138] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xde6f704, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xde6f704*=0x8b9, lpOverlapped=0x0) returned 1 [0200.140] CloseHandle (hObject=0xac4) returned 1 [0200.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea6060) returned 1 [0200.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67640b0) returned 1 Thread: id = 6594 os_tid = 0x1a80 [0191.261] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0191.261] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0193.402] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b64 [0193.402] GetFileSizeEx (in: hFile=0x1b64, lpFileSize=0x8d0f9b4 | out: lpFileSize=0x8d0f9b4*=234) returned 1 [0193.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca210 [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca490 [0193.403] NtQuerySystemTime (in: CurrentTime=0x8d0f928 | out: CurrentTime=0x8d0f928*=132482711018880000) returned 0x0 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x2ab6d8d1 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x58f9d2fc [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x2f120e20 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x58c4e94 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x3b83fc94 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x15994c47 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x29f8509 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x7938feea [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x41f452f2 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x68710b17 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x50e14193 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x4b12b56 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x47025628 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x53fb2116 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x4bcf3f1 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0xf6a6cec [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x23e500f0 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x2bfdee65 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x30bb017d [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0xf258b5c [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x112b51af [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x450fb46 [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x413ae76d [0193.403] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x3e6f29ff [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x5ef50f4f [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x2a2ed65 [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x5d9e4a3e [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x24d8a6d8 [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x1be380b9 [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x280d3817 [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x4db6bf19 [0193.404] RtlRandomEx (in: Seed=0x8d0f920 | out: Seed=0x8d0f920) returned 0x2b9a51e4 [0193.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a0d4f8 [0193.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a11100 [0193.413] ReadFile (in: hFile=0x1b64, lpBuffer=0x6a0d4f8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x8d0f91c, lpOverlapped=0x0 | out: lpBuffer=0x6a0d4f8*, lpNumberOfBytesRead=0x8d0f91c*=0xea, lpOverlapped=0x0) returned 1 [0193.415] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.415] WriteFile (in: hFile=0x1b64, lpBuffer=0x6a11100*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x8d0f920, lpOverlapped=0x0 | out: lpBuffer=0x6a11100*, lpNumberOfBytesWritten=0x8d0f920*=0xea, lpOverlapped=0x0) returned 1 [0196.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca670 [0196.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0196.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0196.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a11100) returned 1 [0196.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a0d4f8) returned 1 [0196.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0196.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe708) returned 1 [0196.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.371] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.371] WriteFile (in: hFile=0x1b64, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d0f9a8, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0x8d0f9a8*=0x10c, lpOverlapped=0x0) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca210) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0196.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4e0) returned 1 [0196.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.382] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" [0196.382] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.ac3a86" [0196.382] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0x8d0f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.395] FlushFileBuffers (hFile=0x1b64) returned 1 [0196.823] CloseHandle (hObject=0x1b64) returned 1 [0197.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ea0060 [0198.341] wcscpy (in: _Dest=0x12ea0060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0198.341] wcscat (in: _Dest=0x12ea0060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\AC3A86-Readme.txt" [0198.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0198.341] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.120] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d0f93c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d0f93c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.121] CloseHandle (hObject=0xac4) returned 1 [0200.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0060) returned 1 [0200.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67641d8) returned 1 Thread: id = 6595 os_tid = 0x1a84 [0191.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0191.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0193.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a60 [0193.416] GetFileSizeEx (in: hFile=0x1a60, lpFileSize=0x627f7e4 | out: lpFileSize=0x627f7e4*=304) returned 1 [0193.416] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.416] ReadFile (in: hFile=0x1a60, lpBuffer=0x627f7c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x627f7d0, lpOverlapped=0x0 | out: lpBuffer=0x627f7c0*, lpNumberOfBytesRead=0x627f7d0*=0x4, lpOverlapped=0x0) returned 1 [0193.418] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca490 [0193.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca508 [0193.418] NtQuerySystemTime (in: CurrentTime=0x627f758 | out: CurrentTime=0x627f758*=132482711018880000) returned 0x0 [0193.418] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x3b6c2bba [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x1aca9ed6 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x1d2fc7c9 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x49716a66 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x52c4ec28 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x2e2764e8 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x782ff635 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x6c230035 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x1bdc7806 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x7b5ebb3f [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x2b19c7a4 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x5264eca7 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x12d9e4f3 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x3d0cbc63 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x30f75d9f [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x14f3f0f0 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x76c85316 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x2f4fa8fa [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x69dbba10 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x351ac0c5 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x5356d544 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0xd69c9c [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0xb25b093 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x728b8e59 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x2b44a064 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x6155b88e [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x50296362 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x3f14ca83 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x79fe133e [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x7078dea9 [0193.419] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x7e3829b2 [0193.420] RtlRandomEx (in: Seed=0x627f750 | out: Seed=0x627f750) returned 0x23e500f0 [0193.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a14d08 [0193.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a18910 [0193.428] ReadFile (in: hFile=0x1a60, lpBuffer=0x6a14d08, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0x627f74c, lpOverlapped=0x0 | out: lpBuffer=0x6a14d08*, lpNumberOfBytesRead=0x627f74c*=0x130, lpOverlapped=0x0) returned 1 [0193.428] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.428] WriteFile (in: hFile=0x1a60, lpBuffer=0x6a18910*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x627f750, lpOverlapped=0x0 | out: lpBuffer=0x6a18910*, lpNumberOfBytesWritten=0x627f750*=0x130, lpOverlapped=0x0) returned 1 [0196.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0196.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0196.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0196.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a18910) returned 1 [0196.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a14d08) returned 1 [0196.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0196.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fd940) returned 1 [0196.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.414] SetFilePointerEx (in: hFile=0x1a60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.414] WriteFile (in: hFile=0x1a60, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x627f7d8, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0x627f7d8*=0x10c, lpOverlapped=0x0) returned 1 [0196.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0196.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0196.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0196.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0196.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca490) returned 1 [0196.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0196.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca530) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0196.417] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" [0196.417] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.ac3a86" [0196.417] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0x627f750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0196.420] FlushFileBuffers (hFile=0x1a60) returned 1 [0196.824] CloseHandle (hObject=0x1a60) returned 1 [0197.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac060 [0198.344] wcscpy (in: _Dest=0x12eac060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0198.344] wcscat (in: _Dest=0x12eac060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\AC3A86-Readme.txt" [0198.344] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0198.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0200.148] WriteFile (in: hFile=0xac4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x627f76c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x627f76c*=0x8b9, lpOverlapped=0x0) returned 1 [0200.150] CloseHandle (hObject=0xac4) returned 1 [0200.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac060) returned 1 [0200.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764300) returned 1 Thread: id = 6596 os_tid = 0x1974 [0191.263] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0191.263] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0193.428] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec [0193.429] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0x9c5fe0c | out: lpFileSize=0x9c5fe0c*=232) returned 1 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca508 [0193.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0193.429] NtQuerySystemTime (in: CurrentTime=0x9c5fd80 | out: CurrentTime=0x9c5fd80*=132482711019036000) returned 0x0 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x47025628 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x5356d544 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x6adec75a [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x4beeee66 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x1cb3a040 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x56665cf8 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x50b83d53 [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x7888bcbd [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x200d112e [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x7de9f37a [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x200d112e [0193.429] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x2a6d475c [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x4f20c34f [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x1ba19b6f [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x57512336 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x1cb3a040 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x6fd86d02 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x2b8af3b7 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x1828d8c3 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x75e57f68 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0xa4536de [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x677cd606 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x4f958251 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x72297b35 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x7b3333b5 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x6e5a3479 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x17f4984c [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x43d23068 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x52c4ec28 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x6078efaa [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x2abd9829 [0193.430] RtlRandomEx (in: Seed=0x9c5fd78 | out: Seed=0x9c5fd78) returned 0x7a178147 [0193.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a1c518 [0193.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a20120 [0193.438] ReadFile (in: hFile=0x1bec, lpBuffer=0x6a1c518, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x9c5fd74, lpOverlapped=0x0 | out: lpBuffer=0x6a1c518*, lpNumberOfBytesRead=0x9c5fd74*=0xe8, lpOverlapped=0x0) returned 1 [0193.440] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.440] WriteFile (in: hFile=0x1bec, lpBuffer=0x6a20120*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x9c5fd78, lpOverlapped=0x0 | out: lpBuffer=0x6a20120*, lpNumberOfBytesWritten=0x9c5fd78*=0xe8, lpOverlapped=0x0) returned 1 [0196.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0196.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3c8 [0196.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0196.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a20120) returned 1 [0196.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a1c518) returned 1 [0196.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0196.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdf70) returned 1 [0196.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0196.429] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.430] WriteFile (in: hFile=0x1bec, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c5fe00, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0x9c5fe00*=0x10c, lpOverlapped=0x0) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0197.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0197.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41518 [0197.517] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" [0197.517] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.ac3a86" [0197.517] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0x9c5fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6768d48 [0197.886] FlushFileBuffers (hFile=0x1bec) returned 1 [0197.897] CloseHandle (hObject=0x1bec) returned 1 [0198.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779d38 [0198.047] wcscpy (in: _Dest=0x6779d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0198.048] wcscat (in: _Dest=0x6779d38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\AC3A86-Readme.txt" [0198.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0198.048] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1844 [0199.105] WriteFile (in: hFile=0x1844, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9c5fd94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9c5fd94*=0x8b9, lpOverlapped=0x0) returned 1 [0199.889] CloseHandle (hObject=0x1844) returned 1 [0199.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779d38) returned 1 [0199.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764428) returned 1 Thread: id = 6597 os_tid = 0x1a88 [0191.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0191.264] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0193.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc00 [0193.596] GetFileSizeEx (in: hFile=0xc00, lpFileSize=0x839fdd4 | out: lpFileSize=0x839fdd4*=258) returned 1 [0193.596] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.596] ReadFile (in: hFile=0xc00, lpBuffer=0x839fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x839fdc0, lpOverlapped=0x0 | out: lpBuffer=0x839fdb0*, lpNumberOfBytesRead=0x839fdc0*=0x4, lpOverlapped=0x0) returned 1 [0193.599] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0193.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0193.599] NtQuerySystemTime (in: CurrentTime=0x839fd48 | out: CurrentTime=0x839fd48*=132482711020752000) returned 0x0 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x5fcfb54e [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x7f483852 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x298b9e02 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x56d04b23 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x5948c1f4 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x3590d23c [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0xcec09ee [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x2a298d8b [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0xd12a745 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x3fd0ab8d [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x7e23ce64 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x134d1fb6 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x31e850a6 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x29179ea4 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x1a23bf04 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x113a7cf7 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x11086af6 [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x51ddd55e [0193.599] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x60bbdaa3 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x16505d36 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x130356e4 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0xb9bb771 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x2fad9ba [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x598a79f6 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x2d34ce66 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x188688d9 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x34ca47a3 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x2de86815 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x1d2009a7 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x23756570 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x2f0d19d0 [0193.600] RtlRandomEx (in: Seed=0x839fd40 | out: Seed=0x839fd40) returned 0x4365403a [0193.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0193.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a76950 [0193.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a7a558 [0193.611] ReadFile (in: hFile=0xc00, lpBuffer=0x6a76950, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x839fd3c, lpOverlapped=0x0 | out: lpBuffer=0x6a76950*, lpNumberOfBytesRead=0x839fd3c*=0x102, lpOverlapped=0x0) returned 1 [0193.611] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.611] WriteFile (in: hFile=0xc00, lpBuffer=0x6a7a558*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x839fd40, lpOverlapped=0x0 | out: lpBuffer=0x6a7a558*, lpNumberOfBytesWritten=0x839fd40*=0x102, lpOverlapped=0x0) returned 1 [0197.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b58 [0197.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b30 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a7a558) returned 1 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a76950) returned 1 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0197.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdfb8) returned 1 [0197.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acc98 [0197.139] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.139] WriteFile (in: hFile=0xc00, lpBuffer=0x6767c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x839fdc8, lpOverlapped=0x0 | out: lpBuffer=0x6767c38*, lpNumberOfBytesWritten=0x839fdc8*=0x10c, lpOverlapped=0x0) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767c38) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3a88) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acc98) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1e8) returned 1 [0197.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0197.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40b58 [0197.595] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" [0197.595] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.ac3a86" [0197.595] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0x839fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6776fd8 [0197.949] FlushFileBuffers (hFile=0xc00) returned 1 [0197.956] CloseHandle (hObject=0xc00) returned 1 [0198.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6774930 [0198.098] wcscpy (in: _Dest=0x6774930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0198.098] wcscat (in: _Dest=0x6774930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0198.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0198.098] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1878 [0199.111] WriteFile (in: hFile=0x1878, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x839fd5c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x839fd5c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.850] CloseHandle (hObject=0x1878) returned 1 [0199.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774930) returned 1 [0199.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764550) returned 1 Thread: id = 6598 os_tid = 0x1978 [0191.265] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0191.265] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0193.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15d8 [0193.654] GetFileSizeEx (in: hFile=0x15d8, lpFileSize=0xd9cf874 | out: lpFileSize=0xd9cf874*=249) returned 1 [0193.654] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.654] ReadFile (in: hFile=0x15d8, lpBuffer=0xd9cf850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd9cf860, lpOverlapped=0x0 | out: lpBuffer=0xd9cf850*, lpNumberOfBytesRead=0xd9cf860*=0x4, lpOverlapped=0x0) returned 1 [0193.656] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0193.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ba0 [0193.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0193.656] NtQuerySystemTime (in: CurrentTime=0xd9cf7e8 | out: CurrentTime=0xd9cf7e8*=132482711021376000) returned 0x0 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x13de3e51 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x7a5ae409 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x1116d55f [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x33cea824 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x5cdd9f43 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x644dda0e [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x2493c4f5 [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x694f06cc [0193.656] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x6a773a01 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x44becfa1 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x7511d801 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x3acfb146 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x603b2202 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x28fb7ff2 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x2fd0662c [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x5c5b7294 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x7467a2fd [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x397f0235 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x232cc19b [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x5ace17f5 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x3f0ec067 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x5e359a8a [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x1049e236 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x647abf37 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x2e037ea3 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x5c8c3ba1 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x503518b9 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x157025f3 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x297c9178 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x39deba3 [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0xcf69c3d [0193.657] RtlRandomEx (in: Seed=0xd9cf7e0 | out: Seed=0xd9cf7e0) returned 0x4e062cc3 [0193.667] ReadFile (in: hFile=0x15d8, lpBuffer=0x12e87870, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xd9cf7dc, lpOverlapped=0x0 | out: lpBuffer=0x12e87870*, lpNumberOfBytesRead=0xd9cf7dc*=0xf9, lpOverlapped=0x0) returned 1 [0193.667] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.667] WriteFile (in: hFile=0x15d8, lpBuffer=0x12e8b478*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xd9cf7e0, lpOverlapped=0x0 | out: lpBuffer=0x12e8b478*, lpNumberOfBytesWritten=0xd9cf7e0*=0xf9, lpOverlapped=0x0) returned 1 [0197.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0197.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0197.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0197.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e8b478) returned 1 [0197.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e87870) returned 1 [0197.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0197.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1e28) returned 1 [0197.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acd88 [0197.138] SetFilePointerEx (in: hFile=0x15d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.138] WriteFile (in: hFile=0x15d8, lpBuffer=0x6767d50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd9cf868, lpOverlapped=0x0 | out: lpBuffer=0x6767d50*, lpNumberOfBytesWritten=0xd9cf868*=0x10c, lpOverlapped=0x0) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767d50) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0197.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0197.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d419f8 [0197.596] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" [0197.596] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.ac3a86" [0197.596] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0xd9cf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6776e90 [0197.951] FlushFileBuffers (hFile=0x15d8) returned 1 [0197.960] CloseHandle (hObject=0x15d8) returned 1 [0198.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67747f8 [0198.100] wcscpy (in: _Dest=0x67747f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0198.100] wcscat (in: _Dest=0x67747f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0198.100] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0198.100] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf94 [0199.111] WriteFile (in: hFile=0xf94, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd9cf7fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd9cf7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.856] CloseHandle (hObject=0xf94) returned 1 [0199.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67747f8) returned 1 [0199.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764678) returned 1 Thread: id = 6599 os_tid = 0x1a8c [0191.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll")) returned 0x20 [0191.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0191.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.267] GetLastError () returned 0x5 [0191.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0191.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d178) returned 1 Thread: id = 6600 os_tid = 0x2dc [0191.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs")) returned 0x20 [0196.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0196.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.519] GetLastError () returned 0x5 [0196.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0196.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 6601 os_tid = 0x19dc [0191.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js")) returned 0x20 [0191.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0191.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.280] GetLastError () returned 0x5 [0191.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0191.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 Thread: id = 6602 os_tid = 0x230 [0191.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl")) returned 0x20 [0192.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0192.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.170] GetLastError () returned 0x5 [0192.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0192.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764f58) returned 1 Thread: id = 6603 os_tid = 0x1e4 [0191.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif")) returned 0x20 [0191.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0191.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.782] GetLastError () returned 0x5 [0191.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0191.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765080) returned 1 Thread: id = 6604 os_tid = 0x480 [0191.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif")) returned 0x20 [0191.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0191.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.780] GetLastError () returned 0x5 [0191.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0191.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67651a8) returned 1 Thread: id = 6605 os_tid = 0x19e0 [0191.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif")) returned 0x20 [0192.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0192.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.172] GetLastError () returned 0x5 [0192.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0192.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67652d0) returned 1 Thread: id = 6606 os_tid = 0xefc [0191.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc")) returned 0x20 [0196.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0196.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.541] GetLastError () returned 0x5 [0196.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0196.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 6607 os_tid = 0x19e4 [0191.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt")) returned 0x20 [0196.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.542] GetLastError () returned 0x5 [0196.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 6608 os_tid = 0x19e8 [0191.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk")) returned 0x20 [0196.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.544] GetLastError () returned 0x5 [0196.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db508) returned 1 Thread: id = 6609 os_tid = 0x14c [0191.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk")) returned 0x20 [0196.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.545] GetLastError () returned 0x5 [0196.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 6610 os_tid = 0x1af0 [0191.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg")) returned 0x20 [0196.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0196.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.547] GetLastError () returned 0x5 [0196.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0196.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 6611 os_tid = 0x1af4 [0191.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll")) returned 0x20 [0196.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.549] GetLastError () returned 0x5 [0196.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 6612 os_tid = 0x19ec [0191.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll")) returned 0x20 [0196.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.550] GetLastError () returned 0x5 [0196.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 6613 os_tid = 0x19f0 [0191.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd")) returned 0x20 [0196.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0196.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.539] GetLastError () returned 0x5 [0196.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0196.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 6614 os_tid = 0x19f4 [0191.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl")) returned 0x20 [0196.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0196.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.536] GetLastError () returned 0x5 [0196.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0196.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 6615 os_tid = 0x19f8 [0191.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd")) returned 0x20 [0195.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0195.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.113] GetLastError () returned 0x5 [0195.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0195.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 6616 os_tid = 0xa40 [0191.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl")) returned 0x20 [0196.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0196.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.535] GetLastError () returned 0x5 [0196.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0196.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 Thread: id = 6617 os_tid = 0x19fc [0191.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat")) returned 0x20 [0196.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0196.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.533] GetLastError () returned 0x5 [0196.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0196.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 Thread: id = 6618 os_tid = 0x1a00 [0191.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf")) returned 0x20 [0196.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0196.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.532] GetLastError () returned 0x5 [0196.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0196.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10f70) returned 1 Thread: id = 6619 os_tid = 0x1a04 [0191.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll")) returned 0x20 [0196.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.530] GetLastError () returned 0x5 [0196.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 6620 os_tid = 0x1a08 [0191.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll")) returned 0x20 [0196.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.529] GetLastError () returned 0x5 [0196.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0196.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 6621 os_tid = 0x1a0c [0191.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs")) returned 0x20 [0196.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0196.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.527] GetLastError () returned 0x5 [0196.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0196.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 6622 os_tid = 0x1a10 [0191.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc")) returned 0x20 [0196.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0196.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.526] GetLastError () returned 0x5 [0196.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0196.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 6623 os_tid = 0x1a14 [0191.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt")) returned 0x20 [0196.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.524] GetLastError () returned 0x5 [0196.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 6624 os_tid = 0x1a18 [0191.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk")) returned 0x20 [0196.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.522] GetLastError () returned 0x5 [0196.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 6625 os_tid = 0x920 [0191.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk")) returned 0x20 [0196.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.514] GetLastError () returned 0x5 [0196.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0196.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 6626 os_tid = 0x950 [0191.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol")) returned 0x20 [0196.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0196.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.521] GetLastError () returned 0x5 [0196.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0196.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e106f0) returned 1 Thread: id = 6627 os_tid = 0xdf8 [0191.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs")) returned 0x20 [0196.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0196.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.538] GetLastError () returned 0x5 [0196.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0196.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f670) returned 1 Thread: id = 6628 os_tid = 0x960 [0191.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc")) returned 0x20 [0192.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0192.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.100] GetLastError () returned 0x5 [0195.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0195.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 6629 os_tid = 0xde8 [0191.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt")) returned 0x20 [0196.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.552] GetLastError () returned 0x5 [0196.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0196.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 6630 os_tid = 0xbf4 [0191.530] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 0x2020 [0191.530] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0192.671] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc2c [0192.671] GetFileSizeEx (in: hFile=0xc2c, lpFileSize=0xfc6fee4 | out: lpFileSize=0xfc6fee4*=198) returned 1 [0192.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0192.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0192.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0192.671] NtQuerySystemTime (in: CurrentTime=0xfc6fe58 | out: CurrentTime=0xfc6fe58*=132482711011548000) returned 0x0 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x2612a25c [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x52fb7c64 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x462b560f [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x3b18bca9 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x334d4464 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x6a97abb4 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x37892cae [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x47c1a8ca [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0xce41667 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x1c33af39 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x1988d35f [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x1a1bc32f [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x93e14f2 [0192.671] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x5831e0a0 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x50e0e42d [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x69a46c1c [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x380e6813 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x2fe75ee8 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x52b09546 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x1a2794a8 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x512b8878 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x6dca930d [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x34612312 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x31222653 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x3418d877 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x3111f6b3 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x43021c8e [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x1abc3f04 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x7b2fe6e2 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x50ac5e78 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x4388ff83 [0192.672] RtlRandomEx (in: Seed=0xfc6fe50 | out: Seed=0xfc6fe50) returned 0x602a2b8f [0192.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0192.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6724ef0 [0192.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6742f30 [0192.681] ReadFile (in: hFile=0xc2c, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xfc6fe4c, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xfc6fe4c*=0xc6, lpOverlapped=0x0) returned 1 [0192.683] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.683] WriteFile (in: hFile=0xc2c, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xfc6fe50, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0xfc6fe50*=0xc6, lpOverlapped=0x0) returned 1 [0195.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0195.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0195.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0195.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0195.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0195.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0195.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5ac0) returned 1 [0195.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3540 [0195.150] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.150] WriteFile (in: hFile=0xc2c, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfc6fed8, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0xfc6fed8*=0x10c, lpOverlapped=0x0) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0197.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0197.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41da0 [0197.510] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" [0197.510] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.ac3a86" [0197.510] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xfc6fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67694f8 [0197.881] FlushFileBuffers (hFile=0xc2c) returned 1 [0197.888] CloseHandle (hObject=0xc2c) returned 1 [0198.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779c10 [0198.044] wcscpy (in: _Dest=0x6779c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0198.044] wcscat (in: _Dest=0x6779c10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\AC3A86-Readme.txt" [0198.044] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0198.044] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1840 [0199.105] WriteFile (in: hFile=0x1840, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfc6fe6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfc6fe6c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.886] CloseHandle (hObject=0x1840) returned 1 [0199.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779c10) returned 1 [0199.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762d08) returned 1 Thread: id = 6631 os_tid = 0x1160 [0191.531] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 0x2020 [0191.532] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", dwFileAttributes=0x20) returned 1 [0200.629] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2444 [0200.630] GetFileSizeEx (in: hFile=0x2444, lpFileSize=0x649fc1c | out: lpFileSize=0x649fc1c*=665) returned 1 [0200.630] SetFilePointerEx (in: hFile=0x2444, liDistanceToMove=0x295, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.630] ReadFile (in: hFile=0x2444, lpBuffer=0x649fbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x649fc08, lpOverlapped=0x0 | out: lpBuffer=0x649fbf8*, lpNumberOfBytesRead=0x649fc08*=0x4, lpOverlapped=0x0) returned 1 [0200.632] SetFilePointerEx (in: hFile=0x2444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef47b8 [0200.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0200.633] NtQuerySystemTime (in: CurrentTime=0x649fb90 | out: CurrentTime=0x649fb90*=132482711091108000) returned 0x0 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x6ba5af2b [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x41d06d21 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x66af8eb9 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x3642a6e4 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x5f585368 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x3aaeece2 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x6e31461d [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x2c5b3d15 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x4ebf09be [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x3a4022ca [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x2f5043b4 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x5a994692 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x2476fe44 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x90118bd [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x2a7246d9 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x3fa1fa88 [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x29c8593b [0200.633] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x6fa21ef6 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x7893bf18 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x5fb357d7 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x44ebede3 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0xe63338b [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x492f346e [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x6d8233a3 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x5706633d [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0xd7e6477 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x418454ef [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x186f1641 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x371914dc [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x614a64e3 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x333c13c1 [0200.634] RtlRandomEx (in: Seed=0x649fb88 | out: Seed=0x649fb88) returned 0x65c69c2a [0200.644] ReadFile (in: hFile=0x2444, lpBuffer=0x12f40060, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0x649fb84, lpOverlapped=0x0 | out: lpBuffer=0x12f40060*, lpNumberOfBytesRead=0x649fb84*=0x299, lpOverlapped=0x0) returned 1 [0200.644] SetFilePointerEx (in: hFile=0x2444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.644] WriteFile (in: hFile=0x2444, lpBuffer=0x12f4b478*, nNumberOfBytesToWrite=0x299, lpNumberOfBytesWritten=0x649fb88, lpOverlapped=0x0 | out: lpBuffer=0x12f4b478*, lpNumberOfBytesWritten=0x649fb88*=0x299, lpOverlapped=0x0) returned 1 [0204.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c28 [0204.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3840 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4b478) returned 1 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f40060) returned 1 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f590) returned 1 [0204.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0204.523] SetFilePointerEx (in: hFile=0x2444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.523] WriteFile (in: hFile=0x2444, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x649fc10, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0x649fc10*=0x10c, lpOverlapped=0x0) returned 1 [0206.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3840) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c28) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef47b8) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca490) returned 1 [0206.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0206.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c0a8 [0206.195] wcscpy (in: _Dest=0x678c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" [0206.195] wcscat (in: _Dest=0x678c0a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.ac3a86" [0206.195] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.ac3a86", NtPathName=0x649fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67774f8 [0206.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67774f8) returned 1 [0206.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef4c30) returned 1 [0206.563] NtQueryInformationFile (in: FileHandle=0x2444, IoStatusBlock=0x649fb60, FileInformation=0x649fb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x649fb60, FileInformation=0x649fb68) returned 0x0 [0206.563] NtSetInformationFile (FileHandle=0x2444, IoStatusBlock=0x649fb60, FileInformation=0x649fb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c0a8) returned 1 [0208.998] FlushFileBuffers (hFile=0x2444) returned 1 [0209.005] CloseHandle (hObject=0x2444) returned 1 [0209.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead1b8 [0209.331] wcscpy (in: _Dest=0x12ead1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0209.331] wcscat (in: _Dest=0x12ead1b8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\AC3A86-Readme.txt" [0209.331] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ac3a86-readme.txt")) returned 0xffffffff [0209.331] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.918] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x649fba4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x649fba4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.921] CloseHandle (hObject=0x1bf8) returned 1 [0209.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead1b8) returned 1 [0209.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762e30) returned 1 Thread: id = 6632 os_tid = 0x1168 [0191.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 0x2020 [0191.533] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0192.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14cc [0192.685] GetFileSizeEx (in: hFile=0x14cc, lpFileSize=0x1057fa34 | out: lpFileSize=0x1057fa34*=187) returned 1 [0192.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0192.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0192.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0192.685] NtQuerySystemTime (in: CurrentTime=0x1057f9a8 | out: CurrentTime=0x1057f9a8*=132482711011704000) returned 0x0 [0192.685] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x2f388584 [0192.685] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x330ab603 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x33cdcea4 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x31159a45 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x59a286be [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x74bf25d6 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x6d9ae934 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x53e15b48 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x32ccba24 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x4af06748 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x30c00873 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x59d54721 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x2e69c163 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x33fd3a9e [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x1a1828de [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x26c21871 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x127f67a7 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x545bd49f [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x5bef6710 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x5842bbd9 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x44732561 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x6acafbb0 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x6a67f30f [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x693bd36 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x21fd20eb [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x2a2737b6 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x2b8fa405 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x4c7e3477 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x29378bf0 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x2a5140b0 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x3aa852e6 [0192.686] RtlRandomEx (in: Seed=0x1057f9a0 | out: Seed=0x1057f9a0) returned 0x76591cec [0192.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0192.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6730308 [0192.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6746b38 [0192.696] ReadFile (in: hFile=0x14cc, lpBuffer=0x6730308, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0x1057f99c, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0x1057f99c*=0xbb, lpOverlapped=0x0) returned 1 [0192.698] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.698] WriteFile (in: hFile=0x14cc, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x1057f9a0, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0x1057f9a0*=0xbb, lpOverlapped=0x0) returned 1 [0195.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0195.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0195.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0195.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0195.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0195.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0195.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5c28) returned 1 [0195.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0195.151] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.151] WriteFile (in: hFile=0x14cc, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1057fa28, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0x1057fa28*=0x10c, lpOverlapped=0x0) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0197.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0197.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d413e0 [0197.511] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" [0197.511] wcscat (in: _Dest=0x3d413e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.ac3a86" [0197.512] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0x1057f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6768fd8 [0197.883] FlushFileBuffers (hFile=0x14cc) returned 1 [0197.894] CloseHandle (hObject=0x14cc) returned 1 [0198.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779ae8 [0198.046] wcscpy (in: _Dest=0x6779ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0198.046] wcscat (in: _Dest=0x6779ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\AC3A86-Readme.txt" [0198.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0198.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x183c [0199.105] WriteFile (in: hFile=0x183c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1057f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1057f9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.883] CloseHandle (hObject=0x183c) returned 1 [0199.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779ae8) returned 1 [0199.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762f58) returned 1 Thread: id = 6633 os_tid = 0x8ac [0191.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 0x2020 [0191.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0192.700] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2118 [0192.700] GetFileSizeEx (in: hFile=0x2118, lpFileSize=0x104dfe04 | out: lpFileSize=0x104dfe04*=298) returned 1 [0192.700] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x126, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.700] ReadFile (in: hFile=0x2118, lpBuffer=0x104dfde0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x104dfdf0, lpOverlapped=0x0 | out: lpBuffer=0x104dfde0*, lpNumberOfBytesRead=0x104dfdf0*=0x4, lpOverlapped=0x0) returned 1 [0192.703] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0192.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0192.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0192.703] NtQuerySystemTime (in: CurrentTime=0x104dfd78 | out: CurrentTime=0x104dfd78*=132482711011860000) returned 0x0 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x185adb80 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x32a1e164 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x7cb1887e [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x2e069c75 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x7d434046 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0xa42e2de [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x474c0c26 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x7702cbae [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x74f60703 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x2a4d2024 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x46b3817d [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x277b9a80 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x105fc6b [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x649130b4 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x28c6e3ec [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0xd07586a [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x76591cec [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x4ba4ca93 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x569985a9 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x32f792e4 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x21cdad77 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x1f89cd61 [0192.703] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x22d6e24c [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x198e6049 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x24179bc2 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x4b1b9a0c [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x54c69a64 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x3c3f64c8 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x29fc24c8 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x78601944 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x57dd4dd2 [0192.704] RtlRandomEx (in: Seed=0x104dfd70 | out: Seed=0x104dfd70) returned 0x649735e [0192.711] ReadFile (in: hFile=0x2118, lpBuffer=0x673f328, nNumberOfBytesToRead=0x12a, lpNumberOfBytesRead=0x104dfd6c, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0x104dfd6c*=0x12a, lpOverlapped=0x0) returned 1 [0192.712] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.712] WriteFile (in: hFile=0x2118, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x104dfd70, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0x104dfd70*=0x12a, lpOverlapped=0x0) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a808 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b50) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0192.713] SetFilePointerEx (in: hFile=0x2118, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.714] WriteFile (in: hFile=0x2118, lpBuffer=0x6766e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x104dfdf8, lpOverlapped=0x0 | out: lpBuffer=0x6766e00*, lpNumberOfBytesWritten=0x104dfdf8*=0x10c, lpOverlapped=0x0) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0192.716] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" [0192.716] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.ac3a86" [0192.716] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x104dfd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67694f8 [0197.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67694f8) returned 1 [0197.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8c2c8) returned 1 [0197.504] NtQueryInformationFile (in: FileHandle=0x2118, IoStatusBlock=0x104dfd48, FileInformation=0x104dfd50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x104dfd48, FileInformation=0x104dfd50) returned 0x0 [0197.504] NtSetInformationFile (FileHandle=0x2118, IoStatusBlock=0x104dfd48, FileInformation=0x104dfd50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0197.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0197.775] FlushFileBuffers (hFile=0x2118) returned 1 [0197.785] CloseHandle (hObject=0x2118) returned 1 [0197.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6768d08 [0197.878] wcscpy (in: _Dest=0x6768d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0197.878] wcscat (in: _Dest=0x6768d08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\AC3A86-Readme.txt" [0197.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0197.878] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x181c [0199.100] WriteFile (in: hFile=0x181c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x104dfd8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x104dfd8c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.898] CloseHandle (hObject=0x181c) returned 1 [0199.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768d08) returned 1 [0199.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763080) returned 1 Thread: id = 6634 os_tid = 0x8bc [0191.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0191.535] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0192.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22b4 [0192.717] GetFileSizeEx (in: hFile=0x22b4, lpFileSize=0x1048fa6c | out: lpFileSize=0x1048fa6c*=178) returned 1 [0192.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a920 [0192.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0192.717] NtQuerySystemTime (in: CurrentTime=0x1048f9e0 | out: CurrentTime=0x1048f9e0*=132482711012016000) returned 0x0 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x2203f926 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x71b28d56 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x599fff3c [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x4345227d [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x6c7d5987 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x56a1c3ce [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x2e0a61a0 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x2b6245f3 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0xb994de7 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x7bcfc112 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0xc41d342 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x28d7c254 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x6fd79e14 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x6d1def60 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x1720fa8 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x67f554d9 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x4fba6b59 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x5640c75e [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x5b49e064 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x34980c9b [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x1f5743cc [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x75160c21 [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x32c00d7f [0192.717] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x373a91e [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x7419b7da [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x452392f0 [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x403b91b4 [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x237faada [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x155ed0d [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x24bbd58f [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x7ca7250d [0192.718] RtlRandomEx (in: Seed=0x1048f9d8 | out: Seed=0x1048f9d8) returned 0x222310b0 [0192.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x673f328 [0192.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67122c8 [0192.725] ReadFile (in: hFile=0x22b4, lpBuffer=0x673f328, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0x1048f9d4, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesRead=0x1048f9d4*=0xb2, lpOverlapped=0x0) returned 1 [0192.727] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.727] WriteFile (in: hFile=0x22b4, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x1048f9d8, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0x1048f9d8*=0xb2, lpOverlapped=0x0) returned 1 [0195.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0195.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0195.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0195.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0195.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0195.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0195.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b50) returned 1 [0195.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0195.153] SetFilePointerEx (in: hFile=0x22b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.153] WriteFile (in: hFile=0x22b4, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1048fa60, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0x1048fa60*=0x10c, lpOverlapped=0x0) returned 1 [0197.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0197.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0197.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0197.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0197.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0197.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0197.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0197.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0197.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d41038 [0197.495] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" [0197.495] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.ac3a86" [0197.495] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0x1048f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6769268 [0197.863] FlushFileBuffers (hFile=0x22b4) returned 1 [0197.870] CloseHandle (hObject=0x22b4) returned 1 [0198.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a85ce8 [0198.034] wcscpy (in: _Dest=0x6a85ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0198.034] wcscat (in: _Dest=0x6a85ce8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0198.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0198.035] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1828 [0199.103] WriteFile (in: hFile=0x1828, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1048f9f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1048f9f4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.873] CloseHandle (hObject=0x1828) returned 1 [0199.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ce8) returned 1 [0199.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67631a8) returned 1 Thread: id = 6635 os_tid = 0x1aac [0191.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0191.536] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0192.729] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x211c [0192.729] GetFileSizeEx (in: hFile=0x211c, lpFileSize=0xa77fc4c | out: lpFileSize=0xa77fc4c*=265) returned 1 [0192.729] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.729] ReadFile (in: hFile=0x211c, lpBuffer=0xa77fc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa77fc38, lpOverlapped=0x0 | out: lpBuffer=0xa77fc28*, lpNumberOfBytesRead=0xa77fc38*=0x4, lpOverlapped=0x0) returned 1 [0192.731] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0192.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0192.731] NtQuerySystemTime (in: CurrentTime=0xa77fbc0 | out: CurrentTime=0xa77fbc0*=132482711012016000) returned 0x0 [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x3475c37f [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x44391e0d [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x27fb8518 [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x92ac097 [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x14e1470c [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x650b713c [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x32f05ffd [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x327708a4 [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x5842d6f0 [0192.731] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x73a16434 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x783980b0 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x4d4f1cd6 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x4af06748 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x37d01163 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x5b89bf2e [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x49c79feb [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x6b193ff2 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x9268ff7 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x49d9fdbe [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x82900e9 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x5119a459 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x6c2fb1f9 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x53e52af4 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x1d8b928b [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x465a47cc [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x482c23c8 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x4b0e8a7 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x9800373 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x7332494d [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x327708a4 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x13b12283 [0192.732] RtlRandomEx (in: Seed=0xa77fbb8 | out: Seed=0xa77fbb8) returned 0x68a03b3b [0192.741] ReadFile (in: hFile=0x211c, lpBuffer=0x670aab8, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xa77fbb4, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesRead=0xa77fbb4*=0x109, lpOverlapped=0x0) returned 1 [0192.741] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.741] WriteFile (in: hFile=0x211c, lpBuffer=0x67212e8*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xa77fbb8, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesWritten=0xa77fbb8*=0x109, lpOverlapped=0x0) returned 1 [0195.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0195.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0f0 [0195.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0195.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0195.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0195.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0195.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6498) returned 1 [0195.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db4020 [0195.154] SetFilePointerEx (in: hFile=0x211c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.154] WriteFile (in: hFile=0x211c, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa77fc40, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0xa77fc40*=0x10c, lpOverlapped=0x0) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0197.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0197.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aad8) returned 1 [0197.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0197.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d41170 [0197.501] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" [0197.501] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.ac3a86" [0197.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.ac3a86", NtPathName=0xa77fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6768e90 [0197.866] FlushFileBuffers (hFile=0x211c) returned 1 [0197.876] CloseHandle (hObject=0x211c) returned 1 [0198.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6a866a8 [0198.037] wcscpy (in: _Dest=0x6a866a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0198.037] wcscat (in: _Dest=0x6a866a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\AC3A86-Readme.txt" [0198.037] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\ac3a86-readme.txt")) returned 0xffffffff [0198.038] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x182c [0199.103] WriteFile (in: hFile=0x182c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa77fbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa77fbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.876] CloseHandle (hObject=0x182c) returned 1 [0199.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a866a8) returned 1 [0199.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67632d0) returned 1 Thread: id = 6636 os_tid = 0x1ab0 [0191.537] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 0x2020 [0191.537] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0200.660] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2430 [0200.661] GetFileSizeEx (in: hFile=0x2430, lpFileSize=0x100afab4 | out: lpFileSize=0x100afab4*=204) returned 1 [0200.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0200.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0200.661] NtQuerySystemTime (in: CurrentTime=0x100afa28 | out: CurrentTime=0x100afa28*=132482711091420000) returned 0x0 [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xab4caf7 [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x2bc82540 [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xfe9b998 [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x56a2e7b [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x1a2647d6 [0200.661] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x5aae4ffd [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x7b11003f [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x5a90682 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x6b0c30c0 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x5937387d [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x760ae271 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x28b17c3e [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xea6f5ec [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x23795300 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x28ca7c51 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x192f2bb7 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x6f2eab23 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x3a1e06ed [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xee13c4b [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x6195b443 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x346d4d10 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x1a91d131 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xb4f42d1 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x44d6ad3f [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x11be714e [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x6ad819d7 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x58909f51 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0xefd83f2 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x31a7f3d6 [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x3fae6fae [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x17f11abe [0200.662] RtlRandomEx (in: Seed=0x100afa20 | out: Seed=0x100afa20) returned 0x45d4cc05 [0200.672] ReadFile (in: hFile=0x2430, lpBuffer=0x12f5e0a0, nNumberOfBytesToRead=0xcc, lpNumberOfBytesRead=0x100afa1c, lpOverlapped=0x0 | out: lpBuffer=0x12f5e0a0*, lpNumberOfBytesRead=0x100afa1c*=0xcc, lpOverlapped=0x0) returned 1 [0200.675] SetFilePointerEx (in: hFile=0x2430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.675] WriteFile (in: hFile=0x2430, lpBuffer=0x12f52c88*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x100afa20, lpOverlapped=0x0 | out: lpBuffer=0x12f52c88*, lpNumberOfBytesWritten=0x100afa20*=0xcc, lpOverlapped=0x0) returned 1 [0203.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfe0 [0203.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f52c88) returned 1 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5e0a0) returned 1 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0203.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea08) returned 1 [0203.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db39c0 [0203.238] SetFilePointerEx (in: hFile=0x2430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.238] WriteFile (in: hFile=0x2430, lpBuffer=0x6766ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x100afaa8, lpOverlapped=0x0 | out: lpBuffer=0x6766ce8*, lpNumberOfBytesWritten=0x100afaa8*=0x10c, lpOverlapped=0x0) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0204.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0204.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b340 [0204.612] wcscpy (in: _Dest=0x678b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" [0204.612] wcscat (in: _Dest=0x678b340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.ac3a86" [0204.612] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0x100afa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67853b0 [0206.590] FlushFileBuffers (hFile=0x2430) returned 1 [0206.598] CloseHandle (hObject=0x2430) returned 1 [0209.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eace40 [0209.057] wcscpy (in: _Dest=0x12eace40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0209.057] wcscat (in: _Dest=0x12eace40, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\AC3A86-Readme.txt" [0209.057] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0209.057] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.851] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x100afa3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x100afa3c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.853] CloseHandle (hObject=0xe24) returned 1 [0209.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eace40) returned 1 [0209.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67633f8) returned 1 Thread: id = 6637 os_tid = 0x1720 [0191.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0191.539] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0192.743] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22ac [0192.743] GetFileSizeEx (in: hFile=0x22ac, lpFileSize=0xd1ff7bc | out: lpFileSize=0xd1ff7bc*=227) returned 1 [0192.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0192.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0192.744] NtQuerySystemTime (in: CurrentTime=0xd1ff730 | out: CurrentTime=0xd1ff730*=132482711012172000) returned 0x0 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x344c8952 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x6c5d4431 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x4b646c6e [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x65fae5f3 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x4ff6c133 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x527086f3 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x41de1ba7 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x5afe7524 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x693f3386 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x6ce57ba9 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x24177e61 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x4b937b6a [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x77e1460c [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x5649eb42 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x355f25eb [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x127065bd [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x344c8952 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x154aee42 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x64cb3f36 [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x3dd8c5bd [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x3292865b [0192.744] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x6676d849 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x7cc02347 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x69b58de9 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x1bc9b277 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x4e31a96c [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x286ca10b [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x33fbe2d0 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x113c0553 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x72d58fb9 [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x602fe2b [0192.745] RtlRandomEx (in: Seed=0xd1ff728 | out: Seed=0xd1ff728) returned 0x1bb87b13 [0192.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6733f10 [0192.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x671d6e0 [0192.753] ReadFile (in: hFile=0x22ac, lpBuffer=0x6733f10, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xd1ff724, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xd1ff724*=0xe3, lpOverlapped=0x0) returned 1 [0192.755] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.755] WriteFile (in: hFile=0x22ac, lpBuffer=0x671d6e0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xd1ff728, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesWritten=0xd1ff728*=0xe3, lpOverlapped=0x0) returned 1 [0195.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a970 [0195.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0195.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0195.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0195.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0195.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0195.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d6018) returned 1 [0195.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3720 [0195.155] SetFilePointerEx (in: hFile=0x22ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.155] WriteFile (in: hFile=0x22ac, lpBuffer=0x30bcab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1ff7b0, lpOverlapped=0x0 | out: lpBuffer=0x30bcab0*, lpNumberOfBytesWritten=0xd1ff7b0*=0x10c, lpOverlapped=0x0) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60b0) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3720) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0197.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0197.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d41c68 [0197.502] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" [0197.502] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.ac3a86" [0197.502] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0xd1ff728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce310 [0197.872] FlushFileBuffers (hFile=0x22ac) returned 1 [0197.882] CloseHandle (hObject=0x22ac) returned 1 [0198.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6a867e0 [0198.038] wcscpy (in: _Dest=0x6a867e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0198.038] wcscat (in: _Dest=0x6a867e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\AC3A86-Readme.txt" [0198.039] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0198.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1830 [0199.104] WriteFile (in: hFile=0x1830, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd1ff744, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd1ff744*=0x8b9, lpOverlapped=0x0) returned 1 [0199.878] CloseHandle (hObject=0x1830) returned 1 [0199.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a867e0) returned 1 [0199.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763520) returned 1 Thread: id = 6638 os_tid = 0x1724 [0191.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 0x2020 [0191.540] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0200.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2420 [0200.676] GetFileSizeEx (in: hFile=0x2420, lpFileSize=0x107afb8c | out: lpFileSize=0x107afb8c*=212) returned 1 [0200.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca440 [0200.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0200.677] NtQuerySystemTime (in: CurrentTime=0x107afb00 | out: CurrentTime=0x107afb00*=132482711091576000) returned 0x0 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x510c1e64 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x618d056d [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x797420d0 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x99d451 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x5400d3d5 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x22741fee [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x7387303f [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x96a8b21 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x7640751 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x7c64d2a4 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x449d4115 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x75d5b112 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x409c0845 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x36f98c6f [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x57e3208a [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x6f9a9cc6 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x3ebb6517 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x35e6e165 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x3a4b2a69 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x4055351a [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x23c8c344 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x1fbe5fed [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x4721b173 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x2c12b0f2 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x3fb251f7 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x13567b59 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x2a260ffd [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x611f8c23 [0200.677] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x765cc1c6 [0200.678] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x5d1b3a23 [0200.678] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x79249234 [0200.678] RtlRandomEx (in: Seed=0x107afaf8 | out: Seed=0x107afaf8) returned 0x5d9bc463 [0200.687] ReadFile (in: hFile=0x2420, lpBuffer=0x12f56890, nNumberOfBytesToRead=0xd4, lpNumberOfBytesRead=0x107afaf4, lpOverlapped=0x0 | out: lpBuffer=0x12f56890*, lpNumberOfBytesRead=0x107afaf4*=0xd4, lpOverlapped=0x0) returned 1 [0200.690] SetFilePointerEx (in: hFile=0x2420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.690] WriteFile (in: hFile=0x2420, lpBuffer=0x12f784d8*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x107afaf8, lpOverlapped=0x0 | out: lpBuffer=0x12f784d8*, lpNumberOfBytesWritten=0x107afaf8*=0xd4, lpOverlapped=0x0) returned 1 [0203.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0203.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b590 [0203.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0203.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f784d8) returned 1 [0203.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f56890) returned 1 [0203.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0203.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ec00) returned 1 [0203.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3660 [0203.244] SetFilePointerEx (in: hFile=0x2420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.244] WriteFile (in: hFile=0x2420, lpBuffer=0x6766f18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x107afb80, lpOverlapped=0x0 | out: lpBuffer=0x6766f18*, lpNumberOfBytesWritten=0x107afb80*=0x10c, lpOverlapped=0x0) returned 1 [0204.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766f18) returned 1 [0204.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3720) returned 1 [0204.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0204.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0204.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0204.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0204.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca800) returned 1 [0204.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1e8) returned 1 [0204.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b478 [0204.615] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" [0204.615] wcscat (in: _Dest=0x678b478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.ac3a86" [0204.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0x107afaf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67854f8 [0206.594] FlushFileBuffers (hFile=0x2420) [0206.594] FlushFileBuffers (hFile=0x2420) returned 1 [0206.607] CloseHandle (hObject=0x2420) returned 1 [0209.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacf68 [0209.062] wcscpy (in: _Dest=0x12eacf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0209.062] wcscat (in: _Dest=0x12eacf68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\AC3A86-Readme.txt" [0209.062] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0209.062] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.856] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x107afb14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x107afb14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.858] CloseHandle (hObject=0xe24) returned 1 [0209.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacf68) returned 1 [0209.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763648) returned 1 Thread: id = 6639 os_tid = 0x1ab4 [0191.540] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 0x2020 [0191.541] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0192.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee8 [0192.757] GetFileSizeEx (in: hFile=0x1ee8, lpFileSize=0x1084fbdc | out: lpFileSize=0x1084fbdc*=152) returned 1 [0192.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0192.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0192.757] NtQuerySystemTime (in: CurrentTime=0x1084fb50 | out: CurrentTime=0x1084fb50*=132482711012328000) returned 0x0 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x5b49e064 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x67efe169 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x6c5d4431 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x20d42215 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x58208397 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x76a4a1b4 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0xda6f362 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x4ea553ea [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x75fdcfe8 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x29e2c33 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x1a5476c1 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0xed5e327 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x6cfbe4b1 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x34276163 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x64a57c32 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x7d4bea44 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x64e47376 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x63422991 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x60461a0 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x5591384 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0xbb3f1d [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x6c77982c [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x4b4ce2d7 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x6e7f0cce [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x9268ff7 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x64cb3f36 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x484f8eed [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x5b877834 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x9800373 [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x438ae9ab [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x297bd64e [0192.758] RtlRandomEx (in: Seed=0x1084fb48 | out: Seed=0x1084fb48) returned 0x307a1e50 [0192.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6715ed0 [0192.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69c5ce8 [0192.768] ReadFile (in: hFile=0x1ee8, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0x1084fb44, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0x1084fb44*=0x98, lpOverlapped=0x0) returned 1 [0192.771] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.771] WriteFile (in: hFile=0x1ee8, lpBuffer=0x69c5ce8*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x1084fb48, lpOverlapped=0x0 | out: lpBuffer=0x69c5ce8*, lpNumberOfBytesWritten=0x1084fb48*=0x98, lpOverlapped=0x0) returned 1 [0196.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0196.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5d968 [0196.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0196.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5ce8) returned 1 [0196.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0196.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0196.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5b08) returned 1 [0196.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0196.356] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.356] WriteFile (in: hFile=0x1ee8, lpBuffer=0x6751148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1084fbd0, lpOverlapped=0x0 | out: lpBuffer=0x6751148*, lpNumberOfBytesWritten=0x1084fbd0*=0x10c, lpOverlapped=0x0) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0197.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0197.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0197.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40f00 [0197.196] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" [0197.196] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.ac3a86" [0197.196] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.ac3a86", NtPathName=0x1084fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0197.834] FlushFileBuffers (hFile=0x1ee8) returned 1 [0200.358] CloseHandle (hObject=0x1ee8) returned 1 [0202.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacbf0 [0202.298] wcscpy (in: _Dest=0x12eacbf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0202.298] wcscat (in: _Dest=0x12eacbf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\AC3A86-Readme.txt" [0202.299] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ac3a86-readme.txt")) returned 0xffffffff [0202.299] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1448 [0204.699] WriteFile (in: hFile=0x1448, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1084fb64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1084fb64*=0x8b9, lpOverlapped=0x0) returned 1 [0208.559] CloseHandle (hObject=0x1448) returned 1 [0215.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacbf0) returned 1 [0215.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763770) returned 1 Thread: id = 6640 os_tid = 0x1b90 [0191.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 0x2020 [0191.542] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", dwFileAttributes=0x20) returned 1 [0203.408] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2028 [0203.408] GetFileSizeEx (in: hFile=0x2028, lpFileSize=0x1073fa24 | out: lpFileSize=0x1073fa24*=255) returned 1 [0203.408] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0xfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.408] ReadFile (in: hFile=0x2028, lpBuffer=0x1073fa00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1073fa10, lpOverlapped=0x0 | out: lpBuffer=0x1073fa00*, lpNumberOfBytesRead=0x1073fa10*=0x4, lpOverlapped=0x0) returned 1 [0203.410] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef43d0 [0203.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0203.410] NtQuerySystemTime (in: CurrentTime=0x1073f998 | out: CurrentTime=0x1073f998*=132482711118876000) returned 0x0 [0203.410] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x738bf664 [0203.410] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x7994ab2f [0203.410] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x793eaf3c [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x64ec4b15 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x34cf3c5 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x7b124ea8 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x4a0f6344 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x195adb08 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x45f7186e [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x1048f6f4 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x4094d379 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x27f51ea0 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x4d2ed521 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x46d7e855 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x6b0abd5c [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x5f24b7bc [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x1728a072 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0xaebffde [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x3d23dbb0 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x268ebbc9 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x59f40551 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x5c6e04b5 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x1a9763f3 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x1893d4fa [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x69668232 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x375c7af2 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x9be8f9a [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x6402df60 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x3fd10ee3 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x5ecb8541 [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x195e6aef [0203.411] RtlRandomEx (in: Seed=0x1073f990 | out: Seed=0x1073f990) returned 0x4496dbe9 [0203.421] ReadFile (in: hFile=0x2028, lpBuffer=0x6938d48, nNumberOfBytesToRead=0xff, lpNumberOfBytesRead=0x1073f98c, lpOverlapped=0x0 | out: lpBuffer=0x6938d48*, lpNumberOfBytesRead=0x1073f98c*=0xff, lpOverlapped=0x0) returned 1 [0203.421] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.421] WriteFile (in: hFile=0x2028, lpBuffer=0x693c950*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x1073f990, lpOverlapped=0x0 | out: lpBuffer=0x693c950*, lpNumberOfBytesWritten=0x1073f990*=0xff, lpOverlapped=0x0) returned 1 [0206.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3c50 [0206.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4bf0 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x693c950) returned 1 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6938d48) returned 1 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0206.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2870) returned 1 [0206.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f282f8 [0206.041] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.041] WriteFile (in: hFile=0x2028, lpBuffer=0x6750f18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1073fa18, lpOverlapped=0x0 | out: lpBuffer=0x6750f18*, lpNumberOfBytesWritten=0x1073fa18*=0x10c, lpOverlapped=0x0) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750f18) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28328) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bf0) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f282f8) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c50) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3cf0) returned 1 [0206.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0206.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766d28 [0206.448] wcscpy (in: _Dest=0x6766d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" [0206.448] wcscat (in: _Dest=0x6766d28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.ac3a86" [0206.448] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.ac3a86", NtPathName=0x1073f990, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67773b0 [0208.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67773b0) returned 1 [0208.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828860) returned 1 [0208.423] NtQueryInformationFile (in: FileHandle=0x2028, IoStatusBlock=0x1073f968, FileInformation=0x1073f970, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1073f968, FileInformation=0x1073f970) returned 0x0 [0208.423] NtSetInformationFile (FileHandle=0x2028, IoStatusBlock=0x1073f968, FileInformation=0x1073f970, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766d28) returned 1 [0209.463] FlushFileBuffers (hFile=0x2028) returned 1 [0209.470] CloseHandle (hObject=0x2028) returned 1 [0209.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67799c0 [0209.712] wcscpy (in: _Dest=0x67799c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0209.712] wcscat (in: _Dest=0x67799c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\AC3A86-Readme.txt" [0209.712] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ac3a86-readme.txt")) returned 0xffffffff [0209.712] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.203] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1073f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1073f9ac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.206] CloseHandle (hObject=0x1bf8) returned 1 [0210.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67799c0) returned 1 [0210.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763898) returned 1 Thread: id = 6641 os_tid = 0x1ab8 [0191.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h")) returned 0x20 [0191.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0191.823] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.823] GetLastError () returned 0x5 [0191.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0191.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 6642 os_tid = 0x1728 [0191.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v")) returned 0x20 [0191.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0191.787] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.787] GetLastError () returned 0x5 [0191.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0191.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 6643 os_tid = 0x1b98 [0191.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h")) returned 0x20 [0191.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.576] GetLastError () returned 0x5 [0191.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 6644 os_tid = 0x1b9c [0191.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v")) returned 0x20 [0191.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0191.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.835] GetLastError () returned 0x5 [0191.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0191.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 6645 os_tid = 0x172c [0191.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h")) returned 0x20 [0191.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0191.833] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.833] GetLastError () returned 0x5 [0191.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0191.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 6646 os_tid = 0x1148 [0191.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v")) returned 0x20 [0191.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0191.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.832] GetLastError () returned 0x5 [0191.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0191.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 6647 os_tid = 0x1730 [0191.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h")) returned 0x20 [0191.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.830] GetLastError () returned 0x5 [0191.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0191.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 6648 os_tid = 0x1abc [0191.546] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 0x2020 [0192.150] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0198.868] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20dc [0198.869] GetFileSizeEx (in: hFile=0x20dc, lpFileSize=0xc09f7e4 | out: lpFileSize=0xc09f7e4*=179) returned 1 [0198.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0198.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0198.869] NtQuerySystemTime (in: CurrentTime=0xc09f758 | out: CurrentTime=0xc09f758*=132482711073480000) returned 0x0 [0198.869] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x78209a39 [0198.869] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x2c469f21 [0198.869] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x5bb05070 [0198.869] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x5f50b0b9 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x4e40969e [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x47b4fffb [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x50986aae [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x20063ead [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x4674c121 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x6825203d [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x1eab7217 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x6b3884c6 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x55487f7c [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x65ceb24c [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x57f1fa21 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0xae398a4 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0xc5b7588 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x7f53e008 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x330d9c49 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x38b64e [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x331b0a8 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x4734ad4 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x19418273 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x7c032e47 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x71bbdd30 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x16ade49d [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x74c3d364 [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x65f2183b [0198.870] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x50fc6965 [0198.871] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x5558d980 [0198.871] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x52326447 [0198.871] RtlRandomEx (in: Seed=0xc09f750 | out: Seed=0xc09f750) returned 0x165c492b [0198.880] ReadFile (in: hFile=0x20dc, lpBuffer=0x69838f0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc09f74c, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xc09f74c*=0xb3, lpOverlapped=0x0) returned 1 [0198.882] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.882] WriteFile (in: hFile=0x20dc, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc09f750, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xc09f750*=0xb3, lpOverlapped=0x0) returned 1 [0202.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0202.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0202.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0202.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0202.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0202.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0202.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0202.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5360 [0202.202] SetFilePointerEx (in: hFile=0x20dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.202] WriteFile (in: hFile=0x20dc, lpBuffer=0x6752840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc09f7d8, lpOverlapped=0x0 | out: lpBuffer=0x6752840*, lpNumberOfBytesWritten=0xc09f7d8*=0x10c, lpOverlapped=0x0) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0203.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0203.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40f00 [0203.371] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" [0203.371] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.ac3a86" [0203.371] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xc09f750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777640 [0206.313] FlushFileBuffers (hFile=0x20dc) returned 1 [0206.333] CloseHandle (hObject=0x20dc) returned 1 [0206.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b478 [0206.642] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0206.642] wcscat (in: _Dest=0x678b478, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\AC3A86-Readme.txt" [0206.642] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0206.642] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.664] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc09f76c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc09f76c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.667] CloseHandle (hObject=0x116c) returned 1 [0210.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b478) returned 1 [0210.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67551a8) returned 1 Thread: id = 6649 os_tid = 0x1ac0 [0191.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20 [0191.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0191.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.548] GetLastError () returned 0x5 [0191.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0191.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 6650 os_tid = 0x1734 [0191.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20 [0191.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0191.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.550] GetLastError () returned 0x5 [0191.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0191.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 6651 os_tid = 0x1ac8 [0191.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20 [0191.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0191.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.552] GetLastError () returned 0x5 [0191.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0191.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 6652 os_tid = 0xdf4 [0191.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20 [0191.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0191.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.554] GetLastError () returned 0x5 [0191.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0191.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 6653 os_tid = 0xe2c [0191.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20 [0191.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0191.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.556] GetLastError () returned 0x5 [0191.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0191.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 6654 os_tid = 0x1acc [0191.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20 [0191.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0191.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.558] GetLastError () returned 0x5 [0191.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0191.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 6655 os_tid = 0xff4 [0191.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20 [0199.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0199.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.497] GetLastError () returned 0x5 [0199.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0199.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 6656 os_tid = 0xe28 [0191.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20 [0199.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0199.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.495] GetLastError () returned 0x5 [0199.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0199.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 6657 os_tid = 0x1788 [0191.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20 [0197.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0199.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.493] GetLastError () returned 0x5 [0199.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0199.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 6658 os_tid = 0x17c8 [0191.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20 [0199.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0199.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.571] GetLastError () returned 0x5 [0199.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0199.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 6659 os_tid = 0x1ad0 [0191.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20 [0199.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0199.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.132] GetLastError () returned 0x5 [0199.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0199.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 6660 os_tid = 0x1ad4 [0191.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20 [0199.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0199.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.500] GetLastError () returned 0x5 [0199.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0199.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 6661 os_tid = 0x1ad8 [0191.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20 [0199.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0199.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.553] GetLastError () returned 0x5 [0199.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0199.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 6662 os_tid = 0x1adc [0191.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20 [0199.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0199.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.554] GetLastError () returned 0x5 [0199.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0199.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 6663 os_tid = 0x1ae0 [0191.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20 [0199.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0199.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.556] GetLastError () returned 0x5 [0199.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0199.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 6664 os_tid = 0x1b08 [0191.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20 [0199.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0199.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.558] GetLastError () returned 0x5 [0199.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0199.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 6665 os_tid = 0x1b0c [0191.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20 [0199.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0199.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.501] GetLastError () returned 0x5 [0199.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0199.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 6666 os_tid = 0x1bd0 [0191.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20 [0199.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0199.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.503] GetLastError () returned 0x5 [0199.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0199.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 6667 os_tid = 0x1bd4 [0191.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20 [0199.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0199.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.504] GetLastError () returned 0x5 [0199.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0199.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 6668 os_tid = 0x1bd8 [0191.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20 [0199.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0199.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.505] GetLastError () returned 0x5 [0199.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0199.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 6669 os_tid = 0x1bdc [0191.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20 [0199.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0199.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.506] GetLastError () returned 0x5 [0199.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0199.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 6670 os_tid = 0x1be0 [0191.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20 [0199.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0199.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.559] GetLastError () returned 0x5 [0199.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0199.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 6671 os_tid = 0x1be4 [0191.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20 [0199.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0199.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.560] GetLastError () returned 0x5 [0199.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0199.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 6672 os_tid = 0x1be8 [0191.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20 [0199.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0199.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.563] GetLastError () returned 0x5 [0199.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0199.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 6673 os_tid = 0x11a8 [0191.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20 [0199.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0199.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.562] GetLastError () returned 0x5 [0199.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0199.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 6674 os_tid = 0x1b1c [0191.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20 [0199.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0199.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.565] GetLastError () returned 0x5 [0199.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0199.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 6675 os_tid = 0x1b20 [0191.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20 [0199.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0199.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.508] GetLastError () returned 0x5 [0199.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0199.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 6676 os_tid = 0x1b24 [0191.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20 [0199.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0199.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.566] GetLastError () returned 0x5 [0199.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0199.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 6677 os_tid = 0x1b28 [0191.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20 [0199.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0199.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.498] GetLastError () returned 0x5 [0199.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0199.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 6678 os_tid = 0x1b2c [0191.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20 [0199.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0199.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.568] GetLastError () returned 0x5 [0199.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0199.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 6679 os_tid = 0x1b30 [0191.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20 [0196.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0196.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.492] GetLastError () returned 0x5 [0199.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0199.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 6680 os_tid = 0x1b38 [0191.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20 [0199.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0199.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.569] GetLastError () returned 0x5 [0199.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0199.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 6681 os_tid = 0x1428 [0191.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20 [0198.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0198.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.496] GetLastError () returned 0x5 [0199.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0199.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 6682 os_tid = 0xb0c [0191.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20 [0199.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0199.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.509] GetLastError () returned 0x5 [0199.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0199.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 6684 os_tid = 0x1b48 [0191.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 0x2020 [0191.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", dwFileAttributes=0x20) returned 1 [0196.650] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbb8 [0196.650] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0xd13f8cc | out: lpFileSize=0xd13f8cc*=450) returned 1 [0196.650] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x1be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.650] ReadFile (in: hFile=0xbb8, lpBuffer=0xd13f8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd13f8b8, lpOverlapped=0x0 | out: lpBuffer=0xd13f8a8*, lpNumberOfBytesRead=0xd13f8b8*=0x4, lpOverlapped=0x0) returned 1 [0196.652] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0196.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0196.652] NtQuerySystemTime (in: CurrentTime=0xd13f840 | out: CurrentTime=0xd13f840*=132482711051328000) returned 0x0 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x738b5844 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x7e222b46 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x32fa1ec1 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x1735fd52 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x31d97356 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x1da4a6dd [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x2dfea7b6 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x517aed2 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x4682f590 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x2995e4b9 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x46c60c46 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x35befb82 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x213d1a1d [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x6c70a93e [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x6ad1ee3a [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x2198f4c6 [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x1df56b5a [0196.652] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x1a5e3823 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x5e342ffc [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x590f070b [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x2455b4ff [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x5bda6638 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x7d26a6e [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x6197b06a [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x28947e0 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x7eb5e3b0 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x361e4a32 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x5d76249 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0xaa4cfc7 [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x3854b7dd [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x7e55ebcc [0196.653] RtlRandomEx (in: Seed=0xd13f838 | out: Seed=0xd13f838) returned 0x51168244 [0196.660] ReadFile (in: hFile=0xbb8, lpBuffer=0x12f784d8, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0xd13f834, lpOverlapped=0x0 | out: lpBuffer=0x12f784d8*, lpNumberOfBytesRead=0xd13f834*=0x1c2, lpOverlapped=0x0) returned 1 [0196.660] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.660] WriteFile (in: hFile=0xbb8, lpBuffer=0x12f7c0e0*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0xd13f838, lpOverlapped=0x0 | out: lpBuffer=0x12f7c0e0*, lpNumberOfBytesWritten=0xd13f838*=0x1c2, lpOverlapped=0x0) returned 1 [0199.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0199.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0199.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0199.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f7c0e0) returned 1 [0199.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f784d8) returned 1 [0199.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0199.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e40d60) returned 1 [0199.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ff0 [0199.649] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.649] WriteFile (in: hFile=0xbb8, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd13f8c0, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xd13f8c0*=0x10c, lpOverlapped=0x0) returned 1 [0199.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0199.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0199.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0199.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0199.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0199.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0199.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0199.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0199.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0199.691] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" [0199.691] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.ac3a86" [0199.691] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.ac3a86", NtPathName=0xd13f838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776e90 [0199.746] FlushFileBuffers (hFile=0xbb8) returned 1 [0199.755] CloseHandle (hObject=0xbb8) returned 1 [0199.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac878 [0199.776] wcscpy (in: _Dest=0x12eac878, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0199.776] wcscat (in: _Dest=0x12eac878, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\AC3A86-Readme.txt" [0199.776] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\ac3a86-readme.txt")) returned 0xffffffff [0199.776] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0199.789] WriteFile (in: hFile=0xbb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd13f854, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd13f854*=0x8b9, lpOverlapped=0x0) returned 1 [0199.805] CloseHandle (hObject=0xbb8) returned 1 [0199.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac878) returned 1 [0199.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764d08) returned 1 Thread: id = 6685 os_tid = 0x1264 [0191.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl")) returned 0x20 [0191.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0191.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.839] GetLastError () returned 0x5 [0191.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0191.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764e30) returned 1 Thread: id = 6686 os_tid = 0x1ba0 [0191.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi")) returned 0x20 [0191.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0191.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.853] GetLastError () returned 0x5 [0191.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0191.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e348) returned 1 Thread: id = 6687 os_tid = 0xa7c [0191.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran")) returned 0x20 [0191.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0191.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.875] GetLastError () returned 0x5 [0191.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0191.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d4a8) returned 1 Thread: id = 6688 os_tid = 0x64 [0191.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu")) returned 0x20 [0191.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0191.886] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.893] GetLastError () returned 0x5 [0191.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0191.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bf20) returned 1 Thread: id = 6689 os_tid = 0xb94 [0191.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo")) returned 0x20 [0192.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0192.971] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.971] GetLastError () returned 0x5 [0192.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0192.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8ccf0) returned 1 Thread: id = 6690 os_tid = 0x1430 [0191.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar")) returned 0x20 [0192.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0192.972] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.972] GetLastError () returned 0x5 [0192.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0192.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29950) returned 1 Thread: id = 6691 os_tid = 0xde4 [0191.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi")) returned 0x20 [0192.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0192.973] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.974] GetLastError () returned 0x5 [0192.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0192.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8bde8) returned 1 Thread: id = 6692 os_tid = 0x16e0 [0191.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera")) returned 0x20 [0192.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0192.975] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.975] GetLastError () returned 0x5 [0192.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0192.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8d030) returned 1 Thread: id = 6693 os_tid = 0xd94 [0191.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane")) returned 0x20 [0192.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0192.976] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.977] GetLastError () returned 0x5 [0192.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0192.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29020) returned 1 Thread: id = 6694 os_tid = 0x208c [0191.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok")) returned 0x20 [0192.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0192.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.978] GetLastError () returned 0x5 [0192.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0192.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 6695 os_tid = 0x2120 [0191.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk")) returned 0x20 [0192.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0192.979] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.979] GetLastError () returned 0x5 [0192.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0192.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8e828) returned 1 Thread: id = 6696 os_tid = 0x2124 [0191.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg")) returned 0x20 [0192.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0192.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.200] GetLastError () returned 0x5 [0192.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0192.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 Thread: id = 6697 os_tid = 0x2128 [0191.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan")) returned 0x20 [0192.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0192.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.201] GetLastError () returned 0x5 [0192.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0192.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8de68) returned 1 Thread: id = 6698 os_tid = 0x212c [0191.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 0x2020 [0191.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0196.661] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0196.661] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0x115ffefc | out: lpFileSize=0x115ffefc*=183) returned 1 [0196.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0196.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0196.661] NtQuerySystemTime (in: CurrentTime=0x115ffe70 | out: CurrentTime=0x115ffe70*=132482711051328000) returned 0x0 [0196.661] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x50e43032 [0196.661] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x5203cd64 [0196.661] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3f268259 [0196.661] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3786b9a2 [0196.661] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3e068ddc [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x25a1161c [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x36cc6250 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x19bd0bd5 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x6a9be22f [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x64ae2cc1 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x13c1b59d [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x6ebbc1a2 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3e963786 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x129dee2 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x5b6550c [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x5f2d38af [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x849aba4 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x586a9918 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x469ad1ee [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x557b5cd7 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x7d3bdd3e [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x56248af [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x238a0643 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3bbb8eb0 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0xc07892c [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x6fa98d37 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x412e1055 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x37380c7d [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x7d3d3fa0 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x73821e1c [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x3e963786 [0196.662] RtlRandomEx (in: Seed=0x115ffe68 | out: Seed=0x115ffe68) returned 0x397a9683 [0196.669] ReadFile (in: hFile=0x1f7c, lpBuffer=0x12f694b8, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0x115ffe64, lpOverlapped=0x0 | out: lpBuffer=0x12f694b8*, lpNumberOfBytesRead=0x115ffe64*=0xb7, lpOverlapped=0x0) returned 1 [0196.671] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.671] WriteFile (in: hFile=0x1f7c, lpBuffer=0x12f6d0c0*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x115ffe68, lpOverlapped=0x0 | out: lpBuffer=0x12f6d0c0*, lpNumberOfBytesWritten=0x115ffe68*=0xb7, lpOverlapped=0x0) returned 1 [0199.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0199.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5d968 [0199.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0199.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f6d0c0) returned 1 [0199.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f694b8) returned 1 [0199.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0199.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41858) returned 1 [0199.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b10 [0199.645] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.645] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x115ffef0, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x115ffef0*=0x10c, lpOverlapped=0x0) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad08) returned 1 [0199.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0199.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a948) returned 1 [0199.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0199.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d418c0 [0199.685] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" [0199.685] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.ac3a86" [0199.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0x115ffe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0199.728] FlushFileBuffers (hFile=0x1f7c) returned 1 [0199.742] CloseHandle (hObject=0x1f7c) returned 1 [0199.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac750 [0199.771] wcscpy (in: _Dest=0x12eac750, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0199.772] wcscat (in: _Dest=0x12eac750, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\AC3A86-Readme.txt" [0199.772] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0199.772] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14d0 [0199.789] WriteFile (in: hFile=0x14d0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x115ffe84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x115ffe84*=0x8b9, lpOverlapped=0x0) returned 1 [0199.803] CloseHandle (hObject=0x14d0) returned 1 [0199.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac750) returned 1 [0199.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 Thread: id = 6699 os_tid = 0x2130 [0191.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 0x2020 [0191.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", dwFileAttributes=0x20) returned 1 [0200.645] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2438 [0200.646] GetFileSizeEx (in: hFile=0x2438, lpFileSize=0x1154fbe4 | out: lpFileSize=0x1154fbe4*=178) returned 1 [0200.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0200.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0200.646] NtQuerySystemTime (in: CurrentTime=0x1154fb58 | out: CurrentTime=0x1154fb58*=132482711091264000) returned 0x0 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x7af77c10 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x65a1e758 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x741a1b87 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x67ac0fe8 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x5b0b9a00 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x30780275 [0200.646] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x6a3cb842 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x767ae2e6 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0xd3c87ea [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x61caef23 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x4da28ce [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x3bbe6af7 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x6c982e7d [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x7b6db80a [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x3f67bbd2 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x6f04e437 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x6b6a091e [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x3b753382 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x769e09b7 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x4563d298 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x5d4cbaea [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x1cff652f [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x51c26097 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x2f5ee535 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x230dab1 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x7be244f6 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x562a1035 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x3230ae42 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x30943f3d [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x2981194b [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x457a7bf3 [0200.647] RtlRandomEx (in: Seed=0x1154fb50 | out: Seed=0x1154fb50) returned 0x6addf448 [0200.657] ReadFile (in: hFile=0x2438, lpBuffer=0x12f4f080, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0x1154fb4c, lpOverlapped=0x0 | out: lpBuffer=0x12f4f080*, lpNumberOfBytesRead=0x1154fb4c*=0xb2, lpOverlapped=0x0) returned 1 [0200.660] SetFilePointerEx (in: hFile=0x2438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.660] WriteFile (in: hFile=0x2438, lpBuffer=0x12f5a498*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x1154fb50, lpOverlapped=0x0 | out: lpBuffer=0x12f5a498*, lpNumberOfBytesWritten=0x1154fb50*=0xb2, lpOverlapped=0x0) returned 1 [0203.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c148 [0203.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c3a0 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5a498) returned 1 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4f080) returned 1 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0203.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ea50) returned 1 [0203.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60e0 [0203.237] SetFilePointerEx (in: hFile=0x2438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.237] WriteFile (in: hFile=0x2438, lpBuffer=0x6767b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1154fbd8, lpOverlapped=0x0 | out: lpBuffer=0x6767b20*, lpNumberOfBytesWritten=0x1154fbd8*=0x10c, lpOverlapped=0x0) returned 1 [0204.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767b20) returned 1 [0204.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0204.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60e0) returned 1 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca210) returned 1 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0204.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b208 [0204.609] wcscpy (in: _Dest=0x678b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" [0204.609] wcscat (in: _Dest=0x678b208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.ac3a86" [0204.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.ac3a86", NtPathName=0x1154fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67785a0 [0206.587] FlushFileBuffers (hFile=0x2438) returned 1 [0206.592] CloseHandle (hObject=0x2438) returned 1 [0209.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacd18 [0209.051] wcscpy (in: _Dest=0x12eacd18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0209.051] wcscat (in: _Dest=0x12eacd18, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\AC3A86-Readme.txt" [0209.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ac3a86-readme.txt")) returned 0xffffffff [0209.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.847] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1154fb6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1154fb6c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.849] CloseHandle (hObject=0xe24) returned 1 [0209.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacd18) returned 1 [0209.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 Thread: id = 6700 os_tid = 0x2134 [0191.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0191.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0196.672] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf4 [0196.672] GetFileSizeEx (in: hFile=0xdf4, lpFileSize=0x911fc2c | out: lpFileSize=0x911fc2c*=257) returned 1 [0196.672] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.672] ReadFile (in: hFile=0xdf4, lpBuffer=0x911fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x911fc18, lpOverlapped=0x0 | out: lpBuffer=0x911fc08*, lpNumberOfBytesRead=0x911fc18*=0x4, lpOverlapped=0x0) returned 1 [0196.674] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0196.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0196.674] NtQuerySystemTime (in: CurrentTime=0x911fba0 | out: CurrentTime=0x911fba0*=132482711051484000) returned 0x0 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x2f8c6349 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x10a1867 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x1970184f [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x5296beb2 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x7679811c [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x4ca31cae [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x5b4408 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x337792a1 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x60549ffe [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x25600d4a [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x1342fdd1 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x7f201bc4 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x44d8705b [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x254a270f [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x522e4035 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x3f7c605c [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x19609b53 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x50c6e65a [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x7896fbf2 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x784361b7 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x3e91f11b [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x60d5e802 [0196.674] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x5e3e3da7 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x480f89b7 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x45610e68 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x4f6ea349 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x6c70a93e [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x1f16e375 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x5fb37f2f [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x361e4a32 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x64ae2cc1 [0196.675] RtlRandomEx (in: Seed=0x911fb98 | out: Seed=0x911fb98) returned 0x60141958 [0196.683] ReadFile (in: hFile=0xdf4, lpBuffer=0x12f5a498, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x911fb94, lpOverlapped=0x0 | out: lpBuffer=0x12f5a498*, lpNumberOfBytesRead=0x911fb94*=0x101, lpOverlapped=0x0) returned 1 [0196.683] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.683] WriteFile (in: hFile=0xdf4, lpBuffer=0x12f5e0a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x911fb98, lpOverlapped=0x0 | out: lpBuffer=0x12f5e0a0*, lpNumberOfBytesWritten=0x911fb98*=0x101, lpOverlapped=0x0) returned 1 [0199.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0199.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0199.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0199.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5e0a0) returned 1 [0199.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5a498) returned 1 [0199.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0199.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e418e8) returned 1 [0199.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52d0 [0199.655] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.655] WriteFile (in: hFile=0xdf4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x911fc20, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x911fc20*=0x10c, lpOverlapped=0x0) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0199.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0199.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0199.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41b30 [0199.694] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" [0199.694] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.ac3a86" [0199.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x911fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776fd8 [0199.749] FlushFileBuffers (hFile=0xdf4) returned 1 [0199.763] CloseHandle (hObject=0xdf4) returned 1 [0199.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacac8 [0199.782] wcscpy (in: _Dest=0x12eacac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0199.782] wcscat (in: _Dest=0x12eacac8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\AC3A86-Readme.txt" [0199.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0199.782] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12a0 [0199.796] WriteFile (in: hFile=0x12a0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x911fbb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x911fbb4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.815] CloseHandle (hObject=0x12a0) returned 1 [0199.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacac8) returned 1 [0199.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f1a8) returned 1 Thread: id = 6701 os_tid = 0x2138 [0191.911] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0191.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0196.683] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x84c [0196.683] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0x115bff4c | out: lpFileSize=0x115bff4c*=264) returned 1 [0196.683] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.683] ReadFile (in: hFile=0x84c, lpBuffer=0x115bff28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x115bff38, lpOverlapped=0x0 | out: lpBuffer=0x115bff28*, lpNumberOfBytesRead=0x115bff38*=0x4, lpOverlapped=0x0) returned 1 [0196.685] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0196.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0196.685] NtQuerySystemTime (in: CurrentTime=0x115bfec0 | out: CurrentTime=0x115bfec0*=132482711051640000) returned 0x0 [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x1f3088cb [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x64be736b [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x6d4a4885 [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x373513ea [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x6d4a4885 [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x35d777df [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x806ad29 [0196.685] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x49c9d88d [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x1df56b5a [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x8748464 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x4ed20368 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x39386a19 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x19cacad [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x19609b53 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x52b91b [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x4fbc8fd8 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x10f6167 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x4ed6404b [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x192e04eb [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x5881042e [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x60141958 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x303810c3 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x31dec838 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x4804cd79 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x23559842 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x58f7e45e [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x221b2175 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x429b31a3 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x4353dac1 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x1848bb9 [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x2ea305ac [0196.686] RtlRandomEx (in: Seed=0x115bfeb8 | out: Seed=0x115bfeb8) returned 0x6769d666 [0196.694] ReadFile (in: hFile=0x84c, lpBuffer=0x12f52c88, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x115bfeb4, lpOverlapped=0x0 | out: lpBuffer=0x12f52c88*, lpNumberOfBytesRead=0x115bfeb4*=0x108, lpOverlapped=0x0) returned 1 [0196.694] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.694] WriteFile (in: hFile=0x84c, lpBuffer=0x12f56890*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x115bfeb8, lpOverlapped=0x0 | out: lpBuffer=0x12f56890*, lpNumberOfBytesWritten=0x115bfeb8*=0x108, lpOverlapped=0x0) returned 1 [0199.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0199.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0199.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0199.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f56890) returned 1 [0199.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f52c88) returned 1 [0199.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0199.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41930) returned 1 [0199.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0199.652] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.652] WriteFile (in: hFile=0x84c, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x115bff40, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x115bff40*=0x10c, lpOverlapped=0x0) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0199.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0199.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d419f8 [0199.687] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" [0199.687] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.ac3a86" [0199.687] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x115bfeb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6776d48 [0199.733] FlushFileBuffers (hFile=0x84c) returned 1 [0199.747] CloseHandle (hObject=0x84c) returned 1 [0199.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d413e0 [0199.773] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0199.773] wcscat (in: _Dest=0x3d413e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0199.774] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0199.774] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x84c [0199.790] WriteFile (in: hFile=0x84c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x115bfed4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x115bfed4*=0x8b9, lpOverlapped=0x0) returned 1 [0199.807] CloseHandle (hObject=0x84c) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ed08) returned 1 Thread: id = 6702 os_tid = 0x213c [0191.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0200.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0200.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.589] GetLastError () returned 0x5 [0200.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 6703 os_tid = 0x2140 [0191.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0200.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.584] GetLastError () returned 0x5 [0200.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 6704 os_tid = 0x2144 [0191.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0200.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.586] GetLastError () returned 0x5 [0200.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 6705 os_tid = 0x2148 [0191.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6750e00 [0191.913] wcscpy (in: _Dest=0x6750e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0191.913] wcscat (in: _Dest=0x6750e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0191.913] wcscat (in: _Dest=0x6750e00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*" [0191.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec178 [0191.913] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0200.559] wcscmp (_String1=".", _String2=".") returned 0 [0200.559] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.559] wcscmp (_String1="..", _String2=".") returned 1 [0200.559] wcscmp (_String1="..", _String2="..") returned 0 [0200.559] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.559] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.559] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6769080 [0200.559] wcscpy (in: _Dest=0x6769080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0200.559] wcscat (in: _Dest=0x6769080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0200.559] wcscat (in: _Dest=0x6769080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" [0201.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0201.249] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x66ec178 | out: lpFindFileData=0x66ec178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.249] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0201.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec178) returned 1 [0201.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0201.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 Thread: id = 6706 os_tid = 0x214c [0191.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6767378 [0191.914] wcscpy (in: _Dest=0x6767378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0191.914] wcscat (in: _Dest=0x6767378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0191.914] wcscat (in: _Dest=0x6767378, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*" [0191.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebf10 [0191.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067100 [0200.556] wcscmp (_String1=".", _String2=".") returned 0 [0200.556] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.556] wcscmp (_String1="..", _String2=".") returned 1 [0200.556] wcscmp (_String1="..", _String2="..") returned 0 [0200.556] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.556] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.556] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67659c0 [0200.556] wcscpy (in: _Dest=0x67659c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0200.556] wcscat (in: _Dest=0x67659c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0200.556] wcscat (in: _Dest=0x67659c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" [0201.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67659c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c [0201.242] FindNextFileW (in: hFindFile=0x3067100, lpFindFileData=0x66ebf10 | out: lpFindFileData=0x66ebf10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.242] FindClose (in: hFindFile=0x3067100 | out: hFindFile=0x3067100) returned 1 [0201.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf10) returned 1 [0201.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767378) returned 1 [0201.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 Thread: id = 6707 os_tid = 0x2150 [0191.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6767490 [0191.914] wcscpy (in: _Dest=0x6767490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0191.914] wcscat (in: _Dest=0x6767490, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0191.914] wcscat (in: _Dest=0x6767490, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*" [0191.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed4b8 [0191.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067400 [0200.560] wcscmp (_String1=".", _String2=".") returned 0 [0200.560] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.560] wcscmp (_String1="..", _String2=".") returned 1 [0200.560] wcscmp (_String1="..", _String2="..") returned 0 [0200.560] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.560] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.560] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6768e30 [0200.560] wcscpy (in: _Dest=0x6768e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0200.560] wcscat (in: _Dest=0x6768e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0200.560] wcscat (in: _Dest=0x6768e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" [0201.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0201.251] FindNextFileW (in: hFindFile=0x3067400, lpFindFileData=0x66ed4b8 | out: lpFindFileData=0x66ed4b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.251] FindClose (in: hFindFile=0x3067400 | out: hFindFile=0x3067400) returned 1 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed4b8) returned 1 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767490) returned 1 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 Thread: id = 6708 os_tid = 0x2154 [0191.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x67675a8 [0191.915] wcscpy (in: _Dest=0x67675a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0191.915] wcscat (in: _Dest=0x67675a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0191.915] wcscat (in: _Dest=0x67675a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*" [0191.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eabd0 [0191.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067240 [0200.561] wcscmp (_String1=".", _String2=".") returned 0 [0200.561] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.561] wcscmp (_String1="..", _String2=".") returned 1 [0200.561] wcscmp (_String1="..", _String2="..") returned 0 [0200.561] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.561] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.561] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x676a0b0 [0200.561] wcscpy (in: _Dest=0x676a0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0200.561] wcscat (in: _Dest=0x676a0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0200.561] wcscat (in: _Dest=0x676a0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" [0201.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0201.254] FindNextFileW (in: hFindFile=0x3067240, lpFindFileData=0x66eabd0 | out: lpFindFileData=0x66eabd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.254] FindClose (in: hFindFile=0x3067240 | out: hFindFile=0x3067240) returned 1 [0201.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabd0) returned 1 [0201.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67675a8) returned 1 [0201.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 Thread: id = 6709 os_tid = 0x2158 [0191.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x67676c0 [0191.915] wcscpy (in: _Dest=0x67676c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0191.915] wcscat (in: _Dest=0x67676c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0191.915] wcscat (in: _Dest=0x67676c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*" [0191.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea700 [0191.916] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0200.561] wcscmp (_String1=".", _String2=".") returned 0 [0200.561] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.562] wcscmp (_String1="..", _String2=".") returned 1 [0200.562] wcscmp (_String1="..", _String2="..") returned 0 [0200.562] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.562] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.562] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x676a1d8 [0200.562] wcscpy (in: _Dest=0x676a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0200.562] wcscat (in: _Dest=0x676a1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0200.562] wcscat (in: _Dest=0x676a1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" [0201.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0201.256] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x66ea700 | out: lpFindFileData=0x66ea700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.256] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0201.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea700) returned 1 [0201.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67676c0) returned 1 [0201.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 Thread: id = 6710 os_tid = 0x215c [0191.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x67677d8 [0191.916] wcscpy (in: _Dest=0x67677d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0191.916] wcscat (in: _Dest=0x67677d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0191.916] wcscat (in: _Dest=0x67677d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*" [0191.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb7d8 [0191.916] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0200.562] wcscmp (_String1=".", _String2=".") returned 0 [0200.562] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.562] wcscmp (_String1="..", _String2=".") returned 1 [0200.562] wcscmp (_String1="..", _String2="..") returned 0 [0200.562] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.562] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.563] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6769f88 [0200.563] wcscpy (in: _Dest=0x6769f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0200.563] wcscat (in: _Dest=0x6769f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0200.563] wcscat (in: _Dest=0x6769f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" [0201.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378 [0201.258] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x66eb7d8 | out: lpFindFileData=0x66eb7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.262] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0201.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7d8) returned 1 [0201.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67677d8) returned 1 [0201.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767030) returned 1 Thread: id = 6711 os_tid = 0x2160 [0191.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x67678f0 [0191.919] wcscpy (in: _Dest=0x67678f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0191.919] wcscat (in: _Dest=0x67678f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0191.919] wcscat (in: _Dest=0x67678f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*" [0191.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66edbf0 [0191.919] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0200.556] wcscmp (_String1=".", _String2=".") returned 0 [0200.556] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.557] wcscmp (_String1="..", _String2=".") returned 1 [0200.557] wcscmp (_String1="..", _String2="..") returned 0 [0200.557] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.557] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.557] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6764d08 [0200.557] wcscpy (in: _Dest=0x6764d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0200.557] wcscat (in: _Dest=0x6764d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0200.557] wcscat (in: _Dest=0x6764d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" [0201.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0201.244] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x66edbf0 | out: lpFindFileData=0x66edbf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.244] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0201.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edbf0) returned 1 [0201.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67678f0) returned 1 [0201.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767148) returned 1 Thread: id = 6712 os_tid = 0x2164 [0191.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6767a08 [0191.921] wcscpy (in: _Dest=0x6767a08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0191.921] wcscat (in: _Dest=0x6767a08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0191.921] wcscat (in: _Dest=0x6767a08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*" [0191.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ecfe8 [0191.921] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0200.557] wcscmp (_String1=".", _String2=".") returned 0 [0200.557] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.557] wcscmp (_String1="..", _String2=".") returned 1 [0200.557] wcscmp (_String1="..", _String2="..") returned 0 [0200.558] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.558] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.558] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6768f58 [0200.558] wcscpy (in: _Dest=0x6768f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0200.558] wcscat (in: _Dest=0x6768f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0200.558] wcscat (in: _Dest=0x6768f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" [0201.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0201.247] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x66ecfe8 | out: lpFindFileData=0x66ecfe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.247] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0201.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfe8) returned 1 [0201.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767a08) returned 1 [0201.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767260) returned 1 Thread: id = 6713 os_tid = 0x2168 [0191.923] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 0x2020 [0191.923] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", dwFileAttributes=0x20) returned 1 [0196.694] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12a0 [0196.695] GetFileSizeEx (in: hFile=0x12a0, lpFileSize=0xdeffdc4 | out: lpFileSize=0xdeffdc4*=607) returned 1 [0196.695] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x25b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.695] ReadFile (in: hFile=0x12a0, lpBuffer=0xdeffda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdeffdb0, lpOverlapped=0x0 | out: lpBuffer=0xdeffda0*, lpNumberOfBytesRead=0xdeffdb0*=0x4, lpOverlapped=0x0) returned 1 [0196.825] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0196.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6c8 [0196.825] NtQuerySystemTime (in: CurrentTime=0xdeffd38 | out: CurrentTime=0xdeffd38*=132482711053044000) returned 0x0 [0196.825] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x3fa48dae [0196.825] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x75a615ab [0196.825] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x6ad1ee3a [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x7d9b70fb [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x73a1839e [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x406963c4 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x50640185 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x30ae2090 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x9337ac [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x5ed905ea [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x7d3d3fa0 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x7530d0d8 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x22cdb8c6 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x28bbae9c [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x26ce26cb [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x4ed20368 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x5203cd64 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x12fc5d0b [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x5fa210c4 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x3a5279ad [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x278cb18c [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x53761af [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x79953733 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x78fe1a06 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x4ec05c5e [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x94ac024 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x3620e0ea [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x51e53281 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x42915083 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x9cadb8d [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x7c92164 [0196.826] RtlRandomEx (in: Seed=0xdeffd30 | out: Seed=0xdeffd30) returned 0x41cc5463 [0196.834] ReadFile (in: hFile=0x12a0, lpBuffer=0x12f40060, nNumberOfBytesToRead=0x25f, lpNumberOfBytesRead=0xdeffd2c, lpOverlapped=0x0 | out: lpBuffer=0x12f40060*, lpNumberOfBytesRead=0xdeffd2c*=0x25f, lpOverlapped=0x0) returned 1 [0196.834] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.834] WriteFile (in: hFile=0x12a0, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0xdeffd30, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0xdeffd30*=0x25f, lpOverlapped=0x0) returned 1 [0199.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0199.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0199.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0199.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0199.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f40060) returned 1 [0199.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0199.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41588) returned 1 [0199.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5450 [0199.665] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.666] WriteFile (in: hFile=0x12a0, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdeffdb8, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0xdeffdb8*=0x10c, lpOverlapped=0x0) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0199.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41518 [0199.699] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" [0199.699] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.ac3a86" [0199.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.ac3a86", NtPathName=0xdeffd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778458 [0199.757] FlushFileBuffers (hFile=0x12a0) returned 1 [0199.764] CloseHandle (hObject=0x12a0) returned 1 [0199.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacbf0 [0199.784] wcscpy (in: _Dest=0x12eacbf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0199.784] wcscat (in: _Dest=0x12eacbf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\AC3A86-Readme.txt" [0199.784] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ac3a86-readme.txt")) returned 0xffffffff [0199.784] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xdf4 [0199.801] WriteFile (in: hFile=0xdf4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdeffd4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdeffd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.818] CloseHandle (hObject=0xdf4) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacbf0) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765898) returned 1 Thread: id = 6714 os_tid = 0x216c [0191.925] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 0x2020 [0191.925] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", dwFileAttributes=0x20) returned 1 [0196.696] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d0 [0196.697] GetFileSizeEx (in: hFile=0x14d0, lpFileSize=0xd0efb54 | out: lpFileSize=0xd0efb54*=327) returned 1 [0196.697] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x143, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.697] ReadFile (in: hFile=0x14d0, lpBuffer=0xd0efb30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd0efb40, lpOverlapped=0x0 | out: lpBuffer=0xd0efb30*, lpNumberOfBytesRead=0xd0efb40*=0x4, lpOverlapped=0x0) returned 1 [0196.703] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0196.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0196.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0196.703] NtQuerySystemTime (in: CurrentTime=0xd0efac8 | out: CurrentTime=0xd0efac8*=132482711051796000) returned 0x0 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x5fa210c4 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x753bc268 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0xe08dffc [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x6f39a937 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x7a2efbdd [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x640cba5d [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x6aa61225 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0xaafbf3a [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x65cf0e6 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x2613f00f [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x3bbb8eb0 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x31b18672 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x373513ea [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x6c95e15 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0xa0b1232 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x40f591ac [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x18f3fd27 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x21ee37d6 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x234408c8 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x64bde288 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x4702eca0 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x3de272a6 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x70d8693a [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x7ad81212 [0196.703] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x2e231d87 [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x6dd52bba [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x62564629 [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x4bbbd2d [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x30b52ac6 [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x21ff0889 [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x765c618 [0196.704] RtlRandomEx (in: Seed=0xd0efac0 | out: Seed=0xd0efac0) returned 0x4b38b83e [0196.711] ReadFile (in: hFile=0x14d0, lpBuffer=0x12f4b478, nNumberOfBytesToRead=0x147, lpNumberOfBytesRead=0xd0efabc, lpOverlapped=0x0 | out: lpBuffer=0x12f4b478*, lpNumberOfBytesRead=0xd0efabc*=0x147, lpOverlapped=0x0) returned 1 [0196.711] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.711] WriteFile (in: hFile=0x14d0, lpBuffer=0x12f4f080*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0xd0efac0, lpOverlapped=0x0 | out: lpBuffer=0x12f4f080*, lpNumberOfBytesWritten=0xd0efac0*=0x147, lpOverlapped=0x0) returned 1 [0199.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0199.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0199.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0199.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4f080) returned 1 [0199.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4b478) returned 1 [0199.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0199.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41618) returned 1 [0199.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0199.656] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.656] WriteFile (in: hFile=0x14d0, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd0efb48, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0xd0efb48*=0x10c, lpOverlapped=0x0) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0199.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40c90 [0199.695] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" [0199.695] wcscat (in: _Dest=0x3d40c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.ac3a86" [0199.696] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.ac3a86", NtPathName=0xd0efac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0199.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777df0 [0199.753] FlushFileBuffers (hFile=0x14d0) returned 1 [0199.760] CloseHandle (hObject=0x14d0) returned 1 [0199.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac9a0 [0199.779] wcscpy (in: _Dest=0x12eac9a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0199.779] wcscat (in: _Dest=0x12eac9a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\AC3A86-Readme.txt" [0199.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\ac3a86-readme.txt")) returned 0xffffffff [0199.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1344 [0199.793] WriteFile (in: hFile=0x1344, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd0efadc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd0efadc*=0x8b9, lpOverlapped=0x0) returned 1 [0199.811] CloseHandle (hObject=0x1344) returned 1 [0199.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac9a0) returned 1 [0199.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67659c0) returned 1 Thread: id = 6715 os_tid = 0x2170 [0191.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 0x20 [0201.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0201.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.143] GetLastError () returned 0x5 [0203.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0203.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3540) returned 1 Thread: id = 6716 os_tid = 0x2174 [0191.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1828 [0191.936] wcscpy (in: _Dest=0x3ee1828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0191.937] wcscat (in: _Dest=0x3ee1828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0191.937] wcscat (in: _Dest=0x3ee1828, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*" [0191.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec8b0 [0191.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0201.042] wcscmp (_String1=".", _String2=".") returned 0 [0201.042] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.042] wcscmp (_String1="..", _String2=".") returned 1 [0201.042] wcscmp (_String1="..", _String2="..") returned 0 [0201.042] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.042] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.042] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f840 [0201.042] wcscpy (in: _Dest=0x682f840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0201.042] wcscat (in: _Dest=0x682f840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0201.042] wcscat (in: _Dest=0x682f840, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" [0201.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0201.774] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.774] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.774] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682de78 [0201.774] wcscpy (in: _Dest=0x682de78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0201.774] wcscat (in: _Dest=0x682de78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0201.774] wcscat (in: _Dest=0x682de78, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" [0201.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0201.775] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x66ec8b0 | out: lpFindFileData=0x66ec8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.775] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0201.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0201.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1828) returned 1 [0201.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3280) returned 1 Thread: id = 6717 os_tid = 0x2178 [0191.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 0x20 [0204.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0204.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.129] GetLastError () returned 0x5 [0204.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0204.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2740) returned 1 Thread: id = 6718 os_tid = 0x217c [0191.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x3ea2780 [0191.938] wcscpy (in: _Dest=0x3ea2780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0191.938] wcscat (in: _Dest=0x3ea2780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0191.938] wcscat (in: _Dest=0x3ea2780, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*" [0191.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ed250 [0191.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.118] wcscmp (_String1=".", _String2=".") returned 0 [0204.118] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.118] wcscmp (_String1="..", _String2=".") returned 1 [0204.118] wcscmp (_String1="..", _String2="..") returned 0 [0204.118] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0204.118] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0204.118] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0204.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f5e8 [0204.118] wcscpy (in: _Dest=0x682f5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0204.118] wcscat (in: _Dest=0x682f5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0204.118] wcscat (in: _Dest=0x682f5e8, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0204.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0204.119] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0204.119] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0204.119] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0204.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f9d0 [0204.119] wcscpy (in: _Dest=0x682f9d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0204.119] wcscat (in: _Dest=0x682f9d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0204.119] wcscat (in: _Dest=0x682f9d0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" [0204.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0204.121] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.121] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.121] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682f070 [0204.121] wcscpy (in: _Dest=0x682f070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0204.121] wcscat (in: _Dest=0x682f070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0204.121] wcscat (in: _Dest=0x682f070, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0204.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0204.122] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.122] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.122] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e710 [0204.122] wcscpy (in: _Dest=0x682e710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0204.122] wcscat (in: _Dest=0x682e710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0204.122] wcscat (in: _Dest=0x682e710, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0204.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0204.123] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66ed250 | out: lpFindFileData=0x66ed250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.123] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed250) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2780) returned 1 [0204.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a10) returned 1 Thread: id = 6719 os_tid = 0x2180 [0191.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 0x20 [0204.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0204.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.182] GetLastError () returned 0x5 [0204.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0204.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee27f8) returned 1 Thread: id = 6720 os_tid = 0x2184 [0191.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 0x20 [0203.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0203.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.263] GetLastError () returned 0x5 [0203.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0203.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2410) returned 1 Thread: id = 6721 os_tid = 0x218c [0191.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea2db0 [0191.940] wcscpy (in: _Dest=0x3ea2db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0191.940] wcscat (in: _Dest=0x3ea2db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0191.940] wcscat (in: _Dest=0x3ea2db0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*" [0191.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea498 [0191.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0201.041] wcscmp (_String1=".", _String2=".") returned 0 [0201.041] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.041] wcscmp (_String1="..", _String2=".") returned 1 [0201.041] wcscmp (_String1="..", _String2="..") returned 0 [0201.041] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.041] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.041] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0201.041] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0201.041] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0201.041] wcscat (in: _Dest=0x332268, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0201.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0201.938] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.938] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.938] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333be8 [0201.938] wcscpy (in: _Dest=0x333be8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0201.939] wcscat (in: _Dest=0x333be8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0201.939] wcscat (in: _Dest=0x333be8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" [0201.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0201.940] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66ea498 | out: lpFindFileData=0x66ea498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.940] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0201.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0201.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2db0) returned 1 [0201.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 6722 os_tid = 0x21a8 [0191.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 0x20 [0201.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0201.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.155] GetLastError () returned 0x5 [0202.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0202.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea22b0) returned 1 Thread: id = 6723 os_tid = 0x21b4 [0191.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1d30 [0191.941] wcscpy (in: _Dest=0x3ee1d30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0191.941] wcscat (in: _Dest=0x3ee1d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0191.941] wcscat (in: _Dest=0x3ee1d30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*" [0191.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eae38 [0191.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.112] wcscmp (_String1=".", _String2=".") returned 0 [0204.112] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.112] wcscmp (_String1="..", _String2=".") returned 1 [0204.112] wcscmp (_String1="..", _String2="..") returned 0 [0204.112] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.112] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.112] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x30125c8 [0204.112] wcscpy (in: _Dest=0x30125c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0204.112] wcscat (in: _Dest=0x30125c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0204.112] wcscat (in: _Dest=0x30125c8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" [0204.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30125c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0204.113] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0204.113] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0204.113] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0204.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35750 [0204.113] wcscpy (in: _Dest=0x3e35750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0204.113] wcscat (in: _Dest=0x3e35750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0204.113] wcscat (in: _Dest=0x3e35750, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0204.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0204.114] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.114] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.114] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36520 [0204.114] wcscpy (in: _Dest=0x3e36520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0204.114] wcscat (in: _Dest=0x3e36520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0204.114] wcscat (in: _Dest=0x3e36520, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0204.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0204.115] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.116] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.116] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36e10 [0204.116] wcscpy (in: _Dest=0x3e36e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0204.116] wcscat (in: _Dest=0x3e36e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0204.116] wcscat (in: _Dest=0x3e36e10, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0204.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0204.117] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eae38 | out: lpFindFileData=0x66eae38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.117] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae38) returned 1 [0204.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1d30) returned 1 [0204.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2688) returned 1 Thread: id = 6724 os_tid = 0x21b8 [0191.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 0x20 [0204.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0204.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.153] GetLastError () returned 0x5 [0204.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0204.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675aff8) returned 1 Thread: id = 6725 os_tid = 0x21bc [0191.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3ee1770 [0191.941] wcscpy (in: _Dest=0x3ee1770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0191.941] wcscat (in: _Dest=0x3ee1770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0191.941] wcscat (in: _Dest=0x3ee1770, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*" [0191.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb0a0 [0191.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.147] wcscmp (_String1=".", _String2=".") returned 0 [0204.147] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.147] wcscmp (_String1="..", _String2=".") returned 1 [0204.147] wcscmp (_String1="..", _String2="..") returned 0 [0204.147] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0204.147] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0204.148] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0204.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36ad0 [0204.148] wcscpy (in: _Dest=0x3e36ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0204.148] wcscat (in: _Dest=0x3e36ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0204.148] wcscat (in: _Dest=0x3e36ad0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" [0204.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0204.149] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.149] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.149] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3e36a00 [0204.149] wcscpy (in: _Dest=0x3e36a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0204.149] wcscat (in: _Dest=0x3e36a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0204.149] wcscat (in: _Dest=0x3e36a00, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0204.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0204.150] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.150] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.150] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e366c0 [0204.150] wcscpy (in: _Dest=0x3e366c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0204.150] wcscat (in: _Dest=0x3e366c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0204.150] wcscat (in: _Dest=0x3e366c0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0204.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e366c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0204.151] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66eb0a0 | out: lpFindFileData=0x66eb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.151] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0204.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1770) returned 1 [0204.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2518) returned 1 Thread: id = 6726 os_tid = 0x21c0 [0191.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 0x20 [0204.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0204.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.146] GetLastError () returned 0x5 [0204.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0204.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b0b8) returned 1 Thread: id = 6727 os_tid = 0x21c8 [0191.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 0x20 [0204.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0204.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.177] GetLastError () returned 0x5 [0204.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0204.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea31d0) returned 1 Thread: id = 6728 os_tid = 0x21d4 [0191.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x3ea38b0 [0191.942] wcscpy (in: _Dest=0x3ea38b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0191.942] wcscat (in: _Dest=0x3ea38b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0191.942] wcscat (in: _Dest=0x3ea38b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*" [0191.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb308 [0191.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0201.040] wcscmp (_String1=".", _String2=".") returned 0 [0201.040] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.040] wcscmp (_String1="..", _String2=".") returned 1 [0201.040] wcscmp (_String1="..", _String2="..") returned 0 [0201.040] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0201.040] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0201.040] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x334068 [0201.040] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0201.040] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0201.040] wcscat (in: _Dest=0x334068, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" [0201.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0201.437] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.438] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.438] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3329e8 [0201.438] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0201.438] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0201.438] wcscat (in: _Dest=0x3329e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" [0201.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078 [0201.439] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.439] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.439] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0201.439] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0201.439] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0201.439] wcscat (in: _Dest=0x3336a8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" [0201.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8 [0201.441] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66eb308 | out: lpFindFileData=0x66eb308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.441] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0201.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb308) returned 1 [0201.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38b0) returned 1 [0201.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df88) returned 1 Thread: id = 6729 os_tid = 0x21e4 [0191.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 0x20 [0203.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0203.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.279] GetLastError () returned 0x5 [0203.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0203.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3750) returned 1 Thread: id = 6730 os_tid = 0x21ec [0191.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 0x20 [0201.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0201.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.155] GetLastError () returned 0x5 [0202.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0202.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1490) returned 1 Thread: id = 6731 os_tid = 0x21f8 [0191.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 0x20 [0204.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0204.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.127] GetLastError () returned 0x5 [0204.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0204.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3330) returned 1 Thread: id = 6732 os_tid = 0x2204 [0191.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee1998 [0191.944] wcscpy (in: _Dest=0x3ee1998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0191.944] wcscat (in: _Dest=0x3ee1998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0191.944] wcscat (in: _Dest=0x3ee1998, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*" [0191.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eb570 [0191.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0201.036] wcscmp (_String1=".", _String2=".") returned 0 [0201.036] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.036] wcscmp (_String1="..", _String2=".") returned 1 [0201.036] wcscmp (_String1="..", _String2="..") returned 0 [0201.036] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0201.036] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0201.036] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0201.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682e260 [0201.036] wcscpy (in: _Dest=0x682e260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0201.036] wcscat (in: _Dest=0x682e260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0201.036] wcscat (in: _Dest=0x682e260, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" [0201.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0201.432] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.432] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.432] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682ec88 [0201.432] wcscpy (in: _Dest=0x682ec88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0201.432] wcscat (in: _Dest=0x682ec88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0201.432] wcscat (in: _Dest=0x682ec88, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0201.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ec88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c0 [0201.433] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.433] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.433] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682ddb0 [0201.433] wcscpy (in: _Dest=0x682ddb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0201.433] wcscat (in: _Dest=0x682ddb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0201.434] wcscat (in: _Dest=0x682ddb0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0201.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ddb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0201.435] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x66eb570 | out: lpFindFileData=0x66eb570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.435] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0201.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb570) returned 1 [0201.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1998) returned 1 [0201.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea24c0) returned 1 Thread: id = 6733 os_tid = 0x1c3c [0191.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 0x20 [0204.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0204.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.107] GetLastError () returned 0x5 [0204.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0204.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee28b0) returned 1 Thread: id = 6734 os_tid = 0x704 [0191.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 0x20 [0201.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0201.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.155] GetLastError () returned 0x5 [0202.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0202.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1de8) returned 1 Thread: id = 6735 os_tid = 0xbe8 [0191.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 0x20 [0201.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0201.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.087] GetLastError () returned 0x5 [0204.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0204.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b178) returned 1 Thread: id = 6736 os_tid = 0x1c40 [0191.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e180 [0191.945] wcscpy (in: _Dest=0x697e180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0191.945] wcscat (in: _Dest=0x697e180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0191.945] wcscat (in: _Dest=0x697e180, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*" [0191.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec648 [0191.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f800 [0201.038] wcscmp (_String1=".", _String2=".") returned 0 [0201.038] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.039] wcscmp (_String1="..", _String2=".") returned 1 [0201.039] wcscmp (_String1="..", _String2="..") returned 0 [0201.039] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.039] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.039] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0201.039] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0201.039] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0201.039] wcscat (in: _Dest=0x333fa8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" [0201.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0201.770] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.770] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.770] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333528 [0201.770] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0201.770] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0201.770] wcscat (in: _Dest=0x333528, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" [0201.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0201.771] FindNextFileW (in: hFindFile=0x3f1f800, lpFindFileData=0x66ec648 | out: lpFindFileData=0x66ec648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.772] FindClose (in: hFindFile=0x3f1f800 | out: hFindFile=0x3f1f800) returned 1 [0201.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec648) returned 1 [0201.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e180) returned 1 [0201.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0d8) returned 1 Thread: id = 6737 os_tid = 0xbb0 [0192.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 0x20 [0204.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0204.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.126] GetLastError () returned 0x5 [0204.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0204.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fc0) returned 1 Thread: id = 6738 os_tid = 0xc18 [0192.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml")) returned 0x20 [0195.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0195.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.202] GetLastError () returned 0x5 [0195.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0195.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f4f0) returned 1 Thread: id = 6739 os_tid = 0x710 [0192.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc")) returned 0x20 [0195.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0195.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.172] GetLastError () returned 0x5 [0195.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0195.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 6740 os_tid = 0x1c44 [0192.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv")) returned 0x20 [0195.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0195.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.201] GetLastError () returned 0x5 [0195.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0195.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fb70) returned 1 Thread: id = 6741 os_tid = 0x1c48 [0192.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml")) returned 0x20 [0195.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0195.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.199] GetLastError () returned 0x5 [0195.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0195.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10270) returned 1 Thread: id = 6742 os_tid = 0x124 [0192.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc")) returned 0x20 [0195.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0195.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.198] GetLastError () returned 0x5 [0195.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0195.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 6743 os_tid = 0x1c4c [0192.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc")) returned 0x20 [0195.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0195.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.212] GetLastError () returned 0x5 [0195.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 6744 os_tid = 0x1c50 [0192.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc")) returned 0x20 [0195.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0195.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.211] GetLastError () returned 0x5 [0195.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0195.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 6745 os_tid = 0xc20 [0192.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc")) returned 0x20 [0195.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0195.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.209] GetLastError () returned 0x5 [0195.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0195.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 6746 os_tid = 0xc1c [0192.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc")) returned 0x20 [0195.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0195.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.208] GetLastError () returned 0x5 [0195.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0195.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 6747 os_tid = 0xbcc [0192.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc")) returned 0x20 [0195.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0195.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.206] GetLastError () returned 0x5 [0195.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0195.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 6748 os_tid = 0x1c54 [0192.207] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0192.207] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0198.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe20 [0198.883] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0xf9ff91c | out: lpFileSize=0xf9ff91c*=11221) returned 1 [0198.883] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x2bd1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.883] ReadFile (in: hFile=0xe20, lpBuffer=0xf9ff8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf9ff908, lpOverlapped=0x0 | out: lpBuffer=0xf9ff8f8*, lpNumberOfBytesRead=0xf9ff908*=0x4, lpOverlapped=0x0) returned 1 [0198.885] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0198.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0198.886] NtQuerySystemTime (in: CurrentTime=0xf9ff890 | out: CurrentTime=0xf9ff890*=132482711073636000) returned 0x0 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x1e64db47 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x5fc44e24 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0xca7254 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x239be7b5 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x2191bc32 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x32f8c73e [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x565acafd [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x7c723398 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x7105fb63 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x9bea4ba [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x70db22a3 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x6a26ef60 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x3757303a [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x74069711 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x2527ff77 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x71dc3723 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x4d61e17a [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x3833ceca [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x7e75741 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x39026227 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x7499f00a [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0xd5fd592 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x2dc2ef5 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0xe70900 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x71eb8d41 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x21eab857 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x1575e88a [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x15a83076 [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x41d5b2fd [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x2734759a [0198.886] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x5777765d [0198.887] RtlRandomEx (in: Seed=0xf9ff888 | out: Seed=0xf9ff888) returned 0x19a148be [0198.897] ReadFile (in: hFile=0xe20, lpBuffer=0x698b100, nNumberOfBytesToRead=0x2bd5, lpNumberOfBytesRead=0xf9ff884, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xf9ff884*=0x2bd5, lpOverlapped=0x0) returned 1 [0198.898] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.898] WriteFile (in: hFile=0xe20, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x2bd5, lpNumberOfBytesWritten=0xf9ff888, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xf9ff888*=0x2bd5, lpOverlapped=0x0) returned 1 [0202.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0202.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0202.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0202.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0202.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0202.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 [0202.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300ff0) returned 1 [0202.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x300ff0 [0202.204] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.204] WriteFile (in: hFile=0xe20, lpBuffer=0x6759d38*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xf9ff910, lpOverlapped=0x0 | out: lpBuffer=0x6759d38*, lpNumberOfBytesWritten=0xf9ff910*=0x11e, lpOverlapped=0x0) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759d38) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300a08) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300ff0) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0203.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0203.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0203.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0203.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x6777a18 [0203.374] wcscpy (in: _Dest=0x6777a18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" [0203.374] wcscat (in: _Dest=0x6777a18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.ac3a86" [0203.374] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0xf9ff888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x66ce310 [0206.318] FlushFileBuffers (hFile=0xe20) returned 1 [0206.329] CloseHandle (hObject=0xe20) returned 1 [0206.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x674fe60 [0206.641] wcscpy (in: _Dest=0x674fe60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0206.641] wcscat (in: _Dest=0x674fe60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\AC3A86-Readme.txt" [0206.641] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0206.641] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.650] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf9ff8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf9ff8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.652] CloseHandle (hObject=0x116c) returned 1 [0210.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fe60) returned 1 [0210.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40198) returned 1 Thread: id = 6749 os_tid = 0xef0 [0192.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json")) returned 0x2020 [0192.209] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0198.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x108c [0198.899] GetFileSizeEx (in: hFile=0x108c, lpFileSize=0xcddf76c | out: lpFileSize=0xcddf76c*=278) returned 1 [0198.899] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.900] ReadFile (in: hFile=0x108c, lpBuffer=0xcddf748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcddf758, lpOverlapped=0x0 | out: lpBuffer=0xcddf748*, lpNumberOfBytesRead=0xcddf758*=0x4, lpOverlapped=0x0) returned 1 [0198.902] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0198.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0198.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0198.902] NtQuerySystemTime (in: CurrentTime=0xcddf6e0 | out: CurrentTime=0xcddf6e0*=132482711073792000) returned 0x0 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x54c8340a [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0xb922e66 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x6fc15dc3 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x50c64f9a [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x62c5117f [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x4c5392b4 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x702fbfa3 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x667f31d2 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x221faf11 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x6a81fd60 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x32a8e264 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x57896081 [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x33aa18ac [0198.902] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x2e1ecb60 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x8cbe277 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x52768cd6 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x3b6efa6a [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x895197 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x4189ec84 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x64be736b [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x1b408f83 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x40ea86bd [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x2e5f8824 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x4e17fbdf [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x23141574 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x427a87f4 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x5ce894c1 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x589421bd [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x47503a65 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x206fb401 [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x4595a06d [0198.903] RtlRandomEx (in: Seed=0xcddf6d8 | out: Seed=0xcddf6d8) returned 0x6d4a50e5 [0198.919] ReadFile (in: hFile=0x108c, lpBuffer=0x6992910, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xcddf6d4, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0xcddf6d4*=0x116, lpOverlapped=0x0) returned 1 [0198.920] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.920] WriteFile (in: hFile=0x108c, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xcddf6d8, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xcddf6d8*=0x116, lpOverlapped=0x0) returned 1 [0202.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0202.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0202.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0202.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0202.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0202.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0202.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300978) returned 1 [0202.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5300 [0202.206] SetFilePointerEx (in: hFile=0x108c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.206] WriteFile (in: hFile=0x108c, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcddf760, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0xcddf760*=0x10c, lpOverlapped=0x0) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b460) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0203.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0203.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0203.375] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" [0203.375] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.ac3a86" [0203.375] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xcddf6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777b60 [0206.322] FlushFileBuffers (hFile=0x108c) returned 1 [0206.337] CloseHandle (hObject=0x108c) returned 1 [0206.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f1a8 [0206.644] wcscpy (in: _Dest=0x674f1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0206.644] wcscat (in: _Dest=0x674f1a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\AC3A86-Readme.txt" [0206.644] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0206.644] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.654] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcddf6f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcddf6f4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.662] CloseHandle (hObject=0x116c) returned 1 [0210.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f1a8) returned 1 [0210.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 Thread: id = 6750 os_tid = 0x1c58 [0192.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818948 [0192.209] wcscpy (in: _Dest=0x6818948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0192.209] wcscat (in: _Dest=0x6818948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0192.209] wcscat (in: _Dest=0x6818948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*" [0192.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b81b8 [0192.210] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0195.000] wcscmp (_String1=".", _String2=".") returned 0 [0195.000] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.000] wcscmp (_String1="..", _String2=".") returned 1 [0195.000] wcscmp (_String1="..", _String2="..") returned 0 [0195.000] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.000] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.000] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67652d0 [0195.000] wcscpy (in: _Dest=0x67652d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0195.000] wcscat (in: _Dest=0x67652d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0195.000] wcscat (in: _Dest=0x67652d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" [0196.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67652d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0196.994] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.994] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0196.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b8) returned 1 [0196.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818948) returned 1 [0196.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae420) returned 1 Thread: id = 6751 os_tid = 0x1c5c [0192.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817df0 [0192.211] wcscpy (in: _Dest=0x6817df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0192.211] wcscat (in: _Dest=0x6817df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0192.211] wcscat (in: _Dest=0x6817df0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*" [0192.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0192.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0195.001] wcscmp (_String1=".", _String2=".") returned 0 [0195.001] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.001] wcscmp (_String1="..", _String2=".") returned 1 [0195.001] wcscmp (_String1="..", _String2="..") returned 0 [0195.001] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.001] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.001] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67507a0 [0195.001] wcscpy (in: _Dest=0x67507a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0195.001] wcscat (in: _Dest=0x67507a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0195.001] wcscat (in: _Dest=0x67507a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" [0196.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67507a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0196.996] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.996] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0196.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0196.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817df0) returned 1 [0196.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edcb48) returned 1 Thread: id = 6752 os_tid = 0x1930 [0192.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818f78 [0192.212] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0192.212] wcscat (in: _Dest=0x6818f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0192.212] wcscat (in: _Dest=0x6818f78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*" [0192.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9e98 [0192.212] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0195.001] wcscmp (_String1=".", _String2=".") returned 0 [0195.001] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.002] wcscmp (_String1="..", _String2=".") returned 1 [0195.002] wcscmp (_String1="..", _String2="..") returned 0 [0195.002] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.002] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.002] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674ff88 [0195.002] wcscpy (in: _Dest=0x674ff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0195.002] wcscat (in: _Dest=0x674ff88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0195.002] wcscat (in: _Dest=0x674ff88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" [0196.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0196.998] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.998] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0196.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9e98) returned 1 [0196.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0196.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc518) returned 1 Thread: id = 6753 os_tid = 0x1c60 [0192.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819ad0 [0192.213] wcscpy (in: _Dest=0x6819ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0192.213] wcscat (in: _Dest=0x6819ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0192.213] wcscat (in: _Dest=0x6819ad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*" [0192.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0192.213] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0195.002] wcscmp (_String1=".", _String2=".") returned 0 [0195.002] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.002] wcscmp (_String1="..", _String2=".") returned 1 [0195.002] wcscmp (_String1="..", _String2="..") returned 0 [0195.002] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.002] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.002] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67500b0 [0195.003] wcscpy (in: _Dest=0x67500b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0195.003] wcscat (in: _Dest=0x67500b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0195.003] wcscat (in: _Dest=0x67500b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" [0196.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67500b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0197.000] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.000] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0197.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0197.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819ad0) returned 1 [0197.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc830) returned 1 Thread: id = 6754 os_tid = 0x1c64 [0192.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68199c8 [0192.217] wcscpy (in: _Dest=0x68199c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0192.217] wcscat (in: _Dest=0x68199c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0192.217] wcscat (in: _Dest=0x68199c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*" [0192.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0192.217] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0195.003] wcscmp (_String1=".", _String2=".") returned 0 [0195.003] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.003] wcscmp (_String1="..", _String2=".") returned 1 [0195.003] wcscmp (_String1="..", _String2="..") returned 0 [0195.003] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.003] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.003] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674ebe0 [0195.004] wcscpy (in: _Dest=0x674ebe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0195.004] wcscat (in: _Dest=0x674ebe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0195.004] wcscat (in: _Dest=0x674ebe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" [0197.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ebe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0197.002] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.003] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0197.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0197.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68199c8) returned 1 [0197.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae738) returned 1 Thread: id = 6755 os_tid = 0x1c68 [0192.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68198c0 [0192.218] wcscpy (in: _Dest=0x68198c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0192.218] wcscat (in: _Dest=0x68198c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0192.218] wcscat (in: _Dest=0x68198c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*" [0192.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0192.218] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0195.004] wcscmp (_String1=".", _String2=".") returned 0 [0195.004] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.004] wcscmp (_String1="..", _String2=".") returned 1 [0195.004] wcscmp (_String1="..", _String2="..") returned 0 [0195.004] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.004] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.004] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674f3f8 [0195.004] wcscpy (in: _Dest=0x674f3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0195.004] wcscat (in: _Dest=0x674f3f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0195.005] wcscat (in: _Dest=0x674f3f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" [0197.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0197.004] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.004] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0197.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0197.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68198c0) returned 1 [0197.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aeb58) returned 1 Thread: id = 6756 os_tid = 0x1c6c [0192.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68196b0 [0192.219] wcscpy (in: _Dest=0x68196b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0192.219] wcscat (in: _Dest=0x68196b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0192.219] wcscat (in: _Dest=0x68196b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*" [0192.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0192.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0195.005] wcscmp (_String1=".", _String2=".") returned 0 [0195.005] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.005] wcscmp (_String1="..", _String2=".") returned 1 [0195.005] wcscmp (_String1="..", _String2="..") returned 0 [0195.005] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.005] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.005] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674eab8 [0195.005] wcscpy (in: _Dest=0x674eab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0195.005] wcscat (in: _Dest=0x674eab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0195.005] wcscat (in: _Dest=0x674eab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" [0196.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674eab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0196.332] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.332] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0196.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0196.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68196b0) returned 1 [0196.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea50) returned 1 Thread: id = 6757 os_tid = 0x1c94 [0192.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68195a8 [0192.220] wcscpy (in: _Dest=0x68195a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0192.220] wcscat (in: _Dest=0x68195a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0192.220] wcscat (in: _Dest=0x68195a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*" [0192.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0192.220] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0195.006] wcscmp (_String1=".", _String2=".") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.006] wcscmp (_String1="..", _String2=".") returned 1 [0195.006] wcscmp (_String1="..", _String2="..") returned 0 [0195.006] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.006] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.006] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674ee30 [0195.006] wcscpy (in: _Dest=0x674ee30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0195.006] wcscat (in: _Dest=0x674ee30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0195.006] wcscat (in: _Dest=0x674ee30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" [0197.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0197.006] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.007] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0197.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0197.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68195a8) returned 1 [0197.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae318) returned 1 Thread: id = 6758 os_tid = 0x1c98 [0192.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68194a0 [0192.220] wcscpy (in: _Dest=0x68194a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0192.221] wcscat (in: _Dest=0x68194a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0192.221] wcscat (in: _Dest=0x68194a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*" [0192.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0192.221] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0195.007] wcscmp (_String1=".", _String2=".") returned 0 [0195.007] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.007] wcscmp (_String1="..", _String2=".") returned 1 [0195.007] wcscmp (_String1="..", _String2="..") returned 0 [0195.007] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe584b750, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.007] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.007] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674f648 [0195.007] wcscpy (in: _Dest=0x674f648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0195.007] wcscat (in: _Dest=0x674f648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0195.007] wcscat (in: _Dest=0x674f648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" [0197.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674f648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0197.009] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe584b750, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.009] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0197.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0197.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a0) returned 1 [0197.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae210) returned 1 Thread: id = 6759 os_tid = 0x1c9c [0192.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819398 [0192.221] wcscpy (in: _Dest=0x6819398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0192.222] wcscat (in: _Dest=0x6819398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0192.222] wcscat (in: _Dest=0x6819398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*" [0192.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0192.222] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0195.008] wcscmp (_String1=".", _String2=".") returned 0 [0195.008] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.008] wcscmp (_String1="..", _String2=".") returned 1 [0195.008] wcscmp (_String1="..", _String2="..") returned 0 [0195.008] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5855390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.008] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.008] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6750678 [0195.008] wcscpy (in: _Dest=0x6750678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0195.008] wcscat (in: _Dest=0x6750678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0195.008] wcscat (in: _Dest=0x6750678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" [0197.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0197.011] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5855390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.011] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0197.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0197.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819398) returned 1 [0197.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae108) returned 1 Thread: id = 6760 os_tid = 0x1ca0 [0192.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6767c38 [0192.223] wcscpy (in: _Dest=0x6767c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0192.223] wcscat (in: _Dest=0x6767c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0192.223] wcscat (in: _Dest=0x6767c38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*" [0192.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0192.223] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0195.008] wcscmp (_String1=".", _String2=".") returned 0 [0195.009] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.009] wcscmp (_String1="..", _String2=".") returned 1 [0195.009] wcscmp (_String1="..", _String2="..") returned 0 [0195.009] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe585efd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.009] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.009] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6750300 [0195.009] wcscpy (in: _Dest=0x6750300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0195.009] wcscat (in: _Dest=0x6750300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0195.009] wcscat (in: _Dest=0x6750300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" [0197.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6750300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0197.012] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe585efd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.012] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0197.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0197.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767c38) returned 1 [0197.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae000) returned 1 Thread: id = 6761 os_tid = 0x1d2c [0192.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6767d50 [0192.224] wcscpy (in: _Dest=0x6767d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0192.224] wcscat (in: _Dest=0x6767d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0192.224] wcscat (in: _Dest=0x6767d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*" [0192.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0192.224] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0195.009] wcscmp (_String1=".", _String2=".") returned 0 [0195.009] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.009] wcscmp (_String1="..", _String2=".") returned 1 [0195.009] wcscmp (_String1="..", _String2="..") returned 0 [0195.009] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5868c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe586b320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.010] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.010] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67553f8 [0195.010] wcscpy (in: _Dest=0x67553f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0195.010] wcscat (in: _Dest=0x67553f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0195.010] wcscat (in: _Dest=0x67553f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" [0197.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67553f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0197.014] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5868c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe586b320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.014] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0197.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0197.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767d50) returned 1 [0197.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adef8) returned 1 Thread: id = 6762 os_tid = 0x1d30 [0192.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819290 [0192.225] wcscpy (in: _Dest=0x6819290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0192.225] wcscat (in: _Dest=0x6819290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0192.225] wcscat (in: _Dest=0x6819290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*" [0192.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0192.225] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0195.011] wcscmp (_String1=".", _String2=".") returned 0 [0195.011] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.011] wcscmp (_String1="..", _String2=".") returned 1 [0195.011] wcscmp (_String1="..", _String2="..") returned 0 [0195.011] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5877670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.011] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.011] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755648 [0195.011] wcscpy (in: _Dest=0x6755648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0195.011] wcscat (in: _Dest=0x6755648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0195.011] wcscat (in: _Dest=0x6755648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" [0197.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0197.016] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5877670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.016] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0197.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0197.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819290) returned 1 [0197.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68addf0) returned 1 Thread: id = 6763 os_tid = 0x1ca4 [0192.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819188 [0192.227] wcscpy (in: _Dest=0x6819188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0192.227] wcscat (in: _Dest=0x6819188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0192.227] wcscat (in: _Dest=0x6819188, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*" [0192.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0192.227] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0195.011] wcscmp (_String1=".", _String2=".") returned 0 [0195.012] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.012] wcscmp (_String1="..", _String2=".") returned 1 [0195.012] wcscmp (_String1="..", _String2="..") returned 0 [0195.012] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58812b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.012] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.012] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6754f58 [0195.012] wcscpy (in: _Dest=0x6754f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0195.012] wcscat (in: _Dest=0x6754f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0195.012] wcscat (in: _Dest=0x6754f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" [0197.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0197.018] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58812b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.018] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0197.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0197.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819188) returned 1 [0197.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adce8) returned 1 Thread: id = 6764 os_tid = 0x15ec [0192.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68197b8 [0192.228] wcscpy (in: _Dest=0x68197b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0192.228] wcscat (in: _Dest=0x68197b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0192.228] wcscat (in: _Dest=0x68197b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*" [0192.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0192.228] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0195.012] wcscmp (_String1=".", _String2=".") returned 0 [0195.013] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.013] wcscmp (_String1="..", _String2=".") returned 1 [0195.013] wcscmp (_String1="..", _String2="..") returned 0 [0195.013] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe588d600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.013] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.013] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755898 [0195.013] wcscpy (in: _Dest=0x6755898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0195.013] wcscat (in: _Dest=0x6755898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0195.013] wcscat (in: _Dest=0x6755898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" [0197.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0197.021] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe588d600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.021] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0197.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0197.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197b8) returned 1 [0197.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae948) returned 1 Thread: id = 6765 os_tid = 0x15f0 [0192.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ce8 [0192.229] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0192.229] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0192.229] wcscat (in: _Dest=0x6817ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*" [0192.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0192.229] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0195.013] wcscmp (_String1=".", _String2=".") returned 0 [0195.013] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.013] wcscmp (_String1="..", _String2=".") returned 1 [0195.014] wcscmp (_String1="..", _String2="..") returned 0 [0195.014] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5897240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.014] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.014] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6754d08 [0195.014] wcscpy (in: _Dest=0x6754d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0195.014] wcscat (in: _Dest=0x6754d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0195.014] wcscat (in: _Dest=0x6754d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" [0197.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0197.048] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5897240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.048] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0197.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0197.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 [0197.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aed68) returned 1 Thread: id = 6766 os_tid = 0x1ca8 [0192.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818108 [0192.230] wcscpy (in: _Dest=0x6818108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0192.230] wcscat (in: _Dest=0x6818108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0192.230] wcscat (in: _Dest=0x6818108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*" [0192.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0192.230] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef80 [0195.014] wcscmp (_String1=".", _String2=".") returned 0 [0195.014] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.014] wcscmp (_String1="..", _String2=".") returned 1 [0195.014] wcscmp (_String1="..", _String2="..") returned 0 [0195.014] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58a0e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a3590, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.014] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.015] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6755ae8 [0195.015] wcscpy (in: _Dest=0x6755ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0195.015] wcscat (in: _Dest=0x6755ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0195.015] wcscat (in: _Dest=0x6755ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" [0197.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6755ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0197.050] FindNextFileW (in: hFindFile=0x3f1ef80, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58a0e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a3590, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.050] FindClose (in: hFindFile=0x3f1ef80 | out: hFindFile=0x3f1ef80) returned 1 [0197.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0197.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818108) returned 1 [0197.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aef78) returned 1 Thread: id = 6767 os_tid = 0x1cac [0192.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818000 [0192.231] wcscpy (in: _Dest=0x6818000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0192.231] wcscat (in: _Dest=0x6818000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0192.231] wcscat (in: _Dest=0x6818000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*" [0192.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0192.231] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0195.015] wcscmp (_String1=".", _String2=".") returned 0 [0195.015] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.015] wcscmp (_String1="..", _String2=".") returned 1 [0195.015] wcscmp (_String1="..", _String2="..") returned 0 [0195.015] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ad1d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.015] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.015] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6754ab8 [0195.015] wcscpy (in: _Dest=0x6754ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0195.015] wcscat (in: _Dest=0x6754ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0195.016] wcscat (in: _Dest=0x6754ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" [0195.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6754ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0195.592] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ad1d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.592] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0195.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0195.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818000) returned 1 [0195.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af5a8) returned 1 Thread: id = 6768 os_tid = 0x7c8 [0192.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818c60 [0192.232] wcscpy (in: _Dest=0x6818c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0192.232] wcscat (in: _Dest=0x6818c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0192.232] wcscat (in: _Dest=0x6818c60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*" [0192.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675ed20 [0192.232] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc80 [0194.996] wcscmp (_String1=".", _String2=".") returned 0 [0194.996] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.996] wcscmp (_String1="..", _String2=".") returned 1 [0194.996] wcscmp (_String1="..", _String2="..") returned 0 [0194.996] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0194.996] wcscmp (_String1="messages.json", _String2=".") returned 1 [0194.996] wcscmp (_String1="messages.json", _String2="..") returned 1 [0194.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67653f8 [0194.997] wcscpy (in: _Dest=0x67653f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0194.997] wcscat (in: _Dest=0x67653f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0194.997] wcscat (in: _Dest=0x67653f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" [0201.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67653f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0201.301] FindNextFileW (in: hFindFile=0x3f1fc80, lpFindFileData=0x675ed20 | out: lpFindFileData=0x675ed20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.302] FindClose (in: hFindFile=0x3f1fc80 | out: hFindFile=0x3f1fc80) returned 1 [0201.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ed20) returned 1 [0201.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818c60) returned 1 [0201.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af7b8) returned 1 Thread: id = 6769 os_tid = 0x570 [0192.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818e70 [0192.593] wcscpy (in: _Dest=0x6818e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0192.593] wcscat (in: _Dest=0x6818e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0192.593] wcscat (in: _Dest=0x6818e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*" [0192.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675eab8 [0192.593] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0195.017] wcscmp (_String1=".", _String2=".") returned 0 [0195.017] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.017] wcscmp (_String1="..", _String2=".") returned 1 [0195.017] wcscmp (_String1="..", _String2="..") returned 0 [0195.017] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.017] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.017] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674e7a0 [0195.017] wcscpy (in: _Dest=0x674e7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0195.017] wcscat (in: _Dest=0x674e7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0195.017] wcscat (in: _Dest=0x674e7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" [0195.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0195.596] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x675eab8 | out: lpFindFileData=0x675eab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.597] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0195.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675eab8) returned 1 [0195.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e70) returned 1 [0195.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af9c8) returned 1 Thread: id = 6770 os_tid = 0x1cb0 [0192.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819080 [0192.594] wcscpy (in: _Dest=0x6819080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0192.594] wcscat (in: _Dest=0x6819080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0192.594] wcscat (in: _Dest=0x6819080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*" [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675f1f0 [0192.594] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x675f1f0 | out: lpFindFileData=0x675f1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0194.997] wcscmp (_String1=".", _String2=".") returned 0 [0194.997] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x675f1f0 | out: lpFindFileData=0x675f1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.997] wcscmp (_String1="..", _String2=".") returned 1 [0194.997] wcscmp (_String1="..", _String2="..") returned 0 [0194.997] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x675f1f0 | out: lpFindFileData=0x675f1f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0194.997] wcscmp (_String1="messages.json", _String2=".") returned 1 [0194.997] wcscmp (_String1="messages.json", _String2="..") returned 1 [0194.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764f58 [0194.997] wcscpy (in: _Dest=0x6764f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0194.998] wcscat (in: _Dest=0x6764f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0194.998] wcscat (in: _Dest=0x6764f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" [0196.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0196.992] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x675f1f0 | out: lpFindFileData=0x675f1f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.992] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0196.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675f1f0) returned 1 [0196.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819080) returned 1 [0196.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af188) returned 1 Thread: id = 6771 os_tid = 0x1cb4 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818a50 [0192.594] wcscpy (in: _Dest=0x6818a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0192.594] wcscat (in: _Dest=0x6818a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0192.594] wcscat (in: _Dest=0x6818a50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*" [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675f458 [0192.594] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x675f458 | out: lpFindFileData=0x675f458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0195.025] wcscmp (_String1=".", _String2=".") returned 0 [0195.025] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x675f458 | out: lpFindFileData=0x675f458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.025] wcscmp (_String1="..", _String2=".") returned 1 [0195.025] wcscmp (_String1="..", _String2="..") returned 0 [0195.025] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x675f458 | out: lpFindFileData=0x675f458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.025] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.025] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54a60 [0195.025] wcscpy (in: _Dest=0x3d54a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0195.025] wcscat (in: _Dest=0x3d54a60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0195.025] wcscat (in: _Dest=0x3d54a60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" [0195.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d54a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0195.614] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x675f458 | out: lpFindFileData=0x675f458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.615] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0195.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675f458) returned 1 [0195.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a50) returned 1 [0195.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af290) returned 1 Thread: id = 6772 os_tid = 0x1cb8 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818b58 [0192.595] wcscpy (in: _Dest=0x6818b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0192.595] wcscat (in: _Dest=0x6818b58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0192.595] wcscat (in: _Dest=0x6818b58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*" [0192.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675f6c0 [0192.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x675f6c0 | out: lpFindFileData=0x675f6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0195.024] wcscmp (_String1=".", _String2=".") returned 0 [0195.024] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x675f6c0 | out: lpFindFileData=0x675f6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.024] wcscmp (_String1="..", _String2=".") returned 1 [0195.024] wcscmp (_String1="..", _String2="..") returned 0 [0195.024] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x675f6c0 | out: lpFindFileData=0x675f6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.024] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.024] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d562a8 [0195.024] wcscpy (in: _Dest=0x3d562a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0195.024] wcscat (in: _Dest=0x3d562a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0195.024] wcscat (in: _Dest=0x3d562a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" [0195.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d562a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0195.613] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x675f6c0 | out: lpFindFileData=0x675f6c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.613] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0195.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675f6c0) returned 1 [0195.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b58) returned 1 [0195.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af398) returned 1 Thread: id = 6773 os_tid = 0x1cbc [0192.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25660 [0192.595] wcscpy (in: _Dest=0x3f25660, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0192.595] wcscat (in: _Dest=0x3f25660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0192.595] wcscat (in: _Dest=0x3f25660, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*" [0192.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675f928 [0192.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x675f928 | out: lpFindFileData=0x675f928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0195.023] wcscmp (_String1=".", _String2=".") returned 0 [0195.023] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x675f928 | out: lpFindFileData=0x675f928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.023] wcscmp (_String1="..", _String2=".") returned 1 [0195.023] wcscmp (_String1="..", _String2="..") returned 0 [0195.023] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x675f928 | out: lpFindFileData=0x675f928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.023] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.023] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56058 [0195.023] wcscpy (in: _Dest=0x3d56058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0195.023] wcscat (in: _Dest=0x3d56058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0195.023] wcscat (in: _Dest=0x3d56058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" [0195.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0195.611] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x675f928 | out: lpFindFileData=0x675f928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.611] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0195.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675f928) returned 1 [0195.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25660) returned 1 [0195.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af4a0) returned 1 Thread: id = 6774 os_tid = 0x1d3c [0192.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25768 [0192.596] wcscpy (in: _Dest=0x3f25768, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0192.596] wcscat (in: _Dest=0x3f25768, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0192.596] wcscat (in: _Dest=0x3f25768, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*" [0192.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675fb90 [0192.596] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x675fb90 | out: lpFindFileData=0x675fb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0195.022] wcscmp (_String1=".", _String2=".") returned 0 [0195.022] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x675fb90 | out: lpFindFileData=0x675fb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.022] wcscmp (_String1="..", _String2=".") returned 1 [0195.022] wcscmp (_String1="..", _String2="..") returned 0 [0195.022] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x675fb90 | out: lpFindFileData=0x675fb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58f1790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f3ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.022] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.022] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56180 [0195.023] wcscpy (in: _Dest=0x3d56180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0195.023] wcscat (in: _Dest=0x3d56180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0195.023] wcscat (in: _Dest=0x3d56180, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" [0195.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0195.609] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x675fb90 | out: lpFindFileData=0x675fb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58f1790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f3ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.609] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0195.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675fb90) returned 1 [0195.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25768) returned 1 [0195.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af6b0) returned 1 Thread: id = 6775 os_tid = 0x1cc0 [0192.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25870 [0192.596] wcscpy (in: _Dest=0x3f25870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0192.596] wcscat (in: _Dest=0x3f25870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0192.596] wcscat (in: _Dest=0x3f25870, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*" [0192.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x675fdf8 [0192.596] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x675fdf8 | out: lpFindFileData=0x675fdf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0195.021] wcscmp (_String1=".", _String2=".") returned 0 [0195.021] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x675fdf8 | out: lpFindFileData=0x675fdf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.021] wcscmp (_String1="..", _String2=".") returned 1 [0195.022] wcscmp (_String1="..", _String2="..") returned 0 [0195.022] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x675fdf8 | out: lpFindFileData=0x675fdf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58fb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fdae0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.022] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.022] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55f30 [0195.022] wcscpy (in: _Dest=0x3d55f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0195.022] wcscat (in: _Dest=0x3d55f30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0195.022] wcscat (in: _Dest=0x3d55f30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" [0195.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d55f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0195.607] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x675fdf8 | out: lpFindFileData=0x675fdf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58fb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fdae0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.607] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0195.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675fdf8) returned 1 [0195.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25870) returned 1 [0195.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af8c0) returned 1 Thread: id = 6776 os_tid = 0x15f8 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25978 [0192.597] wcscpy (in: _Dest=0x3f25978, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0192.597] wcscat (in: _Dest=0x3f25978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0192.597] wcscat (in: _Dest=0x3f25978, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*" [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760060 [0192.597] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x6760060 | out: lpFindFileData=0x6760060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0195.021] wcscmp (_String1=".", _String2=".") returned 0 [0195.021] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x6760060 | out: lpFindFileData=0x6760060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.021] wcscmp (_String1="..", _String2=".") returned 1 [0195.021] wcscmp (_String1="..", _String2="..") returned 0 [0195.021] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x6760060 | out: lpFindFileData=0x6760060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5907720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.021] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.021] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674e300 [0195.021] wcscpy (in: _Dest=0x674e300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0195.021] wcscat (in: _Dest=0x674e300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0195.021] wcscat (in: _Dest=0x674e300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" [0195.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0195.605] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x6760060 | out: lpFindFileData=0x6760060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5907720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.605] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0195.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760060) returned 1 [0195.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25978) returned 1 [0195.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aec60) returned 1 Thread: id = 6777 os_tid = 0x1cc4 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766ce8 [0192.597] wcscpy (in: _Dest=0x6766ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0192.597] wcscat (in: _Dest=0x6766ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0192.597] wcscat (in: _Dest=0x6766ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*" [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x67602c8 [0192.597] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x67602c8 | out: lpFindFileData=0x67602c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0195.020] wcscmp (_String1=".", _String2=".") returned 0 [0195.020] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x67602c8 | out: lpFindFileData=0x67602c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.020] wcscmp (_String1="..", _String2=".") returned 1 [0195.020] wcscmp (_String1="..", _String2="..") returned 0 [0195.020] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x67602c8 | out: lpFindFileData=0x67602c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5911360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.020] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.020] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674e550 [0195.020] wcscpy (in: _Dest=0x674e550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0195.020] wcscat (in: _Dest=0x674e550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0195.020] wcscat (in: _Dest=0x674e550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" [0195.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0195.603] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x67602c8 | out: lpFindFileData=0x67602c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5911360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.603] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0195.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67602c8) returned 1 [0195.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 [0195.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aee70) returned 1 Thread: id = 6778 os_tid = 0xab8 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766bd0 [0192.598] wcscpy (in: _Dest=0x6766bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0192.598] wcscat (in: _Dest=0x6766bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0192.598] wcscat (in: _Dest=0x6766bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*" [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760530 [0192.598] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x6760530 | out: lpFindFileData=0x6760530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0195.019] wcscmp (_String1=".", _String2=".") returned 0 [0195.019] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x6760530 | out: lpFindFileData=0x6760530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.019] wcscmp (_String1="..", _String2=".") returned 1 [0195.019] wcscmp (_String1="..", _String2="..") returned 0 [0195.019] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x6760530 | out: lpFindFileData=0x6760530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.019] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.019] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674e428 [0195.019] wcscpy (in: _Dest=0x674e428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0195.019] wcscat (in: _Dest=0x674e428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0195.019] wcscat (in: _Dest=0x674e428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" [0195.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0195.601] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x6760530 | out: lpFindFileData=0x6760530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.601] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0195.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760530) returned 1 [0195.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bd0) returned 1 [0195.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af080) returned 1 Thread: id = 6779 os_tid = 0xa90 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766ab8 [0192.598] wcscpy (in: _Dest=0x6766ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0192.598] wcscat (in: _Dest=0x6766ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0192.598] wcscat (in: _Dest=0x6766ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*" [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760798 [0192.598] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x6760798 | out: lpFindFileData=0x6760798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0195.018] wcscmp (_String1=".", _String2=".") returned 0 [0195.018] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x6760798 | out: lpFindFileData=0x6760798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.018] wcscmp (_String1="..", _String2=".") returned 1 [0195.018] wcscmp (_String1="..", _String2="..") returned 0 [0195.018] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x6760798 | out: lpFindFileData=0x6760798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.018] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.018] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x674e678 [0195.018] wcscpy (in: _Dest=0x674e678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0195.018] wcscat (in: _Dest=0x674e678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0195.018] wcscat (in: _Dest=0x674e678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" [0195.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0195.599] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x6760798 | out: lpFindFileData=0x6760798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.599] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0195.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760798) returned 1 [0195.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0195.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68afad0) returned 1 Thread: id = 6780 os_tid = 0x370 [0192.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25a80 [0192.599] wcscpy (in: _Dest=0x3f25a80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0192.599] wcscat (in: _Dest=0x3f25a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0192.599] wcscat (in: _Dest=0x3f25a80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*" [0192.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760a00 [0192.599] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x6760a00 | out: lpFindFileData=0x6760a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0195.016] wcscmp (_String1=".", _String2=".") returned 0 [0195.016] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x6760a00 | out: lpFindFileData=0x6760a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.016] wcscmp (_String1="..", _String2=".") returned 1 [0195.016] wcscmp (_String1="..", _String2="..") returned 0 [0195.016] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x6760a00 | out: lpFindFileData=0x6760a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe592e820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5930f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.016] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.016] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674e8c8 [0195.016] wcscpy (in: _Dest=0x674e8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0195.016] wcscat (in: _Dest=0x674e8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0195.016] wcscat (in: _Dest=0x674e8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" [0195.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x674e8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0195.594] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x6760a00 | out: lpFindFileData=0x6760a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe592e820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5930f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.594] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0195.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760a00) returned 1 [0195.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25a80) returned 1 [0195.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24b08) returned 1 Thread: id = 6781 os_tid = 0x15c [0192.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0192.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0192.600] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2324 [0192.600] GetFileSizeEx (in: hFile=0x2324, lpFileSize=0x10a5fec4 | out: lpFileSize=0x10a5fec4*=258) returned 1 [0192.600] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.600] ReadFile (in: hFile=0x2324, lpBuffer=0x10a5fea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10a5feb0, lpOverlapped=0x0 | out: lpBuffer=0x10a5fea0*, lpNumberOfBytesRead=0x10a5feb0*=0x4, lpOverlapped=0x0) returned 1 [0192.602] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0192.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0192.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0192.602] NtQuerySystemTime (in: CurrentTime=0x10a5fe38 | out: CurrentTime=0x10a5fe38*=132482711010768000) returned 0x0 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x6d303568 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x431b4c83 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x6f842029 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x1fb8f244 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x396cc177 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x38b27697 [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x29fc57ce [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x2ba348ef [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x1dce168f [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x5161825d [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x61e4c29b [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x3ac48dd [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x21bb536d [0192.602] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x5d1b03fe [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x7a4d1226 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x277cf165 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x72721f60 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x74bf25d6 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x5a8e61b6 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x1dea50d0 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x53922b6a [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x31457ac6 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x52fdd239 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x512b8878 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x2338b8fa [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x577426b3 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x2da4df29 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x7dfeb038 [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x4eac285d [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x5631125f [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x6e84deef [0192.603] RtlRandomEx (in: Seed=0x10a5fe30 | out: Seed=0x10a5fe30) returned 0x34612312 [0192.611] ReadFile (in: hFile=0x2324, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x10a5fe2c, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0x10a5fe2c*=0x102, lpOverlapped=0x0) returned 1 [0192.611] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.611] WriteFile (in: hFile=0x2324, lpBuffer=0x670e6c0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x10a5fe30, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesWritten=0x10a5fe30*=0x102, lpOverlapped=0x0) returned 1 [0195.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0195.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37f0 [0195.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0195.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0195.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0195.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0195.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4628) returned 1 [0195.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0195.143] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.144] WriteFile (in: hFile=0x2324, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10a5feb8, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0x10a5feb8*=0x10c, lpOverlapped=0x0) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60e0) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37f0) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0197.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0197.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41650 [0197.444] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" [0197.444] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.ac3a86" [0197.444] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x10a5fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0197.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67693b0 [0197.858] FlushFileBuffers (hFile=0x2324) returned 1 [0197.861] CloseHandle (hObject=0x2324) returned 1 [0198.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779f88 [0198.032] wcscpy (in: _Dest=0x6779f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0198.033] wcscat (in: _Dest=0x6779f88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\AC3A86-Readme.txt" [0198.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0198.033] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1824 [0199.103] WriteFile (in: hFile=0x1824, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10a5fe4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10a5fe4c*=0x8b9, lpOverlapped=0x0) returned 1 [0199.870] CloseHandle (hObject=0x1824) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779f88) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 Thread: id = 6782 os_tid = 0x2a8 [0192.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss")) returned 0x20 [0192.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0192.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.615] GetLastError () returned 0x5 [0192.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0192.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 6783 os_tid = 0x2ac [0192.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst")) returned 0x20 [0196.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0196.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.474] GetLastError () returned 0x5 [0196.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0196.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 6784 os_tid = 0x130 [0192.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss")) returned 0x20 [0196.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0196.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.476] GetLastError () returned 0x5 [0196.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0196.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 6785 os_tid = 0x1d74 [0192.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst")) returned 0x20 [0196.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0196.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.482] GetLastError () returned 0x5 [0196.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0196.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 6786 os_tid = 0x1d94 [0192.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss")) returned 0x20 [0196.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0196.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.507] GetLastError () returned 0x5 [0196.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0196.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 6787 os_tid = 0x1668 [0192.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst")) returned 0x20 [0196.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0196.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.483] GetLastError () returned 0x5 [0196.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0196.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 6788 os_tid = 0x1d0c [0192.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss")) returned 0x20 [0196.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0196.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.509] GetLastError () returned 0x5 [0196.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0196.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 6789 os_tid = 0x1d10 [0192.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst")) returned 0x20 [0196.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0196.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.484] GetLastError () returned 0x5 [0196.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0196.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 6790 os_tid = 0x1d14 [0192.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss")) returned 0x20 [0196.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0196.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.486] GetLastError () returned 0x5 [0196.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0196.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 6791 os_tid = 0x1d18 [0192.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss")) returned 0x20 [0196.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0196.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.487] GetLastError () returned 0x5 [0196.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0196.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 6792 os_tid = 0x24e8 [0192.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss")) returned 0x20 [0196.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0196.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.510] GetLastError () returned 0x5 [0196.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0196.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 6793 os_tid = 0x1d1c [0192.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss")) returned 0x20 [0196.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0196.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.488] GetLastError () returned 0x5 [0196.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0196.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 6794 os_tid = 0x2614 [0192.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst")) returned 0x20 [0196.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0196.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.489] GetLastError () returned 0x5 [0196.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0196.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 6795 os_tid = 0x1e18 [0192.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst")) returned 0x20 [0196.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0196.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.491] GetLastError () returned 0x5 [0196.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0196.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 6796 os_tid = 0x1e70 [0192.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss")) returned 0x20 [0196.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0196.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.511] GetLastError () returned 0x5 [0196.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0196.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 6797 os_tid = 0x1e74 [0192.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss")) returned 0x20 [0196.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0196.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.472] GetLastError () returned 0x5 [0196.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0196.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 6798 os_tid = 0x1e78 [0192.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 0x2020 [0194.998] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0200.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2174 [0200.796] GetFileSizeEx (in: hFile=0x2174, lpFileSize=0x1006f83c | out: lpFileSize=0x1006f83c*=217) returned 1 [0200.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0200.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9a18 [0200.796] NtQuerySystemTime (in: CurrentTime=0x1006f7b0 | out: CurrentTime=0x1006f7b0*=132482711092668000) returned 0x0 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x38354858 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x27b84a8b [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x6b7be512 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x25a6fd11 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x7a0756d0 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x5a42348c [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x4834eb88 [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0xc2ff9dc [0200.796] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x476c8554 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x7691505c [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x3f5f8ab9 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x5088815a [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x3968ff72 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x453e5c4c [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x6e39086e [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x2ced75d [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x5c720d16 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x522998f6 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x624190e7 [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x618522da [0200.797] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x33175b0d [0200.798] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x7bab99f1 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x4c563e4f [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x62503c53 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x219d8262 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x68dd598a [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x7e6d049f [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x4c2163b4 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x69b9554d [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x63c6a7e7 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x223e93c7 [0200.801] RtlRandomEx (in: Seed=0x1006f7a8 | out: Seed=0x1006f7a8) returned 0x65346e69 [0200.811] ReadFile (in: hFile=0x2174, lpBuffer=0x68cf8f0, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x1006f7a4, lpOverlapped=0x0 | out: lpBuffer=0x68cf8f0*, lpNumberOfBytesRead=0x1006f7a4*=0xd9, lpOverlapped=0x0) returned 1 [0200.814] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.814] WriteFile (in: hFile=0x2174, lpBuffer=0x68d34f8*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x1006f7a8, lpOverlapped=0x0 | out: lpBuffer=0x68d34f8*, lpNumberOfBytesWritten=0x1006f7a8*=0xd9, lpOverlapped=0x0) returned 1 [0203.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba18 [0203.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b2c0 [0203.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0203.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d34f8) returned 1 [0203.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cf8f0) returned 1 [0203.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0203.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e738) returned 1 [0203.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acdb8 [0203.325] SetFilePointerEx (in: hFile=0x2174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.325] WriteFile (in: hFile=0x2174, lpBuffer=0x6767490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1006f830, lpOverlapped=0x0 | out: lpBuffer=0x6767490*, lpNumberOfBytesWritten=0x1006f830*=0x10c, lpOverlapped=0x0) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767490) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b18) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0204.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0204.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b958 [0204.634] wcscpy (in: _Dest=0x678b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" [0204.634] wcscat (in: _Dest=0x678b958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.ac3a86" [0204.634] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0x1006f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0206.608] FlushFileBuffers (hFile=0x2174) returned 1 [0206.620] CloseHandle (hObject=0x2174) returned 1 [0209.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead090 [0209.098] wcscpy (in: _Dest=0x12ead090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0209.098] wcscat (in: _Dest=0x12ead090, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\AC3A86-Readme.txt" [0209.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0209.098] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.864] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1006f7c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1006f7c4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.866] CloseHandle (hObject=0xe24) returned 1 [0209.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead090) returned 1 [0209.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764be0) returned 1 Thread: id = 6799 os_tid = 0x1e7c [0192.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss")) returned 0x20 [0196.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0196.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.492] GetLastError () returned 0x5 [0196.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0196.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 6800 os_tid = 0x2740 [0192.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss")) returned 0x20 [0196.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0196.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.493] GetLastError () returned 0x5 [0196.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0196.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 6801 os_tid = 0x274c [0192.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss")) returned 0x20 [0196.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0196.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.495] GetLastError () returned 0x5 [0196.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0196.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 6802 os_tid = 0x275c [0192.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst")) returned 0x20 [0196.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0196.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.496] GetLastError () returned 0x5 [0196.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0196.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 6803 os_tid = 0x2760 [0192.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss")) returned 0x20 [0196.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0196.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.497] GetLastError () returned 0x5 [0196.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0196.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 6804 os_tid = 0x2764 [0192.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst")) returned 0x20 [0196.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0196.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.498] GetLastError () returned 0x5 [0196.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0196.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 6805 os_tid = 0x2768 [0192.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst")) returned 0x20 [0196.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0196.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.500] GetLastError () returned 0x5 [0196.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0196.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 6806 os_tid = 0x276c [0192.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst")) returned 0x20 [0196.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0196.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.501] GetLastError () returned 0x5 [0196.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0196.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 6807 os_tid = 0x2770 [0192.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst")) returned 0x20 [0196.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0196.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.502] GetLastError () returned 0x5 [0196.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0196.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 6808 os_tid = 0x2774 [0192.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst")) returned 0x20 [0196.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0196.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.503] GetLastError () returned 0x5 [0196.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0196.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 6809 os_tid = 0x2778 [0192.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss")) returned 0x20 [0196.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0196.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.505] GetLastError () returned 0x5 [0196.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0196.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 6810 os_tid = 0x277c [0192.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss")) returned 0x20 [0196.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0196.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.473] GetLastError () returned 0x5 [0196.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0196.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 6811 os_tid = 0x2784 [0192.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss")) returned 0x20 [0195.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0195.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.097] GetLastError () returned 0x5 [0195.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0195.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 6812 os_tid = 0x2788 [0194.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss")) returned 0x20 [0196.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0196.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.506] GetLastError () returned 0x5 [0196.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0196.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 Thread: id = 6813 os_tid = 0x278c [0194.799] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 0x2020 [0194.799] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0200.761] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb78 [0200.761] GetFileSizeEx (in: hFile=0xb78, lpFileSize=0x5d3fde4 | out: lpFileSize=0x5d3fde4*=179) returned 1 [0200.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0200.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0200.761] NtQuerySystemTime (in: CurrentTime=0x5d3fd58 | out: CurrentTime=0x5d3fd58*=132482711092356000) returned 0x0 [0200.761] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x8cdefd4 [0200.761] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x86d278b [0200.761] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x7deaf7b2 [0200.761] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x17999bc1 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x5bc11d6b [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x6a49a3c [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x75076ae0 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x596b4739 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0xba2ff54 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x38803e5e [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x2699d268 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x5d4612e3 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x4199a183 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x4d74db39 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x1dae97b1 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x16d2e41d [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x39a87877 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x34b89526 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x7d8c4d31 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x6bd73986 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x4ce374e3 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x10f8004b [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x11ac2c1b [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x4def2cc0 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x298f40f1 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x52eda39 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x24a06e4a [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x6311d3cd [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x3ffd67f8 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x685b98d2 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x194e3569 [0200.762] RtlRandomEx (in: Seed=0x5d3fd50 | out: Seed=0x5d3fd50) returned 0x701c4474 [0200.773] ReadFile (in: hFile=0xb78, lpBuffer=0x12f0f080, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x5d3fd4c, lpOverlapped=0x0 | out: lpBuffer=0x12f0f080*, lpNumberOfBytesRead=0x5d3fd4c*=0xb3, lpOverlapped=0x0) returned 1 [0200.775] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.775] WriteFile (in: hFile=0xb78, lpBuffer=0x12f12c88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x5d3fd50, lpOverlapped=0x0 | out: lpBuffer=0x12f12c88*, lpNumberOfBytesWritten=0x5d3fd50*=0xb3, lpOverlapped=0x0) returned 1 [0203.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c418 [0203.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0203.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0203.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f12c88) returned 1 [0203.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0f080) returned 1 [0203.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 [0203.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eb70) returned 1 [0203.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acb18 [0203.321] SetFilePointerEx (in: hFile=0xb78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.321] WriteFile (in: hFile=0xb78, lpBuffer=0x67676c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5d3fdd8, lpOverlapped=0x0 | out: lpBuffer=0x67676c0*, lpNumberOfBytesWritten=0x5d3fdd8*=0x10c, lpOverlapped=0x0) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67676c0) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acb18) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0204.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0204.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0204.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b6e8 [0204.627] wcscpy (in: _Dest=0x678b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" [0204.627] wcscat (in: _Dest=0x678b6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.ac3a86" [0204.627] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x5d3fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6785788 [0206.606] FlushFileBuffers (hFile=0xb78) returned 1 [0206.619] CloseHandle (hObject=0xb78) returned 1 [0209.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bbc8 [0209.474] wcscpy (in: _Dest=0x678bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0209.475] wcscat (in: _Dest=0x678bbc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\AC3A86-Readme.txt" [0209.475] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0209.475] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbd0 [0210.007] WriteFile (in: hFile=0xbd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5d3fd6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5d3fd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.009] CloseHandle (hObject=0xbd0) returned 1 [0210.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bbc8) returned 1 [0210.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765c10) returned 1 Thread: id = 6814 os_tid = 0x2790 [0194.800] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json")) returned 0x2020 [0194.800] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0200.776] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fcc [0200.779] GetFileSizeEx (in: hFile=0x1fcc, lpFileSize=0x471f7b4 | out: lpFileSize=0x471f7b4*=179) returned 1 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0200.779] NtQuerySystemTime (in: CurrentTime=0x471f728 | out: CurrentTime=0x471f728*=132482711092512000) returned 0x0 [0200.779] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5a9dbb85 [0200.779] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5e69247b [0200.779] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5c1a25a3 [0200.779] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x7c083177 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x178fd383 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x1ba1641a [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x2720f9c8 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x21390973 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0xf4c342d [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x7149e470 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x22b4a7c1 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0xee2b7eb [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x3d93e1 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x6cd5e962 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x56f0c98d [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x7cce2e96 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x7a1c6440 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x2b53e203 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5cf06163 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x2b5c0b87 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x71dd7fba [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0xdc895b7 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x652bf5b6 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5de7d654 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x13ed6ecc [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0xb483eb9 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5afb6950 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5c6e5b53 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x58f596d0 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x5a102604 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x7112abc0 [0200.780] RtlRandomEx (in: Seed=0x471f720 | out: Seed=0x471f720) returned 0x6295a41 [0200.793] ReadFile (in: hFile=0x1fcc, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x471f71c, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0x471f71c*=0xb3, lpOverlapped=0x0) returned 1 [0200.795] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.795] WriteFile (in: hFile=0x1fcc, lpBuffer=0x68cbce8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x471f720, lpOverlapped=0x0 | out: lpBuffer=0x68cbce8*, lpNumberOfBytesWritten=0x471f720*=0xb3, lpOverlapped=0x0) returned 1 [0203.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0203.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b068 [0203.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0203.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cbce8) returned 1 [0203.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0203.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0203.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e9c0) returned 1 [0203.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acfc8 [0203.323] SetFilePointerEx (in: hFile=0x1fcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.323] WriteFile (in: hFile=0x1fcc, lpBuffer=0x67675a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x471f7a8, lpOverlapped=0x0 | out: lpBuffer=0x67675a8*, lpNumberOfBytesWritten=0x471f7a8*=0x10c, lpOverlapped=0x0) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67675a8) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acc98) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0204.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b820 [0204.629] wcscpy (in: _Dest=0x678b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" [0204.629] wcscat (in: _Dest=0x678b820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.ac3a86" [0204.629] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x471f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67858d0 [0206.604] FlushFileBuffers (hFile=0x1fcc) returned 1 [0206.613] CloseHandle (hObject=0x1fcc) returned 1 [0209.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c198 [0209.092] wcscpy (in: _Dest=0x12e9c198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0209.093] wcscat (in: _Dest=0x12e9c198, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\AC3A86-Readme.txt" [0209.093] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0209.093] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbd0 [0209.355] WriteFile (in: hFile=0xbd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x471f73c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x471f73c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.886] CloseHandle (hObject=0xbd0) returned 1 [0209.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c198) returned 1 [0209.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765d38) returned 1 Thread: id = 6815 os_tid = 0x2794 [0194.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f25030 [0194.801] wcscpy (in: _Dest=0x3f25030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0194.801] wcscat (in: _Dest=0x3f25030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0194.801] wcscat (in: _Dest=0x3f25030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*" [0194.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0194.801] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0196.577] wcscmp (_String1=".", _String2=".") returned 0 [0196.577] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.577] wcscmp (_String1="..", _String2=".") returned 1 [0196.577] wcscmp (_String1="..", _String2="..") returned 0 [0196.577] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.577] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.577] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23c80 [0196.577] wcscpy (in: _Dest=0x3f23c80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0196.577] wcscat (in: _Dest=0x3f23c80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0196.577] wcscat (in: _Dest=0x3f23c80, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" [0198.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0198.550] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.550] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0198.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0198.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25030) returned 1 [0198.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818840) returned 1 Thread: id = 6816 os_tid = 0x2798 [0194.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f24f28 [0194.802] wcscpy (in: _Dest=0x3f24f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0194.802] wcscat (in: _Dest=0x3f24f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0194.802] wcscat (in: _Dest=0x3f24f28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*" [0194.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760c68 [0194.802] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x6760c68 | out: lpFindFileData=0x6760c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0196.577] wcscmp (_String1=".", _String2=".") returned 0 [0196.577] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x6760c68 | out: lpFindFileData=0x6760c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.578] wcscmp (_String1="..", _String2=".") returned 1 [0196.578] wcscmp (_String1="..", _String2="..") returned 0 [0196.578] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x6760c68 | out: lpFindFileData=0x6760c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.578] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.578] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23b58 [0196.578] wcscpy (in: _Dest=0x3f23b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0196.578] wcscat (in: _Dest=0x3f23b58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0196.578] wcscat (in: _Dest=0x3f23b58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" [0198.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0198.552] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x6760c68 | out: lpFindFileData=0x6760c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.553] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0198.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760c68) returned 1 [0198.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24f28) returned 1 [0198.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc410) returned 1 Thread: id = 6817 os_tid = 0x279c [0194.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f24e20 [0194.803] wcscpy (in: _Dest=0x3f24e20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0194.803] wcscat (in: _Dest=0x3f24e20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0194.803] wcscat (in: _Dest=0x3f24e20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*" [0194.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6760ed0 [0194.803] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x6760ed0 | out: lpFindFileData=0x6760ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0196.578] wcscmp (_String1=".", _String2=".") returned 0 [0196.578] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x6760ed0 | out: lpFindFileData=0x6760ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.578] wcscmp (_String1="..", _String2=".") returned 1 [0196.578] wcscmp (_String1="..", _String2="..") returned 0 [0196.578] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x6760ed0 | out: lpFindFileData=0x6760ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.578] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.578] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23a30 [0196.578] wcscpy (in: _Dest=0x3f23a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0196.579] wcscat (in: _Dest=0x3f23a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0196.579] wcscat (in: _Dest=0x3f23a30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" [0198.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0198.554] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x6760ed0 | out: lpFindFileData=0x6760ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.555] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0198.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6760ed0) returned 1 [0198.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24e20) returned 1 [0198.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25b88) returned 1 Thread: id = 6818 os_tid = 0x27a0 [0194.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3f24d18 [0194.804] wcscpy (in: _Dest=0x3f24d18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0194.804] wcscat (in: _Dest=0x3f24d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0194.804] wcscat (in: _Dest=0x3f24d18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*" [0194.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761138 [0194.804] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x6761138 | out: lpFindFileData=0x6761138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0196.579] wcscmp (_String1=".", _String2=".") returned 0 [0196.579] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x6761138 | out: lpFindFileData=0x6761138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.579] wcscmp (_String1="..", _String2=".") returned 1 [0196.579] wcscmp (_String1="..", _String2="..") returned 0 [0196.579] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x6761138 | out: lpFindFileData=0x6761138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.579] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.579] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23908 [0196.579] wcscpy (in: _Dest=0x3f23908, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0196.579] wcscat (in: _Dest=0x3f23908, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0196.579] wcscat (in: _Dest=0x3f23908, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" [0198.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14 [0198.556] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x6761138 | out: lpFindFileData=0x6761138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.556] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0198.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761138) returned 1 [0198.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24d18) returned 1 [0198.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23ea8) returned 1 Thread: id = 6819 os_tid = 0x27a4 [0194.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67532f8 [0194.805] wcscpy (in: _Dest=0x67532f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0194.805] wcscat (in: _Dest=0x67532f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0194.805] wcscat (in: _Dest=0x67532f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*" [0194.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x67613a0 [0194.805] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x67613a0 | out: lpFindFileData=0x67613a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0196.580] wcscmp (_String1=".", _String2=".") returned 0 [0196.580] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x67613a0 | out: lpFindFileData=0x67613a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.580] wcscmp (_String1="..", _String2=".") returned 1 [0196.580] wcscmp (_String1="..", _String2="..") returned 0 [0196.580] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x67613a0 | out: lpFindFileData=0x67613a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.580] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.580] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f236b8 [0196.580] wcscpy (in: _Dest=0x3f236b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0196.580] wcscat (in: _Dest=0x3f236b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0196.580] wcscat (in: _Dest=0x3f236b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" [0198.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f236b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0198.558] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x67613a0 | out: lpFindFileData=0x67613a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.558] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0198.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67613a0) returned 1 [0198.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67532f8) returned 1 [0198.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25c90) returned 1 Thread: id = 6820 os_tid = 0x27a8 [0194.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67530e8 [0194.806] wcscpy (in: _Dest=0x67530e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0194.806] wcscat (in: _Dest=0x67530e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0194.806] wcscat (in: _Dest=0x67530e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*" [0194.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761608 [0194.806] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x6761608 | out: lpFindFileData=0x6761608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0196.580] wcscmp (_String1=".", _String2=".") returned 0 [0196.580] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x6761608 | out: lpFindFileData=0x6761608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.580] wcscmp (_String1="..", _String2=".") returned 1 [0196.580] wcscmp (_String1="..", _String2="..") returned 0 [0196.580] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x6761608 | out: lpFindFileData=0x6761608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.580] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.580] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f237e0 [0196.581] wcscpy (in: _Dest=0x3f237e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0196.581] wcscat (in: _Dest=0x3f237e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0196.581] wcscat (in: _Dest=0x3f237e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" [0198.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f237e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0198.560] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x6761608 | out: lpFindFileData=0x6761608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.561] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0198.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761608) returned 1 [0198.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67530e8) returned 1 [0198.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25348) returned 1 Thread: id = 6821 os_tid = 0x27ac [0194.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754588 [0194.808] wcscpy (in: _Dest=0x6754588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0194.808] wcscat (in: _Dest=0x6754588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0194.808] wcscat (in: _Dest=0x6754588, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*" [0194.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0194.809] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0196.581] wcscmp (_String1=".", _String2=".") returned 0 [0196.581] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.581] wcscmp (_String1="..", _String2=".") returned 1 [0196.581] wcscmp (_String1="..", _String2="..") returned 0 [0196.581] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.581] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.581] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23590 [0196.581] wcscpy (in: _Dest=0x3f23590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0196.581] wcscat (in: _Dest=0x3f23590, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0196.581] wcscat (in: _Dest=0x3f23590, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" [0198.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0198.563] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.563] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0198.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0198.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754588) returned 1 [0198.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25450) returned 1 Thread: id = 6822 os_tid = 0x27b0 [0194.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750bd0 [0194.809] wcscpy (in: _Dest=0x6750bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0194.810] wcscat (in: _Dest=0x6750bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0194.810] wcscat (in: _Dest=0x6750bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*" [0194.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761ad8 [0194.810] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x6761ad8 | out: lpFindFileData=0x6761ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0196.582] wcscmp (_String1=".", _String2=".") returned 0 [0196.582] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x6761ad8 | out: lpFindFileData=0x6761ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.582] wcscmp (_String1="..", _String2=".") returned 1 [0196.582] wcscmp (_String1="..", _String2="..") returned 0 [0196.582] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x6761ad8 | out: lpFindFileData=0x6761ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.582] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.582] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3f23468 [0196.582] wcscpy (in: _Dest=0x3f23468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0196.582] wcscat (in: _Dest=0x3f23468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0196.582] wcscat (in: _Dest=0x3f23468, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" [0196.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0196.941] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x6761ad8 | out: lpFindFileData=0x6761ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.941] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0196.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761ad8) returned 1 [0196.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0196.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25558) returned 1 Thread: id = 6823 os_tid = 0x27b4 [0194.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750ab8 [0194.811] wcscpy (in: _Dest=0x6750ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0194.811] wcscat (in: _Dest=0x6750ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0194.811] wcscat (in: _Dest=0x6750ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*" [0194.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761d40 [0194.811] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x6761d40 | out: lpFindFileData=0x6761d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0196.582] wcscmp (_String1=".", _String2=".") returned 0 [0196.582] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x6761d40 | out: lpFindFileData=0x6761d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.582] wcscmp (_String1="..", _String2=".") returned 1 [0196.582] wcscmp (_String1="..", _String2="..") returned 0 [0196.582] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x6761d40 | out: lpFindFileData=0x6761d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.582] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.582] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3f23340 [0196.582] wcscpy (in: _Dest=0x3f23340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0196.583] wcscat (in: _Dest=0x3f23340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0196.583] wcscat (in: _Dest=0x3f23340, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" [0196.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0196.943] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x6761d40 | out: lpFindFileData=0x6761d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.943] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0196.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761d40) returned 1 [0196.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0196.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f24c10) returned 1 Thread: id = 6824 os_tid = 0x27b8 [0194.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753e50 [0194.812] wcscpy (in: _Dest=0x6753e50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0194.812] wcscat (in: _Dest=0x6753e50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0194.812] wcscat (in: _Dest=0x6753e50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*" [0194.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761fa8 [0194.812] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x6761fa8 | out: lpFindFileData=0x6761fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0196.583] wcscmp (_String1=".", _String2=".") returned 0 [0196.583] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x6761fa8 | out: lpFindFileData=0x6761fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.583] wcscmp (_String1="..", _String2=".") returned 1 [0196.583] wcscmp (_String1="..", _String2="..") returned 0 [0196.583] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x6761fa8 | out: lpFindFileData=0x6761fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.583] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.583] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3f23218 [0196.583] wcscpy (in: _Dest=0x3f23218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0196.583] wcscat (in: _Dest=0x3f23218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0196.583] wcscat (in: _Dest=0x3f23218, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" [0196.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f23218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0196.945] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x6761fa8 | out: lpFindFileData=0x6761fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.945] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0196.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761fa8) returned 1 [0196.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753e50) returned 1 [0196.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f240b8) returned 1 Thread: id = 6825 os_tid = 0x27bc [0194.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6752610 [0194.813] wcscpy (in: _Dest=0x6752610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0194.813] wcscat (in: _Dest=0x6752610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0194.813] wcscat (in: _Dest=0x6752610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*" [0194.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6762210 [0194.813] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x6762210 | out: lpFindFileData=0x6762210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0196.584] wcscmp (_String1=".", _String2=".") returned 0 [0196.584] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x6762210 | out: lpFindFileData=0x6762210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.584] wcscmp (_String1="..", _String2=".") returned 1 [0196.584] wcscmp (_String1="..", _String2="..") returned 0 [0196.584] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x6762210 | out: lpFindFileData=0x6762210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.584] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.584] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3f230f0 [0196.584] wcscpy (in: _Dest=0x3f230f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0196.584] wcscat (in: _Dest=0x3f230f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0196.584] wcscat (in: _Dest=0x3f230f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" [0196.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f230f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0196.947] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x6762210 | out: lpFindFileData=0x6762210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.947] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0196.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762210) returned 1 [0196.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0196.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 Thread: id = 6826 os_tid = 0x27d4 [0194.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6754270 [0194.813] wcscpy (in: _Dest=0x6754270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0194.813] wcscat (in: _Dest=0x6754270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0194.814] wcscat (in: _Dest=0x6754270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*" [0194.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6762478 [0194.814] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x6762478 | out: lpFindFileData=0x6762478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0196.584] wcscmp (_String1=".", _String2=".") returned 0 [0196.584] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x6762478 | out: lpFindFileData=0x6762478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.584] wcscmp (_String1="..", _String2=".") returned 1 [0196.584] wcscmp (_String1="..", _String2="..") returned 0 [0196.584] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x6762478 | out: lpFindFileData=0x6762478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.584] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.584] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6770ab8 [0196.585] wcscpy (in: _Dest=0x6770ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0196.585] wcscat (in: _Dest=0x6770ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0196.585] wcscat (in: _Dest=0x6770ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" [0196.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6770ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0196.949] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x6762478 | out: lpFindFileData=0x6762478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.949] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0196.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762478) returned 1 [0196.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754270) returned 1 [0196.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f241c0) returned 1 Thread: id = 6827 os_tid = 0x27e0 [0194.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753928 [0194.814] wcscpy (in: _Dest=0x6753928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0194.814] wcscat (in: _Dest=0x6753928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0194.815] wcscat (in: _Dest=0x6753928, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*" [0194.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x67626e0 [0194.815] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x67626e0 | out: lpFindFileData=0x67626e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0196.585] wcscmp (_String1=".", _String2=".") returned 0 [0196.585] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x67626e0 | out: lpFindFileData=0x67626e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.585] wcscmp (_String1="..", _String2=".") returned 1 [0196.585] wcscmp (_String1="..", _String2="..") returned 0 [0196.585] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x67626e0 | out: lpFindFileData=0x67626e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.585] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.585] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6770be0 [0196.585] wcscpy (in: _Dest=0x6770be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0196.585] wcscat (in: _Dest=0x6770be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0196.585] wcscat (in: _Dest=0x6770be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" [0196.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6770be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0196.951] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x67626e0 | out: lpFindFileData=0x67626e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.951] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0196.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67626e0) returned 1 [0196.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753928) returned 1 [0196.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f243d0) returned 1 Thread: id = 6828 os_tid = 0x27e4 [0194.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6753a30 [0194.815] wcscpy (in: _Dest=0x6753a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0194.815] wcscat (in: _Dest=0x6753a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0194.815] wcscat (in: _Dest=0x6753a30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*" [0194.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8530 [0194.816] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0196.586] wcscmp (_String1=".", _String2=".") returned 0 [0196.586] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.586] wcscmp (_String1="..", _String2=".") returned 1 [0196.586] wcscmp (_String1="..", _String2="..") returned 0 [0196.586] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.586] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.586] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6770d08 [0196.586] wcscpy (in: _Dest=0x6770d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0196.586] wcscat (in: _Dest=0x6770d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0196.586] wcscat (in: _Dest=0x6770d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" [0196.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6770d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0196.953] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x66c8530 | out: lpFindFileData=0x66c8530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.953] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0196.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8530) returned 1 [0196.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753a30) returned 1 [0196.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f245e0) returned 1 Thread: id = 6829 os_tid = 0x27ec [0194.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753b38 [0194.816] wcscpy (in: _Dest=0x6753b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0194.816] wcscat (in: _Dest=0x6753b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0194.816] wcscat (in: _Dest=0x6753b38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*" [0194.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb080 [0194.817] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0196.586] wcscmp (_String1=".", _String2=".") returned 0 [0196.586] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.587] wcscmp (_String1="..", _String2=".") returned 1 [0196.587] wcscmp (_String1="..", _String2="..") returned 0 [0196.587] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.587] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.587] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6770e30 [0196.587] wcscpy (in: _Dest=0x6770e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0196.587] wcscat (in: _Dest=0x6770e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0196.587] wcscat (in: _Dest=0x6770e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" [0196.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6770e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0196.955] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x66cb080 | out: lpFindFileData=0x66cb080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.955] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0196.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb080) returned 1 [0196.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753b38) returned 1 [0196.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f247f0) returned 1 Thread: id = 6830 os_tid = 0x27f0 [0194.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753c40 [0194.817] wcscpy (in: _Dest=0x6753c40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0194.817] wcscat (in: _Dest=0x6753c40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0194.817] wcscat (in: _Dest=0x6753c40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*" [0194.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8a00 [0194.817] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0196.587] wcscmp (_String1=".", _String2=".") returned 0 [0196.587] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.587] wcscmp (_String1="..", _String2=".") returned 1 [0196.587] wcscmp (_String1="..", _String2="..") returned 0 [0196.587] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.587] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.587] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6770f58 [0196.587] wcscpy (in: _Dest=0x6770f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0196.587] wcscat (in: _Dest=0x6770f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0196.587] wcscat (in: _Dest=0x6770f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" [0196.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6770f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0196.957] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x66c8a00 | out: lpFindFileData=0x66c8a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.957] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0196.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8a00) returned 1 [0196.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753c40) returned 1 [0196.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f242c8) returned 1 Thread: id = 6831 os_tid = 0x27f4 [0194.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753d48 [0194.821] wcscpy (in: _Dest=0x6753d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0194.821] wcscat (in: _Dest=0x6753d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0194.821] wcscat (in: _Dest=0x6753d48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*" [0194.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb550 [0194.821] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0196.588] wcscmp (_String1=".", _String2=".") returned 0 [0196.588] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.588] wcscmp (_String1="..", _String2=".") returned 1 [0196.588] wcscmp (_String1="..", _String2="..") returned 0 [0196.588] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.588] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.588] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6771080 [0196.588] wcscpy (in: _Dest=0x6771080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0196.588] wcscat (in: _Dest=0x6771080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0196.588] wcscat (in: _Dest=0x6771080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" [0196.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0196.959] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x66cb550 | out: lpFindFileData=0x66cb550*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.959] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0196.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb550) returned 1 [0196.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753d48) returned 1 [0196.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f244d8) returned 1 Thread: id = 6832 os_tid = 0x27f8 [0194.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753820 [0194.822] wcscpy (in: _Dest=0x6753820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0194.822] wcscat (in: _Dest=0x6753820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0194.822] wcscat (in: _Dest=0x6753820, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*" [0194.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8060 [0194.822] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0196.588] wcscmp (_String1=".", _String2=".") returned 0 [0196.588] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.588] wcscmp (_String1="..", _String2=".") returned 1 [0196.589] wcscmp (_String1="..", _String2="..") returned 0 [0196.589] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.589] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.589] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67711a8 [0196.589] wcscpy (in: _Dest=0x67711a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0196.589] wcscat (in: _Dest=0x67711a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0196.589] wcscat (in: _Dest=0x67711a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" [0196.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67711a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0196.961] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66c8060 | out: lpFindFileData=0x66c8060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.961] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0196.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8060) returned 1 [0196.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753820) returned 1 [0196.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f246e8) returned 1 Thread: id = 6833 os_tid = 0x27fc [0194.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753718 [0194.825] wcscpy (in: _Dest=0x6753718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0194.825] wcscat (in: _Dest=0x6753718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0194.825] wcscat (in: _Dest=0x6753718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*" [0194.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8ed0 [0194.825] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0196.589] wcscmp (_String1=".", _String2=".") returned 0 [0196.589] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.589] wcscmp (_String1="..", _String2=".") returned 1 [0196.589] wcscmp (_String1="..", _String2="..") returned 0 [0196.589] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.589] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.589] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67712d0 [0196.589] wcscpy (in: _Dest=0x67712d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0196.589] wcscat (in: _Dest=0x67712d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0196.589] wcscat (in: _Dest=0x67712d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" [0196.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67712d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0196.963] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c8ed0 | out: lpFindFileData=0x66c8ed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.963] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0196.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8ed0) returned 1 [0196.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753718) returned 1 [0196.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f248f8) returned 1 Thread: id = 6834 os_tid = 0x107c [0194.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6753610 [0194.826] wcscpy (in: _Dest=0x6753610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0194.826] wcscat (in: _Dest=0x6753610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0194.826] wcscat (in: _Dest=0x6753610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*" [0194.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca210 [0194.826] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0195.218] wcscmp (_String1=".", _String2=".") returned 0 [0195.219] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.219] wcscmp (_String1="..", _String2=".") returned 1 [0195.219] wcscmp (_String1="..", _String2="..") returned 0 [0195.219] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.219] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.219] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x30413a8 [0195.219] wcscpy (in: _Dest=0x30413a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0195.219] wcscat (in: _Dest=0x30413a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0195.219] wcscat (in: _Dest=0x30413a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" [0196.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x30413a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0196.969] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66ca210 | out: lpFindFileData=0x66ca210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.969] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0196.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca210) returned 1 [0196.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753610) returned 1 [0196.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23fb0) returned 1 Thread: id = 6835 os_tid = 0xac8 [0194.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x67548a0 [0194.827] wcscpy (in: _Dest=0x67548a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0194.827] wcscat (in: _Dest=0x67548a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0194.827] wcscat (in: _Dest=0x67548a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*" [0194.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ca6e0 [0194.827] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0195.219] wcscmp (_String1=".", _String2=".") returned 0 [0195.219] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.219] wcscmp (_String1="..", _String2=".") returned 1 [0195.219] wcscmp (_String1="..", _String2="..") returned 0 [0195.219] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.220] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.220] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3041720 [0195.220] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0195.220] wcscat (in: _Dest=0x3041720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0195.220] wcscat (in: _Dest=0x3041720, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" [0195.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3041720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0195.626] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66ca6e0 | out: lpFindFileData=0x66ca6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.626] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0195.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ca6e0) returned 1 [0195.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67548a0) returned 1 [0195.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25240) returned 1 Thread: id = 6836 os_tid = 0x14c0 [0195.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2fafa8 [0195.220] wcscpy (in: _Dest=0x2fafa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0195.220] wcscat (in: _Dest=0x2fafa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0195.220] wcscat (in: _Dest=0x2fafa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*" [0195.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ee0c0 [0195.220] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0195.221] wcscmp (_String1=".", _String2=".") returned 0 [0195.221] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.221] wcscmp (_String1="..", _String2=".") returned 1 [0195.221] wcscmp (_String1="..", _String2="..") returned 0 [0195.221] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.221] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.221] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3042500 [0195.221] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0195.221] wcscat (in: _Dest=0x3042500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0195.221] wcscat (in: _Dest=0x3042500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" [0195.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3042500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0195.628] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66ee0c0 | out: lpFindFileData=0x66ee0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.628] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0195.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee0c0) returned 1 [0195.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fafa8) returned 1 [0195.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25138) returned 1 Thread: id = 6837 os_tid = 0x1350 [0195.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 0x2020 [0195.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0200.228] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1744 [0200.228] GetFileSizeEx (in: hFile=0x1744, lpFileSize=0xec5fb7c | out: lpFileSize=0xec5fb7c*=179) returned 1 [0200.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0200.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0200.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0200.229] NtQuerySystemTime (in: CurrentTime=0xec5faf0 | out: CurrentTime=0xec5faf0*=132482711087052000) returned 0x0 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x3fc324f0 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x5510530d [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x1e88bb1d [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x37109d61 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x1b009ea4 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x4b793770 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x581135da [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x70eec4f1 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x28a92147 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x651905f4 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x25b8076 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x5590f777 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x133ef6c1 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x408911aa [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x1055d16e [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x1fba00fe [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0xd2808ac [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x6a5e3132 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x459c68f3 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x44d21796 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x6f2eab23 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x5e76f72d [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x129f2f61 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x73ab8dcb [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x19e5de82 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0xf564624 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x2fb8bc96 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x69e35b9e [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0xab32038 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x3a9917f6 [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x643d948d [0200.229] RtlRandomEx (in: Seed=0xec5fae8 | out: Seed=0xec5fae8) returned 0x7e592962 [0200.238] ReadFile (in: hFile=0x1744, lpBuffer=0x6922518, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xec5fae4, lpOverlapped=0x0 | out: lpBuffer=0x6922518*, lpNumberOfBytesRead=0xec5fae4*=0xb3, lpOverlapped=0x0) returned 1 [0200.240] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.240] WriteFile (in: hFile=0x1744, lpBuffer=0x6926120*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xec5fae8, lpOverlapped=0x0 | out: lpBuffer=0x6926120*, lpNumberOfBytesWritten=0xec5fae8*=0xb3, lpOverlapped=0x0) returned 1 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6926120) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6922518) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b0e0) returned 1 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0200.283] SetFilePointerEx (in: hFile=0x1744, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.283] WriteFile (in: hFile=0x1744, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec5fb70, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0xec5fb70*=0x10c, lpOverlapped=0x0) returned 1 [0200.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0200.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0200.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0200.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0200.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0200.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0200.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0200.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0200.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d412a8 [0200.286] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" [0200.286] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.ac3a86" [0200.286] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0xec5fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778830 [0200.289] FlushFileBuffers (hFile=0x1744) returned 1 [0200.304] CloseHandle (hObject=0x1744) returned 1 [0200.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0200.305] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0200.305] wcscat (in: _Dest=0x3d412a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\AC3A86-Readme.txt" [0200.305] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0200.305] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1744 [0200.306] WriteFile (in: hFile=0x1744, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xec5fb04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xec5fb04*=0x8b9, lpOverlapped=0x0) returned 1 [0200.307] CloseHandle (hObject=0x1744) returned 1 [0200.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0200.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764e30) returned 1 Thread: id = 6838 os_tid = 0x14c4 [0195.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 0x2020 [0195.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0200.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d8 [0200.243] GetFileSizeEx (in: hFile=0x14d8, lpFileSize=0xbb6f9fc | out: lpFileSize=0xbb6f9fc*=179) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0200.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0200.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0200.244] NtQuerySystemTime (in: CurrentTime=0xbb6f970 | out: CurrentTime=0xbb6f970*=132482711087208000) returned 0x0 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x2dd65a9c [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x20c8e0ff [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x71e0b285 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x7c5be49f [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x45317a44 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x683be86f [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x413e9350 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x6930c9b2 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x20d4eeea [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x52d83fd4 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x4c18a129 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x46eda0c5 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x28e7d14c [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x64b206ec [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x74d93890 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x468193f3 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x4f1d1c8a [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x78fb0be8 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x61f5c7e3 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x1872ef16 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x59b0cd1d [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0xf01bd2e [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x7e337259 [0200.244] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x319193ad [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x23854362 [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x13f72aba [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x3f49ba64 [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x5c14d9bb [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x59c9003 [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x29c257e8 [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x1cb7f1c0 [0200.245] RtlRandomEx (in: Seed=0xbb6f968 | out: Seed=0xbb6f968) returned 0x7845a7d7 [0200.253] ReadFile (in: hFile=0x14d8, lpBuffer=0x6929d28, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbb6f964, lpOverlapped=0x0 | out: lpBuffer=0x6929d28*, lpNumberOfBytesRead=0xbb6f964*=0xb3, lpOverlapped=0x0) returned 1 [0200.259] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.259] WriteFile (in: hFile=0x14d8, lpBuffer=0x692d930*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbb6f968, lpOverlapped=0x0 | out: lpBuffer=0x692d930*, lpNumberOfBytesWritten=0xbb6f968*=0xb3, lpOverlapped=0x0) returned 1 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x692d930) returned 1 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6929d28) returned 1 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aca8) returned 1 [0201.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c30 [0201.141] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.141] WriteFile (in: hFile=0x14d8, lpBuffer=0x6751148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb6f9f0, lpOverlapped=0x0 | out: lpBuffer=0x6751148*, lpNumberOfBytesWritten=0xbb6f9f0*=0x10c, lpOverlapped=0x0) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0203.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0203.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d419f8 [0203.330] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" [0203.330] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.ac3a86" [0203.330] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xbb6f968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778458 [0206.243] FlushFileBuffers (hFile=0x14d8) returned 1 [0206.254] CloseHandle (hObject=0x14d8) returned 1 [0206.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b6e8 [0206.615] wcscpy (in: _Dest=0x678b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0206.615] wcscat (in: _Dest=0x678b6e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\AC3A86-Readme.txt" [0206.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0206.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.682] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbb6f984, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbb6f984*=0x8b9, lpOverlapped=0x0) returned 1 [0210.684] CloseHandle (hObject=0x116c) returned 1 [0210.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b6e8) returned 1 [0210.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765080) returned 1 Thread: id = 6839 os_tid = 0x14c8 [0195.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 0x2020 [0195.223] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0205.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1834 [0205.541] GetFileSizeEx (in: hFile=0x1834, lpFileSize=0xb27fdc4 | out: lpFileSize=0xb27fdc4*=179) returned 1 [0205.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0205.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0205.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca800 [0205.542] NtQuerySystemTime (in: CurrentTime=0xb27fd38 | out: CurrentTime=0xb27fd38*=132482711140248000) returned 0x0 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x2232f358 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x793d4632 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x26d38b65 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x26cb945b [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6d1874e8 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6fe3fb83 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x4cdd8f1b [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x7d8e8290 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x16096a28 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x20b17c27 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x251034db [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x3f6070af [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x963554f [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x56468af6 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x63b30fe9 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x487bffb2 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6323be9f [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6e28dcd9 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x2cdb07ef [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x28e31023 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x77c9888 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x1793adae [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6b04675d [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x21413f53 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x63ea5ed3 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x149075b5 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x2cbd47b6 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0xf3119dd [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x7c209860 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x5334ca03 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x211046a8 [0205.542] RtlRandomEx (in: Seed=0xb27fd30 | out: Seed=0xb27fd30) returned 0x6f0a3a6b [0205.550] ReadFile (in: hFile=0x1834, lpBuffer=0x1304f080, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb27fd2c, lpOverlapped=0x0 | out: lpBuffer=0x1304f080*, lpNumberOfBytesRead=0xb27fd2c*=0xb3, lpOverlapped=0x0) returned 1 [0208.197] SetFilePointerEx (in: hFile=0x1834, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.197] WriteFile (in: hFile=0x1834, lpBuffer=0x13052c88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb27fd30, lpOverlapped=0x0 | out: lpBuffer=0x13052c88*, lpNumberOfBytesWritten=0xb27fd30*=0xb3, lpOverlapped=0x0) returned 1 [0215.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebb18 [0215.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb30 [0215.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb30) returned 1 [0215.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13052c88) returned 1 [0215.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1304f080) returned 1 [0215.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0215.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c22d0) returned 1 [0215.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e57b8 [0215.638] SetFilePointerEx (in: hFile=0x1834, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.638] WriteFile (in: hFile=0x1834, lpBuffer=0x675d148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb27fdb8, lpOverlapped=0x0 | out: lpBuffer=0x675d148*, lpNumberOfBytesWritten=0xb27fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0216.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d148) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e57e8) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb30) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e57b8) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebb18) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca440) returned 1 [0216.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca670) returned 1 [0216.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678be38 [0216.476] wcscpy (in: _Dest=0x678be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" [0216.476] wcscat (in: _Dest=0x678be38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.ac3a86" [0216.476] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0xb27fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67785a0 [0216.881] FlushFileBuffers (hFile=0x1834) returned 1 [0216.886] CloseHandle (hObject=0x1834) returned 1 [0223.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0223.877] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0223.877] wcscat (in: _Dest=0x3d40060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\AC3A86-Readme.txt" [0223.877] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0223.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.928] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb27fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb27fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.930] CloseHandle (hObject=0x16d4) returned 1 [0224.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0224.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67651a8) returned 1 Thread: id = 6840 os_tid = 0x1284 [0195.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 0x2020 [0195.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0200.290] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d7c [0200.290] GetFileSizeEx (in: hFile=0x1d7c, lpFileSize=0xc54fbfc | out: lpFileSize=0xc54fbfc*=179) returned 1 [0200.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0200.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4808 [0200.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0200.291] NtQuerySystemTime (in: CurrentTime=0xc54fb70 | out: CurrentTime=0xc54fb70*=132482711087676000) returned 0x0 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x4cd85e3e [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x633bb1f9 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x1a1d8a9f [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x7bce9959 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x4564e893 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x31e02dd1 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x58cdfb44 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x745f874d [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x613c506f [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x392c0c37 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x2061f570 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x77a58a24 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x6d61f02d [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x697e1f42 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x3bff900 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x20e8d05d [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x361a0f09 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x51487c49 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x6f5983e3 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0xa639591 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x322af11a [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x72cfe46b [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0xf3626c2 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x2227b43e [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x2e1f165e [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x851f5c0 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0xc8968e7 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x2bb4b9be [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x7e3cc70a [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x677d8d87 [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x487284db [0200.291] RtlRandomEx (in: Seed=0xc54fb68 | out: Seed=0xc54fb68) returned 0x5bbf7a28 [0200.299] ReadFile (in: hFile=0x1d7c, lpBuffer=0x6922518, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc54fb64, lpOverlapped=0x0 | out: lpBuffer=0x6922518*, lpNumberOfBytesRead=0xc54fb64*=0xb3, lpOverlapped=0x0) returned 1 [0200.301] SetFilePointerEx (in: hFile=0x1d7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.301] WriteFile (in: hFile=0x1d7c, lpBuffer=0x6926120*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc54fb68, lpOverlapped=0x0 | out: lpBuffer=0x6926120*, lpNumberOfBytesWritten=0xc54fb68*=0xb3, lpOverlapped=0x0) returned 1 [0201.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0201.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0201.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0201.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6926120) returned 1 [0201.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6922518) returned 1 [0201.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0201.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b0e0) returned 1 [0201.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x300550 [0201.140] SetFilePointerEx (in: hFile=0x1d7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.140] WriteFile (in: hFile=0x1d7c, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc54fbf0, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0xc54fbf0*=0x10c, lpOverlapped=0x0) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0203.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0203.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40b58 [0203.327] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" [0203.327] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.ac3a86" [0203.327] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xc54fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67781c8 [0206.237] FlushFileBuffers (hFile=0x1d7c) returned 1 [0206.244] CloseHandle (hObject=0x1d7c) returned 1 [0206.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b958 [0206.612] wcscpy (in: _Dest=0x678b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0206.612] wcscat (in: _Dest=0x678b958, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\AC3A86-Readme.txt" [0206.612] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0206.613] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.915] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc54fb84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc54fb84*=0x8b9, lpOverlapped=0x0) returned 1 [0209.917] CloseHandle (hObject=0x1bf8) returned 1 [0217.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b958) returned 1 [0217.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765e60) returned 1 Thread: id = 6841 os_tid = 0x1f38 [0195.227] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 0x2020 [0195.227] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0205.528] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1640 [0205.528] GetFileSizeEx (in: hFile=0x1640, lpFileSize=0xc74ff14 | out: lpFileSize=0xc74ff14*=179) returned 1 [0205.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0205.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0205.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0205.528] NtQuerySystemTime (in: CurrentTime=0xc74fe88 | out: CurrentTime=0xc74fe88*=132482711140092000) returned 0x0 [0205.528] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x38f45823 [0205.528] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0xe08a26f [0205.528] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0xe1942dc [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x7619e293 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x7d9279af [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x36470a73 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x1d059fc8 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x4f73a3df [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x7d6d7a05 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x3a24bfd6 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x79b0bb2a [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x4db35ecd [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x6d6f82d7 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x75a21b8a [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x644621b [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x6a403eef [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x7a434465 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x2649cb82 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x3b1e3d65 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x393c9478 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x3ace658 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x3719089e [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x576adaf8 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x49fcb8e8 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x798554df [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x290de8e3 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x79b1102e [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x7d99a28a [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x41207872 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x4cbf6f6b [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x391f30e3 [0205.529] RtlRandomEx (in: Seed=0xc74fe80 | out: Seed=0xc74fe80) returned 0x31e93e11 [0205.538] ReadFile (in: hFile=0x1640, lpBuffer=0x13047870, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc74fe7c, lpOverlapped=0x0 | out: lpBuffer=0x13047870*, lpNumberOfBytesRead=0xc74fe7c*=0xb3, lpOverlapped=0x0) returned 1 [0205.540] SetFilePointerEx (in: hFile=0x1640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.540] WriteFile (in: hFile=0x1640, lpBuffer=0x1304b478*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc74fe80, lpOverlapped=0x0 | out: lpBuffer=0x1304b478*, lpNumberOfBytesWritten=0xc74fe80*=0xb3, lpOverlapped=0x0) returned 1 [0209.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0209.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0209.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0209.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1304b478) returned 1 [0209.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13047870) returned 1 [0209.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0209.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822f30) returned 1 [0209.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28298 [0209.911] SetFilePointerEx (in: hFile=0x1640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.911] WriteFile (in: hFile=0x1640, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc74ff08, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xc74ff08*=0x10c, lpOverlapped=0x0) returned 1 [0210.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0210.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f282c8) returned 1 [0210.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0210.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28298) returned 1 [0210.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0210.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0210.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0210.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1e8) returned 1 [0210.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b478 [0210.670] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" [0210.670] wcscat (in: _Dest=0x678b478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.ac3a86" [0210.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xc74fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0210.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6789ca8 [0210.681] FlushFileBuffers (hFile=0x1640) returned 1 [0210.819] CloseHandle (hObject=0x1640) returned 1 [0210.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40540 [0210.821] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0210.821] wcscat (in: _Dest=0x3d40540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\AC3A86-Readme.txt" [0210.821] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0210.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1640 [0210.822] WriteFile (in: hFile=0x1640, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc74fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc74fe9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.824] CloseHandle (hObject=0x1640) returned 1 [0210.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40540) returned 1 [0210.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765f88) returned 1 Thread: id = 6842 os_tid = 0x1f3c [0195.228] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 0x2020 [0195.228] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.786] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdec [0202.786] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0xc5df964 | out: lpFileSize=0xc5df964*=179) returned 1 [0202.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344328 [0202.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344260 [0202.787] NtQuerySystemTime (in: CurrentTime=0xc5df8d8 | out: CurrentTime=0xc5df8d8*=132482711112636000) returned 0x0 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x25bb53f3 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0xac4d337 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x7c716163 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x5ff1d668 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x508638ca [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x79448b0 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x5b3a6612 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x56900184 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x5587ec5a [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x398b989b [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x17fff4cc [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x1d848d22 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x4e5ab946 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x3e1f4fac [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x498067b8 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x271bff31 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x40feec66 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x7c81a44 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x15e75ec7 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x53796360 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x7b8604c8 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x3e2925e4 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x46156f79 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x5057d1bb [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x7b39bd1a [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x18d9ea01 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x63149836 [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x2256b39c [0202.787] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x6c45f787 [0202.788] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x69dd2e29 [0202.788] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x43ef5e3 [0202.788] RtlRandomEx (in: Seed=0xc5df8d0 | out: Seed=0xc5df8d0) returned 0x62bc5774 [0202.799] ReadFile (in: hFile=0xdec, lpBuffer=0x69b4558, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc5df8cc, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesRead=0xc5df8cc*=0xb3, lpOverlapped=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.806] WriteFile (in: hFile=0xdec, lpBuffer=0x69b8160*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc5df8d0, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesWritten=0xc5df8d0*=0xb3, lpOverlapped=0x0) returned 1 [0204.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc7f60 [0204.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358d80) returned 1 [0204.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db4020 [0204.676] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.676] WriteFile (in: hFile=0xdec, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc5df958, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0xc5df958*=0x10c, lpOverlapped=0x0) returned 1 [0206.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344328) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344350) returned 1 [0206.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344288) returned 1 [0206.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678af98 [0206.371] wcscpy (in: _Dest=0x678af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" [0206.371] wcscat (in: _Dest=0x678af98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.ac3a86" [0206.371] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xc5df8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777a18 [0208.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777a18) returned 1 [0208.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6824c00) returned 1 [0208.417] NtQueryInformationFile (in: FileHandle=0xdec, IoStatusBlock=0xc5df8a8, FileInformation=0xc5df8b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5df8a8, FileInformation=0xc5df8b0) returned 0x0 [0208.417] NtSetInformationFile (FileHandle=0xdec, IoStatusBlock=0xc5df8a8, FileInformation=0xc5df8b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678af98) returned 1 [0209.478] FlushFileBuffers (hFile=0xdec) returned 1 [0209.507] CloseHandle (hObject=0xdec) returned 1 [0209.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0209.718] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0209.718] wcscat (in: _Dest=0x3d40b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\AC3A86-Readme.txt" [0209.718] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0209.718] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.212] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc5df8ec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc5df8ec*=0x8b9, lpOverlapped=0x0) returned 1 [0210.214] CloseHandle (hObject=0x1bf8) returned 1 [0210.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0210.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67660b0) returned 1 Thread: id = 6843 os_tid = 0x1f40 [0195.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 0x2020 [0195.229] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0202.806] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd78 [0202.807] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0xbbbfba4 | out: lpFileSize=0xbbbfba4*=179) returned 1 [0202.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344260 [0202.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0202.807] NtQuerySystemTime (in: CurrentTime=0xbbbfb18 | out: CurrentTime=0xbbbfb18*=132482711112792000) returned 0x0 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x62904312 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x26a5d183 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x5bc2a34e [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x6e13608e [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x79942046 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x445eee45 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x39695989 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x1fc608a3 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x75bb55c2 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x42a335b8 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x7e815b81 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x4bcb6439 [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0xb73a47c [0202.807] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x263b0ce6 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x7bccda92 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x295555f1 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x30033865 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0xec1d98e [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x179ef71a [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x3da525c4 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0xdce9544 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x42a335b8 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x359a5dbf [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x357009c8 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x77980fa [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x1fa0da49 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x4c5f48db [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x35eb8daa [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x2d575bd9 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x47d9b2e3 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x7a658bd8 [0202.808] RtlRandomEx (in: Seed=0xbbbfb10 | out: Seed=0xbbbfb10) returned 0x75c74076 [0202.830] ReadFile (in: hFile=0xd78, lpBuffer=0x69bbd68, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbbbfb0c, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesRead=0xbbbfb0c*=0xb3, lpOverlapped=0x0) returned 1 [0202.831] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.832] WriteFile (in: hFile=0xd78, lpBuffer=0x6733f10*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbbbfb10, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesWritten=0xbbbfb10*=0xb3, lpOverlapped=0x0) returned 1 [0204.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0204.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1da30) returned 1 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x358ab0) returned 1 [0204.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0204.710] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.710] WriteFile (in: hFile=0xd78, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbbfb98, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xbbbfb98*=0x10c, lpOverlapped=0x0) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344260) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0206.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0206.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678ae60 [0206.377] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" [0206.377] wcscat (in: _Dest=0x678ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.ac3a86" [0206.377] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xbbbfb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777df0 [0208.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777df0) returned 1 [0208.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827fc0) returned 1 [0208.418] NtQueryInformationFile (in: FileHandle=0xd78, IoStatusBlock=0xbbbfae8, FileInformation=0xbbbfaf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbbbfae8, FileInformation=0xbbbfaf0) returned 0x0 [0208.418] NtSetInformationFile (FileHandle=0xd78, IoStatusBlock=0xbbbfae8, FileInformation=0xbbbfaf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ae60) returned 1 [0209.506] FlushFileBuffers (hFile=0xd78) returned 1 [0209.522] CloseHandle (hObject=0xd78) returned 1 [0209.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b0d0 [0209.724] wcscpy (in: _Dest=0x678b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0209.724] wcscat (in: _Dest=0x678b0d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\AC3A86-Readme.txt" [0209.724] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0209.724] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.230] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbbbfb2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbbbfb2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.232] CloseHandle (hObject=0x1bf8) returned 1 [0210.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b0d0) returned 1 [0210.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67661d8) returned 1 Thread: id = 6844 os_tid = 0x1250 [0195.230] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 0x2020 [0195.230] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0202.832] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf94 [0202.832] GetFileSizeEx (in: hFile=0xf94, lpFileSize=0xbb2f94c | out: lpFileSize=0xbb2f94c*=179) returned 1 [0202.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0202.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3448c8 [0202.832] NtQuerySystemTime (in: CurrentTime=0xbb2f8c0 | out: CurrentTime=0xbb2f8c0*=132482711113104000) returned 0x0 [0202.832] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x4e7c7806 [0202.832] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x211b55b3 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0xe41efe7 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x5cc17837 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x214ce053 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0xa83b9b3 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x67b7e3e5 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x11db4872 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x54ad28b9 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x1188eae [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x5941421f [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x5000c968 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x6d6adcdf [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x6cae135b [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x40feec66 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x219650ff [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x79b78b9c [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x7705df0a [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x56485988 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x339154f6 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x44136449 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x39282aae [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x6c09bf21 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x44bc72d6 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x763824ba [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x288af10c [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x46581423 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x229b2882 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x295b1827 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x5f773746 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x6ee9b427 [0202.833] RtlRandomEx (in: Seed=0xbb2f8b8 | out: Seed=0xbb2f8b8) returned 0x1e10f3c1 [0202.842] ReadFile (in: hFile=0xf94, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbb2f8b4, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0xbb2f8b4*=0xb3, lpOverlapped=0x0) returned 1 [0202.844] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.844] WriteFile (in: hFile=0xf94, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbb2f8b8, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xbb2f8b8*=0xb3, lpOverlapped=0x0) returned 1 [0204.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0204.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30321a0) returned 1 [0204.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3660 [0204.712] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.712] WriteFile (in: hFile=0xf94, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb2f940, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0xbb2f940*=0x10c, lpOverlapped=0x0) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3720) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0206.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0206.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678ad28 [0206.380] wcscpy (in: _Dest=0x678ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" [0206.381] wcscat (in: _Dest=0x678ad28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.ac3a86" [0206.381] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xbb2f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67781c8 [0208.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67781c8) returned 1 [0208.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68281e8) returned 1 [0208.418] NtQueryInformationFile (in: FileHandle=0xf94, IoStatusBlock=0xbb2f890, FileInformation=0xbb2f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbb2f890, FileInformation=0xbb2f898) returned 0x0 [0208.419] NtSetInformationFile (FileHandle=0xf94, IoStatusBlock=0xbb2f890, FileInformation=0xbb2f898, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ad28) returned 1 [0209.504] FlushFileBuffers (hFile=0xf94) returned 1 [0209.517] CloseHandle (hObject=0xf94) returned 1 [0209.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b340 [0209.721] wcscpy (in: _Dest=0x678b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0209.721] wcscat (in: _Dest=0x678b340, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\AC3A86-Readme.txt" [0209.721] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0209.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.216] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbb2f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbb2f8d4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.223] CloseHandle (hObject=0x1bf8) returned 1 [0210.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b340) returned 1 [0210.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766300) returned 1 Thread: id = 6845 os_tid = 0x1254 [0195.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 0x2020 [0195.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0202.844] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb28 [0202.845] GetFileSizeEx (in: hFile=0xb28, lpFileSize=0xc38f98c | out: lpFileSize=0xc38f98c*=179) returned 1 [0202.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3448c8 [0202.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344440 [0202.845] NtQuerySystemTime (in: CurrentTime=0xc38f900 | out: CurrentTime=0xc38f900*=132482711113260000) returned 0x0 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xc50843b [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xc50843b [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x7bbb2443 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x64f361ef [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xc4cb6a0 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x3db3d3fa [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x69dfe46f [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x6f7c19f4 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x7697b419 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x575eaa3f [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x68850291 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x7f5d2183 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xacb57c4 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x5f47b4a1 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x64ca87f8 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x483858ec [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x23e870d [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x3b0f012f [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x58d418a8 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xad1b336 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0xe699899 [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x19a89a3e [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x75b1222c [0202.845] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x1a153744 [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x16d84dc4 [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x4fdb8a7b [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x54034b63 [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x574a95c0 [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x20464708 [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x3849aeeb [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x90d0a8e [0202.846] RtlRandomEx (in: Seed=0xc38f8f8 | out: Seed=0xc38f8f8) returned 0x4682ece3 [0202.854] ReadFile (in: hFile=0xb28, lpBuffer=0x12eae060, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc38f8f4, lpOverlapped=0x0 | out: lpBuffer=0x12eae060*, lpNumberOfBytesRead=0xc38f8f4*=0xb3, lpOverlapped=0x0) returned 1 [0202.856] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.856] WriteFile (in: hFile=0xb28, lpBuffer=0x12eb1c68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc38f8f8, lpOverlapped=0x0 | out: lpBuffer=0x12eb1c68*, lpNumberOfBytesWritten=0xc38f8f8*=0xb3, lpOverlapped=0x0) returned 1 [0204.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0204.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb1c68) returned 1 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eae060) returned 1 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3032398) returned 1 [0204.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db39c0 [0204.716] SetFilePointerEx (in: hFile=0xb28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.716] WriteFile (in: hFile=0xb28, lpBuffer=0x6752840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc38f980, lpOverlapped=0x0 | out: lpBuffer=0x6752840*, lpNumberOfBytesWritten=0xc38f980*=0x10c, lpOverlapped=0x0) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0206.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344468) returned 1 [0206.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x678aab8 [0206.386] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" [0206.386] wcscat (in: _Dest=0x678aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.ac3a86" [0206.386] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0xc38f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x67778d0 [0208.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67778d0) returned 1 [0208.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828638) returned 1 [0208.420] NtQueryInformationFile (in: FileHandle=0xb28, IoStatusBlock=0xc38f8d0, FileInformation=0xc38f8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc38f8d0, FileInformation=0xc38f8d8) returned 0x0 [0208.420] NtSetInformationFile (FileHandle=0xb28, IoStatusBlock=0xc38f8d0, FileInformation=0xc38f8d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678aab8) returned 1 [0209.515] FlushFileBuffers (hFile=0xb28) returned 1 [0209.527] CloseHandle (hObject=0xb28) returned 1 [0209.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c6c0 [0209.728] wcscpy (in: _Dest=0x678c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0209.728] wcscat (in: _Dest=0x678c6c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\AC3A86-Readme.txt" [0209.728] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0209.728] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.234] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc38f914, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc38f914*=0x8b9, lpOverlapped=0x0) returned 1 [0210.236] CloseHandle (hObject=0x1bf8) returned 1 [0210.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c6c0) returned 1 [0210.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766428) returned 1 Thread: id = 6846 os_tid = 0xd0c [0195.232] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 0x2020 [0195.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0205.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x914 [0205.510] GetFileSizeEx (in: hFile=0x914, lpFileSize=0xc4ef9cc | out: lpFileSize=0xc4ef9cc*=179) returned 1 [0205.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0205.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0205.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0205.511] NtQuerySystemTime (in: CurrentTime=0xc4ef940 | out: CurrentTime=0xc4ef940*=132482711139936000) returned 0x0 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x56e7d46f [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x56adc1d6 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x67453098 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x2e97ab60 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x3a75f6e3 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x283bc443 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x2f59a0c9 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x2b276e2 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x38bd3245 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x2bfad192 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x7d68e153 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x308e63a3 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0xc659342 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x69de7a0a [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x6d6206b5 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x50744f9f [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x13845ca5 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x7192d6be [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x7106a26a [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x3e012847 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x72a402e4 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x6bb787b6 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x5431d60f [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x7cc01c3a [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0xaf3e10f [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x5447c764 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x23bc7032 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x70108224 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x58967d23 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x4187f68 [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x51f81a2f [0205.511] RtlRandomEx (in: Seed=0xc4ef938 | out: Seed=0xc4ef938) returned 0x399fbb23 [0205.519] ReadFile (in: hFile=0x914, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc4ef934, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xc4ef934*=0xb3, lpOverlapped=0x0) returned 1 [0205.521] SetFilePointerEx (in: hFile=0x914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.522] WriteFile (in: hFile=0x914, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc4ef938, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xc4ef938*=0xb3, lpOverlapped=0x0) returned 1 [0208.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b6f8 [0208.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c490 [0208.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0208.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0208.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0208.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0208.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822e10) returned 1 [0208.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28298 [0208.843] SetFilePointerEx (in: hFile=0x914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.843] WriteFile (in: hFile=0x914, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc4ef9c0, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0xc4ef9c0*=0x10c, lpOverlapped=0x0) returned 1 [0209.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0209.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f282c8) returned 1 [0209.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0209.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28298) returned 1 [0209.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0209.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0209.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0209.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0209.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9dda0 [0209.840] wcscpy (in: _Dest=0x12e9dda0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" [0209.840] wcscat (in: _Dest=0x12e9dda0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.ac3a86" [0209.840] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0xc4ef938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786458 [0209.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786458) returned 1 [0209.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6872a30) returned 1 [0209.844] NtQueryInformationFile (in: FileHandle=0x914, IoStatusBlock=0xc4ef910, FileInformation=0xc4ef918, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc4ef910, FileInformation=0xc4ef918) returned 0x0 [0209.844] NtSetInformationFile (FileHandle=0x914, IoStatusBlock=0xc4ef910, FileInformation=0xc4ef918, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dda0) returned 1 [0209.845] FlushFileBuffers (hFile=0x914) returned 1 [0210.421] CloseHandle (hObject=0x914) returned 1 [0210.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1b30 [0210.424] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0210.425] wcscat (in: _Dest=0x12ea1b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\AC3A86-Readme.txt" [0210.425] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0210.425] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c00 [0210.468] WriteFile (in: hFile=0x1c00, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc4ef954, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc4ef954*=0x8b9, lpOverlapped=0x0) returned 1 [0210.471] CloseHandle (hObject=0x1c00) returned 1 [0210.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0210.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766550) returned 1 Thread: id = 6847 os_tid = 0x17bc [0195.233] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 0x2020 [0195.233] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0200.309] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cbc [0200.310] GetFileSizeEx (in: hFile=0x1cbc, lpFileSize=0xbfefcdc | out: lpFileSize=0xbfefcdc*=179) returned 1 [0200.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0200.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0200.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0200.310] NtQuerySystemTime (in: CurrentTime=0xbfefc50 | out: CurrentTime=0xbfefc50*=132482711087832000) returned 0x0 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x6ff3fe04 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x21bf4a4e [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x1ee7a564 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0xd64a61 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x1dbb16ce [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x6f03d263 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x118cd8ff [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x2bc9948d [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x1d2d56da [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x6bd38dd3 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x2fa15935 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x694f296a [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x4e31761d [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x47eb3034 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x17829bf [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x6c477029 [0200.310] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x688b091 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x76cc8620 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x19355363 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x294ef2b4 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x3c807dc3 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x1afddf8d [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x46473fc4 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x535866ea [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x1fb34866 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x41d74b36 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x4418bdd3 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x75c82cc2 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x5764aedb [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x68d86543 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x5de8c877 [0200.311] RtlRandomEx (in: Seed=0xbfefc48 | out: Seed=0xbfefc48) returned 0x48306f2e [0200.319] ReadFile (in: hFile=0x1cbc, lpBuffer=0x6931538, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbfefc44, lpOverlapped=0x0 | out: lpBuffer=0x6931538*, lpNumberOfBytesRead=0xbfefc44*=0xb3, lpOverlapped=0x0) returned 1 [0200.321] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.321] WriteFile (in: hFile=0x1cbc, lpBuffer=0x6935140*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbfefc48, lpOverlapped=0x0 | out: lpBuffer=0x6935140*, lpNumberOfBytesWritten=0xbfefc48*=0xb3, lpOverlapped=0x0) returned 1 [0201.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0201.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0201.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0201.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6935140) returned 1 [0201.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6931538) returned 1 [0201.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0201.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689af30) returned 1 [0201.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5fc0 [0201.572] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.572] WriteFile (in: hFile=0x1cbc, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbfefcd0, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0xbfefcd0*=0x10c, lpOverlapped=0x0) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0204.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0204.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0204.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41518 [0204.506] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" [0204.506] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.ac3a86" [0204.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xbfefc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6785268 [0206.554] FlushFileBuffers (hFile=0x1cbc) returned 1 [0206.561] CloseHandle (hObject=0x1cbc) returned 1 [0208.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bd00 [0208.990] wcscpy (in: _Dest=0x678bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0208.990] wcscat (in: _Dest=0x678bd00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\AC3A86-Readme.txt" [0208.990] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0208.991] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf70 [0209.335] WriteFile (in: hFile=0xf70, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbfefc64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbfefc64*=0x8b9, lpOverlapped=0x0) returned 1 [0209.881] CloseHandle (hObject=0xf70) returned 1 [0210.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd00) returned 1 [0210.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 Thread: id = 6848 os_tid = 0xdfc [0195.234] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 0x2020 [0195.234] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0200.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21bc [0200.325] GetFileSizeEx (in: hFile=0x21bc, lpFileSize=0xcaffd3c | out: lpFileSize=0xcaffd3c*=179) returned 1 [0200.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41c8 [0200.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0200.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0200.326] NtQuerySystemTime (in: CurrentTime=0xcaffcb0 | out: CurrentTime=0xcaffcb0*=132482711087988000) returned 0x0 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x62fa1cd2 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x69e38311 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x77bf8418 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x236f93ea [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x1e88bb1d [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x6d4af061 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x35b30e3d [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x56a2e7b [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x151c9510 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x448c7ebe [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x1fbb2f40 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x6b7b831d [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x722cb8bd [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x7150c7aa [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x5f0424c9 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x5edcb5ee [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x44ff7b90 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x4bca2266 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x752f1211 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x1e569f84 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x5ca3fb5f [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x2c9d135d [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x1dafc139 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x3db1b778 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x45e86f12 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x3fd84a1 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x53b65eb7 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x3415d83b [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x250cd4fd [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x643d948d [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x71769c11 [0200.326] RtlRandomEx (in: Seed=0xcaffca8 | out: Seed=0xcaffca8) returned 0x48ba0593 [0200.335] ReadFile (in: hFile=0x21bc, lpBuffer=0x6938d48, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xcaffca4, lpOverlapped=0x0 | out: lpBuffer=0x6938d48*, lpNumberOfBytesRead=0xcaffca4*=0xb3, lpOverlapped=0x0) returned 1 [0200.341] SetFilePointerEx (in: hFile=0x21bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.341] WriteFile (in: hFile=0x21bc, lpBuffer=0x693c950*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xcaffca8, lpOverlapped=0x0 | out: lpBuffer=0x693c950*, lpNumberOfBytesWritten=0xcaffca8*=0xb3, lpOverlapped=0x0) returned 1 [0201.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0201.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x693c950) returned 1 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6938d48) returned 1 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a000) returned 1 [0201.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0201.161] SetFilePointerEx (in: hFile=0x21bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.161] WriteFile (in: hFile=0x21bc, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcaffd30, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0xcaffd30*=0x10c, lpOverlapped=0x0) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0203.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0203.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d418c0 [0203.332] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" [0203.332] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.ac3a86" [0203.332] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.ac3a86", NtPathName=0xcaffca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0203.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777df0 [0206.246] FlushFileBuffers (hFile=0x21bc) returned 1 [0206.261] CloseHandle (hObject=0x21bc) returned 1 [0206.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678ba90 [0206.622] wcscpy (in: _Dest=0x678ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0206.622] wcscat (in: _Dest=0x678ba90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\AC3A86-Readme.txt" [0206.622] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ac3a86-readme.txt")) returned 0xffffffff [0206.622] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc2c [0210.560] WriteFile (in: hFile=0xc2c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcaffcc4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcaffcc4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.562] CloseHandle (hObject=0xc2c) returned 1 [0210.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ba90) returned 1 [0210.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67667a0) returned 1 Thread: id = 6849 os_tid = 0xa14 [0195.234] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 0x2020 [0195.234] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0201.552] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e4 [0201.553] GetFileSizeEx (in: hFile=0x16e4, lpFileSize=0xb95ff04 | out: lpFileSize=0xb95ff04*=179) returned 1 [0201.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0201.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0201.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0201.553] NtQuerySystemTime (in: CurrentTime=0xb95fe78 | out: CurrentTime=0xb95fe78*=132482711100312000) returned 0x0 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x445d043 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x42ea3f34 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x3c73ff12 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x350ac1f8 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x24ef383 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x24a38c62 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x5a3cdf66 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x1c55ac84 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x4732d34c [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x4c125464 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x53bbd023 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x3bca8610 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x3fd81077 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x38997a1f [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x3ab43465 [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x6bec35cd [0201.553] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x13d5c103 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x7e578e4 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x6e59aeae [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x535698e [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x46ea58a5 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x1ccb5d42 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x1f9de78 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x11de9042 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x592ee0a1 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x5efdb060 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x26b05504 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x6c8020da [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x58cd3754 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x399cc899 [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x57330c2e [0201.554] RtlRandomEx (in: Seed=0xb95fe70 | out: Seed=0xb95fe70) returned 0x4bc2929b [0201.568] ReadFile (in: hFile=0x16e4, lpBuffer=0x6938d48, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb95fe6c, lpOverlapped=0x0 | out: lpBuffer=0x6938d48*, lpNumberOfBytesRead=0xb95fe6c*=0xb3, lpOverlapped=0x0) returned 1 [0201.570] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.570] WriteFile (in: hFile=0x16e4, lpBuffer=0x693c950*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb95fe70, lpOverlapped=0x0 | out: lpBuffer=0x693c950*, lpNumberOfBytesWritten=0xb95fe70*=0xb3, lpOverlapped=0x0) returned 1 [0203.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4a60 [0203.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1c98 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x693c950) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6938d48) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fdca0) returned 1 [0203.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0203.336] SetFilePointerEx (in: hFile=0x16e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.336] WriteFile (in: hFile=0x16e4, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb95fef8, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0xb95fef8*=0x10c, lpOverlapped=0x0) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0204.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0204.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678ba90 [0204.641] wcscpy (in: _Dest=0x678ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" [0204.641] wcscat (in: _Dest=0x678ba90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.ac3a86" [0204.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0xb95fe70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777df0 [0206.618] FlushFileBuffers (hFile=0x16e4) returned 1 [0206.623] CloseHandle (hObject=0x16e4) returned 1 [0209.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c2d0 [0209.101] wcscpy (in: _Dest=0x12e9c2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0209.101] wcscat (in: _Dest=0x12e9c2d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\AC3A86-Readme.txt" [0209.102] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0209.102] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.869] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb95fe8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb95fe8c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.871] CloseHandle (hObject=0xe24) returned 1 [0209.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c2d0) returned 1 [0209.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67668c8) returned 1 Thread: id = 6850 os_tid = 0x174c [0195.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 0x2020 [0195.235] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0202.376] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1838 [0202.376] GetFileSizeEx (in: hFile=0x1838, lpFileSize=0x86df81c | out: lpFileSize=0x86df81c*=179) returned 1 [0202.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5d8 [0202.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0202.376] NtQuerySystemTime (in: CurrentTime=0x86df790 | out: CurrentTime=0x86df790*=132482711108580000) returned 0x0 [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x5333431d [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1e032f8c [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x7ceb369d [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1801c7c3 [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x2cd2ba9e [0202.376] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0xbbc530d [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x7ca59c23 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x203b4633 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x5bef4ce3 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x5add5430 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x3c7718c3 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x7dd9c25f [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1b26b0cd [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x19b123ec [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1d0beee8 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1d721d2c [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x446ceff6 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1488b603 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x182ebc95 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x28e350d5 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x41921bcf [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x41e4e5db [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x20455ae7 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x4adcf063 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x165bc1e0 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x7e6d2461 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x1eeeee09 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x71b2b5c [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x6d392f1 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x65b2edce [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x431a61e5 [0202.377] RtlRandomEx (in: Seed=0x86df788 | out: Seed=0x86df788) returned 0x77ebd92 [0202.385] ReadFile (in: hFile=0x1838, lpBuffer=0x67212e8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x86df784, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0x86df784*=0xb3, lpOverlapped=0x0) returned 1 [0202.386] SetFilePointerEx (in: hFile=0x1838, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.386] WriteFile (in: hFile=0x1838, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x86df788, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0x86df788*=0xb3, lpOverlapped=0x0) returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3700 [0204.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef5000 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e8a0) returned 1 [0204.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5fc0 [0204.535] SetFilePointerEx (in: hFile=0x1838, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.536] WriteFile (in: hFile=0x1838, lpBuffer=0x67524f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x86df810, lpOverlapped=0x0 | out: lpBuffer=0x67524f8*, lpNumberOfBytesWritten=0x86df810*=0x10c, lpOverlapped=0x0) returned 1 [0206.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 [0206.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0206.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5000) returned 1 [0206.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0206.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3700) returned 1 [0206.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5d8) returned 1 [0206.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5d968) returned 1 [0206.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a880) returned 1 [0206.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678bf70 [0206.193] wcscpy (in: _Dest=0x678bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" [0206.193] wcscat (in: _Dest=0x678bf70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.ac3a86" [0206.193] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x86df788, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6776c00 [0206.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776c00) returned 1 [0206.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef52a8) returned 1 [0206.560] NtQueryInformationFile (in: FileHandle=0x1838, IoStatusBlock=0x86df760, FileInformation=0x86df768, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x86df760, FileInformation=0x86df768) returned 0x0 [0206.560] NtSetInformationFile (FileHandle=0x1838, IoStatusBlock=0x86df760, FileInformation=0x86df768, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bf70) returned 1 [0208.993] FlushFileBuffers (hFile=0x1838) returned 1 [0209.009] CloseHandle (hObject=0x1838) returned 1 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0209.333] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0209.333] wcscat (in: _Dest=0x3d412a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\AC3A86-Readme.txt" [0209.333] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0209.333] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.923] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x86df7a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x86df7a4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.926] CloseHandle (hObject=0x1bf8) returned 1 [0209.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0209.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 6851 os_tid = 0x914 [0195.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 0x2020 [0195.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0202.387] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11e4 [0202.387] GetFileSizeEx (in: hFile=0x11e4, lpFileSize=0xb0ffebc | out: lpFileSize=0xb0ffebc*=179) returned 1 [0202.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad08 [0202.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0202.387] NtQuerySystemTime (in: CurrentTime=0xb0ffe30 | out: CurrentTime=0xb0ffe30*=132482711108580000) returned 0x0 [0202.387] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6df9f2a7 [0202.387] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x5c44fe63 [0202.387] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x22ecd4db [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x2a4011e6 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x46944dda [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x5672e08d [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x47a7f6b3 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6bb5b61 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0xf67dca9 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6a6de631 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x4ef98332 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x3c5b053c [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x5894be [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x1763cf78 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x26314e22 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x2c51b0d3 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x3057206e [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x3c7718c3 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x3fa04205 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x9928666 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x5f5450a1 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x71620bcc [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6ca45497 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x49483231 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x3fa04205 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6160a41e [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x318b7928 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x7f734a06 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x6ab27bdf [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x20694050 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x1bc8e399 [0202.388] RtlRandomEx (in: Seed=0xb0ffe28 | out: Seed=0xb0ffe28) returned 0x92c97c1 [0202.396] ReadFile (in: hFile=0x11e4, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb0ffe24, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xb0ffe24*=0xb3, lpOverlapped=0x0) returned 1 [0202.398] SetFilePointerEx (in: hFile=0x11e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.398] WriteFile (in: hFile=0x11e4, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb0ffe28, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xb0ffe28*=0xb3, lpOverlapped=0x0) returned 1 [0204.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef12e8 [0204.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4948 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4f350) returned 1 [0204.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0204.538] SetFilePointerEx (in: hFile=0x11e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.538] WriteFile (in: hFile=0x11e4, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0ffeb0, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xb0ffeb0*=0x10c, lpOverlapped=0x0) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4948) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef12e8) returned 1 [0206.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad08) returned 1 [0206.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0206.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0206.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c1e0 [0206.197] wcscpy (in: _Dest=0x678c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" [0206.197] wcscat (in: _Dest=0x678c1e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.ac3a86" [0206.197] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0xb0ffe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777f38 [0206.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777f38) returned 1 [0206.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8440) returned 1 [0206.564] NtQueryInformationFile (in: FileHandle=0x11e4, IoStatusBlock=0xb0ffe00, FileInformation=0xb0ffe08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb0ffe00, FileInformation=0xb0ffe08) returned 0x0 [0206.564] NtSetInformationFile (FileHandle=0x11e4, IoStatusBlock=0xb0ffe00, FileInformation=0xb0ffe08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c1e0) returned 1 [0209.008] FlushFileBuffers (hFile=0x11e4) returned 1 [0209.013] CloseHandle (hObject=0x11e4) returned 1 [0209.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0209.336] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0209.336] wcscat (in: _Dest=0x3d41038, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\AC3A86-Readme.txt" [0209.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0209.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.929] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb0ffe44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb0ffe44*=0x8b9, lpOverlapped=0x0) returned 1 [0209.931] CloseHandle (hObject=0x1bf8) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41038) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbe0) returned 1 Thread: id = 6852 os_tid = 0xbd8 [0195.236] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 0x2020 [0195.236] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0202.398] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e0 [0202.398] GetFileSizeEx (in: hFile=0x17e0, lpFileSize=0xbd9f794 | out: lpFileSize=0xbd9f794*=179) returned 1 [0202.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0202.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0202.399] NtQuerySystemTime (in: CurrentTime=0xbd9f708 | out: CurrentTime=0xbd9f708*=132482711108736000) returned 0x0 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x79b3711b [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x9e4cb46 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x3107334b [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x6d63ea79 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x40b110a6 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x7c7021ef [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x7fa185a3 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x59148ad [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x738cd40e [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x382cac71 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x48251da0 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x1a529817 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x1bc8e399 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x7529336f [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x377628a8 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x4ce0f582 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x26b610b1 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x6bb5b61 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x51faad1 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x2e450fae [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x40e9302a [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x772b9d6d [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x6290146a [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x23ba40d0 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x7c3c6847 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x3f7a5643 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x4de9b4d6 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x7c14348c [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x1533eb19 [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x25977ff [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x734432bd [0202.399] RtlRandomEx (in: Seed=0xbd9f700 | out: Seed=0xbd9f700) returned 0x43c0aab4 [0202.407] ReadFile (in: hFile=0x17e0, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbd9f6fc, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0xbd9f6fc*=0xb3, lpOverlapped=0x0) returned 1 [0202.409] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.409] WriteFile (in: hFile=0x17e0, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbd9f700, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0xbd9f700*=0xb3, lpOverlapped=0x0) returned 1 [0204.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4290 [0204.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4308 [0204.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0204.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0204.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0204.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 [0204.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300930) returned 1 [0204.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0204.544] SetFilePointerEx (in: hFile=0x17e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.544] WriteFile (in: hFile=0x17e0, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbd9f788, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0xbd9f788*=0x10c, lpOverlapped=0x0) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4308) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4290) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0206.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a628) returned 1 [0206.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c450 [0206.207] wcscpy (in: _Dest=0x678c450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" [0206.207] wcscat (in: _Dest=0x678c450, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.ac3a86" [0206.207] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0xbd9f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777ca8 [0206.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777ca8) returned 1 [0206.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8890) returned 1 [0206.567] NtQueryInformationFile (in: FileHandle=0x17e0, IoStatusBlock=0xbd9f6d8, FileInformation=0xbd9f6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbd9f6d8, FileInformation=0xbd9f6e0) returned 0x0 [0206.567] NtSetInformationFile (FileHandle=0x17e0, IoStatusBlock=0xbd9f6d8, FileInformation=0xbd9f6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c450) returned 1 [0209.023] FlushFileBuffers (hFile=0x17e0) returned 1 [0209.032] CloseHandle (hObject=0x17e0) returned 1 [0209.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40f00 [0209.340] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0209.340] wcscat (in: _Dest=0x3d40f00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\AC3A86-Readme.txt" [0209.340] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0209.340] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.933] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbd9f71c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbd9f71c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.935] CloseHandle (hObject=0x1bf8) returned 1 [0209.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f00) returned 1 [0209.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd08) returned 1 Thread: id = 6853 os_tid = 0x74c [0195.237] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 0x2020 [0195.237] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0202.409] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf5c [0202.410] GetFileSizeEx (in: hFile=0xf5c, lpFileSize=0xc80f8f4 | out: lpFileSize=0xc80f8f4*=179) returned 1 [0202.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8f8 [0202.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0202.410] NtQuerySystemTime (in: CurrentTime=0xc80f868 | out: CurrentTime=0xc80f868*=132482711108892000) returned 0x0 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x2a4011e6 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7415e940 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7e62e47d [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x2998c4b7 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x6fcafc62 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7693f50e [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x449ef59e [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x2933d050 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7c14348c [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x16f34b [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x66466190 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x446ceff6 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0xab766e5 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x3f24e581 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x5fbe47ac [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x793be2bd [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x14eb2f30 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x5e79cb99 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x4de9b4d6 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7f734a06 [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x73ca100b [0202.410] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x20711344 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x1117a731 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7000cd25 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7916ab7e [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x59148ad [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x4751fa31 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x2558fc01 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x7234b6d2 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x40b110a6 [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0xf1c665e [0202.411] RtlRandomEx (in: Seed=0xc80f860 | out: Seed=0xc80f860) returned 0x6df9f2a7 [0202.418] ReadFile (in: hFile=0xf5c, lpBuffer=0x673b720, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc80f85c, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xc80f85c*=0xb3, lpOverlapped=0x0) returned 1 [0202.420] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.420] WriteFile (in: hFile=0xf5c, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc80f860, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xc80f860*=0xb3, lpOverlapped=0x0) returned 1 [0204.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a70 [0204.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ca0 [0204.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0204.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0204.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0204.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0204.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3009c0) returned 1 [0204.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0204.543] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.543] WriteFile (in: hFile=0xf5c, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc80f8e8, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0xc80f8e8*=0x10c, lpOverlapped=0x0) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ca0) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a70) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8f8) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0206.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6c8) returned 1 [0206.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c318 [0206.201] wcscpy (in: _Dest=0x678c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" [0206.202] wcscat (in: _Dest=0x678c318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.ac3a86" [0206.202] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0xc80f860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778080 [0206.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778080) returned 1 [0206.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8668) returned 1 [0206.566] NtQueryInformationFile (in: FileHandle=0xf5c, IoStatusBlock=0xc80f838, FileInformation=0xc80f840, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc80f838, FileInformation=0xc80f840) returned 0x0 [0206.566] NtSetInformationFile (FileHandle=0xf5c, IoStatusBlock=0xc80f838, FileInformation=0xc80f840, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c318) returned 1 [0209.015] FlushFileBuffers (hFile=0xf5c) returned 1 [0209.021] CloseHandle (hObject=0xf5c) returned 1 [0209.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41650 [0209.338] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0209.338] wcscat (in: _Dest=0x3d41650, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\AC3A86-Readme.txt" [0209.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0209.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.937] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc80f87c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc80f87c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.940] CloseHandle (hObject=0x1bf8) returned 1 [0209.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0209.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce30) returned 1 Thread: id = 6854 os_tid = 0x1f44 [0195.238] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0195.238] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0202.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12a0 [0202.978] GetFileSizeEx (in: hFile=0x12a0, lpFileSize=0xbddf9ec | out: lpFileSize=0xbddf9ec*=179) returned 1 [0202.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc270 [0202.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed208 [0202.979] NtQuerySystemTime (in: CurrentTime=0xbddf960 | out: CurrentTime=0xbddf960*=132482711114508000) returned 0x0 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x31de6f0a [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x23acf1b4 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x110b9ed0 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x4a5d7473 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x53e7c1ad [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x2beefc44 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x66617f18 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x2ef239c4 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x3533ef70 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x32f7eff5 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x2092946e [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x21ad43c2 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x16cad831 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x51980300 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x75892138 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x1b7f5ab8 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x5ccb22e5 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x1f49c5d9 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x1f49c5d9 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x1b7f5ab8 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x40923d84 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x2e06c5b5 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x35eee476 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0xc59ee00 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x40e68ac1 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x1a766456 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x3da525c4 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x708cb9b1 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x6a912082 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x46d7e855 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x161af142 [0202.979] RtlRandomEx (in: Seed=0xbddf958 | out: Seed=0xbddf958) returned 0x2d185287 [0202.990] ReadFile (in: hFile=0x12a0, lpBuffer=0x69d1100, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbddf954, lpOverlapped=0x0 | out: lpBuffer=0x69d1100*, lpNumberOfBytesRead=0xbddf954*=0xb3, lpOverlapped=0x0) returned 1 [0202.993] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.993] WriteFile (in: hFile=0x12a0, lpBuffer=0x69d4d08*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbddf958, lpOverlapped=0x0 | out: lpBuffer=0x69d4d08*, lpNumberOfBytesWritten=0xbddf958*=0xb3, lpOverlapped=0x0) returned 1 [0205.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0205.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b7a8 [0205.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0205.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d4d08) returned 1 [0205.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d1100) returned 1 [0205.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0205.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1dc0) returned 1 [0205.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27ff8 [0205.651] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.652] WriteFile (in: hFile=0x12a0, lpBuffer=0x30bb818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbddf9e0, lpOverlapped=0x0 | out: lpBuffer=0x30bb818*, lpNumberOfBytesWritten=0xbddf9e0*=0x10c, lpOverlapped=0x0) returned 1 [0208.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 [0208.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28028) returned 1 [0208.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b7a8) returned 1 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ff8) returned 1 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc270) returned 1 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed258) returned 1 [0208.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed2f8) returned 1 [0208.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x12ea0c90 [0208.785] wcscpy (in: _Dest=0x12ea0c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" [0208.785] wcscat (in: _Dest=0x12ea0c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.ac3a86" [0208.785] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0xbddf958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66cec78 [0209.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cec78) returned 1 [0209.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6918570) returned 1 [0209.176] NtQueryInformationFile (in: FileHandle=0x12a0, IoStatusBlock=0xbddf930, FileInformation=0xbddf938, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbddf930, FileInformation=0xbddf938) returned 0x0 [0209.176] NtSetInformationFile (FileHandle=0x12a0, IoStatusBlock=0xbddf930, FileInformation=0xbddf938, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0c90) returned 1 [0209.385] FlushFileBuffers (hFile=0x12a0) returned 1 [0209.398] CloseHandle (hObject=0x12a0) returned 1 [0209.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12e9cb58 [0209.652] wcscpy (in: _Dest=0x12e9cb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0209.653] wcscat (in: _Dest=0x12e9cb58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0209.653] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0209.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.167] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbddf974, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbddf974*=0x8b9, lpOverlapped=0x0) returned 1 [0210.169] CloseHandle (hObject=0x1bf8) returned 1 [0210.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cb58) returned 1 [0210.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf58) returned 1 Thread: id = 6855 os_tid = 0x1300 [0195.238] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 0x2020 [0195.238] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1344 [0202.993] GetFileSizeEx (in: hFile=0x1344, lpFileSize=0xbf9f97c | out: lpFileSize=0xbf9f97c*=179) returned 1 [0202.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed208 [0202.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ed230 [0202.993] NtQuerySystemTime (in: CurrentTime=0xbf9f8f0 | out: CurrentTime=0xbf9f8f0*=132482711114664000) returned 0x0 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x5fad2991 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x525d7258 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2f45c283 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2d5ba8c [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2c2fd2c4 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x64a32df5 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2d185287 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2608e4dc [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x13a2ba79 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x16fd3a5c [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x7cbd9cf4 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x55bb0e42 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x379c9930 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x5efacef7 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x23acf1b4 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x7a439e6b [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x1e476644 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x2cd7a005 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x3e85cfc4 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x6afdf22a [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x362742b5 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x5e862f0e [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x34c30965 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x45d31384 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x1837cbf [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x195e6aef [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x3ac8fe02 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x5ffaaa07 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x5bc2a34e [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0xc59ee00 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x55a46c30 [0202.994] RtlRandomEx (in: Seed=0xbf9f8e8 | out: Seed=0xbf9f8e8) returned 0x36a2f298 [0203.005] ReadFile (in: hFile=0x1344, lpBuffer=0x69d8910, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbf9f8e4, lpOverlapped=0x0 | out: lpBuffer=0x69d8910*, lpNumberOfBytesRead=0xbf9f8e4*=0xb3, lpOverlapped=0x0) returned 1 [0203.009] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.009] WriteFile (in: hFile=0x1344, lpBuffer=0x69dc518*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbf9f8e8, lpOverlapped=0x0 | out: lpBuffer=0x69dc518*, lpNumberOfBytesWritten=0xbf9f8e8*=0xb3, lpOverlapped=0x0) returned 1 [0205.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8a8 [0205.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af38 [0205.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0205.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69dc518) returned 1 [0205.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d8910) returned 1 [0205.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0205.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e08) returned 1 [0205.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28058 [0205.654] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.654] WriteFile (in: hFile=0x1344, lpBuffer=0x30bcab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbf9f970, lpOverlapped=0x0 | out: lpBuffer=0x30bcab0*, lpNumberOfBytesWritten=0xbf9f970*=0x10c, lpOverlapped=0x0) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28088) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af38) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28058) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8a8) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed208) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba678) returned 1 [0208.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba6a0) returned 1 [0208.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1c68 [0208.828] wcscpy (in: _Dest=0x12ea1c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" [0208.828] wcscat (in: _Dest=0x12ea1c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.ac3a86" [0208.828] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xbf9f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x678a458 [0209.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a458) returned 1 [0209.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691a178) returned 1 [0209.189] NtQueryInformationFile (in: FileHandle=0x1344, IoStatusBlock=0xbf9f8c0, FileInformation=0xbf9f8c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbf9f8c0, FileInformation=0xbf9f8c8) returned 0x0 [0209.189] NtSetInformationFile (FileHandle=0x1344, IoStatusBlock=0xbf9f8c0, FileInformation=0xbf9f8c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1c68) returned 1 [0209.405] FlushFileBuffers (hFile=0x1344) returned 1 [0209.424] CloseHandle (hObject=0x1344) returned 1 [0209.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c540 [0209.662] wcscpy (in: _Dest=0x12e9c540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0209.662] wcscat (in: _Dest=0x12e9c540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\AC3A86-Readme.txt" [0209.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0209.662] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.187] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbf9f904, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbf9f904*=0x8b9, lpOverlapped=0x0) returned 1 [0210.190] CloseHandle (hObject=0x1bf8) returned 1 [0210.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c540) returned 1 [0210.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d080) returned 1 Thread: id = 6856 os_tid = 0xb54 [0195.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 0x2020 [0195.239] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0203.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x84c [0203.010] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xa4df8fc | out: lpFileSize=0xa4df8fc*=179) returned 1 [0203.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba768 [0203.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba628 [0203.010] NtQuerySystemTime (in: CurrentTime=0xa4df870 | out: CurrentTime=0xa4df870*=132482711114820000) returned 0x0 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x23c7a0e4 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x898a20e [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x1032c6d6 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x5dc9d836 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x65bccc4e [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x21d13c1b [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x7220e296 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x254bed5c [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0xcd631d4 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x35b19003 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x78d8ff13 [0203.010] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x22e543c4 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x123ac6e1 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x6418f194 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x31f57744 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x313d4f02 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x2beefc44 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x110b9ed0 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x7bf6afb6 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x1bf80b88 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x287261d7 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x4455eb23 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x375c7af2 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x442b1263 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x43aafd [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x441d6512 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x468349f4 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x493c0f2c [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x7ab24406 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x719ecaf4 [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x42f8cdbd [0203.011] RtlRandomEx (in: Seed=0xa4df868 | out: Seed=0xa4df868) returned 0x58d6bf63 [0203.021] ReadFile (in: hFile=0x84c, lpBuffer=0x69e0120, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xa4df864, lpOverlapped=0x0 | out: lpBuffer=0x69e0120*, lpNumberOfBytesRead=0xa4df864*=0xb3, lpOverlapped=0x0) returned 1 [0203.024] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.024] WriteFile (in: hFile=0x84c, lpBuffer=0x69e3d28*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xa4df868, lpOverlapped=0x0 | out: lpBuffer=0x69e3d28*, lpNumberOfBytesWritten=0xa4df868*=0xb3, lpOverlapped=0x0) returned 1 [0205.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b280 [0205.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0205.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0205.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e3d28) returned 1 [0205.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e0120) returned 1 [0205.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0205.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e50) returned 1 [0205.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f280b8 [0205.655] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.655] WriteFile (in: hFile=0x84c, lpBuffer=0x30bb930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa4df8f0, lpOverlapped=0x0 | out: lpBuffer=0x30bb930*, lpNumberOfBytesWritten=0xa4df8f0*=0x10c, lpOverlapped=0x0) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f280e8) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f280b8) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b280) returned 1 [0208.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba768) returned 1 [0208.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36b960) returned 1 [0208.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36bca8) returned 1 [0208.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0dc8 [0208.788] wcscpy (in: _Dest=0x12ea0dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" [0208.788] wcscat (in: _Dest=0x12ea0dc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.ac3a86" [0208.788] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xa4df868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67894f8 [0209.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67894f8) returned 1 [0209.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6918798) returned 1 [0209.179] NtQueryInformationFile (in: FileHandle=0x84c, IoStatusBlock=0xa4df840, FileInformation=0xa4df848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa4df840, FileInformation=0xa4df848) returned 0x0 [0209.179] NtSetInformationFile (FileHandle=0x84c, IoStatusBlock=0xa4df840, FileInformation=0xa4df848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0dc8) returned 1 [0209.392] FlushFileBuffers (hFile=0x84c) returned 1 [0209.410] CloseHandle (hObject=0x84c) returned 1 [0209.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c8e8 [0209.657] wcscpy (in: _Dest=0x12e9c8e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0209.657] wcscat (in: _Dest=0x12e9c8e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\AC3A86-Readme.txt" [0209.658] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0209.658] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.171] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa4df884, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa4df884*=0x8b9, lpOverlapped=0x0) returned 1 [0210.174] CloseHandle (hObject=0x1bf8) returned 1 [0210.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c8e8) returned 1 [0210.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d1a8) returned 1 Thread: id = 6857 os_tid = 0xb3c [0195.240] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 0x2020 [0195.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.024] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbb8 [0203.025] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0xba9fe1c | out: lpFileSize=0xba9fe1c*=179) returned 1 [0203.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3016ac0 [0203.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3016b38 [0203.025] NtQuerySystemTime (in: CurrentTime=0xba9fd90 | out: CurrentTime=0xba9fd90*=132482711114976000) returned 0x0 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x44d67563 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x3d94849d [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x440039a3 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x6231e548 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x19b4618e [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x4efe2c49 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x7efa47ea [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x1e8ee33f [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x1c5890f5 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x2005b542 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x21d13c1b [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0xbe13bf7 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x7c9decc7 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x40600b38 [0203.025] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x12b50367 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x6200711f [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x20ea3ac2 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x2f4eb952 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x73ee26fa [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x79b01127 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x48a7a4e6 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x29137349 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x3f99411b [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x34f8b4c4 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x4cf8e1eb [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x48c71625 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x7a706457 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x37fbf244 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x90fe8b6 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x418e1005 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x4bf0b278 [0203.026] RtlRandomEx (in: Seed=0xba9fd88 | out: Seed=0xba9fd88) returned 0x591878b8 [0203.036] ReadFile (in: hFile=0xbb8, lpBuffer=0x69e7930, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xba9fd84, lpOverlapped=0x0 | out: lpBuffer=0x69e7930*, lpNumberOfBytesRead=0xba9fd84*=0xb3, lpOverlapped=0x0) returned 1 [0203.039] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.039] WriteFile (in: hFile=0xbb8, lpBuffer=0x69eb538*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xba9fd88, lpOverlapped=0x0 | out: lpBuffer=0x69eb538*, lpNumberOfBytesWritten=0xba9fd88*=0xb3, lpOverlapped=0x0) returned 1 [0205.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0205.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0205.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0205.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69eb538) returned 1 [0205.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e7930) returned 1 [0205.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0205.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e98) returned 1 [0205.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28118 [0205.657] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.657] WriteFile (in: hFile=0xbb8, lpBuffer=0x30bd258*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xba9fe10, lpOverlapped=0x0 | out: lpBuffer=0x30bd258*, lpNumberOfBytesWritten=0xba9fe10*=0x10c, lpOverlapped=0x0) returned 1 [0208.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28148) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28118) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016ac0) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b390) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b340) returned 1 [0208.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1da0 [0208.835] wcscpy (in: _Dest=0x12ea1da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" [0208.835] wcscat (in: _Dest=0x12ea1da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.ac3a86" [0208.835] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0xba9fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x678a5a0 [0209.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a5a0) returned 1 [0209.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691a3a0) returned 1 [0209.190] NtQueryInformationFile (in: FileHandle=0xbb8, IoStatusBlock=0xba9fd60, FileInformation=0xba9fd68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba9fd60, FileInformation=0xba9fd68) returned 0x0 [0209.190] NtSetInformationFile (FileHandle=0xbb8, IoStatusBlock=0xba9fd60, FileInformation=0xba9fd68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1da0) returned 1 [0209.412] FlushFileBuffers (hFile=0xbb8) returned 1 [0209.428] CloseHandle (hObject=0xbb8) returned 1 [0209.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c408 [0209.665] wcscpy (in: _Dest=0x12e9c408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0209.665] wcscat (in: _Dest=0x12e9c408, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\AC3A86-Readme.txt" [0209.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0209.665] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.192] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xba9fda4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xba9fda4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.194] CloseHandle (hObject=0x1bf8) returned 1 [0210.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c408) returned 1 [0210.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d2d0) returned 1 Thread: id = 6858 os_tid = 0x1314 [0195.241] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 0x2020 [0195.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0203.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d0 [0203.040] GetFileSizeEx (in: hFile=0x14d0, lpFileSize=0xc19f96c | out: lpFileSize=0xc19f96c*=179) returned 1 [0203.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8fe0 [0203.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8f40 [0203.040] NtQuerySystemTime (in: CurrentTime=0xc19f8e0 | out: CurrentTime=0xc19f8e0*=132482711115132000) returned 0x0 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x1cbb691 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x5adea299 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x71623149 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x61ba192a [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x25e88144 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x1266f13e [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x30c3d87e [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x7a87846b [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x5fa2903b [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x3b0805b9 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x3375a941 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x4f6b147e [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x5099e6ee [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x2cab5811 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x57fe40a7 [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x6278b02c [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x6436678d [0203.040] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x3e596598 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x6a788edc [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x2112ecdf [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x4cd0167d [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x730db7d5 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x5bf3ce8b [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x7617b379 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x71b7c522 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x798e377e [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x7f505651 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x3ce559b4 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x77cc4af5 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x161af142 [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x13839c9e [0203.041] RtlRandomEx (in: Seed=0xc19f8d8 | out: Seed=0xc19f8d8) returned 0x6c958423 [0203.051] ReadFile (in: hFile=0x14d0, lpBuffer=0x69ef140, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc19f8d4, lpOverlapped=0x0 | out: lpBuffer=0x69ef140*, lpNumberOfBytesRead=0xc19f8d4*=0xb3, lpOverlapped=0x0) returned 1 [0203.055] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.055] WriteFile (in: hFile=0x14d0, lpBuffer=0x69f2d48*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc19f8d8, lpOverlapped=0x0 | out: lpBuffer=0x69f2d48*, lpNumberOfBytesWritten=0xc19f8d8*=0xb3, lpOverlapped=0x0) returned 1 [0205.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5adf8 [0205.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b140 [0205.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0205.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f2d48) returned 1 [0205.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69ef140) returned 1 [0205.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0205.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ee0) returned 1 [0205.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28178 [0205.659] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.659] WriteFile (in: hFile=0x14d0, lpBuffer=0x30bc998*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc19f960, lpOverlapped=0x0 | out: lpBuffer=0x30bc998*, lpNumberOfBytesWritten=0xc19f960*=0x10c, lpOverlapped=0x0) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f281a8) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b140) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28178) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5adf8) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fe0) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8fb8) returned 1 [0208.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f18) returned 1 [0208.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0f00 [0208.790] wcscpy (in: _Dest=0x12ea0f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" [0208.790] wcscat (in: _Dest=0x12ea0f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.ac3a86" [0208.790] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xc19f8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6789640 [0209.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789640) returned 1 [0209.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69189c0) returned 1 [0209.180] NtQueryInformationFile (in: FileHandle=0x14d0, IoStatusBlock=0xc19f8b0, FileInformation=0xc19f8b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc19f8b0, FileInformation=0xc19f8b8) returned 0x0 [0209.180] NtSetInformationFile (FileHandle=0x14d0, IoStatusBlock=0xc19f8b0, FileInformation=0xc19f8b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0f00) returned 1 [0209.397] FlushFileBuffers (hFile=0x14d0) returned 1 [0209.414] CloseHandle (hObject=0x14d0) returned 1 [0209.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c678 [0209.659] wcscpy (in: _Dest=0x12e9c678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0209.659] wcscat (in: _Dest=0x12e9c678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\AC3A86-Readme.txt" [0209.659] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0209.659] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.180] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc19f8f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc19f8f4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.182] CloseHandle (hObject=0x1bf8) returned 1 [0210.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c678) returned 1 [0210.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d3f8) returned 1 Thread: id = 6859 os_tid = 0x1318 [0195.241] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 0x2020 [0195.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0203.055] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c [0203.056] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0xa95fab4 | out: lpFileSize=0xa95fab4*=179) returned 1 [0203.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d8f40 [0203.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2d9008 [0203.056] NtQuerySystemTime (in: CurrentTime=0xa95fa28 | out: CurrentTime=0xa95fa28*=132482711115288000) returned 0x0 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x9b07199 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x4a4956a2 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x8db79f1 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1263b8ee [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1d5caeb3 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x42e467d9 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x6ab14888 [0203.056] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x6762b83b [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0xf08c45c [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1ca1e49c [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x740018d6 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x7f505651 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x4054b13e [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1d29e78d [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x21ad43c2 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x46361162 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x239cc31a [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x34fcff05 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x195adb08 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x37de03ef [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x3b0f0b8f [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1142350 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x67cecbea [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x456dcfa3 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x1db6db0b [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x54db136d [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x6f7bb729 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x58b677e2 [0203.057] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x2c84a00 [0203.058] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x575c43aa [0203.058] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x46efbee4 [0203.058] RtlRandomEx (in: Seed=0xa95fa20 | out: Seed=0xa95fa20) returned 0x58f12fad [0203.108] ReadFile (in: hFile=0x160c, lpBuffer=0x69f6950, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xa95fa1c, lpOverlapped=0x0 | out: lpBuffer=0x69f6950*, lpNumberOfBytesRead=0xa95fa1c*=0xb3, lpOverlapped=0x0) returned 1 [0203.112] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.112] WriteFile (in: hFile=0x160c, lpBuffer=0x69fa558*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xa95fa20, lpOverlapped=0x0 | out: lpBuffer=0x69fa558*, lpNumberOfBytesWritten=0xa95fa20*=0xb3, lpOverlapped=0x0) returned 1 [0205.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5acb8 [0205.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b348 [0205.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0205.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fa558) returned 1 [0205.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f6950) returned 1 [0205.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0205.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f28) returned 1 [0205.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f281d8 [0205.661] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.661] WriteFile (in: hFile=0x160c, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa95faa8, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0xa95faa8*=0x10c, lpOverlapped=0x0) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28208) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b348) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f281d8) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5acb8) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d8f40) returned 1 [0208.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303dd8) returned 1 [0208.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0208.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1ed8 [0208.839] wcscpy (in: _Dest=0x12ea1ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" [0208.839] wcscat (in: _Dest=0x12ea1ed8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.ac3a86" [0208.839] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0xa95fa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x678a6e8 [0209.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a6e8) returned 1 [0209.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691a5c8) returned 1 [0209.192] NtQueryInformationFile (in: FileHandle=0x160c, IoStatusBlock=0xa95f9f8, FileInformation=0xa95fa00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa95f9f8, FileInformation=0xa95fa00) returned 0x0 [0209.192] NtSetInformationFile (FileHandle=0x160c, IoStatusBlock=0xa95f9f8, FileInformation=0xa95fa00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1ed8) returned 1 [0209.417] FlushFileBuffers (hFile=0x160c) returned 1 [0209.431] CloseHandle (hObject=0x160c) returned 1 [0209.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9cf00 [0209.670] wcscpy (in: _Dest=0x12e9cf00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0209.670] wcscat (in: _Dest=0x12e9cf00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\AC3A86-Readme.txt" [0209.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0209.670] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.196] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa95fa3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa95fa3c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.198] CloseHandle (hObject=0x1bf8) returned 1 [0210.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cf00) returned 1 [0210.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d520) returned 1 Thread: id = 6860 os_tid = 0xe40 [0195.242] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 0x2020 [0195.242] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.113] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd2c [0203.113] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x450fd7c | out: lpFileSize=0x450fd7c*=179) returned 1 [0203.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0203.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b5b8 [0203.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b130 [0203.114] NtQuerySystemTime (in: CurrentTime=0x450fcf0 | out: CurrentTime=0x450fcf0*=132482711115912000) returned 0x0 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x46d9681d [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x2717bd40 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x47263414 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x32923c25 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x432b91d3 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x43d560e3 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x7dd403b1 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x7a24f8c0 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x12458c66 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x51d56760 [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3a64a67b [0203.114] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x294d1ed2 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x1c5ce86 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x7355cd1e [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x57dac03 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x32493b2 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3e299d7e [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x7188892 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x459b062c [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x63f79397 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3c5ba9c3 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x4a818870 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x356df588 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x692498f9 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x721b091c [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x14a047fe [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3efebaf8 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x1fe55e49 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3642bccd [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x60916cd0 [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x3f0aa58d [0203.115] RtlRandomEx (in: Seed=0x450fce8 | out: Seed=0x450fce8) returned 0x78979f17 [0203.130] ReadFile (in: hFile=0xd2c, lpBuffer=0x69fe160, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x450fce4, lpOverlapped=0x0 | out: lpBuffer=0x69fe160*, lpNumberOfBytesRead=0x450fce4*=0xb3, lpOverlapped=0x0) returned 1 [0203.134] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.134] WriteFile (in: hFile=0xd2c, lpBuffer=0x6a01d68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x450fce8, lpOverlapped=0x0 | out: lpBuffer=0x6a01d68*, lpNumberOfBytesWritten=0x450fce8*=0xb3, lpOverlapped=0x0) returned 1 [0205.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0205.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aba0 [0205.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0205.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a01d68) returned 1 [0205.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fe160) returned 1 [0205.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0205.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f70) returned 1 [0205.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28298 [0205.664] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.665] WriteFile (in: hFile=0xd2c, lpBuffer=0x30bbc78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x450fd70, lpOverlapped=0x0 | out: lpBuffer=0x30bbc78*, lpNumberOfBytesWritten=0x450fd70*=0x10c, lpOverlapped=0x0) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f282c8) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aba0) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28298) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0208.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9c060 [0208.841] wcscpy (in: _Dest=0x12e9c060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" [0208.841] wcscat (in: _Dest=0x12e9c060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.ac3a86" [0208.842] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0x450fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x678a830 [0209.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a830) returned 1 [0209.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691a7f0) returned 1 [0209.193] NtQueryInformationFile (in: FileHandle=0xd2c, IoStatusBlock=0x450fcc0, FileInformation=0x450fcc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x450fcc0, FileInformation=0x450fcc8) returned 0x0 [0209.193] NtSetInformationFile (FileHandle=0xd2c, IoStatusBlock=0x450fcc0, FileInformation=0x450fcc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c060) returned 1 [0209.422] FlushFileBuffers (hFile=0xd2c) returned 1 [0209.434] CloseHandle (hObject=0xd2c) returned 1 [0209.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d038 [0209.671] wcscpy (in: _Dest=0x12e9d038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0209.671] wcscat (in: _Dest=0x12e9d038, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\AC3A86-Readme.txt" [0209.671] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0209.671] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.200] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x450fd04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x450fd04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.202] CloseHandle (hObject=0x1bf8) returned 1 [0210.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d038) returned 1 [0210.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d648) returned 1 Thread: id = 6861 os_tid = 0xe60 [0195.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 0x2020 [0195.243] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1820 [0202.776] GetFileSizeEx (in: hFile=0x1820, lpFileSize=0xe0bfa7c | out: lpFileSize=0xe0bfa7c*=179) returned 1 [0202.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0202.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344328 [0202.776] NtQuerySystemTime (in: CurrentTime=0xe0bf9f0 | out: CurrentTime=0xe0bf9f0*=132482711112480000) returned 0x0 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x1d412acb [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x508638ca [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0xe41efe7 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x13194bd8 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x67ac2f0a [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x74815fca [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x68e08342 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x38d3f80f [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x56900184 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x63149836 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x7e5c3108 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x6c45f787 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x47aeda23 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0xd74848c [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x475928a3 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x4cf54c64 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x5ff1d668 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x70aa1bd4 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x70cf2fa5 [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x3a2a13df [0202.776] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x73cc2d7e [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x31de6f0a [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x5d1541c6 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x17fff4cc [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x45ae1bf2 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0xe699899 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x21cc65a3 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x46adc5a3 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x39695989 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x1edc7f25 [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x1188eae [0202.777] RtlRandomEx (in: Seed=0xe0bf9e8 | out: Seed=0xe0bf9e8) returned 0x7737f271 [0202.784] ReadFile (in: hFile=0x1820, lpBuffer=0x69acd48, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xe0bf9e4, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesRead=0xe0bf9e4*=0xb3, lpOverlapped=0x0) returned 1 [0202.786] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.786] WriteFile (in: hFile=0x1820, lpBuffer=0x69b0950*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xe0bf9e8, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesWritten=0xe0bf9e8*=0xb3, lpOverlapped=0x0) returned 1 [0205.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0205.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0205.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0205.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0205.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0205.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0205.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4470) returned 1 [0205.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28238 [0205.662] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.662] WriteFile (in: hFile=0x1820, lpBuffer=0x30bd370*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe0bfa70, lpOverlapped=0x0 | out: lpBuffer=0x30bd370*, lpNumberOfBytesWritten=0xe0bfa70*=0x10c, lpOverlapped=0x0) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28268) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28238) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3443c8) returned 1 [0208.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344418) returned 1 [0208.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1038 [0208.793] wcscpy (in: _Dest=0x12ea1038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" [0208.793] wcscat (in: _Dest=0x12ea1038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.ac3a86" [0208.793] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xe0bf9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6789788 [0209.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789788) returned 1 [0209.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6918be8) returned 1 [0209.181] NtQueryInformationFile (in: FileHandle=0x1820, IoStatusBlock=0xe0bf9c0, FileInformation=0xe0bf9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe0bf9c0, FileInformation=0xe0bf9c8) returned 0x0 [0209.182] NtSetInformationFile (FileHandle=0x1820, IoStatusBlock=0xe0bf9c0, FileInformation=0xe0bf9c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1038) returned 1 [0209.400] FlushFileBuffers (hFile=0x1820) returned 1 [0209.419] CloseHandle (hObject=0x1820) returned 1 [0209.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c7b0 [0209.660] wcscpy (in: _Dest=0x12e9c7b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0209.660] wcscat (in: _Dest=0x12e9c7b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\AC3A86-Readme.txt" [0209.660] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0209.661] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.184] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe0bfa04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe0bfa04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.186] CloseHandle (hObject=0x1bf8) returned 1 [0210.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c7b0) returned 1 [0210.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d770) returned 1 Thread: id = 6862 os_tid = 0x1544 [0195.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 0x2020 [0195.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0202.856] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1878 [0202.856] GetFileSizeEx (in: hFile=0x1878, lpFileSize=0xe20fca4 | out: lpFileSize=0xe20fca4*=179) returned 1 [0202.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344440 [0202.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0202.857] NtQuerySystemTime (in: CurrentTime=0xe20fc18 | out: CurrentTime=0xe20fc18*=132482711113416000) returned 0x0 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x503d0a8 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x542b6e1c [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x73ee26fa [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x5115d651 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x28308c1b [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x14f241c0 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x6e13608e [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x7c81a44 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x37fd7767 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x7c9344ff [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x64dc2a82 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x686f14a5 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x41f57d09 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x43ef8bd6 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x19db8b44 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x460262a3 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x6e830e51 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x59c6eea1 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x102d9a7e [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x45d789e3 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x66e31ce7 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x2dff0860 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x5941421f [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x52e1f985 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0xb73a47c [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x5faae49e [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x42bcf12c [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x5fc80670 [0202.857] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x75e933aa [0202.858] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x3c55ead1 [0202.858] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x406e7155 [0202.858] RtlRandomEx (in: Seed=0xe20fc10 | out: Seed=0xe20fc10) returned 0x5cbd3518 [0202.878] ReadFile (in: hFile=0x1878, lpBuffer=0x12eb5870, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xe20fc0c, lpOverlapped=0x0 | out: lpBuffer=0x12eb5870*, lpNumberOfBytesRead=0xe20fc0c*=0xb3, lpOverlapped=0x0) returned 1 [0202.881] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.881] WriteFile (in: hFile=0x1878, lpBuffer=0x12eb9478*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xe20fc10, lpOverlapped=0x0 | out: lpBuffer=0x12eb9478*, lpNumberOfBytesWritten=0xe20fc10*=0xb3, lpOverlapped=0x0) returned 1 [0206.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0206.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4970 [0206.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0206.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb9478) returned 1 [0206.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eb5870) returned 1 [0206.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0206.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db5f00) returned 1 [0206.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ec38 [0206.774] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.774] WriteFile (in: hFile=0x1878, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe20fc98, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xe20fc98*=0x10c, lpOverlapped=0x0) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec68) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0209.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec38) returned 1 [0209.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0209.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344440) returned 1 [0209.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b50) returned 1 [0209.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41c8) returned 1 [0209.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9ca20 [0209.156] wcscpy (in: _Dest=0x12e9ca20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" [0209.156] wcscat (in: _Dest=0x12e9ca20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.ac3a86" [0209.156] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0xe20fc10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67865a0 [0209.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67865a0) returned 1 [0209.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691b930) returned 1 [0209.366] NtQueryInformationFile (in: FileHandle=0x1878, IoStatusBlock=0xe20fbe8, FileInformation=0xe20fbf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe20fbe8, FileInformation=0xe20fbf0) returned 0x0 [0209.366] NtSetInformationFile (FileHandle=0x1878, IoStatusBlock=0xe20fbe8, FileInformation=0xe20fbf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ca20) returned 1 [0209.630] FlushFileBuffers (hFile=0x1878) returned 1 [0209.646] CloseHandle (hObject=0x1878) returned 1 [0209.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bf70 [0209.756] wcscpy (in: _Dest=0x678bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0209.756] wcscat (in: _Dest=0x678bf70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\AC3A86-Readme.txt" [0209.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0209.756] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.264] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe20fc2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe20fc2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.266] CloseHandle (hObject=0x1bf8) returned 1 [0210.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bf70) returned 1 [0210.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d898) returned 1 Thread: id = 6863 os_tid = 0x1f48 [0195.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json")) returned 0x2020 [0195.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0202.881] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1874 [0202.881] GetFileSizeEx (in: hFile=0x1874, lpFileSize=0xe1cf97c | out: lpFileSize=0xe1cf97c*=179) returned 1 [0202.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0202.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0202.882] NtQuerySystemTime (in: CurrentTime=0xe1cf8f0 | out: CurrentTime=0xe1cf8f0*=132482711113572000) returned 0x0 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x7b3f8f4c [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x2ad2815a [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x3e94e7bd [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x1fa979cb [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x2a2879fb [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x7b2cff7f [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x43637a49 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0xbc77433 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x535fe846 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x289839e9 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x39dc464d [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x7697b419 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0xbaab869 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x3166d46f [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x3d4165f6 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x13d51044 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x332119d1 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x579a80d9 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x2341aacc [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x765eb3c5 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x2256b39c [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x1fdf106 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x114a45de [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x84b7bf5 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x729b93ea [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x38d3f80f [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x3b25684e [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x49e6c90a [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x1cdec8c4 [0202.882] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x1d848d22 [0202.883] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x2c9625d8 [0202.883] RtlRandomEx (in: Seed=0xe1cf8e8 | out: Seed=0xe1cf8e8) returned 0x11682e89 [0202.891] ReadFile (in: hFile=0x1874, lpBuffer=0x12ebd080, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xe1cf8e4, lpOverlapped=0x0 | out: lpBuffer=0x12ebd080*, lpNumberOfBytesRead=0xe1cf8e4*=0xb3, lpOverlapped=0x0) returned 1 [0202.893] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.893] WriteFile (in: hFile=0x1874, lpBuffer=0x12ec0c88*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xe1cf8e8, lpOverlapped=0x0 | out: lpBuffer=0x12ec0c88*, lpNumberOfBytesWritten=0xe1cf8e8*=0xb3, lpOverlapped=0x0) returned 1 [0206.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0206.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0206.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0206.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec0c88) returned 1 [0206.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ebd080) returned 1 [0206.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0206.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1408) returned 1 [0206.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678eb78 [0206.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0206.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678eba8 [0206.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2058 [0206.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0206.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0206.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0206.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d1408) returned 1 [0206.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6751490 [0206.824] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.824] WriteFile (in: hFile=0x1874, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe1cf970, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0xe1cf970*=0x10c, lpOverlapped=0x0) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eba8) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eb78) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0209.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0209.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9cc90 [0209.159] wcscpy (in: _Dest=0x12e9cc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" [0209.159] wcscat (in: _Dest=0x12e9cc90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.ac3a86" [0209.159] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0xe1cf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786310 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786310) returned 1 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825d40) returned 1 [0209.369] NtQueryInformationFile (in: FileHandle=0x1874, IoStatusBlock=0xe1cf8c0, FileInformation=0xe1cf8c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe1cf8c0, FileInformation=0xe1cf8c8) returned 0x0 [0209.369] NtSetInformationFile (FileHandle=0x1874, IoStatusBlock=0xe1cf8c0, FileInformation=0xe1cf8c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cc90) returned 1 [0209.639] FlushFileBuffers (hFile=0x1874) returned 1 [0209.651] CloseHandle (hObject=0x1874) returned 1 [0209.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1ed8 [0209.764] wcscpy (in: _Dest=0x12ea1ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0209.764] wcscat (in: _Dest=0x12ea1ed8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\AC3A86-Readme.txt" [0209.764] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0209.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.277] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe1cf904, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe1cf904*=0x8b9, lpOverlapped=0x0) returned 1 [0210.279] CloseHandle (hObject=0x1bf8) returned 1 [0210.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1ed8) returned 1 [0210.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d9c0) returned 1 Thread: id = 6864 os_tid = 0x154c [0195.246] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 0x2020 [0195.246] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0202.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc40 [0202.893] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0xbe1fb84 | out: lpFileSize=0xbe1fb84*=179) returned 1 [0202.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4330 [0202.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4830 [0202.893] NtQuerySystemTime (in: CurrentTime=0xbe1faf8 | out: CurrentTime=0xbe1faf8*=132482711113728000) returned 0x0 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x4dc5dd05 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x43016698 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0xbd322b6 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x6f76041 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x17984d00 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x2ae0f53f [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x5a0ff25c [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x7aff805f [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x54a480b4 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x602df4fc [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x4d251005 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x2a720151 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x7c2ec14f [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x1117269b [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x5c250d57 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x816755f [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x326bba50 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x6cae135b [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x56d608c4 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x127e2938 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x7dae98c [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x7e5c3108 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x46acba1f [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x76dbd239 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x2861734 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x783c07c0 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x34186cca [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x1fe20644 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x5a161c5b [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x22e84b13 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x35e4b101 [0202.894] RtlRandomEx (in: Seed=0xbe1faf0 | out: Seed=0xbe1faf0) returned 0x1ee4e701 [0202.902] ReadFile (in: hFile=0xc40, lpBuffer=0x12ec4890, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbe1faec, lpOverlapped=0x0 | out: lpBuffer=0x12ec4890*, lpNumberOfBytesRead=0xbe1faec*=0xb3, lpOverlapped=0x0) returned 1 [0202.905] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.905] WriteFile (in: hFile=0xc40, lpBuffer=0x12ec8498*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbe1faf0, lpOverlapped=0x0 | out: lpBuffer=0x12ec8498*, lpNumberOfBytesWritten=0xbe1faf0*=0xb3, lpOverlapped=0x0) returned 1 [0206.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef33e0 [0206.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0206.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0206.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec8498) returned 1 [0206.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ec4890) returned 1 [0206.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0206.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60e80) returned 1 [0206.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ee18 [0206.763] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.764] WriteFile (in: hFile=0xc40, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe1fb78, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0xbe1fb78*=0x10c, lpOverlapped=0x0) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ee48) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ee18) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef33e0) returned 1 [0209.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4330) returned 1 [0209.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef50c8) returned 1 [0209.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e80) returned 1 [0209.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9c408 [0209.140] wcscpy (in: _Dest=0x12e9c408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" [0209.140] wcscat (in: _Dest=0x12e9c408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.ac3a86" [0209.140] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xbe1faf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6788ab8 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788ab8) returned 1 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691ae68) returned 1 [0209.357] NtQueryInformationFile (in: FileHandle=0xc40, IoStatusBlock=0xbe1fac8, FileInformation=0xbe1fad0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbe1fac8, FileInformation=0xbe1fad0) returned 0x0 [0209.358] NtSetInformationFile (FileHandle=0xc40, IoStatusBlock=0xbe1fac8, FileInformation=0xbe1fad0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c408) returned 1 [0209.594] FlushFileBuffers (hFile=0xc40) returned 1 [0209.624] CloseHandle (hObject=0xc40) returned 1 [0209.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c318 [0209.749] wcscpy (in: _Dest=0x678c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0209.749] wcscat (in: _Dest=0x678c318, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\AC3A86-Readme.txt" [0209.749] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0209.749] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.249] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbe1fb0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbe1fb0c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.252] CloseHandle (hObject=0x1bf8) returned 1 [0210.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c318) returned 1 [0210.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dae8) returned 1 Thread: id = 6865 os_tid = 0x1550 [0195.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0195.247] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0202.905] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde8 [0202.905] GetFileSizeEx (in: hFile=0xde8, lpFileSize=0xc8bfa44 | out: lpFileSize=0xc8bfa44*=179) returned 1 [0202.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4830 [0202.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0202.905] NtQuerySystemTime (in: CurrentTime=0xc8bf9b8 | out: CurrentTime=0xc8bf9b8*=132482711113884000) returned 0x0 [0202.905] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x5a08f904 [0202.905] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x4407f777 [0202.905] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x6a69e5bb [0202.905] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x3915dfaf [0202.905] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x2bf9d42c [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x14495ce6 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x67508f62 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x6c50fef [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x1f1c2e85 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x15e75ec7 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0xe72c0d3 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x3770995c [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x3e12bb0e [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x411643e7 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x71182eba [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x45fbec9a [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x32252764 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x10541adb [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x48dd88f [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x7855e1f7 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x7dd70116 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x1a766456 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x69dfe46f [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x48574488 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x4581d863 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x9f61c55 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x1364df5f [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x425929dc [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x6834996 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x72a2d939 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x2b2cad32 [0202.906] RtlRandomEx (in: Seed=0xc8bf9b0 | out: Seed=0xc8bf9b0) returned 0x392ab1be [0202.914] ReadFile (in: hFile=0xde8, lpBuffer=0x12ecc0a0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc8bf9ac, lpOverlapped=0x0 | out: lpBuffer=0x12ecc0a0*, lpNumberOfBytesRead=0xc8bf9ac*=0xb3, lpOverlapped=0x0) returned 1 [0202.915] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.915] WriteFile (in: hFile=0xde8, lpBuffer=0x12ecfca8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc8bf9b0, lpOverlapped=0x0 | out: lpBuffer=0x12ecfca8*, lpNumberOfBytesWritten=0xc8bf9b0*=0xb3, lpOverlapped=0x0) returned 1 [0206.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0206.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4678 [0206.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0206.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ecfca8) returned 1 [0206.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ecc0a0) returned 1 [0206.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0206.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e41a50) returned 1 [0206.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ed58 [0206.770] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.770] WriteFile (in: hFile=0xde8, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc8bfa38, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0xc8bfa38*=0x10c, lpOverlapped=0x0) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed88) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed58) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4830) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1658) returned 1 [0209.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef44e8) returned 1 [0209.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x12e9c678 [0209.145] wcscpy (in: _Dest=0x12e9c678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" [0209.145] wcscat (in: _Dest=0x12e9c678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.ac3a86" [0209.145] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0xc8bf9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66cef28 [0209.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cef28) returned 1 [0209.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691b2b8) returned 1 [0209.361] NtQueryInformationFile (in: FileHandle=0xde8, IoStatusBlock=0xc8bf988, FileInformation=0xc8bf990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc8bf988, FileInformation=0xc8bf990) returned 0x0 [0209.361] NtSetInformationFile (FileHandle=0xde8, IoStatusBlock=0xc8bf988, FileInformation=0xc8bf990, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c678) returned 1 [0209.622] FlushFileBuffers (hFile=0xde8) returned 1 [0209.641] CloseHandle (hObject=0xde8) returned 1 [0209.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x678c1e0 [0209.750] wcscpy (in: _Dest=0x678c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0209.750] wcscat (in: _Dest=0x678c1e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0209.750] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0209.750] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.253] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc8bf9cc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc8bf9cc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.261] CloseHandle (hObject=0x1bf8) returned 1 [0210.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c1e0) returned 1 [0210.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dc10) returned 1 Thread: id = 6866 os_tid = 0x1554 [0195.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0195.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0202.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x161c [0202.916] GetFileSizeEx (in: hFile=0x161c, lpFileSize=0xc9afeb4 | out: lpFileSize=0xc9afeb4*=179) returned 1 [0202.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef16f8 [0202.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48f8 [0202.916] NtQuerySystemTime (in: CurrentTime=0xc9afe28 | out: CurrentTime=0xc9afe28*=132482711113884000) returned 0x0 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x735b2def [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x7c76456d [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x5afe32b [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x553900d1 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x6396c4e5 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0xb68d23f [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x4cb201c8 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x3fea790e [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x26e1ec26 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x710f993f [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x624e0f5 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x2cd99747 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0xd92443f [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x5f158db9 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x78d8ff13 [0202.916] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x421b8ef7 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x7c72f942 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x53dcfa69 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0xce73946 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x329b8676 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0xbe13bf7 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x5f78ddc7 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x452c26e3 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x499e1cca [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x25c0befe [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x5004ba65 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x71108b70 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x72a2d939 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0xbe105d [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x12d77795 [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x721b091c [0202.917] RtlRandomEx (in: Seed=0xc9afe20 | out: Seed=0xc9afe20) returned 0x4556ffa3 [0202.925] ReadFile (in: hFile=0x161c, lpBuffer=0x12ed38b0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc9afe1c, lpOverlapped=0x0 | out: lpBuffer=0x12ed38b0*, lpNumberOfBytesRead=0xc9afe1c*=0xb3, lpOverlapped=0x0) returned 1 [0202.927] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.927] WriteFile (in: hFile=0x161c, lpBuffer=0x12ed74b8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc9afe20, lpOverlapped=0x0 | out: lpBuffer=0x12ed74b8*, lpNumberOfBytesWritten=0xc9afe20*=0xb3, lpOverlapped=0x0) returned 1 [0206.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4740 [0206.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3750 [0206.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0206.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ed74b8) returned 1 [0206.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ed38b0) returned 1 [0206.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0206.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fefdd0) returned 1 [0206.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678edb8 [0206.768] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.768] WriteFile (in: hFile=0x161c, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc9afea8, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xc9afea8*=0x10c, lpOverlapped=0x0) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ede8) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678edb8) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0209.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef16f8) returned 1 [0209.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f70) returned 1 [0209.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3930) returned 1 [0209.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x12e9c540 [0209.143] wcscpy (in: _Dest=0x12e9c540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" [0209.143] wcscat (in: _Dest=0x12e9c540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.ac3a86" [0209.143] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xc9afe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66cedd0 [0209.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cedd0) returned 1 [0209.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691b090) returned 1 [0209.359] NtQueryInformationFile (in: FileHandle=0x161c, IoStatusBlock=0xc9afdf8, FileInformation=0xc9afe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc9afdf8, FileInformation=0xc9afe00) returned 0x0 [0209.359] NtSetInformationFile (FileHandle=0x161c, IoStatusBlock=0xc9afdf8, FileInformation=0xc9afe00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c540) returned 1 [0209.612] FlushFileBuffers (hFile=0x161c) returned 1 [0209.615] CloseHandle (hObject=0x161c) returned 1 [0209.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x678c588 [0209.740] wcscpy (in: _Dest=0x678c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0209.741] wcscat (in: _Dest=0x678c588, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0209.741] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0209.741] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.242] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc9afe3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc9afe3c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.244] CloseHandle (hObject=0x1bf8) returned 1 [0210.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c588) returned 1 [0210.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674dd38) returned 1 Thread: id = 6867 os_tid = 0x8b0 [0195.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json")) returned 0x2020 [0195.248] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x186c [0202.927] GetFileSizeEx (in: hFile=0x186c, lpFileSize=0x99ff8a4 | out: lpFileSize=0x99ff8a4*=179) returned 1 [0202.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef48f8 [0202.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b00 [0202.928] NtQuerySystemTime (in: CurrentTime=0x99ff818 | out: CurrentTime=0x99ff818*=132482711114040000) returned 0x0 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x43861903 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x2a29c864 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x26e1ec26 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x78228a6a [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0xd130ec0 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x3a2a13df [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x6a378c8c [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x35eee476 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x19a206bd [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x2032e8a2 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x673edc2c [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x2e9034f8 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x6e36154c [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x55a6e8f6 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x1a9763f3 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x85fd12a [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x441d6512 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x3e85cfc4 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x23798fcf [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x248b37b1 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x56ab8e03 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x6e4de638 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x315123c4 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x8181ddd [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x6e4de638 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x17c4b2c2 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x7a195bbb [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x6a378c8c [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x5f8b177d [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x65ee9c62 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x2a29c864 [0202.928] RtlRandomEx (in: Seed=0x99ff810 | out: Seed=0x99ff810) returned 0x44b66824 [0202.937] ReadFile (in: hFile=0x186c, lpBuffer=0x12edb0c0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x99ff80c, lpOverlapped=0x0 | out: lpBuffer=0x12edb0c0*, lpNumberOfBytesRead=0x99ff80c*=0xb3, lpOverlapped=0x0) returned 1 [0202.939] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.939] WriteFile (in: hFile=0x186c, lpBuffer=0x12edecc8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x99ff810, lpOverlapped=0x0 | out: lpBuffer=0x12edecc8*, lpNumberOfBytesWritten=0x99ff810*=0xb3, lpOverlapped=0x0) returned 1 [0206.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3a98 [0206.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0206.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0206.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12edecc8) returned 1 [0206.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12edb0c0) returned 1 [0206.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0206.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38640) returned 1 [0206.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ecf8 [0206.771] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.771] WriteFile (in: hFile=0x186c, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x99ff898, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0x99ff898*=0x10c, lpOverlapped=0x0) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed28) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ecf8) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48f8) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4178) returned 1 [0209.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312f68) returned 1 [0209.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9c7b0 [0209.150] wcscpy (in: _Dest=0x12e9c7b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" [0209.151] wcscat (in: _Dest=0x12e9c7b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.ac3a86" [0209.151] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x99ff810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786830 [0209.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786830) returned 1 [0209.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691b4e0) returned 1 [0209.362] NtQueryInformationFile (in: FileHandle=0x186c, IoStatusBlock=0x99ff7e8, FileInformation=0x99ff7f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x99ff7e8, FileInformation=0x99ff7f0) returned 0x0 [0209.362] NtSetInformationFile (FileHandle=0x186c, IoStatusBlock=0x99ff7e8, FileInformation=0x99ff7f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c7b0) returned 1 [0209.620] FlushFileBuffers (hFile=0x186c) returned 1 [0209.632] CloseHandle (hObject=0x186c) returned 1 [0209.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c450 [0209.742] wcscpy (in: _Dest=0x678c450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0209.742] wcscat (in: _Dest=0x678c450, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\AC3A86-Readme.txt" [0209.742] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0209.742] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.246] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x99ff82c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x99ff82c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.248] CloseHandle (hObject=0x1bf8) returned 1 [0210.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c450) returned 1 [0210.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674de60) returned 1 Thread: id = 6868 os_tid = 0x1850 [0195.249] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json")) returned 0x2020 [0195.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0202.939] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1868 [0202.939] GetFileSizeEx (in: hFile=0x1868, lpFileSize=0xbc4fe7c | out: lpFileSize=0xbc4fe7c*=159) returned 1 [0202.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312a90 [0202.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0202.939] NtQuerySystemTime (in: CurrentTime=0xbc4fdf0 | out: CurrentTime=0xbc4fdf0*=132482711114196000) returned 0x0 [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x90fe8b6 [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x60a94f46 [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x311fc0a3 [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x1b7bdfa9 [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x425929dc [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x78228a6a [0202.939] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x55bb0e42 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x3faf1e08 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x6c86c47b [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x5ce1a2f6 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x88f3030 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x75bb55c2 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x3fbe80c [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x4ae6ea25 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0xd92443f [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x236e4dd1 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x1f6c95f6 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x58b35cbf [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x5722f075 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x173e331 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x3131921d [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x2c1c745e [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x5a90b0ba [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x561fd67 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x7974ee2e [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x79633ab4 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0xc6ef310 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x5ce1a2f6 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x1944bd39 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x55f0b3de [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x16801d33 [0202.940] RtlRandomEx (in: Seed=0xbc4fde8 | out: Seed=0xbc4fde8) returned 0x708cb9b1 [0202.948] ReadFile (in: hFile=0x1868, lpBuffer=0x12ee28d0, nNumberOfBytesToRead=0x9f, lpNumberOfBytesRead=0xbc4fde4, lpOverlapped=0x0 | out: lpBuffer=0x12ee28d0*, lpNumberOfBytesRead=0xbc4fde4*=0x9f, lpOverlapped=0x0) returned 1 [0202.950] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.950] WriteFile (in: hFile=0x1868, lpBuffer=0x12ee64d8*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0xbc4fde8, lpOverlapped=0x0 | out: lpBuffer=0x12ee64d8*, lpNumberOfBytesWritten=0xbc4fde8*=0x9f, lpOverlapped=0x0) returned 1 [0206.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2008 [0206.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4b78 [0206.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0206.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ee64d8) returned 1 [0206.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ee28d0) returned 1 [0206.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0206.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ce8) returned 1 [0206.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ec98 [0206.773] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.773] WriteFile (in: hFile=0x1868, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbc4fe70, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0xbc4fe70*=0x10c, lpOverlapped=0x0) returned 1 [0209.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0209.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ecc8) returned 1 [0209.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0209.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec98) returned 1 [0209.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0209.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312a90) returned 1 [0209.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b58) returned 1 [0209.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b30) returned 1 [0209.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9c8e8 [0209.153] wcscpy (in: _Dest=0x12e9c8e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" [0209.153] wcscat (in: _Dest=0x12e9c8e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.ac3a86" [0209.153] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0xbc4fde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67866e8 [0209.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67866e8) returned 1 [0209.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691b708) returned 1 [0209.364] NtQueryInformationFile (in: FileHandle=0x1868, IoStatusBlock=0xbc4fdc0, FileInformation=0xbc4fdc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbc4fdc0, FileInformation=0xbc4fdc8) returned 0x0 [0209.364] NtSetInformationFile (FileHandle=0x1868, IoStatusBlock=0xbc4fdc0, FileInformation=0xbc4fdc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c8e8) returned 1 [0209.626] FlushFileBuffers (hFile=0x1868) returned 1 [0209.646] CloseHandle (hObject=0x1868) returned 1 [0209.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c0a8 [0209.752] wcscpy (in: _Dest=0x678c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0209.752] wcscat (in: _Dest=0x678c0a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\AC3A86-Readme.txt" [0209.752] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0209.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.268] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbc4fe04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbc4fe04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.270] CloseHandle (hObject=0x1bf8) returned 1 [0210.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c0a8) returned 1 [0210.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674df88) returned 1 Thread: id = 6869 os_tid = 0x1f4c [0195.249] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json")) returned 0x2020 [0195.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0202.950] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0xd2ef7cc | out: lpFileSize=0xd2ef7cc*=179) returned 1 [0202.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312b08 [0202.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x312ae0 [0202.951] NtQuerySystemTime (in: CurrentTime=0xd2ef740 | out: CurrentTime=0xd2ef740*=132482711114352000) returned 0x0 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x53dcfa69 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x16c0a0b1 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x75b7ac72 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x400726bc [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x7f88e624 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x2b8eacb1 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x42f297b5 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x452c26e3 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x45acb123 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x7a195bbb [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x8181ddd [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x22e543c4 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0xbb73354 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x64c13a55 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x36c69df0 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x3983df86 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0xbe105d [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x2b5e7d6f [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x5dde2397 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x58b9a239 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x3c6ba45b [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x2d1e63da [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0xbb73354 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x6ff7db4b [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x1f1fb049 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x1a774a7b [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x441168fd [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x7dd70116 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x693242f5 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x596f98b9 [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x239cc31a [0202.951] RtlRandomEx (in: Seed=0xd2ef738 | out: Seed=0xd2ef738) returned 0x65da0651 [0202.961] ReadFile (in: hFile=0x1f7c, lpBuffer=0x12eea0e0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xd2ef734, lpOverlapped=0x0 | out: lpBuffer=0x12eea0e0*, lpNumberOfBytesRead=0xd2ef734*=0xb3, lpOverlapped=0x0) returned 1 [0202.963] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.963] WriteFile (in: hFile=0x1f7c, lpBuffer=0x69c5ce8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xd2ef738, lpOverlapped=0x0 | out: lpBuffer=0x69c5ce8*, lpNumberOfBytesWritten=0xd2ef738*=0xb3, lpOverlapped=0x0) returned 1 [0206.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4510 [0206.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0206.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0206.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5ce8) returned 1 [0206.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eea0e0) returned 1 [0206.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0206.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1d30) returned 1 [0206.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ebd8 [0206.776] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.776] WriteFile (in: hFile=0x1f7c, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd2ef7c0, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0xd2ef7c0*=0x10c, lpOverlapped=0x0) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec08) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ebd8) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312b08) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312dd8) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc2e8) returned 1 [0209.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9cb58 [0209.158] wcscpy (in: _Dest=0x12e9cb58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" [0209.158] wcscat (in: _Dest=0x12e9cb58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.ac3a86" [0209.158] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xd2ef738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786458 [0209.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786458) returned 1 [0209.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825b18) returned 1 [0209.367] NtQueryInformationFile (in: FileHandle=0x1f7c, IoStatusBlock=0xd2ef710, FileInformation=0xd2ef718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd2ef710, FileInformation=0xd2ef718) returned 0x0 [0209.367] NtSetInformationFile (FileHandle=0x1f7c, IoStatusBlock=0xd2ef710, FileInformation=0xd2ef718, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cb58) returned 1 [0209.635] FlushFileBuffers (hFile=0x1f7c) returned 1 [0209.649] CloseHandle (hObject=0x1f7c) returned 1 [0209.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0198 [0209.762] wcscpy (in: _Dest=0x12ea0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0209.762] wcscat (in: _Dest=0x12ea0198, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\AC3A86-Readme.txt" [0209.762] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0209.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.272] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd2ef754, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd2ef754*=0x8b9, lpOverlapped=0x0) returned 1 [0210.274] CloseHandle (hObject=0x1bf8) returned 1 [0210.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0198) returned 1 [0210.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e0b0) returned 1 Thread: id = 6870 os_tid = 0x8fc [0195.250] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json")) returned 0x2020 [0195.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0202.963] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdf4 [0202.964] GetFileSizeEx (in: hFile=0xdf4, lpFileSize=0xe28fbdc | out: lpFileSize=0xe28fbdc*=179) returned 1 [0202.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc1f8 [0202.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2cc270 [0202.964] NtQuerySystemTime (in: CurrentTime=0xe28fb50 | out: CurrentTime=0xe28fb50*=132482711114352000) returned 0x0 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4c405b8d [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4fc59a9d [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x16fd3a5c [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x2d1e63da [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4d1a9c0 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x187de0a6 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x74ba484f [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x2f45c283 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4af15500 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4a4956a2 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x69c27045 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x1bb7d480 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x29421043 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x67f00381 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4032805c [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x34c30965 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x21d392a3 [0202.964] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x1b04daf9 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x7efa47ea [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x3bc3891f [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x3533ef70 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x29b3b31 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x3e44bc2c [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0xbc47447 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x29421043 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x44ab9ca3 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x45014e23 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x1266f13e [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x187de0a6 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x693242f5 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x6231e548 [0202.965] RtlRandomEx (in: Seed=0xe28fb48 | out: Seed=0xe28fb48) returned 0x4d2ed521 [0202.975] ReadFile (in: hFile=0xdf4, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xe28fb44, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xe28fb44*=0xb3, lpOverlapped=0x0) returned 1 [0202.977] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.977] WriteFile (in: hFile=0xdf4, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xe28fb48, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xe28fb48*=0xb3, lpOverlapped=0x0) returned 1 [0204.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0204.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca260 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1d78) returned 1 [0204.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0204.724] SetFilePointerEx (in: hFile=0xdf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.724] WriteFile (in: hFile=0xdf4, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe28fbd0, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0xe28fbd0*=0x10c, lpOverlapped=0x0) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b18) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca260) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0206.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1f8) returned 1 [0206.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc248) returned 1 [0206.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2cc1d0) returned 1 [0206.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678abf0 [0206.385] wcscpy (in: _Dest=0x678abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" [0206.385] wcscat (in: _Dest=0x678abf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.ac3a86" [0206.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0xe28fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67785a0 [0208.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67785a0) returned 1 [0208.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828410) returned 1 [0208.419] NtQueryInformationFile (in: FileHandle=0xdf4, IoStatusBlock=0xe28fb20, FileInformation=0xe28fb28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe28fb20, FileInformation=0xe28fb28) returned 0x0 [0208.419] NtSetInformationFile (FileHandle=0xdf4, IoStatusBlock=0xe28fb20, FileInformation=0xe28fb28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678abf0) returned 1 [0209.509] FlushFileBuffers (hFile=0xdf4) returned 1 [0209.527] CloseHandle (hObject=0xdf4) returned 1 [0209.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b208 [0209.726] wcscpy (in: _Dest=0x678b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0209.727] wcscat (in: _Dest=0x678b208, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\AC3A86-Readme.txt" [0209.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0209.727] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.225] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe28fb64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe28fb64*=0x8b9, lpOverlapped=0x0) returned 1 [0210.227] CloseHandle (hObject=0x1bf8) returned 1 [0210.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b208) returned 1 [0210.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e1d8) returned 1 Thread: id = 6871 os_tid = 0x18f8 [0195.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bc538 [0195.251] wcscpy (in: _Dest=0x30bc538, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0195.251] wcscat (in: _Dest=0x30bc538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0195.251] wcscat (in: _Dest=0x30bc538, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*" [0195.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ebca8 [0195.251] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0200.555] wcscmp (_String1=".", _String2=".") returned 0 [0200.555] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.555] wcscmp (_String1="..", _String2=".") returned 1 [0200.555] wcscmp (_String1="..", _String2="..") returned 0 [0200.555] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.555] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.555] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d402d0 [0200.555] wcscpy (in: _Dest=0x3d402d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0200.555] wcscat (in: _Dest=0x3d402d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0200.555] wcscat (in: _Dest=0x3d402d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" [0201.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d402d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0201.449] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x66ebca8 | out: lpFindFileData=0x66ebca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.449] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0201.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebca8) returned 1 [0201.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0201.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767b20) returned 1 Thread: id = 6872 os_tid = 0x1900 [0195.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x30bcbc8 [0195.251] wcscpy (in: _Dest=0x30bcbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0195.251] wcscat (in: _Dest=0x30bcbc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0195.251] wcscat (in: _Dest=0x30bcbc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*" [0195.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66eba40 [0195.251] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0201.872] wcscmp (_String1=".", _String2=".") returned 0 [0201.872] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.872] wcscmp (_String1="..", _String2=".") returned 1 [0201.872] wcscmp (_String1="..", _String2="..") returned 0 [0201.872] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.872] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.872] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40c90 [0201.872] wcscpy (in: _Dest=0x3d40c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0201.872] wcscat (in: _Dest=0x3d40c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0201.872] wcscat (in: _Dest=0x3d40c90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" [0201.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d40c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0201.954] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66eba40 | out: lpFindFileData=0x66eba40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.954] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0201.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba40) returned 1 [0201.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0201.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 Thread: id = 6873 os_tid = 0x1908 [0195.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h")) returned 0x20 [0195.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0195.258] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.264] GetLastError () returned 0x5 [0195.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0195.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 6874 os_tid = 0x190c [0195.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v")) returned 0x20 [0195.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0195.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.282] GetLastError () returned 0x5 [0195.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0195.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc168) returned 1 Thread: id = 6875 os_tid = 0x1f9c [0195.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v")) returned 0x20 [0195.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0195.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.301] GetLastError () returned 0x5 [0195.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0195.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 6876 os_tid = 0x1a90 [0195.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h")) returned 0x20 [0195.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.316] GetLastError () returned 0x5 [0195.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 6877 os_tid = 0x1a94 [0195.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v")) returned 0x20 [0195.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.331] GetLastError () returned 0x5 [0195.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 6878 os_tid = 0x197c [0195.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h")) returned 0x20 [0195.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.342] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.347] GetLastError () returned 0x5 [0195.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc048) returned 1 Thread: id = 6879 os_tid = 0x1a98 [0195.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v")) returned 0x20 [0195.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.358] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.364] GetLastError () returned 0x5 [0195.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 6880 os_tid = 0x1980 [0195.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h")) returned 0x20 [0195.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0195.375] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.381] GetLastError () returned 0x5 [0195.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0195.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 6881 os_tid = 0x1984 [0195.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v")) returned 0x20 [0195.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0195.406] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.412] GetLastError () returned 0x5 [0195.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0195.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 6882 os_tid = 0x1a9c [0195.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h")) returned 0x20 [0195.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.423] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.428] GetLastError () returned 0x5 [0195.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0195.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 6883 os_tid = 0x1aa0 [0195.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v")) returned 0x20 [0195.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.438] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.444] GetLastError () returned 0x5 [0195.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0195.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 6884 os_tid = 0x1aa4 [0195.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v")) returned 0x20 [0195.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0195.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.461] GetLastError () returned 0x5 [0195.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f29e20) returned 1 Thread: id = 6885 os_tid = 0x1aa8 [0195.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f96e8 [0195.465] wcscpy (in: _Dest=0x2f96e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0195.466] wcscat (in: _Dest=0x2f96e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0195.466] wcscat (in: _Dest=0x2f96e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*" [0195.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ec3e0 [0195.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f4c0 [0196.863] wcscmp (_String1=".", _String2=".") returned 0 [0196.863] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.863] wcscmp (_String1="..", _String2=".") returned 1 [0196.863] wcscmp (_String1="..", _String2="..") returned 0 [0196.863] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.863] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.863] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771898 [0196.863] wcscpy (in: _Dest=0x6771898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0196.863] wcscat (in: _Dest=0x6771898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0196.863] wcscat (in: _Dest=0x6771898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" [0201.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0201.311] FindNextFileW (in: hFindFile=0x3f1f4c0, lpFindFileData=0x66ec3e0 | out: lpFindFileData=0x66ec3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.311] FindClose (in: hFindFile=0x3f1f4c0 | out: hFindFile=0x3f1f4c0) returned 1 [0201.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3e0) returned 1 [0201.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f96e8) returned 1 [0201.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae630) returned 1 Thread: id = 6886 os_tid = 0x1988 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fad98 [0195.469] wcscpy (in: _Dest=0x2fad98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0195.469] wcscat (in: _Dest=0x2fad98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0195.469] wcscat (in: _Dest=0x2fad98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*" [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66ea968 [0195.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f240 [0196.864] wcscmp (_String1=".", _String2=".") returned 0 [0196.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.864] wcscmp (_String1="..", _String2=".") returned 1 [0196.864] wcscmp (_String1="..", _String2="..") returned 0 [0196.864] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.864] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.864] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67719c0 [0196.864] wcscpy (in: _Dest=0x67719c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0196.864] wcscat (in: _Dest=0x67719c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0196.864] wcscat (in: _Dest=0x67719c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" [0201.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67719c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0201.314] FindNextFileW (in: hFindFile=0x3f1f240, lpFindFileData=0x66ea968 | out: lpFindFileData=0x66ea968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.314] FindClose (in: hFindFile=0x3f1f240 | out: hFindFile=0x3f1f240) returned 1 [0201.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea968) returned 1 [0201.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fad98) returned 1 [0201.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758480) returned 1 Thread: id = 6887 os_tid = 0x198c [0195.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f9a00 [0195.470] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0195.470] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0195.470] wcscat (in: _Dest=0x2f9a00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*" [0195.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0195.470] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb80 [0196.864] wcscmp (_String1=".", _String2=".") returned 0 [0196.864] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.864] wcscmp (_String1="..", _String2=".") returned 1 [0196.864] wcscmp (_String1="..", _String2="..") returned 0 [0196.864] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.864] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.865] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771ae8 [0196.865] wcscpy (in: _Dest=0x6771ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0196.865] wcscat (in: _Dest=0x6771ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0196.865] wcscat (in: _Dest=0x6771ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" [0201.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0201.317] FindNextFileW (in: hFindFile=0x3f1fb80, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.317] FindClose (in: hFindFile=0x3f1fb80 | out: hFindFile=0x3f1fb80) returned 1 [0201.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0201.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 [0201.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67572f8) returned 1 Thread: id = 6888 os_tid = 0x1990 [0195.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6753f58 [0195.473] wcscpy (in: _Dest=0x6753f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0195.473] wcscat (in: _Dest=0x6753f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0195.473] wcscat (in: _Dest=0x6753f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*" [0195.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0195.473] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b60 [0196.865] wcscmp (_String1=".", _String2=".") returned 0 [0196.865] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.865] wcscmp (_String1="..", _String2=".") returned 1 [0196.865] wcscmp (_String1="..", _String2="..") returned 0 [0196.865] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.865] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.865] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771c10 [0196.865] wcscpy (in: _Dest=0x6771c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0196.865] wcscat (in: _Dest=0x6771c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0196.865] wcscat (in: _Dest=0x6771c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" [0201.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0201.320] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.320] FindClose (in: hFindFile=0x66d2b60 | out: hFindFile=0x66d2b60) returned 1 [0201.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0201.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753f58) returned 1 [0201.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758270) returned 1 Thread: id = 6889 os_tid = 0x1994 [0195.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6754060 [0195.474] wcscpy (in: _Dest=0x6754060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0195.474] wcscat (in: _Dest=0x6754060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0195.474] wcscat (in: _Dest=0x6754060, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*" [0195.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0195.474] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b20 [0196.866] wcscmp (_String1=".", _String2=".") returned 0 [0196.866] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.866] wcscmp (_String1="..", _String2=".") returned 1 [0196.866] wcscmp (_String1="..", _String2="..") returned 0 [0196.866] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.866] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.866] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771d38 [0196.866] wcscpy (in: _Dest=0x6771d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0196.866] wcscat (in: _Dest=0x6771d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0196.866] wcscat (in: _Dest=0x6771d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" [0201.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0201.322] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.322] FindClose (in: hFindFile=0x66d2b20 | out: hFindFile=0x66d2b20) returned 1 [0201.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0201.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754060) returned 1 [0201.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758378) returned 1 Thread: id = 6890 os_tid = 0x1998 [0195.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6754168 [0195.475] wcscpy (in: _Dest=0x6754168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0195.475] wcscat (in: _Dest=0x6754168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0195.475] wcscat (in: _Dest=0x6754168, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*" [0195.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0195.475] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ae0 [0196.867] wcscmp (_String1=".", _String2=".") returned 0 [0196.867] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.867] wcscmp (_String1="..", _String2=".") returned 1 [0196.867] wcscmp (_String1="..", _String2="..") returned 0 [0196.867] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.867] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.867] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771e60 [0196.867] wcscpy (in: _Dest=0x6771e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0196.867] wcscat (in: _Dest=0x6771e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0196.867] wcscat (in: _Dest=0x6771e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" [0201.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0201.324] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.325] FindClose (in: hFindFile=0x66d2ae0 | out: hFindFile=0x66d2ae0) returned 1 [0201.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0201.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754168) returned 1 [0201.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757508) returned 1 Thread: id = 6891 os_tid = 0x199c [0195.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6752dd0 [0195.476] wcscpy (in: _Dest=0x6752dd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0195.476] wcscat (in: _Dest=0x6752dd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0195.476] wcscat (in: _Dest=0x6752dd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*" [0195.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9608 [0195.476] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2aa0 [0196.867] wcscmp (_String1=".", _String2=".") returned 0 [0196.867] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.867] wcscmp (_String1="..", _String2=".") returned 1 [0196.867] wcscmp (_String1="..", _String2="..") returned 0 [0196.867] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.867] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.867] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6771f88 [0196.868] wcscpy (in: _Dest=0x6771f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0196.868] wcscat (in: _Dest=0x6771f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0196.868] wcscat (in: _Dest=0x6771f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" [0201.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0201.211] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66c9608 | out: lpFindFileData=0x66c9608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.211] FindClose (in: hFindFile=0x66d2aa0 | out: hFindFile=0x66d2aa0) returned 1 [0201.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9608) returned 1 [0201.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752dd0) returned 1 [0201.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757610) returned 1 Thread: id = 6892 os_tid = 0x19a0 [0195.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6752ab8 [0195.477] wcscpy (in: _Dest=0x6752ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0195.477] wcscat (in: _Dest=0x6752ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0195.477] wcscat (in: _Dest=0x6752ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*" [0195.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c93a0 [0195.477] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a60 [0196.868] wcscmp (_String1=".", _String2=".") returned 0 [0196.868] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.868] wcscmp (_String1="..", _String2=".") returned 1 [0196.868] wcscmp (_String1="..", _String2="..") returned 0 [0196.868] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.868] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.868] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67720b0 [0196.868] wcscpy (in: _Dest=0x67720b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0196.868] wcscat (in: _Dest=0x67720b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0196.868] wcscat (in: _Dest=0x67720b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" [0201.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67720b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0201.214] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66c93a0 | out: lpFindFileData=0x66c93a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.214] FindClose (in: hFindFile=0x66d2a60 | out: hFindFile=0x66d2a60) returned 1 [0201.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c93a0) returned 1 [0201.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752ab8) returned 1 [0201.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757718) returned 1 Thread: id = 6893 os_tid = 0x19a4 [0195.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x6752bc0 [0195.479] wcscpy (in: _Dest=0x6752bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0195.479] wcscat (in: _Dest=0x6752bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0195.479] wcscat (in: _Dest=0x6752bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*" [0195.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cba20 [0195.479] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0196.869] wcscmp (_String1=".", _String2=".") returned 0 [0196.869] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.869] wcscmp (_String1="..", _String2=".") returned 1 [0196.869] wcscmp (_String1="..", _String2="..") returned 0 [0196.869] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.869] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.869] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67721d8 [0196.869] wcscpy (in: _Dest=0x67721d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0196.869] wcscat (in: _Dest=0x67721d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0196.869] wcscat (in: _Dest=0x67721d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" [0201.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67721d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0201.216] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66cba20 | out: lpFindFileData=0x66cba20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.216] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0201.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cba20) returned 1 [0201.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752bc0) returned 1 [0201.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757820) returned 1 Thread: id = 6894 os_tid = 0x19a8 [0195.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44ab0 [0195.481] wcscpy (in: _Dest=0x3d44ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0195.481] wcscat (in: _Dest=0x3d44ab0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0195.481] wcscat (in: _Dest=0x3d44ab0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*" [0195.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cabb0 [0195.481] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f20 [0196.869] wcscmp (_String1=".", _String2=".") returned 0 [0196.869] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.869] wcscmp (_String1="..", _String2=".") returned 1 [0196.869] wcscmp (_String1="..", _String2="..") returned 0 [0196.869] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.869] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.869] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x6772300 [0196.870] wcscpy (in: _Dest=0x6772300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0196.870] wcscat (in: _Dest=0x6772300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0196.870] wcscat (in: _Dest=0x6772300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" [0201.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6772300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0201.219] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66cabb0 | out: lpFindFileData=0x66cabb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.219] FindClose (in: hFindFile=0x66d2f20 | out: hFindFile=0x66d2f20) returned 1 [0201.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cabb0) returned 1 [0201.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ab0) returned 1 [0201.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757928) returned 1 Thread: id = 6895 os_tid = 0x19ac [0195.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbd90 [0195.482] wcscpy (in: _Dest=0x30bbd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0195.482] wcscat (in: _Dest=0x30bbd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0195.482] wcscat (in: _Dest=0x30bbd90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*" [0195.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cbc88 [0195.482] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0196.870] wcscmp (_String1=".", _String2=".") returned 0 [0196.870] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.870] wcscmp (_String1="..", _String2=".") returned 1 [0196.870] wcscmp (_String1="..", _String2="..") returned 0 [0196.870] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.870] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.870] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6772428 [0196.870] wcscpy (in: _Dest=0x6772428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0196.870] wcscat (in: _Dest=0x6772428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0196.870] wcscat (in: _Dest=0x6772428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" [0201.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6772428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0201.221] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66cbc88 | out: lpFindFileData=0x66cbc88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.221] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0201.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cbc88) returned 1 [0201.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0201.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 Thread: id = 6896 os_tid = 0x19b0 [0195.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x30bbb60 [0195.485] wcscpy (in: _Dest=0x30bbb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0195.485] wcscat (in: _Dest=0x30bbb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0195.485] wcscat (in: _Dest=0x30bbb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*" [0195.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0195.486] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f200 [0196.862] wcscmp (_String1=".", _String2=".") returned 0 [0196.862] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.862] wcscmp (_String1="..", _String2=".") returned 1 [0196.862] wcscmp (_String1="..", _String2="..") returned 0 [0196.862] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.862] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.862] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6771770 [0196.863] wcscpy (in: _Dest=0x6771770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0196.863] wcscat (in: _Dest=0x6771770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0196.863] wcscat (in: _Dest=0x6771770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" [0201.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0201.429] FindNextFileW (in: hFindFile=0x3f1f200, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.429] FindClose (in: hFindFile=0x3f1f200 | out: hFindFile=0x3f1f200) returned 1 [0201.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0201.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0201.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 Thread: id = 6897 os_tid = 0x19c4 [0195.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 0x2020 [0195.487] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0200.740] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1558 [0200.740] GetFileSizeEx (in: hFile=0x1558, lpFileSize=0xe9ffefc | out: lpFileSize=0xe9ffefc*=251) returned 1 [0200.741] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x1558, lpBuffer=0xe9ffed8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe9ffee8, lpOverlapped=0x0 | out: lpBuffer=0xe9ffed8*, lpNumberOfBytesRead=0xe9ffee8*=0x4, lpOverlapped=0x0) returned 1 [0200.743] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0200.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0200.743] NtQuerySystemTime (in: CurrentTime=0xe9ffe70 | out: CurrentTime=0xe9ffe70*=132482711092200000) returned 0x0 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x740f113b [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x57c710a9 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4f5daa25 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x1270906b [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x5ba29e8c [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x5c6fd723 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x1a5b5a1e [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4c9c7a5d [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x7a0243e6 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x2cf16c40 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4e8ffa7b [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x28c4e7c0 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x79e06312 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0xcafec34 [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x1af86d8b [0200.743] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x1770e16e [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4b878e12 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x7d123096 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x544627e0 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4d25dcb0 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x52490efe [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x6591b73d [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x226aa82c [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x58ec7847 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0xbeee631 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x2e8a0bda [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x2376c8e5 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x18c55cd5 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x651f7a0c [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x25fc1a37 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x4eabfcf6 [0200.744] RtlRandomEx (in: Seed=0xe9ffe68 | out: Seed=0xe9ffe68) returned 0x24159e0c [0200.756] ReadFile (in: hFile=0x1558, lpBuffer=0x6944160, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0xe9ffe64, lpOverlapped=0x0 | out: lpBuffer=0x6944160*, lpNumberOfBytesRead=0xe9ffe64*=0xfb, lpOverlapped=0x0) returned 1 [0200.756] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.757] WriteFile (in: hFile=0x1558, lpBuffer=0x6947d68*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0xe9ffe68, lpOverlapped=0x0 | out: lpBuffer=0x6947d68*, lpNumberOfBytesWritten=0xe9ffe68*=0xfb, lpOverlapped=0x0) returned 1 [0204.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0204.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0204.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0204.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6947d68) returned 1 [0204.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6944160) returned 1 [0204.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0204.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e7c8) returned 1 [0204.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0204.008] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.008] WriteFile (in: hFile=0x1558, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe9ffef0, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0xe9ffef0*=0x10c, lpOverlapped=0x0) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43730) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef40d8) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bd00 [0206.170] wcscpy (in: _Dest=0x678bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" [0206.170] wcscat (in: _Dest=0x678bd00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.ac3a86" [0206.170] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0xe9ffe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777120 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777120) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef7ff0) returned 1 [0206.534] NtQueryInformationFile (in: FileHandle=0x1558, IoStatusBlock=0xe9ffe40, FileInformation=0xe9ffe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe9ffe40, FileInformation=0xe9ffe48) returned 0x0 [0206.534] NtSetInformationFile (FileHandle=0x1558, IoStatusBlock=0xe9ffe40, FileInformation=0xe9ffe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd00) returned 1 [0208.965] FlushFileBuffers (hFile=0x1558) returned 1 [0208.971] CloseHandle (hObject=0x1558) returned 1 [0209.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacac8 [0209.315] wcscpy (in: _Dest=0x12eacac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0209.315] wcscat (in: _Dest=0x12eacac8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\AC3A86-Readme.txt" [0209.315] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0209.315] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.906] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe9ffe84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe9ffe84*=0x8b9, lpOverlapped=0x0) returned 1 [0209.908] CloseHandle (hObject=0x1bf8) returned 1 [0209.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacac8) returned 1 [0209.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765648) returned 1 Thread: id = 6898 os_tid = 0x19cc [0195.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 0x2020 [0195.488] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", dwFileAttributes=0x20) returned 1 [0200.696] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1020 [0200.696] GetFileSizeEx (in: hFile=0x1020, lpFileSize=0xf53f8d4 | out: lpFileSize=0xf53f8d4*=357) returned 1 [0200.697] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x161, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.697] ReadFile (in: hFile=0x1020, lpBuffer=0xf53f8b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf53f8c0, lpOverlapped=0x0 | out: lpBuffer=0xf53f8b0*, lpNumberOfBytesRead=0xf53f8c0*=0x4, lpOverlapped=0x0) returned 1 [0200.699] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0200.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0200.699] NtQuerySystemTime (in: CurrentTime=0xf53f848 | out: CurrentTime=0xf53f848*=132482711091732000) returned 0x0 [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x2add536f [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x6e0f6e40 [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x74f2fb0f [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x582c409a [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x23eb537f [0200.699] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x5a62d7b5 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x5bc257f [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x5763c5d [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x7ae723dd [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x25b8076 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x26a7ba03 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x3bd51029 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x6bbb3a21 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x5a558cc0 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x5050949c [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x3980b926 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x7842b529 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x317a19d9 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x7227875d [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x401d9ce4 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x62eb9b63 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x56823770 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x21c3420c [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x62e8b8e9 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x30cd8227 [0200.700] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x66b70459 [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x264bc744 [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x69a469bd [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x7429c27b [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x580904c1 [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x607e9b45 [0200.701] RtlRandomEx (in: Seed=0xf53f840 | out: Seed=0xf53f840) returned 0x56759933 [0200.714] ReadFile (in: hFile=0x1020, lpBuffer=0x12f7c0e0, nNumberOfBytesToRead=0x165, lpNumberOfBytesRead=0xf53f83c, lpOverlapped=0x0 | out: lpBuffer=0x12f7c0e0*, lpNumberOfBytesRead=0xf53f83c*=0x165, lpOverlapped=0x0) returned 1 [0200.715] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.715] WriteFile (in: hFile=0x1020, lpBuffer=0x12f694b8*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0xf53f840, lpOverlapped=0x0 | out: lpBuffer=0x12f694b8*, lpNumberOfBytesWritten=0xf53f840*=0x165, lpOverlapped=0x0) returned 1 [0203.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4af50 [0203.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f694b8) returned 1 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f7c0e0) returned 1 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0203.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e780) returned 1 [0203.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db4020 [0203.250] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.251] WriteFile (in: hFile=0x1020, lpBuffer=0x6767030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf53f8c8, lpOverlapped=0x0 | out: lpBuffer=0x6767030*, lpNumberOfBytesWritten=0xf53f8c8*=0x10c, lpOverlapped=0x0) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767030) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0204.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc7f60) returned 1 [0204.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bbc8 [0204.668] wcscpy (in: _Dest=0x678bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" [0204.668] wcscat (in: _Dest=0x678bbc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.ac3a86" [0204.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.ac3a86", NtPathName=0xf53f840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784e90 [0208.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784e90) returned 1 [0208.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827b70) returned 1 [0208.411] NtQueryInformationFile (in: FileHandle=0x1020, IoStatusBlock=0xf53f818, FileInformation=0xf53f820, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf53f818, FileInformation=0xf53f820) returned 0x0 [0208.411] NtSetInformationFile (FileHandle=0x1020, IoStatusBlock=0xf53f818, FileInformation=0xf53f820, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bbc8) returned 1 [0209.469] FlushFileBuffers (hFile=0x1020) returned 1 [0209.499] CloseHandle (hObject=0x1020) returned 1 [0209.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779d38 [0209.716] wcscpy (in: _Dest=0x6779d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0209.716] wcscat (in: _Dest=0x6779d38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\AC3A86-Readme.txt" [0209.716] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ac3a86-readme.txt")) returned 0xffffffff [0209.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.208] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf53f85c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf53f85c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.210] CloseHandle (hObject=0x1bf8) returned 1 [0210.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779d38) returned 1 [0210.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765770) returned 1 Thread: id = 6899 os_tid = 0x19d0 [0195.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 0x2020 [0195.489] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0200.715] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0200.716] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0xbc9ff0c | out: lpFileSize=0xbc9ff0c*=179) returned 1 [0200.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1658 [0200.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0200.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0200.716] NtQuerySystemTime (in: CurrentTime=0xbc9fe80 | out: CurrentTime=0xbc9fe80*=132482711091888000) returned 0x0 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x15938d73 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x59c981ce [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x79387b29 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x131131f8 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0xc183c07 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x39133e6c [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x5dc69d23 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x7ba00daa [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x1d6348a4 [0200.716] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x4fdff40a [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x188a438e [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x3b1f9b81 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x20d8236c [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x77e8366c [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0xa69f8f2 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x5676cb96 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x23084d97 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x6706e6e [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x421f78c6 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x2fd4df3b [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x26094f9a [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x8bf1b4c [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x3ef72805 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x952dff4 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x36dcf1dc [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x5cc588a3 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x5207b603 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x710adbfd [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x585f8b6b [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x4b04dcd9 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x709adb42 [0200.717] RtlRandomEx (in: Seed=0xbc9fe78 | out: Seed=0xbc9fe78) returned 0x3e59db1d [0200.729] ReadFile (in: hFile=0xe28, lpBuffer=0x12f6d0c0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xbc9fe74, lpOverlapped=0x0 | out: lpBuffer=0x12f6d0c0*, lpNumberOfBytesRead=0xbc9fe74*=0xb3, lpOverlapped=0x0) returned 1 [0200.737] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.737] WriteFile (in: hFile=0xe28, lpBuffer=0x6940558*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xbc9fe78, lpOverlapped=0x0 | out: lpBuffer=0x6940558*, lpNumberOfBytesWritten=0xbc9fe78*=0xb3, lpOverlapped=0x0) returned 1 [0203.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c120 [0203.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c440 [0203.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0203.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6940558) returned 1 [0203.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f6d0c0) returned 1 [0203.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 [0203.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4ecd8) returned 1 [0203.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3690 [0203.253] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.253] WriteFile (in: hFile=0xe28, lpBuffer=0x67677d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbc9ff00, lpOverlapped=0x0 | out: lpBuffer=0x67677d8*, lpNumberOfBytesWritten=0xbc9ff00*=0x10c, lpOverlapped=0x0) returned 1 [0204.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67677d8) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0204.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b5b0 [0204.623] wcscpy (in: _Dest=0x678b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" [0204.623] wcscat (in: _Dest=0x678b5b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.ac3a86" [0204.623] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0xbc9fe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6785640 [0206.597] FlushFileBuffers (hFile=0xe28) returned 1 [0206.611] CloseHandle (hObject=0xe28) returned 1 [0209.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766bf0 [0209.089] wcscpy (in: _Dest=0x6766bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0209.089] wcscat (in: _Dest=0x6766bf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\AC3A86-Readme.txt" [0209.089] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0209.089] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.860] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbc9fe94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbc9fe94*=0x8b9, lpOverlapped=0x0) returned 1 [0209.862] CloseHandle (hObject=0xe24) returned 1 [0209.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bf0) returned 1 [0209.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764ab8) returned 1 Thread: id = 6900 os_tid = 0x1b34 [0195.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd370 [0195.489] wcscpy (in: _Dest=0x30bd370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0195.489] wcscat (in: _Dest=0x30bd370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0195.489] wcscat (in: _Dest=0x30bd370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*" [0195.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9fa8 [0195.489] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*", lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb40 [0195.490] wcscmp (_String1=".", _String2=".") returned 0 [0195.490] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.490] wcscmp (_String1="..", _String2=".") returned 1 [0195.490] wcscmp (_String1="..", _String2="..") returned 0 [0195.490] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.490] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.490] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67648c8 [0195.490] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0195.490] wcscat (in: _Dest=0x67648c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0195.490] wcscat (in: _Dest=0x67648c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" [0195.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67648c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0195.631] FindNextFileW (in: hFindFile=0x3f1fb40, lpFindFileData=0x66c9fa8 | out: lpFindFileData=0x66c9fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.631] FindClose (in: hFindFile=0x3f1fb40 | out: hFindFile=0x3f1fb40) returned 1 [0195.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9fa8) returned 1 [0195.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 [0195.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752cc8) returned 1 Thread: id = 6901 os_tid = 0x1738 [0195.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc880 [0195.491] wcscpy (in: _Dest=0x30bc880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0195.491] wcscat (in: _Dest=0x30bc880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0195.491] wcscat (in: _Dest=0x30bc880, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*" [0195.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9ad8 [0195.491] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*", lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f7c0 [0195.491] wcscmp (_String1=".", _String2=".") returned 0 [0195.491] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.491] wcscmp (_String1="..", _String2=".") returned 1 [0195.491] wcscmp (_String1="..", _String2="..") returned 0 [0195.491] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.491] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.491] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676aab8 [0195.491] wcscpy (in: _Dest=0x676aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0195.491] wcscat (in: _Dest=0x676aab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0195.491] wcscat (in: _Dest=0x676aab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" [0195.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0195.633] FindNextFileW (in: hFindFile=0x3f1f7c0, lpFindFileData=0x66c9ad8 | out: lpFindFileData=0x66c9ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.633] FindClose (in: hFindFile=0x3f1f7c0 | out: hFindFile=0x3f1f7c0) returned 1 [0195.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9ad8) returned 1 [0195.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0195.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67571f0) returned 1 Thread: id = 6902 os_tid = 0x1ae4 [0195.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb5e8 [0195.492] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0195.492] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0195.492] wcscat (in: _Dest=0x30bb5e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*" [0195.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9870 [0195.492] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*", lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fb00 [0195.492] wcscmp (_String1=".", _String2=".") returned 0 [0195.492] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.492] wcscmp (_String1="..", _String2=".") returned 1 [0195.492] wcscmp (_String1="..", _String2="..") returned 0 [0195.493] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.493] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.493] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676abe0 [0195.493] wcscpy (in: _Dest=0x676abe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0195.493] wcscat (in: _Dest=0x676abe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0195.493] wcscat (in: _Dest=0x676abe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" [0195.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676abe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0195.635] FindNextFileW (in: hFindFile=0x3f1fb00, lpFindFileData=0x66c9870 | out: lpFindFileData=0x66c9870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.635] FindClose (in: hFindFile=0x3f1fb00 | out: hFindFile=0x3f1fb00) returned 1 [0195.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9870) returned 1 [0195.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0195.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757a30) returned 1 Thread: id = 6903 os_tid = 0x1ae8 [0195.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb700 [0195.493] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0195.493] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0195.493] wcscat (in: _Dest=0x30bb700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*" [0195.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9138 [0195.493] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*", lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd80 [0195.494] wcscmp (_String1=".", _String2=".") returned 0 [0195.494] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.494] wcscmp (_String1="..", _String2=".") returned 1 [0195.494] wcscmp (_String1="..", _String2="..") returned 0 [0195.494] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.494] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.494] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676ad08 [0195.494] wcscpy (in: _Dest=0x676ad08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0195.494] wcscat (in: _Dest=0x676ad08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0195.494] wcscat (in: _Dest=0x676ad08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" [0195.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676ad08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0195.637] FindNextFileW (in: hFindFile=0x3f1fd80, lpFindFileData=0x66c9138 | out: lpFindFileData=0x66c9138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.637] FindClose (in: hFindFile=0x3f1fd80 | out: hFindFile=0x3f1fd80) returned 1 [0195.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9138) returned 1 [0195.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0195.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757b38) returned 1 Thread: id = 6904 os_tid = 0x1aec [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb4d0 [0195.494] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0195.494] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0195.495] wcscat (in: _Dest=0x30bb4d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*" [0195.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8798 [0195.495] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*", lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0195.495] wcscmp (_String1=".", _String2=".") returned 0 [0195.495] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.495] wcscmp (_String1="..", _String2=".") returned 1 [0195.495] wcscmp (_String1="..", _String2="..") returned 0 [0195.495] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.495] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.495] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676ae30 [0195.495] wcscpy (in: _Dest=0x676ae30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0195.495] wcscat (in: _Dest=0x676ae30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0195.495] wcscat (in: _Dest=0x676ae30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" [0195.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676ae30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28 [0195.639] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x66c8798 | out: lpFindFileData=0x66c8798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.639] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0195.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8798) returned 1 [0195.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0195.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757c40) returned 1 Thread: id = 6905 os_tid = 0x1af8 [0195.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc308 [0195.497] wcscpy (in: _Dest=0x30bc308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0195.497] wcscat (in: _Dest=0x30bc308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0195.497] wcscat (in: _Dest=0x30bc308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*" [0195.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2c98 [0195.497] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*", lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0195.498] wcscmp (_String1=".", _String2=".") returned 0 [0195.498] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.498] wcscmp (_String1="..", _String2=".") returned 1 [0195.498] wcscmp (_String1="..", _String2="..") returned 0 [0195.498] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.498] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.498] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676af58 [0195.498] wcscpy (in: _Dest=0x676af58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0195.498] wcscat (in: _Dest=0x676af58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0195.498] wcscat (in: _Dest=0x676af58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" [0195.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0195.641] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2c98 | out: lpFindFileData=0x66e2c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.641] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0195.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2c98) returned 1 [0195.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0195.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757d48) returned 1 Thread: id = 6906 os_tid = 0x1afc [0195.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bd140 [0195.499] wcscpy (in: _Dest=0x30bd140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0195.499] wcscat (in: _Dest=0x30bd140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0195.499] wcscat (in: _Dest=0x30bd140, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*" [0195.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e27c8 [0195.499] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*", lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0195.499] wcscmp (_String1=".", _String2=".") returned 0 [0195.499] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.499] wcscmp (_String1="..", _String2=".") returned 1 [0195.499] wcscmp (_String1="..", _String2="..") returned 0 [0195.499] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.499] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.499] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b080 [0195.500] wcscpy (in: _Dest=0x676b080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0195.500] wcscat (in: _Dest=0x676b080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0195.500] wcscat (in: _Dest=0x676b080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" [0195.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0195.643] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e27c8 | out: lpFindFileData=0x66e27c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.643] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0195.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e27c8) returned 1 [0195.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0195.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757e50) returned 1 Thread: id = 6907 os_tid = 0x1bbc [0195.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bcf10 [0195.500] wcscpy (in: _Dest=0x30bcf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0195.500] wcscat (in: _Dest=0x30bcf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0195.500] wcscat (in: _Dest=0x30bcf10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*" [0195.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2a30 [0195.500] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*", lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0195.500] wcscmp (_String1=".", _String2=".") returned 0 [0195.500] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.501] wcscmp (_String1="..", _String2=".") returned 1 [0195.501] wcscmp (_String1="..", _String2="..") returned 0 [0195.501] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.501] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.501] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b1a8 [0195.501] wcscpy (in: _Dest=0x676b1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0195.501] wcscat (in: _Dest=0x676b1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0195.501] wcscat (in: _Dest=0x676b1a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" [0195.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0195.645] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e2a30 | out: lpFindFileData=0x66e2a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.646] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0195.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2a30) returned 1 [0195.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0195.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757f58) returned 1 Thread: id = 6908 os_tid = 0x1bc0 [0195.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc1f0 [0195.502] wcscpy (in: _Dest=0x30bc1f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0195.502] wcscat (in: _Dest=0x30bc1f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0195.503] wcscat (in: _Dest=0x30bc1f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*" [0195.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1488 [0195.503] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*", lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0195.503] wcscmp (_String1=".", _String2=".") returned 0 [0195.503] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.503] wcscmp (_String1="..", _String2=".") returned 1 [0195.503] wcscmp (_String1="..", _String2="..") returned 0 [0195.503] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.503] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.503] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b2d0 [0195.503] wcscpy (in: _Dest=0x676b2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0195.503] wcscat (in: _Dest=0x676b2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0195.503] wcscat (in: _Dest=0x676b2d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" [0195.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0195.648] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e1488 | out: lpFindFileData=0x66e1488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.648] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1488) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758060) returned 1 Thread: id = 6909 os_tid = 0x1b00 [0195.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bc998 [0195.505] wcscpy (in: _Dest=0x30bc998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0195.505] wcscat (in: _Dest=0x30bc998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0195.505] wcscat (in: _Dest=0x30bc998, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*" [0195.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e16f0 [0195.505] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*", lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29a0 [0195.505] wcscmp (_String1=".", _String2=".") returned 0 [0195.505] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.505] wcscmp (_String1="..", _String2=".") returned 1 [0195.505] wcscmp (_String1="..", _String2="..") returned 0 [0195.505] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.505] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.505] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b3f8 [0195.506] wcscpy (in: _Dest=0x676b3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0195.506] wcscat (in: _Dest=0x676b3f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0195.506] wcscat (in: _Dest=0x676b3f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" [0195.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0196.041] FindNextFileW (in: hFindFile=0x66d29a0, lpFindFileData=0x66e16f0 | out: lpFindFileData=0x66e16f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.041] FindClose (in: hFindFile=0x66d29a0 | out: hFindFile=0x66d29a0) returned 1 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e16f0) returned 1 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758168) returned 1 Thread: id = 6910 os_tid = 0x1bc8 [0195.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6766e00 [0195.506] wcscpy (in: _Dest=0x6766e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0195.506] wcscat (in: _Dest=0x6766e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0195.506] wcscat (in: _Dest=0x6766e00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*" [0195.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1958 [0195.506] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*", lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2960 [0195.507] wcscmp (_String1=".", _String2=".") returned 0 [0195.507] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.507] wcscmp (_String1="..", _String2=".") returned 1 [0195.507] wcscmp (_String1="..", _String2="..") returned 0 [0195.507] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.507] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.507] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x676b520 [0195.507] wcscpy (in: _Dest=0x676b520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0195.507] wcscat (in: _Dest=0x676b520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0195.507] wcscat (in: _Dest=0x676b520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" [0196.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0196.044] FindNextFileW (in: hFindFile=0x66d2960, lpFindFileData=0x66e1958 | out: lpFindFileData=0x66e1958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.044] FindClose (in: hFindFile=0x66d2960 | out: hFindFile=0x66d2960) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1958) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e00) returned 1 [0196.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6757400) returned 1 Thread: id = 6911 os_tid = 0x1b04 [0195.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6767e68 [0195.509] wcscpy (in: _Dest=0x6767e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0195.509] wcscat (in: _Dest=0x6767e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0195.509] wcscat (in: _Dest=0x6767e68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*" [0195.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1bc0 [0195.509] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*", lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ee0 [0195.509] wcscmp (_String1=".", _String2=".") returned 0 [0195.509] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.509] wcscmp (_String1="..", _String2=".") returned 1 [0195.509] wcscmp (_String1="..", _String2="..") returned 0 [0195.509] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.509] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.509] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b648 [0195.509] wcscpy (in: _Dest=0x676b648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0195.509] wcscat (in: _Dest=0x676b648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0195.509] wcscat (in: _Dest=0x676b648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" [0196.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0196.218] FindNextFileW (in: hFindFile=0x66d2ee0, lpFindFileData=0x66e1bc0 | out: lpFindFileData=0x66e1bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.218] FindClose (in: hFindFile=0x66d2ee0 | out: hFindFile=0x66d2ee0) returned 1 [0196.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1bc0) returned 1 [0196.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767e68) returned 1 [0196.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756cc8) returned 1 Thread: id = 6912 os_tid = 0x1b10 [0195.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6767f80 [0195.510] wcscpy (in: _Dest=0x6767f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0195.510] wcscat (in: _Dest=0x6767f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0195.510] wcscat (in: _Dest=0x6767f80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*" [0195.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e1e28 [0195.510] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*", lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ea0 [0195.510] wcscmp (_String1=".", _String2=".") returned 0 [0195.510] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.510] wcscmp (_String1="..", _String2=".") returned 1 [0195.510] wcscmp (_String1="..", _String2="..") returned 0 [0195.510] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.510] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.510] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b770 [0195.511] wcscpy (in: _Dest=0x676b770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0195.511] wcscat (in: _Dest=0x676b770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0195.511] wcscat (in: _Dest=0x676b770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" [0196.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0196.220] FindNextFileW (in: hFindFile=0x66d2ea0, lpFindFileData=0x66e1e28 | out: lpFindFileData=0x66e1e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.221] FindClose (in: hFindFile=0x66d2ea0 | out: hFindFile=0x66d2ea0) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e1e28) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767f80) returned 1 [0196.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756dd0) returned 1 Thread: id = 6913 os_tid = 0x1b18 [0195.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768098 [0195.511] wcscpy (in: _Dest=0x6768098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0195.511] wcscat (in: _Dest=0x6768098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0195.511] wcscat (in: _Dest=0x6768098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*" [0195.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2090 [0195.511] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*", lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e60 [0195.512] wcscmp (_String1=".", _String2=".") returned 0 [0195.512] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.512] wcscmp (_String1="..", _String2=".") returned 1 [0195.512] wcscmp (_String1="..", _String2="..") returned 0 [0195.512] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.512] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.512] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b898 [0195.512] wcscpy (in: _Dest=0x676b898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0195.512] wcscat (in: _Dest=0x676b898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0195.512] wcscat (in: _Dest=0x676b898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" [0196.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0196.223] FindNextFileW (in: hFindFile=0x66d2e60, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.223] FindClose (in: hFindFile=0x66d2e60 | out: hFindFile=0x66d2e60) returned 1 [0196.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2090) returned 1 [0196.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768098) returned 1 [0196.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756ed8) returned 1 Thread: id = 6914 os_tid = 0x1570 [0195.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67681b0 [0195.512] wcscpy (in: _Dest=0x67681b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0195.512] wcscat (in: _Dest=0x67681b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0195.512] wcscat (in: _Dest=0x67681b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*" [0195.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e22f8 [0195.513] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*", lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2e20 [0195.513] wcscmp (_String1=".", _String2=".") returned 0 [0195.513] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.513] wcscmp (_String1="..", _String2=".") returned 1 [0195.513] wcscmp (_String1="..", _String2="..") returned 0 [0195.513] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.513] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.513] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676b9c0 [0195.513] wcscpy (in: _Dest=0x676b9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0195.513] wcscat (in: _Dest=0x676b9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0195.513] wcscat (in: _Dest=0x676b9c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" [0196.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676b9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0196.225] FindNextFileW (in: hFindFile=0x66d2e20, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.225] FindClose (in: hFindFile=0x66d2e20 | out: hFindFile=0x66d2e20) returned 1 [0196.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e22f8) returned 1 [0196.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67681b0) returned 1 [0196.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756fe0) returned 1 Thread: id = 6915 os_tid = 0xdec [0195.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67682c8 [0195.514] wcscpy (in: _Dest=0x67682c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0195.514] wcscat (in: _Dest=0x67682c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0195.514] wcscat (in: _Dest=0x67682c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*" [0195.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2560 [0195.514] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*", lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2de0 [0195.514] wcscmp (_String1=".", _String2=".") returned 0 [0195.514] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.514] wcscmp (_String1="..", _String2=".") returned 1 [0195.515] wcscmp (_String1="..", _String2="..") returned 0 [0195.515] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.515] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.515] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676bae8 [0195.515] wcscpy (in: _Dest=0x676bae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0195.515] wcscat (in: _Dest=0x676bae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0195.515] wcscat (in: _Dest=0x676bae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" [0196.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676bae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0196.227] FindNextFileW (in: hFindFile=0x66d2de0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.227] FindClose (in: hFindFile=0x66d2de0 | out: hFindFile=0x66d2de0) returned 1 [0196.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2560) returned 1 [0196.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67682c8) returned 1 [0196.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67570e8) returned 1 Thread: id = 6916 os_tid = 0x1c20 [0195.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67683e0 [0195.515] wcscpy (in: _Dest=0x67683e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0195.515] wcscat (in: _Dest=0x67683e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0195.515] wcscat (in: _Dest=0x67683e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*" [0195.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e50b0 [0195.516] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*", lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2da0 [0195.516] wcscmp (_String1=".", _String2=".") returned 0 [0195.516] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.516] wcscmp (_String1="..", _String2=".") returned 1 [0195.516] wcscmp (_String1="..", _String2="..") returned 0 [0195.516] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.516] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.516] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676bc10 [0195.516] wcscpy (in: _Dest=0x676bc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0195.516] wcscat (in: _Dest=0x676bc10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0195.516] wcscat (in: _Dest=0x676bc10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" [0196.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676bc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0196.229] FindNextFileW (in: hFindFile=0x66d2da0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.229] FindClose (in: hFindFile=0x66d2da0 | out: hFindFile=0x66d2da0) returned 1 [0196.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e50b0) returned 1 [0196.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67683e0) returned 1 [0196.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756bc0) returned 1 Thread: id = 6917 os_tid = 0x3c8 [0195.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67684f8 [0195.517] wcscpy (in: _Dest=0x67684f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0195.517] wcscat (in: _Dest=0x67684f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0195.517] wcscat (in: _Dest=0x67684f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*" [0195.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4e48 [0195.517] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*", lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d60 [0195.517] wcscmp (_String1=".", _String2=".") returned 0 [0195.517] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.517] wcscmp (_String1="..", _String2=".") returned 1 [0195.517] wcscmp (_String1="..", _String2="..") returned 0 [0195.517] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.517] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.517] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676bd38 [0195.518] wcscpy (in: _Dest=0x676bd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0195.518] wcscat (in: _Dest=0x676bd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0195.518] wcscat (in: _Dest=0x676bd38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" [0196.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676bd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0196.231] FindNextFileW (in: hFindFile=0x66d2d60, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.231] FindClose (in: hFindFile=0x66d2d60 | out: hFindFile=0x66d2d60) returned 1 [0196.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4e48) returned 1 [0196.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67684f8) returned 1 [0196.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6756ab8) returned 1 Thread: id = 6918 os_tid = 0x11ac [0195.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768610 [0195.518] wcscpy (in: _Dest=0x6768610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0195.518] wcscat (in: _Dest=0x6768610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0195.518] wcscat (in: _Dest=0x6768610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*" [0195.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4710 [0195.518] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*", lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2d20 [0195.519] wcscmp (_String1=".", _String2=".") returned 0 [0195.519] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.519] wcscmp (_String1="..", _String2=".") returned 1 [0195.519] wcscmp (_String1="..", _String2="..") returned 0 [0195.519] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.519] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.519] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676be60 [0195.519] wcscpy (in: _Dest=0x676be60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0195.519] wcscat (in: _Dest=0x676be60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0195.519] wcscat (in: _Dest=0x676be60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" [0196.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676be60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0196.233] FindNextFileW (in: hFindFile=0x66d2d20, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.233] FindClose (in: hFindFile=0x66d2d20 | out: hFindFile=0x66d2d20) returned 1 [0196.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4710) returned 1 [0196.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768610) returned 1 [0196.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758690) returned 1 Thread: id = 6919 os_tid = 0x13c4 [0195.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768728 [0195.519] wcscpy (in: _Dest=0x6768728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0195.519] wcscat (in: _Dest=0x6768728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0195.519] wcscat (in: _Dest=0x6768728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*" [0195.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e44a8 [0195.519] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*", lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ce0 [0195.520] wcscmp (_String1=".", _String2=".") returned 0 [0195.520] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.520] wcscmp (_String1="..", _String2=".") returned 1 [0195.520] wcscmp (_String1="..", _String2="..") returned 0 [0195.520] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.520] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.520] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676bf88 [0195.520] wcscpy (in: _Dest=0x676bf88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0195.520] wcscat (in: _Dest=0x676bf88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0195.520] wcscat (in: _Dest=0x676bf88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" [0196.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676bf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0196.235] FindNextFileW (in: hFindFile=0x66d2ce0, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.235] FindClose (in: hFindFile=0x66d2ce0 | out: hFindFile=0x66d2ce0) returned 1 [0196.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e44a8) returned 1 [0196.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768728) returned 1 [0196.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67588a0) returned 1 Thread: id = 6920 os_tid = 0x1754 [0195.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768840 [0195.521] wcscpy (in: _Dest=0x6768840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0195.521] wcscat (in: _Dest=0x6768840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0195.521] wcscat (in: _Dest=0x6768840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*" [0195.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3fd8 [0195.521] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*", lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ca0 [0195.521] wcscmp (_String1=".", _String2=".") returned 0 [0195.521] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.521] wcscmp (_String1="..", _String2=".") returned 1 [0195.521] wcscmp (_String1="..", _String2="..") returned 0 [0195.521] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.521] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.521] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c0b0 [0195.521] wcscpy (in: _Dest=0x676c0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0195.522] wcscat (in: _Dest=0x676c0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0195.522] wcscat (in: _Dest=0x676c0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" [0196.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0196.237] FindNextFileW (in: hFindFile=0x66d2ca0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.237] FindClose (in: hFindFile=0x66d2ca0 | out: hFindFile=0x66d2ca0) returned 1 [0196.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3fd8) returned 1 [0196.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768840) returned 1 [0196.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758798) returned 1 Thread: id = 6921 os_tid = 0x1410 [0195.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768958 [0195.522] wcscpy (in: _Dest=0x6768958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0195.522] wcscat (in: _Dest=0x6768958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0195.522] wcscat (in: _Dest=0x6768958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*" [0195.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3b08 [0195.522] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*", lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d29e0 [0195.522] wcscmp (_String1=".", _String2=".") returned 0 [0195.522] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.522] wcscmp (_String1="..", _String2=".") returned 1 [0195.522] wcscmp (_String1="..", _String2="..") returned 0 [0195.523] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.523] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.523] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c1d8 [0195.523] wcscpy (in: _Dest=0x676c1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0195.523] wcscat (in: _Dest=0x676c1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0195.523] wcscat (in: _Dest=0x676c1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" [0196.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0196.239] FindNextFileW (in: hFindFile=0x66d29e0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.239] FindClose (in: hFindFile=0x66d29e0 | out: hFindFile=0x66d29e0) returned 1 [0196.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3b08) returned 1 [0196.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768958) returned 1 [0196.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758588) returned 1 Thread: id = 6922 os_tid = 0x1414 [0195.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752958 [0195.525] wcscpy (in: _Dest=0x6752958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0195.525] wcscat (in: _Dest=0x6752958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0195.525] wcscat (in: _Dest=0x6752958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*" [0195.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3638 [0195.525] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*", lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a20 [0195.525] wcscmp (_String1=".", _String2=".") returned 0 [0195.525] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.525] wcscmp (_String1="..", _String2=".") returned 1 [0195.525] wcscmp (_String1="..", _String2="..") returned 0 [0195.525] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.525] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.525] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c300 [0195.525] wcscpy (in: _Dest=0x676c300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0195.526] wcscat (in: _Dest=0x676c300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0195.526] wcscat (in: _Dest=0x676c300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" [0196.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0196.241] FindNextFileW (in: hFindFile=0x66d2a20, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.241] FindClose (in: hFindFile=0x66d2a20 | out: hFindFile=0x66d2a20) returned 1 [0196.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3638) returned 1 [0196.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0196.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753508) returned 1 Thread: id = 6923 os_tid = 0x1418 [0195.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6750ce8 [0195.526] wcscpy (in: _Dest=0x6750ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0195.526] wcscat (in: _Dest=0x6750ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0195.526] wcscat (in: _Dest=0x6750ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*" [0195.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4240 [0195.526] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*", lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f20 [0195.527] wcscmp (_String1=".", _String2=".") returned 0 [0195.527] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.527] wcscmp (_String1="..", _String2=".") returned 1 [0195.527] wcscmp (_String1="..", _String2="..") returned 0 [0195.527] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.527] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.527] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c428 [0195.527] wcscpy (in: _Dest=0x676c428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0195.527] wcscat (in: _Dest=0x676c428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0195.527] wcscat (in: _Dest=0x676c428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" [0196.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0196.244] FindNextFileW (in: hFindFile=0x66d2f20, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.244] FindClose (in: hFindFile=0x66d2f20 | out: hFindFile=0x66d2f20) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4240) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0196.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754798) returned 1 Thread: id = 6924 os_tid = 0x380 [0195.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67523e0 [0195.529] wcscpy (in: _Dest=0x67523e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0195.529] wcscat (in: _Dest=0x67523e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0195.529] wcscat (in: _Dest=0x67523e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*" [0195.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3d70 [0195.529] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*", lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d23e0 [0195.530] wcscmp (_String1=".", _String2=".") returned 0 [0195.530] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.530] wcscmp (_String1="..", _String2=".") returned 1 [0195.530] wcscmp (_String1="..", _String2="..") returned 0 [0195.530] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.530] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.530] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c550 [0195.530] wcscpy (in: _Dest=0x676c550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0195.530] wcscat (in: _Dest=0x676c550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0195.530] wcscat (in: _Dest=0x676c550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" [0196.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0196.294] FindNextFileW (in: hFindFile=0x66d23e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.294] FindClose (in: hFindFile=0x66d23e0 | out: hFindFile=0x66d23e0) returned 1 [0196.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3d70) returned 1 [0196.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0196.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753400) returned 1 Thread: id = 6925 os_tid = 0x1420 [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x67524f8 [0195.531] wcscpy (in: _Dest=0x67524f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0195.531] wcscat (in: _Dest=0x67524f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0195.531] wcscat (in: _Dest=0x67524f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*" [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e38a0 [0195.531] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2a60 [0195.531] wcscmp (_String1=".", _String2=".") returned 0 [0195.531] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.532] wcscmp (_String1="..", _String2=".") returned 1 [0195.532] wcscmp (_String1="..", _String2="..") returned 0 [0195.532] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.532] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.532] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c678 [0195.532] wcscpy (in: _Dest=0x676c678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0195.532] wcscat (in: _Dest=0x676c678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0195.532] wcscat (in: _Dest=0x676c678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" [0196.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0196.297] FindNextFileW (in: hFindFile=0x66d2a60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.297] FindClose (in: hFindFile=0x66d2a60 | out: hFindFile=0x66d2a60) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e38a0) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 [0196.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 Thread: id = 6926 os_tid = 0xb00 [0195.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6751d50 [0195.532] wcscpy (in: _Dest=0x6751d50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0195.532] wcscat (in: _Dest=0x6751d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0195.532] wcscat (in: _Dest=0x6751d50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*" [0195.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e33d0 [0195.532] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2aa0 [0195.533] wcscmp (_String1=".", _String2=".") returned 0 [0195.533] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.533] wcscmp (_String1="..", _String2=".") returned 1 [0195.533] wcscmp (_String1="..", _String2="..") returned 0 [0195.533] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.533] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.533] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c7a0 [0195.533] wcscpy (in: _Dest=0x676c7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0195.533] wcscat (in: _Dest=0x676c7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0195.533] wcscat (in: _Dest=0x676c7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" [0196.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0196.299] FindNextFileW (in: hFindFile=0x66d2aa0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.299] FindClose (in: hFindFile=0x66d2aa0 | out: hFindFile=0x66d2aa0) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e33d0) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 Thread: id = 6927 os_tid = 0x1c70 [0195.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751e68 [0195.535] wcscpy (in: _Dest=0x6751e68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0195.535] wcscat (in: _Dest=0x6751e68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0195.535] wcscat (in: _Dest=0x6751e68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*" [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3168 [0195.536] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*", lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2ae0 [0195.536] wcscmp (_String1=".", _String2=".") returned 0 [0195.536] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.536] wcscmp (_String1="..", _String2=".") returned 1 [0195.536] wcscmp (_String1="..", _String2="..") returned 0 [0195.536] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.536] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.536] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x676c8c8 [0195.536] wcscpy (in: _Dest=0x676c8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0195.536] wcscat (in: _Dest=0x676c8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0195.536] wcscat (in: _Dest=0x676c8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" [0196.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676c8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0196.301] FindNextFileW (in: hFindFile=0x66d2ae0, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.301] FindClose (in: hFindFile=0x66d2ae0 | out: hFindFile=0x66d2ae0) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3168) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0196.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754690) returned 1 Thread: id = 6928 os_tid = 0x1c7c [0195.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751030 [0195.537] wcscpy (in: _Dest=0x6751030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0195.537] wcscat (in: _Dest=0x6751030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0195.537] wcscat (in: _Dest=0x6751030, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*" [0195.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2f00 [0195.537] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*", lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b20 [0195.537] wcscmp (_String1=".", _String2=".") returned 0 [0195.537] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.537] wcscmp (_String1="..", _String2=".") returned 1 [0195.537] wcscmp (_String1="..", _String2="..") returned 0 [0195.537] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.538] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.538] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3f22ea0 [0195.538] wcscpy (in: _Dest=0x3f22ea0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0195.538] wcscat (in: _Dest=0x3f22ea0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0195.538] wcscat (in: _Dest=0x3f22ea0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" [0196.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0196.303] FindNextFileW (in: hFindFile=0x66d2b20, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.303] FindClose (in: hFindFile=0x66d2b20 | out: hFindFile=0x66d2b20) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2f00) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0196.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752fe0) returned 1 Thread: id = 6929 os_tid = 0xb24 [0195.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751148 [0195.538] wcscpy (in: _Dest=0x6751148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0195.538] wcscat (in: _Dest=0x6751148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0195.538] wcscat (in: _Dest=0x6751148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*" [0195.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4978 [0195.538] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*", lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2b60 [0195.539] wcscmp (_String1=".", _String2=".") returned 0 [0195.539] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.539] wcscmp (_String1="..", _String2=".") returned 1 [0195.539] wcscmp (_String1="..", _String2="..") returned 0 [0195.539] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.539] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.539] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3f22fc8 [0195.539] wcscpy (in: _Dest=0x3f22fc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0195.539] wcscat (in: _Dest=0x3f22fc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0195.539] wcscat (in: _Dest=0x3f22fc8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" [0196.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3f22fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0196.305] FindNextFileW (in: hFindFile=0x66d2b60, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.305] FindClose (in: hFindFile=0x66d2b60 | out: hFindFile=0x66d2b60) returned 1 [0196.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4978) returned 1 [0196.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0196.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754480) returned 1 Thread: id = 6930 os_tid = 0xebc [0196.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6768840 [0196.591] wcscpy (in: _Dest=0x6768840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0196.591] wcscat (in: _Dest=0x6768840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0196.591] wcscat (in: _Dest=0x6768840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*" [0196.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0196.591] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0196.591] wcscmp (_String1=".", _String2=".") returned 0 [0196.591] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.591] wcscmp (_String1="..", _String2=".") returned 1 [0196.591] wcscmp (_String1="..", _String2="..") returned 0 [0196.591] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.591] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.591] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67713f8 [0196.592] wcscpy (in: _Dest=0x67713f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0196.592] wcscat (in: _Dest=0x67713f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0196.592] wcscat (in: _Dest=0x67713f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" [0196.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67713f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0196.965] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.965] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0196.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0196.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768840) returned 1 [0196.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752ed8) returned 1 Thread: id = 6931 os_tid = 0x1d78 [0196.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 0x20 [0204.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0204.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.176] GetLastError () returned 0x5 [0204.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0204.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2a40) returned 1 Thread: id = 6932 os_tid = 0x1d7c [0196.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0196.595] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0196.595] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0196.595] wcscat (in: _Dest=0x35aa08, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*" [0196.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb6a8 [0196.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0201.547] wcscmp (_String1=".", _String2=".") returned 0 [0201.547] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.547] wcscmp (_String1="..", _String2=".") returned 1 [0201.547] wcscmp (_String1="..", _String2="..") returned 0 [0201.547] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0201.547] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0201.547] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0201.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0201.547] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0201.547] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0201.547] wcscat (in: _Dest=0x332da8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" [0201.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0201.814] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.814] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.814] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333168 [0201.814] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0201.814] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0201.814] wcscat (in: _Dest=0x333168, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0201.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0201.816] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.816] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.816] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333b28 [0201.816] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0201.816] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0201.816] wcscat (in: _Dest=0x333b28, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" [0201.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0201.817] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68bb6a8 | out: lpFindFileData=0x68bb6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.817] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb6a8) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e030) returned 1 Thread: id = 6933 os_tid = 0x1d80 [0196.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 0x20 [0204.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0204.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.179] GetLastError () returned 0x5 [0204.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0204.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c4d8) returned 1 Thread: id = 6934 os_tid = 0x1d84 [0196.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 0x20 [0204.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0204.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.125] GetLastError () returned 0x5 [0204.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0204.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee25d0) returned 1 Thread: id = 6935 os_tid = 0x1d88 [0196.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 0x20 [0204.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0204.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.178] GetLastError () returned 0x5 [0204.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0204.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2968) returned 1 Thread: id = 6936 os_tid = 0x1d8c [0196.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif")) returned 0x20 [0204.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0204.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.181] GetLastError () returned 0x5 [0204.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0204.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2ad8) returned 1 Thread: id = 6937 os_tid = 0x1d90 [0196.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif")) returned 0x20 [0204.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0204.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.133] GetLastError () returned 0x5 [0204.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0204.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 6938 os_tid = 0x1d9c [0196.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif")) returned 0x20 [0204.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0204.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.132] GetLastError () returned 0x5 [0204.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0204.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2b90) returned 1 Thread: id = 6939 os_tid = 0x1ccc [0196.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif")) returned 0x20 [0204.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0204.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.131] GetLastError () returned 0x5 [0204.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0204.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b238) returned 1 Thread: id = 6940 os_tid = 0x1da4 [0196.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif")) returned 0x20 [0204.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0204.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.130] GetLastError () returned 0x5 [0204.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0204.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b2f8) returned 1 Thread: id = 6941 os_tid = 0x1da8 [0196.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0196.598] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0203.646] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1320 [0203.646] GetFileSizeEx (in: hFile=0x1320, lpFileSize=0x9f6fd64 | out: lpFileSize=0x9f6fd64*=285) returned 1 [0203.646] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.646] ReadFile (in: hFile=0x1320, lpBuffer=0x9f6fd40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f6fd50, lpOverlapped=0x0 | out: lpBuffer=0x9f6fd40*, lpNumberOfBytesRead=0x9f6fd50*=0x4, lpOverlapped=0x0) returned 1 [0203.653] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4588 [0203.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0203.653] NtQuerySystemTime (in: CurrentTime=0x9f6fcd8 | out: CurrentTime=0x9f6fcd8*=132482711121372000) returned 0x0 [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x7be4046c [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0xc8f2722 [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x70dda082 [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x14858eae [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x4036555f [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x596dd17d [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x63c3c9f0 [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x19c0af13 [0203.653] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x7e6bf23a [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x6b58a48d [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x4265f50e [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x750e840 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x10589bef [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x13e9123 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x3ea521a3 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x17dd9849 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x2669fae9 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x3d793463 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x7f5a59dd [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x43e73d7d [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x1d7ae59f [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x2d7a50c5 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x22490cb [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x106ab690 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x7647d285 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x1c68f79e [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x77083a70 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x1750b495 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x3a0a4e4 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x1a3082ae [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x30caac88 [0203.654] RtlRandomEx (in: Seed=0x9f6fcd0 | out: Seed=0x9f6fcd0) returned 0x48b6ab8d [0203.662] ReadFile (in: hFile=0x1320, lpBuffer=0x6a32d48, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0x9f6fccc, lpOverlapped=0x0 | out: lpBuffer=0x6a32d48*, lpNumberOfBytesRead=0x9f6fccc*=0x11d, lpOverlapped=0x0) returned 1 [0203.662] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.662] WriteFile (in: hFile=0x1320, lpBuffer=0x6a36950*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x9f6fcd0, lpOverlapped=0x0 | out: lpBuffer=0x6a36950*, lpNumberOfBytesWritten=0x9f6fcd0*=0x11d, lpOverlapped=0x0) returned 1 [0206.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea9c0 [0206.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea9e8 [0206.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea9e8) returned 1 [0206.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a36950) returned 1 [0206.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a32d48) returned 1 [0206.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0206.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2d38) returned 1 [0206.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28958 [0206.133] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.133] WriteFile (in: hFile=0x1320, lpBuffer=0x675d148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f6fd58, lpOverlapped=0x0 | out: lpBuffer=0x675d148*, lpNumberOfBytesWritten=0x9f6fd58*=0x10c, lpOverlapped=0x0) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d148) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28988) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea9e8) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28958) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea9c0) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4588) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3778) returned 1 [0206.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11d0) returned 1 [0206.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67681e0 [0206.511] wcscpy (in: _Dest=0x67681e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" [0206.511] wcscat (in: _Dest=0x67681e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.ac3a86" [0206.511] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0x9f6fcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785a18 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785a18) returned 1 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6826a30) returned 1 [0208.947] NtQueryInformationFile (in: FileHandle=0x1320, IoStatusBlock=0x9f6fca8, FileInformation=0x9f6fcb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f6fca8, FileInformation=0x9f6fcb0) returned 0x0 [0208.947] NtSetInformationFile (FileHandle=0x1320, IoStatusBlock=0x9f6fca8, FileInformation=0x9f6fcb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67681e0) returned 1 [0209.269] FlushFileBuffers (hFile=0x1320) returned 1 [0209.285] CloseHandle (hObject=0x1320) returned 1 [0209.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eade70 [0209.561] wcscpy (in: _Dest=0x12eade70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0209.561] wcscat (in: _Dest=0x12eade70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\AC3A86-Readme.txt" [0209.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0209.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.088] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9f6fcec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9f6fcec*=0x8b9, lpOverlapped=0x0) returned 1 [0210.090] CloseHandle (hObject=0x1bf8) returned 1 [0210.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eade70) returned 1 [0210.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55a90) returned 1 Thread: id = 6942 os_tid = 0x1dac [0196.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6768728 [0196.598] wcscpy (in: _Dest=0x6768728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0196.598] wcscat (in: _Dest=0x6768728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0196.598] wcscat (in: _Dest=0x6768728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*" [0196.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0196.598] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0196.599] wcscmp (_String1=".", _String2=".") returned 0 [0196.599] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.599] wcscmp (_String1="..", _String2=".") returned 1 [0196.599] wcscmp (_String1="..", _String2="..") returned 0 [0196.599] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.599] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.599] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6771520 [0196.599] wcscpy (in: _Dest=0x6771520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0196.599] wcscat (in: _Dest=0x6771520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0196.599] wcscat (in: _Dest=0x6771520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" [0196.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6771520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0196.967] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0196.967] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0196.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0196.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768728) returned 1 [0196.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c34f8) returned 1 Thread: id = 6943 os_tid = 0x1db0 [0196.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0200.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0200.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.568] GetLastError () returned 0x5 [0200.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0200.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8e08) returned 1 Thread: id = 6944 os_tid = 0x1944 [0196.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0200.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0200.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.570] GetLastError () returned 0x5 [0200.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0200.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8d18) returned 1 Thread: id = 6945 os_tid = 0x1cd0 [0196.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0200.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.571] GetLastError () returned 0x5 [0200.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 Thread: id = 6946 os_tid = 0x1678 [0196.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0200.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.573] GetLastError () returned 0x5 [0200.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8778) returned 1 Thread: id = 6947 os_tid = 0x1cd4 [0196.600] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 0x2020 [0196.601] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.663] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2180 [0203.663] GetFileSizeEx (in: hFile=0x2180, lpFileSize=0xce7f8ec | out: lpFileSize=0xce7f8ec*=200) returned 1 [0203.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b10 [0203.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0203.664] NtQuerySystemTime (in: CurrentTime=0xce7f860 | out: CurrentTime=0xce7f860*=132482711121372000) returned 0x0 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x6327efcf [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x2a771345 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0xf59e9c5 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x59839225 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x387b814e [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x5edea772 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x7c4fab42 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x3d2382e3 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x32334079 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x4fca74c4 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x4f8aa182 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x67e029f7 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x140ee44e [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x2ef33259 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x757fa80b [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x3da40d23 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x2027b56e [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x48b6ab8d [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x1750b495 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x31dd8ef9 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x730c0bef [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x49f7b01a [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x9e96a4 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x7d654874 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x11cbf134 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x7e6bf23a [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x17da2596 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x3d2382e3 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x347407b1 [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x132fb44b [0203.664] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0xf0b4a0 [0203.665] RtlRandomEx (in: Seed=0xce7f858 | out: Seed=0xce7f858) returned 0x750e840 [0203.673] ReadFile (in: hFile=0x2180, lpBuffer=0x6a3a558, nNumberOfBytesToRead=0xc8, lpNumberOfBytesRead=0xce7f854, lpOverlapped=0x0 | out: lpBuffer=0x6a3a558*, lpNumberOfBytesRead=0xce7f854*=0xc8, lpOverlapped=0x0) returned 1 [0203.675] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.675] WriteFile (in: hFile=0x2180, lpBuffer=0x6a3e160*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0xce7f858, lpOverlapped=0x0 | out: lpBuffer=0x6a3e160*, lpNumberOfBytesWritten=0xce7f858*=0xc8, lpOverlapped=0x0) returned 1 [0206.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa10 [0206.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa38 [0206.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0206.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3e160) returned 1 [0206.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3a558) returned 1 [0206.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0206.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2d80) returned 1 [0206.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f289b8 [0206.135] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.136] WriteFile (in: hFile=0x2180, lpBuffer=0x675d030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xce7f8e0, lpOverlapped=0x0 | out: lpBuffer=0x675d030*, lpNumberOfBytesWritten=0xce7f8e0*=0x10c, lpOverlapped=0x0) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d030) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f289e8) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f289b8) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa10) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b10) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1ba8) returned 1 [0206.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a10) returned 1 [0206.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6768318 [0206.513] wcscpy (in: _Dest=0x6768318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" [0206.514] wcscat (in: _Dest=0x6768318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.ac3a86" [0206.514] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xce7f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785b60 [0208.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785b60) returned 1 [0208.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6826808) returned 1 [0208.949] NtQueryInformationFile (in: FileHandle=0x2180, IoStatusBlock=0xce7f830, FileInformation=0xce7f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xce7f830, FileInformation=0xce7f838) returned 0x0 [0208.949] NtSetInformationFile (FileHandle=0x2180, IoStatusBlock=0xce7f830, FileInformation=0xce7f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768318) returned 1 [0209.273] FlushFileBuffers (hFile=0x2180) returned 1 [0209.289] CloseHandle (hObject=0x2180) returned 1 [0209.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x677a1d8 [0209.563] wcscpy (in: _Dest=0x677a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0209.563] wcscat (in: _Dest=0x677a1d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\AC3A86-Readme.txt" [0209.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0209.564] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.084] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xce7f874, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xce7f874*=0x8b9, lpOverlapped=0x0) returned 1 [0210.086] CloseHandle (hObject=0x1bf8) returned 1 [0210.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a1d8) returned 1 [0210.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762be0) returned 1 Thread: id = 6948 os_tid = 0xa00 [0196.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af290 [0196.601] wcscpy (in: _Dest=0x68af290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0196.601] wcscat (in: _Dest=0x68af290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0196.602] wcscat (in: _Dest=0x68af290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*" [0196.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0196.602] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0197.222] wcscmp (_String1=".", _String2=".") returned 0 [0197.222] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.222] wcscmp (_String1="..", _String2=".") returned 1 [0197.222] wcscmp (_String1="..", _String2="..") returned 0 [0197.222] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.222] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.222] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67761d8 [0197.222] wcscpy (in: _Dest=0x67761d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0197.222] wcscat (in: _Dest=0x67761d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0197.223] wcscat (in: _Dest=0x67761d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" [0199.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67761d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0199.269] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.269] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0199.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0199.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af290) returned 1 [0199.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754378) returned 1 Thread: id = 6949 os_tid = 0x80c [0196.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af398 [0196.602] wcscpy (in: _Dest=0x68af398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0196.602] wcscat (in: _Dest=0x68af398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0196.602] wcscat (in: _Dest=0x68af398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*" [0196.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0196.602] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0197.223] wcscmp (_String1=".", _String2=".") returned 0 [0197.223] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.223] wcscmp (_String1="..", _String2=".") returned 1 [0197.223] wcscmp (_String1="..", _String2="..") returned 0 [0197.223] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.223] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.223] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6776300 [0197.223] wcscpy (in: _Dest=0x6776300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0197.223] wcscat (in: _Dest=0x6776300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0197.223] wcscat (in: _Dest=0x6776300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" [0199.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6776300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0199.271] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.271] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0199.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0199.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af398) returned 1 [0199.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac840) returned 1 Thread: id = 6950 os_tid = 0x1640 [0196.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af4a0 [0196.603] wcscpy (in: _Dest=0x68af4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0196.603] wcscat (in: _Dest=0x68af4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0196.603] wcscat (in: _Dest=0x68af4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*" [0196.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0196.603] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0197.224] wcscmp (_String1=".", _String2=".") returned 0 [0197.224] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.224] wcscmp (_String1="..", _String2=".") returned 1 [0197.224] wcscmp (_String1="..", _String2="..") returned 0 [0197.224] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.224] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.224] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6776428 [0197.224] wcscpy (in: _Dest=0x6776428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0197.224] wcscat (in: _Dest=0x6776428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0197.224] wcscat (in: _Dest=0x6776428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" [0199.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6776428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0199.274] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.274] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0199.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0199.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af4a0) returned 1 [0199.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad8c0) returned 1 Thread: id = 6951 os_tid = 0x1dd0 [0196.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af6b0 [0196.603] wcscpy (in: _Dest=0x68af6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0196.604] wcscat (in: _Dest=0x68af6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0196.604] wcscat (in: _Dest=0x68af6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*" [0196.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0196.604] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0197.224] wcscmp (_String1=".", _String2=".") returned 0 [0197.224] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.224] wcscmp (_String1="..", _String2=".") returned 1 [0197.224] wcscmp (_String1="..", _String2="..") returned 0 [0197.224] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.224] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.224] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6776550 [0197.225] wcscpy (in: _Dest=0x6776550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0197.225] wcscat (in: _Dest=0x6776550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0197.225] wcscat (in: _Dest=0x6776550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" [0199.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6776550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0199.276] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.276] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0199.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0199.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af6b0) returned 1 [0199.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acd68) returned 1 Thread: id = 6952 os_tid = 0x1644 [0196.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af8c0 [0196.604] wcscpy (in: _Dest=0x68af8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0196.604] wcscat (in: _Dest=0x68af8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0196.604] wcscat (in: _Dest=0x68af8c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*" [0196.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4978 [0196.604] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0197.225] wcscmp (_String1=".", _String2=".") returned 0 [0197.225] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.225] wcscmp (_String1="..", _String2=".") returned 1 [0197.225] wcscmp (_String1="..", _String2="..") returned 0 [0197.225] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.225] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.225] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6776678 [0197.225] wcscpy (in: _Dest=0x6776678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0197.225] wcscat (in: _Dest=0x6776678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0197.225] wcscat (in: _Dest=0x6776678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" [0199.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6776678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0199.278] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.278] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0199.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4978) returned 1 [0199.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af8c0) returned 1 [0199.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad5a8) returned 1 Thread: id = 6953 os_tid = 0x1654 [0196.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aec60 [0196.605] wcscpy (in: _Dest=0x68aec60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0196.605] wcscat (in: _Dest=0x68aec60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0196.605] wcscat (in: _Dest=0x68aec60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*" [0196.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2f00 [0196.605] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0197.226] wcscmp (_String1=".", _String2=".") returned 0 [0197.226] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.226] wcscmp (_String1="..", _String2=".") returned 1 [0197.226] wcscmp (_String1="..", _String2="..") returned 0 [0197.226] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.226] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.226] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67767a0 [0197.226] wcscpy (in: _Dest=0x67767a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0197.226] wcscat (in: _Dest=0x67767a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0197.226] wcscat (in: _Dest=0x67767a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" [0199.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67767a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15bc [0199.279] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.280] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2f00) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aec60) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acf78) returned 1 Thread: id = 6954 os_tid = 0xa74 [0196.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6768610 [0196.606] wcscpy (in: _Dest=0x6768610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0196.606] wcscat (in: _Dest=0x6768610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0196.606] wcscat (in: _Dest=0x6768610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*" [0196.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3168 [0196.606] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0197.226] wcscmp (_String1=".", _String2=".") returned 0 [0197.226] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.226] wcscmp (_String1="..", _String2=".") returned 1 [0197.227] wcscmp (_String1="..", _String2="..") returned 0 [0197.227] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.227] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.227] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67768c8 [0197.227] wcscpy (in: _Dest=0x67768c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0197.227] wcscat (in: _Dest=0x67768c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0197.227] wcscat (in: _Dest=0x67768c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" [0199.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67768c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0199.281] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.282] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3168) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768610) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad6b0) returned 1 Thread: id = 6955 os_tid = 0x1cd8 [0196.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67684f8 [0196.606] wcscpy (in: _Dest=0x67684f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0196.606] wcscat (in: _Dest=0x67684f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0196.606] wcscat (in: _Dest=0x67684f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*" [0196.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e33d0 [0196.606] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0197.227] wcscmp (_String1=".", _String2=".") returned 0 [0197.227] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.227] wcscmp (_String1="..", _String2=".") returned 1 [0197.227] wcscmp (_String1="..", _String2="..") returned 0 [0197.227] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.227] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.227] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6778ab8 [0197.231] wcscpy (in: _Dest=0x6778ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0197.231] wcscat (in: _Dest=0x6778ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0197.231] wcscat (in: _Dest=0x6778ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" [0199.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0199.283] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.284] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0199.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e33d0) returned 1 [0199.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67684f8) returned 1 [0199.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad7b8) returned 1 Thread: id = 6956 os_tid = 0xa84 [0196.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aee70 [0196.607] wcscpy (in: _Dest=0x68aee70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0196.607] wcscat (in: _Dest=0x68aee70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0196.607] wcscat (in: _Dest=0x68aee70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*" [0196.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e38a0 [0196.607] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d2f60 [0196.923] wcscmp (_String1=".", _String2=".") returned 0 [0196.923] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.923] wcscmp (_String1="..", _String2=".") returned 1 [0196.923] wcscmp (_String1="..", _String2="..") returned 0 [0196.923] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.923] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.923] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67752d0 [0196.924] wcscpy (in: _Dest=0x67752d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0196.924] wcscat (in: _Dest=0x67752d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0196.924] wcscat (in: _Dest=0x67752d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" [0198.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67752d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0198.546] FindNextFileW (in: hFindFile=0x66d2f60, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.546] FindClose (in: hFindFile=0x66d2f60 | out: hFindFile=0x66d2f60) returned 1 [0198.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e38a0) returned 1 [0198.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aee70) returned 1 [0198.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acc60) returned 1 Thread: id = 6957 os_tid = 0xb08 [0196.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af080 [0196.608] wcscpy (in: _Dest=0x68af080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0196.608] wcscat (in: _Dest=0x68af080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0196.608] wcscat (in: _Dest=0x68af080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*" [0196.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3d70 [0196.608] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x66d27e0 [0196.924] wcscmp (_String1=".", _String2=".") returned 0 [0196.924] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.924] wcscmp (_String1="..", _String2=".") returned 1 [0196.924] wcscmp (_String1="..", _String2="..") returned 0 [0196.924] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0196.924] wcscmp (_String1="messages.json", _String2=".") returned 1 [0196.924] wcscmp (_String1="messages.json", _String2="..") returned 1 [0196.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67753f8 [0196.924] wcscpy (in: _Dest=0x67753f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0196.924] wcscat (in: _Dest=0x67753f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0196.925] wcscat (in: _Dest=0x67753f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" [0198.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67753f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0198.548] FindNextFileW (in: hFindFile=0x66d27e0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0198.548] FindClose (in: hFindFile=0x66d27e0 | out: hFindFile=0x66d27e0) returned 1 [0198.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3d70) returned 1 [0198.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af080) returned 1 [0198.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac108) returned 1 Thread: id = 6958 os_tid = 0x1044 [0196.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68afad0 [0196.608] wcscpy (in: _Dest=0x68afad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0196.608] wcscat (in: _Dest=0x68afad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0196.608] wcscat (in: _Dest=0x68afad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*" [0196.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4240 [0196.609] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f280 [0197.214] wcscmp (_String1=".", _String2=".") returned 0 [0197.214] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.214] wcscmp (_String1="..", _String2=".") returned 1 [0197.214] wcscmp (_String1="..", _String2="..") returned 0 [0197.214] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.214] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.214] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775648 [0197.214] wcscpy (in: _Dest=0x6775648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0197.215] wcscat (in: _Dest=0x6775648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0197.215] wcscat (in: _Dest=0x6775648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" [0200.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0200.467] FindNextFileW (in: hFindFile=0x3f1f280, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0200.467] FindClose (in: hFindFile=0x3f1f280 | out: hFindFile=0x3f1f280) returned 1 [0200.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4240) returned 1 [0200.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68afad0) returned 1 [0200.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ad4a0) returned 1 Thread: id = 6959 os_tid = 0x1658 [0196.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af9c8 [0196.609] wcscpy (in: _Dest=0x68af9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0196.609] wcscat (in: _Dest=0x68af9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0196.609] wcscat (in: _Dest=0x68af9c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*" [0196.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3638 [0196.609] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f140 [0197.215] wcscmp (_String1=".", _String2=".") returned 0 [0197.215] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.215] wcscmp (_String1="..", _String2=".") returned 1 [0197.215] wcscmp (_String1="..", _String2="..") returned 0 [0197.215] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.215] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.215] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775770 [0197.215] wcscpy (in: _Dest=0x6775770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0197.215] wcscat (in: _Dest=0x6775770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0197.215] wcscat (in: _Dest=0x6775770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" [0200.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0200.469] FindNextFileW (in: hFindFile=0x3f1f140, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0200.469] FindClose (in: hFindFile=0x3f1f140 | out: hFindFile=0x3f1f140) returned 1 [0200.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3638) returned 1 [0200.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af9c8) returned 1 [0200.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac000) returned 1 Thread: id = 6960 os_tid = 0x1cdc [0196.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af5a8 [0196.610] wcscpy (in: _Dest=0x68af5a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0196.610] wcscat (in: _Dest=0x68af5a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0196.610] wcscat (in: _Dest=0x68af5a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*" [0196.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3b08 [0196.610] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0197.216] wcscmp (_String1=".", _String2=".") returned 0 [0197.216] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.216] wcscmp (_String1="..", _String2=".") returned 1 [0197.216] wcscmp (_String1="..", _String2="..") returned 0 [0197.216] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.216] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.216] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775898 [0197.216] wcscpy (in: _Dest=0x6775898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0197.216] wcscat (in: _Dest=0x6775898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0197.216] wcscat (in: _Dest=0x6775898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" [0199.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0199.253] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.253] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0199.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3b08) returned 1 [0199.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af5a8) returned 1 [0199.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abef8) returned 1 Thread: id = 6961 os_tid = 0x1ce0 [0196.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d45608 [0196.610] wcscpy (in: _Dest=0x3d45608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0196.610] wcscat (in: _Dest=0x3d45608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0196.611] wcscat (in: _Dest=0x3d45608, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*" [0196.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3fd8 [0196.611] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0197.216] wcscmp (_String1=".", _String2=".") returned 0 [0197.216] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.216] wcscmp (_String1="..", _String2=".") returned 1 [0197.216] wcscmp (_String1="..", _String2="..") returned 0 [0197.217] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.217] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.217] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67759c0 [0197.217] wcscpy (in: _Dest=0x67759c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0197.217] wcscat (in: _Dest=0x67759c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0197.217] wcscat (in: _Dest=0x67759c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" [0199.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67759c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0199.255] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.255] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0199.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3fd8) returned 1 [0199.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45608) returned 1 [0199.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abdf0) returned 1 Thread: id = 6962 os_tid = 0x165c [0196.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44bb8 [0196.611] wcscpy (in: _Dest=0x3d44bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0196.611] wcscat (in: _Dest=0x3d44bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0196.611] wcscat (in: _Dest=0x3d44bb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*" [0196.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e44a8 [0196.611] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0197.218] wcscmp (_String1=".", _String2=".") returned 0 [0197.218] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.218] wcscmp (_String1="..", _String2=".") returned 1 [0197.218] wcscmp (_String1="..", _String2="..") returned 0 [0197.218] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.218] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.218] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775ae8 [0197.218] wcscpy (in: _Dest=0x6775ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0197.218] wcscat (in: _Dest=0x6775ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0197.218] wcscat (in: _Dest=0x6775ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" [0199.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0199.257] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.257] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0199.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e44a8) returned 1 [0199.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44bb8) returned 1 [0199.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68abce8) returned 1 Thread: id = 6963 os_tid = 0x1ce4 [0196.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44cc0 [0196.612] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0196.612] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0196.612] wcscat (in: _Dest=0x3d44cc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*" [0196.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4710 [0196.612] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0197.218] wcscmp (_String1=".", _String2=".") returned 0 [0197.218] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.218] wcscmp (_String1="..", _String2=".") returned 1 [0197.218] wcscmp (_String1="..", _String2="..") returned 0 [0197.218] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.219] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.219] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775c10 [0197.219] wcscpy (in: _Dest=0x6775c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0197.219] wcscat (in: _Dest=0x6775c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0197.219] wcscat (in: _Dest=0x6775c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" [0199.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0199.259] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.259] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0199.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4710) returned 1 [0199.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 [0199.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adad0) returned 1 Thread: id = 6964 os_tid = 0x1ce8 [0196.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44dc8 [0196.612] wcscpy (in: _Dest=0x3d44dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0196.613] wcscat (in: _Dest=0x3d44dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0196.613] wcscat (in: _Dest=0x3d44dc8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*" [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4e48 [0196.613] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0197.219] wcscmp (_String1=".", _String2=".") returned 0 [0197.219] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.219] wcscmp (_String1="..", _String2=".") returned 1 [0197.219] wcscmp (_String1="..", _String2="..") returned 0 [0197.219] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe642b020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.219] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.219] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775d38 [0197.219] wcscpy (in: _Dest=0x6775d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0197.219] wcscat (in: _Dest=0x6775d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0197.219] wcscat (in: _Dest=0x6775d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" [0199.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0199.261] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe642b020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.261] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0199.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4e48) returned 1 [0199.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44dc8) returned 1 [0199.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68acb58) returned 1 Thread: id = 6965 os_tid = 0x1cec [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3d44ed0 [0196.613] wcscpy (in: _Dest=0x3d44ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0196.613] wcscat (in: _Dest=0x3d44ed0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0196.613] wcscat (in: _Dest=0x3d44ed0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*" [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e50b0 [0196.613] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0197.220] wcscmp (_String1=".", _String2=".") returned 0 [0197.220] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.220] wcscmp (_String1="..", _String2=".") returned 1 [0197.220] wcscmp (_String1="..", _String2="..") returned 0 [0197.220] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6434c60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.220] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.220] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6775e60 [0197.220] wcscpy (in: _Dest=0x6775e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0197.220] wcscat (in: _Dest=0x6775e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0197.220] wcscat (in: _Dest=0x6775e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" [0199.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0199.263] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6434c60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.263] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0199.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e50b0) returned 1 [0199.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ed0) returned 1 [0199.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aca50) returned 1 Thread: id = 6966 os_tid = 0x1cf0 [0196.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67683e0 [0196.614] wcscpy (in: _Dest=0x67683e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0196.614] wcscat (in: _Dest=0x67683e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0196.614] wcscat (in: _Dest=0x67683e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*" [0196.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2560 [0196.614] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0197.220] wcscmp (_String1=".", _String2=".") returned 0 [0197.220] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.220] wcscmp (_String1="..", _String2=".") returned 1 [0197.221] wcscmp (_String1="..", _String2="..") returned 0 [0197.221] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe643e8a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.221] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.221] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6775f88 [0197.221] wcscpy (in: _Dest=0x6775f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0197.221] wcscat (in: _Dest=0x6775f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0197.221] wcscat (in: _Dest=0x6775f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" [0199.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6775f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0199.265] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe643e8a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.265] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0199.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2560) returned 1 [0199.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67683e0) returned 1 [0199.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac948) returned 1 Thread: id = 6967 os_tid = 0x1cf4 [0196.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67682c8 [0196.615] wcscpy (in: _Dest=0x67682c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0196.615] wcscat (in: _Dest=0x67682c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0196.615] wcscat (in: _Dest=0x67682c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*" [0196.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e22f8 [0196.615] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0197.221] wcscmp (_String1=".", _String2=".") returned 0 [0197.221] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.221] wcscmp (_String1="..", _String2=".") returned 1 [0197.221] wcscmp (_String1="..", _String2="..") returned 0 [0197.221] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64484e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.221] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.221] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67760b0 [0197.221] wcscpy (in: _Dest=0x67760b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0197.221] wcscat (in: _Dest=0x67760b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0197.222] wcscat (in: _Dest=0x67760b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" [0199.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67760b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0199.267] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64484e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.267] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0199.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e22f8) returned 1 [0199.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67682c8) returned 1 [0199.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac420) returned 1 Thread: id = 6968 os_tid = 0x1cf8 [0196.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 0x2020 [0196.616] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf7c [0203.675] GetFileSizeEx (in: hFile=0xf7c, lpFileSize=0xf0afddc | out: lpFileSize=0xf0afddc*=260) returned 1 [0203.675] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.676] ReadFile (in: hFile=0xf7c, lpBuffer=0xf0afdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf0afdc8, lpOverlapped=0x0 | out: lpBuffer=0xf0afdb8*, lpNumberOfBytesRead=0xf0afdc8*=0x4, lpOverlapped=0x0) returned 1 [0203.677] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2260 [0203.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0203.677] NtQuerySystemTime (in: CurrentTime=0xf0afd50 | out: CurrentTime=0xf0afd50*=132482711121528000) returned 0x0 [0203.677] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x26a5527b [0203.677] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x3d11a32f [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0xf0b4a0 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x71d05053 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x132fb44b [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0xa79ca5c [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x77b5219e [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x34bfb91d [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x31dd8ef9 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x342fb809 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x545839b2 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x7312328 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x46322675 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x3a3aa852 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0xdff8d86 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x25656876 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x79089867 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x2896cf84 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x66ad12fc [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x4fe5094 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x2efd2712 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x10794b80 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x1cf7302b [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x4a528c12 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x5f1ed3e1 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x34c2866d [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x11f0cc41 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x158fc6da [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x2f01e9d2 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x3fa90a19 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x56ddbd05 [0203.678] RtlRandomEx (in: Seed=0xf0afd48 | out: Seed=0xf0afd48) returned 0x5778b0c1 [0203.688] ReadFile (in: hFile=0xf7c, lpBuffer=0x6a41d68, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xf0afd44, lpOverlapped=0x0 | out: lpBuffer=0x6a41d68*, lpNumberOfBytesRead=0xf0afd44*=0x104, lpOverlapped=0x0) returned 1 [0203.688] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.689] WriteFile (in: hFile=0xf7c, lpBuffer=0x12f80060*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xf0afd48, lpOverlapped=0x0 | out: lpBuffer=0x12f80060*, lpNumberOfBytesWritten=0xf0afd48*=0x104, lpOverlapped=0x0) returned 1 [0206.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa60 [0206.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa88 [0206.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa88) returned 1 [0206.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f80060) returned 1 [0206.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a41d68) returned 1 [0206.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0206.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2dc8) returned 1 [0206.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28a18 [0206.138] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.138] WriteFile (in: hFile=0xf7c, lpBuffer=0x675cf18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf0afdd0, lpOverlapped=0x0 | out: lpBuffer=0x675cf18*, lpNumberOfBytesWritten=0xf0afdd0*=0x10c, lpOverlapped=0x0) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cf18) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28a48) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa88) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28a18) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa60) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2260) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2058) returned 1 [0206.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0206.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6768450 [0206.516] wcscpy (in: _Dest=0x6768450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" [0206.516] wcscat (in: _Dest=0x6768450, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.ac3a86" [0206.516] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xf0afd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785ca8 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785ca8) returned 1 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68265e0) returned 1 [0208.954] NtQueryInformationFile (in: FileHandle=0xf7c, IoStatusBlock=0xf0afd20, FileInformation=0xf0afd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf0afd20, FileInformation=0xf0afd28) returned 0x0 [0208.954] NtSetInformationFile (FileHandle=0xf7c, IoStatusBlock=0xf0afd20, FileInformation=0xf0afd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768450) returned 1 [0209.280] FlushFileBuffers (hFile=0xf7c) returned 1 [0209.292] CloseHandle (hObject=0xf7c) returned 1 [0209.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779770 [0209.566] wcscpy (in: _Dest=0x6779770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0209.566] wcscat (in: _Dest=0x6779770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\AC3A86-Readme.txt" [0209.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0209.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.093] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf0afd64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf0afd64*=0x8b9, lpOverlapped=0x0) returned 1 [0210.095] CloseHandle (hObject=0x1bf8) returned 1 [0210.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779770) returned 1 [0210.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754ab8) returned 1 Thread: id = 6969 os_tid = 0x1cfc [0196.616] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json")) returned 0x2020 [0196.617] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", dwFileAttributes=0x20) returned 1 [0203.571] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318 [0203.572] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0xdebf7a4 | out: lpFileSize=0xdebf7a4*=194) returned 1 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0203.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0203.572] NtQuerySystemTime (in: CurrentTime=0xdebf718 | out: CurrentTime=0xdebf718*=132482711120436000) returned 0x0 [0203.572] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x2c76f7f9 [0203.572] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x48fe96e6 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x72f6f1f2 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x1e6a1d45 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x4f56239c [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x48603318 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x7c2dff0c [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x6a1c4bd1 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x4fd7754a [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0xf55e754 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x4f0dda14 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x50e8f727 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x3e249763 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x5987c6ab [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x125d2745 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x4f441cd8 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x401b6dca [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x107e56b [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x62fc79f7 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x6bf5bbd9 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x69051634 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x3512035a [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x1863a245 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0xa3f6c58 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x697b5092 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x6cdfba61 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x68b8ca72 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x4f2782a7 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x766dd0f4 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x43cb98b8 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x65a6d337 [0203.573] RtlRandomEx (in: Seed=0xdebf710 | out: Seed=0xdebf710) returned 0x67e029f7 [0203.594] ReadFile (in: hFile=0x1318, lpBuffer=0x6a0d4f8, nNumberOfBytesToRead=0xc2, lpNumberOfBytesRead=0xdebf70c, lpOverlapped=0x0 | out: lpBuffer=0x6a0d4f8*, lpNumberOfBytesRead=0xdebf70c*=0xc2, lpOverlapped=0x0) returned 1 [0203.596] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.596] WriteFile (in: hFile=0x1318, lpBuffer=0x6a11100*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0xdebf710, lpOverlapped=0x0 | out: lpBuffer=0x6a11100*, lpNumberOfBytesWritten=0xdebf710*=0xc2, lpOverlapped=0x0) returned 1 [0206.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea830 [0206.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea858 [0206.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea858) returned 1 [0206.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a11100) returned 1 [0206.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a0d4f8) returned 1 [0206.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0206.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2bd0) returned 1 [0206.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28778 [0206.120] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.120] WriteFile (in: hFile=0x1318, lpBuffer=0x675e098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdebf798, lpOverlapped=0x0 | out: lpBuffer=0x675e098*, lpNumberOfBytesWritten=0xdebf798*=0x10c, lpOverlapped=0x0) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e098) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f287a8) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea858) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28778) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea830) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d80) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41f0) returned 1 [0206.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1e28) returned 1 [0206.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767bc8 [0206.482] wcscpy (in: _Dest=0x6767bc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" [0206.482] wcscat (in: _Dest=0x6767bc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.ac3a86" [0206.482] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.ac3a86", NtPathName=0xdebf710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785268 [0208.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785268) returned 1 [0208.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68274f8) returned 1 [0208.939] NtQueryInformationFile (in: FileHandle=0x1318, IoStatusBlock=0xdebf6e8, FileInformation=0xdebf6f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdebf6e8, FileInformation=0xdebf6f0) returned 0x0 [0208.939] NtSetInformationFile (FileHandle=0x1318, IoStatusBlock=0xdebf6e8, FileInformation=0xdebf6f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767bc8) returned 1 [0209.247] FlushFileBuffers (hFile=0x1318) returned 1 [0209.259] CloseHandle (hObject=0x1318) returned 1 [0209.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eadc20 [0209.547] wcscpy (in: _Dest=0x12eadc20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0209.547] wcscat (in: _Dest=0x12eadc20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\AC3A86-Readme.txt" [0209.548] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ac3a86-readme.txt")) returned 0xffffffff [0209.548] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.044] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdebf72c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdebf72c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.046] CloseHandle (hObject=0x1bf8) returned 1 [0210.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eadc20) returned 1 [0210.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e8c8) returned 1 Thread: id = 6970 os_tid = 0x1d00 [0196.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 0x2020 [0196.618] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", dwFileAttributes=0x20) returned 1 [0203.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a0 [0203.597] GetFileSizeEx (in: hFile=0x11a0, lpFileSize=0xf8af77c | out: lpFileSize=0xf8af77c*=196) returned 1 [0203.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1270 [0203.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0203.597] NtQuerySystemTime (in: CurrentTime=0xf8af6f0 | out: CurrentTime=0xf8af6f0*=132482711120748000) returned 0x0 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x35733ce7 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x44c410da [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x66a3d0ff [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0xda41d48 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x3474c09c [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0xcb0766e [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x693c6809 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x3efad323 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x7c3bccd5 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x2d1a81a1 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x3073b06a [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x264f9de5 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x6d35f888 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x77b5219e [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0xcad9465 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4e66e5a4 [0203.597] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x7106aa50 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0xa75f0b2 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4c8c5b5c [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4e66e5a4 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x40826097 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4528b513 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4dad4d87 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x70a9d6db [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x6e9a91b3 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x4dfe5f6a [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x3e7a48e3 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x70a33f2b [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x2be1fbc6 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x35f0c6e9 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x6bf17ec0 [0203.598] RtlRandomEx (in: Seed=0xf8af6e8 | out: Seed=0xf8af6e8) returned 0x43cb98b8 [0203.606] ReadFile (in: hFile=0x11a0, lpBuffer=0x6a14d08, nNumberOfBytesToRead=0xc4, lpNumberOfBytesRead=0xf8af6e4, lpOverlapped=0x0 | out: lpBuffer=0x6a14d08*, lpNumberOfBytesRead=0xf8af6e4*=0xc4, lpOverlapped=0x0) returned 1 [0203.608] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.608] WriteFile (in: hFile=0x11a0, lpBuffer=0x6a18910*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0xf8af6e8, lpOverlapped=0x0 | out: lpBuffer=0x6a18910*, lpNumberOfBytesWritten=0xf8af6e8*=0xc4, lpOverlapped=0x0) returned 1 [0206.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea880 [0206.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8a8 [0206.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8a8) returned 1 [0206.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a18910) returned 1 [0206.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a14d08) returned 1 [0206.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0206.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2c18) returned 1 [0206.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f287d8 [0206.123] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.123] WriteFile (in: hFile=0x11a0, lpBuffer=0x675df80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf8af770, lpOverlapped=0x0 | out: lpBuffer=0x675df80*, lpNumberOfBytesWritten=0xf8af770*=0x10c, lpOverlapped=0x0) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675df80) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28808) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8a8) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f287d8) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea880) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1270) returned 1 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ad8) returned 1 [0206.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1298) returned 1 [0206.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767d00 [0206.484] wcscpy (in: _Dest=0x6767d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" [0206.484] wcscat (in: _Dest=0x6767d00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.ac3a86" [0206.484] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.ac3a86", NtPathName=0xf8af6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6785120 [0208.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785120) returned 1 [0208.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68272d0) returned 1 [0208.940] NtQueryInformationFile (in: FileHandle=0x11a0, IoStatusBlock=0xf8af6c0, FileInformation=0xf8af6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf8af6c0, FileInformation=0xf8af6c8) returned 0x0 [0208.940] NtSetInformationFile (FileHandle=0x11a0, IoStatusBlock=0xf8af6c0, FileInformation=0xf8af6c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767d00) returned 1 [0209.251] FlushFileBuffers (hFile=0x11a0) returned 1 [0209.260] CloseHandle (hObject=0x11a0) returned 1 [0209.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eadd48 [0209.551] wcscpy (in: _Dest=0x12eadd48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0209.551] wcscat (in: _Dest=0x12eadd48, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\AC3A86-Readme.txt" [0209.551] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ac3a86-readme.txt")) returned 0xffffffff [0209.551] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.048] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf8af704, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf8af704*=0x8b9, lpOverlapped=0x0) returned 1 [0210.051] CloseHandle (hObject=0x1bf8) returned 1 [0210.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eadd48) returned 1 [0210.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e7a0) returned 1 Thread: id = 6971 os_tid = 0x1d04 [0196.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0196.618] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0203.689] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x237c [0203.689] GetFileSizeEx (in: hFile=0x237c, lpFileSize=0xc11fdec | out: lpFileSize=0xc11fdec*=170) returned 1 [0203.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3bb0 [0203.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0203.690] NtQuerySystemTime (in: CurrentTime=0xc11fd60 | out: CurrentTime=0xc11fd60*=132482711121684000) returned 0x0 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x7ba06b9f [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x106ab690 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x6bad8fe7 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x42a64d35 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x3eb467bb [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x74d9683b [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x52a95b34 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0xf14b6d8 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x60f1abe2 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x747d05e1 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x4d6651e3 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x5dd9f0b5 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x2ab758e2 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x1a3082ae [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x5c89f0e5 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x3d062eed [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x160992bf [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x9e96a4 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x692728e5 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x1b3f1f9b [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x3a70b982 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x46322675 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x3921c11e [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x470f1265 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x5778b0c1 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x4cff77d5 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x9b4c956 [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x34bfb91d [0203.690] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x596dd17d [0203.691] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x76aacd17 [0203.691] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x4c959de5 [0203.691] RtlRandomEx (in: Seed=0xc11fd58 | out: Seed=0xc11fd58) returned 0x54d4c4be [0203.698] ReadFile (in: hFile=0x237c, lpBuffer=0x12f83c68, nNumberOfBytesToRead=0xaa, lpNumberOfBytesRead=0xc11fd54, lpOverlapped=0x0 | out: lpBuffer=0x12f83c68*, lpNumberOfBytesRead=0xc11fd54*=0xaa, lpOverlapped=0x0) returned 1 [0203.700] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.701] WriteFile (in: hFile=0x237c, lpBuffer=0x12f87870*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0xc11fd58, lpOverlapped=0x0 | out: lpBuffer=0x12f87870*, lpNumberOfBytesWritten=0xc11fd58*=0xaa, lpOverlapped=0x0) returned 1 [0206.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaab0 [0206.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaad8 [0206.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaad8) returned 1 [0206.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f87870) returned 1 [0206.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f83c68) returned 1 [0206.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0206.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2e10) returned 1 [0206.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28a78 [0206.140] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.140] WriteFile (in: hFile=0x237c, lpBuffer=0x675ce00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc11fde0, lpOverlapped=0x0 | out: lpBuffer=0x675ce00*, lpNumberOfBytesWritten=0xc11fde0*=0x10c, lpOverlapped=0x0) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ce00) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28aa8) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaad8) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28a78) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaab0) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3bb0) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4510) returned 1 [0206.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4970) returned 1 [0206.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x6768588 [0206.518] wcscpy (in: _Dest=0x6768588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" [0206.518] wcscat (in: _Dest=0x6768588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.ac3a86" [0206.518] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0xc11fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6785df0 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785df0) returned 1 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68263b8) returned 1 [0208.956] NtQueryInformationFile (in: FileHandle=0x237c, IoStatusBlock=0xc11fd30, FileInformation=0xc11fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc11fd30, FileInformation=0xc11fd38) returned 0x0 [0208.956] NtSetInformationFile (FileHandle=0x237c, IoStatusBlock=0xc11fd30, FileInformation=0xc11fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768588) returned 1 [0209.283] FlushFileBuffers (hFile=0x237c) returned 1 [0209.296] CloseHandle (hObject=0x237c) returned 1 [0209.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6768930 [0209.567] wcscpy (in: _Dest=0x6768930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0209.567] wcscat (in: _Dest=0x6768930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0209.567] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0209.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.097] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc11fd74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc11fd74*=0x8b9, lpOverlapped=0x0) returned 1 [0210.099] CloseHandle (hObject=0x1bf8) returned 1 [0210.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768930) returned 1 [0210.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e678) returned 1 Thread: id = 6972 os_tid = 0x1e30 [0196.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json")) returned 0x2020 [0196.619] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", dwFileAttributes=0x20) returned 1 [0203.701] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1070 [0203.701] GetFileSizeEx (in: hFile=0x1070, lpFileSize=0xf38f8fc | out: lpFileSize=0xf38f8fc*=210) returned 1 [0203.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3b38 [0203.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0203.702] NtQuerySystemTime (in: CurrentTime=0xf38f870 | out: CurrentTime=0xf38f870*=132482711121840000) returned 0x0 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0xba5ae28 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x708b2491 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x63042db0 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x2e75ba09 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x2b746d4d [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x20be5f4c [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x1ff8700a [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x7e8b86f2 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x30a49e7e [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x54d4c4be [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x27f4bd83 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x77af21e6 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x46b0bcee [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x3413c2b [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x1e57729d [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x11f0cc41 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x78530b7 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x3590b311 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x78452375 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x261e555b [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x146cdae1 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x6327efcf [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x4ec31da9 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x4a528c12 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x1e902a70 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x6f134c83 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x63c3c9f0 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x6999cb4d [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x5167f57d [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x1e219341 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0x1105e339 [0203.702] RtlRandomEx (in: Seed=0xf38f868 | out: Seed=0xf38f868) returned 0xece3dc3 [0203.711] ReadFile (in: hFile=0x1070, lpBuffer=0x12f8b478, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xf38f864, lpOverlapped=0x0 | out: lpBuffer=0x12f8b478*, lpNumberOfBytesRead=0xf38f864*=0xd2, lpOverlapped=0x0) returned 1 [0203.713] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.713] WriteFile (in: hFile=0x1070, lpBuffer=0x12f8f080*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xf38f868, lpOverlapped=0x0 | out: lpBuffer=0x12f8f080*, lpNumberOfBytesWritten=0xf38f868*=0xd2, lpOverlapped=0x0) returned 1 [0206.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab50 [0206.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab78 [0206.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab78) returned 1 [0206.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8f080) returned 1 [0206.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8b478) returned 1 [0206.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0206.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2e58) returned 1 [0206.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28b38 [0206.145] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.146] WriteFile (in: hFile=0x1070, lpBuffer=0x675dc38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf38f8f0, lpOverlapped=0x0 | out: lpBuffer=0x675dc38*, lpNumberOfBytesWritten=0xf38f8f0*=0x10c, lpOverlapped=0x0) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dc38) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28b68) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab78) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28b38) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab50) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b38) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a98) returned 1 [0206.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4678) returned 1 [0206.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x67687f8 [0206.523] wcscpy (in: _Dest=0x67687f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" [0206.523] wcscat (in: _Dest=0x67687f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.ac3a86" [0206.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.ac3a86", NtPathName=0xf38f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6786080 [0208.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786080) returned 1 [0208.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825f68) returned 1 [0208.958] NtQueryInformationFile (in: FileHandle=0x1070, IoStatusBlock=0xf38f840, FileInformation=0xf38f848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf38f840, FileInformation=0xf38f848) returned 0x0 [0208.958] NtSetInformationFile (FileHandle=0x1070, IoStatusBlock=0xf38f840, FileInformation=0xf38f848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67687f8) returned 1 [0209.291] FlushFileBuffers (hFile=0x1070) returned 1 [0209.303] CloseHandle (hObject=0x1070) returned 1 [0209.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67686c0 [0209.571] wcscpy (in: _Dest=0x67686c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0209.571] wcscat (in: _Dest=0x67686c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\AC3A86-Readme.txt" [0209.571] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\ac3a86-readme.txt")) returned 0xffffffff [0209.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.101] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf38f884, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf38f884*=0x8b9, lpOverlapped=0x0) returned 1 [0210.104] CloseHandle (hObject=0x1bf8) returned 1 [0210.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67686c0) returned 1 [0210.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e428) returned 1 Thread: id = 6973 os_tid = 0x1224 [0196.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0196.620] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0203.713] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20bc [0203.713] GetFileSizeEx (in: hFile=0x20bc, lpFileSize=0xf22f774 | out: lpFileSize=0xf22f774*=176) returned 1 [0203.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3e30 [0203.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0203.714] NtQuerySystemTime (in: CurrentTime=0xf22f6e8 | out: CurrentTime=0xf22f6e8*=132482711121840000) returned 0x0 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x60f1abe2 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x4c6a695d [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x5149d7b6 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x62703008 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x70f0a07e [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x36ad5e71 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x3d11a32f [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x6412f497 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x79a6ec42 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x3380cbc5 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x792b6fe [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x25656876 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x302b9644 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x1f087259 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x664a7e56 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x323d0c57 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x336b8b8a [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x7353ae52 [0203.714] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x75e8a4e7 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x7e8b86f2 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x2896cf84 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x772a3285 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x18b21dba [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x4c19333 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x25c57f64 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0xb73984b [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x6840a494 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x2a63a62d [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x35a46775 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x42a64d35 [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x3bb8eb1b [0203.715] RtlRandomEx (in: Seed=0xf22f6e0 | out: Seed=0xf22f6e0) returned 0x4a84fbb2 [0203.723] ReadFile (in: hFile=0x20bc, lpBuffer=0x12f92c88, nNumberOfBytesToRead=0xb0, lpNumberOfBytesRead=0xf22f6dc, lpOverlapped=0x0 | out: lpBuffer=0x12f92c88*, lpNumberOfBytesRead=0xf22f6dc*=0xb0, lpOverlapped=0x0) returned 1 [0203.725] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.725] WriteFile (in: hFile=0x20bc, lpBuffer=0x12f96890*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0xf22f6e0, lpOverlapped=0x0 | out: lpBuffer=0x12f96890*, lpNumberOfBytesWritten=0xf22f6e0*=0xb0, lpOverlapped=0x0) returned 1 [0206.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab00 [0206.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab28 [0206.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab28) returned 1 [0206.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f96890) returned 1 [0206.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f92c88) returned 1 [0206.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0206.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2ea0) returned 1 [0206.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28ad8 [0206.144] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.144] WriteFile (in: hFile=0x20bc, lpBuffer=0x675cce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf22f768, lpOverlapped=0x0 | out: lpBuffer=0x675cce8*, lpNumberOfBytesWritten=0xf22f768*=0x10c, lpOverlapped=0x0) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cce8) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28b08) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab28) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ad8) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab00) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3e30) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b78) returned 1 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2008) returned 1 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x67686c0 [0206.521] wcscpy (in: _Dest=0x67686c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" [0206.521] wcscat (in: _Dest=0x67686c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.ac3a86" [0206.521] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0xf22f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6785f38 [0208.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785f38) returned 1 [0208.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6826190) returned 1 [0208.957] NtQueryInformationFile (in: FileHandle=0x20bc, IoStatusBlock=0xf22f6b8, FileInformation=0xf22f6c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf22f6b8, FileInformation=0xf22f6c0) returned 0x0 [0208.957] NtSetInformationFile (FileHandle=0x20bc, IoStatusBlock=0xf22f6b8, FileInformation=0xf22f6c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67686c0) returned 1 [0209.287] FlushFileBuffers (hFile=0x20bc) returned 1 [0209.300] CloseHandle (hObject=0x20bc) returned 1 [0209.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x67687f8 [0209.569] wcscpy (in: _Dest=0x67687f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0209.569] wcscat (in: _Dest=0x67687f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0209.569] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0209.570] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.106] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf22f6fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf22f6fc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.108] CloseHandle (hObject=0x1bf8) returned 1 [0210.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67687f8) returned 1 [0210.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e550) returned 1 Thread: id = 6974 os_tid = 0x2730 [0196.620] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json")) returned 0x2020 [0196.621] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0203.726] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1600 [0203.726] GetFileSizeEx (in: hFile=0x1600, lpFileSize=0xfc1facc | out: lpFileSize=0xfc1facc*=221) returned 1 [0203.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef41a0 [0203.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0203.726] NtQuerySystemTime (in: CurrentTime=0xfc1fa40 | out: CurrentTime=0xfc1fa40*=132482711121996000) returned 0x0 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x31df4a7c [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x27cf5bca [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x3fd1b588 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x55273bc9 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x4379e8ac [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x51ddff58 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x9d08c3b [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x4f3595e1 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x10794b80 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x4846eca4 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x100c8270 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x30179610 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x79c38442 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x52348624 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x18b21dba [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x3b44ee71 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x1f4f6be9 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x61d49f9 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x6f6941f0 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x3cf8aa23 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x16376d82 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x36ad5e71 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x216d5ac5 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x4d9605bf [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x3fa90a19 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x61750721 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x27cf5bca [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x7e4cc304 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x4df53eeb [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x7040b30e [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x3c8a8445 [0203.727] RtlRandomEx (in: Seed=0xfc1fa38 | out: Seed=0xfc1fa38) returned 0x30a49e7e [0203.736] ReadFile (in: hFile=0x1600, lpBuffer=0x12f9a498, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xfc1fa34, lpOverlapped=0x0 | out: lpBuffer=0x12f9a498*, lpNumberOfBytesRead=0xfc1fa34*=0xdd, lpOverlapped=0x0) returned 1 [0203.738] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.739] WriteFile (in: hFile=0x1600, lpBuffer=0x12f9e0a0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xfc1fa38, lpOverlapped=0x0 | out: lpBuffer=0x12f9e0a0*, lpNumberOfBytesWritten=0xfc1fa38*=0xdd, lpOverlapped=0x0) returned 1 [0206.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eabf0 [0206.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac18 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac18) returned 1 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9e0a0) returned 1 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9a498) returned 1 [0206.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014ef0) returned 1 [0206.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2ee8) returned 1 [0206.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28bf8 [0206.151] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.151] WriteFile (in: hFile=0x1600, lpBuffer=0x675d8f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfc1fac0, lpOverlapped=0x0 | out: lpBuffer=0x675d8f0*, lpNumberOfBytesWritten=0xfc1fac0*=0x10c, lpOverlapped=0x0) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d8f0) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28c28) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac18) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28bf8) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabf0) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef41a0) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3750) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4740) returned 1 [0206.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6768930 [0206.526] wcscpy (in: _Dest=0x6768930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" [0206.526] wcscat (in: _Dest=0x6768930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.ac3a86" [0206.526] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xfc1fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67861c8 [0208.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67861c8) returned 1 [0208.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825d40) returned 1 [0208.960] NtQueryInformationFile (in: FileHandle=0x1600, IoStatusBlock=0xfc1fa10, FileInformation=0xfc1fa18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfc1fa10, FileInformation=0xfc1fa18) returned 0x0 [0208.960] NtSetInformationFile (FileHandle=0x1600, IoStatusBlock=0xfc1fa10, FileInformation=0xfc1fa18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768930) returned 1 [0209.294] FlushFileBuffers (hFile=0x1600) returned 1 [0209.307] CloseHandle (hObject=0x1600) returned 1 [0209.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779898 [0209.574] wcscpy (in: _Dest=0x6779898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0209.574] wcscat (in: _Dest=0x6779898, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\AC3A86-Readme.txt" [0209.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0209.574] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.110] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfc1fa54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfc1fa54*=0x8b9, lpOverlapped=0x0) returned 1 [0210.113] CloseHandle (hObject=0x1bf8) returned 1 [0210.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779898) returned 1 [0210.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674e300) returned 1 Thread: id = 6975 os_tid = 0x2744 [0196.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json")) returned 0x2020 [0196.622] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", dwFileAttributes=0x20) returned 1 [0203.739] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbb4 [0203.739] GetFileSizeEx (in: hFile=0xbb4, lpFileSize=0xd2afa14 | out: lpFileSize=0xd2afa14*=375) returned 1 [0203.739] SetFilePointerEx (in: hFile=0xbb4, liDistanceToMove=0x173, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.739] ReadFile (in: hFile=0xbb4, lpBuffer=0xd2af9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd2afa00, lpOverlapped=0x0 | out: lpBuffer=0xd2af9f0*, lpNumberOfBytesRead=0xd2afa00*=0x4, lpOverlapped=0x0) returned 1 [0203.741] SetFilePointerEx (in: hFile=0xbb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef2170 [0203.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0203.741] NtQuerySystemTime (in: CurrentTime=0xd2af988 | out: CurrentTime=0xd2af988*=132482711122152000) returned 0x0 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x74d9683b [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3e640b88 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x398746c5 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x74397046 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x33575c51 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x70dda082 [0203.741] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x1e9a496a [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3303f7ff [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x2084972f [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x16f09538 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x4d9605bf [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x11cbf134 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3c781fe3 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3e0a5be9 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x4a849708 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x23458959 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x15fccf15 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x1cef6ef5 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x6b035c31 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x53f61ac7 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x27fd9415 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x15af9d87 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3a9e8ab0 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x22d61369 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0xba07bee [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x69b88fce [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x3e42b2e1 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x53f61ac7 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x31df4a7c [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x4910bfd3 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x2a995cd4 [0203.742] RtlRandomEx (in: Seed=0xd2af980 | out: Seed=0xd2af980) returned 0x62703008 [0203.751] ReadFile (in: hFile=0xbb4, lpBuffer=0x12fa1ca8, nNumberOfBytesToRead=0x177, lpNumberOfBytesRead=0xd2af97c, lpOverlapped=0x0 | out: lpBuffer=0x12fa1ca8*, lpNumberOfBytesRead=0xd2af97c*=0x177, lpOverlapped=0x0) returned 1 [0203.751] SetFilePointerEx (in: hFile=0xbb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.751] WriteFile (in: hFile=0xbb4, lpBuffer=0x12fa58b0*, nNumberOfBytesToWrite=0x177, lpNumberOfBytesWritten=0xd2af980, lpOverlapped=0x0 | out: lpBuffer=0x12fa58b0*, lpNumberOfBytesWritten=0xd2af980*=0x177, lpOverlapped=0x0) returned 1 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaba0 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eabc8 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabc8) returned 1 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa58b0) returned 1 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa1ca8) returned 1 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0206.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2f30) returned 1 [0206.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28b98 [0206.150] SetFilePointerEx (in: hFile=0xbb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.150] WriteFile (in: hFile=0xbb4, lpBuffer=0x675db20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd2afa08, lpOverlapped=0x0 | out: lpBuffer=0x675db20*, lpNumberOfBytesWritten=0xd2afa08*=0x10c, lpOverlapped=0x0) returned 1 [0210.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675db20) returned 1 [0210.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28bc8) returned 1 [0210.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabc8) returned 1 [0210.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28b98) returned 1 [0210.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaba0) returned 1 [0210.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2170) returned 1 [0210.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4808) returned 1 [0210.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b00) returned 1 [0210.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bd00 [0210.550] wcscpy (in: _Dest=0x678bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" [0210.550] wcscat (in: _Dest=0x678bd00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.ac3a86" [0210.550] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.ac3a86", NtPathName=0xd2af980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0210.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a080 [0214.351] FlushFileBuffers (hFile=0xbb4) returned 1 [0214.355] CloseHandle (hObject=0xbb4) returned 1 [0214.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765f88 [0214.475] wcscpy (in: _Dest=0x6765f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0214.475] wcscat (in: _Dest=0x6765f88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\AC3A86-Readme.txt" [0214.475] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ac3a86-readme.txt")) returned 0xffffffff [0214.475] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.598] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd2af99c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd2af99c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.600] CloseHandle (hObject=0x234c) returned 1 [0214.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765f88) returned 1 [0214.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55f30) returned 1 Thread: id = 6976 os_tid = 0x2748 [0196.622] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json")) returned 0x2020 [0196.622] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0203.439] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0203.439] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0xf92fa34 | out: lpFileSize=0xf92fa34*=277) returned 1 [0203.440] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.440] ReadFile (in: hFile=0xcd0, lpBuffer=0xf92fa10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf92fa20, lpOverlapped=0x0 | out: lpBuffer=0xf92fa10*, lpNumberOfBytesRead=0xf92fa20*=0x4, lpOverlapped=0x0) returned 1 [0203.441] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0203.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0203.441] NtQuerySystemTime (in: CurrentTime=0xf92f9a8 | out: CurrentTime=0xf92f9a8*=132482711119188000) returned 0x0 [0203.441] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x1b6d3e33 [0203.441] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x49798b0f [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x1b13102 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x6beaed49 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x20befca5 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x53f0b975 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x1f2ac4a3 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x7213ba83 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x7a0b895e [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x5d7cb53e [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x7ebc2735 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x18f07eda [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3b79a6c7 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x79548a2e [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x5dcf0412 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x742cb7cb [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x1f1053f1 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x735b422e [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x5407683c [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3caabce4 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3d36c786 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x6b305716 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x40c3a0a5 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3d98b93e [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3c4782c7 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x3fa63623 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x46657f [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x6fca3e28 [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x6d3b415a [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x5db84f5a [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x50da18cd [0203.442] RtlRandomEx (in: Seed=0xf92f9a0 | out: Seed=0xf92f9a0) returned 0x5a0ea3f3 [0203.451] ReadFile (in: hFile=0xcd0, lpBuffer=0x12f7c0e0, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0xf92f99c, lpOverlapped=0x0 | out: lpBuffer=0x12f7c0e0*, lpNumberOfBytesRead=0xf92f99c*=0x115, lpOverlapped=0x0) returned 1 [0203.451] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.451] WriteFile (in: hFile=0xcd0, lpBuffer=0x12f694b8*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0xf92f9a0, lpOverlapped=0x0 | out: lpBuffer=0x12f694b8*, lpNumberOfBytesWritten=0xf92f9a0*=0x115, lpOverlapped=0x0) returned 1 [0206.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea510 [0206.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea538 [0206.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea538) returned 1 [0206.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f694b8) returned 1 [0206.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f7c0e0) returned 1 [0206.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0206.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2900) returned 1 [0206.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f283b8 [0206.046] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.046] WriteFile (in: hFile=0xcd0, lpBuffer=0x30bc308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf92fa28, lpOverlapped=0x0 | out: lpBuffer=0x30bc308*, lpNumberOfBytesWritten=0xf92fa28*=0x10c, lpOverlapped=0x0) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f283e8) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea538) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f283b8) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea510) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef11a8) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3688) returned 1 [0206.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1b08) returned 1 [0206.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766f98 [0206.456] wcscpy (in: _Dest=0x6766f98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" [0206.456] wcscat (in: _Dest=0x6766f98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.ac3a86" [0206.457] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xf92f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67786e8 [0208.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67786e8) returned 1 [0208.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68247b0) returned 1 [0208.853] NtQueryInformationFile (in: FileHandle=0xcd0, IoStatusBlock=0xf92f978, FileInformation=0xf92f980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf92f978, FileInformation=0xf92f980) returned 0x0 [0208.854] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0xf92f978, FileInformation=0xf92f980, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766f98) returned 1 [0209.195] FlushFileBuffers (hFile=0xcd0) returned 1 [0209.203] CloseHandle (hObject=0xcd0) returned 1 [0209.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead658 [0209.426] wcscpy (in: _Dest=0x12ead658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0209.426] wcscat (in: _Dest=0x12ead658, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\AC3A86-Readme.txt" [0209.426] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0209.426] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.967] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf92f9bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf92f9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.969] CloseHandle (hObject=0x1bf8) returned 1 [0209.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead658) returned 1 [0209.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56180) returned 1 Thread: id = 6977 os_tid = 0xe5c [0196.623] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json")) returned 0x2020 [0196.623] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.451] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee0 [0203.452] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x8fff89c | out: lpFileSize=0x8fff89c*=205) returned 1 [0203.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4858 [0203.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0203.452] NtQuerySystemTime (in: CurrentTime=0x8fff810 | out: CurrentTime=0x8fff810*=132482711119344000) returned 0x0 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0xb4c3e7b [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x106cfeeb [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x6033db9a [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x3f5084a3 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0xbafd3f0 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x60177a57 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x712fed0d [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x11fdcf [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x690a6b62 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x60f812e8 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x6503145 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x35c65916 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x595ff0c0 [0203.452] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x1b1990a2 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0xe5c88e9 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x12b50367 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x1c97a1f0 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x41a1f3d7 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x4cf05b87 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x99e932 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x91db7f9 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x7733d6c7 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x5eb3c356 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x4a883fd9 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x1719903b [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x41df5e9d [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x99cdb37 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x65ffd121 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x4ca5aec1 [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x7d569cdf [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x754a770f [0203.453] RtlRandomEx (in: Seed=0x8fff808 | out: Seed=0x8fff808) returned 0x52f895e4 [0203.461] ReadFile (in: hFile=0xee0, lpBuffer=0x12f56890, nNumberOfBytesToRead=0xcd, lpNumberOfBytesRead=0x8fff804, lpOverlapped=0x0 | out: lpBuffer=0x12f56890*, lpNumberOfBytesRead=0x8fff804*=0xcd, lpOverlapped=0x0) returned 1 [0203.463] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.463] WriteFile (in: hFile=0xee0, lpBuffer=0x12f784d8*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x8fff808, lpOverlapped=0x0 | out: lpBuffer=0x12f784d8*, lpNumberOfBytesWritten=0x8fff808*=0xcd, lpOverlapped=0x0) returned 1 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea560 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea588 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea588) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f784d8) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f56890) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2948) returned 1 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28418 [0206.048] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.048] WriteFile (in: hFile=0xee0, lpBuffer=0x30bd140*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8fff890, lpOverlapped=0x0 | out: lpBuffer=0x30bd140*, lpNumberOfBytesWritten=0x8fff890*=0x10c, lpOverlapped=0x0) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28448) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea588) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28418) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea560) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4858) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4650) returned 1 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a20) returned 1 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67670d0 [0206.459] wcscpy (in: _Dest=0x67670d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" [0206.459] wcscat (in: _Dest=0x67670d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.ac3a86" [0206.459] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0x8fff808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776fd8 [0208.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776fd8) returned 1 [0208.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68249d8) returned 1 [0208.855] NtQueryInformationFile (in: FileHandle=0xee0, IoStatusBlock=0x8fff7e0, FileInformation=0x8fff7e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8fff7e0, FileInformation=0x8fff7e8) returned 0x0 [0208.855] NtSetInformationFile (FileHandle=0xee0, IoStatusBlock=0x8fff7e0, FileInformation=0x8fff7e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67670d0) returned 1 [0209.198] FlushFileBuffers (hFile=0xee0) returned 1 [0209.210] CloseHandle (hObject=0xee0) returned 1 [0209.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead780 [0209.430] wcscpy (in: _Dest=0x12ead780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0209.430] wcscat (in: _Dest=0x12ead780, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\AC3A86-Readme.txt" [0209.430] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0209.430] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.976] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8fff824, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8fff824*=0x8b9, lpOverlapped=0x0) returned 1 [0209.978] CloseHandle (hObject=0x1bf8) returned 1 [0209.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead780) returned 1 [0209.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56058) returned 1 Thread: id = 6978 os_tid = 0xddc [0196.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json")) returned 0x2020 [0196.624] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0203.463] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x484 [0203.464] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x1021fd74 | out: lpFileSize=0x1021fd74*=293) returned 1 [0203.464] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.464] ReadFile (in: hFile=0x484, lpBuffer=0x1021fd50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1021fd60, lpOverlapped=0x0 | out: lpBuffer=0x1021fd50*, lpNumberOfBytesRead=0x1021fd60*=0x4, lpOverlapped=0x0) returned 1 [0203.466] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3610 [0203.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0203.466] NtQuerySystemTime (in: CurrentTime=0x1021fce8 | out: CurrentTime=0x1021fce8*=132482711119500000) returned 0x0 [0203.466] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x17bdf8d6 [0203.466] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x34a39b1c [0203.466] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x793f35ca [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x37dfb113 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x50aa414e [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x1c59b627 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x15567cc3 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x15545571 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x44c1392d [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x3aff2fc4 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x690912b9 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x1bcb90a8 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x556d015 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x2b42f95f [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x5be91040 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x42cb2745 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x3f17146c [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x23d450f3 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x4c027373 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x2a69fa90 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x61d099a0 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x3bfeb7b3 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x7a90db01 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x6621a450 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x175bfd9d [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x582235e8 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x2a8575b0 [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x2d13679d [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x7feb3a0a [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x62cc373f [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x4f9e9efa [0203.467] RtlRandomEx (in: Seed=0x1021fce0 | out: Seed=0x1021fce0) returned 0x11405bd1 [0203.475] ReadFile (in: hFile=0x484, lpBuffer=0x12f5e0a0, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0x1021fcdc, lpOverlapped=0x0 | out: lpBuffer=0x12f5e0a0*, lpNumberOfBytesRead=0x1021fcdc*=0x125, lpOverlapped=0x0) returned 1 [0203.475] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.475] WriteFile (in: hFile=0x484, lpBuffer=0x12f52c88*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x1021fce0, lpOverlapped=0x0 | out: lpBuffer=0x12f52c88*, lpNumberOfBytesWritten=0x1021fce0*=0x125, lpOverlapped=0x0) returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea600 [0206.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea628 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea628) returned 1 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f52c88) returned 1 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5e0a0) returned 1 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0206.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2990) returned 1 [0206.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f284d8 [0206.053] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.053] WriteFile (in: hFile=0x484, lpBuffer=0x30bc0d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1021fd68, lpOverlapped=0x0 | out: lpBuffer=0x30bc0d8*, lpNumberOfBytesWritten=0x1021fd68*=0x10c, lpOverlapped=0x0) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28508) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea628) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f284d8) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea600) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3610) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3908) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d40) returned 1 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767340 [0206.464] wcscpy (in: _Dest=0x6767340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" [0206.464] wcscat (in: _Dest=0x6767340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.ac3a86" [0206.465] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0x1021fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776ab8 [0208.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776ab8) returned 1 [0208.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823f10) returned 1 [0208.858] NtQueryInformationFile (in: FileHandle=0x484, IoStatusBlock=0x1021fcb8, FileInformation=0x1021fcc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1021fcb8, FileInformation=0x1021fcc0) returned 0x0 [0208.858] NtSetInformationFile (FileHandle=0x484, IoStatusBlock=0x1021fcb8, FileInformation=0x1021fcc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767340) returned 1 [0209.205] FlushFileBuffers (hFile=0x484) returned 1 [0209.218] CloseHandle (hObject=0x484) returned 1 [0209.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead9d0 [0209.436] wcscpy (in: _Dest=0x12ead9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0209.436] wcscat (in: _Dest=0x12ead9d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\AC3A86-Readme.txt" [0209.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0209.436] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.980] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1021fcfc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1021fcfc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.982] CloseHandle (hObject=0x1bf8) returned 1 [0209.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead9d0) returned 1 [0209.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d562a8) returned 1 Thread: id = 6979 os_tid = 0x17e4 [0196.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 0x2020 [0196.625] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", dwFileAttributes=0x20) returned 1 [0203.475] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ec [0203.476] GetFileSizeEx (in: hFile=0x5ec, lpFileSize=0x108efe84 | out: lpFileSize=0x108efe84*=277) returned 1 [0203.476] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.476] ReadFile (in: hFile=0x5ec, lpBuffer=0x108efe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x108efe70, lpOverlapped=0x0 | out: lpBuffer=0x108efe60*, lpNumberOfBytesRead=0x108efe70*=0x4, lpOverlapped=0x0) returned 1 [0203.478] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3728 [0203.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0203.478] NtQuerySystemTime (in: CurrentTime=0x108efdf8 | out: CurrentTime=0x108efdf8*=132482711119500000) returned 0x0 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0xc8f2722 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x16c53df8 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x3d44a55e [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x5470d35c [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x7a9ce27d [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x3f25abe3 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x37411237 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x10c5a801 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x4528b513 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x41ab8fff [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x723eb420 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x39f7f291 [0203.478] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x78a292e4 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x177aab80 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x331a2248 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0xaa154ca [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x697b31f1 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0xda41d48 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x61efdfcc [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x593d6d77 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x2e8eab66 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x337a8d5b [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x1d6cb7de [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x62f2e38c [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x219e8f75 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x5b833dc3 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x77975573 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x2f87de1b [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x39ae4d59 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x63db820a [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x3f7b5d63 [0203.479] RtlRandomEx (in: Seed=0x108efdf0 | out: Seed=0x108efdf0) returned 0x63db820a [0203.489] ReadFile (in: hFile=0x5ec, lpBuffer=0x12f4f080, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0x108efdec, lpOverlapped=0x0 | out: lpBuffer=0x12f4f080*, lpNumberOfBytesRead=0x108efdec*=0x115, lpOverlapped=0x0) returned 1 [0203.489] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.489] WriteFile (in: hFile=0x5ec, lpBuffer=0x12f5a498*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x108efdf0, lpOverlapped=0x0 | out: lpBuffer=0x12f5a498*, lpNumberOfBytesWritten=0x108efdf0*=0x115, lpOverlapped=0x0) returned 1 [0206.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea5b0 [0206.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea5d8 [0206.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea5d8) returned 1 [0206.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f5a498) returned 1 [0206.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f4f080) returned 1 [0206.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0206.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c29d8) returned 1 [0206.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28478 [0206.052] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.052] WriteFile (in: hFile=0x5ec, lpBuffer=0x30bcf10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x108efe78, lpOverlapped=0x0 | out: lpBuffer=0x30bcf10*, lpNumberOfBytesWritten=0x108efe78*=0x10c, lpOverlapped=0x0) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f284a8) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea5d8) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28478) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea5b0) returned 1 [0206.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3728) returned 1 [0206.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3b88) returned 1 [0206.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4768) returned 1 [0206.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767208 [0206.462] wcscpy (in: _Dest=0x6767208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" [0206.462] wcscat (in: _Dest=0x6767208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.ac3a86" [0206.462] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.ac3a86", NtPathName=0x108efdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778310 [0208.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778310) returned 1 [0208.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823ce8) returned 1 [0208.857] NtQueryInformationFile (in: FileHandle=0x5ec, IoStatusBlock=0x108efdc8, FileInformation=0x108efdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x108efdc8, FileInformation=0x108efdd0) returned 0x0 [0208.857] NtSetInformationFile (FileHandle=0x5ec, IoStatusBlock=0x108efdc8, FileInformation=0x108efdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767208) returned 1 [0209.201] FlushFileBuffers (hFile=0x5ec) returned 1 [0209.214] CloseHandle (hObject=0x5ec) returned 1 [0209.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead8a8 [0209.433] wcscpy (in: _Dest=0x12ead8a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0209.433] wcscat (in: _Dest=0x12ead8a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\AC3A86-Readme.txt" [0209.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ac3a86-readme.txt")) returned 0xffffffff [0209.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.971] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x108efe0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x108efe0c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.974] CloseHandle (hObject=0x1bf8) returned 1 [0209.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead8a8) returned 1 [0209.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54a60) returned 1 Thread: id = 6980 os_tid = 0x6fc [0196.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0200.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0200.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.574] GetLastError () returned 0x5 [0200.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 6981 os_tid = 0x17e8 [0196.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0200.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.576] GetLastError () returned 0x5 [0200.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0200.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 6982 os_tid = 0x17ec [0196.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0200.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.578] GetLastError () returned 0x5 [0200.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 6983 os_tid = 0x17f0 [0196.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif")) returned 0x20 [0200.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0200.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.579] GetLastError () returned 0x5 [0200.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0200.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 6984 os_tid = 0x17f4 [0196.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0200.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0200.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.581] GetLastError () returned 0x5 [0200.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 6985 os_tid = 0x17fc [0196.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0200.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0200.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.582] GetLastError () returned 0x5 [0200.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0200.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 6986 os_tid = 0xdac [0196.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0197.213] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0202.610] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe08 [0202.611] GetFileSizeEx (in: hFile=0xe08, lpFileSize=0x106cf914 | out: lpFileSize=0x106cf914*=221) returned 1 [0202.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0202.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0202.611] NtQuerySystemTime (in: CurrentTime=0x106cf888 | out: CurrentTime=0x106cf888*=132482711110920000) returned 0x0 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x495b51a3 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0xd718891 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x1796f2a6 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x4f35eff8 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x486fb7ff [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x7b3ce032 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x243e4213 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x37f43837 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x21590401 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x7708dd77 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x58a0cce0 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x55b83c2e [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x5da2773f [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x790bc47b [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x2d64e36f [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x79f01811 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x60dfa77b [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x683a25d4 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x62d31429 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x5b0b1e4f [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x2344f9b3 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x4edb7d76 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x1937de29 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x227994b [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x3b80ad69 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x383ee5d3 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x20e5c654 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x1622c8ad [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x5a977fc3 [0202.611] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x2c1a43fa [0202.612] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0xd823ea2 [0202.612] RtlRandomEx (in: Seed=0x106cf880 | out: Seed=0x106cf880) returned 0x1b0ffc9d [0202.619] ReadFile (in: hFile=0xe08, lpBuffer=0x12f21ca8, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x106cf87c, lpOverlapped=0x0 | out: lpBuffer=0x12f21ca8*, lpNumberOfBytesRead=0x106cf87c*=0xdd, lpOverlapped=0x0) returned 1 [0202.621] SetFilePointerEx (in: hFile=0xe08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.621] WriteFile (in: hFile=0xe08, lpBuffer=0x12f384d8*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x106cf880, lpOverlapped=0x0 | out: lpBuffer=0x12f384d8*, lpNumberOfBytesWritten=0x106cf880*=0xdd, lpOverlapped=0x0) returned 1 [0205.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0205.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f10 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f384d8) returned 1 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f21ca8) returned 1 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0205.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f228) returned 1 [0205.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0205.620] SetFilePointerEx (in: hFile=0xe08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.620] WriteFile (in: hFile=0xe08, lpBuffer=0x30bba48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x106cf908, lpOverlapped=0x0 | out: lpBuffer=0x30bba48*, lpNumberOfBytesWritten=0x106cf908*=0x10c, lpOverlapped=0x0) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba48) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f10) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0208.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0208.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea07b0 [0208.774] wcscpy (in: _Dest=0x12ea07b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" [0208.774] wcscat (in: _Dest=0x12ea07b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.ac3a86" [0208.774] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x106cf880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789120 [0209.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789120) returned 1 [0209.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689cc00) returned 1 [0209.898] NtQueryInformationFile (in: FileHandle=0xe08, IoStatusBlock=0x106cf858, FileInformation=0x106cf860, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x106cf858, FileInformation=0x106cf860) returned 0x0 [0209.898] NtSetInformationFile (FileHandle=0xe08, IoStatusBlock=0x106cf858, FileInformation=0x106cf860, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea07b0) returned 1 [0210.345] FlushFileBuffers (hFile=0xe08) returned 1 [0210.370] CloseHandle (hObject=0xe08) returned 1 [0210.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67712d0 [0210.373] wcscpy (in: _Dest=0x67712d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0210.373] wcscat (in: _Dest=0x67712d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" [0210.373] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0210.373] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe08 [0210.374] WriteFile (in: hFile=0xe08, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x106cf89c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x106cf89c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.376] CloseHandle (hObject=0xe08) returned 1 [0210.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67712d0) returned 1 [0210.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 Thread: id = 6987 os_tid = 0x1380 [0196.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0197.214] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0202.621] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcec [0202.622] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0x11ecfe9c | out: lpFileSize=0x11ecfe9c*=218) returned 1 [0202.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0202.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0202.622] NtQuerySystemTime (in: CurrentTime=0x11ecfe10 | out: CurrentTime=0x11ecfe10*=132482711110920000) returned 0x0 [0202.622] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x275c606d [0202.622] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x4c1c7b54 [0202.622] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x7470ce60 [0202.622] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x1937de29 [0202.622] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x784b2ea6 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x4c1c7b54 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x53b28c96 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x49b10323 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0xe9b57d [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0xd2894d4 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x7d2c2f0c [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x40080e4c [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x6e352048 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x4c377fb6 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0xa321cce [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x32e4b0da [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x1796f2a6 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x30463910 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x104f62d6 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x132588da [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x403bbaf4 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x3a5f814b [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x5f524000 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x2d2c53f3 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x1622c8ad [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x1351dfdf [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x2f9ae396 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x6ab5301f [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x5f6263b8 [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x2f44a5fd [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x676c78cd [0202.623] RtlRandomEx (in: Seed=0x11ecfe08 | out: Seed=0x11ecfe08) returned 0x2f9ae396 [0202.631] ReadFile (in: hFile=0xcec, lpBuffer=0x12f2d0c0, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x11ecfe04, lpOverlapped=0x0 | out: lpBuffer=0x12f2d0c0*, lpNumberOfBytesRead=0x11ecfe04*=0xda, lpOverlapped=0x0) returned 1 [0202.632] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.632] WriteFile (in: hFile=0xcec, lpBuffer=0x12f16890*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x11ecfe08, lpOverlapped=0x0 | out: lpBuffer=0x12f16890*, lpNumberOfBytesWritten=0x11ecfe08*=0xda, lpOverlapped=0x0) returned 1 [0205.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0205.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f16890) returned 1 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f2d0c0) returned 1 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0948) returned 1 [0205.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5efe8) returned 1 [0205.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acdb8 [0205.622] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.623] WriteFile (in: hFile=0xcec, lpBuffer=0x30bbd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11ecfe90, lpOverlapped=0x0 | out: lpBuffer=0x30bbd90*, lpNumberOfBytesWritten=0x11ecfe90*=0x10c, lpOverlapped=0x0) returned 1 [0208.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd90) returned 1 [0208.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0208.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0208.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0208.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0208.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0208.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0208.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0208.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea18c0 [0208.815] wcscpy (in: _Dest=0x12ea18c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" [0208.815] wcscat (in: _Dest=0x12ea18c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.ac3a86" [0208.815] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0x11ecfe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a080 [0209.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a080) returned 1 [0209.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919b00) returned 1 [0209.901] NtQueryInformationFile (in: FileHandle=0xcec, IoStatusBlock=0x11ecfde0, FileInformation=0x11ecfde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11ecfde0, FileInformation=0x11ecfde8) returned 0x0 [0209.902] NtSetInformationFile (FileHandle=0xcec, IoStatusBlock=0x11ecfde0, FileInformation=0x11ecfde8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea18c0) returned 1 [0210.464] FlushFileBuffers (hFile=0xcec) returned 1 [0210.473] CloseHandle (hObject=0xcec) returned 1 [0210.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766550 [0210.475] wcscpy (in: _Dest=0x6766550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0210.475] wcscat (in: _Dest=0x6766550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" [0210.475] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0210.476] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcec [0210.476] WriteFile (in: hFile=0xcec, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11ecfe24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x11ecfe24*=0x8b9, lpOverlapped=0x0) returned 1 [0210.479] CloseHandle (hObject=0xcec) returned 1 [0210.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766550) returned 1 [0210.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 Thread: id = 6988 os_tid = 0xff8 [0196.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json")) returned 0x2020 [0196.628] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0203.490] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd8c [0203.490] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0xfccff2c | out: lpFileSize=0xfccff2c*=257) returned 1 [0203.490] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.490] ReadFile (in: hFile=0xd8c, lpBuffer=0xfccff08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfccff18, lpOverlapped=0x0 | out: lpBuffer=0xfccff08*, lpNumberOfBytesRead=0xfccff18*=0x4, lpOverlapped=0x0) returned 1 [0203.492] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4ee8 [0203.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0203.492] NtQuerySystemTime (in: CurrentTime=0xfccfea0 | out: CurrentTime=0xfccfea0*=132482711119656000) returned 0x0 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0xa75f0b2 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x54a2b6b3 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x8b99e03 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x43b5133e [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x2d1d4b04 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x4691db90 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x4c7f17c4 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x49f6cb9c [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x42ff2523 [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0xae14f8f [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x476d9d3f [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x1d22435e [0203.492] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x641b20ae [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x175eafe [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x3c2867b4 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x1d4472d1 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0xf6c3c1c [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x29db95e [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x23234464 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x1e5ae5b5 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x682996ac [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x10112340 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x501f73f9 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x6e5b1223 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x2d648958 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0xac4cc92 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x3b680226 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0xf59e9c5 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x7a90db01 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x2646576d [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x77628062 [0203.493] RtlRandomEx (in: Seed=0xfccfe98 | out: Seed=0xfccfe98) returned 0x5d9bd905 [0203.501] ReadFile (in: hFile=0xd8c, lpBuffer=0x12f43c68, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xfccfe94, lpOverlapped=0x0 | out: lpBuffer=0x12f43c68*, lpNumberOfBytesRead=0xfccfe94*=0x101, lpOverlapped=0x0) returned 1 [0203.501] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.501] WriteFile (in: hFile=0xd8c, lpBuffer=0x12f47870*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xfccfe98, lpOverlapped=0x0 | out: lpBuffer=0x12f47870*, lpNumberOfBytesWritten=0xfccfe98*=0x101, lpOverlapped=0x0) returned 1 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea650 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea678 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea678) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f47870) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f43c68) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2a20) returned 1 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28538 [0206.102] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.102] WriteFile (in: hFile=0xd8c, lpBuffer=0x675cbd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfccff20, lpOverlapped=0x0 | out: lpBuffer=0x675cbd0*, lpNumberOfBytesWritten=0xfccff20*=0x10c, lpOverlapped=0x0) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28568) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea678) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28538) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea650) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ee8) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f48) returned 1 [0206.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f20) returned 1 [0206.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767478 [0206.466] wcscpy (in: _Dest=0x6767478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" [0206.467] wcscat (in: _Dest=0x6767478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json.ac3a86" [0206.467] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xfccfe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778458 [0208.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778458) returned 1 [0208.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6824138) returned 1 [0208.859] NtQueryInformationFile (in: FileHandle=0xd8c, IoStatusBlock=0xfccfe70, FileInformation=0xfccfe78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfccfe70, FileInformation=0xfccfe78) returned 0x0 [0208.859] NtSetInformationFile (FileHandle=0xd8c, IoStatusBlock=0xfccfe70, FileInformation=0xfccfe78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767478) returned 1 [0209.208] FlushFileBuffers (hFile=0xd8c) returned 1 [0209.221] CloseHandle (hObject=0xd8c) returned 1 [0209.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9c060 [0209.437] wcscpy (in: _Dest=0x12e9c060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0209.437] wcscat (in: _Dest=0x12e9c060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\AC3A86-Readme.txt" [0209.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0209.438] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.985] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfccfeb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfccfeb4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.987] CloseHandle (hObject=0x1bf8) returned 1 [0209.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c060) returned 1 [0209.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 Thread: id = 6989 os_tid = 0x138c [0196.628] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json")) returned 0x2020 [0196.628] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0203.502] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518 [0203.502] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0xc59f8ec | out: lpFileSize=0xc59f8ec*=267) returned 1 [0203.502] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.502] ReadFile (in: hFile=0x1518, lpBuffer=0xc59f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc59f8d8, lpOverlapped=0x0 | out: lpBuffer=0xc59f8c8*, lpNumberOfBytesRead=0xc59f8d8*=0x4, lpOverlapped=0x0) returned 1 [0203.504] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ae8 [0203.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0203.504] NtQuerySystemTime (in: CurrentTime=0xc59f860 | out: CurrentTime=0xc59f860*=132482711119812000) returned 0x0 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x312c5f1f [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x46411917 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0xd880614 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x2b27c963 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x76095e69 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x71be8f79 [0203.504] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x5650f99 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x7b0cdcd5 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x2e2122a7 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x6e60831f [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0xae14f8f [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x682996ac [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x5b882ab6 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x78530b7 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x3a012bb1 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x6771b672 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x3c2867b4 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x47263414 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x13b07898 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x27d3e1a3 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x22d9e985 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x376f21b7 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x66d8d224 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x2fa2bcaa [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x7f7fc757 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x55b0a124 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x23b0e51c [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x1def3f5e [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x76095e69 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x1f553276 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x331a2248 [0203.505] RtlRandomEx (in: Seed=0xc59f858 | out: Seed=0xc59f858) returned 0x6dcbe176 [0203.514] ReadFile (in: hFile=0x1518, lpBuffer=0x12f0f080, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0xc59f854, lpOverlapped=0x0 | out: lpBuffer=0x12f0f080*, lpNumberOfBytesRead=0xc59f854*=0x10b, lpOverlapped=0x0) returned 1 [0203.514] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.514] WriteFile (in: hFile=0x1518, lpBuffer=0x12f12c88*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0xc59f858, lpOverlapped=0x0 | out: lpBuffer=0x12f12c88*, lpNumberOfBytesWritten=0xc59f858*=0x10b, lpOverlapped=0x0) returned 1 [0206.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6a0 [0206.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6c8 [0206.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6c8) returned 1 [0206.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f12c88) returned 1 [0206.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0f080) returned 1 [0206.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0206.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2a68) returned 1 [0206.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28598 [0206.105] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.105] WriteFile (in: hFile=0x1518, lpBuffer=0x675e610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc59f8e0, lpOverlapped=0x0 | out: lpBuffer=0x675e610*, lpNumberOfBytesWritten=0xc59f8e0*=0x10c, lpOverlapped=0x0) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e610) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f285c8) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6c8) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28598) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6a0) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ae8) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3818) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4088) returned 1 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x67675b0 [0206.469] wcscpy (in: _Dest=0x67675b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" [0206.469] wcscat (in: _Dest=0x67675b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.ac3a86" [0206.469] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0xc59f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67858d0 [0208.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67858d0) returned 1 [0208.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6824360) returned 1 [0208.920] NtQueryInformationFile (in: FileHandle=0x1518, IoStatusBlock=0xc59f830, FileInformation=0xc59f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc59f830, FileInformation=0xc59f838) returned 0x0 [0208.920] NtSetInformationFile (FileHandle=0x1518, IoStatusBlock=0xc59f830, FileInformation=0xc59f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67675b0) returned 1 [0209.229] FlushFileBuffers (hFile=0x1518) returned 1 [0209.236] CloseHandle (hObject=0x1518) returned 1 [0209.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678abf0 [0209.529] wcscpy (in: _Dest=0x678abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0209.529] wcscat (in: _Dest=0x678abf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\AC3A86-Readme.txt" [0209.529] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0209.529] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbd0 [0210.011] WriteFile (in: hFile=0xbd0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc59f874, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc59f874*=0x8b9, lpOverlapped=0x0) returned 1 [0210.014] CloseHandle (hObject=0xbd0) returned 1 [0210.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678abf0) returned 1 [0210.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676aab8) returned 1 Thread: id = 6990 os_tid = 0x18fc [0196.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json")) returned 0x2020 [0196.629] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0203.514] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee8 [0203.515] GetFileSizeEx (in: hFile=0x1ee8, lpFileSize=0xb99fcc4 | out: lpFileSize=0xb99fcc4*=234) returned 1 [0203.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3d90 [0203.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0203.515] NtQuerySystemTime (in: CurrentTime=0xb99fc38 | out: CurrentTime=0xb99fc38*=132482711119968000) returned 0x0 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x4080c56 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x5856133b [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x61d099a0 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x6a63c5c9 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x21e7e2e8 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x1a2fa0de [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x4fc1793 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x3ecffa63 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x271aebaa [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x6c90f189 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x4bcff98c [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x7997ad7a [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x6bcbbd16 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x2b6073e1 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x47aa2568 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x5422e26b [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x73c46dca [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0xefee767 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x78a292e4 [0203.515] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x4b27e7d3 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x1b12f8cf [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x1def3f5e [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x1bcc6ae1 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x48c619e [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x18aa8132 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x49af8c9 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x5e4b58b0 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x652d8b23 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x28ebbec4 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x4b6adb0 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0xc56ac45 [0203.516] RtlRandomEx (in: Seed=0xb99fc30 | out: Seed=0xb99fc30) returned 0x3c5a8ee2 [0203.525] ReadFile (in: hFile=0x1ee8, lpBuffer=0x12f30cc8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xb99fc2c, lpOverlapped=0x0 | out: lpBuffer=0x12f30cc8*, lpNumberOfBytesRead=0xb99fc2c*=0xea, lpOverlapped=0x0) returned 1 [0203.527] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.527] WriteFile (in: hFile=0x1ee8, lpBuffer=0x12f258b0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xb99fc30, lpOverlapped=0x0 | out: lpBuffer=0x12f258b0*, lpNumberOfBytesWritten=0xb99fc30*=0xea, lpOverlapped=0x0) returned 1 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6f0 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea718 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea718) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f258b0) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f30cc8) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2ab0) returned 1 [0206.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f285f8 [0206.108] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.108] WriteFile (in: hFile=0x1ee8, lpBuffer=0x675da08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb99fcb8, lpOverlapped=0x0 | out: lpBuffer=0x675da08*, lpNumberOfBytesWritten=0xb99fcb8*=0x10c, lpOverlapped=0x0) returned 1 [0206.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675da08) returned 1 [0206.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28628) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea718) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f285f8) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6f0) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d90) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f38) returned 1 [0206.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ab0) returned 1 [0206.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x67676e8 [0206.472] wcscpy (in: _Dest=0x67676e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" [0206.472] wcscat (in: _Dest=0x67676e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.ac3a86" [0206.472] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0xb99fc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6785788 [0208.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785788) returned 1 [0208.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6824588) returned 1 [0208.921] NtQueryInformationFile (in: FileHandle=0x1ee8, IoStatusBlock=0xb99fc08, FileInformation=0xb99fc10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb99fc08, FileInformation=0xb99fc10) returned 0x0 [0208.921] NtSetInformationFile (FileHandle=0x1ee8, IoStatusBlock=0xb99fc08, FileInformation=0xb99fc10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67676e8) returned 1 [0209.231] FlushFileBuffers (hFile=0x1ee8) returned 1 [0209.244] CloseHandle (hObject=0x1ee8) returned 1 [0209.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678ad28 [0209.533] wcscpy (in: _Dest=0x678ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0209.534] wcscat (in: _Dest=0x678ad28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\AC3A86-Readme.txt" [0209.534] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0209.534] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.019] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb99fc4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb99fc4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.025] CloseHandle (hObject=0x1bf8) returned 1 [0210.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ad28) returned 1 [0210.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676abe0) returned 1 Thread: id = 6991 os_tid = 0xb58 [0196.630] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json")) returned 0x2020 [0196.630] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0203.528] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf20 [0203.529] GetFileSizeEx (in: hFile=0xf20, lpFileSize=0xed1f76c | out: lpFileSize=0xed1f76c*=231) returned 1 [0203.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef37a0 [0203.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0203.529] NtQuerySystemTime (in: CurrentTime=0xed1f6e0 | out: CurrentTime=0xed1f6e0*=132482711120124000) returned 0x0 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x3922fe50 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x37cb8782 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x3241a385 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x4402ea3c [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x312c5f1f [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x48171525 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x2e333995 [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x1251a02a [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x6612ad2d [0203.529] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x49f2a591 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x2fa331f2 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x1912f57e [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x6236ffcc [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x33575c51 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x385f43d [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0xb238179 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x40881f0b [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x780e4876 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x371cdd51 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x6dcbe176 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x6ddb54e4 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x41d4a45 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x32e6757b [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x3731b2e3 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x7a4af14b [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x7bee70eb [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x43b5133e [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x1f553276 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x1b66dfc5 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x4d983567 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x47aa2568 [0203.530] RtlRandomEx (in: Seed=0xed1f6d8 | out: Seed=0xed1f6d8) returned 0x25d918df [0203.540] ReadFile (in: hFile=0xf20, lpBuffer=0x68cf8f0, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0xed1f6d4, lpOverlapped=0x0 | out: lpBuffer=0x68cf8f0*, lpNumberOfBytesRead=0xed1f6d4*=0xe7, lpOverlapped=0x0) returned 1 [0203.547] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.547] WriteFile (in: hFile=0xf20, lpBuffer=0x68d34f8*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0xed1f6d8, lpOverlapped=0x0 | out: lpBuffer=0x68d34f8*, lpNumberOfBytesWritten=0xed1f6d8*=0xe7, lpOverlapped=0x0) returned 1 [0206.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea740 [0206.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea768 [0206.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea768) returned 1 [0206.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d34f8) returned 1 [0206.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cf8f0) returned 1 [0206.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 [0206.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2af8) returned 1 [0206.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28658 [0206.111] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.111] WriteFile (in: hFile=0xf20, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xed1f760, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0xed1f760*=0x10c, lpOverlapped=0x0) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28688) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea768) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28658) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea740) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37a0) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4790) returned 1 [0206.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3868) returned 1 [0206.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767820 [0206.474] wcscpy (in: _Dest=0x6767820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" [0206.474] wcscat (in: _Dest=0x6767820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.ac3a86" [0206.474] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0xed1f6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6785640 [0208.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6785640) returned 1 [0208.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827d98) returned 1 [0208.923] NtQueryInformationFile (in: FileHandle=0xf20, IoStatusBlock=0xed1f6b0, FileInformation=0xed1f6b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xed1f6b0, FileInformation=0xed1f6b8) returned 0x0 [0208.923] NtSetInformationFile (FileHandle=0xf20, IoStatusBlock=0xed1f6b0, FileInformation=0xed1f6b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767820) returned 1 [0209.235] FlushFileBuffers (hFile=0xf20) returned 1 [0209.249] CloseHandle (hObject=0xf20) returned 1 [0209.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678af98 [0209.535] wcscpy (in: _Dest=0x678af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0209.535] wcscat (in: _Dest=0x678af98, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\AC3A86-Readme.txt" [0209.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0209.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.035] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xed1f6f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xed1f6f4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.037] CloseHandle (hObject=0x1bf8) returned 1 [0210.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678af98) returned 1 [0210.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ad08) returned 1 Thread: id = 6992 os_tid = 0xa30 [0196.630] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json")) returned 0x2020 [0196.630] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0203.547] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf80 [0203.548] GetFileSizeEx (in: hFile=0xf80, lpFileSize=0x109bf934 | out: lpFileSize=0x109bf934*=230) returned 1 [0203.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3890 [0203.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0203.549] NtQuerySystemTime (in: CurrentTime=0x109bf8a8 | out: CurrentTime=0x109bf8a8*=132482711120280000) returned 0x0 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x39bdacf0 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x5049e1cc [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x2da318e2 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x7da35449 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x7b8a1e1b [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x28a6b024 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x2e016020 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x752d9a3f [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x5c30477f [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x23234464 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x6bacb428 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x7f38e9e6 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x1d81caf7 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x5844e4e2 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x2c474e8b [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0xb0c4731 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x1216da4b [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x24420a88 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x43aa8823 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x44bbc368 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x1822035e [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x4d9bc324 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x5359ba5e [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x52afd28b [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x2b6b19e [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x4aeb04f1 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x3de5b77e [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x65b579e7 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x99775a2 [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x7337d9eb [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x6f38cffa [0203.549] RtlRandomEx (in: Seed=0x109bf8a0 | out: Seed=0x109bf8a0) returned 0x2301c3b1 [0203.557] ReadFile (in: hFile=0xf80, lpBuffer=0x68cbce8, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x109bf89c, lpOverlapped=0x0 | out: lpBuffer=0x68cbce8*, lpNumberOfBytesRead=0x109bf89c*=0xe6, lpOverlapped=0x0) returned 1 [0203.560] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.560] WriteFile (in: hFile=0xf80, lpBuffer=0x6715ed0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x109bf8a0, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesWritten=0x109bf8a0*=0xe6, lpOverlapped=0x0) returned 1 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea790 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7b8 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea7b8) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cbce8) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b40) returned 1 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f286b8 [0206.113] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.114] WriteFile (in: hFile=0xf80, lpBuffer=0x675e2c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x109bf928, lpOverlapped=0x0 | out: lpBuffer=0x675e2c8*, lpNumberOfBytesWritten=0x109bf928*=0x10c, lpOverlapped=0x0) returned 1 [0206.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e2c8) returned 1 [0206.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f286e8) returned 1 [0206.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea7b8) returned 1 [0206.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f286b8) returned 1 [0206.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea790) returned 1 [0206.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3890) returned 1 [0206.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4ba0) returned 1 [0206.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a48) returned 1 [0206.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767958 [0206.477] wcscpy (in: _Dest=0x6767958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" [0206.477] wcscat (in: _Dest=0x6767958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.ac3a86" [0206.477] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x109bf8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67854f8 [0208.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67854f8) returned 1 [0208.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827948) returned 1 [0208.924] NtQueryInformationFile (in: FileHandle=0xf80, IoStatusBlock=0x109bf878, FileInformation=0x109bf880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x109bf878, FileInformation=0x109bf880) returned 0x0 [0208.924] NtSetInformationFile (FileHandle=0xf80, IoStatusBlock=0x109bf878, FileInformation=0x109bf880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767958) returned 1 [0209.238] FlushFileBuffers (hFile=0xf80) returned 1 [0209.253] CloseHandle (hObject=0xf80) returned 1 [0209.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c930 [0209.541] wcscpy (in: _Dest=0x678c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0209.541] wcscat (in: _Dest=0x678c930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\AC3A86-Readme.txt" [0209.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0209.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.027] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x109bf8bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x109bf8bc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.033] CloseHandle (hObject=0x1bf8) returned 1 [0210.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c930) returned 1 [0210.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ae30) returned 1 Thread: id = 6993 os_tid = 0x1538 [0196.631] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json")) returned 0x2020 [0196.631] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0203.560] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb0 [0203.561] GetFileSizeEx (in: hFile=0xfb0, lpFileSize=0x62efbac | out: lpFileSize=0x62efbac*=226) returned 1 [0203.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef42b8 [0203.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4d80 [0203.561] NtQuerySystemTime (in: CurrentTime=0x62efb20 | out: CurrentTime=0x62efb20*=132482711120436000) returned 0x0 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x3e4f7023 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x16f3f245 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x1b97ac06 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x62d8f6e6 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x6d5fc57e [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x290215f7 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x8255892 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x2a841290 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x2a36d066 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x4db73ce0 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x3d353e03 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x27d3e1a3 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x24479d36 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x2146fec4 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x1543a297 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x264f9de5 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x2acc426a [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x4c027373 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x7b3df9f9 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x216d5ac5 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x693c6809 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x5ae66bd3 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0xc6f925a [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x7e4d0f9c [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x62cc373f [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x156064c5 [0203.561] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x54a2b6b3 [0203.562] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x4fca74c4 [0203.562] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x66c37e97 [0203.562] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0xa02ab03 [0203.562] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x42242086 [0203.562] RtlRandomEx (in: Seed=0x62efb18 | out: Seed=0x62efb18) returned 0x436fc54a [0203.569] ReadFile (in: hFile=0xfb0, lpBuffer=0x6a05ce8, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x62efb14, lpOverlapped=0x0 | out: lpBuffer=0x6a05ce8*, lpNumberOfBytesRead=0x62efb14*=0xe2, lpOverlapped=0x0) returned 1 [0203.571] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.571] WriteFile (in: hFile=0xfb0, lpBuffer=0x6a098f0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x62efb18, lpOverlapped=0x0 | out: lpBuffer=0x6a098f0*, lpNumberOfBytesWritten=0x62efb18*=0xe2, lpOverlapped=0x0) returned 1 [0206.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7e0 [0206.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea808 [0206.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea808) returned 1 [0206.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a098f0) returned 1 [0206.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a05ce8) returned 1 [0206.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0206.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2b88) returned 1 [0206.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28718 [0206.117] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.118] WriteFile (in: hFile=0xfb0, lpBuffer=0x675e1b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x62efba0, lpOverlapped=0x0 | out: lpBuffer=0x675e1b0*, lpNumberOfBytesWritten=0x62efba0*=0x10c, lpOverlapped=0x0) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e1b0) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28748) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea808) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28718) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea7e0) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef42b8) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4218) returned 1 [0206.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4498) returned 1 [0206.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767a90 [0206.479] wcscpy (in: _Dest=0x6767a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" [0206.479] wcscat (in: _Dest=0x6767a90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.ac3a86" [0206.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x62efb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67853b0 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67853b0) returned 1 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827720) returned 1 [0208.938] NtQueryInformationFile (in: FileHandle=0xfb0, IoStatusBlock=0x62efaf0, FileInformation=0x62efaf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x62efaf0, FileInformation=0x62efaf8) returned 0x0 [0208.938] NtSetInformationFile (FileHandle=0xfb0, IoStatusBlock=0x62efaf0, FileInformation=0x62efaf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767a90) returned 1 [0209.242] FlushFileBuffers (hFile=0xfb0) returned 1 [0209.256] CloseHandle (hObject=0xfb0) returned 1 [0209.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c7f8 [0209.543] wcscpy (in: _Dest=0x678c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0209.543] wcscat (in: _Dest=0x678c7f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\AC3A86-Readme.txt" [0209.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0209.544] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.039] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x62efb34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x62efb34*=0x8b9, lpOverlapped=0x0) returned 1 [0210.042] CloseHandle (hObject=0x1bf8) returned 1 [0210.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c7f8) returned 1 [0210.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676af58) returned 1 Thread: id = 6994 os_tid = 0x191c [0196.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json")) returned 0x2020 [0196.632] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0203.608] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x124c [0203.609] GetFileSizeEx (in: hFile=0x124c, lpFileSize=0x1092f9b4 | out: lpFileSize=0x1092f9b4*=283) returned 1 [0203.609] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x117, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.609] ReadFile (in: hFile=0x124c, lpBuffer=0x1092f990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1092f9a0, lpOverlapped=0x0 | out: lpBuffer=0x1092f990*, lpNumberOfBytesRead=0x1092f9a0*=0x4, lpOverlapped=0x0) returned 1 [0203.611] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f88 [0203.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0203.611] NtQuerySystemTime (in: CurrentTime=0x1092f928 | out: CurrentTime=0x1092f928*=132482711120904000) returned 0x0 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x4eb86e84 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x526b4a9e [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x250243bb [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x3474c09c [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x227e628c [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x2eb74906 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x4480c3e3 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x3dcee5e3 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x652d8b23 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x478a6192 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x6999cb4d [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x6468b55d [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x7c3bccd5 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x5c534d46 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0xe9bf785 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x44ab9ca3 [0203.611] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x3d44a55e [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x364744ed [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x469407ac [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x6bad8fe7 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x4265f50e [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x3a3aa852 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x526b4a9e [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x9536ec5 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x4f56239c [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x8dd9d9f [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x587f29a1 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x11bfde2d [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x12c443e6 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x323d0c57 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x6bf17ec0 [0203.612] RtlRandomEx (in: Seed=0x1092f920 | out: Seed=0x1092f920) returned 0x3baf42ca [0203.619] ReadFile (in: hFile=0x124c, lpBuffer=0x6a1c518, nNumberOfBytesToRead=0x11b, lpNumberOfBytesRead=0x1092f91c, lpOverlapped=0x0 | out: lpBuffer=0x6a1c518*, lpNumberOfBytesRead=0x1092f91c*=0x11b, lpOverlapped=0x0) returned 1 [0203.619] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.619] WriteFile (in: hFile=0x124c, lpBuffer=0x6a20120*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x1092f920, lpOverlapped=0x0 | out: lpBuffer=0x6a20120*, lpNumberOfBytesWritten=0x1092f920*=0x11b, lpOverlapped=0x0) returned 1 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8d0 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8f8 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8f8) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a20120) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a1c518) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2c60) returned 1 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28838 [0206.125] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.125] WriteFile (in: hFile=0x124c, lpBuffer=0x675de68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1092f9a8, lpOverlapped=0x0 | out: lpBuffer=0x675de68*, lpNumberOfBytesWritten=0x1092f9a8*=0x10c, lpOverlapped=0x0) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675de68) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28868) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8f8) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28838) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8d0) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f88) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef38b8) returned 1 [0206.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3d18) returned 1 [0206.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767e38 [0206.486] wcscpy (in: _Dest=0x6767e38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" [0206.486] wcscat (in: _Dest=0x6767e38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.ac3a86" [0206.486] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x1092f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6784d48 [0208.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784d48) returned 1 [0208.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6826e80) returned 1 [0208.942] NtQueryInformationFile (in: FileHandle=0x124c, IoStatusBlock=0x1092f8f8, FileInformation=0x1092f900, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1092f8f8, FileInformation=0x1092f900) returned 0x0 [0208.942] NtSetInformationFile (FileHandle=0x124c, IoStatusBlock=0x1092f8f8, FileInformation=0x1092f900, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767e38) returned 1 [0209.255] FlushFileBuffers (hFile=0x124c) returned 1 [0209.263] CloseHandle (hObject=0x124c) returned 1 [0209.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766ab8 [0209.556] wcscpy (in: _Dest=0x6766ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0209.556] wcscat (in: _Dest=0x6766ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\AC3A86-Readme.txt" [0209.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0209.556] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.053] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1092f93c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1092f93c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.055] CloseHandle (hObject=0x1bf8) returned 1 [0210.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0210.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b080) returned 1 Thread: id = 6995 os_tid = 0x1920 [0196.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json")) returned 0x2020 [0196.633] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0203.620] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf0c [0203.620] GetFileSizeEx (in: hFile=0xf0c, lpFileSize=0xdabfb24 | out: lpFileSize=0xdabfb24*=227) returned 1 [0203.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef46c8 [0203.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0203.621] NtQuerySystemTime (in: CurrentTime=0xdabfa98 | out: CurrentTime=0xdabfa98*=132482711120904000) returned 0x0 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x7fcd9988 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x38b3422 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x3e249763 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x61a3a52d [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x1543a297 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x7d8fe3c6 [0203.621] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x4dad4d87 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x2d13679d [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x2ee0e78a [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x1db20b6f [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x1e816bc6 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x4065f343 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x2fe8f804 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x1a98800e [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x56bc4010 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x7cc3da30 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x7c4fab42 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x5c534d46 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x22490cb [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x5e19638d [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x7865773a [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x17dd9849 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x384e9130 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x32334079 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x9d08c3b [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x8a3b67 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x8dd9d9f [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x69051634 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x2efd2712 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x587f29a1 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x3f25abe3 [0203.622] RtlRandomEx (in: Seed=0xdabfa90 | out: Seed=0xdabfa90) returned 0x5ace1f60 [0203.630] ReadFile (in: hFile=0xf0c, lpBuffer=0x6a23d28, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xdabfa8c, lpOverlapped=0x0 | out: lpBuffer=0x6a23d28*, lpNumberOfBytesRead=0xdabfa8c*=0xe3, lpOverlapped=0x0) returned 1 [0203.633] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.633] WriteFile (in: hFile=0xf0c, lpBuffer=0x6a27930*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xdabfa90, lpOverlapped=0x0 | out: lpBuffer=0x6a27930*, lpNumberOfBytesWritten=0xdabfa90*=0xe3, lpOverlapped=0x0) returned 1 [0206.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea920 [0206.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea948 [0206.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea948) returned 1 [0206.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a27930) returned 1 [0206.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a23d28) returned 1 [0206.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0206.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2ca8) returned 1 [0206.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28898 [0206.128] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.128] WriteFile (in: hFile=0xf0c, lpBuffer=0x675dd50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdabfb18, lpOverlapped=0x0 | out: lpBuffer=0x675dd50*, lpNumberOfBytesWritten=0xdabfb18*=0x10c, lpOverlapped=0x0) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dd50) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f288c8) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea948) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28898) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea920) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46c8) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4268) returned 1 [0206.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4bc8) returned 1 [0206.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6767f70 [0206.488] wcscpy (in: _Dest=0x6767f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" [0206.488] wcscat (in: _Dest=0x6767f70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.ac3a86" [0206.488] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.ac3a86", NtPathName=0xdabfa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6784c00 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784c00) returned 1 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68270a8) returned 1 [0208.944] NtQueryInformationFile (in: FileHandle=0xf0c, IoStatusBlock=0xdabfa68, FileInformation=0xdabfa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdabfa68, FileInformation=0xdabfa70) returned 0x0 [0208.944] NtSetInformationFile (FileHandle=0xf0c, IoStatusBlock=0xdabfa68, FileInformation=0xdabfa70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767f70) returned 1 [0209.262] FlushFileBuffers (hFile=0xf0c) returned 1 [0209.270] CloseHandle (hObject=0xf0c) returned 1 [0209.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766d28 [0209.557] wcscpy (in: _Dest=0x6766d28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0209.558] wcscat (in: _Dest=0x6766d28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\AC3A86-Readme.txt" [0209.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\ac3a86-readme.txt")) returned 0xffffffff [0209.558] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.057] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdabfaac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdabfaac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.059] CloseHandle (hObject=0x1bf8) returned 1 [0210.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766d28) returned 1 [0210.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b1a8) returned 1 Thread: id = 6996 os_tid = 0x1924 [0196.633] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json")) returned 0x2020 [0196.633] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0203.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf1c [0203.633] GetFileSizeEx (in: hFile=0xf1c, lpFileSize=0xe93fa54 | out: lpFileSize=0xe93fa54*=232) returned 1 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3520 [0203.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4588 [0203.634] NtQuerySystemTime (in: CurrentTime=0xe93f9c8 | out: CurrentTime=0xe93f9c8*=132482711121060000) returned 0x0 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x90a2a5c [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x90a2a5c [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x3a0a4e4 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x10589bef [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x1e94e6ba [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x39daf7e4 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x62d9c084 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x131d11e7 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x76d5351c [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x30255ea1 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x48603318 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x5d49054a [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x146cdae1 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x4b22a607 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x606aea94 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x4e3bb058 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x3eb467bb [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x216be3d3 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x470f1265 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x3da40d23 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x3baf42ca [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x5d49054a [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x26a5527b [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x1d978511 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x59c508f3 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x3790533b [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x2773d5c5 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x6d5bda91 [0203.634] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x6aa2fcaf [0203.635] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x59c508f3 [0203.635] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x66bb086c [0203.635] RtlRandomEx (in: Seed=0xe93f9c0 | out: Seed=0xe93f9c0) returned 0x65d73c98 [0203.643] ReadFile (in: hFile=0xf1c, lpBuffer=0x6a2b538, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xe93f9bc, lpOverlapped=0x0 | out: lpBuffer=0x6a2b538*, lpNumberOfBytesRead=0xe93f9bc*=0xe8, lpOverlapped=0x0) returned 1 [0203.645] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.645] WriteFile (in: hFile=0xf1c, lpBuffer=0x6a2f140*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xe93f9c0, lpOverlapped=0x0 | out: lpBuffer=0x6a2f140*, lpNumberOfBytesWritten=0xe93f9c0*=0xe8, lpOverlapped=0x0) returned 1 [0206.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea970 [0206.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea998 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea998) returned 1 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2f140) returned 1 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2b538) returned 1 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b150) returned 1 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2cf0) returned 1 [0206.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f288f8 [0206.130] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.130] WriteFile (in: hFile=0xf1c, lpBuffer=0x675cab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe93fa48, lpOverlapped=0x0 | out: lpBuffer=0x675cab8*, lpNumberOfBytesWritten=0xe93fa48*=0x10c, lpOverlapped=0x0) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cab8) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28928) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea998) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f288f8) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea970) returned 1 [0206.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3520) returned 1 [0206.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4358) returned 1 [0206.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43f8) returned 1 [0206.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x67680a8 [0206.508] wcscpy (in: _Dest=0x67680a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" [0206.508] wcscat (in: _Dest=0x67680a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.ac3a86" [0206.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xe93f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6784ab8 [0208.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6784ab8) returned 1 [0208.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6826c58) returned 1 [0208.945] NtQueryInformationFile (in: FileHandle=0xf1c, IoStatusBlock=0xe93f998, FileInformation=0xe93f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe93f998, FileInformation=0xe93f9a0) returned 0x0 [0208.946] NtSetInformationFile (FileHandle=0xf1c, IoStatusBlock=0xe93f998, FileInformation=0xe93f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67680a8) returned 1 [0209.265] FlushFileBuffers (hFile=0xf1c) returned 1 [0209.281] CloseHandle (hObject=0xf1c) returned 1 [0209.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6766e60 [0209.560] wcscpy (in: _Dest=0x6766e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0209.560] wcscat (in: _Dest=0x6766e60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\AC3A86-Readme.txt" [0209.560] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0209.560] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.061] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe93f9dc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe93f9dc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.063] CloseHandle (hObject=0x1bf8) returned 1 [0210.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e60) returned 1 [0210.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b2d0) returned 1 Thread: id = 6997 os_tid = 0x1928 [0196.733] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json")) returned 0x2020 [0196.734] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0203.751] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x154c [0203.752] GetFileSizeEx (in: hFile=0x154c, lpFileSize=0x10aff90c | out: lpFileSize=0x10aff90c*=218) returned 1 [0203.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4f10 [0203.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0203.752] NtQuerySystemTime (in: CurrentTime=0x10aff880 | out: CurrentTime=0x10aff880*=132482711122308000) returned 0x0 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x3073b06a [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x641dbdef [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x636efc88 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x2323e26 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x701a4c9c [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x9e03d4d [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x4fcf2ad8 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x61ea5a7c [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x7767e5f7 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x15fccf15 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x13778d6 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x51c577d [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x429d3c23 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x36840945 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x5926d64b [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x4379e8ac [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x1dda7460 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x7396885a [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x1f7f11c6 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x23fc9fd2 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x7647e9d6 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x11e2a2d0 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x13e9123 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x7cc3da30 [0203.752] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x3ccdd163 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x2ef18ea7 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x4ec31da9 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x3c226e63 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0xa34f2d7 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x5877a117 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x1c163f15 [0203.753] RtlRandomEx (in: Seed=0x10aff878 | out: Seed=0x10aff878) returned 0x60da3f5b [0203.760] ReadFile (in: hFile=0x154c, lpBuffer=0x12fa94b8, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x10aff874, lpOverlapped=0x0 | out: lpBuffer=0x12fa94b8*, lpNumberOfBytesRead=0x10aff874*=0xda, lpOverlapped=0x0) returned 1 [0203.767] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.767] WriteFile (in: hFile=0x154c, lpBuffer=0x12fad0c0*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x10aff878, lpOverlapped=0x0 | out: lpBuffer=0x12fad0c0*, lpNumberOfBytesWritten=0x10aff878*=0xda, lpOverlapped=0x0) returned 1 [0206.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac40 [0206.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac68 [0206.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac68) returned 1 [0206.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fad0c0) returned 1 [0206.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa94b8) returned 1 [0206.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0206.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2f78) returned 1 [0206.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28c58 [0206.153] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.153] WriteFile (in: hFile=0x154c, lpBuffer=0x675d7d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10aff900, lpOverlapped=0x0 | out: lpBuffer=0x675d7d8*, lpNumberOfBytesWritten=0x10aff900*=0x10c, lpOverlapped=0x0) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d7d8) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28c88) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac68) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28c58) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac40) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4f10) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0206.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0206.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40060 [0206.528] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" [0206.528] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.ac3a86" [0206.528] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0x10aff878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786310 [0208.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786310) returned 1 [0208.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825b18) returned 1 [0208.962] NtQueryInformationFile (in: FileHandle=0x154c, IoStatusBlock=0x10aff850, FileInformation=0x10aff858, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10aff850, FileInformation=0x10aff858) returned 0x0 [0208.962] NtSetInformationFile (FileHandle=0x154c, IoStatusBlock=0x10aff850, FileInformation=0x10aff858, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0209.298] FlushFileBuffers (hFile=0x154c) returned 1 [0209.312] CloseHandle (hObject=0x154c) returned 1 [0209.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6768588 [0209.575] wcscpy (in: _Dest=0x6768588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0209.575] wcscat (in: _Dest=0x6768588, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\AC3A86-Readme.txt" [0209.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0209.575] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.114] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10aff894, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10aff894*=0x8b9, lpOverlapped=0x0) returned 1 [0210.117] CloseHandle (hObject=0x1bf8) returned 1 [0210.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768588) returned 1 [0210.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b3f8) returned 1 Thread: id = 6998 os_tid = 0x192c [0196.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json")) returned 0x2020 [0196.734] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0203.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc0 [0203.768] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0x10bcfd6c | out: lpFileSize=0x10bcfd6c*=236) returned 1 [0203.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c508 [0203.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0203.768] NtQuerySystemTime (in: CurrentTime=0x10bcfce0 | out: CurrentTime=0x10bcfce0*=132482711122464000) returned 0x0 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x55273bc9 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0xb73984b [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x4ca96e42 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x416da3a2 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x69b88fce [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x66f743c1 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x4f0020f0 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x78d4e504 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0xbba4a1f [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x631581d0 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x30a78b50 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x416da3a2 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x6d494004 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x28d8fab1 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3bd3688a [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x6f134c83 [0203.768] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x6449e42e [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x42ad6129 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x336b8b8a [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3b44ee71 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3f8317f8 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3c4d4723 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x48ced4ec [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3165b7fd [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x3f83e8fc [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x100c94e5 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x1e9a496a [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x2520d548 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x45de78b [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x8085fe1 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x6c9a89e3 [0203.769] RtlRandomEx (in: Seed=0x10bcfcd8 | out: Seed=0x10bcfcd8) returned 0x5fb6c407 [0203.776] ReadFile (in: hFile=0xbc0, lpBuffer=0x12fb0cc8, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x10bcfcd4, lpOverlapped=0x0 | out: lpBuffer=0x12fb0cc8*, lpNumberOfBytesRead=0x10bcfcd4*=0xec, lpOverlapped=0x0) returned 1 [0203.779] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.779] WriteFile (in: hFile=0xbc0, lpBuffer=0x12fb48d0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x10bcfcd8, lpOverlapped=0x0 | out: lpBuffer=0x12fb48d0*, lpNumberOfBytesWritten=0x10bcfcd8*=0xec, lpOverlapped=0x0) returned 1 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac90 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eacb8 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eacb8) returned 1 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb48d0) returned 1 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb0cc8) returned 1 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2fc0) returned 1 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28cb8 [0206.156] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.157] WriteFile (in: hFile=0xbc0, lpBuffer=0x675d6c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10bcfd60, lpOverlapped=0x0 | out: lpBuffer=0x675d6c0*, lpNumberOfBytesWritten=0x10bcfd60*=0x10c, lpOverlapped=0x0) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d6c0) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28ce8) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eacb8) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28cb8) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac90) returned 1 [0206.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0206.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0206.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0206.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40a20 [0206.531] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" [0206.531] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.ac3a86" [0206.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0x10bcfcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6786458 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786458) returned 1 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef7ba0) returned 1 [0208.964] NtQueryInformationFile (in: FileHandle=0xbc0, IoStatusBlock=0x10bcfcb0, FileInformation=0x10bcfcb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10bcfcb0, FileInformation=0x10bcfcb8) returned 0x0 [0208.964] NtSetInformationFile (FileHandle=0xbc0, IoStatusBlock=0x10bcfcb0, FileInformation=0x10bcfcb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a20) returned 1 [0209.302] FlushFileBuffers (hFile=0xbc0) returned 1 [0209.316] CloseHandle (hObject=0xbc0) returned 1 [0209.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x6768450 [0209.578] wcscpy (in: _Dest=0x6768450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0209.578] wcscat (in: _Dest=0x6768450, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\AC3A86-Readme.txt" [0209.578] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0209.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.118] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10bcfcf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10bcfcf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.121] CloseHandle (hObject=0x1bf8) returned 1 [0210.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768450) returned 1 [0210.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b520) returned 1 Thread: id = 6999 os_tid = 0x1934 [0196.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json")) returned 0x2020 [0196.737] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1280 [0203.780] GetFileSizeEx (in: hFile=0x1280, lpFileSize=0x652fc7c | out: lpFileSize=0x652fc7c*=241) returned 1 [0203.780] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.780] ReadFile (in: hFile=0x1280, lpBuffer=0x652fc58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x652fc68, lpOverlapped=0x0 | out: lpBuffer=0x652fc58*, lpNumberOfBytesRead=0x652fc68*=0x4, lpOverlapped=0x0) returned 1 [0203.782] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4be28 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0203.782] NtQuerySystemTime (in: CurrentTime=0x652fbf0 | out: CurrentTime=0x652fbf0*=132482711122620000) returned 0x0 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x1da4700d [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x2ab83399 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x71fdaed8 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x3c8a8445 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0xf9cee00 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x23552aaf [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x3303f7ff [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x4fd519e4 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x1105e339 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x47d4a9fd [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x5f1d87a7 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x45114e7c [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x4fec75f8 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x2f1f13df [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x69e7599a [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x141c9f26 [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x63b100ae [0203.782] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x34c2866d [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x77debe3c [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x7d8df379 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x5d224dbe [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x7a6dac32 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x538a4abe [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x402ff71 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x2e2bdb57 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x105f18b6 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x6f819e8c [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x4a84fbb2 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x1121520c [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x298b5604 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x72cdf479 [0203.783] RtlRandomEx (in: Seed=0x652fbe8 | out: Seed=0x652fbe8) returned 0x24c87b02 [0203.791] ReadFile (in: hFile=0x1280, lpBuffer=0x12fb84d8, nNumberOfBytesToRead=0xf1, lpNumberOfBytesRead=0x652fbe4, lpOverlapped=0x0 | out: lpBuffer=0x12fb84d8*, lpNumberOfBytesRead=0x652fbe4*=0xf1, lpOverlapped=0x0) returned 1 [0203.791] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.791] WriteFile (in: hFile=0x1280, lpBuffer=0x12fbc0e0*, nNumberOfBytesToWrite=0xf1, lpNumberOfBytesWritten=0x652fbe8, lpOverlapped=0x0 | out: lpBuffer=0x12fbc0e0*, lpNumberOfBytesWritten=0x652fbe8*=0xf1, lpOverlapped=0x0) returned 1 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eace0 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead08 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead08) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fbc0e0) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb84d8) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3008) returned 1 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28d18 [0206.164] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.164] WriteFile (in: hFile=0x1280, lpBuffer=0x675d490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x652fc70, lpOverlapped=0x0 | out: lpBuffer=0x675d490*, lpNumberOfBytesWritten=0x652fc70*=0x10c, lpOverlapped=0x0) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d490) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28d48) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead08) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28d18) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eace0) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0206.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0206.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40678 [0206.534] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" [0206.535] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.ac3a86" [0206.535] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0x652fbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777120 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777120) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef7ff0) returned 1 [0208.968] NtQueryInformationFile (in: FileHandle=0x1280, IoStatusBlock=0x652fbc0, FileInformation=0x652fbc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x652fbc0, FileInformation=0x652fbc8) returned 0x0 [0208.968] NtSetInformationFile (FileHandle=0x1280, IoStatusBlock=0x652fbc0, FileInformation=0x652fbc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0209.305] FlushFileBuffers (hFile=0x1280) returned 1 [0209.320] CloseHandle (hObject=0x1280) returned 1 [0209.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6768318 [0209.579] wcscpy (in: _Dest=0x6768318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0209.579] wcscat (in: _Dest=0x6768318, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\AC3A86-Readme.txt" [0209.579] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0209.579] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.123] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x652fc04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x652fc04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.125] CloseHandle (hObject=0x1bf8) returned 1 [0210.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768318) returned 1 [0210.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b648) returned 1 Thread: id = 7000 os_tid = 0x193c [0196.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json")) returned 0x2020 [0196.738] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0203.792] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbd0 [0203.793] GetFileSizeEx (in: hFile=0xbd0, lpFileSize=0xd1bfd44 | out: lpFileSize=0xd1bfd44*=263) returned 1 [0203.793] SetFilePointerEx (in: hFile=0xbd0, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.793] ReadFile (in: hFile=0xbd0, lpBuffer=0xd1bfd20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd1bfd30, lpOverlapped=0x0 | out: lpBuffer=0xd1bfd20*, lpNumberOfBytesRead=0xd1bfd30*=0x4, lpOverlapped=0x0) returned 1 [0203.795] SetFilePointerEx (in: hFile=0xbd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0a8 [0203.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0203.795] NtQuerySystemTime (in: CurrentTime=0xd1bfcb8 | out: CurrentTime=0xd1bfcb8*=132482711122776000) returned 0x0 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x6a1980b7 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x1433f376 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x655966df [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x519a321a [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x3e108d21 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x59839225 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x329d4c67 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x7f0c5efb [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x769e9cb9 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x2ef18ea7 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x618e68e2 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x615fb448 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x5cbcdb5e [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x5edea772 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x595042f5 [0203.795] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x30255ea1 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x67a82a5d [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x3e42b2e1 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x66f9046 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x45943cc5 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x15e338ff [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x1c68f79e [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x385b4a7d [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x2f01e9d2 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x581d0ab6 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x2c04e130 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x4c6a695d [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x47814afa [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x5cd282e3 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x7c29b483 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x7647e9d6 [0203.796] RtlRandomEx (in: Seed=0xd1bfcb0 | out: Seed=0xd1bfcb0) returned 0x6b362c17 [0203.806] ReadFile (in: hFile=0xbd0, lpBuffer=0x12fc0060, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xd1bfcac, lpOverlapped=0x0 | out: lpBuffer=0x12fc0060*, lpNumberOfBytesRead=0xd1bfcac*=0x107, lpOverlapped=0x0) returned 1 [0203.806] SetFilePointerEx (in: hFile=0xbd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.806] WriteFile (in: hFile=0xbd0, lpBuffer=0x12fc3c68*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xd1bfcb0, lpOverlapped=0x0 | out: lpBuffer=0x12fc3c68*, lpNumberOfBytesWritten=0xd1bfcb0*=0x107, lpOverlapped=0x0) returned 1 [0206.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0206.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0206.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0206.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc3c68) returned 1 [0206.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc0060) returned 1 [0206.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0206.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3050) returned 1 [0206.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0206.174] SetFilePointerEx (in: hFile=0xbd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.174] WriteFile (in: hFile=0xbd0, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1bfd38, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0xd1bfd38*=0x10c, lpOverlapped=0x0) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0206.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0206.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40f00 [0206.538] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" [0206.538] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.ac3a86" [0206.538] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xd1bfcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67865a0 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67865a0) returned 1 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef63e8) returned 1 [0208.971] NtQueryInformationFile (in: FileHandle=0xbd0, IoStatusBlock=0xd1bfc88, FileInformation=0xd1bfc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd1bfc88, FileInformation=0xd1bfc90) returned 0x0 [0208.971] NtSetInformationFile (FileHandle=0xbd0, IoStatusBlock=0xd1bfc88, FileInformation=0xd1bfc90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f00) returned 1 [0209.313] FlushFileBuffers (hFile=0xbd0) returned 1 [0209.325] CloseHandle (hObject=0xbd0) returned 1 [0209.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67681e0 [0209.581] wcscpy (in: _Dest=0x67681e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0209.581] wcscat (in: _Dest=0x67681e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\AC3A86-Readme.txt" [0209.581] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0209.582] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.127] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd1bfccc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd1bfccc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.129] CloseHandle (hObject=0x1bf8) returned 1 [0210.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67681e0) returned 1 [0210.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b770) returned 1 Thread: id = 7001 os_tid = 0x1940 [0196.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json")) returned 0x2020 [0196.738] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0203.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1144 [0203.807] GetFileSizeEx (in: hFile=0x1144, lpFileSize=0xf85fe24 | out: lpFileSize=0xf85fe24*=297) returned 1 [0203.807] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.807] ReadFile (in: hFile=0x1144, lpBuffer=0xf85fe00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf85fe10, lpOverlapped=0x0 | out: lpBuffer=0xf85fe00*, lpNumberOfBytesRead=0xf85fe10*=0x4, lpOverlapped=0x0) returned 1 [0203.809] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0203.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0203.810] NtQuerySystemTime (in: CurrentTime=0xf85fd98 | out: CurrentTime=0xf85fd98*=132482711122932000) returned 0x0 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x4b9ab7c5 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x50f1c544 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x7fea7016 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x1d85a2fe [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x7ab8931a [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x783cc2fa [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x40ea939f [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x7630e616 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x5988f0bd [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x1841e26 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x3ca2f8a3 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x432879e4 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x58967d23 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x3bccbce3 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x74ab4874 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x1ab1d455 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x5004461e [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x1b7368b8 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x74397046 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x68b9c02 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x3ad51e80 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x38e0d993 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x6cf3b60 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x4bce0ad [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x7932cbc0 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x5fb3119c [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x4290ff45 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x407d5c43 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x51ce0ce0 [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x4306690d [0203.810] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x1b93b9e0 [0203.811] RtlRandomEx (in: Seed=0xf85fd90 | out: Seed=0xf85fd90) returned 0x45263738 [0203.818] ReadFile (in: hFile=0x1144, lpBuffer=0x12fc7870, nNumberOfBytesToRead=0x129, lpNumberOfBytesRead=0xf85fd8c, lpOverlapped=0x0 | out: lpBuffer=0x12fc7870*, lpNumberOfBytesRead=0xf85fd8c*=0x129, lpOverlapped=0x0) returned 1 [0203.818] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.818] WriteFile (in: hFile=0x1144, lpBuffer=0x12fcb478*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0xf85fd90, lpOverlapped=0x0 | out: lpBuffer=0x12fcb478*, lpNumberOfBytesWritten=0xf85fd90*=0x129, lpOverlapped=0x0) returned 1 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead30 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead30) returned 1 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fcb478) returned 1 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fc7870) returned 1 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc68c0) returned 1 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3098) returned 1 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28d78 [0206.177] SetFilePointerEx (in: hFile=0x1144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.177] WriteFile (in: hFile=0x1144, lpBuffer=0x675d378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf85fe18, lpOverlapped=0x0 | out: lpBuffer=0x675d378*, lpNumberOfBytesWritten=0xf85fe18*=0x10c, lpOverlapped=0x0) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d378) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28da8) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead30) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28d78) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0206.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0206.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41650 [0206.541] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" [0206.541] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.ac3a86" [0206.541] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xf85fd90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67866e8 [0208.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67866e8) returned 1 [0208.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef61c0) returned 1 [0208.973] NtQueryInformationFile (in: FileHandle=0x1144, IoStatusBlock=0xf85fd68, FileInformation=0xf85fd70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf85fd68, FileInformation=0xf85fd70) returned 0x0 [0208.973] NtSetInformationFile (FileHandle=0x1144, IoStatusBlock=0xf85fd68, FileInformation=0xf85fd70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0209.319] FlushFileBuffers (hFile=0x1144) returned 1 [0209.328] CloseHandle (hObject=0x1144) returned 1 [0209.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x67680a8 [0209.585] wcscpy (in: _Dest=0x67680a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0209.585] wcscat (in: _Dest=0x67680a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\AC3A86-Readme.txt" [0209.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0209.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.131] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf85fdac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf85fdac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.133] CloseHandle (hObject=0x1bf8) returned 1 [0210.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67680a8) returned 1 [0210.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b898) returned 1 Thread: id = 7002 os_tid = 0x1948 [0196.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json")) returned 0x2020 [0196.739] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0203.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70 [0203.819] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0xffbf7e4 | out: lpFileSize=0xffbf7e4*=220) returned 1 [0203.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0203.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0203.819] NtQuerySystemTime (in: CurrentTime=0xffbf758 | out: CurrentTime=0xffbf758*=132482711122932000) returned 0x0 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x6a23eb91 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x2ce6c994 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x33bc9e77 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x28e2d9dc [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x35e8c91b [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x3ca2f8a3 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x2a771345 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x3fcf4a5f [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x87cdf16 [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x5576288c [0203.819] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x35a1dbd6 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0xa2f079f [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x4568c2be [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x5d03dabb [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x3da31114 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x64b5e117 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x387b814e [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x57c5d355 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x390eda2 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x456b3341 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x1e269cbc [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x261a1e8 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x50b50a20 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x78e8ba25 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x5eff13d5 [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x52109abc [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x52109abc [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x4569c4bd [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x2084972f [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x752a4f7b [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x5d03dabb [0203.820] RtlRandomEx (in: Seed=0xffbf750 | out: Seed=0xffbf750) returned 0x55229d73 [0203.829] ReadFile (in: hFile=0xf70, lpBuffer=0x12fcf080, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0xffbf74c, lpOverlapped=0x0 | out: lpBuffer=0x12fcf080*, lpNumberOfBytesRead=0xffbf74c*=0xdc, lpOverlapped=0x0) returned 1 [0203.831] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.831] WriteFile (in: hFile=0xf70, lpBuffer=0x12fd2c88*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0xffbf750, lpOverlapped=0x0 | out: lpBuffer=0x12fd2c88*, lpNumberOfBytesWritten=0xffbf750*=0xdc, lpOverlapped=0x0) returned 1 [0206.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead58 [0206.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead80 [0206.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead80) returned 1 [0206.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fd2c88) returned 1 [0206.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fcf080) returned 1 [0206.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0206.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c30e0) returned 1 [0206.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28dd8 [0206.179] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.179] WriteFile (in: hFile=0xf70, lpBuffer=0x675d260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xffbf7d8, lpOverlapped=0x0 | out: lpBuffer=0x675d260*, lpNumberOfBytesWritten=0xffbf7d8*=0x10c, lpOverlapped=0x0) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d260) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28e08) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead80) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28dd8) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead58) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0206.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0206.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41038 [0206.545] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" [0206.545] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.ac3a86" [0206.545] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0xffbf750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786830 [0208.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786830) returned 1 [0208.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6706258) returned 1 [0208.975] NtQueryInformationFile (in: FileHandle=0xf70, IoStatusBlock=0xffbf728, FileInformation=0xffbf730, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xffbf728, FileInformation=0xffbf730) returned 0x0 [0208.975] NtSetInformationFile (FileHandle=0xf70, IoStatusBlock=0xffbf728, FileInformation=0xffbf730, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41038) returned 1 [0209.322] FlushFileBuffers (hFile=0xf70) returned 1 [0209.330] CloseHandle (hObject=0xf70) returned 1 [0209.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767f70 [0209.587] wcscpy (in: _Dest=0x6767f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0209.587] wcscat (in: _Dest=0x6767f70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\AC3A86-Readme.txt" [0209.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0209.588] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.154] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xffbf76c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xffbf76c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.156] CloseHandle (hObject=0x1bf8) returned 1 [0210.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767f70) returned 1 [0210.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b9c0) returned 1 Thread: id = 7003 os_tid = 0x194c [0196.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json")) returned 0x2020 [0196.739] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0202.588] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x104c [0202.588] GetFileSizeEx (in: hFile=0x104c, lpFileSize=0x113cfa9c | out: lpFileSize=0x113cfa9c*=229) returned 1 [0202.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0202.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0202.588] NtQuerySystemTime (in: CurrentTime=0x113cfa10 | out: CurrentTime=0x113cfa10*=132482711110608000) returned 0x0 [0202.588] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x7c9ba539 [0202.588] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x35ec2c41 [0202.588] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x493078e3 [0202.588] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x21ef9e2b [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0xdcdaa02 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x173c8987 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x34a91594 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x4e2be7ae [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x4a73bed [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x1910dde6 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x4043baa4 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x188eb137 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x63be76ce [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x3881006d [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x5762f014 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x172618e0 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x696fd864 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x1a5b5f10 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x6d6f56ab [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x696fd864 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x4b14fcc6 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x7bff23d9 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x540c1b0c [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x71bdb842 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x68fef52 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x25ff53d1 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x26077a77 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x48dac763 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x6d1e4e80 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x24791afd [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x609dfac3 [0202.589] RtlRandomEx (in: Seed=0x113cfa08 | out: Seed=0x113cfa08) returned 0x180b39c4 [0202.597] ReadFile (in: hFile=0x104c, lpBuffer=0x692d930, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0x113cfa04, lpOverlapped=0x0 | out: lpBuffer=0x692d930*, lpNumberOfBytesRead=0x113cfa04*=0xe5, lpOverlapped=0x0) returned 1 [0202.599] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.599] WriteFile (in: hFile=0x104c, lpBuffer=0x6922518*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x113cfa08, lpOverlapped=0x0 | out: lpBuffer=0x6922518*, lpNumberOfBytesWritten=0x113cfa08*=0xe5, lpOverlapped=0x0) returned 1 [0204.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42970 [0204.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430f0 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6922518) returned 1 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x692d930) returned 1 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0204.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0204.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0204.574] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.574] WriteFile (in: hFile=0x104c, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x113cfa90, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x113cfa90*=0x10c, lpOverlapped=0x0) returned 1 [0206.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0206.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0206.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430f0) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42970) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a808) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a920) returned 1 [0206.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c7f8 [0206.219] wcscpy (in: _Dest=0x678c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" [0206.219] wcscat (in: _Dest=0x678c7f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.ac3a86" [0206.219] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0x113cfa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777640 [0206.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777640) returned 1 [0206.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8f08) returned 1 [0206.571] NtQueryInformationFile (in: FileHandle=0x104c, IoStatusBlock=0x113cf9e0, FileInformation=0x113cf9e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x113cf9e0, FileInformation=0x113cf9e8) returned 0x0 [0206.571] NtSetInformationFile (FileHandle=0x104c, IoStatusBlock=0x113cf9e0, FileInformation=0x113cf9e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c7f8) returned 1 [0209.035] FlushFileBuffers (hFile=0x104c) returned 1 [0209.055] CloseHandle (hObject=0x104c) returned 1 [0209.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0209.350] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0209.350] wcscat (in: _Dest=0x3d40a20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\AC3A86-Readme.txt" [0209.350] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0209.350] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.952] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x113cfa24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x113cfa24*=0x8b9, lpOverlapped=0x0) returned 1 [0209.954] CloseHandle (hObject=0x1bf8) returned 1 [0209.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a20) returned 1 [0209.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bae8) returned 1 Thread: id = 7004 os_tid = 0x1950 [0196.740] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json")) returned 0x2020 [0196.740] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0203.831] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20d0 [0203.832] GetFileSizeEx (in: hFile=0x20d0, lpFileSize=0x1150f874 | out: lpFileSize=0x1150f874*=231) returned 1 [0203.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb98 [0203.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0203.832] NtQuerySystemTime (in: CurrentTime=0x1150f7e8 | out: CurrentTime=0x1150f7e8*=132482711123088000) returned 0x0 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x53454978 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x4796ac19 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x30b366 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1e766528 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x308fd227 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x11c02587 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x48b17694 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x339426ef [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1ea24e5e [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x664a7e56 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1e47298d [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0xc701ade [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0xdbbb2e1 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x5a46945b [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x51a132c5 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x5926d64b [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x7312328 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x5150b412 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x36cc50d [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x425a24d9 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1da4700d [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x3380cbc5 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x4568c2be [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x390eda2 [0203.832] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x55a96878 [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1ea24e5e [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x6b7b3561 [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x541cf919 [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x42aa6dde [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x1d959977 [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x3f8dc1c5 [0203.833] RtlRandomEx (in: Seed=0x1150f7e0 | out: Seed=0x1150f7e0) returned 0x201e1c26 [0203.843] ReadFile (in: hFile=0x20d0, lpBuffer=0x12fd6890, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0x1150f7dc, lpOverlapped=0x0 | out: lpBuffer=0x12fd6890*, lpNumberOfBytesRead=0x1150f7dc*=0xe7, lpOverlapped=0x0) returned 1 [0203.845] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.845] WriteFile (in: hFile=0x20d0, lpBuffer=0x12fda498*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x1150f7e0, lpOverlapped=0x0 | out: lpBuffer=0x12fda498*, lpNumberOfBytesWritten=0x1150f7e0*=0xe7, lpOverlapped=0x0) returned 1 [0206.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eada8 [0206.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadd0 [0206.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadd0) returned 1 [0206.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fda498) returned 1 [0206.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fd6890) returned 1 [0206.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0206.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3128) returned 1 [0206.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28e38 [0206.183] SetFilePointerEx (in: hFile=0x20d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.183] WriteFile (in: hFile=0x20d0, lpBuffer=0x675e728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1150f868, lpOverlapped=0x0 | out: lpBuffer=0x675e728*, lpNumberOfBytesWritten=0x1150f868*=0x10c, lpOverlapped=0x0) returned 1 [0206.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0206.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eab8) returned 1 [0206.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadd0) returned 1 [0206.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28e38) returned 1 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eada8) returned 1 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d412a8 [0206.551] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" [0206.551] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.ac3a86" [0206.551] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0x1150f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6788ab8 [0208.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788ab8) returned 1 [0208.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6702a48) returned 1 [0208.978] NtQueryInformationFile (in: FileHandle=0x20d0, IoStatusBlock=0x1150f7b8, FileInformation=0x1150f7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1150f7b8, FileInformation=0x1150f7c0) returned 0x0 [0208.978] NtSetInformationFile (FileHandle=0x20d0, IoStatusBlock=0x1150f7b8, FileInformation=0x1150f7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0209.327] FlushFileBuffers (hFile=0x20d0) returned 1 [0209.334] CloseHandle (hObject=0x20d0) returned 1 [0209.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767e38 [0209.590] wcscpy (in: _Dest=0x6767e38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0209.590] wcscat (in: _Dest=0x6767e38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\AC3A86-Readme.txt" [0209.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0209.591] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.159] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1150f7fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1150f7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.161] CloseHandle (hObject=0x1bf8) returned 1 [0210.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767e38) returned 1 [0210.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bc10) returned 1 Thread: id = 7005 os_tid = 0x1954 [0196.740] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json")) returned 0x2020 [0196.741] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0203.845] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708 [0203.846] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0xf81f7bc | out: lpFileSize=0xf81f7bc*=220) returned 1 [0203.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c620 [0203.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0203.846] NtQuerySystemTime (in: CurrentTime=0xf81f730 | out: CurrentTime=0xf81f730*=132482711123244000) returned 0x0 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x5bace2ef [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3b069d47 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x541723bd [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x61d49f9 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x606aea94 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3b2159e3 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3b4c32a3 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x165f7c6e [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x681beee2 [0203.846] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x261a1e8 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x71279b22 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3ad51e80 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x425fd2dc [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x7c936297 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3e5b3e92 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x7ef93d0 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x425a24d9 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x43a598f4 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3de20513 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x67ef75c3 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x71563ee2 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x36cc50d [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x21f510a8 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x57a7adc5 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x3ba1e423 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x75ba9e90 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x4153c80c [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x7037f22d [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x7a2918f1 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x27099151 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x7605fdd2 [0203.847] RtlRandomEx (in: Seed=0xf81f728 | out: Seed=0xf81f728) returned 0x576072c6 [0203.855] ReadFile (in: hFile=0x1708, lpBuffer=0x12fde0a0, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0xf81f724, lpOverlapped=0x0 | out: lpBuffer=0x12fde0a0*, lpNumberOfBytesRead=0xf81f724*=0xdc, lpOverlapped=0x0) returned 1 [0203.857] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.857] WriteFile (in: hFile=0x1708, lpBuffer=0x12fe1ca8*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0xf81f728, lpOverlapped=0x0 | out: lpBuffer=0x12fe1ca8*, lpNumberOfBytesWritten=0xf81f728*=0xdc, lpOverlapped=0x0) returned 1 [0206.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344468 [0206.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344670 [0206.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0206.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe1ca8) returned 1 [0206.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fde0a0) returned 1 [0206.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0206.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3170) returned 1 [0206.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db39c0 [0206.392] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.392] WriteFile (in: hFile=0x1708, lpBuffer=0x6752840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf81f7b0, lpOverlapped=0x0 | out: lpBuffer=0x6752840*, lpNumberOfBytesWritten=0xf81f7b0*=0x10c, lpOverlapped=0x0) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344670) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344468) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0206.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b340 [0206.660] wcscpy (in: _Dest=0x678b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" [0206.660] wcscat (in: _Dest=0x678b340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.ac3a86" [0206.660] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xf81f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778830 [0209.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778830) returned 1 [0209.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efa048) returned 1 [0209.519] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0xf81f700, FileInformation=0xf81f708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf81f700, FileInformation=0xf81f708) returned 0x0 [0209.519] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0xf81f700, FileInformation=0xf81f708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b340) returned 1 [0209.720] FlushFileBuffers (hFile=0x1708) returned 1 [0209.725] CloseHandle (hObject=0x1708) returned 1 [0209.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9db30 [0209.792] wcscpy (in: _Dest=0x12e9db30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0209.792] wcscat (in: _Dest=0x12e9db30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\AC3A86-Readme.txt" [0209.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0209.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xee4 [0209.808] WriteFile (in: hFile=0xee4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf81f744, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf81f744*=0x8b9, lpOverlapped=0x0) returned 1 [0209.825] CloseHandle (hObject=0xee4) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9db30) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bd38) returned 1 Thread: id = 7006 os_tid = 0x1958 [0196.741] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json")) returned 0x2020 [0196.742] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0205.569] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d0 [0205.569] GetFileSizeEx (in: hFile=0x17d0, lpFileSize=0x11e4fc6c | out: lpFileSize=0x11e4fc6c*=268) returned 1 [0205.569] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.569] ReadFile (in: hFile=0x17d0, lpBuffer=0x11e4fc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11e4fc58, lpOverlapped=0x0 | out: lpBuffer=0x11e4fc48*, lpNumberOfBytesRead=0x11e4fc58*=0x4, lpOverlapped=0x0) returned 1 [0208.203] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c198 [0208.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce68 [0208.204] NtQuerySystemTime (in: CurrentTime=0x11e4fbe0 | out: CurrentTime=0x11e4fbe0*=132482711166768000) returned 0x0 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6729dc8 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x46d35c27 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x515e5fa [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x796c0af9 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x56be6f56 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6e827f7c [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x25208fd4 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x70762b5e [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x12285e5d [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x41fd7f58 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6751f2d7 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6a3cd630 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0xf2746af [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6856a148 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x41fd7f58 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x35390722 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0xbf0e7b3 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x51e5af7b [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x3411dd5b [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x43bdc1ae [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x3dd9a912 [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x4dc5eeff [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x290fb52c [0208.204] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x56d82376 [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x12aa70cf [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x6ed22a41 [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x78680b1c [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x5f42723b [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x4779ff60 [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x46102fa3 [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x56be6f56 [0208.205] RtlRandomEx (in: Seed=0x11e4fbd8 | out: Seed=0x11e4fbd8) returned 0x163eca0 [0208.216] ReadFile (in: hFile=0x17d0, lpBuffer=0x1305e0a0, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x11e4fbd4, lpOverlapped=0x0 | out: lpBuffer=0x1305e0a0*, lpNumberOfBytesRead=0x11e4fbd4*=0x10c, lpOverlapped=0x0) returned 1 [0208.216] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.216] WriteFile (in: hFile=0x17d0, lpBuffer=0x13061ca8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11e4fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13061ca8*, lpNumberOfBytesWritten=0x11e4fbd8*=0x10c, lpOverlapped=0x0) returned 1 [0215.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb58 [0215.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecae0 [0215.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecae0) returned 1 [0215.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13061ca8) returned 1 [0215.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1305e0a0) returned 1 [0215.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d058) returned 1 [0215.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea26d8) returned 1 [0215.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5818 [0215.639] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.639] WriteFile (in: hFile=0x17d0, lpBuffer=0x675d260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11e4fc60, lpOverlapped=0x0 | out: lpBuffer=0x675d260*, lpNumberOfBytesWritten=0x11e4fc60*=0x10c, lpOverlapped=0x0) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d260) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5848) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecae0) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5818) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb58) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c198) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaf0) returned 1 [0216.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49920) returned 1 [0216.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c0a8 [0216.479] wcscpy (in: _Dest=0x678c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" [0216.479] wcscat (in: _Dest=0x678c0a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.ac3a86" [0216.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x11e4fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6776ab8 [0216.888] FlushFileBuffers (hFile=0x17d0) returned 1 [0216.894] CloseHandle (hObject=0x17d0) returned 1 [0223.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0223.875] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0223.875] wcscat (in: _Dest=0x3d40a20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\AC3A86-Readme.txt" [0223.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0223.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.924] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11e4fbf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x11e4fbf4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.926] CloseHandle (hObject=0x16d4) returned 1 [0224.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a20) returned 1 [0224.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676be60) returned 1 Thread: id = 7007 os_tid = 0xbc0 [0196.742] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json")) returned 0x2020 [0196.742] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0204.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2330 [0204.046] GetFileSizeEx (in: hFile=0x2330, lpFileSize=0x1144fc94 | out: lpFileSize=0x1144fc94*=254) returned 1 [0204.046] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.046] ReadFile (in: hFile=0x2330, lpBuffer=0x1144fc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1144fc80, lpOverlapped=0x0 | out: lpBuffer=0x1144fc70*, lpNumberOfBytesRead=0x1144fc80*=0x4, lpOverlapped=0x0) returned 1 [0204.048] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0204.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0204.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0204.048] NtQuerySystemTime (in: CurrentTime=0x1144fc08 | out: CurrentTime=0x1144fc08*=132482711125272000) returned 0x0 [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x7629caab [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x3c8e286a [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x7629caab [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x399fbb23 [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x46839bbb [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x7e44b96c [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x5242a160 [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x51f81a2f [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x2ad85f61 [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x752d534a [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x1682cf67 [0204.048] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x7ed1cd45 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x5219d0fc [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x3a9a0fff [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x70a21c97 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x2249082a [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x3d96419c [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x5fc49eea [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x48fb2eeb [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x442cd342 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x57f8a28f [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x77f4e9f1 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x50630fb [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x68ac83bb [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x153f90d8 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x6ec2d6a3 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x1db7694f [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x5bd601b4 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x33918561 [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x646e597a [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x25908e1d [0204.049] RtlRandomEx (in: Seed=0x1144fc00 | out: Seed=0x1144fc00) returned 0x612adfcd [0204.057] ReadFile (in: hFile=0x2330, lpBuffer=0x130384d8, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x1144fbfc, lpOverlapped=0x0 | out: lpBuffer=0x130384d8*, lpNumberOfBytesRead=0x1144fbfc*=0xfe, lpOverlapped=0x0) returned 1 [0204.057] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.057] WriteFile (in: hFile=0x2330, lpBuffer=0x1303c0e0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x1144fc00, lpOverlapped=0x0 | out: lpBuffer=0x1303c0e0*, lpNumberOfBytesWritten=0x1144fc00*=0xfe, lpOverlapped=0x0) returned 1 [0206.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb078 [0206.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb0a0 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1303c0e0) returned 1 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130384d8) returned 1 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860a8) returned 1 [0206.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e738) returned 1 [0206.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ee18 [0206.446] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.446] WriteFile (in: hFile=0x2330, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1144fc88, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0x1144fc88*=0x10c, lpOverlapped=0x0) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ee48) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ee18) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb078) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fb0) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431b8) returned 1 [0206.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42df8) returned 1 [0206.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d40b58 [0206.684] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" [0206.684] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.ac3a86" [0206.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0x1144fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6788c00 [0209.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6788c00) returned 1 [0209.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efb800) returned 1 [0209.465] NtQueryInformationFile (in: FileHandle=0x2330, IoStatusBlock=0x1144fbd8, FileInformation=0x1144fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1144fbd8, FileInformation=0x1144fbe0) returned 0x0 [0209.465] NtSetInformationFile (FileHandle=0x2330, IoStatusBlock=0x1144fbd8, FileInformation=0x1144fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0209.709] FlushFileBuffers (hFile=0x2330) returned 1 [0209.716] CloseHandle (hObject=0x2330) returned 1 [0209.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d9f8 [0209.790] wcscpy (in: _Dest=0x12e9d9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0209.790] wcscat (in: _Dest=0x12e9d9f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\AC3A86-Readme.txt" [0209.790] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0209.791] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f9c [0209.808] WriteFile (in: hFile=0x1f9c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1144fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1144fc1c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.822] CloseHandle (hObject=0x1f9c) returned 1 [0209.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d9f8) returned 1 [0209.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bf88) returned 1 Thread: id = 7008 os_tid = 0x1a30 [0196.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json")) returned 0x2020 [0196.743] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0204.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f9c [0204.034] GetFileSizeEx (in: hFile=0x1f9c, lpFileSize=0x1252ff54 | out: lpFileSize=0x1252ff54*=246) returned 1 [0204.034] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.034] ReadFile (in: hFile=0x1f9c, lpBuffer=0x1252ff30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1252ff40, lpOverlapped=0x0 | out: lpBuffer=0x1252ff30*, lpNumberOfBytesRead=0x1252ff40*=0x4, lpOverlapped=0x0) returned 1 [0204.036] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0204.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42da8 [0204.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42fb0 [0204.036] NtQuerySystemTime (in: CurrentTime=0x1252fec8 | out: CurrentTime=0x1252fec8*=132482711125116000) returned 0x0 [0204.036] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x2ad85f61 [0204.036] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x5eb9a7c8 [0204.036] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x2bcc3308 [0204.036] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x61044b54 [0204.036] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x5ff72ab6 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x24632fda [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x442cd342 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x364ce83e [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x6e8c2e37 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x512b7ec9 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x696a82af [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x3a9a0fff [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x10c78cc1 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x4c3aff69 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x77b92e7 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x12f3fab0 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x685d4379 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x39d8bb2c [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x4b79e3d8 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0xabf0c94 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x6acd6a82 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x28c7b7f3 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x63b4a3c5 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0xf13702d [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x59e069bb [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x67453098 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x16dd6ccb [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x39f56ca3 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0xf5fbeaa [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x7e7dc5f8 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x3a2f4e00 [0204.037] RtlRandomEx (in: Seed=0x1252fec0 | out: Seed=0x1252fec0) returned 0x508491a9 [0204.045] ReadFile (in: hFile=0x1f9c, lpBuffer=0x6947d68, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x1252febc, lpOverlapped=0x0 | out: lpBuffer=0x6947d68*, lpNumberOfBytesRead=0x1252febc*=0xf6, lpOverlapped=0x0) returned 1 [0204.045] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.045] WriteFile (in: hFile=0x1f9c, lpBuffer=0x130348d0*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x1252fec0, lpOverlapped=0x0 | out: lpBuffer=0x130348d0*, lpNumberOfBytesWritten=0x1252fec0*=0xf6, lpOverlapped=0x0) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb028 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb050 [0206.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb050) returned 1 [0206.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130348d0) returned 1 [0206.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6947d68) returned 1 [0206.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0206.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4e7c8) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678edb8 [0206.442] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.443] WriteFile (in: hFile=0x1f9c, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1252ff48, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0x1252ff48*=0x10c, lpOverlapped=0x0) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ede8) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb050) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678edb8) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb028) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42da8) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42fd8) returned 1 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429c0) returned 1 [0206.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d419f8 [0206.682] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" [0206.682] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.ac3a86" [0206.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0x1252fec0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6776c00 [0209.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776c00) returned 1 [0209.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efb5d8) returned 1 [0209.462] NtQueryInformationFile (in: FileHandle=0x1f9c, IoStatusBlock=0x1252fe98, FileInformation=0x1252fea0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1252fe98, FileInformation=0x1252fea0) returned 0x0 [0209.462] NtSetInformationFile (FileHandle=0x1f9c, IoStatusBlock=0x1252fe98, FileInformation=0x1252fea0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419f8) returned 1 [0209.705] FlushFileBuffers (hFile=0x1f9c) returned 1 [0209.714] CloseHandle (hObject=0x1f9c) returned 1 [0209.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d8c0 [0209.789] wcscpy (in: _Dest=0x12e9d8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0209.789] wcscat (in: _Dest=0x12e9d8c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\AC3A86-Readme.txt" [0209.789] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0209.789] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2330 [0209.807] WriteFile (in: hFile=0x2330, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1252fedc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1252fedc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.819] CloseHandle (hObject=0x2330) returned 1 [0209.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d8c0) returned 1 [0209.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c0b0) returned 1 Thread: id = 7009 os_tid = 0x195c [0196.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json")) returned 0x2020 [0196.743] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0202.599] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2404 [0202.599] GetFileSizeEx (in: hFile=0x2404, lpFileSize=0xf75fed4 | out: lpFileSize=0xf75fed4*=229) returned 1 [0202.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae48 [0202.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0202.599] NtQuerySystemTime (in: CurrentTime=0xf75fe48 | out: CurrentTime=0xf75fe48*=132482711110764000) returned 0x0 [0202.599] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x56bf13d7 [0202.599] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x3441a08 [0202.599] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x48afeea3 [0202.599] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0xe8f1b18 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x53796360 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x17479156 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0xe046590 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x6beb9068 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x3564e32a [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x26077a77 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x6e352048 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x3a1260de [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x405ff28 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x31fafde2 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x5a6b0cb5 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x22cf069f [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x405ff28 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x241904ed [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x68250fcb [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0xbdbb27b [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x6a939d48 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x3396fa72 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x2be956cd [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x18d74926 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x24791afd [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x19ef0a5 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x6f7c19f4 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x37940ef3 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x49d520f3 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x741d38a3 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x5a6b0cb5 [0202.600] RtlRandomEx (in: Seed=0xf75fe40 | out: Seed=0xf75fe40) returned 0x4f8f5044 [0202.608] ReadFile (in: hFile=0x2404, lpBuffer=0x6926120, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0xf75fe3c, lpOverlapped=0x0 | out: lpBuffer=0x6926120*, lpNumberOfBytesRead=0xf75fe3c*=0xe5, lpOverlapped=0x0) returned 1 [0202.610] SetFilePointerEx (in: hFile=0x2404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.610] WriteFile (in: hFile=0x2404, lpBuffer=0x12f1e0a0*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0xf75fe40, lpOverlapped=0x0 | out: lpBuffer=0x12f1e0a0*, lpNumberOfBytesWritten=0xf75fe40*=0xe5, lpOverlapped=0x0) returned 1 [0204.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43028 [0204.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43230 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1e0a0) returned 1 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6926120) returned 1 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ebf8) returned 1 [0204.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0204.592] SetFilePointerEx (in: hFile=0x2404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.592] WriteFile (in: hFile=0x2404, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf75fec8, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0xf75fec8*=0x10c, lpOverlapped=0x0) returned 1 [0206.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0206.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0206.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43230) returned 1 [0206.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0206.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43028) returned 1 [0206.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae48) returned 1 [0206.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0206.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0206.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6766bf0 [0206.227] wcscpy (in: _Dest=0x6766bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" [0206.227] wcscat (in: _Dest=0x6766bf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.ac3a86" [0206.227] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0xf75fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778830 [0206.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778830) returned 1 [0206.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef56f8) returned 1 [0206.584] NtQueryInformationFile (in: FileHandle=0x2404, IoStatusBlock=0xf75fe18, FileInformation=0xf75fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf75fe18, FileInformation=0xf75fe20) returned 0x0 [0206.584] NtSetInformationFile (FileHandle=0x2404, IoStatusBlock=0xf75fe18, FileInformation=0xf75fe20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bf0) returned 1 [0209.046] FlushFileBuffers (hFile=0x2404) returned 1 [0209.065] CloseHandle (hObject=0x2404) returned 1 [0209.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0209.354] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0209.354] wcscat (in: _Dest=0x3d40060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\AC3A86-Readme.txt" [0209.354] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0209.354] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.962] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf75fe5c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf75fe5c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.964] CloseHandle (hObject=0x1bf8) returned 1 [0209.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0209.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c1d8) returned 1 Thread: id = 7010 os_tid = 0x1a34 [0196.744] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json")) returned 0x2020 [0196.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0203.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee4 [0203.993] GetFileSizeEx (in: hFile=0xee4, lpFileSize=0x10b8f7bc | out: lpFileSize=0x10b8f7bc*=225) returned 1 [0203.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0203.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43730 [0203.994] NtQuerySystemTime (in: CurrentTime=0x10b8f730 | out: CurrentTime=0x10b8f730*=132482711124648000) returned 0x0 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x331a1798 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x309f4a4c [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x526d2777 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x780bddc0 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x67d8f75b [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x5e56b333 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x20eccc63 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x612adfcd [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x15fcfe47 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x74361ec2 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x79bd8f4b [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x6d1874e8 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x3c8e286a [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x6fc199c5 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x5fc49eea [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0xf12efcd [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x340e39af [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x496f5b41 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x3a204563 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0xd889440 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x7fc74249 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x69c121dc [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x19973dc9 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x32be9b4f [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x6e28dcd9 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x6ec2d6a3 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x51391228 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x56f233a6 [0203.994] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x364ce83e [0203.995] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0xd2c3435 [0203.995] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x63b4a3c5 [0203.995] RtlRandomEx (in: Seed=0x10b8f728 | out: Seed=0x10b8f728) returned 0x780d246b [0204.032] ReadFile (in: hFile=0xee4, lpBuffer=0x13030cc8, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0x10b8f724, lpOverlapped=0x0 | out: lpBuffer=0x13030cc8*, lpNumberOfBytesRead=0x10b8f724*=0xe1, lpOverlapped=0x0) returned 1 [0204.034] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.034] WriteFile (in: hFile=0xee4, lpBuffer=0x6944160*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x10b8f728, lpOverlapped=0x0 | out: lpBuffer=0x6944160*, lpNumberOfBytesWritten=0x10b8f728*=0xe1, lpOverlapped=0x0) returned 1 [0206.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafd8 [0206.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb000 [0206.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb000) returned 1 [0206.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6944160) returned 1 [0206.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13030cc8) returned 1 [0206.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86030) returned 1 [0206.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3488) returned 1 [0206.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ed58 [0206.440] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.440] WriteFile (in: hFile=0xee4, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10b8f7b0, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0x10b8f7b0*=0x10c, lpOverlapped=0x0) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed88) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb000) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed58) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eafd8) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a88) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e48) returned 1 [0206.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43708) returned 1 [0206.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d418c0 [0206.681] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" [0206.681] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json.ac3a86" [0206.681] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0x10b8f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67774f8 [0209.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67774f8) returned 1 [0209.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efb3b0) returned 1 [0209.460] NtQueryInformationFile (in: FileHandle=0xee4, IoStatusBlock=0x10b8f700, FileInformation=0x10b8f708, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10b8f700, FileInformation=0x10b8f708) returned 0x0 [0209.460] NtSetInformationFile (FileHandle=0xee4, IoStatusBlock=0x10b8f700, FileInformation=0x10b8f708, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418c0) returned 1 [0209.702] FlushFileBuffers (hFile=0xee4) returned 1 [0209.713] CloseHandle (hObject=0xee4) returned 1 [0209.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d788 [0209.787] wcscpy (in: _Dest=0x12e9d788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0209.787] wcscat (in: _Dest=0x12e9d788, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\AC3A86-Readme.txt" [0209.787] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0209.787] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1708 [0209.806] WriteFile (in: hFile=0x1708, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10b8f744, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10b8f744*=0x8b9, lpOverlapped=0x0) returned 1 [0209.817] CloseHandle (hObject=0x1708) returned 1 [0209.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d788) returned 1 [0209.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c300) returned 1 Thread: id = 7011 os_tid = 0x1960 [0196.744] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json")) returned 0x2020 [0196.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0203.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x274 [0203.979] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x126af9ec | out: lpFileSize=0x126af9ec*=216) returned 1 [0203.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0203.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a88 [0203.980] NtQuerySystemTime (in: CurrentTime=0x126af960 | out: CurrentTime=0x126af960*=132482711124648000) returned 0x0 [0203.980] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x6e99142e [0203.980] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x2dcc4600 [0203.980] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x72c4d745 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x8e40bd6 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x5a7c9a47 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x39ca93e3 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x41207872 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x5863d2b6 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x17ee9b6c [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x2e389091 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x1cc4d3ef [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x7cc94aeb [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x2882876 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x62f85e0b [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x5447c764 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x636a36a0 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x3e911d5a [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x562b9527 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x7d4c7bdb [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x6c463c12 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x12f3fab0 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x5a9d82da [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x7aab45a0 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x23dc3560 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x75a21b8a [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x6ba4692d [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x18d8b7aa [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x66b7e145 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x7976fe74 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x335da79e [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x261b0299 [0203.981] RtlRandomEx (in: Seed=0x126af958 | out: Seed=0x126af958) returned 0x3a4b1e23 [0203.990] ReadFile (in: hFile=0x274, lpBuffer=0x130294b8, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x126af954, lpOverlapped=0x0 | out: lpBuffer=0x130294b8*, lpNumberOfBytesRead=0x126af954*=0xd8, lpOverlapped=0x0) returned 1 [0203.992] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.992] WriteFile (in: hFile=0x274, lpBuffer=0x1302d0c0*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x126af958, lpOverlapped=0x0 | out: lpBuffer=0x1302d0c0*, lpNumberOfBytesWritten=0x126af958*=0xd8, lpOverlapped=0x0) returned 1 [0206.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaf88 [0206.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafb0 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eafb0) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1302d0c0) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130294b8) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fb8) returned 1 [0206.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3440) returned 1 [0206.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ecf8 [0206.438] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.438] WriteFile (in: hFile=0x274, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x126af9e0, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0x126af9e0*=0x10c, lpOverlapped=0x0) returned 1 [0206.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0206.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ed28) returned 1 [0206.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eafb0) returned 1 [0206.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ecf8) returned 1 [0206.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf88) returned 1 [0206.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0206.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e70) returned 1 [0206.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ec0) returned 1 [0206.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41b30 [0206.679] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" [0206.679] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.ac3a86" [0206.679] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0x126af958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777f38 [0209.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777f38) returned 1 [0209.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efb188) returned 1 [0209.459] NtQueryInformationFile (in: FileHandle=0x274, IoStatusBlock=0x126af930, FileInformation=0x126af938, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x126af930, FileInformation=0x126af938) returned 0x0 [0209.459] NtSetInformationFile (FileHandle=0x274, IoStatusBlock=0x126af930, FileInformation=0x126af938, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b30) returned 1 [0209.698] FlushFileBuffers (hFile=0x274) returned 1 [0209.711] CloseHandle (hObject=0x274) returned 1 [0209.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d650 [0209.785] wcscpy (in: _Dest=0x12e9d650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0209.785] wcscat (in: _Dest=0x12e9d650, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\AC3A86-Readme.txt" [0209.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0209.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x246c [0209.806] WriteFile (in: hFile=0x246c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x126af974, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x126af974*=0x8b9, lpOverlapped=0x0) returned 1 [0209.814] CloseHandle (hObject=0x246c) returned 1 [0209.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d650) returned 1 [0209.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c428) returned 1 Thread: id = 7012 os_tid = 0xe70 [0196.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json")) returned 0x2020 [0196.745] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0203.963] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe24 [0203.963] GetFileSizeEx (in: hFile=0xe24, lpFileSize=0xebbfc4c | out: lpFileSize=0xebbfc4c*=250) returned 1 [0203.963] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.963] ReadFile (in: hFile=0xe24, lpBuffer=0xebbfc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xebbfc38, lpOverlapped=0x0 | out: lpBuffer=0xebbfc28*, lpNumberOfBytesRead=0xebbfc38*=0x4, lpOverlapped=0x0) returned 1 [0203.970] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0203.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0203.970] NtQuerySystemTime (in: CurrentTime=0xebbfbc0 | out: CurrentTime=0xebbfbc0*=132482711124492000) returned 0x0 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x512aad52 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x7f96fbf4 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x43aaa693 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x5c6fbec8 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x78f90335 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0xf2a6833 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x33c0e72a [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x19650679 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x493aa4c7 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x691a9831 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x5de76620 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x1d61ab3d [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x141c9f26 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x4cc76324 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x4c3aff69 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x7a843efe [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x6bc33589 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x19e66de0 [0203.970] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x6ba2f299 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x1898bf35 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x6f04ac2b [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x7d4c7bdb [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x722b0e07 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x1499fd16 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x72fbb9db [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x3d96419c [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x55a96878 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x13e9601c [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x50d97f6c [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x19cbef67 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x56dd303 [0203.971] RtlRandomEx (in: Seed=0xebbfbb8 | out: Seed=0xebbfbb8) returned 0x9796f83 [0203.979] ReadFile (in: hFile=0xe24, lpBuffer=0x13021ca8, nNumberOfBytesToRead=0xfa, lpNumberOfBytesRead=0xebbfbb4, lpOverlapped=0x0 | out: lpBuffer=0x13021ca8*, lpNumberOfBytesRead=0xebbfbb4*=0xfa, lpOverlapped=0x0) returned 1 [0203.979] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.979] WriteFile (in: hFile=0xe24, lpBuffer=0x130258b0*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0xebbfbb8, lpOverlapped=0x0 | out: lpBuffer=0x130258b0*, lpNumberOfBytesWritten=0xebbfbb8*=0xfa, lpOverlapped=0x0) returned 1 [0206.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaf38 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaf60 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf60) returned 1 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130258b0) returned 1 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13021ca8) returned 1 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85f40) returned 1 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c33f8) returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ec98 [0206.436] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.436] WriteFile (in: hFile=0xe24, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xebbfc40, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0xebbfc40*=0x10c, lpOverlapped=0x0) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ecc8) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf60) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec98) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf38) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0206.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41788 [0206.676] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" [0206.676] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.ac3a86" [0206.677] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0xebbfbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778080 [0209.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778080) returned 1 [0209.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efaf60) returned 1 [0209.457] NtQueryInformationFile (in: FileHandle=0xe24, IoStatusBlock=0xebbfb90, FileInformation=0xebbfb98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xebbfb90, FileInformation=0xebbfb98) returned 0x0 [0209.457] NtSetInformationFile (FileHandle=0xe24, IoStatusBlock=0xebbfb90, FileInformation=0xebbfb98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41788) returned 1 [0209.695] FlushFileBuffers (hFile=0xe24) returned 1 [0209.707] CloseHandle (hObject=0xe24) returned 1 [0209.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d518 [0209.783] wcscpy (in: _Dest=0x12e9d518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0209.783] wcscat (in: _Dest=0x12e9d518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\AC3A86-Readme.txt" [0209.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0209.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2188 [0209.805] WriteFile (in: hFile=0x2188, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xebbfbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xebbfbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.812] CloseHandle (hObject=0x2188) returned 1 [0209.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d518) returned 1 [0209.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c550) returned 1 Thread: id = 7013 os_tid = 0xe38 [0196.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0196.746] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0203.950] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d4 [0203.951] GetFileSizeEx (in: hFile=0x16d4, lpFileSize=0xf4ffb2c | out: lpFileSize=0xf4ffb2c*=233) returned 1 [0203.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0203.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0203.951] NtQuerySystemTime (in: CurrentTime=0xf4ffaa0 | out: CurrentTime=0xf4ffaa0*=132482711124336000) returned 0x0 [0203.951] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x762488a [0203.951] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x55e13bd6 [0203.951] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x586edf77 [0203.951] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x42570ae2 [0203.951] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x58dd4569 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x49fcb8e8 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x6cbe5c45 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x5635c7dd [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x23501dca [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x15f67bf6 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x14ccc665 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x7e7dc5f8 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0xf6e3561 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x20795fa1 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x65bad176 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x76e79acf [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x7865f06a [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x3386cedc [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x4005d58b [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x6d90ff3 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x2db2b3ce [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x2bb2b19b [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x40711e55 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x5bace2ef [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x36e58b3e [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x31abe4ae [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x7b16e60e [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x438193a [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x4e601a4 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x3750a6f8 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x3a3b0eb0 [0203.952] RtlRandomEx (in: Seed=0xf4ffa98 | out: Seed=0xf4ffa98) returned 0x3453395a [0203.960] ReadFile (in: hFile=0x16d4, lpBuffer=0x1301a498, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0xf4ffa94, lpOverlapped=0x0 | out: lpBuffer=0x1301a498*, lpNumberOfBytesRead=0xf4ffa94*=0xe9, lpOverlapped=0x0) returned 1 [0203.962] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.962] WriteFile (in: hFile=0x16d4, lpBuffer=0x1301e0a0*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0xf4ffa98, lpOverlapped=0x0 | out: lpBuffer=0x1301e0a0*, lpNumberOfBytesWritten=0xf4ffa98*=0xe9, lpOverlapped=0x0) returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaee8 [0206.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaf10 [0206.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf10) returned 1 [0206.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301e0a0) returned 1 [0206.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301a498) returned 1 [0206.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ec8) returned 1 [0206.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c33b0) returned 1 [0206.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ec38 [0206.434] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.434] WriteFile (in: hFile=0x16d4, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf4ffb20, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xf4ffb20*=0x10c, lpOverlapped=0x0) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec68) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf10) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec38) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaee8) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0206.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d41da0 [0206.673] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" [0206.673] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.ac3a86" [0206.674] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xf4ffa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce9c8 [0209.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce9c8) returned 1 [0209.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efad38) returned 1 [0209.455] NtQueryInformationFile (in: FileHandle=0x16d4, IoStatusBlock=0xf4ffa70, FileInformation=0xf4ffa78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf4ffa70, FileInformation=0xf4ffa78) returned 0x0 [0209.455] NtSetInformationFile (FileHandle=0x16d4, IoStatusBlock=0xf4ffa70, FileInformation=0xf4ffa78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41da0) returned 1 [0209.691] FlushFileBuffers (hFile=0x16d4) returned 1 [0209.703] CloseHandle (hObject=0x16d4) returned 1 [0209.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12e9d3e0 [0209.781] wcscpy (in: _Dest=0x12e9d3e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0209.781] wcscat (in: _Dest=0x12e9d3e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0209.781] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0209.781] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.311] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf4ffab4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf4ffab4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.313] CloseHandle (hObject=0x1bf8) returned 1 [0210.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d3e0) returned 1 [0210.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c678) returned 1 Thread: id = 7014 os_tid = 0xeac [0196.746] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0196.746] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0203.938] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc18 [0203.938] GetFileSizeEx (in: hFile=0xc18, lpFileSize=0x1266fa04 | out: lpFileSize=0x1266fa04*=232) returned 1 [0203.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0203.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bfb8 [0203.938] NtQuerySystemTime (in: CurrentTime=0x1266f978 | out: CurrentTime=0x1266f978*=132482711124180000) returned 0x0 [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x76889c6f [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x172e931c [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x3a75f6e3 [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0xb92054 [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x58af6882 [0203.938] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x3afc1430 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x7a3fec00 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x3a036091 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x2db418c4 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x2046be5c [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x310fbfad [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x310fbfad [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x1bb4710d [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x42570ae2 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x50d2f65b [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x630fc670 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x772f8304 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x23da0a57 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x2a88cc53 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x3777466d [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x2b6f62c3 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x8cd6bf0 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x794fab84 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x10d7d5db [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x309f4a4c [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x56fff16e [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x532b1c04 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x4d5d6ecc [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x51391228 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x38e0d993 [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x12569f7b [0203.939] RtlRandomEx (in: Seed=0x1266f970 | out: Seed=0x1266f970) returned 0x62c748c1 [0203.947] ReadFile (in: hFile=0xc18, lpBuffer=0x13012c88, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x1266f96c, lpOverlapped=0x0 | out: lpBuffer=0x13012c88*, lpNumberOfBytesRead=0x1266f96c*=0xe8, lpOverlapped=0x0) returned 1 [0203.950] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.950] WriteFile (in: hFile=0xc18, lpBuffer=0x13016890*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x1266f970, lpOverlapped=0x0 | out: lpBuffer=0x13016890*, lpNumberOfBytesWritten=0x1266f970*=0xe8, lpOverlapped=0x0) returned 1 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eae98 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaec0 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaec0) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13016890) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13012c88) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e50) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3368) returned 1 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ebd8 [0206.432] SetFilePointerEx (in: hFile=0xc18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.432] WriteFile (in: hFile=0xc18, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1266f9f8, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x1266f9f8*=0x10c, lpOverlapped=0x0) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec08) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaec0) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ebd8) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae98) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0206.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0206.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d41c68 [0206.671] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" [0206.671] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.ac3a86" [0206.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x1266f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce718 [0209.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce718) returned 1 [0209.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efab10) returned 1 [0209.453] NtQueryInformationFile (in: FileHandle=0xc18, IoStatusBlock=0x1266f948, FileInformation=0x1266f950, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1266f948, FileInformation=0x1266f950) returned 0x0 [0209.453] NtSetInformationFile (FileHandle=0xc18, IoStatusBlock=0x1266f948, FileInformation=0x1266f950, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41c68) returned 1 [0209.687] FlushFileBuffers (hFile=0xc18) returned 1 [0209.700] CloseHandle (hObject=0xc18) returned 1 [0209.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12e9d2a8 [0209.779] wcscpy (in: _Dest=0x12e9d2a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0209.779] wcscat (in: _Dest=0x12e9d2a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0209.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0209.779] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.315] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1266f98c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1266f98c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.317] CloseHandle (hObject=0x1bf8) returned 1 [0210.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d2a8) returned 1 [0210.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c7a0) returned 1 Thread: id = 7015 os_tid = 0xe00 [0196.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json")) returned 0x2020 [0196.747] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0203.421] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc [0203.422] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0xfe2fa64 | out: lpFileSize=0xfe2fa64*=240) returned 1 [0203.422] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.422] ReadFile (in: hFile=0xefc, lpBuffer=0xfe2fa40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfe2fa50, lpOverlapped=0x0 | out: lpBuffer=0xfe2fa40*, lpNumberOfBytesRead=0xfe2fa50*=0x4, lpOverlapped=0x0) returned 1 [0203.424] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1180 [0203.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef11a8 [0203.424] NtQuerySystemTime (in: CurrentTime=0xfe2f9d8 | out: CurrentTime=0xfe2f9d8*=132482711119032000) returned 0x0 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x69434ace [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x517245bd [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x521a2faf [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x3aaaf68a [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x618a8d9f [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x4deacbc3 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x380dbc30 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x552dc2fc [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x4d1a9c0 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x52afd90f [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x27235699 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x7d7e5f5f [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x5a4525d7 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x4fd91792 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x6028acab [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x733dd7ce [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x371c2095 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x61620f56 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x63955877 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x4cd0167d [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x379c9930 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x903fb94 [0203.424] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x1a774a7b [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x3225f84f [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x4eee578d [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x1adb21a8 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x426b8277 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x2af878a1 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0xcbaefe5 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x3e026d44 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x7699e028 [0203.425] RtlRandomEx (in: Seed=0xfe2f9d0 | out: Seed=0xfe2f9d0) returned 0x557438ab [0203.432] ReadFile (in: hFile=0xefc, lpBuffer=0x6940558, nNumberOfBytesToRead=0xf0, lpNumberOfBytesRead=0xfe2f9cc, lpOverlapped=0x0 | out: lpBuffer=0x6940558*, lpNumberOfBytesRead=0xfe2f9cc*=0xf0, lpOverlapped=0x0) returned 1 [0203.432] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.433] WriteFile (in: hFile=0xefc, lpBuffer=0x12f6d0c0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0xfe2f9d0, lpOverlapped=0x0 | out: lpBuffer=0x12f6d0c0*, lpNumberOfBytesWritten=0xfe2f9d0*=0xf0, lpOverlapped=0x0) returned 1 [0206.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4420 [0206.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea498 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f6d0c0) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6940558) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c28b8) returned 1 [0206.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f28358 [0206.042] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.042] WriteFile (in: hFile=0xefc, lpBuffer=0x30bc880*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfe2fa58, lpOverlapped=0x0 | out: lpBuffer=0x30bc880*, lpNumberOfBytesWritten=0xfe2fa58*=0x10c, lpOverlapped=0x0) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28388) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f28358) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4420) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1180) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef46f0) returned 1 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3fe8) returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x6766e60 [0206.454] wcscpy (in: _Dest=0x6766e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" [0206.454] wcscat (in: _Dest=0x6766e60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.ac3a86" [0206.454] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xfe2f9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777268 [0208.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777268) returned 1 [0208.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6828a88) returned 1 [0208.460] NtQueryInformationFile (in: FileHandle=0xefc, IoStatusBlock=0xfe2f9a8, FileInformation=0xfe2f9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfe2f9a8, FileInformation=0xfe2f9b0) returned 0x0 [0208.460] NtSetInformationFile (FileHandle=0xefc, IoStatusBlock=0xfe2f9a8, FileInformation=0xfe2f9b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e60) returned 1 [0209.388] FlushFileBuffers (hFile=0xefc) returned 1 [0209.402] CloseHandle (hObject=0xefc) returned 1 [0209.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9ca20 [0209.655] wcscpy (in: _Dest=0x12e9ca20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0209.655] wcscat (in: _Dest=0x12e9ca20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\AC3A86-Readme.txt" [0209.655] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0209.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.176] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfe2f9ec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfe2f9ec*=0x8b9, lpOverlapped=0x0) returned 1 [0210.178] CloseHandle (hObject=0x1bf8) returned 1 [0210.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ca20) returned 1 [0210.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c8c8) returned 1 Thread: id = 7016 os_tid = 0xc48 [0196.747] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json")) returned 0x2020 [0196.747] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0203.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1694 [0203.926] GetFileSizeEx (in: hFile=0x1694, lpFileSize=0x1279fe1c | out: lpFileSize=0x1279fe1c*=254) returned 1 [0203.926] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.926] ReadFile (in: hFile=0x1694, lpBuffer=0x1279fdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1279fe08, lpOverlapped=0x0 | out: lpBuffer=0x1279fdf8*, lpNumberOfBytesRead=0x1279fe08*=0x4, lpOverlapped=0x0) returned 1 [0203.928] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0203.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0203.928] NtQuerySystemTime (in: CurrentTime=0x1279fd90 | out: CurrentTime=0x1279fd90*=132482711124024000) returned 0x0 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x75ba9e90 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x7aab45a0 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x50c368cc [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x6cf3b60 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x17ee9b6c [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x1b281442 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x722b0e07 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0xce48593 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x14ccc665 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x26f80770 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x4e9df545 [0203.928] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x5aaaeb45 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x5aa3ec73 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x6eccc7d9 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x78f90335 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x106b9e3d [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x23da0a57 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x44927063 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x72487762 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x3f336b1c [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x233d26b9 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x682a570c [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x5b346bd [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x6b4497cd [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x6a4cee4d [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x26f80770 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x5dae28c5 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x1b281442 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x6d71de3d [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x9a1804 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x60857444 [0203.929] RtlRandomEx (in: Seed=0x1279fd88 | out: Seed=0x1279fd88) returned 0x95d9e7d [0203.937] ReadFile (in: hFile=0x1694, lpBuffer=0x1300b478, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x1279fd84, lpOverlapped=0x0 | out: lpBuffer=0x1300b478*, lpNumberOfBytesRead=0x1279fd84*=0xfe, lpOverlapped=0x0) returned 1 [0203.937] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.937] WriteFile (in: hFile=0x1694, lpBuffer=0x1300f080*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x1279fd88, lpOverlapped=0x0 | out: lpBuffer=0x1300f080*, lpNumberOfBytesWritten=0x1279fd88*=0xfe, lpOverlapped=0x0) returned 1 [0206.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eae48 [0206.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eae70 [0206.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae70) returned 1 [0206.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300f080) returned 1 [0206.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300b478) returned 1 [0206.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85dd8) returned 1 [0206.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3320) returned 1 [0206.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678eb78 [0206.429] SetFilePointerEx (in: hFile=0x1694, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.429] WriteFile (in: hFile=0x1694, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1279fe10, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0x1279fe10*=0x10c, lpOverlapped=0x0) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eba8) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae70) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eb78) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae48) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0206.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41170 [0206.669] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" [0206.669] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json.ac3a86" [0206.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0x1279fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777ca8 [0209.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777ca8) returned 1 [0209.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efa8e8) returned 1 [0209.452] NtQueryInformationFile (in: FileHandle=0x1694, IoStatusBlock=0x1279fd60, FileInformation=0x1279fd68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1279fd60, FileInformation=0x1279fd68) returned 0x0 [0209.452] NtSetInformationFile (FileHandle=0x1694, IoStatusBlock=0x1279fd60, FileInformation=0x1279fd68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41170) returned 1 [0209.685] FlushFileBuffers (hFile=0x1694) returned 1 [0209.697] CloseHandle (hObject=0x1694) returned 1 [0209.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9d170 [0209.777] wcscpy (in: _Dest=0x12e9d170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0209.777] wcscat (in: _Dest=0x12e9d170, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\AC3A86-Readme.txt" [0209.777] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0209.777] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.293] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1279fda4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1279fda4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.308] CloseHandle (hObject=0x1bf8) returned 1 [0210.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d170) returned 1 [0210.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22ea0) returned 1 Thread: id = 7017 os_tid = 0xb04 [0196.748] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json")) returned 0x2020 [0196.748] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0203.913] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c98 [0203.913] GetFileSizeEx (in: hFile=0x1c98, lpFileSize=0xc67fc34 | out: lpFileSize=0xc67fc34*=229) returned 1 [0203.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0203.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0203.913] NtQuerySystemTime (in: CurrentTime=0xc67fba8 | out: CurrentTime=0xc67fba8*=132482711123868000) returned 0x0 [0203.913] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x382fe9a3 [0203.913] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x3e8e738d [0203.913] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x56dd303 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x4ba83ae9 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x48977a45 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x54a47045 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x2e1390e7 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x7c936297 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x64e47971 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x54a50f1a [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x495641f5 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x428f79de [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x51a132c5 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x6c52d777 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x532b1c04 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x146e314 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x428f79de [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x55e13bd6 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0xc27dad7 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x99a0ca7 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x5a8a30a [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x2a64ffe5 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x2401d8f9 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x2135668 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x38e6b531 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x8c8504b [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x2c4a430e [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x3b0c7b2d [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x5eb9a7c8 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x349f96ec [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0x60b16645 [0203.914] RtlRandomEx (in: Seed=0xc67fba0 | out: Seed=0xc67fba0) returned 0xa8962f0 [0203.924] ReadFile (in: hFile=0x1c98, lpBuffer=0x13003c68, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0xc67fb9c, lpOverlapped=0x0 | out: lpBuffer=0x13003c68*, lpNumberOfBytesRead=0xc67fb9c*=0xe5, lpOverlapped=0x0) returned 1 [0203.925] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.925] WriteFile (in: hFile=0x1c98, lpBuffer=0x13007870*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0xc67fba0, lpOverlapped=0x0 | out: lpBuffer=0x13007870*, lpNumberOfBytesWritten=0xc67fba0*=0xe5, lpOverlapped=0x0) returned 1 [0206.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadf8 [0206.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eae20 [0206.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae20) returned 1 [0206.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13007870) returned 1 [0206.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13003c68) returned 1 [0206.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d60) returned 1 [0206.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c32d8) returned 1 [0206.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678eb18 [0206.426] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.426] WriteFile (in: hFile=0x1c98, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc67fc28, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0xc67fc28*=0x10c, lpOverlapped=0x0) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eb48) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae20) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eb18) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadf8) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0206.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0206.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41518 [0206.667] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" [0206.667] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.ac3a86" [0206.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0xc67fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777b60 [0209.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777b60) returned 1 [0209.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efa6c0) returned 1 [0209.450] NtQueryInformationFile (in: FileHandle=0x1c98, IoStatusBlock=0xc67fb78, FileInformation=0xc67fb80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc67fb78, FileInformation=0xc67fb80) returned 0x0 [0209.450] NtSetInformationFile (FileHandle=0x1c98, IoStatusBlock=0xc67fb78, FileInformation=0xc67fb80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41518) returned 1 [0209.681] FlushFileBuffers (hFile=0x1c98) returned 1 [0209.692] CloseHandle (hObject=0x1c98) returned 1 [0209.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9cdc8 [0209.775] wcscpy (in: _Dest=0x12e9cdc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0209.775] wcscat (in: _Dest=0x12e9cdc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\AC3A86-Readme.txt" [0209.775] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0209.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.289] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc67fbbc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc67fbbc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.291] CloseHandle (hObject=0x1bf8) returned 1 [0210.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cdc8) returned 1 [0210.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f22fc8) returned 1 Thread: id = 7018 os_tid = 0x150 [0196.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss")) returned 0x20 [0196.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0196.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.749] GetLastError () returned 0x5 [0196.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0196.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 7019 os_tid = 0xd9c [0196.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss")) returned 0x20 [0196.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0196.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.751] GetLastError () returned 0x5 [0196.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0196.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 7020 os_tid = 0x7e4 [0196.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss")) returned 0x20 [0196.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0196.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.752] GetLastError () returned 0x5 [0196.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0196.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c08c8) returned 1 Thread: id = 7021 os_tid = 0x11fc [0196.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0205.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0206.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 7022 os_tid = 0xaf8 [0196.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst")) returned 0x20 [0204.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0205.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.842] GetLastError () returned 0x5 [0206.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0206.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 7023 os_tid = 0xdd0 [0196.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss")) returned 0x20 [0203.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0204.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.837] GetLastError () returned 0x5 [0206.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0206.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 7024 os_tid = 0x17b8 [0196.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst")) returned 0x20 [0204.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0206.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.634] GetLastError () returned 0x5 [0208.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0221.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1548) returned 1 Thread: id = 7025 os_tid = 0xc24 [0196.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss")) returned 0x20 [0204.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0205.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.838] GetLastError () returned 0x5 [0206.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0207.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 Thread: id = 7026 os_tid = 0xac0 [0196.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst")) returned 0x20 [0204.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0205.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.839] GetLastError () returned 0x5 [0206.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0206.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0fa8) returned 1 Thread: id = 7027 os_tid = 0x139c [0196.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss")) returned 0x20 [0204.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0205.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.839] GetLastError () returned 0x5 [0206.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0206.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 7028 os_tid = 0x13a0 [0196.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst")) returned 0x20 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0205.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.839] GetLastError () returned 0x5 [0206.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0206.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 7029 os_tid = 0x1408 [0196.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0205.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.841] GetLastError () returned 0x5 [0206.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0206.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 Thread: id = 7030 os_tid = 0x19b4 [0196.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss")) returned 0x20 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0205.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.841] GetLastError () returned 0x5 [0206.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0206.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 7031 os_tid = 0x19b8 [0196.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx")) returned 0x20 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.839] GetLastError () returned 0x5 [0206.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0206.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 Thread: id = 7032 os_tid = 0x19bc [0196.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx")) returned 0x20 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.839] GetLastError () returned 0x5 [0206.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0206.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0508) returned 1 Thread: id = 7033 os_tid = 0x19c0 [0196.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss")) returned 0x20 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0206.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0be8) returned 1 Thread: id = 7034 os_tid = 0x19c8 [0196.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0206.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfec8) returned 1 Thread: id = 7035 os_tid = 0x1540 [0196.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0206.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 Thread: id = 7036 os_tid = 0x19d4 [0196.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0205.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0206.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c10e8) returned 1 Thread: id = 7037 os_tid = 0x19d8 [0196.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0205.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.840] GetLastError () returned 0x5 [0206.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0206.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1048) returned 1 Thread: id = 7038 os_tid = 0x1398 [0196.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 0x2020 [0196.758] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", dwFileAttributes=0x20) returned 1 [0203.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde0 [0203.900] GetFileSizeEx (in: hFile=0xde0, lpFileSize=0x1378f8bc | out: lpFileSize=0x1378f8bc*=523) returned 1 [0203.900] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x207, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.900] ReadFile (in: hFile=0xde0, lpBuffer=0x1378f898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1378f8a8, lpOverlapped=0x0 | out: lpBuffer=0x1378f898*, lpNumberOfBytesRead=0x1378f8a8*=0x4, lpOverlapped=0x0) returned 1 [0203.901] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0203.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0203.902] NtQuerySystemTime (in: CurrentTime=0x1378f830 | out: CurrentTime=0x1378f830*=132482711123868000) returned 0x0 [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x1c54424c [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x429fcf7f [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x1bed9410 [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x364744ed [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x6904085b [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0xcbea38a [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0xe6277c3 [0203.902] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x5eff13d5 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x94b96a0 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x591f5691 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x2a88cc53 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x1ffb74dd [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x545839b2 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x19fbdfd1 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0xcaa0786 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x4051c835 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x1f2af61a [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x7e4cc304 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x1e47298d [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x7d1ff324 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x28e72b00 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0xa8962f0 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x99a0ca7 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x498c9cd0 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x199d0c12 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x4af11596 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x3bf795a3 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x51e96e1e [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x57ef5c7f [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x56f233a6 [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x369dd2ee [0203.903] RtlRandomEx (in: Seed=0x1378f828 | out: Seed=0x1378f828) returned 0x7f1bbfd9 [0203.912] ReadFile (in: hFile=0xde0, lpBuffer=0x12ffc0e0, nNumberOfBytesToRead=0x20b, lpNumberOfBytesRead=0x1378f824, lpOverlapped=0x0 | out: lpBuffer=0x12ffc0e0*, lpNumberOfBytesRead=0x1378f824*=0x20b, lpOverlapped=0x0) returned 1 [0203.912] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.912] WriteFile (in: hFile=0xde0, lpBuffer=0x13000060*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x1378f828, lpOverlapped=0x0 | out: lpBuffer=0x13000060*, lpNumberOfBytesWritten=0x1378f828*=0x20b, lpOverlapped=0x0) returned 1 [0206.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344350 [0206.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344328 [0206.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344328) returned 1 [0206.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13000060) returned 1 [0206.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ffc0e0) returned 1 [0206.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ce8) returned 1 [0206.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3290) returned 1 [0206.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3750 [0206.423] SetFilePointerEx (in: hFile=0xde0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.424] WriteFile (in: hFile=0xde0, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1378f8b0, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0x1378f8b0*=0x10c, lpOverlapped=0x0) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eae8) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344328) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344350) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0210.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0210.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678be38 [0210.552] wcscpy (in: _Dest=0x678be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" [0210.552] wcscat (in: _Dest=0x678be38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.ac3a86" [0210.552] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.ac3a86", NtPathName=0x1378f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0210.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789ca8 [0210.556] FlushFileBuffers (hFile=0xde0) returned 1 [0210.564] CloseHandle (hObject=0xde0) returned 1 [0210.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67667a0 [0210.567] wcscpy (in: _Dest=0x67667a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0210.567] wcscat (in: _Dest=0x67667a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\AC3A86-Readme.txt" [0210.567] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\ac3a86-readme.txt")) returned 0xffffffff [0210.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xde0 [0210.575] WriteFile (in: hFile=0xde0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1378f844, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1378f844*=0x8b9, lpOverlapped=0x0) returned 1 [0210.577] CloseHandle (hObject=0xde0) returned 1 [0210.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67667a0) returned 1 [0210.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eab8) returned 1 Thread: id = 7039 os_tid = 0x1a1c [0196.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss")) returned 0x20 [0204.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0205.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.146] GetLastError () returned 0x5 [0207.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0208.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0f08) returned 1 Thread: id = 7040 os_tid = 0x1a20 [0196.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss")) returned 0x20 [0204.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) returned 0 [0205.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.995] GetLastError () returned 0x5 [0212.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) [0221.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0828) returned 1 Thread: id = 7041 os_tid = 0x1a24 [0196.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss")) returned 0x20 [0207.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0208.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) [0223.571] GetLastError () returned 0x5 [0223.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0226.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0288) returned 1 Thread: id = 7042 os_tid = 0x1a28 [0196.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst")) returned 0x20 [0207.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0208.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) [0223.581] GetLastError () returned 0x5 [0223.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0226.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0008) returned 1 Thread: id = 7043 os_tid = 0x1b3c [0196.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst")) returned 0x20 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0205.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.841] GetLastError () returned 0x5 [0206.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0206.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0d28) returned 1 Thread: id = 7044 os_tid = 0xa60 [0196.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst")) returned 0x20 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0205.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.841] GetLastError () returned 0x5 [0206.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0206.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1728) returned 1 Thread: id = 7045 os_tid = 0x1b44 [0196.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst")) returned 0x20 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0205.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.841] GetLastError () returned 0x5 [0206.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0206.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c17c8) returned 1 Thread: id = 7046 os_tid = 0x1bcc [0196.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss")) returned 0x20 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0205.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.842] GetLastError () returned 0x5 [0206.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0206.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1868) returned 1 Thread: id = 7047 os_tid = 0x1bec [0196.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss")) returned 0x20 [0204.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0205.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.842] GetLastError () returned 0x5 [0206.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0206.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1908) returned 1 Thread: id = 7048 os_tid = 0x1bf0 [0196.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss")) returned 0x20 [0207.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0208.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) [0223.585] GetLastError () returned 0x5 [0223.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0226.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c19a8) returned 1 Thread: id = 7049 os_tid = 0x1bf4 [0196.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss")) returned 0x20 [0200.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0201.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.294] GetLastError () returned 0x5 [0204.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0204.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1a48) returned 1 Thread: id = 7050 os_tid = 0x1bf8 [0196.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss")) returned 0x20 [0201.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0201.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.998] GetLastError () returned 0x5 [0205.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0206.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ae8) returned 1 Thread: id = 7051 os_tid = 0x1bfc [0196.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv")) returned 0x20 [0196.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0196.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.899] GetLastError () returned 0x5 [0196.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0196.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 7052 os_tid = 0x1c00 [0196.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml")) returned 0x20 [0196.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0196.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.901] GetLastError () returned 0x5 [0196.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0196.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 7053 os_tid = 0x1c04 [0196.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc")) returned 0x20 [0196.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0196.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.902] GetLastError () returned 0x5 [0196.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0196.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 7054 os_tid = 0x1c08 [0196.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc")) returned 0x20 [0196.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0196.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.903] GetLastError () returned 0x5 [0196.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0196.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 7055 os_tid = 0x1c0c [0196.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc")) returned 0x20 [0196.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0196.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.905] GetLastError () returned 0x5 [0196.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0196.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 7056 os_tid = 0x1c10 [0196.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc")) returned 0x20 [0196.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0196.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0196.906] GetLastError () returned 0x5 [0196.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0196.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 7057 os_tid = 0x1c14 [0196.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc")) returned 0x20 [0199.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0199.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.453] GetLastError () returned 0x5 [0199.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0199.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 7058 os_tid = 0x1c18 [0196.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv")) returned 0x20 [0199.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0199.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.454] GetLastError () returned 0x5 [0199.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0199.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 7059 os_tid = 0x1c1c [0196.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc")) returned 0x20 [0199.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0199.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.433] GetLastError () returned 0x5 [0199.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0199.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 7060 os_tid = 0x1b14 [0196.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc")) returned 0x20 [0199.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0199.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.451] GetLastError () returned 0x5 [0199.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0199.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 7061 os_tid = 0x1268 [0196.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc")) returned 0x20 [0199.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0199.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.456] GetLastError () returned 0x5 [0199.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0199.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 7062 os_tid = 0x126c [0196.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv")) returned 0x20 [0199.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0199.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.458] GetLastError () returned 0x5 [0199.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0199.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 7063 os_tid = 0x1ba4 [0196.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml")) returned 0x20 [0199.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0199.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.459] GetLastError () returned 0x5 [0199.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0199.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 7064 os_tid = 0x14f4 [0196.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc")) returned 0x20 [0199.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0199.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.450] GetLastError () returned 0x5 [0199.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0199.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 7065 os_tid = 0x1ba8 [0196.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc")) returned 0x20 [0199.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0199.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.460] GetLastError () returned 0x5 [0199.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0199.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 7066 os_tid = 0x1bac [0196.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc")) returned 0x20 [0199.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0199.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.461] GetLastError () returned 0x5 [0199.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0199.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 7067 os_tid = 0x72c [0196.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv")) returned 0x20 [0199.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0199.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.463] GetLastError () returned 0x5 [0199.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0199.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 7068 os_tid = 0x14f8 [0196.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml")) returned 0x20 [0199.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0199.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.449] GetLastError () returned 0x5 [0199.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0199.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 7069 os_tid = 0x14fc [0196.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc")) returned 0x20 [0199.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0199.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.447] GetLastError () returned 0x5 [0199.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0199.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 7070 os_tid = 0x1270 [0196.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc")) returned 0x20 [0199.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0199.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.464] GetLastError () returned 0x5 [0199.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0199.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 7071 os_tid = 0x1500 [0196.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc")) returned 0x20 [0199.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0199.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.465] GetLastError () returned 0x5 [0199.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0199.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 7072 os_tid = 0xb60 [0196.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv")) returned 0x20 [0199.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0199.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.467] GetLastError () returned 0x5 [0199.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0199.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 7073 os_tid = 0x1bb0 [0196.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc")) returned 0x20 [0199.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0199.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.468] GetLastError () returned 0x5 [0199.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0199.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 7074 os_tid = 0x1504 [0196.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc")) returned 0x20 [0199.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0199.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.432] GetLastError () returned 0x5 [0199.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0199.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 7075 os_tid = 0xb4c [0196.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv")) returned 0x20 [0199.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0199.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.446] GetLastError () returned 0x5 [0199.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0199.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f670) returned 1 Thread: id = 7076 os_tid = 0x1518 [0196.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml")) returned 0x20 [0199.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0199.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.445] GetLastError () returned 0x5 [0199.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0199.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 Thread: id = 7077 os_tid = 0x151c [0196.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc")) returned 0x20 [0199.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0199.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.443] GetLastError () returned 0x5 [0199.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0199.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 7078 os_tid = 0x1530 [0196.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc")) returned 0x20 [0199.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0199.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.442] GetLastError () returned 0x5 [0199.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0199.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 7079 os_tid = 0x714 [0196.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc")) returned 0x20 [0199.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0199.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.439] GetLastError () returned 0x5 [0199.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0199.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 Thread: id = 7080 os_tid = 0x155c [0196.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc")) returned 0x20 [0199.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0199.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.437] GetLastError () returned 0x5 [0199.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0199.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 7081 os_tid = 0x1568 [0196.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv")) returned 0x20 [0199.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0199.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.436] GetLastError () returned 0x5 [0199.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0199.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 7082 os_tid = 0x1bb4 [0196.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml")) returned 0x20 [0199.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0199.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.435] GetLastError () returned 0x5 [0199.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0199.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 7083 os_tid = 0x156c [0197.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc")) returned 0x20 [0199.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0199.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.092] GetLastError () returned 0x5 [0199.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0199.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 7084 os_tid = 0x1bb8 [0197.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6751148 [0197.244] wcscpy (in: _Dest=0x6751148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0197.244] wcscat (in: _Dest=0x6751148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0197.244] wcscat (in: _Dest=0x6751148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*" [0197.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0197.244] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0197.244] wcscmp (_String1=".", _String2=".") returned 0 [0197.244] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.244] wcscmp (_String1="..", _String2=".") returned 1 [0197.244] wcscmp (_String1="..", _String2="..") returned 0 [0197.244] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.244] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.244] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6778be0 [0197.245] wcscpy (in: _Dest=0x6778be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0197.245] wcscat (in: _Dest=0x6778be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0197.245] wcscat (in: _Dest=0x6778be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" [0199.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0199.286] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.286] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0199.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0199.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0199.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea50) returned 1 Thread: id = 7085 os_tid = 0x1bc4 [0197.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x67521b0 [0197.245] wcscpy (in: _Dest=0x67521b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0197.245] wcscat (in: _Dest=0x67521b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0197.245] wcscat (in: _Dest=0x67521b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*" [0197.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0197.245] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f780 [0197.246] wcscmp (_String1=".", _String2=".") returned 0 [0197.246] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.246] wcscmp (_String1="..", _String2=".") returned 1 [0197.246] wcscmp (_String1="..", _String2="..") returned 0 [0197.246] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6778d08 [0197.246] wcscpy (in: _Dest=0x6778d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0197.246] wcscat (in: _Dest=0x6778d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0197.246] wcscat (in: _Dest=0x6778d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" [0199.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0199.288] FindNextFileW (in: hFindFile=0x3f1f780, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.288] FindClose (in: hFindFile=0x3f1f780 | out: hFindFile=0x3f1f780) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44fd8) returned 1 Thread: id = 7086 os_tid = 0x1274 [0197.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6752610 [0197.247] wcscpy (in: _Dest=0x6752610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0197.247] wcscat (in: _Dest=0x6752610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0197.247] wcscat (in: _Dest=0x6752610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*" [0197.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0197.247] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0197.247] wcscmp (_String1=".", _String2=".") returned 0 [0197.247] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.247] wcscmp (_String1="..", _String2=".") returned 1 [0197.247] wcscmp (_String1="..", _String2="..") returned 0 [0197.247] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.247] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.248] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6778e30 [0197.248] wcscpy (in: _Dest=0x6778e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0197.248] wcscat (in: _Dest=0x6778e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0197.248] wcscat (in: _Dest=0x6778e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" [0199.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0199.290] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.290] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0199.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0199.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0199.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45818) returned 1 Thread: id = 7087 os_tid = 0x1278 [0197.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6750ab8 [0197.248] wcscpy (in: _Dest=0x6750ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0197.248] wcscat (in: _Dest=0x6750ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0197.248] wcscat (in: _Dest=0x6750ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*" [0197.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0197.248] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0197.249] wcscmp (_String1=".", _String2=".") returned 0 [0197.249] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.249] wcscmp (_String1="..", _String2=".") returned 1 [0197.249] wcscmp (_String1="..", _String2="..") returned 0 [0197.249] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.249] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.249] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6778f58 [0197.249] wcscpy (in: _Dest=0x6778f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0197.249] wcscat (in: _Dest=0x6778f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0197.249] wcscat (in: _Dest=0x6778f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" [0199.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6778f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0199.292] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.292] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0199.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0199.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0199.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a28) returned 1 Thread: id = 7088 os_tid = 0x12cc [0197.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6750bd0 [0197.250] wcscpy (in: _Dest=0x6750bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0197.250] wcscat (in: _Dest=0x6750bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0197.250] wcscat (in: _Dest=0x6750bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*" [0197.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0197.250] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0197.250] wcscmp (_String1=".", _String2=".") returned 0 [0197.250] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.250] wcscmp (_String1="..", _String2=".") returned 1 [0197.250] wcscmp (_String1="..", _String2="..") returned 0 [0197.251] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.251] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.251] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6779080 [0197.251] wcscpy (in: _Dest=0x6779080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0197.251] wcscat (in: _Dest=0x6779080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0197.251] wcscat (in: _Dest=0x6779080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" [0199.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6779080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0199.294] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.294] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0199.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0199.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0199.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44270) returned 1 Thread: id = 7089 os_tid = 0x1024 [0197.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x30bb5e8 [0197.251] wcscpy (in: _Dest=0x30bb5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0197.251] wcscat (in: _Dest=0x30bb5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0197.251] wcscat (in: _Dest=0x30bb5e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*" [0197.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0197.252] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f340 [0197.252] wcscmp (_String1=".", _String2=".") returned 0 [0197.252] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.252] wcscmp (_String1="..", _String2=".") returned 1 [0197.252] wcscmp (_String1="..", _String2="..") returned 0 [0197.252] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.252] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.252] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x67791a8 [0197.252] wcscpy (in: _Dest=0x67791a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0197.252] wcscat (in: _Dest=0x67791a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0197.252] wcscat (in: _Dest=0x67791a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" [0199.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67791a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0199.295] FindNextFileW (in: hFindFile=0x3f1f340, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.296] FindClose (in: hFindFile=0x3f1f340 | out: hFindFile=0x3f1f340) returned 1 [0199.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0199.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0199.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448a0) returned 1 Thread: id = 7090 os_tid = 0x7e0 [0197.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bb700 [0197.253] wcscpy (in: _Dest=0x30bb700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0197.253] wcscat (in: _Dest=0x30bb700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0197.253] wcscat (in: _Dest=0x30bb700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*" [0197.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0197.253] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f480 [0197.253] wcscmp (_String1=".", _String2=".") returned 0 [0197.253] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.254] wcscmp (_String1="..", _String2=".") returned 1 [0197.254] wcscmp (_String1="..", _String2="..") returned 0 [0197.254] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.254] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.254] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67792d0 [0197.254] wcscpy (in: _Dest=0x67792d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0197.254] wcscat (in: _Dest=0x67792d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0197.254] wcscat (in: _Dest=0x67792d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" [0199.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67792d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0199.297] FindNextFileW (in: hFindFile=0x3f1f480, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.298] FindClose (in: hFindFile=0x3f1f480 | out: hFindFile=0x3f1f480) returned 1 [0199.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0199.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0199.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bd0) returned 1 Thread: id = 7091 os_tid = 0x1848 [0197.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x30bb4d0 [0197.254] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0197.254] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0197.255] wcscat (in: _Dest=0x30bb4d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*" [0197.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0197.255] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f900 [0197.255] wcscmp (_String1=".", _String2=".") returned 0 [0197.255] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.255] wcscmp (_String1="..", _String2=".") returned 1 [0197.255] wcscmp (_String1="..", _String2="..") returned 0 [0197.255] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0197.255] wcscmp (_String1="messages.json", _String2=".") returned 1 [0197.255] wcscmp (_String1="messages.json", _String2="..") returned 1 [0197.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67793f8 [0197.255] wcscpy (in: _Dest=0x67793f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0197.255] wcscat (in: _Dest=0x67793f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0197.256] wcscat (in: _Dest=0x67793f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" [0199.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67793f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0199.300] FindNextFileW (in: hFindFile=0x3f1f900, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.300] FindClose (in: hFindFile=0x3f1f900 | out: hFindFile=0x3f1f900) returned 1 [0199.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0199.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0199.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 Thread: id = 7092 os_tid = 0x184c [0197.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0197.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0202.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be8 [0202.633] GetFileSizeEx (in: hFile=0x1be8, lpFileSize=0xba5f7f4 | out: lpFileSize=0xba5f7f4*=208) returned 1 [0202.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0202.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0202.633] NtQuerySystemTime (in: CurrentTime=0xba5f768 | out: CurrentTime=0xba5f768*=132482711111076000) returned 0x0 [0202.633] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x28d6ca4d [0202.633] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x123564ff [0202.633] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x6beb9068 [0202.633] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x52e218a7 [0202.633] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x5ecba463 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x676c78cd [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x7f429d86 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x4879f946 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x1231b8da [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x6548e875 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x50117cf3 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x485a3d23 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x69a7b343 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x37940ef3 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x180b39c4 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x1662e2a9 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x241904ed [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x5bfb11fe [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x25a1ca4f [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x41b05cc7 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x5a9fc630 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x7b3ce032 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x6ab5301f [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x47f163bc [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x7470ce60 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x50f3ce59 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x68fef52 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x511bd363 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x5a882177 [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x5b0b1e4f [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0x29462c8c [0202.634] RtlRandomEx (in: Seed=0xba5f760 | out: Seed=0xba5f760) returned 0xd50ec46 [0202.642] ReadFile (in: hFile=0x1be8, lpBuffer=0x12f1a498, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xba5f75c, lpOverlapped=0x0 | out: lpBuffer=0x12f1a498*, lpNumberOfBytesRead=0xba5f75c*=0xd0, lpOverlapped=0x0) returned 1 [0202.644] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.644] WriteFile (in: hFile=0x1be8, lpBuffer=0x12f00060*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xba5f760, lpOverlapped=0x0 | out: lpBuffer=0x12f00060*, lpNumberOfBytesWritten=0xba5f760*=0xd0, lpOverlapped=0x0) returned 1 [0205.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab28 [0205.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab00 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f00060) returned 1 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1a498) returned 1 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0205.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e8e0) returned 1 [0205.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x300550 [0205.628] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.628] WriteFile (in: hFile=0x1be8, lpBuffer=0x30bb700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xba5f7e8, lpOverlapped=0x0 | out: lpBuffer=0x30bb700*, lpNumberOfBytesWritten=0xba5f7e8*=0x10c, lpOverlapped=0x0) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb700) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ea8) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab00) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab28) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0208.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0208.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3dd8df0 [0208.741] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" [0208.741] wcscat (in: _Dest=0x3dd8df0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86" [0208.741] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0xba5f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6777268 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777268) returned 1 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a28b8) returned 1 [0209.896] NtQueryInformationFile (in: FileHandle=0x1be8, IoStatusBlock=0xba5f738, FileInformation=0xba5f740, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba5f738, FileInformation=0xba5f740) returned 0x0 [0209.896] NtSetInformationFile (FileHandle=0x1be8, IoStatusBlock=0xba5f738, FileInformation=0xba5f740, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8df0) returned 1 [0210.359] FlushFileBuffers (hFile=0x1be8) returned 1 [0210.415] CloseHandle (hObject=0x1be8) returned 1 [0210.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea1b30 [0210.417] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0210.417] wcscat (in: _Dest=0x12ea1b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0210.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0210.417] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1be8 [0210.418] WriteFile (in: hFile=0x1be8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xba5f77c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xba5f77c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.420] CloseHandle (hObject=0x1be8) returned 1 [0210.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0210.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23468) returned 1 Thread: id = 7093 os_tid = 0x1124 [0197.257] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0197.258] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0202.644] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe7c [0202.645] GetFileSizeEx (in: hFile=0xe7c, lpFileSize=0xef1f784 | out: lpFileSize=0xef1f784*=209) returned 1 [0202.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0202.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0202.645] NtQuerySystemTime (in: CurrentTime=0xef1f6f8 | out: CurrentTime=0xef1f6f8*=132482711111232000) returned 0x0 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x70c6b7d4 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x70c45945 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x619979bc [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x540c1b0c [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x123564ff [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x28478eb5 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x14c10de7 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x2faa404b [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x50117cf3 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x2b91cc7a [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x144a5f7d [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x66273829 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x52925e1b [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x2b83505c [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x480f7a70 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x383ee5d3 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x48afeea3 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x50ea0e53 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0xe71d354 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x55ae70c0 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x6b6999ad [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x7f429d86 [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x2b9c864a [0202.645] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x104dc53d [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x178549f0 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0xb93d6e6 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x1a061f4b [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x271bff31 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x6caaf0c3 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x3a4b09e7 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x6fae2e43 [0202.646] RtlRandomEx (in: Seed=0xef1f6f0 | out: Seed=0xef1f6f0) returned 0x5762f014 [0202.653] ReadFile (in: hFile=0xe7c, lpBuffer=0x12f03c68, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xef1f6ec, lpOverlapped=0x0 | out: lpBuffer=0x12f03c68*, lpNumberOfBytesRead=0xef1f6ec*=0xd1, lpOverlapped=0x0) returned 1 [0202.655] SetFilePointerEx (in: hFile=0xe7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.655] WriteFile (in: hFile=0xe7c, lpBuffer=0x12f3c0e0*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xef1f6f0, lpOverlapped=0x0 | out: lpBuffer=0x12f3c0e0*, lpNumberOfBytesWritten=0xef1f6f0*=0xd1, lpOverlapped=0x0) returned 1 [0205.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0205.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f3c0e0) returned 1 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f03c68) returned 1 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0205.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5ee80) returned 1 [0205.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acc98 [0205.624] SetFilePointerEx (in: hFile=0xe7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.624] WriteFile (in: hFile=0xe7c, lpBuffer=0x30bcce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xef1f778, lpOverlapped=0x0 | out: lpBuffer=0x30bcce0*, lpNumberOfBytesWritten=0xef1f778*=0x10c, lpOverlapped=0x0) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acb18) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acc98) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0208.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0208.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12ea08e8 [0208.777] wcscpy (in: _Dest=0x12ea08e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" [0208.777] wcscat (in: _Dest=0x12ea08e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.ac3a86" [0208.777] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.ac3a86", NtPathName=0xef1f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6789268 [0209.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789268) returned 1 [0209.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6917ef8) returned 1 [0209.899] NtQueryInformationFile (in: FileHandle=0xe7c, IoStatusBlock=0xef1f6c8, FileInformation=0xef1f6d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xef1f6c8, FileInformation=0xef1f6d0) returned 0x0 [0209.899] NtSetInformationFile (FileHandle=0xe7c, IoStatusBlock=0xef1f6c8, FileInformation=0xef1f6d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea08e8) returned 1 [0210.352] FlushFileBuffers (hFile=0xe7c) returned 1 [0210.377] CloseHandle (hObject=0xe7c) returned 1 [0210.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea1b30 [0210.379] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0210.379] wcscat (in: _Dest=0x12ea1b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" [0210.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\ac3a86-readme.txt")) returned 0xffffffff [0210.380] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe7c [0210.380] WriteFile (in: hFile=0xe7c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xef1f70c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xef1f70c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.382] CloseHandle (hObject=0xe7c) returned 1 [0210.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0210.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23340) returned 1 Thread: id = 7094 os_tid = 0x161c [0197.259] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0197.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0202.655] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbf4 [0202.656] GetFileSizeEx (in: hFile=0xbf4, lpFileSize=0x1019ff2c | out: lpFileSize=0x1019ff2c*=206) returned 1 [0202.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0202.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0202.656] NtQuerySystemTime (in: CurrentTime=0x1019fea0 | out: CurrentTime=0x1019fea0*=132482711111388000) returned 0x0 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x4f03aea3 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x1d8adc02 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x66273829 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x38db250f [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x6548e875 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x326b82be [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x4879f946 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x63a13843 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x60dfa77b [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x55b83c2e [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x755aeb87 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x120712cc [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x66a475c3 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2e20de63 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x856754 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x1b587520 [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x8d3722e [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2620b14a [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x4b98a16e [0202.656] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x300d6a9f [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x13e33723 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x3b813814 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0xd50ec46 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2335707e [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x7d9ef8cc [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x49a318e2 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2ad2815a [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x29462c8c [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x226da559 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2925c097 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x2036c511 [0202.657] RtlRandomEx (in: Seed=0x1019fe98 | out: Seed=0x1019fe98) returned 0x7106fc81 [0202.664] ReadFile (in: hFile=0xbf4, lpBuffer=0x12f348d0, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x1019fe94, lpOverlapped=0x0 | out: lpBuffer=0x12f348d0*, lpNumberOfBytesRead=0x1019fe94*=0xce, lpOverlapped=0x0) returned 1 [0202.666] SetFilePointerEx (in: hFile=0xbf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.666] WriteFile (in: hFile=0xbf4, lpBuffer=0x12f07870*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x1019fe98, lpOverlapped=0x0 | out: lpBuffer=0x12f07870*, lpNumberOfBytesWritten=0x1019fe98*=0xce, lpOverlapped=0x0) returned 1 [0205.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0205.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f07870) returned 1 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f348d0) returned 1 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0205.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a1b0) returned 1 [0205.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acd88 [0205.626] SetFilePointerEx (in: hFile=0xbf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.627] WriteFile (in: hFile=0xbf4, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1019ff20, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0x1019ff20*=0x10c, lpOverlapped=0x0) returned 1 [0208.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0208.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0208.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0208.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0208.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0208.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0208.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0208.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0208.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea19f8 [0208.818] wcscpy (in: _Dest=0x12ea19f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" [0208.818] wcscat (in: _Dest=0x12ea19f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.ac3a86" [0208.818] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0x1019fe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a1c8 [0209.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a1c8) returned 1 [0209.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919d28) returned 1 [0209.889] NtQueryInformationFile (in: FileHandle=0xbf4, IoStatusBlock=0x1019fe70, FileInformation=0x1019fe78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1019fe70, FileInformation=0x1019fe78) returned 0x0 [0209.889] NtSetInformationFile (FileHandle=0xbf4, IoStatusBlock=0x1019fe70, FileInformation=0x1019fe78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea19f8) returned 1 [0209.997] FlushFileBuffers (hFile=0xbf4) returned 1 [0210.000] CloseHandle (hObject=0xbf4) returned 1 [0210.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67648c8 [0210.001] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0210.001] wcscat (in: _Dest=0x67648c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" [0210.001] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0210.002] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbf4 [0210.003] WriteFile (in: hFile=0xbf4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1019feb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1019feb4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.005] CloseHandle (hObject=0xbf4) returned 1 [0210.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 [0210.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23218) returned 1 Thread: id = 7095 os_tid = 0x1620 [0197.260] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0197.260] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0202.666] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11b4 [0202.667] GetFileSizeEx (in: hFile=0x11b4, lpFileSize=0x3fffdac | out: lpFileSize=0x3fffdac*=206) returned 1 [0202.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0202.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0202.667] NtQuerySystemTime (in: CurrentTime=0x3fffd20 | out: CurrentTime=0x3fffd20*=132482711111388000) returned 0x0 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x7a425002 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x30463910 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x5057d1bb [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x3df62fe [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x41606604 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x23eba149 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x72a40bcf [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0xe71d354 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x47d9b2e3 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x12c548f7 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x13f1ef9 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x18e03cb6 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x13c7c380 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x300d6a9f [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x790bc47b [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x72b16bc3 [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x858bbdb [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x1b0ffc9d [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x3a1260de [0202.667] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x326b82be [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x1910dde6 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x104f62d6 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x47f1bdd3 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x1f0e808f [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x7f6efe62 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x746ce61c [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x6efe8e89 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x4b98a16e [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x69c2ca5c [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x3219fa12 [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x2b68a9ff [0202.668] RtlRandomEx (in: Seed=0x3fffd18 | out: Seed=0x3fffd18) returned 0x2b68a9ff [0202.676] ReadFile (in: hFile=0x11b4, lpBuffer=0x12f0b478, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x3fffd14, lpOverlapped=0x0 | out: lpBuffer=0x12f0b478*, lpNumberOfBytesRead=0x3fffd14*=0xce, lpOverlapped=0x0) returned 1 [0202.678] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.678] WriteFile (in: hFile=0x11b4, lpBuffer=0x12f658b0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x3fffd18, lpOverlapped=0x0 | out: lpBuffer=0x12f658b0*, lpNumberOfBytesWritten=0x3fffd18*=0xce, lpOverlapped=0x0) returned 1 [0205.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0205.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcb0 [0205.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0205.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f658b0) returned 1 [0205.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0b478) returned 1 [0205.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0205.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba28) returned 1 [0205.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27ed8 [0205.629] SetFilePointerEx (in: hFile=0x11b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.629] WriteFile (in: hFile=0x11b4, lpBuffer=0x30bb5e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3fffda0, lpOverlapped=0x0 | out: lpBuffer=0x30bb5e8*, lpNumberOfBytesWritten=0x3fffda0*=0x10c, lpOverlapped=0x0) returned 1 [0208.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e8) returned 1 [0208.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f08) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcb0) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ed8) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0208.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0208.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x12ea0b58 [0208.781] wcscpy (in: _Dest=0x12ea0b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" [0208.781] wcscat (in: _Dest=0x12ea0b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.ac3a86" [0208.781] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0x3fffd18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ceb20 [0209.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ceb20) returned 1 [0209.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6918348) returned 1 [0209.899] NtQueryInformationFile (in: FileHandle=0x11b4, IoStatusBlock=0x3fffcf0, FileInformation=0x3fffcf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3fffcf0, FileInformation=0x3fffcf8) returned 0x0 [0209.899] NtSetInformationFile (FileHandle=0x11b4, IoStatusBlock=0x3fffcf0, FileInformation=0x3fffcf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0b58) returned 1 [0210.348] FlushFileBuffers (hFile=0x11b4) returned 1 [0210.371] CloseHandle (hObject=0x11b4) returned 1 [0210.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b5b0 [0210.673] wcscpy (in: _Dest=0x678b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0210.673] wcscat (in: _Dest=0x678b5b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" [0210.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0210.674] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0210.674] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3fffd34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x3fffd34*=0x8b9, lpOverlapped=0x0) returned 1 [0210.676] CloseHandle (hObject=0x116c) returned 1 [0210.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b5b0) returned 1 [0210.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f230f0) returned 1 Thread: id = 7096 os_tid = 0xfc0 [0197.261] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0197.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0202.678] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1628 [0202.679] GetFileSizeEx (in: hFile=0x1628, lpFileSize=0xc6ffaa4 | out: lpFileSize=0xc6ffaa4*=216) returned 1 [0202.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0202.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0202.679] NtQuerySystemTime (in: CurrentTime=0xc6ffa18 | out: CurrentTime=0xc6ffa18*=132482711111544000) returned 0x0 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x52883fd5 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x288c67ea [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x4ee801ef [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x7d32e769 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x2620b14a [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x796ea89c [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x34e45e00 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x74cc884a [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x739f5a68 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x50faf5b1 [0202.679] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x2c1a43fa [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x763824ba [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x179ef71a [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x78a63df1 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x2f5dbda7 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0xb93d6e6 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x6f866bfd [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x5f6263b8 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x32666a31 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x6997e553 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x7d32e769 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x72b16bc3 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x7824b26a [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x66b94d7d [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x52e218a7 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x76596518 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x79bc1237 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x18e03cb6 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x3efd840d [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x587291e2 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x7a2c6a78 [0202.680] RtlRandomEx (in: Seed=0xc6ffa10 | out: Seed=0xc6ffa10) returned 0x3e2d62c3 [0202.688] ReadFile (in: hFile=0x1628, lpBuffer=0x12f748d0, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0xc6ffa0c, lpOverlapped=0x0 | out: lpBuffer=0x12f748d0*, lpNumberOfBytesRead=0xc6ffa0c*=0xd8, lpOverlapped=0x0) returned 1 [0202.702] SetFilePointerEx (in: hFile=0x1628, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.702] WriteFile (in: hFile=0x1628, lpBuffer=0x12f61ca8*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0xc6ffa10, lpOverlapped=0x0 | out: lpBuffer=0x12f61ca8*, lpNumberOfBytesWritten=0xc6ffa10*=0xd8, lpOverlapped=0x0) returned 1 [0205.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0205.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aab0 [0205.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0205.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f61ca8) returned 1 [0205.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f748d0) returned 1 [0205.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0205.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bbd8) returned 1 [0205.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27f38 [0205.632] SetFilePointerEx (in: hFile=0x1628, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.632] WriteFile (in: hFile=0x1628, lpBuffer=0x30bc650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc6ffa98, lpOverlapped=0x0 | out: lpBuffer=0x30bc650*, lpNumberOfBytesWritten=0xc6ffa98*=0x10c, lpOverlapped=0x0) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f68) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aab0) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f38) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5a8) returned 1 [0208.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0208.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1b30 [0208.825] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" [0208.825] wcscat (in: _Dest=0x12ea1b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.ac3a86" [0208.825] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0xc6ffa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a310 [0209.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678a310) returned 1 [0209.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919f50) returned 1 [0209.895] NtQueryInformationFile (in: FileHandle=0x1628, IoStatusBlock=0xc6ff9e8, FileInformation=0xc6ff9f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc6ff9e8, FileInformation=0xc6ff9f0) returned 0x0 [0209.895] NtSetInformationFile (FileHandle=0x1628, IoStatusBlock=0xc6ff9e8, FileInformation=0xc6ff9f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0210.362] FlushFileBuffers (hFile=0x1628) returned 1 [0210.429] CloseHandle (hObject=0x1628) returned 1 [0210.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3f23468 [0210.434] wcscpy (in: _Dest=0x3f23468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0210.434] wcscat (in: _Dest=0x3f23468, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" [0210.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0210.435] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1628 [0210.435] WriteFile (in: hFile=0x1628, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc6ffa2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc6ffa2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.438] CloseHandle (hObject=0x1628) returned 1 [0210.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23468) returned 1 [0210.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770ab8) returned 1 Thread: id = 7097 os_tid = 0x1628 [0197.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0197.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.702] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x580 [0202.702] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x80ffe4c | out: lpFileSize=0x80ffe4c*=216) returned 1 [0202.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0202.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca418 [0202.702] NtQuerySystemTime (in: CurrentTime=0x80ffdc0 | out: CurrentTime=0x80ffdc0*=132482711111856000) returned 0x0 [0202.702] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x5c35641a [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x9764ae [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x25d7afb8 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x475928a3 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x31b561d2 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x11854b91 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x59d34092 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x5a9fc630 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x4cd772fc [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x3f9b7035 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x2cb3a7ac [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x13603a1d [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x5cfb0897 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x488515e3 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x217702f8 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x3e0121b1 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x6121f886 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x7bccda92 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x69a7b343 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x4923f787 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x6738d372 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x3a5f814b [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x56d29fec [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x48048ba3 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x513e0cd3 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0xe01cfd2 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x2ea68986 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x4e5ab946 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x67a2d32 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x2f44a5fd [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0x5faf3752 [0202.703] RtlRandomEx (in: Seed=0x80ffdb8 | out: Seed=0x80ffdb8) returned 0xdf443be [0202.711] ReadFile (in: hFile=0x580, lpBuffer=0x69838f0, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x80ffdb4, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0x80ffdb4*=0xd8, lpOverlapped=0x0) returned 1 [0202.713] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.713] WriteFile (in: hFile=0x580, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x80ffdb8, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0x80ffdb8*=0xd8, lpOverlapped=0x0) returned 1 [0205.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0205.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c98 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0205.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a5e8) returned 1 [0205.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3638 [0205.586] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.586] WriteFile (in: hFile=0x580, lpBuffer=0x6750e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x80ffe40, lpOverlapped=0x0 | out: lpBuffer=0x6750e00*, lpNumberOfBytesWritten=0x80ffe40*=0x10c, lpOverlapped=0x0) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3968) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c98) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3638) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3f0) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0208.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca238) returned 1 [0208.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd9060 [0208.746] wcscpy (in: _Dest=0x3dd9060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" [0208.746] wcscat (in: _Dest=0x3dd9060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.ac3a86" [0208.746] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0x80ffdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67773b0 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67773b0) returned 1 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689d278) returned 1 [0209.896] NtQueryInformationFile (in: FileHandle=0x580, IoStatusBlock=0x80ffd90, FileInformation=0x80ffd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x80ffd90, FileInformation=0x80ffd98) returned 0x0 [0209.896] NtSetInformationFile (FileHandle=0x580, IoStatusBlock=0x80ffd90, FileInformation=0x80ffd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd9060) returned 1 [0210.332] FlushFileBuffers (hFile=0x580) returned 1 [0210.390] CloseHandle (hObject=0x580) returned 1 [0210.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6770d08 [0210.392] wcscpy (in: _Dest=0x6770d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0210.392] wcscat (in: _Dest=0x6770d08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" [0210.392] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0210.393] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580 [0210.393] WriteFile (in: hFile=0x580, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x80ffdd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x80ffdd4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.395] CloseHandle (hObject=0x580) returned 1 [0210.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770d08) returned 1 [0210.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770be0) returned 1 Thread: id = 7098 os_tid = 0x162c [0197.263] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0197.264] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0202.713] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914 [0202.714] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0xeacfc6c | out: lpFileSize=0xeacfc6c*=219) returned 1 [0202.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca418 [0202.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b30 [0202.714] NtQuerySystemTime (in: CurrentTime=0xeacfbe0 | out: CurrentTime=0xeacfbe0*=132482711111856000) returned 0x0 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x2c7ecd72 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x56d5a4ce [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0xfa263cd [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x3392b5cd [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0xae1d46d [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x64fa693b [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x384a5451 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x6530c11f [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x7bbb2443 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x14a8f642 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x70772b25 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x62926b87 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x70aa1bd4 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x2a6357f3 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x288c67ea [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x19c208b6 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x482f6463 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x17525dfb [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x44fa4c1 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x4d33c66 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x70772b25 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x2c04018c [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x4cd772fc [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x33d1303a [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x716afd79 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x305b62f4 [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x44a0af8f [0202.714] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x7c9344ff [0202.715] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x6c6f397c [0202.715] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x3cc4c5fe [0202.715] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x46f88ceb [0202.715] RtlRandomEx (in: Seed=0xeacfbd8 | out: Seed=0xeacfbd8) returned 0x4ced33a7 [0202.728] ReadFile (in: hFile=0x1914, lpBuffer=0x12f294b8, nNumberOfBytesToRead=0xdb, lpNumberOfBytesRead=0xeacfbd4, lpOverlapped=0x0 | out: lpBuffer=0x12f294b8*, lpNumberOfBytesRead=0xeacfbd4*=0xdb, lpOverlapped=0x0) returned 1 [0202.730] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.730] WriteFile (in: hFile=0x1914, lpBuffer=0x698b100*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0xeacfbd8, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesWritten=0xeacfbd8*=0xdb, lpOverlapped=0x0) returned 1 [0205.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca210 [0205.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca468 [0205.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0205.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0205.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f294b8) returned 1 [0205.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0205.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a7e0) returned 1 [0205.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3b48 [0205.590] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.590] WriteFile (in: hFile=0x1914, lpBuffer=0x6752728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeacfc60, lpOverlapped=0x0 | out: lpBuffer=0x6752728*, lpNumberOfBytesWritten=0xeacfc60*=0x10c, lpOverlapped=0x0) returned 1 [0208.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 [0208.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3a88) returned 1 [0208.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca468) returned 1 [0208.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b48) returned 1 [0208.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca210) returned 1 [0208.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca418) returned 1 [0208.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0208.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0208.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea1170 [0208.796] wcscpy (in: _Dest=0x12ea1170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" [0208.796] wcscat (in: _Dest=0x12ea1170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.ac3a86" [0208.796] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0xeacfbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67898d0 [0209.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67898d0) returned 1 [0209.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6918e10) returned 1 [0209.900] NtQueryInformationFile (in: FileHandle=0x1914, IoStatusBlock=0xeacfbb0, FileInformation=0xeacfbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xeacfbb0, FileInformation=0xeacfbb8) returned 0x0 [0209.900] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0xeacfbb0, FileInformation=0xeacfbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1170) returned 1 [0210.355] FlushFileBuffers (hFile=0x1914) returned 1 [0210.384] CloseHandle (hObject=0x1914) returned 1 [0210.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x12ea1b30 [0210.386] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0210.386] wcscat (in: _Dest=0x12ea1b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" [0210.386] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0210.386] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1914 [0210.387] WriteFile (in: hFile=0x1914, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xeacfbf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xeacfbf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.389] CloseHandle (hObject=0x1914) returned 1 [0210.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0210.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770d08) returned 1 Thread: id = 7099 os_tid = 0x4f8 [0197.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0197.265] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0202.730] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x182c [0202.730] GetFileSizeEx (in: hFile=0x182c, lpFileSize=0xcc3fa9c | out: lpFileSize=0xcc3fa9c*=215) returned 1 [0202.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b30 [0202.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca530 [0202.731] NtQuerySystemTime (in: CurrentTime=0xcc3fa10 | out: CurrentTime=0xcc3fa10*=132482711112012000) returned 0x0 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x690a9a0d [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x602df4fc [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x4043baa4 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x2838aa91 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x23eba149 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x1d412acb [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x403bbaf4 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x5ba4ccd7 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x796ea89c [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x2a6357f3 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x690a9a0d [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x463851ed [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x25bb53f3 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x58d418a8 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x7d9ef8cc [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x7ebe61c3 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x485a3d23 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x55f0b3de [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x499e6a7f [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x2bb2f3b7 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x547f0f25 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x100a3d10 [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0xc1eaf1d [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x75135a1b [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x5cb5ae5e [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0xf10ef1e [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x7b39bd1a [0202.731] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x2f5dbda7 [0202.732] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x6738d372 [0202.732] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x2d2c53f3 [0202.732] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x50faf5b1 [0202.732] RtlRandomEx (in: Seed=0xcc3fa08 | out: Seed=0xcc3fa08) returned 0x78b7e6c3 [0202.740] ReadFile (in: hFile=0x182c, lpBuffer=0x698ed08, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xcc3fa04, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesRead=0xcc3fa04*=0xd7, lpOverlapped=0x0) returned 1 [0202.741] SetFilePointerEx (in: hFile=0x182c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.741] WriteFile (in: hFile=0x182c, lpBuffer=0x6992910*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xcc3fa08, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesWritten=0xcc3fa08*=0xd7, lpOverlapped=0x0) returned 1 [0205.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0205.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca508 [0205.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0205.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0205.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0205.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0205.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b680) returned 1 [0205.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0205.592] SetFilePointerEx (in: hFile=0x182c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.592] WriteFile (in: hFile=0x182c, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc3fa90, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0xcc3fa90*=0x10c, lpOverlapped=0x0) returned 1 [0208.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0208.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0208.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca508) returned 1 [0208.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0208.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0208.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b30) returned 1 [0208.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2d8) returned 1 [0208.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0208.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8cb8 [0208.749] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" [0208.749] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.ac3a86" [0208.749] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xcc3fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67778d0 [0209.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67778d0) returned 1 [0209.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a39f8) returned 1 [0209.897] NtQueryInformationFile (in: FileHandle=0x182c, IoStatusBlock=0xcc3f9e0, FileInformation=0xcc3f9e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc3f9e0, FileInformation=0xcc3f9e8) returned 0x0 [0209.897] NtSetInformationFile (FileHandle=0x182c, IoStatusBlock=0xcc3f9e0, FileInformation=0xcc3f9e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8cb8) returned 1 [0210.334] FlushFileBuffers (hFile=0x182c) returned 1 [0210.397] CloseHandle (hObject=0x182c) returned 1 [0210.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6770be0 [0210.398] wcscpy (in: _Dest=0x6770be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0210.398] wcscat (in: _Dest=0x6770be0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" [0210.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0210.399] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x182c [0210.399] WriteFile (in: hFile=0x182c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc3fa24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcc3fa24*=0x8b9, lpOverlapped=0x0) returned 1 [0210.407] CloseHandle (hObject=0x182c) returned 1 [0210.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770be0) returned 1 [0210.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770e30) returned 1 Thread: id = 7100 os_tid = 0x1630 [0197.265] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0197.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0202.742] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1828 [0202.742] GetFileSizeEx (in: hFile=0x1828, lpFileSize=0xbedfac4 | out: lpFileSize=0xbedfac4*=221) returned 1 [0202.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca530 [0202.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4b8 [0202.742] NtQuerySystemTime (in: CurrentTime=0xbedfa38 | out: CurrentTime=0xbedfa38*=132482711112168000) returned 0x0 [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x4ee7437f [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x169d1ffc [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x5ba4ccd7 [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x2faa404b [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x49a318e2 [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x1c19f44 [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x7f6efe62 [0202.742] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x627e9837 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x140a0acc [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x6f866bfd [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x5334c6b2 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x1bf440c1 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x47840163 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x6062ccfb [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x472e4fe3 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x40ad8bae [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x59d34092 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x5cb1717f [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x742f44d5 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x56d29fec [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x2b278ef6 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x7f7f4682 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x2abfecae [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x3531f0cc [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x62926b87 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x390d9610 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x6694fb57 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x67a2d32 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x174b3d69 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x48c013f9 [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x6c6f397c [0202.743] RtlRandomEx (in: Seed=0xbedfa30 | out: Seed=0xbedfa30) returned 0x32a13754 [0202.751] ReadFile (in: hFile=0x1828, lpBuffer=0x6996518, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xbedfa2c, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesRead=0xbedfa2c*=0xdd, lpOverlapped=0x0) returned 1 [0202.752] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.752] WriteFile (in: hFile=0x1828, lpBuffer=0x699a120*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xbedfa30, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesWritten=0xbedfa30*=0xdd, lpOverlapped=0x0) returned 1 [0205.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0205.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3c8 [0205.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0205.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0205.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0205.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0205.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd4500) returned 1 [0205.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60e0 [0205.594] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.594] WriteFile (in: hFile=0x1828, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbedfab8, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0xbedfab8*=0x10c, lpOverlapped=0x0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60b0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca3c8) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60e0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca530) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4e0) returned 1 [0208.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca580) returned 1 [0208.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea12a8 [0208.800] wcscpy (in: _Dest=0x12ea12a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" [0208.800] wcscat (in: _Dest=0x12ea12a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.ac3a86" [0208.800] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xbedfa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789a18 [0209.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789a18) returned 1 [0209.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919038) returned 1 [0209.900] NtQueryInformationFile (in: FileHandle=0x1828, IoStatusBlock=0xbedfa08, FileInformation=0xbedfa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbedfa08, FileInformation=0xbedfa10) returned 0x0 [0209.900] NtSetInformationFile (FileHandle=0x1828, IoStatusBlock=0xbedfa08, FileInformation=0xbedfa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea12a8) returned 1 [0210.431] FlushFileBuffers (hFile=0x1828) returned 1 [0210.439] CloseHandle (hObject=0x1828) returned 1 [0210.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6770ab8 [0210.441] wcscpy (in: _Dest=0x6770ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0210.441] wcscat (in: _Dest=0x6770ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" [0210.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0210.441] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1828 [0210.443] WriteFile (in: hFile=0x1828, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbedfa4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbedfa4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.445] CloseHandle (hObject=0x1828) returned 1 [0210.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770ab8) returned 1 [0210.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770f58) returned 1 Thread: id = 7101 os_tid = 0xdc0 [0197.266] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0197.267] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.753] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1824 [0202.753] GetFileSizeEx (in: hFile=0x1824, lpFileSize=0x11cdfca4 | out: lpFileSize=0x11cdfca4*=279) returned 1 [0202.753] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.753] ReadFile (in: hFile=0x1824, lpBuffer=0x11cdfc80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11cdfc90, lpOverlapped=0x0 | out: lpBuffer=0x11cdfc80*, lpNumberOfBytesRead=0x11cdfc90*=0x4, lpOverlapped=0x0) returned 1 [0202.755] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca4b8 [0202.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca558 [0202.755] NtQuerySystemTime (in: CurrentTime=0x11cdfc18 | out: CurrentTime=0x11cdfc18*=132482711112324000) returned 0x0 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x7d0b729b [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x2813313c [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x174b3d69 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0xac6120a [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x19930a95 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x4f8afde2 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x57476310 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x140a0acc [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x5cb5ae5e [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x62cedc2d [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x233be9b7 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x15e4d273 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x32a13754 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x427d1164 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x73bd40ca [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x45516dd1 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x5c990e1 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x68f3c008 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x73cc2d7e [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x1f0e808f [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x4c4dcc4 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x13cf7c95 [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x52dc82cb [0202.755] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x264a0734 [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x2db6e403 [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x116ea61a [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x716afd79 [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0xb68d23f [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x51b3888a [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x1b693d47 [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x18d9ea01 [0202.756] RtlRandomEx (in: Seed=0x11cdfc10 | out: Seed=0x11cdfc10) returned 0x6674b34e [0202.764] ReadFile (in: hFile=0x1824, lpBuffer=0x699dd28, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0x11cdfc0c, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesRead=0x11cdfc0c*=0x117, lpOverlapped=0x0) returned 1 [0202.764] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.764] WriteFile (in: hFile=0x1824, lpBuffer=0x69a1930*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x11cdfc10, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesWritten=0x11cdfc10*=0x117, lpOverlapped=0x0) returned 1 [0205.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0205.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0205.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0205.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0205.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0205.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0205.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd44b8) returned 1 [0205.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0205.595] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.595] WriteFile (in: hFile=0x1824, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11cdfc98, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0x11cdfc98*=0x10c, lpOverlapped=0x0) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca4b8) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0208.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0208.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x2d2100 [0208.752] wcscpy (in: _Dest=0x2d2100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" [0208.752] wcscat (in: _Dest=0x2d2100, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.ac3a86" [0208.752] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0x11cdfc10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67785a0 [0209.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67785a0) returned 1 [0209.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a2018) returned 1 [0209.897] NtQueryInformationFile (in: FileHandle=0x1824, IoStatusBlock=0x11cdfbe8, FileInformation=0x11cdfbf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11cdfbe8, FileInformation=0x11cdfbf0) returned 0x0 [0209.897] NtSetInformationFile (FileHandle=0x1824, IoStatusBlock=0x11cdfbe8, FileInformation=0x11cdfbf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2100) returned 1 [0210.338] FlushFileBuffers (hFile=0x1824) returned 1 [0210.408] CloseHandle (hObject=0x1824) returned 1 [0210.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6770e30 [0210.410] wcscpy (in: _Dest=0x6770e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0210.410] wcscat (in: _Dest=0x6770e30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" [0210.410] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0210.411] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1824 [0210.411] WriteFile (in: hFile=0x1824, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11cdfc2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x11cdfc2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.413] CloseHandle (hObject=0x1824) returned 1 [0210.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770e30) returned 1 [0210.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771080) returned 1 Thread: id = 7102 os_tid = 0x11f8 [0197.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0197.268] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0202.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c00 [0202.764] GetFileSizeEx (in: hFile=0x1c00, lpFileSize=0xf4bfbec | out: lpFileSize=0xf4bfbec*=235) returned 1 [0202.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca558 [0202.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0202.765] NtQuerySystemTime (in: CurrentTime=0xf4bfb60 | out: CurrentTime=0xf4bfb60*=132482711112480000) returned 0x0 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x746ce61c [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x3cc4c5fe [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x75b4a943 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x54f8b4c9 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x77214054 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x7395bac6 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x5b580749 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x6664998f [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x46d89e63 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x47037723 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x4eb70aa2 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x295555f1 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x46b0a69d [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x40ad8bae [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x531b60ce [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x777c54e [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x5000c968 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x46adc5a3 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x4ecb7e16 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x311c5fd [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x75135a1b [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x173c8987 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x9276c18 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x1ae790a0 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x503d0a8 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x5093a9a2 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x73afdcea [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x2c13f929 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x411643e7 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0xdceadea [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x1299b0c2 [0202.765] RtlRandomEx (in: Seed=0xf4bfb58 | out: Seed=0xf4bfb58) returned 0x7f5d2183 [0202.773] ReadFile (in: hFile=0x1c00, lpBuffer=0x69a5538, nNumberOfBytesToRead=0xeb, lpNumberOfBytesRead=0xf4bfb54, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesRead=0xf4bfb54*=0xeb, lpOverlapped=0x0) returned 1 [0202.775] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.775] WriteFile (in: hFile=0x1c00, lpBuffer=0x69a9140*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0xf4bfb58, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesWritten=0xf4bfb58*=0xeb, lpOverlapped=0x0) returned 1 [0205.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ef8 [0205.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0205.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0205.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0205.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0205.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0205.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd38e8) returned 1 [0205.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0205.597] SetFilePointerEx (in: hFile=0x1c00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.597] WriteFile (in: hFile=0x1c00, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf4bfbe0, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0xf4bfbe0*=0x10c, lpOverlapped=0x0) returned 1 [0208.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0208.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0208.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0208.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0208.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6ef8) returned 1 [0208.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca558) returned 1 [0208.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9a18) returned 1 [0208.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0208.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea13e0 [0208.803] wcscpy (in: _Dest=0x12ea13e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" [0208.803] wcscat (in: _Dest=0x12ea13e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.ac3a86" [0208.803] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xf4bfb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789b60 [0209.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789b60) returned 1 [0209.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919260) returned 1 [0209.900] NtQueryInformationFile (in: FileHandle=0x1c00, IoStatusBlock=0xf4bfb30, FileInformation=0xf4bfb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf4bfb30, FileInformation=0xf4bfb38) returned 0x0 [0209.901] NtSetInformationFile (FileHandle=0x1c00, IoStatusBlock=0xf4bfb30, FileInformation=0xf4bfb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea13e0) returned 1 [0210.451] FlushFileBuffers (hFile=0x1c00) returned 1 [0210.453] CloseHandle (hObject=0x1c00) returned 1 [0210.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6770f58 [0210.455] wcscpy (in: _Dest=0x6770f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0210.455] wcscat (in: _Dest=0x6770f58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" [0210.455] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0210.455] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c00 [0210.456] WriteFile (in: hFile=0x1c00, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf4bfb74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf4bfb74*=0x8b9, lpOverlapped=0x0) returned 1 [0210.458] CloseHandle (hObject=0x1c00) returned 1 [0210.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6770f58) returned 1 [0210.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67711a8) returned 1 Thread: id = 7103 os_tid = 0x12f8 [0197.268] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0197.269] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0202.420] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x76c [0202.421] GetFileSizeEx (in: hFile=0x76c, lpFileSize=0xba1f78c | out: lpFileSize=0xba1f78c*=209) returned 1 [0202.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a8d0 [0202.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aec0 [0202.421] NtQuerySystemTime (in: CurrentTime=0xba1f700 | out: CurrentTime=0xba1f700*=132482711109048000) returned 0x0 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x479a0576 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x5b9e1236 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x26aafdcd [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x9928666 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x6d8c5e00 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x21606d55 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x46856e1e [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x433179de [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x704b100e [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x5cf7c7b4 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x40460007 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x7708dd77 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x51faad1 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x9e4cb46 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x1f0056d0 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x276945c4 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x26ef0770 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x1c701457 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x7274c634 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x6d392f1 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x20726ea4 [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x685337fc [0202.421] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x34eb96c0 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0xc6bee31 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x2e450fae [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x3261cc1 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x28478eb5 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x1ab8deb8 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x203c8844 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x395971b3 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x53b28c96 [0202.422] RtlRandomEx (in: Seed=0xba1f6f8 | out: Seed=0xba1f6f8) returned 0x6dbe3134 [0202.429] ReadFile (in: hFile=0x76c, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xba1f6f4, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xba1f6f4*=0xd1, lpOverlapped=0x0) returned 1 [0202.431] SetFilePointerEx (in: hFile=0x76c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.431] WriteFile (in: hFile=0x76c, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xba1f6f8, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xba1f6f8*=0xd1, lpOverlapped=0x0) returned 1 [0205.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0205.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0205.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0205.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0205.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0205.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0205.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0205.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5330 [0205.598] SetFilePointerEx (in: hFile=0x76c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.598] WriteFile (in: hFile=0x76c, lpBuffer=0x6751f80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xba1f780, lpOverlapped=0x0 | out: lpBuffer=0x6751f80*, lpNumberOfBytesWritten=0xba1f780*=0x10c, lpOverlapped=0x0) returned 1 [0208.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 [0208.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0208.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0208.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0208.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0208.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a8d0) returned 1 [0208.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b3c0) returned 1 [0208.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0208.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0060 [0208.759] wcscpy (in: _Dest=0x12ea0060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" [0208.759] wcscat (in: _Dest=0x12ea0060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.ac3a86" [0208.759] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0xba1f6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0209.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67781c8) returned 1 [0209.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a4910) returned 1 [0209.898] NtQueryInformationFile (in: FileHandle=0x76c, IoStatusBlock=0xba1f6d0, FileInformation=0xba1f6d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba1f6d0, FileInformation=0xba1f6d8) returned 0x0 [0209.898] NtSetInformationFile (FileHandle=0x76c, IoStatusBlock=0xba1f6d0, FileInformation=0xba1f6d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0060) returned 1 [0210.341] FlushFileBuffers (hFile=0x76c) returned 1 [0210.364] CloseHandle (hObject=0x76c) returned 1 [0210.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c7a0 [0210.366] wcscpy (in: _Dest=0x676c7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0210.366] wcscat (in: _Dest=0x676c7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" [0210.366] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0210.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x76c [0210.367] WriteFile (in: hFile=0x76c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xba1f714, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xba1f714*=0x8b9, lpOverlapped=0x0) returned 1 [0210.369] CloseHandle (hObject=0x76c) returned 1 [0210.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c7a0) returned 1 [0210.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67712d0) returned 1 Thread: id = 7104 os_tid = 0x10c8 [0197.269] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json")) returned 0x2020 [0197.270] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.431] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ffc [0202.431] GetFileSizeEx (in: hFile=0x1ffc, lpFileSize=0xd54f8dc | out: lpFileSize=0xd54f8dc*=245) returned 1 [0202.431] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0xf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.431] ReadFile (in: hFile=0x1ffc, lpBuffer=0xd54f8b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd54f8c8, lpOverlapped=0x0 | out: lpBuffer=0xd54f8b8*, lpNumberOfBytesRead=0xd54f8c8*=0x4, lpOverlapped=0x0) returned 1 [0202.433] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aec0 [0202.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0202.433] NtQuerySystemTime (in: CurrentTime=0xd54f850 | out: CurrentTime=0xd54f850*=132482711109048000) returned 0x0 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0xf67dca9 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x427d93c3 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x79ca0e68 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x5c9b6f10 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x5666e764 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x23c5fd11 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x3f24e581 [0202.433] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x3057206e [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x27384fc5 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0xa9e419e [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x40df62a6 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x7c67f0d6 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x454f0d23 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x22df41 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x23c5fd11 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x6b2ebbe3 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x3e0a63e4 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x1f0c5d46 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x4580d143 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x1cf14904 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x380ca4f7 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x1e91a2 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x234c0ae1 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x58980d7a [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x21606d55 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x738cd40e [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x4317aed [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x57321f57 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x20726ea4 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x6332a484 [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x7ffb142a [0202.434] RtlRandomEx (in: Seed=0xd54f848 | out: Seed=0xd54f848) returned 0x79c58a67 [0202.442] ReadFile (in: hFile=0x1ffc, lpBuffer=0x6730308, nNumberOfBytesToRead=0xf5, lpNumberOfBytesRead=0xd54f844, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0xd54f844*=0xf5, lpOverlapped=0x0) returned 1 [0202.442] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.442] WriteFile (in: hFile=0x1ffc, lpBuffer=0x6728af8*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0xd54f848, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesWritten=0xd54f848*=0xf5, lpOverlapped=0x0) returned 1 [0205.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43258 [0205.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b78 [0205.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0205.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0205.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0205.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0205.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300978) returned 1 [0205.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53f0 [0205.603] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.603] WriteFile (in: hFile=0x1ffc, lpBuffer=0x6751148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd54f8d0, lpOverlapped=0x0 | out: lpBuffer=0x6751148*, lpNumberOfBytesWritten=0xd54f8d0*=0x10c, lpOverlapped=0x0) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b78) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43258) returned 1 [0208.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aec0) returned 1 [0208.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0208.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa60) returned 1 [0208.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0198 [0208.762] wcscpy (in: _Dest=0x12ea0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" [0208.762] wcscat (in: _Dest=0x12ea0198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.ac3a86" [0208.762] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xd54f848, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777df0 [0209.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777df0) returned 1 [0209.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68a9b00) returned 1 [0209.173] NtQueryInformationFile (in: FileHandle=0x1ffc, IoStatusBlock=0xd54f820, FileInformation=0xd54f828, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd54f820, FileInformation=0xd54f828) returned 0x0 [0209.173] NtSetInformationFile (FileHandle=0x1ffc, IoStatusBlock=0xd54f820, FileInformation=0xd54f828, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0198) returned 1 [0209.380] FlushFileBuffers (hFile=0x1ffc) returned 1 [0209.390] CloseHandle (hObject=0x1ffc) returned 1 [0209.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9cc90 [0209.651] wcscpy (in: _Dest=0x12e9cc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0209.651] wcscat (in: _Dest=0x12e9cc90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\AC3A86-Readme.txt" [0209.651] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0209.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.163] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd54f864, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd54f864*=0x8b9, lpOverlapped=0x0) returned 1 [0210.165] CloseHandle (hObject=0x1bf8) returned 1 [0210.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cc90) returned 1 [0210.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67713f8) returned 1 Thread: id = 7105 os_tid = 0xeb8 [0197.270] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0197.271] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0202.442] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1500 [0202.443] GetFileSizeEx (in: hFile=0x1500, lpFileSize=0x855fbf4 | out: lpFileSize=0x855fbf4*=179) returned 1 [0202.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a830 [0202.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0202.443] NtQuerySystemTime (in: CurrentTime=0x855fb68 | out: CurrentTime=0x855fb68*=132482711109204000) returned 0x0 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x2c3dc919 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x60dc2a3 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x4a5c6623 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x77b60125 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x5267129 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x48a08a0c [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x37ba0b96 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x25bbb5cd [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x7916ab7e [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x5d70eba3 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x2cc228d8 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x3e0a63e4 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x4a73bed [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x27384fc5 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x64b64ae1 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x7c67f0d6 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x56d53168 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x78c75024 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x61d4a578 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x3c1f1018 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x55b58fd5 [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0xc40e98c [0202.443] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x4722b37f [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x37f43837 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x681ad13 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x21515b9d [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x7a90a175 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x79a7bcf0 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x771926c0 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x3f1ac3a8 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x51172a25 [0202.444] RtlRandomEx (in: Seed=0x855fb60 | out: Seed=0x855fb60) returned 0x5267129 [0202.451] ReadFile (in: hFile=0x1500, lpBuffer=0x672c700, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x855fb5c, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesRead=0x855fb5c*=0xb3, lpOverlapped=0x0) returned 1 [0202.453] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.453] WriteFile (in: hFile=0x1500, lpBuffer=0x68d7100*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x855fb60, lpOverlapped=0x0 | out: lpBuffer=0x68d7100*, lpNumberOfBytesWritten=0x855fb60*=0xb3, lpOverlapped=0x0) returned 1 [0204.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36d8 [0204.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef36b0 [0204.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0204.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d7100) returned 1 [0204.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0204.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0204.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0204.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0204.549] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.549] WriteFile (in: hFile=0x1500, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x855fbe8, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0x855fbe8*=0x10c, lpOverlapped=0x0) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36b0) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef36d8) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a830) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b230) returned 1 [0206.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0206.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x678c588 [0206.210] wcscpy (in: _Dest=0x678c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" [0206.211] wcscat (in: _Dest=0x678c588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.ac3a86" [0206.211] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0x855fb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce718 [0206.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce718) returned 1 [0206.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8ab8) returned 1 [0206.569] NtQueryInformationFile (in: FileHandle=0x1500, IoStatusBlock=0x855fb38, FileInformation=0x855fb40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x855fb38, FileInformation=0x855fb40) returned 0x0 [0206.569] NtSetInformationFile (FileHandle=0x1500, IoStatusBlock=0x855fb38, FileInformation=0x855fb40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c588) returned 1 [0209.026] FlushFileBuffers (hFile=0x1500) returned 1 [0209.041] CloseHandle (hObject=0x1500) returned 1 [0209.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40678 [0209.345] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0209.345] wcscat (in: _Dest=0x3d40678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0209.345] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0209.345] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.942] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x855fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x855fb7c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.944] CloseHandle (hObject=0x1bf8) returned 1 [0209.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40678) returned 1 [0209.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771520) returned 1 Thread: id = 7106 os_tid = 0x1564 [0197.272] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0197.272] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0202.453] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dbc [0202.453] GetFileSizeEx (in: hFile=0x1dbc, lpFileSize=0xe7bfbfc | out: lpFileSize=0xe7bfbfc*=213) returned 1 [0202.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0202.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0202.454] NtQuerySystemTime (in: CurrentTime=0xe7bfb70 | out: CurrentTime=0xe7bfb70*=132482711109360000) returned 0x0 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2a8d731c [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x13422ae0 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x3f5759a0 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x4b874c43 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x20cf0e05 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x63ba0b2c [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2e52cfd5 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2c1d65e1 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x61d4a578 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x51f9e51f [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x6a4e2109 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x6a00f332 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x1fc5d2b [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2af7f704 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x77ebd92 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x7176862a [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x63a7dbfb [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x55eb19bc [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2bdf370a [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x1d721d2c [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x776ae61 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x4e9f97fa [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x45d0de0b [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x4ab217a3 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x2344f9b3 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x175062f4 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x4a318d63 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x27de0953 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x4a018e00 [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x6c3c879b [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x784b24ef [0202.454] RtlRandomEx (in: Seed=0xe7bfb68 | out: Seed=0xe7bfb68) returned 0x5b6faef4 [0202.462] ReadFile (in: hFile=0x1dbc, lpBuffer=0x68dad08, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0xe7bfb64, lpOverlapped=0x0 | out: lpBuffer=0x68dad08*, lpNumberOfBytesRead=0xe7bfb64*=0xd5, lpOverlapped=0x0) returned 1 [0202.463] SetFilePointerEx (in: hFile=0x1dbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.463] WriteFile (in: hFile=0x1dbc, lpBuffer=0x68de910*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0xe7bfb68, lpOverlapped=0x0 | out: lpBuffer=0x68de910*, lpNumberOfBytesWritten=0xe7bfb68*=0xd5, lpOverlapped=0x0) returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0205.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0205.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0205.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68de910) returned 1 [0205.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68dad08) returned 1 [0205.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ab0) returned 1 [0205.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301230) returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5390 [0205.600] SetFilePointerEx (in: hFile=0x1dbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.600] WriteFile (in: hFile=0x1dbc, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe7bfbf0, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0xe7bfbf0*=0x10c, lpOverlapped=0x0) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7b0) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b438) returned 1 [0208.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0208.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1518 [0208.806] wcscpy (in: _Dest=0x12ea1518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" [0208.806] wcscat (in: _Dest=0x12ea1518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.ac3a86" [0208.806] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xe7bfb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789ca8 [0209.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6789ca8) returned 1 [0209.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6919488) returned 1 [0209.901] NtQueryInformationFile (in: FileHandle=0x1dbc, IoStatusBlock=0xe7bfb40, FileInformation=0xe7bfb48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe7bfb40, FileInformation=0xe7bfb48) returned 0x0 [0209.901] NtSetInformationFile (FileHandle=0x1dbc, IoStatusBlock=0xe7bfb40, FileInformation=0xe7bfb48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1518) returned 1 [0210.467] FlushFileBuffers (hFile=0x1dbc) returned 1 [0210.484] CloseHandle (hObject=0x1dbc) returned 1 [0210.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3041720 [0210.486] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0210.486] wcscat (in: _Dest=0x3041720, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" [0210.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0210.486] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dbc [0210.487] WriteFile (in: hFile=0x1dbc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe7bfb84, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe7bfb84*=0x8b9, lpOverlapped=0x0) returned 1 [0210.495] CloseHandle (hObject=0x1dbc) returned 1 [0210.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0210.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 Thread: id = 7107 os_tid = 0xa10 [0197.273] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0201.870] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0213.168] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d4 [0213.169] GetFileSizeEx (in: hFile=0x16d4, lpFileSize=0x851fb5c | out: lpFileSize=0x851fb5c*=875) returned 1 [0213.169] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x367, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.169] ReadFile (in: hFile=0x16d4, lpBuffer=0x851fb38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x851fb48, lpOverlapped=0x0 | out: lpBuffer=0x851fb38*, lpNumberOfBytesRead=0x851fb48*=0x4, lpOverlapped=0x0) returned 1 [0213.172] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea998 [0213.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea8d0 [0213.172] NtQuerySystemTime (in: CurrentTime=0x851fad0 | out: CurrentTime=0x851fad0*=132482711198904000) returned 0x0 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x657e777d [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x44006d33 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x308c30f7 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x15c47c39 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x66600b34 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0xf8ea7a5 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x4b892013 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x189f030d [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x57131b78 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x1ea6ccc4 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0xb406238 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x43249bb [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x4fa554b2 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x1bd1c1a4 [0213.172] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x278360d [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x268c700c [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x60d18947 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x32693228 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x20ece2eb [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x6e6f6747 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x64e7462f [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x430da854 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x1cc5f2fc [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x67f83627 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x46caa540 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0xef393d0 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x6129a94c [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x36bf4f18 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x716dfd12 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x2cd54506 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x70775e18 [0213.173] RtlRandomEx (in: Seed=0x851fac8 | out: Seed=0x851fac8) returned 0x3a8877b2 [0213.181] ReadFile (in: hFile=0x16d4, lpBuffer=0x13016850, nNumberOfBytesToRead=0x36b, lpNumberOfBytesRead=0x851fac4, lpOverlapped=0x0 | out: lpBuffer=0x13016850*, lpNumberOfBytesRead=0x851fac4*=0x36b, lpOverlapped=0x0) returned 1 [0213.181] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.181] WriteFile (in: hFile=0x16d4, lpBuffer=0x1301a458*, nNumberOfBytesToWrite=0x36b, lpNumberOfBytesWritten=0x851fac8, lpOverlapped=0x0 | out: lpBuffer=0x1301a458*, lpNumberOfBytesWritten=0x851fac8*=0x36b, lpOverlapped=0x0) returned 1 [0217.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebbe0 [0217.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebbb8 [0217.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbb8) returned 1 [0217.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1301a458) returned 1 [0217.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13016850) returned 1 [0217.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0588) returned 1 [0217.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ab40) returned 1 [0217.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cf0 [0217.135] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.135] WriteFile (in: hFile=0x16d4, lpBuffer=0x675cbd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x851fb50, lpOverlapped=0x0 | out: lpBuffer=0x675cbd0*, lpNumberOfBytesWritten=0x851fb50*=0x10c, lpOverlapped=0x0) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbb8) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbe0) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea998) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea8f8) returned 1 [0224.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea880) returned 1 [0224.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675bbc8 [0224.431] wcscpy (in: _Dest=0x675bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" [0224.432] wcscat (in: _Dest=0x675bbc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.ac3a86" [0224.432] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x851fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf080 [0224.790] FlushFileBuffers (hFile=0x16d4) returned 1 [0224.797] CloseHandle (hObject=0x16d4) returned 1 [0224.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675b958 [0224.870] wcscpy (in: _Dest=0x675b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0224.870] wcscat (in: _Dest=0x675b958, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\AC3A86-Readme.txt" [0224.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0224.871] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd78 [0224.890] WriteFile (in: hFile=0xd78, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x851fae4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x851fae4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.900] CloseHandle (hObject=0xd78) returned 1 [0224.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b958) returned 1 [0224.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765520) returned 1 Thread: id = 7108 os_tid = 0x1634 [0197.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk")) returned 0x20 [0197.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0197.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.274] GetLastError () returned 0x5 [0197.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0197.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 7109 os_tid = 0x1d98 [0197.276] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0197.276] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0202.464] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db8 [0202.464] GetFileSizeEx (in: hFile=0x1db8, lpFileSize=0x9fffba4 | out: lpFileSize=0x9fffba4*=352) returned 1 [0202.464] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x15c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.464] ReadFile (in: hFile=0x1db8, lpBuffer=0x9fffb80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9fffb90, lpOverlapped=0x0 | out: lpBuffer=0x9fffb80*, lpNumberOfBytesRead=0x9fffb90*=0x4, lpOverlapped=0x0) returned 1 [0202.466] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0202.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0202.466] NtQuerySystemTime (in: CurrentTime=0x9fffb18 | out: CurrentTime=0x9fffb18*=132482711109360000) returned 0x0 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x6fb9d20 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x2c229240 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x3c6de38a [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x34726333 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7c9ba539 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x2725d057 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0xbdffefe [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x341d9b00 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x681027cc [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x6daa948a [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x2eb04b [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0xc94bae0 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4a06b4a3 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4ba610e2 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4c5f091e [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7a0b9820 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7a0b9820 [0202.466] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x2e52cfd5 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x46944dda [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x31710365 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4103a7eb [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x6240d704 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x60c5910c [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4adcf063 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4ff50626 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x65028667 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x4104bed8 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7503d16c [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7e32880f [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x7578307f [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x307ca303 [0202.467] RtlRandomEx (in: Seed=0x9fffb10 | out: Seed=0x9fffb10) returned 0x965ef05 [0202.474] ReadFile (in: hFile=0x1db8, lpBuffer=0x68e2518, nNumberOfBytesToRead=0x160, lpNumberOfBytesRead=0x9fffb0c, lpOverlapped=0x0 | out: lpBuffer=0x68e2518*, lpNumberOfBytesRead=0x9fffb0c*=0x160, lpOverlapped=0x0) returned 1 [0202.475] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.475] WriteFile (in: hFile=0x1db8, lpBuffer=0x68e6120*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x9fffb10, lpOverlapped=0x0 | out: lpBuffer=0x68e6120*, lpNumberOfBytesWritten=0x9fffb10*=0x160, lpOverlapped=0x0) returned 1 [0204.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c68 [0204.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0204.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0204.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e6120) returned 1 [0204.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e2518) returned 1 [0204.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0204.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011e8) returned 1 [0204.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3f1efc0 [0204.553] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.553] WriteFile (in: hFile=0x1db8, lpBuffer=0x67508c8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x9fffb98, lpOverlapped=0x0 | out: lpBuffer=0x67508c8*, lpNumberOfBytesWritten=0x9fffb98*=0x11a, lpOverlapped=0x0) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67508c8) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1fa00) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43f50) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1efc0) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c68) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0206.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x6766ab8 [0206.224] wcscpy (in: _Dest=0x6766ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" [0206.224] wcscat (in: _Dest=0x6766ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.ac3a86" [0206.225] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.ac3a86", NtPathName=0x9fffb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce870 [0209.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce870) returned 1 [0209.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef9358) returned 1 [0209.258] NtQueryInformationFile (in: FileHandle=0x1db8, IoStatusBlock=0x9fffae8, FileInformation=0x9fffaf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9fffae8, FileInformation=0x9fffaf0) returned 0x0 [0209.258] NtSetInformationFile (FileHandle=0x1db8, IoStatusBlock=0x9fffae8, FileInformation=0x9fffaf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 [0209.545] FlushFileBuffers (hFile=0x1db8) returned 1 [0209.548] CloseHandle (hObject=0x1db8) returned 1 [0209.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6779c10 [0209.730] wcscpy (in: _Dest=0x6779c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0209.730] wcscat (in: _Dest=0x6779c10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt" [0209.730] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0209.730] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.238] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9fffb2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9fffb2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.240] CloseHandle (hObject=0x1bf8) returned 1 [0210.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779c10) returned 1 [0210.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765ae8) returned 1 Thread: id = 7110 os_tid = 0x1da0 [0197.277] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020 [0197.278] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0202.375] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x235c [0214.247] GetFileSizeEx (in: hFile=0x235c, lpFileSize=0xd6bfadc | out: lpFileSize=0xd6bfadc*=11094) returned 1 [0214.247] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.247] ReadFile (in: hFile=0x235c, lpBuffer=0xd6bfab8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd6bfac8, lpOverlapped=0x0 | out: lpBuffer=0xd6bfab8*, lpNumberOfBytesRead=0xd6bfac8*=0x4, lpOverlapped=0x0) returned 1 [0214.378] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec810 [0214.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7e8 [0214.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.378] NtQuerySystemTime (in: CurrentTime=0xd6bfa50 | out: CurrentTime=0xd6bfa50*=132482711210916000) returned 0x0 [0214.378] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x74fd2785 [0214.378] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x6014c1e2 [0214.378] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x3ac533b5 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x41923a64 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x5d118462 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x558709e9 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x6fa4e500 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x68ddd178 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x41884519 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0xd3a8cdf [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x849cb0b [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x7d31b1cd [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x418d9b52 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x5fe9e922 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x15cee3ff [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x10660978 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x5e1c7d88 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x760d3ba9 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x2b53b5aa [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x732eb2f8 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x52b73acd [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x78106f10 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x17e7f51b [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x3580a552 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x2f1ddd4e [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x3e1a4e59 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x4aadaf3c [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x3311cdd1 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x706291d3 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x4ea11043 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x728985b3 [0214.379] RtlRandomEx (in: Seed=0xd6bfa48 | out: Seed=0xd6bfa48) returned 0x7211b3cd [0214.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec810) returned 1 [0214.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69838f0 [0214.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69874f8 [0214.418] ReadFile (in: hFile=0x235c, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x2b56, lpNumberOfBytesRead=0xd6bfa44, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xd6bfa44*=0x2b56, lpOverlapped=0x0) returned 1 [0214.765] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.765] WriteFile (in: hFile=0x235c, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0xd6bfa48, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xd6bfa48*=0x2b56, lpOverlapped=0x0) returned 1 [0217.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0217.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0217.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0217.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0217.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0217.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0217.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2a38) returned 1 [0217.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x12ea2a38 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x12ea31d0 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2b10) returned 1 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x6765e60 [0217.732] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.732] WriteFile (in: hFile=0x235c, lpBuffer=0x6765e60*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xd6bfad0, lpOverlapped=0x0 | out: lpBuffer=0x6765e60*, lpNumberOfBytesWritten=0xd6bfad0*=0x11e, lpOverlapped=0x0) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765e60) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea31d0) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2a38) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7e8) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0224.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0224.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x6776c00 [0224.460] wcscpy (in: _Dest=0x6776c00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" [0224.460] wcscat (in: _Dest=0x6776c00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.ac3a86" [0224.460] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0xd6bfa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce5c0 [0224.824] FlushFileBuffers (hFile=0x235c) returned 1 [0224.826] CloseHandle (hObject=0x235c) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12eacbf0 [0224.885] wcscpy (in: _Dest=0x12eacbf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0224.885] wcscat (in: _Dest=0x12eacbf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt" [0224.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ac3a86-readme.txt")) returned 0x2020 [0224.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacbf0) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41ed8) returned 1 Thread: id = 7111 os_tid = 0x83c [0197.278] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 0x2020 [0199.415] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0206.907] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) [0225.868] GetFileSizeEx (in: hFile=0x2164, lpFileSize=0x11b3fd74 | out: lpFileSize=0x11b3fd74*=3372) returned 1 [0225.868] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.868] ReadFile (in: hFile=0x2164, lpBuffer=0x11b3fd50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11b3fd60, lpOverlapped=0x0 | out: lpBuffer=0x11b3fd50*, lpNumberOfBytesRead=0x11b3fd60*=0x4, lpOverlapped=0x0) returned 1 [0226.295] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0226.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0226.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0226.295] NtQuerySystemTime (in: CurrentTime=0x11b3fce8 | out: CurrentTime=0x11b3fce8*=132482711326356000) returned 0x0 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x76cf568d [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x79df1e64 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x7c634b77 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x263f8d16 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x39cd0876 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0xe3dd43d [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x1d134c3b [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x664e1678 [0226.295] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x2be3288a [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x59b4ac04 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x5c93e6be [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x2743de46 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x374d9725 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x6b8f8bb1 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x1204cfe4 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x57a94ad8 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x7ad474de [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x38f07467 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x6ee37cae [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x3d3a5ed2 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x60b20232 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x16586194 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x7f6bfed [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x6136f961 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x16707041 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x6ae050e2 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x2e287a18 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x3dc6ceda [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x5618bc87 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x156bdfe4 [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x5fc4ba1b [0226.296] RtlRandomEx (in: Seed=0x11b3fce0 | out: Seed=0x11b3fce0) returned 0x5760bae2 [0226.305] ReadFile (in: hFile=0x2164, lpBuffer=0x13040060, nNumberOfBytesToRead=0xd2c, lpNumberOfBytesRead=0x11b3fcdc, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0x11b3fcdc*=0xd2c, lpOverlapped=0x0) returned 1 [0226.305] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.305] WriteFile (in: hFile=0x2164, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x11b3fce0, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0x11b3fce0*=0xd2c, lpOverlapped=0x0) returned 1 [0227.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0227.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0227.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0227.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0227.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13040060) returned 1 [0227.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0227.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095f30) returned 1 [0227.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3ef52a0 [0227.005] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.006] WriteFile (in: hFile=0x2164, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x11b3fd68, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0x11b3fd68*=0x10a, lpOverlapped=0x0) returned 1 [0227.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0227.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0227.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0227.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52a0) returned 1 [0227.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0227.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0227.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0227.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0227.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec198 [0227.542] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0227.542] wcscat (in: _Dest=0x3dec198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.ac3a86" [0227.542] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.ac3a86", NtPathName=0x11b3fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0227.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eacbf0 [0227.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eacbf0) returned 1 [0227.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x692b930) returned 1 [0227.544] NtQueryInformationFile (in: FileHandle=0x2164, IoStatusBlock=0x11b3fcb8, FileInformation=0x11b3fcc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11b3fcb8, FileInformation=0x11b3fcc0) returned 0x0 [0227.544] NtSetInformationFile (FileHandle=0x2164, IoStatusBlock=0x11b3fcb8, FileInformation=0x11b3fcc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0227.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0227.546] FlushFileBuffers (hFile=0x2164) returned 1 [0228.422] CloseHandle (hObject=0x2164) returned 1 [0228.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec198 [0228.428] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0228.428] wcscat (in: _Dest=0x3dec198, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" [0228.428] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0228.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0228.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edce60) returned 1 Thread: id = 7112 os_tid = 0x87c [0197.281] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 0x2020 [0199.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0206.907] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2394 [0208.697] GetFileSizeEx (in: hFile=0x2394, lpFileSize=0xe9bfd9c | out: lpFileSize=0xe9bfd9c*=160) returned 1 [0208.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaec0 [0208.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadf8 [0208.698] NtQuerySystemTime (in: CurrentTime=0xe9bfd10 | out: CurrentTime=0xe9bfd10*=132482711171604000) returned 0x0 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x10069a57 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3d77ee9e [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x60e845ca [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3eb860c1 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x73ee163 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x20df6b95 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0xccd2506 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x2754ca61 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3c09c4ec [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x60bfeb65 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x5a3c76bc [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x33adcc7d [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x6b86e9dd [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3f3003bf [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x25f85899 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x6badc9b7 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x62d82898 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x72ea4853 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x51c7be37 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3849a04c [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x6badc9b7 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x47f350a8 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x4d54f769 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x77bc13cf [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3680fdea [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x64126f3a [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x446694b3 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x2fab1782 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x2bb4ffd8 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3900c3d7 [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x3c09c4ec [0208.698] RtlRandomEx (in: Seed=0xe9bfd08 | out: Seed=0xe9bfd08) returned 0x66041602 [0208.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6968d08 [0208.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x696c910 [0208.707] ReadFile (in: hFile=0x2394, lpBuffer=0x6968d08, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xe9bfd04, lpOverlapped=0x0 | out: lpBuffer=0x6968d08*, lpNumberOfBytesRead=0xe9bfd04*=0xa0, lpOverlapped=0x0) returned 1 [0208.708] SetFilePointerEx (in: hFile=0x2394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.708] WriteFile (in: hFile=0x2394, lpBuffer=0x696c910*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xe9bfd08, lpOverlapped=0x0 | out: lpBuffer=0x696c910*, lpNumberOfBytesWritten=0xe9bfd08*=0xa0, lpOverlapped=0x0) returned 1 [0209.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4060 [0209.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3f98 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x696c910) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6968d08) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fb8) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822ca8) returned 1 [0209.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x678eb78 [0209.165] SetFilePointerEx (in: hFile=0x2394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.165] WriteFile (in: hFile=0x2394, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xe9bfd90, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0xe9bfd90*=0x108, lpOverlapped=0x0) returned 1 [0209.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0209.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eba8) returned 1 [0209.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f98) returned 1 [0209.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678eb78) returned 1 [0209.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4060) returned 1 [0209.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaec0) returned 1 [0209.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae20) returned 1 [0209.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eada8) returned 1 [0209.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6751490 [0209.377] wcscpy (in: _Dest=0x6751490, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0209.377] wcscat (in: _Dest=0x6751490, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.ac3a86" [0209.377] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.ac3a86", NtPathName=0xe9bfd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x12ead530 [0225.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead530) returned 1 [0225.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825d40) returned 1 [0225.841] NtQueryInformationFile (in: FileHandle=0x2394, IoStatusBlock=0xe9bfce0, FileInformation=0xe9bfce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe9bfce0, FileInformation=0xe9bfce8) returned 0x0 [0225.841] NtSetInformationFile (FileHandle=0x2394, IoStatusBlock=0xe9bfce0, FileInformation=0xe9bfce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0225.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0225.859] FlushFileBuffers (hFile=0x2394) returned 1 [0227.007] CloseHandle (hObject=0x2394) returned 1 [0228.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec198 [0228.083] wcscpy (in: _Dest=0x3dec198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0228.083] wcscat (in: _Dest=0x3dec198, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" [0228.084] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0228.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0228.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67531f0) returned 1 Thread: id = 7113 os_tid = 0x15fc [0197.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 0x2020 [0199.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0206.908] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1280 [0213.022] GetFileSizeEx (in: hFile=0x1280, lpFileSize=0xc96fb44 | out: lpFileSize=0xc96fb44*=92) returned 1 [0213.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c490 [0213.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0213.022] NtQuerySystemTime (in: CurrentTime=0xc96fab8 | out: CurrentTime=0xc96fab8*=132482711197344000) returned 0x0 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0xf5a1fe4 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x5440ae33 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x73310b99 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6662fee3 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0xd0fdcd [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x54d2f44e [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x744727a9 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x2668cdf0 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x30f13dff [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6f015573 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x993f814 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x541012f [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6e1060b2 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6f1e2b8b [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x43a5c996 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6e92fe3 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x118d32 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6eaaca50 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x72ea4853 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x73f7a197 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x6ba9c1b9 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x2fe0efee [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x1be98ea6 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x4d509fda [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x38405990 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0xc87749 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x14b781d8 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x4e2dc078 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x1e7f2f35 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x762b7c8a [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x3cd37b58 [0213.023] RtlRandomEx (in: Seed=0xc96fab0 | out: Seed=0xc96fab0) returned 0x1286ac6d [0213.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69c98f0 [0213.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69cd4f8 [0213.036] ReadFile (in: hFile=0x1280, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0xc96faac, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xc96faac*=0x5c, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.042] WriteFile (in: hFile=0x1280, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xc96fab0, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xc96fab0*=0x5c, lpOverlapped=0x0) returned 1 [0215.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec8d8 [0215.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec838 [0215.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec838) returned 1 [0215.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0215.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0215.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ec8) returned 1 [0215.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899e50) returned 1 [0215.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec838 [0215.652] SetFilePointerEx (in: hFile=0x1280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.652] WriteFile (in: hFile=0x1280, lpBuffer=0x675d8f0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xc96fb38, lpOverlapped=0x0 | out: lpBuffer=0x675d8f0*, lpNumberOfBytesWritten=0xc96fb38*=0x104, lpOverlapped=0x0) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d8f0) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed120) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed148) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec838) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8d8) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c490) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0216.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0216.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x675d8f0 [0216.508] wcscpy (in: _Dest=0x675d8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" [0216.508] wcscat (in: _Dest=0x675d8f0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.ac3a86" [0216.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.ac3a86", NtPathName=0xc96fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6776428 [0224.982] FlushFileBuffers (hFile=0x1280) returned 1 [0225.419] CloseHandle (hObject=0x1280) returned 1 [0225.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6751c38 [0225.421] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0225.421] wcscat (in: _Dest=0x6751c38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" [0225.421] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0225.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0225.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18270) returned 1 Thread: id = 7114 os_tid = 0x1874 [0197.283] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 0x2020 [0199.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0206.908] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb8 [0215.344] GetFileSizeEx (in: hFile=0xeb8, lpFileSize=0xb64fe64 | out: lpFileSize=0xb64fe64*=95) returned 1 [0215.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0215.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0215.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0215.344] NtQuerySystemTime (in: CurrentTime=0xb64fdd8 | out: CurrentTime=0xb64fdd8*=132482711220588000) returned 0x0 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x4b6bd38b [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x15a3c8f4 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x3e141b3 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x4380f56e [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x60d40846 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x144aec04 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x43bbe674 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x3a8db402 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x28057467 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x3ae54fe8 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x6904a544 [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x7d6f800f [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x5704fd8d [0215.344] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x5e361953 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x3cc9cb92 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x26e756bd [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x39cfaf77 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x678fd73a [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x7f339421 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x19513786 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x7de0065e [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x4efc92d7 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x3abba299 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0xaca49d4 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x12e10079 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x151e48a [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x5ece90f9 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x31e554f7 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x686e9434 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x384a1854 [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x5e53c01f [0215.345] RtlRandomEx (in: Seed=0xb64fdd0 | out: Seed=0xb64fdd0) returned 0x2c461430 [0215.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0215.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b0950 [0215.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69b4558 [0215.353] ReadFile (in: hFile=0xeb8, lpBuffer=0x69b0950, nNumberOfBytesToRead=0x5f, lpNumberOfBytesRead=0xb64fdcc, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xb64fdcc*=0x5f, lpOverlapped=0x0) returned 1 [0215.355] SetFilePointerEx (in: hFile=0xeb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.355] WriteFile (in: hFile=0xeb8, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0xb64fdd0, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0xb64fdd0*=0x5f, lpOverlapped=0x0) returned 1 [0223.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0223.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5a0 [0223.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5a0) returned 1 [0223.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0223.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0223.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0223.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff368) returned 1 [0223.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b5a0 [0223.722] SetFilePointerEx (in: hFile=0xeb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.722] WriteFile (in: hFile=0xeb8, lpBuffer=0x2f94d8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xb64fe58, lpOverlapped=0x0 | out: lpBuffer=0x2f94d8*, lpNumberOfBytesWritten=0xb64fe58*=0x100, lpOverlapped=0x0) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f94d8) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af88) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5a0) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0224.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0224.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f94d8 [0224.482] wcscpy (in: _Dest=0x2f94d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" [0224.482] wcscat (in: _Dest=0x2f94d8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.ac3a86" [0224.483] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.ac3a86", NtPathName=0xb64fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67660b0 [0224.969] FlushFileBuffers (hFile=0xeb8) returned 1 [0224.975] CloseHandle (hObject=0xeb8) returned 1 [0224.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x675e098 [0224.977] wcscpy (in: _Dest=0x675e098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0224.977] wcscat (in: _Dest=0x675e098, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" [0224.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt")) returned 0xffffffff [0224.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0224.978] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb64fdec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb64fdec*=0x8b9, lpOverlapped=0x0) returned 1 [0224.980] CloseHandle (hObject=0xeb8) returned 1 [0224.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e098) returned 1 [0224.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17770) returned 1 Thread: id = 7115 os_tid = 0x115c [0197.284] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 0x2020 [0199.471] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0206.913] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d84 [0215.494] GetFileSizeEx (in: hFile=0x1d84, lpFileSize=0x11f3ff24 | out: lpFileSize=0x11f3ff24*=725) returned 1 [0215.494] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.494] ReadFile (in: hFile=0x1d84, lpBuffer=0x11f3ff00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11f3ff10, lpOverlapped=0x0 | out: lpBuffer=0x11f3ff00*, lpNumberOfBytesRead=0x11f3ff10*=0x4, lpOverlapped=0x0) returned 1 [0215.497] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0215.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0215.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0215.497] NtQuerySystemTime (in: CurrentTime=0x11f3fe98 | out: CurrentTime=0x11f3fe98*=132482711222148000) returned 0x0 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4c6c7ef1 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x6dab87d2 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x32ba790f [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x69cc325b [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x75d105cf [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x16e3986e [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x20646b4c [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4e1720b9 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4b847aa [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4ca6dde1 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0xf74a7db [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x71d277c1 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x3b96d0d4 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x5f477545 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x9ce3c8c [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x525b5462 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x3e627bc0 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x705f0b1f [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x1d15d07 [0215.497] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4f881432 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x7c3a4fd0 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x30731d09 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x4f947407 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x68df64d5 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x5d0fc816 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x51048e62 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x70935860 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x734cc7d3 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x256be9c9 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x330d582 [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x793ab72f [0215.498] RtlRandomEx (in: Seed=0x11f3fe90 | out: Seed=0x11f3fe90) returned 0x2286e57f [0215.506] ReadFile (in: hFile=0x1d84, lpBuffer=0x68fc950, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x11f3fe8c, lpOverlapped=0x0 | out: lpBuffer=0x68fc950*, lpNumberOfBytesRead=0x11f3fe8c*=0x2d5, lpOverlapped=0x0) returned 1 [0215.506] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.506] WriteFile (in: hFile=0x1d84, lpBuffer=0x68f1538*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x11f3fe90, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesWritten=0x11f3fe90*=0x2d5, lpOverlapped=0x0) returned 1 [0224.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0224.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0224.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0224.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0224.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68fc950) returned 1 [0225.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0225.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe168) returned 1 [0225.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52a0 [0225.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0225.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a20 [0225.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0225.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0225.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0225.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 [0225.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66fe168) returned 1 [0225.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6751c38 [0225.472] SetFilePointerEx (in: hFile=0x1d84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.472] WriteFile (in: hFile=0x1d84, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11f3ff18, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0x11f3ff18*=0x10c, lpOverlapped=0x0) returned 1 [0225.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0225.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0225.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0225.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52a0) returned 1 [0225.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0225.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0225.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0225.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0225.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6751c38 [0225.483] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" [0225.483] wcscat (in: _Dest=0x6751c38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.ac3a86" [0225.483] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.ac3a86", NtPathName=0x11f3fe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0225.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3d40b58 [0225.487] FlushFileBuffers (hFile=0x1d84) returned 1 [0225.498] CloseHandle (hObject=0x1d84) returned 1 [0225.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x6751c38 [0225.500] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0225.500] wcscat (in: _Dest=0x6751c38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" [0225.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ac3a86-readme.txt")) returned 0x2020 [0225.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0225.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6753610) returned 1 Thread: id = 7116 os_tid = 0x1624 [0197.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3e17070 [0197.285] wcscpy (in: _Dest=0x3e17070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0197.285] wcscat (in: _Dest=0x3e17070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0197.285] wcscat (in: _Dest=0x3e17070, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*" [0197.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0197.285] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd40 [0199.096] wcscmp (_String1=".", _String2=".") returned 0 [0199.096] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.096] wcscmp (_String1="..", _String2=".") returned 1 [0199.096] wcscmp (_String1="..", _String2="..") returned 0 [0199.096] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0199.096] wcscmp (_String1="ar", _String2=".") returned 1 [0199.096] wcscmp (_String1="ar", _String2="..") returned 1 [0199.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x6754588 [0199.097] wcscpy (in: _Dest=0x6754588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.097] wcscat (in: _Dest=0x6754588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.097] wcscat (in: _Dest=0x6754588, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0199.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6754588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0199.337] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0199.337] wcscmp (_String1="bg", _String2=".") returned 1 [0199.337] wcscmp (_String1="bg", _String2="..") returned 1 [0199.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d448a0 [0199.337] wcscpy (in: _Dest=0x3d448a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.337] wcscat (in: _Dest=0x3d448a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.337] wcscat (in: _Dest=0x3d448a0, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0199.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d8 [0199.338] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0199.338] wcscmp (_String1="ca", _String2=".") returned 1 [0199.338] wcscmp (_String1="ca", _String2="..") returned 1 [0199.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44270 [0199.338] wcscpy (in: _Dest=0x3d44270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.338] wcscat (in: _Dest=0x3d44270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.338] wcscat (in: _Dest=0x3d44270, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0199.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0199.339] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0199.339] wcscmp (_String1="cs", _String2=".") returned 1 [0199.339] wcscmp (_String1="cs", _String2="..") returned 1 [0199.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45a28 [0199.339] wcscpy (in: _Dest=0x3d45a28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.339] wcscat (in: _Dest=0x3d45a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.339] wcscat (in: _Dest=0x3d45a28, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0199.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0199.340] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0199.340] wcscmp (_String1="da", _String2=".") returned 1 [0199.340] wcscmp (_String1="da", _String2="..") returned 1 [0199.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45818 [0199.340] wcscpy (in: _Dest=0x3d45818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.340] wcscat (in: _Dest=0x3d45818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.340] wcscat (in: _Dest=0x3d45818, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0199.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0199.341] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0199.341] wcscmp (_String1="de", _String2=".") returned 1 [0199.341] wcscmp (_String1="de", _String2="..") returned 1 [0199.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44fd8 [0199.341] wcscpy (in: _Dest=0x3d44fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.341] wcscat (in: _Dest=0x3d44fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.341] wcscat (in: _Dest=0x3d44fd8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0199.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0199.342] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0199.342] wcscmp (_String1="el", _String2=".") returned 1 [0199.342] wcscmp (_String1="el", _String2="..") returned 1 [0199.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44ed0 [0199.342] wcscpy (in: _Dest=0x3d44ed0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.342] wcscat (in: _Dest=0x3d44ed0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.343] wcscat (in: _Dest=0x3d44ed0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0199.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0199.346] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0199.346] wcscmp (_String1="en_GB", _String2=".") returned 1 [0199.346] wcscmp (_String1="en_GB", _String2="..") returned 1 [0199.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44dc8 [0199.346] wcscpy (in: _Dest=0x3d44dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.346] wcscat (in: _Dest=0x3d44dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.346] wcscat (in: _Dest=0x3d44dc8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0199.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0199.347] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0199.347] wcscmp (_String1="en_US", _String2=".") returned 1 [0199.347] wcscmp (_String1="en_US", _String2="..") returned 1 [0199.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44cc0 [0199.347] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.347] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.347] wcscat (in: _Dest=0x3d44cc0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0199.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0199.348] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0199.348] wcscmp (_String1="es", _String2=".") returned 1 [0199.348] wcscmp (_String1="es", _String2="..") returned 1 [0199.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44bb8 [0199.348] wcscpy (in: _Dest=0x3d44bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.348] wcscat (in: _Dest=0x3d44bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.348] wcscat (in: _Dest=0x3d44bb8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0199.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0199.349] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0199.349] wcscmp (_String1="es_419", _String2=".") returned 1 [0199.349] wcscmp (_String1="es_419", _String2="..") returned 1 [0199.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x6766ce8 [0199.349] wcscpy (in: _Dest=0x6766ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.349] wcscat (in: _Dest=0x6766ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.350] wcscat (in: _Dest=0x6766ce8, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0199.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x6766ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0199.350] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0199.350] wcscmp (_String1="et", _String2=".") returned 1 [0199.350] wcscmp (_String1="et", _String2="..") returned 1 [0199.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45608 [0199.351] wcscpy (in: _Dest=0x3d45608, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.351] wcscat (in: _Dest=0x3d45608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.351] wcscat (in: _Dest=0x3d45608, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0199.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0199.351] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0199.352] wcscmp (_String1="fi", _String2=".") returned 1 [0199.352] wcscmp (_String1="fi", _String2="..") returned 1 [0199.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d449a8 [0199.352] wcscpy (in: _Dest=0x3d449a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.352] wcscat (in: _Dest=0x3d449a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.352] wcscat (in: _Dest=0x3d449a8, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0199.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d449a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0199.353] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0199.353] wcscmp (_String1="fil", _String2=".") returned 1 [0199.353] wcscmp (_String1="fil", _String2="..") returned 1 [0199.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3d451e8 [0199.353] wcscpy (in: _Dest=0x3d451e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.353] wcscat (in: _Dest=0x3d451e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.353] wcscat (in: _Dest=0x3d451e8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0199.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d451e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0199.354] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0199.354] wcscmp (_String1="fr", _String2=".") returned 1 [0199.354] wcscmp (_String1="fr", _String2="..") returned 1 [0199.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d453f8 [0199.354] wcscpy (in: _Dest=0x3d453f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.354] wcscat (in: _Dest=0x3d453f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.354] wcscat (in: _Dest=0x3d453f8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0199.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d453f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0199.355] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0199.355] wcscmp (_String1="he", _String2=".") returned 1 [0199.355] wcscmp (_String1="he", _String2="..") returned 1 [0199.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d452f0 [0199.355] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.355] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.355] wcscat (in: _Dest=0x3d452f0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0199.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0199.356] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0199.356] wcscmp (_String1="hi", _String2=".") returned 1 [0199.356] wcscmp (_String1="hi", _String2="..") returned 1 [0199.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45920 [0199.356] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.356] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.356] wcscat (in: _Dest=0x3d45920, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0199.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0199.357] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0199.357] wcscmp (_String1="hu", _String2=".") returned 1 [0199.357] wcscmp (_String1="hu", _String2="..") returned 1 [0199.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d450e0 [0199.357] wcscpy (in: _Dest=0x3d450e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.357] wcscat (in: _Dest=0x3d450e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.357] wcscat (in: _Dest=0x3d450e0, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0199.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d450e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0199.358] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0199.358] wcscmp (_String1="id", _String2=".") returned 1 [0199.358] wcscmp (_String1="id", _String2="..") returned 1 [0199.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45500 [0199.358] wcscpy (in: _Dest=0x3d45500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.358] wcscat (in: _Dest=0x3d45500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.358] wcscat (in: _Dest=0x3d45500, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0199.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0199.359] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0199.359] wcscmp (_String1="it", _String2=".") returned 1 [0199.359] wcscmp (_String1="it", _String2="..") returned 1 [0199.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44798 [0199.359] wcscpy (in: _Dest=0x3d44798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.359] wcscat (in: _Dest=0x3d44798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.359] wcscat (in: _Dest=0x3d44798, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0199.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0199.360] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0199.361] wcscmp (_String1="ja", _String2=".") returned 1 [0199.361] wcscmp (_String1="ja", _String2="..") returned 1 [0199.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44690 [0199.361] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.361] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.361] wcscat (in: _Dest=0x3d44690, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0199.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598 [0199.362] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0199.362] wcscmp (_String1="ko", _String2=".") returned 1 [0199.362] wcscmp (_String1="ko", _String2="..") returned 1 [0199.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44588 [0199.362] wcscpy (in: _Dest=0x3d44588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.362] wcscat (in: _Dest=0x3d44588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.362] wcscat (in: _Dest=0x3d44588, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0199.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0199.363] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0199.363] wcscmp (_String1="lt", _String2=".") returned 1 [0199.363] wcscmp (_String1="lt", _String2="..") returned 1 [0199.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44480 [0199.363] wcscpy (in: _Dest=0x3d44480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.363] wcscat (in: _Dest=0x3d44480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.363] wcscat (in: _Dest=0x3d44480, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0199.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0199.364] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0199.364] wcscmp (_String1="lv", _String2=".") returned 1 [0199.364] wcscmp (_String1="lv", _String2="..") returned 1 [0199.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44378 [0199.364] wcscpy (in: _Dest=0x3d44378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.364] wcscat (in: _Dest=0x3d44378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.364] wcscat (in: _Dest=0x3d44378, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0199.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0199.365] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0199.365] wcscmp (_String1="ms", _String2=".") returned 1 [0199.366] wcscmp (_String1="ms", _String2="..") returned 1 [0199.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45e48 [0199.366] wcscpy (in: _Dest=0x3d45e48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.366] wcscat (in: _Dest=0x3d45e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.366] wcscat (in: _Dest=0x3d45e48, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0199.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0199.367] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0199.367] wcscmp (_String1="nl", _String2=".") returned 1 [0199.367] wcscmp (_String1="nl", _String2="..") returned 1 [0199.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45d40 [0199.367] wcscpy (in: _Dest=0x3d45d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.367] wcscat (in: _Dest=0x3d45d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.367] wcscat (in: _Dest=0x3d45d40, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0199.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0199.368] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0199.368] wcscmp (_String1="no", _String2=".") returned 1 [0199.368] wcscmp (_String1="no", _String2="..") returned 1 [0199.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44168 [0199.368] wcscpy (in: _Dest=0x3d44168, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.368] wcscat (in: _Dest=0x3d44168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.368] wcscat (in: _Dest=0x3d44168, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0199.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0199.369] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0199.369] wcscmp (_String1="pl", _String2=".") returned 1 [0199.369] wcscmp (_String1="pl", _String2="..") returned 1 [0199.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45c38 [0199.369] wcscpy (in: _Dest=0x3d45c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.369] wcscat (in: _Dest=0x3d45c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.369] wcscat (in: _Dest=0x3d45c38, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0199.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0199.370] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0199.370] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0199.370] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0199.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d44060 [0199.370] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0199.370] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0199.370] wcscat (in: _Dest=0x3d44060, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0199.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0200.519] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0200.519] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0200.520] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0200.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68ac000 [0200.520] wcscpy (in: _Dest=0x68ac000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0200.520] wcscat (in: _Dest=0x68ac000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0200.520] wcscat (in: _Dest=0x68ac000, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0201.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x68ac000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0201.400] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0201.400] wcscmp (_String1="ro", _String2=".") returned 1 [0201.400] wcscmp (_String1="ro", _String2="..") returned 1 [0201.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45d40 [0201.400] wcscpy (in: _Dest=0x3d45d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.400] wcscat (in: _Dest=0x3d45d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.400] wcscat (in: _Dest=0x3d45d40, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0201.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0201.402] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0201.402] wcscmp (_String1="ru", _String2=".") returned 1 [0201.402] wcscmp (_String1="ru", _String2="..") returned 1 [0201.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45e48 [0201.402] wcscpy (in: _Dest=0x3d45e48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.402] wcscat (in: _Dest=0x3d45e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.402] wcscat (in: _Dest=0x3d45e48, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0201.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0201.403] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0201.403] wcscmp (_String1="sk", _String2=".") returned 1 [0201.403] wcscmp (_String1="sk", _String2="..") returned 1 [0201.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44378 [0201.403] wcscpy (in: _Dest=0x3d44378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.404] wcscat (in: _Dest=0x3d44378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.404] wcscat (in: _Dest=0x3d44378, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0201.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0201.405] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0201.405] wcscmp (_String1="sl", _String2=".") returned 1 [0201.405] wcscmp (_String1="sl", _String2="..") returned 1 [0201.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44480 [0201.405] wcscpy (in: _Dest=0x3d44480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.405] wcscat (in: _Dest=0x3d44480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.405] wcscat (in: _Dest=0x3d44480, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0201.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0201.406] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0201.406] wcscmp (_String1="sr", _String2=".") returned 1 [0201.406] wcscmp (_String1="sr", _String2="..") returned 1 [0201.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44588 [0201.407] wcscpy (in: _Dest=0x3d44588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.407] wcscat (in: _Dest=0x3d44588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.407] wcscat (in: _Dest=0x3d44588, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0201.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0201.408] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0201.408] wcscmp (_String1="sv", _String2=".") returned 1 [0201.408] wcscmp (_String1="sv", _String2="..") returned 1 [0201.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44690 [0201.408] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.408] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.408] wcscat (in: _Dest=0x3d44690, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0201.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0201.409] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0201.410] wcscmp (_String1="th", _String2=".") returned 1 [0201.410] wcscmp (_String1="th", _String2="..") returned 1 [0201.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d44798 [0201.410] wcscpy (in: _Dest=0x3d44798, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.410] wcscat (in: _Dest=0x3d44798, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.410] wcscat (in: _Dest=0x3d44798, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0201.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d44798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0201.411] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0201.411] wcscmp (_String1="tr", _String2=".") returned 1 [0201.411] wcscmp (_String1="tr", _String2="..") returned 1 [0201.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45500 [0201.411] wcscpy (in: _Dest=0x3d45500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.411] wcscat (in: _Dest=0x3d45500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.412] wcscat (in: _Dest=0x3d45500, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0201.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0201.413] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0201.413] wcscmp (_String1="uk", _String2=".") returned 1 [0201.413] wcscmp (_String1="uk", _String2="..") returned 1 [0201.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d450e0 [0201.413] wcscpy (in: _Dest=0x3d450e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.413] wcscat (in: _Dest=0x3d450e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.413] wcscat (in: _Dest=0x3d450e0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0201.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d450e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10 [0201.414] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0201.415] wcscmp (_String1="vi", _String2=".") returned 1 [0201.415] wcscmp (_String1="vi", _String2="..") returned 1 [0201.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3d45920 [0201.415] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.415] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.415] wcscat (in: _Dest=0x3d45920, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0201.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24 [0201.417] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0201.417] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0201.417] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0201.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d452f0 [0201.417] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.417] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.418] wcscat (in: _Dest=0x3d452f0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0201.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0201.419] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0201.419] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0201.419] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0201.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3d453f8 [0201.419] wcscpy (in: _Dest=0x3d453f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0201.419] wcscat (in: _Dest=0x3d453f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0201.419] wcscat (in: _Dest=0x3d453f8, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0201.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21dabd0, lpParameter=0x3d453f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0201.420] FindNextFileW (in: hFindFile=0x3f1fd40, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0201.420] FindClose (in: hFindFile=0x3f1fd40 | out: hFindFile=0x3f1fd40) returned 1 [0201.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0201.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17070) returned 1 [0201.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17670) returned 1 Thread: id = 7117 os_tid = 0x8dc [0197.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x68aef78 [0197.285] wcscpy (in: _Dest=0x68aef78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0197.286] wcscat (in: _Dest=0x68aef78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0197.286] wcscat (in: _Dest=0x68aef78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*" [0197.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0197.286] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0199.469] wcscmp (_String1=".", _String2=".") returned 0 [0199.469] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.469] wcscmp (_String1="..", _String2=".") returned 1 [0199.469] wcscmp (_String1="..", _String2="..") returned 0 [0199.469] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe61b2af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b5200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0199.469] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0199.469] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0199.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12eac188 [0199.469] wcscpy (in: _Dest=0x12eac188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0199.469] wcscat (in: _Dest=0x12eac188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0199.469] wcscat (in: _Dest=0x12eac188, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" [0201.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12eac188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0201.470] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0201.470] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0201.471] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0201.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d413e0 [0201.471] wcscpy (in: _Dest=0x3d413e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0201.471] wcscat (in: _Dest=0x3d413e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0201.471] wcscat (in: _Dest=0x3d413e0, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" [0201.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d413e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0201.472] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0201.472] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aef78) returned 1 [0201.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15770) returned 1 Thread: id = 7118 os_tid = 0x5ec [0197.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 0x2020 [0197.300] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", dwFileAttributes=0x20) returned 1 [0202.475] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2360 [0202.475] GetFileSizeEx (in: hFile=0x2360, lpFileSize=0x82af93c | out: lpFileSize=0x82af93c*=336) returned 1 [0202.475] SetFilePointerEx (in: hFile=0x2360, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.475] ReadFile (in: hFile=0x2360, lpBuffer=0x82af918, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x82af928, lpOverlapped=0x0 | out: lpBuffer=0x82af918*, lpNumberOfBytesRead=0x82af928*=0x4, lpOverlapped=0x0) returned 1 [0202.477] SetFilePointerEx (in: hFile=0x2360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0202.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0202.477] NtQuerySystemTime (in: CurrentTime=0x82af8b0 | out: CurrentTime=0x82af8b0*=132482711109516000) returned 0x0 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x1a01d243 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x2edd335d [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x66b6f603 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x5dbe5442 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x65d28c77 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x321bccde [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0xbdffefe [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x4b874c43 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x3d0e61b0 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x3e2d62c3 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x689e1312 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x49dbdbe3 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x4a873ee3 [0202.477] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x5c590a98 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x7b13ff3c [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x63be76ce [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x7f8f60cb [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x5aa90c0 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x5ddfa53b [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x1bd4107 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x5dbe5442 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x1ff1931a [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x7eb316c [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x48840ec3 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x307ca303 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x4e8a89c3 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x10d40bde [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x60c5910c [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x29f7bcb7 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x326357e8 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x34726333 [0202.478] RtlRandomEx (in: Seed=0x82af8a8 | out: Seed=0x82af8a8) returned 0x326357e8 [0202.486] ReadFile (in: hFile=0x2360, lpBuffer=0x68e9d28, nNumberOfBytesToRead=0x150, lpNumberOfBytesRead=0x82af8a4, lpOverlapped=0x0 | out: lpBuffer=0x68e9d28*, lpNumberOfBytesRead=0x82af8a4*=0x150, lpOverlapped=0x0) returned 1 [0202.486] SetFilePointerEx (in: hFile=0x2360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.486] WriteFile (in: hFile=0x2360, lpBuffer=0x68ed930*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x82af8a8, lpOverlapped=0x0 | out: lpBuffer=0x68ed930*, lpNumberOfBytesWritten=0x82af8a8*=0x150, lpOverlapped=0x0) returned 1 [0205.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42d08 [0205.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d433e8 [0205.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0205.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ed930) returned 1 [0205.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e9d28) returned 1 [0205.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0205.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301080) returned 1 [0205.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ea0 [0205.605] SetFilePointerEx (in: hFile=0x2360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.605] WriteFile (in: hFile=0x2360, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x82af930, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0x82af930*=0x10c, lpOverlapped=0x0) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d433e8) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42d08) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a650) returned 1 [0209.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0209.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767478 [0209.217] wcscpy (in: _Dest=0x6767478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" [0209.218] wcscat (in: _Dest=0x6767478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.ac3a86" [0209.218] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.ac3a86", NtPathName=0x82af8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a830 [0214.764] FlushFileBuffers (hFile=0x2360) returned 1 [0215.108] CloseHandle (hObject=0x2360) returned 1 [0216.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765080 [0216.589] wcscpy (in: _Dest=0x6765080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0216.589] wcscat (in: _Dest=0x6765080, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\AC3A86-Readme.txt" [0216.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ac3a86-readme.txt")) returned 0xffffffff [0216.590] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104c [0216.858] WriteFile (in: hFile=0x104c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x82af8c4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x82af8c4*=0x8b9, lpOverlapped=0x0) returned 1 [0223.952] CloseHandle (hObject=0x104c) returned 1 [0225.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765080) returned 1 [0225.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764f58) returned 1 Thread: id = 7119 os_tid = 0x1304 [0197.304] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 0x2020 [0197.431] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0202.486] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x235c [0202.487] GetFileSizeEx (in: hFile=0x235c, lpFileSize=0x1088f9fc | out: lpFileSize=0x1088f9fc*=213) returned 1 [0202.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0202.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0202.487] NtQuerySystemTime (in: CurrentTime=0x1088f970 | out: CurrentTime=0x1088f970*=132482711109672000) returned 0x0 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x6daa948a [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x18d511d4 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x45bb461b [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x67565f8e [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x512170d3 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x1f0c5d46 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x338650dc [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0xc94bae0 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x6d0c0fde [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x5526e218 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x7503d16c [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x7363080d [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x72f9e4f9 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x359beb43 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x1a1c3b30 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x4580d143 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x3d0e61b0 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x24e2a871 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x24e2a871 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x4a018e00 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x6a253099 [0202.487] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x20cf0e05 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x13af85ab [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x4b058310 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x2230f624 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x63096ec9 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x1b42d060 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x4950f4b9 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x4104bed8 [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x76b6c9be [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x3d058f5c [0202.488] RtlRandomEx (in: Seed=0x1088f968 | out: Seed=0x1088f968) returned 0x27de0953 [0202.495] ReadFile (in: hFile=0x235c, lpBuffer=0x68f1538, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x1088f964, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesRead=0x1088f964*=0xd5, lpOverlapped=0x0) returned 1 [0202.497] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.497] WriteFile (in: hFile=0x235c, lpBuffer=0x68f5140*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x1088f968, lpOverlapped=0x0 | out: lpBuffer=0x68f5140*, lpNumberOfBytesWritten=0x1088f968*=0xd5, lpOverlapped=0x0) returned 1 [0204.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0204.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43208 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f5140) returned 1 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 [0204.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33450) returned 1 [0204.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0204.563] SetFilePointerEx (in: hFile=0x235c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.563] WriteFile (in: hFile=0x235c, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1088f9f0, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0x1088f9f0*=0x10c, lpOverlapped=0x0) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43208) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43280) returned 1 [0206.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0206.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0206.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0206.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c6c0 [0206.214] wcscpy (in: _Dest=0x678c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" [0206.214] wcscat (in: _Dest=0x678c6c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.ac3a86" [0206.214] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0x1088f968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777b60 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777b60) returned 1 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef8ce0) returned 1 [0206.570] NtQueryInformationFile (in: FileHandle=0x235c, IoStatusBlock=0x1088f940, FileInformation=0x1088f948, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1088f940, FileInformation=0x1088f948) returned 0x0 [0206.570] NtSetInformationFile (FileHandle=0x235c, IoStatusBlock=0x1088f940, FileInformation=0x1088f948, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c6c0) returned 1 [0209.030] FlushFileBuffers (hFile=0x235c) returned 1 [0209.048] CloseHandle (hObject=0x235c) returned 1 [0209.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead2e0 [0209.348] wcscpy (in: _Dest=0x12ead2e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0209.348] wcscat (in: _Dest=0x12ead2e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\AC3A86-Readme.txt" [0209.348] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0209.348] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.948] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1088f984, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1088f984*=0x8b9, lpOverlapped=0x0) returned 1 [0209.950] CloseHandle (hObject=0x1bf8) returned 1 [0209.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead2e0) returned 1 [0209.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67652d0) returned 1 Thread: id = 7120 os_tid = 0x8c0 [0197.432] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 0x2020 [0197.432] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0202.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2358 [0202.497] GetFileSizeEx (in: hFile=0x2358, lpFileSize=0x1064f974 | out: lpFileSize=0x1064f974*=198) returned 1 [0202.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a790 [0202.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0202.498] NtQuerySystemTime (in: CurrentTime=0x1064f8e8 | out: CurrentTime=0x1064f8e8*=132482711109828000) returned 0x0 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x101e3deb [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x1da899bb [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x3b097506 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x5893f591 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x1cf14904 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x618e1229 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x321bccde [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x1a884bfa [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x19dfb801 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x76ac8db0 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4c5f091e [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4a5c6623 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x5534f52f [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4be403b9 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x5706544f [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x549104c3 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4407fd02 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x2edd335d [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x76ac8db0 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x784b2ea6 [0202.498] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x33d1303a [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4c0b22c2 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x27584ddf [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4a06b4a3 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x18d511d4 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x78bbaa2c [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4f277d66 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x4ff50626 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x1d8adc02 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x6b2f4d72 [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x2dfab9dc [0202.499] RtlRandomEx (in: Seed=0x1064f8e0 | out: Seed=0x1064f8e0) returned 0x7c5a25d8 [0202.506] ReadFile (in: hFile=0x2358, lpBuffer=0x68f8d48, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0x1064f8dc, lpOverlapped=0x0 | out: lpBuffer=0x68f8d48*, lpNumberOfBytesRead=0x1064f8dc*=0xc6, lpOverlapped=0x0) returned 1 [0202.508] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.508] WriteFile (in: hFile=0x2358, lpBuffer=0x68fc950*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1064f8e0, lpOverlapped=0x0 | out: lpBuffer=0x68fc950*, lpNumberOfBytesWritten=0x1064f8e0*=0xc6, lpOverlapped=0x0) returned 1 [0204.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42e98 [0204.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432f8 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68fc950) returned 1 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f8d48) returned 1 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0204.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32f88) returned 1 [0204.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0204.568] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.568] WriteFile (in: hFile=0x2358, lpBuffer=0x6751490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1064f968, lpOverlapped=0x0 | out: lpBuffer=0x6751490*, lpNumberOfBytesWritten=0x1064f968*=0x10c, lpOverlapped=0x0) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432f8) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42e98) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a790) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0206.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0206.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c930 [0206.220] wcscpy (in: _Dest=0x678c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" [0206.220] wcscat (in: _Dest=0x678c930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.ac3a86" [0206.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x1064f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777788 [0206.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777788) returned 1 [0206.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef9130) returned 1 [0206.572] NtQueryInformationFile (in: FileHandle=0x2358, IoStatusBlock=0x1064f8b8, FileInformation=0x1064f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1064f8b8, FileInformation=0x1064f8c0) returned 0x0 [0206.572] NtSetInformationFile (FileHandle=0x2358, IoStatusBlock=0x1064f8b8, FileInformation=0x1064f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c930) returned 1 [0209.039] FlushFileBuffers (hFile=0x2358) returned 1 [0209.059] CloseHandle (hObject=0x2358) returned 1 [0209.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x12ead408 [0209.352] wcscpy (in: _Dest=0x12ead408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0209.352] wcscat (in: _Dest=0x12ead408, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\AC3A86-Readme.txt" [0209.352] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0209.352] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0209.957] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1064f8fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1064f8fc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.959] CloseHandle (hObject=0x1bf8) returned 1 [0209.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead408) returned 1 [0209.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67507a0) returned 1 Thread: id = 7121 os_tid = 0xa04 [0197.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 0x2020 [0197.433] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", dwFileAttributes=0x20) returned 1 [0202.508] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2354 [0202.508] GetFileSizeEx (in: hFile=0x2354, lpFileSize=0x11f8facc | out: lpFileSize=0x11f8facc*=387) returned 1 [0202.508] SetFilePointerEx (in: hFile=0x2354, liDistanceToMove=0x17f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.509] ReadFile (in: hFile=0x2354, lpBuffer=0x11f8faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11f8fab8, lpOverlapped=0x0 | out: lpBuffer=0x11f8faa8*, lpNumberOfBytesRead=0x11f8fab8*=0x4, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x2354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0202.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca3f0 [0202.691] NtQuerySystemTime (in: CurrentTime=0x11f8fa40 | out: CurrentTime=0x11f8fa40*=132482711111700000) returned 0x0 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x5b5e35a5 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x7121c01 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x718de396 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x122cb6d1 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x3d908e5f [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x6530c11f [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x51b3888a [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x44b197f7 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x507c08b4 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x74912d6c [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x3c26248d [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x3e0121b1 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x2f257573 [0202.691] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x63e16e3 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x3511f99b [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x5b78983b [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x41606604 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x40080e4c [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x58f1ea6d [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x52883fd5 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0xa321cce [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x698fd241 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x49865397 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x326bba50 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x513e0cd3 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x394c18fd [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x7100a6e3 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x17d3cff1 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x2f257573 [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x548e1f1b [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x7eaa0aff [0202.692] RtlRandomEx (in: Seed=0x11f8fa38 | out: Seed=0x11f8fa38) returned 0x72a40bcf [0202.700] ReadFile (in: hFile=0x2354, lpBuffer=0x12f70cc8, nNumberOfBytesToRead=0x183, lpNumberOfBytesRead=0x11f8fa34, lpOverlapped=0x0 | out: lpBuffer=0x12f70cc8*, lpNumberOfBytesRead=0x11f8fa34*=0x183, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x2354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.700] WriteFile (in: hFile=0x2354, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x11f8fa38, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0x11f8fa38*=0x183, lpOverlapped=0x0) returned 1 [0205.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0205.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f70cc8) returned 1 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0205.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b3f8) returned 1 [0205.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27f98 [0205.634] SetFilePointerEx (in: hFile=0x2354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.634] WriteFile (in: hFile=0x2354, lpBuffer=0x30bc768*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11f8fac0, lpOverlapped=0x0 | out: lpBuffer=0x30bc768*, lpNumberOfBytesWritten=0x11f8fac0*=0x10c, lpOverlapped=0x0) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27fc8) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f98) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0208.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0208.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0a20 [0208.780] wcscpy (in: _Dest=0x12ea0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" [0208.780] wcscat (in: _Dest=0x12ea0a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.ac3a86" [0208.780] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.ac3a86", NtPathName=0x11f8fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67893b0 [0214.371] FlushFileBuffers (hFile=0x2354) returned 1 [0214.385] CloseHandle (hObject=0x2354) returned 1 [0214.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765ae8 [0214.485] wcscpy (in: _Dest=0x6765ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0214.485] wcscat (in: _Dest=0x6765ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\AC3A86-Readme.txt" [0214.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\ac3a86-readme.txt")) returned 0xffffffff [0214.485] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.623] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11f8fa54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x11f8fa54*=0x8b9, lpOverlapped=0x0) returned 1 [0214.625] CloseHandle (hObject=0x234c) returned 1 [0214.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765ae8) returned 1 [0214.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ff88) returned 1 Thread: id = 7122 os_tid = 0x1d20 [0197.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 0x2020 [0197.434] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", dwFileAttributes=0x20) returned 1 [0202.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x234c [0202.510] GetFileSizeEx (in: hFile=0x234c, lpFileSize=0xfa8f92c | out: lpFileSize=0xfa8f92c*=451) returned 1 [0202.510] SetFilePointerEx (in: hFile=0x234c, liDistanceToMove=0x1bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.510] ReadFile (in: hFile=0x234c, lpBuffer=0xfa8f908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfa8f918, lpOverlapped=0x0 | out: lpBuffer=0xfa8f908*, lpNumberOfBytesRead=0xfa8f918*=0x4, lpOverlapped=0x0) returned 1 [0202.512] SetFilePointerEx (in: hFile=0x234c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0202.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0202.512] NtQuerySystemTime (in: CurrentTime=0xfa8f8a0 | out: CurrentTime=0xfa8f8a0*=132482711109828000) returned 0x0 [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x7ce7711e [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x7cb79a7d [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x44559c8c [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x2af7f704 [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x5608b86d [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x740f00bd [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x3f270f44 [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0xa6d0583 [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x6b2f4d72 [0202.512] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x3e180244 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x34855b19 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x49862a63 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x41a95682 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x29f7bcb7 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x5b4a9ba8 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x65eed5eb [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x532b9c04 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x549104c3 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x6cc3baaf [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x322e7688 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0xab6b807 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x27c9b632 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x224fd6f3 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x2ce089b [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x246c26a [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x4a75bed9 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x27378e15 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x2cdb55e6 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x3d8c96c5 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x5bcadeed [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x2593a9a4 [0202.513] RtlRandomEx (in: Seed=0xfa8f898 | out: Seed=0xfa8f898) returned 0x608e5044 [0202.521] ReadFile (in: hFile=0x234c, lpBuffer=0x6900558, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0xfa8f894, lpOverlapped=0x0 | out: lpBuffer=0x6900558*, lpNumberOfBytesRead=0xfa8f894*=0x1c3, lpOverlapped=0x0) returned 1 [0202.521] SetFilePointerEx (in: hFile=0x234c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.521] WriteFile (in: hFile=0x234c, lpBuffer=0x6904160*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0xfa8f898, lpOverlapped=0x0 | out: lpBuffer=0x6904160*, lpNumberOfBytesWritten=0xfa8f898*=0x1c3, lpOverlapped=0x0) returned 1 [0205.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42cb8 [0205.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0205.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6904160) returned 1 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6900558) returned 1 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33210) returned 1 [0205.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0205.613] SetFilePointerEx (in: hFile=0x234c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.613] WriteFile (in: hFile=0x234c, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfa8f920, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0xfa8f920*=0x10c, lpOverlapped=0x0) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42cb8) returned 1 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0209.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0209.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0209.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767340 [0209.221] wcscpy (in: _Dest=0x6767340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" [0209.221] wcscat (in: _Dest=0x6767340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.ac3a86" [0209.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.ac3a86", NtPathName=0xfa8f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a6e8 [0214.406] FlushFileBuffers (hFile=0x234c) returned 1 [0214.489] CloseHandle (hObject=0x234c) returned 1 [0214.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766300 [0214.592] wcscpy (in: _Dest=0x6766300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0214.592] wcscat (in: _Dest=0x6766300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\AC3A86-Readme.txt" [0214.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\ac3a86-readme.txt")) returned 0xffffffff [0214.592] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.593] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfa8f8b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfa8f8b4*=0x8b9, lpOverlapped=0x0) returned 1 [0214.595] CloseHandle (hObject=0x234c) returned 1 [0214.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766300) returned 1 [0214.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67500b0) returned 1 Thread: id = 7123 os_tid = 0x1d24 [0197.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 0x2020 [0197.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", dwFileAttributes=0x20) returned 1 [0202.521] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2460 [0202.521] GetFileSizeEx (in: hFile=0x2460, lpFileSize=0x1225f8fc | out: lpFileSize=0x1225f8fc*=300) returned 1 [0202.521] SetFilePointerEx (in: hFile=0x2460, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.521] ReadFile (in: hFile=0x2460, lpBuffer=0x1225f8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1225f8e8, lpOverlapped=0x0 | out: lpBuffer=0x1225f8d8*, lpNumberOfBytesRead=0x1225f8e8*=0x4, lpOverlapped=0x0) returned 1 [0202.523] SetFilePointerEx (in: hFile=0x2460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0202.523] NtQuerySystemTime (in: CurrentTime=0x1225f870 | out: CurrentTime=0x1225f870*=132482711109984000) returned 0x0 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x445eee45 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x6f913cf9 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x4598bb85 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x3b1722e8 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x82593fd [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x4f277d66 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x518dc743 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x6217ea96 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x44559c8c [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x4be403b9 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x60b16d45 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x4f8f5044 [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x63a7dbfb [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x45bb461b [0202.523] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x2c3dc919 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0xdcdaa02 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x31533ee0 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x60dc2a3 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x6f392e8c [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0xab6b807 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0xf40ecf3 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x1a4bac74 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0xa6d0583 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x55f2043d [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x82593fd [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x37f82029 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x49862a63 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x66909a99 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x57944243 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x57f03b5a [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0xf40ecf3 [0202.524] RtlRandomEx (in: Seed=0x1225f868 | out: Seed=0x1225f868) returned 0x43b89477 [0202.532] ReadFile (in: hFile=0x2460, lpBuffer=0x6907d68, nNumberOfBytesToRead=0x12c, lpNumberOfBytesRead=0x1225f864, lpOverlapped=0x0 | out: lpBuffer=0x6907d68*, lpNumberOfBytesRead=0x1225f864*=0x12c, lpOverlapped=0x0) returned 1 [0202.532] SetFilePointerEx (in: hFile=0x2460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.532] WriteFile (in: hFile=0x2460, lpBuffer=0x691ad08*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x1225f868, lpOverlapped=0x0 | out: lpBuffer=0x691ad08*, lpNumberOfBytesWritten=0x1225f868*=0x12c, lpOverlapped=0x0) returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43370 [0205.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42f38 [0205.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0205.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691ad08) returned 1 [0205.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6907d68) returned 1 [0205.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0205.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e33330) returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e40 [0205.607] SetFilePointerEx (in: hFile=0x2460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.607] WriteFile (in: hFile=0x2460, lpBuffer=0x30bc1f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1225f8f0, lpOverlapped=0x0 | out: lpBuffer=0x30bc1f0*, lpNumberOfBytesWritten=0x1225f8f0*=0x10c, lpOverlapped=0x0) returned 1 [0208.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc1f0) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42f38) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43370) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0208.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0208.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea02d0 [0208.765] wcscpy (in: _Dest=0x12ea02d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" [0208.765] wcscat (in: _Dest=0x12ea02d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.ac3a86" [0208.765] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.ac3a86", NtPathName=0x1225f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777a18 [0214.354] FlushFileBuffers (hFile=0x2460) returned 1 [0214.365] CloseHandle (hObject=0x2460) returned 1 [0214.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67667a0 [0214.478] wcscpy (in: _Dest=0x67667a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0214.478] wcscat (in: _Dest=0x67667a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\AC3A86-Readme.txt" [0214.478] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\ac3a86-readme.txt")) returned 0xffffffff [0214.478] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.603] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1225f884, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1225f884*=0x8b9, lpOverlapped=0x0) returned 1 [0214.611] CloseHandle (hObject=0x234c) returned 1 [0214.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67667a0) returned 1 [0214.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ebe0) returned 1 Thread: id = 7124 os_tid = 0x1d28 [0197.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 0x2020 [0197.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0202.532] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x241c [0202.533] GetFileSizeEx (in: hFile=0x241c, lpFileSize=0x1052f9f4 | out: lpFileSize=0x1052f9f4*=203) returned 1 [0202.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b208 [0202.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0202.533] NtQuerySystemTime (in: CurrentTime=0x1052f968 | out: CurrentTime=0x1052f968*=132482711110140000) returned 0x0 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x4ba610e2 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x60c4879f [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x9563594 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x41a95682 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x53de7ab4 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x27c9b632 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0xe720edb [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0xbbaecfe [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x4cb6bd46 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x6217ea96 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x3ee806c8 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x74fbb36d [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x512170d3 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x7e32880f [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x6d5b97f8 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x2644eacc [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x7c5a25d8 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x19dfb801 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x1d26e0b9 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x2dfab9dc [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x26addf98 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x5a59208d [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x7a90a175 [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x27bdb7ad [0202.533] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x7293318a [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x6d5b97f8 [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x96294f3 [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x681027cc [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x8fbdc1 [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x6ee963d9 [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x464d6209 [0202.534] RtlRandomEx (in: Seed=0x1052f960 | out: Seed=0x1052f960) returned 0x2644eacc [0202.541] ReadFile (in: hFile=0x241c, lpBuffer=0x691e910, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0x1052f95c, lpOverlapped=0x0 | out: lpBuffer=0x691e910*, lpNumberOfBytesRead=0x1052f95c*=0xcb, lpOverlapped=0x0) returned 1 [0202.543] SetFilePointerEx (in: hFile=0x241c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.543] WriteFile (in: hFile=0x241c, lpBuffer=0x69134f8*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x1052f960, lpOverlapped=0x0 | out: lpBuffer=0x69134f8*, lpNumberOfBytesWritten=0x1052f960*=0xcb, lpOverlapped=0x0) returned 1 [0205.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0205.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432a8 [0205.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0205.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69134f8) returned 1 [0205.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x691e910) returned 1 [0205.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0205.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32ac0) returned 1 [0205.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f90 [0205.609] SetFilePointerEx (in: hFile=0x241c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.609] WriteFile (in: hFile=0x241c, lpBuffer=0x30bcbc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1052f9e8, lpOverlapped=0x0 | out: lpBuffer=0x30bcbc8*, lpNumberOfBytesWritten=0x1052f9e8*=0x10c, lpOverlapped=0x0) returned 1 [0208.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcbc8) returned 1 [0208.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0208.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0208.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0208.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0208.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b208) returned 1 [0208.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac18) returned 1 [0208.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0208.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1650 [0208.809] wcscpy (in: _Dest=0x12ea1650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" [0208.809] wcscat (in: _Dest=0x12ea1650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.ac3a86" [0208.809] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.ac3a86", NtPathName=0x1052f960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789df0 [0214.394] FlushFileBuffers (hFile=0x241c) returned 1 [0215.110] CloseHandle (hObject=0x241c) returned 1 [0216.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67761d8 [0216.470] wcscpy (in: _Dest=0x67761d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0216.470] wcscat (in: _Dest=0x67761d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\AC3A86-Readme.txt" [0216.470] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\ac3a86-readme.txt")) returned 0xffffffff [0216.471] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ae0 [0216.980] WriteFile (in: hFile=0x1ae0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1052f97c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1052f97c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.531] CloseHandle (hObject=0x1ae0) returned 1 [0225.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67761d8) returned 1 [0225.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f3f8) returned 1 Thread: id = 7125 os_tid = 0x1d34 [0197.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 0x2020 [0197.437] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x242c [0202.543] GetFileSizeEx (in: hFile=0x242c, lpFileSize=0x1229fae4 | out: lpFileSize=0x1229fae4*=177) returned 1 [0202.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0202.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0202.544] NtQuerySystemTime (in: CurrentTime=0x1229fa58 | out: CurrentTime=0x1229fa58*=132482711110140000) returned 0x0 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x57935701 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x3bed47b9 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x14c10de7 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x7824b26a [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x25ff53d1 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x1a51812a [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x6c3c879b [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x27bdb7ad [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x1225b28f [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0xe9b57d [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x480f7a70 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x699d4861 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x388639cd [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0xcc2e82f [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x6d6f56ab [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x4b14fcc6 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x4d8364dd [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x763da714 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x3236d9a1 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x5f524000 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x20c41057 [0202.544] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x5a977fc3 [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x689e1312 [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x584ecab7 [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0xa90b10 [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x21515b9d [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x21590401 [0202.555] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x10d40bde [0202.556] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x4e2be7ae [0202.556] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x47c6470e [0202.556] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x1a51812a [0202.556] RtlRandomEx (in: Seed=0x1229fa50 | out: Seed=0x1229fa50) returned 0x5955c54f [0202.563] ReadFile (in: hFile=0x242c, lpBuffer=0x6917100, nNumberOfBytesToRead=0xb1, lpNumberOfBytesRead=0x1229fa4c, lpOverlapped=0x0 | out: lpBuffer=0x6917100*, lpNumberOfBytesRead=0x1229fa4c*=0xb1, lpOverlapped=0x0) returned 1 [0202.565] SetFilePointerEx (in: hFile=0x242c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.565] WriteFile (in: hFile=0x242c, lpBuffer=0x690bce8*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x1229fa50, lpOverlapped=0x0 | out: lpBuffer=0x690bce8*, lpNumberOfBytesWritten=0x1229fa50*=0xb1, lpOverlapped=0x0) returned 1 [0205.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ba0 [0205.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d436e0 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690bce8) returned 1 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6917100) returned 1 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d09c0) returned 1 [0205.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d00) returned 1 [0205.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b10 [0205.611] SetFilePointerEx (in: hFile=0x242c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.612] WriteFile (in: hFile=0x242c, lpBuffer=0x30bc538*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1229fad8, lpOverlapped=0x0 | out: lpBuffer=0x30bc538*, lpNumberOfBytesWritten=0x1229fad8*=0x10c, lpOverlapped=0x0) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc538) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d436e0) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ba0) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0208.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a970) returned 1 [0208.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0408 [0208.767] wcscpy (in: _Dest=0x12ea0408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" [0208.767] wcscat (in: _Dest=0x12ea0408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.ac3a86" [0208.767] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0x1229fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788d48 [0214.359] FlushFileBuffers (hFile=0x242c) returned 1 [0214.376] CloseHandle (hObject=0x242c) returned 1 [0214.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766678 [0214.480] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0214.480] wcscat (in: _Dest=0x6766678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\AC3A86-Readme.txt" [0214.480] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0214.480] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.613] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1229fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1229fa6c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.616] CloseHandle (hObject=0x234c) returned 1 [0214.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 [0214.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ee30) returned 1 Thread: id = 7126 os_tid = 0x1d38 [0197.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 0x2020 [0197.438] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0202.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe78 [0202.566] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0xd86f784 | out: lpFileSize=0xd86f784*=150) returned 1 [0202.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0202.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0202.566] NtQuerySystemTime (in: CurrentTime=0xd86f6f8 | out: CurrentTime=0xd86f6f8*=132482711110452000) returned 0x0 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x172618e0 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0xd6b743f [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x567a221d [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x75e4a831 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x3396fa72 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x20c41057 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x154d5900 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0xcd7985e [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x5ba4547e [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x3f270f44 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x12f0e8e3 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x485ad14c [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x35fe5aee [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x6ab27bdf [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x2a03d660 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x493078e3 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x31533ee0 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x45362b33 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x6f913cf9 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x31710365 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x6f392e8c [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x70789852 [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x78a0b9e [0202.566] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x7bff23d9 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x24ab7c6 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x452dfad5 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0xd6b743f [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x31fafde2 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x259350a0 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x57a3e1a5 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x3236d9a1 [0202.567] RtlRandomEx (in: Seed=0xd86f6f0 | out: Seed=0xd86f6f0) returned 0x4f0d2395 [0202.574] ReadFile (in: hFile=0xe78, lpBuffer=0x690f8f0, nNumberOfBytesToRead=0x96, lpNumberOfBytesRead=0xd86f6ec, lpOverlapped=0x0 | out: lpBuffer=0x690f8f0*, lpNumberOfBytesRead=0xd86f6ec*=0x96, lpOverlapped=0x0) returned 1 [0202.576] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.576] WriteFile (in: hFile=0xe78, lpBuffer=0x6931538*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0xd86f6f0, lpOverlapped=0x0 | out: lpBuffer=0x6931538*, lpNumberOfBytesWritten=0xd86f6f0*=0x96, lpOverlapped=0x0) returned 1 [0205.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42998 [0205.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c18 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6931538) returned 1 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x690f8f0) returned 1 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ba0) returned 1 [0205.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32dd8) returned 1 [0205.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52d0 [0205.616] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.616] WriteFile (in: hFile=0xe78, lpBuffer=0x30bbfc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd86f778, lpOverlapped=0x0 | out: lpBuffer=0x30bbfc0*, lpNumberOfBytesWritten=0xd86f778*=0x10c, lpOverlapped=0x0) returned 1 [0208.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbfc0) returned 1 [0208.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0208.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c18) returned 1 [0208.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0208.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42998) returned 1 [0208.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0208.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae70) returned 1 [0208.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aad8) returned 1 [0208.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0678 [0208.772] wcscpy (in: _Dest=0x12ea0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" [0208.772] wcscat (in: _Dest=0x12ea0678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.ac3a86" [0208.772] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0xd86f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788fd8 [0214.367] FlushFileBuffers (hFile=0xe78) returned 1 [0214.388] CloseHandle (hObject=0xe78) returned 1 [0214.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766428 [0214.488] wcscpy (in: _Dest=0x6766428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0214.488] wcscat (in: _Dest=0x6766428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\AC3A86-Readme.txt" [0214.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0214.488] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.628] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd86f70c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd86f70c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.630] CloseHandle (hObject=0x234c) returned 1 [0214.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766428) returned 1 [0214.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f648) returned 1 Thread: id = 7127 os_tid = 0x167c [0197.438] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 0x2020 [0197.438] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.577] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0202.577] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0x1140fb2c | out: lpFileSize=0x1140fb2c*=180) returned 1 [0202.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a948 [0202.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0202.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0202.577] NtQuerySystemTime (in: CurrentTime=0x1140faa0 | out: CurrentTime=0x1140faa0*=132482711110608000) returned 0x0 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0xe317a3f [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x51172a25 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x2fd80dd7 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x217702f8 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x71a683ff [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x5b4a9ba8 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x6ee963d9 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x4f35eff8 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x34a91594 [0202.577] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x63a13843 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x40dcdb14 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x3448e7f [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x25a1ca4f [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x7eaa0aff [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x6edf812 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x388639cd [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x78a0b9e [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x4c377fb6 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x32e4b0da [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x769ebbdb [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x763da714 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x37703596 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x718de396 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x571186ac [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x2b0f9fcb [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x7d2c2f0c [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x7bfaf45b [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x234c0ae1 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x3b0dba2 [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x266547ae [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x108dbcda [0202.578] RtlRandomEx (in: Seed=0x1140fa98 | out: Seed=0x1140fa98) returned 0x22c45cc0 [0202.586] ReadFile (in: hFile=0x19a4, lpBuffer=0x6935140, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0x1140fa94, lpOverlapped=0x0 | out: lpBuffer=0x6935140*, lpNumberOfBytesRead=0x1140fa94*=0xb4, lpOverlapped=0x0) returned 1 [0202.587] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.587] WriteFile (in: hFile=0x19a4, lpBuffer=0x6929d28*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x1140fa98, lpOverlapped=0x0 | out: lpBuffer=0x6929d28*, lpNumberOfBytesWritten=0x1140fa98*=0xb4, lpOverlapped=0x0) returned 1 [0205.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b50 [0205.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42a10 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6929d28) returned 1 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6935140) returned 1 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d00d8) returned 1 [0205.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5f0c0) returned 1 [0205.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0205.618] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.618] WriteFile (in: hFile=0x19a4, lpBuffer=0x30bd028*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1140fb20, lpOverlapped=0x0 | out: lpBuffer=0x30bd028*, lpNumberOfBytesWritten=0x1140fb20*=0x10c, lpOverlapped=0x0) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd028) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0208.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0f0) returned 1 [0208.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1788 [0208.812] wcscpy (in: _Dest=0x12ea1788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" [0208.812] wcscat (in: _Dest=0x12ea1788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.ac3a86" [0208.812] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x1140fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789f38 [0214.390] FlushFileBuffers (hFile=0x19a4) returned 1 [0214.392] CloseHandle (hObject=0x19a4) returned 1 [0214.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67661d8 [0214.491] wcscpy (in: _Dest=0x67661d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0214.491] wcscat (in: _Dest=0x67661d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\AC3A86-Readme.txt" [0214.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0214.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.632] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1140fab4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1140fab4*=0x8b9, lpOverlapped=0x0) returned 1 [0214.634] CloseHandle (hObject=0x234c) returned 1 [0214.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67661d8) returned 1 [0214.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750678) returned 1 Thread: id = 7128 os_tid = 0x1680 [0197.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0198.344] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0205.559] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d8 [0205.560] GetFileSizeEx (in: hFile=0x17d8, lpFileSize=0xb75f94c | out: lpFileSize=0xb75f94c*=187) returned 1 [0205.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0205.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca800 [0205.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c98 [0205.560] NtQuerySystemTime (in: CurrentTime=0xb75f8c0 | out: CurrentTime=0xb75f8c0*=132482711140404000) returned 0x0 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x62f85e0b [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x689b8b45 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x5437c78 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x29698be9 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x74d21346 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x28e077e9 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x33918561 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x1ba94362 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x316dfa89 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0xdd7b907 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x1f490642 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x7077cbab [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x54e4baa7 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x67f1cdeb [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x13f78396 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x5b51e974 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x4f1b86fa [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x2a2fbad [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x2c00c9e1 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x3baeec7f [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x2b6f62c3 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x70abec6c [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x6882e985 [0205.560] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x13ab7bb3 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x5245b865 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x3ada2cb4 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x57d58854 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x1ff571c6 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x486922ea [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x1ce956b9 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x28b83763 [0205.561] RtlRandomEx (in: Seed=0xb75f8b8 | out: Seed=0xb75f8b8) returned 0x410fabdd [0205.568] ReadFile (in: hFile=0x17d8, lpBuffer=0x13056890, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xb75f8b4, lpOverlapped=0x0 | out: lpBuffer=0x13056890*, lpNumberOfBytesRead=0xb75f8b4*=0xbb, lpOverlapped=0x0) returned 1 [0208.200] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.200] WriteFile (in: hFile=0x17d8, lpBuffer=0x1305a498*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xb75f8b8, lpOverlapped=0x0 | out: lpBuffer=0x1305a498*, lpNumberOfBytesWritten=0xb75f8b8*=0xbb, lpOverlapped=0x0) returned 1 [0215.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d431e0 [0215.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42c90 [0215.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0215.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1305a498) returned 1 [0215.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13056890) returned 1 [0215.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0215.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2288) returned 1 [0215.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5540 [0215.368] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.368] WriteFile (in: hFile=0x17d8, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb75f940, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0xb75f940*=0x10c, lpOverlapped=0x0) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42c90) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5540) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d431e0) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca800) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0216.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0216.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x678c588 [0216.500] wcscpy (in: _Dest=0x678c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" [0216.500] wcscat (in: _Dest=0x678c588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.ac3a86" [0216.500] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xb75f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6778458 [0216.910] FlushFileBuffers (hFile=0x17d8) returned 1 [0225.489] CloseHandle (hObject=0x17d8) returned 1 [0225.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40b58 [0225.490] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0225.490] wcscat (in: _Dest=0x3d40b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0225.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0225.490] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17d8 [0225.491] WriteFile (in: hFile=0x17d8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb75f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb75f8d4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.494] CloseHandle (hObject=0x17d8) returned 1 [0225.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0225.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750300) returned 1 Thread: id = 7129 os_tid = 0x1684 [0198.347] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0198.347] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0206.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x104c [0214.118] GetFileSizeEx (in: hFile=0x104c, lpFileSize=0xf6bfb24 | out: lpFileSize=0xf6bfb24*=198) returned 1 [0214.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7c0 [0214.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec838 [0214.118] NtQuerySystemTime (in: CurrentTime=0xf6bfa98 | out: CurrentTime=0xf6bfa98*=132482711208264000) returned 0x0 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x2500f2ae [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0xe11e139 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x17d7463f [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x38606182 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x36d1404b [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x3b3f9be1 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x2d9e4eb [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x29a18a59 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x2be29c0 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x35da6295 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x22d2006f [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x16f568d3 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x223b26c0 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x4ca67f42 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x66e11c12 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x7c814d55 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x562bae28 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x11c890d0 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x78acdb02 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x62360fa7 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x1e55e97b [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x43faa53c [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x64c564b4 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x4fa9a6e2 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x138b3b44 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x15ed939 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x1bc5bd6f [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x3d1cca9 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x2c74ebf4 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x59fb6d12 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0xd3bf7f1 [0214.119] RtlRandomEx (in: Seed=0xf6bfa90 | out: Seed=0xf6bfa90) returned 0x5ce2a47b [0214.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13192c88 [0214.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13196890 [0214.128] ReadFile (in: hFile=0x104c, lpBuffer=0x13192c88, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xf6bfa8c, lpOverlapped=0x0 | out: lpBuffer=0x13192c88*, lpNumberOfBytesRead=0xf6bfa8c*=0xc6, lpOverlapped=0x0) returned 1 [0214.130] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.130] WriteFile (in: hFile=0x104c, lpBuffer=0x13196890*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xf6bfa90, lpOverlapped=0x0 | out: lpBuffer=0x13196890*, lpNumberOfBytesWritten=0xf6bfa90*=0xc6, lpOverlapped=0x0) returned 1 [0214.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed030 [0214.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed058 [0214.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed058) returned 1 [0214.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13196890) returned 1 [0214.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13192c88) returned 1 [0214.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5500) returned 1 [0214.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea31d0) returned 1 [0214.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0214.264] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.264] WriteFile (in: hFile=0x104c, lpBuffer=0x6752840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf6bfb18, lpOverlapped=0x0 | out: lpBuffer=0x6752840*, lpNumberOfBytesWritten=0xf6bfb18*=0x10c, lpOverlapped=0x0) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed058) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed030) returned 1 [0214.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7c0) returned 1 [0214.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec860) returned 1 [0214.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec888) returned 1 [0214.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x678ae60 [0214.444] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" [0214.444] wcscat (in: _Dest=0x678ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.ac3a86" [0214.444] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0xf6bfa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6778830 [0216.651] FlushFileBuffers (hFile=0x104c) returned 1 [0216.664] CloseHandle (hObject=0x104c) returned 1 [0216.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c318 [0216.905] wcscpy (in: _Dest=0x678c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0216.905] wcscat (in: _Dest=0x678c318, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0216.905] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0216.905] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d84 [0225.504] WriteFile (in: hFile=0x1d84, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf6bfaac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xf6bfaac*=0x8b9, lpOverlapped=0x0) returned 1 [0225.506] CloseHandle (hObject=0x1d84) returned 1 [0225.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c318) returned 1 [0225.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67553f8) returned 1 Thread: id = 7130 os_tid = 0x1744 [0198.348] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 0x2020 [0198.349] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0206.928] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2380 [0208.887] GetFileSizeEx (in: hFile=0x2380, lpFileSize=0x90df794 | out: lpFileSize=0x90df794*=175) returned 1 [0208.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eacb8 [0208.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eabf0 [0208.887] NtQuerySystemTime (in: CurrentTime=0x90df708 | out: CurrentTime=0x90df708*=132482711173476000) returned 0x0 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x35f7c2c2 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x137d7669 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x1eb7cb4d [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x1f6bc5fa [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x3f9af571 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x7f18e30f [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x131f33e3 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x216dea75 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x35e71810 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x1545f10 [0208.887] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x6074085 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x7df23a9d [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0xfb4cb79 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x66041602 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x212dac5f [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x6e1e057f [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x35c04e9c [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x1a67635e [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x5c70824c [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x20d96155 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x53cb863 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x27ce59cb [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x1636b744 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x337daf78 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x2e6db61 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x779829e0 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0xc1027b [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x668d2ef1 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x53b67391 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x60d18947 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x4bc492f1 [0208.888] RtlRandomEx (in: Seed=0x90df700 | out: Seed=0x90df700) returned 0x11d43735 [0208.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67fed08 [0208.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6802910 [0208.899] ReadFile (in: hFile=0x2380, lpBuffer=0x67fed08, nNumberOfBytesToRead=0xaf, lpNumberOfBytesRead=0x90df6fc, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesRead=0x90df6fc*=0xaf, lpOverlapped=0x0) returned 1 [0208.901] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.901] WriteFile (in: hFile=0x2380, lpBuffer=0x6802910*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x90df700, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesWritten=0x90df700*=0xaf, lpOverlapped=0x0) returned 1 [0209.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0209.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0209.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0209.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0209.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fed08) returned 1 [0209.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85dd8) returned 1 [0209.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822948) returned 1 [0209.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ea0 [0209.228] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.228] WriteFile (in: hFile=0x2380, lpBuffer=0x30bc420*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x90df788, lpOverlapped=0x0 | out: lpBuffer=0x30bc420*, lpNumberOfBytesWritten=0x90df788*=0x10c, lpOverlapped=0x0) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0209.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eacb8) returned 1 [0209.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac18) returned 1 [0209.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab50) returned 1 [0209.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678ae60 [0209.530] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" [0209.530] wcscat (in: _Dest=0x678ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.ac3a86" [0209.530] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0x90df700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0214.438] FlushFileBuffers (hFile=0x2380) returned 1 [0214.638] CloseHandle (hObject=0x2380) returned 1 [0214.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6750678 [0214.645] wcscpy (in: _Dest=0x6750678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0214.645] wcscat (in: _Dest=0x6750678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\AC3A86-Readme.txt" [0214.645] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0214.646] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x124c [0214.665] WriteFile (in: hFile=0x124c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x90df71c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x90df71c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.674] CloseHandle (hObject=0x124c) returned 1 [0214.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750678) returned 1 [0214.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755648) returned 1 Thread: id = 7131 os_tid = 0x1748 [0198.349] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 0x2020 [0198.349] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0203.887] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1164 [0203.888] GetFileSizeEx (in: hFile=0x1164, lpFileSize=0xfadfd44 | out: lpFileSize=0xfadfd44*=281) returned 1 [0203.888] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.888] ReadFile (in: hFile=0x1164, lpBuffer=0xfadfd20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfadfd30, lpOverlapped=0x0 | out: lpBuffer=0xfadfd20*, lpNumberOfBytesRead=0xfadfd30*=0x4, lpOverlapped=0x0) returned 1 [0203.889] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cbe8 [0203.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c710 [0203.890] NtQuerySystemTime (in: CurrentTime=0xfadfcb8 | out: CurrentTime=0xfadfcb8*=132482711123712000) returned 0x0 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x622cd956 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x2143df24 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x78e4c0de [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x48535674 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x435a5b0b [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x26faad29 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x3aa0cfa3 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x620105fb [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0xdfce224 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x261ba465 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x7d13940b [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x5004461e [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x23b71d25 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x3da31114 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x293a4f37 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x3b2cf3b8 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x61b51e41 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x6dde6f37 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x5b37edcb [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x47a313bd [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x4ba99461 [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x56d6dccb [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x3fcf4a5f [0203.890] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x4bf4e78b [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x5fb3119c [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x465c2dd6 [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x1fbef9be [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x2c597e4e [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x48344959 [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x2495a7 [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x32f5267c [0203.891] RtlRandomEx (in: Seed=0xfadfcb0 | out: Seed=0xfadfcb0) returned 0x25cff99c [0203.899] ReadFile (in: hFile=0x1164, lpBuffer=0x12ff48d0, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xfadfcac, lpOverlapped=0x0 | out: lpBuffer=0x12ff48d0*, lpNumberOfBytesRead=0xfadfcac*=0x119, lpOverlapped=0x0) returned 1 [0203.899] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.899] WriteFile (in: hFile=0x1164, lpBuffer=0x12ff84d8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xfadfcb0, lpOverlapped=0x0 | out: lpBuffer=0x12ff84d8*, lpNumberOfBytesWritten=0xfadfcb0*=0x119, lpOverlapped=0x0) returned 1 [0206.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447d8 [0206.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3441c0 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff84d8) returned 1 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff48d0) returned 1 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0206.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3248) returned 1 [0206.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3720 [0206.401] SetFilePointerEx (in: hFile=0x1164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.401] WriteFile (in: hFile=0x1164, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfadfd38, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0xfadfd38*=0x10c, lpOverlapped=0x0) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3441c0) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3720) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447d8) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0206.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b0d0 [0206.665] wcscpy (in: _Dest=0x678b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" [0206.665] wcscat (in: _Dest=0x678b0d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.ac3a86" [0206.665] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0xfadfcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777640 [0209.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777640) returned 1 [0209.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efa498) returned 1 [0209.448] NtQueryInformationFile (in: FileHandle=0x1164, IoStatusBlock=0xfadfc88, FileInformation=0xfadfc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfadfc88, FileInformation=0xfadfc90) returned 0x0 [0209.448] NtSetInformationFile (FileHandle=0x1164, IoStatusBlock=0xfadfc88, FileInformation=0xfadfc90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b0d0) returned 1 [0209.678] FlushFileBuffers (hFile=0x1164) returned 1 [0209.689] CloseHandle (hObject=0x1164) returned 1 [0209.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779648 [0209.773] wcscpy (in: _Dest=0x6779648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0209.773] wcscat (in: _Dest=0x6779648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\AC3A86-Readme.txt" [0209.773] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0209.773] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.285] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfadfccc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfadfccc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.287] CloseHandle (hObject=0x1bf8) returned 1 [0210.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779648) returned 1 [0210.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754f58) returned 1 Thread: id = 7132 os_tid = 0x1768 [0198.350] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 0x2020 [0198.350] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", dwFileAttributes=0x20) returned 1 [0203.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce4 [0203.875] GetFileSizeEx (in: hFile=0xce4, lpFileSize=0xfd9f7ec | out: lpFileSize=0xfd9f7ec*=334) returned 1 [0203.875] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x14a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.875] ReadFile (in: hFile=0xce4, lpBuffer=0xfd9f7c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfd9f7d8, lpOverlapped=0x0 | out: lpBuffer=0xfd9f7c8*, lpNumberOfBytesRead=0xfd9f7d8*=0x4, lpOverlapped=0x0) returned 1 [0203.877] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0203.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cbe8 [0203.877] NtQuerySystemTime (in: CurrentTime=0xfd9f760 | out: CurrentTime=0xfd9f760*=132482711123556000) returned 0x0 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x345f126d [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x1458e175 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x1c10f88a [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x6385a951 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x6fad55ac [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x72c8f9ce [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x274552a6 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x16114771 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x296e5cb2 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x3acba863 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x27d3e23b [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x2fd09a0f [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x3b770b63 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x6d84cf31 [0203.877] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0xb371750 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x19fb0731 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x3f1bbed3 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x19c0af13 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x1ea8c96b [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0xca19246 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x57a92eb [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x31b98558 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x5f6a695f [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0xcf2a25d [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0xd84c6ae [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x36205c22 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x2e4d6b58 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x40c315cc [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x2f9cbd7a [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x994c2f2 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x200cae46 [0203.878] RtlRandomEx (in: Seed=0xfd9f758 | out: Seed=0xfd9f758) returned 0x59dd03df [0203.885] ReadFile (in: hFile=0xce4, lpBuffer=0x12fed0c0, nNumberOfBytesToRead=0x14e, lpNumberOfBytesRead=0xfd9f754, lpOverlapped=0x0 | out: lpBuffer=0x12fed0c0*, lpNumberOfBytesRead=0xfd9f754*=0x14e, lpOverlapped=0x0) returned 1 [0203.886] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.886] WriteFile (in: hFile=0xce4, lpBuffer=0x12ff0cc8*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0xfd9f758, lpOverlapped=0x0 | out: lpBuffer=0x12ff0cc8*, lpNumberOfBytesWritten=0xfd9f758*=0x14e, lpOverlapped=0x0) returned 1 [0206.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344260 [0206.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x344288 [0206.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344288) returned 1 [0206.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ff0cc8) returned 1 [0206.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fed0c0) returned 1 [0206.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 [0206.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c3200) returned 1 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3b10 [0206.403] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.403] WriteFile (in: hFile=0xce4, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfd9f7e0, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xfd9f7e0*=0x10c, lpOverlapped=0x0) returned 1 [0209.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0209.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0209.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344288) returned 1 [0209.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0209.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x344260) returned 1 [0209.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0209.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0209.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0209.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678aab8 [0209.526] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" [0209.526] wcscat (in: _Dest=0x678aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.ac3a86" [0209.526] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.ac3a86", NtPathName=0xfd9f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778830 [0214.434] FlushFileBuffers (hFile=0xce4) returned 1 [0214.636] CloseHandle (hObject=0xce4) returned 1 [0214.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6764e30 [0214.716] wcscpy (in: _Dest=0x6764e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0214.716] wcscat (in: _Dest=0x6764e30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\AC3A86-Readme.txt" [0214.716] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\ac3a86-readme.txt")) returned 0xffffffff [0214.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x106c [0215.947] WriteFile (in: hFile=0x106c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfd9f774, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfd9f774*=0x8b9, lpOverlapped=0x0) returned 1 [0216.992] CloseHandle (hObject=0x106c) returned 1 [0225.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764e30) returned 1 [0225.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755898) returned 1 Thread: id = 7133 os_tid = 0x1770 [0198.351] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 0x2020 [0198.351] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0203.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1544 [0203.858] GetFileSizeEx (in: hFile=0x1544, lpFileSize=0x1204f7cc | out: lpFileSize=0x1204f7cc*=197) returned 1 [0203.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef40d8 [0203.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0203.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0203.858] NtQuerySystemTime (in: CurrentTime=0x1204f740 | out: CurrentTime=0x1204f740*=132482711123400000) returned 0x0 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x67385036 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x520e70a4 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x30b366 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x163d7b3a [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x6f21f575 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x1f4f6be9 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x2e0933d1 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0xdd80ae9 [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x5f9542ee [0203.858] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x3af68123 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x456b3341 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x7db125df [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x3d203012 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0xdd80ae9 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0xd500cd6 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x1c214c43 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x7fa2e918 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x678167b2 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x13cb4f0a [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x7865773a [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x5f05a7de [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x7c7d24b3 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0xf49f8d [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x3b770b63 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x55432c42 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x42aa6dde [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x6ce860c [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x3fd5690 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x37ca09d1 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x1e766528 [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x1a24890f [0203.859] RtlRandomEx (in: Seed=0x1204f738 | out: Seed=0x1204f738) returned 0x6e3b75e6 [0203.867] ReadFile (in: hFile=0x1544, lpBuffer=0x12fe58b0, nNumberOfBytesToRead=0xc5, lpNumberOfBytesRead=0x1204f734, lpOverlapped=0x0 | out: lpBuffer=0x12fe58b0*, lpNumberOfBytesRead=0x1204f734*=0xc5, lpOverlapped=0x0) returned 1 [0203.874] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.874] WriteFile (in: hFile=0x1544, lpBuffer=0x12fe94b8*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x1204f738, lpOverlapped=0x0 | out: lpBuffer=0x12fe94b8*, lpNumberOfBytesWritten=0x1204f738*=0xc5, lpOverlapped=0x0) returned 1 [0206.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3448c8 [0206.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3447b0 [0206.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0206.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe94b8) returned 1 [0206.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fe58b0) returned 1 [0206.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0206.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c31b8) returned 1 [0206.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0206.396] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.396] WriteFile (in: hFile=0x1544, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1204f7c0, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0x1204f7c0*=0x10c, lpOverlapped=0x0) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3447b0) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3448c8) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0206.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b208 [0206.663] wcscpy (in: _Dest=0x678b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" [0206.663] wcscat (in: _Dest=0x678b208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.ac3a86" [0206.663] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0x1204f738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777788 [0209.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777788) returned 1 [0209.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12efa270) returned 1 [0209.445] NtQueryInformationFile (in: FileHandle=0x1544, IoStatusBlock=0x1204f710, FileInformation=0x1204f718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1204f710, FileInformation=0x1204f718) returned 0x0 [0209.445] NtSetInformationFile (FileHandle=0x1544, IoStatusBlock=0x1204f710, FileInformation=0x1204f718, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b208) returned 1 [0209.676] FlushFileBuffers (hFile=0x1544) returned 1 [0209.682] CloseHandle (hObject=0x1544) returned 1 [0209.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6779f88 [0209.770] wcscpy (in: _Dest=0x6779f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0209.770] wcscat (in: _Dest=0x6779f88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\AC3A86-Readme.txt" [0209.770] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0209.770] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bf8 [0210.281] WriteFile (in: hFile=0x1bf8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1204f754, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1204f754*=0x8b9, lpOverlapped=0x0) returned 1 [0210.283] CloseHandle (hObject=0x1bf8) returned 1 [0210.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779f88) returned 1 [0210.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754d08) returned 1 Thread: id = 7134 os_tid = 0x1774 [0198.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b928 [0198.352] wcscpy (in: _Dest=0x35b928, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0198.352] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0198.352] wcscat (in: _Dest=0x35b928, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*" [0198.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7f50 [0198.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.154] wcscmp (_String1=".", _String2=".") returned 0 [0204.154] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.154] wcscmp (_String1="..", _String2=".") returned 1 [0204.155] wcscmp (_String1="..", _String2="..") returned 0 [0204.155] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.155] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.155] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x675aff8 [0204.155] wcscpy (in: _Dest=0x675aff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0204.155] wcscat (in: _Dest=0x675aff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0204.155] wcscat (in: _Dest=0x675aff8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" [0204.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675aff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0204.156] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.156] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.156] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675b0b8 [0204.156] wcscpy (in: _Dest=0x675b0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0204.156] wcscat (in: _Dest=0x675b0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0204.156] wcscat (in: _Dest=0x675b0b8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" [0204.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0204.159] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7f50 | out: lpFindFileData=0x68b7f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.159] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7f50) returned 1 [0204.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0204.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e768) returned 1 Thread: id = 7135 os_tid = 0x17c4 [0198.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 0x20 [0204.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0204.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.105] GetLastError () returned 0x5 [0204.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0204.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 7136 os_tid = 0x17f8 [0198.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 0x20 [0204.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0204.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.104] GetLastError () returned 0x5 [0204.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0204.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2c48) returned 1 Thread: id = 7137 os_tid = 0x5e8 [0198.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b718 [0198.355] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0198.355] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0198.355] wcscat (in: _Dest=0x35b718, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*" [0198.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baaa0 [0198.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.160] wcscmp (_String1=".", _String2=".") returned 0 [0204.160] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.160] wcscmp (_String1="..", _String2=".") returned 1 [0204.160] wcscmp (_String1="..", _String2="..") returned 0 [0204.160] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.160] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.160] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e36930 [0204.160] wcscpy (in: _Dest=0x3e36930, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0204.160] wcscat (in: _Dest=0x3e36930, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0204.160] wcscat (in: _Dest=0x3e36930, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" [0204.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e36930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0204.163] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.163] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.163] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682e8a0 [0204.163] wcscpy (in: _Dest=0x682e8a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0204.163] wcscat (in: _Dest=0x682e8a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0204.163] wcscat (in: _Dest=0x682e8a0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0204.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0204.164] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.164] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.164] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682e648 [0204.164] wcscpy (in: _Dest=0x682e648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0204.164] wcscat (in: _Dest=0x682e648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0204.165] wcscat (in: _Dest=0x682e648, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0204.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0204.166] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68baaa0 | out: lpFindFileData=0x68baaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.166] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baaa0) returned 1 [0204.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0204.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 7138 os_tid = 0x1d40 [0198.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 0x20 [0204.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0204.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.102] GetLastError () returned 0x5 [0204.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0204.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2a20) returned 1 Thread: id = 7139 os_tid = 0x4fc [0198.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3ee23a8 [0198.356] wcscpy (in: _Dest=0x3ee23a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0198.356] wcscat (in: _Dest=0x3ee23a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0198.356] wcscat (in: _Dest=0x3ee23a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*" [0198.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b7ce8 [0198.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.338] wcscmp (_String1=".", _String2=".") returned 0 [0204.338] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.338] wcscmp (_String1="..", _String2=".") returned 1 [0204.338] wcscmp (_String1="..", _String2="..") returned 0 [0204.338] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0204.338] wcscmp (_String1="arrow.png", _String2=".") returned 1 [0204.338] wcscmp (_String1="arrow.png", _String2="..") returned 1 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682ed50 [0204.338] wcscpy (in: _Dest=0x682ed50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0204.338] wcscat (in: _Dest=0x682ed50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0204.338] wcscat (in: _Dest=0x682ed50, _Source="arrow.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" [0205.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682ed50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0205.428] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0205.428] wcscmp (_String1="Document.gif", _String2=".") returned 1 [0205.428] wcscmp (_String1="Document.gif", _String2="..") returned 1 [0205.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f520 [0205.428] wcscpy (in: _Dest=0x682f520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.428] wcscat (in: _Dest=0x682f520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.428] wcscat (in: _Dest=0x682f520, _Source="Document.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" [0205.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0205.429] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0205.429] wcscmp (_String1="Generic.gif", _String2=".") returned 1 [0205.429] wcscmp (_String1="Generic.gif", _String2="..") returned 1 [0205.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x682f390 [0205.429] wcscpy (in: _Dest=0x682f390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.429] wcscat (in: _Dest=0x682f390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.429] wcscat (in: _Dest=0x682f390, _Source="Generic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" [0205.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0205.431] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0205.431] wcscmp (_String1="gradient.png", _String2=".") returned 1 [0205.431] wcscmp (_String1="gradient.png", _String2="..") returned 1 [0205.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682e580 [0205.431] wcscpy (in: _Dest=0x682e580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.431] wcscat (in: _Dest=0x682e580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.431] wcscat (in: _Dest=0x682e580, _Source="gradient.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" [0205.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682e580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0205.432] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0205.432] wcscmp (_String1="Main.gif", _String2=".") returned 1 [0205.432] wcscmp (_String1="Main.gif", _String2="..") returned 1 [0205.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x675aab8 [0205.432] wcscpy (in: _Dest=0x675aab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.432] wcscat (in: _Dest=0x675aab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.432] wcscat (in: _Dest=0x675aab8, _Source="Main.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" [0205.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0205.433] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0205.433] wcscmp (_String1="Person.gif", _String2=".") returned 1 [0205.433] wcscmp (_String1="Person.gif", _String2="..") returned 1 [0205.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682fb60 [0205.433] wcscpy (in: _Dest=0x682fb60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.433] wcscat (in: _Dest=0x682fb60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.433] wcscat (in: _Dest=0x682fb60, _Source="Person.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" [0205.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0205.434] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0205.434] wcscmp (_String1="Response.gif", _String2=".") returned 1 [0205.434] wcscmp (_String1="Response.gif", _String2="..") returned 1 [0205.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682efa8 [0205.434] wcscpy (in: _Dest=0x682efa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0205.434] wcscat (in: _Dest=0x682efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0205.434] wcscat (in: _Dest=0x682efa8, _Source="Response.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" [0205.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0205.435] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b7ce8 | out: lpFindFileData=0x68b7ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0205.435] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0205.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b7ce8) returned 1 [0205.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee23a8) returned 1 [0205.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 7140 os_tid = 0x1d44 [0198.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 0x20 [0204.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0204.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.110] GetLastError () returned 0x5 [0204.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0204.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1f58) returned 1 Thread: id = 7141 os_tid = 0x1d48 [0198.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 0x20 [0204.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0204.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.109] GetLastError () returned 0x5 [0204.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0204.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 7142 os_tid = 0x40c [0198.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 0x20 [0204.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0204.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.108] GetLastError () returned 0x5 [0204.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0204.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f5e8) returned 1 Thread: id = 7143 os_tid = 0x1d4c [0198.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 0x20 [0204.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0204.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.145] GetLastError () returned 0x5 [0204.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0204.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e8a0) returned 1 Thread: id = 7144 os_tid = 0x1d50 [0198.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 0x20 [0204.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0204.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.143] GetLastError () returned 0x5 [0204.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0204.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 Thread: id = 7145 os_tid = 0x1d54 [0198.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3ee22f0 [0198.358] wcscpy (in: _Dest=0x3ee22f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0198.358] wcscat (in: _Dest=0x3ee22f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0198.358] wcscat (in: _Dest=0x3ee22f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*" [0198.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9e98 [0198.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.137] wcscmp (_String1=".", _String2=".") returned 0 [0204.137] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.137] wcscmp (_String1="..", _String2=".") returned 1 [0204.137] wcscmp (_String1="..", _String2="..") returned 0 [0204.138] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0204.138] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0204.138] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0204.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f778 [0204.138] wcscpy (in: _Dest=0x682f778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0204.138] wcscat (in: _Dest=0x682f778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0204.138] wcscat (in: _Dest=0x682f778, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0204.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0204.139] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.139] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.139] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3e35f70 [0204.139] wcscpy (in: _Dest=0x3e35f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0204.139] wcscat (in: _Dest=0x3e35f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0204.139] wcscat (in: _Dest=0x3e35f70, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0204.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e35f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0204.140] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.140] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.140] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x682f6b0 [0204.140] wcscpy (in: _Dest=0x682f6b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0204.141] wcscat (in: _Dest=0x682f6b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0204.141] wcscat (in: _Dest=0x682f6b0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0204.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0204.142] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9e98 | out: lpFindFileData=0x68b9e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.142] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9e98) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee22f0) returned 1 [0204.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1ea0) returned 1 Thread: id = 7146 os_tid = 0x1d5c [0198.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 0x20 [0204.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0204.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.136] GetLastError () returned 0x5 [0204.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0204.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 7147 os_tid = 0x1d60 [0198.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 0x20 [0204.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0204.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.096] GetLastError () returned 0x5 [0204.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0204.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 7148 os_tid = 0x1d64 [0198.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x697e618 [0198.359] wcscpy (in: _Dest=0x697e618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0198.359] wcscat (in: _Dest=0x697e618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0198.359] wcscat (in: _Dest=0x697e618, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*" [0198.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b88f0 [0198.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.167] wcscmp (_String1=".", _String2=".") returned 0 [0204.167] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.167] wcscmp (_String1="..", _String2=".") returned 1 [0204.167] wcscmp (_String1="..", _String2="..") returned 0 [0204.168] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.168] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.168] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x682f2c8 [0204.168] wcscpy (in: _Dest=0x682f2c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0204.168] wcscat (in: _Dest=0x682f2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0204.168] wcscat (in: _Dest=0x682f2c8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" [0204.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682f2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0204.169] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0204.169] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0204.169] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0204.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x675b238 [0204.169] wcscpy (in: _Dest=0x675b238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0204.169] wcscat (in: _Dest=0x675b238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0204.169] wcscat (in: _Dest=0x675b238, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" [0204.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0204.170] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.170] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.170] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675b2f8 [0204.170] wcscpy (in: _Dest=0x675b2f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0204.170] wcscat (in: _Dest=0x675b2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0204.170] wcscat (in: _Dest=0x675b2f8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" [0204.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0204.171] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.171] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.171] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x675ae78 [0204.171] wcscpy (in: _Dest=0x675ae78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0204.171] wcscat (in: _Dest=0x675ae78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0204.171] wcscat (in: _Dest=0x675ae78, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" [0204.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675ae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0204.172] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b88f0 | out: lpFindFileData=0x68b88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.172] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b88f0) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e618) returned 1 [0204.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e960) returned 1 Thread: id = 7149 os_tid = 0x1d68 [0198.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 0x20 [0204.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0204.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.173] GetLastError () returned 0x5 [0204.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0204.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bd48) returned 1 Thread: id = 7150 os_tid = 0x1d6c [0198.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0198.360] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0198.360] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0198.360] wcscat (in: _Dest=0x35c378, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*" [0198.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b81b8 [0198.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.090] wcscmp (_String1=".", _String2=".") returned 0 [0204.090] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.090] wcscmp (_String1="..", _String2=".") returned 1 [0204.090] wcscmp (_String1="..", _String2="..") returned 0 [0204.090] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.090] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.090] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x682fa98 [0204.090] wcscpy (in: _Dest=0x682fa98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0204.090] wcscat (in: _Dest=0x682fa98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0204.090] wcscat (in: _Dest=0x682fa98, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" [0204.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x682fa98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0204.091] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0204.091] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0204.091] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0204.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675b178 [0204.091] wcscpy (in: _Dest=0x675b178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0204.091] wcscat (in: _Dest=0x675b178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0204.091] wcscat (in: _Dest=0x675b178, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" [0204.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675b178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0204.092] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.092] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.092] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x675ac38 [0204.092] wcscpy (in: _Dest=0x675ac38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0204.092] wcscat (in: _Dest=0x675ac38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0204.092] wcscat (in: _Dest=0x675ac38, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0204.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675ac38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0204.093] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.093] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.093] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x675af38 [0204.093] wcscpy (in: _Dest=0x675af38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0204.093] wcscat (in: _Dest=0x675af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0204.093] wcscat (in: _Dest=0x675af38, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" [0204.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0204.094] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b81b8 | out: lpFindFileData=0x68b81b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.094] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b8) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0204.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e228) returned 1 Thread: id = 7151 os_tid = 0x1d70 [0198.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 0x20 [0204.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0204.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.175] GetLastError () returned 0x5 [0204.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0204.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 7152 os_tid = 0x1c4 [0198.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 0x20 [0204.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0204.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.088] GetLastError () returned 0x5 [0204.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0204.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 7153 os_tid = 0x1308 [0198.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 0x20 [0203.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0203.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.280] GetLastError () returned 0x5 [0203.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0203.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 7154 os_tid = 0x168c [0198.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 0x20 [0204.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0204.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.135] GetLastError () returned 0x5 [0204.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0204.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee2460) returned 1 Thread: id = 7155 os_tid = 0x1db4 [0198.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 0x2020 [0198.362] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0204.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b68 [0204.230] GetFileSizeEx (in: hFile=0x1b68, lpFileSize=0x126ffb84 | out: lpFileSize=0x126ffb84*=190) returned 1 [0204.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43f50 [0204.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ee8 [0204.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43280 [0204.230] NtQuerySystemTime (in: CurrentTime=0x126ffaf8 | out: CurrentTime=0x126ffaf8*=132482711126988000) returned 0x0 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x72c4d745 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x6d4fd44 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x4e28cc96 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x6ac34b04 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x172e931c [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x7976fe74 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x322e115d [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x2fa92a82 [0204.230] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x1c8a56e3 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x471228db [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x2152034e [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x20dba51e [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x70ab2357 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x4ecfb09a [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x3129b7ff [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x3955f2fd [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x6e709a8a [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x579dc984 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x1a8a2a33 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x23eb2abd [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x39549a68 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x8d5183f [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x6bb787b6 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x3c152200 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x7eadffa [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x2afc434c [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x39d8bb2c [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x23eb2abd [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x2bb37164 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x4affcff4 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x64735591 [0204.231] RtlRandomEx (in: Seed=0x126ffaf0 | out: Seed=0x126ffaf0) returned 0x397056f4 [0204.241] ReadFile (in: hFile=0x1b68, lpBuffer=0x13040060, nNumberOfBytesToRead=0xbe, lpNumberOfBytesRead=0x126ffaec, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0x126ffaec*=0xbe, lpOverlapped=0x0) returned 1 [0204.243] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.243] WriteFile (in: hFile=0x1b68, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x126ffaf0, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0x126ffaf0*=0xbe, lpOverlapped=0x0) returned 1 [0205.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42b28 [0205.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43690 [0205.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0205.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0205.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13040060) returned 1 [0205.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86120) returned 1 [0205.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e4eb28) returned 1 [0205.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ff0 [0205.614] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.614] WriteFile (in: hFile=0x1b68, lpBuffer=0x30bbea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x126ffb78, lpOverlapped=0x0 | out: lpBuffer=0x30bbea8*, lpNumberOfBytesWritten=0x126ffb78*=0x10c, lpOverlapped=0x0) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbea8) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43690) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b28) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ee8) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43348) returned 1 [0208.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d429e8) returned 1 [0208.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0540 [0208.770] wcscpy (in: _Dest=0x12ea0540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" [0208.770] wcscat (in: _Dest=0x12ea0540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.ac3a86" [0208.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0x126ffaf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788e90 [0214.363] FlushFileBuffers (hFile=0x1b68) returned 1 [0214.377] CloseHandle (hObject=0x1b68) returned 1 [0214.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766550 [0214.481] wcscpy (in: _Dest=0x6766550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0214.481] wcscat (in: _Dest=0x6766550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\AC3A86-Readme.txt" [0214.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0214.482] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234c [0214.618] WriteFile (in: hFile=0x234c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x126ffb0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x126ffb0c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.621] CloseHandle (hObject=0x234c) returned 1 [0214.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766550) returned 1 [0214.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6755ae8) returned 1 Thread: id = 7156 os_tid = 0x1db8 [0198.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20 [0199.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0199.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.539] GetLastError () returned 0x5 [0199.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0199.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 7157 os_tid = 0x1dbc [0198.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20 [0199.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0199.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.540] GetLastError () returned 0x5 [0199.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0199.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 7158 os_tid = 0x262c [0198.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20 [0199.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0199.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.542] GetLastError () returned 0x5 [0199.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0199.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 7159 os_tid = 0x1dc0 [0198.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20 [0199.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0199.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.544] GetLastError () returned 0x5 [0199.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0199.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 7160 os_tid = 0x1dc4 [0198.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20 [0199.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0199.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.513] GetLastError () returned 0x5 [0199.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0199.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 7161 os_tid = 0x1dc8 [0198.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20 [0199.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0199.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.545] GetLastError () returned 0x5 [0199.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0199.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 7162 os_tid = 0x1dd4 [0198.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20 [0199.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0199.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.515] GetLastError () returned 0x5 [0199.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0199.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 7163 os_tid = 0x1dd8 [0198.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20 [0199.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0199.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.516] GetLastError () returned 0x5 [0199.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0199.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 7164 os_tid = 0x1ddc [0198.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20 [0199.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0199.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.518] GetLastError () returned 0x5 [0199.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0199.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 7165 os_tid = 0x1de0 [0198.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20 [0199.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.519] GetLastError () returned 0x5 [0199.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 7166 os_tid = 0x1de4 [0198.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20 [0199.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0199.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.521] GetLastError () returned 0x5 [0199.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0199.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 7167 os_tid = 0x1de8 [0198.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20 [0199.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0199.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.522] GetLastError () returned 0x5 [0199.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0199.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 7168 os_tid = 0x1dec [0198.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20 [0199.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0199.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.523] GetLastError () returned 0x5 [0199.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0199.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 7169 os_tid = 0x1df0 [0198.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20 [0199.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0199.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.525] GetLastError () returned 0x5 [0199.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0199.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 7170 os_tid = 0x1df4 [0198.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20 [0199.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0199.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.526] GetLastError () returned 0x5 [0199.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0199.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 7171 os_tid = 0x1df8 [0198.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20 [0199.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0199.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.527] GetLastError () returned 0x5 [0199.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0199.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 7172 os_tid = 0x1dfc [0198.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20 [0199.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0199.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.547] GetLastError () returned 0x5 [0199.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0199.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 7173 os_tid = 0x1e00 [0198.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20 [0199.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0199.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.548] GetLastError () returned 0x5 [0199.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0199.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 7174 os_tid = 0x1e04 [0198.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20 [0199.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0199.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.550] GetLastError () returned 0x5 [0199.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0199.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 7175 os_tid = 0x1e08 [0198.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20 [0199.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0199.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.530] GetLastError () returned 0x5 [0199.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0199.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 7176 os_tid = 0x1e0c [0198.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20 [0199.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0199.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.531] GetLastError () returned 0x5 [0199.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0199.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 7177 os_tid = 0x1e10 [0198.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20 [0199.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0199.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.529] GetLastError () returned 0x5 [0199.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0199.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 7178 os_tid = 0x1e14 [0198.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20 [0199.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0199.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.532] GetLastError () returned 0x5 [0199.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0199.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 7179 os_tid = 0x130c [0198.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20 [0199.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0199.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.534] GetLastError () returned 0x5 [0199.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0199.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 7180 os_tid = 0x11d8 [0198.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20 [0199.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0199.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.535] GetLastError () returned 0x5 [0199.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0199.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 7181 os_tid = 0x11e0 [0198.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20 [0199.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0199.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.537] GetLastError () returned 0x5 [0199.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0199.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 7182 os_tid = 0x1e1c [0198.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20 [0199.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0199.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.510] GetLastError () returned 0x5 [0199.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0199.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 7183 os_tid = 0x1e20 [0198.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20 [0199.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0199.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.551] GetLastError () returned 0x5 [0199.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0199.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 7184 os_tid = 0x1e24 [0198.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20 [0199.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0199.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.512] GetLastError () returned 0x5 [0199.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0199.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 7185 os_tid = 0x1e28 [0199.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20 [0199.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0199.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.161] GetLastError () returned 0x5 [0199.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0199.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 7186 os_tid = 0x26a0 [0199.163] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0199.163] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0206.929] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2358 [0215.026] GetFileSizeEx (in: hFile=0x2358, lpFileSize=0x7f1fdac | out: lpFileSize=0x7f1fdac*=213) returned 1 [0215.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec108 [0215.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec0e0 [0215.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec040 [0215.026] NtQuerySystemTime (in: CurrentTime=0x7f1fd20 | out: CurrentTime=0x7f1fd20*=132482711217468000) returned 0x0 [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0xbc337c1 [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x75e23d14 [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0xc5a7d89 [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x4c247c1f [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x8b1912c [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x4380f56e [0215.026] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x21a32c20 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x7ac15b49 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x5609f4e2 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x33ac3099 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x13632d28 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x4d7cbf45 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x723fe5ce [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x31176aca [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x24bb0f30 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x6e070ecb [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x7cbf3d18 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x37e2dda1 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x4f947407 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x37e2dda1 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x310c286c [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x352ef94f [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x589b7105 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x2839940d [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x2cdaeb7c [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x3debe99b [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x12bb6779 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x3c7811f6 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x1832e5f8 [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0xfa4754f [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x69e01edc [0215.027] RtlRandomEx (in: Seed=0x7f1fd18 | out: Seed=0x7f1fd18) returned 0x42299c73 [0215.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec108) returned 1 [0215.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1310b478 [0215.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1310f080 [0215.038] ReadFile (in: hFile=0x2358, lpBuffer=0x1310b478, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x7f1fd14, lpOverlapped=0x0 | out: lpBuffer=0x1310b478*, lpNumberOfBytesRead=0x7f1fd14*=0xd5, lpOverlapped=0x0) returned 1 [0215.046] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.046] WriteFile (in: hFile=0x2358, lpBuffer=0x1310f080*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x7f1fd18, lpOverlapped=0x0 | out: lpBuffer=0x1310f080*, lpNumberOfBytesWritten=0x7f1fd18*=0xd5, lpOverlapped=0x0) returned 1 [0216.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa38 [0216.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa10 [0216.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa10) returned 1 [0216.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1310f080) returned 1 [0216.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1310b478) returned 1 [0216.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0216.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32d90) returned 1 [0216.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5e78 [0216.581] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.581] WriteFile (in: hFile=0x2358, lpBuffer=0x675e610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f1fda0, lpOverlapped=0x0 | out: lpBuffer=0x675e610*, lpNumberOfBytesWritten=0x7f1fda0*=0x10c, lpOverlapped=0x0) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e610) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ea8) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa10) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e78) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0216.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec0e0) returned 1 [0216.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd10) returned 1 [0216.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd38) returned 1 [0216.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea13e0 [0216.855] wcscpy (in: _Dest=0x12ea13e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" [0216.855] wcscat (in: _Dest=0x12ea13e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.ac3a86" [0216.855] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0x7f1fd18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777a18 [0224.654] FlushFileBuffers (hFile=0x2358) returned 1 [0224.661] CloseHandle (hObject=0x2358) returned 1 [0224.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c550 [0224.816] wcscpy (in: _Dest=0x676c550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0224.816] wcscat (in: _Dest=0x676c550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" [0224.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0224.816] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.335] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f1fd34, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7f1fd34*=0x8b9, lpOverlapped=0x0) returned 1 [0225.338] CloseHandle (hObject=0x1038) returned 1 [0225.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c550) returned 1 [0225.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67752d0) returned 1 Thread: id = 7187 os_tid = 0x1e34 [0199.163] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0199.164] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0206.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0214.429] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0x64efa0c | out: lpFileSize=0x64efa0c*=266) returned 1 [0214.429] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x106, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.429] ReadFile (in: hFile=0x19a4, lpBuffer=0x64ef9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x64ef9f8, lpOverlapped=0x0 | out: lpBuffer=0x64ef9e8*, lpNumberOfBytesRead=0x64ef9f8*=0x4, lpOverlapped=0x0) returned 1 [0214.766] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec810 [0214.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecfe0 [0214.766] NtQuerySystemTime (in: CurrentTime=0x64ef980 | out: CurrentTime=0x64ef980*=132482711214816000) returned 0x0 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0xf506907 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x60d56372 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x56e9d7fc [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x5caac4d2 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x1fa616b9 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x58e259a2 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x7254991d [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x62a5e1b4 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x63a0ea0d [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x40f9ef69 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x5edcb261 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x22888101 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x728d3d1b [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x20674545 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x5cb78d96 [0214.766] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x606a7362 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x471a86ff [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x6e6d2a58 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x7bfe28f2 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x34c34997 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x7b2be5c3 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x16950664 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x4d1f3edc [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x44414d53 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x3542a65f [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x60954c22 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x3cf45ff8 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x70777845 [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x6f3e50c [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x130eae0a [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x5b3b9dfc [0214.767] RtlRandomEx (in: Seed=0x64ef978 | out: Seed=0x64ef978) returned 0x34bd7640 [0214.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0214.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131384d8 [0214.778] ReadFile (in: hFile=0x19a4, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x10a, lpNumberOfBytesRead=0x64ef974, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x64ef974*=0x10a, lpOverlapped=0x0) returned 1 [0214.778] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.778] WriteFile (in: hFile=0x19a4, lpBuffer=0x131384d8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x64ef978, lpOverlapped=0x0 | out: lpBuffer=0x131384d8*, lpNumberOfBytesWritten=0x64ef978*=0x10a, lpOverlapped=0x0) returned 1 [0216.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed9e0 [0216.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eda08 [0216.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda08) returned 1 [0216.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131384d8) returned 1 [0216.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0216.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0216.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b5a8) returned 1 [0216.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27ed8 [0216.467] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.467] WriteFile (in: hFile=0x19a4, lpBuffer=0x12ea0d80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x64efa00, lpOverlapped=0x0 | out: lpBuffer=0x12ea0d80*, lpNumberOfBytesWritten=0x64efa00*=0x10c, lpOverlapped=0x0) returned 1 [0216.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0d80) returned 1 [0216.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f08) returned 1 [0216.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda08) returned 1 [0216.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ed8) returned 1 [0216.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed9e0) returned 1 [0216.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec810) returned 1 [0216.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9f0) returned 1 [0216.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca18) returned 1 [0216.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675abf0 [0216.634] wcscpy (in: _Dest=0x675abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" [0216.634] wcscat (in: _Dest=0x675abf0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.ac3a86" [0216.634] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0x64ef978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789268 [0223.821] FlushFileBuffers (hFile=0x19a4) returned 1 [0223.835] CloseHandle (hObject=0x19a4) returned 1 [0224.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b520 [0224.675] wcscpy (in: _Dest=0x676b520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0224.675] wcscat (in: _Dest=0x676b520, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" [0224.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0224.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.238] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x64ef994, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x64ef994*=0x8b9, lpOverlapped=0x0) returned 1 [0225.240] CloseHandle (hObject=0x1038) returned 1 [0225.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b520) returned 1 [0225.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67753f8) returned 1 Thread: id = 7188 os_tid = 0x1e38 [0199.164] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0199.165] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0206.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2380 [0214.780] GetFileSizeEx (in: hFile=0x2380, lpFileSize=0x81bf784 | out: lpFileSize=0x81bf784*=246) returned 1 [0214.780] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.780] ReadFile (in: hFile=0x2380, lpBuffer=0x81bf760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81bf770, lpOverlapped=0x0 | out: lpBuffer=0x81bf760*, lpNumberOfBytesRead=0x81bf770*=0x4, lpOverlapped=0x0) returned 1 [0214.782] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecfe0 [0214.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0d0 [0214.782] NtQuerySystemTime (in: CurrentTime=0x81bf6f8 | out: CurrentTime=0x81bf6f8*=132482711214972000) returned 0x0 [0214.782] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x3caa062f [0214.782] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x2f3ce36d [0214.782] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x21d2b644 [0214.782] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x4729279d [0214.782] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x7ea2ce87 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0xf486f76 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x2bac4a2c [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x46333859 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x66b76a43 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x188d7a34 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0xbf43b4 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x2ee0867 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x1e9448d4 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x6ba0cf8 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x5de494fa [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x2db80213 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x1a4566f7 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x3c0b906d [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x48efceeb [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x28f7c30d [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x57ad157a [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x5be0616b [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x13a5e4cb [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x2250eb4c [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x61a62bcd [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x793dd3a8 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x74c4b0d2 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x194b2d3d [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x6bf2f228 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x7d11eb31 [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x260d0f3b [0214.783] RtlRandomEx (in: Seed=0x81bf6f0 | out: Seed=0x81bf6f0) returned 0x20ee6521 [0214.793] ReadFile (in: hFile=0x2380, lpBuffer=0x1313c0e0, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x81bf6ec, lpOverlapped=0x0 | out: lpBuffer=0x1313c0e0*, lpNumberOfBytesRead=0x81bf6ec*=0xf6, lpOverlapped=0x0) returned 1 [0214.794] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.794] WriteFile (in: hFile=0x2380, lpBuffer=0x131294b8*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x81bf6f0, lpOverlapped=0x0 | out: lpBuffer=0x131294b8*, lpNumberOfBytesWritten=0x81bf6f0*=0xf6, lpOverlapped=0x0) returned 1 [0216.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eda30 [0216.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eda58 [0216.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda58) returned 1 [0216.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131294b8) returned 1 [0216.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1313c0e0) returned 1 [0216.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0216.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b6c8) returned 1 [0216.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27f38 [0216.469] SetFilePointerEx (in: hFile=0x2380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.469] WriteFile (in: hFile=0x2380, lpBuffer=0x12ea0e98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81bf778, lpOverlapped=0x0 | out: lpBuffer=0x12ea0e98*, lpNumberOfBytesWritten=0x81bf778*=0x10c, lpOverlapped=0x0) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0e98) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f68) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda58) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f38) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda30) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfe0) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0f8) returned 1 [0216.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed080) returned 1 [0216.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675ad28 [0216.635] wcscpy (in: _Dest=0x675ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" [0216.635] wcscat (in: _Dest=0x675ad28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.ac3a86" [0216.635] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0x81bf6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67893b0 [0223.816] FlushFileBuffers (hFile=0x2380) returned 1 [0223.831] CloseHandle (hObject=0x2380) returned 1 [0224.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b648 [0224.672] wcscpy (in: _Dest=0x676b648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0224.672] wcscat (in: _Dest=0x676b648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" [0224.672] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0224.673] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.233] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81bf70c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x81bf70c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.235] CloseHandle (hObject=0x1038) returned 1 [0225.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b648) returned 1 [0225.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23c80) returned 1 Thread: id = 7189 os_tid = 0x1e3c [0199.167] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0199.167] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0206.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a8 [0214.795] GetFileSizeEx (in: hFile=0x11a8, lpFileSize=0x8c7fc04 | out: lpFileSize=0x8c7fc04*=264) returned 1 [0214.795] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.795] ReadFile (in: hFile=0x11a8, lpBuffer=0x8c7fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c7fbf0, lpOverlapped=0x0 | out: lpBuffer=0x8c7fbe0*, lpNumberOfBytesRead=0x8c7fbf0*=0x4, lpOverlapped=0x0) returned 1 [0214.797] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0d0 [0214.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0a8 [0214.798] NtQuerySystemTime (in: CurrentTime=0x8c7fb78 | out: CurrentTime=0x8c7fb78*=132482711215128000) returned 0x0 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x7f1b36af [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x164f7467 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x6e69d082 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x5704ec5a [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x4f5da65f [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x16f568d3 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x607aa0d2 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x47b12b95 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x55d47d23 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x58d35551 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x21d94c9f [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x4a2b90ef [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x685a94be [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x5342bfb1 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x47611de3 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x3760b0f2 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x25fb2b7 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x5992e0d7 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x4c5bd92 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x7d5305ca [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x271ec262 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x3e8a5dd2 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x5e93acc4 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x3c3b2d45 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x638ecfff [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0xbae7f30 [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x41504d0e [0214.798] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x74e570f [0214.799] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x1e054851 [0214.799] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x7e7975e4 [0214.799] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x5c09deb4 [0214.799] RtlRandomEx (in: Seed=0x8c7fb70 | out: Seed=0x8c7fb70) returned 0x289c6448 [0214.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1312d0c0 [0214.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13130cc8 [0214.809] ReadFile (in: hFile=0x11a8, lpBuffer=0x1312d0c0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x8c7fb6c, lpOverlapped=0x0 | out: lpBuffer=0x1312d0c0*, lpNumberOfBytesRead=0x8c7fb6c*=0x108, lpOverlapped=0x0) returned 1 [0214.809] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.810] WriteFile (in: hFile=0x11a8, lpBuffer=0x13130cc8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8c7fb70, lpOverlapped=0x0 | out: lpBuffer=0x13130cc8*, lpNumberOfBytesWritten=0x8c7fb70*=0x108, lpOverlapped=0x0) returned 1 [0216.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eda80 [0216.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66edaa8 [0216.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edaa8) returned 1 [0216.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13130cc8) returned 1 [0216.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1312d0c0) returned 1 [0216.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0216.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b290) returned 1 [0216.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3f27f98 [0216.474] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.474] WriteFile (in: hFile=0x11a8, lpBuffer=0x12ea0fb0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c7fbf8, lpOverlapped=0x0 | out: lpBuffer=0x12ea0fb0*, lpNumberOfBytesWritten=0x8c7fbf8*=0x10c, lpOverlapped=0x0) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0fb0) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27fc8) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66edaa8) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27f98) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eda80) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0d0) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec888) returned 1 [0216.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec860) returned 1 [0216.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675ae60 [0216.639] wcscpy (in: _Dest=0x675ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" [0216.639] wcscat (in: _Dest=0x675ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.ac3a86" [0216.640] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0x8c7fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67785a0 [0223.896] FlushFileBuffers (hFile=0x11a8) returned 1 [0223.906] CloseHandle (hObject=0x11a8) returned 1 [0224.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676abe0 [0224.710] wcscpy (in: _Dest=0x676abe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0224.710] wcscat (in: _Dest=0x676abe0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" [0224.710] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0224.710] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.276] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c7fb8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8c7fb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.278] CloseHandle (hObject=0x1038) returned 1 [0225.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676abe0) returned 1 [0225.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23b58) returned 1 Thread: id = 7190 os_tid = 0x122c [0199.168] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0199.168] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0206.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f8c [0214.811] GetFileSizeEx (in: hFile=0x1f8c, lpFileSize=0x84dfabc | out: lpFileSize=0x84dfabc*=207) returned 1 [0214.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0a8 [0214.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7c0 [0214.811] NtQuerySystemTime (in: CurrentTime=0x84dfa30 | out: CurrentTime=0x84dfa30*=132482711215284000) returned 0x0 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x9dc806 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x49630595 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x1266edad [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x68bf870a [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x57099b3f [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x7c7de0b4 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x5fc76895 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x6c589d43 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0xa8b819a [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x490fda67 [0214.811] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x2b3afa2 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x64c2fb6c [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x483f22e4 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x58b780e2 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x472fd811 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x2d756e79 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x7dfccb55 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x65ed8622 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x584f36be [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x7ff55fc7 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x6dabd77d [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x3c8f5690 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x38bd20e5 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x47391122 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x52dd0f52 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x32e6acfb [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x550bb5b7 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x386866a1 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x1031c095 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x2439b3b8 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x254e8546 [0214.812] RtlRandomEx (in: Seed=0x84dfa28 | out: Seed=0x84dfa28) returned 0x6ad0b88d [0214.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131348d0 [0214.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1311a498 [0214.885] ReadFile (in: hFile=0x1f8c, lpBuffer=0x131348d0, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0x84dfa24, lpOverlapped=0x0 | out: lpBuffer=0x131348d0*, lpNumberOfBytesRead=0x84dfa24*=0xcf, lpOverlapped=0x0) returned 1 [0214.887] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.887] WriteFile (in: hFile=0x1f8c, lpBuffer=0x1311a498*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x84dfa28, lpOverlapped=0x0 | out: lpBuffer=0x1311a498*, lpNumberOfBytesWritten=0x84dfa28*=0xcf, lpOverlapped=0x0) returned 1 [0216.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0216.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9e8 [0216.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0216.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1311a498) returned 1 [0216.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131348d0) returned 1 [0216.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0216.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b908) returned 1 [0216.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5b78 [0216.520] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.520] WriteFile (in: hFile=0x1f8c, lpBuffer=0x675dd50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x84dfab0, lpOverlapped=0x0 | out: lpBuffer=0x675dd50*, lpNumberOfBytesWritten=0x84dfab0*=0x10c, lpOverlapped=0x0) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dd50) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ba8) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b78) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0a8) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed030) returned 1 [0216.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed058) returned 1 [0216.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40198 [0216.674] wcscpy (in: _Dest=0x3d40198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" [0216.674] wcscat (in: _Dest=0x3d40198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.ac3a86" [0216.674] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0x84dfa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778080 [0224.014] FlushFileBuffers (hFile=0x1f8c) returned 1 [0224.023] CloseHandle (hObject=0x1f8c) returned 1 [0224.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765e60 [0224.467] wcscpy (in: _Dest=0x6765e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0224.467] wcscat (in: _Dest=0x6765e60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" [0224.467] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0224.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.955] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x84dfa44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x84dfa44*=0x8b9, lpOverlapped=0x0) returned 1 [0224.964] CloseHandle (hObject=0x16d4) returned 1 [0224.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765e60) returned 1 [0224.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23a30) returned 1 Thread: id = 7191 os_tid = 0x1e40 [0199.169] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0199.169] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0206.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x166c [0214.891] GetFileSizeEx (in: hFile=0x166c, lpFileSize=0x7f6f9b4 | out: lpFileSize=0x7f6f9b4*=222) returned 1 [0214.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7c0 [0214.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed008 [0214.892] NtQuerySystemTime (in: CurrentTime=0x7f6f928 | out: CurrentTime=0x7f6f928*=132482711216064000) returned 0x0 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x3aea07b1 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x4dbe3b3b [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x5d6fefc1 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x2ba542a7 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x128e883 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x73f15cce [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x1056210e [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x60ff1bd [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x63b7e4b2 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x5b8b7549 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x33688fe4 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x6c639ab [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x499d7e2d [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x5c807547 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x4318efd3 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x64bb83f4 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x491f6ad3 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x69172a91 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x318fee1d [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x634a5902 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x12a4457c [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x129472c2 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x28288094 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0xed83093 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x11b939cc [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x461c2d53 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x6fe82d42 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x6a4a521d [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x343cf90 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x759daa39 [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x7a10c5ce [0214.892] RtlRandomEx (in: Seed=0x7f6f920 | out: Seed=0x7f6f920) returned 0x6421e84e [0214.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131258b0 [0214.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13112c88 [0214.910] ReadFile (in: hFile=0x166c, lpBuffer=0x131258b0, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x7f6f91c, lpOverlapped=0x0 | out: lpBuffer=0x131258b0*, lpNumberOfBytesRead=0x7f6f91c*=0xde, lpOverlapped=0x0) returned 1 [0214.911] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.911] WriteFile (in: hFile=0x166c, lpBuffer=0x13112c88*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x7f6f920, lpOverlapped=0x0 | out: lpBuffer=0x13112c88*, lpNumberOfBytesWritten=0x7f6f920*=0xde, lpOverlapped=0x0) returned 1 [0216.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0216.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4d8 [0216.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0216.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13112c88) returned 1 [0216.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131258b0) returned 1 [0216.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0216.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b680) returned 1 [0216.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5ab8 [0216.538] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.538] WriteFile (in: hFile=0x166c, lpBuffer=0x675db20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f6f9a8, lpOverlapped=0x0 | out: lpBuffer=0x675db20*, lpNumberOfBytesWritten=0x7f6f9a8*=0x10c, lpOverlapped=0x0) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675db20) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ae8) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ab8) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0216.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7c0) returned 1 [0216.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec950) returned 1 [0216.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf90) returned 1 [0216.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1038 [0216.829] wcscpy (in: _Dest=0x12ea1038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" [0216.829] wcscat (in: _Dest=0x12ea1038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.ac3a86" [0216.829] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0x7f6f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784d48 [0224.481] FlushFileBuffers (hFile=0x166c) returned 1 [0224.956] CloseHandle (hObject=0x166c) returned 1 [0224.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3db09f8 [0224.957] wcscpy (in: _Dest=0x3db09f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0224.957] wcscat (in: _Dest=0x3db09f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" [0224.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0224.958] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x166c [0224.958] WriteFile (in: hFile=0x166c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f6f93c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7f6f93c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.960] CloseHandle (hObject=0x166c) returned 1 [0224.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09f8) returned 1 [0224.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23908) returned 1 Thread: id = 7192 os_tid = 0x1e44 [0199.169] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0199.170] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0206.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x564 [0214.913] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x872fe8c | out: lpFileSize=0x872fe8c*=216) returned 1 [0214.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed008 [0214.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec770 [0214.913] NtQuerySystemTime (in: CurrentTime=0x872fe00 | out: CurrentTime=0x872fe00*=132482711216220000) returned 0x0 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x58411ee6 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x72cc841f [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x7a7bde98 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x33fc61d3 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x6904a544 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x3617b44b [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x68eaf8e4 [0214.913] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x5e684a62 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x6be05ea7 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x41276a0d [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x43d6d0e1 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x5e713ab9 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x3f26330a [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x6c5e3bee [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x3617b44b [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x5912ffa4 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x76003370 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x1f7a7fad [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x460d6818 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x5861cf62 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x527d69c6 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x4690fc9f [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x2e287a18 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x40eebdfe [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x10162764 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x615fc8f8 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x6a3957f6 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x55456ee5 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x21acd110 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x4f81e620 [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x6e614fff [0214.914] RtlRandomEx (in: Seed=0x872fdf8 | out: Seed=0x872fdf8) returned 0x1f6fa025 [0214.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13116890 [0214.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13103c68 [0214.925] ReadFile (in: hFile=0x564, lpBuffer=0x13116890, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x872fdf4, lpOverlapped=0x0 | out: lpBuffer=0x13116890*, lpNumberOfBytesRead=0x872fdf4*=0xd8, lpOverlapped=0x0) returned 1 [0214.928] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.928] WriteFile (in: hFile=0x564, lpBuffer=0x13103c68*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x872fdf8, lpOverlapped=0x0 | out: lpBuffer=0x13103c68*, lpNumberOfBytesWritten=0x872fdf8*=0xd8, lpOverlapped=0x0) returned 1 [0216.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4c0 [0216.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0216.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0216.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13103c68) returned 1 [0216.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13116890) returned 1 [0216.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0216.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689afc0) returned 1 [0216.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5a58 [0216.540] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.540] WriteFile (in: hFile=0x564, lpBuffer=0x675da08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x872fe80, lpOverlapped=0x0 | out: lpBuffer=0x675da08*, lpNumberOfBytesWritten=0x872fe80*=0x10c, lpOverlapped=0x0) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675da08) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a88) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a58) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed008) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6d0) returned 1 [0216.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf40) returned 1 [0216.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1170 [0216.831] wcscpy (in: _Dest=0x12ea1170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" [0216.831] wcscat (in: _Dest=0x12ea1170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.ac3a86" [0216.832] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0x872fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784e90 [0225.410] FlushFileBuffers (hFile=0x564) returned 1 [0225.443] CloseHandle (hObject=0x564) returned 1 [0225.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766300 [0225.444] wcscpy (in: _Dest=0x6766300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0225.444] wcscat (in: _Dest=0x6766300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" [0225.444] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0225.445] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564 [0225.447] WriteFile (in: hFile=0x564, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x872fe14, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x872fe14*=0x8b9, lpOverlapped=0x0) returned 1 [0225.449] CloseHandle (hObject=0x564) returned 1 [0225.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766300) returned 1 [0225.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f236b8) returned 1 Thread: id = 7193 os_tid = 0x524 [0199.170] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0199.171] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0206.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11ac [0214.929] GetFileSizeEx (in: hFile=0x11ac, lpFileSize=0x7edfcbc | out: lpFileSize=0x7edfcbc*=217) returned 1 [0214.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec770 [0214.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf68 [0214.930] NtQuerySystemTime (in: CurrentTime=0x7edfc30 | out: CurrentTime=0x7edfc30*=132482711216376000) returned 0x0 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x5579ce34 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x1b75b5aa [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0xe2ab03b [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x11e339e [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x61531549 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x5735e222 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x7f7d069 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x69e12f15 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x6b6a4d0a [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x40eebdfe [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x1c5f0183 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0xa43f0d0 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x4a6e265b [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x4b6bd38b [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x6bc7d616 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x6a16a7b4 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x42b2782e [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x44ac44d8 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x2d26f556 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x1b2a257 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x603237e0 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x26157a1c [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x5f237333 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x7ef7c0b8 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x554c9151 [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x4690fc9f [0214.930] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0xbbbfc2 [0214.931] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x7fa71377 [0214.931] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x166c8ae1 [0214.931] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x5b32dbd3 [0214.931] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x70a68118 [0214.931] RtlRandomEx (in: Seed=0x7edfc28 | out: Seed=0x7edfc28) returned 0x61ff2c26 [0214.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13107870 [0214.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13100060 [0214.941] ReadFile (in: hFile=0x11ac, lpBuffer=0x13107870, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x7edfc24, lpOverlapped=0x0 | out: lpBuffer=0x13107870*, lpNumberOfBytesRead=0x7edfc24*=0xd9, lpOverlapped=0x0) returned 1 [0214.943] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.943] WriteFile (in: hFile=0x11ac, lpBuffer=0x13100060*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x7edfc28, lpOverlapped=0x0 | out: lpBuffer=0x13100060*, lpNumberOfBytesWritten=0x7edfc28*=0xd9, lpOverlapped=0x0) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd48 [0216.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd20 [0216.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd20) returned 1 [0216.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13100060) returned 1 [0216.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13107870) returned 1 [0216.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0216.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea29f0) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5bd8 [0216.545] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.545] WriteFile (in: hFile=0x11ac, lpBuffer=0x675de68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7edfcb0, lpOverlapped=0x0 | out: lpBuffer=0x675de68*, lpNumberOfBytesWritten=0x7edfcb0*=0x10c, lpOverlapped=0x0) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675de68) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c08) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd20) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5bd8) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd48) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec770) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6a8) returned 1 [0216.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec680) returned 1 [0216.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea12a8 [0216.838] wcscpy (in: _Dest=0x12ea12a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" [0216.838] wcscat (in: _Dest=0x12ea12a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.ac3a86" [0216.838] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0x7edfc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784fd8 [0224.627] FlushFileBuffers (hFile=0x11ac) returned 1 [0224.634] CloseHandle (hObject=0x11ac) returned 1 [0224.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c428 [0224.812] wcscpy (in: _Dest=0x676c428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0224.812] wcscat (in: _Dest=0x676c428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" [0224.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0224.812] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.318] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7edfc44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7edfc44*=0x8b9, lpOverlapped=0x0) returned 1 [0225.332] CloseHandle (hObject=0x1038) returned 1 [0225.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c428) returned 1 [0225.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f237e0) returned 1 Thread: id = 7194 os_tid = 0x1e48 [0199.171] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0199.171] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0206.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1500 [0214.250] GetFileSizeEx (in: hFile=0x1500, lpFileSize=0x8d9f9cc | out: lpFileSize=0x8d9f9cc*=260) returned 1 [0214.250] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.250] ReadFile (in: hFile=0x1500, lpBuffer=0x8d9f9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d9f9b8, lpOverlapped=0x0 | out: lpBuffer=0x8d9f9a8*, lpNumberOfBytesRead=0x8d9f9b8*=0x4, lpOverlapped=0x0) returned 1 [0214.252] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cc88 [0214.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecfe0 [0214.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed008 [0214.253] NtQuerySystemTime (in: CurrentTime=0x8d9f940 | out: CurrentTime=0x8d9f940*=132482711209668000) returned 0x0 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x7085f168 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x4b436885 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x79a71de2 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x6ce82975 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x17998ada [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x5df59519 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x3d5ec633 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x18deddd5 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x69858cb8 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x46ee02ad [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x770f3341 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x55f1ef91 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x741d39c9 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x11e21814 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x6373e5a3 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x38b6d176 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x61a76163 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x48211eae [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x18deddd5 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x57343c6c [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x245cc4e8 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x617095a5 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x70edc0e7 [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x17a83d6c [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x49ead8ea [0214.253] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x7781d737 [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x3254570 [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x77c649ca [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x52ed208f [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x7b180b2a [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x5e679490 [0214.254] RtlRandomEx (in: Seed=0x8d9f938 | out: Seed=0x8d9f938) returned 0x2281cc [0214.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cc88) returned 1 [0214.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x697fce8 [0214.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131384d8 [0214.427] ReadFile (in: hFile=0x1500, lpBuffer=0x697fce8, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x8d9f934, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesRead=0x8d9f934*=0x104, lpOverlapped=0x0) returned 1 [0214.428] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.428] WriteFile (in: hFile=0x1500, lpBuffer=0x131384d8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x8d9f938, lpOverlapped=0x0 | out: lpBuffer=0x131384d8*, lpNumberOfBytesWritten=0x8d9f938*=0x104, lpOverlapped=0x0) returned 1 [0214.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b400 [0214.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0214.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0214.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131384d8) returned 1 [0214.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0214.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0214.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea29f0) returned 1 [0214.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0214.497] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.497] WriteFile (in: hFile=0x1500, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d9f9c0, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0x8d9f9c0*=0x10c, lpOverlapped=0x0) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfe0) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec810) returned 1 [0214.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b6e8 [0214.585] wcscpy (in: _Dest=0x678b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" [0214.585] wcscat (in: _Dest=0x678b6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.ac3a86" [0214.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0x8d9f938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67785a0 [0214.589] FlushFileBuffers (hFile=0x1500) returned 1 [0214.728] CloseHandle (hObject=0x1500) returned 1 [0215.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6762be0 [0215.893] wcscpy (in: _Dest=0x6762be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0215.894] wcscat (in: _Dest=0x6762be0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" [0215.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0215.894] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x122c [0216.979] WriteFile (in: hFile=0x122c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d9f954, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d9f954*=0x8b9, lpOverlapped=0x0) returned 1 [0225.527] CloseHandle (hObject=0x122c) returned 1 [0225.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762be0) returned 1 [0225.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f23590) returned 1 Thread: id = 7195 os_tid = 0x1e4c [0199.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.172] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0199.172] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\" [0199.172] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*" [0199.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.172] wcscmp (_String1=".", _String2=".") returned 0 [0199.172] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.172] wcscmp (_String1="..", _String2=".") returned 1 [0199.172] wcscmp (_String1="..", _String2="..") returned 0 [0199.172] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.173] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 Thread: id = 7196 os_tid = 0x1e50 [0199.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.174] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0199.174] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\" [0199.174] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*" [0199.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.174] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.174] wcscmp (_String1=".", _String2=".") returned 0 [0199.175] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.175] wcscmp (_String1="..", _String2=".") returned 1 [0199.175] wcscmp (_String1="..", _String2="..") returned 0 [0199.175] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.175] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf10) returned 1 Thread: id = 7197 os_tid = 0x1e54 [0199.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.176] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0199.176] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\" [0199.176] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*" [0199.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.176] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.177] wcscmp (_String1=".", _String2=".") returned 0 [0199.177] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.177] wcscmp (_String1="..", _String2=".") returned 1 [0199.177] wcscmp (_String1="..", _String2="..") returned 0 [0199.177] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.177] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd140) returned 1 Thread: id = 7198 os_tid = 0x1010 [0199.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.178] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0199.178] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\" [0199.178] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*" [0199.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.178] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.179] wcscmp (_String1=".", _String2=".") returned 0 [0199.179] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.179] wcscmp (_String1="..", _String2=".") returned 1 [0199.179] wcscmp (_String1="..", _String2="..") returned 0 [0199.179] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.179] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc308) returned 1 Thread: id = 7199 os_tid = 0x1e58 [0199.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.180] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0199.180] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\" [0199.180] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*" [0199.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.180] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.181] wcscmp (_String1=".", _String2=".") returned 0 [0199.181] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.181] wcscmp (_String1="..", _String2=".") returned 1 [0199.181] wcscmp (_String1="..", _String2="..") returned 0 [0199.181] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.181] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc880) returned 1 Thread: id = 7200 os_tid = 0x1e5c [0199.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.182] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0199.182] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\" [0199.182] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*" [0199.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.182] wcscmp (_String1=".", _String2=".") returned 0 [0199.182] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.183] wcscmp (_String1="..", _String2=".") returned 1 [0199.183] wcscmp (_String1="..", _String2="..") returned 0 [0199.183] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.183] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc78) returned 1 Thread: id = 7201 os_tid = 0x1e60 [0199.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.184] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0199.184] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\" [0199.184] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*" [0199.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.184] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.184] wcscmp (_String1=".", _String2=".") returned 0 [0199.184] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.185] wcscmp (_String1="..", _String2=".") returned 1 [0199.185] wcscmp (_String1="..", _String2="..") returned 0 [0199.185] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.185] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd370) returned 1 Thread: id = 7202 os_tid = 0x1e64 [0199.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.189] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0199.190] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\" [0199.190] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*" [0199.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.190] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.190] wcscmp (_String1=".", _String2=".") returned 0 [0199.190] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.190] wcscmp (_String1="..", _String2=".") returned 1 [0199.190] wcscmp (_String1="..", _String2="..") returned 0 [0199.190] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.190] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc420) returned 1 Thread: id = 7203 os_tid = 0x1e68 [0199.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.192] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0199.192] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\" [0199.192] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*" [0199.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.192] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.192] wcscmp (_String1=".", _String2=".") returned 0 [0199.192] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.192] wcscmp (_String1="..", _String2=".") returned 1 [0199.192] wcscmp (_String1="..", _String2="..") returned 0 [0199.192] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.192] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc998) returned 1 Thread: id = 7204 os_tid = 0x1e6c [0199.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674fd38 [0199.194] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0199.194] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\" [0199.194] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*" [0199.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.194] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.194] wcscmp (_String1=".", _String2=".") returned 0 [0199.194] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.194] wcscmp (_String1="..", _String2=".") returned 1 [0199.194] wcscmp (_String1="..", _String2="..") returned 0 [0199.194] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.194] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd258) returned 1 Thread: id = 7205 os_tid = 0x1204 [0199.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x674fd38 [0199.196] wcscpy (in: _Dest=0x674fd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0199.196] wcscat (in: _Dest=0x674fd38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\" [0199.196] wcscat (in: _Dest=0x674fd38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*" [0199.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.196] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.196] wcscmp (_String1=".", _String2=".") returned 0 [0199.196] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.196] wcscmp (_String1="..", _String2=".") returned 1 [0199.196] wcscmp (_String1="..", _String2="..") returned 0 [0199.196] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.196] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 [0199.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 Thread: id = 7206 os_tid = 0x1328 [0199.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.198] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0199.198] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\" [0199.198] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*" [0199.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.198] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.198] wcscmp (_String1=".", _String2=".") returned 0 [0199.198] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.198] wcscmp (_String1="..", _String2=".") returned 1 [0199.198] wcscmp (_String1="..", _String2="..") returned 0 [0199.198] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.198] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb930) returned 1 Thread: id = 7207 os_tid = 0x120c [0199.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.200] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0199.200] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\" [0199.200] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*" [0199.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.200] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.200] wcscmp (_String1=".", _String2=".") returned 0 [0199.200] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.200] wcscmp (_String1="..", _String2=".") returned 1 [0199.200] wcscmp (_String1="..", _String2="..") returned 0 [0199.200] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.200] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcab0) returned 1 Thread: id = 7208 os_tid = 0x1230 [0199.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.201] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0199.202] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\" [0199.202] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*" [0199.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.202] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.202] wcscmp (_String1=".", _String2=".") returned 0 [0199.202] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.202] wcscmp (_String1="..", _String2=".") returned 1 [0199.202] wcscmp (_String1="..", _String2="..") returned 0 [0199.202] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.202] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb818) returned 1 Thread: id = 7209 os_tid = 0xe0c [0199.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.203] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0199.203] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\" [0199.203] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*" [0199.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.204] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.204] wcscmp (_String1=".", _String2=".") returned 0 [0199.204] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.204] wcscmp (_String1="..", _String2=".") returned 1 [0199.204] wcscmp (_String1="..", _String2="..") returned 0 [0199.204] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.204] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 Thread: id = 7210 os_tid = 0x1234 [0199.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.205] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0199.205] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\" [0199.205] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*" [0199.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.205] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.206] wcscmp (_String1=".", _String2=".") returned 0 [0199.206] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.206] wcscmp (_String1="..", _String2=".") returned 1 [0199.206] wcscmp (_String1="..", _String2="..") returned 0 [0199.206] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.206] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc650) returned 1 Thread: id = 7211 os_tid = 0x1238 [0199.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.207] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0199.207] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\" [0199.207] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*" [0199.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.207] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.208] wcscmp (_String1=".", _String2=".") returned 0 [0199.208] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.208] wcscmp (_String1="..", _String2=".") returned 1 [0199.208] wcscmp (_String1="..", _String2="..") returned 0 [0199.208] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.208] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 Thread: id = 7212 os_tid = 0x1ff8 [0199.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.209] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0199.209] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\" [0199.209] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*" [0199.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.209] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.210] wcscmp (_String1=".", _String2=".") returned 0 [0199.210] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.210] wcscmp (_String1="..", _String2=".") returned 1 [0199.210] wcscmp (_String1="..", _String2="..") returned 0 [0199.210] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.210] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 Thread: id = 7213 os_tid = 0x1ffc [0199.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.211] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0199.211] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\" [0199.211] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*" [0199.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.212] wcscmp (_String1=".", _String2=".") returned 0 [0199.212] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.212] wcscmp (_String1="..", _String2=".") returned 1 [0199.212] wcscmp (_String1="..", _String2="..") returned 0 [0199.212] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.212] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751490) returned 1 Thread: id = 7214 os_tid = 0x1244 [0199.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.213] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0199.213] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\" [0199.213] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*" [0199.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.213] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.214] wcscmp (_String1=".", _String2=".") returned 0 [0199.214] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.214] wcscmp (_String1="..", _String2=".") returned 1 [0199.214] wcscmp (_String1="..", _String2="..") returned 0 [0199.214] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.214] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 Thread: id = 7215 os_tid = 0x1248 [0199.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.215] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0199.215] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\" [0199.215] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*" [0199.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.215] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.216] wcscmp (_String1=".", _String2=".") returned 0 [0199.216] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.216] wcscmp (_String1="..", _String2=".") returned 1 [0199.216] wcscmp (_String1="..", _String2="..") returned 0 [0199.216] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.216] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 Thread: id = 7216 os_tid = 0x124c [0199.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.217] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0199.217] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\" [0199.217] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*" [0199.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.217] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.218] wcscmp (_String1=".", _String2=".") returned 0 [0199.218] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.218] wcscmp (_String1="..", _String2=".") returned 1 [0199.218] wcscmp (_String1="..", _String2="..") returned 0 [0199.218] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.218] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 Thread: id = 7217 os_tid = 0xd88 [0199.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.219] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0199.219] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\" [0199.219] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*" [0199.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.220] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.220] wcscmp (_String1=".", _String2=".") returned 0 [0199.220] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.220] wcscmp (_String1="..", _String2=".") returned 1 [0199.220] wcscmp (_String1="..", _String2="..") returned 0 [0199.220] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.220] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 Thread: id = 7218 os_tid = 0x173c [0199.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.222] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0199.222] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\" [0199.222] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*" [0199.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.222] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.222] wcscmp (_String1=".", _String2=".") returned 0 [0199.222] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.222] wcscmp (_String1="..", _String2=".") returned 1 [0199.222] wcscmp (_String1="..", _String2="..") returned 0 [0199.222] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.222] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 Thread: id = 7219 os_tid = 0x178c [0199.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x674f080 [0199.224] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0199.224] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\" [0199.224] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*" [0199.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.224] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.224] wcscmp (_String1=".", _String2=".") returned 0 [0199.224] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.224] wcscmp (_String1="..", _String2=".") returned 1 [0199.224] wcscmp (_String1="..", _String2="..") returned 0 [0199.224] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.224] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 Thread: id = 7220 os_tid = 0x17dc [0199.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674f080 [0199.226] wcscpy (in: _Dest=0x674f080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0199.226] wcscat (in: _Dest=0x674f080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\" [0199.226] wcscat (in: _Dest=0x674f080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*" [0199.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.226] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.226] wcscmp (_String1=".", _String2=".") returned 0 [0199.226] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.226] wcscmp (_String1="..", _String2=".") returned 1 [0199.226] wcscmp (_String1="..", _String2="..") returned 0 [0199.226] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.226] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f9c0) returned 1 Thread: id = 7221 os_tid = 0x22c [0199.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x674f9c0 [0199.228] wcscpy (in: _Dest=0x674f9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0199.228] wcscat (in: _Dest=0x674f9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\" [0199.228] wcscat (in: _Dest=0x674f9c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*" [0199.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x6761870 [0199.228] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*", lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0199.228] wcscmp (_String1=".", _String2=".") returned 0 [0199.228] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.228] wcscmp (_String1="..", _String2=".") returned 1 [0199.228] wcscmp (_String1="..", _String2="..") returned 0 [0199.228] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x6761870 | out: lpFindFileData=0x6761870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.228] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0199.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6761870) returned 1 [0199.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f9c0) returned 1 [0199.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fae8) returned 1 Thread: id = 7222 os_tid = 0xe20 [0200.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6764e30 [0200.375] wcscpy (in: _Dest=0x6764e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0200.375] wcscat (in: _Dest=0x6764e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\" [0200.375] wcscat (in: _Dest=0x6764e30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*" [0200.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6bb0 [0200.375] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*", lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0200.375] wcscmp (_String1=".", _String2=".") returned 0 [0200.375] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.375] wcscmp (_String1="..", _String2=".") returned 1 [0200.375] wcscmp (_String1="..", _String2="..") returned 0 [0200.375] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0200.375] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0200.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6bb0) returned 1 [0200.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764e30) returned 1 [0200.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 Thread: id = 7223 os_tid = 0x180 [0200.377] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0201.871] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.354] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd78 [0213.354] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0x8d5fe1c | out: lpFileSize=0x8d5fe1c*=673) returned 1 [0213.355] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.355] ReadFile (in: hFile=0xd78, lpBuffer=0x8d5fdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d5fe08, lpOverlapped=0x0 | out: lpBuffer=0x8d5fdf8*, lpNumberOfBytesRead=0x8d5fe08*=0x4, lpOverlapped=0x0) returned 1 [0213.566] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb758 [0213.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb7d0 [0213.566] NtQuerySystemTime (in: CurrentTime=0x8d5fd90 | out: CurrentTime=0x8d5fd90*=132482711202804000) returned 0x0 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x7526d048 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x62a4d3e9 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x5dd83c37 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x3b3b325b [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x4720e3b6 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x6b0aa9ec [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x62a4d3e9 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x21d1579b [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x35c788bb [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x1a31c7d5 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x2b2c1041 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x5d2d0226 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x2ddf0f8 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x5ef96893 [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x16d147dd [0213.566] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x581c32d1 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x22e6f80c [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x5f6b0b9e [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x3d99ff15 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x5e7de3fa [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x6d79c4e5 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x13625f08 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x3a791306 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0xdef7737 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x3cff0951 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x55d67555 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x3658efe3 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x425e0d85 [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0xef1eb3f [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x401146a [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x4d70279a [0213.567] RtlRandomEx (in: Seed=0x8d5fd88 | out: Seed=0x8d5fd88) returned 0x58ad8599 [0213.575] ReadFile (in: hFile=0xd78, lpBuffer=0x13083c68, nNumberOfBytesToRead=0x2a1, lpNumberOfBytesRead=0x8d5fd84, lpOverlapped=0x0 | out: lpBuffer=0x13083c68*, lpNumberOfBytesRead=0x8d5fd84*=0x2a1, lpOverlapped=0x0) returned 1 [0213.575] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.575] WriteFile (in: hFile=0xd78, lpBuffer=0x13087870*, nNumberOfBytesToWrite=0x2a1, lpNumberOfBytesWritten=0x8d5fd88, lpOverlapped=0x0 | out: lpBuffer=0x13087870*, lpNumberOfBytesWritten=0x8d5fd88*=0x2a1, lpOverlapped=0x0) returned 1 [0217.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc48 [0217.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf28 [0217.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf28) returned 1 [0217.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13087870) returned 1 [0217.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13083c68) returned 1 [0217.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b3a8) returned 1 [0217.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a438) returned 1 [0217.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5210 [0217.147] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.147] WriteFile (in: hFile=0xd78, lpBuffer=0x675e958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d5fe10, lpOverlapped=0x0 | out: lpBuffer=0x675e958*, lpNumberOfBytesWritten=0x8d5fe10*=0x10c, lpOverlapped=0x0) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e958) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf28) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc48) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb758) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7f8) returned 1 [0224.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb820) returned 1 [0224.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c930 [0224.444] wcscpy (in: _Dest=0x675c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" [0224.445] wcscat (in: _Dest=0x675c930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.ac3a86" [0224.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0x8d5fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce9c8 [0224.808] FlushFileBuffers (hFile=0xd78) returned 1 [0224.813] CloseHandle (hObject=0xd78) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675c0a8 [0224.881] wcscpy (in: _Dest=0x675c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0224.881] wcscat (in: _Dest=0x675c0a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\AC3A86-Readme.txt" [0224.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0224.881] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb28 [0224.892] WriteFile (in: hFile=0xb28, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d5fda4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8d5fda4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.909] CloseHandle (hObject=0xb28) returned 1 [0224.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675c0a8) returned 1 [0224.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67728c8) returned 1 Thread: id = 7224 os_tid = 0xfdc [0200.377] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0201.578] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0213.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c98 [0213.207] GetFileSizeEx (in: hFile=0x1c98, lpFileSize=0x8fbf80c | out: lpFileSize=0x8fbf80c*=692) returned 1 [0213.207] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.207] ReadFile (in: hFile=0x1c98, lpBuffer=0x8fbf7e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fbf7f8, lpOverlapped=0x0 | out: lpBuffer=0x8fbf7e8*, lpNumberOfBytesRead=0x8fbf7f8*=0x4, lpOverlapped=0x0) returned 1 [0213.277] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea600 [0213.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea5d8 [0213.277] NtQuerySystemTime (in: CurrentTime=0x8fbf780 | out: CurrentTime=0x8fbf780*=132482711199840000) returned 0x0 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x74349492 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0xc2a3340 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x42b78daf [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x1bdb64d1 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x5458960d [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x92ef927 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x72742dab [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x28da2712 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0xa92e90e [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x26b08ba1 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x2ea1f6ed [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x7de550e0 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x5df5ff22 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x477b1172 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x25cb248 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x6127b152 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x54c1efd9 [0213.277] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0xccb3151 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x2f099b94 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x194f4415 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x7c112fb1 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x75aa2956 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x61eef9ce [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x7d8d66e [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x263e6897 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x3a0917a7 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x61109898 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x4a825e4 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x3c00658 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x4ce0f7da [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x8034351 [0213.278] RtlRandomEx (in: Seed=0x8fbf778 | out: Seed=0x8fbf778) returned 0x19239acf [0213.288] ReadFile (in: hFile=0x1c98, lpBuffer=0x6a11100, nNumberOfBytesToRead=0x2b4, lpNumberOfBytesRead=0x8fbf774, lpOverlapped=0x0 | out: lpBuffer=0x6a11100*, lpNumberOfBytesRead=0x8fbf774*=0x2b4, lpOverlapped=0x0) returned 1 [0213.288] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1c98, lpBuffer=0x6a14d08*, nNumberOfBytesToWrite=0x2b4, lpNumberOfBytesWritten=0x8fbf778, lpOverlapped=0x0 | out: lpBuffer=0x6a14d08*, lpNumberOfBytesWritten=0x8fbf778*=0x2b4, lpOverlapped=0x0) returned 1 [0217.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6a8 [0217.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec770 [0217.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec770) returned 1 [0217.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a14d08) returned 1 [0217.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a11100) returned 1 [0217.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0768) returned 1 [0217.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899f70) returned 1 [0217.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5360 [0217.108] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.108] WriteFile (in: hFile=0x1c98, lpBuffer=0x675db20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8fbf800, lpOverlapped=0x0 | out: lpBuffer=0x675db20*, lpNumberOfBytesWritten=0x8fbf800*=0x10c, lpOverlapped=0x0) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675db20) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec770) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6a8) returned 1 [0224.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea600) returned 1 [0224.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea560) returned 1 [0224.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea588) returned 1 [0224.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x675be38 [0224.417] wcscpy (in: _Dest=0x675be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" [0224.417] wcscat (in: _Dest=0x675be38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.ac3a86" [0224.417] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0x8fbf778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66cf5e0 [0224.766] FlushFileBuffers (hFile=0x1c98) returned 1 [0224.771] CloseHandle (hObject=0x1c98) returned 1 [0224.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x675c6c0 [0224.859] wcscpy (in: _Dest=0x675c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0224.859] wcscat (in: _Dest=0x675c6c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\AC3A86-Readme.txt" [0224.859] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0224.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.394] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8fbf794, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8fbf794*=0x8b9, lpOverlapped=0x0) returned 1 [0225.396] CloseHandle (hObject=0x1038) returned 1 [0225.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675c6c0) returned 1 [0225.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774ab8) returned 1 Thread: id = 7225 os_tid = 0x10c [0200.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0201.867] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee4 [0213.079] GetFileSizeEx (in: hFile=0xee4, lpFileSize=0x459f91c | out: lpFileSize=0x459f91c*=708) returned 1 [0213.079] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.079] ReadFile (in: hFile=0xee4, lpBuffer=0x459f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x459f908, lpOverlapped=0x0 | out: lpBuffer=0x459f8f8*, lpNumberOfBytesRead=0x459f908*=0x4, lpOverlapped=0x0) returned 1 [0213.082] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab50 [0213.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead30 [0213.082] NtQuerySystemTime (in: CurrentTime=0x459f890 | out: CurrentTime=0x459f890*=132482711197968000) returned 0x0 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x3d8bc686 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x14bc8b3c [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x17bb6431 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x69cc2847 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x5711b514 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x60c1444f [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x1dd3267f [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x39ebd922 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x29d605ff [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x3464bb54 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x7d375f [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0xdbab585 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x25f4d766 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x34e1fb1d [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0xb18de91 [0213.082] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x21dc7d5d [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x2bcf35bb [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x6ba12da2 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x7db6fc61 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x3a51dc26 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x3287e017 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x5e49053d [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x4b48c75e [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x6d17fb6 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x110af3b5 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x18afadad [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x66e9d1be [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0xfa52ab7 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0xb2b6078 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x72b73674 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x3abb0844 [0213.083] RtlRandomEx (in: Seed=0x459f888 | out: Seed=0x459f888) returned 0x77b482d0 [0213.090] ReadFile (in: hFile=0xee4, lpBuffer=0x67974f8, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x459f884, lpOverlapped=0x0 | out: lpBuffer=0x67974f8*, lpNumberOfBytesRead=0x459f884*=0x2c4, lpOverlapped=0x0) returned 1 [0213.091] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.091] WriteFile (in: hFile=0xee4, lpBuffer=0x679b100*, nNumberOfBytesToWrite=0x2c4, lpNumberOfBytesWritten=0x459f888, lpOverlapped=0x0 | out: lpBuffer=0x679b100*, lpNumberOfBytesWritten=0x459f888*=0x2c4, lpOverlapped=0x0) returned 1 [0217.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd48 [0217.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd20 [0217.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd20) returned 1 [0217.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x679b100) returned 1 [0217.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67974f8) returned 1 [0217.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86be8) returned 1 [0217.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a5a0) returned 1 [0217.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef59c0 [0217.113] SetFilePointerEx (in: hFile=0xee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.114] WriteFile (in: hFile=0xee4, lpBuffer=0x675d030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x459f910, lpOverlapped=0x0 | out: lpBuffer=0x675d030*, lpNumberOfBytesWritten=0x459f910*=0x10c, lpOverlapped=0x0) returned 1 [0224.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d030) returned 1 [0224.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0224.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd20) returned 1 [0224.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0224.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd48) returned 1 [0224.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab50) returned 1 [0224.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead08) returned 1 [0224.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eace0) returned 1 [0224.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c0a8 [0224.411] wcscpy (in: _Dest=0x675c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" [0224.411] wcscat (in: _Dest=0x675c0a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.ac3a86" [0224.411] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0x459f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf890 [0224.762] FlushFileBuffers (hFile=0xee4) returned 1 [0224.770] CloseHandle (hObject=0xee4) returned 1 [0224.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678be38 [0224.856] wcscpy (in: _Dest=0x678be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0224.856] wcscat (in: _Dest=0x678be38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\AC3A86-Readme.txt" [0224.857] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0224.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.385] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x459f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x459f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.387] CloseHandle (hObject=0x1038) returned 1 [0225.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678be38) returned 1 [0225.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774be0) returned 1 Thread: id = 7226 os_tid = 0xff0 [0200.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0201.868] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.091] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f9c [0213.092] GetFileSizeEx (in: hFile=0x1f9c, lpFileSize=0x65afd4c | out: lpFileSize=0x65afd4c*=941) returned 1 [0213.092] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.092] ReadFile (in: hFile=0x1f9c, lpBuffer=0x65afd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x65afd38, lpOverlapped=0x0 | out: lpBuffer=0x65afd28*, lpNumberOfBytesRead=0x65afd38*=0x4, lpOverlapped=0x0) returned 1 [0213.096] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead30 [0213.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadd0 [0213.096] NtQuerySystemTime (in: CurrentTime=0x65afcc0 | out: CurrentTime=0x65afcc0*=132482711198124000) returned 0x0 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x50967a2 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x4e5d8030 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x5ed96af3 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x7582bd0f [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x578467b6 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x4199ee35 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x2dbf3c76 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x759ca569 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x2c2c0a4f [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x6075589 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x669233ee [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x74b14550 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x3afc5e51 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x54504f7 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x604dc072 [0213.096] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x78dc995a [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x1fe939dd [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x4c5ae5 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x56359eb6 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x4568883d [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x7ab7c050 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x833561e [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x406585b0 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x2b3b6a34 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x3a27118e [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x36f33752 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x749a78ec [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x4fe9f8ef [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x20246c76 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x6acaf1e2 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x560b7f57 [0213.097] RtlRandomEx (in: Seed=0x65afcb8 | out: Seed=0x65afcb8) returned 0x5f147a12 [0213.108] ReadFile (in: hFile=0x1f9c, lpBuffer=0x679ed08, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0x65afcb4, lpOverlapped=0x0 | out: lpBuffer=0x679ed08*, lpNumberOfBytesRead=0x65afcb4*=0x3ad, lpOverlapped=0x0) returned 1 [0213.108] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.109] WriteFile (in: hFile=0x1f9c, lpBuffer=0x67a2910*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0x65afcb8, lpOverlapped=0x0 | out: lpBuffer=0x67a2910*, lpNumberOfBytesWritten=0x65afcb8*=0x3ad, lpOverlapped=0x0) returned 1 [0217.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec0e0 [0217.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa38 [0217.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0217.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67a2910) returned 1 [0217.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x679ed08) returned 1 [0217.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0b28) returned 1 [0217.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b560) returned 1 [0217.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5390 [0217.103] SetFilePointerEx (in: hFile=0x1f9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.103] WriteFile (in: hFile=0x1f9c, lpBuffer=0x675de68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x65afd40, lpOverlapped=0x0 | out: lpBuffer=0x675de68*, lpNumberOfBytesWritten=0x65afd40*=0x10c, lpOverlapped=0x0) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675de68) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec0e0) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead30) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eada8) returned 1 [0224.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae20) returned 1 [0224.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675b958 [0224.436] wcscpy (in: _Dest=0x675b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" [0224.436] wcscat (in: _Dest=0x675b958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.ac3a86" [0224.436] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0x65afcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce870 [0224.796] FlushFileBuffers (hFile=0x1f9c) returned 1 [0224.805] CloseHandle (hObject=0x1f9c) returned 1 [0224.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675bbc8 [0224.875] wcscpy (in: _Dest=0x675bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0224.875] wcscat (in: _Dest=0x675bbc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\AC3A86-Readme.txt" [0224.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0224.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x161c [0224.890] WriteFile (in: hFile=0x161c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x65afcd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x65afcd4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.902] CloseHandle (hObject=0x161c) returned 1 [0224.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675bbc8) returned 1 [0224.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774d08) returned 1 Thread: id = 7227 os_tid = 0xf88 [0200.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0201.868] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2330 [0213.110] GetFileSizeEx (in: hFile=0x2330, lpFileSize=0x7e5fc2c | out: lpFileSize=0x7e5fc2c*=633) returned 1 [0213.110] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x275, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.110] ReadFile (in: hFile=0x2330, lpBuffer=0x7e5fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e5fc18, lpOverlapped=0x0 | out: lpBuffer=0x7e5fc08*, lpNumberOfBytesRead=0x7e5fc18*=0x4, lpOverlapped=0x0) returned 1 [0213.114] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadd0 [0213.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaec0 [0213.114] NtQuerySystemTime (in: CurrentTime=0x7e5fba0 | out: CurrentTime=0x7e5fba0*=132482711198280000) returned 0x0 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x7f32e6cf [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x2125a665 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x443ae5cb [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6e01d535 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x729fd411 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x5edda16c [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x7a14ea07 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0xb79b39c [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x72df9b21 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x3d705f73 [0213.114] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x451dab30 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x726dd31d [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6ce6ac4 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0xb3fdcd0 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x3cceb4a5 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x1d3f241d [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6c471761 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x481c57b2 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x4a9ffe09 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x7d6cfc58 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x70c31681 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6aa01922 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x438f8a7a [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x27676315 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x23a6f932 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x13810fd3 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6074085 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x72400516 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x55f67018 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x61f500b5 [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x3476d09d [0213.115] RtlRandomEx (in: Seed=0x7e5fb98 | out: Seed=0x7e5fb98) returned 0x6ef069f5 [0213.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67a6518 [0213.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67aa120 [0213.124] ReadFile (in: hFile=0x2330, lpBuffer=0x67a6518, nNumberOfBytesToRead=0x279, lpNumberOfBytesRead=0x7e5fb94, lpOverlapped=0x0 | out: lpBuffer=0x67a6518*, lpNumberOfBytesRead=0x7e5fb94*=0x279, lpOverlapped=0x0) returned 1 [0213.124] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.124] WriteFile (in: hFile=0x2330, lpBuffer=0x67aa120*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0x7e5fb98, lpOverlapped=0x0 | out: lpBuffer=0x67aa120*, lpNumberOfBytesWritten=0x7e5fb98*=0x279, lpOverlapped=0x0) returned 1 [0217.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa10 [0217.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec680 [0217.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec680) returned 1 [0217.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67aa120) returned 1 [0217.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67a6518) returned 1 [0217.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0858) returned 1 [0217.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b050) returned 1 [0217.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5600 [0217.106] SetFilePointerEx (in: hFile=0x2330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.106] WriteFile (in: hFile=0x2330, lpBuffer=0x675da08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e5fc20, lpOverlapped=0x0 | out: lpBuffer=0x675da08*, lpNumberOfBytesWritten=0x7e5fc20*=0x10c, lpOverlapped=0x0) returned 1 [0224.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675da08) returned 1 [0224.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec680) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa10) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadd0) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaad8) returned 1 [0224.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa60) returned 1 [0224.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675bd00 [0224.419] wcscpy (in: _Dest=0x675bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" [0224.419] wcscat (in: _Dest=0x675bd00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.ac3a86" [0224.419] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.ac3a86", NtPathName=0x7e5fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf488 [0224.770] FlushFileBuffers (hFile=0x2330) returned 1 [0224.780] CloseHandle (hObject=0x2330) returned 1 [0224.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675c7f8 [0224.861] wcscpy (in: _Dest=0x675c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0224.861] wcscat (in: _Dest=0x675c7f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\AC3A86-Readme.txt" [0224.862] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ac3a86-readme.txt")) returned 0xffffffff [0224.862] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.390] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7e5fbb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7e5fbb4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.392] CloseHandle (hObject=0x1038) returned 1 [0225.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675c7f8) returned 1 [0225.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774e30) returned 1 Thread: id = 7228 os_tid = 0x1310 [0200.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0201.869] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0213.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708 [0213.125] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0x476f814 | out: lpFileSize=0x476f814*=710) returned 1 [0213.125] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x2c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.125] ReadFile (in: hFile=0x1708, lpBuffer=0x476f7f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x476f800, lpOverlapped=0x0 | out: lpBuffer=0x476f7f0*, lpNumberOfBytesRead=0x476f800*=0x4, lpOverlapped=0x0) returned 1 [0213.127] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaec0 [0213.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa88 [0213.128] NtQuerySystemTime (in: CurrentTime=0x476f788 | out: CurrentTime=0x476f788*=132482711198436000) returned 0x0 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0xabe3589 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0xbb2dae1 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x3e57d32e [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x39774c21 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x68461f28 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x67bd1067 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x4d237f1b [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x37b3ed50 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x108a3934 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x57c7dfb [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x241f1342 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x1f53679e [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x252aecf9 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x137bfc21 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x30c98b24 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x6a754062 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0xb360d60 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x3068f198 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x2a0e3706 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x292240e0 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x1f77e4cc [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x668d2ef1 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x2556b65f [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x44d1c8d6 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0xa53ef7e [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x5d2eb5d9 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x3c178d1 [0213.128] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x48c934c4 [0213.129] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x9e0a174 [0213.129] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x4c730afe [0213.129] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x1559501c [0213.129] RtlRandomEx (in: Seed=0x476f780 | out: Seed=0x476f780) returned 0x6b6e3897 [0213.138] ReadFile (in: hFile=0x1708, lpBuffer=0x13000020, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x476f77c, lpOverlapped=0x0 | out: lpBuffer=0x13000020*, lpNumberOfBytesRead=0x476f77c*=0x2c6, lpOverlapped=0x0) returned 1 [0213.138] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.138] WriteFile (in: hFile=0x1708, lpBuffer=0x13003c28*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0x476f780, lpOverlapped=0x0 | out: lpBuffer=0x13003c28*, lpNumberOfBytesWritten=0x476f780*=0x2c6, lpOverlapped=0x0) returned 1 [0215.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed4e0 [0215.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed508 [0215.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed508) returned 1 [0215.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13003c28) returned 1 [0215.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13000020) returned 1 [0215.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0240) returned 1 [0215.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a9d8) returned 1 [0215.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5e78 [0215.963] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.963] WriteFile (in: hFile=0x1708, lpBuffer=0x675e610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x476f808, lpOverlapped=0x0 | out: lpBuffer=0x675e610*, lpNumberOfBytesWritten=0x476f808*=0x10c, lpOverlapped=0x0) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e610) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ea8) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed508) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e78) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed4e0) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaec0) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa10) returned 1 [0216.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa38) returned 1 [0216.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3d41b30 [0216.579] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" [0216.579] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.ac3a86" [0216.579] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0x476f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cec78 [0223.809] FlushFileBuffers (hFile=0x1708) returned 1 [0223.819] CloseHandle (hObject=0x1708) returned 1 [0224.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b0d0 [0224.666] wcscpy (in: _Dest=0x678b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0224.666] wcscat (in: _Dest=0x678b0d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\AC3A86-Readme.txt" [0224.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0224.666] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.228] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x476f79c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x476f79c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.230] CloseHandle (hObject=0x1038) returned 1 [0225.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b0d0) returned 1 [0225.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6774f58) returned 1 Thread: id = 7229 os_tid = 0x132c [0200.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0201.866] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0213.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe24 [0213.052] GetFileSizeEx (in: hFile=0xe24, lpFileSize=0x34bfcb4 | out: lpFileSize=0x34bfcb4*=617) returned 1 [0213.052] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.052] ReadFile (in: hFile=0xe24, lpBuffer=0x34bfc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x34bfca0, lpOverlapped=0x0 | out: lpBuffer=0x34bfc90*, lpNumberOfBytesRead=0x34bfca0*=0x4, lpOverlapped=0x0) returned 1 [0213.054] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c8f0 [0213.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaab0 [0213.055] NtQuerySystemTime (in: CurrentTime=0x34bfc28 | out: CurrentTime=0x34bfc28*=132482711197656000) returned 0x0 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x23e9f65a [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x4d0a13bf [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x1373c022 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x4991e967 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x727d881c [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x10281254 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x123b1f8e [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x42d93330 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0xd8b245b [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x71527b33 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x4d142eb7 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x62679537 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x31e7fd9e [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0xf09a3cf [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x241a074a [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x732c6dbb [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x341cf9c2 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x6b4b7c22 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x198c9cc7 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x54c8da92 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x5896a315 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x4f3b256 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x4a6c142b [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x5b6a4bbd [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x314458b8 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x223cb34f [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x222f2101 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x7e5d53c1 [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x45a4ec3e [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x546aa61e [0213.055] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x7f8e5e7e [0213.056] RtlRandomEx (in: Seed=0x34bfc20 | out: Seed=0x34bfc20) returned 0x284b919b [0213.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6968d08 [0213.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x696c910 [0213.064] ReadFile (in: hFile=0xe24, lpBuffer=0x6968d08, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x34bfc1c, lpOverlapped=0x0 | out: lpBuffer=0x6968d08*, lpNumberOfBytesRead=0x34bfc1c*=0x269, lpOverlapped=0x0) returned 1 [0213.064] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.064] WriteFile (in: hFile=0xe24, lpBuffer=0x696c910*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x34bfc20, lpOverlapped=0x0 | out: lpBuffer=0x696c910*, lpNumberOfBytesWritten=0x34bfc20*=0x269, lpOverlapped=0x0) returned 1 [0215.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed300 [0215.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed328 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed328) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x696c910) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6968d08) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85fb8) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aa20) returned 1 [0215.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5c38 [0215.897] SetFilePointerEx (in: hFile=0xe24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.897] WriteFile (in: hFile=0xe24, lpBuffer=0x675df80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x34bfca8, lpOverlapped=0x0 | out: lpBuffer=0x675df80*, lpNumberOfBytesWritten=0x34bfca8*=0x10c, lpOverlapped=0x0) returned 1 [0216.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675df80) returned 1 [0216.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c68) returned 1 [0216.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed328) returned 1 [0216.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c38) returned 1 [0216.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed300) returned 1 [0216.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c8f0) returned 1 [0216.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaba0) returned 1 [0216.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabc8) returned 1 [0216.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678af98 [0216.548] wcscpy (in: _Dest=0x678af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" [0216.548] wcscat (in: _Dest=0x678af98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.ac3a86" [0216.548] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0x34bfc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce5c0 [0223.766] FlushFileBuffers (hFile=0xe24) returned 1 [0223.776] CloseHandle (hObject=0xe24) returned 1 [0224.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678ad28 [0224.635] wcscpy (in: _Dest=0x678ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0224.635] wcscat (in: _Dest=0x678ad28, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\AC3A86-Readme.txt" [0224.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0224.636] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.166] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x34bfc3c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x34bfc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.168] CloseHandle (hObject=0x1038) returned 1 [0225.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ad28) returned 1 [0225.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775080) returned 1 Thread: id = 7230 os_tid = 0x1ecc [0200.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0201.867] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0213.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x274 [0213.065] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x7fbfb64 | out: lpFileSize=0x7fbfb64*=778) returned 1 [0213.065] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x306, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.065] ReadFile (in: hFile=0x274, lpBuffer=0x7fbfb40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7fbfb50, lpOverlapped=0x0 | out: lpBuffer=0x7fbfb40*, lpNumberOfBytesRead=0x7fbfb50*=0x4, lpOverlapped=0x0) returned 1 [0213.068] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaab0 [0213.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab50 [0213.068] NtQuerySystemTime (in: CurrentTime=0x7fbfad8 | out: CurrentTime=0x7fbfad8*=132482711197812000) returned 0x0 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x1163069a [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x22fa8f87 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x4d92820c [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x9f99bd2 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x1ca4a81d [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x7ba81ff5 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x5afd378a [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x5a8ad994 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x305bbe63 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x3f141e07 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x37fdc614 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x75946b [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x35827922 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x71e79ca1 [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x2780ddec [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x31715eca [0213.068] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x962925f [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x28eb1df1 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x71d28162 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x72723e1e [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x777fa427 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x1f45fd64 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x4cba665a [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x446db8e0 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x714e2759 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x77bb903d [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x1ae4cd65 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x154ecd13 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x8df3c68 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x14cfdb69 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x73a69c23 [0213.069] RtlRandomEx (in: Seed=0x7fbfad0 | out: Seed=0x7fbfad0) returned 0x7c6c2339 [0213.078] ReadFile (in: hFile=0x274, lpBuffer=0x678fce8, nNumberOfBytesToRead=0x30a, lpNumberOfBytesRead=0x7fbfacc, lpOverlapped=0x0 | out: lpBuffer=0x678fce8*, lpNumberOfBytesRead=0x7fbfacc*=0x30a, lpOverlapped=0x0) returned 1 [0213.078] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.078] WriteFile (in: hFile=0x274, lpBuffer=0x67938f0*, nNumberOfBytesToWrite=0x30a, lpNumberOfBytesWritten=0x7fbfad0, lpOverlapped=0x0 | out: lpBuffer=0x67938f0*, lpNumberOfBytesWritten=0x7fbfad0*=0x30a, lpOverlapped=0x0) returned 1 [0215.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed350 [0215.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed378 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed378) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67938f0) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678fce8) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ce8) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b008) returned 1 [0215.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5c98 [0215.900] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.900] WriteFile (in: hFile=0x274, lpBuffer=0x675e098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7fbfb58, lpOverlapped=0x0 | out: lpBuffer=0x675e098*, lpNumberOfBytesWritten=0x7fbfb58*=0x10c, lpOverlapped=0x0) returned 1 [0216.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e098) returned 1 [0216.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cc8) returned 1 [0216.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed378) returned 1 [0216.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c98) returned 1 [0216.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed350) returned 1 [0216.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaab0) returned 1 [0216.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac18) returned 1 [0216.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eacb8) returned 1 [0216.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678c930 [0216.550] wcscpy (in: _Dest=0x678c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" [0216.550] wcscat (in: _Dest=0x678c930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.ac3a86" [0216.550] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0x7fbfad0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ceb20 [0223.760] FlushFileBuffers (hFile=0x274) returned 1 [0223.767] CloseHandle (hObject=0x274) returned 1 [0224.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b958 [0224.632] wcscpy (in: _Dest=0x678b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0224.632] wcscat (in: _Dest=0x678b958, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\AC3A86-Readme.txt" [0224.632] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0224.632] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.161] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7fbfaec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x7fbfaec*=0x8b9, lpOverlapped=0x0) returned 1 [0225.163] CloseHandle (hObject=0x1038) returned 1 [0225.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b958) returned 1 [0225.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67751a8) returned 1 Thread: id = 7231 os_tid = 0x1ed0 [0200.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif")) returned 0x20 [0200.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0200.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.381] GetLastError () returned 0x5 [0200.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0200.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 7232 os_tid = 0x1ed4 [0200.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif")) returned 0x20 [0200.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif", dwFileAttributes=0x20) returned 0 [0200.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.850] GetLastError () returned 0x5 [0200.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif", dwFileAttributes=0x20) returned 0 [0200.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 Thread: id = 7233 os_tid = 0x1ed8 [0200.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0200.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0200.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.853] GetLastError () returned 0x5 [0200.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0200.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 7234 os_tid = 0xb14 [0200.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0201.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.164] GetLastError () returned 0x5 [0201.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 7235 os_tid = 0x1edc [0200.386] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0202.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd8c [0214.013] GetFileSizeEx (in: hFile=0xd8c, lpFileSize=0x95cfdcc | out: lpFileSize=0x95cfdcc*=248) returned 1 [0214.013] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.013] ReadFile (in: hFile=0xd8c, lpBuffer=0x95cfda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95cfdb8, lpOverlapped=0x0 | out: lpBuffer=0x95cfda8*, lpNumberOfBytesRead=0x95cfdb8*=0x4, lpOverlapped=0x0) returned 1 [0214.015] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec478 [0214.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec4f0 [0214.015] NtQuerySystemTime (in: CurrentTime=0x95cfd40 | out: CurrentTime=0x95cfd40*=132482711207328000) returned 0x0 [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x1ac909a8 [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x282f689c [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x4f69610d [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x25251fb [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x585128a2 [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x56939f8 [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x3465ac0d [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x1ca4198a [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x63bb8225 [0214.015] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x58900afe [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x6a4fea87 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x47b82bac [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x2871db1a [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x46256fba [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x4f50d19b [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x592d61e9 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x29d9b2b1 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x1589f64f [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x6a1eeb0d [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x2c8e6043 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x159def7f [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x5314ed98 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x1911bede [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x149c1ac5 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x66703cdf [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x36a51142 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x50d9e6d2 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x2f7a2a52 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x4cb1d916 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x5dfd3b07 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x1bed4998 [0214.016] RtlRandomEx (in: Seed=0x95cfd38 | out: Seed=0x95cfd38) returned 0x2d9693db [0214.026] ReadFile (in: hFile=0xd8c, lpBuffer=0x1315e0a0, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x95cfd34, lpOverlapped=0x0 | out: lpBuffer=0x1315e0a0*, lpNumberOfBytesRead=0x95cfd34*=0xf8, lpOverlapped=0x0) returned 1 [0214.026] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.026] WriteFile (in: hFile=0xd8c, lpBuffer=0x13161ca8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x95cfd38, lpOverlapped=0x0 | out: lpBuffer=0x13161ca8*, lpNumberOfBytesWritten=0x95cfd38*=0xf8, lpOverlapped=0x0) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec180 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec158 [0215.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec158) returned 1 [0215.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13161ca8) returned 1 [0215.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1315e0a0) returned 1 [0215.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6b18) returned 1 [0215.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2fd8) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acd88 [0215.535] SetFilePointerEx (in: hFile=0xd8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.535] WriteFile (in: hFile=0xd8c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x95cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x95cfdc0*=0x10c, lpOverlapped=0x0) returned 1 [0216.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0216.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acdb8) returned 1 [0216.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec158) returned 1 [0216.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acd88) returned 1 [0216.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec180) returned 1 [0216.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec478) returned 1 [0216.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec518) returned 1 [0216.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec540) returned 1 [0216.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675c0a8 [0216.727] wcscpy (in: _Dest=0x675c0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" [0216.727] wcscat (in: _Dest=0x675c0a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.ac3a86" [0216.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0x95cfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789a18 [0224.340] FlushFileBuffers (hFile=0xd8c) returned 1 [0224.350] CloseHandle (hObject=0xd8c) returned 1 [0224.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c678 [0224.553] wcscpy (in: _Dest=0x676c678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0224.553] wcscat (in: _Dest=0x676c678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" [0224.553] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0224.553] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.083] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x95cfd54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x95cfd54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.085] CloseHandle (hObject=0xeb8) returned 1 [0225.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c678) returned 1 [0225.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775898) returned 1 Thread: id = 7236 os_tid = 0x1ee0 [0200.388] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0202.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0214.027] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x484 [0214.028] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x63ffc5c | out: lpFileSize=0x63ffc5c*=214) returned 1 [0214.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec4f0 [0214.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec568 [0214.028] NtQuerySystemTime (in: CurrentTime=0x63ffbd0 | out: CurrentTime=0x63ffbd0*=132482711207484000) returned 0x0 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x6e212424 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x634e7898 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x50adc4f4 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0xbfd5dbb [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x7669e82c [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x5fa358f9 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x47fa861b [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x4c662d35 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x354ad603 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x62494cf0 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x2c76ecd2 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x33d17829 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x32817f48 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x2d5f10c9 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x3aade715 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x7d31b1cd [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x53c82690 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x4b699a57 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0xabca012 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x296905f9 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x4c1bb807 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x1d9da40 [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x1280a00e [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x1b7ebc2d [0214.028] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x664141b4 [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x4946b31f [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x52d38da [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x22edcdd4 [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x388ca4fb [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x28874b08 [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x7cd0d91b [0214.029] RtlRandomEx (in: Seed=0x63ffbc8 | out: Seed=0x63ffbc8) returned 0x41ab752c [0214.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131658b0 [0214.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131694b8 [0214.037] ReadFile (in: hFile=0x484, lpBuffer=0x131658b0, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0x63ffbc4, lpOverlapped=0x0 | out: lpBuffer=0x131658b0*, lpNumberOfBytesRead=0x63ffbc4*=0xd6, lpOverlapped=0x0) returned 1 [0214.039] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.039] WriteFile (in: hFile=0x484, lpBuffer=0x131694b8*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x63ffbc8, lpOverlapped=0x0 | out: lpBuffer=0x131694b8*, lpNumberOfBytesWritten=0x63ffbc8*=0xd6, lpOverlapped=0x0) returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecce8 [0215.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec090 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec090) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131694b8) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131658b0) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5d80) returned 1 [0215.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea3020) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acb18 [0215.538] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.538] WriteFile (in: hFile=0x484, lpBuffer=0x3dec080*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x63ffc50, lpOverlapped=0x0 | out: lpBuffer=0x3dec080*, lpNumberOfBytesWritten=0x63ffc50*=0x10c, lpOverlapped=0x0) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec080) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300550) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec090) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acb18) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecce8) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec4f0) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec590) returned 1 [0216.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec5b8) returned 1 [0216.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675c450 [0216.734] wcscpy (in: _Dest=0x675c450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" [0216.734] wcscat (in: _Dest=0x675c450, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.ac3a86" [0216.734] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0x63ffbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789ca8 [0225.534] FlushFileBuffers (hFile=0x484) returned 1 [0225.583] CloseHandle (hObject=0x484) returned 1 [0225.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67639c0 [0225.584] wcscpy (in: _Dest=0x67639c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0225.584] wcscat (in: _Dest=0x67639c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" [0225.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0225.584] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484 [0225.585] WriteFile (in: hFile=0x484, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x63ffbe4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x63ffbe4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.588] CloseHandle (hObject=0x484) returned 1 [0225.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67639c0) returned 1 [0225.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67759c0) returned 1 Thread: id = 7237 os_tid = 0x1ee4 [0200.388] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0202.364] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0214.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ec [0214.040] GetFileSizeEx (in: hFile=0x5ec, lpFileSize=0x9bbf9c4 | out: lpFileSize=0x9bbf9c4*=254) returned 1 [0214.040] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.041] ReadFile (in: hFile=0x5ec, lpBuffer=0x9bbf9a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bbf9b0, lpOverlapped=0x0 | out: lpBuffer=0x9bbf9a0*, lpNumberOfBytesRead=0x9bbf9b0*=0x4, lpOverlapped=0x0) returned 1 [0214.042] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec568 [0214.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec5e0 [0214.043] NtQuerySystemTime (in: CurrentTime=0x9bbf938 | out: CurrentTime=0x9bbf938*=132482711207640000) returned 0x0 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x60c024e2 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3fe5d121 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x4bc845c8 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x5a1e72e1 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3c0af023 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0xe4d6e52 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x4f21817c [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x16d896d6 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x5907678b [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x1f8e86c2 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x65eeef82 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x68eb9388 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x1d005052 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x5c0069d1 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x7c76340b [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x69e40ece [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x28e9dc0e [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0xf51c7b0 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3ebcbe7e [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x61f1c2a2 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x327d67d2 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x60eafda2 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3d7ab7f1 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x6f243a37 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x78acdb02 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3d8998f [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3a798fac [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x3acf1d55 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x9d378cb [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0xe11e139 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x5e09dcd7 [0214.043] RtlRandomEx (in: Seed=0x9bbf930 | out: Seed=0x9bbf930) returned 0x717a276e [0214.051] ReadFile (in: hFile=0x5ec, lpBuffer=0x1316d0c0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x9bbf92c, lpOverlapped=0x0 | out: lpBuffer=0x1316d0c0*, lpNumberOfBytesRead=0x9bbf92c*=0xfe, lpOverlapped=0x0) returned 1 [0214.051] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.051] WriteFile (in: hFile=0x5ec, lpBuffer=0x13170cc8*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x9bbf930, lpOverlapped=0x0 | out: lpBuffer=0x13170cc8*, lpNumberOfBytesWritten=0x9bbf930*=0xfe, lpOverlapped=0x0) returned 1 [0214.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece50 [0214.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece78 [0214.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece78) returned 1 [0214.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13170cc8) returned 1 [0214.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1316d0c0) returned 1 [0214.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6a28) returned 1 [0214.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea3068) returned 1 [0214.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0214.206] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.206] WriteFile (in: hFile=0x5ec, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9bbf9b8, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0x9bbf9b8*=0x10c, lpOverlapped=0x0) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece78) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece50) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec568) returned 1 [0214.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec608) returned 1 [0214.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec630) returned 1 [0214.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41518 [0214.340] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" [0214.340] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.ac3a86" [0214.340] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0x9bbf930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778080 [0214.551] FlushFileBuffers (hFile=0x5ec) returned 1 [0214.723] CloseHandle (hObject=0x5ec) returned 1 [0215.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67648c8 [0215.932] wcscpy (in: _Dest=0x67648c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0215.932] wcscat (in: _Dest=0x67648c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" [0215.932] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0215.932] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17d0 [0216.989] WriteFile (in: hFile=0x17d0, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9bbf94c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9bbf94c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.829] CloseHandle (hObject=0x17d0) returned 1 [0225.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67648c8) returned 1 [0225.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775ae8) returned 1 Thread: id = 7238 os_tid = 0x1ee8 [0200.388] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0202.364] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.052] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee0 [0214.052] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x884fb2c | out: lpFileSize=0x884fb2c*=227) returned 1 [0214.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec5e0 [0214.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec658 [0214.053] NtQuerySystemTime (in: CurrentTime=0x884faa0 | out: CurrentTime=0x884faa0*=132482711207640000) returned 0x0 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x55332891 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x25497a76 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x69e40ece [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x6acfb8fc [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x950d310 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x1f5fe4b7 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x5eaea743 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x62bea0ea [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x6de2c8a5 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x1e99ec53 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x3b1610e5 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x77862c69 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x4683be34 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x16ba9adf [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x547b74e4 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x405466c6 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x460de41a [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x7781d737 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x72fb8f66 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x27e7e3 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x6b1fa68d [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x20d0d1ff [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x7943ad1d [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x3ac533b5 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x40bcf386 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x6e853dd8 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x619575a4 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x6115d662 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x47b8506 [0214.053] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0xdf6f539 [0214.054] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x4ea11043 [0214.054] RtlRandomEx (in: Seed=0x884fa98 | out: Seed=0x884fa98) returned 0x35a3e9c8 [0214.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131748d0 [0214.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131784d8 [0214.063] ReadFile (in: hFile=0xee0, lpBuffer=0x131748d0, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0x884fa94, lpOverlapped=0x0 | out: lpBuffer=0x131748d0*, lpNumberOfBytesRead=0x884fa94*=0xe3, lpOverlapped=0x0) returned 1 [0214.065] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.065] WriteFile (in: hFile=0xee0, lpBuffer=0x131784d8*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x884fa98, lpOverlapped=0x0 | out: lpBuffer=0x131784d8*, lpNumberOfBytesWritten=0x884fa98*=0xe3, lpOverlapped=0x0) returned 1 [0214.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecef0 [0214.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf18 [0214.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf18) returned 1 [0214.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131784d8) returned 1 [0214.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131748d0) returned 1 [0214.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc68c0) returned 1 [0214.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea30b0) returned 1 [0214.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0214.212] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.212] WriteFile (in: hFile=0xee0, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x884fb20, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0x884fb20*=0x10c, lpOverlapped=0x0) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf18) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecef0) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec5e0) returned 1 [0214.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec680) returned 1 [0214.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6a8) returned 1 [0214.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767f70 [0214.346] wcscpy (in: _Dest=0x6767f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" [0214.346] wcscat (in: _Dest=0x6767f70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.ac3a86" [0214.346] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0x884fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778310 [0214.558] FlushFileBuffers (hFile=0xee0) returned 1 [0214.724] CloseHandle (hObject=0xee0) returned 1 [0215.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6763898 [0215.883] wcscpy (in: _Dest=0x6763898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0215.883] wcscat (in: _Dest=0x6763898, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" [0215.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0215.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x116c [0216.977] WriteFile (in: hFile=0x116c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x884fab4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x884fab4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.513] CloseHandle (hObject=0x116c) returned 1 [0225.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763898) returned 1 [0225.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775c10) returned 1 Thread: id = 7239 os_tid = 0x1eec [0200.389] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0202.365] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0214.066] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0214.066] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x8f1facc | out: lpFileSize=0x8f1facc*=264) returned 1 [0214.066] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.066] ReadFile (in: hFile=0xcd0, lpBuffer=0x8f1faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f1fab8, lpOverlapped=0x0 | out: lpBuffer=0x8f1faa8*, lpNumberOfBytesRead=0x8f1fab8*=0x4, lpOverlapped=0x0) returned 1 [0214.068] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec658 [0214.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6d0 [0214.068] NtQuerySystemTime (in: CurrentTime=0x8f1fa40 | out: CurrentTime=0x8f1fa40*=132482711207796000) returned 0x0 [0214.068] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0xe98af42 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x36d1404b [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x2035d4f9 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3fb056ec [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x50d6522b [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x7943ad1d [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x2f50a557 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x140ecf7f [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x45d03a0e [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x702fc5ad [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x6b1fa68d [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x79a71de2 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x646b23f8 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0xe8969a4 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3c37063d [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x5e225d01 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x237dba2e [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3883e2d2 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x4cade73d [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x5e225d01 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x793dd3a8 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3cf45ff8 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3786ded [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x26d11004 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x25497a76 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x3580a552 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x77c649ca [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x7a10c5ce [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x31513bd1 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0xc18adf2 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x6eb1653 [0214.069] RtlRandomEx (in: Seed=0x8f1fa38 | out: Seed=0x8f1fa38) returned 0x661243d4 [0214.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1317c0e0 [0214.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13180060 [0214.083] ReadFile (in: hFile=0xcd0, lpBuffer=0x1317c0e0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x8f1fa34, lpOverlapped=0x0 | out: lpBuffer=0x1317c0e0*, lpNumberOfBytesRead=0x8f1fa34*=0x108, lpOverlapped=0x0) returned 1 [0214.083] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.083] WriteFile (in: hFile=0xcd0, lpBuffer=0x13180060*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x8f1fa38, lpOverlapped=0x0 | out: lpBuffer=0x13180060*, lpNumberOfBytesWritten=0x8f1fa38*=0x108, lpOverlapped=0x0) returned 1 [0214.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecea0 [0214.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecec8 [0214.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecec8) returned 1 [0214.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13180060) returned 1 [0214.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1317c0e0) returned 1 [0214.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 [0214.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea30f8) returned 1 [0214.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0214.210] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.211] WriteFile (in: hFile=0xcd0, lpBuffer=0x6750e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8f1fac0, lpOverlapped=0x0 | out: lpBuffer=0x6750e00*, lpNumberOfBytesWritten=0x8f1fac0*=0x10c, lpOverlapped=0x0) returned 1 [0214.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0214.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecec8) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecea0) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec658) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6f8) returned 1 [0214.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec720) returned 1 [0214.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x6767e38 [0214.343] wcscpy (in: _Dest=0x6767e38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" [0214.343] wcscat (in: _Dest=0x6767e38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.ac3a86" [0214.343] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0x8f1fa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0214.554] FlushFileBuffers (hFile=0xcd0) returned 1 [0214.724] CloseHandle (hObject=0xcd0) returned 1 [0215.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67647a0 [0215.879] wcscpy (in: _Dest=0x67647a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0215.880] wcscat (in: _Dest=0x67647a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" [0215.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0215.880] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc58 [0216.956] WriteFile (in: hFile=0xc58, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8f1fa54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8f1fa54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.542] CloseHandle (hObject=0xc58) returned 1 [0225.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67647a0) returned 1 [0225.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775d38) returned 1 Thread: id = 7240 os_tid = 0x1ef0 [0200.389] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0202.365] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.665] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef8 [0213.665] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0x8ddf99c | out: lpFileSize=0x8ddf99c*=225) returned 1 [0213.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebb18 [0213.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebb90 [0213.665] NtQuerySystemTime (in: CurrentTime=0x8ddf910 | out: CurrentTime=0x8ddf910*=132482711203740000) returned 0x0 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x15fe2527 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x78b46025 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x73180d5f [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x1484c067 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x2efbde38 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x672c6651 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x2878f1d6 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x4d44b535 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x10691954 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x7cba5da7 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x1484c067 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x3aade715 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x7fd739b5 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x1108c8af [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x4219fed8 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x618fc704 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x1a0d32da [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x18437c14 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x64764d17 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x141c8c25 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x797f13ba [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x499b3cc8 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x21fa166e [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x5e22add1 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x6fae9417 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x36475732 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x3ee1f833 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x2d5af2e0 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x613919d9 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0xe1d36e5 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x4ce2dc54 [0213.666] RtlRandomEx (in: Seed=0x8ddf908 | out: Seed=0x8ddf908) returned 0x35c4f75c [0213.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130c7870 [0213.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130cb478 [0213.674] ReadFile (in: hFile=0xef8, lpBuffer=0x130c7870, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0x8ddf904, lpOverlapped=0x0 | out: lpBuffer=0x130c7870*, lpNumberOfBytesRead=0x8ddf904*=0xe1, lpOverlapped=0x0) returned 1 [0213.681] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.681] WriteFile (in: hFile=0xef8, lpBuffer=0x130cb478*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x8ddf908, lpOverlapped=0x0 | out: lpBuffer=0x130cb478*, lpNumberOfBytesWritten=0x8ddf908*=0xe1, lpOverlapped=0x0) returned 1 [0214.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb30 [0214.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb58 [0214.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb58) returned 1 [0214.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130cb478) returned 1 [0214.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130c7870) returned 1 [0214.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aac0) returned 1 [0214.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689afc0) returned 1 [0214.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ff0 [0214.167] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.167] WriteFile (in: hFile=0xef8, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8ddf990, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0x8ddf990*=0x10c, lpOverlapped=0x0) returned 1 [0214.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0214.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0214.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb58) returned 1 [0214.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0214.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb30) returned 1 [0214.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebb18) returned 1 [0214.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbb8) returned 1 [0214.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbe0) returned 1 [0214.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40f00 [0214.306] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" [0214.306] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.ac3a86" [0214.306] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0x8ddf908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67773b0 [0214.516] FlushFileBuffers (hFile=0xef8) returned 1 [0214.640] CloseHandle (hObject=0xef8) returned 1 [0214.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674f648 [0214.653] wcscpy (in: _Dest=0x674f648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0214.653] wcscat (in: _Dest=0x674f648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" [0214.653] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0214.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xef8 [0214.669] WriteFile (in: hFile=0xef8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8ddf924, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8ddf924*=0x8b9, lpOverlapped=0x0) returned 1 [0214.691] CloseHandle (hObject=0xef8) returned 1 [0214.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f648) returned 1 [0214.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775e60) returned 1 Thread: id = 7241 os_tid = 0x1ef4 [0200.389] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0202.365] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0214.083] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2404 [0214.084] GetFileSizeEx (in: hFile=0x2404, lpFileSize=0x990fd34 | out: lpFileSize=0x990fd34*=206) returned 1 [0214.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6d0 [0214.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.084] NtQuerySystemTime (in: CurrentTime=0x990fca8 | out: CurrentTime=0x990fca8*=132482711207952000) returned 0x0 [0214.084] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x1d74b69 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2caaa4c6 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x77a9dcdf [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x235693fd [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x6ad21736 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x6431d938 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x510c7c7e [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x6ad21736 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x128e883 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x1116c496 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x60d56372 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x1c4b0d15 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x6dc504d4 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x6754b9c1 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0xe98af42 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2643c4be [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2c525473 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x75fa59fb [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x7d64fdfc [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x140ecf7f [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2098496e [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x750ceda1 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x7d92df6b [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x4825a8cc [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x169d943c [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x9392498 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x60954c22 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x3d8998f [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2fe67041 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x2ee623fa [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x1a8102c6 [0214.085] RtlRandomEx (in: Seed=0x990fca0 | out: Seed=0x990fca0) returned 0x3293259b [0214.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13183c68 [0214.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13187870 [0214.093] ReadFile (in: hFile=0x2404, lpBuffer=0x13183c68, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x990fc9c, lpOverlapped=0x0 | out: lpBuffer=0x13183c68*, lpNumberOfBytesRead=0x990fc9c*=0xce, lpOverlapped=0x0) returned 1 [0214.095] SetFilePointerEx (in: hFile=0x2404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.095] WriteFile (in: hFile=0x2404, lpBuffer=0x13187870*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x990fca0, lpOverlapped=0x0 | out: lpBuffer=0x13187870*, lpNumberOfBytesWritten=0x990fca0*=0xce, lpOverlapped=0x0) returned 1 [0214.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf40 [0214.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf68 [0214.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf68) returned 1 [0214.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13187870) returned 1 [0214.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13183c68) returned 1 [0214.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d512f0) returned 1 [0214.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea3140) returned 1 [0214.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0214.214] SetFilePointerEx (in: hFile=0x2404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.214] WriteFile (in: hFile=0x2404, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x990fd28, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0x990fd28*=0x10c, lpOverlapped=0x0) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf68) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf40) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6d0) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec770) returned 1 [0214.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec798) returned 1 [0214.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x67680a8 [0214.348] wcscpy (in: _Dest=0x67680a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" [0214.348] wcscat (in: _Dest=0x67680a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86" [0214.349] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0x990fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6778458 [0214.562] FlushFileBuffers (hFile=0x2404) returned 1 [0214.725] CloseHandle (hObject=0x2404) returned 1 [0215.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678b478 [0215.884] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0215.884] wcscat (in: _Dest=0x678b478, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0215.884] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0215.884] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2098 [0216.976] WriteFile (in: hFile=0x2098, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x990fcbc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x990fcbc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.539] CloseHandle (hObject=0x2098) returned 1 [0225.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b478) returned 1 [0225.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775f88) returned 1 Thread: id = 7242 os_tid = 0x136c [0200.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0202.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0214.096] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2358 [0214.097] GetFileSizeEx (in: hFile=0x2358, lpFileSize=0x892f7c4 | out: lpFileSize=0x892f7c4*=206) returned 1 [0214.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec748 [0214.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7c0 [0214.097] NtQuerySystemTime (in: CurrentTime=0x892f738 | out: CurrentTime=0x892f738*=132482711208108000) returned 0x0 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x6d5a2161 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x6c5142d2 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x332e8fcc [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3cc09424 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x4c6bd450 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x4f3c2a62 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x66b9e364 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x30ff01b2 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x1305f5e6 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x723fe5ce [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x453b67a3 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x76ecf7c3 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x619575a4 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x442c0671 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3878b9fd [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3bf137e3 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x465266bd [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3b872052 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x2667e5b4 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x2994b595 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x57b83d00 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3fc9ad81 [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x1c0ee50a [0214.097] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x405466c6 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3fd654da [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x507fb9f7 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x4a26bd25 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x782ebf2 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x2be29c0 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x30ff01b2 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x3ee88fb8 [0214.098] RtlRandomEx (in: Seed=0x892f730 | out: Seed=0x892f730) returned 0x21cc1b2b [0214.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1318b478 [0214.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1318f080 [0214.106] ReadFile (in: hFile=0x2358, lpBuffer=0x1318b478, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x892f72c, lpOverlapped=0x0 | out: lpBuffer=0x1318b478*, lpNumberOfBytesRead=0x892f72c*=0xce, lpOverlapped=0x0) returned 1 [0214.113] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.113] WriteFile (in: hFile=0x2358, lpBuffer=0x1318f080*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x892f730, lpOverlapped=0x0 | out: lpBuffer=0x1318f080*, lpNumberOfBytesWritten=0x892f730*=0xce, lpOverlapped=0x0) returned 1 [0214.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf90 [0214.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecfb8 [0214.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfb8) returned 1 [0214.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1318f080) returned 1 [0214.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1318b478) returned 1 [0214.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 [0214.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea3188) returned 1 [0214.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0214.219] SetFilePointerEx (in: hFile=0x2358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.219] WriteFile (in: hFile=0x2358, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x892f7b8, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0x892f7b8*=0x10c, lpOverlapped=0x0) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfb8) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf90) returned 1 [0214.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec748) returned 1 [0214.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7e8) returned 1 [0214.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec810) returned 1 [0214.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12ea02d0 [0214.357] wcscpy (in: _Dest=0x12ea02d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" [0214.357] wcscat (in: _Dest=0x12ea02d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86" [0214.357] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0x892f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x67785a0 [0214.566] FlushFileBuffers (hFile=0x2358) returned 1 [0214.725] CloseHandle (hObject=0x2358) returned 1 [0215.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678b5b0 [0215.886] wcscpy (in: _Dest=0x678b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0215.886] wcscat (in: _Dest=0x678b5b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0215.886] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0215.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e28 [0216.977] WriteFile (in: hFile=0x1e28, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x892f74c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x892f74c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.517] CloseHandle (hObject=0x1e28) returned 1 [0225.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b5b0) returned 1 [0225.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67760b0) returned 1 Thread: id = 7243 os_tid = 0x1330 [0200.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0202.366] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0213.808] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf1c [0213.818] GetFileSizeEx (in: hFile=0xf1c, lpFileSize=0x915f814 | out: lpFileSize=0x915f814*=228) returned 1 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfc8 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec040 [0213.818] NtQuerySystemTime (in: CurrentTime=0x915f788 | out: CurrentTime=0x915f788*=132482711205300000) returned 0x0 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x46510814 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x636db0e2 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x6f02b8e8 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x47616c15 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x21fbccbd [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x78826d2f [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x246baa3f [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x60be3877 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x7f720ab4 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x67681dd0 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x1a8e70e5 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x4417ad7d [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x29dbebe5 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x7a7bc58 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x20bbb72a [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0xe8969a4 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0xfc089ed [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x20893681 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x6aca95e2 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x17ca1a05 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x5498dba3 [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x39de3ded [0213.818] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x4a1e0779 [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x145dfb94 [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x1f515d77 [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x3d466482 [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x7b26663f [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x365a2aad [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x52f0befc [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x5630041c [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x8500ad2 [0213.819] RtlRandomEx (in: Seed=0x915f780 | out: Seed=0x915f780) returned 0x425a430a [0213.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13112c88 [0213.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13116890 [0213.856] ReadFile (in: hFile=0xf1c, lpBuffer=0x13112c88, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0x915f77c, lpOverlapped=0x0 | out: lpBuffer=0x13112c88*, lpNumberOfBytesRead=0x915f77c*=0xe4, lpOverlapped=0x0) returned 1 [0213.858] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.858] WriteFile (in: hFile=0xf1c, lpBuffer=0x13116890*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x915f780, lpOverlapped=0x0 | out: lpBuffer=0x13116890*, lpNumberOfBytesWritten=0x915f780*=0xe4, lpOverlapped=0x0) returned 1 [0214.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc70 [0214.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc98 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc98) returned 1 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13116890) returned 1 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13112c88) returned 1 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014ef0) returned 1 [0214.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2d08) returned 1 [0214.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5330 [0214.183] SetFilePointerEx (in: hFile=0xf1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.183] WriteFile (in: hFile=0xf1c, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x915f808, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0x915f808*=0x10c, lpOverlapped=0x0) returned 1 [0214.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc98) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc70) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfc8) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec068) returned 1 [0214.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec090) returned 1 [0214.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d418c0 [0214.322] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" [0214.322] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.ac3a86" [0214.322] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0x915f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67778d0 [0214.530] FlushFileBuffers (hFile=0xf1c) returned 1 [0214.642] CloseHandle (hObject=0xf1c) returned 1 [0214.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67500b0 [0214.662] wcscpy (in: _Dest=0x67500b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0214.662] wcscat (in: _Dest=0x67500b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" [0214.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0214.662] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2380 [0214.671] WriteFile (in: hFile=0x2380, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x915f79c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x915f79c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.742] CloseHandle (hObject=0x2380) returned 1 [0215.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67500b0) returned 1 [0215.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67761d8) returned 1 Thread: id = 7244 os_tid = 0x1ef8 [0200.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0202.367] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0213.858] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf0c [0213.859] GetFileSizeEx (in: hFile=0xf0c, lpFileSize=0x9e6fb24 | out: lpFileSize=0x9e6fb24*=224) returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec040 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec0b8 [0213.859] NtQuerySystemTime (in: CurrentTime=0x9e6fa98 | out: CurrentTime=0x9e6fa98*=132482711205768000) returned 0x0 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x4bb44f3 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x3508181d [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x2f561025 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x145dfb94 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x14dd010c [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0xb5155e9 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x355d7be7 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x6a5f3cfe [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x46f26b7f [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x11644f59 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x3c3c1d10 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x537d8dbf [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x2865b712 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x65a8f99a [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0xe4d6e52 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x3e56e53 [0213.859] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x75c9169a [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x759b37ef [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x46510814 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x4b41eae1 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x70bf7b8c [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x714ecc9f [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x49e37937 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x34da1da9 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x3e997f5 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x73a45619 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x12894fdc [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x2da8ff92 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x4b41eae1 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0xa5340e4 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x7f720ab4 [0213.860] RtlRandomEx (in: Seed=0x9e6fa90 | out: Seed=0x9e6fa90) returned 0x64a1568c [0213.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1311a498 [0213.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1311e0a0 [0213.870] ReadFile (in: hFile=0xf0c, lpBuffer=0x1311a498, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x9e6fa8c, lpOverlapped=0x0 | out: lpBuffer=0x1311a498*, lpNumberOfBytesRead=0x9e6fa8c*=0xe0, lpOverlapped=0x0) returned 1 [0213.874] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.875] WriteFile (in: hFile=0xf0c, lpBuffer=0x1311e0a0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x9e6fa90, lpOverlapped=0x0 | out: lpBuffer=0x1311e0a0*, lpNumberOfBytesWritten=0x9e6fa90*=0xe0, lpOverlapped=0x0) returned 1 [0214.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd10 [0214.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd38 [0214.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd38) returned 1 [0214.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1311e0a0) returned 1 [0214.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1311a498) returned 1 [0214.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0214.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2d50) returned 1 [0214.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0214.190] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.190] WriteFile (in: hFile=0xf0c, lpBuffer=0x6752728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9e6fb18, lpOverlapped=0x0 | out: lpBuffer=0x6752728*, lpNumberOfBytesWritten=0x9e6fb18*=0x10c, lpOverlapped=0x0) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd38) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd10) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec040) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec0e0) returned 1 [0214.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec108) returned 1 [0214.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41788 [0214.328] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" [0214.328] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.ac3a86" [0214.328] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x9e6fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777b60 [0214.537] FlushFileBuffers (hFile=0xf0c) returned 1 [0214.643] CloseHandle (hObject=0xf0c) returned 1 [0215.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6771ae8 [0215.106] wcscpy (in: _Dest=0x6771ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0215.106] wcscat (in: _Dest=0x6771ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" [0215.106] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0215.106] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1988 [0216.994] WriteFile (in: hFile=0x1988, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9e6faac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9e6faac*=0x8b9, lpOverlapped=0x0) returned 1 [0225.877] CloseHandle (hObject=0x1988) returned 1 [0225.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771ae8) returned 1 [0225.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776300) returned 1 Thread: id = 7245 os_tid = 0x1efc [0200.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0202.367] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0213.876] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x124c [0213.876] GetFileSizeEx (in: hFile=0x124c, lpFileSize=0xab9fb24 | out: lpFileSize=0xab9fb24*=207) returned 1 [0213.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec0b8 [0213.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec130 [0213.877] NtQuerySystemTime (in: CurrentTime=0xab9fa98 | out: CurrentTime=0xab9fa98*=132482711205924000) returned 0x0 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x5e71f1f1 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x32cd1ecb [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x46f26b7f [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x5e221439 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x20ce5ce6 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x380cc69 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x7dc175d0 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x39935089 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x40f1a061 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x67bafe56 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x4e0179db [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x639889a2 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x11644f59 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x29dbebe5 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x54ccd52 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x2f470cc [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x20893681 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x54db5d9 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x32586249 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x365a2aad [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x55911555 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x21283ccd [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x8500ad2 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x456e4db2 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x48d8fcd9 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x48400c3 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x3f6d497e [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x1175f0fd [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x115e24a6 [0213.877] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x4c476d61 [0213.878] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x3710fad3 [0213.878] RtlRandomEx (in: Seed=0xab9fa90 | out: Seed=0xab9fa90) returned 0x53b463ac [0213.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13121ca8 [0213.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131258b0 [0213.886] ReadFile (in: hFile=0x124c, lpBuffer=0x13121ca8, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0xab9fa8c, lpOverlapped=0x0 | out: lpBuffer=0x13121ca8*, lpNumberOfBytesRead=0xab9fa8c*=0xcf, lpOverlapped=0x0) returned 1 [0213.888] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.888] WriteFile (in: hFile=0x124c, lpBuffer=0x131258b0*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0xab9fa90, lpOverlapped=0x0 | out: lpBuffer=0x131258b0*, lpNumberOfBytesWritten=0xab9fa90*=0xcf, lpOverlapped=0x0) returned 1 [0214.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eccc0 [0214.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecce8 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecce8) returned 1 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131258b0) returned 1 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13121ca8) returned 1 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0214.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2d98) returned 1 [0214.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0214.189] SetFilePointerEx (in: hFile=0x124c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.189] WriteFile (in: hFile=0x124c, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xab9fb18, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0xab9fb18*=0x10c, lpOverlapped=0x0) returned 1 [0214.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0214.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0214.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecce8) returned 1 [0214.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0214.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eccc0) returned 1 [0214.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec0b8) returned 1 [0214.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec158) returned 1 [0214.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec180) returned 1 [0214.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41b30 [0214.325] wcscpy (in: _Dest=0x3d41b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" [0214.325] wcscat (in: _Dest=0x3d41b30, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.ac3a86" [0214.325] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.ac3a86", NtPathName=0xab9fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777a18 [0214.533] FlushFileBuffers (hFile=0x124c) returned 1 [0214.643] CloseHandle (hObject=0x124c) returned 1 [0214.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674eab8 [0214.664] wcscpy (in: _Dest=0x674eab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0214.664] wcscat (in: _Dest=0x674eab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" [0214.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ac3a86-readme.txt")) returned 0xffffffff [0214.664] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x11a8 [0214.671] WriteFile (in: hFile=0x11a8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xab9faac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xab9faac*=0x8b9, lpOverlapped=0x0) returned 1 [0214.733] CloseHandle (hObject=0x11a8) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eab8) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776428) returned 1 Thread: id = 7246 os_tid = 0x1f00 [0200.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0202.367] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a0 [0213.888] GetFileSizeEx (in: hFile=0x11a0, lpFileSize=0xa16f7b4 | out: lpFileSize=0xa16f7b4*=217) returned 1 [0213.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec130 [0213.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec1a8 [0213.889] NtQuerySystemTime (in: CurrentTime=0xa16f728 | out: CurrentTime=0xa16f728*=132482711206080000) returned 0x0 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x4ad0116b [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0xd17391f [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x39de3ded [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x1e4da331 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x3f6d497e [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x4ad0116b [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0xb4786d7 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x64ef4fa2 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x5b3b9dfc [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x136498bf [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x416d5471 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x2f561025 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x4faf8057 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x145d00d2 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x7b5988ab [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x2bf2dd23 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x678297cf [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0xa87e412 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x68ed41e7 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x27fe97ea [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x6be51b9b [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x3e56e53 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x5fc5c1d [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x1159c352 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x2da8ff92 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x136498bf [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x72e50cac [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x52f0befc [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x47ed6665 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x8759c86 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x27e7e3 [0213.889] RtlRandomEx (in: Seed=0xa16f720 | out: Seed=0xa16f720) returned 0x7773f7d2 [0213.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131294b8 [0213.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1312d0c0 [0213.898] ReadFile (in: hFile=0x11a0, lpBuffer=0x131294b8, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xa16f71c, lpOverlapped=0x0 | out: lpBuffer=0x131294b8*, lpNumberOfBytesRead=0xa16f71c*=0xd9, lpOverlapped=0x0) returned 1 [0213.900] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.900] WriteFile (in: hFile=0x11a0, lpBuffer=0x1312d0c0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xa16f720, lpOverlapped=0x0 | out: lpBuffer=0x1312d0c0*, lpNumberOfBytesWritten=0xa16f720*=0xd9, lpOverlapped=0x0) returned 1 [0214.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecdb0 [0214.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecdd8 [0214.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdd8) returned 1 [0214.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1312d0c0) returned 1 [0214.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131294b8) returned 1 [0214.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014fe0) returned 1 [0214.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2de0) returned 1 [0214.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0214.194] SetFilePointerEx (in: hFile=0x11a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.194] WriteFile (in: hFile=0x11a0, lpBuffer=0x6751f80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa16f7a8, lpOverlapped=0x0 | out: lpBuffer=0x6751f80*, lpNumberOfBytesWritten=0xa16f7a8*=0x10c, lpOverlapped=0x0) returned 1 [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdd8) returned 1 [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0214.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdb0) returned 1 [0214.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec130) returned 1 [0214.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1d0) returned 1 [0214.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1f8) returned 1 [0214.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41c68 [0214.334] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" [0214.334] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.ac3a86" [0214.334] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xa16f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777df0 [0214.544] FlushFileBuffers (hFile=0x11a0) returned 1 [0214.722] CloseHandle (hObject=0x11a0) returned 1 [0215.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6763648 [0215.941] wcscpy (in: _Dest=0x6763648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0215.941] wcscat (in: _Dest=0x6763648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" [0215.941] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0215.941] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x106c [0216.993] WriteFile (in: hFile=0x106c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa16f73c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa16f73c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.879] CloseHandle (hObject=0x106c) returned 1 [0225.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763648) returned 1 [0225.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776550) returned 1 Thread: id = 7247 os_tid = 0x1f04 [0200.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0202.368] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0213.900] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318 [0213.900] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0xb13fdcc | out: lpFileSize=0xb13fdcc*=195) returned 1 [0213.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec1a8 [0213.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec220 [0213.901] NtQuerySystemTime (in: CurrentTime=0xb13fd40 | out: CurrentTime=0xb13fd40*=132482711206080000) returned 0x0 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x1b8b932f [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x54db5d9 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x11fb44bc [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x704e2a7f [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x2beb17a9 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x640d8e65 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x6317ff62 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0xd17391f [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x68ec7347 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x4d041294 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x48a9e9da [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x5ca64bbd [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x15cee3ff [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x7773f7d2 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x70632276 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x5f9a59f3 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x770bfc9b [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x78e156a8 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x32a00758 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x4a2c1c0 [0213.901] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x1e25dcf2 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x23b9ca8 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x4271f67e [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x17603e52 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x72e50cac [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x4a1e0779 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x144185b9 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x3925b148 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x429bc02e [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x2ec5aaf2 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x310cee97 [0213.902] RtlRandomEx (in: Seed=0xb13fd38 | out: Seed=0xb13fd38) returned 0x5dfd3b07 [0213.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13130cc8 [0213.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131348d0 [0213.914] ReadFile (in: hFile=0x1318, lpBuffer=0x13130cc8, nNumberOfBytesToRead=0xc3, lpNumberOfBytesRead=0xb13fd34, lpOverlapped=0x0 | out: lpBuffer=0x13130cc8*, lpNumberOfBytesRead=0xb13fd34*=0xc3, lpOverlapped=0x0) returned 1 [0213.916] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.916] WriteFile (in: hFile=0x1318, lpBuffer=0x131348d0*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0xb13fd38, lpOverlapped=0x0 | out: lpBuffer=0x131348d0*, lpNumberOfBytesWritten=0xb13fd38*=0xc3, lpOverlapped=0x0) returned 1 [0214.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd60 [0214.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd88 [0214.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd88) returned 1 [0214.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131348d0) returned 1 [0214.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13130cc8) returned 1 [0214.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0214.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2e28) returned 1 [0214.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0214.193] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.193] WriteFile (in: hFile=0x1318, lpBuffer=0x6751148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb13fdc0, lpOverlapped=0x0 | out: lpBuffer=0x6751148*, lpNumberOfBytesWritten=0xb13fdc0*=0x10c, lpOverlapped=0x0) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd88) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd60) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1a8) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec248) returned 1 [0214.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec270) returned 1 [0214.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41da0 [0214.331] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" [0214.331] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.ac3a86" [0214.331] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0xb13fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777ca8 [0214.540] FlushFileBuffers (hFile=0x1318) returned 1 [0214.721] CloseHandle (hObject=0x1318) returned 1 [0215.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6763770 [0215.553] wcscpy (in: _Dest=0x6763770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0215.553] wcscat (in: _Dest=0x6763770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" [0215.553] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0215.553] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1834 [0216.989] WriteFile (in: hFile=0x1834, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb13fd54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb13fd54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.833] CloseHandle (hObject=0x1834) returned 1 [0225.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6763770) returned 1 [0225.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6776678) returned 1 Thread: id = 7248 os_tid = 0x1f08 [0200.391] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0202.368] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.917] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfb0 [0213.921] GetFileSizeEx (in: hFile=0xfb0, lpFileSize=0x938f7bc | out: lpFileSize=0x938f7bc*=213) returned 1 [0213.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec220 [0213.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec298 [0213.921] NtQuerySystemTime (in: CurrentTime=0x938f730 | out: CurrentTime=0x938f730*=132482711206392000) returned 0x0 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4a2c1c0 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x19079368 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3d5ec633 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x45b50df7 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3d77a270 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3293259b [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x6342d822 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x102fa672 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x697855db [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4f16efd9 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x6e5fa511 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3f3bd1ac [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x23b9ca8 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3d466482 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x3619fab9 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x19d892ef [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x5bc9d9f8 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4e0179db [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x57cefbf3 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4b699a57 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4f16efd9 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x2ec5aaf2 [0213.921] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x19079368 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x1c4b9a75 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x57cefbf3 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x5a1e72e1 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x53fcaade [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x322c5eba [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x78e156a8 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x4725aca0 [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x6ca7e9dd [0213.923] RtlRandomEx (in: Seed=0x938f728 | out: Seed=0x938f728) returned 0x6ebe1cbd [0213.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x131384d8 [0213.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1313c0e0 [0213.931] ReadFile (in: hFile=0xfb0, lpBuffer=0x131384d8, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x938f724, lpOverlapped=0x0 | out: lpBuffer=0x131384d8*, lpNumberOfBytesRead=0x938f724*=0xd5, lpOverlapped=0x0) returned 1 [0213.934] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.934] WriteFile (in: hFile=0xfb0, lpBuffer=0x1313c0e0*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x938f728, lpOverlapped=0x0 | out: lpBuffer=0x1313c0e0*, lpNumberOfBytesWritten=0x938f728*=0xd5, lpOverlapped=0x0) returned 1 [0214.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece00 [0214.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece28 [0214.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece28) returned 1 [0214.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1313c0e0) returned 1 [0214.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x131384d8) returned 1 [0214.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0214.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2e70) returned 1 [0214.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0214.198] SetFilePointerEx (in: hFile=0xfb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.198] WriteFile (in: hFile=0xfb0, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x938f7b0, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0x938f7b0*=0x10c, lpOverlapped=0x0) returned 1 [0214.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece28) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece00) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec220) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec2c0) returned 1 [0214.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec2e8) returned 1 [0214.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41170 [0214.337] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" [0214.337] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.ac3a86" [0214.337] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0x938f728, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777f38 [0214.548] FlushFileBuffers (hFile=0xfb0) returned 1 [0214.722] CloseHandle (hObject=0xfb0) returned 1 [0215.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6762e30 [0215.934] wcscpy (in: _Dest=0x6762e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0215.934] wcscat (in: _Dest=0x6762e30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" [0215.934] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0215.934] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2164 [0216.990] WriteFile (in: hFile=0x2164, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x938f744, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x938f744*=0x8b9, lpOverlapped=0x0) returned 1 [0225.837] CloseHandle (hObject=0x2164) returned 1 [0225.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762e30) returned 1 [0225.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67767a0) returned 1 Thread: id = 7249 os_tid = 0x1f0c [0200.392] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0202.369] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0213.934] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf80 [0213.935] GetFileSizeEx (in: hFile=0xf80, lpFileSize=0x8e5fdcc | out: lpFileSize=0x8e5fdcc*=206) returned 1 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec298 [0213.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec310 [0213.935] NtQuerySystemTime (in: CurrentTime=0x8e5fd40 | out: CurrentTime=0x8e5fd40*=132482711206548000) returned 0x0 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x3619fab9 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x61ec1222 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x68ec7347 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x322c5eba [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x66500fc8 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x65a8f99a [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x19d892ef [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x2bf2dd23 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x23219d0e [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x4b75b21c [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x2d9693db [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x4230e2ee [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0xecf9b01 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x47b043fd [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x17603e52 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x355d7be7 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x311c9739 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x2672586 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x2069f6d2 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x33d1dec0 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x2c8e6043 [0213.935] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x22ed4253 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x6ec6f7fb [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x1200d237 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x7f88f05 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x6241c3a2 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x6a5f3cfe [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x7ae528d2 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x54bf5c57 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x7bbddc78 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x626c9c62 [0213.936] RtlRandomEx (in: Seed=0x8e5fd38 | out: Seed=0x8e5fd38) returned 0x28d9207a [0213.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13140060 [0213.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13143c68 [0213.950] ReadFile (in: hFile=0xf80, lpBuffer=0x13140060, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x8e5fd34, lpOverlapped=0x0 | out: lpBuffer=0x13140060*, lpNumberOfBytesRead=0x8e5fd34*=0xce, lpOverlapped=0x0) returned 1 [0213.952] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.952] WriteFile (in: hFile=0xf80, lpBuffer=0x13143c68*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x8e5fd38, lpOverlapped=0x0 | out: lpBuffer=0x13143c68*, lpNumberOfBytesWritten=0x8e5fd38*=0xce, lpOverlapped=0x0) returned 1 [0215.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec0b8 [0215.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eccc0 [0215.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eccc0) returned 1 [0215.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13143c68) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13140060) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35438) returned 1 [0215.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2eb8) returned 1 [0215.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acfc8 [0215.537] SetFilePointerEx (in: hFile=0xf80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.537] WriteFile (in: hFile=0xf80, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e5fdc0, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x8e5fdc0*=0x10c, lpOverlapped=0x0) returned 1 [0216.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0216.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acc98) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eccc0) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30acfc8) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec0b8) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec298) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec338) returned 1 [0216.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec360) returned 1 [0216.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x675c1e0 [0216.730] wcscpy (in: _Dest=0x675c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" [0216.730] wcscat (in: _Dest=0x675c1e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86" [0216.730] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0x8e5fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6789b60 [0224.348] FlushFileBuffers (hFile=0xf80) returned 1 [0224.355] CloseHandle (hObject=0xf80) returned 1 [0224.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea1788 [0224.561] wcscpy (in: _Dest=0x12ea1788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0224.561] wcscat (in: _Dest=0x12ea1788, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0224.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0224.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.096] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e5fd54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e5fd54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.098] CloseHandle (hObject=0xeb8) returned 1 [0225.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1788) returned 1 [0225.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67768c8) returned 1 Thread: id = 7250 os_tid = 0x1f10 [0200.395] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0202.369] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0213.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf20 [0213.953] GetFileSizeEx (in: hFile=0xf20, lpFileSize=0x9bffb5c | out: lpFileSize=0x9bffb5c*=208) returned 1 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec310 [0213.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec388 [0213.953] NtQuerySystemTime (in: CurrentTime=0x9bffad0 | out: CurrentTime=0x9bffad0*=132482711206704000) returned 0x0 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x2eb7f20d [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x5c318e2a [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x7c4eac6c [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x6c2fecf4 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x19a680c2 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x1591e584 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x6241c3a2 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x62977522 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x32817f48 [0213.953] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x60a24a73 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x651a09c9 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x46d0bb05 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x183bfc1c [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x5b3e563c [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x747eb9c5 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x2b2bb955 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x55675fa [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0xd061de7 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x45df39db [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x353fdaf5 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x34f884a4 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0xa50d4df [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0xa07aefb [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x61c13962 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x2f470cc [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x38b1ae6d [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0xf5702b [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x3496c3a0 [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x4d663e7c [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x72b6e04e [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x7927880e [0213.954] RtlRandomEx (in: Seed=0x9bffac8 | out: Seed=0x9bffac8) returned 0x490a11c5 [0213.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13147870 [0213.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1314b478 [0213.962] ReadFile (in: hFile=0xf20, lpBuffer=0x13147870, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x9bffac4, lpOverlapped=0x0 | out: lpBuffer=0x13147870*, lpNumberOfBytesRead=0x9bffac4*=0xd0, lpOverlapped=0x0) returned 1 [0213.964] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.964] WriteFile (in: hFile=0xf20, lpBuffer=0x1314b478*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x9bffac8, lpOverlapped=0x0 | out: lpBuffer=0x1314b478*, lpNumberOfBytesWritten=0x9bffac8*=0xd0, lpOverlapped=0x0) returned 1 [0215.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc70 [0215.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc98 [0215.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc98) returned 1 [0215.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1314b478) returned 1 [0215.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13147870) returned 1 [0215.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34c40) returned 1 [0215.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2f00) returned 1 [0215.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e54b8 [0215.541] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.541] WriteFile (in: hFile=0xf20, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9bffb50, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x9bffb50*=0x10c, lpOverlapped=0x0) returned 1 [0216.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0216.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e54e8) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc98) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e54b8) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc70) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec310) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3b0) returned 1 [0216.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3d8) returned 1 [0216.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12ea0678 [0216.781] wcscpy (in: _Dest=0x12ea0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" [0216.781] wcscat (in: _Dest=0x12ea0678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86" [0216.781] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x9bffac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x678a080 [0224.366] FlushFileBuffers (hFile=0xf20) returned 1 [0224.379] CloseHandle (hObject=0xf20) returned 1 [0224.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea1ed8 [0224.576] wcscpy (in: _Dest=0x12ea1ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0224.576] wcscat (in: _Dest=0x12ea1ed8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0224.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0224.576] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.119] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9bffae4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9bffae4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.121] CloseHandle (hObject=0xeb8) returned 1 [0225.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1ed8) returned 1 [0225.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778ab8) returned 1 Thread: id = 7251 os_tid = 0x10bc [0200.395] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json")) returned 0x2020 [0200.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0206.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x246c [0208.722] GetFileSizeEx (in: hFile=0x246c, lpFileSize=0xb18fe64 | out: lpFileSize=0xb18fe64*=269) returned 1 [0208.722] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.722] ReadFile (in: hFile=0x246c, lpBuffer=0xb18fe40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb18fe50, lpOverlapped=0x0 | out: lpBuffer=0xb18fe40*, lpNumberOfBytesRead=0xb18fe50*=0x4, lpOverlapped=0x0) returned 1 [0208.724] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eadd0 [0208.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead30 [0208.724] NtQuerySystemTime (in: CurrentTime=0xb18fdd8 | out: CurrentTime=0xb18fdd8*=132482711171916000) returned 0x0 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x6b86e9dd [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x3651295f [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x5366c9cc [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x26458385 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x470988ed [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x55760577 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x6c8b7c5f [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x6f811f69 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x5c70824c [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x1a7880b0 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x2d91389f [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x76381f4 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x76b42da1 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x25f85899 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x47502723 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x47502723 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x23e9f65a [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x1ee47841 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x33815171 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x451dab30 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x3ba02562 [0208.724] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x5c270e24 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x99eabf9 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x3eb860c1 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x5109be37 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x34864ad0 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x7e5d53c1 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x4bca048f [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x27bfa67f [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x60a765cd [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x9c194a3 [0208.725] RtlRandomEx (in: Seed=0xb18fdd0 | out: Seed=0xb18fdd0) returned 0x137d7669 [0208.733] ReadFile (in: hFile=0x246c, lpBuffer=0x67efce8, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0xb18fdcc, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesRead=0xb18fdcc*=0x10d, lpOverlapped=0x0) returned 1 [0208.733] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.733] WriteFile (in: hFile=0x246c, lpBuffer=0x67f38f0*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0xb18fdd0, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesWritten=0xb18fdd0*=0x10d, lpOverlapped=0x0) returned 1 [0209.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1338 [0209.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef39d0 [0209.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0209.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0209.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67efce8) returned 1 [0209.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85ec8) returned 1 [0209.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ff6c8) returned 1 [0209.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x678ebd8 [0209.167] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.167] WriteFile (in: hFile=0x246c, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb18fe58, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0xb18fe58*=0x10c, lpOverlapped=0x0) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ec08) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef39d0) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ebd8) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1338) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eadd0) returned 1 [0209.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eace0) returned 1 [0209.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead08) returned 1 [0209.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0198 [0209.382] wcscpy (in: _Dest=0x12ea0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" [0209.382] wcscat (in: _Dest=0x12ea0198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.ac3a86" [0209.382] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xb18fdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786310 [0209.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786310) returned 1 [0209.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6825b18) returned 1 [0209.649] NtQueryInformationFile (in: FileHandle=0x246c, IoStatusBlock=0xb18fda8, FileInformation=0xb18fdb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb18fda8, FileInformation=0xb18fdb0) returned 0x0 [0209.649] NtSetInformationFile (FileHandle=0x246c, IoStatusBlock=0xb18fda8, FileInformation=0xb18fdb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0198) returned 1 [0209.759] FlushFileBuffers (hFile=0x246c) returned 1 [0209.765] CloseHandle (hObject=0x246c) returned 1 [0209.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9dc68 [0209.801] wcscpy (in: _Dest=0x12e9dc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0209.801] wcscat (in: _Dest=0x12e9dc68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\AC3A86-Readme.txt" [0209.801] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0209.801] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274 [0209.809] WriteFile (in: hFile=0x274, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb18fdec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb18fdec*=0x8b9, lpOverlapped=0x0) returned 1 [0209.827] CloseHandle (hObject=0x274) returned 1 [0209.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dc68) returned 1 [0209.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778be0) returned 1 Thread: id = 7252 os_tid = 0x1f14 [0200.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json")) returned 0x2020 [0200.399] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0206.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2188 [0208.734] GetFileSizeEx (in: hFile=0x2188, lpFileSize=0xc04f934 | out: lpFileSize=0xc04f934*=226) returned 1 [0208.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ead30 [0208.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac90 [0208.734] NtQuerySystemTime (in: CurrentTime=0xc04f8a8 | out: CurrentTime=0xc04f8a8*=132482711171916000) returned 0x0 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x1054c265 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x16d65f [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x694c74a7 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x41e39cc6 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0xe502600 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6549b13f [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x4a12b2c3 [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x44ee9c9d [0208.734] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x5e314106 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x387a78c4 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6549b13f [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6d6abb57 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x64126f3a [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x39aa1cd [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x4ec7051 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x7dce2c8b [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x76af549a [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x7b4160ad [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x60896d4a [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0xe502600 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x4aaf6e03 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x104008a4 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x16d65f [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6048d38b [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6e1e057f [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x6c8df963 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x110af3b5 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x1d701c20 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x4ebd5ed7 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x70e453e9 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x91631a3 [0208.735] RtlRandomEx (in: Seed=0xc04f8a0 | out: Seed=0xc04f8a0) returned 0x49b858f9 [0208.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69c98f0 [0208.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69cd4f8 [0208.868] ReadFile (in: hFile=0x2188, lpBuffer=0x69c98f0, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xc04f89c, lpOverlapped=0x0 | out: lpBuffer=0x69c98f0*, lpNumberOfBytesRead=0xc04f89c*=0xe2, lpOverlapped=0x0) returned 1 [0208.870] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.870] WriteFile (in: hFile=0x2188, lpBuffer=0x69cd4f8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xc04f8a0, lpOverlapped=0x0 | out: lpBuffer=0x69cd4f8*, lpNumberOfBytesWritten=0xc04f8a0*=0xe2, lpOverlapped=0x0) returned 1 [0209.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0209.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a5b0 [0209.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0209.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69cd4f8) returned 1 [0209.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c98f0) returned 1 [0209.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0209.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6822e10) returned 1 [0209.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0209.223] SetFilePointerEx (in: hFile=0x2188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.223] WriteFile (in: hFile=0x2188, lpBuffer=0x30bbb60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc04f928, lpOverlapped=0x0 | out: lpBuffer=0x30bbb60*, lpNumberOfBytesWritten=0xc04f928*=0x10c, lpOverlapped=0x0) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb60) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a5b0) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ead30) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b5b8) returned 1 [0209.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caf8) returned 1 [0209.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12e9cdc8 [0209.443] wcscpy (in: _Dest=0x12e9cdc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" [0209.443] wcscat (in: _Dest=0x12e9cdc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.ac3a86" [0209.443] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0xc04f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6786458 [0209.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6786458) returned 1 [0209.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6827948) returned 1 [0209.674] NtQueryInformationFile (in: FileHandle=0x2188, IoStatusBlock=0xc04f878, FileInformation=0xc04f880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc04f878, FileInformation=0xc04f880) returned 0x0 [0209.674] NtSetInformationFile (FileHandle=0x2188, IoStatusBlock=0xc04f878, FileInformation=0xc04f880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cdc8) returned 1 [0209.768] FlushFileBuffers (hFile=0x2188) returned 1 [0209.774] CloseHandle (hObject=0x2188) returned 1 [0209.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12e9dda0 [0209.804] wcscpy (in: _Dest=0x12e9dda0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0209.804] wcscat (in: _Dest=0x12e9dda0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\AC3A86-Readme.txt" [0209.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0209.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe24 [0209.809] WriteFile (in: hFile=0xe24, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc04f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc04f8bc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.830] CloseHandle (hObject=0xe24) returned 1 [0209.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dda0) returned 1 [0209.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778d08) returned 1 Thread: id = 7253 os_tid = 0x1f18 [0200.400] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json")) returned 0x2020 [0200.401] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0206.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1520 [0208.871] GetFileSizeEx (in: hFile=0x1520, lpFileSize=0xb0bfd54 | out: lpFileSize=0xb0bfd54*=272) returned 1 [0208.871] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.871] ReadFile (in: hFile=0x1520, lpBuffer=0xb0bfd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb0bfd40, lpOverlapped=0x0 | out: lpBuffer=0xb0bfd30*, lpNumberOfBytesRead=0xb0bfd40*=0x4, lpOverlapped=0x0) returned 1 [0208.873] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eac90 [0208.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eacb8 [0208.873] NtQuerySystemTime (in: CurrentTime=0xb0bfcc8 | out: CurrentTime=0xb0bfcc8*=132482711173320000) returned 0x0 [0208.873] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x2e680fec [0208.873] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x7dce2c8b [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x358aa42e [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x755af259 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x5a804d58 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x28ebca52 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x314458b8 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x7f18e30f [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x741bce3e [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x7d9426cc [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x615a78de [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x76b42da1 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x20638354 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x371bcd6e [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x25a74eb9 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x2ff687fb [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x77bc13cf [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x60909774 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x6d150eb2 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x1e34d7ca [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x70271cf8 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x609d51bd [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x212dac5f [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0xff21952 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x2fab1782 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x931c2cd [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x19723c47 [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x41718cfc [0208.874] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x6940c3bf [0208.875] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x5b7f6439 [0208.875] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x39aa1cd [0208.875] RtlRandomEx (in: Seed=0xb0bfcc0 | out: Seed=0xb0bfcc0) returned 0x560b7f57 [0208.885] ReadFile (in: hFile=0x1520, lpBuffer=0x67f74f8, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xb0bfcbc, lpOverlapped=0x0 | out: lpBuffer=0x67f74f8*, lpNumberOfBytesRead=0xb0bfcbc*=0x110, lpOverlapped=0x0) returned 1 [0208.885] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.886] WriteFile (in: hFile=0x1520, lpBuffer=0x67fb100*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xb0bfcc0, lpOverlapped=0x0 | out: lpBuffer=0x67fb100*, lpNumberOfBytesWritten=0xb0bfcc0*=0x110, lpOverlapped=0x0) returned 1 [0215.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43668 [0215.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d432a8 [0215.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0215.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fb100) returned 1 [0215.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f74f8) returned 1 [0215.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85e50) returned 1 [0215.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823830) returned 1 [0215.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5270 [0215.388] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.388] WriteFile (in: hFile=0x1520, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0bfd48, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xb0bfd48*=0x10c, lpOverlapped=0x0) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ff0) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d432a8) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43668) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac90) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac40) returned 1 [0216.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eac68) returned 1 [0216.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41c68 [0216.570] wcscpy (in: _Dest=0x3d41c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" [0216.570] wcscat (in: _Dest=0x3d41c68, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.ac3a86" [0216.570] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xb0bfcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777b60 [0223.737] FlushFileBuffers (hFile=0x1520) returned 1 [0223.750] CloseHandle (hObject=0x1520) returned 1 [0224.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea1c68 [0224.569] wcscpy (in: _Dest=0x12ea1c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0224.569] wcscat (in: _Dest=0x12ea1c68, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\AC3A86-Readme.txt" [0224.569] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0224.569] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.114] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb0bfcdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb0bfcdc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.116] CloseHandle (hObject=0xeb8) returned 1 [0225.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1c68) returned 1 [0225.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778e30) returned 1 Thread: id = 7254 os_tid = 0x1f1c [0200.401] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json")) returned 0x2020 [0200.402] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0206.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e18 [0208.902] GetFileSizeEx (in: hFile=0x1e18, lpFileSize=0xa60fc7c | out: lpFileSize=0xa60fc7c*=231) returned 1 [0208.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eabf0 [0208.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab78 [0208.903] NtQuerySystemTime (in: CurrentTime=0xa60fbf0 | out: CurrentTime=0xa60fbf0*=132482711173632000) returned 0x0 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x471b7824 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0xa61e841 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x5dfef9ce [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2ac9e111 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x7dd83671 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2b12185e [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x5eed1493 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x3f209f59 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x6dc7d0d6 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0xb002152 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x681150a3 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x154a9c4b [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x931c2cd [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x6e92fe3 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x78ba4921 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x193ed478 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x4b5c5f04 [0208.903] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x22b685c8 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x5679123 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0xfb4cb79 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x7db39d59 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2d17381b [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2780ddec [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x438f4059 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x3fed7978 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2c2daac7 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x27ac0cdf [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x3048fffa [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x2ac9e111 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x34f0406c [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x488dbf71 [0208.904] RtlRandomEx (in: Seed=0xa60fbe8 | out: Seed=0xa60fbe8) returned 0x295eef70 [0208.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6806518 [0208.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x680a120 [0208.915] ReadFile (in: hFile=0x1e18, lpBuffer=0x6806518, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0xa60fbe4, lpOverlapped=0x0 | out: lpBuffer=0x6806518*, lpNumberOfBytesRead=0xa60fbe4*=0xe7, lpOverlapped=0x0) returned 1 [0208.917] SetFilePointerEx (in: hFile=0x1e18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.917] WriteFile (in: hFile=0x1e18, lpBuffer=0x680a120*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0xa60fbe8, lpOverlapped=0x0 | out: lpBuffer=0x680a120*, lpNumberOfBytesWritten=0xa60fbe8*=0xe7, lpOverlapped=0x0) returned 1 [0215.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0215.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0215.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x680a120) returned 1 [0215.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6806518) returned 1 [0215.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85d60) returned 1 [0215.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6823248) returned 1 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5db0 [0215.387] SetFilePointerEx (in: hFile=0x1e18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.387] WriteFile (in: hFile=0x1e18, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa60fc70, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0xa60fc70*=0x10c, lpOverlapped=0x0) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42ab0) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42dd0) returned 1 [0216.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eabf0) returned 1 [0216.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab00) returned 1 [0216.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab28) returned 1 [0216.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3d41170 [0216.568] wcscpy (in: _Dest=0x3d41170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" [0216.568] wcscat (in: _Dest=0x3d41170, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.ac3a86" [0216.568] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0xa60fbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6777ca8 [0223.740] FlushFileBuffers (hFile=0x1e18) returned 1 [0223.756] CloseHandle (hObject=0x1e18) returned 1 [0224.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678af98 [0224.595] wcscpy (in: _Dest=0x678af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0224.595] wcscat (in: _Dest=0x678af98, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\AC3A86-Readme.txt" [0224.595] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0224.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.148] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa60fc04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa60fc04*=0x8b9, lpOverlapped=0x0) returned 1 [0225.150] CloseHandle (hObject=0x1038) returned 1 [0225.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678af98) returned 1 [0225.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778f58) returned 1 Thread: id = 7255 os_tid = 0x1f20 [0200.402] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json")) returned 0x2020 [0200.403] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0206.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e28 [0208.925] GetFileSizeEx (in: hFile=0x1e28, lpFileSize=0x5bbfd94 | out: lpFileSize=0x5bbfd94*=270) returned 1 [0208.925] SetFilePointerEx (in: hFile=0x1e28, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.925] ReadFile (in: hFile=0x1e28, lpBuffer=0x5bbfd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5bbfd80, lpOverlapped=0x0 | out: lpBuffer=0x5bbfd70*, lpNumberOfBytesRead=0x5bbfd80*=0x4, lpOverlapped=0x0) returned 1 [0208.927] SetFilePointerEx (in: hFile=0x1e28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eab78 [0208.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaab0 [0208.928] NtQuerySystemTime (in: CurrentTime=0x5bbfd08 | out: CurrentTime=0x5bbfd08*=132482711173788000) returned 0x0 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x73310b99 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x7d75602e [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x4a12b2c3 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x616bf48b [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x7ec4123f [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x41718cfc [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0xf2a97af [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x22fa8f87 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x38f06526 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x5713b455 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x26dd75b7 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x21bb08cd [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x6ffa78b0 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x299d0072 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x7b234f8e [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x60a30dd0 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x7aa19ba9 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x1d3ff644 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x1c63fcde [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x1a55f405 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x260876eb [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x8813b72 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x688dc07d [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x24be464d [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x741bce3e [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x5489c4fc [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x3f209f59 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0xa091727 [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x2d18d9dd [0208.928] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x1d2bdf86 [0208.929] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0x27c183cd [0208.929] RtlRandomEx (in: Seed=0x5bbfd00 | out: Seed=0x5bbfd00) returned 0xf83824 [0210.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0210.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13047870 [0210.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1304b478 [0210.688] ReadFile (in: hFile=0x1e28, lpBuffer=0x13047870, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x5bbfcfc, lpOverlapped=0x0 | out: lpBuffer=0x13047870*, lpNumberOfBytesRead=0x5bbfcfc*=0x10e, lpOverlapped=0x0) returned 1 [0210.688] SetFilePointerEx (in: hFile=0x1e28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.688] WriteFile (in: hFile=0x1e28, lpBuffer=0x1304b478*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x5bbfd00, lpOverlapped=0x0 | out: lpBuffer=0x1304b478*, lpNumberOfBytesWritten=0x5bbfd00*=0x10e, lpOverlapped=0x0) returned 1 [0215.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed170 [0215.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed198 [0215.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed198) returned 1 [0215.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1304b478) returned 1 [0215.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13047870) returned 1 [0215.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d508) returned 1 [0215.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b200) returned 1 [0215.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5a58 [0215.653] SetFilePointerEx (in: hFile=0x1e28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.654] WriteFile (in: hFile=0x1e28, lpBuffer=0x675da08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5bbfd88, lpOverlapped=0x0 | out: lpBuffer=0x675da08*, lpNumberOfBytesWritten=0x5bbfd88*=0x10c, lpOverlapped=0x0) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675da08) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a88) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed198) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a58) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed170) returned 1 [0216.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eab78) returned 1 [0216.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca1e8) returned 1 [0216.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0216.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b0d0 [0216.511] wcscpy (in: _Dest=0x678b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" [0216.511] wcscat (in: _Dest=0x678b0d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.ac3a86" [0216.511] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0x5bbfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x6778310 [0216.917] FlushFileBuffers (hFile=0x1e28) returned 1 [0216.928] CloseHandle (hObject=0x1e28) returned 1 [0223.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0223.945] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0223.945] wcscat (in: _Dest=0x3d40b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\AC3A86-Readme.txt" [0223.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0223.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.433] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5bbfd1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5bbfd1c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.435] CloseHandle (hObject=0x1038) returned 1 [0225.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0225.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779080) returned 1 Thread: id = 7256 os_tid = 0x1f24 [0200.403] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json")) returned 0x2020 [0200.404] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0206.916] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x116c [0210.693] GetFileSizeEx (in: hFile=0x116c, lpFileSize=0xa3afc84 | out: lpFileSize=0xa3afc84*=263) returned 1 [0210.693] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.693] ReadFile (in: hFile=0x116c, lpBuffer=0xa3afc60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa3afc70, lpOverlapped=0x0 | out: lpBuffer=0xa3afc60*, lpNumberOfBytesRead=0xa3afc70*=0x4, lpOverlapped=0x0) returned 1 [0210.695] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0210.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca30 [0210.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0210.695] NtQuerySystemTime (in: CurrentTime=0xa3afbf8 | out: CurrentTime=0xa3afbf8*=132482711191572000) returned 0x0 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x50ead3d4 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x2d6c9bf0 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x4aaf6e03 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x2ab494ad [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x3faa4383 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x4e34a59a [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x545e0dd7 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x3def6499 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x511dfa3 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x2e564182 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x104008a4 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x69341d18 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x41e39cc6 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x461928e6 [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x6e8c0d3b [0210.695] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x1ce75438 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x1e7a1839 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x1ce75438 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x37d7c7c5 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x39fda7fe [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x2754ca61 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x5367a338 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x12f5f7ba [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x59f07cde [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x6a9f0e54 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x584c71df [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x1ade0029 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x2ec8543f [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x1ea66b70 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x64c9fdbf [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x12d3f3e2 [0210.696] RtlRandomEx (in: Seed=0xa3afbf0 | out: Seed=0xa3afbf0) returned 0x6508a206 [0210.706] ReadFile (in: hFile=0x116c, lpBuffer=0x67fed08, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xa3afbec, lpOverlapped=0x0 | out: lpBuffer=0x67fed08*, lpNumberOfBytesRead=0xa3afbec*=0x107, lpOverlapped=0x0) returned 1 [0210.706] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.706] WriteFile (in: hFile=0x116c, lpBuffer=0x6802910*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xa3afbf0, lpOverlapped=0x0 | out: lpBuffer=0x6802910*, lpNumberOfBytesWritten=0xa3afbf0*=0x107, lpOverlapped=0x0) returned 1 [0215.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed1c0 [0215.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed1e8 [0215.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed1e8) returned 1 [0215.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6802910) returned 1 [0215.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67fed08) returned 1 [0215.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d580) returned 1 [0215.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d5d00) returned 1 [0215.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5ab8 [0215.655] SetFilePointerEx (in: hFile=0x116c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.655] WriteFile (in: hFile=0x116c, lpBuffer=0x675db20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa3afc78, lpOverlapped=0x0 | out: lpBuffer=0x675db20*, lpNumberOfBytesWritten=0xa3afc78*=0x10c, lpOverlapped=0x0) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675db20) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ae8) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed1e8) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ab8) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed1c0) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca30) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c710) returned 1 [0216.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6f8) returned 1 [0216.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b208 [0216.513] wcscpy (in: _Dest=0x678b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" [0216.513] wcscat (in: _Dest=0x678b208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.ac3a86" [0216.513] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xa3afbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x67781c8 [0216.920] FlushFileBuffers (hFile=0x116c) returned 1 [0216.930] CloseHandle (hObject=0x116c) returned 1 [0223.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40540 [0223.935] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0223.935] wcscat (in: _Dest=0x3d40540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\AC3A86-Readme.txt" [0223.935] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0223.936] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.428] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa3afc0c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa3afc0c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.430] CloseHandle (hObject=0x1038) returned 1 [0225.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40540) returned 1 [0225.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67791a8) returned 1 Thread: id = 7257 os_tid = 0x127c [0200.404] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0200.404] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0206.917] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x230c [0210.751] GetFileSizeEx (in: hFile=0x230c, lpFileSize=0x5e2ff44 | out: lpFileSize=0x5e2ff44*=218) returned 1 [0210.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0210.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ccb0 [0210.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c490 [0210.751] NtQuerySystemTime (in: CurrentTime=0x5e2feb8 | out: CurrentTime=0x5e2feb8*=132482711192196000) returned 0x0 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x7c6c2db5 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x798cad6a [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x40c02317 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x66e0488d [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x53548d60 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0xc8c2f5c [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x6c2a2fdf [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x4e706e3 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x798cad6a [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x1ea7a1 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x30b727c5 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x4064c8f8 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x3d77ee9e [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x4ca184de [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x34890716 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x5a804d58 [0210.751] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x4f7d1ad0 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x3921538b [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x33dbd774 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x35ea134f [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x1b976ffe [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x1e24ab4a [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x92ad23c [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x6ad9c736 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x7db02aa0 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x65649b49 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x240e0ef8 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0xe6bc524 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x77321b15 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0xa61e841 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x34944e18 [0210.752] RtlRandomEx (in: Seed=0x5e2feb0 | out: Seed=0x5e2feb0) returned 0x14d754b [0210.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0210.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67efce8 [0210.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x67f38f0 [0210.762] ReadFile (in: hFile=0x230c, lpBuffer=0x67efce8, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x5e2feac, lpOverlapped=0x0 | out: lpBuffer=0x67efce8*, lpNumberOfBytesRead=0x5e2feac*=0xda, lpOverlapped=0x0) returned 1 [0210.765] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.765] WriteFile (in: hFile=0x230c, lpBuffer=0x67f38f0*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x5e2feb0, lpOverlapped=0x0 | out: lpBuffer=0x67f38f0*, lpNumberOfBytesWritten=0x5e2feb0*=0xda, lpOverlapped=0x0) returned 1 [0215.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec928 [0215.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec8b0 [0215.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0215.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67f38f0) returned 1 [0215.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67efce8) returned 1 [0215.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a85dd8) returned 1 [0215.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a4c8) returned 1 [0215.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e59f8 [0215.651] SetFilePointerEx (in: hFile=0x230c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.651] WriteFile (in: hFile=0x230c, lpBuffer=0x675d7d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5e2ff38, lpOverlapped=0x0 | out: lpBuffer=0x675d7d8*, lpNumberOfBytesWritten=0x5e2ff38*=0x10c, lpOverlapped=0x0) returned 1 [0216.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d7d8) returned 1 [0216.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5a28) returned 1 [0216.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0216.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e59f8) returned 1 [0216.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec928) returned 1 [0216.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ccb0) returned 1 [0216.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b540) returned 1 [0216.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c5d0) returned 1 [0216.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x678c6c0 [0216.503] wcscpy (in: _Dest=0x678c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" [0216.503] wcscat (in: _Dest=0x678c6c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.ac3a86" [0216.503] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0x5e2feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce060 [0216.914] FlushFileBuffers (hFile=0x230c) returned 1 [0216.926] CloseHandle (hObject=0x230c) returned 1 [0225.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40b58 [0225.476] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0225.476] wcscat (in: _Dest=0x3d40b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0225.476] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0225.476] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564 [0225.477] WriteFile (in: hFile=0x564, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5e2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5e2fecc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.479] CloseHandle (hObject=0x564) returned 1 [0225.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0225.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67792d0) returned 1 Thread: id = 7258 os_tid = 0x1f28 [0200.405] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0200.405] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0206.917] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc8 [0206.917] GetFileSizeEx (in: hFile=0x1cc8, lpFileSize=0xca5fbcc | out: lpFileSize=0xca5fbcc*=224) returned 1 [0206.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0206.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bef0 [0206.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c198 [0206.918] NtQuerySystemTime (in: CurrentTime=0xca5fb40 | out: CurrentTime=0xca5fb40*=132482711153976000) returned 0x0 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x3d8a4e1c [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x6022fba5 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x52384fc [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x771ef437 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x24473b [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x7b8f055 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x2d298f7c [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x1a288e23 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x29029f8d [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x3a829c03 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0xa75753a [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x6e5d1c48 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x53991acc [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x6c709cf1 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x3ca8617e [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x8570a37 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x40f23b13 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x533ff2c8 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x3f46f76e [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x7fa44c8d [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x4d53f790 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x6fb71470 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x77e15013 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x4d615f9d [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x24b3e563 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x7b1771dd [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x389e4204 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x4904edaf [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x5da7496b [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x5313e905 [0206.918] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x49ac20e7 [0206.919] RtlRandomEx (in: Seed=0xca5fb38 | out: Seed=0xca5fb38) returned 0x68a468b0 [0206.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0206.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13040060 [0206.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13043c68 [0206.926] ReadFile (in: hFile=0x1cc8, lpBuffer=0x13040060, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xca5fb34, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0xca5fb34*=0xe0, lpOverlapped=0x0) returned 1 [0208.556] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.556] WriteFile (in: hFile=0x1cc8, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xca5fb38, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0xca5fb38*=0xe0, lpOverlapped=0x0) returned 1 [0215.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d430c8 [0215.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43438 [0215.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0215.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0215.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13040060) returned 1 [0215.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cf68) returned 1 [0215.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e330f0) returned 1 [0215.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5420 [0215.389] SetFilePointerEx (in: hFile=0x1cc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.389] WriteFile (in: hFile=0x1cc8, lpBuffer=0x67523e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca5fbc0, lpOverlapped=0x0 | out: lpBuffer=0x67523e0*, lpNumberOfBytesWritten=0xca5fbc0*=0x10c, lpOverlapped=0x0) returned 1 [0216.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67523e0) returned 1 [0216.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0216.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43438) returned 1 [0216.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5420) returned 1 [0216.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d430c8) returned 1 [0216.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bef0) returned 1 [0216.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb58) returned 1 [0216.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc20) returned 1 [0216.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3d41da0 [0216.574] wcscpy (in: _Dest=0x3d41da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" [0216.574] wcscat (in: _Dest=0x3d41da0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.ac3a86" [0216.574] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0xca5fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce870 [0223.731] FlushFileBuffers (hFile=0x1cc8) returned 1 [0223.742] CloseHandle (hObject=0x1cc8) returned 1 [0224.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x12ea0678 [0224.486] wcscpy (in: _Dest=0x12ea0678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0224.486] wcscat (in: _Dest=0x12ea0678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0224.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0224.487] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0224.989] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xca5fb54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xca5fb54*=0x8b9, lpOverlapped=0x0) returned 1 [0224.991] CloseHandle (hObject=0xeb8) returned 1 [0224.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0678) returned 1 [0224.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67793f8) returned 1 Thread: id = 7259 os_tid = 0x131c [0200.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk")) returned 0x20 [0200.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0200.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.407] GetLastError () returned 0x5 [0200.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0200.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 7260 os_tid = 0xc30 [0200.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h")) returned 0x20 [0200.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0200.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.408] GetLastError () returned 0x5 [0200.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0200.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 7261 os_tid = 0x1324 [0200.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini")) returned 0x20 [0200.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0200.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.410] GetLastError () returned 0x5 [0200.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0200.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 7262 os_tid = 0x1f2c [0200.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll")) returned 0x20 [0200.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0200.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.412] GetLastError () returned 0x5 [0200.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0200.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 7263 os_tid = 0x1f30 [0200.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm")) returned 0x20 [0200.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0200.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.414] GetLastError () returned 0x5 [0200.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0200.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 7264 os_tid = 0x1f34 [0200.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css")) returned 0x20 [0212.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0212.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.773] GetLastError () returned 0x5 [0212.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0212.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 7265 os_tid = 0x1334 [0200.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css")) returned 0x20 [0212.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0218.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.077] GetLastError () returned 0x5 [0223.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0223.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f9f0) returned 1 Thread: id = 7266 os_tid = 0x1340 [0200.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl")) returned 0x20 [0212.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0217.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.075] GetLastError () returned 0x5 [0223.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0223.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0f60) returned 1 Thread: id = 7267 os_tid = 0x1348 [0200.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd")) returned 0x20 [0212.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0212.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.775] GetLastError () returned 0x5 [0212.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0212.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 7268 os_tid = 0x134c [0200.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs")) returned 0x20 [0212.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.880] GetLastError () returned 0x5 [0212.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0212.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db508) returned 1 Thread: id = 7269 os_tid = 0x1358 [0200.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc")) returned 0x20 [0212.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.879] GetLastError () returned 0x5 [0212.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 7270 os_tid = 0x1058 [0200.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt")) returned 0x20 [0212.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.877] GetLastError () returned 0x5 [0212.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 7271 os_tid = 0x1464 [0200.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk")) returned 0x20 [0212.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.875] GetLastError () returned 0x5 [0212.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 7272 os_tid = 0x1470 [0200.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk")) returned 0x20 [0212.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.882] GetLastError () returned 0x5 [0212.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 7273 os_tid = 0xb6c [0200.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs")) returned 0x20 [0212.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0212.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.957] GetLastError () returned 0x5 [0212.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0212.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 7274 os_tid = 0xdb4 [0200.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc")) returned 0x20 [0212.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.885] GetLastError () returned 0x5 [0212.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc5e8) returned 1 Thread: id = 7275 os_tid = 0x154 [0200.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt")) returned 0x20 [0212.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.883] GetLastError () returned 0x5 [0212.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db868) returned 1 Thread: id = 7276 os_tid = 0x444 [0200.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk")) returned 0x20 [0212.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.874] GetLastError () returned 0x5 [0212.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dce58) returned 1 Thread: id = 7277 os_tid = 0xe3c [0200.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk")) returned 0x20 [0212.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.809] GetLastError () returned 0x5 [0212.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc048) returned 1 Thread: id = 7278 os_tid = 0xf04 [0200.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll")) returned 0x20 [0212.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.807] GetLastError () returned 0x5 [0212.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc168) returned 1 Thread: id = 7279 os_tid = 0x520 [0200.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll")) returned 0x20 [0212.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.805] GetLastError () returned 0x5 [0212.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db628) returned 1 Thread: id = 7280 os_tid = 0xf28 [0200.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css")) returned 0x20 [0212.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0212.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.958] GetLastError () returned 0x5 [0212.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0212.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10f70) returned 1 Thread: id = 7281 os_tid = 0x4bc [0200.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl")) returned 0x20 [0212.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0212.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.960] GetLastError () returned 0x5 [0212.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e106f0) returned 1 Thread: id = 7282 os_tid = 0x5d8 [0200.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss")) returned 0x20 [0212.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0212.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.961] GetLastError () returned 0x5 [0212.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0212.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fbf0) returned 1 Thread: id = 7283 os_tid = 0x5d4 [0200.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc")) returned 0x20 [0212.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0212.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.963] GetLastError () returned 0x5 [0212.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0212.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 7284 os_tid = 0x1688 [0200.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt")) returned 0x20 [0212.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0212.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.964] GetLastError () returned 0x5 [0212.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 7285 os_tid = 0x1690 [0200.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls")) returned 0x20 [0206.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0207.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.864] GetLastError () returned 0x5 [0215.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0222.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 7286 os_tid = 0x1694 [0200.423] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0201.869] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0213.139] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x246c [0213.139] GetFileSizeEx (in: hFile=0x246c, lpFileSize=0xdcefaec | out: lpFileSize=0xdcefaec*=669) returned 1 [0213.139] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x299, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.139] ReadFile (in: hFile=0x246c, lpBuffer=0xdcefac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdcefad8, lpOverlapped=0x0 | out: lpBuffer=0xdcefac8*, lpNumberOfBytesRead=0xdcefad8*=0x4, lpOverlapped=0x0) returned 1 [0213.142] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaa88 [0213.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea9c0 [0213.142] NtQuerySystemTime (in: CurrentTime=0xdcefa60 | out: CurrentTime=0xdcefa60*=132482711198592000) returned 0x0 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x663e850f [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x4238d223 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x2b5a4ca5 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x1e743fba [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x618c7eea [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x49e3b5f1 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x74ac1e07 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x55ea83b4 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x3c658111 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x3fe84326 [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x33188c7a [0213.142] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x6b20a362 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x4b1b2c59 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x3f3cbd03 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x3419772b [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x12486aa2 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x56fa42c9 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x508f6a72 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x179b6204 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x1080519c [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x37f85224 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x53988e5a [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0xc37715c [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x4dfd34c7 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x53bd967b [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x22e61bf8 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x36e8805d [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x118e32cf [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x34b4d877 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x258f2843 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x5d490ef5 [0213.143] RtlRandomEx (in: Seed=0xdcefa58 | out: Seed=0xdcefa58) returned 0x58013944 [0213.151] ReadFile (in: hFile=0x246c, lpBuffer=0x13007830, nNumberOfBytesToRead=0x29d, lpNumberOfBytesRead=0xdcefa54, lpOverlapped=0x0 | out: lpBuffer=0x13007830*, lpNumberOfBytesRead=0xdcefa54*=0x29d, lpOverlapped=0x0) returned 1 [0213.151] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.151] WriteFile (in: hFile=0x246c, lpBuffer=0x1300b438*, nNumberOfBytesToWrite=0x29d, lpNumberOfBytesWritten=0xdcefa58, lpOverlapped=0x0 | out: lpBuffer=0x1300b438*, lpNumberOfBytesWritten=0xdcefa58*=0x29d, lpOverlapped=0x0) returned 1 [0215.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed3a0 [0215.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed3c8 [0215.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed3c8) returned 1 [0215.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1300b438) returned 1 [0215.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13007830) returned 1 [0215.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0330) returned 1 [0215.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b2d8) returned 1 [0215.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5cf8 [0215.906] SetFilePointerEx (in: hFile=0x246c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.906] WriteFile (in: hFile=0x246c, lpBuffer=0x675e1b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdcefae0, lpOverlapped=0x0 | out: lpBuffer=0x675e1b0*, lpNumberOfBytesWritten=0xdcefae0*=0x10c, lpOverlapped=0x0) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e1b0) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5d28) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed3c8) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5cf8) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed3a0) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaa88) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea9e8) returned 1 [0216.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea970) returned 1 [0216.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678ad28 [0216.552] wcscpy (in: _Dest=0x678ad28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" [0216.552] wcscat (in: _Dest=0x678ad28, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.ac3a86" [0216.552] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0xdcefa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce9c8 [0223.756] FlushFileBuffers (hFile=0x246c) returned 1 [0223.763] CloseHandle (hObject=0x246c) returned 1 [0224.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea12a8 [0224.629] wcscpy (in: _Dest=0x12ea12a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0224.629] wcscat (in: _Dest=0x12ea12a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\AC3A86-Readme.txt" [0224.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0224.629] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.157] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdcefa74, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdcefa74*=0x8b9, lpOverlapped=0x0) returned 1 [0225.159] CloseHandle (hObject=0x1038) returned 1 [0225.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea12a8) returned 1 [0225.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fc10) returned 1 Thread: id = 7287 os_tid = 0x1698 [0200.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818840 [0200.424] wcscpy (in: _Dest=0x6818840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0200.424] wcscat (in: _Dest=0x6818840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0200.424] wcscat (in: _Dest=0x6818840, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*" [0200.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6bb0 [0200.424] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa00 [0200.424] wcscmp (_String1=".", _String2=".") returned 0 [0200.424] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.424] wcscmp (_String1="..", _String2=".") returned 1 [0200.424] wcscmp (_String1="..", _String2="..") returned 0 [0200.424] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.424] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.424] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6764e30 [0200.424] wcscpy (in: _Dest=0x6764e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0200.424] wcscat (in: _Dest=0x6764e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0200.424] wcscat (in: _Dest=0x6764e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" [0201.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6764e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0201.819] FindNextFileW (in: hFindFile=0x3f1fa00, lpFindFileData=0x66c6bb0 | out: lpFindFileData=0x66c6bb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.819] FindClose (in: hFindFile=0x3f1fa00 | out: hFindFile=0x3f1fa00) returned 1 [0201.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6bb0) returned 1 [0201.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818840) returned 1 [0201.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6754588) returned 1 Thread: id = 7288 os_tid = 0x11cc [0200.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818108 [0200.425] wcscpy (in: _Dest=0x6818108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0200.425] wcscat (in: _Dest=0x6818108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0200.425] wcscat (in: _Dest=0x6818108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*" [0200.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4798 [0200.425] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ef40 [0201.175] wcscmp (_String1=".", _String2=".") returned 0 [0201.175] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.175] wcscmp (_String1="..", _String2=".") returned 1 [0201.175] wcscmp (_String1="..", _String2="..") returned 0 [0201.175] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.175] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.175] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a7a0 [0201.175] wcscpy (in: _Dest=0x676a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0201.175] wcscat (in: _Dest=0x676a7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0201.175] wcscat (in: _Dest=0x676a7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" [0201.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0201.443] FindNextFileW (in: hFindFile=0x3f1ef40, lpFindFileData=0x66c4798 | out: lpFindFileData=0x66c4798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.443] FindClose (in: hFindFile=0x3f1ef40 | out: hFindFile=0x3f1ef40) returned 1 [0201.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4798) returned 1 [0201.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818108) returned 1 [0201.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448a0) returned 1 Thread: id = 7289 os_tid = 0x1f50 [0200.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817ce8 [0200.426] wcscpy (in: _Dest=0x6817ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0200.426] wcscat (in: _Dest=0x6817ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0200.426] wcscat (in: _Dest=0x6817ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*" [0200.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6948 [0200.426] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa40 [0201.176] wcscmp (_String1=".", _String2=".") returned 0 [0201.176] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.176] wcscmp (_String1="..", _String2=".") returned 1 [0201.176] wcscmp (_String1="..", _String2="..") returned 0 [0201.176] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.176] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.176] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a678 [0201.176] wcscpy (in: _Dest=0x676a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0201.176] wcscat (in: _Dest=0x676a678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0201.176] wcscat (in: _Dest=0x676a678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" [0201.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c4 [0201.337] FindNextFileW (in: hFindFile=0x3f1fa40, lpFindFileData=0x66c6948 | out: lpFindFileData=0x66c6948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.337] FindClose (in: hFindFile=0x3f1fa40 | out: hFindFile=0x3f1fa40) returned 1 [0201.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6948) returned 1 [0201.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817ce8) returned 1 [0201.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44270) returned 1 Thread: id = 7290 os_tid = 0x11d0 [0200.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68197b8 [0200.427] wcscpy (in: _Dest=0x68197b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0200.427] wcscat (in: _Dest=0x68197b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0200.427] wcscat (in: _Dest=0x68197b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*" [0200.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6478 [0200.427] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f940 [0201.176] wcscmp (_String1=".", _String2=".") returned 0 [0201.177] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.177] wcscmp (_String1="..", _String2=".") returned 1 [0201.177] wcscmp (_String1="..", _String2="..") returned 0 [0201.177] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.177] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.177] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a550 [0201.177] wcscpy (in: _Dest=0x676a550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0201.177] wcscat (in: _Dest=0x676a550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0201.177] wcscat (in: _Dest=0x676a550, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" [0201.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0201.340] FindNextFileW (in: hFindFile=0x3f1f940, lpFindFileData=0x66c6478 | out: lpFindFileData=0x66c6478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.340] FindClose (in: hFindFile=0x3f1f940 | out: hFindFile=0x3f1f940) returned 1 [0201.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6478) returned 1 [0201.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68197b8) returned 1 [0201.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a28) returned 1 Thread: id = 7291 os_tid = 0x11f4 [0200.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819188 [0200.428] wcscpy (in: _Dest=0x6819188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0200.428] wcscat (in: _Dest=0x6819188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0200.428] wcscat (in: _Dest=0x6819188, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*" [0200.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c6210 [0200.428] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f680 [0201.177] wcscmp (_String1=".", _String2=".") returned 0 [0201.178] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.178] wcscmp (_String1="..", _String2=".") returned 1 [0201.178] wcscmp (_String1="..", _String2="..") returned 0 [0201.178] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.178] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.178] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a428 [0201.178] wcscpy (in: _Dest=0x676a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0201.178] wcscat (in: _Dest=0x676a428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0201.178] wcscat (in: _Dest=0x676a428, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" [0201.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0201.343] FindNextFileW (in: hFindFile=0x3f1f680, lpFindFileData=0x66c6210 | out: lpFindFileData=0x66c6210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.343] FindClose (in: hFindFile=0x3f1f680 | out: hFindFile=0x3f1f680) returned 1 [0201.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c6210) returned 1 [0201.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819188) returned 1 [0201.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45818) returned 1 Thread: id = 7292 os_tid = 0x1f54 [0200.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819290 [0200.432] wcscpy (in: _Dest=0x6819290, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0200.432] wcscat (in: _Dest=0x6819290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0200.432] wcscat (in: _Dest=0x6819290, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*" [0200.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5fa8 [0200.432] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fac0 [0201.178] wcscmp (_String1=".", _String2=".") returned 0 [0201.178] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.178] wcscmp (_String1="..", _String2=".") returned 1 [0201.178] wcscmp (_String1="..", _String2="..") returned 0 [0201.179] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.179] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.179] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a300 [0201.179] wcscpy (in: _Dest=0x676a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0201.179] wcscat (in: _Dest=0x676a300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0201.179] wcscat (in: _Dest=0x676a300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" [0201.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0201.346] FindNextFileW (in: hFindFile=0x3f1fac0, lpFindFileData=0x66c5fa8 | out: lpFindFileData=0x66c5fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.346] FindClose (in: hFindFile=0x3f1fac0 | out: hFindFile=0x3f1fac0) returned 1 [0201.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5fa8) returned 1 [0201.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819290) returned 1 [0201.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44fd8) returned 1 Thread: id = 7293 os_tid = 0x1f58 [0200.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819398 [0200.433] wcscpy (in: _Dest=0x6819398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0200.433] wcscat (in: _Dest=0x6819398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0200.433] wcscat (in: _Dest=0x6819398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*" [0200.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5d40 [0200.433] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f580 [0201.179] wcscmp (_String1=".", _String2=".") returned 0 [0201.179] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.179] wcscmp (_String1="..", _String2=".") returned 1 [0201.179] wcscmp (_String1="..", _String2="..") returned 0 [0201.179] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.179] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.179] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6768d08 [0201.180] wcscpy (in: _Dest=0x6768d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0201.180] wcscat (in: _Dest=0x6768d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0201.180] wcscat (in: _Dest=0x6768d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" [0201.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0201.348] FindNextFileW (in: hFindFile=0x3f1f580, lpFindFileData=0x66c5d40 | out: lpFindFileData=0x66c5d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.348] FindClose (in: hFindFile=0x3f1f580 | out: hFindFile=0x3f1f580) returned 1 [0201.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5d40) returned 1 [0201.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819398) returned 1 [0201.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ed0) returned 1 Thread: id = 7294 os_tid = 0x1f5c [0200.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6751c38 [0200.434] wcscpy (in: _Dest=0x6751c38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0200.434] wcscat (in: _Dest=0x6751c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0200.434] wcscat (in: _Dest=0x6751c38, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*" [0200.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5ad8 [0200.434] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f2c0 [0201.180] wcscmp (_String1=".", _String2=".") returned 0 [0201.180] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.180] wcscmp (_String1="..", _String2=".") returned 1 [0201.180] wcscmp (_String1="..", _String2="..") returned 0 [0201.180] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.180] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.180] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x67699c0 [0201.180] wcscpy (in: _Dest=0x67699c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0201.180] wcscat (in: _Dest=0x67699c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0201.181] wcscat (in: _Dest=0x67699c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" [0201.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67699c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0201.351] FindNextFileW (in: hFindFile=0x3f1f2c0, lpFindFileData=0x66c5ad8 | out: lpFindFileData=0x66c5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.351] FindClose (in: hFindFile=0x3f1f2c0 | out: hFindFile=0x3f1f2c0) returned 1 [0201.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5ad8) returned 1 [0201.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0201.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44dc8) returned 1 Thread: id = 7295 os_tid = 0x1f68 [0200.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6750bd0 [0200.435] wcscpy (in: _Dest=0x6750bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0200.435] wcscat (in: _Dest=0x6750bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0200.435] wcscat (in: _Dest=0x6750bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*" [0200.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5870 [0200.435] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fcc0 [0201.181] wcscmp (_String1=".", _String2=".") returned 0 [0201.181] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.181] wcscmp (_String1="..", _String2=".") returned 1 [0201.181] wcscmp (_String1="..", _String2="..") returned 0 [0201.181] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.181] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.181] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6769770 [0201.181] wcscpy (in: _Dest=0x6769770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0201.181] wcscat (in: _Dest=0x6769770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0201.181] wcscat (in: _Dest=0x6769770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" [0201.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0201.353] FindNextFileW (in: hFindFile=0x3f1fcc0, lpFindFileData=0x66c5870 | out: lpFindFileData=0x66c5870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.353] FindClose (in: hFindFile=0x3f1fcc0 | out: hFindFile=0x3f1fcc0) returned 1 [0201.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5870) returned 1 [0201.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0201.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 7296 os_tid = 0x1f6c [0200.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68194a0 [0200.436] wcscpy (in: _Dest=0x68194a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0200.436] wcscat (in: _Dest=0x68194a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0200.436] wcscat (in: _Dest=0x68194a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*" [0200.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c5608 [0200.436] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f980 [0201.182] wcscmp (_String1=".", _String2=".") returned 0 [0201.182] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.182] wcscmp (_String1="..", _String2=".") returned 1 [0201.182] wcscmp (_String1="..", _String2="..") returned 0 [0201.182] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.182] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.182] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6769648 [0201.182] wcscpy (in: _Dest=0x6769648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0201.182] wcscat (in: _Dest=0x6769648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0201.182] wcscat (in: _Dest=0x6769648, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" [0201.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0201.356] FindNextFileW (in: hFindFile=0x3f1f980, lpFindFileData=0x66c5608 | out: lpFindFileData=0x66c5608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.356] FindClose (in: hFindFile=0x3f1f980 | out: hFindFile=0x3f1f980) returned 1 [0201.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c5608) returned 1 [0201.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68194a0) returned 1 [0201.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44bb8) returned 1 Thread: id = 7297 os_tid = 0x1f70 [0200.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x6750ab8 [0200.437] wcscpy (in: _Dest=0x6750ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0200.437] wcscat (in: _Dest=0x6750ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0200.437] wcscat (in: _Dest=0x6750ab8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*" [0200.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c4060 [0200.437] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f000 [0201.183] wcscmp (_String1=".", _String2=".") returned 0 [0201.183] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.183] wcscmp (_String1="..", _String2=".") returned 1 [0201.183] wcscmp (_String1="..", _String2="..") returned 0 [0201.183] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.183] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.183] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x67693f8 [0201.183] wcscpy (in: _Dest=0x67693f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0201.183] wcscat (in: _Dest=0x67693f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0201.183] wcscat (in: _Dest=0x67693f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" [0201.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67693f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0201.358] FindNextFileW (in: hFindFile=0x3f1f000, lpFindFileData=0x66c4060 | out: lpFindFileData=0x66c4060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.358] FindClose (in: hFindFile=0x3f1f000 | out: hFindFile=0x3f1f000) returned 1 [0201.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c4060) returned 1 [0201.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0201.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ce8) returned 1 Thread: id = 7298 os_tid = 0x1f74 [0200.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68195a8 [0200.438] wcscpy (in: _Dest=0x68195a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0200.438] wcscat (in: _Dest=0x68195a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0200.438] wcscat (in: _Dest=0x68195a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*" [0200.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c42c8 [0200.438] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f380 [0201.183] wcscmp (_String1=".", _String2=".") returned 0 [0201.183] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.184] wcscmp (_String1="..", _String2=".") returned 1 [0201.184] wcscmp (_String1="..", _String2="..") returned 0 [0201.184] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.184] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.184] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6769520 [0201.184] wcscpy (in: _Dest=0x6769520, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0201.184] wcscat (in: _Dest=0x6769520, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0201.184] wcscat (in: _Dest=0x6769520, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" [0201.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0201.361] FindNextFileW (in: hFindFile=0x3f1f380, lpFindFileData=0x66c42c8 | out: lpFindFileData=0x66c42c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.361] FindClose (in: hFindFile=0x3f1f380 | out: hFindFile=0x3f1f380) returned 1 [0201.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c42c8) returned 1 [0201.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68195a8) returned 1 [0201.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45608) returned 1 Thread: id = 7299 os_tid = 0x1f78 [0200.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68198c0 [0200.439] wcscpy (in: _Dest=0x68198c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0200.439] wcscat (in: _Dest=0x68198c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0200.439] wcscat (in: _Dest=0x68198c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*" [0200.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c7c88 [0200.439] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f0c0 [0201.184] wcscmp (_String1=".", _String2=".") returned 0 [0201.184] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.184] wcscmp (_String1="..", _String2=".") returned 1 [0201.184] wcscmp (_String1="..", _String2="..") returned 0 [0201.184] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.184] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.185] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67692d0 [0201.185] wcscpy (in: _Dest=0x67692d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0201.185] wcscat (in: _Dest=0x67692d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0201.185] wcscat (in: _Dest=0x67692d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" [0201.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67692d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0201.364] FindNextFileW (in: hFindFile=0x3f1f0c0, lpFindFileData=0x66c7c88 | out: lpFindFileData=0x66c7c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.364] FindClose (in: hFindFile=0x3f1f0c0 | out: hFindFile=0x3f1f0c0) returned 1 [0201.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c7c88) returned 1 [0201.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68198c0) returned 1 [0201.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449a8) returned 1 Thread: id = 7300 os_tid = 0x1f7c [0200.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x68199c8 [0200.440] wcscpy (in: _Dest=0x68199c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0200.440] wcscat (in: _Dest=0x68199c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0200.440] wcscat (in: _Dest=0x68199c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*" [0200.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e33d0 [0200.440] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f1c0 [0201.185] wcscmp (_String1=".", _String2=".") returned 0 [0201.185] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.185] wcscmp (_String1="..", _String2=".") returned 1 [0201.185] wcscmp (_String1="..", _String2="..") returned 0 [0201.185] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.186] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.186] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x67691a8 [0201.186] wcscpy (in: _Dest=0x67691a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0201.186] wcscat (in: _Dest=0x67691a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0201.186] wcscat (in: _Dest=0x67691a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" [0201.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67691a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0201.367] FindNextFileW (in: hFindFile=0x3f1f1c0, lpFindFileData=0x66e33d0 | out: lpFindFileData=0x66e33d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.367] FindClose (in: hFindFile=0x3f1f1c0 | out: hFindFile=0x3f1f1c0) returned 1 [0201.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e33d0) returned 1 [0201.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68199c8) returned 1 [0201.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451e8) returned 1 Thread: id = 7301 os_tid = 0x1f80 [0200.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819ad0 [0200.441] wcscpy (in: _Dest=0x6819ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0200.441] wcscat (in: _Dest=0x6819ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0200.441] wcscat (in: _Dest=0x6819ad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*" [0200.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3168 [0200.441] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f040 [0201.186] wcscmp (_String1=".", _String2=".") returned 0 [0201.186] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.186] wcscmp (_String1="..", _String2=".") returned 1 [0201.186] wcscmp (_String1="..", _String2="..") returned 0 [0201.186] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.186] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.186] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6768be0 [0201.187] wcscpy (in: _Dest=0x6768be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0201.187] wcscat (in: _Dest=0x6768be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0201.187] wcscat (in: _Dest=0x6768be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" [0201.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0201.369] FindNextFileW (in: hFindFile=0x3f1f040, lpFindFileData=0x66e3168 | out: lpFindFileData=0x66e3168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.369] FindClose (in: hFindFile=0x3f1f040 | out: hFindFile=0x3f1f040) returned 1 [0201.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3168) returned 1 [0201.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819ad0) returned 1 [0201.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d453f8) returned 1 Thread: id = 7302 os_tid = 0x1f84 [0200.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818f78 [0200.441] wcscpy (in: _Dest=0x6818f78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0200.442] wcscat (in: _Dest=0x6818f78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0200.442] wcscat (in: _Dest=0x6818f78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*" [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2f00 [0200.442] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fa80 [0201.187] wcscmp (_String1=".", _String2=".") returned 0 [0201.187] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.187] wcscmp (_String1="..", _String2=".") returned 1 [0201.187] wcscmp (_String1="..", _String2="..") returned 0 [0201.187] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.187] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.187] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6768ab8 [0201.187] wcscpy (in: _Dest=0x6768ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0201.187] wcscat (in: _Dest=0x6768ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0201.188] wcscat (in: _Dest=0x6768ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" [0201.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6768ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0201.372] FindNextFileW (in: hFindFile=0x3f1fa80, lpFindFileData=0x66e2f00 | out: lpFindFileData=0x66e2f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.372] FindClose (in: hFindFile=0x3f1fa80 | out: hFindFile=0x3f1fa80) returned 1 [0201.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2f00) returned 1 [0201.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818f78) returned 1 [0201.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 7303 os_tid = 0x1f88 [0200.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6817df0 [0200.443] wcscpy (in: _Dest=0x6817df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0200.443] wcscat (in: _Dest=0x6817df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0200.443] wcscat (in: _Dest=0x6817df0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*" [0200.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4978 [0200.443] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fc00 [0201.188] wcscmp (_String1=".", _String2=".") returned 0 [0201.188] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.188] wcscmp (_String1="..", _String2=".") returned 1 [0201.188] wcscmp (_String1="..", _String2="..") returned 0 [0201.188] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.188] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.188] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x676a8c8 [0201.188] wcscpy (in: _Dest=0x676a8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0201.188] wcscat (in: _Dest=0x676a8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0201.188] wcscat (in: _Dest=0x676a8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" [0201.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x676a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0201.374] FindNextFileW (in: hFindFile=0x3f1fc00, lpFindFileData=0x66e4978 | out: lpFindFileData=0x66e4978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.375] FindClose (in: hFindFile=0x3f1fc00 | out: hFindFile=0x3f1fc00) returned 1 [0201.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4978) returned 1 [0201.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6817df0) returned 1 [0201.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 7304 os_tid = 0x1f8c [0200.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818948 [0200.444] wcscpy (in: _Dest=0x6818948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0200.444] wcscat (in: _Dest=0x6818948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0200.444] wcscat (in: _Dest=0x6818948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*" [0200.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e22f8 [0200.444] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fdc0 [0201.189] wcscmp (_String1=".", _String2=".") returned 0 [0201.189] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.189] wcscmp (_String1="..", _String2=".") returned 1 [0201.189] wcscmp (_String1="..", _String2="..") returned 0 [0201.189] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.189] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.189] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759ae8 [0201.189] wcscpy (in: _Dest=0x6759ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0201.189] wcscat (in: _Dest=0x6759ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0201.189] wcscat (in: _Dest=0x6759ae8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" [0201.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0 [0201.377] FindNextFileW (in: hFindFile=0x3f1fdc0, lpFindFileData=0x66e22f8 | out: lpFindFileData=0x66e22f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.377] FindClose (in: hFindFile=0x3f1fdc0 | out: hFindFile=0x3f1fdc0) returned 1 [0201.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e22f8) returned 1 [0201.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818948) returned 1 [0201.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450e0) returned 1 Thread: id = 7305 os_tid = 0x1f90 [0200.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6819080 [0200.445] wcscpy (in: _Dest=0x6819080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0200.445] wcscat (in: _Dest=0x6819080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0200.445] wcscat (in: _Dest=0x6819080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*" [0200.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2560 [0200.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f9c0 [0201.190] wcscmp (_String1=".", _String2=".") returned 0 [0201.190] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.190] wcscmp (_String1="..", _String2=".") returned 1 [0201.190] wcscmp (_String1="..", _String2="..") returned 0 [0201.190] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.190] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.190] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759898 [0201.190] wcscpy (in: _Dest=0x6759898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0201.190] wcscat (in: _Dest=0x6759898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0201.190] wcscat (in: _Dest=0x6759898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" [0201.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0201.380] FindNextFileW (in: hFindFile=0x3f1f9c0, lpFindFileData=0x66e2560 | out: lpFindFileData=0x66e2560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.380] FindClose (in: hFindFile=0x3f1f9c0 | out: hFindFile=0x3f1f9c0) returned 1 [0201.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2560) returned 1 [0201.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6819080) returned 1 [0201.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45500) returned 1 Thread: id = 7306 os_tid = 0x1f94 [0200.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68196b0 [0200.445] wcscpy (in: _Dest=0x68196b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0200.445] wcscat (in: _Dest=0x68196b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0200.446] wcscat (in: _Dest=0x68196b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*" [0200.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e50b0 [0200.446] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f6c0 [0201.191] wcscmp (_String1=".", _String2=".") returned 0 [0201.191] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.191] wcscmp (_String1="..", _String2=".") returned 1 [0201.191] wcscmp (_String1="..", _String2="..") returned 0 [0201.191] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.191] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.191] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6758d08 [0201.191] wcscpy (in: _Dest=0x6758d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0201.191] wcscat (in: _Dest=0x6758d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0201.191] wcscat (in: _Dest=0x6758d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" [0201.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0201.382] FindNextFileW (in: hFindFile=0x3f1f6c0, lpFindFileData=0x66e50b0 | out: lpFindFileData=0x66e50b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.382] FindClose (in: hFindFile=0x3f1f6c0 | out: hFindFile=0x3f1f6c0) returned 1 [0201.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e50b0) returned 1 [0201.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68196b0) returned 1 [0201.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44798) returned 1 Thread: id = 7307 os_tid = 0x1f98 [0200.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818a50 [0200.446] wcscpy (in: _Dest=0x6818a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0200.446] wcscat (in: _Dest=0x6818a50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0200.446] wcscat (in: _Dest=0x6818a50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*" [0200.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4e48 [0200.447] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1ee80 [0201.191] wcscmp (_String1=".", _String2=".") returned 0 [0201.191] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.192] wcscmp (_String1="..", _String2=".") returned 1 [0201.192] wcscmp (_String1="..", _String2="..") returned 0 [0201.192] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.192] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.192] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a300 [0201.192] wcscpy (in: _Dest=0x675a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0201.192] wcscat (in: _Dest=0x675a300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0201.192] wcscat (in: _Dest=0x675a300, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" [0201.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0201.385] FindNextFileW (in: hFindFile=0x3f1ee80, lpFindFileData=0x66e4e48 | out: lpFindFileData=0x66e4e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.385] FindClose (in: hFindFile=0x3f1ee80 | out: hFindFile=0x3f1ee80) returned 1 [0201.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4e48) returned 1 [0201.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818a50) returned 1 [0201.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 7308 os_tid = 0x1320 [0200.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818b58 [0200.447] wcscpy (in: _Dest=0x6818b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0200.447] wcscat (in: _Dest=0x6818b58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0200.448] wcscat (in: _Dest=0x6818b58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*" [0200.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4710 [0200.448] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f180 [0201.192] wcscmp (_String1=".", _String2=".") returned 0 [0201.192] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.192] wcscmp (_String1="..", _String2=".") returned 1 [0201.192] wcscmp (_String1="..", _String2="..") returned 0 [0201.192] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.193] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.193] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67592d0 [0201.193] wcscpy (in: _Dest=0x67592d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0201.193] wcscat (in: _Dest=0x67592d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0201.193] wcscat (in: _Dest=0x67592d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" [0201.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67592d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584 [0201.387] FindNextFileW (in: hFindFile=0x3f1f180, lpFindFileData=0x66e4710 | out: lpFindFileData=0x66e4710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.388] FindClose (in: hFindFile=0x3f1f180 | out: hFindFile=0x3f1f180) returned 1 [0201.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4710) returned 1 [0201.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818b58) returned 1 [0201.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44588) returned 1 Thread: id = 7309 os_tid = 0x1c24 [0200.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818e70 [0200.449] wcscpy (in: _Dest=0x6818e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0200.449] wcscat (in: _Dest=0x6818e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0200.449] wcscat (in: _Dest=0x6818e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*" [0200.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e44a8 [0200.449] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f740 [0201.193] wcscmp (_String1=".", _String2=".") returned 0 [0201.193] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.193] wcscmp (_String1="..", _String2=".") returned 1 [0201.193] wcscmp (_String1="..", _String2="..") returned 0 [0201.193] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.193] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.193] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6758e30 [0201.194] wcscpy (in: _Dest=0x6758e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0201.194] wcscat (in: _Dest=0x6758e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0201.194] wcscat (in: _Dest=0x6758e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" [0201.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0201.390] FindNextFileW (in: hFindFile=0x3f1f740, lpFindFileData=0x66e44a8 | out: lpFindFileData=0x66e44a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.390] FindClose (in: hFindFile=0x3f1f740 | out: hFindFile=0x3f1f740) returned 1 [0201.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e44a8) returned 1 [0201.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818e70) returned 1 [0201.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44480) returned 1 Thread: id = 7310 os_tid = 0x1c28 [0200.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818000 [0200.450] wcscpy (in: _Dest=0x6818000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0200.450] wcscat (in: _Dest=0x6818000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0200.450] wcscat (in: _Dest=0x6818000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*" [0200.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3fd8 [0200.450] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1eec0 [0201.194] wcscmp (_String1=".", _String2=".") returned 0 [0201.194] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.194] wcscmp (_String1="..", _String2=".") returned 1 [0201.194] wcscmp (_String1="..", _String2="..") returned 0 [0201.194] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.194] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.194] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6758be0 [0201.195] wcscpy (in: _Dest=0x6758be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0201.195] wcscat (in: _Dest=0x6758be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0201.195] wcscat (in: _Dest=0x6758be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" [0201.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0201.392] FindNextFileW (in: hFindFile=0x3f1eec0, lpFindFileData=0x66e3fd8 | out: lpFindFileData=0x66e3fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.392] FindClose (in: hFindFile=0x3f1eec0 | out: hFindFile=0x3f1eec0) returned 1 [0201.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3fd8) returned 1 [0201.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818000) returned 1 [0201.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44378) returned 1 Thread: id = 7311 os_tid = 0x1c2c [0200.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818d68 [0200.454] wcscpy (in: _Dest=0x6818d68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0200.454] wcscat (in: _Dest=0x6818d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0200.454] wcscat (in: _Dest=0x6818d68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*" [0200.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3b08 [0200.454] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f100 [0201.195] wcscmp (_String1=".", _String2=".") returned 0 [0201.195] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.195] wcscmp (_String1="..", _String2=".") returned 1 [0201.195] wcscmp (_String1="..", _String2="..") returned 0 [0201.195] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.195] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.195] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67593f8 [0201.195] wcscpy (in: _Dest=0x67593f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0201.195] wcscat (in: _Dest=0x67593f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0201.195] wcscat (in: _Dest=0x67593f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" [0201.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67593f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0201.395] FindNextFileW (in: hFindFile=0x3f1f100, lpFindFileData=0x66e3b08 | out: lpFindFileData=0x66e3b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.395] FindClose (in: hFindFile=0x3f1f100 | out: hFindFile=0x3f1f100) returned 1 [0201.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3b08) returned 1 [0201.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818d68) returned 1 [0201.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e48) returned 1 Thread: id = 7312 os_tid = 0x1c30 [0200.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818210 [0200.459] wcscpy (in: _Dest=0x6818210, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0200.459] wcscat (in: _Dest=0x6818210, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0200.459] wcscat (in: _Dest=0x6818210, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*" [0200.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3d70 [0200.459] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f8c0 [0201.196] wcscmp (_String1=".", _String2=".") returned 0 [0201.196] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.196] wcscmp (_String1="..", _String2=".") returned 1 [0201.196] wcscmp (_String1="..", _String2="..") returned 0 [0201.196] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.196] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.196] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67591a8 [0201.196] wcscpy (in: _Dest=0x67591a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0201.196] wcscat (in: _Dest=0x67591a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0201.196] wcscat (in: _Dest=0x67591a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" [0201.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67591a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0201.398] FindNextFileW (in: hFindFile=0x3f1f8c0, lpFindFileData=0x66e3d70 | out: lpFindFileData=0x66e3d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.398] FindClose (in: hFindFile=0x3f1f8c0 | out: hFindFile=0x3f1f8c0) returned 1 [0201.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3d70) returned 1 [0201.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818210) returned 1 [0201.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d40) returned 1 Thread: id = 7313 os_tid = 0x1c34 [0200.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818318 [0200.460] wcscpy (in: _Dest=0x6818318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0200.460] wcscat (in: _Dest=0x6818318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0200.460] wcscat (in: _Dest=0x6818318, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*" [0200.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e38a0 [0200.461] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0200.862] wcscmp (_String1=".", _String2=".") returned 0 [0200.862] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.862] wcscmp (_String1="..", _String2=".") returned 1 [0200.862] wcscmp (_String1="..", _String2="..") returned 0 [0200.863] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.863] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.863] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6769d38 [0200.863] wcscpy (in: _Dest=0x6769d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0200.863] wcscat (in: _Dest=0x6769d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0200.863] wcscat (in: _Dest=0x6769d38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" [0201.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0201.265] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x66e38a0 | out: lpFindFileData=0x66e38a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.265] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0201.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e38a0) returned 1 [0201.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818318) returned 1 [0201.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44168) returned 1 Thread: id = 7314 os_tid = 0xe30 [0200.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x6818420 [0200.462] wcscpy (in: _Dest=0x6818420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0200.462] wcscat (in: _Dest=0x6818420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0200.462] wcscat (in: _Dest=0x6818420, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*" [0200.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e2090 [0200.462] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0200.863] wcscmp (_String1=".", _String2=".") returned 0 [0200.863] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.863] wcscmp (_String1="..", _String2=".") returned 1 [0200.863] wcscmp (_String1="..", _String2="..") returned 0 [0200.863] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.864] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.864] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6769e60 [0200.864] wcscpy (in: _Dest=0x6769e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0200.864] wcscat (in: _Dest=0x6769e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0200.864] wcscat (in: _Dest=0x6769e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" [0201.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0201.268] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x66e2090 | out: lpFindFileData=0x66e2090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.268] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0201.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e2090) returned 1 [0201.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6818420) returned 1 [0201.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c38) returned 1 Thread: id = 7315 os_tid = 0x1c38 [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x6752610 [0200.864] wcscpy (in: _Dest=0x6752610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0200.864] wcscat (in: _Dest=0x6752610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0200.864] wcscat (in: _Dest=0x6752610, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*" [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0200.865] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0200.865] wcscmp (_String1=".", _String2=".") returned 0 [0200.865] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.865] wcscmp (_String1="..", _String2=".") returned 1 [0200.865] wcscmp (_String1="..", _String2="..") returned 0 [0200.865] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.865] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.865] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6769898 [0200.865] wcscpy (in: _Dest=0x6769898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0200.865] wcscat (in: _Dest=0x6769898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0200.865] wcscat (in: _Dest=0x6769898, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" [0201.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6769898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c [0201.271] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.271] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0201.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0201.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0201.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 7316 os_tid = 0xf00 [0200.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc")) returned 0x20 [0200.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0200.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.866] GetLastError () returned 0x5 [0200.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0200.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 7317 os_tid = 0x1750 [0200.868] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0202.370] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee8 [0213.965] GetFileSizeEx (in: hFile=0x1ee8, lpFileSize=0x5c0ff64 | out: lpFileSize=0x5c0ff64*=221) returned 1 [0213.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec388 [0213.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec400 [0213.981] NtQuerySystemTime (in: CurrentTime=0x5c0fed8 | out: CurrentTime=0x5c0fed8*=132482711207016000) returned 0x0 [0213.981] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x70632276 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x1d66b952 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x473b1d45 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0xdf6f539 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x7c4cae32 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x6a972cce [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x2c8dac9b [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x3aa1a684 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x310cee97 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x78b1bbbd [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0xa50d4df [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x2f73e7d6 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x74f4675f [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x70be8208 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x56363c1d [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x1d50fda0 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x13cd9441 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x599e323 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x2973af52 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x15ddabfa [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x36a1fa6a [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x83639ef [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x1b2e074d [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x6431d938 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x7634c192 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x619660a2 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x71a75ad6 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x5d4abfdf [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x7d53fe1e [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x5be320ee [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x2b91446 [0213.982] RtlRandomEx (in: Seed=0x5c0fed0 | out: Seed=0x5c0fed0) returned 0x129adb24 [0213.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1314f080 [0213.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13152c88 [0213.991] ReadFile (in: hFile=0x1ee8, lpBuffer=0x1314f080, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x5c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x1314f080*, lpNumberOfBytesRead=0x5c0fecc*=0xdd, lpOverlapped=0x0) returned 1 [0213.999] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.999] WriteFile (in: hFile=0x1ee8, lpBuffer=0x13152c88*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x5c0fed0, lpOverlapped=0x0 | out: lpBuffer=0x13152c88*, lpNumberOfBytesWritten=0x5c0fed0*=0xdd, lpOverlapped=0x0) returned 1 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce68 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0215.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13152c88) returned 1 [0215.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1314f080) returned 1 [0215.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34a60) returned 1 [0215.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2f48) returned 1 [0215.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3ba8 [0215.532] SetFilePointerEx (in: hFile=0x1ee8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.532] WriteFile (in: hFile=0x1ee8, lpBuffer=0x3dec2b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c0ff58, lpOverlapped=0x0 | out: lpBuffer=0x3dec2b0*, lpNumberOfBytesWritten=0x5c0ff58*=0x10c, lpOverlapped=0x0) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec2b0) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ab8) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ba8) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce68) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec388) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec428) returned 1 [0216.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec450) returned 1 [0216.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675be38 [0216.721] wcscpy (in: _Dest=0x675be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" [0216.721] wcscat (in: _Dest=0x675be38, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.ac3a86" [0216.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0x5c0fed0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789788 [0224.335] FlushFileBuffers (hFile=0x1ee8) returned 1 [0224.346] CloseHandle (hObject=0x1ee8) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c7a0 [0224.551] wcscpy (in: _Dest=0x676c7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0224.552] wcscat (in: _Dest=0x676c7a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" [0224.552] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0224.552] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.078] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5c0feec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5c0feec*=0x8b9, lpOverlapped=0x0) returned 1 [0225.080] CloseHandle (hObject=0xeb8) returned 1 [0225.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c7a0) returned 1 [0225.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775648) returned 1 Thread: id = 7318 os_tid = 0x1758 [0200.868] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0202.370] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.999] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518 [0214.000] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0x226f77c | out: lpFileSize=0x226f77c*=218) returned 1 [0214.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec400 [0214.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec478 [0214.000] NtQuerySystemTime (in: CurrentTime=0x226f6f0 | out: CurrentTime=0x226f6f0*=132482711207172000) returned 0x0 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x454cdf76 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x5bfcfcc4 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x6211468f [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x4b3afa82 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x1945045c [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x71a75ad6 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x2c545f9f [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x2864c918 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0xf953071 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x6be51b9b [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x236d3452 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x3602900e [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x61c6616 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x723dac9a [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x1f5fe4b7 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x5872cfa1 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x3a759533 [0214.000] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x747eb9c5 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x45174a61 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x6140af22 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x164dee54 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x267cb92e [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x34e78bc8 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x31b979c1 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x1890e051 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x3d77a270 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x1ddd51f0 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x160e7805 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0xeb16f4c [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x7dd7f0df [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x16c37c56 [0214.001] RtlRandomEx (in: Seed=0x226f6e8 | out: Seed=0x226f6e8) returned 0x4686ac34 [0214.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13156890 [0214.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1315a498 [0214.009] ReadFile (in: hFile=0x1518, lpBuffer=0x13156890, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x226f6e4, lpOverlapped=0x0 | out: lpBuffer=0x13156890*, lpNumberOfBytesRead=0x226f6e4*=0xda, lpOverlapped=0x0) returned 1 [0214.011] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.011] WriteFile (in: hFile=0x1518, lpBuffer=0x1315a498*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x226f6e8, lpOverlapped=0x0 | out: lpBuffer=0x1315a498*, lpNumberOfBytesWritten=0x226f6e8*=0xda, lpOverlapped=0x0) returned 1 [0215.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec108 [0215.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec040 [0215.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec040) returned 1 [0215.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1315a498) returned 1 [0215.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13156890) returned 1 [0215.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e34790) returned 1 [0215.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2f90) returned 1 [0215.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3938 [0215.534] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.534] WriteFile (in: hFile=0x1518, lpBuffer=0x3debe50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x226f770, lpOverlapped=0x0 | out: lpBuffer=0x3debe50*, lpNumberOfBytesWritten=0x226f770*=0x10c, lpOverlapped=0x0) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debe50) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b18) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec040) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3938) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec108) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec400) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec4a0) returned 1 [0216.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec4c8) returned 1 [0216.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675bf70 [0216.724] wcscpy (in: _Dest=0x675bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" [0216.724] wcscat (in: _Dest=0x675bf70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.ac3a86" [0216.725] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0x226f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67898d0 [0224.344] FlushFileBuffers (hFile=0x1518) returned 1 [0224.354] CloseHandle (hObject=0x1518) returned 1 [0224.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c8c8 [0224.559] wcscpy (in: _Dest=0x676c8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0224.559] wcscat (in: _Dest=0x676c8c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" [0224.559] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0224.559] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.087] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x226f704, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x226f704*=0x8b9, lpOverlapped=0x0) returned 1 [0225.089] CloseHandle (hObject=0xeb8) returned 1 [0225.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c8c8) returned 1 [0225.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6775770) returned 1 Thread: id = 7319 os_tid = 0x900 [0200.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 0x20 [0200.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0200.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.869] GetLastError () returned 0x5 [0200.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0200.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 7320 os_tid = 0x1854 [0200.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c96e8 [0200.871] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0200.871] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0200.871] wcscat (in: _Dest=0x2c96e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*" [0200.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0200.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0200.871] wcscmp (_String1=".", _String2=".") returned 0 [0200.871] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.871] wcscmp (_String1="..", _String2=".") returned 1 [0200.871] wcscmp (_String1="..", _String2="..") returned 0 [0200.871] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0200.871] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0200.871] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0200.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadf10 [0200.872] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0200.872] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0200.872] wcscat (in: _Dest=0x3dadf10, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" [0201.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0201.274] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.274] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.274] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8868 [0201.274] wcscpy (in: _Dest=0x3ea8868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0201.274] wcscat (in: _Dest=0x3ea8868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0201.274] wcscat (in: _Dest=0x3ea8868, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" [0201.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0201.275] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.275] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0201.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0201.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 [0201.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 7321 os_tid = 0x1858 [0200.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 0x20 [0200.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0200.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.876] GetLastError () returned 0x5 [0200.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0200.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 7322 os_tid = 0x22f8 [0200.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x678cff8 [0200.878] wcscpy (in: _Dest=0x678cff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0200.878] wcscat (in: _Dest=0x678cff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0200.878] wcscat (in: _Dest=0x678cff8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*" [0200.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9028 [0200.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0206.961] wcscmp (_String1=".", _String2=".") returned 0 [0206.961] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.961] wcscmp (_String1="..", _String2=".") returned 1 [0206.961] wcscmp (_String1="..", _String2="..") returned 0 [0206.961] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0206.961] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0206.961] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0206.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea71e8 [0206.961] wcscpy (in: _Dest=0x3ea71e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0206.961] wcscat (in: _Dest=0x3ea71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0206.961] wcscat (in: _Dest=0x3ea71e8, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0206.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0206.962] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0206.962] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0206.962] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0206.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8778 [0206.962] wcscpy (in: _Dest=0x3ea8778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0206.962] wcscat (in: _Dest=0x3ea8778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0206.962] wcscat (in: _Dest=0x3ea8778, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" [0206.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0206.963] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.963] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.963] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea84a8 [0206.963] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0206.963] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0206.963] wcscat (in: _Dest=0x3ea84a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0206.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea84a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0206.964] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.964] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.964] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8d18 [0206.964] wcscpy (in: _Dest=0x3ea8d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0206.964] wcscat (in: _Dest=0x3ea8d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0206.964] wcscat (in: _Dest=0x3ea8d18, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0206.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0207.023] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b9028 | out: lpFindFileData=0x68b9028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.023] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9028) returned 1 [0207.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cff8) returned 1 [0207.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30126a0) returned 1 Thread: id = 7323 os_tid = 0x185c [0200.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 0x20 [0204.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0206.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.635] GetLastError () returned 0x5 [0208.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0208.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 7324 os_tid = 0x1860 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3011770 [0200.880] wcscpy (in: _Dest=0x3011770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0200.880] wcscat (in: _Dest=0x3011770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0200.881] wcscat (in: _Dest=0x3011770, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*" [0200.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8dc0 [0200.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0204.082] wcscmp (_String1=".", _String2=".") returned 0 [0204.082] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.082] wcscmp (_String1="..", _String2=".") returned 1 [0204.082] wcscmp (_String1="..", _String2="..") returned 0 [0204.082] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.082] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.082] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8a48 [0204.082] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0204.082] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0204.082] wcscat (in: _Dest=0x3ea8a48, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0204.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0204.083] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.083] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.083] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8fe8 [0204.083] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0204.083] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0204.083] wcscat (in: _Dest=0x3ea8fe8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" [0204.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0204.084] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8dc0 | out: lpFindFileData=0x68b8dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.084] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0204.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8dc0) returned 1 [0204.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011770) returned 1 [0204.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 7325 os_tid = 0x1864 [0200.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 0x20 [0213.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0218.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.884] GetLastError () returned 0x5 [0221.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0222.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 7326 os_tid = 0x1868 [0200.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d56668 [0200.882] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0200.882] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0200.882] wcscat (in: _Dest=0x3d56668, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*" [0200.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb440 [0200.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0207.034] wcscmp (_String1=".", _String2=".") returned 0 [0207.034] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.034] wcscmp (_String1="..", _String2=".") returned 1 [0207.034] wcscmp (_String1="..", _String2="..") returned 0 [0207.034] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0207.034] wcscmp (_String1="background.gif", _String2=".") returned 1 [0207.034] wcscmp (_String1="background.gif", _String2="..") returned 1 [0207.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3e15770 [0207.034] wcscpy (in: _Dest=0x3e15770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0207.034] wcscat (in: _Dest=0x3e15770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0207.034] wcscat (in: _Dest=0x3e15770, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" [0207.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e15770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0207.035] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0207.035] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0207.035] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0207.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae008 [0207.035] wcscpy (in: _Dest=0x3dae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0207.035] wcscat (in: _Dest=0x3dae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0207.036] wcscat (in: _Dest=0x3dae008, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0207.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0207.036] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0207.036] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0207.036] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0207.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dade18 [0207.037] wcscpy (in: _Dest=0x3dade18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0207.037] wcscat (in: _Dest=0x3dade18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0207.037] wcscat (in: _Dest=0x3dade18, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0207.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dade18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0207.038] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0207.038] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0207.038] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0207.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadd20 [0207.038] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0207.038] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0207.038] wcscat (in: _Dest=0x3dadd20, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0207.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0207.039] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68bb440 | out: lpFindFileData=0x68bb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.039] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb440) returned 1 [0207.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 [0207.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 7327 os_tid = 0x186c [0200.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 0x20 [0207.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0207.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.639] GetLastError () returned 0x5 [0208.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0208.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 7328 os_tid = 0xf70 [0200.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3d575d0 [0200.882] wcscpy (in: _Dest=0x3d575d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0200.882] wcscat (in: _Dest=0x3d575d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0200.883] wcscat (in: _Dest=0x3d575d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*" [0200.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8b58 [0200.883] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0207.028] wcscmp (_String1=".", _String2=".") returned 0 [0207.028] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.028] wcscmp (_String1="..", _String2=".") returned 1 [0207.028] wcscmp (_String1="..", _String2="..") returned 0 [0207.028] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0207.028] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0207.029] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0207.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad560 [0207.029] wcscpy (in: _Dest=0x3dad560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0207.029] wcscat (in: _Dest=0x3dad560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0207.029] wcscat (in: _Dest=0x3dad560, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" [0207.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0207.030] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0207.030] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0207.030] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0207.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae1f8 [0207.030] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0207.030] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0207.030] wcscat (in: _Dest=0x3dae1f8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0207.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0207.031] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0207.031] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0207.031] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0207.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0207.031] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0207.031] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0207.031] wcscat (in: _Dest=0x3dadb30, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0207.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0207.032] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68b8b58 | out: lpFindFileData=0x68b8b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.032] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8b58) returned 1 [0207.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575d0) returned 1 [0207.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 7329 os_tid = 0xf54 [0200.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 0x20 [0207.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0207.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.638] GetLastError () returned 0x5 [0208.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0208.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 7330 os_tid = 0x85c [0200.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 0x20 [0213.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0219.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.898] GetLastError () returned 0x5 [0221.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0222.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 7331 os_tid = 0xd5c [0200.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 0x20 [0213.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0219.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.904] GetLastError () returned 0x5 [0221.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0222.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 7332 os_tid = 0x2560 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3011fe0 [0200.884] wcscpy (in: _Dest=0x3011fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0200.884] wcscat (in: _Dest=0x3011fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0200.884] wcscat (in: _Dest=0x3011fe0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*" [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8420 [0200.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80c38 [0213.004] wcscmp (_String1=".", _String2=".") returned 0 [0213.004] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.004] wcscmp (_String1="..", _String2=".") returned 1 [0213.004] wcscmp (_String1="..", _String2="..") returned 0 [0213.004] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0213.004] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0213.004] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0213.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea71e8 [0213.004] wcscpy (in: _Dest=0x3ea71e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0213.004] wcscat (in: _Dest=0x3ea71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0213.004] wcscat (in: _Dest=0x3ea71e8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" [0215.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0215.443] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0215.443] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0215.443] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0215.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ea8c28 [0215.443] wcscpy (in: _Dest=0x3ea8c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0215.443] wcscat (in: _Dest=0x3ea8c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0215.443] wcscat (in: _Dest=0x3ea8c28, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" [0215.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0215.444] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0215.444] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0215.444] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0215.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea84a8 [0215.444] wcscpy (in: _Dest=0x3ea84a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0215.444] wcscat (in: _Dest=0x3ea84a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0215.444] wcscat (in: _Dest=0x3ea84a8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" [0215.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea84a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0215.445] FindNextFileW (in: hFindFile=0x3e80c38, lpFindFileData=0x68b8420 | out: lpFindFileData=0x68b8420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0215.445] FindClose (in: hFindFile=0x3e80c38 | out: hFindFile=0x3e80c38) returned 1 [0215.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8420) returned 1 [0215.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011fe0) returned 1 [0215.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011d58) returned 1 Thread: id = 7333 os_tid = 0xfb8 [0200.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 0x20 [0213.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0219.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.925] GetLastError () returned 0x5 [0221.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0222.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 7334 os_tid = 0x61c [0200.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 0x20 [0213.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0219.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.261] GetLastError () returned 0x5 [0222.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0222.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cab8) returned 1 Thread: id = 7335 os_tid = 0xae4 [0200.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x678d0d8 [0200.885] wcscpy (in: _Dest=0x678d0d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0200.885] wcscat (in: _Dest=0x678d0d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0200.885] wcscat (in: _Dest=0x678d0d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*" [0200.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba100 [0200.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0207.052] wcscmp (_String1=".", _String2=".") returned 0 [0207.052] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.052] wcscmp (_String1="..", _String2=".") returned 1 [0207.052] wcscmp (_String1="..", _String2="..") returned 0 [0207.052] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0207.052] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0207.052] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0207.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8b38 [0207.052] wcscpy (in: _Dest=0x3ea8b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0207.052] wcscat (in: _Dest=0x3ea8b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0207.052] wcscat (in: _Dest=0x3ea8b38, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" [0207.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0207.086] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0207.086] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0207.086] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0207.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae3e8 [0207.086] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0207.086] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0207.086] wcscat (in: _Dest=0x3dae3e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0207.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0207.087] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0207.087] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0207.088] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0207.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8598 [0207.088] wcscpy (in: _Dest=0x3ea8598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0207.088] wcscat (in: _Dest=0x3ea8598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0207.088] wcscat (in: _Dest=0x3ea8598, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0207.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0207.089] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba100 | out: lpFindFileData=0x68ba100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.089] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba100) returned 1 [0207.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678d0d8) returned 1 [0207.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cb98) returned 1 Thread: id = 7336 os_tid = 0x358 [0200.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 0x20 [0207.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0207.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.636] GetLastError () returned 0x5 [0208.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0208.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 7337 os_tid = 0xafc [0200.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 0x20 [0208.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0213.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.637] GetLastError () returned 0x5 [0221.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0222.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cc78) returned 1 Thread: id = 7338 os_tid = 0x33c [0200.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 0x20 [0207.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0207.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.635] GetLastError () returned 0x5 [0208.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0208.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57400) returned 1 Thread: id = 7339 os_tid = 0x3f4 [0200.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48808 [0200.887] wcscpy (in: _Dest=0x3e48808, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0200.887] wcscat (in: _Dest=0x3e48808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0200.887] wcscat (in: _Dest=0x3e48808, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*" [0200.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9c30 [0200.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80038 [0212.996] wcscmp (_String1=".", _String2=".") returned 0 [0212.996] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.996] wcscmp (_String1="..", _String2=".") returned 1 [0212.996] wcscmp (_String1="..", _String2="..") returned 0 [0212.996] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0212.996] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0212.996] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0212.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56498 [0212.997] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0212.997] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0212.997] wcscat (in: _Dest=0x3d56498, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" [0215.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0215.749] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0215.749] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0215.749] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0215.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d577a0 [0215.749] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0215.749] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0215.749] wcscat (in: _Dest=0x3d577a0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" [0215.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0215.750] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x68b9c30 | out: lpFindFileData=0x68b9c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0215.750] FindClose (in: hFindFile=0x3e80038 | out: hFindFile=0x3e80038) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9c30) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48808) returned 1 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35b60) returned 1 Thread: id = 7340 os_tid = 0xc0 [0200.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 0x20 [0207.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0207.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.643] GetLastError () returned 0x5 [0208.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0208.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30120b8) returned 1 Thread: id = 7341 os_tid = 0xb0 [0200.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 0x20 [0207.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0207.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.644] GetLastError () returned 0x5 [0208.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0208.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cd58) returned 1 Thread: id = 7342 os_tid = 0x82c [0200.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e484a8 [0200.891] wcscpy (in: _Dest=0x3e484a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0200.891] wcscat (in: _Dest=0x3e484a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0200.891] wcscat (in: _Dest=0x3e484a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*" [0200.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba838 [0200.891] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0207.046] wcscmp (_String1=".", _String2=".") returned 0 [0207.046] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.047] wcscmp (_String1="..", _String2=".") returned 1 [0207.047] wcscmp (_String1="..", _String2="..") returned 0 [0207.047] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0207.047] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0207.047] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0207.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56838 [0207.047] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0207.047] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0207.047] wcscat (in: _Dest=0x3d56838, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" [0207.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0207.048] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0207.048] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0207.048] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0207.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8e08 [0207.048] wcscpy (in: _Dest=0x3ea8e08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0207.048] wcscat (in: _Dest=0x3ea8e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0207.048] wcscat (in: _Dest=0x3ea8e08, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0207.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0207.049] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0207.049] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0207.049] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0207.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56668 [0207.049] wcscpy (in: _Dest=0x3d56668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0207.049] wcscat (in: _Dest=0x3d56668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0207.049] wcscat (in: _Dest=0x3d56668, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" [0207.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0207.050] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68ba838 | out: lpFindFileData=0x68ba838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.050] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba838) returned 1 [0207.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e484a8) returned 1 [0207.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 7343 os_tid = 0x27e8 [0200.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 0x20 [0207.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0208.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.021] GetLastError () returned 0x5 [0213.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0219.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ce38) returned 1 Thread: id = 7344 os_tid = 0x1878 [0200.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 0x20 [0204.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0204.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.033] GetLastError () returned 0x5 [0206.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0207.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56cc0) returned 1 Thread: id = 7345 os_tid = 0x1b58 [0201.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 0x20 [0206.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0206.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.091] GetLastError () returned 0x5 [0217.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0220.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678cf18) returned 1 Thread: id = 7347 os_tid = 0x21e0 [0201.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc")) returned 0x20 [0212.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0219.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.121] GetLastError () returned 0x5 [0223.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0223.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 7348 os_tid = 0x21f0 [0201.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt")) returned 0x20 [0212.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0220.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.123] GetLastError () returned 0x5 [0223.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0223.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 7349 os_tid = 0x21f4 [0201.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls")) returned 0x20 [0212.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0212.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.945] GetLastError () returned 0x5 [0212.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 7350 os_tid = 0x21fc [0201.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat")) returned 0x20 [0212.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0212.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.947] GetLastError () returned 0x5 [0212.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0212.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 7351 os_tid = 0x2200 [0201.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat")) returned 0x20 [0212.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0212.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.949] GetLastError () returned 0x5 [0212.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 7352 os_tid = 0x220c [0201.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat")) returned 0x20 [0212.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0219.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.115] GetLastError () returned 0x5 [0223.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0223.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 7353 os_tid = 0x2118 [0201.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat")) returned 0x20 [0212.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0219.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.116] GetLastError () returned 0x5 [0223.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0223.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 7354 os_tid = 0x2114 [0201.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat")) returned 0x20 [0212.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0219.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.117] GetLastError () returned 0x5 [0223.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0223.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 7355 os_tid = 0x2110 [0201.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll")) returned 0x20 [0212.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.792] GetLastError () returned 0x5 [0212.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 7356 os_tid = 0x210c [0201.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll")) returned 0x20 [0212.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.790] GetLastError () returned 0x5 [0212.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 7357 os_tid = 0x2108 [0201.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm")) returned 0x20 [0212.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0219.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.118] GetLastError () returned 0x5 [0223.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0223.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 7358 os_tid = 0x2104 [0201.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0f2f0 [0201.204] wcscpy (in: _Dest=0x3e0f2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0201.204] wcscat (in: _Dest=0x3e0f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0201.204] wcscat (in: _Dest=0x3e0f2f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*" [0201.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4be0 [0201.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80ef8 [0215.335] wcscmp (_String1=".", _String2=".") returned 0 [0215.335] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.948] wcscmp (_String1="..", _String2=".") returned 1 [0215.948] wcscmp (_String1="..", _String2="..") returned 0 [0215.948] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd157c700, ftCreationTime.dwHighDateTime=0x1ca66cd, ftLastAccessTime.dwLowDateTime=0x620741b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd157c700, ftLastWriteTime.dwHighDateTime=0x1ca66cd, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0215.948] wcscmp (_String1="FONTSCHM.INI", _String2=".") returned 1 [0215.948] wcscmp (_String1="FONTSCHM.INI", _String2="..") returned 1 [0215.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30810 [0215.948] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0215.948] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0215.948] wcscat (in: _Dest=0x3e30810, _Source="FONTSCHM.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" [0217.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0217.053] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcce2900, ftCreationTime.dwHighDateTime=0x1ca15db, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcce2900, ftLastWriteTime.dwHighDateTime=0x1ca15db, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0217.053] wcscmp (_String1="SCHEME01.CSS", _String2=".") returned 1 [0217.053] wcscmp (_String1="SCHEME01.CSS", _String2="..") returned 1 [0217.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30648 [0217.053] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.053] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.054] wcscat (in: _Dest=0x3e30648, _Source="SCHEME01.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" [0217.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0217.054] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cb8700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0cb8700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0217.055] wcscmp (_String1="SCHEME02.CSS", _String2=".") returned 1 [0217.055] wcscmp (_String1="SCHEME02.CSS", _String2="..") returned 1 [0217.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31a78 [0217.055] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.055] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.055] wcscat (in: _Dest=0x3e31a78, _Source="SCHEME02.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" [0217.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0217.056] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9a5a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf9a5a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0217.056] wcscmp (_String1="SCHEME03.CSS", _String2=".") returned 1 [0217.056] wcscmp (_String1="SCHEME03.CSS", _String2="..") returned 1 [0217.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30b08 [0217.056] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.056] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.056] wcscat (in: _Dest=0x3e30b08, _Source="SCHEME03.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" [0217.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0217.057] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe692d00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe692d00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0217.057] wcscmp (_String1="SCHEME04.CSS", _String2=".") returned 1 [0217.057] wcscmp (_String1="SCHEME04.CSS", _String2="..") returned 1 [0217.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32230 [0217.057] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.057] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.057] wcscat (in: _Dest=0x3e32230, _Source="SCHEME04.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" [0217.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0217.058] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0217.058] wcscmp (_String1="SCHEME05.CSS", _String2=".") returned 1 [0217.058] wcscmp (_String1="SCHEME05.CSS", _String2="..") returned 1 [0217.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30e00 [0217.058] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.058] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.058] wcscat (in: _Dest=0x3e30e00, _Source="SCHEME05.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" [0217.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0217.059] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0217.059] wcscmp (_String1="SCHEME06.CSS", _String2=".") returned 1 [0217.059] wcscmp (_String1="SCHEME06.CSS", _String2="..") returned 1 [0217.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0217.059] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.059] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.059] wcscat (in: _Dest=0x3e322c8, _Source="SCHEME06.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" [0217.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0217.060] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc06d300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc06d300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0217.060] wcscmp (_String1="SCHEME07.CSS", _String2=".") returned 1 [0217.060] wcscmp (_String1="SCHEME07.CSS", _String2="..") returned 1 [0217.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31650 [0217.060] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.060] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.060] wcscat (in: _Dest=0x3e31650, _Source="SCHEME07.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" [0217.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0217.061] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0217.061] wcscmp (_String1="SCHEME08.CSS", _String2=".") returned 1 [0217.061] wcscmp (_String1="SCHEME08.CSS", _String2="..") returned 1 [0217.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d4a0 [0217.061] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.061] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.061] wcscat (in: _Dest=0x32d4a0, _Source="SCHEME08.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" [0217.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0217.062] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0217.062] wcscmp (_String1="SCHEME09.CSS", _String2=".") returned 1 [0217.062] wcscmp (_String1="SCHEME09.CSS", _String2="..") returned 1 [0217.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0217.063] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.063] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.063] wcscat (in: _Dest=0x32d668, _Source="SCHEME09.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" [0217.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0217.064] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8734c00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8734c00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0217.064] wcscmp (_String1="SCHEME10.CSS", _String2=".") returned 1 [0217.064] wcscmp (_String1="SCHEME10.CSS", _String2="..") returned 1 [0217.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0217.064] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.064] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.064] wcscat (in: _Dest=0x32c660, _Source="SCHEME10.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" [0217.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0217.065] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7421f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7421f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0217.065] wcscmp (_String1="SCHEME11.CSS", _String2=".") returned 1 [0217.065] wcscmp (_String1="SCHEME11.CSS", _String2="..") returned 1 [0217.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0217.065] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.065] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.065] wcscat (in: _Dest=0x32d408, _Source="SCHEME11.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" [0217.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0217.066] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb610f200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb610f200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0217.066] wcscmp (_String1="SCHEME12.CSS", _String2=".") returned 1 [0217.066] wcscmp (_String1="SCHEME12.CSS", _String2="..") returned 1 [0217.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bce0 [0217.066] wcscpy (in: _Dest=0x32bce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.066] wcscat (in: _Dest=0x32bce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.066] wcscat (in: _Dest=0x32bce0, _Source="SCHEME12.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" [0217.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0217.067] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0217.067] wcscmp (_String1="SCHEME13.CSS", _String2=".") returned 1 [0217.067] wcscmp (_String1="SCHEME13.CSS", _String2="..") returned 1 [0217.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bd78 [0217.067] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.067] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.067] wcscat (in: _Dest=0x32bd78, _Source="SCHEME13.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" [0217.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0217.069] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0217.069] wcscmp (_String1="SCHEME14.CSS", _String2=".") returned 1 [0217.069] wcscmp (_String1="SCHEME14.CSS", _String2="..") returned 1 [0217.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0217.069] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.069] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.069] wcscat (in: _Dest=0x32d2d8, _Source="SCHEME14.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" [0217.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0217.070] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ae9800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3ae9800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0217.070] wcscmp (_String1="SCHEME15.CSS", _String2=".") returned 1 [0217.070] wcscmp (_String1="SCHEME15.CSS", _String2="..") returned 1 [0217.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cd80 [0217.070] wcscpy (in: _Dest=0x32cd80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.070] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.070] wcscat (in: _Dest=0x32cd80, _Source="SCHEME15.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" [0217.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0217.071] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27d6b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb27d6b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0217.071] wcscmp (_String1="SCHEME16.CSS", _String2=".") returned 1 [0217.071] wcscmp (_String1="SCHEME16.CSS", _String2="..") returned 1 [0217.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0217.071] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.071] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.071] wcscat (in: _Dest=0x32d5d0, _Source="SCHEME16.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" [0217.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0217.072] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14c3e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb14c3e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0217.072] wcscmp (_String1="SCHEME17.CSS", _String2=".") returned 1 [0217.072] wcscmp (_String1="SCHEME17.CSS", _String2="..") returned 1 [0217.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0217.072] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.072] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.072] wcscat (in: _Dest=0x32d240, _Source="SCHEME17.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" [0217.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0217.073] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01b1100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb01b1100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0217.073] wcscmp (_String1="SCHEME18.CSS", _String2=".") returned 1 [0217.074] wcscmp (_String1="SCHEME18.CSS", _String2="..") returned 1 [0217.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d538 [0217.074] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.074] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.074] wcscat (in: _Dest=0x32d538, _Source="SCHEME18.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" [0217.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0217.075] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee9e400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee9e400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0217.075] wcscmp (_String1="SCHEME19.CSS", _String2=".") returned 1 [0217.075] wcscmp (_String1="SCHEME19.CSS", _String2="..") returned 1 [0217.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0217.075] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.075] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.075] wcscat (in: _Dest=0x32b820, _Source="SCHEME19.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" [0217.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0217.076] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb8b700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadb8b700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0217.076] wcscmp (_String1="SCHEME20.CSS", _String2=".") returned 1 [0217.076] wcscmp (_String1="SCHEME20.CSS", _String2="..") returned 1 [0217.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32bea8 [0217.076] wcscpy (in: _Dest=0x32bea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.076] wcscat (in: _Dest=0x32bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.076] wcscat (in: _Dest=0x32bea8, _Source="SCHEME20.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" [0217.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0217.077] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac878a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac878a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0217.077] wcscmp (_String1="SCHEME21.CSS", _String2=".") returned 1 [0217.077] wcscmp (_String1="SCHEME21.CSS", _String2="..") returned 1 [0217.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cf48 [0217.077] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.077] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.077] wcscat (in: _Dest=0x32cf48, _Source="SCHEME21.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" [0217.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0217.078] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa253000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa253000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0217.078] wcscmp (_String1="SCHEME22.CSS", _String2=".") returned 1 [0217.078] wcscmp (_String1="SCHEME22.CSS", _String2="..") returned 1 [0217.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0217.079] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.079] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.079] wcscat (in: _Dest=0x32d700, _Source="SCHEME22.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" [0217.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0217.080] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f40300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8f40300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0217.080] wcscmp (_String1="SCHEME23.CSS", _String2=".") returned 1 [0217.080] wcscmp (_String1="SCHEME23.CSS", _String2="..") returned 1 [0217.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957ce8 [0217.080] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.080] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.080] wcscat (in: _Dest=0x6957ce8, _Source="SCHEME23.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" [0217.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0217.081] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c2d600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7c2d600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0217.081] wcscmp (_String1="SCHEME24.CSS", _String2=".") returned 1 [0217.081] wcscmp (_String1="SCHEME24.CSS", _String2="..") returned 1 [0217.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957d80 [0217.081] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.081] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.081] wcscat (in: _Dest=0x6957d80, _Source="SCHEME24.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" [0217.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0217.082] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0217.082] wcscmp (_String1="SCHEME25.CSS", _String2=".") returned 1 [0217.082] wcscmp (_String1="SCHEME25.CSS", _String2="..") returned 1 [0217.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957e18 [0217.082] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.082] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.082] wcscat (in: _Dest=0x6957e18, _Source="SCHEME25.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" [0217.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0217.084] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0217.084] wcscmp (_String1="SCHEME26.CSS", _String2=".") returned 1 [0217.084] wcscmp (_String1="SCHEME26.CSS", _String2="..") returned 1 [0217.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0217.084] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.084] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.084] wcscat (in: _Dest=0x6957eb0, _Source="SCHEME26.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" [0217.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0217.085] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0217.085] wcscmp (_String1="SCHEME27.CSS", _String2=".") returned 1 [0217.085] wcscmp (_String1="SCHEME27.CSS", _String2="..") returned 1 [0217.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0217.085] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.085] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.085] wcscat (in: _Dest=0x6957f48, _Source="SCHEME27.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" [0217.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0217.086] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0217.086] wcscmp (_String1="SCHEME28.CSS", _String2=".") returned 1 [0217.086] wcscmp (_String1="SCHEME28.CSS", _String2="..") returned 1 [0217.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957fe0 [0217.086] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.086] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.086] wcscat (in: _Dest=0x6957fe0, _Source="SCHEME28.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" [0217.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0217.087] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa09bc800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa09bc800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0217.087] wcscmp (_String1="SCHEME29.CSS", _String2=".") returned 1 [0217.087] wcscmp (_String1="SCHEME29.CSS", _String2="..") returned 1 [0217.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958078 [0217.087] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.087] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.088] wcscat (in: _Dest=0x6958078, _Source="SCHEME29.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" [0217.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0217.088] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6a9b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6a9b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0217.089] wcscmp (_String1="SCHEME30.CSS", _String2=".") returned 1 [0217.089] wcscmp (_String1="SCHEME30.CSS", _String2="..") returned 1 [0217.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0217.089] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.089] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.089] wcscat (in: _Dest=0x6958110, _Source="SCHEME30.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" [0217.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0217.419] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b00600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94b00600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0217.419] wcscmp (_String1="SCHEME31.CSS", _String2=".") returned 1 [0217.419] wcscmp (_String1="SCHEME31.CSS", _String2="..") returned 1 [0217.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30b08 [0217.420] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0217.420] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0217.420] wcscat (in: _Dest=0x3e30b08, _Source="SCHEME31.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" [0218.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0218.715] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9974ba00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9974ba00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0218.715] wcscmp (_String1="SCHEME32.CSS", _String2=".") returned 1 [0218.715] wcscmp (_String1="SCHEME32.CSS", _String2="..") returned 1 [0218.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32230 [0218.716] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0218.716] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0218.716] wcscat (in: _Dest=0x3e32230, _Source="SCHEME32.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" [0218.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0218.717] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa3100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daa3100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0218.719] wcscmp (_String1="SCHEME33.CSS", _String2=".") returned 1 [0218.719] wcscmp (_String1="SCHEME33.CSS", _String2="..") returned 1 [0218.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x69589f8 [0218.719] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0218.719] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0218.719] wcscat (in: _Dest=0x69589f8, _Source="SCHEME33.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" [0219.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0219.009] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3420c900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3420c900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0219.009] wcscmp (_String1="SCHEME34.CSS", _String2=".") returned 1 [0219.010] wcscmp (_String1="SCHEME34.CSS", _String2="..") returned 1 [0219.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e32230 [0219.010] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.010] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.010] wcscat (in: _Dest=0x3e32230, _Source="SCHEME34.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" [0219.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0219.011] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1219a100, ftCreationTime.dwHighDateTime=0x1c69ab7, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1219a100, ftLastWriteTime.dwHighDateTime=0x1c69ab7, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0219.011] wcscmp (_String1="SCHEME35.CSS", _String2=".") returned 1 [0219.011] wcscmp (_String1="SCHEME35.CSS", _String2="..") returned 1 [0219.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30b08 [0219.012] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.012] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.012] wcscat (in: _Dest=0x3e30b08, _Source="SCHEME35.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" [0219.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374 [0219.013] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29663400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29663400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0219.013] wcscmp (_String1="SCHEME36.CSS", _String2=".") returned 1 [0219.013] wcscmp (_String1="SCHEME36.CSS", _String2="..") returned 1 [0219.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31650 [0219.013] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.013] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.013] wcscat (in: _Dest=0x3e31650, _Source="SCHEME36.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" [0219.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0219.015] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0083f00, ftCreationTime.dwHighDateTime=0x1c69ab6, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0083f00, ftLastWriteTime.dwHighDateTime=0x1c69ab6, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0219.015] wcscmp (_String1="SCHEME37.CSS", _String2=".") returned 1 [0219.015] wcscmp (_String1="SCHEME37.CSS", _String2="..") returned 1 [0219.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0219.015] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.015] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.015] wcscat (in: _Dest=0x3e322c8, _Source="SCHEME37.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" [0219.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0219.016] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b5be00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18b5be00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0219.016] wcscmp (_String1="SCHEME38.CSS", _String2=".") returned 1 [0219.016] wcscmp (_String1="SCHEME38.CSS", _String2="..") returned 1 [0219.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30e00 [0219.017] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.017] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.017] wcscat (in: _Dest=0x3e30e00, _Source="SCHEME38.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" [0219.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0219.018] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67a200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa67a200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0219.018] wcscmp (_String1="SCHEME39.CSS", _String2=".") returned 1 [0219.018] wcscmp (_String1="SCHEME39.CSS", _String2="..") returned 1 [0219.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957fe0 [0219.018] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.018] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.018] wcscat (in: _Dest=0x6957fe0, _Source="SCHEME39.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" [0219.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0219.020] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f6700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20f6700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0219.020] wcscmp (_String1="SCHEME40.CSS", _String2=".") returned 1 [0219.020] wcscmp (_String1="SCHEME40.CSS", _String2="..") returned 1 [0219.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958110 [0219.020] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.020] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.020] wcscat (in: _Dest=0x6958110, _Source="SCHEME40.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" [0219.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0219.022] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf754d200, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf754d200, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0219.022] wcscmp (_String1="SCHEME41.CSS", _String2=".") returned 1 [0219.022] wcscmp (_String1="SCHEME41.CSS", _String2="..") returned 1 [0219.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957f48 [0219.022] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.022] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.022] wcscat (in: _Dest=0x6957f48, _Source="SCHEME41.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" [0219.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0219.024] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb691000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb691000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0219.024] wcscmp (_String1="SCHEME42.CSS", _String2=".") returned 1 [0219.024] wcscmp (_String1="SCHEME42.CSS", _String2="..") returned 1 [0219.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957eb0 [0219.024] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.024] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.024] wcscat (in: _Dest=0x6957eb0, _Source="SCHEME42.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" [0219.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0219.025] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1af400, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd1af400, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0219.026] wcscmp (_String1="SCHEME43.CSS", _String2=".") returned 1 [0219.026] wcscmp (_String1="SCHEME43.CSS", _String2="..") returned 1 [0219.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957e18 [0219.026] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.026] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.026] wcscat (in: _Dest=0x6957e18, _Source="SCHEME43.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" [0219.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0219.027] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6a7e00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc6a7e00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0219.027] wcscmp (_String1="SCHEME44.CSS", _String2=".") returned 1 [0219.027] wcscmp (_String1="SCHEME44.CSS", _String2="..") returned 1 [0219.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957d80 [0219.027] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.027] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.027] wcscat (in: _Dest=0x6957d80, _Source="SCHEME44.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" [0219.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0219.028] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1afe900, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1afe900, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0219.029] wcscmp (_String1="SCHEME45.CSS", _String2=".") returned 1 [0219.029] wcscmp (_String1="SCHEME45.CSS", _String2="..") returned 1 [0219.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6957ce8 [0219.029] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.029] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.029] wcscat (in: _Dest=0x6957ce8, _Source="SCHEME45.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" [0219.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0219.030] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb230a000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb230a000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0219.030] wcscmp (_String1="SCHEME46.CSS", _String2=".") returned 1 [0219.030] wcscmp (_String1="SCHEME46.CSS", _String2="..") returned 1 [0219.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958078 [0219.030] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.030] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.030] wcscat (in: _Dest=0x6958078, _Source="SCHEME46.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" [0219.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0219.032] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d86500, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d86500, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0219.032] wcscmp (_String1="SCHEME47.CSS", _String2=".") returned 1 [0219.032] wcscmp (_String1="SCHEME47.CSS", _String2="..") returned 1 [0219.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958b28 [0219.032] wcscpy (in: _Dest=0x6958b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.032] wcscat (in: _Dest=0x6958b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.032] wcscat (in: _Dest=0x6958b28, _Source="SCHEME47.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" [0219.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0219.033] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cbb7600, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cbb7600, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0219.033] wcscmp (_String1="SCHEME48.CSS", _String2=".") returned 1 [0219.033] wcscmp (_String1="SCHEME48.CSS", _String2="..") returned 1 [0219.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958bc0 [0219.033] wcscpy (in: _Dest=0x6958bc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.033] wcscat (in: _Dest=0x6958bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.033] wcscat (in: _Dest=0x6958bc0, _Source="SCHEME48.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" [0219.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0219.035] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9e8700, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f9e8700, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0219.035] wcscmp (_String1="SCHEME49.CSS", _String2=".") returned 1 [0219.035] wcscmp (_String1="SCHEME49.CSS", _String2="..") returned 1 [0219.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958c58 [0219.035] wcscpy (in: _Dest=0x6958c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.035] wcscat (in: _Dest=0x6958c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.035] wcscat (in: _Dest=0x6958c58, _Source="SCHEME49.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" [0219.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0219.036] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86151f00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86151f00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0219.036] wcscmp (_String1="SCHEME50.CSS", _String2=".") returned 1 [0219.036] wcscmp (_String1="SCHEME50.CSS", _String2="..") returned 1 [0219.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958cf0 [0219.036] wcscpy (in: _Dest=0x6958cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.036] wcscat (in: _Dest=0x6958cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.036] wcscat (in: _Dest=0x6958cf0, _Source="SCHEME50.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" [0219.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0219.038] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae579e00, ftCreationTime.dwHighDateTime=0x1c69adf, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae579e00, ftLastWriteTime.dwHighDateTime=0x1c69adf, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0219.038] wcscmp (_String1="SCHEME51.CSS", _String2=".") returned 1 [0219.038] wcscmp (_String1="SCHEME51.CSS", _String2="..") returned 1 [0219.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958d88 [0219.038] wcscpy (in: _Dest=0x6958d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.038] wcscat (in: _Dest=0x6958d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.038] wcscat (in: _Dest=0x6958d88, _Source="SCHEME51.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" [0219.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0219.039] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87036a00, ftCreationTime.dwHighDateTime=0x1c696b6, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87036a00, ftLastWriteTime.dwHighDateTime=0x1c696b6, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0219.039] wcscmp (_String1="SCHEME52.CSS", _String2=".") returned 1 [0219.039] wcscmp (_String1="SCHEME52.CSS", _String2="..") returned 1 [0219.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958e20 [0219.039] wcscpy (in: _Dest=0x6958e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.039] wcscat (in: _Dest=0x6958e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.039] wcscat (in: _Dest=0x6958e20, _Source="SCHEME52.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" [0219.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0219.041] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3100, ftCreationTime.dwHighDateTime=0x1c69ab8, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0e3100, ftLastWriteTime.dwHighDateTime=0x1c69ab8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0219.041] wcscmp (_String1="SCHEME53.CSS", _String2=".") returned 1 [0219.041] wcscmp (_String1="SCHEME53.CSS", _String2="..") returned 1 [0219.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958eb8 [0219.041] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.041] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.041] wcscat (in: _Dest=0x6958eb8, _Source="SCHEME53.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" [0219.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0219.042] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf6cb00, ftCreationTime.dwHighDateTime=0x1c695fb, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcf6cb00, ftLastWriteTime.dwHighDateTime=0x1c695fb, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0219.042] wcscmp (_String1="SCHEME54.CSS", _String2=".") returned 1 [0219.042] wcscmp (_String1="SCHEME54.CSS", _String2="..") returned 1 [0219.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958f50 [0219.042] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.042] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.042] wcscat (in: _Dest=0x6958f50, _Source="SCHEME54.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" [0219.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0219.044] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0219.044] wcscmp (_String1="SCHEME55.CSS", _String2=".") returned 1 [0219.044] wcscmp (_String1="SCHEME55.CSS", _String2="..") returned 1 [0219.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6958fe8 [0219.044] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0219.044] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0219.044] wcscat (in: _Dest=0x6958fe8, _Source="SCHEME55.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" [0219.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0219.045] FindNextFileW (in: hFindFile=0x3e80ef8, lpFindFileData=0x66e4be0 | out: lpFindFileData=0x66e4be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0219.045] FindClose (in: hFindFile=0x3e80ef8 | out: hFindFile=0x3e80ef8) returned 1 [0219.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4be0) returned 1 [0219.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f2f0) returned 1 [0219.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e100f0) returned 1 Thread: id = 7359 os_tid = 0x1d08 [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e0fb70 [0201.205] wcscpy (in: _Dest=0x3e0fb70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0201.205] wcscat (in: _Dest=0x3e0fb70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0201.205] wcscat (in: _Dest=0x3e0fb70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*" [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e3638 [0201.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80038 [0215.955] wcscmp (_String1=".", _String2=".") returned 0 [0215.955] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.225] wcscmp (_String1="..", _String2=".") returned 1 [0217.225] wcscmp (_String1="..", _String2="..") returned 0 [0217.225] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0217.225] wcscmp (_String1="PAPERS.INI", _String2=".") returned 1 [0217.225] wcscmp (_String1="PAPERS.INI", _String2="..") returned 1 [0217.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc288 [0217.225] wcscpy (in: _Dest=0x66dc288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0217.225] wcscat (in: _Dest=0x66dc288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0217.225] wcscat (in: _Dest=0x66dc288, _Source="PAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" [0218.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0218.586] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0218.587] wcscmp (_String1="PDIR10F.GIF", _String2=".") returned 1 [0218.587] wcscmp (_String1="PDIR10F.GIF", _String2="..") returned 1 [0218.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32198 [0218.587] wcscpy (in: _Dest=0x3e32198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.587] wcscat (in: _Dest=0x3e32198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.587] wcscat (in: _Dest=0x3e32198, _Source="PDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" [0218.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0218.588] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0218.588] wcscmp (_String1="PDIR11F.GIF", _String2=".") returned 1 [0218.588] wcscmp (_String1="PDIR11F.GIF", _String2="..") returned 1 [0218.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31520 [0218.589] wcscpy (in: _Dest=0x3e31520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.589] wcscat (in: _Dest=0x3e31520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.589] wcscat (in: _Dest=0x3e31520, _Source="PDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" [0218.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0218.592] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0218.592] wcscmp (_String1="PDIR12F.GIF", _String2=".") returned 1 [0218.592] wcscmp (_String1="PDIR12F.GIF", _String2="..") returned 1 [0218.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31a78 [0218.592] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.592] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.592] wcscat (in: _Dest=0x3e31a78, _Source="PDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" [0218.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0218.593] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0218.594] wcscmp (_String1="PDIR13F.GIF", _String2=".") returned 1 [0218.594] wcscmp (_String1="PDIR13F.GIF", _String2="..") returned 1 [0218.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30648 [0218.594] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.594] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.594] wcscat (in: _Dest=0x3e30648, _Source="PDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" [0218.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0218.595] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0218.595] wcscmp (_String1="PDIR14F.GIF", _String2=".") returned 1 [0218.595] wcscmp (_String1="PDIR14F.GIF", _String2="..") returned 1 [0218.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30810 [0218.595] wcscpy (in: _Dest=0x3e30810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.595] wcscat (in: _Dest=0x3e30810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.595] wcscat (in: _Dest=0x3e30810, _Source="PDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" [0218.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0218.596] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0218.596] wcscmp (_String1="PDIR15F.GIF", _String2=".") returned 1 [0218.596] wcscmp (_String1="PDIR15F.GIF", _String2="..") returned 1 [0218.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30d68 [0218.596] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.597] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.597] wcscat (in: _Dest=0x3e30d68, _Source="PDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" [0218.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0218.598] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0218.598] wcscmp (_String1="PDIR16F.GIF", _String2=".") returned 1 [0218.598] wcscmp (_String1="PDIR16F.GIF", _String2="..") returned 1 [0218.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e305b0 [0218.598] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.598] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.598] wcscat (in: _Dest=0x3e305b0, _Source="PDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" [0218.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0218.600] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0218.600] wcscmp (_String1="PDIR17F.GIF", _String2=".") returned 1 [0218.600] wcscmp (_String1="PDIR17F.GIF", _String2="..") returned 1 [0218.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e31060 [0218.600] wcscpy (in: _Dest=0x3e31060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.600] wcscat (in: _Dest=0x3e31060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.600] wcscat (in: _Dest=0x3e31060, _Source="PDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" [0218.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0218.601] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0218.601] wcscmp (_String1="PDIR18F.GIF", _String2=".") returned 1 [0218.601] wcscmp (_String1="PDIR18F.GIF", _String2="..") returned 1 [0218.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69581a8 [0218.601] wcscpy (in: _Dest=0x69581a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.602] wcscat (in: _Dest=0x69581a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.602] wcscat (in: _Dest=0x69581a8, _Source="PDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" [0218.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69581a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0218.603] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0218.603] wcscmp (_String1="PDIR19F.GIF", _String2=".") returned 1 [0218.603] wcscmp (_String1="PDIR19F.GIF", _String2="..") returned 1 [0218.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958240 [0218.603] wcscpy (in: _Dest=0x6958240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.603] wcscat (in: _Dest=0x6958240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.603] wcscat (in: _Dest=0x6958240, _Source="PDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" [0218.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0218.605] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0218.605] wcscmp (_String1="PDIR1B.GIF", _String2=".") returned 1 [0218.605] wcscmp (_String1="PDIR1B.GIF", _String2="..") returned 1 [0218.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd1b8 [0218.605] wcscpy (in: _Dest=0x66dd1b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.605] wcscat (in: _Dest=0x66dd1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.605] wcscat (in: _Dest=0x66dd1b8, _Source="PDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" [0218.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0218.606] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0218.606] wcscmp (_String1="PDIR1F.GIF", _String2=".") returned 1 [0218.606] wcscmp (_String1="PDIR1F.GIF", _String2="..") returned 1 [0218.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd098 [0218.606] wcscpy (in: _Dest=0x66dd098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.606] wcscat (in: _Dest=0x66dd098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.606] wcscat (in: _Dest=0x66dd098, _Source="PDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" [0218.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0218.608] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0218.608] wcscmp (_String1="PDIR20F.GIF", _String2=".") returned 1 [0218.608] wcscmp (_String1="PDIR20F.GIF", _String2="..") returned 1 [0218.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69582d8 [0218.608] wcscpy (in: _Dest=0x69582d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.608] wcscat (in: _Dest=0x69582d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.608] wcscat (in: _Dest=0x69582d8, _Source="PDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" [0218.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69582d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60 [0218.609] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0218.609] wcscmp (_String1="PDIR21F.GIF", _String2=".") returned 1 [0218.609] wcscmp (_String1="PDIR21F.GIF", _String2="..") returned 1 [0218.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958370 [0218.609] wcscpy (in: _Dest=0x6958370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.609] wcscat (in: _Dest=0x6958370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.609] wcscat (in: _Dest=0x6958370, _Source="PDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" [0218.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0218.610] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0218.610] wcscmp (_String1="PDIR22F.GIF", _String2=".") returned 1 [0218.610] wcscmp (_String1="PDIR22F.GIF", _String2="..") returned 1 [0218.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958408 [0218.610] wcscpy (in: _Dest=0x6958408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.610] wcscat (in: _Dest=0x6958408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.610] wcscat (in: _Dest=0x6958408, _Source="PDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" [0218.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0218.611] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0218.611] wcscmp (_String1="PDIR23F.GIF", _String2=".") returned 1 [0218.611] wcscmp (_String1="PDIR23F.GIF", _String2="..") returned 1 [0218.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69584a0 [0218.611] wcscpy (in: _Dest=0x69584a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.612] wcscat (in: _Dest=0x69584a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.612] wcscat (in: _Dest=0x69584a0, _Source="PDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" [0218.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69584a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0218.613] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0218.613] wcscmp (_String1="PDIR24F.GIF", _String2=".") returned 1 [0218.613] wcscmp (_String1="PDIR24F.GIF", _String2="..") returned 1 [0218.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958538 [0218.613] wcscpy (in: _Dest=0x6958538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.613] wcscat (in: _Dest=0x6958538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.613] wcscat (in: _Dest=0x6958538, _Source="PDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" [0218.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0218.614] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5286c200, ftCreationTime.dwHighDateTime=0x1bdb63f, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5286c200, ftLastWriteTime.dwHighDateTime=0x1bdb63f, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0218.614] wcscmp (_String1="PDIR25F.GIF", _String2=".") returned 1 [0218.614] wcscmp (_String1="PDIR25F.GIF", _String2="..") returned 1 [0218.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69585d0 [0218.614] wcscpy (in: _Dest=0x69585d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.615] wcscat (in: _Dest=0x69585d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.615] wcscat (in: _Dest=0x69585d0, _Source="PDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" [0218.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69585d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0218.616] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0218.616] wcscmp (_String1="PDIR26F.GIF", _String2=".") returned 1 [0218.616] wcscmp (_String1="PDIR26F.GIF", _String2="..") returned 1 [0218.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958668 [0218.616] wcscpy (in: _Dest=0x6958668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.616] wcscat (in: _Dest=0x6958668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.616] wcscat (in: _Dest=0x6958668, _Source="PDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" [0218.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac [0218.617] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0218.617] wcscmp (_String1="PDIR27F.GIF", _String2=".") returned 1 [0218.617] wcscmp (_String1="PDIR27F.GIF", _String2="..") returned 1 [0218.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958700 [0218.618] wcscpy (in: _Dest=0x6958700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.618] wcscat (in: _Dest=0x6958700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.618] wcscat (in: _Dest=0x6958700, _Source="PDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" [0218.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0218.619] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0218.619] wcscmp (_String1="PDIR28B.GIF", _String2=".") returned 1 [0218.619] wcscmp (_String1="PDIR28B.GIF", _String2="..") returned 1 [0218.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958798 [0218.619] wcscpy (in: _Dest=0x6958798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.619] wcscat (in: _Dest=0x6958798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.619] wcscat (in: _Dest=0x6958798, _Source="PDIR28B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" [0218.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0218.621] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0218.621] wcscmp (_String1="PDIR28F.GIF", _String2=".") returned 1 [0218.621] wcscmp (_String1="PDIR28F.GIF", _String2="..") returned 1 [0218.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958830 [0218.621] wcscpy (in: _Dest=0x6958830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.621] wcscat (in: _Dest=0x6958830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.621] wcscat (in: _Dest=0x6958830, _Source="PDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" [0218.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0218.622] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0218.622] wcscmp (_String1="PDIR29B.GIF", _String2=".") returned 1 [0218.622] wcscmp (_String1="PDIR29B.GIF", _String2="..") returned 1 [0218.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69588c8 [0218.622] wcscpy (in: _Dest=0x69588c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.622] wcscat (in: _Dest=0x69588c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.622] wcscat (in: _Dest=0x69588c8, _Source="PDIR29B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" [0218.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69588c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0218.623] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0218.623] wcscmp (_String1="PDIR29F.GIF", _String2=".") returned 1 [0218.624] wcscmp (_String1="PDIR29F.GIF", _String2="..") returned 1 [0218.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958960 [0218.624] wcscpy (in: _Dest=0x6958960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.624] wcscat (in: _Dest=0x6958960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.624] wcscat (in: _Dest=0x6958960, _Source="PDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" [0218.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0218.625] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca9c8000, ftCreationTime.dwHighDateTime=0x1bdb3d2, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca9c8000, ftLastWriteTime.dwHighDateTime=0x1bdb3d2, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0218.625] wcscmp (_String1="PDIR2B.GIF", _String2=".") returned 1 [0218.625] wcscmp (_String1="PDIR2B.GIF", _String2="..") returned 1 [0218.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dbfb8 [0218.625] wcscpy (in: _Dest=0x66dbfb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.625] wcscat (in: _Dest=0x66dbfb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.625] wcscat (in: _Dest=0x66dbfb8, _Source="PDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" [0218.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dbfb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0218.626] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0218.627] wcscmp (_String1="PDIR2F.GIF", _String2=".") returned 1 [0218.627] wcscmp (_String1="PDIR2F.GIF", _String2="..") returned 1 [0218.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcca8 [0218.627] wcscpy (in: _Dest=0x66dcca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.627] wcscat (in: _Dest=0x66dcca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.627] wcscat (in: _Dest=0x66dcca8, _Source="PDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" [0218.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0218.758] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0218.758] wcscmp (_String1="PDIR30B.GIF", _String2=".") returned 1 [0218.758] wcscmp (_String1="PDIR30B.GIF", _String2="..") returned 1 [0218.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958a90 [0218.758] wcscpy (in: _Dest=0x6958a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.758] wcscat (in: _Dest=0x6958a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.758] wcscat (in: _Dest=0x6958a90, _Source="PDIR30B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" [0219.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0219.210] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0219.210] wcscmp (_String1="PDIR30F.GIF", _String2=".") returned 1 [0219.210] wcscmp (_String1="PDIR30F.GIF", _String2="..") returned 1 [0219.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30b08 [0219.211] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.211] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.211] wcscat (in: _Dest=0x3e30b08, _Source="PDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" [0219.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8 [0219.212] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0219.212] wcscmp (_String1="PDIR31B.GIF", _String2=".") returned 1 [0219.212] wcscmp (_String1="PDIR31B.GIF", _String2="..") returned 1 [0219.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e32230 [0219.212] wcscpy (in: _Dest=0x3e32230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.212] wcscat (in: _Dest=0x3e32230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.212] wcscat (in: _Dest=0x3e32230, _Source="PDIR31B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" [0219.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e32230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0219.214] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0219.214] wcscmp (_String1="PDIR31F.GIF", _String2=".") returned 1 [0219.214] wcscmp (_String1="PDIR31F.GIF", _String2="..") returned 1 [0219.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69589f8 [0219.214] wcscpy (in: _Dest=0x69589f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.214] wcscat (in: _Dest=0x69589f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.214] wcscat (in: _Dest=0x69589f8, _Source="PDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" [0219.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69589f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0219.215] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0219.215] wcscmp (_String1="PDIR32B.GIF", _String2=".") returned 1 [0219.215] wcscmp (_String1="PDIR32B.GIF", _String2="..") returned 1 [0219.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959080 [0219.216] wcscpy (in: _Dest=0x6959080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.216] wcscat (in: _Dest=0x6959080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.216] wcscat (in: _Dest=0x6959080, _Source="PDIR32B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" [0219.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0219.217] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0219.217] wcscmp (_String1="PDIR32F.GIF", _String2=".") returned 1 [0219.217] wcscmp (_String1="PDIR32F.GIF", _String2="..") returned 1 [0219.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959118 [0219.217] wcscpy (in: _Dest=0x6959118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.217] wcscat (in: _Dest=0x6959118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.217] wcscat (in: _Dest=0x6959118, _Source="PDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" [0219.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0219.218] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0219.572] wcscmp (_String1="PDIR33B.GIF", _String2=".") returned 1 [0219.573] wcscmp (_String1="PDIR33B.GIF", _String2="..") returned 1 [0219.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958eb8 [0219.573] wcscpy (in: _Dest=0x6958eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.573] wcscat (in: _Dest=0x6958eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.573] wcscat (in: _Dest=0x6958eb8, _Source="PDIR33B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" [0219.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0219.668] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0219.668] wcscmp (_String1="PDIR33F.GIF", _String2=".") returned 1 [0219.668] wcscmp (_String1="PDIR33F.GIF", _String2="..") returned 1 [0219.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958bc0 [0219.668] wcscpy (in: _Dest=0x6958bc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.668] wcscat (in: _Dest=0x6958bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.668] wcscat (in: _Dest=0x6958bc0, _Source="PDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" [0219.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0219.669] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0219.670] wcscmp (_String1="PDIR34B.GIF", _String2=".") returned 1 [0219.670] wcscmp (_String1="PDIR34B.GIF", _String2="..") returned 1 [0219.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958b28 [0219.670] wcscpy (in: _Dest=0x6958b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.670] wcscat (in: _Dest=0x6958b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.670] wcscat (in: _Dest=0x6958b28, _Source="PDIR34B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" [0219.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0219.671] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0219.671] wcscmp (_String1="PDIR34F.GIF", _String2=".") returned 1 [0219.671] wcscmp (_String1="PDIR34F.GIF", _String2="..") returned 1 [0219.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958078 [0219.671] wcscpy (in: _Dest=0x6958078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.671] wcscat (in: _Dest=0x6958078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.671] wcscat (in: _Dest=0x6958078, _Source="PDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" [0219.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0219.672] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0219.672] wcscmp (_String1="PDIR35B.GIF", _String2=".") returned 1 [0219.672] wcscmp (_String1="PDIR35B.GIF", _String2="..") returned 1 [0219.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957ce8 [0219.672] wcscpy (in: _Dest=0x6957ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.672] wcscat (in: _Dest=0x6957ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.672] wcscat (in: _Dest=0x6957ce8, _Source="PDIR35B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" [0219.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0219.673] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0219.673] wcscmp (_String1="PDIR35F.GIF", _String2=".") returned 1 [0219.673] wcscmp (_String1="PDIR35F.GIF", _String2="..") returned 1 [0219.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957d80 [0219.673] wcscpy (in: _Dest=0x6957d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.673] wcscat (in: _Dest=0x6957d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.674] wcscat (in: _Dest=0x6957d80, _Source="PDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" [0219.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0219.674] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0219.674] wcscmp (_String1="PDIR36B.GIF", _String2=".") returned 1 [0219.675] wcscmp (_String1="PDIR36B.GIF", _String2="..") returned 1 [0219.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957e18 [0219.675] wcscpy (in: _Dest=0x6957e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.675] wcscat (in: _Dest=0x6957e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.675] wcscat (in: _Dest=0x6957e18, _Source="PDIR36B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" [0219.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0219.676] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0219.676] wcscmp (_String1="PDIR36F.GIF", _String2=".") returned 1 [0219.676] wcscmp (_String1="PDIR36F.GIF", _String2="..") returned 1 [0219.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957eb0 [0219.676] wcscpy (in: _Dest=0x6957eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.676] wcscat (in: _Dest=0x6957eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.676] wcscat (in: _Dest=0x6957eb0, _Source="PDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" [0219.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0219.677] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0219.677] wcscmp (_String1="PDIR37F.GIF", _String2=".") returned 1 [0219.677] wcscmp (_String1="PDIR37F.GIF", _String2="..") returned 1 [0219.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957f48 [0219.677] wcscpy (in: _Dest=0x6957f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.677] wcscat (in: _Dest=0x6957f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.677] wcscat (in: _Dest=0x6957f48, _Source="PDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" [0219.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0219.678] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0219.678] wcscmp (_String1="PDIR38F.GIF", _String2=".") returned 1 [0219.678] wcscmp (_String1="PDIR38F.GIF", _String2="..") returned 1 [0219.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958110 [0219.678] wcscpy (in: _Dest=0x6958110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.678] wcscat (in: _Dest=0x6958110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.678] wcscat (in: _Dest=0x6958110, _Source="PDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" [0219.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0219.679] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0219.679] wcscmp (_String1="PDIR39F.GIF", _String2=".") returned 1 [0219.679] wcscmp (_String1="PDIR39F.GIF", _String2="..") returned 1 [0219.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6957fe0 [0219.680] wcscpy (in: _Dest=0x6957fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.680] wcscat (in: _Dest=0x6957fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.680] wcscat (in: _Dest=0x6957fe0, _Source="PDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" [0219.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6957fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0219.681] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0219.681] wcscmp (_String1="PDIR3B.GIF", _String2=".") returned 1 [0219.681] wcscmp (_String1="PDIR3B.GIF", _String2="..") returned 1 [0219.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc5e8 [0219.681] wcscpy (in: _Dest=0x66dc5e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.681] wcscat (in: _Dest=0x66dc5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.681] wcscat (in: _Dest=0x66dc5e8, _Source="PDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" [0219.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0219.682] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0219.682] wcscmp (_String1="PDIR3F.GIF", _String2=".") returned 1 [0219.682] wcscmp (_String1="PDIR3F.GIF", _String2="..") returned 1 [0219.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db868 [0219.682] wcscpy (in: _Dest=0x66db868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.682] wcscat (in: _Dest=0x66db868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.682] wcscat (in: _Dest=0x66db868, _Source="PDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" [0219.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0219.683] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0219.683] wcscmp (_String1="PDIR40F.GIF", _String2=".") returned 1 [0219.683] wcscmp (_String1="PDIR40F.GIF", _String2="..") returned 1 [0219.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958fe8 [0219.684] wcscpy (in: _Dest=0x6958fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.684] wcscat (in: _Dest=0x6958fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.684] wcscat (in: _Dest=0x6958fe8, _Source="PDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" [0219.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc [0219.685] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0219.685] wcscmp (_String1="PDIR41F.GIF", _String2=".") returned 1 [0219.685] wcscmp (_String1="PDIR41F.GIF", _String2="..") returned 1 [0219.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6958f50 [0219.685] wcscpy (in: _Dest=0x6958f50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.685] wcscat (in: _Dest=0x6958f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.685] wcscat (in: _Dest=0x6958f50, _Source="PDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" [0219.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6958f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0219.686] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0219.686] wcscmp (_String1="PDIR42F.GIF", _String2=".") returned 1 [0219.686] wcscmp (_String1="PDIR42F.GIF", _String2="..") returned 1 [0219.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69591b0 [0219.686] wcscpy (in: _Dest=0x69591b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.686] wcscat (in: _Dest=0x69591b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.686] wcscat (in: _Dest=0x69591b0, _Source="PDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" [0219.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69591b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0219.687] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0219.687] wcscmp (_String1="PDIR43B.GIF", _String2=".") returned 1 [0219.687] wcscmp (_String1="PDIR43B.GIF", _String2="..") returned 1 [0219.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959248 [0219.687] wcscpy (in: _Dest=0x6959248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.687] wcscat (in: _Dest=0x6959248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.687] wcscat (in: _Dest=0x6959248, _Source="PDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" [0219.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0219.689] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0219.689] wcscmp (_String1="PDIR43F.GIF", _String2=".") returned 1 [0219.689] wcscmp (_String1="PDIR43F.GIF", _String2="..") returned 1 [0219.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69592e0 [0219.689] wcscpy (in: _Dest=0x69592e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.689] wcscat (in: _Dest=0x69592e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.689] wcscat (in: _Dest=0x69592e0, _Source="PDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" [0219.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69592e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x278 [0219.690] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0219.690] wcscmp (_String1="PDIR44B.GIF", _String2=".") returned 1 [0219.690] wcscmp (_String1="PDIR44B.GIF", _String2="..") returned 1 [0219.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959378 [0219.690] wcscpy (in: _Dest=0x6959378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.690] wcscat (in: _Dest=0x6959378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.690] wcscat (in: _Dest=0x6959378, _Source="PDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" [0219.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0219.691] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0219.691] wcscmp (_String1="PDIR44F.GIF", _String2=".") returned 1 [0219.691] wcscmp (_String1="PDIR44F.GIF", _String2="..") returned 1 [0219.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959410 [0219.692] wcscpy (in: _Dest=0x6959410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.692] wcscat (in: _Dest=0x6959410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.692] wcscat (in: _Dest=0x6959410, _Source="PDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" [0219.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0219.693] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0219.693] wcscmp (_String1="PDIR45B.GIF", _String2=".") returned 1 [0219.693] wcscmp (_String1="PDIR45B.GIF", _String2="..") returned 1 [0219.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69594a8 [0219.693] wcscpy (in: _Dest=0x69594a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.693] wcscat (in: _Dest=0x69594a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.693] wcscat (in: _Dest=0x69594a8, _Source="PDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" [0219.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69594a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0219.694] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0219.694] wcscmp (_String1="PDIR45F.GIF", _String2=".") returned 1 [0219.694] wcscmp (_String1="PDIR45F.GIF", _String2="..") returned 1 [0219.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959540 [0219.694] wcscpy (in: _Dest=0x6959540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.694] wcscat (in: _Dest=0x6959540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.694] wcscat (in: _Dest=0x6959540, _Source="PDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" [0219.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0219.696] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0219.696] wcscmp (_String1="PDIR46B.GIF", _String2=".") returned 1 [0219.696] wcscmp (_String1="PDIR46B.GIF", _String2="..") returned 1 [0219.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69595d8 [0219.696] wcscpy (in: _Dest=0x69595d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.696] wcscat (in: _Dest=0x69595d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.696] wcscat (in: _Dest=0x69595d8, _Source="PDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" [0219.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69595d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0219.697] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0219.697] wcscmp (_String1="PDIR46F.GIF", _String2=".") returned 1 [0219.697] wcscmp (_String1="PDIR46F.GIF", _String2="..") returned 1 [0219.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959670 [0219.697] wcscpy (in: _Dest=0x6959670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.697] wcscat (in: _Dest=0x6959670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.697] wcscat (in: _Dest=0x6959670, _Source="PDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" [0219.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0219.698] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0219.698] wcscmp (_String1="PDIR47B.GIF", _String2=".") returned 1 [0219.698] wcscmp (_String1="PDIR47B.GIF", _String2="..") returned 1 [0219.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959708 [0219.698] wcscpy (in: _Dest=0x6959708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.698] wcscat (in: _Dest=0x6959708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.698] wcscat (in: _Dest=0x6959708, _Source="PDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" [0219.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0219.699] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0219.699] wcscmp (_String1="PDIR47F.GIF", _String2=".") returned 1 [0219.699] wcscmp (_String1="PDIR47F.GIF", _String2="..") returned 1 [0219.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69597a0 [0219.700] wcscpy (in: _Dest=0x69597a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.700] wcscat (in: _Dest=0x69597a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.700] wcscat (in: _Dest=0x69597a0, _Source="PDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" [0219.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69597a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0219.701] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0219.701] wcscmp (_String1="PDIR48B.GIF", _String2=".") returned 1 [0219.701] wcscmp (_String1="PDIR48B.GIF", _String2="..") returned 1 [0219.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959838 [0219.701] wcscpy (in: _Dest=0x6959838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.701] wcscat (in: _Dest=0x6959838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.701] wcscat (in: _Dest=0x6959838, _Source="PDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" [0219.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0219.702] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0219.702] wcscmp (_String1="PDIR48F.GIF", _String2=".") returned 1 [0219.702] wcscmp (_String1="PDIR48F.GIF", _String2="..") returned 1 [0219.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x69598d0 [0219.702] wcscpy (in: _Dest=0x69598d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.702] wcscat (in: _Dest=0x69598d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.702] wcscat (in: _Dest=0x69598d0, _Source="PDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" [0219.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x69598d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc [0219.703] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0219.703] wcscmp (_String1="PDIR49B.GIF", _String2=".") returned 1 [0219.703] wcscmp (_String1="PDIR49B.GIF", _String2="..") returned 1 [0219.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959968 [0219.703] wcscpy (in: _Dest=0x6959968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.703] wcscat (in: _Dest=0x6959968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.703] wcscat (in: _Dest=0x6959968, _Source="PDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" [0219.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0219.854] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0219.854] wcscmp (_String1="PDIR49F.GIF", _String2=".") returned 1 [0219.854] wcscmp (_String1="PDIR49F.GIF", _String2="..") returned 1 [0219.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959b30 [0219.854] wcscpy (in: _Dest=0x6959b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0219.854] wcscat (in: _Dest=0x6959b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0219.854] wcscat (in: _Dest=0x6959b30, _Source="PDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" [0220.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0220.020] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0220.020] wcscmp (_String1="PDIR4B.GIF", _String2=".") returned 1 [0220.020] wcscmp (_String1="PDIR4B.GIF", _String2="..") returned 1 [0220.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db508 [0220.020] wcscpy (in: _Dest=0x66db508, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.020] wcscat (in: _Dest=0x66db508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.020] wcscat (in: _Dest=0x66db508, _Source="PDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" [0220.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0220.021] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0220.021] wcscmp (_String1="PDIR4F.GIF", _String2=".") returned 1 [0220.021] wcscmp (_String1="PDIR4F.GIF", _String2="..") returned 1 [0220.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dce58 [0220.021] wcscpy (in: _Dest=0x66dce58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.021] wcscat (in: _Dest=0x66dce58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.021] wcscat (in: _Dest=0x66dce58, _Source="PDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" [0220.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dce58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0220.023] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0220.023] wcscmp (_String1="PDIR50B.GIF", _String2=".") returned 1 [0220.023] wcscmp (_String1="PDIR50B.GIF", _String2="..") returned 1 [0220.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6959bc8 [0220.023] wcscpy (in: _Dest=0x6959bc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.023] wcscat (in: _Dest=0x6959bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.023] wcscat (in: _Dest=0x6959bc8, _Source="PDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" [0220.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6959bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0220.025] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0220.025] wcscmp (_String1="PDIR50F.GIF", _String2=".") returned 1 [0220.025] wcscmp (_String1="PDIR50F.GIF", _String2="..") returned 1 [0220.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cf48 [0220.025] wcscpy (in: _Dest=0x32cf48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.025] wcscat (in: _Dest=0x32cf48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.025] wcscat (in: _Dest=0x32cf48, _Source="PDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" [0220.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0220.026] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0220.463] wcscmp (_String1="PDIR51B.GIF", _String2=".") returned 1 [0220.463] wcscmp (_String1="PDIR51B.GIF", _String2="..") returned 1 [0220.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0220.463] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.463] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.463] wcscat (in: _Dest=0x32c660, _Source="PDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" [0220.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0220.537] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0220.537] wcscmp (_String1="PDIR51F.GIF", _String2=".") returned 1 [0220.537] wcscmp (_String1="PDIR51F.GIF", _String2="..") returned 1 [0220.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cd80 [0220.537] wcscpy (in: _Dest=0x32cd80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.537] wcscat (in: _Dest=0x32cd80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.537] wcscat (in: _Dest=0x32cd80, _Source="PDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" [0220.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32cd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304 [0220.539] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0220.539] wcscmp (_String1="PDIR5B.GIF", _String2=".") returned 1 [0220.539] wcscmp (_String1="PDIR5B.GIF", _String2="..") returned 1 [0220.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc048 [0220.539] wcscpy (in: _Dest=0x66dc048, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.539] wcscat (in: _Dest=0x66dc048, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.539] wcscat (in: _Dest=0x66dc048, _Source="PDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" [0220.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310 [0220.541] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0220.541] wcscmp (_String1="PDIR5F.GIF", _String2=".") returned 1 [0220.541] wcscmp (_String1="PDIR5F.GIF", _String2="..") returned 1 [0220.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc168 [0220.541] wcscpy (in: _Dest=0x66dc168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.541] wcscat (in: _Dest=0x66dc168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.541] wcscat (in: _Dest=0x66dc168, _Source="PDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" [0220.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0220.542] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0220.543] wcscmp (_String1="PDIR6B.GIF", _String2=".") returned 1 [0220.543] wcscmp (_String1="PDIR6B.GIF", _String2="..") returned 1 [0220.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66db628 [0220.543] wcscpy (in: _Dest=0x66db628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.543] wcscat (in: _Dest=0x66db628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.543] wcscat (in: _Dest=0x66db628, _Source="PDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" [0220.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66db628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0220.544] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0220.544] wcscmp (_String1="PDIR6F.GIF", _String2=".") returned 1 [0220.544] wcscmp (_String1="PDIR6F.GIF", _String2="..") returned 1 [0220.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc558 [0220.545] wcscpy (in: _Dest=0x66dc558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.545] wcscat (in: _Dest=0x66dc558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.545] wcscat (in: _Dest=0x66dc558, _Source="PDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" [0220.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0220.546] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0220.546] wcscmp (_String1="PDIR7B.GIF", _String2=".") returned 1 [0220.546] wcscmp (_String1="PDIR7B.GIF", _String2="..") returned 1 [0220.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc438 [0220.546] wcscpy (in: _Dest=0x66dc438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.546] wcscat (in: _Dest=0x66dc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.546] wcscat (in: _Dest=0x66dc438, _Source="PDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" [0220.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0220.548] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0220.548] wcscmp (_String1="PDIR7F.GIF", _String2=".") returned 1 [0220.548] wcscmp (_String1="PDIR7F.GIF", _String2="..") returned 1 [0220.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcdc8 [0220.548] wcscpy (in: _Dest=0x66dcdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.548] wcscat (in: _Dest=0x66dcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.548] wcscat (in: _Dest=0x66dcdc8, _Source="PDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" [0220.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0220.549] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0220.550] wcscmp (_String1="PDIR8B.GIF", _String2=".") returned 1 [0220.550] wcscmp (_String1="PDIR8B.GIF", _String2="..") returned 1 [0220.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc678 [0220.550] wcscpy (in: _Dest=0x66dc678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.550] wcscat (in: _Dest=0x66dc678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.550] wcscat (in: _Dest=0x66dc678, _Source="PDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" [0220.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0220.551] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0220.551] wcscmp (_String1="PDIR8F.GIF", _String2=".") returned 1 [0220.551] wcscmp (_String1="PDIR8F.GIF", _String2="..") returned 1 [0220.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dcd38 [0220.552] wcscpy (in: _Dest=0x66dcd38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.552] wcscat (in: _Dest=0x66dcd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.552] wcscat (in: _Dest=0x66dcd38, _Source="PDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" [0220.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dcd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0220.553] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0220.553] wcscmp (_String1="PDIR9B.GIF", _String2=".") returned 1 [0220.553] wcscmp (_String1="PDIR9B.GIF", _String2="..") returned 1 [0220.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dc948 [0220.553] wcscpy (in: _Dest=0x66dc948, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.553] wcscat (in: _Dest=0x66dc948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.553] wcscat (in: _Dest=0x66dc948, _Source="PDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" [0220.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dc948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0220.555] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0220.555] wcscmp (_String1="PDIR9F.GIF", _String2=".") returned 1 [0220.555] wcscmp (_String1="PDIR9F.GIF", _String2="..") returned 1 [0220.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x66dd008 [0220.555] wcscpy (in: _Dest=0x66dd008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.555] wcscat (in: _Dest=0x66dd008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.555] wcscat (in: _Dest=0x66dd008, _Source="PDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" [0220.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x66dd008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0220.556] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0220.556] wcscmp (_String1="ZPAPERS.INI", _String2=".") returned 1 [0220.556] wcscmp (_String1="ZPAPERS.INI", _String2="..") returned 1 [0220.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d700 [0220.556] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.557] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.557] wcscat (in: _Dest=0x32d700, _Source="ZPAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" [0220.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0220.558] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0220.558] wcscmp (_String1="ZPDIR00.GIF", _String2=".") returned 1 [0220.558] wcscmp (_String1="ZPDIR00.GIF", _String2="..") returned 1 [0220.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d4a0 [0220.558] wcscpy (in: _Dest=0x32d4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.558] wcscat (in: _Dest=0x32d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.558] wcscat (in: _Dest=0x32d4a0, _Source="ZPDIR00.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" [0220.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0220.560] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0220.560] wcscmp (_String1="ZPDIR10F.GIF", _String2=".") returned 1 [0220.560] wcscmp (_String1="ZPDIR10F.GIF", _String2="..") returned 1 [0220.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0220.560] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.560] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.560] wcscat (in: _Dest=0x32d2d8, _Source="ZPDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" [0220.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0220.562] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0220.562] wcscmp (_String1="ZPDIR11F.GIF", _String2=".") returned 1 [0220.562] wcscmp (_String1="ZPDIR11F.GIF", _String2="..") returned 1 [0220.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0220.562] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.562] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.562] wcscat (in: _Dest=0x32d668, _Source="ZPDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" [0220.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0220.564] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0220.564] wcscmp (_String1="ZPDIR12F.GIF", _String2=".") returned 1 [0220.564] wcscmp (_String1="ZPDIR12F.GIF", _String2="..") returned 1 [0220.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e30e00 [0220.564] wcscpy (in: _Dest=0x3e30e00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.564] wcscat (in: _Dest=0x3e30e00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.564] wcscat (in: _Dest=0x3e30e00, _Source="ZPDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" [0220.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0220.565] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0220.565] wcscmp (_String1="ZPDIR13F.GIF", _String2=".") returned 1 [0220.565] wcscmp (_String1="ZPDIR13F.GIF", _String2="..") returned 1 [0220.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e322c8 [0220.565] wcscpy (in: _Dest=0x3e322c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.565] wcscat (in: _Dest=0x3e322c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.566] wcscat (in: _Dest=0x3e322c8, _Source="ZPDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" [0220.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e322c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0220.567] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0220.567] wcscmp (_String1="ZPDIR14F.GIF", _String2=".") returned 1 [0220.567] wcscmp (_String1="ZPDIR14F.GIF", _String2="..") returned 1 [0220.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3e31650 [0220.567] wcscpy (in: _Dest=0x3e31650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.567] wcscat (in: _Dest=0x3e31650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.567] wcscat (in: _Dest=0x3e31650, _Source="ZPDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" [0220.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0220.569] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0220.569] wcscmp (_String1="ZPDIR15F.GIF", _String2=".") returned 1 [0220.569] wcscmp (_String1="ZPDIR15F.GIF", _String2="..") returned 1 [0220.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a92ce8 [0220.569] wcscpy (in: _Dest=0x6a92ce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.569] wcscat (in: _Dest=0x6a92ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.569] wcscat (in: _Dest=0x6a92ce8, _Source="ZPDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" [0220.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0220.570] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0220.570] wcscmp (_String1="ZPDIR16F.GIF", _String2=".") returned 1 [0220.570] wcscmp (_String1="ZPDIR16F.GIF", _String2="..") returned 1 [0220.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a92d80 [0220.571] wcscpy (in: _Dest=0x6a92d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.571] wcscat (in: _Dest=0x6a92d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.571] wcscat (in: _Dest=0x6a92d80, _Source="ZPDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" [0220.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0220.572] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0220.572] wcscmp (_String1="ZPDIR17F.GIF", _String2=".") returned 1 [0220.572] wcscmp (_String1="ZPDIR17F.GIF", _String2="..") returned 1 [0220.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a92e18 [0220.573] wcscpy (in: _Dest=0x6a92e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.573] wcscat (in: _Dest=0x6a92e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.573] wcscat (in: _Dest=0x6a92e18, _Source="ZPDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" [0220.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0220.674] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0220.674] wcscmp (_String1="ZPDIR18F.GIF", _String2=".") returned 1 [0220.674] wcscmp (_String1="ZPDIR18F.GIF", _String2="..") returned 1 [0220.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a92eb0 [0220.674] wcscpy (in: _Dest=0x6a92eb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.674] wcscat (in: _Dest=0x6a92eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.674] wcscat (in: _Dest=0x6a92eb0, _Source="ZPDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" [0220.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0220.894] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0220.894] wcscmp (_String1="ZPDIR19F.GIF", _String2=".") returned 1 [0220.894] wcscmp (_String1="ZPDIR19F.GIF", _String2="..") returned 1 [0220.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a92f48 [0220.894] wcscpy (in: _Dest=0x6a92f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.894] wcscat (in: _Dest=0x6a92f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.895] wcscat (in: _Dest=0x6a92f48, _Source="ZPDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" [0220.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0220.896] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0220.896] wcscmp (_String1="ZPDIR1B.GIF", _String2=".") returned 1 [0220.896] wcscmp (_String1="ZPDIR1B.GIF", _String2="..") returned 1 [0220.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a92fe0 [0220.896] wcscpy (in: _Dest=0x6a92fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.896] wcscat (in: _Dest=0x6a92fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.896] wcscat (in: _Dest=0x6a92fe0, _Source="ZPDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" [0220.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a92fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0220.897] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0220.897] wcscmp (_String1="ZPDIR1F.GIF", _String2=".") returned 1 [0220.897] wcscmp (_String1="ZPDIR1F.GIF", _String2="..") returned 1 [0220.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a93078 [0220.898] wcscpy (in: _Dest=0x6a93078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.898] wcscat (in: _Dest=0x6a93078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.898] wcscat (in: _Dest=0x6a93078, _Source="ZPDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" [0220.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0220.899] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0220.899] wcscmp (_String1="ZPDIR20F.GIF", _String2=".") returned 1 [0220.899] wcscmp (_String1="ZPDIR20F.GIF", _String2="..") returned 1 [0220.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93110 [0220.899] wcscpy (in: _Dest=0x6a93110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.899] wcscat (in: _Dest=0x6a93110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.899] wcscat (in: _Dest=0x6a93110, _Source="ZPDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" [0220.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0220.901] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0220.901] wcscmp (_String1="ZPDIR21F.GIF", _String2=".") returned 1 [0220.901] wcscmp (_String1="ZPDIR21F.GIF", _String2="..") returned 1 [0220.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a931a8 [0220.901] wcscpy (in: _Dest=0x6a931a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.901] wcscat (in: _Dest=0x6a931a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.901] wcscat (in: _Dest=0x6a931a8, _Source="ZPDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" [0220.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a931a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0220.903] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0220.903] wcscmp (_String1="ZPDIR22F.GIF", _String2=".") returned 1 [0220.903] wcscmp (_String1="ZPDIR22F.GIF", _String2="..") returned 1 [0220.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93240 [0220.903] wcscpy (in: _Dest=0x6a93240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.904] wcscat (in: _Dest=0x6a93240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.904] wcscat (in: _Dest=0x6a93240, _Source="ZPDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" [0220.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0220.905] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1 [0220.905] wcscmp (_String1="ZPDIR23F.GIF", _String2=".") returned 1 [0220.905] wcscmp (_String1="ZPDIR23F.GIF", _String2="..") returned 1 [0220.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a932d8 [0220.905] wcscpy (in: _Dest=0x6a932d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.905] wcscat (in: _Dest=0x6a932d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.905] wcscat (in: _Dest=0x6a932d8, _Source="ZPDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" [0220.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a932d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0220.906] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1 [0220.906] wcscmp (_String1="ZPDIR24F.GIF", _String2=".") returned 1 [0220.906] wcscmp (_String1="ZPDIR24F.GIF", _String2="..") returned 1 [0220.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93370 [0220.907] wcscpy (in: _Dest=0x6a93370, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.907] wcscat (in: _Dest=0x6a93370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.907] wcscat (in: _Dest=0x6a93370, _Source="ZPDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" [0220.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0220.909] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1 [0220.909] wcscmp (_String1="ZPDIR25F.GIF", _String2=".") returned 1 [0220.909] wcscmp (_String1="ZPDIR25F.GIF", _String2="..") returned 1 [0220.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93408 [0220.909] wcscpy (in: _Dest=0x6a93408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.909] wcscat (in: _Dest=0x6a93408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.909] wcscat (in: _Dest=0x6a93408, _Source="ZPDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" [0220.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0220.911] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1 [0220.911] wcscmp (_String1="ZPDIR26F.GIF", _String2=".") returned 1 [0220.911] wcscmp (_String1="ZPDIR26F.GIF", _String2="..") returned 1 [0220.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a934a0 [0220.911] wcscpy (in: _Dest=0x6a934a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.911] wcscat (in: _Dest=0x6a934a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.911] wcscat (in: _Dest=0x6a934a0, _Source="ZPDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" [0220.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a934a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0220.912] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1 [0220.912] wcscmp (_String1="ZPDIR27F.GIF", _String2=".") returned 1 [0220.912] wcscmp (_String1="ZPDIR27F.GIF", _String2="..") returned 1 [0220.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93538 [0220.912] wcscpy (in: _Dest=0x6a93538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0220.912] wcscat (in: _Dest=0x6a93538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0220.912] wcscat (in: _Dest=0x6a93538, _Source="ZPDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" [0220.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0220.913] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1 [0221.240] wcscmp (_String1="ZPDIR28F.GIF", _String2=".") returned 1 [0221.240] wcscmp (_String1="ZPDIR28F.GIF", _String2="..") returned 1 [0221.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a935d0 [0221.240] wcscpy (in: _Dest=0x6a935d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.240] wcscat (in: _Dest=0x6a935d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.240] wcscat (in: _Dest=0x6a935d0, _Source="ZPDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" [0221.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a935d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0221.273] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1 [0221.273] wcscmp (_String1="ZPDIR29F.GIF", _String2=".") returned 1 [0221.273] wcscmp (_String1="ZPDIR29F.GIF", _String2="..") returned 1 [0221.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93668 [0221.273] wcscpy (in: _Dest=0x6a93668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.273] wcscat (in: _Dest=0x6a93668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.273] wcscat (in: _Dest=0x6a93668, _Source="ZPDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" [0221.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0221.274] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dadf00, ftCreationTime.dwHighDateTime=0x1bdb408, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5dadf00, ftLastWriteTime.dwHighDateTime=0x1bdb408, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1 [0221.274] wcscmp (_String1="ZPDIR2B.GIF", _String2=".") returned 1 [0221.274] wcscmp (_String1="ZPDIR2B.GIF", _String2="..") returned 1 [0221.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a93700 [0221.275] wcscpy (in: _Dest=0x6a93700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.275] wcscat (in: _Dest=0x6a93700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.275] wcscat (in: _Dest=0x6a93700, _Source="ZPDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" [0221.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0221.276] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1 [0221.276] wcscmp (_String1="ZPDIR2F.GIF", _String2=".") returned 1 [0221.276] wcscmp (_String1="ZPDIR2F.GIF", _String2="..") returned 1 [0221.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a93798 [0221.276] wcscpy (in: _Dest=0x6a93798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.276] wcscat (in: _Dest=0x6a93798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.276] wcscat (in: _Dest=0x6a93798, _Source="ZPDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" [0221.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0221.277] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1 [0221.277] wcscmp (_String1="ZPDIR30F.GIF", _String2=".") returned 1 [0221.277] wcscmp (_String1="ZPDIR30F.GIF", _String2="..") returned 1 [0221.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93830 [0221.277] wcscpy (in: _Dest=0x6a93830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.277] wcscat (in: _Dest=0x6a93830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.277] wcscat (in: _Dest=0x6a93830, _Source="ZPDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" [0221.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0221.278] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1 [0221.278] wcscmp (_String1="ZPDIR31F.GIF", _String2=".") returned 1 [0221.278] wcscmp (_String1="ZPDIR31F.GIF", _String2="..") returned 1 [0221.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a938c8 [0221.278] wcscpy (in: _Dest=0x6a938c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.278] wcscat (in: _Dest=0x6a938c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.278] wcscat (in: _Dest=0x6a938c8, _Source="ZPDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" [0221.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a938c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0221.279] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1 [0221.279] wcscmp (_String1="ZPDIR32F.GIF", _String2=".") returned 1 [0221.279] wcscmp (_String1="ZPDIR32F.GIF", _String2="..") returned 1 [0221.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93960 [0221.280] wcscpy (in: _Dest=0x6a93960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.280] wcscat (in: _Dest=0x6a93960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.280] wcscat (in: _Dest=0x6a93960, _Source="ZPDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" [0221.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0221.281] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1 [0221.281] wcscmp (_String1="ZPDIR33F.GIF", _String2=".") returned 1 [0221.281] wcscmp (_String1="ZPDIR33F.GIF", _String2="..") returned 1 [0221.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a939f8 [0221.281] wcscpy (in: _Dest=0x6a939f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.281] wcscat (in: _Dest=0x6a939f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.281] wcscat (in: _Dest=0x6a939f8, _Source="ZPDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" [0221.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a939f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0221.282] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1 [0221.282] wcscmp (_String1="ZPDIR34F.GIF", _String2=".") returned 1 [0221.282] wcscmp (_String1="ZPDIR34F.GIF", _String2="..") returned 1 [0221.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93a90 [0221.283] wcscpy (in: _Dest=0x6a93a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.283] wcscat (in: _Dest=0x6a93a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.283] wcscat (in: _Dest=0x6a93a90, _Source="ZPDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" [0221.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0221.284] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1 [0221.284] wcscmp (_String1="ZPDIR35F.GIF", _String2=".") returned 1 [0221.284] wcscmp (_String1="ZPDIR35F.GIF", _String2="..") returned 1 [0221.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93b28 [0221.284] wcscpy (in: _Dest=0x6a93b28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.284] wcscat (in: _Dest=0x6a93b28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.284] wcscat (in: _Dest=0x6a93b28, _Source="ZPDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" [0221.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0221.285] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1 [0221.285] wcscmp (_String1="ZPDIR36F.GIF", _String2=".") returned 1 [0221.285] wcscmp (_String1="ZPDIR36F.GIF", _String2="..") returned 1 [0221.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93bc0 [0221.285] wcscpy (in: _Dest=0x6a93bc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.285] wcscat (in: _Dest=0x6a93bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.285] wcscat (in: _Dest=0x6a93bc0, _Source="ZPDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" [0221.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0221.286] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1 [0221.286] wcscmp (_String1="ZPDIR37F.GIF", _String2=".") returned 1 [0221.287] wcscmp (_String1="ZPDIR37F.GIF", _String2="..") returned 1 [0221.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93c58 [0221.287] wcscpy (in: _Dest=0x6a93c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.287] wcscat (in: _Dest=0x6a93c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.287] wcscat (in: _Dest=0x6a93c58, _Source="ZPDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" [0221.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0221.288] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1 [0221.288] wcscmp (_String1="ZPDIR38F.GIF", _String2=".") returned 1 [0221.288] wcscmp (_String1="ZPDIR38F.GIF", _String2="..") returned 1 [0221.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93cf0 [0221.288] wcscpy (in: _Dest=0x6a93cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.288] wcscat (in: _Dest=0x6a93cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.288] wcscat (in: _Dest=0x6a93cf0, _Source="ZPDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" [0221.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb0 [0221.289] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1 [0221.290] wcscmp (_String1="ZPDIR39F.GIF", _String2=".") returned 1 [0221.290] wcscmp (_String1="ZPDIR39F.GIF", _String2="..") returned 1 [0221.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93d88 [0221.290] wcscpy (in: _Dest=0x6a93d88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.290] wcscat (in: _Dest=0x6a93d88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.290] wcscat (in: _Dest=0x6a93d88, _Source="ZPDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" [0221.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0221.291] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1 [0221.291] wcscmp (_String1="ZPDIR3B.GIF", _String2=".") returned 1 [0221.291] wcscmp (_String1="ZPDIR3B.GIF", _String2="..") returned 1 [0221.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a93e20 [0221.291] wcscpy (in: _Dest=0x6a93e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.291] wcscat (in: _Dest=0x6a93e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.291] wcscat (in: _Dest=0x6a93e20, _Source="ZPDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" [0221.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0221.292] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1 [0221.292] wcscmp (_String1="ZPDIR3F.GIF", _String2=".") returned 1 [0221.292] wcscmp (_String1="ZPDIR3F.GIF", _String2="..") returned 1 [0221.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a93eb8 [0221.292] wcscpy (in: _Dest=0x6a93eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.293] wcscat (in: _Dest=0x6a93eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.293] wcscat (in: _Dest=0x6a93eb8, _Source="ZPDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" [0221.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0221.294] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1 [0221.294] wcscmp (_String1="ZPDIR40F.GIF", _String2=".") returned 1 [0221.294] wcscmp (_String1="ZPDIR40F.GIF", _String2="..") returned 1 [0221.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93f50 [0221.294] wcscpy (in: _Dest=0x6a93f50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.294] wcscat (in: _Dest=0x6a93f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.294] wcscat (in: _Dest=0x6a93f50, _Source="ZPDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" [0221.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0221.295] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1 [0221.295] wcscmp (_String1="ZPDIR41F.GIF", _String2=".") returned 1 [0221.295] wcscmp (_String1="ZPDIR41F.GIF", _String2="..") returned 1 [0221.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a93fe8 [0221.295] wcscpy (in: _Dest=0x6a93fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.295] wcscat (in: _Dest=0x6a93fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.295] wcscat (in: _Dest=0x6a93fe8, _Source="ZPDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" [0221.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a93fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0221.296] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1 [0221.296] wcscmp (_String1="ZPDIR42F.GIF", _String2=".") returned 1 [0221.296] wcscmp (_String1="ZPDIR42F.GIF", _String2="..") returned 1 [0221.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94080 [0221.297] wcscpy (in: _Dest=0x6a94080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.297] wcscat (in: _Dest=0x6a94080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.297] wcscat (in: _Dest=0x6a94080, _Source="ZPDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" [0221.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010 [0221.298] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1 [0221.298] wcscmp (_String1="ZPDIR43B.GIF", _String2=".") returned 1 [0221.298] wcscmp (_String1="ZPDIR43B.GIF", _String2="..") returned 1 [0221.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94118 [0221.298] wcscpy (in: _Dest=0x6a94118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.298] wcscat (in: _Dest=0x6a94118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.298] wcscat (in: _Dest=0x6a94118, _Source="ZPDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" [0221.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0221.299] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1 [0221.299] wcscmp (_String1="ZPDIR43F.GIF", _String2=".") returned 1 [0221.299] wcscmp (_String1="ZPDIR43F.GIF", _String2="..") returned 1 [0221.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a941b0 [0221.299] wcscpy (in: _Dest=0x6a941b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.299] wcscat (in: _Dest=0x6a941b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.299] wcscat (in: _Dest=0x6a941b0, _Source="ZPDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" [0221.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a941b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0221.300] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1 [0221.300] wcscmp (_String1="ZPDIR44B.GIF", _String2=".") returned 1 [0221.300] wcscmp (_String1="ZPDIR44B.GIF", _String2="..") returned 1 [0221.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94248 [0221.301] wcscpy (in: _Dest=0x6a94248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.301] wcscat (in: _Dest=0x6a94248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.301] wcscat (in: _Dest=0x6a94248, _Source="ZPDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" [0221.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0221.302] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1 [0221.302] wcscmp (_String1="ZPDIR44F.GIF", _String2=".") returned 1 [0221.302] wcscmp (_String1="ZPDIR44F.GIF", _String2="..") returned 1 [0221.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a942e0 [0221.302] wcscpy (in: _Dest=0x6a942e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.302] wcscat (in: _Dest=0x6a942e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.302] wcscat (in: _Dest=0x6a942e0, _Source="ZPDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" [0221.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a942e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0221.303] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1 [0221.303] wcscmp (_String1="ZPDIR45B.GIF", _String2=".") returned 1 [0221.303] wcscmp (_String1="ZPDIR45B.GIF", _String2="..") returned 1 [0221.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94378 [0221.303] wcscpy (in: _Dest=0x6a94378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.303] wcscat (in: _Dest=0x6a94378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.303] wcscat (in: _Dest=0x6a94378, _Source="ZPDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" [0221.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0221.305] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1 [0221.305] wcscmp (_String1="ZPDIR45F.GIF", _String2=".") returned 1 [0221.305] wcscmp (_String1="ZPDIR45F.GIF", _String2="..") returned 1 [0221.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94410 [0221.305] wcscpy (in: _Dest=0x6a94410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.305] wcscat (in: _Dest=0x6a94410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.305] wcscat (in: _Dest=0x6a94410, _Source="ZPDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" [0221.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0221.306] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1 [0221.306] wcscmp (_String1="ZPDIR46B.GIF", _String2=".") returned 1 [0221.306] wcscmp (_String1="ZPDIR46B.GIF", _String2="..") returned 1 [0221.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a944a8 [0221.306] wcscpy (in: _Dest=0x6a944a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.306] wcscat (in: _Dest=0x6a944a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.306] wcscat (in: _Dest=0x6a944a8, _Source="ZPDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" [0221.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a944a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0221.308] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1 [0221.308] wcscmp (_String1="ZPDIR46F.GIF", _String2=".") returned 1 [0221.308] wcscmp (_String1="ZPDIR46F.GIF", _String2="..") returned 1 [0221.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94540 [0221.308] wcscpy (in: _Dest=0x6a94540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.308] wcscat (in: _Dest=0x6a94540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.308] wcscat (in: _Dest=0x6a94540, _Source="ZPDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" [0221.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0221.309] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1 [0221.309] wcscmp (_String1="ZPDIR47B.GIF", _String2=".") returned 1 [0221.309] wcscmp (_String1="ZPDIR47B.GIF", _String2="..") returned 1 [0221.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a945d8 [0221.309] wcscpy (in: _Dest=0x6a945d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.309] wcscat (in: _Dest=0x6a945d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.309] wcscat (in: _Dest=0x6a945d8, _Source="ZPDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" [0221.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a945d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0221.450] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1 [0221.450] wcscmp (_String1="ZPDIR47F.GIF", _String2=".") returned 1 [0221.450] wcscmp (_String1="ZPDIR47F.GIF", _String2="..") returned 1 [0221.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94670 [0221.450] wcscpy (in: _Dest=0x6a94670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.450] wcscat (in: _Dest=0x6a94670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.450] wcscat (in: _Dest=0x6a94670, _Source="ZPDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" [0221.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0221.510] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1 [0221.510] wcscmp (_String1="ZPDIR48B.GIF", _String2=".") returned 1 [0221.510] wcscmp (_String1="ZPDIR48B.GIF", _String2="..") returned 1 [0221.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94708 [0221.510] wcscpy (in: _Dest=0x6a94708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.510] wcscat (in: _Dest=0x6a94708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.510] wcscat (in: _Dest=0x6a94708, _Source="ZPDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" [0221.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0221.511] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1 [0221.511] wcscmp (_String1="ZPDIR48F.GIF", _String2=".") returned 1 [0221.512] wcscmp (_String1="ZPDIR48F.GIF", _String2="..") returned 1 [0221.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a947a0 [0221.512] wcscpy (in: _Dest=0x6a947a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.512] wcscat (in: _Dest=0x6a947a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.512] wcscat (in: _Dest=0x6a947a0, _Source="ZPDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" [0221.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a947a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0221.513] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1 [0221.513] wcscmp (_String1="ZPDIR49B.GIF", _String2=".") returned 1 [0221.513] wcscmp (_String1="ZPDIR49B.GIF", _String2="..") returned 1 [0221.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94838 [0221.513] wcscpy (in: _Dest=0x6a94838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.513] wcscat (in: _Dest=0x6a94838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.513] wcscat (in: _Dest=0x6a94838, _Source="ZPDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" [0221.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0221.515] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1 [0221.515] wcscmp (_String1="ZPDIR49F.GIF", _String2=".") returned 1 [0221.515] wcscmp (_String1="ZPDIR49F.GIF", _String2="..") returned 1 [0221.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a948d0 [0221.515] wcscpy (in: _Dest=0x6a948d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.515] wcscat (in: _Dest=0x6a948d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.515] wcscat (in: _Dest=0x6a948d0, _Source="ZPDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" [0221.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a948d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0221.517] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1 [0221.517] wcscmp (_String1="ZPDIR4B.GIF", _String2=".") returned 1 [0221.517] wcscmp (_String1="ZPDIR4B.GIF", _String2="..") returned 1 [0221.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a94968 [0221.517] wcscpy (in: _Dest=0x6a94968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.517] wcscat (in: _Dest=0x6a94968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.517] wcscat (in: _Dest=0x6a94968, _Source="ZPDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" [0221.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0221.518] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1 [0221.747] wcscmp (_String1="ZPDIR4F.GIF", _String2=".") returned 1 [0221.747] wcscmp (_String1="ZPDIR4F.GIF", _String2="..") returned 1 [0221.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x6a94a98 [0221.748] wcscpy (in: _Dest=0x6a94a98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.748] wcscat (in: _Dest=0x6a94a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.748] wcscat (in: _Dest=0x6a94a98, _Source="ZPDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" [0221.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0221.781] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1 [0221.781] wcscmp (_String1="ZPDIR50B.GIF", _String2=".") returned 1 [0221.781] wcscmp (_String1="ZPDIR50B.GIF", _String2="..") returned 1 [0221.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94b30 [0221.781] wcscpy (in: _Dest=0x6a94b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.781] wcscat (in: _Dest=0x6a94b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.781] wcscat (in: _Dest=0x6a94b30, _Source="ZPDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" [0221.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0221.782] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1 [0221.782] wcscmp (_String1="ZPDIR50F.GIF", _String2=".") returned 1 [0221.782] wcscmp (_String1="ZPDIR50F.GIF", _String2="..") returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x6a94bc8 [0221.783] wcscpy (in: _Dest=0x6a94bc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.783] wcscat (in: _Dest=0x6a94bc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.783] wcscat (in: _Dest=0x6a94bc8, _Source="ZPDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" [0221.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6a94bc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0221.784] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1 [0221.784] wcscmp (_String1="ZPDIR51B.GIF", _String2=".") returned 1 [0221.784] wcscmp (_String1="ZPDIR51B.GIF", _String2="..") returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x12e9a060 [0221.784] wcscpy (in: _Dest=0x12e9a060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.784] wcscat (in: _Dest=0x12e9a060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.784] wcscat (in: _Dest=0x12e9a060, _Source="ZPDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" [0221.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0221.786] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1 [0221.786] wcscmp (_String1="ZPDIR51F.GIF", _String2=".") returned 1 [0221.786] wcscmp (_String1="ZPDIR51F.GIF", _String2="..") returned 1 [0221.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x12e9a0f8 [0221.786] wcscpy (in: _Dest=0x12e9a0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.786] wcscat (in: _Dest=0x12e9a0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.786] wcscat (in: _Dest=0x12e9a0f8, _Source="ZPDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" [0221.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0221.787] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1 [0221.787] wcscmp (_String1="ZPDIR5B.GIF", _String2=".") returned 1 [0221.788] wcscmp (_String1="ZPDIR5B.GIF", _String2="..") returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a190 [0221.788] wcscpy (in: _Dest=0x12e9a190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.788] wcscat (in: _Dest=0x12e9a190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.788] wcscat (in: _Dest=0x12e9a190, _Source="ZPDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" [0221.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24bc [0221.796] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1 [0221.796] wcscmp (_String1="ZPDIR5F.GIF", _String2=".") returned 1 [0221.796] wcscmp (_String1="ZPDIR5F.GIF", _String2="..") returned 1 [0221.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a228 [0221.796] wcscpy (in: _Dest=0x12e9a228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.796] wcscat (in: _Dest=0x12e9a228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.796] wcscat (in: _Dest=0x12e9a228, _Source="ZPDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" [0221.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0221.799] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1 [0221.799] wcscmp (_String1="ZPDIR6B.GIF", _String2=".") returned 1 [0221.799] wcscmp (_String1="ZPDIR6B.GIF", _String2="..") returned 1 [0221.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a2c0 [0221.799] wcscpy (in: _Dest=0x12e9a2c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.799] wcscat (in: _Dest=0x12e9a2c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.799] wcscat (in: _Dest=0x12e9a2c0, _Source="ZPDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" [0221.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c4 [0221.800] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1 [0221.801] wcscmp (_String1="ZPDIR6F.GIF", _String2=".") returned 1 [0221.801] wcscmp (_String1="ZPDIR6F.GIF", _String2="..") returned 1 [0221.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a358 [0221.801] wcscpy (in: _Dest=0x12e9a358, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.801] wcscat (in: _Dest=0x12e9a358, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.801] wcscat (in: _Dest=0x12e9a358, _Source="ZPDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" [0221.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c8 [0221.802] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1 [0221.802] wcscmp (_String1="ZPDIR7B.GIF", _String2=".") returned 1 [0221.802] wcscmp (_String1="ZPDIR7B.GIF", _String2="..") returned 1 [0221.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a3f0 [0221.802] wcscpy (in: _Dest=0x12e9a3f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.802] wcscat (in: _Dest=0x12e9a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.802] wcscat (in: _Dest=0x12e9a3f0, _Source="ZPDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" [0221.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24cc [0221.804] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1 [0221.804] wcscmp (_String1="ZPDIR7F.GIF", _String2=".") returned 1 [0221.804] wcscmp (_String1="ZPDIR7F.GIF", _String2="..") returned 1 [0221.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a488 [0221.804] wcscpy (in: _Dest=0x12e9a488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.804] wcscat (in: _Dest=0x12e9a488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.804] wcscat (in: _Dest=0x12e9a488, _Source="ZPDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" [0221.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0221.806] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1 [0221.806] wcscmp (_String1="ZPDIR8B.GIF", _String2=".") returned 1 [0221.806] wcscmp (_String1="ZPDIR8B.GIF", _String2="..") returned 1 [0221.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a520 [0221.806] wcscpy (in: _Dest=0x12e9a520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.806] wcscat (in: _Dest=0x12e9a520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.806] wcscat (in: _Dest=0x12e9a520, _Source="ZPDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" [0221.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d4 [0221.807] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1 [0221.808] wcscmp (_String1="ZPDIR8F.GIF", _String2=".") returned 1 [0221.808] wcscmp (_String1="ZPDIR8F.GIF", _String2="..") returned 1 [0221.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a5b8 [0221.808] wcscpy (in: _Dest=0x12e9a5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.808] wcscat (in: _Dest=0x12e9a5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.808] wcscat (in: _Dest=0x12e9a5b8, _Source="ZPDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" [0221.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0221.809] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1 [0221.809] wcscmp (_String1="ZPDIR9B.GIF", _String2=".") returned 1 [0221.809] wcscmp (_String1="ZPDIR9B.GIF", _String2="..") returned 1 [0221.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a650 [0221.809] wcscpy (in: _Dest=0x12e9a650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.809] wcscat (in: _Dest=0x12e9a650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.809] wcscat (in: _Dest=0x12e9a650, _Source="ZPDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" [0221.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0221.824] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1 [0221.824] wcscmp (_String1="ZPDIR9F.GIF", _String2=".") returned 1 [0221.824] wcscmp (_String1="ZPDIR9F.GIF", _String2="..") returned 1 [0221.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x12e9a6e8 [0221.824] wcscpy (in: _Dest=0x12e9a6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0221.824] wcscat (in: _Dest=0x12e9a6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0221.824] wcscat (in: _Dest=0x12e9a6e8, _Source="ZPDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" [0221.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x12e9a6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24e0 [0221.826] FindNextFileW (in: hFindFile=0x3e80038, lpFindFileData=0x66e3638 | out: lpFindFileData=0x66e3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0 [0221.879] FindClose (in: hFindFile=0x3e80038 | out: hFindFile=0x3e80038) returned 1 [0222.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e3638) returned 1 [0222.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0fb70) returned 1 [0222.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f670) returned 1 Thread: id = 7360 os_tid = 0x1fa0 [0201.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll")) returned 0x20 [0212.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.788] GetLastError () returned 0x5 [0212.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 7361 os_tid = 0x1fa4 [0201.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x682cf80 [0201.206] wcscpy (in: _Dest=0x682cf80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0201.206] wcscat (in: _Dest=0x682cf80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0201.206] wcscat (in: _Dest=0x682cf80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*" [0201.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66e4240 [0201.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80bb8 [0215.170] wcscmp (_String1=".", _String2=".") returned 0 [0215.170] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.170] wcscmp (_String1="..", _String2=".") returned 1 [0215.170] wcscmp (_String1="..", _String2="..") returned 0 [0215.171] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae43900, ftCreationTime.dwHighDateTime=0x1c7e8ab, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ae43900, ftLastWriteTime.dwHighDateTime=0x1c7e8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1 [0215.171] wcscmp (_String1="Classic.dotx", _String2=".") returned 1 [0215.171] wcscmp (_String1="Classic.dotx", _String2="..") returned 1 [0215.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68ae008 [0215.171] wcscpy (in: _Dest=0x68ae008, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.171] wcscat (in: _Dest=0x68ae008, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.171] wcscat (in: _Dest=0x68ae008, _Source="Classic.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" [0215.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0215.722] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1 [0215.722] wcscmp (_String1="Default.dotx", _String2=".") returned 1 [0215.722] wcscmp (_String1="Default.dotx", _String2="..") returned 1 [0215.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68ae0a8 [0215.722] wcscpy (in: _Dest=0x68ae0a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.722] wcscat (in: _Dest=0x68ae0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.723] wcscat (in: _Dest=0x68ae0a8, _Source="Default.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" [0215.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0215.723] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="DEFAUL~2.DOT")) returned 1 [0215.723] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2=".") returned 1 [0215.723] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2="..") returned 1 [0215.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3ee23a8 [0215.724] wcscpy (in: _Dest=0x3ee23a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.724] wcscat (in: _Dest=0x3ee23a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.724] wcscat (in: _Dest=0x3ee23a8, _Source="DefaultBlackAndWhite.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" [0215.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ee23a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0215.725] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="DISTIN~1.DOT")) returned 1 [0215.725] wcscmp (_String1="Distinctive.dotx", _String2=".") returned 1 [0215.725] wcscmp (_String1="Distinctive.dotx", _String2="..") returned 1 [0215.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5d340 [0215.725] wcscpy (in: _Dest=0x3e5d340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.725] wcscat (in: _Dest=0x3e5d340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.725] wcscat (in: _Dest=0x3e5d340, _Source="Distinctive.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" [0215.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5d340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0215.726] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="ELEGAN~1.DOT")) returned 1 [0215.726] wcscmp (_String1="Elegant.dotx", _String2=".") returned 1 [0215.726] wcscmp (_String1="Elegant.dotx", _String2="..") returned 1 [0215.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x68ae148 [0215.726] wcscpy (in: _Dest=0x68ae148, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.726] wcscat (in: _Dest=0x68ae148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.726] wcscat (in: _Dest=0x68ae148, _Source="Elegant.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" [0215.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0215.727] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="FANCY~1.DOT")) returned 1 [0215.727] wcscmp (_String1="Fancy.dotx", _String2=".") returned 1 [0215.728] wcscmp (_String1="Fancy.dotx", _String2="..") returned 1 [0215.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3e30b08 [0215.728] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.728] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.728] wcscat (in: _Dest=0x3e30b08, _Source="Fancy.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" [0215.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0215.731] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="FORMAL~1.DOT")) returned 1 [0215.731] wcscmp (_String1="Formal.dotx", _String2=".") returned 1 [0215.731] wcscmp (_String1="Formal.dotx", _String2="..") returned 1 [0215.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e31a78 [0215.731] wcscpy (in: _Dest=0x3e31a78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.732] wcscat (in: _Dest=0x3e31a78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.732] wcscat (in: _Dest=0x3e31a78, _Source="Formal.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" [0215.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e31a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c [0215.733] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="MANUSC~1.DOT")) returned 1 [0215.733] wcscmp (_String1="Manuscript.dotx", _String2=".") returned 1 [0215.733] wcscmp (_String1="Manuscript.dotx", _String2="..") returned 1 [0215.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x68ae1e8 [0215.733] wcscpy (in: _Dest=0x68ae1e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.733] wcscat (in: _Dest=0x68ae1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.733] wcscat (in: _Dest=0x68ae1e8, _Source="Manuscript.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" [0215.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0215.736] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="MODERN~1.DOT")) returned 1 [0215.736] wcscmp (_String1="Modern.dotx", _String2=".") returned 1 [0215.736] wcscmp (_String1="Modern.dotx", _String2="..") returned 1 [0215.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30648 [0215.736] wcscpy (in: _Dest=0x3e30648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.736] wcscat (in: _Dest=0x3e30648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.736] wcscat (in: _Dest=0x3e30648, _Source="Modern.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" [0215.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0215.738] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="NEWSPR~1.DOT")) returned 1 [0215.738] wcscmp (_String1="Newsprint.dotx", _String2=".") returned 1 [0215.738] wcscmp (_String1="Newsprint.dotx", _String2="..") returned 1 [0215.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x68ae288 [0215.738] wcscpy (in: _Dest=0x68ae288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.738] wcscat (in: _Dest=0x68ae288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.738] wcscat (in: _Dest=0x68ae288, _Source="Newsprint.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" [0215.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x68ae288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0215.740] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="PERSPE~1.DOT")) returned 1 [0215.740] wcscmp (_String1="Perspective.dotx", _String2=".") returned 1 [0215.740] wcscmp (_String1="Perspective.dotx", _String2="..") returned 1 [0215.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5c0e0 [0215.740] wcscpy (in: _Dest=0x3e5c0e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.740] wcscat (in: _Dest=0x3e5c0e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.740] wcscat (in: _Dest=0x3e5c0e0, _Source="Perspective.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" [0215.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5c0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8 [0215.741] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="SIMPLE~1.DOT")) returned 1 [0215.741] wcscmp (_String1="Simple.dotx", _String2=".") returned 1 [0215.741] wcscmp (_String1="Simple.dotx", _String2="..") returned 1 [0215.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e305b0 [0215.741] wcscpy (in: _Dest=0x3e305b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.742] wcscat (in: _Dest=0x3e305b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.742] wcscat (in: _Dest=0x3e305b0, _Source="Simple.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" [0215.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0215.743] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="THATCH~1.DOT")) returned 1 [0215.743] wcscmp (_String1="Thatch.dotx", _String2=".") returned 1 [0215.743] wcscmp (_String1="Thatch.dotx", _String2="..") returned 1 [0215.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3e30d68 [0215.743] wcscpy (in: _Dest=0x3e30d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.743] wcscat (in: _Dest=0x3e30d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.743] wcscat (in: _Dest=0x3e30d68, _Source="Thatch.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" [0215.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0215.744] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 1 [0215.744] wcscmp (_String1="Traditional.dotx", _String2=".") returned 1 [0215.744] wcscmp (_String1="Traditional.dotx", _String2="..") returned 1 [0215.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e5be40 [0215.744] wcscpy (in: _Dest=0x3e5be40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0215.744] wcscat (in: _Dest=0x3e5be40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0215.744] wcscat (in: _Dest=0x3e5be40, _Source="Traditional.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" [0215.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e5be40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0215.745] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x66e4240 | out: lpFindFileData=0x66e4240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 0 [0215.745] FindClose (in: hFindFile=0x3e80bb8 | out: hFindFile=0x3e80bb8) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e4240) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f870) returned 1 Thread: id = 7362 os_tid = 0x1fa8 [0201.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn")) returned 0x20 [0212.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) [0222.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.173] GetLastError () returned 0x5 [0223.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) returned 0 [0223.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31358) returned 1 Thread: id = 7363 os_tid = 0x1fac [0201.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn")) returned 0x20 [0212.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0212.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.942] GetLastError () returned 0x5 [0212.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0212.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 7364 os_tid = 0x1fb0 [0201.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css")) returned 0x20 [0212.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0219.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.114] GetLastError () returned 0x5 [0223.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0223.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e11070) returned 1 Thread: id = 7365 os_tid = 0x1fb4 [0201.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm")) returned 0x20 [0212.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0219.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.120] GetLastError () returned 0x5 [0223.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0223.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 7366 os_tid = 0x1fb8 [0201.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl")) returned 0x20 [0212.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0212.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.955] GetLastError () returned 0x5 [0212.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0212.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 7367 os_tid = 0x1fbc [0201.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs")) returned 0x20 [0212.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0218.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.094] GetLastError () returned 0x5 [0223.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0223.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10270) returned 1 Thread: id = 7368 os_tid = 0x1fc0 [0201.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc")) returned 0x20 [0206.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0206.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.863] GetLastError () returned 0x5 [0215.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0222.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 7369 os_tid = 0x12b4 [0201.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt")) returned 0x20 [0212.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.772] GetLastError () returned 0x5 [0212.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 7370 os_tid = 0x1fe0 [0201.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk")) returned 0x20 [0212.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.770] GetLastError () returned 0x5 [0212.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc558) returned 1 Thread: id = 7371 os_tid = 0x12bc [0201.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk")) returned 0x20 [0212.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.768] GetLastError () returned 0x5 [0212.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc438) returned 1 Thread: id = 7372 os_tid = 0x12c0 [0201.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll")) returned 0x20 [0215.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.063] GetLastError () returned 0x5 [0215.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbd78) returned 1 Thread: id = 7373 os_tid = 0x12c4 [0201.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl")) returned 0x20 [0212.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0219.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.111] GetLastError () returned 0x5 [0223.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0223.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10670) returned 1 Thread: id = 7375 os_tid = 0x1fcc [0201.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0201.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0213.213] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1544 [0213.213] GetFileSizeEx (in: hFile=0x1544, lpFileSize=0x5def7cc | out: lpFileSize=0x5def7cc*=356) returned 1 [0213.213] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.214] ReadFile (in: hFile=0x1544, lpBuffer=0x5def7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5def7b8, lpOverlapped=0x0 | out: lpBuffer=0x5def7a8*, lpNumberOfBytesRead=0x5def7b8*=0x4, lpOverlapped=0x0) returned 1 [0213.215] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7e0 [0213.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea7b8 [0213.215] NtQuerySystemTime (in: CurrentTime=0x5def740 | out: CurrentTime=0x5def740*=132482711199372000) returned 0x0 [0213.215] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x67274ad1 [0213.215] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x7f4d8b93 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x5683d799 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x72c0ec06 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x9c7f3d1 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x19b68810 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x77078f0e [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x58254e14 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x389ca313 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x3b3bcbd1 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x41bed496 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x69742be2 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x11a79f0b [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x66fc6378 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x7cf55f25 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x5c0613a [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x4fc8866 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x62b2e11 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x145a3e43 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x5ab27b04 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x1a12c561 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x69332bf3 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x389ca313 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x637c350f [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x6a4a67a2 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x2aae1eee [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x7770bc21 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x54b67aa0 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x637c350f [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x1051232f [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x6c4b651 [0213.216] RtlRandomEx (in: Seed=0x5def738 | out: Seed=0x5def738) returned 0x128c0dea [0213.225] ReadFile (in: hFile=0x1544, lpBuffer=0x1302d080, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0x5def734, lpOverlapped=0x0 | out: lpBuffer=0x1302d080*, lpNumberOfBytesRead=0x5def734*=0x164, lpOverlapped=0x0) returned 1 [0213.225] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.225] WriteFile (in: hFile=0x1544, lpBuffer=0x13030c88*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x5def738, lpOverlapped=0x0 | out: lpBuffer=0x13030c88*, lpNumberOfBytesWritten=0x5def738*=0x164, lpOverlapped=0x0) returned 1 [0215.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed490 [0215.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed4b8 [0215.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed4b8) returned 1 [0215.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13030c88) returned 1 [0215.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1302d080) returned 1 [0215.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0c90) returned 1 [0215.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ae10) returned 1 [0215.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5e18 [0215.914] SetFilePointerEx (in: hFile=0x1544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.914] WriteFile (in: hFile=0x1544, lpBuffer=0x675e4f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5def7c0, lpOverlapped=0x0 | out: lpBuffer=0x675e4f8*, lpNumberOfBytesWritten=0x5def7c0*=0x10c, lpOverlapped=0x0) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e48) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed4b8) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e18) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed490) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea7e0) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea740) returned 1 [0216.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea768) returned 1 [0216.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41518 [0216.561] wcscpy (in: _Dest=0x3d41518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" [0216.561] wcscat (in: _Dest=0x3d41518, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.ac3a86" [0216.561] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0x5def738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777f38 [0223.749] FlushFileBuffers (hFile=0x1544) returned 1 [0223.754] CloseHandle (hObject=0x1544) returned 1 [0224.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x12ea1da0 [0224.572] wcscpy (in: _Dest=0x12ea1da0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0224.572] wcscat (in: _Dest=0x12ea1da0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\AC3A86-Readme.txt" [0224.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0224.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.134] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5def754, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x5def754*=0x8b9, lpOverlapped=0x0) returned 1 [0225.137] CloseHandle (hObject=0x1038) returned 1 [0225.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1da0) returned 1 [0225.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771f88) returned 1 Thread: id = 7376 os_tid = 0x15e0 [0201.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0201.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.371] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1038 [0215.372] GetFileSizeEx (in: hFile=0x1038, lpFileSize=0x813fc54 | out: lpFileSize=0x813fc54*=270) returned 1 [0215.372] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.372] ReadFile (in: hFile=0x1038, lpBuffer=0x813fc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x813fc40, lpOverlapped=0x0 | out: lpBuffer=0x813fc30*, lpNumberOfBytesRead=0x813fc40*=0x4, lpOverlapped=0x0) returned 1 [0215.373] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42dd0 [0215.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d434b0 [0215.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d42ab0 [0215.374] NtQuerySystemTime (in: CurrentTime=0x813fbc8 | out: CurrentTime=0x813fbc8*=132482711220900000) returned 0x0 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x7477c0a6 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x411e1835 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0xa68350d [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x41276a0d [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x5d0e1e85 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x780cef6d [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x62bea0ea [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x44218f71 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0xd252825 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x43e66312 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x7eaf8acb [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x666fc033 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x758aef3f [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x7e334f5b [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x640a154 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x33fc61d3 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x58411ee6 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x678fd73a [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x6383caaa [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x4f7fbdea [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x2bf396d4 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x256f458b [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x77389869 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x6f36a3de [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0xb7f5313 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x204ae8bb [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x2e28fea4 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x6f36a3de [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x1c8b5f22 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x6e4fdcaa [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x62095797 [0215.374] RtlRandomEx (in: Seed=0x813fbc0 | out: Seed=0x813fbc0) returned 0x6be24c00 [0215.382] ReadFile (in: hFile=0x1038, lpBuffer=0x13056890, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x813fbbc, lpOverlapped=0x0 | out: lpBuffer=0x13056890*, lpNumberOfBytesRead=0x813fbbc*=0x10e, lpOverlapped=0x0) returned 1 [0215.383] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.383] WriteFile (in: hFile=0x1038, lpBuffer=0x1305a498*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x813fbc0, lpOverlapped=0x0 | out: lpBuffer=0x1305a498*, lpNumberOfBytesWritten=0x813fbc0*=0x10e, lpOverlapped=0x0) returned 1 [0223.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0223.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0223.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0223.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1305a498) returned 1 [0223.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13056890) returned 1 [0223.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d8c8) returned 1 [0223.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2288) returned 1 [0223.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52a0 [0223.719] SetFilePointerEx (in: hFile=0x1038, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.719] WriteFile (in: hFile=0x1038, lpBuffer=0x675e098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x813fc48, lpOverlapped=0x0 | out: lpBuffer=0x675e098*, lpNumberOfBytesWritten=0x813fc48*=0x10c, lpOverlapped=0x0) returned 1 [0224.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e098) returned 1 [0224.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52a0) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d434b0) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42b50) returned 1 [0224.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d42a10) returned 1 [0224.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea0f00 [0224.474] wcscpy (in: _Dest=0x12ea0f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" [0224.474] wcscat (in: _Dest=0x12ea0f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.ac3a86" [0224.474] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0x813fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6776d48 [0224.828] FlushFileBuffers (hFile=0x1038) returned 1 [0225.128] CloseHandle (hObject=0x1038) returned 1 [0225.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x12ea1ed8 [0225.129] wcscpy (in: _Dest=0x12ea1ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0225.129] wcscat (in: _Dest=0x12ea1ed8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\AC3A86-Readme.txt" [0225.129] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0225.129] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.130] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x813fbdc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x813fbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.132] CloseHandle (hObject=0x1038) returned 1 [0225.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1ed8) returned 1 [0225.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67720b0) returned 1 Thread: id = 7377 os_tid = 0x1fd0 [0201.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0201.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.226] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1874 [0213.237] GetFileSizeEx (in: hFile=0x1874, lpFileSize=0x930ff5c | out: lpFileSize=0x930ff5c*=353) returned 1 [0213.237] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.237] ReadFile (in: hFile=0x1874, lpBuffer=0x930ff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x930ff48, lpOverlapped=0x0 | out: lpBuffer=0x930ff38*, lpNumberOfBytesRead=0x930ff48*=0x4, lpOverlapped=0x0) returned 1 [0213.239] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6f0 [0213.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6c8 [0213.239] NtQuerySystemTime (in: CurrentTime=0x930fed0 | out: CurrentTime=0x930fed0*=132482711199528000) returned 0x0 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x259112e1 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x7941a052 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x56ed8e53 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x4ea6518f [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x47962e6c [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x4f9ca520 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x5ea02be1 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x4d3f360d [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x37326e39 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x7fc1d301 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x1a66e89f [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x42410145 [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0xb9be91f [0213.239] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x870b287 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x24690598 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x6d1f6c0c [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x4c22b6a3 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x2177f0b7 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x5bccabec [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x78bf73a3 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x1a6bf174 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x828ebc3 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x77842d1 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x2e0e4ad6 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x1478131e [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x6568e11a [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x703ad6eb [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x18d82751 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x14444a8 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x7157824b [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x45f29a0 [0213.240] RtlRandomEx (in: Seed=0x930fec8 | out: Seed=0x930fec8) returned 0x2148456f [0213.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x1303c0a0 [0213.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a05ce8 [0213.249] ReadFile (in: hFile=0x1874, lpBuffer=0x1303c0a0, nNumberOfBytesToRead=0x161, lpNumberOfBytesRead=0x930fec4, lpOverlapped=0x0 | out: lpBuffer=0x1303c0a0*, lpNumberOfBytesRead=0x930fec4*=0x161, lpOverlapped=0x0) returned 1 [0213.249] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.249] WriteFile (in: hFile=0x1874, lpBuffer=0x6a05ce8*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x930fec8, lpOverlapped=0x0 | out: lpBuffer=0x6a05ce8*, lpNumberOfBytesWritten=0x930fec8*=0x161, lpOverlapped=0x0) returned 1 [0216.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed530 [0216.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed558 [0216.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed558) returned 1 [0216.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a05ce8) returned 1 [0216.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1303c0a0) returned 1 [0216.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d08) returned 1 [0216.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ad38) returned 1 [0216.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5ed8 [0216.004] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.004] WriteFile (in: hFile=0x1874, lpBuffer=0x675e728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x930ff50, lpOverlapped=0x0 | out: lpBuffer=0x675e728*, lpNumberOfBytesWritten=0x930ff50*=0x10c, lpOverlapped=0x0) returned 1 [0216.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0216.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f08) returned 1 [0216.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed558) returned 1 [0216.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ed8) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed530) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6f0) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea650) returned 1 [0216.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea678) returned 1 [0216.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d419f8 [0216.592] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" [0216.592] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.ac3a86" [0216.592] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0x930fec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777640 [0223.788] FlushFileBuffers (hFile=0x1874) returned 1 [0223.796] CloseHandle (hObject=0x1874) returned 1 [0224.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x12ea13e0 [0224.657] wcscpy (in: _Dest=0x12ea13e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0224.657] wcscat (in: _Dest=0x12ea13e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\AC3A86-Readme.txt" [0224.657] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0224.658] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.188] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x930fee4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x930fee4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.190] CloseHandle (hObject=0x1038) returned 1 [0225.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea13e0) returned 1 [0225.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67721d8) returned 1 Thread: id = 7378 os_tid = 0x12e0 [0201.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0201.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.249] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0213.250] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0x945f76c | out: lpFileSize=0x945f76c*=279) returned 1 [0213.250] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.250] ReadFile (in: hFile=0x1f7c, lpBuffer=0x945f748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x945f758, lpOverlapped=0x0 | out: lpBuffer=0x945f748*, lpNumberOfBytesRead=0x945f758*=0x4, lpOverlapped=0x0) returned 1 [0213.256] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea6c8 [0213.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea600 [0213.256] NtQuerySystemTime (in: CurrentTime=0x945f6e0 | out: CurrentTime=0x945f6e0*=132482711199684000) returned 0x0 [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x2e1949a5 [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x25086542 [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x58bce9e4 [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x704f5620 [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x77078f0e [0213.256] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x42febcb1 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x45f29a0 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x2f099b94 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x61da49f1 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x798b4d10 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x782f43be [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x5709f1d6 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x704f5620 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x1f429ee9 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x7180aef7 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x6a38b522 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x52c65129 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x24c3a492 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x3227054d [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x8522ed0 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x3f080b65 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x7191c6be [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x49bdd38d [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x7381f3ea [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x4d60824f [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x5b0eae05 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x462e706f [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x73d4c9ad [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x55cbab09 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x691e7a62 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0xc2a3340 [0213.257] RtlRandomEx (in: Seed=0x945f6d8 | out: Seed=0x945f6d8) returned 0x36330f02 [0213.265] ReadFile (in: hFile=0x1f7c, lpBuffer=0x6a098f0, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0x945f6d4, lpOverlapped=0x0 | out: lpBuffer=0x6a098f0*, lpNumberOfBytesRead=0x945f6d4*=0x117, lpOverlapped=0x0) returned 1 [0213.265] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.265] WriteFile (in: hFile=0x1f7c, lpBuffer=0x6a0d4f8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x945f6d8, lpOverlapped=0x0 | out: lpBuffer=0x6a0d4f8*, lpNumberOfBytesWritten=0x945f6d8*=0x117, lpOverlapped=0x0) returned 1 [0216.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed580 [0216.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed5a8 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed5a8) returned 1 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a0d4f8) returned 1 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a098f0) returned 1 [0216.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d02b8) returned 1 [0216.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a048) returned 1 [0216.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5f38 [0216.417] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.417] WriteFile (in: hFile=0x1f7c, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x945f760, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0x945f760*=0x10c, lpOverlapped=0x0) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f68) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed5a8) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5f38) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed580) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea6c8) returned 1 [0216.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea628) returned 1 [0216.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea5b0) returned 1 [0216.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d418c0 [0216.587] wcscpy (in: _Dest=0x3d418c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" [0216.587] wcscat (in: _Dest=0x3d418c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.ac3a86" [0216.587] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0x945f6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777788 [0223.794] FlushFileBuffers (hFile=0x1f7c) returned 1 [0223.806] CloseHandle (hObject=0x1f7c) returned 1 [0224.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678b340 [0224.659] wcscpy (in: _Dest=0x678b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0224.659] wcscat (in: _Dest=0x678b340, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\AC3A86-Readme.txt" [0224.659] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0224.660] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.193] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x945f6f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x945f6f4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.195] CloseHandle (hObject=0x1038) returned 1 [0225.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b340) returned 1 [0225.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772300) returned 1 Thread: id = 7379 os_tid = 0x12e4 [0201.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0201.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0213.266] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1878 [0213.266] GetFileSizeEx (in: hFile=0x1878, lpFileSize=0xa46f76c | out: lpFileSize=0xa46f76c*=273) returned 1 [0213.266] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1878, lpBuffer=0xa46f748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa46f758, lpOverlapped=0x0 | out: lpBuffer=0xa46f748*, lpNumberOfBytesRead=0xa46f758*=0x4, lpOverlapped=0x0) returned 1 [0213.290] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea5d8 [0213.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea510 [0213.291] NtQuerySystemTime (in: CurrentTime=0xa46f6e0 | out: CurrentTime=0xa46f6e0*=132482711199996000) returned 0x0 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x6d1f6c0c [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x37d6151 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x1782f8ad [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x24c3a492 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x5b6e92a [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x1d326f3a [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x68c8c8e2 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x3b7f1d32 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x4f18096c [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x594c7238 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x510ff237 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x30423f60 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x3c2abcb6 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x1bdce32e [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x96300c6 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x289617b0 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x47962e6c [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x20a9407a [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x5a02a20f [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x798b4d10 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x196444b4 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x389ff7c7 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0xcb426cc [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x73e368c2 [0213.291] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x6aaf2e88 [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x74349492 [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x42b78daf [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x2a759c67 [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x15d4e9d1 [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x3bb0080 [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x186adf7d [0213.292] RtlRandomEx (in: Seed=0xa46f6d8 | out: Seed=0xa46f6d8) returned 0x490a29d2 [0213.302] ReadFile (in: hFile=0x1878, lpBuffer=0x6a18910, nNumberOfBytesToRead=0x111, lpNumberOfBytesRead=0xa46f6d4, lpOverlapped=0x0 | out: lpBuffer=0x6a18910*, lpNumberOfBytesRead=0xa46f6d4*=0x111, lpOverlapped=0x0) returned 1 [0213.303] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.303] WriteFile (in: hFile=0x1878, lpBuffer=0x6a1c518*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0xa46f6d8, lpOverlapped=0x0 | out: lpBuffer=0x6a1c518*, lpNumberOfBytesWritten=0xa46f6d8*=0x111, lpOverlapped=0x0) returned 1 [0216.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd38 [0216.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd10 [0216.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd10) returned 1 [0216.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a1c518) returned 1 [0216.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a18910) returned 1 [0216.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0df8) returned 1 [0216.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b170) returned 1 [0216.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5e78 [0216.982] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.982] WriteFile (in: hFile=0x1878, lpBuffer=0x675e610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa46f760, lpOverlapped=0x0 | out: lpBuffer=0x675e610*, lpNumberOfBytesWritten=0xa46f760*=0x10c, lpOverlapped=0x0) returned 1 [0224.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e610) returned 1 [0224.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ea8) returned 1 [0224.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd10) returned 1 [0224.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5e78) returned 1 [0224.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd38) returned 1 [0224.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea5d8) returned 1 [0224.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea538) returned 1 [0224.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea498) returned 1 [0224.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c588 [0224.387] wcscpy (in: _Dest=0x675c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" [0224.387] wcscat (in: _Dest=0x675c588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.ac3a86" [0224.387] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0xa46f6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf738 [0224.743] FlushFileBuffers (hFile=0x1878) returned 1 [0224.746] CloseHandle (hObject=0x1878) returned 1 [0224.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0f00 [0224.831] wcscpy (in: _Dest=0x12ea0f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0224.831] wcscat (in: _Dest=0x12ea0f00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0224.831] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0224.831] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.341] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa46f6f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa46f6f4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.361] CloseHandle (hObject=0x1038) returned 1 [0225.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0f00) returned 1 [0225.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772428) returned 1 Thread: id = 7380 os_tid = 0x1354 [0201.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 0x2020 [0201.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0214.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1500 [0214.889] GetFileSizeEx (in: hFile=0x1500, lpFileSize=0x8e1fd1c | out: lpFileSize=0x8e1fd1c*=617) returned 1 [0214.889] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.889] ReadFile (in: hFile=0x1500, lpBuffer=0x8e1fcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e1fd08, lpOverlapped=0x0 | out: lpBuffer=0x8e1fcf8*, lpNumberOfBytesRead=0x8e1fd08*=0x4, lpOverlapped=0x0) returned 1 [0214.897] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec950 [0214.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec978 [0214.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf90 [0214.897] NtQuerySystemTime (in: CurrentTime=0x8e1fc90 | out: CurrentTime=0x8e1fc90*=132482711216064000) returned 0x0 [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x578b93a2 [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x1dac60ed [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x4a44d31e [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x1c4465e7 [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x206b1219 [0214.897] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x1c4465e7 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x330d582 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x256992d5 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x69e12f15 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x578b93a2 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x582f9e53 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x683dee0f [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x72869500 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0xff9b9c [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x599dd9ee [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x74e7ef57 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x1eb89c91 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x32555276 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x4ca6dde1 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x6d9eb585 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x3ba961b9 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x2a18ab7f [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x76003370 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0xff9b9c [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x4f7fbdea [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x1dac60ed [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x3d7979d9 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x74cc956b [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x582f9e53 [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x6e070ecb [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0xe2ab03b [0214.898] RtlRandomEx (in: Seed=0x8e1fc88 | out: Seed=0x8e1fc88) returned 0x32555276 [0214.906] ReadFile (in: hFile=0x1500, lpBuffer=0x1311e0a0, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x8e1fc84, lpOverlapped=0x0 | out: lpBuffer=0x1311e0a0*, lpNumberOfBytesRead=0x8e1fc84*=0x269, lpOverlapped=0x0) returned 1 [0214.906] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.906] WriteFile (in: hFile=0x1500, lpBuffer=0x13121ca8*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x8e1fc88, lpOverlapped=0x0 | out: lpBuffer=0x13121ca8*, lpNumberOfBytesWritten=0x8e1fc88*=0x269, lpOverlapped=0x0) returned 1 [0217.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec950 [0217.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec7c0 [0217.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7c0) returned 1 [0217.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13121ca8) returned 1 [0217.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1311e0a0) returned 1 [0217.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0217.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a7e0) returned 1 [0217.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a50 [0217.131] SetFilePointerEx (in: hFile=0x1500, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.131] WriteFile (in: hFile=0x1500, lpBuffer=0x675cce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e1fd10, lpOverlapped=0x0 | out: lpBuffer=0x675cce8*, lpNumberOfBytesWritten=0x8e1fd10*=0x10c, lpOverlapped=0x0) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cce8) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec7c0) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec950) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec978) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecfb8) returned 1 [0224.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec798) returned 1 [0224.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c318 [0224.402] wcscpy (in: _Dest=0x675c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" [0224.402] wcscat (in: _Dest=0x675c318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.ac3a86" [0224.402] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.ac3a86", NtPathName=0x8e1fc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cfc98 [0224.753] FlushFileBuffers (hFile=0x1500) returned 1 [0224.759] CloseHandle (hObject=0x1500) returned 1 [0224.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c1e0 [0224.834] wcscpy (in: _Dest=0x678c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0224.835] wcscat (in: _Dest=0x678c1e0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\AC3A86-Readme.txt" [0224.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ac3a86-readme.txt")) returned 0xffffffff [0224.835] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.370] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e1fca4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e1fca4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.372] CloseHandle (hObject=0x1038) returned 1 [0225.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c1e0) returned 1 [0225.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772550) returned 1 Thread: id = 7381 os_tid = 0x1374 [0201.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0201.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0213.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1868 [0213.305] GetFileSizeEx (in: hFile=0x1868, lpFileSize=0xa03fd9c | out: lpFileSize=0xa03fd9c*=617) returned 1 [0213.305] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.305] ReadFile (in: hFile=0x1868, lpBuffer=0xa03fd78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa03fd88, lpOverlapped=0x0 | out: lpBuffer=0xa03fd78*, lpNumberOfBytesRead=0xa03fd88*=0x4, lpOverlapped=0x0) returned 1 [0213.359] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb0c8 [0213.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb140 [0213.359] NtQuerySystemTime (in: CurrentTime=0xa03fd10 | out: CurrentTime=0xa03fd10*=132482711200776000) returned 0x0 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x57a2ea09 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x7b68a10b [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x79c4d21 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x31530f55 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x45efcb59 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x5b09d189 [0213.359] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x6fe532a3 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x55441c88 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x544d8d6f [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x128c0dea [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x487c48f6 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x4cc24d0b [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x6abad6f5 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x2d6aa4 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x7537a20d [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x6d097940 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x3078b948 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x306bd720 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x3285629c [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x604e8eb4 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x249beb07 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x3114c546 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x1a6bf174 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x7d45f506 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x60bfb365 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x1edea251 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x11513d2e [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x43df01fa [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x632d4000 [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x2391b33d [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x7cce803b [0213.360] RtlRandomEx (in: Seed=0xa03fd08 | out: Seed=0xa03fd08) returned 0x182e9265 [0213.371] ReadFile (in: hFile=0x1868, lpBuffer=0x6a27930, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0xa03fd04, lpOverlapped=0x0 | out: lpBuffer=0x6a27930*, lpNumberOfBytesRead=0xa03fd04*=0x269, lpOverlapped=0x0) returned 1 [0213.371] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.371] WriteFile (in: hFile=0x1868, lpBuffer=0x6a2b538*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0xa03fd08, lpOverlapped=0x0 | out: lpBuffer=0x6a2b538*, lpNumberOfBytesWritten=0xa03fd08*=0x269, lpOverlapped=0x0) returned 1 [0217.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb80 [0217.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecba8 [0217.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0217.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2b538) returned 1 [0217.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a27930) returned 1 [0217.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0420) returned 1 [0217.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a318) returned 1 [0217.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c00 [0217.138] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.138] WriteFile (in: hFile=0x1868, lpBuffer=0x675cab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa03fd90, lpOverlapped=0x0 | out: lpBuffer=0x675cab8*, lpNumberOfBytesWritten=0xa03fd90*=0x10c, lpOverlapped=0x0) returned 1 [0224.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cab8) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb80) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0c8) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb168) returned 1 [0224.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb190) returned 1 [0224.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x6776ab8 [0224.429] wcscpy (in: _Dest=0x6776ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" [0224.429] wcscat (in: _Dest=0x6776ab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.ac3a86" [0224.429] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0xa03fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66ce060 [0224.786] FlushFileBuffers (hFile=0x1868) returned 1 [0224.794] CloseHandle (hObject=0x1868) returned 1 [0224.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x675b820 [0224.868] wcscpy (in: _Dest=0x675b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0224.868] wcscat (in: _Dest=0x675b820, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0224.868] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0224.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x235c [0224.888] WriteFile (in: hFile=0x235c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa03fd24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa03fd24*=0x8b9, lpOverlapped=0x0) returned 1 [0224.895] CloseHandle (hObject=0x235c) returned 1 [0224.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b820) returned 1 [0224.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40408) returned 1 Thread: id = 7382 os_tid = 0x1818 [0201.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0201.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0213.308] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xde8 [0213.310] GetFileSizeEx (in: hFile=0xde8, lpFileSize=0xa1afe44 | out: lpFileSize=0xa1afe44*=696) returned 1 [0213.310] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x2b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.310] ReadFile (in: hFile=0xde8, lpBuffer=0xa1afe20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1afe30, lpOverlapped=0x0 | out: lpBuffer=0xa1afe20*, lpNumberOfBytesRead=0xa1afe30*=0x4, lpOverlapped=0x0) returned 1 [0213.530] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb640 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb668 [0213.530] NtQuerySystemTime (in: CurrentTime=0xa1afdb8 | out: CurrentTime=0xa1afdb8*=132482711202492000) returned 0x0 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x68a86a81 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x43c78752 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x55630c60 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x56a6b5c6 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x28bfe32c [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x60def7e9 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x72675d5e [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x64d2071 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x6670ee62 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x6548f236 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0xad40d81 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x29365212 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x115bae54 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x14011e4c [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x3204df4d [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x5e29524c [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x3bc87da1 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x1d8fb3c6 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x10691954 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x7c3c06b0 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x16990e83 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x4608c1d1 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x661b3ce2 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x25b6b380 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x25eb05d [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x33a85ef8 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x5ca27458 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x2c906e6b [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x2700edd2 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0xc44bb96 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x55579939 [0213.531] RtlRandomEx (in: Seed=0xa1afdb0 | out: Seed=0xa1afdb0) returned 0x74bb6f17 [0213.540] ReadFile (in: hFile=0xde8, lpBuffer=0x12fad0c0, nNumberOfBytesToRead=0x2b8, lpNumberOfBytesRead=0xa1afdac, lpOverlapped=0x0 | out: lpBuffer=0x12fad0c0*, lpNumberOfBytesRead=0xa1afdac*=0x2b8, lpOverlapped=0x0) returned 1 [0213.540] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.540] WriteFile (in: hFile=0xde8, lpBuffer=0x12fb0cc8*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0xa1afdb0, lpOverlapped=0x0 | out: lpBuffer=0x12fb0cc8*, lpNumberOfBytesWritten=0xa1afdb0*=0x2b8, lpOverlapped=0x0) returned 1 [0217.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebed8 [0217.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc20 [0217.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0217.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb0cc8) returned 1 [0217.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fad0c0) returned 1 [0217.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0217.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aea0) returned 1 [0217.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ae0 [0217.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0217.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0217.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc20 [0217.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfa0 [0217.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfa0) returned 1 [0217.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0ee8) returned 1 [0217.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689aea0) returned 1 [0217.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675e4f8 [0217.187] SetFilePointerEx (in: hFile=0xde8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.187] WriteFile (in: hFile=0xde8, lpBuffer=0x675e4f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa1afe38, lpOverlapped=0x0 | out: lpBuffer=0x675e4f8*, lpNumberOfBytesWritten=0xa1afe38*=0x10c, lpOverlapped=0x0) returned 1 [0224.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e4f8) returned 1 [0224.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0224.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0224.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0224.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebed8) returned 1 [0224.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb640) returned 1 [0224.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb690) returned 1 [0224.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb6b8) returned 1 [0224.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c7f8 [0224.458] wcscpy (in: _Dest=0x675c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" [0224.458] wcscat (in: _Dest=0x675c7f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.ac3a86" [0224.458] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xa1afdb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ceb20 [0224.820] FlushFileBuffers (hFile=0xde8) returned 1 [0224.822] CloseHandle (hObject=0xde8) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675bf70 [0224.883] wcscpy (in: _Dest=0x675bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0224.883] wcscat (in: _Dest=0x675bf70, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\AC3A86-Readme.txt" [0224.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0224.883] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.893] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa1afdcc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa1afdcc*=0x8b9, lpOverlapped=0x0) returned 1 [0224.911] CloseHandle (hObject=0x16d4) returned 1 [0224.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675bf70) returned 1 [0224.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6772678) returned 1 Thread: id = 7383 os_tid = 0x181c [0201.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0201.593] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0213.312] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x186c [0213.314] GetFileSizeEx (in: hFile=0x186c, lpFileSize=0x9cdfb64 | out: lpFileSize=0x9cdfb64*=667) returned 1 [0213.314] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.314] ReadFile (in: hFile=0x186c, lpBuffer=0x9cdfb40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cdfb50, lpOverlapped=0x0 | out: lpBuffer=0x9cdfb40*, lpNumberOfBytesRead=0x9cdfb50*=0x4, lpOverlapped=0x0) returned 1 [0213.540] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb668 [0213.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb6e0 [0213.540] NtQuerySystemTime (in: CurrentTime=0x9cdfad8 | out: CurrentTime=0x9cdfad8*=132482711202492000) returned 0x0 [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x28bfe32c [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x34611b5b [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x4348fd40 [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x13c1828 [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x1a31c7d5 [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x6118365e [0213.540] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x2d062bbf [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x4c0f3cd1 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x636ca0bf [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x677202e2 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x6df36fe8 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x5704b815 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x9dd6b77 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x637ca94f [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x25086542 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x228206a6 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x7ba84c52 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x2c4c2d1a [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x70b36606 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x3d389e3f [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x6df4f5f9 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x1a2e3a7a [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x100e969f [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x287ff2c6 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x3a791306 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x7fd739b5 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x19e3e260 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x236c8469 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x136c13c4 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x5215b7d1 [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x2c906e6b [0213.541] RtlRandomEx (in: Seed=0x9cdfad0 | out: Seed=0x9cdfad0) returned 0x20e4fde3 [0213.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb618) returned 1 [0213.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fb48d0 [0213.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fb84d8 [0213.550] ReadFile (in: hFile=0x186c, lpBuffer=0x12fb48d0, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x9cdfacc, lpOverlapped=0x0 | out: lpBuffer=0x12fb48d0*, lpNumberOfBytesRead=0x9cdfacc*=0x29b, lpOverlapped=0x0) returned 1 [0213.551] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.551] WriteFile (in: hFile=0x186c, lpBuffer=0x12fb84d8*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x9cdfad0, lpOverlapped=0x0 | out: lpBuffer=0x12fb84d8*, lpNumberOfBytesWritten=0x9cdfad0*=0x29b, lpOverlapped=0x0) returned 1 [0217.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbd0 [0217.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbf8 [0217.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0217.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb84d8) returned 1 [0217.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fb48d0) returned 1 [0217.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0a38) returned 1 [0217.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689abd0) returned 1 [0217.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b40 [0217.144] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.144] WriteFile (in: hFile=0x186c, lpBuffer=0x675e728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cdfb58, lpOverlapped=0x0 | out: lpBuffer=0x675e728*, lpNumberOfBytesWritten=0x9cdfb58*=0x10c, lpOverlapped=0x0) returned 1 [0224.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e728) returned 1 [0224.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0224.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0224.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0224.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbd0) returned 1 [0224.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb668) returned 1 [0224.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb708) returned 1 [0224.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb730) returned 1 [0224.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x67778d0 [0224.424] wcscpy (in: _Dest=0x67778d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" [0224.424] wcscat (in: _Dest=0x67778d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.ac3a86" [0224.424] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0x9cdfad0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x66cf330 [0224.774] FlushFileBuffers (hFile=0x186c) returned 1 [0224.783] CloseHandle (hObject=0x186c) returned 1 [0224.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x130) returned 0x675c930 [0224.864] wcscpy (in: _Dest=0x675c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0224.864] wcscat (in: _Dest=0x675c930, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\AC3A86-Readme.txt" [0224.864] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0224.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.400] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9cdfaec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9cdfaec*=0x8b9, lpOverlapped=0x0) returned 1 [0225.402] CloseHandle (hObject=0x1038) returned 1 [0225.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675c930) returned 1 [0225.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40dc8) returned 1 Thread: id = 7384 os_tid = 0x1098 [0201.594] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0201.594] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0213.316] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc40 [0213.317] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0xa77f9ec | out: lpFileSize=0xa77f9ec*=609) returned 1 [0213.318] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x25d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.318] ReadFile (in: hFile=0xc40, lpBuffer=0xa77f9c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa77f9d8, lpOverlapped=0x0 | out: lpBuffer=0xa77f9c8*, lpNumberOfBytesRead=0xa77f9d8*=0x4, lpOverlapped=0x0) returned 1 [0213.551] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb6e0 [0213.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb758 [0213.551] NtQuerySystemTime (in: CurrentTime=0xa77f960 | out: CurrentTime=0xa77f960*=132482711202648000) returned 0x0 [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x41ef46fa [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x4348fd40 [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x76ebbfbd [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x7ddd022 [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x55579939 [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x4c0f3cd1 [0213.551] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x4b6b18d0 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x5ef96893 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x684737cb [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x4f127a51 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x16f0178b [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x16d147dd [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x752158f8 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x3b3b325b [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x56a6b5c6 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x437ab8e5 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x592760be [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x2dfa1500 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x565cca61 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x66fac658 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x79400d1c [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x52fb7b29 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x5276a560 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x208947fe [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x43d03769 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x5590ec4f [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x20e4fde3 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x5276a560 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x1f47d6d9 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0xb7c13f2 [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x2c4c2d1a [0213.552] RtlRandomEx (in: Seed=0xa77f958 | out: Seed=0xa77f958) returned 0x20915bf2 [0213.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb618) returned 1 [0213.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fbc0e0 [0213.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13080060 [0213.565] ReadFile (in: hFile=0xc40, lpBuffer=0x12fbc0e0, nNumberOfBytesToRead=0x261, lpNumberOfBytesRead=0xa77f954, lpOverlapped=0x0 | out: lpBuffer=0x12fbc0e0*, lpNumberOfBytesRead=0xa77f954*=0x261, lpOverlapped=0x0) returned 1 [0213.565] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.566] WriteFile (in: hFile=0xc40, lpBuffer=0x13080060*, nNumberOfBytesToWrite=0x261, lpNumberOfBytesWritten=0xa77f958, lpOverlapped=0x0 | out: lpBuffer=0x13080060*, lpNumberOfBytesWritten=0xa77f958*=0x261, lpOverlapped=0x0) returned 1 [0217.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf00 [0217.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebe60 [0217.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe60) returned 1 [0217.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13080060) returned 1 [0217.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fbc0e0) returned 1 [0217.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d08d0) returned 1 [0217.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a678) returned 1 [0217.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5900 [0217.146] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.146] WriteFile (in: hFile=0xc40, lpBuffer=0x675e840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa77f9e0, lpOverlapped=0x0 | out: lpBuffer=0x675e840*, lpNumberOfBytesWritten=0xa77f9e0*=0x10c, lpOverlapped=0x0) returned 1 [0224.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e840) returned 1 [0224.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0224.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe60) returned 1 [0224.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0224.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf00) returned 1 [0224.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb6e0) returned 1 [0224.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb780) returned 1 [0224.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7a8) returned 1 [0224.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675b5b0 [0224.398] wcscpy (in: _Dest=0x675b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" [0224.398] wcscat (in: _Dest=0x675b5b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.ac3a86" [0224.398] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0xa77f958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cfdf0 [0224.749] FlushFileBuffers (hFile=0xc40) returned 1 [0224.753] CloseHandle (hObject=0xc40) returned 1 [0224.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678c450 [0224.833] wcscpy (in: _Dest=0x678c450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0224.833] wcscat (in: _Dest=0x678c450, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\AC3A86-Readme.txt" [0224.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0224.833] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.364] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa77f974, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa77f974*=0x8b9, lpOverlapped=0x0) returned 1 [0225.366] CloseHandle (hObject=0x1038) returned 1 [0225.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c450) returned 1 [0225.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67727a0) returned 1 Thread: id = 7385 os_tid = 0x1820 [0201.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20 [0204.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0204.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.814] GetLastError () returned 0x5 [0204.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0204.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 7386 os_tid = 0x10e4 [0201.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20 [0204.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0204.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.867] GetLastError () returned 0x5 [0204.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0204.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 7387 os_tid = 0x67c [0201.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20 [0204.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0204.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.796] GetLastError () returned 0x5 [0204.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0204.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 7388 os_tid = 0x10e8 [0201.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20 [0204.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0204.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.865] GetLastError () returned 0x5 [0204.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0204.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 7389 os_tid = 0xf5c [0201.605] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0201.605] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x161c [0213.321] GetFileSizeEx (in: hFile=0x161c, lpFileSize=0x44cfa0c | out: lpFileSize=0x44cfa0c*=642) returned 1 [0213.321] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.321] ReadFile (in: hFile=0x161c, lpBuffer=0x44cf9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cf9f8, lpOverlapped=0x0 | out: lpBuffer=0x44cf9e8*, lpNumberOfBytesRead=0x44cf9f8*=0x4, lpOverlapped=0x0) returned 1 [0213.576] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb7d0 [0213.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb848 [0213.576] NtQuerySystemTime (in: CurrentTime=0x44cf980 | out: CurrentTime=0x44cf980*=132482711202960000) returned 0x0 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x635545f6 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x425e0d85 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x589c37d9 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x159ffe52 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x65f06422 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x2bc36c73 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x66cbc3d8 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x29771c86 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x415effa0 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x637ca94f [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x25b6b380 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0xf1e01a3 [0213.576] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x69c64cf3 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x8c8822b [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x37f86296 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x6a8b98e4 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x37ec904f [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x5ed18c9f [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x6c425fa7 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x21d1579b [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x6118365e [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0xcf88792 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x72d58e92 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x22669bf9 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x7c93d186 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x286089a6 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x65c58b62 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x69c64cf3 [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x14c9083d [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x6752067a [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x1bc8f28c [0213.577] RtlRandomEx (in: Seed=0x44cf978 | out: Seed=0x44cf978) returned 0x55d67555 [0213.585] ReadFile (in: hFile=0x161c, lpBuffer=0x1308b478, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x44cf974, lpOverlapped=0x0 | out: lpBuffer=0x1308b478*, lpNumberOfBytesRead=0x44cf974*=0x282, lpOverlapped=0x0) returned 1 [0213.585] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.585] WriteFile (in: hFile=0x161c, lpBuffer=0x1308f080*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x44cf978, lpOverlapped=0x0 | out: lpBuffer=0x1308f080*, lpNumberOfBytesWritten=0x44cf978*=0x282, lpOverlapped=0x0) returned 1 [0217.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfa0 [0217.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf78 [0217.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf78) returned 1 [0217.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1308f080) returned 1 [0217.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1308b478) returned 1 [0217.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aa48) returned 1 [0217.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b368) returned 1 [0217.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6050 [0217.190] SetFilePointerEx (in: hFile=0x161c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.190] WriteFile (in: hFile=0x161c, lpBuffer=0x675e3e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x44cfa00, lpOverlapped=0x0 | out: lpBuffer=0x675e3e0*, lpNumberOfBytesWritten=0x44cfa00*=0x10c, lpOverlapped=0x0) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e3e0) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf78) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfa0) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb7d0) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb870) returned 1 [0224.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb898) returned 1 [0224.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675b6e8 [0224.441] wcscpy (in: _Dest=0x675b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" [0224.441] wcscat (in: _Dest=0x675b6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.ac3a86" [0224.441] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0x44cf978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce718 [0224.804] FlushFileBuffers (hFile=0x161c) returned 1 [0224.809] CloseHandle (hObject=0x161c) returned 1 [0224.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675be38 [0224.878] wcscpy (in: _Dest=0x675be38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0224.878] wcscat (in: _Dest=0x675be38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\AC3A86-Readme.txt" [0224.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0224.878] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f9c [0224.892] WriteFile (in: hFile=0x1f9c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x44cf994, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x44cf994*=0x8b9, lpOverlapped=0x0) returned 1 [0224.907] CloseHandle (hObject=0x1f9c) returned 1 [0224.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675be38) returned 1 [0224.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67659c0) returned 1 Thread: id = 7390 os_tid = 0x10ec [0201.606] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0201.606] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db8 [0213.325] GetFileSizeEx (in: hFile=0x1db8, lpFileSize=0xa71fce4 | out: lpFileSize=0xa71fce4*=789) returned 1 [0213.325] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.325] ReadFile (in: hFile=0x1db8, lpBuffer=0xa71fcc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa71fcd0, lpOverlapped=0x0 | out: lpBuffer=0xa71fcc0*, lpNumberOfBytesRead=0xa71fcd0*=0x4, lpOverlapped=0x0) returned 1 [0213.586] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb618 [0213.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb848 [0213.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb8c0 [0213.586] NtQuerySystemTime (in: CurrentTime=0xa71fc58 | out: CurrentTime=0xa71fc58*=132482711202960000) returned 0x0 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x2fe625c9 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x7faffced [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x2ddf0f8 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x76ebbfbd [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5fa51cd9 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x4e046d05 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5b1f7051 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x1f47d6d9 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x7ac01dfc [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5b1f7051 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x45041275 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x43cc9af5 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x161e8d34 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x4e2aa1ee [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x3b5c1a58 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x21fa166e [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x1108c8af [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0xbdef1e8 [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5386258b [0213.586] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x2a52fd72 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x69df8ade [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5e29524c [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x4608c1d1 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x7ac8265f [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x659ab2a2 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x33a85ef8 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x62a2dba [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x36115809 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x5215b7d1 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x53ca2b66 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x44d4fc97 [0213.587] RtlRandomEx (in: Seed=0xa71fc50 | out: Seed=0xa71fc50) returned 0x31c8c56d [0213.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb618) returned 1 [0213.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13092c88 [0213.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13096890 [0213.596] ReadFile (in: hFile=0x1db8, lpBuffer=0x13092c88, nNumberOfBytesToRead=0x315, lpNumberOfBytesRead=0xa71fc4c, lpOverlapped=0x0 | out: lpBuffer=0x13092c88*, lpNumberOfBytesRead=0xa71fc4c*=0x315, lpOverlapped=0x0) returned 1 [0213.596] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.596] WriteFile (in: hFile=0x1db8, lpBuffer=0x13096890*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0xa71fc50, lpOverlapped=0x0 | out: lpBuffer=0x13096890*, lpNumberOfBytesWritten=0xa71fc50*=0x315, lpOverlapped=0x0) returned 1 [0217.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec3d8 [0217.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec3b0 [0217.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3b0) returned 1 [0217.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13096890) returned 1 [0217.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13092c88) returned 1 [0217.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad90) returned 1 [0217.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bc68) returned 1 [0217.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0217.216] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.216] WriteFile (in: hFile=0x1db8, lpBuffer=0x675e2c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa71fcd8, lpOverlapped=0x0 | out: lpBuffer=0x675e2c8*, lpNumberOfBytesWritten=0xa71fcd8*=0x10c, lpOverlapped=0x0) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675e2c8) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3b0) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec3d8) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb848) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb8e8) returned 1 [0224.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb910) returned 1 [0224.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675b820 [0224.439] wcscpy (in: _Dest=0x675b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" [0224.439] wcscat (in: _Dest=0x675b820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.ac3a86" [0224.439] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xa71fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cef28 [0224.802] FlushFileBuffers (hFile=0x1db8) returned 1 [0224.809] CloseHandle (hObject=0x1db8) returned 1 [0224.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x675bd00 [0224.877] wcscpy (in: _Dest=0x675bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0224.877] wcscat (in: _Dest=0x675bd00, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\AC3A86-Readme.txt" [0224.877] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0224.877] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1db8 [0224.891] WriteFile (in: hFile=0x1db8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa71fc6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa71fc6c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.905] CloseHandle (hObject=0x1db8) returned 1 [0224.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675bd00) returned 1 [0224.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764d08) returned 1 Thread: id = 7391 os_tid = 0x1b50 [0201.607] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0201.607] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc0 [0213.682] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0xa42f824 | out: lpFileSize=0xa42f824*=720) returned 1 [0213.682] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x2cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.682] ReadFile (in: hFile=0xbc0, lpBuffer=0xa42f800, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa42f810, lpOverlapped=0x0 | out: lpBuffer=0xa42f800*, lpNumberOfBytesRead=0xa42f810*=0x4, lpOverlapped=0x0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebb90 [0213.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebc08 [0213.686] NtQuerySystemTime (in: CurrentTime=0xa42f798 | out: CurrentTime=0xa42f798*=132482711204052000) returned 0x0 [0213.686] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x72b3b3dd [0213.686] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x58f37232 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0xb607b33 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x73392096 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x324a5fcd [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x2ae76a8b [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0xd4914f4 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x7b4a530e [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x9453f07 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x7bba81f7 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x1247ed5f [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x1c31d502 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0xbdef1e8 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x5c0e0fea [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x560ce2cc [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x4f1edf0e [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x3c3b8b21 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x6548f236 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x7951ae31 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x324a5fcd [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x59219144 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0xa220ad5 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x1c6a6c03 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x277efeb2 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x23e4016e [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x653299f1 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x15fe2527 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x5518f551 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x140ada00 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x730b61d [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x14c53846 [0213.687] RtlRandomEx (in: Seed=0xa42f790 | out: Seed=0xa42f790) returned 0x6fae9417 [0213.695] ReadFile (in: hFile=0xbc0, lpBuffer=0x130cf080, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0xa42f78c, lpOverlapped=0x0 | out: lpBuffer=0x130cf080*, lpNumberOfBytesRead=0xa42f78c*=0x2d0, lpOverlapped=0x0) returned 1 [0213.695] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.695] WriteFile (in: hFile=0xbc0, lpBuffer=0x130d2c88*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0xa42f790, lpOverlapped=0x0 | out: lpBuffer=0x130d2c88*, lpNumberOfBytesWritten=0xa42f790*=0x2d0, lpOverlapped=0x0) returned 1 [0215.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec130 [0215.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecdb0 [0215.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdb0) returned 1 [0215.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130d2c88) returned 1 [0215.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130cf080) returned 1 [0215.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aca0) returned 1 [0215.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b440) returned 1 [0215.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ab0 [0215.011] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.011] WriteFile (in: hFile=0xbc0, lpBuffer=0x6751148*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa42f818, lpOverlapped=0x0 | out: lpBuffer=0x6751148*, lpNumberOfBytesWritten=0xa42f818*=0x10c, lpOverlapped=0x0) returned 1 [0216.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751148) returned 1 [0216.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5960) returned 1 [0216.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdb0) returned 1 [0216.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ab0) returned 1 [0216.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec130) returned 1 [0216.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebb90) returned 1 [0216.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebc30) returned 1 [0216.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebc58) returned 1 [0216.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x12ea0060 [0216.752] wcscpy (in: _Dest=0x12ea0060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" [0216.752] wcscat (in: _Dest=0x12ea0060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.ac3a86" [0216.752] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0xa42f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x6957ce8 [0224.297] FlushFileBuffers (hFile=0xbc0) returned 1 [0224.304] CloseHandle (hObject=0xbc0) returned 1 [0224.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0c90 [0224.528] wcscpy (in: _Dest=0x12ea0c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0224.528] wcscat (in: _Dest=0x12ea0c90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\AC3A86-Readme.txt" [0224.529] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0224.529] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.048] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa42f7ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa42f7ac*=0x8b9, lpOverlapped=0x0) returned 1 [0225.050] CloseHandle (hObject=0xeb8) returned 1 [0225.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0c90) returned 1 [0225.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768f58) returned 1 Thread: id = 7392 os_tid = 0x1b60 [0201.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0201.608] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x154c [0213.685] GetFileSizeEx (in: hFile=0x154c, lpFileSize=0x9fafa9c | out: lpFileSize=0x9fafa9c*=671) returned 1 [0213.685] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.685] ReadFile (in: hFile=0x154c, lpBuffer=0x9fafa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9fafa88, lpOverlapped=0x0 | out: lpBuffer=0x9fafa78*, lpNumberOfBytesRead=0x9fafa88*=0x4, lpOverlapped=0x0) returned 1 [0213.699] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebc08 [0213.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebc80 [0213.699] NtQuerySystemTime (in: CurrentTime=0x9fafa10 | out: CurrentTime=0x9fafa10*=132482711204208000) returned 0x0 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x5fc5c041 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x751b2103 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x180c81d1 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x51a938f0 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x8b63307 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x383605bf [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x76c54352 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x3c06b528 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x3337562c [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x4e6e7164 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x684737cb [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x44187b24 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x65f78201 [0213.699] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x37e3d180 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0xbceac47 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x1175ff1e [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x709fb5bf [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x324af21c [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0xd408e42 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x31c8c56d [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x2312527c [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x5a56f40b [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x1fca0388 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x7d034793 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x262143ef [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x2b77e2c4 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x8a67b03 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x71920df5 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x23087066 [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x49340edf [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x6fd450bc [0213.700] RtlRandomEx (in: Seed=0x9fafa08 | out: Seed=0x9fafa08) returned 0x55a7098f [0213.709] ReadFile (in: hFile=0x154c, lpBuffer=0x130d6890, nNumberOfBytesToRead=0x29f, lpNumberOfBytesRead=0x9fafa04, lpOverlapped=0x0 | out: lpBuffer=0x130d6890*, lpNumberOfBytesRead=0x9fafa04*=0x29f, lpOverlapped=0x0) returned 1 [0213.709] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.709] WriteFile (in: hFile=0x154c, lpBuffer=0x130da498*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0x9fafa08, lpOverlapped=0x0 | out: lpBuffer=0x130da498*, lpNumberOfBytesWritten=0x9fafa08*=0x29f, lpOverlapped=0x0) returned 1 [0214.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec5e0 [0214.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecef0 [0214.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecef0) returned 1 [0214.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130da498) returned 1 [0214.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130d6890) returned 1 [0214.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b600) returned 1 [0214.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a1f8) returned 1 [0214.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0214.976] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.976] WriteFile (in: hFile=0x154c, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9fafa90, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0x9fafa90*=0x10c, lpOverlapped=0x0) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecef0) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec5e0) returned 1 [0216.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebc08) returned 1 [0216.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebca8) returned 1 [0216.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebcd0) returned 1 [0216.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675b958 [0216.710] wcscpy (in: _Dest=0x675b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" [0216.710] wcscat (in: _Dest=0x675b958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.ac3a86" [0216.710] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0x9fafa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf1d8 [0224.313] FlushFileBuffers (hFile=0x154c) returned 1 [0224.322] CloseHandle (hObject=0x154c) returned 1 [0224.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea08e8 [0224.535] wcscpy (in: _Dest=0x12ea08e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0224.535] wcscat (in: _Dest=0x12ea08e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\AC3A86-Readme.txt" [0224.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0224.535] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.060] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9fafa24, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x9fafa24*=0x8b9, lpOverlapped=0x0) returned 1 [0225.063] CloseHandle (hObject=0xeb8) returned 1 [0225.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea08e8) returned 1 [0225.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769080) returned 1 Thread: id = 7393 os_tid = 0x3f0 [0201.609] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0201.610] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.698] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1600 [0213.709] GetFileSizeEx (in: hFile=0x1600, lpFileSize=0x843fe1c | out: lpFileSize=0x843fe1c*=812) returned 1 [0213.710] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.710] ReadFile (in: hFile=0x1600, lpBuffer=0x843fdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x843fe08, lpOverlapped=0x0 | out: lpBuffer=0x843fdf8*, lpNumberOfBytesRead=0x843fe08*=0x4, lpOverlapped=0x0) returned 1 [0213.714] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebc80 [0213.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebcf8 [0213.714] NtQuerySystemTime (in: CurrentTime=0x843fd90 | out: CurrentTime=0x843fd90*=132482711204364000) returned 0x0 [0213.714] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x47f059c [0213.714] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0xc33984e [0213.714] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x52b8816c [0213.714] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x600ae61d [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x65fbb527 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x5315b9a9 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x702e143 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x36475732 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x5a2c148a [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x112b41ff [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x1fca0388 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x661bf0a4 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x1235e339 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x7841c040 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x17548d53 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x544d42f7 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x73395c51 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x3655ccf0 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0xdcb41a3 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x652ba6e2 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x6f5d5a29 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x70320acc [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0xa5a1d61 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x44976445 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x58f37232 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x792031eb [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x2a70f15b [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x212c084a [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x6a2fa3d1 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x787d4b33 [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x644b598c [0213.715] RtlRandomEx (in: Seed=0x843fd88 | out: Seed=0x843fd88) returned 0x30c31d77 [0213.724] ReadFile (in: hFile=0x1600, lpBuffer=0x130de0a0, nNumberOfBytesToRead=0x32c, lpNumberOfBytesRead=0x843fd84, lpOverlapped=0x0 | out: lpBuffer=0x130de0a0*, lpNumberOfBytesRead=0x843fd84*=0x32c, lpOverlapped=0x0) returned 1 [0213.724] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.724] WriteFile (in: hFile=0x1600, lpBuffer=0x130e1ca8*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x843fd88, lpOverlapped=0x0 | out: lpBuffer=0x130e1ca8*, lpNumberOfBytesWritten=0x843fd88*=0x32c, lpOverlapped=0x0) returned 1 [0215.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed2b0 [0215.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed2d8 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed2d8) returned 1 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130e1ca8) returned 1 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130de0a0) returned 1 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b2b8) returned 1 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b3f8) returned 1 [0215.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5bd8 [0215.770] SetFilePointerEx (in: hFile=0x1600, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.770] WriteFile (in: hFile=0x1600, lpBuffer=0x675de68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x843fe10, lpOverlapped=0x0 | out: lpBuffer=0x675de68*, lpNumberOfBytesWritten=0x843fe10*=0x10c, lpOverlapped=0x0) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675de68) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5c08) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed2d8) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5bd8) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed2b0) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebc80) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd20) returned 1 [0216.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd48) returned 1 [0216.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678c7f8 [0216.542] wcscpy (in: _Dest=0x678c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" [0216.542] wcscat (in: _Dest=0x678c7f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.ac3a86" [0216.542] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0x843fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce468 [0223.725] FlushFileBuffers (hFile=0x1600) returned 1 [0223.727] CloseHandle (hObject=0x1600) returned 1 [0224.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1038 [0224.485] wcscpy (in: _Dest=0x12ea1038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0224.485] wcscat (in: _Dest=0x12ea1038, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\AC3A86-Readme.txt" [0224.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0224.485] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0224.985] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x843fda4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x843fda4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.987] CloseHandle (hObject=0xeb8) returned 1 [0224.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1038) returned 1 [0224.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768e30) returned 1 Thread: id = 7394 os_tid = 0x1b64 [0201.610] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0201.611] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0213.711] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1070 [0213.712] GetFileSizeEx (in: hFile=0x1070, lpFileSize=0xa23ff14 | out: lpFileSize=0xa23ff14*=649) returned 1 [0213.712] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.712] ReadFile (in: hFile=0x1070, lpBuffer=0xa23fef0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa23ff00, lpOverlapped=0x0 | out: lpBuffer=0xa23fef0*, lpNumberOfBytesRead=0xa23ff00*=0x4, lpOverlapped=0x0) returned 1 [0213.740] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebcf8 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd70 [0213.741] NtQuerySystemTime (in: CurrentTime=0xa23fe88 | out: CurrentTime=0xa23fe88*=132482711204520000) returned 0x0 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x74216302 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x173cabc1 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x722620f9 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x2f119acb [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0xfc089ed [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x767524a0 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x56ae456c [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x63ee3b22 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x4a792e9a [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x74cc87b2 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x1362d348 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x14318385 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x3ae569f4 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x67b55760 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x62ee43d1 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x45b40fa5 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x76c54352 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x67681dd0 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x6d7fc610 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x62657fed [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x5209142d [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x672c6651 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x619a93b4 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x4f400334 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x7803868b [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x6443eca2 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x27eba690 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x619735d [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x316e499e [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x763c99d1 [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x303d26a [0213.741] RtlRandomEx (in: Seed=0xa23fe80 | out: Seed=0xa23fe80) returned 0x64d12296 [0213.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130e58b0 [0213.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130e94b8 [0213.763] ReadFile (in: hFile=0x1070, lpBuffer=0x130e58b0, nNumberOfBytesToRead=0x289, lpNumberOfBytesRead=0xa23fe7c, lpOverlapped=0x0 | out: lpBuffer=0x130e58b0*, lpNumberOfBytesRead=0xa23fe7c*=0x289, lpOverlapped=0x0) returned 1 [0213.763] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.763] WriteFile (in: hFile=0x1070, lpBuffer=0x130e94b8*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0xa23fe80, lpOverlapped=0x0 | out: lpBuffer=0x130e94b8*, lpNumberOfBytesWritten=0xa23fe80*=0x289, lpOverlapped=0x0) returned 1 [0215.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec248 [0215.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec1a8 [0215.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1a8) returned 1 [0215.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130e94b8) returned 1 [0215.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130e58b0) returned 1 [0215.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b0d8) returned 1 [0215.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689bbd8) returned 1 [0215.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ba0 [0215.019] SetFilePointerEx (in: hFile=0x1070, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.019] WriteFile (in: hFile=0x1070, lpBuffer=0x67518f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa23ff08, lpOverlapped=0x0 | out: lpBuffer=0x67518f0*, lpNumberOfBytesWritten=0xa23ff08*=0x10c, lpOverlapped=0x0) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef59c0) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1a8) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ba0) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec248) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebcf8) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd98) returned 1 [0216.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebdc0) returned 1 [0216.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x12ea02d0 [0216.756] wcscpy (in: _Dest=0x12ea02d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" [0216.756] wcscat (in: _Dest=0x12ea02d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.ac3a86" [0216.757] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0xa23fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x6957f98 [0224.357] FlushFileBuffers (hFile=0x1070) returned 1 [0224.358] CloseHandle (hObject=0x1070) returned 1 [0224.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea18c0 [0224.563] wcscpy (in: _Dest=0x12ea18c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0224.563] wcscat (in: _Dest=0x12ea18c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\AC3A86-Readme.txt" [0224.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0224.563] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.101] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa23fe9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa23fe9c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.103] CloseHandle (hObject=0xeb8) returned 1 [0225.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea18c0) returned 1 [0225.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a0b0) returned 1 Thread: id = 7395 os_tid = 0x1b68 [0201.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0201.611] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0213.725] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20bc [0213.725] GetFileSizeEx (in: hFile=0x20bc, lpFileSize=0xab0fbcc | out: lpFileSize=0xab0fbcc*=1099) returned 1 [0213.725] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x447, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.725] ReadFile (in: hFile=0x20bc, lpBuffer=0xab0fba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab0fbb8, lpOverlapped=0x0 | out: lpBuffer=0xab0fba8*, lpNumberOfBytesRead=0xab0fbb8*=0x4, lpOverlapped=0x0) returned 1 [0213.809] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf50 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfc8 [0213.809] NtQuerySystemTime (in: CurrentTime=0xab0fb40 | out: CurrentTime=0xab0fb40*=132482711205300000) returned 0x0 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x2b129200 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x6317ff62 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x5a428e4c [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x56d3e2ff [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0xf1e01a3 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x7f465251 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x55911555 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x37dc68df [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x6b6f81b8 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x2498fd2 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x478742eb [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x5fc5c041 [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x3ba3c8ef [0213.809] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x30182196 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x43c5f49b [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x574ccf44 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x651a2862 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x67b8706c [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x5e8a864d [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x1e3e8936 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x3897a419 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x9681893 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x236c8469 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x49e37937 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x21fbccbd [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x7a3cdd4b [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x2af2386 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x4e5ee3a5 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x55a7098f [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x7bcc7fbd [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x6e5fa511 [0213.810] RtlRandomEx (in: Seed=0xab0fb38 | out: Seed=0xab0fb38) returned 0x304a636f [0213.817] ReadFile (in: hFile=0x20bc, lpBuffer=0x1310b478, nNumberOfBytesToRead=0x44b, lpNumberOfBytesRead=0xab0fb34, lpOverlapped=0x0 | out: lpBuffer=0x1310b478*, lpNumberOfBytesRead=0xab0fb34*=0x44b, lpOverlapped=0x0) returned 1 [0213.817] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.818] WriteFile (in: hFile=0x20bc, lpBuffer=0x1310f080*, nNumberOfBytesToWrite=0x44b, lpNumberOfBytesWritten=0xab0fb38, lpOverlapped=0x0 | out: lpBuffer=0x1310f080*, lpNumberOfBytesWritten=0xab0fb38*=0x44b, lpOverlapped=0x0) returned 1 [0215.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd60 [0215.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecd88 [0215.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd88) returned 1 [0215.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1310f080) returned 1 [0215.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1310b478) returned 1 [0215.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b1c8) returned 1 [0215.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a5e8) returned 1 [0215.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5330 [0215.021] SetFilePointerEx (in: hFile=0x20bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.021] WriteFile (in: hFile=0x20bc, lpBuffer=0x67515a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xab0fbc0, lpOverlapped=0x0 | out: lpBuffer=0x67515a8*, lpNumberOfBytesWritten=0xab0fbc0*=0x10c, lpOverlapped=0x0) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5360) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd88) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5330) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecd60) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf50) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebff0) returned 1 [0216.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec018) returned 1 [0216.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x12ea0408 [0216.772] wcscpy (in: _Dest=0x12ea0408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" [0216.772] wcscat (in: _Dest=0x12ea0408, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.ac3a86" [0216.772] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xab0fb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x69580f0 [0224.360] FlushFileBuffers (hFile=0x20bc) returned 1 [0224.361] CloseHandle (hObject=0x20bc) returned 1 [0224.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea19f8 [0224.565] wcscpy (in: _Dest=0x12ea19f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0224.565] wcscat (in: _Dest=0x12ea19f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\AC3A86-Readme.txt" [0224.565] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0224.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.110] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xab0fb54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xab0fb54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.112] CloseHandle (hObject=0xeb8) returned 1 [0225.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea19f8) returned 1 [0225.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a1d8) returned 1 Thread: id = 7396 os_tid = 0x125c [0201.612] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0201.612] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.727] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x237c [0213.728] GetFileSizeEx (in: hFile=0x237c, lpFileSize=0x8e9f91c | out: lpFileSize=0x8e9f91c*=650) returned 1 [0213.728] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x286, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.728] ReadFile (in: hFile=0x237c, lpBuffer=0x8e9f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e9f908, lpOverlapped=0x0 | out: lpBuffer=0x8e9f8f8*, lpNumberOfBytesRead=0x8e9f908*=0x4, lpOverlapped=0x0) returned 1 [0213.763] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebd70 [0213.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebde8 [0213.763] NtQuerySystemTime (in: CurrentTime=0x8e9f890 | out: CurrentTime=0x8e9f890*=132482711204832000) returned 0x0 [0213.763] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0xa667381 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x2c8c5432 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x115dda2e [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x52dbc26b [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x50ee38b2 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x560836e6 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x28e68e03 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x74216302 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x24b2b1ab [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x615676bb [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x661b3ce2 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x358dd97a [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x100e969f [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x4de2243e [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x7e9331b8 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x3b5c948e [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x28e68e03 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x646ec562 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0xd0e3600 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x9fb3f0a [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x1c7b3d5c [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x7bbc7d2c [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x7f55af47 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x25e2d6f1 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x2fbd2f01 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x144185b9 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x41829a82 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x49bb344f [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x40f1a061 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0xb5155e9 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x14318385 [0213.764] RtlRandomEx (in: Seed=0x8e9f888 | out: Seed=0x8e9f888) returned 0x3c552a89 [0213.772] ReadFile (in: hFile=0x237c, lpBuffer=0x130ed0c0, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x8e9f884, lpOverlapped=0x0 | out: lpBuffer=0x130ed0c0*, lpNumberOfBytesRead=0x8e9f884*=0x28a, lpOverlapped=0x0) returned 1 [0213.772] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.772] WriteFile (in: hFile=0x237c, lpBuffer=0x130f0cc8*, nNumberOfBytesToWrite=0x28a, lpNumberOfBytesWritten=0x8e9f888, lpOverlapped=0x0 | out: lpBuffer=0x130f0cc8*, lpNumberOfBytesWritten=0x8e9f888*=0x28a, lpOverlapped=0x0) returned 1 [0215.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecdd8 [0215.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec270 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec270) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130f0cc8) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130ed0c0) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b240) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ba28) returned 1 [0215.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6080 [0215.017] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.017] WriteFile (in: hFile=0x237c, lpBuffer=0x6752728*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e9f910, lpOverlapped=0x0 | out: lpBuffer=0x6752728*, lpNumberOfBytesWritten=0x8e9f910*=0x10c, lpOverlapped=0x0) returned 1 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d80) returned 1 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec270) returned 1 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6080) returned 1 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecdd8) returned 1 [0216.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebd70) returned 1 [0216.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe10) returned 1 [0216.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe38) returned 1 [0216.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x12ea0198 [0216.754] wcscpy (in: _Dest=0x12ea0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" [0216.754] wcscat (in: _Dest=0x12ea0198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.ac3a86" [0216.754] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0x8e9f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x6957e40 [0224.300] FlushFileBuffers (hFile=0x237c) returned 1 [0224.308] CloseHandle (hObject=0x237c) returned 1 [0224.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0b58 [0224.531] wcscpy (in: _Dest=0x12ea0b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0224.531] wcscat (in: _Dest=0x12ea0b58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\AC3A86-Readme.txt" [0224.531] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0224.531] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.044] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e9f8a4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x8e9f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.046] CloseHandle (hObject=0xeb8) returned 1 [0225.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0b58) returned 1 [0225.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769f88) returned 1 Thread: id = 7397 os_tid = 0x120 [0201.625] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0201.625] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0205.667] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2098 [0205.668] GetFileSizeEx (in: hFile=0x2098, lpFileSize=0xae2f7a4 | out: lpFileSize=0xae2f7a4*=203) returned 1 [0205.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0205.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0205.668] NtQuerySystemTime (in: CurrentTime=0xae2f718 | out: CurrentTime=0xae2f718*=132482711141496000) returned 0x0 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x36493f4 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x51e96e1e [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x371d07e3 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x452032a4 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x45b548f2 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x5225f768 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x54b11f88 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x37269c15 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x9261daf [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x10bb0da4 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x6565aeb3 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x717c402e [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x21f8507e [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x718cdc76 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x6e8af0f2 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x4653fcbd [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x2bd516b0 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x4b4b44d4 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x147ef2aa [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0xb38136d [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x4d715c5 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x64dc4858 [0205.668] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x29714133 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x589970ef [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x45360ee9 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x32d6f192 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x756594e4 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x1df14d2b [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x230c1ac8 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x7bce8fc5 [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x32f89a0c [0205.669] RtlRandomEx (in: Seed=0xae2f710 | out: Seed=0xae2f710) returned 0x409efeea [0205.676] ReadFile (in: hFile=0x2098, lpBuffer=0x69fe160, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0xae2f70c, lpOverlapped=0x0 | out: lpBuffer=0x69fe160*, lpNumberOfBytesRead=0xae2f70c*=0xcb, lpOverlapped=0x0) returned 1 [0208.219] SetFilePointerEx (in: hFile=0x2098, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.219] WriteFile (in: hFile=0x2098, lpBuffer=0x6a01d68*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0xae2f710, lpOverlapped=0x0 | out: lpBuffer=0x6a01d68*, lpNumberOfBytesWritten=0xae2f710*=0xcb, lpOverlapped=0x0) returned 1 [0215.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed260 [0215.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed288 [0215.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed288) returned 1 [0215.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a01d68) returned 1 [0215.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fe160) returned 1 [0215.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1a958) returned 1 [0215.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f70) returned 1 [0215.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5b78 [0215.659] SetFilePointerEx (in: hFile=0x2098, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.659] WriteFile (in: hFile=0x2098, lpBuffer=0x675dd50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2f798, lpOverlapped=0x0 | out: lpBuffer=0x675dd50*, lpNumberOfBytesWritten=0xae2f798*=0x10c, lpOverlapped=0x0) returned 1 [0216.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dd50) returned 1 [0216.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ba8) returned 1 [0216.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed288) returned 1 [0216.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b78) returned 1 [0216.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed260) returned 1 [0216.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0216.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9e8) returned 1 [0216.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0216.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b340 [0216.518] wcscpy (in: _Dest=0x678b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" [0216.518] wcscat (in: _Dest=0x678b340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.ac3a86" [0216.518] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.ac3a86", NtPathName=0xae2f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778080 [0216.924] FlushFileBuffers (hFile=0x2098) returned 1 [0216.932] CloseHandle (hObject=0x2098) returned 1 [0223.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765f88 [0223.926] wcscpy (in: _Dest=0x6765f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0223.926] wcscat (in: _Dest=0x6765f88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" [0223.926] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ac3a86-readme.txt")) returned 0xffffffff [0223.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.419] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xae2f72c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xae2f72c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.425] CloseHandle (hObject=0x1038) returned 1 [0225.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765f88) returned 1 [0225.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769d38) returned 1 Thread: id = 7398 os_tid = 0x24c [0201.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0201.627] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.676] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x171c [0205.677] GetFileSizeEx (in: hFile=0x171c, lpFileSize=0xaf9fbbc | out: lpFileSize=0xaf9fbbc*=217) returned 1 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0205.677] NtQuerySystemTime (in: CurrentTime=0xaf9fb30 | out: CurrentTime=0xaf9fb30*=132482711141496000) returned 0x0 [0205.677] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x3dd7cd93 [0205.677] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x6973e4b [0205.677] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x3d229505 [0205.677] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x2f0143a6 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x57d39772 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x1f8ec6c5 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x10c78cc1 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x71423bb6 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x67480535 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x186befd3 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x37f59bac [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x30ff852f [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x42ed989b [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x957cce8 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x4f5068ef [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x2b3291fe [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x3ac2c1c2 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x7cc94aeb [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x7765566a [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x2394c4a [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x36703fc [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0xb8bc828 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x3cefa1fb [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x6ce30378 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x42d0247f [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x15cfb413 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x2ea027dc [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0xe5b6b01 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x1adfec3f [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x2008dd48 [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x52fc69cf [0205.678] RtlRandomEx (in: Seed=0xaf9fb28 | out: Seed=0xaf9fb28) returned 0x6c589eea [0205.687] ReadFile (in: hFile=0x171c, lpBuffer=0x69f6950, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xaf9fb24, lpOverlapped=0x0 | out: lpBuffer=0x69f6950*, lpNumberOfBytesRead=0xaf9fb24*=0xd9, lpOverlapped=0x0) returned 1 [0208.221] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.221] WriteFile (in: hFile=0x171c, lpBuffer=0x69fa558*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xaf9fb28, lpOverlapped=0x0 | out: lpBuffer=0x69fa558*, lpNumberOfBytesWritten=0xaf9fb28*=0xd9, lpOverlapped=0x0) returned 1 [0215.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed210 [0215.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed238 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed238) returned 1 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69fa558) returned 1 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f6950) returned 1 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b060) returned 1 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1f28) returned 1 [0215.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5b18 [0215.658] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.658] WriteFile (in: hFile=0x171c, lpBuffer=0x675dc38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf9fbb0, lpOverlapped=0x0 | out: lpBuffer=0x675dc38*, lpNumberOfBytesWritten=0xaf9fbb0*=0x10c, lpOverlapped=0x0) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dc38) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b48) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed238) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b18) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed210) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0217.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0217.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678b958 [0217.301] wcscpy (in: _Dest=0x678b958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" [0217.301] wcscat (in: _Dest=0x678b958, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.ac3a86" [0217.301] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0xaf9fb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0217.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784ab8 [0224.613] FlushFileBuffers (hFile=0x171c) returned 1 [0224.617] CloseHandle (hObject=0x171c) returned 1 [0224.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c300 [0224.782] wcscpy (in: _Dest=0x676c300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0224.782] wcscat (in: _Dest=0x676c300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" [0224.783] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0224.783] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.314] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaf9fb44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xaf9fb44*=0x8b9, lpOverlapped=0x0) returned 1 [0225.315] CloseHandle (hObject=0x1038) returned 1 [0225.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c300) returned 1 [0225.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769e60) returned 1 Thread: id = 7399 os_tid = 0x368 [0201.628] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0201.628] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0205.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x151c [0205.688] GetFileSizeEx (in: hFile=0x151c, lpFileSize=0xaabfc34 | out: lpFileSize=0xaabfc34*=222) returned 1 [0205.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0205.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0205.689] NtQuerySystemTime (in: CurrentTime=0xaabfba8 | out: CurrentTime=0xaabfba8*=132482711141652000) returned 0x0 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x70b3959f [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x2afc434c [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x79b5358e [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x1219d2d [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x203d64a0 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x1694295c [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x1ed6d92c [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x1940deb6 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x4e610ef4 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x55229d73 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x575385ab [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x5e4e6017 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0xd8dd8ac [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x34131ca5 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x3a7e039e [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x40bdffd3 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x77f4e9f1 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x8f1f481 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x302becf2 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x34131ca5 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x23731868 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x8afd826 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x4f5068ef [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x3822c948 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x2c9b1fdf [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x12331c4f [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x1e8486f [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x45428e06 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x2b2f8920 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x27617163 [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x2c9b1fdf [0205.689] RtlRandomEx (in: Seed=0xaabfba0 | out: Seed=0xaabfba0) returned 0x56a7fc22 [0205.697] ReadFile (in: hFile=0x151c, lpBuffer=0x69ef140, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xaabfb9c, lpOverlapped=0x0 | out: lpBuffer=0x69ef140*, lpNumberOfBytesRead=0xaabfb9c*=0xde, lpOverlapped=0x0) returned 1 [0208.223] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.223] WriteFile (in: hFile=0x151c, lpBuffer=0x69f2d48*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xaabfba0, lpOverlapped=0x0 | out: lpBuffer=0x69f2d48*, lpNumberOfBytesWritten=0xaabfba0*=0xde, lpOverlapped=0x0) returned 1 [0217.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0217.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0217.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0217.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69f2d48) returned 1 [0217.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69ef140) returned 1 [0217.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 [0217.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ee0) returned 1 [0217.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5b18 [0218.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0218.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5b48 [0218.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0218.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0218.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0218.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b498) returned 1 [0218.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ee0) returned 1 [0218.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675dc38 [0218.550] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.550] WriteFile (in: hFile=0x151c, lpBuffer=0x675dc38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaabfc28, lpOverlapped=0x0 | out: lpBuffer=0x675dc38*, lpNumberOfBytesWritten=0xaabfc28*=0x10c, lpOverlapped=0x0) returned 1 [0224.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dc38) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b48) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5b18) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0224.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0224.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x675c6c0 [0224.464] wcscpy (in: _Dest=0x675c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" [0224.464] wcscat (in: _Dest=0x675c6c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86" [0224.464] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xaabfba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6778830 [0224.826] FlushFileBuffers (hFile=0x151c) returned 1 [0225.323] CloseHandle (hObject=0x151c) returned 1 [0225.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c588 [0225.325] wcscpy (in: _Dest=0x678c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0225.325] wcscat (in: _Dest=0x678c588, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0225.326] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0225.326] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x151c [0225.327] WriteFile (in: hFile=0x151c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaabfbbc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xaabfbbc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.329] CloseHandle (hObject=0x151c) returned 1 [0225.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c588) returned 1 [0225.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769898) returned 1 Thread: id = 7400 os_tid = 0xec0 [0201.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0213.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0213.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.005] GetLastError () returned 0x5 [0213.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0213.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 7401 os_tid = 0x1838 [0201.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0213.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0213.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.007] GetLastError () returned 0x5 [0213.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0213.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8868) returned 1 Thread: id = 7402 os_tid = 0x183c [0201.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.630] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0201.630] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\" [0201.630] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*" [0201.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.630] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.631] wcscmp (_String1=".", _String2=".") returned 0 [0201.631] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.631] wcscmp (_String1="..", _String2=".") returned 1 [0201.631] wcscmp (_String1="..", _String2="..") returned 0 [0201.631] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.631] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2a08) returned 1 Thread: id = 7403 os_tid = 0x1840 [0201.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.633] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0201.633] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\" [0201.633] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*" [0201.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.633] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.633] wcscmp (_String1=".", _String2=".") returned 0 [0201.633] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.633] wcscmp (_String1="..", _String2=".") returned 1 [0201.633] wcscmp (_String1="..", _String2="..") returned 0 [0201.633] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.633] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 Thread: id = 7404 os_tid = 0x141c [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.635] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0201.635] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\" [0201.635] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*" [0201.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.635] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.636] wcscmp (_String1=".", _String2=".") returned 0 [0201.636] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.636] wcscmp (_String1="..", _String2=".") returned 1 [0201.636] wcscmp (_String1="..", _String2="..") returned 0 [0201.636] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.636] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 Thread: id = 7405 os_tid = 0x1844 [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.638] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0201.638] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\" [0201.638] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*" [0201.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.638] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.639] wcscmp (_String1=".", _String2=".") returned 0 [0201.639] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.639] wcscmp (_String1="..", _String2=".") returned 1 [0201.639] wcscmp (_String1="..", _String2="..") returned 0 [0201.639] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.639] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752728) returned 1 Thread: id = 7406 os_tid = 0x1674 [0201.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.641] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0201.641] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\" [0201.641] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*" [0201.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.641] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.641] wcscmp (_String1=".", _String2=".") returned 0 [0201.641] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.641] wcscmp (_String1="..", _String2=".") returned 1 [0201.641] wcscmp (_String1="..", _String2="..") returned 0 [0201.641] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.641] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 Thread: id = 7407 os_tid = 0x11b0 [0201.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.644] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0201.644] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\" [0201.644] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*" [0201.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.644] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.644] wcscmp (_String1=".", _String2=".") returned 0 [0201.644] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.644] wcscmp (_String1="..", _String2=".") returned 1 [0201.644] wcscmp (_String1="..", _String2="..") returned 0 [0201.644] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.644] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67518f0) returned 1 Thread: id = 7408 os_tid = 0x5c8 [0201.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.646] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0201.646] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\" [0201.646] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*" [0201.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.646] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.646] wcscmp (_String1=".", _String2=".") returned 0 [0201.646] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.646] wcscmp (_String1="..", _String2=".") returned 1 [0201.647] wcscmp (_String1="..", _String2="..") returned 0 [0201.647] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.647] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 Thread: id = 7409 os_tid = 0x14f0 [0201.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.648] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0201.648] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\" [0201.648] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*" [0201.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.648] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.649] wcscmp (_String1=".", _String2=".") returned 0 [0201.649] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.649] wcscmp (_String1="..", _String2=".") returned 1 [0201.649] wcscmp (_String1="..", _String2="..") returned 0 [0201.649] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.649] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 Thread: id = 7410 os_tid = 0xc4c [0201.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x6758f58 [0201.651] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0201.651] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\" [0201.651] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*" [0201.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.651] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.651] wcscmp (_String1=".", _String2=".") returned 0 [0201.651] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.651] wcscmp (_String1="..", _String2=".") returned 1 [0201.651] wcscmp (_String1="..", _String2="..") returned 0 [0201.651] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.651] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 Thread: id = 7411 os_tid = 0xdc4 [0201.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6758f58 [0201.653] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0201.653] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\" [0201.653] wcscat (in: _Dest=0x6758f58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*" [0201.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.653] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.654] wcscmp (_String1=".", _String2=".") returned 0 [0201.654] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.654] wcscmp (_String1="..", _String2=".") returned 1 [0201.654] wcscmp (_String1="..", _String2="..") returned 0 [0201.654] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.654] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759080) returned 1 Thread: id = 7412 os_tid = 0x6d4 [0201.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x6759080 [0201.656] wcscpy (in: _Dest=0x6759080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0201.656] wcscat (in: _Dest=0x6759080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\" [0201.656] wcscat (in: _Dest=0x6759080, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*" [0201.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.656] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1f600 [0201.656] wcscmp (_String1=".", _String2=".") returned 0 [0201.656] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.656] wcscmp (_String1="..", _String2=".") returned 1 [0201.656] wcscmp (_String1="..", _String2="..") returned 0 [0201.656] FindNextFileW (in: hFindFile=0x3f1f600, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.657] FindClose (in: hFindFile=0x3f1f600 | out: hFindFile=0x3f1f600) returned 1 [0201.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0201.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759080) returned 1 [0201.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758ab8) returned 1 Thread: id = 7413 os_tid = 0x1638 [0201.658] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 0x2020 [0201.658] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", dwFileAttributes=0x20) returned 1 [0205.698] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1988 [0205.699] GetFileSizeEx (in: hFile=0x1988, lpFileSize=0xbbff904 | out: lpFileSize=0xbbff904*=286) returned 1 [0205.699] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.699] ReadFile (in: hFile=0x1988, lpBuffer=0xbbff8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbff8f0, lpOverlapped=0x0 | out: lpBuffer=0xbbff8e0*, lpNumberOfBytesRead=0xbbff8f0*=0x4, lpOverlapped=0x0) returned 1 [0208.225] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce68 [0208.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c760 [0208.225] NtQuerySystemTime (in: CurrentTime=0xbbff878 | out: CurrentTime=0xbbff878*=132482711167080000) returned 0x0 [0208.225] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x17b0f318 [0208.225] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x2926014a [0208.225] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0xe74298d [0208.225] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x3fe485f [0208.225] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x5c569a3b [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x2a38c8f9 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x71d3a809 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x3c2924df [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x39ad2151 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x35390722 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x2d1f4a7 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x3d652fbd [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x2ca5daf9 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x73ae55a4 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x69e147e4 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x1dd0c7d4 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x731d7ba3 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x1419a60c [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x1570efbf [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x56e50ff3 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0xda42424 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x7b8f055 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x163252e9 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x46102fa3 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x558ee810 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x3c60347d [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x2b283616 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x7bf3ae97 [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x370c358c [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x49e2527c [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x6fde5f8a [0208.226] RtlRandomEx (in: Seed=0xbbff870 | out: Seed=0xbbff870) returned 0x74ff19c8 [0208.234] ReadFile (in: hFile=0x1988, lpBuffer=0x130658b0, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0xbbff86c, lpOverlapped=0x0 | out: lpBuffer=0x130658b0*, lpNumberOfBytesRead=0xbbff86c*=0x11e, lpOverlapped=0x0) returned 1 [0208.234] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.234] WriteFile (in: hFile=0x1988, lpBuffer=0x130694b8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xbbff870, lpOverlapped=0x0 | out: lpBuffer=0x130694b8*, lpNumberOfBytesWritten=0xbbff870*=0x11e, lpOverlapped=0x0) returned 1 [0214.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0214.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec838 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec838) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130694b8) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130658b0) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0214.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2720) returned 1 [0214.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5ea0 [0214.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec838) returned 1 [0214.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0214.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec838 [0214.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec8b0 [0214.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0214.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc88) returned 1 [0214.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2720) returned 1 [0214.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x6752098 [0214.145] SetFilePointerEx (in: hFile=0x1988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.146] WriteFile (in: hFile=0x1988, lpBuffer=0x6752098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbff8f8, lpOverlapped=0x0 | out: lpBuffer=0x6752098*, lpNumberOfBytesWritten=0xbbff8f8*=0x10c, lpOverlapped=0x0) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752098) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec838) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce68) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0214.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0214.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40540 [0214.282] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" [0214.282] wcscat (in: _Dest=0x3d40540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.ac3a86" [0214.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.ac3a86", NtPathName=0xbbff870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776ab8 [0216.642] FlushFileBuffers (hFile=0x1988) returned 1 [0216.649] CloseHandle (hObject=0x1988) returned 1 [0216.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67661d8 [0216.885] wcscpy (in: _Dest=0x67661d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0216.885] wcscat (in: _Dest=0x67661d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\AC3A86-Readme.txt" [0216.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ac3a86-readme.txt")) returned 0xffffffff [0216.885] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ffc [0223.954] WriteFile (in: hFile=0x1ffc, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbbff88c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbbff88c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.549] CloseHandle (hObject=0x1ffc) returned 1 [0225.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67661d8) returned 1 [0225.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e98) returned 1 Thread: id = 7414 os_tid = 0x608 [0201.659] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 0x2020 [0201.660] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0205.699] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc58 [0205.699] GetFileSizeEx (in: hFile=0xc58, lpFileSize=0xbadfa24 | out: lpFileSize=0xbadfa24*=318) returned 1 [0205.699] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x13a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.699] ReadFile (in: hFile=0xc58, lpBuffer=0xbadfa00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbadfa10, lpOverlapped=0x0 | out: lpBuffer=0xbadfa00*, lpNumberOfBytesRead=0xbadfa10*=0x4, lpOverlapped=0x0) returned 1 [0208.237] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c760 [0208.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0208.237] NtQuerySystemTime (in: CurrentTime=0xbadf998 | out: CurrentTime=0xbadf998*=132482711167080000) returned 0x0 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x669c2bab [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x1928368e [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x698ce62f [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x7f5c81b [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x2db5799e [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x4df5b74 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x29029f8d [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x5078eab6 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x42777e7f [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x7fd1c7a6 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x3c3cec97 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x12dca644 [0208.237] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x53ef8b2d [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x225d4800 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x79e83463 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x5c93e08c [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x1645bb5e [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x5030ac66 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x7c815264 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x48ddb914 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x3d7402a4 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x2b73c9b7 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x3041272c [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x53991acc [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x7d9a35de [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x6751f2d7 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x54189205 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0xf452f9 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x43b75d1d [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x5c2d0b8a [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x7e8b5005 [0208.238] RtlRandomEx (in: Seed=0xbadf990 | out: Seed=0xbadf990) returned 0x6f671dd7 [0208.247] ReadFile (in: hFile=0xc58, lpBuffer=0x1306d0c0, nNumberOfBytesToRead=0x13e, lpNumberOfBytesRead=0xbadf98c, lpOverlapped=0x0 | out: lpBuffer=0x1306d0c0*, lpNumberOfBytesRead=0xbadf98c*=0x13e, lpOverlapped=0x0) returned 1 [0208.247] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.247] WriteFile (in: hFile=0xc58, lpBuffer=0x13070cc8*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0xbadf990, lpOverlapped=0x0 | out: lpBuffer=0x13070cc8*, lpNumberOfBytesWritten=0xbadf990*=0x13e, lpOverlapped=0x0) returned 1 [0214.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec8b0 [0214.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec8d8 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8d8) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13070cc8) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1306d0c0) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d6e8) returned 1 [0214.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2768) returned 1 [0214.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f00 [0214.148] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.148] WriteFile (in: hFile=0xc58, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbadfa18, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xbadfa18*=0x10c, lpOverlapped=0x0) returned 1 [0214.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8d8) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec8b0) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c760) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0214.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40198 [0214.285] wcscpy (in: _Dest=0x3d40198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" [0214.285] wcscat (in: _Dest=0x3d40198, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.ac3a86" [0214.285] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xbadf990, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0216.655] FlushFileBuffers (hFile=0xc58) returned 1 [0216.661] CloseHandle (hObject=0xc58) returned 1 [0216.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765ae8 [0216.899] wcscpy (in: _Dest=0x6765ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0216.899] wcscat (in: _Dest=0x6765ae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\AC3A86-Readme.txt" [0216.899] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0216.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc80 [0223.955] WriteFile (in: hFile=0xc80, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbadf9ac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xbadf9ac*=0x8b9, lpOverlapped=0x0) returned 1 [0225.553] CloseHandle (hObject=0xc80) returned 1 [0225.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765ae8) returned 1 [0225.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6762ab8) returned 1 Thread: id = 7415 os_tid = 0x1508 [0201.660] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 0x2020 [0201.660] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0205.700] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2164 [0205.700] GetFileSizeEx (in: hFile=0x2164, lpFileSize=0x623f944 | out: lpFileSize=0x623f944*=179) returned 1 [0205.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0205.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0205.700] NtQuerySystemTime (in: CurrentTime=0x623f8b8 | out: CurrentTime=0x623f8b8*=132482711141808000) returned 0x0 [0205.700] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x1c416352 [0205.700] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x20292536 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x7d2cf290 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x15cfb413 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x5e63d18 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x5ab0f4f1 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x5809c144 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x6a852ae4 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x74545aa8 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x6ce30378 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0xb5bed15 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x282990e9 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x3d1b61f3 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x56a7fc22 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x7797e6bd [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x23496255 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x6ce5ea30 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x1f15fb90 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x42c1b80b [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x68304553 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x2938c1a3 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x194288e9 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x5efcceb0 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x52d90a39 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x6cbe81a4 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x57dfaea1 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x135f7a86 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x605812ac [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x63e424bb [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x388fa742 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x388fa742 [0205.701] RtlRandomEx (in: Seed=0x623f8b0 | out: Seed=0x623f8b0) returned 0x78354b1f [0205.710] ReadFile (in: hFile=0x2164, lpBuffer=0x69e7930, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x623f8ac, lpOverlapped=0x0 | out: lpBuffer=0x69e7930*, lpNumberOfBytesRead=0x623f8ac*=0xb3, lpOverlapped=0x0) returned 1 [0208.249] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.249] WriteFile (in: hFile=0x2164, lpBuffer=0x69eb538*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x623f8b0, lpOverlapped=0x0 | out: lpBuffer=0x69eb538*, lpNumberOfBytesWritten=0x623f8b0*=0xb3, lpOverlapped=0x0) returned 1 [0214.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec900 [0214.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec928 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec928) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69eb538) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e7930) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86120) returned 1 [0214.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e98) returned 1 [0214.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0214.149] SetFilePointerEx (in: hFile=0x2164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.149] WriteFile (in: hFile=0x2164, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x623f938, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0x623f938*=0x10c, lpOverlapped=0x0) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec928) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec900) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b528) returned 1 [0214.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc38) returned 1 [0214.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40b58 [0214.287] wcscpy (in: _Dest=0x3d40b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" [0214.287] wcscat (in: _Dest=0x3d40b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.ac3a86" [0214.287] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0x623f8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776d48 [0216.647] FlushFileBuffers (hFile=0x2164) returned 1 [0216.657] CloseHandle (hObject=0x2164) returned 1 [0216.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766428 [0216.890] wcscpy (in: _Dest=0x6766428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0216.890] wcscat (in: _Dest=0x6766428, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\AC3A86-Readme.txt" [0216.890] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0216.890] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104c [0223.953] WriteFile (in: hFile=0x104c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x623f8cc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x623f8cc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.546] CloseHandle (hObject=0x104c) returned 1 [0225.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766428) returned 1 [0225.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67653f8) returned 1 Thread: id = 7416 os_tid = 0x150c [0201.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif")) returned 0x20 [0201.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0201.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.661] GetLastError () returned 0x5 [0201.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0201.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 7417 os_tid = 0x1510 [0201.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif")) returned 0x20 [0201.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0201.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.663] GetLastError () returned 0x5 [0201.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0201.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 7418 os_tid = 0x1514 [0201.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0201.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0201.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.664] GetLastError () returned 0x5 [0201.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0201.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 7419 os_tid = 0x1018 [0201.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0201.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.666] GetLastError () returned 0x5 [0201.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0201.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 7420 os_tid = 0x1520 [0201.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0201.667] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0205.710] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11ac [0205.711] GetFileSizeEx (in: hFile=0x11ac, lpFileSize=0xb60fb94 | out: lpFileSize=0xb60fb94*=281) returned 1 [0205.711] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.711] ReadFile (in: hFile=0x11ac, lpBuffer=0xb60fb70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb60fb80, lpOverlapped=0x0 | out: lpBuffer=0xb60fb70*, lpNumberOfBytesRead=0xb60fb80*=0x4, lpOverlapped=0x0) returned 1 [0208.251] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0208.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0208.252] NtQuerySystemTime (in: CurrentTime=0xb60fb08 | out: CurrentTime=0xb60fb08*=132482711167236000) returned 0x0 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x5030ac66 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x6068fc51 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0xc196f23 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0xc6f20a3 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x352e27f6 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x22ef71ee [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x2a48af9e [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x790d9312 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x31c51879 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x4d53f790 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x42c13070 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x21bb62b7 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x33ff606 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0xc196f23 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x12a6b02e [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x1311463c [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x757a60e3 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x19f65966 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x801de3c [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x4b049a94 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x352e27f6 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x1645bb5e [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0xb1ed913 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x199b31bc [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x12759826 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x1a345f58 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x1053eda5 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x33bb4d15 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x43b75d1d [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x7872586c [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x3d1b73b0 [0208.252] RtlRandomEx (in: Seed=0xb60fb00 | out: Seed=0xb60fb00) returned 0x669c2bab [0208.261] ReadFile (in: hFile=0x11ac, lpBuffer=0x130748d0, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xb60fafc, lpOverlapped=0x0 | out: lpBuffer=0x130748d0*, lpNumberOfBytesRead=0xb60fafc*=0x119, lpOverlapped=0x0) returned 1 [0208.261] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.261] WriteFile (in: hFile=0x11ac, lpBuffer=0x130784d8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xb60fb00, lpOverlapped=0x0 | out: lpBuffer=0x130784d8*, lpNumberOfBytesWritten=0xb60fb00*=0x119, lpOverlapped=0x0) returned 1 [0214.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec950 [0214.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec978 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec978) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130784d8) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130748d0) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d760) returned 1 [0214.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea27b0) returned 1 [0214.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f90 [0214.152] SetFilePointerEx (in: hFile=0x11ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.152] WriteFile (in: hFile=0x11ac, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb60fb88, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0xb60fb88*=0x10c, lpOverlapped=0x0) returned 1 [0214.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0214.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0214.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec978) returned 1 [0214.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0214.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec950) returned 1 [0214.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0214.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0214.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea0a20 [0214.387] wcscpy (in: _Dest=0x12ea0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" [0214.387] wcscat (in: _Dest=0x12ea0a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.ac3a86" [0214.387] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xb60fb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67786e8 [0214.572] FlushFileBuffers (hFile=0x11ac) returned 1 [0214.726] CloseHandle (hObject=0x11ac) returned 1 [0215.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678aab8 [0215.889] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0215.889] wcscat (in: _Dest=0x678aab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\AC3A86-Readme.txt" [0215.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0215.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230c [0216.978] WriteFile (in: hFile=0x230c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb60fb1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb60fb1c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.520] CloseHandle (hObject=0x230c) returned 1 [0225.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678aab8) returned 1 [0225.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771898) returned 1 Thread: id = 7421 os_tid = 0x3e8 [0201.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0201.668] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0205.712] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x166c [0205.712] GetFileSizeEx (in: hFile=0x166c, lpFileSize=0x81ffbcc | out: lpFileSize=0x81ffbcc*=338) returned 1 [0205.712] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.712] ReadFile (in: hFile=0x166c, lpBuffer=0x81ffba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81ffbb8, lpOverlapped=0x0 | out: lpBuffer=0x81ffba8*, lpNumberOfBytesRead=0x81ffbb8*=0x4, lpOverlapped=0x0) returned 1 [0208.263] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb48 [0208.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0208.263] NtQuerySystemTime (in: CurrentTime=0x81ffb40 | out: CurrentTime=0x81ffb40*=132482711167392000) returned 0x0 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x12dca644 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x27069a7 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x4580b357 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0xe28f1ad [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x3041272c [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x37d4bc6c [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x34a7ae85 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x24debe23 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x56e50ff3 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x6b3e085e [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0xbc3bda3 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x26362f4c [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x39f81ccc [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x381ee915 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x54189205 [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x5801a1eb [0208.263] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x2412aed0 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x413c4ef1 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x4cd1cae1 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x5984e811 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x63e4e0a1 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x790d9312 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x1b6b3ea5 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x6f18d324 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x3258d184 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x5fa65643 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x5a194a27 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x28521a68 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x79e83463 [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x68c0c6a [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x71f031e [0208.264] RtlRandomEx (in: Seed=0x81ffb38 | out: Seed=0x81ffb38) returned 0x772c3231 [0208.272] ReadFile (in: hFile=0x166c, lpBuffer=0x1307c0e0, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x81ffb34, lpOverlapped=0x0 | out: lpBuffer=0x1307c0e0*, lpNumberOfBytesRead=0x81ffb34*=0x152, lpOverlapped=0x0) returned 1 [0208.272] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.272] WriteFile (in: hFile=0x166c, lpBuffer=0x12f30cc8*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x81ffb38, lpOverlapped=0x0 | out: lpBuffer=0x12f30cc8*, lpNumberOfBytesWritten=0x81ffb38*=0x152, lpOverlapped=0x0) returned 1 [0214.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec9f0 [0214.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca18 [0214.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca18) returned 1 [0214.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f30cc8) returned 1 [0214.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x1307c0e0) returned 1 [0214.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d9b8) returned 1 [0214.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea27f8) returned 1 [0214.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5a80 [0214.157] SetFilePointerEx (in: hFile=0x166c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.157] WriteFile (in: hFile=0x166c, lpBuffer=0x67521b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81ffbc0, lpOverlapped=0x0 | out: lpBuffer=0x67521b0*, lpNumberOfBytesWritten=0x81ffbc0*=0x10c, lpOverlapped=0x0) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67521b0) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5300) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca18) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a80) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9f0) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb48) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0214.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b400) returned 1 [0214.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678b6e8 [0214.486] wcscpy (in: _Dest=0x678b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" [0214.487] wcscat (in: _Dest=0x678b6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.ac3a86" [0214.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0x81ffb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x67785a0 [0214.584] FlushFileBuffers (hFile=0x166c) returned 1 [0214.727] CloseHandle (hObject=0x166c) returned 1 [0215.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678ba90 [0215.892] wcscpy (in: _Dest=0x678ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0215.892] wcscat (in: _Dest=0x678ba90, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\AC3A86-Readme.txt" [0215.893] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0215.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1388 [0216.979] WriteFile (in: hFile=0x1388, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81ffb54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x81ffb54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.524] CloseHandle (hObject=0x1388) returned 1 [0225.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ba90) returned 1 [0225.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67719c0) returned 1 Thread: id = 7422 os_tid = 0x1524 [0201.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0201.669] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0205.712] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a8 [0205.713] GetFileSizeEx (in: hFile=0x11a8, lpFileSize=0xa8cfc04 | out: lpFileSize=0xa8cfc04*=274) returned 1 [0205.713] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.713] ReadFile (in: hFile=0x11a8, lpBuffer=0xa8cfbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8cfbf0, lpOverlapped=0x0 | out: lpBuffer=0xa8cfbe0*, lpNumberOfBytesRead=0xa8cfbf0*=0x4, lpOverlapped=0x0) returned 1 [0208.274] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0208.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0208.274] NtQuerySystemTime (in: CurrentTime=0xa8cfb78 | out: CurrentTime=0xa8cfb78*=132482711167548000) returned 0x0 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0xfa7f2dd [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x130ac024 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x3aafa5dc [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x2f3fe7cc [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x493fba34 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x4ce162a3 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0xb98e4e3 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x2c3caa4c [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x63bc9769 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x2aafc2d8 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x5bc92955 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0xe8531ba [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x1e92791 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x686af62c [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x3ca55267 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x39295d37 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x75c14474 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x7da64d61 [0208.274] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x1281ae7c [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x63afa65a [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x69c272c8 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x2cadb694 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x7cc78c9b [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x6c43b49b [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x4e6a97da [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x12759826 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x36fec6c2 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x29396ccc [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x3c3cec97 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x5dc79ef2 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x4e163301 [0208.275] RtlRandomEx (in: Seed=0xa8cfb70 | out: Seed=0xa8cfb70) returned 0x110fbe7b [0208.282] ReadFile (in: hFile=0x11a8, lpBuffer=0x12f258b0, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0xa8cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x12f258b0*, lpNumberOfBytesRead=0xa8cfb6c*=0x112, lpOverlapped=0x0) returned 1 [0208.282] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.283] WriteFile (in: hFile=0x11a8, lpBuffer=0x12f0f080*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xa8cfb70, lpOverlapped=0x0 | out: lpBuffer=0x12f0f080*, lpNumberOfBytesWritten=0xa8cfb70*=0x112, lpOverlapped=0x0) returned 1 [0214.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec9a0 [0214.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec9c8 [0214.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9c8) returned 1 [0214.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0f080) returned 1 [0214.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f258b0) returned 1 [0214.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d670) returned 1 [0214.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2840) returned 1 [0214.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5390 [0214.156] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.156] WriteFile (in: hFile=0x11a8, lpBuffer=0x6751d50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa8cfbf8, lpOverlapped=0x0 | out: lpBuffer=0x6751d50*, lpNumberOfBytesWritten=0xa8cfbf8*=0x10c, lpOverlapped=0x0) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e10) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9c8) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5390) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9a0) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0214.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0214.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40060 [0214.291] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" [0214.292] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.ac3a86" [0214.292] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0xa8cfb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6776e90 [0214.500] FlushFileBuffers (hFile=0x11a8) returned 1 [0214.638] CloseHandle (hObject=0x11a8) returned 1 [0214.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678b6e8 [0214.647] wcscpy (in: _Dest=0x678b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0214.647] wcscat (in: _Dest=0x678b6e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\AC3A86-Readme.txt" [0214.647] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0214.648] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf1c [0214.666] WriteFile (in: hFile=0xf1c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa8cfb8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa8cfb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0214.676] CloseHandle (hObject=0xf1c) returned 1 [0214.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b6e8) returned 1 [0214.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771ae8) returned 1 Thread: id = 7423 os_tid = 0x1fd4 [0201.669] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0201.669] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.713] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1670 [0205.714] GetFileSizeEx (in: hFile=0x1670, lpFileSize=0xc15fd24 | out: lpFileSize=0xc15fd24*=268) returned 1 [0205.714] SetFilePointerEx (in: hFile=0x1670, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.714] ReadFile (in: hFile=0x1670, lpBuffer=0xc15fd00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc15fd10, lpOverlapped=0x0 | out: lpBuffer=0xc15fd00*, lpNumberOfBytesRead=0xc15fd10*=0x4, lpOverlapped=0x0) returned 1 [0208.284] SetFilePointerEx (in: hFile=0x1670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0208.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0208.285] NtQuerySystemTime (in: CurrentTime=0xc15fc98 | out: CurrentTime=0xc15fc98*=132482711167548000) returned 0x0 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x33168088 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x5b95c7c1 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0xbee9663 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x3b478b16 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x42c13070 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x1ee47841 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x76673a30 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x515452ea [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x3b2c29c4 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x76afb51e [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x5c93e08c [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x7a44df3a [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x65203076 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x39fc3d10 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x26362f4c [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x199539af [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x275f94b4 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x53ef8b2d [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x2a4e8ee0 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x6f18d324 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x65b0bbe0 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x65b0bbe0 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x17ed17d3 [0208.285] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x2438e4d5 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x46d41de0 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x20d30ee1 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x1b7f82a7 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x202fb44c [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x48122b44 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x515452ea [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x1e77adc7 [0208.286] RtlRandomEx (in: Seed=0xc15fc90 | out: Seed=0xc15fc90) returned 0x4ce162a3 [0208.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f12c88 [0208.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f16890 [0208.294] ReadFile (in: hFile=0x1670, lpBuffer=0x12f12c88, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xc15fc8c, lpOverlapped=0x0 | out: lpBuffer=0x12f12c88*, lpNumberOfBytesRead=0xc15fc8c*=0x10c, lpOverlapped=0x0) returned 1 [0208.294] SetFilePointerEx (in: hFile=0x1670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.294] WriteFile (in: hFile=0x1670, lpBuffer=0x12f16890*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc15fc90, lpOverlapped=0x0 | out: lpBuffer=0x12f16890*, lpNumberOfBytesWritten=0xc15fc90*=0x10c, lpOverlapped=0x0) returned 1 [0214.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca90 [0214.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecab8 [0214.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecab8) returned 1 [0214.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f16890) returned 1 [0214.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f12c88) returned 1 [0214.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d7d8) returned 1 [0214.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2888) returned 1 [0214.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6110 [0214.162] SetFilePointerEx (in: hFile=0x1670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.162] WriteFile (in: hFile=0x1670, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc15fd18, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0xc15fd18*=0x10c, lpOverlapped=0x0) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a20) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecab8) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca90) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0214.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0214.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40678 [0214.298] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" [0214.298] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.ac3a86" [0214.298] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0xc15fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777120 [0214.506] FlushFileBuffers (hFile=0x1670) returned 1 [0214.639] CloseHandle (hObject=0x1670) returned 1 [0214.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678b478 [0214.650] wcscpy (in: _Dest=0x678b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0214.650] wcscat (in: _Dest=0x678b478, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\AC3A86-Readme.txt" [0214.650] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0214.650] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2180 [0214.667] WriteFile (in: hFile=0x2180, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc15fcac, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc15fcac*=0x8b9, lpOverlapped=0x0) returned 1 [0214.687] CloseHandle (hObject=0x2180) returned 1 [0214.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b478) returned 1 [0214.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771c10) returned 1 Thread: id = 7424 os_tid = 0x152c [0201.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0201.671] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0205.714] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa4 [0205.715] GetFileSizeEx (in: hFile=0xfa4, lpFileSize=0xb91fe2c | out: lpFileSize=0xb91fe2c*=287) returned 1 [0205.715] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.715] ReadFile (in: hFile=0xfa4, lpBuffer=0xb91fe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb91fe18, lpOverlapped=0x0 | out: lpBuffer=0xb91fe08*, lpNumberOfBytesRead=0xb91fe18*=0x4, lpOverlapped=0x0) returned 1 [0208.296] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0208.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0208.296] NtQuerySystemTime (in: CurrentTime=0xb91fda0 | out: CurrentTime=0xb91fda0*=132482711167704000) returned 0x0 [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x6adedfaa [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x67f6d2b2 [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x33adcc7d [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x3d7402a4 [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0xdd39c42 [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x24890ca3 [0208.296] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x2b283616 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x22160618 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0xd4a0f9d [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x5e0476be [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x633d4cce [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x2f3fe7cc [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x2470a355 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x5859fe28 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x32e1bb09 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x68caec47 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x701483c4 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x3f2a8a99 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x28514b90 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x2df3bcb1 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x71dbd0df [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x1b4dca63 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x4ce49b1b [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x26b21c77 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x33bb4d15 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x1cfb38ab [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x3128f3ed [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x7aa280ad [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x1a73920f [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x3b74e732 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x6eb8f4f1 [0208.297] RtlRandomEx (in: Seed=0xb91fd98 | out: Seed=0xb91fd98) returned 0x7d0ba86e [0208.305] ReadFile (in: hFile=0xfa4, lpBuffer=0x12f21ca8, nNumberOfBytesToRead=0x11f, lpNumberOfBytesRead=0xb91fd94, lpOverlapped=0x0 | out: lpBuffer=0x12f21ca8*, lpNumberOfBytesRead=0xb91fd94*=0x11f, lpOverlapped=0x0) returned 1 [0208.305] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.305] WriteFile (in: hFile=0xfa4, lpBuffer=0x12f384d8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0xb91fd98, lpOverlapped=0x0 | out: lpBuffer=0x12f384d8*, lpNumberOfBytesWritten=0xb91fd98*=0x11f, lpOverlapped=0x0) returned 1 [0214.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecae0 [0214.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb08 [0214.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb08) returned 1 [0214.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f384d8) returned 1 [0214.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f21ca8) returned 1 [0214.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ce78) returned 1 [0214.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea28d0) returned 1 [0214.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef52d0 [0214.165] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.165] WriteFile (in: hFile=0xfa4, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb91fe20, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0xb91fe20*=0x10c, lpOverlapped=0x0) returned 1 [0214.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0214.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0214.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb08) returned 1 [0214.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef52d0) returned 1 [0214.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecae0) returned 1 [0214.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0214.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0214.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0214.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d41650 [0214.302] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" [0214.302] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.ac3a86" [0214.302] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xb91fd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6777268 [0214.509] FlushFileBuffers (hFile=0xfa4) returned 1 [0214.640] CloseHandle (hObject=0xfa4) returned 1 [0214.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678b5b0 [0214.652] wcscpy (in: _Dest=0x678b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0214.652] wcscat (in: _Dest=0x678b5b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\AC3A86-Readme.txt" [0214.652] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0214.652] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f88 [0214.668] WriteFile (in: hFile=0x1f88, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb91fdb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb91fdb4*=0x8b9, lpOverlapped=0x0) returned 1 [0214.689] CloseHandle (hObject=0x1f88) returned 1 [0214.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b5b0) returned 1 [0214.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771d38) returned 1 Thread: id = 7425 os_tid = 0xe18 [0201.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 0x2020 [0201.673] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0205.715] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f8c [0205.715] GetFileSizeEx (in: hFile=0x1f8c, lpFileSize=0xb1cfbdc | out: lpFileSize=0xb1cfbdc*=253) returned 1 [0205.715] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.715] ReadFile (in: hFile=0x1f8c, lpBuffer=0xb1cfbb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1cfbc8, lpOverlapped=0x0 | out: lpBuffer=0xb1cfbb8*, lpNumberOfBytesRead=0xb1cfbc8*=0x4, lpOverlapped=0x0) returned 1 [0208.307] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0208.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0208.307] NtQuerySystemTime (in: CurrentTime=0xb1cfb50 | out: CurrentTime=0xb1cfb50*=132482711167860000) returned 0x0 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x1281ae7c [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x464def00 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x354662cc [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x5992c9f5 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x89aa7f6 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x5b7bc0c8 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x3ff49fda [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x27069a7 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x410d0d64 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x114c71a7 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0xb29fd03 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x110fbe7b [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x67284d9e [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x30a52f31 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x293e7d39 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x73ffe8c4 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x6dac50bc [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x26af282c [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x6c20d91a [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x63bc0665 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x38692f8b [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x11f0198 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x35aae026 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x5f19905a [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x3b2c1e59 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x63e4e0a1 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0xae06b81 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x22160618 [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x67284d9e [0208.307] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x1f3c1d60 [0208.308] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x3243254c [0208.308] RtlRandomEx (in: Seed=0xb1cfb48 | out: Seed=0xb1cfb48) returned 0x87a9af2 [0208.315] ReadFile (in: hFile=0x1f8c, lpBuffer=0x12f294b8, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xb1cfb44, lpOverlapped=0x0 | out: lpBuffer=0x12f294b8*, lpNumberOfBytesRead=0xb1cfb44*=0xfd, lpOverlapped=0x0) returned 1 [0208.315] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.315] WriteFile (in: hFile=0x1f8c, lpBuffer=0x12f1e0a0*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xb1cfb48, lpOverlapped=0x0 | out: lpBuffer=0x12f1e0a0*, lpNumberOfBytesWritten=0xb1cfb48*=0xfd, lpOverlapped=0x0) returned 1 [0214.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca40 [0214.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca68 [0214.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca68) returned 1 [0214.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1e0a0) returned 1 [0214.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f294b8) returned 1 [0214.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1daa8) returned 1 [0214.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2918) returned 1 [0214.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef60e0 [0214.161] SetFilePointerEx (in: hFile=0x1f8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.161] WriteFile (in: hFile=0x1f8c, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1cfbd0, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xb1cfbd0*=0x10c, lpOverlapped=0x0) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60b0) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca68) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef60e0) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca40) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0214.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0214.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3d40a20 [0214.295] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" [0214.295] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.ac3a86" [0214.295] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0xb1cfb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6776fd8 [0214.502] FlushFileBuffers (hFile=0x1f8c) returned 1 [0214.639] CloseHandle (hObject=0x1f8c) returned 1 [0214.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x678aab8 [0214.649] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0214.649] wcscat (in: _Dest=0x678aab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\AC3A86-Readme.txt" [0214.649] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0214.649] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1320 [0214.667] WriteFile (in: hFile=0x1320, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb1cfb64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb1cfb64*=0x8b9, lpOverlapped=0x0) returned 1 [0214.684] CloseHandle (hObject=0x1320) returned 1 [0214.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678aab8) returned 1 [0214.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771e60) returned 1 Thread: id = 7426 os_tid = 0x1c74 [0201.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48b68 [0201.674] wcscpy (in: _Dest=0x3e48b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0201.674] wcscat (in: _Dest=0x3e48b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0201.674] wcscat (in: _Dest=0x3e48b68, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*" [0201.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9290 [0201.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80bb8 [0213.002] wcscmp (_String1=".", _String2=".") returned 0 [0213.002] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.002] wcscmp (_String1="..", _String2=".") returned 1 [0213.002] wcscmp (_String1="..", _String2="..") returned 0 [0213.002] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0213.002] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0213.002] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0213.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8a48 [0213.002] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0213.002] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0213.002] wcscat (in: _Dest=0x3ea8a48, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" [0215.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0215.102] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0215.102] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0215.102] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0215.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56af0 [0215.103] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0215.103] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0215.103] wcscat (in: _Dest=0x3d56af0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" [0215.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0215.104] FindNextFileW (in: hFindFile=0x3e80bb8, lpFindFileData=0x68b9290 | out: lpFindFileData=0x68b9290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0215.104] FindClose (in: hFindFile=0x3e80bb8 | out: hFindFile=0x3e80bb8) returned 1 [0215.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9290) returned 1 [0215.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b68) returned 1 [0215.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e489b8) returned 1 Thread: id = 7427 os_tid = 0x1c78 [0201.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 0x20 [0201.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0201.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.997] GetLastError () returned 0x5 [0201.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0201.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 7428 os_tid = 0x994 [0201.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 0x20 [0207.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0207.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.641] GetLastError () returned 0x5 [0208.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0208.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 7429 os_tid = 0x14ec [0201.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x678d298 [0201.675] wcscpy (in: _Dest=0x678d298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0201.675] wcscat (in: _Dest=0x678d298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0201.675] wcscat (in: _Dest=0x678d298, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*" [0201.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0201.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0206.024] wcscmp (_String1=".", _String2=".") returned 0 [0206.024] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.024] wcscmp (_String1="..", _String2=".") returned 1 [0206.024] wcscmp (_String1="..", _String2="..") returned 0 [0206.024] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0206.024] wcscmp (_String1="background.gif", _String2=".") returned 1 [0206.024] wcscmp (_String1="background.gif", _String2="..") returned 1 [0206.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae100 [0206.025] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0206.025] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0206.025] wcscat (in: _Dest=0x3dae100, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" [0206.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0206.026] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0206.026] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0206.026] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0206.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8688 [0206.026] wcscpy (in: _Dest=0x3ea8688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0206.026] wcscat (in: _Dest=0x3ea8688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0206.026] wcscat (in: _Dest=0x3ea8688, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0206.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0206.027] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0206.027] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0206.027] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0206.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea72d8 [0206.027] wcscpy (in: _Dest=0x3ea72d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0206.028] wcscat (in: _Dest=0x3ea72d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0206.028] wcscat (in: _Dest=0x3ea72d8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0206.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea72d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0206.028] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0206.028] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0206.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0206.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678d298) returned 1 [0206.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012a00) returned 1 Thread: id = 7430 os_tid = 0x1c84 [0201.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 0x20 [0203.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0204.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.033] GetLastError () returned 0x5 [0206.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0206.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 7431 os_tid = 0x1c88 [0201.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3d56838 [0201.676] wcscpy (in: _Dest=0x3d56838, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0201.676] wcscat (in: _Dest=0x3d56838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0201.676] wcscat (in: _Dest=0x3d56838, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*" [0201.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68baf70 [0201.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0207.041] wcscmp (_String1=".", _String2=".") returned 0 [0207.041] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.041] wcscmp (_String1="..", _String2=".") returned 1 [0207.041] wcscmp (_String1="..", _String2="..") returned 0 [0207.041] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0207.041] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0207.041] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0207.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dada38 [0207.041] wcscpy (in: _Dest=0x3dada38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0207.041] wcscat (in: _Dest=0x3dada38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0207.041] wcscat (in: _Dest=0x3dada38, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0207.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dada38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0207.042] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0207.042] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0207.042] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0207.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0207.042] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0207.042] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0207.042] wcscat (in: _Dest=0x3dadc28, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0207.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0207.043] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0207.043] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0207.043] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0207.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0207.044] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0207.044] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0207.044] wcscat (in: _Dest=0x3dae2f0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0207.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338 [0207.044] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x68baf70 | out: lpFindFileData=0x68baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0207.044] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0207.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68baf70) returned 1 [0207.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 [0207.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678d1b8) returned 1 Thread: id = 7432 os_tid = 0x1c8c [0201.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 0x20 [0207.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0207.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.642] GetLastError () returned 0x5 [0208.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0208.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 7433 os_tid = 0x1c90 [0201.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0201.677] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0205.716] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f88 [0205.716] GetFileSizeEx (in: hFile=0x1f88, lpFileSize=0xd12fdbc | out: lpFileSize=0xd12fdbc*=224) returned 1 [0205.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abc8 [0205.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0205.716] NtQuerySystemTime (in: CurrentTime=0xd12fd30 | out: CurrentTime=0xd12fd30*=132482711141964000) returned 0x0 [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x5ed9b71f [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x5ed6397 [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x5252565f [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x650892b9 [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x1adfec3f [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x2e97ab60 [0205.716] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x14b3c826 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x33895448 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x20292536 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x228b61f8 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0xc06c3aa [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x3d1b61f3 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0xd8dd8ac [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x5d17c20f [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x154eff25 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x47e9d15f [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x47f605e5 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x735688f0 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x79f56a8f [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x3e294448 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x349970ba [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x775eeca [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x7c5445c0 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x39ceaf9e [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x678f2d8b [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0xd1274de [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x3e012847 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x3d229505 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x7671bbe1 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x4d3612a8 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x531f59b3 [0205.717] RtlRandomEx (in: Seed=0xd12fd28 | out: Seed=0xd12fd28) returned 0x4a3a1f05 [0205.725] ReadFile (in: hFile=0x1f88, lpBuffer=0x69e0120, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xd12fd24, lpOverlapped=0x0 | out: lpBuffer=0x69e0120*, lpNumberOfBytesRead=0xd12fd24*=0xe0, lpOverlapped=0x0) returned 1 [0208.317] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.317] WriteFile (in: hFile=0x1f88, lpBuffer=0x69e3d28*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xd12fd28, lpOverlapped=0x0 | out: lpBuffer=0x69e3d28*, lpNumberOfBytesWritten=0xd12fd28*=0xe0, lpOverlapped=0x0) returned 1 [0214.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb80 [0214.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecba8 [0214.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0214.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e3d28) returned 1 [0214.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69e0120) returned 1 [0214.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86198) returned 1 [0214.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e50) returned 1 [0214.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b10 [0214.169] SetFilePointerEx (in: hFile=0x1f88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.169] WriteFile (in: hFile=0x1f88, lpBuffer=0x6750ce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd12fdb0, lpOverlapped=0x0 | out: lpBuffer=0x6750ce8*, lpNumberOfBytesWritten=0xd12fdb0*=0x10c, lpOverlapped=0x0) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ce8) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5270) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b10) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb80) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abc8) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4c0) returned 1 [0214.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4d8) returned 1 [0214.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0214.309] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" [0214.309] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.ac3a86" [0214.309] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.ac3a86", NtPathName=0xd12fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67774f8 [0214.519] FlushFileBuffers (hFile=0x1f88) returned 1 [0214.641] CloseHandle (hObject=0x1f88) returned 1 [0214.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674ff88 [0214.655] wcscpy (in: _Dest=0x674ff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0214.655] wcscat (in: _Dest=0x674ff88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" [0214.656] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ac3a86-readme.txt")) returned 0xffffffff [0214.656] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfa4 [0214.669] WriteFile (in: hFile=0xfa4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd12fd44, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd12fd44*=0x8b9, lpOverlapped=0x0) returned 1 [0214.694] CloseHandle (hObject=0xfa4) returned 1 [0214.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ff88) returned 1 [0214.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a678) returned 1 Thread: id = 7434 os_tid = 0xb18 [0201.678] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0201.678] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0205.725] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2184 [0205.725] GetFileSizeEx (in: hFile=0x2184, lpFileSize=0xd0cfecc | out: lpFileSize=0xd0cfecc*=224) returned 1 [0205.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab78 [0205.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0205.726] NtQuerySystemTime (in: CurrentTime=0xd0cfe40 | out: CurrentTime=0xd0cfe40*=132482711141964000) returned 0x0 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x24be3e2 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x413c50f4 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x3599f272 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x2b82b481 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x3b2606c8 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x3edb87ab [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x1a026248 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x202aa3eb [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x77f5313d [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x69c24e92 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x52119fe3 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x37f211b [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x202aa3eb [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x5c400c5e [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x32d6f192 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x270bbfe3 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x10c28969 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x7d2cf290 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x4e011edb [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x5dcc3368 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x412c81c8 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x7e45e3c9 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0xce48593 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x718f470b [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x42131832 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x50eb71c8 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x3955ef07 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x41069137 [0205.726] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x50eb71c8 [0205.727] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x59eb75cf [0205.727] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x57040034 [0205.727] RtlRandomEx (in: Seed=0xd0cfe38 | out: Seed=0xd0cfe38) returned 0x7a434465 [0205.735] ReadFile (in: hFile=0x2184, lpBuffer=0x69d8910, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xd0cfe34, lpOverlapped=0x0 | out: lpBuffer=0x69d8910*, lpNumberOfBytesRead=0xd0cfe34*=0xe0, lpOverlapped=0x0) returned 1 [0208.318] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.318] WriteFile (in: hFile=0x2184, lpBuffer=0x69dc518*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xd0cfe38, lpOverlapped=0x0 | out: lpBuffer=0x69dc518*, lpNumberOfBytesWritten=0xd0cfe38*=0xe0, lpOverlapped=0x0) returned 1 [0215.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b720 [0215.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a8e8 [0215.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0215.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69dc518) returned 1 [0215.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d8910) returned 1 [0215.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86210) returned 1 [0215.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1e08) returned 1 [0215.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db39c0 [0215.528] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.528] WriteFile (in: hFile=0x2184, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd0cfec0, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xd0cfec0*=0x10c, lpOverlapped=0x0) returned 1 [0216.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0216.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3540) returned 1 [0216.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a8e8) returned 1 [0216.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db39c0) returned 1 [0216.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b720) returned 1 [0216.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab78) returned 1 [0216.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0216.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0216.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675b820 [0216.707] wcscpy (in: _Dest=0x675b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" [0216.707] wcscat (in: _Dest=0x675b820, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.ac3a86" [0216.707] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.ac3a86", NtPathName=0xd0cfe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67894f8 [0224.307] FlushFileBuffers (hFile=0x2184) returned 1 [0224.327] CloseHandle (hObject=0x2184) returned 1 [0224.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6764be0 [0224.539] wcscpy (in: _Dest=0x6764be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0224.539] wcscat (in: _Dest=0x6764be0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" [0224.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ac3a86-readme.txt")) returned 0xffffffff [0224.539] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.056] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd0cfe54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd0cfe54*=0x8b9, lpOverlapped=0x0) returned 1 [0225.058] CloseHandle (hObject=0xeb8) returned 1 [0225.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764be0) returned 1 [0225.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a550) returned 1 Thread: id = 7435 os_tid = 0x14d4 [0201.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0201.679] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0205.735] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e14 [0205.736] GetFileSizeEx (in: hFile=0x1e14, lpFileSize=0xd1ffa0c | out: lpFileSize=0xd1ffa0c*=224) returned 1 [0205.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7b8 [0205.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0205.736] NtQuerySystemTime (in: CurrentTime=0xd1ff980 | out: CurrentTime=0xd1ff980*=132482711142120000) returned 0x0 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x6adedfaa [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x759ac3af [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x2c3a6fb9 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x4e011edb [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x3ebd453 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x4c4fce3c [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x42131832 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x70cf4eab [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x34a48caa [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x5b53145 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x2d71b729 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x4d3612a8 [0205.736] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x3ebd453 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x22637f81 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x20420ba9 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x69fc05e8 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x5d17c20f [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x10567971 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x1af6fe63 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0xc40b785 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x1751c669 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x143d958f [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x278c4a23 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x22f77ea8 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x74545aa8 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x5e63d18 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0xa9917ef [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x187d091 [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x2e7873da [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x57d2668a [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x6c589eea [0205.737] RtlRandomEx (in: Seed=0xd1ff978 | out: Seed=0xd1ff978) returned 0x3d007939 [0205.746] ReadFile (in: hFile=0x1e14, lpBuffer=0x69d1100, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xd1ff974, lpOverlapped=0x0 | out: lpBuffer=0x69d1100*, lpNumberOfBytesRead=0xd1ff974*=0xe0, lpOverlapped=0x0) returned 1 [0208.320] SetFilePointerEx (in: hFile=0x1e14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.320] WriteFile (in: hFile=0x1e14, lpBuffer=0x69d4d08*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xd1ff978, lpOverlapped=0x0 | out: lpBuffer=0x69d4d08*, lpNumberOfBytesWritten=0xd1ff978*=0xe0, lpOverlapped=0x0) returned 1 [0215.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c4e0 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b298 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d4d08) returned 1 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69d1100) returned 1 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86288) returned 1 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1dc0) returned 1 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3638 [0215.531] SetFilePointerEx (in: hFile=0x1e14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.531] WriteFile (in: hFile=0x1e14, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd1ffa00, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xd1ffa00*=0x10c, lpOverlapped=0x0) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3968) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b298) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3638) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c4e0) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7b8) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0216.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0216.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675bbc8 [0216.716] wcscpy (in: _Dest=0x675bbc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" [0216.716] wcscat (in: _Dest=0x675bbc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.ac3a86" [0216.716] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.ac3a86", NtPathName=0xd1ff978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789640 [0224.324] FlushFileBuffers (hFile=0x1e14) returned 1 [0224.332] CloseHandle (hObject=0x1e14) returned 1 [0224.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6764ab8 [0224.541] wcscpy (in: _Dest=0x6764ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0224.541] wcscat (in: _Dest=0x6764ab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" [0224.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ac3a86-readme.txt")) returned 0xffffffff [0224.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.065] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd1ff994, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd1ff994*=0x8b9, lpOverlapped=0x0) returned 1 [0225.067] CloseHandle (hObject=0xeb8) returned 1 [0225.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764ab8) returned 1 [0225.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a428) returned 1 Thread: id = 7436 os_tid = 0x1534 [0201.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0201.680] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0205.746] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e1c [0205.747] GetFileSizeEx (in: hFile=0x1e1c, lpFileSize=0xceefde4 | out: lpFileSize=0xceefde4*=234) returned 1 [0205.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b258 [0205.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0205.747] NtQuerySystemTime (in: CurrentTime=0xceefd58 | out: CurrentTime=0xceefd58*=132482711142276000) returned 0x0 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x386fa15f [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x4c42b4de [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x4f71ffa8 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x1a0b94d0 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x35f779b9 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x234f481d [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x7c5445c0 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x1135a8ee [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x30574909 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x69bb1ec5 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x27863dce [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x2c064491 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x5c2099b1 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x69951748 [0205.747] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x4732fcc8 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x61c4d340 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x5aa84c36 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x1aa21cca [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x667bfd1d [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x36703fc [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x26b60e63 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x7678bd11 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x508a4d99 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x1232afe9 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x42dfd97e [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x5cdc41a7 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0xe183a70 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x702e878 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x5daae7f5 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x3955f2fd [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x27cbb122 [0205.748] RtlRandomEx (in: Seed=0xceefd50 | out: Seed=0xceefd50) returned 0x3ffb71f [0205.756] ReadFile (in: hFile=0x1e1c, lpBuffer=0x6730308, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xceefd4c, lpOverlapped=0x0 | out: lpBuffer=0x6730308*, lpNumberOfBytesRead=0xceefd4c*=0xea, lpOverlapped=0x0) returned 1 [0208.322] SetFilePointerEx (in: hFile=0x1e1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.322] WriteFile (in: hFile=0x1e1c, lpBuffer=0x6728af8*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xceefd50, lpOverlapped=0x0 | out: lpBuffer=0x6728af8*, lpNumberOfBytesWritten=0xceefd50*=0xea, lpOverlapped=0x0) returned 1 [0215.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c9b8 [0215.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c170 [0215.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0215.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6728af8) returned 1 [0215.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6730308) returned 1 [0215.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86300) returned 1 [0215.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2240) returned 1 [0215.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5480 [0215.519] SetFilePointerEx (in: hFile=0x1e1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.519] WriteFile (in: hFile=0x1e1c, lpBuffer=0x6751d50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xceefdd8, lpOverlapped=0x0 | out: lpBuffer=0x6751d50*, lpNumberOfBytesWritten=0xceefdd8*=0x10c, lpOverlapped=0x0) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751d50) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ea0) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c170) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5480) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0216.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b258) returned 1 [0216.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0216.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4af50) returned 1 [0216.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675b0d0 [0216.688] wcscpy (in: _Dest=0x675b0d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" [0216.688] wcscat (in: _Dest=0x675b0d0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.ac3a86" [0216.688] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.ac3a86", NtPathName=0xceefd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778458 [0223.918] FlushFileBuffers (hFile=0x1e1c) returned 1 [0223.934] CloseHandle (hObject=0x1e1c) returned 1 [0224.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676bae8 [0224.723] wcscpy (in: _Dest=0x676bae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0224.723] wcscat (in: _Dest=0x676bae8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" [0224.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ac3a86-readme.txt")) returned 0xffffffff [0224.724] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.291] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xceefd6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xceefd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.292] CloseHandle (hObject=0x1038) returned 1 [0225.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bae8) returned 1 [0225.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a300) returned 1 Thread: id = 7437 os_tid = 0x14e4 [0201.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0201.680] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0205.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x574 [0205.757] GetFileSizeEx (in: hFile=0x574, lpFileSize=0xca1fc7c | out: lpFileSize=0xca1fc7c*=274) returned 1 [0205.758] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.758] ReadFile (in: hFile=0x574, lpBuffer=0xca1fc58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca1fc68, lpOverlapped=0x0 | out: lpBuffer=0xca1fc58*, lpNumberOfBytesRead=0xca1fc68*=0x4, lpOverlapped=0x0) returned 1 [0208.323] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b220 [0208.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0208.324] NtQuerySystemTime (in: CurrentTime=0xca1fbf0 | out: CurrentTime=0xca1fbf0*=132482711168016000) returned 0x0 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x7a44df3a [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5cd49442 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x4d40db0a [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x1b53e88a [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x287ad474 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5dc79ef2 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x2c7c4ef9 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x6e5d1c48 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x32e1bb09 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x4ce49b1b [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x2806bad8 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x1462ae4b [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5992c9f5 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x2a985478 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x287ab09d [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5033d962 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x7c2a2deb [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5cd49442 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x7d9a35de [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0xf0240f9 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x3381f172 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x1a3883d4 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x23dfbab2 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x5b0993a [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x2d81b365 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0xbdb17bd [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0xa552c6e [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x1928368e [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x679f3fe [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x11709905 [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x49e2527c [0208.324] RtlRandomEx (in: Seed=0xca1fbe8 | out: Seed=0xca1fbe8) returned 0x7e0f2452 [0208.332] ReadFile (in: hFile=0x574, lpBuffer=0x68cbce8, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0xca1fbe4, lpOverlapped=0x0 | out: lpBuffer=0x68cbce8*, lpNumberOfBytesRead=0xca1fbe4*=0x112, lpOverlapped=0x0) returned 1 [0208.332] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.332] WriteFile (in: hFile=0x574, lpBuffer=0x68cf8f0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xca1fbe8, lpOverlapped=0x0 | out: lpBuffer=0x68cf8f0*, lpNumberOfBytesWritten=0xca1fbe8*=0x112, lpOverlapped=0x0) returned 1 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aaa0 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c940 [0215.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0215.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cf8f0) returned 1 [0215.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68cbce8) returned 1 [0215.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d5f8) returned 1 [0215.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2960) returned 1 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3b10 [0215.523] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.523] WriteFile (in: hFile=0x574, lpBuffer=0x6752098*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca1fc70, lpOverlapped=0x0 | out: lpBuffer=0x6752098*, lpNumberOfBytesWritten=0xca1fc70*=0x10c, lpOverlapped=0x0) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752098) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db4020) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c940) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3b10) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aaa0) returned 1 [0216.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b220) returned 1 [0216.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c620) returned 1 [0216.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c800) returned 1 [0216.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675b478 [0216.698] wcscpy (in: _Dest=0x675b478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" [0216.698] wcscat (in: _Dest=0x675b478, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.ac3a86" [0216.698] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.ac3a86", NtPathName=0xca1fbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778830 [0223.909] FlushFileBuffers (hFile=0x574) returned 1 [0223.916] CloseHandle (hObject=0x574) returned 1 [0224.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676aab8 [0224.714] wcscpy (in: _Dest=0x676aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0224.714] wcscat (in: _Dest=0x676aab8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" [0224.714] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ac3a86-readme.txt")) returned 0xffffffff [0224.714] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.280] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xca1fc04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xca1fc04*=0x8b9, lpOverlapped=0x0) returned 1 [0225.281] CloseHandle (hObject=0x1038) returned 1 [0225.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676aab8) returned 1 [0225.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768d08) returned 1 Thread: id = 7438 os_tid = 0x153c [0201.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0201.681] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0205.758] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xadc [0205.759] GetFileSizeEx (in: hFile=0xadc, lpFileSize=0xb9df9a4 | out: lpFileSize=0xb9df9a4*=214) returned 1 [0205.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0205.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0205.759] NtQuerySystemTime (in: CurrentTime=0xb9df918 | out: CurrentTime=0xb9df918*=132482711142432000) returned 0x0 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0xc479565 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0xeefc8d9 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x648030d [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x6c7693e2 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x574918c8 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x70cf4eab [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x42c1b80b [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x19dcdd1b [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x46132f16 [0205.759] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x52397756 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x3b87da69 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x273698a3 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x482fe6a9 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x4b4833ab [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x6d4840c6 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x2099f98c [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x69fbb07c [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x186ae38f [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x412c81c8 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x3d007939 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x30479c85 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x7cc0f12a [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x46ba77dc [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x1ca3b6d6 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x1883dce2 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x4ad2dad3 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x278c4a23 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x38051f95 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x2e1d8ab3 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0xfa3c742 [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x72b328fe [0205.760] RtlRandomEx (in: Seed=0xb9df910 | out: Seed=0xb9df910) returned 0x34ec5db3 [0205.768] ReadFile (in: hFile=0xadc, lpBuffer=0x6724ef0, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xb9df90c, lpOverlapped=0x0 | out: lpBuffer=0x6724ef0*, lpNumberOfBytesRead=0xb9df90c*=0xd6, lpOverlapped=0x0) returned 1 [0208.334] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.334] WriteFile (in: hFile=0xadc, lpBuffer=0x67122c8*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xb9df910, lpOverlapped=0x0 | out: lpBuffer=0x67122c8*, lpNumberOfBytesWritten=0xb9df910*=0xd6, lpOverlapped=0x0) returned 1 [0215.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ab90 [0215.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ade8 [0215.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0215.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67122c8) returned 1 [0215.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6724ef0) returned 1 [0215.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86378) returned 1 [0215.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c21f8) returned 1 [0215.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5450 [0215.522] SetFilePointerEx (in: hFile=0xadc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.522] WriteFile (in: hFile=0xadc, lpBuffer=0x6751030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb9df998, lpOverlapped=0x0 | out: lpBuffer=0x6751030*, lpNumberOfBytesWritten=0xb9df998*=0x10c, lpOverlapped=0x0) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751030) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3750) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ade8) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5450) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ab90) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba18) returned 1 [0216.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b2c0) returned 1 [0216.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x675b340 [0216.694] wcscpy (in: _Dest=0x675b340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" [0216.694] wcscat (in: _Dest=0x675b340, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86" [0216.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86", NtPathName=0xb9df910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6776d48 [0223.911] FlushFileBuffers (hFile=0xadc) returned 1 [0223.924] CloseHandle (hObject=0xadc) returned 1 [0224.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c588 [0224.717] wcscpy (in: _Dest=0x678c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0224.717] wcscat (in: _Dest=0x678c588, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" [0224.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\ac3a86-readme.txt")) returned 0xffffffff [0224.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.283] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb9df92c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb9df92c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.285] CloseHandle (hObject=0x1038) returned 1 [0225.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c588) returned 1 [0225.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67699c0) returned 1 Thread: id = 7439 os_tid = 0x10f4 [0201.682] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0201.682] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0205.769] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa8 [0205.769] GetFileSizeEx (in: hFile=0xfa8, lpFileSize=0xd23fc14 | out: lpFileSize=0xd23fc14*=215) returned 1 [0205.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cb20 [0205.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0205.770] NtQuerySystemTime (in: CurrentTime=0xd23fb88 | out: CurrentTime=0xd23fb88*=132482711142432000) returned 0x0 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x3200fbd8 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x3ed00ee [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x396b11ed [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x59eb75cf [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x30355508 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x69fc05e8 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x5396c631 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x7e6a39a9 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x6e39242 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x7678bd11 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x5fae3bed [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x336d5c9d [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x270bbfe3 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x20fe5bd6 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x74899d07 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x677a36c5 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x5d638efc [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x61b7fc0f [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x57f07176 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x5a9ae22c [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x76ad5655 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x6d89c9dc [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x41ec3f27 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x6ca1c7d7 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x7cc0f12a [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x63a2cd16 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x1232afe9 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x6c99d63c [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x549b6b45 [0205.770] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x72b328fe [0205.771] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x1c40052d [0205.771] RtlRandomEx (in: Seed=0xd23fb80 | out: Seed=0xd23fb80) returned 0x5072a459 [0205.780] ReadFile (in: hFile=0xfa8, lpBuffer=0x671d6e0, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xd23fb7c, lpOverlapped=0x0 | out: lpBuffer=0x671d6e0*, lpNumberOfBytesRead=0xd23fb7c*=0xd7, lpOverlapped=0x0) returned 1 [0208.335] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.335] WriteFile (in: hFile=0xfa8, lpBuffer=0x670aab8*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xd23fb80, lpOverlapped=0x0 | out: lpBuffer=0x670aab8*, lpNumberOfBytesWritten=0xd23fb80*=0xd7, lpOverlapped=0x0) returned 1 [0215.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ba90 [0215.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cdf0 [0215.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0215.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670aab8) returned 1 [0215.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x671d6e0) returned 1 [0215.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a863f0) returned 1 [0215.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c21b0) returned 1 [0215.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0215.526] SetFilePointerEx (in: hFile=0xfa8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.526] WriteFile (in: hFile=0xfa8, lpBuffer=0x67524f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd23fc08, lpOverlapped=0x0 | out: lpBuffer=0x67524f8*, lpNumberOfBytesWritten=0xd23fc08*=0x10c, lpOverlapped=0x0) returned 1 [0216.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67524f8) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3660) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cdf0) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3db0) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ba90) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb20) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b068) returned 1 [0216.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c418) returned 1 [0216.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x675b6e8 [0216.704] wcscpy (in: _Dest=0x675b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" [0216.704] wcscat (in: _Dest=0x675b6e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.ac3a86" [0216.704] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.ac3a86", NtPathName=0xd23fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6776ab8 [0224.303] FlushFileBuffers (hFile=0xfa8) returned 1 [0224.310] CloseHandle (hObject=0xfa8) returned 1 [0224.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea0a20 [0224.533] wcscpy (in: _Dest=0x12ea0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0224.533] wcscat (in: _Dest=0x12ea0a20, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" [0224.533] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\ac3a86-readme.txt")) returned 0xffffffff [0224.533] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.052] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd23fb9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd23fb9c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.054] CloseHandle (hObject=0xeb8) returned 1 [0225.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0a20) returned 1 [0225.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769770) returned 1 Thread: id = 7440 os_tid = 0x1560 [0201.682] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0201.683] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0205.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe80 [0205.781] GetFileSizeEx (in: hFile=0xe80, lpFileSize=0xc6bf92c | out: lpFileSize=0xc6bf92c*=223) returned 1 [0205.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c530 [0205.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0205.781] NtQuerySystemTime (in: CurrentTime=0xc6bf8a0 | out: CurrentTime=0xc6bf8a0*=132482711142588000) returned 0x0 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x5e4e6017 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x1c42a740 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x5fa999d0 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x3503d40 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x7e2ac1fe [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x150108ad [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x6f671dd7 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x6d4840c6 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x6ca1c7d7 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x32dcf7c5 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x41ec3f27 [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x7bee4a8c [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x3b5b2ddd [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x211c189f [0205.781] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x1c42a740 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x3a6f0abe [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x624f7cb2 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x5d638efc [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x396825db [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x493ec1da [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x7fd8c72f [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x38680233 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x39525f5e [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x59965e65 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x26605ce3 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x7e70ff1f [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x5aa84c36 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x69c24e92 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x5c9ff296 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x35f779b9 [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0xa9917ef [0205.782] RtlRandomEx (in: Seed=0xc6bf898 | out: Seed=0xc6bf898) returned 0x2d71b729 [0205.792] ReadFile (in: hFile=0xe80, lpBuffer=0x6733f10, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xc6bf894, lpOverlapped=0x0 | out: lpBuffer=0x6733f10*, lpNumberOfBytesRead=0xc6bf894*=0xdf, lpOverlapped=0x0) returned 1 [0208.337] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.337] WriteFile (in: hFile=0xe80, lpBuffer=0x672c700*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xc6bf898, lpOverlapped=0x0 | out: lpBuffer=0x672c700*, lpNumberOfBytesWritten=0xc6bf898*=0xdf, lpOverlapped=0x0) returned 1 [0215.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b928 [0215.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c350 [0215.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0215.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x672c700) returned 1 [0215.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6733f10) returned 1 [0215.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86468) returned 1 [0215.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2168) returned 1 [0215.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3720 [0215.525] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.525] WriteFile (in: hFile=0xe80, lpBuffer=0x6750f18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc6bf920, lpOverlapped=0x0 | out: lpBuffer=0x6750f18*, lpNumberOfBytesWritten=0xc6bf920*=0x10c, lpOverlapped=0x0) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750f18) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3690) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c350) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3720) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b928) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c530) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c120) returned 1 [0216.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c440) returned 1 [0216.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675b5b0 [0216.701] wcscpy (in: _Dest=0x675b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" [0216.701] wcscat (in: _Dest=0x675b5b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.ac3a86" [0216.701] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.ac3a86", NtPathName=0xc6bf898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0224.371] FlushFileBuffers (hFile=0xe80) returned 1 [0224.390] CloseHandle (hObject=0xe80) returned 1 [0224.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676bc10 [0224.592] wcscpy (in: _Dest=0x676bc10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0224.592] wcscat (in: _Dest=0x676bc10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" [0224.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ac3a86-readme.txt")) returned 0xffffffff [0224.593] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.143] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc6bf8b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc6bf8b4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.146] CloseHandle (hObject=0x1038) returned 1 [0225.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bc10) returned 1 [0225.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769648) returned 1 Thread: id = 7441 os_tid = 0x10f8 [0201.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0201.684] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0205.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fbc [0205.793] GetFileSizeEx (in: hFile=0x1fbc, lpFileSize=0xccffe14 | out: lpFileSize=0xccffe14*=221) returned 1 [0205.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ca80 [0205.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0205.794] NtQuerySystemTime (in: CurrentTime=0xccffd88 | out: CurrentTime=0xccffd88*=132482711142744000) returned 0x0 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x6efff1fe [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x964fe22 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x22f77ea8 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x1cba753 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x3147e42e [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x2c1fe64 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x4e610ef4 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x5d2eef7c [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x2a408f2a [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x7d85fa92 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x6d55e09c [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x5d912601 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x3cbb9ddf [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x56e6215e [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x268b35a3 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x211932ab [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x47616926 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x2d13cf5c [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x62b391d6 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x49788c38 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0xc479565 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x7c917b95 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x6efff1fe [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x4e5c1cbb [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x4c4f9e32 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x785c4486 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x386fa15f [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x360ea218 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x6c31c43 [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x3acee60d [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0xc4d96fd [0205.794] RtlRandomEx (in: Seed=0xccffd80 | out: Seed=0xccffd80) returned 0x2e1d8ab3 [0205.805] ReadFile (in: hFile=0x1fbc, lpBuffer=0x6719ad8, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xccffd7c, lpOverlapped=0x0 | out: lpBuffer=0x6719ad8*, lpNumberOfBytesRead=0xccffd7c*=0xdd, lpOverlapped=0x0) returned 1 [0208.339] SetFilePointerEx (in: hFile=0x1fbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.339] WriteFile (in: hFile=0x1fbc, lpBuffer=0x6742f30*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xccffd80, lpOverlapped=0x0 | out: lpBuffer=0x6742f30*, lpNumberOfBytesWritten=0xccffd80*=0xdd, lpOverlapped=0x0) returned 1 [0215.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c378 [0215.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c760 [0215.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c760) returned 1 [0215.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6742f30) returned 1 [0215.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6719ad8) returned 1 [0215.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a864e0) returned 1 [0215.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2120) returned 1 [0215.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3b48 [0215.529] SetFilePointerEx (in: hFile=0x1fbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.529] WriteFile (in: hFile=0x1fbc, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xccffe08, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xccffe08*=0x10c, lpOverlapped=0x0) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3a88) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c760) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3b48) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c378) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ca80) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b590) returned 1 [0216.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfe0) returned 1 [0216.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675ba90 [0216.711] wcscpy (in: _Dest=0x675ba90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" [0216.711] wcscat (in: _Dest=0x675ba90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.ac3a86" [0216.711] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.ac3a86", NtPathName=0xccffd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf330 [0224.317] FlushFileBuffers (hFile=0x1fbc) returned 1 [0224.333] CloseHandle (hObject=0x1fbc) returned 1 [0224.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea07b0 [0224.543] wcscpy (in: _Dest=0x12ea07b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0224.543] wcscat (in: _Dest=0x12ea07b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" [0224.543] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ac3a86-readme.txt")) returned 0xffffffff [0224.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.069] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xccffd9c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xccffd9c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.071] CloseHandle (hObject=0xeb8) returned 1 [0225.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea07b0) returned 1 [0225.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67693f8) returned 1 Thread: id = 7442 os_tid = 0x10fc [0201.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0201.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0205.806] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2140 [0205.807] GetFileSizeEx (in: hFile=0x2140, lpFileSize=0xccafec4 | out: lpFileSize=0xccafec4*=214) returned 1 [0205.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf80 [0205.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0205.807] NtQuerySystemTime (in: CurrentTime=0xccafe38 | out: CurrentTime=0xccafe38*=132482711142900000) returned 0x0 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x2c90ee0a [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x7b269b0d [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x788361f8 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x37fa296 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x4a363a48 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5c9ff296 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x4b8974e2 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x2037915c [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5d73d2d1 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5809c144 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x3e26b478 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x7b423fcf [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x3d2c9ce3 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x260aab63 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x2db84778 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x20fe5bd6 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x1adfda40 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x3503d40 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x148ff808 [0205.807] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x10567971 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x1e405f3c [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x7e0048e3 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x4f71ffa8 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0xde08f31 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x68304553 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x41d7f82a [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5ca8db13 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x4e52f535 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5118056b [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x3200fbd8 [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x5c41a14b [0205.808] RtlRandomEx (in: Seed=0xccafe30 | out: Seed=0xccafe30) returned 0x37f49ad4 [0205.816] ReadFile (in: hFile=0x2140, lpBuffer=0x673b720, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xccafe2c, lpOverlapped=0x0 | out: lpBuffer=0x673b720*, lpNumberOfBytesRead=0xccafe2c*=0xd6, lpOverlapped=0x0) returned 1 [0208.340] SetFilePointerEx (in: hFile=0x2140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.341] WriteFile (in: hFile=0x2140, lpBuffer=0x6746b38*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xccafe30, lpOverlapped=0x0 | out: lpBuffer=0x6746b38*, lpNumberOfBytesWritten=0xccafe30*=0xd6, lpOverlapped=0x0) returned 1 [0215.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbd0 [0215.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbf8 [0215.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0215.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6746b38) returned 1 [0215.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673b720) returned 1 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86558) returned 1 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c20d8) returned 1 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5698 [0215.549] SetFilePointerEx (in: hFile=0x2140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.549] WriteFile (in: hFile=0x2140, lpBuffer=0x675ce00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xccafeb8, lpOverlapped=0x0 | out: lpBuffer=0x675ce00*, lpNumberOfBytesWritten=0xccafeb8*=0x10c, lpOverlapped=0x0) returned 1 [0216.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ce00) returned 1 [0216.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e56c8) returned 1 [0216.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5698) returned 1 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbd0) returned 1 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf80) returned 1 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c148) returned 1 [0216.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c3a0) returned 1 [0216.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0c90 [0216.816] wcscpy (in: _Dest=0x12ea0c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" [0216.816] wcscat (in: _Dest=0x12ea0c90, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.ac3a86" [0216.816] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.ac3a86", NtPathName=0xccafe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a6e8 [0224.268] FlushFileBuffers (hFile=0x2140) returned 1 [0224.283] CloseHandle (hObject=0x2140) returned 1 [0224.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765648 [0224.503] wcscpy (in: _Dest=0x6765648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0224.503] wcscat (in: _Dest=0x6765648, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" [0224.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ac3a86-readme.txt")) returned 0xffffffff [0224.504] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.017] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xccafe4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xccafe4c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.019] CloseHandle (hObject=0xeb8) returned 1 [0225.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765648) returned 1 [0225.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6769520) returned 1 Thread: id = 7443 os_tid = 0x1100 [0201.686] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0201.686] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0205.816] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21ac [0205.817] GetFileSizeEx (in: hFile=0x21ac, lpFileSize=0xd67f7fc | out: lpFileSize=0xd67f7fc*=217) returned 1 [0205.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c828 [0205.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bf18 [0205.817] NtQuerySystemTime (in: CurrentTime=0xd67f770 | out: CurrentTime=0xd67f770*=132482711142900000) returned 0x0 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x431027d1 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x26e0e723 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x3635ed0a [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x64313e5f [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x15895b9e [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x442fbf48 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x396b11ed [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x349970ba [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x11f593a9 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x339ac2b6 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x680c79b0 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x3c17c747 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x3055c7d5 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x4fde72d6 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x5d3a784f [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x54b37191 [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x625becac [0205.817] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x28206dcb [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x503cb548 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x59965e65 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x33ad8b5a [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x2f1f7155 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x43988076 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x6bcb53a4 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x2b82b481 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x558623c9 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x413c50f4 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x5f1e4ef0 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x493ec1da [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x23cb7407 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x71e38a28 [0205.818] RtlRandomEx (in: Seed=0xd67f768 | out: Seed=0xd67f768) returned 0x5c41a14b [0205.826] ReadFile (in: hFile=0x21ac, lpBuffer=0x670e6c0, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xd67f764, lpOverlapped=0x0 | out: lpBuffer=0x670e6c0*, lpNumberOfBytesRead=0xd67f764*=0xd9, lpOverlapped=0x0) returned 1 [0208.342] SetFilePointerEx (in: hFile=0x21ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.342] WriteFile (in: hFile=0x21ac, lpBuffer=0x6737b18*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xd67f768, lpOverlapped=0x0 | out: lpBuffer=0x6737b18*, lpNumberOfBytesWritten=0xd67f768*=0xd9, lpOverlapped=0x0) returned 1 [0215.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebbe0 [0215.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebbb8 [0215.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbb8) returned 1 [0215.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6737b18) returned 1 [0215.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x670e6c0) returned 1 [0215.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a865d0) returned 1 [0215.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2090) returned 1 [0215.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5758 [0215.552] SetFilePointerEx (in: hFile=0x21ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.552] WriteFile (in: hFile=0x21ac, lpBuffer=0x675d030*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd67f7f0, lpOverlapped=0x0 | out: lpBuffer=0x675d030*, lpNumberOfBytesWritten=0xd67f7f0*=0x10c, lpOverlapped=0x0) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d030) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5788) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbb8) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5758) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebbe0) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c828) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b6d0) returned 1 [0216.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4538) returned 1 [0216.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0f00 [0216.825] wcscpy (in: _Dest=0x12ea0f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" [0216.825] wcscat (in: _Dest=0x12ea0f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.ac3a86" [0216.825] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.ac3a86", NtPathName=0xd67f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784c00 [0224.470] FlushFileBuffers (hFile=0x21ac) returned 1 [0224.479] CloseHandle (hObject=0x21ac) returned 1 [0224.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c0b0 [0224.736] wcscpy (in: _Dest=0x676c0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0224.736] wcscat (in: _Dest=0x676c0b0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" [0224.736] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ac3a86-readme.txt")) returned 0xffffffff [0224.736] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.303] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd67f784, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd67f784*=0x8b9, lpOverlapped=0x0) returned 1 [0225.308] CloseHandle (hObject=0x1038) returned 1 [0225.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c0b0) returned 1 [0225.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67692d0) returned 1 Thread: id = 7444 os_tid = 0x9f0 [0201.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0201.687] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0205.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f00 [0205.827] GetFileSizeEx (in: hFile=0x1f00, lpFileSize=0xd48fb1c | out: lpFileSize=0xd48fb1c*=224) returned 1 [0205.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef1220 [0205.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0205.827] NtQuerySystemTime (in: CurrentTime=0xd48fa90 | out: CurrentTime=0xd48fa90*=132482711143056000) returned 0x0 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xd147235 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x15d12bd4 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x54b37191 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x23cb7407 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x268b35a3 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x5cef49ee [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x624f7cb2 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x431027d1 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x56433048 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x7bb1d740 [0205.827] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xde08f31 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x48dd3308 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xb620386 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x336d5c9d [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x4e52f535 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xa0695f0 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x331bc056 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x2580eda8 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x5193f8d9 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x9832e47 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x16693b32 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x5d2eef7c [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x26358423 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x16693b32 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x3dc54f38 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x533ff2c8 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x36de3c63 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x4696d56c [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x635ee50 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0x60726929 [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xd0299ff [0205.828] RtlRandomEx (in: Seed=0xd48fa88 | out: Seed=0xd48fa88) returned 0xc06c3aa [0205.836] ReadFile (in: hFile=0x1f00, lpBuffer=0x67212e8, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xd48fa84, lpOverlapped=0x0 | out: lpBuffer=0x67212e8*, lpNumberOfBytesRead=0xd48fa84*=0xe0, lpOverlapped=0x0) returned 1 [0208.344] SetFilePointerEx (in: hFile=0x1f00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.344] WriteFile (in: hFile=0x1f00, lpBuffer=0x673f328*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xd48fa88, lpOverlapped=0x0 | out: lpBuffer=0x673f328*, lpNumberOfBytesWritten=0xd48fa88*=0xe0, lpOverlapped=0x0) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec068 [0215.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfc8 [0215.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfc8) returned 1 [0215.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x673f328) returned 1 [0215.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67212e8) returned 1 [0215.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86648) returned 1 [0215.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2048) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3246d0 [0215.540] SetFilePointerEx (in: hFile=0x1f00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.540] WriteFile (in: hFile=0x1f00, lpBuffer=0x3dec198*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd48fb10, lpOverlapped=0x0 | out: lpBuffer=0x3dec198*, lpNumberOfBytesWritten=0xd48fb10*=0x10c, lpOverlapped=0x0) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec198) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5488) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfc8) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3246d0) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec068) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1220) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4a60) returned 1 [0216.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1c98) returned 1 [0216.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x12ea0540 [0216.777] wcscpy (in: _Dest=0x12ea0540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" [0216.777] wcscat (in: _Dest=0x12ea0540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.ac3a86" [0216.777] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.ac3a86", NtPathName=0xd48fa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x6789f38 [0224.364] FlushFileBuffers (hFile=0x1f00) returned 1 [0224.373] CloseHandle (hObject=0x1f00) returned 1 [0224.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x12ea1b30 [0224.567] wcscpy (in: _Dest=0x12ea1b30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0224.568] wcscat (in: _Dest=0x12ea1b30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" [0224.568] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ac3a86-readme.txt")) returned 0xffffffff [0224.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.105] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd48faa4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd48faa4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.107] CloseHandle (hObject=0xeb8) returned 1 [0225.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1b30) returned 1 [0225.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67691a8) returned 1 Thread: id = 7445 os_tid = 0x22fc [0201.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0201.688] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0205.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21a8 [0205.842] GetFileSizeEx (in: hFile=0x21a8, lpFileSize=0xd93f9c4 | out: lpFileSize=0xd93f9c4*=222) returned 1 [0205.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4920 [0205.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0205.842] NtQuerySystemTime (in: CurrentTime=0xd93f938 | out: CurrentTime=0xd93f938*=132482711143212000) returned 0x0 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x10353e23 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x52119fe3 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x3822c948 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x27cfedb9 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x55578324 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x7e81c931 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x43988076 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x772cccfa [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x10cd1cd4 [0205.842] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x4d3977c8 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x6c99d63c [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x60b04a80 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x6451cfb6 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x5bbb40a8 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0xcd573e7 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x7c578ea4 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x3a6f0abe [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x23fadfbc [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x338ab3e8 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x2fca07c3 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x1c416352 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x2abfe696 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x1ed9961f [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x6f469aa7 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x331bc056 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x3f46f76e [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x723f64e9 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x2b99f57d [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x48dd3308 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0xb620386 [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x64313e5f [0205.843] RtlRandomEx (in: Seed=0xd93f930 | out: Seed=0xd93f930) returned 0x7e8d9429 [0205.851] ReadFile (in: hFile=0x21a8, lpBuffer=0x6900558, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xd93f92c, lpOverlapped=0x0 | out: lpBuffer=0x6900558*, lpNumberOfBytesRead=0xd93f92c*=0xde, lpOverlapped=0x0) returned 1 [0208.345] SetFilePointerEx (in: hFile=0x21a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.345] WriteFile (in: hFile=0x21a8, lpBuffer=0x6904160*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xd93f930, lpOverlapped=0x0 | out: lpBuffer=0x6904160*, lpNumberOfBytesWritten=0xd93f930*=0xde, lpOverlapped=0x0) returned 1 [0215.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebed8 [0215.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc20 [0215.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0215.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6904160) returned 1 [0215.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6900558) returned 1 [0215.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a866c0) returned 1 [0215.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2000) returned 1 [0215.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5578 [0215.544] SetFilePointerEx (in: hFile=0x21a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.544] WriteFile (in: hFile=0x21a8, lpBuffer=0x675cab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd93f9b8, lpOverlapped=0x0 | out: lpBuffer=0x675cab8*, lpNumberOfBytesWritten=0xd93f9b8*=0x10c, lpOverlapped=0x0) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cab8) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e55a8) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5578) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebed8) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4920) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c40) returned 1 [0216.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef1360) returned 1 [0216.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea08e8 [0216.787] wcscpy (in: _Dest=0x12ea08e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" [0216.787] wcscat (in: _Dest=0x12ea08e8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.ac3a86" [0216.787] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.ac3a86", NtPathName=0xd93f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a310 [0224.256] FlushFileBuffers (hFile=0x21a8) returned 1 [0224.270] CloseHandle (hObject=0x21a8) returned 1 [0224.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765c10 [0224.494] wcscpy (in: _Dest=0x6765c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0224.494] wcscat (in: _Dest=0x6765c10, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" [0224.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ac3a86-readme.txt")) returned 0xffffffff [0224.494] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.000] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd93f94c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd93f94c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.002] CloseHandle (hObject=0xeb8) returned 1 [0225.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765c10) returned 1 [0225.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768be0) returned 1 Thread: id = 7446 os_tid = 0x2300 [0201.689] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0201.689] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0205.852] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1984 [0205.853] GetFileSizeEx (in: hFile=0x1984, lpFileSize=0xda0fecc | out: lpFileSize=0xda0fecc*=225) returned 1 [0205.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef4c18 [0205.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0205.854] NtQuerySystemTime (in: CurrentTime=0xda0fe40 | out: CurrentTime=0xda0fe40*=132482711143368000) returned 0x0 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x7932d202 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x15d12bd4 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x260aab63 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x4c6e1bc8 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x826a70e [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x37f49ad4 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x2f1f7155 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x74a00804 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x3b8bb61e [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x3a50dc4d [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x245fc0c6 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x40cc0506 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x362a871 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x196f7045 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x72dd4c99 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x81f93d8 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x7c9d215b [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x19f7f2c3 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x3292c8ac [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x35776f5a [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x5aa012e2 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x7e81c931 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x1ed9961f [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x4d7edd32 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x7323e07f [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x148ff808 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x3d9a2b68 [0205.854] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x3bcbe985 [0205.855] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x10cae6b8 [0205.855] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x6014f6c2 [0205.855] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x25dfd2a3 [0205.855] RtlRandomEx (in: Seed=0xda0fe38 | out: Seed=0xda0fe38) returned 0x772cccfa [0205.863] ReadFile (in: hFile=0x1984, lpBuffer=0x6907d68, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0xda0fe34, lpOverlapped=0x0 | out: lpBuffer=0x6907d68*, lpNumberOfBytesRead=0xda0fe34*=0xe1, lpOverlapped=0x0) returned 1 [0208.347] SetFilePointerEx (in: hFile=0x1984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.347] WriteFile (in: hFile=0x1984, lpBuffer=0x68e9d28*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0xda0fe38, lpOverlapped=0x0 | out: lpBuffer=0x68e9d28*, lpNumberOfBytesWritten=0xda0fe38*=0xe1, lpOverlapped=0x0) returned 1 [0215.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebfa0 [0215.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf78 [0215.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf78) returned 1 [0215.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e9d28) returned 1 [0215.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6907d68) returned 1 [0215.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86738) returned 1 [0215.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1fb8) returned 1 [0215.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5518 [0215.543] SetFilePointerEx (in: hFile=0x1984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.543] WriteFile (in: hFile=0x1984, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xda0fec0, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0xda0fec0*=0x10c, lpOverlapped=0x0) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5548) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf78) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5518) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfa0) returned 1 [0216.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4c18) returned 1 [0216.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef35e8) returned 1 [0216.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4cb8) returned 1 [0216.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea07b0 [0216.784] wcscpy (in: _Dest=0x12ea07b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" [0216.784] wcscat (in: _Dest=0x12ea07b0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.ac3a86" [0216.784] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.ac3a86", NtPathName=0xda0fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a1c8 [0224.249] FlushFileBuffers (hFile=0x1984) returned 1 [0224.261] CloseHandle (hObject=0x1984) returned 1 [0224.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765770 [0224.493] wcscpy (in: _Dest=0x6765770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0224.493] wcscat (in: _Dest=0x6765770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" [0224.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ac3a86-readme.txt")) returned 0xffffffff [0224.493] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0224.994] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xda0fe54, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xda0fe54*=0x8b9, lpOverlapped=0x0) returned 1 [0224.998] CloseHandle (hObject=0xeb8) returned 1 [0224.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765770) returned 1 [0224.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768ab8) returned 1 Thread: id = 7447 os_tid = 0xb5c [0201.690] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0201.690] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0205.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfec [0205.864] GetFileSizeEx (in: hFile=0xfec, lpFileSize=0xc7cfedc | out: lpFileSize=0xc7cfedc*=291) returned 1 [0205.864] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.864] ReadFile (in: hFile=0xfec, lpBuffer=0xc7cfeb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc7cfec8, lpOverlapped=0x0 | out: lpBuffer=0xc7cfeb8*, lpNumberOfBytesRead=0xc7cfec8*=0x4, lpOverlapped=0x0) returned 1 [0208.349] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cd50 [0208.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c9b8 [0208.349] NtQuerySystemTime (in: CurrentTime=0xc7cfe50 | out: CurrentTime=0xc7cfe50*=132482711168328000) returned 0x0 [0208.349] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x39b486c9 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x4904edaf [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x4e6a97da [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0xb6cd7e7 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x18271043 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x18271043 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0xf0240f9 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x256222a2 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x6e3a6a2 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x30bf434c [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x56e5dd79 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x67f6d2b2 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x46153d67 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x7aca93fe [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x5c5ab6d4 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x7c815264 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x11709905 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x48122b44 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x6a82907f [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x189fcbf7 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x6dac50bc [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x3260e5a [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x77476064 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x3e501b4c [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x7a120b2 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0xb433363 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x1b6b3ea5 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x314edfa0 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x4f40b349 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x321130a7 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x40c15c81 [0208.350] RtlRandomEx (in: Seed=0xc7cfe48 | out: Seed=0xc7cfe48) returned 0x6d46028d [0208.358] ReadFile (in: hFile=0xfec, lpBuffer=0x68d34f8, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0xc7cfe44, lpOverlapped=0x0 | out: lpBuffer=0x68d34f8*, lpNumberOfBytesRead=0xc7cfe44*=0x123, lpOverlapped=0x0) returned 1 [0208.358] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.358] WriteFile (in: hFile=0xfec, lpBuffer=0x69c5ce8*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0xc7cfe48, lpOverlapped=0x0 | out: lpBuffer=0x69c5ce8*, lpNumberOfBytesWritten=0xc7cfe48*=0x123, lpOverlapped=0x0) returned 1 [0215.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf00 [0215.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebe60 [0215.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe60) returned 1 [0215.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c5ce8) returned 1 [0215.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d34f8) returned 1 [0215.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d850) returned 1 [0215.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea29a8) returned 1 [0215.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5638 [0215.546] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.546] WriteFile (in: hFile=0xfec, lpBuffer=0x675cce8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc7cfed0, lpOverlapped=0x0 | out: lpBuffer=0x675cce8*, lpNumberOfBytesWritten=0xc7cfed0*=0x10c, lpOverlapped=0x0) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cce8) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5668) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe60) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5638) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf00) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cd50) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cb98) returned 1 [0216.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb30) returned 1 [0216.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0b58 [0216.793] wcscpy (in: _Dest=0x12ea0b58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" [0216.793] wcscat (in: _Dest=0x12ea0b58, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.ac3a86" [0216.793] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.ac3a86", NtPathName=0xc7cfe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a5a0 [0224.264] FlushFileBuffers (hFile=0xfec) returned 1 [0224.278] CloseHandle (hObject=0xfec) returned 1 [0224.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67652d0 [0224.500] wcscpy (in: _Dest=0x67652d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0224.500] wcscat (in: _Dest=0x67652d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" [0224.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ac3a86-readme.txt")) returned 0xffffffff [0224.500] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.005] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc7cfe64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc7cfe64*=0x8b9, lpOverlapped=0x0) returned 1 [0225.006] CloseHandle (hObject=0xeb8) returned 1 [0225.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67652d0) returned 1 [0225.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a8c8) returned 1 Thread: id = 7448 os_tid = 0x2304 [0201.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0201.691] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0205.865] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd08 [0205.865] GetFileSizeEx (in: hFile=0xd08, lpFileSize=0xde6fb6c | out: lpFileSize=0xde6fb6c*=230) returned 1 [0205.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ef3ed0 [0205.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3043f0 [0205.865] NtQuerySystemTime (in: CurrentTime=0xde6fae0 | out: CurrentTime=0xde6fae0*=132482711143368000) returned 0x0 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x7bee4a8c [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x4d3ccc05 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x515e5fa [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x432d1ac5 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x74899d07 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x51bbc6d1 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x1f661046 [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x490af94d [0205.865] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0xd147235 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0xd0299ff [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x5cef49ee [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x76a85b7d [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x61c4d340 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x21474f4b [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x4ccf246a [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x1c87f1d0 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x1a885277 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x826a70e [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x6fb71470 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x4d7edd32 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x19795d5b [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x63ae149c [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x71a7a54e [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x4d3ccc05 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x3cf3a74c [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x4a363a48 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x432d1ac5 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x8af37bb [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x32331bd0 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x7d360ca9 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x2580eda8 [0205.866] RtlRandomEx (in: Seed=0xde6fad8 | out: Seed=0xde6fad8) returned 0x2366038 [0205.877] ReadFile (in: hFile=0xd08, lpBuffer=0x68ed930, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xde6fad4, lpOverlapped=0x0 | out: lpBuffer=0x68ed930*, lpNumberOfBytesRead=0xde6fad4*=0xe6, lpOverlapped=0x0) returned 1 [0208.360] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.360] WriteFile (in: hFile=0xd08, lpBuffer=0x68dad08*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xde6fad8, lpOverlapped=0x0 | out: lpBuffer=0x68dad08*, lpNumberOfBytesWritten=0xde6fad8*=0xe6, lpOverlapped=0x0) returned 1 [0215.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc48 [0215.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf28 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf28) returned 1 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68dad08) returned 1 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ed930) returned 1 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a867b0) returned 1 [0215.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c23f0) returned 1 [0215.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e55d8 [0215.545] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.545] WriteFile (in: hFile=0xd08, lpBuffer=0x675cbd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde6fb60, lpOverlapped=0x0 | out: lpBuffer=0x675cbd0*, lpNumberOfBytesWritten=0xde6fb60*=0x10c, lpOverlapped=0x0) returned 1 [0216.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cbd0) returned 1 [0216.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5608) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf28) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e55d8) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc48) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3ed0) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f40) returned 1 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304238) returned 1 [0216.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0a20 [0216.790] wcscpy (in: _Dest=0x12ea0a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" [0216.790] wcscat (in: _Dest=0x12ea0a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.ac3a86" [0216.790] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.ac3a86", NtPathName=0xde6fad8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x678a458 [0224.260] FlushFileBuffers (hFile=0xd08) returned 1 [0224.274] CloseHandle (hObject=0xd08) returned 1 [0224.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6765d38 [0224.498] wcscpy (in: _Dest=0x6765d38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0224.498] wcscat (in: _Dest=0x6765d38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" [0224.498] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ac3a86-readme.txt")) returned 0xffffffff [0224.498] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.009] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xde6faf4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xde6faf4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.011] CloseHandle (hObject=0xeb8) returned 1 [0225.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765d38) returned 1 [0225.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759ae8) returned 1 Thread: id = 7449 os_tid = 0x2308 [0201.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0201.693] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0205.878] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b08 [0205.878] GetFileSizeEx (in: hFile=0x1b08, lpFileSize=0xde2fc94 | out: lpFileSize=0xde2fc94*=208) returned 1 [0205.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3043f0 [0205.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304170 [0205.879] NtQuerySystemTime (in: CurrentTime=0xde2fc08 | out: CurrentTime=0xde2fc08*=132482711143524000) returned 0x0 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x2d091ff6 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x2475d42f [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x349f28a1 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x25208fd4 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x6bb41e2c [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x1d56a20d [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x11b9a75f [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x27863dce [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x255f4863 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x709fa5d9 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x390c47a7 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0xa592a55 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x183bbc01 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x6ef7d864 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x35776f5a [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x63ae149c [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x63b5e2d6 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x2c94616e [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x11b9a75f [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x25b4f9e3 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x1fd2d3d5 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x635ee50 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x71ade3a4 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x399e5f49 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x6ef7d864 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x5c49ab48 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x577f7eec [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x3e95b3b0 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x1c5fe2c [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x4bccc7ae [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x482fe6a9 [0205.879] RtlRandomEx (in: Seed=0xde2fc00 | out: Seed=0xde2fc00) returned 0x5f4ce8c8 [0205.888] ReadFile (in: hFile=0x1b08, lpBuffer=0x68de910, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xde2fbfc, lpOverlapped=0x0 | out: lpBuffer=0x68de910*, lpNumberOfBytesRead=0xde2fbfc*=0xd0, lpOverlapped=0x0) returned 1 [0208.362] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.362] WriteFile (in: hFile=0x1b08, lpBuffer=0x68f8d48*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xde2fc00, lpOverlapped=0x0 | out: lpBuffer=0x68f8d48*, lpNumberOfBytesWritten=0xde2fc00*=0xd0, lpOverlapped=0x0) returned 1 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb80 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecba8 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f8d48) returned 1 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68de910) returned 1 [0215.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86828) returned 1 [0215.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2438) returned 1 [0215.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e56f8 [0215.550] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.550] WriteFile (in: hFile=0x1b08, lpBuffer=0x675cf18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xde2fc88, lpOverlapped=0x0 | out: lpBuffer=0x675cf18*, lpNumberOfBytesWritten=0xde2fc88*=0x10c, lpOverlapped=0x0) returned 1 [0216.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675cf18) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5728) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecba8) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e56f8) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb80) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3043f0) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304468) returned 1 [0216.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040f8) returned 1 [0216.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x12ea0dc8 [0216.820] wcscpy (in: _Dest=0x12ea0dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" [0216.820] wcscat (in: _Dest=0x12ea0dc8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.ac3a86" [0216.820] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.ac3a86", NtPathName=0xde2fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6784ab8 [0224.276] FlushFileBuffers (hFile=0x1b08) returned 1 [0224.291] CloseHandle (hObject=0x1b08) returned 1 [0224.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67668c8 [0224.512] wcscpy (in: _Dest=0x67668c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0224.513] wcscat (in: _Dest=0x67668c8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" [0224.513] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ac3a86-readme.txt")) returned 0xffffffff [0224.513] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.021] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xde2fc1c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xde2fc1c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.023] CloseHandle (hObject=0xeb8) returned 1 [0225.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67668c8) returned 1 [0225.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759898) returned 1 Thread: id = 7450 os_tid = 0x230c [0201.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0201.694] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0205.888] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd10 [0205.889] GetFileSizeEx (in: hFile=0xd10, lpFileSize=0xc8ffd04 | out: lpFileSize=0xc8ffd04*=221) returned 1 [0205.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x304170 [0205.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x303fe0 [0205.889] NtQuerySystemTime (in: CurrentTime=0xc8ffc78 | out: CurrentTime=0xc8ffc78*=132482711143680000) returned 0x0 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x29440dfb [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x7363f762 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x47f72170 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x18fdd984 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x69a1329b [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x7f8c77c5 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x310a1b90 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x32331bd0 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x37eecbef [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x25346fa3 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x603f596c [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x2357dda8 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x362a871 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x7dc28cbd [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x14c65672 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x5193f8d9 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x2f7c3819 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x555bc071 [0205.889] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x63b5e2d6 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x582d3bd3 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x3ac2c1c2 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x18d997aa [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x3297eae9 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x3d269ef [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x40f23b13 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x6bd1e313 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x6d707814 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x4525c901 [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x7dc28cbd [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x19795d5b [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x40b355cc [0205.890] RtlRandomEx (in: Seed=0xc8ffc70 | out: Seed=0xc8ffc70) returned 0x7d22f5fd [0205.898] ReadFile (in: hFile=0xd10, lpBuffer=0x68fc950, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xc8ffc6c, lpOverlapped=0x0 | out: lpBuffer=0x68fc950*, lpNumberOfBytesRead=0xc8ffc6c*=0xdd, lpOverlapped=0x0) returned 1 [0208.363] SetFilePointerEx (in: hFile=0xd10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.364] WriteFile (in: hFile=0xd10, lpBuffer=0x68f1538*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xc8ffc70, lpOverlapped=0x0 | out: lpBuffer=0x68f1538*, lpNumberOfBytesWritten=0xc8ffc70*=0xdd, lpOverlapped=0x0) returned 1 [0215.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d423a8 [0215.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d43320 [0215.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0215.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f1538) returned 1 [0215.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68fc950) returned 1 [0215.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a868a0) returned 1 [0215.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2480) returned 1 [0215.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53c0 [0215.390] SetFilePointerEx (in: hFile=0xd10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.390] WriteFile (in: hFile=0xd10, lpBuffer=0x67522c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc8ffcf8, lpOverlapped=0x0 | out: lpBuffer=0x67522c8*, lpNumberOfBytesWritten=0xc8ffcf8*=0x10c, lpOverlapped=0x0) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67522c8) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6110) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d43320) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53c0) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d423a8) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x304170) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303f18) returned 1 [0216.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d9008) returned 1 [0216.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41788 [0216.575] wcscpy (in: _Dest=0x3d41788, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" [0216.575] wcscat (in: _Dest=0x3d41788, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.ac3a86" [0216.575] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xc8ffc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777a18 [0223.812] FlushFileBuffers (hFile=0xd10) returned 1 [0223.824] CloseHandle (hObject=0xd10) returned 1 [0224.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b770 [0224.670] wcscpy (in: _Dest=0x676b770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0224.670] wcscat (in: _Dest=0x676b770, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" [0224.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0224.670] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.223] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc8ffc8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xc8ffc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.225] CloseHandle (hObject=0x1038) returned 1 [0225.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b770) returned 1 [0225.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758d08) returned 1 Thread: id = 7451 os_tid = 0x1104 [0201.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0201.695] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0205.900] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ae0 [0205.900] GetFileSizeEx (in: hFile=0x1ae0, lpFileSize=0xdfafde4 | out: lpFileSize=0xdfafde4*=236) returned 1 [0205.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9198 [0205.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd90f8 [0205.901] NtQuerySystemTime (in: CurrentTime=0xdfafd58 | out: CurrentTime=0xdfafd58*=132482711143836000) returned 0x0 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x6f2cbcf3 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0xe690c5b [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x1b64a5d9 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x92ffef0 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x2b28f26b [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x258a2123 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x5dcf4309 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x45bfc90c [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x1adfda40 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x226a3362 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x269d7d66 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x30041133 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0xd4d785c [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x2b28f26b [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x2edab69e [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x1c0e0f84 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x7d360ca9 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x502d319f [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x8af37bb [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x19370418 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x3e86a612 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x71517b5a [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x31507f6b [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x6ddb2d04 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x7e2ac1fe [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x2263faab [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x46cedb5 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x676d4914 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x5ed08cc6 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x62d10785 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x71ade3a4 [0205.901] RtlRandomEx (in: Seed=0xdfafd50 | out: Seed=0xdfafd50) returned 0x5909131f [0205.909] ReadFile (in: hFile=0x1ae0, lpBuffer=0x68f5140, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xdfafd4c, lpOverlapped=0x0 | out: lpBuffer=0x68f5140*, lpNumberOfBytesRead=0xdfafd4c*=0xec, lpOverlapped=0x0) returned 1 [0208.365] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.365] WriteFile (in: hFile=0x1ae0, lpBuffer=0x68e2518*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xdfafd50, lpOverlapped=0x0 | out: lpBuffer=0x68e2518*, lpNumberOfBytesWritten=0xdfafd50*=0xec, lpOverlapped=0x0) returned 1 [0215.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecab8 [0215.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca40 [0215.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca40) returned 1 [0215.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e2518) returned 1 [0215.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68f5140) returned 1 [0215.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86918) returned 1 [0215.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c24c8) returned 1 [0215.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e58d8 [0215.644] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.644] WriteFile (in: hFile=0x1ae0, lpBuffer=0x675d490*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdfafdd8, lpOverlapped=0x0 | out: lpBuffer=0x675d490*, lpNumberOfBytesWritten=0xdfafdd8*=0x10c, lpOverlapped=0x0) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d490) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5908) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca40) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e58d8) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecab8) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9198) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8f40) returned 1 [0216.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9210) returned 1 [0216.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c1e0 [0216.491] wcscpy (in: _Dest=0x678c1e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" [0216.491] wcscat (in: _Dest=0x678c1e0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.ac3a86" [0216.491] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.ac3a86", NtPathName=0xdfafd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778830 [0216.896] FlushFileBuffers (hFile=0x1ae0) returned 1 [0216.906] CloseHandle (hObject=0x1ae0) returned 1 [0223.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766550 [0223.892] wcscpy (in: _Dest=0x6766550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0223.892] wcscat (in: _Dest=0x6766550, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" [0223.892] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ac3a86-readme.txt")) returned 0xffffffff [0223.892] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.933] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdfafd6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdfafd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.939] CloseHandle (hObject=0x16d4) returned 1 [0224.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766550) returned 1 [0224.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a300) returned 1 Thread: id = 7452 os_tid = 0x2314 [0201.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0201.695] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0205.909] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc80 [0205.910] GetFileSizeEx (in: hFile=0xc80, lpFileSize=0xd3cfef4 | out: lpFileSize=0xd3cfef4*=230) returned 1 [0205.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd90f8 [0205.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd8fb8 [0205.910] NtQuerySystemTime (in: CurrentTime=0xd3cfe68 | out: CurrentTime=0xd3cfe68*=132482711143836000) returned 0x0 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x66f95c83 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x5c49ab48 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x36be5c93 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x1f3c1d60 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x42a3f2f2 [0205.910] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x60726929 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x10cd1cd4 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x5cd2828a [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x4588ffed [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x54c6bec4 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x2db5799e [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x493d72a1 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x4ff634bc [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x48ed2e92 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x6dc79a92 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x4b056c78 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0xa0debbd [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x28fc6c79 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x63d1a71b [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x4c97a1a6 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x1fd2d3d5 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x6022fba5 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x714471d2 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x46d41de0 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0xa851d28 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x67a01749 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x3d9a2b68 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x362a1ae6 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x3ad308fc [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x14f85fb9 [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x7765566a [0205.911] RtlRandomEx (in: Seed=0xd3cfe60 | out: Seed=0xd3cfe60) returned 0x250996e3 [0205.920] ReadFile (in: hFile=0xc80, lpBuffer=0x68e6120, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xd3cfe5c, lpOverlapped=0x0 | out: lpBuffer=0x68e6120*, lpNumberOfBytesRead=0xd3cfe5c*=0xe6, lpOverlapped=0x0) returned 1 [0208.367] SetFilePointerEx (in: hFile=0xc80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.367] WriteFile (in: hFile=0xc80, lpBuffer=0x68d7100*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xd3cfe60, lpOverlapped=0x0 | out: lpBuffer=0x68d7100*, lpNumberOfBytesWritten=0xd3cfe60*=0xe6, lpOverlapped=0x0) returned 1 [0215.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bdb0 [0215.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b770 [0215.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0215.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68d7100) returned 1 [0215.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68e6120) returned 1 [0215.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86990) returned 1 [0215.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2510) returned 1 [0215.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef54e0 [0215.517] SetFilePointerEx (in: hFile=0xc80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.517] WriteFile (in: hFile=0xc80, lpBuffer=0x6751378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd3cfee8, lpOverlapped=0x0 | out: lpBuffer=0x6751378*, lpNumberOfBytesWritten=0xd3cfee8*=0x10c, lpOverlapped=0x0) returned 1 [0216.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751378) returned 1 [0216.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f00) returned 1 [0216.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0216.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54e0) returned 1 [0216.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0216.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd90f8) returned 1 [0216.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd90a8) returned 1 [0216.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8fe0) returned 1 [0216.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675af98 [0216.685] wcscpy (in: _Dest=0x675af98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" [0216.685] wcscat (in: _Dest=0x675af98, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.ac3a86" [0216.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.ac3a86", NtPathName=0xd3cfe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6778310 [0223.922] FlushFileBuffers (hFile=0xc80) returned 1 [0223.937] CloseHandle (hObject=0xc80) returned 1 [0224.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676bd38 [0224.726] wcscpy (in: _Dest=0x676bd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0224.726] wcscat (in: _Dest=0x676bd38, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" [0224.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ac3a86-readme.txt")) returned 0xffffffff [0224.727] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.294] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd3cfe7c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd3cfe7c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.296] CloseHandle (hObject=0x1038) returned 1 [0225.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bd38) returned 1 [0225.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67592d0) returned 1 Thread: id = 7453 os_tid = 0x2318 [0201.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0201.701] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0205.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ed4 [0205.925] GetFileSizeEx (in: hFile=0x1ed4, lpFileSize=0xe17fd04 | out: lpFileSize=0xe17fd04*=228) returned 1 [0205.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd8fb8 [0205.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9170 [0205.926] NtQuerySystemTime (in: CurrentTime=0xe17fc78 | out: CurrentTime=0xe17fc78*=132482711143992000) returned 0x0 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x6f3d0773 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x3a21b610 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x304006f3 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x93c3f38 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x1c5e0110 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0xf2746af [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x7d72fd9d [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x148862db [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x62f89acf [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x78680b1c [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x31c51879 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x250996e3 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x20beabd3 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x5f794d87 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x12ec567e [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x45bb05c8 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x5f52b975 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x1b7f82a7 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x4588ffed [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x81531cb [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x655363c8 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x1476ab62 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x59c38dd2 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x59adf067 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x29e8a8a5 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x3e95b3b0 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x778ae751 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x2b61eae5 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x21a51cba [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x68944bf [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x680c79b0 [0205.926] RtlRandomEx (in: Seed=0xe17fc70 | out: Seed=0xe17fc70) returned 0x55d01cf1 [0205.935] ReadFile (in: hFile=0x1ed4, lpBuffer=0x12f0b478, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0xe17fc6c, lpOverlapped=0x0 | out: lpBuffer=0x12f0b478*, lpNumberOfBytesRead=0xe17fc6c*=0xe4, lpOverlapped=0x0) returned 1 [0208.369] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.369] WriteFile (in: hFile=0x1ed4, lpBuffer=0x12f1a498*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0xe17fc70, lpOverlapped=0x0 | out: lpBuffer=0x12f1a498*, lpNumberOfBytesWritten=0xe17fc70*=0xe4, lpOverlapped=0x0) returned 1 [0215.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cbe8 [0215.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c300 [0215.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0215.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f1a498) returned 1 [0215.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f0b478) returned 1 [0215.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86a08) returned 1 [0215.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2558) returned 1 [0215.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5de0 [0215.520] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.520] WriteFile (in: hFile=0x1ed4, lpBuffer=0x6751b20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe17fcf8, lpOverlapped=0x0 | out: lpBuffer=0x6751b20*, lpNumberOfBytesWritten=0xe17fcf8*=0x10c, lpOverlapped=0x0) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751b20) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5fc0) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c300) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5de0) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cbe8) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd8fb8) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9080) returned 1 [0216.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303fe0) returned 1 [0216.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675b208 [0216.691] wcscpy (in: _Dest=0x675b208, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" [0216.691] wcscat (in: _Dest=0x675b208, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.ac3a86" [0216.691] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0xe17fc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67786e8 [0223.915] FlushFileBuffers (hFile=0x1ed4) returned 1 [0223.927] CloseHandle (hObject=0x1ed4) returned 1 [0224.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676c1d8 [0224.722] wcscpy (in: _Dest=0x676c1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0224.722] wcscat (in: _Dest=0x676c1d8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" [0224.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0224.722] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.287] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe17fc8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe17fc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.289] CloseHandle (hObject=0x1038) returned 1 [0225.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676c1d8) returned 1 [0225.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758e30) returned 1 Thread: id = 7454 os_tid = 0x7ec [0201.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0201.702] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0205.935] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1854 [0205.936] GetFileSizeEx (in: hFile=0x1854, lpFileSize=0xe2cf8f4 | out: lpFileSize=0xe2cf8f4*=233) returned 1 [0205.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2fd9170 [0205.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0205.936] NtQuerySystemTime (in: CurrentTime=0xe2cf868 | out: CurrentTime=0xe2cf868*=132482711144148000) returned 0x0 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x2ee2a471 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x163eca0 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x3292c8ac [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x451b680d [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x257fe61 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x7321c5cd [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x6630ec37 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x4e178e4c [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x4d615f9d [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x560c588d [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x630ae007 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x304006f3 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x775df6c5 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x703db521 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x108d894a [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x59c38dd2 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x27a54397 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x2c4681c3 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x59f6c927 [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x55eafa9a [0205.936] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x10353e23 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1417d067 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x93c3f38 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x352c73e7 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x1c5e0110 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x3ad308fc [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x6b59dec8 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x3d5ca789 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x771ef437 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x59466dc8 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x75a36918 [0205.937] RtlRandomEx (in: Seed=0xe2cf860 | out: Seed=0xe2cf860) returned 0x62502648 [0205.945] ReadFile (in: hFile=0x1854, lpBuffer=0x12f00060, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0xe2cf85c, lpOverlapped=0x0 | out: lpBuffer=0x12f00060*, lpNumberOfBytesRead=0xe2cf85c*=0xe9, lpOverlapped=0x0) returned 1 [0208.370] SetFilePointerEx (in: hFile=0x1854, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.370] WriteFile (in: hFile=0x1854, lpBuffer=0x12f348d0*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0xe2cf860, lpOverlapped=0x0 | out: lpBuffer=0x12f348d0*, lpNumberOfBytesWritten=0xe2cf860*=0xe9, lpOverlapped=0x0) returned 1 [0215.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecb08 [0215.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca90 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca90) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f348d0) returned 1 [0215.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f00060) returned 1 [0215.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86a80) returned 1 [0215.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c25a0) returned 1 [0215.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5878 [0215.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca90) returned 1 [0215.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e58a8 [0215.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca90 [0215.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecab8 [0215.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecab8) returned 1 [0215.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86a80) returned 1 [0215.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c25a0) returned 1 [0215.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x675d378 [0215.643] SetFilePointerEx (in: hFile=0x1854, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.643] WriteFile (in: hFile=0x1854, lpBuffer=0x675d378*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe2cf8e8, lpOverlapped=0x0 | out: lpBuffer=0x675d378*, lpNumberOfBytesWritten=0xe2cf8e8*=0x10c, lpOverlapped=0x0) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d378) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e58a8) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca90) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5878) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecb08) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fd9170) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ed230) returned 1 [0216.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x312ae0) returned 1 [0216.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678bf70 [0216.487] wcscpy (in: _Dest=0x678bf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" [0216.487] wcscat (in: _Dest=0x678bf70, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.ac3a86" [0216.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0xe2cf860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776c00 [0216.893] FlushFileBuffers (hFile=0x1854) returned 1 [0216.900] CloseHandle (hObject=0x1854) returned 1 [0223.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766678 [0223.894] wcscpy (in: _Dest=0x6766678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0223.894] wcscat (in: _Dest=0x6766678, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" [0223.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0223.894] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16d4 [0224.942] WriteFile (in: hFile=0x16d4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe2cf87c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe2cf87c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.944] CloseHandle (hObject=0x16d4) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766678) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758be0) returned 1 Thread: id = 7455 os_tid = 0x1780 [0201.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0201.703] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0205.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x122c [0205.947] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0xdb3fa74 | out: lpFileSize=0xdb3fa74*=210) returned 1 [0205.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0205.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba628 [0205.947] NtQuerySystemTime (in: CurrentTime=0xdb3f9e8 | out: CurrentTime=0xdb3f9e8*=132482711144304000) returned 0x0 [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x70b7eddc [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x1108d002 [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x59adf067 [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x64cd816b [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x2fca07c3 [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x655363c8 [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x28999d5e [0205.947] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x6fe89ad5 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x16535883 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x601420ab [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x5dbdfa2b [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x28521a68 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x1c5fe2c [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x493d72a1 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x601420ab [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x3d8a4e1c [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x6b161784 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x5c2d0b8a [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x6f3d0773 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x13d102f7 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x2380a60b [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x4dc5eeff [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x2dd7d033 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x626b2f5a [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x42777e7f [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x3d1b73b0 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x21dce81c [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x7a6d3b8e [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x2d1f4a7 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x6a3cd630 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x630ae007 [0205.948] RtlRandomEx (in: Seed=0xdb3f9e0 | out: Seed=0xdb3f9e0) returned 0x24473b [0205.956] ReadFile (in: hFile=0x122c, lpBuffer=0x12f07870, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xdb3f9dc, lpOverlapped=0x0 | out: lpBuffer=0x12f07870*, lpNumberOfBytesRead=0xdb3f9dc*=0xd2, lpOverlapped=0x0) returned 1 [0208.372] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.372] WriteFile (in: hFile=0x122c, lpBuffer=0x12f03c68*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xdb3f9e0, lpOverlapped=0x0 | out: lpBuffer=0x12f03c68*, lpNumberOfBytesWritten=0xdb3f9e0*=0xd2, lpOverlapped=0x0) returned 1 [0215.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eca68 [0215.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec9a0 [0215.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9a0) returned 1 [0215.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f03c68) returned 1 [0215.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f07870) returned 1 [0215.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86af8) returned 1 [0215.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c25e8) returned 1 [0215.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5938 [0215.648] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.649] WriteFile (in: hFile=0x122c, lpBuffer=0x675d5a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb3fa68, lpOverlapped=0x0 | out: lpBuffer=0x675d5a8*, lpNumberOfBytesWritten=0xdb3fa68*=0x10c, lpOverlapped=0x0) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d5a8) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5968) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9a0) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5938) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eca68) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bf18) returned 1 [0216.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3016b38) returned 1 [0216.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c318 [0216.493] wcscpy (in: _Dest=0x678c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" [0216.493] wcscat (in: _Dest=0x678c318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.ac3a86" [0216.493] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.ac3a86", NtPathName=0xdb3f9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776d48 [0216.902] FlushFileBuffers (hFile=0x122c) returned 1 [0216.911] CloseHandle (hObject=0x122c) returned 1 [0223.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x67667a0 [0223.901] wcscpy (in: _Dest=0x67667a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0223.901] wcscat (in: _Dest=0x67667a0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" [0223.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ac3a86-readme.txt")) returned 0xffffffff [0223.902] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.411] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdb3f9fc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xdb3f9fc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.413] CloseHandle (hObject=0x1038) returned 1 [0225.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67667a0) returned 1 [0225.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67593f8) returned 1 Thread: id = 7456 os_tid = 0x11b4 [0201.704] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0201.704] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.956] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1388 [0205.957] GetFileSizeEx (in: hFile=0x1388, lpFileSize=0xe3dfe64 | out: lpFileSize=0xe3dfe64*=221) returned 1 [0205.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b460 [0205.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x2ba628 [0205.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ea498 [0205.957] NtQuerySystemTime (in: CurrentTime=0xe3dfdd8 | out: CurrentTime=0xe3dfdd8*=132482711144304000) returned 0x0 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x3411dd5b [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x508f63d7 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x66f95c83 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2dea2aa8 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x7bd513d7 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x5da7496b [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x36613f20 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2532ef22 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0xf77f425 [0205.957] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2dea2aa8 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x1fb6ca27 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0xf452f9 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2c4681c3 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x258a2123 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x52384fc [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x67ed4e3d [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x81531cb [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x1dd0c7d4 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x1487c4ca [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x165d4ea6 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x7bb1d740 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x24890ca3 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2475d42f [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2c7c4ef9 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2abfe696 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x7d72fd9d [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x5d9b3791 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x34106fcb [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x28c90f89 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x2380a60b [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x6ed22a41 [0205.958] RtlRandomEx (in: Seed=0xe3dfdd0 | out: Seed=0xe3dfdd0) returned 0x4d53003 [0205.967] ReadFile (in: hFile=0x1388, lpBuffer=0x12f3c0e0, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xe3dfdcc, lpOverlapped=0x0 | out: lpBuffer=0x12f3c0e0*, lpNumberOfBytesRead=0xe3dfdcc*=0xdd, lpOverlapped=0x0) returned 1 [0208.374] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.374] WriteFile (in: hFile=0x1388, lpBuffer=0x12f2d0c0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xe3dfdd0, lpOverlapped=0x0 | out: lpBuffer=0x12f2d0c0*, lpNumberOfBytesWritten=0xe3dfdd0*=0xdd, lpOverlapped=0x0) returned 1 [0215.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec9c8 [0215.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec900 [0215.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec900) returned 1 [0215.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f2d0c0) returned 1 [0215.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f3c0e0) returned 1 [0215.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86b70) returned 1 [0215.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c2630) returned 1 [0215.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5998 [0215.650] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.650] WriteFile (in: hFile=0x1388, lpBuffer=0x675d6c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe3dfe58, lpOverlapped=0x0 | out: lpBuffer=0x675d6c0*, lpNumberOfBytesWritten=0xe3dfe58*=0x10c, lpOverlapped=0x0) returned 1 [0216.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675d6c0) returned 1 [0216.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e59c8) returned 1 [0216.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec900) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5998) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec9c8) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ba628) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea4c0) returned 1 [0216.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ea4e8) returned 1 [0216.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x678c450 [0216.497] wcscpy (in: _Dest=0x678c450, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" [0216.497] wcscat (in: _Dest=0x678c450, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.ac3a86" [0216.497] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xe3dfdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67786e8 [0216.908] FlushFileBuffers (hFile=0x1388) returned 1 [0216.918] CloseHandle (hObject=0x1388) returned 1 [0224.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x6766300 [0224.246] wcscpy (in: _Dest=0x6766300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0224.246] wcscat (in: _Dest=0x6766300, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" [0224.246] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0224.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21ac [0224.747] WriteFile (in: hFile=0x21ac, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe3dfdec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe3dfdec*=0x8b9, lpOverlapped=0x0) returned 1 [0225.438] CloseHandle (hObject=0x21ac) returned 1 [0225.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766300) returned 1 [0225.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67591a8) returned 1 Thread: id = 7457 os_tid = 0x11b8 [0201.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67515a8 [0201.705] wcscpy (in: _Dest=0x67515a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0201.705] wcscat (in: _Dest=0x67515a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0201.705] wcscat (in: _Dest=0x67515a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*" [0201.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b99c8 [0201.705] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.001] wcscmp (_String1=".", _String2=".") returned 0 [0202.001] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.001] wcscmp (_String1="..", _String2=".") returned 1 [0202.001] wcscmp (_String1="..", _String2="..") returned 0 [0202.001] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.001] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.001] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x675a8c8 [0202.001] wcscpy (in: _Dest=0x675a8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0202.001] wcscat (in: _Dest=0x675a8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0202.001] wcscat (in: _Dest=0x675a8c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" [0202.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0202.002] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b99c8 | out: lpFindFileData=0x68b99c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.002] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b99c8) returned 1 [0202.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67515a8) returned 1 [0202.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ac000) returned 1 Thread: id = 7458 os_tid = 0x11bc [0201.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aef78 [0201.706] wcscpy (in: _Dest=0x68aef78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0201.706] wcscat (in: _Dest=0x68aef78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0201.707] wcscat (in: _Dest=0x68aef78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*" [0201.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b9760 [0201.707] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.003] wcscmp (_String1=".", _String2=".") returned 0 [0202.003] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.003] wcscmp (_String1="..", _String2=".") returned 1 [0202.003] wcscmp (_String1="..", _String2="..") returned 0 [0202.003] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.003] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.003] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a7a0 [0202.003] wcscpy (in: _Dest=0x675a7a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0202.004] wcscat (in: _Dest=0x675a7a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0202.004] wcscat (in: _Dest=0x675a7a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" [0202.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0202.004] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b9760 | out: lpFindFileData=0x68b9760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.004] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9760) returned 1 [0202.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aef78) returned 1 [0202.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d40) returned 1 Thread: id = 7459 os_tid = 0x11c0 [0201.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68ae630 [0201.708] wcscpy (in: _Dest=0x68ae630, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0201.708] wcscat (in: _Dest=0x68ae630, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0201.708] wcscat (in: _Dest=0x68ae630, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*" [0201.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b8688 [0201.708] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.006] wcscmp (_String1=".", _String2=".") returned 0 [0202.006] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.006] wcscmp (_String1="..", _String2=".") returned 1 [0202.006] wcscmp (_String1="..", _String2="..") returned 0 [0202.006] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.006] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.006] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a678 [0202.006] wcscpy (in: _Dest=0x675a678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0202.006] wcscat (in: _Dest=0x675a678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0202.006] wcscat (in: _Dest=0x675a678, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" [0202.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0202.007] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b8688 | out: lpFindFileData=0x68b8688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.007] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8688) returned 1 [0202.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae630) returned 1 [0202.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e48) returned 1 Thread: id = 7460 os_tid = 0x11c4 [0201.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af7b8 [0201.709] wcscpy (in: _Dest=0x68af7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0201.709] wcscat (in: _Dest=0x68af7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0201.709] wcscat (in: _Dest=0x68af7b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*" [0201.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68b94f8 [0201.709] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.008] wcscmp (_String1=".", _String2=".") returned 0 [0202.008] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.008] wcscmp (_String1="..", _String2=".") returned 1 [0202.008] wcscmp (_String1="..", _String2="..") returned 0 [0202.008] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.008] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.008] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759770 [0202.009] wcscpy (in: _Dest=0x6759770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0202.009] wcscat (in: _Dest=0x6759770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0202.009] wcscat (in: _Dest=0x6759770, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" [0202.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0202.009] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68b94f8 | out: lpFindFileData=0x68b94f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.009] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b94f8) returned 1 [0202.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af7b8) returned 1 [0202.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44378) returned 1 Thread: id = 7461 os_tid = 0x11e8 [0201.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af9c8 [0201.710] wcscpy (in: _Dest=0x68af9c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0201.710] wcscat (in: _Dest=0x68af9c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0201.710] wcscat (in: _Dest=0x68af9c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*" [0201.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba368 [0201.710] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.011] wcscmp (_String1=".", _String2=".") returned 0 [0202.011] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.011] wcscmp (_String1="..", _String2=".") returned 1 [0202.011] wcscmp (_String1="..", _String2="..") returned 0 [0202.011] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.011] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.011] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759e60 [0202.011] wcscpy (in: _Dest=0x6759e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0202.011] wcscat (in: _Dest=0x6759e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0202.011] wcscat (in: _Dest=0x6759e60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" [0202.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0202.012] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba368 | out: lpFindFileData=0x68ba368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.012] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba368) returned 1 [0202.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af9c8) returned 1 [0202.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44480) returned 1 Thread: id = 7462 os_tid = 0x2340 [0201.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68afad0 [0201.711] wcscpy (in: _Dest=0x68afad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0201.711] wcscat (in: _Dest=0x68afad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0201.711] wcscat (in: _Dest=0x68afad0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*" [0201.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bad08 [0201.711] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.013] wcscmp (_String1=".", _String2=".") returned 0 [0202.013] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.013] wcscmp (_String1="..", _String2=".") returned 1 [0202.013] wcscmp (_String1="..", _String2="..") returned 0 [0202.013] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.013] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.013] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a0b0 [0202.013] wcscpy (in: _Dest=0x675a0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0202.013] wcscat (in: _Dest=0x675a0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0202.013] wcscat (in: _Dest=0x675a0b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" [0202.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0202.014] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bad08 | out: lpFindFileData=0x68bad08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.015] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bad08) returned 1 [0202.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68afad0) returned 1 [0202.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44588) returned 1 Thread: id = 7463 os_tid = 0x2344 [0201.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aea50 [0201.712] wcscpy (in: _Dest=0x68aea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0201.712] wcscat (in: _Dest=0x68aea50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0201.712] wcscat (in: _Dest=0x68aea50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*" [0201.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb910 [0201.712] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.016] wcscmp (_String1=".", _String2=".") returned 0 [0202.016] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.016] wcscmp (_String1="..", _String2=".") returned 1 [0202.016] wcscmp (_String1="..", _String2="..") returned 0 [0202.016] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.016] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.016] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x675a1d8 [0202.016] wcscpy (in: _Dest=0x675a1d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0202.016] wcscat (in: _Dest=0x675a1d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0202.016] wcscat (in: _Dest=0x675a1d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" [0202.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x675a1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0202.017] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68bb910 | out: lpFindFileData=0x68bb910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.017] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb910) returned 1 [0202.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea50) returned 1 [0202.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 7464 os_tid = 0x2348 [0201.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68aec60 [0201.713] wcscpy (in: _Dest=0x68aec60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0201.713] wcscat (in: _Dest=0x68aec60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0201.713] wcscat (in: _Dest=0x68aec60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*" [0201.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68ba5d0 [0201.713] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.019] wcscmp (_String1=".", _String2=".") returned 0 [0202.019] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.019] wcscmp (_String1="..", _String2=".") returned 1 [0202.019] wcscmp (_String1="..", _String2="..") returned 0 [0202.019] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.019] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.019] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759c10 [0202.020] wcscpy (in: _Dest=0x6759c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0202.020] wcscat (in: _Dest=0x6759c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0202.020] wcscat (in: _Dest=0x6759c10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" [0202.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0202.020] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x68ba5d0 | out: lpFindFileData=0x68ba5d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.020] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ba5d0) returned 1 [0202.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aec60) returned 1 [0202.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44798) returned 1 Thread: id = 7465 os_tid = 0x2350 [0201.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af8c0 [0201.714] wcscpy (in: _Dest=0x68af8c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0201.714] wcscat (in: _Dest=0x68af8c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0201.714] wcscat (in: _Dest=0x68af8c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*" [0201.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0201.715] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.022] wcscmp (_String1=".", _String2=".") returned 0 [0202.022] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.022] wcscmp (_String1="..", _String2=".") returned 1 [0202.022] wcscmp (_String1="..", _String2="..") returned 0 [0202.022] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.022] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.022] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x67599c0 [0202.022] wcscpy (in: _Dest=0x67599c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0202.022] wcscat (in: _Dest=0x67599c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0202.022] wcscat (in: _Dest=0x67599c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" [0202.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x67599c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0202.023] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.023] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0202.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af8c0) returned 1 [0202.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45500) returned 1 Thread: id = 7466 os_tid = 0x1208 [0201.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af6b0 [0201.715] wcscpy (in: _Dest=0x68af6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0201.716] wcscat (in: _Dest=0x68af6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0201.716] wcscat (in: _Dest=0x68af6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*" [0201.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0201.716] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0202.024] wcscmp (_String1=".", _String2=".") returned 0 [0202.024] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.024] wcscmp (_String1="..", _String2=".") returned 1 [0202.024] wcscmp (_String1="..", _String2="..") returned 0 [0202.024] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0202.024] wcscmp (_String1="messages.json", _String2=".") returned 1 [0202.024] wcscmp (_String1="messages.json", _String2="..") returned 1 [0202.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6759f88 [0202.024] wcscpy (in: _Dest=0x6759f88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0202.024] wcscat (in: _Dest=0x6759f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0202.024] wcscat (in: _Dest=0x6759f88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" [0202.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0202.025] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0202.025] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0202.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0202.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af6b0) returned 1 [0202.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450e0) returned 1 Thread: id = 7467 os_tid = 0x133c [0201.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x68af4a0 [0201.717] wcscpy (in: _Dest=0x68af4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0201.717] wcscat (in: _Dest=0x68af4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0201.717] wcscat (in: _Dest=0x68af4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*" [0201.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cb2e8 [0201.717] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1efc0 [0201.909] wcscmp (_String1=".", _String2=".") returned 0 [0201.909] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.909] wcscmp (_String1="..", _String2=".") returned 1 [0201.909] wcscmp (_String1="..", _String2="..") returned 0 [0201.909] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.909] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.909] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x6758ab8 [0201.910] wcscpy (in: _Dest=0x6758ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0201.910] wcscat (in: _Dest=0x6758ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0201.910] wcscat (in: _Dest=0x6758ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" [0201.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0201.957] FindNextFileW (in: hFindFile=0x3f1efc0, lpFindFileData=0x66cb2e8 | out: lpFindFileData=0x66cb2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.957] FindClose (in: hFindFile=0x3f1efc0 | out: hFindFile=0x3f1efc0) returned 1 [0201.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cb2e8) returned 1 [0201.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af4a0) returned 1 [0201.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 7468 os_tid = 0x142c [0201.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67516c0 [0201.718] wcscpy (in: _Dest=0x67516c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0201.719] wcscat (in: _Dest=0x67516c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0201.719] wcscat (in: _Dest=0x67516c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*" [0201.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c8c68 [0201.719] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0201.910] wcscmp (_String1=".", _String2=".") returned 0 [0201.910] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.910] wcscmp (_String1="..", _String2=".") returned 1 [0201.910] wcscmp (_String1="..", _String2="..") returned 0 [0201.910] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.910] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.910] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6759080 [0201.910] wcscpy (in: _Dest=0x6759080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0201.910] wcscat (in: _Dest=0x6759080, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0201.910] wcscat (in: _Dest=0x6759080, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" [0201.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6759080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0201.959] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c8c68 | out: lpFindFileData=0x66c8c68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.959] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0201.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c8c68) returned 1 [0201.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0201.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 7469 os_tid = 0xe04 [0201.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x67517d8 [0201.720] wcscpy (in: _Dest=0x67517d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0201.720] wcscat (in: _Dest=0x67517d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0201.720] wcscat (in: _Dest=0x67517d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*" [0201.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c82c8 [0201.720] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fd00 [0201.994] wcscmp (_String1=".", _String2=".") returned 0 [0201.994] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.994] wcscmp (_String1="..", _String2=".") returned 1 [0201.994] wcscmp (_String1="..", _String2="..") returned 0 [0201.994] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0201.994] wcscmp (_String1="messages.json", _String2=".") returned 1 [0201.994] wcscmp (_String1="messages.json", _String2="..") returned 1 [0201.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x6758f58 [0201.994] wcscpy (in: _Dest=0x6758f58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0201.994] wcscat (in: _Dest=0x6758f58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0201.994] wcscat (in: _Dest=0x6758f58, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" [0201.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x6758f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c [0201.995] FindNextFileW (in: hFindFile=0x3f1fd00, lpFindFileData=0x66c82c8 | out: lpFindFileData=0x66c82c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.995] FindClose (in: hFindFile=0x3f1fd00 | out: hFindFile=0x3f1fd00) returned 1 [0201.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c82c8) returned 1 [0201.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0201.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d453f8) returned 1 Thread: id = 7470 os_tid = 0x264 [0201.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif")) returned 0x20 [0201.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.721] GetLastError () returned 0x5 [0201.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0201.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8688) returned 1 Thread: id = 7471 os_tid = 0x1434 [0201.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0201.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.723] GetLastError () returned 0x5 [0201.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0201.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 7472 os_tid = 0x17c0 [0201.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0201.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.725] GetLastError () returned 0x5 [0201.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0201.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 7473 os_tid = 0x143c [0201.729] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0201.729] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0205.967] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x564 [0205.968] GetFileSizeEx (in: hFile=0x564, lpFileSize=0xb20fea4 | out: lpFileSize=0xb20fea4*=267) returned 1 [0205.968] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.968] ReadFile (in: hFile=0x564, lpBuffer=0xb20fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb20fe90, lpOverlapped=0x0 | out: lpBuffer=0xb20fe80*, lpNumberOfBytesRead=0xb20fe90*=0x4, lpOverlapped=0x0) returned 1 [0208.375] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c9b8 [0208.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0208.376] NtQuerySystemTime (in: CurrentTime=0xb20fe18 | out: CurrentTime=0xb20fe18*=132482711168484000) returned 0x0 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xad2ba64 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x72677ea8 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x60b52e9 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xe812c0a [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x4d40db0a [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x675777ed [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x719a5485 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x64bfdb83 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x44dcbb4b [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x48a00203 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x6f11d194 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xd6a99fc [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x33293a45 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xccc267 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x6f597ffe [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x1db4a42c [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x4508c52c [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x4c35ba62 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xb8f6acd [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xea69e58 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x5d6290c9 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x28847dc1 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x4de2ed28 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x5484f730 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x46d35c27 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x13342b61 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x772c3231 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0xa97d063 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x4e163301 [0208.376] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x415358cc [0208.377] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x1317c6df [0208.377] RtlRandomEx (in: Seed=0xb20fe10 | out: Seed=0xb20fe10) returned 0x5dc197d6 [0208.385] ReadFile (in: hFile=0x564, lpBuffer=0x6715ed0, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0xb20fe0c, lpOverlapped=0x0 | out: lpBuffer=0x6715ed0*, lpNumberOfBytesRead=0xb20fe0c*=0x10b, lpOverlapped=0x0) returned 1 [0208.385] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.385] WriteFile (in: hFile=0x564, lpBuffer=0x697fce8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0xb20fe10, lpOverlapped=0x0 | out: lpBuffer=0x697fce8*, lpNumberOfBytesWritten=0xb20fe10*=0x10b, lpOverlapped=0x0) returned 1 [0214.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed080 [0214.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0a8 [0214.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0a8) returned 1 [0214.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fce8) returned 1 [0214.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6715ed0) returned 1 [0214.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dc10) returned 1 [0214.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea29f0) returned 1 [0214.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef6020 [0214.275] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.276] WriteFile (in: hFile=0x564, lpBuffer=0x6752958*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb20fe98, lpOverlapped=0x0 | out: lpBuffer=0x6752958*, lpNumberOfBytesWritten=0xb20fe98*=0x10c, lpOverlapped=0x0) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752958) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6050) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0a8) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6020) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed080) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c9b8) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b770) returned 1 [0214.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bdb0) returned 1 [0214.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678aab8 [0214.449] wcscpy (in: _Dest=0x678aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" [0214.450] wcscat (in: _Dest=0x678aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.ac3a86" [0214.450] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0xb20fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66ce060 [0214.578] FlushFileBuffers (hFile=0x564) returned 1 [0214.726] CloseHandle (hObject=0x564) returned 1 [0215.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678b820 [0215.891] wcscpy (in: _Dest=0x678b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0215.891] wcscat (in: _Dest=0x678b820, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0215.891] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0215.891] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1854 [0216.988] WriteFile (in: hFile=0x1854, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb20fe2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb20fe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.510] CloseHandle (hObject=0x1854) returned 1 [0225.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678b820) returned 1 [0225.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771770) returned 1 Thread: id = 7474 os_tid = 0x1574 [0201.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0204.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.794] GetLastError () returned 0x5 [0212.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e260) returned 1 Thread: id = 7475 os_tid = 0x1578 [0201.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0204.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.795] GetLastError () returned 0x5 [0212.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ec88) returned 1 Thread: id = 7476 os_tid = 0x860 [0201.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0204.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.796] GetLastError () returned 0x5 [0212.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ddb0) returned 1 Thread: id = 7477 os_tid = 0x157c [0201.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif")) returned 0x20 [0204.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.799] GetLastError () returned 0x5 [0212.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 7478 os_tid = 0x1580 [0201.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0204.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.800] GetLastError () returned 0x5 [0212.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 7479 os_tid = 0x1440 [0201.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0204.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.801] GetLastError () returned 0x5 [0212.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 7480 os_tid = 0x23c [0201.732] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0202.000] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0213.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1320 [0213.795] GetFileSizeEx (in: hFile=0x1320, lpFileSize=0xec5fbdc | out: lpFileSize=0xec5fbdc*=272) returned 1 [0213.795] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.796] ReadFile (in: hFile=0x1320, lpBuffer=0xec5fbb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xec5fbc8, lpOverlapped=0x0 | out: lpBuffer=0xec5fbb8*, lpNumberOfBytesRead=0xec5fbc8*=0x4, lpOverlapped=0x0) returned 1 [0213.798] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebed8 [0213.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebf50 [0213.798] NtQuerySystemTime (in: CurrentTime=0xec5fb50 | out: CurrentTime=0xec5fb50*=132482711205144000) returned 0x0 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x793fd751 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x6f02b8e8 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x2a3dcadb [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0xd0e3600 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x3533dfd1 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x21fc0fa6 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x50137108 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x14826fe [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x639889a2 [0213.798] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x42030219 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x4ef422bb [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x694b9129 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x1956e620 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x64c476e2 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x3c14ccd4 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x2751fe5f [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x55a74906 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x2b6fa8d2 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x3bb047a [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0xe483c19 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x7f59dc79 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x51a938f0 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x20998fff [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x15b6b151 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x2efbde38 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x7982dc00 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x32f4bec5 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x2dbb0e62 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x7bcc7fbd [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x3447f560 [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x499e752f [0213.799] RtlRandomEx (in: Seed=0xec5fb48 | out: Seed=0xec5fb48) returned 0x4c55910e [0213.807] ReadFile (in: hFile=0x1320, lpBuffer=0x13103c68, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xec5fb44, lpOverlapped=0x0 | out: lpBuffer=0x13103c68*, lpNumberOfBytesRead=0xec5fb44*=0x110, lpOverlapped=0x0) returned 1 [0213.807] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.807] WriteFile (in: hFile=0x1320, lpBuffer=0x13107870*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xec5fb48, lpOverlapped=0x0 | out: lpBuffer=0x13107870*, lpNumberOfBytesWritten=0xec5fb48*=0x110, lpOverlapped=0x0) returned 1 [0214.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc20 [0214.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecc48 [0214.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc48) returned 1 [0214.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13107870) returned 1 [0214.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13103c68) returned 1 [0214.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1abb0) returned 1 [0214.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a7e0) returned 1 [0214.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53f0 [0214.180] SetFilePointerEx (in: hFile=0x1320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.180] WriteFile (in: hFile=0x1320, lpBuffer=0x67516c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec5fbd0, lpOverlapped=0x0 | out: lpBuffer=0x67516c0*, lpNumberOfBytesWritten=0xec5fbd0*=0x10c, lpOverlapped=0x0) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67516c0) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5db0) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc48) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecc20) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebed8) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf78) returned 1 [0214.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebfa0) returned 1 [0214.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d419f8 [0214.319] wcscpy (in: _Dest=0x3d419f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" [0214.319] wcscat (in: _Dest=0x3d419f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.ac3a86" [0214.319] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.ac3a86", NtPathName=0xec5fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777788 [0214.527] FlushFileBuffers (hFile=0x1320) returned 1 [0214.642] CloseHandle (hObject=0x1320) returned 1 [0214.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674ebe0 [0214.659] wcscpy (in: _Dest=0x674ebe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0214.659] wcscat (in: _Dest=0x674ebe0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" [0214.659] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ac3a86-readme.txt")) returned 0xffffffff [0214.659] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8c [0214.670] WriteFile (in: hFile=0x1f8c, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xec5fb64, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xec5fb64*=0x8b9, lpOverlapped=0x0) returned 1 [0214.731] CloseHandle (hObject=0x1f8c) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ebe0) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676a7a0) returned 1 Thread: id = 7481 os_tid = 0x255c [0201.732] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0201.733] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0205.969] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x239c [0205.970] GetFileSizeEx (in: hFile=0x239c, lpFileSize=0xeb1f94c | out: lpFileSize=0xeb1f94c*=783) returned 1 [0205.970] SetFilePointerEx (in: hFile=0x239c, liDistanceToMove=0x30b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.970] ReadFile (in: hFile=0x239c, lpBuffer=0xeb1f928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeb1f938, lpOverlapped=0x0 | out: lpBuffer=0xeb1f928*, lpNumberOfBytesRead=0xeb1f938*=0x4, lpOverlapped=0x0) returned 1 [0208.428] SetFilePointerEx (in: hFile=0x239c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0208.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0208.428] NtQuerySystemTime (in: CurrentTime=0xeb1f8c0 | out: CurrentTime=0xeb1f8c0*=132482711169108000) returned 0x0 [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x5e8c4514 [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x75c32790 [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x3f5b967f [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x21832f8d [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x19f24cf [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x67611abe [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x686352aa [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x4db012e0 [0208.428] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0xa421ee3 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x28540413 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x13a9efc5 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x7aeae70d [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x714e8599 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x5941f5cd [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0xac2a923 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x21243be4 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x7d0ba86e [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x3dfe3b5e [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x2a17b668 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x45fc92e6 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x4ab3ccf5 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x4d53003 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x275d0f96 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0xf3a7561 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x2a3e28d6 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x3837ad9 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x128d4465 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x747c67cd [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0xb185aa3 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x19580201 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x6719e6e2 [0208.429] RtlRandomEx (in: Seed=0xeb1f8b8 | out: Seed=0xeb1f8b8) returned 0x3d2ee4ba [0208.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698b100 [0208.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x698ed08 [0208.438] ReadFile (in: hFile=0x239c, lpBuffer=0x698b100, nNumberOfBytesToRead=0x30f, lpNumberOfBytesRead=0xeb1f8b4, lpOverlapped=0x0 | out: lpBuffer=0x698b100*, lpNumberOfBytesRead=0xeb1f8b4*=0x30f, lpOverlapped=0x0) returned 1 [0208.438] SetFilePointerEx (in: hFile=0x239c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.438] WriteFile (in: hFile=0x239c, lpBuffer=0x698ed08*, nNumberOfBytesToWrite=0x30f, lpNumberOfBytesWritten=0xeb1f8b8, lpOverlapped=0x0 | out: lpBuffer=0x698ed08*, lpNumberOfBytesWritten=0xeb1f8b8*=0x30f, lpOverlapped=0x0) returned 1 [0214.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecea0 [0214.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecec8 [0214.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecec8) returned 1 [0214.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698ed08) returned 1 [0214.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x698b100) returned 1 [0214.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d940) returned 1 [0214.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2a80) returned 1 [0214.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5d20 [0214.991] SetFilePointerEx (in: hFile=0x239c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.991] WriteFile (in: hFile=0x239c, lpBuffer=0x6752610*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeb1f940, lpOverlapped=0x0 | out: lpBuffer=0x6752610*, lpNumberOfBytesWritten=0xeb1f940*=0x10c, lpOverlapped=0x0) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752610) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5210) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecec8) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5d20) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecea0) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bd60) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0a8) returned 1 [0216.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c670) returned 1 [0216.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c318 [0216.732] wcscpy (in: _Dest=0x675c318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" [0216.732] wcscat (in: _Dest=0x675c318, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.ac3a86" [0216.732] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0xeb1f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf5e0 [0224.352] FlushFileBuffers (hFile=0x239c) returned 1 [0224.353] CloseHandle (hObject=0x239c) returned 1 [0224.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1650 [0224.556] wcscpy (in: _Dest=0x12ea1650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0224.556] wcscat (in: _Dest=0x12ea1650, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\AC3A86-Readme.txt" [0224.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0224.556] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.092] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xeb1f8d4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xeb1f8d4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.094] CloseHandle (hObject=0xeb8) returned 1 [0225.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1650) returned 1 [0225.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765898) returned 1 Thread: id = 7482 os_tid = 0x12dc [0201.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0201.734] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0205.970] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8 [0205.970] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0xecbfe2c | out: lpFileSize=0xecbfe2c*=595) returned 1 [0205.970] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x24f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.970] ReadFile (in: hFile=0x16f8, lpBuffer=0xecbfe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xecbfe18, lpOverlapped=0x0 | out: lpBuffer=0xecbfe08*, lpNumberOfBytesRead=0xecbfe18*=0x4, lpOverlapped=0x0) returned 1 [0208.488] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb0a0 [0208.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafd8 [0208.488] NtQuerySystemTime (in: CurrentTime=0xecbfda0 | out: CurrentTime=0xecbfda0*=132482711169732000) returned 0x0 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x1e0d23e7 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x67d30af8 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x46153d67 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x54f8382f [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x225af91f [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x13a9efc5 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x72baf4 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x38473793 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x1462ae4b [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x6c20d91a [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x159a7b91 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x75aedc0d [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x6990d527 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x4a9a9df9 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x6baff3dc [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x3651295f [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x2dee5698 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x55673388 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x3b3e2a8c [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x13628d80 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x4bca048f [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x22055c3c [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x5c9504aa [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x1f012905 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0xcd1d7bd [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x4d604ecc [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x58b0b4eb [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x6b04bd2e [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x43934731 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x4ab0a76d [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x7aadddc1 [0208.489] RtlRandomEx (in: Seed=0xecbfd98 | out: Seed=0xecbfd98) returned 0x45f966ab [0208.497] ReadFile (in: hFile=0x16f8, lpBuffer=0x69b0950, nNumberOfBytesToRead=0x253, lpNumberOfBytesRead=0xecbfd94, lpOverlapped=0x0 | out: lpBuffer=0x69b0950*, lpNumberOfBytesRead=0xecbfd94*=0x253, lpOverlapped=0x0) returned 1 [0208.497] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.497] WriteFile (in: hFile=0x16f8, lpBuffer=0x69b4558*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0xecbfd98, lpOverlapped=0x0 | out: lpBuffer=0x69b4558*, lpNumberOfBytesWritten=0xecbfd98*=0x253, lpOverlapped=0x0) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec1f8 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec1d0 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1d0) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b4558) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b0950) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d1c0) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2be8) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c60 [0215.010] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.010] WriteFile (in: hFile=0x16f8, lpBuffer=0x6751f80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xecbfe20, lpOverlapped=0x0 | out: lpBuffer=0x6751f80*, lpNumberOfBytesWritten=0xecbfe20*=0x10c, lpOverlapped=0x0) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751f80) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5a50) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1d0) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c60) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec1f8) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb0a0) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb000) returned 1 [0216.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf88) returned 1 [0216.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x6789df0 [0216.749] wcscpy (in: _Dest=0x6789df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" [0216.749] wcscat (in: _Dest=0x6789df0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.ac3a86" [0216.749] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0xecbfd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66cfdf0 [0224.293] FlushFileBuffers (hFile=0x16f8) returned 1 [0224.301] CloseHandle (hObject=0x16f8) returned 1 [0224.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x12ea0dc8 [0224.526] wcscpy (in: _Dest=0x12ea0dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0224.526] wcscat (in: _Dest=0x12ea0dc8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0224.526] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0224.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.041] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xecbfdb4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xecbfdb4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.042] CloseHandle (hObject=0xeb8) returned 1 [0225.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0dc8) returned 1 [0225.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402d0) returned 1 Thread: id = 7483 os_tid = 0x2564 [0201.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0201.735] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0205.971] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1474 [0205.971] GetFileSizeEx (in: hFile=0x1474, lpFileSize=0xb88fa14 | out: lpFileSize=0xb88fa14*=686) returned 1 [0205.971] SetFilePointerEx (in: hFile=0x1474, liDistanceToMove=0x2aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.971] ReadFile (in: hFile=0x1474, lpBuffer=0xb88f9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb88fa00, lpOverlapped=0x0 | out: lpBuffer=0xb88f9f0*, lpNumberOfBytesRead=0xb88fa00*=0x4, lpOverlapped=0x0) returned 1 [0208.498] SetFilePointerEx (in: hFile=0x1474, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafd8 [0208.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafb0 [0208.498] NtQuerySystemTime (in: CurrentTime=0xb88f988 | out: CurrentTime=0xb88f988*=132482711169732000) returned 0x0 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x6661eab [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x4e0a37c7 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x17350703 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x96be323 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x6a5d608f [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x3bb42b21 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x2e680fec [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x343ad74c [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x9410a63 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x60909774 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x596d44cc [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x566a074c [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x22a5595 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x17093229 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x2f62f93 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x376ea354 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x4d54f769 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0xe9fbc4d [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x27ed6557 [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x82e2ff [0208.498] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x8a174a4 [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x63137981 [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x5c2bc0db [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x2bcbadab [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x242b865d [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x6654c3ff [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x17093229 [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x3680fdea [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x64a5cc3a [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x25a79d4 [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x615a78de [0208.499] RtlRandomEx (in: Seed=0xb88f980 | out: Seed=0xb88f980) returned 0x6c57a3a1 [0208.506] ReadFile (in: hFile=0x1474, lpBuffer=0x69b8160, nNumberOfBytesToRead=0x2ae, lpNumberOfBytesRead=0xb88f97c, lpOverlapped=0x0 | out: lpBuffer=0x69b8160*, lpNumberOfBytesRead=0xb88f97c*=0x2ae, lpOverlapped=0x0) returned 1 [0208.507] SetFilePointerEx (in: hFile=0x1474, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.507] WriteFile (in: hFile=0x1474, lpBuffer=0x69bbd68*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0xb88f980, lpOverlapped=0x0 | out: lpBuffer=0x69bbd68*, lpNumberOfBytesWritten=0xb88f980*=0x2ae, lpOverlapped=0x0) returned 1 [0215.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece00 [0215.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece28 [0215.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece28) returned 1 [0215.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bbd68) returned 1 [0215.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69b8160) returned 1 [0215.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1cfe0) returned 1 [0215.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2c30) returned 1 [0215.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f30 [0215.005] SetFilePointerEx (in: hFile=0x1474, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.006] WriteFile (in: hFile=0x1474, lpBuffer=0x67517d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb88fa08, lpOverlapped=0x0 | out: lpBuffer=0x67517d8*, lpNumberOfBytesWritten=0xb88fa08*=0x10c, lpOverlapped=0x0) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67517d8) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cf0) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece28) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f30) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece00) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eafd8) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf38) returned 1 [0216.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf60) returned 1 [0216.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x678ae60 [0216.746] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" [0216.746] wcscat (in: _Dest=0x678ae60, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.ac3a86" [0216.746] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.ac3a86", NtPathName=0xb88f980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cfc98 [0224.290] FlushFileBuffers (hFile=0x1474) returned 1 [0224.297] CloseHandle (hObject=0x1474) returned 1 [0224.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0060 [0224.524] wcscpy (in: _Dest=0x12ea0060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0224.524] wcscat (in: _Dest=0x12ea0060, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\AC3A86-Readme.txt" [0224.524] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ac3a86-readme.txt")) returned 0xffffffff [0224.524] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.037] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb88f99c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xb88f99c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.038] CloseHandle (hObject=0xeb8) returned 1 [0225.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0060) returned 1 [0225.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fae8) returned 1 Thread: id = 7484 os_tid = 0x3dc [0201.735] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0201.736] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0205.976] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10b8 [0205.976] GetFileSizeEx (in: hFile=0x10b8, lpFileSize=0x909f92c | out: lpFileSize=0x909f92c*=699) returned 1 [0205.977] SetFilePointerEx (in: hFile=0x10b8, liDistanceToMove=0x2b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.977] ReadFile (in: hFile=0x10b8, lpBuffer=0x909f908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x909f918, lpOverlapped=0x0 | out: lpBuffer=0x909f908*, lpNumberOfBytesRead=0x909f918*=0x4, lpOverlapped=0x0) returned 1 [0208.517] SetFilePointerEx (in: hFile=0x10b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaee8 [0208.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaec0 [0208.517] NtQuerySystemTime (in: CurrentTime=0x909f8a0 | out: CurrentTime=0x909f8a0*=132482711169888000) returned 0x0 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x27a3801a [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x2d91389f [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x1134a0cd [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x3caee125 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x152b24d2 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x55a101e3 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x7c5d3f43 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x7b4160ad [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x169d3cf4 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x304a6f45 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x27a3801a [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0xa091727 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x78c4c257 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x10069a57 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x74f08d34 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x2ff39674 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x70e453e9 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x60e845ca [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x36ffb3c0 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x91631a3 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x174d0df3 [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x60fa37fd [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x2bcbadab [0208.517] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x6f5c2135 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x7e64ed15 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x1d701c20 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x7ebe6027 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x4ff7f792 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x1d2bdf86 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x51eb1d65 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x36565082 [0208.518] RtlRandomEx (in: Seed=0x909f898 | out: Seed=0x909f898) returned 0x53b67391 [0208.526] ReadFile (in: hFile=0x10b8, lpBuffer=0x69614f8, nNumberOfBytesToRead=0x2bb, lpNumberOfBytesRead=0x909f894, lpOverlapped=0x0 | out: lpBuffer=0x69614f8*, lpNumberOfBytesRead=0x909f894*=0x2bb, lpOverlapped=0x0) returned 1 [0208.526] SetFilePointerEx (in: hFile=0x10b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.526] WriteFile (in: hFile=0x10b8, lpBuffer=0x6965100*, nNumberOfBytesToWrite=0x2bb, lpNumberOfBytesWritten=0x909f898, lpOverlapped=0x0 | out: lpBuffer=0x6965100*, lpNumberOfBytesWritten=0x909f898*=0x2bb, lpOverlapped=0x0) returned 1 [0215.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec2c0 [0215.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec220 [0215.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec220) returned 1 [0215.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6965100) returned 1 [0215.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69614f8) returned 1 [0215.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a86030) returned 1 [0215.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2cc0) returned 1 [0215.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5cc0 [0215.003] SetFilePointerEx (in: hFile=0x10b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.003] WriteFile (in: hFile=0x10b8, lpBuffer=0x6751a08*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x909f920, lpOverlapped=0x0 | out: lpBuffer=0x6751a08*, lpNumberOfBytesWritten=0x909f920*=0x10c, lpOverlapped=0x0) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751a08) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c00) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec220) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5cc0) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec2c0) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaee8) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae48) returned 1 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae70) returned 1 [0216.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c930 [0216.744] wcscpy (in: _Dest=0x675c930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" [0216.744] wcscat (in: _Dest=0x675c930, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.ac3a86" [0216.744] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.ac3a86", NtPathName=0x909f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cfb40 [0224.287] FlushFileBuffers (hFile=0x10b8) returned 1 [0224.294] CloseHandle (hObject=0x10b8) returned 1 [0224.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0198 [0224.522] wcscpy (in: _Dest=0x12ea0198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0224.522] wcscat (in: _Dest=0x12ea0198, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\AC3A86-Readme.txt" [0224.522] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ac3a86-readme.txt")) returned 0xffffffff [0224.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.033] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x909f8b4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x909f8b4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.035] CloseHandle (hObject=0xeb8) returned 1 [0225.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0198) returned 1 [0225.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f9c0) returned 1 Thread: id = 7485 os_tid = 0x256c [0201.736] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 0x2020 [0201.737] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", dwFileAttributes=0x20) returned 1 [0205.977] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc64 [0205.978] GetFileSizeEx (in: hFile=0xc64, lpFileSize=0xed9fe54 | out: lpFileSize=0xed9fe54*=644) returned 1 [0205.978] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.978] ReadFile (in: hFile=0xc64, lpBuffer=0xed9fe30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xed9fe40, lpOverlapped=0x0 | out: lpBuffer=0xed9fe30*, lpNumberOfBytesRead=0xed9fe40*=0x4, lpOverlapped=0x0) returned 1 [0208.475] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0f8 [0208.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb0a0 [0208.475] NtQuerySystemTime (in: CurrentTime=0xed9fdc8 | out: CurrentTime=0xed9fdc8*=132482711169576000) returned 0x0 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x37cfdbae [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x9ec6d63 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x1eeb1cd2 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x5e45818a [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x30a52f31 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x469b879b [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x5d3f9007 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x3c3870b0 [0208.475] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x62d85200 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x21a59cd0 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x453de90d [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x36ffb3c0 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x55a36edb [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0xfa5f519 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x273fae89 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x63137981 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x91076d4 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x2cd1ab38 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x61d67e62 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x34041e21 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x5fc66820 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x1e2e3a05 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x3ae11ff0 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x19c7ccf6 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x440cad76 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0xf6c9711 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x77997f98 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x402dc3d1 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x50638c4c [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x5cd7a4da [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x59002260 [0208.476] RtlRandomEx (in: Seed=0xed9fdc0 | out: Seed=0xed9fdc0) returned 0x2386f360 [0208.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a9140 [0208.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69acd48 [0208.487] ReadFile (in: hFile=0xc64, lpBuffer=0x69a9140, nNumberOfBytesToRead=0x284, lpNumberOfBytesRead=0xed9fdbc, lpOverlapped=0x0 | out: lpBuffer=0x69a9140*, lpNumberOfBytesRead=0xed9fdbc*=0x284, lpOverlapped=0x0) returned 1 [0208.487] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.487] WriteFile (in: hFile=0xc64, lpBuffer=0x69acd48*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0xed9fdc0, lpOverlapped=0x0 | out: lpBuffer=0x69acd48*, lpNumberOfBytesWritten=0xed9fdc0*=0x284, lpOverlapped=0x0) returned 1 [0214.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec568 [0214.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece50 [0214.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece50) returned 1 [0214.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69acd48) returned 1 [0214.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a9140) returned 1 [0214.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1db20) returned 1 [0214.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2ba0) returned 1 [0214.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5990 [0214.997] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.997] WriteFile (in: hFile=0xc64, lpBuffer=0x6750bd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xed9fe48, lpOverlapped=0x0 | out: lpBuffer=0x6750bd0*, lpNumberOfBytesWritten=0xed9fe48*=0x10c, lpOverlapped=0x0) returned 1 [0216.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750bd0) returned 1 [0216.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b40) returned 1 [0216.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece50) returned 1 [0216.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0216.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec568) returned 1 [0216.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0f8) returned 1 [0216.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb028) returned 1 [0216.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb050) returned 1 [0216.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c6c0 [0216.739] wcscpy (in: _Dest=0x675c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" [0216.739] wcscat (in: _Dest=0x675c6c0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.ac3a86" [0216.739] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.ac3a86", NtPathName=0xed9fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf890 [0224.280] FlushFileBuffers (hFile=0xc64) returned 1 [0224.285] CloseHandle (hObject=0xc64) returned 1 [0224.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea0408 [0224.509] wcscpy (in: _Dest=0x12ea0408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0224.510] wcscat (in: _Dest=0x12ea0408, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\AC3A86-Readme.txt" [0224.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ac3a86-readme.txt")) returned 0xffffffff [0224.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.025] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xed9fddc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xed9fddc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.027] CloseHandle (hObject=0xeb8) returned 1 [0225.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0408) returned 1 [0225.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f080) returned 1 Thread: id = 7486 os_tid = 0x1888 [0201.737] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0201.738] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f0 [0205.978] GetFileSizeEx (in: hFile=0x16f0, lpFileSize=0xe97fa7c | out: lpFileSize=0xe97fa7c*=642) returned 1 [0205.978] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.978] ReadFile (in: hFile=0x16f0, lpBuffer=0xe97fa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe97fa68, lpOverlapped=0x0 | out: lpBuffer=0xe97fa58*, lpNumberOfBytesRead=0xe97fa68*=0x4, lpOverlapped=0x0) returned 1 [0208.464] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0208.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c0f8 [0208.465] NtQuerySystemTime (in: CurrentTime=0xe97f9f0 | out: CurrentTime=0xe97f9f0*=132482711169420000) returned 0x0 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x21600483 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x4ab0a77c [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x45fc92e6 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x29042fc1 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x35d5598e [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x6da0da3c [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x56f35a7 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x4120e437 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x7cc83b08 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x22055c3c [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x793fda9 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x6de3beef [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x765603b9 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x5f1ce402 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0xe176aff [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x1108d002 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x7848dd91 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x2b85a9fa [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x793eaad [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x78d66862 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x996bbe3 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x1ac42ce3 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x5377f8fb [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x4716120b [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x5c47a802 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0xcca3bb6 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x5883ce9a [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x27601a11 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x3f943901 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x6eb8f4f1 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x2dd7d033 [0208.465] RtlRandomEx (in: Seed=0xe97f9e8 | out: Seed=0xe97f9e8) returned 0x7cbd5a53 [0208.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a1930 [0208.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x69a5538 [0208.475] ReadFile (in: hFile=0x16f0, lpBuffer=0x69a1930, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0xe97f9e4, lpOverlapped=0x0 | out: lpBuffer=0x69a1930*, lpNumberOfBytesRead=0xe97f9e4*=0x282, lpOverlapped=0x0) returned 1 [0208.475] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.475] WriteFile (in: hFile=0x16f0, lpBuffer=0x69a5538*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0xe97f9e8, lpOverlapped=0x0 | out: lpBuffer=0x69a5538*, lpNumberOfBytesWritten=0xe97f9e8*=0x282, lpOverlapped=0x0) returned 1 [0214.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec630 [0214.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec608 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec608) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a5538) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69a1930) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d418) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2b58) returned 1 [0214.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f60 [0214.994] SetFilePointerEx (in: hFile=0x16f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.994] WriteFile (in: hFile=0x16f0, lpBuffer=0x6750ab8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe97fa70, lpOverlapped=0x0 | out: lpBuffer=0x6750ab8*, lpNumberOfBytesWritten=0xe97fa70*=0x10c, lpOverlapped=0x0) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750ab8) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5900) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec608) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f60) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec630) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4caa8) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b130) returned 1 [0216.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb078) returned 1 [0216.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c588 [0216.736] wcscpy (in: _Dest=0x675c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" [0216.736] wcscat (in: _Dest=0x675c588, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.ac3a86" [0216.736] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.ac3a86", NtPathName=0xe97f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf738 [0224.377] FlushFileBuffers (hFile=0x16f0) returned 1 [0224.381] CloseHandle (hObject=0x16f0) returned 1 [0224.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x678ae60 [0224.580] wcscpy (in: _Dest=0x678ae60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0224.580] wcscat (in: _Dest=0x678ae60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\AC3A86-Readme.txt" [0224.580] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ac3a86-readme.txt")) returned 0xffffffff [0224.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.139] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe97fa04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe97fa04*=0x8b9, lpOverlapped=0x0) returned 1 [0225.141] CloseHandle (hObject=0x1038) returned 1 [0225.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678ae60) returned 1 [0225.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd38) returned 1 Thread: id = 7487 os_tid = 0x188c [0201.739] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0201.739] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0205.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xedc [0205.979] GetFileSizeEx (in: hFile=0xedc, lpFileSize=0xd9cf7c4 | out: lpFileSize=0xd9cf7c4*=666) returned 1 [0205.979] SetFilePointerEx (in: hFile=0xedc, liDistanceToMove=0x296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.979] ReadFile (in: hFile=0xedc, lpBuffer=0xd9cf7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd9cf7b0, lpOverlapped=0x0 | out: lpBuffer=0xd9cf7a0*, lpNumberOfBytesRead=0xd9cf7b0*=0x4, lpOverlapped=0x0) returned 1 [0208.439] SetFilePointerEx (in: hFile=0xedc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce90 [0208.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0208.439] NtQuerySystemTime (in: CurrentTime=0xd9cf738 | out: CurrentTime=0xd9cf738*=132482711169108000) returned 0x0 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x4c9b3f84 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x8a174a4 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x76abb33e [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x3b2c29c4 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x1479f798 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x241fd31f [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x1e8ebbec [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x1a73920f [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x6c57a3a1 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x6de3beef [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x20aa7017 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x3d85ba1c [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x4724dc4 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x35d5598e [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x63d66d35 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x777b1c51 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x8bb1a2d [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x17ed17d3 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x23d7227b [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x21907e12 [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x4d604ecc [0208.439] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x4759d3cc [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x72e5f0c4 [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x3a42406f [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x5377f8fb [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x7aec51fb [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x117224f3 [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x23dfbab2 [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x137aaa67 [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x14a0f4e [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x61d67e62 [0208.440] RtlRandomEx (in: Seed=0xd9cf730 | out: Seed=0xd9cf730) returned 0x2fea7d58 [0208.449] ReadFile (in: hFile=0xedc, lpBuffer=0x6992910, nNumberOfBytesToRead=0x29a, lpNumberOfBytesRead=0xd9cf72c, lpOverlapped=0x0 | out: lpBuffer=0x6992910*, lpNumberOfBytesRead=0xd9cf72c*=0x29a, lpOverlapped=0x0) returned 1 [0208.449] SetFilePointerEx (in: hFile=0xedc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.449] WriteFile (in: hFile=0xedc, lpBuffer=0x6996518*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0xd9cf730, lpOverlapped=0x0 | out: lpBuffer=0x6996518*, lpNumberOfBytesWritten=0xd9cf730*=0x29a, lpOverlapped=0x0) returned 1 [0214.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ece78 [0214.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec2e8 [0214.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec2e8) returned 1 [0214.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6996518) returned 1 [0214.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6992910) returned 1 [0214.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d2b0) returned 1 [0214.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2ac8) returned 1 [0214.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5c90 [0214.999] SetFilePointerEx (in: hFile=0xedc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.999] WriteFile (in: hFile=0xedc, lpBuffer=0x6750e00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd9cf7b8, lpOverlapped=0x0 | out: lpBuffer=0x6750e00*, lpNumberOfBytesWritten=0xd9cf7b8*=0x10c, lpOverlapped=0x0) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750e00) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec2e8) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c90) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ece78) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce90) returned 1 [0216.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4be28) returned 1 [0216.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49ad8) returned 1 [0216.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675c7f8 [0216.742] wcscpy (in: _Dest=0x675c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" [0216.742] wcscat (in: _Dest=0x675c7f8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.ac3a86" [0216.742] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.ac3a86", NtPathName=0xd9cf730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf9e8 [0224.285] FlushFileBuffers (hFile=0xedc) returned 1 [0224.294] CloseHandle (hObject=0xedc) returned 1 [0224.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea02d0 [0224.514] wcscpy (in: _Dest=0x12ea02d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0224.514] wcscat (in: _Dest=0x12ea02d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\AC3A86-Readme.txt" [0224.514] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ac3a86-readme.txt")) returned 0xffffffff [0224.514] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.029] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd9cf74c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd9cf74c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.031] CloseHandle (hObject=0xeb8) returned 1 [0225.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea02d0) returned 1 [0225.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750550) returned 1 Thread: id = 7488 os_tid = 0x187c [0201.740] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0201.740] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0205.980] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec [0205.980] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0xe8bfa7c | out: lpFileSize=0xe8bfa7c*=667) returned 1 [0205.980] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.980] ReadFile (in: hFile=0x16ec, lpBuffer=0xe8bfa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe8bfa68, lpOverlapped=0x0 | out: lpBuffer=0xe8bfa58*, lpNumberOfBytesRead=0xe8bfa68*=0x4, lpOverlapped=0x0) returned 1 [0208.450] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cfd0 [0208.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4caa8 [0208.450] NtQuerySystemTime (in: CurrentTime=0xe8bf9f0 | out: CurrentTime=0xe8bf9f0*=132482711169264000) returned 0x0 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x143dab8e [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x47af2ca6 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x33a2dfb4 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x1e0d23e7 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0xf3a7561 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0xb98e4e3 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x64a5cc3a [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x21907e12 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x4ff7f792 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x5e45818a [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x3281729c [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x4ab0a76d [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x19936556 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x6d736496 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x3a225a96 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x17350703 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x52d7e840 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x5c47a802 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x7adf9318 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x7187df38 [0208.450] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x74b917e3 [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x6bd511eb [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x143dab8e [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x3f943a0f [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0xeca8cf [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x7b151f2c [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x9ec6d63 [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x6e827f7c [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x2f86dc8e [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x2987723b [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x1eeb1cd2 [0208.451] RtlRandomEx (in: Seed=0xe8bf9e8 | out: Seed=0xe8bf9e8) returned 0x4a4cb157 [0208.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0208.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699a120 [0208.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x699dd28 [0208.464] ReadFile (in: hFile=0x16ec, lpBuffer=0x699a120, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0xe8bf9e4, lpOverlapped=0x0 | out: lpBuffer=0x699a120*, lpNumberOfBytesRead=0xe8bf9e4*=0x29b, lpOverlapped=0x0) returned 1 [0208.464] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.464] WriteFile (in: hFile=0x16ec, lpBuffer=0x699dd28*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0xe8bf9e8, lpOverlapped=0x0 | out: lpBuffer=0x699dd28*, lpNumberOfBytesWritten=0xe8bf9e8*=0x29b, lpOverlapped=0x0) returned 1 [0214.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6f8 [0214.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec658 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec658) returned 1 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699dd28) returned 1 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x699a120) returned 1 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1dd78) returned 1 [0214.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2b10) returned 1 [0214.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5f90 [0214.989] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.989] WriteFile (in: hFile=0x16ec, lpBuffer=0x6751c38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe8bfa70, lpOverlapped=0x0 | out: lpBuffer=0x6751c38*, lpNumberOfBytesWritten=0xe8bfa70*=0x10c, lpOverlapped=0x0) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751c38) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5600) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec658) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5f90) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6f8) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cfd0) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c508) returned 1 [0216.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bc70) returned 1 [0216.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x678a830 [0216.818] wcscpy (in: _Dest=0x678a830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" [0216.818] wcscat (in: _Dest=0x678a830, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.ac3a86" [0216.818] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.ac3a86", NtPathName=0xe8bf9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x6958248 [0224.272] FlushFileBuffers (hFile=0x16ec) returned 1 [0224.282] CloseHandle (hObject=0x16ec) returned 1 [0224.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x12ea0540 [0224.502] wcscpy (in: _Dest=0x12ea0540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0224.502] wcscat (in: _Dest=0x12ea0540, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" [0224.502] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\ac3a86-readme.txt")) returned 0xffffffff [0224.502] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.013] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe8bfa04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe8bfa04*=0x8b9, lpOverlapped=0x0) returned 1 [0225.015] CloseHandle (hObject=0xeb8) returned 1 [0225.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0540) returned 1 [0225.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407b0) returned 1 Thread: id = 7489 os_tid = 0x1890 [0201.741] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0201.741] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0205.980] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc30 [0205.981] GetFileSizeEx (in: hFile=0xc30, lpFileSize=0xea4fbe4 | out: lpFileSize=0xea4fbe4*=352) returned 1 [0205.981] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x15c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.981] ReadFile (in: hFile=0xc30, lpBuffer=0xea4fbc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xea4fbd0, lpOverlapped=0x0 | out: lpBuffer=0xea4fbc0*, lpNumberOfBytesRead=0xea4fbd0*=0x4, lpOverlapped=0x0) returned 1 [0208.398] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0208.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bd60 [0208.399] NtQuerySystemTime (in: CurrentTime=0xea4fb58 | out: CurrentTime=0xea4fb58*=132482711168796000) returned 0x0 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x6995a12f [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x32b3eaa7 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x5113d1ca [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x5f42723b [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0xafe1766 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0xa27204f [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x2d7c66d1 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x3bd9910b [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x3f2a8a99 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x4afc51bd [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x4752fd6f [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x2d81b365 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x1476c7b4 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x5b623c0c [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x7baf1b61 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0xb6e0c23 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x44c3a862 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x2738fcb0 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x395cb74d [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x874467d [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x4e06eaf0 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x1e5e1463 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x2c98e9c3 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x6092f388 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x1ce542a6 [0208.399] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x1d158871 [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x36fec6c2 [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x4602e006 [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x74ff19c8 [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x34813bb [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x5a23244e [0208.400] RtlRandomEx (in: Seed=0xea4fb50 | out: Seed=0xea4fb50) returned 0x62cf6935 [0208.408] ReadFile (in: hFile=0xc30, lpBuffer=0x69838f0, nNumberOfBytesToRead=0x160, lpNumberOfBytesRead=0xea4fb4c, lpOverlapped=0x0 | out: lpBuffer=0x69838f0*, lpNumberOfBytesRead=0xea4fb4c*=0x160, lpOverlapped=0x0) returned 1 [0208.408] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.408] WriteFile (in: hFile=0xc30, lpBuffer=0x69874f8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xea4fb50, lpOverlapped=0x0 | out: lpBuffer=0x69874f8*, lpNumberOfBytesWritten=0xea4fb50*=0x160, lpOverlapped=0x0) returned 1 [0214.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0d0 [0214.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed0f8 [0214.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0f8) returned 1 [0214.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69874f8) returned 1 [0214.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69838f0) returned 1 [0214.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d238) returned 1 [0214.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2a38) returned 1 [0214.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e80ef8 [0214.278] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.279] WriteFile (in: hFile=0xc30, lpBuffer=0x6765f88*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xea4fbd8, lpOverlapped=0x0 | out: lpBuffer=0x6765f88*, lpNumberOfBytesWritten=0xea4fbd8*=0x11a, lpOverlapped=0x0) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765f88) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80e78) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0f8) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80ef8) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed0d0) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0214.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0214.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x678bd00 [0214.453] wcscpy (in: _Dest=0x678bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" [0214.453] wcscat (in: _Dest=0x678bd00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.ac3a86" [0214.453] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.ac3a86", NtPathName=0xea4fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x66ce310 [0225.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ce310) returned 1 [0225.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ef9bf8) returned 1 [0225.865] NtQueryInformationFile (in: FileHandle=0xc30, IoStatusBlock=0xea4fb28, FileInformation=0xea4fb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xea4fb28, FileInformation=0xea4fb30) returned 0x0 [0225.865] NtSetInformationFile (FileHandle=0xc30, IoStatusBlock=0xea4fb28, FileInformation=0xea4fb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0225.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678bd00) returned 1 [0225.937] FlushFileBuffers (hFile=0xc30) returned 1 [0226.421] CloseHandle (hObject=0xc30) returned 1 [0227.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x12ead530 [0227.540] wcscpy (in: _Dest=0x12ead530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0227.540] wcscat (in: _Dest=0x12ead530, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt" [0227.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\ac3a86-readme.txt")) returned 0xffffffff [0227.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2164 [0228.435] WriteFile (in: hFile=0x2164, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xea4fb6c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xea4fb6c*=0x8b9, lpOverlapped=0x0) returned 1 [0228.437] CloseHandle (hObject=0x2164) returned 1 [0228.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ead530) returned 1 [0228.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12eac188) returned 1 Thread: id = 7490 os_tid = 0x1894 [0201.742] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020 [0201.742] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0205.981] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12b8 [0205.981] GetFileSizeEx (in: hFile=0x12b8, lpFileSize=0xac6ff1c | out: lpFileSize=0xac6ff1c*=11094) returned 1 [0205.981] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.981] ReadFile (in: hFile=0x12b8, lpBuffer=0xac6fef8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac6ff08, lpOverlapped=0x0 | out: lpBuffer=0xac6fef8*, lpNumberOfBytesRead=0xac6ff08*=0x4, lpOverlapped=0x0) returned 1 [0208.507] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eafb0 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eaee8 [0208.507] NtQuerySystemTime (in: CurrentTime=0xac6fe90 | out: CurrentTime=0xac6fe90*=132482711169888000) returned 0x0 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x709a0c29 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x9410a63 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x7ebe6027 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x169d3cf4 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x39950f50 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x7a823451 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x7384ec1b [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x4e7ed396 [0208.507] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x1f012905 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x6dc7d0d6 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x2aee2548 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x2aee2548 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x596d44cc [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x7d85abc2 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x76cc09d5 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x23120cc1 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x47f350a8 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x5489c4fc [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x68f1b698 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x793eaad [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x2654f2ef [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x60fa37fd [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x53dcdc64 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x3f943a0f [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x2f768fd [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x51eb1d65 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x23d7227b [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x3bb42b21 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x2f62f93 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0xff21952 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x7e64ed15 [0208.508] RtlRandomEx (in: Seed=0xac6fe88 | out: Seed=0xac6fe88) returned 0x14c69b25 [0208.516] ReadFile (in: hFile=0x12b8, lpBuffer=0x6959ce8, nNumberOfBytesToRead=0x2b56, lpNumberOfBytesRead=0xac6fe84, lpOverlapped=0x0 | out: lpBuffer=0x6959ce8*, lpNumberOfBytesRead=0xac6fe84*=0x2b56, lpOverlapped=0x0) returned 1 [0208.575] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.575] WriteFile (in: hFile=0x12b8, lpBuffer=0x695d8f0*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0xac6fe88, lpOverlapped=0x0 | out: lpBuffer=0x695d8f0*, lpNumberOfBytesWritten=0xac6fe88*=0x2b56, lpOverlapped=0x0) returned 1 [0214.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cc88 [0214.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cad0 [0214.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0214.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x695d8f0) returned 1 [0214.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959ce8) returned 1 [0214.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d490) returned 1 [0214.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2c78) returned 1 [0214.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x12ea2c78 [0214.436] SetFilePointerEx (in: hFile=0x12b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.436] WriteFile (in: hFile=0x12b8, lpBuffer=0x6765080*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xac6ff10, lpOverlapped=0x0 | out: lpBuffer=0x6765080*, lpNumberOfBytesWritten=0xac6ff10*=0x11e, lpOverlapped=0x0) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6765080) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea3188) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cad0) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea2c78) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cc88) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eafb0) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eaf10) returned 1 [0216.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eae98) returned 1 [0216.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x6777df0 [0216.563] wcscpy (in: _Dest=0x6777df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" [0216.563] wcscat (in: _Dest=0x6777df0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.ac3a86" [0216.563] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.ac3a86", NtPathName=0xac6fe88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66cedd0 [0226.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cedd0) returned 1 [0226.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6874410) returned 1 [0226.351] NtQueryInformationFile (in: FileHandle=0x12b8, IoStatusBlock=0xac6fe60, FileInformation=0xac6fe68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac6fe60, FileInformation=0xac6fe68) returned 0x0 [0226.351] NtSetInformationFile (FileHandle=0x12b8, IoStatusBlock=0xac6fe60, FileInformation=0xac6fe68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0228.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6777df0) returned 1 [0228.439] FlushFileBuffers (hFile=0x12b8) returned 1 [0228.441] CloseHandle (hObject=0x12b8) returned 1 [0228.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55f30 [0228.442] wcscpy (in: _Dest=0x3d55f30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0228.442] wcscat (in: _Dest=0x3d55f30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt" [0228.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\ac3a86-readme.txt")) returned 0x2020 [0228.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55f30) returned 1 [0228.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d413e0) returned 1 Thread: id = 7491 os_tid = 0x1898 [0201.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv")) returned 0x20 [0201.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0201.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.743] GetLastError () returned 0x5 [0201.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0201.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 7492 os_tid = 0x189c [0201.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc")) returned 0x20 [0201.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0201.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.746] GetLastError () returned 0x5 [0201.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0201.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 7493 os_tid = 0x18a0 [0201.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv")) returned 0x20 [0201.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0201.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.748] GetLastError () returned 0x5 [0201.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0201.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 7494 os_tid = 0x1598 [0201.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc")) returned 0x20 [0201.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0201.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.751] GetLastError () returned 0x5 [0201.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0201.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 7495 os_tid = 0x159c [0201.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv")) returned 0x20 [0201.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0201.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.753] GetLastError () returned 0x5 [0201.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0201.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 7496 os_tid = 0x15a0 [0201.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml")) returned 0x20 [0201.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0201.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.754] GetLastError () returned 0x5 [0201.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0201.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 7497 os_tid = 0x1880 [0201.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc")) returned 0x20 [0201.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0201.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.756] GetLastError () returned 0x5 [0201.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0201.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 7498 os_tid = 0x1884 [0201.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc")) returned 0x20 [0201.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0201.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.758] GetLastError () returned 0x5 [0201.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0201.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 7499 os_tid = 0x8d0 [0201.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc")) returned 0x20 [0201.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0201.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.760] GetLastError () returned 0x5 [0201.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0201.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 7500 os_tid = 0x980 [0201.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv")) returned 0x20 [0204.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0204.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.705] GetLastError () returned 0x5 [0204.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 7501 os_tid = 0x990 [0201.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc")) returned 0x20 [0204.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0204.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.352] GetLastError () returned 0x5 [0204.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0204.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 7502 os_tid = 0x9a0 [0201.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv")) returned 0x20 [0204.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0204.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.732] GetLastError () returned 0x5 [0204.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0204.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 7503 os_tid = 0x1610 [0201.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc")) returned 0x20 [0204.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0204.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.731] GetLastError () returned 0x5 [0204.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0204.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 7504 os_tid = 0x1870 [0201.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc")) returned 0x20 [0204.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0204.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.734] GetLastError () returned 0x5 [0204.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0204.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 7505 os_tid = 0x1450 [0201.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc")) returned 0x20 [0204.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0204.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.773] GetLastError () returned 0x5 [0204.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0204.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 7506 os_tid = 0x1454 [0201.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc")) returned 0x20 [0204.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0204.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.750] GetLastError () returned 0x5 [0204.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0204.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 7507 os_tid = 0x16fc [0201.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc")) returned 0x20 [0204.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0204.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.742] GetLastError () returned 0x5 [0204.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0204.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 7508 os_tid = 0x1700 [0201.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc")) returned 0x20 [0204.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0204.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.741] GetLastError () returned 0x5 [0204.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0204.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 7509 os_tid = 0x1704 [0201.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc")) returned 0x20 [0204.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0204.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.739] GetLastError () returned 0x5 [0204.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0204.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 7510 os_tid = 0xe4c [0201.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc")) returned 0x20 [0204.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0204.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.749] GetLastError () returned 0x5 [0204.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0204.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 7511 os_tid = 0x1708 [0201.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc")) returned 0x20 [0204.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0204.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.747] GetLastError () returned 0x5 [0204.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0204.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 7512 os_tid = 0x170c [0201.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc")) returned 0x20 [0204.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0204.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.737] GetLastError () returned 0x5 [0204.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0204.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 7513 os_tid = 0x1710 [0201.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc")) returned 0x20 [0204.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0204.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.736] GetLastError () returned 0x5 [0204.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0204.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 7514 os_tid = 0x1714 [0201.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv")) returned 0x20 [0204.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0204.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.746] GetLastError () returned 0x5 [0204.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0204.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 7515 os_tid = 0x1170 [0201.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml")) returned 0x20 [0204.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0204.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.744] GetLastError () returned 0x5 [0204.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0204.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 7516 os_tid = 0x7b0 [0201.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0204.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.776] GetLastError () returned 0x5 [0212.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 7517 os_tid = 0x1174 [0201.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0204.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.778] GetLastError () returned 0x5 [0212.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 7518 os_tid = 0x1184 [0201.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0204.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.780] GetLastError () returned 0x5 [0212.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f840) returned 1 Thread: id = 7519 os_tid = 0x18b8 [0201.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0204.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.781] GetLastError () returned 0x5 [0212.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682de78) returned 1 Thread: id = 7520 os_tid = 0x1258 [0201.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss")) returned 0x20 [0218.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.514] GetLastError () returned 0x5 [0218.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c08c8) returned 1 Thread: id = 7521 os_tid = 0x1458 [0201.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss")) returned 0x20 [0218.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.516] GetLastError () returned 0x5 [0218.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 7522 os_tid = 0x145c [0201.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss")) returned 0x20 [0218.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.518] GetLastError () returned 0x5 [0218.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d5d0) returned 1 Thread: id = 7523 os_tid = 0x1460 [0201.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss")) returned 0x20 [0218.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.482] GetLastError () returned 0x5 [0218.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 7524 os_tid = 0x974 [0201.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss")) returned 0x20 [0218.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.483] GetLastError () returned 0x5 [0218.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 7525 os_tid = 0xfc4 [0201.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss")) returned 0x20 [0218.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS", dwFileAttributes=0x20) returned 0 [0218.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.485] GetLastError () returned 0x5 [0218.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS", dwFileAttributes=0x20) returned 0 [0218.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 7526 os_tid = 0xb98 [0201.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss")) returned 0x20 [0218.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS", dwFileAttributes=0x20) returned 0 [0218.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.487] GetLastError () returned 0x5 [0218.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS", dwFileAttributes=0x20) returned 0 [0218.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 7527 os_tid = 0x15a4 [0201.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss")) returned 0x20 [0218.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.488] GetLastError () returned 0x5 [0218.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 7528 os_tid = 0x12ec [0201.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss")) returned 0x20 [0218.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.495] GetLastError () returned 0x5 [0218.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 7529 os_tid = 0x15a8 [0201.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst")) returned 0x20 [0218.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST", dwFileAttributes=0x20) returned 0 [0218.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.511] GetLastError () returned 0x5 [0218.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST", dwFileAttributes=0x20) returned 0 [0218.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 7530 os_tid = 0x15ac [0201.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst")) returned 0x20 [0218.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST", dwFileAttributes=0x20) returned 0 [0218.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.497] GetLastError () returned 0x5 [0218.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST", dwFileAttributes=0x20) returned 0 [0218.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 7531 os_tid = 0x300 [0201.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss")) returned 0x20 [0218.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.512] GetLastError () returned 0x5 [0218.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 7532 os_tid = 0x18a4 [0201.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss")) returned 0x20 [0218.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.499] GetLastError () returned 0x5 [0218.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 7533 os_tid = 0xeb4 [0201.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss")) returned 0x20 [0218.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.500] GetLastError () returned 0x5 [0218.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 7534 os_tid = 0x12f0 [0201.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss")) returned 0x20 [0218.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.502] GetLastError () returned 0x5 [0218.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 7535 os_tid = 0x15b0 [0201.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss")) returned 0x20 [0218.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.504] GetLastError () returned 0x5 [0218.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 7536 os_tid = 0x12f4 [0201.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss")) returned 0x20 [0218.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.505] GetLastError () returned 0x5 [0218.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 7537 os_tid = 0xa34 [0201.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss")) returned 0x20 [0218.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS", dwFileAttributes=0x20) returned 0 [0218.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.507] GetLastError () returned 0x5 [0218.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS", dwFileAttributes=0x20) returned 0 [0218.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 7538 os_tid = 0xb7c [0201.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss")) returned 0x20 [0218.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS", dwFileAttributes=0x20) returned 0 [0218.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.510] GetLastError () returned 0x5 [0218.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS", dwFileAttributes=0x20) returned 0 [0218.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 7539 os_tid = 0xeb0 [0201.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss")) returned 0x20 [0218.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.490] GetLastError () returned 0x5 [0218.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 7540 os_tid = 0x6d0 [0201.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst")) returned 0x20 [0218.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST", dwFileAttributes=0x20) returned 0 [0218.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.492] GetLastError () returned 0x5 [0218.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST", dwFileAttributes=0x20) returned 0 [0218.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 7541 os_tid = 0x4e4 [0201.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss")) returned 0x20 [0218.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.493] GetLastError () returned 0x5 [0218.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 7542 os_tid = 0x18a8 [0201.920] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0201.920] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0213.731] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf7c [0213.732] GetFileSizeEx (in: hFile=0xf7c, lpFileSize=0xed5f9dc | out: lpFileSize=0xed5f9dc*=622) returned 1 [0213.732] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x26a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.732] ReadFile (in: hFile=0xf7c, lpBuffer=0xed5f9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xed5f9c8, lpOverlapped=0x0 | out: lpBuffer=0xed5f9b8*, lpNumberOfBytesRead=0xed5f9c8*=0x4, lpOverlapped=0x0) returned 1 [0213.772] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebde8 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebe60 [0213.773] NtQuerySystemTime (in: CurrentTime=0xed5f950 | out: CurrentTime=0xed5f950*=132482711204832000) returned 0x0 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x67bf1e1f [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0xb3f3b04 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x1e384889 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x4faf8057 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x89a04f0 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x44187b24 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x38d15327 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x63306944 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x348fe187 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x65e9b7b0 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x1c4b9a75 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x3019514a [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0xbf9acb4 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x150033c2 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x31ceff64 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x7b386eb6 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x5a2c148a [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x1ac501ef [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x150033c2 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x768aca0c [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x22fa4ee7 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x714cc6d2 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x31ceff64 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x5fc5c1d [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x3447f560 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x381bc12 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x7a2f4c3 [0213.773] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x22ed4253 [0213.774] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x7a4153a9 [0213.774] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x7c2d6794 [0213.774] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x70361ed1 [0213.774] RtlRandomEx (in: Seed=0xed5f948 | out: Seed=0xed5f948) returned 0x7f465251 [0213.781] ReadFile (in: hFile=0xf7c, lpBuffer=0x130f48d0, nNumberOfBytesToRead=0x26e, lpNumberOfBytesRead=0xed5f944, lpOverlapped=0x0 | out: lpBuffer=0x130f48d0*, lpNumberOfBytesRead=0xed5f944*=0x26e, lpOverlapped=0x0) returned 1 [0213.781] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.781] WriteFile (in: hFile=0xf7c, lpBuffer=0x130f84d8*, nNumberOfBytesToWrite=0x26e, lpNumberOfBytesWritten=0xed5f948, lpOverlapped=0x0 | out: lpBuffer=0x130f84d8*, lpNumberOfBytesWritten=0xed5f948*=0x26e, lpOverlapped=0x0) returned 1 [0214.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecf18 [0214.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec720 [0214.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec720) returned 1 [0214.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130f84d8) returned 1 [0214.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130f48d0) returned 1 [0214.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b588) returned 1 [0214.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a1b0) returned 1 [0214.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5bd0 [0214.980] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.980] WriteFile (in: hFile=0xf7c, lpBuffer=0x6752840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xed5f9d0, lpOverlapped=0x0 | out: lpBuffer=0x6752840*, lpNumberOfBytesWritten=0xed5f9d0*=0x10c, lpOverlapped=0x0) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6752840) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5ae0) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec720) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5bd0) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecf18) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebde8) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe88) returned 1 [0216.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebeb0) returned 1 [0216.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x675bd00 [0216.719] wcscpy (in: _Dest=0x675bd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" [0216.719] wcscat (in: _Dest=0x675bd00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.ac3a86" [0216.719] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.ac3a86", NtPathName=0xed5f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x66cf488 [0224.331] FlushFileBuffers (hFile=0xf7c) returned 1 [0224.336] CloseHandle (hObject=0xf7c) returned 1 [0224.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x12ea1518 [0224.544] wcscpy (in: _Dest=0x12ea1518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0224.544] wcscat (in: _Dest=0x12ea1518, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\AC3A86-Readme.txt" [0224.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ac3a86-readme.txt")) returned 0xffffffff [0224.544] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xeb8 [0225.074] WriteFile (in: hFile=0xeb8, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xed5f964, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xed5f964*=0x8b9, lpOverlapped=0x0) returned 1 [0225.076] CloseHandle (hObject=0xeb8) returned 1 [0225.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea1518) returned 1 [0225.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6771648) returned 1 Thread: id = 7543 os_tid = 0x18ac [0201.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css")) returned 0x20 [0212.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0220.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.137] GetLastError () returned 0x5 [0223.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0223.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d0d0) returned 1 Thread: id = 7544 os_tid = 0x18b0 [0201.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif")) returned 0x20 [0204.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.782] GetLastError () returned 0x5 [0212.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 7545 os_tid = 0x18b4 [0201.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0204.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.784] GetLastError () returned 0x5 [0212.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 7546 os_tid = 0xcd4 [0201.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0204.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.786] GetLastError () returned 0x5 [0212.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 7547 os_tid = 0x18bc [0201.923] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0201.923] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0213.734] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2180 [0213.734] GetFileSizeEx (in: hFile=0x2180, lpFileSize=0xfd0fc74 | out: lpFileSize=0xfd0fc74*=257) returned 1 [0213.734] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.734] ReadFile (in: hFile=0x2180, lpBuffer=0xfd0fc50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfd0fc60, lpOverlapped=0x0 | out: lpBuffer=0xfd0fc50*, lpNumberOfBytesRead=0xfd0fc60*=0x4, lpOverlapped=0x0) returned 1 [0213.782] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebe60 [0213.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebed8 [0213.782] NtQuerySystemTime (in: CurrentTime=0xfd0fbe8 | out: CurrentTime=0xfd0fbe8*=132482711204988000) returned 0x0 [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x69898ee [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x63ed2a1 [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x736c238b [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x44cbe0b0 [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x65e9b7b0 [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x380cc69 [0213.782] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x4c55910e [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x875ece9 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x3ee0ce03 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x7228e0c4 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x7a569239 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x202cb703 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x3cdb2189 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x40e0c67f [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x25b99616 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x4cbf329a [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x245f4a46 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x78b1bbbd [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x2af2386 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x141c8c25 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x641913e2 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x36f14f13 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x7a569239 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x552d960 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x4e7bdeed [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x2b129200 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x468998d3 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x9fb3f0a [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x3cd9af2f [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x642b4f93 [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x1febb42f [0213.783] RtlRandomEx (in: Seed=0xfd0fbe0 | out: Seed=0xfd0fbe0) returned 0x1c46e613 [0213.793] ReadFile (in: hFile=0x2180, lpBuffer=0x130fc0e0, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xfd0fbdc, lpOverlapped=0x0 | out: lpBuffer=0x130fc0e0*, lpNumberOfBytesRead=0xfd0fbdc*=0x101, lpOverlapped=0x0) returned 1 [0213.793] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.793] WriteFile (in: hFile=0x2180, lpBuffer=0x13100060*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xfd0fbe0, lpOverlapped=0x0 | out: lpBuffer=0x13100060*, lpNumberOfBytesWritten=0xfd0fbe0*=0x101, lpOverlapped=0x0) returned 1 [0214.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbd0 [0214.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ecbf8 [0214.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0214.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13100060) returned 1 [0214.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130fc0e0) returned 1 [0214.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1afe8) returned 1 [0214.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b680) returned 1 [0214.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5e40 [0214.178] SetFilePointerEx (in: hFile=0x2180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.178] WriteFile (in: hFile=0x2180, lpBuffer=0x6751e68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfd0fc68, lpOverlapped=0x0 | out: lpBuffer=0x6751e68*, lpNumberOfBytesWritten=0xfd0fc68*=0x10c, lpOverlapped=0x0) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751e68) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5690) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbf8) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e40) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ecbd0) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebe60) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf00) returned 1 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebf28) returned 1 [0214.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0214.313] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" [0214.313] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.ac3a86" [0214.313] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.ac3a86", NtPathName=0xfd0fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0214.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6777640 [0214.523] FlushFileBuffers (hFile=0x2180) returned 1 [0214.641] CloseHandle (hObject=0x2180) returned 1 [0214.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x674ee30 [0214.657] wcscpy (in: _Dest=0x674ee30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0214.657] wcscat (in: _Dest=0x674ee30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" [0214.657] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ac3a86-readme.txt")) returned 0xffffffff [0214.658] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1670 [0214.670] WriteFile (in: hFile=0x1670, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfd0fbfc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfd0fbfc*=0x8b9, lpOverlapped=0x0) returned 1 [0214.704] CloseHandle (hObject=0x1670) returned 1 [0214.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ee30) returned 1 [0214.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6764e30) returned 1 Thread: id = 7548 os_tid = 0x18c0 [0201.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20 [0204.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0204.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.812] GetLastError () returned 0x5 [0204.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0204.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 7549 os_tid = 0x8a0 [0201.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20 [0204.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0204.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.842] GetLastError () returned 0x5 [0204.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0204.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 7550 os_tid = 0xe54 [0201.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20 [0204.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0204.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.810] GetLastError () returned 0x5 [0204.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0204.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 7551 os_tid = 0x18c4 [0201.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20 [0204.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0204.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.808] GetLastError () returned 0x5 [0204.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0204.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 7552 os_tid = 0x18c8 [0201.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20 [0204.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0204.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.807] GetLastError () returned 0x5 [0204.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0204.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 7553 os_tid = 0x944 [0201.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20 [0204.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0204.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.805] GetLastError () returned 0x5 [0204.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0204.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 7554 os_tid = 0xde0 [0201.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20 [0204.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0204.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.841] GetLastError () returned 0x5 [0204.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0204.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 7555 os_tid = 0x904 [0201.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20 [0204.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0204.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.803] GetLastError () returned 0x5 [0204.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0204.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 7556 os_tid = 0xba4 [0201.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20 [0204.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0204.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.802] GetLastError () returned 0x5 [0204.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0204.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 7557 os_tid = 0x984 [0201.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20 [0204.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0204.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.800] GetLastError () returned 0x5 [0204.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0204.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 7558 os_tid = 0x9a4 [0201.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20 [0204.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0204.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.839] GetLastError () returned 0x5 [0204.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0204.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 7559 os_tid = 0x18cc [0201.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20 [0204.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0204.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.837] GetLastError () returned 0x5 [0204.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0204.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 7560 os_tid = 0x9d4 [0201.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20 [0204.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0204.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.836] GetLastError () returned 0x5 [0204.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0204.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 7561 os_tid = 0x2620 [0201.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20 [0204.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0204.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.834] GetLastError () returned 0x5 [0204.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0204.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 7562 os_tid = 0x9e4 [0201.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20 [0204.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0204.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.833] GetLastError () returned 0x5 [0204.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0204.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 7563 os_tid = 0x9f4 [0201.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20 [0204.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0204.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.831] GetLastError () returned 0x5 [0204.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0204.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 7564 os_tid = 0xb34 [0201.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20 [0204.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0204.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.830] GetLastError () returned 0x5 [0204.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0204.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 7565 os_tid = 0x2630 [0201.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20 [0204.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0204.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.828] GetLastError () returned 0x5 [0204.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0204.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 7566 os_tid = 0xa24 [0201.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20 [0204.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0204.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.826] GetLastError () returned 0x5 [0204.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0204.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 7567 os_tid = 0x7b4 [0201.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20 [0204.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0204.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.847] GetLastError () returned 0x5 [0204.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0204.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 7568 os_tid = 0xa44 [0201.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20 [0204.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0204.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.846] GetLastError () returned 0x5 [0204.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0204.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 7569 os_tid = 0xa54 [0201.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20 [0204.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0204.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.844] GetLastError () returned 0x5 [0204.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0204.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 7570 os_tid = 0xa64 [0201.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20 [0204.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0204.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.825] GetLastError () returned 0x5 [0204.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0204.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 7571 os_tid = 0xa78 [0201.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20 [0204.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0204.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.821] GetLastError () returned 0x5 [0204.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0204.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 7572 os_tid = 0xad0 [0201.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20 [0204.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0204.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.819] GetLastError () returned 0x5 [0204.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0204.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 7573 os_tid = 0xbac [0201.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20 [0204.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0204.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.817] GetLastError () returned 0x5 [0204.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0204.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 7574 os_tid = 0xb28 [0201.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20 [0204.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0204.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.815] GetLastError () returned 0x5 [0204.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0204.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 7575 os_tid = 0x18d0 [0202.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20 [0204.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0204.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.872] GetLastError () returned 0x5 [0204.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0204.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 7576 os_tid = 0x18dc [0202.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0204.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.019] GetLastError () returned 0x5 [0206.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 7577 os_tid = 0x18e0 [0202.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0204.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.020] GetLastError () returned 0x5 [0206.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333be8) returned 1 Thread: id = 7578 os_tid = 0x18e4 [0202.031] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0202.031] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0213.357] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf94 [0213.358] GetFileSizeEx (in: hFile=0xf94, lpFileSize=0x10c4f96c | out: lpFileSize=0x10c4f96c*=640) returned 1 [0213.358] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x27c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.358] ReadFile (in: hFile=0xf94, lpBuffer=0x10c4f948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10c4f958, lpOverlapped=0x0 | out: lpBuffer=0x10c4f948*, lpNumberOfBytesRead=0x10c4f958*=0x4, lpOverlapped=0x0) returned 1 [0213.378] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb1e0 [0213.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb208 [0213.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb230 [0213.378] NtQuerySystemTime (in: CurrentTime=0x10c4f8e0 | out: CurrentTime=0x10c4f8e0*=132482711200932000) returned 0x0 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x8abd899 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x55673388 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x557b76b3 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x7b8e7383 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x573c9851 [0213.378] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x5dbd4a05 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x5de8a55d [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x63eac500 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x7018214 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x1b08a6d6 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x6568e11a [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x3a9945a9 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x1e141b63 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x5e983287 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x58c0510a [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x6acc242b [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x68b0cb5c [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x7da574ae [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x5a714e9d [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0xa9cebc2 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x375463df [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x5de8a55d [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x3816e177 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x1eb585bf [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x25e986aa [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x799d130f [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x2246a0f4 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x752158f8 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x51d21f2b [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x2312e5bb [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x29fc2e74 [0213.379] RtlRandomEx (in: Seed=0x10c4f8d8 | out: Seed=0x10c4f8d8) returned 0x1f028c7a [0213.389] ReadFile (in: hFile=0xf94, lpBuffer=0x6a2f140, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x10c4f8d4, lpOverlapped=0x0 | out: lpBuffer=0x6a2f140*, lpNumberOfBytesRead=0x10c4f8d4*=0x280, lpOverlapped=0x0) returned 1 [0213.389] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.389] WriteFile (in: hFile=0xf94, lpBuffer=0x6a32d48*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x10c4f8d8, lpOverlapped=0x0 | out: lpBuffer=0x6a32d48*, lpNumberOfBytesWritten=0x10c4f8d8*=0x280, lpOverlapped=0x0) returned 1 [0217.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec6f8 [0217.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ec658 [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec658) returned 1 [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a32d48) returned 1 [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a2f140) returned 1 [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0e70) returned 1 [0217.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689acf0) returned 1 [0217.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef5b70 [0217.142] SetFilePointerEx (in: hFile=0xf94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.142] WriteFile (in: hFile=0xf94, lpBuffer=0x675dd50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10c4f960, lpOverlapped=0x0 | out: lpBuffer=0x675dd50*, lpNumberOfBytesWritten=0x10c4f960*=0x10c, lpOverlapped=0x0) returned 1 [0224.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675dd50) returned 1 [0224.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5990) returned 1 [0224.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec658) returned 1 [0224.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5b70) returned 1 [0224.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ec6f8) returned 1 [0224.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb208) returned 1 [0224.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb258) returned 1 [0224.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb280) returned 1 [0224.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x6777a18 [0224.426] wcscpy (in: _Dest=0x6777a18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" [0224.426] wcscat (in: _Dest=0x6777a18, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.ac3a86" [0224.426] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0x10c4f8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0224.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x66cf1d8 [0224.780] FlushFileBuffers (hFile=0xf94) returned 1 [0224.787] CloseHandle (hObject=0xf94) returned 1 [0224.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x675b6e8 [0224.866] wcscpy (in: _Dest=0x675b6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0224.866] wcscat (in: _Dest=0x675b6e8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0224.866] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0224.866] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.404] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10c4f8f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10c4f8f4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.407] CloseHandle (hObject=0x1038) returned 1 [0225.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b6e8) returned 1 [0225.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c90) returned 1 Thread: id = 7579 os_tid = 0x1014 [0202.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 0x20 [0213.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0217.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.743] GetLastError () returned 0x5 [0221.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0222.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e488e0) returned 1 Thread: id = 7580 os_tid = 0x101c [0202.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e48a90 [0202.033] wcscpy (in: _Dest=0x3e48a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0202.033] wcscat (in: _Dest=0x3e48a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0202.033] wcscat (in: _Dest=0x3e48a90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*" [0202.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66c9d40 [0202.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3f1fe00 [0208.547] wcscmp (_String1=".", _String2=".") returned 0 [0208.547] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.547] wcscmp (_String1="..", _String2=".") returned 1 [0208.547] wcscmp (_String1="..", _String2="..") returned 0 [0208.547] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0208.548] wcscmp (_String1="background.gif", _String2=".") returned 1 [0208.548] wcscmp (_String1="background.gif", _String2="..") returned 1 [0208.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ea8c28 [0208.548] wcscpy (in: _Dest=0x3ea8c28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0208.548] wcscat (in: _Dest=0x3ea8c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0208.548] wcscat (in: _Dest=0x3ea8c28, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" [0215.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0215.088] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0215.088] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0215.088] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0215.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d56750 [0215.089] wcscpy (in: _Dest=0x3d56750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0215.089] wcscat (in: _Dest=0x3d56750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0215.089] wcscat (in: _Dest=0x3d56750, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" [0215.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0215.090] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0215.090] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0215.090] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0215.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d577a0 [0215.090] wcscpy (in: _Dest=0x3d577a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0215.090] wcscat (in: _Dest=0x3d577a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0215.091] wcscat (in: _Dest=0x3d577a0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" [0215.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d577a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0215.092] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0215.092] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0215.092] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0215.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3d574e8 [0215.092] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0215.092] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0215.092] wcscat (in: _Dest=0x3d574e8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" [0215.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0215.096] FindNextFileW (in: hFindFile=0x3f1fe00, lpFindFileData=0x66c9d40 | out: lpFindFileData=0x66c9d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0215.096] FindClose (in: hFindFile=0x3f1fe00 | out: hFindFile=0x3f1fe00) returned 1 [0215.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c9d40) returned 1 [0215.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48a90) returned 1 [0215.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e359c0) returned 1 Thread: id = 7581 os_tid = 0x1394 [0202.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 0x20 [0204.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0206.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.995] GetLastError () returned 0x5 [0212.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0215.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48220) returned 1 Thread: id = 7582 os_tid = 0x13a8 [0202.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e48580 [0202.034] wcscpy (in: _Dest=0x3e48580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0202.034] wcscat (in: _Dest=0x3e48580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0202.034] wcscat (in: _Dest=0x3e48580, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*" [0202.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x66cae18 [0202.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80b38 [0213.001] wcscmp (_String1=".", _String2=".") returned 0 [0213.001] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.001] wcscmp (_String1="..", _String2=".") returned 1 [0213.001] wcscmp (_String1="..", _String2="..") returned 0 [0213.001] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0213.001] wcscmp (_String1="background.gif", _String2=".") returned 1 [0213.001] wcscmp (_String1="background.gif", _String2="..") returned 1 [0213.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ea8fe8 [0213.001] wcscpy (in: _Dest=0x3ea8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0213.001] wcscat (in: _Dest=0x3ea8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0213.001] wcscat (in: _Dest=0x3ea8fe8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" [0215.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0215.426] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0215.426] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0215.426] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0215.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d56af0 [0215.426] wcscpy (in: _Dest=0x3d56af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0215.426] wcscat (in: _Dest=0x3d56af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0215.426] wcscat (in: _Dest=0x3d56af0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" [0215.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d56af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0215.427] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0215.427] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0215.427] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0215.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ea8a48 [0215.427] wcscpy (in: _Dest=0x3ea8a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0215.427] wcscat (in: _Dest=0x3ea8a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0215.427] wcscat (in: _Dest=0x3ea8a48, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0215.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3ea8a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0215.428] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0215.428] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0215.428] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0215.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3d574e8 [0215.428] wcscpy (in: _Dest=0x3d574e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0215.428] wcscat (in: _Dest=0x3d574e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0215.428] wcscat (in: _Dest=0x3d574e8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" [0215.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3d574e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0215.430] FindNextFileW (in: hFindFile=0x3e80b38, lpFindFileData=0x66cae18 | out: lpFindFileData=0x66cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0215.430] FindClose (in: hFindFile=0x3e80b38 | out: hFindFile=0x3e80b38) returned 1 [0215.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66cae18) returned 1 [0215.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48580) returned 1 [0215.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48730) returned 1 Thread: id = 7583 os_tid = 0x13ac [0202.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 0x20 [0213.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0218.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.878] GetLastError () returned 0x5 [0221.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0222.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678d378) returned 1 Thread: id = 7584 os_tid = 0x13b0 [0202.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 0x20 [0213.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0218.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.842] GetLastError () returned 0x5 [0221.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0222.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47578) returned 1 Thread: id = 7585 os_tid = 0x13b4 [0202.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 0x20 [0213.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0219.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.327] GetLastError () returned 0x5 [0222.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0222.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56920) returned 1 Thread: id = 7586 os_tid = 0x13b8 [0202.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 0x20 [0213.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0219.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.322] GetLastError () returned 0x5 [0222.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0222.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57318) returned 1 Thread: id = 7587 os_tid = 0x13bc [0202.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0202.036] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.374] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xdec [0213.375] GetFileSizeEx (in: hFile=0xdec, lpFileSize=0x10e4fdc4 | out: lpFileSize=0x10e4fdc4*=237) returned 1 [0213.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb140 [0213.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb1b8 [0213.375] NtQuerySystemTime (in: CurrentTime=0x10e4fd38 | out: CurrentTime=0x10e4fd38*=132482711200932000) returned 0x0 [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x1051232f [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x7faeba24 [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x386d3646 [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x1708ae97 [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x784e43aa [0213.375] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x3a8222df [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x24690598 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x1a66e89f [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x6fc54410 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x67c7b462 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x77842d1 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x1a5694f3 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x3ac821b6 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x6742de6d [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x563a60ba [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0xefaa40b [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0xe93b7d1 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x7ffd7a0f [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x6af5caa2 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x729f10c4 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x2043c9ff [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x58c0510a [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x69c9dd62 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x567b172 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x61df48d5 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x3fa661bd [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x1e4ce0bc [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x69742be2 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x60dcd93f [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x5deda0ef [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x263e6897 [0213.376] RtlRandomEx (in: Seed=0x10e4fd30 | out: Seed=0x10e4fd30) returned 0x240878ad [0213.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a36950 [0213.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a3a558 [0213.399] ReadFile (in: hFile=0xdec, lpBuffer=0x6a36950, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0x10e4fd2c, lpOverlapped=0x0 | out: lpBuffer=0x6a36950*, lpNumberOfBytesRead=0x10e4fd2c*=0xed, lpOverlapped=0x0) returned 1 [0213.402] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.402] WriteFile (in: hFile=0xdec, lpBuffer=0x6a3a558*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x10e4fd30, lpOverlapped=0x0 | out: lpBuffer=0x6a3a558*, lpNumberOfBytesWritten=0x10e4fd30*=0xed, lpOverlapped=0x0) returned 1 [0216.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed620 [0216.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed648 [0216.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed648) returned 1 [0216.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3a558) returned 1 [0216.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a36950) returned 1 [0216.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d03a8) returned 1 [0216.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899dc0) returned 1 [0216.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e5ff8 [0216.427] SetFilePointerEx (in: hFile=0xdec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.427] WriteFile (in: hFile=0xdec, lpBuffer=0x12ea0060*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10e4fdb8, lpOverlapped=0x0 | out: lpBuffer=0x12ea0060*, lpNumberOfBytesWritten=0x10e4fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0060) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6028) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed648) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e5ff8) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed620) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb140) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb1e0) returned 1 [0216.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb230) returned 1 [0216.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d412a8 [0216.595] wcscpy (in: _Dest=0x3d412a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" [0216.596] wcscat (in: _Dest=0x3d412a8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.ac3a86" [0216.596] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.ac3a86", NtPathName=0x10e4fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67774f8 [0223.783] FlushFileBuffers (hFile=0xdec) returned 1 [0223.797] CloseHandle (hObject=0xdec) returned 1 [0224.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b898 [0224.650] wcscpy (in: _Dest=0x676b898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0224.650] wcscat (in: _Dest=0x676b898, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" [0224.650] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\ac3a86-readme.txt")) returned 0xffffffff [0224.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.179] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10e4fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x10e4fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.182] CloseHandle (hObject=0x1038) returned 1 [0225.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b898) returned 1 [0225.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758ab8) returned 1 Thread: id = 7588 os_tid = 0x13c0 [0202.036] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0202.036] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0213.405] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1020 [0213.406] GetFileSizeEx (in: hFile=0x1020, lpFileSize=0xe68fe0c | out: lpFileSize=0xe68fe0c*=215) returned 1 [0213.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb1b8 [0213.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb2a8 [0213.406] NtQuerySystemTime (in: CurrentTime=0xe68fd80 | out: CurrentTime=0xe68fd80*=132482711201244000) returned 0x0 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x614cfeab [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x64b40f52 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x5a4b8673 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x77678394 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x14eb18b8 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0xdd53fdf [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x68f3a1a2 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x2177f0b7 [0213.406] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x8abd899 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x240878ad [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x2a252a9c [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x67c7b462 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x3227054d [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x21d1a1d3 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x397afb8c [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x5a714e9d [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x1f028c7a [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x30f21351 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x1ab8bf4b [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x2572555e [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x2deed5d1 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x3e349f04 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x65a45f2c [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x40cd3c0e [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0xfc47c72 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x61ab0e3d [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x53669584 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x582e1826 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x22c97c70 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x72f4a8a4 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0xdef7737 [0213.407] RtlRandomEx (in: Seed=0xe68fd78 | out: Seed=0xe68fd78) returned 0x6e24f0bb [0213.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a3e160 [0213.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x6a41d68 [0213.418] ReadFile (in: hFile=0x1020, lpBuffer=0x6a3e160, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xe68fd74, lpOverlapped=0x0 | out: lpBuffer=0x6a3e160*, lpNumberOfBytesRead=0xe68fd74*=0xd7, lpOverlapped=0x0) returned 1 [0213.420] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.420] WriteFile (in: hFile=0x1020, lpBuffer=0x6a41d68*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xe68fd78, lpOverlapped=0x0 | out: lpBuffer=0x6a41d68*, lpNumberOfBytesWritten=0xe68fd78*=0xd7, lpOverlapped=0x0) returned 1 [0216.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed710 [0216.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed738 [0216.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed738) returned 1 [0216.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a41d68) returned 1 [0216.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a3e160) returned 1 [0216.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d06f0) returned 1 [0216.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b830) returned 1 [0216.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6118 [0216.435] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.435] WriteFile (in: hFile=0x1020, lpBuffer=0x12ea03a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fe00, lpOverlapped=0x0 | out: lpBuffer=0x12ea03a8*, lpNumberOfBytesWritten=0xe68fe00*=0x10c, lpOverlapped=0x0) returned 1 [0216.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea03a8) returned 1 [0216.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6148) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed738) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6118) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed710) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb1b8) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb2d0) returned 1 [0216.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb2f8) returned 1 [0216.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d41650 [0216.605] wcscpy (in: _Dest=0x3d41650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" [0216.605] wcscat (in: _Dest=0x3d41650, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86" [0216.605] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86", NtPathName=0xe68fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6777120 [0223.769] FlushFileBuffers (hFile=0x1020) returned 1 [0223.786] CloseHandle (hObject=0x1020) returned 1 [0224.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c7f8 [0224.642] wcscpy (in: _Dest=0x678c7f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0224.642] wcscat (in: _Dest=0x678c7f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" [0224.642] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\ac3a86-readme.txt")) returned 0xffffffff [0224.642] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.174] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe68fd94, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe68fd94*=0x8b9, lpOverlapped=0x0) returned 1 [0225.176] CloseHandle (hObject=0x1038) returned 1 [0225.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c7f8) returned 1 [0225.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759080) returned 1 Thread: id = 7589 os_tid = 0x13cc [0202.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv")) returned 0x20 [0204.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0204.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.759] GetLastError () returned 0x5 [0204.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0204.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 7590 os_tid = 0x13d0 [0202.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml")) returned 0x20 [0204.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0204.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.757] GetLastError () returned 0x5 [0204.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0204.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 7591 os_tid = 0x26a4 [0202.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv")) returned 0x20 [0204.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0204.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.299] GetLastError () returned 0x5 [0204.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 7592 os_tid = 0x26a8 [0202.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml")) returned 0x20 [0204.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0204.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.755] GetLastError () returned 0x5 [0204.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0204.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 7593 os_tid = 0x26ac [0202.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc")) returned 0x20 [0204.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0204.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.752] GetLastError () returned 0x5 [0204.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0204.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 7594 os_tid = 0x1e2c [0202.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc")) returned 0x20 [0204.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0204.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.754] GetLastError () returned 0x5 [0204.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0204.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 7595 os_tid = 0x114c [0202.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20 [0204.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0204.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.882] GetLastError () returned 0x5 [0204.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0204.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 7596 os_tid = 0x13d4 [0202.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20 [0204.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0204.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.877] GetLastError () returned 0x5 [0204.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0204.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 7597 os_tid = 0x13d8 [0202.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20 [0204.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0204.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.875] GetLastError () returned 0x5 [0204.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0204.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 7598 os_tid = 0x13dc [0202.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20 [0204.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0204.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.871] GetLastError () returned 0x5 [0204.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0204.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 7599 os_tid = 0x13e0 [0202.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20 [0204.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0204.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.869] GetLastError () returned 0x5 [0204.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0204.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 7600 os_tid = 0x13e4 [0202.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20 [0204.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0204.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.874] GetLastError () returned 0x5 [0204.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0204.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 7601 os_tid = 0x13e8 [0202.136] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0202.136] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0213.421] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2028 [0213.422] GetFileSizeEx (in: hFile=0x2028, lpFileSize=0x111dfea4 | out: lpFileSize=0x111dfea4*=209) returned 1 [0213.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb2a8 [0213.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb320 [0213.422] NtQuerySystemTime (in: CurrentTime=0x111dfe18 | out: CurrentTime=0x111dfe18*=132482711201400000) returned 0x0 [0213.422] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x466dd8a [0213.422] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x401ded45 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x33f550d1 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0xdd53fdf [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x3f39ceb2 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x559487ca [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x5a691d98 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x1c7e0a27 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x7403c24e [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x65dc3b1e [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x43a7be43 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x36943f85 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x63eac500 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x19b66201 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x3a79f70e [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x1e4da5b [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x75d28815 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x4849b285 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x42169ac9 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x30c46c0f [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x53669584 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x43a7be43 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x2b9b9c8f [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x32c7cf1a [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x4076fda9 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x1eb8a06d [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x7f234901 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x204cd173 [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x726076fb [0213.423] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x15d4e9d1 [0213.424] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x1e4da5b [0213.424] RtlRandomEx (in: Seed=0x111dfe10 | out: Seed=0x111dfe10) returned 0x2a5dcb76 [0213.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f80060 [0213.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f83c68 [0213.446] ReadFile (in: hFile=0x2028, lpBuffer=0x12f80060, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0x111dfe0c, lpOverlapped=0x0 | out: lpBuffer=0x12f80060*, lpNumberOfBytesRead=0x111dfe0c*=0xd1, lpOverlapped=0x0) returned 1 [0213.449] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.449] WriteFile (in: hFile=0x2028, lpBuffer=0x12f83c68*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x111dfe10, lpOverlapped=0x0 | out: lpBuffer=0x12f83c68*, lpNumberOfBytesWritten=0x111dfe10*=0xd1, lpOverlapped=0x0) returned 1 [0216.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed6c0 [0216.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed6e8 [0216.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed6e8) returned 1 [0216.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f83c68) returned 1 [0216.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f80060) returned 1 [0216.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0060) returned 1 [0216.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a6c0) returned 1 [0216.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e60b8 [0216.432] SetFilePointerEx (in: hFile=0x2028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.432] WriteFile (in: hFile=0x2028, lpBuffer=0x12ea0290*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x111dfe98, lpOverlapped=0x0 | out: lpBuffer=0x12ea0290*, lpNumberOfBytesWritten=0x111dfe98*=0x10c, lpOverlapped=0x0) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0290) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e60e8) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed6e8) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e60b8) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed6c0) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb2a8) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb348) returned 1 [0216.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb370) returned 1 [0216.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3d40f00 [0216.601] wcscpy (in: _Dest=0x3d40f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" [0216.601] wcscat (in: _Dest=0x3d40f00, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86" [0216.601] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86", NtPathName=0x111dfe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6777268 [0223.773] FlushFileBuffers (hFile=0x2028) returned 1 [0223.790] CloseHandle (hObject=0x2028) returned 1 [0224.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678abf0 [0224.639] wcscpy (in: _Dest=0x678abf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0224.639] wcscat (in: _Dest=0x678abf0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" [0224.639] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\ac3a86-readme.txt")) returned 0xffffffff [0224.639] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.170] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x111dfe2c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x111dfe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.172] CloseHandle (hObject=0x1038) returned 1 [0225.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678abf0) returned 1 [0225.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f58) returned 1 Thread: id = 7602 os_tid = 0x13ec [0202.144] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0202.145] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0213.609] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x84c [0213.610] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0x1122fc04 | out: lpFileSize=0x1122fc04*=224) returned 1 [0213.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb5f0 [0213.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb9b0 [0213.610] NtQuerySystemTime (in: CurrentTime=0x1122fb78 | out: CurrentTime=0x1122fb78*=132482711203272000) returned 0x0 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x38269b44 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x2443eff4 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x4c650e53 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x23c496ad [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x2b557404 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x27930ea5 [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x44ceb74a [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x6fe3e24b [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x84678a [0213.610] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x65450122 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x684f0f05 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x6be55bd3 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x50137108 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x76b0b80f [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x589b12e6 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x53ca2b66 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x5dd83c37 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x797e25b5 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x40f0758 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x253c7919 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x30829870 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x25e429c9 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x2a52fd72 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x24b84be1 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x6cf6bcff [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x23054f66 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x4af55bd3 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x73392096 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x18f525e7 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x71da1218 [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x1009cfd [0213.611] RtlRandomEx (in: Seed=0x1122fb70 | out: Seed=0x1122fb70) returned 0x55f50f9c [0213.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130a94b8 [0213.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130ad0c0 [0213.619] ReadFile (in: hFile=0x84c, lpBuffer=0x130a94b8, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x1122fb6c, lpOverlapped=0x0 | out: lpBuffer=0x130a94b8*, lpNumberOfBytesRead=0x1122fb6c*=0xe0, lpOverlapped=0x0) returned 1 [0213.621] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.621] WriteFile (in: hFile=0x84c, lpBuffer=0x130ad0c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1122fb70, lpOverlapped=0x0 | out: lpBuffer=0x130ad0c0*, lpNumberOfBytesWritten=0x1122fb70*=0xe0, lpOverlapped=0x0) returned 1 [0216.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed8f0 [0216.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed918 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed918) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130ad0c0) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a94b8) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b420) returned 1 [0216.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689ae58) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6358 [0216.458] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.458] WriteFile (in: hFile=0x84c, lpBuffer=0x12ea0a38*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1122fbf8, lpOverlapped=0x0 | out: lpBuffer=0x12ea0a38*, lpNumberOfBytesWritten=0x1122fbf8*=0x10c, lpOverlapped=0x0) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0a38) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6388) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed918) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6358) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed8f0) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb5f0) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb9d8) returned 1 [0216.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba00) returned 1 [0216.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3dd9060 [0216.624] wcscpy (in: _Dest=0x3dd9060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" [0216.625] wcscat (in: _Dest=0x3dd9060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86" [0216.625] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86", NtPathName=0x1122fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x6788e90 [0223.833] FlushFileBuffers (hFile=0x84c) returned 1 [0223.865] CloseHandle (hObject=0x84c) returned 1 [0224.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x678c6c0 [0224.685] wcscpy (in: _Dest=0x678c6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0224.685] wcscat (in: _Dest=0x678c6c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" [0224.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\ac3a86-readme.txt")) returned 0xffffffff [0224.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.243] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1122fb8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1122fb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.245] CloseHandle (hObject=0x1038) returned 1 [0225.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x678c6c0) returned 1 [0225.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a8c8) returned 1 Thread: id = 7603 os_tid = 0x13f0 [0202.146] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0202.146] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0213.621] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc [0213.622] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0xcd9fbc4 | out: lpFileSize=0xcd9fbc4*=222) returned 1 [0213.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb9b0 [0213.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eba28 [0213.622] NtQuerySystemTime (in: CurrentTime=0xcd9fb38 | out: CurrentTime=0xcd9fb38*=132482711203428000) returned 0x0 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x3d170cb0 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x4d61e373 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x544d42f7 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x572b95a [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x7018214 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x57bc5637 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x37a8f824 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x4663f874 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x2f06e620 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x36f17b93 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x6c91d38e [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x6125eb51 [0213.622] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x1bc8f28c [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x1643fc97 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x5826d979 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x79f7e602 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x589c37d9 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x2ad526ad [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x22f3fad [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x27930ea5 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x73fdd775 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x5e883bc5 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x1deef76f [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x2df796dc [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x68c9647a [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x564875e6 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x5dbf1fb8 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x5b25f822 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x13c1828 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x2700edd2 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x7eaf8e38 [0213.623] RtlRandomEx (in: Seed=0xcd9fb30 | out: Seed=0xcd9fb30) returned 0x1686777e [0213.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130b0cc8 [0213.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130b48d0 [0213.631] ReadFile (in: hFile=0xefc, lpBuffer=0x130b0cc8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xcd9fb2c, lpOverlapped=0x0 | out: lpBuffer=0x130b0cc8*, lpNumberOfBytesRead=0xcd9fb2c*=0xde, lpOverlapped=0x0) returned 1 [0213.633] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.633] WriteFile (in: hFile=0xefc, lpBuffer=0x130b48d0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xcd9fb30, lpOverlapped=0x0 | out: lpBuffer=0x130b48d0*, lpNumberOfBytesWritten=0xcd9fb30*=0xde, lpOverlapped=0x0) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed990 [0216.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed9b8 [0216.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed9b8) returned 1 [0216.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130b48d0) returned 1 [0216.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130b0cc8) returned 1 [0216.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ab38) returned 1 [0216.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a750) returned 1 [0216.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6418 [0216.463] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.463] WriteFile (in: hFile=0xefc, lpBuffer=0x12ea0c68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcd9fbb8, lpOverlapped=0x0 | out: lpBuffer=0x12ea0c68*, lpNumberOfBytesWritten=0xcd9fbb8*=0x10c, lpOverlapped=0x0) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0c68) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ea8) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed9b8) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6418) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed990) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb9b0) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba50) returned 1 [0216.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba78) returned 1 [0216.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x675aab8 [0216.630] wcscpy (in: _Dest=0x675aab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" [0216.630] wcscat (in: _Dest=0x675aab8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.ac3a86" [0216.630] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.ac3a86", NtPathName=0xcd9fb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6789120 [0223.826] FlushFileBuffers (hFile=0xefc) returned 1 [0223.852] CloseHandle (hObject=0xefc) returned 1 [0224.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b3f8 [0224.679] wcscpy (in: _Dest=0x676b3f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0224.679] wcscat (in: _Dest=0x676b3f8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" [0224.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ac3a86-readme.txt")) returned 0xffffffff [0224.679] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.252] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcd9fb4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xcd9fb4c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.254] CloseHandle (hObject=0x1038) returned 1 [0225.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b3f8) returned 1 [0225.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a7a0) returned 1 Thread: id = 7604 os_tid = 0x13f4 [0202.146] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0202.147] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0213.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12a0 [0213.634] GetFileSizeEx (in: hFile=0x12a0, lpFileSize=0x1126f77c | out: lpFileSize=0x1126f77c*=272) returned 1 [0213.634] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.634] ReadFile (in: hFile=0x12a0, lpBuffer=0x1126f758, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1126f768, lpOverlapped=0x0 | out: lpBuffer=0x1126f758*, lpNumberOfBytesRead=0x1126f768*=0x4, lpOverlapped=0x0) returned 1 [0213.636] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eba28 [0213.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebaa0 [0213.636] NtQuerySystemTime (in: CurrentTime=0x1126f6f0 | out: CurrentTime=0x1126f6f0*=132482711203584000) returned 0x0 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x706e0750 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x2b126c6c [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x4012b0f9 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x446a85bd [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x84678a [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x3abf8ae3 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x45041275 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x76b0b80f [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x3e9d0c1a [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x35690d89 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x3912173a [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x6f383d22 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x642928d1 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x6e9a659e [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x5ea20d28 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x432d641d [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x5bde8c93 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x671b67ee [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x4b414658 [0213.636] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x7864d2a5 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x488f9fd1 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x688fc4c6 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x3b0555f [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x75109c9e [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x5a6bcbdc [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x62712cc3 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x1c6a6c03 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x3513d19 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x64764d17 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x17feeb7c [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x45a9eef0 [0213.637] RtlRandomEx (in: Seed=0x1126f6e8 | out: Seed=0x1126f6e8) returned 0x17ca1a05 [0213.646] ReadFile (in: hFile=0x12a0, lpBuffer=0x130b84d8, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0x1126f6e4, lpOverlapped=0x0 | out: lpBuffer=0x130b84d8*, lpNumberOfBytesRead=0x1126f6e4*=0x110, lpOverlapped=0x0) returned 1 [0213.646] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.646] WriteFile (in: hFile=0x12a0, lpBuffer=0x130bc0e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1126f6e8, lpOverlapped=0x0 | out: lpBuffer=0x130bc0e0*, lpNumberOfBytesWritten=0x1126f6e8*=0x110, lpOverlapped=0x0) returned 1 [0216.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed940 [0216.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed968 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed968) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130bc0e0) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130b84d8) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ae80) returned 1 [0216.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b5f0) returned 1 [0216.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e63b8 [0216.462] SetFilePointerEx (in: hFile=0x12a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.462] WriteFile (in: hFile=0x12a0, lpBuffer=0x12ea0b50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1126f770, lpOverlapped=0x0 | out: lpBuffer=0x12ea0b50*, lpNumberOfBytesWritten=0x1126f770*=0x10c, lpOverlapped=0x0) returned 1 [0216.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0b50) returned 1 [0216.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e63e8) returned 1 [0216.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed968) returned 1 [0216.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e63b8) returned 1 [0216.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed940) returned 1 [0216.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eba28) returned 1 [0216.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebac8) returned 1 [0216.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebaf0) returned 1 [0216.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x2d2100 [0216.628] wcscpy (in: _Dest=0x2d2100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" [0216.628] wcscat (in: _Dest=0x2d2100, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.ac3a86" [0216.628] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.ac3a86", NtPathName=0x1126f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788fd8 [0223.829] FlushFileBuffers (hFile=0x12a0) returned 1 [0223.857] CloseHandle (hObject=0x12a0) returned 1 [0224.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b2d0 [0224.681] wcscpy (in: _Dest=0x676b2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0224.681] wcscat (in: _Dest=0x676b2d0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" [0224.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ac3a86-readme.txt")) returned 0xffffffff [0224.681] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.248] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1126f704, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1126f704*=0x8b9, lpOverlapped=0x0) returned 1 [0225.250] CloseHandle (hObject=0x1038) returned 1 [0225.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b2d0) returned 1 [0225.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a678) returned 1 Thread: id = 7605 os_tid = 0x13f8 [0202.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0202.148] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.646] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ffc [0213.647] GetFileSizeEx (in: hFile=0x1ffc, lpFileSize=0xa90fc4c | out: lpFileSize=0xa90fc4c*=227) returned 1 [0213.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebaa0 [0213.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ebb18 [0213.647] NtQuerySystemTime (in: CurrentTime=0xa90fbc0 | out: CurrentTime=0xa90fbc0*=132482711203584000) returned 0x0 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x46cef5b0 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x17a7ffc2 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x26edb907 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x71da1218 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0xeaa7883 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x72d5d90a [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x4f9aebfd [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x25b99616 [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x3183d17d [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x5dbbec2e [0213.647] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x262143ef [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x41ef46fa [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x2e0bb350 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x64ef4fa2 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x25eb05d [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0xeaa7883 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x4449b401 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x4c650e53 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x7eaaba03 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x161e8d34 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x65fbb527 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x17feeb7c [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x3ee1f833 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x4219fed8 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x37a8f824 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x7803868b [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x74c4e6bf [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x7a4153a9 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x4518ab8b [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x3ee0ce03 [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x1f73596f [0213.648] RtlRandomEx (in: Seed=0xa90fbb8 | out: Seed=0xa90fbb8) returned 0x3ec35582 [0213.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130c0060 [0213.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130c3c68 [0213.662] ReadFile (in: hFile=0x1ffc, lpBuffer=0x130c0060, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xa90fbb4, lpOverlapped=0x0 | out: lpBuffer=0x130c0060*, lpNumberOfBytesRead=0xa90fbb4*=0xe3, lpOverlapped=0x0) returned 1 [0213.664] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.664] WriteFile (in: hFile=0x1ffc, lpBuffer=0x130c3c68*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xa90fbb8, lpOverlapped=0x0 | out: lpBuffer=0x130c3c68*, lpNumberOfBytesWritten=0xa90fbb8*=0xe3, lpOverlapped=0x0) returned 1 [0215.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4c6c0 [0215.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4bb80 [0215.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0215.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130c3c68) returned 1 [0215.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130c0060) returned 1 [0215.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1aef8) returned 1 [0215.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899f28) returned 1 [0215.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3ef53f0 [0215.516] SetFilePointerEx (in: hFile=0x1ffc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.516] WriteFile (in: hFile=0x1ffc, lpBuffer=0x6751260*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa90fc40, lpOverlapped=0x0 | out: lpBuffer=0x6751260*, lpNumberOfBytesWritten=0xa90fc40*=0x10c, lpOverlapped=0x0) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6751260) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5c30) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bb80) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef53f0) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c6c0) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebaa0) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebb40) returned 1 [0216.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ebb68) returned 1 [0216.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40540 [0216.681] wcscpy (in: _Dest=0x3d40540, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" [0216.681] wcscat (in: _Dest=0x3d40540, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.ac3a86" [0216.681] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.ac3a86", NtPathName=0xa90fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67781c8 [0223.933] FlushFileBuffers (hFile=0x1ffc) returned 1 [0223.943] CloseHandle (hObject=0x1ffc) returned 1 [0224.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676bf88 [0224.733] wcscpy (in: _Dest=0x676bf88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0224.733] wcscat (in: _Dest=0x676bf88, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" [0224.733] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ac3a86-readme.txt")) returned 0xffffffff [0224.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.299] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa90fbd4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xa90fbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.301] CloseHandle (hObject=0x1038) returned 1 [0225.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676bf88) returned 1 [0225.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759770) returned 1 Thread: id = 7606 os_tid = 0x18e8 [0202.148] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0202.148] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd2c [0213.450] GetFileSizeEx (in: hFile=0xd2c, lpFileSize=0x1025f934 | out: lpFileSize=0x1025f934*=223) returned 1 [0213.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb320 [0213.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb398 [0213.451] NtQuerySystemTime (in: CurrentTime=0x1025f8a8 | out: CurrentTime=0x1025f8a8*=132482711201712000) returned 0x0 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x3c7f8d93 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x613919d9 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x654aaee8 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x709d9b0e [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x7fc16574 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x634bfde1 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x2085fc75 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x62adf912 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x204cd173 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x13a068da [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x475460e4 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x5f9a9e00 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x1dc4c27e [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x29bf0457 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x3f39ceb2 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x30f22966 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x68137244 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x5dbae1f3 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x43058451 [0213.451] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x43455aa3 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x314f1283 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x1ec5aa2a [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x55557934 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x3a9945a9 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x4ae6a3ac [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x68dc1ca0 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x25e04ff2 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x5299de4 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x1ab8bf4b [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x797e25b5 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x2dbf21c6 [0213.452] RtlRandomEx (in: Seed=0x1025f8a0 | out: Seed=0x1025f8a0) returned 0x4bccb02d [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f87870 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f8b478 [0213.463] ReadFile (in: hFile=0xd2c, lpBuffer=0x12f87870, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x1025f89c, lpOverlapped=0x0 | out: lpBuffer=0x12f87870*, lpNumberOfBytesRead=0x1025f89c*=0xdf, lpOverlapped=0x0) returned 1 [0213.465] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.465] WriteFile (in: hFile=0xd2c, lpBuffer=0x12f8b478*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x1025f8a0, lpOverlapped=0x0 | out: lpBuffer=0x12f8b478*, lpNumberOfBytesWritten=0x1025f8a0*=0xdf, lpOverlapped=0x0) returned 1 [0216.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed670 [0216.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed698 [0216.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed698) returned 1 [0216.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8b478) returned 1 [0216.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f87870) returned 1 [0216.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d07e0) returned 1 [0216.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a990) returned 1 [0216.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6058 [0216.431] SetFilePointerEx (in: hFile=0xd2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.431] WriteFile (in: hFile=0xd2c, lpBuffer=0x12ea0178*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1025f928, lpOverlapped=0x0 | out: lpBuffer=0x12ea0178*, lpNumberOfBytesWritten=0x1025f928*=0x10c, lpOverlapped=0x0) returned 1 [0216.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0178) returned 1 [0216.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6088) returned 1 [0216.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed698) returned 1 [0216.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6058) returned 1 [0216.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed670) returned 1 [0216.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb320) returned 1 [0216.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb3c0) returned 1 [0216.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb3e8) returned 1 [0216.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d41038 [0216.599] wcscpy (in: _Dest=0x3d41038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" [0216.599] wcscat (in: _Dest=0x3d41038, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.ac3a86" [0216.599] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.ac3a86", NtPathName=0x1025f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x67773b0 [0223.778] FlushFileBuffers (hFile=0xd2c) returned 1 [0223.792] CloseHandle (hObject=0xd2c) returned 1 [0224.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b9c0 [0224.645] wcscpy (in: _Dest=0x676b9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0224.645] wcscat (in: _Dest=0x676b9c0, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" [0224.645] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ac3a86-readme.txt")) returned 0xffffffff [0224.646] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.184] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1025f8bc, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1025f8bc*=0x8b9, lpOverlapped=0x0) returned 1 [0225.186] CloseHandle (hObject=0x1038) returned 1 [0225.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b9c0) returned 1 [0225.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759e60) returned 1 Thread: id = 7607 os_tid = 0x1400 [0202.149] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0202.149] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.466] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c [0213.466] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0xe5dfd04 | out: lpFileSize=0xe5dfd04*=260) returned 1 [0213.466] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.466] ReadFile (in: hFile=0x160c, lpBuffer=0xe5dfce0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe5dfcf0, lpOverlapped=0x0 | out: lpBuffer=0xe5dfce0*, lpNumberOfBytesRead=0xe5dfcf0*=0x4, lpOverlapped=0x0) returned 1 [0213.468] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb398 [0213.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb410 [0213.468] NtQuerySystemTime (in: CurrentTime=0xe5dfc78 | out: CurrentTime=0xe5dfc78*=132482711201868000) returned 0x0 [0213.468] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x6163b922 [0213.468] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x4685811c [0213.468] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x6032681f [0213.468] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x6b5c55fd [0213.468] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x66f178a2 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x5fe72d10 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x2e32473a [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x499cb208 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x727c698f [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x23155131 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x3aba4b5 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x4be72a69 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x4ffbe07c [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x29fc2e74 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0xc44bb96 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x427a4d03 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x40f76c1e [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x55c64937 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x1091b1a0 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x44e22164 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x478dbdd9 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x312d1bae [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x77c218f8 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x65e6c307 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x22c97c70 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x1523b378 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x66fac658 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x4c093be [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x755a4fe3 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x77678394 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x1abc2133 [0213.469] RtlRandomEx (in: Seed=0xe5dfc70 | out: Seed=0xe5dfc70) returned 0x2a5156d6 [0213.477] ReadFile (in: hFile=0x160c, lpBuffer=0x12f8f080, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xe5dfc6c, lpOverlapped=0x0 | out: lpBuffer=0x12f8f080*, lpNumberOfBytesRead=0xe5dfc6c*=0x104, lpOverlapped=0x0) returned 1 [0213.477] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.477] WriteFile (in: hFile=0x160c, lpBuffer=0x12f92c88*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xe5dfc70, lpOverlapped=0x0 | out: lpBuffer=0x12f92c88*, lpNumberOfBytesWritten=0xe5dfc70*=0x104, lpOverlapped=0x0) returned 1 [0216.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed760 [0216.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed788 [0216.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed788) returned 1 [0216.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f92c88) returned 1 [0216.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f8f080) returned 1 [0216.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0150) returned 1 [0216.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899ce8) returned 1 [0216.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6178 [0216.438] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.438] WriteFile (in: hFile=0x160c, lpBuffer=0x12ea04c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe5dfcf8, lpOverlapped=0x0 | out: lpBuffer=0x12ea04c0*, lpNumberOfBytesWritten=0xe5dfcf8*=0x10c, lpOverlapped=0x0) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea04c0) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e61a8) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed788) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6178) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed760) returned 1 [0216.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb398) returned 1 [0216.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb438) returned 1 [0216.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb460) returned 1 [0216.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40678 [0216.609] wcscpy (in: _Dest=0x3d40678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" [0216.609] wcscat (in: _Dest=0x3d40678, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.ac3a86" [0216.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.ac3a86", NtPathName=0xe5dfc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776fd8 [0223.879] FlushFileBuffers (hFile=0x160c) returned 1 [0223.898] CloseHandle (hObject=0x160c) returned 1 [0224.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676ae30 [0224.705] wcscpy (in: _Dest=0x676ae30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0224.705] wcscat (in: _Dest=0x676ae30, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" [0224.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ac3a86-readme.txt")) returned 0xffffffff [0224.705] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.273] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe5dfc8c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xe5dfc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.274] CloseHandle (hObject=0x1038) returned 1 [0225.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ae30) returned 1 [0225.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a0b0) returned 1 Thread: id = 7608 os_tid = 0x10d8 [0202.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0202.150] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0213.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbb8 [0213.478] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0x1103f99c | out: lpFileSize=0x1103f99c*=226) returned 1 [0213.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb410 [0213.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb488 [0213.478] NtQuerySystemTime (in: CurrentTime=0x1103f910 | out: CurrentTime=0x1103f910*=132482711201868000) returned 0x0 [0213.478] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x44c6b432 [0213.478] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x44c50bd7 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x734093a5 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x427a4d03 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x7808a677 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x2bd09aa9 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x242882a3 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x72fd7553 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x69495322 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x65a45f2c [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x51d21f2b [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x642f3fbd [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x70d0d1eb [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x32784119 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x6c4bab09 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x7aef5bb6 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x7808a677 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x682a52e3 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0xf644b55 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x77a229d8 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x7f0920f7 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x7bcf6229 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x67472a22 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x13625f08 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x6f0efdaf [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x16f0178b [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x115bae54 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x74ad846b [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x5b2b8ce6 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x21e2703e [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x23155131 [0213.479] RtlRandomEx (in: Seed=0x1103f908 | out: Seed=0x1103f908) returned 0x6ad1725f [0213.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f96890 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12f9a498 [0213.487] ReadFile (in: hFile=0xbb8, lpBuffer=0x12f96890, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0x1103f904, lpOverlapped=0x0 | out: lpBuffer=0x12f96890*, lpNumberOfBytesRead=0x1103f904*=0xe2, lpOverlapped=0x0) returned 1 [0213.494] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.494] WriteFile (in: hFile=0xbb8, lpBuffer=0x12f9a498*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x1103f908, lpOverlapped=0x0 | out: lpBuffer=0x12f9a498*, lpNumberOfBytesWritten=0x1103f908*=0xe2, lpOverlapped=0x0) returned 1 [0216.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed7b0 [0216.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed7d8 [0216.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed7d8) returned 1 [0216.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9a498) returned 1 [0216.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f96890) returned 1 [0216.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0678) returned 1 [0216.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a480) returned 1 [0216.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e61d8 [0216.440] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.440] WriteFile (in: hFile=0xbb8, lpBuffer=0x12ea05d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1103f990, lpOverlapped=0x0 | out: lpBuffer=0x12ea05d8*, lpNumberOfBytesWritten=0x1103f990*=0x10c, lpOverlapped=0x0) returned 1 [0216.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea05d8) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6208) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed7d8) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e61d8) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed7b0) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb410) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb4b0) returned 1 [0216.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb4d8) returned 1 [0216.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40a20 [0216.612] wcscpy (in: _Dest=0x3d40a20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" [0216.612] wcscat (in: _Dest=0x3d40a20, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.ac3a86" [0216.612] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.ac3a86", NtPathName=0x1103f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6776e90 [0223.869] FlushFileBuffers (hFile=0xbb8) returned 1 [0223.889] CloseHandle (hObject=0xbb8) returned 1 [0224.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676ad08 [0224.704] wcscpy (in: _Dest=0x676ad08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0224.704] wcscat (in: _Dest=0x676ad08, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" [0224.704] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\ac3a86-readme.txt")) returned 0xffffffff [0224.704] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.269] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1103f924, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x1103f924*=0x8b9, lpOverlapped=0x0) returned 1 [0225.271] CloseHandle (hObject=0x1038) returned 1 [0225.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676ad08) returned 1 [0225.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675a1d8) returned 1 Thread: id = 7609 os_tid = 0xb64 [0202.151] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0202.151] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0213.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1344 [0213.495] GetFileSizeEx (in: hFile=0x1344, lpFileSize=0xd4cfc7c | out: lpFileSize=0xd4cfc7c*=260) returned 1 [0213.495] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.495] ReadFile (in: hFile=0x1344, lpBuffer=0xd4cfc58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd4cfc68, lpOverlapped=0x0 | out: lpBuffer=0xd4cfc58*, lpNumberOfBytesRead=0xd4cfc68*=0x4, lpOverlapped=0x0) returned 1 [0213.497] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb488 [0213.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb500 [0213.498] NtQuerySystemTime (in: CurrentTime=0xd4cfbf0 | out: CurrentTime=0xd4cfbf0*=132482711202180000) returned 0x0 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x4ad23015 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x61e6d8bc [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x10bc17ec [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x3204df4d [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x8804a4d [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x478dbdd9 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x66c69fe2 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x693cfa8a [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0xef91691 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0xfce6ed1 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x7f0920f7 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x3dc5362 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x286089a6 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0xf84dda0 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x738b6bfa [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x4ad23015 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x1009cfd [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x3d389e3f [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x5a03708 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0xb7c13f2 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x5b2b8ce6 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x6a2dbfdd [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x2a075436 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x2312e5bb [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x512c1356 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x314698be [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x6af2b3c7 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x39fbcbd1 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x66c69fe2 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x2819a6b2 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x69332bf3 [0213.498] RtlRandomEx (in: Seed=0xd4cfbe8 | out: Seed=0xd4cfbe8) returned 0x55c18281 [0213.506] ReadFile (in: hFile=0x1344, lpBuffer=0x12f9e0a0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xd4cfbe4, lpOverlapped=0x0 | out: lpBuffer=0x12f9e0a0*, lpNumberOfBytesRead=0xd4cfbe4*=0x104, lpOverlapped=0x0) returned 1 [0213.506] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.506] WriteFile (in: hFile=0x1344, lpBuffer=0x12fa1ca8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xd4cfbe8, lpOverlapped=0x0 | out: lpBuffer=0x12fa1ca8*, lpNumberOfBytesWritten=0xd4cfbe8*=0x104, lpOverlapped=0x0) returned 1 [0216.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed850 [0216.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed878 [0216.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed878) returned 1 [0216.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa1ca8) returned 1 [0216.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12f9e0a0) returned 1 [0216.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0d80) returned 1 [0216.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689b518) returned 1 [0216.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6298 [0216.445] SetFilePointerEx (in: hFile=0x1344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.445] WriteFile (in: hFile=0x1344, lpBuffer=0x12ea0808*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd4cfc70, lpOverlapped=0x0 | out: lpBuffer=0x12ea0808*, lpNumberOfBytesWritten=0xd4cfc70*=0x10c, lpOverlapped=0x0) returned 1 [0216.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0808) returned 1 [0216.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e62c8) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed878) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6298) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed850) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb488) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb528) returned 1 [0216.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb550) returned 1 [0216.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8df0 [0216.618] wcscpy (in: _Dest=0x3dd8df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" [0216.619] wcscat (in: _Dest=0x3dd8df0, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.ac3a86" [0216.619] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.ac3a86", NtPathName=0xd4cfbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788c00 [0223.855] FlushFileBuffers (hFile=0x1344) returned 1 [0223.882] CloseHandle (hObject=0x1344) returned 1 [0224.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b080 [0224.690] wcscpy (in: _Dest=0x676b080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0224.690] wcscat (in: _Dest=0x676b080, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" [0224.690] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ac3a86-readme.txt")) returned 0xffffffff [0224.691] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.261] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd4cfc04, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd4cfc04*=0x8b9, lpOverlapped=0x0) returned 1 [0225.263] CloseHandle (hObject=0x1038) returned 1 [0225.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b080) returned 1 [0225.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759c10) returned 1 Thread: id = 7610 os_tid = 0x6c0 [0202.152] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0202.152] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1820 [0213.508] GetFileSizeEx (in: hFile=0x1820, lpFileSize=0xd80fa6c | out: lpFileSize=0xd80fa6c*=221) returned 1 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb500 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb578 [0213.508] NtQuerySystemTime (in: CurrentTime=0xd80f9e0 | out: CurrentTime=0xd80f9e0*=132482711202180000) returned 0x0 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x21f8ff6c [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x55630c60 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x287ff2c6 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x7ddd022 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x12db8813 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x3c74ad88 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x5299de4 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x66cbc3d8 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x4a16bb48 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x45ac3a85 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x1e49b110 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x2a075436 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x30829870 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x6af2b3c7 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x7d51a721 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x629612c9 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x74bb6f17 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x1172ad94 [0213.508] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x4e2aa1ee [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x12db8813 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x33f550d1 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x3e349f04 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x44de313a [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x7ba84c52 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x26edb907 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x228206a6 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x7aef5bb6 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x631e57fa [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x8804a4d [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x19e3e260 [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x446a85bd [0213.509] RtlRandomEx (in: Seed=0xd80f9d8 | out: Seed=0xd80f9d8) returned 0x29938862 [0213.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fa58b0 [0213.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x12fa94b8 [0213.518] ReadFile (in: hFile=0x1820, lpBuffer=0x12fa58b0, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xd80f9d4, lpOverlapped=0x0 | out: lpBuffer=0x12fa58b0*, lpNumberOfBytesRead=0xd80f9d4*=0xdd, lpOverlapped=0x0) returned 1 [0213.520] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.520] WriteFile (in: hFile=0x1820, lpBuffer=0x12fa94b8*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xd80f9d8, lpOverlapped=0x0 | out: lpBuffer=0x12fa94b8*, lpNumberOfBytesWritten=0xd80f9d8*=0xdd, lpOverlapped=0x0) returned 1 [0216.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed800 [0216.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed828 [0216.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed828) returned 1 [0216.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa94b8) returned 1 [0216.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12fa58b0) returned 1 [0216.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66d0498) returned 1 [0216.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x689a900) returned 1 [0216.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e6238 [0216.444] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.444] WriteFile (in: hFile=0x1820, lpBuffer=0x12ea06f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd80fa60, lpOverlapped=0x0 | out: lpBuffer=0x12ea06f0*, lpNumberOfBytesWritten=0xd80fa60*=0x10c, lpOverlapped=0x0) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea06f0) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6268) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed828) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6238) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed800) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb500) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb5a0) returned 1 [0216.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb5c8) returned 1 [0216.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3d40060 [0216.615] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" [0216.615] wcscat (in: _Dest=0x3d40060, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.ac3a86" [0216.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.ac3a86", NtPathName=0xd80f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788ab8 [0223.860] FlushFileBuffers (hFile=0x1820) returned 1 [0223.887] CloseHandle (hObject=0x1820) returned 1 [0224.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676af58 [0224.693] wcscpy (in: _Dest=0x676af58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0224.693] wcscat (in: _Dest=0x676af58, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" [0224.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\ac3a86-readme.txt")) returned 0xffffffff [0224.694] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.265] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd80f9f4, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xd80f9f4*=0x8b9, lpOverlapped=0x0) returned 1 [0225.267] CloseHandle (hObject=0x1038) returned 1 [0225.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676af58) returned 1 [0225.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67599c0) returned 1 Thread: id = 7611 os_tid = 0xba0 [0202.152] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0202.153] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.520] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d0 [0213.521] GetFileSizeEx (in: hFile=0x14d0, lpFileSize=0xfe6fdc4 | out: lpFileSize=0xfe6fdc4*=270) returned 1 [0213.521] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.521] ReadFile (in: hFile=0x14d0, lpBuffer=0xfe6fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfe6fdb0, lpOverlapped=0x0 | out: lpBuffer=0xfe6fda0*, lpNumberOfBytesRead=0xfe6fdb0*=0x4, lpOverlapped=0x0) returned 1 [0213.523] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4aff0 [0213.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb578 [0213.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66eb5f0 [0213.523] NtQuerySystemTime (in: CurrentTime=0xfe6fd38 | out: CurrentTime=0xfe6fd38*=132482711202336000) returned 0x0 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0xf644b55 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x3fcbcc2b [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x664615a2 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x6df4f5f9 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x72675d5e [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x67f28d22 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x230d24b1 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x116f32a1 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x2dfa1500 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x3d9b4446 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x3dee6b09 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x4cb9b4a6 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x314698be [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0xc8a20d1 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x29365212 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x72d5d90a [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x44c6b432 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x44de313a [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x9136b4d [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x604a3700 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x29063d1c [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x51234a9 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x6670ee62 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x2b1532cf [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x6d45265 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x647e4b2 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x1a2e3a7a [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x8e93019 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x30529154 [0213.523] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x5d2d0226 [0213.524] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x45ac3a85 [0213.524] RtlRandomEx (in: Seed=0xfe6fd30 | out: Seed=0xfe6fd30) returned 0x6cf6bcff [0213.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4aff0) returned 1 [0213.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130a1ca8 [0213.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x130a58b0 [0213.609] ReadFile (in: hFile=0x14d0, lpBuffer=0x130a1ca8, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0xfe6fd2c, lpOverlapped=0x0 | out: lpBuffer=0x130a1ca8*, lpNumberOfBytesRead=0xfe6fd2c*=0x10e, lpOverlapped=0x0) returned 1 [0213.609] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.609] WriteFile (in: hFile=0x14d0, lpBuffer=0x130a58b0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xfe6fd30, lpOverlapped=0x0 | out: lpBuffer=0x130a58b0*, lpNumberOfBytesWritten=0xfe6fd30*=0x10e, lpOverlapped=0x0) returned 1 [0216.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed8a0 [0216.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x66ed8c8 [0216.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed8c8) returned 1 [0216.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a58b0) returned 1 [0216.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x130a1ca8) returned 1 [0216.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1b510) returned 1 [0216.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6899fb8) returned 1 [0216.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x66e62f8 [0216.454] SetFilePointerEx (in: hFile=0x14d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.454] WriteFile (in: hFile=0x14d0, lpBuffer=0x12ea0920*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfe6fdb8, lpOverlapped=0x0 | out: lpBuffer=0x12ea0920*, lpNumberOfBytesWritten=0xfe6fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea0920) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e6328) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed8c8) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66e62f8) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ed8a0) returned 1 [0216.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb578) returned 1 [0216.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb618) returned 1 [0216.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eb938) returned 1 [0216.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8cb8 [0216.622] wcscpy (in: _Dest=0x3dd8cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" [0216.622] wcscat (in: _Dest=0x3dd8cb8, _Source=".ac3a86" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.ac3a86") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.ac3a86" [0216.622] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.ac3a86", NtPathName=0xfe6fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0216.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x6788d48 [0223.838] FlushFileBuffers (hFile=0x14d0) returned 1 [0223.872] CloseHandle (hObject=0x14d0) returned 1 [0224.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x676b1a8 [0224.687] wcscpy (in: _Dest=0x676b1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0224.687] wcscat (in: _Dest=0x676b1a8, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" [0224.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\ac3a86-readme.txt")) returned 0xffffffff [0224.688] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\AC3A86-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1038 [0225.256] WriteFile (in: hFile=0x1038, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfe6fd4c, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0xfe6fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0225.258] CloseHandle (hObject=0x1038) returned 1 [0225.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x676b1a8) returned 1 [0225.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759f88) returned 1 Thread: id = 7612 os_tid = 0xb78 [0202.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst")) returned 0x20 [0218.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST", dwFileAttributes=0x20) returned 0 [0218.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.470] GetLastError () returned 0x5 [0218.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST", dwFileAttributes=0x20) returned 0 [0218.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0da30) returned 1 Thread: id = 7613 os_tid = 0xb9c [0202.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss")) returned 0x20 [0218.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.472] GetLastError () returned 0x5 [0218.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d8f0) returned 1 Thread: id = 7614 os_tid = 0xb80 [0202.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss")) returned 0x20 [0218.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.473] GetLastError () returned 0x5 [0218.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 7615 os_tid = 0x1664 [0202.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss")) returned 0x20 [0218.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.475] GetLastError () returned 0x5 [0218.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 7616 os_tid = 0x1e80 [0202.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst")) returned 0x20 [0218.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST", dwFileAttributes=0x20) returned 0 [0218.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.476] GetLastError () returned 0x5 [0218.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST", dwFileAttributes=0x20) returned 0 [0218.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 7617 os_tid = 0x14a0 [0202.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss")) returned 0x20 [0218.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.478] GetLastError () returned 0x5 [0218.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 7618 os_tid = 0x1e84 [0202.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst")) returned 0x20 [0218.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST", dwFileAttributes=0x20) returned 0 [0218.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.479] GetLastError () returned 0x5 [0218.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST", dwFileAttributes=0x20) returned 0 [0218.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 7619 os_tid = 0x1e88 [0202.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss")) returned 0x20 [0218.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS", dwFileAttributes=0x20) returned 0 [0218.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.480] GetLastError () returned 0x5 [0218.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS", dwFileAttributes=0x20) returned 0 [0218.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 7620 os_tid = 0x2720 [0202.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss")) returned 0x20 [0208.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS", dwFileAttributes=0x20) returned 0 [0221.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.580] GetLastError () returned 0x5 [0226.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS", dwFileAttributes=0x20) returned 0 [0226.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d170) returned 1 Thread: id = 7621 os_tid = 0x1e8c [0202.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss")) returned 0x20 [0213.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS", dwFileAttributes=0x20) [0221.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.584] GetLastError () returned 0x5 [0226.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS", dwFileAttributes=0x20) returned 0 [0226.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32068) returned 1 Thread: id = 7622 os_tid = 0x1e90 [0202.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst")) returned 0x20 [0215.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST", dwFileAttributes=0x20) returned 0 [0215.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.093] GetLastError () returned 0x5 [0217.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST", dwFileAttributes=0x20) returned 0 [0217.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 7623 os_tid = 0x1e94 [0202.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss")) returned 0x20 [0206.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS", dwFileAttributes=0x20) returned 0 [0206.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.632] GetLastError () returned 0x5 [0208.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS", dwFileAttributes=0x20) returned 0 [0208.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 7624 os_tid = 0x11e4 [0202.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst")) returned 0x20 [0208.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST", dwFileAttributes=0x20) returned 0 [0221.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.580] GetLastError () returned 0x5 [0226.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST", dwFileAttributes=0x20) returned 0 [0226.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30cd0) returned 1 Thread: id = 7625 os_tid = 0x1e98 [0202.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss")) returned 0x20 [0213.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS", dwFileAttributes=0x20) [0221.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.584] GetLastError () returned 0x5 [0226.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0226.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e2f0) returned 1 Thread: id = 7626 os_tid = 0x1e9c [0202.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss")) returned 0x20 [0218.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.466] GetLastError () returned 0x5 [0218.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e1b0) returned 1 Thread: id = 7627 os_tid = 0x1ea0 [0202.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss")) returned 0x20 [0215.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS", dwFileAttributes=0x20) returned 0 [0215.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.357] GetLastError () returned 0x5 [0215.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS", dwFileAttributes=0x20) returned 0 [0215.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 7628 os_tid = 0x1ac4 [0202.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss")) returned 0x20 [0218.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS", dwFileAttributes=0x20) returned 0 [0218.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.454] GetLastError () returned 0x5 [0218.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS", dwFileAttributes=0x20) returned 0 [0218.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1228) returned 1 Thread: id = 7629 os_tid = 0x6b0 [0202.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss")) returned 0x20 [0218.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS", dwFileAttributes=0x20) returned 0 [0218.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.468] GetLastError () returned 0x5 [0218.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS", dwFileAttributes=0x20) returned 0 [0218.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0468) returned 1 Thread: id = 7630 os_tid = 0x11f0 [0202.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss")) returned 0x20 [0218.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS", dwFileAttributes=0x20) returned 0 [0218.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.469] GetLastError () returned 0x5 [0218.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS", dwFileAttributes=0x20) returned 0 [0218.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c05a8) returned 1 Thread: id = 7631 os_tid = 0x17cc [0202.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss")) returned 0x20 [0218.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.456] GetLastError () returned 0x5 [0218.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 7632 os_tid = 0xbd4 [0202.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst")) returned 0x20 [0218.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST", dwFileAttributes=0x20) returned 0 [0218.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.457] GetLastError () returned 0x5 [0218.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST", dwFileAttributes=0x20) returned 0 [0218.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1188) returned 1 Thread: id = 7633 os_tid = 0xbec [0202.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss")) returned 0x20 [0218.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.459] GetLastError () returned 0x5 [0218.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c01e8) returned 1 Thread: id = 7634 os_tid = 0x1ea4 [0202.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst")) returned 0x20 [0218.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST", dwFileAttributes=0x20) returned 0 [0218.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.460] GetLastError () returned 0x5 [0218.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST", dwFileAttributes=0x20) returned 0 [0218.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 7635 os_tid = 0x1ea8 [0202.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss")) returned 0x20 [0215.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0215.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.287] GetLastError () returned 0x5 [0217.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0217.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c03c8) returned 1 Thread: id = 7636 os_tid = 0x1eac [0202.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss")) returned 0x20 [0215.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0222.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.597] GetLastError () returned 0x5 [0226.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bff68) returned 1 Thread: id = 7637 os_tid = 0x15cc [0202.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst")) returned 0x20 [0217.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST", dwFileAttributes=0x20) returned 0 [0222.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.603] GetLastError () returned 0x5 [0226.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST", dwFileAttributes=0x20) returned 0 [0226.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0e68) returned 1 Thread: id = 7638 os_tid = 0x15d0 [0202.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst")) returned 0x20 [0217.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST", dwFileAttributes=0x20) returned 0 [0217.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.550] GetLastError () returned 0x5 [0217.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST", dwFileAttributes=0x20) returned 0 [0217.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0968) returned 1 Thread: id = 7639 os_tid = 0x179c [0202.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst")) returned 0x20 [0218.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST", dwFileAttributes=0x20) returned 0 [0218.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.125] GetLastError () returned 0x5 [0218.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST", dwFileAttributes=0x20) returned 0 [0218.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c06e8) returned 1 Thread: id = 7640 os_tid = 0x17a0 [0202.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst")) returned 0x20 [0218.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST", dwFileAttributes=0x20) returned 0 [0218.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.127] GetLastError () returned 0x5 [0218.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST", dwFileAttributes=0x20) returned 0 [0218.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0148) returned 1 Thread: id = 7641 os_tid = 0x17b0 [0202.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss")) returned 0x20 [0218.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.423] GetLastError () returned 0x5 [0218.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0218.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c15e8) returned 1 Thread: id = 7642 os_tid = 0xbbc [0202.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss")) returned 0x20 [0218.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.425] GetLastError () returned 0x5 [0218.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS", dwFileAttributes=0x20) returned 0 [0218.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1408) returned 1 Thread: id = 7643 os_tid = 0x784 [0202.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss")) returned 0x20 [0218.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.428] GetLastError () returned 0x5 [0218.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c14a8) returned 1 Thread: id = 7644 os_tid = 0x640 [0202.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss")) returned 0x20 [0218.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.432] GetLastError () returned 0x5 [0218.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfd88) returned 1 Thread: id = 7645 os_tid = 0x4f0 [0202.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss")) returned 0x20 [0218.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0218.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.449] GetLastError () returned 0x5 [0218.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0218.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1b88) returned 1 Thread: id = 7646 os_tid = 0x1140 [0203.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20 [0204.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0204.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.793] GetLastError () returned 0x5 [0204.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0204.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 7647 os_tid = 0x1eb0 [0203.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20 [0204.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0204.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.884] GetLastError () returned 0x5 [0204.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0204.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 7648 os_tid = 0x1eb4 [0203.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20 [0204.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0204.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.886] GetLastError () returned 0x5 [0204.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0204.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 7649 os_tid = 0xb38 [0203.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20 [0204.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0204.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.888] GetLastError () returned 0x5 [0204.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0204.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 7650 os_tid = 0x1eb8 [0203.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20 [0204.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0204.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.889] GetLastError () returned 0x5 [0204.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0204.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 7651 os_tid = 0x1ebc [0203.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20 [0204.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0204.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.891] GetLastError () returned 0x5 [0204.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0204.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 7652 os_tid = 0x1180 [0203.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20 [0204.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0204.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.893] GetLastError () returned 0x5 [0204.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0204.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 7653 os_tid = 0x1ec0 [0203.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20 [0204.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0204.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.894] GetLastError () returned 0x5 [0204.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0204.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 7654 os_tid = 0x1ec4 [0203.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20 [0204.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0204.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.896] GetLastError () returned 0x5 [0204.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0204.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 7655 os_tid = 0x1188 [0203.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20 [0204.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0204.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.897] GetLastError () returned 0x5 [0204.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0204.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 7656 os_tid = 0x118c [0203.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20 [0204.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0204.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.899] GetLastError () returned 0x5 [0204.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0204.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 7657 os_tid = 0x1190 [0203.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20 [0204.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0204.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.901] GetLastError () returned 0x5 [0204.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0204.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 7658 os_tid = 0x1194 [0203.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20 [0204.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0204.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.902] GetLastError () returned 0x5 [0204.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0204.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 7659 os_tid = 0x7fc [0203.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20 [0204.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0204.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.904] GetLastError () returned 0x5 [0204.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0204.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 7660 os_tid = 0xda0 [0203.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20 [0204.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0204.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.906] GetLastError () returned 0x5 [0204.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0204.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 7661 os_tid = 0xd98 [0203.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20 [0204.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0204.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.907] GetLastError () returned 0x5 [0204.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0204.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 7662 os_tid = 0xda4 [0203.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20 [0204.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0204.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.864] GetLastError () returned 0x5 [0204.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0204.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 7663 os_tid = 0x1ec8 [0203.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20 [0204.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0204.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.863] GetLastError () returned 0x5 [0204.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0204.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f277a0) returned 1 Thread: id = 7664 os_tid = 0xe48 [0203.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20 [0204.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0204.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.861] GetLastError () returned 0x5 [0204.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0204.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 7665 os_tid = 0x16b4 [0203.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20 [0204.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0204.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.860] GetLastError () returned 0x5 [0204.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0204.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26590) returned 1 Thread: id = 7666 os_tid = 0x16bc [0203.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20 [0204.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0204.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.859] GetLastError () returned 0x5 [0204.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0204.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 7667 os_tid = 0x16c0 [0203.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20 [0204.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0204.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.858] GetLastError () returned 0x5 [0204.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0204.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27a48) returned 1 Thread: id = 7668 os_tid = 0x16c4 [0203.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20 [0204.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0204.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.856] GetLastError () returned 0x5 [0204.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0204.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 7669 os_tid = 0x16c8 [0203.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20 [0204.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0204.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.855] GetLastError () returned 0x5 [0204.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0204.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 7670 os_tid = 0x16cc [0203.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20 [0204.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0204.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.853] GetLastError () returned 0x5 [0204.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0204.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 7671 os_tid = 0x16d0 [0203.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20 [0204.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0204.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.852] GetLastError () returned 0x5 [0204.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0204.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27cf0) returned 1 Thread: id = 7672 os_tid = 0x16d4 [0203.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20 [0204.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0204.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.851] GetLastError () returned 0x5 [0204.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0204.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 7673 os_tid = 0x16d8 [0203.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20 [0204.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0204.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.849] GetLastError () returned 0x5 [0204.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0204.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 7674 os_tid = 0x16dc [0203.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20 [0204.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0204.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.909] GetLastError () returned 0x5 [0204.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0204.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 7675 os_tid = 0x16e4 [0203.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20 [0204.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0204.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.795] GetLastError () returned 0x5 [0204.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0204.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 7676 os_tid = 0x16e8 [0203.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20 [0204.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0204.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.913] GetLastError () returned 0x5 [0204.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0204.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 7677 os_tid = 0x175c [0203.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20 [0204.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0204.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.912] GetLastError () returned 0x5 [0204.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0204.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 7678 os_tid = 0x1760 [0203.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20 [0204.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0204.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.910] GetLastError () returned 0x5 [0204.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0204.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 7679 os_tid = 0x1764 [0203.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20 [0204.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0204.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.310] GetLastError () returned 0x5 [0204.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0204.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 7680 os_tid = 0x1198 [0204.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl")) returned 0x20 [0212.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0220.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.136] GetLastError () returned 0x5 [0223.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0223.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27d78) returned 1 Thread: id = 7681 os_tid = 0x1480 [0204.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd")) returned 0x20 [0217.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0222.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.383] GetLastError () returned 0x5 [0223.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0223.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e10bf0) returned 1 Thread: id = 7682 os_tid = 0x1344 [0204.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css")) returned 0x20 [0212.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0220.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.131] GetLastError () returned 0x5 [0223.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0223.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f7f0) returned 1 Thread: id = 7683 os_tid = 0x135c [0204.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css")) returned 0x20 [0212.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0220.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.129] GetLastError () returned 0x5 [0223.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0223.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ac28) returned 1 Thread: id = 7684 os_tid = 0x1370 [0204.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css")) returned 0x20 [0212.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0220.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.128] GetLastError () returned 0x5 [0223.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0223.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e109f0) returned 1 Thread: id = 7685 os_tid = 0x137c [0204.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm")) returned 0x20 [0212.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0220.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.127] GetLastError () returned 0x5 [0223.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0223.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c6b8) returned 1 Thread: id = 7686 os_tid = 0x119c [0204.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css")) returned 0x20 [0212.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0220.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.126] GetLastError () returned 0x5 [0223.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0223.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bbb8) returned 1 Thread: id = 7687 os_tid = 0x1384 [0204.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css")) returned 0x20 [0212.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0220.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.124] GetLastError () returned 0x5 [0223.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0223.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b1b8) returned 1 Thread: id = 7688 os_tid = 0x1388 [0204.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css")) returned 0x20 [0212.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) [0221.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.154] GetLastError () returned 0x5 [0223.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) returned 0 [0223.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27e00) returned 1 Thread: id = 7689 os_tid = 0x14ac [0204.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl")) returned 0x20 [0212.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) [0221.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.152] GetLastError () returned 0x5 [0223.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) returned 0 [0223.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f273e8) returned 1 Thread: id = 7690 os_tid = 0x14b0 [0204.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl")) returned 0x20 [0212.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) [0221.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.151] GetLastError () returned 0x5 [0223.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) returned 0 [0223.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1af70) returned 1 Thread: id = 7691 os_tid = 0xb30 [0204.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd")) returned 0x20 [0212.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0221.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.150] GetLastError () returned 0x5 [0223.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0223.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674acb8) returned 1 Thread: id = 7692 os_tid = 0x434 [0204.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm")) returned 0x20 [0212.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0212.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.941] GetLastError () returned 0x5 [0212.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0212.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 7693 os_tid = 0x14d0 [0204.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll")) returned 0x20 [0212.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.939] GetLastError () returned 0x5 [0212.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 7694 os_tid = 0x1080 [0204.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl")) returned 0x20 [0212.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0212.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.937] GetLastError () returned 0x5 [0212.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0212.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 7695 os_tid = 0x1084 [0204.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll")) returned 0x20 [0212.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.936] GetLastError () returned 0x5 [0212.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0212.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 7696 os_tid = 0xe74 [0204.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css")) returned 0x20 [0212.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0221.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.148] GetLastError () returned 0x5 [0223.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0223.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c738) returned 1 Thread: id = 7697 os_tid = 0xdcc [0204.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs")) returned 0x20 [0212.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0218.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.089] GetLastError () returned 0x5 [0223.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0223.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 7698 os_tid = 0xe84 [0204.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc")) returned 0x20 [0212.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.944] GetLastError () returned 0x5 [0212.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0212.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 7699 os_tid = 0xe98 [0204.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt")) returned 0x20 [0212.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.934] GetLastError () returned 0x5 [0212.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 7700 os_tid = 0xea0 [0204.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk")) returned 0x20 [0212.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.932] GetLastError () returned 0x5 [0212.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbfb8) returned 1 Thread: id = 7701 os_tid = 0xdd4 [0204.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk")) returned 0x20 [0212.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.931] GetLastError () returned 0x5 [0212.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcca8) returned 1 Thread: id = 7702 os_tid = 0xe58 [0204.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs")) returned 0x20 [0212.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0212.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.929] GetLastError () returned 0x5 [0212.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0212.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ae38) returned 1 Thread: id = 7703 os_tid = 0xecc [0204.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0212.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.997] GetLastError () returned 0x5 [0212.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 7704 os_tid = 0xee4 [0204.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0212.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.999] GetLastError () returned 0x5 [0212.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 7705 os_tid = 0x410 [0204.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif")) returned 0x20 [0212.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0212.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.886] GetLastError () returned 0x5 [0212.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0212.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fa98) returned 1 Thread: id = 7706 os_tid = 0xe44 [0204.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif")) returned 0x20 [0212.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.888] GetLastError () returned 0x5 [0212.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b178) returned 1 Thread: id = 7707 os_tid = 0x528 [0204.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0212.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.890] GetLastError () returned 0x5 [0212.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ac38) returned 1 Thread: id = 7708 os_tid = 0x580 [0204.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0212.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.892] GetLastError () returned 0x5 [0212.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675af38) returned 1 Thread: id = 7709 os_tid = 0x564 [0204.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0212.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0212.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.914] GetLastError () returned 0x5 [0212.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0212.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30125c8) returned 1 Thread: id = 7710 os_tid = 0xe08 [0204.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0212.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.915] GetLastError () returned 0x5 [0212.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35750) returned 1 Thread: id = 7711 os_tid = 0x518 [0204.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0212.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.917] GetLastError () returned 0x5 [0212.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36520) returned 1 Thread: id = 7712 os_tid = 0x1004 [0204.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0212.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.918] GetLastError () returned 0x5 [0212.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36e10) returned 1 Thread: id = 7713 os_tid = 0x1034 [0204.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0212.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.920] GetLastError () returned 0x5 [0212.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f5e8) returned 1 Thread: id = 7714 os_tid = 0x10a0 [0204.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0212.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.921] GetLastError () returned 0x5 [0212.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f9d0) returned 1 Thread: id = 7715 os_tid = 0x10a4 [0204.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0212.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.922] GetLastError () returned 0x5 [0212.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f070) returned 1 Thread: id = 7716 os_tid = 0x10a8 [0204.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0212.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.924] GetLastError () returned 0x5 [0212.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e710) returned 1 Thread: id = 7717 os_tid = 0x10ac [0204.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0212.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.925] GetLastError () returned 0x5 [0212.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0212.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f778) returned 1 Thread: id = 7718 os_tid = 0x10b0 [0204.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0212.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.927] GetLastError () returned 0x5 [0212.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e35f70) returned 1 Thread: id = 7719 os_tid = 0x10b4 [0204.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0212.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.894] GetLastError () returned 0x5 [0212.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f6b0) returned 1 Thread: id = 7720 os_tid = 0x10c0 [0204.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0212.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.895] GetLastError () returned 0x5 [0212.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36ad0) returned 1 Thread: id = 7721 os_tid = 0x10c4 [0204.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0212.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.897] GetLastError () returned 0x5 [0212.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36a00) returned 1 Thread: id = 7722 os_tid = 0x1178 [0204.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0212.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.898] GetLastError () returned 0x5 [0212.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e366c0) returned 1 Thread: id = 7723 os_tid = 0x117c [0204.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0212.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.900] GetLastError () returned 0x5 [0212.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675aff8) returned 1 Thread: id = 7724 os_tid = 0x1228 [0204.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0212.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.902] GetLastError () returned 0x5 [0212.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b0b8) returned 1 Thread: id = 7725 os_tid = 0x1280 [0204.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif")) returned 0x20 [0212.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0212.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.903] GetLastError () returned 0x5 [0212.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0212.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e36930) returned 1 Thread: id = 7726 os_tid = 0xaf4 [0204.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0212.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.905] GetLastError () returned 0x5 [0212.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e8a0) returned 1 Thread: id = 7727 os_tid = 0x934 [0204.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0212.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.906] GetLastError () returned 0x5 [0212.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e648) returned 1 Thread: id = 7728 os_tid = 0x1468 [0204.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif")) returned 0x20 [0212.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0212.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.908] GetLastError () returned 0x5 [0212.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0212.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f2c8) returned 1 Thread: id = 7729 os_tid = 0x146c [0204.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif")) returned 0x20 [0212.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.909] GetLastError () returned 0x5 [0212.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0212.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b238) returned 1 Thread: id = 7730 os_tid = 0x1474 [0204.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0212.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.911] GetLastError () returned 0x5 [0212.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0212.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675b2f8) returned 1 Thread: id = 7731 os_tid = 0x14b4 [0204.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0212.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.912] GetLastError () returned 0x5 [0212.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0212.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675ae78) returned 1 Thread: id = 7732 os_tid = 0x1a38 [0204.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss")) returned 0x20 [0218.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.465] GetLastError () returned 0x5 [0218.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1c28) returned 1 Thread: id = 7733 os_tid = 0x14bc [0204.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss")) returned 0x20 [0218.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.464] GetLastError () returned 0x5 [0218.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 7734 os_tid = 0x81c [0204.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss")) returned 0x20 [0218.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.521] GetLastError () returned 0x5 [0218.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 7735 os_tid = 0x1618 [0204.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss")) returned 0x20 [0218.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.519] GetLastError () returned 0x5 [0218.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 7736 os_tid = 0x1670 [0204.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss")) returned 0x20 [0217.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0217.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.293] GetLastError () returned 0x5 [0217.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0217.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 7737 os_tid = 0x1444 [0204.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss")) returned 0x20 [0218.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0218.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.546] GetLastError () returned 0x5 [0218.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0218.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 7738 os_tid = 0x1448 [0204.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss")) returned 0x20 [0218.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0218.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.544] GetLastError () returned 0x5 [0218.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0218.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 7739 os_tid = 0x144c [0204.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss")) returned 0x20 [0218.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.542] GetLastError () returned 0x5 [0218.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 7740 os_tid = 0x12e8 [0204.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst")) returned 0x20 [0218.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0218.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.541] GetLastError () returned 0x5 [0218.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0218.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 7741 os_tid = 0x1584 [0204.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss")) returned 0x20 [0218.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.539] GetLastError () returned 0x5 [0218.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 7742 os_tid = 0x1588 [0204.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst")) returned 0x20 [0218.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0218.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.536] GetLastError () returned 0x5 [0218.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0218.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 7743 os_tid = 0x158c [0204.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss")) returned 0x20 [0218.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.540] GetLastError () returned 0x5 [0218.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dce8) returned 1 Thread: id = 7744 os_tid = 0x1590 [0204.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss")) returned 0x20 [0218.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.537] GetLastError () returned 0x5 [0218.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dd88) returned 1 Thread: id = 7745 os_tid = 0x1594 [0204.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss")) returned 0x20 [0218.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.535] GetLastError () returned 0x5 [0218.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 Thread: id = 7746 os_tid = 0x738 [0204.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss")) returned 0x20 [0218.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.532] GetLastError () returned 0x5 [0218.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31520) returned 1 Thread: id = 7747 os_tid = 0xe34 [0204.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst")) returned 0x20 [0218.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0218.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.531] GetLastError () returned 0x5 [0218.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0218.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697de28) returned 1 Thread: id = 7748 os_tid = 0x15b4 [0204.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst")) returned 0x20 [0218.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0218.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.529] GetLastError () returned 0x5 [0218.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0218.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697dec8) returned 1 Thread: id = 7749 os_tid = 0xfec [0204.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss")) returned 0x20 [0218.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0218.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.528] GetLastError () returned 0x5 [0218.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0218.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697df68) returned 1 Thread: id = 7750 os_tid = 0xb40 [0204.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss")) [0221.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0221.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.152] GetLastError () returned 0x5 [0221.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0221.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e008) returned 1 Thread: id = 7751 os_tid = 0x888 [0204.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss")) [0221.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0223.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.671] GetLastError () returned 0x5 [0226.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0226.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e0a8) returned 1 Thread: id = 7752 os_tid = 0x8d8 [0204.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss")) returned 0x20 [0218.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.527] GetLastError () returned 0x5 [0218.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e148) returned 1 Thread: id = 7753 os_tid = 0x8d4 [0204.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss")) returned 0x20 [0218.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0218.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.463] GetLastError () returned 0x5 [0218.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0218.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e1e8) returned 1 Thread: id = 7754 os_tid = 0x8e0 [0204.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss")) returned 0x20 [0218.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0218.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.526] GetLastError () returned 0x5 [0218.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0218.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e288) returned 1 Thread: id = 7755 os_tid = 0x9b4 [0204.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss")) returned 0x20 [0218.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.524] GetLastError () returned 0x5 [0218.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e328) returned 1 Thread: id = 7756 os_tid = 0xb20 [0204.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss")) returned 0x20 [0218.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.461] GetLastError () returned 0x5 [0218.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e3c8) returned 1 Thread: id = 7757 os_tid = 0xac4 [0204.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst")) returned 0x20 [0218.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0218.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.523] GetLastError () returned 0x5 [0218.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0218.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e468) returned 1 Thread: id = 7758 os_tid = 0xabc [0204.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst")) [0221.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0223.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.672] GetLastError () returned 0x5 [0226.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0226.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e508) returned 1 Thread: id = 7759 os_tid = 0xfac [0204.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss")) [0221.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0223.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.672] GetLastError () returned 0x5 [0226.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0226.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e5a8) returned 1 Thread: id = 7760 os_tid = 0x240 [0204.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst")) [0221.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0223.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.673] GetLastError () returned 0x5 [0226.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0226.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e648) returned 1 Thread: id = 7761 os_tid = 0x13fc [0204.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss")) returned 0x20 [0218.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0218.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.533] GetLastError () returned 0x5 [0218.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0218.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e6e8) returned 1 Thread: id = 7762 os_tid = 0x15d8 [0205.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst")) [0221.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0223.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.673] GetLastError () returned 0x5 [0226.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0226.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e788) returned 1 Thread: id = 7763 os_tid = 0x16a0 [0205.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20 [0205.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0205.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.415] GetLastError () returned 0x5 [0205.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0205.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 7764 os_tid = 0x16a4 [0205.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20 [0205.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0205.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.417] GetLastError () returned 0x5 [0205.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0205.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 7765 os_tid = 0x308 [0205.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20 [0208.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0220.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.938] GetLastError () returned 0x5 [0236.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0237.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 7766 os_tid = 0x75c [0205.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20 [0208.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0220.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.910] GetLastError () returned 0x5 [0236.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0237.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 7767 os_tid = 0x7e8 [0205.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20 [0208.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0220.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.909] GetLastError () returned 0x5 [0236.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0237.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 7768 os_tid = 0xec8 [0205.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf")) returned 0x20 [0208.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x20) [0222.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.940] GetLastError () returned 0x5 [0236.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x20) returned 0 [0237.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd90) returned 1 Thread: id = 7769 os_tid = 0x2004 [0205.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf")) returned 0x20 [0208.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x20) [0222.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.915] GetLastError () returned 0x5 [0236.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x20) returned 0 [0237.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 7770 os_tid = 0x200c [0205.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid")) returned 0x20 [0208.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x20) [0222.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.915] GetLastError () returned 0x5 [0236.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x20) returned 0 [0237.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 7771 os_tid = 0x2010 [0205.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif")) returned 0x20 [0208.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x20) [0222.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x20) returned 0 [0237.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 7772 os_tid = 0x2014 [0205.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf")) returned 0x20 [0208.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x20) [0222.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.911] GetLastError () returned 0x5 [0236.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x20) returned 0 [0237.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 7773 os_tid = 0x2018 [0205.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf")) returned 0x20 [0208.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x20) [0222.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.911] GetLastError () returned 0x5 [0236.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x20) returned 0 [0237.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 7774 os_tid = 0x201c [0205.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf")) returned 0x20 [0208.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x20) [0222.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.911] GetLastError () returned 0x5 [0236.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x20) returned 0 [0237.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 7775 os_tid = 0x2024 [0205.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf")) returned 0x20 [0208.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x20) [0222.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.910] GetLastError () returned 0x5 [0236.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x20) returned 0 [0237.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 7776 os_tid = 0x2028 [0205.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf")) returned 0x20 [0208.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x20) [0222.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x20) returned 0 [0237.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec90) returned 1 Thread: id = 7777 os_tid = 0x1424 [0205.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf")) returned 0x20 [0208.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x20) [0222.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x20) returned 0 [0237.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efae8) returned 1 Thread: id = 7778 os_tid = 0xbf8 [0205.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf")) returned 0x20 [0208.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x20) [0222.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x20) returned 0 [0237.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 7779 os_tid = 0x668 [0205.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf")) returned 0x20 [0208.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x20) [0222.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x20) returned 0 [0237.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 7780 os_tid = 0x202c [0206.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf")) returned 0x20 [0213.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x20) [0223.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.910] GetLastError () returned 0x5 [0236.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x20) returned 0 [0237.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 7782 os_tid = 0x211c [0206.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 0x20 [0208.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0208.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.686] GetLastError () returned 0x5 [0208.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0208.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ed50) returned 1 Thread: id = 7783 os_tid = 0xb88 [0206.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif")) returned 0x20 [0208.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0208.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.679] GetLastError () returned 0x5 [0208.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0208.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f520) returned 1 Thread: id = 7784 os_tid = 0x2190 [0206.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif")) returned 0x20 [0208.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0208.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.677] GetLastError () returned 0x5 [0208.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0208.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682f390) returned 1 Thread: id = 7785 os_tid = 0x14a4 [0206.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 0x20 [0208.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0208.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.676] GetLastError () returned 0x5 [0208.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0208.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682e580) returned 1 Thread: id = 7786 os_tid = 0x1378 [0206.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif")) returned 0x20 [0208.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0208.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.675] GetLastError () returned 0x5 [0208.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0208.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x675aab8) returned 1 Thread: id = 7787 os_tid = 0x2194 [0206.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif")) returned 0x20 [0208.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0208.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.674] GetLastError () returned 0x5 [0208.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0208.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682fb60) returned 1 Thread: id = 7788 os_tid = 0x2198 [0206.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif")) returned 0x20 [0208.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0208.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.672] GetLastError () returned 0x5 [0208.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0208.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682efa8) returned 1 Thread: id = 7789 os_tid = 0x219c [0206.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss")) [0221.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0223.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.676] GetLastError () returned 0x5 [0226.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1a48) returned 1 Thread: id = 7790 os_tid = 0x2214 [0206.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss")) [0221.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0223.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.675] GetLastError () returned 0x5 [0226.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0226.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e828) returned 1 Thread: id = 7791 os_tid = 0x9c4 [0206.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss")) [0221.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0221.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.055] GetLastError () returned 0x5 [0221.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0221.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e8c8) returned 1 Thread: id = 7792 os_tid = 0xacc [0206.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs")) returned 0x20 [0212.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) [0222.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.172] GetLastError () returned 0x5 [0223.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) returned 0 [0223.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31948) returned 1 Thread: id = 7793 os_tid = 0xdb8 [0206.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc")) returned 0x20 [0212.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) [0222.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.170] GetLastError () returned 0x5 [0223.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697e968) returned 1 Thread: id = 7794 os_tid = 0xdc8 [0206.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt")) returned 0x20 [0212.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) [0222.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.170] GetLastError () returned 0x5 [0223.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ea08) returned 1 Thread: id = 7795 os_tid = 0x64c [0206.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk")) returned 0x20 [0212.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) [0222.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.168] GetLastError () returned 0x5 [0223.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eaa8) returned 1 Thread: id = 7796 os_tid = 0xaa4 [0206.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk")) returned 0x20 [0212.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) [0222.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.167] GetLastError () returned 0x5 [0223.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697eb48) returned 1 Thread: id = 7797 os_tid = 0x644 [0206.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc")) returned 0x20 [0212.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) [0222.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.166] GetLastError () returned 0x5 [0223.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 7798 os_tid = 0x163c [0206.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt")) returned 0x20 [0212.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) [0222.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.165] GetLastError () returned 0x5 [0223.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 7799 os_tid = 0x1028 [0206.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk")) returned 0x20 [0212.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) [0222.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.164] GetLastError () returned 0x5 [0223.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 7800 os_tid = 0x1648 [0206.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk")) returned 0x20 [0212.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) [0222.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.164] GetLastError () returned 0x5 [0223.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 7801 os_tid = 0x102c [0206.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs")) returned 0x20 [0212.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) [0222.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.162] GetLastError () returned 0x5 [0223.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) returned 0 [0223.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 7802 os_tid = 0x1030 [0206.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc")) returned 0x20 [0212.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) [0222.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.161] GetLastError () returned 0x5 [0223.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd2d8) returned 1 Thread: id = 7803 os_tid = 0x1038 [0206.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt")) returned 0x20 [0212.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) [0221.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.159] GetLastError () returned 0x5 [0223.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db598) returned 1 Thread: id = 7804 os_tid = 0x103c [0206.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk")) returned 0x20 [0212.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) [0221.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.157] GetLastError () returned 0x5 [0223.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcaf8) returned 1 Thread: id = 7805 os_tid = 0x1040 [0206.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk")) returned 0x20 [0212.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) [0221.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.156] GetLastError () returned 0x5 [0223.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd368) returned 1 Thread: id = 7806 os_tid = 0x104c [0206.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs")) returned 0x20 [0212.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) [0222.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.182] GetLastError () returned 0x5 [0223.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) returned 0 [0223.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 7807 os_tid = 0x105c [0206.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc")) returned 0x20 [0212.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) [0222.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.181] GetLastError () returned 0x5 [0223.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dcb88) returned 1 Thread: id = 7808 os_tid = 0x11dc [0206.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt")) returned 0x20 [0212.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) [0222.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.179] GetLastError () returned 0x5 [0223.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc708) returned 1 Thread: id = 7809 os_tid = 0x1060 [0206.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk")) returned 0x20 [0212.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) [0222.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.178] GetLastError () returned 0x5 [0223.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db8f8) returned 1 Thread: id = 7810 os_tid = 0x1064 [0206.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk")) returned 0x20 [0212.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) [0222.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.177] GetLastError () returned 0x5 [0223.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc828) returned 1 Thread: id = 7811 os_tid = 0x1068 [0206.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl")) returned 0x20 [0215.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0215.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.513] GetLastError () returned 0x5 [0215.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0215.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 7812 os_tid = 0x106c [0206.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl")) returned 0x20 [0212.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) [0222.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.175] GetLastError () returned 0x5 [0223.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) returned 0 [0223.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f370) returned 1 Thread: id = 7813 os_tid = 0x1070 [0206.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x6a860a8 [0206.709] wcscpy (in: _Dest=0x6a860a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0206.709] wcscat (in: _Dest=0x6a860a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0206.709] wcscat (in: _Dest=0x6a860a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*" [0206.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x68bb1d8 [0206.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e80e78 [0215.384] wcscmp (_String1=".", _String2=".") returned 0 [0215.384] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.384] wcscmp (_String1="..", _String2=".") returned 1 [0215.384] wcscmp (_String1="..", _String2="..") returned 0 [0215.384] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 1 [0215.384] wcscmp (_String1="Visfilem.vsdir", _String2=".") returned 1 [0215.384] wcscmp (_String1="Visfilem.vsdir", _String2="..") returned 1 [0215.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3e30b08 [0215.384] wcscpy (in: _Dest=0x3e30b08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0215.384] wcscat (in: _Dest=0x3e30b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0215.384] wcscat (in: _Dest=0x3e30b08, _Source="Visfilem.vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" [0215.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21d5200, lpParameter=0x3e30b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0215.440] FindNextFileW (in: hFindFile=0x3e80e78, lpFindFileData=0x68bb1d8 | out: lpFindFileData=0x68bb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 0 [0215.441] FindClose (in: hFindFile=0x3e80e78 | out: hFindFile=0x3e80e78) returned 1 [0215.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68bb1d8) returned 1 [0215.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a860a8) returned 1 [0215.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1d148) returned 1 Thread: id = 7814 os_tid = 0x1074 [0206.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd")) returned 0x20 [0214.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0214.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0214.132] GetLastError () returned 0x5 [0214.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0214.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 7815 os_tid = 0x1d58 [0206.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml")) returned 0x20 [0212.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) [0222.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.174] GetLastError () returned 0x5 [0223.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0223.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 7816 os_tid = 0x73c [0206.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd")) returned 0x20 [0215.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0215.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.020] GetLastError () returned 0x5 [0215.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0215.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 7817 os_tid = 0x1078 [0206.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs")) returned 0x20 [0212.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0221.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.144] GetLastError () returned 0x5 [0223.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0223.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 7818 os_tid = 0x500 [0206.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc")) returned 0x20 [0212.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0221.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.144] GetLastError () returned 0x5 [0223.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc8b8) returned 1 Thread: id = 7819 os_tid = 0xe24 [0206.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt")) returned 0x20 [0212.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0221.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.142] GetLastError () returned 0x5 [0223.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dbce8) returned 1 Thread: id = 7820 os_tid = 0x1a2c [0206.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk")) returned 0x20 [0212.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0221.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.141] GetLastError () returned 0x5 [0223.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30778) returned 1 Thread: id = 7821 os_tid = 0x51c [0206.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk")) returned 0x20 [0212.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0221.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.139] GetLastError () returned 0x5 [0223.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e318b0) returned 1 Thread: id = 7822 os_tid = 0xd90 [0206.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf")) returned 0x20 [0208.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x20) [0222.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.912] GetLastError () returned 0x5 [0236.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x20) returned 0 [0237.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 7823 os_tid = 0x88c [0206.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf")) returned 0x20 [0208.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x20) [0222.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.912] GetLastError () returned 0x5 [0236.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x20) returned 0 [0237.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 7824 os_tid = 0x910 [0206.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf")) returned 0x20 [0208.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x20) [0222.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.912] GetLastError () returned 0x5 [0236.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x20) returned 0 [0237.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 7825 os_tid = 0x530 [0206.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf")) returned 0x20 [0208.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x20) [0222.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.912] GetLastError () returned 0x5 [0236.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x20) returned 0 [0237.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 7826 os_tid = 0x1804 [0206.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf")) returned 0x20 [0208.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x20) [0222.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.912] GetLastError () returned 0x5 [0236.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x20) returned 0 [0237.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 7827 os_tid = 0x1808 [0206.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf")) returned 0x20 [0208.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x20) [0222.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x20) returned 0 [0237.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 7828 os_tid = 0x180c [0206.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf")) returned 0x20 [0208.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x20) [0222.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x20) returned 0 [0237.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 7829 os_tid = 0x1810 [0206.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf")) returned 0x20 [0208.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x20) [0222.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x20) returned 0 [0237.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 7830 os_tid = 0x1814 [0206.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf")) returned 0x20 [0208.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x20) [0222.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x20) returned 0 [0237.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 7831 os_tid = 0xbc4 [0206.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf")) returned 0x20 [0208.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x20) [0222.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x20) returned 0 [0237.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 7832 os_tid = 0x1824 [0206.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf")) returned 0x20 [0208.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x20) [0222.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.913] GetLastError () returned 0x5 [0236.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x20) returned 0 [0237.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 7833 os_tid = 0x598 [0206.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20 [0208.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) [0222.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.914] GetLastError () returned 0x5 [0236.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 0 [0237.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 7834 os_tid = 0x1828 [0206.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20 [0208.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) [0222.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.910] GetLastError () returned 0x5 [0236.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 0 [0237.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 7835 os_tid = 0x182c [0206.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20 [0208.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) [0222.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.910] GetLastError () returned 0x5 [0236.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 0 [0237.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 7836 os_tid = 0x1830 [0206.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20 [0208.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) [0222.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.911] GetLastError () returned 0x5 [0236.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 0 [0237.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 7837 os_tid = 0x1834 [0206.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20 [0208.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) [0222.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.911] GetLastError () returned 0x5 [0236.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 0 [0237.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 7838 os_tid = 0x11c [0206.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif")) returned 0x20 [0208.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0208.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.709] GetLastError () returned 0x5 [0208.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0208.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 7839 os_tid = 0xf68 [0206.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0215.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.492] GetLastError () returned 0x5 [0215.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8688) returned 1 Thread: id = 7840 os_tid = 0xef4 [0206.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0215.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.341] GetLastError () returned 0x5 [0215.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea72d8) returned 1 Thread: id = 7841 os_tid = 0x209c [0207.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs")) returned 0x20 [0215.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0222.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.182] GetLastError () returned 0x5 [0223.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0223.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f470) returned 1 Thread: id = 7842 os_tid = 0x21a0 [0207.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc")) returned 0x20 [0215.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.512] GetLastError () returned 0x5 [0215.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 7843 os_tid = 0x1608 [0207.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt")) returned 0x20 [0215.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0222.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.365] GetLastError () returned 0x5 [0223.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 7844 os_tid = 0xe68 [0207.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk")) returned 0x20 [0215.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.371] GetLastError () returned 0x5 [0223.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2378) returned 1 Thread: id = 7845 os_tid = 0xf60 [0207.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk")) returned 0x20 [0215.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.363] GetLastError () returned 0x5 [0223.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df14d8) returned 1 Thread: id = 7846 os_tid = 0x10d4 [0207.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd")) returned 0x20 [0215.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0222.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.367] GetLastError () returned 0x5 [0223.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0223.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e102f0) returned 1 Thread: id = 7847 os_tid = 0x6f0 [0207.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs")) returned 0x20 [0215.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0222.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.360] GetLastError () returned 0x5 [0223.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0223.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 7848 os_tid = 0xf64 [0207.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc")) returned 0x20 [0215.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0222.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.358] GetLastError () returned 0x5 [0223.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df29a8) returned 1 Thread: id = 7849 os_tid = 0x1144 [0207.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt")) returned 0x20 [0215.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0222.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.356] GetLastError () returned 0x5 [0223.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2498) returned 1 Thread: id = 7850 os_tid = 0x9b0 [0207.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk")) returned 0x20 [0215.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.355] GetLastError () returned 0x5 [0223.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31488) returned 1 Thread: id = 7851 os_tid = 0x20a4 [0207.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk")) returned 0x20 [0215.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.354] GetLastError () returned 0x5 [0223.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e316e8) returned 1 Thread: id = 7852 os_tid = 0x1088 [0207.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs")) returned 0x20 [0215.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0222.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.353] GetLastError () returned 0x5 [0223.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0223.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 Thread: id = 7853 os_tid = 0x108c [0207.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc")) returned 0x20 [0215.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0222.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.352] GetLastError () returned 0x5 [0223.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0223.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 7854 os_tid = 0x25c [0207.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt")) returned 0x20 [0215.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0222.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.351] GetLastError () returned 0x5 [0223.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0223.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 7855 os_tid = 0x20c [0207.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk")) returned 0x20 [0215.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.350] GetLastError () returned 0x5 [0223.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df22e8) returned 1 Thread: id = 7856 os_tid = 0xee8 [0207.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk")) returned 0x20 [0215.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0222.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.348] GetLastError () returned 0x5 [0223.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0223.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2258) returned 1 Thread: id = 7857 os_tid = 0xe6c [0207.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl")) returned 0x20 [0215.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0222.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.359] GetLastError () returned 0x5 [0223.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0223.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 7858 os_tid = 0x10d0 [0207.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll")) returned 0x20 [0215.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0222.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.346] GetLastError () returned 0x5 [0223.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0223.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df3068) returned 1 Thread: id = 7859 os_tid = 0xa8c [0207.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll")) returned 0x20 [0215.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0222.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.341] GetLastError () returned 0x5 [0223.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0223.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1dd8) returned 1 Thread: id = 7860 os_tid = 0xa50 [0207.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm")) returned 0x20 [0215.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0222.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.338] GetLastError () returned 0x5 [0223.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0223.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 7861 os_tid = 0x1090 [0207.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl")) returned 0x20 [0215.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0222.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.339] GetLastError () returned 0x5 [0223.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0223.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674bdb8) returned 1 Thread: id = 7862 os_tid = 0x1094 [0207.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn")) returned 0x20 [0215.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0222.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.338] GetLastError () returned 0x5 [0223.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0223.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66db988) returned 1 Thread: id = 7863 os_tid = 0x109c [0207.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn")) returned 0x20 [0215.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0222.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.336] GetLastError () returned 0x5 [0223.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0223.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 7864 os_tid = 0x10f0 [0207.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll")) returned 0x20 [0215.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0222.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.335] GetLastError () returned 0x5 [0223.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0223.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30f30) returned 1 Thread: id = 7865 os_tid = 0x21dc [0207.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll")) returned 0x20 [0215.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0222.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.333] GetLastError () returned 0x5 [0223.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0223.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30ba0) returned 1 Thread: id = 7866 os_tid = 0x21d8 [0207.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm")) returned 0x20 [0215.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0222.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.309] GetLastError () returned 0x5 [0223.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0223.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674b6b8) returned 1 Thread: id = 7867 os_tid = 0x17ac [0207.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll")) returned 0x20 [0215.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0222.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.258] GetLastError () returned 0x5 [0223.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0223.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e98) returned 1 Thread: id = 7868 os_tid = 0x2250 [0207.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm")) returned 0x20 [0217.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0222.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0223.385] GetLastError () returned 0x5 [0223.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0223.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c8b8) returned 1 Thread: id = 7869 os_tid = 0x2254 [0207.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0210.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0210.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.691] GetLastError () returned 0x5 [0210.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0210.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea71e8) returned 1 Thread: id = 7870 os_tid = 0x2258 [0207.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0215.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.061] GetLastError () returned 0x5 [0215.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8778) returned 1 Thread: id = 7871 os_tid = 0x225c [0207.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0215.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.394] GetLastError () returned 0x5 [0215.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 Thread: id = 7872 os_tid = 0x2260 [0207.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0215.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.663] GetLastError () returned 0x5 [0215.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8d18) returned 1 Thread: id = 7873 os_tid = 0x2188 [0207.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0208.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0208.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.573] GetLastError () returned 0x5 [0208.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0208.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad560) returned 1 Thread: id = 7874 os_tid = 0x2264 [0207.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0208.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.570] GetLastError () returned 0x5 [0208.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 7875 os_tid = 0x22b4 [0207.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0208.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.571] GetLastError () returned 0x5 [0208.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 7876 os_tid = 0x22b8 [0207.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0208.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0208.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.579] GetLastError () returned 0x5 [0208.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0208.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15770) returned 1 Thread: id = 7877 os_tid = 0x22bc [0207.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0208.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0208.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.581] GetLastError () returned 0x5 [0208.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0208.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae008) returned 1 Thread: id = 7878 os_tid = 0x1b4c [0207.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0208.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.576] GetLastError () returned 0x5 [0208.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dade18) returned 1 Thread: id = 7879 os_tid = 0x1b54 [0207.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0208.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.578] GetLastError () returned 0x5 [0208.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 7880 os_tid = 0x1b5c [0207.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0208.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0208.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.586] GetLastError () returned 0x5 [0208.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0208.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dada38) returned 1 Thread: id = 7881 os_tid = 0x1b6c [0207.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0208.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.583] GetLastError () returned 0x5 [0208.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 7882 os_tid = 0x1b70 [0207.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0208.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.584] GetLastError () returned 0x5 [0208.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 7883 os_tid = 0x1b74 [0207.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif")) returned 0x20 [0208.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0208.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.590] GetLastError () returned 0x5 [0208.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0208.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56838) returned 1 Thread: id = 7884 os_tid = 0x1b78 [0207.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0208.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.587] GetLastError () returned 0x5 [0208.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0208.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8e08) returned 1 Thread: id = 7885 os_tid = 0x1b7c [0207.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0208.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.589] GetLastError () returned 0x5 [0208.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0208.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56668) returned 1 Thread: id = 7886 os_tid = 0x1b80 [0207.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0220.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0220.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.113] GetLastError () returned 0x5 [0220.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0220.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8b38) returned 1 Thread: id = 7887 os_tid = 0x1b84 [0207.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0219.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0219.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.857] GetLastError () returned 0x5 [0219.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0219.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 7888 os_tid = 0x1b88 [0207.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0215.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.491] GetLastError () returned 0x5 [0215.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8598) returned 1 Thread: id = 7889 os_tid = 0x1b8c [0207.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss")) [0221.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0223.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.678] GetLastError () returned 0x5 [0226.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0226.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0fa8) returned 1 Thread: id = 7890 os_tid = 0x1b94 [0207.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss")) [0222.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0223.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.684] GetLastError () returned 0x5 [0226.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0226.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0dc8) returned 1 Thread: id = 7891 os_tid = 0x1260 [0207.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst")) [0222.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0223.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.680] GetLastError () returned 0x5 [0226.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0226.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfce8) returned 1 Thread: id = 7892 os_tid = 0x233c [0207.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss")) [0222.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0223.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.690] GetLastError () returned 0x5 [0226.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0226.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0aa8) returned 1 Thread: id = 7893 os_tid = 0x1108 [0207.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst")) [0222.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0223.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.700] GetLastError () returned 0x5 [0226.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0226.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0508) returned 1 Thread: id = 7894 os_tid = 0xb74 [0207.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss")) [0222.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0223.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.702] GetLastError () returned 0x5 [0226.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0226.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0be8) returned 1 Thread: id = 7895 os_tid = 0xe64 [0207.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss")) [0222.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0223.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.702] GetLastError () returned 0x5 [0226.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0226.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfec8) returned 1 Thread: id = 7896 os_tid = 0xb84 [0207.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst")) [0222.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0223.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.703] GetLastError () returned 0x5 [0226.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0226.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1688) returned 1 Thread: id = 7897 os_tid = 0xb44 [0207.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst")) [0222.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0223.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.703] GetLastError () returned 0x5 [0226.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0226.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c10e8) returned 1 Thread: id = 7898 os_tid = 0x110c [0207.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss")) [0222.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0223.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.709] GetLastError () returned 0x5 [0226.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0226.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1048) returned 1 Thread: id = 7899 os_tid = 0x1110 [0207.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss")) [0222.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0223.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.712] GetLastError () returned 0x5 [0226.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0226.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69bfe28) returned 1 Thread: id = 7900 os_tid = 0x1114 [0207.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss")) [0223.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0223.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.719] GetLastError () returned 0x5 [0226.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0226.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0a08) returned 1 Thread: id = 7901 os_tid = 0x1134 [0207.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss")) [0223.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0223.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.719] GetLastError () returned 0x5 [0226.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0226.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c00a8) returned 1 Thread: id = 7902 os_tid = 0x1138 [0207.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss")) [0223.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0223.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.718] GetLastError () returned 0x5 [0226.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0226.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0d28) returned 1 Thread: id = 7903 os_tid = 0x113c [0207.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss")) [0223.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0223.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.727] GetLastError () returned 0x5 [0226.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0226.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1728) returned 1 Thread: id = 7904 os_tid = 0x1600 [0207.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss")) [0223.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0223.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.729] GetLastError () returned 0x5 [0226.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c17c8) returned 1 Thread: id = 7905 os_tid = 0x1364 [0207.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss")) [0223.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0224.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.737] GetLastError () returned 0x5 [0226.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1868) returned 1 Thread: id = 7906 os_tid = 0x1368 [0207.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss")) [0223.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0226.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.739] GetLastError () returned 0x5 [0226.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0228.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1908) returned 1 Thread: id = 7907 os_tid = 0xa20 [0207.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss")) [0223.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0226.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.739] GetLastError () returned 0x5 [0226.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0228.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0b48) returned 1 Thread: id = 7908 os_tid = 0x1fd8 [0207.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss")) [0223.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0226.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.738] GetLastError () returned 0x5 [0226.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0c88) returned 1 Thread: id = 7909 os_tid = 0x1130 [0207.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss")) [0223.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0226.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.741] GetLastError () returned 0x5 [0226.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1ae8) returned 1 Thread: id = 7910 os_tid = 0x2360 [0207.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss")) [0223.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0226.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.739] GetLastError () returned 0x5 [0226.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0228.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0788) returned 1 Thread: id = 7911 os_tid = 0x2364 [0207.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst")) [0223.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0226.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.742] GetLastError () returned 0x5 [0226.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0228.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ebe8) returned 1 Thread: id = 7912 os_tid = 0x2368 [0207.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss")) [0223.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0226.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.740] GetLastError () returned 0x5 [0226.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0228.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ec88) returned 1 Thread: id = 7913 os_tid = 0x236c [0207.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst")) [0223.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0226.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.743] GetLastError () returned 0x5 [0226.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0228.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ed28) returned 1 Thread: id = 7914 os_tid = 0x2370 [0207.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst")) [0223.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0226.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.740] GetLastError () returned 0x5 [0226.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0228.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 7915 os_tid = 0x12b8 [0207.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst")) [0223.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0226.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.743] GetLastError () returned 0x5 [0226.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0228.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 Thread: id = 7916 os_tid = 0x2390 [0207.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst")) [0223.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0226.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.742] GetLastError () returned 0x5 [0226.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0228.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697edc8) returned 1 Thread: id = 7918 os_tid = 0x204c [0207.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) [0221.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0221.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.057] GetLastError () returned 0x5 [0221.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0221.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 7919 os_tid = 0x2050 [0207.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) [0221.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0227.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.140] GetLastError () returned 0x5 [0237.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0237.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 7920 os_tid = 0x2054 [0207.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) [0221.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0227.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.140] GetLastError () returned 0x5 [0237.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0237.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 7921 os_tid = 0x2058 [0207.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) [0221.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0227.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.139] GetLastError () returned 0x5 [0237.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0237.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 7922 os_tid = 0x205c [0207.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) [0221.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0227.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.140] GetLastError () returned 0x5 [0237.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0237.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 7923 os_tid = 0x2060 [0207.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) [0223.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0230.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.171] GetLastError () returned 0x5 [0237.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0237.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 7924 os_tid = 0x2064 [0207.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) [0221.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0227.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.139] GetLastError () returned 0x5 [0237.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0237.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 7925 os_tid = 0x2068 [0207.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) [0223.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0231.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.620] GetLastError () returned 0x5 [0237.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0237.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 7926 os_tid = 0x206c [0207.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) [0221.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0227.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.139] GetLastError () returned 0x5 [0237.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0237.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 7927 os_tid = 0x2070 [0207.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) [0223.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0231.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.620] GetLastError () returned 0x5 [0237.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0237.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 7928 os_tid = 0x2074 [0207.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) [0223.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0231.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.619] GetLastError () returned 0x5 [0237.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0237.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 7929 os_tid = 0x207c [0207.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) [0223.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0231.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.642] GetLastError () returned 0x5 [0237.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0237.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 7930 os_tid = 0x2084 [0207.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) [0226.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0226.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.035] GetLastError () returned 0x5 [0226.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0226.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 7931 os_tid = 0x2088 [0207.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) [0226.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0226.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.530] GetLastError () returned 0x5 [0226.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0226.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 7932 os_tid = 0x2090 [0207.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) [0226.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0226.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.528] GetLastError () returned 0x5 [0226.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0226.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 7933 os_tid = 0x2094 [0207.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) [0226.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0226.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.369] GetLastError () returned 0x5 [0226.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0226.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 7934 os_tid = 0x20b4 [0207.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) [0226.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0226.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.323] GetLastError () returned 0x5 [0227.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0227.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 7935 os_tid = 0x20b8 [0207.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) [0226.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0226.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.672] GetLastError () returned 0x5 [0228.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0228.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 7936 os_tid = 0x20bc [0207.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) [0228.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0228.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.943] GetLastError () returned 0x5 [0228.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0228.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 7937 os_tid = 0x20c0 [0207.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0228.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.898] GetLastError () returned 0x5 [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0228.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 7938 os_tid = 0x20c4 [0207.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) [0229.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0229.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.567] GetLastError () returned 0x5 [0229.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0229.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 7939 os_tid = 0x20c8 [0207.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0228.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.895] GetLastError () returned 0x5 [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0228.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 7940 os_tid = 0x20cc [0207.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) [0229.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0229.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.565] GetLastError () returned 0x5 [0229.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0229.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 7941 os_tid = 0x20d0 [0207.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) [0229.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0229.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.564] GetLastError () returned 0x5 [0229.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0229.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 Thread: id = 7942 os_tid = 0x20d4 [0207.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) [0229.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0229.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.562] GetLastError () returned 0x5 [0229.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0229.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 7943 os_tid = 0x20d8 [0207.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) [0229.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0229.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.559] GetLastError () returned 0x5 [0229.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0229.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 7944 os_tid = 0x20dc [0207.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) [0229.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0229.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.561] GetLastError () returned 0x5 [0229.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0229.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 7945 os_tid = 0x20e0 [0207.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) [0229.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0229.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.553] GetLastError () returned 0x5 [0229.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0229.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 7946 os_tid = 0x2288 [0207.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) [0229.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0229.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.557] GetLastError () returned 0x5 [0229.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0229.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd08) returned 1 Thread: id = 7947 os_tid = 0x2404 [0207.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) [0229.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0229.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.551] GetLastError () returned 0x5 [0229.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0229.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 7948 os_tid = 0x2408 [0207.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) [0229.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0229.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.550] GetLastError () returned 0x5 [0229.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0229.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 7949 os_tid = 0x240c [0207.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst")) [0223.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0226.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.765] GetLastError () returned 0x5 [0226.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0228.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0328) returned 1 Thread: id = 7950 os_tid = 0x2328 [0207.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss")) [0223.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0226.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.765] GetLastError () returned 0x5 [0226.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0228.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ee68) returned 1 Thread: id = 7951 os_tid = 0x232c [0207.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss")) [0223.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0226.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.765] GetLastError () returned 0x5 [0226.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0228.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697ef08) returned 1 Thread: id = 7952 os_tid = 0x2330 [0207.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss")) [0223.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0226.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.766] GetLastError () returned 0x5 [0226.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0228.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697efa8) returned 1 Thread: id = 7953 os_tid = 0x13c8 [0207.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss")) [0223.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0226.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.767] GetLastError () returned 0x5 [0226.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0228.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f048) returned 1 Thread: id = 7954 os_tid = 0xf20 [0207.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss")) [0223.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0226.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.768] GetLastError () returned 0x5 [0226.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0228.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f0e8) returned 1 Thread: id = 7955 os_tid = 0xfb0 [0207.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) [0229.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0229.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.548] GetLastError () returned 0x5 [0229.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0229.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 7956 os_tid = 0x2400 [0207.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) [0229.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0229.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.547] GetLastError () returned 0x5 [0229.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0229.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f01d0) returned 1 Thread: id = 7957 os_tid = 0x2518 [0207.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) [0229.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0229.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.543] GetLastError () returned 0x5 [0229.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0229.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 7958 os_tid = 0x251c [0207.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) [0229.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0229.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.545] GetLastError () returned 0x5 [0229.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0229.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 7959 os_tid = 0x23c4 [0207.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) [0229.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0229.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.542] GetLastError () returned 0x5 [0229.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0229.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 7960 os_tid = 0x23c8 [0207.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) [0229.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0229.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.452] GetLastError () returned 0x5 [0229.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0229.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 7961 os_tid = 0x16ec [0207.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) [0229.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0229.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.450] GetLastError () returned 0x5 [0229.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0229.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 7962 os_tid = 0x21a4 [0207.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) [0229.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0229.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.448] GetLastError () returned 0x5 [0229.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0229.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 7963 os_tid = 0x21cc [0207.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) [0229.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0229.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.445] GetLastError () returned 0x5 [0229.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0229.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efc80) returned 1 Thread: id = 7964 os_tid = 0x21e8 [0207.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) [0229.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0229.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.446] GetLastError () returned 0x5 [0229.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0229.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 7965 os_tid = 0x2208 [0207.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) [0229.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0229.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.494] GetLastError () returned 0x5 [0229.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0229.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 7966 os_tid = 0xaac [0207.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) [0229.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0229.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.490] GetLastError () returned 0x5 [0229.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0229.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eff28) returned 1 Thread: id = 7967 os_tid = 0x15e8 [0207.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) [0229.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0229.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.492] GetLastError () returned 0x5 [0229.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0229.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 7968 os_tid = 0x27cc [0207.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) [0229.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0229.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.487] GetLastError () returned 0x5 [0229.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0229.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 7969 os_tid = 0x27d0 [0207.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) [0229.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0229.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.485] GetLastError () returned 0x5 [0229.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0229.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 7970 os_tid = 0x27d8 [0207.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) [0229.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0229.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.483] GetLastError () returned 0x5 [0229.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0229.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 7971 os_tid = 0x27dc [0207.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) [0229.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0229.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.481] GetLastError () returned 0x5 [0229.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0229.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 7972 os_tid = 0x11ec [0207.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) [0229.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0229.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.478] GetLastError () returned 0x5 [0229.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0229.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 7973 os_tid = 0x14cc [0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) [0229.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0229.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.476] GetLastError () returned 0x5 [0229.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0229.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 7974 os_tid = 0x14d8 [0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) [0229.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0229.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.472] GetLastError () returned 0x5 [0229.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0229.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 7975 os_tid = 0x10dc [0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) [0229.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0229.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.474] GetLastError () returned 0x5 [0229.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0229.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 7976 os_tid = 0x14dc [0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) [0229.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0229.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.469] GetLastError () returned 0x5 [0229.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0229.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 7977 os_tid = 0x14e0 [0207.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) [0229.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0229.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.467] GetLastError () returned 0x5 [0229.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0229.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 7978 os_tid = 0x14e8 [0207.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) [0229.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0229.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.454] GetLastError () returned 0x5 [0229.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0229.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 7979 os_tid = 0xec4 [0207.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) [0229.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0229.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.465] GetLastError () returned 0x5 [0229.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0229.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 7980 os_tid = 0x10cc [0207.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) [0229.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0229.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.535] GetLastError () returned 0x5 [0229.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0229.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 7981 os_tid = 0x1200 [0207.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) [0229.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0229.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.533] GetLastError () returned 0x5 [0229.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0229.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 7982 os_tid = 0x1210 [0207.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) [0229.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0229.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.532] GetLastError () returned 0x5 [0229.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0229.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 7983 os_tid = 0x1214 [0207.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) [0229.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0229.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.530] GetLastError () returned 0x5 [0229.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0229.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 8169 os_tid = 0x19e0 [0207.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) [0229.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0229.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.149] GetLastError () returned 0x5 [0229.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0229.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea45b0) returned 1 Thread: id = 8170 os_tid = 0xefc [0207.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) [0229.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0229.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.150] GetLastError () returned 0x5 [0229.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0229.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea4638) returned 1 Thread: id = 8191 os_tid = 0xdf8 [0208.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) [0229.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0229.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.092] GetLastError () returned 0x5 [0229.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0229.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12ea5160) returned 1 Thread: id = 8253 os_tid = 0x275c [0215.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) [0228.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0228.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.900] GetLastError () returned 0x5 [0228.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0228.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e7d0) returned 1 Thread: id = 8254 os_tid = 0x2760 [0215.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) [0228.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0228.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.948] GetLastError () returned 0x5 [0228.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0228.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e858) returned 1 Thread: id = 8255 os_tid = 0x2764 [0215.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) [0228.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0228.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.950] GetLastError () returned 0x5 [0228.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0228.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e8e0) returned 1 Thread: id = 8256 os_tid = 0x2768 [0215.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) [0228.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0228.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.946] GetLastError () returned 0x5 [0228.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0228.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e968) returned 1 Thread: id = 8257 os_tid = 0x276c [0215.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) [0228.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0228.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.929] GetLastError () returned 0x5 [0228.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0228.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9e9f0) returned 1 Thread: id = 8258 os_tid = 0x2770 [0215.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) [0229.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0229.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.577] GetLastError () returned 0x5 [0229.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0229.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ea78) returned 1 Thread: id = 8259 os_tid = 0x2774 [0215.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) [0229.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0229.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.647] GetLastError () returned 0x5 [0229.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0229.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9eb00) returned 1 Thread: id = 8260 os_tid = 0x2778 [0215.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) [0229.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0229.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.627] GetLastError () returned 0x5 [0229.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0229.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9eb88) returned 1 Thread: id = 8261 os_tid = 0x277c [0215.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) [0229.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0229.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.690] GetLastError () returned 0x5 [0229.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0229.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ec10) returned 1 Thread: id = 8262 os_tid = 0x2784 [0215.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20 [0229.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0229.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.699] GetLastError () returned 0x5 [0229.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0229.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ec98) returned 1 Thread: id = 8263 os_tid = 0x2788 [0215.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20 [0229.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0229.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.702] GetLastError () returned 0x5 [0229.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0229.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ed20) returned 1 Thread: id = 8264 os_tid = 0x2794 [0215.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20 [0229.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0229.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.707] GetLastError () returned 0x5 [0229.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0229.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9eda8) returned 1 Thread: id = 8265 os_tid = 0x2798 [0215.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20 [0229.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0229.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.704] GetLastError () returned 0x5 [0229.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0229.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ee30) returned 1 Thread: id = 8266 os_tid = 0x279c [0215.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20 [0229.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0229.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.934] GetLastError () returned 0x5 [0229.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0229.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9eeb8) returned 1 Thread: id = 8267 os_tid = 0x27a0 [0215.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20 [0230.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0230.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.160] GetLastError () returned 0x5 [0230.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0230.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ef40) returned 1 Thread: id = 8268 os_tid = 0x27a4 [0215.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20 [0230.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0230.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.367] GetLastError () returned 0x5 [0230.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0230.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9efc8) returned 1 Thread: id = 8269 os_tid = 0x27a8 [0215.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20 [0230.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0230.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.318] GetLastError () returned 0x5 [0230.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0230.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f050) returned 1 Thread: id = 8270 os_tid = 0x27ac [0215.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20 [0230.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0230.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.405] GetLastError () returned 0x5 [0230.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0230.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f0d8) returned 1 Thread: id = 8271 os_tid = 0x27b0 [0215.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20 [0230.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0230.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.417] GetLastError () returned 0x5 [0230.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0230.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f160) returned 1 Thread: id = 8272 os_tid = 0x27b4 [0215.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20 [0230.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0230.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.441] GetLastError () returned 0x5 [0230.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0230.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f1e8) returned 1 Thread: id = 8273 os_tid = 0x27b8 [0215.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20 [0230.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0230.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.429] GetLastError () returned 0x5 [0230.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0230.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f270) returned 1 Thread: id = 8274 os_tid = 0x27bc [0215.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20 [0230.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0230.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.472] GetLastError () returned 0x5 [0230.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0230.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f2f8) returned 1 Thread: id = 8275 os_tid = 0x27d4 [0215.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20 [0230.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0231.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.239] GetLastError () returned 0x5 [0231.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0231.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f380) returned 1 Thread: id = 8276 os_tid = 0x27e0 [0215.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20 [0231.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0231.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.241] GetLastError () returned 0x5 [0231.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0231.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f408) returned 1 Thread: id = 8277 os_tid = 0x27e4 [0215.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif")) returned 0x20 [0215.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0215.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.404] GetLastError () returned 0x5 [0215.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0215.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8c28) returned 1 Thread: id = 8278 os_tid = 0xdb0 [0215.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif")) returned 0x20 [0215.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.406] GetLastError () returned 0x5 [0215.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56750) returned 1 Thread: id = 8279 os_tid = 0x27ec [0215.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0215.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.408] GetLastError () returned 0x5 [0215.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 8280 os_tid = 0x27f0 [0215.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0215.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.410] GetLastError () returned 0x5 [0215.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 8281 os_tid = 0x27f4 [0215.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0215.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.412] GetLastError () returned 0x5 [0215.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 8282 os_tid = 0x27f8 [0215.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0215.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.414] GetLastError () returned 0x5 [0215.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 8283 os_tid = 0x27fc [0215.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst")) returned 0x20 [0223.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0226.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.769] GetLastError () returned 0x5 [0226.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0228.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0f08) returned 1 Thread: id = 8284 os_tid = 0x107c [0215.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss")) returned 0x20 [0223.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0226.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.770] GetLastError () returned 0x5 [0226.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0228.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c1368) returned 1 Thread: id = 8285 os_tid = 0xac8 [0215.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst")) returned 0x20 [0223.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0226.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.770] GetLastError () returned 0x5 [0226.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0228.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f188) returned 1 Thread: id = 8286 os_tid = 0x14c0 [0215.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss")) returned 0x20 [0223.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0226.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.771] GetLastError () returned 0x5 [0226.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f228) returned 1 Thread: id = 8287 os_tid = 0x18f0 [0215.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss")) returned 0x20 [0223.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0226.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.771] GetLastError () returned 0x5 [0226.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f2c8) returned 1 Thread: id = 8288 os_tid = 0x1908 [0215.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss")) returned 0x20 [0223.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0226.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.771] GetLastError () returned 0x5 [0226.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f368) returned 1 Thread: id = 8289 os_tid = 0x190c [0215.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss")) returned 0x20 [0223.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0226.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.772] GetLastError () returned 0x5 [0226.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f408) returned 1 Thread: id = 8290 os_tid = 0x1f9c [0215.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss")) returned 0x20 [0223.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0226.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.773] GetLastError () returned 0x5 [0226.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0228.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f4a8) returned 1 Thread: id = 8291 os_tid = 0x1a90 [0215.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss")) returned 0x20 [0223.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0226.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.773] GetLastError () returned 0x5 [0226.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0228.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f548) returned 1 Thread: id = 8292 os_tid = 0x1a94 [0215.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst")) returned 0x20 [0223.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0226.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.773] GetLastError () returned 0x5 [0226.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0228.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f5e8) returned 1 Thread: id = 8293 os_tid = 0x197c [0215.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst")) returned 0x20 [0223.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0226.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.774] GetLastError () returned 0x5 [0226.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0228.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f688) returned 1 Thread: id = 8294 os_tid = 0x1a98 [0215.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss")) returned 0x20 [0223.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0226.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.774] GetLastError () returned 0x5 [0226.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f728) returned 1 Thread: id = 8295 os_tid = 0x1980 [0215.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss")) returned 0x20 [0223.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0226.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.774] GetLastError () returned 0x5 [0226.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f7c8) returned 1 Thread: id = 8296 os_tid = 0x1984 [0215.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss")) returned 0x20 [0223.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0226.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.775] GetLastError () returned 0x5 [0226.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0228.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f868) returned 1 Thread: id = 8297 os_tid = 0x1a9c [0215.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss")) returned 0x20 [0223.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0226.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.775] GetLastError () returned 0x5 [0226.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0228.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f908) returned 1 Thread: id = 8298 os_tid = 0x1aa0 [0215.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss")) returned 0x20 [0223.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.775] GetLastError () returned 0x5 [0226.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697f9a8) returned 1 Thread: id = 8299 os_tid = 0x1aa4 [0215.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss")) returned 0x20 [0223.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.776] GetLastError () returned 0x5 [0226.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fa48) returned 1 Thread: id = 8300 os_tid = 0x1b34 [0215.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss")) returned 0x20 [0223.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0226.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.776] GetLastError () returned 0x5 [0226.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0228.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fae8) returned 1 Thread: id = 8301 os_tid = 0x1738 [0215.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss")) returned 0x20 [0223.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0226.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.776] GetLastError () returned 0x5 [0226.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0228.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fb88) returned 1 Thread: id = 8302 os_tid = 0x1ae4 [0215.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst")) returned 0x20 [0223.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0226.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.777] GetLastError () returned 0x5 [0226.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0228.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x697fc28) returned 1 Thread: id = 8303 os_tid = 0x11a0 [0215.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst")) returned 0x20 [0223.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0226.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.779] GetLastError () returned 0x5 [0226.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0228.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adce8) returned 1 Thread: id = 8304 os_tid = 0x1ae8 [0215.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss")) returned 0x20 [0223.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0226.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.779] GetLastError () returned 0x5 [0226.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0228.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68add88) returned 1 Thread: id = 8305 os_tid = 0x1aec [0215.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst")) returned 0x20 [0223.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0226.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.780] GetLastError () returned 0x5 [0226.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0228.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ade28) returned 1 Thread: id = 8306 os_tid = 0x1af8 [0215.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss")) returned 0x20 [0223.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0226.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.780] GetLastError () returned 0x5 [0226.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0228.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adec8) returned 1 Thread: id = 8307 os_tid = 0x1afc [0215.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst")) returned 0x20 [0223.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0226.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.780] GetLastError () returned 0x5 [0226.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0228.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68adf68) returned 1 Thread: id = 8309 os_tid = 0x1b00 [0215.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif")) returned 0x20 [0215.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0215.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.672] GetLastError () returned 0x5 [0215.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0215.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8fe8) returned 1 Thread: id = 8310 os_tid = 0x1bc8 [0215.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif")) returned 0x20 [0215.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.958] GetLastError () returned 0x5 [0215.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56af0) returned 1 Thread: id = 8311 os_tid = 0x1b04 [0215.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0215.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.960] GetLastError () returned 0x5 [0215.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8a48) returned 1 Thread: id = 8312 os_tid = 0x1b10 [0215.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0217.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0217.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.223] GetLastError () returned 0x5 [0217.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0217.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d574e8) returned 1 Thread: id = 8313 os_tid = 0x1b18 [0215.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20 [0231.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0231.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.339] GetLastError () returned 0x5 [0231.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0231.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e089e0) returned 1 Thread: id = 8314 os_tid = 0x41c [0215.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20 [0231.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0231.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.342] GetLastError () returned 0x5 [0231.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0231.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f490) returned 1 Thread: id = 8315 os_tid = 0x1570 [0215.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20 [0231.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0231.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.344] GetLastError () returned 0x5 [0231.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0231.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f518) returned 1 Thread: id = 8316 os_tid = 0xdec [0215.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20 [0231.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0231.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.395] GetLastError () returned 0x5 [0231.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0231.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f5a0) returned 1 Thread: id = 8317 os_tid = 0x1c20 [0215.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20 [0231.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0231.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.366] GetLastError () returned 0x5 [0231.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0231.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f628) returned 1 Thread: id = 8318 os_tid = 0x3c8 [0215.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20 [0231.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0231.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.399] GetLastError () returned 0x5 [0231.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0231.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f6b0) returned 1 Thread: id = 8319 os_tid = 0x11ac [0215.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20 [0231.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0231.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.406] GetLastError () returned 0x5 [0231.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0231.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f738) returned 1 Thread: id = 8320 os_tid = 0x13c4 [0215.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir")) returned 0x20 [0215.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0215.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.684] GetLastError () returned 0x5 [0215.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0215.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 8321 os_tid = 0x1754 [0215.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif")) returned 0x20 [0215.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.688] GetLastError () returned 0x5 [0215.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0215.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea71e8) returned 1 Thread: id = 8322 os_tid = 0x1410 [0215.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0215.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.690] GetLastError () returned 0x5 [0215.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0215.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea8c28) returned 1 Thread: id = 8323 os_tid = 0x1414 [0215.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0215.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.691] GetLastError () returned 0x5 [0215.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0215.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea84a8) returned 1 Thread: id = 8324 os_tid = 0x1418 [0215.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20 [0231.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0231.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.403] GetLastError () returned 0x5 [0231.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0231.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f7c0) returned 1 Thread: id = 8325 os_tid = 0x380 [0215.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20 [0231.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0231.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.413] GetLastError () returned 0x5 [0231.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0231.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f848) returned 1 Thread: id = 8326 os_tid = 0x1420 [0215.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20 [0231.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0231.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.416] GetLastError () returned 0x5 [0231.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0231.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f8d0) returned 1 Thread: id = 8327 os_tid = 0xb00 [0215.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20 [0231.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0231.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.418] GetLastError () returned 0x5 [0231.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0231.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f958) returned 1 Thread: id = 8328 os_tid = 0x1c70 [0215.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20 [0231.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0231.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.421] GetLastError () returned 0x5 [0231.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0231.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9f9e0) returned 1 Thread: id = 8329 os_tid = 0x1c7c [0215.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20 [0231.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0231.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.423] GetLastError () returned 0x5 [0231.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0231.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fa68) returned 1 Thread: id = 8330 os_tid = 0xb24 [0215.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20 [0231.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0231.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.428] GetLastError () returned 0x5 [0231.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0231.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9faf0) returned 1 Thread: id = 8331 os_tid = 0xebc [0215.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20 [0231.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0231.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.426] GetLastError () returned 0x5 [0231.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0231.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fb78) returned 1 Thread: id = 8332 os_tid = 0x1dac [0215.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20 [0231.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0231.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.430] GetLastError () returned 0x5 [0231.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0231.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fc00) returned 1 Thread: id = 8333 os_tid = 0xa00 [0215.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20 [0231.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0231.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.431] GetLastError () returned 0x5 [0231.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0231.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fc88) returned 1 Thread: id = 8334 os_tid = 0x80c [0215.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20 [0231.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0231.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.435] GetLastError () returned 0x5 [0231.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0231.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fd10) returned 1 Thread: id = 8335 os_tid = 0x1640 [0215.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20 [0231.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0231.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.433] GetLastError () returned 0x5 [0231.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0231.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fd98) returned 1 Thread: id = 8336 os_tid = 0x1dd0 [0215.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20 [0231.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0231.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.437] GetLastError () returned 0x5 [0231.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0231.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fe20) returned 1 Thread: id = 8337 os_tid = 0x1644 [0215.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20 [0231.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0231.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.440] GetLastError () returned 0x5 [0231.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0231.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9fea8) returned 1 Thread: id = 8338 os_tid = 0x1654 [0215.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20 [0231.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0231.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.442] GetLastError () returned 0x5 [0231.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0231.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ff30) returned 1 Thread: id = 8339 os_tid = 0xa74 [0215.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20 [0231.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0231.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.444] GetLastError () returned 0x5 [0231.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0231.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9ffb8) returned 1 Thread: id = 8340 os_tid = 0x1cd8 [0215.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20 [0231.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0231.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.448] GetLastError () returned 0x5 [0231.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0231.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 8341 os_tid = 0xa84 [0215.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20 [0231.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0231.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.446] GetLastError () returned 0x5 [0231.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0231.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 8342 os_tid = 0xb08 [0215.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20 [0231.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0231.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.450] GetLastError () returned 0x5 [0231.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0231.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 8343 os_tid = 0x1cdc [0215.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20 [0231.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0231.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.455] GetLastError () returned 0x5 [0231.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0231.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 8344 os_tid = 0x1ce0 [0215.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20 [0231.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0231.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.452] GetLastError () returned 0x5 [0231.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0231.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 8345 os_tid = 0x165c [0215.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20 [0231.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0231.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.457] GetLastError () returned 0x5 [0231.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0231.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 8346 os_tid = 0x1ce4 [0215.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20 [0231.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0231.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.459] GetLastError () returned 0x5 [0231.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0231.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 8347 os_tid = 0x1ce8 [0215.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20 [0231.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0231.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.462] GetLastError () returned 0x5 [0231.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0231.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 8348 os_tid = 0x1cec [0215.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20 [0231.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0231.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.464] GetLastError () returned 0x5 [0231.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0231.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f261d8) returned 1 Thread: id = 8349 os_tid = 0x1cf0 [0215.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20 [0231.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0231.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.467] GetLastError () returned 0x5 [0231.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0231.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 8357 os_tid = 0x2008 [0215.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx")) returned 0x20 [0215.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0215.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.983] GetLastError () returned 0x5 [0215.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0215.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae008) returned 1 Thread: id = 8358 os_tid = 0x150 [0215.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx")) returned 0x20 [0215.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0216.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.529] GetLastError () returned 0x5 [0216.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0216.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae0a8) returned 1 Thread: id = 8359 os_tid = 0x140c [0216.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx")) returned 0x20 [0216.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0216.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.997] GetLastError () returned 0x5 [0216.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0216.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee23a8) returned 1 Thread: id = 8360 os_tid = 0xd9c [0216.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx")) returned 0x20 [0216.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0216.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.999] GetLastError () returned 0x5 [0216.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0217.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d340) returned 1 Thread: id = 8361 os_tid = 0x7e4 [0217.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx")) returned 0x20 [0217.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0217.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.001] GetLastError () returned 0x5 [0217.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0217.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae148) returned 1 Thread: id = 8362 os_tid = 0x4b8 [0217.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx")) returned 0x20 [0217.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0217.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.006] GetLastError () returned 0x5 [0217.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0217.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 8363 os_tid = 0x7c4 [0217.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx")) returned 0x20 [0217.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0217.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.008] GetLastError () returned 0x5 [0217.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0217.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 8364 os_tid = 0x17a8 [0217.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx")) returned 0x20 [0217.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0217.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.010] GetLastError () returned 0x5 [0217.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0217.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae1e8) returned 1 Thread: id = 8365 os_tid = 0x1bfc [0217.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx")) returned 0x20 [0217.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0217.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.011] GetLastError () returned 0x5 [0217.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0217.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 8366 os_tid = 0x1c00 [0217.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx")) returned 0x20 [0217.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0217.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.013] GetLastError () returned 0x5 [0217.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0217.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae288) returned 1 Thread: id = 8367 os_tid = 0x1c04 [0217.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx")) returned 0x20 [0218.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0218.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.548] GetLastError () returned 0x5 [0218.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0218.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c0e0) returned 1 Thread: id = 8368 os_tid = 0x1c08 [0217.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx")) returned 0x20 [0217.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0217.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.297] GetLastError () returned 0x5 [0217.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0217.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 8369 os_tid = 0x1798 [0217.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx")) returned 0x20 [0217.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0217.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.298] GetLastError () returned 0x5 [0217.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0217.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 8370 os_tid = 0x1cc8 [0217.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx")) returned 0x20 [0218.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0218.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.547] GetLastError () returned 0x5 [0218.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0218.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5be40) returned 1 Thread: id = 8371 os_tid = 0x1c0c [0217.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0220.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0220.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.266] GetLastError () returned 0x5 [0220.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0220.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 8372 os_tid = 0x1c10 [0217.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0220.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0220.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.392] GetLastError () returned 0x5 [0220.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0220.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d577a0) returned 1 Thread: id = 8373 os_tid = 0x248 [0217.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt")) returned 0x20 [0223.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0226.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.781] GetLastError () returned 0x5 [0226.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0228.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e4d0) returned 1 Thread: id = 8374 os_tid = 0xc08 [0217.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls")) returned 0x20 [0223.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0226.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.781] GetLastError () returned 0x5 [0226.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0228.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae328) returned 1 Thread: id = 8375 os_tid = 0x17d8 [0217.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst")) returned 0x20 [0223.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0226.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.781] GetLastError () returned 0x5 [0226.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0228.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae3c8) returned 1 Thread: id = 8376 os_tid = 0x2080 [0217.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst")) returned 0x20 [0223.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0226.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.782] GetLastError () returned 0x5 [0226.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0228.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae468) returned 1 Thread: id = 8377 os_tid = 0x20ac [0217.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst")) returned 0x20 [0223.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0226.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.782] GetLastError () returned 0x5 [0226.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0228.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae508) returned 1 Thread: id = 8378 os_tid = 0x1784 [0217.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst")) returned 0x20 [0223.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0226.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.782] GetLastError () returned 0x5 [0226.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0228.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae5a8) returned 1 Thread: id = 8379 os_tid = 0xf50 [0217.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst")) returned 0x20 [0223.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0226.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.783] GetLastError () returned 0x5 [0226.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0228.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae648) returned 1 Thread: id = 8380 os_tid = 0xa70 [0217.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst")) returned 0x20 [0223.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0226.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.783] GetLastError () returned 0x5 [0226.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0228.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae6e8) returned 1 Thread: id = 8381 os_tid = 0x1794 [0217.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst")) returned 0x20 [0223.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0226.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.783] GetLastError () returned 0x5 [0226.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0228.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae788) returned 1 Thread: id = 8382 os_tid = 0xbd0 [0217.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20 [0231.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0231.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.475] GetLastError () returned 0x5 [0231.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0231.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 8383 os_tid = 0xe10 [0217.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20 [0231.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0231.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.471] GetLastError () returned 0x5 [0231.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0231.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 8384 os_tid = 0xba8 [0217.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20 [0231.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0231.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.477] GetLastError () returned 0x5 [0231.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0231.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 8385 os_tid = 0x8f0 [0217.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20 [0231.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0231.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.482] GetLastError () returned 0x5 [0231.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0231.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 8386 os_tid = 0x9c0 [0217.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20 [0231.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0231.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.479] GetLastError () returned 0x5 [0231.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0231.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 8387 os_tid = 0x9d0 [0217.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20 [0231.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0231.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.485] GetLastError () returned 0x5 [0231.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0231.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 8388 os_tid = 0x1778 [0217.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20 [0231.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0231.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.490] GetLastError () returned 0x5 [0231.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0231.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 8389 os_tid = 0x9e0 [0217.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20 [0231.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0231.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.488] GetLastError () returned 0x5 [0231.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0231.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 8390 os_tid = 0x220 [0217.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20 [0231.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0231.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.492] GetLastError () returned 0x5 [0231.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0231.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 8391 os_tid = 0x754 [0217.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20 [0231.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0231.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.495] GetLastError () returned 0x5 [0231.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0231.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f02e0) returned 1 Thread: id = 8392 os_tid = 0x17e0 [0217.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20 [0231.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0231.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.497] GetLastError () returned 0x5 [0231.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0231.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ab8) returned 1 Thread: id = 8393 os_tid = 0x1054 [0217.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20 [0231.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0231.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.511] GetLastError () returned 0x5 [0231.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0231.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766b40) returned 1 Thread: id = 8394 os_tid = 0x156c [0217.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20 [0231.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0231.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.499] GetLastError () returned 0x5 [0231.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0231.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766bc8) returned 1 Thread: id = 8395 os_tid = 0x1bb8 [0217.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20 [0231.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0231.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.514] GetLastError () returned 0x5 [0231.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0231.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766c50) returned 1 Thread: id = 8396 os_tid = 0x1bc4 [0217.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20 [0231.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0231.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.516] GetLastError () returned 0x5 [0231.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0231.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766cd8) returned 1 Thread: id = 8397 os_tid = 0x1274 [0217.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20 [0231.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0231.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.519] GetLastError () returned 0x5 [0231.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0231.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766d60) returned 1 Thread: id = 8398 os_tid = 0x1278 [0217.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20 [0231.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0231.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.521] GetLastError () returned 0x5 [0231.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0231.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766de8) returned 1 Thread: id = 8399 os_tid = 0x12cc [0217.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20 [0231.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0231.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.522] GetLastError () returned 0x5 [0231.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0231.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766e70) returned 1 Thread: id = 8400 os_tid = 0x1024 [0217.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20 [0231.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0231.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.525] GetLastError () returned 0x5 [0231.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0231.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766ef8) returned 1 Thread: id = 8401 os_tid = 0x7e0 [0217.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20 [0231.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0231.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.524] GetLastError () returned 0x5 [0231.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0231.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6766f80) returned 1 Thread: id = 8402 os_tid = 0x1848 [0217.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20 [0231.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0231.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.527] GetLastError () returned 0x5 [0231.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0231.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767008) returned 1 Thread: id = 8403 os_tid = 0x22c0 [0217.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20 [0231.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0231.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.529] GetLastError () returned 0x5 [0231.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0231.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767090) returned 1 Thread: id = 8404 os_tid = 0x22c4 [0217.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20 [0231.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0231.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.531] GetLastError () returned 0x5 [0231.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0231.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767118) returned 1 Thread: id = 8405 os_tid = 0x22cc [0217.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20 [0231.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0231.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.535] GetLastError () returned 0x5 [0231.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0231.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67671a0) returned 1 Thread: id = 8406 os_tid = 0x22d4 [0217.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20 [0231.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0231.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.533] GetLastError () returned 0x5 [0231.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0231.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767228) returned 1 Thread: id = 8407 os_tid = 0x22d8 [0217.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20 [0231.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0231.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.537] GetLastError () returned 0x5 [0231.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0231.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67672b0) returned 1 Thread: id = 8408 os_tid = 0x22dc [0217.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20 [0231.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0231.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.539] GetLastError () returned 0x5 [0231.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0231.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767338) returned 1 Thread: id = 8409 os_tid = 0x22e0 [0217.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20 [0231.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0231.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.541] GetLastError () returned 0x5 [0231.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0231.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67673c0) returned 1 Thread: id = 8410 os_tid = 0x22e4 [0217.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini")) returned 0x20 [0217.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0217.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.352] GetLastError () returned 0x5 [0217.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0217.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 8411 os_tid = 0x22e8 [0217.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css")) returned 0x20 [0217.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0217.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.354] GetLastError () returned 0x5 [0217.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0217.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 8412 os_tid = 0x22ec [0217.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css")) returned 0x20 [0217.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0217.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.356] GetLastError () returned 0x5 [0217.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0217.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 8413 os_tid = 0x22f4 [0217.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css")) returned 0x20 [0217.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0217.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.358] GetLastError () returned 0x5 [0217.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0217.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 8414 os_tid = 0x2320 [0217.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css")) returned 0x20 [0218.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0218.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.684] GetLastError () returned 0x5 [0218.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0218.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 8415 os_tid = 0x5f4 [0217.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css")) returned 0x20 [0218.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0218.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.805] GetLastError () returned 0x5 [0218.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0218.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 8416 os_tid = 0x1634 [0217.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css")) returned 0x20 [0218.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0218.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.807] GetLastError () returned 0x5 [0218.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0218.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 8417 os_tid = 0x650 [0217.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css")) returned 0x20 [0218.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0218.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.808] GetLastError () returned 0x5 [0218.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0218.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 8418 os_tid = 0x2398 [0217.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css")) returned 0x20 [0218.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0218.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.810] GetLastError () returned 0x5 [0218.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0218.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d4a0) returned 1 Thread: id = 8419 os_tid = 0x239c [0217.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css")) returned 0x20 [0218.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0218.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.642] GetLastError () returned 0x5 [0218.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0218.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 8420 os_tid = 0x23b8 [0217.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css")) returned 0x20 [0218.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0218.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.825] GetLastError () returned 0x5 [0218.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0218.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 8421 os_tid = 0x23bc [0217.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css")) returned 0x20 [0218.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0218.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.826] GetLastError () returned 0x5 [0218.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0218.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 8422 os_tid = 0x23c0 [0217.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css")) returned 0x20 [0218.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0218.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.828] GetLastError () returned 0x5 [0218.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0218.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bce0) returned 1 Thread: id = 8423 os_tid = 0x2388 [0217.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css")) returned 0x20 [0218.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0218.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.830] GetLastError () returned 0x5 [0218.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0218.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 8424 os_tid = 0x238c [0217.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css")) returned 0x20 [0218.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0218.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.803] GetLastError () returned 0x5 [0218.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0218.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 8425 os_tid = 0xb1c [0217.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css")) returned 0x20 [0218.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0218.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.822] GetLastError () returned 0x5 [0218.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0218.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cd80) returned 1 Thread: id = 8426 os_tid = 0x1118 [0217.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css")) returned 0x20 [0218.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0218.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.831] GetLastError () returned 0x5 [0218.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0218.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 8427 os_tid = 0x1120 [0217.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css")) returned 0x20 [0218.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0218.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.833] GetLastError () returned 0x5 [0218.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 8428 os_tid = 0x1150 [0217.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css")) returned 0x20 [0218.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0218.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.834] GetLastError () returned 0x5 [0218.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0218.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 8429 os_tid = 0x1154 [0217.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css")) returned 0x20 [0218.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0218.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.836] GetLastError () returned 0x5 [0218.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0218.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 8430 os_tid = 0x1fdc [0217.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css")) returned 0x20 [0218.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0218.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.837] GetLastError () returned 0x5 [0218.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0218.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bea8) returned 1 Thread: id = 8431 os_tid = 0x1fe4 [0217.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css")) returned 0x20 [0218.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0218.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.839] GetLastError () returned 0x5 [0218.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0218.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cf48) returned 1 Thread: id = 8432 os_tid = 0x1fe8 [0217.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css")) returned 0x20 [0218.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0218.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.812] GetLastError () returned 0x5 [0218.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0218.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 8433 os_tid = 0x1fec [0217.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css")) returned 0x20 [0218.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0218.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.813] GetLastError () returned 0x5 [0218.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0218.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 8434 os_tid = 0x1ff0 [0217.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css")) returned 0x20 [0218.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0218.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.815] GetLastError () returned 0x5 [0218.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0218.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 8435 os_tid = 0x1ff4 [0217.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css")) returned 0x20 [0218.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0218.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.817] GetLastError () returned 0x5 [0218.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0218.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 8436 os_tid = 0x15c0 [0217.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css")) returned 0x20 [0218.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0218.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.818] GetLastError () returned 0x5 [0218.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0218.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 8437 os_tid = 0x15e4 [0217.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css")) returned 0x20 [0218.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0218.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.820] GetLastError () returned 0x5 [0218.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0218.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 8438 os_tid = 0x1360 [0217.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css")) returned 0x20 [0218.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0218.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.841] GetLastError () returned 0x5 [0218.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0218.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 8439 os_tid = 0x2038 [0217.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css")) returned 0x20 [0218.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0218.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.801] GetLastError () returned 0x5 [0218.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0218.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 8440 os_tid = 0x2040 [0218.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css")) returned 0x20 [0218.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0218.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.823] GetLastError () returned 0x5 [0218.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0218.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 8441 os_tid = 0x2044 [0218.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20 [0231.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0231.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.548] GetLastError () returned 0x5 [0231.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0231.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767448) returned 1 Thread: id = 8442 os_tid = 0x20e4 [0218.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20 [0231.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0231.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.543] GetLastError () returned 0x5 [0231.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0231.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67674d0) returned 1 Thread: id = 8443 os_tid = 0x20e8 [0218.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20 [0231.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0231.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.552] GetLastError () returned 0x5 [0231.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0231.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767558) returned 1 Thread: id = 8444 os_tid = 0x20ec [0218.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20 [0231.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0231.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.554] GetLastError () returned 0x5 [0231.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0231.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67675e0) returned 1 Thread: id = 8445 os_tid = 0x20f4 [0218.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20 [0231.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0231.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.556] GetLastError () returned 0x5 [0231.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0231.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767668) returned 1 Thread: id = 8446 os_tid = 0x2100 [0218.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20 [0231.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0231.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.557] GetLastError () returned 0x5 [0231.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0231.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67676f0) returned 1 Thread: id = 8447 os_tid = 0x2218 [0218.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20 [0231.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0231.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.559] GetLastError () returned 0x5 [0231.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0231.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767778) returned 1 Thread: id = 8448 os_tid = 0x221c [0218.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20 [0231.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0231.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.560] GetLastError () returned 0x5 [0231.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0231.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767800) returned 1 Thread: id = 8449 os_tid = 0x2220 [0218.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20 [0231.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0231.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.562] GetLastError () returned 0x5 [0231.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0231.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767888) returned 1 Thread: id = 8450 os_tid = 0x2224 [0218.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20 [0231.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0231.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.564] GetLastError () returned 0x5 [0231.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0231.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767910) returned 1 Thread: id = 8451 os_tid = 0x2228 [0218.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20 [0231.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0231.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.566] GetLastError () returned 0x5 [0231.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0231.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767998) returned 1 Thread: id = 8452 os_tid = 0x222c [0218.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20 [0231.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0231.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.569] GetLastError () returned 0x5 [0231.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0231.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767a20) returned 1 Thread: id = 8453 os_tid = 0x2230 [0218.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20 [0231.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0231.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.567] GetLastError () returned 0x5 [0231.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0231.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767aa8) returned 1 Thread: id = 8454 os_tid = 0x2234 [0218.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20 [0231.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0231.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.571] GetLastError () returned 0x5 [0231.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0231.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767b30) returned 1 Thread: id = 8455 os_tid = 0x223c [0218.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20 [0231.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0231.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.572] GetLastError () returned 0x5 [0231.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0231.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767bb8) returned 1 Thread: id = 8456 os_tid = 0x2240 [0218.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20 [0231.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0231.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.575] GetLastError () returned 0x5 [0231.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0231.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767c40) returned 1 Thread: id = 8457 os_tid = 0x2244 [0218.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20 [0231.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0231.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.577] GetLastError () returned 0x5 [0231.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0231.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767cc8) returned 1 Thread: id = 8458 os_tid = 0x2248 [0218.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20 [0231.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0231.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.579] GetLastError () returned 0x5 [0231.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0231.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767d50) returned 1 Thread: id = 8459 os_tid = 0x224c [0218.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20 [0231.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0231.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.580] GetLastError () returned 0x5 [0231.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0231.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6767dd8) returned 1 Thread: id = 8464 os_tid = 0x1e28 [0218.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini")) returned 0x20 [0221.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0221.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.952] GetLastError () returned 0x5 [0221.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0221.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc288) returned 1 Thread: id = 8465 os_tid = 0x2420 [0218.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif")) returned 0x20 [0221.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0221.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.948] GetLastError () returned 0x5 [0221.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0221.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32198) returned 1 Thread: id = 8466 os_tid = 0x2374 [0218.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0222.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.015] GetLastError () returned 0x5 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0222.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31520) returned 1 Thread: id = 8467 os_tid = 0x237c [0218.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif")) returned 0x20 [0222.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0222.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.018] GetLastError () returned 0x5 [0222.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0222.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31a78) returned 1 Thread: id = 8468 os_tid = 0x2380 [0218.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif")) returned 0x20 [0221.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0221.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.944] GetLastError () returned 0x5 [0221.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0221.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30648) returned 1 Thread: id = 8469 os_tid = 0x2384 [0218.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif")) returned 0x20 [0222.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0222.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.100] GetLastError () returned 0x5 [0222.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0222.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30810) returned 1 Thread: id = 8470 os_tid = 0x2430 [0218.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif")) returned 0x20 [0222.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0222.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.103] GetLastError () returned 0x5 [0222.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0222.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30d68) returned 1 Thread: id = 8471 os_tid = 0x2434 [0218.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif")) returned 0x20 [0222.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0222.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.029] GetLastError () returned 0x5 [0222.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0222.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e305b0) returned 1 Thread: id = 8472 os_tid = 0x2438 [0218.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif")) returned 0x20 [0221.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0221.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.939] GetLastError () returned 0x5 [0221.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0221.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31060) returned 1 Thread: id = 8473 os_tid = 0x243c [0218.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif")) returned 0x20 [0221.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0221.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.937] GetLastError () returned 0x5 [0221.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0221.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69581a8) returned 1 Thread: id = 8474 os_tid = 0x2440 [0218.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif")) returned 0x20 [0221.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0221.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.935] GetLastError () returned 0x5 [0221.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0221.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958240) returned 1 Thread: id = 8475 os_tid = 0x2448 [0218.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif")) returned 0x20 [0221.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0221.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.933] GetLastError () returned 0x5 [0221.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0221.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd1b8) returned 1 Thread: id = 8476 os_tid = 0x244c [0218.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif")) returned 0x20 [0221.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0221.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.931] GetLastError () returned 0x5 [0221.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0221.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dd098) returned 1 Thread: id = 8477 os_tid = 0x2450 [0218.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif")) returned 0x20 [0221.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0221.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.930] GetLastError () returned 0x5 [0221.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0221.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69582d8) returned 1 Thread: id = 8478 os_tid = 0x2454 [0218.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif")) returned 0x20 [0221.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0221.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.928] GetLastError () returned 0x5 [0221.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0221.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958370) returned 1 Thread: id = 8479 os_tid = 0x2458 [0218.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif")) returned 0x20 [0221.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0221.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.926] GetLastError () returned 0x5 [0221.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0221.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958408) returned 1 Thread: id = 8480 os_tid = 0x245c [0218.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif")) returned 0x20 [0221.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0221.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.922] GetLastError () returned 0x5 [0221.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0221.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69584a0) returned 1 Thread: id = 8481 os_tid = 0x2460 [0218.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif")) returned 0x20 [0221.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0221.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.917] GetLastError () returned 0x5 [0221.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0221.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958538) returned 1 Thread: id = 8482 os_tid = 0x2464 [0218.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif")) returned 0x20 [0221.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0221.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.919] GetLastError () returned 0x5 [0221.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0221.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69585d0) returned 1 Thread: id = 8483 os_tid = 0x2468 [0218.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif")) returned 0x20 [0222.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0222.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.176] GetLastError () returned 0x5 [0222.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0222.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958668) returned 1 Thread: id = 8484 os_tid = 0x246c [0218.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif")) returned 0x20 [0222.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0222.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.160] GetLastError () returned 0x5 [0222.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0222.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958700) returned 1 Thread: id = 8485 os_tid = 0x2470 [0218.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif")) returned 0x20 [0222.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0222.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.098] GetLastError () returned 0x5 [0222.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0222.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958798) returned 1 Thread: id = 8509 os_tid = 0x229c [0218.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20 [0232.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0232.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.981] GetLastError () returned 0x5 [0232.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0232.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67687f0) returned 1 Thread: id = 8510 os_tid = 0x22a0 [0218.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20 [0232.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0232.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.977] GetLastError () returned 0x5 [0232.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0232.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768878) returned 1 Thread: id = 8511 os_tid = 0x22a4 [0218.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20 [0232.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0232.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.974] GetLastError () returned 0x5 [0232.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0232.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6768900) returned 1 Thread: id = 8514 os_tid = 0x22b0 [0218.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf")) returned 0x20 [0232.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0232.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.965] GetLastError () returned 0x5 [0232.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0232.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c060) returned 1 Thread: id = 8515 os_tid = 0x23a8 [0218.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf")) returned 0x20 [0232.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0232.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.963] GetLastError () returned 0x5 [0232.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0232.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c0e8) returned 1 Thread: id = 8516 os_tid = 0x23ac [0218.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg")) returned 0x20 [0232.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0232.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.959] GetLastError () returned 0x5 [0232.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0232.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c170) returned 1 Thread: id = 8517 os_tid = 0x23b0 [0218.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf")) returned 0x20 [0231.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0231.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.610] GetLastError () returned 0x5 [0231.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0231.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c1f8) returned 1 Thread: id = 8518 os_tid = 0x1e4c [0218.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst")) returned 0x20 [0223.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0226.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.791] GetLastError () returned 0x5 [0226.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0228.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 8519 os_tid = 0x1e50 [0218.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst")) returned 0x20 [0223.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0226.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.792] GetLastError () returned 0x5 [0226.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0228.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 8520 os_tid = 0x1e54 [0218.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst")) returned 0x20 [0223.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0226.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.791] GetLastError () returned 0x5 [0226.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0228.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 8521 os_tid = 0x23cc [0218.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss")) returned 0x20 [0223.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.792] GetLastError () returned 0x5 [0226.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 8522 os_tid = 0x23e4 [0218.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss")) returned 0x20 [0223.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.792] GetLastError () returned 0x5 [0226.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 8523 os_tid = 0x23e8 [0218.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst")) returned 0x20 [0223.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0226.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.793] GetLastError () returned 0x5 [0226.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0228.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 8524 os_tid = 0xb50 [0218.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst")) returned 0x20 [0223.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0226.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.793] GetLastError () returned 0x5 [0226.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0228.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c72d8) returned 1 Thread: id = 8525 os_tid = 0x2310 [0218.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss")) returned 0x20 [0223.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.793] GetLastError () returned 0x5 [0226.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 8526 os_tid = 0x23ec [0218.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss")) returned 0x20 [0223.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.794] GetLastError () returned 0x5 [0226.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7238) returned 1 Thread: id = 8527 os_tid = 0x2520 [0218.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss")) returned 0x20 [0223.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.794] GetLastError () returned 0x5 [0226.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 8528 os_tid = 0x2324 [0218.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss")) returned 0x20 [0223.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.794] GetLastError () returned 0x5 [0226.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae288) returned 1 Thread: id = 8529 os_tid = 0x2528 [0218.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss")) returned 0x20 [0223.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0226.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.795] GetLastError () returned 0x5 [0226.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0228.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae1e8) returned 1 Thread: id = 8530 os_tid = 0x1010 [0218.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss")) returned 0x20 [0223.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0226.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.795] GetLastError () returned 0x5 [0226.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0228.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae148) returned 1 Thread: id = 8531 os_tid = 0x1e58 [0219.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss")) returned 0x20 [0223.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0226.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.795] GetLastError () returned 0x5 [0226.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0228.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae0a8) returned 1 Thread: id = 8532 os_tid = 0x1e5c [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst")) returned 0x20 [0223.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0226.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.796] GetLastError () returned 0x5 [0226.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0228.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae008) returned 1 Thread: id = 8533 os_tid = 0x1e60 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss")) returned 0x20 [0223.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0226.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.796] GetLastError () returned 0x5 [0226.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0228.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae828) returned 1 Thread: id = 8534 os_tid = 0x2598 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst")) returned 0x20 [0223.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0226.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.796] GetLastError () returned 0x5 [0226.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0228.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae8c8) returned 1 Thread: id = 8535 os_tid = 0x2490 [0219.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss")) returned 0x20 [0223.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.797] GetLastError () returned 0x5 [0226.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68ae968) returned 1 Thread: id = 8536 os_tid = 0x2498 [0219.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss")) returned 0x20 [0223.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.800] GetLastError () returned 0x5 [0226.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aea08) returned 1 Thread: id = 8537 os_tid = 0x1e64 [0219.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss")) returned 0x20 [0223.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0226.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.798] GetLastError () returned 0x5 [0226.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0228.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aeaa8) returned 1 Thread: id = 8538 os_tid = 0x1e68 [0219.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss")) returned 0x20 [0223.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0226.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.800] GetLastError () returned 0x5 [0226.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0228.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aeb48) returned 1 Thread: id = 8539 os_tid = 0x1e6c [0219.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss")) returned 0x20 [0223.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.801] GetLastError () returned 0x5 [0226.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aebe8) returned 1 Thread: id = 8540 os_tid = 0x1204 [0219.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst")) returned 0x20 [0223.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0226.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.801] GetLastError () returned 0x5 [0226.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0228.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aec88) returned 1 Thread: id = 8541 os_tid = 0x24c0 [0219.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss")) returned 0x20 [0223.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.801] GetLastError () returned 0x5 [0226.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aed28) returned 1 Thread: id = 8542 os_tid = 0x1328 [0219.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst")) returned 0x20 [0223.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0226.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.802] GetLastError () returned 0x5 [0226.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0228.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aedc8) returned 1 Thread: id = 8544 os_tid = 0x24e4 [0219.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css")) returned 0x20 [0219.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0219.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.148] GetLastError () returned 0x5 [0219.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0219.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 8545 os_tid = 0x259c [0219.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css")) returned 0x20 [0219.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0219.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.150] GetLastError () returned 0x5 [0219.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0219.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 8546 os_tid = 0x25a0 [0219.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css")) returned 0x20 [0219.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0219.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.152] GetLastError () returned 0x5 [0219.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0219.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30b08) returned 1 Thread: id = 8547 os_tid = 0x120c [0219.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css")) returned 0x20 [0219.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0219.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.407] GetLastError () returned 0x5 [0219.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0219.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e31650) returned 1 Thread: id = 8548 os_tid = 0x1230 [0219.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css")) returned 0x20 [0219.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0219.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.417] GetLastError () returned 0x5 [0219.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0219.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e322c8) returned 1 Thread: id = 8549 os_tid = 0x25ac [0219.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css")) returned 0x20 [0219.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0219.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.419] GetLastError () returned 0x5 [0219.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0219.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e30e00) returned 1 Thread: id = 8550 os_tid = 0x25b0 [0219.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css")) returned 0x20 [0219.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0219.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.421] GetLastError () returned 0x5 [0219.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0219.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957fe0) returned 1 Thread: id = 8551 os_tid = 0xe0c [0219.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css")) returned 0x20 [0219.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0219.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.422] GetLastError () returned 0x5 [0219.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0219.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958110) returned 1 Thread: id = 8552 os_tid = 0x1234 [0219.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css")) returned 0x20 [0219.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0219.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.424] GetLastError () returned 0x5 [0219.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0219.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957f48) returned 1 Thread: id = 8553 os_tid = 0x25bc [0219.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css")) returned 0x20 [0219.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0219.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.425] GetLastError () returned 0x5 [0219.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0219.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957eb0) returned 1 Thread: id = 8554 os_tid = 0x1238 [0219.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css")) returned 0x20 [0219.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0219.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.427] GetLastError () returned 0x5 [0219.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0219.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957e18) returned 1 Thread: id = 8555 os_tid = 0x1ff8 [0219.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css")) returned 0x20 [0219.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0219.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.428] GetLastError () returned 0x5 [0219.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0219.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957d80) returned 1 Thread: id = 8556 os_tid = 0x1ffc [0219.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css")) returned 0x20 [0219.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0219.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.430] GetLastError () returned 0x5 [0219.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0219.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6957ce8) returned 1 Thread: id = 8557 os_tid = 0x1244 [0219.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css")) returned 0x20 [0219.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0219.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.431] GetLastError () returned 0x5 [0219.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0219.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958078) returned 1 Thread: id = 8558 os_tid = 0x1248 [0219.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css")) returned 0x20 [0219.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0219.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.433] GetLastError () returned 0x5 [0219.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0219.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958b28) returned 1 Thread: id = 8559 os_tid = 0x124c [0219.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css")) returned 0x20 [0219.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0219.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.434] GetLastError () returned 0x5 [0219.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0219.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958bc0) returned 1 Thread: id = 8560 os_tid = 0xd88 [0219.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css")) returned 0x20 [0219.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0219.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.436] GetLastError () returned 0x5 [0219.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0219.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958c58) returned 1 Thread: id = 8561 os_tid = 0x173c [0219.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css")) returned 0x20 [0219.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0219.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.437] GetLastError () returned 0x5 [0219.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0219.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958cf0) returned 1 Thread: id = 8562 os_tid = 0x178c [0219.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css")) returned 0x20 [0219.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0219.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.439] GetLastError () returned 0x5 [0219.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0219.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958d88) returned 1 Thread: id = 8563 os_tid = 0x17dc [0219.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css")) returned 0x20 [0219.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0219.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.441] GetLastError () returned 0x5 [0219.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0219.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958e20) returned 1 Thread: id = 8564 os_tid = 0x22c [0219.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css")) returned 0x20 [0219.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0219.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.442] GetLastError () returned 0x5 [0219.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0219.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958eb8) returned 1 Thread: id = 8565 os_tid = 0x265c [0219.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css")) returned 0x20 [0219.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0219.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.273] GetLastError () returned 0x5 [0219.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958f50) returned 1 Thread: id = 8566 os_tid = 0x26d4 [0219.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css")) returned 0x20 [0219.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0219.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.274] GetLastError () returned 0x5 [0219.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0219.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958fe8) returned 1 Thread: id = 8567 os_tid = 0x26d8 [0219.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf")) returned 0x20 [0231.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0231.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.608] GetLastError () returned 0x5 [0231.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0231.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c280) returned 1 Thread: id = 8568 os_tid = 0x26dc [0219.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf")) returned 0x20 [0231.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0231.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.606] GetLastError () returned 0x5 [0231.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0231.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c308) returned 1 Thread: id = 8569 os_tid = 0x26e0 [0219.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf")) returned 0x20 [0232.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0232.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.940] GetLastError () returned 0x5 [0232.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0232.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c390) returned 1 Thread: id = 8570 os_tid = 0x26e4 [0219.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf")) returned 0x20 [0232.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0232.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.174] GetLastError () returned 0x5 [0232.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0232.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9c418) returned 1 Thread: id = 8591 os_tid = 0x7c8 [0219.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif")) returned 0x20 [0221.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0221.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.949] GetLastError () returned 0x5 [0221.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0221.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6958a90) returned 1 Thread: id = 8593 os_tid = 0x1240 [0219.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif")) returned 0x20 [0221.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0221.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.959] GetLastError () returned 0x5 [0221.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0221.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e32230) returned 1 Thread: id = 8594 os_tid = 0x12fc [0219.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif")) returned 0x20 [0221.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0221.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.957] GetLastError () returned 0x5 [0221.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0221.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69589f8) returned 1 Thread: id = 8595 os_tid = 0x1a68 [0219.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif")) returned 0x20 [0221.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0221.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.955] GetLastError () returned 0x5 [0221.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0221.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959080) returned 1 Thread: id = 8596 os_tid = 0x1970 [0219.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif")) returned 0x20 [0221.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0221.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.954] GetLastError () returned 0x5 [0221.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0221.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959118) returned 1 Thread: id = 8598 os_tid = 0x17b4 [0219.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss")) returned 0x20 [0223.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0226.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.804] GetLastError () returned 0x5 [0226.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0228.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68aef08) returned 1 Thread: id = 8600 os_tid = 0x1a70 [0219.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss")) returned 0x20 [0223.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0226.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.804] GetLastError () returned 0x5 [0226.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0228.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af048) returned 1 Thread: id = 8601 os_tid = 0x1a74 [0219.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss")) returned 0x20 [0223.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0226.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.805] GetLastError () returned 0x5 [0226.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0228.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af0e8) returned 1 Thread: id = 8602 os_tid = 0x1a7c [0219.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss")) returned 0x20 [0223.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0226.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.805] GetLastError () returned 0x5 [0226.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0228.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af188) returned 1 Thread: id = 8603 os_tid = 0x1a80 [0219.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss")) returned 0x20 [0223.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0226.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.806] GetLastError () returned 0x5 [0226.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0228.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af228) returned 1 Thread: id = 8604 os_tid = 0x1a84 [0219.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss")) returned 0x20 [0223.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0226.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.805] GetLastError () returned 0x5 [0226.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0228.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af2c8) returned 1 Thread: id = 8605 os_tid = 0x1974 [0219.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss")) returned 0x20 [0223.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.807] GetLastError () returned 0x5 [0226.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af368) returned 1 Thread: id = 8606 os_tid = 0x1a88 [0219.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss")) returned 0x20 [0223.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.807] GetLastError () returned 0x5 [0226.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af408) returned 1 Thread: id = 8607 os_tid = 0x1978 [0219.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst")) returned 0x20 [0223.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0226.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.807] GetLastError () returned 0x5 [0226.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0228.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af4a8) returned 1 Thread: id = 8608 os_tid = 0x15c [0219.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst")) returned 0x20 [0223.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0226.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.808] GetLastError () returned 0x5 [0226.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0228.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af548) returned 1 Thread: id = 8609 os_tid = 0x1c34 [0219.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst")) returned 0x20 [0223.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0226.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.808] GetLastError () returned 0x5 [0226.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0228.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af5e8) returned 1 Thread: id = 8610 os_tid = 0xe30 [0219.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst")) returned 0x20 [0223.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0226.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.809] GetLastError () returned 0x5 [0226.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0228.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af688) returned 1 Thread: id = 8611 os_tid = 0x1c38 [0219.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss")) returned 0x20 [0223.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0226.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.809] GetLastError () returned 0x5 [0226.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0228.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af728) returned 1 Thread: id = 8612 os_tid = 0xf00 [0219.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss")) returned 0x20 [0223.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0226.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.809] GetLastError () returned 0x5 [0226.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0228.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68af7c8) returned 1 Thread: id = 8621 os_tid = 0x1720 [0219.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf")) returned 0x20 [0231.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0231.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.593] GetLastError () returned 0x5 [0231.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0231.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cf40) returned 1 Thread: id = 8622 os_tid = 0xff4 [0219.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg")) returned 0x20 [0231.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0231.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.591] GetLastError () returned 0x5 [0231.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0231.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9cfc8) returned 1 Thread: id = 8623 os_tid = 0xe28 [0219.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg")) returned 0x20 [0231.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0231.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.635] GetLastError () returned 0x5 [0231.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0231.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d050) returned 1 Thread: id = 8632 os_tid = 0x1bd0 [0219.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf")) returned 0x20 [0233.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0233.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.564] GetLastError () returned 0x5 [0233.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0233.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d518) returned 1 Thread: id = 8634 os_tid = 0x1bd8 [0219.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf")) returned 0x20 [0234.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0234.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.359] GetLastError () returned 0x5 [0234.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0234.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d628) returned 1 Thread: id = 8635 os_tid = 0x1bdc [0219.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf")) returned 0x20 [0234.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0234.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.363] GetLastError () returned 0x5 [0234.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0234.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d6b0) returned 1 Thread: id = 8636 os_tid = 0x1be0 [0219.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf")) returned 0x20 [0234.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0234.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.365] GetLastError () returned 0x5 [0234.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0234.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d738) returned 1 Thread: id = 8637 os_tid = 0x1be4 [0219.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf")) returned 0x20 [0234.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0234.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.367] GetLastError () returned 0x5 [0234.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0234.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9d7c0) returned 1 Thread: id = 8643 os_tid = 0x1b28 [0219.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf")) returned 0x20 [0234.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0234.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.389] GetLastError () returned 0x5 [0234.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0234.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9daf0) returned 1 Thread: id = 8644 os_tid = 0x1b2c [0219.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf")) returned 0x20 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0234.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.552] GetLastError () returned 0x5 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0234.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9db78) returned 1 Thread: id = 8647 os_tid = 0xb0c [0219.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls")) returned 0x20 [0223.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0226.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.816] GetLastError () returned 0x5 [0226.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0228.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e750) returned 1 Thread: id = 8648 os_tid = 0x1b48 [0219.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst")) returned 0x20 [0223.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0226.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.817] GetLastError () returned 0x5 [0226.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0228.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e430) returned 1 Thread: id = 8649 os_tid = 0x212c [0219.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst")) returned 0x20 [0223.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0226.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.816] GetLastError () returned 0x5 [0226.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0228.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0de90) returned 1 Thread: id = 8650 os_tid = 0x2134 [0219.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst")) returned 0x20 [0223.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0226.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.817] GetLastError () returned 0x5 [0226.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0228.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e390) returned 1 Thread: id = 8651 os_tid = 0x2138 [0219.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst")) returned 0x20 [0223.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0226.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.817] GetLastError () returned 0x5 [0226.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0228.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e890) returned 1 Thread: id = 8652 os_tid = 0x213c [0219.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst")) returned 0x20 [0223.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0226.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.818] GetLastError () returned 0x5 [0226.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0228.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dcb0) returned 1 Thread: id = 8653 os_tid = 0x2140 [0219.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst")) returned 0x20 [0223.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0226.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.818] GetLastError () returned 0x5 [0226.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0228.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d210) returned 1 Thread: id = 8654 os_tid = 0x2144 [0219.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst")) returned 0x20 [0223.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0226.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.819] GetLastError () returned 0x5 [0226.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0228.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ecf0) returned 1 Thread: id = 8655 os_tid = 0x2148 [0219.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst")) returned 0x20 [0223.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0226.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.820] GetLastError () returned 0x5 [0226.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0228.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eb10) returned 1 Thread: id = 8656 os_tid = 0x214c [0219.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss")) returned 0x20 [0223.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0226.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.820] GetLastError () returned 0x5 [0226.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0228.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e110) returned 1 Thread: id = 8657 os_tid = 0x2150 [0219.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss")) returned 0x20 [0223.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0226.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.820] GetLastError () returned 0x5 [0226.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0228.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dfd0) returned 1 Thread: id = 8658 os_tid = 0x2154 [0219.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss")) returned 0x20 [0223.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.821] GetLastError () returned 0x5 [0226.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0eed0) returned 1 Thread: id = 8659 os_tid = 0x2158 [0219.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss")) returned 0x20 [0223.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.821] GetLastError () returned 0x5 [0226.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e7f0) returned 1 Thread: id = 8660 os_tid = 0x215c [0219.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst")) returned 0x20 [0223.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0226.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.821] GetLastError () returned 0x5 [0226.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0228.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d2b0) returned 1 Thread: id = 8661 os_tid = 0x2160 [0219.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst")) returned 0x20 [0223.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0226.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.822] GetLastError () returned 0x5 [0226.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0228.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ef70) returned 1 Thread: id = 8662 os_tid = 0x2164 [0219.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss")) returned 0x20 [0223.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0226.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.822] GetLastError () returned 0x5 [0226.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0228.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f010) returned 1 Thread: id = 8663 os_tid = 0x2168 [0219.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss")) returned 0x20 [0223.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0226.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.822] GetLastError () returned 0x5 [0226.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0228.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d710) returned 1 Thread: id = 8664 os_tid = 0x216c [0219.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst")) returned 0x20 [0223.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0226.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.823] GetLastError () returned 0x5 [0226.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0228.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e6b0) returned 1 Thread: id = 8665 os_tid = 0x1350 [0219.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst")) returned 0x20 [0223.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0226.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.823] GetLastError () returned 0x5 [0226.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0228.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e930) returned 1 Thread: id = 8666 os_tid = 0xdbc [0219.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss")) returned 0x20 [0223.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.823] GetLastError () returned 0x5 [0226.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0dc10) returned 1 Thread: id = 8667 os_tid = 0x169c [0219.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss")) returned 0x20 [0223.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0226.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.825] GetLastError () returned 0x5 [0226.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0228.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0e250) returned 1 Thread: id = 8668 os_tid = 0x1aa8 [0219.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss")) returned 0x20 [0223.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0226.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.825] GetLastError () returned 0x5 [0226.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0228.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ebb0) returned 1 Thread: id = 8669 os_tid = 0x1988 [0219.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss")) returned 0x20 [0223.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0226.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.826] GetLastError () returned 0x5 [0226.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0228.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0f0b0) returned 1 Thread: id = 8670 os_tid = 0x199c [0219.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss")) returned 0x20 [0223.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.826] GetLastError () returned 0x5 [0226.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0228.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0d850) returned 1 Thread: id = 8671 os_tid = 0x19a0 [0219.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss")) returned 0x20 [0223.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0226.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.827] GetLastError () returned 0x5 [0226.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0228.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0db70) returned 1 Thread: id = 8672 os_tid = 0x19a4 [0219.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss")) returned 0x20 [0223.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0226.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.827] GetLastError () returned 0x5 [0226.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0228.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ed90) returned 1 Thread: id = 8673 os_tid = 0x19a8 [0219.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf")) returned 0x20 [0234.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0234.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.549] GetLastError () returned 0x5 [0234.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0234.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dc00) returned 1 Thread: id = 8674 os_tid = 0x19ac [0219.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf")) returned 0x20 [0234.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0234.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.543] GetLastError () returned 0x5 [0234.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0234.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dc88) returned 1 Thread: id = 8675 os_tid = 0x1db0 [0219.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf")) returned 0x20 [0234.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0234.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.506] GetLastError () returned 0x5 [0234.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0234.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dd10) returned 1 Thread: id = 8676 os_tid = 0x1944 [0219.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf")) returned 0x20 [0234.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0234.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.832] GetLastError () returned 0x5 [0234.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0234.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dd98) returned 1 Thread: id = 8677 os_tid = 0x1cd0 [0219.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf")) returned 0x20 [0234.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0234.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.585] GetLastError () returned 0x5 [0234.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0234.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9de20) returned 1 Thread: id = 8678 os_tid = 0x1678 [0219.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf")) returned 0x20 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0234.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.574] GetLastError () returned 0x5 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0234.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dea8) returned 1 Thread: id = 8679 os_tid = 0x1044 [0219.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf")) returned 0x20 [0234.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0234.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.569] GetLastError () returned 0x5 [0234.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0234.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9df30) returned 1 Thread: id = 8680 os_tid = 0x1658 [0219.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf")) returned 0x20 [0235.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0235.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.545] GetLastError () returned 0x5 [0235.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0235.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x12e9dfb8) returned 1 Thread: id = 8681 os_tid = 0x6fc [0219.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf")) returned 0x20 [0234.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0234.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.487] GetLastError () returned 0x5 [0234.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0234.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cab8) returned 1 Thread: id = 8682 os_tid = 0x17e8 [0219.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf")) returned 0x20 [0235.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0235.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.553] GetLastError () returned 0x5 [0235.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0235.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cb40) returned 1 Thread: id = 8683 os_tid = 0x17ec [0219.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf")) returned 0x20 [0235.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0235.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.552] GetLastError () returned 0x5 [0235.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0235.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cbc8) returned 1 Thread: id = 8684 os_tid = 0x17f0 [0219.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf")) returned 0x20 [0235.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0235.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.530] GetLastError () returned 0x5 [0235.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0235.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cc50) returned 1 Thread: id = 8685 os_tid = 0x17f4 [0219.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf")) returned 0x20 [0235.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0235.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.550] GetLastError () returned 0x5 [0235.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0235.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ccd8) returned 1 Thread: id = 8686 os_tid = 0x17fc [0219.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf")) returned 0x20 [0235.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0235.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.549] GetLastError () returned 0x5 [0235.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0235.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cd60) returned 1 Thread: id = 8687 os_tid = 0x1c14 [0219.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf")) returned 0x20 [0235.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0235.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.561] GetLastError () returned 0x5 [0235.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0235.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cde8) returned 1 Thread: id = 8688 os_tid = 0x1c18 [0219.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf")) returned 0x20 [0234.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0234.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.019] GetLastError () returned 0x5 [0235.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0235.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ce70) returned 1 Thread: id = 8689 os_tid = 0x1c1c [0219.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf")) returned 0x20 [0235.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0235.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.559] GetLastError () returned 0x5 [0235.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0235.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cef8) returned 1 Thread: id = 8690 os_tid = 0x1b14 [0219.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf")) returned 0x20 [0235.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0235.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.558] GetLastError () returned 0x5 [0235.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0235.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674cf80) returned 1 Thread: id = 8691 os_tid = 0x1268 [0219.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf")) returned 0x20 [0235.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0235.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.556] GetLastError () returned 0x5 [0235.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0235.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d008) returned 1 Thread: id = 8692 os_tid = 0x126c [0219.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf")) returned 0x20 [0234.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0234.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.847] GetLastError () returned 0x5 [0234.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0234.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674d090) returned 1 Thread: id = 8708 os_tid = 0x1530 [0219.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst")) returned 0x20 [0223.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0226.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.837] GetLastError () returned 0x5 [0226.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0228.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c12c8) returned 1 Thread: id = 8711 os_tid = 0x1568 [0219.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss")) returned 0x20 [0223.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0226.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.466] GetLastError () returned 0x5 [0227.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0227.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69c0648) returned 1 Thread: id = 8743 os_tid = 0x1e0c [0219.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif")) returned 0x20 [0221.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0221.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.973] GetLastError () returned 0x5 [0221.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0221.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x69591b0) returned 1 Thread: id = 8813 os_tid = 0x264c [0220.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif")) returned 0x20 [0222.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0222.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.022] GetLastError () returned 0x5 [0222.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0222.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6959b30) returned 1 Thread: id = 8838 os_tid = 0x1ed4 [0220.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd")) returned 0x20 [0226.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0226.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.145] GetLastError () returned 0x5 [0226.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0226.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a9be68) returned 1 Thread: id = 8885 os_tid = 0x11b0 [0220.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf")) returned 0x20 [0235.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0235.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.582] GetLastError () returned 0x5 [0235.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0235.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b81b0) returned 1 Thread: id = 8886 os_tid = 0x5c8 [0220.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf")) returned 0x20 [0235.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0235.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.581] GetLastError () returned 0x5 [0235.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0235.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8238) returned 1 Thread: id = 8887 os_tid = 0x14f0 [0220.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf")) returned 0x20 [0236.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0236.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.090] GetLastError () returned 0x5 [0236.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0236.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b82c0) returned 1 Thread: id = 8888 os_tid = 0xc4c [0220.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf")) returned 0x20 [0235.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0235.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.686] GetLastError () returned 0x5 [0235.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0235.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b8348) returned 1 Thread: id = 8889 os_tid = 0xdc4 [0220.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf")) returned 0x20 [0235.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0235.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.580] GetLastError () returned 0x5 [0235.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0235.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b83d0) returned 1 Thread: id = 8972 os_tid = 0x21b8 [0220.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf")) returned 0x20 [0237.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0237.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.315] GetLastError () returned 0x5 [0237.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0237.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x68b9910) returned 1 Thread: id = 9067 os_tid = 0xda0 [0221.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg")) returned 0x20 [0237.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0237.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.397] GetLastError () returned 0x5 [0237.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0237.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 9088 os_tid = 0x14ec [0221.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x20 [0237.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0237.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.429] GetLastError () returned 0x5 [0237.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0237.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0528) returned 1 Thread: id = 9095 os_tid = 0x1868 [0221.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif")) returned 0x20 [0222.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0222.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.097] GetLastError () returned 0x5 [0222.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0222.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a935d0) returned 1 Thread: id = 9096 os_tid = 0xf70 [0221.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif")) returned 0x20 [0222.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0222.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0222.156] GetLastError () returned 0x5 [0222.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0222.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6a93668) returned 1 Thread: id = 9123 os_tid = 0x2648 [0221.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf")) returned 0x20 [0237.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0237.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0237.441] GetLastError () returned 0x5 [0237.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0237.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c08e0) returned 1 Thread: id = 9238 os_tid = 0x1318 [0237.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf")) returned 0x20 [0241.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0241.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.060] GetLastError () returned 0x5 [0241.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0241.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3a48) returned 1 Thread: id = 9239 os_tid = 0xe40 [0237.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf")) returned 0x20 [0239.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0239.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.023] GetLastError () returned 0x5 [0240.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0240.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3608) returned 1 Thread: id = 9240 os_tid = 0xe60 [0237.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf")) returned 0x20 [0241.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.064] GetLastError () returned 0x5 [0241.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3690) returned 1 Thread: id = 9241 os_tid = 0x1544 [0237.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf")) returned 0x20 [0241.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0241.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.067] GetLastError () returned 0x5 [0241.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0241.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3718) returned 1 Thread: id = 9242 os_tid = 0x1f48 [0237.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf")) returned 0x20 [0239.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0239.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0240.028] GetLastError () returned 0x5 [0240.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0240.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37a0) returned 1 Thread: id = 9243 os_tid = 0x154c [0237.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf")) returned 0x20 [0241.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0241.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.069] GetLastError () returned 0x5 [0241.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0241.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3828) returned 1 Thread: id = 9244 os_tid = 0x1550 [0237.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf")) returned 0x20 [0241.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0241.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.080] GetLastError () returned 0x5 [0241.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0241.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c38b0) returned 1 Thread: id = 9245 os_tid = 0x1554 [0237.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf")) returned 0x20 [0241.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0241.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.478] GetLastError () returned 0x5 [0241.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0241.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3938) returned 1 Thread: id = 9246 os_tid = 0x8b0 [0237.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf")) returned 0x20 [0241.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0241.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.476] GetLastError () returned 0x5 [0241.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0241.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c39c0) returned 1 Thread: id = 9247 os_tid = 0x1850 [0237.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf")) returned 0x20 [0241.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.475] GetLastError () returned 0x5 [0241.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c31c8) returned 1 Thread: id = 9248 os_tid = 0x1f4c [0237.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf")) returned 0x20 [0241.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0241.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.473] GetLastError () returned 0x5 [0241.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0241.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3250) returned 1 Thread: id = 9249 os_tid = 0x8fc [0237.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf")) returned 0x20 [0241.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0241.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.470] GetLastError () returned 0x5 [0241.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0241.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c32d8) returned 1 Thread: id = 9250 os_tid = 0x1b6c [0237.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf")) returned 0x20 [0241.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0241.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.472] GetLastError () returned 0x5 [0241.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0241.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3360) returned 1 Thread: id = 9251 os_tid = 0x1b70 [0237.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf")) returned 0x20 [0241.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0241.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.286] GetLastError () returned 0x5 [0241.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0241.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c33e8) returned 1 Thread: id = 9252 os_tid = 0x1b74 [0237.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf")) returned 0x20 [0241.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0241.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.285] GetLastError () returned 0x5 [0241.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0241.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3470) returned 1 Thread: id = 9253 os_tid = 0x1b78 [0237.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf")) returned 0x20 [0241.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0241.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.284] GetLastError () returned 0x5 [0241.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0241.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3140) returned 1 Thread: id = 9254 os_tid = 0x1b7c [0237.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf")) returned 0x20 [0241.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0241.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.282] GetLastError () returned 0x5 [0241.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0241.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3ad0) returned 1 Thread: id = 9255 os_tid = 0x7b0 [0237.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf")) returned 0x20 [0241.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0241.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.281] GetLastError () returned 0x5 [0241.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0241.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3c68) returned 1 Thread: id = 9256 os_tid = 0x1174 [0237.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid")) returned 0x20 [0241.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0241.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.280] GetLastError () returned 0x5 [0241.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0241.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3be0) returned 1 Thread: id = 9257 os_tid = 0x1184 [0237.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid")) returned 0x20 [0241.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0241.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.278] GetLastError () returned 0x5 [0241.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0241.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3cf0) returned 1 Thread: id = 9258 os_tid = 0x18b8 [0237.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid")) returned 0x20 [0241.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0241.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.275] GetLastError () returned 0x5 [0241.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0241.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3d78) returned 1 Thread: id = 9259 os_tid = 0x19c4 [0237.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid")) returned 0x20 [0241.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0241.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.276] GetLastError () returned 0x5 [0241.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0241.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3e00) returned 1 Thread: id = 9260 os_tid = 0x19cc [0237.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid")) returned 0x20 [0241.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0241.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.266] GetLastError () returned 0x5 [0241.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0241.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3b58) returned 1 Thread: id = 9261 os_tid = 0x19d0 [0237.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid")) returned 0x20 [0241.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0241.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.264] GetLastError () returned 0x5 [0241.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0241.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3e88) returned 1 Thread: id = 9262 os_tid = 0x1008 [0237.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid")) returned 0x20 [0241.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0241.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.261] GetLastError () returned 0x5 [0241.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0241.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3f10) returned 1 Thread: id = 9263 os_tid = 0x1e94 [0237.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid")) returned 0x20 [0241.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0241.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.263] GetLastError () returned 0x5 [0241.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0241.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3f98) returned 1 Thread: id = 9264 os_tid = 0x1280 [0237.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid")) returned 0x20 [0241.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0241.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.260] GetLastError () returned 0x5 [0241.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0241.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27360) returned 1 Thread: id = 9265 os_tid = 0xaf4 [0237.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid")) returned 0x20 [0241.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0241.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.258] GetLastError () returned 0x5 [0241.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0241.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27690) returned 1 Thread: id = 9266 os_tid = 0x934 [0237.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid")) returned 0x20 [0241.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0241.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.256] GetLastError () returned 0x5 [0241.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0241.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27140) returned 1 Thread: id = 9267 os_tid = 0x146c [0237.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid")) returned 0x20 [0241.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0241.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.257] GetLastError () returned 0x5 [0241.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0241.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27938) returned 1 Thread: id = 9268 os_tid = 0x1474 [0237.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid")) returned 0x20 [0241.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0241.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.254] GetLastError () returned 0x5 [0241.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0241.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27718) returned 1 Thread: id = 9269 os_tid = 0x1da8 [0237.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid")) returned 0x20 [0241.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0241.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.253] GetLastError () returned 0x5 [0241.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0241.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26b68) returned 1 Thread: id = 9270 os_tid = 0x1cd4 [0237.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x20 [0241.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0241.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.252] GetLastError () returned 0x5 [0241.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0241.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f261d8) returned 1 Thread: id = 9271 os_tid = 0x1cf8 [0237.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x20 [0241.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.250] GetLastError () returned 0x5 [0241.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26ae0) returned 1 Thread: id = 9272 os_tid = 0x1cfc [0237.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x20 [0241.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0241.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.249] GetLastError () returned 0x5 [0241.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0241.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f278b0) returned 1 Thread: id = 9273 os_tid = 0x1d00 [0237.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x20 [0241.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0241.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.288] GetLastError () returned 0x5 [0241.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0241.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26f20) returned 1 Thread: id = 9274 os_tid = 0x1d04 [0237.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x20 [0241.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0241.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.289] GetLastError () returned 0x5 [0241.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0241.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26260) returned 1 Thread: id = 9275 os_tid = 0x1e30 [0237.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x20 [0241.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0241.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.542] GetLastError () returned 0x5 [0241.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0241.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27828) returned 1 Thread: id = 9276 os_tid = 0x1224 [0237.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x20 [0241.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.540] GetLastError () returned 0x5 [0241.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f269d0) returned 1 Thread: id = 9277 os_tid = 0x2730 [0237.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x20 [0241.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0241.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.539] GetLastError () returned 0x5 [0241.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0241.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f271c8) returned 1 Thread: id = 9278 os_tid = 0x2744 [0237.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x20 [0241.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0241.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.575] GetLastError () returned 0x5 [0241.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0241.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e10) returned 1 Thread: id = 9279 os_tid = 0x2748 [0237.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x20 [0241.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0241.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.537] GetLastError () returned 0x5 [0241.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0241.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f270b8) returned 1 Thread: id = 9280 os_tid = 0xe5c [0237.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x20 [0241.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0241.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.573] GetLastError () returned 0x5 [0241.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0241.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25fb8) returned 1 Thread: id = 9281 os_tid = 0xddc [0237.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x20 [0241.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0241.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.572] GetLastError () returned 0x5 [0241.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0241.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d00) returned 1 Thread: id = 9282 os_tid = 0x17e4 [0237.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x20 [0241.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0241.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.570] GetLastError () returned 0x5 [0241.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0241.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25ea8) returned 1 Thread: id = 9283 os_tid = 0xdac [0237.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x20 [0241.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0241.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.567] GetLastError () returned 0x5 [0241.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0241.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27c68) returned 1 Thread: id = 9284 os_tid = 0x1380 [0237.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x20 [0241.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.569] GetLastError () returned 0x5 [0241.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27b58) returned 1 Thread: id = 9285 os_tid = 0xff8 [0237.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x20 [0241.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0241.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.566] GetLastError () returned 0x5 [0241.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0241.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27580) returned 1 Thread: id = 9286 os_tid = 0x138c [0237.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x20 [0241.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0241.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.564] GetLastError () returned 0x5 [0241.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0241.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26480) returned 1 Thread: id = 9287 os_tid = 0x18fc [0237.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x20 [0241.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0241.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.563] GetLastError () returned 0x5 [0241.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0241.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f263f8) returned 1 Thread: id = 9288 os_tid = 0xb58 [0237.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x20 [0241.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0241.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.267] GetLastError () returned 0x5 [0241.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0241.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27ad0) returned 1 Thread: id = 9289 os_tid = 0xa30 [0237.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x20 [0241.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.268] GetLastError () returned 0x5 [0241.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26508) returned 1 Thread: id = 9290 os_tid = 0x1538 [0237.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x20 [0241.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0241.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.517] GetLastError () returned 0x5 [0241.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0241.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f260c8) returned 1 Thread: id = 9291 os_tid = 0x191c [0237.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x20 [0241.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.515] GetLastError () returned 0x5 [0241.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27470) returned 1 Thread: id = 9292 os_tid = 0x1920 [0237.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x20 [0241.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0241.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.514] GetLastError () returned 0x5 [0241.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0241.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f274f8) returned 1 Thread: id = 9293 os_tid = 0x1924 [0237.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x20 [0241.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0241.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.512] GetLastError () returned 0x5 [0241.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0241.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26e98) returned 1 Thread: id = 9294 os_tid = 0x1928 [0237.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x20 [0241.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0241.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.561] GetLastError () returned 0x5 [0241.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0241.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26c78) returned 1 Thread: id = 9295 os_tid = 0x192c [0237.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x20 [0241.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0241.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.557] GetLastError () returned 0x5 [0241.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0241.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27250) returned 1 Thread: id = 9296 os_tid = 0x1934 [0237.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x20 [0241.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0241.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.559] GetLastError () returned 0x5 [0241.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0241.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26948) returned 1 Thread: id = 9297 os_tid = 0x193c [0237.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x20 [0241.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.556] GetLastError () returned 0x5 [0241.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27a48) returned 1 Thread: id = 9298 os_tid = 0x1940 [0237.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x20 [0241.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0241.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.552] GetLastError () returned 0x5 [0241.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0241.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26618) returned 1 Thread: id = 9299 os_tid = 0x1948 [0237.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x20 [0241.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0241.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.554] GetLastError () returned 0x5 [0241.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0241.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3580) returned 1 Thread: id = 9300 os_tid = 0x194c [0237.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x20 [0241.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0241.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.551] GetLastError () returned 0x5 [0241.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0241.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 Thread: id = 9301 os_tid = 0x1950 [0237.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x20 [0241.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0241.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.548] GetLastError () returned 0x5 [0241.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0241.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0148) returned 1 Thread: id = 9302 os_tid = 0x1954 [0237.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x20 [0241.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0241.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.546] GetLastError () returned 0x5 [0241.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0241.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eea70) returned 1 Thread: id = 9303 os_tid = 0xbc0 [0237.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x20 [0241.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0241.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.545] GetLastError () returned 0x5 [0241.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0241.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec90) returned 1 Thread: id = 9304 os_tid = 0x1a30 [0237.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x20 [0241.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0241.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.543] GetLastError () returned 0x5 [0241.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0241.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efae8) returned 1 Thread: id = 9305 os_tid = 0x195c [0237.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x20 [0241.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0241.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.494] GetLastError () returned 0x5 [0241.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0241.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef0d0) returned 1 Thread: id = 9306 os_tid = 0x1a34 [0237.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x20 [0241.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0241.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.492] GetLastError () returned 0x5 [0241.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0241.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee498) returned 1 Thread: id = 9307 os_tid = 0x1960 [0237.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x20 [0241.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0241.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.493] GetLastError () returned 0x5 [0241.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0241.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee850) returned 1 Thread: id = 9308 os_tid = 0xe70 [0237.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x20 [0241.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0241.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.490] GetLastError () returned 0x5 [0241.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0241.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeaf8) returned 1 Thread: id = 9309 os_tid = 0xe38 [0237.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x20 [0241.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0241.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.535] GetLastError () returned 0x5 [0241.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0241.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eefc0) returned 1 Thread: id = 9310 os_tid = 0xeac [0237.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x20 [0241.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0241.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.531] GetLastError () returned 0x5 [0241.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0241.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee520) returned 1 Thread: id = 9311 os_tid = 0xe00 [0237.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x20 [0241.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0241.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.533] GetLastError () returned 0x5 [0241.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0241.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee740) returned 1 Thread: id = 9312 os_tid = 0xc48 [0237.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x20 [0241.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0241.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.528] GetLastError () returned 0x5 [0241.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0241.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f02e0) returned 1 Thread: id = 9313 os_tid = 0xb04 [0237.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x20 [0241.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0241.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.525] GetLastError () returned 0x5 [0241.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0241.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee9e8) returned 1 Thread: id = 9314 os_tid = 0xac0 [0237.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x20 [0241.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.527] GetLastError () returned 0x5 [0241.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef400) returned 1 Thread: id = 9315 os_tid = 0x1398 [0237.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x20 [0241.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0241.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.523] GetLastError () returned 0x5 [0241.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0241.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef9d8) returned 1 Thread: id = 9316 os_tid = 0x1a1c [0237.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x20 [0241.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0241.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.521] GetLastError () returned 0x5 [0241.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0241.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee960) returned 1 Thread: id = 9317 os_tid = 0x434 [0237.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x20 [0241.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0241.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.522] GetLastError () returned 0x5 [0241.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0241.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66effb0) returned 1 Thread: id = 9318 os_tid = 0x14d0 [0237.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x20 [0241.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0241.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.519] GetLastError () returned 0x5 [0241.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0241.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef1e0) returned 1 Thread: id = 9319 os_tid = 0x1080 [0237.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x20 [0241.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0241.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.518] GetLastError () returned 0x5 [0241.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0241.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd08) returned 1 Thread: id = 9320 os_tid = 0x1084 [0237.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x20 [0241.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0241.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.466] GetLastError () returned 0x5 [0241.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0241.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeda0) returned 1 Thread: id = 9321 os_tid = 0xe84 [0237.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x20 [0241.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0241.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.468] GetLastError () returned 0x5 [0241.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0241.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef268) returned 1 Thread: id = 9322 os_tid = 0xe98 [0237.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x20 [0241.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0241.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.465] GetLastError () returned 0x5 [0241.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0241.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee630) returned 1 Thread: id = 9323 os_tid = 0xea0 [0237.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x20 [0241.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0241.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.510] GetLastError () returned 0x5 [0241.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0241.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f00c0) returned 1 Thread: id = 9324 os_tid = 0xdd4 [0237.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x20 [0241.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0241.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.509] GetLastError () returned 0x5 [0241.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0241.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f01d0) returned 1 Thread: id = 9325 os_tid = 0xe58 [0237.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x20 [0241.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0241.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.506] GetLastError () returned 0x5 [0241.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0241.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eef38) returned 1 Thread: id = 9326 os_tid = 0xee4 [0237.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x20 [0241.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0241.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.507] GetLastError () returned 0x5 [0241.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0241.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeeb0) returned 1 Thread: id = 9327 os_tid = 0x528 [0237.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x20 [0241.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0241.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.505] GetLastError () returned 0x5 [0241.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0241.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef950) returned 1 Thread: id = 9328 os_tid = 0x580 [0237.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x20 [0241.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0241.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.503] GetLastError () returned 0x5 [0241.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0241.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef510) returned 1 Thread: id = 9329 os_tid = 0x564 [0237.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x20 [0241.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0241.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.502] GetLastError () returned 0x5 [0241.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0241.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee5a8) returned 1 Thread: id = 9330 os_tid = 0xe08 [0237.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x20 [0241.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0241.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.500] GetLastError () returned 0x5 [0241.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0241.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eff28) returned 1 Thread: id = 9331 os_tid = 0x518 [0237.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x20 [0241.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0241.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.499] GetLastError () returned 0x5 [0241.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0241.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26728) returned 1 Thread: id = 9332 os_tid = 0x1004 [0237.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x20 [0241.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0241.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.496] GetLastError () returned 0x5 [0241.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0241.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f272d8) returned 1 Thread: id = 9333 os_tid = 0x1034 [0237.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x20 [0241.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0241.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.497] GetLastError () returned 0x5 [0241.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0241.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26fa8) returned 1 Thread: id = 9334 os_tid = 0x10a0 [0237.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x20 [0241.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0241.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.307] GetLastError () returned 0x5 [0241.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0241.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d888) returned 1 Thread: id = 9335 os_tid = 0x10a4 [0237.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x20 [0241.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0241.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.308] GetLastError () returned 0x5 [0241.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0241.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d668) returned 1 Thread: id = 9336 os_tid = 0x10a8 [0237.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x20 [0241.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0241.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.309] GetLastError () returned 0x5 [0241.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0241.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c568) returned 1 Thread: id = 9337 os_tid = 0x14b4 [0237.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x20 [0241.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0241.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.311] GetLastError () returned 0x5 [0241.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0241.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d228) returned 1 Thread: id = 9338 os_tid = 0x184c [0237.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x20 [0241.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0241.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.066] GetLastError () returned 0x5 [0241.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0241.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682db30) returned 1 Thread: id = 9339 os_tid = 0x1124 [0237.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x20 [0241.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0241.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.316] GetLastError () returned 0x5 [0241.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0241.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf08) returned 1 Thread: id = 9340 os_tid = 0x161c [0237.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x20 [0241.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0241.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.317] GetLastError () returned 0x5 [0241.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0241.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dc40) returned 1 Thread: id = 9341 os_tid = 0x1620 [0237.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x20 [0241.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0241.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.318] GetLastError () returned 0x5 [0241.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0241.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d5e0) returned 1 Thread: id = 9342 os_tid = 0xfc0 [0237.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x20 [0241.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0241.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.320] GetLastError () returned 0x5 [0241.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0241.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cbc8) returned 1 Thread: id = 9343 os_tid = 0x1628 [0237.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x20 [0241.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0241.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.321] GetLastError () returned 0x5 [0241.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0241.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c898) returned 1 Thread: id = 9344 os_tid = 0x162c [0237.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x20 [0241.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0241.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.270] GetLastError () returned 0x5 [0241.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0241.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c5f0) returned 1 Thread: id = 9345 os_tid = 0x4f8 [0237.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x20 [0241.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0241.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.322] GetLastError () returned 0x5 [0241.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0241.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d1a0) returned 1 Thread: id = 9346 os_tid = 0x1630 [0237.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x20 [0241.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0241.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.271] GetLastError () returned 0x5 [0241.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0241.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d3c0) returned 1 Thread: id = 9347 os_tid = 0xdc0 [0237.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x20 [0241.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0241.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.273] GetLastError () returned 0x5 [0241.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0241.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c458) returned 1 Thread: id = 9348 os_tid = 0x11f8 [0237.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x20 [0241.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0241.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.274] GetLastError () returned 0x5 [0241.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0241.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bd70) returned 1 Thread: id = 9349 os_tid = 0x211c [0237.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x20 [0241.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0241.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.580] GetLastError () returned 0x5 [0241.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0241.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d008) returned 1 Thread: id = 9350 os_tid = 0x12f8 [0237.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif")) returned 0x20 [0241.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0241.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.325] GetLastError () returned 0x5 [0241.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0241.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d558) returned 1 Thread: id = 9351 os_tid = 0xb88 [0237.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x20 [0241.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0241.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.327] GetLastError () returned 0x5 [0241.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0241.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cc50) returned 1 Thread: id = 9352 os_tid = 0x10c8 [0237.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x20 [0241.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0241.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.328] GetLastError () returned 0x5 [0241.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0241.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c678) returned 1 Thread: id = 9353 os_tid = 0x2190 [0237.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x20 [0241.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0241.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.329] GetLastError () returned 0x5 [0241.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0241.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d448) returned 1 Thread: id = 9354 os_tid = 0xeb8 [0237.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x20 [0241.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0241.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.331] GetLastError () returned 0x5 [0241.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0241.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bdf8) returned 1 Thread: id = 9355 os_tid = 0x14a4 [0237.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x20 [0241.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0241.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.332] GetLastError () returned 0x5 [0241.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0241.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c128) returned 1 Thread: id = 9356 os_tid = 0x1378 [0237.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x20 [0241.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0241.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.333] GetLastError () returned 0x5 [0241.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0241.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bf90) returned 1 Thread: id = 9357 os_tid = 0x2194 [0237.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x20 [0241.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0241.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.290] GetLastError () returned 0x5 [0241.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0241.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ca30) returned 1 Thread: id = 9358 os_tid = 0x2198 [0237.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x20 [0241.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0241.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.292] GetLastError () returned 0x5 [0241.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0241.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d4d0) returned 1 Thread: id = 9359 os_tid = 0x1564 [0237.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x20 [0241.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0241.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.293] GetLastError () returned 0x5 [0241.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0241.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c0a0) returned 1 Thread: id = 9360 os_tid = 0x1d98 [0237.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x20 [0241.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0241.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.294] GetLastError () returned 0x5 [0241.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0241.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cf80) returned 1 Thread: id = 9361 os_tid = 0x1304 [0237.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif")) returned 0x20 [0241.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0241.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.296] GetLastError () returned 0x5 [0241.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0241.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cb40) returned 1 Thread: id = 9362 os_tid = 0x8c0 [0237.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x20 [0241.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0241.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.299] GetLastError () returned 0x5 [0241.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0241.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c1b0) returned 1 Thread: id = 9363 os_tid = 0xa04 [0237.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x20 [0241.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0241.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.300] GetLastError () returned 0x5 [0241.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0241.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c810) returned 1 Thread: id = 9364 os_tid = 0x1d20 [0237.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x20 [0241.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0241.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.301] GetLastError () returned 0x5 [0241.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0241.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c238) returned 1 Thread: id = 9365 os_tid = 0x1d24 [0237.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x20 [0241.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0241.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.303] GetLastError () returned 0x5 [0241.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0241.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ccd8) returned 1 Thread: id = 9366 os_tid = 0x1d34 [0237.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x20 [0241.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0241.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.304] GetLastError () returned 0x5 [0241.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0241.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c2c0) returned 1 Thread: id = 9367 os_tid = 0x1d38 [0237.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x20 [0241.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0241.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.305] GetLastError () returned 0x5 [0241.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0241.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682bce8) returned 1 Thread: id = 9368 os_tid = 0x1744 [0238.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x20 [0241.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0241.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.340] GetLastError () returned 0x5 [0241.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0241.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d778) returned 1 Thread: id = 9369 os_tid = 0x1748 [0238.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x20 [0241.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0241.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.341] GetLastError () returned 0x5 [0241.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0241.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c920) returned 1 Thread: id = 9370 os_tid = 0x1770 [0238.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x20 [0241.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0241.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.390] GetLastError () returned 0x5 [0241.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0241.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c348) returned 1 Thread: id = 9371 os_tid = 0x1074 [0238.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x20 [0241.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0241.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.392] GetLastError () returned 0x5 [0241.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0241.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cde8) returned 1 Thread: id = 9372 os_tid = 0x73c [0238.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x20 [0241.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0241.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.393] GetLastError () returned 0x5 [0241.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0241.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c788) returned 1 Thread: id = 9373 os_tid = 0x1db4 [0238.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x20 [0241.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0241.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.394] GetLastError () returned 0x5 [0241.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0241.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d2b0) returned 1 Thread: id = 9374 os_tid = 0x2594 [0238.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x20 [0241.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0241.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.396] GetLastError () returned 0x5 [0241.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0241.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c9a8) returned 1 Thread: id = 9375 os_tid = 0x24ac [0238.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x20 [0241.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0241.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.397] GetLastError () returned 0x5 [0241.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0241.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c018) returned 1 Thread: id = 9376 os_tid = 0x24cc [0238.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x20 [0241.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0241.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.343] GetLastError () returned 0x5 [0241.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0241.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cd60) returned 1 Thread: id = 9377 os_tid = 0x25cc [0238.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x20 [0241.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0241.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.398] GetLastError () returned 0x5 [0241.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0241.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d6f0) returned 1 Thread: id = 9378 os_tid = 0x25d0 [0238.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x20 [0241.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0241.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.356] GetLastError () returned 0x5 [0241.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0241.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d090) returned 1 Thread: id = 9379 os_tid = 0x25e4 [0238.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x20 [0241.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0241.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.358] GetLastError () returned 0x5 [0241.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0241.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d118) returned 1 Thread: id = 9380 os_tid = 0x2674 [0238.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x20 [0241.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0241.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.359] GetLastError () returned 0x5 [0241.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0241.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d338) returned 1 Thread: id = 9381 os_tid = 0x2678 [0238.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x20 [0241.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0241.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.361] GetLastError () returned 0x5 [0241.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0241.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d800) returned 1 Thread: id = 9382 os_tid = 0x267c [0238.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x20 [0241.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0241.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.362] GetLastError () returned 0x5 [0241.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0241.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d910) returned 1 Thread: id = 9383 os_tid = 0x2680 [0238.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x20 [0241.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0241.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.363] GetLastError () returned 0x5 [0241.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0241.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c4e0) returned 1 Thread: id = 9384 os_tid = 0x2684 [0238.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x20 [0241.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0241.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.365] GetLastError () returned 0x5 [0241.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0241.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c700) returned 1 Thread: id = 9385 os_tid = 0x2688 [0238.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x20 [0241.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0241.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.366] GetLastError () returned 0x5 [0241.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0241.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682d998) returned 1 Thread: id = 9386 os_tid = 0x268c [0238.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x20 [0241.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0241.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.382] GetLastError () returned 0x5 [0241.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0241.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682ce70) returned 1 Thread: id = 9387 os_tid = 0x2694 [0238.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif")) returned 0x20 [0241.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0241.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.384] GetLastError () returned 0x5 [0241.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0241.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cef8) returned 1 Thread: id = 9388 os_tid = 0x2698 [0238.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x20 [0241.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0241.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.385] GetLastError () returned 0x5 [0241.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0241.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682dbb8) returned 1 Thread: id = 9389 os_tid = 0x26b4 [0238.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x20 [0241.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0241.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.386] GetLastError () returned 0x5 [0241.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0241.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682be80) returned 1 Thread: id = 9390 os_tid = 0x26b8 [0238.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif")) returned 0x20 [0241.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0241.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.388] GetLastError () returned 0x5 [0241.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0241.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682daa8) returned 1 Thread: id = 9391 os_tid = 0x26bc [0238.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x20 [0241.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0241.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.070] GetLastError () returned 0x5 [0241.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0241.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682c3d0) returned 1 Thread: id = 9392 os_tid = 0x26c0 [0238.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif")) returned 0x20 [0241.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0241.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.370] GetLastError () returned 0x5 [0241.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0241.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682da20) returned 1 Thread: id = 9393 os_tid = 0x26c4 [0238.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x20 [0241.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0241.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.372] GetLastError () returned 0x5 [0241.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0241.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x682cab8) returned 1 Thread: id = 9394 os_tid = 0x26c8 [0238.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif")) returned 0x20 [0241.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0241.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.373] GetLastError () returned 0x5 [0241.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0241.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c30b8) returned 1 Thread: id = 9395 os_tid = 0x26cc [0238.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif")) returned 0x20 [0241.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0241.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.375] GetLastError () returned 0x5 [0241.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0241.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2f20) returned 1 Thread: id = 9396 os_tid = 0x26d0 [0238.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x20 [0241.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0241.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.376] GetLastError () returned 0x5 [0241.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0241.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2fa8) returned 1 Thread: id = 9397 os_tid = 0x1ef0 [0238.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif")) returned 0x20 [0241.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0241.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.335] GetLastError () returned 0x5 [0241.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0241.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e98) returned 1 Thread: id = 9398 os_tid = 0x10bc [0238.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x20 [0241.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0241.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.336] GetLastError () returned 0x5 [0241.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0241.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2e10) returned 1 Thread: id = 9399 os_tid = 0x1f14 [0238.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif")) returned 0x20 [0241.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0241.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.337] GetLastError () returned 0x5 [0241.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0241.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2d88) returned 1 Thread: id = 9400 os_tid = 0x1c74 [0238.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x20 [0241.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0241.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.339] GetLastError () returned 0x5 [0241.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0241.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2c78) returned 1 Thread: id = 9401 os_tid = 0x101c [0238.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif")) returned 0x20 [0241.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0241.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.428] GetLastError () returned 0x5 [0241.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0241.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2d00) returned 1 Thread: id = 9402 os_tid = 0x27e4 [0238.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x20 [0241.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0241.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.429] GetLastError () returned 0x5 [0241.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0241.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2bf0) returned 1 Thread: id = 9403 os_tid = 0xdb0 [0238.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif")) returned 0x20 [0241.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0241.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.430] GetLastError () returned 0x5 [0241.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0241.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2a58) returned 1 Thread: id = 9404 os_tid = 0x27ec [0238.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x20 [0241.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0241.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.432] GetLastError () returned 0x5 [0241.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0241.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2b68) returned 1 Thread: id = 9405 os_tid = 0x27f0 [0238.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x20 [0241.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0241.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.446] GetLastError () returned 0x5 [0241.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0241.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2ae0) returned 1 Thread: id = 9406 os_tid = 0x27f4 [0238.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x20 [0241.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0241.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.448] GetLastError () returned 0x5 [0241.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0241.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c29d0) returned 1 Thread: id = 9407 os_tid = 0x27f8 [0238.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x20 [0241.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0241.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.433] GetLastError () returned 0x5 [0241.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0241.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2948) returned 1 Thread: id = 9408 os_tid = 0xef4 [0238.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x20 [0241.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0241.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.450] GetLastError () returned 0x5 [0241.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0241.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c28c0) returned 1 Thread: id = 9409 os_tid = 0x1ab4 [0238.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x20 [0241.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0241.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.451] GetLastError () returned 0x5 [0241.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0241.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2838) returned 1 Thread: id = 9410 os_tid = 0x13a8 [0238.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x20 [0241.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0241.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.453] GetLastError () returned 0x5 [0241.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0241.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2728) returned 1 Thread: id = 9411 os_tid = 0x225c [0238.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x20 [0241.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0241.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.454] GetLastError () returned 0x5 [0241.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0241.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c27b0) returned 1 Thread: id = 9412 os_tid = 0x1ea0 [0238.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x20 [0241.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0241.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.456] GetLastError () returned 0x5 [0241.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0241.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c26a0) returned 1 Thread: id = 9413 os_tid = 0x1070 [0238.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x20 [0241.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0241.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.457] GetLastError () returned 0x5 [0241.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0241.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2590) returned 1 Thread: id = 9414 os_tid = 0x1754 [0238.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif")) returned 0x20 [0241.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0241.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.459] GetLastError () returned 0x5 [0241.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0241.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2618) returned 1 Thread: id = 9415 os_tid = 0x1410 [0238.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x20 [0241.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0241.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.460] GetLastError () returned 0x5 [0241.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0241.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2480) returned 1 Thread: id = 9416 os_tid = 0x1414 [0238.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x20 [0241.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0241.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.462] GetLastError () returned 0x5 [0241.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0241.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2508) returned 1 Thread: id = 9417 os_tid = 0x1b00 [0238.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x20 [0241.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0241.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.463] GetLastError () returned 0x5 [0241.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0241.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c23f8) returned 1 Thread: id = 9418 os_tid = 0x21a0 [0238.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif")) returned 0x20 [0241.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0241.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.423] GetLastError () returned 0x5 [0241.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0241.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2370) returned 1 Thread: id = 9419 os_tid = 0xf68 [0238.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x20 [0241.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0241.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.425] GetLastError () returned 0x5 [0241.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0241.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c22e8) returned 1 Thread: id = 9420 os_tid = 0x13c4 [0238.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x20 [0241.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0241.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.426] GetLastError () returned 0x5 [0241.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0241.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2260) returned 1 Thread: id = 9421 os_tid = 0x2560 [0238.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x20 [0241.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0241.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.435] GetLastError () returned 0x5 [0241.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0241.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c21d8) returned 1 Thread: id = 9422 os_tid = 0x3f4 [0238.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x20 [0241.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0241.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.445] GetLastError () returned 0x5 [0241.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0241.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2150) returned 1 Thread: id = 9423 os_tid = 0x1fa4 [0238.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x20 [0241.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0241.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.436] GetLastError () returned 0x5 [0241.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0241.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c2040) returned 1 Thread: id = 9424 os_tid = 0x2260 [0238.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x20 [0241.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0241.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.438] GetLastError () returned 0x5 [0241.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0241.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c20c8) returned 1 Thread: id = 9425 os_tid = 0x1b88 [0238.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x20 [0241.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0241.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.439] GetLastError () returned 0x5 [0241.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0241.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1fb8) returned 1 Thread: id = 9426 os_tid = 0x1068 [0238.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf")) returned 0x20 [0241.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0241.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.441] GetLastError () returned 0x5 [0241.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0241.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674c8b8) returned 1 Thread: id = 9427 os_tid = 0x1bc8 [0238.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x20 [0241.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0241.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.083] GetLastError () returned 0x5 [0241.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0241.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1f30) returned 1 Thread: id = 9428 os_tid = 0x1b04 [0238.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf")) returned 0x20 [0241.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0241.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.084] GetLastError () returned 0x5 [0241.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0241.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1ea8) returned 1 Thread: id = 9429 os_tid = 0x2008 [0238.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x20 [0241.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0241.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.086] GetLastError () returned 0x5 [0241.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0241.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1e20) returned 1 Thread: id = 9430 os_tid = 0x150 [0238.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x20 [0241.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0241.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.087] GetLastError () returned 0x5 [0241.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0241.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d98) returned 1 Thread: id = 9431 os_tid = 0x140c [0238.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf")) returned 0x20 [0241.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0241.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.089] GetLastError () returned 0x5 [0241.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0241.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1d10) returned 1 Thread: id = 9432 os_tid = 0x23c [0238.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf")) returned 0x20 [0241.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.091] GetLastError () returned 0x5 [0241.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1c88) returned 1 Thread: id = 9433 os_tid = 0xd9c [0238.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf")) returned 0x20 [0241.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0241.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.113] GetLastError () returned 0x5 [0241.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0241.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1c00) returned 1 Thread: id = 9434 os_tid = 0x7e4 [0238.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid")) returned 0x20 [0241.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0241.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.093] GetLastError () returned 0x5 [0241.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0241.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1b78) returned 1 Thread: id = 9435 os_tid = 0x4b8 [0238.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid")) returned 0x20 [0241.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0241.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.095] GetLastError () returned 0x5 [0241.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0241.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1af0) returned 1 Thread: id = 9436 os_tid = 0x7c4 [0238.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid")) returned 0x20 [0241.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0241.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.096] GetLastError () returned 0x5 [0241.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0241.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c19e0) returned 1 Thread: id = 9437 os_tid = 0x17a8 [0238.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid")) returned 0x20 [0241.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0241.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.098] GetLastError () returned 0x5 [0241.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0241.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1a68) returned 1 Thread: id = 9438 os_tid = 0x1bfc [0238.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x20 [0241.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0241.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.100] GetLastError () returned 0x5 [0241.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0241.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1958) returned 1 Thread: id = 9439 os_tid = 0x1c00 [0238.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x20 [0241.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0241.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.101] GetLastError () returned 0x5 [0241.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0241.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c18d0) returned 1 Thread: id = 9440 os_tid = 0x1394 [0238.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x20 [0241.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0241.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.114] GetLastError () returned 0x5 [0241.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0241.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c17c0) returned 1 Thread: id = 9441 os_tid = 0x1330 [0238.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x20 [0241.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0241.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.103] GetLastError () returned 0x5 [0241.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0241.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1848) returned 1 Thread: id = 9442 os_tid = 0x1efc [0238.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x20 [0241.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0241.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.116] GetLastError () returned 0x5 [0241.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0241.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1738) returned 1 Thread: id = 9443 os_tid = 0x22e4 [0238.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x20 [0241.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0241.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.121] GetLastError () returned 0x5 [0241.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0241.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c16b0) returned 1 Thread: id = 9444 os_tid = 0x22e8 [0238.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x20 [0241.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.117] GetLastError () returned 0x5 [0241.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1628) returned 1 Thread: id = 9445 os_tid = 0x1b10 [0238.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x20 [0241.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.122] GetLastError () returned 0x5 [0241.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c15a0) returned 1 Thread: id = 9446 os_tid = 0x22ec [0238.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x20 [0241.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0241.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.118] GetLastError () returned 0x5 [0241.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0241.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1518) returned 1 Thread: id = 9447 os_tid = 0x22f4 [0238.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x20 [0241.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0241.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.119] GetLastError () returned 0x5 [0241.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0241.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1490) returned 1 Thread: id = 9448 os_tid = 0x1c08 [0238.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x20 [0241.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0241.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.124] GetLastError () returned 0x5 [0241.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0241.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1408) returned 1 Thread: id = 9449 os_tid = 0x1798 [0238.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x20 [0241.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0241.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.125] GetLastError () returned 0x5 [0241.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0241.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1380) returned 1 Thread: id = 9450 os_tid = 0x1284 [0238.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x20 [0241.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0241.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.081] GetLastError () returned 0x5 [0241.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0241.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1270) returned 1 Thread: id = 9451 os_tid = 0x1e90 [0238.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x20 [0241.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0241.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.161] GetLastError () returned 0x5 [0241.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0241.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c12f8) returned 1 Thread: id = 9452 os_tid = 0x1670 [0238.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf")) returned 0x20 [0241.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0241.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.162] GetLastError () returned 0x5 [0241.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0241.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c11e8) returned 1 Thread: id = 9453 os_tid = 0x1ea8 [0238.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf")) returned 0x20 [0241.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.164] GetLastError () returned 0x5 [0241.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c10d8) returned 1 Thread: id = 9454 os_tid = 0xb78 [0238.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf")) returned 0x20 [0241.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0241.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.165] GetLastError () returned 0x5 [0241.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0241.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1160) returned 1 Thread: id = 9455 os_tid = 0xb9c [0238.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf")) returned 0x20 [0241.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0241.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.181] GetLastError () returned 0x5 [0241.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0241.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c1050) returned 1 Thread: id = 9456 os_tid = 0xb80 [0238.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf")) returned 0x20 [0241.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0241.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.167] GetLastError () returned 0x5 [0241.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0241.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0f40) returned 1 Thread: id = 9457 os_tid = 0x1664 [0238.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf")) returned 0x20 [0241.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0241.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.126] GetLastError () returned 0x5 [0241.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0241.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0fc8) returned 1 Thread: id = 9458 os_tid = 0x1e80 [0238.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf")) returned 0x20 [0241.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0241.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.182] GetLastError () returned 0x5 [0241.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0241.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0eb8) returned 1 Thread: id = 9459 os_tid = 0x14a0 [0238.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf")) returned 0x20 [0241.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.184] GetLastError () returned 0x5 [0241.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0e30) returned 1 Thread: id = 9460 os_tid = 0x1c04 [0238.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf")) returned 0x20 [0241.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0241.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.185] GetLastError () returned 0x5 [0241.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0241.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0da8) returned 1 Thread: id = 9461 os_tid = 0x1cc8 [0238.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf")) returned 0x20 [0241.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0241.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.187] GetLastError () returned 0x5 [0241.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0241.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0d20) returned 1 Thread: id = 9462 os_tid = 0x1a38 [0238.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf")) returned 0x20 [0241.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0241.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.189] GetLastError () returned 0x5 [0241.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0241.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c98) returned 1 Thread: id = 9463 os_tid = 0x1e84 [0238.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf")) returned 0x20 [0241.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0241.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.148] GetLastError () returned 0x5 [0241.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0241.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0b88) returned 1 Thread: id = 9464 os_tid = 0x1e88 [0238.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf")) returned 0x20 [0241.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0241.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.149] GetLastError () returned 0x5 [0241.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0241.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0c10) returned 1 Thread: id = 9465 os_tid = 0x1258 [0238.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf")) returned 0x20 [0241.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0241.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.128] GetLastError () returned 0x5 [0241.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0241.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0b00) returned 1 Thread: id = 9466 os_tid = 0x1458 [0238.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf")) returned 0x20 [0241.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0241.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.129] GetLastError () returned 0x5 [0241.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0241.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0a78) returned 1 Thread: id = 9467 os_tid = 0x145c [0238.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf")) returned 0x20 [0241.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0241.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.130] GetLastError () returned 0x5 [0241.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0241.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c09f0) returned 1 Thread: id = 9468 os_tid = 0x1460 [0238.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf")) returned 0x20 [0241.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0241.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.132] GetLastError () returned 0x5 [0241.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0241.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c08e0) returned 1 Thread: id = 9469 os_tid = 0x974 [0238.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf")) returned 0x20 [0241.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0241.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.133] GetLastError () returned 0x5 [0241.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0241.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0968) returned 1 Thread: id = 9470 os_tid = 0xfc4 [0238.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf")) returned 0x20 [0241.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0241.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.151] GetLastError () returned 0x5 [0241.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0241.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0858) returned 1 Thread: id = 9471 os_tid = 0xb98 [0238.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf")) returned 0x20 [0241.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0241.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.134] GetLastError () returned 0x5 [0241.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0241.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c07d0) returned 1 Thread: id = 9472 os_tid = 0x15a4 [0238.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf")) returned 0x20 [0241.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0241.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.136] GetLastError () returned 0x5 [0241.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0241.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0748) returned 1 Thread: id = 9473 os_tid = 0x12ec [0238.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf")) returned 0x20 [0241.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0241.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.137] GetLastError () returned 0x5 [0241.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0241.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c06c0) returned 1 Thread: id = 9474 os_tid = 0x15a8 [0238.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf")) returned 0x20 [0241.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0241.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.138] GetLastError () returned 0x5 [0241.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0241.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0638) returned 1 Thread: id = 9475 os_tid = 0x15ac [0238.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf")) returned 0x20 [0241.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0241.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.140] GetLastError () returned 0x5 [0241.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0241.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c05b0) returned 1 Thread: id = 9476 os_tid = 0x300 [0238.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf")) returned 0x20 [0241.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0241.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.153] GetLastError () returned 0x5 [0241.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0241.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0528) returned 1 Thread: id = 9477 os_tid = 0x18a4 [0238.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf")) returned 0x20 [0241.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0241.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.141] GetLastError () returned 0x5 [0241.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0241.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c04a0) returned 1 Thread: id = 9478 os_tid = 0xeb4 [0238.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf")) returned 0x20 [0241.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0241.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.143] GetLastError () returned 0x5 [0241.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0241.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0418) returned 1 Thread: id = 9479 os_tid = 0x12f0 [0238.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf")) returned 0x20 [0241.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.144] GetLastError () returned 0x5 [0241.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0241.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0390) returned 1 Thread: id = 9480 os_tid = 0x15b0 [0238.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf")) returned 0x20 [0241.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0241.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.166] GetLastError () returned 0x5 [0241.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0241.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0308) returned 1 Thread: id = 9481 os_tid = 0x12f4 [0238.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf")) returned 0x20 [0241.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0241.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.154] GetLastError () returned 0x5 [0241.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0241.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0280) returned 1 Thread: id = 9482 os_tid = 0xa34 [0238.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf")) returned 0x20 [0241.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0241.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.156] GetLastError () returned 0x5 [0241.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0241.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0170) returned 1 Thread: id = 9483 os_tid = 0xb7c [0238.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf")) returned 0x20 [0241.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0241.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.146] GetLastError () returned 0x5 [0241.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0241.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c01f8) returned 1 Thread: id = 9484 os_tid = 0xeb0 [0238.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf")) returned 0x20 [0241.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0241.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.157] GetLastError () returned 0x5 [0241.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0241.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c00e8) returned 1 Thread: id = 9485 os_tid = 0x6d0 [0238.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf")) returned 0x20 [0241.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0241.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.105] GetLastError () returned 0x5 [0241.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0241.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c0060) returned 1 Thread: id = 9486 os_tid = 0x4e4 [0238.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf")) returned 0x20 [0241.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0241.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.158] GetLastError () returned 0x5 [0241.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0241.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c34f8) returned 1 Thread: id = 9487 os_tid = 0x1e9c [0238.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf")) returned 0x20 [0241.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0241.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.106] GetLastError () returned 0x5 [0241.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0241.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3030) returned 1 Thread: id = 9488 os_tid = 0x1ac4 [0238.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf")) returned 0x20 [0241.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0241.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.109] GetLastError () returned 0x5 [0241.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0241.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26a58) returned 1 Thread: id = 9489 os_tid = 0x6b0 [0238.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf")) returned 0x20 [0241.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0241.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.110] GetLastError () returned 0x5 [0241.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0241.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f267b0) returned 1 Thread: id = 9490 os_tid = 0x11f0 [0238.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf")) returned 0x20 [0241.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0241.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.112] GetLastError () returned 0x5 [0241.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0241.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26370) returned 1 Thread: id = 9491 os_tid = 0x17cc [0238.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf")) returned 0x20 [0241.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.178] GetLastError () returned 0x5 [0241.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0241.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27cf0) returned 1 Thread: id = 9492 os_tid = 0x14bc [0238.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf")) returned 0x20 [0241.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0241.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.159] GetLastError () returned 0x5 [0241.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0241.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26838) returned 1 Thread: id = 9493 os_tid = 0xbd4 [0238.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf")) returned 0x20 [0241.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0241.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.176] GetLastError () returned 0x5 [0241.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0241.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f25f30) returned 1 Thread: id = 9494 os_tid = 0x81c [0238.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf")) returned 0x20 [0241.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0241.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.177] GetLastError () returned 0x5 [0241.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0241.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27030) returned 1 Thread: id = 9495 os_tid = 0x1618 [0238.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf")) returned 0x20 [0241.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0241.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.180] GetLastError () returned 0x5 [0241.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0241.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f262e8) returned 1 Thread: id = 9496 os_tid = 0xbec [0238.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf")) returned 0x20 [0241.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0241.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.053] GetLastError () returned 0x5 [0241.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0241.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27be0) returned 1 Thread: id = 9497 os_tid = 0x1ea4 [0238.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf")) returned 0x20 [0241.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0241.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.052] GetLastError () returned 0x5 [0241.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0241.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f268c0) returned 1 Thread: id = 9498 os_tid = 0x15d0 [0238.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf")) returned 0x20 [0241.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0241.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.764] GetLastError () returned 0x5 [0241.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0241.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27608) returned 1 Thread: id = 9499 os_tid = 0x179c [0238.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf")) returned 0x20 [0241.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0241.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.683] GetLastError () returned 0x5 [0241.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0241.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f279c0) returned 1 Thread: id = 9500 os_tid = 0x17a0 [0238.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf")) returned 0x20 [0241.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0241.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.667] GetLastError () returned 0x5 [0241.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0241.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f266a0) returned 1 Thread: id = 9501 os_tid = 0x17b0 [0238.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf")) returned 0x20 [0241.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.345] GetLastError () returned 0x5 [0241.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0241.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f277a0) returned 1 Thread: id = 9502 os_tid = 0xbbc [0238.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf")) returned 0x20 [0241.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0241.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.346] GetLastError () returned 0x5 [0241.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0241.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26590) returned 1 Thread: id = 9503 os_tid = 0x784 [0238.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf")) returned 0x20 [0241.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0241.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.348] GetLastError () returned 0x5 [0241.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0241.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27e00) returned 1 Thread: id = 9504 os_tid = 0x640 [0238.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf")) returned 0x20 [0241.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0241.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.349] GetLastError () returned 0x5 [0241.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0241.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f273e8) returned 1 Thread: id = 9505 os_tid = 0x4f0 [0238.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf")) returned 0x20 [0241.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.578] GetLastError () returned 0x5 [0241.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0241.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f27d78) returned 1 Thread: id = 9506 os_tid = 0x1444 [0238.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf")) returned 0x20 [0241.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0241.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.351] GetLastError () returned 0x5 [0241.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0241.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26bf0) returned 1 Thread: id = 9507 os_tid = 0x1448 [0238.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf")) returned 0x20 [0241.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0241.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.352] GetLastError () returned 0x5 [0241.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0241.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26d88) returned 1 Thread: id = 9508 os_tid = 0x144c [0238.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf")) returned 0x20 [0241.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.353] GetLastError () returned 0x5 [0241.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0241.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26040) returned 1 Thread: id = 9509 os_tid = 0x12e8 [0238.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf")) returned 0x20 [0241.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0241.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.226] GetLastError () returned 0x5 [0241.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0241.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f26150) returned 1 Thread: id = 9510 os_tid = 0x1584 [0238.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf")) returned 0x20 [0241.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0241.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.355] GetLastError () returned 0x5 [0241.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0241.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efbf8) returned 1 Thread: id = 9511 os_tid = 0x1588 [0238.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf")) returned 0x20 [0241.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0241.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.228] GetLastError () returned 0x5 [0241.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0241.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efd90) returned 1 Thread: id = 9512 os_tid = 0x158c [0238.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf")) returned 0x20 [0241.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0241.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.313] GetLastError () returned 0x5 [0241.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0241.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0038) returned 1 Thread: id = 9513 os_tid = 0x1590 [0238.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf")) returned 0x20 [0241.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0241.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.229] GetLastError () returned 0x5 [0241.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0241.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eed18) returned 1 Thread: id = 9514 os_tid = 0x1594 [0238.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf")) returned 0x20 [0241.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.230] GetLastError () returned 0x5 [0241.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0241.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0368) returned 1 Thread: id = 9515 os_tid = 0x738 [0238.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf")) returned 0x20 [0241.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0241.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.314] GetLastError () returned 0x5 [0241.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0241.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef2f0) returned 1 Thread: id = 9516 os_tid = 0xe34 [0238.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf")) returned 0x20 [0241.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0241.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.059] GetLastError () returned 0x5 [0241.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0241.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efe18) returned 1 Thread: id = 9517 os_tid = 0x15b4 [0238.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf")) returned 0x20 [0241.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0241.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.057] GetLastError () returned 0x5 [0241.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0241.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f0258) returned 1 Thread: id = 9518 os_tid = 0xfec [0238.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf")) returned 0x20 [0241.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0241.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.055] GetLastError () returned 0x5 [0241.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0241.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee6b8) returned 1 Thread: id = 9519 os_tid = 0x8d8 [0238.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf")) returned 0x20 [0241.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0241.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.442] GetLastError () returned 0x5 [0241.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0241.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efc80) returned 1 Thread: id = 9520 os_tid = 0x8d4 [0238.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf")) returned 0x20 [0241.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0241.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.443] GetLastError () returned 0x5 [0241.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0241.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ee7c8) returned 1 Thread: id = 9521 os_tid = 0x8e0 [0238.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf")) returned 0x20 [0241.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0241.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.368] GetLastError () returned 0x5 [0241.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0241.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eeb80) returned 1 Thread: id = 9522 os_tid = 0x9b4 [0238.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf")) returned 0x20 [0241.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0241.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.400] GetLastError () returned 0x5 [0241.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0241.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef378) returned 1 Thread: id = 9523 os_tid = 0xb20 [0238.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf")) returned 0x20 [0241.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0241.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.369] GetLastError () returned 0x5 [0241.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0241.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef730) returned 1 Thread: id = 9524 os_tid = 0xac4 [0238.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf")) returned 0x20 [0241.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0241.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.401] GetLastError () returned 0x5 [0241.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0241.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eee28) returned 1 Thread: id = 9525 os_tid = 0x13fc [0238.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf")) returned 0x20 [0241.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0241.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.403] GetLastError () returned 0x5 [0241.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0241.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efea0) returned 1 Thread: id = 9526 os_tid = 0x2320 [0238.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf")) returned 0x20 [0241.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0241.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.404] GetLastError () returned 0x5 [0241.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0241.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66f03f0) returned 1 Thread: id = 9527 os_tid = 0x239c [0238.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf")) returned 0x20 [0241.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0241.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.406] GetLastError () returned 0x5 [0241.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0241.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66eec08) returned 1 Thread: id = 9528 os_tid = 0x24fc [0238.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf")) returned 0x20 [0241.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0241.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.407] GetLastError () returned 0x5 [0241.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0241.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66ef048) returned 1 Thread: id = 9529 os_tid = 0x5f4 [0238.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf")) returned 0x20 [0241.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0241.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.408] GetLastError () returned 0x5 [0241.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0241.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a1d0) returned 1 Thread: id = 9530 os_tid = 0x1634 [0238.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf")) returned 0x20 [0241.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0241.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.410] GetLastError () returned 0x5 [0241.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0241.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58630) returned 1 Thread: id = 9531 os_tid = 0x650 [0238.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf")) returned 0x20 [0241.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0241.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.411] GetLastError () returned 0x5 [0241.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0241.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59e18) returned 1 Thread: id = 9532 os_tid = 0x2398 [0238.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf")) returned 0x20 [0241.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0241.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.413] GetLastError () returned 0x5 [0241.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0241.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59488) returned 1 Thread: id = 9533 os_tid = 0x2504 [0238.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf")) returned 0x20 [0241.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0241.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.414] GetLastError () returned 0x5 [0241.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0241.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a3f0) returned 1 Thread: id = 9534 os_tid = 0x23b8 [0238.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf")) returned 0x20 [0241.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0241.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.416] GetLastError () returned 0x5 [0241.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0241.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a2e0) returned 1 Thread: id = 9535 os_tid = 0x23bc [0238.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf")) returned 0x20 [0241.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0241.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.418] GetLastError () returned 0x5 [0241.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0241.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a148) returned 1 Thread: id = 9536 os_tid = 0x23c0 [0238.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf")) returned 0x20 [0241.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0241.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.419] GetLastError () returned 0x5 [0241.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0241.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58eb0) returned 1 Thread: id = 9537 os_tid = 0x2388 [0238.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf")) returned 0x20 [0241.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0241.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.421] GetLastError () returned 0x5 [0241.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0241.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59730) returned 1 Thread: id = 9538 os_tid = 0x238c [0238.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf")) returned 0x20 [0241.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0241.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.378] GetLastError () returned 0x5 [0241.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0241.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58740) returned 1 Thread: id = 9539 os_tid = 0xb1c [0238.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf")) returned 0x20 [0241.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0241.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.379] GetLastError () returned 0x5 [0241.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0241.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a368) returned 1 Thread: id = 9540 os_tid = 0x1118 [0238.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf")) returned 0x20 [0241.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0241.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.381] GetLastError () returned 0x5 [0241.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0241.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a258) returned 1 Thread: id = 9541 os_tid = 0x1120 [0238.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf")) returned 0x20 [0241.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0241.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.232] GetLastError () returned 0x5 [0241.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0241.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d597b8) returned 1 Thread: id = 9542 os_tid = 0x1150 [0238.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf")) returned 0x20 [0241.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0241.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.233] GetLastError () returned 0x5 [0241.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0241.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d585a8) returned 1 Thread: id = 9543 os_tid = 0x1154 [0238.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf")) returned 0x20 [0241.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0241.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.235] GetLastError () returned 0x5 [0241.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0241.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d586b8) returned 1 Thread: id = 9544 os_tid = 0x1fdc [0238.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf")) returned 0x20 [0241.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.237] GetLastError () returned 0x5 [0241.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59510) returned 1 Thread: id = 9545 os_tid = 0x1fe4 [0238.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf")) returned 0x20 [0241.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0241.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.239] GetLastError () returned 0x5 [0241.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0241.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59b70) returned 1 Thread: id = 9546 os_tid = 0x1fe8 [0238.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf")) returned 0x20 [0241.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0241.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.240] GetLastError () returned 0x5 [0241.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0241.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 9547 os_tid = 0x1fec [0238.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf")) returned 0x20 [0241.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0241.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.241] GetLastError () returned 0x5 [0241.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0241.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 9548 os_tid = 0x1ff0 [0238.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf")) returned 0x20 [0241.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0241.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.243] GetLastError () returned 0x5 [0241.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0241.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 9549 os_tid = 0x1ff4 [0238.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf")) returned 0x20 [0241.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0241.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.244] GetLastError () returned 0x5 [0241.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0241.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 9550 os_tid = 0x15c0 [0238.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf")) returned 0x20 [0241.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0241.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.246] GetLastError () returned 0x5 [0241.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0241.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 9551 os_tid = 0x15e4 [0238.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf")) returned 0x20 [0241.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0241.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.247] GetLastError () returned 0x5 [0241.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0241.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f820) returned 1 Thread: id = 9552 os_tid = 0x1360 [0238.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf")) returned 0x20 [0241.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0241.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.190] GetLastError () returned 0x5 [0241.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0241.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099c68) returned 1 Thread: id = 9553 os_tid = 0x2038 [0238.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf")) returned 0x20 [0241.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0241.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.191] GetLastError () returned 0x5 [0241.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0241.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099e00) returned 1 Thread: id = 9554 os_tid = 0x2040 [0238.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf")) returned 0x20 [0241.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0241.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.193] GetLastError () returned 0x5 [0241.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0241.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 9555 os_tid = 0x2104 [0238.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf")) returned 0x20 [0241.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0241.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.194] GetLastError () returned 0x5 [0241.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0241.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099ad0) returned 1 Thread: id = 9556 os_tid = 0x24e4 [0238.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf")) returned 0x20 [0241.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0241.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.195] GetLastError () returned 0x5 [0241.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0241.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a570) returned 1 Thread: id = 9557 os_tid = 0x259c [0238.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf")) returned 0x20 [0241.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0241.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.197] GetLastError () returned 0x5 [0241.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0241.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e089e0) returned 1 Thread: id = 9558 os_tid = 0x25a0 [0238.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf")) returned 0x20 [0241.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0241.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.198] GetLastError () returned 0x5 [0241.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0241.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08270) returned 1 Thread: id = 9559 os_tid = 0x265c [0238.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf")) returned 0x20 [0241.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0241.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.199] GetLastError () returned 0x5 [0241.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0241.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 9560 os_tid = 0x26d4 [0238.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf")) returned 0x20 [0241.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0241.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.201] GetLastError () returned 0x5 [0241.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0241.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eab8) returned 1 Thread: id = 9561 os_tid = 0x120c [0238.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf")) returned 0x20 [0241.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0241.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.218] GetLastError () returned 0x5 [0241.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0241.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eb40) returned 1 Thread: id = 9562 os_tid = 0x1230 [0238.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf")) returned 0x20 [0241.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0241.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.220] GetLastError () returned 0x5 [0241.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0241.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ebc8) returned 1 Thread: id = 9563 os_tid = 0x25ac [0238.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf")) returned 0x20 [0241.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0241.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.221] GetLastError () returned 0x5 [0241.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0241.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ec50) returned 1 Thread: id = 9564 os_tid = 0x25b0 [0238.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf")) returned 0x20 [0241.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0241.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.222] GetLastError () returned 0x5 [0241.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0241.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ecd8) returned 1 Thread: id = 9565 os_tid = 0xe0c [0238.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf")) returned 0x20 [0241.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0241.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.224] GetLastError () returned 0x5 [0241.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0241.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ed60) returned 1 Thread: id = 9566 os_tid = 0x1234 [0238.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf")) returned 0x20 [0241.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0241.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.225] GetLastError () returned 0x5 [0241.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0241.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ede8) returned 1 Thread: id = 9567 os_tid = 0x25bc [0238.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf")) returned 0x20 [0241.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0241.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.169] GetLastError () returned 0x5 [0241.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0241.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ee70) returned 1 Thread: id = 9568 os_tid = 0x1238 [0238.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf")) returned 0x20 [0241.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0241.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.171] GetLastError () returned 0x5 [0241.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0241.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674eef8) returned 1 Thread: id = 9569 os_tid = 0x1ff8 [0238.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf")) returned 0x20 [0241.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0241.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.172] GetLastError () returned 0x5 [0241.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0241.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ef80) returned 1 Thread: id = 9570 os_tid = 0x1ffc [0238.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf")) returned 0x20 [0241.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0241.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.173] GetLastError () returned 0x5 [0241.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0241.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f008) returned 1 Thread: id = 9571 os_tid = 0x1244 [0238.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf")) returned 0x20 [0241.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0241.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.175] GetLastError () returned 0x5 [0241.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0241.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f090) returned 1 Thread: id = 9573 os_tid = 0x124c [0239.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf")) returned 0x20 [0241.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0241.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.078] GetLastError () returned 0x5 [0241.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0241.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f118) returned 1 Thread: id = 9574 os_tid = 0xd88 [0239.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf")) returned 0x20 [0241.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0241.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.076] GetLastError () returned 0x5 [0241.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0241.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f1a0) returned 1 Thread: id = 9575 os_tid = 0x173c [0239.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf")) returned 0x20 [0241.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0241.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.074] GetLastError () returned 0x5 [0241.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0241.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f228) returned 1 Thread: id = 9576 os_tid = 0x178c [0239.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf")) returned 0x20 [0241.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0241.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.072] GetLastError () returned 0x5 [0241.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0241.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f2b0) returned 1 Thread: id = 9577 os_tid = 0x17dc [0239.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf")) returned 0x20 [0241.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.609] GetLastError () returned 0x5 [0241.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0241.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f338) returned 1 Thread: id = 9578 os_tid = 0x22c [0239.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf")) returned 0x20 [0241.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0241.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.577] GetLastError () returned 0x5 [0241.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0241.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f3c0) returned 1 Thread: id = 9579 os_tid = 0x226c [0239.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf")) returned 0x20 [0241.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.608] GetLastError () returned 0x5 [0241.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0241.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f448) returned 1 Thread: id = 9580 os_tid = 0x27e8 [0239.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf")) returned 0x20 [0241.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0241.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.606] GetLastError () returned 0x5 [0241.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0241.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f4d0) returned 1 Thread: id = 9581 os_tid = 0x1b84 [0239.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf")) returned 0x20 [0241.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0241.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.604] GetLastError () returned 0x5 [0241.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0241.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f558) returned 1 Thread: id = 9582 os_tid = 0x1c0c [0239.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf")) returned 0x20 [0241.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.602] GetLastError () returned 0x5 [0241.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0241.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f5e0) returned 1 Thread: id = 9583 os_tid = 0x1b80 [0239.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf")) returned 0x20 [0241.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0241.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.601] GetLastError () returned 0x5 [0241.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0241.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f668) returned 1 Thread: id = 9584 os_tid = 0x964 [0239.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf")) returned 0x20 [0241.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0241.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.599] GetLastError () returned 0x5 [0241.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0241.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f6f0) returned 1 Thread: id = 9585 os_tid = 0x1c10 [0239.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf")) returned 0x20 [0241.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0241.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.598] GetLastError () returned 0x5 [0241.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0241.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f778) returned 1 Thread: id = 9586 os_tid = 0x1b58 [0239.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf")) returned 0x20 [0241.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0241.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.596] GetLastError () returned 0x5 [0241.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0241.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f800) returned 1 Thread: id = 9587 os_tid = 0x10e0 [0239.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf")) returned 0x20 [0241.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0241.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.594] GetLastError () returned 0x5 [0241.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0241.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f888) returned 1 Thread: id = 9588 os_tid = 0x1404 [0239.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf")) returned 0x20 [0241.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0241.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.593] GetLastError () returned 0x5 [0241.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0241.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f910) returned 1 Thread: id = 9589 os_tid = 0x204c [0239.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf")) returned 0x20 [0241.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0241.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.591] GetLastError () returned 0x5 [0241.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0241.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674f998) returned 1 Thread: id = 9590 os_tid = 0x9c4 [0239.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf")) returned 0x20 [0241.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0241.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.590] GetLastError () returned 0x5 [0241.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0241.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fa20) returned 1 Thread: id = 9591 os_tid = 0x17b8 [0239.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf")) returned 0x20 [0241.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0241.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.588] GetLastError () returned 0x5 [0241.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0241.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674faa8) returned 1 Thread: id = 9592 os_tid = 0xb40 [0239.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf")) returned 0x20 [0241.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0241.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.582] GetLastError () returned 0x5 [0241.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0241.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fb30) returned 1 Thread: id = 9593 os_tid = 0x1a20 [0239.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf")) returned 0x20 [0241.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0241.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.586] GetLastError () returned 0x5 [0241.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0241.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fbb8) returned 1 Thread: id = 9594 os_tid = 0x2460 [0239.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid")) returned 0x20 [0241.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0241.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.489] GetLastError () returned 0x5 [0241.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0241.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fc40) returned 1 Thread: id = 9595 os_tid = 0x2448 [0239.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid")) returned 0x20 [0241.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0241.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.487] GetLastError () returned 0x5 [0241.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0241.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fcc8) returned 1 Thread: id = 9596 os_tid = 0x244c [0239.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf")) returned 0x20 [0241.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0241.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.585] GetLastError () returned 0x5 [0241.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0241.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fd50) returned 1 Thread: id = 9597 os_tid = 0x2450 [0239.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf")) returned 0x20 [0241.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0241.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.583] GetLastError () returned 0x5 [0241.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0241.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fdd8) returned 1 Thread: id = 9598 os_tid = 0x2454 [0239.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid")) returned 0x20 [0241.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0241.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.486] GetLastError () returned 0x5 [0241.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0241.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fe60) returned 1 Thread: id = 9599 os_tid = 0x2458 [0239.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid")) returned 0x20 [0241.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0241.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.484] GetLastError () returned 0x5 [0241.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0241.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fee8) returned 1 Thread: id = 9600 os_tid = 0x245c [0239.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf")) returned 0x20 [0241.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0241.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.482] GetLastError () returned 0x5 [0241.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0241.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674ff70) returned 1 Thread: id = 9601 os_tid = 0x2464 [0239.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf")) returned 0x20 [0241.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0241.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.480] GetLastError () returned 0x5 [0241.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0241.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674fff8) returned 1 Thread: id = 9602 os_tid = 0x2420 [0239.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf")) returned 0x20 [0241.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0241.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.652] GetLastError () returned 0x5 [0241.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0241.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750080) returned 1 Thread: id = 9603 os_tid = 0x2380 [0239.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf")) returned 0x20 [0241.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.650] GetLastError () returned 0x5 [0241.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0241.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750108) returned 1 Thread: id = 9604 os_tid = 0x2438 [0239.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf")) returned 0x20 [0241.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0241.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.648] GetLastError () returned 0x5 [0241.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0241.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750190) returned 1 Thread: id = 9605 os_tid = 0x243c [0239.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf")) returned 0x20 [0241.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0241.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.646] GetLastError () returned 0x5 [0241.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0241.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750218) returned 1 Thread: id = 9606 os_tid = 0x2440 [0239.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf")) returned 0x20 [0241.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0241.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.643] GetLastError () returned 0x5 [0241.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0241.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67502a0) returned 1 Thread: id = 9607 os_tid = 0x2478 [0239.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf")) returned 0x20 [0241.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0241.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.642] GetLastError () returned 0x5 [0241.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0241.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750328) returned 1 Thread: id = 9608 os_tid = 0x1020 [0239.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf")) returned 0x20 [0241.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0241.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.640] GetLastError () returned 0x5 [0241.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0241.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67503b0) returned 1 Thread: id = 9609 os_tid = 0x2210 [0239.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf")) returned 0x20 [0241.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0241.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.638] GetLastError () returned 0x5 [0241.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0241.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750438) returned 1 Thread: id = 9610 os_tid = 0x7c8 [0239.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf")) returned 0x20 [0241.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0241.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.636] GetLastError () returned 0x5 [0241.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0241.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67504c0) returned 1 Thread: id = 9611 os_tid = 0x1e28 [0239.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf")) returned 0x20 [0241.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0241.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.634] GetLastError () returned 0x5 [0241.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0241.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750548) returned 1 Thread: id = 9612 os_tid = 0x123c [0239.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf")) returned 0x20 [0241.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0241.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.632] GetLastError () returned 0x5 [0241.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0241.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67505d0) returned 1 Thread: id = 9613 os_tid = 0x1240 [0239.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf")) returned 0x20 [0241.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0241.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.626] GetLastError () returned 0x5 [0241.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0241.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750658) returned 1 Thread: id = 9614 os_tid = 0x12fc [0239.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf")) returned 0x20 [0241.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0241.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.631] GetLastError () returned 0x5 [0241.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0241.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67506e0) returned 1 Thread: id = 9615 os_tid = 0x1a68 [0239.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf")) returned 0x20 [0241.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.624] GetLastError () returned 0x5 [0241.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0241.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750768) returned 1 Thread: id = 9616 os_tid = 0x1970 [0239.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf")) returned 0x20 [0241.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0241.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.623] GetLastError () returned 0x5 [0241.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0241.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67507f0) returned 1 Thread: id = 9617 os_tid = 0x1dd4 [0239.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf")) returned 0x20 [0241.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0241.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.621] GetLastError () returned 0x5 [0241.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0241.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750878) returned 1 Thread: id = 9618 os_tid = 0x1dd8 [0239.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf")) returned 0x20 [0241.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0241.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.619] GetLastError () returned 0x5 [0241.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0241.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x674af38) returned 1 Thread: id = 9619 os_tid = 0x1438 [0239.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf")) returned 0x20 [0241.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0241.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.629] GetLastError () returned 0x5 [0241.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0241.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750900) returned 1 Thread: id = 9620 os_tid = 0x1dc8 [0239.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf")) returned 0x20 [0241.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.628] GetLastError () returned 0x5 [0241.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0241.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750988) returned 1 Thread: id = 9621 os_tid = 0x1dfc [0239.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf")) returned 0x20 [0241.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.664] GetLastError () returned 0x5 [0241.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0241.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6750a10) returned 1 Thread: id = 9622 os_tid = 0x1e00 [0239.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf")) returned 0x20 [0241.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.618] GetLastError () returned 0x5 [0241.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778ab8) returned 1 Thread: id = 9623 os_tid = 0x1e04 [0239.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf")) returned 0x20 [0241.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0241.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.662] GetLastError () returned 0x5 [0241.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0241.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778b40) returned 1 Thread: id = 9624 os_tid = 0x1e08 [0239.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf")) returned 0x20 [0241.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0241.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.616] GetLastError () returned 0x5 [0241.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0241.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778bc8) returned 1 Thread: id = 9625 os_tid = 0x1e0c [0239.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf")) returned 0x20 [0241.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0241.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.614] GetLastError () returned 0x5 [0241.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0241.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778c50) returned 1 Thread: id = 9626 os_tid = 0x1e10 [0239.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf")) returned 0x20 [0241.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.660] GetLastError () returned 0x5 [0241.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0241.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778cd8) returned 1 Thread: id = 9627 os_tid = 0x20f0 [0239.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf")) returned 0x20 [0241.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0241.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.659] GetLastError () returned 0x5 [0241.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0241.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778d60) returned 1 Thread: id = 9628 os_tid = 0x1ddc [0239.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf")) returned 0x20 [0241.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0241.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.657] GetLastError () returned 0x5 [0241.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0241.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778de8) returned 1 Thread: id = 9629 os_tid = 0x1de0 [0239.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf")) returned 0x20 [0241.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0241.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.656] GetLastError () returned 0x5 [0241.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0241.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778e70) returned 1 Thread: id = 9630 os_tid = 0x1de4 [0239.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf")) returned 0x20 [0241.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0241.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.613] GetLastError () returned 0x5 [0241.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0241.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778ef8) returned 1 Thread: id = 9631 os_tid = 0x1de8 [0239.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf")) returned 0x20 [0241.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0241.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.654] GetLastError () returned 0x5 [0241.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0241.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6778f80) returned 1 Thread: id = 9632 os_tid = 0x1dec [0239.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf")) returned 0x20 [0241.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0241.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.677] GetLastError () returned 0x5 [0241.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0241.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779008) returned 1 Thread: id = 9633 os_tid = 0x1df0 [0239.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf")) returned 0x20 [0241.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0241.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.675] GetLastError () returned 0x5 [0241.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0241.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779090) returned 1 Thread: id = 9634 os_tid = 0x1df4 [0239.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf")) returned 0x20 [0241.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0241.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.673] GetLastError () returned 0x5 [0241.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0241.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779118) returned 1 Thread: id = 9635 os_tid = 0x1df8 [0239.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf")) returned 0x20 [0241.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0241.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.681] GetLastError () returned 0x5 [0241.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0241.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67791a0) returned 1 Thread: id = 9636 os_tid = 0x242c [0239.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf")) returned 0x20 [0241.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0241.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.672] GetLastError () returned 0x5 [0241.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0241.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779228) returned 1 Thread: id = 9637 os_tid = 0x130c [0240.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf")) returned 0x20 [0241.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0241.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.680] GetLastError () returned 0x5 [0241.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0241.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67792b0) returned 1 Thread: id = 9638 os_tid = 0x11d8 [0240.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf")) returned 0x20 [0241.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.670] GetLastError () returned 0x5 [0241.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0241.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779338) returned 1 Thread: id = 9639 os_tid = 0x11e0 [0240.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf")) returned 0x20 [0241.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.668] GetLastError () returned 0x5 [0241.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0241.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67793c0) returned 1 Thread: id = 9640 os_tid = 0x1e1c [0240.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf")) returned 0x20 [0241.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0241.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.678] GetLastError () returned 0x5 [0241.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0241.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779448) returned 1 Thread: id = 9641 os_tid = 0x1e20 [0240.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf")) returned 0x20 [0241.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0241.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.701] GetLastError () returned 0x5 [0241.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0241.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c37a0) returned 1 Thread: id = 9642 os_tid = 0x1e24 [0240.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf")) returned 0x20 [0241.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0241.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.724] GetLastError () returned 0x5 [0241.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0241.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66c3608) returned 1 Thread: id = 9643 os_tid = 0x2424 [0240.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf")) returned 0x20 [0241.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0241.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.723] GetLastError () returned 0x5 [0241.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0241.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67794d0) returned 1 Thread: id = 9644 os_tid = 0x2378 [0240.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf")) returned 0x20 [0241.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0241.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.720] GetLastError () returned 0x5 [0241.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0241.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779558) returned 1 Thread: id = 9645 os_tid = 0x264c [0240.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf")) returned 0x20 [0241.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0241.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.699] GetLastError () returned 0x5 [0241.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0241.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67795e0) returned 1 Thread: id = 9646 os_tid = 0x2374 [0240.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf")) returned 0x20 [0241.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0241.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.698] GetLastError () returned 0x5 [0241.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0241.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779668) returned 1 Thread: id = 9647 os_tid = 0x237c [0240.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf")) returned 0x20 [0241.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0241.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.718] GetLastError () returned 0x5 [0241.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0241.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67796f0) returned 1 Thread: id = 9648 os_tid = 0x2650 [0240.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf")) returned 0x20 [0241.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0241.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.696] GetLastError () returned 0x5 [0241.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0241.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779778) returned 1 Thread: id = 9649 os_tid = 0x1e14 [0240.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf")) returned 0x20 [0241.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0241.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.694] GetLastError () returned 0x5 [0241.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0241.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779800) returned 1 Thread: id = 9650 os_tid = 0x2444 [0240.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid")) returned 0x20 [0241.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0241.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.693] GetLastError () returned 0x5 [0241.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0241.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779888) returned 1 Thread: id = 9651 os_tid = 0x2654 [0240.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x20 [0241.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0241.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.726] GetLastError () returned 0x5 [0241.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0241.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779910) returned 1 Thread: id = 9652 os_tid = 0x2658 [0240.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif")) returned 0x20 [0241.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0241.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.691] GetLastError () returned 0x5 [0241.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0241.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779998) returned 1 Thread: id = 9653 os_tid = 0x2660 [0240.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif")) returned 0x20 [0241.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0241.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.690] GetLastError () returned 0x5 [0241.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0241.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779a20) returned 1 Thread: id = 9654 os_tid = 0x2434 [0240.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif")) returned 0x20 [0241.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0241.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.688] GetLastError () returned 0x5 [0241.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0241.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779aa8) returned 1 Thread: id = 9655 os_tid = 0x11c4 [0240.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif")) returned 0x20 [0241.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0241.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.046] GetLastError () returned 0x5 [0241.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0241.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779b30) returned 1 Thread: id = 9656 os_tid = 0x84c [0240.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif")) returned 0x20 [0241.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0241.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.743] GetLastError () returned 0x5 [0241.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0241.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779bb8) returned 1 Thread: id = 9657 os_tid = 0x15c8 [0240.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif")) returned 0x20 [0241.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0241.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.741] GetLastError () returned 0x5 [0241.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0241.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779c40) returned 1 Thread: id = 9658 os_tid = 0x89c [0240.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif")) returned 0x20 [0241.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0241.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.738] GetLastError () returned 0x5 [0241.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0241.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779cc8) returned 1 Thread: id = 9659 os_tid = 0x1860 [0240.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif")) returned 0x20 [0241.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0241.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.686] GetLastError () returned 0x5 [0241.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0241.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779d50) returned 1 Thread: id = 9660 os_tid = 0x7b4 [0240.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif")) returned 0x20 [0241.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0241.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.684] GetLastError () returned 0x5 [0241.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0241.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779dd8) returned 1 Thread: id = 9661 os_tid = 0x114c [0240.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif")) returned 0x20 [0241.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0241.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.717] GetLastError () returned 0x5 [0241.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0241.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779e60) returned 1 Thread: id = 9662 os_tid = 0x18cc [0240.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif")) returned 0x20 [0241.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0241.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.715] GetLastError () returned 0x5 [0241.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0241.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779ee8) returned 1 Thread: id = 9663 os_tid = 0x9d4 [0240.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif")) returned 0x20 [0241.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0241.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.713] GetLastError () returned 0x5 [0241.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0241.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779f70) returned 1 Thread: id = 9664 os_tid = 0x2620 [0240.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif")) returned 0x20 [0241.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0241.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.710] GetLastError () returned 0x5 [0241.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0241.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6779ff8) returned 1 Thread: id = 9665 os_tid = 0x9e4 [0240.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif")) returned 0x20 [0241.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0241.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.737] GetLastError () returned 0x5 [0241.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0241.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a080) returned 1 Thread: id = 9666 os_tid = 0x9f4 [0240.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif")) returned 0x20 [0241.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0241.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.708] GetLastError () returned 0x5 [0241.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0241.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a108) returned 1 Thread: id = 9667 os_tid = 0xb34 [0240.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif")) returned 0x20 [0241.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0241.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.706] GetLastError () returned 0x5 [0241.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0241.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a190) returned 1 Thread: id = 9668 os_tid = 0x2630 [0240.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif")) returned 0x20 [0241.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0241.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.735] GetLastError () returned 0x5 [0241.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0241.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a218) returned 1 Thread: id = 9669 os_tid = 0xa24 [0240.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif")) returned 0x20 [0241.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0241.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.705] GetLastError () returned 0x5 [0241.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0241.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a2a0) returned 1 Thread: id = 9670 os_tid = 0x21a8 [0240.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif")) returned 0x20 [0241.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0241.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.733] GetLastError () returned 0x5 [0241.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0241.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a328) returned 1 Thread: id = 9671 os_tid = 0x21ec [0240.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif")) returned 0x20 [0241.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0241.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.731] GetLastError () returned 0x5 [0241.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0241.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a3b0) returned 1 Thread: id = 9672 os_tid = 0x704 [0240.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif")) returned 0x20 [0241.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0241.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.729] GetLastError () returned 0x5 [0241.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0241.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a438) returned 1 Thread: id = 9673 os_tid = 0x2184 [0240.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif")) returned 0x20 [0241.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0241.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.703] GetLastError () returned 0x5 [0241.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0241.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a4c0) returned 1 Thread: id = 9674 os_tid = 0x21e4 [0240.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif")) returned 0x20 [0241.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0241.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.728] GetLastError () returned 0x5 [0241.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0241.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a548) returned 1 Thread: id = 9675 os_tid = 0x1308 [0240.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif")) returned 0x20 [0241.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0241.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.762] GetLastError () returned 0x5 [0241.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0241.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a5d0) returned 1 Thread: id = 9676 os_tid = 0x9a4 [0240.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif")) returned 0x20 [0241.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0241.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.760] GetLastError () returned 0x5 [0241.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0241.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a658) returned 1 Thread: id = 9677 os_tid = 0x2340 [0240.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif")) returned 0x20 [0241.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0241.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.759] GetLastError () returned 0x5 [0241.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0241.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a6e0) returned 1 Thread: id = 9678 os_tid = 0x2348 [0240.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif")) returned 0x20 [0241.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0241.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.050] GetLastError () returned 0x5 [0241.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0241.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a768) returned 1 Thread: id = 9679 os_tid = 0x2350 [0240.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif")) returned 0x20 [0241.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0241.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.044] GetLastError () returned 0x5 [0241.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0241.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a7f0) returned 1 Thread: id = 9680 os_tid = 0x1208 [0240.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif")) returned 0x20 [0241.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0241.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.813] GetLastError () returned 0x5 [0241.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0241.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a878) returned 1 Thread: id = 9681 os_tid = 0x8ec [0240.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif")) returned 0x20 [0241.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0241.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.772] GetLastError () returned 0x5 [0241.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0241.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a900) returned 1 Thread: id = 9682 os_tid = 0xb68 [0240.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif")) returned 0x20 [0241.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0241.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.770] GetLastError () returned 0x5 [0241.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0241.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677a988) returned 1 Thread: id = 9683 os_tid = 0x2170 [0240.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif")) returned 0x20 [0241.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0241.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.809] GetLastError () returned 0x5 [0241.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0241.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x677aa10) returned 1 Thread: id = 9684 os_tid = 0x2384 [0240.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif")) returned 0x20 [0241.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0241.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.768] GetLastError () returned 0x5 [0241.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0241.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758ab8) returned 1 Thread: id = 9685 os_tid = 0x2430 [0240.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif")) returned 0x20 [0241.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0241.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.807] GetLastError () returned 0x5 [0241.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0241.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758b40) returned 1 Thread: id = 9686 os_tid = 0x2470 [0240.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif")) returned 0x20 [0241.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0241.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.806] GetLastError () returned 0x5 [0241.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0241.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758bc8) returned 1 Thread: id = 9687 os_tid = 0x1868 [0240.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif")) returned 0x20 [0241.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0241.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.804] GetLastError () returned 0x5 [0241.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0241.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758c50) returned 1 Thread: id = 9688 os_tid = 0x11e8 [0240.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif")) returned 0x20 [0241.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0241.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.802] GetLastError () returned 0x5 [0241.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0241.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758cd8) returned 1 Thread: id = 9689 os_tid = 0x2344 [0240.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif")) returned 0x20 [0241.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0241.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.800] GetLastError () returned 0x5 [0241.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0241.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758d60) returned 1 Thread: id = 9690 os_tid = 0xbe8 [0240.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif")) returned 0x20 [0241.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0241.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.799] GetLastError () returned 0x5 [0241.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0241.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758de8) returned 1 Thread: id = 9691 os_tid = 0x1d40 [0240.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif")) returned 0x20 [0241.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0241.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.754] GetLastError () returned 0x5 [0241.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0241.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758e70) returned 1 Thread: id = 9692 os_tid = 0x24a8 [0240.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif")) returned 0x20 [0241.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0241.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.795] GetLastError () returned 0x5 [0241.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0241.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758ef8) returned 1 Thread: id = 9693 os_tid = 0x19d4 [0240.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif")) returned 0x20 [0241.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0241.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.752] GetLastError () returned 0x5 [0241.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0241.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6758f80) returned 1 Thread: id = 9694 os_tid = 0x19d8 [0240.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif")) returned 0x20 [0241.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0241.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.793] GetLastError () returned 0x5 [0241.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0241.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759008) returned 1 Thread: id = 9695 os_tid = 0x1b3c [0240.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif")) returned 0x20 [0241.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0241.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.750] GetLastError () returned 0x5 [0241.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0241.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759090) returned 1 Thread: id = 9696 os_tid = 0xa60 [0240.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf")) returned 0x20 [0241.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0241.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.748] GetLastError () returned 0x5 [0241.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0241.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759118) returned 1 Thread: id = 9697 os_tid = 0x1b44 [0240.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf")) returned 0x20 [0241.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0241.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.746] GetLastError () returned 0x5 [0241.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0241.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67591a0) returned 1 Thread: id = 9698 os_tid = 0x1bcc [0240.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf")) returned 0x20 [0241.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0241.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.744] GetLastError () returned 0x5 [0241.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0241.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759228) returned 1 Thread: id = 9699 os_tid = 0x1bec [0240.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf")) returned 0x20 [0241.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0241.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.757] GetLastError () returned 0x5 [0241.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0241.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x67592b0) returned 1 Thread: id = 9700 os_tid = 0x1bf8 [0240.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid")) returned 0x20 [0241.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0241.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0241.755] GetLastError () returned 0x5 [0241.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0241.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x6759338) returned 1 Thread: id = 9701 os_tid = 0x19c8 [0244.705] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0244.705] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0244.706] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20c4 [0244.706] GetFileSizeEx (in: hFile=0x20c4, lpFileSize=0x459fc64 | out: lpFileSize=0x459fc64*=217088) returned 1 [0244.706] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x34ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.706] ReadFile (in: hFile=0x20c4, lpBuffer=0x459fc40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x459fc50, lpOverlapped=0x0 | out: lpBuffer=0x459fc40*, lpNumberOfBytesRead=0x459fc50*=0x4, lpOverlapped=0x0) returned 1 [0244.706] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0244.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4b9c8 [0244.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0244.707] NtQuerySystemTime (in: CurrentTime=0x459fbd8 | out: CurrentTime=0x459fbd8*=132482711510280000) returned 0x0 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x297a01c5 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x1b2c3ea1 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x50340110 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x7d99c65a [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0xf172a09 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x280b76d5 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x51b0c3da [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x8d9aa88 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x4c1f5657 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x6f65a95d [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x442ae9d0 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x25cbed9b [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x2a2276e4 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x993a3b6 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x8a9b9ef [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x7501da5c [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0xe5439db [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x614acc38 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x37218acb [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x28d0ef61 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0xd70e4fa [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x47db8384 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x1fa43d76 [0244.707] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x59077937 [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x5e698f9c [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x2a678a3a [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x6b3a8ad0 [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x237dba2e [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x1c78c541 [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x22993d4c [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x2ed2b93f [0244.708] RtlRandomEx (in: Seed=0x459fbd0 | out: Seed=0x459fbd0) returned 0x6b3e7eac [0244.719] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.719] ReadFile (in: hFile=0x20c4, lpBuffer=0x13040060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.720] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad18 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0244.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13043c68 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0244.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0244.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0244.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 [0244.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0244.720] WriteFile (in: hFile=0x20c4, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0244.761] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.761] ReadFile (in: hFile=0x20c4, lpBuffer=0x13040060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.761] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0244.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad18 [0244.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0244.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0244.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13043c68 [0244.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0244.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0244.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0244.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 [0244.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0244.762] WriteFile (in: hFile=0x20c4, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0244.806] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x31400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.806] ReadFile (in: hFile=0x20c4, lpBuffer=0x13040060, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13040060*, lpNumberOfBytesRead=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.806] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x31400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5eb68 [0244.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f1ad18 [0244.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0244.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4a7f8) returned 1 [0244.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x13043c68 [0244.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4a7f8 [0244.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4cf58 [0244.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4cf58) returned 1 [0244.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 [0244.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0244.807] WriteFile (in: hFile=0x20c4, lpBuffer=0x13043c68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x459fbd8, lpOverlapped=0x0 | out: lpBuffer=0x13043c68*, lpNumberOfBytesWritten=0x459fbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0244.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x13043c68) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d8aba0 [0244.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e80038 [0244.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d4ce40 [0244.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d49b28 [0244.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d49b28) returned 1 [0244.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f1ad18) returned 1 [0244.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5eb68) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dce3d8 [0244.854] SetFilePointerEx (in: hFile=0x20c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.854] WriteFile (in: hFile=0x20c4, lpBuffer=0x3dce3d8*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x459fc58, lpOverlapped=0x0 | out: lpBuffer=0x3dce3d8*, lpNumberOfBytesWritten=0x459fc58*=0x156, lpOverlapped=0x0) returned 1 [0244.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce3d8) returned 1 [0244.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80038) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4ce40) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80d38) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8aba0) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4b9c8) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4c0d0) returned 1 [0244.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d4bfb8) returned 1 [0244.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d370 [0244.863] wcscpy (in: _Dest=0x32d370, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0244.863] wcscat (in: _Dest=0x32d370, _Source=".ac3a86" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.ac3a86") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.ac3a86" [0244.863] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.ac3a86", NtPathName=0x459fbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.ac3a86", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0244.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e5c0e0 [0244.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5c0e0) returned 1 [0244.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0244.864] NtQueryInformationFile (in: FileHandle=0x20c4, IoStatusBlock=0x459fba8, FileInformation=0x459fbb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x459fba8, FileInformation=0x459fbb0) returned 0x0 [0244.864] NtSetInformationFile (FileHandle=0x20c4, IoStatusBlock=0x459fba8, FileInformation=0x459fbb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0244.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d370) returned 1 [0244.866] FlushFileBuffers (hFile=0x20c4) returned 1 [0244.868] CloseHandle (hObject=0x20c4) returned 1 [0244.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x66efa60 [0244.869] wcscpy (in: _Dest=0x66efa60, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0244.869] wcscat (in: _Dest=0x66efa60, _Source="AC3A86-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\AC3A86-Readme.txt") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\AC3A86-Readme.txt" [0244.869] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\ac3a86-readme.txt")) returned 0xffffffff [0244.869] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\AC3A86-Readme.txt" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\ac3a86-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c4 [0244.870] WriteFile (in: hFile=0x20c4, lpBuffer=0x3ef9168*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x459fbec, lpOverlapped=0x0 | out: lpBuffer=0x3ef9168*, lpNumberOfBytesWritten=0x459fbec*=0x8b9, lpOverlapped=0x0) returned 1 [0244.872] CloseHandle (hObject=0x20c4) returned 1 [0244.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66efa60) returned 1 [0244.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59048) returned 1 Thread: id = 9702 os_tid = 0x1540 [0244.723] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7629.tmp")) returned 0xffffffff [0244.723] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp", dwFileAttributes=0x20) returned 0 [0244.723] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7629.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0244.723] GetLastError () returned 0x2 [0244.723] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7629.tmp", dwFileAttributes=0xffffffff) returned 0 [0244.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d8aba0) returned 1 Thread: id = 9703 os_tid = 0x82c [0244.724] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x20 [0244.759] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0244.759] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0244.760] GetLastError () returned 0x20 [0244.760] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0244.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x66dc4c8) returned 1 Thread: id = 9704 os_tid = 0x1878 [0244.725] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla")) returned 0xffffffff [0244.725] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 0 [0244.725] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0244.725] GetLastError () returned 0x2 [0244.725] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0xffffffff) returned 0 [0244.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f291e0) returned 1 Thread: id = 9706 os_tid = 0xaf8 [0245.743] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43efc88 | out: lphEnum=0x43efc88*=0x3e80038) returned 0x0 [0246.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d81178 [0246.269] WNetEnumResourceW (in: hEnum=0x3e80038, lpcCount=0x43efc74, lpBuffer=0x3d81178, lpBufferSize=0x43efc7c | out: lpcCount=0x43efc74, lpBuffer=0x3d81178, lpBufferSize=0x43efc7c) returned 0x0 [0246.269] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d81178, lphEnum=0x43efc4c | out: lphEnum=0x43efc4c*=0x30ae290) returned 0x0 [0246.271] NetShareEnum (in: servername="Microsoft Terminal Services", level=0x1, bufptr=0x43efc00, prefmaxlen=0xffffffff, entriesread=0x43efbf8, totalentries=0x43efc08, resume_handle=0x43efc04 | out: bufptr=0x43efc00, entriesread=0x43efbf8, totalentries=0x43efc08, resume_handle=0x43efc04) returned 0x35 [0246.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d82280 [0246.309] WNetEnumResourceW (in: hEnum=0x30ae290, lpcCount=0x43efc38, lpBuffer=0x3d82280, lpBufferSize=0x43efc40 | out: lpcCount=0x43efc38, lpBuffer=0x3d82280, lpBufferSize=0x43efc40) returned 0x103 [0246.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d82280) returned 1 [0246.309] WNetCloseEnum (hEnum=0x30ae290) returned 0x0 [0246.310] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d81198, lphEnum=0x43efc4c | out: lphEnum=0x43efc4c*=0x0) returned 0x4b8 [0258.606] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d811b8, lphEnum=0x43efc4c | out: lphEnum=0x43efc4c*=0x0) returned 0x4c6 [0258.607] WNetEnumResourceW (in: hEnum=0x3e80038, lpcCount=0x43efc74, lpBuffer=0x3d81178, lpBufferSize=0x43efc7c | out: lpcCount=0x43efc74, lpBuffer=0x3d81178, lpBufferSize=0x43efc7c) returned 0x103 [0258.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d81178) returned 1 [0258.607] WNetCloseEnum (hEnum=0x3e80038) returned 0x0 Thread: id = 9708 os_tid = 0x1d08 Thread: id = 9709 os_tid = 0x12ac Thread: id = 9710 os_tid = 0x22b8 Thread: id = 9718 os_tid = 0x2790 Thread: id = 9719 os_tid = 0xec0 Thread: id = 9721 os_tid = 0x1fc0 Thread: id = 9722 os_tid = 0x1340 Thread: id = 9725 os_tid = 0x2108 Process: id = "10" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134840" os_pid = "0x15c4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1606 os_tid = 0x86c Thread: id = 1607 os_tid = 0xda8 Thread: id = 1608 os_tid = 0x84c Thread: id = 1609 os_tid = 0xb68 Thread: id = 1610 os_tid = 0x8ec Thread: id = 1611 os_tid = 0x15c8 Process: id = "11" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x7f1347a0" os_pid = "0x16f4" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:000620e6" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 2085 os_tid = 0x530 Thread: id = 2086 os_tid = 0x970 Thread: id = 2087 os_tid = 0x1390 Thread: id = 2088 os_tid = 0x954 [0155.738] malloc (_Size=0x80) returned 0x41e6f0 [0274.710] free (_Block=0x41e6f0) Thread: id = 2089 os_tid = 0xc8 Thread: id = 2090 os_tid = 0x164c Thread: id = 2091 os_tid = 0x16f8 Thread: id = 2485 os_tid = 0x1850 Thread: id = 8350 os_tid = 0x1cf4 Thread: id = 9772 os_tid = 0x1090 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341e0" os_pid = "0x3d4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bbac" [0xc000000f], "LOCAL" [0x7] Thread: id = 2124 os_tid = 0xfb4 Thread: id = 2125 os_tid = 0xd60 Thread: id = 2126 os_tid = 0x36c Thread: id = 2127 os_tid = 0x12c Thread: id = 2128 os_tid = 0x128 Thread: id = 2129 os_tid = 0x114 Thread: id = 2130 os_tid = 0xf0 Thread: id = 2131 os_tid = 0x3f8 Thread: id = 2132 os_tid = 0x3ec Thread: id = 2133 os_tid = 0x3e4 Thread: id = 2134 os_tid = 0x3d8 Thread: id = 2268 os_tid = 0x1128 Thread: id = 2269 os_tid = 0x112c Thread: id = 5906 os_tid = 0x16b8 Thread: id = 9720 os_tid = 0x13b4 Thread: id = 9729 os_tid = 0x1344 Thread: id = 9768 os_tid = 0x1060 Thread: id = 9777 os_tid = 0x10d4 Thread: id = 9782 os_tid = 0x13f0 Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1345e0" os_pid = "0x90" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006551e" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 4353 os_tid = 0x2034 Thread: id = 4354 os_tid = 0xe14 Thread: id = 4355 os_tid = 0x177c Thread: id = 4356 os_tid = 0x56c Thread: id = 4357 os_tid = 0x1614 Thread: id = 4358 os_tid = 0xa80 Thread: id = 7346 os_tid = 0x21ac Thread: id = 9773 os_tid = 0x1094 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134160" os_pid = "0x2c4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a4d3" [0xc000000f], "LOCAL" [0x7] Thread: id = 8233 os_tid = 0x1dcc Thread: id = 8234 os_tid = 0xfe0 Thread: id = 8235 os_tid = 0xf74 Thread: id = 8236 os_tid = 0xd70 Thread: id = 8237 os_tid = 0x490 Thread: id = 9723 os_tid = 0x1334 Thread: id = 9724 os_tid = 0x1fb0 Thread: id = 9744 os_tid = 0x1a2c Thread: id = 9766 os_tid = 0x105c Process: id = "15" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x7f134220" os_pid = "0x1bbc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x334" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 8308 os_tid = 0x1bc0 Thread: id = 8463 os_tid = 0x23fc Thread: id = 8543 os_tid = 0x24e0 Thread: id = 8645 os_tid = 0x1b30 Thread: id = 8646 os_tid = 0x1b38 Process: id = "16" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134260" os_pid = "0x21c4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8351 os_tid = 0x10b8 Thread: id = 8352 os_tid = 0x17d4 Thread: id = 8353 os_tid = 0x17d0 Thread: id = 8354 os_tid = 0x17a4 Thread: id = 8355 os_tid = 0x18d8 Thread: id = 8356 os_tid = 0x21d0 Process: id = "17" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x7f134840" os_pid = "0xf70" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x5bc" cmd_line = "C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\AC3A86-Readme.txt\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9707 os_tid = 0xae4 Process: id = "18" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134220" os_pid = "0x12a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9711 os_tid = 0x12b0 Thread: id = 9712 os_tid = 0x984 Thread: id = 9713 os_tid = 0x2474 Thread: id = 9714 os_tid = 0x2468 Thread: id = 9715 os_tid = 0x12d4 Thread: id = 9716 os_tid = 0x12d0 Thread: id = 9717 os_tid = 0x12c8 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134200" os_pid = "0x424" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c0d7" [0xc000000f], "LOCAL" [0x7] Thread: id = 9730 os_tid = 0xdf0 Thread: id = 9731 os_tid = 0x6e8 Thread: id = 9732 os_tid = 0x1cc Thread: id = 9733 os_tid = 0x728 Thread: id = 9734 os_tid = 0x70c Thread: id = 9735 os_tid = 0x690 Thread: id = 9736 os_tid = 0x604 Thread: id = 9737 os_tid = 0x454 Thread: id = 9738 os_tid = 0x450 Thread: id = 9739 os_tid = 0x44c Thread: id = 9740 os_tid = 0x440 Thread: id = 9741 os_tid = 0x438 Thread: id = 9742 os_tid = 0x42c Thread: id = 9743 os_tid = 0x428 Thread: id = 9769 os_tid = 0x1064 Thread: id = 9774 os_tid = 0x1088 Thread: id = 9775 os_tid = 0x108c Thread: id = 9776 os_tid = 0x25c Thread: id = 9779 os_tid = 0x1534 Thread: id = 9780 os_tid = 0x14e4 Thread: id = 9783 os_tid = 0x143c Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134180" os_pid = "0x30c" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a905" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 9745 os_tid = 0x51c Thread: id = 9746 os_tid = 0x538 Thread: id = 9747 os_tid = 0x47c Thread: id = 9748 os_tid = 0x118 Thread: id = 9749 os_tid = 0x680 Thread: id = 9750 os_tid = 0x404 Thread: id = 9751 os_tid = 0x3e0 Thread: id = 9752 os_tid = 0x3bc Thread: id = 9753 os_tid = 0x3b8 Thread: id = 9754 os_tid = 0x3b0 Thread: id = 9755 os_tid = 0x3ac Thread: id = 9756 os_tid = 0x39c Thread: id = 9757 os_tid = 0x398 Thread: id = 9758 os_tid = 0x360 Thread: id = 9759 os_tid = 0x348 Thread: id = 9760 os_tid = 0x344 Thread: id = 9761 os_tid = 0x32c Thread: id = 9762 os_tid = 0x314 Thread: id = 9763 os_tid = 0x310 Thread: id = 9767 os_tid = 0x11dc Thread: id = 9778 os_tid = 0x13ec Process: id = "21" image_name = "System" filename = "" page_root = "0x185000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 9786 os_tid = 0x8 Thread: id = 9787 os_tid = 0xc0 Thread: id = 9788 os_tid = 0x78 Thread: id = 9789 os_tid = 0x28 Thread: id = 9790 os_tid = 0x4c Thread: id = 9791 os_tid = 0xcc Thread: id = 9792 os_tid = 0xc4 Thread: id = 9793 os_tid = 0x40 Thread: id = 9794 os_tid = 0x44 Thread: id = 9795 os_tid = 0x5c Thread: id = 9796 os_tid = 0xb4 Thread: id = 9797 os_tid = 0x9c Thread: id = 9798 os_tid = 0x84 Thread: id = 9799 os_tid = 0x80 Thread: id = 9800 os_tid = 0x88 Thread: id = 9801 os_tid = 0x8c Thread: id = 9802 os_tid = 0x98 Thread: id = 9803 os_tid = 0x30 Thread: id = 9804 os_tid = 0xd0 Thread: id = 9805 os_tid = 0xd4 Thread: id = 9806 os_tid = 0xb8 Thread: id = 9807 os_tid = 0xd8 Thread: id = 9808 os_tid = 0xdc Thread: id = 9809 os_tid = 0xe0 Thread: id = 9811 os_tid = 0xec Thread: id = 9812 os_tid = 0x48 Thread: id = 9814 os_tid = 0x34 Thread: id = 9815 os_tid = 0x38 Thread: id = 9816 os_tid = 0xf4 Thread: id = 9817 os_tid = 0xf8 Thread: id = 9818 os_tid = 0x68 Thread: id = 9820 os_tid = 0x2c Thread: id = 9821 os_tid = 0xb0 Process: id = "22" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x7f1ec020" os_pid = "0xe4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "21" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 9810 os_tid = 0xe8 Thread: id = 9813 os_tid = 0xf0 Process: id = "23" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x7f1ec040" os_pid = "0xfc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0xe4" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 9819 os_tid = 0x100